cartethyia 2.7.1 → 2.7.3

package/src/providers/operations/client-versions.ts

@@ -46,6 +46,17 @@ async function traeVersion(response: Response): Promise<string | null> {
       /"insert":"((?:January|February|March|April|May|June|July|August|September|October|November|December)\s+\d{1,2},\s*\d{4}\s*\([^)]*\))\\n"/g;
     for (const match of text.matchAll(heading)) {
       const window = text.slice(match.index ?? 0, (match.index ?? 0) + 900);
+      // A release line may name a *range* ("TRAE v3.6.1 ~ 3.6.4 are released"),
+      // and the newest entry is the newest build in it. Taking the first number
+      // reported 3.6.1 while 3.6.4 was already shipping — and on an entry whose
+      // heading carried no version at all the old pattern matched nothing, so
+      // discovery fell through to the next (older) entry and the pin drifted
+      // backwards on every refresh.
+      const range = window.match(/(\d+\.\d+\.\d+)\s*[~–-]\s*(\d+\.\d+\.\d+)/);
+      if (range) {
+        const high = range[2] ?? range[1];
+        if (high && isSemverish(high)) return high.trim();
+      }
       const found = window.match(/TraeCode\s+v?(\d+\.\d+\.\d+)|v?(\d+\.\d+\.\d+)\s+is\s+released/i);
       const version = found?.[1] ?? found?.[2];
       if (version && isSemverish(version)) return version.trim();
@@ -221,7 +232,7 @@ const KIRO_NODE_VERSION = "24.18.0";
 export const VERSION_SOURCES = {
   antigravity: {
     key: "antigravity",
-    fallback: "2.24.0",
+    fallback: "2.28.2",
     sources: [
       {
         url: "https://antigravity-hub-auto-updater-974169037036.us-central1.run.app/manifest/latest-arm64-mac.yml",
@@ -231,7 +242,7 @@ export const VERSION_SOURCES = {
   },
   qoder: {
     key: "qoder",
-    fallback: "1.1.74",
+    fallback: "1.1.81",
     sources: [
       {
         url: "https://registry.npmjs.org/@qoder-ai/qodercli/latest",
@@ -243,18 +254,21 @@ export const VERSION_SOURCES = {
     key: "opencode",
     // The v1 package (`opencode-ai`) stopped at 1.18. The v2 line publishes
     // under `@opencode/cli`, and this feed is what its own installer reads.
-    fallback: "2.0.32",
+    fallback: "2.2.2",
     minVersion: "2.0.0",
     sources: [{ url: "https://opencode.ai/update/api/latest/cli/npm" }],
   },
   commandcode: {
     key: "commandcode",
-    fallback: "1.84.0",
+    // npm `command-code` latest as of 2026-10-30. The CLI sends this as
+    // `x-command-code-version`, so a stale fallback presents a client build
+    // the upstream no longer ships — raise it whenever the package moves.
+    fallback: "1.88.2",
     sources: [{ url: "https://registry.npmjs.org/command-code/latest" }],
   },
   grok: {
     key: "grok",
-    fallback: "1.0.62",
+    fallback: "1.0.70",
     sources: [
       { url: "https://storage.googleapis.com/grok-build-public-artifacts/cli/stable" },
       { url: "https://registry.npmjs.org/@xai-official/grok/latest" },
@@ -262,7 +276,7 @@ export const VERSION_SOURCES = {
   },
   clineClient: {
     key: "cline-client",
-    fallback: "4.1.25",
+    fallback: "4.1.26",
     minVersion: "4.1.23",
     sources: [
       {
@@ -273,22 +287,22 @@ export const VERSION_SOURCES = {
   },
   clineSdk: {
     key: "cline-sdk",
-    fallback: "0.0.95",
+    fallback: "0.2.0",
     sources: [{ url: "https://registry.npmjs.org/@cline/sdk/latest", extract: clineSdkVersion }],
   },
   clineCli: {
     key: "cline-cli",
-    fallback: "3.0.73",
+    fallback: "3.0.74",
     sources: [{ url: "https://registry.npmjs.org/cline/latest", extract: clineSdkVersion }],
   },
   codex: {
     key: "codex",
-    fallback: "0.163.0",
+    fallback: "0.166.0",
