chore(release): v3.6.6 — Stabilization

.env.example

@@ -242,6 +242,7 @@ NEXT_PUBLIC_ENABLE_SOCKS5_PROXY=true
 # CLI_CLINE_BIN=cline
 # CLI_CONTINUE_BIN=cn
 # CLI_QODER_BIN=qoder
+# CLI_QWEN_BIN=qwen
 
 
 # ═══════════════════════════════════════════════════════════════════════════════
@@ -354,6 +355,7 @@ QODER_OAUTH_CLIENT_SECRET=4Z3YjXycVsQvyGF1etiNlIBB4RsqSDtW
 # QODER_OAUTH_TOKEN_URL=
 # QODER_OAUTH_USERINFO_URL=
 # QODER_OAUTH_CLIENT_ID=
+# QODER_OAUTH_CLIENT_SECRET=
 
 # ── Qoder Personal Access Token (direct API key fallback) ──
 # Used by: open-sse/executors/qoder.ts — bypasses OAuth when set.
@@ -362,14 +364,15 @@ QODER_OAUTH_CLIENT_SECRET=4Z3YjXycVsQvyGF1etiNlIBB4RsqSDtW
 # OMNIROUTE_QODER_WORKSPACE=
 
 # ─────────────────────────────────────────────────────────────────────────────
-# ⚠️  GOOGLE OAUTH (Antigravity, Gemini CLI) — IMPORTANT FOR REMOTE SERVERS
+# ⚠️  GOOGLE OAUTH (Antigravity, Gemini CLI) & OTHER PROVIDERS — REMOTE SERVERS
 # ─────────────────────────────────────────────────────────────────────────────
-# The credentials above ONLY work when OmniRoute runs on localhost.
-# For remote hosting:
-#   1. Go to https://console.cloud.google.com/apis/credentials
-#   2. Create an OAuth 2.0 Client ID (type: "Web application")
-#   3. Add your server URL as Authorized redirect URI
-#   4. Replace the values above with your credentials.
+# The default Client IDs above ONLY work when OmniRoute runs on localhost.
+# For remote/VPS hosting (including Docker containers on remote servers):
+#   1. By default, the browser will attempt OAuth redirects back to localhost, which will fail.
+#   2. Set NEXT_PUBLIC_BASE_URL=https://your-domain.com to fix the redirect URI.
+#   3. You MUST create your own OAuth App in each provider's developer console (Google Cloud, etc.)
+#      and set the Authorized redirect URI to your domain (e.g., https://your-domain.com/callback).
+#   4. Replace the _OAUTH_CLIENT_ID and _SECRET values above with your own credentials.
 # ─────────────────────────────────────────────────────────────────────────────
 
 # ── OAuth sidecar/CLI bridge (internal) ──

.github/ISSUE_TEMPLATE/bug_report.yml

@@ -165,7 +165,7 @@ body:
       description: "Which commands or tests should prove this bug is fixed?"
       placeholder: |
         Example:
-        - node --import tsx/esm --test tests/unit/my-file.test.mjs
+        - node --import tsx/esm --test tests/unit/my-file.test.ts
         - npm run test:coverage
     validations:
       required: false

.github/ISSUE_TEMPLATE/test_coverage_task.yml

@@ -26,7 +26,7 @@ body:
         Example:
         - open-sse/handlers/chatCore.ts
         - open-sse/services/combo.ts
-        - tests/integration/chat-pipeline.test.mjs
+        - tests/integration/chat-pipeline.test.ts
     validations:
       required: true
 
@@ -59,7 +59,7 @@ body:
       description: "List the commands that must pass before this issue can be closed."
       placeholder: |
         Example:
-        - node --import tsx/esm --test tests/unit/my-suite.test.mjs
+        - node --import tsx/esm --test tests/unit/my-suite.test.ts
         - npm run test:coverage
     validations:
       required: true

