{
  "$schema": "./day.schema.json",
  "date": "2026-09-13",
  "items": [
    {
      "id": "gh:pr:AceDataCloud/Nexior#1759",
      "title": "Build flexible custom homepage sections in Nexior ✨",
      "tags": [
        "github",
        "pr",
        "Nexior",
        "homepage",
        "custom-sections",
        "site-settings",
        "i18n",
        "testing"
      ],
      "public": true,
      "url": "https://github.com/AceDataCloud/Nexior/pull/1759",
      "summary": "Adds management and rendering for controlled image-text, CTA, capability-grid, and safe rich-text homepage sections, with dedicated SiteHomeSection records separate from built-in site configuration. Includes canonical API/schema integration, navigation helpers, localized settings, and focused coverage for the editor and homepage components."
    },
    {
      "id": "gh:pr:AceDataCloud/hermes-agent#3",
      "title": "Make Hermes run events replayable and safely observable in hermes agent 🔁",
      "tags": [
        "github",
        "pr",
        "hermes-agent",
        "replay",
        "sse",
        "observability",
        "payments",
        "testing"
      ],
      "public": true,
      "url": "https://github.com/AceDataCloud/hermes-agent/pull/3",
      "summary": "Preserved the replayable `/v1/runs` event contract with monotonic SSE IDs, `Last-Event-ID` support, cursor-gap detection, multi-subscriber replay, and terminal retention. Added redacted public tool observations while keeping x402 payment events in the shared replay stream. Replay, observation, runtime smoke, and Hermes Runs/payment tests passed, with six pre-existing baseline failures unchanged."
    },
    {
      "id": "gh:pr:AceDataCloud/AuthFrontend#284",
      "title": "Fix: redact GitHub OAuth callback logs in Frontend Web 🐛",
      "tags": [
        "github",
        "pr",
        "AuthFrontend"
      ],
      "public": false
    },
    {
      "id": "gh:pr:AceDataCloud/PlatformBackend#1776",
      "title": "Launch controlled custom homepage sections in Backend 🚀",
      "tags": [
        "github",
        "pr",
        "PlatformBackend",
        "homepage",
        "api",
        "site-management",
        "translations",
        "security"
      ],
      "public": false,
      "summary": "Adds the independent SiteHomeSection model and API for admin-managed homepage content without altering the built-in Site.home configuration. Custom sections support public origin scoping, scheduling, sanitized Markdown, safe URLs, capability grids, translations, and protected cleanup references. Includes migration coverage, public and admin tests, and CI integration."
    },
    {
      "id": "gh:pr:AceDataCloud/Nexior#1761",
      "title": "Unify site authentication settings with secure GitHub OAuth updates in Nexior 🔐",
      "tags": [
        "github",
        "pr",
        "Nexior",
        "authentication",
        "github-oauth",
        "site-settings",
        "concurrency",
        "localization"
      ],
      "public": true,
      "url": "https://github.com/AceDataCloud/Nexior/pull/1761",
      "summary": "Site authentication changes are now staged locally and saved together through a concurrency-safe PATCH using If-Match. Added per-site GitHub OAuth App settings with component-local write-only secrets, typed credential updates, complete localization, and validation checks while preserving existing email and phone compatibility APIs."
    },
    {
      "id": "gh:pr:AceDataCloud/AgentWorld#141",
      "title": "Fix: make payment status migration rollback-safe in Agent World 🐛",
      "tags": [
        "github",
        "pr",
        "AgentWorld"
      ],
      "public": false
    },
    {
      "id": "gh:pr:AceDataCloud/hermes-agent#2",
      "title": "Stabilize quickstart fixtures and virtual-history timing in hermes agent 🧪",
      "tags": [
        "github",
        "pr",
        "hermes-agent",
        "testing",
        "ci",
        "fixtures",
        "timing"
      ],
      "public": true,
      "url": "https://github.com/AceDataCloud/hermes-agent/pull/2",
      "summary": "Updated quickstart tests to use explicit runtime job data and a ready-state fixture instead of relying on host hardware recommendations. Replaced the virtual-history test’s fixed delay with an event-based wait for the scroll adjustment. These test-only changes improve reliability on standard GitHub-hosted runners without changing product behavior."
