11 Commits

• fix: prevent common config loss during proxy takeover and stabilize snippet lifecycle

  - Make sync_current_provider_for_app takeover-aware: update restore
    backup instead of overwriting live config when proxy is active
  - Introduce explicit "cleared" flag for common config snippets to
    prevent auto-extraction from resurrecting user-cleared snippets
  - Reorder startup: extract snippets from clean live files before
    restoring proxy takeover state
  - Add one-time migration flag to skip legacy commonConfigEnabled
    migration on subsequent startups
  - Add regression tests for takeover backup preservation, explicit
    clear semantics, and migration flag roundtrip

  Jason · 2026-03-12 17:16:22 +08:00
  7ca33ff901
• feat: add Bedrock request optimizer (PRE-SEND thinking + cache injection) (#1301)

  * feat: add Bedrock request optimizer (PRE-SEND thinking + cache injection)
  
  Add a PRE-SEND request optimizer that enhances Bedrock API requests
  before forwarding, complementing the existing POST-ERROR rectifier system.
  
  New modules:
  - thinking_optimizer: 3-path model detection (adaptive/legacy/skip)
    - Opus 4.6/Sonnet 4.6: adaptive thinking + effort max + 1M context beta
    - Legacy models: inject extended thinking with max budget
    - Haiku: skip (no modification)
  - cache_injector: auto-inject cache_control breakpoints (max 4)
    - Injects at tools/system/assistant message positions
    - TTL upgrade for existing breakpoints (5m → 1h)
  
  Gate: only activates for Bedrock providers (CLAUDE_CODE_USE_BEDROCK=1)
  Config: stored in SQLite settings table, default OFF, user opt-in
  UI: new Optimizer section in RectifierConfigPanel with 3 toggles + TTL
  
  18 unit tests covering all paths. Verified against live Bedrock API.
  
  * chore: remove docs/plans directory
  
  * fix: address code review findings for Bedrock request optimizer
  
  P0 fixes:
  - Replace hardcoded Chinese with i18n t() calls in optimizer panel,
    add translation keys to zh/en/ja locale files
  - Fix u64 underflow: max_tokens - 1 → max_tokens.saturating_sub(1)
  - Move optimizer from before retry loop to per-provider with body
    cloning, preventing Bedrock fields leaking to non-Bedrock providers
  
  P1 fixes:
  - Replace .map() side-effect pattern with idiomatic if-let (clippy)
  - Fix module alphabetical ordering in mod.rs
  - Add cache_ttl whitelist validation in set_optimizer_config
  - Remove #[allow(unused_assignments)] and dead budget decrement
  
  ---------
  
  Co-authored-by: Keith (via OpenClaw) <keithyt06@users.noreply.github.com>
  Co-authored-by: Jason <farion1231@gmail.com>

  Keith Yu · 2026-03-07 18:57:21 +08:00
  8217bfff50
• revert: restore full config overwrite + Common Config Snippet (revert 992dda5c)

  Revert the partial key-field merging refactoring introduced in 992dda5c,
  along with two dependent commits (24fa8a18, 87604b18) that referenced
  the now-removed ClaudeQuickToggles component.
  
  The whitelist-based partial merge approach had critical issues:
  - Non-whitelisted custom fields were lost during provider switching
  - Backfill permanently stripped non-key fields from the database
  - Whitelist required constant maintenance to track upstream changes
  
  This restores the proven "full config overwrite + Common Config Snippet"
  architecture where each provider stores its complete configuration and
  shared settings are managed via a separate snippet mechanism.
  
  Reverted commits:
  - 24fa8a18: context-aware JSON editor hint + hide quick toggles
  - 87604b18: hide ClaudeQuickToggles when creating
  - 992dda5c: partial key-field merging refactoring
  
  Restored:
  - Full config snapshot write (write_live_snapshot) for Claude/Codex/Gemini
  - Full config backfill (settings_config = live_config)
  - Common Config Snippet UI and backend commands
  - 6 frontend components/hooks for common config editing
  - configApi barrel export and DB snippet methods
  
  Removed:
  - ClaudeQuickToggles component
  - write_live_partial / backfill_key_fields / patch_claude_live
  - All KEY_FIELDS constants

  Jason · 2026-02-27 23:12:34 +08:00
  859f413756
• refactor: remove OMO common config two-layer merge system

  Each OMO provider now stores its complete configuration directly in
  settings_config.otherFields instead of relying on a shared OmoGlobalConfig
  merged at write time. This simplifies the data flow from a 4-tuple
  (agents, categories, otherFields, useCommonConfig) to a 3-tuple and
  eliminates an entire DB table, two Tauri commands, and ~1700 lines of
  merge/sync code across frontend and backend.
  