.github/workflows/ci.yml

@@ -14,6 +14,9 @@ concurrency:
 permissions:
   contents: read
 
+env:
+  CI_NODE_VERSION: "22.22.2"
+
 jobs:
   lint:
     name: Lint
@@ -22,9 +25,10 @@ jobs:
       - uses: actions/checkout@v6
       - uses: actions/setup-node@v6
         with:
-          node-version: 22
+          node-version: ${{ env.CI_NODE_VERSION }}
           cache: npm
       - run: npm ci
+      - run: npm run check:node-runtime
       - run: npm run lint
       - run: npm run check:cycles
       - run: npm run check:route-validation:t06
@@ -82,7 +86,7 @@ jobs:
           fetch-depth: 0
       - uses: actions/setup-node@v6
         with:
-          node-version: 22
+          node-version: ${{ env.CI_NODE_VERSION }}
       - name: Fetch base branch
         run: git fetch --no-tags origin "${GITHUB_BASE_REF}" --depth=1
       - name: Validate source changes include tests
@@ -112,16 +116,17 @@ jobs:
 
       - uses: actions/setup-node@v6
         with:
-          node-version: 22
+          node-version: ${{ env.CI_NODE_VERSION }}
           cache: npm
 
       - run: npm ci
+      - run: npm run check:node-runtime
 
       - name: Dependency audit
-        run: npm audit --audit-level=high --omit=dev || true
+        run: npm audit --audit-level=high --omit=dev
 
       - name: Check for known vulnerabilities
-        run: npx is-my-node-vulnerable || true
+        run: npx is-my-node-vulnerable
 
       - name: Run Snyk Vulnerability checks
         if: github.actor != 'dependabot[bot]'
@@ -138,11 +143,29 @@ jobs:
       - uses: actions/checkout@v6
       - uses: actions/setup-node@v6
         with:
-          node-version: 22
+          node-version: ${{ env.CI_NODE_VERSION }}
           cache: npm
       - run: npm ci
+      - run: npm run check:node-runtime
       - run: npm run build
 
+  package-artifact:
+    name: Package Artifact
+    runs-on: ubuntu-latest
+    needs: build
+    env:
+      JWT_SECRET: ci-build-secret-with-sufficient-length-for-validation
+    steps:
+      - uses: actions/checkout@v6
+      - uses: actions/setup-node@v6
+        with:
+          node-version: ${{ env.CI_NODE_VERSION }}
+          cache: npm
+      - run: npm ci
+      - run: npm run check:node-runtime
+      - run: npm run build:cli
+      - run: npm run check:pack-artifact
+
   test-unit:
     name: Unit Tests
     runs-on: ubuntu-latest
@@ -151,13 +174,15 @@ jobs:
     env:
       JWT_SECRET: ci-test-secret-with-sufficient-length-for-validation
       API_KEY_SECRET: ci-test-api-key-secret-long
+      DISABLE_SQLITE_AUTO_BACKUP: "true"
     steps:
       - uses: actions/checkout@v6
       - uses: actions/setup-node@v6
         with:
-          node-version: 22
+          node-version: ${{ env.CI_NODE_VERSION }}
           cache: npm
       - run: npm ci
+      - run: npm run check:node-runtime
       - run: npm run test:unit
 
   test-coverage:
@@ -168,13 +193,15 @@ jobs:
     env:
       JWT_SECRET: ci-test-secret-with-sufficient-length-for-validation
       API_KEY_SECRET: ci-test-api-key-secret-long
+      DISABLE_SQLITE_AUTO_BACKUP: "true"
     steps:
       - uses: actions/checkout@v6
       - uses: actions/setup-node@v6
         with:
-          node-version: 22
+          node-version: ${{ env.CI_NODE_VERSION }}
           cache: npm
       - run: npm ci
+      - run: npm run check:node-runtime
       - name: Run coverage gate
         run: npm run test:coverage
       - name: Build coverage summary
@@ -322,13 +349,15 @@ jobs:
     env:
       JWT_SECRET: ci-test-secret-with-sufficient-length-for-validation
       API_KEY_SECRET: ci-test-api-key-secret-long
+      DISABLE_SQLITE_AUTO_BACKUP: "true"
     steps:
       - uses: actions/checkout@v6
       - uses: actions/setup-node@v6
         with:
-          node-version: 22
+          node-version: ${{ env.CI_NODE_VERSION }}
           cache: npm
       - run: npm ci
+      - run: npm run check:node-runtime
       - run: npx playwright install --with-deps chromium
       - run: npm run build
       - run: npx playwright test tests/e2e/*.spec.ts --shard=${{ matrix.shard }}/4
@@ -343,13 +372,15 @@ jobs:
       API_KEY_SECRET: ci-test-api-key-secret-long
       INITIAL_PASSWORD: ci-test-password-for-integration
       DATA_DIR: /tmp/omniroute-ci
+      DISABLE_SQLITE_AUTO_BACKUP: "true"
     steps:
       - uses: actions/checkout@v6
       - uses: actions/setup-node@v6
         with:
-          node-version: 22
+          node-version: ${{ env.CI_NODE_VERSION }}
           cache: npm
       - run: npm ci
+      - run: npm run check:node-runtime
       - run: npm run test:integration
 
