pjandro/OmniRoute
1
0
Fork 0
mirror of https://github.com/diegosouzapw/OmniRoute.git synced 2026-08-02 05:12:11 +03:00
Code Issues Packages Projects Releases Wiki Activity
46 Commits 100 Branches 313 Tags
492afc4ff19fec44a69e70a67d3249ea45bfdb7b
Commit Graph

46 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
diegosouzapw
492afc4ff1 refactor: decompose usageDb, handleSingleModelChat, UI components (T-15, T-28, T-29) 
T-15 — Decompose usageDb.js (969→40 lines):
- Extract src/lib/usage/migrations.js (legacy + JSON→SQLite migration)
- Extract src/lib/usage/usageHistory.js (tracking, pending, log.txt)
- Extract src/lib/usage/costCalculator.js (pure cost calculation)
- Extract src/lib/usage/usageStats.js (dashboard aggregation)
- Extract src/lib/usage/callLogs.js (structured logs, CRUD, rotation)
- usageDb.js is now a thin facade re-exporting all functions

T-28 — Decompose handleSingleModelChat (183→80 lines):
- Extract handleNoCredentials() — credential error responses
- Extract safeResolveProxy() — proxy resolution with error handling
- Extract safeLogEvents() — fire-and-forget proxy + translation logging
- Also created chatHelpers.js with standalone helper exports

T-29 — Extract shared UI primitives (3230 total lines):
- FilterBar.js — search input + filter chips dropdown
- ColumnToggle.js — table column visibility toggle
- DataTable.js — generic data table with sticky header, loading/empty

Tests: 88/88 pass (no regressions)
 2026-02-14 18:53:14 -03:00
Diego Rodrigues de Sa e Souza
967689d0a1 Merge pull request #22 from diegosouzapw/feature/remaining-tasks 
feat(remaining): deferred tasks — error pages, UX, telemetry, domain
 2026-02-14 18:43:30 -03:00
diegosouzapw
f77dd89d53 feat(remaining): deferred tasks — error pages, UX components, telemetry, domain extraction 
T-20 — .gitignore cleanup:
- Add .analysis/ and antigravity-manager-analysis/ to gitignore
- Whitelist FASE docs, PLANO-IMPLANTACAO.md, TASKS.md

T-21 — Error pages:
- Create not-found.js (404 page with gradient design)
- Create global-error.js (root error boundary with dev details)

T-36 — Breadcrumbs:
- Create Breadcrumbs.js with path-to-label mapping and ARIA semantics

T-37 — Empty states:
- Create EmptyState.js with bounce animation and optional CTA

T-45 — Request telemetry:
- Create requestTelemetry.js (7-phase lifecycle, p50/p95/p99 aggregation)

T-46 — Domain extraction:
- Create comboResolver.js (priority/round-robin/random/least-used strategies)
- Create lockoutPolicy.js (sliding window lockout with force-unlock)

Tests: 13/13 new tests pass (88/88 total)
 2026-02-14 18:43:07 -03:00
Diego Rodrigues de Sa e Souza
0a5434cae5 Merge pull request #21 from diegosouzapw/feature/security-hardening 
feat(security): FASE-01 to FASE-09 — Security Hardening & Advanced Features
 2026-02-14 18:31:31 -03:00
diegosouzapw
2178e99da7 feat(advanced): FASE-07 to FASE-09 advanced features 
FASE-07 — UX & Microinteractions:
- Create notificationStore.js (Zustand global toast store)
- Create NotificationToast.js (glassmorphism toast UI with ARIA)

FASE-08 — LLM Proxy Advanced:
- Create policyEngine.js (declarative routing/budget/access policies)
- Create cacheLayer.js (LRU cache with content hashing and TTL)

FASE-09 — E2E Flow Hardening:
- Create streamState.js (SSE stream state machine with TTFB tracking)

Tests: 23/23 advanced tests pass (75/75 total across all suites)
 2026-02-14 18:28:55 -03:00
diegosouzapw
1cbbc33f20 feat(security): FASE-01 to FASE-06 security hardening 
FASE-01 — Security Hardening:
- Remove hardcoded JWT_SECRET and API_KEY_SECRET fallbacks (fail-fast)
- Create secretsValidator.js with enforceSecrets() at startup
- Create inputSanitizer.js (prompt injection + PII detection)
- Integrate sanitizer in chat.js handler pipeline
- Add structured logging to silent catch blocks in proxy.js
- Remove .passthrough() from Zod updateSettingsSchema
- Remove insecure npm fs dependency
- Update .env.example with generation commands

FASE-02 — CI/CD & Tests:
- Create ci.yml workflow (lint, build, test, coverage, e2e)
- Fix test scripts (test now runs actual tests)
- Add test:unit, test:security, test:coverage (c8), test:all
- Add security rules to ESLint (no-eval, no-implied-eval, no-new-func)

