chore(build): allow httpClientAbortGuard.mjs through the prepublish prune

#13636 added installProcessCrashGuard to scripts/dev/standalone-server-ws.mjs, but httpClientAbortGuard.mjs went into neither APP_STAGING_ALLOWED_EXACT_PATHS nor PACK_ARTIFACT_REQUIRED_PATHS — so the prune would delete it from the published tarball and every boot of that build would die with ERR_MODULE_NOT_FOUND (4th occurrence of the #7065 class). pack-artifact-server-ws-closure on the pure tip: 2 fail. After: 3/3 pass. Refs #12732
Merge remote-tracking branch 'origin/release/v3.8.51' into fix/release-v3.8.51-agent-skills-sync
2026-09-22 06:42:19 +03:00 · 2026-09-16 04:07:14 -03:00 · 2026-09-16 04:04:07 -03:00 · 2026-09-16 03:51:20 -03:00 · 2026-09-16 00:04:23 -03:00 · 2026-09-15 23:44:35 -03:00
6 changed files with 18 additions and 0 deletions
--- a/changelog.d/maintenance/12732-agent-skills-sync-omni-settings.md
+++ b/changelog.d/maintenance/12732-agent-skills-sync-omni-settings.md
@@ -0,0 +1 @@
+- **chore(skills):** regenerate the `omni-settings` agent skill after the pool egress-observation route landed (#13581), clearing the `check:agent-skills-sync` base-red (#12732)
--- a/changelog.d/maintenance/12732-pack-artifact-abort-guard.md
+++ b/changelog.d/maintenance/12732-pack-artifact-abort-guard.md
@@ -0,0 +1 @@
+- **chore(build):** ship `httpClientAbortGuard.mjs` in the published tarball — the #13636 crash guard was a new `server-ws.mjs` import missing from both pack-artifact allowlists (#12732)
--- a/changelog.d/maintenance/12732-stryker-provider-401-ambiguous.md
+++ b/changelog.d/maintenance/12732-stryker-provider-401-ambiguous.md
@@ -0,0 +1 @@
+- **chore(ci):** register the #13609 ambiguous-401 regression test in the mutation-coverage config, clearing the second `check:agent-skills-sync`/`mutation-test-coverage` base-red (#12732)
--- a/scripts/build/pack-artifact-policy.ts
+++ b/scripts/build/pack-artifact-policy.ts
@@ -53,6 +53,8 @@ export const APP_STAGING_ALLOWED_EXACT_PATHS: string[] = [
  // server-ws.mjs import (sd_notify helper) — enforced by the closure test
  // tests/unit/pack-artifact-server-ws-closure.test.ts.
  "systemd-notify.mjs",
+  // server-ws.mjs import (process crash guard, #13636) — same closure test.
+  "httpClientAbortGuard.mjs",
  "responses-ws-proxy.mjs",
  "bin/chatgpt-web-codex-mcp.mjs",
  "scripts/dev/sync-env.mjs",
@@ -199,6 +201,7 @@ export const PACK_ARTIFACT_REQUIRED_PATHS: string[] = [
  "dist/main-server-timeouts.mjs",
  // server-ws.mjs import (sd_notify helper) — enforced by the closure test.
  "dist/systemd-notify.mjs",
+  "dist/httpClientAbortGuard.mjs",
  "dist/http-method-guard.cjs",
  // #5452: regression guard — make check:pack-artifact fail loudly if the TLS
  // opt-in sidecar (imported by dist/server-ws.mjs) ever vanishes from the tarball.
--- a/skills/omni-settings/SKILL.md
+++ b/skills/omni-settings/SKILL.md
@@ -1150,6 +1150,17 @@ curl -X DELETE https://localhost:20128/api/settings/proxies/pool \
  -H "Authorization: Bearer $OMNIROUTE_TOKEN"
 ```

+### GET /api/settings/proxies/pool/egress-observation
+
+GET settings › proxies › pool › egress observation
+
+Read-only observation of how many distinct egress IPs actually served the members of a proxy pool over the last 24 h, read from the proxy log (numbers only, never used for routing). Opt-in through the PROXY_POOL_EGRESS_OBSERVATION feature flag: while it is off, or when the read fails, the body is JSON null. Results are cached for 30 seconds per normalized scope (key is read as account, global as the stored global pool).
