mirror of
https://github.com/diegosouzapw/OmniRoute.git
synced 2026-07-31 20:32:20 +03:00
Introduce a runtime settings layer that hydrates persisted config at startup and reapplies aliases, payload rules, cache behavior, CLI compatibility, usage tuning, and related switches when settings change or SQLite updates. Replace the legacy prompt injection middleware path with a guardrail registry that supports prompt injection detection, PII masking, disabled guardrail overrides, and post-call response handling across the chat pipeline. Add a metadata registry for model catalog and alias resolution so catalog endpoints return enriched capabilities plus diagnostic headers and typed alias errors instead of ad hoc responses. Convert unsupported built-in web_search tools into an OmniRoute fallback tool, execute them through builtin skills, and preserve Responses API function call output with sanitized usage fields. Centralize provider header fingerprints for GitHub, Cursor, Qwen, Qoder, Kiro, and Antigravity, and migrate management passwords from env or plaintext storage into persisted bcrypt hashes during startup and login.
164 lines
5.4 KiB
TypeScript
164 lines
5.4 KiB
TypeScript
import {
|
|
BaseExecutor,
|
|
mergeUpstreamExtraHeaders,
|
|
type ExecuteInput,
|
|
type ProviderCredentials,
|
|
} from "./base.ts";
|
|
import { PROVIDERS } from "../config/constants.ts";
|
|
import { getQoderDashscopeCompatHeaders } from "../config/providerHeaderProfiles.ts";
|
|
import { sanitizeQwenThinkingToolChoice } from "../services/qwenThinking.ts";
|
|
|
|
function getAuthToken(credentials: ProviderCredentials): string {
|
|
if (typeof credentials.apiKey === "string" && credentials.apiKey.trim()) {
|
|
return credentials.apiKey.trim();
|
|
}
|
|
if (typeof credentials.accessToken === "string" && credentials.accessToken.trim()) {
|
|
return credentials.accessToken.trim();
|
|
}
|
|
if (typeof credentials.refreshToken === "string" && credentials.refreshToken.trim()) {
|
|
return credentials.refreshToken.trim();
|
|
}
|
|
// Fallback: QODER_PERSONAL_ACCESS_TOKEN env var (#966)
|
|
const envToken = String(process.env.QODER_PERSONAL_ACCESS_TOKEN || "").trim();
|
|
if (envToken) return envToken;
|
|
return "";
|
|
}
|
|
|
|
export class QoderExecutor extends BaseExecutor {
|
|
constructor() {
|
|
super("qoder", PROVIDERS.qoder);
|
|
}
|
|
|
|
transformRequest(model: string, body: unknown): Record<string, unknown> {
|
|
const payload = {
|
|
...(typeof body === "object" && body !== null ? body : {}),
|
|
model,
|
|
};
|
|
|
|
return sanitizeQwenThinkingToolChoice(payload, "QoderExecutor");
|
|
}
|
|
|
|
async execute({ model, body, stream, credentials, signal, upstreamExtraHeaders }: ExecuteInput) {
|
|
const token = getAuthToken(credentials);
|
|
|
|
if (!token) {
|
|
return {
|
|
response: new Response(
|
|
JSON.stringify({
|
|
error: {
|
|
message: "Qoder access token or API Key is required. Please sign in or set a PAT.",
|
|
type: "authentication_error",
|
|
code: "token_required",
|
|
},
|
|
}),
|
|
{ status: 401, headers: { "Content-Type": "application/json" } }
|
|
),
|
|
url: "https://dashscope.aliyuncs.com",
|
|
headers: { "Content-Type": "application/json" },
|
|
transformedBody: body,
|
|
};
|
|
}
|
|
|
|
const resolvedModel = model || "qwen3-coder-plus";
|
|
|
|
// Check if it's a model-alias matching QwenCode
|
|
let mappedModel = resolvedModel;
|
|
if (resolvedModel === "qwen3.5-plus" || resolvedModel === "qwen3.6-plus") {
|
|
mappedModel = "coder-model"; // Translate alias to what DashScope compatible endpoint accepts via QwenCode tokens
|
|
} else if (resolvedModel === "vision-model") {
|
|
mappedModel = "qwen3-vl-plus";
|
|
}
|
|
|
|
// Determine the resource URL: Qwen CLI tokens usually target portal.qwen.ai natively,
|
|
// but the DashScope compatible endpoint works out of the box when authtype is set.
|
|
// If the token was mapped to a custom `resource_url`, we should use it. Otherwise default to dashscope Aliyun.
|
|
let endpointUrl = "https://dashscope.aliyuncs.com/compatible-mode/v1/chat/completions";
|
|
|
|
// We allow setting custom API base via credentials
|
|
let credentialsApiBase: unknown;
|
|
if (typeof credentials === "object" && credentials !== null) {
|
|
const credsObj = credentials as Record<string, unknown>;
|
|
credentialsApiBase = credsObj.customApiBase || credsObj.resourceUrl;
|
|
}
|
|
if (typeof credentialsApiBase === "string" && credentialsApiBase.trim()) {
|
|
let base = credentialsApiBase.trim();
|
|
if (!base.startsWith("http")) base = `https://${base}`;
|
|
if (!base.endsWith("/v1")) base = base.endsWith("/") ? `${base}v1` : `${base}/v1`;
|
|
endpointUrl = `${base}/chat/completions`;
|
|
}
|
|
|
|
const headers: Record<string, string> = {
|
|
"Content-Type": "application/json",
|
|
Authorization: `Bearer ${token}`,
|
|
...getQoderDashscopeCompatHeaders(),
|
|
};
|
|
|
|
mergeUpstreamExtraHeaders(headers, upstreamExtraHeaders);
|
|
|
|
const payload = this.transformRequest(mappedModel, body, stream, credentials);
|
|
|
|
const bodyStr = JSON.stringify(payload);
|
|
|
|
try {
|
|
const response = await fetch(endpointUrl, {
|
|
method: "POST",
|
|
headers,
|
|
body: bodyStr,
|
|
signal,
|
|
});
|
|
|
|
const newHeaders = new Headers(response.headers);
|
|
|
|
if (!response.ok) {
|
|
let errText = await response.text();
|
|
return {
|
|
response: new Response(
|
|
JSON.stringify({
|
|
error: {
|
|
message: `Qoder API failed with status ${response.status}: ${errText}`,
|
|
type: response.status === 401 ? "authentication_error" : "provider_error",
|
|
},
|
|
}),
|
|
{ status: response.status, headers: { "Content-Type": "application/json" } }
|
|
),
|
|
url: endpointUrl,
|
|
headers,
|
|
transformedBody: payload,
|
|
};
|
|
}
|
|
|
|
return {
|
|
response: new Response(response.body, {
|
|
status: response.status,
|
|
statusText: response.statusText,
|
|
headers: newHeaders,
|
|
}),
|
|
url: endpointUrl,
|
|
headers,
|
|
transformedBody: payload,
|
|
};
|
|
} catch (e: unknown) {
|
|
const error = e as Error;
|
|
if (error.name === "AbortError") {
|
|
throw error;
|
|
}
|
|
return {
|
|
response: new Response(
|
|
JSON.stringify({
|
|
error: {
|
|
message: `Qoder fetch error: ${error.message}`,
|
|
type: "provider_error",
|
|
},
|
|
}),
|
|
{ status: 502, headers: { "Content-Type": "application/json" } }
|
|
),
|
|
url: endpointUrl,
|
|
headers,
|
|
transformedBody: payload,
|
|
};
|
|
}
|
|
}
|
|
}
|
|
|
|
export default QoderExecutor;
|