aki-pro-max 2.3.3 → 2.3.4

package/README.md

@@ -85,7 +85,7 @@ npx aki-pro-max start
 npm install -g aki-pro-max
 # Start the proxy (server + local Control Plane):
 aki-pro-max start
-# Or use the short alias:
+# The `akimcp` executable is a compatibility alias installed by the aki-pro-max package:
 akimcp start --port 8788
 ```
 

package/bin/aki-pro-max.js

@@ -12,7 +12,7 @@ const args = process.argv.slice(2);
 
 function showHelp() {
   console.log(`
-Aki Pro Max CLI (v2.3.2)
+Aki Pro Max CLI (v2.3.4)
 OpenAI-Compatible Local Facade & Gateway for Postman Agent Mode
 
 Usage:

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "aki-pro-max",
-  "version": "2.3.3",
+  "version": "2.3.4",
   "description": "Local-first OpenAI-compatible gateway and control plane for an authorized Postman web session.",
   "type": "module",
   "license": "MIT",

package/src/admin.mjs

@@ -52,7 +52,7 @@ async function loadAuth(){const s=await fetch('/admin/auth/status',{cache:'no-st
 $('discoverAuth').addEventListener('click',async()=>{const d=await fetch('/admin/auth/discover',{method:'POST',headers:{'content-type':'application/json'},body:'{}'}).then(r=>r.json());$('authMessage').textContent=d.installed?(d.reason+' Manual cookie entry remains required.'):'Postman Desktop was not detected.'});
 $('validateAuth').addEventListener('click',async()=>{const r=await fetch('/admin/auth/validate',{method:'POST',headers:{'content-type':'application/json'},body:JSON.stringify(authPayload())});const d=await r.json();$('authMessage').textContent=r.ok?'Valid fields · cookie '+d.cookie.masked:d.error.message});
 $('applyAuth').addEventListener('click',async()=>{const r=await fetch('/admin/auth/apply',{method:'POST',headers:{'content-type':'application/json'},body:JSON.stringify(authPayload())});const d=await r.json();$('authMessage').textContent=r.ok?'Saved safely. Restart provider to activate. Backup: '+d.backupFile:d.error.message;if(r.ok){$('sessionCookie').value='';await loadAuth()}});
-async function checkUpdates(config){const url=config.updateManifestUrl;if(!url)return;try{const c=new AbortController();const t=setTimeout(()=>c.abort(),3000);const m=await fetch(url,{cache:'no-store',signal:c.signal}).then(r=>r.ok?r.json():null);clearTimeout(t);if(!m||!newer(m.latest,config.currentVersion)||localStorage.getItem('aki-update-dismissed')===m.latest)return;$('updateBanner').classList.remove('hidden');$('updateTitle').textContent='Aki Pro Max '+m.latest+' is available';$('updateCopy').textContent='Current version: '+config.currentVersion+'. Update manually to avoid interrupting an active request.';$('updateCommand').textContent=m.updateCommand||'npm update -g '+(m.installPackage||'aki-pro-max');$('copyUpdate').onclick=()=>copy($('updateCommand').textContent);$('dismissUpdate').onclick=()=>{localStorage.setItem('aki-update-dismissed',m.latest);$('updateBanner').classList.add('hidden')};$('reloadProxy').onclick=()=>location.reload()}catch(e){console.info('Update check skipped:',e.message)}}$('copyKey').addEventListener('click',()=>copy(secret)); document.querySelectorAll('[data-copy]').forEach(b=>b.addEventListener('click',()=>copy($(b.dataset.copy).textContent))); Promise.all([init(),loadAuth()]).catch(e=>{$('health').textContent='ERROR';console.error(e)});`;
+async function checkUpdates(config){const url=config.updateManifestUrl;if(!url)return;try{const c=new AbortController();const t=setTimeout(()=>c.abort(),3000);const m=await fetch(url,{cache:'no-store',signal:c.signal}).then(r=>r.ok?r.json():null);clearTimeout(t);if(!m||!newer(m.latest,config.currentVersion)||localStorage.getItem('aki-update-dismissed')===m.latest)return;$('updateBanner').classList.remove('hidden');$('updateTitle').textContent='Aki Pro Max '+m.latest+' is available';$('updateCopy').textContent='Current version: '+config.currentVersion+'. Update manually to avoid interrupting an active request.';$('updateCommand').textContent=m.updateCommand||'npm install -g '+(m.installPackage||'aki-pro-max')+'@latest';$('copyUpdate').onclick=()=>copy($('updateCommand').textContent);$('dismissUpdate').onclick=()=>{localStorage.setItem('aki-update-dismissed',m.latest);$('updateBanner').classList.add('hidden')};$('reloadProxy').onclick=()=>location.reload()}catch(e){console.info('Update check skipped:',e.message)}}$('copyKey').addEventListener('click',()=>copy(secret)); document.querySelectorAll('[data-copy]').forEach(b=>b.addEventListener('click',()=>copy($(b.dataset.copy).textContent))); Promise.all([init(),loadAuth()]).catch(e=>{$('health').textContent='ERROR';console.error(e)});`;
 
 const securityHeaders = Object.freeze({
   'cache-control': 'no-store',

package/version.json

@@ -1,8 +1,8 @@
 {
-  "latest": "2.3.3",
+  "latest": "2.3.4",
   "minSupported": "2.3.0",
   "releasedAt": "2026-09-13T06:30:00Z",
-  "releaseNotesUrl": "https://github.com/khangtudo/aki-pro-max/releases/tag/v2.3.3",
+  "releaseNotesUrl": "https://github.com/khangtudo/aki-pro-max/releases/tag/v2.3.4",
   "installPackage": "aki-pro-max",
   "updateCommand": "npm install -g aki-pro-max@latest"
 }

package/.env.example

@@ -1,34 +0,0 @@
-PROVIDER_HOST=127.0.0.1
-PROVIDER_PORT=8787
-PROVIDER_API_KEY=replace-with-9router-to-facade-bearer
-PROVIDER_MODELS=replace-with-explicit-postman-model-id
-POSTMAN_WORKSPACE_ID=replace-with-workspace-id
-
-# Strategy must be explicit for web_session. Default remains access_token when this field is absent.
-POSTMAN_TRANSPORT_STRATEGY=access_token
-POSTMAN_ORIGIN=https://gateway.postman.com
-POSTMAN_CHAT_PATH=/chat
-POSTMAN_ACCESS_TOKEN=replace-with-authorized-upstream-token
-POSTMAN_APP_VERSION=offline-adapter/0.1.0
-
-# Mutually exclusive web_session example (comment out access-token-only fields above first):
-# POSTMAN_TRANSPORT_STRATEGY=web_session
-# POSTMAN_SESSION_COOKIE=your_session_cookie_here
-# POSTMAN_WORKSPACE_SUBDOMAIN=replace-with-lowercase-workspace-subdomain
-# POSTMAN_WEB_SESSION_SELECTED_MODEL=replace-with-operator-pinned-upstream-model
-# Optional exact observed response labels. Present-but-unlisted labels fail closed; absent labels stay unverified.
