dependabot[bot]
65fd34991b
chore(deps): bump node from bc0a2af to add5c17 in /deploy ( #650 )
...
Bumps node from `bc0a2af` to `add5c17`.
---
updated-dependencies:
- dependency-name: node
dependency-version: 26.13.0-bookworm-slim
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-11-09 11:21:59 +08:00
dependabot[bot]
03186b5411
chore(deps): bump debian from 99c0b25 to 734a72b in /deploy ( #649 )
...
Bumps debian from `99c0b25` to `734a72b`.
---
updated-dependencies:
- dependency-name: debian
dependency-version: bookworm-slim
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-11-09 11:21:47 +08:00
f9b5b5ff77
chore(deps): bump node from 26.12.1-bookworm-slim to 26.13.0-bookworm-slim in /deploy in the minor-and-patch group across 1 directory ( #573 )
...
* chore(deps): bump node
Bumps the minor-and-patch group with 1 update in the /deploy directory: node.
Updates `node` from 26.12.1-bookworm-slim to 26.13.0-bookworm-slim
---
updated-dependencies:
- dependency-name: node
dependency-version: 26.13.0-bookworm-slim
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: minor-and-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
* docs(development): align Node.js version with Docker
Co-authored-by: Codex <noreply@openai.com >
---------
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Zyy <zyycn@users.noreply.github.com >
Co-authored-by: Codex <noreply@openai.com >
2026-11-02 10:33:44 +08:00
dependabot[bot]
4d5778a84f
chore(deps): bump rust from 48b7f43 to 9181b56 in /deploy ( #575 )
...
Bumps rust from `48b7f43` to `9181b56`.
---
updated-dependencies:
- dependency-name: rust
dependency-version: 1.99.1-bookworm
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-11-02 10:32:20 +08:00
dependabot[bot]
6d22d73506
chore(deps): bump debian from 7ff6ba3 to 99c0b25 in /deploy ( #574 )
...
Bumps debian from `7ff6ba3` to `99c0b25`.
---
updated-dependencies:
- dependency-name: debian
dependency-version: bookworm-slim
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-11-02 10:32:10 +08:00
dependabot[bot]
dffc417b9f
chore(deps): bump rust from e12566d to 48b7f43 in /deploy ( #524 )
...
Bumps rust from `e12566d` to `48b7f43`.
---
updated-dependencies:
- dependency-name: rust
dependency-version: 1.99.1-bookworm
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-10-26 11:04:28 +08:00
dependabot[bot]
2d4294c3c9
chore(deps): bump debian from 7c7b2c9 to 7ff6ba3 in /deploy ( #523 )
...
Bumps debian from `7c7b2c9` to `7ff6ba3`.
---
updated-dependencies:
- dependency-name: debian
dependency-version: bookworm-slim
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-10-26 11:04:23 +08:00
Zyy and Codex
a8f183707e
chore(build): refresh base images and pin Ubuntu runners
...
Co-authored-by: Codex <noreply@openai.com >
2026-10-25 01:02:46 +08:00
Zyy and Codex
ab8c61b118
chore(toolchain): upgrade Node to 26.12.0 and Rust to 1.99.1
...
Align Docker images, CI inputs, Rust requirements and development commands.
Adapt strict compiler checks and reuse owned buffers in UTF-8 conversion.
Validate 4,021 backend tests, SDK feature configurations, Clippy, frontend
checks, and the amd64 container build and startup.
Co-authored-by: Codex <noreply@openai.com >
2026-10-18 04:57:48 +08:00
Zyy and Codex
733e9aa8a0
fix(release): guard publication and consolidate release tooling
...
Co-authored-by: Codex <noreply@openai.com >
2026-10-18 04:02:17 +08:00
dependabot[bot]
634b8fc674
chore(deps): bump node from 662933c to 86f07bc in /deploy ( #402 )
...
Bumps node from `662933c` to `86f07bc`.
