mirror of
https://github.com/diegosouzapw/OmniRoute.git
synced 2026-08-04 22:32:12 +03:00
* chore(release): continue v3.8.25 development cycle after main code-sync (r5) main fast-forwarded to release/v3.8.25 (#3863): unblocked Build+Docker via #3864, plus #3837 (mimocode proxy) and #3862 (trivy bump). This marker re-opens the umbrella PR for further v3.8.25 work. No version bump. * fix(db): persist the Keep-latest-backups retention setting (#3834) (#3867) * fix(oauth): clear GitLab Duo setup message instead of 500 (#3861) (#3868) * test(oauth): prove refresh_token preserved on real gemini-cli/antigravity dispatch (#3850) (#3869) * feat(compression-ui): unified compression config UI — per-engine pages + combos editor + menu + WS default-on (#3860) Integrated into release/v3.8.25 — feat(compression-ui): unified compression configuration UI (Compression Hub + per-engine Lite/Aggressive/Ultra pages + combos editor + sidebar entry + live-WS default-on). File-size re-baselined for sidebarVisibility.ts/chatCore.ts growth; orphan ws test relocated to a collected path. * docs(changelog): complete the v3.8.25 release notes + credit all contributors Audited every commit since v3.8.24 and filled the gaps the [3.8.25] section was missing: a New Features section (compression engines + Compression Studios #3848, compression UI #3860, injection-guard #3857, kiro discovery #3836, Veo #3839, mimocode proxy #3837, Arena ELO flag #3821), 9 more Fixed entries (#3811/#3807/#3759/#3849/#3838/#3835/#3814/#3820/#3819), a Security section (CCR IDOR #3859, supply-chain #3824), and an Internal/Quality section. Every contributor and issue reporter is now credited. * docs(changelog): restore + complete the v3.8.25 release notes Re-adds CHANGELOG.md (a prior server-side commit accidentally dropped it) with the complete, audited [3.8.25] section: New Features, the full Fixed list, Security & Hardening, and Internal/Quality — every contributor and issue reporter credited. * chore(release): finalize v3.8.25 — reconcile CHANGELOG + i18n mirrors, document OMNIROUTE_MAX_PENDING_MIGRATIONS, green the unit suite Release-gate reconciliation for v3.8.25: - CHANGELOG: dated 2026-06-14, linked #3826, rolled up file-size re-baselines (#3823/#3833), recorded the test-greening; re-synced all 41 i18n CHANGELOG mirrors. - Documented OMNIROUTE_MAX_PENDING_MIGRATIONS (#3416) in .env.example + ENVIRONMENT.md. - Greened the unit suite (was merged red on 4 CI shards): aligned 10 stale tests to this cycle's intended behavior (#3838/#3822/#3501/SOCKS5/Vertex-Express/Antigravity) and the same-provider 503 fall-through test; de-flaked the compression benchmark reproducibility and ServiceSupervisor crash tests. No production code changed. * ci(security): clear OpenSSF Scorecard code-scanning noise + harden workflow token permissions The Security tab held 155 open alerts, ALL from the advisory OpenSSF Scorecard tool (#3824) — supply-chain/posture scores, not code vulnerabilities — which drowned out real CodeQL findings. - scorecard.yml: stop uploading SARIF to the code-scanning tab (drop the upload-sarif step + the now-unused security-events: write). The run still produces the OpenSSF badge (publish_results) and a downloadable SARIF artifact. - TokenPermissions hardening (the high-severity, genuinely-valuable subset): set each workflow's top-level token to read-only and grant the exact writes at the job level that needs them — npm-publish (id-token/packages on publish jobs), docker-publish (packages on build), electron-release (contents on build/release, id-token/packages on publish-npm), build-fork (packages on build), claude (empty top-level; job grants its own). The 155 existing alerts were dismissed. Not adopting repo-wide SHA-pinning (143 PinnedDependencies advisories) — declined. * test(integration): align stale wiring/socks5 integration tests to this cycle's behavior These were red on the CI Integration job (pre-existing). No production code changed: - integration-wiring: the combos page no longer renders a per-page EmailPrivacyToggle (#3822 consolidated it into Settings → Appearance); the provider-detail test-result masking and upstream-proxy copy moved to decomposed components (#3501 BatchTestResultsModal / UpstreamProxyCard) — assertions now read the owning files. - api-routes-critical: SOCKS5 is now enabled by default (opt-out), so the disabled- rejection test must set ENABLE_SOCKS5_PROXY=false explicitly (an unset env now means enabled). (The ~32 live-Gemini integration tests are gated on OMNIROUTE_API_KEY and skip in CI; they only 'fail' locally when that key is present without a running server.)
