mirror of
https://github.com/diegosouzapw/OmniRoute.git
synced 2026-07-31 20:32:20 +03:00
* chore(config): ignore additional agent workflow command files Add newly introduced agent workflow and Claude command files to .gitignore so proprietary automation assets are not committed. * feat(deepseek-web): fix auth to use userToken + WASM PoW solver Rewrite deepseek-web executor from broken cookie auth to userToken Bearer flow (like Chat2API). Replace pure JS Keccak PoW with WASM solver (5.8s → 86ms). Add 14 models, validation, and dashboard UX. * fix(deepseek-web): update target_path to use challenge property * refactor(deepseek-web): streamline token handling and implement cache eviction * fix(deepseek-web): fix SSE parser, prompt format, and error handling - Handle all 3 DeepSeek SSE stream formats: initial fragments, APPEND operations, and bare string tokens (fixes truncated responses) - Simplify prompt builder to send system + last user message only (DeepSeek web API is single-turn, full history caused marker leakage) - Check json.code before token extraction (fixes "did not return access token: Authorization" on code 40003 with HTTP 200) - Clear session cache alongside token cache on auth errors - Add dev origin for remote testing Co-authored-by: Cursor <cursoragent@cursor.com> * chore: ignore memory-bank and cursor agent rules from tracking Co-authored-by: Cursor <cursoragent@cursor.com> * feat: enhance documentation and configuration for Fumadocs integration - Added Fumadocs MDX support in the Next.js configuration. - Updated transpile packages to include fumadocs-ui and fumadocs-core. - Implemented a comprehensive set of redirects for documentation paths to improve navigation. - Removed the generate-docs-index script as it is no longer needed. - Updated various documentation titles for consistency and clarity. - Enhanced global styles to incorporate Fumadocs UI themes and styles. * refactor(docs): cleanup fumadocs PR — revert deepseek, add i18n fallback, restore LanguageSelector - Revert unrelated deepseek-web.ts changes (should be separate PR) - Add .source/ to .gitignore (Fumadocs generated files) - Remove contributor IP from allowedDevOrigins - Add i18n runtime fallback: reads NEXT_LOCALE cookie, loads translated .md from docs/i18n/<locale>/docs/ (preserves existing translation pipeline) - Restore LanguageSelector in Fumadocs layout nav - Restore SEO metadata (title template, description, robots) * fix(codex): use allowlist to strip non-Responses-API fields in non-passthrough path (#2608) (#2615) Integrated into release/v3.8.3 — fix(codex): allowlist-based sanitization for gpt-5.5 Responses API * fix(deepseek-web): fix SSE parser, prompt format, error handling, and cache keys (#2616) Integrated into release/v3.8.3 — fix(deepseek-web): SSE parser (APPEND + bare tokens), prompt builder, error handling, session cache cleanup * chore(config): ignore additional agent workflow command files Add newly introduced agent workflow and Claude command files to .gitignore so proprietary automation assets are not committed. * feat(docs): migrate /docs to Fumadocs MDX with nested routes (#2614) Integrated into release/v3.8.3 — Fumadocs MDX migration with nested routes, search API, and 50+ URL redirects * fix(catalog): skip static PROVIDER_MODELS when synced models exist (#2625) Integrated into release/v3.8.3 * fix(qoder): Cosy auth fallback for PAT tokens + vision support for qwen3-vl-plus (#2629) Integrated into release/v3.8.3 * fix(cli): register tsx loader and add opencode config subcommand (#2631) Integrated into release/v3.8.3 * feat(dashboard): add search and filters to /dashboard/api-manager (#2628) Integrated into