  Backend:
  - Delete database/dao/omo.rs (OmoGlobalConfig struct + get/save methods)
  - Remove get/set_config_snippet from settings DAO
  - Remove get/set_common_config_snippet Tauri commands
  - Replace merge_config() with build_config() in services/omo.rs
  - Simplify OmoVariant (remove config_key, known_keys)
  - Simplify import_from_local and build_local_file_data
  - Rewrite all OMO service tests
  
  Frontend:
  - Delete OmoCommonConfigEditor.tsx and OmoGlobalConfigFields.tsx
  - Delete src/lib/api/config.ts
  - Remove OmoGlobalConfig type and merge preview functions
  - Remove useGlobalConfig/useSaveGlobalConfig query hooks
  - Simplify useOmoDraftState (remove all common config state)
  - Replace OmoCommonConfigEditor with read-only JsonEditor preview
  - Clean i18n keys (zh/en/ja)

  Jason · 2026-02-26 19:31:43 +08:00
  e7766d4d22
• feat(proxy): fix thinking rectifiers and resolve clippy warnings (#1005)

  * feat(proxy): align thinking rectifiers and resolve clippy warnings
  
  - add thinking budget rectifier flow with single retry on anthropic budget errors
  
  - align thinking signature rectification behavior with adaptive-safe handling
  
  - expose requestThinkingBudget in settings/ui/i18n and default rectifier config to disabled
  
  - fix clippy warnings in model_mapper format args and RectifierConfig default derive
  
  * fix(proxy): thinking rectifiers

  Dex Miller · 2026-02-12 22:28:05 +08:00
  62fa5213bf
• Feat/provider individual config (#663)

  * refactor(ui): simplify UpdateBadge to minimal dot indicator
  
  * feat(provider): add individual test and proxy config for providers
  
  Add support for provider-specific model test and proxy configurations:
  
  - Add ProviderTestConfig and ProviderProxyConfig types in Rust and TypeScript
  - Create ProviderAdvancedConfig component with collapsible panels
  - Update stream_check service to merge provider config with global config
  - Proxy config UI follows global proxy style (single URL input)
  
  Provider-level configs stored in meta field, no database schema changes needed.
  
  * feat(ui): add failover toggle and improve proxy controls
  
  - Add FailoverToggle component with slide animation
  - Simplify ProxyToggle style to match FailoverToggle
  - Add usage statistics button when proxy is active
  - Fix i18n parameter passing for failover messages
  - Add missing failover translation keys (inQueue, addQueue, priority)
  - Replace AboutSection icon with app logo
  
  * fix(proxy): support system proxy fallback and provider-level proxy config
  
  - Remove no_proxy() calls in http_client.rs to allow system proxy fallback
  - Add get_for_provider() to build HTTP client with provider-specific proxy
  - Update forwarder.rs and stream_check.rs to use provider proxy config
  - Fix EditProviderDialog.tsx to include provider.meta in useMemo deps
  - Add useEffect in ProviderAdvancedConfig.tsx to sync expand state
  
  Fixes #636
  Fixes #583
  
  * fix(ui): sync toast theme with app setting
  
  * feat(settings): add log config management
  
  Fixes #612
  Fixes #514
  
  * fix(proxy): increase request body size limit to 200MB
  
  Fixes #666
  
  * docs(proxy): update timeout config descriptions and defaults
  
  Fixes #612
  
  * fix(proxy): filter x-goog-api-key header to prevent duplication
  
  * fix(proxy): prevent proxy recursion when system proxy points to localhost
  
  Detect if HTTP_PROXY, HTTPS_PROXY, or ALL_PROXY environment variables
  point to loopback addresses (localhost, 127.0.0.1), and bypass system
  proxy in such cases to avoid infinite request loops.
  
