SHANMUGAPRIYAN 1b2c6f4c36 fix(guardrails): restore injection-guard logging on middleware-only routes (#12117) ...

Restaura o log do injection-guard nas 13 rotas não-chat (embeddings, images, audio, moderations, etc.) — a correção de log duplicado anterior (#11936) silenciou completamente o único emissor de log dessas rotas, deixando tentativas de injeção sem rastro nenhum em modo warn, e sem log mesmo quando bloqueadas em modo block. Achado de segurança real (Finding 2 do #12113). Teste próprio (141 linhas). Validado no worktree combinado. Obrigado!

2026-08-30 11:11:12 -03:00

..

[...omnirouteApiCatchAll]

Release v3.8.46

2026-07-07 13:14:06 -03:00

a2a

fix(security): close round-3 advisories (v7g9, x7vm, j7j4, jcm5) + exposure warning (wmgv) (#11261)

2026-08-23 20:32:42 -03:00

acp/agents

feat(cli): add native Bun backend support and Dockerfile.bun (#11039)

2026-08-21 21:28:43 -03:00

admin/concurrency

feat(cli): add native Bun backend support and Dockerfile.bun (#11039)

2026-08-21 21:28:43 -03:00

agent-skills

feat(agent-skills): add POST /generate with management auth + dryRun default

2026-05-27 21:49:21 -03:00

analytics

feat(cli): add native Bun backend support and Dockerfile.bun (#11039)

2026-08-21 21:28:43 -03:00

assess

Release v3.8.47 (#6569)

2026-07-13 09:12:40 -03:00

auth

fix(barrel): migrate src/app/ off the @/lib/localDb barrel import (#11795 Phase 2) (#12051)

2026-08-30 02:26:55 -03:00

batches

fix(barrel): migrate src/app/ off the @/lib/localDb barrel import (#11795 Phase 2) (#12051)

2026-08-30 02:26:55 -03:00

cache

fix(barrel): migrate src/app/ off the @/lib/localDb barrel import (#11795 Phase 2) (#12051)

2026-08-30 02:26:55 -03:00

chaos

Release v3.8.47 (#6569)

2026-07-13 09:12:40 -03:00

cli

fix(barrel): migrate src/app/ off the @/lib/localDb barrel import (#11795 Phase 2) (#12051)

2026-08-30 02:26:55 -03:00

cli-tools

fix(barrel): migrate src/app/ off the @/lib/localDb barrel import (#11795 Phase 2) (#12051)

2026-08-30 02:26:55 -03:00

cloud

Release v3.8.45 (#6202)

2026-07-06 02:25:17 -03:00

codex/connect/[token]

Feat/codex device flow (#3195)

2026-06-05 12:06:35 -03:00

combos

fix(barrel): migrate src/app/ off the @/lib/localDb barrel import (#11795 Phase 2) (#12051)

2026-08-30 02:26:55 -03:00

compliance/audit-log

feat(compliance): support level=high filter in audit-log API (B/F4)

2026-05-27 22:00:56 -03:00

compression

Release v3.8.49 (#7076)

2026-07-29 15:18:55 -03:00

conductor

feat(dashboard): Faro chat with push-to-talk voice on the Conductor panel (PRD RF4) (#8222)

2026-08-12 02:00:20 -03:00

context

Release v3.8.49 (#7076)

2026-07-29 15:18:55 -03:00

conversations

feat(dashboard): agentic conversation tracking — v4, decoupled + storage-architecture concern resolved (#10263)

2026-08-18 11:32:33 -03:00

copilot/chat

Release v3.8.4 (#2678)

2026-05-26 23:51:47 -03:00

cursor-cli/[...path]

feat(providers): Cursor API provider (crsr_ keys) and Cursor CLI passthrough (#10729)

2026-08-20 06:29:11 -03:00

dahl/tokens

Release v3.8.49 (#7076)

2026-07-29 15:18:55 -03:00

db/health

Release v3.8.47 (#6569)

2026-07-13 09:12:40 -03:00

db-backups

fix(barrel): migrate src/app/ off the @/lib/localDb barrel import (#11795 Phase 2) (#12051)

2026-08-30 02:26:55 -03:00

discovery

Release v3.8.44 (#5925)

2026-07-04 13:00:30 -03:00

docs

Release v3.8.35 (#4743)

2026-06-23 17:06:18 -03:00

evals

fix(barrel): migrate src/app/ off the @/lib/localDb barrel import (#11795 Phase 2) (#12051)

2026-08-30 02:26:55 -03:00

fallback/chains

fix: extract validation helpers to fix webpack barrel-file resolution bug

2026-03-05 08:05:58 -03:00

files

fix(barrel): migrate src/app/ off the @/lib/localDb barrel import (#11795 Phase 2) (#12051)

2026-08-30 02:26:55 -03:00

free-models

feat(plugin+api): auto combos + free model quota display + /api/combos/auto (#3435)

