9router/open-sse/handlers
zmf 8a527fec91 fix(security): SSRF guard on search baseUrl, default-password remote login, and request-details redaction
- resolveBaseUrl() rejects client-supplied non-public baseUrls via assertPublicUrl (SSRF guard on /v1/search)
- fresh-install remote login with default password returns 403 without issuing a JWT
- /api/usage/request-details redacts request/providerRequest/providerResponse/response payloads
- declare chalk and prop-types in package.json (used but previously undeclared)
2026-08-13 11:50:25 +07:00
..
chatCore fix(translator): preserve Responses Lite tools across Chat providers 2026-08-05 13:27:25 +07:00
embeddingProviders feat(providers): self-hosted OpenAI-compatible STT, TTS and embedding providers 2026-08-05 13:38:13 +07:00
fetch fix(jina-reader): recover after transient errors and use JSON POST API 2026-07-23 16:28:37 +07:00
imageProviders feat(antigravity): native image generation support 2026-06-21 17:54:32 +07:00
search fix(security): SSRF guard on search baseUrl, default-password remote login, and request-details redaction 2026-08-13 11:50:25 +07:00
ttsProviders feat(providers): self-hosted OpenAI-compatible STT, TTS and embedding providers 2026-08-05 13:38:13 +07:00
chatCore.js fix(translator): preserve Responses Lite tools across Chat providers 2026-08-05 13:27:25 +07:00
embeddingsCore.js feat(providers): self-hosted OpenAI-compatible STT, TTS and embedding providers 2026-08-05 13:38:13 +07:00
imageGenerationCore.js feat(antigravity): native image generation support 2026-06-21 17:54:32 +07:00
responsesHandler.js refactor(open-sse): translator DRY + schema enums, bug fixes, dead code cleanup 2026-06-14 18:49:38 +07:00
sttCore.js feat(providers): self-hosted OpenAI-compatible STT, TTS and embedding providers 2026-08-05 13:38:13 +07:00
ttsCore.js feat(tts): add Xiaomi MiMo text-to-speech support 2026-08-05 11:46:23 +07:00
videoCore.js feat(xai): add Grok Imagine video generation (/v1/videos) + CLI 2026-07-16 15:29:52 +07:00