main

文件	最后提交记录	最后更新时间
docs	chore: update model references to latest versions across docs and code - Update default summarize model to `claude-sonnet-4-5` - Replace `gpt-4o` references with `gpt-5.2` throughout docs - Replace `gpt-4o-mini` references with `gpt-5-mini` - Add MiniMax-M2.5 and M2.5-lightning to static models list - Update image generation warning to suggest `gpt-5.2` - Update OpenAI chat example script to use `gpt-5-mini` - Update REST API docs and examples with current model names	8 个月前
auth.go	fix: harden servers, templates, plugins, storage, and user interfaces - Enforce host, origin, JSON, and request size checks. - Resolve template tokens once; preserve literal workflow output. - Restrict server patterns to text and datetime plugins. - Confine file access and writes; reject unsafe symlinks. - Limit network fetches to public addresses without credentials. - Protect sessions with locking, atomic writes, and private permissions. - Merge configuration updates safely and fully mask secrets. - Sanitize terminal output, notifications, and dynamic shell completions. - Add content sanitization, security policies, and Streamlit token checks. - Expand security regression coverage, documentation, and CI race testing.	14 天前
bodylimit.go	fix: harden servers, templates, plugins, storage, and user interfaces - Enforce host, origin, JSON, and request size checks. - Resolve template tokens once; preserve literal workflow output. - Restrict server patterns to text and datetime plugins. - Confine file access and writes; reject unsafe symlinks. - Limit network fetches to public addresses without credentials. - Protect sessions with locking, atomic writes, and private permissions. - Merge configuration updates safely and fully mask secrets. - Sanitize terminal output, notifications, and dynamic shell completions. - Add content sanitization, security policies, and Streamlit token checks. - Expand security regression coverage, documentation, and CI race testing.	14 天前
bodylimit_test.go	fix: harden servers, templates, plugins, storage, and user interfaces - Enforce host, origin, JSON, and request size checks. - Resolve template tokens once; preserve literal workflow output. - Restrict server patterns to text and datetime plugins. - Confine file access and writes; reject unsafe symlinks. - Limit network fetches to public addresses without credentials. - Protect sessions with locking, atomic writes, and private permissions. - Merge configuration updates safely and fully mask secrets. - Sanitize terminal output, notifications, and dynamic shell completions. - Add content sanitization, security policies, and Streamlit token checks. - Expand security regression coverage, documentation, and CI race testing.	14 天前
chat.go	fix: harden servers, templates, plugins, storage, and user interfaces - Enforce host, origin, JSON, and request size checks. - Resolve template tokens once; preserve literal workflow output. - Restrict server patterns to text and datetime plugins. - Confine file access and writes; reject unsafe symlinks. - Limit network fetches to public addresses without credentials. - Protect sessions with locking, atomic writes, and private permissions. - Merge configuration updates safely and fully mask secrets. - Sanitize terminal output, notifications, and dynamic shell completions. - Add content sanitization, security policies, and Streamlit token checks. - Expand security regression coverage, documentation, and CI race testing.	14 天前
chat_test.go	fix: harden servers, templates, plugins, storage, and user interfaces - Enforce host, origin, JSON, and request size checks. - Resolve template tokens once; preserve literal workflow output. - Restrict server patterns to text and datetime plugins. - Confine file access and writes; reject unsafe symlinks. - Limit network fetches to public addresses without credentials. - Protect sessions with locking, atomic writes, and private permissions. - Merge configuration updates safely and fully mask secrets. - Sanitize terminal output, notifications, and dynamic shell completions. - Add content sanitization, security policies, and Streamlit token checks. - Expand security regression coverage, documentation, and CI race testing.	14 天前
configuration.go	fix: harden servers, templates, plugins, storage, and user interfaces - Enforce host, origin, JSON, and request size checks. - Resolve template tokens once; preserve literal workflow output. - Restrict server patterns to text and datetime plugins. - Confine file access and writes; reject unsafe symlinks. - Limit network fetches to public addresses without credentials. - Protect sessions with locking, atomic writes, and private permissions. - Merge configuration updates safely and fully mask secrets. - Sanitize terminal output, notifications, and dynamic shell completions. - Add content sanitization, security policies, and Streamlit token checks. - Expand security regression coverage, documentation, and CI race testing.	14 天前
