Files
OmniRoute/tests/unit/responses-input-sanitizer-name.test.ts
Diego Rodrigues de Sa e Souza 68d5a0ab27 Release v3.8.10 (#3140)
* chore(release): open v3.8.10 development cycle

Bump 3.8.9 → 3.8.10 across package.json, lockfile, electron, open-sse, and
docs/reference/openapi.yaml; add the [3.8.10] CHANGELOG section (root + 41 i18n
mirrors) as the integration target for the cycle. Entries land here as work
merges into release/v3.8.10; finalized by the release flow.

* fix(providers): resolve web provider alias collisions

Assign unique aliases to HuggingChat, Kimi Web, and Qwen Web so they no longer shadow primary providers or trigger startup warnings.

Add a unit test to enforce provider alias uniqueness and prevent future collisions. Also expand local ignore and VS Code exclude rules for agent, build, and worktree artifacts.

* fix(responses): normalize image_url parts across input paths (#3150)

Normalize image_url parts across all Responses input paths. Integrated into release/v3.8.10.

* fix(api-manager): preserve API key expiration local time (#3146)

Preserve API key expiration local time + clear button. Integrated into release/v3.8.10.

* Strip previous_response_id for stateless Responses upstreams (#3143)

Strip previous_response_id for stateless Responses upstreams (auto/strip/preserve). Integrated into release/v3.8.10.

* fix(opencode-plugin): map thinking cap to interleaved in model+combo (#3138)

Map caps.thinking to ModelV2.capabilities.interleaved for opencode-plugin. Integrated into release/v3.8.10.

* fix(providers): use synced models as fallback for all providers (#3148)

Use synced models as authoritative local catalog for all providers (+regression test). Integrated into release/v3.8.10.

* fix(qoder): bifurcate validation by token type — PAT→Cosy, regular API key→dashscope (#3149)

Bifurcate Qoder validation by token type (PAT→Cosy, regular→dashscope) +regression test. Integrated into release/v3.8.10.

* fix(antigravity): dynamic model resolution via MITM alias table (#3144)

Dynamic antigravity MITM model resolution in the executor (+bug fix +regression test; DB import dropped from client-reachable config). Integrated into release/v3.8.10.

* Feature/batch allow big (#3128)

Podman deployment options + larger upload body-size limits (+CONTAINER_HOST docs). Integrated into release/v3.8.10.

* fix(fireworks): preserve fully-qualified router/model IDs (#3133) (#3160)

Fireworks router IDs (accounts/fireworks/routers/...) were double-prefixed
with accounts/fireworks/models/ → upstream 404. Add optional
acceptedModelIdPrefixes to the registry entry and skip the prepend when the
model already starts with an accepted prefix.

Co-authored-by: KooshaPari <KooshaPari@users.noreply.github.com>

* fix(llama-cpp): route to configured local baseUrl instead of OpenAI (#3136) (#3161)

llama-cpp was missing from the local-provider group in buildUrl(), so it
fell through to the OpenAI baseUrl and returned an OpenAI 401. Add the
case to resolve the connection's providerSpecificData.baseUrl.

Co-authored-by: tjengbudi <tjengbudi@users.noreply.github.com>

* fix(t3-chat-web): parse cookies + convexSessionId from stored credential (#3007) (#3162)

The executor read credentials.cookies/convexSessionId, but the pipeline
only stores the pasted string under apiKey → t3.chat always 400'd. Parse
both values from apiKey (fallback accessToken), mirroring validation.ts.

Co-authored-by: minhtran162 <minhtran162@users.noreply.github.com>

* fix(minimax): stop capping MiniMax-M3 / M2.7 max_tokens at 8192 (#3141) (#3163)

MiniMax-M3 had no MODEL_SPECS entry and capitalized MiniMax-M2.7 missed
its lowercase spec (case-sensitive lookup) → both fell to the 8192 default
cap. Add the M3 spec (512K output), alias the capitalized ids, and make
getModelSpec lookups case-insensitive.

Co-authored-by: totaltube <totaltube@users.noreply.github.com>

* fix(github-copilot): discover model catalog live from api.githubcopilot.com (#3120, #3121) (#3164)

The github (Copilot) provider had a static hardcoded catalog with no
discovery source, so Import Models never refreshed (#3120) and advertised
non-entitled models that 400 on use (#3121). Add a live /models fetch with
fallback to the static list.

Co-authored-by: gabrielmoreira <gabrielmoreira@users.noreply.github.com>

* fix(combo): invalidate nested-combo cache on edits + log DATA_DIR (#3147) (#3165)

Editing a combo did not invalidate the 10s nested-combo expansion caches
(chat.ts getCombosCachedForChat + chatCore.ts getCombosCached; the exported
clearCombosCache was dead code), so a removed nested target/model could be
served as a phantom for up to 10s. Wire a shared monotonic combos-cache
version in readCache (bumped by invalidateDbCache("combos") on every combo
write); both cache layers treat a version mismatch as a miss.

