Synced from monorepo

Changes:
- Persist submitter identity for /feedback
- Let custom models use rotating tokens from named auth providers
- Template stale tool/param name literals in server-native descriptions
- Minimal mode commits thinking in full, lookups as one-liners
- Tighten durable append internals
- Nudge model to end turn on no-op bash commands
- Per-fetch signing nonce in the managed-config envelope, with a server-side replay probe
- Include working tree in startup status

crates/common/xai-tool-runtime/src/render.rs

@@ -534,7 +534,8 @@ mod tests {
         ]);
         let blocks = extract_content_blocks(&v);
         assert_eq!(blocks.len(), 2);
-        assert!(matches!(&blocks[0], ContentBlock::Text { text } if text == "a"));
+        assert!(matches!(&blocks[0], ContentBlock::Text { text }
+if text == "a"));
         assert!(matches!(&blocks[1], ContentBlock::Image { .. }));
     }
 
@@ -652,7 +653,8 @@ mod tests {
         assert_eq!(blocks.len(), 2);
         // First block is the remainder text (field order in JSON objects
         // is not guaranteed, so just check it's Text and non-empty).
-        assert!(matches!(&blocks[0], ContentBlock::Text { text } if text.contains("summary")));
+        assert!(matches!(&blocks[0], ContentBlock::Text { text }
+if text.contains("summary")));
         assert!(matches!(&blocks[1], ContentBlock::Image { .. }));
     }
 
@@ -668,7 +670,8 @@ mod tests {
         let blocks = extract_content_blocks(&v);
         // results field → 2 blocks extracted, metadata → remainder text.
         assert_eq!(blocks.len(), 3);
-        assert!(matches!(&blocks[0], ContentBlock::Text { text } if text.contains("metadata")));
+        assert!(matches!(&blocks[0], ContentBlock::Text { text }
+if text.contains("metadata")));
         assert_eq!(blocks[1], ContentBlock::Text { text: "a".into() });
         assert_eq!(blocks[2], ContentBlock::Text { text: "b".into() });
     }

crates/common/xai-tool-runtime/tests/error_conversion.rs

@@ -45,16 +45,16 @@ fn invalid_arguments_round_trips_message_and_details() {
 fn not_found_maps_to_tool_not_found() {
     let err = ToolError::not_found(tid("missing"), "tool 'missing' not registered");
     let wire: ToolErrorWire = err.into();
-    assert!(matches!(wire, ToolErrorWire::ToolNotFound { tool_id } if tool_id == tid("missing")));
+    assert!(matches!(wire, ToolErrorWire::ToolNotFound { tool_id }
+if tool_id == tid("missing")));
 }
 
 #[test]
 fn permission_denied_round_trips_reason() {
     let err = ToolError::permission_denied("not authorised for write");
     let wire: ToolErrorWire = err.into();
-    assert!(
-        matches!(wire, ToolErrorWire::PermissionDenied { reason } if reason == "not authorised for write")
-    );
+    assert!(matches!(wire, ToolErrorWire::PermissionDenied { reason }
+if reason == "not authorised for write"));
 }
 
 #[test]
@@ -93,7 +93,8 @@ fn timeout_with_details() {
 fn cancelled_round_trips_tool_id() {
     let err = ToolError::cancelled(tid("paused"), "user cancelled");
     let wire: ToolErrorWire = err.into();
-    assert!(matches!(wire, ToolErrorWire::Cancelled { tool_id } if tool_id == tid("paused")));
+    assert!(matches!(wire, ToolErrorWire::Cancelled { tool_id }
+if tool_id == tid("paused")));
 }
 
 #[test]