diegosouzapw
fb7a9f2ba8
test(stabilization): resolve unit test failures in blackbox-web, schema-coercion, translator-helper-branches, usage-service-hardening, and audio-transcription
2026-05-29 06:45:58 -03:00
diegosouzapw
f1eb08c7b5
Merge branch release/v3.8.6 into fix/gemini-antigravity-tool-call-normalization (resolve conflict)
2026-05-29 05:32:27 -03:00
diegosouzapw
dd5098bf67
Merge branch release/v3.8.6 into fix/interleaved-reasoning-replay-gating (resolve conflict)
2026-05-29 05:31:32 -03:00
diegosouzapw
1bf73fe492
Merge branch release/v3.8.6 into fix/i18n-pt-BR-translations (resolve conflict)
2026-05-29 05:30:55 -03:00
diegosouzapw
9ff906b80b
Merge branch release/v3.8.6 into fix/windsurf-login-2026-05-29 (resolve conflict)
2026-05-29 05:30:04 -03:00
diegosouzapw
ebae877aa3
refactor: remove agent skill documentation files and streamline maintenance workflows
2026-05-29 05:29:31 -03:00
mi
1f5c215cc0
fix(audio): build multipart body manually to preserve Content-Type ( #2842 )
...
Integrated into release/v3.8.6
2026-05-29 05:29:25 -03:00
Muhammad Mugni Hadi
1461a78d07
feat(usage): per-API-key token limits scoped to model/provider/global ( #2888 )
...
Integrated into release/v3.8.6
2026-05-29 05:29:10 -03:00
Hernan Javier Ardila Sanchez
d96eeef9c1
fix: provider model sync pruning and dynamic antigravity MITM proxy mappings ( #2886 )
...
Integrated into release/v3.8.6
2026-05-29 05:29:06 -03:00
Raxxoor
a9b5a7cc8c
fix(antigravity): harden signatureless tool history ( #2878 )
...
Integrated into release/v3.8.6
2026-05-29 05:29:00 -03:00
Paijo
2355bf9419
Audit & add web cookie providers: fix 4 missing registry entries + DuckDuckGo ( #2862 )
...
Integrated into release/v3.8.6
2026-05-29 05:28:54 -03:00
Rajvardhan Patil
a7e71ae494
fix(opencode-go): add provider limits quota fetcher ( #2861 )
...
Integrated into release/v3.8.6
2026-05-29 05:28:50 -03:00
nickwizard
a8b4dc3e8c
fix(gemini-cli): prefer real project IDs over default-project ( #2841 )
...
Integrated into release/v3.8.6
2026-05-29 05:28:42 -03:00
Container
cccc53cade
fix(mcp): redirect console.log/warn to stderr in --mcp stdio mode ( #2840 )
...
Integrated into release/v3.8.6
2026-05-29 05:28:38 -03:00
Lenine Júnior
8f4fc8bcda
fix(sse): repair RTK engine defaults so dedup and direct calls work ( #2825 )
...
Integrated into release/v3.8.6
2026-05-29 05:28:32 -03:00
Lenine Júnior
53ac23cfe6
feat(compression): expand pt-BR pack with troglodita rules (15 → 49) ( #2818 )
...
Integrated into release/v3.8.6
2026-05-29 05:28:28 -03:00
yuna amelia
e3d5bc2d61
fix(oauth): windsurf import-token mapTokens signature mismatch
...
The route at `src/app/api/oauth/[provider]/[action]/route.ts` invokes
`providerData.mapTokens({ accessToken: token })` (object), matching the
cursor/kiro signature. The windsurf provider was declared with
`mapTokens(token: string)` instead, so the entire object was stored as
`accessToken`. When the connection record reached the SQLite layer it
crashed with:
SQLite3 can only bind numbers, strings, bigints, buffers, and null
Fix by aligning windsurf's `mapTokens` signature with the route caller
and the cursor/kiro convention. Also dedupe a copy-pasted second
`if (action === "import-token")` block in the route handler — the
second block was unreachable but identical to the first.
Adds two regression tests asserting that
`provider.mapTokens({ accessToken })` returns a string `accessToken` for
both windsurf and devin-cli, so a future signature drift trips the gate
instead of the SQLite bind error in production.
2026-05-29 13:47:45 +08:00
yuna amelia
a928d9f56c
fix(dashboard): force import-token panel for windsurf/devin-cli
...
Phase 1 hotfix: hide the 'Browser Login' tab and start in Paste API Key
mode. Removes windsurf/devin-cli from PKCE_CALLBACK_SERVER_PROVIDERS so
no callback server is started for them. Codex still uses the PKCE flow.