     sources: [{ url: "https://registry.npmjs.org/@openai/codex/latest" }],
   },
   workbuddyClient: {
     key: "workbuddy-client",
-    fallback: "5.8.4.41366630",
+    fallback: "5.9.4.42593613",
     sources: [
       {
         url: "https://www.workbuddy.ai/v2/update?platform=workbuddy-win32-x64-user",
@@ -302,7 +316,7 @@ export const VERSION_SOURCES = {
   },
   workbuddyCnClient: {
     key: "workbuddy-cn-client",
-    fallback: "5.8.3.41334564",
+    fallback: "5.9.3.42398134",
     sources: [
       {
         url: "https://www.workbuddy.cn/v2/update?platform=workbuddy-win32-x64-user",
@@ -316,7 +330,7 @@ export const VERSION_SOURCES = {
   },
   workbuddyCli: {
     key: "workbuddy",
-    fallback: "2.169.0",
+    fallback: "2.178.1",
     sources: [
       { url: "https://registry.npmjs.org/@tencent-ai/codebuddy-code/latest" },
       { url: "https://registry.npmmirror.com/@tencent-ai/codebuddy-code/latest" },
@@ -329,7 +343,7 @@ export const VERSION_SOURCES = {
   },
   kiro: {
     key: "kiro",
-    fallback: "1.3.11",
+    fallback: "1.4.62",
     sources: [
       {
         // Kiro's downloads page exposes no stable version string. Homebrew
@@ -343,7 +357,7 @@ export const VERSION_SOURCES = {
   },
   codebuddy: {
     key: "codebuddy",
-    fallback: "2.169.0",
+    fallback: "2.178.1",
     sources: [
       { url: "https://registry.npmjs.org/@tencent-ai/codebuddy-code/latest" },
       { url: "https://registry.npmmirror.com/@tencent-ai/codebuddy-code/latest" },
@@ -366,7 +380,7 @@ export const VERSION_SOURCES = {
     // Current `@anthropic-ai/claude-code` release, so the billing
     // `cc_version=` suffix and the `claude-cli/` User-Agent stay on what
     // upstream ships.
-    fallback: "2.1.302",
+    fallback: "2.1.314",
     sources: [{ url: "https://registry.npmjs.org/@anthropic-ai/claude-code/latest" }],
   },
   claudeSdk: {
@@ -393,20 +407,21 @@ export const VERSION_SOURCES = {
   },
   kilo: {
     key: "kilo-code",
-    fallback: "7.8.14",
+    fallback: "7.8.25",
     sources: [{ url: "https://open-vsx.org/api/kilocode/kilo-code" }],
   },
   muse: {
     key: "muse-code",
-    fallback: "1.4.10-R6427.1",
+    fallback: "1.4.14-R7309.1",
     sources: [{ url: "https://api.meta.ai/muse-code/channels/muse-stable" }],
   },
   trae: {
     key: "trae",
-    // Fallback = the donor's last observed client version. Discovery replaces
-    // it within one monitor tick; it is only what a cold process sends before
+    // Fallback = the newest release the changelog names, which is the *high*
+    // end of its newest line ("TRAE v3.6.1 ~ 3.6.4"). Discovery replaces it
+    // within one monitor tick; it is only what a cold process sends before
     // the first successful fetch.
-    fallback: "3.6.2",
+    fallback: "3.6.4",
     sources: [
       {
         url: "https://docs.trae.ai/ide/changelog?_lang=en",
@@ -419,7 +434,7 @@ export const VERSION_SOURCES = {
     // Fallback = the last observed wire version. Discovery replaces it within
     // one monitor tick; it is only what a cold process sends before the first
     // successful fetch.
-    fallback: "cli-2026.10.19-6bbf2c4",
+    fallback: "cli-3.27.22-b1aa50c",
     sources: [
       {
         url: "https://cursor.com/api/download?platform=win32-x64-user&releaseTrack=stable",
@@ -433,7 +448,7 @@ export const VERSION_SOURCES = {
     // comment this replaced claimed no semver existed and pinned a date tag
     // (`v2026.9.24`) as the version — a tag, not a release, and not the
     // identity the client sends.
-    fallback: "0.22.2",
+    fallback: "0.22.5",
     sources: [
       {
         url: "https://api.github.com/repos/NousResearch/hermes-agent/releases/latest",