FASE-03 — Architecture:
- Create settingsCache.js (eliminate self-fetch anti-pattern)
- Create domain/types.js and domain/responses.js

FASE-04 — Observability:
- Create correlationId.js (AsyncLocalStorage tracing)
- Create circuitBreaker.js (full state machine + registry)
- Create requestTimeout.js (per-provider timeouts)

FASE-05 — Code Quality:
- Create structuredLogger.js (JSON/human-readable logging)

FASE-06 — Documentation:
- Update SECURITY.md with hardening practices
- Create CONTRIBUTING.md with dev setup and PR checklist

Tests: 52/52 pass (23 security + 15 observability + 14 integration)
 2026-02-14 18:21:47 -03:00
Diego Rodrigues de Sa e Souza
d408be489c Merge pull request #20 from diegosouzapw/feature/v0.2.0-release 
feat: v0.2.0 — advanced routing services, cost analytics, pricing overhaul
v0.2.0 		2026-02-14 13:51:18 -03:00
diegosouzapw
81a4f2986c feat: v0.2.0 — advanced routing services, cost analytics dashboard, pricing overhaul 
Added:
- 8 new open-sse services (account selector, IP filter, session manager, etc.)
- 6 new dashboard settings tabs (IP filter, system prompt, thinking budget, pricing)
- Usage cost dashboard with provider cost donut, cost trend line, model cost column
- Pricing API merging registry + custom + pricing-only models
- 9 unit tests for all new services

Changed:
- Usage analytics layout redesigned with prominent cost display
- DailyTrendChart upgraded to ComposedChart with dual Y-axes

Fixed:
- Pricing page now shows custom/imported models
- Icon rendering (material-symbols-rounded → outlined)
 2026-02-14 13:50:45 -03:00
Diego Rodrigues de Sa e Souza
c1f1069a06 docs: add npm badge, CLI options table, and automated release section to README (#19) 
Co-authored-by: diegosouzapw <diegosouzapw@users.noreply.github.com>
 2026-02-14 04:47:08 -03:00
Diego Rodrigues de Sa e Souza
c4cdb52fe6 fix(ci): reference NPM_TOKEN environment for environment-scoped secrets (#18) 
Co-authored-by: diegosouzapw <diegosouzapw@users.noreply.github.com>
v0.1.0 		2026-02-14 04:31:26 -03:00
Diego Rodrigues de Sa e Souza
15ec100dcb fix(ci): write .npmrc explicitly for npm auth — support both secrets and vars (#17) 
Co-authored-by: diegosouzapw <diegosouzapw@users.noreply.github.com>
 2026-02-14 04:26:05 -03:00
Diego Rodrigues de Sa e Souza
d401ef40f1 fix(ci): support NPM_TOKEN from both secrets and vars, remove --provenance (#16) 
Co-authored-by: diegosouzapw <diegosouzapw@users.noreply.github.com>
 2026-02-14 04:22:00 -03:00
Diego Rodrigues de Sa e Souza
92b4c59fec feat(npm): add npm package publishing with CLI entry point (#15) 
- Add bin/omniroute.mjs CLI with banner, auto-open browser, graceful shutdown
- Add scripts/prepublish.mjs to build Next.js standalone into app/
- Add .github/workflows/npm-publish.yml for automated publish on release
- Update package.json: name=omniroute, bin, files, engines, keywords, prepublishOnly
- Add output: 'standalone' to next.config.mjs
- Add MIT LICENSE
- Update .npmignore and .gitignore for app/ build artifact

