Spaces:
Running
Running
Commit History
16 days ago
-
Validate Telegram path form and require long proxy secret
SilverElixirb33ab22
22 days ago
-
Proxy hardening: upstream timeout, 413 on cap, wider hop-by-hop strip, no dead fields (A10-1, A10-3..A10-8, A10-10)
SilverElixir6d075c6
24 days ago
-
Comment cleanup: short Russian why-comments, no AI boilerplate
SilverElixirOnly comments and docstrings changed in all 27 files; code verified identical via AST comparison (comments/docstrings normalized). - Removed the repeated P2-audit/extraction-history boilerplate from every module docstring; kept one line saying what the module does. - Trimmed verbose paraphrasing comments to 2-3 lines of reason and evidence. - Kept dated evidence comments (incidents, audits) in short form. - Translated leftover English headers to Russian; no emojis in comments (the ones found live in user strings and assertions, untouched). - Fixed a mojibake comment and two docstrings accidentally truncated mid-edit; full gate green after the fix.5f80ef1
25 days ago
-
Independent re-review: fix missed regressions and close gaps
SilverElixir- lumen_routes: initialize the skipped-retry flag before the MALFORMED branch. A blocked non-MALFORMED answer raised UnboundLocalError instead of reporting the block reason. Added a regression test. - lumen_routes: recognize Google's concatenated PerDay quota metric (GenerateRequestsPerDayPerProjectPerModel) as a daily quota; otherwise a real daily limit was downgraded to a short cooldown. - lumen_tts/lumen_commands: TTS now distinguishes daily quota from burst 429 like the text route. A burst only cools the TTS model down; a daily quota still marks it exhausted. Updated and added TTS quota tests. - lumen_message_core/lumen_chat_state: rate-limit refusals no longer create chat state. Added _t_no_create/_peek_chat_lang and a test proving a rejected message leaves no state behind. - lumen_tiktok: follow download redirects manually, validating scheme and public host before each hop instead of trusting the client and checking only after contact. Added redirect tests. - …5bd5d41 -
Security wave 2: gate deploy on push+own repo, 401 and denial logging on admin endpoints, FastAPI schema off, proxy body cap, ownerless pick confined to chat, loud warning about secrets derived from BOT_TOKEN
SilverElixir1c833d2
-
Move tests to tests/ and proxy to proxy/, update CI and docs paths
SilverElixir7a11b13