Files
OmniRoute/tests
Mourad Maatoug 634b4fe0ce feat(system-transforms): generic per-provider DSL closing OpenWebUI bypass
v2 of the CC bridge body transforms (issue #2260). Generalizes the
single-provider `ccBridgeTransforms` config (commit e3e962db) into a
per-provider registry keyed by OmniRoute provider id, and wires the
native `claude` OAuth path into the same DSL so raw `claude/<model>`
requests no longer bypass the sanitization layer.

Reference: comment 4459544580 reported a 429 on raw `claude/<model>`
from Open WebUI; CC-bridge-only v1 didn't help that path. v2 closes
three gaps named in the comment:

  1. `openwebui` / `open-webui` added to the default obfuscation
     word list (new `obfuscate_words` op kind, configurable).
  2. Native `claude` provider path now runs the per-provider pipeline
     after its existing billing+sentinel prepend (executors/base.ts).
     Its default pipeline is cosmetic only (Open WebUI paragraph
     anchors + identity-prefix drop + ZWJ obfuscation); it deliberately
     omits `inject_billing_header` so it never collides with the native
     prepend.
  3. Open WebUI paragraph anchors (github.com/open-webui/open-webui,
     openwebui.com, docs.openwebui.com) and identity prefix
     ("You are Open WebUI") added to both `claude` and CC bridge
     default pipelines.

API surface:

  - New module: open-sse/services/systemTransforms.ts
    * `SystemTransformsConfig { providers: Record<id, { enabled, pipeline }> }`
    * `TransformOp` extends the base CC bridge op set with
      `obfuscate_words { words[], targets[] }`.
    * `applySystemTransformPipeline(providerId, body, config?)`
      routes to the right per-provider pipeline (with CC bridge prefix
      match so `anthropic-compatible-cc-*` all share one config).
    * `setSystemTransformsConfig` accepts both legacy single-provider
      shape (migrates into providers[anthropic-compatible-cc]) and the
      new per-provider shape (merges with defaults for unset providers).

  - Native claude wedge: executors/base.ts now calls
    `applySystemTransformPipeline(PROVIDER_CLAUDE, tb)` after the
    existing billing+sentinel prepend (line ~789).

  - CC bridge step 5b: claudeCodeCompatible.ts step 5b switched from
    `applyCcBridgeTransformPipeline` (single-config) to
    `applySystemTransformPipeline(PROVIDER_CC_BRIDGE, body)`. The
    underlying ccBridgeTransforms.ts module remains the base executor
    that systemTransforms.ts delegates to for the shared op kinds —
    no rename to keep the diff reviewable, and all 30 base-op tests
    stay green.

  - Settings:
    * Zod schema gains `systemTransforms.providers[*]` with full
      discriminated union over the 9 op kinds (including
      obfuscate_words).
    * Legacy `ccBridgeTransforms` zod field kept for back-compat read;
      runtime now feeds it through `setSystemTransformsConfig` migration
      shim so persisted Phase-2 data keeps working. v2 `systemTransforms`
      wins on conflict (applied last).
    * Runtime settings registry gains `systemTransforms` reload section
      next to legacy `ccBridgeTransforms`.

  - UI rewrite (RoutingTab.tsx): the two standalone cards (CLI
    Fingerprint + CC Bridge Transforms) collapse into one
    "Provider Upstream Compatibility" card. Per-provider tiles render
    the pipeline summary + JSON editor with client-side shape
    validation + Apply / Reset. Copy clarifies that no local Claude
    Code binary is required (the lock badge on the Claude tile means
    the fingerprint is force-applied for OAuth account safety, not
    that the user must install the CLI).

Tests:

  - tests/unit/system-transforms.test.ts (22 new tests covering
    defaults, per-op semantics, ordering, per-provider routing, opt-in
    pass-through, Open WebUI fixture, migration shim, idempotency).
  - tests/unit/cc-bridge-transforms.test.ts (30 base-op tests
    unchanged, still green).
  - tests/unit/claude-code-compatible-{helpers,request}.test.ts and
    8 related claude/cc/executor test files all green (140 tests).

Closes #2260.
2026-05-15 17:36:21 +02:00
..
2026-05-10 00:55:06 -03:00