sususu
30b2ac8996
refactor(devin): deduplicate auth credentials extraction, filter sparse tool calls, and optimize model lookup
2026-09-13 23:34:43 +08:00
sususu
fb2c1c1afa
fix(devin): transport reuse, interleaved stream steps, strings.Builder panic, and updater URL
2026-09-13 23:34:43 +08:00
sususu
1604cb0334
fix(devin): normalize upstream internal errors to 502 Bad Gateway
2026-09-13 23:34:43 +08:00
sususu
6c7d2d57f7
perf(devin): cache sensitive word regex matcher, preallocate request bytes and frame decompression buffer
2026-09-13 23:34:43 +08:00
sususu
5d0c77cf3f
fix(devin): enforce Connect-RPC EOS trailer invariant, validate frame flag, and bind OAuth callback to ctx
2026-09-13 23:34:43 +08:00
sususu
a5ea971f35
fix(devin): sort streaming tool call stop events and normalize prompt CRLF
2026-09-13 23:34:43 +08:00
sususu
f1f5506c0b
fix(devin): align wire protocol, harden streaming, and resolve multi-turn tool/signature parity
...
- Wire parity: align Connect-RPC Sentry-Trace, User-Agent suppression, float32 double pattern, and dynamic 732-char hex device fingerprint
- Session ordinal & cache: implement process-scoped Field 15.2 with bounded LRU (5000 entries) and Field 15.4=14 user boundary; prioritize stable session_id over previous_interaction_id to preserve prompt caching
- Streaming robustness: unblock hung TCP reads on client cancellation via context watcher; accurately propagate stream read errors and trailer errors instead of swallowing truncated frames
- Thought signature & reasoning: emit raw delta signatures directly in active thought steps; eliminate redundant tail base64 re-encoding; ensure 1:1 assistant signature and thinking alignment across multi-turn history
- Tool call de-multiplexing: route parallel tool calls by tc.Index in both streaming step events and non-streaming aggregations
- Security & transport: escape OAuth callback error HTML against reflected XSS, enforce strict state validation, and isolate Devin HTTP transport with tr.Clone()
2026-09-13 23:34:43 +08:00
sususu
2683ec201d
feat(cmd): add fetch_devin_models CLI tool for dynamic model catalog extraction
2026-09-13 23:34:43 +08:00
sususu
469aa3678f
feat(devin): parse protobuf timestamp and harden partial failure logging
2026-09-13 23:34:43 +08:00
sususu
16cb6c0b02
feat(devin): add symmetric decoded upstream response in request log
2026-09-13 23:34:43 +08:00
sususu
2caab7dbf9
feat(devin): enhance request-log with intermediate interactions and decoded upstream body
2026-09-13 23:34:43 +08:00
sususu
5b8e3821b1
fix(devin): strip system prompt lines matching configured sensitive words to evade unicode normalization bypass
2026-09-13 23:34:43 +08:00
sususu
c0b76c2d09
refactor(devin): keep sensitive words strictly external in config.yaml without hardcoding
2026-09-13 23:34:43 +08:00
sususu
c0b86059c4
fix(devin): sanitize claude subagent identity and emoji directives to prevent content policy 403
2026-09-13 23:34:43 +08:00
sususu
f5247e496f
fix(devin): restrict sensitive word obfuscation strictly to system prompt only
2026-09-13 23:34:43 +08:00
sususu
02fd1bde78
feat(devin): restrict glm-5-2 to free tier, remove static swe-1-7-lightning, and harden cloak
2026-09-13 23:34:43 +08:00
sususu
eed249072d
feat(devin): prefix all Devin model IDs with devin/ namespace
2026-09-13 23:34:43 +08:00
sususu
cbe800aa28
feat(devin): bind upstream session_id and cascade_id to CPA canonical session
2026-09-13 23:34:43 +08:00
sususu
f94752762b
feat(devin): add Devin/Cognition provider integration and CLI OAuth
...
Implement the full Devin/Cognition Connect-RPC provider support across all CPA endpoints (/v1/chat/completions, /v1/messages, /v1/responses), complete with binary protobuf wire framing, streaming tools/arguments delta handling, thinking/reasoning replay, and CLI OAuth authentication.
Key highlights:
- Wire Protocol & Streaming:
* Implemented Connect-RPC uncompressed 5-byte framing (0x00 + 4-byte length + protobuf) for ApiServerService/GetChatMessage.
* Implemented Devin protobuf encoder/decoder in internal/runtime/executor/helps/devin_wire.go, including ClientMetadata, prompts, tools, completion_config, and multimodal image handling (Prompt Field #10 ).
* Stream frame consumption via interactions protocol, correctly mapping arguments_delta and tracking multiple sequential tool calls (currentToolCallActive).
* Streaming thought summary and sealed.v1 signature deltas targeting the thinking step.
- Model Registration & Thinking Clamping:
* Registered static fallback models in model_definitions.go (swe-2, claude-fable-5-1, gpt-6-astra, swe-1-7-lightning, glm-5-2, glm-5-3).
* Configured ThinkingSupport with discrete levels per model family.
* Implemented CPA-standard nearest-neighbor clamping for thinking levels (minimal/low -> medium, xhigh -> max for swe-2).
* Mapped thinking effort to Devin upstream model UID (e.g. swe-2-medium, swe-2-high, swe-2-max).
- Sensitive Words & System Prompt Sanitization:
* Added devin.sensitive-words configuration in internal/config/config_types.go and config.go, matching Antigravity conventions.
* Supported zero-width space (\u200b) obfuscation in prompts, tools, and system instructions via SensitiveWordMatcher.
* Stripped Claude Code billing headers (x-anthropic-billing-header:) and CLI identity signatures from system instructions and tool descriptions to avoid upstream content filter rejections.
- Signature Compatibility:
* Added SignatureProviderSWE = "swe" recognizing sealed.v1.* reasoning signatures in internal/signature/provider_compatibility.go.
* Propagated reasoning.encrypted_content on Responses API and thinking.signature on Messages API.
- Authentication:
* Implemented Devin PKCE OAuth flow with loopback callback server and headless manual token/code paste (--no-browser).
* Registered Devin authenticator in SDK and CLI (-devin-login flag).
* Integrated with management OAuth session endpoints and credentials manager.
2026-09-13 23:34:43 +08:00