  * fix(i18n): add providerAdvanced i18n keys and fix failover toast parameter
  
  - Add providerAdvanced.* i18n keys to en.json, zh.json, and ja.json
  - Fix failover toggleFailed toast to pass detail parameter
  - Remove Chinese fallback text from UI for English/Japanese users
  
  * fix(tray): restore tray-provider events and enable Auto failover properly
  
  - Emit provider-switched event on tray provider click (backward compatibility)
  - Auto button now: starts proxy, takes over live config, enables failover
  
  * fix(log): enable dynamic log level and single file mode
  
  - Initialize log at Trace level for dynamic adjustment
  - Change rotation strategy to KeepSome(1) for single file
  - Set max file size to 1GB
  - Delete old log file on startup for clean start
  
  * fix(tray): fix clippy uninlined format args warning
  
  Use inline format arguments: {app_type_str} instead of {}
  
  * fix(provider): allow typing :// in endpoint URL inputs
  
  Change input type from "url" to "text" to prevent browser
  URL validation from blocking :// input.
  
  Closes #681
  
  * fix(stream-check): use Gemini native streaming API format
  
  - Change endpoint from OpenAI-compatible to native streamGenerateContent
  - Add alt=sse parameter for SSE format response
  - Use x-goog-api-key header instead of Bearer token
  - Convert request body to Gemini contents/parts format
  
  * feat(proxy): add request logging for debugging
  
  Add debug logs for outgoing requests including URL and body content
  with byte size, matching the existing response logging format.
  
  * fix(log): prevent usize underflow in KeepSome rotation strategy
  
  KeepSome(n) internally computes n-2, so n=1 causes underflow.
  Use KeepSome(2) as the minimum safe value.

  Dex Miller · 2026-01-20 21:02:44 +08:00
  e7badb1a24
• feat(proxy): add thinking signature rectifier for Claude API (#595)

  * feat(proxy): add thinking signature rectifier for Claude API
  
  Add automatic request rectification when Anthropic API returns signature
  validation errors. This improves compatibility when switching between
  different Claude providers or when historical messages contain incompatible
  thinking block signatures.
  
  - Add thinking_rectifier.rs module with trigger detection and rectification
  - Integrate rectifier into forwarder error handling flow
  - Remove thinking/redacted_thinking blocks and signature fields on retry
  - Delete top-level thinking field when assistant message lacks thinking prefix
  
  * fix(proxy): complete rectifier retry path with failover switch and chain continuation
  
  - Add failover switch trigger on rectifier retry success when provider differs from start
  - Replace direct error return with error categorization on rectifier retry failure
  - Continue failover chain for retryable errors instead of terminating early
  
  * feat(proxy): add rectifier config with master switch
  
  - Add RectifierConfig struct with enabled and requestThinkingSignature fields
  - Update should_rectify_thinking_signature to check master switch first
  - Add tests for master switch functionality
  
  * feat(db): add rectifier config storage in settings table
  
  Store rectifier config as JSON in single key for extensibility
  
  * feat(commands): add get/set rectifier config commands
  
  * feat(ui): add rectifier config panel in advanced settings
  
  - Add RectifierConfigPanel component with master switch and thinking signature toggle
  - Add API wrapper for rectifier config
  - Add i18n translations for zh/en/ja
  
  * feat(proxy): integrate rectifier config into request forwarding
  
  - Load rectifier config from database in RequestContext
  - Pass config to RequestForwarder for runtime checking
  - Use should_rectify_thinking_signature with config parameter
  
  * test(proxy): add nested JSON error detection test for thinking rectifier
  
  * fix(proxy): resolve HalfOpen permit leak and RectifierConfig default values
  
  - Fix RectifierConfig::default() to return enabled=true (was false due to derive)
  - Add release_permit_neutral() for releasing permits without affecting health stats
  - Fix 3 permit leak points in rectifier retry branches
  - Add unit tests for default values and permit release
  
  * style(ui): format ProviderCard style attribute
  
  * fix(rectifier): add detection for signature field required error
  
  Add support for detecting "signature: Field required" error pattern
  in the thinking signature rectifier. This enables automatic request
  rectification when upstream API returns this specific validation error.

