mirror of
https://github.com/diegosouzapw/OmniRoute.git
synced 2026-07-26 09:52:11 +03:00
* chore(release): open v3.8.35 development cycle
* fix db vacuum scheduler settings (#4726)
Scheduled VACUUM now follows Storage page settings (scheduledVacuum/vacuumHour) as single source of truth; env-flag control path removed. 11/11 vacuum-scheduler tests pass against release/v3.8.35 tip; no orphaned env refs. Integrated into release/v3.8.35.
* fix(tier): noAuth providers count as free; free filter returns empty … (#4753)
noAuth providers now classified free (union of legacy list + NOAUTH_PROVIDERS chat-tier derivation), -free arena_elo alias, and auto/<cat>:free returns an empty pool when no free candidate matches (opt-in legacy fallback via OMNIROUTE_AUTO_FREE_FALLBACK_TO_FULL_POOL). New env var documented in .env.example + ENVIRONMENT.md; CHANGELOG bullet added (maintainer co-author). 46/46 node + 56/56 vitest tests pass on release tip; env-doc-sync, docs-sync, typecheck:core, lint, file-size all green. Integrated into release/v3.8.35.
* refactor(chatCore): extrai 11 helpers de nível superior para 6 leaves puros (#3501) (#4571)
chatCore god-file decomposition (#3501): extract 6 pure leaves (cacheUsageMeta, executorClientHeaders, nonStreamingResponseBody, skillsFormat, streamErrorResult, streamFinalize) from chatCore.ts. Rebased onto release/v3.8.35 tip (resolved single chatCore.ts conflict — removed now-extracted inline buildExecutorClientHeaders). 265/265 chatcore tests, 26/26 new leaf tests, typecheck:core, cycles, file-size all green. Integrated into release/v3.8.35.
* refactor(chatCore): extrai resolveExecutorWithProxy + getExecutionCredentials para leaves (#3501) (#4646)
chatCore #3501: extract resolveExecutorWithProxy + getExecutionCredentials to leaves (executorProxy.ts, executionCredentials.ts). Clean cherry-pick onto release tip post-#4571. 12/12 new leaf tests, typecheck:core, cycles, file-size green. Integrated into release/v3.8.35.
* refactor(chatCore): extrai transforms de mensagens Claude p/ leaf (#3501) (#4708)
chatCore #3501: extract Claude upstream-message transforms to leaf (claudeUpstreamMessages.ts + claudeMessageTypes.ts). Clean cherry-pick post-#4646. 8/8 new leaf tests, typecheck/cycles/file-size green. Integrated into release/v3.8.35.
* refactor(chatCore): extrai persistAttemptLogs para leaf (#3501) (#4717)
chatCore #3501: extract persistAttemptLogs to leaf (attemptLogging.ts). Rebased onto release tip post-#4708 (resolved imports conflict: kept tip's resolveCompressionHeader from compression Phase 3, dropped now-unused logTruncation import moved into the leaf). 288/288 chatcore tests, typecheck/cycles/file-size green. Integrated into release/v3.8.35.
* refactor(chatCore): extrai stageTrace + compressionUsageReceipt para leaves (#3501) (#4721)
chatCore #3501: extract stageTrace + compressionUsageReceipt to leaves. Clean cherry-pick post-#4717. 6/6 new leaf tests, typecheck/cycles/file-size green. Integrated into release/v3.8.35.
* refactor(chatCore): extrai prepareUpstreamBody (1ª sub-fatia do executeProviderRequest, #3501) (#4730)
chatCore #3501: extract prepareUpstreamBody (first sub-slice of executeProviderRequest) to leaf (upstreamBody.ts). Clean cherry-pick post-#4721. 7/7 new leaf tests, full 301/301 chatcore suite, typecheck/cycles/file-size green. Completes the 6-PR chatCore decomposition stack into release/v3.8.35.
* fix(db): make db-backup import size cap configurable (#4719) (#4757)
Co-authored-by: Diego Rodrigues de Sa e Souza <souzamiriamrodrigues790@gmail.com>
* chore(quality): expand check:release-green to the FULL release-PR gate set (#4758)
The release-green pre-flight (Solution C) previously covered only a subset of the
gates that run exclusively on the release PR (PR→main), so reds still accrued
silently on release/** and surfaced in ~40-min layers at release time (v3.8.34:
3 CI rounds — CodeQL sanitization, then the fail-fast Quality Ratchet revealing
openapi then cyclomatic-complexity one push at a time, plus zizmor/integration).
