Repository navigation
Conversation
Probe retrieveUserQuota with catalog fallback, skip http Bearer destinations, and surface Cloud Code Assist location blocks before generic 403s. Co-authored-by: Cursor <cursoragent@cursor.com>
Prevent quota probes from following redirects or promoting daily summaries as weekly usage, and interpret explicit percentage fields without converting small percentages into fractions. Co-authored-by: Cursor <cursoragent@cursor.com>
Treat unreadable daily quota JSON as an RPC failure while allowing the optional summary call to fail without discarding the daily window. Co-authored-by: Cursor <cursoragent@cursor.com>
Co-authored-by: Cursor <cursoragent@cursor.com>
Restrict host failover to known Google daily/prod endpoints, require explicit model identifiers for Gemini window parsing, and abort live quota plus catalog probing on 401/403/429 instead of leaking tokens to production peers. Co-authored-by: Cursor <cursoragent@cursor.com>
…eekly on the leaf path Co-authored-by: Cursor <cursoragent@cursor.com>
Key 429/quota/geoblock cooldowns by OAuth account, fail closed when a rotated Cloud Code Assist credential has no project id, and sweep expired entries with the state store. Co-authored-by: Cursor <cursoragent@cursor.com>
Validate a cooldown-selected account's Cloud Code Assist project before promoting it, so missing project metadata cannot change the active account state. Co-authored-by: Cursor <cursoragent@cursor.com>
Record provider-attributed geo blocks, quota exhaustion, and rate limits at the retry boundary so account rotation can actually avoid unhealthy accounts. Co-authored-by: Cursor <cursoragent@cursor.com>
Store AntigravityCooldownReason on account health, expose getAntigravityAccountCooldown, and stop retrying the same account inside fetchGoogleWithRetry after recording cooldowns so outer account rotation can switch credentials immediately. Co-authored-by: Cursor <cursoragent@cursor.com>
Image and web-search loops now forward AdapterFetchContext.accountId so a 429/403 records the cooled account and the next eligible one is selected. Co-authored-by: Cursor <cursoragent@cursor.com>
Operators can declare named specialists in config and manage them via
GET/PUT /api/subagent-roles and `ocx agent roles`, instead of stuffing
child prompts into argv. v2 guidance renders the catalog through {{roles}}.
Co-authored-by: Cursor <cursoragent@cursor.com>
Treat slash gpt-* models as routed unless the prefix is a configured
account selector, keep the five-slot roster unique, render only roles
inside the live v2 window, cap {{roles}} to the 700-char budget, and
remove roles atomically on the server so CLI delete cannot clobber a
concurrent save.
Co-authored-by: Cursor <cursoragent@cursor.com>
Write only $CODEX_HOME/agents/ocx-<id>.toml with allowed keys, never model_fallback. User same-name agents win; owned files prune on disable or remove. Unset syncCodexAgentRoles follows the catalog; GET reports the stored tri-state separately from the effective flag so a status echo cannot persist false. Co-authored-by: Cursor <cursoragent@cursor.com>
Give operators a dashboard catalog for named specialists, parent guidance, child instructions, and Codex agent-file sync without echoing the effective flag back as stored false. Co-authored-by: Cursor <cursoragent@cursor.com>
Probe retrieveUserQuota with catalog fallback, skip http Bearer destinations, and surface Cloud Code Assist location blocks before generic 403s. Co-authored-by: Cursor <cursoragent@cursor.com>
Prevent quota probes from following redirects or promoting daily summaries as weekly usage, and interpret explicit percentage fields without converting small percentages into fractions. Co-authored-by: Cursor <cursoragent@cursor.com>
Treat unreadable daily quota JSON as an RPC failure while allowing the optional summary call to fail without discarding the daily window. Co-authored-by: Cursor <cursoragent@cursor.com>
Co-authored-by: Cursor <cursoragent@cursor.com>
Restrict host failover to known Google daily/prod endpoints, require explicit model identifiers for Gemini window parsing, and abort live quota plus catalog probing on 401/403/429 instead of leaking tokens to production peers. Co-authored-by: Cursor <cursoragent@cursor.com>
…eekly on the leaf path Co-authored-by: Cursor <cursoragent@cursor.com>
Send the interleaved-thinking header and preamble replacement, strip trailing Claude prefills, repair orphan tool pairs, and parse unary CCA as SSE with a pre-decode frame cap. Co-authored-by: Cursor <cursoragent@cursor.com>
Keep unary Cloud Code Assist events charged to the translator budget and measure SSE limits per byte-delimited frame so valid frames sharing a transport chunk are accepted. Co-authored-by: Cursor <cursoragent@cursor.com>
Decoded bufferBytes undercounts when TextDecoder holds a pending multibyte sequence, so a 33-byte line split mid-character could pass a 32-byte cap. Cap on the raw incomplete line instead. Co-authored-by: Cursor <cursoragent@cursor.com>
Keep the CCA wire regression aligned with the upstream Claude prefill guard after restacking onto current dev.
