Skip to content

harden tool build - #30

Merged
RahmeKarim merged 2 commits into
devfrom
feat/harden_tool_build
Sep 28, 2026
Merged

RahmeKarim merged 2 commits into
devfrom
feat/harden_tool_build

Conversation

@RahmeKarim

@RahmeKarim RahmeKarim commented Sep 28, 2026 •

Copy link
Copy Markdown
Member

Note

Medium Risk
Autogen tool construction changes affect any agent using MCP tools; the generated client includes breaking query/field renames (e.g. chat_connection_id) and slimmer list payloads that callers may depend on.

Overview
Release 2.4.1 bumps the SDK version and documents a security-focused change to create_autogen_tools(): tool wrappers are built with explicit inspect.Signature closures instead of compiled source strings, and MCP-supplied tool/parameter names are validated (invalid tools are skipped with a warning).

The bulk of the diff is a regenerated Magnetar client aligned with the API: new organization event delivery and delivery attempt resources (list/get, plus delivery retry), event destination ping and optional retry on create/update, and richer filters (search on callbacks/destinations, adapter on auth configs, has_access on chat channels).

Several models shift from chat_integration_id to chat_connection_id (events and destination listeners), integrations gain enable_callback_tools, dashboard provider triggers listing can omit provider_version_id and filter user_managed_callbacks, callback-event list responses drop embedded details (still on get), and chat channels gain has_access and optional recipient metadata.

Reviewed by Cursor Bugbot for commit a6fc895. Bugbot is set up for automated code reviews on this repo. Configure here.

@cursor cursor Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Cursor Bugbot has reviewed your changes using default effort and found 1 potential issue.

Fix All in Cursor

❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, enable autofix in the Cursor dashboard.

Want higher recall? High effort reviews run extra passes and find more bugs. A team admin can switch effort levels in the Cursor dashboard.

Reviewed by Cursor Bugbot for commit 5fcecb0. Configure here.

Comment thread src/metorial/integrations/autogen.py Outdated
@RahmeKarim
RahmeKarim merged commit ae0d653 into dev Sep 28, 2026
5 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant