cartethyia 2.7.7 → 2.7.9

package/dist/dashboard/precompressed-assets.json

@@ -1,77 +1,77 @@
 {
-  "count": 119,
+  "count": 121,
   "assets": [
-    "assets/BannedPage-B05aF8Dg.js",
-    "assets/CliToolDetailPage-CLUhmjUy.js",
-    "assets/CliToolsPage-CQmrqqrk.js",
-    "assets/CombosPage-CHG_1Wr3.js",
-    "assets/ConsoleLogPage-DPgbklad.js",
-    "assets/CustomizationPage-pnfAqr_-.js",
-    "assets/HealthEventsModal-DGJuU2A6.js",
-    "assets/InjectSystemPromptPanel-C-e2AMz6.js",
-    "assets/LoginPage-J8wPbmfT.js",
-    "assets/ModelPicker-C6WlpU5E.js",
-    "assets/OverviewPage-BSQnF2Lp.js",
-    "assets/ProviderDetailPage-DK_e0FJz.js",
-    "assets/ProviderIcon-jjqXJDA3.js",
-    "assets/ProvidersPage-D_a3r6Gc.js",
-    "assets/ProxyPage-BBTRBAQ3.js",
-    "assets/QuotaPage-B2WqMSG1.js",
-    "assets/SettingsPage-D7xp5Ij_.js",
-    "assets/SetupPage-LND6_Ss7.js",
-    "assets/StudioPage-BzNnm6Bi.js",
+    "assets/BannedPage-BxoG1MrL.js",
+    "assets/CliToolDetailPage-ixwgKk53.js",
+    "assets/CliToolsPage-BmttNV3U.js",
+    "assets/CombosPage-BE3qwwfC.js",
+    "assets/ConsoleLogPage-CRZdmMIX.js",
+    "assets/CustomizationPage-Dv_FJ6Er.js",
+    "assets/HealthEventsModal-CoVrw2sM.js",
+    "assets/InjectSystemPromptPanel-BOoO8rpz.js",
+    "assets/LoginPage-ChJuNNVN.js",
+    "assets/ModelPicker-BZAJtPg1.js",
+    "assets/OverviewPage-BE40s3u5.js",
+    "assets/ProviderDetailPage-sfLoQtPV.js",
+    "assets/ProviderIcon-CQ6bPUf_.js",
+    "assets/ProvidersPage-DcepmPWo.js",
+    "assets/ProxyPage-BJ87Pp0U.js",
+    "assets/QuotaPage-gkSyRAKa.js",
+    "assets/SettingsPage-C5HPWqEv.js",
+    "assets/SetupPage-CFNcATJJ.js",
+    "assets/StudioPage-YoD4tY5l.js",
     "assets/ToolIcon-CfeLA-Z_.js",
-    "assets/UsagePage-C1TbL24N.js",
-    "assets/api-keys-KvX83mRe.js",
-    "assets/app-DRnQLhsc.js",
-    "assets/app-mweRcsKp.css",
+    "assets/UsagePage-DxjaAhb_.js",
+    "assets/api-keys-BTlkq_Uk.js",
+    "assets/app-B7kIWFm5.js",
+    "assets/app-BX2nnKqs.css",
     "assets/arrow-left-CpBxkoxI.js",
     "assets/arrow-right-Dl5yKnp8.js",
     "assets/arrow-up-59ms1iiT.js",
-    "assets/assert-CidQVoNo.js",
+    "assets/assert-CndthXFQ.js",
     "assets/backup-file-gdKIlg8U.js",
-    "assets/badge-BaX2GTrn.js",
-    "assets/banner-DFH4Bkte.js",
+    "assets/badge-DdbT_7Am.js",
+    "assets/ban-durations-B58FyRxC.js",
+    "assets/banner-CsGN-nbm.js",
     "assets/brain-Cwed_72z.js",
-    "assets/card-CxDw0lK6.js",
+    "assets/card-mgZ_TLLZ.js",
     "assets/chevron-left-Bf6CaTSJ.js",
     "assets/chevron-right-BXIy5l3h.js",
     "assets/circle-alert-CntYHV5v.js",
     "assets/circle-check-BU3v_mFW.js",
     "assets/circle-question-mark-Cz4un8sH.js",
-    "assets/cli-tools-Bwv5-zGZ.js",
-    "assets/clipboard-button-DfS1ntiq.js",
+    "assets/cli-tools-A1-v8-03.js",
+    "assets/clipboard-button-CJ4Zty89.js",
     "assets/database-Dz9N3zGd.js",
-    "assets/dialog-BK-NRr5u.js",
+    "assets/dialog-B5L2jPQ_.js",
     "assets/dialog-actions-B1axpEg7.js",
     "assets/download-dRFo5_Wu.js",
-    "assets/drawer-QqPul6sC.js",
-    "assets/entry-BMlYJVFj.js",
-    "assets/entry-Dmx7gBiN.js",
