Commit Graph

2449 Commits

Author SHA1 Message Date
diegosouzapw
d4e68cfcf9 chore(release): update changelog for PRs 1969, 1968, 1974, 1972, 1941, 1965 2026-05-05 09:33:58 -03:00
Paijo
7dab1fb731 feat(docs): integrate multi-page documentation into OmniRoute dashboard — Closes #1958 (#1969)
Integrated into release/v3.7.9
2026-05-05 09:32:43 -03:00
Sergey Morozov
8077e9b62b feat(settings): add request body limit setting (#1968)
Integrated into release/v3.7.9
2026-05-05 09:12:35 -03:00
Alexander Averyanov
2082ffbad5 fix(codex): preserve final_answer responses replay (#1965)
Integrated into release/v3.7.9
2026-05-05 09:08:27 -03:00
payne
64b1a20010 fix(api): expose models.dev context windows in /v1/models (#1972)
Integrated into release/v3.7.9
2026-05-05 09:08:18 -03:00
Alexey Bulgakov
3d769e6a73 fix: add default Gemini CLI OAuth client secret (#1974)
Integrated into release/v3.7.9
2026-05-05 09:08:14 -03:00
diegosouzapw
afe4b19588 fix: resolve analytics tracking issues, provider alias mapping, and fallback calculation 2026-05-05 01:17:52 -03:00
diegosouzapw
bf96e704ff test(antigravity): update claude bridge tests for native payload structure 2026-05-04 23:26:55 -03:00
diegosouzapw
da089b09f6 fix(antigravity): bypass gemini mapping for claude models on vertex ai 2026-05-04 23:11:03 -03:00
diegosouzapw
d07313333f fix: map max_completion_tokens for openai, fix kiro status, export sessionAffinity
Fixes #1961
Fixes #1932
2026-05-04 22:33:30 -03:00
diegosouzapw
52e031b849 test(auth): fix sse-auth.test.ts quota threshold and cooldown assertions 2026-05-04 21:02:41 -03:00
diegosouzapw
bc7226ae95 fix(auth): implement session affinity sticky routing logic 2026-05-04 21:02:41 -03:00
dependabot[bot]
0d1e332217 deps: bump the development group with 2 updates (#1963)
Integrated into release/v3.7.9
2026-05-04 21:02:35 -03:00
dependabot[bot]
fe7775c384 deps: bump the production group with 3 updates (#1962)
Integrated into release/v3.7.9
2026-05-04 21:02:32 -03:00
Jean Brito
89b740d9f7 fix(dashboard): derive display base URL from origin instead of hardcoding localhost (#1960)
Integrated into release/v3.7.9
2026-05-04 21:02:29 -03:00
Paijo
6a45ea2c97 feat(db): consolidate all database settings into SystemStorageTab (closes #1935) (#1947)
Integrated into release/v3.7.9
2026-05-04 19:25:41 -03:00
Aculeasis
3f900a833e fix(proxy): use credentials.connectionId instead of non-existent credentials.id for image proxy resolution (#1929)
Integrated into release/v3.7.9
2026-05-04 19:23:27 -03:00
diegosouzapw
8f3d9e2ec7 fix: active db migration for legacy encrypted tokens (#1941)
Closes #1941 by forcing healthCheck.ts to scan and re-encrypt all
provider connections that were previously encrypted with the dynamic salt
fallback. This permanently upgrades legacy tokens to static-salt without
relying on organic updates.
2026-05-04 19:15:27 -03:00
diegosouzapw
5ad6df52e0 fix(security): eliminate ReDoS vulnerabilities in compression rules 2026-05-04 18:54:06 -03:00
diegosouzapw
7985f6818e Fix analytics fallback count test 2026-05-04 16:58:38 -03:00
diegosouzapw
3b473082e5 Merge main into release/v3.7.9 2026-05-04 16:55:04 -03:00
diegosouzapw
d775dd31f5 fix(codex): disable mid-task failover when combo strategy is context-relay 2026-05-04 16:51:54 -03:00
diegosouzapw
baeaaee0f7 fix(auth): implement extractSessionAffinityKey stub for codex tests 2026-05-04 16:48:49 -03:00
smartenok-ops
d4408add04 feat(sse): codex 429 mid-task failover with account rotation (#1888)
Integrated into release/v3.7.9
2026-05-04 16:45:46 -03:00
backryun
4dc959c1f2 chore(provider): Add reka models list (#1956)
Integrated into release/v3.7.9
2026-05-04 16:45:24 -03:00
diegosouzapw
0024d20e28 fix(settings): include usage and budget records in json backups
Export and restore usage history, domain cost history, and domain
budget data so analytics and budget state survive settings transfers.

