pjandro/OmniRoute
1
0
Fork 0
mirror of https://github.com/diegosouzapw/OmniRoute.git synced 2026-08-02 21:32:10 +03:00
Code Issues Packages Projects Releases Wiki Activity
114 Commits 117 Branches 313 Tags
6d3b4166dfd787de44b8ba6d3af3b09de98aacaa
Commit Graph

114 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
diegosouzapw
6d3b4166df docs: remove all Architecture Decision Record (ADR) documents. 2026-02-16 14:31:35 -03:00
diegosouzapw
45eced0b3e docs: comprehensive SECURITY.md based on full codebase audit 
Documented all security features actually implemented:
- AES-256-GCM encryption at rest (API keys, tokens)
- Prompt injection guard (5 pattern types)
- PII redaction (email, CPF, CNPJ, CC, phone, SSN)
- Secrets validator (fail-fast on weak values)
- Circuit breaker (3-state, SQLite-persisted)
- OAuth 2.0 + PKCE, CORS, IP filtering
- Rate limiting, anti-thundering herd
- Compliance (log retention, audit log, no-log)
 2026-02-16 14:29:50 -03:00
diegosouzapw
1b00a6b70b docs: update SECURITY.md and add to README 
- Bump supported versions: 0.7.x (active), 0.6.x (security)
- Replace fake email with GitHub Security Advisories link
- Add Security Policy to README documentation table
 2026-02-16 14:27:17 -03:00
diegosouzapw
03d05e0490 docs: track USER_GUIDE, API_REFERENCE, and TROUBLESHOOTING in git 
These files were referenced in README but ignored by .gitignore.
Added them to the exception list so they appear in the repository.
 2026-02-16 14:25:52 -03:00
diegosouzapw
4cac582cb0 docs: add omniroute.online website URL to README, npm, and Docker 
- Add Website badge to README header
- Add website link to nav, tech stack, support, and footer
- Update provider count from 28 to 36+
- Set package.json homepage to https://omniroute.online
- Add OCI image URL label to Dockerfile
 2026-02-16 14:22:29 -03:00
Diego Rodrigues de Sa e Souza
eb0fbccd05 Merge pull request #47 from diegosouzapw/fix/vm-onboarding-auth 
fix: auto-skip onboarding and enforce login on VM deployments
 2026-02-16 11:25:06 -03:00
diegosouzapw
32c0f40021 fix: auto-skip onboarding and enforce login on VM deployments 
- getSettings() auto-sets setupComplete=true when INITIAL_PASSWORD env is set
- proxy.js middleware enforces login when INITIAL_PASSWORD exists (even without DB hash)
- Settings API reports hasPassword=true when INITIAL_PASSWORD is configured
- Login page hides '123456' default hint when a custom password is set

