sync: 168 file da Baida98/AI@d7f424d0 (2026-08-22 12:59 UTC) [deploy-all]

api/auth_guard.py

@@ -201,6 +201,7 @@ def _get_token(env_var: str) -> str:
 
 async def _resolve_role(
     x_internal_token: Optional[str] = Header(None, alias="X-Internal-Token"),
+    x_machine_token:   Optional[str] = Header(None, alias="X-Machine-Token"),
     x_operator_token:  Optional[str] = Header(None, alias="X-Operator-Token"),
     x_admin_token:     Optional[str] = Header(None, alias="X-Admin-Token"),
 ) -> AuthRole:
@@ -218,9 +219,11 @@ async def _resolve_role(
         logger.debug("auth: OPERATOR role granted")
         return AuthRole.OPERATOR
 
-    # MACHINE (INTERNAL_TOKEN, già generato al boot da main.py)
-    int_tok = _get_token("INTERNAL_TOKEN")
-    if int_tok and x_internal_token and _sec_comp.compare_digest(x_internal_token, int_tok):
+    # MACHINE: supporta entrambi gli header per compatibilità tra runner e backend.
+    # Il valore resta confrontato esclusivamente con il secret server-side.
+    int_tok = _get_token("INTERNAL_TOKEN") or _get_token("MACHINE_TOKEN")
+    machine_header = x_internal_token or x_machine_token
+    if int_tok and machine_header and _sec_comp.compare_digest(machine_header, int_tok):
         logger.debug("auth: MACHINE role granted")
         return AuthRole.MACHINE
 
@@ -280,7 +283,8 @@ def require_role(min_role: AuthRole):
         _token_hdr = (
             request.headers.get('X-Admin-Token') or
             request.headers.get('X-Operator-Token') or
-            request.headers.get('X-Internal-Token')
+            request.headers.get('X-Internal-Token') or
+            request.headers.get('X-Machine-Token')
         )
         # GAP-AUTH-FIX: estrai IP reale (Railway/HF dietro proxy → X-Forwarded-For)
         _client_ip: str | None = (

api/exec.py

@@ -568,15 +568,14 @@ async def llm_fix_code(
     _FIX_CHAIN = []
     groq_key = os.getenv('GROQ_API_KEY', '')
     if groq_key:
-        _FIX_CHAIN.append(('https://api.groq.com/openai/v1', groq_key, 'openai/gpt-oss-120b'))
-        _FIX_CHAIN.append(('https://api.groq.com/openai/v1', groq_key, 'openai/gpt-oss-20b'))
+        _FIX_CHAIN.append(('https://api.groq.com/openai/v1', groq_key, 'qwen/qwen3.6-27b'))
 
     or_key = os.getenv('OPENROUTER_API_KEY', '')
     if or_key:
         for m in [
-            'openai/gpt-oss-20b:free',
-            'meta-llama/llama-3.1-8b-instruct:free',
-            'qwen/qwen-2.5-coder-7b-instruct:free',
+            'openrouter/free',
+            'qwen/qwen3-coder:free',
+            'meta-llama/llama-3.3-70b-instruct:free',
         ]:
             _FIX_CHAIN.append(('https://openrouter.ai/api/v1', or_key, m))
 

api/providers.py

@@ -930,14 +930,14 @@ async def update_provider_models(role: AuthRole = Depends(require_role(AuthRole.
     # filtrare per `name` evita di applicare un formato incompatibile alla riga sbagliata.
     # GPT-OSS 120B non compare come vecchio valore perché è già un modello supportato.
     MODEL_FIXES = [
-        ("groq",       "llama-3.1-70b-versatile", "openai/gpt-oss-120b"),
+        ("groq",       "llama-3.1-70b-versatile", "qwen/qwen3.6-27b"),
         ("cerebras",   "llama3.1-70b",            "gpt-oss-120b"),
         ("nvidia",     "llama-3.1-405b-instruct", "meta/llama-3.3-70b-instruct"),
-        ("openrouter", "llama-3.1-405b",          "openai/gpt-oss-20b:free"),
+        ("openrouter", "llama-3.1-405b",          "openrouter/free"),
         ("sambanova",  "llama3-70b",              "DeepSeek-V3.2"),
         ("gemini",     "gemini-1.5-flash",        "gemini-3.5-flash-lite"),
         ("gemini",     "gemini-1.5-pro",          "gemini-3.6-flash"),
-        ("openrouter", "claude-3.5-sonnet",       "openai/gpt-oss-20b:free"),
+        ("openrouter", "claude-3.5-sonnet",       "openrouter/free"),
     ]
 
     import asyncio as _aio

benchmark-extended.mjs

@@ -244,10 +244,10 @@ FSH.orchestration =
 "ESECUZIONE: esegui ogni step nell'ordine con i tool dichiarati.";
 
