Skip to content

feat(copilot): AI assistant with CodeGraph + CLI + knowledge base - #2669

Merged
diegosouzapw merged 2 commits into
diegosouzapw:release/v3.8.3from
herjarsa:pr-copilot
May 24, 2026
Merged

diegosouzapw merged 2 commits into
diegosouzapw:release/v3.8.3from
herjarsa:pr-copilot

Conversation

@herjarsa

Copy link
Copy Markdown
Contributor

Copilot assistant integrated into the dashboard with:\n- CodeGraph knowledge base for code exploration\n- CLI executor for full app control\n- Comprehensive system prompt (wiki)\n- POST /api/copilot/chat endpoint

- OmniRoute Copilot: AI assistant integrated into the dashboard
- CodeGraph knowledge module: query codebase symbols, callers, callees, files
- CLI executor: run omniroute commands for full app control
- Comprehensive system prompt with architecture docs (wikipedia)
- POST /api/copilot/chat endpoint with intent classification + tool dispatch
@herjarsa
herjarsa requested a review from diegosouzapw as a code owner May 24, 2026 18:53

@gemini-code-assist gemini-code-assist Bot left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Code Review

This pull request introduces the OmniRoute Copilot, a feature set including a chat API endpoint, an intent-classification engine, and a 'CodeGraph' module for codebase analysis. While the implementation provides a comprehensive knowledge base and toolset, several critical issues were identified. Most notably, the new API endpoint lacks authentication and authorization, and the CLI execution tool is vulnerable to command injection. Feedback also highlights a violation of the project's Zod validation policy, the presence of unused imports and constants, and hardcoded strings that hinder internationalization.

*
* Body: { messages: [{ role: "user"|"assistant", content: string }] }
*/
export async function POST(request: Request) {

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

security-critical critical

This endpoint allows sensitive operations such as creating API keys, revoking them, and executing CLI commands. However, it currently lacks any authentication or authorization checks. This is a critical security vulnerability that allows any unauthenticated user to potentially compromise the system.

Comment thread src/lib/copilot/tools.ts
Comment on lines +321 to +326
const output = execSync(`omniroute ${cmd}`, {
encoding: "utf-8",
timeout: 30000,
maxBuffer: 1024 * 1024,
});
return `\`\`\`\n${output.trim()}\n\`\`\``;

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

security-critical critical

The runOmniRouteCli tool is highly vulnerable to command injection. It passes the cmd string directly to execSync, which executes it in a shell. An attacker can use shell metacharacters (e.g., ;, &&, |, `, $()) to execute arbitrary commands on the host system. You should use spawnSync with an argument array to avoid shell interpretation and implement a whitelist of allowed subcommands.

Comment on lines +16 to +23
const body: CopilotRequest = await request.json();

if (!body.messages || !Array.isArray(body.messages) || body.messages.length === 0) {
return NextResponse.json(
{ error: "messages array is required" },
{ status: 400 },
);
}

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

medium

The request body is being manually validated instead of using a Zod schema. According to the repository style guide (Rule 2.8), all inputs must be validated with Zod schemas from src/shared/validation/schemas.ts.

References
  1. Always validate inputs with Zod schemas from src/shared/validation/schemas.ts. (link)

}
}

const stmt = (_db as { prepare: (sql: string) => { all: (params: unknown[]) => unknown[] } }).prepare(query);

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

medium

The inline type casting for _db is brittle and repetitive. It is better to define a proper interface for the database object to ensure type safety and readability.

References
  1. Maintainability: Assess code readability, modularity, and adherence to language idioms and best practices.

Comment thread src/lib/copilot/engine.ts
Comment on lines +9 to +30
import { getCopilotSystemPrompt } from "./systemPrompt";
import { COPILOT_TOOLS, getCopilotTool, getCopilotToolDescriptions } from "./tools";

// ── Types ────────────────────────────────────────────────────────────────────

export interface CopilotMessage {
role: "user" | "assistant" | "system";
content: string;
}

export interface CopilotRequest {
messages: CopilotMessage[];
}

export interface CopilotResponse {
message: string;
toolCalls?: Array<{ name: string; args: Record<string, unknown>; result: string }>;
}

// ── Tool Lookup for Dynamic Dispatch ────────────────────────────────────────

const TOOL_NAMES = COPILOT_TOOLS.map((t) => t.name);

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

medium

The import getCopilotSystemPrompt (line 9) and the constant TOOL_NAMES (line 30) are defined but never used in this file. Removing unused code improves maintainability.

Comment thread src/lib/copilot/engine.ts
Comment on lines +34 to +125
function getKnowledgeResponse(query: string): string | null {
const q = query.toLowerCase();

// Architecture questions
if (/architecture|arquitectura|pipeline|request.*flow|request.*path/.test(q)) {
return `## OmniRoute Architecture

The request pipeline flows through:
1. **API Route** → CORS → Zod validation → Auth (optional)
2. **Guardrails** → Prompt injection guard, PII masking
3. **Pre-request Middleware Hooks** (NEW) — mutate routing decisions
4. **Task-aware routing / Combo resolution** — picks the target
5. **Cache check** — semantic/signature cache
6. **Rate limit check**
7. **Request translation** — OpenAI format → provider format
8. **Executor** — build URL + headers, fetch with retry
9. **Response translation** — provider format → client format
10. **SSE stream or JSON response**

The data layer uses **SQLite** via 45+ domain modules in \`src/lib/db/\`.
The streaming engine lives in \`open-sse/\` (handlers, executors, translator).`;
}

// Combo questions
if (/combo|routing|strategy|estrategia/.test(q)) {
return `## Combo Routing

Combos chain multiple targets (provider+model) with a strategy:

**14 strategies available:**
- \`priority\`: Try targets in order, fall through on failure
- \`weighted\`: Distribute load by weight
- \`round-robin\`: Cycle through targets
- \`auto\`: Intelligent selection (rules, cost, latency, eco, fast, LKGP)
- \`fill-first\`: Fill capacity of first target
- \`cost-optimized\`: Minimize cost
- \`context-optimized\`: Maximize context window
- \`p2c\`: Power of Two Choices
- \`random\` / \`strict-random\`: Random selection
- \`least-used\`: Load balance by usage
- \`reset-aware\`: Account for API reset windows
- \`context-relay\`: Relay context between models
- \`lkgp\`: Last Known Good Provider

Use \`createCombo\` tool or \`runOmniRouteCli\` to create them.`;
}

// Provider questions
if (/provider|proveedor/.test(q)) {
return `## Providers (212+)