The 'Get token' link continues to point at windsurf.com/show-auth-token
via the existing supportsTokenPaste form copy.
2026-05-29 13:05:22 +08:00
diegosouzapw
a1261ccf80
fix(cli,docs): use requireCliToolsAuth in logs route + document OPENCODE quota env
...
Post-merge contract fixes for v3.8.6:
- src/app/api/cli-tools/logs/route.ts (#2810 ) now uses the shared
requireCliToolsAuth guard (param renamed req->request) to satisfy the
cli-tools-auth-hardening contract test.
- Document OMNIROUTE_OPENCODE_QUOTA_URL (#2867 ) in docs/reference/ENVIRONMENT.md
to satisfy the env/docs sync contract.
2026-05-29 02:03:03 -03:00
yuna amelia
dbaf25079c
refactor(oauth): annotate retired PKCE fields in WINDSURF_CONFIG
...
No behaviour change - comment-only update documenting that authorizeUrl,
codeChallengeMethod, callbackPort, callbackPath, apiServerUrl, and
exchangePath are no longer consumed. Active fields (inferenceUrl,
showAuthTokenUrl, firebaseApiKey, ideName) called out separately.
2026-05-29 13:00:46 +08:00
yuna amelia
82999c021f
fix(oauth): return 410 Gone for retired windsurf/devin-cli PKCE actions
...
start-callback-server, authorize, and poll-callback (GET + POST) now
return 410 Gone with a pointer to /import-token. The 410 short-circuit
runs before auth so the response is honest about the action being
permanently gone, not gated. Codex PKCE flow unchanged.
Tests: 5 new assertions cover GET + POST 410 paths and a Codex
regression check.
2026-05-29 12:59:17 +08:00
yuna amelia
6d157e481f
fix(oauth): switch windsurf provider to import_token flow
...
The PKCE auth URL targeting app.devin.ai/editor/signin returns 404
post-rebrand. Until Phase 2 ports Firebase OAuth + RegisterUser, the
only supported path is import-token via windsurf.com/show-auth-token.
- windsurf.ts: drop buildAuthUrl, set flowType=import_token
- generateAuthData returns supported:false + helpful error for windsurf/devin-cli
- tests: assert flowType + disabled stub
2026-05-29 12:50:46 +08:00
Randi
b971db8e77
fix(claude): preserve max effort for supported models ( #2875 )
...
Integrated into release/v3.8.6.
2026-05-29 01:49:57 -03:00
Randi
e510a57555
Rename proxy log Public IP to Client IP ( #2880 )
...
Integrated into release/v3.8.6.
2026-05-29 01:46:25 -03:00
Diego Rodrigues de Sa e Souza
c02b6ea008
fix(combo): normalize upstream Headers for Node 24 undici interop ( #2751 ) ( #2823 )
...
Integrated into release/v3.8.6.
2026-05-29 01:46:12 -03:00
Diego Rodrigues de Sa e Souza
ed36bd7264
fix(cli): restore omniroute logs command stream ( #2756 ) ( #2810 )
...
Integrated into release/v3.8.6.
2026-05-29 01:45:59 -03:00
Randi
2428ad2bcd
feat(claude): default xhigh support for newer Opus models ( #2874 )
...
Integrated into release/v3.8.6.
2026-05-29 01:44:58 -03:00
Diego Rodrigues de Sa e Souza
517c3c6e44
fix(usage): add opencode quota fetcher ( #2852 ) ( #2867 )
...
Integrated into release/v3.8.6.
2026-05-29 01:44:43 -03:00
Paijo
f270d20de0
fix: wire CLIProxyAPI fallback settings into chatCore routing engine ( #2866 )
...
Integrated into release/v3.8.6.
2026-05-29 01:44:32 -03:00
Hernan Javier Ardila Sanchez
1d55f96e01
fix(combo): preserve system messages during context handoff summary generation ( #2865 )
...
Integrated into release/v3.8.6.
2026-05-29 01:44:22 -03:00
Hernan Javier Ardila Sanchez
1442e086e4
fix(cli): allow nullable/optional apiKey in cliMitmStartSchema ( #2857 )
...
Integrated into release/v3.8.6.
2026-05-29 01:44:11 -03:00
Tushar Agarwal
c9251f9326
fix(geminiHelper): support rec.image content shape + warn on dropped remote URLs (refs #2807 ) ( #2855 )
...
Integrated into release/v3.8.6.
2026-05-29 01:44:01 -03:00
Lenine Júnior
32adf6275a
feat(sse): add RTK filters for kubectl, docker-build, composer, gh ( #2824 )
...
Integrated into release/v3.8.6.
