Skip to content
Closed
Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
83 commits
Select commit Hold shift + click to select a range
b3207ab
fix(security): exact-host Anthropic baseUrl check (CodeQL js/incomple…
diegosouzapw Jun 27, 2026
7b139fd
Release v3.8.38 (#5078)
diegosouzapw Jun 27, 2026
dc40911
Release v3.8.39 (#5164)
diegosouzapw Jun 28, 2026
fd593c6
fix(docker): copy open-sse workspace manifest before npm ci (v3.8.39 …
diegosouzapw Jun 28, 2026
0e55bda
chore(docker): harden base image against container-scan CVEs (#5228)
diegosouzapw Jun 28, 2026
bc9d184
chore(ci): Trivy advisory scan ignores unfixed CVEs (Security-tab noi…
diegosouzapw Jun 28, 2026
1c18be4
fix: centralize public origin checks for proxied dashboards (#5278)
Thinkscape Jun 29, 2026
7c23dab
Release v3.8.40
diegosouzapw Jun 29, 2026
78f09c8
Release v3.8.41 (#5327)
diegosouzapw Jun 29, 2026
df2752b
deps: bump the development group across 1 directory with 9 updates (#…
dependabot[bot] Jun 30, 2026
baa5ad5
docs: add relay backend strategy guide (#5533)
KooshaPari Jun 30, 2026
0adae00
Release v3.8.42 (#5459)
diegosouzapw Jun 30, 2026
1085514
Fix grammatical errors in readme (#5738)
chirag127 Jul 1, 2026
b729a8f
Release v3.8.43 (#5609)
diegosouzapw Jul 2, 2026
5bc11f4
test(security): fix CodeQL #689 — Kimi Web URL host substring sanitiz…
diegosouzapw Jul 3, 2026
e61b75f
fix(config): externalize ws for copilot-m365-web executor (#6098, clo…
anki1kr Jul 3, 2026
604afea
Revert "fix(config): externalize ws for copilot-m365-web executor (#6…
diegosouzapw Jul 3, 2026
2dfb59b
chore(deps): bump github/codeql-action/init from 4.36.2 to 4.36.3 (#6…
dependabot[bot] Jul 3, 2026
b3ffdaa
chore(deps): bump actions/cache from 6.0.0 to 6.1.0 (#6124)
dependabot[bot] Jul 3, 2026
0c7f756
chore(deps): bump github/codeql-action/analyze from 4.36.2 to 4.36.3 …
dependabot[bot] Jul 3, 2026
1bda6c1
Release v3.8.44 (#5925)
diegosouzapw Jul 4, 2026
3ddcee6
Release v3.8.45 (#6202)
diegosouzapw Jul 6, 2026
92715c8
Release v3.8.46
diegosouzapw Jul 7, 2026
1eae976
fix(release): v3.8.46 closing — proxy random via crypto.randomInt (Co…
diegosouzapw Jul 7, 2026
5712364
fix(electron): bump electron 42→43 + build better-sqlite3 from source…
diegosouzapw Jul 8, 2026
44d501a
deps: bump the development group across 1 directory with 6 updates (#…
dependabot[bot] Jul 8, 2026
9cd18bf
fix(proxy): force CONNECT tunnel for HTTP proxied requests (undici 8.…
diegosouzapw Jul 8, 2026
e8950de
Release v3.8.47 (#6569)
diegosouzapw Jul 13, 2026
7ee5bbc
fix(build): v3.8.48 hotfix — npm tarball head-response-guard (#7065),…
diegosouzapw Jul 13, 2026
01ab5d1
chore(ci): add .mergify.yml to main — Mergify only reads config from …
diegosouzapw Jul 14, 2026
fb24740
fix(ci): add the auto-enqueue pull_request_rule to the Mergify config…
diegosouzapw Jul 14, 2026
fb25ebd
fix(ci): migrate Mergify auto-enqueue to merge_protections_settings.a…
diegosouzapw Jul 15, 2026
a795694
fix(ci): drop Mergify batch settings (batching is a paid-tier feature…
diegosouzapw Jul 15, 2026
9875ccf
fix(ci): merge queue tolerates the advisory dast-smoke failure (its G…
diegosouzapw Jul 15, 2026
0065f1b
test(ci): make the #6634 selfref guard hermetic — main's copy hard-fa…
