openllms v0.2.0

Changes

v0.2.0: CLI self-update, per-device login keys, provider-paced 429 cooldown, gateway metrics

• feat: llms update updates the CLI in place from the gateway (/dist, SHA-256 checked, atomic rename) and warns when another llms comes first on PATH
• feat: install.sh installs where the llms on PATH lives and only on a matching SHA256SUMS entry
• feat: llms login on a new device gets a key of its own (cli:<host>); keys on other devices are never revoked
• feat: 429 cooldown follows the provider's wait (Retry-After, rate-limit reset headers, spend cap, Codex resets_at), else SDK-style back-off with jitter
• feat: Prometheus metrics on :8082 — upstream calls in flight and oldest call age per provider
• fix: upstream LLM client has no total timeout, so long streams are no longer cut at 120 s
• fix: Valkey client timeouts and back-off follow the official client defaults
• chore: Go module updates (pgx 5.11, migrate 4.20, cobra 1.10, sqlite 1.60) and GitHub Actions bumps
• ci: tagged releases with SHA256SUMS and build provenance; secret scan of the full history before each release

Route Anthropic Messages to Claude seats only

• fix: Anthropic-native /v1/messages is routed to Claude seats only (a session pinned to another vendor's seat no longer gets a 404); a route without one answers 400 with a hint
• fix: the parallel strategy's sequential fallback keeps the request's account filter (images, messages)

Go 1.27, dependency security updates, optional Valkey

• feat: optional VALKEY_URL shares the per-key rate limit and session affinity across gateway replicas (process-local fallback)
• security: Go 1.27.2; pgx v5.9.2, chi v5.3.2, x/text v0.42.0 (govulncheck clean)
• docs: Go 1.27 in the README

OAuth re-link fixes and local Postgres docs

• feat: Claude OAuth accounts send the minimal Claude Code request signals again; API keys linked as OAuth are sent as x-api-key
• fix: a Codex refresh token rejected with 401 marks the account for re-link instead of retrying
• fix: usage polling skips accounts waiting for re-link and API-key credentials
• docs: local Postgres for development (make dev-db)
• chore: gofmt

Module path github.com/goodtek-xyz/openllms

• chore: Go module path is now github.com/goodtek-xyz/openllms (matches the repository); update imports from github.com/goodtekxyz/openllms

Health endpoints, retries and re-auth handling

• feat: /livez and /readyz with listen-first start-up; graceful shutdown on SIGTERM
• feat: bounded retries with jitter for the database and the secret store
• feat: accounts that need re-authentication leave routing and notify (email, Discord)
• fix: start on a database schema newer than the binary
• fix: data races in engine defaults and OAuth refresh gates
• chore: local Postgres for development (deploy/dev/compose.yaml, make dev-db)
• chore: links point to github.com/goodtek-xyz; internal references removed from comments

Add CLI version check and update notice

• feat: CLI update notice: warn when gateway dist has a newer llms build
• feat: Skip route seats that cannot serve any compatible model
• chore: self-host defaults, export cleanup

sync from goodtekxyz/llms @ 0366cfb

Verify

shasum -a 256 -c SHA256SUMS --ignore-missing
gh attestation verify llms_<os>_<arch> --repo goodtek-xyz/openllms