configuration_test.go	fix: harden servers, templates, plugins, storage, and user interfaces - Enforce host, origin, JSON, and request size checks. - Resolve template tokens once; preserve literal workflow output. - Restrict server patterns to text and datetime plugins. - Confine file access and writes; reject unsafe symlinks. - Limit network fetches to public addresses without credentials. - Protect sessions with locking, atomic writes, and private permissions. - Merge configuration updates safely and fully mask secrets. - Sanitize terminal output, notifications, and dynamic shell completions. - Add content sanitization, security policies, and Streamlit token checks. - Expand security regression coverage, documentation, and CI race testing.	14 天前
contexts.go	refactor: restructure project to align with standard Go layout ### CHANGES - Introduce `cmd` directory for all main application binaries. - Move all Go packages into the `internal` directory. - Rename the `restapi` package to `server` for clarity. - Consolidate patterns and strategies into a new `data` directory. - Group all auxiliary scripts into a new `scripts` directory. - Move all documentation and images into a `docs` directory. - Update all Go import paths to reflect the new structure. - Adjust CI/CD workflows and build commands for new layout.	1 年前
cors.go	fix: harden servers, templates, plugins, storage, and user interfaces - Enforce host, origin, JSON, and request size checks. - Resolve template tokens once; preserve literal workflow output. - Restrict server patterns to text and datetime plugins. - Confine file access and writes; reject unsafe symlinks. - Limit network fetches to public addresses without credentials. - Protect sessions with locking, atomic writes, and private permissions. - Merge configuration updates safely and fully mask secrets. - Sanitize terminal output, notifications, and dynamic shell completions. - Add content sanitization, security policies, and Streamlit token checks. - Expand security regression coverage, documentation, and CI race testing.	14 天前
cors_test.go	fix: harden servers, templates, plugins, storage, and user interfaces - Enforce host, origin, JSON, and request size checks. - Resolve template tokens once; preserve literal workflow output. - Restrict server patterns to text and datetime plugins. - Confine file access and writes; reject unsafe symlinks. - Limit network fetches to public addresses without credentials. - Protect sessions with locking, atomic writes, and private permissions. - Merge configuration updates safely and fully mask secrets. - Sanitize terminal output, notifications, and dynamic shell completions. - Add content sanitization, security policies, and Streamlit token checks. - Expand security regression coverage, documentation, and CI race testing.	14 天前
loopback_guard.go	fix: harden servers, templates, plugins, storage, and user interfaces - Enforce host, origin, JSON, and request size checks. - Resolve template tokens once; preserve literal workflow output. - Restrict server patterns to text and datetime plugins. - Confine file access and writes; reject unsafe symlinks. - Limit network fetches to public addresses without credentials. - Protect sessions with locking, atomic writes, and private permissions. - Merge configuration updates safely and fully mask secrets. - Sanitize terminal output, notifications, and dynamic shell completions. - Add content sanitization, security policies, and Streamlit token checks. - Expand security regression coverage, documentation, and CI race testing.	14 天前
loopback_guard_test.go	fix: harden servers, templates, plugins, storage, and user interfaces - Enforce host, origin, JSON, and request size checks. - Resolve template tokens once; preserve literal workflow output. - Restrict server patterns to text and datetime plugins. - Confine file access and writes; reject unsafe symlinks. - Limit network fetches to public addresses without credentials. - Protect sessions with locking, atomic writes, and private permissions. - Merge configuration updates safely and fully mask secrets. - Sanitize terminal output, notifications, and dynamic shell completions. - Add content sanitization, security policies, and Streamlit token checks. - Expand security regression coverage, documentation, and CI race testing.	14 天前
