sususu f94752762b feat(devin): add Devin/Cognition provider integration and CLI OAuth ...

Implement the full Devin/Cognition Connect-RPC provider support across all CPA endpoints (/v1/chat/completions, /v1/messages, /v1/responses), complete with binary protobuf wire framing, streaming tools/arguments delta handling, thinking/reasoning replay, and CLI OAuth authentication.

Key highlights:
- Wire Protocol & Streaming:
  * Implemented Connect-RPC uncompressed 5-byte framing (0x00 + 4-byte length + protobuf) for ApiServerService/GetChatMessage.
  * Implemented Devin protobuf encoder/decoder in internal/runtime/executor/helps/devin_wire.go, including ClientMetadata, prompts, tools, completion_config, and multimodal image handling (Prompt Field #10).
  * Stream frame consumption via interactions protocol, correctly mapping arguments_delta and tracking multiple sequential tool calls (currentToolCallActive).
  * Streaming thought summary and sealed.v1 signature deltas targeting the thinking step.

- Model Registration & Thinking Clamping:
  * Registered static fallback models in model_definitions.go (swe-2, claude-fable-5-1, gpt-6-astra, swe-1-7-lightning, glm-5-2, glm-5-3).
  * Configured ThinkingSupport with discrete levels per model family.
  * Implemented CPA-standard nearest-neighbor clamping for thinking levels (minimal/low -> medium, xhigh -> max for swe-2).
  * Mapped thinking effort to Devin upstream model UID (e.g. swe-2-medium, swe-2-high, swe-2-max).

- Sensitive Words & System Prompt Sanitization:
  * Added devin.sensitive-words configuration in internal/config/config_types.go and config.go, matching Antigravity conventions.
  * Supported zero-width space (\u200b) obfuscation in prompts, tools, and system instructions via SensitiveWordMatcher.
  * Stripped Claude Code billing headers (x-anthropic-billing-header:) and CLI identity signatures from system instructions and tool descriptions to avoid upstream content filter rejections.

- Signature Compatibility:
  * Added SignatureProviderSWE = "swe" recognizing sealed.v1.* reasoning signatures in internal/signature/provider_compatibility.go.
  * Propagated reasoning.encrypted_content on Responses API and thinking.signature on Messages API.

- Authentication:
  * Implemented Devin PKCE OAuth flow with loopback callback server and headless manual token/code paste (--no-browser).
  * Registered Devin authenticator in SDK and CLI (-devin-login flag).
  * Integrated with management OAuth session endpoints and credentials manager.

2026-09-13 23:34:43 +08:00

..

antigravity_credits_test.go

feat: add Home credential concurrency support

2026-07-23 13:42:08 +08:00

antigravity_credits.go

feat: enhance fault tolerance for kv-based caching and introduce additional tests

2026-06-14 21:11:35 +08:00

api_key_model_alias_test.go

feat(xai): add xAI API key support with comprehensive handling and tests

2026-07-14 04:40:12 +08:00

api_key_model_capabilities_test.go

feat(compat): preserve Claude thinking/tool-call content for is-compat OpenAI compatibility models

2026-08-07 06:26:33 +08:00

api_key_model_capabilities.go

feat(auth): use home model capabilities for thinking

2026-09-03 13:10:30 +08:00

api_key_model_compat_test.go

feat(compat): preserve compat-mode thinking/signature blocks for API-key models

2026-08-06 17:19:24 +08:00

auto_refresh_loop_test.go

fix(auth): cap refresh loop timer wait duration

2026-09-08 12:07:57 +08:00

auto_refresh_loop.go

feat(management): add endpoint to refresh auth files

2026-09-09 20:05:33 +08:00

classification_test.go

feat(auth): refactor credential kind detection and add dynamic source classification

2026-06-23 23:21:33 +08:00

classification.go

feat(codex): add Alpha Search API key support with configurable endpoint

2026-08-01 00:31:26 +08:00

claude_ratelimit_cooldown_test.go

fix(claude): add Anthropic unified rate-limit parsing helpers

2026-08-15 14:08:16 +08:00

codex_forcemap_ws_forward_test.go

fix(auth): repair force-mapped Responses SSE framing for WS forwarder

2026-06-29 18:11:44 +08:00

codex_model_not_found_cooldown_test.go

fix(auth): enable model cooldown and rotation for model not found errors

2026-09-10 12:35:07 +08:00

conductor_alias_cooldown_test.go

fix(codex): scope usage limit errors to credentials and parse flexible quota resets

