OmniRoute

.gitkeep

feat(release): changelog.d/ fragments — eliminate the CHANGELOG merge-storm cascade (#6783 )

2026-07-10 07:22:49 -03:00

180-3980-responses-completed-tool-calls.md

fix(translator): synthesize tool call chunks from response.completed batched output (#7613 )

2026-07-18 21:20:01 -03:00

1037-vercel-relay-sso-protection-check.md

fix(api): check Vercel SSO-protection PATCH response on relay deploy (#7119 )

2026-07-16 14:13:57 -03:00

1253-kiro-sso-cache-clientid.md

fix(oauth): resolve Kiro AWS SSO cache client credentials by clientId match (port from 9router#1253) (#7122 )

2026-07-17 10:39:29 -03:00

1382-streaming-empty-content-block.md

fix(combo): detect empty content_block in streaming SSE peek (#7121 )

2026-07-16 14:14:12 -03:00

1556-openai-regex-lookaround.md

fix(codex): strip regex lookaround from tool schema patterns (#7100 )

2026-07-16 14:13:03 -03:00

1809-mitm-stop-dns-before-kill.md

fix(cli): remove MITM DNS spoof entries before killing server process (#7117 )

2026-07-16 14:13:50 -03:00

1811-composer-space-sep.md

fix(sse): handle space-separated arg name/value in Composer tool calls (port from 9router#1811) (#7116 )

2026-07-16 14:13:43 -03:00

1904-custom-model-vision-toggle.md

[needs-vps] fix(dashboard): add vision-capability toggle for custom OpenAI-compatible models (#7124 )

2026-07-17 01:01:18 -03:00

1905-fusion-panel-oom.md

fix(combos): reject oversized fusion panels before fan-out (port from 9router#1905) (#7120 )

2026-07-16 14:14:05 -03:00

2032-openai-compatible-check-404-warning.md

fix(providers): surface a warning on 404 model_not_found in OpenAI-compatible Check (port from 9router#2032) (#7103 )

2026-07-16 14:13:18 -03:00

2057-combo-custom-provider-models.md

fix(dashboard): include never-tested connections in combo builder active-provider list (port from 9router#2057) (#7118 )

2026-07-17 10:50:25 -03:00

2413-preserve-agent-headers.md

fix(executors): forward X-Session-ID/X-Title agent metadata headers (#7104 )

2026-07-16 14:13:26 -03:00

2461-antigravity-streaming-403-raw-bytes.md

fix(sse): sanitize non-ok Antigravity streaming error body (port from 9router#2461) (#7106 )

2026-07-16 14:55:21 +00:00

2482-minimax-image-provider.md

fix(providers): add MiniMax image-generation provider (#7108 )

2026-07-17 10:39:25 -03:00

2493-better-sqlite3-abi-validation.md

fix(cli): verify better-sqlite3 native binary is actually loadable (#7105 )

2026-07-16 14:13:33 -03:00

2540-gpt5-tools-reasoning-effort.md

fix(openai): strip reasoning_effort when GPT-5.x models carry function tools (#7101 )

2026-07-17 10:43:37 -03:00

5716-proxy-pool-relayauth-dropped.md

fix: preserve relayAuth for pool-referenced relay proxies (#5716 ) (#7182 )

2026-07-14 21:13:45 -03:00

6142-6142-devin-unified-api.md

fix(providers): wire devin cloud-agent into provider validation and static models (#6142 ) (#6894 )

2026-07-12 01:59:53 -03:00

6271-baidu-qianfan-website-urls.md

fix(providers): refresh Baidu ERNIE and Qianfan website URLs (#6271 ) (#8128 )

2026-07-22 17:37:38 -03:00

6272-6272-mimo-proxy.md

fix(providers): honor a provider-level proxy assigned to no-auth providers (#6272 ) (#6895 )

2026-07-11 11:21:22 -03:00

6276-toolcall-args-logs.md

fix(api): merge id-only tool_call continuation deltas in stream summary (#6276 ) (#6905 )

2026-07-11 11:22:22 -03:00

6280-lmarena-arena-modernize.md

fix(lmarena): modernize Arena web provider + static Direct-chat catalog (#6280 )

2026-07-11 01:33:24 -03:00

6308-web-model-discovery.md

docs(changelog): reconcile 3-day merge burst — 16 fragments, 4 promised credits, contributors hall 32→63

2026-07-11 02:10:15 -03:00

6323-log-detail-stale-reopen.md

docs(changelog): reconcile 3-day merge burst — 16 fragments, 4 promised credits, contributors hall 32→63

2026-07-11 02:10:15 -03:00

6330-sensenova-token-plan.md

fix(providers): update SenseNova Token Plan support (#6330 )

2026-07-10 18:05:46 -03:00

6343-6343-v0web-creds.md

fix(providers): give v0-vercel-web its own alias so credentials are detected (#6343 ) (#6891 )

2026-07-12 01:59:44 -03:00

6377-6377-agentrouter-key.md

fix(providers): route AgentRouter key validation through CC wire image (#6377 ) (#6882 )

2026-07-12 02:00:19 -03:00

6401-6401-usage-migrations.md

fix(db): stop legacy log-archive migration from deleting the live app-logger directory and crashing startup on a stat/stream race (#6401 ) (#6898 )

2026-07-12 02:00:02 -03:00

6409-6409-build-ram.md

fix(docs): document Turbopack build memory tradeoff for RAM-constrained machines (#6409 ) (#6885 )

2026-07-11 11:20:56 -03:00

6479-6479-compression-pipeline.md

fix(compression): surface silently-dropped stacked-pipeline steps and fix inflation-guard no-op misfire (#6479 , #6480 , #6491 ) (#6901 )

2026-07-11 11:21:52 -03:00

6524-6524-reasoning-buffer-clamp.md

fix(providers): honor max_token capability override in reasoning buffer clamp (#6524 ) (#6904 )

2026-07-11 11:22:15 -03:00

6538-tier-flow-svg-public.md

docs(changelog): reconcile 3-day merge burst — 16 fragments, 4 promised credits, contributors hall 32→63

2026-07-11 02:10:15 -03:00

6557-6557-disabled-provider.md

fix(routing): honor no-auth provider connection isActive in auto-combo pool (#6557 ) (#6889 )

2026-07-12 01:59:35 -03:00

6586-preserve-server-tool-names.md

docs(changelog): reconcile 3-day merge burst — 16 fragments, 4 promised credits, contributors hall 32→63

2026-07-11 02:10:15 -03:00

6612-combo-diagnostics-header-bytestring-crash.md

fix: sanitize non-Latin1 chars in combo diagnostic headers (#6612 ) (#7190 )

2026-07-14 21:19:16 -03:00

6623-6623-mimo-502-messages.md

fix(api): recognize OpenRouter reasoning/reasoning_details in non-streaming OpenAI-to-Claude conversion (#6623 ) (#6887 )

2026-07-12 02:00:23 -03:00

6628-6628-sqljs-adapter.md

fix(db): share sql.js preinit across callers, fix named-param bind (#6628 , #6802 ) (#6899 )

