feat(agent-os): Brain Universe dashboard, WebMCP gateway, Smart Factory demo [paohupbypaoza] - #2988
Closed
paopaonyapi-creator wants to merge 176 commits into
Closed
feat(agent-os): Brain Universe dashboard, WebMCP gateway, Smart Factory demo [paohupbypaoza]#2988paopaonyapi-creator wants to merge 176 commits into
paopaonyapi-creator wants to merge 176 commits into
Conversation
The native /v1/chat/completions passthrough decided service-tier forwarding
with a single provider-level check:
if (provider.chatServiceTier && rawBody.service_tier !== undefined)
That bypassed the FastWire policy layer entirely, and the worst consequence was
not the one A0 recorded. An explicit supportsServiceTier: false — the fail-closed
declaration meaning "this upstream is documented not to accept the field" — was
ignored here, so a caller tier still reached that upstream whenever
chatServiceTier happened to be true. Exact-model false was likewise ignored (the
bug A0 locked), and B1's split between capability-authorized canonical Fast and
CallerTierForward-authorized foreign tiers never reached this surface.
Both Chat surfaces now call one shared gate, so they cannot drift apart by
construction rather than by convention. The passthrough resolves its policy in
chat-native.ts, where the route and config already live, and the key-rotation
rebuild path resolves it too.
What deliberately still differs: the Responses surface normalizes a caller's
"fast" spelling to the provider's canonical wire value, while the passthrough
forwards the caller's exact bytes. That is this builder's documented contract —
caller fields retain their exact wire representation while capability gates stay
centralized — and the difference is now asserted by a test and explained at the
call site, so a future reader does not mistake it for a missed translation.
Known gap, left for its own unit: the passthrough neither runs through the
adapter registry decorator nor calls recordAdapterTier, so it produces no
AttemptTierOutcome and a stripped tier is not yet visible as callerTierDropped.
Building half of that pipeline here would have been worse than naming it.
Full suite: 13332 pass / 10 skip / 2 fail — the pre-existing dev-side
key-login-live-update regression, and one load-sensitive codex-shim timeout that
passes in isolation (69 pass).
Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
Probe retrieveUserQuota with catalog fallback, skip http Bearer destinations, and surface Cloud Code Assist location blocks before generic 403s. Co-authored-by: Cursor <cursoragent@cursor.com>
Prevent quota probes from following redirects or promoting daily summaries as weekly usage, and interpret explicit percentage fields without converting small percentages into fractions. Co-authored-by: Cursor <cursoragent@cursor.com>
Treat unreadable daily quota JSON as an RPC failure while allowing the optional summary call to fail without discarding the daily window. Co-authored-by: Cursor <cursoragent@cursor.com>
Send the interleaved-thinking header and preamble replacement, strip trailing Claude prefills, repair orphan tool pairs, and parse unary CCA as SSE with a pre-decode frame cap. Co-authored-by: Cursor <cursoragent@cursor.com>
Keep unary Cloud Code Assist events charged to the translator budget and measure SSE limits per byte-delimited frame so valid frames sharing a transport chunk are accepted. Co-authored-by: Cursor <cursoragent@cursor.com>
Decoded bufferBytes undercounts when TextDecoder holds a pending multibyte sequence, so a 33-byte line split mid-character could pass a 32-byte cap. Cap on the raw incomplete line instead. Co-authored-by: Cursor <cursoragent@cursor.com>
Keep the CCA wire regression aligned with the upstream Claude prefill guard after restacking onto current dev.
Always-SSE with daily/prod failover, classify peer quota/geoblock frames, and return 400 on ambiguous image transport failure so Codex does not replay a paid POST. Co-authored-by: Cursor <cursoragent@cursor.com>
OAuth bearer streamGenerateContent must not go to a configured http origin; rewrite to the HTTPS daily/prod peer first. Co-authored-by: Cursor <cursoragent@cursor.com>
Co-authored-by: Cursor <cursoragent@cursor.com>
Account cooldown and antigravity-routing coupling belongs on lidge-jun#2069; this PR documents CCA host failover and image behavior only. Co-authored-by: Cursor <cursoragent@cursor.com>
Drive CCA response tails from downstream pulls so open streams do not eagerly buffer unread upstream output. Co-authored-by: Cursor <cursoragent@cursor.com>
Preserve repaired request bodies when CCA failover invokes the peer and lock in transport-failure coverage. Clarify the separate SSE chat and unary image endpoints across provider docs.
Co-authored-by: Cursor <cursoragent@cursor.com>
Co-authored-by: Cursor <cursoragent@cursor.com>
Co-authored-by: Cursor <cursoragent@cursor.com>
When images.bridgeEnabled is on and an xAI login exists, POST /v1/images/{generations,edits} goes to api.x.ai instead of ChatGPT. Routed chat turns keep hosted image_generation visible as image_gen so Grok can call Codex's client tool. The Responses image-bridge loop stays API-key-only and still defers to web search.
