Bob.Hou dea5345397 fix(mcp): honor the mcp:connect carve-out in transport route guards (#11139) ...

Validated on the combined batch board over tip 17897cc3: gates clean (changelog, file-size 159 frozen, complexity 2628<=2774, cognitive 1184<=1223, dead-code 409<=416, provider-consistency 267/350/0), typecheck:core clean, 83/83 PR suites + neighbors green (mcp-route-scope-carveout 15 tests with bug-injection proof, management-auth-hardening per-route call-shape pinning). The route layer now honors the #9159 mcp:connect carve-out exactly like the policy layer — audit/audit-stats deliberately stay manage-only, oma_ tokens still require admin. Thank you @HouMinXi!

2026-08-23 02:18:06 -03:00

..

a2a

feat(providers): integrate audited free-tier gateways (#9210)

2026-08-12 16:19:25 -03:00

accessTokens

Release v3.8.29 (#4126)

2026-06-19 06:49:01 -03:00

acp

fix(security): close 4 STILL-REAL advisory findings (ACP RCE hardening, db-backups tier, uppercase authz bypass, spawn-veto drift) (#11028)

2026-08-21 13:57:42 -03:00

agentSkills

fix(cli): restore packaged machine-token authentication (#10468)

2026-08-20 15:07:19 -03:00

api

fix(mcp): honor the mcp:connect carve-out in transport route guards (#11139)

2026-08-23 02:18:06 -03:00

audit

Release v3.8.42 (#5459)

2026-06-30 06:54:29 -03:00

auth

Release v3.8.43 (#5609)

2026-07-02 10:47:13 -03:00

batches

Release v3.8.42 (#5459)

2026-06-30 06:54:29 -03:00

build-profile

Release v3.8.41 (#5327)

2026-06-29 16:51:03 -03:00

catalog

chore(startup): remove server-init.ts, a module nothing imports (#10780)

2026-08-20 10:27:26 -03:00

chaos

Release v3.8.47 (#6569)

2026-07-13 09:12:40 -03:00

cli-helper

docs(cli): update opencode.ts JSDoc to reflect 128k context fallback (#11035) (#11157)

2026-08-22 20:07:11 -03:00

cliTools

feat(cli): support Grok Build custom host configuration (#10830)

2026-08-21 00:29:01 -03:00

cloudAgent

Release v3.8.47 (#6569)

2026-07-13 09:12:40 -03:00

combos

fix(catalog): exclude generic 128k default from combo context min() (#10734) (#10793)

2026-08-20 06:30:43 -03:00

compliance

fix(compliance): redact extra provider API keys (#10521)

2026-08-18 10:51:34 -03:00

compression

Release v3.8.38 (#5078)

2026-06-27 09:07:12 -03:00

conductor

feat(a2a): inbound delegation to the OmniConductor fleet via POST /api/a2a/tasks (PRD RF5) (#8223)

2026-08-12 02:13:41 -03:00

config

feat(providers): let operators add per-provider error rules via settings (#11104)

2026-08-22 14:40:35 -03:00

copilot

fix(api): guard combo updates against emptying, and fix copilot combo targets (#10866)

2026-08-20 15:46:57 -03:00

credentialHealth

fix(startup): log when credential health check is disabled (#11016) (#11021)

2026-08-21 14:00:27 -03:00

cursor

feat(providers): Cursor PKCE login with Bearer quota, auto router, and empty-turn errors (#9909)

2026-08-21 10:28:01 -03:00

db

fix(bun): update Dockerfile.bun entrypoint and native bun:sqlite instantiation (#11039) (#11163)

2026-08-22 20:24:21 -03:00

discovery

Release v3.8.44 (#5925)

2026-07-04 13:00:30 -03:00

display

Release v3.8.49 (#7076)

2026-07-29 15:18:55 -03:00

embeddings

feat(cli): add native Bun backend support and Dockerfile.bun (#11039)

2026-08-21 21:28:43 -03:00

env

feat(a2a): inbound delegation to the OmniConductor fleet via POST /api/a2a/tasks (PRD RF5) (#8223)

