3 Commits

Author	SHA1	Message	Date
oyi77	158fb1a806	test(executors): adapt remaining 35 suites to the async lazy registry (round 2) ... Round 1 only covered suites importing from executors/index.ts directly; suites importing getExecutor through other paths (open-sse root re-export, dynamic imports inside tests) still called it synchronously, producing Promise-vs-instance assertion failures in CI (e.g. providers-yuanbao-web 'instanceof YuanbaoWebExecutor' false). Sweep method: repo-wide scan for un-awaited getExecutor call sites, adapted mechanically (await + async callbacks + Response|{response} union narrowing); assert.rejects guards with promise-returning callbacks verified correct as-is. Locally verified green: providers-yuanbao-web, ninerouter-executor, provider-request-failure-pipeline, provider-limits-accesstoken-fallback, executor-registry, chatcore-executor-proxy, poe-api-executor-regression, web-cookie-providers-new (113/113).	2026-08-24 21:44:23 -03:00
Paijo	1344843a45	fix(security): use crypto.randomInt/randomUUID in chipotle + URL parser in test (#3285) ... Integrated into release/v3.8.12. CodeQL hardening on the Chipotle executor: Math.random → crypto.randomInt/randomUUID, and a strict URL hostname check in the test. Fixed the node:crypto import (crypto.randomInt is not on the Web Crypto global → would crash at WS-connect) and added a regression guard exercising both helpers.	2026-06-06 04:16:51 -03:00
Paijo	2db8de8232	feat(provider): add Chipotle Pepper AI — free provider via reverse-engineered Amelia protocol (#3250) ... Add Chipotle Pepper AI free provider (Amelia protocol); sanitize executor error body (#12). Integrated into release/v3.8.12. Thanks @oyi77.	2026-06-06 00:27:41 -03:00