Repository navigation

FIX: Refuse saved converters and scorers that would use this server's credentials (part 11) - #4050

Open

varunj-msft wants to merge 309 commits into

microsoft:mainfrom

varunj-msft:varunj-msft/13178-Refuse-Saved-Converter-Scorer-Credentials

Open

FIX: Refuse saved converters and scorers that would use this server's credentials (part 11)#4050
varunj-msft wants to merge 309 commits into
microsoft:mainfrom
varunj-msft:varunj-msft/13178-Refuse-Saved-Converter-Scorer-Credentials

This pull request is big! We're only showing the most recent 250 commits

Commits on Nov 4, 2026
- Merge the opened-file tests
  varunj-msft
  committed
  07a617f
- Merge the opened-file tests
  varunj-msft
  committed
  2b4f1cc
- Read saved recipes separately from building them
  varunj-msft
  committed
  80754a2
- Merge the separate recipe read
  varunj-msft
  committed
  7965020
- Build restored entries on the runtime loop and read them in a worker thread
  varunj-msft
  committed
  bd84ef0
- Show every signed-in user why saved registry entries couldn't be restored
  varunj-msft
  committed
  1a192f7
- Retry restoring saved registry entries without a restart
  varunj-msft
  committed
  4fb7f35
- Drop a late retry answer when the runtime failed again between polls
  varunj-msft
  committed
  27ef572
Commits on Nov 5, 2026
- Keep Retry in reach and say when the failure list couldn't be loaded
  varunj-msft
  committed
  fa1ae56
- Stop a scan whose launch scripts would replace a saved entry
  varunj-msft
  committed
  1af1d00
- Report a saved-entry clash when a launch script wraps the refusal
  varunj-msft
  committed
  17d6fe0
- Merge origin/main
  varunj-msft
  committed
  b829bb8
- Refuse saved targets that would authenticate with a key
  varunj-msft
  committed
  a230568
- Check where saved targets send requests
  varunj-msft
  committed
  232857e
- Accept only plain addresses and paths as saved target destinations
  varunj-msft
  committed
  034522d
- Save targets created through the API
  varunj-msft
  committed
  d10f3cf
- Count targets that a restart doesn't bring back as Temporary
  varunj-msft
  committed
  0cbed4c
- List presets, suites, and initializers through the checked listing
  varunj-msft
  committed
  d1bdd82
- Merge the shared document listing
  varunj-msft
  committed
  f5ed760
- Merge the shared document listing
  varunj-msft
  committed
  4b55b17
- Merge the shared document listing
  varunj-msft
  committed
  a1866d5
- Merge the shared document listing
  varunj-msft
  committed
  e8dc897
- Merge the shared document listing
  varunj-msft
  committed
  09a98af
- Merge the shared document listing
  varunj-msft
  committed
  5ce5bb9
- Merge the shared document listing
  varunj-msft
  committed
  84ac7c2
- Report a preset, suite, or initializer folder that can't be read as unavailable storage
  varunj-msft
  committed
  76dbf9c
- Merge the storage error mapping for unreadable folders
  varunj-msft
  committed
  f823e4b
- Merge the storage error mapping for unreadable folders
  varunj-msft
  committed
  99da684
- Merge the storage error mapping for unreadable folders
  varunj-msft
  committed
  2c58145
- Merge the storage error mapping for unreadable folders
  varunj-msft
  committed
  5a0afa6
- Merge the storage error mapping for unreadable folders
  varunj-msft
  committed
  6bb9aec
- Merge the storage error mapping for unreadable folders
  varunj-msft
  committed
  a4790e9
- Merge the storage error mapping for unreadable folders
  varunj-msft
  committed
  35ed34c
- Test each saved target URL rule on its own
  varunj-msft
  committed
  d70837c
- Describe what a saved target can use more precisely
  varunj-msft
  committed
  4ce3214
- Merge the saved target rule tests and doc
  varunj-msft
  committed
  5669748
- Describe saving targets more precisely
  varunj-msft
  committed
  1ef0838
Commits on Nov 6, 2026
- Test the remaining saved target URL rules on their own
  varunj-msft
  committed
  b3b8ac5
- Say which saved target addresses are checked
  varunj-msft
  committed
  8a44952
- Merge the remaining saved target rule tests and doc
  varunj-msft
  committed
  14125fc
- Describe what saving a target refuses more precisely
  varunj-msft
  committed
  078dc72
- Merge origin/main
  varunj-msft
  committed
  6800d15
- Merge origin/main
  varunj-msft
  committed
  74839cd
- Merge origin/main