+
+```bash
+curl https://localhost:20128/api/settings/proxies/pool/egress-observation \
+  -H "Authorization: Bearer $OMNIROUTE_TOKEN"
+```
+
 ### POST /api/settings/proxy/cloudflare-deploy

 POST settings › proxy › cloudflare deploy
--- a/stryker.conf.json
+++ b/stryker.conf.json
@@ -316,6 +316,7 @@
      "tests/unit/no-memory-header.test.ts",
      "tests/unit/noauth-autocombo-lockout-7623.test.ts",
      "tests/unit/noauth-model-lockout.test.ts",
+      "tests/unit/provider-401-ambiguous-runtime.test.ts",
      "tests/unit/ollama-404-model-lockout-11071.test.ts",
      "tests/unit/non-streaming-client-translate.test.ts",
      "tests/unit/non-streaming-provider-leg.test.ts",
Author	SHA1	Message	Date
diegosouzapw	15bedb5478	chore(build): allow httpClientAbortGuard.mjs through the prepublish prune #13636 added installProcessCrashGuard to scripts/dev/standalone-server-ws.mjs, but httpClientAbortGuard.mjs went into neither APP_STAGING_ALLOWED_EXACT_PATHS nor PACK_ARTIFACT_REQUIRED_PATHS — so the prune would delete it from the published tarball and every boot of that build would die with ERR_MODULE_NOT_FOUND (4th occurrence of the #7065 class). pack-artifact-server-ws-closure on the pure tip: 2 fail. After: 3/3 pass. Refs #12732	2026-09-16 04:07:14 -03:00
diegosouzapw	f52cfbc564	Merge remote-tracking branch 'origin/release/v3.8.51' into fix/release-v3.8.51-agent-skills-sync	2026-09-16 04:04:07 -03:00
diegosouzapw	4e29587e8b	chore: retrigger CI (the lint job sat unassigned with a free runner)	2026-09-16 03:51:20 -03:00
diegosouzapw	26d8f3b022	chore(ci): register the ambiguous-401 test in stryker tap.testFiles check:mutation-test-coverage --strict fails on the pure release tip: tests/unit/provider-401-ambiguous-runtime.test.ts (from #13609) covers open-sse/services/accountFallback.ts and src/sse/services/auth.ts but was never added to stryker.conf.json, so its mutant kills do not count. Gate before: 2 covering tests across 2 modules missing. After: no drift. Refs #12732	2026-09-16 00:04:23 -03:00
diegosouzapw	c9342f74f6	chore(skills): regenerate omni-settings after the pool egress-observation route The generated skill catalog went stale when #13581 added GET /api/settings/proxies/pool/egress-observation: check:agent-skills-sync (the Merge integrity job) fails on the pure release tip and on every PR cut from it. Regenerated with scripts/skills/generate-agent-skills.mjs --apply; the only change is the new route's generated section. Refs #12732	2026-09-15 23:44:35 -03:00
				`@@ -0,0 +1 @@`
				- chore(skills): regenerate the `omni-settings` agent skill after the pool egress-observation route landed (#13581), clearing the `check:agent-skills-sync` base-red (#12732)
				`@@ -0,0 +1 @@`
				- chore(build): ship `httpClientAbortGuard.mjs` in the published tarball — the #13636 crash guard was a new `server-ws.mjs` import missing from both pack-artifact allowlists (#12732)
				`@@ -0,0 +1 @@`
				- chore(ci): register the #13609 ambiguous-401 regression test in the mutation-coverage config, clearing the second `check:agent-skills-sync`/`mutation-test-coverage` base-red (#12732)