Paco Cartones 987b67420a fix(kimi-web): align health probe with executor domain (#11521) ...

Validated in a combined 10-PR batch worktree off release/v3.8.51 tip. Fixes #11515.
- Focused test: tests/unit/kimi-web-validation-11515.test.ts — 37/37 pass; live unauthenticated probe confirms www.kimi.ai/api/user returns the expected 401 boundary
- typecheck:core, file-size, changelog-integrity, complexity, cognitive-complexity gates — all OK
- Full-repo lint: 503 pre-existing problems confirmed identical on the pure release/v3.8.51 tip — unrelated to this diff

⚠️ base-red inherited: #11449

Thanks for aligning the health probe with the executor's actual domain plus the live verification.

2026-08-25 13:11:41 -03:00

..

a2a

fix(security): close round-3 advisories (v7g9, x7vm, j7j4, jcm5) + exposure warning (wmgv) (#11261)

2026-08-23 20:32:42 -03:00

accessTokens

Release v3.8.29 (#4126)

2026-06-19 06:49:01 -03:00

acp

fix(security): close 4 STILL-REAL advisory findings (ACP RCE hardening, db-backups tier, uppercase authz bypass, spawn-veto drift) (#11028)

2026-08-21 13:57:42 -03:00

agentSkills

fix(cli): restore packaged machine-token authentication (#10468)

2026-08-20 15:07:19 -03:00

api

fix(mcp): honor the mcp:connect carve-out in transport route guards (#11139)

2026-08-23 02:18:06 -03:00

audit

Release v3.8.42 (#5459)

2026-06-30 06:54:29 -03:00

auth

Release v3.8.43 (#5609)

2026-07-02 10:47:13 -03:00

batches

Release v3.8.42 (#5459)

2026-06-30 06:54:29 -03:00

build-profile

Release v3.8.41 (#5327)

2026-06-29 16:51:03 -03:00

catalog

chore(startup): remove server-init.ts, a module nothing imports (#10780)

2026-08-20 10:27:26 -03:00

chaos

Release v3.8.47 (#6569)

2026-07-13 09:12:40 -03:00

cli-helper

docs(cli): update opencode.ts JSDoc to reflect 128k context fallback (#11035) (#11157)

2026-08-22 20:07:11 -03:00

cliTools

feat(cli): support Grok Build custom host configuration (#10830)

2026-08-21 00:29:01 -03:00

cloudAgent

Release v3.8.47 (#6569)

2026-07-13 09:12:40 -03:00

combos

fix(responses-continuation): recover a real id/output for passthrough and translate-mode replies (#11434)

2026-08-24 19:57:12 -03:00

compliance

fix(compliance): redact extra provider API keys (#10521)

2026-08-18 10:51:34 -03:00

compression

Release v3.8.38 (#5078)

2026-06-27 09:07:12 -03:00

conductor

feat(a2a): inbound delegation to the OmniConductor fleet via POST /api/a2a/tasks (PRD RF5) (#8223)

2026-08-12 02:13:41 -03:00

config

feat(providers): let operators add per-provider error rules via settings (#11104)

2026-08-22 14:40:35 -03:00

copilot

Integration: security tier + self-hosted operator blockers (rebased onto v3.8.51) (#10952)

2026-08-23 16:51:25 -03:00

credentialHealth

fix(startup): log when credential health check is disabled (#11016) (#11021)

2026-08-21 14:00:27 -03:00

cursor

feat(providers): Cursor PKCE login with Bearer quota, auto router, and empty-turn errors (#9909)

2026-08-21 10:28:01 -03:00

db

fix(db): keep tokenExpiresAt when a connection is created (#11368)

2026-08-25 07:18:58 -03:00

discovery

Release v3.8.44 (#5925)

2026-07-04 13:00:30 -03:00

display

Release v3.8.49 (#7076)

2026-07-29 15:18:55 -03:00

embeddings

fix(ollama): route models by advertised capability (#11087) — port of #11088 to the release line (#11271)

2026-08-23 18:11:21 -03:00

env

feat(a2a): inbound delegation to the OmniConductor fleet via POST /api/a2a/tasks (PRD RF5) (#8223)