OmniRoute supports 212+ providers across categories:
- **Free**: Qoder AI, Qwen Code, Gemini CLI, Kiro AI
- **OAuth** (14): Claude Code, Antigravity, Codex, GitHub Copilot, Cursor, Kimi Coding, Windsurf, etc.
- **API Key** (120+): OpenAI, Anthropic, Gemini, DeepSeek, Groq, xAI, Mistral, etc.
- **Self-Hosted** (8+): LM Studio, vLLM, Ollama, Triton, etc.
- **Custom**: \`openai-compatible-*\` and \`anthropic-compatible-*\`

Use \`listProviders\` to see your configured ones.`;
}

// Debugging/troubleshooting
if (/debug|error|fail|fallo|problema|issue|crash|log/.test(q)) {
return `## Troubleshooting

**Common issues:**

1. **Provider returns errors**: Check credentials with the health API (\`/api/monitoring/health\`)
2. **Combo targeting wrong provider**: Check strategy and targets with \`listCombos\`
3. **Rate limiting**: Check circuit breaker state via health API
4. **Auth errors**: Verify API key scopes with \`listApiKeys\`
5. **DeepSeek 400 errors**: Likely \`reasoning_content\` stripping issue — fixed in schemaCoercion.ts

**Use CodeGraph** to investigate specific code paths with \`searchCodeGraph\`.`;
}

// CodeGraph questions
if (/codigo|código|codebase|cómo funciona|how does|where is|dónde está/.test(q)) {
return `## Codebase Investigation

I can use CodeGraph to explore the OmniRoute codebase. Just ask me:
- "Busca la función handleChatCore"
- "Quién llama a sanitizeMessage?"
- "Qué funciones hay en combo.ts?"
- "Dame contexto del archivo chatCore.ts"
- "Lista los archivos TypeScript indexados"

Use these search terms naturally and I'll query the CodeGraph index.`;
}

return null;
}

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

medium

The knowledge base responses and help messages contain hardcoded strings in both English and Spanish. This makes internationalization difficult and does not follow the project's i18n patterns. These strings should be moved to the project's established locale keys.

Comment thread src/lib/copilot/tools.ts
import {
createCombo,
getAllCombos,
updateCombo,

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

medium

The updateCombo function is imported but never used in this file.

@kilo-code-bot

kilo-code-bot Bot commented May 24, 2026

Copy link
Copy Markdown

Kilo Code Review could not run — your account is out of credits.

Add credits or switch to a free model to enable reviews on this change.

@diegosouzapw
diegosouzapw changed the base branch from main to release/v3.8.3 May 24, 2026 18:55
@diegosouzapw
diegosouzapw merged commit 3766437 into diegosouzapw:release/v3.8.3 May 24, 2026
1 of 2 checks passed
@diegosouzapw

Copy link
Copy Markdown
Owner

Thank you @herjarsa for your contribution! The Copilot assistant + CodeGraph integrations have been merged into release/v3.8.3.

@diegosouzapw diegosouzapw mentioned this pull request May 24, 2026
diegosouzapw added a commit that referenced this pull request May 24, 2026
* chore(config): ignore additional agent workflow command files

Add newly introduced agent workflow and Claude command files to
.gitignore so proprietary automation assets are not committed.

* feat(deepseek-web): fix auth to use userToken + WASM PoW solver

Rewrite deepseek-web executor from broken cookie auth to userToken
Bearer flow (like Chat2API). Replace pure JS Keccak PoW with WASM
solver (5.8s → 86ms). Add 14 models, validation, and dashboard UX.

* fix(deepseek-web): update target_path to use challenge property

* refactor(deepseek-web): streamline token handling and implement cache eviction

* fix(deepseek-web): fix SSE parser, prompt format, and error handling

- Handle all 3 DeepSeek SSE stream formats: initial fragments,
  APPEND operations, and bare string tokens (fixes truncated responses)
- Simplify prompt builder to send system + last user message only
  (DeepSeek web API is single-turn, full history caused marker leakage)
- Check json.code before token extraction (fixes "did not return
  access token: Authorization" on code 40003 with HTTP 200)
- Clear session cache alongside token cache on auth errors
- Add dev origin for remote testing

Co-authored-by: Cursor <cursoragent@cursor.com>

* chore: ignore memory-bank and cursor agent rules from tracking

Co-authored-by: Cursor <cursoragent@cursor.com>

* feat: enhance documentation and configuration for Fumadocs integration

- Added Fumadocs MDX support in the Next.js configuration.
- Updated transpile packages to include fumadocs-ui and fumadocs-core.
- Implemented a comprehensive set of redirects for documentation paths to improve navigation.
- Removed the generate-docs-index script as it is no longer needed.
- Updated various documentation titles for consistency and clarity.
- Enhanced global styles to incorporate Fumadocs UI themes and styles.

* refactor(docs): cleanup fumadocs PR — revert deepseek, add i18n fallback, restore LanguageSelector

- Revert unrelated deepseek-web.ts changes (should be separate PR)
- Add .source/ to .gitignore (Fumadocs generated files)
- Remove contributor IP from allowedDevOrigins
- Add i18n runtime fallback: reads NEXT_LOCALE cookie, loads translated
  .md from docs/i18n/<locale>/docs/ (preserves existing translation pipeline)
- Restore LanguageSelector in Fumadocs layout nav
- Restore SEO metadata (title template, description, robots)

* fix(codex): use allowlist to strip non-Responses-API fields in non-passthrough path (#2608) (#2615)

Integrated into release/v3.8.3 — fix(codex): allowlist-based sanitization for gpt-5.5 Responses API

* fix(deepseek-web): fix SSE parser, prompt format, error handling, and cache keys (#2616)

Integrated into release/v3.8.3 — fix(deepseek-web): SSE parser (APPEND + bare tokens), prompt builder, error handling, session cache cleanup

* chore(config): ignore additional agent workflow command files

Add newly introduced agent workflow and Claude command files to
.gitignore so proprietary automation assets are not committed.

