3 Commits

This Branch

This Branch

All Branches

Author	SHA1	Message	Date
zmf	8ed9da7165	feat(providers): add glm-5.3 to GLM Coding and GLM (China) registries ... Zhipu released GLM-5.3 on both api.z.ai and open.bigmodel.cn coding endpoints. Verified live against both, returning model:"glm-5.3" with native reasoning_content. No other changes needed: the '*glm-5*' family pattern in capabilities.js and 'glm-5*' in pricing.js already cover it.	2026-08-14 16:16:46 +07:00
zmf	8a527fec91	fix(security): SSRF guard on search baseUrl, default-password remote login, and request-details redaction ... - resolveBaseUrl() rejects client-supplied non-public baseUrls via assertPublicUrl (SSRF guard on /v1/search) - fresh-install remote login with default password returns 403 without issuing a JWT - /api/usage/request-details redacts request/providerRequest/providerResponse/response payloads - declare chalk and prop-types in package.json (used but previously undeclared)	2026-08-13 11:50:25 +07:00
zmfandCursor	602ee4054b	fix(codebuddy-cn): strip empty tool_calls arrays to preserve reasoning ... CodeBuddy CN includes "tool_calls": [] in every SSE streaming delta. @ai-sdk/openai-compatible checks delta.tool_calls != null — an empty array passes ([] != null is true in JS), triggering premature reasoning-end on every reasoning chunk (0/1ms durations in OpenCode). Strip empty tool_calls arrays in passthrough before hasValuableContent. Zero side-effect: real tool_calls always have at least one element. Closes #2176 Co-authored-by: Cursor <cursoragent@cursor.com>	2026-07-01 09:39:31 +07:00