mask_test.go	fix: harden servers, templates, plugins, storage, and user interfaces - Enforce host, origin, JSON, and request size checks. - Resolve template tokens once; preserve literal workflow output. - Restrict server patterns to text and datetime plugins. - Confine file access and writes; reject unsafe symlinks. - Limit network fetches to public addresses without credentials. - Protect sessions with locking, atomic writes, and private permissions. - Merge configuration updates safely and fully mask secrets. - Sanitize terminal output, notifications, and dynamic shell completions. - Add content sanitization, security policies, and Streamlit token checks. - Expand security regression coverage, documentation, and CI race testing.	14 天前
models.go	feat: modernize web stack and harden chat error handling - Upgrade Tailwind, Skeleton, SvelteKit, Vite, and supporting dependencies. - Replace removed Skeleton components with compatible local implementations. - Report pre-stream chat failures without duplicating streamed errors. - Return empty model arrays and skip malformed vendor lists. - Prevent stream completion crashes and normalize displayed error messages. - Stack toasts correctly and add warning notification support. - Restore linting, formatting, testing, and pnpm override configuration. - Preserve custom themes through Tailwind CSS-based configuration migration.	2 个月前
models_test.go	feat: modernize web stack and harden chat error handling - Upgrade Tailwind, Skeleton, SvelteKit, Vite, and supporting dependencies. - Replace removed Skeleton components with compatible local implementations. - Report pre-stream chat failures without duplicating streamed errors. - Return empty model arrays and skip malformed vendor lists. - Prevent stream completion crashes and normalize displayed error messages. - Stack toasts correctly and add warning notification support. - Restore linting, formatting, testing, and pnpm override configuration. - Preserve custom themes through Tailwind CSS-based configuration migration.	2 个月前
ollama.go	fix: harden servers, templates, plugins, storage, and user interfaces - Enforce host, origin, JSON, and request size checks. - Resolve template tokens once; preserve literal workflow output. - Restrict server patterns to text and datetime plugins. - Confine file access and writes; reject unsafe symlinks. - Limit network fetches to public addresses without credentials. - Protect sessions with locking, atomic writes, and private permissions. - Merge configuration updates safely and fully mask secrets. - Sanitize terminal output, notifications, and dynamic shell completions. - Add content sanitization, security policies, and Streamlit token checks. - Expand security regression coverage, documentation, and CI race testing.	14 天前
ollama_test.go	fix: harden servers, templates, plugins, storage, and user interfaces - Enforce host, origin, JSON, and request size checks. - Resolve template tokens once; preserve literal workflow output. - Restrict server patterns to text and datetime plugins. - Confine file access and writes; reject unsafe symlinks. - Limit network fetches to public addresses without credentials. - Protect sessions with locking, atomic writes, and private permissions. - Merge configuration updates safely and fully mask secrets. - Sanitize terminal output, notifications, and dynamic shell completions. - Add content sanitization, security policies, and Streamlit token checks. - Expand security regression coverage, documentation, and CI race testing.	14 天前
path_traversal_test.go	fix: harden servers, templates, plugins, storage, and user interfaces - Enforce host, origin, JSON, and request size checks. - Resolve template tokens once; preserve literal workflow output. - Restrict server patterns to text and datetime plugins. - Confine file access and writes; reject unsafe symlinks. - Limit network fetches to public addresses without credentials. - Protect sessions with locking, atomic writes, and private permissions. - Merge configuration updates safely and fully mask secrets. - Sanitize terminal output, notifications, and dynamic shell completions. - Add content sanitization, security policies, and Streamlit token checks. - Expand security regression coverage, documentation, and CI race testing.	14 天前
patterns.go	fix: harden servers, templates, plugins, storage, and user interfaces - Enforce host, origin, JSON, and request size checks. - Resolve template tokens once; preserve literal workflow output. - Restrict server patterns to text and datetime plugins. - Confine file access and writes; reject unsafe symlinks. - Limit network fetches to public addresses without credentials. - Protect sessions with locking, atomic writes, and private permissions. - Merge configuration updates safely and fully mask secrets. - Sanitize terminal output, notifications, and dynamic shell completions. - Add content sanitization, security policies, and Streamlit token checks. - Expand security regression coverage, documentation, and CI race testing.	14 天前
