Markus Hartung 2eab74b039 feat(guardrails): enforce video transcript provenance, budgets and reconciliation (#11652) ...

FU-05 core: caller-supplied Video Bridge transcripts can no longer
self-assert "embedded"/"audio-bridge" provenance — normalizeVideoTranscript
now reclassifies any caller-declared value to "client" by default, and only
a server-owned adapter passing the code-only trustedSource option (never
reachable from request-body JSON) can assign the trusted values. The
dedicated audioTranscript fusion field is always labeled "audio-bridge" by
the server regardless of what a cue declares, structurally separating it
from the generic transcript field.

Adds the missing FU-05 budgets (256 cues, 4096 input code units/cue, 4 KiB
UTF-8/cue, 64 KiB total text), malformed-Unicode rejection, focus-window
scoping, and deterministic cross-source cue reconciliation that preserves
contributing-source metadata instead of silently dropping it on exact-match
dedup. New logic lives in videoBridgeTranscriptContract.ts so the existing
helper file only grows by a thin delegation.

Bumps the Video Bridge result-cache contract version (v4 -> v5) so a cache
entry computed under the old, less-restrictive normalization can never be
served once the new contract is deployed.

3 of the 12 pre-existing provenance tests asserted the exact forged-source
acceptance this ticket closes; updated in place with inline rationale.

2026-08-29 07:05:04 -03:00

..

a2a

fix(security): close round-3 advisories (v7g9, x7vm, j7j4, jcm5) + exposure warning (wmgv) (#11261)

2026-08-23 20:32:42 -03:00

accessTokens

Release v3.8.29 (#4126)

2026-06-19 06:49:01 -03:00

acp

fix(security): close 4 STILL-REAL advisory findings (ACP RCE hardening, db-backups tier, uppercase authz bypass, spawn-veto drift) (#11028)

2026-08-21 13:57:42 -03:00

agentSkills

fix(cli): restore packaged machine-token authentication (#10468)

2026-08-20 15:07:19 -03:00

api

fix(api): bound provider login timeout to the shared browser-login window (#11871)

2026-08-28 11:13:33 -03:00

audit

Release v3.8.42 (#5459)

2026-06-30 06:54:29 -03:00

auth

Release v3.8.43 (#5609)

2026-07-02 10:47:13 -03:00

batches

Release v3.8.42 (#5459)

2026-06-30 06:54:29 -03:00

build-profile

Release v3.8.41 (#5327)

2026-06-29 16:51:03 -03:00

catalog

chore(startup): remove server-init.ts, a module nothing imports (#10780)

2026-08-20 10:27:26 -03:00

chaos

Release v3.8.47 (#6569)

2026-07-13 09:12:40 -03:00

cli-helper

docs(cli): update opencode.ts JSDoc to reflect 128k context fallback (#11035) (#11157)

2026-08-22 20:07:11 -03:00

cliTools

feat(cli): support Grok Build custom host configuration (#10830)

2026-08-21 00:29:01 -03:00

cloudAgent

Release v3.8.47 (#6569)

2026-07-13 09:12:40 -03:00

combos

feat(combo): choose sort method for combo models (manual/provider/score/name) (#11812)

2026-08-28 12:37:58 -03:00

compliance

fix(compliance): redact extra provider API keys (#10521)

2026-08-18 10:51:34 -03:00

compression

perf(executors): lazy-load the executor registry — defer class imports + construction to first use (#11220) (#11421)

2026-08-25 18:22:46 -03:00

conductor

feat(a2a): inbound delegation to the OmniConductor fleet via POST /api/a2a/tasks (PRD RF5) (#8223)

2026-08-12 02:13:41 -03:00

config

feat(providers): let operators add per-provider error rules via settings (#11104)

2026-08-22 14:40:35 -03:00

copilot

Integration: security tier + self-hosted operator blockers (rebased onto v3.8.51) (#10952)

2026-08-23 16:51:25 -03:00

credentialHealth

fix(startup): log when credential health check is disabled (#11016) (#11021)

2026-08-21 14:00:27 -03:00

cursor

feat(providers): Cursor PKCE login with Bearer quota, auto router, and empty-turn errors (#9909)

2026-08-21 10:28:01 -03:00

db

chore(db): renumber model_capabilities migration 163 → 169 (cross-branch collision with 163_radar_feed_cache_generated_at)