  Dex Miller · 2026-01-14 00:12:13 +08:00
  f3343992f2
• Feature/global proxy (#596)

  * refactor(proxy): simplify logging for better readability
  
  - Delete 17 verbose debug logs from handlers, streaming, and response_processor
  - Convert excessive INFO logs to DEBUG level for internal processing details
  - Add 2 critical INFO logs in forwarder.rs for failover scenarios:
    - Log when switching to next provider after failure
    - Log when all providers have been exhausted
  - Fix clippy uninlined_format_args warning
  
  This reduces log noise while maintaining visibility into key user-facing decisions.
  
  * fix: replace unsafe unwrap() calls with proper error handling
  
  - database/dao/mcp.rs: Use map_err for serde_json serialization
  - database/dao/providers.rs: Use map_err for settings_config and meta serialization
  - commands/misc.rs: Use expect() for compile-time regex pattern
  - services/prompt.rs: Use unwrap_or_default() for SystemTime
  - deeplink/provider.rs: Replace unwrap() with is_none_or pattern for Option checks
  
  Reduces potential panic points from 26 to 1 (static regex init, safe).
  
  * refactor(proxy): simplify verbose logging output
  
  - Remove response JSON full output logging in response_processor
  - Remove per-request INFO logs in provider_router (failover status, provider selection)
  - Change model mapping log from INFO to DEBUG
  - Change usage logging failure from INFO to WARN
  - Remove redundant debug logs for circuit breaker operations
  
  Reduces log noise significantly while preserving important warnings and errors.
  
  * feat(proxy): add structured log codes for i18n support
  
  Add error code system to proxy module logs for multi-language support:
  
  - CB-001~006: Circuit breaker state transitions and triggers
  - SRV-001~004: Proxy server lifecycle events
  - FWD-001~002: Request forwarding and failover
  - FO-001~005: Failover switch operations
  - USG-001~002: Usage logging errors
  
  Log format: [CODE] Chinese message
  Frontend/log tools can map codes to any language.
  
  New file: src/proxy/log_codes.rs - centralized code definitions
  
  * chore: bump version to 3.9.1
  
  * style: format code with prettier and rustfmt
  
  * fix(ui): allow number inputs to be fully cleared before saving
  
  - Convert numeric state to string type for controlled inputs
  - Use isNaN() check instead of || fallback to allow 0 values
  - Apply fix to ProxyPanel, CircuitBreakerConfigPanel,
    AutoFailoverConfigPanel, and ModelTestConfigPanel
  
  * feat(pricing): support @ separator in model name matching
  
  - Refactor model name cleaning into chained method calls
  - Add @ to - replacement (e.g., gpt-5.2-codex@low → gpt-5.2-codex-low)
  - Add test case for @ separator matching
  
  * feat(proxy): add global proxy settings support
  
  Add ability to configure a global HTTP/HTTPS proxy for all outbound
  requests including provider API calls, speed tests, and stream checks.
  
  * fix(proxy): improve validation and error handling in proxy config panels
  
  - Add StopTimeout/StopFailed error types for proper stop() error reporting
  - Replace silent clamp with validation-and-block in config panels
  - Add listenAddress format validation in ProxyPanel
  - Use log_codes constants instead of hardcoded strings
  - Use once_cell::Lazy for regex precompilation
  
  * fix(proxy): harden error handling and input validation
  
  - Handle RwLock poisoning in settings.rs with unwrap_or_else
  - Add fallback for dirs::home_dir() in config modules
  - Normalize localhost to 127.0.0.1 in ProxyPanel
  - Format IPv6 addresses with brackets for valid URLs
  - Strict port validation with pure digit regex
  - Treat NaN as validation failure in config panels
  - Log warning on cost_multiplier parse failure
  - Align timeoutSeconds range to [0, 300] across all panels
  
  * feat(proxy): add local proxy auto-scan and fix hot-reload
  
  - Add scan_local_proxies command to detect common proxy ports
  - Fix SkillService not using updated proxy after hot-reload
  - Move global proxy settings to advanced tab
  - Add error handling for scan failures
  
