Repository navigation

chore: sync upstream dev into #4042 branch - #19

Closed

Vocllum wants to merge 296 commits into

feat/usage-ledger-retention-v2from

sync/upstream-dev-92e21bc8

This pull request is big! We're only showing the most recent 250 commits

Commits on Sep 11, 2026

docs(devlog): re-verify the phase 1 anchors against the current dev tip

codex
authored and
lidge-jun
committed
3a3759e
docs(devlog): fold three audit rounds into the phase 1 design

codex
authored and
lidge-jun
committed
a11da68
feat(providers): pick a warm API key before the first attempt

codex
authored and
lidge-jun
committed
e395a87
fix(config): reject an unknown apiKeyPoolStrategy instead of loading it silently

codex
authored and
lidge-jun
committed
2e6841b
docs(devlog): scope phase 2 to the files no lane owns

codex
authored and
lidge-jun
committed
e1cc655
docs(devlog): fold two audit rounds into the phase 2 kernel plan

codex
authored and
lidge-jun
committed
fe2b763
refactor(oauth): move the pool rotation kernel out of the Codex namespace

codex
authored and
lidge-jun
committed
80d4a31
docs(devlog): record the second-half audit findings for the pool kernel

codex
authored and
lidge-jun
committed
3015be8
docs(devlog): re-verify phase 3 anchors and record what blocks it

codex
authored and
lidge-jun
committed
e1e8b25
docs(devlog): fold the implementation-entry audit into the phase 1 design

codex
authored and
lidge-jun
committed
09d0e7a
docs(devlog): record why the consume call site must be built first

codex
authored and
lidge-jun
committed
683384a
docs(devlog): measure why the failover promote needs a guard exemption

codex
authored and
lidge-jun
committed
afb5db9
fix(codex): let an operator account selection outrank the pool cursor

codex
authored and
lidge-jun
committed
63217d1
fix(codex): revoke the operator one-shot when its account is deleted

lidge-jun
and
Heisenberg
committed
e99db1d
docs(devlog): record the audit round that found the tests proved nothing
lidge-jun
committed
f725ef8
fix(codex): keep the model detour outside the operator preference guard
lidge-jun
committed
e3b61b3
docs(devlog): record the rebuttal of the model-detour finding
lidge-jun
committed
2da37d7
test(codex): cover the generation sweep of operator preferences
lidge-jun
committed
7235d25
fix(codex): reset the reconcile watermark with the health state it guards
lidge-jun
committed
eec1f9b
Merge pull request #4277 from lidge-jun/codex/key-pool-strategy
lidge-jun
authored
e1bb3a3
Merge pull request #4279 from lidge-jun/codex/pool-kernel
lidge-jun
authored
59b84ee
Merge pull request #4278 from lidge-jun/codex/structure-ssot-followup
lidge-jun
authored
c12469d
Merge pull request #4256 from lidge-jun/codex/260911-ws-commit-boundary
lidge-jun
authored
e02578e
Merge pull request #4284 from lidge-jun/codex/manual-selection-wins
lidge-jun
authored
29d632f
docs(devlog): plan the generic pool kernel layer at diff level
lidge-jun
committed
b7328d7
docs(devlog): fold the plan-audit findings into the generic kernel plan
lidge-jun
committed
82253a3
docs(devlog): fold three plan blockers, including a wrong fill-first order
lidge-jun
committed
5b282ba
feat(oauth): let the generic pool consume its strategy behind pool.kernel
lidge-jun
committed
6d21192
test(oauth): make the two 429 strategy cases discriminate
lidge-jun
committed
2122732
docs: describe the generic pool contract in both flag states
lidge-jun
committed
5567cc8
docs(devlog): plan the API-key pool call-site wiring
lidge-jun
committed
f9bf31c
feat(clients): add omo as an export and integration client
lidge-jun
committed
6b28478
docs(devlog): fold the wiring plan blockers
lidge-jun
committed
1c93a6f
feat(providers): use the warm API key on the first attempt
lidge-jun
committed
085fa6f
docs(devlog): record the rendered Integrations evidence for omo
lidge-jun
committed
d470f57
test(server): cover the pre-dispatch API key pick end to end
lidge-jun
committed
78d30c7
docs(devlog): plan quota-aware API key selection
lidge-jun
committed
9b067c2
fix(devlog): stop the omo contract note tripping the privacy scan
lidge-jun
committed
9689ee8
docs(devlog): fold the quota-selection plan blockers
lidge-jun
committed
f5f87e8
feat(devin-cli): local Devin CLI provider over ACP stdio (#4288)
lidge-jun
authored
d984994
feat(providers): rank API keys by quota headroom
lidge-jun
committed
8c1edce
test(providers): cover quota-ranked API key selection
lidge-jun
committed
9fbff86
Merge pull request #4290 from lidge-jun/codex/omo-client-integration
lidge-jun
authored
eb314c5
docs: document apiKeyPoolStrategy, including the new quota value
lidge-jun
committed
ba21644
chore(skills): regenerate the management surface map
lidge-jun
committed
083d044
Merge branch 'codex/generic-pool-kernel' into codex/key-pool-wiring
lidge-jun
committed
526eaf0
docs(devlog): plan the pool-settings contract consolidation
lidge-jun
committed
e5ff46c
docs: close the omo unit and fix two leftovers it created
lidge-jun
committed
2f89dd2
docs(devlog): fold the wp5 audit, which resized the unit
lidge-jun
committed
5a86180
docs(devlog): narrow the wp5 cycle to the guard and the validator collapse
lidge-jun
committed
4fd8377
docs(devlog): fold the re-audit residuals and name the guard targets
lidge-jun
committed
7a1e30b
test(server): pin the three legacy pool contracts exactly
lidge-jun
committed
3213e8b
Merge pull request #4294 from lidge-jun/codex/omo-unit-closure
lidge-jun
authored
cb7f96c
refactor(oauth): one validator for pool strategy and sticky limit
lidge-jun
committed
ee59544
docs(devlog): scope wp3 to the ordering criterion c-4 actually states
lidge-jun
committed
999c1ba
docs(devlog): fold the wp3 blockers, including a bar that was the threshold
lidge-jun
committed
cd5d070
docs(devlog): mark the pre-audit wp3 change surface superseded
lidge-jun
committed
3f0e79d
feat(codex): keep a bound thread on its account until that account is spent
lidge-jun
committed
270c175
test(codex): prove cache affinity outranks quota but not exhaustion
lidge-jun
committed
68e7074
docs(devlog): plan the compact and images key-pick seams
lidge-jun
committed
035bd54
docs(devlog): plan ZCode Responses attachment, GLM-5.3 modality fix, and Z.AI Responses default
lidge-jun
committed
0349ee5
docs(devlog): fold the wp4c audit, including the images snapshot trap
lidge-jun
committed
2628213
feat(server): pick a warm API key on the compact and images paths
lidge-jun
committed
2ad973e
test(server): cover the keyed image first-send key pick
lidge-jun
committed
400b111
test(adapters): cover the native compact first-send key pick
lidge-jun
committed
a37e794
fix(zcode): attach over the proxy Responses route instead of Chat Completions
lidge-jun
committed
f203436
docs(devlog): plan the unified pool route and the enabled defect
lidge-jun
committed
ce98d2b
fix(opencode): advertise per-model image capabilities in the exported config (#4300)