-# POSTMAN_WEB_SESSION_OBSERVED_MODELS=gpt-5.6-sol
-# POSTMAN_APP_VERSION=
-
-# Optional authoritative catalog metadata for access_token tools. Leave hash/exclusions unset until sourced.
-POSTMAN_PLATFORM=OPENAI_COMPATIBLE_ADAPTER
-# POSTMAN_NATIVE_TOOLS_HASH=
-# POSTMAN_EXCLUDED_TOOLS=readFile,webSearch
-REQUEST_TIMEOUT_MS=120000
-MAX_BODY_BYTES=1048576
-MAX_EVENT_BYTES=1048576
-MAX_OUTPUT_BYTES=4194304
-MAX_TOOL_ARGUMENT_BYTES=262144
-MAX_TOOLS=64
-MAX_CONCURRENT_REQUESTS=16
-EXPOSE_HEALTH_DETAILS=false

package/AICOWORKER-NATIVE-TOOLS.md

@@ -1,60 +0,0 @@
-# Danh mục Toàn diện các Native Tool Call của AICoworker
-
-> Cập nhật cho hệ thống **Aki Pro Max** (Postman OpenAI Facade / PMN Gateway)
-> Phiên bản AICoworker: 2026.6.27 | OpenClaw: 2026.3.13
-
-AICoworker cung cấp tổng cộng **36 native tools** cốt lõi được phân chia thành **8 nhóm năng lực** tác vụ chuyên biệt.
-
----
-
-## 1. File Operations & Coding (Thao tác Tệp & Lập trình)
-- `read`: Đọc nội dung tệp tin văn bản hoặc đính kèm trực tiếp hình ảnh (png, jpg, gif, webp) vào ngữ cảnh thị giác đa phương thức của model.
-- `write`: Tạo mới hoặc ghi đè toàn bộ tệp tin trong workspace.
-- `edit`: Sửa phẫu thuật chính xác một đoạn văn bản (`oldText` -> `newText`), giữ nguyên toàn bộ cấu trúc còn lại.
-- `ripgrep`: Tìm kiếm regex tốc độ cao đa luồng trên toàn bộ cây thư mục/tệp tin.
-
-## 2. Shell & Process Execution (Thực thi Lệnh & Tiến trình)
-- `exec`: Thực thi lệnh shell (hỗ trợ cả đồng bộ chờ kết quả, bất đồng bộ chạy nền `background: true`, và terminal giả lập `pty: true`).
-- `process`: Quản lý tương tác với các tiến trình chạy nền (list, poll, log, write stdin, send-keys, submit, paste, kill).
-
-## 3. Web Research & Browser Automation (Nghiên cứu Web & Trình duyệt)
-- `web_search`: Tìm kiếm web thời gian thực qua Brave Search API.
-- `web_fetch`: Tải và trích xuất nội dung văn bản/markdown sạch từ bất kỳ URL nào mà không cần render trình duyệt nặng.
-- `searxng_search`: Metasearch nội bộ tự host qua SearXNG (tối ưu hóa cao cho tiếng Việt, Arxiv, GitHub, StackOverflow, Wikipedia).
-- `browser`: Điều khiển trình duyệt thật (Playwright/Chromium: mở trang, đọc DOM snapshot, click, gõ text, upload, download, bắt & replay network request).
-
-## 4. Adaptive UI & Interactive Visuals (Giao diện Tương tác Chat)
-- `show_adaptive_ui`: Hiển thị thẻ giao diện trực quan phong phú ngay trong khung chat (hỗ trợ 12 biến thể: charts, map, gallery, table, timeline, diagram mermaid, dashboard KPI, compare, diff, tabs, report, card).
-- `ask_user_question`: Hiển thị wizard câu hỏi tương tác để người dùng nhập/chọn (choice, text, textarea, password, number, slider, file).
-- `canvas`: Trình chiếu và điều khiển canvas giao diện tương tác độc lập (A2UI, present, eval, snapshot).
-
-## 5. Multi-Agent Rooms & Collaboration (Phối hợp Đa Agent)
-- `agents_list`: Khám phá danh sách các agent đồng nghiệp trong hệ thống (id, tên, bio năng lực chuyên biệt).
-- `room_delegate`: Ủy quyền tác vụ con cho một agent chuyên trách trong phòng chat chung (`@agent`).
-- `room_state`: Bảng ghi nhớ dùng chung (key/value scratchpad) giữa tất cả các agent trong cùng phòng chat.
-- `sessions_spawn`: Khởi tạo sub-agent độc lập để thực hiện tác vụ song song.
-- `sessions_yield`: Nhường lượt để chờ kết quả trả về từ các sub-agent.
-- `subagents`: Giám sát và điều phối các sub-agent đang chạy (list, steer, kill).
-- `sessions_list`: Liệt kê các phiên làm việc và sub-agent theo bộ lọc.
-- `sessions_history`: Đọc lịch sử tin nhắn của một phiên làm việc khác.
-- `sessions_send`: Gửi tin nhắn liên phiên tới agent khác.
-
-## 6. Memory & Knowledge Management (Bộ nhớ & Tri thức Dài hạn)
-- `memory_search`: Tìm kiếm ngữ nghĩa trong kho tri thức dài hạn (`MEMORY.md`, `memory/*.md`).
-- `memory_get`: Đọc an toàn các đoạn trích từ bộ nhớ dựa trên kết quả tìm kiếm.
-
-## 7. Task Planning & Standard Operating Procedures (Kế hoạch & Quy trình)
-- `plan_task`: Lập kế hoạch thiết kế có cấu trúc vào `PLAN.md` trước khi thực thi tác vụ phức tạp (restate, approach, risks, criteria).
-- `write_todos`: Ghi và cập nhật tiến độ công việc từng bước vào `TODO.md`.
-- `workflow_run`: Khởi chạy một Agent Workflow (SOP / quy trình định sẵn theo đồ thị markdown).
-- `workflow_distill`: Đúc kết lịch sử phiên làm việc thành quy trình Agent Workflow mẫu.
-
-## 8. Gateway, Devices & Utilities (Hạ tầng, Thiết bị & Tiện ích)
-- `gateway`: Quản trị Gateway OpenClaw (restart, config.get, config.patch, config.apply, update).
-- `session_status`: Xem trạng thái phiên, mức sử dụng token, thời gian và chi phí.
-- `nodes`: Khám phá và điều khiển các node/thiết bị kết nối (camera, chụp màn hình, gửi thông báo, định vị GPS).
-- `cron`: Quản lý các tác vụ định kỳ Gateway cron và sự kiện hẹn giờ wake.
-- `message`: Gửi, nhận và quản lý tin nhắn đa kênh (Telegram, Discord, Zalo, v.v.).
-- `tts`: Chuyển đổi văn bản thành giọng nói (Text-To-Speech).
-- `mark_context_wasted`: Tối ưu hóa ngữ cảnh, gắn cờ các tool output đã dùng xong để loại bỏ bớt token dư thừa.
-- `advisor`: Tham vấn model đánh giá chiến lược cấp cao khi gặp bài toán khó hoặc trước khi hoàn thành công việc.

