Commit Graph

33 Commits

Author SHA1 Message Date
diegosouzapw
af80efe75a feat(compression): add SHARED_BOUNDARIES to caveman output mode prompts
Exports SHARED_BOUNDARIES constant (ported from 9router cavemanPrompts.js)
that instructs the model to write normally for security warnings,
irreversible confirmations, and multi-step sequences, then resume terse
style. Appended to all 6 languages x 3 intensity levels. Polished full/ultra
English prompts with article-drop and short-synonym guidance.

Fixes alreadyApplied check order so SHARED_BOUNDARIES keywords in the
injected system prompt don't trigger a false-positive bypass on re-injection.
2026-05-14 23:46:57 -03:00
diegosouzapw
e7a4ea8c7f feat(mcp): add MCP accessibility-tree smart filter engine
Adds compression engine that collapses repeated sibling lines (≥30 items
with same indent + role prefix) into head + summary + tail, preserves
[ref=eXX] anchors required by Playwright/computer-use MCPs, and
hard-truncates oversized text with a navigation hint footer.

Reduces token usage 60-80% on browser snapshots/accessibility trees from
external MCP servers (playwright-mcp, chrome-mcp). Configurable via
settings.compression.mcpAccessibility namespace.

Changes:
- open-sse/services/compression/engines/mcpAccessibility/: new engine
  (constants.ts, collapseRepeated.ts, index.ts with smartFilterText)
- open-sse/services/compression/types.ts: re-exports McpAccessibilityConfig
- src/lib/db/compression.ts: getMcpAccessibilityConfig/setMcpAccessibilityConfig
- src/lib/db/migrations/056_mcp_accessibility_compression.sql: default settings
- open-sse/mcp-server/server.ts: apply filter to all tool result text blocks
- tests/unit/compression/mcpAccessibility.test.ts: 4 unit tests
- tests/unit/mcp/serverSmartFilter.test.ts: 4 integration tests (DB getter/setter)

Ref: 9router/src/lib/mcp/stdioSseBridge.js:14-90 (algorithm origin).
2026-05-14 21:24:05 -03:00
diegosouzapw
aacd43bb45 fix: clean up proxy page redundancy and fix 1proxy sync empty body error (#2052) 2026-05-08 17:43:41 -03:00
Raxxoor
831829dbc3 fix(compression): support Responses input and expand Spanish rules (#2028)
Integrated into release/v3.8.0
2026-05-08 17:35:43 -03:00
diegosouzapw
171081dbbb fix(core): harden input handling and compression cleanup
Replace regex-based compression artifact cleanup with linear helpers to
avoid pathological backtracking and normalize whitespace safely.
Tighten request and response parsing in assess, Gemini translation, and
executor telemetry to avoid unsafe property access and invalid category
filtering.

Also add managed database backup support for legacy encrypted
connection migration, improve SQLite load error handling, and cover the
regressions with unit tests.
2026-05-06 02:29:25 -03:00
diegosouzapw
72e31e6329 fix(security): resolve CodeQL polynomial regular expression (ReDoS) vulnerabilities and chatCore TS errors (#201, #200, #199) 2026-05-04 02:14:52 -03:00
diegosouzapw
d8baf4434d fix(compression): align seeded standard savings combo with stacked default
Update the seeded default compression combo to use the RTK then
Caveman pipeline in both fresh installs and upgraded databases.

Add a targeted migration and runtime guard that only rewrites the
legacy seeded record when its original metadata and single-step
pipeline still match, preserving user-customized default combos.
Refresh docs and tests to reflect the stacked default and expanded
RTK filter catalog.
2026-05-03 15:34:15 -03:00
diegosouzapw
6e38bd5393 fix(compression): preserve stacked defaults and secure metadata routes
Only apply saved default compression combos when they contain a stacked
pipeline so seeded Caveman-only defaults do not replace the builtin
stacked behavior.

Also require management auth for compression language pack and rules
metadata endpoints, and defer usage receipt attachment until compression
analytics writes have completed to keep analytics records consistent.
2026-05-03 14:06:37 -03:00
diegosouzapw
dde74281de fix(auth): require dashboard management auth for compression preview
Block preview requests unless they come from a valid management session
token so protected settings cannot be probed through the preview API.

Add unit coverage for unauthenticated requests, invalid bearer tokens,
and successful authenticated preview execution.
2026-05-03 12:53:45 -03:00
diegosouzapw
a7233d1bf1 feat(compression): unify config validation and persist MCP savings
Centralize compression config schemas across settings, preview, RTK,
and combo APIs to enforce consistent validation for stacked pipelines
and engine-specific options.

