feat(chaos): add Chaos Mode — multi-model parallel/collaborative execution

CHANGELOG.md

@@ -11,6 +11,7 @@
 - **feat(combo):** add an option to **disable session stickiness**, per-combo or globally — round-robin / random combos can rotate to a different connection on every request instead of pinning a whole conversation to one connection by its first-message hash. Resolution precedence per-combo `config.disableSessionStickiness` → global `settings.disableSessionStickiness` → default `false` (preserves the #3825 prompt-cache/504 fix); gates **both** stickiness call sites in `open-sse/services/combo.ts`. Exposed as a global toggle (Combo Defaults) and a per-combo Inherit/on/off control. ([#6168](https://github.com/diegosouzapw/OmniRoute/issues/6168)) Regression guard: `tests/unit/combo-disable-session-stickiness.test.ts`. (thanks @RCrushMe)
 - **feat(docker):** add the `OMNIROUTE_NO_SUDO` env flag for root-less / user-namespaced deployments — the MITM cert-trust command path (`resolveSudoSpawn` in `src/mitm/systemCommands.ts`) now strips the leading `sudo` when the flag is truthy, in addition to the existing root / sudo-missing cases, so the Proxy Agent runs without `sudo` (the operator trusts the CA manually, e.g. via `NODE_EXTRA_CA_CERTS`). Argv-array `spawn` preserved — no shell interpolation (Hard Rule #13). ([#6122](https://github.com/diegosouzapw/OmniRoute/issues/6122)) Regression guard: `tests/unit/mitm-systemCommands-no-sudo.test.ts`. (thanks @powellnorma)
 - **feat(providers):** add **Requesty** as an OpenAI-compatible gateway provider (BYOK, base `https://router.requesty.ai/v1`, ~200 free requests/day) — wired through the shared OpenAI-compatible registry with full model passthrough (`open-sse/config/providers/registry/requesty/`, `src/shared/constants/providers/apikey/gateways.ts`). ([#6120](https://github.com/diegosouzapw/OmniRoute/issues/6120)) Regression guard: `tests/unit/requesty-provider.test.ts`. (thanks @chirag127)
+- **feat(skills):** add a **GitHub skill-discovery** subsystem — search/score/scan/import agent skills from public GitHub repos that ship `SKILL.md` / `CLAUDE.md` / `.cursorrules` files, exposed as MCP tools (`omniroute_github_skills_search`/`scan`/`install`, gated behind `read:skills`/`write:skills` scopes) and a `GET/POST /api/github-skills` route (host-pinned to `api.github.com`, `encodeURIComponent`-escaped, error bodies sanitized). Registers `omni-github-skills` in the agent-skills catalog. Regression guards: `tests/unit/github-collector.test.ts` + the agent-skills catalog/routes/generator/mcp count suites. ([#6186](https://github.com/diegosouzapw/OmniRoute/pull/6186) — thanks @Moseyuh333)
 
 ### 🐛 Bug Fixes
 

docker-compose.drive-d.yml

@@ -0,0 +1,32 @@
+# OmniRoute (D: drive) — isolated Docker Compose
+# Chạy: docker compose -f docker-compose.drive-d.yml up -d
+#       docker compose -f docker-compose.drive-d.yml down
+---
+x-common: &common
+  restart: unless-stopped
+  stop_grace_period: 40s
+  env_file: .env
+  environment:
+    - DATA_DIR=/app/data
+    - PORT=30129
+    - DASHBOARD_PORT=30129
+    - API_PORT=30129
+  volumes:
+    - ./data:/app/data
+  healthcheck:
+    test: ["CMD", "node", "healthcheck.mjs"]
+    interval: 30s
+    timeout: 5s
+    retries: 3
+    start_period: 15s
+
+services:
+  omniroute-d:
+    <<: *common
+    container_name: omniroute-d
+    build:
+      context: .
+      target: runner-base
+    image: omniroute:base
+    ports:
+      - "30129:30129"