* feat(docs): migrate /docs to Fumadocs MDX with nested routes (#2614)

Integrated into release/v3.8.3 — Fumadocs MDX migration with nested routes, search API, and 50+ URL redirects

* fix(catalog): skip static PROVIDER_MODELS when synced models exist (#2625)

Integrated into release/v3.8.3

* fix(qoder): Cosy auth fallback for PAT tokens + vision support for qwen3-vl-plus (#2629)

Integrated into release/v3.8.3

* fix(cli): register tsx loader and add opencode config subcommand (#2631)

Integrated into release/v3.8.3

* feat(dashboard): add search and filters to /dashboard/api-manager (#2628)

Integrated into release/v3.8.3

* fix(claude): improve Pi and OpenCode compatibility (#2621)

Integrated into release/v3.8.3

* fix: restore semantic passthrough system-role-only extraction instead of full normalization (#2620)

Integrated into release/v3.8.3

* fix(kiro): stabilize conversationId across prompt compression (#2630)

Integrated into release/v3.8.3

* fix(deepseek-web): SSE thinking/search routing and session lifecycle (#2624)

Integrated into release/v3.8.3 — DeepSeek Web SSE thinking/search routing overhaul

* feat(dashboard): free-tier grouping with symbolic link in /providers (#2632)

Integrated into release/v3.8.3

* fix: close implementation gaps — t3-chat-web, stream_options, combo_strategy, batch config (#2634)

Integrated into release/v3.8.3

* feat(dashboard): risk notice modal for sensitive providers (#2633)

Integrated into release/v3.8.3

* fix(reasoning): extend reasoning_content injection to Kimi K2 and other replay models (#2639)

Integrated into release/v3.8.3

* fix(cli): Linux autostart via systemd user service (fixes #2627) (#2635)

Integrated into release/v3.8.3

* Refactor/providers free tier (#2640)

Integrated into release/v3.8.3

* fix(tests): remove duplicate assertion in schema coercion & fix(cli): ignore system vars in env check

* fix(combo): preserve omniModel tag in streaming output for round-trip context pinning (#2646)

Integrated into release/v3.8.3

* feat(dashboard): media providers pages + Web Fetch category (#2645)

Integrated into release/v3.8.3

* Feature provider adapta org com tutorial de conexão em modal (#2643)

Integrated into release/v3.8.3

* fix(rtk): skip content-based filter matching for non-shell tool results (#2642)

Integrated into release/v3.8.3

* fix(translator): enable Claude extended thinking for Copilot Responses-API requests (#2647)

Integrated into release/v3.8.3

* feat(dashboard): add search and filters to /dashboard/api-manager (#2641)

Integrated into release/v3.8.3

* feat(dashboard): risk notice modal for sensitive providers (#2638)

Integrated into release/v3.8.3

* feat(dashboard): mini-playground inline (Phase 4) (#2648)

Integrated into release/v3.8.3

* fix(settings): fix Require Login modal Cancel button text and dismissal (#2649)

Integrated into release/v3.8.3

* feat(combos): universal context handoff for cross-model conversation continuity (#2653)

Integrated into release/v3.8.3

* chore(release): bump to v3.8.3 — changelog, docs, version sync

* feat(i18n): complete zh-CN translations for 1220 missing keys (#2655)

Integrated into release/v3.8.3

* chore(release): include electron package changes in v3.8.3

* docs(changelog): integrate PR #2655 into v3.8.3

* feat(i18n): translate 377 additional zh-CN entries (81 new keys + 296 same-as-en) (#2659)

Integrated into release/v3.8.3

* feat(dashboard): add Cmd+K / Ctrl+K command palette for sidebar navigation (#2656)

Integrated into release/v3.8.3

* docs: update changelog for PR integrations under v3.8.3

* feat(cli): integrate native updates, autostart and headless CLI mode (#2662)

Integrated into release/v3.8.3

* fix(proxy): save dashboard custom proxies in registry (#2661)

Integrated into release/v3.8.3

* feat(dashboard): chat-first test slide-over (Option A) (#2660)

Integrated into release/v3.8.3

* docs: update changelog with Batch 2 PR merges for v3.8.3

* fix: add xhigh+max to effortLevel schema; add opencode-plugin publish job (#2666)

Integrated into release/v3.8.3

* docs: update changelog with Batch 3 PR #2666 merge for v3.8.3

* feat(quota+providers): card-grid layout, provider group headers, Codex race fix (#2667)

Integrated into release/v3.8.3

* feat(dashboard): real-time live WebSocket monitoring (#2668)

Integrated into release/v3.8.3

* feat(copilot): AI assistant with CodeGraph + CLI + knowledge base (#2669)

Integrated into release/v3.8.3

* feat(pipeline): pre-request middleware hooks (#2670)

Integrated into release/v3.8.3

* feat(resilience): credential health check + adaptive circuit breaker (#2671)

Integrated into release/v3.8.3

* feat(playground): combo routing visual simulator (#2672)

Integrated into release/v3.8.3

* feat(auth): API key groups with model-level permissions (#2673)

Integrated into release/v3.8.3

* feat(pwa): enhanced manifest + push notification support (#2674)

Integrated into release/v3.8.3

* feat(proxy): serverless relay endpoints with rate limiting (#2675)

Integrated into release/v3.8.3

* docs(changelog): update changelog for PRs 2667-2675 & fix: resolve typescript compile-time errors

* fix(db): remove transactions from migrations

Remove explicit transaction wrappers from recent migrations and correct
the API key groups migration metadata. Also fix codegraph path resolution
for ESM environments and refresh generated fumadocs source output.

---------

Co-authored-by: Ömer Vehbe <ovehbe@gmail.com>
Co-authored-by: Cursor <cursoragent@cursor.com>
Co-authored-by: Mr. Meowgi <mr@meowgi.dev>
Co-authored-by: Hernan Javier Ardila Sanchez <hjasgr@gmail.com>
Co-authored-by: amogus22877769 <y.lev357@gmail.com>
Co-authored-by: Halil Tezcan KARABULUT <info@hlltzcnkb.com>
Co-authored-by: Tentoxa <53821604+Tentoxa@users.noreply.github.com>
Co-authored-by: HALDRO <121296348+HALDRO@users.noreply.github.com>
Co-authored-by: Paijo <14921983+oyi77@users.noreply.github.com>
Co-authored-by: janeza2 <49841619+janeza2@users.noreply.github.com>
Co-authored-by: df4p <38404+df4p@users.noreply.github.com>
Co-authored-by: ivan-mezentsev <ivan@mezentsev.me>
Co-authored-by: Chewji <126886556+Chewji9875@users.noreply.github.com>
Co-authored-by: L-aros <107354918+L-aros@users.noreply.github.com>
Co-authored-by: M.M <mr.maatoug@gmail.com>
Co-authored-by: Benson K B <bensonkbmca@gmail.com>
Co-authored-by: terence71-glitch <mcdowellterence71@gmail.com>
@herjarsa
herjarsa deleted the pr-copilot branch June 4, 2026 13:07
HouMinXi pushed a commit to HouMinXi/OmniRoute that referenced this pull request Aug 2, 2026
* chore(config): ignore additional agent workflow command files

Add newly introduced agent workflow and Claude command files to
.gitignore so proprietary automation assets are not committed.