  varunj-msft
  committed
  ee3e64f
- Take out the restore retry changes merged here by mistake
  varunj-msft
  committed
  15e7a9e
- Merge origin/main
  varunj-msft
  committed
  368b914
- Merge origin/main
  varunj-msft
  committed
  fd7bd4a
- Say a Temporary target is also gone after a reinitialization
  varunj-msft
  committed
  844a424
- Say which target types can be saved, and mark a refused save
  varunj-msft
  committed
  ebd1042
- Save targets from the New Target dialog and label where each comes from
  varunj-msft
  committed
  d3a8d2e
- Say who saved each target, and whether it was the caller
  varunj-msft
  committed
  7a8ca6c
- Show who saved each target and list only your own
  varunj-msft
  committed
  fdc0bc9
Commits on Nov 7, 2026
- Log why storage is unavailable, without its path or URL
  varunj-msft
  committed
  7d9ac2f
- Merge the storage error logging
  varunj-msft
  committed
  7b5bfeb
- Merge the storage error logging
  varunj-msft
  committed
  22806d8
- Hide a restore message with a percent escape, which can hide a credential
  varunj-msft
  committed
  34011c9
- Merge the storage error logging and the percent-escape fix
  varunj-msft
  committed
  8a0113f
- Merge the storage error logging and the percent-escape fix
  varunj-msft
  committed
  8d51b6c
- Merge the storage error logging and the percent-escape fix
  varunj-msft
  committed
  6ddd960
- Merge the storage error logging and the percent-escape fix
  varunj-msft
  committed
  91bb36b
- Merge the storage error logging and the percent-escape fix
  varunj-msft
  committed
  ad7cb29
- Merge the storage error logging and the percent-escape fix
  varunj-msft
  committed
  8dab926
- Stop a launch whose script catches the duplicate-name error for a saved entry
  varunj-msft
  committed
  dc4125c
- Merge the duplicate-name refusal for saved entries
  varunj-msft
  committed
  febc8c3
- Merge the duplicate-name refusal for saved entries
  varunj-msft
  committed
  303dfa8
- Merge the duplicate-name refusal for saved entries
  varunj-msft
  committed
  6abde9f
- Merge the duplicate-name refusal for saved entries
  varunj-msft
  committed
  f31ad63
- Merge origin/main
  varunj-msft
  committed
  e03fd18
- Merge origin/main
  varunj-msft
  committed
  36462db
- Merge origin/main
  varunj-msft
  committed
  37f9522
- Merge origin/main
  varunj-msft
  committed
  dbd105c
- Refuse saved converters and scorers that would use this server's credentials
  varunj-msft
  committed
  07ae503
Commits on Nov 8, 2026
- Merge origin/main
  varunj-msft
  committed
  031dc61
- Merge origin/main
  varunj-msft
  committed
  7f8ab0d
- Import the saved recipe models from their package, as main now requires
  varunj-msft
  committed
  19205b1
- Merge origin/main
  varunj-msft
  committed
  0348a0b
- Import from public packages, as main now requires
  varunj-msft
  committed
  bba3afd
- Merge origin/main
  varunj-msft
  committed
  d4ccd50
- Merge origin/main
  varunj-msft
  committed
  ed01798
- Record a saved entry's name clash wherever a launch script can catch it
  varunj-msft
  committed
  98766ec
- Merge origin/main
  varunj-msft
  committed
  6fb1e00
- Import from public packages, as main now requires
  varunj-msft
  committed
  405c2bd
- Merge origin/main
  varunj-msft
  committed
  d35eea9
- Merge origin/main
  varunj-msft
  committed
  9afbd2c
- Merge origin/main
  varunj-msft
  committed
  23d7976
- Import from public packages, as main now requires
  varunj-msft
  committed
  91c76d0
- Merge origin/main
  varunj-msft
  committed
  4ded6e6
- Check a target that takes no credentials as the default auth mode
  varunj-msft
  committed
  13bd3ab
- Merge origin/main
  varunj-msft
  committed
  2b97d83
- Merge origin/main
  varunj-msft
  committed
  aaf2c15
- Merge origin/main
  varunj-msft
  committed
  cbb71f9
- Filter the table test by the fixture's target type, which main changed to OpenAIChatTarget
  varunj-msft
  committed
  d0499fa
- Merge origin/main
  varunj-msft
  committed
  da9ce20
Commits on Nov 9, 2026
- Report storage failures with one error and answer them with 503
  varunj-msft
  committed
  622bbb8
- Merge the single storage error
  varunj-msft
  committed
  1cae0b9
- Escape file names once and simplify the saved recipe models
  varunj-msft
  committed
  eba7bf2
- Merge the recipe model simplification
  varunj-msft
  committed
  9f24124