package/CLAUDE-LIVE-TOOLS-EVIDENCE.json

@@ -1,94 +0,0 @@
-{
-  "schema": "live-two-model-tools-evidence/v1",
-  "runId": "7a400eb2-17e5-4633-8389-8239b91b2087",
-  "startedWithPriorCurrentProbeAttempts": 0,
-  "origin": "https://akimax6.postman.co",
-  "path": "/_gw/chat",
-  "workspaceId": "358aa6cf-3b60-449f-8981-c60263000413",
-  "policy": {
-    "retry": false,
-    "failover": false,
-    "totalLimit": 6,
-    "perModelLimit": 3
-  },
-  "budget": {
-    "used": 4,
-    "byModel": {
-      "gpt-5.6-sol": 2,
-      "claude-opus-4-8": 2
-    }
-  },
-  "branches": [
-    {
-      "key": "gpt-sol",
-      "publicModel": "gpt-5.6-sol",
-      "selectedModel": "GPT_56_SOL",
-      "facadePort": 52936,
-      "initial": {
-        "facadeStatus": 200,
-        "errorCode": null,
-        "toolCallCount": 1,
-        "toolName": "get_probe_value",
-        "argumentsValid": true,
-        "argumentsDiagnostic": {
-          "argsType": "string",
-          "argsBytes": 2,
-          "parsedType": "object",
-          "keyCount": 0,
-          "parseError": null
-        },
-        "exactlyOneValidToolCall": true
-      },
-      "continuation": {
-        "facadeStatus": 200,
-        "errorCode": null,
-        "finalContentPresent": true
-      },
-      "observedModels": [
-        "gpt-5.6-sol",
-        "GPT_56_SOL"
-      ],
-      "finalMatchesMarker": true,
-      "cleanup": true,
-      "terminal": "completed_match",
-      "error": null
-    },
-    {
-      "key": "claude-opus",
-      "publicModel": "claude-opus-4-8",
-      "selectedModel": "CLAUDE_OPUS_48_BEDROCK",
-      "facadePort": 51370,
-      "initial": {
-        "facadeStatus": 200,
-        "errorCode": null,
-        "toolCallCount": 1,
-        "toolName": "get_probe_value",
-        "argumentsValid": true,
-        "argumentsDiagnostic": {
-          "argsType": "string",
-          "argsBytes": 0,
-          "parsedType": "object",
-          "keyCount": 0,
-          "parseError": null
-        },
-        "exactlyOneValidToolCall": true
-      },
-      "continuation": {
-        "facadeStatus": 200,
-        "errorCode": null,
-        "finalContentPresent": true
-      },
-      "observedModels": [
-        "claude-opus-4-8",
-        "CLAUDE_OPUS_48_BEDROCK",
-        "global.anthropic.claude-opus-4-8"
-      ],
-      "finalMatchesMarker": true,
-      "cleanup": true,
-      "terminal": "completed_match",
-      "error": null
-    }
-  ],
-  "allServersCleaned": true,
-  "generatedAt": "2026-09-13T00:22:23.559Z"
-}

package/FULL-TRACE-EVIDENCE.json

@@ -1,109 +0,0 @@
-{
-  "window": [
-    "2026-09-13T02:22:30.000Z",
-    "2026-09-13T02:24:30.000Z"
-  ],
-  "rows": [
-    {
-      "id": 86668,
-      "timestamp": "2026-09-13T02:22:38.074Z",
-      "provider": "openai-compatible-chat-7315cf02-aba5-4c66-a886-044054c49883",
-      "model": "gpt-5.6-sol",
-      "connectionId": "27b72dc7-4a15-4b8a-815b-71f7839e5f2b",
-      "endpoint": "/v1/chat/completions",
-      "promptTokens": 278247,
-      "completionTokens": 188,
-      "status": "ok",
-      "tokens": "{\"prompt_tokens\":278247,\"completion_tokens\":188,\"total_tokens\":278435,\"cached_tokens\":45824,\"cache_creation_input_tokens\":0}",
-      "meta": "{}"
-    },
-    {
-      "id": 86669,
-      "timestamp": "2026-09-13T02:22:48.349Z",
-      "provider": "openai-compatible-chat-7315cf02-aba5-4c66-a886-044054c49883",
-      "model": "gpt-5.6-sol",
-      "connectionId": "27b72dc7-4a15-4b8a-815b-71f7839e5f2b",
-      "endpoint": "/v1/chat/completions",
-      "promptTokens": 278504,
-      "completionTokens": 67,
-      "status": "ok",
-      "tokens": "{\"prompt_tokens\":278504,\"completion_tokens\":67,\"total_tokens\":278571,\"cached_tokens\":278144,\"cache_creation_input_tokens\":0}",
-      "meta": "{}"
-    },
-    {
-      "id": 86670,
-      "timestamp": "2026-09-13T02:23:03.031Z",
-      "provider": "openai-compatible-chat-7315cf02-aba5-4c66-a886-044054c49883",
-      "model": "gpt-5.6-sol",
-      "connectionId": "27b72dc7-4a15-4b8a-815b-71f7839e5f2b",
-      "endpoint": "/v1/chat/completions",
-      "promptTokens": 278782,
-      "completionTokens": 57,
-      "status": "ok",
-      "tokens": "{\"prompt_tokens\":278782,\"completion_tokens\":57,\"total_tokens\":278839,\"cached_tokens\":278400,\"cache_creation_input_tokens\":0}",
-      "meta": "{}"
-    },
-    {
-      "id": 86671,
-      "timestamp": "2026-09-13T02:23:14.987Z",
-      "provider": "openai-compatible-chat-7315cf02-aba5-4c66-a886-044054c49883",
-      "model": "gpt-5.6-sol",
-      "connectionId": "27b72dc7-4a15-4b8a-815b-71f7839e5f2b",
-      "endpoint": "/v1/chat/completions",
-      "promptTokens": 278039,
-      "completionTokens": 129,
-      "status": "ok",
-      "tokens": "{\"prompt_tokens\":278039,\"completion_tokens\":129,\"total_tokens\":278168,\"cached_tokens\":45824,\"cache_creation_input_tokens\":0}",
-      "meta": "{}"
-    },
-    {
-      "id": 86672,
-      "timestamp": "2026-09-13T02:23:23.283Z",
-      "provider": "openai-compatible-chat-327ad9bd-0918-4921-b3c1-213b244ee54f",
-      "model": "gpt-5.6-sol",
-      "connectionId": "6706879a-9897-4b2a-9142-728ca64276d4",
-      "endpoint": "/v1/chat/completions",
-      "promptTokens": 46410,
-      "completionTokens": 4,
-      "status": "ok",
-      "tokens": "{\"prompt_tokens\":46410,\"completion_tokens\":4,\"total_tokens\":46414,\"cached_tokens\":0,\"cache_creation_input_tokens\":0}",
-      "meta": "{}"
-    },
-    {
-      "id": 86673,
-      "timestamp": "2026-09-13T02:23:24.702Z",
-      "provider": "openai-compatible-chat-7315cf02-aba5-4c66-a886-044054c49883",
-      "model": "gpt-5.6-sol",
-      "connectionId": "27b72dc7-4a15-4b8a-815b-71f7839e5f2b",
-      "endpoint": "/v1/chat/completions",
-      "promptTokens": 278269,
-      "completionTokens": 68,
-      "status": "ok",
-      "tokens": "{\"prompt_tokens\":278269,\"completion_tokens\":68,\"total_tokens\":278337,\"cached_tokens\":277888,\"cache_creation_input_tokens\":0}",
-      "meta": "{}"
-    }
-  ],
-  "connections": {
-    "27b72dc7-4a15-4b8a-815b-71f7839e5f2b": {
-      "id": "27b72dc7-4a15-4b8a-815b-71f7839e5f2b",
-      "provider": "openai-compatible-chat-7315cf02-aba5-4c66-a886-044054c49883",
-      "name": "CPX",
-      "priority": 1,
-      "isActive": 1
-    },
-    "pmn-openai-provider-local": {
-      "id": "pmn-openai-provider-local",
