Fix open security & reliability backlog (#38–#47) - #52

Open

OnlyTerp wants to merge 10 commits into

mainfrom

fix/security-reliability-backlog

Commits on Jun 22, 2026

fix(settings): scope Cursor API key fallback to Cursor-target models (#45)

test
and
devin-ai-integration[bot]
committed
70162c1
fix(cli): pin ASAR packer version for patch-app (supply-chain) (#42)

test
and
devin-ai-integration[bot]
committed
01ded4d
fix(server): make web-search interception async to fix loop deadlock (#39)

test
and
devin-ai-integration[bot]
committed
4586858
fix(router): per-instance LRU cache with switch invalidation (#44)

test
and
devin-ai-integration[bot]
committed
65241e1
fix(server): add security headers to picker page (#43)

test
and
devin-ai-integration[bot]
committed
d89a1a2
fix(server): drop shell=True PATH-search fallback in Codex restart (#41)

test
and
devin-ai-integration[bot]
committed
ea6b0ed
fix(server): finite timeout for non-streaming upstream calls (#40)

test
and
devin-ai-integration[bot]
committed
c039216
fix(server): require picker token for /api/models (#38)

test
and
devin-ai-integration[bot]
committed
805cd15
fix(server): gate debug request dump behind flag with private perms (#46)

test
and
devin-ai-integration[bot]
committed
9439eac
ci: add lint/type-check/coverage gates + opencode_go tests (#47)

test
and
devin-ai-integration[bot]
committed
0e02c8d