2026-09-06 06:20:20 +08:00

conductor_availability_test.go

feat(management): add ResetQuota endpoint and auth manager quota reset functionality

2026-06-20 13:49:40 +08:00

conductor_claude_cancellation_test.go

fix(claude): keep client cancellation availability-neutral

2026-08-03 14:47:26 +08:00

conductor_cloudflare_520_test.go

fix(auth): treat cloudflare 520-526 origin errors as transient upstream failures

2026-09-10 19:31:08 +08:00

conductor_compact_cooldown_test.go

fix(cliproxy): handle responses/compact auth cooldowns and fallback semantics

2026-08-19 22:05:28 +08:00

conductor_cooldown_monotonic_test.go

fix(auth): preserve active cooldown deadlines on subsequent failures

2026-09-07 02:34:39 +08:00

conductor_cooldown.go

feat(auth): support execution result policy before quota and cooldown mutations

2026-09-11 02:19:22 +08:00

conductor_cooling_precedence_test.go

Refactor cooling management across configuration and handlers

2026-08-17 10:54:07 +08:00

conductor_credits_candidates_test.go

feat: enhance fault tolerance for kv-based caching and introduce additional tests

2026-06-14 21:11:35 +08:00

conductor_execution_error_priority_test.go

fix(auth): prefer errors from upstream attempts

2026-08-29 12:50:46 +08:00

conductor_execution_quota_test.go

feat(auth): propagate canonical session id for custom header expansion

2026-09-10 01:43:37 +08:00

conductor_execution.go

feat(devin): add Devin/Cognition provider integration and CLI OAuth

2026-09-13 23:34:43 +08:00

conductor_executor_replace_test.go

chore: upgrade CLIProxyAPI dependency to v7 across the project

2026-05-08 11:46:46 +08:00

conductor_fast_error_test.go

fix(claude): harden request lifecycle

2026-08-03 14:47:26 +08:00

conductor_force_mapping_test.go

feat(xai): add xAI API key support with comprehensive handling and tests

2026-07-14 04:40:12 +08:00

conductor_home_execution.go

feat(usage): propagate session and parent session hierarchy to usage reporting queue

2026-09-06 10:45:32 +08:00

conductor_home.go

feat(usage): propagate session and parent session hierarchy to usage reporting queue

2026-09-06 10:45:32 +08:00

conductor_lifecycle.go

fix(auth): clear unauthorized cooldowns on credential changes and sync codex plan type

2026-09-11 23:31:48 +08:00

conductor_models.go

fix(auth): preserve active cooldown deadlines on subsequent failures

2026-09-07 02:34:39 +08:00

conductor_oauth_alias_nofork_test.go

fix(auth): synchronize auth lifecycle and registry state with epochs and generations

2026-08-30 12:53:39 +08:00

conductor_oauth_alias_suspension_test.go

chore: upgrade CLIProxyAPI dependency to v7 across the project

2026-05-08 11:46:46 +08:00

conductor_oauth_request_scoped_errors_test.go

feat(cliproxy): add OAuth request-scoped error rules support

2026-08-20 02:55:49 +08:00

conductor_overrides_test.go

fix(auth): synchronize auth lifecycle and registry state with epochs and generations

2026-08-30 12:53:39 +08:00

conductor_quota_clock_test.go

fix(auth): strip monotonic clock reading from quota cooldown deadlines

2026-09-08 17:58:56 +08:00

conductor_recent_requests_test.go

feat: add tracking for auth request success and failure counts

2026-05-02 03:40:00 +08:00

conductor_refresh_executor_key_test.go

fix(cliproxy): delegate OpenAI-compatible OAuth refresh to plugin auth providers

2026-08-08 06:08:23 +08:00

conductor_refresh.go

fix(auth): clear unauthorized cooldowns on credential changes and sync codex plan type