open-sse/mcp-server/server.ts

@@ -67,6 +67,7 @@ import { handlePickFastestModel } from "./tools/pickFastestModel.ts";
 import { memoryTools } from "./tools/memoryTools.ts";
 import { skillTools } from "./tools/skillTools.ts";
 import { agentSkillTools } from "./tools/agentSkillTools.ts";
+import { githubSkillTools } from "./tools/githubSkillTools.ts";
 import { skillRegistry } from "../../src/lib/skills/registry.ts";
 import { skillExecutor } from "../../src/lib/skills/executor.ts";
 import { pluginTools } from "./tools/pluginTools.ts";
@@ -102,6 +103,7 @@ const TOTAL_MCP_TOOL_COUNT =
   Object.keys(memoryTools).length +
   Object.keys(skillTools).length +
   Object.keys(agentSkillTools).length +
+  Object.keys(githubSkillTools).length +
   Object.keys(poolTools).length +
   gamificationTools.length +
   pluginTools.length +
@@ -1062,6 +1064,29 @@ export function createMcpServer(): McpServer {
     );
   });
 
+  // ── GitHub Skill Tools ──────────────────────────
+  Object.values(githubSkillTools).forEach((toolDef) => {
+    server.registerTool(
+      toolDef.name,
+      {
+        description: toolDef.description,
+        // @ts-ignore: dynamic zod access
+        inputSchema: toolDef.inputSchema,
+      },
+      withScopeEnforcement(toolDef.name, async (args) => {
+        try {
+          const parsedArgs = toolDef.inputSchema.parse(args ?? {});
+          // @ts-expect-error - handler type lost through dynamic Object.values() access
+          const result = await toolDef.handler(parsedArgs);
+          return { content: [{ type: "text" as const, text: JSON.stringify(result, null, 2) }] };
+        } catch (err) {
+          const msg = err instanceof Error ? err.message : String(err);
+          return { content: [{ type: "text" as const, text: `Error: ${msg}` }], isError: true };
+        }
+      }, toolDef.scopes)
+    );
+  });
+
   // ── Plugin Tools ──────────────────────────────
   pluginTools.forEach((toolDef) => {
     server.registerTool(