Also adjust cost overview fallbacks to rank by request volume when
cost data is unavailable, count conversationState entries in chat
request logging, and align e2e coverage with the proxy settings route.
2026-05-04 16:28:47 -03:00
diegosouzapw
c74657f29a docs: update changelog with PRs 1948 and 1949 2026-05-04 14:16:06 -03:00
diegosouzapw
b048d62ad0 fix: resolve test suite regressions from registry cleanup 2026-05-04 14:13:20 -03:00
diegosouzapw
a1d40035df feat: support root user for MITM sudo handling (#1948) 2026-05-04 14:03:48 -03:00
diegosouzapw
55785f5919 chore: fix vitest config 2026-05-04 14:03:48 -03:00
diegosouzapw
3e3ba607b5 test: fix ambiguous model resolution test and migration conflicts 2026-05-04 14:03:48 -03:00
backryun
a15b6964b7 chore(model): Update new models, Delete Deprecated models (#1949)
Co-authored-by: backryun <backryun@daonlab.local>
2026-05-04 13:57:43 -03:00
oyi77
223560a7ec fix: address PR review feedback 2026-05-04 10:52:28 -03:00
oyi77
773d71204f fix: swap primary/legacy key derivation in encryption module 2026-05-04 10:22:34 -03:00
backryun
291ad52891 chore: update dependencies and sidebar i18n (#1946)
Integrated into release/v3.7.9
2026-05-04 10:20:16 -03:00
Paijo
adf99811fa feat: add auto-assessment engine for combo self-healing (#1918)
Integrated into release/v3.7.9
2026-05-04 10:04:24 -03:00
smartenok-ops
37058ad3d2 feat(usage): DeepSeek V4 native cache token extraction (#1930)
Integrated into release/v3.7.9
2026-05-04 09:42:36 -03:00
smartenok-ops
ec0ce5bed7 fix(routing): codex bare-name disambiguation + family-native fallback (#1933)
Integrated into release/v3.7.9
2026-05-04 09:40:49 -03:00
Jan Leon
9577a8d9e8 feat: enhance cost formatting and add Codex GPT-5.5 pricing support (#1944)
Integrated into release/v3.7.9
2026-05-04 09:39:48 -03:00
Andrew Munsell
3f063e5c52 feat(logs): show compression tokens in request log UI (#1923)
Integrated into release/v3.7.9
2026-05-04 09:19:50 -03:00
diegosouzapw
372c887ca3 test: fix unique model resolution test broken by agentrouter 2026-05-04 08:56:01 -03:00
diegosouzapw
802a92e92f chore(scripts): remove scratch issue analysis artifacts
Delete temporary issue analysis scripts and generated scratch JSON files
that are not part of the maintained codebase or release assets.
2026-05-04 02:25:14 -03:00
diegosouzapw
72e31e6329 fix(security): resolve CodeQL polynomial regular expression (ReDoS) vulnerabilities and chatCore TS errors (#201, #200, #199) 2026-05-04 02:14:52 -03:00
diegosouzapw
0d5885fff0 docs(changelog): update CHANGELOG for #1924 and #1925 2026-05-04 02:03:25 -03:00
diegosouzapw
0083d643bc fix(infrastructure): move wreq-js to optionalDependencies and add Node 25/26 to secure runtime policy (#1924) 2026-05-04 02:03:20 -03:00
diegosouzapw
3c42c9aac3 fix(providers): resolve ChatGPT Web authentication failure by aligning TLS fingerprint User-Agent strings (#1925) 2026-05-04 02:03:10 -03:00
Diego Rodrigues de Sa e Souza
99c6dc7fd6 Release v3.7.9 (#1917)
* chore(release): v3.7.9 — gemini-cli cloud code separation

* chore(provider): Update Jina AI model catalog (#1874)

Integrated into release/v3.7.9

* docs: update CHANGELOG for PR 1874 and retroactive credits

* fix: resolve stream defaults and codex prompt mapping (#1873, #1872)

* chore(compression): start caveman compression update

* feat(compression): expand caveman compression and analytics pipeline

Add caveman intensity levels, output mode instructions, validation, and
preview diffs across the compression pipeline.

Extend MCP and dashboard settings to support auto-trigger mode, system
prompt preservation, MCP description compression, and caveman rule
metadata. Record richer compression analytics with receipt fields,
validation fallbacks, output mode data, and add the related database
migration.

Improve preservation handling for code, URLs, markdown, math, and other
protected content while adding broad unit, integration, and golden-set
coverage for caveman parity and compression behavior.

* feat(compression): expose rule intensities and track usd savings

Add estimated USD savings to compression analytics so saved tokens can
be reported in cost terms alongside existing token metrics.