-      "provider": "openai-compatible-chat-aki-pro-max",
-      "name": "Aki Pro Max Local Gateway",
-      "priority": 1,
-      "isActive": 1
-    },
-    "6706879a-9897-4b2a-9142-728ca64276d4": {
-      "id": "6706879a-9897-4b2a-9142-728ca64276d4",
-      "provider": "openai-compatible-chat-327ad9bd-0918-4921-b3c1-213b244ee54f",
-      "name": "Aki Pro Max Local",
-      "priority": 1,
-      "isActive": 1
-    }
-  }
-}

package/ISSUE-1-REMOTE.json

@@ -1 +0,0 @@
-{"body":"## Evidence\n\nThe bounded live probe for `claude-opus-4-8` selected `CLAUDE_OPUS_48_BEDROCK` and received HTTP 502 before any tool call. GPT-5.6 Sol completed the equivalent tool loop.\n\n## Current boundary\n\nThis issue does **not** affect the advertised model catalog or offline contracts, but Claude live compatibility is not claimed in v0.1.0-beta.1.\n\n## Investigation checklist\n\n- Capture sanitized upstream error code/model observation without cookie, prompts or response body.\n- Compare the currently observed allowlisted model label against the configured foodcode.\n- Verify whether mismatch is gateway mapping, workspace availability or upstream rollout.\n- Add a bounded live regression only after the accepted label is source-observed.","closedAt":"2026-09-13T03:23:15Z","comments":[{"id":"IC_kwDOUX4nN88AAAABUIPUTg","author":{"login":"khangtudo"},"authorAssociation":"OWNER","body":"## Root cause found and bounded live retest\n\nThe live upstream model observation is `global.anthropic.claude-opus-4-8` in `metadata.model`, while the allowlist previously contained only `claude-opus-4-8` and `CLAUDE_OPUS_48_BEDROCK`. Diagnostic propagation now records the bounded observed model and field path for this error class without dumping upstream content.\n\nAfter adding the source-observed label to the local allowlist, a one-shot live non-tool Claude request returned HTTP 200 with the exact marker. This confirms the mismatch root cause and text-generation compatibility.\n\n**Remaining acceptance item:** the issue asks for a complete Claude tool-call → local tool result → final answer loop. That exact tool loop has not yet been rerun after the allowlist correction, so this issue remains open.","createdAt":"2026-09-12T12:08:09Z","includesCreatedEdit":false,"isMinimized":false,"minimizedReason":"","reactionGroups":[],"url":"https://github.com/khangtudo/aki-pro-max/issues/1#issuecomment-5645784142","viewerDidAuthor":true},{"id":"IC_kwDOUX4nN88AAAABUJJTqg","author":{"login":"khangtudo"},"authorAssociation":"OWNER","body":"## Patch/release progress — v0.1.0-beta.8\n\nThe Main-agent compatibility patch for OpenClaw tool schemas has been independently gated and published:\n\n- Added recursive `patternProperties` validation used by `exec.env`.\n- Added focused regression coverage for valid nested schema, malformed container, and unsupported nested keyword.\n- Current suite: 97/97 pass; release secret scanner and positive control pass.\n- Current 34-tool OpenClaw schema census has no unhandled keyword; the original full-context streaming replay succeeded direct and through PMN/9router.\n- Trio Verifiers: 17.43/20, StdDev 0.40.\n- Release: https://github.com/khangtudo/aki-pro-max/releases/tag/v0.1.0-beta.8\n- Commit: 8f43c5b27bcbd6a3f292211e09315fc6ac931189\n\nThis patch removes the schema-validation blocker that caused agent requests to abort, but issue #1 remains open until its original Claude full tool-loop acceptance is linked and verified. Claude argument conformance remains tracked in #4.","createdAt":"2026-09-12T15:11:39Z","includesCreatedEdit":false,"isMinimized":false,"minimizedReason":"","reactionGroups":[],"url":"https://github.com/khangtudo/aki-pro-max/issues/1#issuecomment-5646734250","viewerDidAuthor":true},{"id":"IC_kwDOUX4nN88AAAABUM8k3Q","author":{"login":"khangtudo"},"authorAssociation":"OWNER","body":"Resolved and live-verified in `172e7e6009c6f8b8fb9b1ddd26273f70fa12bb07`.\n\nClosure evidence:\n- Fresh Claude Opus 4.8 tool loop selected `CLAUDE_OPUS_48_BEDROCK`.\n- Initial request HTTP 200, exactly one valid native tool call, `argumentsValid=true`.\n- Same-session continuation HTTP 200 and exact final marker; terminal `completed_match`.\n- Release suite: 97/97 pass; release verifier secret scan and positive control pass.\n- Trio gate: 17.43/20, StdDev 0.40.\n\nArtifacts: `CLAUDE-LIVE-TOOLS-EVIDENCE.json`, `TEST-ISSUES12-FINAL.txt`, `VERIFIER-ISSUES12-FINAL.txt`.","createdAt":"2026-09-13T03:23:15Z","includesCreatedEdit":false,"isMinimized":false,"minimizedReason":"","reactionGroups":[],"url":"https://github.com/khangtudo/aki-pro-max/issues/1#issuecomment-5650719965","viewerDidAuthor":true}],"number":1,"state":"CLOSED","title":"Known issue: Claude Opus live web-session selection returns upstream model mismatch","url":"https://github.com/khangtudo/aki-pro-max/issues/1"}

package/ISSUE-2-POSTREVIEW.json

@@ -1 +0,0 @@
-{"comments":[{"id":"IC_kwDOUX4nN88AAAABUIPUvg","author":{"login":"khangtudo"},"authorAssociation":"OWNER","body":"## Real AICoworker runtime trace attempted\n\nA real AICoworker `sessions_spawn` was configured to use the PMN route through 9router. The request reached the upstream/provider path but failed with `403 Access denied: service error` before returning the distinctive marker. No mock or fallback was used.\n\nDuring read-only 9router inspection, an old local facade key was accidentally printed to the private tool transcript. It was immediately rotated in both the provider `.env` and 9router PMN connection. Verification: old key now returns 401, new key returns 200, health returns 200. No key was posted to GitHub.\n\n**Current blocker:** PMN/9router upstream authentication/routing returns 403 from the AICoworker runtime. The full marker round trip is therefore not complete and this issue remains open.","createdAt":"2026-09-12T12:08:10Z","includesCreatedEdit":false,"isMinimized":false,"minimizedReason":"","reactionGroups":[],"url":"https://github.com/khangtudo/aki-pro-max/issues/2#issuecomment-5645784254","viewerDidAuthor":true},{"id":"IC_kwDOUX4nN88AAAABUISuyw","author":{"login":"khangtudo"},"authorAssociation":"OWNER","body":"## Evidence correction\n\nThe AICoworker subagent returned the exact distinctive marker, but the persisted session record identifies the model as `CPX/gpt-5.6-sol`, not PMN. Therefore this output alone is **not sufficient proof** that 9router/Aki Pro Max carried the request. The prior PMN attempt also recorded an upstream 403. Issue #2 remains open pending component-level routing evidence.