Diego Rodrigues de Sa e Souza 20c31493af feat(plugins): plugins framework + per-API-key disable-non-public-models (#3041) ...

Integrates two community contributions into release/v3.8.8 with security hardening and conflict resolution.

- **Plugins framework** (#2913 — thanks @oyi77): hooks + registry unification, plugin SDK (`definePlugin`), worker-thread sandbox, per-plugin hook rate limiting, SHA-256 integrity verification, semver-gated upgrade, and execution analytics. Plugin routes are loopback-only (`isLocalOnlyPath`); `child_process` exec is opt-in via `OMNIROUTE_PLUGINS_ALLOW_EXEC` (default off).
- **API key option: disable non-published models** (#3017 — thanks @androw): a per-key flag restricting the key to discovered public models (combos / `auto/*` / `qtSd/*` routing still allowed).

Hardening applied during integration: migration renumber (089/090/091), `/api/plugins` LOCAL_ONLY route-guard classification (closes the plugin-RCE vector), atomic install/upgrade with path containment, `O_EXCL` tmp-file creation (TOCTOU), rate-limit-map eviction, `validatePluginConfig` on configure, `buildErrorBody` on all plugin error paths. 246/246 tests; typecheck / cycles / docs-sync clean.

Co-authored-by: oyi77 <14921983+oyi77@users.noreply.github.com>
Co-authored-by: Nicolas Lorin <androw95220@gmail.com>

2026-06-01 15:43:55 -03:00

..

services

Release v3.8.4 (#2678)

2026-05-26 23:51:47 -03:00

_chatPipelineHarness.ts

Release v3.8.4 (#2678)

2026-05-26 23:51:47 -03:00

agent-bridge-bypass-flow.test.ts

test(api): integration tests for agent-bridge routes (F5)

2026-05-28 00:24:48 -03:00

agent-bridge-cert-flow.test.ts

test(api): integration tests for agent-bridge routes (F5)

2026-05-28 00:24:48 -03:00

agent-bridge-mappings.test.ts

test(api): integration tests for agent-bridge routes (F5)

2026-05-28 00:24:48 -03:00

agent-bridge-routes.test.ts

test(api): integration tests for agent-bridge routes (F5)

2026-05-28 00:24:48 -03:00

agent-skills-content.test.ts

feat(agent-skills): document rotate + metrics endpoints in omni-providers (GAP-E)

2026-05-28 14:24:02 -03:00

agent-skills-discovery.test.ts

test(agent-skills): integration tests for discovery + content + MCP + A2A

2026-05-28 01:09:32 -03:00

all-statuses-route.test.ts

feat(cli-tools): add /api/cli-tools/all-statuses batch endpoint + mtime cache + DRY checkToolConfigStatus (plan 14 F2)

2026-05-27 21:43:44 -03:00

api-keys.test.ts

Release v3.7.5 (#1753)

2026-04-30 01:27:03 -03:00

api-routes-critical.test.ts

Release v3.7.6 (#1803)

2026-04-30 14:08:50 -03:00

audit-log-level-filter.test.ts

test(audit): cover timeline helpers + audit-log level filter + activity page redirect (B/F4)

2026-05-27 22:01:23 -03:00

batch-e2e-rate-limit.test.ts

refactor(scripts): organize into build/dev/check/docs/i18n/ad-hoc subfolders

2026-05-13 10:14:25 -03:00

batch-processor-escaping.test.ts

Release v3.8.0 (#2073)

2026-05-10 00:55:06 -03:00

chat-pipeline.test.ts

fix(codex): apply global service tiers to combo request bodies

2026-05-27 09:48:17 -03:00

chatcore-compression-integration.test.ts

Release v3.8.2 (#2503)

2026-05-23 01:46:59 -03:00

cli-settings-deepseek-tui.test.ts

feat(cli-tools): add settings handlers for new "custom" configType tools (plan 14 F3)

2026-05-27 22:13:59 -03:00

cli-settings-forge.test.ts

feat(cli-tools): add settings handlers for new "custom" configType tools (plan 14 F3)

2026-05-27 22:13:59 -03:00

cli-settings-jcode.test.ts

feat(cli-tools): add settings handlers for new "custom" configType tools (plan 14 F3)

2026-05-27 22:13:59 -03:00

cli-settings-pi.test.ts

feat(cli-tools): add settings handlers for new "custom" configType tools (plan 14 F3)

2026-05-27 22:13:59 -03:00

cli-settings-smelt.test.ts

feat(cli-tools): add settings handlers for new "custom" configType tools (plan 14 F3)

2026-05-27 22:13:59 -03:00

combo-provider-exhaustion.test.ts

fix: allow rate-limited provider connections after transient 429s (with unit & integration tests)

2026-05-27 09:49:24 -03:00

combo-routing-e2e.test.ts

fix(i18n): restore missing UI translations and sync locales (#2767)

2026-05-27 01:54:50 -03:00

compression-pipeline.test.ts

fix(analytics): avoid persisting inferred API key ownership

2026-04-30 20:31:00 -03:00

cursor-e2e.test.ts

node dependency updates (#2259)

2026-05-14 20:20:54 -03:00

files-api.test.ts

Release v3.8.0 (#2073)

2026-05-10 00:55:06 -03:00

integration-wiring.test.ts

chore: remove audit logs tab from logs page

2026-05-30 09:11:17 -03:00

manifest-routing.test.ts

Release v3.8.0 (#2073)

