fix(ai, ai-harness): a guard tier for tool calls, complete plugin removal, media and body limits, signing keys, and turn and config fixes by AlemTuzlak · Pull Request #1824 · TanStack/ai

fix(ai-harness): a settled operation keeps its status, a media signer with key rotation, and agents() rule docs that match the code

AlemTuzlak

committed

7d946f1

fix(ai-harness): every plugin contribution has an owner, ctx.on cleans up, inline media goes to the media store, and capabilities report the socket only when mounted

AlemTuzlak

committed

3868e4f

docs(ai-harness): say when capabilities report the WebSocket

AlemTuzlak

committed

5ce3e64

feat(ai): onGuardToolCall middleware hook that runs on the final arguments of every tool call

AlemTuzlak

committed

08faf9a

test(e2e): onGuardToolCall denies on the final args after a transformArgs

AlemTuzlak

committed

d6026ce

Merge branch 'feat/harness-log-session' into feat/harness-point-bugs

AlemTuzlak

committed

d02278c

fix(ai-harness): tool turns take no steers, a turn keeps its config, removing a plugin removes all of it, body and frame limits, signing keys, and a warning on tool name clashes

AlemTuzlak

committed

42c8014

Merge branch 'feat/harness-log-session' into feat/harness-point-bugs

AlemTuzlak

committed

4a43804

Merge branch 'feat/harness-log-session' into feat/harness-point-bugs

AlemTuzlak

committed

8afc555

fix(ai-harness): the media signer's key check covers an empty secret

AlemTuzlak

committed

07f9377

Navigation Menu

Repository navigation

fix(ai, ai-harness): a guard tier for tool calls, complete plugin removal, media and body limits, signing keys, and turn and config fixes - #1824

fix(ai, ai-harness): a guard tier for tool calls, complete plugin removal, media and body limits, signing keys, and turn and config fixes#1824
AlemTuzlak merged 23 commits into
feat/harness-perffrom
feat/harness-point-bugs

Commits on Oct 17, 2026

fix(ai-harness): a settled operation keeps its status, a media signer with key rotation, and agents() rule docs that match the code

fix(ai-harness): every plugin contribution has an owner, ctx.on cleans up, inline media goes to the media store, and capabilities report the socket only when mounted

docs(ai-harness): say when capabilities report the WebSocket

feat(ai): onGuardToolCall middleware hook that runs on the final arguments of every tool call

test(e2e): onGuardToolCall denies on the final args after a transformArgs

Merge branch 'feat/harness-log-session' into feat/harness-point-bugs

fix(ai-harness): tool turns take no steers, a turn keeps its config, removing a plugin removes all of it, body and frame limits, signing keys, and a warning on tool name clashes

Merge branch 'feat/harness-log-session' into feat/harness-point-bugs

Merge branch 'feat/harness-log-session' into feat/harness-point-bugs

fix(ai-harness): the media signer's key check covers an empty secret

Commits on Oct 18, 2026

Merge branch 'feat/harness-reporting' into feat/harness-point-bugs

Merge branch 'feat/harness-perf' into feat/harness-point-bugs

Merge branch 'feat/harness-perf' into feat/harness-point-bugs

Merge branch 'feat/harness-perf' into feat/harness-point-bugs

fix(ai-harness-cli): serve signs media URLs with a key derived from the token, so a short token meets the 32-byte key rule

Merge branch 'feat/harness-perf' into feat/harness-point-bugs

Commits on Oct 19, 2026

feat(ai-harness, ai-mcp, ai-acp, ai-code-mode, ai-harness-cli): the final review of the harness, with its fixes, one object per call, and the known limits (#1825)

refactor(ai-harness): mounted plugins keep each contribution list with its owner, not in parallel owner arrays

fix(ai-harness): a plugins remove setting is rejected when a kept turn plugin or a harness middleware needs the removed capability

fix(ai-harness): client media checks every part before it stores any, refuses provider file handles unless media.allowProviderFiles, and the frame limit docs name the server maxPayload

fix(ai-harness): a retried client input with inline media reuses the stored media, so it stores nothing again and is a duplicate, not a conflict

docs(ai-harness): routed root-agent turns take steers and late joins, only session.tool() turns do not

fix(ai-harness-cli): --serve signs media URLs with --media-key or HARNESS_MEDIA_KEY, or a random key, never with the bearer token