Commit Graph

702 Commits

Author SHA1 Message Date
diegosouzapw
7b97b01fe6 refactor(docs-ui): drop DocsI18n.tsx, unify locale handling via next-intl
The cosmetic DocsI18n.tsx shim duplicated the locale catalog that
already lives in config/i18n.json and consumed it through a separate
client hook (useDocsLocale + a 10-entry hard-coded SECTION_LABELS
map). It only ever translated sidebar section titles — the docs
content itself was always English.

Now the /docs page uses the same `LanguageSelector` component as the
rest of the dashboard, backed by next-intl + config/i18n.json. The
locale cookie set there is consumed by the [slug] page server
component (next commit) to actually serve translated markdown.

Removed:
- src/app/docs/components/DocsI18n.tsx (203 lines)

Updated:
- src/app/docs/layout.tsx — swaps DocsLocaleSwitcher for the shared
  LanguageSelector
- tests/unit/docs-site-overhaul.test.ts — replaces the DocsI18n
  importability assertions with checks that (a) the shared next-intl
  config covers the same locales, (b) the global LanguageSelector
  is the new docs switcher, and (c) the DocsI18n module is gone.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
2026-05-13 18:01:53 -03:00
diegosouzapw
eb62ad72f1 fix(test): align auto-update test sync-env path with FASE 1 move
FASE 1 moved scripts/sync-env.mjs to scripts/dev/sync-env.mjs. The implementation
(src/lib/system/autoUpdate.ts) was updated, but two test assertions still referenced
the old path. Updates the regex matchers to the new path.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
2026-05-13 16:46:20 -03:00
diegosouzapw
afe2a67c76 Merge FASE 3: docs restructure into 8 subfolders
Reorganizes /docs into 8 subfolders (architecture, guides, reference, frameworks,
routing, security, compression, ops). Resolves two conflicts:

- scripts/docs/gen-provider-reference.ts: combined FASE 1's new __dirname-based
  ROOT (two levels up from scripts/docs/) with FASE 3's new output path
  (docs/reference/PROVIDER_REFERENCE.md).
- scripts/check-env-doc-sync.mjs: deleted by FASE 1, modified by FASE 3; FASE 1's
  delete wins (file is at scripts/check/ now). The FASE 3 intent (point to
  docs/reference/ENVIRONMENT.md) was applied to the strict checker at the new path.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
2026-05-13 16:10:49 -03:00
diegosouzapw
6991024935 Merge FASE 2: env audit
Resolves conflict in scripts/check/check-env-doc-sync.mjs (FASE 1 moved it from scripts/ to scripts/check/, FASE 2 modified it at the old path). Applies FASE 2's strict checker version at the new path, fixes __dirname-based REPO_ROOT to traverse two levels up, and updates the unit test import to the new path.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
2026-05-13 16:02:44 -03:00
diegosouzapw
c044cfdefb refactor(app): regenerate docs nav + update routes/tests for new subfolder layout
- src/app/docs/lib/docs-auto-generated.ts is regenerated from docs/<sub>/ with
  fileName values like "architecture/ARCHITECTURE.md". The dynamic slug page
  joins these against process.cwd()/docs so resolution still works.
- src/app/api/openapi/spec/route.ts now looks for the spec at
  docs/reference/openapi.yaml first, with the flat-path fallback retained for
  older bundles.
- tests updated: integration-wiring expects docs/reference/{API_REFERENCE.md,
  openapi.yaml}; docs-site-overhaul reflects the new 8-section nav titles
  (Architecture, Guides, Reference, Frameworks, Routing, Security, Compression,
  Ops) and the new section for setup-guide ("Guides").
- open-sse/mcp-server/README.md picks up the rewritten docs/ reference.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
2026-05-13 13:13:28 -03:00
diegosouzapw
b43ab4d4c3 test(env): make check-env-doc-sync strict + unit test
Rewrites scripts/check-env-doc-sync.mjs so the default mode is strict
(non-zero exit on drift between code references, .env.example, and
docs/ENVIRONMENT.md). The previous "report-only" behavior is still
available via --lenient for ad-hoc local diagnostics.

