🐛 let the public health report complete in the k3d smoke

apps/_infra/deploy-k8s/Chart.lock

@@ -10,7 +10,7 @@ dependencies:
   version: 0.9.2
 - name: opencrane-channel-proxy
   repository: file://../../channel-proxy/helm
-  version: 0.8.0
+  version: 0.9.2
 - name: opencrane-memory-gateway
   repository: file://../../memory-gateway/helm
   version: 0.9.2
@@ -44,5 +44,5 @@ dependencies:
 - name: opencrane-obot
   repository: file://../obot/helm
   version: 0.8.0
-digest: sha256:d347d03ec3086ce5bd1c7b903420b0d97e3c827defa04a16d546253bffa7fb89
-generated: "2026-08-19T12:01:32.536381+03:00"
+digest: sha256:1670f21eb5487abeb34dcdf54087c3d14694d50bc432e6bee44d69a9cd46e951
+generated: "2026-08-19T15:41:04.77927+03:00"

apps/_infra/deploy-k8s/Chart.yaml

@@ -30,7 +30,7 @@ dependencies:
     version: 0.9.2
     repository: "file://../../opencrane-ui/helm"
   - name: opencrane-channel-proxy
-    version: 0.8.0
+    version: 0.9.2
     repository: "file://../../channel-proxy/helm"
   - name: opencrane-memory-gateway
     version: 0.9.2

apps/_infra/deploy-k8s/platform/tests/develop-smoke.sh

@@ -481,6 +481,10 @@ export OPENCRANE_OIDC_SESSION_SECRET="$(_random_secret)"
 # production deploy path still requires a UI digest; this explicit escape keeps the smoke honest.
 export OPENCRANE_ALLOW_TAG_FLOAT=1
 export TIMEOUT_SECONDS
+# The public health report only turns "models" available once LiteLLM lists a routable model.
+# Seeding the initial provider with a placeholder key is safe here: registration writes the
+# LiteLLM model row without calling the provider, and the health probe lists the estate.
+export OPENCRANE_INITIAL_MODEL_API_KEY="sk-develop-smoke-placeholder"
 # Exercise the production wrapper's required contact and first-owner inputs. The disposable `.test`
 # host cannot complete public ACME, so the final --set flags deliberately restore its local issuer.
 "$ROOT_DIR/apps/_infra/deploy-k8s/deploy.sh" \
@@ -492,6 +496,7 @@ export TIMEOUT_SECONDS
   --release "$RELEASE_NAME" \
   --release-version "$(jq -r '.version' "$ROOT_DIR/package.json")" \
   --from-release-version fresh \
+  --initial-model-provider openai \
   --image-tag develop-smoke \
   --cognee-tag develop-smoke \
   --storage-class "$SMOKE_STORAGE_CLASS" \

apps/channel-proxy/helm/Chart.yaml

@@ -2,5 +2,5 @@ apiVersion: v2
 name: opencrane-channel-proxy
 description: App-owned named-template library for the channel trust boundary.
 type: library
-version: 0.8.0
-appVersion: "0.8.0"
+version: 0.9.2
+appVersion: "0.9.2"

apps/channel-proxy/helm/migrations/0.8.0-to-0.9.2.json

@@ -0,0 +1,5 @@
+{
+  "fromChartVersion": "0.8.0",
+  "toChartVersion": "0.9.2",
+  "kind": "noop"
+}

apps/channel-proxy/helm/templates/_resources.tpl

@@ -144,6 +144,16 @@ spec:
       ports:
         - protocol: TCP
           port: {{ .Values.channelProxy.service.port }}
+    # The public health report probes channel readiness from the server, so the server's
+    # matching egress rule needs this ingress counterpart before any packet is admitted.
+    - from:
+        - podSelector:
+            matchLabels:
+              {{- include "opencrane.selectorLabels" . | nindent 14 }}
+              app.kubernetes.io/component: opencrane-server
+      ports:
+        - protocol: TCP
+          port: {{ .Values.channelProxy.service.port }}
   egress:
     # OpenCrane is the only application authority the channel boundary may resolve through.
     - to:

apps/channel-proxy/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@opencrane/channel-proxy",
-  "version": "0.8.0",
+  "version": "0.9.2",
   "private": true,
   "license": "AGPL-3.0-or-later",
   "type": "module",

apps/channel-proxy/project.json

@@ -2,7 +2,7 @@
   "name": "channel-proxy",
   "$schema": "../../node_modules/nx/schemas/project-schema.json",
   "projectType": "application",
-  "metadata": { "release": { "adaptedVersion": "0.8.0" } },
+  "metadata": { "release": { "adaptedVersion": "0.9.2" } },
   "sourceRoot": "apps/channel-proxy/src",
   "tags": ["type:app", "layer:entrypoint", "scope:app"],
   "targets": {

releases/0.9.2.json

@@ -52,10 +52,10 @@
     },
     "channel-proxy": {
       "root": "apps/channel-proxy",
-      "adaptedVersion": "0.8.0",
-      "packageVersion": "0.8.0",
-      "chartVersion": "0.8.0",
-      "chartAppVersion": "0.8.0"
+      "adaptedVersion": "0.9.2",
+      "packageVersion": "0.9.2",
+      "chartVersion": "0.9.2",
+      "chartAppVersion": "0.9.2"
     },
     "cognee": {
       "root": "apps/_infra/cognee",