\n\nA private sanitized record stores only the marker hash/prefix and model metadata; no credentials or raw upstream content.","createdAt":"2026-09-12T12:19:32Z","includesCreatedEdit":false,"isMinimized":false,"minimizedReason":"","reactionGroups":[],"url":"https://github.com/khangtudo/aki-pro-max/issues/2#issuecomment-5645840075","viewerDidAuthor":true},{"id":"IC_kwDOUX4nN88AAAABUIrpdQ","author":{"login":"khangtudo"},"authorAssociation":"OWNER","body":"## Root cause fixed: official 9router custom provider registration\n\nThe previous PMN row was an orphan connection: it referenced `openai-compatible-chat-postman2api`, but no matching `providerNodes` entry existed, so it was absent from the GUI/runtime provider registry.\n\nRepair completed through 9router's authenticated official APIs:\n\n- Created custom provider node `Aki Pro Max Local`, prefix `PMN`, chat API, base URL `http://127.0.0.1:8788/v1`.\n- Created an active connection bound to that node using the rotated facade key.\n- `GET /v1/models` now lists `PMN/gpt-5.6-sol`.\n- Direct 9router `POST /v1/chat/completions` using `PMN/gpt-5.6-sol` returned HTTP 200 and the exact marker.\n- AICoworker subagent configured with PMN returned its exact marker successfully. Session history normalizes to the downstream response model (`CPX/gpt-5.6-sol`), so the direct 9router marker plus official provider registration are the component-level route evidence.\n- Temporary Wi Ha PMN model/allowlist changes were restored to CPX after the test.\n\nAcceptance is met for the live chain. Note: 9router did not persist a usageHistory row under the newly created connection ID for this short test, so evidence relies on authenticated provider registry + routable catalog + exact direct route marker + AICoworker marker rather than usage accounting.","createdAt":"2026-09-12T13:41:59Z","includesCreatedEdit":false,"isMinimized":false,"minimizedReason":"","reactionGroups":[],"url":"https://github.com/khangtudo/aki-pro-max/issues/2#issuecomment-5646248309","viewerDidAuthor":true},{"id":"IC_kwDOUX4nN88AAAABUIrp7w","author":{"login":"khangtudo"},"authorAssociation":"OWNER","body":"Closed after official PMN provider registration and successful direct 9router plus AICoworker marker tests. The orphan provider registration was the root cause.","createdAt":"2026-09-12T13:42:01Z","includesCreatedEdit":false,"isMinimized":false,"minimizedReason":"","reactionGroups":[],"url":"https://github.com/khangtudo/aki-pro-max/issues/2#issuecomment-5646248431","viewerDidAuthor":true},{"id":"IC_kwDOUX4nN88AAAABUIsSag","author":{"login":"khangtudo"},"authorAssociation":"OWNER","body":"## Closure correction\n\nReopened after final review. The orphan provider registration is fixed and direct 9router PMN routing is verified, but AICoworker end-to-end attribution is not yet conclusive: session history normalizes the response model to CPX and no usageHistory/requestDetails row was persisted for the new PMN connection during the marker window. The exact marker therefore proves output success but does not independently exclude silent fallback.\n\nRemaining exit criterion: capture a request/log row tied to the new PMN connection ID, or rerun with CPX unavailable and PMN still returning the exact marker.","createdAt":"2026-09-12T13:44:09Z","includesCreatedEdit":false,"isMinimized":false,"minimizedReason":"","reactionGroups":[],"url":"https://github.com/khangtudo/aki-pro-max/issues/2#issuecomment-5646258794","viewerDidAuthor":true},{"id":"IC_kwDOUX4nN88AAAABUItwag","author":{"login":"khangtudo"},"authorAssociation":"OWNER","body":"## Attribution boundary clarification\n\nThe green marker tests prove **registration and reachability**, not production session attribution:\n\n- Official PMN custom provider node/connection exists.\n- PMN appears in the router catalog.\n- Direct router request addressed as `PMN/gpt-5.6-sol` returns the exact marker.\n- A temporary AICoworker PMN configuration also returned the exact marker.\n\nWhat remains unresolved is whether AICoworker production session metadata and metering retain PMN attribution after provider/model normalization. The session record normalizes the response to `CPX/gpt-5.6-sol`, and the queried 9router `usageHistory`/`requestDetails` stores contain no row attributed to the new PMN connection for the test window. This is not proof that routing failed; it is proof that PMN attribution is currently unverified.\n\nBecause the temporary PMN config was restored before raw component metadata/request IDs were captured, that test is not fully reproducible. Exit criterion remains: capture one PMN-addressed AICoworker request with the same request/session ID visible in raw router logs or metering under the PMN connection, and determine where normalization occurs relative to usage emission.","createdAt":"2026-09-12T13:49:00Z","includesCreatedEdit":false,"isMinimized":false,"minimizedReason":"","reactionGroups":[],"url":"https://github.com/khangtudo/aki-pro-max/issues/2#issuecomment-5646282858","viewerDidAuthor":true},{"id":"IC_kwDOUX4nN88AAAABUJJUFg","author":{"login":"khangtudo"},"authorAssociation":"OWNER","body":"## Patch/release progress — v0.1.0-beta.8\n\nThe schema compatibility blocker for OpenClaw tools is fixed and published. PMN custom provider registration and direct 9router reachability were fixed earlier. Issue #2 remains open because production AICoworker→PMN attribution still lacks a durable same-request usage/log record under the PMN connection; beta.8 does not change that boundary.","createdAt":"2026-09-12T15:11:41Z","includesCreatedEdit":false,"isMinimized":false,"minimizedReason":"","reactionGroups":[],"url":"https://github.com/khangtudo/aki-pro-max/issues/2#issuecomment-5646734358","viewerDidAuthor":true},{"id":"IC_kwDOUX4nN88AAAABUM8mWQ","author":{"login":"khangtudo"},"authorAssociation":"OWNER","body":"Resolved and independently attributed in `172e7e6009c6f8b8fb9b1ddd26273f70fa12bb07`.\n\nClosure evidence:\n- Fresh AICoworker subagent explicitly used `provider=pmn`, `model=PMN/gpt-5.6-sol` and returned the exact four-token marker.\n- Matching 9router usage row `86672` at `2026-09-13T02:23:23.283Z` used connection `6706879a-9897-4b2a-9142-728ca64276d4`, mapped to `Aki Pro Max Local`, status `ok`, completion tokens `4`.\n- CPX remained active and served surrounding unrelated requests, so this is not a disable-CPX negative test.