Release v3.8.22

[diegosouzapw]

Release v3.8.22 — release/v3.8.22 → main. Living release notes — finalized at release time.

[3.8.22] — 2026-06-11

✨ Added

• MiMoCode free-tier provider ([feat(providers): add MiMoCode free-tier provider with bootstrap JWT auth #3659] — thanks @pizzav-xyz): new no-auth provider mimocode (alias mcode) exposing Xiaomi's mimo-auto model (1M context) via device-fingerprint bootstrap-JWT auth (/api/free-ai/bootstrap → Bearer JWT → /api/free-ai/openai/chat). Supports multiple accounts (N fingerprints → round-robin with exponential cooldown), re-bootstrap on 401/403, and cooldown on 429. Reuses a new generic NoAuthAccountCard dashboard component (also wired for opencode). 22 unit tests; upstream validated live during review. (Maintainer follow-up: added the required authHeader: "none" field to the registry entry.) Co-authored with @pizzav-xyz.
• Prefer Claude Code for unprefixed claude-* model IDs ([Add Claude Code routing preference for unprefixed Claude models #3540] — thanks @Witroch4): opt-in setting (default off) that routes bare claude-* model IDs from Claude Code clients through the Claude Code OAuth account instead of requiring a provider prefix. Configurable via the OMNIROUTE_PREFER_CLAUDE_CODE_FOR_UNPREFIXED_CLAUDE_MODELS env flag or a dashboard toggle on the Claude provider page; explicit provider prefixes still win. Full layer coverage (resolver + DB setting + zod schemas + types + UI) with 6 tests. Co-authored with @Witroch4.
• Codex Responses-WebSocket call history ([[codex] Log Responses WebSocket calls in history #3616] — thanks @kkkayye): Codex /v1/responses WebSocket calls are now persisted to request history — success completions plus prepare-failures, upstream WS errors and premature closes — with sanitizeErrorMessage applied to the stored error. Two proxy-side integration tests cover the success and failure paths.
• Obsidian/WebDAV: add the /api/v1/webdav file server (PROPFIND/GET/PUT/DELETE/MKCOL/MOVE, Basic-Auth, path-traversal hardened) so Obsidian mobile can sync the vault ([quality-gate] ObsidianSourceCard calls non-existent /api/settings/obsidian/webdav (404) #3485, part 2). Implemented in the custom server layer (scripts/dev/webdav-handler.mjs) — intercepted before Next.js to support non-standard HTTP methods (PROPFIND, MKCOL, MOVE, LOCK). Reads vault path and credentials (with enc:v1: AES-256-GCM decryption) directly from the SQLite key_value table; credentials configured via PR1's /api/settings/obsidian/webdav endpoint. 36 TDD unit tests covering traversal guard, constant-time auth, decrypt round-trip, XML generation, and full CRUD cycle.
• Quota overview: deactivate/activate an account directly from the quota card header (toggle button) so users can park a near-zero-quota account without navigating to the provider detail page. (#3675 — thanks @leninejunior)

♻️ Code Quality

• providers/[id]: extract useProviderConnections, useProviderSettings, useProviderModels hooks from the god-component — [refactor] Decompose providers/[id]/page.tsx god-component (12,882 LOC → ≤800, phased/strangler) #3501 Phase 1f. ProviderDetailPageClient.tsx: 4,948 → 4,063 LOC (−885 lines). New hooks in hooks/: useProviderConnections.ts (954 LOC — all connection management, batch ops, proxy/CLIProxyAPI state, batch-test runner with MAX_BULK_IDS chunking), useProviderSettings.ts (264 LOC — Codex global service mode + Claude routing preference), useProviderModels.ts (155 LOC — model metadata, aliases). Frozen baselines updated. 10 Phase-1f smoke tests; typecheck/cycles/lint green. Co-authored with @oyi77.

