Goni Sulaiman 5c305680ac fix(sse): strip internal markers from the dario and 9router request bodies (#12729) (#12735) ...

`dario` and `9router` both override transformRequest() without calling the base
implementation, so the internal-marker strip that runs inside
BaseExecutor.transformRequest() never applied to their bodies, and the second
strip before dispatch in BaseExecutor.execute() is not on their path either.
Whatever the routing layer left on the request — including the context-relay /
universal-handoff markers — went upstream verbatim, and strict
OpenAI-compatible gateways reject unknown top-level keys with HTTP 400.

glm and gitlab look like the same class of bypass but are not: glm's
transformRequest() calls super, so the shared strip already covers it, and
gitlab rebuilds its payload field by field, so no extra key can survive to the
wire.

Co-authored-by: Goni Sulaiman <gonisulaimann@users.noreply.github.com>

2026-09-18 12:22:17 -03:00

..

antigravity

fix(antigravity): preserve thought token usage (#13055)

2026-09-11 17:41:29 -03:00

base

fix(db): bound health scans and isolate native diagnostics (#13717)

2026-09-16 12:59:45 -03:00

chatgpt-web-codex

feat(providers): refresh vendored ChatGPT Web connector to v4.0.7 (#12181)

2026-09-01 00:50:15 -03:00

claude-web

fix(claude-web): add charset=utf-8 to Content-Type headers to fix Arabic/Persian UTF-8 mojibake (#13416) (#13419)

2026-09-17 12:44:25 -03:00

codex

fix(sse): strip Codex temperature on native Responses passthrough (#12585)

2026-09-17 16:27:19 -03:00

cursor

feat(providers): Cursor PKCE login with Bearer quota, auto router, and empty-turn errors (#9909)

2026-08-21 10:28:01 -03:00

deepseek-web

Release v3.8.44 (#5925)

2026-07-04 13:00:30 -03:00

default

fix(types): validate default executor pool config (#9849)

2026-08-09 09:51:37 -03:00

devin-agentic

fix(ci): clear the 08-08 base-red layers — dead-code, prod crash in chat.ts, Responses payload regression, born-red stdio test, gate drifts (#9757)

2026-08-08 09:08:45 -03:00

duckduckgo-web

fix(providers): route duckduckgo-web via duck.ai and self-heal stale model catalog (#11597)

2026-08-26 08:09:38 -03:00

gemini-web

fix(providers): select and verify the requested gemini-web model/mode before answering (#13381) (#13919)

2026-09-17 13:06:37 -03:00

grok-web

Release v3.8.44 (#5925)

2026-07-04 13:00:30 -03:00

huggingchat

fix(sse): cap HuggingChat NDJSON body size and bound the read loop (#12577) (#13282)

2026-09-11 22:05:53 -03:00

kiro

Release v3.8.44 (#5925)

2026-07-04 13:00:30 -03:00

lmarena

security(runtime): harden TLS provenance, lifecycle, and public error boundaries (#11742)

2026-09-17 15:35:35 -03:00

maxai

fix(security): unbiased maxai X-Random nonce + stricter URL/regex assertions (#12502)

2026-09-02 15:56:49 -03:00

muse-spark-web

Release v3.8.44 (#5925)

2026-07-04 13:00:30 -03:00

perplexity-web

fix(perplexity-web): keep runs of spaces when cleaning non-streaming answers (#14009)

2026-09-18 11:34:56 -03:00

promptql

feat(sse): add PromptQL playground provider (unofficial) (#7911)

2026-07-21 13:16:58 -03:00

uc

fix(uc): route UC error strings through sanitizeErrorMessage; allowlist the retired codex id (#12437)

2026-09-02 05:12:11 -03:00

zai-web

fix(zai): treat HTTP 200 stream errors as failures (#12454)

2026-09-03 20:58:22 -03:00

accountRotation.ts

fix(executors): rotate on upstream 400 empty-body rejections (opencode) (#11158)

2026-08-22 21:51:22 -03:00

adapta-web.ts

fix(sse): surface Adapta non-stream SSE errors (#12459)

2026-09-03 20:57:21 -03:00

adobe-firefly.ts

feat(adobe-firefly): reference image attach + /v1/images/edits (follow-up #8006) (#8510)

2026-07-26 03:53:10 -03:00

antigravity.ts

fix(quota): keep Antigravity Gemini usable when Claude weekly is empty (#12566)

