fix(chat): reduce combined file size

Co-authored-by: diegosouzapw <8016841+diegosouzapw@users.noreply.github.com>
2026-08-10 17:22:17 +03:00 · 2026-08-09 08:50:35 -03:00 · 2026-08-09 08:44:41 -03:00 · 2026-08-09 08:34:19 -03:00 · 2026-08-09 02:22:50 -03:00 · 2026-08-09 02:22:50 -03:00
8 changed files with 349 additions and 349 deletions
--- a/.gitignore
+++ b/.gitignore
@@ -72,7 +72,6 @@ yarn-error.log*
 # env files (can opt-in for committing if needed)
 .env*
 !.env.example
-!.env.devin-bridge.example
 !.env.homolog.example
 # Provider API keys (never commit)
 *.api-key
@@ -172,6 +171,7 @@ config/quality/test-impact-map.json
 # GitNexus local index
 .gitnexus
 .worktrees
+bin/omniroute.mjs

 # Consistent with .dockerignore / .npmignore
 .omc/
@@ -201,17 +201,12 @@ scripts/i18n/_pending-keys.json
 .codegraph/

 # Fumadocs generated source
-/.source/
-
-# Temporary local worktrees used to build unpublished npm tarballs
-/.deploy-build-*/
+.source/

 # AI agent local settings and configs
 .agents/
 .antigravitycli/
 .claude/
-!tests/fixtures/devin-bridge/e2e-workspace/.claude/
-!tests/fixtures/devin-bridge/e2e-workspace/.claude/**

 # PR Reviews and local feedback files
 pr_reviews*.json
@@ -238,10 +233,7 @@ omniroute.md

 # mise configuration
 mise.toml
-# release-green artifacts (.gitignore has no inline comments — a trailing
-# `# ...` becomes part of the pattern, so it must sit on its own line).
-# Already covered by /_*/ above; kept explicit for discoverability.
-_artifacts/
+_artifacts/          # release-green artifacts
 .claude-flow/

 # ESLint file cache (npm run lint --cache / complexity ratchets)
@@ -251,8 +243,6 @@ _artifacts/

 # CI/local quality artifacts (eslint-results.json, quality-ratchet.md, etc.)
 .artifacts/
-# Isolated Devin bridge workspaces, evidence, and test databases
-.sandbox/

 # Homologation E2E suite (npm run homolog) — real-environment credentials + report output
 .env.homolog
@@ -260,12 +250,8 @@ tests/homolog/.auth/
 tests/homolog/ui/.auth/
 homolog-report/
 docker-compose.yml.bak
-.playwright-cli/
-# Playwright screenshot/log output. Today every artifact happens to land inside
-# output/**/.playwright-cli/ (covered above), but anything written directly to
-# output/ would otherwise show up as untracked.
-/output/

-# _tasks e um repo git SEPARADO (ver AGENTS.md). _tasks/ (com barra) NAO ignora um
-# SYMLINK _tasks; /_tasks (ancorado) cobre symlink/dir na raiz (incidente 2026-08-08).
+# _tasks e um repo git SEPARADO (ver AGENTS.md). A linha _tasks/ (com barra) NAO
+# ignora um SYMLINK chamado _tasks; /_tasks (ancorado) cobre arquivo/symlink/dir na raiz
+# e impede que um git add -A recapture o symlink (incidente 2026-08-08).
 /_tasks
--- a/open-sse/executors/cliproxyapi.ts
+++ b/open-sse/executors/cliproxyapi.ts
@@ -408,12 +408,13 @@ export class CliproxyapiExecutor extends BaseExecutor {

    input.log?.info?.("CPA", `CLIProxyAPI → ${url} (model: ${input.model}, shape: ${shape})`);

-    // _toolNameMap is an in-memory channel to chatCore for response-side
-    // tool name restoration; never send it over the wire.
+    // _toolNameMap and _namespaceToolIdentityMap are in-memory channels to
+    // chatCore for response-side tool name restoration; never send them over
+    // the wire.
    const wireBody =
      transformedBody && typeof transformedBody === "object"
        ? JSON.stringify(transformedBody, (key, value) =>
-            key === "_toolNameMap" ? undefined : value
+            key === "_toolNameMap" || key === "_namespaceToolIdentityMap" ? undefined : value
          )
        : JSON.stringify(transformedBody);

--- a/open-sse/handlers/chatCore.ts
+++ b/open-sse/handlers/chatCore.ts
@@ -207,7 +207,6 @@ import { stageTrace } from "./chatCore/stageTrace.ts";
 import { attachCompressionUsageReceiptAfterAnalytics as attachCompressionUsageReceiptAfterAnalyticsFor } from "./chatCore/compressionUsageReceipt.ts";
 import { prepareUpstreamBody } from "./chatCore/upstreamBody.ts";
 import { getQuotaScopeLabelForProvider } from "../services/antigravityQuotaFamily.ts";
-
 import {
  getCallLogPipelineCaptureStreamChunks,
  getCallLogPipelineMaxSizeBytes,
@@ -367,9 +366,7 @@ import {
  isTpmExhausted,
  isRpmExhausted,
 } from "../services/geminiRateLimitTracker.ts";
-
 import { isSmallEnoughForSemanticCache } from "../utils/estimateSize.ts";
-
 /**
 * Core chat handler - shared between SSE and Worker
 * Returns { success, response, status, error } for caller to handle fallback
@@ -389,10 +386,8 @@ import { isSmallEnoughForSemanticCache } from "../utils/estimateSize.ts";
 * @param {boolean} options.isCombo - Whether this request is from a combo
 * @param {string} options.connectionId - Connection ID for settings lookup
 */
-
 // extractSystemRoleMessages extracted to chatCore/claudeSystemRole.ts (#3501); re-exported above so
 // existing importers (e.g. tests/unit/system-role-extraction.test.ts) keep resolving it from here.
-
 export async function handleChatCore({
  body,
  modelInfo,
@@ -428,7 +423,6 @@ export async function handleChatCore({
      /* fail open */
    }
  }
-
  // Per-request model-routing metadata (first extracted slice of the request-setup phase).
  const { apiFormat, customModelTargetFormat, requestedModel } = resolveChatCoreRequestSetup(
    modelInfo,
@@ -442,7 +436,6 @@ export async function handleChatCore({
  // (not Math.random) purely to satisfy CodeQL js/insecure-randomness — this id
  // is a log-correlation token, not a security secret.
  const traceId = globalThis.crypto.randomUUID().slice(0, 6);
-
  // Emit request.started event for real-time dashboard
  setImmediate(() => {
    emit("request.started", {
@@ -526,7 +519,6 @@ export async function handleChatCore({
      `long-running goal mode enabled: readinessMax=${agentGoalPolicy.readinessMaxTimeoutMs}ms streamRecovery=${agentGoalPolicy.streamRecoveryEnabled}`
    );
  }
-
  let effectiveServiceTier: EffectiveServiceTier = "standard";
  // Codex service-tier resolvers extracted to chatCore/serviceTier.ts (#3501); bind the per-request
  // provider/credentials once and delegate so the existing call sites stay byte-identical.
@@ -555,7 +547,6 @@ export async function handleChatCore({
      })
    ).catch(() => {});
  };
-
  // Key-health updater extracted to chatCore/keyHealth.ts (#3501); bind the per-request log once
  // and delegate so the existing call sites stay byte-identical.
  const recordKeyHealthStatus = (
@@ -563,11 +554,9 @@ export async function handleChatCore({
    creds: Record<string, unknown> | null | undefined,
    transport?: string
  ): void => recordKeyHealthStatusFor(status, creds, log, transport);
-
  const persistCodexQuotaState = async (headers: Record<string, string> | null, status = 0) => {
    const currentConnectionId = getCurrentConnectionId();
    if (provider !== "codex" || !currentConnectionId || !headers) return;
-
    try {
      const existingProviderData =
        credentials?.providerSpecificData && typeof credentials.providerSpecificData === "object"
@@ -582,28 +571,23 @@ export async function handleChatCore({
        status,
      });
      if (!built) return;
-
      if (built.exhaustionLog) {
        log?.debug?.("CODEX", built.exhaustionLog);
      }
-
      // Invalidate the preflight cache for this connection so the next
      // isModelAvailable check fetches fresh quota data.
      if (status === 429) {
        invalidateCodexQuotaCache(currentConnectionId);
      }
-
      await updateProviderConnection(currentConnectionId, {
        providerSpecificData: built.nextProviderData,
      });
-
      credentials.providerSpecificData = built.nextProviderData;
    } catch (err) {
      const errMessage = err instanceof Error ? err.message : String(err);
      log?.debug?.("CODEX", `Failed to persist codex quota state: ${errMessage}`);
    }
  };
-
  // ── Phase 9.2: Idempotency check ──
  // Resolve the idempotency key once here and reuse it at the Phase 9.2 save site below,
  // rather than re-deriving it. (#3821-review LEDGER-6)
@@ -622,13 +606,11 @@ export async function handleChatCore({
  if (idempotencyHit) {
    return idempotencyHit;
  }
-
  // T07: Inject connectionId into credentials so executors can rotate API keys
  // using providerSpecificData.extraApiKeys (API Key Round-Robin feature)
  if (connectionId && credentials && !credentials.connectionId) {
    credentials.connectionId = connectionId;
  }
-
  // Endpoint/format resolution extracted to chatCore/requestFormat.ts (#3501); pure derivation
  // from the inbound request, destructured so every downstream use stays byte-identical.
  const {
@@ -2264,8 +2246,19 @@ export async function handleChatCore({
  // the latter is a Kiro/Claude passthrough alias channel with string values,
  // while namespace identities carry `{namespace, name}` for the #7936 response
  // seam. Extract first because Kiro merge may reuse `_toolNameMap` below.
+  //
+  // #9780 — prefer the dedicated channel: on a pivot the openai->claude/gemini
+  // step publishes its own alias map on `_toolNameMap`, so that property alone
+  // yields aliases here. The `_toolNameMap` read stays as the fallback for the
+  // non-pivot producers (executors/base.ts, cliproxyapi.ts, antigravity).
+  const namespaceIdentityMap = translatedBody._namespaceToolIdentityMap;
  const requestToolIdentityMap =
-    translatedBody._toolNameMap instanceof Map ? translatedBody._toolNameMap : null;
+    namespaceIdentityMap instanceof Map
+      ? namespaceIdentityMap
+      : translatedBody._toolNameMap instanceof Map
+        ? translatedBody._toolNameMap
+        : null;
+  delete translatedBody._namespaceToolIdentityMap;
  delete translatedBody._toolNameMap;