• providers/[id]: extract useModelCompatState hook + model sections (ModelRow, PassthroughModelRow, PassthroughModelsSection, CustomModelsSection, CompatibleModelsSection) from the god-component — [refactor] Decompose providers/[id]/page.tsx god-component (12,882 LOC → ≤800, phased/strangler) #3501 Phase 1e. ProviderDetailPageClient.tsx: 6,838 → 4,922 LOC (−1,916 lines). New leaf hooks/useModelCompatState.ts (101 LOC); compat helpers moved to providerPageHelpers.ts. Frozen baselines: providerPageHelpers.ts: 822. 12 Phase-1e smoke tests; typecheck/cycles/lint green; [BUG] The "Auto-hide failed models" option has been selected. Clicking the "Test all models" button will not automatically hide the incorrect models. (OpenCode Free supplier) #3610 auto-hide fix preserved.

• providers/[id]: extract ConnectionRow (+ CooldownTimer/inferErrorType/getStatusPresentation), ModelCompatPopover (+ recordToHeaderRows), and SiliconFlowEndpointModal from the god-component into components/ — [refactor] Decompose providers/[id]/page.tsx god-component (12,882 LOC → ≤800, phased/strangler) #3501 Phase 1d. ProviderDetailPageClient.tsx: 8,092 → 6,838 LOC (−1,254 lines). Frozen baselines: ConnectionRow.tsx: 941. 7 new Phase-1d smoke tests; typecheck/cycles/lint green.

• providers/[id]: extract AddApiKeyModal + EditConnectionModal (+ WebSessionCredentialGuide) from the god-component into components/ ([[refactor] Decompose providers/[id]/page.tsx god-component (12,882 LOC → ≤800, phased/strangler) #3501] Phase 1c): extracted the two heaviest inline modals — AddApiKeyModal (~787-LOC body) and EditConnectionModal (~1091-LOC body) — plus shared WebSessionCredentialGuide (~103 LOC) into standalone files under providers/[id]/components/modals/ and providers/[id]/components/ respectively. Added ERROR_TYPE_LABELS and formatTimeAgo to providerPageHelpers.ts (leaf) so EditConnectionModal and ConnectionRow share them without cycles. Pruned 14 now-unused imports from the god-component. ProviderDetailPageClient.tsx: 9,981 → 8,092 LOC (−1,889 lines). Frozen baselines: AddApiKeyModal.tsx: 842, EditConnectionModal.tsx: 1170. 6 new Phase-1c smoke tests; all 21 vitest modal tests pass; typecheck/cycles/lint green.

• refactor: small db/utils cleanup ([refactor: small code cleanup #3523] — thanks @androw): table-driven compression_analytics column migration (replaces 17 repeated ALTER TABLE calls), a single merged serializeJsonField helper in db/providers.ts (folded two byte-identical serializers), and removal of the dead no-op syncProviderDataToCloud/getProvidersNeedingRefresh stubs from shared/utils/machine.ts (no remaining callers). Pure refactor; behavior unchanged.

• Provider-detail god-component decomposition — Phase 2b (remaining shared helpers→leaf) ([[refactor] Decompose providers/[id]/page.tsx god-component (12,882 LOC → ≤800, phased/strangler) #3501]): extended providers/[id]/providerPageHelpers.ts with all remaining pure helpers needed by the heavy modals (AddApiKeyModal/EditConnectionModal) before they can be extracted. Moved 22 symbols: web-session credential label/hint/check/title helpers; upstream-headers helpers (upstreamHeadersRecordsEqual, headerRowsToRecord, effectiveUpstreamHeadersForProtocol, anyUpstreamHeadersBadge, getProtoSlice) plus their HeaderDraftRow/CompatModelRow/CompatModelMap/CompatByProtocolMap types; Codex consts and helpers (CODEX_REASONING_STRENGTH_OPTIONS, CODEX_ACCOUNT_SERVICE_TIER_VALUES, CODEX_GLOBAL_SERVICE_MODE_VALUES, getCodexServiceTierLabel, normalizeCodexLimitPolicy, getCodexRequestDefaults, getClaudeCodeCompatibleRequestDefaults); misc helpers (compatProtocolLabelKey, extractCommandCodeCredentialInput, normalizeAndValidateHttpBaseUrl, SILICONFLOW_ENDPOINTS, CommandCodeAuthFlowState). New transitive imports wired into the leaf: MODEL_COMPAT_PROTOCOL_KEYS (@/shared/constants/modelCompat), CodexServiceTier/getCodexRequestDefaults/getClaudeCodeCompatibleRequestDefaults (@/lib/providers/requestDefaults), CodexGlobalServiceMode (@/lib/providers/codexFastTier), WebSessionCredentialRequirement (./webSessionCredentials). ProviderDetailPageClient.tsx: 10,288 → 9,980 LOC. Leaf module: 589 LOC (acyclic). 25-assertion unit test suite passes; smoke test 3/3; no import cycles. Co-authored with @oyi77.