* feat(deepseek-web): fix auth to use userToken + WASM PoW solver

Rewrite deepseek-web executor from broken cookie auth to userToken
Bearer flow (like Chat2API). Replace pure JS Keccak PoW with WASM
solver (5.8s → 86ms). Add 14 models, validation, and dashboard UX.

* fix(deepseek-web): update target_path to use challenge property

* refactor(deepseek-web): streamline token handling and implement cache eviction

* fix(deepseek-web): fix SSE parser, prompt format, and error handling

- Handle all 3 DeepSeek SSE stream formats: initial fragments,
  APPEND operations, and bare string tokens (fixes truncated responses)
- Simplify prompt builder to send system + last user message only
  (DeepSeek web API is single-turn, full history caused marker leakage)
- Check json.code before token extraction (fixes "did not return
  access token: Authorization" on code 40003 with HTTP 200)
- Clear session cache alongside token cache on auth errors
- Add dev origin for remote testing

Co-authored-by: Cursor <cursoragent@cursor.com>

* chore: ignore memory-bank and cursor agent rules from tracking

Co-authored-by: Cursor <cursoragent@cursor.com>

* feat: enhance documentation and configuration for Fumadocs integration

- Added Fumadocs MDX support in the Next.js configuration.
- Updated transpile packages to include fumadocs-ui and fumadocs-core.
- Implemented a comprehensive set of redirects for documentation paths to improve navigation.
- Removed the generate-docs-index script as it is no longer needed.
- Updated various documentation titles for consistency and clarity.
- Enhanced global styles to incorporate Fumadocs UI themes and styles.

* refactor(docs): cleanup fumadocs PR — revert deepseek, add i18n fallback, restore LanguageSelector

- Revert unrelated deepseek-web.ts changes (should be separate PR)
- Add .source/ to .gitignore (Fumadocs generated files)
- Remove contributor IP from allowedDevOrigins
- Add i18n runtime fallback: reads NEXT_LOCALE cookie, loads translated
  .md from docs/i18n/<locale>/docs/ (preserves existing translation pipeline)
- Restore LanguageSelector in Fumadocs layout nav
- Restore SEO metadata (title template, description, robots)

* fix(codex): use allowlist to strip non-Responses-API fields in non-passthrough path (diegosouzapw#2608) (diegosouzapw#2615)

Integrated into release/v3.8.3 — fix(codex): allowlist-based sanitization for gpt-5.5 Responses API

* fix(deepseek-web): fix SSE parser, prompt format, error handling, and cache keys (diegosouzapw#2616)

Integrated into release/v3.8.3 — fix(deepseek-web): SSE parser (APPEND + bare tokens), prompt builder, error handling, session cache cleanup

* chore(config): ignore additional agent workflow command files

Add newly introduced agent workflow and Claude command files to
.gitignore so proprietary automation assets are not committed.

* feat(docs): migrate /docs to Fumadocs MDX with nested routes (diegosouzapw#2614)

Integrated into release/v3.8.3 — Fumadocs MDX migration with nested routes, search API, and 50+ URL redirects

* fix(catalog): skip static PROVIDER_MODELS when synced models exist (diegosouzapw#2625)

Integrated into release/v3.8.3

* fix(qoder): Cosy auth fallback for PAT tokens + vision support for qwen3-vl-plus (diegosouzapw#2629)

Integrated into release/v3.8.3

* fix(cli): register tsx loader and add opencode config subcommand (diegosouzapw#2631)

Integrated into release/v3.8.3

* feat(dashboard): add search and filters to /dashboard/api-manager (diegosouzapw#2628)

Integrated into release/v3.8.3

* fix(claude): improve Pi and OpenCode compatibility (diegosouzapw#2621)

Integrated into release/v3.8.3

* fix: restore semantic passthrough system-role-only extraction instead of full normalization (diegosouzapw#2620)

Integrated into release/v3.8.3

* fix(kiro): stabilize conversationId across prompt compression (diegosouzapw#2630)

Integrated into release/v3.8.3

* fix(deepseek-web): SSE thinking/search routing and session lifecycle (diegosouzapw#2624)

Integrated into release/v3.8.3 — DeepSeek Web SSE thinking/search routing overhaul

* feat(dashboard): free-tier grouping with symbolic link in /providers (diegosouzapw#2632)

Integrated into release/v3.8.3

* fix: close implementation gaps — t3-chat-web, stream_options, combo_strategy, batch config (diegosouzapw#2634)

Integrated into release/v3.8.3

* feat(dashboard): risk notice modal for sensitive providers (diegosouzapw#2633)

Integrated into release/v3.8.3

* fix(reasoning): extend reasoning_content injection to Kimi K2 and other replay models (diegosouzapw#2639)

Integrated into release/v3.8.3

* fix(cli): Linux autostart via systemd user service (fixes diegosouzapw#2627) (diegosouzapw#2635)

Integrated into release/v3.8.3

* Refactor/providers free tier (diegosouzapw#2640)

Integrated into release/v3.8.3

* fix(tests): remove duplicate assertion in schema coercion & fix(cli): ignore system vars in env check

* fix(combo): preserve omniModel tag in streaming output for round-trip context pinning (diegosouzapw#2646)

Integrated into release/v3.8.3

* feat(dashboard): media providers pages + Web Fetch category (diegosouzapw#2645)

Integrated into release/v3.8.3

* Feature provider adapta org com tutorial de conexão em modal (diegosouzapw#2643)

Integrated into release/v3.8.3

* fix(rtk): skip content-based filter matching for non-shell tool results (diegosouzapw#2642)

Integrated into release/v3.8.3

* fix(translator): enable Claude extended thinking for Copilot Responses-API requests (diegosouzapw#2647)

Integrated into release/v3.8.3

* feat(dashboard): add search and filters to /dashboard/api-manager (diegosouzapw#2641)

Integrated into release/v3.8.3

* feat(dashboard): risk notice modal for sensitive providers (diegosouzapw#2638)

Integrated into release/v3.8.3

* feat(dashboard): mini-playground inline (Phase 4) (diegosouzapw#2648)

Integrated into release/v3.8.3

* fix(settings): fix Require Login modal Cancel button text and dismissal (diegosouzapw#2649)