Now check:release-green reproduces the COMPLETE release-PR gate set and reports
EVERY red in one pass (collected, not fail-fast):
- New DRIFT ratchets (report-only, rebaselined at release, never block):
cyclomatic complexity, dead-code, type-coverage, compression-budget,
openapi-coverage, workflow-lint (zizmor), codeql-ratchet.
- New HARD gates (real defects): docs-all (fabricated-docs strict + i18n mirror
sync) and the integration test suite (gated behind !--quick).
The only release-PR gates it still cannot reproduce locally are GitHub-side CodeQL
semantic analysis and SonarQube/SonarCloud (external services).
The nightly-release-green workflow and /green-prs inherit the expanded coverage
automatically (they invoke this script), so cycle drift is now surfaced
continuously and the release PR is green on its first CI run.
Co-authored-by: Diego Rodrigues de Sa e Souza <souzamiriamrodrigues790@gmail.com>
* fix(dashboard): add missing onboarding.tiers step title (#4698) (#4755)
Co-authored-by: Diego Rodrigues de Sa e Souza <souzamiriamrodrigues790@gmail.com>
* feat(compression): Output Styles registry + D0 telemetry (Phase 4A) (#4694)
Phase 4A: Output Styles registry + D0 telemetry. Integrated into release/v3.8.35.
* feat(compression): SLM tier for ultra (Phase 4B) [stacked on #4694] (#4707)
Phase 4B: SLM tier for ultra. Integrated into release/v3.8.35.
* feat(compression): context-budget adaptive compression (Phase 4C) [stacked on #4707] (#4716)
Phase 4C: adaptive context-budget compression. Integrated into release/v3.8.35.
* feat(compression): offline evaluation harness (Phase 4 D1) [stacked on #4716] (#4720)
Phase 4 D1: offline evaluation harness. Integrated into release/v3.8.35.
* fix(sse): deepseek-web folds role:tool results into prompt transcript (#4712) (#4756)
Co-authored-by: Diego Rodrigues de Sa e Souza <souzamiriamrodrigues790@gmail.com>
* fix(dashboard): remove dead unconditional useLiveRequests call in HomePageClient (#4759, #4745, #4596) (#4761)
Co-authored-by: Diego Rodrigues de Sa e Souza <souzamiriamrodrigues790@gmail.com>
* fix(dashboard): dedupe provider nodes by id on compatible-provider add (#4746) (#4768)
Co-authored-by: Diego Rodrigues de Sa e Souza <souzamiriamrodrigues790@gmail.com>
* chore(db): re-export compressionRunTelemetry from localDb to satisfy db-rules (#4775)
Co-authored-by: Diego Rodrigues de Sa e Souza <souzamiriamrodrigues790@gmail.com>
* docs(security): add canonical STRIDE-based threat model (#4783)
Canonical STRIDE threat model. Integrated into release/v3.8.35.
* test(dashboard): add smoke test for home client dashboard (#4793)
Smoke test guarding the dashboard home client render (regression #4745/#4759). Code fix already landed via #4761; this PR's jsdom smoke test is the net-new regression guard. Integrated into release/v3.8.35.
* fix(combos): auto-promote zeroLatencyOptimizationsEnabled so legacy configs (pre-3.8.33 fallbackCompressionMode="lite") round-trip on the first GUI edit (#4774)
Auto-promote zeroLatencyOptimizationsEnabled + strip v3.8.31-era removed keys so legacy combo configs round-trip through PUT /api/combos/{id} on first GUI edit (closes #4382 followup). Pre-merge: rewrote the now-stale reject test to assert auto-promotion + added passthrough/round-trip regression guards; reconciled combos/page.tsx file-size baseline. Integrated into release/v3.8.35.
* refactor(chatCore): extrai parse + usage-stats não-streaming do executeProviderRequest (#3501) (#4762)
chatCore #3501: extract parseNonStreamingResponseBody + recordNonStreamingUsageStats. Integrated into release/v3.8.35.
