Commit Graph

3952 Commits

Author SHA1 Message Date
diegosouzapw
2c7af9fc45 chore(docs): regenerate docs metadata and remove local artifacts
Regenerate the auto-generated docs index after the docs restructure
and remove repository-local audit, PR metadata, and ad hoc test files
that should not be kept in source control
2026-05-13 13:21:26 -03:00
diegosouzapw
8a1d9beb55 refactor(i18n): move existing locale mirrors to subfolder layout
For all 40 locales, move docs/i18n/<lang>/docs/<DOC>.md into the matching
subfolder (architecture/, guides/, reference/, ...). Mirror references in
docs/i18n/<lang>/{llm.txt,CHANGELOG.md,CONTRIBUTING.md,README.md} are also
rewritten to the new paths so the i18n llm.txt mirror check stays byte-equal
to the root llm.txt body.

These are mechanical moves only — actual translations remain unchanged and
will be regenerated incrementally in FASE 5 (hash-based pipeline).

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
2026-05-13 13:13:56 -03:00
diegosouzapw
c044cfdefb refactor(app): regenerate docs nav + update routes/tests for new subfolder layout
- src/app/docs/lib/docs-auto-generated.ts is regenerated from docs/<sub>/ with
  fileName values like "architecture/ARCHITECTURE.md". The dynamic slug page
  joins these against process.cwd()/docs so resolution still works.
- src/app/api/openapi/spec/route.ts now looks for the spec at
  docs/reference/openapi.yaml first, with the flat-path fallback retained for
  older bundles.
- tests updated: integration-wiring expects docs/reference/{API_REFERENCE.md,
  openapi.yaml}; docs-site-overhaul reflects the new 8-section nav titles
  (Architecture, Guides, Reference, Frameworks, Routing, Security, Compression,
  Ops) and the new section for setup-guide ("Guides").
- open-sse/mcp-server/README.md picks up the rewritten docs/ reference.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
2026-05-13 13:13:28 -03:00
diegosouzapw
ac39badc2e refactor(scripts): make docs index generator and checkers recurse subfolders
Update tooling for the new docs/<subfolder>/ layout:

- scripts/generate-docs-index.mjs walks the 8 subfolders in defined order and
  emits fileName values relative to docs/ (e.g. "architecture/ARCHITECTURE.md").
- scripts/check-docs-sync.mjs reads docs/reference/openapi.yaml.
- scripts/check-docs-counts-sync.mjs targets new doc paths.
- scripts/check-env-doc-sync.mjs reads docs/reference/ENVIRONMENT.md.
- scripts/gen-provider-reference.ts writes to docs/reference/PROVIDER_REFERENCE.md.
- scripts/pack-artifact-policy.ts allowlists docs/reference/openapi.yaml.
- New scripts/docs/{fix-internal-links,move-i18n-mirrors}.mjs are one-shot
  FASE 3 helpers, safe to delete after merge.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
2026-05-13 13:12:56 -03:00
diegosouzapw
eb02fda327 refactor: update root .md / .agents / .claude doc-path references
Rewrite `docs/<DOC>.md` references in README, CLAUDE.md, AGENTS.md, GEMINI.md,
CONTRIBUTING.md, SECURITY.md, llm.txt, CHANGELOG.md, Tuto_Qdrant.md and the
.agents/.claude skill+workflow definitions to use the new subfolder layout
(e.g. docs/architecture/ARCHITECTURE.md, docs/routing/AUTO-COMBO.md).

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
2026-05-13 13:12:30 -03:00
diegosouzapw
b4665fc852 refactor(docs): create 8 subfolders + diagrams/, move 44 docs preserving history
Group docs into intent-based subfolders so the topic each file covers is visible
from the directory layout: architecture/, guides/, reference/, frameworks/,
routing/, security/, compression/, ops/. Adds an empty diagrams/ placeholder
(populated in FASE 4) and a navigable docs/README.md index. Files were moved
with git mv so history is preserved. Internal cross-doc links were rewritten
to point at the new subfolder paths.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
2026-05-13 13:11:53 -03:00
diegosouzapw
b43ab4d4c3 test(env): make check-env-doc-sync strict + unit test
Rewrites scripts/check-env-doc-sync.mjs so the default mode is strict
(non-zero exit on drift between code references, .env.example, and
docs/ENVIRONMENT.md). The previous "report-only" behavior is still
available via --lenient for ad-hoc local diagnostics.