Integrated into release/v3.8.3

* feat(combos): universal context handoff for cross-model conversation continuity (diegosouzapw#2653)

Integrated into release/v3.8.3

* chore(release): bump to v3.8.3 — changelog, docs, version sync

* feat(i18n): complete zh-CN translations for 1220 missing keys (diegosouzapw#2655)

Integrated into release/v3.8.3

* chore(release): include electron package changes in v3.8.3

* docs(changelog): integrate PR diegosouzapw#2655 into v3.8.3

* feat(i18n): translate 377 additional zh-CN entries (81 new keys + 296 same-as-en) (diegosouzapw#2659)

Integrated into release/v3.8.3

* feat(dashboard): add Cmd+K / Ctrl+K command palette for sidebar navigation (diegosouzapw#2656)

Integrated into release/v3.8.3

* docs: update changelog for PR integrations under v3.8.3

* feat(cli): integrate native updates, autostart and headless CLI mode (diegosouzapw#2662)

Integrated into release/v3.8.3

* fix(proxy): save dashboard custom proxies in registry (diegosouzapw#2661)

Integrated into release/v3.8.3

* feat(dashboard): chat-first test slide-over (Option A) (diegosouzapw#2660)

Integrated into release/v3.8.3

* docs: update changelog with Batch 2 PR merges for v3.8.3

* fix: add xhigh+max to effortLevel schema; add opencode-plugin publish job (diegosouzapw#2666)

Integrated into release/v3.8.3

* docs: update changelog with Batch 3 PR diegosouzapw#2666 merge for v3.8.3

* feat(quota+providers): card-grid layout, provider group headers, Codex race fix (diegosouzapw#2667)

Integrated into release/v3.8.3

* feat(dashboard): real-time live WebSocket monitoring (diegosouzapw#2668)

Integrated into release/v3.8.3

* feat(copilot): AI assistant with CodeGraph + CLI + knowledge base (diegosouzapw#2669)

Integrated into release/v3.8.3

* feat(pipeline): pre-request middleware hooks (diegosouzapw#2670)

Integrated into release/v3.8.3

* feat(resilience): credential health check + adaptive circuit breaker (diegosouzapw#2671)

Integrated into release/v3.8.3

* feat(playground): combo routing visual simulator (diegosouzapw#2672)

Integrated into release/v3.8.3

* feat(auth): API key groups with model-level permissions (diegosouzapw#2673)

Integrated into release/v3.8.3

* feat(pwa): enhanced manifest + push notification support (diegosouzapw#2674)

Integrated into release/v3.8.3

* feat(proxy): serverless relay endpoints with rate limiting (diegosouzapw#2675)

Integrated into release/v3.8.3

* docs(changelog): update changelog for PRs 2667-2675 & fix: resolve typescript compile-time errors

* fix(db): remove transactions from migrations

Remove explicit transaction wrappers from recent migrations and correct
the API key groups migration metadata. Also fix codegraph path resolution
for ESM environments and refresh generated fumadocs source output.

---------

Co-authored-by: Ömer Vehbe <ovehbe@gmail.com>
Co-authored-by: Cursor <cursoragent@cursor.com>
Co-authored-by: Mr. Meowgi <mr@meowgi.dev>
Co-authored-by: Hernan Javier Ardila Sanchez <hjasgr@gmail.com>
Co-authored-by: amogus22877769 <y.lev357@gmail.com>
Co-authored-by: Halil Tezcan KARABULUT <info@hlltzcnkb.com>
Co-authored-by: Tentoxa <53821604+Tentoxa@users.noreply.github.com>
Co-authored-by: HALDRO <121296348+HALDRO@users.noreply.github.com>
Co-authored-by: Paijo <14921983+oyi77@users.noreply.github.com>
Co-authored-by: janeza2 <49841619+janeza2@users.noreply.github.com>
Co-authored-by: df4p <38404+df4p@users.noreply.github.com>
Co-authored-by: ivan-mezentsev <ivan@mezentsev.me>
Co-authored-by: Chewji <126886556+Chewji9875@users.noreply.github.com>
Co-authored-by: L-aros <107354918+L-aros@users.noreply.github.com>
Co-authored-by: M.M <mr.maatoug@gmail.com>
Co-authored-by: Benson K B <bensonkbmca@gmail.com>
Co-authored-by: terence71-glitch <mcdowellterence71@gmail.com>
Poid-ZA pushed a commit to Poid-ZA/OmniRoute that referenced this pull request Aug 5, 2026
* chore(config): ignore additional agent workflow command files

Add newly introduced agent workflow and Claude command files to
.gitignore so proprietary automation assets are not committed.

* feat(deepseek-web): fix auth to use userToken + WASM PoW solver

Rewrite deepseek-web executor from broken cookie auth to userToken
Bearer flow (like Chat2API). Replace pure JS Keccak PoW with WASM
solver (5.8s → 86ms). Add 14 models, validation, and dashboard UX.

* fix(deepseek-web): update target_path to use challenge property

* refactor(deepseek-web): streamline token handling and implement cache eviction

* fix(deepseek-web): fix SSE parser, prompt format, and error handling

- Handle all 3 DeepSeek SSE stream formats: initial fragments,
  APPEND operations, and bare string tokens (fixes truncated responses)
- Simplify prompt builder to send system + last user message only
  (DeepSeek web API is single-turn, full history caused marker leakage)
- Check json.code before token extraction (fixes "did not return
  access token: Authorization" on code 40003 with HTTP 200)
- Clear session cache alongside token cache on auth errors
- Add dev origin for remote testing

Co-authored-by: Cursor <cursoragent@cursor.com>

* chore: ignore memory-bank and cursor agent rules from tracking

Co-authored-by: Cursor <cursoragent@cursor.com>

* feat: enhance documentation and configuration for Fumadocs integration

- Added Fumadocs MDX support in the Next.js configuration.
- Updated transpile packages to include fumadocs-ui and fumadocs-core.
- Implemented a comprehensive set of redirects for documentation paths to improve navigation.
- Removed the generate-docs-index script as it is no longer needed.
- Updated various documentation titles for consistency and clarity.
- Enhanced global styles to incorporate Fumadocs UI themes and styles.