Highlights:

- Strict mode fails when any of these three sets is non-empty:
    1. process.env vars referenced in src/, open-sse/, bin/, scripts/,
       electron/main.js, electron/preload.js but missing from
       .env.example.
    2. .env.example vars missing from docs/ENVIRONMENT.md.
    3. docs/ENVIRONMENT.md vars missing from .env.example.
- Allowlists are explicit and curated:
    * `IGNORE_FROM_CODE` — system vars (NODE_ENV, PATH, ...), Next.js
      internals, CI runner injections, doctor placeholders, and aliases
      handled by fallback ordering.
    * `DOC_ONLY_ALLOWLIST` — vars intentionally documented in
      ENVIRONMENT.md but absent from .env.example (Audit section,
      legacy aliases, future-supported hooks, `CHANGEME` default value).
    * `ENV_ONLY_ALLOWLIST` — reserved for future use; currently empty.
- The checker now exposes a programmatic `runEnvDocSync({ envExampleText,
  envDocText, codeVars, ignore, docOnlyAllowlist, envOnlyAllowlist })`
  entry point that other Node tests can import without touching disk.
  Helpers `parseEnvExampleVars` and `parseEnvDocVars` are exported so
  fixtures can validate the regex contract.

Test coverage in tests/unit/check-env-doc-sync.test.ts (13 cases):

- Parses env.example assignments (commented and uncommented), rejects
  prose, and rejects backtick literals that aren't SHOUTY env names.
- Drives runEnvDocSync against in-memory fixtures for every drift
  direction (code-missing-env, env-missing-doc, doc-missing-env) and
  asserts the allowlists / ignore set behave as expected.
- Calls runEnvDocSync() with no overrides to assert the live
  .env.example, docs/ENVIRONMENT.md and source-code references stay in
  sync. This is the same check that runs in pre-commit / CI, so the
  unit-test failure surfaces drift before reviewers do.

.env.example: documents `AWS_REGION` and `AWS_DEFAULT_REGION` so
Bedrock/Kiro/audio-speech callers stay in the contract.

docs/ENVIRONMENT.md: adds rows for AWS_REGION / AWS_DEFAULT_REGION
inside §20 Provider-Specific Settings.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
2026-05-13 12:11:01 -03:00
diegosouzapw
f3b944a55a refactor(scripts): organize into build/dev/check/docs/i18n/ad-hoc subfolders
Reorganizes the 29 active scripts under scripts/ into purpose-driven
subfolders:

- scripts/build/    (11) — Build, install, publish, runtime env
- scripts/dev/      (13) — Dev servers, test runners, healthchecks
- scripts/check/    (10) — Lint/validation/coverage checks
- scripts/docs/      (2) — Docs index and provider reference generation
- scripts/i18n/     (+3) — Adds Python translation utilities (check/validate/autotranslate)
- scripts/ad-hoc/    (4) — One-shot maintenance utilities

Updates all references in package.json, electron/package.json,
.husky/pre-commit, .github/workflows/ci.yml, Dockerfile, src/,
tests/, scripts/ internal cross-imports, playwright.config.ts,
and English docs (CODEBASE_DOCUMENTATION, ENVIRONMENT, FEATURES,
RELEASE_CHECKLIST, COVERAGE_PLAN, ELECTRON_GUIDE, I18N, GEMINI).

Also patches scripts/build/pack-artifact-policy.ts so the npm pack
allowlist mirrors the new layout.

Validates with:
- npm run lint            (exit 0 — pre-existing minified-bundle errors only)
- npm run typecheck:core  (exit 0)
- npm run check:docs-all  (exit 0)
- unit tests for moved scripts (57 tests pass)

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
2026-05-13 10:14:25 -03:00
diegosouzapw
204e15628c chore(release): prepare v3.8.0 docs and coverage ratchet
Refresh the v3.8.0 documentation set across API, setup, Docker,
environment, Fly.io, VM deployment, and troubleshooting guides.

Document the updated budget payload, management-auth requirements,
WebSocket bridge secret, Compose profiles, production deployment
details, and expanded Node support. Also update the OpenAPI catalog,
raise coverage thresholds to match the current baseline, and align
cloud-agent task route typing and schemas with the stricter runtime
behavior.
2026-05-13 03:47:40 -03:00
diegosouzapw
46e5aa5522 refactor(api): consolidate auth routing and provider config handling
Centralize optional API key capability checks so dashboard forms and
provider schemas share the same rules, including keyless Pollinations
support and cloud-agent batch testing mode.

