mirror of
https://github.com/diegosouzapw/OmniRoute.git
synced 2026-07-31 20:32:20 +03:00
* chore(release): continue v3.8.25 development cycle after main code-sync (r5) main fast-forwarded to release/v3.8.25 (#3863): unblocked Build+Docker via #3864, plus #3837 (mimocode proxy) and #3862 (trivy bump). This marker re-opens the umbrella PR for further v3.8.25 work. No version bump. * fix(db): persist the Keep-latest-backups retention setting (#3834) (#3867) * fix(oauth): clear GitLab Duo setup message instead of 500 (#3861) (#3868) * test(oauth): prove refresh_token preserved on real gemini-cli/antigravity dispatch (#3850) (#3869) * feat(compression-ui): unified compression config UI — per-engine pages + combos editor + menu + WS default-on (#3860) Integrated into release/v3.8.25 — feat(compression-ui): unified compression configuration UI (Compression Hub + per-engine Lite/Aggressive/Ultra pages + combos editor + sidebar entry + live-WS default-on). File-size re-baselined for sidebarVisibility.ts/chatCore.ts growth; orphan ws test relocated to a collected path. * docs(changelog): complete the v3.8.25 release notes + credit all contributors Audited every commit since v3.8.24 and filled the gaps the [3.8.25] section was missing: a New Features section (compression engines + Compression Studios #3848, compression UI #3860, injection-guard #3857, kiro discovery #3836, Veo #3839, mimocode proxy #3837, Arena ELO flag #3821), 9 more Fixed entries (#3811/#3807/#3759/#3849/#3838/#3835/#3814/#3820/#3819), a Security section (CCR IDOR #3859, supply-chain #3824), and an Internal/Quality section. Every contributor and issue reporter is now credited. * docs(changelog): restore + complete the v3.8.25 release notes Re-adds CHANGELOG.md (a prior server-side commit accidentally dropped it) with the complete, audited [3.8.25] section: New Features, the full Fixed list, Security & Hardening, and Internal/Quality — every contributor and issue reporter credited. * chore(release): finalize v3.8.25 — reconcile CHANGELOG + i18n mirrors, document OMNIROUTE_MAX_PENDING_MIGRATIONS, green the unit suite Release-gate reconciliation for v3.8.25: - CHANGELOG: dated 2026-06-14, linked #3826, rolled up file-size re-baselines (#3823/#3833), recorded the test-greening; re-synced all 41 i18n CHANGELOG mirrors. - Documented OMNIROUTE_MAX_PENDING_MIGRATIONS (#3416) in .env.example + ENVIRONMENT.md. - Greened the unit suite (was merged red on 4 CI shards): aligned 10 stale tests to this cycle's intended behavior (#3838/#3822/#3501/SOCKS5/Vertex-Express/Antigravity) and the same-provider 503 fall-through test; de-flaked the compression benchmark reproducibility and ServiceSupervisor crash tests. No production code changed. * ci(security): clear OpenSSF Scorecard code-scanning noise + harden workflow token permissions The Security tab held 155 open alerts, ALL from the advisory OpenSSF Scorecard tool (#3824) — supply-chain/posture scores, not code vulnerabilities — which drowned out real CodeQL findings. - scorecard.yml: stop uploading SARIF to the code-scanning tab (drop the upload-sarif step + the now-unused security-events: write). The run still produces the OpenSSF badge (publish_results) and a downloadable SARIF artifact. - TokenPermissions hardening (the high-severity, genuinely-valuable subset): set each workflow's top-level token to read-only and grant the exact writes at the job level that needs them — npm-publish (id-token/packages on publish jobs), docker-publish (packages on build), electron-release (contents on build/release, id-token/packages on publish-npm), build-fork (packages on build), claude (empty top-level; job grants its own). The 155 existing alerts were dismissed. Not adopting repo-wide SHA-pinning (143 PinnedDependencies advisories) — declined. * test(integration): align stale wiring/socks5 integration tests to this cycle's behavior These were red on the CI Integration job (pre-existing). No production code changed: - integration-wiring: the combos page no longer renders a per-page EmailPrivacyToggle (#3822 consolidated it into Settings → Appearance); the provider-detail test-result masking and upstream-proxy copy moved to decomposed components (#3501 BatchTestResultsModal / UpstreamProxyCard) — assertions now read the owning files. - api-routes-critical: SOCKS5 is now enabled by default (opt-out), so the disabled- rejection test must set ENABLE_SOCKS5_PROXY=false explicitly (an unset env now means enabled). (The ~32 live-Gemini integration tests are gated on OMNIROUTE_API_KEY and skip in CI; they only 'fail' locally when that key is present without a running server.)
