refactor: remove what the first-party plugin era left in live code

.downstream/native-domains.md

@@ -13,7 +13,7 @@ authentication and the existing step-up policy.
 | Interface | Contract |
 | --- | --- |
 | `GET/PUT /admin/settings/codex-runtime` | Codex request body compression switch (`request_zstd`; a missing key is on). |
-| `GET/PUT /admin/settings/observability` | Telemetry and native theme switches. |
+| `GET/PUT /admin/settings/observability` | Native theme switch (`theme_enabled`; a missing key is on). |
 
 Each of the two is stored as one `settings` row holding a JSON object of
 boolean switches; `GET` and `PUT` answer with the switches in the standard
@@ -128,6 +128,19 @@ Going back to an earlier release is therefore not an image change: it requires a
 database dump taken before the migrations that release does not have. Such a
 rollback has not been run and is not an automatic failure path.
 
+Migration 273 removes the key `telemetry_enabled` from the stored
+`admin_observability_config` row; `theme_enabled` keeps its value. The key
+switched the per-account traffic counters, which are deleted with their route
+`GET /admin/accounts/:id/traffic-telemetry`. The counters were the Redis keys
+`account_traffic_observe:{<account id>}:<http|ws>` and the same with the
+suffix `:minute`; each expires 24 hours after its last write and nothing
+writes them any more. v0.2.13-codexrip.10 and .11 start on the migrated row and
+take the missing switch as on. Saving the observability settings in one of
+them stores the key again, and 273 is recorded by then: this release then
+exits at start with `invalid setting admin_observability_config` until the key
+is removed by hand
+(`UPDATE settings SET value = (value::jsonb - 'telemetry_enabled')::text WHERE key = 'admin_observability_config'`).
+
 ## Verification
 
 Normal required PR checks validate the native domain packages, account scope,

.github/scripts/test_upstream_automation_contract.py

@@ -2,7 +2,6 @@
 
 import json
 import re
-import shlex
 import unittest
 from pathlib import Path
 from types import SimpleNamespace
@@ -83,51 +82,22 @@ def test_image_build_skips_validation_without_changing_daily_build(self):
         vite = (ROOT / "frontend/vite.config.ts").read_text(encoding="utf-8")
         package = json.loads((ROOT / "frontend/package.json").read_text(encoding="utf-8"))
         self.assertIn("RUN SUB2API_ARTIFACT_BUILD=1 pnpm exec vite build", dockerfile)
-        self.assertNotIn("backend/pkg/extensionapi/ui/build.mjs", dockerfile)
         self.assertNotIn("RUN pnpm run build", dockerfile)
         self.assertNotIn("ENV SUB2API_ARTIFACT_BUILD", dockerfile)
         self.assertIn("process.env.SUB2API_ARTIFACT_BUILD === '1'", vite)
         self.assertIn("enableBuild: !artifactBuild", vite)
         self.assertEqual(package["scripts"]["build"], "pnpm run check:i18n && vue-tsc -b && vite build")
 
-    def test_native_ci_preserves_required_checks_and_selects_existing_contracts(self):
+    def test_verify_workflow_keeps_required_checks_and_selects_existing_specs(self):
         verify = (ROOT / ".github/workflows/downstream-verify.yml").read_text(encoding="utf-8")
         for name in ("Downstream backend", "Downstream frontend", "Candidate OCI image"):
             self.assertRegex(verify, rf"(?m)^    name: {re.escape(name)}$")
-        self.assertIn("run: bash .github/scripts/test_native_domains.sh", verify)
-        for retired in ("test_first_party_plugins.sh", "initialize_plugin_publisher",
-                        "backend/pkg/extensionapi/ui/tsconfig.json", "../plugins/"):
-            self.assertNotIn(retired, verify)
         specs = re.findall(r"(?m)^\s+(src/\S+\.spec\.ts)(?:\s+\\)?$", verify)
         self.assertTrue(specs, "the frontend gate must select real spec files")
         self.assertEqual(len(specs), len(set(specs)), "do not repeat identical frontend specs")
         for spec in specs:
             self.assertTrue((ROOT / "frontend" / spec).is_file(), spec)
 
-        script = (ROOT / ".github/scripts/test_native_domains.sh").read_text(encoding="utf-8")
-        self.assertNotRegex(script, r"package-plugin|generate-key|publisher\.key|plugins/\*")
-        commands = [shlex.split(line) for line in script.replace("\\\n", " ").splitlines()
-                    if line.startswith("go -C backend test ")]
-        self.assertEqual(len(commands), 2)
-        for command in commands:
-            selector = command[command.index("-run") + 1] if "-run" in command else r"^Test"
-            packages = [arg for arg in command if arg.startswith("./")]
-            self.assertTrue(packages)
-            for package in packages:
-                path = ROOT / "backend" / package.removeprefix("./").removesuffix("/...")
-                self.assertTrue(path.is_dir(), package)
-                files = path.rglob("*_test.go") if package.endswith("/...") else path.glob("*_test.go")
-                names = []
-                for file in files:
-                    source = file.read_text(encoding="utf-8")
-                    # These commands select unit fixtures on the Linux PR runner.
-                    build = re.search(r"(?m)^//go:build (.+)$", source)
-                    if build and re.search(r"\b(integration|windows)\b", build.group(1)):
-                        continue
-                    names.extend(re.findall(r"(?m)^func (Test\w+)\(", source))
-                selected = [name for name in names if re.search(selector, name)]
-                self.assertTrue(selected, f"{package}: {selector} selected no unit tests")
-
     def test_bot_chain_is_explicit_and_does_not_overwrite_manual_resolutions(self):
         self.assertIn("upstream_tag:", self.sync)
         self.assertIn("preserve manual resolutions", self.sync)

