chore: align bridge with CommandCode 0.26.7

yelixir-dev · yelixir-dev · commit 93a5e7a8b60a · 2026-05-18T09:17:48.000+09:00
diff --git a/.env.example b/.env.example
@@ -15,7 +15,7 @@ COMMANDCODE_API_BASE=https://api.commandcode.ai
 COMMANDCODE_DEFAULT_MODEL=deepseek/deepseek-v4-pro
 COMMANDCODE_ALLOWED_MODELS=deepseek/deepseek-v4-pro,deepseek/deepseek-v4-flash
 COMMANDCODE_ALLOW_UNKNOWN_MODELS=false
-COMMANDCODE_CLI_VERSION=0.25.12
+COMMANDCODE_CLI_VERSION=0.26.7
 COMMANDCODE_TIMEOUT_MS=300000
 COMMANDCODE_EMPTY_VISIBLE_RESPONSE_POLICY=error_on_length
 
diff --git a/README.ko.md b/README.ko.md
@@ -30,10 +30,19 @@ CommandCode Bridge는 CommandCode 계정을 OpenAI-compatible HTTP API로 노출
 
 ## 버전
 
-현재 bridge version: **v0.1.0**.
+현재 bridge version: **v0.26.7**.
 
 버전은 `/health` 응답과 웹 대시보드 오른쪽 위에 표시됩니다.
 
+### v0.26.7 CommandCode 호환성 업데이트
+
+이번 bridge release는 공식 `command-code` npm package `0.26.7`에 맞췄습니다.
+
+- 기본 upstream `x-command-code-version` header는 `COMMANDCODE_CLI_VERSION`으로 덮어쓰지 않는 한 `0.26.7`을 보냅니다.
+- bridge package/runtime version도 `0.26.7`이라 `/health`, dashboard, npm metadata가 대상 CommandCode CLI version과 일치합니다.
+- `command-code@0.26.7` bundle을 직접 확인한 결과 bridge 핵심 API path(`/alpha/generate`, `/alpha/whoami`, `/alpha/billing/credits`, `/alpha/billing/subscriptions`, `/alpha/usage/summary`)는 기존 bridge 경로와 호환됩니다.
+- model catalog를 `0.26.7` CLI bundle 기준으로 갱신했습니다. 기존 enabled default는 보수적으로 유지하고, Qwen 3.6 Max Preview, MiniMax M2.5, Kimi K2.5, GLM-5, GPT 5.4/5.3 Codex/5.4 Mini, 구 Claude variant 등 추가 발견 모델은 operator가 켤 때까지 disabled 상태로 포함했습니다.
+
 ## 구조
 
 ```text
@@ -266,7 +275,7 @@ http://<host-or-tailnet-ip>:9992/dashboard
 
 - **Header**
   - bridge online/offline 상태 표시.
-  - `v0.1.0` 같은 bridge version 표시.
+  - `v0.26.7` 같은 bridge version 표시.
 - **Server Bind**
   - local-only면 `127.0.0.1`.
   - LAN/Tailscale/VPN/reverse proxy 뒤에서만 `0.0.0.0`.
@@ -478,7 +487,7 @@ x-api-key: <BRIDGE_API_KEY>
 | `COMMANDCODE_DEFAULT_MODEL`                  | `deepseek/deepseek-v4-pro`   | `default`가 사용할 model.                                                                                  |
 | `COMMANDCODE_ALLOWED_MODELS`                 | Pro + Flash/catalog defaults | comma-separated allowlist.                                                                                 |
 | `COMMANDCODE_ALLOW_UNKNOWN_MODELS`           | `false`                      | 임의 model ID를 upstream으로 통과. 운영 비권장.                                                            |
-| `COMMANDCODE_CLI_VERSION`                    | `0.25.12`                    | upstream으로 보내는 version header.                                                                        |
+| `COMMANDCODE_CLI_VERSION`                    | `0.26.7`                     | upstream으로 보내는 version header.                                                                        |
 | `COMMANDCODE_TIMEOUT_MS`                     | `300000`                     | upstream request timeout.                                                                                  |
 | `COMMANDCODE_EMPTY_VISIBLE_RESPONSE_POLICY`  | `error_on_length`            | empty visible `finish_reason: length`를 fail-closed. `allow`는 legacy blank success 유지.                  |
 | `REQUEST_BODY_LIMIT_BYTES`                   | `1048576`                    | Fastify body limit.                                                                                        |
diff --git a/README.md b/README.md
@@ -30,10 +30,19 @@ CommandCode Bridge is a trusted-environment HTTP bridge that exposes a small Ope
 
 ## Version
 
-Current bridge version: **v0.1.0**.
+Current bridge version: **v0.26.7**.
 
 The version is also returned from `/health` and shown in the top-right of the web dashboard.
 
+### v0.26.7 CommandCode compatibility update
+
+This bridge release is aligned with the official `command-code` npm package `0.26.7`:
+
+- The default upstream `x-command-code-version` header now advertises `0.26.7` unless `COMMANDCODE_CLI_VERSION` overrides it.
+- The bridge package/runtime version is also `0.26.7` so `/health`, the dashboard, and the npm metadata match the CommandCode CLI version being targeted.
+- Direct inspection of the `command-code@0.26.7` bundle confirmed that the bridge-critical API paths remain compatible: `/alpha/generate`, `/alpha/whoami`, `/alpha/billing/credits`, `/alpha/billing/subscriptions`, and `/alpha/usage/summary`.
+- The model catalog was refreshed from the `0.26.7` CLI bundle. Existing enabled defaults stay conservative, while additional discovered entries such as Qwen 3.6 Max Preview, MiniMax M2.5, Kimi K2.5, GLM-5, GPT 5.4/5.3 Codex/5.4 Mini, and older Claude variants are present but disabled by default until an operator enables them.
+
 ## Architecture
 