Highlights:

- Strict mode fails when any of these three sets is non-empty:
    1. process.env vars referenced in src/, open-sse/, bin/, scripts/,
       electron/main.js, electron/preload.js but missing from
       .env.example.
    2. .env.example vars missing from docs/ENVIRONMENT.md.
    3. docs/ENVIRONMENT.md vars missing from .env.example.
- Allowlists are explicit and curated:
    * `IGNORE_FROM_CODE` — system vars (NODE_ENV, PATH, ...), Next.js
      internals, CI runner injections, doctor placeholders, and aliases
      handled by fallback ordering.
    * `DOC_ONLY_ALLOWLIST` — vars intentionally documented in
      ENVIRONMENT.md but absent from .env.example (Audit section,
      legacy aliases, future-supported hooks, `CHANGEME` default value).
    * `ENV_ONLY_ALLOWLIST` — reserved for future use; currently empty.
- The checker now exposes a programmatic `runEnvDocSync({ envExampleText,
  envDocText, codeVars, ignore, docOnlyAllowlist, envOnlyAllowlist })`
  entry point that other Node tests can import without touching disk.
  Helpers `parseEnvExampleVars` and `parseEnvDocVars` are exported so
  fixtures can validate the regex contract.

Test coverage in tests/unit/check-env-doc-sync.test.ts (13 cases):

- Parses env.example assignments (commented and uncommented), rejects
  prose, and rejects backtick literals that aren't SHOUTY env names.
- Drives runEnvDocSync against in-memory fixtures for every drift
  direction (code-missing-env, env-missing-doc, doc-missing-env) and
  asserts the allowlists / ignore set behave as expected.
- Calls runEnvDocSync() with no overrides to assert the live
  .env.example, docs/ENVIRONMENT.md and source-code references stay in
  sync. This is the same check that runs in pre-commit / CI, so the
  unit-test failure surfaces drift before reviewers do.

.env.example: documents `AWS_REGION` and `AWS_DEFAULT_REGION` so
Bedrock/Kiro/audio-speech callers stay in the contract.

docs/ENVIRONMENT.md: adds rows for AWS_REGION / AWS_DEFAULT_REGION
inside §20 Provider-Specific Settings.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
2026-05-13 12:11:01 -03:00
diegosouzapw
25f794affa docs(env): align ENVIRONMENT.md with .env.example
Brings docs/ENVIRONMENT.md in line with the cleaned-up .env.example. Every
variable present in .env.example now has a row in ENVIRONMENT.md, and the
formatting convention used by the doc tables matches the regex used by
scripts/check-env-doc-sync.mjs.

Notable additions, per section:

- §3 Network & Ports — HOST, HOSTNAME bind overrides.
- §6 Tool & Routing Policies — OMNIROUTE_PAYLOAD_RULES_PATH,
  OMNIROUTE_PAYLOAD_RULES_RELOAD_MS.
- §7 URLs & Cloud Sync — KIE_CALLBACK_URL, OMNIROUTE_KIE_CALLBACK_URL,
  OMNIROUTE_PUBLIC_URL, plus the three new quota endpoint overrides
  (OMNIROUTE_CROF_USAGE_URL, OMNIROUTE_GEMINI_CLI_USAGE_URL,
  OMNIROUTE_CODEWHISPERER_BASE_URL).
- §9 CLI Tool Integration — CLI_QWEN_BIN.
- §10 Internal Agent & MCP — MCP description compression toggles,
  background-task and healthcheck overrides, RTK trust flag, Redis auth
  cache toggle, ANTIGRAVITY_CREDITS.
- §11 OAuth — GitLab legacy fallback variables (`GITLAB_BASE_URL`,
  `GITLAB_OAUTH_CLIENT_ID`, `GITLAB_OAUTH_CLIENT_SECRET`).
- §13 CLI Fingerprint — Kimi identity overrides + CLI_COMPAT_* table
  reshaped so the variable names appear in their own backticks (matches
  the env-doc sync regex). Removed the orphaned CLI_COMPAT_KIRO row.
- §14 API Key Providers — pruned the stub rows for providers whose
  static *_API_KEY is no longer consumed at runtime. Added an audit
  note pointing to the bottom of the doc.
- §15 Timeout Settings — OMNIROUTE_DEFAULT_FETCH_TIMEOUT_MS,
  OMNIROUTE_CHATGPT_TLS_TIMEOUT_MS/GRACE_MS, and the
  OMNIROUTE_CIRCUIT_BREAKER_* table.
- §16 Logging — APP_LOG_ROTATION_CHECK_INTERVAL_MS and the
  CHAT_LOG_* / CHAT_DEBUG_FILE knobs.
- §21 Proxy Health — RATE_LIMIT_AUTO_ENABLE force-on/off documentation,
  HEALTHCHECK_STAGGER_MS.
- §22 Debugging — Cursor executor toggles (CURSOR_DEBUG /
  CURSOR_STREAM_DEBUG / CURSOR_DUMP_FILE / CURSOR_STREAM_TIMEOUT_MS /
  CURSOR_STATE_DB_PATH / CURSOR_TOKEN), OMNIROUTE_LOG_REQUEST_SHAPE.
  Removed CURSOR_PROTOBUF_DEBUG (orphan).
- §23 GitHub — generic GITHUB_TOKEN fallback.
- New §25 — Provider quotas, tunnels, backups & misc runtime, covering
  Alibaba Bailian overrides, model alias compatibility, context reserve,
  MITM debug proxy, the 1Proxy egress pool, Tailscale binaries, ngrok,
  DB backups, and OMNIROUTE_TLS_PROXY_URL. Also documents REDIS_URL,
  which previously lived only in .env.example.
- New §26 — Test & E2E harness: OMNIROUTE_E2E_BOOTSTRAP_MODE,
  OMNIROUTE_E2E_PASSWORD, healthcheck disablers, Playwright skip-build,
  uninstall-hook skip, ecosystem wait timeout, all ELECTRON_SMOKE_*
  variables, CLI_DEVIN_BIN.