193 lines
7.8 KiB
TypeScript
193 lines
7.8 KiB
TypeScript
/**
|
|
* TDD: setEngineInDefaultCombo + normalizePipeline (new engines).
|
|
*
|
|
* DB isolation pattern mirrors tests/unit/db/per-engine-analytics.test.ts:
|
|
* - Temp DATA_DIR, resetDbInstance() before each test, cleanup in test.after().
|
|
*/
|
|
import test from "node:test";
|
|
import assert from "node:assert/strict";
|
|
import fs from "node:fs";
|
|
import os from "node:os";
|
|
import path from "node:path";
|
|
|
|
// ─── isolated temp DB ─────────────────────────────────────────────────────────
|
|
|
|
const TEST_DATA_DIR = fs.mkdtempSync(path.join(os.tmpdir(), "omniroute-default-combo-toggle-"));
|
|
const originalDataDir = process.env.DATA_DIR;
|
|
|
|
process.env.DATA_DIR = TEST_DATA_DIR;
|
|
|
|
const core = await import("../../../src/lib/db/core.ts");
|
|
core.resetDbInstance();
|
|
|
|
const { getDefaultCompressionCombo, setEngineInDefaultCombo, getCompressionCombo } =
|
|
await import("../../../src/lib/db/compressionCombos.ts");
|
|
|
|
// ─── helpers ──────────────────────────────────────────────────────────────────
|
|
|
|
function resetDb(): void {
|
|
core.resetDbInstance();
|
|
fs.rmSync(TEST_DATA_DIR, { recursive: true, force: true });
|
|
fs.mkdirSync(TEST_DATA_DIR, { recursive: true });
|
|
}
|
|
|
|
// ─── lifecycle ────────────────────────────────────────────────────────────────
|
|
|
|
test.beforeEach(() => {
|
|
resetDb();
|
|
});
|
|
|
|
test.after(() => {
|
|
core.resetDbInstance();
|
|
fs.rmSync(TEST_DATA_DIR, { recursive: true, force: true });
|
|
if (originalDataDir === undefined) delete process.env.DATA_DIR;
|
|
else process.env.DATA_DIR = originalDataDir;
|
|
});
|
|
|
|
// ─── tests ────────────────────────────────────────────────────────────────────
|
|
|
|
test("Fix #1: normalizePipeline passes through new engine IDs (headroom, session-dedup, ccr, llmlingua)", () => {
|
|
// The default combo is seeded with [rtk, caveman]. Directly update the DB
|
|
// to include new engine IDs, then read back via getDefaultCompressionCombo
|
|
// to verify normalizePipeline no longer strips them.
|
|
const db = core.getDbInstance();
|
|
|
|
// Ensure the table is created by triggering a read first.
|
|
const combo = getDefaultCompressionCombo();
|
|
assert.ok(combo, "default combo should exist after table init");
|
|
|
|
const newPipeline = JSON.stringify([
|
|
{ engine: "session-dedup" },
|
|
{ engine: "ccr" },
|
|
{ engine: "headroom" },
|
|
{ engine: "caveman", intensity: "full" },
|
|
{ engine: "llmlingua" },
|
|
]);
|
|
db.prepare("UPDATE compression_combos SET pipeline = ? WHERE id = ?").run(newPipeline, combo.id);
|
|
|
|
const reloaded = getCompressionCombo(combo.id);
|
|
assert.ok(reloaded, "should reload the combo");
|
|
const engineIds = reloaded.pipeline.map((s) => s.engine);
|
|
assert.ok(engineIds.includes("headroom"), `expected headroom in pipeline, got: ${engineIds}`);
|
|
assert.ok(
|
|
engineIds.includes("session-dedup"),
|
|
`expected session-dedup in pipeline, got: ${engineIds}`
|
|
);
|
|
assert.ok(engineIds.includes("ccr"), `expected ccr in pipeline, got: ${engineIds}`);
|
|
assert.ok(engineIds.includes("llmlingua"), `expected llmlingua in pipeline, got: ${engineIds}`);
|
|
assert.equal(
|
|
reloaded.pipeline.length,
|
|
5,
|
|
`expected 5 steps, got ${reloaded.pipeline.length}: ${engineIds}`
|
|
);
|
|
});
|
|
|
|
test("enabling headroom adds it to the pipeline sorted by stackPriority", () => {
|
|
// Default pipeline is [rtk(10), caveman(20)].
|
|
// headroom has stackPriority=15 so it should be inserted between rtk and caveman.