* refactor(chatCore): extrai recordContextEditingTelemetryHook (#3501) (#4779)
chatCore #3501: extract recordContextEditingTelemetryHook. Integrated into release/v3.8.35.
* refactor(chatCore): extrai recordCompressionCacheStats (#3501) (#4792)
chatCore #3501: extract recordCompressionCacheStats. Integrated into release/v3.8.35.
* refactor(chatCore): extrai writeCavemanOutputAnalytics (#3501) (#4794)
chatCore #3501: extract writeCavemanOutputAnalytics. Integrated into release/v3.8.35.
* refactor(chatCore): extrai scheduleQuotaShareConsumption (POST-hook não-streaming, #3501) (#4780)
chatCore #3501: extract scheduleQuotaShareConsumption (non-streaming POST-hook). Integrated into release/v3.8.35.
* refactor(chatCore): extrai emitRequestGamificationEvent (helper compartilhado DRY, #3501) (#4776)
chatCore #3501: extract emitRequestGamificationEvent (DRY streaming/non-streaming). Integrated into release/v3.8.35.
* refactor(chatCore): extrai runPluginOnResponseHook (#3501) (#4782)
chatCore #3501: extract runPluginOnResponseHook. Integrated into release/v3.8.35.
* refactor(chatCore): extrai scheduleStreamingQuotaShareConsumption (POST-hook streaming, #3501) (#4784)
chatCore #3501: extract scheduleStreamingQuotaShareConsumption (streaming POST-hook). Integrated into release/v3.8.35.
* refactor(chatCore): extrai recordStreamingUsageStats (analytics de usage streaming, #3501) (#4791)
chatCore #3501: extract recordStreamingUsageStats. Integrated into release/v3.8.35.
* refactor(chatCore): extrai recordStreamingCost (custo por-request streaming, #3501) (#4790)
chatCore #3501: extract recordStreamingCost (per-request streaming cost). Integrated into release/v3.8.35.
* docs(readme): credit ponytail + OmniCompress; restore env-doc-sync release-green (#4799)
README compression credits (ponytail/OmniCompress) + env-doc-sync ignore for eval-only OMNIROUTE_EVAL_CREDENTIALS (restores release-green after #4720). Integrated into release/v3.8.35.
* chore(quality): trim combo-config.test.ts comments under file-size cap (#4774 follow-up) (#4800)
Restore file-size release-green. Integrated into release/v3.8.35.
* feat(api-docs): Redoc-rendered /api/docs + consolidate OpenAPI spec to docs/openapi.yaml (#4781)
Redoc /api/docs + OpenAPI spec consolidated to docs/openapi.yaml (canonical 201-path complete spec; old path → legacy fallback). All refs/gates/tests/CI updated. Integrated into release/v3.8.35.
* docs(compression): declare Phase 4 layers — Output Styles, adaptive dial, per-request control (#4801)
The README compression section listed the 9 input engines but not the Phase 4
layers now in production:
- Output Styles (output-axis steering: terse-prose / less-code / terse-cjk, lite/full/ultra)
- adaptive context-budget dial (reserve-output|percentage|absolute · floor|replace-autotrigger|off)
- per-request x-omniroute-compression precedence + the offline eval harness
Also bumped the highlights range to v3.8.35, expanded the compression feature bullet,
and marked the GUIDE's Phase 4 row Shipped (was 'Planned' — it's merged on v3.8.35).
Co-authored-by: Diego Rodrigues de Sa e Souza <souzamiriamrodrigues790@gmail.com>
Co-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
* chore(release): finalize v3.8.35 CHANGELOG + docs reconciliation
- CHANGELOG: complete 3.8.35 section (all 35 commits since v3.8.34,
contributor attribution: @rdself @megamen32 @KooshaPari @JxnLexn)
- docs(security): align THREAT_MODEL.md refs with real code
(routeGuard.ts, tokenLimits.ts, /api/monitoring/health) — fabricated-docs gate
- check:fabricated-docs: skip docs/superpowers/specs (dated research reports)
- i18n: sync 3.8.35 section into 41 CHANGELOG mirrors (docs-sync size gate)
- ratchet rebaseline: cyclomatic 1916->1920, eslintWarnings 3907->3912
(inherited cycle drift; release-finalize diff is docs-only)
* fix(release): resolve inherited base-reds surfaced by v3.8.35 release CI
Cycle base-reds that only run on PR→main (not the PR→release fast-path):
- test(autoCombo): suffixComposition-4517 used node:test in a vitest-only dir
(#4753) → vitest found no suite. Switch to the vitest API. (Vitest job)
- test(agentSkills): openapiParser fixture wrote docs/reference/openapi.yaml;
parser reads docs/openapi.yaml since #4781 → point fixture at the new path.