release/v3.8.3 * fix(claude): improve Pi and OpenCode compatibility (#2621) Integrated into release/v3.8.3 * fix: restore semantic passthrough system-role-only extraction instead of full normalization (#2620) Integrated into release/v3.8.3 * fix(kiro): stabilize conversationId across prompt compression (#2630) Integrated into release/v3.8.3 * fix(deepseek-web): SSE thinking/search routing and session lifecycle (#2624) Integrated into release/v3.8.3 — DeepSeek Web SSE thinking/search routing overhaul * feat(dashboard): free-tier grouping with symbolic link in /providers (#2632) Integrated into release/v3.8.3 * fix: close implementation gaps — t3-chat-web, stream_options, combo_strategy, batch config (#2634) Integrated into release/v3.8.3 * feat(dashboard): risk notice modal for sensitive providers (#2633) Integrated into release/v3.8.3 * fix(reasoning): extend reasoning_content injection to Kimi K2 and other replay models (#2639) Integrated into release/v3.8.3 * fix(cli): Linux autostart via systemd user service (fixes #2627) (#2635) Integrated into release/v3.8.3 * Refactor/providers free tier (#2640) Integrated into release/v3.8.3 * fix(tests): remove duplicate assertion in schema coercion & fix(cli): ignore system vars in env check * fix(combo): preserve omniModel tag in streaming output for round-trip context pinning (#2646) Integrated into release/v3.8.3 * feat(dashboard): media providers pages + Web Fetch category (#2645) Integrated into release/v3.8.3 * Feature provider adapta org com tutorial de conexão em modal (#2643) Integrated into release/v3.8.3 * fix(rtk): skip content-based filter matching for non-shell tool results (#2642) Integrated into release/v3.8.3 * fix(translator): enable Claude extended thinking for Copilot Responses-API requests (#2647) Integrated into release/v3.8.3 * feat(dashboard): add search and filters to /dashboard/api-manager (#2641) Integrated into release/v3.8.3 * feat(dashboard): risk notice modal for sensitive providers (#2638) Integrated into release/v3.8.3 * feat(dashboard): mini-playground inline (Phase 4) (#2648) Integrated into release/v3.8.3 * fix(settings): fix Require Login modal Cancel button text and dismissal (#2649) Integrated into release/v3.8.3 * feat(combos): universal context handoff for cross-model conversation continuity (#2653) Integrated into release/v3.8.3 * chore(release): bump to v3.8.3 — changelog, docs, version sync * feat(i18n): complete zh-CN translations for 1220 missing keys (#2655) Integrated into release/v3.8.3 * chore(release): include electron package changes in v3.8.3 * docs(changelog): integrate PR #2655 into v3.8.3 * feat(i18n): translate 377 additional zh-CN entries (81 new keys + 296 same-as-en) (#2659) Integrated into release/v3.8.3 * feat(dashboard): add Cmd+K / Ctrl+K command palette for sidebar navigation (#2656) Integrated into release/v3.8.3 * docs: update changelog for PR integrations under v3.8.3 * feat(cli): integrate native updates, autostart and headless CLI mode (#2662) Integrated into release/v3.8.3 * fix(proxy): save dashboard custom proxies in registry (#2661) Integrated into release/v3.8.3 * feat(dashboard): chat-first test slide-over (Option A) (#2660) Integrated into release/v3.8.3 * docs: update changelog with Batch 2 PR merges for v3.8.3 * fix: add xhigh+max to effortLevel schema; add opencode-plugin publish job (#2666) Integrated into release/v3.8.3 * docs: update changelog with Batch 3 PR #2666 merge for v3.8.3 * feat(quota+providers): card-grid layout, provider group headers, Codex race fix (#2667) Integrated into release/v3.8.3 * feat(dashboard): real-time live WebSocket monitoring (#2668) Integrated into release/v3.8.3 * feat(copilot): AI assistant with CodeGraph + CLI + knowledge base (#2669) Integrated into release/v3.8.3 * feat(pipeline): pre-request middleware hooks (#2670) Integrated into release/v3.8.3 * feat(resilience): credential health check + adaptive circuit breaker (#2671) Integrated into release/v3.8.3 * feat(playground): combo routing visual simulator (#2672) Integrated into release/v3.8.3 * feat(auth): API key groups with model-level permissions (#2673) Integrated into release/v3.8.3 * feat(pwa): enhanced manifest + push notification support (#2674) Integrated into release/v3.8.3 * feat(proxy): serverless relay endpoints with rate limiting (#2675) Integrated into release/v3.8.3 * docs(changelog): update changelog for PRs 2667-2675 & fix: resolve typescript compile-time errors * fix(db): remove transactions from migrations Remove explicit transaction wrappers from recent migrations and correct the API key groups migration metadata. Also fix codegraph path resolution for ESM environments and refresh generated fumadocs source output. --------- Co-authored-by: Ömer Vehbe <ovehbe@gmail.com> Co-authored-by: Cursor <cursoragent@cursor.com> Co-authored-by: Mr. Meowgi <mr@meowgi.dev> Co-authored-by: Hernan Javier Ardila Sanchez <hjasgr@gmail.com> Co-authored-by: amogus22877769 <y.lev357@gmail.com> Co-authored-by: Halil Tezcan KARABULUT <info@hlltzcnkb.com> Co-authored-by: Tentoxa <53821604+Tentoxa@users.noreply.github.com> Co-authored-by: HALDRO <121296348+HALDRO@users.noreply.github.com> Co-authored-by: Paijo <14921983+oyi77@users.noreply.github.com> Co-authored-by: janeza2 <49841619+janeza2@users.noreply.github.com> Co-authored-by: df4p <38404+df4p@users.noreply.github.com> Co-authored-by: ivan-mezentsev <ivan@mezentsev.me> Co-authored-by: Chewji <126886556+Chewji9875@users.noreply.github.com> Co-authored-by: L-aros <107354918+L-aros@users.noreply.github.com> Co-authored-by: M.M <mr.maatoug@gmail.com> Co-authored-by: Benson K B <bensonkbmca@gmail.com> Co-authored-by: terence71-glitch <mcdowellterence71@gmail.com>
353 lines
13 KiB
TypeScript
353 lines
13 KiB
TypeScript
// @ts-nocheck
|
|
import test from "node:test";
|
|
import assert from "node:assert/strict";
|
|
|
|
const { T3ChatWebExecutor, T3_CHAT_BASE } = await import("../../open-sse/executors/t3-chat-web.ts");
|
|
const { getExecutor, hasSpecializedExecutor } = await import("../../open-sse/executors/index.ts");
|
|
|
|
// NOTE: These tests use mocked HTTP transport. The COMPLETION_URL constant in
|
|
// t3-chat-web.ts is a best-guess placeholder. Tests verify executor behavior
|
|
// and OpenAI output format, not the specific endpoint URL.
|
|
// TODO(post-devtools-capture): Update mock URL matchers once endpoint is confirmed.
|
|
|
|
// ─── Registration ────────────────────────────────────────────────────────
|
|
|
|
test("hasSpecializedExecutor returns true for t3-web", () => {
|
|
assert.ok(hasSpecializedExecutor("t3-web"));
|
|
});
|
|
|
|
test("hasSpecializedExecutor returns true for t3chat alias", () => {
|
|
assert.ok(hasSpecializedExecutor("t3chat"));
|
|
});
|
|
|
|
test("getExecutor returns T3ChatWebExecutor for t3-web", () => {
|
|
const exec = getExecutor("t3-web");
|
|
assert.ok(exec instanceof T3ChatWebExecutor);
|
|
});
|
|
|
|
test("getExecutor returns T3ChatWebExecutor for t3chat alias", () => {
|
|
const exec = getExecutor("t3chat");
|
|
assert.ok(exec instanceof T3ChatWebExecutor);
|
|
});
|
|
|
|
test("T3ChatWebExecutor.getProvider() returns t3-web", () => {
|
|
assert.equal(new T3ChatWebExecutor().getProvider(), "t3-web");
|
|
});
|
|
|
|
// ─── Credential validation ───────────────────────────────────────────────
|
|
|
|