  // Kiro: sanitize tool schemas before dispatch. Kiro returns 400 "Improperly
@@ -5025,7 +5018,6 @@ export async function handleChatCore({
    }),
  };
 }
-
 export function isTokenExpiringSoon(expiresAt, bufferMs = 5 * 60 * 1000) {
  if (!expiresAt) return false;
  const expiresAtMs = new Date(expiresAt).getTime();
--- a/open-sse/translator/index.ts
+++ b/open-sse/translator/index.ts
@@ -352,7 +352,27 @@ export function translateRequest(
                  ...(hasProvider ? { _provider: provider } : {}),
                }
              : credentials;
-          result = fromOpenAI(model, result, stream, translationCredentials);
+          // #9780 — carry the Responses namespace identity map across the pivot.
+          // Target translators return a brand-new object (buildKiroPayload et
+          // al.), dropping the non-enumerable property step 1 attached; the
+          // #7936 seam then gets null and namespace sub-tool calls come back
+          // flattened, which Codex rejects with `unsupported call: <name>`.
+          const identityMap = (result as Record<string, unknown>)._namespaceToolIdentityMap;
+          const translated = fromOpenAI(model, result, stream, translationCredentials);
+          if (
+            identityMap instanceof Map &&
+            translated &&
+            typeof translated === "object" &&
+            !((translated as Record<string, unknown>)._namespaceToolIdentityMap instanceof Map)
+          ) {
+            Object.defineProperty(translated, "_namespaceToolIdentityMap", {
+              value: identityMap,
+              enumerable: false,
+              configurable: true,
+              writable: true,
+            });
+          }
+          result = translated;
        }
      }
    }
--- a/open-sse/translator/request/openai-responses.ts
+++ b/open-sse/translator/request/openai-responses.ts
@@ -752,8 +752,19 @@ export function openaiResponsesToOpenAIRequest(
  delete result.prompt_cache_retention;

