Commit Graph

  • 5631e91f0d fix(providers): learn reasoning_effort capability from upstream 4xx instead of a hardcoded/opt-out default (#11116) Dizzle 2026-08-22 19:40:57 +02:00
  • 1dd0173468 fix(sse): assign a stable index/id to parallel function_call items in Responses->Chat translation (#11144) Dizzle 2026-08-22 19:40:45 +02:00
  • c89fc6ba2a feat(providers): let operators add per-provider error rules via settings (#11104) Dizzle 2026-08-22 19:40:35 +02:00
  • 84c9dfdd2c fix(config-audit): persist config audit log to SQLite with retention (#11103) Dizzle 2026-08-22 19:40:09 +02:00
  • f3b190ba3e fix(providers): reject silent validation degradation with 400 and rejected keys (#11101) Dizzle 2026-08-22 19:39:58 +02:00
  • d021423af3 fix(sse): default summary + strip malformed id on kept Responses input items (#11110) Dizzle 2026-08-22 19:39:47 +02:00
  • 78b4082361 fix(autopilot): show real suggestion count and link dashboard (#11102) Dizzle 2026-08-22 19:39:22 +02:00
  • efc7134167 fix(registry): restore models[0] default + guards; note muse-spark overlay (#11051/#11049) (#11133) Dizzle 2026-08-22 19:39:12 +02:00
  • b44f22a949 fix(webhooks): followup ghost-event dispatcher tests + vi i18n (#11050) (#11130) Dizzle 2026-08-22 19:39:01 +02:00
  • 02a078e95f fix(sse): default summary on freshly-built Chat->Responses reasoning items (#11129) Dizzle 2026-08-22 19:38:39 +02:00
  • d9b3ce266f test(stream): direct coverage + comment for splitConcatenatedToolCallArguments (#11043 followup) (#11135) Dizzle 2026-08-22 19:38:28 +02:00
  • da490a759f fix(sse): resume stream recovery after a completed tool call (#11109) Dizzle 2026-08-22 19:37:58 +02:00
  • d91238b720 fix(install): make ONNX chain optional for Android/Termux installs (#11095) Diego Rodrigues de Sa e Souza 2026-08-22 14:28:17 -03:00
  • 9629693a3c fix(providers): filter Perplexity model import to the Sonar family (#11060) Diego Rodrigues de Sa e Souza 2026-08-22 14:28:14 -03:00
  • 742ccb98a0 fix(ci): register oauth-autoimport-local-only test in stryker tap.testFiles (#11053 residual) Markus Hartung 2026-08-22 14:09:19 -03:00
  • 7c4d44fe18 docs(changelog): fragment for #11146 Hermes Developer 2026-08-22 11:56:35 -04:00
  • 4150167a63 feat(routing): subscription-first auto groupings (auto/subscription, auto/thrifty) Hermes Developer 2026-08-22 11:55:05 -04:00
  • 6cd4d38e21 fix(m365): BizChat invocation shape drift + HAR-import UX + Antigravity alias note (#11069) N123 Project 2026-08-22 08:32:19 +07:00
  • b6412c6fed fix(command-code): use the documented /provider/v1 chat endpoint (#10265) (#11072) Diego Rodrigues de Sa e Souza 2026-08-21 22:16:45 -03:00
  • e06f8b7ec0 feat(api): flag a pinned account on /v1/combos steps without leaking the id (#11076) Nguyen Thanh Dat 2026-08-22 08:06:43 +07:00
  • 5a60a46e22 fix: deprecate blackbox provider since api.blackbox.ai returns 404 (#10997) (#11074) Diego Rodrigues de Sa e Souza 2026-08-21 22:06:26 -03:00
  • c68cda7dfb fix(resilience): honor shared passthrough providers (#11075) Praveen K Palaniswamy 2026-08-21 21:06:21 -04:00
  • 7ddbaf69a4 feat(cli): add native Bun backend support and Dockerfile.bun (#11039) Rouzbeh† 2026-08-22 03:58:43 +03:30
  • 7ffa3efaf0 fix(quality): move #11050 changelog fragment to valid fixes/ section + rebaseline AddApiKeyModal (1067->1073, #11056 growth) Markus Hartung 2026-08-21 21:25:26 -03:00
  • 7c39e95972 fix(providers): update hailuo-web domain to chat.minimax.io (#11000) (#11055) Rouzbeh† 2026-08-22 03:40:10 +03:30