The Audit section is updated with the v3.8.0 removals (provider API key
stubs, CURSOR_PROTOBUF_DEBUG, CLI_COMPAT_KIRO, QIANFAN_API_KEY) and a
prominent note at the top of the doc explains the sync contract.

.env.example: documents OUTBOUND_SSRF_GUARD_ENABLED (legacy SSRF guard
flag actually consumed by src/shared/network/outboundUrlGuard.ts) and
CODEX_CLIENT_VERSION override.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
2026-05-13 11:21:10 -03:00
diegosouzapw
46932961d4 refactor(env): promote hardcoded URLs and circuit-breaker timeouts to environment
Centralizes a handful of hardcoded URLs, fetch timeouts, and circuit-breaker
constants behind opt-in environment variables. Behavior is unchanged when
the variables are unset because every call site keeps its current default.

- open-sse/services/usage.ts: extracts CROF_USAGE_URL,
  GEMINI_CLI_USAGE_URL, CODEWHISPERER_BASE_URL constants backed by
  OMNIROUTE_CROF_USAGE_URL, OMNIROUTE_GEMINI_CLI_USAGE_URL, and
  OMNIROUTE_CODEWHISPERER_BASE_URL. Lets operators redirect quota probes
  through corporate mirrors or a test fixture.
- open-sse/config/constants.ts: PROVIDER_PROFILES circuit-breaker
  thresholds and reset timeouts now honor OMNIROUTE_CIRCUIT_BREAKER_*
  env vars (oauth/api-key/local) with the same defaults as before.
- src/shared/utils/fetchTimeout.ts: DEFAULT_TIMEOUT_MS reads
  OMNIROUTE_DEFAULT_FETCH_TIMEOUT_MS (fallback 120000) so deployments can
  raise the global fallback without changing FETCH_TIMEOUT_MS semantics.
- open-sse/services/chatgptTlsClient.ts: DEFAULT_TIMEOUT_MS and
  HARD_TIMEOUT_GRACE_MS now honor OMNIROUTE_CHATGPT_TLS_TIMEOUT_MS and
  OMNIROUTE_CHATGPT_TLS_GRACE_MS (defaults 60000 / 10000).
- .env.example: documents the 11 new variables in the URLs and TIMEOUT
  sections.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
2026-05-13 10:55:33 -03:00
diegosouzapw
a7a42140a0 chore(env): add missing OMNIROUTE_*, provider, and CLI vars to .env.example
Documents 63+ environment variables that are referenced in source today but
were absent from the .env.example contract. Variables grouped by area:

- Section 3 (network): HOST, HOSTNAME bind overrides.
- Section 7 (URLs/cloud): KIE_CALLBACK_URL, OMNIROUTE_KIE_CALLBACK_URL,
  OMNIROUTE_PUBLIC_URL.
- Section 10 (MCP & background): OMNIROUTE_MCP_COMPRESS_DESCRIPTIONS,
  OMNIROUTE_MCP_DESCRIPTION_COMPRESSION,
  OMNIROUTE_ENABLE_RUNTIME_BACKGROUND_TASKS,
  OMNIROUTE_BUDGET_RESET_JOB_INTERVAL_MS,
  OMNIROUTE_REASONING_CACHE_CLEANUP_INTERVAL_MS,
  OMNIROUTE_SPEND_FLUSH_INTERVAL_MS, OMNIROUTE_SPEND_MAX_BUFFER_SIZE,
  OMNIROUTE_CONFIG_HOT_RELOAD_MS, OMNIROUTE_MIGRATIONS_DIR,
  OMNIROUTE_RTK_TRUST_PROJECT_FILTERS,
  OMNIROUTE_FORCE_DB_HEALTHCHECK,
  OMNIROUTE_DB_HEALTHCHECK_INTERVAL_MS,
  OMNIROUTE_DISABLE_REDIS_AUTH_CACHE, ANTIGRAVITY_CREDITS.
- Section 11 (OAuth): GITLAB_DUO_BASE_URL, GITLAB_BASE_URL,
  GITLAB_OAUTH_CLIENT_ID, GITLAB_OAUTH_CLIENT_SECRET.
- Section 13 (CLI fingerprint): KIMI_CLI_VERSION, KIMI_CODING_DEVICE_ID.
- Section 14 (API keys): WINDSURF_API_KEY.
- Section 21 (proxy health): RATE_LIMIT_AUTO_ENABLE, HEALTHCHECK_STAGGER_MS.
- Section 22 (debugging): CURSOR_DEBUG, CURSOR_DUMP_FILE,
  CURSOR_STREAM_TIMEOUT_MS, CURSOR_STATE_DB_PATH, CURSOR_TOKEN,
  OMNIROUTE_LOG_REQUEST_SHAPE.
- Section 23 (GitHub): GITHUB_TOKEN.
- New section 24 (provider quotas / tunnels / sandbox): ALIBABA_CODING_PLAN_HOST,
  ALIBABA_CODING_PLAN_QUOTA_URL, CONTEXT_RESERVE_TOKENS,
  MODEL_ALIAS_COMPAT_ENABLED, CLI_DEVIN_BIN, COMMAND_CODE_CALLBACK_PORT,
  MITM_LOCAL_PORT, MITM_DISABLE_TLS_VERIFY, ONEPROXY_ENABLED,
  ONEPROXY_API_URL, ONEPROXY_MAX_PROXIES, ONEPROXY_MIN_QUALITY_THRESHOLD,
  TAILSCALE_BIN, TAILSCALED_BIN, NGROK_AUTHTOKEN, DB_BACKUP_MAX_FILES,
  DB_BACKUP_RETENTION_DAYS, OMNIROUTE_TLS_PROXY_URL,
  SKILLS_MAX_FILE_BYTES, SKILLS_MAX_HTTP_RESPONSE_BYTES,
  SKILLS_MAX_SANDBOX_OUTPUT_CHARS, SKILLS_SANDBOX_TIMEOUT_MS,
  SKILLS_SANDBOX_NETWORK_ENABLED, SKILLS_ALLOWED_SANDBOX_IMAGES.
- New section 25 (test & E2E): OMNIROUTE_E2E_BOOTSTRAP_MODE,
  OMNIROUTE_E2E_PASSWORD, OMNIROUTE_DISABLE_LOCAL_HEALTHCHECK,
  OMNIROUTE_DISABLE_TOKEN_HEALTHCHECK, OMNIROUTE_HIDE_HEALTHCHECK_LOGS,
  OMNIROUTE_PLAYWRIGHT_SKIP_BUILD, OMNIROUTE_SKIP_UNINSTALL_HOOK,
  ECOSYSTEM_SERVER_WAIT_MS, ELECTRON_SMOKE_URL, ELECTRON_SMOKE_TIMEOUT_MS,
  ELECTRON_SMOKE_SETTLE_MS, ELECTRON_SMOKE_APP_EXECUTABLE,
  ELECTRON_SMOKE_DATA_DIR, ELECTRON_SMOKE_KEEP_DATA,
  ELECTRON_SMOKE_STREAM_LOGS.

All entries are commented out (`#KEY=default`) so behavior is unchanged
until an operator explicitly enables them. Defaults reflect the actual
values used by the source (e.g. 6h DB healthcheck interval, 10m budget
job, 30m reasoning cleanup, 60s spend flush).

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
2026-05-13 10:44:34 -03:00
diegosouzapw
0a800d87e1 chore(env): remove orphan vars from .env.example
Removes 11 environment variable entries from `.env.example` that no
longer correspond to any reference in source code:

- Provider API keys with no runtime hook today: CEREBRAS_API_KEY,
  NEBIUS_API_KEY, PERPLEXITY_API_KEY, MISTRAL_API_KEY, COHERE_API_KEY,
  TOGETHER_API_KEY, GROQ_API_KEY, XAI_API_KEY, FIREWORKS_API_KEY.
  Provider credentials are managed via Dashboard/Providers or the
  encrypted DB; the leftover entries were stubs only.
- CURSOR_PROTOBUF_DEBUG (executor uses CURSOR_DEBUG/CURSOR_STREAM_DEBUG).
- CLI_COMPAT_KIRO (Kiro is in CLI_COMPAT_OMITTED_PROVIDER_IDS).

