Commit Graph

2474 Commits

Author SHA1 Message Date
oyi77
fbb4dfaf37 fix(auto): address PR #2131 review issues
- Fix OAuth expiry handling for ISO strings in virtualFactory.ts
- Move AutoRoutingBanner test from src/ to tests/unit/shared/components/
- Remove mock metrics from analytics endpoint, return only real data
- Fix error handling for bare 'auto' prefix in chat.ts (check isAutoRouting)
- Update vitest.config.ts to include tests/unit/**/*.test.tsx pattern
2026-05-11 01:49:10 +07:00
oyi77
e1ab7c9273 feat(auto): complete zero-config auto-routing feature
- Add auto-prefix parser (autoPrefix.ts) for auto/Cvariant detection
- Add virtual auto-combo factory (virtualFactory.ts) building combos from active providers
- Integrate auto/ prefix into chat routing (chat.ts) - supports bare 'auto' and 'auto/variant'
- Add system provider 'auto' in providers.ts (systemOnly)
- Add AutoRoutingBanner component with localStorage dismissal
- Add auto-routing settings in RoutingTab (toggle + variant selector)
- Add auto-routing analytics tab (AutoRoutingAnalyticsTab) + API endpoint
- Add Case 0 zero-config documentation to README.md
- Add autoRoutingEnabled/enforcement and autoRoutingDefaultVariant settings
- Add analytics endpoint auth via requireManagementAuth
- Add empty-pool graceful handling in virtualFactory
- Add dynamic import error handling with try/catch
- Tests: 126/126 passing
2026-05-11 01:49:10 +07:00
oyi77
9ddcd8bda8 feat(auto): add auto prefix parser 2026-05-11 01:45:56 +07:00
diegosouzapw
35c6db05bf security: fix code scanning alerts — sanitize error messages and suppress false-positive hash warnings
- Sanitize error messages in errorResponse() and cursor buildErrorResponse() to strip stack traces before sending to client (fixes js/stack-trace-exposure)
- Add explicit CodeQL suppression comments for intentional SHA-256 usage in API key hashing (fast O(1) lookup, not password storage) and deterministic UUID generation (fixes js/insufficient-password-hash false positives)

Cherry-picked from release/v3.8.0
2026-05-10 10:42:07 -03:00
diegosouzapw
75f4343881 chore(security): address remaining CodeQL alerts with inline suppressions and logic fixes 2026-05-10 01:35:15 -03:00
diegosouzapw
887926e0ad chore(security): fix code scanning alerts 2026-05-10 01:15:07 -03:00
Diego Rodrigues de Sa e Souza
3d75fb3fae Release v3.8.0 (#2073)
Integrated into release/v3.8.0
2026-05-10 00:55:06 -03:00
diegosouzapw
08e18867fd test: stabilize cooldown abort coverage case 2026-05-06 03:32:04 -03:00
diegosouzapw
811a3ab577 ci: skip SonarCloud scan on main pushes 2026-05-06 03:17:47 -03:00
diegosouzapw
7166d0f106 fix(security): remove regex validation backtracking path 2026-05-06 02:39:43 -03:00
diegosouzapw
171081dbbb fix(core): harden input handling and compression cleanup
Replace regex-based compression artifact cleanup with linear helpers to
avoid pathological backtracking and normalize whitespace safely.
Tighten request and response parsing in assess, Gemini translation, and
executor telemetry to avoid unsafe property access and invalid category
filtering.

Also add managed database backup support for legacy encrypted
connection migration, improve SQLite load error handling, and cover the
regressions with unit tests.
2026-05-06 02:29:25 -03:00
Diego Rodrigues de Sa e Souza
28b7172c0a Release/v3.7.9 (#1988)
* chore: add GPT-5.5 Instant and support Node 26 (#1977)

chore: add GPT-5.5 Instant model to Codex registry + Node 26 support with CI + improved native SQLite error handling. Integrated into release/v3.7.9

* feat: enhance cost formatting and add Codex GPT-5.5 pricing support

* fix formatting

---------

Co-authored-by: backryun <bakryun0718@proton.me>
Co-authored-by: Jan Leon <jan.gaschler@gmail.com>
Co-authored-by: 05dunski <05dunski-kredo@icloud.com>
2026-05-06 02:00:57 -03:00
Diego Rodrigues de Sa e Souza
7665ad3950 Release v3.7.9 (continued development) (#1982)
* chore: add GPT-5.5 Instant and support Node 26 (#1977)

chore: add GPT-5.5 Instant model to Codex registry + Node 26 support with CI + improved native SQLite error handling. Integrated into release/v3.7.9