  • 8643e0f57c fix(cli): default limit.context to 128k when unknown in OpenCode configs (#11035, #11032) (#11054) Rouzbeh† 2026-08-22 03:36:21 +03:30
  • 7e48be8061 feat(dashboard): trigger key validation on Enter in AddApiKeyModal (#10995) (#11056) Rouzbeh† 2026-08-22 03:36:18 +03:30
  • 9b801b7e09 fix(dashboard): compute unique connection names from array to avoid overwrite (#11033) (#11067) Rouzbeh† 2026-08-22 03:36:14 +03:30
  • 0ff0490ada test(db): assert resetDbInstance swaps the singleton, WAL mode, and schema_version seed (#10906) Paco Cartones 2026-08-22 02:02:30 +02:00
  • f968496cc6 fix(gamification): validate leaderboard limit/offset before the SQLite bind (#11059) Paco Cartones 2026-08-22 01:59:57 +02:00
  • c9775366f9 refactor(providers): dedupe identical opencode-zen/opencode-go model entries (#11051) Dizzle 2026-08-22 01:55:21 +02:00
  • 666e4aaca2 fix(providers): route Muse Spark to the Responses API on opencode-zen too (#11049) Dizzle 2026-08-22 01:55:07 +02:00
  • 1c920eb8b8 fix(webhooks): remove 3 declared-but-never-emitted ghost events (#11050) Dizzle 2026-08-22 01:54:51 +02:00
  • 02a6c3d90b fix(sse): split concatenated tool_call arguments from same-name index collisions (#11043) Dizzle 2026-08-22 01:54:48 +02:00
  • ae2de4511b fix(sse): resolve OpencodeExecutor target format through the provider alias (#11047) Dizzle 2026-08-22 01:54:44 +02:00
  • d01a4ae6cf fix(release): drain v3.8.50 base-reds — build-breaking import, stale provider docs, orphaned suppressions (#11038) Diego Rodrigues de Sa e Souza 2026-08-21 20:49:18 -03:00
  • 9349af29c4 fix(quality): rebaseline file-size baseline for modelCapabilities.ts drift (1016->1072) Markus Hartung 2026-08-21 20:46:43 -03:00
  • eb4fd74b13 fix(security): close remaining v3.8.50 advisories (batch 2 — 11 findings) (#11040) Diego Rodrigues de Sa e Souza 2026-08-21 20:28:16 -03:00
  • 99111f39fb fix(services): isolate probeBeforeSpawn adoption tests on distinct ports to stop order-dependent flake (#10523) (#11061) Diego Rodrigues de Sa e Souza 2026-08-21 20:27:49 -03:00
  • 4e3e53ee4d fix(ssrf): honor local-first provider URL flag in outbound guard (#9123) (#11062) Diego Rodrigues de Sa e Souza 2026-08-21 20:27:46 -03:00
  • a928fad895 fix(command-code): surface reasoning-only output as content when no text-delta (#10986) (#11063) Diego Rodrigues de Sa e Souza 2026-08-21 20:27:43 -03:00
  • d61eec63b5 fix(dashboard): treat UncloseAI as a no-auth provider so the connect form no longer forces a fake API key (#8864) (#11064) Diego Rodrigues de Sa e Souza 2026-08-21 20:27:40 -03:00
  • 861ac69e4b fix(providers): validate Dify keys against native /v1/chat-messages endpoint (#11002) (#11065) Diego Rodrigues de Sa e Souza 2026-08-21 20:27:36 -03:00
  • 484cb6e562 fix: add static model catalog for v0-vercel-web web-cookie provider (#10990) (#11066) Diego Rodrigues de Sa e Souza 2026-08-21 20:27:33 -03:00
  • 2ab16d3214 fix(cli): scoping android instrumentation-hook diagnosis to real platform signal (#10028) (#11068) Diego Rodrigues de Sa e Souza 2026-08-21 20:27:29 -03:00
  • 3caa59107e feat(sse): add STRICT_ZERO_COST opt-in free-access policy (#10965) mymusicmyspace 2026-08-21 19:59:11 +02:00
  • 9469b9c79e fix(sse): surface bare upstream close as response.failed for Responses clients (#10980) Harvey Doan 2026-08-22 00:59:07 +07:00
  • 4ac157b76d fix(opencode): guard the provider block when merging an existing config (#11004) Nguyen Thanh Dat 2026-08-22 00:59:03 +07:00
  • 8f0d0a0d03 fix: strip unsupported message metadata for Groq (#11026) lamcn1k9 2026-08-22 00:58:59 +07:00