(Unit/Coverage/Node24/Node26 shard 4)
- test(integration): proxy-pipeline source-scan expected inline streaming-cost
code that #4790/#3501 extracted to the recordStreamingCost leaf → assert the
delegation instead. (Integration 1/2)
- fix(chatCore): derive the log trace id from crypto, not Math.random
(CodeQL js/insecure-randomness — log-correlation id, not a secret).
- test(resilience): circuit-breaker invalid-cooldown fallback asserted t>29000,
flaking on slow CI where ~1.6s elapsed gave t=28401 → tolerate wall-clock
drift (t>25000). (Unit 6/8)
* fix(usage): derive pending-request id from crypto, not Math.random
CodeQL js/insecure-randomness (#669): the pending-request id generated in
trackPendingRequest (usageHistory.ts) flows into attempt logging and was flagged
as insecure randomness in a security context. It's a log-correlation id, not a
secret — switch to crypto RNG to clear the alert. Pairs with the chatCore traceId
fix in 37c49781a (same sink).
---------
Co-authored-by: Diego Rodrigues de Sa e Souza <souzamiriamrodrigues790@gmail.com>
Co-authored-by: Randi <55005611+rdself@users.noreply.github.com>
Co-authored-by: Demiurge The Single <megamen932@gmail.com>
Co-authored-by: KooshaPari <42529354+KooshaPari@users.noreply.github.com>
Co-authored-by: Jan Leon <Jan.gaschler@gmail.com>
Co-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
251 lines
8.2 KiB
TypeScript
251 lines
8.2 KiB
TypeScript
import test from "node:test";
|
|
import assert from "node:assert/strict";
|
|
import fs from "node:fs";
|
|
import path from "node:path";
|
|
import os from "node:os";
|
|
|
|
// Dynamic import to pick up ESM module
|
|
const { parseOpenapi, getEndpointsForArea } =
|
|
await import("../../src/lib/agentSkills/openapiParser.ts");
|
|
|
|
// ─── Fixture helpers ──────────────────────────────────────────────────────────
|
|
|
|
/**
|
|
* Creates a temporary directory with a minimal openapi.yaml fixture,
|
|
* changes CWD to it, and returns a cleanup function.
|
|
*/
|
|
function withFixtureOpenapi(yamlContent: string): { cleanup: () => void } {
|
|
const tmpDir = fs.mkdtempSync(path.join(os.tmpdir(), "omni-openapi-test-"));
|
|
// openapiParser reads docs/openapi.yaml (consolidated location since #4781,
|
|
// previously docs/reference/openapi.yaml) — the fixture must mirror that path.
|
|
const docsDir = path.join(tmpDir, "docs");
|
|
fs.mkdirSync(docsDir, { recursive: true });
|
|
fs.writeFileSync(path.join(docsDir, "openapi.yaml"), yamlContent, "utf-8");
|
|
|
|
const originalCwd = process.cwd();
|
|
process.chdir(tmpDir);
|
|
|
|
return {
|
|
cleanup() {
|
|
process.chdir(originalCwd);
|
|
fs.rmSync(tmpDir, { recursive: true, force: true });
|
|
},
|
|
};
|
|
}
|
|
|
|
// ─── Fixture YAML ─────────────────────────────────────────────────────────────
|
|
|
|
const FIXTURE_YAML = `
|
|
openapi: 3.1.0
|
|
info:
|
|
title: OmniRoute Test
|
|
version: 1.0.0
|
|
paths:
|
|
/api/providers:
|
|
get:
|
|
tags: [Providers]
|
|
summary: List provider connections
|
|
description: Returns all configured provider connections.