169 lines
5.5 KiB
TypeScript
169 lines
5.5 KiB
TypeScript
import test from "node:test";
|
|
import assert from "node:assert/strict";
|
|
import { readFile } from "node:fs/promises";
|
|
import { join } from "node:path";
|
|
|
|
const sidebarVisibility = await import("../../src/shared/constants/sidebarVisibility.ts");
|
|
const repoRoot = join(import.meta.dirname, "../..");
|
|
|
|
function sectionItems(sectionId: string) {
|
|
const section = sidebarVisibility.SIDEBAR_SECTIONS.find(
|
|
(candidate) => candidate.id === sectionId
|
|
);
|
|
assert.ok(section, `expected ${sectionId} sidebar section to exist`);
|
|
return sidebarVisibility.getSectionItems(section);
|
|
}
|
|
|
|
test("system sidebar items: monitoring has activity at top then logs/audit/system groups", () => {
|
|
const items = sectionItems("monitoring");
|
|
assert.deepEqual(
|
|
items.map((item) => item.id),
|
|
[
|
|
"activity",
|
|
"logs",
|
|
"logs-proxy",
|
|
"logs-console",
|
|
"audit",
|
|
"audit-mcp",
|
|
"audit-a2a",
|
|
"health",
|
|
"runtime",
|
|
]
|
|
);
|
|
});
|
|
|
|
test("primary sidebar items place limits after cache", () => {
|
|
const items = sectionItems("omni-proxy");
|
|
assert.deepEqual(
|
|
items.map((item) => item.id),
|
|
[
|
|
"endpoints",
|
|
"api-manager",
|
|
"providers",
|
|
"embedded-services",
|
|
"combos",
|
|
"combos-live",
|
|
"quota",
|
|
"costs-quota-share",
|
|
"context-settings",
|
|
"context-caveman",
|
|
"context-rtk",
|
|
"context-headroom",
|
|
"context-session-dedup",
|
|
"context-ccr",
|
|
"context-llmlingua",
|
|
"context-lite",
|
|
"context-aggressive",
|
|
"context-ultra",
|
|
"context-combos",
|
|
"compression-studio",
|
|
"cli-code",
|
|
"cli-agents",
|
|
"acp-agents",
|
|
"cloud-agents",
|
|
"agent-bridge",
|
|
"traffic-inspector",
|
|
"api-endpoints",
|
|
"webhooks",
|
|
"proxy",
|
|
]
|
|
);
|
|
});
|
|
|
|
test("context sidebar section sits between primary and cli", () => {
|
|
const sectionIds = sidebarVisibility.SIDEBAR_SECTIONS.map((section) => section.id);
|
|
assert.deepEqual(sectionIds.slice(0, 4), ["home", "omni-proxy", "analytics", "costs"]);
|
|
|
|
const items = sectionItems("omni-proxy");
|
|
assert.deepEqual(
|
|
items
|
|
.filter((item) => item.id.startsWith("context-"))
|
|
.map((item) => ({ id: item.id, href: item.href })),
|
|
[
|
|
{ id: "context-settings", href: "/dashboard/context/settings" },
|
|
{ id: "context-caveman", href: "/dashboard/context/caveman" },
|
|
{ id: "context-rtk", href: "/dashboard/context/rtk" },
|
|
{ id: "context-headroom", href: "/dashboard/context/headroom" },
|
|
{ id: "context-session-dedup", href: "/dashboard/context/session-dedup" },
|
|
{ id: "context-ccr", href: "/dashboard/context/ccr" },
|
|
{ id: "context-llmlingua", href: "/dashboard/context/llmlingua" },
|
|
{ id: "context-lite", href: "/dashboard/context/lite" },
|
|
{ id: "context-aggressive", href: "/dashboard/context/aggressive" },