2026-07-11 11:21:37 -03:00

6632-probe-restore-loop-cycle-breaker.md

fix(db): break probe-failed/restore loop on large storage.sqlite (#6632 )

2026-07-10 15:39:13 -03:00

6634-6634-testmasking-selfref.md

fix(ci): exclude check-test-masking.test.ts fixtures from self-referential tautology gate (#6634 ) (#6884 )

2026-07-12 01:59:25 -03:00

6637-6637-combo-kimi-fallback.md

fix(routing): recognize Kimi token-limit 400 as context overflow for combo fallback (#6637 ) (#6893 )

2026-07-11 11:21:14 -03:00

6647-winget-claude-detect.md

docs(changelog): reconcile 3-day merge burst — 16 fragments, 4 promised credits, contributors hall 32→63

2026-07-11 02:10:15 -03:00

6675-remove-obsolete-providers.md

docs(changelog): reconcile 3-day merge burst — 16 fragments, 4 promised credits, contributors hall 32→63

2026-07-11 02:10:15 -03:00

6698-count-gate-rejected-usage.md

docs(changelog): reconcile 3-day merge burst — 16 fragments, 4 promised credits, contributors hall 32→63

2026-07-11 02:10:15 -03:00

6699-jules-chat-executor-misroute.md

fix(providers): reject chat requests for cloud-agent-only jules provider (#6699 ) (#7193 )

2026-07-14 21:13:48 -03:00

6704-unwrap-bare-function-tool.md

fix(sse): unwrap bare {function:{…}} tools in openai→claude translation (#6704 )

2026-07-10 19:39:04 -03:00

6706-codex-oauth-bare-email-dedup.md

fix(oauth): avoid bare-email dedup of Codex OAuth logins (#6706 )

2026-07-10 19:39:11 -03:00

6710-codex-200-sse-capacity-error.md

fix(codex): surface capacity errors embedded in 200-OK SSE streams (#6710 )

2026-07-10 19:39:23 -03:00

6712-volcengine-kimi-max-tokens.md

fix(volcengine): clamp Kimi max_tokens to Ark endpoint cap (#6712 )

2026-07-10 19:39:35 -03:00

6713-antigravity-abort-finish-reason.md

fix(antigravity): surface aborted Gemini tool calls off end_turn (#6713 )

2026-07-10 19:39:44 -03:00

6714-reasoning-buffer-cap-aware.md

Clamp reasoning token buffer to model output cap (#6714 )

2026-07-11 02:10:56 -03:00

6717-cli-health-monitoring-route.md

fix(api): point CLI health command at /api/monitoring/health (#6677 ) (#6717 )

2026-07-10 18:06:00 -03:00

6718-reasoningcontrols-case-collision.md

fix(startup): rename reasoningControls.ts to avoid webpack casing collision (#6584 ) (#6718 )

2026-07-10 19:38:04 -03:00

6720-turbopack-agentskills-warning.md

fix(build): suppress Turbopack over-bundling warning from agentSkills generator (#6582 ) (#6720 )

2026-07-10 19:38:15 -03:00

6721-codex-spark-image-drop.md

docs(changelog): reconcile 3-day merge burst — 16 fragments, 4 promised credits, contributors hall 32→63

2026-07-11 02:10:15 -03:00

6722-quota-card-fixed-order.md

fix(providers): stop quota card re-sorting Codex/GLM bars by remaining % (#6687 ) (#6722 )

2026-07-10 19:38:35 -03:00

6723-i18n-pt-br-backfill.md

fix(i18n): backfill 194 missing pt-BR keys (#6695 ) (#6723 )

2026-07-11 05:04:42 -03:00

6725-lazy-ioredis-mcp.md

fix(startup): lazy-import ioredis in rateLimiter to fix MCP ERR_MODULE_NOT_FOUND (#6559 ) (#6725 )

2026-07-10 19:38:41 -03:00

6726-kiro-adaptive-thinking-allowlist.md

fix(providers): Kiro adaptive-thinking allowlist excludes sonnet-4.5/haiku-4.5 (#6576 ) (#6726 )

2026-07-10 19:54:17 -03:00

6729-cursor-subagent-strip-cloud-base.md

fix(translator): strip empty cloud_base_branch from Cursor Subagent tool call (#6729 )

2026-07-10 19:39:50 -03:00

6730-glm-split-tool-name.md

fix(translator): defer content_block_start until GLM streams the tool name (#6730 )

2026-07-10 19:39:56 -03:00

6731-apikey-429-quota-exhausted.md

fix(resilience): apikey-provider 429s honor explicit quota-exhausted text (#6638 ) (#6731 )

2026-07-10 19:47:05 -03:00

6732-fp-pinned-combo-resolve.md

fix(resilience): resolve fp-pinned combo account back to real connection id (#6696 ) (#6732 )

2026-07-10 19:38:47 -03:00

6735-responses-commentary-event-frame.md

fix(api): Responses passthrough emits event-only SSE frames after filtering commentary output (#6561 ) (#6735 )

2026-07-10 19:38:52 -03:00

6741-compression-preview-token-reconcile.md

fix(compression): reconcile outer vs per-engine token counts (#6488 ) (#6741 )

2026-07-10 15:08:30 -03:00

6742-quota-preflight-coverage.md

fix(resilience): route remaining credential-selection call sites through quota preflight (#6686 ) (#6742 )

2026-07-10 19:45:06 -03:00

6743-reasoning-content-web-sse.md

fix(api): emit reasoning_content on claude-web + v0-vercel-web SSE (#6662 ) (#6743 )

2026-07-10 19:38:58 -03:00

6757-rtk-enable-renderers-schema.md

docs(changelog): reconcile 3-day merge burst — 16 fragments, 4 promised credits, contributors hall 32→63

2026-07-11 02:10:15 -03:00

6759-cookie-provider-apikey-cap.md

docs(changelog): reconcile 3-day merge burst — 16 fragments, 4 promised credits, contributors hall 32→63

2026-07-11 02:10:15 -03:00

6764-fusion-combo-ref.md

fix(routing): resolve nested combo-ref panel members in fusion strategy (#6764 ) (#7259 )

2026-07-17 10:41:13 -03:00

6766-6766-auto-update.md

fix(ci): publish electron-updater latest.yml manifests in release assets (#6766 ) (#6881 )

2026-07-12 01:59:21 -03:00

6769-i18n-translate-pt-dashboard.md

fix(i18n): translate hardcoded Portuguese dashboard strings to English (#6769 )

2026-07-10 18:05:36 -03:00

6772-6772-connid-model-400.md

fix(providers): strip redundant node prefix on connId-addressed custom models (#6772 ) (#6890 )

2026-07-12 01:59:40 -03:00

6773-6773-nim-404.md

fix(providers): scope nvidia NIM 404s to the single failing model (#6773 ) (#6888 )

2026-07-12 02:00:32 -03:00

6780-bump-codex-client-version.md

fix(codex): bump default client version to 0.144.0 (#6780 )