Also align auto-combo config on `routerStrategy`, keep legacy combo
reads compatible, preserve MCP routes as management APIs, narrow
`require-login` public access to readonly/bootstrap flows, and make
cloud-agent CORS reflect the request origin for credentialed requests.
2026-05-13 03:47:40 -03:00
diegosouzapw
c89663d774 fix(auth): require management auth for agent and cooldown APIs
Protect cloud agent task routes and model cooldown management endpoints
with management-session auth and consistent CORS handling.

Also align cloud agent API serialization with the dashboard, reuse the
provider connection schema for CLI key storage, and accept active OAuth
tokens when building virtual auto-combo candidates.
2026-05-13 03:47:40 -03:00
Diego Rodrigues de Sa e Souza
20b35c4d20 security: sanitize error messages in API routes (CodeQL js/stack-trace-exposure)
Integrated into release/v3.8.0
2026-05-12 23:23:07 -03:00
diegosouzapw
da982d31be fix(ci): align resilience and thinking checks 2026-05-12 20:44:23 -03:00
diegosouzapw
a260795327 fix(ci): align cloud code thinking and model catalog tests 2026-05-12 20:28:02 -03:00
Dohyun Jung
fc620514a9 feat(providers): add Command Code provider (#2199)
Integrated into release/v3.8.0 after syncing the contributor branch, removing unrelated workflow/package-lock changes, and validating Command Code provider, auth, validation, and Responses coverage locally.
2026-05-12 19:57:35 -03:00
InkshadeWoods
e6aee3d26c feat: add ModelScope provider-specific 429 handling and retry logic (#2202)
Integrated into release/v3.8.0 after syncing the contributor branch, removing unrelated workflow/docker/package-lock changes, tightening ModelScope 429 classification, and validating policy coverage locally.
2026-05-12 19:57:26 -03:00
nickwizard
061c0c29fe Feat/provider models (#2196)
Integrated into release/v3.8.0 after syncing the contributor branch, removing unrelated workflow/docker/package-lock changes, and validating provider-scoped models coverage locally.
2026-05-12 19:57:15 -03:00
backryun
af7d056f7e chore(providers): improve BazaarLink and Completions.me support (#2177)
Integrated into release/v3.8.0 after syncing the contributor branch, removing unrelated dependency churn, and validating executor/default URL coverage locally.
2026-05-12 19:57:06 -03:00
Anton
a408b30896 fix(cliproxyapi): probe /v1/models for health (CPA 6.x has no /health) (#2189)
Integrated into release/v3.8.0 after syncing the contributor branch and validating tests/unit/cliproxyapi-executor.test.ts locally.
2026-05-12 19:50:07 -03:00
Anton
13f7ebce5a fix(stream): skip [DONE] terminator for Claude SSE clients (#2190)
Integrated into release/v3.8.0 after syncing the contributor branch and validating tests/unit/stream-utils.test.ts locally.
2026-05-12 19:49:59 -03:00
Anton
5c11b57542 fix(claudeHelper): emit data field on redacted_thinking, drop bogus signature (#2191)
Integrated into release/v3.8.0 after syncing the contributor branch and validating tests/unit/translator-claude-helper-thinking.test.ts locally.
2026-05-12 19:49:50 -03:00
Anton
340f68bbee fix(modelSpecs): cap thinking budget for Claude Opus 4.6 / 4.7 / Sonnet 4.6 (#2197)
Integrated into release/v3.8.0 after syncing the contributor branch and validating tests/unit/thinking-budget.test.ts locally.
2026-05-12 19:44:45 -03:00
Anton
b23b624f82 fix(reasoning-cache): include xiaomi-mimo in replay provider/model detection (#2198)
Integrated into release/v3.8.0 after syncing the contributor branch and validating tests/unit/reasoning-cache.test.ts locally.
2026-05-12 19:43:58 -03:00
Anton
607ae5ca5e fix(cliproxyapi): detect Anthropic shape on minimal Capy bodies (#2192)
Integrated into release/v3.8.0 after syncing the contributor branch and validating tests/unit/cliproxyapi-executor.test.ts locally.
2026-05-12 19:43:04 -03:00
diegosouzapw
4f87062f3e fix(tests): update test snapshots and registry for PRs merged into v3.8.0
- providerModels: supportsXHighEffort returns true for unknown providers
  (passthrough) so PR #2162 sanitizeReasoningEffortForProvider no longer
  downgrades xhigh for non-registry custom providers
- providerRegistry(openai): add gpt-4o + gpt-4o-2024-11-20 with explicit
  contextLength so catalog tests can resolve them without synced DB data
- context-manager.test: update GPT-5.5 Codex expected context 1050000→400000
  (PR #2163 capped codex OAuth context at 400K)
- provider-models-config.test: update kiro claude-opus-4.7 contextLength
  undefined→1000000 (PR #2163 added explicit context window)
- oauth-providers-config.test: add windsurf and devin-cli to expected
  provider keys and config map (PR #2168)