2026-08-12 02:13:41 -03:00

evals

fix(combo): guarantee combo loops terminate with an actionable error instead of hanging silently (#10463)

2026-08-20 23:07:25 -03:00

events

Release v3.8.41 (#5327)

2026-06-29 16:51:03 -03:00

freeProxyProviders

Release v3.8.49 (#7076)

2026-07-29 15:18:55 -03:00

gamification

feat(radar): recognize supporters and add Intel UI

2026-08-14 11:00:12 -03:00

guardrails

feat(vision-bridge): consolidate vision bridge fixes (catalog verdict, creds, cache key, CC vision) (#10859)

2026-08-21 02:13:07 -03:00

headroom

Release v3.8.46

2026-07-07 13:14:06 -03:00

images

Release v3.8.49 (#7076)

2026-07-29 15:18:55 -03:00

inspector

Fix/issue #8656 (#9095)

2026-08-05 21:43:16 -03:00

issueAgent

Release v3.8.49 (#7076)

2026-07-29 15:18:55 -03:00

jobRegistry

maint: follow-up cherry-pick fix-in-place #9631 (conflict-resolved fallback) (#9886)

2026-08-09 09:54:47 -03:00

jobs

maint: follow-up cherry-pick fix-in-place #9631 (conflict-resolved fallback) (#9886)

2026-08-09 09:54:47 -03:00

kimi

feat(sse): add kimi web token lifecycle manager, rolling auto-refresh and 401 recovery (#10944)

2026-08-21 04:25:56 -03:00

localCorpus

Release v3.8.49 (#7076)

2026-07-29 15:18:55 -03:00

memory

fix(memory): treat TokenRouter as system-must-be-first (live HTTP 400 confirmed) (#11114)

2026-08-22 21:51:16 -03:00

middleware

Release v3.8.43 (#5609)

2026-07-02 10:47:13 -03:00

modelsDevSync

refactor(providers): remove the Puter provider at its owner's request (#10210)

2026-08-12 16:54:50 -03:00

monitoring

fix(autopilot): show real suggestion count and link dashboard (#11102)

2026-08-22 14:39:22 -03:00

notion

Release v3.8.42 (#5459)

2026-06-30 06:54:29 -03:00

oauth

feat(providers): Cursor PKCE login with Bearer quota, auto router, and empty-turn errors (#9909)

2026-08-21 10:28:01 -03:00

obsidian

feat(observability): add Obsidian context source with 24 MCP tools (#3077)

2026-06-03 06:45:04 -03:00

playground

refactor(playground): expand endpoint contract to 13 endpoints (D4-rev2)

2026-05-28 17:19:48 -03:00

plugins

feat(plugins): expose client request headers in plugin context (#9570) (#9668)

2026-08-07 20:54:32 -03:00

promptCache

Release v3.8.42 (#5459)

2026-06-30 06:54:29 -03:00

providerModels

feat(providers): Cursor PKCE login with Bearer quota, auto router, and empty-turn errors (#9909)

2026-08-21 10:28:01 -03:00

providers

fix(kimi): point kimi-web to international www.kimi.ai (#11045)

2026-08-22 18:55:23 -03:00

proxyHealth

feat(proxy): surface anonymous egress-IP sharing in the health sweep and the egress API (#10876)

2026-08-20 15:47:34 -03:00

proxyRelay

fix(relay): share one private-host guard across the three relay workers (#10941)

2026-08-21 04:17:25 -03:00

proxySubscription

fix(proxy-subscriptions): allow local/loopback proxy-subscription fetch URLs (#10416)

2026-08-18 10:49:52 -03:00

quota

feat(redis): add configurable key namespace prefix (#11042)

2026-08-22 18:56:45 -03:00

radar

fix(radar): close final client trust boundaries

2026-08-14 22:19:50 -03:00

reasoningRouting

Release v3.8.49 (#7076)

2026-07-29 15:18:55 -03:00

resilience

feat(api): add provider quota telemetry, adaptive routing, and status inventory (#10148)