- Report restore bugs as build errors and log each failure once
  varunj-msft
  committed
  2bbfc8f
- Merge the restore logging and build error fixes
  varunj-msft
  committed
  3735dbc
- Stay ready when a saved entry can't be restored, and hold its name
  varunj-msft
  committed
  ca7563d
Commits on Nov 10, 2026
- Merge the stay-ready restore
  varunj-msft
  committed
  a9dfc86
- Reset the registries between runtime tests, as a real startup does
  varunj-msft
  committed
  67416f1
- Merge the runtime test isolation
  varunj-msft
  committed
  e6e419e
- Stop a launch whose script takes the name of a saved entry that failed
  varunj-msft
  committed
  81c0317
- Merge origin/main
  varunj-msft
  committed
  6ee84f0
- Merge origin/main
  varunj-msft
  committed
  d43a7e8
- Merge origin/main
  varunj-msft
  committed
  0664063
- Merge origin/main
  varunj-msft
  committed
  3b3ac59
- Merge origin/main
  varunj-msft
  committed
  04fe60f
- Merge origin/main
  varunj-msft
  committed
  6911327
- Refuse OpenAI targets while the server sets OPENAI_CUSTOM_HEADERS
  varunj-msft
  committed
  ee45962
- Merge origin/main
  varunj-msft
  committed
  6a98d17
- Use final origin names, record startup entries at registration, and tighten saving
  varunj-msft
  committed
  4a3f2e5
- Merge the saved target origin and naming changes
  varunj-msft
  committed
  9f5d390
- Merge the saved target origin and naming changes
  varunj-msft
  committed
  bf480f5
- Merge the saved target origin and naming changes
  varunj-msft
  committed
  05f9bd1
- Explain that a credential refusal also covers using this server's credentials
  varunj-msft
  committed
  51d4fff
- Merge the credential explanation
  varunj-msft
  committed
  a3d4f92
- Merge the credential explanation
  varunj-msft
  committed
  3c7a918
- Merge the credential explanation
  varunj-msft
  committed
  452ba54
- Merge the credential explanation
  varunj-msft
  committed
  8ff7bda
- Use one recipe format version, keep the auth mode, and escape failure text
  varunj-msft
  committed
  8614025
- Merge the recipe format changes
  varunj-msft
  committed
  5a3f18b
- Build restored entries with a builder the caller supplies
  varunj-msft
  committed
  b3c7847
- Merge the restore builder changes
  varunj-msft
  committed
  af4075f
- Warn that writing saved entries is administrator authority, and test restore end to end
  varunj-msft
  committed
  061807a
- Merge the restore builder changes
  varunj-msft
  committed
  1740964
- Merge the restore builder changes
  varunj-msft
  committed
  01d99d7
- Merge the restore builder changes
  varunj-msft
  committed
  600717f
- Merge the restore builder changes
  varunj-msft
  committed
  095e76b
- Merge the restore builder changes
  varunj-msft
  committed
  0bf773d
- Say restore can't tell who wrote a saved file
  varunj-msft
  committed
  7a547aa
- Merge the saved file wording
  varunj-msft
  committed
  f71259b
- Merge the saved file wording
  varunj-msft
  committed
  8902768
- Merge the restore builder changes
  varunj-msft
  committed
  339fd15
- Merge the saved file wording
  varunj-msft
  committed
  f1dcab1
- Test the parser's depth limit without depending on the stack size
  varunj-msft
  committed
  986cc90
- Merge the parser depth test fix
  varunj-msft
  committed
  1096925
- Merge the parser depth test fix
  varunj-msft
  committed
  f25b520
- Merge the parser depth test fix
  varunj-msft
  committed
  1845b64
- Merge the parser depth test fix
  varunj-msft
  committed
  bd2224b
- Merge the parser depth test fix
  varunj-msft
  committed
  b454e75
- Merge the parser depth test fix
  varunj-msft
  committed
  83a0bca
- Merge the parser depth test fix
  varunj-msft
  committed
  bd03690
- Merge the parser depth test fix
  varunj-msft
  committed
  2e9cbb0
- Read saved entries in a worker thread when restore isn't given what was read
  varunj-msft
  committed
  fb90af8
- Merge the worker-thread read
  varunj-msft
  committed
  c44d2ce
- Stay not ready when a saved entry can't be restored, and let apply retry
  varunj-msft
  committed
  abd116a
- Drop the refusal of held names from launches
  varunj-msft
  committed
  0bfa6cc
- Merge the not-ready restore
  varunj-msft
  committed
  c62118f
- Merge the not-ready restore
  varunj-msft
  committed
  c0aa46d
- Read saved recipes off the event loop by default, and harden URL redaction
  
