Xiangzhe 50f5cecb80 fix(security): don't auto-adopt an unverified listener on a service port ...

decidePreSpawn adopted any listener that returned a 2xx on the health path, so a
local process that squats an embedded-service port before the supervisor starts
it would be adopted — receiving the injected service API key and script execution
inside the dashboard origin. Adoption is now opt-in
(OMNIROUTE_ADOPT_EXISTING_SERVICE=1); by default a healthy-but-unverified listener
yields the same actionable error as a held-but-unhealthy port. The embedded-UI CSP
hardening (strict embed CSP / the dead scriptSrc ternary) is a separate follow-up.

Reported by @rafaelfiguereod-stack via GHSA-wg9p-6m2g-4v27.

2026-08-21 14:49:31 -03:00

..

a2a

feat(providers): integrate audited free-tier gateways (#9210)

2026-08-12 16:19:25 -03:00

accessTokens

Release v3.8.29 (#4126)

2026-06-19 06:49:01 -03:00

acp

fix(security): close 4 STILL-REAL advisory findings (ACP RCE hardening, db-backups tier, uppercase authz bypass, spawn-veto drift) (#11028)

2026-08-21 13:57:42 -03:00

agentSkills

fix(cli): restore packaged machine-token authentication (#10468)

2026-08-20 15:07:19 -03:00

api

fix(cli): restore packaged machine-token authentication (#10468)

2026-08-20 15:07:19 -03:00

audit

Release v3.8.42 (#5459)

2026-06-30 06:54:29 -03:00

auth

Release v3.8.43 (#5609)

2026-07-02 10:47:13 -03:00

batches

Release v3.8.42 (#5459)

2026-06-30 06:54:29 -03:00

build-profile

Release v3.8.41 (#5327)

2026-06-29 16:51:03 -03:00

catalog

chore(startup): remove server-init.ts, a module nothing imports (#10780)

2026-08-20 10:27:26 -03:00

chaos

Release v3.8.47 (#6569)

2026-07-13 09:12:40 -03:00

cli-helper

fix(cli): always emit limit.output in OpenCode config (#10940) (#11010)

2026-08-21 13:57:56 -03:00

cliTools

feat(cli): support Grok Build custom host configuration (#10830)

2026-08-21 00:29:01 -03:00

cloudAgent

Release v3.8.47 (#6569)

2026-07-13 09:12:40 -03:00

combos

fix(catalog): exclude generic 128k default from combo context min() (#10734) (#10793)

2026-08-20 06:30:43 -03:00

compliance

fix(compliance): redact extra provider API keys (#10521)

2026-08-18 10:51:34 -03:00

compression

Release v3.8.38 (#5078)

2026-06-27 09:07:12 -03:00

conductor

feat(a2a): inbound delegation to the OmniConductor fleet via POST /api/a2a/tasks (PRD RF5) (#8223)

2026-08-12 02:13:41 -03:00

config

fix(models): honor MODELS_DEV_SYNC_ENABLED=0 over dashboard settings (#10299)

2026-08-17 08:02:47 -03:00

copilot

fix(api): guard combo updates against emptying, and fix copilot combo targets (#10866)

2026-08-20 15:46:57 -03:00

credentialHealth

fix(startup): log when credential health check is disabled (#11016) (#11021)

2026-08-21 14:00:27 -03:00

cursor

feat(providers): Cursor PKCE login with Bearer quota, auto router, and empty-turn errors (#9909)

2026-08-21 10:28:01 -03:00

db

fix(db): pause call-log rotate on SQLITE_CORRUPT (#10979)

2026-08-21 14:00:39 -03:00

discovery

Release v3.8.44 (#5925)

2026-07-04 13:00:30 -03:00

display

Release v3.8.49 (#7076)

2026-07-29 15:18:55 -03:00

embeddings

fix(providers): 401 when active terminal grok-cli credentials expire (#10969) (#10971)

2026-08-21 14:00:46 -03:00

env

feat(a2a): inbound delegation to the OmniConductor fleet via POST /api/a2a/tasks (PRD RF5) (#8223)

