Commit Graph

  • bc1ef8dd96 fix(ws): proxy LAN /live-ws upgrades and add unset JWT_SECRET warning (#4079) Rahul sharma 2026-06-17 23:28:33 +05:30
  • fe7576cee5 fix(security): injection guard respects INJECTION_GUARD_MODE DB feature flag (#4077) Felipe Almeman 2026-06-17 14:58:27 -03:00
  • 12664b1df1 fix(sse): route image requests only to confirmed-vision combo targets (#4071) diego-anselmo 2026-06-17 14:58:21 -03:00
  • b2e54618f7 feat(mitm): attribute intercepted requests to originating process (Gap 1) (#4085) Diego Rodrigues de Sa e Souza 2026-06-17 14:57:45 -03:00
  • 5ea160140f fix(mitm): crash-safe system-state teardown + socket timeouts (ProxyBridge-inspired hardening) (#4084) Diego Rodrigues de Sa e Souza 2026-06-17 14:57:40 -03:00
  • 4ba27c17da feat(mitm): capture-pipeline self-test route (Gap 12) (#4093) Diego Rodrigues de Sa e Souza 2026-06-17 14:57:20 -03:00
  • a7ff81bb95 feat(dashboard): 2026-06-17 free-tier refresh — honest catalog, uncapped + boost tiers, Layout A budget table (#4089) Diego Rodrigues de Sa e Souza 2026-06-17 14:57:17 -03:00
  • 3c613d16c6 feat(compression): RTK learn/discover (sample source + API + UI) (#4088) Diego Rodrigues de Sa e Souza 2026-06-17 14:57:13 -03:00
  • 5af49039da feat(api): exact offline token counting for count_tokens fallback via tiktoken (#4087) Diego Rodrigues de Sa e Souza 2026-06-17 14:57:10 -03:00
  • ecf0089ee9 feat(sse): port Claude Code quota-probe bypass + command meta-request helpers (#4083) Diego Rodrigues de Sa e Souza 2026-06-17 14:57:07 -03:00
  • 40f811eb7b fix(sse): friendly 413 message for ChatGPT web payload-too-large (#4080) Diego Rodrigues de Sa e Souza 2026-06-17 14:57:03 -03:00
  • df2e6ff410 test(dashboard): smoke e2e for the Combo Live Studio page (#4075) Diego Rodrigues de Sa e Souza 2026-06-17 14:57:00 -03:00
  • c5002fc426 docs(quality-gates): reconcile gate inventory with ci.yml + add ROI rationalization backlog (#4095) Diego Rodrigues de Sa e Souza 2026-06-17 14:39:38 -03:00
  • 240f466f54 test(infra): isolate DATA_DIR per test process; raise Stryker concurrency 1→4 (#4078) Diego Rodrigues de Sa e Souza 2026-06-17 13:46:28 -03:00
  • 081bf30bbd feat(providers): add OrcaRouter (OpenAI-compatible routing gateway) (#4070) jinhaosong-source 2026-06-18 00:02:20 +08:00
  • 7e88b311c8 feat(sse): Context Editing relay coverage + 400-fallback (#4065) Diego Rodrigues de Sa e Souza 2026-06-17 11:52:27 -03:00
  • de62197a7c feat(compression): record Context Editing telemetry (engine: context-editing) (#4062) Diego Rodrigues de Sa e Souza 2026-06-17 11:42:18 -03:00
  • 911567758d feat(dashboard): Combo Studio connection-cooldown badge (U1b Slice 2) (#4068) Diego Rodrigues de Sa e Souza 2026-06-17 11:42:14 -03:00
  • 9a77456890 docs(compression): document LLMLingua optional deps + on-demand install (#4061) Diego Rodrigues de Sa e Souza 2026-06-17 11:42:09 -03:00
  • a17ccaf86c ci(quality): flip TIA impacted-unit-tests gate from advisory to blocking (#4069) Diego Rodrigues de Sa e Souza 2026-06-17 10:36:26 -03:00
  • 52001d2ea5 chore(deps): freeze @huggingface/transformers in dependabot (hard-pin) (#4066) Diego Rodrigues de Sa e Souza 2026-06-17 10:04:55 -03:00
  • a509e7b479 chore(docs): update Discord invite link to a non-expiring one (#4067) Diego Rodrigues de Sa e Souza 2026-06-17 09:58:17 -03:00
  • 11f0199ba1 fix(auto): resolve built-in auto catalog combos (#4058) Demiurge The Single 2026-06-17 15:53:50 +03:00
