WINDSURFAPI 3.9.24–3.9.26: SAFER OPENAI-COMPAT PROXY, REAL ABORTS, STRICTER DEFAULTS, AND SANER TOKEN HANDLING
WindsurfAPI’s 3.9.24–3.9.26 patches harden its OpenAI-compatible proxy with metadata filtering, true client aborts, stricter defaults, and robust token parsing....
WindsurfAPI’s 3.9.24–3.9.26 patches harden its OpenAI-compatible proxy with metadata filtering, true client aborts, stricter defaults, and robust token parsing.
In v3.9.24, the proxy stops leaking Cascade panel-state frames to clients like Cursor, stabilizes /v1/models timestamps, and makes unsupported logprobs a clear 400 instead of silently succeeding. It also stamps service_tier on chat completions and keeps ACU decoding opt-in.
v3.9.25 makes non-streaming routes actually abort upstream work on client disconnect (messages, Gemini, responses). It aligns the default model to claude-sonnet-4.6 and clarifies that no key still means 401 unless explicitly allowed.
v3.9.26 fixes token paste classification to avoid misrouting secrets through RegisterUser, surfaces real error messages instead of a generic “Add failed,” and prevents a 401 from blanking the account list.
Stricter behavior (metadata filtering, logprobs 400, fail-closed auth) reduces accidental data exposure and mismatched client expectations.
Real upstream aborts cut wasted compute when clients disconnect mid-request.
-
terminal
Simulate client disconnects on non-streaming /messages, Gemini, and /v1/responses and verify upstream is aborted promptly.
-
terminal
Send non-default logprobs/top_logprobs and confirm 400; validate model list timestamps stay stable across polling.
Legacy codebase integration strategies...
- 01.
Audit clients relying on silent logprobs behavior or legacy Completions streaming; fix any assumptions that now error.
- 02.
Confirm deployments aren’t assuming empty API_KEY means open access; recheck default model resolution and strict model mapping.
Fresh architecture paradigms...
- 01.
Start with fail-closed auth and strict model mapping; prefer claude-sonnet-4.6 for default alignment.
- 02.
Keep ACU decoding off unless you set explicit billing tags and need usage telemetry.
Get daily OPENAI + SDLC updates.
- Practical tactics you can ship tomorrow
- Tooling, workflows, and architecture notes
- One short email each weekday