diegosouzapw 0efaf1cca7 fix(security): post-review hardening batch — command injection, CSP, auth gaps, error sanitization, resilience ...

- plugin.mjs: replace execSync string-template with spawnSync arg-array (command injection)
- electron/main.js: gate unsafe-eval on !app.isPackaged instead of URL substring; merge duplicate connect-src
- budget/bulk, resilience/reset: add requireManagementAuth guard
- gemini-web, claude-web, copilot-web executors: route catch-block messages through sanitizeErrorMessage
- oauth route, agents/tasks routes: route catch-block errors through sanitizeErrorMessage
- codex.ts: return null (not error-object) from refreshCredentials on failure
- tokenRefresh.ts: safe unknown-error access in catch block
- combo.ts: reset exhaustedProviders per set-retry iteration so providers get a second chance
- circuitBreaker.ts: persist and restore lastFailureKind via options JSON column

2026-05-20 11:11:13 -03:00

..

a2a.mjs

feat(cli): fase 5.3+5.4 — a2a invoke JSON-RPC e tasks list/get/cancel/watch/stream/logs

2026-05-15 02:08:12 -03:00

audit.mjs

feat(cli): adicionar omniroute audit (Fase 3.4)

2026-05-15 01:30:18 -03:00

autostart.mjs

feat(cli): fase 8.8 — system tray + autostart (omniroute serve --tray)

2026-05-15 04:07:20 -03:00

backup.mjs

Release/v3.8.0 — full changelog with 660+ commits (#2419)

2026-05-20 02:05:50 -03:00

batches.mjs

feat(cli): fase 6.1+6.2 — batches e files API (upload/CRUD/output/errors)

2026-05-15 02:24:45 -03:00

cache.mjs

feat(cli): migrar backup/restore/health/quota/cache/mcp/a2a/tunnel/env/test/completion (Fase 1.4)

2026-05-14 23:24:52 -03:00

chat.mjs

feat(cli): adicionar comando chat one-shot (Fase 2.1)

2026-05-15 00:28:36 -03:00

cloud.mjs

feat(cli): fase 4.2 — comando cloud para agentes codex/devin/jules

2026-05-15 01:51:55 -03:00

combo.mjs

feat(cli): fase 7 — context-eng/sessions/tags/openapi/combo-suggest/oneproxy/telemetry

2026-05-15 02:47:49 -03:00

completion.mjs

feat(cli): fase 8.5/8.7 — completion dinâmico e expansão de comandos

2026-05-15 03:24:50 -03:00

compression.mjs

feat(cli): fase 5.6 — comando compression com engine/configure/rules/preview

2026-05-15 02:09:36 -03:00

config.mjs

feat(cli): suporte i18n completo — 42 locales, --lang flag, config lang get/set/list (#2285)

2026-05-15 13:14:14 -03:00

context-eng.mjs

feat(cli): fase 7 — context-eng/sessions/tags/openapi/combo-suggest/oneproxy/telemetry

2026-05-15 02:47:49 -03:00

contexts.mjs

feat(cli): fase 8.4 — profiles/contexts (omniroute config contexts)

2026-05-15 03:36:51 -03:00

cost.mjs

feat(cli): adicionar comando cost com breakdown de custos (Fase 2.4)

2026-05-15 00:52:15 -03:00

dashboard.mjs

feat(cli): fase 9.4 — plugin system (omniroute-cmd-*)

2026-05-15 05:11:18 -03:00

doctor.mjs

Release/v3.8.0 — full changelog with 660+ commits (#2419)

2026-05-20 02:05:50 -03:00

env.mjs

feat(cli): migrar backup/restore/health/quota/cache/mcp/a2a/tunnel/env/test/completion (Fase 1.4)

2026-05-14 23:24:52 -03:00

eval.mjs

feat(cli): R7 — OAuthFlow/EvalWatch/ProvidersTestAll TUI + integração (spec 8.10)

2026-05-15 09:13:56 -03:00

files.mjs

feat(cli): fase 6.1+6.2 — batches e files API (upload/CRUD/output/errors)

2026-05-15 02:24:45 -03:00

health.mjs

feat(cli): fase 8.5/8.7 — completion dinâmico e expansão de comandos

2026-05-15 03:24:50 -03:00

keys.mjs

fix(cli): code-review-2 — I1/I2/M1/M2

2026-05-15 10:24:30 -03:00

logs.mjs

fix(cli): code-review-2 — I1/I2/M1/M2

2026-05-15 10:24:30 -03:00

mcp.mjs

feat(cli): fase 5.1 — mcp call com stream e mcp scopes

2026-05-15 02:05:06 -03:00

memory.mjs

feat(cli): adicionar omniroute memory (Fase 3.1)

2026-05-15 01:18:58 -03:00

models.mjs

feat(cli): padronizar saída emit() — cli-table3/csv-stringify/schema (Fase 1.7)

2026-05-14 23:54:49 -03:00

nodes.mjs

feat(cli): fase 6.6 — nodes CRUD/validate/test/metrics

2026-05-15 02:27:20 -03:00

oauth.mjs

feat(cli): R7 — OAuthFlow/EvalWatch/ProvidersTestAll TUI + integração (spec 8.10)

