cartethyia 2.5.2 → 2.5.4

package/src/providers/operations/client-versions.ts

@@ -632,12 +632,19 @@ export function buildWorkBuddyUserAgent(
   cliVersion = getWorkBuddyCliVersion(),
 ): string {
   // 1:1 with codebuddy2api. The CLI profile is `CLI/<v> CodeBuddy/<v>` and the
-  // WorkBuddy profile is `WorkBuddy/<wb> WorkBuddy AI/<wb> CLI/<cli>`, which
+  // WorkBuddy profile is `WorkBuddy/<wb> workbuddy-ai/<wb> CLI/<cli>`, which
   // sends NO SDK headers — two separate profiles, not one string with a switch.
   // Whether SDK headers ride along is decided by `workbuddyHeaders`, not here, so
   // this builder only decides the UA text.
+  //
+  // The second token is the wire spelling `workbuddy-ai`, NOT the display
+  // brand `WorkBuddy AI`. This is what an official client actually sends; the
+  // product is branded with a space in the UI and in docs, and copying that
+  // branding into the header produced a UA no real client emits — which the
+  // intl gateway answers with 403 `11140`, the same refusal it gives a
+  // wrong-brand header. Product name ≠ wire token.
   if (identity === "CLI") return `CLI/${cliVersion} CodeBuddy/${cliVersion}`;
-  return `WorkBuddy/${clientVersion} WorkBuddy AI/${clientVersion} CLI/${cliVersion}`;
+  return `WorkBuddy/${clientVersion} workbuddy-ai/${clientVersion} CLI/${cliVersion}`;
 }
 
 export const _resetWorkBuddyCnClientVersionCache = accessor("workbuddyCnClient").reset;

package/src/providers/provider-contracts.ts

@@ -146,6 +146,13 @@ export interface ProviderDispatchContext {
   readonly request_headers?: Readonly<Record<string, string>> | undefined;
   /** Stable per-conversation cache affinity passed through dispatch. */
   readonly conversation_affinity?: string | undefined;
+  /**
+   * Per-tenant ceiling for one inline attachment, in bytes. `undefined` means
+   * the deployment default. Read by wire encoders that clamp images, which
+   * otherwise have no access to tenant preferences — they are pure translation
+   * and hold no database handle.
+   */
+  readonly image_clamp_max_bytes?: number | undefined;
   /** Opaque identity shared by retries of one logical gateway request. */
   readonly request_identity?: object | undefined;
   /**

package/src/providers/provider-metadata.ts

@@ -86,6 +86,9 @@ const RAW_BUNDLED_PROVIDER_METADATA = [
     serviceKinds: ["llm", "websearch", "imageGeneration"],
     credentialUrl: "https://antigravity.google",
     credentialHint: "Signed in with a Google account through the Antigravity login flow.",
+    // Per-account credential, so rotating the egress address buys nothing —
+    // the same reason Hermes, InferHub and Cline skip.
+    defaultSkipProxy: true,
   },
   { id: "muse", displayName: "Muse Code", baseUrl: "https://api.meta.ai" },
   {
@@ -109,6 +112,7 @@ const RAW_BUNDLED_PROVIDER_METADATA = [
     baseUrl: "https://q.us-east-1.amazonaws.com",
     bespokeWire: true,
     hasAdapterUserAgent: true,
+    defaultSkipProxy: true,
     credentialUrl: "https://kiro.dev",
     credentialHint: "Sign in with Google or GitHub in the browser, or use the device-code login with an Identity Center organization, then paste a Kiro API key if you prefer. Prompt caching is not reliably working for Kiro: the upstream recomputes the prompt on every turn, so cached-token savings should not be expected.",
   },
@@ -312,6 +316,12 @@ const RAW_BUNDLED_PROVIDER_METADATA = [
     hasAdapterUserAgent: true,
   },
   { id: "bai", displayName: "B.AI", baseUrl: "https://api.b.ai/v1", credentialUrl: "https://b.ai" },
+  {
+    id: "larprouter",
+    displayName: "LarRouter",
+    baseUrl: "https://larprouter.com/v1",
+    credentialUrl: "https://larprouter.com",
+  },
   { id: "inferhub", displayName: "InferHub", baseUrl: "https://api.inferhub.dev/v1", defaultSkipProxy: true },
   { id: "aihubmix", displayName: "AiHubMix", baseUrl: "https://aihubmix.com/v1", credentialUrl: "https://aihubmix.com/token" },
   { id: "tokenharbor", displayName: "TokenHarbor", baseUrl: "https://tokenharbor.ai/v1", credentialUrl: "https://tokenharbor.ai" },
@@ -331,6 +341,7 @@ const RAW_BUNDLED_PROVIDER_METADATA = [
     displayName: "Kilo Code",
     baseUrl: "https://api.kilo.ai/api/openrouter",
     credentialUrl: "https://app.kilo.ai/device-auth",
+    defaultSkipProxy: true,
   },
   {
     // Command Code's adapter stamps its own client identity headers
@@ -366,7 +377,7 @@ const RAW_BUNDLED_PROVIDER_METADATA = [
     credentialUrl: `${QODER_REALMS.cn.website}/account/integrations`,
     credentialHint: "Paste a Personal Access Token (pt-...) from the Qoder CN integrations page, or sign in with your Qoder China account.",
   },
-  { id: "trae", displayName: "Trae", baseUrl: `${TRAE_REALMS.intl.core}${TRAE_CHAT_PATH}`, hasAdapterUserAgent: true, credentialUrl: "https://www.trae.ai/", credentialHint: "Paste a Trae account export (accessToken + refreshToken) or the raw access token from an international Trae account." },
+  { id: "trae", displayName: "Trae", baseUrl: `${TRAE_REALMS.intl.core}${TRAE_CHAT_PATH}`, hasAdapterUserAgent: true, defaultSkipProxy: true, credentialUrl: "https://www.trae.ai/", credentialHint: "Paste a Trae account export (accessToken + refreshToken) or the raw access token from an international Trae account." },
   // A separate provider, not a region flag on `trae`: the China deployment has
   // its own core host, authorization scheme, and model roster, and a CN account
   // dispatched to the intl host is refused rather than degraded.
@@ -392,6 +403,7 @@ const RAW_BUNDLED_PROVIDER_METADATA = [
     baseUrl: "https://api.individual.githubcopilot.com",
     hasAdapterUserAgent: true,
     credentialUrl: "https://github.com/settings/copilot",
+    defaultSkipProxy: true,
   },
   { id: "perplexity", displayName: "Perplexity", baseUrl: "https://api.perplexity.ai", credentialUrl: "https://www.perplexity.ai/settings/api" },
   // Native web-search providers expose only the search service. Their catalog

package/src/providers/quota/quota-support.ts

@@ -54,6 +54,14 @@ export interface QuotaCollectionContext {
   readonly auth_state?: Readonly<Record<string, unknown>> | undefined;
   /** Stored credential kind, for surfaces that differ per auth family. */
   readonly credential_kind?: "api_key" | "oauth" | "none" | undefined;
+  /**
+   * The account the reading belongs to, when the caller knows it.
+   *
+   * Needed by collectors that can reuse a value captured from real traffic:
+   * that reading is keyed by account, so without this the collector cannot
+   * find it and spends a request rediscovering what dispatch already learned.
+   */
+  readonly accountId?: string | undefined;
 }
 
 /** Provider quota callback supplied by the canonical provider registry. */