2026-07-11 07:39:55 -03:00

6788-tia-dashboard-loader.md

ci(quality): TIA impacted-run splits dashboard tests onto the tsx loader (closes #6787 ) (#6788 )

2026-07-10 07:23:17 -03:00

6790-gemini-pdf-video-attachments.md

docs(changelog): reconcile 3-day merge burst — 16 fragments, 4 promised credits, contributors hall 32→63

2026-07-11 02:10:15 -03:00

6791-deepseek-web-done-after-finished.md

fix(providers): ensure DeepSeek Web SSE emits [DONE] after FINISHED (#6791 )

2026-07-10 18:37:05 -03:00

6792-compression-put-all-catalog-engines.md

fix(api): accept all catalog engines on compression PUT schema (#6792 )

2026-07-10 18:05:55 -03:00

6794-electron-turbopack-symlinks.md

[needs-vps] fix(electron): materialize Turbopack hashed-module symlinks during packaging (#6724 , #6594 ) (#6794 )

2026-07-17 01:01:48 -03:00

6795-cursor-client-version-build-id.md

fix(cursor): use Agent CLI build id for x-cursor-client-version (#6795 )

2026-07-10 19:04:51 -03:00

6800-6800-listen-banner-early.md

fix(cli): waitForServer must not report ready on bare TCP accept (#6800 ) (#6892 )

2026-07-12 01:59:49 -03:00

6803-6803-flaky-timing-tests.md

fix(sse): de-flake timing-sensitive combo cooldown/breaker tests (#6803 ) (#6897 )

2026-07-12 01:59:57 -03:00

6805-strip-include-compact-responses.md

fix(codex): strip include from compact responses requests (#6805 )

2026-07-10 18:05:31 -03:00

6806-6806-claude-quota-data.md

fix(dashboard): surface Claude extraUsage credits in quota card (#6806 ) (#6896 )

2026-07-11 11:21:30 -03:00

6812-request-count-by-provider-date.md

feat: request count log per provider, per date (#4009 ) (#6812 )

2026-07-10 19:40:18 -03:00

6817-ollama-cloud-weekly-quota.md

feat(resilience): weekly-429 cooldown for fetcher-less providers (#3709 ) (#6817 )

2026-07-10 19:50:38 -03:00

6821-budget-tokens-zero-gemini.md

docs(changelog): reconcile 3-day merge burst — 16 fragments, 4 promised credits, contributors hall 32→63

2026-07-11 02:10:15 -03:00

6828-bootstrap-filter-empty-env.md

fix(bootstrap): filter empty process.env values to prevent Docker env crash loop (#6828 )

2026-07-10 18:05:41 -03:00

6829-classify-404-model-not-found.md

fix(providers): classify 404 as MODEL_NOT_FOUND to stop retry storm (#6829 )

2026-07-10 18:05:51 -03:00

6835-db-oom-probe-cyclebreaker.md

fix(db): cap OOM probe-failure cycle in getDbInstance() (#6835 ) (#7186 )

2026-07-14 21:13:51 -03:00

6854-6854-mcp-toolcount.md

fix(mcp): de-duplicate TOTAL_MCP_TOOL_COUNT by tool name (#6854 ) (#6902 )

2026-07-11 11:22:00 -03:00

6856-usage-exact-cost-strict-validation.md

fix(usage): strict validation for xAI exact provider-reported cost (#6856 )

2026-07-12 02:04:20 -03:00

6859-plugin-provider-id.md

fix(plugin): split OC-gate provider id from OmniRoute-facing routing id (#6859 ) (#6900 )

2026-07-11 11:21:45 -03:00

6876-6876-cliproxy-modelmap.md

fix(sse): apply cliproxyapiModelMapping at CLIProxyAPI dispatch time (#6876 ) (#6903 )

2026-07-11 11:22:08 -03:00

6906-responses-usage-trailing.md

fix(sse): defer response.completed until trailing usage-only chunk (#6906 ) (#6965 )

2026-07-12 10:23:33 -03:00

6908-standalone-head-response-guard.md

fix(cli): ship head-response-guard.cjs in the standalone bundle (#6908 )

2026-07-12 02:00:09 -03:00

6911-quota-throttle-all-fetchers.md

fix(sse): wire shared quota-fetch throttle into all provider fetchers (#6911 ) (#6963 )

2026-07-12 10:23:19 -03:00

6912-volcengine-max-tokens-rename.md

fix(sse): rename max_completion_tokens to max_tokens for volcengine/DeepSeek (#6912 ) (#6964 )

2026-07-12 10:23:26 -03:00

6916-provider-limits-spacing-local.md

fix: honor PROVIDER_LIMITS_SYNC_SPACING_MS for local/API-key connections (#6916 ) (#7214 )

2026-07-17 10:39:54 -03:00

6925-embeddings-lan-noauth.md

fix(sse): classify LAN embeddings providers as no-auth (#6925 ) (#6962 )

2026-07-12 10:23:54 -03:00

6927-qwen-web-content-array.md

fix(sse): flatten structured (array) content in Qwen Web executor (#6927 )

2026-07-12 10:26:58 -03:00

6930-relay-checkratelimit-token-reuse.md

perf: thread pre-fetched token to checkRateLimit avoiding re-query (#6930 )

2026-07-12 10:30:26 -03:00

6932-codex-assistant-input-text-normalization.md

fix(sse): normalize assistant input_text to output_text in Codex Responses input (#6932 )

2026-07-12 10:47:51 -03:00

6935-muse-spark-attachments.md

fix(sse): omit removed attachments field from Muse Spark Web request (#6935 ) (#6960 )

2026-07-12 10:23:40 -03:00

6936-providercard-audio-badge.md

fix(dashboard): label audio/embeddings/image compatible providers by kind on ProviderCard (#6936 ) (#6961 )

2026-07-12 10:23:47 -03:00

6939-lmstudio-models-guard.md

fix(api): use local-first SSRF guard for LAN model-list discovery (#6939 ) (#6966 )

2026-07-12 10:24:01 -03:00

6943-gemini-thinking-none-effort.md

fix(6813): fix thinking budget zero drop and default thinkingConfig injection (#6943 )

2026-07-12 10:49:07 -03:00

6944-chatgpt-web-citation-backslash-escape.md

fix(sse): escape backslash in ChatGPT-web citation link text (#6569 ) (#6944 )

2026-07-12 10:26:21 -03:00

6947-tokenhealthcheck-provider-case.md

fix(tokenHealthCheck): case-sensitive provider comparisons break rotating/gh checks (#6947 )

2026-07-12 10:29:48 -03:00

6951-codex-optional-tool-params.md

fix(sse): schema-aware optional tool-arg normalization for Codex routes (#6951 ) (#6992 )

2026-07-12 18:08:07 -03:00

6952-commentary-translate-mode.md

fix(sse): apply commentary-phase drop filter in TRANSLATE mode (#6952 ) (#6990 )

2026-07-12 18:07:49 -03:00

6953-empty-signature-thinking-block.md

fix(sse): sanitize empty-signature thinking blocks + hoist strict-provider system messages (#7583 )

