Skip to content

fix(ci): drain unit test base-reds (i18n pt-BR, inventory, CC provider route) (#9985) #10795

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Closed
rqzbeh wants to merge 4 commits into from
Closed

fix(ci): drain unit test base-reds (i18n pt-BR, inventory, CC provider route) (#9985) #10795

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
4 commits
Select commit Hold shift + click to select a range
bc53f9b
fix(ci): drain unit test base-reds (i18n pt-BR/vi, test-discovery pro…
rqzbeh Aug 21, 2026
5799ab6
fix(ci): fix dashboard typecheck base-red errors in combos page and H…
rqzbeh Aug 22, 2026
2644be6
fix(webhooks): guard against missing event descriptions in Slack, Tel…
rqzbeh Aug 22, 2026
7e4904e
ci: re-trigger unit test runner
rqzbeh Aug 22, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
6 changes: 6 additions & 0 deletions .env.example
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -27,6 +27,10 @@ API_KEY_SECRET=
# Default: CHANGEME (insecure, for local dev only)
INITIAL_PASSWORD=CHANGEME

# Disable password login when OIDC authentication is enabled.
# OIDC_DISABLE_PASSWORD_LOGIN=false
# OMNIROUTE_OIDC_DISABLE_PASSWORD_LOGIN=false

# ═══════════════════════════════════════════════════════════════════════════════
# 2. STORAGE & DATABASE
# ═══════════════════════════════════════════════════════════════════════════════
Expand Down Expand Up @@ -1139,6 +1143,8 @@ CODEX_OAUTH_CLIENT_ID=app_EMoamEEZ73f0CkXaXp7hrann

# ── Kimi Coding (Moonshot) ──
KIMI_CODING_OAUTH_CLIENT_ID=17e5f671-d194-4dfb-9706-5516cb48c098
# KIMI_WEB_BASE_URL=https://www.kimi.ai
# KIMI_WEB_CHAT_URL=https://www.kimi.ai/api/chat

# ── GitHub Copilot ──
GITHUB_OAUTH_CLIENT_ID=Iv1.b507a08c87ecfe98
Expand Down
4 changes: 2 additions & 2 deletions config/quality/dashboard-typecheck-baseline.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -52,10 +52,10 @@
"TS2554": 2
},
"src/app/(dashboard)/dashboard/combos/page.tsx": {
"TS2339": 4,
"TS2345": 5,
"TS2698": 1,
"TS2322": 13
"TS2322": 13,
"TS2339": 3
},
"src/app/(dashboard)/dashboard/compression/studio/EncoderComparisonTable.tsx": {
"TS2322": 1
Expand Down
2 changes: 1 addition & 1 deletion config/quality/eslint-suppressions.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -3259,4 +3259,4 @@
"count": 5
}
}
}
}
4 changes: 4 additions & 0 deletions docs/reference/ENVIRONMENT.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -58,6 +58,8 @@ These **must** be set before the first run. Without them, the application will e
| `JWT_SECRET` | **Yes** | _(none)_ | `src/lib/auth` | Signs/verifies all dashboard session cookies (JWT). Generate with `openssl rand -base64 48`. |
| `API_KEY_SECRET` | **Yes** | _(none)_ | `src/lib/db/apiKeys.ts` | AES encryption key for API key values at rest in SQLite. Generate with `openssl rand -hex 32`. |
| `INITIAL_PASSWORD` | **Yes** | `CHANGEME` | Bootstrap script | Sets the initial admin dashboard password (matches `.env.example` default — kept obviously insecure to force a change). **Change before first use.** After login, change via Dashboard → Settings → Security. |
| `OIDC_DISABLE_PASSWORD_LOGIN` | Optional | `false` | `src/app/api/auth/login/route.ts` | Disables password login when OIDC authentication is active. |
| `OMNIROUTE_OIDC_DISABLE_PASSWORD_LOGIN` | Optional | `false` | `src/shared/constants/featureFlagDefinitions.ts` | Preferred prefix alias for disabling password login with OIDC. |
| `OMNIROUTE_WS_BRIDGE_SECRET` | **Yes** (production) | _(unset)_ | `src/app/api/internal/codex-responses-ws/route.ts` | Shared secret for the internal Codex Responses WebSocket bridge. Authenticates bridge requests between the Electron/browser WS relay and OmniRoute. ⚠️ **REQUIRED in production — when unset, all WS bridge requests are rejected.** Generate with `openssl rand -base64 32`. |
| `OMNIROUTE_PEER_STAMP_TOKEN` | No (auto) | _(auto per boot)_ | `src/server/authz/policies/management.ts` | Per-process secret proving the trusted peer-IP stamp came from OmniRoute's own HTTP server (`scripts/dev/peer-stamp.mjs`). The authz middleware trusts request locality (loopback/LAN gating of LOCAL_ONLY routes) only when the stamp carries this token. Auto-generated each boot — leave unset; only pin it for multi-process setups that must share the stamp. |

Expand Down Expand Up @@ -568,6 +570,8 @@ Built-in credentials for **localhost development**. For remote deployments, regi
| `GEMINI_OAUTH_CLIENT_ID` | Gemini (Google) | Requires matching `_SECRET`. |
| `GEMINI_OAUTH_CLIENT_SECRET` | Gemini (Google) | — |
| `KIMI_CODING_OAUTH_CLIENT_ID` | Kimi Coding (Moonshot) | Public client. |
| `KIMI_WEB_BASE_URL` | Kimi Web | Base URL for Kimi Web provider requests. Default: `https://www.kimi.ai`. |
| `KIMI_WEB_CHAT_URL` | Kimi Web | Chat endpoint URL for Kimi Web provider requests. Default: `https://www.kimi.ai/api/chat`. |
| `ANTIGRAVITY_OAUTH_CLIENT_ID` | Antigravity (Google) | Requires matching `_SECRET`. |
| `ANTIGRAVITY_OAUTH_CLIENT_SECRET` | Antigravity (Google) | — |
| `GITHUB_OAUTH_CLIENT_ID` | GitHub Copilot | Public client. |
Expand Down
Loading
Loading