  if (namespaceToolIdentityMap.size > 0) {
-    // chatCore extracts and deletes this transient side channel before dispatch.
+    // chatCore extracts and deletes these transient side channels before dispatch.
    // Non-enumerability keeps internal request metadata off the upstream wire.
+    //
+    // Two properties on purpose (#9780): `_toolNameMap` is also the alias
+    // channel for openai-to-claude/gemini, which overwrite it on a pivot, so
+    // the identity map needs a name of its own. `_toolNameMap` stays populated
+    // for the existing consumers (executors/base.ts, cliproxyapi, antigravity).
+    Object.defineProperty(result, "_namespaceToolIdentityMap", {
+      value: namespaceToolIdentityMap,
+      enumerable: false,
+      configurable: true,
+      writable: true,
+    });
    Object.defineProperty(result, "_toolNameMap", {
      value: namespaceToolIdentityMap,
      enumerable: false,
--- a/package-lock.json
+++ b/package-lock.json
@@ -1,12 +1,12 @@
 {
  "name": "omniroute",
-  "version": "3.8.50",
+  "version": "3.8.49",
  "lockfileVersion": 3,
  "requires": true,
  "packages": {
    "": {
      "name": "omniroute",
-      "version": "3.8.50",
+      "version": "3.8.49",
      "hasInstallScript": true,
      "license": "MIT",
      "workspaces": [
@@ -79,7 +79,7 @@
        "sqlite-vec": "^0.1.9",
        "tailwind-merge": "^3.6.0",
        "tsx": "^4.23.0",
-        "undici": "^8.10.0",
+        "undici": "^8.3.0",
        "update-notifier": "^7.3.1",
        "uuid": "^14.0.0",
        "ws": "^8.18.0",
@@ -132,7 +132,6 @@
        "lint-staged": "^17.0.8",
        "lockfile-lint": "^5.0.0",
        "node-loader": "^2.1.0",
-        "opencode-ai": "1.18.8",
        "playwright-ctrf-json-reporter": "^0.0.29",
        "prettier": "^3.8.3",
        "promptfoo": "^0.121.18",
@@ -152,7 +151,7 @@
        "@atjsh/llmlingua-2": "2.0.3",
        "@huggingface/transformers": "3.5.2",
        "@tensorflow/tfjs": "4.22.0",
-        "better-sqlite3": "^13.0.2",
+        "better-sqlite3": "^13.0.1",
        "js-tiktoken": "^1.0.20",
        "keytar": "^7.9.0",
        "tls-client-node": "^0.2.0",
@@ -3693,6 +3692,9 @@
      "cpu": [
        "arm"
      ],
+      "libc": [
+        "glibc"
+      ],
      "license": "LGPL-3.0-or-later",
      "optional": true,
      "os": [
@@ -3709,6 +3711,9 @@
      "cpu": [
        "arm64"
      ],
+      "libc": [
+        "glibc"
+      ],
      "license": "LGPL-3.0-or-later",
      "optional": true,
      "os": [
@@ -3725,6 +3730,9 @@
      "cpu": [
        "ppc64"
      ],
+      "libc": [
+        "glibc"
+      ],
      "license": "LGPL-3.0-or-later",
      "optional": true,
      "os": [
@@ -3741,6 +3749,9 @@
      "cpu": [
        "riscv64"
      ],
+      "libc": [
+        "glibc"
+      ],
      "license": "LGPL-3.0-or-later",
      "optional": true,
      "os": [
@@ -3757,6 +3768,9 @@
      "cpu": [
        "s390x"
      ],
+      "libc": [
+        "glibc"
+      ],
      "license": "LGPL-3.0-or-later",
      "optional": true,
      "os": [
@@ -3773,6 +3787,9 @@
      "cpu": [
        "x64"
      ],
+      "libc": [
+        "glibc"
+      ],
      "license": "LGPL-3.0-or-later",
      "optional": true,
      "os": [
@@ -3789,6 +3806,9 @@
      "cpu": [
        "arm64"
      ],
+      "libc": [
+        "musl"
+      ],
      "license": "LGPL-3.0-or-later",
      "optional": true,
      "os": [
@@ -3805,6 +3825,9 @@
      "cpu": [
        "x64"
      ],
+      "libc": [
+        "musl"
+      ],
      "license": "LGPL-3.0-or-later",
      "optional": true,
      "os": [
@@ -3821,6 +3844,9 @@
      "cpu": [
        "arm"
      ],
+      "libc": [
+        "glibc"
+      ],
      "license": "Apache-2.0",
      "optional": true,
      "os": [
@@ -3843,6 +3869,9 @@
      "cpu": [
        "arm64"
      ],
+      "libc": [
+        "glibc"
+      ],
      "license": "Apache-2.0",
      "optional": true,
      "os": [
@@ -3865,6 +3894,9 @@
      "cpu": [
        "ppc64"
      ],
+      "libc": [
+        "glibc"
+      ],
      "license": "Apache-2.0",
      "optional": true,
      "os": [
@@ -3887,6 +3919,9 @@
      "cpu": [
        "riscv64"
      ],
+      "libc": [
+        "glibc"
+      ],
      "license": "Apache-2.0",
      "optional": true,
      "os": [
@@ -3909,6 +3944,9 @@
      "cpu": [
        "s390x"
      ],
+      "libc": [
+        "glibc"
+      ],
      "license": "Apache-2.0",
      "optional": true,
      "os": [
@@ -3931,6 +3969,9 @@
      "cpu": [
        "x64"
      ],
+      "libc": [
+        "glibc"
+      ],
      "license": "Apache-2.0",
      "optional": true,
      "os": [
@@ -3953,6 +3994,9 @@
      "cpu": [
        "arm64"
      ],
+      "libc": [
+        "musl"
+      ],
      "license": "Apache-2.0",
      "optional": true,
      "os": [
@@ -3975,6 +4019,9 @@
      "cpu": [
        "x64"
      ],
+      "libc": [
+        "musl"
+      ],
      "license": "Apache-2.0",
      "optional": true,
      "os": [
@@ -5346,6 +5393,9 @@
      "cpu": [
        "arm64"
      ],
+      "libc": [
+        "glibc"
+      ],
      "license": "MIT",
      "optional": true,
      "os": [
@@ -5362,6 +5412,9 @@
      "cpu": [
        "arm64"
      ],
+      "libc": [
+        "musl"
+      ],
      "license": "MIT",
      "optional": true,
      "os": [
@@ -5378,6 +5431,9 @@
      "cpu": [
        "x64"
      ],
+      "libc": [
+        "glibc"
+      ],
      "license": "MIT",
      "optional": true,
      "os": [
@@ -5394,6 +5450,9 @@
      "cpu": [
        "x64"
      ],
+      "libc": [
+        "musl"
+      ],
      "license": "MIT",
      "optional": true,
      "os": [
@@ -10611,6 +10670,9 @@
        "arm64"
      ],
      "dev": true,
+      "libc": [
+        "glibc"
+      ],
      "license": "MIT",
      "optional": true,
      "os": [
@@ -10628,6 +10690,9 @@
        "arm64"
      ],
      "dev": true,
+      "libc": [
+        "musl"
+      ],
      "license": "MIT",
      "optional": true,
      "os": [
@@ -10645,6 +10710,9 @@
        "x64"
      ],
      "dev": true,
+      "libc": [
+        "glibc"
+      ],
      "license": "MIT",
      "optional": true,
      "os": [
@@ -10662,6 +10730,9 @@
        "x64"
      ],
      "dev": true,
+      "libc": [
+        "musl"
+      ],
      "license": "MIT",
      "optional": true,
      "os": [
@@ -12708,6 +12779,9 @@
        "arm"
      ],
      "dev": true,
+      "libc": [
+        "glibc"
+      ],
      "optional": true,
      "os": [
        "linux"
@@ -12721,6 +12795,9 @@
        "arm"
      ],
      "dev": true,
+      "libc": [
+        "musl"
+      ],
      "optional": true,
      "os": [
        "linux"
@@ -12734,6 +12811,9 @@
        "arm64"
      ],
      "dev": true,
+      "libc": [
+        "glibc"
+      ],
      "optional": true,
      "os": [
        "linux"
@@ -12747,6 +12827,9 @@
        "arm64"
      ],
      "dev": true,
+      "libc": [
+        "musl"
+      ],
      "optional": true,
      "os": [
        "linux"