2026-09-11 23:31:48 +08:00

conductor_remove_test.go

feat(auth): add runtime auth removal and unscheduling logic

2026-06-03 11:56:56 +08:00

conductor_request_scoped_errors_test.go

fix(auth): prefer errors from upstream attempts

2026-08-29 12:50:46 +08:00

conductor_request_scoped_errors.go

feat(auth): normalize credential metadata keys

2026-08-22 12:01:06 +08:00

conductor_result_policy_test.go

feat(auth): support execution result policy before quota and cooldown mutations

2026-09-11 02:19:22 +08:00

conductor_retry_round_test.go

feat(auth): add retry round credential filtering

2026-08-22 01:20:02 +08:00

conductor_scheduler_refresh_test.go

fix(auth): classify terminal upstream auth failures as non-retryable errors

2026-09-10 10:02:08 +08:00

conductor_scheduler_targeted_update_test.go

perf(auth): optimize scheduler result updates with targeted model shards

2026-09-06 16:42:59 +08:00

conductor_selection_cooldown_test.go

fix(auth): propagate upstream error causes in auth selection failures

2026-09-01 08:15:51 +08:00

conductor_selection.go

fix(auth): classify terminal upstream auth failures as non-retryable errors

2026-09-10 10:02:08 +08:00

conductor_session_affinity_alias_test.go

fix(codex): scope usage limit errors to credentials and parse flexible quota resets

2026-09-06 06:20:20 +08:00

conductor_stream_overload_failover_test.go

fix(codex): treat model capacity errors as bootstrap overload failures

2026-09-10 12:06:01 +08:00

conductor_stream_overload_status_test.go

feat(codex): add opt-in stream bootstrap buffering and overload failover (#5115)

2026-08-20 21:31:53 +08:00

conductor_stream_quota_test.go

fix(codex): scope usage limit errors to credentials and parse flexible quota resets

2026-09-06 06:20:20 +08:00

conductor_stream.go

feat(auth): propagate canonical session id for custom header expansion

2026-09-10 01:43:37 +08:00

conductor_subsecond_cooldown_test.go

fix(auth): enforce minimum cooldown floor and track attempted credentials on 429

2026-09-03 10:02:51 +08:00

conductor_unauthorized_refresh_test.go

feat(auth): enable automatic credential refresh on unauthorized errors

2026-07-09 03:08:02 +08:00

conductor_update_test.go

fix(cliproxy): canonicalize thinking-suffix model states for cooldown and scheduler sharing

2026-08-06 21:00:32 +08:00

conductor_usage_test.go

feat(usage): track streaming execution state in usage records

2026-08-31 20:29:19 +08:00

conductor_warn_logging_test.go

fix(logging): enhance error diagnostics and logging for home refresh operations

2026-08-29 12:50:45 +08:00

conductor_weight_validation_test.go

feat(auth): introduce weighted round-robin scheduler and credential weight validation

2026-07-28 14:23:23 +08:00

conductor.go

feat(auth): support execution result policy before quota and cooldown mutations

2026-09-11 02:19:22 +08:00

config_apikey_test.go

fix(cliproxy): support base_URL-only config credentials and skip stale auth headers

2026-08-20 15:19:07 +08:00

config_apikey.go

fix(cliproxy): support base_URL-only config credentials and skip stale auth headers

2026-08-20 15:19:07 +08:00

connection_lifecycle_cooldown_test.go

fix(cliproxy): centralize client error status mapping and apply context cancellation/deadline HTTP codes

2026-08-08 04:53:34 +08:00

cooldown_backoff_test.go

feat(auth): introduce weighted round-robin scheduler and credential weight validation

2026-07-28 14:23:23 +08:00

cooldown_state_test.go

fix(auth): clear unauthorized cooldowns on credential changes and sync codex plan type

2026-09-11 23:31:48 +08:00

cooldown_state.go

feat(store): add PostgreSQL-backed cooldown state persistence

2026-07-27 03:46:55 +08:00

cooldown_view_test.go

feat(cooldowns): add cooldown snapshot feature for management auth files

2026-09-13 18:50:21 +08:00

cooldown_view.go

feat(cooldowns): add cooldown snapshot feature for management auth files

2026-09-13 18:50:21 +08:00

credential_policy.go

feat(codex): add Alpha Search API key support with configurable endpoint

2026-08-01 00:31:26 +08:00

custom_headers_test.go

feat(auth): propagate canonical session id for custom header expansion

2026-09-10 01:43:37 +08:00

custom_headers.go

feat(auth): add support for managing custom headers in auth files

2026-04-02 19:11:09 +08:00

error_events_test.go

feat(auth): add error event publishing and Redis queue integration

2026-06-04 00:53:43 +08:00

error_events.go

feat(auth): add error event publishing and Redis queue integration

2026-06-04 00:53:43 +08:00

errors_compat_test.go

feat(translator): improve error handling and response conversion for incomplete statuses