|
|
{ id: "context-ultra", href: "/dashboard/context/ultra" },
|
|
{ id: "context-combos", href: "/dashboard/context/combos" },
|
|
]
|
|
);
|
|
});
|
|
|
|
test("sidebar visibility drops stale entries from saved settings", () => {
|
|
const allSidebarItemIds = sidebarVisibility.SIDEBAR_SECTIONS.flatMap((section) =>
|
|
sidebarVisibility.getSectionItems(section).map((item) => item.id)
|
|
);
|
|
|
|
assert.equal(
|
|
(sidebarVisibility.HIDEABLE_SIDEBAR_ITEM_IDS as readonly string[]).includes("auto-combo"),
|
|
false
|
|
);
|
|
assert.equal((allSidebarItemIds as string[]).includes("auto-combo"), false);
|
|
assert.deepEqual(sidebarVisibility.normalizeHiddenSidebarItems(["auto-combo" as any, "logs"]), [
|
|
"logs",
|
|
]);
|
|
});
|
|
|
|
test("help sidebar exposes changelog after docs and issues", () => {
|
|
const items = sectionItems("help");
|
|
assert.deepEqual(
|
|
items.map((item) => ({
|
|
id: item.id,
|
|
href: item.href,
|
|
i18nKey: item.i18nKey,
|
|
})),
|
|
[
|
|
{ id: "docs", href: "/docs", i18nKey: "docs" },
|
|
{
|
|
id: "issues",
|
|
href: "https://github.com/diegosouzapw/OmniRoute/issues",
|
|
i18nKey: "issues",
|
|
},
|
|
{ id: "changelog", href: "/dashboard/changelog", i18nKey: "changelog" },
|
|
]
|
|
);
|
|
assert.equal(sidebarVisibility.HIDEABLE_SIDEBAR_ITEM_IDS.includes("changelog"), true);
|
|
});
|
|
|
|
test("plugins (marketplace) has a discoverable sidebar entry (#3656 follow-up)", async () => {
|
|
const items = sectionItems("agentic-features");
|
|
const plugins = items.find((item) => item.id === "plugins");
|
|
assert.ok(plugins, "expected a plugins item in the agentic-features section");
|
|
assert.equal(plugins.href, "/dashboard/plugins");
|
|
assert.equal(sidebarVisibility.HIDEABLE_SIDEBAR_ITEM_IDS.includes("plugins"), true);
|
|
|
|
// It must be a real page (plugin manager + marketplace tab), not a legacy redirect stub.
|
|
const pluginsPage = await readFile(
|
|
join(repoRoot, "src/app/(dashboard)/dashboard/plugins/page.tsx"),
|
|
"utf8"
|
|
);
|
|
assert.doesNotMatch(pluginsPage, /^\s*redirect\(/m);
|
|
assert.match(pluginsPage, /marketplace/i);
|
|
});
|
|
|
|
test("legacy dashboard routes redirect to their consolidated surfaces", async () => {
|
|
const autoComboPage = await readFile(
|
|
join(repoRoot, "src/app/(dashboard)/dashboard/auto-combo/page.tsx"),
|
|
"utf8"
|
|
);
|
|
const usagePage = await readFile(
|
|
join(repoRoot, "src/app/(dashboard)/dashboard/usage/page.tsx"),
|
|
"utf8"
|
|
);
|
|
|
|
assert.match(autoComboPage, /redirect\("\/dashboard\/combos\?filter=intelligent"\)/);
|
|
assert.match(usagePage, /redirect\("\/dashboard\/logs"\)/);
|
|
|
|
const compressionPage = await readFile(
|
|
join(repoRoot, "src/app/(dashboard)/dashboard/compression/page.tsx"),
|
|
"utf8"
|
|
);
|
|
assert.match(compressionPage, /redirect\("\/dashboard\/context\/caveman"\)/);
|
|
});
|