@@ -12760,6 +12843,9 @@
        "x64"
      ],
      "dev": true,
+      "libc": [
+        "glibc"
+      ],
      "optional": true,
      "os": [
        "linux"
@@ -12773,6 +12859,9 @@
        "x64"
      ],
      "dev": true,
+      "libc": [
+        "musl"
+      ],
      "optional": true,
      "os": [
        "linux"
@@ -13598,14 +13687,11 @@
      }
    },
    "node_modules/balanced-match": {
-      "version": "4.0.4",
-      "resolved": "https://registry.npmjs.org/balanced-match/-/balanced-match-4.0.4.tgz",
-      "integrity": "sha512-BLrgEcRTwX2o6gGxGOCNyMvGSp35YofuYzw9h1IMTRmKqttAZZVU67bdb9Pr2vUHA8+j3i2tJfjO6C6+4myGTA==",
+      "version": "1.0.2",
+      "resolved": "https://registry.npmjs.org/balanced-match/-/balanced-match-1.0.2.tgz",
+      "integrity": "sha512-3oSeUO0TMV67hN1AmbXsK4yaqU7tjiHlbxRDZOpH0KW9+CeX4bRAaX0Anxt0tx2MrpRpWwQaPwIlISEJhYU5Pw==",
      "dev": true,
-      "license": "MIT",
-      "engines": {
-        "node": "18 || 20 || >=22"
-      }
+      "license": "MIT"
    },
    "node_modules/base64-js": {
      "version": "1.5.1",
@@ -13670,9 +13756,10 @@
      }
    },
    "node_modules/better-sqlite3": {
-      "version": "13.0.2",
-      "resolved": "https://registry.npmjs.org/better-sqlite3/-/better-sqlite3-13.0.2.tgz",
-      "integrity": "sha512-jW6oufeDhXZaiX9Lw5A+oerVClx4iFrI6uDj1zu7SqUAjak9vbJvA0NEcKLNxHiQHb6kYCoFzzXYV0YOauhV3g==",
+      "version": "13.0.1",
+      "resolved": "https://registry.npmjs.org/better-sqlite3/-/better-sqlite3-13.0.1.tgz",
+      "integrity": "sha512-LYpmOXdkpQYf4wmlxkdzW01XGlOXNIbjLg45yNkh0FQ4814VbK9PdOFmhZpYbej+EZtR/i3FDdhEG98HqZdgnA==",
+      "hasInstallScript": true,
      "license": "MIT",
      "optional": true,
      "dependencies": {
@@ -13954,16 +14041,14 @@
      }
    },
    "node_modules/brace-expansion": {
-      "version": "5.0.9",
-      "resolved": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-5.0.9.tgz",
-      "integrity": "sha512-ScQ4IuvIEF1TMlP7Zt+vjJ//9zlPb2SDcxWxM3bk8s6t6GGdJ7KO1dCcTidOPJKePW30LE/2cT7wCyPho9/Wxg==",
+      "version": "1.1.18",
+      "resolved": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-1.1.18.tgz",
+      "integrity": "sha512-Edep/X9fGqVNmzKBVsDYIOtD+z1tuezV70LBjdCst9Tqu76lsnvRiZ6oTic1n+/BIwX6QDGAO94PN4N2SADvtw==",
      "dev": true,
      "license": "MIT",
      "dependencies": {
-        "balanced-match": "^4.0.2"
-      },
-      "engines": {
-        "node": "20 || >=22"
+        "balanced-match": "^1.0.0",
+        "concat-map": "0.0.1"
      }
    },
    "node_modules/braces": {
@@ -24392,25 +24477,6 @@
        "node": ">= 14"
      }
    },
-    "node_modules/libxmljs2/node_modules/balanced-match": {
-      "version": "1.0.2",
-      "resolved": "https://registry.npmjs.org/balanced-match/-/balanced-match-1.0.2.tgz",
-      "integrity": "sha512-3oSeUO0TMV67hN1AmbXsK4yaqU7tjiHlbxRDZOpH0KW9+CeX4bRAaX0Anxt0tx2MrpRpWwQaPwIlISEJhYU5Pw==",
-      "dev": true,
-      "license": "MIT",
-      "optional": true
-    },
-    "node_modules/libxmljs2/node_modules/brace-expansion": {
-      "version": "2.1.4",
-      "resolved": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-2.1.4.tgz",
-      "integrity": "sha512-hGfVzPxthbf3+2yjg/RBs60cB0FhqBS/zvdV/4wn4/BmN0bNMMHPc4V/BbFieqf1TKAGGAHnY4eSjajCl0f2Xg==",
-      "dev": true,
-      "license": "MIT",
-      "optional": true,
-      "dependencies": {
-        "balanced-match": "^1.0.0"
-      }
-    },
    "node_modules/libxmljs2/node_modules/cacache": {
      "version": "19.0.1",
      "resolved": "https://registry.npmjs.org/cacache/-/cacache-19.0.1.tgz",
@@ -26883,24 +26949,6 @@
        "node": "*"
      }
    },
-    "node_modules/minimatch/node_modules/balanced-match": {
-      "version": "1.0.2",
-      "resolved": "https://registry.npmjs.org/balanced-match/-/balanced-match-1.0.2.tgz",
-      "integrity": "sha512-3oSeUO0TMV67hN1AmbXsK4yaqU7tjiHlbxRDZOpH0KW9+CeX4bRAaX0Anxt0tx2MrpRpWwQaPwIlISEJhYU5Pw==",
-      "dev": true,
-      "license": "MIT"
-    },
-    "node_modules/minimatch/node_modules/brace-expansion": {
-      "version": "1.1.18",
-      "resolved": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-1.1.18.tgz",
-      "integrity": "sha512-Edep/X9fGqVNmzKBVsDYIOtD+z1tuezV70LBjdCst9Tqu76lsnvRiZ6oTic1n+/BIwX6QDGAO94PN4N2SADvtw==",
-      "dev": true,
-      "license": "MIT",
-      "dependencies": {
-        "balanced-match": "^1.0.0",
-        "concat-map": "0.0.1"
-      }
-    },
    "node_modules/minimist": {
      "version": "1.2.8",
      "resolved": "https://registry.npmjs.org/minimist/-/minimist-1.2.8.tgz",
@@ -28739,205 +28787,6 @@
        }
      }
    },
-    "node_modules/opencode-ai": {
-      "version": "1.18.8",
-      "resolved": "https://registry.npmjs.org/opencode-ai/-/opencode-ai-1.18.8.tgz",
-      "integrity": "sha512-eZvYK0rIc/NUDQ+s3LsO9gyUU3MswsbNOLZz06iPwVhbg/2jF6bkTaroBgiIdFWKwUn5sj+kSMc4TBYxFkMrNQ==",
-      "cpu": [
-        "arm64",
-        "x64"
-      ],
-      "dev": true,
-      "hasInstallScript": true,
-      "license": "MIT",
-      "os": [
-        "darwin",
-        "linux",
-        "win32"
-      ],
-      "bin": {
-        "opencode": "bin/opencode.exe"
-      },
-      "optionalDependencies": {
-        "opencode-darwin-arm64": "1.18.8",
-        "opencode-darwin-x64": "1.18.8",
-        "opencode-darwin-x64-baseline": "1.18.8",
-        "opencode-linux-arm64": "1.18.8",
-        "opencode-linux-arm64-musl": "1.18.8",
-        "opencode-linux-x64": "1.18.8",
-        "opencode-linux-x64-baseline": "1.18.8",
-        "opencode-linux-x64-baseline-musl": "1.18.8",
-        "opencode-linux-x64-musl": "1.18.8",
-        "opencode-windows-arm64": "1.18.8",
-        "opencode-windows-x64": "1.18.8",
-        "opencode-windows-x64-baseline": "1.18.8"
-      }
-    },
-    "node_modules/opencode-darwin-arm64": {
-      "version": "1.18.8",
-      "resolved": "https://registry.npmjs.org/opencode-darwin-arm64/-/opencode-darwin-arm64-1.18.8.tgz",
-      "integrity": "sha512-ZZCIEgTvHxOHk52Aeqhq59t/R0aqs29bPIgu45XE4rkgjmn/XCkTWalCPtyzJHipdcEbq/g0lqsE1OlJV0oNbA==",
-      "cpu": [
-        "arm64"
-      ],
-      "dev": true,
-      "optional": true,
-      "os": [
-        "darwin"
-      ]
-    },
-    "node_modules/opencode-darwin-x64": {
-      "version": "1.18.8",
-      "resolved": "https://registry.npmjs.org/opencode-darwin-x64/-/opencode-darwin-x64-1.18.8.tgz",
-      "integrity": "sha512-2EXRMJbRKnFPWI9oDU9tb7jDGmKiPmfjCLtwJMe3EF57h5wfcdEH9sP25bR3Og5NbE2M+PtMcJm0jMeHn2XoLQ==",
-      "cpu": [
-        "x64"
-      ],
-      "dev": true,
-      "optional": true,
-      "os": [
-        "darwin"
-      ]
-    },
-    "node_modules/opencode-darwin-x64-baseline": {
-      "version": "1.18.8",
-      "resolved": "https://registry.npmjs.org/opencode-darwin-x64-baseline/-/opencode-darwin-x64-baseline-1.18.8.tgz",
-      "integrity": "sha512-eLXa2tK9LRuZ5e20QG2k4dmWAA5xnLgJ1afRTSD0/ybE6CAeK02i8vFCnFFDaxuBo+gnq+yqO8AkqvN1m64V/Q==",
-      "cpu": [
-        "x64"
-      ],