* feat: enhance cost formatting and add Codex GPT-5.5 pricing support

* fix formatting

---------

Co-authored-by: backryun <bakryun0718@proton.me>
Co-authored-by: Jan Leon <jan.gaschler@gmail.com>
Co-authored-by: 05dunski <05dunski-kredo@icloud.com>
v3.7.9
2026-05-06 01:21:31 -03:00
Diego Rodrigues de Sa e Souza
dfd83bacd1 Merge pull request #1979 from diegosouzapw/release/v3.7.9
docs(changelog): sync missing v3.7.9 release entries
2026-05-05 16:01:33 -03:00
diegosouzapw
2839ed9c20 docs(changelog): sync missing v3.7.9 release entries 2026-05-05 16:01:05 -03:00
Diego Rodrigues de Sa e Souza
55ae7a2409 Merge pull request #1959 from diegosouzapw/release/v3.7.9
Release v3.7.9
2026-05-05 15:09:51 -03:00
diegosouzapw
c50c398a81 docs: update CHANGELOG.md for #1945 2026-05-05 15:09:41 -03:00
diegosouzapw
40d29cab55 test: fix claude translator tests matching new system prompt behavior 2026-05-05 14:55:09 -03:00
Paijo
eb3520ab73 fix: swap primary/legacy key derivation in encryption module (fixes #1941) (#1945)
Integrated into release/v3.7.9
2026-05-05 14:52:12 -03:00
diegosouzapw
e9175b2f8c fix(docs): remove conflict markers in DocsSidebarClient.tsx 2026-05-05 12:44:49 -03:00
diegosouzapw
cd4f4084c0 feat(routing): auto-skip exhausted quota accounts (Issue #1952) 2026-05-05 12:34:14 -03:00
Paijo
913b8b84bc Feat/docs site overhaul (#1976)
Integrated into release/v3.7.9
2026-05-05 12:34:04 -03:00
payne
fc354a44cc fix(api): expose models.dev context windows in /v1/models (#1971)
Integrated into release/v3.7.9
2026-05-05 12:32:22 -03:00
Muhammad Tamir
c737007879 Support root user for MITM sudo handling (#1948)
Integrated into release/v3.7.9
2026-05-05 12:32:11 -03:00
diegosouzapw
c63c5d5008 fix: resolve MCP endpoint auth bypass (#1970) and finalize DB settings 2026-05-05 09:59:43 -03:00
diegosouzapw
d4e68cfcf9 chore(release): update changelog for PRs 1969, 1968, 1974, 1972, 1941, 1965 2026-05-05 09:33:58 -03:00
Paijo
7dab1fb731 feat(docs): integrate multi-page documentation into OmniRoute dashboard — Closes #1958 (#1969)
Integrated into release/v3.7.9
2026-05-05 09:32:43 -03:00
Sergey Morozov
8077e9b62b feat(settings): add request body limit setting (#1968)
Integrated into release/v3.7.9
2026-05-05 09:12:35 -03:00
Alexander Averyanov
2082ffbad5 fix(codex): preserve final_answer responses replay (#1965)
Integrated into release/v3.7.9
2026-05-05 09:08:27 -03:00
payne
64b1a20010 fix(api): expose models.dev context windows in /v1/models (#1972)
Integrated into release/v3.7.9
2026-05-05 09:08:18 -03:00
Alexey Bulgakov
3d769e6a73 fix: add default Gemini CLI OAuth client secret (#1974)
Integrated into release/v3.7.9
2026-05-05 09:08:14 -03:00
diegosouzapw
afe4b19588 fix: resolve analytics tracking issues, provider alias mapping, and fallback calculation 2026-05-05 01:17:52 -03:00
diegosouzapw
bf96e704ff test(antigravity): update claude bridge tests for native payload structure 2026-05-04 23:26:55 -03:00
diegosouzapw
da089b09f6 fix(antigravity): bypass gemini mapping for claude models on vertex ai 2026-05-04 23:11:03 -03:00
diegosouzapw
d07313333f fix: map max_completion_tokens for openai, fix kiro status, export sessionAffinity
Fixes #1961
Fixes #1932
2026-05-04 22:33:30 -03:00
diegosouzapw
52e031b849 test(auth): fix sse-auth.test.ts quota threshold and cooldown assertions 2026-05-04 21:02:41 -03:00
diegosouzapw
bc7226ae95 fix(auth): implement session affinity sticky routing logic 2026-05-04 21:02:41 -03:00
dependabot[bot]
0d1e332217 deps: bump the development group with 2 updates (#1963)
Integrated into release/v3.7.9
2026-05-04 21:02:35 -03:00
dependabot[bot]
fe7775c384 deps: bump the production group with 3 updates (#1962)
Integrated into release/v3.7.9
2026-05-04 21:02:32 -03:00
Jean Brito
89b740d9f7 fix(dashboard): derive display base URL from origin instead of hardcoding localhost (#1960)
Integrated into release/v3.7.9
2026-05-04 21:02:29 -03:00
Paijo
6a45ea2c97 feat(db): consolidate all database settings into SystemStorageTab (closes #1935) (#1947)
Integrated into release/v3.7.9
2026-05-04 19:25:41 -03:00
Aculeasis
3f900a833e fix(proxy): use credentials.connectionId instead of non-existent credentials.id for image proxy resolution (#1929)
Integrated into release/v3.7.9
2026-05-04 19:23:27 -03:00
diegosouzapw
8f3d9e2ec7 fix: active db migration for legacy encrypted tokens (#1941)
Closes #1941 by forcing healthCheck.ts to scan and re-encrypt all
provider connections that were previously encrypted with the dynamic salt
fallback. This permanently upgrades legacy tokens to static-salt without
relying on organic updates.
2026-05-04 19:15:27 -03:00
diegosouzapw
5ad6df52e0 fix(security): eliminate ReDoS vulnerabilities in compression rules 2026-05-04 18:54:06 -03:00
diegosouzapw
7985f6818e Fix analytics fallback count test 2026-05-04 16:58:38 -03:00
diegosouzapw
3b473082e5 Merge main into release/v3.7.9 2026-05-04 16:55:04 -03:00
diegosouzapw
d775dd31f5 fix(codex): disable mid-task failover when combo strategy is context-relay 2026-05-04 16:51:54 -03:00
diegosouzapw
baeaaee0f7 fix(auth): implement extractSessionAffinityKey stub for codex tests 2026-05-04 16:48:49 -03:00
smartenok-ops
d4408add04 feat(sse): codex 429 mid-task failover with account rotation (#1888)
Integrated into release/v3.7.9
2026-05-04 16:45:46 -03:00
backryun
4dc959c1f2 chore(provider): Add reka models list (#1956)
Integrated into release/v3.7.9
2026-05-04 16:45:24 -03:00