Files
OmniRoute/src/lib/plugins/hooks.ts
Diego Rodrigues de Sa e Souza bf8b56b29f Release v3.8.20 (#3547)
* chore(release): open v3.8.20 development cycle

* fix(images): prefer bare combos over image aliases (#3527)

Integrated into release/v3.8.20

* fix(translator): map Codex local_shell tool (#3534)

Integrated into release/v3.8.20

* fix(usage): make opencode-go quota fetcher fail-open instead of throwing 500 (#3522)

Integrated into release/v3.8.20

* Fix Runtime page breaker state rendering (#3533)

Integrated into release/v3.8.20

* Expose provider breaker degradation threshold setting (#3535)

Integrated into release/v3.8.20

* fix(executor): strip provider prefix from versioned built-in tool model field (#3532)

Integrated into release/v3.8.20

* feat(providers): add Claude Fable 5 support (#3524)

Integrated into release/v3.8.20

* feat(resilience): add global provider cooldown tracking to prevent combo re-walking (#3556)

Integrated into release/v3.8.20 (default OFF, opt-in)

* fix(translator): scope thoughtSignature bypass to Antigravity/CLI only (#3560)

Integrated into release/v3.8.20. Co-authored-by: Six7Day <six7day@gmail.com>

* fix(routing): normalize thinking:disabled for combo-substituted models that reject it (#3554) (#3563)

Integrated into release/v3.8.20

* fix(usage): accept 0/empty budget limits so the dashboard can save and clear (#3537) (#3564)

Integrated into release/v3.8.20

* docs(changelog): credit @Six7Day for #3560 thoughtSignature fix (#3414)

The #3560 squash co-author trailer landed inline (unparsed by GitHub), so add
an explicit CHANGELOG credit ensuring @Six7Day (original #3414) and @oyi77 are
on the public record for the Gemini thoughtSignature fix.

* fix(gamification): dedup badge unlock via user_badges so events don't re-fire every request (#3472) (#3565)

Integrated into release/v3.8.20

* fix(routing): pass through 'auto' keyword on codex /v1/responses instead of rewriting to codex/auto (#3509) (#3566)

Integrated into release/v3.8.20

* fix(cli-tools): normalize apiKey null in guide-settings schema so cloud-mode config saves (#3552) (#3567)

Integrated into release/v3.8.20

* fix(catalog): reclassify PublicAI from keyless to one-time-initial (requires API key) (#3558) (#3568)

Integrated into release/v3.8.20

* fix(gemini-web): surface missing Playwright browser as actionable 503 + cooldown hint, not a retryable 500 loop (#3516) (#3570)

Integrated into release/v3.8.20

* fix(security): sanitize raw err.message in web executors + embeddings/search response bodies (Rule #12) (#3494, #3495) (#3573)

Integrated into release/v3.8.20

* fix(dashboard): point CustomHostsManager + FeatureFlagsGrid at real routes (#3486, #3487) (#3574)

Integrated into release/v3.8.20

* chore(providers): remove dead krutrim entry (#3483) + docs(api): fix agent-bridge per-agent state route (#3489) (#3575)

Integrated into release/v3.8.20

* docs(api): correct API_REFERENCE.md paths for skills/plugins/admin/cache/acp/system-info (#3497) (#3577)

Integrated into release/v3.8.20

* fix(proxy): drive SOCKS5 UI option from runtime ENABLE_SOCKS5_PROXY, not build-time NEXT_PUBLIC (#3508) (#3579)

Integrated into release/v3.8.20

* fix(playground): filter playground models by node prefix so custom-endpoint models appear (#3505) (#3581)

Integrated into release/v3.8.20

* fix(usage): show an informative message instead of a blank Kiro quota card when no usage breakdown (#3506) (#3582)

Integrated into release/v3.8.20

* docs(changelog): add the #3506 Kiro quota entry (missed in #3582 due to a stale-base CHANGELOG anchor) (#3583)

Integrated into release/v3.8.20

* fix(auto-update): use stable PROJECT_ROOT walker, not frozen process.cwd() (#3561)

Integrated into release/v3.8.20. Auto-update PROJECT_ROOT now uses a stable __dirname-anchored upward walker instead of the no-op process.cwd() resolver.

* fix: address PR #3518 review comments (lifecycle hooks, regex, indentation, route params) (#3562)

Integrated into release/v3.8.20. Addresses #3518 review: regex literals, logs/[id] route params (Next 16), indentation, and wires plugin lifecycle hooks (onInstall/onActivate/onDeactivate/onUninstall) in the loader so manager.ts can register them. Adds Rule #18 regression test.

* docs(changelog): credit @ViFigueiredo (#3423) for PROJECT_ROOT + log #3561/#3562 (v3.8.20)

* fix: openai to gemini incorrectly translates historical tool calls into text (#3569)

Integrated into release/v3.8.20. Standard Gemini direct path now maps historical tool calls to native functionCall/functionResponse parts (signaturelessToolCallMode: native) instead of inert text — validated against the real Gemini API (gemini-2.5-flash returns 200 for signatureless native functionCall, even with tools+thinking; Hard Rule #18). Eliminates the text-serialization leak. Antigravity/CLI sentinel path (#3560) untouched.