2026-05-10 00:55:06 -03:00

memory-embedding-providers.test.ts

feat(memory): add F6 backend REST routes for memory engine redesign (plan 21)

2026-05-28 10:53:55 -03:00

memory-engine-status.test.ts

feat(memory): add F6 backend REST routes for memory engine redesign (plan 21)

2026-05-28 10:53:55 -03:00

memory-pipeline.test.ts

chore: apply PR 1495 and update changelog

2026-04-21 21:12:29 -03:00

memory-reindex.test.ts

feat(memory): add F6 backend REST routes for memory engine redesign (plan 21)

2026-05-28 10:53:55 -03:00

memory-retrieve-preview.test.ts

feat(memory): add F6 backend REST routes for memory engine redesign (plan 21)

2026-05-28 10:53:55 -03:00

memory-route-put.test.ts

feat(memory): add F6 backend REST routes for memory engine redesign (plan 21)

2026-05-28 10:53:55 -03:00

memory-summarize.test.ts

feat(memory): add F6 backend REST routes for memory engine redesign (plan 21)

2026-05-28 10:53:55 -03:00

modelsDevSync.test.ts

chore(release): v3.6.6 — Stabilization (#1241)

2026-04-16 05:26:17 -03:00

performance-regression.test.ts

fix(i18n): restore missing UI translations and sync locales (#2767)

2026-05-27 01:54:50 -03:00

pipeline-combo.test.ts

Release v3.8.2 (#2503)

2026-05-23 01:46:59 -03:00

playground-improve-prompt.test.ts

test(playground): integration tests for improve-prompt and presets

2026-05-27 23:08:09 -03:00

playground-presets-crud.test.ts

test(playground): integration tests for improve-prompt and presets

2026-05-27 23:08:09 -03:00

playground-presets-zod.test.ts

test(playground): integration tests for improve-prompt and presets

2026-05-27 23:08:09 -03:00

plugins-lifecycle.test.ts

feat(plugins): plugins framework + per-API-key disable-non-public-models (#3041)

2026-06-01 15:43:55 -03:00

proxy-pipeline.test.ts

refactor(core): strengthen typing and normalize auth and model flows

2026-05-10 20:48:03 -03:00

proxy-registry-flow.test.ts

Release v3.8.4 (#2678)

2026-05-26 23:51:47 -03:00

qdrant-routes.test.ts

feat(memory): add F6 backend REST routes for memory engine redesign (plan 21)

2026-05-28 10:53:55 -03:00

quota-plans-crud.test.ts

fix(quota,i18n): close B26 audit gap on DELETE plan + pt-BR translation

2026-05-28 16:03:30 -03:00

quota-pools-crud.test.ts

test(integration): cover quota REST routes + error sanitization (B/F8)

2026-05-28 07:50:03 -03:00

quota-pools-usage.test.ts

test(integration): cover quota REST routes + error sanitization (B/F8)

2026-05-28 07:50:03 -03:00

quota-preview.test.ts

test(integration): cover quota REST routes + error sanitization (B/F8)

2026-05-28 07:50:03 -03:00

quota-routes-error-sanitization.test.ts

test(integration): cover quota REST routes + error sanitization (B/F8)

2026-05-28 07:50:03 -03:00

quota-store-settings.test.ts

test(integration): cover quota REST routes + error sanitization (B/F8)

2026-05-28 07:50:03 -03:00

resilience-http-e2e.test.ts

Release v3.8.2 (#2503)

2026-05-23 01:46:59 -03:00

search-providers-catalog.test.ts

test(search): integration coverage for providers catalog

2026-05-27 23:05:48 -03:00

security-hardening.test.ts

fix(i18n): restore missing UI translations and sync locales (#2767)

2026-05-27 01:54:50 -03:00

skills-pipeline.test.ts

chore: apply PR 1495 and update changelog

2026-04-21 21:12:29 -03:00

traffic-inspector-capture-modes.test.ts

test(api): integration tests for traffic-inspector routes (F6)

2026-05-28 01:24:33 -03:00

traffic-inspector-error-sanitization.test.ts

test(api): integration tests for traffic-inspector routes (F6)

2026-05-28 01:24:33 -03:00

traffic-inspector-hosts.test.ts

test(api): integration tests for traffic-inspector routes (F6)

2026-05-28 01:24:33 -03:00

traffic-inspector-internal-ingest.test.ts

test(api): integration tests for traffic-inspector routes (F6)

2026-05-28 01:24:33 -03:00

traffic-inspector-localonly.test.ts

test(api): integration tests for traffic-inspector routes (F6)

2026-05-28 01:24:33 -03:00

traffic-inspector-requests.test.ts

test(api): integration tests for traffic-inspector routes (F6)

2026-05-28 01:24:33 -03:00

traffic-inspector-session-requests.test.ts

feat(inspector): add POST /sessions/[id]/requests to persist live snapshots (R5-5 backend half)

2026-05-28 21:43:24 -03:00

traffic-inspector-sessions.test.ts

test(api): integration tests for traffic-inspector routes (F6)

2026-05-28 01:24:33 -03:00

traffic-inspector-ws.test.ts

test(api): integration tests for traffic-inspector routes (F6)

2026-05-28 01:24:33 -03:00

v1-contracts-behavior.test.ts

fix(providers): refresh web client user agents (#1699)

2026-04-28 02:41:19 -03:00