Co-authored-by: Cursor <cursoragent@cursor.com>
Track whether stripTrailingClaudePrefill removed a model tail so the continuation nudge is appended after stripping, while histories already ending on user or tool-result turns stay unchanged. Pin distinct SSE vs plain-JSON error expectations in google-hardening and document Claude on Antigravity wire behavior in providers guide. Co-authored-by: Cursor <cursoragent@cursor.com>
…A URLs Co-authored-by: Cursor <cursoragent@cursor.com>
The wire allocator maps a raw tool-call id to a single wire id, so a second complete duplicate pair would serialize as a colliding CCA exchange.
Gate dropping unmatched trailing calls to CCA only so Direct Gemini still emits an in-flight functionCall, while orphan results stay omitted. Co-authored-by: Cursor <cursoragent@cursor.com>
…kend fix: clarify Cursor metadata and session affinity
- Implement trusted Google Jules dispatcher and reconciler workflow (.github/workflows/agent-maintenance.yml) - Add agent maintenance client, state validation, and repair digest (.github/scripts/agent-maintenance.cjs) - Enforce exact-head Cursor Bugbot verification in PR gating (.github/workflows/enforce-pr-target.yml) - Add comprehensive contract & unit tests for maintenance lifecycle (.github/scripts/agent-maintenance.test.cjs) - Add Cursor Bugbot guidelines (.cursor/BUGBOT.md) and fork Dependabot config (.github/dependabot.yml) - Update governance, AGENTS.md, MAINTAINERS.md, and docs/fork/AGENT-MAINTENANCE.md
…uest_target events
feat: hardened Google Jules and Cursor automation control plane
feat: route fork upstream sync and PRs through dev branch
github-actions
Bot
added
the
intake: hygiene-blocked
Contributor
|
Contributor
|
Important Review skippedToo many files! This PR contains 388 files, which is 88 over the limit of 300. To get a review, reduce the PR to 300 files or fewer by splitting it into smaller PRs or changing its base branch. Usage-priced reviews support at most 300 files. ⚙️ Run configurationConfiguration used: Path: .coderabbit.yaml Review profile: ASSERTIVE Plan: Pro Plus Run ID: ⛔ Files ignored due to path filters (3)
📒 Files selected for processing (388)
You can disable this status message by setting the Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out. Comment |
Contributor
⏳ DRAFT
What to do
Review readiness checklist
0/4 boxes ticked. This pull request was already a draft. Its draft status will be preserved after every issue above is resolved. |
Ingwannu
requested changes
Aug 25, 2026
Ingwannu
left a comment
Ingwannu
left a comment
Owner
There was a problem hiding this comment.
