Sync: a0 vision modalities, security fix, catalog/dashboard polish - #4
Merged
Merged
Conversation
Brings the public tree up to date with recent internal work: - a0's /v1/models now advertises real vision modalities from a single source of truth (store.ResolveModalities), fixing OpenCode's silently wrong vision-support list for several models (migrations 0079/0080). - security: PUT /api/v1/smith/autonomy's escalating path no longer lets a bearer key skip step-up assurance (the same class of gap #37 closed for key management, extended here). - catalog: fixed a genealogy-level icon pointing at the wrong vendor mark. - web: Routing diagram polish (a dedicated color token for operator bypass, an A-Z/Group layout toggle, legend repositioning + pruning, hides disabled offerings/models on the read-only Dashboard copy), and the token activity heatmap (wider window, fills its card, a true cross-fading auto-cycle between All/Local/External).
jsaigou
added a commit
that referenced
this pull request
Sep 16, 2026
…-updates Sync: a0 vision modalities, security fix, catalog/dashboard polish
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
/v1/modelsnow advertises real vision modalities from a single source of truth (store.ResolveModalities), fixing several models' silently-wrong vision-support list (migrations 0079/0080).PUT /api/v1/smith/autonomy's escalating path no longer lets a bearer key skip step-up assurance.web/package-lock.jsondependency bump (browserslist/baseline-browser-mapping) — should also clear the Dependabot alerts flagged on this repo's default branch.Test plan
go build/go vet/go testclean on the touched packages (source repo)tsc -b --force/oxlint/vite buildclean (source repo)