package/src/providers/operations/provider-catalog-service.ts

@@ -338,7 +338,17 @@ export async function registerByokProviders(
           provider_id: providerId,
           base_url: baseUrl,
           authentication_header_shape: wireProfile.authHeaderShape,
-          buildExtraHeaders: (_context, _request, candidate) => {
+          buildExtraHeaders: (context, _request, candidate) => {
+            // An operator-set route identity wins over both auto modes: Routing
+            // Strategy now serves custom providers too, and its value (including
+            // the empty "None" choice) must be honored verbatim.
+            const routeAgent = context.user_agent;
+            if (routeAgent !== undefined) {
+              return {
+                ...(routeAgent.length > 0 ? { "user-agent": routeAgent } : {}),
+                ...(compatibilityProfile?.extra_headers ?? {}),
+              };
+            }
             // Explicit gateway identity wins over CLI cloaking, and Codex /
             // Claude-Code-shaped traffic can never take this path: this hook
             // only runs for BYOK custom rows, never bundled first-party

package/src/providers/provider-contracts.ts

@@ -136,7 +136,11 @@ export interface ProviderDispatchContext {
   readonly outbound_attachment_fetch?: ValidatedOutboundFetch | undefined;
   /** Validated bidirectional HTTP/2 egress bound to the same selected network pool. */
   readonly outbound_http2?: ValidatedOutboundHttp2Bidi | undefined;
-  /** Built-in API-key route-selected fallback User-Agent; custom providers leave this unset. */
+  /**
+   * Route-selected fallback User-Agent from Routing Strategy; set when the
+   * operator configured one (bundled API-key providers default to the Claude
+   * CLI identity). Empty means the operator chose "None".
+   */
   readonly user_agent?: string | undefined;
   /** Gateway request id, stable across provider retries for one logical request. */
   readonly request_id?: string | undefined;
@@ -151,6 +155,14 @@ export interface ProviderDispatchContext {
    * and hold no database handle.
    */
   readonly image_clamp_max_bytes?: number | undefined;
+  /**
+   * Tenant system-prompt text resolved once per request (append/override
+   * injection). The buddy adapters fold it into their fixed system turn after
+   * serialization, wrapped in the gateway's marker prefix/suffix, so the
+   * upstream's channel-identity validation still sees its prompt as the
+   * opener.
+   */
+  readonly tenant_system_prompt?: string | undefined;
   /** Opaque identity shared by retries of one logical gateway request. */
   readonly request_identity?: object | undefined;
   /**
@@ -188,7 +200,8 @@ export function applyRouteUserAgent(
   if (
     credential.credential_kind === "oauth" ||
     credential.credential_kind === "scoped_access_token" ||
-    userAgent === undefined
+    userAgent === undefined ||
+    userAgent.trim().length === 0
   ) {
     return;
   }

package/src/security/access-control.ts

@@ -1,5 +1,24 @@
 // Shared authorization primitives: closed scope model and immutable access decisions.
 
