[pull] main from danny-avila:main#147

Merged

pull[bot] merged 12 commits into

innFactory:mainfrom

danny-avila:main

May 30, 2026

Commits on May 30, 2026

🖼️ fix: Preserve Model Spec Icon URLs (#13370)
danny-avila
authored
🪪 feat: MCP OAuth - Support `audience` parameter for Auth0/Cognito-style providers (#13402)

authored
🔑 fix: support 'userinfo' in OPENID_REQUIRED_ROLE_TOKEN_KIND (#13182)
pboers1988
authored
🪪 fix: Preserve Trusted Registration Provider Overrides (#13307)
danny-avila
authored
💠 feat: Extend `thinkingLevel` Support to Gemma 4 Models (#13088)
King-of-Infinite-Space
authored
✂️ chore: Strip Session JWT Forwarding from Browser RUM (#13414)
danny-avila
authored
💰 fix: Load app config in `set-balance` script to respect balance settings (#12669)

ucodia
and
claude
authored
📬 fix: Honor Admin-Panel `allowedDomains` Override at Registration (#13204)

nangelovv
and
danny-avila
authored
📦 chore: Bump `@hyperdx/browser` to v0.24.0 (#13416)
danny-avila
authored
🔧 chore: Drop duplicate `getAppConfig` import in `set-balance.js` (#13417)
danny-avila
authored
🔒 fix: Strip post-login fields from unauthenticated /api/config response (#13102)

ChrisJr404
and
danny-avila
authored
🏟️ fix: Restrict MCP OAuth Audience in User-Managed Configs (#13418)
danny-avila
authored