Diego Rodrigues de Sa e Souza aa0ac7da87 docs(security): document full LOCAL_ONLY route set + GHSA-fhh6-4qxv-rpqj + audit path (#5599) (#5748) ...

Expand ROUTE_GUARD_TIERS.md Tier 1 (LOCAL_ONLY):
- link the GHSA advisory and explain the attack class (RCE via a subprocess spawn
  reachable from non-loopback traffic)
- replace the 3-example prefix table with the full LOCAL_ONLY set, mirroring
  LOCAL_ONLY_API_PREFIXES / LOCAL_ONLY_API_PATTERNS in routeGuard.ts (the
  authoritative source; check-route-guard-membership enforces the code side)
- add an "Operator guidance & auditing" section for users behind
  nginx/Cloudflare/Tailscale: don't forge X-Forwarded-For loopback, keep the
  manage-scope bypass minimal, and how to audit non-loopback access

Docs-only; SECURITY.md already links here.

Closes #5599

2026-07-01 01:09:20 -03:00

..

adapta-web.ts

Release v3.8.40

2026-06-29 08:40:06 -03:00

antigravity.ts

Release v3.8.40

2026-06-29 08:40:06 -03:00

antigravityUpstreamError.ts

fix(antigravity): alias agy gemini-3.1-pro -high/-low + stop masking upstream 4xx (#3229) (#3245)

2026-06-05 14:20:05 -03:00

azure-openai.ts

Release v3.8.38 (#5078)

2026-06-27 09:07:12 -03:00

base.ts

fix(executor): route OpenAI-compatible MCP Responses requests to /responses (#5483)

2026-06-30 14:47:35 -03:00

bedrock.ts

Release v3.8.27 (#3968)

2026-06-17 02:43:21 -03:00

blackbox-web.ts

Release v3.8.40

2026-06-29 08:40:06 -03:00

chatgpt-web.ts

fix(chatgpt-web): restore dot-form Pro model ids (#5549)

2026-06-30 10:41:04 -03:00

chatgptWebErrors.ts

Release v3.8.28 (#4053)

2026-06-17 19:26:32 -03:00

chatgptWebTools.ts

Release v3.8.41 (#5327)

2026-06-29 16:51:03 -03:00

chipotle.ts

Release v3.8.40

2026-06-29 08:40:06 -03:00

claude-web-with-auto-refresh.ts

feat(claude-web): implement session-based executor with auto-refresh (#2283)

2026-05-15 12:51:07 -03:00

claude-web.ts

Release v3.8.40

2026-06-29 08:40:06 -03:00

claudeIdentity.ts

Release v3.8.40

2026-06-29 08:40:06 -03:00

cliproxyapi.ts

fix(claude): apply tool cloak + schema sanitize on the CLIProxyAPI executor path

2026-05-30 13:59:36 +00:00

cloudflare-ai.ts

Release v3.8.2 (#2503)

2026-05-23 01:46:59 -03:00

codebuddy-cn.ts

Release v3.8.38 (#5078)

2026-06-27 09:07:12 -03:00

codex.ts

Release v3.8.40

2026-06-29 08:40:06 -03:00

commandCode.ts

feat(commandCode): add multimodal image support for CC vision models (#5557)

2026-06-30 10:41:11 -03:00

copilot-m365-connection.ts

fix(providers): validate M365 Copilot web credentials (#5432)

2026-06-30 10:41:17 -03:00

copilot-m365-frames.ts

Release v3.8.40

2026-06-29 08:40:06 -03:00

copilot-m365-web.ts

Release v3.8.40

2026-06-29 08:40:06 -03:00

copilot-web.ts

Release v3.8.40

2026-06-29 08:40:06 -03:00

cursor.ts

Release v3.8.38 (#5078)

2026-06-27 09:07:12 -03:00

deepseek-web-with-auto-refresh.ts

Release v3.8.4 (#2678)

2026-05-26 23:51:47 -03:00

deepseek-web.ts

Release v3.8.40

2026-06-29 08:40:06 -03:00

default.ts

docs(security): document full LOCAL_ONLY route set + GHSA-fhh6-4qxv-rpqj + audit path (#5599) (#5748)

2026-07-01 01:09:20 -03:00

devin-cli.ts

feat(oauth): complete Windsurf / Devin CLI OAuth + API-token flows (#2168)