---
updated-dependencies:
- dependency-name: node
dependency-version: 26-bookworm-slim
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-10-12 12:45:36 +08:00
dependabot[bot]
00bfb1699d
chore(deps): bump debian from 3783cc0 to 7c7b2c9 in /deploy ( #401 )
...
Bumps debian from `3783cc0` to `7c7b2c9`.
---
updated-dependencies:
- dependency-name: debian
dependency-version: bookworm-slim
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-10-12 12:45:27 +08:00
Zyy and Codex
b07bca312a
fix(upgrade): handle long migrations and unify forced shutdown
...
Extend the startup healthcheck grace period to five minutes and report elapsed migration time every fifteen seconds without changing published migrations.
Use one shutdown path for OS signals, internal cancellation, and managed restarts. Stop listening without waiting for active sessions, preserve bounded worker cleanup, and remove the obsolete connection drain timeout.
Cover shutdown entry points and worker cleanup with real HTTP lifecycle tests and document the deployment behavior.
Co-authored-by: Codex <noreply@openai.com >
2026-10-09 13:51:14 +08:00
Zyy and Codex
ab3a2e30c5
feat(time): unify deployment timezone across display and scheduling
...
Use one validated IANA timezone for backend display projections, calendar queries, budget windows, warmup slots, backups, and logs. Remove frontend date formatting and the independent backup timezone setting.
Preserve UTC instants and active budget windows, persist warmup deduplication, and advance backup schedules transactionally. Cover DST boundaries, timezone changes, invalid calendar anchors, and account cooldown displays.
Co-authored-by: Codex <noreply@openai.com >
2026-10-01 15:53:22 +08:00
dependabot[bot]
33aa161863
chore(deps): bump node from 2d49d87 to 662933c in /deploy ( #320 )
...
Bumps node from `2d49d87` to `662933c`.
---
updated-dependencies:
- dependency-name: node
dependency-version: 26-bookworm-slim
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-09-28 18:47:30 +08:00
2f545fb768
chore(deps): bump Debian Docker base image ( #253 )
...
Update the pinned Debian Bookworm Slim image digest.
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: Zyy <zyycn@users.noreply.github.com >
Co-authored-by: Codex <noreply@openai.com >
2026-09-24 22:48:18 +08:00
997b696953
chore(deps): bump Rust Docker base image ( #252 )
...
Update the pinned Rust 1.98 Bookworm image digest.
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: Zyy <zyycn@users.noreply.github.com >
Co-authored-by: Codex <noreply@openai.com >
2026-09-24 22:48:18 +08:00
Zyy and Codex
687ebd0331
feat(plugin): add the complete plugin development and management workflow ( #256 )
...
Introduce SDK 0.4, manifest v3, protocol v4, the isolated plugin runtime,
and cpr-plugin packaging CLI for independently maintained plugins.
Support installation, permissions, one active configuration per plugin,
version-specific settings, rollback, management pages, and CLI extensions.
Isolate plugin failures so native gateway startup and requests remain available.
Keep provider registration and UI choices fixed to built-in OpenAI and xAI.
Support nine extension capabilities with permission-scoped model and account
callbacks to the host.
Unify plugin settings and version management, support plugin icons,
and improve narrow layouts. Use the fixed GitHub UI dependency and pnpm 12
for standalone frontend and container builds. Reduce runtime test packaging
cost and align preparation modules with the repository layout.
Co-authored-by: Codex <noreply@openai.com >
2026-09-24 22:48:07 +08:00
dependabot[bot]
b9e919f510
chore(deps): bump rust from 82150a5 to 9a73a50 in /deploy ( #80 )
...
Bumps rust from `82150a5` to `9a73a50`.
---
updated-dependencies:
- dependency-name: rust
dependency-version: 1.98-bookworm
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-09-14 10:58:58 +08:00
Zyy and Codex
af134cf488
fix(docker): apply system updates to the runtime base image
...
Upgrade installed Debian packages before adding runtime dependencies so
digest-pinned base images receive available fixes, including the PCRE2
security update.