|
|
post:
|
|
tags: [Providers]
|
|
summary: Add provider connection
|
|
/api/providers/{id}:
|
|
get:
|
|
tags: [Providers]
|
|
summary: Get provider by id
|
|
patch:
|
|
tags: [Providers]
|
|
summary: Update provider connection
|
|
delete:
|
|
tags: [Providers]
|
|
summary: Remove provider connection
|
|
/api/providers/{id}/test:
|
|
post:
|
|
tags: [Providers]
|
|
summary: Test provider connection
|
|
/api/keys:
|
|
get:
|
|
tags: [APIKeys]
|
|
summary: List API keys
|
|
post:
|
|
tags: [APIKeys]
|
|
summary: Create API key
|
|
/api/keys/{id}:
|
|
delete:
|
|
tags: [APIKeys]
|
|
summary: Revoke API key
|
|
/api/usage/analytics:
|
|
get:
|
|
tags: [Usage]
|
|
summary: Get usage analytics
|
|
/api/v1/chat/completions:
|
|
post:
|
|
tags: [Chat]
|
|
summary: Create chat completion
|
|
/api/settings:
|
|
get:
|
|
tags: [Settings]
|
|
summary: Get settings
|
|
put:
|
|
tags: [Settings]
|
|
summary: Update settings
|
|
`;
|
|
|
|
// ─── Tests using fixture ──────────────────────────────────────────────────────
|
|
|
|
test("parseOpenapi() returns paths Map with all operations from fixture", () => {
|
|
const { cleanup } = withFixtureOpenapi(FIXTURE_YAML);
|
|
try {
|
|
const { paths } = parseOpenapi();
|
|
|
|
assert.ok(paths instanceof Map, "paths should be a Map");
|
|
assert.ok(paths.size > 0, "paths should not be empty");
|
|
|
|
// Spot-check a few keys
|
|
assert.ok(paths.has("GET /api/providers"), "Expected GET /api/providers");
|
|
assert.ok(paths.has("POST /api/providers"), "Expected POST /api/providers");
|
|
assert.ok(paths.has("GET /api/providers/{id}"), "Expected GET /api/providers/{id}");
|
|
assert.ok(paths.has("DELETE /api/providers/{id}"), "Expected DELETE /api/providers/{id}");
|
|
assert.ok(paths.has("POST /api/v1/chat/completions"), "Expected POST /api/v1/chat/completions");
|
|
} finally {
|
|
cleanup();
|
|
}
|
|
});
|
|
|
|
test("parseOpenapi() groups /api/providers/* under 'providers' area", () => {
|
|
const { cleanup } = withFixtureOpenapi(FIXTURE_YAML);
|
|
try {
|
|
const { areas } = parseOpenapi();
|
|
|
|
const providerOps = areas.get("providers");
|
|
assert.ok(providerOps, "Expected 'providers' area to exist");
|
|
assert.ok(
|
|
providerOps!.length >= 5,
|
|
`Expected at least 5 provider endpoints, got ${providerOps!.length}`
|
|
);
|
|
|
|
const paths = providerOps!.map((op) => op.path);
|
|
assert.ok(paths.includes("/api/providers"), "Expected /api/providers");
|
|
assert.ok(paths.includes("/api/providers/{id}"), "Expected /api/providers/{id}");
|
|
assert.ok(paths.includes("/api/providers/{id}/test"), "Expected /api/providers/{id}/test");
|
|
} finally {
|
|
cleanup();
|
|
}
|
|
});
|
|
|
|
test("parseOpenapi() groups /api/keys/* under 'api-keys' area", () => {
|
|
const { cleanup } = withFixtureOpenapi(FIXTURE_YAML);
|
|
try {
|
|
const { areas } = parseOpenapi();
|
|
const keyOps = areas.get("api-keys");
|
|
assert.ok(keyOps, "Expected 'api-keys' area to exist");
|
|
assert.ok(keyOps!.length >= 2, `Expected at least 2 key endpoints, got ${keyOps!.length}`);
|
|
} finally {
|
|
cleanup();
|
|
}
|
|
});
|
|
|
|
test("parseOpenapi() groups /api/v1/* under 'inference' area", () => {
|
|
const { cleanup } = withFixtureOpenapi(FIXTURE_YAML);
|
|
try {
|
|
const { areas } = parseOpenapi();