  * fix(proxy): allow localhost input in proxy address field
  
  * fix(proxy): restore request timeout and fix proxy hot-reload issues
  
  - Add URL scheme validation in build_client (http/https/socks5/socks5h)
  - Restore per-request timeout for speedtest, stream_check, usage_script, forwarder
  - Fix set_global_proxy_url to validate before persisting to DB
  - Mask proxy credentials in all log outputs
  - Fix forwarder hot-reload by fetching client on each request
  
  * style: format code with prettier
  
  * fix(proxy): improve global proxy stability and error handling
  
  - Fix RwLock silent failures with explicit error propagation
  - Handle init() duplicate calls gracefully with warning log
  - Align fallback client config with build_client settings
  - Make scan_local_proxies async to avoid UI blocking
  - Add mixed mode support for Clash 7890 port (http+socks5)
  - Use multiple test targets for better proxy connectivity test
  - Clear invalid proxy config on init failure
  - Restore timeout constraints in usage_script
  - Fix mask_url output for URLs without port
  - Add structured error codes [GP-001 to GP-009]
  
  * feat(proxy): add username/password authentication support
  
  - Add separate username and password input fields
  - Implement password visibility toggle with eye icon
  - Add clear button to reset all proxy fields
  - Auto-extract auth info from saved URL and merge on save
  - Update i18n translations (zh/en/ja)
  
  * fix(proxy): fix double encoding issue in proxy auth and add debug logs
  
  - Remove encodeURIComponent in mergeAuth() since URL object's
    username/password setters already do percent-encoding automatically
  - Add GP-010 debug log for database read operations
  - Add GP-011 debug log to track incoming URL info (length, has_auth)
  - Fix username.trim() in fallback branch for consistent behavior

  Dex Miller · 2026-01-13 10:55:53 +08:00
  8b92982112
• Feat/usage model extraction (#455)

  * feat(proxy): extract model name from API response for accurate usage tracking
  
  - Add model field extraction in TokenUsage parsing for Claude, OpenAI, and Codex
  - Prioritize response model over request model in usage logging
  - Update model extractors to use parsed usage.model first
  - Add tests for model extraction in stream and non-stream responses
  
  * feat(proxy): implement streaming timeout control with validation
  
  - Add first byte timeout (0 or 1-180s) for streaming requests
  - Add idle timeout (0 or 60-600s) for streaming data gaps
  - Add non-streaming timeout (0 or 60-1800s) for total request
  - Implement timeout logic in response processor
  - Add 1800s global timeout fallback when disabled
  - Add database schema migration for timeout fields
  - Add i18n translations for timeout settings
  
  * feat(proxy): add model mapping module for provider-based model substitution
  
  - Add model_mapper.rs with ModelMapping struct to extract model configs from Provider
  - Support ANTHROPIC_MODEL, ANTHROPIC_REASONING_MODEL, and default models for haiku/sonnet/opus
  - Implement thinking mode detection for reasoning model priority
  - Include comprehensive unit tests for all mapping scenarios
  
  * fix(proxy): bypass circuit breaker for single provider scenario
  
  When failover is disabled (single provider), circuit breaker open state
  would block all requests causing poor UX. Now bypasses circuit breaker
  check in this scenario. Also integrates model mapping into request flow.
  
  * feat(ui): add reasoning model field to Claude provider form
  
  Add ANTHROPIC_REASONING_MODEL configuration field for Claude providers,
  allowing users to specify a dedicated model for thinking/reasoning tasks.
  
  * feat(proxy): add openrouter_compat_mode for optional format conversion
  
  Add configurable OpenRouter compatibility mode that enables Anthropic to
  OpenAI format conversion. When enabled, rewrites endpoint to /v1/chat/completions
  and transforms request/response formats. Defaults to enabled for OpenRouter.
  
  * feat(ui): add OpenRouter compatibility mode toggle
  
  Add UI toggle for OpenRouter providers to enable/disable compatibility
  mode which uses OpenAI Chat Completions format with SSE conversion.
  
  * feat(stream-check): use provider-configured model for health checks
  
  Extract model from provider's settings_config (ANTHROPIC_MODEL, GEMINI_MODEL,
  or Codex config.toml) instead of always using default test models.
  