Expose caveman rule intensity metadata for settings consumers and add a
settings API route alias for rule lookup. Also preserve system prompts
when aggressive compression falls back to lite mode.

* feat(compression): RTK compression roadmap (#1889)

* chore(rtk): initialize compression roadmap branch

* feat(compression): add RTK engine and compression combos

Introduce RTK command-aware tool-output compression alongside
stacked RTK -> Caveman pipelines for mixed prompt contexts.

Add engine registration, declarative RTK filter packs, language-aware
Caveman rule loading, compression combo persistence and assignments,
analytics grouped by engine/combo, and new MCP/API endpoints for
configuration, previews, filters, and combo management.

Expose the new capabilities in the dashboard with dedicated Context &
Cache pages for Caveman, RTK, and compression combos, and update docs,
i18n strings, migrations, and tests to cover the expanded compression
surface.

* feat(compression): expand RTK DSL, filter catalog, and recovery APIs

Add RTK parity features across the compression pipeline, dashboard,
and management APIs. This expands the built-in filter catalog, adds
trust-gated custom filter loading, inline filter verification, code
stripping, smarter detection, and optional redacted raw-output
retention for authenticated recovery.

Also extend Caveman with file-based multilingual rule packs, localized
output-mode instructions, stricter preview/config schemas, engine
registry metadata, analytics fields, and broad unit test coverage for
RTK, rule loading, and stacked compression behavior.

* fix(auth): protect oauth routes and health reset operations

Require authenticated dashboard access for OAuth endpoints that can
create or import provider connections when login enforcement is
enabled.

Move `/api/monitoring/health` to the readonly public route list so
safe methods remain public while DELETE now returns 401 for anonymous
requests.

Also update Next.js native `.node` handling to avoid webpack parse
failures from external packages such as ngrok and keytar, and add
coverage for the new auth behavior.

* build(compression): ship RTK rule and filter assets with app bundles

Include compression JSON assets in Next output tracing, prepublish copies,
and pack artifact policy checks so standalone and packaged builds can
load RTK filters and caveman rule packs at runtime.

Also harden compression runtime behavior by resolving alternate asset
directories, scoping rule cache entries by source path, carrying RTK raw
output pointers through stacked runs, degrading oversized preview diffs,
and applying combo language/output mode defaults during chat routing.

Add coverage for packaging rules, provider-scoped model parsing, smart
truncate edge cases, raw output retention, and combo-driven compression
behavior.

* docs(workflows): update local repo paths to OmniRoute

Replace outdated `/home/diegosouzapw/dev/proxys/9router` references
with the current `OmniRoute` directory across deploy, release, and
version bump workflow guides so local command examples match the
renamed repository layout

* feat(compression): complete RTK parity coverage

* test(build): align next config assertions

---------

Co-authored-by: diegosouzapw <diego.souza.pw@gmail.com>

* feat(compression): expand caveman parity and MCP metadata compression

Compress MCP registry and list metadata descriptions for tools, prompts,
resources, and resource templates while keeping tool-response bodies
unchanged. Expose those savings in compression status as
`mcp_metadata_estimate` metadata rather than provider usage.

Add Caveman rule-pack support for custom regex flags and match-specific
replacement maps, update English rules for upstream parity, and tighten
article and pleasantry handling. Also process RTK multipart text blocks
independently so mixed media content compresses safely without
duplicating output.

* feat(compression): unify config validation and persist MCP savings

Centralize compression config schemas across settings, preview, RTK,
and combo APIs to enforce consistent validation for stacked pipelines
and engine-specific options.

Expand caveman and stacked compression behavior by applying default
combos at runtime, surfacing validation and fallback metadata, and
exposing aggressive and ultra adapter schemas for configuration UI and
tests.

Persist MCP description compression snapshots into analytics without
counting them as provider usage, and extend the dashboard with the new
RTK controls and localized labels.

* fix(auth): require dashboard management auth for compression preview

Block preview requests unless they come from a valid management session
token so protected settings cannot be probed through the preview API.

Add unit coverage for unauthenticated requests, invalid bearer tokens,
and successful authenticated preview execution.

* fix(compression): preserve stacked defaults and secure metadata routes

Only apply saved default compression combos when they contain a stacked
pipeline so seeded Caveman-only defaults do not replace the builtin
stacked behavior.

Also require management auth for compression language pack and rules
metadata endpoints, and defer usage receipt attachment until compression
analytics writes have completed to keep analytics records consistent.

* fix(compression): align seeded standard savings combo with stacked default

Update the seeded default compression combo to use the RTK then
Caveman pipeline in both fresh installs and upgraded databases.

Add a targeted migration and runtime guard that only rewrites the
legacy seeded record when its original metadata and single-step
pipeline still match, preserving user-customized default combos.
Refresh docs and tests to reflect the stacked default and expanded
RTK filter catalog.

