Commit Graph

Select branches

Hide Pull Requests

codex/fix-admin-token-disclosure-in-logs

codex/fix-auto-router-to-enforce-model-allowlist

codex/fix-backend-fallback-route-scope-bypass

codex/fix-crates-publish-guard-vulnerability

codex/fix-explicit-model-routing-vulnerability

codex/fix-loopback-open-auth-vulnerability

codex/fix-pr-recap-workflow-secret-vulnerability

codex/fix-virtual-key-budget-enforcement-issue

codex/fix-vulnerability-causing-zero-cost-usage

codex/fix-vulnerability-in-virtual-key-budget-handling

codex/propose-fix-for-network-exposed-open-relay

codex/propose-fix-for-route-scoped-access-issue

feat/success-callback

main

#1

#10

#11

#12

#13

#14

#15

#16

#17

#18

#19

#2

#20

#21

#22

#23

#24

#25

#26

#27

#28

#29

#3

#30

#31

#32

#33

#34

#35

#36

#37

#38

#39

#4

#40

#41

#42

#43

#44

#45

#46

#47

#48

#49

#5

#50

#6

#7

#8

#9

v0.10.0

v0.10.1

v0.11.0

v0.12.0

v0.13.0

v0.14.0

v0.14.1

v0.15.0

v0.15.1

v0.16.0

v0.16.1

v0.9.0

v0.9.1

v0.9.2

v0.9.3

v0.9.4

v0.9.5

v0.9.6

v0.9.7

v0.9.8

v0.9.9

Mono Color

• 365d463435 test: add missing protocol/auth variant coverage for row_to_backend_config whit3rabbit 2026-04-08 13:13:49 -05:00
• 7c5a568034 feat: add providers crate, row_to_backend_config, managed_backends SharedState field, startup loading whit3rabbitandClaude Sonnet 4.6 2026-04-08 13:11:27 -05:00
• 0a79183a9b refactor: move ManagedBackendRow/Patch to db.rs, fix inverted dependency whit3rabbitandClaude Sonnet 4.6 2026-04-08 13:06:48 -05:00
• e92977c1dd feat: add managed_backends SQLite table and CRUD functions whit3rabbitandClaude Sonnet 4.6 2026-04-08 12:59:56 -05:00
• dc301c489e docs: restructure README for user-first experience whit3rabbitandClaude Sonnet 4.6 2026-04-06 21:52:47 -05:00
• ebbfb3a0e6 docs: condense CLAUDE.md, expand ENV.md and CONFIG.md coverage whit3rabbitandClaude Sonnet 4.6 2026-04-06 21:45:50 -05:00
• dde1f902b6 feat: model persistence, model discovery, config directory, and admin UI updates whit3rabbitandClaude Sonnet 4.6 2026-04-06 21:24:44 -05:00
• 3980985b17 fix: review feedback - disable service in prerm, clobber on re-upload, remove redundant postinst re-run whit3rabbitandClaude Sonnet 4.6 2026-04-06 21:19:27 -05:00
• 4c49a0efde docs: add deb packaging section to CLAUDE.md whit3rabbitandClaude Sonnet 4.6 2026-04-06 21:16:56 -05:00
• 787ca25388 ci: upload deb packages to GitHub releases whit3rabbitandClaude Sonnet 4.6 2026-04-06 21:14:45 -05:00
• 37e7e2827f ci: add deb install verification job whit3rabbitandClaude Sonnet 4.6 2026-04-06 21:14:34 -05:00
• cd7372a562 ci: build deb packages on Linux targets whit3rabbitandClaude Sonnet 4.6 2026-04-06 21:14:12 -05:00
• f0ca45f4c9 feat: add cargo-deb metadata for .deb package generation whit3rabbitandClaude Sonnet 4.6 2026-04-06 21:12:51 -05:00
• 1b5e660790 feat: add deb packaging assets (systemd, env defaults, maintainer scripts) whit3rabbitandClaude Sonnet 4.6 2026-04-06 21:11:29 -05:00
• e260d7ec6f docs: add deb packaging implementation plan whit3rabbitandClaude Sonnet 4.6 2026-04-06 21:05:17 -05:00
• 18c2b6bd0f docs: add deb packaging design spec whit3rabbitandClaude Sonnet 4.6 2026-04-06 19:32:40 -05:00
• 56eca3b674 chore: cargo fmt whit3rabbitandClaude Sonnet 4.6 2026-04-06 16:59:25 -05:00
• e3275f81da feat: env import/export, spend alerts, model allowlist, audit log, and misc hardening whit3rabbitandClaude Sonnet 4.6 2026-04-06 16:57:22 -05:00
• 0fa7495574 feat: docker smoke tests, admin UI polish, and misc fixes whit3rabbitandClaude Sonnet 4.6 2026-04-05 18:58:38 -05:00