  • 3d3ad84d4f deps: bump electron from 42.4.0 to 42.4.1 in /electron (#4049) dependabot[bot] 2026-06-17 09:48:36 -03:00
  • 0bf2fcbbf4 chore(deps): bump ossf/scorecard-action from 2.4.0 to 2.4.3 (#4045) dependabot[bot] 2026-06-17 09:48:32 -03:00
  • 3cb8fe8579 fix(ws): start LiveWS sidecar with cwd at package root (#4055) (#4064) Diego Rodrigues de Sa e Souza 2026-06-17 09:39:12 -03:00
  • 13c4316c16 fix(ws): warm SSE auth import on LiveWS startup; relocate boot test to integration (#4063) Diego Rodrigues de Sa e Souza 2026-06-17 09:32:21 -03:00
  • e6675cccaf chore(release): open v3.8.28 development cycle diegosouzapw 2026-06-17 05:16:03 -03:00
  • 8842414d8a fix(docker): build release image with webpack (Turbopack internal panic) (#4052) v3.8.27 Diego Rodrigues de Sa e Souza 2026-06-17 04:46:25 -03:00
  • fa367dd99e Release v3.8.27 (#3968) Diego Rodrigues de Sa e Souza 2026-06-17 02:43:21 -03:00
  • 5272435a9a fix(quality): unblock v3.8.27 release — align 3 stale tests + restore modularized settings-schema parity release/v3.8.27 diegosouzapw 2026-06-17 02:12:39 -03:00
  • 415e34bb70 test(quality): reword test-masking self-test comments to avoid literal masking patterns diegosouzapw 2026-06-17 00:48:08 -03:00
  • b30000607b ci(quality): unblock v3.8.27 release gates (zizmor pin + test-masking allowlist) diegosouzapw 2026-06-17 00:42:20 -03:00
  • 9b788967cb chore(release): reconcile v3.8.27 CHANGELOG + i18n mirrors diegosouzapw 2026-06-17 00:14:31 -03:00
  • 58d317d223 [codex] add per-key local usage command (#4034) Witroch4 2026-06-17 00:07:12 -03:00
  • 3410beb7f5 Refine compression settings, storage labels, and sidebar grouping (#4033) Randi 2026-06-16 22:43:09 -04:00
  • 618c95bbf9 fix(ci): scope TIA to node:test unit files only (mirror test:unit glob) (#4035) Diego Rodrigues de Sa e Souza 2026-06-16 23:42:47 -03:00
  • e1345044cd chore(deps): dependabot security bumps + drop unused gray-matter (#4036) Diego Rodrigues de Sa e Souza 2026-06-16 23:42:44 -03:00
  • e2681536fa Fix promptfoo security assertion parsing (#4032) Randi 2026-06-16 18:28:19 -04:00
  • 7ef71aad3c feat(dashboard): real circuit-breaker state in the Combo Live cascade (U1b) (#4029) Diego Rodrigues de Sa e Souza 2026-06-16 19:22:15 -03:00
  • b2479d8d2a fix(api): return 400 (not 500) for malformed JSON on /api/auth/login (#4031) Randi 2026-06-16 18:21:27 -04:00
  • dd374df312 fix: restore unit regressions dropped by lossy schema/registry modularizations (#4030) Diego Rodrigues de Sa e Souza 2026-06-16 19:06:31 -03:00
  • 6f4914f7d6 refactor(dashboard): settings UI layout + API Keys naming (#4020) Randi 2026-06-16 17:53:23 -04:00
  • e68cd47470 fix(dashboard): Playground Compare tab loading + HTTP method guard (#4024) Randi 2026-06-16 17:46:09 -04:00
  • ad067a193e fix(opencode): map x-session-affinity to x-opencode-session for custom providers (#4022) (#4028) Diego Rodrigues de Sa e Souza 2026-06-16 18:37:25 -03:00
  • e096a4c937 feat(sse): delegated Anthropic Context Editing for Claude (clear_tool_uses) (#4021) Diego Rodrigues de Sa e Souza 2026-06-16 18:32:12 -03:00
  • 918630bfd8 feat(api): advertise combo capabilities on import surfaces (#3979) (#4027) Diego Rodrigues de Sa e Souza 2026-06-16 18:10:47 -03:00
  • 86585c48c6 fix(guardrails): preserve original image when vision-bridge describe fails (#4012) (#4026) Diego Rodrigues de Sa e Souza 2026-06-16 18:03:32 -03:00