test("execute returns 400 with empty credentials", async () => {
|
|
const executor = new T3ChatWebExecutor();
|
|
const result = await executor.execute({
|
|
model: "gpt-4o",
|
|
body: { messages: [{ role: "user", content: "hi" }] },
|
|
stream: true,
|
|
credentials: {},
|
|
signal: AbortSignal.timeout(5000),
|
|
});
|
|
assert.equal(result.response.status, 400);
|
|
const body = JSON.parse(await result.response.text());
|
|
assert.ok(body.error?.message, "Should have error message");
|
|
});
|
|
|
|
test("execute returns 400 with cookies present but convexSessionId missing", async () => {
|
|
const executor = new T3ChatWebExecutor();
|
|
const result = await executor.execute({
|
|
model: "gpt-4o",
|
|
body: { messages: [{ role: "user", content: "hi" }] },
|
|
stream: true,
|
|
credentials: { cookies: "some-cookie=value" },
|
|
signal: AbortSignal.timeout(5000),
|
|
});
|
|
assert.equal(result.response.status, 400);
|
|
const body = JSON.parse(await result.response.text());
|
|
assert.ok(body.error?.message?.length > 0, "Should have error message");
|
|
});
|
|
|
|
test("execute returns 400 with convexSessionId present but cookies missing", async () => {
|
|
const executor = new T3ChatWebExecutor();
|
|
const result = await executor.execute({
|
|
model: "gpt-4o",
|
|
body: { messages: [{ role: "user", content: "hi" }] },
|
|
stream: true,
|
|
credentials: { convexSessionId: "session-abc-123" },
|
|
signal: AbortSignal.timeout(5000),
|
|
});
|
|
assert.equal(result.response.status, 400);
|
|
const body = JSON.parse(await result.response.text());
|
|
assert.ok(body.error?.message?.length > 0, "Should have error message");
|
|
});
|
|
|
|
test("execute returns 400 with both fields as empty strings", async () => {
|
|
const executor = new T3ChatWebExecutor();
|
|
const result = await executor.execute({
|
|
model: "gpt-4o",
|
|
body: { messages: [{ role: "user", content: "hi" }] },
|
|
stream: true,
|
|
credentials: { cookies: "", convexSessionId: "" },
|
|
signal: AbortSignal.timeout(5000),
|
|
});
|
|
assert.equal(result.response.status, 400);
|
|
});
|
|
|
|
// ─── testConnection ──────────────────────────────────────────────────────
|
|
|
|
test("testConnection returns false with empty credentials", async () => {
|
|
const executor = new T3ChatWebExecutor();
|
|
const result = await executor.testConnection({});
|
|
assert.equal(result, false);
|
|
});
|
|
|
|
test("testConnection returns false when convexSessionId is missing", async () => {
|
|
const executor = new T3ChatWebExecutor();
|
|
const result = await executor.testConnection({ cookies: "some-cookie=value" });
|
|
assert.equal(result, false);
|
|
});
|
|
|
|
// ─── API flow helpers ─────────────────────────────────────────────────────
|
|
|
|
function makeValidCreds() {
|
|
return {
|
|
cookies: "t3-auth=session-token-xyz; other=value",
|
|
convexSessionId: "convex-session-id-abc123",
|
|
};
|
|
}
|
|
|
|
function mockT3ChatSSEResponse(chunks: string[]) {
|
|
const original = globalThis.fetch;
|
|
const calls: Array<{
|
|
url: string;
|
|
method: string;
|
|
headers: Record<string, string>;
|
|
body: unknown;
|
|
}> = [];
|
|
|
|
globalThis.fetch = async (url, opts) => {
|
|
const urlStr = typeof url === "string" ? url : url.toString();
|
|
calls.push({
|
|
url: urlStr,
|
|
method: opts?.method ?? "GET",
|
|
headers: (opts?.headers as Record<string, string>) ?? {},
|
|
body: opts?.body ? JSON.parse(opts.body as string) : null,
|
|
});
|
|
|
|
const encoder = new TextEncoder();
|
|
const sseData = chunks.map((c) => `data: ${c}\n\n`).join("");
|
|
return new Response(encoder.encode(sseData), {
|
|
status: 200,
|
|
headers: { "Content-Type": "text/event-stream" },
|
|
});
|
|