Also log the resolved DATA_DIR/SQLITE_FILE absolute path at DB init so the
reporter's 'persists across restart + volume wipe' symptom (a multi-replica
Docker volume/DATA_DIR mismatch, not a routing bug) is diagnosable from logs.

Includes consolidated CHANGELOG entries for #3133/#3136/#3007/#3141/#3120/#3121.

Co-authored-by: ViFigueiredo <ViFigueiredo@users.noreply.github.com>

* fix(web-tools): parse bare JSON tool calls (#3157)

Parse bare JSON tool calls for deepseek-web (#2820) + fuzzy tool-name matching. Integrated into release/v3.8.10.

* fix(misc): minor fixes across reasoning cache, account fallback, binary manager (#3177)

Misc: ProviderProfile export, DeepSeek reasoning regex, binary guard. Integrated into release/v3.8.10.

* fix(kiro): minor OAuth social exchange tweaks (#3176)

Kiro social OAuth: optional targetProvider passthrough. Integrated into release/v3.8.10.

* deps: bump hono from 4.12.18 to 4.12.23 (#3179)

Bump hono to 4.12.23. Integrated into release/v3.8.10.

* fix(providerRegistry): update kilocode format and executor (#3166)

kilocode: openai format + default executor (matches kilo-gateway) + registry test. Integrated into release/v3.8.10.

* feat(metrics): cross-request TTFT and gap latency after tool calls (#3173)

Cross-request TTFT + gap-after-tool latency metrics (+test). Integrated into release/v3.8.10.

* feat(dashboard): provider stats API endpoint and dashboard page (#3175)

Provider stats dashboard + API (SQL moved to db module per Hard Rule #5, +test). Integrated into release/v3.8.10.

* fix(usage): sequential+spaced OAuth quota sync, reactive force-refresh, actionable 401 (#3156)

Sequential+spaced OAuth quota sync, reactive force-refresh on 401, actionable 401 in UI. Integrated into release/v3.8.10.

* fix(healthcheck): per-provider proactive-refresh skip list (rescue short-TTL OAuth) (#3159)

Per-provider proactive-refresh skip list (OMNIROUTE_HEALTHCHECK_SKIP_PROVIDERS) to rescue short-TTL OAuth. Integrated into release/v3.8.10.

* feat(quota): show OAuth token expiry on provider cards (small, blue, informative) (#3178)

Show OAuth token expiry on provider cards (small, blue, informative). Integrated into release/v3.8.10.

* fix(providers): empty refresh must not resurface just-cleared synced models (#3181)

Empty refresh must not resurface just-cleared synced models (fixes the release-blocking provider-models-route test). Integrated into release/v3.8.10.

* chore(release): v3.8.10 — 2026-06-04 (finalize CHANGELOG)

---------

Co-authored-by: Wilson <pedbookmed@gmail.com>
Co-authored-by: Xiangzhe <32761048+xz-dev@users.noreply.github.com>
Co-authored-by: Jan Leon <Jan.gaschler@gmail.com>
Co-authored-by: M.M <mr.maatoug@gmail.com>
Co-authored-by: Hernan Javier Ardila Sanchez <hjasgr@gmail.com>
Co-authored-by: Markus Hartung <mail@hartmark.se>
Co-authored-by: KooshaPari <KooshaPari@users.noreply.github.com>
Co-authored-by: tjengbudi <tjengbudi@users.noreply.github.com>
Co-authored-by: minhtran162 <minhtran162@users.noreply.github.com>
Co-authored-by: totaltube <totaltube@users.noreply.github.com>
Co-authored-by: gabrielmoreira <gabrielmoreira@users.noreply.github.com>
Co-authored-by: ViFigueiredo <ViFigueiredo@users.noreply.github.com>
Co-authored-by: PizzaV <103120356+pizzav-xyz@users.noreply.github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Nicolas Lorin <androw95220@gmail.com>
2026-06-04 20:05:38 -03:00

