Repository navigation
feat(desktop): sync v2 provider models live from Den - #6111
Merged
Merged
Conversation
Contributor
|
Preview deployment for your docs. Learn more about Mintlify Previews.
💡 Tip: Enable Automations to automatically generate PRs for you. |
Contributor
|
The latest updates on your projects. Learn more about Vercel for GitHub.
3 Skipped Deployments
|
benjaminshafii
temporarily deployed
to
pr-internal-specs
October 17, 2026 04:26 — with 
GitHub Actions
Inactive
GitHub Actions
Inactive
Contributor
OpenWork evidence
Run details · Open the preview to inspect evidence and sandbox options. |
Contributor
Warden: not approvedSecurity review found 1 high severity finding. Fix it and push; Warden reviews again automatically. If it is a false positive, a maintainer can approve by hand. Security findings (1 finding) high: Untrusted project plugins can obtain the live inference key in `apps/server/src/engine-v2-preview.ts:898`Do not expose the provider-session capability to an engine process that also runs project-controlled plugins; a malicious project plugin can retrieve the inference key and make provider requests as the signed-in user. Reviewed |
benjaminshafii
temporarily deployed
to
pr-internal-specs
October 17, 2026 05:27 — with
GitHub Actions
Inactive
GitHub Actions
Inactive
benjaminshafii
temporarily deployed
to
pr-internal-specs
October 17, 2026 06:05 — with
GitHub Actions
Inactive
GitHub Actions
Inactive
![github-advanced-security[bot]](https://avatars.githubusercontent.com/in/57789?s=60&v=4){kind=small}
benjaminshafii
temporarily deployed
to
pr-internal-specs
October 17, 2026 06:45 — with
GitHub Actions
Inactive
GitHub Actions
Inactive
This branch was successfully deployed
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
What is this about?
Organization model changes reach an already-open desktop model picker without refreshing or restarting a chat.
What problem does it solve?
Models could remain stale for minutes while multiple components tried to synchronize the same provider state.
What was the situation before?
The picker kept showing old models after an administrator changed the organization's available models.
How is this implemented?
liveProviderSync: cloud and self-hosted, default off, safe to kill. The next engine start freshly resolves the rollout and restores legacy behavior; killing it does not interrupt requests. V1 retains legacy sync.provider.updated/model.updated, notcatalog.updated. Live-only invalidation consumes these events. Entire Gateway config rows are removed; policy and quota hooks still apply. Diagnosis, scenario limits and verification:docs/live-provider-sync-verification.md.What else changed?
CI provisions verified engine binaries and Bun before tests rather than skipping required runtime coverage.
Release note
With live model updates enabled, organization model changes appear automatically in the desktop picker.
Evidence
evals/proofs/live-provider-sync.proof.test.ts— before: two assigned sibling models; after: three independent cold organizations exercise lifecycle changes, scoped member/team grants and bursts in the same open picker, checking exact identities, presence and absence.Design: P5, P10, P11, S5.