2026-08-28 14:21:46 -03:00

discovery

Release v3.8.44 (#5925)

2026-07-04 13:00:30 -03:00

display

Release v3.8.49 (#7076)

2026-07-29 15:18:55 -03:00

embeddings

fix(ollama): route models by advertised capability (#11087) — port of #11088 to the release line (#11271)

2026-08-23 18:11:21 -03:00

env

feat(a2a): inbound delegation to the OmniConductor fleet via POST /api/a2a/tasks (PRD RF5) (#8223)

2026-08-12 02:13:41 -03:00

evals

fix(combo): guarantee combo loops terminate with an actionable error instead of hanging silently (#10463)

2026-08-20 23:07:25 -03:00

events

Release v3.8.41 (#5327)

2026-06-29 16:51:03 -03:00

freeProxyProviders

Release v3.8.49 (#7076)

2026-07-29 15:18:55 -03:00

gamification

fix(dashboard): keep Profile XP and level consistent (#11604)

2026-08-26 09:22:18 -03:00

guardrails

feat(guardrails): enforce video transcript provenance, budgets and reconciliation (#11652)

2026-08-29 07:05:04 -03:00

headroom

Release v3.8.46

2026-07-07 13:14:06 -03:00

images

fix(providers): retire common ChatGPT Web provider (#11754)

2026-08-28 06:52:46 -03:00

inspector

Fix/issue #8656 (#9095)

2026-08-05 21:43:16 -03:00

issueAgent

Release v3.8.49 (#7076)

2026-07-29 15:18:55 -03:00

jobRegistry

maint: follow-up cherry-pick fix-in-place #9631 (conflict-resolved fallback) (#9886)

2026-08-09 09:54:47 -03:00

jobs

maint: follow-up cherry-pick fix-in-place #9631 (conflict-resolved fallback) (#9886)

2026-08-09 09:54:47 -03:00

kimi

feat(sse): add kimi web token lifecycle manager, rolling auto-refresh and 401 recovery (#10944)

2026-08-21 04:25:56 -03:00

localCorpus

refactor(local-corpus): implement dynamic root resolution and LRU cache (#11491)

2026-08-25 21:08:05 -03:00

memory

fix(memory): avoid rejected mid-conversation system injection on Claude when preceding turn isn't a tool result (#11290) (#11303)

2026-08-23 21:34:50 -03:00

middleware

Release v3.8.43 (#5609)

2026-07-02 10:47:13 -03:00

modelsDevSync

refactor(providers): remove the Puter provider at its owner's request (#10210)

2026-08-12 16:54:50 -03:00

monitoring

fix(sse): scale chat admission by ingest byte budget instead of a fixed request count (#11548)

2026-08-26 08:11:18 -03:00

notion

Release v3.8.42 (#5459)

2026-06-30 06:54:29 -03:00

oauth

feat(oauth): default Antigravity-family connections to model auto-sync (#11887)

2026-08-28 09:26:26 -03:00

obsidian

feat(observability): add Obsidian context source with 24 MCP tools (#3077)

2026-06-03 06:45:04 -03:00

playground

feat(search): add fallback-only AnySearch provider (webSearch + webFetch) (#11690)

2026-08-26 17:54:57 -03:00

plugins

feat(plugins): expose client request headers in plugin context (#9570) (#9668)

2026-08-07 20:54:32 -03:00

promptCache

Release v3.8.42 (#5459)

2026-06-30 06:54:29 -03:00

providerModels

chore(release): merge release/v3.8.50 tip into release/v3.8.51 — sync-back step 1/2

2026-08-28 14:07:39 -03:00

providers

fix(providers): pass xAI reasoning_effort xhigh through to grok-4.6+ (#11879)

2026-08-28 15:49:42 -03:00

proxyHealth

feat(proxy): surface anonymous egress-IP sharing in the health sweep and the egress API (#10876)

2026-08-20 15:47:34 -03:00

proxyRelay

fix(relay): strip unsafe forwarded headers (#11533)

2026-08-25 13:12:50 -03:00

proxySubscription

fix(proxy-subscriptions): allow local/loopback proxy-subscription fetch URLs (#10416)

2026-08-18 10:49:52 -03:00

quota

fix(combo): enable genuine quota-aware routing for generic providers (antigravity, claude, etc.) (#11411)

2026-08-25 19:25:57 -03:00

radar

fix(radar): keep the feed's build date in the catalog cache (#11435)

