Tam Nhu Tran a4c5bb7421 fix(security): harden API endpoints and resolve PR #674 review findings ...

- Fix X-Forwarded-For header spoofing in requireSensitiveLocalAccess (use socket-level address only)
- Add model ID length validation (max 256 chars) in PUT /models/:provider
- Add provider name validation (alphanumeric, max 64 chars) to prevent path traversal
- Add stale entry eviction for unbounded quotaRateLimits Map (>1000 entries)
- Fix concurrent refresh race in usage aggregator (wait for in-flight before forced refresh)
- Sanitize internal URLs/paths from OAuth failure diagnostics
- Add ValidationError class for denylist violations (distinct from system errors)
- Make CLIProxy sync interval configurable via CCS_CLIPROXY_SYNC_INTERVAL env var
- Improve legacy continuity config error logging (unconditional warn)
- Add CACHE_VERSION history comments

2026-03-04 01:30:46 +07:00

..

cleanup-registry.ts

refactor(errors): centralize error handling infrastructure

2025-12-19 11:47:43 -05:00

error-handler.ts

refactor(errors): centralize error handling infrastructure

2025-12-19 11:47:43 -05:00

error-types.ts

fix(security): harden API endpoints and resolve PR #674 review findings

2026-03-04 01:30:46 +07:00

exit-codes.ts

refactor(errors): centralize error handling infrastructure

2025-12-19 11:47:43 -05:00

index.ts

refactor(errors): centralize error handling infrastructure

2025-12-19 11:47:43 -05:00