2026-05-15 09:13:56 -03:00

oneproxy.mjs

feat(cli): fase 7 — context-eng/sessions/tags/openapi/combo-suggest/oneproxy/telemetry

2026-05-15 02:47:49 -03:00

open.mjs

feat(cli): fase 8.1/8.6/8.14 — spinner, open, clipboard e environment helpers

2026-05-15 03:00:52 -03:00

openapi.mjs

feat(cli): fase 7 — context-eng/sessions/tags/openapi/combo-suggest/oneproxy/telemetry

2026-05-15 02:47:49 -03:00

plugin.mjs

fix(security): post-review hardening batch — command injection, CSP, auth gaps, error sanitization, resilience

2026-05-20 11:11:13 -03:00

policy.mjs

feat(cli): fase 5.5 — comando policy com CRUD e evaluate (exit 0/4)

2026-05-15 02:08:55 -03:00

pricing.mjs

feat(cli): fase 6.4 — pricing sync/list/get/defaults/diff

2026-05-15 02:25:58 -03:00

provider-cmd.mjs

feat(cli): migrar comandos modulares para Commander (Fase 1.2)

2026-05-14 22:38:59 -03:00

providers.mjs

Release/v3.8.0 — full changelog with 660+ commits (#2419)

2026-05-20 02:05:50 -03:00

quota.mjs

feat(cli): migrar backup/restore/health/quota/cache/mcp/a2a/tunnel/env/test/completion (Fase 1.4)

2026-05-14 23:24:52 -03:00

registry.mjs

feat(cli): fase 9.4 — plugin system (omniroute-cmd-*)

2026-05-15 05:11:18 -03:00

repl.mjs

feat(cli): fase 8.11 — REPL interativo multi-turn com Ink (runRepl, session, slash commands)

2026-05-15 04:51:23 -03:00

reset-encrypted-columns.mjs

Release/v3.8.0 (#2430)

2026-05-20 09:12:49 -03:00

resilience.mjs

feat(cli): fase 6.5 — resilience status/breakers/cooldowns/lockouts/reset/profile/config

2026-05-15 02:26:41 -03:00

restart.mjs

feat(cli): migrar serve/stop/restart/dashboard/keys/models/combo (Fase 1.3)

2026-05-14 23:11:30 -03:00

runtime.mjs

feat(cli): fase 8.13 — self-heal native deps (omniroute runtime check/repair/clean)

2026-05-15 03:46:26 -03:00

serve.mjs

Release/v3.8.0 — full changelog with 660+ commits (#2419)

2026-05-20 02:05:50 -03:00

sessions.mjs

feat(cli): fase 7 — context-eng/sessions/tags/openapi/combo-suggest/oneproxy/telemetry

2026-05-15 02:47:49 -03:00

setup.mjs

feat(cli): consolidar CLI_TOOLS — listCliTools/getCliTool + setup --list (Fase 1.6)

2026-05-14 23:48:12 -03:00

simulate.mjs

feat(cli): adicionar comando simulate para dry-run de routing (Fase 2.3)

2026-05-15 00:45:35 -03:00

skills.mjs

feat(cli): adicionar omniroute skills e marketplace (Fases 3.2 e 3.3)

2026-05-15 01:24:36 -03:00

status.mjs

feat(cli): migrar comandos modulares para Commander (Fase 1.2)

2026-05-14 22:38:59 -03:00

stop.mjs

feat(cli): crash recovery com backoff exponencial e PID granular (Fase 1.9)

2026-05-15 00:18:53 -03:00

stream.mjs

feat(cli): adicionar comando stream com inspeção SSE (Fase 2.2)

2026-05-15 00:36:41 -03:00

sync.mjs

feat(cli): fase 6.7 — sync push/pull/diff/bundle/import/tokens/initialize/resolve

2026-05-15 02:27:56 -03:00

tags.mjs

feat(cli): fase 7 — context-eng/sessions/tags/openapi/combo-suggest/oneproxy/telemetry

2026-05-15 02:47:49 -03:00

telemetry.mjs

feat(cli): fase 7 — context-eng/sessions/tags/openapi/combo-suggest/oneproxy/telemetry

2026-05-15 02:47:49 -03:00

test-provider.mjs

fix(cli): code-review — C1/C2/C3/I1/I3/I4/I5/m1/m2/m4

2026-05-15 09:48:30 -03:00

translator.mjs

feat(cli): fase 6.3 — translator detect/translate/send/stream/history

2026-05-15 02:25:24 -03:00

tray.mjs

feat(cli): fase 8.8 — system tray + autostart (omniroute serve --tray)

2026-05-15 04:07:20 -03:00

tunnel.mjs

fix(cli): code-review-2 — I1/I2/M1/M2

2026-05-15 10:24:30 -03:00

update.mjs

feat(cli): fase 8.5/8.7 — completion dinâmico e expansão de comandos

2026-05-15 03:24:50 -03:00

usage.mjs

feat(cli): adicionar grupo usage com 7 subcomandos (Fase 2.5)

2026-05-15 00:59:21 -03:00

webhooks.mjs

feat(cli): fase 4.4 — comando webhooks com CRUD, eventos e dispatch de teste

2026-05-15 01:53:09 -03:00