-      "dev": true,
-      "optional": true,
-      "os": [
-        "darwin"
-      ]
-    },
-    "node_modules/opencode-linux-arm64": {
-      "version": "1.18.8",
-      "resolved": "https://registry.npmjs.org/opencode-linux-arm64/-/opencode-linux-arm64-1.18.8.tgz",
-      "integrity": "sha512-7kj3c9JEdryHgK+o8zE/N9KzTOdbiDn6KpY8dl+hM9n5Cnmxezx4IAlgJeC9QxpIx8Omop6CYuZ+17KfrKdKLw==",
-      "cpu": [
-        "arm64"
-      ],
-      "dev": true,
-      "optional": true,
-      "os": [
-        "linux"
-      ]
-    },
-    "node_modules/opencode-linux-arm64-musl": {
-      "version": "1.18.8",
-      "resolved": "https://registry.npmjs.org/opencode-linux-arm64-musl/-/opencode-linux-arm64-musl-1.18.8.tgz",
-      "integrity": "sha512-tww5TF/LIOv/GoTNyzGYgqDRhbJrhoMu8R+p5yD/SpnXPg3rcfYREw2wRy9yikyPU9sAQksuIIteTsyGerPjlA==",
-      "cpu": [
-        "arm64"
-      ],
-      "dev": true,
-      "libc": [
-        "musl"
-      ],
-      "optional": true,
-      "os": [
-        "linux"
-      ]
-    },
-    "node_modules/opencode-linux-x64": {
-      "version": "1.18.8",
-      "resolved": "https://registry.npmjs.org/opencode-linux-x64/-/opencode-linux-x64-1.18.8.tgz",
-      "integrity": "sha512-Sm4fbQ9BdLI6hgN6FYYX8Nql+Sqe/2EKHJu3iWg0UYs93AXN4ROi0rvOmRbMk+ycYgOchb0hL6Ti2opxLx17sg==",
-      "cpu": [
-        "x64"
-      ],
-      "dev": true,
-      "optional": true,
-      "os": [
-        "linux"
-      ]
-    },
-    "node_modules/opencode-linux-x64-baseline": {
-      "version": "1.18.8",
-      "resolved": "https://registry.npmjs.org/opencode-linux-x64-baseline/-/opencode-linux-x64-baseline-1.18.8.tgz",
-      "integrity": "sha512-egeEF4tk1rK9flIQjjeSVB9cR/X3zUti0pNAHW6ROJkNkj72z2C2FmjK1hZbfjtteCueMXPLptS23JROHGWL1w==",
-      "cpu": [
-        "x64"
-      ],
-      "dev": true,
-      "optional": true,
-      "os": [
-        "linux"
-      ]
-    },
-    "node_modules/opencode-linux-x64-baseline-musl": {
-      "version": "1.18.8",
-      "resolved": "https://registry.npmjs.org/opencode-linux-x64-baseline-musl/-/opencode-linux-x64-baseline-musl-1.18.8.tgz",
-      "integrity": "sha512-S+438BXs48gLeXX/ya4TSNytDy9mliU3sOAf6j9rfFjzGiF/S08LedemSAnHkr0riBtamik1aRPSmTjhQ0dOBg==",
-      "cpu": [
-        "x64"
-      ],
-      "dev": true,
-      "libc": [
-        "musl"
-      ],
-      "optional": true,
-      "os": [
-        "linux"
-      ]
-    },
-    "node_modules/opencode-linux-x64-musl": {
-      "version": "1.18.8",
-      "resolved": "https://registry.npmjs.org/opencode-linux-x64-musl/-/opencode-linux-x64-musl-1.18.8.tgz",
-      "integrity": "sha512-c+E4Zsp0DYVcuqcDtgxw/4YcFLrVYWdGBR8x4CzpW48ga3RshaH+BlmUiy+GY0yr1x6UR+e2V3w4uzvzm/L9UQ==",
-      "cpu": [
-        "x64"
-      ],
-      "dev": true,
-      "libc": [
-        "musl"
-      ],
-      "optional": true,
-      "os": [
-        "linux"
-      ]
-    },
-    "node_modules/opencode-windows-arm64": {
-      "version": "1.18.8",
-      "resolved": "https://registry.npmjs.org/opencode-windows-arm64/-/opencode-windows-arm64-1.18.8.tgz",
-      "integrity": "sha512-7NjdtEIiX28kmsKD9jHbFG4bbwBB5T4dAe2UwdnOqCBb2cl+ETV5eO6kbdC/xWxrgOghgZM1Wtw791T5pQPyag==",
-      "cpu": [
-        "arm64"
-      ],
-      "dev": true,
-      "optional": true,
-      "os": [
-        "win32"
-      ]
-    },
-    "node_modules/opencode-windows-x64": {
-      "version": "1.18.8",
-      "resolved": "https://registry.npmjs.org/opencode-windows-x64/-/opencode-windows-x64-1.18.8.tgz",
-      "integrity": "sha512-G+NEgEMvu/dEYshH5IaqHVTmsHVuGdORBvVmgphFiknT7q/NXPuoZCMtMIdfNlEFbu54BlzRDdJCR3Mqe98gUw==",
-      "cpu": [
-        "x64"
-      ],
-      "dev": true,
-      "optional": true,
-      "os": [
-        "win32"
-      ]
-    },
-    "node_modules/opencode-windows-x64-baseline": {
-      "version": "1.18.8",
-      "resolved": "https://registry.npmjs.org/opencode-windows-x64-baseline/-/opencode-windows-x64-baseline-1.18.8.tgz",
-      "integrity": "sha512-IGbjFyWoSN9rdGUJX7TWkQ1Yl673Q3dDna54b5NtqeRcZ839p+Z47zzM5m883HKAxrdKCC6Z22HYuDcXLV0laA==",
-      "cpu": [
-        "x64"
-      ],
-      "dev": true,
-      "optional": true,
-      "os": [
-        "win32"
-      ]
-    },
    "node_modules/opener": {
      "version": "1.5.2",
      "resolved": "https://registry.npmjs.org/opener/-/opener-1.5.2.tgz",
@@ -32174,13 +32023,6 @@
        "url": "https://github.com/sponsors/isaacs"
      }
    },
-    "node_modules/rimraf/node_modules/balanced-match": {
-      "version": "1.0.2",
-      "resolved": "https://registry.npmjs.org/balanced-match/-/balanced-match-1.0.2.tgz",
-      "integrity": "sha512-3oSeUO0TMV67hN1AmbXsK4yaqU7tjiHlbxRDZOpH0KW9+CeX4bRAaX0Anxt0tx2MrpRpWwQaPwIlISEJhYU5Pw==",
-      "dev": true,
-      "license": "MIT"
-    },
    "node_modules/rimraf/node_modules/brace-expansion": {
      "version": "2.1.4",
      "resolved": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-2.1.4.tgz",
@@ -35157,9 +34999,9 @@
      "license": "MIT"
    },
    "node_modules/undici": {
-      "version": "8.10.0",
-      "resolved": "https://registry.npmjs.org/undici/-/undici-8.10.0.tgz",
-      "integrity": "sha512-HvltHd7avK13QIw/oLe4qoOLyoVSoafqJ2jYOrtMRBkbYT31eiBQ8O0ehRKZiEZCMEyLFQNIADpgCWC5fALvYQ==",
+      "version": "8.9.0",
+      "resolved": "https://registry.npmjs.org/undici/-/undici-8.9.0.tgz",
+      "integrity": "sha512-aWZpUj7XoGonMClx4gdDRfgBjqeA+F473aDmROQQbM9n6PRfK/u1q/a0X4wMTgcHfT8H6fpbt98PFuDUwFg2YA==",
      "license": "MIT",
      "engines": {
        "node": ">=22.19.0"
@@ -36950,7 +36792,12 @@
    },
    "open-sse": {
      "name": "@omniroute/open-sse",
-      "version": "3.8.50"
+      "version": "3.8.49",
+      "dependencies": {
+        "@toon-format/toon": "^4.1.0",
+        "safe-regex": "^2.1.1",
+        "smol-toml": "1.7.1"
+      }
    }
  }
 }
--- a/package.json
+++ b/package.json
@@ -1,7 +1,7 @@
 {
  "name": "omniroute",
-  "version": "3.8.50",
-  "description": "Unified AI router with 290 providers, RTK+Caveman compression, auto fallback, MCP/A2A, desktop, PWA, and OpenAI-compatible APIs.",
+  "version": "3.8.49",
+  "description": "Unified AI router with 160+ providers, RTK+Caveman compression, auto fallback, MCP/A2A, desktop, PWA, and OpenAI-compatible APIs.",
  "type": "module",
  "bin": {
    "omniroute": "bin/omniroute.mjs",
@@ -23,7 +23,6 @@
    ".env.example",
    "scripts/build/postinstall.mjs",
    "scripts/build/fixTlsClientNodeBinary.mjs",
-    "scripts/build/fixPlaywrightAndroid.mjs",
    "bin/cli/runtime/",
    "scripts/postinstall.mjs",
    "scripts/build/postinstallSupport.mjs",
@@ -34,15 +33,11 @@
    "scripts/dev/tls-options.mjs",
    "scripts/check/check-supported-node-runtime.ts",
    "scripts/dev/sync-env.mjs",
-    "scripts/build/assembleStandalone.mjs",
-    "scripts/build/backendOnlyPages.mjs",
-    "scripts/build/build-next-isolated.mjs",
-    "scripts/build/build-tproxy-native.mjs",
    "scripts/build/native-binary-compat.mjs",
+    "scripts/build/build-next-isolated.mjs",
