devlog: owner backlog and bug-PR closeout unit (260825)

[lidge-jun]

Summary

Planning record for the backlog-closeout loop. Documentation only — no runtime code.

000 classifies all 31 backlog items (15 maintainer issues + 16 bug PRs) from six parallel
read-only investigation lanes, each verdict grounded in a file:line check rather than a
plausibility read. 001 records an independent plan audit that returned fail with five
blocking findings, and the resolution of each — including the one that mattered: dev was
actually red, from a semantic conflict between #2515 and #2550 that neither PR's own suite
could see.

010-090 are the per-phase implementation notes; 100 records what this cycle actually
landed.

Verification

Docs only; no code paths touched. privacy:scan reads devlog/, and this unit contains no
credentials, tokens, or account identifiers — the pre-disclosure auth analysis that started
in 030/050 was moved to gitignored scratch per AGENTS.md §"Security working notes",
leaving only public issue/PR pointers behind.

Checklist

• Targets dev
• Based on the current dev head
• No security pre-disclosure material in the tracked tree
• No secrets or account identifiers

Summary by CodeRabbit

• Documentation
  • Added research and audit records covering maintainer issues, community bug reports, verification methods, risks, ownership, and sequencing.
  • Documented planned fixes for provider quota handling, model catalogs, OAuth failover, CLI and platform behavior, GUI catalog controls, slug matching, and architecture concerns.
  • Recorded execution results for Cursor catalog availability, minimal effort support, -thinking model variants, quota rendering, account quota options, and registry fallback behavior.
  • Added regression-testing, security-review, and acceptance criteria for upcoming work.

[github-actions]

✅ Deterministic PR hygiene checks passed.

[coderabbitai]

Caution

Review failed

The pull request is closed.

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Path: .coderabbit.yaml

Review profile: ASSERTIVE

Plan: Pro Plus

Run ID: 5c89f34b-cce5-46da-99be-62481cdcbe2c

📥 Commits

Reviewing files that changed from the base of the PR and between 11c3f7e and aabf323.

📒 Files selected for processing (12)

• devlog/_plan/260825_owner_backlog_and_bugpr_closeout/000_research_snapshot.md
• devlog/_plan/260825_owner_backlog_and_bugpr_closeout/001_audit_response.md
• devlog/_plan/260825_owner_backlog_and_bugpr_closeout/010_wp2_merge_train_remainder.md
• devlog/_plan/260825_owner_backlog_and_bugpr_closeout/020_wp4_google_lane.md
• devlog/_plan/260825_owner_backlog_and_bugpr_closeout/030_wp5_hygiene_and_drafts.md
• devlog/_plan/260825_owner_backlog_and_bugpr_closeout/040_wp6_cursor_catalog.md
• devlog/_plan/260825_owner_backlog_and_bugpr_closeout/050_wp7_oauth_failover.md
• devlog/_plan/260825_owner_backlog_and_bugpr_closeout/060_wp8_wp9_cli_and_platform.md
• devlog/_plan/260825_owner_backlog_and_bugpr_closeout/070_wp10_wp11_slug_and_exec.md
• devlog/_plan/260825_owner_backlog_and_bugpr_closeout/080_wp12_catalog_ux.md
• devlog/_plan/260825_owner_backlog_and_bugpr_closeout/090_wp13_architecture.md
• devlog/_plan/260825_owner_backlog_and_bugpr_closeout/100_wp6_wp8_execution.md

---

📝 Walkthrough

Walkthrough

This PR adds planning and execution records for maintainer backlog closeout. The documents cover research, audit findings, provider and platform fixes, Cursor catalog work, CLI behavior, investigations, and unresolved architecture items.

Changes

Owner backlog and bug-PR closeout

Layer / File(s)	Summary
Research and audit disposition devlog/_plan/260825_owner_backlog_and_bugpr_closeout/000_research_snapshot.md, 001_audit_response.md, 030_wp5_hygiene_and_drafts.md	Adds the research snapshot, audit response, backlog gate classifications, security-material handling, correctness blockers, remediation actions, and verification requirements.
Provider and platform backlog lanes devlog/_plan/260825_owner_backlog_and_bugpr_closeout/010_wp2_merge_train_remainder.md, 020_wp4_google_lane.md, 050_wp7_oauth_failover.md, 060_wp8_wp9_cli_and_platform.md	Documents merge-train follow-up, Google adapter corrections, OAuth 429 failover acceptance requirements, quota commands, Fast-tier classification, and Windows restart probing behavior.
Catalog and model behavior devlog/_plan/260825_owner_backlog_and_bugpr_closeout/040_wp6_cursor_catalog.md, 100_wp6_wp8_execution.md, 080_wp12_catalog_ux.md, 070_wp10_wp11_slug_and_exec.md	Records Cursor catalog measurements, model availability updates, catalog UX requirements, slug-equivalence behavior, and execution evidence for catalog and quota work.
Command investigation and architecture backlog devlog/_plan/260825_owner_backlog_and_bugpr_closeout/070_wp10_wp11_slug_and_exec.md, 090_wp13_architecture.md	Closes the exec_command investigation and documents unresolved configuration provenance, Codex home adoption, service-manager acceptance coverage, and bounded multi-session tool recall.

Estimated code review effort: 2 (Simple) | ~10 minutes

Suggested reviewers: ingwannu

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch codex/backlog-devlog

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[chatgpt-codex-connector]

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: aabf323c56

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

[chatgpt-codex-connector]

Remove the unshipped OAuth design from tracked devlog

Because #2568 is explicitly still unimplemented, this section continues to publish pre-disclosure OAuth control-flow and patch requirements—including the affected call sites, bounded rotation, and compatibility constraints—even though 001_audit_response.md claims that design was moved to scratch. Retain only the already-public issue pointer here and move these implementation details to .tmp/ until the fix ships.

AGENTS.md reference: AGENTS.md:L95-L100

Useful? React with 👍 / 👎.