Commit graph

636 commits

Author SHA1 Message Date
decolua
9dde4858e7 # v0.4.55 (2026-05-18)
## Features
- Xiaomi MiMo Token Plan: region selector (Singapore / China / Europe) — keys are cluster-specific
- Antigravity: risk confirmation dialog before first connection
- Gemini CLI: surface upstream retry delay on 429 errors

## Fixes
- MITM: cannot kill process on macOS under sudo (lsof not found in PATH)
- Stream: false-positive stall timeout on Claude reasoning / Kiro responses
- Tunnel: cannot re-enable after disable (stuck state)
- Tunnel: cloudflared error messages now include log tail for easier debugging
- Language switcher: applies selected locale immediately on close (#1234)
- Antigravity OAuth: metadata now matches the official client
2026-05-18 16:29:41 +07:00
decolua
613a0a819a # v0.4.55 (2026-05-18)
## Features
- Xiaomi MiMo Token Plan: region selector (Singapore / China / Europe) — keys are cluster-specific
- Antigravity: risk confirmation dialog before first connection
- Gemini CLI: surface upstream retry delay on 429 errors

## Fixes
- MITM: cannot kill process on macOS under sudo (lsof not found in PATH)
- Stream: false-positive stall timeout on Claude reasoning / Kiro responses
- Tunnel: cannot re-enable after disable (stuck state)
- Tunnel: cloudflared error messages now include log tail for easier debugging
- Language switcher: applies selected locale immediately on close (#1234)
- Antigravity OAuth: metadata now matches the official client

## Improvements
- Gemini CLI: bump engine to 0.34.0
- Re-hide `qwen` (OAuth EOL) and `iflow` (not ready) providers
2026-05-18 16:26:35 +07:00
decolua
90a47c3f29 Fix MITM 2026-05-18 15:27:29 +07:00
NoxzRCW
b59fee8053 chore(providers): unhide qwen, iflow and antigravity entries
Remove `hidden: true` so the providers appear in the UI list while
keeping their existing deprecation/risk notices.

Co-authored-by: Cursor <cursoragent@cursor.com>
2026-05-18 15:23:38 +07:00
NoxzRCW
3e52af35e2 feat(gemini-cli): wrap CloudCode payload and surface 429 retryDelay
- Send { project, model, request } envelope expected by Cloud Code Assist
- Parse google.rpc.RetryInfo from 429 responses to expose retry hint

Co-authored-by: Cursor <cursoragent@cursor.com>
2026-05-18 15:23:38 +07:00
NoxzRCW
eaf770a28e chore(gemini-cli): bump version to 0.34.0 and refine user-agent
- GEMINI_CLI_VERSION 0.31.0 -> 0.34.0
- UA now appends `terminal` suffix and maps ia32 -> x86

Co-authored-by: Cursor <cursoragent@cursor.com>
2026-05-18 15:23:38 +07:00
Z User
8daa953ef6 fix(oauth): align antigravity OAuth metadata with official client headers
Fixes #1226

The Antigravity OAuth flow sent inconsistent client metadata between
the token acquisition phase and the API usage phase. String enum values
(IDE_UNSPECIFIED, PLATFORM_UNSPECIFIED) were used during OAuth token
exchange + loadCodeAssist + onboardUser, while numeric enums (ideType: 9,
platform: <computed>, pluginType: 2) were used in runtime API calls.
Google detected this fingerprint mismatch and blocked 9router accounts.

Replace all string enum occurrences with the correct numeric values:

- src/lib/oauth/constants/oauth.js: loadCodeAssistClientMetadata now
  uses getOAuthPlatformEnum() for platform and numeric 9/2 for
  ideType/pluginType, matching getOAuthClientMetadata()
- src/lib/oauth/services/antigravity.js: getMetadata() now delegates
  to getOAuthClientMetadata() instead of returning hardcoded strings
- src/lib/oauth/providers.js: postExchange metadata now uses
  getOAuthClientMetadata() instead of inline string enums
- open-sse/services/usage.js: getGeminiSubscriptionInfo body now uses
  CLIENT_METADATA (already imported from appConstants.js) instead of
  inline string enums
2026-05-18 15:23:37 +07:00
blu1606
5e1c126136 fix(security): harden public API and local-only access gates 2026-05-18 15:23:37 +07:00
Tachibana Shin
c5afc6a9f9
fix(lang): emit selected locale on close (#1234) 2026-05-18 14:55:48 +07:00
Muhammad Zakir Ramadhan
94960c6cf5
fix: enhance stall detection in stream handling for improved disconne… (#1243)
* fix: enhance stall detection in stream handling for improved disconnect management