-    "assets/entry-vqGb8yVz.js",
+    "assets/drawer-DkjUouAj.js",
+    "assets/entry-B-LVLV6o.js",
+    "assets/entry-CAhdYl3B.js",
+    "assets/entry-D2xD0Tmd.js",
     "assets/eye-C_hawfH4.js",
     "assets/eye-off-Bk5g2luF.js",
     "assets/fingerprint-pattern-BWuHtbW4.js",
-    "assets/formatters-DP-5E01-.js",
+    "assets/formatters-CrsdLVsn.js",
     "assets/gauge-BbIMy7MB.js",
     "assets/house-h9AZlJuT.js",
     "assets/image-BPaouViG.js",
-    "assets/index-D36vCZht.js",
-    "assets/inline-CHJQwxLa.js",
-    "assets/input-BlmlizVV.js",
+    "assets/index-BU64Lqvp.js",
+    "assets/inline-B2aDLyyg.js",
+    "assets/input-BCVkdR9d.js",
     "assets/jsx-runtime-CXUMngI_.js",
     "assets/key-round-UkavsGxp.js",
     "assets/layers-2-glBbjl.js",
-    "assets/layout-Bz93I-yE.js",
-    "assets/list-row-Ml16KCfu.js",
-    "assets/live-7_QpnYGu.js",
+    "assets/layout-DNcAdMK-.js",
+    "assets/list-row-DgrIH0hw.js",
+    "assets/live-Cae01iu8.js",
     "assets/log-in-BmRjy60c.js",
     "assets/message-circle-CCxGwRvv.js",
-    "assets/minimize-2-BTmMTK4o.js",
-    "assets/mutation-GU7XdEjz.js",
-    "assets/network-CuMDaTzT.js",
-    "assets/numbers-CoqpaDMx.js",
-    "assets/pagination-B5aOoweZ.js",
+    "assets/mutation-BQ0ccH_A.js",
+    "assets/network-CRib7H_2.js",
+    "assets/numbers-BKQE8Xpz.js",
+    "assets/pagination-ecPvG_8g.js",
     "assets/pencil-768ysRAr.js",
     "assets/plus-DIdX_g-x.js",
     "assets/power-off-Yjw9GMJh.js",
@@ -84,6 +84,7 @@
     "assets/providers/bai.svg",
     "assets/providers/blackbox.svg",
     "assets/providers/claude-code.svg",
+    "assets/providers/devin.svg",
     "assets/providers/exa.svg",
     "assets/providers/gmi-cloud.svg",
     "assets/providers/inception.svg",
@@ -93,22 +94,23 @@
     "assets/providers/openai-light.svg",
     "assets/providers/parallel.svg",
     "assets/providers/tokenharbor.svg",
-    "assets/query-keys-YSoQOUh6.js",
+    "assets/providers/windsurf.svg",
+    "assets/query-keys-IKLh0YFd.js",
     "assets/quota-DJ1QlAOq.js",
     "assets/refresh-cw-BqJFk4sU.js",
     "assets/rotate-ccw-CufcqITi.js",
     "assets/route-CNSNj9Zm.js",
-    "assets/routing-fnCsxgNO.js",
+    "assets/routing-Ckm1UXuC.js",
     "assets/scaling-nWE4Cx8f.js",
     "assets/search-JOKus9rb.js",
-    "assets/select-C9Ssle9b.js",
+    "assets/select-ChoFWyKz.js",
     "assets/settings-2-Ds9DQp0t.js",
-    "assets/settings-BxslsErn.js",
+    "assets/settings-CKjFPlKW.js",
     "assets/shield-BMQNxORh.js",
     "assets/shield-check-DVS0Foqh.js",
-    "assets/stack-j7cXjgYX.js",
-    "assets/state-DHmEnLa2.js",
-    "assets/switch-DmZcyTIC.js",
+    "assets/stack-DWCwU3fh.js",
+    "assets/state-Cg3VL5J_.js",
+    "assets/switch-Db70BMix.js",
     "assets/terminal-0_IjPWTk.js",
     "assets/tokens-COzario9.js",
     "assets/trash-Cppn5c3R.js",
@@ -116,7 +118,7 @@
     "assets/use-modal-focus-By7oJoGd.js",
     "assets/use-reduced-motion-C4B0R6Sz.js",
     "assets/use-timeout-BwcBBRrT.js",
-    "assets/useMutation-CbCP4w1o.js",
+    "assets/useMutation-BqdE0LuM.js",
     "assets/wrench-B6E1oEuY.js",
     "assets/zap-C4EeVW4q.js",
     "index.html"