• dfed5b14ff feat: React admin UI migration — React 19 + TypeScript + Traffic/Uptime tabs whit3rabbitandClaude Sonnet 4.6 2026-04-05 15:29:47 -05:00
• 2e22cfef3c chore: stage pre-existing main branch changes whit3rabbitandClaude Sonnet 4.6 2026-04-05 15:28:55 -05:00
• 6b4c4c93f4 ci: download admin-ui-dist artifact in build-release job whit3rabbit 2026-04-05 15:23:28 -05:00
• a76f169376 feat: complete React admin UI migration with Traffic and Uptime tabs whit3rabbitandClaude Sonnet 4.6 2026-04-05 15:22:40 -05:00
• cc24cc5592 ci: add frontend job (tsc + lint + build) before Rust test job whit3rabbit 2026-04-05 15:21:50 -05:00
• f4ec5f34a1 feat(docker): add Node.js frontend build stage (Stage 1) whit3rabbit 2026-04-05 15:21:36 -05:00
• 8d3facdb99 fix(traffic): rename avg_request_bytes to avg_latency_ms (no bytes column in request_log) whit3rabbit 2026-04-05 15:20:22 -05:00
• d40f2aa70d fix(proxy): compute proxy uptime pct, add avg_request_bytes, expand probe reachability whit3rabbitandClaude Sonnet 4.6 2026-04-05 15:17:47 -05:00
• 2de7f3e060 feat(proxy): register traffic/uptime routes, spawn health checker, switch to dist/index.html whit3rabbitandClaude Sonnet 4.6 2026-04-05 15:12:52 -05:00
• f5fa86d3d5 feat(proxy): add GET /admin/api/uptime endpoint whit3rabbitandClaude Sonnet 4.6 2026-04-05 15:12:28 -05:00
• 227018a2b4 feat(proxy): add GET /admin/api/traffic endpoint whit3rabbitandClaude Sonnet 4.6 2026-04-05 15:12:24 -05:00
• 301f6af5e7 feat(proxy): add background health checker Tokio task (30s probe loop) whit3rabbitandClaude Sonnet 4.6 2026-04-05 15:12:20 -05:00
• eb1da5b4cc feat(proxy): add BackendHealthChanged AdminEvent and started_at to SharedState whit3rabbitandClaude Sonnet 4.6 2026-04-05 15:12:15 -05:00
• 52f2e53ea6 feat(proxy): add health_checks SQLite table and query helpers whit3rabbitandClaude Sonnet 4.6 2026-04-05 15:12:11 -05:00
• a5851a43a2 fix(admin-ui): payload chart as bar chart, separate amber/teal palettes, no-data in HistoryDay whit3rabbitandClaude Sonnet 4.6 2026-04-05 15:05:10 -05:00
• e39aa0871c feat(admin-ui): add Traffic and Uptime tabs (route load table, req/min charts, proxy health strip, backend availability) whit3rabbitandClaude Sonnet 4.6 2026-04-05 15:02:26 -05:00
• b245d22692 fix(admin-ui): fix key stability, stale modal props, save guard, Enter submit whit3rabbit 2026-04-05 14:59:58 -05:00
• b041b4b9ce feat(admin-ui): implement Dashboard, ObservabilityPanel, and all existing tab ports whit3rabbitandClaude Sonnet 4.6 2026-04-05 14:53:40 -05:00
• ae5fcf834e fix(admin-ui): use stable index key in LineChart series map whit3rabbit 2026-04-05 14:50:03 -05:00
• 37b87546d2 feat(admin-ui): add shared components and live feed whit3rabbitandClaude Sonnet 4.6 2026-04-05 14:48:35 -05:00
• acda35f063 feat(admin-ui): add app shell (main, App, LoginPage, Nav) and tab stubs whit3rabbitandClaude Sonnet 4.6 2026-04-05 14:45:41 -05:00
• 49a1292c0f fix(admin-ui): guard WS against double-connect, document mutatingFetch 204 behavior whit3rabbitandClaude Sonnet 4.6 2026-04-05 14:43:43 -05:00
• 8e5d8e05fb feat(admin-ui): add API types, client, stores, WebSocket, and React Query hooks whit3rabbitandClaude Sonnet 4.6 2026-04-05 14:42:05 -05:00
• 3531da4379 fix(admin-ui): convert #ws-status ID selector to .ws-status class whit3rabbit 2026-04-05 14:39:28 -05:00
• e77159c149 feat(admin-ui): add CSS globals (migrated from monolithic index.html) whit3rabbit 2026-04-05 14:37:15 -05:00
• 92c220270e fix(admin-ui): use unified typescript-eslint package, remove unknown inlineScripts option whit3rabbitandClaude Sonnet 4.6 2026-04-05 14:31:53 -05:00
