pjandro/OmniRoute
1
0
Fork 0
mirror of https://github.com/diegosouzapw/OmniRoute.git synced 2026-07-26 09:52:11 +03:00
Code Issues Packages Projects Releases Wiki Activity

fix: sanitizeUsage cross-maps input_tokens→prompt_tokens; update yaml vulnerability (#617)

Browse Source
This commit is contained in:
diegosouzapw
2026-03-25 23:53:29 -03:00
parent 65833f1ae0
commit e3f016e262
2 changed files with 14 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

11
open-sse/handlers/responseSanitizer.ts
View File

@@ -231,6 +231,17 @@ function sanitizeUsage(usage: unknown): unknown {
if (!usageRecord) return usage;
const sanitized: JsonRecord = {};
// Cross-map Claude-style → OpenAI-style field names.
// Some providers return input_tokens/output_tokens instead of prompt_tokens/completion_tokens.
// Without this mapping, the whitelist filter below strips them, resulting in NaN/0 tokens (#617).
if (usageRecord.input_tokens !== undefined && usageRecord.prompt_tokens === undefined) {
usageRecord.prompt_tokens = usageRecord.input_tokens;
}
if (usageRecord.output_tokens !== undefined && usageRecord.completion_tokens === undefined) {
usageRecord.completion_tokens = usageRecord.output_tokens;
}
for (const key of ALLOWED_USAGE_FIELDS) {
if (usageRecord[key] !== undefined) {
sanitized[key] = usageRecord[key];

6
package-lock.json generated
View File

@@ -19810,9 +19810,9 @@
"license": "ISC"
},
"node_modules/yaml": {
"version": "2.8.2",
"resolved": "https://registry.npmjs.org/yaml/-/yaml-2.8.2.tgz",
"integrity": "sha512-mplynKqc1C2hTVYxd0PU2xQAc22TI1vShAYGksCCfxbn/dFwnHTNi1bvYsBTkhdUNtGIf5xNOg938rrSSYvS9A==",
"version": "2.8.3",
"resolved": "https://registry.npmjs.org/yaml/-/yaml-2.8.3.tgz",
"integrity": "sha512-AvbaCLOO2Otw/lW5bmh9d/WEdcDFdQp2Z2ZUH3pX9U2ihyUY0nvLv7J6TrWowklRGPYbB/IuIMfYgxaCPg5Bpg==",
"dev": true,
"license": "ISC",
"bin": {