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-05-12 15:05:00 -03:00
Andrew Munsell
ed1554b7a1 feat(search): add Ollama Search as a web search provider (#2176)
Integrated into release/v3.8.0 — adds Ollama Search as a web search provider.
2026-05-11 21:54:34 -03:00
Aleksandr
ff730b372e feat(oauth): complete Windsurf / Devin CLI OAuth + API-token flows (#2168)
Integrated into release/v3.8.0 — complete Windsurf/Devin CLI OAuth + API-token executor flows with unit tests.
2026-05-11 21:49:32 -03:00
Ramel Tecnologia
95944dad92 feat(resilience): expose model cooldown list with manual re-enable (#2146)
Integrated into release/v3.8.0 — adds model cooldowns dashboard card with real-time list and re-enable action. Domain module and unit tests added.
2026-05-11 21:38:26 -03:00
Anton
704f686396 fix(cliproxyapi): Anthropic-shape body routing and gate compatibility (#2165)
Integrated into release/v3.8.0 — three fixes for CliProxyApi: Anthropic-shape body routing to /v1/messages, Capy premium extras strip, and mcp_* tool name rewrite to avoid Anthropic gate. Tests added covering all three categories.
2026-05-11 21:23:59 -03:00
Dohyun Jung
dcb32a6ba0 feat(api): aggregate combo model metadata in catalog (#2166)
Integrated into release/v3.8.0 — adds target-based metadata aggregation for combo entries in /v1/models using least-common-denominator approach (context_length, max_output_tokens, capabilities, modalities).
2026-05-11 21:14:25 -03:00
Anton
e5974c4ae3 feat(responses): degrade background mode to synchronous execution (#2164)
Integrated into release/v3.8.0 — degrades background:true to synchronous execution instead of 400, enabling Capy and similar clients that set background:true by default to work seamlessly.
2026-05-11 21:03:26 -03:00
Anton
25199b20fe fix(executors): sanitize reasoning_effort for non-supporting providers (#2162)
Integrated into release/v3.8.0 — adds sanitizeReasoningEffortForProvider hook to BaseExecutor, fixing xhigh→high downgrade for non-supporting providers and full strip for mistral/devstral and GitHub Claude models.
2026-05-11 21:02:28 -03:00
Anton
d995713e21 fix(translator): inject thinking placeholder for all Claude-shape upstreams (#2161)
Integrated into release/v3.8.0 — removes redundant provider guard in prepareClaudeRequest, fixing thinking placeholder injection for all Claude-shape upstreams (kimi-coding, glmt, zai).
2026-05-11 21:01:23 -03:00
Andrew Munsell
6d722ecd27 fix(providers): allow optional-key providers to pass connection test (#2169)
Integrated into release/v3.8.0 — allows optional-key providers (SearXNG, Petals, self-hosted chat, OpenAI/Anthropic-compatible) to pass connection test by centralizing the check in providerAllowsOptionalApiKey().
2026-05-11 20:57:01 -03:00
Gioxa
2880155772 fix(openai-responses): emit reasoning summary as delta.reasoning_content (#2159)
Integrated into release/v3.8.0 — emit reasoning summary as delta.reasoning_content for Chat Completions clients
2026-05-11 10:22:07 -03:00
backryun
6e2c5e2d4c chore(models): tidy up alibaba-coding-plan and cursor provider (#2150)
Integrated into release/v3.8.0 — tidies up Alibaba Coding Plan and Cursor provider model catalogs
2026-05-11 10:08:34 -03:00
Gioxa
fca89049c9 fix(openai-responses): propagate include so chat clients stream reasoning summaries (#2154)
Integrated into release/v3.8.0 — propagates include array so chat clients stream reasoning summaries via Responses API
2026-05-11 10:06:31 -03:00
Gioxa
1814d2bde0 fix(kiro): synthesize tools schema when history references tool_calls without body.tools (#2149)
Integrated into release/v3.8.0 — synthesizes tools schema for Kiro when body.tools is omitted but history has tool_calls
2026-05-11 10:06:05 -03:00
Gioxa
fdb4c63244 fix(kiro): avoid treating high-traffic 429s as quota exhaustion (#2153)
Integrated into release/v3.8.0 — fixes transient Kiro 429s being incorrectly classified as quota exhaustion
2026-05-11 10:05:48 -03:00
diegosouzapw
bbecbccb0a fix(cli): harden setup, doctor, and backup workflows
Hide admin password entry during setup, make doctor degrade to warnings
when source-only runtime checks are unavailable, and improve stop
behavior by attempting graceful shutdown before force killing ports.