2026-09-03 12:40:21 -03:00

antigravityOutputCap.ts

feat(providers): refresh curated model catalogs and retire Imagen 4 (#10537)

2026-08-18 12:27:46 -03:00

antigravityUpstreamError.ts

fix(providers): surface real Antigravity upstream error detail (#13591) (#13801)

2026-09-16 06:11:41 -03:00

anysearch-fetch.ts

feat(search): add fallback-only AnySearch provider (webSearch + webFetch) (#11690)

2026-08-26 17:54:57 -03:00

auggie.ts

fix(routing): fail over when Auggie's quota-exhausted text exits clean (#12949) (#13751)

2026-09-17 10:46:52 -03:00

awsPollyTts.ts

chore(audio): retire EdgeTTS pending provenance review (#11711)

2026-08-28 04:45:17 -03:00

azure-ai.ts

cherry-pick(pr-9787): fix(sse): apply Azure param rules on azure-ai and clamp gpt-4o-mini output tokens (#9855)

2026-08-09 09:52:16 -03:00

azure-openai.ts

cherry-pick(pr-9787): fix(sse): apply Azure param rules on azure-ai and clamp gpt-4o-mini output tokens (#9855)

2026-08-09 09:52:16 -03:00

azureParamRules.ts

fix(azure): match the generation, not one release, for max_completion_tokens (#13007)

2026-09-10 18:12:57 -03:00

base.ts

fix(copilot): fallback to copilot-chat on 403 identity denial for standard provider (#13705)

2026-09-18 11:58:48 -03:00

bedrock.ts

[v3.8.50] fix: passthrough non-standard cache token fields for DeepSeek / MiniMax / Bedrock across streaming, non-streaming, and Dashboard paths (#8591)

2026-08-11 07:15:08 -03:00

blackbox-web.ts

Release v3.8.40

2026-06-29 08:40:06 -03:00

browserExecutableCheck.ts

fix(sse): classify missing Chromium as a Z.ai host/config cooldown (#13232) (#13777)

2026-09-16 06:15:47 -03:00

chatgpt-web-codex.ts

feat(providers): refresh vendored ChatGPT Web connector to v4.0.7 (#12181)

2026-09-01 00:50:15 -03:00

chatgpt-web.ts

feat(providers): restore ChatGPT Web via clean-room browser transport (#12239)

2026-09-02 10:31:41 -03:00

chatgptWebTools.ts

security(runtime): harden TLS provenance, lifecycle, and public error boundaries (#11742)

2026-09-17 15:35:35 -03:00

cheaperinference.ts

feat(sse): Cheaper Inference provider — chat + native Responses + images, sponsor rail 2nd (#9043)

2026-07-31 07:53:41 -03:00

claude-web.ts

security(runtime): harden TLS provenance, lifecycle, and public error boundaries (#11742)

2026-09-17 15:35:35 -03:00

claudeIdentity.ts

fix(sse): preserve Fable mid-conversation cache prefixes (#13173)

2026-09-17 16:24:04 -03:00

cliproxyapi.ts

maint: final follow-up cherry-pick #9783 (#9904)

2026-08-09 09:52:23 -03:00

cloudflare-ai.ts

fix(providers): cloudflare-ai flattens message content unconditionally, but the #2539 constraint is model-scoped — this blocks image input to Cloudflare vision models (#12002)

2026-08-30 11:09:37 -03:00

cloudflare-playground.ts

feat(browser): adopt Obscura as primary headless browser engine with Chromium fallback (#12286)

2026-09-03 08:24:32 -03:00

clova-studio.ts

feat(providers): modernize CLOVA Studio chat and embeddings (#12277)

2026-09-03 07:50:22 -03:00

codebuddy-cn.ts

fix(codebuddy-cn): replace agent system prompts to bypass Tencent content filter (#9723)

2026-08-11 09:06:47 -03:00

codex-app-server.ts

fix(security): harden codex app-server transport (#11205 post-merge review) (#11281)

2026-08-23 16:49:19 -03:00

codex.ts

fix(providers): convert agent_message input items for non-Codex-native Responses upstreams (#13698) (#14041)

2026-09-18 11:57:08 -03:00

commandCode.ts

fix(command-code): floor tiny muse-spark output budgets so hidden reasoning cannot consume the whole budget (#12497)