  Richard Lundeen (richlundeen)
  and
  Claude (claude)
  committed
  f59306e
- Merge the not-ready restore
  varunj-msft
  committed
  7d90d68
- Treat a class a launch script puts in place of another as temporary
  varunj-msft
  committed
  0f0c53d
- Merge the not-ready restore
  varunj-msft
  committed
  26e1d0e
- Merge the not-ready restore
  varunj-msft
  committed
  2ea542b
- Merge the not-ready restore
  varunj-msft
  committed
  9fca651
- Keep an "@" in a URL's path when redacting URLs in text
  
  Richard Lundeen (richlundeen)
  and
  Claude (claude)
  committed
  f1ff143
- Merge the restore read and redaction fixes
  varunj-msft
  committed
  009e761
- Merge the restore read and redaction fixes
  varunj-msft
  committed
  21f22a4
- Merge the restore read and redaction fixes
  varunj-msft
  committed
  e9103ff
- Merge the restore read and redaction fixes
  varunj-msft
  committed
  57b069a
- Merge the restore read and redaction fixes
  varunj-msft
  committed
  7c88228
- Merge the restore read and redaction fixes
  varunj-msft
  committed
  616a7df
- Merge the restore read and redaction fixes
  varunj-msft
  committed
  fede632
- Merge main
  varunj-msft
  committed
  cc4ae4d
- Merge main
  varunj-msft
  committed
  9f4c71e
- Merge main
  varunj-msft
  committed
  5121026
Commits on Nov 11, 2026
- Merge main
  varunj-msft
  committed
  d15f7fd
- Merge main
  varunj-msft
  committed
  84ad3fe
- Merge main
  varunj-msft
  committed
  ddfe03c
- Merge main
  varunj-msft
  committed
  7104a25
- Use the dialog's save button in the new tests from main
  varunj-msft
  committed
  be0b885
- Press the hidden-targets button in the saved-by test
  varunj-msft
  committed
  7b08ca0
- Merge the dialog test fixes
  varunj-msft
  committed
  6c8d33a
- Merge the dialog test fixes
  varunj-msft
  committed
  cabb56f
- Answer suite readiness storage failures through the shared storage handler
  varunj-msft
  committed
  187191c
- Give the HTTPTarget save test the connection field a create now needs
  varunj-msft
  committed
  ee8162c
- Merge the readiness and save test fixes
  varunj-msft
  committed
  bb2a620
- Merge the readiness and save test fixes
  varunj-msft
  committed
  db7451a
- Merge the readiness and save test fixes
  varunj-msft
  committed
  b200c92
- Merge the readiness and save test fixes
  varunj-msft
  committed
  4c42a6b
- Merge the readiness and save test fixes
  varunj-msft
  committed
  43096e8
- Merge the readiness and save test fixes
  varunj-msft
  committed
  22b057c
- Merge main
  varunj-msft
  committed
  374c620
- Answer suite readiness storage failures through the shared storage handler
  varunj-msft
  committed
  7ac059c
- Merge main
  varunj-msft
  committed
  e08b67a
- Expect storage errors from main's version-checked delete tests the way the other storage tests do
  varunj-msft
  committed
  7fa4ca4
- Merge main
  varunj-msft
  committed
  9bf5886
- Merge main
  varunj-msft
  committed
  626d2d4
- Merge main
  varunj-msft
  committed
  4a86017
- Merge main
  varunj-msft
  committed
  9568edb
- Merge main
  varunj-msft
  committed
  54e4374
- Merge main
  varunj-msft
  committed
  0d97131
- Merge main
  varunj-msft
  committed
  2849ae8
- Fit the explicit-target E2E from main to the dialog's save button and its Entra ID default
  varunj-msft
  committed
  e34258c
- Merge the explicit-target E2E fix
  varunj-msft
  committed
  bf91430
- Merge the explicit-target E2E fix
  varunj-msft
  committed
  a9dccb3
- Merge main
  varunj-msft
  committed
  c506195
- Merge main
  varunj-msft
  committed