.github/workflows/downstream-verify.yml

@@ -34,8 +34,6 @@ jobs:
           python3 .github/scripts/test_release_preflight.py
       - name: Agent protocol contracts
         run: bash .github/scripts/test_agent_protocol.sh
-      - name: Native domain contracts
-        run: bash .github/scripts/test_native_domains.sh
       - name: Reasoning recovery contracts
         run: bash .github/scripts/test_reasoning_recovery.sh
       - name: Model context capacity contracts
@@ -110,14 +108,13 @@ jobs:
           pnpm exec vitest run \
             src/components/admin/account/__tests__/AccountTestModal.spec.ts \
             src/components/admin/account/__tests__/AccountTestModal.displayContract.spec.ts \
-            src/components/admin/account/__tests__/AccountTestModal.policyPlan.spec.ts \
+            src/components/admin/account/__tests__/AccountTestModal.testPlan.spec.ts \
             src/components/keys/__tests__/UseKeyModal.spec.ts \
             src/views/admin/__tests__/SettingsView.spec.ts \
             src/components/common/__tests__/VersionBadge.downstream.spec.ts \
             src/components/common/__tests__/BaseDialog.spec.ts \
-            src/components/common/__tests__/Select.disabled.spec.ts \
             src/views/admin/__tests__/PluginsView.spec.ts \
-            src/components/admin/codex/__tests__/CodexRuntime.native.spec.ts \
+            src/components/admin/codex/__tests__/CodexRuntime.spec.ts \
             src/api/__tests__/downstreamStatus.spec.ts \
             src/i18n/__tests__/accountConsoleLocales.spec.ts \
             src/__tests__/integration/data-import.spec.ts \
@@ -141,7 +138,7 @@ jobs:
             src/views/user/__tests__/StripePaymentView.spec.ts \
             src/views/admin/__tests__/ReasoningRecoveryView.spec.ts \
             src/components/account/__tests__/EditAccountModal.spec.ts \
-            src/utils/__tests__/accountEditCodec.spec.ts \
+            src/utils/__tests__/openaiProtocolModeEdits.spec.ts \
             src/components/account/__tests__/ModelWhitelistSelector.spec.ts \
             src/components/account/__tests__/ModelContextCapacityField.spec.ts \
             src/utils/__tests__/modelContextCapacity.spec.ts \

README.md

@@ -4,7 +4,7 @@
 
 # Sub2API
 
-[![Go](https://img.shields.io/badge/Go-1.26.6-00ADD8.svg)](https://golang.org/)
+[![Go](https://img.shields.io/badge/Go-1.27.0-00ADD8.svg)](https://golang.org/)
 [![Vue](https://img.shields.io/badge/Vue-3.4+-4FC08D.svg)](https://vuejs.org/)
 [![PostgreSQL](https://img.shields.io/badge/PostgreSQL-15+-336791.svg)](https://www.postgresql.org/)
 [![Redis](https://img.shields.io/badge/Redis-7+-DC382D.svg)](https://redis.io/)
@@ -200,7 +200,7 @@ Community projects that extend or integrate with Sub2API:
 
 | Component | Technology |
 |-----------|------------|
-| Backend | Go 1.26.6, Gin, Ent |
+| Backend | Go 1.27.0, Gin, Ent |
 | Frontend | Vue 3.4+, Vite 5+, TailwindCSS |
 | Database | PostgreSQL 15+ |
 | Cache/Queue | Redis 7+ |

README_CN.md

@@ -4,7 +4,7 @@
 
 # Sub2API
 
-[![Go](https://img.shields.io/badge/Go-1.26.6-00ADD8.svg)](https://golang.org/)
+[![Go](https://img.shields.io/badge/Go-1.27.0-00ADD8.svg)](https://golang.org/)
 [![Vue](https://img.shields.io/badge/Vue-3.4+-4FC08D.svg)](https://vuejs.org/)
 [![PostgreSQL](https://img.shields.io/badge/PostgreSQL-15+-336791.svg)](https://www.postgresql.org/)
 [![Redis](https://img.shields.io/badge/Redis-7+-DC382D.svg)](https://redis.io/)
@@ -202,7 +202,7 @@ Sub2API 是一个 AI API 网关平台，用于分发和管理 AI 产品订阅的
 
 | 组件 | 技术 |
 |------|------|
-| 后端 | Go 1.26.6, Gin, Ent |
+| 后端 | Go 1.27.0, Gin, Ent |
 | 前端 | Vue 3.4+, Vite 5+, TailwindCSS |
 | 数据库 | PostgreSQL 15+ |
 | 缓存/队列 | Redis 7+ |

README_JA.md

@@ -4,7 +4,7 @@
 
 # Sub2API
 
-[![Go](https://img.shields.io/badge/Go-1.26.6-00ADD8.svg)](https://golang.org/)
+[![Go](https://img.shields.io/badge/Go-1.27.0-00ADD8.svg)](https://golang.org/)
 [![Vue](https://img.shields.io/badge/Vue-3.4+-4FC08D.svg)](https://vuejs.org/)
 [![PostgreSQL](https://img.shields.io/badge/PostgreSQL-15+-336791.svg)](https://www.postgresql.org/)
 [![Redis](https://img.shields.io/badge/Redis-7+-DC382D.svg)](https://redis.io/)
@@ -201,7 +201,7 @@ Sub2API を拡張・統合するコミュニティプロジェクト:
 
 | コンポーネント | 技術 |
 |-----------|------------|
-| バックエンド | Go 1.26.6, Gin, Ent |
+| バックエンド | Go 1.27.0, Gin, Ent |
 | フロントエンド | Vue 3.4+, Vite 5+, TailwindCSS |
 | データベース | PostgreSQL 15+ |
 | キャッシュ/キュー | Redis 7+ |