Commit Graph

3952 Commits

Author SHA1 Message Date
diegosouzapw
fb7a9f2ba8 test(stabilization): resolve unit test failures in blackbox-web, schema-coercion, translator-helper-branches, usage-service-hardening, and audio-transcription 2026-05-29 06:45:58 -03:00
diegosouzapw
f1eb08c7b5 Merge branch release/v3.8.6 into fix/gemini-antigravity-tool-call-normalization (resolve conflict) 2026-05-29 05:32:27 -03:00
diegosouzapw
dd5098bf67 Merge branch release/v3.8.6 into fix/interleaved-reasoning-replay-gating (resolve conflict) 2026-05-29 05:31:32 -03:00
diegosouzapw
1bf73fe492 Merge branch release/v3.8.6 into fix/i18n-pt-BR-translations (resolve conflict) 2026-05-29 05:30:55 -03:00
diegosouzapw
9ff906b80b Merge branch release/v3.8.6 into fix/windsurf-login-2026-05-29 (resolve conflict) 2026-05-29 05:30:04 -03:00
diegosouzapw
ebae877aa3 refactor: remove agent skill documentation files and streamline maintenance workflows 2026-05-29 05:29:31 -03:00
mi
1f5c215cc0 fix(audio): build multipart body manually to preserve Content-Type (#2842)
Integrated into release/v3.8.6
2026-05-29 05:29:25 -03:00
Muhammad Mugni Hadi
1461a78d07 feat(usage): per-API-key token limits scoped to model/provider/global (#2888)
Integrated into release/v3.8.6
2026-05-29 05:29:10 -03:00
Hernan Javier Ardila Sanchez
d96eeef9c1 fix: provider model sync pruning and dynamic antigravity MITM proxy mappings (#2886)
Integrated into release/v3.8.6
2026-05-29 05:29:06 -03:00
Raxxoor
a9b5a7cc8c fix(antigravity): harden signatureless tool history (#2878)
Integrated into release/v3.8.6
2026-05-29 05:29:00 -03:00
Paijo
2355bf9419 Audit & add web cookie providers: fix 4 missing registry entries + DuckDuckGo (#2862)
Integrated into release/v3.8.6
2026-05-29 05:28:54 -03:00
Rajvardhan Patil
a7e71ae494 fix(opencode-go): add provider limits quota fetcher (#2861)
Integrated into release/v3.8.6
2026-05-29 05:28:50 -03:00
nickwizard
a8b4dc3e8c fix(gemini-cli): prefer real project IDs over default-project (#2841)
Integrated into release/v3.8.6
2026-05-29 05:28:42 -03:00
Container
cccc53cade fix(mcp): redirect console.log/warn to stderr in --mcp stdio mode (#2840)
Integrated into release/v3.8.6
2026-05-29 05:28:38 -03:00
Lenine Júnior
8f4fc8bcda fix(sse): repair RTK engine defaults so dedup and direct calls work (#2825)
Integrated into release/v3.8.6
2026-05-29 05:28:32 -03:00
Lenine Júnior
53ac23cfe6 feat(compression): expand pt-BR pack with troglodita rules (15 → 49) (#2818)
Integrated into release/v3.8.6
2026-05-29 05:28:28 -03:00
yuna amelia
e3d5bc2d61 fix(oauth): windsurf import-token mapTokens signature mismatch
The route at `src/app/api/oauth/[provider]/[action]/route.ts` invokes
`providerData.mapTokens({ accessToken: token })` (object), matching the
cursor/kiro signature. The windsurf provider was declared with
`mapTokens(token: string)` instead, so the entire object was stored as
`accessToken`. When the connection record reached the SQLite layer it
crashed with:

  SQLite3 can only bind numbers, strings, bigints, buffers, and null

Fix by aligning windsurf's `mapTokens` signature with the route caller
and the cursor/kiro convention. Also dedupe a copy-pasted second
`if (action === "import-token")` block in the route handler — the
second block was unreachable but identical to the first.

Adds two regression tests asserting that
`provider.mapTokens({ accessToken })` returns a string `accessToken` for
both windsurf and devin-cli, so a future signature drift trips the gate
instead of the SQLite bind error in production.
2026-05-29 13:47:45 +08:00
yuna amelia
a928d9f56c fix(dashboard): force import-token panel for windsurf/devin-cli
Phase 1 hotfix: hide the 'Browser Login' tab and start in Paste API Key
mode. Removes windsurf/devin-cli from PKCE_CALLBACK_SERVER_PROVIDERS so
no callback server is started for them. Codex still uses the PKCE flow.

The 'Get token' link continues to point at windsurf.com/show-auth-token
via the existing supportsTokenPaste form copy.
2026-05-29 13:05:22 +08:00
diegosouzapw
a1261ccf80 fix(cli,docs): use requireCliToolsAuth in logs route + document OPENCODE quota env
Post-merge contract fixes for v3.8.6:
- src/app/api/cli-tools/logs/route.ts (#2810) now uses the shared
  requireCliToolsAuth guard (param renamed req->request) to satisfy the
  cli-tools-auth-hardening contract test.
- Document OMNIROUTE_OPENCODE_QUOTA_URL (#2867) in docs/reference/ENVIRONMENT.md
  to satisfy the env/docs sync contract.
2026-05-29 02:03:03 -03:00
yuna amelia
dbaf25079c refactor(oauth): annotate retired PKCE fields in WINDSURF_CONFIG
No behaviour change - comment-only update documenting that authorizeUrl,
codeChallengeMethod, callbackPort, callbackPath, apiServerUrl, and
exchangePath are no longer consumed. Active fields (inferenceUrl,
showAuthTokenUrl, firebaseApiKey, ideName) called out separately.
2026-05-29 13:00:46 +08:00
yuna amelia
82999c021f fix(oauth): return 410 Gone for retired windsurf/devin-cli PKCE actions
start-callback-server, authorize, and poll-callback (GET + POST) now
return 410 Gone with a pointer to /import-token. The 410 short-circuit
runs before auth so the response is honest about the action being
permanently gone, not gated. Codex PKCE flow unchanged.

Tests: 5 new assertions cover GET + POST 410 paths and a Codex
regression check.
2026-05-29 12:59:17 +08:00
yuna amelia
6d157e481f fix(oauth): switch windsurf provider to import_token flow
The PKCE auth URL targeting app.devin.ai/editor/signin returns 404
post-rebrand. Until Phase 2 ports Firebase OAuth + RegisterUser, the
only supported path is import-token via windsurf.com/show-auth-token.

- windsurf.ts: drop buildAuthUrl, set flowType=import_token
- generateAuthData returns supported:false + helpful error for windsurf/devin-cli
- tests: assert flowType + disabled stub
2026-05-29 12:50:46 +08:00
Randi
b971db8e77 fix(claude): preserve max effort for supported models (#2875)
Integrated into release/v3.8.6.
2026-05-29 01:49:57 -03:00
Randi
e510a57555 Rename proxy log Public IP to Client IP (#2880)
Integrated into release/v3.8.6.
2026-05-29 01:46:25 -03:00
Diego Rodrigues de Sa e Souza
c02b6ea008 fix(combo): normalize upstream Headers for Node 24 undici interop (#2751) (#2823)
Integrated into release/v3.8.6.
2026-05-29 01:46:12 -03:00
Diego Rodrigues de Sa e Souza
ed36bd7264 fix(cli): restore omniroute logs command stream (#2756) (#2810)
Integrated into release/v3.8.6.
2026-05-29 01:45:59 -03:00
Randi
2428ad2bcd feat(claude): default xhigh support for newer Opus models (#2874)
Integrated into release/v3.8.6.
2026-05-29 01:44:58 -03:00
Diego Rodrigues de Sa e Souza
517c3c6e44 fix(usage): add opencode quota fetcher (#2852) (#2867)
Integrated into release/v3.8.6.
2026-05-29 01:44:43 -03:00
Paijo
f270d20de0 fix: wire CLIProxyAPI fallback settings into chatCore routing engine (#2866)
Integrated into release/v3.8.6.
2026-05-29 01:44:32 -03:00
Hernan Javier Ardila Sanchez
1d55f96e01 fix(combo): preserve system messages during context handoff summary generation (#2865)
Integrated into release/v3.8.6.
2026-05-29 01:44:22 -03:00
Hernan Javier Ardila Sanchez
1442e086e4 fix(cli): allow nullable/optional apiKey in cliMitmStartSchema (#2857)
Integrated into release/v3.8.6.
2026-05-29 01:44:11 -03:00
Tushar Agarwal
c9251f9326 fix(geminiHelper): support rec.image content shape + warn on dropped remote URLs (refs #2807) (#2855)
Integrated into release/v3.8.6.
2026-05-29 01:44:01 -03:00
Lenine Júnior
32adf6275a feat(sse): add RTK filters for kubectl, docker-build, composer, gh (#2824)
Integrated into release/v3.8.6.
2026-05-29 01:43:51 -03:00
JeferssonLemes
9dfe482c1c fix(skills): skip interception for unregistered client-native tools (#2815) (#2817)
Integrated into release/v3.8.6.
2026-05-29 01:43:40 -03:00
Diego Rodrigues de Sa e Souza
1a4c4f8d94 fix(cli): replace cli-table3 with hand-rolled formatter (#2752) (#2813)
Integrated into release/v3.8.6.
2026-05-29 01:43:30 -03:00
yuna amelia
dd10b4b94c docs(plan): Phase 1 windsurf login hotfix implementation plan
10 tasks covering:
- TDD assertions for flowType + 410 Gone responses
- Provider switch to import_token
- Route handler retiring authorize/start-callback-server/poll-callback
- OAuthModal UI override
- i18n sync
- Verification + PR steps
2026-05-29 12:31:39 +08:00
yuna amelia
dbe7b62cbe docs(oauth): add Windsurf login fix design (Phase 1 hotfix + Phase 2 Firebase OAuth)
Two-phase plan to fix the broken Windsurf OAuth flow:
- Phase 1: drop the dead app.devin.ai/editor/signin PKCE path, promote
  import-token from windsurf.com/show-auth-token as the primary path
- Phase 2: port Firebase OAuth + RegisterUser flow from
  fendoushaonian/WindSurf-gRPC-API for full browser-based automation