 ```text
@@ -266,7 +275,7 @@ The dashboard is intentionally mobile-first. It is useful from a phone on the sa
 
 - **Header**
   - Shows bridge online/offline state.
-  - Shows bridge version, for example `v0.1.0`.
+  - Shows bridge version, for example `v0.26.7`.
 - **Server Bind**
   - Choose `127.0.0.1` for local-only use.
   - Choose `0.0.0.0` only for LAN/Tailscale/VPN/reverse-proxy use.
@@ -478,7 +487,7 @@ x-api-key: <BRIDGE_API_KEY>
 | `COMMANDCODE_DEFAULT_MODEL`                  | `deepseek/deepseek-v4-pro`   | Model used for `default`.                                                                                                    |
 | `COMMANDCODE_ALLOWED_MODELS`                 | Pro + Flash/catalog defaults | Comma-separated allowlist.                                                                                                   |
 | `COMMANDCODE_ALLOW_UNKNOWN_MODELS`           | `false`                      | Pass arbitrary model IDs upstream. Not recommended.                                                                          |
-| `COMMANDCODE_CLI_VERSION`                    | `0.25.12`                    | Version header sent upstream.                                                                                                |
+| `COMMANDCODE_CLI_VERSION`                    | `0.26.7`                     | Version header sent upstream.                                                                                                |
 | `COMMANDCODE_TIMEOUT_MS`                     | `300000`                     | Upstream request timeout.                                                                                                    |
 | `COMMANDCODE_EMPTY_VISIBLE_RESPONSE_POLICY`  | `error_on_length`            | `error_on_length` fails closed on empty visible `finish_reason: length`; `allow` preserves legacy blank success behavior.    |
 | `REQUEST_BODY_LIMIT_BYTES`                   | `1048576`                    | Fastify body limit.                                                                                                          |
diff --git a/docs/DEPLOYMENT.ko.md b/docs/DEPLOYMENT.ko.md
@@ -398,7 +398,7 @@ npm run smoke
 | `COMMANDCODE_DEFAULT_MODEL`        | `deepseek/deepseek-v4-pro`   | `model: "default"` 요청이 실제로 사용할 upstream model입니다.                                                            |
 | `COMMANDCODE_ALLOWED_MODELS`       | Pro + Flash                  | 허용할 model ID 목록입니다. 이 목록 밖 요청은 unknown model 허용 옵션을 켜지 않는 한 거부됩니다.                         |
 | `COMMANDCODE_ALLOW_UNKNOWN_MODELS` | `false`                      | 임의 model ID를 upstream으로 통과시킵니다. 운영에서는 권장하지 않습니다.                                                 |
-| `COMMANDCODE_CLI_VERSION`          | `0.25.12`                    | 테스트된 CommandCode CLI 동작과 맞추기 위해 upstream에 보내는 version header입니다.                                      |
+| `COMMANDCODE_CLI_VERSION`          | `0.26.7`                     | 테스트된 CommandCode CLI 동작과 맞추기 위해 upstream에 보내는 version header입니다.                                      |
 | `COMMANDCODE_TIMEOUT_MS`           | `300000`                     | upstream generation timeout입니다.                                                                                       |
 