147 lines
5.3 KiB
TypeScript

import test from "node:test";
import assert from "node:assert/strict";
import { sanitizeResponsesInputItems } from "../../open-sse/services/responsesInputSanitizer.ts";
test("truncates function_call name longer than 128 chars", () => {
const longName = "a".repeat(156);
const items = [{ type: "function_call", call_id: "c1", name: longName, arguments: "{}" }];
const result = sanitizeResponsesInputItems(items) as Array<Record<string, unknown>>;
assert.ok((result[0].name as string).length <= 128);
});
test("strips illegal characters from function_call name leaving only [a-zA-Z0-9_-]", () => {
const items = [
{ type: "function_call", call_id: "c2", name: "mcp__ns__get.issue item", arguments: "{}" },
];
const result = sanitizeResponsesInputItems(items) as Array<Record<string, unknown>>;
assert.match(result[0].name as string, /^[a-zA-Z0-9_-]+$/);
});
test("strips illegal characters from function_call_output name", () => {
const items = [
{ type: "function_call_output", call_id: "c3", name: "tool.with.dots", output: "ok" },
];
const result = sanitizeResponsesInputItems(items) as Array<Record<string, unknown>>;
assert.match(result[0].name as string, /^[a-zA-Z0-9_-]+$/);
});
test("leaves a valid name unchanged", () => {
const items = [
{ type: "function_call", call_id: "c4", name: "valid_tool-name", arguments: "{}" },
];
const result = sanitizeResponsesInputItems(items) as Array<Record<string, unknown>>;
assert.equal(result[0].name, "valid_tool-name");
});
test("does not modify message items", () => {
const items = [{ type: "message", role: "user", content: "hello" }];
const result = sanitizeResponsesInputItems(items) as Array<Record<string, unknown>>;
assert.deepEqual(result[0], { type: "message", role: "user", content: "hello" });
});
test("handles name that is both too long and has illegal chars", () => {
const badName = "mcp__ns__get.issue.".repeat(10); // 190 chars with dots
const items = [{ type: "function_call", call_id: "c5", name: badName, arguments: "{}" }];
const result = sanitizeResponsesInputItems(items) as Array<Record<string, unknown>>;
const name = result[0].name as string;
assert.ok(name.length <= 128);
assert.match(name, /^[a-zA-Z0-9_-]+$/);
});
test("strips invalid synthetic reasoning item ids", () => {
const items = [
{
id: "thinking_0",
type: "reasoning",
summary: [{ type: "summary_text", text: "cached reasoning" }],
},
];
const result = sanitizeResponsesInputItems(items) as Array<Record<string, unknown>>;
assert.equal(result[0].id, undefined);
assert.equal(result[0].type, "reasoning");
});
test("keeps valid server reasoning item ids", () => {
const items = [
{
id: "rs_123",
type: "reasoning",
summary: [{ type: "summary_text", text: "stored reasoning" }],
},
];
const result = sanitizeResponsesInputItems(items) as Array<Record<string, unknown>>;
assert.equal(result[0].id, "rs_123");
});
test("normalizes user image_url content parts to input_image", () => {
const items = [
{
type: "message",
role: "user",
content: [{ type: "image_url", image_url: { url: "https://example.com/u.png", detail: "high" } }],
},
];
const result = sanitizeResponsesInputItems(items) as Array<Record<string, unknown>>;
assert.deepEqual((result[0].content as unknown[])[0], {
type: "input_image",
image_url: "https://example.com/u.png",
detail: "high",
});
});
test("normalizes assistant image content parts to output_text", () => {
const items = [
{
type: "message",
role: "assistant",
content: [
{ type: "image_url", image_url: { url: "https://example.com/a.png" } },
{ type: "input_image", image_url: "https://example.com/b.png" },
],
},
];
const result = sanitizeResponsesInputItems(items) as Array<Record<string, unknown>>;
assert.deepEqual(result[0], {
type: "message",
role: "assistant",
content: [
{ type: "output_text", text: "[Image: https://example.com/a.png]" },
{ type: "output_text", text: "[Image: https://example.com/b.png]" },
],
});
});
test("normalizes replayed Responses output image parts to output_text", () => {
const items = [
{
type: "message",
role: "assistant",
output: [{ type: "image_url", image_url: { url: "https://example.com/output.png" } }],
},
];
const result = sanitizeResponsesInputItems(items) as Array<Record<string, unknown>>;
assert.deepEqual(result[0], {
type: "message",
role: "assistant",
output: [{ type: "output_text", text: "[Image: https://example.com/output.png]" }],
});
assert.equal(JSON.stringify(result).includes('"image_url"'), false);
});
test("normalizes function_call_output image output parts to input_image", () => {
const items = [
{
type: "function_call_output",
call_id: "call_1",
output: [{ type: "image_url", image_url: { url: "https://example.com/tool.png" } }],
},
];
const result = sanitizeResponsesInputItems(items) as Array<Record<string, unknown>>;
assert.deepEqual(result[0], {
type: "function_call_output",
call_id: "call_1",
output: [{ type: "input_image", image_url: "https://example.com/tool.png" }],
});
assert.equal(JSON.stringify(result).includes('"type":"image_url"'), false);
});