lidge-jun
and
colthreepv
authored
ad09340
docs(devlog): fold the wp5c audit; the new field stays off the legacy DTO
lidge-jun
committed
2c9e545
Merge pull request #4302 from lidge-jun/codex/zcode-protocol-plan
lidge-jun
authored
5edb7b7
feat(management): one pool-settings contract for all three kinds
lidge-jun
committed
f306e4f
test(server): cover the unified pool contract and the inherited enabled
lidge-jun
committed
5a0a8f9
docs: describe the unified pool route and correct a stale claim
lidge-jun
committed
1053138
feat(devin): Cognition cloud provider, carried from #4078 and hardened (#4285)

lidge-jun
and
wtfsayo
authored
1394b34
docs(devlog): plan the GUI pool client merge
lidge-jun
committed
a594f7e
fix(zai): declare glm-5.3-flash image input on the Chat rows
lidge-jun
committed
38a4bde
docs(devlog): fold the wp5b audit; the silent-no-op trap a third time
lidge-jun
committed
a054ba4
docs(devlog): amend the wp5b spec instead of only recording the audit
lidge-jun
committed
e0ecab1
Merge pull request #4304 from lidge-jun/codex/glm53-flash-modalities
lidge-jun
authored
45b32cb
feat(gui): one pool client for every kind
lidge-jun
committed
f85f6ac
refactor(gui): move the Codex strategy write beside the client it uses
lidge-jun
committed
610dad6
docs(devlog): capture the pool settings surface for wp5b
lidge-jun
committed
3dc69c4
Merge pull request #4289 from lidge-jun/codex/generic-pool-kernel
lidge-jun
authored
43d2a35
Merge remote-tracking branch 'origin/dev' into codex/key-pool-wiring
lidge-jun
committed
fb3df8e
test(cli): cover the unified pool route in the headless parity sweep
lidge-jun
committed
f567714
fix(providers): rebuild the route when the pre-dispatch key pick fires
lidge-jun
committed
d2ca1ab
test(providers): pin the rebuild contract and the Responses core path
lidge-jun
committed
86b3613
fix(providers): expire a cached key quota and reset cursors on a batch edit
lidge-jun
committed
2559502
docs: document cache affinity and the pre-dispatch key pick
lidge-jun
committed
f593498
feat(grok): reset-coupon inspection + gated redemption (gRPC-Web, journaled idempotency) (#4306)
lidge-jun
authored
fd7bde9
test(providers): stub the destination check in the cursor-reset case
lidge-jun
committed
6097a51
Merge remote-tracking branch 'origin/dev' into codex/key-pool-wiring
lidge-jun
committed
5282c40
chore(skills): regenerate the management surface map after the dev merge
lidge-jun
committed
6318374
feat(zai): default to the Responses protocol and keep Chat as a per-model opt-in
lidge-jun
committed
e4b32ed
Merge pull request #4307 from lidge-jun/codex/zai-responses-default
lidge-jun
authored
dea1bd2
fix: stop masking a failed pool read and a dead pool credential
lidge-jun
committed
c67e596
Merge pull request #4292 from lidge-jun/codex/key-pool-wiring
lidge-jun
authored
7a0513c

Commits

Commits on Sep 11, 2026

Commits on Sep 12, 2026