package/migrations/full-postgres/0044_add_models_warning_metadata.sql

@@ -0,0 +1,10 @@
+-- Adds `models.warning_metadata` (jsonb, nullable) — display-only warning
+-- metadata for a model row, carried as `{ warnings: [{ kind, message,
+-- severity?, updatedAt? }] }`. NULL means "no warnings"; the column is not
+-- read by routing. Part of the provider-account model-update proposal §3.4
+-- (area 06).
+--
+-- Idempotency comes from the migration ledger plus `ADD COLUMN IF NOT EXISTS`:
+-- a database built from a newer baseline that already carries the column must
+-- not fail startup.
+ALTER TABLE "models" ADD COLUMN IF NOT EXISTS "warning_metadata" jsonb;

package/migrations/full-postgres/0045_migrate_workbuddy_to_codebuddy.sql

@@ -0,0 +1,156 @@
+-- Migrate WorkBuddy provider data onto the CodeBuddy providers, then drop
+-- the WorkBuddy providers entirely.
+--
+--   workbuddy   -> cb    (CodeBuddy intl)
+--   workbuddycn -> cbcn  (CodeBuddy CN)
+--
+-- This mirrors the opencode rename pattern: the parent `providers` row is
+-- copied under the new id, every dependent table is repointed, and the old
+-- row is dropped last. Inside the migration transaction this is atomic.
+--
+-- A database that never had the WorkBuddy ids is unaffected — every statement
+-- matches zero rows. If a deployment somehow carries both spellings, the
+-- repoint merges them onto the new id, which is the correct outcome for one
+-- provider with two names.
+
+-- ── workbuddy -> cb ────────────────────────────────────────────────────────
+
+INSERT INTO "providers" (
+  "id", "tenant_id", "wire_family_default", "capability_profile", "base_url",
+  "compatibility_profile", "enabled", "requires_account"
+)
+SELECT
+  'cb', "tenant_id", "wire_family_default", "capability_profile", "base_url",
+  "compatibility_profile", "enabled", "requires_account"
+FROM "providers"
+WHERE "id" = 'workbuddy'
+ON CONFLICT ("id") DO NOTHING;
+
+-- Drop rows the repoint would collide with on a unique index.
+DELETE FROM "models"
+  WHERE "provider_id" = 'workbuddy'
+    AND EXISTS (SELECT 1 FROM "providers" WHERE "id" = 'cb')
+    AND EXISTS (
+      SELECT 1 FROM "models" AS keep
+      WHERE keep."provider_id" = 'cb'
+        AND keep."model_id" = "models"."model_id"
+        AND keep."endpoint_path" = "models"."endpoint_path"
+    );
+DELETE FROM "tenant_disabled_models"
+  WHERE "provider_id" = 'workbuddy'
+    AND EXISTS (SELECT 1 FROM "providers" WHERE "id" = 'cb')
+    AND EXISTS (
+      SELECT 1 FROM "tenant_disabled_models" AS keep
+      WHERE keep."provider_id" = 'cb'
+        AND keep."tenant_id" = "tenant_disabled_models"."tenant_id"
+        AND keep."model_id" = "tenant_disabled_models"."model_id"
+        AND keep."endpoint_path" = "tenant_disabled_models"."endpoint_path"
+    );
+DELETE FROM "provider_accounts"
+  WHERE "provider_id" = 'workbuddy'
+    AND EXISTS (SELECT 1 FROM "providers" WHERE "id" = 'cb')
+    AND EXISTS (
+      SELECT 1 FROM "provider_accounts" AS keep
+      WHERE keep."provider_id" = 'cb'
+        AND keep."tenant_id" IS NOT DISTINCT FROM "provider_accounts"."tenant_id"
+        AND keep."credential_fingerprint" IS NOT DISTINCT FROM "provider_accounts"."credential_fingerprint"
+    );
+DELETE FROM "provider_routing_settings"
+  WHERE "provider_id" = 'workbuddy'
+    AND EXISTS (SELECT 1 FROM "providers" WHERE "id" = 'cb')
+    AND EXISTS (
+      SELECT 1 FROM "provider_routing_settings" AS keep
+      WHERE keep."provider_id" = 'cb'
+        AND keep."tenant_id" IS NOT DISTINCT FROM "provider_routing_settings"."tenant_id"
+    );
+
+UPDATE "provider_accounts" SET "provider_id" = 'cb'
+  WHERE "provider_id" = 'workbuddy'
+    AND EXISTS (SELECT 1 FROM "providers" WHERE "id" = 'cb');
+UPDATE "models" SET "provider_id" = 'cb'