Also use SQLite's backup API for safer snapshots under WAL, align CLI
key writes with the current provider_connections schema, and include
follow-on compatibility fixes for GLM provider detection, stream error
sanitization, and auth-aware test coverage.
2026-05-11 09:13:49 -03:00
diegosouzapw
7d8b783195 fix(types): remove extraneous config/models from AutoComboConfig returns and type seedConnection overrides 2026-05-11 00:13:20 -03:00
backryun
602f897c50 fix: remove duplicate cloud agent provider constants (#2141)
Integrated into release/v3.8.0 — Kiro model alias normalization (dash→dot), trimmed duplicate catalog entries, and new tests.
2026-05-10 23:47:20 -03:00
Davy Massoneto
4e53fba8b9 fix(sanitizer): preserve reasoning_content on assistant messages with tool_calls (#2140)
Integrated into release/v3.8.0 — preserves reasoning_content on assistant messages with tool_calls/function_call, fixing Kimi 400 errors.
2026-05-10 21:25:32 -03:00
diegosouzapw
f8812b95c7 Merge remote-tracking branch 'origin/release/v3.8.0' into fix/combo-context-length-auto-calc
# Conflicts:
#	tests/unit/models-catalog-route.test.ts
2026-05-10 21:24:21 -03:00
diegosouzapw
ee408653dd fix(chatcore): stop leaking provider credentials in response headers
Remove upstream provider headers from non-stream chatCore JSON responses to
prevent authorization and API key values from being exposed to clients.

Add coverage to verify sensitive provider request headers are omitted while
OmniRoute metadata headers remain present.
2026-05-10 21:16:52 -03:00
diegosouzapw
40bd60959e refactor(core): strengthen typing and normalize auth and model flows
Tighten executor, usage, model-resolution, and state-management
code with explicit types and safer record handling to reduce runtime
edge cases across providers.

Also normalize management-token failures to 403 responses, require API
keys consistently on cloud agent task routes with CORS-safe errors,
refresh stale Gemini CLI project IDs, prioritize Gemini search tools
correctly, add new provider/model registry entries, and serialize
integration tests for more reliable CI.
2026-05-10 20:48:03 -03:00
Automation
5caee79f43 fix(catalog): ensure individual models get context_length via getTokenLimit fallback
When the /v1/models catalog builds entries for individual provider
chat models, context_length was previously only set when the
REGISTRY provider entry carried defaultContextLength. For providers
without that field (or when alias resolution fails to map to a
REGISTRY key), models shipped without any context_length, causing
OpenCode and other clients to fall back to a ~4000 token limit.

Now getDefaultContextFallback calls getTokenLimit() as the ultimate
fallback, which resolves through env overrides, models.dev DB,
name heuristics, and hardcoded defaults — always returning a value.

Fixes the same class of bug as 3dc7542e (combo context_length)
but for individual (non-combo) models.