2026-08-12 02:13:41 -03:00

evals

fix(combo): guarantee combo loops terminate with an actionable error instead of hanging silently (#10463)

2026-08-20 23:07:25 -03:00

events

Release v3.8.41 (#5327)

2026-06-29 16:51:03 -03:00

freeProxyProviders

Release v3.8.49 (#7076)

2026-07-29 15:18:55 -03:00

gamification

feat(radar): recognize supporters and add Intel UI

2026-08-14 11:00:12 -03:00

guardrails

feat(vision-bridge): consolidate vision bridge fixes (catalog verdict, creds, cache key, CC vision) (#10859)

2026-08-21 02:13:07 -03:00

headroom

Release v3.8.46

2026-07-07 13:14:06 -03:00

images

Release v3.8.49 (#7076)

2026-07-29 15:18:55 -03:00

inspector

Fix/issue #8656 (#9095)

2026-08-05 21:43:16 -03:00

issueAgent

Release v3.8.49 (#7076)

2026-07-29 15:18:55 -03:00

jobRegistry

maint: follow-up cherry-pick fix-in-place #9631 (conflict-resolved fallback) (#9886)

2026-08-09 09:54:47 -03:00

jobs

maint: follow-up cherry-pick fix-in-place #9631 (conflict-resolved fallback) (#9886)

2026-08-09 09:54:47 -03:00

kimi

feat(sse): add kimi web token lifecycle manager, rolling auto-refresh and 401 recovery (#10944)

2026-08-21 04:25:56 -03:00

localCorpus

Release v3.8.49 (#7076)

2026-07-29 15:18:55 -03:00

memory

fix: skills & memory — tool-name encoding, schema normalization, warm-cache, combo id, Ponytail catalog (#9058)

2026-08-11 04:30:38 -03:00

middleware

Release v3.8.43 (#5609)

2026-07-02 10:47:13 -03:00

modelsDevSync

refactor(providers): remove the Puter provider at its owner's request (#10210)

2026-08-12 16:54:50 -03:00

monitoring

feat(search): first-class X Search via SuperGrok x_search (#10988)

2026-08-21 14:16:42 -03:00

notion

Release v3.8.42 (#5459)

2026-06-30 06:54:29 -03:00

oauth

feat(providers): Cursor PKCE login with Bearer quota, auto router, and empty-turn errors (#9909)

2026-08-21 10:28:01 -03:00

obsidian

feat(observability): add Obsidian context source with 24 MCP tools (#3077)

2026-06-03 06:45:04 -03:00

playground

refactor(playground): expand endpoint contract to 13 endpoints (D4-rev2)

2026-05-28 17:19:48 -03:00

plugins

feat(plugins): expose client request headers in plugin context (#9570) (#9668)

2026-08-07 20:54:32 -03:00

promptCache

Release v3.8.42 (#5459)

2026-06-30 06:54:29 -03:00

providerModels

feat(providers): Cursor PKCE login with Bearer quota, auto router, and empty-turn errors (#9909)

2026-08-21 10:28:01 -03:00

providers

feat(search): first-class X Search via SuperGrok x_search (#10988)

2026-08-21 14:16:42 -03:00

proxyHealth

feat(proxy): surface anonymous egress-IP sharing in the health sweep and the egress API (#10876)

2026-08-20 15:47:34 -03:00

proxyRelay

fix(relay): share one private-host guard across the three relay workers (#10941)

2026-08-21 04:17:25 -03:00

proxySubscription

fix(proxy-subscriptions): allow local/loopback proxy-subscription fetch URLs (#10416)

2026-08-18 10:49:52 -03:00

quota

fix(ci): clear base-reds on release/v3.8.50 (ESLint / dead-code / vitest) (#9985) (#10778)

2026-08-21 09:27:06 -03:00

radar

fix(radar): close final client trust boundaries

2026-08-14 22:19:50 -03:00

reasoningRouting

Release v3.8.49 (#7076)

2026-07-29 15:18:55 -03:00

resilience

feat(api): add provider quota telemetry, adaptive routing, and status inventory (#10148)