2026-08-12 02:13:41 -03:00

evals

fix(combo): guarantee combo loops terminate with an actionable error instead of hanging silently (#10463)

2026-08-20 23:07:25 -03:00

events

Release v3.8.41 (#5327)

2026-06-29 16:51:03 -03:00

freeProxyProviders

Release v3.8.49 (#7076)

2026-07-29 15:18:55 -03:00

gamification

feat(radar): recognize supporters and add Intel UI

2026-08-14 11:00:12 -03:00

guardrails

fix(responses-continuation): recover a real id/output for passthrough and translate-mode replies (#11434)

2026-08-24 19:57:12 -03:00

headroom

Release v3.8.46

2026-07-07 13:14:06 -03:00

images

Release v3.8.49 (#7076)

2026-07-29 15:18:55 -03:00

inspector

Fix/issue #8656 (#9095)

2026-08-05 21:43:16 -03:00

issueAgent

Release v3.8.49 (#7076)

2026-07-29 15:18:55 -03:00

jobRegistry

maint: follow-up cherry-pick fix-in-place #9631 (conflict-resolved fallback) (#9886)

2026-08-09 09:54:47 -03:00

jobs

maint: follow-up cherry-pick fix-in-place #9631 (conflict-resolved fallback) (#9886)

2026-08-09 09:54:47 -03:00

kimi

feat(sse): add kimi web token lifecycle manager, rolling auto-refresh and 401 recovery (#10944)

2026-08-21 04:25:56 -03:00

localCorpus

Release v3.8.49 (#7076)

2026-07-29 15:18:55 -03:00

memory

fix(memory): avoid rejected mid-conversation system injection on Claude when preceding turn isn't a tool result (#11290) (#11303)

2026-08-23 21:34:50 -03:00

middleware

Release v3.8.43 (#5609)

2026-07-02 10:47:13 -03:00

modelsDevSync

refactor(providers): remove the Puter provider at its owner's request (#10210)

2026-08-12 16:54:50 -03:00

monitoring

feat(monitoring): expose structural chat admission snapshot + shed counters (#11244) (#11268)

2026-08-23 14:29:32 -03:00

notion

Release v3.8.42 (#5459)

2026-06-30 06:54:29 -03:00

oauth

fix(responses-continuation): recover a real id/output for passthrough and translate-mode replies (#11434)

2026-08-24 19:57:12 -03:00

obsidian

feat(observability): add Obsidian context source with 24 MCP tools (#3077)

2026-06-03 06:45:04 -03:00

playground

refactor(playground): expand endpoint contract to 13 endpoints (D4-rev2)

2026-05-28 17:19:48 -03:00

plugins

feat(plugins): expose client request headers in plugin context (#9570) (#9668)

2026-08-07 20:54:32 -03:00

promptCache

Release v3.8.42 (#5459)

2026-06-30 06:54:29 -03:00

providerModels

fix(cli): stop pre-filling the secrets the server owns (#11436)

2026-08-24 20:04:11 -03:00

providers

fix(kimi-web): align health probe with executor domain (#11521)

2026-08-25 13:11:41 -03:00

proxyHealth

feat(proxy): surface anonymous egress-IP sharing in the health sweep and the egress API (#10876)

2026-08-20 15:47:34 -03:00

proxyRelay

fix(relay): share one private-host guard across the three relay workers (#10941)

2026-08-21 04:17:25 -03:00

proxySubscription

fix(proxy-subscriptions): allow local/loopback proxy-subscription fetch URLs (#10416)

2026-08-18 10:49:52 -03:00

quota

fix(oauth): recover connections stuck on upstream 400 after token staleness (#11141)

2026-08-23 02:20:12 -03:00

radar

fix(radar): keep the feed's build date in the catalog cache (#11435)

2026-08-24 19:57:24 -03:00

reasoningRouting

Release v3.8.49 (#7076)

2026-07-29 15:18:55 -03:00

resilience

feat(resilience): add hierarchical concurrency admission (#11493)

2026-08-25 07:19:09 -03:00

routerEval

Release v3.8.49 (#7076)

