Paco Cartones dff3f8b424 fix(api): return public-safe errors from the tunnel and MITM routes (#11872) ...

Closes a real Hard Rule #12 violation — 14 catch blocks across the tunnel/MITM routes echoed a raw err.message, which for Tailscale could leak a live tskey-* credential and always disclosed host layout / OS account name. Routes all 14 sites through a new toPublicSafeTunnelError() classifier, verified by a dedicated regression suite (14/14 passing) asserting no route echoes a raw error.message. Thanks for the security fix!

2026-08-28 11:13:19 -03:00

..

_helpers

…

_setup

…

benchmarks

…

boundary

…

e2e

fix: make release/v3.8.50 CI gates green (run 32786966560 root causes) (#11450)

2026-08-25 18:55:18 -03:00

fixtures

fix(responses-continuation): recover a real id/output for passthrough and translate-mode replies (#11434)

2026-08-24 19:57:12 -03:00

golden-set

…

helpers

…

homolog

…

integration

chore(providers): retire Felo Web on provenance hold (#11698)

2026-08-28 05:03:51 -03:00

live

…

llm-security

…

load

…

manual

…

security

…

snapshots

fix(providers): retire common ChatGPT Web provider (#11754)

2026-08-28 06:52:46 -03:00

translator

…

unit

fix(api): return public-safe errors from the tunnel and MITM routes (#11872)

2026-08-28 11:13:19 -03:00

_cp_mock_hook.mts

…

_cp_mock_module.mts

…

_run_dns_guard_test.sh

…

e2e-tool-calls.sh

…

theoldllm-stress.test.ts

…