Kept four entries from the original audit list because they are still
exercised at runtime (verified via grep on docker-compose and dynamic
`${PROVIDER}_USER_AGENT` lookup in BaseExecutor):
- ANTIGRAVITY_USER_AGENT (dynamic in BaseExecutor.buildHeaders)
- KIRO_USER_AGENT (same dynamic pattern)
- PROD_API_PORT, PROD_DASHBOARD_PORT (docker-compose.prod.yml)

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
2026-05-13 10:31:20 -03:00
OmniRoute Ops
ddf1ba21b3 refactor(claudeHelper): export NON_ANTHROPIC_THINKING_PLACEHOLDER and reuse in tests
Per gemini-code-assist review on #2224: export the placeholder constant from claudeHelper.ts and import it in the unit test rather than duplicating the literal. Keeps test in sync with implementation.
2026-05-13 13:18:27 +00:00
diegosouzapw
f3b944a55a refactor(scripts): organize into build/dev/check/docs/i18n/ad-hoc subfolders
Reorganizes the 29 active scripts under scripts/ into purpose-driven
subfolders:

- scripts/build/    (11) — Build, install, publish, runtime env
- scripts/dev/      (13) — Dev servers, test runners, healthchecks
- scripts/check/    (10) — Lint/validation/coverage checks
- scripts/docs/      (2) — Docs index and provider reference generation
- scripts/i18n/     (+3) — Adds Python translation utilities (check/validate/autotranslate)
- scripts/ad-hoc/    (4) — One-shot maintenance utilities

Updates all references in package.json, electron/package.json,
.husky/pre-commit, .github/workflows/ci.yml, Dockerfile, src/,
tests/, scripts/ internal cross-imports, playwright.config.ts,
and English docs (CODEBASE_DOCUMENTATION, ENVIRONMENT, FEATURES,
RELEASE_CHECKLIST, COVERAGE_PLAN, ELECTRON_GUIDE, I18N, GEMINI).

Also patches scripts/build/pack-artifact-policy.ts so the npm pack
allowlist mirrors the new layout.

Validates with:
- npm run lint            (exit 0 — pre-existing minified-bundle errors only)
- npm run typecheck:core  (exit 0)
- npm run check:docs-all  (exit 0)
- unit tests for moved scripts (57 tests pass)

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
2026-05-13 10:14:25 -03:00
OmniRoute Ops
6f2b360ce8 fix(claudeHelper): preserve latest assistant thinking blocks verbatim
Derived from squash commit 161cfcf7 (PR #9). The original squash was fat
(316 files) because the source branch was rebased on an old base; this
commit applies only the claudeHelper-relevant files surgically onto deploy.

Computes latestAssistantIndex once before the message loop and skips
the rewrite-to-redacted-thinking transform on the latest assistant
message. Symmetric guard for non-Anthropic Claude-shape providers
preserves plain thinking.thinking text on the latest message.

Co-authored-by: OmniRoute Ops <ops@nomenak.dev>
2026-05-13 13:14:03 +00:00
diegosouzapw
ca6916a867 chore(scripts): remove scratch one-shot scripts archive
Removes 23 obsolete one-shot scripts under scripts/scratch/ and the
top-level scripts/scratch.mjs. Their history is preserved in the
archive/scripts-scratch-pre-3.8 branch for reference.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
2026-05-13 08:26:14 -03:00
diegosouzapw
918a539baf docs(release): v3.8.0 documentation overhaul (FIX 1-9)
Root docs
- GEMINI.md: remove plaintext credential (Hard Rule 1) and refresh references
- CLAUDE.md: update coverage gate to 75/75/75/70, add module counts for v3.8.0
- SECURITY.md: add Supported Versions section
- AGENTS.md: refresh counts (177 providers, 37 MCP tools, 14 strategies, 5 A2A skills, 3 cloud agents) and module map
- CONTRIBUTING.md: align coverage gate, Node range, conventional-commit scopes
- CODE_OF_CONDUCT.md: refresh contact
- llm.txt: refresh Node range, provider/tool/strategy counts, add v3.8.0 highlights and documentation index
- Tuto_Qdrant.MD -> Tuto_Qdrant.md (rename + dormant-integration status banner)

i18n strict mirrors
- docs/i18n/<40 locales>/llm.txt: refresh body to match root (preserving locale header + flags line + --- separator)

