Integrate dev → main: inference routing (upstream router + remote chat) + OpenAPI describability + queued API work#8

Merged

Snider merged 38 commits into

mainfrom

Jun 7, 2026

Commits on May 31, 2026

feat(api): opt-in strict bind — reject non-loopback without explicit public+bearer

Snider
and
Hephaestus
committed
merge(api): opt-in strict bind + bearer-on-public (RFC.serve.md S2, Mantis #1807)
Snider
committed
chore(deps): bump core-family externals — core/go v0.10.3, retire stale v0.8 pins
Snider
committed
refactor(api): Sonar sweep — dedup string literals + bundle long param lists
Snider
committed
feat(api/php): webhooks, API-key hardening, MCP API + OpenAPI docs
Snider
committed
chore(api): track Sonar-sweep plan (GOAL.md) + openapi-generator config
Snider
committed

Commits on Jun 6, 2026