+  WHERE "provider_id" = 'workbuddy'
+    AND EXISTS (SELECT 1 FROM "providers" WHERE "id" = 'cb');
+UPDATE "tenant_disabled_models" SET "provider_id" = 'cb'
+  WHERE "provider_id" = 'workbuddy'
+    AND EXISTS (SELECT 1 FROM "providers" WHERE "id" = 'cb');
+UPDATE "provider_routing_settings" SET "provider_id" = 'cb'
+  WHERE "provider_id" = 'workbuddy'
+    AND EXISTS (SELECT 1 FROM "providers" WHERE "id" = 'cb');
+UPDATE "telemetry_events" SET "provider_id" = 'cb'
+  WHERE "provider_id" = 'workbuddy'
+    AND EXISTS (SELECT 1 FROM "providers" WHERE "id" = 'cb');
+
+DELETE FROM "providers"
+  WHERE "id" = 'workbuddy'
+    AND EXISTS (SELECT 1 FROM "providers" WHERE "id" = 'cb');
+
+-- ── workbuddycn -> cbcn ──────────────────────────────────────────────────────
+
+INSERT INTO "providers" (
+  "id", "tenant_id", "wire_family_default", "capability_profile", "base_url",
+  "compatibility_profile", "enabled", "requires_account"
+)
+SELECT
+  'cbcn', "tenant_id", "wire_family_default", "capability_profile", "base_url",
+  "compatibility_profile", "enabled", "requires_account"
+FROM "providers"
+WHERE "id" = 'workbuddycn'
+ON CONFLICT ("id") DO NOTHING;
+
+-- Drop rows the repoint would collide with on a unique index.
+DELETE FROM "models"
+  WHERE "provider_id" = 'workbuddycn'
+    AND EXISTS (SELECT 1 FROM "providers" WHERE "id" = 'cbcn')
+    AND EXISTS (
+      SELECT 1 FROM "models" AS keep
+      WHERE keep."provider_id" = 'cbcn'
+        AND keep."model_id" = "models"."model_id"
+        AND keep."endpoint_path" = "models"."endpoint_path"
+    );
+DELETE FROM "tenant_disabled_models"
+  WHERE "provider_id" = 'workbuddycn'
+    AND EXISTS (SELECT 1 FROM "providers" WHERE "id" = 'cbcn')
+    AND EXISTS (
+      SELECT 1 FROM "tenant_disabled_models" AS keep
+      WHERE keep."provider_id" = 'cbcn'
+        AND keep."tenant_id" = "tenant_disabled_models"."tenant_id"
+        AND keep."model_id" = "tenant_disabled_models"."model_id"
+        AND keep."endpoint_path" = "tenant_disabled_models"."endpoint_path"
+    );
+DELETE FROM "provider_accounts"
+  WHERE "provider_id" = 'workbuddycn'
+    AND EXISTS (SELECT 1 FROM "providers" WHERE "id" = 'cbcn')
+    AND EXISTS (
+      SELECT 1 FROM "provider_accounts" AS keep
+      WHERE keep."provider_id" = 'cbcn'
+        AND keep."tenant_id" IS NOT DISTINCT FROM "provider_accounts"."tenant_id"
+        AND keep."credential_fingerprint" IS NOT DISTINCT FROM "provider_accounts"."credential_fingerprint"
+    );
+DELETE FROM "provider_routing_settings"
+  WHERE "provider_id" = 'workbuddycn'
+    AND EXISTS (SELECT 1 FROM "providers" WHERE "id" = 'cbcn')
+    AND EXISTS (
+      SELECT 1 FROM "provider_routing_settings" AS keep
+      WHERE keep."provider_id" = 'cbcn'
+        AND keep."tenant_id" IS NOT DISTINCT FROM "provider_routing_settings"."tenant_id"
+    );
+
+UPDATE "provider_accounts" SET "provider_id" = 'cbcn'
+  WHERE "provider_id" = 'workbuddycn'
+    AND EXISTS (SELECT 1 FROM "providers" WHERE "id" = 'cbcn');
+UPDATE "models" SET "provider_id" = 'cbcn'
+  WHERE "provider_id" = 'workbuddycn'
+    AND EXISTS (SELECT 1 FROM "providers" WHERE "id" = 'cbcn');
+UPDATE "tenant_disabled_models" SET "provider_id" = 'cbcn'
+  WHERE "provider_id" = 'workbuddycn'
+    AND EXISTS (SELECT 1 FROM "providers" WHERE "id" = 'cbcn');
+UPDATE "provider_routing_settings" SET "provider_id" = 'cbcn'
+  WHERE "provider_id" = 'workbuddycn'
+    AND EXISTS (SELECT 1 FROM "providers" WHERE "id" = 'cbcn');
+UPDATE "telemetry_events" SET "provider_id" = 'cbcn'
+  WHERE "provider_id" = 'workbuddycn'
+    AND EXISTS (SELECT 1 FROM "providers" WHERE "id" = 'cbcn');
+
+DELETE FROM "providers"
+  WHERE "id" = 'workbuddycn'
+    AND EXISTS (SELECT 1 FROM "providers" WHERE "id" = 'cbcn');

