chore: sync upstream dev by DevFlex-AI · Pull Request #137 · bolt-builder/bolt-cli

DevFlex-AI · 2026-08-02T17:30:07Z

Replaces the fork-sync PR #136, whose two failing checks cannot be fixed on that PR: its head branch lives in the upstream repo, which does not contain this repo's .deepsource.toml (added in 410ea95), so DeepSource re-flags JS-0067 on the route component, and Vercel refuses to deploy fork commits without manual authorization.

This PR merges the same three upstream commits into dev from a same-repo branch, so the head tree keeps the DeepSource config and Vercel deploys without authorization. Upstream changes: DeepSeek V4 Flash privacy copy (zero-day retention, monthly ZDR renewal valid through August 31, 2026) across all locales and docs, and a Gemini usage fix:

return {
  inputTokens: inputTokens - cacheReadTokens,
  outputTokens: outputTokens + reasoningTokens,
  reasoningTokens,
  cacheReadTokens,
  // ...
}

Merging this makes #136 redundant; it can be closed.

^{Need help on this PR? Tag @codesmith-bot with what you need. Autofix is enabled.}

Summary by CodeRabbit

Documentation
- Updated DeepSeek V4 Flash privacy details across supported languages: data is not used for training and is retained for 0 days.
- Added information that the zero-data-retention agreement renews monthly and is currently valid through August 31, 2026.
- Added translated FAQ coverage for the updated retention policy.
Bug Fixes
- Google usage reporting now includes reasoning tokens in total output-token counts while continuing to show them separately.

Co-authored-by: Codesmith <codesmith-bot@users.noreply.github.com>

vercel · 2026-08-02T17:30:15Z

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
bolt-cli-app	Ready	Preview	Aug 2, 2026 5:30pm

coderabbitai · 2026-08-02T17:30:48Z

📝 Walkthrough

Walkthrough

DeepSeek V4 Flash privacy metadata, FAQ translations, and localized documentation now show no training use, zero-day retention, and monthly ZDR validity through August 31, 2026. Google usage normalization now includes reasoning tokens in output totals.

Changes

DeepSeek privacy information

Layer / File(s)	Summary
FAQ metadata and localized retention text `packages/console/app/src/routes/go/index.tsx`, `packages/console/app/src/i18n/*`	The Go FAQ marks DeepSeek V4 Flash as not used for training with zero-day retention. It renders a localized note about the monthly ZDR renewal and validity through August 31, 2026.
Localized privacy documentation `packages/web/src/content/docs/*/go.mdx`	Localized privacy tables apply the same training and retention values and add the ZDR validity note.

Google usage normalization

Layer / File(s)	Summary
Reasoning token usage normalization `packages/console/app/src/routes/zen/util/provider/google.ts`	`normalizeUsage` adds reasoning tokens to `outputTokens` while retaining the separate `reasoningTokens` field.

Estimated code review effort: 2 (Simple) | ~10 minutes

Possibly related PRs

bolt-builder/bolt-cli#79: Updates the same DeepSeek V4 Flash privacy and retention areas.
bolt-builder/bolt-cli#82: Introduces related DeepSeek retention changes in the Go FAQ and documentation.
bolt-builder/bolt-cli#136: Modifies the same privacy, localization, FAQ, and Google usage normalization areas.

Suggested labels: :arrow_heading_down: pull

Suggested reviewers: fwang, mrmushrooooom

🚥 Pre-merge checks | ✅ 3 | ❌ 2

❌ Failed checks (2 warnings)

Check name	Status	Explanation	Resolution
Description check	⚠️ Warning	The description explains the changes and motivation but omits the required issue, change type, verification, screenshots, and checklist sections.	Add all required template sections, including the change type, verification steps, applicable screenshots, issue reference, and checklist.
Docstring Coverage	⚠️ Warning	Docstring coverage is 0.00% which is insufficient. The required threshold is 80.00%.	Write docstrings for the functions missing them to satisfy the coverage threshold.