2026-07-29 15:18:55 -03:00

routing

feat(api): add provider quota telemetry, adaptive routing, and status inventory (#10148)

2026-08-18 11:31:53 -03:00

runtime

feat: enhance port configuration and API bridge support

2026-02-26 15:11:40 +00:00

search

feat(search): add Xquik X search provider (#11370)

2026-08-25 01:39:39 -03:00

security

Release v3.8.31 (#4377)

2026-06-20 14:55:24 -03:00

services

fix(responses-continuation): recover a real id/output for passthrough and translate-mode replies (#11434)

2026-08-24 19:57:12 -03:00

skills

feat(search): add context7 as a library-docs search and fetch provider (#11140)

2026-08-23 02:24:01 -03:00

spend

feat(core): add payload rules, tag routing, and scheduled budgets

2026-04-17 09:00:32 -03:00

sync

feat(api-manager): add provider-level model permissions (#9313)

2026-08-11 10:29:28 -03:00

system

fix(auto-update): skip synthetic Next.js standalone package.json without name field in resolveProjectRoot (#8956) (#9354)

2026-08-05 16:07:31 -03:00

telegram

fix(release): repair post-sweep base regressions

2026-08-09 15:16:55 -03:00

translator

feat(dashboard): add custom CLI builder and eval suite management

2026-04-23 16:57:43 -03:00

usage

fix(responses-continuation): recover a real id/output for passthrough and translate-mode replies (#11434)

2026-08-24 19:57:12 -03:00

versionManager

fix(cli): complete Windows cliproxy platform handling + pid probe (#11236) (#11263)

2026-08-23 14:25:04 -03:00

vncSession

feat(routing): add exclusive managed session connection leases (#10362)

2026-08-18 11:25:46 -03:00

vscode

fix(reasoning): forward Ollama Cloud thinking (#9290)

2026-08-04 14:34:02 -03:00

warmupScheduler

feat(warmup): proactive Claude warmup scheduler (#8848) (#9449)

2026-08-07 20:53:21 -03:00

webhooks

fix(webhooks): remove 3 declared-but-never-emitted ghost events (#11050)

2026-08-21 20:54:51 -03:00

ws

chore(release): v3.6.6 — Stabilization (#1241)

2026-04-16 05:26:17 -03:00

zed-oauth

Release v3.8.6 (#2804)

2026-05-29 12:44:29 -03:00

admissionVirtualLanes.ts

feat: combo-lane awareness + activation UX + MCP visibility (Wave 2 of #9654) (#10039)

2026-08-18 11:31:46 -03:00

apiBridgeServer.ts

feat: update API bridge proxy timeout to 600000ms and enhance related tests

2026-05-09 12:42:59 +00:00

apiKeyExposure.ts

Release v3.8.27 (#3968)

2026-06-17 02:43:21 -03:00

arenaEloSync.ts

chore(startup): remove server-init.ts, a module nothing imports (#10780)

2026-08-20 10:27:26 -03:00

benchmarks.ts

feat: complete memory and skills implementation for antigravity

2026-04-01 08:42:03 -03:00

buildPhase.ts

Integration: security tier + self-hosted operator blockers (rebased onto v3.8.51) (#10952)

2026-08-23 16:51:25 -03:00

cacheControlSettings.ts

feat: add cache control settings and token-based metrics

2026-03-29 14:37:55 +02:00

cacheLayer.ts

fix(build): remove node: protocol prefix from all src/ imports (#turbopack-compat)

2026-03-17 04:24:46 -03:00

ccDiscoveryAliasResolve.ts

fix(sse): route claude/<provider>/<model> aliases for catalog-only providers (#9856)

2026-08-09 09:52:28 -03:00

cloudflaredTunnel.ts

Release v3.8.49 (#7076)

2026-07-29 15:18:55 -03:00

cloudSync.stub.ts

Release v3.8.6 (#2804)

2026-05-29 12:44:29 -03:00

cloudSync.ts

Release v3.8.6 (#2804)

2026-05-29 12:44:29 -03:00

consoleInterceptor.ts

fix(logging): keep the component and apply printf formats in the app log (#10770)