• Provider-detail god-component decomposition — Phase 2 (helpers→lib) ([[refactor] Decompose providers/[id]/page.tsx god-component (12,882 LOC → ≤800, phased/strangler) #3501]): extracted the pure shared helpers — ProviderMessageTranslator/LocalProviderMetadata types, providerText/providerCountText/readBooleanToggle, and the provider base-URL + routing-tag/excluded-model parse/format block — into a new leaf providers/[id]/providerPageHelpers.ts (imports only @/shared, so the client and modals share them with no import cycle). ProviderDetailPageClient.tsx: 10,435 → 10,288 LOC. Unblocks extracting the heavier AddApiKeyModal/EditConnectionModal (which depend on these helpers) without cycling. The Phase 0 smoke test caught a missing transitive import (isSelfHostedChatProvider) at mount — now wired + locked by a new helpers unit test (12 assertions). Co-authored with @oyi77.

• [quality-gate] Rule #5: 15 API routes contain raw SQL (should live in src/lib/db/) #3500 fully resolved — Hard Rule fix(oauth): prevent duplicate connections on re-authentication #5 (no raw SQL in route handlers): all 13 internal offenders migrated to src/lib/db/ modules across slices (calllogs, usage_history/daily_usage_summary, community_servers, usage_logs, semantic_cache, proxy_logs, skills UPDATE, db-backups). The gate's KNOWN_RAW_SQL set is renamed to EXTERNAL_DB_ALLOWED (with a back-compat alias) and now holds only the 2 external-DB reads (oauth/cursor/auto-import, oauth/kiro/auto-import) — these open _another app's SQLite to import credentials, so by design they cannot live in OmniRoute's db/ domain. The gate still blocks any NEW raw SQL against OmniRoute's DB.

• chore(db-gate): reclassify KNOWN_UNEXPORTED → INTENTIONALLY_INTERNAL in scripts/check/check-db-rules.mjs ([[quality-gate] Rule #2: localDb.ts missing re-exports for 25 db modules #3499]): a full audit of all 25 db modules confirmed each is consumed via direct/dynamic import per Hard Rule build(deps): bump actions/github-script from 7 to 8 #2 ("Never barrel-import from localDb.ts"). The old framing labelled them as "debt", which was misleading — they are the correct pattern. The gate's blocking behaviour is unchanged (a NEW unexported module still fails); only the name, comments, and per-module justifications were updated to reflect audited truth. Four modules flagged DEAD? (compressionScheduler, discovery, pluginMetrics, prompts) have zero production importers and are documented as schema-reserved. A new regression-guard test (tests/unit/check-db-rules-classification.test.ts) asserts every non-dead module in the set has ≥1 real importer, so a future consumer removal surfaces as a test failure requiring explicit reclassification.

• refactor(db): move call_logs aggregations into callLogStats db module ([[quality-gate] Rule #5: 15 API routes contain raw SQL (should live in src/lib/db/) #3500]): extracted raw SQL from three route handlers (/api/provider-metrics, /api/search/stats, /api/v1/search/analytics) into a new src/lib/db/callLogStats.ts domain module (getProviderMetrics, getSearchProviderStats, getRecentSearchLogs, getSearchAggregateStats, getSearchProviderCounts). First slice of [quality-gate] Rule #5: 15 API routes contain raw SQL (should live in src/lib/db/) #3500 (call_logs cluster). Behavior unchanged; the three routes are removed from KNOWN_RAW_SQL in the gate. Validated with TDD unit tests (6 assertions seeding an in-memory SQLite fixture).

