Diego Rodrigues de Sa e Souza aa0ac7da87 docs(security): document full LOCAL_ONLY route set + GHSA-fhh6-4qxv-rpqj + audit path (#5599) (#5748) ...

Expand ROUTE_GUARD_TIERS.md Tier 1 (LOCAL_ONLY):
- link the GHSA advisory and explain the attack class (RCE via a subprocess spawn
  reachable from non-loopback traffic)
- replace the 3-example prefix table with the full LOCAL_ONLY set, mirroring
  LOCAL_ONLY_API_PREFIXES / LOCAL_ONLY_API_PATTERNS in routeGuard.ts (the
  authoritative source; check-route-guard-membership enforces the code side)
- add an "Operator guidance & auditing" section for users behind
  nginx/Cloudflare/Tailscale: don't forge X-Forwarded-For loopback, keep the
  manage-scope bypass minimal, and how to audit non-loopback access

Docs-only; SECURITY.md already links here.

Closes #5599

2026-07-01 01:09:20 -03:00

..

a2a

Release v3.8.42 (#5459)

2026-06-30 06:54:29 -03:00

accessTokens

Release v3.8.29 (#4126)

2026-06-19 06:49:01 -03:00

acp

Release v3.8.40

2026-06-29 08:40:06 -03:00

agentSkills

Release v3.8.42 (#5459)

2026-06-30 06:54:29 -03:00

api

Fix HuggingChat web session routing (#5592) (#5592)

2026-06-30 11:00:09 -03:00

audit

Release v3.8.42 (#5459)

2026-06-30 06:54:29 -03:00

auth

fix(security): v3.8.15 hardening follow-ups (Seg2/Seg3/Seg4/Bug3) (#5512)

2026-06-30 10:50:36 -03:00

batches

Release v3.8.42 (#5459)

2026-06-30 06:54:29 -03:00

build-profile

Release v3.8.41 (#5327)

2026-06-29 16:51:03 -03:00

catalog

fix(providers): improve refresh validation and model catalog UI (#3261)

2026-06-06 00:26:40 -03:00

cli-helper

docs(security): document full LOCAL_ONLY route set + GHSA-fhh6-4qxv-rpqj + audit path (#5599) (#5748)

2026-07-01 01:09:20 -03:00

cliTools

feat(cli-tools): add /api/cli-tools/all-statuses batch endpoint + mtime cache + DRY checkToolConfigStatus (plan 14 F2)

2026-05-27 21:43:44 -03:00

cloudAgent

Release v3.8.42 (#5459)

2026-06-30 06:54:29 -03:00

combos

Release v3.8.42 (#5459)

2026-06-30 06:54:29 -03:00

compliance

Release v3.8.30 (#4267)

2026-06-20 07:09:43 -03:00

compression

Release v3.8.38 (#5078)

2026-06-27 09:07:12 -03:00

config

Release v3.8.41 (#5327)

2026-06-29 16:51:03 -03:00

copilot

Release v3.8.42 (#5459)

2026-06-30 06:54:29 -03:00

credentialHealth

Release v3.8.3 (#2617)

2026-05-24 18:05:58 -03:00

db

feat(memory): T10/TV6 — opt-in typed memory decay (#5723)

2026-06-30 19:36:17 -03:00

discovery

Release v3.8.7 (#2919)

2026-05-29 19:54:00 -03:00

display

Release v3.8.36 (#4854)

2026-06-25 13:17:40 -03:00

embeddings

Release v3.8.37 (#5053)

2026-06-26 02:51:06 -03:00

env

fix(providers): refresh web client user agents (#1699)

2026-04-28 02:41:19 -03:00

evals

refactor(evals): extract built-in golden-set suites from evalRunner.ts (#5740)

2026-06-30 23:36:49 -03:00

events

Release v3.8.41 (#5327)

2026-06-29 16:51:03 -03:00

freeProxyProviders

fix: free proxy pool silent sync failure — iplocate txt + per-source isolation + surface errors (#5595) (#5686)

2026-06-30 13:46:46 -03:00

gamification

Release v3.8.42 (#5459)

2026-06-30 06:54:29 -03:00

guardrails

Release v3.8.30 (#4267)

2026-06-20 07:09:43 -03:00

headroom

Release v3.8.42 (#5459)

2026-06-30 06:54:29 -03:00

images

Release v3.8.20 (#3547)

2026-06-10 13:49:08 -03:00

inspector

Release v3.8.29 (#4126)

2026-06-19 06:49:01 -03:00

jobs

fix(postinstall): extend native module repair to cover wreq-js for pnpm global installs (#1634)

2026-04-26 20:15:47 -03:00

memory

refactor(memory): extract pure scoring/conversion helpers from retrieval.ts (#5733)

