- Microsoft Foundry: report malformed Azure CLI token JSON with owned auth errors instead of leaking raw parser failures.

- Gateway/model pricing: report malformed external pricing catalog JSON with source-owned errors instead of leaking raw parser failures.

- QA Lab: report malformed model-catalog subprocess JSON with an owned error and ignore invalid catalog rows.

- Google Meet: report malformed browser-control status JSON with plugin-owned errors instead of leaking raw parser failures.

- Models config/auth: stop inferring provider env-var markers from broad `^[A-Z_][A-Z0-9_]*$` strings, and resolve config-backed provider `apiKey` values only through structured env SecretRefs (`secrets.providers[id]` / `secrets.defaults`), so unrelated env vars cannot accidentally become provider credentials. Thanks @sallyom.

- Media fetch: skip allocating and buffering the response body for bodyless media responses (HEAD probes and 204-style empty bodies), avoiding wasted heap on streams that carry no payload. Thanks @shakkernerd.

- CLI/onboarding: forward provider-specific auth flags (e.g. `--openai-api-key`) through the onboarding wizard so they reach provider auth methods via `ctx.opts`, letting `--openai-api-key "$OPENAI_API_KEY"` skip the redundant "use existing env var?" prompt in non-interactive harnesses. (#81669) Thanks @sjf.

import { describe, expect, it } from "vitest";

import { __testing } from "./chrome.js";

describe("google meet chrome transport", () => {

it("wraps malformed browser status JSON", () => {

expect(() =>

__testing.parseMeetBrowserStatusForTest({

result: "{not json",

}),

).toThrow("Google Meet browser status JSON is malformed.");

});

});

chromeTransportDeps.callGatewayFromCli = deps?.callGatewayFromCli ?? callGatewayFromCli;

},

meetStatusScriptForTest: meetStatusScript,

parseMeetBrowserStatusForTest: parseMeetBrowserStatus,

};

function isGoogleMeetTalkBackMode(mode: GoogleMeetMode): boolean {

if (typeof raw !== "string" || !raw.trim()) {

return undefined;

}

const parsed = JSON.parse(raw) as {

let parsed: {

inCall?: boolean;

micMuted?: boolean;

lobbyWaiting?: boolean;

title?: string;

notes?: string[];

};

try {

parsed = JSON.parse(raw) as typeof parsed;

} catch {

throw new Error("Google Meet browser status JSON is malformed.");

}

return {

inCall: parsed.inCall,

micMuted: parsed.micMuted,