Phase 2.6.Q — models.dev as the model-metadata source (ADR-0071) + DB-backed catalog (ADR-0072)#76

Open

cemililik wants to merge 64 commits into

mainfrom

Commits on Jul 13, 2026

docs(roadmap): 2.6.C merged (PR #75) — and file the e2e/real-history.db coupling it exposed

cemililik
and
claude
committed
docs(adr): ADR-0071 — models.dev becomes the model-metadata source; the hand-typed registry is retired

cemililik
and
claude
committed
docs(adr): ADR-0071 §10 — the section I dropped in the rewrite, incl. the max_completion_tokens rule

cemililik
and
claude
committed
feat(llm): the generated model catalog — 90 models, priced offline, with the reasoning control per MODEL

cemililik
and
claude
committed
style: prettier-format package.json after the sync:models script addition

cemililik
and
claude
committed
fix(llm): fold the Step-1 review — both money guards were blind, and an embedding was on its way to the picker

cemililik
and
claude
committed
feat(llm): the effort bridge — the accepted tiers are COMPUTED from the catalog, never copied

cemililik
and
claude
committed
fix(llm): the reasoning field is chosen PER MODEL — the live bug, in all four adapters

cemililik
and
claude
committed
fix(llm): the adapters asked whether an effort axis EXISTED, not whether the tier was IN it

cemililik
and
claude
committed
feat(core,cli): the effort gate and the picker now ask the MODEL which tiers it takes

cemililik
and
claude
committed
fix(llm): the acceptance set described ONE axis of a model that publishes two

cemililik
and
claude
committed
fix(cli,core): the CLI had FOUR answers to "can this model take an effort tier" — now it has one

cemililik
and
claude
committed
fix(cli,llm): the withheld-tier notice was wired at TWO of the nine places that build a session

cemililik
and
claude
committed
fix(llm): the output cap had no ceiling to check against, and the field name was wrong on half the population

cemililik
and
claude
committed
fix(llm): renaming the cap field stopped it shadowing the escape hatch — so BOTH went out

cemililik
and
claude
committed
fix(llm,core,cli): the estimate clamped a gateway it must not — under-authorizing real spend

cemililik
and
claude
committed
feat(llm,cli)!: retire the hand-typed price table — the catalog is the source, and the USER outranks it

cemililik
and
claude
committed
fix(llm,cli): the swap shipped three of its own safety properties broken — all of them money

cemililik
and
claude
committed
fix(cli,db,llm): a partial override was not partial, and I told the user to run a command I never wrote

cemililik
and
claude
committed
feat(cli,llm,shared): models refresh gets its second axis — and it stays default-OFF

cemililik
and
claude
committed
fix(llm,cli): the refresh "floor" was `if (true)` — a downgrade recorded $14.50 as $0.00

cemililik
and
claude
committed
fix(cli): the refresh count could exceed what installed, and the byte cap measured too late

cemililik
and
claude
committed
feat(core,cli,shared): an unpriced model is said out loud, and strict_cost_cap refuses it

cemililik
and
claude
committed
fix(cli): the unpriced notice was dropped on the in-Home chat and two other surfaces

cemililik
and
claude
committed
fix(core,cli): WorkflowEngine took onUnpriced + resolveEndpoint and dropped them on the floor

cemililik
and
claude
committed
ci(llm): the two ADR-0071 §9 guards — a weekly price-change check, a nightly effort probe

cemililik
and
claude
committed
fix(llm,ci): the Gemini effort probe was a tautology — on the one provider the bug came from

cemililik
and
claude
committed
fix(llm,repo): the gate meant to stop a tautological probe did not check for one

cemililik
and
claude
committed
fix: fold the PR #76 review — CI unblock, real bugs, and Sonar/complexity refactors

cemililik
and
claude
committed
test(cli): de-flake the reseat-carry O(n) perf guard (min-of-21, threshold 13)

cemililik
and
claude
committed
test(cli): make the O(n) wrap SHAPE ratio local-only; consolidate a duplicate import

cemililik
and
claude
committed
style: prettier --write the repo (format:check drift); test(cli): perf-guard env override

cemililik
and
claude
committed
fix(cli): persist the picked model's provider so a chat over an un-inferrable id starts

cemililik
and
claude
committed
fix(cli): couple default_provider to default_model's config layer (Bug-3 review fold)

cemililik
and
claude
committed
fix(llm): rescue an alias↔dated-pin sibling from a wrong not-on-key dim

cemililik
and
claude
committed
test(llm): anchor Bug-2's anthropic-only + fabrication-guard scoping with negative tests

cemililik
and
claude
committed
feat(cli): present reasoning effort as "one row per distinct outcome"

cemililik
and
claude
committed
fix(cli): close the global-boundary coupling gap; normalize the provider-inference lookup

cemililik
and
claude
committed
fix(cli): fold the Bug-1 review — project the picker highlight/✓/labels onto surviving rows

cemililik
and
claude
committed
fix(ci,repo): build @relavium/shared before the model-catalog guards so they actually run (review H1)

cemililik
and
claude
committed
fix(core,llm,cli): key the pre-egress endpoint on the routing provider, not the model catalog (review M2)

cemililik
and
claude
committed
fix(db): reset the user pricing columns on clearUserPricing so a re-price cannot resurrect them (review M3)

cemililik
and
claude
committed
fix(cli): couple the in-Home default model/provider and buffer pre-store reseat notices (review M5 + bot)

cemililik
and
claude
committed

Commits on Jul 14, 2026

Commits on Jul 15, 2026

Commits on Jul 16, 2026

fix(llm): self-heal a provider param-rejection instead of hard-failing `validation`

cemililik
and
claude
committed

Commits on Jul 19, 2026

fix(llm): harden the param-rejection self-heal (concurrency, endpoint scope, escape hatch)

cemililik
and
claude
committed