…pool-policy docs into paohupbypaoza
…e Agent lidge-jun#2219 into paohupbypaoza
…nto paohupbypaoza
- Add Agent OS runtime: projects, tasks, agents, memory, skills, policies, teams, workflow, gateway, observability, search, ask, reviews, remote nodes - Add Brain Universe page (BrainUniverse.tsx) with 9-tab observatory: Overview, Tools, Policies, Atlas, Universe graph, Approvals, Agent Activity, Sessions, Ask Brain - Add DemoController.tsx for Smart Factory scenario with R3 permit gating - Add WebMCP capability system (registry.ts, capability.ts) with 4-tier risk model - Add Thai (th.ts) locale translation throughout GUI - Add 10 Agent OS backend test suites (62 tests, all passing) - Add 3 GUI test suites: brain-demo, brain-universe-graphs, webmcp-registry - Update management API to route /api/agent-os/* to new handler - Update README.md with Brain Universe architecture overview - Add docs: DEMO-SCRIPT.md, WEBMCP-TOOLS.md, WEBMCP-SECURITY.md, PHASE-15-WEBMCP.md, CHALLENGE-CHECKLIST.md - Add start.cmd / start.ps1 convenience launchers for Windows - Update favicon to PaohupByPaoZa logo - Update maxplus-gpt provider config for /gpt-bomb-ultra/v1 path Closes #paohupbypaoza-brain-universe
paopaonyapi-creator
requested review from
Ingwannu and
lidge-jun
as code owners
August 30, 2026 05:13
Contributor
|
Important Review skippedToo many files! This PR contains 1554 files, which is 1254 over the limit of 300. To get a review, reduce the PR to 300 files or fewer by splitting it into smaller PRs or changing its base branch. Usage-priced reviews support at most 300 files. ⚙️ Run configurationConfiguration used: Path: .coderabbit.yaml Review profile: ASSERTIVE Plan: Pro Plus Run ID: ⛔ Files ignored due to path filters (20)
📒 Files selected for processing (1554)
You can disable this status message by setting the |
github-actions
Bot
added
the
intake: hygiene-blocked
Contributor
|
Contributor
⏳ DRAFT
What to do
Review readiness checklist
0/4 boxes ticked. This pull request was already a draft. Its draft status will be preserved after every issue above is resolved. |
Owner
리뷰 · 우선순위 22 / 80설명 지금 제목은 Brain Universe 대시보드·WebMCP 게이트웨이·Smart Factory 데모다. 파일은 약 195개, 추가만 1만 7천 줄이 넘는다. GitHub 상태는 CONFLICTING 이다. 라벨에 opencodex 현재 방향은 좁은 버그·테스트·카탈로그 노출·릴리즈 준비다. Agent OS 전체 관측 UI와 허가 게이트웨이는 별도 제품 결정이 필요하다. types.ts/config.ts 분할 캠페인과도 크게 겹칠 가능성이 높다. 이런 규모면 리베이스보다 닫고, 정말 필요한 조각만 새 PR로 쪼개는 편이 맞다. 해커톤/데모 가치는 있을 수 있다. 다만 메인 경로/범위 - 195 files / +17868. 단일 리뷰 단위를 넘는다. 메인테이너의 판단이 필요한 지점
너의 추천 이 댓글은 grok-bot이 작성했습니다 |
Owner
|
Thank you for the work and for sharing the Agent OS experiment. I am closing this pull request because it is not a reviewable integration unit for the current The current diff is conflicting and combines roughly 195 changed files / 17.8k added lines: a new Agent OS runtime, a new management and persistence boundary, two large GUI surfaces, dependency changes, locale expansion, demo assets, and many unrelated provider/adapter commits already present on Please keep this work in the experiment branch or a separate project. If there is one component that fits opencodex, open a design issue first and then submit a fresh PR from current |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
13 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
Implements the Brain Universe observatory and WebMCP permit gateway on top of the existing opencodex proxy, as built on the \paohupbypaoza\ branch.
What changed
Backend (\src/agent-os/)
GUI (\gui/src/)
egistry.ts\ + \capability.ts\ with 4-tier risk enforcement
Tests
Docs
Verification
\\�ash
bun install
bun run test # 62 backend + 11 GUI tests pass
bun run typecheck # clean
bun run build:gui # GUI production bundle builds
bun run privacy:scan # no credential leaks
\\
End-to-end demo flow verified via Management API:
Screenshots
Brain Universe and Demo Controller are available at \http://localhost:10100/#brain\ and \http://localhost:10100/#demo\ when the proxy is running.
Checklist
Review readiness checklist
This PR stays in draft until every box below is ticked. Tick all four boxes once the requirements are met:
All CI tests are green on my local testing.
I pushed my PR to the latest dev commit.
I resolved all correct Codex and CodeRabbit findings.
My PR is ready for review.