diegosouzapw Jul 16, 2026
ddd6d09
chore(quality): tighten main's coverage baseline to the CI's real num…
diegosouzapw Jul 16, 2026
66c56ec
Add cliproxy provider exposure controls and manifest injection (#7329)
KooshaPari Jul 17, 2026
8e383f5
test(ci): static body in codex e2e mock route bridge (CodeQL #737) (#…
diegosouzapw Jul 17, 2026
698b6eb
fix(security): bump adm-zip >=0.6.0 + exact host matching in mitm DNS…
diegosouzapw Jul 19, 2026
95c9325
chore(deps): resolve 7 open Dependabot alerts via npm overrides (#8067)
diegosouzapw Jul 22, 2026
5108767
chore(deps): resolve 3 Dependabot alerts (dompurify, fast-xml-parser,…
diegosouzapw Jul 22, 2026
4ed0144
docs(readme): use local SVG flags + convert doc-link tables to lists …
diegosouzapw Jul 23, 2026
c9d4a45
Release v3.8.49 (#7076)
diegosouzapw Jul 29, 2026
e6523da
fix(ci): unblock the npm publish — dynamic runner + reuse CI's next-b…
diegosouzapw Jul 30, 2026
9233a94
fix(deps): bump transitive deps for 6 Dependabot + remaining audit vu…
diegosouzapw Aug 6, 2026
153f453
fix(deps): bump deps for 13 Dependabot + audit cleanup on main
diegosouzapw Aug 7, 2026
b090b60
fix(deps): bump nanoid, dompurify for 2 new Dependabot alerts (#189, …
diegosouzapw Aug 8, 2026
026e1ca
fix(deps): bump nanoid, dompurify for Dependabot #189, #190
diegosouzapw Aug 8, 2026
918fba5
fix(repo): harden .gitignore to also ignore a _tasks symlink (/_tasks)
diegosouzapw Aug 8, 2026
5f0a394
Hide health-check excluded models from /v1/models catalog (#10026)
ritheshcn25 Aug 13, 2026
ca23eed
fix(models): memoize getModelsDevPricing (event loop / healthz) (#10055)
RaviTharuma Aug 13, 2026
c68cda7
fix(resilience): honor shared passthrough providers (#11075)
yourspraveen Aug 22, 2026
65e8115
fix(ollama): route models by advertised capability (#11088)
yourspraveen Aug 23, 2026
b4ec780
Release v3.8.50
diegosouzapw Aug 26, 2026
5458026
docs(changelog): aggregate the ten v3.8.50 fragments into CHANGELOG.m…
diegosouzapw Aug 26, 2026
c44c0a2
docs(changelog): add consolidated v3.8.50 stats, top-25 ranking and a…
diegosouzapw Aug 27, 2026
8778ea7
fix(ci): stamp dist/BUILD_SHA before the npm publish provenance gate …
diegosouzapw Aug 27, 2026
aa52351
fix(docker): decouple the best-effort Bun image from the release mani…
diegosouzapw Aug 27, 2026
925feb2
fix(docker): let the bun digest artifact be absent, not fatal (#11740)
diegosouzapw Aug 27, 2026
b65ef33
fix(ci): size the install-upgrade gate to a measured run, and log the…
diegosouzapw Aug 27, 2026
0ce2123
fix(db): converge the install and upgrade schemas; stop ENOSPC from f…
diegosouzapw Aug 27, 2026
b7c07ed
fix(ci): run the install-upgrade gate on disk, not on the /tmp tmpfs …
diegosouzapw Aug 28, 2026
8e2fb04
fix(build): drop Next trace manifests from the npm tarball (413 on pu…
diegosouzapw Aug 28, 2026
dea6bb8
fix(ci): publish npm from a hosted runner so provenance is accepted (…
diegosouzapw Aug 28, 2026
e4683cd
fix(test): stop the Alibaba allowlist test from expiring with the cat…
diegosouzapw Aug 28, 2026
09de69e
test(config): fail seven days before a dated config pack lapses (#11891)
diegosouzapw Aug 28, 2026
e71be03