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
2026-05-10 23:47:31 +02:00
diegosouzapw
ed19e0f43e Merge branch 'feat/zero-config-auto-routing' into release/v3.8.0 2026-05-10 18:34:04 -03:00
diegosouzapw
87dfbcca62 Merge remote-tracking branch 'origin/release/v3.8.0' into feat/zero-config-auto-routing
# Conflicts:
#	CHANGELOG.md
#	Dockerfile
#	docs/i18n/ar/CHANGELOG.md
#	docs/i18n/bg/CHANGELOG.md
#	docs/i18n/bn/CHANGELOG.md
#	docs/i18n/cs/CHANGELOG.md
#	docs/i18n/da/CHANGELOG.md
#	docs/i18n/de/CHANGELOG.md
#	docs/i18n/es/CHANGELOG.md
#	docs/i18n/fa/CHANGELOG.md
#	docs/i18n/fi/CHANGELOG.md
#	docs/i18n/fr/CHANGELOG.md
#	docs/i18n/gu/CHANGELOG.md
#	docs/i18n/he/CHANGELOG.md
#	docs/i18n/hi/CHANGELOG.md
#	docs/i18n/hu/CHANGELOG.md
#	docs/i18n/id/CHANGELOG.md
#	docs/i18n/it/CHANGELOG.md
#	docs/i18n/ja/CHANGELOG.md
#	docs/i18n/ko/CHANGELOG.md
#	docs/i18n/mr/CHANGELOG.md
#	docs/i18n/ms/CHANGELOG.md
#	docs/i18n/nl/CHANGELOG.md
#	docs/i18n/no/CHANGELOG.md
#	docs/i18n/phi/CHANGELOG.md
#	docs/i18n/pl/CHANGELOG.md
#	docs/i18n/pt-BR/CHANGELOG.md
#	docs/i18n/pt/CHANGELOG.md
#	docs/i18n/ro/CHANGELOG.md
#	docs/i18n/ru/CHANGELOG.md
#	docs/i18n/sk/CHANGELOG.md
#	docs/i18n/sv/CHANGELOG.md
#	docs/i18n/sw/CHANGELOG.md
#	docs/i18n/ta/CHANGELOG.md
#	docs/i18n/te/CHANGELOG.md
#	docs/i18n/th/CHANGELOG.md
#	docs/i18n/tr/CHANGELOG.md
#	docs/i18n/uk-UA/CHANGELOG.md
#	docs/i18n/ur/CHANGELOG.md
#	docs/i18n/vi/CHANGELOG.md
#	docs/i18n/zh-CN/CHANGELOG.md
#	open-sse/config/providerRegistry.ts
#	open-sse/handlers/chatCore.ts
#	open-sse/services/usage.ts
#	open-sse/utils/streamReadiness.ts
#	scripts/check-docs-sync.mjs
#	src/app/(dashboard)/dashboard/cache/media/MediaPageClient.tsx
#	src/app/(dashboard)/dashboard/providers/[id]/page.tsx
#	src/app/(dashboard)/dashboard/settings/components/ProxyTab.tsx
#	src/app/(dashboard)/dashboard/settings/components/RoutingTab.tsx
#	src/app/(dashboard)/dashboard/usage/components/ProviderLimits/utils.tsx
#	src/app/api/usage/analytics/route.ts
#	src/i18n/messages/zh-CN.json
#	src/lib/embeddings/service.ts
#	src/lib/usage/providerLimits.ts
#	src/mitm/cert/install.ts
#	src/shared/constants/providers.ts
#	src/sse/handlers/chat.ts
#	tests/unit/compression/rtk-code-stripper.test.ts
#	tests/unit/usage-service-hardening.test.ts
2026-05-10 18:33:20 -03:00
diegosouzapw
ec6456ba73 chore(release): align migration compatibility and packaged CLI runtime
Skip the superseded 041 session_account_affinity migration when
the canonical 050 file is present, and remap legacy migration
markers so upgraded databases do not replay the duplicate slot.

Also include the CLI entrypoints in packaged artifacts and extend
management-auth coverage across admin memory, pricing, routing,
provider validation, and usage endpoints to keep release bundles
runnable and sensitive operations protected.
2026-05-10 18:27:41 -03:00
eleata
e58aea9df7 feat(resilience): useUpstream429BreakerHints toggle (#2100 follow-up to #2116) (#2133)
Integrated into release/v3.8.0 — adds useUpstream429BreakerHints toggle with per-provider defaults for circuit breaker cooldown trust.
2026-05-10 18:27:24 -03:00