* fix: improve stall detection handling in pipeWithDisconnect to prevent stale aborts
2026-05-18 12:00:33 +07:00
Blue Hoang
462d1c5ca3
fix(ui): resolve alias conflict for jina-reader in curl example (#1241)
* fix(ui): resolve alias conflict for jina-reader in curl example

* docs(skills): correct web-fetch and web-search model examples
2026-05-18 11:59:43 +07:00
decolua
0e4e58930f Update ChangeLog 2026-05-17 16:40:05 +07:00
decolua
9abbb8ad9b # v0.4.52 (2026-05-17)
## Features
- Add Vercel AI Gateway provider support (#1183)
- rtk: Kiro format tool result compression — handle conversationState.history & currentMessage, preserve error results, ~13.6% savings (#1194)

## Fixes
- openclaw: normalize agent.model object form `{primary, fallbacks}` before .startsWith → fix TypeError & 'not configured' status (#1216)
- Usage Details pagination: stay inside mobile viewport <640px (#1218)
- Fix test model error
- Fix MIMO provider in Codex
- Disable log file creation when using MITM AG
2026-05-17 16:37:26 +07:00
Ngô Tấn Tài
9326589452
Add Vercel AI Gateway provider support (#1183) 2026-05-17 15:16:25 +07:00
Matt Van Horn
a168313290
fix: normalize openclaw agent.model object form before .startsWith (#1216)
OpenClaw 2026.5.x writes agents[].model as either a plain string
or as an object { primary, fallbacks }. The status enrichment and
POST cleanup both called .startsWith() on the raw value, which threw
TypeError when the object form was present and made the dashboard
report 'not configured'.

Add a resolveAgentModel helper that accepts both shapes and returns
the string id (model.primary for the object form, empty string for
missing/invalid). Use it when enriching agents in GET so consumers
receive a string model field, and when filtering the list in POST.

Refs decolua/9router#1196
2026-05-17 15:14:31 +07:00
Zanuar Tri Romadon
e03b28138a
feat(rtk): add Kiro format support for tool result compression (#1194)
- Add compressKiroFormat() to handle conversationState.history and currentMessage
- Compress toolResults[].content[].text in Kiro's AWS CodeWhisperer format
- Preserve error tool results (status === 'error')
- Add 7 comprehensive tests covering all edge cases
- Verified with real usage: 13.6% savings on npm install output
2026-05-17 15:13:37 +07:00
Matt Van Horn
6d383224a4
fix: keep usage details pagination inside mobile viewport (#1218)
On viewports below 640px the pagination row at Dashboard > Usage >
Details rendered the rows-per-page select plus the full numbered page
list plus the prev/next chevrons in one unwrapped flex row with no
horizontal padding. On a 390px phone the Rows: label was clipped on
the left and the next chevron was clipped on the right.

Add px-2 to the outer container so the pagination card has horizontal
breathing room. Switch the inner controls group to flex-wrap with
gap-2 on mobile (and gap-4 from sm: up) so the rows-per-page select
can wrap below the chevrons. Hide the numbered page buttons, the
1 / last anchors, and the ... ellipses below sm: -- only the prev,
current page indicator, and next chevrons render on mobile, which
keeps every control reachable while fitting inside the card.

Desktop layout (>= 640px) is unchanged.

Refs decolua/9router#1146
2026-05-17 15:09:51 +07:00
decolua
593c788c75 ## Fixes
- Fix duplicate tray icon on macOS when hiding to tray
- Fix tray not showing in background mode on macOS
- Fix hide to tray broken on Windows/Linux
- Fix Shutdown button in web UI not working
2026-05-16 14:06:56 +07:00
decolua
30ff4e3fb0 Update change log 2026-05-16 12:40:02 +07:00
decolua
b90e21cff2 Fix model check 2026-05-16 12:38:06 +07:00
decolua
1ec38292d7 Fix Tray 2026-05-16 11:57:05 +07:00
decolua
b5979dfbd6 MITM Warning 2026-05-16 11:39:39 +07:00
decolua
18f87f43ca Enhance model configuration by adding modalities for input and output in OpenCodeToolCard and route.js. Introduce live model resolvers for Kiro in v1/models, allowing dynamic fetching of models based on provider credentials. 2026-05-16 11:20:20 +07:00
decolua
4a575f21a2 https://github.com/decolua/9router/pull/1167
https://github.com/decolua/9router/pull/1166
2026-05-16 11:20:08 +07:00
decolua
74043f59ab Update i18n 2026-05-16 11:02:33 +07:00
decolua
3cca2252a6 chore: add buildOutput RTK filter, drop legacy cloud sync, internal cleanup
- feat(rtk): buildOutput filter + autodetect for npm/yarn/cargo logs
- chore: remove unused cloud sync module and related routes
- ui: hide deprecated providers (qwen, iflow, antigravity)
- chore: minor tray/cli/internal adjustments
2026-05-16 10:54:41 +07:00
dependabot[bot]
21ea744c72
chore(deps): bump actions/setup-node from 5 to 6 (#1174)
Bumps [actions/setup-node](https://github.com/actions/setup-node) from 5 to 6.
- [Release notes](https://github.com/actions/setup-node/releases)
- [Commits](https://github.com/actions/setup-node/compare/v5...v6)

