elky
808946312a
fix(providers): retry initial empty quota before showing feedback
2026-09-07 11:18:31 +08:00
elky
741107bf71
fix(transport): make provider DNS address filtering opt-in
2026-09-07 11:18:31 +08:00
elky
6962731220
fix(antigravity): restore default OAuth client compatibility
2026-09-07 10:51:24 +08:00
elky
062e111c03
fix(observability): preserve admin upstream error diagnostics
2026-09-07 10:39:48 +08:00
fawney19
470c59e197
Merge pull request #804 from AAEE86/fix-frontend-eslint
...
Fix frontend ESLint issues
2026-09-07 10:06:40 +08:00
elky
2f929e74c7
fix(frontend): preserve session cleanup and Unicode navigation
2026-09-07 09:57:53 +08:00
AAEE86
fc0417ceb9
fix(frontend): resolve ESLint issues
2026-09-07 09:03:51 +08:00
elky
44174a31e0
chore: update architecture documentation ignore rules
2026-09-07 08:57:44 +08:00
elky
b599fb7354
fix(frontend): complete i18n coverage and responsive layouts
2026-09-07 08:54:19 +08:00
elky
14f96c9fa0
fix(providers): preserve health in redacted key summaries
2026-09-07 08:53:41 +08:00
elky
6948852992
fix(release): support atomic installation on musl Linux
2026-09-07 01:07:34 +08:00
elky
1b01b08c31
fix(testkit): disable Unix sockets for temporary PostgreSQL
...
Use loopback TCP to avoid unwritable default socket directories on Ubuntu CI.
2026-09-07 00:37:56 +08:00
elky
2281f2b754
refactor(data): remove MySQL and SQLite support
...
Use PostgreSQL as the only database backend across runtime, schema tooling, installation, Compose, and CI. Update regression tests and reject removed drivers explicitly.
2026-09-07 00:09:42 +08:00
elky
b5ed802277
chore(codex): bump default client version to 0.153.4
2026-09-06 19:58:35 +08:00
elky
d1b5eb08ee
fix(providers): correct endpoint health aggregation and display
2026-09-06 18:24:27 +08:00
elky
dba5e6e9e9
feat: expose remote control as admin module
2026-09-06 00:13:57 +08:00
elky
c125e78c5f
fix(frontend): correct provider key total
2026-09-06 00:10:27 +08:00
fawney19
d1cb0ebecf
Merge pull request #775 from fawney19/codex/provider-policy-hardening
...
feat(codex): add provider outbound policy boundary
2026-09-05 16:56:23 +08:00
elky
9d7a0665c0
Merge remote-tracking branch 'origin/main' into codex/provider-policy-hardening
2026-09-05 16:21:10 +08:00
fawney19
882bb43125
Merge pull request #732 from fawney19/subscription-usage-policies
...
feat(billing): add composable subscription usage policies
2026-09-05 15:35:57 +08:00
elky
db6c522d60
fix(admin): use typed DNS config normalization error
2026-09-05 15:04:00 +08:00
elky
e29442a06a
merge(main): resolve subscription usage policy conflicts
2026-09-05 14:21:16 +08:00
elky
e15ea0d5d3
fix(security): configure trusted Fake-IP DNS hosts
2026-09-05 14:05:07 +08:00
ZheFox
2f374d6af2
Merge pull request #802 from zhefox/fix/codex-catalog-ci
...
fix(ci): route Codex fingerprint through ai_serving facade
2026-09-05 13:43:28 +08:00
ZheFox
4a356f4ea5
fix(ci): access Codex version through the gateway serving facade
2026-09-05 13:33:20 +08:00
ZheFox
c7676d567d
Merge pull request #801 from zhefox/fix/codex-admin-model-catalog
...
fix(codex): refresh fingerprints and unify management model catalogs
2026-09-05 13:18:47 +08:00
ZheFox
5ca4f87951
fix(codex): unify management model catalogs and refresh fingerprints
2026-09-05 13:14:24 +08:00
ZheFox
1fee8954cc
Merge pull request #788 from stabey/fix/antigravity-cross-format-envelope
...