Expand caveman and stacked compression behavior by applying default
combos at runtime, surfacing validation and fallback metadata, and
exposing aggressive and ultra adapter schemas for configuration UI and
tests.

Persist MCP description compression snapshots into analytics without
counting them as provider usage, and extend the dashboard with the new
RTK controls and localized labels.
2026-05-03 12:38:21 -03:00
diegosouzapw
970f6a3ae7 feat(compression): expand caveman parity and MCP metadata compression
Compress MCP registry and list metadata descriptions for tools, prompts,
resources, and resource templates while keeping tool-response bodies
unchanged. Expose those savings in compression status as
`mcp_metadata_estimate` metadata rather than provider usage.

Add Caveman rule-pack support for custom regex flags and match-specific
replacement maps, update English rules for upstream parity, and tighten
article and pleasantry handling. Also process RTK multipart text blocks
independently so mixed media content compresses safely without
duplicating output.
2026-05-03 09:14:20 -03:00
Diego Rodrigues de Sa e Souza
743be29852 feat(compression): RTK compression roadmap (#1889)
* chore(rtk): initialize compression roadmap branch

* feat(compression): add RTK engine and compression combos

Introduce RTK command-aware tool-output compression alongside
stacked RTK -> Caveman pipelines for mixed prompt contexts.

Add engine registration, declarative RTK filter packs, language-aware
Caveman rule loading, compression combo persistence and assignments,
analytics grouped by engine/combo, and new MCP/API endpoints for
configuration, previews, filters, and combo management.

Expose the new capabilities in the dashboard with dedicated Context &
Cache pages for Caveman, RTK, and compression combos, and update docs,
i18n strings, migrations, and tests to cover the expanded compression
surface.

* feat(compression): expand RTK DSL, filter catalog, and recovery APIs

Add RTK parity features across the compression pipeline, dashboard,
and management APIs. This expands the built-in filter catalog, adds
trust-gated custom filter loading, inline filter verification, code
stripping, smarter detection, and optional redacted raw-output
retention for authenticated recovery.

Also extend Caveman with file-based multilingual rule packs, localized
output-mode instructions, stricter preview/config schemas, engine
registry metadata, analytics fields, and broad unit test coverage for
RTK, rule loading, and stacked compression behavior.

* fix(auth): protect oauth routes and health reset operations

Require authenticated dashboard access for OAuth endpoints that can
create or import provider connections when login enforcement is
enabled.

Move `/api/monitoring/health` to the readonly public route list so
safe methods remain public while DELETE now returns 401 for anonymous
requests.

Also update Next.js native `.node` handling to avoid webpack parse
failures from external packages such as ngrok and keytar, and add
coverage for the new auth behavior.

* build(compression): ship RTK rule and filter assets with app bundles

Include compression JSON assets in Next output tracing, prepublish copies,
and pack artifact policy checks so standalone and packaged builds can
load RTK filters and caveman rule packs at runtime.

Also harden compression runtime behavior by resolving alternate asset
directories, scoping rule cache entries by source path, carrying RTK raw
output pointers through stacked runs, degrading oversized preview diffs,
and applying combo language/output mode defaults during chat routing.

Add coverage for packaging rules, provider-scoped model parsing, smart
truncate edge cases, raw output retention, and combo-driven compression
behavior.

* docs(workflows): update local repo paths to OmniRoute

Replace outdated `/home/diegosouzapw/dev/proxys/9router` references
with the current `OmniRoute` directory across deploy, release, and
version bump workflow guides so local command examples match the
renamed repository layout

* feat(compression): complete RTK parity coverage

* test(build): align next config assertions

---------

Co-authored-by: diegosouzapw <diego.souza.pw@gmail.com>
2026-05-03 00:37:08 -03:00
diegosouzapw
aa40bc34f5 feat(compression): expose rule intensities and track usd savings
Add estimated USD savings to compression analytics so saved tokens can
be reported in cost terms alongside existing token metrics.

Expose caveman rule intensity metadata for settings consumers and add a
settings API route alias for rule lookup. Also preserve system prompts
when aggressive compression falls back to lite mode.
2026-05-02 12:57:37 -03:00
diegosouzapw
0f35c148ea feat(compression): expand caveman compression and analytics pipeline
Add caveman intensity levels, output mode instructions, validation, and
preview diffs across the compression pipeline.

Extend MCP and dashboard settings to support auto-trigger mode, system
prompt preservation, MCP description compression, and caveman rule
metadata. Record richer compression analytics with receipt fields,
validation fallbacks, output mode data, and add the related database
migration.

