Diego Rodrigues de Sa e Souza a36fbdcc8d fix(build): verify artifact provenance and expose buildSha on health (#10444) ...

The packaged artifact stamped dist/BUILD_SHA but nothing verified the SHA belonged to the release line, so a tarball built from a feature branch installed and served traffic indistinguishably from a release build. That is how the internal gateway ended up running a build that predated #10373 and answered every request with 502 'Executor result must contain a Response' — identifying it required SSH plus grepping the compiled chunks.

scripts/build/buildProvenance.ts classifies a build SHA against the release ref (pure functions, injected git probe). A missing SHA fails even with the canary override: an unidentifiable artifact cannot be vouched for. validate-pack-artifact enforces it on real packs (skipped under --policy-only, which runs without a build); OMNIROUTE_ALLOW_CANARY_BUILD=1 records a deliberate off-release-line build instead of failing it. /api/monitoring/health now exposes system.buildSha — absent when unknown, never fabricated.

Closes #10427

2026-08-15 02:44:52 -03:00

..

a2a

feat(providers): integrate audited free-tier gateways (#9210)

2026-08-12 16:19:25 -03:00

accessTokens

Release v3.8.29 (#4126)

2026-06-19 06:49:01 -03:00

acp

Release v3.8.49 (#7076)

2026-07-29 15:18:55 -03:00

agentSkills

fix(ci): clear base-reds on release/v3.8.50 (round 3) (#10213)

2026-08-13 00:02:25 -03:00

api

[v3.8.50] Fix Z.ai web browser transport and model capabilities (#8451)

2026-08-12 08:41:03 -03:00

audit

Release v3.8.42 (#5459)

2026-06-30 06:54:29 -03:00

auth

Release v3.8.43 (#5609)

2026-07-02 10:47:13 -03:00

batches

Release v3.8.42 (#5459)

2026-06-30 06:54:29 -03:00

build-profile

Release v3.8.41 (#5327)

2026-06-29 16:51:03 -03:00

catalog

[v3.8.50] fix(api): serve stale model catalog during refresh (#8728)

2026-08-11 04:25:03 -03:00

chaos

Release v3.8.47 (#6569)

2026-07-13 09:12:40 -03:00

cli-helper

fix(cli): preserve OpenCode JSONC configs (#10246)

2026-08-14 00:57:28 -03:00

cliTools

Release v3.8.49 (#7076)

2026-07-29 15:18:55 -03:00

cloudAgent

Release v3.8.47 (#6569)

2026-07-13 09:12:40 -03:00

combos

fix(models): make custom model overrides work consistently (#10248)

2026-08-14 00:57:38 -03:00

compliance

feat(alibaba): free-tier routing with live quota sync (#8893)

2026-08-11 04:25:23 -03:00

compression

Release v3.8.38 (#5078)

2026-06-27 09:07:12 -03:00

conductor

feat(a2a): inbound delegation to the OmniConductor fleet via POST /api/a2a/tasks (PRD RF5) (#8223)

2026-08-12 02:13:41 -03:00

config

Release v3.8.49 (#7076)

2026-07-29 15:18:55 -03:00

copilot

[v3.8.50] feat(devin-desktop): replace public Windsurf provider (#8228)

2026-08-12 08:40:18 -03:00

credentialHealth

fix(credential-health): scheduler never retries failed connections due to static interval comparison (#9289)

2026-08-07 18:09:00 -03:00

cursor

feat(cursor): proactively renews Cursor sessions and fixes manual refresh (#9173)

2026-08-11 04:31:24 -03:00

db

Merge remote-tracking branch 'origin/release/v3.8.50' into fix/radar-oss-cumulative-integration

2026-08-14 22:23:58 -03:00

discovery

Release v3.8.44 (#5925)

2026-07-04 13:00:30 -03:00

display

Release v3.8.49 (#7076)

2026-07-29 15:18:55 -03:00

embeddings

feat(memory): support custom remote embedding endpoints (#9622) (#10010)

2026-08-10 18:16:08 -03:00

env

feat(a2a): inbound delegation to the OmniConductor fleet via POST /api/a2a/tasks (PRD RF5) (#8223)

2026-08-12 02:13:41 -03:00

evals

Release v3.8.43 (#5609)

2026-07-02 10:47:13 -03:00

events

Release v3.8.41 (#5327)

2026-06-29 16:51:03 -03:00

freeProxyProviders

Release v3.8.49 (#7076)