Co-authored-by: diegosouzapw <diegosouzapw@users.noreply.github.com>
 2026-02-14 04:14:14 -03:00
Diego Rodrigues de Sa e Souza
4f0155eb4a Create SECURITY.md for security policy 
Added a security policy document outlining supported versions and vulnerability reporting.
 2026-02-13 23:21:18 -03:00
Diego Rodrigues de Sa e Souza
e544d81624 Merge pull request #13 from diegosouzapw/dependabot/npm_and_yarn/qs-6.14.2 
deps: bump qs from 6.14.1 to 6.14.2
 2026-02-13 23:19:59 -03:00
Diego Rodrigues de Sa e Souza
b8c50cc62d Merge pull request #14 from diegosouzapw/feature/new-endpoints-and-providers 
feat: add new endpoints (rerank, audio, moderations) and providers (Hyperbolic, Deepgram, AssemblyAI, NanoBanana)
 2026-02-13 22:58:15 -03:00
diegosouzapw
c6000ecc8e feat(providers): add new endpoints (rerank, audio, moderations) and providers (Hyperbolic, Deepgram, AssemblyAI, NanoBanana) 
- Add /v1/rerank endpoint with Cohere, Together, NVIDIA, Fireworks
- Add /v1/audio/transcriptions with OpenAI, Groq, Deepgram, AssemblyAI
- Add /v1/audio/speech with OpenAI, Hyperbolic, Deepgram
- Add /v1/moderations with OpenAI
- Add Hyperbolic as chat provider (8 models, OpenAI-compatible)
- Add Hyperbolic image generation (SDXL, SD2, FLUX)
- Add NanoBanana image generation (Flash + Pro via nanobananaapi.ai)
- Add Deepgram STT (Nova 3, Nova 2) with Token auth and binary format
- Add AssemblyAI STT (Universal 3 Pro) with async upload-poll workflow
- Add Deepgram TTS (Aura voices) and Hyperbolic TTS (Melo)
- Update EndpointPageClient to show 7 endpoint sections
- Update /v1/models to return type/subtype for all model categories
- Fix build: remove output:standalone from next.config.mjs
 2026-02-13 22:57:32 -03:00
diegosouzapw
4e6ba7d9cc docs: Restructure changelog to Keep a Changelog format and add entries for model selector autocomplete and OpenAPI specification. 2026-02-13 21:35:06 -03:00
diegosouzapw
c0c2816671 feat: Implement model selection and dynamic model fetching in ChatTesterMode and TestBenchMode. 2026-02-13 21:11:19 -03:00
diegosouzapw
80cc76d531 fix: Ensure server port is free before startup by killing existing processes. 2026-02-13 20:59:11 -03:00
dependabot[bot]
af1ffab63d deps: bump qs from 6.14.1 to 6.14.2 
Bumps [qs](https://github.com/ljharb/qs) from 6.14.1 to 6.14.2.
- [Changelog](https://github.com/ljharb/qs/blob/main/CHANGELOG.md)
- [Commits](https://github.com/ljharb/qs/compare/v6.14.1...v6.14.2)

---
updated-dependencies:
- dependency-name: qs
  dependency-version: 6.14.2
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-02-13 23:58:54 +00:00
diegosouzapw
7ff1ba978a feat: add OpenAPI specification, generate package-lock, and remove various SVG assets from the public directory. 2026-02-13 20:57:44 -03:00
diegosouzapw
d43bbf77fe feat: Enhance restart.sh to include clean build, robust server startup with health check, graceful shutdown, and real-time log tailing. 2026-02-13 20:47:12 -03:00
Diego Rodrigues de Sa e Souza
4e5dc6a80b Merge pull request #12 from diegosouzapw/fix/select-dark-theme 
fix(ui): fix Select dropdown dark theme inconsistency
 2026-02-13 19:22:36 -03:00
diegosouzapw
0be2852af2 fix(ui): fix Select dropdown dark theme inconsistency 
Use bg-surface (theme-aware) instead of bg-white for select and
option elements. Prevents white dropdown panels in dark mode.
 2026-02-13 19:22:09 -03:00
Diego Rodrigues de Sa e Souza
b3c36ed2ca Merge pull request #11 from diegosouzapw/chore/rebrand-ui-omniroute 
chore(ui): rebrand to OmniRoute
 2026-02-13 19:14:19 -03:00
diegosouzapw
2b1b8e4539 chore(ui): rebrand to OmniRoute 
- Sidebar: 'Endpoint Proxy' → 'OmniRoute'
- Page title: 'OmniRoute — AI Gateway for Multi-Provider LLMs'
- Description updated across layout and config
 2026-02-13 19:13:57 -03:00
Diego Rodrigues de Sa e Souza
8b7b50f6fb Merge pull request #10 from diegosouzapw/fix/cloud-sync-404-spam 
fix(sync): disable cloud sync and truncate error logs
 2026-02-13 19:01:53 -03:00
diegosouzapw
9c0ba39ed6 fix(sync): disable cloud sync and truncate error logs 
CLOUD_URL was pointing to omniroute.com which doesn't have a /sync/
endpoint, causing repeated 404 HTML dumps in console logs.

- Clear CLOUD_URL to disable cloud sync until server is ready
- Truncate sync error text to 200 chars to prevent HTML spam in logs
 2026-02-13 19:01:31 -03:00
Diego Rodrigues de Sa e Souza
801a050995 Merge pull request #9 from diegosouzapw/feat/enable-socks5-proxy 
feat(proxy): enable SOCKS5 proxy support by default
 2026-02-13 18:30:08 -03:00
diegosouzapw
e7532d7189 feat(proxy): enable SOCKS5 proxy support by default 
SOCKS5 was already fully implemented in both backend
(proxyDispatcher.js) and frontend (ProxyConfigModal.js).
Enable the feature flags to show SOCKS5 option in the UI.
 2026-02-13 18:29:49 -03:00
Diego Rodrigues de Sa e Souza
7349052b33 Merge pull request #8 from diegosouzapw/fix/test-token-corruption 
fix(oauth): prevent connection test from corrupting valid tokens
 2026-02-13 18:09:52 -03:00
diegosouzapw
0af22a558f fix(oauth): prevent connection test from corrupting valid tokens 
Only attempt token refresh on 401/403 during connection tests when
the token is actually expired (isTokenExpired). Previously, any 401/403
triggered an aggressive refresh that could overwrite valid tokens when
the upstream returned transient errors (rate-limiting, etc.).