Improve preservation handling for code, URLs, markdown, math, and other
protected content while adding broad unit, integration, and golden-set
coverage for caveman parity and compression behavior.
2026-05-02 12:39:04 -03:00
diegosouzapw
476ef48fa5 test: avoid url substring assertion 2026-05-02 05:01:44 -03:00
diegosouzapw
4b9c129e1c fix: harden security scan findings 2026-05-02 04:51:38 -03:00
Randi
3d70ad414e Hide combo compression controls when disabled (#1840)
Integrated into release/v3.7.8
2026-05-01 08:36:15 -03:00
Antigravity Assistant
934c133103 fix(analytics): avoid persisting inferred API key ownership
Stop usage analytics reads from backfilling missing API key attribution
into historical rows so legacy records remain unchanged and surface as
unknown instead of guessed ownership.

Also require management authentication on admin concurrency and
compression analytics endpoints, and preserve image payloads during lite
compression unless a model is explicitly marked as non-vision.
2026-04-30 20:31:00 -03:00
Antigravity Assistant
8ca5902a98 Merge release/v3.7.7 into compression phase 6 2026-04-30 18:07:26 -03:00
Antigravity Assistant
fa0f3cc8be Merge release/v3.7.7 into compression phase 5 2026-04-30 17:52:23 -03:00
Antigravity Assistant
7b21e04604 Merge release/v3.7.7 into compression phase 4 2026-04-30 17:37:57 -03:00
Antigravity Assistant
5e0d6263ed Merge release/v3.7.7 into compression phase 3 2026-04-30 17:22:03 -03:00
Antigravity Assistant
595b5dc642 Merge release/v3.7.7 into compression phase 2 2026-04-30 17:07:39 -03:00
Antigravity Assistant
16f14b76a9 Merge release/v3.7.7 into prompt compression phase 1 2026-04-30 16:51:44 -03:00
oyi77
c7b7b847f0 feat(mcp): add compression status/configure tools + provider-aware caching (Phase 6)
- Add MCP tools: omniroute_compression_status, omniroute_compression_configure
- Add cachingAware.ts: detectCachingContext + getCacheAwareStrategy
- Wire compression tools in server.ts via forEach registration pattern
- Add unit tests: cachingAware.test.ts (14 tests), compressionMcpTools.test.ts (16 tests)
- All tests pass, typecheck 0 errors
2026-04-29 13:38:34 +07:00
oyi77
ce3e4ba618 feat(i18n): add compression analytics + ultra mode keys to all 32 locales
- Add compressionModeUltra, compressionModeUltraDesc, compressionAnalyticsTitle,
  compressionAnalyticsDescription keys to all 32 locale files
- Fix missing trailing comma after comboHealthDescription in all non-en locales
- Add compressionAnalytics unit tests (10/10 passing) with beforeEach isolation
2026-04-29 12:01:22 +07:00
oyi77
8053ebe798 feat(compression): Phase 4 — ultra mode with heuristic token pruning and SLM stub 2026-04-29 01:28:36 +07:00
oyi77
6bf7b9601d feat(compression): Phase 3 — aggressive mode with summarization, tool compression, and progressive aging
Implements the aggressive compression pipeline (issue #1588) with three
core stages: tool-result compression, progressive aging, and rule-based
summarization. Includes downgrade chain to caveman/lite when savings are
insufficient.

Core modules:
- summarizer.ts: RuleBasedSummarizer with intent/file/error/decision
  extraction, code fence trimming, skip-already-compressed guard
- toolResultCompressor.ts: 5 auto-detected strategies (fileContent,
  grepSearch, shellOutput, json, errorMessage) with toggle support
- progressiveAging.ts: 4-tier degradation (verbatim→light→moderate→
  fullSummary) with [COMPRESSED:aging:<tier>] markers
- aggressive.ts: Orchestrator with 3-step pipeline and downgrade chain
  (aggressive→caveman→lite→as-is)

Integration:
- strategySelector.ts: applyCompression() now dispatches mode='aggressive'
- compression.ts: aggressiveConfig CRUD with deep merge of nested objects
- API route: Zod schema for aggressiveConfig thresholds/strategies
- CompressionSettingsTab: aggressive mode card, thresholds, toggles, i18n
- Migration 031: SELECT 1 no-op (config stored as kv key)