• refactor(db): move usage_history/daily_usage_summary SQL into usageAnalytics db module ([[quality-gate] Rule #5: 15 API routes contain raw SQL (should live in src/lib/db/) #3500]): extracted all inline db.prepare(...) calls from two route handlers (/api/usage/analytics, /api/settings/export-json) into a new src/lib/db/usageAnalytics.ts module and extended src/lib/db/callLogStats.ts with getFallbackStats. New exports: buildUnifiedSource, buildPresetUnifiedSource (UNION CTE builders), plus 12 typed query functions covering summary, daily, daily-cost, heatmap, model, provider, account, api-key, service-tier, weekly-pattern, and preset-cost aggregations, plus getAllUsageHistory/getAllDomainCostHistory/getAllDomainBudgets for backup export. Second slice of [quality-gate] Rule #5: 15 API routes contain raw SQL (should live in src/lib/db/) #3500. KNOWN_RAW_SQL drops from 12 → 10. Validated with 21 TDD unit tests (tests/unit/db-usage-analytics-3500.test.ts) seeding a temp SQLite fixture.

• refactor(db): move community_servers auth look-up into gamification db module ([[quality-gate] Rule #5: 15 API routes contain raw SQL (should live in src/lib/db/) #3500]): extracted raw SQL from two federation route handlers (/api/gamification/federation/leaderboard, /api/gamification/federation/score) into a new getConnectedServerByKeyHash(apiKeyHash) function in src/lib/db/gamification.ts. Third slice of [quality-gate] Rule #5: 15 API routes contain raw SQL (should live in src/lib/db/) #3500 (gamification federation cluster). Behavior unchanged; the two routes are removed from KNOWN_RAW_SQL in the gate. Validated with TDD unit tests (3 assertions seeding a temp SQLite fixture).

• refactor(db): move skills UPDATE + db-backups SQL into db modules ([[quality-gate] Rule #5: 15 API routes contain raw SQL (should live in src/lib/db/) #3500]): fifth slice of [quality-gate] Rule #5: 15 API routes contain raw SQL (should live in src/lib/db/) #3500. Extracted the dynamic UPDATE skills SET … from src/app/api/skills/[id]/route.ts into a new src/lib/db/skills.ts module (updateSkill(id, patch)). The dynamic SET clause is injection-safe: column names are validated against a hard-coded allowlist of known writable columns before being interpolated; unknown keys are silently ignored. Extended src/lib/db/backup.ts with three new functions: exportAllSummaryRows() (multi-table SELECT for key_value / combos / provider_connections / api_keys, used by exportAll), getTableNamesFromAdapter() (sqlite_master introspection via an adapter arg, used by import validation), and countImportedRows() (post-import COUNT(*) per table). The backup domain module is the correct home for sqlite_master introspection — it is not "raw SQL in a route" once moved there. KNOWN_RAW_SQL drops by 3 (from 8 → 5). Validated with 11 TDD unit tests (tests/unit/db-backups-skills-3500.test.ts).

• refactor(db): move usage_logs/semantic_cache/proxy_logs SQL into db modules ([[quality-gate] Rule #5: 15 API routes contain raw SQL (should live in src/lib/db/) #3500]): extracted raw db.prepare(...) SQL from three route handlers (/api/analytics/auto-routing → usageLogs.ts; /api/cache/entries → semanticCache.ts; /api/logs/export → proxyLogs.ts) into new src/lib/db/ domain modules. New exports: getAutoRoutingTotalCount, getAutoRoutingVariantBreakdown, getAutoRoutingTopProviders (usage_logs), listSemanticCacheEntries, deleteSemanticCacheBySignature, deleteSemanticCacheByModel (semantic_cache), and exportProxyLogsSince (proxy_logs). Fourth slice of [quality-gate] Rule #5: 15 API routes contain raw SQL (should live in src/lib/db/) #3500. KNOWN_RAW_SQL drops from 8 → 5. Validated with 13 TDD unit tests (tests/unit/db-logs-cache-3500.test.ts) seeding temp SQLite fixtures.