2026-06-30 20:33:38 -03:00

middleware

fix(authz): close 2nd Host-spoof path (cliTokenAuth) + IPv6 loopback + Docker stamp

2026-05-31 01:15:27 -03:00

modelsDevSync

refactor(models): extract pure transform layer from modelsDevSync.ts (#5743)

2026-06-30 23:36:52 -03:00

monitoring

Release v3.8.28 (#4053)

2026-06-17 19:26:32 -03:00

notion

Release v3.8.42 (#5459)

2026-06-30 06:54:29 -03:00

oauth

Release v3.8.42 (#5459)

2026-06-30 06:54:29 -03:00

obsidian

feat(observability): add Obsidian context source with 24 MCP tools (#3077)

2026-06-03 06:45:04 -03:00

playground

refactor(playground): expand endpoint contract to 13 endpoints (D4-rev2)

2026-05-28 17:19:48 -03:00

plugins

Release v3.8.31 (#4377)

2026-06-20 14:55:24 -03:00

promptCache

Release v3.8.42 (#5459)

2026-06-30 06:54:29 -03:00

providerModels

Release v3.8.30 (#4267)

2026-06-20 07:09:43 -03:00

providers

fix: static model catalog for jules/linkup/ollama/searchapi search providers (#5569, #5571, #5573, #5575) (#5672)

2026-06-30 12:55:12 -03:00

proxyRelay

Release v3.8.36 (#4854)

2026-06-25 13:17:40 -03:00

quota

Release v3.8.41 (#5327)

2026-06-29 16:51:03 -03:00

resilience

refactor(resilience): split settings.ts into types + normalize leaves (#5745)

2026-06-30 23:36:55 -03:00

runtime

feat: enhance port configuration and API bridge support

2026-02-26 15:11:40 +00:00

search

feat(runtime): add hot-reloadable guardrails and model diagnostics

2026-04-17 11:56:52 -03:00

security

Release v3.8.31 (#4377)

2026-06-20 14:55:24 -03:00

services

Release v3.8.42 (#5459)

2026-06-30 06:54:29 -03:00

skills

Release v3.8.42 (#5459)

2026-06-30 06:54:29 -03:00

spend

feat(core): add payload rules, tag routing, and scheduled budgets

2026-04-17 09:00:32 -03:00

sync

Release v3.8.4 (#2678)

2026-05-26 23:51:47 -03:00

system

fix(security): v3.8.15 hardening follow-ups (Seg2/Seg3/Seg4/Bug3) (#5512)

2026-06-30 10:50:36 -03:00

translator

feat(dashboard): add custom CLI builder and eval suite management

2026-04-23 16:57:43 -03:00

usage

refactor(usage): extract pure quota-normalize helpers from providerLimits.ts (#5730)

2026-06-30 20:33:35 -03:00

versionManager

fix: use PowerShell Expand-Archive on Windows for embedded-service install (#5590) (#5678)

2026-06-30 13:19:59 -03:00

vscode

fix(security): v3.8.15 hardening follow-ups (Seg2/Seg3/Seg4/Bug3) (#5512)

2026-06-30 10:50:36 -03:00

webhooks

Release v3.8.41 (#5327)

2026-06-29 16:51:03 -03:00

ws

chore(release): v3.6.6 — Stabilization (#1241)

2026-04-16 05:26:17 -03:00

zed-oauth

Release v3.8.6 (#2804)

2026-05-29 12:44:29 -03:00

apiBridgeServer.ts

feat: update API bridge proxy timeout to 600000ms and enhance related tests

2026-05-09 12:42:59 +00:00

apiKeyExposure.ts

Release v3.8.27 (#3968)

2026-06-17 02:43:21 -03:00

arenaEloSync.ts

Release v3.8.42 (#5459)

2026-06-30 06:54:29 -03:00

benchmarks.ts

feat: complete memory and skills implementation for antigravity

2026-04-01 08:42:03 -03:00

cacheControlSettings.ts

feat: add cache control settings and token-based metrics

2026-03-29 14:37:55 +02:00

cacheLayer.ts

fix(build): remove node: protocol prefix from all src/ imports (#turbopack-compat)

2026-03-17 04:24:46 -03:00

cloudflaredTunnel.ts

Release v3.8.40

2026-06-29 08:40:06 -03:00

cloudSync.stub.ts

Release v3.8.6 (#2804)

2026-05-29 12:44:29 -03:00

cloudSync.ts

Release v3.8.6 (#2804)

2026-05-29 12:44:29 -03:00

consoleInterceptor.ts

Release v3.8.4 (#2678)

2026-05-26 23:51:47 -03:00

container.ts

feat: add error pages, harden DB layer and compliance module

2026-03-04 19:35:38 -03:00

contextWindowResolver.ts

feat(db): models/5004 — self-correcting model context-window overrides (#5667)

2026-06-30 14:56:09 -03:00

dataPaths.ts

Release v3.8.37 (#5053)