package/migrations/lite-sqlite3/0044_add_models_warning_metadata.sql

@@ -0,0 +1,11 @@
+-- Adds `models.warning_metadata` (text, nullable) — display-only warning
+-- metadata for a model row, stored as a JSON string in SQLite (the dialect's
+-- jsonb analogue; Postgres keeps the same column as jsonb). NULL means "no
+-- warnings"; the column is not read by routing. Part of the provider-account
+-- model-update proposal §3.4 (area 06).
+--
+-- Idempotency comes from the migration ledger, not from the statement: the
+-- runner records the file inside the same transaction, so a file that has
+-- already run is never re-executed. The baseline is generated from
+-- `0000_baseline.sql` alone and does not carry this column.
+ALTER TABLE "models" ADD COLUMN "warning_metadata" text;

package/migrations/lite-sqlite3/0045_migrate_workbuddy_to_codebuddy.sql

@@ -0,0 +1,156 @@
+-- Migrate WorkBuddy provider data onto the CodeBuddy providers, then drop
+-- the WorkBuddy providers entirely.
+--
+--   workbuddy   -> cb    (CodeBuddy intl)
+--   workbuddycn -> cbcn  (CodeBuddy CN)
+--
+-- This mirrors the opencode rename pattern: the parent `providers` row is
+-- copied under the new id, every dependent table is repointed, and the old
+-- row is dropped last. Inside the migration transaction this is atomic.
+--
+-- A database that never had the WorkBuddy ids is unaffected — every statement
+-- matches zero rows. If a deployment somehow carries both spellings, the
+-- repoint merges them onto the new id, which is the correct outcome for one
+-- provider with two names.
+
+-- ── workbuddy -> cb ────────────────────────────────────────────────────────
+
+INSERT INTO "providers" (
+  "id", "tenant_id", "wire_family_default", "capability_profile", "base_url",
+  "compatibility_profile", "enabled", "requires_account"
+)
+SELECT
+  'cb', "tenant_id", "wire_family_default", "capability_profile", "base_url",
+  "compatibility_profile", "enabled", "requires_account"
+FROM "providers"
+WHERE "id" = 'workbuddy'
+ON CONFLICT ("id") DO NOTHING;
+
+-- Drop rows the repoint would collide with on a unique index.
+DELETE FROM "models"
+  WHERE "provider_id" = 'workbuddy'
+    AND EXISTS (SELECT 1 FROM "providers" WHERE "id" = 'cb')
+    AND EXISTS (
+      SELECT 1 FROM "models" AS keep
+      WHERE keep."provider_id" = 'cb'
+        AND keep."model_id" = "models"."model_id"
+        AND keep."endpoint_path" = "models"."endpoint_path"
+    );
+DELETE FROM "tenant_disabled_models"
+  WHERE "provider_id" = 'workbuddy'
+    AND EXISTS (SELECT 1 FROM "providers" WHERE "id" = 'cb')
+    AND EXISTS (
+      SELECT 1 FROM "tenant_disabled_models" AS keep
+      WHERE keep."provider_id" = 'cb'
+        AND keep."tenant_id" = "tenant_disabled_models"."tenant_id"
+        AND keep."model_id" = "tenant_disabled_models"."model_id"
+        AND keep."endpoint_path" = "tenant_disabled_models"."endpoint_path"
+    );
+DELETE FROM "provider_accounts"
+  WHERE "provider_id" = 'workbuddy'
+    AND EXISTS (SELECT 1 FROM "providers" WHERE "id" = 'cb')
+    AND EXISTS (
+      SELECT 1 FROM "provider_accounts" AS keep
+      WHERE keep."provider_id" = 'cb'
+        AND keep."tenant_id" IS NOT DISTINCT FROM "provider_accounts"."tenant_id"
+        AND keep."credential_fingerprint" IS NOT DISTINCT FROM "provider_accounts"."credential_fingerprint"
+    );
+DELETE FROM "provider_routing_settings"
+  WHERE "provider_id" = 'workbuddy'
+    AND EXISTS (SELECT 1 FROM "providers" WHERE "id" = 'cb')
+    AND EXISTS (
+      SELECT 1 FROM "provider_routing_settings" AS keep
+      WHERE keep."provider_id" = 'cb'
+        AND keep."tenant_id" IS NOT DISTINCT FROM "provider_routing_settings"."tenant_id"
+    );
+
+UPDATE "provider_accounts" SET "provider_id" = 'cb'
+  WHERE "provider_id" = 'workbuddy'
+    AND EXISTS (SELECT 1 FROM "providers" WHERE "id" = 'cb');