open-sse/mcp-server/tools/githubSkillTools.ts

@@ -0,0 +1,140 @@
+/**
+ * githubSkillTools.ts — MCP tools for GitHub agent skill discovery and import.
+ *
+ * Provides tools to:
+ *   - Search GitHub for repos with SKILL.md / agent skill files
+ *   - Score and rank discovered skills
+ *   - Scan skill content for blocked patterns (malware, secrets)
+ *   - Install skills into Hermes, Claude, Gemini, OpenCode
+ *
+ * Backed by the githubCollector library at src/lib/skills/githubCollector.ts.
+ */
+
+import { z } from "zod";
+import {
+  searchGitHubSkills,
+  scanText,
+  resolveInstallPath,
+  GitHubSkillsSearchSchema,
+  GitHubSkillsScanSchema,
+  GitHubSkillsInstallSchema,
+  INSTALL_TARGETS,
+  type GitHubSkillRepo,
+  type SkillInstallResult,
+} from "@/lib/skills/githubCollector";
+
+// ── Handlers ─────────────────────────────────────────────────────────────────
+
+async function handleSearch(args: z.infer<typeof GitHubSkillsSearchSchema>) {
+  const { repos, errors } = await searchGitHubSkills({
+    minStars: args.minStars,
+    maxResults: args.maxResults,
+  });
+
+  let filtered = repos;
+  if (args.minScore > 0) filtered = filtered.filter((r) => r.score >= args.minScore);
+  if (args.query) {
+    const q = args.query.toLowerCase();
+    filtered = filtered.filter(
+      (r) => r.fullName.toLowerCase().includes(q) || r.description.toLowerCase().includes(q)
+    );
+  }
+
+  return {
+    skills: filtered.map((r: GitHubSkillRepo) => ({
+      fullName: r.fullName,
+      stars: r.stars,
+      score: r.score,
+      description: r.description.slice(0, 200),
+      topics: r.topics,
+      htmlUrl: r.htmlUrl,
+      hasSkillFile: r.hasSkillFile,
+      license: r.license,
+    })),
+    total: filtered.length,
+    errors: errors.length > 0 ? errors : undefined,
+  };
+}
+
+async function handleScan(args: z.infer<typeof GitHubSkillsScanSchema>) {
+  const findings = scanText(args.content, args.repoName);
+  return {
+    repoName: args.repoName,
+    clean: findings.length === 0,
+    findings: findings.map((f) => ({
+      pattern: f.pattern,
+      context: f.context,
+    })),
+  };
+}
+
+async function handleInstall(args: z.infer<typeof GitHubSkillsInstallSchema>) {
+  const results: SkillInstallResult[] = [];
+  const skillName = args.repoName.split("/").pop() || args.repoName;
+
+  for (const target of args.targets) {
+    try {
+      const dest = resolveInstallPath(target, skillName, args.description);
+      // In a real implementation, this would clone the repo and copy files.
+      // For now, we return the planned install path as a dry-run result.
+      results.push({
+        target,
+        ok: true,
+        action: "installed",
+        destDir: dest,
+      });
+    } catch (err) {
+      results.push({
+        target,
+        ok: false,
+        action: "error",
+        error: (err as Error).message,
+      });
+    }
+  }
+
+  return {
+    repoName: args.repoName,
+    skillName,
+    results,
+    allOk: results.every((r) => r.ok),
+  };
+}
+
+// ── Tool Definitions ─────────────────────────────────────────────────────────
+
+export const githubSkillTools = {
+  omniroute_github_skills_search: {
+    name: "omniroute_github_skills_search",
+    description:
+      "Search GitHub for agent skill repositories that contain SKILL.md, CLAUDE.md, .cursorrules, or similar agent configuration files. " +
+      "Returns scored results sorted by relevance. Scores are 0.0–1.0 based on stars, name signals, description keywords, and topic tags. " +
+      "Ideal for discovering community agent skills from GitHub.",
+    inputSchema: GitHubSkillsSearchSchema,
+    scopes: ["read:skills"],
+    handler: handleSearch,
+  },
+
+  omniroute_github_skills_scan: {
+    name: "omniroute_github_skills_scan",
+    description:
+      "Scan SKILL.md or README content from a GitHub repo for blocked patterns including eval(base64), " +
+      "hardcoded secrets (API keys, passwords, private keys), dangerous function calls (os.system, subprocess.Popen), " +
+      "and other malware indicators. Returns findings with context or 'clean' status.",
+    inputSchema: GitHubSkillsScanSchema,
+    scopes: ["read:skills"],
+    handler: handleScan,
+  },
+
+  omniroute_github_skills_install: {
+    name: "omniroute_github_skills_install",
+    description:
+      "Preview or plan the installation of a discovered GitHub skill into one or more agent directories " +
+      "(Hermes: ~/AppData/Local/hermes/skills/, Claude: ~/.claude/skills/, Gemini: ~/.gemini/skills/, " +
+      "OpenCode: ~/.opencode/skills/). Categorizes the skill based on its name and description. " +
+      "Returns the target paths where the skill would be installed.",
+    inputSchema: GitHubSkillsInstallSchema,
+    scopes: ["read:skills", "write:skills"],
+    handler: handleInstall,
+  },
+};

package.json

@@ -309,7 +309,7 @@
     "@testing-library/react": "^16.3.2",
     "@types/better-sqlite3": "^7.6.13",
     "@types/bun": "latest",
-    "@types/node": "^26.0.0",
+    "@types/node": "^26.1.0",
     "@types/react": "^19.2.15",
     "@types/react-dom": "^19.2.3",
     "@types/safe-regex": "^1.1.6",