2026-06-26 02:51:06 -03:00

docsI18nPath.ts

Release v3.8.40

2026-06-29 08:40:06 -03:00

docsSanitizer.ts

Release v3.8.40

2026-06-29 08:40:06 -03:00

freeProviderRankings.ts

feat: free provider rankings page by Arena AI ELO scores (#3799)

2026-06-13 18:50:54 -03:00

gracefulShutdown.ts

fix(logs): add periodic runtime log rotation check (#1504)

2026-04-22 12:25:53 -03:00

idempotencyLayer.ts

feat(cache): implement dynamic cache components with TDD

2026-04-01 08:45:39 +07:00

initCloudSync.ts

feat(auth): enforce dashboard sessions for management routes

2026-04-17 16:45:27 -03:00

ipUtils.ts

Release v3.8.37 (#5053)

2026-06-26 02:51:06 -03:00

localDb.ts

Release v3.8.38 (#5078)

2026-06-27 09:07:12 -03:00

localHealthCheck.ts

feat(auth): enforce dashboard sessions for management routes

2026-04-17 16:45:27 -03:00

logEnv.ts

Release v3.8.30 (#4267)

2026-06-20 07:09:43 -03:00

logPayloads.ts

chore: fix CodeQL alerts and missing docker postinstall

2026-04-18 11:44:20 -03:00

logRotation.ts

feat(providers): add AWS Polly and Lemonade provider support

2026-04-24 13:20:59 -03:00

machineToken.ts

Release v3.8.4 (#2678)

2026-05-26 23:51:47 -03:00

modelAliasSeed.ts

Release v3.8.41 (#5327)

2026-06-29 16:51:03 -03:00

modelCapabilities.ts

feat(db): models/5004 — self-correcting model context-window overrides (#5667)

2026-06-30 14:56:09 -03:00

modelMetadataRegistry.ts

Release v3.8.33 (#4515)

2026-06-22 03:17:02 -03:00

modelsDevSync.ts

refactor(models): extract pure transform layer from modelsDevSync.ts (#5743)

2026-06-30 23:36:52 -03:00

ngrokTunnel.ts

Release v3.7.5 (#1753)

2026-04-30 01:27:03 -03:00

obsidianSync.ts

feat(observability): add Obsidian context source with 24 MCP tools (#3077)

2026-06-03 06:45:04 -03:00

oneproxyRotator.ts

feat: integrate 1proxy free proxy marketplace (closes #1788) (#1847)

2026-05-01 08:36:07 -03:00

oneproxySync.ts

feat: integrate 1proxy free proxy marketplace (closes #1788) (#1847)

2026-05-01 08:36:07 -03:00

piiSanitizer.ts

fix(pii): preserve custom event names and apply stream PII sanitization fixes (#3056)

2026-06-01 23:13:19 -03:00

pricingSync.ts

Release v3.8.40

2026-06-29 08:40:06 -03:00

proxyEgress.ts

Release v3.8.23

2026-06-12 23:49:22 -03:00

proxyHealth.ts

Release v3.8.40

2026-06-29 08:40:06 -03:00

proxyLogger.ts

Release v3.8.41 (#5327)

2026-06-29 16:51:03 -03:00

semanticCache.ts

Release v3.8.41 (#5327)

2026-06-29 16:51:03 -03:00

settingsCache.ts

feat: OmniRoute v1.0.0 — Intelligent AI Gateway & Universal LLM Proxy

2026-02-18 00:02:15 -03:00

source.ts

Release v3.8.3 (#2617)

2026-05-24 18:05:58 -03:00

sseTextTransform.ts

Release v3.8.24 (#3747)

2026-06-13 17:27:40 -03:00

streamingPiiTransform.ts

Release v3.8.24 (#3747)

2026-06-13 17:27:40 -03:00

tailscaleTunnel.ts

Release v3.8.31 (#4377)

2026-06-20 14:55:24 -03:00

tokenHealthCheck.ts

Release v3.8.41 (#5327)

2026-06-29 16:51:03 -03:00

toolPolicy.ts

feat(phase2+3): DI container, plugins, PII sanitizer, tool policy, audit log, cache invalidation, ARIA, CSS vars

2026-02-18 14:43:57 -03:00

translatorEvents.ts

feat: OmniRoute v1.0.0 — Intelligent AI Gateway & Universal LLM Proxy

2026-02-18 00:02:15 -03:00

usageAnalytics.ts

feat(analytics): show $0 cost for flat-rate subscription/cookie providers (#5552) (#5704)

2026-06-30 15:09:21 -03:00

usageDb.ts

Release v3.8.18 (#3482)

2026-06-09 15:56:24 -03:00

webhookDispatcher.ts

Release v3.8.28 (#4053)

2026-06-17 19:26:32 -03:00