 FSH.bug_fix =
-"RISPOSTA IN TRE SEZIONI:\n" +
-"1. **Root cause**: [1 riga — causa esatta del bug]\n" +
-"2. **Fix** (TypeScript compilabile)\n" +
-"3. **Test**: [unit test che verifica il fix]";
+"OUTPUT VINCOLATO: restituisci esclusivamente un singolo blocco ```typescript ... ``` completo e compilabile.\n" +
+"Non aggiungere Root cause, Test, spiegazioni o testo fuori dal blocco.\n" +
+"Mantieni la struttura e le firme pubbliche; per effetti React includi guardia di smontaggio e cleanup/abort nel return di useEffect.\n" +
+"Usa export named quando il codice definisce una funzione o una classe pubblica.";
 
 FSH.refactor =
 "TECNICA OBBLIGATORIA: guard clauses + early return.\n" +
@@ -2443,6 +2443,10 @@ async function runOneSeed(seed,opts={}){
   const reportPath=`/tmp/agente-ai/benchmark-v5-${seed}.json`;
   const report={
     timestamp:new Date().toISOString(),version:"extended-v5",
+    runner:"benchmark-extended.mjs",
+    apiContract:"POST /api/agent/tasks + GET /api/agent/tasks/{taskId}/stream",
+    sseParser:"normalizeSSEEvent",
+    codeExtractor:"extractCode-v2",
     seed,replayCli:`node benchmark-extended.mjs --seed ${seed}`,
     spaceVersion:spaceV,
     specCoverage:{A_ragionamento:"reasoning",B_orchestrazione:"orchestration",
@@ -2589,9 +2593,13 @@ else if(MULTI>1){
         : null,
       avgDevin: _runResult.avgDevin,
       avgManus: _runResult.avgManus,
-      verdict: _runResult.avgScore >= _runResult.avgReplit ? "PARI_REPLIT" : "SOTTO_REPLIT",
+      verdict: _runResult.avgScore == null ? "NON_VALUTABILE" : _runResult.avgScore >= _runResult.avgReplit ? "PARI_REPLIT" : "SOTTO_REPLIT",
     };
-    saveBenchmarkReport("benchmark-extended-single", { summary, tasks: _runResult });
+    saveBenchmarkReport("benchmark-extended-single", {
+      summary,
+      tasks: _runResult.tasks ?? [],
+      taskFailures: _runResult.taskFailures ?? [],
+    });
   } catch (e) { console.log(`${R}⚠️  Report engine error: ${e.message}${NC}`); }
 
   if(F_IMPROVE){ await runImprovementCycle(_runResult,_runResult.selectedTasks); }

benchmarks/model_watch_adapter.py

@@ -230,7 +230,7 @@ class ObserveOnlyModelsAdapter:
         params: dict[str, str] = {}
         if profile.auth_mode == "query_key":
             params["key"] = profile.api_key
-        else:
+        elif profile.auth_mode != "none":
             headers["Authorization"] = f"Bearer {profile.api_key}"
 
         owns_client = self._client is None
@@ -292,7 +292,7 @@ class GeminiModelsAdapter(ObserveOnlyModelsAdapter):
     async def list_models(self, profile: ProviderProfile) -> CatalogResult:
         url = models_url(profile.base_url)
         headers = {"Accept": "application/json"}
-        params = {"key": profile.api_key}
+        params = {"key": profile.api_key} if profile.auth_mode != "none" else {}
         owns_client = self._client is None
         client = self._client or httpx.AsyncClient(timeout=self.timeout_seconds)
         try:

memory/sync.py

@@ -58,6 +58,12 @@ class MemorySyncStatus(BaseModel):
     stats: dict[str, Any]
 