• Provider-detail god-component decomposition — Phase 0 ([[refactor] Decompose providers/[id]/page.tsx god-component (12,882 LOC → ≤800, phased/strangler) #3501]): introduced ProviderDetailPageClient.tsx and reduced providers/[id]/page.tsx to a thin 9-line route wrapper (was 12,882 LOC), following the repo's *PageClient convention. Added the first-ever smoke render test for the page (Hard Rule fix(oauth): prevent connection test from corrupting valid tokens #8) as the safety net every later extraction phase is diffed against. Behavior unchanged; the check-file-size ratchet now tracks the extracted client. Foundation for Phases 1–6 (strangler-fig). Thanks @oyi77 for the parallel modularization effort in refactor: modularize 12.8K-line providers/[id]/page.tsx (Issue #3594) #3627.

• Provider-detail god-component decomposition — Phase 1a ([[refactor] Decompose providers/[id]/page.tsx god-component (12,882 LOC → ≤800, phased/strangler) #3501]): extracted the three self-contained auth-import modal clusters (Codex/Claude/Gemini Import*AuthModal + Apply*AuthModal + their co-located helpers, ~2,160 LOC) into providers/[id]/components/modals/. ProviderDetailPageClient.tsx drops 12,882 → 10,719 LOC. Behavior unchanged (smoke test green; clusters had clean { onClose, onSuccess } / inline-prop interfaces). Co-authored with @oyi77.

• Provider-detail god-component decomposition — Phase 1b ([[refactor] Decompose providers/[id]/page.tsx god-component (12,882 LOC → ≤800, phased/strangler) #3501]): extracted EditCompatibleNodeModal (+ its node/props types) into providers/[id]/components/modals/, and moved the shared CC_COMPATIBLE_DEFAULT_CHAT_PATH constant into a leaf providerDetailConstants.ts so the page client and the modal can both import it without a circular dependency. Also removed two dangling section comments left by Phase 1a. ProviderDetailPageClient.tsx: 10,719 → 10,435 LOC. Behavior unchanged (smoke test + a new standalone modal render test green; check:cycles clean). Co-authored with @oyi77.

🔧 Bug Fixes

• Combos / Auto-Combo: premature context compaction ("agent keeps forgetting things") ([fix(combo): stop premature context compaction — real auto-combo windows + per-target compression limit #3680]): two related context-window bugs fixed. (1) GET /api/combos/auto now advertises context_length / max_output_tokens (MAX across the candidate pool — safe because the auto-combo context pre-filter routes oversized requests to large-window candidates), and the opencode plugin consumes them instead of hardcoding limit: { context: 0 } — a zero context silently disables opencode's smart auto-compaction, letting sessions grow until the gateway's destructive history purge kicks in. (2) chatCore's proactive compression for DB combos (incl. quota-shared pools) no longer compresses at min(...allTargets): it now uses the EXECUTING target's own window (resolveComboContextLimit), keeping min-of-targets only as a defensive fallback when the current provider/model resolves no specific limit. TDD: 8 server tests (tests/unit/auto-combo-context-advertising.test.ts) + 3 plugin tests (tests/auto-combo-context.test.ts).

• Obsidian/WebDAV: add the /api/settings/obsidian/webdav config route (enable/disable vault sync), encrypt WebDAV credentials at rest, and remove the duplicate UI block ([quality-gate] ObsidianSourceCard calls non-existent /api/settings/obsidian/webdav (404) #3485, part 1).

• OpenCode Free / passthrough: "Test all models" now respects "Auto-hide failed models" and switches the list to the visible filter so hidden models actually disappear ([BUG] The "Auto-hide failed models" option has been selected. Clicking the "Test all models" button will not automatically hide the incorrect models. (OpenCode Free supplier) #3610). Three related bugs fixed: autoHideFailed is now threaded from the outer component into PassthroughModelsSection via a prop (single shared checkbox); the /api/models/test-all request body now includes autoHideFailed: true so the server persists the hide; and after the loop, visibilityFilter is switched to "visible" when ≥1 model was hidden. Two pure-function helpers (buildPassthroughTestBody, shouldSwitchToVisibleFilter) extracted to providerPageHelpers.ts with 7 unit tests.