2026-08-24 19:57:24 -03:00

reasoningRouting

Release v3.8.49 (#7076)

2026-07-29 15:18:55 -03:00

resilience

feat(resilience): add hierarchical concurrency admission (#11493)

2026-08-25 07:19:09 -03:00

routerEval

Release v3.8.49 (#7076)

2026-07-29 15:18:55 -03:00

routing

feat(api): add provider quota telemetry, adaptive routing, and status inventory (#10148)

2026-08-18 11:31:53 -03:00

runtime

feat: enhance port configuration and API bridge support

2026-02-26 15:11:40 +00:00

search

feat(search): add fallback-only AnySearch provider (webSearch + webFetch) (#11690)

2026-08-26 17:54:57 -03:00

security

Release v3.8.31 (#4377)

2026-06-20 14:55:24 -03:00

services

fix(services): separate CLIProxyAPI health and model auth (#11811)

2026-08-27 22:15:06 -03:00

skills

fix(skills): expand shorthand property types in injected tool schemas (#11881)

2026-08-28 15:49:22 -03:00

spend

feat(core): add payload rules, tag routing, and scheduled budgets

2026-04-17 09:00:32 -03:00

sync

feat(api-manager): add provider-level model permissions (#9313)

2026-08-11 10:29:28 -03:00

system

fix(auto-update): skip synthetic Next.js standalone package.json without name field in resolveProjectRoot (#8956) (#9354)

2026-08-05 16:07:31 -03:00

telegram

fix(release): repair post-sweep base regressions

2026-08-09 15:16:55 -03:00

translator

feat(dashboard): add custom CLI builder and eval suite management

2026-04-23 16:57:43 -03:00

usage

fix(sync): repair the two regressions the v3.8.50 sync-back left on release/v3.8.51

2026-08-28 16:41:42 -03:00

versionManager

fix(cli): complete Windows cliproxy platform handling + pid probe (#11236) (#11263)

2026-08-23 14:25:04 -03:00

vncSession

feat(routing): add exclusive managed session connection leases (#10362)

2026-08-18 11:25:46 -03:00

vscode

fix(reasoning): forward Ollama Cloud thinking (#9290)

2026-08-04 14:34:02 -03:00

warmupScheduler

feat(warmup): proactive Claude warmup scheduler (#8848) (#9449)

2026-08-07 20:53:21 -03:00

webhooks

fix(webhooks): remove 3 declared-but-never-emitted ghost events (#11050)

2026-08-21 20:54:51 -03:00

ws

chore(release): v3.6.6 — Stabilization (#1241)

2026-04-16 05:26:17 -03:00

zed-oauth

Release v3.8.6 (#2804)

2026-05-29 12:44:29 -03:00

admissionVirtualLanes.ts

feat: combo-lane awareness + activation UX + MCP visibility (Wave 2 of #9654) (#10039)

2026-08-18 11:31:46 -03:00

apiBridgeServer.ts

fix(sse): import httpClientAbortGuard with explicit .mjs extension (#11671)

2026-08-26 17:40:22 -03:00

apiKeyExposure.ts

Release v3.8.27 (#3968)

2026-06-17 02:43:21 -03:00

arenaEloSync.ts

fix(intelligence): synthesize base-model arena rows from effort/harness variants; drop MODEL_ALIAS_MAP (#11504) (#11506)

2026-08-25 13:51:56 -03:00

benchmarks.ts

feat: complete memory and skills implementation for antigravity

2026-04-01 08:42:03 -03:00

buildPhase.ts

Integration: security tier + self-hosted operator blockers (rebased onto v3.8.51) (#10952)

2026-08-23 16:51:25 -03:00

cacheControlSettings.ts

feat: add cache control settings and token-based metrics

2026-03-29 14:37:55 +02:00

cacheLayer.ts

fix(build): remove node: protocol prefix from all src/ imports (#turbopack-compat)

2026-03-17 04:24:46 -03:00

ccDiscoveryAliasResolve.ts

fix(sse): route claude/<provider>/<model> aliases for catalog-only providers (#9856)

2026-08-09 09:52:28 -03:00

cloudflaredTunnel.ts

feat(tunnels): support named cloudflared tunnels via CLOUDFLARED_CONFIG (#11561)

2026-08-26 08:11:09 -03:00

cloudSync.stub.ts

Release v3.8.6 (#2804)