Fixes Cline, Qwen, and iFlow losing authentication after tests.
 2026-02-13 18:09:28 -03:00
Diego Rodrigues de Sa e Souza
3206583299 Merge pull request #7 from diegosouzapw/fix/iflow-secret-env-sync 
chore(env): sync .env.example with current .env structure
 2026-02-13 17:47:58 -03:00
diegosouzapw
575bda7375 chore(env): sync .env.example with current .env structure 
Add missing Storage (SQLite) section, INSTANCE_NAME, and
align all sections with the actual .env file.
 2026-02-13 17:47:38 -03:00
Diego Rodrigues de Sa e Souza
b3cde151c3 Merge pull request #6 from diegosouzapw/fix/oauth-upsert-broadened 
fix(oauth): broaden upsert to match any existing connection
 2026-02-13 17:30:16 -03:00
diegosouzapw
b7e757f3ba fix(oauth): broaden upsert to match any existing connection 
Remove test_status restriction from the no-email upsert fallback.
Now matches any existing OAuth connection for the same provider
(not just failed ones), preventing duplicates regardless of status.
 2026-02-13 17:29:51 -03:00
Diego Rodrigues de Sa e Souza
81a78e8733 Merge pull request #5 from diegosouzapw/fix/oauth-reauth-upsert 
fix(oauth): prevent duplicate connections on re-authentication
 2026-02-13 17:23:19 -03:00
diegosouzapw
fbac38b2b5 fix(oauth): prevent duplicate connections on re-authentication 
For providers that don't return email (e.g. Codex), re-authenticating
always created a new 'Account N' entry because the upsert check in
createProviderConnection only matched by email.

Added fallback: when no email is available, find the most recent
auth_failed/refresh_failed connection for the same provider and update
it instead of creating a duplicate.
 2026-02-13 17:22:50 -03:00
Diego Rodrigues de Sa e Souza
f5898d3898 Merge pull request #3 from diegosouzapw/dependabot/npm_and_yarn/development-55a9f41e4a 
deps: bump eslint from 9.39.2 to 10.0.0 in the development group
 2026-02-13 16:51:58 -03:00
Diego Rodrigues de Sa e Souza
75e9648d06 Merge pull request #2 from diegosouzapw/dependabot/github_actions/actions/github-script-8 
build(deps): bump actions/github-script from 7 to 8
 2026-02-13 16:51:25 -03:00
Diego Rodrigues de Sa e Souza
878277edc9 Merge pull request #4 from diegosouzapw/feature/versioning-and-model-import 
feat(versioning): set initial version to 0.0.1 and restore dynamic model import
 2026-02-13 16:50:59 -03:00
diegosouzapw
50fc931086 feat(versioning): set initial version to 0.0.1 and restore dynamic model import 
- Set package.json version to 0.0.1 (initial OmniRoute release)
- Set open-sse/package.json version to 0.0.1
- Restore 'Import from /models' button for standard providers (openai, gemini, deepseek, etc.)
- Add handleImportModels function to ProviderDetailPage
 2026-02-13 16:49:06 -03:00
dependabot[bot]
172461863e deps: bump eslint from 9.39.2 to 10.0.0 in the development group 
Bumps the development group with 1 update: [eslint](https://github.com/eslint/eslint).


Updates `eslint` from 9.39.2 to 10.0.0
- [Release notes](https://github.com/eslint/eslint/releases)
- [Commits](https://github.com/eslint/eslint/compare/v9.39.2...v10.0.0)

---
updated-dependencies:
- dependency-name: eslint
  dependency-version: 10.0.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: development
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-02-13 19:31:36 +00:00
dependabot[bot]
79e10c9a41 build(deps): bump actions/github-script from 7 to 8 
Bumps [actions/github-script](https://github.com/actions/github-script) from 7 to 8.
- [Release notes](https://github.com/actions/github-script/releases)
- [Commits](https://github.com/actions/github-script/compare/v7...v8)

---
updated-dependencies:
- dependency-name: actions/github-script
  dependency-version: '8'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-02-13 19:30:25 +00:00
diegosouzapw
699329944e feat: initial OmniRoute release (rebranded from 9router) 
This project is inspired by and originally forked from 9router by decolua
(https://github.com/decolua/9router).

Full rebrand: 9router → OmniRoute across all source code, configuration,
Docker, documentation, and assets.
 2026-02-13 16:29:27 -03:00