Spec only - no code changes yet.
2026-05-29 12:28:20 +08:00
GreatLiu
b741bd6b23 fix(github): route claude-opus-4.6 via chat completions (#2821)
Integrated into release/v3.8.6.
2026-05-29 01:25:18 -03:00
Diego Rodrigues de Sa e Souza
c216085e92 fix(translator): pass-through tool_search built-in tool type (#2766) (#2811)
Integrated into release/v3.8.6.
2026-05-29 01:00:54 -03:00
Diego Rodrigues de Sa e Souza
fee1c17d51 fix(opencode): qwen3.x max/plus models lack vision support (#2822) (#2836)
Integrated into release/v3.8.6.
2026-05-29 01:00:24 -03:00
Diego Rodrigues de Sa e Souza
283c05d3d0 fix(nous-research): correct baseUrl to include /chat/completions (#2826) (#2835)
Integrated into release/v3.8.6.
2026-05-29 00:59:54 -03:00
Diego Rodrigues de Sa e Souza
0a101b95b3 fix(usage): un-invert GitHub Copilot Free/limited quota — limited_user_quotas is remaining (#2876) (#2881)
Integrated into release/v3.8.6.
2026-05-29 00:59:29 -03:00
Diego Rodrigues de Sa e Souza
01041967de fix(quota): honor explicit per-connection preflight opt-out (#2831) (#2844)
Integrated into release/v3.8.6.
2026-05-29 00:58:58 -03:00
Diego Rodrigues de Sa e Souza
5f886dc73a fix(translator): strip safety_identifier in openai-responses cleanup (#2770) (#2809)
Integrated into release/v3.8.6.
2026-05-29 00:58:01 -03:00
Diego Rodrigues de Sa e Souza
b677dd6b25 fix(combo): resolve custom provider targets via combo name (#2778) (#2812)
Integrated into release/v3.8.6.
2026-05-29 00:57:41 -03:00
Diego Rodrigues de Sa e Souza
18dae1ab95 fix(api): include noAuth providers in /v1/models catalog (#2798) (#2814)
Integrated into release/v3.8.6.
2026-05-29 00:57:36 -03:00
Diego Rodrigues de Sa e Souza
25db3dee59 fix(cli): register openclaw in tool-detector (#2833) (#2850)
Integrated into release/v3.8.6.
2026-05-29 00:57:30 -03:00
Hernan Javier Ardila Sanchez
94a34899b2 fix(qoder): reject invalid/expired PATs returning Cosy 500 error (#2860)
Integrated into release/v3.8.6.
2026-05-29 00:56:19 -03:00
Tushar Agarwal
f3404227d2 fix(deepseek-web): return 400 when client sends tools[] - chat.deepseek.com has no tool support (#2854)
Integrated into release/v3.8.6.
2026-05-29 00:56:16 -03:00
Annas Alghoffar
0c9740c771 fix(cli): respect PORT env var in serve command (#2845)
Integrated into release/v3.8.6.
2026-05-29 00:56:13 -03:00