---
updated-dependencies:
- dependency-name: actions/setup-node
  dependency-version: '6'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-05-16 10:47:08 +07:00
decolua
cc971f2402 Update tunnel 2026-05-15 18:22:10 +07:00
decolua
e1db49190a fix(tray): kill child PID before IPC close to avoid macOS NSStatusItem orphan
Co-authored-by: Cursor <cursoragent@cursor.com>
2026-05-15 13:13:28 +07:00
decolua
bb86808582 fix: deny-by-default API auth + safe SSE controller 2026-05-15 12:41:52 +07:00
decolua
6493391415 Update Version 2026-05-15 12:06:32 +07:00
decolua
9e87935c0e Update Change Log 2026-05-15 12:04:17 +07:00
decolua
a28c5ec98b # v0.4.44 (2026-05-15)
## Features
- Add Blackbox provider with `bb` alias (#1143)
- Add Xiaomi token plan provider
- Enhance model select modal UX + modal traffic lights (#1111)
- Default Usage dashboard period to Today (#1141)

## Fixes
- Fix Cowork model selection and Windows CLI packaging (#1129)
- Update provider name retrieval for compatibility provider (#1135)
- Update JWT_SECRET handling
2026-05-15 12:02:32 +07:00
anhvandev
75904b8c27
feat(open-sse): add blackbox provider with bb alias (#1143) 2026-05-15 10:50:19 +07:00
decolua
d26db17f5f Add xiaomi token plan provider 2026-05-15 10:29:25 +07:00
local
beb4599090 Fix Cowork model selection and Windows CLI packaging (#1129)
Cherry-picked from upstream PR #1129 + local improvements:
- dedupe inline remove-model handler -> use handleRemoveModel
- add .next-cli-build/ and cli/.build-home/ to .gitignore
2026-05-15 09:31:34 +07:00
decolua
fe3ce25ae3 Update JWT_SECRET handling 2026-05-15 09:31:34 +07:00
Rigel Ramadhani Waloni
1fd3132647
feat(ui): enhance model select modal UX and modal traffic lights (#1111)
* feat(model-select-modal): highlight added models and support bulk selection

- Add addedModelValues prop to highlight already-added models with primary color
- Sort models alphabetically per provider, with added models floated to top
- Replace green highlight with primary brand color (orange #E56A4A)
- Use check icon (10px) inline with model name instead of check_circle
- Replace Done button with info bar explaining click-to-toggle behavior
- Add ProviderIcon to provider group headers replacing colored dot
- Import ProviderIcon, remove unused Button import

* feat(cli-tools): wire addedModelValues, onDeselect, and auto-save to model select modals

- Pass selectedModels as addedModelValues to ModelSelectModal in OpenCode and Copilot cards
- Add onDeselect handler to remove model from list on second click
- Set closeOnSelect=false to allow bulk model selection
- Remove manual setModalOpen(false) from onSelect callbacks
- Add saveModels() silent auto-save triggered on modal close (OpenCodeToolCard)
- Use useRef to track latest selectedModels in closure-safe way

* feat(modal): functional traffic light close button with hover icon and tooltip

- Make red dot a clickable button that closes the modal
- Show ✕ icon inside red dot on hover via group-hover opacity transition
- Gray out yellow and green dots (cursor-not-allowed, no tooltip)
- Increase dot size from w-3 h-3 to w-4 h-4
- Add Tooltip with brand-matched color #FF5F56 on red dot
- Remove X close button from modal header

* feat(tooltip): add color prop for themed tooltip backgrounds

* feat(i18n): add translations for model select info bar and close tooltip

- Add 'Click to add, click again to remove. Changes are saved automatically.' to all 32 locales
- Add 'Close' translation to all 32 locales

