Commit Graph

4934 Commits

Author SHA1 Message Date
diegosouzapw
20cb648ea9 docs(docs): expand v3.8.0 guides and add provider reference generator
Refresh the documentation set for v3.8.0 with new guides covering
authz, agent protocols, cloud agents, compliance, electron, evals,
guardrails, memory, skills, stealth, tunnels, webhooks, and more.

Add an auto-generated provider reference plus a
`gen:provider-reference` script to keep provider catalog docs aligned
with `src/shared/constants/providers.ts`.
2026-05-13 03:47:41 -03:00
diegosouzapw
204e15628c chore(release): prepare v3.8.0 docs and coverage ratchet
Refresh the v3.8.0 documentation set across API, setup, Docker,
environment, Fly.io, VM deployment, and troubleshooting guides.

Document the updated budget payload, management-auth requirements,
WebSocket bridge secret, Compose profiles, production deployment
details, and expanded Node support. Also update the OpenAPI catalog,
raise coverage thresholds to match the current baseline, and align
cloud-agent task route typing and schemas with the stricter runtime
behavior.
2026-05-13 03:47:40 -03:00
diegosouzapw
46e5aa5522 refactor(api): consolidate auth routing and provider config handling
Centralize optional API key capability checks so dashboard forms and
provider schemas share the same rules, including keyless Pollinations
support and cloud-agent batch testing mode.

Also align auto-combo config on `routerStrategy`, keep legacy combo
reads compatible, preserve MCP routes as management APIs, narrow
`require-login` public access to readonly/bootstrap flows, and make
cloud-agent CORS reflect the request origin for credentialed requests.
2026-05-13 03:47:40 -03:00
diegosouzapw
c89663d774 fix(auth): require management auth for agent and cooldown APIs
Protect cloud agent task routes and model cooldown management endpoints
with management-session auth and consistent CORS handling.

Also align cloud agent API serialization with the dashboard, reuse the
provider connection schema for CLI key storage, and accept active OAuth
tokens when building virtual auto-combo candidates.
2026-05-13 03:47:40 -03:00
Diego Rodrigues de Sa e Souza
20b35c4d20 security: sanitize error messages in API routes (CodeQL js/stack-trace-exposure)
Integrated into release/v3.8.0
2026-05-12 23:23:07 -03:00
dependabot[bot]
6fa2d5e84f deps: bump electron from 41.5.1 to 42.0.1 in /electron
Integrated into release/v3.8.0
2026-05-12 23:22:14 -03:00
dependabot[bot]
dbe9d84649 deps: bump Docker node from 24.15.0 to 26.1.0-trixie-slim
Integrated into release/v3.8.0
2026-05-12 23:21:28 -03:00
dependabot[bot]
9e49baefa4 deps: bump production group (http-proxy-middleware 3→4, next-intl 4.11.2)
Integrated into release/v3.8.0
2026-05-12 23:20:45 -03:00
dependabot[bot]
75b979282f deps: bump the development group with 6 updates (#2184)
Merged into release/v3.8.0. Dev dependency updates: Playwright 1.60, lint-staged 17 (major — Node 22+ compatible), typescript-eslint, vitest, wait-on.
2026-05-12 22:42:53 -03:00
dependabot[bot]
e354d942e3 deps: bump electron-builder from 26.9.1 to 26.10.0 in /electron (#2183)
Merged into release/v3.8.0. Minor electron-builder bump (26.9→26.10) with pnpm 11 support and AppImage fixes.
2026-05-12 22:41:00 -03:00
Ramel Tecnologia - Rafa Martins
c53587ef2d Add Brazilian WhatsApp group link to README (#2201)
Merged into release/v3.8.0 — aligned workflow files and lockfile with release branch, fixed trailing space in WhatsApp URL. Thanks @rafacpti23!
2026-05-12 22:35:20 -03:00
diegosouzapw
d94b6b5012 chore(agents): rename capture release evidences skill identifier 2026-05-12 22:13:15 -03:00
diegosouzapw
15d6fc35da fix(ci): run coverage gate serially 2026-05-12 21:44:06 -03:00
diegosouzapw
da982d31be fix(ci): align resilience and thinking checks 2026-05-12 20:44:23 -03:00
diegosouzapw
a260795327 fix(ci): align cloud code thinking and model catalog tests 2026-05-12 20:28:02 -03:00
diegosouzapw
4f20fbc36c fix(api): validate model cooldown delete payload 2026-05-12 20:11:45 -03:00
diegosouzapw
4ac6e58360 chore(deps): refresh mermaid lockfile for audit 2026-05-12 20:05:06 -03:00
Dohyun Jung
fc620514a9 feat(providers): add Command Code provider (#2199)
Integrated into release/v3.8.0 after syncing the contributor branch, removing unrelated workflow/package-lock changes, and validating Command Code provider, auth, validation, and Responses coverage locally.
2026-05-12 19:57:35 -03:00
InkshadeWoods
e6aee3d26c feat: add ModelScope provider-specific 429 handling and retry logic (#2202)
Integrated into release/v3.8.0 after syncing the contributor branch, removing unrelated workflow/docker/package-lock changes, tightening ModelScope 429 classification, and validating policy coverage locally.
2026-05-12 19:57:26 -03:00
nickwizard
061c0c29fe Feat/provider models (#2196)
Integrated into release/v3.8.0 after syncing the contributor branch, removing unrelated workflow/docker/package-lock changes, and validating provider-scoped models coverage locally.
2026-05-12 19:57:15 -03:00
backryun
af7d056f7e chore(providers): improve BazaarLink and Completions.me support (#2177)
Integrated into release/v3.8.0 after syncing the contributor branch, removing unrelated dependency churn, and validating executor/default URL coverage locally.
2026-05-12 19:57:06 -03:00
Anton
a408b30896 fix(cliproxyapi): probe /v1/models for health (CPA 6.x has no /health) (#2189)
Integrated into release/v3.8.0 after syncing the contributor branch and validating tests/unit/cliproxyapi-executor.test.ts locally.
2026-05-12 19:50:07 -03:00
Anton
13f7ebce5a fix(stream): skip [DONE] terminator for Claude SSE clients (#2190)
Integrated into release/v3.8.0 after syncing the contributor branch and validating tests/unit/stream-utils.test.ts locally.
2026-05-12 19:49:59 -03:00
Anton
5c11b57542 fix(claudeHelper): emit data field on redacted_thinking, drop bogus signature (#2191)
Integrated into release/v3.8.0 after syncing the contributor branch and validating tests/unit/translator-claude-helper-thinking.test.ts locally.
2026-05-12 19:49:50 -03:00
Anton
340f68bbee fix(modelSpecs): cap thinking budget for Claude Opus 4.6 / 4.7 / Sonnet 4.6 (#2197)
Integrated into release/v3.8.0 after syncing the contributor branch and validating tests/unit/thinking-budget.test.ts locally.
2026-05-12 19:44:45 -03:00
Anton
b23b624f82 fix(reasoning-cache): include xiaomi-mimo in replay provider/model detection (#2198)
Integrated into release/v3.8.0 after syncing the contributor branch and validating tests/unit/reasoning-cache.test.ts locally.
2026-05-12 19:43:58 -03:00
Anton
607ae5ca5e fix(cliproxyapi): detect Anthropic shape on minimal Capy bodies (#2192)
Integrated into release/v3.8.0 after syncing the contributor branch and validating tests/unit/cliproxyapi-executor.test.ts locally.
2026-05-12 19:43:04 -03:00
diegosouzapw
007e19fe30 refactor(workflows): align agent and claude workflow naming
Rename skill identifiers to their Codex-specific variants and move
workflow command files to the new `-ag` and `-cc` naming scheme.

