api-proxy: inject X-Initiator: agent default on all Copilot-bound requests to prevent billing inflation#2571

Merged

lpcox merged 10 commits into

mainfrom

copilot/fix-billing-header-injection

May 5, 2026

Commits on May 5, 2026

Initial plan
Copilot
authored
inject X-Initiator: agent default on Copilot requests to fix billing

Copilot
and
lpcox
authored
fix X-Initiator injection to use targetHost so OpenCode→Copilot path is covered

Copilot
and
lpcox
authored
Potential fix for pull request finding 'CodeQL / Incomplete URL substring sanitization'

lpcox
and
github-advanced-security[bot]
authored
api-proxy: log billing/quota response headers and X-Initiator sent

lpcox
and
Copilot
committed
schemas: add x_initiator and billing fields to token-usage schema

lpcox
and
Copilot
committed
fix(ci): increase one-shot-token test timeouts for Docker build

lpcox
and
Copilot
committed
fix(ci): make audit artifacts world-readable to prevent EACCES in gh-aw post-run

lpcox
and
Copilot
committed
fix(ci): increase smoke workflow timeouts from 5 to 15 minutes

lpcox
and
Copilot
committed
chore: upgrade gh-aw to v0.71.4 and recompile all workflows

lpcox
and
Copilot
committed