    },
    {
      "id": "gh:pr:AceDataCloud/PlatformBackend#1788",
      "title": "Docs: clarify Responses terminal billing in Backend 📝",
      "tags": [
        "github",
        "pr",
        "PlatformBackend"
      ],
      "public": false
    },
    {
      "id": "gh:pr:AceDataCloud/PlatformFrontend#1440",
      "title": "Unify Site auth settings with GitHub OAuth management in Frontend Web 🔐",
      "tags": [
        "github",
        "pr",
        "PlatformFrontend",
        "authentication",
        "github-oauth",
        "site-settings",
        "localization",
        "security"
      ],
      "public": false,
      "summary": "Adds GitHub OAuth App settings to the Site Auth tab with platform-default and custom-app support, safe secret handling, and typed credential updates. Provider toggles and credentials now save through one optimistic-concurrency Site PATCH, backed by complete 12-locale copy and validation checks."
    },
    {
      "id": "gh:pr:AceDataCloud/PlatformBackend#1786",
      "title": "Move Site delivery secrets into canonical vault storage in Backend 🔐",
      "tags": [
        "github",
        "pr",
        "PlatformBackend",
        "secrets",
        "site-secret",
        "migration",
        "security",
        "testing"
      ],
      "public": false,
      "summary": "Email SMTP and phone webhook secrets now write to canonical SiteSecret storage while preserving the existing delivery configuration API as an adapter. Added a dry-run-by-default migration command with copy, apply, verify, cleanup, batching, cursor, and reporting controls, plus digest binding to SiteSecret revisions. Expanded delivery vault and migration coverage in the Docker PostgreSQL test gate."
    },
    {
      "id": "gh:pr:AceDataCloud/AgentWorld#140",
      "title": "Fix: ignore migration package markers in release gate in Agent World 🐛",
      "tags": [
        "github",
        "pr",
        "AgentWorld"
      ],
      "public": false
    },
    {
      "id": "gh:pr:AceDataCloud/AuthFrontend#283",
      "title": "Broker GitHub OAuth through secure site transactions in Frontend Web 🔐",
      "tags": [
        "github",
        "pr",
        "AuthFrontend",
        "github-oauth",
        "authentication",
        "account-binding",
        "frontend",
        "security"
      ],
      "public": false,
      "summary": "GitHub login and account binding now start through AuthBackend one-time transactions with a same-origin bootstrap page. Interactive `sgo1.*` state is kept separate from connector OAuth state and carried through completion, with explicit login/bind intent and bounded popup polling. Added prebuild contract coverage for the new flow."
    },
    {
      "id": "gh:pr:AceDataCloud/PlatformService#2377",
      "title": "Make Responses billing terminal-safe in Platform Service 🛡️",
      "tags": [
        "github",
        "pr",
        "PlatformService",
        "openai",
        "billing",
        "responses",
        "e2e",
        "ci"
      ],
      "public": false,
      "summary": "Responses usage is now recorded only from validated terminal events, preventing estimates from being priced when streams end, disconnect, or reach clean EOF prematurely. Client disconnects record 499 and clean EOF records 502 without usage, while background responses preserve upstream status and avoid premature pricing. Added comprehensive billing, process-level E2E coverage and mandatory CI gating."
    },
    {
      "id": "gh:pr:AceDataCloud/Index#423",
      "title": "Pons-first ACE relaunch plan clarifies legacy coexistence and guarded distribution in Index 🚀",
      "tags": [
        "github",
        "pr",
        "Index",
        "ace",
        "pons",
        "robinhood-chain",
        "token-launch",
        "documentation"
      ],
      "public": false,
      "summary": "Replaces the custom-contract-first ACE relaunch design with a Pons V2-based plan covering standard issuance, curve graduation, Uniswap V4 pooling, and permanent LP locking. Defines a hard-capped project purchase and proportional distribution of acquired tokens to eligible Legacy holders without a 1:1 guarantee. Adds synchronized Chinese and English execution plans while deferring yield features and limiting the change to documentation and approval preparation."