    "scripts/build/runtime-env.mjs",
    "README.md",
    "LICENSE",
-    "!**/node_modules/**",
    "!**/__tests__/**",
    "!**/*.test.ts",
    "!**/*.test.tsx",
@@ -115,8 +110,6 @@
    "test:unit:ci": "cross-env DISABLE_SQLITE_AUTO_BACKUP=true node --max-old-space-size=8192 --import tsx/esm --import ./open-sse/utils/setupPolyfill.ts --import ./tests/_setup/isolateDataDir.ts --test --test-force-exit --test-concurrency=4 tests/unit/*.test.ts \"tests/unit/{api,auth,authz,build,cli,cli-helper,combo,compression,correctness,cors,db,db-adapters,docs,gamification,guardrails,lib,mcp,memory,runtime,security,services,settings,shared,ui,usage}/**/*.test.ts\" \"tests/unit/**/*.test.mjs\" && cross-env DISABLE_SQLITE_AUTO_BACKUP=true node --max-old-space-size=8192 --import tsx --import ./open-sse/utils/setupPolyfill.ts --import ./tests/_setup/isolateDataDir.ts --test --test-force-exit --test-concurrency=4 \"tests/unit/dashboard/**/*.test.ts\" && npm run test:unit:serial",
    "test:unit:ci:shard": "cross-env DISABLE_SQLITE_AUTO_BACKUP=true node --max-old-space-size=4096 --import tsx/esm --import ./open-sse/utils/setupPolyfill.ts --import ./tests/_setup/isolateDataDir.ts --test --test-force-exit --test-concurrency=4 --test-shard=$TEST_SHARD tests/unit/*.test.ts \"tests/unit/{api,auth,authz,build,cli,cli-helper,combo,compression,correctness,cors,db,db-adapters,docs,gamification,guardrails,lib,mcp,memory,runtime,security,services,settings,shared,ui,usage}/**/*.test.ts\" \"tests/unit/**/*.test.mjs\" && cross-env DISABLE_SQLITE_AUTO_BACKUP=true node --max-old-space-size=4096 --import tsx --import ./open-sse/utils/setupPolyfill.ts --import ./tests/_setup/isolateDataDir.ts --test --test-force-exit --test-concurrency=4 --test-shard=$TEST_SHARD \"tests/unit/dashboard/**/*.test.ts\" && cross-env DISABLE_SQLITE_AUTO_BACKUP=true node --max-old-space-size=4096 --import tsx/esm --import ./open-sse/utils/setupPolyfill.ts --import ./tests/_setup/isolateDataDir.ts --test --test-force-exit --test-concurrency=1 --test-shard=$TEST_SHARD \"tests/unit/serial/**/*.test.ts\"",
    "test:unit:fast": "cross-env DISABLE_SQLITE_AUTO_BACKUP=true node --max-old-space-size=8192 --import tsx/esm --import ./open-sse/utils/setupPolyfill.ts --import ./tests/_setup/isolateDataDir.ts --test --test-force-exit --test-isolation=none tests/unit/*.test.ts \"tests/unit/{api,auth,authz,build,cli,cli-helper,combo,compression,correctness,cors,db,db-adapters,docs,gamification,guardrails,lib,mcp,memory,runtime,security,services,settings,shared,ui,usage}/**/*.test.ts\" \"tests/unit/**/*.test.mjs\" && cross-env DISABLE_SQLITE_AUTO_BACKUP=true node --max-old-space-size=8192 --import tsx --import ./open-sse/utils/setupPolyfill.ts --import ./tests/_setup/isolateDataDir.ts --test --test-force-exit --test-isolation=none \"tests/unit/dashboard/**/*.test.ts\" && npm run test:unit:serial",
-    "test:scoped": "bash scripts/quality/test-scoped.sh",
-    "test:scoped:staged": "bash scripts/quality/test-scoped.sh --staged",
    "test:unit:shard": "concurrently --kill-others-on-fail -n s1,s2 \"npm:test:unit:shard:1\" \"npm:test:unit:shard:2\"",
    "test:unit:shard:1": "cross-env DISABLE_SQLITE_AUTO_BACKUP=true node --max-old-space-size=8192 --import tsx/esm --import ./open-sse/utils/setupPolyfill.ts --import ./tests/_setup/isolateDataDir.ts --test --test-force-exit --test-concurrency=10 --test-shard=1/2 tests/unit/*.test.ts \"tests/unit/{api,auth,authz,build,cli,cli-helper,combo,compression,correctness,cors,db,db-adapters,docs,gamification,guardrails,lib,mcp,memory,runtime,security,services,settings,shared,ui,usage}/**/*.test.ts\" \"tests/unit/**/*.test.mjs\" && cross-env DISABLE_SQLITE_AUTO_BACKUP=true node --max-old-space-size=8192 --import tsx --import ./open-sse/utils/setupPolyfill.ts --import ./tests/_setup/isolateDataDir.ts --test --test-force-exit --test-concurrency=10 --test-shard=1/2 \"tests/unit/dashboard/**/*.test.ts\" && cross-env DISABLE_SQLITE_AUTO_BACKUP=true node --max-old-space-size=8192 --import tsx/esm --import ./open-sse/utils/setupPolyfill.ts --import ./tests/_setup/isolateDataDir.ts --test --test-force-exit --test-concurrency=1 --test-shard=1/2 \"tests/unit/serial/**/*.test.ts\"",
    "test:unit:shard:2": "cross-env DISABLE_SQLITE_AUTO_BACKUP=true node --max-old-space-size=8192 --import tsx/esm --import ./open-sse/utils/setupPolyfill.ts --import ./tests/_setup/isolateDataDir.ts --test --test-force-exit --test-concurrency=10 --test-shard=2/2 tests/unit/*.test.ts \"tests/unit/{api,auth,authz,build,cli,cli-helper,combo,compression,correctness,cors,db,db-adapters,docs,gamification,guardrails,lib,mcp,memory,runtime,security,services,settings,shared,ui,usage}/**/*.test.ts\" \"tests/unit/**/*.test.mjs\" && cross-env DISABLE_SQLITE_AUTO_BACKUP=true node --max-old-space-size=8192 --import tsx --import ./open-sse/utils/setupPolyfill.ts --import ./tests/_setup/isolateDataDir.ts --test --test-force-exit --test-concurrency=10 --test-shard=2/2 \"tests/unit/dashboard/**/*.test.ts\" && cross-env DISABLE_SQLITE_AUTO_BACKUP=true node --max-old-space-size=8192 --import tsx/esm --import ./open-sse/utils/setupPolyfill.ts --import ./tests/_setup/isolateDataDir.ts --test --test-force-exit --test-concurrency=1 --test-shard=2/2 \"tests/unit/serial/**/*.test.ts\"",
@@ -150,7 +143,6 @@
    "check:node-runtime": "node --import tsx scripts/check/check-supported-node-runtime.ts",
    "check:pack-artifact": "node --import tsx scripts/build/validate-pack-artifact.ts",
    "check:pack-boot": "node scripts/check/check-pack-boot.mjs",
-    "check:install-upgrade": "node scripts/check/check-install-upgrade.mjs",
    "check:pack-policy": "node --import tsx scripts/build/validate-pack-artifact.ts --policy-only",
    "check:cli-i18n": "node scripts/check/check-cli-i18n.mjs",
    "check:openapi-coverage": "node scripts/check/check-openapi-coverage.mjs",
@@ -169,7 +161,6 @@
    "check:test-masking": "node scripts/check/check-test-masking.mjs",
    "check:test-runner-api": "node scripts/check/check-test-runner-api.mjs",
    "check:changelog-integrity": "node scripts/check/check-changelog-integrity.mjs",
-    "sweep:stale-fragments": "node scripts/release/sweep-stale-fragments.mjs",
    "changelog:aggregate": "node scripts/release/aggregate-changelog.mjs",
    "check:agent-skills-sync": "node --import tsx/esm scripts/skills/generate-agent-skills.mjs",
    "check:build-scope": "node scripts/check/check-build-scope.mjs",
@@ -193,7 +184,6 @@
    "check:bundle-size": "node scripts/check/check-bundle-size.mjs",
    "check:circular-deps": "node scripts/check/check-circular-deps.mjs",
    "check:mutation-ratchet": "node scripts/check/check-mutation-ratchet.mjs",
-    "check:rtl-ratchet": "node scripts/check/check-rtl-ratchet.mjs",
    "check:licenses": "node scripts/check/check-licenses.mjs",
    "check:pr-evidence": "node scripts/check/check-pr-evidence.mjs",
    "check:vuln-ratchet": "node scripts/check/check-vuln-ratchet.mjs",
@@ -210,11 +200,9 @@