✅ Passed checks (3 passed)

Check name	Status	Explanation
Title check	✅ Passed	The title accurately identifies the primary purpose: syncing upstream changes into the dev branch.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

✨ Finishing Touches 💡 1

📝 Generate docstrings 💡

Create stacked PR
Commit on current branch

🧪 Generate unit tests (beta)

Create PR with unit tests
Commit unit tests in branch sync-upstream-dev

Warning

There were issues while running some tools. Please review the errors and either fix the tool's configuration or disable the tool if it's a critical failure.

🔧 ESLint

If the error stems from missing dependencies, add them to the package.json file. For unrecoverable errors (e.g., due to private dependencies), disable the tool in the CodeRabbit configuration.

ESLint install failed. For unrecoverable errors, disable the tool in CodeRabbit configuration.

_{Comment @coderabbitai help to get the list of available commands.}

deepsource-io · 2026-08-02T17:31:02Z

DeepSource Code Review

We reviewed changes in 1e76722...edf177e on this pull request. Below is the summary for the review, and you can see the individual issues we found as inline review comments.

See full review on DeepSource ↗

PR Report Card

Overall Grade Focus Area: Reliability	Security Reliability Complexity Hygiene

Code Review Summary

Analyzer	Updated (UTC)	Details
JavaScript	Aug 2, 2026 5:30p.m.	Review ↗
Shell	Aug 2, 2026 5:30p.m.	Review ↗
Secrets	Aug 2, 2026 5:30p.m.	Review ↗
Docker	Aug 2, 2026 5:30p.m.	Review ↗
Python	Aug 2, 2026 5:30p.m.	Review ↗
CSS	Aug 2, 2026 5:30p.m.	Review ↗
Rust	Aug 2, 2026 5:30p.m.	Review ↗
Ruby	Aug 2, 2026 5:30p.m.	Review ↗
Swift	Aug 2, 2026 5:30p.m.	Review ↗
PHP	Aug 2, 2026 5:30p.m.	Review ↗
Lua	Aug 2, 2026 5:30p.m.	Review ↗
Java	Aug 2, 2026 5:30p.m.	Review ↗
Go	Aug 2, 2026 5:30p.m.	Review ↗
C & C++	Aug 2, 2026 5:30p.m.	Review ↗
Ansible	Aug 2, 2026 5:30p.m.	Review ↗
Apex	Aug 2, 2026 5:30p.m.	Review ↗
Elixir	Aug 2, 2026 5:30p.m.	Review ↗
Groovy	Aug 2, 2026 5:30p.m.	Review ↗
Objective-C	Aug 2, 2026 5:30p.m.	Review ↗
PowerShell	Aug 2, 2026 5:30p.m.	Review ↗
Terraform	Aug 2, 2026 5:30p.m.	Review ↗
VB.NET	Aug 2, 2026 5:30p.m.	Review ↗
SQL	Aug 2, 2026 5:30p.m.	Review ↗
Scala	Aug 2, 2026 5:30p.m.	Review ↗
Perl	Aug 2, 2026 5:30p.m.	Review ↗
Kotlin	Aug 2, 2026 5:30p.m.	Review ↗
Helm	Aug 2, 2026 5:30p.m.	Review ↗
Erlang	Aug 2, 2026 5:30p.m.	Review ↗
Dart	Aug 2, 2026 5:30p.m.	Review ↗
C#	Aug 2, 2026 5:30p.m.	Review ↗

Important

AI Review is run only on demand for your team. We're only showing results of static analysis review right now. To trigger AI Review, comment @deepsourcebot review on this thread.

coderabbitai

Actionable comments posted: 1

🤖 Prompt for all review comments with AI agents

Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

Inline comments:
In `@packages/web/src/content/docs/pl/go.mdx`:
- Around line 245-247: Update both new Polish notes in the documentation to use
the abbreviation “ZDR.” with a trailing period, including the occurrences in the
Grok 4.5 and DeepSeek V4 Flash entries.