  1ba526f
- Merge main
  varunj-msft
  committed
  9cdf7e7
- Merge main
  varunj-msft
  committed
  40d36ed
- Merge main
  varunj-msft
  committed
  6a52054
- Merge main
  varunj-msft
  committed
  23a7ec1
- Merge main
  varunj-msft
  committed
  70fbc3d
- Merge main
  varunj-msft
  committed
  a1e79d1
- Merge main
  varunj-msft
  committed
  a5d42d1
- Merge main
  varunj-msft
  committed
  2402df2
- Use the dialog's save button in main's endpoint tests
  varunj-msft
  committed
  8c517d0
- Merge the endpoint test fix
  varunj-msft
  committed
  1137977
- Merge the endpoint test fix
  varunj-msft
  committed
  aaefa8f
- Exempt the storage error handler from the keyword-only check
  varunj-msft
  committed
  0e7a21f
- Make get_target's parameters keyword-only
  varunj-msft
  committed
  891e8d6
- Merge keyword-only fixes
  varunj-msft
  committed
  c35fa01
- Merge keyword-only fixes
  varunj-msft
  committed
  953dcce
- Merge keyword-only fixes
  varunj-msft
  committed
  d6079a1
- Merge keyword-only fixes
  varunj-msft
  committed
  21556ed
- Merge keyword-only fixes
  varunj-msft
  committed
  14004e9
- Merge keyword-only fixes
  varunj-msft
  committed
  3abc824
- Merge keyword-only fixes
  varunj-msft
  committed
  623fd40
- Merge keyword-only fixes
  varunj-msft
  committed
  2d74284
- Merge keyword-only fixes
  varunj-msft
  committed
  1fc386a
- Log every problem with a saved file that isn't valid
  varunj-msft
  committed
  bf97225
- Merge the full schema-validation log
  varunj-msft
  committed
  5e6faed
- Merge the full schema-validation log
  varunj-msft
  committed
  7625f89
- Merge the full schema-validation log
  varunj-msft
  committed
  8dbd4c2
- Merge the full schema-validation log
  varunj-msft
  committed
  5c7223a
- Merge the full schema-validation log
  varunj-msft
  committed
  8676ee5
- Merge the full schema-validation log
  varunj-msft
  committed
  74e1310
Commits on Nov 12, 2026
- Leave the error behind a storage failure out of the logs
  varunj-msft
  committed
  35199cc
- Test a blob upload that fails with a transport or authentication error
  varunj-msft
  committed
  efcdfa9
- Merge the storage log and restore report fixes
  varunj-msft
  committed
  0fdebdc
- Merge the storage log and restore report fixes
  varunj-msft
  committed
  c413994
- Merge the storage log and restore report fixes
  varunj-msft
  committed
  c057e30
- Merge the storage log and restore report fixes
  varunj-msft
  committed
  dc97ec7
- Merge the storage log and restore report fixes
  varunj-msft
  committed
  a9478df
- Merge the storage log and restore report fixes
  varunj-msft
  committed
  dc0c058
- Merge the storage log and restore report fixes
  varunj-msft
  committed
  8f27c91
- Merge the storage log and restore report fixes
  varunj-msft
  committed
  4f2208d
- Merge the storage log and restore report fixes
  varunj-msft
  committed
  d22d466
- Merge main
  varunj-msft
  committed
  c9b795a
- Merge main
  varunj-msft
  committed
  38c981c
- Merge main
  varunj-msft
  committed
  eb71448
- Merge main
  varunj-msft
  committed
  1be067e
- Merge main
  varunj-msft
  committed
  162fc2a
- Merge main
  varunj-msft
  committed
  6c0c3dd
- Merge main
  varunj-msft
  committed
  3d0950d
- Merge main
  varunj-msft
  committed
  8b59c5d
- Merge main
  varunj-msft
  committed
  d1504ec
- Merge main
  varunj-msft
  committed
  457563c

Commits

Commits on Nov 4, 2026

Commits on Nov 5, 2026

Commits on Nov 6, 2026

Commits on Nov 7, 2026

Commits on Nov 8, 2026

Commits on Nov 9, 2026

Commits on Nov 10, 2026