• Resilience: clear stale transient connection cooldowns on startup so a prior unclean crash no longer makes every request time out at 120s after restart ([BUG] [BUG] Process crash on large request bodies leaves upstream connection broken after restart — all subsequent requests timeout at 120s #3625)

• fix(home topology): restore live in-flight request pulse ([Re-wire home ProviderTopology live pulse to the unified requests source (post #3401) #3507]): the animated "pulse" edges in the home Provider Topology panel went dead after PR feat(ui): unifi active and finished requests into single view #1422 #3401 unified request visibility, because activeRequests was hardcoded to []. Re-wired to useLiveRequests() (the existing WebSocket hook on port 20129) so that every pending/running request drives the animation in real time. A pure selectActiveRequests mapping helper was extracted to home/topologyUtils.ts with 5 unit tests.

• Electron desktop: launch the peer-stamping server-ws.mjs entrypoint so local-only routes (AgentBridge, MCP, services) no longer return 403 LOCAL_ONLY ([Bug]: AgentBridge fail to start due to 403 LOCAL_ONLY on Linux Desktop Client (Debian 13 ARM64) #3386)

• Provider Topology: stop flagging healthy providers as errored based on stale historical failures; use current request status ([BUG] Provider Topology map displays persistent error state (red border) for healthy providers after historical failures #3619)

• OpenCode Free: fetch the live model catalog from the provider's modelsUrl for the no-auth model picker instead of serving a stale hardcoded list ([BUG] Clicking the "From /model" option displays a list of models that are not the latest ones. (OpenCode Free supplier) #3611)

• Hermes Agent: honour the HERMES_HOME env var when writing/reading the agent config instead of always using ~/.hermes (Hermes Agent config ignores HERMES_HOME — written to ~/.hermes instead of the active config dir #3628). Introduced getHermesHome() / getHermesConfigPath() helpers (read at call-time) and routed all four hardcoded callsites through them so OmniRoute's config lands in the same directory that the Hermes PowerShell installer configures on Windows.

• MITM/cert: remove the duplicated "Command failed:" prefix in system-command error messages (#3641): execFileText was prepending its own "Command failed: " prefix on top of Node's execFile error message, which already begins with "Command failed: <cmd>" for non-zero exits. The error message now surfaces Node's message directly (no double prefix), with stderr appended only when non-empty.

• fix(reasoning): replay reasoning_content on plain DeepSeek turns ([fix(reasoning): replay reasoning_content on plain DeepSeek turns (#1682) #3632] — thanks @adivekar-utexas): the reasoning-replay gate previously only fired when an assistant message already carried reasoning_content. Plain (non-tool-call) turns whose reasoning_content was stripped by the client (e.g. Cursor) were forwarded without it, so DeepSeek V4+ rejected the request with 400 "the reasoning_content in the thinking mode must be passed back". The gate now also covers missing/empty reasoning_content on DeepSeek replay targets, injecting the cached reasoning (or the non-Anthropic placeholder) so multi-turn text conversations no longer 400. Fixes [BUG] Reasoning replay cache only covers tool_calls messages — DeepSeek 400 on plain assistant turns #1682. 2 regression tests.

• fix(kiro): route enterprise IAM Identity Center accounts to their regional endpoint ([fix(kiro): route enterprise IAM Identity Center accounts to their regional endpoint #3631] — thanks @artickc): Kiro/CodeWhisperer access tokens and Q Developer profile ARNs are region-bound, so enterprise IAM Identity Center accounts outside us-east-1 (e.g. eu-central-1) were rejected by the default host. Adds resolveKiroRegion (stored region → profileArn region → us-east-1) and kiroRuntimeHost (regional q.{region}.amazonaws.com, legacy codewhisperer.us-east-1 for the default), routes chat + usage to the regional endpoint, and discovers the region-matched profileArn via ListAvailableProfiles in a best-effort postExchange hook. 9 tests.