chore(ops): make the runner janitor act on what it can prove, not adv…
diegosouzapw Aug 28, 2026
9dc8eab
feat(quality): fail check:workflows on --provenance from a self-hoste…
diegosouzapw Aug 28, 2026
f564b64
fix(ci): give main's build its own lane on the self-hosted pool (#11901)
diegosouzapw Aug 28, 2026
5b38ec7
fix(ci): keep the next-build artefact on disk, not on the runner's tm…
diegosouzapw Aug 28, 2026
f907b5e
fix(ci): cap heavy builds at two runners with the omni-build label (#…
diegosouzapw Aug 28, 2026
226538f
feat(ci): publish to npm through Trusted Publishing (OIDC) by default…
diegosouzapw Aug 28, 2026
24c0643
test(check): escape the runs-on fixture with JSON.stringify, not a qu…
diegosouzapw Aug 28, 2026
8aa3f1e
fix(release): let the Electron workflow start again — grant actions:r…
diegosouzapw Aug 29, 2026
6f1f166
fix(ci): stop a stalled Codecov upload from cancelling the Coverage j…
diegosouzapw Aug 29, 2026
2af28c4
fix(release): resync the electron lockfile and let a dispatch build f…
diegosouzapw Aug 29, 2026
9dc6500
fix(release): attach the SBOM to the GitHub Release on dispatch publi…
diegosouzapw Aug 29, 2026
4febee9
fix(release): drop the build_ref input — a dispatch builds the ref it…
diegosouzapw Aug 29, 2026
550541c
fix(ci): accept CVE-2025-68121 in the prebuilt tls-client .so, auto-c…
diegosouzapw Aug 30, 2026
b342c1a
fix(docker): bump Bun image to 1.4.0 with Turbopack and port the node…
rqzbeh Aug 30, 2026
93265ee
test(infra): retry recursive temp-dir removal on main (main twin of #…
diegosouzapw Sep 1, 2026
c0b2253
fix(ci): port the release-green ESLint gate fix to main (base-red #12…
diegosouzapw Sep 3, 2026
a3ca33f
fix(sse): hoist leading text system messages on the Claude mid-conver…
JasonBroderick Sep 9, 2026
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
The table of contents is too big for display.
Diff view
Diff view
  •  
  •  
  •  
The diff you're trying to view is too large. We only load the first 3000 changed files.
201 changes: 201 additions & 0 deletions .cbmignore
Original file line number Diff line number Diff line change
@@ -0,0 +1,201 @@
# codebase-memory-mcp ignore list
#
# Padrão gitignore-style. Linhas começando com `#` são comentários.
# Barra final (`/`) = só diretório. Sem barra = casa arquivo OU diretório.
#
# O CBM também lê `.gitignore` automaticamente — esta lista deixa explícito o que
# os hooks do CBM vão pular. Se uma regra entrar em conflito entre os dois arquivos,
# vale a união. Editar este arquivo é mais barato do que confiar na herança implícita.
#
# Última reconciliação: 2026-07-31, status `ready` (513k nodes / 689k edges),
# `auto_index_limit=50000`, total indexável medido ≈11.546 arquivos (folga 4,3×).
#
# Fontes cruzadas:
# - `codebase-memory-mcp cli index_status --project home-diegosouzapw-dev-proxys-OmniRoute`
# → `not_indexed.dirs` (27) + `not_indexed.files` (336), todos `BY DESIGN`.
# - `.gitignore` deste repo (5.691 B) — fonte canônica secundária.
#
# Como auditar mudanças: depois de editar este arquivo, rodar `index_repository`
# (ou esperar `auto_watch` re-indexar) e re-checar `cli index_status` → comparar
# contagens em `not_indexed.dirs_count` e `not_indexed.files_count`.