  * refactor(ui): remove timeout settings from AutoFailoverConfigPanel
  
  Remove streaming/non-streaming timeout configuration from failover panel
  as these settings have been moved to a dedicated location.
  
  * refactor(database): migrate proxy_config to per-app three-row structure
  
  Replace singleton proxy_config table with app_type primary key structure,
  allowing independent proxy settings for Claude, Codex, and Gemini.
  Add GlobalProxyConfig queries and per-app config management in DAO layer.
  
  * feat(proxy): add GlobalProxyConfig and AppProxyConfig types
  
  Add new type definitions for the refactored proxy configuration:
  - GlobalProxyConfig: shared settings (enabled, address, port, logging)
  - AppProxyConfig: per-app settings (failover, timeouts, circuit breaker)
  
  * refactor(proxy): update service layer for per-app config structure
  
  Adapt proxy service, handler context, and provider router to use
  the new per-app configuration model. Read enabled/timeout settings
  from proxy_config table instead of settings table.
  
  * feat(commands): add global and per-app proxy config commands
  
  Add new Tauri commands for the refactored proxy configuration:
  - get_global_proxy_config / update_global_proxy_config
  - get_proxy_config_for_app / update_proxy_config_for_app
  Update startup restore logic to read from proxy_config table.
  
  * feat(api): add frontend API and Query hooks for proxy config
  
  Add TypeScript wrappers and TanStack Query hooks for:
  - Global proxy config (address, port, logging)
  - Per-app proxy config (failover, timeouts, circuit breaker)
  - Proxy takeover status management
  
  * refactor(ui): redesign proxy panel with inline config controls
  
  Replace ProxySettingsDialog with inline controls in ProxyPanel.
  Add per-app takeover switches and global address/port settings.
  Simplify AutoFailoverConfigPanel by removing timeout settings.
  
  * feat(i18n): add proxy takeover translations and update types
  
  Add i18n strings for proxy takeover status in zh/en/ja.
  Update TypeScript types for GlobalProxyConfig and AppProxyConfig.
  
  * refactor(proxy): load circuit breaker config per-app instead of globally
  
  Extract app_type from router key and read circuit breaker settings
  from the corresponding proxy_config row for each application.

  YoVinchen · 2025-12-25 10:40:11 +08:00
  e6f18ba801
• feat(failover): add auto-failover master switch with proxy integration (#427)

  * feat(failover): add auto-failover master switch with proxy integration
  
  - Add persistent auto_failover_enabled setting in database
  - Add get/set_auto_failover_enabled commands
  - Provider router respects master switch state
  - Proxy shutdown automatically disables failover
  - Enabling failover auto-starts proxy server
  - Optimistic updates for failover queue toggle
  
  * feat(proxy): persist proxy takeover state across app restarts
  
  - Add proxy_takeover_{app_type} settings for per-app state tracking
  - Restore proxy takeover state automatically on app startup
  - Preserve state on normal exit, clear on manual stop
  - Add stop_with_restore_keep_state method for graceful shutdown
  
  * fix(proxy): set takeover state for all apps in start_with_takeover

  YoVinchen · 2025-12-21 22:39:50 +08:00
  a1537807eb
• refactor(database): split monolithic database.rs into modular structure

  Split the 1788-line database.rs into a well-organized module directory:
  
  - mod.rs (142 lines): Database struct and initialization
  - schema.rs (341 lines): Table creation and schema migrations
  - backup.rs (324 lines): SQL import/export and snapshot backup
  - migration.rs (240 lines): JSON to SQLite data migration
  - tests.rs (280 lines): Unit tests
  - dao/providers.rs (254 lines): Provider CRUD operations
  - dao/mcp.rs (97 lines): MCP server CRUD operations
  - dao/prompts.rs (88 lines): Prompt CRUD operations
  - dao/skills.rs (124 lines): Skills CRUD operations
  - dao/settings.rs (65 lines): Settings key-value storage
  
  Benefits:
  - Max file size reduced from 1788 to 341 lines
  - Clear separation of concerns (schema, backup, migration, DAOs)
  - Easier to navigate and maintain
  - All 107 tests passing with zero API changes

  Jason · 2025-11-25 11:56:08 +08:00
  c3f2f0798d