Fixes fresh Docker/VM deployments getting stuck on onboarding wizard
and being accessible without authentication.
 2026-02-16 11:24:15 -03:00
Diego Rodrigues de Sa e Souza
baae44f825 Merge pull request #46 from diegosouzapw/feature/release-0.7.0 
chore: release v0.7.0 — Docker Hub, changelog overhaul
v0.7.0 		2026-02-16 09:49:07 -03:00
diegosouzapw
5fe53168b2 chore: bump version to 0.7.0, reorganize changelog, add Docker Hub CI/CD and README 
- Bump version from 0.6.0 to 0.7.0 in package.json
- Rewrite CHANGELOG.md with comprehensive entries from v0.1.0 to v0.7.0
- Add docker-publish.yml GitHub Actions workflow for auto Docker Hub push
- Add Docker Hub badge, Docker section, and Docker Hub link to README
- Update release command example to v0.7.0
 2026-02-16 09:48:35 -03:00
diegosouzapw
ebdc1c214d refactor: extract CliStatusBadge component and refactor CLI tool cards 
- Create shared CliStatusBadge component with support for configured,
  not_configured, not_installed, other, and unknown statuses
- Replace inline status badge markup in ClaudeToolCard and ClineToolCard
  with the new reusable component
- Add colored status dot indicator alongside badge text
- Support batch status fallback so badges render even when cards are collapsed
- Refactor model/provider selection logic in tool card configuration
 2026-02-16 01:35:57 -03:00
Diego Rodrigues de Sa e Souza
467e998650 Merge pull request #45 from diegosouzapw/fix/cloud-connection-ux 
fix(cloud): improve cloud connection UX
 2026-02-16 01:03:23 -03:00
diegosouzapw
9a9f592f54 fix(cloud): improve cloud connection UX with GET status, toast feedback, and sidebar indicator 
- Add GET handler to /api/sync/cloud for real-time status polling
- Rewrite CloudSyncStatus: clickable, event-driven updates, clearer labels
- Add inline status toast with auto-dismiss after enable/disable
- Show success animation in modal before auto-closing
- Dispatch cloud-status-changed event for instant sidebar updates
 2026-02-16 01:02:52 -03:00
Diego Rodrigues de Sa e Souza
c3fe96e221 Merge pull request #44 from diegosouzapw/feature/release-0.6.0 
chore: release v0.6.0
v0.6.0 		2026-02-16 00:23:19 -03:00
diegosouzapw
1c6541f25d chore: bump version to 0.6.0 and update changelog 2026-02-16 00:22:55 -03:00
diegosouzapw
9f8dfa1398 feat: add costs page and enhance health provider status display 
Add dedicated Costs page combining Budget and Pricing tabs with a
sidebar navigation layout. Improve Health page provider section with
status legend (Healthy/Recovering/Down) and import AI_PROVIDERS
constants for richer provider display.
 2026-02-15 23:01:27 -03:00
diegosouzapw
e4db9bff0e feat: add provider metrics display and model import for passthrough providers 
- Fetch and display request metrics (success rate, latency, total requests) on provider overview cards
- Create /api/provider-metrics endpoint to aggregate stats from request logs
- Add /api/providers/[id]/import-models endpoint to import models from provider's /models API
- Add "Import from /models" button on passthrough provider detail pages
- Include proper PropTypes for new metrics and alias fields
 2026-02-15 21:53:27 -03:00
diegosouzapw
54aba4c087 feat: redesign app icons with network node graph and new color scheme 
Replace text-based "9" favicon with a network/router node graph design
across all icon sizes. Add apple-touch-icon and icon-192 SVG assets.
Update brand gradient from orange (#f97815) to red (#E54D5E).
 2026-02-15 20:56:48 -03:00
Diego Rodrigues de Sa e Souza
c2542b75f6 Merge pull request #43 from diegosouzapw/feature/release-0.5.0 
chore: release v0.5.0
v0.5.0 		2026-02-15 19:03:37 -03:00
diegosouzapw
6572f2a1b6 chore: bump version to 0.5.0 and update changelog 2026-02-15 19:03:18 -03:00
Diego Rodrigues de Sa e Souza
2ad23f3b3c Merge pull request #42 from diegosouzapw/feature/ajustes-cosmeticos 
feat: v0.5.0 - Dashboard refinements, evals framework, and combo strategies
 2026-02-15 18:57:29 -03:00
diegosouzapw
fa9687ae0d feat: Implement API key usage for EvalsTab LLM calls, enhance model filtering with provider aliases, and remove the random routing strategy option. 2026-02-15 18:56:33 -03:00
diegosouzapw
0ed7738c7c feat: add LLM evaluation framework with golden set testing 
Introduce built-in eval system for testing LLM response quality against
golden sets. Includes eval runner with 4 match strategies (exact,
contains, regex, custom), a pre-loaded 10-case golden set, REST API
endpoints for managing and running suites, and a dashboard UI under
Analytics → Evals with real-time progress tracking and pass rate
summaries. Also adds OpenAPI tags for Audio, Moderations, and Rerank.
 2026-02-15 18:37:18 -03:00
diegosouzapw
a43b1c9218 feat: add random, least-used, and cost-optimized combo strategies 
Extend combo routing with 3 new model selection strategies beyond the
existing priority, weighted, and round-robin options:
- random: Fisher-Yates shuffle for uniform distribution
- least-used: sorts models by request count via comboMetrics
- cost-optimized: sorts models by pricing (cheapest first)