 Credential JSON 파일 예시:
diff --git a/docs/DEPLOYMENT.md b/docs/DEPLOYMENT.md
@@ -399,7 +399,7 @@ npm run smoke
 | `COMMANDCODE_DEFAULT_MODEL`        | `deepseek/deepseek-v4-pro`   | Upstream model used by `model: "default"`.                                                                               |
 | `COMMANDCODE_ALLOWED_MODELS`       | Pro + Flash                  | Comma-separated allowlist. Requests outside this list are rejected unless unknown models are allowed.                    |
 | `COMMANDCODE_ALLOW_UNKNOWN_MODELS` | `false`                      | Allows arbitrary model IDs to pass through. Not recommended for production.                                              |
-| `COMMANDCODE_CLI_VERSION`          | `0.25.12`                    | Version header sent upstream to match the tested CommandCode CLI behavior.                                               |
+| `COMMANDCODE_CLI_VERSION`          | `0.26.7`                     | Version header sent upstream to match the tested CommandCode CLI behavior.                                               |
 | `COMMANDCODE_TIMEOUT_MS`           | `300000`                     | Upstream generation timeout.                                                                                             |
 
 Credential file shape:
diff --git a/docs/KNOW_HOW.md b/docs/KNOW_HOW.md
@@ -54,7 +54,7 @@ Smoke-test modes:
 
 ## Billing and Multi-Key Routing
 
-CommandCode CLI 0.25.12 `/usage` uses these account endpoints with the same bearer token:
+CommandCode CLI 0.26.7 `/usage` uses these account endpoints with the same bearer token:
 
 - `GET /alpha/whoami` to discover the organization id.
 - `GET /alpha/billing/credits?orgId=...`
diff --git a/docs/PRD.md b/docs/PRD.md
@@ -54,7 +54,7 @@ Expose the local CommandCode account's DeepSeek V4 Pro route as a clean, OpenAI-
 
 ## Source Evidence
 
-- Local CommandCode 0.25.12 bundle calls `https://api.commandcode.ai/alpha/generate` and billing/usage endpoints under `/alpha/billing/*` and `/alpha/usage/summary`.
+- Local CommandCode 0.26.7 bundle calls `https://api.commandcode.ai/alpha/generate` and billing/usage endpoints under `/alpha/billing/*` and `/alpha/usage/summary`.
 - Direct Node fetch to `/alpha/whoami` and `/alpha/generate` succeeded.
 - `params.stream=false` is rejected by CommandCode; bridge must always call upstream streaming.
 - Community `pi-commandcode-provider` independently uses the same API path.
diff --git a/docs/PROCESS_LOG.md b/docs/PROCESS_LOG.md
@@ -21,7 +21,7 @@
 