This cannot be reviewed or merged in its current form. The PR title describes routed stream diagnostics and xAI catalog classification, but the branch contains roughly 100 commits and a large fork-specific overlay: release/sync automation, repository workflows, Dependabot, installer/release changes, multilingual documentation, Replit gateway work, and many unrelated runtime files. The repository gates correctly fail hygiene and target enforcement on this head. Please close this PR and reopen only the intended change as a fresh branch from current dev, with a narrowly scoped diff and focused regressions. Do not rebase this contaminated branch and try to resolve it in place.
Owner
리뷰 · 우선순위 31 / 80설명: 이 풀의 제목은 라우트 스트림 진단과 엑스아이 카탈로그 분류다. 실제 디프는 개인 포크 더미다. 지금 CURRENT dev HEAD 는 bb89eaf 이다. origin/dev 는 이번 시간에 안 움직였다. 작성자는 yansigit 이다. 드래프트다. 베이스는 표기상 dev 이다. MERGEABLE 이다. 머지 상태는 BLOCKED 다. 라벨은 enhancement 와 intake: hygiene-blocked 다. 변경 391파일, +35546 / -839 이다. GitHub 디프는 300파일 한도를 넘겼다. 파일 목록이 제목과 다르다. .github/workflows 아래 fork-auto-release.yml, fork-upstream-sync.yml, release.yml, ci.yml, enforce-pr-target.yml 이 있다. scripts/release.ts 와 package.json 도 있다. src/fork/register.ts 가 있다. 안티그래비티 쿼터 RPC, 계정 쿨다운, CCA 와이어, 호스트 페일오버, 서브에이전트 롤 카탈로그, GUI 롤 편집기, Replit 게이트웨이, 포크 싱크 자동화, 슈퍼파워 스펙이 한 가지에 실려 있다. 커밋 메시지에 WRONG BRANCH 와 Merge pull request from yansigit 가 보인다. 위생 봇이 unsponsored_surface 로 인증, 워크플로, 릴리스, 의존성 표면을 가리켰다. MAINTAINERS.md 가 보안 리뷰를 요구하는 길이다. types.ts/config.ts 가르기가 진행 중이다. 이 풀은 src/config.ts 와 src/config/process-state.ts 와 레지스트리와 라우팅 커널을 한 번에 만진다. 리베이스는 무효가 된다. 정책은 그런 풀을 닫고 다시 짜라고 한다. 진단 HMAC 과 엑스아이 카탈로그 분류만 원하면 그 두 길을 새 작은 풀로 열어야 한다. 지금 가지는 그 단위가 아니다. 프리뷰 배포도 아니다. 나는 합치지 않는다. 2462 를 메인에 합치지 말라는 기존 규칙과 같은 종류의 위험이다. .github/workflows/fork-upstream-sync.yml - 포크 자동화 워크플로. 이 저장소 릴리스 표면이다 메인테이너의 판단이 필요한 지점
너의 추천 이 댓글은 grok-bot이 작성했습니다 |
11 of 12 tasks
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
3 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
stage: "adapter" | "bridge").declared,emitted,omitted,xai_schema_not_lossless) without leaking schema structures.runTurnsidecar queues andconsumeIterationEvents.connection-reset,rate-limit-429, etc.) through continuation and retry paths.docs-site/src/content/docs/reference/cli/agents.md.Verification
bun test tests/images/loop.test.ts tests/web-search.test.ts tests/bridge.test.ts tests/debug.test.ts tests/openai-chat-hardening.test.ts tests/terminal-continuation-owner-rotation.test.ts tests/core-lab-boundary.test.ts(252 passed, 0 failed)bun run typecheck(strict pass across proxy and integration gateway)bun run privacy:scan(passed, zero secrets or raw logs detected)cd docs-site && bun run build(401 pages rendered)Checklist
Review readiness checklist
This PR stays in draft until every box below is ticked. Tick all four boxes once the requirements are met:
All CI tests are green on my local testing.
I pushed my PR to the latest dev commit.
I resolved all correct Codex and CodeRabbit findings.
My PR is ready for review.