* refactor(docs): cleanup fumadocs PR — revert deepseek, add i18n fallback, restore LanguageSelector

- Revert unrelated deepseek-web.ts changes (should be separate PR)
- Add .source/ to .gitignore (Fumadocs generated files)
- Remove contributor IP from allowedDevOrigins
- Add i18n runtime fallback: reads NEXT_LOCALE cookie, loads translated
  .md from docs/i18n/<locale>/docs/ (preserves existing translation pipeline)
- Restore LanguageSelector in Fumadocs layout nav
- Restore SEO metadata (title template, description, robots)

* fix(codex): use allowlist to strip non-Responses-API fields in non-passthrough path (diegosouzapw#2608) (diegosouzapw#2615)

Integrated into release/v3.8.3 — fix(codex): allowlist-based sanitization for gpt-5.5 Responses API

* fix(deepseek-web): fix SSE parser, prompt format, error handling, and cache keys (diegosouzapw#2616)

Integrated into release/v3.8.3 — fix(deepseek-web): SSE parser (APPEND + bare tokens), prompt builder, error handling, session cache cleanup

* chore(config): ignore additional agent workflow command files

Add newly introduced agent workflow and Claude command files to
.gitignore so proprietary automation assets are not committed.

* feat(docs): migrate /docs to Fumadocs MDX with nested routes (diegosouzapw#2614)

Integrated into release/v3.8.3 — Fumadocs MDX migration with nested routes, search API, and 50+ URL redirects

* fix(catalog): skip static PROVIDER_MODELS when synced models exist (diegosouzapw#2625)

Integrated into release/v3.8.3

* fix(qoder): Cosy auth fallback for PAT tokens + vision support for qwen3-vl-plus (diegosouzapw#2629)

Integrated into release/v3.8.3

* fix(cli): register tsx loader and add opencode config subcommand (diegosouzapw#2631)

Integrated into release/v3.8.3

* feat(dashboard): add search and filters to /dashboard/api-manager (diegosouzapw#2628)

Integrated into release/v3.8.3

* fix(claude): improve Pi and OpenCode compatibility (diegosouzapw#2621)

Integrated into release/v3.8.3

* fix: restore semantic passthrough system-role-only extraction instead of full normalization (diegosouzapw#2620)

Integrated into release/v3.8.3

* fix(kiro): stabilize conversationId across prompt compression (diegosouzapw#2630)

Integrated into release/v3.8.3

* fix(deepseek-web): SSE thinking/search routing and session lifecycle (diegosouzapw#2624)

Integrated into release/v3.8.3 — DeepSeek Web SSE thinking/search routing overhaul

* feat(dashboard): free-tier grouping with symbolic link in /providers (diegosouzapw#2632)

Integrated into release/v3.8.3

* fix: close implementation gaps — t3-chat-web, stream_options, combo_strategy, batch config (diegosouzapw#2634)

Integrated into release/v3.8.3

* feat(dashboard): risk notice modal for sensitive providers (diegosouzapw#2633)

Integrated into release/v3.8.3

* fix(reasoning): extend reasoning_content injection to Kimi K2 and other replay models (diegosouzapw#2639)

Integrated into release/v3.8.3

* fix(cli): Linux autostart via systemd user service (fixes diegosouzapw#2627) (diegosouzapw#2635)

Integrated into release/v3.8.3

* Refactor/providers free tier (diegosouzapw#2640)

Integrated into release/v3.8.3

* fix(tests): remove duplicate assertion in schema coercion & fix(cli): ignore system vars in env check

* fix(combo): preserve omniModel tag in streaming output for round-trip context pinning (diegosouzapw#2646)

Integrated into release/v3.8.3

* feat(dashboard): media providers pages + Web Fetch category (diegosouzapw#2645)

Integrated into release/v3.8.3

* Feature provider adapta org com tutorial de conexão em modal (diegosouzapw#2643)

Integrated into release/v3.8.3

* fix(rtk): skip content-based filter matching for non-shell tool results (diegosouzapw#2642)

Integrated into release/v3.8.3

* fix(translator): enable Claude extended thinking for Copilot Responses-API requests (diegosouzapw#2647)

Integrated into release/v3.8.3

* feat(dashboard): add search and filters to /dashboard/api-manager (diegosouzapw#2641)

Integrated into release/v3.8.3

* feat(dashboard): risk notice modal for sensitive providers (diegosouzapw#2638)

Integrated into release/v3.8.3

* feat(dashboard): mini-playground inline (Phase 4) (diegosouzapw#2648)

Integrated into release/v3.8.3

* fix(settings): fix Require Login modal Cancel button text and dismissal (diegosouzapw#2649)

Integrated into release/v3.8.3

* feat(combos): universal context handoff for cross-model conversation continuity (diegosouzapw#2653)

Integrated into release/v3.8.3

* chore(release): bump to v3.8.3 — changelog, docs, version sync

* feat(i18n): complete zh-CN translations for 1220 missing keys (diegosouzapw#2655)

Integrated into release/v3.8.3

* chore(release): include electron package changes in v3.8.3

* docs(changelog): integrate PR diegosouzapw#2655 into v3.8.3

* feat(i18n): translate 377 additional zh-CN entries (81 new keys + 296 same-as-en) (diegosouzapw#2659)

Integrated into release/v3.8.3

* feat(dashboard): add Cmd+K / Ctrl+K command palette for sidebar navigation (diegosouzapw#2656)

Integrated into release/v3.8.3

* docs: update changelog for PR integrations under v3.8.3

* feat(cli): integrate native updates, autostart and headless CLI mode (diegosouzapw#2662)

Integrated into release/v3.8.3

* fix(proxy): save dashboard custom proxies in registry (diegosouzapw#2661)

Integrated into release/v3.8.3

* feat(dashboard): chat-first test slide-over (Option A) (diegosouzapw#2660)

Integrated into release/v3.8.3

* docs: update changelog with Batch 2 PR merges for v3.8.3

* fix: add xhigh+max to effortLevel schema; add opencode-plugin publish job (diegosouzapw#2666)

Integrated into release/v3.8.3

* docs: update changelog with Batch 3 PR diegosouzapw#2666 merge for v3.8.3

* feat(quota+providers): card-grid layout, provider group headers, Codex race fix (diegosouzapw#2667)

Integrated into release/v3.8.3

* feat(dashboard): real-time live WebSocket monitoring (diegosouzapw#2668)

Integrated into release/v3.8.3

* feat(copilot): AI assistant with CodeGraph + CLI + knowledge base (diegosouzapw#2669)

Integrated into release/v3.8.3

* feat(pipeline): pre-request middleware hooks (diegosouzapw#2670)

Integrated into release/v3.8.3

* feat(resilience): credential health check + adaptive circuit breaker (diegosouzapw#2671)

Integrated into release/v3.8.3

* feat(playground): combo routing visual simulator (diegosouzapw#2672)

Integrated into release/v3.8.3

* feat(auth): API key groups with model-level permissions (diegosouzapw#2673)

Integrated into release/v3.8.3

* feat(pwa): enhanced manifest + push notification support (diegosouzapw#2674)

Integrated into release/v3.8.3

* feat(proxy): serverless relay endpoints with rate limiting (diegosouzapw#2675)

Integrated into release/v3.8.3

* docs(changelog): update changelog for PRs 2667-2675 & fix: resolve typescript compile-time errors

* fix(db): remove transactions from migrations

Remove explicit transaction wrappers from recent migrations and correct
the API key groups migration metadata. Also fix codegraph path resolution
for ESM environments and refresh generated fumadocs source output.