 ## 2026-05-12
 
-- Updated default CommandCode CLI header to `0.25.12`.
+- Updated default CommandCode CLI header to `0.26.7`.
 - Added multi-key upstream credential loading: `COMMANDCODE_CREDENTIALS_FILE`, `COMMANDCODE_CREDENTIALS`, `COMMANDCODE_API_KEYS`, and legacy `COMMANDCODE_API_KEY` fallback.
 - Added `round_robin` and `depletion_aware` routing. Depletion-aware routing caches `/alpha/billing/credits`, `/alpha/billing/subscriptions`, and `/alpha/usage/summary` snapshots per credential and routes expiring credits first.
 - Added credential health rules and failover: 401 disables, 402 drains/cools down, 429/5xx/timeouts cooldown, and pre-visible-output stream errors can retry on another credential.
diff --git a/install.sh b/install.sh
@@ -382,7 +382,7 @@ fi
   write_env_line COMMANDCODE_DEFAULT_MODEL deepseek/deepseek-v4-pro
   write_env_line COMMANDCODE_ALLOWED_MODELS "$DEFAULT_ALLOWED_MODELS"
   write_env_line COMMANDCODE_ALLOW_UNKNOWN_MODELS false
-  write_env_line COMMANDCODE_CLI_VERSION 0.25.12
+  write_env_line COMMANDCODE_CLI_VERSION 0.26.7
   write_env_line COMMANDCODE_TIMEOUT_MS 300000
   write_env_line COMMANDCODE_EMPTY_VISIBLE_RESPONSE_POLICY error_on_length
   write_env_line COMMANDCODE_BALANCE_ALERT_ENABLED false
diff --git a/package-lock.json b/package-lock.json
diff --git a/package.json b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "commandcode-bridge",
-  "version": "0.1.0",
+  "version": "0.26.7",
   "description": "OpenAI-compatible HTTP bridge for CommandCode's DeepSeek V4 Pro API path.",
   "type": "module",
   "license": "MIT",
diff --git a/release/env.production.example b/release/env.production.example
@@ -15,7 +15,7 @@ COMMANDCODE_CREDENTIAL_COOLDOWN_MS=60000
 COMMANDCODE_DEFAULT_MODEL=deepseek/deepseek-v4-pro
 COMMANDCODE_ALLOWED_MODELS=deepseek/deepseek-v4-pro,deepseek/deepseek-v4-flash
 COMMANDCODE_ALLOW_UNKNOWN_MODELS=false
-COMMANDCODE_CLI_VERSION=0.25.12
+COMMANDCODE_CLI_VERSION=0.26.7
 COMMANDCODE_TIMEOUT_MS=300000
 COMMANDCODE_EMPTY_VISIBLE_RESPONSE_POLICY=error_on_length
 # Balance alerts are opt-in and disabled by default.
diff --git a/src/config.ts b/src/config.ts
@@ -174,7 +174,7 @@ export function loadBridgeConfig(options: LoadBridgeConfigOptions = {}): BridgeC
     host: serverFromFile.host,
     port: serverFromFile.port,
     apiBase: (env.COMMANDCODE_API_BASE?.trim() || "https://api.commandcode.ai").replace(/\/+$/, ""),
-    cliVersion: env.COMMANDCODE_CLI_VERSION?.trim() || "0.25.12",
+    cliVersion: env.COMMANDCODE_CLI_VERSION?.trim() || "0.26.7",
     defaultModel,
     allowedModels,
     allowUnknownModels: parseBoolean(env.COMMANDCODE_ALLOW_UNKNOWN_MODELS, false),
diff --git a/src/model-catalog.ts b/src/model-catalog.ts
@@ -38,6 +38,24 @@ export const COMMANDCODE_MODEL_DEFINITIONS: CommandCodeModelDefinition[] = [
     enabledByDefault: true,
     notes: "$0.30/M in · $1.20/M out · cache hit $0.06/M",
   },
+  {
+    id: "MiniMaxAI/MiniMax-M2.5",
+    label: "MiniMax M2.5",
+    provider: "MiniMax",
+    family: "minimax",
+    aliases: ["minimax-m2.5", "MiniMax-M2.5"],
+    enabledByDefault: false,
+    notes: "OSS pool model exposed by CommandCode 0.26.7",
+  },
+  {
+    id: "Qwen/Qwen3.6-Max-Preview",
+    label: "Qwen 3.6 Max Preview",
+    provider: "Qwen",
+    family: "qwen",
+    aliases: ["qwen3.6-max-preview", "Qwen3.6-Max-Preview"],
+    enabledByDefault: false,
+    notes: "OSS pool model exposed by CommandCode 0.26.7",
+  },
   {
     id: "Qwen/Qwen3.6-Plus",
     label: "Qwen 3.6 Plus",
@@ -56,6 +74,15 @@ export const COMMANDCODE_MODEL_DEFINITIONS: CommandCodeModelDefinition[] = [
     enabledByDefault: true,
     notes: "$1.40/M in · $4.40/M out · cache hit $0.26/M",
   },
+  {
+    id: "zai-org/GLM-5",
+    label: "GLM 5",
+    provider: "Z.ai",
+    family: "glm",
+    aliases: ["glm-5", "GLM-5"],
+    enabledByDefault: false,
+    notes: "$0.95/M in · $3.15/M out",
+  },
   {
     id: "moonshotai/Kimi-K2.6",
     label: "Kimi K2.6",
@@ -65,6 +92,15 @@ export const COMMANDCODE_MODEL_DEFINITIONS: CommandCodeModelDefinition[] = [
     enabledByDefault: true,
     notes: "$0.95/M in · $4/M out · cache hit $0.16/M",
   },
+  {
+    id: "moonshotai/Kimi-K2.5",
+    label: "Kimi K2.5",
+    provider: "Moonshot",
+    family: "kimi",
+    aliases: ["kimi-k2.5", "Kimi-K2.5"],
+    enabledByDefault: false,
+    notes: "$0.60/M in · $3/M out",
+  },
   {
     id: "openai/gpt-5.5",
     label: "GPT 5.5",
@@ -74,6 +110,33 @@ export const COMMANDCODE_MODEL_DEFINITIONS: CommandCodeModelDefinition[] = [
     enabledByDefault: false,
     notes: "$5/M in · $30/M out",
   },
+  {
+    id: "openai/gpt-5.4",
+    label: "GPT 5.4",
+    provider: "OpenAI",
+    family: "gpt",
+    aliases: ["gpt-5.4", "GPT-5.4"],
+    enabledByDefault: false,
+    notes: "$2.50/M in · $15/M out",
+  },
+  {
+    id: "openai/gpt-5.3-codex",
+    label: "GPT 5.3 Codex",
+    provider: "OpenAI",
+    family: "gpt",
+    aliases: ["gpt-5.3-codex", "GPT-5.3-Codex"],
+    enabledByDefault: false,
+    notes: "$2/M in · $8/M out",
+  },
+  {
+    id: "openai/gpt-5.4-mini",
+    label: "GPT 5.4 Mini",
+    provider: "OpenAI",
+    family: "gpt",
+    aliases: ["gpt-5.4-mini", "GPT-5.4-Mini"],
+    enabledByDefault: false,
+    notes: "$0.75/M in · $4.50/M out",
+  },
   {
     id: "anthropic/claude-opus-4.7",
     label: "Claude Opus 4.7",
@@ -83,6 +146,24 @@ export const COMMANDCODE_MODEL_DEFINITIONS: CommandCodeModelDefinition[] = [
     enabledByDefault: false,
     notes: "$5/M in · $25/M out · cache hit $0.5/M",
   },
+  {
+    id: "anthropic/claude-opus-4.6",
+    label: "Claude Opus 4.6",
+    provider: "Anthropic",
+    family: "claude",
+    aliases: ["claude-opus-4.6", "opus-4.6"],
+    enabledByDefault: false,
+    notes: "$5/M in · $25/M out · cache hit $0.5/M",
+  },
+  {
+    id: "anthropic/claude-opus-4-5-20251101",
+    label: "Claude Opus 4.5",
+    provider: "Anthropic",
+    family: "claude",
+    aliases: ["claude-opus-4.5", "opus-4.5"],
+    enabledByDefault: false,
+    notes: "$5/M in · $25/M out · cache hit $0.5/M",
+  },
   {
     id: "anthropic/claude-sonnet-4.6",
     label: "Claude Sonnet 4.6",
@@ -92,6 +173,33 @@ export const COMMANDCODE_MODEL_DEFINITIONS: CommandCodeModelDefinition[] = [
     enabledByDefault: false,
     notes: "$3/M in · $15/M out · cache hit $0.3/M",
   },
+  {
+    id: "anthropic/claude-sonnet-4-5-20250929",
+    label: "Claude Sonnet 4.5",
+    provider: "Anthropic",
+    family: "claude",
+    aliases: ["claude-sonnet-4.5", "sonnet-4.5"],
+    enabledByDefault: false,
+    notes: "$3/M in · $15/M out · cache hit $0.3/M",
+  },
+  {
+    id: "anthropic/claude-sonnet-4-20250514",
+    label: "Claude Sonnet 4",
+    provider: "Anthropic",
+    family: "claude",
+    aliases: ["claude-sonnet-4", "sonnet-4"],
+    enabledByDefault: false,
+    notes: "$3/M in · $15/M out · cache hit $0.3/M",
+  },
+  {
+    id: "anthropic/claude-haiku-4-5-20251001",
+    label: "Claude Haiku 4.5",
+    provider: "Anthropic",
+    family: "claude",
+    aliases: ["claude-haiku-4.5", "haiku-4.5"],
+    enabledByDefault: false,
+    notes: "$1/M in · $5/M out · cache hit $0.1/M",
+  },
 ];
 