 
+class MemoryImportRequest(BaseModel):
+    """Payload di import definito a livello modulo per lo schema OpenAPI."""
+    records: list[dict[str, Any]] = Field(default_factory=list)
+    overwrite: bool = False
+
+
 # ── GAP-VAULT-AUTH: autenticazione Bearer ─────────────────────────────────────
 _SYNC_ADMIN_TOKEN = os.getenv('VAULT_ADMIN_TOKEN', '')  # stessa variabile del vault
 
@@ -218,13 +224,9 @@ def create_memory_sync_router(memory: Any) -> APIRouter:
             "server_time": _now_ms(),
         }
 
-    class _MemoryImportRequest(BaseModel):
-        records: list[dict[str, Any]] = Field(default_factory=list)
-        overwrite: bool = False
-
     @router.post("/import")
     async def memory_import(
-        req: _MemoryImportRequest,
+        req: MemoryImportRequest,
         _auth: None = Depends(_require_sync_auth),
     ) -> dict[str, Any]:
         """Importa records nella semantic memory. Richiede Bearer VAULT_ADMIN_TOKEN."""

models/ai_client.py

@@ -61,11 +61,11 @@ class ProviderConfig:
 # (nessun proxy CF Worker qui: questo client gira lato backend Python, non browser).
 _PROVIDER_DEFS = [
     # tier 0 — free tier veloce e affidabile
-    {"name": "groq",       "env_key": "GROQ_API_KEY",       "base_url": "https://api.groq.com/openai/v1",                    "model_env": "GROQ_MODEL",      "default_model": "openai/gpt-oss-120b",     "tier": 0, "purpose": "reasoning"},
+    {"name": "groq",       "env_key": "GROQ_API_KEY",       "base_url": "https://api.groq.com/openai/v1",                    "model_env": "GROQ_MODEL",      "default_model": "qwen/qwen3.6-27b",     "tier": 0, "purpose": "reasoning"},
     {"name": "cerebras",   "env_key": "CEREBRAS_API_KEY",   "base_url": "https://api.cerebras.ai/v1",                        "model_env": "CEREBRAS_MODEL",  "default_model": "gpt-oss-120b",                "tier": 0, "purpose": "reasoning"},
     {"name": "sambanova",  "env_key": "SAMBANOVA_API_KEY",  "base_url": "https://api.sambanova.ai/v1",                       "model_env": "SAMBANOVA_MODEL", "default_model": "DeepSeek-V3.1",               "tier": 0, "purpose": "reasoning"},
     # tier 1 — free tier con rate limit più stretti
-    {"name": "openrouter", "env_key": "OPENROUTER_API_KEY", "base_url": "https://openrouter.ai/api/v1",                      "model_env": "OPENROUTER_MODEL","default_model": "openai/gpt-oss-20b:free", "tier": 1, "purpose": "coding"},
+    {"name": "openrouter", "env_key": "OPENROUTER_API_KEY", "base_url": "https://openrouter.ai/api/v1",                      "model_env": "OPENROUTER_MODEL","default_model": "openrouter/free", "tier": 1, "purpose": "coding"},
     {"name": "hf_router",  "env_key": "HF_TOKEN",           "base_url": "https://router.huggingface.co/v1",                  "model_env": "HF_MODEL",        "default_model": "Qwen/Qwen2.5-Coder-32B-Instruct", "tier": 1, "purpose": "coding"},
     {"name": "gemini",     "env_key": "GEMINI_API_KEY",     "base_url": "https://generativelanguage.googleapis.com/v1beta/openai/", "model_env": "GEMINI_MODEL", "default_model": "gemini-3.6-flash",        "tier": 1, "purpose": "memory"},
     # tier 2 — fallback opzionale (spesso a pagamento o quota limitata)

models/role_router.py

@@ -3,27 +3,27 @@ role_router.py — Multi-model role routing (S362, aggiornato 2026-06-14 benchma
 