# ─────────────────────────────────────────────────────────────────────────────
# 1. Diretorios de runtime / pacote — nao sao codigo-fonte
# ─────────────────────────────────────────────────────────────────────────────
node_modules/
node_modules

# Builds e artefatos reproduziveis (Layer 1 Next.js / Electron)
.build/
dist/
.next/
out/

# Electron especifico
electron/dist-electron/
electron/node_modules/
icon.iconset/

# Workspaces internos que tem proprio node_modules
@omniroute/opencode-plugin/dist/
@omniroute/opencode-plugin/node_modules/
@omniroute/opencode-provider/dist/
@omniroute/opencode-provider/node_modules/

# Recursos nativos compilados (C/JNI/wasm)
src/mitm/tproxy/native/build/

# Artefatos locais do Stryker / Playwright / coverage
.stryker-tmp/
reports/mutation/
stryker-output-*.json
.playwright-mcp/
test-results/
playwright-report/
blob-report/

# Analise / linters / caches
.analysis/
.sisyphus/
.plans/
.gitnexus
.worktrees
.codegraph/

# Quality artifacts (gerados por npm run lint --cache etc)
.eslintcache
.eslintcache-complexity

# Claude Code local state
.claude/scheduled_tasks.lock
.claude/scheduled_tasks/
.claude/sessions/
.claude/state.json
.claude/settings.local.json

# Serena / Antigravity / outras tools locais
.serena/
.antigravitycli/
.gemini/
.config/

# ─────────────────────────────────────────────────────────────────────────────
# 2. Diretorios com prefixo `_` — locais / privados (regra global do .gitignore)
# ─────────────────────────────────────────────────────────────────────────────
_*/
_artifacts/
_cache/
_mono_repo/
_references/
_tasks/

# ─────────────────────────────────────────────────────────────────────────────
# 3. Diretorios de tooling IA (state local, nao codigo)
# ─────────────────────────────────────────────────────────────────────────────
.agents/
.claude/
.vscode/
.idea/
.junie/
.omc/
.data/
.data-dev/
.local-data/
.logs/
.artifacts/
.source/
.superpowers/
.claude-flow/
.omnivscodeagent/
omnirouteCloud/
omnirouteSite/
.omniroute/
.stent/

# Subpaths especificos do Claude Code que nao estao em .claude/ (criados sob repo)
.claude/worktrees/

# ─────────────────────────────────────────────────────────────────────────────
# 4. Diretorios de dados / runtime locais (storage, env, secrets, scratch)
# ─────────────────────────────────────────────────────────────────────────────
data/
# NOTA: src/lib/env/, src/app/api/{cloud,sync/cloud,system/env,agent-skills/coverage}/
# foram removidos daqui (2026-08-05). Os nomes sugerem dados/segredos locais, mas os
# 8 arquivos sao route handlers e modulos rastreados no git — escondia-los do grafo
# criava pontos cegos em buscas e em analise de impacto.
tests/golden-set/data/

# Logs e saida de teste
logs/*
test_output.log
home-diegosouzapw-dev-automacoes-*.txt

# ─────────────────────────────────────────────────────────────────────────────
# 5. Diretorios do monorepo por subprojeto (nao fazem parte do app principal)
# ─────────────────────────────────────────────────────────────────────────────
security-analysis/
vscode-extension/
obsidian-plugin/node_modules/

# ─────────────────────────────────────────────────────────────────────────────
# 6. Diretorios de documentacao interna / workflow
# ─────────────────────────────────────────────────────────────────────────────
docs/superpowers/
# Docs traduzidas: 1.215 arquivos / 94 MB (inclui 20+ copias do CHANGELOG).
# Sao traducoes do tree em ingles, ja indexado — no grafo so geram ruido em
# search_code e consomem o auto_index_limit.
docs/i18n/

# ─────────────────────────────────────────────────────────────────────────────
# 7. Arquivos especificos (nao diretorios inteiros)
# ─────────────────────────────────────────────────────────────────────────────