2026-05-11 21:49:32 -03:00

doubao-web.ts

Release v3.8.40

2026-06-29 08:40:06 -03:00

duckduckgo-web.ts

Release v3.8.40

2026-06-29 08:40:06 -03:00

firecrawl-fetch.ts

Release v3.8.34 (#4614)

2026-06-23 03:08:29 -03:00

forceResponsesUpstream.ts

fix(executor): route OpenAI-compatible MCP Responses requests to /responses (#5483)

2026-06-30 14:47:35 -03:00

gemini-business.ts

Release v3.8.40

2026-06-29 08:40:06 -03:00

gemini-web.ts

Release v3.8.40

2026-06-29 08:40:06 -03:00

github.ts

Release v3.8.36 (#4854)

2026-06-25 13:17:40 -03:00

gitlab.ts

feat(providers): add GitLab Duo, NLP Cloud, and enterprise gateways

2026-04-24 07:00:21 -03:00

glm.ts

Release v3.8.29 (#4126)

2026-06-19 06:49:01 -03:00

grok-cli.ts

Release v3.8.40

2026-06-29 08:40:06 -03:00

grok-web.ts

Release v3.8.40

2026-06-29 08:40:06 -03:00

huggingchat.ts

Fix HuggingChat web session routing (#5592) (#5592)

2026-06-30 11:00:09 -03:00

index.ts

Release v3.8.42 (#5459)

2026-06-30 06:54:29 -03:00

inner-ai.ts

Release v3.8.40

2026-06-29 08:40:06 -03:00

jina-reader-fetch.ts

Release v3.8.3 (#2617)

2026-05-24 18:05:58 -03:00

kie.ts

fix: address kie provider review feedback

2026-05-07 00:01:54 +07:00

kimi-web.ts

Release v3.8.40

2026-06-29 08:40:06 -03:00

kimi.ts

fix(sse): refine kimi thinking handling and add unit tests (#3191)

2026-06-05 11:48:03 -03:00

kiro.ts

Release v3.8.38 (#5078)

2026-06-27 09:07:12 -03:00

kiroThinking.ts

Release v3.8.38 (#5078)

2026-06-27 09:07:12 -03:00

lmarena.ts

Release v3.8.40

2026-06-29 08:40:06 -03:00

mimocode.ts

Release v3.8.42 (#5459)

2026-06-30 06:54:29 -03:00

muse-spark-web.ts

Release v3.8.42 (#5459)

2026-06-30 06:54:29 -03:00

ninerouter.ts

Release v3.8.4 (#2678)

2026-05-26 23:51:47 -03:00

nlpcloud.ts

feat(providers): add GitLab Duo, NLP Cloud, and enterprise gateways

2026-04-24 07:00:21 -03:00

opencode.ts

Release v3.8.41 (#5327)

2026-06-29 16:51:03 -03:00

perplexity-web.ts

Release v3.8.40

2026-06-29 08:40:06 -03:00

poe-web.ts

Release v3.8.40

2026-06-29 08:40:06 -03:00

pollinations.ts

Release v3.8.36 (#4854)

2026-06-25 13:17:40 -03:00

puter.ts

feat(providers): adicionar provedor Puter AI com 500+ modelos

2026-03-22 20:29:06 -03:00

qoder.ts

Release v3.8.37 (#5053)

2026-06-26 02:51:06 -03:00

qwen-web.ts

Release v3.8.40

2026-06-29 08:40:06 -03:00

t3-chat-web.ts

Release v3.8.40

2026-06-29 08:40:06 -03:00

tavily-fetch.ts

Release v3.8.3 (#2617)

2026-05-24 18:05:58 -03:00

theoldllm.ts

Release v3.8.40

2026-06-29 08:40:06 -03:00

trae.ts

Release v3.8.40

2026-06-29 08:40:06 -03:00

v0-vercel-web.ts

Release v3.8.40

2026-06-29 08:40:06 -03:00

venice-web.ts

Release v3.8.40

2026-06-29 08:40:06 -03:00

veoaifree-web.ts

Release v3.8.40

2026-06-29 08:40:06 -03:00

vertex.ts

Release v3.8.26 (#3875)

2026-06-16 01:00:40 -03:00

vertexMedia.ts

Release v3.8.26 (#3875)

2026-06-16 01:00:40 -03:00

windsurf.ts

Release v3.8.4 (#2678)

2026-05-26 23:51:47 -03:00

zenmux-free.ts

Release v3.8.38 (#5078)

2026-06-27 09:07:12 -03:00