|
|
const result = setEngineInDefaultCombo("headroom", true);
|
|
assert.ok(result, "should return the updated combo");
|
|
|
|
const engineIds = result.pipeline.map((s) => s.engine);
|
|
assert.ok(engineIds.includes("headroom"), "headroom should be in the pipeline");
|
|
|
|
const rtkIdx = engineIds.indexOf("rtk");
|
|
const headroomIdx = engineIds.indexOf("headroom");
|
|
const cavemanIdx = engineIds.indexOf("caveman");
|
|
|
|
assert.ok(rtkIdx >= 0, "rtk should be in the pipeline");
|
|
assert.ok(headroomIdx >= 0, "headroom should be in the pipeline");
|
|
assert.ok(cavemanIdx >= 0, "caveman should be in the pipeline");
|
|
|
|
assert.ok(
|
|
rtkIdx < headroomIdx,
|
|
`rtk(10) should come before headroom(15), got order: ${engineIds}`
|
|
);
|
|
assert.ok(
|
|
headroomIdx < cavemanIdx,
|
|
`headroom(15) should come before caveman(20), got order: ${engineIds}`
|
|
);
|
|
});
|
|
|
|
test("enabling an engine with config persists the config", () => {
|
|
const customConfig = { minRows: 5 };
|
|
const result = setEngineInDefaultCombo("headroom", true, customConfig);
|
|
assert.ok(result, "should return the updated combo");
|
|
|
|
const headroomStep = result.pipeline.find((s) => s.engine === "headroom");
|
|
assert.ok(headroomStep, "headroom step should be present");
|
|
assert.deepEqual(
|
|
headroomStep.config,
|
|
customConfig,
|
|
"config should be persisted on the pipeline step"
|
|
);
|
|
});
|
|
|
|
test("updating config on an already-present engine merges correctly", () => {
|
|
// First enable headroom
|
|
setEngineInDefaultCombo("headroom", true);
|
|
// Then re-enable with a config — should update the existing step, not add a duplicate
|
|
const result = setEngineInDefaultCombo("headroom", true, { minRows: 8 });
|
|
assert.ok(result, "should return the updated combo");
|
|
|
|
const headroomSteps = result.pipeline.filter((s) => s.engine === "headroom");
|
|
assert.equal(headroomSteps.length, 1, "should not duplicate the headroom step");
|
|
assert.deepEqual(headroomSteps[0].config, { minRows: 8 });
|
|
});
|
|
|
|
test("disabling an engine removes it from the pipeline", () => {
|
|
setEngineInDefaultCombo("headroom", true);
|
|
const before = getDefaultCompressionCombo();
|
|
assert.ok(
|
|
before?.pipeline.some((s) => s.engine === "headroom"),
|
|
"headroom should be in pipeline before disabling"
|
|
);
|
|
|
|
const result = setEngineInDefaultCombo("headroom", false);
|
|
assert.ok(result, "should return the updated combo");
|
|
assert.ok(
|
|
!result.pipeline.some((s) => s.engine === "headroom"),
|
|
"headroom should be removed from pipeline"
|
|
);
|
|
});
|
|
|
|
test("Fix #8: setEngineInDefaultCombo with unknown engineId returns null and does not modify the pipeline", () => {
|
|
const before = getDefaultCompressionCombo();
|
|
assert.ok(before, "default combo must exist");
|
|
const originalPipeline = JSON.stringify(before.pipeline);
|
|
|
|
const result = setEngineInDefaultCombo("not-a-real-engine", true);
|
|
assert.equal(result, null, "should return null for unknown engine id");
|
|
|
|
// The combo must be unchanged
|
|
const after = getDefaultCompressionCombo();
|
|
assert.ok(after, "default combo should still exist");
|
|
assert.equal(
|
|
JSON.stringify(after.pipeline),
|
|
originalPipeline,
|
|
"pipeline should be unmodified when unknown engineId is rejected"
|
|
);
|
|
});
|
|
|
|
test("Fix #2: disabling last engine produces an empty pipeline (not silently reverted to default)", () => {
|
|
// Start with a pipeline that only has one engine by disabling everything except headroom.
|
|
// First set a pipeline with only one known engine via a raw DB update.
|
|
const db = core.getDbInstance();
|
|
const combo = getDefaultCompressionCombo();
|
|
assert.ok(combo, "default combo must exist");
|
|
|
|
db.prepare("UPDATE compression_combos SET pipeline = ? WHERE id = ?").run(
|
|
JSON.stringify([{ engine: "headroom" }]),
|
|
combo.id
|
|
);
|
|
|
|
// Now disable headroom — result should be empty pipeline, not a fallback.
|
|
const result = setEngineInDefaultCombo("headroom", false);
|
|
assert.ok(result, "should return the updated combo");
|
|
assert.equal(
|
|
result.pipeline.length,
|
|
0,
|
|
`expected empty pipeline after disabling last engine, got: ${JSON.stringify(result.pipeline)}`
|
|
);
|
|
});
|