2026-09-18 11:28:36 -03:00

conol-web.ts

fix(ci): clear base-reds on release/v3.8.50 (round 3) (#10213)

2026-08-13 00:02:25 -03:00

context7-fetch.ts

feat(search): add context7 as a library-docs search and fetch provider (#11140)

2026-08-23 02:24:01 -03:00

copilot-m365-connection.ts

feat(providers): tool calling for copilot-m365-web via router planning (#10948)

2026-08-21 08:50:24 -03:00

copilot-m365-frames.ts

fix(m365): BizChat invocation shape drift + HAR-import UX + Antigravity alias note (#11069)

2026-08-21 22:32:19 -03:00

copilot-m365-web.ts

feat(providers): tool calling for copilot-m365-web via router planning (#10948)

2026-08-21 08:50:24 -03:00

copilot-web.ts

fix(copilot-web): restore browser authentication (#9984)

2026-08-11 08:40:48 -03:00

copilotIdentityFallback.ts

fix(copilot): fallback to copilot-chat on 403 identity denial for standard provider (#13705)

2026-09-18 11:58:48 -03:00

credential.ts

[URGENT] fix(dev): reduce instrumentation executor fan-out (phase 3) (#12078)

2026-08-31 14:13:46 -03:00

cursor.ts

fix(cursor): recover Kimi tool calls emitted as history narration (#12723)

2026-09-16 15:34:54 -03:00

dario.ts

fix(sse): strip internal markers from the dario and 9router request bodies (#12729) (#12735)

2026-09-18 12:22:17 -03:00

deepseek-web-done-terminator.ts

Release v3.8.47 (#6569)

2026-07-13 09:12:40 -03:00

deepseek-web-with-auto-refresh.ts

Release v3.8.44 (#5925)

2026-07-04 13:00:30 -03:00

deepseek-web.ts

fix(deepseek-web): replace unlicensed PoW artifacts (#11732)

2026-08-28 04:44:34 -03:00

default.ts

fix(sse): stop unhydrated compatible connections routing to the real OpenAI/Anthropic API (#13452) (#13798)

2026-09-16 06:12:28 -03:00

defaultResolver.ts

[URGENT] fix(dev): reduce instrumentation executor fan-out (phase 3) (#12078)

2026-08-31 14:13:46 -03:00

devin-cli-agentic.ts

fix(devin): accept Windows sandbox paths in the agentic home check (#12545)

2026-09-11 17:41:56 -03:00

devin-cli.ts

fix(providers): stop devin-cli spawn error from double-closing SSE controller (#12517) (#13261)

2026-09-11 22:06:26 -03:00

devin-desktop.ts

[v3.8.50] feat(devin-desktop): replace public Windsurf provider (#8228)

2026-08-12 08:40:18 -03:00

doubao-web.ts

Release v3.8.46

2026-07-07 13:14:06 -03:00

duckduckgo-web.ts

fix(executors): DuckDuckGo ERR_BN_LIMIT without blind retry + proxy pool support (#12110)

2026-08-30 11:10:47 -03:00

firecrawl-fetch.ts

feat(providers): add comprehensive support for self-hosted Firecrawl via FIRECRAWL_BASE_URL and custom base URLs (#9052)

2026-08-06 11:07:42 -03:00

forceResponsesUpstream.ts

fix(executor): respect apiType="chat" in forceResponsesUpstream (#5483 regression) (#10946)

2026-08-21 08:25:03 -03:00

freebuff.ts

feat(search): first-class X Search via SuperGrok x_search (#10988)

2026-08-21 14:16:42 -03:00

gemini-business.ts

fix(types): normalize Gemini Business credentials (#9851)

2026-08-09 09:51:49 -03:00

gemini-web.ts

fix(providers): select and verify the requested gemini-web model/mode before answering (#13381) (#13919)

2026-09-17 13:06:37 -03:00

geminiTts.ts

fix(responses-continuation): recover a real id/output for passthrough and translate-mode replies (#11434)

2026-08-24 19:57:12 -03:00

ghe-copilot.ts

Integration: security tier + self-hosted operator blockers (rebased onto v3.8.51) (#10952)

2026-08-23 16:51:25 -03:00

github.ts

fix(copilot): fallback to copilot-chat on 403 identity denial for standard provider (#13705)

2026-09-18 11:58:48 -03:00

gitlab.ts

fix(oauth): fall back to public Code Suggestions on any GitLab Duo direct_access 403 (#12958) (#13758)