2026-07-17 07:04:49 -03:00

6955-perplexity-web-empty-content.md

fix(perplexity-web): stop empty-content responses from live schematized SSE (#6955 )

2026-07-19 20:52:31 -03:00

6975-6957-combo-builder-models.md

fix(combos): show embedding/rerank models and disambiguate duplicate names in builder options (#6975 , #6957 ) (#6991 )

2026-07-12 18:07:58 -03:00

6984-hide-disabled-connections-combos.md

fix(dashboard): hide disabled provider connections from combo builder (#6984 )

2026-07-17 10:39:18 -03:00

6986-grok-cli-tools-cap.md

fix(providers): cap grok-cli tools at 200 for cli-chat-proxy (#6986 )

2026-07-17 10:52:26 -03:00

6996-duckduckgo-vqd-429-misclassified.md

fix(providers): DuckDuckGo VQD 429 misclassified as 503 (#6996 ) (#7185 )

2026-07-14 21:21:49 -03:00

6998-opencode-oc-free-tier-catalog.md

fix(providers): refresh OpenCode (oc) free-tier model catalog (#6998 ) (#7188 )

2026-07-14 21:21:44 -03:00

7003-jetbrains-ai-loopback-connect.md

fix: raise main server keepAliveTimeout/headersTimeout above Node's 5s default (#7003 ) (#7191 )

2026-07-14 23:25:09 -03:00

7005-adaptive-context-budget-dial.md

fix: wire adaptive context-budget dial into settings schema and DB (#7005 ) (#7183 )

2026-07-14 21:45:17 -03:00

7022-opencode-go-quota-url-zai.md

fix: stop opencode-go quota lookup defaulting to Z.AI endpoint (#7022 ) (#7187 )

2026-07-14 21:45:23 -03:00

7032-auggie-model-ids-v032.md

fix(auggie): update model registry to match v0.32.0 CLI model IDs (#7032 )

2026-07-18 11:33:57 -03:00

7033-dashboard-typecheck-gate.md

fix: add dashboard-scoped typecheck gate covering src/app/(dashboard) TSX (#7033 ) (#7203 )

2026-07-14 23:24:14 -03:00

7049-dashboard-port-env-fallback.md

fix(cli): omniroute dashboard respects PORT env when --port is omitted (#7049 ) (#7252 )

2026-07-17 10:41:02 -03:00

7051-turbopack-compression-ignoreissue.md

fix: extend turbopack ignoreIssue suppression to compression module (#7051 ) (#7180 )

2026-07-14 21:22:51 -03:00

7058-zai-web-proxy-connection-test.md

fix: route zai-web (and other registry-entry web-cookie providers) connection-test cookie probe through the configured proxy (#7058 ) (#7192 )

2026-07-14 21:13:53 -03:00

7071-ollama-cloud-session-quota.md

fix: recognize Ollama Cloud session usage-limit 429 as quota-exhausted (#7071 ) (#7181 )

2026-07-14 21:45:20 -03:00

7072-quota-card-grid-mobile.md

fix: restore mobile grid-cols-1 fallback on quota page card grid (#7072 ) (#7194 )

2026-07-14 21:13:56 -03:00

7080-proxy-test-connection-saved-proxyid.md

fix: include proxyId when testing a saved registry proxy (#7080 ) (#7189 )

2026-07-14 21:13:58 -03:00

7098-mimo-thinking-model-reasoning-content.md

fix(sse): recognize xiaomi-tokenplan mimo as a thinking-mode model (#7098 )

2026-07-16 14:12:56 -03:00

7125-onboarding-tiers-layout.md

[needs-vps] fix(dashboard): align onboarding tier content (#7125 )

2026-07-17 01:01:29 -03:00

7134-claude-web-400-no-response-body.md

fix: surface real claude-web error body for non-SSE 400s (#7134 ) (#7196 )

2026-07-14 21:14:01 -03:00

7149-combo-scope-proxy-dead.md

fix: honor combo-level proxy assignments from the registry (#7149 ) (#7201 )

2026-07-14 21:21:47 -03:00

7151-hermes-agent-model-aliases.md

fix: wire modelAliases fetch into HermesAgentToolCard (#7151 ) (#7195 )

2026-07-14 21:21:52 -03:00

7156-legacy-model-picker-hidden-filter.md

fix: filter hidden custom models out of legacy combo model picker (#7156 ) (#7199 )

2026-07-14 21:45:25 -03:00

7157-agent-bridge-dns-405.md

fix(dashboard): agent bridge dns toggle uses POST, not PUT (#7157 ) (#7197 )

2026-07-14 21:14:04 -03:00

7161-free-pool-handletogglesource.md

fix(dashboard): implement missing handleToggleSource on Free Pool tab (#7161 ) (#7200 )

2026-07-14 21:15:54 -03:00

7163-gemini-web-duplicated-text.md

fix: stop duplicating text in Gemini Web streamed responses (#7163 ) (#7198 )

2026-07-14 21:21:55 -03:00

7171-codex-responses-lite-parallel-tools.md

fix(executors): disable parallel tools for Codex Responses Lite (#7171 )

2026-07-18 21:18:06 -03:00

7206-preserve-reasoning-openai-bridge.md

fix(translator): preserve Gemini thought parts as reasoning_content on the OpenAI bridge (#7206 )

2026-07-17 10:39:32 -03:00

7207-openai-projection-gemini-clients.md

fix(translator): register openai response projection for gemini clients (#7207 )

2026-07-17 10:39:35 -03:00

7208-cli-version-fastpath.md

fix(cli): fast-path --version to skip full CLI bootstrap (#7208 )

2026-07-17 10:39:39 -03:00

7226-dast-smoke-backend-only.md

fix(ci): build API-only smoke workflows backend-only to fix dast-smoke timeouts (#7226 ) (#7758 )

2026-07-19 09:55:31 -03:00

7234-bulk-add-keys-no-overwrite.md

fix(api): bulk-add API keys no longer overwrite existing connections (#7234 )

2026-07-17 10:40:29 -03:00

7237-vision-compression-authoritative-capability.md

fix(sse): feed compression pipeline the authoritative vision capability (#7237 ) (#7560 )

2026-07-17 05:32:09 -03:00

7242-openai-gpt56-responses-routing.md

fix(sse): route the public OpenAI GPT-5.6 family through the Responses API (#7242 )

2026-07-17 10:40:45 -03:00

7244-grok-cli-honor-proxy.md

fix(providers): honor configured proxy on Grok Build egress (#7244 )

2026-07-17 10:43:33 -03:00

7247-nvidia-nim-catalog.md

fix(nvidia): expand NIM chat model catalog (#7247 )

2026-07-17 10:40:52 -03:00

7248-claude-bypass-content-reconstruction.md

fix(sse): reconstruct Claude-format content in synthetic bypass responses (#7248 )

2026-07-17 10:40:56 -03:00

7249-windows-build-isolation.md

fix(build): isolate Windows HOME/AppData during next build (#7249 )