    "typecheck:core": "tsc --pretty false -p tsconfig.typecheck-core.json",
    "typecheck:noimplicit:core": "tsc --pretty false -p tsconfig.typecheck-noimplicit-core.json",
    "check:dashboard-typecheck": "node scripts/check/check-dashboard-typecheck.mjs",
-    "check:open-sse-typecheck": "node scripts/check/check-open-sse-typecheck.mjs",
    "backfill-aggregation": "node --import tsx src/scripts/backfillAggregation.ts",
    "env:sync": "node scripts/dev/sync-env.mjs",
    "test:integration": "cross-env DISABLE_SQLITE_AUTO_BACKUP=true node --import tsx/esm --import ./open-sse/utils/setupPolyfill.ts --import ./tests/_setup/isolateDataDir.ts --test --test-force-exit --test-concurrency=1 tests/integration/*.test.ts \"tests/integration/combo-matrix/*.test.ts\"",
-    "test:integration:ci": "cross-env DISABLE_SQLITE_AUTO_BACKUP=true node --import tsx/esm --import ./open-sse/utils/setupPolyfill.ts --import ./tests/_setup/isolateDataDir.ts --test --test-force-exit --test-concurrency=1 --test-shard=$TEST_SHARD tests/integration/*.test.ts \"tests/integration/combo-matrix/*.test.ts\"",
    "test:combo:matrix": "cross-env DISABLE_SQLITE_AUTO_BACKUP=true node --import tsx/esm --import ./open-sse/utils/setupPolyfill.ts --import ./tests/_setup/isolateDataDir.ts --test --test-force-exit --test-concurrency=1 \"tests/integration/combo-matrix/*.test.ts\"",
    "test:combo:live": "cross-env RUN_COMBO_LIVE=1 DISABLE_SQLITE_AUTO_BACKUP=true node --import tsx/esm --import ./open-sse/utils/setupPolyfill.ts --import ./tests/_setup/isolateDataDir.ts --test --test-force-exit --test-concurrency=1 \"tests/integration/combo-live/*.live.test.ts\"",
    "test:combo:live:vps": "node scripts/test/combo-live-vps.mjs",
@@ -244,7 +232,6 @@
    "prepare": "husky",
    "system-info": "node scripts/dev/system-info.mjs",
    "build:cli-api": "node --import tsx/esm scripts/cli/generate-api-commands.mjs",
-    "postbuild": "node scripts/build/colocate-standalone.mjs",
    "release:contributors": "node scripts/release/gen-contributors.mjs",
    "release:uncovered": "node scripts/release/list-uncovered-commits.mjs",
    "test:coverage:runner": "node --max-old-space-size=8192 --import tsx/esm --import ./open-sse/utils/setupPolyfill.ts --import ./tests/_setup/isolateDataDir.ts --test --test-force-exit --test-concurrency=8 tests/unit/*.test.ts \"tests/unit/{api,auth,authz,build,cli,cli-helper,combo,compression,correctness,cors,db,db-adapters,docs,gamification,guardrails,lib,mcp,memory,runtime,security,services,settings,shared,ui,usage}/**/*.test.ts\" \"tests/unit/**/*.test.mjs\" && cross-env DISABLE_SQLITE_AUTO_BACKUP=true NODE_OPTIONS=--max-old-space-size=8192 c8 --merge-async --output-dir coverage --exclude=tests/** --exclude=**/*.test.* --reporter=text-summary --reporter=html --reporter=json-summary --reporter=lcov --check-coverage --statements 60 --lines 60 --functions 60 --branches 60 node --max-old-space-size=8192 --import tsx --import ./open-sse/utils/setupPolyfill.ts --import ./tests/_setup/isolateDataDir.ts --test --test-force-exit --test-concurrency=8 \"tests/unit/dashboard/**/*.test.ts\" && npm run test:unit:serial",
@@ -317,7 +304,7 @@
    "sqlite-vec": "^0.1.9",
    "tailwind-merge": "^3.6.0",
    "tsx": "^4.23.0",
-    "undici": "^8.10.0",
+    "undici": "^8.3.0",
    "update-notifier": "^7.3.1",
    "uuid": "^14.0.0",
    "ws": "^8.18.0",
@@ -330,7 +317,7 @@
    "@atjsh/llmlingua-2": "2.0.3",
    "@huggingface/transformers": "3.5.2",
    "@tensorflow/tfjs": "4.22.0",
-    "better-sqlite3": "^13.0.2",
+    "better-sqlite3": "^13.0.1",
    "js-tiktoken": "^1.0.20",
    "keytar": "^7.9.0",
    "tls-client-node": "^0.2.0",
@@ -376,7 +363,6 @@
    "lint-staged": "^17.0.8",
    "lockfile-lint": "^5.0.0",
    "node-loader": "^2.1.0",
-    "opencode-ai": "1.18.8",
    "playwright-ctrf-json-reporter": "^0.0.29",
    "prettier": "^3.8.3",
    "promptfoo": "^0.121.18",
@@ -408,15 +394,6 @@
      "sharp"
    ]
  },
-  "allowScripts": {
-    "better-sqlite3": true,
-    "esbuild": true,
-    "@swc/core": true,
-    "@parcel/watcher": true,
-    "keytar": true,
-    "protobufjs": true,
-    "unrs-resolver": true
-  },
  "overrides": {
    "fast-xml-parser": "^5.10.1",
    "sharp": "^0.35.0",
@@ -447,14 +424,27 @@
    "adm-zip": "^0.6.0",
    "promptfoo": {
      "js-yaml": "^5.2.2",
-      "@apidevtools/json-schema-ref-parser": {
-        "js-yaml": "^4.3.1"
-      },
      "undici": "^7.29.0"
    },
    "socket.io-parser": "^4.2.7",
    "tar": "^7.5.21",
-    "nanoid": "^3.3.17",
+    "brace-expansion": "^5.0.9",
+    "minimatch": {
+      "brace-expansion": "^1.1.18"
+    },
+    "libxmljs2": {
+      "minimatch": {
+        "brace-expansion": "^2.1.4"
+      }
+    },
+    "rimraf": {
+      "minimatch": {
+        "brace-expansion": "^2.1.4"
+      }
+    },
+    "@apidevtools/json-schema-ref-parser": {
+      "js-yaml": "^4.3.1"
+    },
    "@eslint/eslintrc": {
      "js-yaml": "^4.3.1"
    },
@@ -464,11 +454,9 @@
    "xmlbuilder2": {
      "js-yaml": "^4.3.1"
    },
+    "nanoid": "^3.3.17",
    "monaco-editor": {
      "dompurify": "^3.4.13"
-    },
-    "@apidevtools/json-schema-ref-parser": {
-      "js-yaml": "^4.3.1"
    }
  }
 }
--- a/tests/unit/9780-namespace-identity-pivot.test.ts
+++ b/tests/unit/9780-namespace-identity-pivot.test.ts
@@ -0,0 +1,155 @@
+// #9780 — the Responses namespace identity map must survive the hub-and-spoke
+// pivot in translator/index.ts. Step 1 flattens namespace sub-tools (#8295) and
+// records `{namespace, name}`; step 2 returns a new object and used to drop it,
+// leaving the #7936 seam with null and Codex rejecting `unsupported call`.
+// A naive copy-through is not an option: openai-to-claude/gemini publish their
+// own alias map on `_toolNameMap`, hence the dedicated channel asserted here.
+import test from "node:test";
+import assert from "node:assert/strict";
+
+await import("../../open-sse/translator/bootstrap.ts");
+const { translateRequest, initState } = await import("../../open-sse/translator/index.ts");
+const { openaiToOpenAIResponsesResponse } = await import(
+  "../../open-sse/translator/response/openai-responses.ts"
+);
+const { FORMATS } = await import("../../open-sse/translator/formats.ts");
+
+type NamespaceIdentity = { namespace: string; name: string };
+
+const NAMESPACE_REQUEST = {
+  model: "any-model",
+  instructions: "coding agent",
+  input: [{ type: "message", role: "user", content: [{ type: "input_text", text: "go" }] }],
+  tools: [
+    {
+      type: "namespace",
+      name: "functions",
+      tools: [
+        {
+          name: "exec",
+          description: "Run a shell command",
+          parameters: {
+            type: "object",
+            properties: { cmd: { type: "string" } },
+            required: ["cmd"],
+          },
+        },
+      ],
+    },
+  ],
+};
+
+function pivot(targetFormat: string): Record<string, unknown> {
+  return translateRequest(
+    "openai-responses",
+    targetFormat,
+    "any-model",
+    structuredClone(NAMESPACE_REQUEST),
+    true,