2026-07-29 15:18:55 -03:00

gamification

feat(radar): recognize supporters and add Intel UI

2026-08-14 11:00:12 -03:00

guardrails

feat(bridge): native-vision skip guard + configurable describe output cap (#10289)

2026-08-14 13:06:29 -03:00

headroom

Release v3.8.46

2026-07-07 13:14:06 -03:00

images

Release v3.8.49 (#7076)

2026-07-29 15:18:55 -03:00

inspector

Fix/issue #8656 (#9095)

2026-08-05 21:43:16 -03:00

issueAgent

Release v3.8.49 (#7076)

2026-07-29 15:18:55 -03:00

jobRegistry

maint: follow-up cherry-pick fix-in-place #9631 (conflict-resolved fallback) (#9886)

2026-08-09 09:54:47 -03:00

jobs

maint: follow-up cherry-pick fix-in-place #9631 (conflict-resolved fallback) (#9886)

2026-08-09 09:54:47 -03:00

localCorpus

Release v3.8.49 (#7076)

2026-07-29 15:18:55 -03:00

memory

fix: skills & memory — tool-name encoding, schema normalization, warm-cache, combo id, Ponytail catalog (#9058)

2026-08-11 04:30:38 -03:00

middleware

Release v3.8.43 (#5609)

2026-07-02 10:47:13 -03:00

modelsDevSync

refactor(providers): remove the Puter provider at its owner's request (#10210)

2026-08-12 16:54:50 -03:00

monitoring

fix(build): verify artifact provenance and expose buildSha on health (#10444)

2026-08-15 02:44:52 -03:00

notion

Release v3.8.42 (#5459)

2026-06-30 06:54:29 -03:00

oauth

[v3.8.50] feat(devin-desktop): replace public Windsurf provider (#8228)

2026-08-12 08:40:18 -03:00

obsidian

feat(observability): add Obsidian context source with 24 MCP tools (#3077)

2026-06-03 06:45:04 -03:00

playground

refactor(playground): expand endpoint contract to 13 endpoints (D4-rev2)

2026-05-28 17:19:48 -03:00

plugins

feat(plugins): expose client request headers in plugin context (#9570) (#9668)

2026-08-07 20:54:32 -03:00

promptCache

Release v3.8.42 (#5459)

2026-06-30 06:54:29 -03:00

providerModels

fix(discovery): parse reasoning tiers nested under metadata.reasoning.supported_efforts (#10138)

2026-08-13 07:53:07 -03:00

providers

fix(models): make custom model overrides work consistently (#10248)

2026-08-14 00:57:38 -03:00

proxyHealth

fix(proxy-health): include credentials in proxy health check URLs (#8853)

2026-08-04 21:36:00 -03:00

proxyRelay

Release v3.8.49 (#7076)

2026-07-29 15:18:55 -03:00

proxySubscription

Release v3.8.49 (#7076)

2026-07-29 15:18:55 -03:00

quota

fix(antigravity): quota-aware account selection and projectId persistence (#8891)

2026-08-11 04:25:13 -03:00

radar

fix(radar): close final client trust boundaries

2026-08-14 22:19:50 -03:00

reasoningRouting

Release v3.8.49 (#7076)

2026-07-29 15:18:55 -03:00

resilience

fix(resilience): recover idle-capacity limiter wedges early (#9041)

2026-08-11 04:30:29 -03:00

routerEval

Release v3.8.49 (#7076)

2026-07-29 15:18:55 -03:00

runtime

feat: enhance port configuration and API bridge support

2026-02-26 15:11:40 +00:00

search

fix(ci): clear base-red typecheck + migration collisions (release/v3.8.50, #9985) (#10152)

2026-08-12 07:56:35 -03:00

security

Release v3.8.31 (#4377)

2026-06-20 14:55:24 -03:00

services

fix(quality): green release/v3.8.50 base-reds — env-doc sync + file-size freeze (#9985) (#10032)

2026-08-10 18:15:16 -03:00

skills

fix: skills & memory — tool-name encoding, schema normalization, warm-cache, combo id, Ponytail catalog (#9058)

2026-08-11 04:30:38 -03:00

spend

feat(core): add payload rules, tag routing, and scheduled budgets

2026-04-17 09:00:32 -03:00

sync

feat(api-manager): add provider-level model permissions (#9313)

2026-08-11 10:29:28 -03:00

system

fix(auto-update): skip synthetic Next.js standalone package.json without name field in resolveProjectRoot (#8956) (#9354)