🪄 Autofix (Beta)

Fix all unresolved CodeRabbit comments on this PR:

Push a commit to this branch (recommended)
Create a new PR with the fixes

ℹ️ Review info

⚙️ Run configuration

Configuration used: Repository UI

Review profile: CHILL

Plan: Pro Plus

Run ID: 96bd5785-a03e-4ea8-949f-cc6ad7da904d

📥 Commits

Reviewing files that changed from the base of the PR and between 1e76722 and edf177e.

📒 Files selected for processing (38)

packages/console/app/src/i18n/ar.ts
packages/console/app/src/i18n/br.ts
packages/console/app/src/i18n/da.ts
packages/console/app/src/i18n/de.ts
packages/console/app/src/i18n/en.ts
packages/console/app/src/i18n/es.ts
packages/console/app/src/i18n/fr.ts
packages/console/app/src/i18n/it.ts
packages/console/app/src/i18n/ja.ts
packages/console/app/src/i18n/ko.ts
packages/console/app/src/i18n/no.ts
packages/console/app/src/i18n/pl.ts
packages/console/app/src/i18n/ru.ts
packages/console/app/src/i18n/th.ts
packages/console/app/src/i18n/tr.ts
packages/console/app/src/i18n/uk.ts
packages/console/app/src/i18n/zh.ts
packages/console/app/src/i18n/zht.ts
packages/console/app/src/routes/go/index.tsx
packages/console/app/src/routes/zen/util/provider/google.ts
packages/web/src/content/docs/ar/go.mdx
packages/web/src/content/docs/bs/go.mdx
packages/web/src/content/docs/da/go.mdx
packages/web/src/content/docs/de/go.mdx
packages/web/src/content/docs/es/go.mdx
packages/web/src/content/docs/fr/go.mdx
packages/web/src/content/docs/go.mdx
packages/web/src/content/docs/it/go.mdx
packages/web/src/content/docs/ja/go.mdx
packages/web/src/content/docs/ko/go.mdx
packages/web/src/content/docs/nb/go.mdx
packages/web/src/content/docs/pl/go.mdx
packages/web/src/content/docs/pt-br/go.mdx
packages/web/src/content/docs/ru/go.mdx
packages/web/src/content/docs/th/go.mdx
packages/web/src/content/docs/tr/go.mdx
packages/web/src/content/docs/zh-cn/go.mdx
packages/web/src/content/docs/zh-tw/go.mdx

coderabbitai · 2026-08-02T17:33:29Z

 - **Grok 4.5:** ZDR wyłącza ważne funkcje API zależne od przechowywanych danych, w tym stanowy Responses API, Files and Collections oraz Batch API. [Dowiedz się więcej](https://docs.x.ai/developers/faq/security#what-is-zero-data-retention-zdr).
 - **GPT 5.6 Luna:** Dzienniki monitorowania nadużyć są generowane dla każdego użycia funkcji API i przechowywane przez maksymalnie 30 dni. [Dowiedz się więcej](https://developers.openai.com/api/docs/guides/your-data#data-retention-controls-for-abuse-monitoring).
+- **DeepSeek V4 Flash:** Umowa ZDR jest odnawiana co miesiąc. Obecna umowa obowiązuje do 31 sierpnia 2026 r.


📐 Maintainability & Code Quality | 🟡 Minor | ⚡ Quick win

Use the Polish abbreviation form ZDR. in the new notes.

The language check flags both occurrences. Add the period to match the Polish abbreviation convention.

🧰 Tools

🪛 LanguageTool

[misspelling] ~245-~245: Ten skrót piszemy z kropką: "ZDR."
Context: ...ne | 0 dni | - Grok 4.5: ZDR wyłącza ważne funkcje API zależne od pr...