Validation: rebuilt the amd64 runtime-base image without cache; Trivy
reported zero fixable OS vulnerabilities across all severities; curl,
pg_dump, and pg_restore started successfully as the cpr user.
Co-authored-by: Codex <noreply@openai.com >
2026-09-07 03:05:59 +08:00
dependabot[bot]
891b227b69
chore(deps): bump debian from abd67ff to 8820086 in /deploy ( #52 )
...
Bumps debian from `abd67ff` to `8820086`.
---
updated-dependencies:
- dependency-name: debian
dependency-version: bookworm-slim
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-08-31 11:13:27 +08:00
dependabot[bot]
04096dddb7
chore(deps): bump rust from e70e2ee to 82150a5 in /deploy ( #51 )
...
Bumps rust from `e70e2ee` to `82150a5`.
---
updated-dependencies:
- dependency-name: rust
dependency-version: 1.98-bookworm
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-08-31 11:13:20 +08:00
dependabot[bot]
0f71cf6df2
chore(deps): bump rust in /deploy in the minor-and-patch group ( #46 )
...
Bumps the minor-and-patch group in /deploy with 1 update: rust.
Updates `rust` from 1.97-bookworm to 1.98-bookworm
---
updated-dependencies:
- dependency-name: rust
dependency-version: 1.98-bookworm
dependency-type: direct:production
dependency-group: minor-and-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-08-25 15:37:44 +08:00
Zyy and Codex
4f85209dc9
fix(config): centralize runtime data paths
...
Co-authored-by: Codex <noreply@openai.com >
2026-08-20 15:14:28 +08:00
dependabot[bot]
08d63ea3f3
chore(deps): bump debian from 7b140f3 to abd67ff in /deploy ( #39 )
...
Bumps debian from `7b140f3` to `abd67ff`.
---
updated-dependencies:
- dependency-name: debian
dependency-version: bookworm-slim
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-08-10 11:58:47 +08:00
zyycn and Claude Fable 5
dfedb5069d
feat(backup): add S3-compatible PostgreSQL backups with expiry TTL
...
Implement end-to-end backup to S3-compatible object storage (Cloudflare R2):
admin settings UI, scheduled and manual jobs, records, retention and expiry,
download via presigned URL, and delete convergence.
- gateway-admin: backup model, schedule/retention policy, daemon worker,
storage identity lock and audit
- gateway-store: pg_dump staging, S3 client with probe, backup repository
- gateway-api: backup settings/records/create/download/delete routes
- migrations: fold expiry TTL into 0003_s3_backup.sql (single migration)
- frontend: S3 storage, schedule and records cards under settings/backup
Co-Authored-By: Claude Fable 5 <noreply@anthropic.com >
2026-08-01 22:12:23 +08:00
zyycn and Claude
cc0303c65e
ci: drop the dead Dockerfile stage and sanitize the build-metadata image tag
...
Remove the release-asset build stages that nothing references. Strip the
+build semver metadata from the derived container tag, which is not a legal
tag character, while keeping the full version string where a tag is not
required.
Co-authored-by: Claude <noreply@anthropic.com >
2026-07-27 01:51:51 +08:00
zyycn and Codex
a6bac4601e
chore(release): prepare v3.0.0
...
Refresh verified dependencies, harden CI test credentials, and align release builders with the current supported image.
Co-authored-by: Codex <noreply@openai.com >
2026-07-25 01:54:18 +08:00
zyycn and Codex
75773a4608
refactor: migrate to multi-provider gateway architecture
...
Rebuild the backend as the frozen gateway workspace with a single PostgreSQL schema, provider-owned OpenAI and xAI boundaries, and mirrored domain tests.
Restore the admin product contracts for accounts, model catalogs, usage observability, billing details, and provider-scoped settings without compatibility shims.
Co-authored-by: Codex <noreply@openai.com >
2026-07-25 00:33:11 +08:00
dependabot[bot] and Codex
6fb27e869e
chore(deps): refresh Rust 1.97 builder digest
...