    },
    {
      "id": "gh:pr:AceDataCloud/PlatformBackend#1792",
      "title": "Fix: 收敛 ACE Holder 权益状态 in Backend 🐛",
      "tags": [
        "github",
        "pr",
        "PlatformBackend"
      ],
      "public": false
    },
    {
      "id": "gh:pr:AceDataCloud/AuthBackend#477",
      "title": "Harden Site GitHub OAuth with one-time browser-bound transactions in Backend 🔐",
      "tags": [
        "github",
        "pr",
        "AuthBackend",
        "github-oauth",
        "security",
        "authentication",
        "site-credentials"
      ],
      "public": false,
      "summary": "Adds 10-minute, one-time GitHub OAuth transactions bound to the browser, site, client credentials, and secret revision. Custom site credentials are resolved from public configuration and canonical secrets, with callbacks invalidated after rotation, deletion, recreation, or mode changes. Introduces explicit credential exchange while preserving gated legacy no-state compatibility for rollout."
    },
    {
      "id": "gh:pr:AceDataCloud/AgentWorld#139",
      "title": "Unblock the paid MCP production release in Agent World 🚀",
      "tags": [
        "github",
        "pr",
        "AgentWorld",
        "paid-mcp",
        "security",
        "docker",
        "testing"
      ],
      "public": false,
      "summary": "Formatted the paid-MCP runtime files to satisfy Ruff and updated Debian packages during the server image build for security fixes. Payment rollout remains mock/testnet-only with real-money payments disabled, and the updated client and manifest tests pass."
    },
    {
      "id": "gh:pr:AceDataCloud/PlatformBackend#1793",
      "title": "Fix(migrations): 合并并行 Site 0345 节点 in Backend 🐛",
      "tags": [
        "github",
        "pr",
        "PlatformBackend"
      ],
      "public": false
    },
    {
      "id": "gh:pr:AceDataCloud/AgentWorld#138",
      "title": "Launch secure tool payment controls in Agent World 💳",
      "tags": [
        "github",
        "pr",
        "AgentWorld",
        "tool-payments",
        "owner-ui",
        "i18n",
        "testnet",
        "validation"
      ],
      "public": false,
      "summary": "Added an owner-facing tool payment page with routing from Agent details, support for free and x402_exact profiles, and draft revision activation or pausing through the existing APIs. The UI validates atomic amounts without JavaScript Number, enforces current Agent and schema constraints, surfaces charging boundaries and testnet warnings, and clears sensitive owner data on navigation or logout. Added localized copy across 12 locales and operator coverage, with build, lint, tests, and i18n checks passing."
    },
    {
      "id": "gh:pr:AceDataCloud/AgentWorld#137",
      "title": "Launch managed MCP payments with secure run-scoped credentials in Agent World 💳",
      "tags": [
        "github",
        "pr",
        "AgentWorld",
        "payments",
        "mcp",
        "hermes",
        "security",
        "testnet"
      ],
      "public": false,
      "summary": "Adds a managed MCP payment gateway with immutable tool pricing, Ed25519 run-scoped grants, payment challenge handling, and idempotent settled retries. Hermes now persists payment-required events, pauses runs in a dedicated waiting state, releases worker leases, and resumes the same attempt after credential submission. Song and short-drama payments are limited to exact testnet/mock flows, with 114 tests passing alongside Ruff, Django checks, migration validation, and manifest verification."