2026-07-16 04:38:19 +08:00

errors.go

fix(auth): classify terminal upstream auth failures as non-retryable errors

2026-09-10 10:02:08 +08:00

force_mapping_live_fixtures_test.go

feat(oauth): add force-mapping for upstream response model rewrite

2026-06-24 14:51:35 +08:00

force_refresh_test.go

fix(auth): bound force refresh all concurrency using worker pool

2026-09-10 20:21:11 +08:00

home_concurrency_test.go

fix(home): map user_credits_insufficient to 402 and user_period_limit_exceeded to 429

2026-09-03 02:59:34 +08:00

home_concurrency.go

fix(home): map user_credits_insufficient to 402 and user_period_limit_exceeded to 429

2026-09-03 02:59:34 +08:00

home_dispatch_headers_test.go

fix(home): implement home dispatch headers and enhance Gemini model handling

2026-05-14 03:01:55 +08:00

home_execution_paths_test.go

feat(auth): add credential retry round contract

2026-08-22 01:19:58 +08:00

home_fallback_audit_test.go

feat: add Home credential concurrency support

2026-07-23 13:42:08 +08:00

home_force_mapping_test.go

feat: add Home credential concurrency support

2026-07-23 13:42:08 +08:00

home_in_flight_publisher_test.go

feat: add Home credential concurrency support

2026-07-23 13:42:08 +08:00

home_in_flight_publisher.go

feat: add Home credential concurrency support

2026-07-23 13:42:08 +08:00

home_result.go

feat(usage): propagate session and parent session hierarchy to usage reporting queue

2026-09-06 10:45:32 +08:00

home_retry_contract_test.go

fix(auth): prefer errors from upstream attempts

2026-08-29 12:50:46 +08:00

home_retry_loop_test.go

feat: add Home credential concurrency support

2026-07-23 13:42:08 +08:00

home_selected_auth_callback_test.go

feat: add Home credential concurrency support

2026-07-23 13:42:08 +08:00

home_selection_attempt_test.go

feat: add Home credential concurrency support

2026-07-23 13:42:08 +08:00

home_selection_test.go

fix: retry Home OAuth requests after unauthorized

2026-08-03 21:39:48 +08:00

home_selection.go

feat(usage): propagate session and parent session hierarchy to usage reporting queue

2026-09-06 10:45:32 +08:00

home_session_alias_test.go

feat(session): derive distinct branch session ID, parent lineage on Merkle LCP forks, and enhance Codex fork/subagent affinity (#5418) (#5454)

2026-09-03 17:52:40 +08:00

home_session_alias.go

feat(session): enhance harness hierarchy recognition and deduplicate selector extraction

2026-09-08 17:04:58 +08:00

home_unauthorized_refresh_test.go

fix(auth): forward Home unauthorized upstream errors

2026-08-29 12:50:44 +08:00

home_websocket_reuse_test.go

feat: add Home credential concurrency support

2026-07-23 13:42:08 +08:00

metadata_keys_test.go

feat(auth): normalize credential metadata keys

2026-08-22 12:01:06 +08:00

metadata_keys.go

feat(auth): normalize credential metadata keys

2026-08-22 12:01:06 +08:00

metadata_merge_test.go

feat(auth): support organization-hashed claude credentials and legacy migration

2026-09-11 03:58:23 +08:00

metadata_merge.go

feat(auth): support organization-hashed claude credentials and legacy migration

2026-09-11 03:58:23 +08:00

oauth_model_alias_test.go

refactor(executor): consolidate thinking.ApplyThinking into helps.ApplyRequestThinking

2026-07-29 14:14:18 +08:00

oauth_model_alias.go

refactor(executor): consolidate thinking.ApplyThinking into helps.ApplyRequestThinking

2026-07-29 14:14:18 +08:00

openai_compat_pool_test.go

fix(auth): prefer errors from upstream attempts

2026-08-29 12:50:46 +08:00

persist_policy_test.go

feat(auth): add config API key exclusion management with tests

2026-06-15 11:14:05 +08:00

persist_policy.go

feat(auth): support organization-hashed claude credentials and legacy migration

2026-09-11 03:58:23 +08:00

quota_signals_test.go

feat: observe upstream provider quota signals (#5211)