2026-06-08 19:08:17 -03:00

free-provider-rankings

feat(rankings): report what a free provider actually served (#10926)

2026-08-21 08:25:23 -03:00

free-tier/summary

fix(free-tier): serve the Radar overlay from /api/free-tier/summary (#11550)

2026-08-25 19:49:00 -03:00

gamification

fix(gamification): validate leaderboard limit/offset before the SQLite bind (#11059)

2026-08-21 20:59:57 -03:00

github-skills

Release v3.8.47 (#6569)

2026-07-13 09:12:40 -03:00

guardrails

fix(guardrails): use validateBody() in /api/guardrails/test route (#3621)

2026-06-11 05:06:58 -03:00

headroom

Release v3.8.49 (#7076)

2026-07-29 15:18:55 -03:00

health

feat(api): answer GET /api/health without a key (#10771)

2026-08-20 06:29:45 -03:00

init

feat(auth): enforce dashboard sessions for management routes

2026-04-17 16:45:27 -03:00

intelligence/sync

Release v3.8.23

2026-06-12 23:49:22 -03:00

internal/codex-responses-ws

feat(compression): adota omniglyph 1.4.0, perfis semânticos e contabilidade com evidência (#10647)

2026-08-18 12:13:48 -03:00

issue-agent/runs

Release v3.8.49 (#7076)

2026-07-29 15:18:55 -03:00

jobs

maint: follow-up cherry-pick fix-in-place #9631 (conflict-resolved fallback) (#9886)

2026-08-09 09:54:47 -03:00

keys

fix(lease): remove global static reservation and gate routing on live active lease occupancy (#11775)

2026-08-30 09:21:53 -03:00

local/redis

feat(redis): add configurable key namespace prefix (#11042)

2026-08-22 18:56:45 -03:00

log-export

feat(dashboard): continuous call-log export to pluggable destinations (BigQuery first) (#11945)

2026-08-30 09:16:52 -03:00

logs

feat(dashboard): agentic conversation tracking — v4, decoupled + storage-architecture concern resolved (#10263)

2026-08-18 11:32:33 -03:00

mcp

fix(mcp): honor the mcp:connect carve-out in transport route guards (#11139)

2026-08-23 02:18:06 -03:00

memory

fix(memory): honor category filter in GET /api/memory (#11699)

2026-08-30 04:12:08 -03:00

middleware/hooks

fix(barrel): migrate src/app/ off the @/lib/localDb barrel import (#11795 Phase 2) (#12051)

2026-08-30 02:26:55 -03:00

modality-bridge

feat(video): orchestrate Audio Bridge STT with one-download budgets (FU-06, #11654) (#12012)

2026-08-29 19:34:57 -03:00

model-capability-overrides

fix(catalog): scope combo reasoning efforts by connection (#10723)

2026-08-20 09:31:12 -03:00

model-combo-mappings

fix(barrel): migrate src/app/ off the @/lib/localDb barrel import (#11795 Phase 2) (#12051)

2026-08-30 02:26:55 -03:00

models

fix(barrel): migrate src/app/ off the @/lib/localDb barrel import (#11795 Phase 2) (#12051)

2026-08-30 02:26:55 -03:00

monitoring/health

fix(barrel): migrate src/app/ off the @/lib/localDb barrel import (#11795 Phase 2) (#12051)

2026-08-30 02:26:55 -03:00

network/info

Release v3.8.49 (#7076)

2026-07-29 15:18:55 -03:00

oauth

chore(providers): retire GPL-derived Raycast and Hailuo integrations (#11691)

2026-08-28 05:16:59 -03:00

omniroute

feat(api): add provider quota telemetry, adaptive routing, and status inventory (#10148)

2026-08-18 11:31:53 -03:00

openapi

Release v3.8.35 (#4743)

2026-06-23 17:06:18 -03:00

playground

port(playground): specific step warnings from #11882, keep #11862's string-step handling (#11930)

2026-08-28 15:51:37 -03:00

plugins

fix(api): validate request bodies with Zod in 4 routes — restores the t06 gate (#9779)

2026-08-08 10:35:18 -03:00

policies

refactor: unify resilience controls (#1449)

2026-04-21 04:13:28 -03:00

pricing

fix(barrel): migrate src/app/ off the @/lib/localDb barrel import (#11795 Phase 2) (#12051)

2026-08-30 02:26:55 -03:00

provider-metrics

Release v3.8.49 (#7076)

2026-07-29 15:18:55 -03:00

provider-models

fix(barrel): migrate src/app/ off the @/lib/localDb barrel import (#11795 Phase 2) (#12051)

2026-08-30 02:26:55 -03:00

provider-nodes

fix(providers): make model Check/Test honor the node apiType, and show upstream model names (#9099)

2026-08-05 21:43:24 -03:00

provider-stats

Release v3.8.10 (#3140)