---------

Co-authored-by: Ömer Vehbe <ovehbe@gmail.com>
Co-authored-by: Cursor <cursoragent@cursor.com>
Co-authored-by: Mr. Meowgi <mr@meowgi.dev>
Co-authored-by: Hernan Javier Ardila Sanchez <hjasgr@gmail.com>
Co-authored-by: amogus22877769 <y.lev357@gmail.com>
Co-authored-by: Halil Tezcan KARABULUT <info@hlltzcnkb.com>
Co-authored-by: Tentoxa <53821604+Tentoxa@users.noreply.github.com>
Co-authored-by: HALDRO <121296348+HALDRO@users.noreply.github.com>
Co-authored-by: Paijo <14921983+oyi77@users.noreply.github.com>
Co-authored-by: janeza2 <49841619+janeza2@users.noreply.github.com>
Co-authored-by: df4p <38404+df4p@users.noreply.github.com>
Co-authored-by: ivan-mezentsev <ivan@mezentsev.me>
Co-authored-by: Chewji <126886556+Chewji9875@users.noreply.github.com>
Co-authored-by: L-aros <107354918+L-aros@users.noreply.github.com>
Co-authored-by: M.M <mr.maatoug@gmail.com>
Co-authored-by: Benson K B <bensonkbmca@gmail.com>
Co-authored-by: terence71-glitch <mcdowellterence71@gmail.com>
tkgo11 pushed a commit to tkgo11/OmniRoute that referenced this pull request Sep 23, 2026
muhamadgalihsaputra pushed a commit to niyatna/NiyatnaRoute that referenced this pull request Sep 27, 2026
* chore(config): ignore additional agent workflow command files

Add newly introduced agent workflow and Claude command files to
.gitignore so proprietary automation assets are not committed.

* feat(deepseek-web): fix auth to use userToken + WASM PoW solver

Rewrite deepseek-web executor from broken cookie auth to userToken
Bearer flow (like Chat2API). Replace pure JS Keccak PoW with WASM
solver (5.8s → 86ms). Add 14 models, validation, and dashboard UX.

* fix(deepseek-web): update target_path to use challenge property

* refactor(deepseek-web): streamline token handling and implement cache eviction

* fix(deepseek-web): fix SSE parser, prompt format, and error handling

- Handle all 3 DeepSeek SSE stream formats: initial fragments,
  APPEND operations, and bare string tokens (fixes truncated responses)
- Simplify prompt builder to send system + last user message only
  (DeepSeek web API is single-turn, full history caused marker leakage)
- Check json.code before token extraction (fixes "did not return
  access token: Authorization" on code 40003 with HTTP 200)
- Clear session cache alongside token cache on auth errors
- Add dev origin for remote testing

Co-authored-by: Cursor <cursoragent@cursor.com>

* chore: ignore memory-bank and cursor agent rules from tracking

Co-authored-by: Cursor <cursoragent@cursor.com>

* feat: enhance documentation and configuration for Fumadocs integration

- Added Fumadocs MDX support in the Next.js configuration.
- Updated transpile packages to include fumadocs-ui and fumadocs-core.
- Implemented a comprehensive set of redirects for documentation paths to improve navigation.
- Removed the generate-docs-index script as it is no longer needed.
- Updated various documentation titles for consistency and clarity.
- Enhanced global styles to incorporate Fumadocs UI themes and styles.

* refactor(docs): cleanup fumadocs PR — revert deepseek, add i18n fallback, restore LanguageSelector

- Revert unrelated deepseek-web.ts changes (should be separate PR)
- Add .source/ to .gitignore (Fumadocs generated files)
- Remove contributor IP from allowedDevOrigins
- Add i18n runtime fallback: reads NEXT_LOCALE cookie, loads translated
  .md from docs/i18n/<locale>/docs/ (preserves existing translation pipeline)
- Restore LanguageSelector in Fumadocs layout nav
- Restore SEO metadata (title template, description, robots)

* fix(codex): use allowlist to strip non-Responses-API fields in non-passthrough path (diegosouzapw#2608) (diegosouzapw#2615)

Integrated into release/v3.8.3 — fix(codex): allowlist-based sanitization for gpt-5.5 Responses API

* fix(deepseek-web): fix SSE parser, prompt format, error handling, and cache keys (diegosouzapw#2616)

Integrated into release/v3.8.3 — fix(deepseek-web): SSE parser (APPEND + bare tokens), prompt builder, error handling, session cache cleanup

* chore(config): ignore additional agent workflow command files

Add newly introduced agent workflow and Claude command files to
.gitignore so proprietary automation assets are not committed.

* feat(docs): migrate /docs to Fumadocs MDX with nested routes (diegosouzapw#2614)

Integrated into release/v3.8.3 — Fumadocs MDX migration with nested routes, search API, and 50+ URL redirects

* fix(catalog): skip static PROVIDER_MODELS when synced models exist (diegosouzapw#2625)

Integrated into release/v3.8.3

* fix(qoder): Cosy auth fallback for PAT tokens + vision support for qwen3-vl-plus (diegosouzapw#2629)

Integrated into release/v3.8.3

* fix(cli): register tsx loader and add opencode config subcommand (diegosouzapw#2631)

Integrated into release/v3.8.3

* feat(dashboard): add search and filters to /dashboard/api-manager (diegosouzapw#2628)

Integrated into release/v3.8.3

* fix(claude): improve Pi and OpenCode compatibility (diegosouzapw#2621)

Integrated into release/v3.8.3

* fix: restore semantic passthrough system-role-only extraction instead of full normalization (diegosouzapw#2620)

Integrated into release/v3.8.3

* fix(kiro): stabilize conversationId across prompt compression (diegosouzapw#2630)

Integrated into release/v3.8.3

* fix(deepseek-web): SSE thinking/search routing and session lifecycle (diegosouzapw#2624)