  • 00dfdadf93 fix(combo): resolve effort variants via base model capabilities (#11034) Jonathan Bailey 2026-08-21 10:58:53 -07:00
  • d29829b8c4 fix(security): reduce the health payload for anonymous callers fix/sec-adv-v3850-batch2 Xiangzhe 2026-08-21 14:39:45 -03:00
  • f1b4a3d93e fix(security): require a credential before echoing the CORS Origin on /v1 Xiangzhe 2026-08-21 14:36:10 -03:00
  • ad15811e1a fix(security): honor REQUIRE_API_KEY on the /a2a route Xiangzhe 2026-08-21 14:30:32 -03:00
  • a03cb03110 fix(security): route OAuth auto-import through the LOCAL_ONLY tier Xiangzhe 2026-08-21 14:26:41 -03:00
  • 81550a8629 fix(security): require management scope for OAuth import/auto-import routes Xiangzhe 2026-08-21 14:24:39 -03:00
  • 4f5b647011 fix(security): validate the AWS region on the device-code route (SSRF) Xiangzhe 2026-08-21 14:12:55 -03:00
  • 50f5cecb80 fix(security): don't auto-adopt an unverified listener on a service port Xiangzhe 2026-08-21 14:10:31 -03:00
  • 60060a6dca fix(security): mask the Obsidian WebDAV password from non-management callers Xiangzhe 2026-08-21 14:06:56 -03:00
  • 14078b2f2b fix(security): SSRF guard on the executor dispatch path (provider baseUrl) Xiangzhe 2026-08-21 14:01:27 -03:00
  • 38a2f8ba4d fix(security): enforce per-key policy for a bare x-api-key (allowedModels bypass) Xiangzhe 2026-08-21 13:53:24 -03:00
  • c46f048ca2 fix(security): bind MCP memory tools to the authenticated caller (IDOR) Xiangzhe 2026-08-21 13:49:45 -03:00
  • efece42fec docs(docker): N independent DATA_DIRs scale out large /v1/responses (#11024) (#11027) Ravi Tharuma 2026-08-21 19:17:37 +02:00
  • f24226f219 docs: document runtime RAM for coding-agent /v1/responses (#10983) Ravi Tharuma 2026-08-21 19:17:25 +02:00
  • 137e49e393 feat(search): first-class X Search via SuperGrok x_search (#10988) Ravi Tharuma 2026-08-21 19:16:42 +02:00
  • 9459546621 fix(providers): 401 when active terminal grok-cli credentials expire (#10969) (#10971) Ravi Tharuma 2026-08-21 19:00:46 +02:00
  • 0fffb4548e feat(api): alias GET/HEAD /readyz to /healthz (#10977) Ravi Tharuma 2026-08-21 19:00:42 +02:00
  • fefca17762 fix(db): pause call-log rotate on SQLITE_CORRUPT (#10979) Ravi Tharuma 2026-08-21 19:00:39 +02:00
  • 143fd78a1a fix(search): skip catalog-default SearXNG localhost:8888 (#10981) Ravi Tharuma 2026-08-21 19:00:35 +02:00
  • 3f0b4caa98 fix(codex): drop non-standard SSE events by default (#11014) (#11019) Ravi Tharuma 2026-08-21 19:00:31 +02:00
  • 30e20c6b60 fix(startup): log when credential health check is disabled (#11016) (#11021) Ravi Tharuma 2026-08-21 19:00:27 +02:00
  • eba58cc8b4 docs(api-keys): unset DEFAULT_RATE_LIMIT_PER_DAY is unlimited (#11017) (#11022) Ravi Tharuma 2026-08-21 19:00:23 +02:00
  • 79e1a8f9c6 fix(providers): remove dead existingConnections lookups on connection creation (#10973) Dizzle 2026-08-21 18:59:03 +02:00
  • 464ccb3142 fix(providers): remove ALLOW_MULTI_CONNECTIONS_PER_COMPAT_NODE, a flag that governs nothing (#10974) Dizzle 2026-08-21 18:59:00 +02:00
  • 1f4bde1817 fix(sse): guard reasoning-cache write by the same predicate its readers use (#10978) Dizzle 2026-08-21 18:58:56 +02:00
  • bc0a272bfc fix(accounts): carry failure kind on rotation — transient cools down, terminal evicts (#11008) Dizzle 2026-08-21 18:58:51 +02:00
  • 8d076327f1 fix(providers): route terminal testStatus writes through a single origin-aware passage (#11009) Dizzle 2026-08-21 18:58:48 +02:00
