Release v3.8.26 (#3875)

OmniRoute v3.8.26 — see CHANGELOG.md [3.8.26] for the full notes.

Highlights: Vertex AI media generation (#3929), GLM-5.2 effort-tier routing (#3885),
sticky round-robin combos (#3846), OpenRouter connection presets (#3878), compression
prompt-cache fix (#3936/#3890), and a security pass (form-data/vite + workflow hardening, #3949).

Co-authored-by: artickc <artickc@users.noreply.github.com>
Co-authored-by: rdself <rdself@users.noreply.github.com>
Co-authored-by: herjarsa <herjarsa@users.noreply.github.com>
Co-authored-by: Jack Smith <16862258+YunyunZhai@users.noreply.github.com>
Co-authored-by: dhaern <dhaern@users.noreply.github.com>
Co-authored-by: adivekar-utexas <adivekar-utexas@users.noreply.github.com>
Co-authored-by: megamen32 <megamen32@users.noreply.github.com>
Co-authored-by: zhiru <zhiru@users.noreply.github.com>
Co-authored-by: insoln <insoln@users.noreply.github.com>
Co-authored-by: diego-anselmo <diego-anselmo@users.noreply.github.com>

@omniroute/opencode-plugin/package.json

@@ -3,19 +3,16 @@
   "version": "0.1.0",
   "description": "OpenCode plugin for the OmniRoute AI Gateway. Drives dynamic model discovery, /connect auth flow, and multi-instance OmniRoute providers via the official @opencode-ai/plugin contract.",
   "type": "module",
-  "main": "./dist/index.cjs",
-  "module": "./dist/index.js",
+  "main": "./dist/index.js",
   "types": "./dist/index.d.ts",
   "exports": {
     ".": {
-      "import": {
-        "types": "./dist/index.d.ts",
-        "default": "./dist/index.js"
-      },
-      "require": {
-        "types": "./dist/index.d.cts",
-        "default": "./dist/index.cjs"
-      }
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js"
+    },
+    "./runtime": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js"
     }
   },
   "files": [

@omniroute/opencode-plugin/tests/combos.test.ts

@@ -639,3 +639,74 @@ test("models(): combos fetcher receives the resolved baseURL + apiKey", async ()
   await hook.models!({} as never, { auth: apiAuth("sk-spy") as never });
   assert.deepEqual(combosFetcher.callsBy()[0], ["https://or.example.com/v1", "sk-spy"]);
 });
+
+test("models(): nested combo-ref context is the min of nested + raw members", async () => {
+  // Top-level combo MASTER-LIGHT has 1 raw model (claude-primary, 200k)
+  // and 2 combo-refs: OldLLM (8k member) and KIRO (32k member). The OLD
+  // plugin would advertise 200k (only the raw model); the fix should
+  // make it advertise 8k (the bottleneck across the member graph).
+  const modelsFetcher = stubModelsFetcher([
+    MODEL_PRIMARY,
+    {
+      id: "oldllm-member-1",
+      context_length: 8_000,
+      max_output_tokens: 4_000,
+      capabilities: {
+        tool_calling: false,
+        reasoning: false,
+        vision: false,
+        thinking: false,
+        temperature: true,
+      },
+      input_modalities: ["text"],
+      output_modalities: ["text"],
+    },
+    {
+      id: "kiro-member-1",
+      context_length: 32_000,
+      max_output_tokens: 8_000,
+      capabilities: {
+        tool_calling: true,
+        reasoning: false,
+        vision: false,
+        thinking: false,
+        temperature: true,
+      },
+      input_modalities: ["text"],
+      output_modalities: ["text"],
+    },
+  ]);
+  const combosFetcher = stubCombosFetcher([
+    {
+      id: "oldllm",
+      name: "OldLLM",
+      models: [{ id: "s1", kind: "model", model: "oldllm-member-1", weight: 100 }],
+    },
+    {
+      id: "kiro",
+      name: "KIRO",
+      models: [{ id: "s1", kind: "model", model: "kiro-member-1", weight: 100 }],
+    },
+    {
+      id: "master-light",
+      name: "MASTER-LIGHT",
+      models: [
+        { id: "r1", kind: "model", model: "claude-primary", weight: 50 },
+        { id: "r2", kind: "combo-ref", comboName: "OldLLM", weight: 25 },
+        { id: "r3", kind: "combo-ref", comboName: "KIRO", weight: 25 },
+      ],
+    },
+  ]);
+  const hook = createOmniRouteProviderHook(
+    { baseURL: "https://or.example.com/v1" },
+    { fetcher: modelsFetcher, combosFetcher }
+  );
+  const out = await hook.models!({} as never, { auth: apiAuth("sk-z") as never });
+  const masterLight = out["combo/master-light"];
+  assert.ok(masterLight, "MASTER-LIGHT entry must exist");
+  assert.equal(
+    masterLight.limit.context,
+    8_000,
+    `expected 8_000 (OldLLM bottleneck), got ${masterLight.limit.context}`
+  );
+});