* docs(compression): document RTK+Caveman stacked savings ranges

Refresh the compression docs and README to describe the default
stacked pipeline in terms of eligible-context savings instead of the
older generic token-saving range.

Add upstream RTK and Caveman benchmark references, explain the
multiplicative savings math behind the stacked default, and update
feature summaries plus package metadata to match the revised
positioning.

* feat(image-gen): add NanoGPT image generation provider (#1899)

Integrated into release/v3.7.9

* fix(codex): sanitize raw responses input (#1895)

Integrated into release/v3.7.9

* Fix combo provider breaker profile handling (#1891)

Integrated into release/v3.7.9

* fix(combos): align strategy contracts (#1892)

Integrated into release/v3.7.9

* feat(proxy): move proxy configuration to dedicated System → Proxy page (#1907)

Integrated into release/v3.7.9

* feat: add K/M/B/T cost shortener to prevent UI overflow (#1902)

Integrated into release/v3.7.9

* feat(providers): implement bulk paste for extra API keys (#1916)

Integrated into release/v3.7.9

* fix(migrations): treat duplicate-column ALTER as no-op (#1886)

Integrated into release/v3.7.9

* fix(analytics): robust model pricing resolution, dark mode charts and SQL aggregation fixes (#1896)

Integrated into release/v3.7.9 (migration renumbered to 044)

* fix(oauth): per-connection mutex for rotating refresh tokens (#1885)

Integrated into release/v3.7.9

* fix: resolve 3 bugs — Codex tool normalization (#1914), image gen proxy (#1904), zero-arg MCP tools (#1898)

- fix(codex): flatten Chat Completions tool format to Responses format in
  normalizeCodexTools. Prevents 'Missing required parameter: tools[0].name'
  upstream errors when clients send {type:'function', function:{name,...}}
  instead of {type:'function', name,...}.

- fix(proxy): add proxy-aware execution context to image generation route.
  Image requests now correctly use proxy settings from the connection's
  ProxyRegistry assignment, matching the pattern used by chat pipeline.

- fix(translator): inject properties:{} into zero-argument MCP tool schemas
  during Anthropic→OpenAI translation. OpenAI strict mode requires explicit
  properties even for empty object schemas.

Closes #1914, Closes #1904, Closes #1898

* chore(release): v3.7.9 — all changes in ONE commit

* fix: allow local ollama provider connections (#1893)

* fix(copilot): emit compatible reasoning text deltas (#1919)

Integrated into release/v3.7.9

* fix(api-manager): show validation errors inline in modals, not behind backdrop (#1920)

Integrated into release/v3.7.9

* docs: update changelog and pr body with merged prs

* fix(providers): route agentrouter through anthropic endpoint headers

Update the AgentRouter provider registry to use the Claude-compatible
messages API and required Anthropic-style authentication headers. This
bypasses unauthorized_client_error responses and exposes the supported
model list through passthrough configuration.

Also update the changelog and release PR notes to document the fix for
#1921

* feat(logs): show compression tokens in request log UI (#1923)

* docs: add PR #1923 to changelog

---------

Co-authored-by: diegosouzapw <diego.souza.pw@gmail.com>
Co-authored-by: backryun <bakryun0718@proton.me>
Co-authored-by: Aculeasis <42580940+Aculeasis@users.noreply.github.com>
Co-authored-by: Raxxoor <manker_lol@hotmail.com>
Co-authored-by: Randi <55005611+rdself@users.noreply.github.com>
Co-authored-by: Paijo <14921983+oyi77@users.noreply.github.com>
Co-authored-by: Tubagus <54710482+0xtbug@users.noreply.github.com>
Co-authored-by: smartenok-ops <smartenok@gmail.com>
Co-authored-by: Gi99lin <74502520+Gi99lin@users.noreply.github.com>
Co-authored-by: ivan-mezentsev <ivan@mezentsev.me>
Co-authored-by: Andrew Munsell <andrew@wizardapps.net>
2026-05-04 01:36:53 -03:00
diegosouzapw
1a342ae5dc docs: add PR #1923 to changelog 2026-05-04 01:36:14 -03:00
diegosouzapw
88972bf92a feat(logs): show compression tokens in request log UI (#1923) 2026-05-04 01:34:41 -03:00
diegosouzapw
f6fdfea3ae fix(providers): route agentrouter through anthropic endpoint headers
Update the AgentRouter provider registry to use the Claude-compatible
messages API and required Anthropic-style authentication headers. This
bypasses unauthorized_client_error responses and exposes the supported
model list through passthrough configuration.

Also update the changelog and release PR notes to document the fix for
#1921
2026-05-04 01:08:14 -03:00