- replace the popover list scroll area with a native overflow container
- keep keyboard navigation behavior while restoring wheel scroll in long dropdowns
- only reuse provider catalogs after /api/cliproxy/catalog has resolved
- avoid passing synthesized static fallback catalogs into preset application
- cover quick-setup and cliproxy add-account flows with regression tests
- let applyDefaultPreset accept a caller-provided provider catalog
- pass cached catalog data from cliproxy and quick-setup flows
- add regression coverage for skipping the extra catalog fetch
- fetch live provider model definitions through /api/cliproxy/catalog
- overlay CCS preset metadata without keeping UI dropdowns as the source of truth
- wire /cliproxy and quick setup to the upstream-backed catalog path
- reshape the page into a management-center style control surface
- add activity and CLIProxy error tabs with denser list/detail ergonomics
- switch filters to practical chip groups and update the page tests
Refs #926
- add roadmap note for the new CCS logging surface
- record logging architecture and codebase ownership
- add logging standards for bounded, redacted runtime logs
Refs #926
- stop the Codex free-plan compatibility guard from rewriting codex.settings.json
- keep saved dashboard selections intact and rely on runtime fallback when needed
- update reconcile coverage to lock the non-mutating behavior in place
- switch the reviewer workflow from glm-5-turbo to glm-5.1
- increase workflow timeout to 20 minutes and max turns to 45
- lock the workflow test to the full reviewer model configuration
Closes#922
Replace local mtime-only ProviderTokenSnapshot type and
listProviderTokenSnapshots/findNewTokenSnapshotForPendingAuth in
cliproxy-auth-routes with shared implementations from token-manager.
Ensures dashboard parity with CLI-side SHA-256 fingerprint detection.
Use extractLikelyOAuthAuthorizationUrl before falling back to naive
regex when detecting auth URLs in stderr for manual callback replay.
Prevents prompting with non-OAuth URLs when stderr emits multiple URLs.
Cache file content in RawTokenCandidate to avoid double-reading token
files (TOCTOU race between metadata extraction and fingerprinting).
Rename stale test description and add fingerprint fields to test
snapshots so they exercise the same comparison path as production.
github-actions[bot]