};
|
|
|
|
return {
|
|
calls,
|
|
restore: () => {
|
|
globalThis.fetch = original;
|
|
},
|
|
};
|
|
}
|
|
|
|
// ─── Mocked streaming flow ───────────────────────────────────────────────
|
|
|
|
test("execute: POSTs to completion URL with Cookie containing convex-session-id (streaming)", async () => {
|
|
const sseChunks = [
|
|
JSON.stringify({ text: "Hello" }),
|
|
JSON.stringify({ text: " world" }),
|
|
JSON.stringify({ done: true }),
|
|
];
|
|
const mock = mockT3ChatSSEResponse(sseChunks);
|
|
|
|
try {
|
|
const executor = new T3ChatWebExecutor();
|
|
const result = await executor.execute({
|
|
model: "gpt-4o",
|
|
body: { messages: [{ role: "user", content: "Say hello" }] },
|
|
stream: true,
|
|
credentials: makeValidCreds(),
|
|
signal: AbortSignal.timeout(10000),
|
|
});
|
|
|
|
assert.ok(result.response.ok, `Expected 200, got ${result.response.status}`);
|
|
assert.equal(mock.calls.length, 1, "Should make exactly one fetch call");
|
|
|
|
// Verify Cookie header contains convex-session-id (confirmed from live capture:
|
|
// t3.chat sets convex-session-id as a cookie, sent in Cookie header)
|
|
const sentHeaders = mock.calls[0].headers;
|
|
assert.ok(sentHeaders["Cookie"]?.length > 0, "Should send Cookie header");
|
|
assert.ok(
|
|
sentHeaders["Cookie"]?.includes("convex-session-id="),
|
|
"Cookie header should contain convex-session-id"
|
|
);
|
|
} finally {
|
|
mock.restore();
|
|
}
|
|
});
|
|
|
|
test("execute: streaming response contains content, finish_reason stop, and [DONE]", async () => {
|
|
const sseChunks = [
|
|
JSON.stringify({ text: "Hello" }),
|
|
JSON.stringify({ text: " there" }),
|
|
"[DONE]",
|
|
];
|
|
const mock = mockT3ChatSSEResponse(sseChunks);
|
|
|
|
try {
|
|
const executor = new T3ChatWebExecutor();
|
|
const result = await executor.execute({
|
|
model: "gpt-4o",
|
|
body: { messages: [{ role: "user", content: "hi" }] },
|
|
stream: true,
|
|
credentials: makeValidCreds(),
|
|
signal: AbortSignal.timeout(10000),
|
|
});
|
|
|
|
assert.ok(result.response.ok);
|
|
assert.equal(result.response.headers.get("content-type"), "text/event-stream");
|
|
|
|
const text = await result.response.text();
|
|
assert.ok(text.includes('"content"'), "Should contain content field");
|
|
assert.ok(text.includes('"finish_reason":"stop"'), "Should have finish_reason stop");
|
|
assert.ok(text.includes("[DONE]"), "Should end with [DONE]");
|
|
} finally {
|
|
mock.restore();
|
|
}
|
|
});
|
|
|
|
test("execute: non-streaming response has choices[0].message.content", async () => {
|
|
const sseChunks = [JSON.stringify({ text: "Hello non-stream" }), "[DONE]"];
|
|
const mock = mockT3ChatSSEResponse(sseChunks);
|
|
|
|
try {
|
|
const executor = new T3ChatWebExecutor();
|
|
const result = await executor.execute({
|
|
model: "gpt-4o",
|
|
body: { messages: [{ role: "user", content: "hi" }] },
|
|
stream: false,
|
|
credentials: makeValidCreds(),
|
|
signal: AbortSignal.timeout(10000),
|
|
});
|
|
|
|
assert.ok(result.response.ok);
|
|
const json = JSON.parse(await result.response.text());
|
|
assert.equal(json.object, "chat.completion");
|
|
assert.ok(Array.isArray(json.choices) && json.choices.length > 0, "Should have choices");
|
|
assert.equal(json.choices[0].message.role, "assistant");
|
|
assert.ok(typeof json.choices[0].message.content === "string", "Should have string content");
|
|
} finally {
|
|
mock.restore();
|
|
}
|
|
});
|
|
|
|
// ─── Error handling ──────────────────────────────────────────────────────
|
|
|
|
test("execute: upstream 401 → returns 401 with session expired message", async () => {
|
|
const original = globalThis.fetch;
|
|
globalThis.fetch = async () => new Response("Unauthorized", { status: 401 });