Cross-references
- docs/MEMORY.md, docs/REPOSITORY_MAP.md: update Tuto_Qdrant.md path and note dormant status
- Cleanup: remove .issues/feat-batch-delete-provider-accounts.md and docs/archive/RFC-AUTO-ASSESSMENT-DRAFT.md (already absent)

Agent workflows / skills / commands
- .claude/commands/*-cc.md, .agents/workflows/*-ag.md, .agents/skills/*/SKILL.md:
  - Replace ghost tools: search_web -> WebSearch, read_url_content -> WebFetch,
    view_file -> Read, write_to_file -> Write
  - notify_user -> mandatory stop checkpoints
  - version-bump / generate-release: 2.x.y -> 3.x.y, expand docs table to 28 entries,
    mark /update-docs and /update-i18n as deprecated
  - capture-release-evidences / review-discussions: tool-mapping notes for
    browser_subagent (mcp__claude-in-chrome__* and gh CLI)
  - review-prs: align coverage thresholds (>=75/>=70, ~82% measured)

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
2026-05-13 08:23:02 -03:00
diegosouzapw
26d6b7a76f docs(docs): add REPOSITORY_MAP + trim README for sales
REPOSITORY_MAP.md (new, ~26 KB) documents every directory and root file
with one-line descriptions so newcomers can navigate the tree without
opening files. Covers src/, open-sse/, electron/, bin/, scripts/, docs/,
tests/, .github/, .husky/, .claude/, .agents/, and the underscore-prefixed
out-of-tree directories.

README.md (was ~100 KB / 1876 lines) is rewritten as a sales-focused
landing of ~22 KB / 482 lines:
- Updated SEO/JSON-LD/FAQ to v3.8.0 (was 3.7.8) with correct counts
  (177 providers, 14 strategies, 37 MCP tools, 14 OAuth, 9-factor Auto-Combo).
- Trimmed long FAQ/Troubleshooting/Compression Math/Docker prose
  in favor of links to the dedicated docs.
- Added "What's new in v3.8.0" section + competitive comparison table.
- Added a categorized Documentation index covering all 44 docs in docs/.
- Kept screenshots, quick start, providers summary, compatibility tables,
  multi-platform install table, use-cases at a glance, i18n strip,
  community + security blocks.

The CHANGELOG, deep technical guides, and per-area references stay where
they belong — under docs/. The README is now a marketing page that
points to them.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
2026-05-13 04:04:22 -03:00
diegosouzapw
4437b0040e docs(docs): add drift detection scripts + minor refinements
Adds three automated drift-detection scripts under scripts/, plus npm
helpers to run them, and applies small follow-ups to TERMUX, I18N, and
CODEBASE docs flagged by the docs audit.

New scripts (scripts/):
- check-env-doc-sync.mjs — cross-checks process.env.X in code vs
  .env.example vs docs/ENVIRONMENT.md. Soft-fails by default; --strict
  exits 1 on drift.
- check-docs-counts-sync.mjs — validates counts (executors, routing
  strategies, OAuth providers, A2A skills, cloud agents) match between
  code and docs.
- check-deprecated-versions.mjs — flags hardcoded stale versions and
  "Last updated" dates older than 60 days. Uses hardcoded regexes to
  satisfy semgrep ReDoS guidance.

package.json:
- New scripts: check:env-doc-sync, check:docs-counts,
  check:deprecated-versions, check:docs-all (umbrella).

Doc refinements:
- TERMUX_GUIDE: spell out the Node version range required by package.json.
- I18N: note that docs/i18n/in/ tree is an orphan duplicate of hi/ that
  the generator no longer writes to; replace hard-coded
  UNTRANSLATABLE_KEYS count with "varies per release".
- CODEBASE_DOCUMENTATION: minor wording.

Pre-commit hook is unchanged — the new checks are heuristic and ship as
on-demand npm scripts to avoid false-positive blocks.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
2026-05-13 03:47:41 -03:00
diegosouzapw
20cb648ea9 docs(docs): expand v3.8.0 guides and add provider reference generator
Refresh the documentation set for v3.8.0 with new guides covering
authz, agent protocols, cloud agents, compliance, electron, evals,
guardrails, memory, skills, stealth, tunnels, webhooks, and more.

Add an auto-generated provider reference plus a
`gen:provider-reference` script to keep provider catalog docs aligned
with `src/shared/constants/providers.ts`.
2026-05-13 03:47:41 -03:00
diegosouzapw
204e15628c chore(release): prepare v3.8.0 docs and coverage ratchet
Refresh the v3.8.0 documentation set across API, setup, Docker,
environment, Fly.io, VM deployment, and troubleshooting guides.

