Repository navigation
Add admin defaults for new chat model and reasoning effort - #1519
Closed
Chad Palmer (chadpalmer) wants to merge 45 commits into
Closed
Chad Palmer (chadpalmer) wants to merge 45 commits into
Chad Palmer (chadpalmer) wants to merge 45 commits into
Conversation
Make explicit action-type item policies authoritative during governance checks. Previously, a feature-level allow could still permit an action type such as Azure Maps even when an explicit personal_action_type policy existed with allow_all=false and no allowed principals. This updates action-type enforcement so: - feature-level policy grants access only when no explicit item policy exists - explicit item policies must pass once they are present - empty explicit allowlists correctly block the targeted action type
with an identity that lacks the required SimpleChat app role and show the current signed-in account on the access-denied page.
Use tenant-scoped Entra Cosmos access for managed-identity deployments without automatic firewall edits or silent key fallback. Scope hook environment lookups and POSIX role operations to the selected deployment. Consolidate Redis configuration, publish settings through the shared fenced OCC store, and create only missing Search indexes from application schemas. Include Windows/POSIX execution and concurrency regressions plus deployment documentation.
Add v0.261.028 release notes and link the deployment fix documentation to issue microsoft#1489 and PR microsoft#1488. Refs microsoft#1489.
Bumps the github-actions group with 1 update in the / directory: [azure/login](https://github.com/azure/login). Updates `azure/login` from 3.0.1 to 3.1.0 - [Release notes](https://github.com/azure/login/releases) - [Commits](Azure/login@f5d393a...a641126) --- updated-dependencies: - dependency-name: azure/login dependency-version: 3.1.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions ... Signed-off-by: dependabot[bot] <support@github.com>
…onfig-reliability Fix deployment authentication, settings publication, and Search initialization
Introduce separate Calendar, Email, OneDrive, and SharePoint Online actions with delegated retrieval, source-sharing approvals, retained conversation evidence, and explicit workflow Run as authorization. Retire new combined Graph actions, enforce live capability checks, add cloud-aware retrieval and durable continuation safeguards, and document setup for version 0.261.029. Refs microsoft#1493 Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>
…indings Remove provider exception text from public alert decisions and historical run/notification projections. Preserve waiting responses, exception identity, budget retry behavior, and expected Cosmos outcomes. Add regression coverage and bump the app to 0.261.030. Refs microsoft#1493; CodeQL remediation for microsoft#1497. Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>
Move immutable context and fingerprint primitives below execution and connection owners. Inject the live Run as validator from both web and scheduler bootstrap, fail closed before credentials when unconfigured, and preserve pre/post-refresh checks. Add cold-import and revocation coverage and document the four intentional CodeQL findings. Refs microsoft#1493; remediation for microsoft#1497. Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>
Record the passing implementation-head CodeQL analysis, the concrete Protocol implementations and public exception consumers, and individual replies resolving all four remaining Advanced Security review threads. Documentation only; no runtime or version change. Refs microsoft#1493 and microsoft#1497. Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>
Remove unsupported partition_key arguments from conditional Cosmos replacements while preserving body-derived partition routing and ETag checks. Keep async agent stream pulls and cleanup in one isolated context, preserve approval/sign-in handling, and log terminal failures safely. Add real-SDK and Semantic Kernel regressions and bump the application to 0.261.031. Refs microsoft#1493; follow-up for microsoft#1497. Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>
Bind the selected source actions before kernel creation and pause for explicit delegated consent before model execution. Add session-bound PKCE sign-in through the registered login callback, resume the original chat, fix HTTPS callback construction and stale-CSRF recovery, and simplify Profile to source-level permission bundles. Preserve workflow Run as, action capabilities, and Commercial/Government/custom-cloud routing. Add backend and browser regressions; bump the app to 0.261.032. Refs microsoft#1493 and microsoft#1497. Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>
…agers. Include group user roles in the chat bootstrap payload so owners, admins, and document managers are correctly recognized as eligible group uploaders. Add regression coverage, documentation, and release notes
Bind Share controls without executable filename interpolation and populate card text and tooltips through safe DOM properties. Cover all views and refresh paths with regression tests, document the fix, and bump the application to 0.261.029. Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>
…name-xss Fix group document filename XSS in Share controls and cards
Validate that token responses contain the requested grants without applying the outbound scope allowlist or request-count limit to extra prior consent. Share the check across chat and workflow callbacks, retain cloud-qualified matching and narrow workflow authorization, and add real-MSAL regressions for Commercial, Government, and custom clouds. Bump the app to 0.261.033 and document the observed post-consent failure. Refs microsoft#1493 and microsoft#1497. Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>
Add shared CSV decoding with UTF-8, UTF-8 BOM, Windows-1252, and Latin-1 fallbacks across tabular processing paths. Preserve the broader automatic tool-invocation budget while detecting repeated equivalent failures, emitting visible retry lifecycle updates, and instructing subsequent model attempts to use a different query path.