2026-08-20 06:29:42 -03:00

container.ts

feat: add error pages, harden DB layer and compliance module

2026-03-04 19:35:38 -03:00

contextWindowResolver.ts

feat(models): unify token limit overrides (#8908)

2026-08-05 22:41:38 -03:00

dataPaths.ts

fix(db): keep test runs off the operator's real DATA_DIR (#10432)

2026-08-15 01:51:01 -03:00

docsI18nPath.ts

Release v3.8.40

2026-06-29 08:40:06 -03:00

docsSanitizer.ts

Release v3.8.40

2026-06-29 08:40:06 -03:00

exclusiveLeaseIsolation.ts

feat(routing): add exclusive managed session connection leases (#10362)

2026-08-18 11:25:46 -03:00

freeProviderRankings.ts

feat(rankings): report what a free provider actually served (#10926)

2026-08-21 08:25:23 -03:00

freeProviderRankingsAuthType.ts

Release v3.8.49 (#7076)

2026-07-29 15:18:55 -03:00

gracefulShutdown.ts

perf(logging): offload call-log artifacts to a worker (#10123)

2026-08-18 10:49:15 -03:00

healthzLag.ts

feat(resilience): warn on slow /healthz event-loop lag (#10827)

2026-08-20 11:47:38 -03:00

idempotencyLayer.ts

feat(cache): implement dynamic cache components with TDD

2026-04-01 08:45:39 +07:00

initCloudSync.ts

fix(responses-continuation): recover a real id/output for passthrough and translate-mode replies (#11434)

2026-08-24 19:57:12 -03:00

instrumentationBootError.ts

fix(cli): guarantee non-empty [STARTUP] Fatal log on instrumentation-hook boot throw (#10447)

2026-08-18 10:57:44 -03:00

ipUtils.ts

Release v3.8.49 (#7076)

2026-07-29 15:18:55 -03:00

localDb.ts

fix(analytics): query auto routing from call logs (#10685)

2026-08-20 13:00:01 -03:00

localHealthCheck.ts

Release v3.8.49 (#7076)

2026-07-29 15:18:55 -03:00

logEnv.ts

fix(logging): document CHAT_LOG_MAX_BODY_KB, capture messageCount for Responses API bodies (#10038)

2026-08-13 04:02:42 -03:00

logPayloads.ts

Integration: security tier + self-hosted operator blockers (rebased onto v3.8.51) (#10952)

2026-08-23 16:51:25 -03:00

logRotation.ts

feat(providers): add AWS Polly and Lemonade provider support

2026-04-24 13:20:59 -03:00

machineToken.ts

fix(cli): restore packaged machine-token authentication (#10468)

2026-08-20 15:07:19 -03:00

modelAliasResolver.ts

fix(routing): preserve combo precedence and skip hidden models in alias resolver (#11107)

2026-08-23 07:01:07 -03:00

modelAliasSeed.ts

fix(routing): fallback to default model alias seeds when unmapped in database (#10124)

2026-08-17 08:21:53 -03:00

modelCapabilities.ts

fix(combo): resolve effort variants via base model capabilities (#11034)

2026-08-21 14:58:53 -03:00

modelCapabilityModalities.ts

feat: add Video Bridge frame sampling (#10483)

2026-08-15 14:23:29 -03:00

modelCapabilityOverrideTargets.ts

cherry-pick(pr-9569): fix(settings): use provider prefixes in model overrides (#9878)

2026-08-09 09:55:16 -03:00

modelCapabilityResolutionSnapshot.ts

fix(catalog): scope combo reasoning efforts by connection (#10723)

2026-08-20 09:31:12 -03:00

modelMetadataRegistry.ts

fix(responses-continuation): recover a real id/output for passthrough and translate-mode replies (#11434)

2026-08-24 19:57:12 -03:00

modelsDevSync.ts

chore(startup): remove server-init.ts, a module nothing imports (#10780)

2026-08-20 10:27:26 -03:00

ngrokTunnel.ts

Release v3.7.5 (#1753)

2026-04-30 01:27:03 -03:00

obsidianSync.ts

feat(observability): add Obsidian context source with 24 MCP tools (#3077)