* fix(ui): address code review feedback on modal UX and auto-save

- Modal: remove showCloseButton prop, use showTrafficLights for header
  condition, hide traffic lights on mobile (hidden md:flex), add mobile
  X button (md:hidden) with aria-label, add aria-label and title on
  traffic light close button
- OpenCodeToolCard: validate activeModel membership before saving —
  fallback to models[0] or empty string; clear/reassign activeModel
  on deselect when removed model was the active one
- CopilotToolCard: add useRef + selectedModelsRef, add saveModels()
  using /api/cli-tools/copilot-settings, wire auto-save on modal close
- ModelSelectModal: fix JSX formatting — separate info bar closing div
  from Search comment onto its own line
2026-05-15 09:21:24 +07:00
Lê Huy Giang
4098f91ac5
fix: update provider name retrieval for compatibility provider (#1135) 2026-05-15 09:18:09 +07:00
Dũng A Tô Ri A
4677a9139a
feat(usage): đặt mặc định period là Today khi mở dashboard/usage (#1141)
* feat(usage): add Today period option to Usage & Analytics

Bổ sung lựa chọn Today vào bộ lọc thời gian của trang Usage & Analytics
(trước đây chỉ có 24h, 7D, 30D, 60D).

Khác biệt với 24h:
- 24h: cuộn 24 giờ trước → hiện tại
- Today: cố định từ 00:00 hôm nay (giờ local) → hiện tại

Thay đổi:
- page.js, UsageStats.js: thêm option Today vào danh sách PERIODS,
  đổi grid mobile từ 4 cột sang 5 cột để fit option mới.
- api/usage/stats, api/usage/chart: cho phép giá trị period today.
- usageRepo.js:
  + getUsageStats: dùng nhánh live history khi period = today,
    cutoff lấy từ 00:00 hôm nay theo local time.
  + getChartData: thêm 24 bucket theo giờ từ 00:00 → 23:59 hôm nay.

* feat(usage): đặt mặc định period là Today khi mở dashboard/usage

Người dùng thường quan tâm usage trong ngày hôm nay nhiều hơn 7 ngày,
nên hiển thị Today ngay khi vừa mở trang để giảm 1 thao tác chuyển period.
Đồng bộ luôn fallback trong UsageStats để giữ nhất quán khi component
dùng standalone.
2026-05-15 09:16:02 +07:00
decolua
cebc72e343 Fix small bug 2026-05-14 11:16:52 +07:00
decolua
1c3ab7be23 fix(tui): replace enquirer with readline to remove input lag
- Persistent raw mode across menus avoids per-prompt latency
- Suspend raw temporarily for line-buffered text input
- Update CHANGELOG v0.4.41

Co-authored-by: Cursor <cursoragent@cursor.com>
2026-05-14 11:13:49 +07:00
Muhammad Ridwan Ramadhan
581ab7687e
fix(ui): show API key row actions on mobile (#1112)
The visibility, copy, and delete buttons in the API Keys list used , which never reveals on touch devices because they don't fire :hover. Switch all three to  — visible by default on mobile, hover-revealed on sm+ — matching the pattern already used in providers/ and media-providers/

Co-authored-by: Muhammad Ridwan Ramadhan <ridwanramadhan8888@gmail.com>
2026-05-14 11:06:22 +07:00
decolua
2190ff062d feat: v0.4.41 - cli-tools UI redesign + jcode integration
- Add jcode CLI tool (#1047) with auto-configuration
- Redesign CLI Tools dashboard: grid 1/2/3 cols + per-tool detail page
- Sync DeepSeek TUI card style + resize icon 1024->128
- Add official logos: amp, jcode, qwen
- Bump version 0.4.39 -> 0.4.41

Co-authored-by: Cursor <cursoragent@cursor.com>
2026-05-14 10:46:11 +07:00
Aqil Aziz
da00a25eef
feat: add DeepSeek V4 Pro effort aliases (#950) 2026-05-14 10:39:34 +07:00
Dũng A Tô Ri A
d1a8dd4987
feat(usage): add Today period option to Usage & Analytics (#1063)
Bổ sung lựa chọn Today vào bộ lọc thời gian của trang Usage & Analytics
(trước đây chỉ có 24h, 7D, 30D, 60D).