2026-05-29 12:44:29 -03:00

cloudSync.ts

Release v3.8.6 (#2804)

2026-05-29 12:44:29 -03:00

consoleInterceptor.ts

fix(logging): keep the component and apply printf formats in the app log (#10770)

2026-08-20 06:29:42 -03:00

container.ts

feat: add error pages, harden DB layer and compliance module

2026-03-04 19:35:38 -03:00

contextWindowResolver.ts

feat(models): unify token limit overrides (#8908)

2026-08-05 22:41:38 -03:00

dataPaths.ts

fix(db): fallback load STORAGE_ENCRYPTION_KEY from env files (#11614)

2026-08-26 09:23:57 -03:00

docsI18nPath.ts

Release v3.8.40

2026-06-29 08:40:06 -03:00

docsSanitizer.ts

Release v3.8.40

2026-06-29 08:40:06 -03:00

exclusiveLeaseIsolation.ts

feat(routing): add exclusive managed session connection leases (#10362)

2026-08-18 11:25:46 -03:00

freeProviderRankings.ts

feat(rankings): show what each provider actually served (#11546)

2026-08-25 16:31:11 -03:00

freeProviderRankingsAuthType.ts

Release v3.8.49 (#7076)

2026-07-29 15:18:55 -03:00

freeProviderRankingsUsage.ts

feat(rankings): show what each provider actually served (#11546)

2026-08-25 16:31:11 -03:00

gracefulShutdown.ts

perf(logging): offload call-log artifacts to a worker (#10123)

2026-08-18 10:49:15 -03:00

healthzLag.ts

feat(resilience): warn on slow /healthz event-loop lag (#10827)

2026-08-20 11:47:38 -03:00

idempotencyLayer.ts

feat(cache): implement dynamic cache components with TDD

2026-04-01 08:45:39 +07:00

initCloudSync.ts

fix(responses-continuation): recover a real id/output for passthrough and translate-mode replies (#11434)

2026-08-24 19:57:12 -03:00

instrumentationBootError.ts

fix(cli): guarantee non-empty [STARTUP] Fatal log on instrumentation-hook boot throw (#10447)

2026-08-18 10:57:44 -03:00

ipUtils.ts

Release v3.8.49 (#7076)

2026-07-29 15:18:55 -03:00

localDb.ts

fix(analytics): query auto routing from call logs (#10685)

2026-08-20 13:00:01 -03:00

localHealthCheck.ts

Release v3.8.49 (#7076)

2026-07-29 15:18:55 -03:00

logEnv.ts

fix(logging): raise chat-log array truncation cap to 1000 and unify duplicate implementations (#11499)

2026-08-25 20:11:56 -03:00

logPayloads.ts

fix(providers): retire common ChatGPT Web provider (#11754)

2026-08-28 06:52:46 -03:00

logRotation.ts

feat(providers): add AWS Polly and Lemonade provider support

2026-04-24 13:20:59 -03:00

machineToken.ts

fix(cli): restore packaged machine-token authentication (#10468)

2026-08-20 15:07:19 -03:00

modelAliasResolver.ts

fix(routing): preserve combo precedence and skip hidden models in alias resolver (#11107)

2026-08-23 07:01:07 -03:00

modelAliasSeed.ts

fix(routing): fallback to default model alias seeds when unmapped in database (#10124)

2026-08-17 08:21:53 -03:00

modelCapabilities.ts

fix(combo): resolve effort variants via base model capabilities (#11034)

2026-08-21 14:58:53 -03:00

modelCapabilityModalities.ts

feat: add Video Bridge frame sampling (#10483)

2026-08-15 14:23:29 -03:00

modelCapabilityOverrideTargets.ts

cherry-pick(pr-9569): fix(settings): use provider prefixes in model overrides (#9878)

2026-08-09 09:55:16 -03:00

modelCapabilityResolutionSnapshot.ts

fix(catalog): scope combo reasoning efforts by connection (#10723)

2026-08-20 09:31:12 -03:00

modelMetadataRegistry.ts

fix(responses-continuation): recover a real id/output for passthrough and translate-mode replies (#11434)

2026-08-24 19:57:12 -03:00

modelsDevSync.ts

revert(models): drop the memo reset hook ported from #10055

2026-08-28 14:39:18 -03:00

ngrokTunnel.ts

Release v3.7.5 (#1753)