Mirror the workflow guides under both `.agents/workflows` and
`.claude/commands` so the same operational playbooks are available
through each command surface.
2026-05-12 17:38:53 -03:00
diegosouzapw
5455bf9b77 docs(agents): clarify Codex execution guards in skill guides
Document explicit Codex handling for `// turbo` and `// turbo-all`
across deployment, release, issue, PR, discussion, and versioning
skills.

Add hard-stop approval guidance so report phases end before any
implementation, merge, publish, or deployment actions continue, and
spell out parallelism limits for independent versus dependent steps.
2026-05-12 17:07:02 -03:00
diegosouzapw
a6d4c012ae feat(agents): add release, deployment, and triage workflows
Add new agent skills and Claude command definitions for release
generation, VPS deployment, issue triage, PR review, discussion
review, feature implementation, and version bump workflows.

These additions document and standardize internal maintenance
operations across the release branch process and operational tooling.
2026-05-12 16:31:08 -03:00
diegosouzapw
4f87062f3e fix(tests): update test snapshots and registry for PRs merged into v3.8.0
- providerModels: supportsXHighEffort returns true for unknown providers
  (passthrough) so PR #2162 sanitizeReasoningEffortForProvider no longer
  downgrades xhigh for non-registry custom providers
- providerRegistry(openai): add gpt-4o + gpt-4o-2024-11-20 with explicit
  contextLength so catalog tests can resolve them without synced DB data
- context-manager.test: update GPT-5.5 Codex expected context 1050000→400000
  (PR #2163 capped codex OAuth context at 400K)
- provider-models-config.test: update kiro claude-opus-4.7 contextLength
  undefined→1000000 (PR #2163 added explicit context window)
- oauth-providers-config.test: add windsurf and devin-cli to expected
  provider keys and config map (PR #2168)