|
|
|
|
try {
|
|
const executor = new T3ChatWebExecutor();
|
|
const result = await executor.execute({
|
|
model: "gpt-4o",
|
|
body: { messages: [{ role: "user", content: "hi" }] },
|
|
stream: true,
|
|
credentials: makeValidCreds(),
|
|
signal: AbortSignal.timeout(5000),
|
|
});
|
|
assert.equal(result.response.status, 401);
|
|
const body = JSON.parse(await result.response.text());
|
|
assert.ok(
|
|
body.error?.message?.toLowerCase().includes("session") ||
|
|
body.error?.message?.toLowerCase().includes("expired") ||
|
|
body.error?.message?.toLowerCase().includes("unauthorized"),
|
|
"Should mention session/expired/unauthorized"
|
|
);
|
|
} finally {
|
|
globalThis.fetch = original;
|
|
}
|
|
});
|
|
|
|
test("execute: upstream 403 → returns 403 with descriptive message", async () => {
|
|
const original = globalThis.fetch;
|
|
globalThis.fetch = async () => new Response("Forbidden", { status: 403 });
|
|
|
|
try {
|
|
const executor = new T3ChatWebExecutor();
|
|
const result = await executor.execute({
|
|
model: "gpt-4o",
|
|
body: { messages: [{ role: "user", content: "hi" }] },
|
|
stream: true,
|
|
credentials: makeValidCreds(),
|
|
signal: AbortSignal.timeout(5000),
|
|
});
|
|
assert.equal(result.response.status, 403);
|
|
const body = JSON.parse(await result.response.text());
|
|
assert.ok(body.error?.message?.length > 0, "Should have error message");
|
|
} finally {
|
|
globalThis.fetch = original;
|
|
}
|
|
});
|
|
|
|
test("execute: upstream 429 → returns 429", async () => {
|
|
const original = globalThis.fetch;
|
|
globalThis.fetch = async () => new Response("Too Many Requests", { status: 429 });
|
|
|
|
try {
|
|
const executor = new T3ChatWebExecutor();
|
|
const result = await executor.execute({
|
|
model: "gpt-4o",
|
|
body: { messages: [{ role: "user", content: "hi" }] },
|
|
stream: true,
|
|
credentials: makeValidCreds(),
|
|
signal: AbortSignal.timeout(5000),
|
|
});
|
|
assert.equal(result.response.status, 429);
|
|
} finally {
|
|
globalThis.fetch = original;
|
|
}
|
|
});
|
|
|
|
test("execute: AbortSignal abort → returns 499", async () => {
|
|
const executor = new T3ChatWebExecutor();
|
|
const controller = new AbortController();
|
|
controller.abort();
|
|
|
|
const result = await executor.execute({
|
|
model: "gpt-4o",
|
|
body: { messages: [{ role: "user", content: "hi" }] },
|
|
stream: true,
|
|
credentials: makeValidCreds(),
|
|
signal: controller.signal,
|
|
});
|
|
|
|
// AbortError before fetch is even called returns 499 or 400 from creds check;
|
|
// with valid creds and aborted signal the fetch throws AbortError → 499.
|
|
assert.ok(result.response.status >= 400, "Should indicate an error status");
|
|
});
|
|
|
|
// ─── Error sanitization ──────────────────────────────────────────────────
|
|
|
|
test("execute: error responses do not include raw stack traces", async () => {
|
|
const original = globalThis.fetch;
|
|
globalThis.fetch = async () => {
|
|
throw new Error("Something went wrong\n at /home/user/app/executor.ts:42:5");
|
|
};
|
|
|
|
try {
|
|
const executor = new T3ChatWebExecutor();
|
|
const result = await executor.execute({
|
|
model: "gpt-4o",
|
|
body: { messages: [{ role: "user", content: "hi" }] },
|
|
stream: true,
|
|
credentials: makeValidCreds(),
|
|
signal: AbortSignal.timeout(5000),
|
|
});
|
|
|
|
assert.ok(result.response.status >= 400, "Should return error status");
|
|
const body = JSON.parse(await result.response.text());
|
|
const msg = body.error?.message ?? "";
|
|
assert.ok(!msg.includes("at /"), "Should not expose raw stack trace paths");
|
|
} finally {
|
|
globalThis.fetch = original;
|
|
}
|
|
});
|