2026-06-04 20:05:38 -03:00

providers

fix(providers): use v1beta1 Model Garden publisher list for Vertex Anthropic discovery (#11998)

2026-08-30 11:09:22 -03:00

proxy-fallback/test

Release v3.8.49 (#7076)

2026-07-29 15:18:55 -03:00

quota

fix(barrel): migrate src/app/ off the @/lib/localDb barrel import (#11795 Phase 2) (#12051)

2026-08-30 02:26:55 -03:00

radar

fix(radar): keep the feed's build date in the catalog cache (#11435)

2026-08-24 19:57:24 -03:00

rate-limit

feat: OmniRoute v1.0.0 — Intelligent AI Gateway & Universal LLM Proxy

2026-02-18 00:02:15 -03:00

rate-limits

fix(barrel): migrate src/app/ off the @/lib/localDb barrel import (#11795 Phase 2) (#12051)

2026-08-30 02:26:55 -03:00

relay/tokens

Release v3.8.4 (#2678)

2026-05-26 23:51:47 -03:00

resilience

fix(barrel): migrate src/app/ off the @/lib/localDb barrel import (#11795 Phase 2) (#12051)

2026-08-30 02:26:55 -03:00

restart

fix(security): harden management API auth and openapi try proxy

2026-04-25 16:45:59 -03:00

routing/decisions/[requestId]

Release v3.8.4 (#2678)

2026-05-26 23:51:47 -03:00

search

feat(search): add fallback-only AnySearch provider (webSearch + webFetch) (#11690)

2026-08-26 17:54:57 -03:00

services

fix(services): separate CLIProxyAPI health and model auth (#11811)

2026-08-27 22:15:06 -03:00

session-pools

feat: add REST API for session pool health (dashboard interface) (#3404)

2026-06-08 01:25:38 -03:00

sessions

fix(sessions): preserve legacy data when exclusive projection fails (#11469)

2026-08-25 21:08:29 -03:00

settings

fix(barrel): migrate src/app/ off the @/lib/localDb barrel import (#11795 Phase 2) (#12051)

2026-08-30 02:26:55 -03:00

shutdown

fix(security): harden management API auth and openapi try proxy

2026-04-25 16:45:59 -03:00

skills

fix(barrel): migrate src/app/ off the @/lib/localDb barrel import (#11795 Phase 2) (#12051)

2026-08-30 02:26:55 -03:00

storage/health

Release v3.8.4 (#2678)

2026-05-26 23:51:47 -03:00

sync

fix(barrel): migrate src/app/ off the @/lib/localDb barrel import (#11795 Phase 2) (#12051)

2026-08-30 02:26:55 -03:00

synced-available-models

feat(dashboard): Gemini Available Models reads from API sync, hide Custom Models

2026-04-02 11:41:28 -06:00

system

fix(cli): update flow now says whether the running process needs a restart (#11885) (#12005)

2026-08-29 15:27:53 -03:00

tags

feat: Implement initial database schema and centralize CORS configuration across API routes.

2026-02-18 13:44:08 -03:00

telegram/update

fix(release): repair post-sweep base regressions

2026-08-09 15:16:55 -03:00

telemetry/summary

Release v3.8.4 (#2678)

2026-05-26 23:51:47 -03:00

token-health

fix(barrel): migrate src/app/ off the @/lib/localDb barrel import (#11795 Phase 2) (#12051)

2026-08-30 02:26:55 -03:00

tools

fix(barrel): migrate src/app/ off the @/lib/localDb barrel import (#11795 Phase 2) (#12051)

2026-08-30 02:26:55 -03:00

translator

fix(barrel): migrate src/app/ off the @/lib/localDb barrel import (#11795 Phase 2) (#12051)

2026-08-30 02:26:55 -03:00

tunnels

fix(api): clear the six API-route TypeScript regressions the new gate landed red on (#12094)

2026-08-30 04:48:54 -03:00

upstream-proxy/[providerId]

[v3.8.50] feat(services): add Dario as a 5th embedded service (Claude Code toggle/failover) (#8523)

2026-08-06 06:05:46 -03:00

usage

fix(barrel): migrate src/app/ off the @/lib/localDb barrel import (#11795 Phase 2) (#12051)

2026-08-30 02:26:55 -03:00

v1

fix(guardrails): restore injection-guard logging on middleware-only routes (#12117)

2026-08-30 11:11:12 -03:00

v1beta/models

fix(barrel): migrate src/app/ off the @/lib/localDb barrel import (#11795 Phase 2) (#12051)

2026-08-30 02:26:55 -03:00

version-manager

Release v3.8.42 (#5459)

2026-06-30 06:54:29 -03:00

vnc-session

Release v3.8.49 (#7076)

2026-07-29 15:18:55 -03:00

webhooks

fix(api): clear the six API-route TypeScript regressions the new gate landed red on (#12094)

2026-08-30 04:48:54 -03:00