mirror of
https://github.com/diegosouzapw/OmniRoute.git
synced 2026-08-12 10:12:11 +03:00
* chore(release): open v3.8.20 development cycle * fix(images): prefer bare combos over image aliases (#3527) Integrated into release/v3.8.20 * fix(translator): map Codex local_shell tool (#3534) Integrated into release/v3.8.20 * fix(usage): make opencode-go quota fetcher fail-open instead of throwing 500 (#3522) Integrated into release/v3.8.20 * Fix Runtime page breaker state rendering (#3533) Integrated into release/v3.8.20 * Expose provider breaker degradation threshold setting (#3535) Integrated into release/v3.8.20 * fix(executor): strip provider prefix from versioned built-in tool model field (#3532) Integrated into release/v3.8.20 * feat(providers): add Claude Fable 5 support (#3524) Integrated into release/v3.8.20 * feat(resilience): add global provider cooldown tracking to prevent combo re-walking (#3556) Integrated into release/v3.8.20 (default OFF, opt-in) * fix(translator): scope thoughtSignature bypass to Antigravity/CLI only (#3560) Integrated into release/v3.8.20. Co-authored-by: Six7Day <six7day@gmail.com> * fix(routing): normalize thinking:disabled for combo-substituted models that reject it (#3554) (#3563) Integrated into release/v3.8.20 * fix(usage): accept 0/empty budget limits so the dashboard can save and clear (#3537) (#3564) Integrated into release/v3.8.20 * docs(changelog): credit @Six7Day for #3560 thoughtSignature fix (#3414) The #3560 squash co-author trailer landed inline (unparsed by GitHub), so add an explicit CHANGELOG credit ensuring @Six7Day (original #3414) and @oyi77 are on the public record for the Gemini thoughtSignature fix. * fix(gamification): dedup badge unlock via user_badges so events don't re-fire every request (#3472) (#3565) Integrated into release/v3.8.20 * fix(routing): pass through 'auto' keyword on codex /v1/responses instead of rewriting to codex/auto (#3509) (#3566) Integrated into release/v3.8.20 * fix(cli-tools): normalize apiKey null in guide-settings schema so cloud-mode config saves (#3552) (#3567) Integrated into release/v3.8.20 * fix(catalog): reclassify PublicAI from keyless to one-time-initial (requires API key) (#3558) (#3568) Integrated into release/v3.8.20 * fix(gemini-web): surface missing Playwright browser as actionable 503 + cooldown hint, not a retryable 500 loop (#3516) (#3570) Integrated into release/v3.8.20 * fix(security): sanitize raw err.message in web executors + embeddings/search response bodies (Rule #12) (#3494, #3495) (#3573) Integrated into release/v3.8.20 * fix(dashboard): point CustomHostsManager + FeatureFlagsGrid at real routes (#3486, #3487) (#3574) Integrated into release/v3.8.20 * chore(providers): remove dead krutrim entry (#3483) + docs(api): fix agent-bridge per-agent state route (#3489) (#3575) Integrated into release/v3.8.20 * docs(api): correct API_REFERENCE.md paths for skills/plugins/admin/cache/acp/system-info (#3497) (#3577) Integrated into release/v3.8.20 * fix(proxy): drive SOCKS5 UI option from runtime ENABLE_SOCKS5_PROXY, not build-time NEXT_PUBLIC (#3508) (#3579) Integrated into release/v3.8.20 * fix(playground): filter playground models by node prefix so custom-endpoint models appear (#3505) (#3581) Integrated into release/v3.8.20 * fix(usage): show an informative message instead of a blank Kiro quota card when no usage breakdown (#3506) (#3582) Integrated into release/v3.8.20 * docs(changelog): add the #3506 Kiro quota entry (missed in #3582 due to a stale-base CHANGELOG anchor) (#3583) Integrated into release/v3.8.20 * fix(auto-update): use stable PROJECT_ROOT walker, not frozen process.cwd() (#3561) Integrated into release/v3.8.20. Auto-update PROJECT_ROOT now uses a stable __dirname-anchored upward walker instead of the no-op process.cwd() resolver. * fix: address PR #3518 review comments (lifecycle hooks, regex, indentation, route