v0.4.5
Highlights
- Hardened model discovery, cache invalidation, streaming cancellation and tool-call validation.
- Bounded API, SSE, account and fallback processing at untrusted network boundaries.
- Reserved the virtual Auto router id and corrected quota normalization edge cases.
- Raised the minimum supported VS Code version to 1.106 for image/data chat parts.
- Documented the extension architecture, outbound request paths and endpoint validation behavior.
Security
- Malformed or unavailable tool calls now fail closed.
- Potentially expensive model-filter expressions fall back to literal matching.
- Updated vulnerable transitive packaging dependencies; npm audit reports zero vulnerabilities.
Validation
npm run check- 43 offline tests passed
- CI and CodeQL enabled for
main - VSIX SHA-256:
DD4A7C458E6C47A49DCB384B684CBAD3DC25190DFC63B219903AA4B4D42FD1D7
The attached VSIX is the release artifact intended for VS Code Marketplace and Open VSX publication.