+UPDATE "models" SET "provider_id" = 'cb'
+  WHERE "provider_id" = 'workbuddy'
+    AND EXISTS (SELECT 1 FROM "providers" WHERE "id" = 'cb');
+UPDATE "tenant_disabled_models" SET "provider_id" = 'cb'
+  WHERE "provider_id" = 'workbuddy'
+    AND EXISTS (SELECT 1 FROM "providers" WHERE "id" = 'cb');
+UPDATE "provider_routing_settings" SET "provider_id" = 'cb'
+  WHERE "provider_id" = 'workbuddy'
+    AND EXISTS (SELECT 1 FROM "providers" WHERE "id" = 'cb');
+UPDATE "telemetry_events" SET "provider_id" = 'cb'
+  WHERE "provider_id" = 'workbuddy'
+    AND EXISTS (SELECT 1 FROM "providers" WHERE "id" = 'cb');
+
+DELETE FROM "providers"
+  WHERE "id" = 'workbuddy'
+    AND EXISTS (SELECT 1 FROM "providers" WHERE "id" = 'cb');
+
+-- ── workbuddycn -> cbcn ──────────────────────────────────────────────────────
+
+INSERT INTO "providers" (
+  "id", "tenant_id", "wire_family_default", "capability_profile", "base_url",
+  "compatibility_profile", "enabled", "requires_account"
+)
+SELECT
+  'cbcn', "tenant_id", "wire_family_default", "capability_profile", "base_url",
+  "compatibility_profile", "enabled", "requires_account"
+FROM "providers"
+WHERE "id" = 'workbuddycn'
+ON CONFLICT ("id") DO NOTHING;
+
+-- Drop rows the repoint would collide with on a unique index.
+DELETE FROM "models"
+  WHERE "provider_id" = 'workbuddycn'
+    AND EXISTS (SELECT 1 FROM "providers" WHERE "id" = 'cbcn')
+    AND EXISTS (
+      SELECT 1 FROM "models" AS keep
+      WHERE keep."provider_id" = 'cbcn'
+        AND keep."model_id" = "models"."model_id"
+        AND keep."endpoint_path" = "models"."endpoint_path"
+    );
+DELETE FROM "tenant_disabled_models"
+  WHERE "provider_id" = 'workbuddycn'
+    AND EXISTS (SELECT 1 FROM "providers" WHERE "id" = 'cbcn')
+    AND EXISTS (
+      SELECT 1 FROM "tenant_disabled_models" AS keep
+      WHERE keep."provider_id" = 'cbcn'
+        AND keep."tenant_id" = "tenant_disabled_models"."tenant_id"
+        AND keep."model_id" = "tenant_disabled_models"."model_id"
+        AND keep."endpoint_path" = "tenant_disabled_models"."endpoint_path"
+    );
+DELETE FROM "provider_accounts"
+  WHERE "provider_id" = 'workbuddycn'
+    AND EXISTS (SELECT 1 FROM "providers" WHERE "id" = 'cbcn')
+    AND EXISTS (
+      SELECT 1 FROM "provider_accounts" AS keep
+      WHERE keep."provider_id" = 'cbcn'
+        AND keep."tenant_id" IS NOT DISTINCT FROM "provider_accounts"."tenant_id"
+        AND keep."credential_fingerprint" IS NOT DISTINCT FROM "provider_accounts"."credential_fingerprint"
+    );
+DELETE FROM "provider_routing_settings"
+  WHERE "provider_id" = 'workbuddycn'
+    AND EXISTS (SELECT 1 FROM "providers" WHERE "id" = 'cbcn')
+    AND EXISTS (
+      SELECT 1 FROM "provider_routing_settings" AS keep
+      WHERE keep."provider_id" = 'cbcn'
+        AND keep."tenant_id" IS NOT DISTINCT FROM "provider_routing_settings"."tenant_id"
+    );
+
+UPDATE "provider_accounts" SET "provider_id" = 'cbcn'
+  WHERE "provider_id" = 'workbuddycn'
+    AND EXISTS (SELECT 1 FROM "providers" WHERE "id" = 'cbcn');
+UPDATE "models" SET "provider_id" = 'cbcn'
+  WHERE "provider_id" = 'workbuddycn'
+    AND EXISTS (SELECT 1 FROM "providers" WHERE "id" = 'cbcn');
+UPDATE "tenant_disabled_models" SET "provider_id" = 'cbcn'
+  WHERE "provider_id" = 'workbuddycn'
+    AND EXISTS (SELECT 1 FROM "providers" WHERE "id" = 'cbcn');
+UPDATE "provider_routing_settings" SET "provider_id" = 'cbcn'
+  WHERE "provider_id" = 'workbuddycn'
+    AND EXISTS (SELECT 1 FROM "providers" WHERE "id" = 'cbcn');
+UPDATE "telemetry_events" SET "provider_id" = 'cbcn'
+  WHERE "provider_id" = 'workbuddycn'
+    AND EXISTS (SELECT 1 FROM "providers" WHERE "id" = 'cbcn');
+
+DELETE FROM "providers"
+  WHERE "id" = 'workbuddycn'
+    AND EXISTS (SELECT 1 FROM "providers" WHERE "id" = 'cbcn');