• 20ac4022c1 feat(admin-ui): scaffold Vite + React + TypeScript frontend whit3rabbitandClaude Sonnet 4.6 2026-04-05 14:27:12 -05:00
• a4f20dca39 docs: add React admin UI redesign spec whit3rabbitandClaude Sonnet 4.6 2026-04-05 13:28:00 -05:00
• 1f9bb02968 feat: add Docker support, Gemini input handler, and batch engine improvements whit3rabbitandClaude Sonnet 4.6 2026-04-05 12:01:24 -05:00
• b6158cf3fe feat: refactor admin routes into modular sub-modules and implement model management API endpoints whit3rabbit 2026-04-04 20:26:43 -05:00
• 72ba916241 fix: streaming tool execution iterates up to max_iterations like non-streaming path whit3rabbitandClaude Sonnet 4.6 2026-04-04 18:11:15 -05:00
• 0593d1ae1b feat: add has_more to pagination responses, disable Next when no more results whit3rabbitandClaude Sonnet 4.6 2026-04-04 18:04:37 -05:00
• 01e04fa6b3 feat: expose period_reset_at in list_keys and show in budget bar whit3rabbitandClaude Sonnet 4.6 2026-04-04 17:59:56 -05:00
• 28580ff311 fix: validate backend_name exists before adding model deployment whit3rabbitandClaude Sonnet 4.6 2026-04-04 17:54:41 -05:00
• 17b640b319 fix: remove deprecated claude-3-sonnet-20240229 from static model list whit3rabbitandClaude Sonnet 4.6 2026-04-04 17:52:10 -05:00
• ab34b32816 fix: show empty-state message on all pages, not just page 0 whit3rabbit 2026-04-04 17:49:50 -05:00
• e0084d6630 fix: WebSocket reconnect uses exponential backoff, max 10 retries whit3rabbit 2026-04-04 17:48:33 -05:00
• c27a7be80a fix: redirect to login on 401 in admin UI whit3rabbitandClaude Sonnet 4.6 2026-04-04 17:45:57 -05:00
• 5f1bc056b0 fix: re-fetch CSRF token before each admin mutation whit3rabbitandClaude Sonnet 4.6 2026-04-04 17:43:09 -05:00
• 951244e93b Merge pull request #2 from whit3rabbit/fix/simplify-epoch-helpers-and-security-hardening whit3rabbit 2026-04-04 13:42:04 -05:00
• 148ced3324 docs: add Claude Code env vars for proxy mode whit3rabbitandClaude Sonnet 4.6 2026-04-04 13:39:16 -05:00
• 1969d5cef2 Merge pull request #1 from whit3rabbit/fix/simplify-epoch-helpers-and-security-hardening whit3rabbit 2026-04-04 13:38:07 -05:00
• 84315840f8 fix: harden security, fix expires_at TTL, improve translation accuracy whit3rabbitandClaude Sonnet 4.6 2026-04-04 13:33:23 -05:00
• 04a58bfc6f style: run cargo fmt to fix CI formatting check whit3rabbitandClaude Opus 4.6 2026-04-01 05:46:21 -05:00
• 0fe011d718 fix(security): harden 4 medium findings from security audit whit3rabbitandClaude Opus 4.6 2026-03-31 20:31:11 -05:00
• c7475c724b fix(security): harden proxy against 11 findings from security audit whit3rabbitandClaude Opus 4.6 2026-03-31 17:50:32 -05:00
• df975e739d refactor(security): extract helpers for CSRF cap and timestamp validation whit3rabbitandClaude Sonnet 4.6 2026-03-31 17:30:02 -05:00
• 9e58822583 fix(security): restore atomic CSRF token removal with DashMap + size cap whit3rabbitandClaude Sonnet 4.6 2026-03-31 17:22:37 -05:00
• a00a05d598 fix(security): remove debug_assert that always fires inside #[tokio::main] whit3rabbit 2026-03-31 17:21:06 -05:00
• 22f274a463 fix(security): assert single-threaded invariant before unsafe set_var calls whit3rabbit 2026-03-31 17:15:37 -05:00
• b733a4cb3c fix(security): tighten looks_like_jwt to require valid Base64url segments whit3rabbit 2026-03-31 17:14:28 -05:00
• 440357951d fix(security): validate since/until timestamps in admin log query handlers whit3rabbit 2026-03-31 17:11:56 -05:00
• e0f41e0f5b fix(security): require explicit ADMIN_TOKEN on non-Unix (token file unsupported) whit3rabbit 2026-03-31 17:08:59 -05:00
• 54c612a661 fix(security): replace unbounded CSRF DashMap with moka cache (1000 entries, 24h TTL) whit3rabbit 2026-03-31 17:03:47 -05:00