Refresh the pinned rust:1.97-bookworm digest after a successful container build and Trivy scan.
Co-authored-by: Codex <noreply@openai.com >
2026-07-16 02:01:08 +08:00
zyycn and Codex
9808e5939c
chore(deps): update frontend and container toolchain
...
Co-authored-by: Codex <noreply@openai.com >
2026-07-15 01:36:13 +08:00
zyycn and Codex
99cf39c76d
refactor: consolidate runtime configuration
...
Use deploy/config.yaml as the structured source for application settings and service credentials, with strict validation and runtime-relative paths.
Consolidate Compose assets under deploy, remove obsolete environment and smoke files, keep terminal logs readable while retaining JSON file output, and refresh the Codex Desktop fingerprint.
Co-authored-by: Codex <noreply@openai.com >
2026-07-14 00:46:57 +08:00
zyycn and Codex
a8f5c5a54e
fix: standardize Docker timezone
...
Set the runtime image and PostgreSQL service to Asia/Shanghai while preserving UTC timestamptz storage semantics.
Verify the application and PostgreSQL timezone contracts in the container workflow and document the display behavior.
Co-authored-by: Codex <noreply@openai.com >
2026-07-12 21:38:14 +08:00
zyycn and Codex
9b33e60df2
fix: add resilient Responses WebSocket transport
...
Expose the official Responses WebSocket endpoint so Codex can retry interrupted turns without proxy-side response splicing.
Preserve upstream frames under backpressure, report pump exit reasons, organize Responses handlers by transport, and poll fingerprint updates daily. Keep the warning policy in the backend manifest instead of a repository-wide Cargo config.
Co-authored-by: Codex <noreply@openai.com >
2026-07-12 21:16:04 +08:00
zyycn and Codex
1e99c5037d
refactor: migrate backend to Rust 1.97 and edition 2024
...
Unify the local, CI, release, and container toolchains on Rust 1.97.
Move update configuration, release caching, and event delivery into service-owned state, apply Edition 2024 idioms, and refresh repository ignore rules and documentation.
Co-authored-by: Codex <noreply@openai.com >
2026-07-12 19:10:56 +08:00
dependabot[bot] and Codex
8d54171771
chore(deps): bump Rust builder to 1.97
...
Co-authored-by: Codex <noreply@openai.com >
2026-07-12 15:38:59 +08:00
zyycn and Codex
4dcd9dc31d
feat: harden deployment and CI pipeline
...
Co-authored-by: Codex <noreply@openai.com >
2026-07-11 17:18:17 +08:00
zyycn and Codex
fe5494a614
refactor: align implementation with authoritative architecture
...
Co-authored-by: Codex <noreply@openai.com >
2026-07-10 22:53:27 +08:00
zyycn and Codex
078a6098a4
fix: improve docker build caching
...
Co-authored-by: Codex <noreply@openai.com >
2026-07-04 12:49:57 +08:00
zyycn and Codex
663226af6b
fix: refine docker update workflow
...
Co-authored-by: Codex <noreply@openai.com >
2026-07-04 02:58:16 +08:00
Zyy and Codex
112bd76f66
refactor: address audit findings
...
Co-authored-by: Codex <noreply@openai.com >
Signed-off-by: Zyy <No Email>
2026-07-03 18:20:05 +08:00
Zyy and Codex
00fa8505ea
ci: centralize release metadata
...
Co-authored-by: Codex <noreply@openai.com >
2026-07-02 18:20:29 +08:00
Zyy and Codex
2485d776ff
ci: optimize release pipeline
...
Co-authored-by: Codex <noreply@openai.com >
2026-07-02 12:51:40 +08:00
Zyy and Codex
9092740c9a
ci: complete release pipeline
...
Co-authored-by: Codex <noreply@openai.com >
2026-07-02 12:09:22 +08:00
Zyy and Codex
9b0e874379
refactor: restructure project layout
...
Co-authored-by: Codex <noreply@openai.com >
2026-07-01 17:13:00 +08:00