   test-security:
@@ -359,13 +390,15 @@ jobs:
     env:
       JWT_SECRET: ci-test-secret-with-sufficient-length-for-validation
       API_KEY_SECRET: ci-test-api-key-secret-long
+      DISABLE_SQLITE_AUTO_BACKUP: "true"
     steps:
       - uses: actions/checkout@v6
       - uses: actions/setup-node@v6
         with:
-          node-version: 22
+          node-version: ${{ env.CI_NODE_VERSION }}
           cache: npm
       - run: npm ci
+      - run: npm run check:node-runtime
       - run: npm run test:security
 
   ci-summary:
@@ -378,6 +411,7 @@ jobs:
       - pr-test-policy
       - advanced-security
       - build
+      - package-artifact
       - test-unit
       - test-coverage
       - sonarqube
@@ -424,6 +458,7 @@ jobs:
           echo "| Job | Status |" >> "$GITHUB_STEP_SUMMARY"
           echo "|-----|--------|" >> "$GITHUB_STEP_SUMMARY"
           echo "| Build Matrix | $(status '${{ needs.build.result }}') |" >> "$GITHUB_STEP_SUMMARY"
+          echo "| Package Artifact | $(status '${{ needs.package-artifact.result }}') |" >> "$GITHUB_STEP_SUMMARY"
 
           echo "" >> "$GITHUB_STEP_SUMMARY"
           echo "## 🧪 Tests" >> "$GITHUB_STEP_SUMMARY"

.github/workflows/npm-publish.yml

@@ -37,6 +37,9 @@ permissions:
   id-token: write
   packages: write
 
+env:
+  NPM_PUBLISH_NODE_VERSION: "22.22.2"
+
 jobs:
   publish:
     runs-on: ubuntu-latest
@@ -48,7 +51,7 @@ jobs:
       - name: Setup Node.js
         uses: actions/setup-node@v6
         with:
-          node-version: 22
+          node-version: ${{ env.NPM_PUBLISH_NODE_VERSION }}
           registry-url: https://registry.npmjs.org
 
       - name: Install dependencies (skip scripts to avoid heavy build)
@@ -88,7 +91,10 @@ jobs:
       - name: Build CLI bundle (standalone app)
         env:
           JWT_SECRET: ci-build-secret-with-sufficient-length-for-validation
-        run: node scripts/prepublish.mjs
+        run: npm run build:cli
+
+      - name: Validate npm package artifact
+        run: npm run check:pack-artifact
 
       - name: Publish to npm
         run: |

.gitignore

@@ -169,3 +169,4 @@ docs/superpowers/
 
 # GitNexus local index
 .gitnexus
+.worktrees

.npmignore

@@ -72,3 +72,7 @@ vscode-extension/
 
 # Root-level underscore-prefixed directories (private/draft — never publish)
 /_*/
+app/_*/
+app/coverage/
+app/logs/
+app/tests/

AGENTS.md

@@ -44,13 +44,13 @@ with **MCP Server** (25 tools), **A2A v0.3 Protocol**, and **Electron desktop ap
 npm run test:all
 
 # Single test file (Node.js native test runner — most tests use this)
-node --import tsx/esm --test tests/unit/your-file.test.mjs
-node --import tsx/esm --test tests/unit/plan3-p0.test.mjs
-node --import tsx/esm --test tests/unit/fixes-p1.test.mjs
-node --import tsx/esm --test tests/unit/security-fase01.test.mjs
+node --import tsx/esm --test tests/unit/your-file.test.ts
+node --import tsx/esm --test tests/unit/plan3-p0.test.ts
+node --import tsx/esm --test tests/unit/fixes-p1.test.ts
+node --import tsx/esm --test tests/unit/security-fase01.test.ts
 
 # Integration tests
-node --import tsx/esm --test tests/integration/*.test.mjs
+node --import tsx/esm --test tests/integration/*.test.ts
 
 # Vitest (MCP server, autoCombo)
 npm run test:vitest