+    null,
+    null,
+    null
+  ) as Record<string, unknown>;
+}
+
+function identityOf(body: Record<string, unknown>) {
+  const map = body._namespaceToolIdentityMap;
+  assert.ok(map instanceof Map, "expected a _namespaceToolIdentityMap after the pivot");
+  return map as Map<string, NamespaceIdentity>;
+}
+
+test("#9780: namespace identity survives the openai-responses -> kiro pivot", () => {
+  const identity = identityOf(pivot("kiro"));
+
+  assert.equal(identity.size, 1);
+  assert.deepEqual(identity.get("functions__exec"), { namespace: "functions", name: "exec" });
+});
+
+test("#9780: namespace identity survives the openai-responses -> cursor pivot", () => {
+  const identity = identityOf(pivot("cursor"));
+
+  assert.deepEqual(identity.get("functions__exec"), { namespace: "functions", name: "exec" });
+});
+
+// Regression guard: these two appeared to "keep" a map before the fix, but it
+// was the alias map.
+for (const target of ["claude", "gemini"]) {
+  test(`#9780: ${target} pivot keeps its alias map AND the namespace identity`, () => {
+    const body = pivot(target);
+    const identity = identityOf(body);
+
+    assert.deepEqual(identity.get("functions__exec"), { namespace: "functions", name: "exec" });
+
+    // The alias channel must be untouched: string values, not identities.
+    const aliases = body._toolNameMap;
+    assert.ok(aliases instanceof Map, `${target} must still publish its alias map`);
+    for (const value of (aliases as Map<string, unknown>).values()) {
+      assert.equal(typeof value, "string", `${target} alias values must stay strings`);
+    }
+  });
+}
+
+// Same-format requests are never flattened, so an absent map is correct here.
+test("#9780: same-format openai-responses request is not flattened at all", () => {
+  const body = pivot("openai-responses");
+  const tools = body.tools as Array<Record<string, unknown>>;
+
+  assert.equal(tools[0].type, "namespace");
+  assert.equal((tools[0].tools as Array<{ name: string }>)[0].name, "exec");
+  assert.equal(body._namespaceToolIdentityMap, undefined);
+});
+
+test("#9780: the identity channel is non-enumerable and never serializes", () => {
+  const body = pivot("kiro");
+
+  assert.ok(body._namespaceToolIdentityMap instanceof Map);
+  assert.equal(
+    Object.prototype.propertyIsEnumerable.call(body, "_namespaceToolIdentityMap"),
+    false
+  );
+  assert.equal("_namespaceToolIdentityMap" in JSON.parse(JSON.stringify(body)), false);
+});
+
+// End-to-end: request pivot + response seam, i.e. what the Codex adjudicator
+// actually receives. Before the fix every target emitted `functions__exec` with
+// no namespace, which is the reported `unsupported call`.
+for (const target of ["kiro", "cursor", "claude", "gemini"]) {
+  test(`#9780: ${target} round-trip returns the declared name and its namespace`, () => {
+    const body = pivot(target);
+    const state = initState(FORMATS.OPENAI_RESPONSES) as Record<string, unknown>;
+    state.requestToolIdentityMap = body._namespaceToolIdentityMap;
+
+    // The upstream echoes the flattened wire name (#8295).
+    const events = openaiToOpenAIResponsesResponse(
+      {
+        id: "chatcmpl-9780",
+        model: "any-model",
+        choices: [
+          {
+            index: 0,
+            delta: {
+              tool_calls: [
+                {
+                  index: 0,
+                  id: "call_9780",
+                  type: "function",
+                  function: { name: "functions__exec", arguments: '{"cmd":"git status"}' },
+                },
+              ],
+            },
+            finish_reason: "tool_calls",
+          },
+        ],
+        usage: { prompt_tokens: 1, completion_tokens: 1, total_tokens: 2 },
+      },
+      state
+    ) as Array<{ event: string; data: { item?: NamespaceIdentity } }>;
+
+    const added = events.find((e) => e.event === "response.output_item.added")?.data.item;
+    assert.ok(added, "expected response.output_item.added");
+    assert.deepEqual(
+      { name: added.name, namespace: added.namespace },
+      { name: "exec", namespace: "functions" }
+    );
+  });
+}
Author	SHA1	Message	Date
VXNCXNX	2f7b47612b	fix(chat): reduce combined file size Co-authored-by: diegosouzapw <8016841+diegosouzapw@users.noreply.github.com>	2026-08-09 08:50:35 -03:00
VXNCXNX	1912736f75	fix(chat): reduce combined file size Co-authored-by: diegosouzapw <8016841+diegosouzapw@users.noreply.github.com>	2026-08-09 08:44:41 -03:00
VXNCXNX	d8bb6c34f5	fix(chat): reduce file size Co-authored-by: diegosouzapw <8016841+diegosouzapw@users.noreply.github.com>	2026-08-09 08:34:19 -03:00
VXNCXNX	54840a0675	fix(translator): keep Responses namespace identity across the hub-and-spoke pivot Step 1 of the pivot (openai-responses -> openai) flattens namespace sub-tools to a qualified wire name (#8295) and records the `{namespace, name}` pair on a non-enumerable `_toolNameMap`. Step 2 (openai -> target) returns a brand-new object, so the property was dropped for every non-OpenAI target. chatCore then handed `null` to the #7936 response seam and namespace sub-tool calls reached the client under their flattened name, which Codex rejects with `unsupported call: <name>` — the symptom #7936 was opened to fix. Copying `_toolNameMap` through is not viable: openai-to-claude and openai-to-gemini publish their own `Map<string, string>` alias map on that same property during step 2, so it carries two incompatible types. This adds a dedicated `_namespaceToolIdentityMap`, propagated by translateRequest across the pivot; chatCore prefers it and falls back to `_toolNameMap` for the non-pivot producers. Both keys are stripped from the cliproxyapi wire body. Fixes #9780	2026-08-09 02:22:50 -03:00
diegosouzapw	bb6b138660	fix(repo): harden .gitignore to also ignore a _tasks symlink (/_tasks) _tasks is a SEPARATE nested git repo (gitignored). The pattern _tasks/ (trailing slash) ignores only a directory, not a SYMLINK named _tasks. A self-referential _tasks symlink can slip in via git add -A and, once pulled, checkout materializes it over the real _tasks repo (destroying plans/specs/hands-off). Anchored /_tasks ignores the symlink too, preventing re-capture.	2026-08-09 02:22:50 -03:00
diegosouzapw	298c50d4e6	fix(deps): bump nanoid, dompurify for 2 new Dependabot alerts (#189 , #190 ) Bumps: nanoid ^3.3.17 (was transitive, now overridden), dompurify ^3.4.13 (with monaco-editor scoped override). Closes Dependabot #189, #190. Remaining #182-#188 (js-yaml + mermaid) already closed by #9651 merge — awaiting Dependabot re-scan. npm audit → 0 vulnerabilities.	2026-08-09 02:22:49 -03:00
diegosouzapw	87c12d066f	fix(deps): bump transitive deps for 6 Dependabot + remaining audit vulns on main Same overrides as #9464 (ip-address, hono, fast-uri, socket.io-parser, undici) applied directly to main. Also covers brace-expansion (scoped), js-yaml v4 copies, and mermaid. npm audit: 6→0 vulnerabilities. Closes Dependabot #161-#166.	2026-08-09 02:22:49 -03:00