• fix(combo): skip same-provider/connection targets on connection-level errors ([fix(combo): skip same-provider targets on 408/500/502/503/504/524 errors #3637] — thanks @herjarsa): on connection-level upstream errors (408/500/502/503/504/524), remaining same-provider:connection targets in a combo request are now skipped to avoid hammering a known-bad connection, in both the priority and round-robin paths. Adjusted in review to exclude OmniRoute circuit-breaker-open responses (503 + X-OmniRoute-Provider-Breaker / provider_circuit_open) from this skip, preserving the invariant that a breaker-open is an ordinary target failure (the next same-provider target is still tried). Co-authored with @herjarsa.

• /v1/responses: detect stream readiness for tool-call-only and object-less chunks so Codex-shaped (reasoning + tools) requests no longer fail with "Stream ended before producing useful content" ([BUG] v3.8.19 /v1/responses: Codex-shaped requests (reasoning + tools) fail 'Stream ended before producing useful content'; bare requests succeed #3612)

• RTL locales (ar/fa/he/ur): use logical CSS direction utilities for the sidebar and key overlays so the layout mirrors correctly under dir=rtl ([BUG] The internationalization translation was done very poorly. #3541, partial — core layout)

• Kiro/AWS auto-import: set a descriptive account name and dedupe by profileArn so imports no longer create nameless duplicate "OAuth Account" rows ([BUG] Auto-imported Kiro/AWS credentials create anonymous "OAuth Account" with empty name #3615)

• fix(guardrails): the /api/guardrails/test route now validates its body through validateBody() (Zod) instead of parsing raw JSON directly, aligning it with the repo-wide input-validation pattern (Hard Rule chore(env): sync .env.example with current .env structure #7). (#3621 — thanks @diegosouzapw)

• fix(dashboard): bulk provider connection actions — close audit, API, and UX gaps in the batch activate/deactivate flow: register the provider.credentials.batch_updated event in HIGH_LEVEL_ACTIONS and ACTIVITY_ICONS (was silently dropped from the Activity feed); fix /api/providers PATCH to return warn status when notFound is non-empty instead of always success; /api/providers/test-batch empty-result early-return now includes a summary so stale-ID mode reports to the user; bulk activate/deactivate chunks selection by 100 to avoid the Zod 400 cap on large provider accounts. (#3673 — thanks @leninejunior)

📝 Maintenance

• fix(ci): increase the execFileSync maxBuffer in validate-pack-artifact so the npm-pack inventory no longer overflows on large tarballs during release validation — follow-up to the v3.8.21 pack-artifact hotfix. (#3622 — thanks @diegosouzapw)

---

🙌 Contributors

Thanks to everyone whose work lands in v3.8.22:

Contributor	PRs
@pizzav-xyz	#3659 (MiMoCode provider)
@Witroch4	#3540 (Claude Code routing)
@kkkayye	#3616 (Responses WS history)
@leninejunior	#3673 (bulk actions fix), #3675 (quota toggle)
@oyi77	#3501 (god-component decomposition phases)
@androw	#3523 (code cleanup)
@adivekar-utexas	#3632 (DeepSeek reasoning replay)
@artickc	#3631 (Kiro regional endpoint)
@herjarsa	#3637 (combo error skip)
@diegosouzapw	maintainer — Obsidian WebDAV, combo context, CI fixes, all other fixes

[gemini-code-assist]

Code Review

This pull request bumps the project version from 3.8.21 to 3.8.22 across package manifests, OpenAPI specifications, and changelogs. The reviewer identified that the internationalized changelog files are missing markdown links for the English CHANGELOG reference and provided suggestions to restore these links for consistency.

Important

The consumer version of Gemini Code Assist on GitHub is being sunset. Starting June 18, 2026, new organization installations will be blocked, and all code review activity will officially cease on July 17, 2026.
For more details on the timeline and next steps, please review the Help Documentation.