\n- Trio gate: 17.43/20, StdDev 0.40.\n\nArtifacts: `FULL-TRACE-EVIDENCE.json`, `VERIFIER-ISSUES12-FINAL.txt`, updated `docs/CAPABILITY-MATRIX.md`.","createdAt":"2026-09-13T03:23:17Z","includesCreatedEdit":false,"isMinimized":false,"minimizedReason":"","reactionGroups":[],"url":"https://github.com/khangtudo/aki-pro-max/issues/2#issuecomment-5650720345","viewerDidAuthor":true},{"id":"IC_kwDOUX4nN88AAAABUNBuvQ","author":{"login":"khangtudo"},"authorAssociation":"OWNER","body":"Post-closure independent review found that the committed evidence proves provider attribution and the exact marker, but does **not** satisfy every item in this issue's stricter acceptance checklist. Missing from one correlated production trace: proof of exactly one bounded Postman dispatch, tool-call continuation/session affinity, an auth-failure leg, component versions, and a request ID shared end-to-end.\n\nTo keep issue state honest, reopening. The PMN provider-id collision remains fixed and verified; this issue now tracks only the remaining full-chain evidence matrix.","createdAt":"2026-09-13T03:32:27Z","includesCreatedEdit":false,"isMinimized":false,"minimizedReason":"","reactionGroups":[],"url":"https://github.com/khangtudo/aki-pro-max/issues/2#issuecomment-5650804413","viewerDidAuthor":true}],"number":2,"state":"OPEN","url":"https://github.com/khangtudo/aki-pro-max/issues/2"}

package/ISSUE-2-REMOTE.json

@@ -1 +0,0 @@
-{"body":"## Goal\n\nDemonstrate one sanitized end-to-end trace through the complete production chain without mocks or fallback.\n\n## Acceptance checklist\n\n- AICoworker sends an authenticated request through 9router.\n- 9router selects the Aki Pro Max node and credential slot.\n- Aki Pro Max dispatches exactly one bounded live Postman request.\n- A distinctive prompt marker returns through the same chain.\n- Tool-call continuation, session affinity and auth failures are recorded without secrets.\n- Evidence includes timestamps, component versions and request IDs, not raw credentials or prompts.","closedAt":"2026-09-13T03:23:18Z","comments":[{"id":"IC_kwDOUX4nN88AAAABUIPUvg","author":{"login":"khangtudo"},"authorAssociation":"OWNER","body":"## Real AICoworker runtime trace attempted\n\nA real AICoworker `sessions_spawn` was configured to use the PMN route through 9router. The request reached the upstream/provider path but failed with `403 Access denied: service error` before returning the distinctive marker. No mock or fallback was used.\n\nDuring read-only 9router inspection, an old local facade key was accidentally printed to the private tool transcript. It was immediately rotated in both the provider `.env` and 9router PMN connection. Verification: old key now returns 401, new key returns 200, health returns 200. No key was posted to GitHub.\n\n**Current blocker:** PMN/9router upstream authentication/routing returns 403 from the AICoworker runtime. The full marker round trip is therefore not complete and this issue remains open.","createdAt":"2026-09-12T12:08:10Z","includesCreatedEdit":false,"isMinimized":false,"minimizedReason":"","reactionGroups":[],"url":"https://github.com/khangtudo/aki-pro-max/issues/2#issuecomment-5645784254","viewerDidAuthor":true},{"id":"IC_kwDOUX4nN88AAAABUISuyw","author":{"login":"khangtudo"},"authorAssociation":"OWNER","body":"## Evidence correction\n\nThe AICoworker subagent returned the exact distinctive marker, but the persisted session record identifies the model as `CPX/gpt-5.6-sol`, not PMN. Therefore this output alone is **not sufficient proof** that 9router/Aki Pro Max carried the request. The prior PMN attempt also recorded an upstream 403. Issue #2 remains open pending component-level routing evidence.\n\nA private sanitized record stores only the marker hash/prefix and model metadata; no credentials or raw upstream content.","createdAt":"2026-09-12T12:19:32Z","includesCreatedEdit":false,"isMinimized":false,"minimizedReason":"","reactionGroups":[],"url":"https://github.com/khangtudo/aki-pro-max/issues/2#issuecomment-5645840075","viewerDidAuthor":true},{"id":"IC_kwDOUX4nN88AAAABUIrpdQ","author":{"login":"khangtudo"},"authorAssociation":"OWNER","body":"## Root cause fixed: official 9router custom provider registration\n\nThe previous PMN row was an orphan connection: it referenced `openai-compatible-chat-postman2api`, but no matching `providerNodes` entry existed, so it was absent from the GUI/runtime provider registry.\n\nRepair completed through 9router's authenticated official APIs:\n\n- Created custom provider node `Aki Pro Max Local`, prefix `PMN`, chat API, base URL `http://127.0.0.1:8788/v1`.\n- Created an active connection bound to that node using the rotated facade key.\n- `GET /v1/models` now lists `PMN/gpt-5.6-sol`.\n- Direct 9router `POST /v1/chat/completions` using `PMN/gpt-5.6-sol` returned HTTP 200 and the exact marker.\n- AICoworker subagent configured with PMN returned its exact marker successfully. Session history normalizes to the downstream response model (`CPX/gpt-5.6-sol`), so the direct 9router marker plus official provider registration are the component-level route evidence.\n- Temporary Wi Ha PMN model/allowlist changes were restored to CPX after the test.\n\nAcceptance is met for the live chain. Note: 9router did not persist a usageHistory row under the newly created connection ID for this short test, so evidence relies on authenticated provider registry + routable catalog + exact direct route marker + AICoworker marker rather than usage accounting.","createdAt":"2026-09-12T13:41:59Z","includesCreatedEdit":false,"isMinimized":false,"minimizedReason":"","reactionGroups":[],"url":"https://github.com/khangtudo/aki-pro-max/issues/2#issuecomment-5646248309","viewerDidAuthor":true},{"id":"IC_kwDOUX4nN88AAAABUIrp7w","author":{"login":"khangtudo"},"authorAssociation":"OWNER","body":"Closed after official PMN provider registration and successful direct 9router plus AICoworker marker tests. The orphan provider registration was the root cause.","createdAt":"2026-09-12T13:42:01Z","includesCreatedEdit":false,"isMinimized":false,"minimizedReason":"","reactionGroups":[],"url":"https://github.com/khangtudo/aki-pro-max/issues/2#issuecomment-5646248431","viewerDidAuthor":true},{"id":"IC_kwDOUX4nN88AAAABUIsSag","author":{"login":"khangtudo"},"authorAssociation":"OWNER","body":"## Closure correction\n\nReopened after final review. The orphan provider registration is fixed and direct 9router PMN routing is verified, but AICoworker end-to-end attribution is not yet conclusive: session history normalizes the response model to CPX and no usageHistory/requestDetails row was persisted for the new PMN connection during the marker window. The exact marker therefore proves output success but does not independently exclude silent fallback.