2026-04-30 01:27:03 -03:00

obsidianSync.ts

feat(observability): add Obsidian context source with 24 MCP tools (#3077)

2026-06-03 06:45:04 -03:00

omnirouteStatus.ts

feat(api): add provider quota telemetry, adaptive routing, and status inventory (#10148)

2026-08-18 11:31:53 -03:00

oneproxyRotator.ts

feat: integrate 1proxy free proxy marketplace (closes #1788) (#1847)

2026-05-01 08:36:07 -03:00

oneproxySync.ts

feat: integrate 1proxy free proxy marketplace (closes #1788) (#1847)

2026-05-01 08:36:07 -03:00

piiSanitizer.ts

fix(pii): preserve custom event names and apply stream PII sanitization fixes (#3056)

2026-06-01 23:13:19 -03:00

pricingSync.ts

fix(pricing): 3 dead entries in LITELLM_PROVIDER_MAP silently drop synced pricing (#10636)

2026-08-20 13:11:03 -03:00

providerNodePrefixes.ts

fix(providers): retire common ChatGPT Web provider (#11754)

2026-08-28 06:52:46 -03:00

proxyEchoTarget.ts

fix(proxy): stop reporting IPv4-only proxies as dead (#10868)

2026-08-20 15:19:32 -03:00

proxyEgress.ts

feat(proxy): surface anonymous egress-IP sharing in the health sweep and the egress API (#10876)

2026-08-20 15:47:34 -03:00

proxyHealth.ts

Release v3.8.40

2026-06-29 08:40:06 -03:00

proxyLogger.ts

perf(proxy): implement non-blocking async proxy log batching and performance optimizations (A, B, C, D) (#11182)

2026-08-23 01:07:32 -03:00

semanticCache.ts

fix(cache): expire a semantic-cache row on its TTL, not at UTC midnight (#11559) (#11573)

2026-08-26 08:10:51 -03:00

serverLifecycle.ts

Release v3.8.49 (#7076)

2026-07-29 15:18:55 -03:00

sessionObservability.ts

feat(dashboard): surface exclusive managed leases in Sessions view (#11389)

2026-08-25 01:38:59 -03:00

source.ts

fix(bun): make server child and outbound fetch Bun-safe (#9761)

2026-08-11 09:16:23 -03:00

sseTextTransform.ts

Release v3.8.24 (#3747)

2026-06-13 17:27:40 -03:00

streamingPiiTransform.ts

fix(types): preserve streaming PII choice keys (#9566)

2026-08-07 20:54:11 -03:00

tailscaleTunnel.ts

fix(tailscale): validate ports and quote MSI paths (#11534)

2026-08-25 13:12:38 -03:00

tokenHealthCheck.ts

fix(resilience): restore expired-connection retry-budget probe in health sweep (#11672)

2026-08-26 17:40:14 -03:00

tokenHealthCheckCopilot.ts

Release v3.8.49 (#7076)

2026-07-29 15:18:55 -03:00

tokenHealthCheckCursor.ts

feat(cursor): proactively renews Cursor sessions and fixes manual refresh (#9173)

2026-08-11 04:31:24 -03:00

tokenHealthCheckKimi.ts

fix(cli): stop pre-filling the secrets the server owns (#11436)

2026-08-24 20:04:11 -03:00

tokenHealthCheckWebCookie.ts

feat(providers): verify-only health sweep for web-cookie connections (#11488) (#11495)

2026-08-26 08:11:30 -03:00

toolPolicy.ts

feat(phase2+3): DI container, plugins, PII sanitizer, tool policy, audit log, cache invalidation, ARIA, CSS vars

2026-02-18 14:43:57 -03:00

translatorEvents.ts

feat: OmniRoute v1.0.0 — Intelligent AI Gateway & Universal LLM Proxy

2026-02-18 00:02:15 -03:00

usageAnalytics.ts

Release v3.8.43 (#5609)

2026-07-02 10:47:13 -03:00

usageDb.ts

Release v3.8.18 (#3482)

2026-06-09 15:56:24 -03:00

warmupScheduler.ts

feat(routing): add exclusive managed session connection leases (#10362)

2026-08-18 11:25:46 -03:00

webhookDispatcher.ts

Release v3.8.49 (#7076)

2026-07-29 15:18:55 -03:00

wellKnown.ts

fix: make release/v3.8.50 CI gates green (run 32786966560 root causes) (#11450)

2026-08-25 18:55:18 -03:00