• d49fe6a986 fix(security): validate webhook_url against SSRF rules in create_batch whit3rabbitandClaude Sonnet 4.6 2026-03-31 17:00:10 -05:00
• 12078ab2dd fix(security): enforce model allowlist on Gemini native handler path whit3rabbit 2026-03-31 16:57:58 -05:00
• c336c2cfcc fix(security): enforce model allowlist on Anthropic passthrough path whit3rabbit 2026-03-31 16:54:37 -05:00
• 2bc0125497 refactor(batch_engine): eliminate extra DB round-trip in cancel, consolidate format_epoch_iso8601 whit3rabbitandClaude Sonnet 4.6 2026-03-31 16:36:00 -05:00
• 8ac9ef2677 Merge feat/batch-engine-phase1 into main whit3rabbitandClaude Sonnet 4.6 2026-03-31 16:00:37 -05:00
• e6dd396b05 fix(security): apply 2026-03-31 security audit hardening whit3rabbitandClaude Sonnet 4.6 2026-03-31 15:56:30 -05:00
• ef5f0f596c refactor(proxy): wire batch handlers through BatchEngine crate whit3rabbitandClaude Sonnet 4.6 2026-03-31 06:49:40 -05:00
• bdf73c9057 test(admin): update virtual_keys tests for one-time CSRF tokens whit3rabbitandClaude Sonnet 4.6 2026-03-31 06:48:44 -05:00
• 9803668b7d feat(proxy): wire batch_engine into proxy crate whit3rabbit 2026-03-31 06:48:16 -05:00
• 8bfc04e583 fix(tools): warn at startup when execute_bash policy is Allow whit3rabbitandClaude Sonnet 4.6 2026-03-31 06:43:16 -05:00
• 2019f92824 fix(admin): enforce one-time CSRF tokens tracked server-side whit3rabbitandClaude Sonnet 4.6 2026-03-31 06:42:41 -05:00
• 0efe5ae671 fix(mcp): use SSRF-safe HTTP client for MCP tool calls and discovery whit3rabbitandClaude Sonnet 4.6 2026-03-31 06:38:25 -05:00
• 52173ea8eb fix(admin): validate model_name/backend_name/actual_model in add_model whit3rabbitandClaude Sonnet 4.6 2026-03-31 06:37:08 -05:00
• 060c0e418f fix(mcp): validate server names to prevent tool routing ambiguity whit3rabbitandClaude Sonnet 4.6 2026-03-31 06:36:41 -05:00
• babd0e6ff0 fix(tools): enforce allowed_dirs allowlist in ReadFileTool whit3rabbitandClaude Sonnet 4.6 2026-03-31 06:33:47 -05:00
• d2a56c5ad2 feat(proxy): wire batch_engine into proxy crate whit3rabbit 2026-03-31 06:30:25 -05:00
• 2b885a0938 feat(batch_engine): scaffold crate with core types, queue, file store, webhook, and engine facade whit3rabbit 2026-03-31 06:24:49 -05:00
• 3c1571473b chore: scaffold batch_engine crate directory structure whit3rabbit 2026-03-31 06:13:35 -05:00
• cf417c9cfb fix(tools): share reqwest client and add SSRF validation for MCP URLs whit3rabbitandClaude Opus 4.6 2026-03-30 22:47:56 -05:00
• a5b095f988 fix(tools): handle Deny policy as error ToolResult instead of silent PassThrough whit3rabbitandClaude Opus 4.6 2026-03-30 22:47:46 -05:00
• a88a48b50e fix: wire tool engine and MCP manager into main.rs from config whit3rabbitandClaude Sonnet 4.6 2026-03-30 22:35:44 -05:00
• d9c02c5204 docs: add tool execution engine and MCP integration to CLAUDE.md whit3rabbit 2026-03-30 22:25:15 -05:00
• d7082b8812 test: add integration tests for tool execution engine whit3rabbitandClaude Sonnet 4.6 2026-03-30 22:24:14 -05:00
• a56bc95b5f feat(tools): add collect-then-execute streaming tool execution whit3rabbitandClaude Opus 4.6 2026-03-30 22:21:37 -05:00
• 4a6604f640 feat(tools): integrate non-streaming tool execution into messages handler whit3rabbitandClaude Opus 4.6 2026-03-30 22:14:24 -05:00
• 8675dec585 feat(tools): integrate non-streaming tool execution into chat completions handler whit3rabbitandClaude Opus 4.6 2026-03-30 22:14:20 -05:00
• a4119dd75c feat(tools): add helper functions for tool call extraction and result building whit3rabbitandClaude Opus 4.6 2026-03-30 22:14:16 -05:00