+/**
+ * The single identity of "who is speaking" — resolved once at auth and carried
+ * through planning, admission, pool selection, and telemetry so every layer
+ * reasons about the same caller.
+ *
+ * - `apiKeyId` — the credential that authenticated.
+ * - `admissionIdentity` — the quota/concurrency owner (the share parent for a
+ *   child key; otherwise the key itself).
+ * - `tenantId` — the tenant the request runs as.
+ *
+ * Provider/account/model are added by the candidate, not here: the caller
+ * identity is stable regardless of what serves the request.
+ */
+export interface CallerIdentity {
+  readonly apiKeyId: string;
+  readonly admissionIdentity: string;
+  readonly tenantId: string;
+}
+
 /**
  * Closed set of authorization scopes.
  * - `routing:invoke`: May call only /v1/* gateway routes within holder's tenant.

package/src/security/api-key-auth.ts

@@ -6,7 +6,7 @@ import { DrizzleApiKeyStore } from "../persistence/stores/api-key-store";
 import { GatewayError } from "../protocol/gateway-error";
 import { hashSecret } from "./crypto";
 import { AUTH_CACHE_TTL_MS, createApiKeyAuthorizationCache } from "./api-key-auth-cache";
-import type { AccessScope } from "./access-control";
+import type { AccessScope, CallerIdentity } from "./access-control";
 import type { ApiKeyModelAccessMode } from "../persistence/schema";
 
 // ── Authorization cache ──────────────────────────────────────────────────────
@@ -222,6 +222,12 @@ export interface ResolvedApiKey {
   readonly modelPrefix?: string;
   /** Share-template id whose remote CLI mappings are inherited by this child. */
   readonly cliMappingOwnerId?: string;
+  /**
+   * Single "who is speaking" identity derived at auth. Carried through
+   * planning, admission, pool selection, and telemetry so every gate reasons
+   * about the same caller.
+   */
+  readonly caller: CallerIdentity;
 }
 
 /**
@@ -398,6 +404,13 @@ export async function resolveApiKeyAuthorization(
     snapshot,
     ...(policy.modelPrefix ? { modelPrefix: policy.modelPrefix } : {}),
     ...(parent?.keyMode === "share" ? { cliMappingOwnerId: parent.id } : {}),
+    caller: {
+      apiKeyId: row.id,
+      // The admission identity is the family owner for a share child — the
+      // same id every counter/lease in the system keys against.
+      admissionIdentity: snapshot.admission_identity ?? row.id,
+      tenantId: row.tenantId,
+    },
   };
   authorizationCache.rememberPositive(hash, value.id, value, Date.now());
   // Shared copy for peer processes, keyed by the token hash so a lookup can

package/src/security/cli-client-fingerprint.ts

@@ -50,13 +50,20 @@ const REMOTE_CLI_TOOL_UA: ReadonlyArray<{
   // filtering; MCP traffic uses `claude-code/<version>` instead.
   { toolId: "claude", pattern: /(^|[^a-z0-9])claude-cli\//i },
   { toolId: "claude", pattern: /(^|[^a-z0-9])claude-code\//i },
+  // Codex CLI (TUI/CLI builds) — the Guardian auto-review agent sends a
+  // `codex-auto-review` model that is only useful when the gateway can
+  // remap it to a serving provider. `codex-tui`, `codex-cli`, and the
+  // desktop agent's `opencode`-ish UAs all carry this prefix.
+  { toolId: "codex", pattern: /(^|[^a-z0-9])codex-(tui|cli)\//i },
 ];
 
 /**
  * Returns the remote CLI tool id recognised from the probe, or `null` when
  * the caller is not a remote-mapping client. Ordinary SDKs, curl, and local
- * mapping tools (Codex, …) stay unlabelled so their model ids resolve
- * through ordinary aliases / allowlists.
+ * mapping tools stay unlabelled so their model ids resolve through ordinary
+ * aliases / allowlists. Codex is labelled because its Guardian auto-review
+ * agent sends the hardcoded `codex-auto-review` model, which must be remapable
+ * to a serving provider for approval reviews to work at all.
  */
 export function detectRemoteCliToolId(probe: CliClientProbe): string | null {
   const userAgent = readUserAgent(probe);