2026-08-18 11:31:53 -03:00

routerEval

Release v3.8.49 (#7076)

2026-07-29 15:18:55 -03:00

routing

feat(api): add provider quota telemetry, adaptive routing, and status inventory (#10148)

2026-08-18 11:31:53 -03:00

runtime

feat: enhance port configuration and API bridge support

2026-02-26 15:11:40 +00:00

search

feat(search): first-class X Search via SuperGrok x_search (#10988)

2026-08-21 14:16:42 -03:00

security

Release v3.8.31 (#4377)

2026-06-20 14:55:24 -03:00

services

fix(release): repair v3.8.50 base-red tail after latest root lift (#10964)

2026-08-22 23:09:16 -03:00

skills

fix(skills): make marketplace installs available to API keys (#10854)

2026-08-21 00:13:31 -03:00

spend

feat(core): add payload rules, tag routing, and scheduled budgets

2026-04-17 09:00:32 -03:00

sync

feat(api-manager): add provider-level model permissions (#9313)

2026-08-11 10:29:28 -03:00

system

fix(auto-update): skip synthetic Next.js standalone package.json without name field in resolveProjectRoot (#8956) (#9354)

2026-08-05 16:07:31 -03:00

telegram

fix(release): repair post-sweep base regressions

2026-08-09 15:16:55 -03:00

translator

feat(dashboard): add custom CLI builder and eval suite management

2026-04-23 16:57:43 -03:00

usage

fix(analytics): classify opencode-go as a flat-rate subscription (#11199)

2026-08-23 01:24:28 -03:00

versionManager

fix(cliproxy): read os.platform()/os.arch() at runtime in binaryManager platform detection (#10244) (#10474)

2026-08-18 11:42:47 -03:00

vncSession

feat(routing): add exclusive managed session connection leases (#10362)

2026-08-18 11:25:46 -03:00

vscode

fix(reasoning): forward Ollama Cloud thinking (#9290)

2026-08-04 14:34:02 -03:00

warmupScheduler

feat(warmup): proactive Claude warmup scheduler (#8848) (#9449)

2026-08-07 20:53:21 -03:00

webhooks

fix(webhooks): remove 3 declared-but-never-emitted ghost events (#11050)

2026-08-21 20:54:51 -03:00

ws

chore(release): v3.6.6 — Stabilization (#1241)

2026-04-16 05:26:17 -03:00

zed-oauth

Release v3.8.6 (#2804)

2026-05-29 12:44:29 -03:00

admissionVirtualLanes.ts

feat: combo-lane awareness + activation UX + MCP visibility (Wave 2 of #9654) (#10039)

2026-08-18 11:31:46 -03:00

apiBridgeServer.ts

feat: update API bridge proxy timeout to 600000ms and enhance related tests

2026-05-09 12:42:59 +00:00

apiKeyExposure.ts

Release v3.8.27 (#3968)

2026-06-17 02:43:21 -03:00

arenaEloSync.ts

chore(startup): remove server-init.ts, a module nothing imports (#10780)

2026-08-20 10:27:26 -03:00

benchmarks.ts

feat: complete memory and skills implementation for antigravity

2026-04-01 08:42:03 -03:00

cacheControlSettings.ts

feat: add cache control settings and token-based metrics

2026-03-29 14:37:55 +02:00

cacheLayer.ts

fix(build): remove node: protocol prefix from all src/ imports (#turbopack-compat)

2026-03-17 04:24:46 -03:00

ccDiscoveryAliasResolve.ts

fix(sse): route claude/<provider>/<model> aliases for catalog-only providers (#9856)

2026-08-09 09:52:28 -03:00

cloudflaredTunnel.ts

Release v3.8.49 (#7076)

2026-07-29 15:18:55 -03:00

cloudSync.stub.ts

Release v3.8.6 (#2804)

2026-05-29 12:44:29 -03:00

cloudSync.ts

Release v3.8.6 (#2804)

2026-05-29 12:44:29 -03:00

consoleInterceptor.ts

fix(logging): keep the component and apply printf formats in the app log (#10770)