2026-08-05 16:07:31 -03:00

telegram

fix(release): repair post-sweep base regressions

2026-08-09 15:16:55 -03:00

translator

feat(dashboard): add custom CLI builder and eval suite management

2026-04-23 16:57:43 -03:00

usage

fix(sse): surface Qwen/Alibaba personal Token Plan quota in dashboard and preflight (#10290)

2026-08-14 15:40:33 -03:00

versionManager

Release v3.8.49 (#7076)

2026-07-29 15:18:55 -03:00

vncSession

Release v3.8.49 (#7076)

2026-07-29 15:18:55 -03:00

vscode

fix(reasoning): forward Ollama Cloud thinking (#9290)

2026-08-04 14:34:02 -03:00

warmupScheduler

feat(warmup): proactive Claude warmup scheduler (#8848) (#9449)

2026-08-07 20:53:21 -03:00

webhooks

Release v3.8.41 (#5327)

2026-06-29 16:51:03 -03:00

ws

chore(release): v3.6.6 — Stabilization (#1241)

2026-04-16 05:26:17 -03:00

zed-oauth

Release v3.8.6 (#2804)

2026-05-29 12:44:29 -03:00

apiBridgeServer.ts

feat: update API bridge proxy timeout to 600000ms and enhance related tests

2026-05-09 12:42:59 +00:00

apiKeyExposure.ts

Release v3.8.27 (#3968)

2026-06-17 02:43:21 -03:00

arenaEloSync.ts

Release v3.8.49 (#7076)

2026-07-29 15:18:55 -03:00

benchmarks.ts

feat: complete memory and skills implementation for antigravity

2026-04-01 08:42:03 -03:00

cacheControlSettings.ts

feat: add cache control settings and token-based metrics

2026-03-29 14:37:55 +02:00

cacheLayer.ts

fix(build): remove node: protocol prefix from all src/ imports (#turbopack-compat)

2026-03-17 04:24:46 -03:00

ccDiscoveryAliasResolve.ts

fix(sse): route claude/<provider>/<model> aliases for catalog-only providers (#9856)

2026-08-09 09:52:28 -03:00

cloudflaredTunnel.ts

Release v3.8.49 (#7076)

2026-07-29 15:18:55 -03:00

cloudSync.stub.ts

Release v3.8.6 (#2804)

2026-05-29 12:44:29 -03:00

cloudSync.ts

Release v3.8.6 (#2804)

2026-05-29 12:44:29 -03:00

consoleInterceptor.ts

Release v3.8.49 (#7076)

2026-07-29 15:18:55 -03:00

container.ts

feat: add error pages, harden DB layer and compliance module

2026-03-04 19:35:38 -03:00

contextWindowResolver.ts

feat(models): unify token limit overrides (#8908)

2026-08-05 22:41:38 -03:00

dataPaths.ts

fix(db): keep test runs off the operator's real DATA_DIR (#10432)

2026-08-15 01:51:01 -03:00

docsI18nPath.ts

Release v3.8.40

2026-06-29 08:40:06 -03:00

docsSanitizer.ts

Release v3.8.40

2026-06-29 08:40:06 -03:00

freeProviderRankings.ts

Release v3.8.49 (#7076)

2026-07-29 15:18:55 -03:00

freeProviderRankingsAuthType.ts

Release v3.8.49 (#7076)

2026-07-29 15:18:55 -03:00

gracefulShutdown.ts

Add native ChatGPT Web provider for Codex clients (#8949)

2026-08-11 09:53:39 -03:00

idempotencyLayer.ts

feat(cache): implement dynamic cache components with TDD

2026-04-01 08:45:39 +07:00

initCloudSync.ts

maint: follow-up cherry-pick fix-in-place #9631 (conflict-resolved fallback) (#9886)

2026-08-09 09:54:47 -03:00

ipUtils.ts

Release v3.8.49 (#7076)

2026-07-29 15:18:55 -03:00

localDb.ts

feat(radar): sync signed Intel insights

2026-08-14 10:59:42 -03:00

localHealthCheck.ts

Release v3.8.49 (#7076)

2026-07-29 15:18:55 -03:00

logEnv.ts

fix(logging): document CHAT_LOG_MAX_BODY_KB, capture messageCount for Responses API bodies (#10038)

2026-08-13 04:02:42 -03:00

logPayloads.ts

cherry-pick(pr-9601): feat(responses): add encrypted reasoning replay opt-in (#9876)

2026-08-09 09:55:02 -03:00

logRotation.ts

feat(providers): add AWS Polly and Lemonade provider support

2026-04-24 13:20:59 -03:00

machineToken.ts

Release v3.8.4 (#2678)

