5 Commits

Author	SHA1	Message	Date
diegosouzapw	1cbbc33f20	feat(security): FASE-01 to FASE-06 security hardening ... FASE-01 — Security Hardening: - Remove hardcoded JWT_SECRET and API_KEY_SECRET fallbacks (fail-fast) - Create secretsValidator.js with enforceSecrets() at startup - Create inputSanitizer.js (prompt injection + PII detection) - Integrate sanitizer in chat.js handler pipeline - Add structured logging to silent catch blocks in proxy.js - Remove .passthrough() from Zod updateSettingsSchema - Remove insecure npm fs dependency - Update .env.example with generation commands FASE-02 — CI/CD & Tests: - Create ci.yml workflow (lint, build, test, coverage, e2e) - Fix test scripts (test now runs actual tests) - Add test:unit, test:security, test:coverage (c8), test:all - Add security rules to ESLint (no-eval, no-implied-eval, no-new-func) FASE-03 — Architecture: - Create settingsCache.js (eliminate self-fetch anti-pattern) - Create domain/types.js and domain/responses.js FASE-04 — Observability: - Create correlationId.js (AsyncLocalStorage tracing) - Create circuitBreaker.js (full state machine + registry) - Create requestTimeout.js (per-provider timeouts) FASE-05 — Code Quality: - Create structuredLogger.js (JSON/human-readable logging) FASE-06 — Documentation: - Update SECURITY.md with hardening practices - Create CONTRIBUTING.md with dev setup and PR checklist Tests: 52/52 pass (23 security + 15 observability + 14 integration)	2026-02-14 18:21:47 -03:00
diegosouzapw	9c0ba39ed6	fix(sync): disable cloud sync and truncate error logs ... CLOUD_URL was pointing to omniroute.com which doesn't have a /sync/ endpoint, causing repeated 404 HTML dumps in console logs. - Clear CLOUD_URL to disable cloud sync until server is ready - Truncate sync error text to 200 chars to prevent HTML spam in logs	2026-02-13 19:01:31 -03:00
diegosouzapw	e7532d7189	feat(proxy): enable SOCKS5 proxy support by default ... SOCKS5 was already fully implemented in both backend (proxyDispatcher.js) and frontend (ProxyConfigModal.js). Enable the feature flags to show SOCKS5 option in the UI.	2026-02-13 18:29:49 -03:00
diegosouzapw	575bda7375	chore(env): sync .env.example with current .env structure ... Add missing Storage (SQLite) section, INSTANCE_NAME, and align all sections with the actual .env file.	2026-02-13 17:47:38 -03:00
diegosouzapw	699329944e	feat: initial OmniRoute release (rebranded from 9router) ... This project is inspired by and originally forked from 9router by decolua (https://github.com/decolua/9router). Full rebrand: 9router → OmniRoute across all source code, configuration, Docker, documentation, and assets.	2026-02-13 16:29:27 -03:00