Kayvan Sylvan f37c71f9f7 fix: secure storage paths and authenticate REST and Ollama servers ... - Reject unsafe cross-platform storage names and traversal attempts. - Confine symlink targets within configured filesystem storage directories. - Require API keys for every non-loopback server binding. - Authenticate Ollama routes and securely forward configured credentials. - Validate chat pattern, context, and session names early. - Sanitize client errors to hide internal filesystem details. - Default REST server binding to loopback port 8080. - Add regression coverage for traversal, symlinks, and authentication.		2026-09-02 15:59:59 -07:00
..
chat	feat: replace hardcoded error strings with i18n translation keys	2026-02-21 13:28:52 -08:00
cli	fix: secure storage paths and authenticate REST and Ollama servers	2026-09-02 15:59:59 -07:00
core	fix: persist refreshed Codex tokens and reactivate configured vendors	2026-08-27 18:12:08 -07:00
domain	refactor: replace fmt.Errorf("%s", ...) with errors.New() and normalize i18n strings	2026-02-21 15:48:01 -08:00
i18n	fix: secure storage paths and authenticate REST and Ollama servers	2026-09-02 15:59:59 -07:00
log	feat: add wire debug level (4) for full LLM request/response debug logging	2026-02-21 19:48:38 -08:00
plugins	fix: secure storage paths and authenticate REST and Ollama servers	2026-09-02 15:59:59 -07:00
server	fix: secure storage paths and authenticate REST and Ollama servers	2026-09-02 15:59:59 -07:00
tools	feat: internationalize YouTube visual extraction flags and error messages	2026-04-05 15:22:28 -07:00
util	feat: replace hardcoded error strings with i18n translation keys	2026-02-21 13:28:52 -08:00