|
|
const inferenceOps = areas.get("inference");
|
|
assert.ok(inferenceOps, "Expected 'inference' area to exist");
|
|
assert.ok(
|
|
inferenceOps!.length >= 1,
|
|
`Expected at least 1 inference endpoint, got ${inferenceOps!.length}`
|
|
);
|
|
assert.ok(
|
|
inferenceOps!.some((op) => op.path === "/api/v1/chat/completions"),
|
|
"Expected /api/v1/chat/completions in inference area"
|
|
);
|
|
} finally {
|
|
cleanup();
|
|
}
|
|
});
|
|
|
|
test("parseOpenapi() OpenapiPath entries have required fields", () => {
|
|
const { cleanup } = withFixtureOpenapi(FIXTURE_YAML);
|
|
try {
|
|
const { paths } = parseOpenapi();
|
|
for (const [key, op] of paths) {
|
|
assert.ok(typeof op.method === "string" && op.method.length > 0, `${key}: method missing`);
|
|
assert.ok(typeof op.path === "string" && op.path.length > 0, `${key}: path missing`);
|
|
assert.ok(typeof op.summary === "string", `${key}: summary not a string`);
|
|
assert.ok(Array.isArray(op.tags), `${key}: tags not an array`);
|
|
}
|
|
} finally {
|
|
cleanup();
|
|
}
|
|
});
|
|
|
|
test("parseOpenapi() throws if openapi.yaml is missing", () => {
|
|
const tmpDir = fs.mkdtempSync(path.join(os.tmpdir(), "omni-openapi-missing-"));
|
|
const originalCwd = process.cwd();
|
|
process.chdir(tmpDir);
|
|
try {
|
|
assert.throws(
|
|
() => parseOpenapi(),
|
|
/openapiParser: could not read/,
|
|
"Expected error when openapi.yaml is missing"
|
|
);
|
|
} finally {
|
|
process.chdir(originalCwd);
|
|
fs.rmSync(tmpDir, { recursive: true, force: true });
|
|
}
|
|
});
|
|
|
|
test("parseOpenapi() returns empty areas Map for YAML with no paths", () => {
|
|
const emptyPathsYaml = `
|
|
openapi: 3.1.0
|
|
info:
|
|
title: Empty
|
|
version: 1.0.0
|
|
paths: {}
|
|
`;
|
|
const { cleanup } = withFixtureOpenapi(emptyPathsYaml);
|
|
try {
|
|
const { paths, areas } = parseOpenapi();
|
|
assert.equal(paths.size, 0);
|
|
assert.equal(areas.size, 0);
|
|
} finally {
|
|
cleanup();
|
|
}
|
|
});
|
|
|
|
// ─── Integration test: real openapi.yaml (gated) ─────────────────────────────
|
|
|
|
const SKIP_REAL = process.env.SKIP_REAL_OPENAPI === "1";
|
|
|
|
test(
|
|
"parseOpenapi() with real openapi.yaml: providers area has ≥5 endpoints",
|
|
{ skip: SKIP_REAL ? "SKIP_REAL_OPENAPI=1" : false },
|
|
() => {
|
|
// This test runs from the project root (the worktree).
|
|
// It will fail if openapi.yaml doesn't exist — that's intentional.
|
|
const { areas } = parseOpenapi();
|
|
const providerOps = areas.get("providers");
|
|
assert.ok(providerOps, "Expected 'providers' area in real OpenAPI spec");
|
|
assert.ok(
|
|
providerOps!.length >= 5,
|
|
`Expected ≥5 provider endpoints in real spec, got ${providerOps!.length}`
|
|
);
|
|
}
|
|
);
|
|
|
|
test(
|
|
"getEndpointsForArea('providers') with real openapi.yaml: returns ≥5 strings",
|
|
{ skip: SKIP_REAL ? "SKIP_REAL_OPENAPI=1" : false },
|
|
() => {
|
|
const endpoints = getEndpointsForArea("providers");
|
|
assert.ok(
|
|
endpoints.length >= 5,
|
|
`Expected ≥5 provider endpoint strings, got ${endpoints.length}: ${endpoints.join(", ")}`
|
|
);
|
|
// Each entry should match "METHOD /path"
|
|
for (const ep of endpoints) {
|
|
assert.match(ep, /^[A-Z]+ \//, `Endpoint "${ep}" does not match METHOD /path format`);
|
|
}
|
|
}
|
|
);
|