Document the updated budget payload, management-auth requirements,
WebSocket bridge secret, Compose profiles, production deployment
details, and expanded Node support. Also update the OpenAPI catalog,
raise coverage thresholds to match the current baseline, and align
cloud-agent task route typing and schemas with the stricter runtime
behavior.
2026-05-13 03:47:40 -03:00
diegosouzapw
46e5aa5522 refactor(api): consolidate auth routing and provider config handling
Centralize optional API key capability checks so dashboard forms and
provider schemas share the same rules, including keyless Pollinations
support and cloud-agent batch testing mode.

Also align auto-combo config on `routerStrategy`, keep legacy combo
reads compatible, preserve MCP routes as management APIs, narrow
`require-login` public access to readonly/bootstrap flows, and make
cloud-agent CORS reflect the request origin for credentialed requests.
2026-05-13 03:47:40 -03:00
diegosouzapw
c89663d774 fix(auth): require management auth for agent and cooldown APIs
Protect cloud agent task routes and model cooldown management endpoints
with management-session auth and consistent CORS handling.

Also align cloud agent API serialization with the dashboard, reuse the
provider connection schema for CLI key storage, and accept active OAuth
tokens when building virtual auto-combo candidates.
2026-05-13 03:47:40 -03:00
Diego Rodrigues de Sa e Souza
20b35c4d20 security: sanitize error messages in API routes (CodeQL js/stack-trace-exposure)
Integrated into release/v3.8.0
2026-05-12 23:23:07 -03:00
dependabot[bot]
6fa2d5e84f deps: bump electron from 41.5.1 to 42.0.1 in /electron
Integrated into release/v3.8.0
2026-05-12 23:22:14 -03:00
dependabot[bot]
dbe9d84649 deps: bump Docker node from 24.15.0 to 26.1.0-trixie-slim
Integrated into release/v3.8.0
2026-05-12 23:21:28 -03:00
dependabot[bot]
9e49baefa4 deps: bump production group (http-proxy-middleware 3→4, next-intl 4.11.2)
Integrated into release/v3.8.0
2026-05-12 23:20:45 -03:00
dependabot[bot]
75b979282f deps: bump the development group with 6 updates (#2184)
Merged into release/v3.8.0. Dev dependency updates: Playwright 1.60, lint-staged 17 (major — Node 22+ compatible), typescript-eslint, vitest, wait-on.
2026-05-12 22:42:53 -03:00
dependabot[bot]
e354d942e3 deps: bump electron-builder from 26.9.1 to 26.10.0 in /electron (#2183)
Merged into release/v3.8.0. Minor electron-builder bump (26.9→26.10) with pnpm 11 support and AppImage fixes.
2026-05-12 22:41:00 -03:00
Ramel Tecnologia - Rafa Martins
c53587ef2d Add Brazilian WhatsApp group link to README (#2201)
Merged into release/v3.8.0 — aligned workflow files and lockfile with release branch, fixed trailing space in WhatsApp URL. Thanks @rafacpti23!
2026-05-12 22:35:20 -03:00
diegosouzapw
d94b6b5012 chore(agents): rename capture release evidences skill identifier 2026-05-12 22:13:15 -03:00
diegosouzapw
15d6fc35da fix(ci): run coverage gate serially 2026-05-12 21:44:06 -03:00
diegosouzapw
da982d31be fix(ci): align resilience and thinking checks 2026-05-12 20:44:23 -03:00
diegosouzapw
a260795327 fix(ci): align cloud code thinking and model catalog tests 2026-05-12 20:28:02 -03:00
diegosouzapw
4f20fbc36c fix(api): validate model cooldown delete payload 2026-05-12 20:11:45 -03:00
diegosouzapw
4ac6e58360 chore(deps): refresh mermaid lockfile for audit 2026-05-12 20:05:06 -03:00
Dohyun Jung
fc620514a9 feat(providers): add Command Code provider (#2199)
Integrated into release/v3.8.0 after syncing the contributor branch, removing unrelated workflow/package-lock changes, and validating Command Code provider, auth, validation, and Responses coverage locally.
2026-05-12 19:57:35 -03:00
InkshadeWoods
e6aee3d26c feat: add ModelScope provider-specific 429 handling and retry logic (#2202)
Integrated into release/v3.8.0 after syncing the contributor branch, removing unrelated workflow/docker/package-lock changes, tightening ModelScope 429 classification, and validating policy coverage locally.
2026-05-12 19:57:26 -03:00
nickwizard
061c0c29fe Feat/provider models (#2196)
Integrated into release/v3.8.0 after syncing the contributor branch, removing unrelated workflow/docker/package-lock changes, and validating provider-scoped models coverage locally.
2026-05-12 19:57:15 -03:00
backryun
af7d056f7e chore(providers): improve BazaarLink and Completions.me support (#2177)
Integrated into release/v3.8.0 after syncing the contributor branch, removing unrelated dependency churn, and validating executor/default URL coverage locally.
2026-05-12 19:57:06 -03:00
Anton
a408b30896 fix(cliproxyapi): probe /v1/models for health (CPA 6.x has no /health) (#2189)
Integrated into release/v3.8.0 after syncing the contributor branch and validating tests/unit/cliproxyapi-executor.test.ts locally.
2026-05-12 19:50:07 -03:00
Anton
13f7ebce5a fix(stream): skip [DONE] terminator for Claude SSE clients (#2190)
Integrated into release/v3.8.0 after syncing the contributor branch and validating tests/unit/stream-utils.test.ts locally.
2026-05-12 19:49:59 -03:00
Anton
5c11b57542 fix(claudeHelper): emit data field on redacted_thinking, drop bogus signature (#2191)
Integrated into release/v3.8.0 after syncing the contributor branch and validating tests/unit/translator-claude-helper-thinking.test.ts locally.
2026-05-12 19:49:50 -03:00
Anton
340f68bbee fix(modelSpecs): cap thinking budget for Claude Opus 4.6 / 4.7 / Sonnet 4.6 (#2197)
Integrated into release/v3.8.0 after syncing the contributor branch and validating tests/unit/thinking-budget.test.ts locally.
2026-05-12 19:44:45 -03:00
Anton
b23b624f82 fix(reasoning-cache): include xiaomi-mimo in replay provider/model detection (#2198)
Integrated into release/v3.8.0 after syncing the contributor branch and validating tests/unit/reasoning-cache.test.ts locally.
2026-05-12 19:43:58 -03:00
Anton
607ae5ca5e fix(cliproxyapi): detect Anthropic shape on minimal Capy bodies (#2192)
Integrated into release/v3.8.0 after syncing the contributor branch and validating tests/unit/cliproxyapi-executor.test.ts locally.
2026-05-12 19:43:04 -03:00
diegosouzapw
007e19fe30 refactor(workflows): align agent and claude workflow naming
Rename skill identifiers to their Codex-specific variants and move
workflow command files to the new `-ag` and `-cc` naming scheme.