 export function modelAliasMap(): Record<string, string> {
diff --git a/src/router.ts b/src/router.ts
@@ -454,7 +454,7 @@ export async function createRouterApp(
     return {
       status: healthyCount > 0 ? "ok" : "degraded",
       service: "commandcode-router",
-      version: "0.1.0",
+      version: "0.26.7",
       external_port: config.port,
       backend_count: backends.length,
       healthy_backend_count: healthyCount,
diff --git a/src/version.ts b/src/version.ts
@@ -1 +1 @@
-export const BRIDGE_VERSION = "0.1.0";
+export const BRIDGE_VERSION = "0.26.7";
diff --git a/tests/commandcode.test.ts b/tests/commandcode.test.ts
@@ -23,7 +23,7 @@ const baseConfig: BridgeConfig = {
   host: "127.0.0.1",
   port: 9992,
   apiBase: "https://api.commandcode.ai",
-  cliVersion: "0.25.12",
+  cliVersion: "0.26.7",
   defaultModel: "deepseek/deepseek-v4-pro",
   allowedModels: ["deepseek/deepseek-v4-pro", "deepseek/deepseek-v4-flash"],
   allowUnknownModels: false,
diff --git a/tests/config.test.ts b/tests/config.test.ts
diff --git a/tests/dashboard-ui.test.ts b/tests/dashboard-ui.test.ts