2026-08-20 06:29:42 -03:00

container.ts

feat: add error pages, harden DB layer and compliance module

2026-03-04 19:35:38 -03:00

contextWindowResolver.ts

feat(models): unify token limit overrides (#8908)

2026-08-05 22:41:38 -03:00

dataPaths.ts

fix(db): keep test runs off the operator's real DATA_DIR (#10432)

2026-08-15 01:51:01 -03:00

docsI18nPath.ts

Release v3.8.40

2026-06-29 08:40:06 -03:00

docsSanitizer.ts

Release v3.8.40

2026-06-29 08:40:06 -03:00

exclusiveLeaseIsolation.ts

feat(routing): add exclusive managed session connection leases (#10362)

2026-08-18 11:25:46 -03:00

freeProviderRankings.ts

feat(rankings): report what a free provider actually served (#10926)

2026-08-21 08:25:23 -03:00

freeProviderRankingsAuthType.ts

Release v3.8.49 (#7076)

2026-07-29 15:18:55 -03:00

gracefulShutdown.ts

perf(logging): offload call-log artifacts to a worker (#10123)

2026-08-18 10:49:15 -03:00

healthzLag.ts

feat(resilience): warn on slow /healthz event-loop lag (#10827)

2026-08-20 11:47:38 -03:00

idempotencyLayer.ts

feat(cache): implement dynamic cache components with TDD

2026-04-01 08:45:39 +07:00

initCloudSync.ts

maint: follow-up cherry-pick fix-in-place #9631 (conflict-resolved fallback) (#9886)

2026-08-09 09:54:47 -03:00

instrumentationBootError.ts

fix(cli): guarantee non-empty [STARTUP] Fatal log on instrumentation-hook boot throw (#10447)

2026-08-18 10:57:44 -03:00

ipUtils.ts

Release v3.8.49 (#7076)

2026-07-29 15:18:55 -03:00

localDb.ts

fix(analytics): query auto routing from call logs (#10685)

2026-08-20 13:00:01 -03:00

localHealthCheck.ts

Release v3.8.49 (#7076)

2026-07-29 15:18:55 -03:00

logEnv.ts

fix(logging): document CHAT_LOG_MAX_BODY_KB, capture messageCount for Responses API bodies (#10038)

2026-08-13 04:02:42 -03:00

logPayloads.ts

cherry-pick(pr-9601): feat(responses): add encrypted reasoning replay opt-in (#9876)

2026-08-09 09:55:02 -03:00

logRotation.ts

feat(providers): add AWS Polly and Lemonade provider support

2026-04-24 13:20:59 -03:00

machineToken.ts

fix(cli): restore packaged machine-token authentication (#10468)

2026-08-20 15:07:19 -03:00

modelAliasResolver.ts

fix(routing): fallback to default model alias seeds when unmapped in database (#10124)

2026-08-17 08:21:53 -03:00

modelAliasSeed.ts

fix(routing): fallback to default model alias seeds when unmapped in database (#10124)

2026-08-17 08:21:53 -03:00

modelCapabilities.ts

fix(combo): resolve effort variants via base model capabilities (#11034)

2026-08-21 14:58:53 -03:00

modelCapabilityModalities.ts

feat: add Video Bridge frame sampling (#10483)

2026-08-15 14:23:29 -03:00

modelCapabilityOverrideTargets.ts

cherry-pick(pr-9569): fix(settings): use provider prefixes in model overrides (#9878)

2026-08-09 09:55:16 -03:00

modelCapabilityResolutionSnapshot.ts

fix(catalog): scope combo reasoning efforts by connection (#10723)

2026-08-20 09:31:12 -03:00

modelMetadataRegistry.ts

fix(catalog): declare GLM reasoning effort tiers (#10963)

2026-08-22 22:54:49 -03:00

modelsDevSync.ts

chore(startup): remove server-init.ts, a module nothing imports (#10780)

2026-08-20 10:27:26 -03:00

ngrokTunnel.ts

Release v3.7.5 (#1753)