Khác biệt với 24h:
- 24h: cuộn 24 giờ trước → hiện tại
- Today: cố định từ 00:00 hôm nay (giờ local) → hiện tại

Thay đổi:
- page.js, UsageStats.js: thêm option Today vào danh sách PERIODS,
  đổi grid mobile từ 4 cột sang 5 cột để fit option mới.
- api/usage/stats, api/usage/chart: cho phép giá trị period today.
- usageRepo.js:
  + getUsageStats: dùng nhánh live history khi period = today,
    cutoff lấy từ 00:00 hôm nay theo local time.
  + getChartData: thêm 24 bucket theo giờ từ 00:00 → 23:59 hôm nay.
2026-05-14 10:03:05 +07:00
Fresent
d1613e8ad5
Fix issue with Ollama usage not being tracked and shown in 9router UI (#1102)
Co-authored-by: Abhi <abhi@fresent.com>
2026-05-14 09:58:18 +07:00
Tri Dung Nguyen
5327a7dc30
fix(autostart): work on nvm + npm 9/10, actually register with launchctl (fixes #1082) (#1104)
* fix(autostart): resolve cli.js path locally, register with launchctl, verify state

The current `cli/src/cli/tray/autostart.js` is silently broken on every nvm
install (and likely Volta / asdf / Homebrew / user-prefix npm) and on every
npm version >= 9. Enabling auto-start from the tray menu writes a launchd
plist that references a non-existent script; the menu then reports
"✓ Auto-start Enabled" because the existence check only verifies the file is
on disk. On the next OS boot launchd fails with MODULE_NOT_FOUND. None of
this surfaces to the user.

This rewrite addresses the four problems reported in #1082:

1. `npm bin -g` was removed in npm 9. autostart.js called it as a primary
   resolution mechanism and silently fell back to a hardcoded
   `/usr/local/lib/node_modules/9router/cli.js` path on failure. Replaced
   with a `getCliJsPath()` helper that tries (in order): the explicit
   `cliPath` argument, `process.argv[1]` when it's our own cli.js, and a
   path computed relative to autostart.js's own location (since this file
   always lives at `<pkg>/src/cli/tray/autostart.js`, cli.js is three
   levels up regardless of install layout). Returns null on no match.

2. The `/usr/local/...` fallback was outright wrong for nvm/Volta/asdf
   installs. Dropped entirely. If no candidate resolves, return false
   instead of writing a plist pointing at a missing script.

3. `enableMacOS()` never called `launchctl load -w`, only `unload`. The
   plist was therefore inert until the next user login, with no signal to
   the user that anything was wrong. Now it unloads (defensive, in case of
   re-enable) and then loads, so the agent is active in the current session.

4. `isAutoStartEnabled()` on macOS only checked file existence — so the
   tray menu reported "✓ Enabled" even when launchd had the agent in a
   failed state or hadn't loaded it. Now also runs `launchctl list
   ${APP_LABEL}` and only returns true if launchd recognizes the label.

Additional changes for robustness:

- The macOS plist now invokes node + cli.js directly with absolute paths
  instead of wrapping in `zsh -l -c "..."`. The shell-wrapper approach
  depended on the user's login shell sourcing nvm/PATH correctly, which is
  fragile (nvm.sh sourcing varies between users; some setups don't add
  node to PATH from a non-interactive login shell).
- `EnvironmentVariables.PATH` in the plist now explicitly includes node's
  bin directory plus the standard system paths, so child processes spawned
  by cli.js (e.g. the runtime `npm install` calls) can still resolve `npm`
  even under launchd's minimal default env.
- Windows and Linux paths were calling `npm bin -g` with the same fallback
  problem; both now use `getCliJsPath()` consistently. The Windows VBS
  branch is simplified (always run node+cli.js, drop the `9router.cmd`
  lookup that depended on the npm prefix path).
- Removed the unused `getStartCommand()` helper that was never imported.

Fixes #1082

* fix(autostart): skip launchctl unload/load when current process is the agent

When the running 9router cli.js was itself spawned by the autostart launchd
agent (after a reboot when autostart was previously enabled), clicking the
tray menu's "Disable Auto-start" item would unload the agent — and that
unload sends SIGTERM to the running process, killing the click handler and
the tray icon before the menu could flip its label.

Add a small `isAgentSelfMacOS()` probe (parses `launchctl list ${label}` and
compares the PID against `process.pid`). When we're the agent itself,
disable skips the unload (the plist file removal is enough to prevent the
agent from starting on the next login) and enable skips the load (the plist
is already loaded under our own PID, the on-disk update is what matters for
next boot). External callers — e.g. enable from a manually-launched 9router
or from a script — still get the full unload/load behavior they need.

Without this, the tray UX after a reboot was: click Disable -> tray icon
silently disappears, no menu label change. Now: click Disable -> label
flips to "Enable Auto-start", tray stays, plist removed; click Enable again
-> label flips back, plist re-created.
2026-05-14 09:57:05 +07:00
Zanuar Tri Romadon
0a05285973
feat: add drag-and-drop reordering for combo models (#1056) (#1108) 2026-05-14 09:54:52 +07:00
decolua
a8100e9444 Fix build bug 2026-05-14 00:28:08 +07:00