Spaces:
Running
Running
Commit History
16 days ago
-
Validate Telegram path form and require long proxy secret
SilverElixirb33ab22
22 days ago
-
Proxy hardening: upstream timeout, 413 on cap, wider hop-by-hop strip, no dead fields (A10-1, A10-3..A10-8, A10-10)
SilverElixir6d075c6
25 days ago
-
Independent re-review: fix missed regressions and close gaps
SilverElixir- lumen_routes: initialize the skipped-retry flag before the MALFORMED branch. A blocked non-MALFORMED answer raised UnboundLocalError instead of reporting the block reason. Added a regression test. - lumen_routes: recognize Google's concatenated PerDay quota metric (GenerateRequestsPerDayPerProjectPerModel) as a daily quota; otherwise a real daily limit was downgraded to a short cooldown. - lumen_tts/lumen_commands: TTS now distinguishes daily quota from burst 429 like the text route. A burst only cools the TTS model down; a daily quota still marks it exhausted. Updated and added TTS quota tests. - lumen_message_core/lumen_chat_state: rate-limit refusals no longer create chat state. Added _t_no_create/_peek_chat_lang and a test proving a rejected message leaves no state behind. - lumen_tiktok: follow download redirects manually, validating scheme and public host before each hop instead of trusting the client and checking only after contact. Added redirect tests. - …5bd5d41 -
Security wave 2: gate deploy on push+own repo, 401 and denial logging on admin endpoints, FastAPI schema off, proxy body cap, ownerless pick confined to chat, loud warning about secrets derived from BOT_TOKEN
SilverElixir1c833d2
-
Move tests to tests/ and proxy to proxy/, update CI and docs paths
SilverElixir7a11b13