# Segredos e env — NUNCA indexar
.env
.env.*
!.env.example
!.env.homolog.example

# TypeScript build info e next env declaration
*.tsbuildinfo
next-env.d.ts
typescript

# SQLite transient files (WAL/SHM/journal)
*.sqlite-shm
*.sqlite-wal
*.sqlite-journal

# Mapas e source maps
*.map

# Bun / npm lockfiles ruidosos
bun.lock

# `cheaper-inference-gateway.svg` e arquivos de midia na raiz/asset ja cobertos
# pelos `ignored-suffix` do indexador (svg/png/jpg/ico/etc >50kB ou >500linhas);
# manter a regra explicita aqui ajuda a auditar:
cheaper-inference-gateway.svg
cheaper-inference-gateway-*.svg

# Husky internals
.husky/_/

# CI / quality metric artifacts
config/quality/quality-metrics.json
config/quality/test-impact-map.json
audit-report.json
.gh-discussions.json

# i18n audit (gerado por npm run scripts)
scripts/i18n/_audit.json
scripts/i18n/_pending-keys.json

# NOTA: bin/omniroute.mjs foi removido daqui (2026-08-05). Estava marcado como
# "scratch", mas e o entrypoint real do CLI publicado (package.json -> bin.omniroute)
# e consta em PACK_ARTIFACT_REQUIRED_PATHS. Precisa estar no grafo.

# Deploy / docker backups
deploy.sh
docker-compose.yml.bak
docker-compose.minimal.yml
25 changes: 25 additions & 0 deletions .dockerignore
Original file line number Diff line number Diff line change
Expand Up @@ -7,7 +7,13 @@
**/.vscode

# Dependencies and build output
# `node_modules` alone matches the ROOT only — Docker's matcher does not cross
# `/` like .gitignore does. Without the `**/` form, nested installs ship in the
# build context (e.g. @omniroute/opencode-provider/node_modules, ~79 MB of
# devDependencies). Both forms are kept: the bare one is the documented root
# rule, the `**/` one covers every nested package.
node_modules
**/node_modules
.next
.build
out
Expand All @@ -18,6 +24,7 @@ coverage
# Runtime data and logs
data
logs
.sandbox

# Local env files (inject at runtime via --env-file or -e)
.env
Expand All @@ -37,6 +44,19 @@ tests
test-results
playwright-report
blob-report
output
.playwright-cli
.playwright-mcp
.stryker-tmp
reports/mutation

# Local caches and quality-gate artifacts (all gitignored). `_*` does not match
# dot-prefixed names, so these need explicit entries.
.artifacts
.eslintcache*
.fakebin-*
MAX
quality-ratchet/

# Documentation
# Issue #2348: The Dashboard Docs viewer reads markdown from `/app/docs` at
Expand All @@ -49,6 +69,10 @@ blob-report
# (English) sources at runtime, so translations are not required in the
# container image.
docs/i18n/**
# Internal planning artifacts (gitignored). `*.md` above only matches the root,
# so without this rule these land in /app/docs and become readable through the
# dashboard's Docs viewer at runtime.
docs/superpowers/**
docs/diagrams/**/*.png
docs/diagrams/**/*.jpg
docs/diagrams/**/*.jpeg
Expand Down Expand Up @@ -125,3 +149,4 @@ app.__qa_backup/
.worktrees
.next-playwright/
cloud/
electron/dist-electron
12 changes: 12 additions & 0 deletions .editorconfig
Original file line number Diff line number Diff line change
@@ -0,0 +1,12 @@
root = true

[*]
indent_style = space
indent_size = 2
end_of_line = lf
charset = utf-8
trim_trailing_whitespace = true
insert_final_newline = true

[*.sh]
indent_size = 4
6 changes: 6 additions & 0 deletions .env.devin-bridge.example
Original file line number Diff line number Diff line change
@@ -0,0 +1,6 @@
ENABLE_LIVE_DEVIN_TESTS=0
DEVIN_BRIDGE_MODEL=devin-cli-agentic/swe-1-7
DEVIN_BRIDGE_SONNET_MODEL=devin-cli-agentic/swe-1-7
DEVIN_BRIDGE_OPUS_MODEL=devin-cli-agentic/swe-1-7
DEVIN_BRIDGE_HAIKU_MODEL=devin-cli-agentic/swe-1-7
DEVIN_BRIDGE_SUBAGENT_MODEL=devin-cli-agentic/swe-1-7
Loading
Loading