Mirror the workflow guides under both `.agents/workflows` and
`.claude/commands` so the same operational playbooks are available
through each command surface.
2026-05-12 17:38:53 -03:00
diegosouzapw
5455bf9b77 docs(agents): clarify Codex execution guards in skill guides
Document explicit Codex handling for `// turbo` and `// turbo-all`
across deployment, release, issue, PR, discussion, and versioning
skills.

Add hard-stop approval guidance so report phases end before any
implementation, merge, publish, or deployment actions continue, and
spell out parallelism limits for independent versus dependent steps.
2026-05-12 17:07:02 -03:00
diegosouzapw
a6d4c012ae feat(agents): add release, deployment, and triage workflows
Add new agent skills and Claude command definitions for release
generation, VPS deployment, issue triage, PR review, discussion
review, feature implementation, and version bump workflows.

These additions document and standardize internal maintenance
operations across the release branch process and operational tooling.
2026-05-12 16:31:08 -03:00
diegosouzapw
4f87062f3e fix(tests): update test snapshots and registry for PRs merged into v3.8.0
- providerModels: supportsXHighEffort returns true for unknown providers
  (passthrough) so PR #2162 sanitizeReasoningEffortForProvider no longer
  downgrades xhigh for non-registry custom providers
- providerRegistry(openai): add gpt-4o + gpt-4o-2024-11-20 with explicit
  contextLength so catalog tests can resolve them without synced DB data
- context-manager.test: update GPT-5.5 Codex expected context 1050000→400000
  (PR #2163 capped codex OAuth context at 400K)
- provider-models-config.test: update kiro claude-opus-4.7 contextLength
  undefined→1000000 (PR #2163 added explicit context window)
- oauth-providers-config.test: add windsurf and devin-cli to expected
  provider keys and config map (PR #2168)

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-05-12 15:05:00 -03:00
diegosouzapw
be76707452 fix(cliRuntime): resolve TDZ for isWindows in devin config via lazy getter, add spawn metachar guard
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-05-11 22:22:26 -03:00