dayuan.jiang 528b6e54c8 fix(api): require access codes and limit sizes on helper routes ...

- Shared checkAccessCode for validate-diagram, validate-model, parse-url, verify-access-code
- parse-url: 5 MB streamed body limit; validate-diagram: 5 MB image limit
- validate-model refuses redirects when private URLs are blocked
- Admin settings state shared across module instances via globalThis
- Server model ids: unique slugs (non-ASCII names encoded), duplicates rejected
- Panel Bedrock credentials stored as ADMIN_AWS_* so the DynamoDB client keeps its own
- Locale redirect keeps basePath and query; EdgeOne function drops open CORS and checks the access code
- Providers payload reports whether .env sets a default model

2026-10-03 17:45:41 +09:00

..

completions.ts

fix(api): require access codes and limit sizes on helper routes

2026-10-03 17:45:41 +09:00