Integrated into release/v3.8.3 — DeepSeek Web SSE thinking/search routing overhaul

* feat(dashboard): free-tier grouping with symbolic link in /providers (diegosouzapw#2632)

Integrated into release/v3.8.3

* fix: close implementation gaps — t3-chat-web, stream_options, combo_strategy, batch config (diegosouzapw#2634)

Integrated into release/v3.8.3

* feat(dashboard): risk notice modal for sensitive providers (diegosouzapw#2633)

Integrated into release/v3.8.3

* fix(reasoning): extend reasoning_content injection to Kimi K2 and other replay models (diegosouzapw#2639)

Integrated into release/v3.8.3

* fix(cli): Linux autostart via systemd user service (fixes diegosouzapw#2627) (diegosouzapw#2635)

Integrated into release/v3.8.3

* Refactor/providers free tier (diegosouzapw#2640)

Integrated into release/v3.8.3

* fix(tests): remove duplicate assertion in schema coercion & fix(cli): ignore system vars in env check

* fix(combo): preserve omniModel tag in streaming output for round-trip context pinning (diegosouzapw#2646)

Integrated into release/v3.8.3

* feat(dashboard): media providers pages + Web Fetch category (diegosouzapw#2645)

Integrated into release/v3.8.3

* Feature provider adapta org com tutorial de conexão em modal (diegosouzapw#2643)

Integrated into release/v3.8.3

* fix(rtk): skip content-based filter matching for non-shell tool results (diegosouzapw#2642)

Integrated into release/v3.8.3

* fix(translator): enable Claude extended thinking for Copilot Responses-API requests (diegosouzapw#2647)

Integrated into release/v3.8.3

* feat(dashboard): add search and filters to /dashboard/api-manager (diegosouzapw#2641)

Integrated into release/v3.8.3

* feat(dashboard): risk notice modal for sensitive providers (diegosouzapw#2638)

Integrated into release/v3.8.3

* feat(dashboard): mini-playground inline (Phase 4) (diegosouzapw#2648)

Integrated into release/v3.8.3

* fix(settings): fix Require Login modal Cancel button text and dismissal (diegosouzapw#2649)

Integrated into release/v3.8.3

* feat(combos): universal context handoff for cross-model conversation continuity (diegosouzapw#2653)

Integrated into release/v3.8.3

* chore(release): bump to v3.8.3 — changelog, docs, version sync

* feat(i18n): complete zh-CN translations for 1220 missing keys (diegosouzapw#2655)

Integrated into release/v3.8.3

* chore(release): include electron package changes in v3.8.3

* docs(changelog): integrate PR diegosouzapw#2655 into v3.8.3

* feat(i18n): translate 377 additional zh-CN entries (81 new keys + 296 same-as-en) (diegosouzapw#2659)

Integrated into release/v3.8.3

* feat(dashboard): add Cmd+K / Ctrl+K command palette for sidebar navigation (diegosouzapw#2656)

Integrated into release/v3.8.3

* docs: update changelog for PR integrations under v3.8.3

* feat(cli): integrate native updates, autostart and headless CLI mode (diegosouzapw#2662)

Integrated into release/v3.8.3

* fix(proxy): save dashboard custom proxies in registry (diegosouzapw#2661)

Integrated into release/v3.8.3

* feat(dashboard): chat-first test slide-over (Option A) (diegosouzapw#2660)

Integrated into release/v3.8.3

* docs: update changelog with Batch 2 PR merges for v3.8.3

* fix: add xhigh+max to effortLevel schema; add opencode-plugin publish job (diegosouzapw#2666)

Integrated into release/v3.8.3

* docs: update changelog with Batch 3 PR diegosouzapw#2666 merge for v3.8.3

* feat(quota+providers): card-grid layout, provider group headers, Codex race fix (diegosouzapw#2667)

Integrated into release/v3.8.3

* feat(dashboard): real-time live WebSocket monitoring (diegosouzapw#2668)

Integrated into release/v3.8.3

* feat(copilot): AI assistant with CodeGraph + CLI + knowledge base (diegosouzapw#2669)

Integrated into release/v3.8.3

* feat(pipeline): pre-request middleware hooks (diegosouzapw#2670)

Integrated into release/v3.8.3

* feat(resilience): credential health check + adaptive circuit breaker (diegosouzapw#2671)

Integrated into release/v3.8.3

* feat(playground): combo routing visual simulator (diegosouzapw#2672)

Integrated into release/v3.8.3

* feat(auth): API key groups with model-level permissions (diegosouzapw#2673)

Integrated into release/v3.8.3

* feat(pwa): enhanced manifest + push notification support (diegosouzapw#2674)

Integrated into release/v3.8.3

* feat(proxy): serverless relay endpoints with rate limiting (diegosouzapw#2675)

Integrated into release/v3.8.3

* docs(changelog): update changelog for PRs 2667-2675 & fix: resolve typescript compile-time errors

* fix(db): remove transactions from migrations

Remove explicit transaction wrappers from recent migrations and correct
the API key groups migration metadata. Also fix codegraph path resolution
for ESM environments and refresh generated fumadocs source output.

---------

Co-authored-by: Ömer Vehbe <ovehbe@gmail.com>
Co-authored-by: Cursor <cursoragent@cursor.com>
Co-authored-by: Mr. Meowgi <mr@meowgi.dev>
Co-authored-by: Hernan Javier Ardila Sanchez <hjasgr@gmail.com>
Co-authored-by: amogus22877769 <y.lev357@gmail.com>
Co-authored-by: Halil Tezcan KARABULUT <info@hlltzcnkb.com>
Co-authored-by: Tentoxa <53821604+Tentoxa@users.noreply.github.com>
Co-authored-by: HALDRO <121296348+HALDRO@users.noreply.github.com>
Co-authored-by: Paijo <14921983+oyi77@users.noreply.github.com>
Co-authored-by: janeza2 <49841619+janeza2@users.noreply.github.com>
Co-authored-by: df4p <38404+df4p@users.noreply.github.com>
Co-authored-by: ivan-mezentsev <ivan@mezentsev.me>
Co-authored-by: Chewji <126886556+Chewji9875@users.noreply.github.com>
Co-authored-by: L-aros <107354918+L-aros@users.noreply.github.com>
Co-authored-by: M.M <mr.maatoug@gmail.com>
Co-authored-by: Benson K B <bensonkbmca@gmail.com>
Co-authored-by: terence71-glitch <mcdowellterence71@gmail.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants