Kayvan Sylvan f37c71f9f7 fix: secure storage paths and authenticate REST and Ollama servers ... - Reject unsafe cross-platform storage names and traversal attempts. - Confine symlink targets within configured filesystem storage directories. - Require API keys for every non-loopback server binding. - Authenticate Ollama routes and securely forward configured credentials. - Validate chat pattern, context, and session names early. - Sanitize client errors to hide internal filesystem details. - Default REST server binding to loopback port 8080. - Add regression coverage for traversal, symlinks, and authentication.		2026-09-02 15:59:59 -07:00
..
contexts.go	refactor: restructure project to align with standard Go layout	2025-07-08 22:47:17 -07:00
contexts_test.go	refactor: restructure project to align with standard Go layout	2025-07-08 22:47:17 -07:00
db.go	fix: persist refreshed Codex tokens and reactivate configured vendors	2026-08-27 18:12:08 -07:00
db_test.go	fix: persist refreshed Codex tokens and reactivate configured vendors	2026-08-27 18:12:08 -07:00
env_lock_unix.go	fix: persist refreshed Codex tokens and reactivate configured vendors	2026-08-27 18:12:08 -07:00
env_lock_windows.go	fix: persist refreshed Codex tokens and reactivate configured vendors	2026-08-27 18:12:08 -07:00
patterns.go	fix: secure storage paths and authenticate REST and Ollama servers	2026-09-02 15:59:59 -07:00
patterns_test.go	fix: secure storage paths and authenticate REST and Ollama servers	2026-09-02 15:59:59 -07:00
sessions.go	fix: secure storage paths and authenticate REST and Ollama servers	2026-09-02 15:59:59 -07:00
sessions_test.go	fix: secure storage paths and authenticate REST and Ollama servers	2026-09-02 15:59:59 -07:00
storage.go	fix: secure storage paths and authenticate REST and Ollama servers	2026-09-02 15:59:59 -07:00
storage_test.go	fix: secure storage paths and authenticate REST and Ollama servers	2026-09-02 15:59:59 -07:00