2026-04-30 01:27:03 -03:00

obsidianSync.ts

feat(observability): add Obsidian context source with 24 MCP tools (#3077)

2026-06-03 06:45:04 -03:00

omnirouteStatus.ts

feat(api): add provider quota telemetry, adaptive routing, and status inventory (#10148)

2026-08-18 11:31:53 -03:00

oneproxyRotator.ts

feat: integrate 1proxy free proxy marketplace (closes #1788) (#1847)

2026-05-01 08:36:07 -03:00

oneproxySync.ts

feat: integrate 1proxy free proxy marketplace (closes #1788) (#1847)

2026-05-01 08:36:07 -03:00

piiSanitizer.ts

fix(pii): preserve custom event names and apply stream PII sanitization fixes (#3056)

2026-06-01 23:13:19 -03:00

pricingSync.ts

fix(pricing): 3 dead entries in LITELLM_PROVIDER_MAP silently drop synced pricing (#10636)

2026-08-20 13:11:03 -03:00

providerNodePrefixes.ts

cherry-pick(pr-9569): fix(settings): use provider prefixes in model overrides (#9878)

2026-08-09 09:55:16 -03:00

proxyEchoTarget.ts

fix(proxy): stop reporting IPv4-only proxies as dead (#10868)

2026-08-20 15:19:32 -03:00

proxyEgress.ts

feat(proxy): surface anonymous egress-IP sharing in the health sweep and the egress API (#10876)

2026-08-20 15:47:34 -03:00

proxyHealth.ts

Release v3.8.40

2026-06-29 08:40:06 -03:00

proxyLogger.ts

perf(proxy): implement non-blocking async proxy log batching and performance optimizations (A, B, C, D) (#11182)

2026-08-23 01:07:32 -03:00

semanticCache.ts

fix(api): report the cache that requests actually use in /api/cache/stats (#10769)

2026-08-20 06:29:38 -03:00

serverLifecycle.ts

Release v3.8.49 (#7076)

2026-07-29 15:18:55 -03:00

source.ts

fix(bun): make server child and outbound fetch Bun-safe (#9761)

2026-08-11 09:16:23 -03:00

sseTextTransform.ts

Release v3.8.24 (#3747)

2026-06-13 17:27:40 -03:00

streamingPiiTransform.ts

fix(types): preserve streaming PII choice keys (#9566)

2026-08-07 20:54:11 -03:00

tailscaleTunnel.ts

fix(startup): read platform at runtime via os.platform() so Windows Tailscale branches survive bundle DCE (#10293) (#10500)

2026-08-17 08:24:51 -03:00

tokenHealthCheck.ts

feat(providers): Cursor PKCE login with Bearer quota, auto router, and empty-turn errors (#9909)

2026-08-21 10:28:01 -03:00

tokenHealthCheckCopilot.ts

Release v3.8.49 (#7076)

2026-07-29 15:18:55 -03:00

tokenHealthCheckCursor.ts

feat(cursor): proactively renews Cursor sessions and fixes manual refresh (#9173)

2026-08-11 04:31:24 -03:00

tokenHealthCheckKimi.ts

feat(sse): add kimi web token lifecycle manager, rolling auto-refresh and 401 recovery (#10944)

2026-08-21 04:25:56 -03:00

toolPolicy.ts

feat(phase2+3): DI container, plugins, PII sanitizer, tool policy, audit log, cache invalidation, ARIA, CSS vars

2026-02-18 14:43:57 -03:00

translatorEvents.ts

feat: OmniRoute v1.0.0 — Intelligent AI Gateway & Universal LLM Proxy

2026-02-18 00:02:15 -03:00

usageAnalytics.ts

Release v3.8.43 (#5609)

2026-07-02 10:47:13 -03:00

usageDb.ts

Release v3.8.18 (#3482)

2026-06-09 15:56:24 -03:00

warmupScheduler.ts

feat(routing): add exclusive managed session connection leases (#10362)

2026-08-18 11:25:46 -03:00

webhookDispatcher.ts

Release v3.8.49 (#7076)

2026-07-29 15:18:55 -03:00