2026-09-16 06:17:42 -03:00

gitlabResponses.ts

Release v3.8.44 (#5925)

2026-07-04 13:00:30 -03:00

glm.ts

fix(thinking): parse/scrub DSML tool-call markers and recognize adaptive thinking (#12905)

2026-09-17 12:56:30 -03:00

grok-cli.ts

fix(providers): restore grok-4.6/4.5 default reasoning effort (#13628)

2026-09-16 08:15:21 -03:00

grok-web.ts

security(runtime): harden TLS provenance, lifecycle, and public error boundaries (#11742)

2026-09-17 15:35:35 -03:00

gtts.ts

chore(audio): retire EdgeTTS pending provenance review (#11711)

2026-08-28 04:45:17 -03:00

huggingchat.ts

fix(sse): cap HuggingChat NDJSON body size and bound the read loop (#12577) (#13282)

2026-09-11 22:05:53 -03:00

hyperagent.ts

fix(hyperagent): sticky thread for agentic tool loops (Claude Code) (#8470)

2026-07-27 21:12:45 -03:00

index.ts

fix(providers): remove the chipotle/pepper provider (#13131) (#13913)

2026-09-17 13:22:09 -03:00

inner-ai.ts

fix(types): align web executor event contracts (#9138)

2026-08-05 22:31:30 -03:00

jina-reader-fetch.ts

Release v3.8.3 (#2617)

2026-05-24 18:05:58 -03:00

kie.ts

fix: address kie provider review feedback

2026-05-07 00:01:54 +07:00

kimi-web.ts

fix(kimi): point kimi-web to international www.kimi.ai (#11045)

2026-08-22 18:55:23 -03:00

kimi.ts

fix(kimi): normalize MFJS tool schemas (#10079)

2026-08-13 07:52:41 -03:00

kimiToolNames.ts

fix(executors): backfill missing tool message names for Kimi K3 and strict BYOK providers (#9005)

2026-08-06 00:09:11 -03:00

kiro.ts

fix(kiro): add runtime.us-east-1.kiro.dev as first-attempt endpoint (#11517)

2026-08-26 09:21:44 -03:00

kiroThinking.ts

Release v3.8.38 (#5078)

2026-06-27 09:07:12 -03:00

kiroToolCallValidation.ts

fix(kiro): validate completed nested tool_call payloads (#9314)

2026-08-05 22:41:25 -03:00

lmarena.ts

security(runtime): harden TLS provenance, lifecycle, and public error boundaries (#11742)

2026-09-17 15:35:35 -03:00

maxai.ts

feat(providers): add MaxAI — signed OpenAI-compatible provider (chat, tools, vision, image-gen, doc-RAG) (#11461)

2026-09-02 01:55:42 -03:00

moonshot.ts

fix(kimi): normalize MFJS tool schemas (#10079)

2026-08-13 07:52:41 -03:00

muse-spark-web.ts

fix(executors): report WS readyState in Meta AI timeout error (#10727) (#10916)

2026-08-21 08:02:19 -03:00

nimble-fetch.ts

feat(providers): add Nimble web search and fetch (#11620)

2026-08-26 09:22:03 -03:00

ninerouter.ts

fix(sse): strip internal markers from the dario and 9router request bodies (#12729) (#12735)

2026-09-18 12:22:17 -03:00

nlpcloud.ts

fix(security): close remaining v3.8.50 advisories (batch 2 — 11 findings) (#11040)

2026-08-21 20:28:16 -03:00

notion-web.ts

security(runtime): harden TLS provenance, lifecycle, and public error boundaries (#11742)

2026-09-17 15:35:35 -03:00

oneminai.ts

fix(sse): preserve 1min.ai partial output before stream errors (#12466)

2026-09-03 21:06:28 -03:00

opencode.ts

fix(opencode): record the free-tier refusal instead of counting it as success (#14011)

2026-09-18 11:35:15 -03:00

opencodeAccountHealth.ts

fix(opencode): record the free-tier refusal instead of counting it as success (#14011)

2026-09-18 11:35:15 -03:00

opencodeGeoBlock.ts

fix(opencode): record the free-tier refusal instead of counting it as success (#14011)

2026-09-18 11:35:15 -03:00

opencodeRateLimited.ts

fix(sse): stop retry wave on rate-limited 429 and drain 429 once (#13657)