@omniroute/opencode-plugin/tests/config-shim.test.ts

@@ -1362,3 +1362,57 @@ test("config: providerTag is idempotent — second hook call doesn't double-suff
     .omniroute;
   assert.equal(entryB.models["claude-sonnet-4-6"].name, "Claude - Claude Sonnet 4.6");
 });
+
+// ────────────────────────────────────────────────────────────────────────────
+// T-NN: nested combo-ref resolution in the static catalog
+// (mirrors the dynamic-catalog fix in combos.test.ts)
+// ────────────────────────────────────────────────────────────────────────────
+
+test("buildStaticProviderEntry: nested combo-ref context is the bottleneck across the graph", () => {
+  const resolved = resolveOmniRoutePluginOptions({ providerId: "omniroute" });
+  const rawModels: OmniRouteRawModelEntry[] = [
+    {
+      id: "raw-big",
+      context_length: 200_000,
+      max_output_tokens: 64_000,
+      capabilities: { tool_calling: true, reasoning: true, vision: false, temperature: true },
+      input_modalities: ["text"],
+      output_modalities: ["text"],
+    },
+    {
+      id: "raw-tiny",
+      context_length: 8_000,
+      max_output_tokens: 4_000,
+      capabilities: { tool_calling: false, reasoning: false, vision: false, temperature: true },
+      input_modalities: ["text"],
+      output_modalities: ["text"],
+    },
+  ];
+  const rawCombos: OmniRouteRawCombo[] = [
+    {
+      id: "tiny-combo",
+      name: "TinyCombo",
+      models: [{ id: "m1", kind: "model", model: "raw-tiny", weight: 100 }],
+    },
+    {
+      id: "parent",
+      name: "Parent",
+      models: [
+        { id: "p1", kind: "model", model: "raw-big", weight: 50 },
+        { id: "p2", kind: "combo-ref", comboName: "TinyCombo", weight: 50 },
+      ],
+    },
+  ];
+  const block = buildStaticProviderEntry(
+    rawModels,
+    rawCombos,
+    resolved,
+    "https://or.example/v1",
+    "sk-test"
+  );
+  // Pre-fix: Parent would advertise 200_000 (only raw-big counted).
+  // Post-fix: Parent should advertise 8_000 (TinyCombo bottleneck).
+  const parent = block.models["combo/parent"];
+  assert.ok(parent, "Parent combo must be in the static catalog");
+  assert.equal(parent.limit?.context, 8_000);
+});

@omniroute/opencode-plugin/tsup.config.ts

@@ -2,7 +2,7 @@ import { defineConfig } from "tsup";
 
 export default defineConfig({
   entry: ["src/index.ts"],
-  format: ["esm", "cjs"],
+  format: ["esm"],
   dts: true,
   clean: true,
   sourcemap: false,
@@ -11,7 +11,7 @@ export default defineConfig({
   target: "node22",
   outDir: "dist",
   minify: false,
-  cjsInterop: true,
+  cjsInterop: false,
   // Bundle runtime deps so the .tgz / npm install is self-contained.
   // `zod` is required at runtime by the options schema and would otherwise
   // need a peer install when the plugin is loaded directly from a file path