fix(antigravity): wrap cross-format requests in the v1internal envelope
2026-09-05 11:49:03 +08:00
elky
f69b770f5e
fix(frontend): hide pricing source from model list
2026-09-05 09:56:34 +08:00
elky
856accdced
test(data): expect revoked API-key ciphertext on import
2026-09-05 05:07:55 +08:00
elky
92749b4d6e
fix(models): classify external catalog fetch failures
2026-09-05 04:56:29 +08:00
elky
f08c2e6729
test(data): expect anonymized deleted API key names
2026-09-05 04:56:14 +08:00
elky
e420bc6324
fix(ci): make postgres bootstrap tests apply pending migrations
2026-09-05 04:45:07 +08:00
elky
d723fb92d3
fix(image): validate signatures and preserve output mime
2026-09-05 04:08:20 +08:00
elky
5b1de5f921
fix(tunnel): allow exact private relay hosts
2026-09-05 03:57:02 +08:00
elky
7ed48e7b58
fix(data): make postgres snapshot migrations idempotent
2026-09-05 03:44:10 +08:00
elky
af712ebdbf
test(gateway): keep capture limit fixtures test-only
2026-09-05 03:35:56 +08:00
elky
33d5cd5993
fix(ci): align lint-safe security paths
2026-09-05 03:19:53 +08:00
elky
f5e1420ee6
fix(runtime): tolerate Linux socket device identity
2026-09-05 02:43:42 +08:00
elky
b37b252b14
fix(ci): satisfy protocol utility clippy checks
2026-09-05 02:37:41 +08:00
elky
0097ea89ad
fix(ci): document fixed tunnel auth transcripts
2026-09-05 02:31:57 +08:00
elky
10e63507f0
test(oauth): make antigravity exchange fixture deterministic
2026-09-05 01:48:12 +08:00
elky
9ff4d73d5c
fix(merge): align security contracts with latest main
2026-09-05 01:31:21 +08:00
elky
0e3bd7eff4
merge(main): sync latest main into security branch
2026-09-05 00:30:16 +08:00
elky
1c89b5f9ab
fix(models): allow manual entry during catalog load
2026-09-04 23:57:50 +08:00
elky
cdbbda40a6
fix(tunnel): guard private owner relay targets
2026-09-04 23:44:46 +08:00
elky
29a9d608d9
fix(models): keep manual creation available on catalog failure
2026-09-04 23:11:23 +08:00
stabey and Claude Opus 5
a6dc43d5f6
fix(antigravity): wrap cross-format requests in the v1internal envelope
...
The gemini:generate_content URL hook rewrites any Antigravity endpoint to
/v1internal:generateContent, but only the same-format passthrough and the two
OpenAI decision paths ever built the matching envelope. A Claude Messages or
Gemini client therefore reached the standard family planner, picked up the
rewritten URL, and posted a bare Gemini body that upstream rejects with
"Invalid JSON payload received. Unknown name \"contents\"" -- four retries
across every account, then a 503 that names none of this.
Route the standard family through the shared v1internal builder the same way
gemini_cli already is, so the URL and the body come from one decision. The
OpenAI-image-to-Gemini path cannot carry an envelope at all, so it now skips
Antigravity candidates instead of sending a request upstream can only reject.
Also stop treating a configured proxy as locally unsupported. The execution
plan carries the proxy itself, and the generic and Vertex gates moved to
transport_proxy_is_locally_supported long ago; Antigravity kept rejecting on
proxy.is_some(), which no longer matches how the local runtime executes. A
proxy that resolves to no route still disqualifies the request, and transport
profiles stay unsupported because the v1internal payload never carries one.
Co-Authored-By: Claude Opus 5 <noreply@anthropic.com >
2026-09-04 22:53:09 +08:00
elky
c6718754d3
fix(metrics): redact upstream admission target labels
2026-09-04 22:25:36 +08:00
elky
afdd033745
fix(admin): validate cyber failover setting
2026-09-04 21:47:24 +08:00
elky