Track auth-origin and Pro API key fingerprint in usage analytics#424

Merged

akolotov merged 26 commits into

mainfrom

claude/gallant-bhabha-02b53a

Jul 2, 2026

Commits on Jun 30, 2026

Commits on Jul 1, 2026

Address review: harden auth-signal derivation, drop redundant validator, strengthen tests

akolotov
and
claude
committed
Consolidate auth-signal derivation into a single gated helper

akolotov
and
claude
committed

Commits on Jul 2, 2026

Address code review on auth-origin/fingerprint usage analytics

akolotov
and
claude
committed
test: pin disable_community_telemetry in auth-signal tests

akolotov
and
claude
committed
Address review: drop harmful auth_origin ctx re-derivation fallback

akolotov
and
claude
committed
Address review: memoize server-key fingerprint, drop include_server_fingerprint

akolotov
and
claude
committed
Tolerate unrecognized auth_origin instead of 422-ing the report

akolotov
and
claude
committed
Address review: single source of truth for key precedence

akolotov
and
claude
committed
Address review: trim SPEC/AGENTS docs per documentation rules

akolotov
and
claude
committed
test: dedupe PRO API key ctx builders and fingerprint assertions

akolotov
and
claude
committed
Address review: drop redundant .encode("utf-8") and UP012 noqas

akolotov
and
claude
committed
Avoid logging swapped-in secrets in auth_origin coercion

akolotov
and
claude
committed
Simplify auth_origin coercion logging to type/len only

akolotov
and
claude
committed
Centralize auth-signal gate in a single telemetry predicate

akolotov
and
claude
committed
test: address review comments 4-6 (docs, helper reuse, dedup)

akolotov
and
claude
committed
Address code review comment

akolotov
and
coderabbitai[bot]
authored