2026-08-18 11:31:53 -03:00

routerEval

Release v3.8.49 (#7076)

2026-07-29 15:18:55 -03:00

routing

feat(api): add provider quota telemetry, adaptive routing, and status inventory (#10148)

2026-08-18 11:31:53 -03:00

runtime

feat: enhance port configuration and API bridge support

2026-02-26 15:11:40 +00:00

search

feat(search): first-class X Search via SuperGrok x_search (#10988)

2026-08-21 14:16:42 -03:00

security

Release v3.8.31 (#4377)

2026-06-20 14:55:24 -03:00

services

fix(security): don't auto-adopt an unverified listener on a service port

2026-08-21 14:49:31 -03:00

skills

fix(skills): make marketplace installs available to API keys (#10854)

2026-08-21 00:13:31 -03:00

spend

feat(core): add payload rules, tag routing, and scheduled budgets

2026-04-17 09:00:32 -03:00

sync

feat(api-manager): add provider-level model permissions (#9313)

2026-08-11 10:29:28 -03:00

system

fix(auto-update): skip synthetic Next.js standalone package.json without name field in resolveProjectRoot (#8956) (#9354)

2026-08-05 16:07:31 -03:00

telegram

fix(release): repair post-sweep base regressions

2026-08-09 15:16:55 -03:00

translator

feat(dashboard): add custom CLI builder and eval suite management

2026-04-23 16:57:43 -03:00

usage

fix(db): pause call-log rotate on SQLITE_CORRUPT (#10979)

2026-08-21 14:00:39 -03:00

versionManager

fix(cliproxy): read os.platform()/os.arch() at runtime in binaryManager platform detection (#10244) (#10474)

2026-08-18 11:42:47 -03:00

vncSession

feat(routing): add exclusive managed session connection leases (#10362)

2026-08-18 11:25:46 -03:00

vscode

fix(reasoning): forward Ollama Cloud thinking (#9290)

2026-08-04 14:34:02 -03:00

warmupScheduler

feat(warmup): proactive Claude warmup scheduler (#8848) (#9449)

2026-08-07 20:53:21 -03:00

webhooks

Release v3.8.41 (#5327)

2026-06-29 16:51:03 -03:00

ws

chore(release): v3.6.6 — Stabilization (#1241)

2026-04-16 05:26:17 -03:00

zed-oauth

Release v3.8.6 (#2804)

2026-05-29 12:44:29 -03:00

admissionVirtualLanes.ts

feat: combo-lane awareness + activation UX + MCP visibility (Wave 2 of #9654) (#10039)

2026-08-18 11:31:46 -03:00

apiBridgeServer.ts

feat: update API bridge proxy timeout to 600000ms and enhance related tests

2026-05-09 12:42:59 +00:00

apiKeyExposure.ts

Release v3.8.27 (#3968)

2026-06-17 02:43:21 -03:00

arenaEloSync.ts

chore(startup): remove server-init.ts, a module nothing imports (#10780)

2026-08-20 10:27:26 -03:00

benchmarks.ts

feat: complete memory and skills implementation for antigravity

2026-04-01 08:42:03 -03:00

cacheControlSettings.ts

feat: add cache control settings and token-based metrics

2026-03-29 14:37:55 +02:00

cacheLayer.ts

fix(build): remove node: protocol prefix from all src/ imports (#turbopack-compat)

2026-03-17 04:24:46 -03:00

ccDiscoveryAliasResolve.ts

fix(sse): route claude/<provider>/<model> aliases for catalog-only providers (#9856)

2026-08-09 09:52:28 -03:00

cloudflaredTunnel.ts

Release v3.8.49 (#7076)

2026-07-29 15:18:55 -03:00

cloudSync.stub.ts

Release v3.8.6 (#2804)

2026-05-29 12:44:29 -03:00

cloudSync.ts

Release v3.8.6 (#2804)

2026-05-29 12:44:29 -03:00

consoleInterceptor.ts

fix(logging): keep the component and apply printf formats in the app log (#10770)

