Robin Waslander 31112d5985 fix(security): audit web search keys for all bundled providers (#56540) ...

hasWebSearchKey() was hardcoded to only check Brave and Perplexity
credentials. Replace with provider-aware check using
resolveBundledPluginWebSearchProviders() so Gemini, Grok/XAI, Kimi,
Moonshot, and OpenRouter credentials are recognized by the audit.

Add focused regression tests for each provider.

Fixes #34509

2026-03-28 18:55:38 +01:00

..

audit-channel.allow-from.runtime.ts

perf: split telegram audit runtime seams

2026-03-22 00:53:12 +00:00

audit-channel.collect.runtime.ts

refactor: consolidate lazy runtime surfaces

2026-03-17 00:59:20 -07:00

audit-channel.discord.runtime.ts

perf: split telegram audit runtime seams

2026-03-22 00:53:12 +00:00

audit-channel.telegram.runtime.ts

refactor: continue plugin seam cleanup

2026-03-27 13:46:16 +00:00

audit-channel.ts

refactor: audit synology dangerous name matching

2026-03-22 23:32:22 -07:00

audit-channel.zalouser.runtime.ts

perf: split telegram audit runtime seams

2026-03-22 00:53:12 +00:00

audit-extra.async.ts

fix: restore skill sourceInfo provenance handling

2026-03-28 04:05:18 +00:00

audit-extra.sync.test.ts

fix(security): audit web search keys for all bundled providers (#56540)

2026-03-28 18:55:38 +01:00

audit-extra.sync.ts

fix(security): audit web search keys for all bundled providers (#56540)

2026-03-28 18:55:38 +01:00

audit-extra.ts

…

audit-fs.ts

…

audit-tool-policy.ts

…

audit.deep.runtime.ts

Security: split audit runtime surfaces

2026-03-15 23:30:34 -07:00

audit.nondeep.runtime.ts

Security: split audit runtime surfaces

2026-03-15 23:30:34 -07:00

audit.runtime.ts

refactor: consolidate lazy runtime surfaces

2026-03-17 00:59:20 -07:00

audit.test.ts

test: dedupe security audit and acl suites

2026-03-28 01:17:57 +00:00

audit.ts

refactor: finish browser compat untangle

2026-03-26 22:42:41 +00:00

channel-metadata.ts

…

config-regex.ts

…

dangerous-config-flags.ts

…

dangerous-tools.ts

…

dm-policy-shared.test.ts

test: dedupe security utility suites

2026-03-28 01:38:12 +00:00

dm-policy-shared.ts

Plugin SDK: use public utility subpaths

2026-03-18 09:43:46 -07:00

external-content.test.ts

test: dedupe security utility suites

2026-03-28 01:38:12 +00:00

external-content.ts

fix(gateway): preserve async hook ingress provenance

2026-03-22 22:21:49 -07:00

fix.test.ts

test: dedupe security utility suites

2026-03-28 01:38:12 +00:00

fix.ts

…

mutable-allowlist-detectors.ts

…

safe-regex.test.ts

test: dedupe security utility suites

2026-03-28 01:38:12 +00:00

safe-regex.ts

…

scan-paths.ts

…

secret-equal.ts

…

skill-scanner.test.ts

test: dedupe security utility suites

2026-03-28 01:38:12 +00:00

skill-scanner.ts

…

temp-path-guard.test.ts

test: dedupe security utility suites

2026-03-28 01:38:12 +00:00

windows-acl.test.ts

test: dedupe security audit and acl suites

2026-03-28 01:17:57 +00:00

windows-acl.ts

…