ZyyandCodex 6c583e341a fix(openai): reject invalid continuation replay before account selection ...

Check the recorded native continuation scope before selecting an account
or committing a session binding. Reuse the same scope validation after
middleware while preserving native connection checks and migration policy.

Cover ReplayOwner and ReplayAny with persisted provider metadata or a
connection-local pin, with and without an existing session binding.
Rejected replays must not acquire leases, write bindings or aliases, send
upstream requests, or redirect subsequent child requests.

Refs #364

Co-authored-by: Codex <noreply@openai.com>

2026-10-07 22:45:42 +08:00

..

apps

refactor(backend): clarify ownership and align xai contracts

2026-10-07 19:34:10 +08:00

crates

fix(openai): reject invalid continuation replay before account selection

2026-10-07 22:45:42 +08:00

migrations

feat(settings): add preferred account affinity mode

2026-10-07 03:50:59 +08:00

Cargo.lock

refactor(backend): simplify query ownership and resource handling

2026-10-07 15:43:29 +08:00

Cargo.toml

perf(test): reduce backend fixture and timeout overhead

2026-09-28 17:49:23 +08:00

rust-toolchain.toml

refactor: migrate backend to Rust 1.97 and edition 2024

2026-07-12 19:10:56 +08:00