fixes #5928
fixes #7129

PiperOrigin-RevId: 974803581

PiperOrigin-RevId: 976484701

PiperOrigin-RevId: 978679098

`Sandboxes.send_command` built an inner `genai.Client(vertexai=True, ...)` and
called `_api_client.request(...)` to talk to the sandbox data plane. That genai
client's authorized session has no credentials object, so every call failed with
`AttributeError: 'NoneType' object has no attribute 'before_request'`, making all
Computer Use / sandbox HTTP calls (GET /, /tabs, POST /cdp, etc.) unusable.

The sandbox data plane does not use ADC; it authenticates via the
`Authorization: Bearer <jwt>`, `X-Sandbox-Routing-Token` and `X-Sandbox-Port`
headers that `send_command` already sets. Routing through a genai client was
therefore both unnecessary and broken.

Issue the request directly with `requests` instead, mirroring
`generate_access_token`, which already talks to a non-aiplatform endpoint the
same way. A JSON `Content-Type` is set only when a request body is present, and a
caller-supplied `Content-Type` is preserved. `generate_browser_ws_headers`,
which calls `send_command` internally, continues to parse the JSON body
correctly.

PiperOrigin-RevId: 979899791

…lease

PiperOrigin-RevId: 981243301

Co-authored-by: release-please[bot] <55107282+release-please[bot]@users.noreply.github.com>

PiperOrigin-RevId: 981399003

PiperOrigin-RevId: 981421882

PiperOrigin-RevId: 981914998

Release-As: 2.1.3
PiperOrigin-RevId: 981922727

…ates.

`AdkApp.project_id()` converts a project number into a project ID with a Cloud
Resource Manager `projects.get` call, but tolerated only `PermissionDenied` and
`Unauthenticated`. Any other failure -- a gRPC `Unknown` when network
interception terminates the stream, a `DeadlineExceeded` from a slow lookup --
escaped `set_up()` and stopped the agent from starting. The lookup is cosmetic,
since every caller works with the project number, so it now falls back to the
project number on any error and logs a warning, matching what
`aiplatform.initializer` already does for the same call.

PiperOrigin-RevId: 981933906

…andboxes.generate_browser_ws_headers` so VPC-SC sandboxes with `ingressControlConfig.enablePrivateServiceConnect=true` (which populate only `connection_info.service_attachment`, never `load_balancer_hostname` / `load_balancer_ip`) can route data-plane traffic through a customer-provisioned PSC endpoint. Existing non-VPC-SC callers are unaffected; the parameter defaults to `None` and the load-balancer branches remain the primary path.

PiperOrigin-RevId: 982031703

--
89c83a2 by Owl Bot <gcf-owl-bot[bot]@users.noreply.github.com>:

feat: add enable_zero_data_retention to Tool.ParallelAiSearch

PiperOrigin-RevId: 970039598

Source-Link: googleapis/googleapis@ff81d8a

Source-Link: googleapis/googleapis-gen@27380d6
Copy-Tag: eyJwIjoiLmdpdGh1Yi8uT3dsQm90LnlhbWwiLCJoIjoiMjczODBkNjZlZTllMDQyYzU0ZTRiOGJlMzFlYTA0YmM0ZjhiY2Y1NiJ9

feat: add enable_zero_data_retention to Tool.ParallelAiSearch

PiperOrigin-RevId: 969868128

Source-Link: googleapis/googleapis@b2389f4

Source-Link: googleapis/googleapis-gen@f6eeb24
Copy-Tag: eyJwIjoiLmdpdGh1Yi8uT3dsQm90LnlhbWwiLCJoIjoiZjZlZWIyNDUxNGY5M2Y2Y2UwZDYxYzE2NWJmOWY1OWY4ZjBlYmEzOCJ9

feat: add build configuration support to Vertex AI Reasoning Engine

PiperOrigin-RevId: 963119503

Source-Link: googleapis/googleapis@4685aff

Source-Link: googleapis/googleapis-gen@68eff08
Copy-Tag: eyJwIjoiLmdpdGh1Yi8uT3dsQm90LnlhbWwiLCJoIjoiNjhlZmYwOGFlY2I2MThiMTE0MDAzY2I3MWNmMzkxZTAyMTEwODIyMyJ9

--
9ce7c01 by Owl Bot <gcf-owl-bot[bot]@users.noreply.github.com>:

🦉 Updates from OwlBot post-processor

See https://github.com/googleapis/repo-automation-bots/blob/main/packages/owl-bot/README.md

COPYBARA_INTEGRATE_REVIEW=#7066 from googleapis:owl-bot-copy 8a5455d
PiperOrigin-RevId: 982044557

Co-authored-by: release-please[bot] <55107282+release-please[bot]@users.noreply.github.com>