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "cartethyia",
-  "version": "2.7.7",
+  "version": "2.7.9",
   "description": "A powerful, self-hosted reverse proxy for OpenAI- and Anthropic-compatible AI clients, powered by native Bun and Elysia. It serves both protocols from a single server, routes every model across any configured provider, and translates requests and responses in real time — streaming and prompt caching included. Underneath it runs a full delivery engine: per-account health tracking, quota and cooldown enforcement, automatic failover across pools and providers, usage accounting, and telemetry. Point OpenCode, Cline, Claude Code, Codex, or any compatible client at Cartethyia and it keeps its native protocol while the gateway absorbs every provider-specific difference behind it. Runs on embedded SQLite or external PostgreSQL with optional Redis coordination, ships as a global CLI with a system-tray console, and needs only Bun 1.4+ alongside Node.js/npm.",
   "license": "GPL-3.0-only",
   "type": "module",

package/src/boot/dependencies.ts

@@ -39,7 +39,7 @@ import { setPendingUsageSource } from "../security/api-key-auth";
 import { HealthEventFlushBuffer, setHealthEventBuffer } from "../persistence/health-event-flush";
 import { subscribePeerSettingsRevisions } from "../persistence/settings-revision";
 import { deleteExpiredSessions } from "../console/auth/session-service";
-import { InMemoryIpAbuseStore, IpAbuseProtectionService, RedisIpAbuseStore } from "../security/abuse";
+import { InMemoryIpAbuseStore, IpAbuseProtectionService, RedisIpAbuseStore, type IpAbuseStore } from "../security/abuse";
 import { checkReadiness } from "../persistence/readiness";
 import { ProxyRequestPreparer } from "../transport/request/preparer";
 import { DrizzleNetworkPoolLoader } from "../network/pool/loader";
@@ -104,6 +104,8 @@ export interface ProductionDeps {
   proxyPreparer: ProxyRequestPreparer;
   networkBindingFactory: ValidatedNetworkBindingFactory;
   ipAbuseProtection: IpAbuseProtectionService;
+  /** The abuse store backing manual IP bans and the ban list. */
+  ipAbuseStore: IpAbuseStore;
   readiness: () => Promise<ReadinessCheckResult>;
   scheduledTasks: ScheduledTaskRegistry;
   poolAgentResolver: PoolAgentResolver;
@@ -593,6 +595,11 @@ export async function buildProductionDeps(): Promise<ProductionDeps> {
     name: "client-version-monitor",
     intervalMs: CLIENT_VERSION_MONITOR_INTERVAL_MS,
     initialDelayMs: CLIENT_VERSION_INITIAL_DELAY_MS,
+    // Pure outbound reads with no shared rows/files: they must not be gated
+    // by the process-wide busy latch, or a nearly-continuous heavy sweep
+    // (quota-refresh) starves this monitor at its single initial tick and
+    // every 30-minute interval after it.
+    skipGate: true,
     run: refreshProviderClientVersions,
   });
 