 BENCHMARK RESULTS 2026-06-14 FINALE (14 modelli × 3 test, max_tokens corretti):
   100% qualità (ordinati per TTFT):
-  #1  Groq / openai/gpt-oss-20b           — 170ms  100% ← FASTEST
+  #1  Groq / qwen/qwen3.6-27b           — 170ms  100% ← FASTEST
   #2  Cerebras / gpt-oss-120b               — 207ms  100% ← REASONING (max_tokens≥500)
-  #3  Groq / openai/gpt-oss-120b        — 235ms  100%
+  #3  Groq / qwen/qwen3.6-27b        — 235ms  100%
   #4  Cerebras / zai-glm-4.7               — 254ms  100%
   #5  Groq / compound-mini                  — 341ms  100%
   #6  SambaNova / DeepSeek-V3.1            — 482ms  100%
   #7  SambaNova / gemma-4-31B              — 2132ms 100%
-  #8  OpenRouter / gpt-oss-120b:free        — 2160ms 100%
+  #8  OpenRouter / openrouter/free        — 2160ms 100%
 
 Role assignments 2026-06-14 FINALE:
-  FAST       → Groq openai/gpt-oss-20b      (170ms, 100%) ← #1 assoluto
+  FAST       → Groq qwen/qwen3.6-27b      (170ms, 100%) ← #1 assoluto
   ARCHITECT  → Groq llama-4-scout-17b 10M ctx  (244ms, 67%  — best per contesto lungo)
-  CODER      → Groq openai/gpt-oss-120b    (235ms, 100%) ← #3 qualità
-  TESTER     → Groq openai/gpt-oss-20b
-  CONTEXT    → Groq openai/gpt-oss-20b
+  CODER      → Groq qwen/qwen3.6-27b    (235ms, 100%) ← #3 qualità
+  TESTER     → Groq qwen/qwen3.6-27b
+  CONTEXT    → Groq qwen/qwen3.6-27b
   RESEARCHER → Gemini 2.5-flash (599ms, 67% — math prompt-sensitive)
   REASONER   → Cerebras gpt-oss-120b (207ms, 100%, reasoning model → max_tokens≥500)
   SAMBANOVA  → SambaNova DeepSeek-V3.1 (482ms, 100%)
-  DEFAULT    → AIClient() primary (openai/gpt-oss-120b o primo disponibile)
+  DEFAULT    → AIClient() primary (qwen/qwen3.6-27b o primo disponibile)
 
-OpenRouter tenuto come fallback secondario (gpt-oss-120b:free = 1645ms ma 100% qualità).
+OpenRouter tenuto come fallback secondario (openrouter/free = 1645ms ma 100% qualità).
 """
 from __future__ import annotations
 
@@ -36,11 +36,11 @@ _logger = logging.getLogger("models.role_router")
 