Also enhance the dashboard provider cards with model counts and
clickable detail views for selected providers.
 2026-02-15 16:57:00 -03:00
diegosouzapw
413a9f2a69 feat: add ModelAvailabilityBadge component and retheme landing page 
- Add compact ModelAvailabilityBadge with popover for model status
  monitoring, cooldown clearing, and auto-refresh polling
- Retheme landing page from warm orange tones to cool blue-grey palette
  across FlowAnimation, Footer, and related components
- Update accent color from orange (#f97815) to rose (#E54D5E)
 2026-02-15 16:26:01 -03:00
diegosouzapw
14714aa9f5 feat: refactor dashboard with shared UI component library 
Introduce reusable shared components (Button, Card, Modal, Table,
StatusBadge, EmptyState) and refactor dashboard pages to use them.
Extract client components from server pages, centralize provider
constants, and update CI Node.js matrix from 18 to 20.
 2026-02-15 16:11:56 -03:00
Diego Rodrigues de Sa e Souza
ac4df197c3 Merge pull request #41 from diegosouzapw/fix/chat-completions-then-error 
fix(api): resolve TypeError in chat/completions route
 2026-02-15 13:25:28 -03:00
diegosouzapw
06826d4c86 fix(api): resolve TypeError in chat/completions ensureInitialized 
initTranslators() is a no-op stub (translators self-register via static
imports). Wrapping the call with Promise.resolve() ensures .then() works
even when the function returns undefined instead of a Promise.
 2026-02-15 13:24:54 -03:00
Diego Rodrigues de Sa e Souza
78b0782129 Merge pull request #40 from diegosouzapw/fix/ci-lint-build-errors 
fix(ci): resolve build and lint failures
v0.4.0 		2026-02-15 12:56:44 -03:00
diegosouzapw
5c92f05079 fix(ci): resolve build and lint failures 
- Remove non-existent DarkTooltip/CostTooltip exports from analytics/index.js
- Fix setState-in-effect in ProxyTab.js (inline fetch in useEffect)
- Fix anonymous default export warning in prettier.config.mjs
- Remove @ts-check from promptInjectionGuard.js (SanitizeResult type mismatch)
 2026-02-15 12:56:09 -03:00
Diego Rodrigues de Sa e Souza
16cdb345a0 Merge pull request #39 from diegosouzapw/feature/v0.4.0-action-items 
feat: implement 26 action items + bump v0.4.0
 2026-02-15 12:34:45 -03:00
diegosouzapw
0e238a61fb feat(core): implement 26 action items from critical analysis + bump v0.4.0 
- Security: AES-256-GCM encryption for API keys/tokens, CI security audit
- Accessibility: ARIA labels, aria-live regions, skip-to-content, contrast utility
- Components: Tooltip, CloudSyncStatus, SystemMonitor, StreamTracker
- Utils: costEstimator, promptInjectionGuard middleware, Zod validation schemas
- Docs: openapi.yaml +9 routes, API_REFERENCE internal APIs, version bumps
- Quality: coverage thresholds 60/50/50, error handling improvements
 2026-02-15 12:33:56 -03:00
Diego Rodrigues de Sa e Souza
6964904bac Merge pull request #38 from diegosouzapw/feature/phase10-docs-ux-cleanup 
feat(phase10): docs restructuring, component decomposition, and cleanup
 2026-02-15 11:54:27 -03:00
diegosouzapw
597c590a1d feat(phase10): docs restructuring, component decomposition, and cleanup 
- Split README (1326→211 lines): USER_GUIDE, API_REFERENCE, TROUBLESHOOTING
- Expand CONTRIBUTING.md (112→273 lines)
- Extract RequestLoggerDetail from RequestLoggerV2 (910→665 lines)
- Extract ProxyLogDetail from ProxyLogger (677→519 lines)
- Add accessibility attrs (aria-label, role=dialog) to extracted modals
- Migrate not-found.js inline styles to TailwindCSS gradient classes
- Remove continue-on-error from E2E CI step
- Add PolicyEngine class with glob-based policy matching
- Create a11yAudit.js (WCAG rule checker)
- Fix policyEngine test import path
 2026-02-15 11:53:40 -03:00
Diego Rodrigues de Sa e Souza
a94b6a8d8c Merge pull request #37 from diegosouzapw/feat/phase-9-llm-intelligence 
feat(gateway): Phase 9 — LLM Gateway Intelligence
 2026-02-15 11:05:37 -03:00
diegosouzapw
b08fb31a28 feat(gateway): Phase 9 — LLM Gateway Intelligence 
9.1 — Semantic Cache
  - New: src/lib/semanticCache.js — Two-tier cache (in-memory LRU + SQLite)
  - Signature = SHA-256(model + normalized messages + temperature + top_p)
  - Only caches non-streaming, temperature=0 requests
  - X-OmniRoute-No-Cache: true header bypass
  - Response headers: X-OmniRoute-Cache: HIT/MISS
  - DB table: semantic_cache with indexes on signature and model
  - New: src/app/api/cache/route.js — GET stats, DELETE clear

9.2 — Request Idempotency
  - New: src/lib/idempotencyLayer.js — In-memory 5s dedup window
  - Reads Idempotency-Key or X-Request-Id headers
  - Returns cached response with X-OmniRoute-Idempotent: true header
  - Ephemeral by design (no SQLite)