\n\nRemaining exit criterion: capture a request/log row tied to the new PMN connection ID, or rerun with CPX unavailable and PMN still returning the exact marker.","createdAt":"2026-09-12T13:44:09Z","includesCreatedEdit":false,"isMinimized":false,"minimizedReason":"","reactionGroups":[],"url":"https://github.com/khangtudo/aki-pro-max/issues/2#issuecomment-5646258794","viewerDidAuthor":true},{"id":"IC_kwDOUX4nN88AAAABUItwag","author":{"login":"khangtudo"},"authorAssociation":"OWNER","body":"## Attribution boundary clarification\n\nThe green marker tests prove **registration and reachability**, not production session attribution:\n\n- Official PMN custom provider node/connection exists.\n- PMN appears in the router catalog.\n- Direct router request addressed as `PMN/gpt-5.6-sol` returns the exact marker.\n- A temporary AICoworker PMN configuration also returned the exact marker.\n\nWhat remains unresolved is whether AICoworker production session metadata and metering retain PMN attribution after provider/model normalization. The session record normalizes the response to `CPX/gpt-5.6-sol`, and the queried 9router `usageHistory`/`requestDetails` stores contain no row attributed to the new PMN connection for the test window. This is not proof that routing failed; it is proof that PMN attribution is currently unverified.\n\nBecause the temporary PMN config was restored before raw component metadata/request IDs were captured, that test is not fully reproducible. Exit criterion remains: capture one PMN-addressed AICoworker request with the same request/session ID visible in raw router logs or metering under the PMN connection, and determine where normalization occurs relative to usage emission.","createdAt":"2026-09-12T13:49:00Z","includesCreatedEdit":false,"isMinimized":false,"minimizedReason":"","reactionGroups":[],"url":"https://github.com/khangtudo/aki-pro-max/issues/2#issuecomment-5646282858","viewerDidAuthor":true},{"id":"IC_kwDOUX4nN88AAAABUJJUFg","author":{"login":"khangtudo"},"authorAssociation":"OWNER","body":"## Patch/release progress — v0.1.0-beta.8\n\nThe schema compatibility blocker for OpenClaw tools is fixed and published. PMN custom provider registration and direct 9router reachability were fixed earlier. Issue #2 remains open because production AICoworker→PMN attribution still lacks a durable same-request usage/log record under the PMN connection; beta.8 does not change that boundary.","createdAt":"2026-09-12T15:11:41Z","includesCreatedEdit":false,"isMinimized":false,"minimizedReason":"","reactionGroups":[],"url":"https://github.com/khangtudo/aki-pro-max/issues/2#issuecomment-5646734358","viewerDidAuthor":true},{"id":"IC_kwDOUX4nN88AAAABUM8mWQ","author":{"login":"khangtudo"},"authorAssociation":"OWNER","body":"Resolved and independently attributed in `172e7e6009c6f8b8fb9b1ddd26273f70fa12bb07`.\n\nClosure evidence:\n- Fresh AICoworker subagent explicitly used `provider=pmn`, `model=PMN/gpt-5.6-sol` and returned the exact four-token marker.\n- Matching 9router usage row `86672` at `2026-09-13T02:23:23.283Z` used connection `6706879a-9897-4b2a-9142-728ca64276d4`, mapped to `Aki Pro Max Local`, status `ok`, completion tokens `4`.\n- CPX remained active and served surrounding unrelated requests, so this is not a disable-CPX negative test.\n- Trio gate: 17.43/20, StdDev 0.40.\n\nArtifacts: `FULL-TRACE-EVIDENCE.json`, `VERIFIER-ISSUES12-FINAL.txt`, updated `docs/CAPABILITY-MATRIX.md`.","createdAt":"2026-09-13T03:23:17Z","includesCreatedEdit":false,"isMinimized":false,"minimizedReason":"","reactionGroups":[],"url":"https://github.com/khangtudo/aki-pro-max/issues/2#issuecomment-5650720345","viewerDidAuthor":true}],"number":2,"state":"CLOSED","title":"Verification: complete AICoworker → 9router → Aki Pro Max → live Postman trace","url":"https://github.com/khangtudo/aki-pro-max/issues/2"}

package/KEY-ROTATION-EVIDENCE.json

@@ -1,9 +0,0 @@
-{
-    "BackupDir":  "C:\\Users\\ADMIN\\aicoworker\\openclaw\\workspace-wiha\\backups\\aki-key-rotation-20260912-184753",
-    "OldKeyStatus":  401,
-    "NewKeyStatus":  200,
-    "Health":  200,
-    "Pid":  3640,
-    "GitTrackedEnv":  false,
-    "TranscriptExposure":  "Prior read-only SQLite inspection printed old key; old key rotated and now invalid."
-}

package/PMN-9ROUTER-FINAL.md

@@ -1,13 +0,0 @@
-# PMN 9router Repair — Final Evidence
-
-- Root cause: orphan provider connection without matching custom provider node.
-- Official node: Aki Pro Max Local, prefix PMN, OpenAI-compatible chat, local base URL 8788.
-- Official connection: active and bound to the node through authenticated 9router API.
-- Catalog: PMN/gpt-5.6-sol present.
-- Direct PMN chat: HTTP 200, exact marker matched; this proves registration/reachability, not AICoworker production attribution.
-- AICoworker marker: exact marker returned after temporary PMN configuration. PMN attribution remains unverified because response metadata normalized to CPX and no row attributed to the new PMN connection appeared in the queried usageHistory/requestDetails stores for the test window. The temporary state was restored before raw request IDs were captured, so the run is not fully reproducible.
-- Metadata caveat: AICoworker session history records the downstream response model CPX/gpt-5.6-sol; 9router usage tables did not create a row keyed to the new connection for the short run.
-- Temporary Wi Ha config restored to CPX; config valid.
-- Old orphan row remains in DB but is non-resolvable because its provider node is absent; do not use it. A DB backup exists before repair.
-
-

package/RAPID-BASIL-RECONCILIATION.json

@@ -1,10 +0,0 @@
-{
-    "OnlyChangedTest":  "admin.test.mjs",
-    "Reason":  "Aki Pro Max branding assertion",
-    "SourceTestIdentities":  96,
-    "StagingTestIdentities":  96,
-    "IdentityDiff":  0,
-    "FailedAttempt":  "rapid-basil",
-    "RootCause":  "unsafe mechanical literal replacement in test assertions",
-    "Prevention":  "Do not codemod fixture/assertion literals; re-copy source tests then apply narrow reviewed diff."