params) (#3562) Integrated into release/v3.8.20. Addresses #3518 review: regex literals, logs/[id] route params (Next 16), indentation, and wires plugin lifecycle hooks (onInstall/onActivate/onDeactivate/onUninstall) in the loader so manager.ts can register them. Adds Rule #18 regression test. * docs(changelog): credit @ViFigueiredo (#3423) for PROJECT_ROOT + log #3561/#3562 (v3.8.20) * fix: openai to gemini incorrectly translates historical tool calls into text (#3569) Integrated into release/v3.8.20. Standard Gemini direct path now maps historical tool calls to native functionCall/functionResponse parts (signaturelessToolCallMode: native) instead of inert text — validated against the real Gemini API (gemini-2.5-flash returns 200 for signatureless native functionCall, even with tools+thinking; Hard Rule #18). Eliminates the text-serialization leak. Antigravity/CLI sentinel path (#3560) untouched. * docs(changelog)+test: reconcile standard-Gemini native mode (#3569) — update round-2 rationale comment + log VPS validation * docs(changelog): reconcile v3.8.20 — add 9 missing bullets + move [Unreleased] to versioned section * docs(changelog): complete v3.8.20 reconciliation — 27 bullets, 11 contributors --------- Co-authored-by: Alexander Averyanov <alex@averyan.ru> Co-authored-by: Hakan Kurşun <bykamaka@gmail.com> Co-authored-by: Wilson <pedbookmed@gmail.com> Co-authored-by: Randi <55005611+rdself@users.noreply.github.com> Co-authored-by: Giorgos Giakoumettis <giorgos@yiakoumettis.gr> Co-authored-by: PizzaV <103120356+pizzav-xyz@users.noreply.github.com> Co-authored-by: Paijo <14921983+oyi77@users.noreply.github.com> Co-authored-by: Markus Hartung <mail@hartmark.se>
323 lines
9.2 KiB
TypeScript
323 lines
9.2 KiB
TypeScript
/**
|
|
* Custom hook registry — event-driven plugin hook system.
|
|
*
|
|
* Plugins can register handlers for any OmniRoute event. Built-in events
|
|
* cover the full request lifecycle plus routing, rate limiting, and errors.
|
|
*
|
|
* @module plugins/hooks
|
|
*/
|
|
|
|
import { logger } from "../../../open-sse/utils/logger.ts";
|
|
|
|
const log = logger("PLUGIN_HOOKS");
|
|
|
|
// ── Types ──
|
|
|
|
export type BlockingHookResult = {
|
|
blocked?: boolean;
|
|
response?: unknown;
|
|
body?: unknown;
|
|
metadata?: Record<string, unknown>;
|
|
};
|
|
|
|
export type HookHandler = (
|
|
payload: unknown
|
|
) => void | Promise<void> | BlockingHookResult | Promise<BlockingHookResult>;
|
|
|
|
export interface HookRegistration {
|
|
pluginName: string;
|
|
handler: HookHandler;
|
|
priority: number;
|
|
}
|
|
|
|
// ── Built-in events ──
|
|
|
|
export const BUILTIN_EVENTS = [
|
|
"onRequest",
|
|
"onResponse",
|
|
"onError",
|
|
"onModelSelect",
|
|
"onComboResolve",
|
|
"onRateLimit",
|
|
"onQuotaExhaust",
|
|
"onProviderError",
|
|
"onStreamStart",
|
|
"onStreamEnd",
|
|
"onInstall",
|
|
"onActivate",
|
|
"onDeactivate",
|
|
"onUninstall",
|
|
] as const;
|
|
|
|
export type BuiltinEvent = (typeof BUILTIN_EVENTS)[number];
|
|
|
|
// ── Rate limiting ──
|
|
|
|
const RATE_LIMIT_MAX = 100; // max calls per plugin per window
|
|
const RATE_LIMIT_WINDOW_MS = 1000; // 1 second window
|
|
|
|
interface RateLimitState {
|
|
count: number;
|
|
windowStart: number;
|
|
}
|
|
|
|
const rateLimitMap: Map<string, RateLimitState> = new Map();
|
|
|
|
function isRateLimited(pluginName: string): boolean {
|
|
const now = Date.now();
|
|
const key = pluginName;
|
|
const state = rateLimitMap.get(key);
|
|
|
|
if (!state || now - state.windowStart >= RATE_LIMIT_WINDOW_MS) {
|
|
// New window
|
|
rateLimitMap.set(key, { count: 1, windowStart: now });
|
|
return false;
|
|
}
|
|
|
|
state.count++;
|
|
if (state.count > RATE_LIMIT_MAX) {
|
|
return true;
|
|
}
|
|
return false;
|
|
}
|
|
|
|
// ── Registry ──
|
|
|
|
const hooks: Map<string, HookRegistration[]> = new Map();
|
|
|
|
/**
|
|
* Register a handler for an event.
