2 Commits

Author	SHA1	Message	Date
Prudhvi Vuda	3e6684ebb4	fix(api): treat cx/* and codex/* as equivalent API-key model permissions (#8805) ... Dashboard Codex restrictions use the public cx/ alias while /v1/responses normalizes bare Codex IDs to codex/, so allow/block checks falsely 403'd. Expand permission candidates via the provider registry alias map. Closes #8803	2026-07-27 22:37:58 -03:00
Hernan Javier Ardila Sanchez	fd26e601a2	fix(dashboard): use lightweight ping endpoint for MaintenanceBanner (fixes #3040) (#3043) ... Integrated into release/v3.8.8. Applied review fixes: moved the SELECT 1 into a pingDb() db helper (no raw SQL in route, Hard Rule #5) + the 503 catch no longer leaks err.message (Hard Rule #12). Thanks @herjarsa!	2026-06-01 14:30:17 -03:00