2026-09-15 22:01:56 -03:00

opencodeResponseBody.ts

fix(sse): fail over opencode request on refused-route 403 (#13498)

2026-09-15 20:39:39 -03:00

opencodeResponsesStall.ts

fix(opencode): rotate once when a Responses stream stalls before its first byte (#13484)

2026-09-15 20:10:57 -03:00

opencodeTransientFailure.ts

fix(sse): pause failover dispatch after repeated transient upstream failures (#13615)

2026-09-15 20:58:12 -03:00

perplexity-web.ts

security(runtime): harden TLS provenance, lifecycle, and public error boundaries (#11742)

2026-09-17 15:35:35 -03:00

poe-web.ts

Release v3.8.40

2026-06-29 08:40:06 -03:00

pollinations.ts

fix(sse): stop keyless pollinations 401s from poisoning the noauth pool (#9827) (#11194)

2026-08-23 07:01:04 -03:00

promptql.ts

feat(sse): add PromptQL playground provider (unofficial) (#7911)

2026-07-21 13:16:58 -03:00

qoder.ts

fix(qoder): unwrap split SSE error envelopes (#13838)

2026-09-17 17:17:33 -03:00

registry.ts

perf(executors): lazy-load the executor registry — defer class imports + construction to first use (#11220) (#11421)

2026-08-25 18:22:46 -03:00

t3-chat-web.ts

Release v3.8.43 (#5609)

2026-07-02 10:47:13 -03:00

tavily-fetch.ts

fix(executors): pass TimeoutError reason to controller.abort() in 7 niche executors (#8699)

2026-07-27 17:24:39 -03:00

tencent-aistudio-web.ts

feat(providers): add tencent-aistudio-web cookie provider (tasw) (#10174)

2026-08-15 05:15:17 -03:00

tinycms.ts

perf(stream): compile hot-path regexes once, bound token caches, fix quadratic buffering (#12179)

2026-09-03 08:29:14 -03:00

tinycmsDomMocks.ts

fix(providers): keep TinyCMS DOM stub safe for Next.js SSR (#13957)

2026-09-18 11:34:39 -03:00

tinycmsSigner.ts

fix(providers): keep TinyCMS DOM stub safe for Next.js SSR (#13957)

2026-09-18 11:34:39 -03:00

tinyfish-fetch.ts

fix(executors): pass TimeoutError reason to controller.abort() in 7 niche executors (#8699)

2026-07-27 17:24:39 -03:00

trae.ts

fix(providers): refresh Trae's stale Referer/Origin and forward user timezone (#12190) (#13255)

2026-09-11 22:29:02 -03:00

uc.ts

feat(providers): add UC (uncensored.com) — persona (un-metered) + direct (metered) (#11513)

2026-09-02 02:23:33 -03:00

v0-vercel-web.ts

Release v3.8.47 (#6569)

2026-07-13 09:12:40 -03:00

venice-web.ts

Release v3.8.40

2026-06-29 08:40:06 -03:00

veoaifree-web.ts

fix(types): preserve Veo polling delay result (#9104)

2026-08-05 22:30:08 -03:00

vertex.ts

fix(vertex): preserve Claude prompt caching and usage metadata (#13220)

2026-09-18 11:30:45 -03:00

vertexMedia.ts

chore(release): merge release/v3.8.50 tip into release/v3.8.51 — sync-back step 1/2

2026-08-28 14:07:39 -03:00

xai.ts

fix(xai): cap chat history at xAI 800-message limit (#10601)

2026-08-18 10:52:52 -03:00

yuanbao-web.ts

fix(yuanbao-web): accept content field in SSE text events (upstream format change) (#8739)

2026-08-07 11:23:07 -03:00

zai-web.ts

fix(sse): classify missing Chromium as a Z.ai host/config cooldown (#13232) (#13777)

2026-09-16 06:15:47 -03:00

zcode.ts

fix(catalog): declare GLM reasoning effort tiers (#10963)

2026-08-22 22:54:49 -03:00

zcodeProtocol.ts

perf(stream): compile hot-path regexes once, bound token caches, fix quadratic buffering (#12179)

2026-09-03 08:29:14 -03:00

zed-hosted.ts

fix(zed-hosted): map developer role and Gemini enums for Zed proxy (#13543)

2026-09-15 00:11:18 -03:00

zenmux-free.ts

Release v3.8.38 (#5078)

2026-06-27 09:07:12 -03:00