    },
    {
      "id": "gh:pr:AceDataCloud/hermes-agent#1",
      "title": "Resume protected MCP tool calls with x402 payments in Hermes Agent 🚀",
      "tags": [
        "github",
        "pr",
        "hermes-agent",
        "x402",
        "mcp",
        "payments",
        "runs",
        "security",
        "testing"
      ],
      "public": true,
      "url": "https://github.com/AceDataCloud/hermes-agent/pull/1",
      "summary": "Adds opt-in x402 V2 challenge handling for MCP tools, preserving tool identity while securely resuming calls with validated payment credentials. Runs now expose credential-free payment status and SSE updates, with authenticated credential submission and cleanup across terminal paths. Includes mock/testnet fixtures, coverage, deployment configuration, and container publishing workflows."
    },
    {
      "id": "gh:pr:AceDataCloud/PlatformBackend#1783",
      "title": "Unify Site auth credentials with safe projections in Backend 🔐",
      "tags": [
        "github",
        "pr",
        "PlatformBackend",
        "authentication",
        "credentials",
        "secrets",
        "concurrency",
        "api"
      ],
      "public": false,
      "summary": "Site detail PATCH now supports unified GitHub credential writes while atomically separating public auth configuration from encrypted secrets. Management responses expose authorized projections with safe secret status and callback data, while anonymous bootstrap remains free of credential metadata. Configuration revisions and optional If-Match checks add concurrency protection, backed by PostgreSQL projection and atomicity tests."
    },
    {
      "id": "gh:pr:AceDataCloud/PlatformBackend#1791",
      "title": "Drop legacy Site columns in Backend 🧹",
      "tags": [
        "github",
        "pr",
        "PlatformBackend",
        "database",
        "migrations",
        "site",
        "cleanup"
      ],
      "public": false,
      "summary": "Removes the obsolete metadata and index_sections columns from app_site with a database-only migration following their Django state removal. Adds reverse SQL that recreates nullable empty columns and tests confirming the migration and runtime model no longer reference the legacy fields."
    },
    {
      "id": "gh:pr:AceDataCloud/AuthBackend#476",
      "title": "Read canonical Site secrets with guarded legacy fallback in Backend 🔐",
      "tags": [
        "github",
        "pr",
        "AuthBackend",
        "site-secrets",
        "aes-gcm",
        "delivery",
        "rollout"
      ],
      "public": false,
      "summary": "Adds a read-only mirror for the canonical Site secret table with stable purpose values and strict AES-GCM decryption. Email SMTP and phone webhook delivery now prefer canonical secrets, fail closed on invalid canonical rows, and fall back to legacy data only when no canonical row exists. The reader is rollout-gated and enabled in production and test manifests."
    },
    {
      "id": "gh:pr:AceDataCloud/PlatformBackend#1790",
      "title": "Fix: accept reconciled legacy Site sections in Backend 🐛",
      "tags": [
        "github",
        "pr",
        "PlatformBackend"
      ],
      "public": false
    },
    {
      "id": "gh:pr:AceDataCloud/PlatformBackend#1782",
      "title": "Lay the encrypted Site Secret Vault foundation in Backend 🔐",
      "tags": [
        "github",
        "pr",
        "PlatformBackend",
        "security",
        "encryption",
        "site-secrets",
        "audit",
        "django"
      ],
      "public": false,
      "summary": "Adds canonical AES-256-GCM storage for Site secrets with purpose scoping, key IDs, revisions, write-back verification, and immutable audit events. Introduces a server-owned secret purpose registry, redacted secret wrappers, read-only admin metadata views, and a dry-run-by-default key rotation command. Adds migrations, contract coverage, and PostgreSQL-gated vault tests without changing existing Site APIs or production writers."
    },
    {
      "id": "gh:pr:AceDataCloud/Index#422",
      "title": "Unify Site secret storage and configuration planning in Index 🔐",
      "tags": [
        "github",
        "pr",
        "Index",
        "site-secrets",
        "vault",
        "oauth",
        "migration",
        "configuration",
        "security"
      ],
      "public": false,
      "summary": "Adds a comprehensive plan for canonical SiteSecret and immutable SiteSecretEvent storage, auditability, and encrypted provider credentials. It unifies Site management through existing GET/PATCH projections, defines typed provider registries, and separates public configuration from owner/admin views. The plan also details PR-0 through PR-10 delivery, migration safeguards, cleanup gates, testing, rollback floors, and key retirement procedures."