  • 94727b928b fix(sse): preserve Kiro streaming finish_reason tool_calls (#3980) (#4025) Diego Rodrigues de Sa e Souza 2026-06-16 17:58:13 -03:00
  • 65f9ce7edf feat(ci): Quality Gate v2 — Onda 0 + Onda 1 (gate flips, TIA, SAST, DAST-smoke, mutation infra) (#4016) Diego Rodrigues de Sa e Souza 2026-06-16 17:27:36 -03:00
  • 599c10b048 fix(sse): guard model-less registry entries in getUnsupportedParams (mimocode) (#4015) Diego Rodrigues de Sa e Souza 2026-06-16 16:36:42 -03:00
  • 33493586b4 feat(compression): capture per-engine analytics (#3960) + Lite schema fix (#3952) (#4018) Diego Rodrigues de Sa e Souza 2026-06-16 16:31:04 -03:00
  • 6878d880f0 test(dashboard): rehome #3972 logs auto-refresh test so a runner collects it diegosouzapw 2026-06-16 16:08:49 -03:00
  • d691f11230 feat(sse): real LLMLingua-2 ONNX compression engine (stable) (#4014) Diego Rodrigues de Sa e Souza 2026-06-16 16:06:18 -03:00
  • d7db5c73d1 fix(quality): allowlist socks dep (declared by #4004, never allowlisted) diegosouzapw 2026-06-16 16:00:03 -03:00
  • 0262af6f07 fix(repo): untrack accidentally-committed root node_modules symlink + gitignore it diegosouzapw 2026-06-16 13:32:00 -03:00
  • 6523f628de docs(troubleshooting): note MITM proxy cannot intercept Windows-host apps under WSL (#4003) Diego Rodrigues de Sa e Souza 2026-06-16 13:15:47 -03:00
  • 02302131fb fix(live-ws): bridge sidecar events to dashboard (#4004) Demiurge The Single 2026-06-16 19:15:25 +03:00
  • 0bc670e414 feat(openai): honor custom base URL in model discovery + complete openai/codex pricing (#4005) NOXX - Commiter 2026-06-16 19:08:37 +03:00
  • e3ec10bc2a fix(default-executor): honor custom providerSpecificData.baseUrl for OpenAI-format providers (#4002) NOXX - Commiter 2026-06-16 19:06:38 +03:00
  • 05213ac6a2 refactor: modularize schemas (non-stacked) (#3988) Paijo 2026-06-16 21:18:40 +07:00
  • 670d54c704 fix(registry): restore byteplus + mimocode dropped by #3993 modularization diegosouzapw 2026-06-16 11:08:08 -03:00
  • 1ed01dd906 refactor: modularize providerRegistry.ts into 159 individual provider plugins (#3993) Paijo 2026-06-16 20:54:33 +07:00
  • 9cd9ae511e fix(perplexity-web): parse schematized diff_block stream so answers aren't empty (#4001) NOXX - Commiter 2026-06-16 16:42:38 +03:00
  • 6b8a122e8f chore(deps): ignore jscpd major bumps (v5 Rust rewrite breaks the duplication gate) diegosouzapw 2026-06-16 10:40:24 -03:00
  • d35f29e959 deps: bump the production group with 13 updates (#3915) dependabot[bot] 2026-06-16 10:39:39 -03:00
  • 6dee601e41 chore(quality): re-baseline validation.ts 4407->4428 (#3958 qwen body-check) diegosouzapw 2026-06-16 10:00:56 -03:00
  • bbc57196b9 deps: bump vite from 8.0.5 to 8.0.16 (#3942) dependabot[bot] 2026-06-16 09:58:45 -03:00
  • 93e1a707d4 deps: bump form-data from 4.0.5 to 4.0.6 (#3944) dependabot[bot] 2026-06-16 09:58:10 -03:00
  • 077f826156 deps: bump the npm_and_yarn group across 1 directory with 2 updates (#3943) dependabot[bot] 2026-06-16 09:57:57 -03:00
  • bba97cfc60 大量UI显示和i18n优化 (#3973) Randi 2026-06-16 08:57:21 -04:00
  • 09278297ae fix(db): persist backup retention days (#3970) Randi 2026-06-16 08:49:04 -04:00
  • f785521832 fix(qwen-web): cookie validation false-positive - check response body for user object (#3958) thezukiru 2026-06-16 19:47:53 +07:00
  • 3ad2649d62 fix(executor): strip stream_options on non-streaming requests (#3884) (#4000) Diego Rodrigues de Sa e Souza 2026-06-16 09:47:24 -03:00