* docs(changelog)+test: reconcile standard-Gemini native mode (#3569) — update round-2 rationale comment + log VPS validation

* docs(changelog): reconcile v3.8.20 — add 9 missing bullets + move [Unreleased] to versioned section

* docs(changelog): complete v3.8.20 reconciliation — 27 bullets, 11 contributors

---------

Co-authored-by: Alexander Averyanov <alex@averyan.ru>
Co-authored-by: Hakan Kurşun <bykamaka@gmail.com>
Co-authored-by: Wilson <pedbookmed@gmail.com>
Co-authored-by: Randi <55005611+rdself@users.noreply.github.com>
Co-authored-by: Giorgos Giakoumettis <giorgos@yiakoumettis.gr>
Co-authored-by: PizzaV <103120356+pizzav-xyz@users.noreply.github.com>
Co-authored-by: Paijo <14921983+oyi77@users.noreply.github.com>
Co-authored-by: Markus Hartung <mail@hartmark.se>
2026-06-10 13:49:08 -03:00

323 lines
9.2 KiB
TypeScript

/**
* Custom hook registry — event-driven plugin hook system.
*
* Plugins can register handlers for any OmniRoute event. Built-in events
* cover the full request lifecycle plus routing, rate limiting, and errors.
*
* @module plugins/hooks
*/
import { logger } from "../../../open-sse/utils/logger.ts";
const log = logger("PLUGIN_HOOKS");
// ── Types ──
export type BlockingHookResult = {
blocked?: boolean;
response?: unknown;
body?: unknown;
metadata?: Record<string, unknown>;
};
export type HookHandler = (
payload: unknown
) => void | Promise<void> | BlockingHookResult | Promise<BlockingHookResult>;
export interface HookRegistration {
pluginName: string;
handler: HookHandler;
priority: number;
}
// ── Built-in events ──
export const BUILTIN_EVENTS = [
"onRequest",
"onResponse",
"onError",
"onModelSelect",
"onComboResolve",
"onRateLimit",
"onQuotaExhaust",
"onProviderError",
"onStreamStart",
"onStreamEnd",
"onInstall",
"onActivate",
"onDeactivate",
"onUninstall",
] as const;
export type BuiltinEvent = (typeof BUILTIN_EVENTS)[number];
// ── Rate limiting ──
const RATE_LIMIT_MAX = 100; // max calls per plugin per window
const RATE_LIMIT_WINDOW_MS = 1000; // 1 second window
interface RateLimitState {
count: number;
windowStart: number;
}
const rateLimitMap: Map<string, RateLimitState> = new Map();
function isRateLimited(pluginName: string): boolean {
const now = Date.now();
const key = pluginName;
const state = rateLimitMap.get(key);
if (!state || now - state.windowStart >= RATE_LIMIT_WINDOW_MS) {
// New window
rateLimitMap.set(key, { count: 1, windowStart: now });
return false;
}
state.count++;
if (state.count > RATE_LIMIT_MAX) {
return true;
}
return false;
}
// ── Registry ──
const hooks: Map<string, HookRegistration[]> = new Map();
/**
* Register a handler for an event.
*/
export function registerHook(
event: string,
pluginName: string,
handler: HookHandler,
priority: number = 100
): void {
if (!hooks.has(event)) {
hooks.set(event, []);
}
const list = hooks.get(event)!;
// Prevent duplicate registration
if (list.some((r) => r.pluginName === pluginName && r.handler === handler)) {
return;
}
list.push({ pluginName, handler, priority });
list.sort((a, b) => a.priority - b.priority);
log.info("hook.registered", { event, pluginName, priority });
}
/**
* Unregister all handlers for a plugin.
* Also evicts the plugin's rate-limit state so uninstalled plugins don't leak memory.
*/
export function unregisterHooks(pluginName: string): void {
for (const [event, list] of hooks.entries()) {
const before = list.length;
const filtered = list.filter((r) => r.pluginName !== pluginName);
if (filtered.length !== before) {
hooks.set(event, filtered);
log.info("hook.unregistered", { event, pluginName, removed: before - filtered.length });
}
}
// Evict rate-limit state so uninstalled plugins don't accumulate entries
rateLimitMap.delete(pluginName);
}
/**
* Unregister a specific handler.
*/
export function unregisterHook(event: string, pluginName: string): void {
const list = hooks.get(event);
if (!list) return;
const before = list.length;
const filtered = list.filter((r) => r.pluginName !== pluginName);
hooks.set(event, filtered);
if (before !== filtered.length) {
log.info("hook.unregistered", { event, pluginName });
}
}
/**
* Emit an event — fire all registered handlers.
* Handler errors are logged but don't block other handlers.
* Rate-limited per plugin: max 100 calls per second.
*/
export async function emitHook(event: string, payload: unknown): Promise<void> {
const list = hooks.get(event);
if (!list || list.length === 0) return;
for (const reg of list) {
if (isRateLimited(reg.pluginName)) {
log.warn("hook.rate_limited", { event, pluginName: reg.pluginName });
continue;
}
try {
await reg.handler(payload);
} catch (err: unknown) {
const message = err instanceof Error ? err.message : String(err);
log.error("hook.handler_error", {