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-05-12 15:05:00 -03:00
diegosouzapw
be76707452 fix(cliRuntime): resolve TDZ for isWindows in devin config via lazy getter, add spawn metachar guard
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-05-11 22:22:26 -03:00
diegosouzapw
08b95863a2 chore(release): update CHANGELOG.md with v3.8.0 unreleased entries for PRs #2146, #2161-2168, #2176
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-05-11 21:59:24 -03:00
Andrew Munsell
ed1554b7a1 feat(search): add Ollama Search as a web search provider (#2176)
Integrated into release/v3.8.0 — adds Ollama Search as a web search provider.
2026-05-11 21:54:34 -03:00
diegosouzapw
dd51a261e0 Merge branch 'release/v3.8.0' into feature/ollama-search-provider 2026-05-11 21:49:56 -03:00
Aleksandr
ff730b372e feat(oauth): complete Windsurf / Devin CLI OAuth + API-token flows (#2168)
Integrated into release/v3.8.0 — complete Windsurf/Devin CLI OAuth + API-token executor flows with unit tests.
2026-05-11 21:49:32 -03:00
diegosouzapw
08d88d40a5 test(executors): add unit tests for Windsurf model alias map, message conversion, gRPC-web frame parser, and Devin CLI binary resolution
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-05-11 21:46:16 -03:00
Ramel Tecnologia
95944dad92 feat(resilience): expose model cooldown list with manual re-enable (#2146)
Integrated into release/v3.8.0 — adds model cooldowns dashboard card with real-time list and re-enable action. Domain module and unit tests added.
2026-05-11 21:38:26 -03:00
diegosouzapw
2638c92fba feat(domain): add modelAvailability module and unit tests for model cooldown API 2026-05-11 21:33:15 -03:00
dependabot[bot]
41946c44c9 deps: bump mermaid from 11.14.0 to 11.15.0 (#2178)
Bumps [mermaid](https://github.com/mermaid-js/mermaid) from 11.14.0 to 11.15.0.
- [Release notes](https://github.com/mermaid-js/mermaid/releases)
- [Commits](https://github.com/mermaid-js/mermaid/compare/mermaid@11.14.0...mermaid@11.15.0)

---
updated-dependencies:
- dependency-name: mermaid
  dependency-version: 11.15.0
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-05-11 21:26:05 -03:00
Anton
704f686396 fix(cliproxyapi): Anthropic-shape body routing and gate compatibility (#2165)
Integrated into release/v3.8.0 — three fixes for CliProxyApi: Anthropic-shape body routing to /v1/messages, Capy premium extras strip, and mcp_* tool name rewrite to avoid Anthropic gate. Tests added covering all three categories.
2026-05-11 21:23:59 -03:00
diegosouzapw
5c4c0a94ff test(cliproxyapi): add Anthropic-shape detection, Capy extras strip, and mcp_ rewrite tests 2026-05-11 21:23:23 -03:00
diegosouzapw
191bcff0ac Merge branch 'release/v3.8.0' into upstream/cliproxyapi-anthropic-shape-fixes 2026-05-11 21:14:53 -03:00
Dohyun Jung
dcb32a6ba0 feat(api): aggregate combo model metadata in catalog (#2166)
Integrated into release/v3.8.0 — adds target-based metadata aggregation for combo entries in /v1/models using least-common-denominator approach (context_length, max_output_tokens, capabilities, modalities).
2026-05-11 21:14:25 -03:00
diegosouzapw
0ffbbd631e Merge branch 'release/v3.8.0' into feat/combo-model-metadata-catalog
# Conflicts:
#	src/app/api/v1/models/catalog.ts
2026-05-11 21:06:09 -03:00
Anton
b3fe7ddcb1 chore(registry): refresh per-model contextLength/maxOutputTokens for active providers (#2163)
Integrated into release/v3.8.0 — refreshes per-model contextLength/maxOutputTokens for claude, kiro, github, kimi-coding, xiaomi-mimo, and codex/gpt-5.5 (OAuth cap 400K). Fixes provider-ID mismatch causing context_length fallthrough to defaults.
2026-05-11 21:04:01 -03:00
diegosouzapw
d8277a4ba0 Merge branch 'release/v3.8.0' into upstream/registry-per-model-specs-refresh 2026-05-11 21:03:39 -03:00
Anton
e5974c4ae3 feat(responses): degrade background mode to synchronous execution (#2164)
Integrated into release/v3.8.0 — degrades background:true to synchronous execution instead of 400, enabling Capy and similar clients that set background:true by default to work seamlessly.
2026-05-11 21:03:26 -03:00
diegosouzapw
49b8f9b911 Merge branch 'release/v3.8.0' into upstream/responses-background-degrade 2026-05-11 21:02:42 -03:00
Anton
25199b20fe fix(executors): sanitize reasoning_effort for non-supporting providers (#2162)
Integrated into release/v3.8.0 — adds sanitizeReasoningEffortForProvider hook to BaseExecutor, fixing xhigh→high downgrade for non-supporting providers and full strip for mistral/devstral and GitHub Claude models.
2026-05-11 21:02:28 -03:00