|
|
*/
|
|
export function registerHook(
|
|
event: string,
|
|
pluginName: string,
|
|
handler: HookHandler,
|
|
priority: number = 100
|
|
): void {
|
|
if (!hooks.has(event)) {
|
|
hooks.set(event, []);
|
|
}
|
|
const list = hooks.get(event)!;
|
|
|
|
// Prevent duplicate registration
|
|
if (list.some((r) => r.pluginName === pluginName && r.handler === handler)) {
|
|
return;
|
|
}
|
|
|
|
list.push({ pluginName, handler, priority });
|
|
list.sort((a, b) => a.priority - b.priority);
|
|
|
|
log.info("hook.registered", { event, pluginName, priority });
|
|
}
|
|
|
|
/**
|
|
* Unregister all handlers for a plugin.
|
|
* Also evicts the plugin's rate-limit state so uninstalled plugins don't leak memory.
|
|
*/
|
|
export function unregisterHooks(pluginName: string): void {
|
|
for (const [event, list] of hooks.entries()) {
|
|
const before = list.length;
|
|
const filtered = list.filter((r) => r.pluginName !== pluginName);
|
|
if (filtered.length !== before) {
|
|
hooks.set(event, filtered);
|
|
log.info("hook.unregistered", { event, pluginName, removed: before - filtered.length });
|
|
}
|
|
}
|
|
// Evict rate-limit state so uninstalled plugins don't accumulate entries
|
|
rateLimitMap.delete(pluginName);
|
|
}
|
|
|
|
/**
|
|
* Unregister a specific handler.
|
|
*/
|
|
export function unregisterHook(event: string, pluginName: string): void {
|
|
const list = hooks.get(event);
|
|
if (!list) return;
|
|
const before = list.length;
|
|
const filtered = list.filter((r) => r.pluginName !== pluginName);
|
|
hooks.set(event, filtered);
|
|
if (before !== filtered.length) {
|
|
log.info("hook.unregistered", { event, pluginName });
|
|
}
|
|
}
|
|
|
|
/**
|
|
* Emit an event — fire all registered handlers.
|
|
* Handler errors are logged but don't block other handlers.
|
|
* Rate-limited per plugin: max 100 calls per second.
|
|
*/
|
|
export async function emitHook(event: string, payload: unknown): Promise<void> {
|
|
const list = hooks.get(event);
|
|
if (!list || list.length === 0) return;
|
|
|
|
for (const reg of list) {
|
|
if (isRateLimited(reg.pluginName)) {
|
|
log.warn("hook.rate_limited", { event, pluginName: reg.pluginName });
|
|
continue;
|
|
}
|
|
try {
|
|
await reg.handler(payload);
|
|
} catch (err: unknown) {
|
|
const message = err instanceof Error ? err.message : String(err);
|
|
log.error("hook.handler_error", {
|
|
event,
|
|
pluginName: reg.pluginName,
|
|
error: message,
|
|
});
|
|
}
|
|
}
|
|
}
|
|
|
|
/**
|
|
* Emit a blocking event — fire handlers with body/metadata chaining.
|
|
* Returns blocking result from the first handler that blocks, or merged body/metadata.
|
|
* Used for onRequest and onResponse where plugins can modify or block the request.
|
|
*/
|
|
export async function emitHookBlocking(
|
|
event: string,
|
|
payload: unknown
|
|
): Promise<{
|
|
blocked?: boolean;
|
|
response?: unknown;
|
|
body?: unknown;
|
|
metadata?: Record<string, unknown>;
|
|
}> {
|
|
const list = hooks.get(event) || [];
|
|
const ctx = (payload || {}) as Record<string, unknown>;
|
|
let mergedBody: unknown = ctx.body;
|
|
let mergedMetadata: Record<string, unknown> = (ctx.metadata as Record<string, unknown>) || {};
|
|
|
|
for (const reg of list) {
|
|
// Mirror emitHook: rate-limit the hot blocking path too
|
|
if (isRateLimited(reg.pluginName)) {
|
|
log.warn("hook.blocking_rate_limited", { event, pluginName: reg.pluginName });
|
|
continue;
|
|
}
|
|
try {
|
|
// Chain the payload: each handler must see the body/metadata as mutated by
|
|
// previous handlers, not the original static payload — otherwise plugin B
|
|
// can't observe plugin A's changes. (#3286)
|
|
const currentPayload = { ...ctx, body: mergedBody, metadata: mergedMetadata };
|
|
const result = await reg.handler(currentPayload);
|
|
if (result && typeof result === "object") {
|
|