  • 054cfae044 fix(cli): always emit limit.output in OpenCode config (#10940) (#11010) Diego Rodrigues de Sa e Souza 2026-08-21 13:57:56 -03:00
  • 48addd51df fix(cli): combo create cannot accept models — add --models option (#10954) (#11011) Diego Rodrigues de Sa e Souza 2026-08-21 13:57:52 -03:00
  • a492d6d780 fix(sse): combo diagnostics provider/connection truncation and quota recovery hint (#10967, #10966) (#11012) Diego Rodrigues de Sa e Souza 2026-08-21 13:57:49 -03:00
  • effc542a6a fix(cli): generated combo PATCH sends literal {id} — resolve $ref params + requestBody (#10955) (#11013) Diego Rodrigues de Sa e Souza 2026-08-21 13:57:46 -03:00
  • 60829241fd fix(security): close 4 STILL-REAL advisory findings (ACP RCE hardening, db-backups tier, uppercase authz bypass, spawn-veto drift) (#11028) Diego Rodrigues de Sa e Souza 2026-08-21 13:57:42 -03:00
  • c130f2aa1c feat(providers): Cursor PKCE login with Bearer quota, auto router, and empty-turn errors (#9909) SB Yoon 2026-08-21 07:28:01 -06:00
  • 089a5e7cab fix(quality): register GrokBuildToolCard.tsx eslint suppression (dropped uncommitted in #10778) Markus Hartung 2026-08-21 10:04:15 -03:00
  • ad3f7bc008 fix(ci): clear base-reds on release/v3.8.50 (ESLint / dead-code / vitest) (#9985) (#10778) Diego Rodrigues de Sa e Souza 2026-08-21 09:27:06 -03:00
  • 154c2945d1 feat(docker): add hardened Linux VPS deployment (#10623) freudantunes 2026-08-21 06:50:36 -05:00
  • 63c0125c1e feat(providers): tool calling for copilot-m365-web via router planning (#10948) acc0mplish 2026-08-21 20:50:24 +09:00
  • d1e5a572dd fix(onboarding): add warning when skipping password in setup wizard (#10855) Krishna lokhande 2026-08-21 17:20:21 +05:30
  • 1f09e2f9b3 feat(rankings): report what a free provider actually served (#10926) Dizzle 2026-08-21 13:25:23 +02:00
  • 1c1e45c2a1 fix(desktop): pin the NSIS artifact name so the Windows updater stops 404ing (#10947) (#10958) Nguyen Thanh Dat 2026-08-21 18:25:17 +07:00
  • 28924fe05b fix(models): enforce a synced model's real context window and default effort immediately (#10957) Mr White 2026-08-21 19:25:14 +08:00
  • 6ec6940314 fix(catalog): preserve provider effort tiers (#10953) Xiangzhe 2026-08-21 19:25:10 +08:00
  • e708030adf fix(resilience): make least-used rotate by recording the use it sorts on (#10945) (#10951) Nguyen Thanh Dat 2026-08-21 18:25:07 +07:00
  • 14d2c90e23 fix(executor): respect apiType="chat" in forceResponsesUpstream (#5483 regression) (#10946) Jack Smith 2026-08-21 19:25:03 +08:00
  • 7011c5fafa fix(cli): repair hollow externalized package dirs in nested distDir node_modules (#7346) (#10924) Diego Rodrigues de Sa e Souza 2026-08-21 08:02:26 -03:00
  • a8ca9575f2 fix: add cold-restart native-driver regression check to electron smoke (#7592) (#10921) Diego Rodrigues de Sa e Souza 2026-08-21 08:02:22 -03:00
  • 0f35febd24 fix(executors): report WS readyState in Meta AI timeout error (#10727) (#10916) Diego Rodrigues de Sa e Souza 2026-08-21 08:02:19 -03:00
  • 410a061eaf fix(security): clear new CodeQL code-scanning alerts (round 2) (#10888) Diego Rodrigues de Sa e Souza 2026-08-21 08:02:16 -03:00
  • 53608c8cb4 [v3.8.50] refactor(tls): consolidate 6 TLS client providers into shared factory + wrappers (reopen) (#10910) Paijo 2026-08-21 14:26:30 +07:00
  • 6efb01a957 feat(sse): add kimi web token lifecycle manager, rolling auto-refresh and 401 recovery (#10944) Reza Rezaei 2026-08-21 09:25:56 +02:00
  • 65dcb1d1ed feat(resilience): stop retrying sibling connections after an IP-bucketed 429 (#10920) Dizzle 2026-08-21 09:25:22 +02:00