2 Commits

Author	SHA1	Message	Date
diegosouzapw	8f0615fd04	fix(security): resolve 5 CodeQL alerts, document FPs, harden deploy skills ... Real fixes (alerts auto-close on next scan): - agentSkills/generator: escape backslash before double-quote in YAML frontmatter so a trailing backslash can't escape the closing quote (js/incomplete-sanitization #297/#298) - usage: replace /\s*\(RESTRICTED\)\s*$/ with a non-backtracking literal + trim (js/polynomial-redos #275) - i18n/request: skip __proto__/constructor/prototype in deepMergeFallback (js/prototype-pollution-utility #274) - scripts/ad-hoc/nvidia diag: log key presence only, never key chars (js/clear-text-logging #273) - tests: regression coverage for all three production fixes (YAML round-trip, proto-pollution guard, RESTRICTED strip + ReDoS timing) Docs: - ARCHITECTURE.md: executor count 45->55, OAuth modules 15->16, agy.ts in list Deploy skills (deploy-vps-*-cc/-cx/-ag): add --legacy-peer-deps (npm v11 peer-dep resolver crashes on the omniroute tree) and replace the "; pm2 start" that masked a failed install with a proper && chain.	2026-06-01 19:36:48 -03:00
oyi77	54ca6ba9b6	test: add 5 new test files for DB modules and usage utils ... - db-apiKeys-crud.test.ts: 54 tests (API key lifecycle, validation, caching) - db-core.test.ts: 40 tests (core DB helpers, row conversion, encryption) - db-domainState-crud.test.ts: 32 tests (domain state, circuit breakers) - db-registeredKeys-crud.test.ts: 26 tests (key registration, rotation) - usage-utils.test.ts: 43 tests (parseResetTime, quota snapshots, plan inference) Total: 195 new test cases, all passing	2026-06-01 03:42:35 +07:00