-}

package/RELEASE-ARCHIVE.json

@@ -1,15 +0,0 @@
-{
-    "Url":  "https://github.com/khangtudo/aki-pro-max",
-    "Visibility":  "PUBLIC",
-    "Branch":  "main",
-    "DefaultBranch":  "main",
-    "Tag":  "v0.1.0-beta.1",
-    "SHA":  "8b664aef05277b30a5655840c995ea7cacf993b5",
-    "RemoteMainSHA":  "8b664aef05277b30a5655840c995ea7cacf993b5",
-    "RemoteTagSHA":  {
-
-                     },
-    "Remote":  "https://github.com/khangtudo/aki-pro-max.git",
-    "Description":  "Local-first OpenAI-compatible gateway and secure control plane for an authorized Postman web session.",
-    "Verified":  false
-}

package/SECURITY-RECONCILIATION.json

@@ -1,30 +0,0 @@
-{
-    "Timestamp":  "2026-09-12T18:23:20.3462359+07:00",
-    "FlaggedFixtureProvenance":  [
-                                     {
-                                         "File":  "test/admin-auth.test.mjs",
-                                         "History":  [
-                                                         "8b664aef05277b30a5655840c995ea7cacf993b5|2026-09-12T18:10:59+07:00|release: Aki Pro Max v0.1.0-beta.1 ΓÇö verified GPT gateway and local control plane"
-                                                     ]
-                                     },
-                                     {
-                                         "File":  "test/admin.test.mjs",
-                                         "History":  [
-                                                         "8b664aef05277b30a5655840c995ea7cacf993b5|2026-09-12T18:10:59+07:00|release: Aki Pro Max v0.1.0-beta.1 ΓÇö verified GPT gateway and local control plane"
-                                                     ]
-                                     },
-                                     {
-                                         "File":  "test/full-ingress/run-full-ingress.mjs",
-                                         "History":  [
-                                                         "8b664aef05277b30a5655840c995ea7cacf993b5|2026-09-12T18:10:59+07:00|release: Aki Pro Max v0.1.0-beta.1 ΓÇö verified GPT gateway and local control plane"
-                                                     ]
-                                     }
-                                 ],
-    "GitleaksConfigOrIgnoreFiles":  [
-
-                                    ],
-    "FullHistory":  "--all",
-    "Commits":  "3",
-    "Leaks":  0,
-    "Classification":  "Synthetic test literals introduced in initial release commit; exact current credentials do not match; Gitleaks no findings."
-}

package/docs/ADMIN-GUI-CONTRACT.md

@@ -1,29 +0,0 @@
-# Aki Pro Max Local Control Plane Contract
-
-## Routes
-- `GET /admin` — local administration UI.
-- `GET /admin/app.css` — same-origin stylesheet.
-- `GET /admin/app.js` — same-origin script.
-- `GET /admin/config` — runtime metadata plus raw provider API key for explicit reveal/copy.
-
-## Security boundary
-1. Every `/admin*` request is checked using `req.socket.remoteAddress` only; proxy and forwarded headers are ignored.
-2. Accepted client addresses: IPv4 `127.0.0.0/8`, IPv6 `::1`, and IPv4-mapped loopback `::ffff:127.0.0.0/8`.
-3. Host header must be literal `localhost`, `127.0.0.1`, or `[::1]`, optionally with the actual listening port. DNS names and non-loopback IPs fail closed.
-4. No CORS headers are emitted. Config responses use `Cache-Control: no-store` and `X-Content-Type-Options: nosniff`.
-5. API key is never embedded in static HTML/JS/CSS, logged, persisted by the GUI, or returned from `/health`.
-6. CSP for `/admin` is `default-src 'self'; script-src 'self'; style-src 'self'; connect-src 'self'; img-src 'self' data:; base-uri 'none'; frame-ancestors 'none'; form-action 'none'`.
-
-## GUI behavior
-- Loads health and config from the same origin.
-- Initially masks the API key.
-- Reveal button only changes local DOM state after `/admin/config` succeeds.
-- Copy buttons use Clipboard API for Base URL and API key.
-- Shows model list, transport, workspace ID, health boundary, and OpenAI client configuration snippet.
-
-## Tests
-- Pure loopback and Host validation matrix.
-- `/admin` succeeds on localhost and contains no API key.
-- `/admin/config` returns metadata/key on loopback with no-store and no CORS.
-- Non-loopback remoteAddress or attacker Host is rejected.
-- Static assets never contain configured key.

package/docs/CAPABILITY-MATRIX.md

@@ -1,44 +0,0 @@
-# Aki Pro Max — Capability Matrix
-
-## Current verified scope
-
-| Requirement | Evidence | Verdict |
-|---|---|---|
-| OpenAI-compatible facade | `/v1/models`, `/v1/chat/completions`, authentication and model-contract tests | Met |
-| Authorized Postman Web Team route | Fresh live probes used the configured team origin and workspace | Met for configured workspace |
-| GPT-5.6 Sol native tool loop | Initial tool call, local result, same-session continuation, exact final marker | Met |
-| Claude Opus 4.8 native tool loop | `CLAUDE-LIVE-TOOLS-EVIDENCE.json`: HTTP 200 initial and continuation, valid empty-object arguments, exact final marker | Met |
-| 1:1 single-process session continuity | Correlation tests plus sticky `x-session-id` contract | Met |
-| Eight public model aliases | Runtime catalog and deterministic checks | Met as catalog |
-| AICoworker → 9router → Aki Pro Max attribution | `FULL-TRACE-EVIDENCE.json`: fresh `provider=pmn` subagent request correlated to usage row `86672` on `Aki Pro Max Local`; CPX remained active | Met |
-| Local Control Plane | `/admin` UAT, masked status, API-key reveal and upstream-auth fields | Met |
-| Automatic protected Desktop-session extraction | Not implemented; manual authorized session input remains required | Not supported |
-| Multi-team live routing | Header validation exists; a live multi-team matrix has not been exercised | Partial |
-| Restart/multi-worker correlation | Correlation store remains in-memory and single-process | Not supported |
-
-## Closure evidence for issues #1 and #2
-
-### Issue #1 — Claude live tool flow
-
-The fresh acceptance run at `services/postman-openai-provider/reports/live-runs/goal-issue1-session-20260913-072211/LIVE-TWO-MODEL-TOOLS-EVIDENCE.json` recorded:
-
-- `publicModel=claude-opus-4-8`
-- `selectedModel=CLAUDE_OPUS_48_BEDROCK`
-- initial HTTP `200`
-- exactly one valid `get_probe_value` tool call
-- `argumentsValid=true`
-- continuation HTTP `200`
-- `finalMatchesMarker=true`
-- terminal state `completed_match`
-
-### Issue #2 — PMN attribution with CPX still active
-
-A fresh AICoworker subagent explicitly requested `pmn/PMN/gpt-5.6-sol` and its persisted transcript recorded `provider=pmn`, `model=PMN/gpt-5.6-sol`. In the matching time window, 9router usage row `86672` was served by connection `6706879a-9897-4b2a-9142-728ca64276d4`, mapped to `Aki Pro Max Local`, with status `ok` and four completion tokens—the exact marker response. CPX remained active and served surrounding unrelated requests, so the result is not a CPX-disabled negative test.
-
-## Verification gate
-
-Tier 1 syntax and focused integration tests passed. The Trio verifier scored closure evidence **17.43/20** with **StdDev 0.40**, above the required 14.0 threshold and below the 3.5 disagreement gate. See `VERIFIER-ISSUES12-FINAL.txt`.
-
-## Honest remaining boundaries
-
-This remains a beta release because automatic protected-session extraction, multi-team live coverage and restart-safe distributed correlation are not claimed. Those boundaries do not invalidate closure of issues #1 and #2.