[shunkakinoki]

Changes

• Make declared Kamino model families exclusive across credentials.
• Keep credentials with the same model_family eligible for that family.
• Exclude claimed families from unassigned credentials while preserving operator-authored exclusions.

Testing

• shellspec spec/cliproxyapi_spec.sh spec/kamino_fleet_spec.sh (99 examples, 0 failures)
• Nix evaluation/build of the Kamino package
• Bash syntax, ShellCheck, nixfmt, and diff checks

Follow-up to #3241.

---

Summary by cubic

Makes Kamino model families exclusive across credentials in cliproxy so a model family claimed by one credential is excluded from every other credential.

• A credential with model_family set still excludes the other families and remains eligible for its own family.
• Credentials without a model_family now receive exclusions for every family claimed by other credentials.
• Operator-authored exclusions in existing auth files are preserved alongside the new generated ones.
• Unknown model families still fail the render.
• Updates the spec to cover two credentials sharing a family and one unassigned credential.

^{Written for commit 8a03e3d. Summary will update on new commits.}

[indent]

Warning

This organization's free trial has ended, so Indent couldn't continue this review. Manage billing to resume reviews on this repository.

CI Checks

All required CI checks passed on 8a03e3d.

Review agents

Select any unchecked box below to run or rerun that agent.

Pending (1)

• Indent Review Agent · This agent has not run.

Full results

Indent Review Agent

• Summary: This agent has not run.
• Latest result

  No result — this agent has not run.

[coderabbitai]

Caution

Review failed

The pull request is closed.

Finishing Touches

📝 Generate docstrings

• Commit to this branch
• Create a new PR

🧪 Generate unit tests (beta)

• Commit to this branch
• Create a new PR

• Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[linear-code]

SHUN-33669

[pullfrog]

✅ No new issues found.

Reviewed changes

This PR makes Kamino model families exclusive across credentials in cliproxy. A credential with model_family set excludes all other families and remains eligible for its own. Credentials without model_family now receive exclusions for every family claimed by other credentials. Operator-authored exclusions are preserved.

• home-manager/services/cliproxyapi/README.md — docs updated to describe exclusive family behavior
• home-manager/services/cliproxyapi/scripts/start.sh — added model_family_exclusion() helper; apply_model_policies() now collects claimed families, validates them, applies per-family exclusions to assigned credentials (excluding other families only) and all-family exclusions to unassigned credentials
• spec/cliproxyapi_spec.sh — test updated to cover two Haiku-assigned credentials + one unassigned credential

  ^{｜ View workflow run ｜ Using free ｜ 𝕏}