2026-06-03 06:45:04 -03:00

omnirouteStatus.ts

feat(api): add provider quota telemetry, adaptive routing, and status inventory (#10148)

2026-08-18 11:31:53 -03:00

oneproxyRotator.ts

feat: integrate 1proxy free proxy marketplace (closes #1788) (#1847)

2026-05-01 08:36:07 -03:00

oneproxySync.ts

feat: integrate 1proxy free proxy marketplace (closes #1788) (#1847)

2026-05-01 08:36:07 -03:00

piiSanitizer.ts

fix(pii): preserve custom event names and apply stream PII sanitization fixes (#3056)

2026-06-01 23:13:19 -03:00

pricingSync.ts

fix(pricing): 3 dead entries in LITELLM_PROVIDER_MAP silently drop synced pricing (#10636)

2026-08-20 13:11:03 -03:00

providerNodePrefixes.ts

cherry-pick(pr-9569): fix(settings): use provider prefixes in model overrides (#9878)

2026-08-09 09:55:16 -03:00

proxyEchoTarget.ts

fix(proxy): stop reporting IPv4-only proxies as dead (#10868)

2026-08-20 15:19:32 -03:00

proxyEgress.ts

feat(proxy): surface anonymous egress-IP sharing in the health sweep and the egress API (#10876)

2026-08-20 15:47:34 -03:00

proxyHealth.ts

Release v3.8.40

2026-06-29 08:40:06 -03:00

proxyLogger.ts

perf(proxy): implement non-blocking async proxy log batching and performance optimizations (A, B, C, D) (#11182)

2026-08-23 01:07:32 -03:00

semanticCache.ts

fix(api): report the cache that requests actually use in /api/cache/stats (#10769)

2026-08-20 06:29:38 -03:00

serverLifecycle.ts

Release v3.8.49 (#7076)

2026-07-29 15:18:55 -03:00

sessionObservability.ts

feat(dashboard): surface exclusive managed leases in Sessions view (#11389)

2026-08-25 01:38:59 -03:00

source.ts

fix(bun): make server child and outbound fetch Bun-safe (#9761)

2026-08-11 09:16:23 -03:00

sseTextTransform.ts

Release v3.8.24 (#3747)

2026-06-13 17:27:40 -03:00

streamingPiiTransform.ts

fix(types): preserve streaming PII choice keys (#9566)

2026-08-07 20:54:11 -03:00

tailscaleTunnel.ts

fix(startup): read platform at runtime via os.platform() so Windows Tailscale branches survive bundle DCE (#10293) (#10500)

2026-08-17 08:24:51 -03:00

tokenHealthCheck.ts

fix(responses-continuation): recover a real id/output for passthrough and translate-mode replies (#11434)

2026-08-24 19:57:12 -03:00

tokenHealthCheckCopilot.ts

Release v3.8.49 (#7076)

2026-07-29 15:18:55 -03:00

tokenHealthCheckCursor.ts

feat(cursor): proactively renews Cursor sessions and fixes manual refresh (#9173)

2026-08-11 04:31:24 -03:00

tokenHealthCheckKimi.ts

fix(cli): stop pre-filling the secrets the server owns (#11436)

2026-08-24 20:04:11 -03:00

toolPolicy.ts

feat(phase2+3): DI container, plugins, PII sanitizer, tool policy, audit log, cache invalidation, ARIA, CSS vars

2026-02-18 14:43:57 -03:00

translatorEvents.ts

feat: OmniRoute v1.0.0 — Intelligent AI Gateway & Universal LLM Proxy

2026-02-18 00:02:15 -03:00

usageAnalytics.ts

Release v3.8.43 (#5609)

2026-07-02 10:47:13 -03:00

usageDb.ts

Release v3.8.18 (#3482)

2026-06-09 15:56:24 -03:00

warmupScheduler.ts

feat(routing): add exclusive managed session connection leases (#10362)

2026-08-18 11:25:46 -03:00

webhookDispatcher.ts

Release v3.8.49 (#7076)

2026-07-29 15:18:55 -03:00

wellKnown.ts

fix(cli): stop pre-filling the secrets the server owns (#11436)

2026-08-24 20:04:11 -03:00