pjandro/OmniRoute
1
0
Fork 0
mirror of https://github.com/diegosouzapw/OmniRoute.git synced 2026-08-06 23:32:12 +03:00
Code Issues Packages Projects Releases Wiki Activity

refactor: replace any types with generics and add Zod validation schemas

Browse Source 
Eliminate `any` usage across the codebase by introducing proper generics,
typed interfaces (StatementLike, DbLike, PromptRow, etc.), and helper
conversion functions (toNumber, toString, parseVariables). Add
comprehensive Zod validation schemas for API endpoint inputs to enforce
runtime type safety alongside compile-time checks.
This commit is contained in:
diegosouzapw
2026-03-04 18:59:27 -03:00
parent 3510d8c0bc
commit 052eb8d330
23 changed files with 2678 additions and 245 deletions
Download Patch File Download Diff File Expand all files Collapse all files

20
src/shared/utils/apiKeyPolicy.ts
View File

@@ -20,6 +20,7 @@ export interface ApiKeyMetadata {
id: string;
name?: string;
allowedModels?: string[];
noLog?: boolean;
budget?: number;
usedBudget?: number;
[key: string]: unknown;
@@ -68,9 +69,13 @@ export async function enforceApiKeyPolicy(
try {
apiKeyInfo = await getApiKeyMetadata(apiKey);
} catch (error) {
// If metadata fetch fails, don't block — degrade gracefully, but log for debugging
log.warn("API_POLICY", "Failed to fetch API key metadata. Request will be allowed.", { error });
return { apiKey, apiKeyInfo: null, rejection: null };
// Fail-closed: if policy backend fails, reject the request
log.error("API_POLICY", "Failed to fetch API key metadata. Request blocked.", { error });
return {
apiKey,
apiKeyInfo: null,
rejection: errorResponse(HTTP_STATUS.SERVICE_UNAVAILABLE, "API key policy unavailable"),
};
}
// Key not found in DB — skip policy (auth layer handles validation)
@@ -108,8 +113,13 @@ export async function enforceApiKeyPolicy(
};
}
} catch (error) {
// Budget check is best-effort — don't block on errors, but log them
log.warn("API_POLICY", "Budget check failed. Request will be allowed.", { error });
// Fail-closed: budget backend error should block request
log.error("API_POLICY", "Budget check failed. Request blocked.", { error });
return {
apiKey,
apiKeyInfo,
rejection: errorResponse(HTTP_STATUS.SERVICE_UNAVAILABLE, "Budget policy unavailable"),
};
}
}