 
 class Role(str, Enum):
-    FAST       = "fast"        # greetings, math semplice, identity — openai/gpt-oss-20b
+    FAST       = "fast"        # greetings, math semplice, identity — qwen/qwen3.6-27b
     ARCHITECT  = "architect"   # planning, ragionamento complesso — GPT-OSS 120B
-    CODER      = "coder"       # coding, debug — openai/gpt-oss-120b
-    TESTER     = "tester"      # test gen, debug hints — openai/gpt-oss-120b
-    CONTEXT    = "context"     # summarization, context compression — openai/gpt-oss-120b
+    CODER      = "coder"       # coding, debug — qwen/qwen3.6-27b
+    TESTER     = "tester"      # test gen, debug hints — qwen/qwen3.6-27b
+    CONTEXT    = "context"     # summarization, context compression — qwen/qwen3.6-27b
     DEFAULT    = "default"     # AIClient() primary
     RESEARCHER = "researcher"  # web research + document synthesis — GPT-OSS 120B
     REASONER   = "reasoner"    # throughput massimo — Cerebras GPT-OSS 120B
@@ -122,7 +122,7 @@ class RoleRouter:
             name="groq-fast",
             api_key=groq_key,
             base_url="https://api.groq.com/openai/v1",
-            default_model=os.getenv("GROQ_FAST_MODEL", "openai/gpt-oss-20b"),
+            default_model=os.getenv("GROQ_FAST_MODEL", "qwen/qwen3.6-27b"),
         )
         rest = [p for p in client.providers if p.name not in ("groq", "groq-fast", "groq-tester")]
         client.providers = [fast, *rest]
@@ -163,7 +163,7 @@ class RoleRouter:
                 name="groq-architect",
                 api_key=groq_key,
                 base_url="https://api.groq.com/openai/v1",
-                default_model=os.getenv("ARCHITECT_MODEL", "openai/gpt-oss-120b"),
+                default_model=os.getenv("ARCHITECT_MODEL", "qwen/qwen3.6-27b"),
             )
             rest = [p for p in client.providers if p.name not in ("groq", "groq-architect")]
             client.providers = [architect, *rest]
@@ -179,7 +179,7 @@ class RoleRouter:
                 profiles = [ProviderConfig(
                     name="openrouter", api_key=os.getenv("OPENROUTER_API_KEY", ""),
                     base_url="https://openrouter.ai/api/v1",
-                    default_model=os.getenv("OPENROUTER_MODEL", "openai/gpt-oss-20b:free"),
+                    default_model=os.getenv("OPENROUTER_MODEL", "openrouter/free"),
                     profile="legacy",
                 )]
             if profiles:
@@ -201,7 +201,7 @@ class RoleRouter:
             return profiled
         groq_key = os.getenv("GROQ_API_KEY")
         nvidia_key = os.getenv("NVIDIA_API_KEY")
-        model = os.getenv("CODER_MODEL", "openai/gpt-oss-120b")
+        model = os.getenv("CODER_MODEL", "qwen/qwen3.6-27b")
         if groq_key:
             client = AIClient()
             coder = ProviderConfig(
@@ -241,7 +241,7 @@ class RoleRouter:
                 profiles = [ProviderConfig(
                     name="openrouter", api_key=os.getenv("OPENROUTER_API_KEY", ""),
                     base_url="https://openrouter.ai/api/v1",
-                    default_model=os.getenv("OPENROUTER_MODEL", "openai/gpt-oss-20b:free"),
+                    default_model=os.getenv("OPENROUTER_MODEL", "openrouter/free"),
                     profile="legacy",
                 )]
             if profiles:
@@ -273,7 +273,7 @@ class RoleRouter:
                 base_url="https://api.groq.com/openai/v1",
                 default_model=os.getenv(
                     "GROQ_RESEARCH_MODEL",
-                    os.getenv("GROQ_MODEL", "openai/gpt-oss-120b"),
+                    os.getenv("GROQ_MODEL", "qwen/qwen3.6-27b"),
                 ),
             )
             rest = [
@@ -307,7 +307,7 @@ class RoleRouter:
                 base_url="https://api.groq.com/openai/v1",
                 default_model=os.getenv(
                     "GROQ_REASONER_MODEL",
-                    os.getenv("GROQ_MODEL", "openai/gpt-oss-120b"),
+                    os.getenv("GROQ_MODEL", "qwen/qwen3.6-27b"),
                 ),
             )
             rest = [
@@ -406,7 +406,7 @@ class RoleRouter:
             name="groq-tester",
             api_key=groq_key,
             base_url="https://api.groq.com/openai/v1",
-            default_model=os.getenv("GROQ_FAST_MODEL", "openai/gpt-oss-20b"),
+            default_model=os.getenv("GROQ_FAST_MODEL", "qwen/qwen3.6-27b"),
             purpose="coding",
         )
         rest = [p for p in client.providers if p.name not in ("groq", "groq-tester")]

