[Dingding-leo]

Summary

Fixes #8708.

Changes

• Updated in to call instead of directly querying .
• Added unit test in verifying that database feature flag overrides enable request PII masking as expected.

Verification

• Ran unit tests: TAP version 13

GUARDRAIL earlier pre-call modified undefined

GUARDRAIL later pre-call modified undefined

[DB] Changing cache_size from 65536KB to 16384KB

[DB] cache_size changed to 16384KB

[DB] SQLite database ready: /Users/austinliu/.omniroute/storage.sqlite (DATA_DIR=/Users/austinliu/.omniroute, SQLITE_FILE=/Users/austinliu/.omniroute/storage.sqlite)

Request blocked by prompt injection guard {

detections: [

{ pattern: 'system_override', severity: 'high' },

{ pattern: 'system_prompt_leak', severity: 'high' }

]

}

Subtest: guardrail registry runs pre-call hooks in priority order

ok 1 - guardrail registry runs pre-call hooks in priority order

duration_ms: 0.872042
type: 'test'
...

Subtest: guardrail registry respects disabledGuardrails from context

ok 2 - guardrail registry respects disabledGuardrails from context

duration_ms: 0.112417
type: 'test'
...

Subtest: resolveDisabledGuardrails merges api key, body metadata, and headers

ok 3 - resolveDisabledGuardrails merges api key, body metadata, and headers

duration_ms: 0.094708
type: 'test'
...

Subtest: prompt injection guardrail blocks suspicious content in block mode

ok 4 - prompt injection guardrail blocks suspicious content in block mode

duration_ms: 21.844042
type: 'test'
...

Subtest: pii masker guardrail redacts request and response payloads

ok 5 - pii masker guardrail redacts request and response payloads

duration_ms: 1.37375
type: 'test'
...

Subtest: pii masker respects feature flag overrides (DB and env)

ok 6 - pii masker respects feature flag overrides (DB and env)

duration_ms: 0.26475
type: 'test'
...

Subtest: pii masker does not rewrite request PII when redaction flag is off

ok 7 - pii masker does not rewrite request PII when redaction flag is off

duration_ms: 0.110583
type: 'test'
...

Subtest: guardrail registry fails open when a guardrail throws

ok 8 - guardrail registry fails open when a guardrail throws

duration_ms: 0.097959
type: 'test'
...
1..8

tests 8

suites 0

pass 8

fail 0

cancelled 0

skipped 0

todo 0

duration_ms 400.818792 (PASS, 8/8).

[Copilot]

Copilot was unable to review this pull request because the user who requested the review has reached their quota limit.

[diegosouzapw]

✅ Conflito resolvido automaticamente — pronto para o merge-train

O conflito contra release/v3.8.49 foi resolvido e o branch foi atualizado para incluir a resolução:

• HEAD anterior → HEAD atual: ver git log --oneline no branch.
• Estratégia de resolução: commit merge-tree preservando a intenção das duas pontas (PR + release).
• Co-autoria preservada: o(s) commit(s) original(is) da contribuição continuam intactos.

Esta PR agora é MERGEABLE contra release/v3.8.49 e vai entrar no merge-train v3.8.49 local (suite validada em 192.168.0.113, squash merge via --admin).