2026-05-29 01:43:51 -03:00
JeferssonLemes
9dfe482c1c
fix(skills): skip interception for unregistered client-native tools ( #2815 ) ( #2817 )
...
Integrated into release/v3.8.6.
2026-05-29 01:43:40 -03:00
Diego Rodrigues de Sa e Souza
1a4c4f8d94
fix(cli): replace cli-table3 with hand-rolled formatter ( #2752 ) ( #2813 )
...
Integrated into release/v3.8.6.
2026-05-29 01:43:30 -03:00
yuna amelia
dd10b4b94c
docs(plan): Phase 1 windsurf login hotfix implementation plan
...
10 tasks covering:
- TDD assertions for flowType + 410 Gone responses
- Provider switch to import_token
- Route handler retiring authorize/start-callback-server/poll-callback
- OAuthModal UI override
- i18n sync
- Verification + PR steps
2026-05-29 12:31:39 +08:00
yuna amelia
dbe7b62cbe
docs(oauth): add Windsurf login fix design (Phase 1 hotfix + Phase 2 Firebase OAuth)
...
Two-phase plan to fix the broken Windsurf OAuth flow:
- Phase 1: drop the dead app.devin.ai/editor/signin PKCE path, promote
import-token from windsurf.com/show-auth-token as the primary path
- Phase 2: port Firebase OAuth + RegisterUser flow from
fendoushaonian/WindSurf-gRPC-API for full browser-based automation
Spec only - no code changes yet.
2026-05-29 12:28:20 +08:00
GreatLiu
b741bd6b23
fix(github): route claude-opus-4.6 via chat completions ( #2821 )
...
Integrated into release/v3.8.6.
2026-05-29 01:25:18 -03:00
Diego Rodrigues de Sa e Souza
c216085e92
fix(translator): pass-through tool_search built-in tool type ( #2766 ) ( #2811 )
...
Integrated into release/v3.8.6.
2026-05-29 01:00:54 -03:00
Diego Rodrigues de Sa e Souza
fee1c17d51
fix(opencode): qwen3.x max/plus models lack vision support ( #2822 ) ( #2836 )
...
Integrated into release/v3.8.6.
2026-05-29 01:00:24 -03:00
Diego Rodrigues de Sa e Souza
283c05d3d0
fix(nous-research): correct baseUrl to include /chat/completions ( #2826 ) ( #2835 )
...
Integrated into release/v3.8.6.
2026-05-29 00:59:54 -03:00
Diego Rodrigues de Sa e Souza
0a101b95b3
fix(usage): un-invert GitHub Copilot Free/limited quota — limited_user_quotas is remaining ( #2876 ) ( #2881 )
...
Integrated into release/v3.8.6.
2026-05-29 00:59:29 -03:00
Diego Rodrigues de Sa e Souza
01041967de
fix(quota): honor explicit per-connection preflight opt-out ( #2831 ) ( #2844 )
...
Integrated into release/v3.8.6.
2026-05-29 00:58:58 -03:00
Diego Rodrigues de Sa e Souza
5f886dc73a
fix(translator): strip safety_identifier in openai-responses cleanup ( #2770 ) ( #2809 )
...
Integrated into release/v3.8.6.
2026-05-29 00:58:01 -03:00
Diego Rodrigues de Sa e Souza
b677dd6b25
fix(combo): resolve custom provider targets via combo name ( #2778 ) ( #2812 )
...
Integrated into release/v3.8.6.
2026-05-29 00:57:41 -03:00
Diego Rodrigues de Sa e Souza
18dae1ab95
fix(api): include noAuth providers in /v1/models catalog ( #2798 ) ( #2814 )
...
Integrated into release/v3.8.6.
2026-05-29 00:57:36 -03:00
Diego Rodrigues de Sa e Souza
25db3dee59
fix(cli): register openclaw in tool-detector ( #2833 ) ( #2850 )
...
Integrated into release/v3.8.6.
2026-05-29 00:57:30 -03:00
Hernan Javier Ardila Sanchez
94a34899b2
fix(qoder): reject invalid/expired PATs returning Cosy 500 error ( #2860 )
...
Integrated into release/v3.8.6.
2026-05-29 00:56:19 -03:00
Tushar Agarwal
f3404227d2
fix(deepseek-web): return 400 when client sends tools[] - chat.deepseek.com has no tool support ( #2854 )
...
Integrated into release/v3.8.6.
2026-05-29 00:56:16 -03:00
Annas Alghoffar
0c9740c771
fix(cli): respect PORT env var in serve command ( #2845 )
...
Integrated into release/v3.8.6.
2026-05-29 00:56:13 -03:00