2026-08-20 06:29:42 -03:00

container.ts

feat: add error pages, harden DB layer and compliance module

2026-03-04 19:35:38 -03:00

contextWindowResolver.ts

feat(models): unify token limit overrides (#8908)

2026-08-05 22:41:38 -03:00

dataPaths.ts

fix(db): keep test runs off the operator's real DATA_DIR (#10432)

2026-08-15 01:51:01 -03:00

docsI18nPath.ts

Release v3.8.40

2026-06-29 08:40:06 -03:00

docsSanitizer.ts

Release v3.8.40

2026-06-29 08:40:06 -03:00

exclusiveLeaseIsolation.ts

feat(routing): add exclusive managed session connection leases (#10362)

2026-08-18 11:25:46 -03:00

freeProviderRankings.ts

feat(rankings): report what a free provider actually served (#10926)

2026-08-21 08:25:23 -03:00

freeProviderRankingsAuthType.ts

Release v3.8.49 (#7076)

2026-07-29 15:18:55 -03:00

gracefulShutdown.ts

perf(logging): offload call-log artifacts to a worker (#10123)

2026-08-18 10:49:15 -03:00

healthzLag.ts

feat(resilience): warn on slow /healthz event-loop lag (#10827)

2026-08-20 11:47:38 -03:00

idempotencyLayer.ts

feat(cache): implement dynamic cache components with TDD

2026-04-01 08:45:39 +07:00

initCloudSync.ts

maint: follow-up cherry-pick fix-in-place #9631 (conflict-resolved fallback) (#9886)

2026-08-09 09:54:47 -03:00

instrumentationBootError.ts

fix(cli): guarantee non-empty [STARTUP] Fatal log on instrumentation-hook boot throw (#10447)

2026-08-18 10:57:44 -03:00

ipUtils.ts

Release v3.8.49 (#7076)

2026-07-29 15:18:55 -03:00

localDb.ts

fix(analytics): query auto routing from call logs (#10685)

2026-08-20 13:00:01 -03:00

localHealthCheck.ts

Release v3.8.49 (#7076)

2026-07-29 15:18:55 -03:00

logEnv.ts

fix(logging): document CHAT_LOG_MAX_BODY_KB, capture messageCount for Responses API bodies (#10038)

2026-08-13 04:02:42 -03:00

logPayloads.ts

cherry-pick(pr-9601): feat(responses): add encrypted reasoning replay opt-in (#9876)

2026-08-09 09:55:02 -03:00

logRotation.ts

feat(providers): add AWS Polly and Lemonade provider support

2026-04-24 13:20:59 -03:00

machineToken.ts

fix(cli): restore packaged machine-token authentication (#10468)

2026-08-20 15:07:19 -03:00

modelAliasResolver.ts

fix(routing): fallback to default model alias seeds when unmapped in database (#10124)

2026-08-17 08:21:53 -03:00

modelAliasSeed.ts

fix(routing): fallback to default model alias seeds when unmapped in database (#10124)

2026-08-17 08:21:53 -03:00

modelCapabilities.ts

feat(vision-bridge): consolidate vision bridge fixes (catalog verdict, creds, cache key, CC vision) (#10859)

2026-08-21 02:13:07 -03:00

modelCapabilityModalities.ts

feat: add Video Bridge frame sampling (#10483)

2026-08-15 14:23:29 -03:00

modelCapabilityOverrideTargets.ts

cherry-pick(pr-9569): fix(settings): use provider prefixes in model overrides (#9878)

2026-08-09 09:55:16 -03:00

modelCapabilityResolutionSnapshot.ts

fix(catalog): scope combo reasoning efforts by connection (#10723)

2026-08-20 09:31:12 -03:00

modelMetadataRegistry.ts

fix(catalog): preserve provider effort tiers (#10953)

2026-08-21 08:25:10 -03:00

modelsDevSync.ts

chore(startup): remove server-init.ts, a module nothing imports (#10780)

2026-08-20 10:27:26 -03:00

ngrokTunnel.ts

Release v3.7.5 (#1753)