[gemini-code-assist]

The reference to the English CHANGELOG is missing the markdown link. It should be linked to /CHANGELOG.md for consistency with previous entries.

Suggested change

	_See English CHANGELOG for v3.8.22 details._
	_See [English CHANGELOG](/CHANGELOG.md) for v3.8.22 details._

[gemini-code-assist]

The reference to the English CHANGELOG is missing the markdown link. It should be linked to /CHANGELOG.md for consistency with previous entries.

Suggested change

	_See English CHANGELOG for v3.8.22 details._
	_See [English CHANGELOG](/CHANGELOG.md) for v3.8.22 details._

[gemini-code-assist]

The reference to the English CHANGELOG is missing the markdown link. It should be linked to /CHANGELOG.md for consistency with previous entries.

Suggested change

	_See English CHANGELOG for v3.8.22 details._
	_See [English CHANGELOG](/CHANGELOG.md) for v3.8.22 details._

[gemini-code-assist]

The reference to the English CHANGELOG is missing the markdown link. It should be linked to /CHANGELOG.md for consistency with previous entries.

Suggested change

	_See English CHANGELOG for v3.8.22 details._
	_See [English CHANGELOG](/CHANGELOG.md) for v3.8.22 details._

[gemini-code-assist]

The reference to the English CHANGELOG is missing the markdown link. It should be linked to /CHANGELOG.md for consistency with previous entries.

Suggested change

	_See English CHANGELOG for v3.8.22 details._
	_See [English CHANGELOG](/CHANGELOG.md) for v3.8.22 details._

[gemini-code-assist]

The reference to the English CHANGELOG is missing the markdown link. It should be linked to /CHANGELOG.md for consistency with previous entries.

Suggested change

	_See English CHANGELOG for v3.8.22 details._
	_See [English CHANGELOG](/CHANGELOG.md) for v3.8.22 details._

[gemini-code-assist]

The reference to the English CHANGELOG is missing the markdown link. It should be linked to /CHANGELOG.md for consistency with previous entries.

Suggested change

	_See English CHANGELOG for v3.8.22 details._
	_See [English CHANGELOG](/CHANGELOG.md) for v3.8.22 details._

[gemini-code-assist]

The reference to the English CHANGELOG is missing the markdown link. It should be linked to /CHANGELOG.md for consistency with previous entries.

Suggested change

	_See English CHANGELOG for v3.8.22 details._
	_See [English CHANGELOG](/CHANGELOG.md) for v3.8.22 details._

[gemini-code-assist]

The reference to the English CHANGELOG is missing the markdown link. It should be linked to /CHANGELOG.md for consistency with previous entries.

Suggested change

	_See English CHANGELOG for v3.8.22 details._
	_See [English CHANGELOG](/CHANGELOG.md) for v3.8.22 details._

[gemini-code-assist]

The reference to the English CHANGELOG is missing the markdown link. It should be linked to /CHANGELOG.md for consistency with previous entries.

Suggested change

	_See English CHANGELOG for v3.8.22 details._
	_See [English CHANGELOG](/CHANGELOG.md) for v3.8.22 details._

[gemini-code-assist]

Warning

Gemini encountered an error creating the review. You can try again by commenting /gemini review.

[kilo-code-bot]

Code Review Summary

Status: No Issues Found | Recommendation: Merge

This is a standard release preparation PR (v3.8.22) containing only:

• Version bumps in package.json files
• Changelog entries for the new version
• Generated lockfile updates

No functional code changes, no bugs, no security concerns.

Files Reviewed (44 files)

• package.json - version bump only
• open-sse/package.json - version bump only
• electron/package.json - version bump only
• docs/reference/openapi.yaml - version bump only
• CHANGELOG.md - changelog section added
• docs/i18n/*/CHANGELOG.md (40 files) - i18n changelog sections added
• package-lock.json - generated lockfile (not reviewed)

---

_{Reviewed by laguna-m.1-20260312:free · 230,029 tokens}

[github-actions]

CI Coverage Report

• Coverage job: skipped
• PR test policy: success

Coverage artifact was not available for this run.