2026-07-17 10:40:59 -03:00

7250-provider-model-filter-live-catalog.md

fix(dashboard): providers model-name filter matches live/synced catalog (#7250 ) (#7561 )

2026-07-17 05:01:23 -03:00

7253-release-green-drift.md

fix(docs): heal release-green docs drift + eslint any-suppression drift (#7253 ) (#7755 )

2026-07-19 09:38:57 -03:00

7255-nonstreaming-gemini-family-projection.md

fix(sse): project non-streaming JSON back to the Gemini/Antigravity envelope (#7255 )

2026-07-17 10:41:06 -03:00

7258-zhtw-missing-placeholder.md

fix(i18n): treat __MISSING__ sync placeholders as absent in EN fallback (#7258 ) (#7556 )

2026-07-17 04:23:30 -03:00

7263-settings-local-only.md

fix(authz): classify forge/jcode CLI settings routes as LOCAL_ONLY (#7263 ) (#7749 )

2026-07-19 09:39:13 -03:00

7265-termux-playwright-static-import.md

fix(sse): lazy-load playwright in claudeTurnstileSolver (#7265 ) (#7566 )

2026-07-17 05:32:17 -03:00

7266-proxyfetch-caller-abort-log.md

fix(sse): silence noisy proxy-failure log on caller-initiated abort (#7266 )

2026-07-17 10:41:34 -03:00

7268-model-not-supported-401-lockout.md

fix(sse): 401 model-not-supported lockout + sticky quota-exhausted release (#7268 , #7387 ) (#7580 )

2026-07-17 06:11:51 -03:00

7272-costs-page-500.md

fix(dashboard): resolve costs page 500 from out-of-scope t() in TopListCard (#7272 ) (#7564 )

2026-07-17 06:11:35 -03:00

7275-windows-cert-check-uninstall-hardcoded-legacy-host.md

fix(cli): Windows cert check/uninstall key off the real CA identity, not a hardcoded legacy host (#7275 ) (#7557 )

2026-07-17 05:01:16 -03:00

7279-cli-detector-windows-drift.md

fix(cli): reuse win32-aware locateCommand in tool-detector (#7279 ) (#7569 )

2026-07-17 06:36:04 -03:00

7284-conn-test-429.md

fix(dashboard): surface rate-limit warning on 429 chat-probe (#7284 ) (#7565 )

2026-07-17 05:32:25 -03:00

7285-combo-finish-reason.md

fix(sse): combo failover for OpenAI streams truncated without finish_reason (#7285 ) (#7568 )

2026-07-17 05:32:32 -03:00

7288-sqljs-preinit-ordering-gap.md

fix(db): pre-init sql.js WASM ahead of any getDbInstance() consumer (#7288 ) (#7562 )

2026-07-17 06:11:27 -03:00

7289-cursor-effort-suffix.md

fix(sse): split effort/reasoning suffix off pinned cursor model ids (#7289 ) (#7577 )

2026-07-17 06:11:59 -03:00

7293-strict-system-message-hoist.md

fix(sse): sanitize empty-signature thinking blocks + hoist strict-provider system messages (#7583 )

2026-07-17 07:04:49 -03:00

7297-bedrock-images.md

fix(sse): stop per-byte enumeration of binary image bytes in log redaction (#7297 ) (#7576 )

2026-07-17 06:12:07 -03:00

7302-cli-electron-env.md

fix(cli): load DATA_DIR/server.env as fallback for .env on Electron migration (#7302 ) (#7759 )

2026-07-19 09:55:44 -03:00

7350-rerank-proxy-pinning.md

fix(rerank): honor the connection's pinned proxy on rerank calls (#7350 ) (#7867 )

2026-07-20 10:09:11 -03:00

7353-electron-hashed-externals.md

fix(electron): normalize hashed standalone externals (#7353 )

2026-07-18 21:18:38 -03:00

7357-chatgpt-web-async-image-messages-array.md

fix(chatgpt-web): recognize update_content.messages[] celsius WS frames (#7357 ) (#7578 )

2026-07-17 06:12:15 -03:00

7364-glm-4.6v-max-tokens-clamp.md

fix(sse): clamp glm-4.6v max_tokens to the 32768 ceiling (#7364 ) (#7585 )

2026-07-17 06:55:41 -03:00

7364-zai-glm-target-format.md

fix(sse): honor per-model targetFormat override for zai/glm-coding-apikey (#7364 ) (#7584 )

2026-07-17 06:46:50 -03:00

7387-sticky-quota-exhausted.md

fix(sse): 401 model-not-supported lockout + sticky quota-exhausted release (#7268 , #7387 ) (#7580 )

2026-07-17 06:11:51 -03:00

7388-codex-ws-history-per-turn.md

fix(cli): log Codex Responses WebSocket history/usage per logical turn, not per connection (#7588 )

2026-07-17 07:11:50 -03:00

7425-voyage-embedding-models.md

fix(embeddings): remove non-existent voyage-multilingual-3.5, add missing models

2026-07-19 20:54:38 -03:00

7490-align-engines-node.md

fix(build): align engines.node with SUPPORTED_NODE_RANGE (#7446 ) (#7490 )

2026-07-18 11:35:22 -03:00

7493-vietnamese-locale-quality.md

fix(i18n): complete Vietnamese dashboard localization and runtime fixes (#7493 )

2026-07-19 22:31:04 -03:00

7494-sqljs-close-poison.md

fix(db): stop closing the sql.js singleton in getDbInstance() probe/reopen (#7494 ) (#8153 )

2026-07-22 11:27:41 -03:00

7521-codex-test-probe-model.md

fix(codex): Test probe uses a ChatGPT-account-supported model (#7521 ) (#7524 )

2026-07-17 02:39:02 -03:00

7522-codex-import-validate-refresh.md

fix(codex): validate refresh_token on import before persisting (#7522 ) (#7525 )

2026-07-17 02:39:11 -03:00

7523-codex-oauth-remote-host.md

fix(oauth): surface tunnel hint when Codex OAuth runs on a remote host (#7523 ) (#7527 )

2026-07-17 02:39:30 -03:00

7529-search-static-catalog.md

fix(providers): derive static model catalogs for search providers from searchTypes (#7589 )

2026-07-17 07:12:38 -03:00

7532-tool-search-responses-to-chat.md

fix(sse): stop dropping tool_search and leaking OpenAI-only params in Responses->Chat translation (#7571 )

2026-07-17 10:41:49 -03:00

7533-verbosity-prompt-cache-key-leak.md

fix(sse): stop dropping tool_search and leaking OpenAI-only params in Responses->Chat translation (#7571 )

2026-07-17 10:41:49 -03:00

7534-usage-provider-display-name.md

fix(api): resolve provider display name and dedup byModel on normalized key (#7534 , #7535 ) (#7573 )

2026-07-17 06:11:43 -03:00

7535-usage-model-dedup-normalized-key.md

fix(api): resolve provider display name and dedup byModel on normalized key (#7534 , #7535 ) (#7573 )

2026-07-17 06:11:43 -03:00

7536-codex-nonstream-peek-body-double-read.md

fix(codex): #7536 check content-type before touching response.body in peek (#7570 )

2026-07-17 10:41:45 -03:00

7540-custom-tool-output-images.md

fix(sse): preserve custom tool output images (#7540 )

2026-07-18 21:19:46 -03:00

7542-arena-cookie-redirect.md

fix(providers): degrade Arena (lmarena) cookie validation redirect to unsupported (#7542 ) (#7710 )

2026-07-19 02:31:19 -03:00

7545-combo-failover-truncated-sse.md

fix(combo): failover when upstream SSE is truncated mid-lifecycle (#7545 )

2026-07-18 22:09:40 -03:00

7547-prefer-public-endpoint-url.md

fix(dashboard): prefer public endpoint URLs (#7547 )

2026-07-18 15:14:18 -03:00

7548-claude-web-ua.md

fix(claude-web): unify Turnstile/executor/fast-path User-Agents behind one fingerprint (#7548 ) (#7711 )

2026-07-19 02:31:26 -03:00

7610-grok-cli-auth-json-paste.md

fix(grok-cli): require full auth.json on OAuth paste import (#7610 ) (#8027 )

2026-07-22 07:06:23 -03:00

7610-grok-proactive-refresh.md

fix(sse): proactively refresh Grok Build OAuth token before dispatch (#7610 ) (#7715 )

2026-07-19 02:34:49 -03:00

7611-grok-cli-function-call-output-sanitize.md

fix(grok-cli): sanitize function_call_output before Grok Build dispatch (#7611 ) (#8030 )

2026-07-22 07:06:15 -03:00

7613-responses-completed-guard-seen-call-ids.md

fix(translator): synthesize tool call chunks from response.completed batched output (#7613 )

2026-07-18 21:20:01 -03:00

7617-nvidia-strip-cache-key.md

fix(routing): strip prompt_cache_key for NVIDIA NIM (#7617 ) (#7709 )

2026-07-19 02:31:15 -03:00

7620-noauth-hidden-filter.md

fix(routing): honor eye-icon hidden models for no-auth providers in auto-combo (#7620 ) (#7750 )

2026-07-19 09:39:08 -03:00

7621-chutes-baseurl.md

fix(providers): correct Chutes registry baseUrl (#7621 ) (#7708 )

2026-07-19 02:31:12 -03:00

7629-provider-flow-consistency.md

fix(providers): unify connection and routing flows (#7629 )

2026-07-18 21:20:09 -03:00

7638-mistral-401-classify.md

fix(providers): classify ambiguous Mistral 401 instead of hard auth error (#7638 ) (#7718 )

2026-07-19 02:31:36 -03:00

7645-cliproxyapi-credential.md

fix(sse): authenticate CLIProxyAPI fallback/passthrough legs with a dedicated credential (#7645 ) (#7712 )

2026-07-19 02:31:23 -03:00

7661-fumadocs-devdep.md

fix(packaging): move fumadocs-mdx to devDependencies (#7661 ) (#7757 )

2026-07-19 09:55:19 -03:00

7662-combos-auto-enumerate-all-variants.md

fix(api): enumerate tiered auto combo endpoints in /api/combos/auto (#7662 )

2026-07-19 23:21:47 -03:00

7676-gemini-persist-cookies.md

fix(sse): persist rotated Gemini web-session cookies via onCredentialsRefreshed (#7676 ) (#7751 )

2026-07-19 09:39:02 -03:00

7680-rtl-physical-utilities.md

fix(dashboard): mirror connection-row action-icon spacing under RTL (#7680 ) (#7835 )

2026-07-20 02:18:01 -03:00

7682-opencode-shared-alias.md

fix(cli): split outboundUrlGuard's DB helpers so setup-opencode packages cleanly (#7682 ) (#7760 )

2026-07-19 09:55:38 -03:00

7693-wildcard-alias.md

fix(sse): wire settings.wildcardAliases into model resolution (#7693 ) (#7748 )

2026-07-19 09:39:17 -03:00

7701-mcp-undici-copy.md

fix(mcp): copy undici into dist/node_modules to prevent hollow-package shadowing crash (#7701 ) (#7756 )

2026-07-19 09:55:25 -03:00

7705-claude-tool-result-id.md

fix(translator): sanitize tool_result.tool_use_id symmetrically with tool_use.id (#7705 ) (#7823 )

2026-07-20 01:43:33 -03:00

7707-proxy-password-rotation.md

fix(db): update proxies on password rotation (#7707 )

2026-07-19 14:37:52 -03:00

7737-codex-multiaccount.md

fix(oauth): require chatgptUserId agreement for Codex account dedup (#7737 ) (#7825 )

2026-07-20 01:43:39 -03:00

7740-phantom-health-popup.md

fix(db): purge in-memory key-health state when a provider connection is deleted (#7740 ) (#7826 )

2026-07-20 01:43:46 -03:00

7744-cache-provider-connections-by-id-nodes.md

IC2: Cache provider connections by ID + provider nodes (#7744 )

2026-07-19 23:38:08 -03:00

7746-ccr-prompt-marker-loss.md

fix(compression): keep a retrievable preamble instead of a bare CCR marker (#7746 ) (#7827 )

2026-07-20 01:43:52 -03:00

7752-antigravity-orphan-tooluse.md

fix(sse): strip orphaned tool_use before antigravity/Vertex Claude dispatch (#7752 ) (#7822 )

2026-07-20 01:43:26 -03:00

7753-windows-cli-path.md

fix(cli): fix Windows CLI detection false negatives (#7753 , #7774 ) (#7831 )

2026-07-20 02:03:37 -03:00

7764-quota-card-order.md

fix(dashboard): fix collapsed quota card session/weekly order (#7764 ) (#7834 )

2026-07-20 02:18:08 -03:00

7773-termux-sqlite-boot.md

fix(db): log fatal boot-time SQLite driver-cascade failure before propagating (#7773 ) (#7828 )

2026-07-20 02:03:24 -03:00

7777-cc-bridge-openai-image-blocks.md

fix(sse): CC bridge loses OpenAI-format image input (OpenCode/Kilo/Cline → AgentRouter) (#7888 )

2026-07-20 15:56:40 -03:00

7787-provider-connections-raw-cache-lazy-decrypt.md

feat(perf): IC2 — cache provider connections by ID + lazy-decrypt credentials (#7787 )

2026-07-19 21:22:42 -03:00

7793-env-doc-sync-redaction.md

fix(docs): document CREDENTIAL_REDACTION_ENABLED and GHE_COPILOT_OAUTH_CLIENT_ID (#7793 ) (#7833 )

2026-07-20 02:18:14 -03:00

7794-pipeline-transient-retry.md

fix(combo): retry transient errors in pipeline strategy (#7794 )

2026-07-19 20:53:01 -03:00

7802-tls-client-native-lib.md

fix(docker): repair tls-client-node native binary after --ignore-scripts (#7802 ) (#7829 )

2026-07-20 02:03:31 -03:00

7812-release-regressions.md

fix(ci): repair release regressions exposed by clean runs (#7812 )

2026-07-20 10:08:25 -03:00

7814-antigravity-onboarding-empty-projectid.md

fix(antigravity): attempt onboarding when projectId is empty (#5193 regression of #2541 ) (#7815 )

2026-07-20 10:08:37 -03:00

7820-amazon-q-static-models.md

fix(api): add amazon-q to the static model catalog (#7820 ) (#7960 )

2026-07-21 08:39:20 -03:00

7821-gpt56-codex-responses-lite.md

fix(sse): preserve parallel_tool_calls for GPT-5.6 delegation under Codex Responses Lite (#7821 ) (#7957 )

2026-07-21 09:03:38 -03:00

7837-release-green-eslint-json.md

fix(quality): tolerate ESLint's trailing unpruned-suppressions text in validate-release-green (#7837 ) (#7962 )

2026-07-21 08:39:26 -03:00

7842-nightly-compat-node2426.md

fix(test): widen ratelimit-admission pollUntil deadline to 10s (#7842 ) (#7971 )

2026-07-21 08:51:41 -03:00

7844-dashboard-no-cmd-fallback.md

fix(cli): use rundll32 instead of cmd.exe for Windows browser fallback in dashboard command (#7844 )

2026-07-20 15:56:08 -03:00

7845-log-detail-structured-error.md

fix(dashboard): safely render structured error objects in Request Logs detail (#7845 ) (#7920 )

2026-07-20 22:22:55 -03:00

7856-copilot-reasoning-text.md

fix(providers): read reasoning_text in Claude-format response translator (#7856 ) (#7919 )

2026-07-20 22:22:49 -03:00

7857-web-cookie-validation-probe.md

fix(providers): treat unreliable web-cookie /models probe status as unsupported, not valid (#7857 ) (#7959 )

2026-07-21 08:39:32 -03:00

7858-copilot-m365-web-empty-frame.md

fix(providers): copilot-m365-web fails loudly on empty turns + tier-aware enterprise invocation (#7858 , #7870 ) (#7958 )

2026-07-21 08:39:37 -03:00

7859-gemini-web-redirect.md

fix(providers): treat public-host 302 as valid in Gemini Web connection test (#7859 ) (#7917 )

2026-07-20 22:22:43 -03:00

7868-reset-password-sqlite-bindings.md

fix(cli): translate missing sqlite bindings error into actionable guidance (#7868 ) (#7963 )

2026-07-21 08:39:43 -03:00

7875-healthcheck-jitter-config.md

fix(auth): restore configurable HEALTHCHECK_BATCH_SIZE dropped by #7719 (#7875 ) (#7970 )

2026-07-21 09:15:33 -03:00

7884-opencode-management-read-token.md

fix(opencode-plugin): support separate management read token (#7885 )

2026-07-20 18:48:35 -03:00

7889-quota-cutoff-drafts.md

fix(dashboard): preserve quota cutoff drafts (#7909 )

2026-07-20 22:22:36 -03:00

7906-anthropic-thinking-signature-recovery.md

fix(sse): recover invalid Anthropic thinking signatures once (#7906 )

2026-07-20 22:22:30 -03:00

7907-chatcore-499-string-abort.md

fix(chatcore): report string-reason client aborts as 499, not 502 (#7907 ) (#8011 )

2026-07-22 02:35:18 -03:00

7907-ignore-client-abort-resilience.md

fix(resilience): don't cool down accounts or trip the breaker on client aborts (#7908 )

2026-07-21 12:01:47 -03:00

7913-opencode-spawnsync-einval-win32.md

fix(cli): spawn opencode.cmd shim with shell:true on win32 (#7913 ) (#7964 )

2026-07-21 09:15:39 -03:00

7918-block-extra-usage-toggle-copy.md

fix(dashboard): correct block-extra-Claude-usage toggle copy to match quarantine behavior (#7918 ) (#7965 )

2026-07-21 08:39:49 -03:00

7925-windows-autostart-vbs.md

fix(autostart): adopt 9Router VBS startup to suppress console flash on Windows (#7925 )

2026-07-21 11:49:57 -03:00

7930-perplexity-web-quota-cooldown.md

fix(perplexity-web): multi-step empty content + advanced-quota cooldown (#7930 )

2026-07-21 13:16:47 -03:00

7940-gemini-429-model-lockout.md

fix: parse Gemini 429 RetryInfo.retryDelay for model lockout (#7940 ) (#7961 )

2026-07-21 09:15:27 -03:00

7941-macos-dock-icon.md

fix(electron): derive macOS Helper name from execPath to remove 2nd Dock icon (#7941 ) (#8002 )

2026-07-21 12:00:36 -03:00

7942-spark-openai-compatible-endpoint.md

fix(providers): route iflytek/sparkdesk to Spark's OpenAI-compatible host (#7942 )

2026-07-21 13:16:52 -03:00

7948-acp-agents-loopback-gate.md

fix(api): classify /api/acp/agents as loopback-only (#7948 ) (#7966 )

2026-07-21 09:03:31 -03:00

7976-opencode-combo-double-prefix.md

fix(cli): stop double-prefixing combo model ids in opencode plugin static catalog (#7976 ) (#8047 )

2026-07-21 21:38:43 -03:00

8000-duckduckgo-catalog.md

fix(providers): refresh duckduckgo-web catalog to current Duck.ai wire ids (#8000 ) (#8079 )

2026-07-22 01:22:08 -03:00

8020-codex-peek-read-timeout.md

fix(sse): bound Codex SSE peek read with per-read timeout (#8020 ) (#8043 )

2026-07-21 21:41:58 -03:00

8029-promptql-issuer-substring.md

fix(sse): replace spoofable .includes() PromptQL issuer check with hostname comparison (#8029 ) (#8042 )

2026-07-21 21:42:36 -03:00

8036-codex-cli-detect.md

fix(cli): merge node bin dir into CLI healthcheck PATH for codex detection (#8036 ) (#8156 )

2026-07-22 11:27:45 -03:00

8041-forwarded-response-header-budget.md

fix(sse): bound forwarded response headers (#8041 )

2026-07-22 02:35:26 -03:00

8045-windows-wal-checkpoint.md

fix(db): register SIGHUP handler and stop force-killing server on win32 stop paths (#8045 ) (#8148 )

2026-07-22 11:27:49 -03:00

8046-codex-oauth-lan-ip.md

fix(oauth): warn instead of silently opening unreachable localhost redirect for LAN-IP Codex/xAI/Grok OAuth (#8046 ) (#8152 )

2026-07-22 11:27:53 -03:00

8052-codex-ws-compression.md

fix(sse): run compression pipeline per turn in Codex Responses WS bridge (#8052 ) (#8154 )

2026-07-22 11:27:57 -03:00

8059-oauth-refresh-connection-dedup.md

fix(oauth): honor connectionId on token refresh so email-less providers don't duplicate (#8062 )

2026-07-22 17:37:54 -03:00

8065-quota-cache-globalthis.md

fix(routing): anchor quota cache on globalThis for cross-chunk consistency (#8065 ) (#8150 )

2026-07-22 11:28:03 -03:00

8082-poe-baseurl.md

fix(providers): add missing poe registry baseUrl entry (#8082 ) (#8149 )

2026-07-22 11:28:07 -03:00

8085-images-anon-fallback.md

fix(sse): anonymous fingerprint fallback for keyless Pollinations image gen (#8085 ) (#8157 )

2026-07-22 11:28:12 -03:00

8089-responses-system-image.md

fix(sse): stop Codex/Responses sanitizer turning system image_url into output_text (#8089 ) (#8147 )

2026-07-22 11:28:16 -03:00

8091-supervisor-spawn-err.md

fix(cli): surface the real spawn error in process supervisor (#8091 ) (#8158 )

2026-07-22 11:28:20 -03:00

8098-antigravity-protocol-fidelity.md

refactor(antigravity): align official clients and callable catalog (#8013 )

2026-07-22 20:41:19 -03:00

8107-resilience-cooldown-clamp.md

fix(resilience): add max/step to NumberField for provider cooldown inputs (#8107 ) (#8203 )

2026-07-23 08:02:21 -03:00

8134-github-t5-fallback-filter.md

fix(providers): filter unsupported family-fallback candidates against the provider catalog (#8134 ) (#8240 )

2026-07-23 00:46:05 -03:00

8169-lite-word-boundary-truncation.md

fix(backend): word-boundary-safe tool-result truncation in lite compression mode (#8169 ) (#8239 )

2026-07-23 00:46:01 -03:00

8189-classifier-compat-auto-narrow.md

fix(api): narrow claudeClassifierCompat auto trigger so stop_sequences alone no longer short-circuits (#8189 ) (#8236 )

2026-07-23 00:45:52 -03:00

8231-gemini-civic-integrity-default.md

fix(gemini): drop HARM_CATEGORY_CIVIC_INTEGRITY from the default Gemini safety settings (#8231 ) (#8238 )

2026-07-23 00:45:56 -03:00

8233-codex-dashboard-regressions.md

fix: normalize Codex URLs and dashboard regressions (#8233 )

2026-07-23 08:53:03 -03:00

8284-provider-docs-link.md

fix(providers): update Learn more documentation link (#8284 )

2026-07-23 11:06:36 -03:00

agy-live-model-sync.md

fix(providers): discover live AGY models (#8123 )

2026-07-22 20:47:56 -03:00

codeql-redos-adobe-jwt.md

fix(security): bound JWT-extraction regexes to prevent polynomial ReDoS (CodeQL #754/#755/#756) (#8173 )

2026-07-22 12:25:38 -03:00

codex-nonstream-body-double-read.md

fix(codex): non-stream chat 502 'Response body is already used' (single-reader peek) (#7526 )

2026-07-17 02:39:21 -03:00

console-interceptor-epipe-log-flood.md

fix(logs): stop the async-EPIPE log-flood loop at its ignition point (#8207 )

2026-07-23 05:11:11 -03:00

docs-fabricated-claims.md

docs: fix three stale references failing the fabricated-docs gate (#7728 )

2026-07-19 14:37:21 -03:00

kimi-banner-client-build.md

fix(build): split pure semver helpers into versionCompare so the Kimi client banner gate stops dragging child_process into the browser bundle

2026-07-22 00:07:19 -03:00

mitm-dns-test-root-sudo-strip.md

test(mitm): assert effective hosts-write spawn instead of hardcoding sudo

2026-07-19 13:11:08 -03:00

muse-spark-401-cookie-hint.md

fix(base-reds): muse-spark 401 names ecto_1_sess cookie + refresh provider count 271→278 in README/AGENTS/CLAUDE

2026-07-22 01:44:38 -03:00

notion-thread-idor-hardening.md

fix(security): namespace Notion thread cache per caller + validate client thread ids (IDOR)

2026-07-22 08:07:32 -03:00

oidc-callback-security-hardening.md

fix(security): harden OIDC callback — require email_verified for allowlist + safe error redirects

2026-07-19 23:33:44 -03:00

pack-boot-runtimetimeouts-sibling.md

fix(build): packed tarball boot crash — server-ws timeout import escaped the package (#7065 class) (#7308 )

2026-07-15 20:05:53 -03:00

pack-boot-smoke-gate.md

feat(ci): boot-smoke the packed npm tarball (check:pack-boot, #7065 class killer) (#7086 )

2026-07-14 05:23:34 -03:00

pack-entrypoint-closures.md

test(build): derive pack-artifact closures for all npm-shipped entrypoints (#7065 class) (#7081 )

2026-07-14 03:55:29 -03:00

pending-cli-service-detection.md

fix(cli): refresh runtime detection accurately (#7552 )

2026-07-18 15:14:23 -03:00

pending-react-flow-dark-theme.md

fix(ui): improve React Flow dark theme (#7553 )

2026-07-18 15:14:28 -03:00

port-2132-headroom-developer-role.md

fix(compression): Headroom SmartCrusher skips developer-role messages (port from 9router#2132) (#7102 )

2026-07-16 14:13:11 -03:00

register-cli-skill-collector.md

fix(skills): register cli-skill-collector in the agent-skills catalog (Integration 2/2 base-red) (#7310 )

2026-07-15 20:05:56 -03:00

responses-additional-tools.md

Preserve supported Responses behavior in Chat translation (#7894 )

2026-07-20 17:53:11 -03:00

responses-think-close-marker.md

fix(stream): suppress </think> close marker for Responses API clients (#7747 )

2026-07-19 14:46:37 -03:00

sec-adm-zip-codeql-host-match.md

fix(security): bump adm-zip >=0.6.0 + exact host matching in mitm DNS test (#7732 )

2026-07-19 11:14:56 -03:00

sec-deps2-dependabot-3.md

chore(deps): resolve 3 more Dependabot alerts (dompurify, fast-xml-parser, sharp) (#8069 )

2026-07-21 23:19:17 -03:00

sec-deps-dependabot-7.md

chore(deps): resolve 7 open Dependabot alerts via npm overrides (#8066 )

2026-07-21 22:36:35 -03:00

stryker-testfiles-drift.md

fix(quality): register nvidia-quota-phase1 and service-provider-plugin-registry in stryker tap.testFiles (#7796 )

2026-07-19 16:38:02 -03:00

tokenhealthcheck-tickms.md

fix(auth): restore TICK_MS in tokenHealthCheck (ReferenceError on startup) (#7830 )

2026-07-20 07:27:30 -03:00

vision-bridge-no-credentialed-hijack.md

fix(guardrails/chat): stop Vision Bridge hijacking credentialed models to opencode-zen (#7204 )

2026-07-18 21:18:10 -03:00

yuanbao-cookie-validation.md

fix(tests+providers): env-dependent tests exposed by GH-hosted runners (#6634 selfref shallow checkout + yuanbao live-network 401) (#7174 )

2026-07-14 15:40:09 -03:00