serve.go	fix: harden servers, templates, plugins, storage, and user interfaces - Enforce host, origin, JSON, and request size checks. - Resolve template tokens once; preserve literal workflow output. - Restrict server patterns to text and datetime plugins. - Confine file access and writes; reject unsafe symlinks. - Limit network fetches to public addresses without credentials. - Protect sessions with locking, atomic writes, and private permissions. - Merge configuration updates safely and fully mask secrets. - Sanitize terminal output, notifications, and dynamic shell completions. - Add content sanitization, security policies, and Streamlit token checks. - Expand security regression coverage, documentation, and CI race testing.	14 天前
serve_test.go	fix: harden servers, templates, plugins, storage, and user interfaces - Enforce host, origin, JSON, and request size checks. - Resolve template tokens once; preserve literal workflow output. - Restrict server patterns to text and datetime plugins. - Confine file access and writes; reject unsafe symlinks. - Limit network fetches to public addresses without credentials. - Protect sessions with locking, atomic writes, and private permissions. - Merge configuration updates safely and fully mask secrets. - Sanitize terminal output, notifications, and dynamic shell completions. - Add content sanitization, security policies, and Streamlit token checks. - Expand security regression coverage, documentation, and CI race testing.	14 天前
sessions.go	refactor: restructure project to align with standard Go layout ### CHANGES - Introduce `cmd` directory for all main application binaries. - Move all Go packages into the `internal` directory. - Rename the `restapi` package to `server` for clarity. - Consolidate patterns and strategies into a new `data` directory. - Group all auxiliary scripts into a new `scripts` directory. - Move all documentation and images into a `docs` directory. - Update all Go import paths to reflect the new structure. - Adjust CI/CD workflows and build commands for new layout.	1 年前
storage.go	chore: clarify comments and remove obsolete code examples across backend and web - Remove redundant comments across Go sources and Svelte components. - Clarify documentation for provider authentication, streaming, and model discovery. - Explain cache behavior, configuration precedence, and locale fallback rules. - Document security safeguards, implementation limitations, and existing test boundaries. - Remove obsolete commented code without changing runtime behavior. - Refresh documentation references and clarify tool dependency requirements.	21 天前
strategies.go	refactor: restructure project to align with standard Go layout ### CHANGES - Introduce `cmd` directory for all main application binaries. - Move all Go packages into the `internal` directory. - Rename the `restapi` package to `server` for clarity. - Consolidate patterns and strategies into a new `data` directory. - Group all auxiliary scripts into a new `scripts` directory. - Move all documentation and images into a `docs` directory. - Update all Go import paths to reflect the new structure. - Adjust CI/CD workflows and build commands for new layout.	1 年前
youtube.go	fix: harden servers, templates, plugins, storage, and user interfaces - Enforce host, origin, JSON, and request size checks. - Resolve template tokens once; preserve literal workflow output. - Restrict server patterns to text and datetime plugins. - Confine file access and writes; reject unsafe symlinks. - Limit network fetches to public addresses without credentials. - Protect sessions with locking, atomic writes, and private permissions. - Merge configuration updates safely and fully mask secrets. - Sanitize terminal output, notifications, and dynamic shell completions. - Add content sanitization, security policies, and Streamlit token checks. - Expand security regression coverage, documentation, and CI race testing.	14 天前
youtube_test.go	fix: harden servers, templates, plugins, storage, and user interfaces - Enforce host, origin, JSON, and request size checks. - Resolve template tokens once; preserve literal workflow output. - Restrict server patterns to text and datetime plugins. - Confine file access and writes; reject unsafe symlinks. - Limit network fetches to public addresses without credentials. - Protect sessions with locking, atomic writes, and private permissions. - Merge configuration updates safely and fully mask secrets. - Sanitize terminal output, notifications, and dynamic shell completions. - Add content sanitization, security policies, and Streamlit token checks. - Expand security regression coverage, documentation, and CI race testing.	14 天前