if ("body" in result) mergedBody = (result as Record<string, unknown>).body;
|
|
if ("metadata" in result)
|
|
mergedMetadata = {
|
|
...mergedMetadata,
|
|
...(((result as Record<string, unknown>).metadata as Record<string, unknown>) || {}),
|
|
};
|
|
if ("blocked" in result && (result as BlockingHookResult).blocked) {
|
|
return {
|
|
...result,
|
|
body: (result as BlockingHookResult).body ?? mergedBody,
|
|
metadata: { ...mergedMetadata, ...((result as BlockingHookResult).metadata || {}) },
|
|
};
|
|
}
|
|
}
|
|
} catch (err: unknown) {
|
|
const message = err instanceof Error ? err.message : String(err);
|
|
log.error("hook.blocking_handler_error", {
|
|
event,
|
|
pluginName: reg.pluginName,
|
|
error: message,
|
|
});
|
|
}
|
|
}
|
|
return { body: mergedBody, metadata: mergedMetadata };
|
|
}
|
|
|
|
// ── Lifecycle wrappers (for chatCore.ts convenience) ──
|
|
|
|
export interface PluginContext {
|
|
requestId: string;
|
|
body: unknown;
|
|
model: string;
|
|
provider: string;
|
|
apiKeyInfo?: unknown;
|
|
metadata: Record<string, unknown>;
|
|
}
|
|
|
|
export interface PluginResult {
|
|
blocked?: boolean;
|
|
response?: unknown;
|
|
body?: unknown;
|
|
metadata?: Record<string, unknown>;
|
|
}
|
|
|
|
// ── Plugin interface (for loader/manager compatibility) ──
|
|
|
|
export interface Plugin {
|
|
name: string;
|
|
priority?: number;
|
|
enabled?: boolean;
|
|
onRequest?: (ctx: PluginContext) => Promise<PluginResult | void> | PluginResult | void;
|
|
onResponse?: (ctx: PluginContext, response: unknown) => Promise<unknown | void> | unknown | void;
|
|
onError?: (ctx: PluginContext, error: Error) => Promise<unknown | void> | unknown | void;
|
|
// ── Lifecycle hooks (fire-and-forget, non-blocking) ──
|
|
onInstall?: (payload: unknown) => Promise<void> | void;
|
|
onActivate?: (payload: unknown) => Promise<void> | void;
|
|
onDeactivate?: (payload: unknown) => Promise<void> | void;
|
|
onUninstall?: (payload: unknown) => Promise<void> | void;
|
|
}
|
|
|
|
/**
|
|
* Run onRequest hooks — blocking. Plugins can modify body/metadata or block with 403.
|
|
*/
|
|
export async function runOnRequest(ctx: PluginContext): Promise<PluginResult> {
|
|
return emitHookBlocking("onRequest", ctx);
|
|
}
|
|
|
|
/**
|
|
* Run onResponse hooks — chains response through plugins. Each plugin can modify the response.
|
|
*/
|
|
export async function runOnResponse(ctx: PluginContext, response: unknown): Promise<unknown> {
|
|
let currentResponse = response;
|
|
const list = hooks.get("onResponse") || [];
|
|
for (const reg of list) {
|
|
try {
|
|
const result = await reg.handler({ ...ctx, response: currentResponse });
|
|
if (
|
|
result !== undefined &&
|
|
result !== null &&
|
|
typeof result === "object" &&
|
|
"response" in result
|
|
) {
|
|
currentResponse = (result as { response: unknown }).response;
|
|
}
|
|
} catch (err: unknown) {
|
|
const message = err instanceof Error ? err.message : String(err);
|
|
log.error("hook.response_handler_error", { pluginName: reg.pluginName, error: message });
|
|
}
|
|
}
|
|
return currentResponse;
|
|
}
|
|
|
|
/**
|
|
* Run onError hooks — fire-and-forget notification.
|
|
*/
|
|
export async function runOnError(ctx: PluginContext, error: Error): Promise<void> {
|
|
await emitHook("onError", { ...ctx, error });
|
|
}
|
|
|
|
/**
|
|
* Get all registered hooks for an event.
|
|
*/
|
|
export function getHooks(event: string): HookRegistration[] {
|
|
return hooks.get(event) ?? [];
|
|
}
|
|
|
|
/**
|
|
* Get all events that have registered handlers.
|
|
*/
|
|
export function getActiveEvents(): string[] {
|
|
return [...hooks.entries()].filter(([, list]) => list.length > 0).map(([event]) => event);
|
|
}
|
|
|
|
/**
|
|
* Reset all hooks and rate limit state (for testing).
|
|
*/
|
|
export function resetHooks(): void {
|
|
hooks.clear();
|
|
rateLimitMap.clear();
|
|
}
|