Support web search providers in stanalone and OIDC mode - #833
Merged
Merged
Conversation
thesujai
requested review from
bhaveshpatel640,
chiragjn,
debajyoti-truefoundry,
heerambavi1998 and
sr07asthana
as code owners
September 21, 2026 16:13
🦋 Changeset detectedLatest commit: 51f2e42 The changes in this PR will be included in the next version bump. This PR includes changesets to release 5 packages
Not sure what this means? Click here to learn what changesets are. Click here if you're a maintainer who wants to add another changeset to this PR |
thesujai
removed request for
bhaveshpatel640,
chiragjn and
debajyoti-truefoundry
September 21, 2026 16:13
![cursor[bot]](https://avatars.githubusercontent.com/in/1210556?s=60&v=4){kind=small}
- Introduced a new settings UI for configuring web search providers, allowing admins to set API keys and modes for Parallel web search in standalone/OIDC deployments. - Added necessary types and interfaces for web search provider management in the assistant-ui-runtime and trueforge-ui packages. - Created backend catalog functions to handle web search provider operations, including creation and updates. - Updated the settings builder to include web search as a configurable section, enhancing the overall settings experience. This update enhances the admin capabilities for managing web search integrations within the application.
govindavashishtha
requested review from
govindavashishtha,
kumarsks619,
qaifi-tf,
sajal-truefoundry,
sayan-truefoundry and
vinit-truefoundry
as code owners
September 22, 2026 08:14
heerambavi1998
left a comment
heerambavi1998
left a comment
Contributor
There was a problem hiding this comment.
Please add tests for
- ensuring API key is redacted
- ensuring capabilities endpoint is giving correct response for all modes
There was a problem hiding this comment.
Cursor Bugbot has reviewed your changes using default effort and found 1 potential issue.
There are 2 total unresolved issues (including 1 from previous review).
❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, enable autofix in the Cursor dashboard.
Reviewed by Cursor Bugbot for commit 3f3e419. Configure here.
Co-authored-by: Cursor <cursoragent@cursor.com>
govindavashishtha
approved these changes
Sep 22, 2026
heerambavi1998
approved these changes
Sep 22, 2026
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
3 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
Closes AGE-2268
Changes
How was this tested?
Via APIs
Checklist
pnpm build,pnpm test,pnpm typecheck,pnpm lint:ci, andpnpm format:checkpass locallypackages/trueforge-sdk,python/trueforge_sdk,.github/fern/openapi/openapi.json,docs/openapi.json) — fork PRs omit SDK regen; maintainers regenerate after merge.env.exampleupdated if configuration or behavior changedNote
Medium Risk
Introduces admin-managed secrets and changes when web search is enabled at turn time; mitigations include key redaction and existing SSRF guard on Parallel fetches.
Overview
Adds tenant-configurable web search so built-in search/fetch tools work outside TrueFoundry-managed mode. Admins get catalog discovery (
GET /api/v1/catalogs/web-search-providers) and a singleton Parallel provider per tenant viaGET/PUT /api/v1/settings/web-search-providers, with redacted API keys on read and rotate-or-keep semantics on write.The server persists providers in a new
web_search_providertable (SQLite + Postgres), wires resolution into capabilities, agent validation, and turn execution (replacing env-only provider lookup). A shipped Parallel catalog YAML and optionalWEB_SEARCH_CATALOG_PATHoverride accompany the change.UI/runtime:
WebSearchCatalogServerports, a Settings Web search tab (configure/update API key), and a TrueForge agent-server adapter mapping the multi-row UI onto the singleton API. SDK/OpenAPI are regenerated for the new clients.Hardening:
ParallelWebSearchProvidernow usesssrfFetchfor outbound requests. Minor copy fix: session metrics show Turn vs Turns when count is 1.Reviewed by Cursor Bugbot for commit 51f2e42. Bugbot is set up for automated code reviews on this repo. Configure here.