(SKROTY_Z_KROPKA)

[misspelling] ~247-~247: Ten skrót piszemy z kropką: "ZDR."
Context: ...toring). - DeepSeek V4 Flash: Umowa ZDR jest odnawiana co miesiąc. Obecna umowa...

(SKROTY_Z_KROPKA)

🤖 Prompt for AI Agents

Verify each finding against current code. Fix only still-valid issues, skip the rest with a brief reason, keep changes minimal, and validate. In `@packages/web/src/content/docs/pl/go.mdx` around lines 245 - 247, Update both new Polish notes in the documentation to use the abbreviation “ZDR.” with a trailing period, including the occurrences in the Grok 4.5 and DeepSeek V4 Flash entries.

Source: Linters/SAST tools

"ZDR" is an initialism (skrótowiec) for Zero Data Retention, and Polish initialisms (like NATO, PKB, ZUS) take no period; the LanguageTool SKROTY_Z_KROPKA rule is a false positive here. The text also mirrors upstream copy synced by this PR.

Skipped: comment is from another GitHub bot.

MrMushrooooom and others added 4 commits August 2, 2026 11:35

docs(go): update DeepSeek privacy policy (anomalyco#40120)

0891ecd

chore: generate

01624c8

fix gemini reasoning tokens not counted

1882c33

chore: sync upstream dev

edf177e

Co-authored-by: Codesmith <codesmith-bot@users.noreply.github.com>

vercel Bot deployed to Preview August 2, 2026 17:30 View deployment

github-actions Bot assigned DevFlex-AI Aug 2, 2026

coderabbitai Bot reviewed Aug 2, 2026

View reviewed changes

DevFlex-AI merged commit 5115b2c into dev Aug 2, 2026
52 of 53 checks passed

Navigation Menu

Uh oh!

chore: sync upstream dev - #137

chore: sync upstream dev#137
DevFlex-AI merged 4 commits into
devfrom
sync-upstream-dev

DevFlex-AI commented Aug 2, 2026 •

edited by coderabbitai Bot

Loading

Uh oh!

vercel Bot commented Aug 2, 2026 •

edited

Loading

Uh oh!

coderabbitai Bot commented Aug 2, 2026 •

edited

Loading

Walkthrough

Changes

❌ Failed checks (2 warnings)

Uh oh!

deepsource-io Bot commented Aug 2, 2026 •

edited

Loading

Uh oh!

coderabbitai Bot left a comment

Uh oh!

coderabbitai Bot Aug 2, 2026 •

edited

Loading

Uh oh!

blacksmith-sh Bot Aug 2, 2026

Uh oh!

coderabbitai Bot Aug 2, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

Uh oh!

Conversation

DevFlex-AI commented Aug 2, 2026 • edited by coderabbitai Bot Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Summary by CodeRabbit

Uh oh!

vercel Bot commented Aug 2, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

coderabbitai Bot commented Aug 2, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Walkthrough

Changes

❌ Failed checks (2 warnings)

Uh oh!

deepsource-io Bot commented Aug 2, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

DeepSource Code Review

PR Report Card

Code Review Summary

Uh oh!

coderabbitai Bot left a comment

Choose a reason for hiding this comment

Uh oh!

coderabbitai Bot Aug 2, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Choose a reason for hiding this comment

Uh oh!

blacksmith-sh Bot Aug 2, 2026

Choose a reason for hiding this comment

Uh oh!

coderabbitai Bot Aug 2, 2026

Choose a reason for hiding this comment

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

DevFlex-AI commented Aug 2, 2026 •

edited by coderabbitai Bot

Loading

vercel Bot commented Aug 2, 2026 •

edited

Loading

coderabbitai Bot commented Aug 2, 2026 •

edited

Loading

deepsource-io Bot commented Aug 2, 2026 •

edited

Loading

coderabbitai Bot Aug 2, 2026 •

edited

Loading