dayuan.jiang 528b6e54c8 fix(api): require access codes and limit sizes on helper routes ...

- Shared checkAccessCode for validate-diagram, validate-model, parse-url, verify-access-code
- parse-url: 5 MB streamed body limit; validate-diagram: 5 MB image limit
- validate-model refuses redirects when private URLs are blocked
- Admin settings state shared across module instances via globalThis
- Server model ids: unique slugs (non-ASCII names encoded), duplicates rejected
- Panel Bedrock credentials stored as ADMIN_AWS_* so the DynamoDB client keeps its own
- Locale redirect keeps basePath and query; EdgeOne function drops open CORS and checks the access code
- Providers payload reports whether .env sets a default model

2026-10-03 17:45:41 +09:00

..

admin

fix(api): require access codes and limit sizes on helper routes

2026-10-03 17:45:41 +09:00

i18n

fix: raise the output budget so reasoning models reach the tool call (#927)

2026-08-22 20:47:10 +09:00

types

Add Atlas Cloud provider support (#896)

2026-07-30 23:27:18 +09:00

access-code.ts

fix(chat): close credential leaks and harden the chat route

2026-10-03 17:45:41 +09:00

ai-providers.ts

fix(chat): close credential leaks and harden the chat route

2026-10-03 17:45:41 +09:00

aihubmix-models.ts

feat: add AIHubMix provider (#865)

2026-06-15 13:54:18 +09:00

base-path.ts

Support subdirectory deployment and fix API path handling (#311)

2025-12-22 23:28:55 +09:00

cached-responses.ts

refactor: simplify LLM XML format to output bare mxCells only (#254)

2025-12-14 14:04:44 +09:00

chat-helpers.ts

fix(chat): close credential leaks and harden the chat route

2026-10-03 17:45:41 +09:00

diagram-validator.ts

Add VLM-based diagram validation (#602)

2026-01-20 20:52:04 +09:00

drawio-themes.ts

feat: add all Draw.io themes to settings panel (#835)

2026-05-15 23:14:20 +09:00

dynamo-quota-manager.ts

feat: migrate DynamoDB quota to composite key schema (#426)

2025-12-27 10:24:43 +09:00

langfuse.ts

fix(chat): close credential leaks and harden the chat route

2026-10-03 17:45:41 +09:00

output-token-limit.ts

fix(chat): close credential leaks and harden the chat route

2026-10-03 17:45:41 +09:00

pdf-utils.ts

feat: make PDF/text extraction char limit configurable via env (#214)

2025-12-11 14:14:31 +09:00

server-model-config.ts

fix(api): require access codes and limit sizes on helper routes

2026-10-03 17:45:41 +09:00

session-storage.ts

chore: remove dead code from previous #815 fix attempts (#841)

2026-05-21 08:37:14 +09:00

ssrf-protection.ts

fix: SSRF in /api/parse-url via DNS bypass and redirects (#878)

2026-06-28 12:41:29 +09:00

storage.ts

fix: raise the output budget so reasoning models reach the tool call (#927)

2026-08-22 20:47:10 +09:00

system-prompts.ts

fix(chat): close credential leaks and harden the chat route

2026-10-03 17:45:41 +09:00

template-storage.ts

chore: remove dead code from previous #815 fix attempts (#841)

2026-05-21 08:37:14 +09:00

url-utils.ts

Uses dynamic API endpoint for URL parsing

2026-01-30 00:02:26 +09:00

use-file-processor.tsx

refactor: eliminate code duplication (DRY principle) (#211)

2025-12-11 14:28:02 +09:00

use-quota-manager.tsx

feat: improve quota toast with ByteDance Doubao sponsorship info and model config button (#447)

2025-12-29 12:12:22 +09:00

user-id.ts

fix: use full IP for userId to prevent quota collision (#400)

2025-12-25 12:20:46 +09:00

utils.ts

chore: remove dead code and consolidate duplicate types (#555)

2026-01-10 14:06:17 +09:00

validation-prompts.ts

Add VLM-based diagram validation (#602)

2026-01-20 20:52:04 +09:00

validation-schema.ts

Add VLM-based diagram validation (#602)

2026-01-20 20:52:04 +09:00