kevinveenbirkenbachandClaude Opus 5.5 eeb9b22ae4 fix(svc-ai-agent-broker): select platform and relay path from server-side lists ...

py/partial-ssrf on PR #625 (agents.py:195, :250, server.py:123): the chat body's model now selects its entry from AGENT_PLATFORMS through agents.pick, so the agent host is built from the server-side key; a list or dict model answers 404 instead of a TypeError. The relay forwards only /v1/chat/completions and /v1/models with the broker's key; any other path answers 404 and logs relay_refused (the two paths are the ones the relay logs show in use).

py/empty-except (agents.py:201, :258): the health wait names its last error in the timeout, and the model-list fallback logs agent_model_fallback through the log function the server passes in.

Tests cover pick, six refused relay paths and both error paths; each fails against the old code.

🎯 Fix: 92 %
💥 Break: 4 %
💸 Cost: –
⏱️ Time: –
🛡️ Security: ~100 %
🏆 Score: 88
🚦 Gate: ✅ 90/5, cost and time <= 100, security 100 %

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

2026-11-05 17:18:22 +00:00

..

cli

…

compose

…

group_vars

…

library

…

plugins

fix(sys-dns-cloudflare-records): root the API constant at /zones

2026-11-05 16:18:01 +00:00

roles

fix(svc-ai-agent-broker): select platform and relay path from server-side lists

2026-11-05 17:18:22 +00:00

scripts

…

tests

…

utils

…

__init__.py

…