2026-05-26 23:51:47 -03:00

modelAliasResolver.ts

feat(model-alias): add runtime Model Alias Resolver middleware (#9020)

2026-08-06 00:09:18 -03:00

modelAliasSeed.ts

Release v3.8.49 (#7076)

2026-07-29 15:18:55 -03:00

modelCapabilities.ts

fix(ci): clear base-reds on release/v3.8.50 (round 3) (#10213)

2026-08-13 00:02:25 -03:00

modelCapabilityOverrideTargets.ts

cherry-pick(pr-9569): fix(settings): use provider prefixes in model overrides (#9878)

2026-08-09 09:55:16 -03:00

modelCapabilityResolutionSnapshot.ts

fix(ci): clear base-reds on release/v3.8.50 (round 3) (#10213)

2026-08-13 00:02:25 -03:00

modelMetadataRegistry.ts

fix(models): make custom model overrides work consistently (#10248)

2026-08-14 00:57:38 -03:00

modelsDevSync.ts

[v3.8.50] fix(models): keep model catalogs responsive (#9199)

2026-08-11 09:59:45 -03:00

ngrokTunnel.ts

Release v3.7.5 (#1753)

2026-04-30 01:27:03 -03:00

obsidianSync.ts

feat(observability): add Obsidian context source with 24 MCP tools (#3077)

2026-06-03 06:45:04 -03:00

oneproxyRotator.ts

feat: integrate 1proxy free proxy marketplace (closes #1788) (#1847)

2026-05-01 08:36:07 -03:00

oneproxySync.ts

feat: integrate 1proxy free proxy marketplace (closes #1788) (#1847)

2026-05-01 08:36:07 -03:00

piiSanitizer.ts

fix(pii): preserve custom event names and apply stream PII sanitization fixes (#3056)

2026-06-01 23:13:19 -03:00

pricingSync.ts

fix(perf): memoize synced pricing reads (#9861)

2026-08-09 09:52:59 -03:00

providerNodePrefixes.ts

cherry-pick(pr-9569): fix(settings): use provider prefixes in model overrides (#9878)

2026-08-09 09:55:16 -03:00

proxyEgress.ts

Release v3.8.49 (#7076)

2026-07-29 15:18:55 -03:00

proxyHealth.ts

Release v3.8.40

2026-06-29 08:40:06 -03:00

proxyLogger.ts

fix(db): persist account egress IP into proxy_logs (#9291)

2026-08-04 14:34:17 -03:00

semanticCache.ts

Release v3.8.41 (#5327)

2026-06-29 16:51:03 -03:00

serverLifecycle.ts

Release v3.8.49 (#7076)

2026-07-29 15:18:55 -03:00

source.ts

fix(bun): make server child and outbound fetch Bun-safe (#9761)

2026-08-11 09:16:23 -03:00

sseTextTransform.ts

Release v3.8.24 (#3747)

2026-06-13 17:27:40 -03:00

streamingPiiTransform.ts

fix(types): preserve streaming PII choice keys (#9566)

2026-08-07 20:54:11 -03:00

tailscaleTunnel.ts

Release v3.8.31 (#4377)

2026-06-20 14:55:24 -03:00

tokenHealthCheck.ts

feat(cursor): proactively renews Cursor sessions and fixes manual refresh (#9173)

2026-08-11 04:31:24 -03:00

tokenHealthCheckCopilot.ts

Release v3.8.49 (#7076)

2026-07-29 15:18:55 -03:00

tokenHealthCheckCursor.ts

feat(cursor): proactively renews Cursor sessions and fixes manual refresh (#9173)

2026-08-11 04:31:24 -03:00

toolPolicy.ts

feat(phase2+3): DI container, plugins, PII sanitizer, tool policy, audit log, cache invalidation, ARIA, CSS vars

2026-02-18 14:43:57 -03:00

translatorEvents.ts

feat: OmniRoute v1.0.0 — Intelligent AI Gateway & Universal LLM Proxy

2026-02-18 00:02:15 -03:00

usageAnalytics.ts

Release v3.8.43 (#5609)

2026-07-02 10:47:13 -03:00

usageDb.ts

Release v3.8.18 (#3482)

2026-06-09 15:56:24 -03:00

warmupScheduler.ts

feat(warmup): proactive Claude warmup scheduler (#8848) (#9449)

2026-08-07 20:53:21 -03:00

webhookDispatcher.ts

Release v3.8.49 (#7076)

2026-07-29 15:18:55 -03:00