event,
pluginName: reg.pluginName,
error: message,
});
}
}
}
/**
* Emit a blocking event — fire handlers with body/metadata chaining.
* Returns blocking result from the first handler that blocks, or merged body/metadata.
* Used for onRequest and onResponse where plugins can modify or block the request.
*/
export async function emitHookBlocking(
event: string,
payload: unknown
): Promise<{
blocked?: boolean;
response?: unknown;
body?: unknown;
metadata?: Record<string, unknown>;
}> {
const list = hooks.get(event) || [];
const ctx = (payload || {}) as Record<string, unknown>;
let mergedBody: unknown = ctx.body;
let mergedMetadata: Record<string, unknown> = (ctx.metadata as Record<string, unknown>) || {};
for (const reg of list) {
// Mirror emitHook: rate-limit the hot blocking path too
if (isRateLimited(reg.pluginName)) {
log.warn("hook.blocking_rate_limited", { event, pluginName: reg.pluginName });
continue;
}
try {
// Chain the payload: each handler must see the body/metadata as mutated by
// previous handlers, not the original static payload — otherwise plugin B
// can't observe plugin A's changes. (#3286)
const currentPayload = { ...ctx, body: mergedBody, metadata: mergedMetadata };
const result = await reg.handler(currentPayload);
if (result && typeof result === "object") {
if ("body" in result) mergedBody = (result as Record<string, unknown>).body;
if ("metadata" in result)
mergedMetadata = {
...mergedMetadata,
...(((result as Record<string, unknown>).metadata as Record<string, unknown>) || {}),
};
if ("blocked" in result && (result as BlockingHookResult).blocked) {
return {
...result,
body: (result as BlockingHookResult).body ?? mergedBody,
metadata: { ...mergedMetadata, ...((result as BlockingHookResult).metadata || {}) },
};
}
}
} catch (err: unknown) {
const message = err instanceof Error ? err.message : String(err);
log.error("hook.blocking_handler_error", {
event,
pluginName: reg.pluginName,
error: message,
});
}
}
return { body: mergedBody, metadata: mergedMetadata };
}
// ── Lifecycle wrappers (for chatCore.ts convenience) ──
export interface PluginContext {
requestId: string;
body: unknown;
model: string;
provider: string;
apiKeyInfo?: unknown;
metadata: Record<string, unknown>;
}
export interface PluginResult {
blocked?: boolean;
response?: unknown;
body?: unknown;
metadata?: Record<string, unknown>;
}
// ── Plugin interface (for loader/manager compatibility) ──
export interface Plugin {
name: string;
priority?: number;
enabled?: boolean;
onRequest?: (ctx: PluginContext) => Promise<PluginResult | void> | PluginResult | void;
onResponse?: (ctx: PluginContext, response: unknown) => Promise<unknown | void> | unknown | void;
onError?: (ctx: PluginContext, error: Error) => Promise<unknown | void> | unknown | void;
// ── Lifecycle hooks (fire-and-forget, non-blocking) ──
onInstall?: (payload: unknown) => Promise<void> | void;
onActivate?: (payload: unknown) => Promise<void> | void;
onDeactivate?: (payload: unknown) => Promise<void> | void;
onUninstall?: (payload: unknown) => Promise<void> | void;
}
/**
* Run onRequest hooks — blocking. Plugins can modify body/metadata or block with 403.
*/
export async function runOnRequest(ctx: PluginContext): Promise<PluginResult> {
return emitHookBlocking("onRequest", ctx);
}
/**
* Run onResponse hooks — chains response through plugins. Each plugin can modify the response.
*/
export async function runOnResponse(ctx: PluginContext, response: unknown): Promise<unknown> {
let currentResponse = response;
const list = hooks.get("onResponse") || [];
for (const reg of list) {
try {
const result = await reg.handler({ ...ctx, response: currentResponse });
if (
result !== undefined &&
result !== null &&
typeof result === "object" &&
"response" in result
) {
currentResponse = (result as { response: unknown }).response;
}
} catch (err: unknown) {
const message = err instanceof Error ? err.message : String(err);
log.error("hook.response_handler_error", { pluginName: reg.pluginName, error: message });
}
}
return currentResponse;
}
/**
* Run onError hooks — fire-and-forget notification.
*/
export async function runOnError(ctx: PluginContext, error: Error): Promise<void> {
await emitHook("onError", { ...ctx, error });
}
/**
* Get all registered hooks for an event.
*/
export function getHooks(event: string): HookRegistration[] {
return hooks.get(event) ?? [];
}
/**
* Get all events that have registered handlers.
*/
export function getActiveEvents(): string[] {
return [...hooks.entries()].filter(([, list]) => list.length > 0).map(([event]) => event);
}
/**
* Reset all hooks and rate limit state (for testing).
*/
export function resetHooks(): void {
hooks.clear();
rateLimitMap.clear();
}