@@ -606,13 +613,13 @@ export async function buildProductionDeps(): Promise<ProductionDeps> {
   // first open after an expiry always blocks on the provider.
   //
   // It also carries the daily check-in ride-along: each account refreshed
-  // here gets its once-per-day WorkBuddy/CodeBuddy credit grant claimed in
+  // here gets its once-per-day CodeBuddy credit grant claimed in
   // the same pass (one attempt per account per day, guarded by a day
   // marker), so no second timer duplicates the credential resolution.
   //
   // Registered in **every** mode, not only when Redis is present: gating it on
   // Redis would cost Lite proactive quota warming and the check-in ride-along
-  // above that claims the once-per-day WorkBuddy/CodeBuddy credit grant. The
+  // above that claims the once-per-day CodeBuddy credit grant. The
   // whole sweep chain accepts `RedisClient | undefined` and falls back to the
   // in-process TTL cache and an in-process day marker, so Redis is an
   // optimization here rather than a precondition — which is exactly what
@@ -739,6 +746,7 @@ export async function buildProductionDeps(): Promise<ProductionDeps> {
     }),
     networkBindingFactory,
     ipAbuseProtection,
+    ipAbuseStore: ipStore,
     readiness,
     scheduledTasks,
     poolAgentResolver,

package/src/config/cooldowns.ts

@@ -119,7 +119,7 @@ export function resolveAccountAuthRejectedCooldownMs(): number {
  * Deliberately a *base*, not the 24h flat penalty it replaced. `11140` has two
  * documented causes our classifier cannot separate from the response alone: the
  * user's prompt failed a safety review, **and** sending the wrong desktop
- * `User-Agent` brand (`workbuddy/shared.ts`). A flat 24h meant that after we
+ * `User-Agent` brand (`codebuddy/shared.ts`). A flat 24h meant that after we
  * fixed a header regression every buddy account stayed dead for up to a further
  * day, and one unsafe prompt cost a whole account a day.
  *

package/src/config/spec.ts

@@ -173,12 +173,6 @@ export const CONFIG_SPEC = {
    */
   CARTETHYIA_DISABLED_TASKS: { kind: "list" },
 
-  /**
-   * Force the Qoder UMID bridge to the mini-ELF bundle on Linux
-   * (`1` = always mini, `0` = never mini; absent = auto-detect containers).
-   */
-  CARTETHYIA_QODER_UMID_MINI: { kind: "int", default: 0, min: 0, max: 1 },
-
   /**
    * How long a day's telemetry is kept, in days.
    *

package/src/console/api-keys/routes.ts

@@ -80,18 +80,24 @@ function parseSharedChildrenQuery(query: URLSearchParams): SharedChildrenPageOpt
 
 export function createApiKeyOperations(config: ApiKeyConfig) {
   const operations = {
-    async listKeys(access: AccessDecision | undefined): Promise<ApiKeyResponse[]> {
+    async listKeys(access: AccessDecision | undefined, includeChildren = false): Promise<ApiKeyResponse[]> {
         const authorized = requireTenantScope(access, "dashboard:read");
         const records = await config.store.list(authorized.tenantId);
         const topLevel = records.filter(
           (record) => record.revokedAt === undefined && record.parentKeyId === undefined,
         );
+        // Share children are omitted from the main key list (they belong to a
+        // template), but the Banned Users search wants them so a child can be
+        // found and banned by hand.
+        const visible = includeChildren
+          ? records.filter((record) => record.revokedAt === undefined)
+          : topLevel;
         // A share template's own counter is the live family accumulator now:
         // every recipient commit adds to it (see ApiKeyAdmissionService
         // commitUsage), so reporting it raw gives the enforced family total.
         // No telemetry add-on is needed, and adding it here would double-count.
         return Promise.all(
-          topLevel.map(async (record) => {
+          visible.map(async (record) => {
             const response = sanitizeApiKeyResponse(record);
             if (record.keyMode !== "share") return response;
             return response;
@@ -921,9 +927,10 @@ function jsonNull(): Response {
 export function createApiKeyRoutes(config: ApiKeyConfig): AnyElysia {
   const factory = createApiKeyOperations(config);
   return new Elysia({ prefix: "/api-keys" })
-    .get("/", async ({ request, set }) => {
+    .get("/", async ({ request, set, query }) => {
       try {
-        return await factory.listKeys(config.accessResolver(request));
+        const includeChildren = query?.["includeChildren"] === "1" || query?.["includeChildren"] === "true";
+        return await factory.listKeys(config.accessResolver(request), includeChildren);
       } catch (error) {
         return errorResponse(error, set, "API-key operation failed");
       }