Retire stdio for every role and scope while retaining existing actions for explicit remote reconfiguration or deletion. Bind remote MCP authorization to trusted origins, current callers, and current policy. Harden legacy imports and migration, update remote-only configuration and UI, add regression coverage, and advance the application version to 0.261.029. Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>
Provide a separate Profile chat reconnect using the current user's verified PKCE flow without requiring a pending request or workflow configuration. Preserve the old cache on failure, avoid replay from Profile, and pass exact source scopes from Graph 401 responses into chat continuation. Keep policy, model-budget, service, and download-link errors distinct. Add backend/UI coverage and bump the app to 0.261.034. Refs microsoft#1493 and microsoft#1497. Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>
Make payload-only manifest equality explicit, use module-qualified settings access, and clarify global creation handling and preset assertions. Add regression coverage and advance the app version to 0.261.030. Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>
Resolve the app version conflict at 0.261.030 while preserving Development's group filename XSS fix. Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>
Preserve the behavioral unhashability regression with unittest's callable exception assertion and verify its TypeError diagnostic. Document the follow-up and advance the app version to 0.261.031. Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>
…_upload_csv_encoding Bugfix/workspace file upload and csv encoding
…on_item_id Bugfix/disabling allow all in action governance now disables it
…-tenant-auth Add a controlled account-selection login flow for users who sign in with an account without a SimpleChat role.
…tions/github-actions-a32b23bf08 build(deps): bump azure/login from 3.0.1 to 3.1.0 in the github-actions group across 1 directory
Resolve the version-only conflict by retaining 0.261.031 and preserve incoming governance, account-selection, CSV, and upload changes. Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>
…removal Remove MCP stdio support and harden action authorization
Account for all 75 models with source-backed capacities, scoped profiles, explicit unknowns, and independent per-field resolution. Advance the application to 0.261.035. Refs microsoft#1493 Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>
Separate model capacity from Response Length, preserve inherited metadata across editor saves, and expose safe validation errors without leaking credentials. Refs microsoft#1493 Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>
Carry immutable budget metadata into actual Semantic Kernel requests, M365 streaming and resumed execution, retained-file analysis, and compatible tabular batching. Preserve provider-specific accounting and reject mismatched or oversized requests with actionable errors. Add real-catalog, real-agent, SDK wire-payload, context-isolation, and no-replay regressions. Refs microsoft#1493. Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>
Preserve MCP remote-only authorization and scoped legacy management alongside M365 source validation, durable Graph migration receipts, and model-budget integration. Resolve eight conflicts, add cross-feature regressions, and advance the application to 0.261.036. Refs microsoft#1493, microsoft#1497 Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>
Use explicit discard bindings for unused preparation results and an explicit absent-record state for Cosmos 404 handling. Preserve effective budgets and legacy action rejection, with focused normal/optimized regressions. Advance application version to 0.261.037. Refs microsoft#1493, microsoft#1497; CodeQL alerts 2781 and 2748. Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>
Add authoritative live/history cards for manual and delayed mail/calendar actions, shared-viewer projections, owner review and reconnect recovery. Unify conditional send/cancel claims and safe lifecycle cleanup; document retained draft behavior and recovery semantics. Bump application version to 0.261.038. Refs microsoft#1493 Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>
Address review comment 4055671401 by preserving the document cleanup call without assigning its ignored return value. Add focused cleanup-order and audit regressions, document the disposition, and bump the app to 0.261.039. Refs microsoft#1493 Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>
…-file-sync Add Microsoft 365 actions, approvals, and delegated workflow execution
Route ordinary non-empty prompts in shared conversations through the collaborative AI streaming workflow instead of the human-only message endpoint. Add regression coverage, update version 0.261.040, and clarify the collaboration fix documentation and release notes.
…sation_breaks_follow_on_prompts Fix collaborative prompts without explicit AI targets
… effort default value feature for new chats.
Contributor
Author
|
Wrong base branch. Closing and redoing. |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
3 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
Adds admin-configurable defaults for new non-agent chat conversations:
/chats?conversationId=...points at a freshly created blank conversation.Implementation Notes
enable_default_model_for_new_conversationsdefault_reasoning_effortValidation
Passed:
git diff --check upstream/Development...HEADpython -m py_compilefor changed Python app/test filesnode --checkfor changed chat JavaScript filespython scripts/check_swagger_routes.py application/single_app/route_backend_chats.py application/single_app/route_frontend_admin_settings.py application/single_app/route_frontend_chats.pypython scripts/check_xss_sinks.py --base-sha upstream/Development --head-sha HEAD ...python scripts/check_broken_access_control.py --base-sha upstream/Development --head-sha HEAD ...python functional_tests/test_default_model_selection_fallback.pypython functional_tests/test_chat_model_selector_initial_multiendpoint_bootstrap.pypython functional_tests/test_chat_template_json_bootstrap_safety.pypython functional_tests/test_admin_settings_field_contract.pypython functional_tests/test_docs_app_surface_coverage.pypython functional_tests/test_docs_site_quality.pyfunctional_tests/route_tests/test_route_blueprint_policy_inventory.pyfunctional_tests/route_tests/test_route_unauthenticated_policy_contract.pyfunctional_tests/route_tests/test_route_policy_test_coverage.pyDocs and Version
0.261.044.v0.261.044.Known Gaps