Tests: 109 across 8 files (types, summarizer, toolResultCompressor,
progressiveAging, aggressive, integration, golden eval, caveman regression)
All pass. Typecheck clean. Lint clean (0 errors). Build succeeds.
2026-04-28 16:58:17 +07:00
oyi77
819c0762b9 fix(compression): address PR review — multi-part msg safety, preservation $& fix, rule name sync, no-op rule removal
4 fixes from Gemini Code Assist PR #1689 review:

1. HIGH: Multi-part message content duplication — skip array-content
   messages instead of joining+replacing all text parts with compressed
   result, which caused content duplication (e.g., [A,B] → [comp(A+B), comp(A+B)])

2. HIGH: String.prototype.replace $& vulnerability — use arrow function
   callback instead of string arg in restorePreservedBlocks() to prevent
   special replacement patterns ($&, , etc.) from corrupting restored
   content containing code, URLs, or file paths

3. HIGH: UI/backend rule name mismatch — ALL_CAVEMAN_RULES in
   CompressionSettingsTab.tsx now uses actual backend rule names
   (polite_framing, hedging, verbose_instructions, etc.) instead of
   fabricated names (hedging_disclaimer, redundant_please, etc.)
   that would break the skip-rules feature

4. MEDIUM: Remove no-op turn_marker rule — pattern /^$/g matches only
   empty strings and replaces with empty string, achieving nothing.
   Removed from CAVEMAN_RULES; total count now 29 (was 30).

Tests: 72/72 pass, typecheck: 0 errors, lint: 0 errors
2026-04-28 04:20:46 +07:00
oyi77
88dbefa141 feat(compression): reconcile Phase 2 with Phase 1 API surface
- Use 'standard' mode (not 'caveman') in CompressionMode type
- Align CompressionConfig with Phase 1 shape (enabled, defaultMode,
  autoTriggerTokens, cacheMinutes, preserveSystemPrompt, comboOverrides)
- Extend CompressionStats with techniquesUsed + rulesApplied + durationMs
- Make CompressionResult.stats nullable (Phase 1 compat)
- Add Phase 1 functions: estimateCompressionTokens, createCompressionStats,
  trackCompressionStats, selectCompressionStrategy, applyCompression,
  checkComboOverride, shouldAutoTrigger, getEffectiveMode
- Add lite.ts stub for Phase 1 'lite' compression mode
- Add index.ts barrel file for full module export
- Fix DB compression.ts to return Phase 1 CompressionConfig shape
- Fix chatCore.ts to use unified compression pipeline
  (selectCompressionStrategy + applyCompression)
- Add backwards-compatible estimateTokensForStats alias
- Renumber migration 028 → 030 (Phase 1 uses 028)
- Update all tests for reconciled API (67/67 pass)
2026-04-28 00:25:45 +07:00
oyi77
b1e13668f2 feat(compression): wave 2+3 — tests, golden eval, rule fixes, migration
- Fix question_to_directive rule: trim trailing whitespace before lookup
- Fix DB import path: correct relative path from src/lib/db to open-sse
- Add test DB cleanup beforeEach for isolation
- Add 4 unit test files: caveman-db, hedging, dedup, structural (28 tests)
- Add golden set quality test (4 tests, 99.3% key phrase preservation)
- Add golden set savings test (3 tests, performance + savings verification)
- Add golden set data (20 verbose coding prompts with key phrases)
- Add migration 028 for new test suite acknowledgment

67 tests pass across 9 files. typecheck:core clean.
2026-04-27 20:00:08 +07:00
oyi77
b5f6bea880 feat(compression): implement caveman compression engine — Wave 1 complete
- CavemanConfig types and interfaces (types.ts)
- 30 compression rules across 4 categories (cavemanRules.ts)
- Core 5-step compression pipeline (caveman.ts)
- Code block / URL / path preservation (preservation.ts)
- Strategy selector with caveman dispatch (strategySelector.ts)
- Stats tracking module (stats.ts)
- DB settings module (compression.ts)
- Unit tests: 36 tests, 0 failures
- Typecheck: 0 errors, Lint: 0 errors

Implements: GitHub issue #1587 (Phase 2)
2026-04-27 18:31:46 +07:00
oyi77
d2f32090b7 test(compression): add unit and integration tests (61 tests)
Add unit tests for strategy selector (17), lite compression (20), stats module (11), and DB module (7). Add integration tests for full compression pipeline (6). All 61 tests pass. Remove broken integration test files from previous WIP.

Ultraworked with [Sisyphus](https://github.com/code-yeongyu/oh-my-opencode)

Co-authored-by: Sisyphus <clio-agent@sisyphuslabs.ai>
2026-04-27 03:53:05 +07:00