tests/test_model_catalog_scan.py

@@ -0,0 +1,48 @@
+import unittest
+
+from scripts.model_catalog_scan import diff_catalogs
+from scripts.model_catalog_notify import build_body
+
+
+class ModelCatalogDiffTests(unittest.TestCase):
+    def test_reports_exact_added_removed_and_unavailable_models(self):
+        previous = {"state": {"groq/A": {"provider": "groq", "profile": "A", "status": "available", "models": ["old-model", "stable-model"]}}}
+        current = {"state": {"groq/A": {"provider": "groq", "profile": "A", "status": "available", "models": ["new-model", "stable-model"], "default_model": "old-model", "default_available": False}}}
+        result = diff_catalogs(previous, current)
+        self.assertEqual(result["added_models"][0]["model"], "new-model")
+        self.assertEqual(result["removed_models"][0]["model"], "old-model")
+        self.assertEqual(result["unavailable_defaults"][0]["model"], "old-model")
+        self.assertTrue(result["has_changes"])
+
+    def test_reports_provider_errors_with_exact_status(self):
+        current = {"state": {"gemini/default": {"provider": "gemini", "profile": "default", "status": "rate_limited", "models": [], "detail": "retry after 60"}}}
+        result = diff_catalogs({}, current)
+        self.assertEqual(result["provider_errors"][0]["status"], "rate_limited")
+        self.assertIn("gemini", result["provider_errors"][0]["provider"])
+
+    def test_empty_profile_configuration_is_reported(self):
+        from scripts.model_catalog_scan import audit_payload
+        from benchmarks.model_watch_adapter import ModelWatchConfig, ObserveOnlyModelsAdapter
+        from types import SimpleNamespace
+        payload = audit_payload(SimpleNamespace(results=(), skipped_rate_limited=()), ObserveOnlyModelsAdapter(config=ModelWatchConfig()), [], {})
+        self.assertEqual(payload["profile_count"], 0)
+        self.assertTrue(payload["diff"]["has_changes"])
+        self.assertEqual(payload["diff"]["provider_errors"][0]["status"], "missing_profiles")
+
+    def test_notification_contains_exact_names_and_closed_gate(self):
+        body = build_body({
+            "auto_apply_gate_open": False,
+            "diff": {
+                "added_models": [{"provider": "groq", "profile": "A", "model": "new-model"}],
+                "removed_models": [{"provider": "groq", "profile": "A", "model": "old-model"}],
+                "unavailable_defaults": [],
+                "provider_errors": [],
+            },
+        })
+        self.assertIn("new-model", body)
+        self.assertIn("old-model", body)
+        self.assertIn("CHIUSA", body)
+
+
+if __name__ == "__main__":
+    unittest.main()

tests/test_provider_model_migrations.py

@@ -47,7 +47,7 @@ class RoleRouterModelMigrationTests(unittest.TestCase):
         client = RoleRouter.get_client(Role.ARCHITECT)
 
         self.assertEqual(client.provider_name, "groq-architect")
-        self.assertEqual(client.default_model, "openai/gpt-oss-120b")
+        self.assertEqual(client.default_model, "qwen/qwen3.6-27b")
 
     @patch.object(AIClient, "_load_providers", return_value=[])
     @patch.dict(
@@ -59,8 +59,8 @@ class RoleRouterModelMigrationTests(unittest.TestCase):
         architect = RoleRouter.get_client(Role.ARCHITECT)
         coder = RoleRouter.get_client(Role.CODER)
 
-        self.assertEqual(architect.default_model, "openai/gpt-oss-20b:free")
-        self.assertEqual(coder.default_model, "openai/gpt-oss-20b:free")
+        self.assertEqual(architect.default_model, "openrouter/free")
+        self.assertEqual(coder.default_model, "openrouter/free")
 
     @patch.object(AIClient, "_load_providers", return_value=[])
     @patch.dict(
@@ -90,14 +90,14 @@ class ProviderTableMigrationTests(unittest.IsolatedAsyncioTestCase):
         self.assertEqual(len(fake_supabase.table_ref.calls), 8)
 
         expected = {
-            ("groq", "llama-3.1-70b-versatile", "openai/gpt-oss-120b"),
+            ("groq", "llama-3.1-70b-versatile", "qwen/qwen3.6-27b"),
             ("cerebras", "llama3.1-70b", "gpt-oss-120b"),
             ("nvidia", "llama-3.1-405b-instruct", "meta/llama-3.3-70b-instruct"),
-            ("openrouter", "llama-3.1-405b", "openai/gpt-oss-20b:free"),
+            ("openrouter", "llama-3.1-405b", "openrouter/free"),
             ("sambanova", "llama3-70b", "DeepSeek-V3.2"),
             ("gemini", "gemini-1.5-flash", "gemini-3.5-flash-lite"),
             ("gemini", "gemini-1.5-pro", "gemini-3.6-flash"),
-            ("openrouter", "claude-3.5-sonnet", "openai/gpt-oss-20b:free"),
+            ("openrouter", "claude-3.5-sonnet", "openrouter/free"),
         }
         actual = {
             (