2026-04-30 01:27:03 -03:00

obsidianSync.ts

feat(observability): add Obsidian context source with 24 MCP tools (#3077)

2026-06-03 06:45:04 -03:00

omnirouteStatus.ts

feat(api): add provider quota telemetry, adaptive routing, and status inventory (#10148)

2026-08-18 11:31:53 -03:00

oneproxyRotator.ts

feat: integrate 1proxy free proxy marketplace (closes #1788) (#1847)

2026-05-01 08:36:07 -03:00

oneproxySync.ts

feat: integrate 1proxy free proxy marketplace (closes #1788) (#1847)

2026-05-01 08:36:07 -03:00

piiSanitizer.ts

fix(pii): preserve custom event names and apply stream PII sanitization fixes (#3056)

2026-06-01 23:13:19 -03:00

pricingSync.ts

fix(pricing): 3 dead entries in LITELLM_PROVIDER_MAP silently drop synced pricing (#10636)

2026-08-20 13:11:03 -03:00

providerNodePrefixes.ts

cherry-pick(pr-9569): fix(settings): use provider prefixes in model overrides (#9878)

2026-08-09 09:55:16 -03:00

proxyEchoTarget.ts

fix(proxy): stop reporting IPv4-only proxies as dead (#10868)

2026-08-20 15:19:32 -03:00

proxyEgress.ts

feat(proxy): surface anonymous egress-IP sharing in the health sweep and the egress API (#10876)

2026-08-20 15:47:34 -03:00

proxyHealth.ts

Release v3.8.40

2026-06-29 08:40:06 -03:00

proxyLogger.ts

feat(proxy): surface anonymous egress-IP sharing in the health sweep and the egress API (#10876)

2026-08-20 15:47:34 -03:00

semanticCache.ts

fix(api): report the cache that requests actually use in /api/cache/stats (#10769)

2026-08-20 06:29:38 -03:00

serverLifecycle.ts

Release v3.8.49 (#7076)

2026-07-29 15:18:55 -03:00

source.ts

fix(bun): make server child and outbound fetch Bun-safe (#9761)

2026-08-11 09:16:23 -03:00

sseTextTransform.ts

Release v3.8.24 (#3747)

2026-06-13 17:27:40 -03:00

streamingPiiTransform.ts

fix(types): preserve streaming PII choice keys (#9566)

2026-08-07 20:54:11 -03:00

tailscaleTunnel.ts

fix(startup): read platform at runtime via os.platform() so Windows Tailscale branches survive bundle DCE (#10293) (#10500)

2026-08-17 08:24:51 -03:00

tokenHealthCheck.ts

feat(providers): Cursor PKCE login with Bearer quota, auto router, and empty-turn errors (#9909)

2026-08-21 10:28:01 -03:00

tokenHealthCheckCopilot.ts

Release v3.8.49 (#7076)

2026-07-29 15:18:55 -03:00

tokenHealthCheckCursor.ts

feat(cursor): proactively renews Cursor sessions and fixes manual refresh (#9173)

2026-08-11 04:31:24 -03:00

tokenHealthCheckKimi.ts

feat(sse): add kimi web token lifecycle manager, rolling auto-refresh and 401 recovery (#10944)

2026-08-21 04:25:56 -03:00

toolPolicy.ts

feat(phase2+3): DI container, plugins, PII sanitizer, tool policy, audit log, cache invalidation, ARIA, CSS vars

2026-02-18 14:43:57 -03:00

translatorEvents.ts

feat: OmniRoute v1.0.0 — Intelligent AI Gateway & Universal LLM Proxy

2026-02-18 00:02:15 -03:00

usageAnalytics.ts

Release v3.8.43 (#5609)

2026-07-02 10:47:13 -03:00

usageDb.ts

Release v3.8.18 (#3482)

2026-06-09 15:56:24 -03:00

warmupScheduler.ts

feat(routing): add exclusive managed session connection leases (#10362)

2026-08-18 11:25:46 -03:00

webhookDispatcher.ts

Release v3.8.49 (#7076)

2026-07-29 15:18:55 -03:00