9.3 — Progress Tracking in Streaming
  - New: open-sse/utils/progressTracker.js
  - Emits SSE 'event: progress' with tokens_generated + elapsed_ms
  - Opt-in via X-OmniRoute-Progress: true header
  - Supports AbortSignal cancellation
  - Final event includes done: true

Integration:
  - chatCore.js: idempotency check → cache check → provider call → cache store → idempotency save
  - Streaming path: optional progress transform chain
  - DB: semantic_cache table added to db/core.js schema

Tests: 320 pass (+25 new) | Build: success
 2026-02-15 11:04:51 -03:00
Diego Rodrigues de Sa e Souza
5bfd621438 Merge pull request #36 from diegosouzapw/feat/phase-8-missing-flows 
feat(pages): Phase 8 — Missing Flows & Pages
 2026-02-15 10:48:54 -03:00
diegosouzapw
034f1a7e1d feat(pages): Phase 8 — Missing Flows & Pages 
8.1 — 403 Forbidden Page
  - New: src/app/forbidden/page.js
  - Gradient code + Access Denied message + Dashboard link
  - Consistent design with not-found.js

8.2 — Password Recovery Flow
  - New: src/app/forgot-password/page.js
  - Two methods: CLI reset + manual database reset
  - Added 'Forgot password?' link to login page

8.3 — Health/Status Dashboard
  - New: src/app/(dashboard)/dashboard/health/page.js
  - New: src/app/api/monitoring/health/route.js
  - Cards: Uptime, Version, Memory, Provider count
  - Provider health (circuit breaker states with color coding)
  - Rate limit status table
  - Active lockouts list
  - Auto-refresh every 15s
  - Added Health nav link to Sidebar

8.4 — Maintenance Banner
  - New: src/shared/components/MaintenanceBanner.js
  - Auto-detects server health issues every 10s
  - Shows/hides automatically, dismissible
  - Wired into DashboardLayout

8.5 — Empty States
  - Verified EmptyState component applied in 6+ pages
  - Providers page has its own empty handling

Bonus:
  - Fixed stale GitHub link in Sidebar (decolua → diegosouzapw)

Tests: 295 pass | Build: success
 2026-02-15 10:46:11 -03:00
Diego Rodrigues de Sa e Souza
bc95095f82 Merge pull request #35 from diegosouzapw/refactor/phase-7-api-code-quality 
feat(api): Phase 7 — API & Code Quality
 2026-02-15 10:16:34 -03:00
diegosouzapw
7cf8ae8db6 feat(api): Phase 7 — API & Code Quality 
7.1 — Consolidated rate-limit routes
  - Merged rate-limit/ and rate-limits/ into rate-limits/route.js
  - GET returns connections + overview + lockouts + cacheStats (unified)
  - POST handles toggle protection
  - Old rate-limit/ now redirects 308 → rate-limits/
  - Updated frontend fetch URL in providers/[id]/page.js

7.2 — Zod schema for provider constants
  - New: src/shared/validation/providerSchema.js
  - Validates FREE_PROVIDERS, OAUTH_PROVIDERS, APIKEY_PROVIDERS at module load
  - Catches config drift (invalid colors, missing fields) at startup

7.3 — TailwindCSS error pages
  - Converted not-found.js inline styles → Tailwind classes
  - Converted global-error.js inline styles → Tailwind classes
  - Replaced JS hover handlers with Tailwind hover: utilities

7.4 — Fixed GitHub link in privacy page
  - decolua/omniroute → diegosouzapw/OmniRoute

7.5 — Already completed in Phase 5

Tests: 295 pass | Build: success
 2026-02-15 10:15:44 -03:00
Diego Rodrigues de Sa e Souza
05e93fa9b0 Merge pull request #34 from diegosouzapw/fix/phase-6-6-sse-dedup-analysis 
fix(sse): resolve ghost import in chatHelpers.js (Phase 6.6)
 2026-02-15 08:17:00 -03:00
diegosouzapw
1acaf66dd0 fix(sse): resolve ghost import in chatHelpers.js 
chatHelpers.js imported detectFormat/getTargetFormat/getModelTargetFormat
from '../services/translator.js' which does not exist.