    },
    {
      "id": "gh:pr:AceDataCloud/PlatformService#2380",
      "title": "Fix: rebuild every shared proxy consumer in Platform Service 🐛",
      "tags": [
        "github",
        "pr",
        "PlatformService"
      ],
      "public": false
    },
    {
      "id": "gh:pr:AceDataCloud/PlatformBackend#1789",
      "title": "Retire legacy Site state safely in Backend 🧹",
      "tags": [
        "github",
        "pr",
        "PlatformBackend",
        "site",
        "migration",
        "cleanup",
        "backend"
      ],
      "public": false,
      "summary": "Removes the legacy Site metadata and index_sections state, compatibility projections, dual-write behavior, validators, and obsolete tests while preserving the physical columns for rolling-deployment safety. Adds a reconciliation-checking migration and keeps commerce, home, branding, and theme as the canonical configuration sources."
    },
    {
      "id": "gh:pr:AceDataCloud/FacilitatorX402#112",
      "title": "Refresh Python dependencies for improved compatibility in x402 🚀",
      "tags": [
        "github",
        "pr",
        "FacilitatorX402",
        "dependencies",
        "python",
        "x402",
        "security"
      ],
      "public": true,
      "url": "https://github.com/AceDataCloud/FacilitatorX402/pull/112",
      "summary": "Updates Django REST Framework, psycopg2-binary, x402, and the Tencent Cloud SDK to newer releases. The refresh includes validation fixes, improved malformed-input handling, path normalization updates, and expanded Python version support."
    },
    {
      "id": "gh:pr:AceDataCloud/Nexior#1758",
      "title": "Modernize site settings with canonical home and commerce data in Nexior 🚀",
      "tags": [
        "github",
        "pr",
        "Nexior",
        "site-settings",
        "home",
        "commerce",
        "api",
        "dns"
      ],
      "public": true,
      "url": "https://github.com/AceDataCloud/Nexior/pull/1758",
      "summary": "Adds homepage section orchestration and moves pricing and recharge settings to the canonical Site.commerce model. Site settings now use owned-field PATCH requests, legacy metadata helpers are removed, and DNS instructions rely on SiteDomain proxy CNAME snapshots. Comprehensive tests and build checks passed."
    },
    {
      "id": "gh:pr:AceDataCloud/PlatformFrontend#1439",
      "title": "Adopt canonical site commerce and branding schema in Frontend Web 🔗",
      "tags": [
        "github",
        "pr",
        "PlatformFrontend",
        "canonical-schema",
        "branding",
        "commerce",
        "dns",
        "validation"
      ],
      "public": false,
      "summary": "Migrates site pricing, Studio links, and ICP data from legacy metadata to canonical commerce and branding fields. Preserves sibling data in PATCH requests and uses proxy_cname as the authoritative DNS value. Adds a prebuild contract to prevent legacy schema usage from returning."
    },
    {
      "id": "gh:pr:AceDataCloud/PlatformBackend#1775",
      "title": "Canonicalize commerce, homepage, and DNS configuration in Backend 🚀",
      "tags": [
        "github",
        "pr",
        "PlatformBackend",
        "schema",
        "commerce",
        "homepage",
        "dns",
        "compatibility",
        "migration"
      ],
      "public": false,
      "summary": "Introduces closed Site.commerce and Site.home schemas with a fail-closed production migration and temporary legacy-wire compatibility. Moves pricing, recharge, homepage controls, and Nexior routing to canonical fields while making SiteDomain.proxy_cname the authoritative DNS snapshot. Adds focused regression coverage and CI verification for the new contracts."