2026-08-24 17:15:37 +08:00

quota_signals.go

feat: observe upstream provider quota signals (#5211)

2026-08-24 17:15:37 +08:00

request_auth_prepare_test.go

fix(auth): preserve upstream status codes in antigravity auth errors

2026-09-01 08:37:02 +08:00

request_termination_test.go

feat(plugin): add request lifecycle plugin with interception and termination capabilities

2026-07-28 03:22:18 +08:00

response_model_rewriter_antigravity_sim_test.go

fix(auth): repair force-mapped Responses SSE framing for WS forwarder

2026-06-29 18:11:44 +08:00

response_model_rewriter_test.go

fix(auth): repair force-mapped Responses SSE framing for WS forwarder

2026-06-29 18:11:44 +08:00

response_model_rewriter.go

fix(auth): repair force-mapped Responses SSE framing for WS forwarder

2026-06-29 18:11:44 +08:00

scheduler_benchmark_test.go

chore: upgrade CLIProxyAPI dependency to v7 across the project

2026-05-08 11:46:46 +08:00

scheduler_test.go

fix(auth): preserve round-robin successor across ready view rebuilds

2026-08-28 09:17:57 +08:00

scheduler.go

fix(auth): classify terminal upstream auth failures as non-retryable errors

2026-09-10 10:02:08 +08:00

selected_auth_metadata_test.go

feat(logging): add CPA trace ID middleware and enhance metadata handling

2026-07-17 22:58:28 +08:00

selector_antigravity_subagent_test.go

feat(routing): make subagent session affinity configurable via session-affinity-subagents

2026-09-03 17:05:35 +08:00

selector_lcp_test.go

feat(session): derive distinct branch session ID, parent lineage on Merkle LCP forks, and enhance Codex fork/subagent affinity (#5418) (#5454)

2026-09-03 17:52:40 +08:00

selector_subagent_affinity_test.go

feat(routing): make subagent session affinity configurable via session-affinity-subagents

2026-09-03 17:05:35 +08:00

selector_test.go

feat(session): enhance harness hierarchy recognition and deduplicate selector extraction

2026-09-08 17:04:58 +08:00

selector.go

fix(auth): classify terminal upstream auth failures as non-retryable errors

2026-09-10 10:02:08 +08:00

session_affinity_lookup_test.go

feat(plugin): add host session affinity lookup callback

2026-09-09 03:25:42 +08:00

session_affinity_metadata_test.go

feat(session): implement Merkle LCP session affinity, session tree, and distributed Home hierarchy (#5202)

2026-08-31 11:18:41 +08:00

session_affinity_priority_test.go

fix(auth): preserve session affinity across priorities

2026-08-06 10:29:57 +08:00

session_cache_test.go

fix(auth): optimize session cache LRU capacity eviction

2026-09-01 18:00:09 +08:00

session_cache.go

fix(auth): optimize session cache LRU capacity eviction

2026-09-01 18:00:09 +08:00

session_overhead_benchmark_test.go

feat(session): derive distinct branch session ID, parent lineage on Merkle LCP forks, and enhance Codex fork/subagent affinity (#5418) (#5454)

2026-09-03 17:52:40 +08:00

session_resolver.go

feat(auth): propagate canonical session id for custom header expansion

2026-09-10 01:43:37 +08:00

status.go

v6 version first commit

2025-09-22 01:40:24 +08:00

store.go

refactor(auth): replace TokenRecord with coreauth.Auth and migrate TokenStore to coreauth.Store

2025-09-29 09:31:21 +08:00

token_fingerprint.go

fix(home): report every unauthorized attempt

2026-08-03 21:40:06 +08:00

types_cooling_test.go

Refactor cooling management across configuration and handlers

2026-08-17 10:54:07 +08:00

types_test.go

fix(auth): validate access token expiration and retain valid credentials on refresh failure

2026-09-03 01:33:11 +08:00

types.go

fix(auth): validate access token expiration and retain valid credentials on refresh failure

2026-09-03 01:33:11 +08:00

weight_test.go

feat(auth): introduce weighted round-robin scheduler and credential weight validation

2026-07-28 14:23:23 +08:00

weight.go

feat(auth): introduce weighted round-robin scheduler and credential weight validation

2026-07-28 14:23:23 +08:00