Fixed to import from canonical sources:
- detectFormat, getTargetFormat → @omniroute/open-sse/services/provider.js
- getModelTargetFormat, PROVIDER_ID_TO_ALIAS → @omniroute/open-sse/config/providerModels.js

Phase 6.6 analysis: src/sse/ is an intentional adapter layer over
open-sse/ (not duplication). No further deduplication needed.
 2026-02-15 08:16:26 -03:00
Diego Rodrigues de Sa e Souza
1cee3ec8ff Merge pull request #33 from diegosouzapw/refactor/phase-5-6-architecture 
refactor(phase5-6): domain persistence, policy engine, OAuth extraction
 2026-02-15 08:12:56 -03:00
diegosouzapw
33c28f73db refactor(phase5-6): domain persistence, policy engine, OAuth extraction, proxy decoupling 
Phase 5 — Foundation & Security:
- SQLite domain state persistence (5 tables, 4 modules: fallback, budget, lockout, circuit breaker)
- Write-through cache pattern for state survival across restarts
- Race condition fix in route.js (Promise-based singleton)
- Default password hardening (.env.example)
- Server init error handling improvement

Phase 6 — Architecture Refactoring:
- OAuth providers extracted into 12 individual modules (providers.js 1051→144 lines)
- Policy Engine (lockout→budget→fallback) with evaluateRequest/evaluateFirstAllowed
- Deterministic round-robin via persistent counter Map
- Telemetry window fix with proper recordedAt timestamps
- Proxy decoupled from API settings (direct import vs HTTP self-fetch)

Tests: 295 pass (22 new: domain-persistence 16, policy-engine 6)
Docs: CHANGELOG, README, ARCHITECTURE.md updated
 2026-02-15 08:12:12 -03:00
diegosouzapw
25f4f5987c Merge feature/release-0.3.0: docs and changelog for v0.3.0 release v0.3.0 2026-02-15 02:06:36 -03:00
diegosouzapw
4269c25a9f docs: update CHANGELOG, README, and ARCHITECTURE for v0.3.0 release 
- CHANGELOG.md: comprehensive v0.3.0 entry with security hardening, domain layer,
  pipeline wiring, 9 API routes, frontend 100% coverage, rate limit overhaul
  (4 phases), ADRs, compliance, eval framework, 273+ tests
- README.md: add 10 new feature rows (circuit breaker, anti-thundering herd,
  resilience profiles/UI, cost budgets, telemetry, correlation IDs, compliance,
  model availability, eval framework), update tech stack and release example
- ARCHITECTURE.md: add domain layer modules, resilience modules, 11 new API
  routes, usageDb decomposition note, update date
 2026-02-15 02:06:14 -03:00
diegosouzapw
87b36dc197 Merge feature/rate-limit-overhaul: rate limit overhaul (4 phases) 2026-02-15 01:47:14 -03:00
diegosouzapw
6e29bd1197 feat(resilience): rate limit overhaul — exponential backoff, circuit breaker, anti-thundering herd, Resilience UI 
Phase 1: Error classification + provider profiles (constants, providerRegistry, accountFallback)
Phase 2: Circuit breaker integration in combo pipeline (combo.js)
Phase 3: Anti-thundering herd mutex + auto rate limits for API key providers (auth.js, rateLimitManager)
Phase 4: Frontend Resilience tab with Circuit Breaker, Provider Profiles, Rate Limit cards

Tests: 63/63 passing (error-classification, combo-circuit-breaker, thundering-herd, rate-limit-enhanced)
 2026-02-15 01:42:50 -03:00
diegosouzapw
5db6676319 feat: detect and handle unrecoverable refresh token errors by marking connections as expired and requiring re-authentication. 2026-02-14 22:04:00 -03:00
Diego Rodrigues de Sa e Souza
d08b3889d3 Merge pull request #32 from diegosouzapw/feature/frontend-100-coverage 
feat(frontend): 100% backend API coverage — 7 batches
 2026-02-14 21:05:32 -03:00
diegosouzapw
443e5b7b62 feat(frontend): 100% backend API coverage — 7 batches 
Batch A: Fix Breadcrumbs (usePathname), rewrite ComplianceTab (DataTable+FilterBar+ColumnToggle), delete dead code (a11yAudit.js, policyEngine.js), wire toast notifications (Combos, Providers)
Batch B: ModelAvailabilityPanel — cooldown badges, clear action, auto-refresh
Batch C: BudgetTab — spend cards, progress bars, budget limits form
Batch D: FallbackChainsEditor — color-coded provider chains, create/delete
Batch E: PoliciesPanel — circuit breaker states, locked identifiers, force unlock
Batch F: EvalsTab — expandable suites, run eval, DataTable results
Batch G: TokenHealthBadge + /api/token-health — OAuth health in header

8 new files, 9 modified, 2 deleted. Build passes (exit 0).
 2026-02-14 21:04:51 -03:00