    },
    {
      "id": "gh:pr:AceDataCloud/PlatformService#2379",
      "title": "Unify Claude and OpenAI tool dialects across the proxy bridge in Platform Service 🔧",
      "tags": [
        "github",
        "pr",
        "PlatformService",
        "tool-calling",
        "anthropic",
        "openai",
        "proxy",
        "sse"
      ],
      "public": false,
      "summary": "The shared Chat-to-Responses bridge now accepts Anthropic custom-tool declarations and maps tool-choice, parallel-use, forced-tool validation, calls, outputs, continuation, and SSE flows. OpenAI function and free-form custom tools remain supported, while aichat2 now preserves complete JSON Schemas instead of removing root combinators. Comprehensive unit, integration, live, and regression tests passed across github-proxy2, codex-proxy, aichat2, and the unchanged OpenAI worker."
    },
    {
      "id": "gh:pr:AceDataCloud/PlatformBackend#1781",
      "title": "Gemini pricing now reflects modality usage proportionally in Backend ⚖️",
      "tags": [
        "github",
        "pr",
        "PlatformBackend",
        "gemini",
        "pricing",
        "audio",
        "costs",
        "testing"
      ],
      "public": false,
      "summary": "Adds proportional Gemini modality pricing while keeping text, image, video, PDF, output, and ordinary cache rates unchanged. Audio input and cached audio use the documented 2× rates, with nested modality details treated as subsets to prevent double billing. Updates generated cost rules, usage schemas, documentation, and coverage across native Gemini and Chat Completions APIs."
    },
    {
      "id": "gh:pr:AceDataCloud/PlatformService#2378",
      "title": "Normalize Gemini modality usage for accurate billing in Platform Service 🧮",
      "tags": [
        "github",
        "pr",
        "PlatformService",
        "gemini",
        "billing",
        "usage-normalization",
        "openai"
      ],
      "public": false,
      "summary": "Gemini usage handling now maps native prompt and cache modality details into canonical TEXT, IMAGE, VIDEO, and AUDIO scalars while preserving the raw arrays. The normalized details are reused across non-streaming responses, terminal streaming, `/price`, and `/record`; audio requests warn instead of guessing when authoritative AUDIO usage is missing. Expanded tests cover the normalization behavior and related billing paths."
    },
    {
      "id": "gh:pr:AceDataCloud/MCPs#853",
      "title": "Bring back Maestro task history in M C Ps 🔎",
      "tags": [
        "github",
        "pr",
        "MCPs",
        "maestro",
        "task-history",
        "mcp",
        "api"
      ],
      "public": true,
      "url": "https://github.com/AceDataCloud/MCPs/pull/853",
      "summary": "Restored the read-only `maestro_list_tasks` tool using the documented `retrieve_batch` API. Added bounded exclusive time filters, hosted discovery and README updates, plus regression coverage for client delegation and schema behavior."
    },
    {
      "id": "gh:pr:AceDataCloud/PlatformBackend#1780",
      "title": "Restore Maestro task-history contracts in Backend 🔧",
      "tags": [
        "github",
        "pr",
        "PlatformBackend",
        "maestro",
        "openapi",
        "documentation",
        "testing"
      ],
      "public": false,
      "summary": "Documented the existing `retrieve_batch` Maestro task-history action in the authoritative OpenAPI contract with explicit single-task and history-list request variants. Updated the customer guide and added regression coverage for the history schema and free billing behavior. Runtime Maestro behavior remains unchanged."
    },
    {
      "id": "gh:pr:AceDataCloud/PlatformFrontend#1433",
      "title": "Show ACE Holder referral bonuses and settlement snapshots in Frontend Web ✨",
      "tags": [
        "github",
        "pr",
        "PlatformFrontend",
        "referrals",
        "ace-holder",
        "internationalization",
        "frontend",
        "validation"
      ],
      "public": false,
      "summary": "The distribution console now displays backend-authoritative ACE Holder referral terms, including base rate, applied percentage-point bonus, tier, final rate, and cap. History views use immutable settlement snapshots, preserve legacy fallback behavior, and hide preview data for blocked or invalid records. Added localized copy, type definitions, and a prebuild contract check to protect the referral UI behavior."
    }
  ]
}