  • 2d498c28ae fix(vision-bridge): force bridge for tokenrouter deepseek models (#3946) WormAlien 2026-06-16 15:46:02 +03:00
  • 5714640546 feat(providers): add model search filter to provider dashboard (#3950) Felipe Sartori 2026-06-16 09:44:39 -03:00
  • 23c03b07c7 fix(claude): forward client tool-search-tool anthropic-beta on the Claude OAuth path (#3974) (#3999) Diego Rodrigues de Sa e Souza 2026-06-16 09:44:05 -03:00
  • 18aa874a4f Add provider auth visibility controls (#3953) Randi 2026-06-16 08:43:11 -04:00
  • ef64392e06 fix(combo): shuffle strict-random fallback remainder to spread load (#3959) (#3998) Diego Rodrigues de Sa e Souza 2026-06-16 09:38:31 -03:00
  • 57bbd8b9f3 feat(compression): add Indonesian caveman rules and language pack (#3975) Veier04 2026-06-16 19:12:35 +07:00
  • bb40fbba09 fix(dashboard): logs auto-refresh reads live visibility, not a stale mount ref (#3972) (#3997) Diego Rodrigues de Sa e Souza 2026-06-16 09:32:19 -03:00
  • 074f6188de fix(providers): fetch live /models for LLM7 and BytePlus (#3976) (#3996) Diego Rodrigues de Sa e Souza 2026-06-16 09:24:40 -03:00
  • 314b6f1870 fix(resilience): respect connection cooldown stored as numeric epoch (#3954) (#3995) Diego Rodrigues de Sa e Souza 2026-06-16 09:20:28 -03:00
  • 73205a2427 ci(quality): flip require-tighten + osv + Trivy to blocking (v3.8.27 cycle-end) (#3984) Diego Rodrigues de Sa e Souza 2026-06-16 09:13:38 -03:00
  • c9b5b1a892 feat(compression): add Indonesian caveman rules and language pack (#3975) Veier04 2026-06-16 19:12:35 +07:00
  • 2c193636c8 Capture actual upstream provider requests (#3941) Randi 2026-06-16 08:12:31 -04:00
  • ac0b7add27 Gate control-plane proxy direct fallback (#3963) Randi 2026-06-16 08:12:28 -04:00
  • b05aea5355 feat: add sidebar group separator toggles (#3971) Randi 2026-06-16 08:12:24 -04:00
  • 7737bfea77 Refine provider quota card display (#3969) Randi 2026-06-16 08:12:21 -04:00
  • 7509a32e9d fix(security): polynomial ReDoS in comboAgentMiddleware regex → main (#3983) Diego Rodrigues de Sa e Souza 2026-06-16 08:46:03 -03:00
  • b004b2950a ci(security): harden workflows — artipacked persist-credentials + cache-poisoning + SC2086 (#3965) Diego Rodrigues de Sa e Souza 2026-06-16 08:44:38 -03:00
  • a9d73bcbfb fix(security): polynomial ReDoS in comboAgentMiddleware regex (#3982) Diego Rodrigues de Sa e Souza 2026-06-16 08:42:58 -03:00
  • cf5d64a89d chore(release): open v3.8.27 development cycle diegosouzapw 2026-06-16 03:16:03 -03:00
  • ca1e17f740 test(opencode-plugin): ESM default-export test (#3967) Diego Rodrigues de Sa e Souza 2026-06-16 02:50:40 -03:00
  • d59cd14391 fix(ci): electron-release publish-npm contents:write (#3966) Diego Rodrigues de Sa e Souza 2026-06-16 02:38:06 -03:00
  • 4d21044ba5 fix(release): post-merge quality gates to main for v3.8.26 (#3964) v3.8.26 Diego Rodrigues de Sa e Souza 2026-06-16 02:33:19 -03:00
  • 3e14d1c438 chore(quality): re-baseline eslintWarnings 3760->3769 (v3.8.26 cycle drift) (#3962) release/v3.8.26 Diego Rodrigues de Sa e Souza 2026-06-16 01:52:29 -03:00
  • 273ecf7b5f ci(quality): flip secret/workflow/bundle scanners to ratchet-blocking (Etapa 2) (#3961) Diego Rodrigues de Sa e Souza 2026-06-16 01:39:14 -03:00
  • 81a37b67ed Release v3.8.26 (#3875) Diego Rodrigues de Sa e Souza 2026-06-16 01:00:40 -03:00
  • b1212d1bb4 Merge remote-tracking branch 'origin/main' into release/v3.8.26 diegosouzapw 2026-06-16 00:58:46 -03:00