5 commits

Author	SHA1	Message	Date
Alexandre Teixeira	3d91ad82cb	fix(security): harden Python service boundaries	2026-10-06 03:16:54 +01:00
Alexandre Teixeira	9ee614e2ac	fix(security): enforce registered endpoint authority ... Require caller-supplied model endpoints to resolve through enabled owner-visible registrations, harden session path encoding, and remove the SVG title HTML parsing sink.	2026-10-05 22:24:15 +01:00
Alexandre Teixeira	9d0257134f	feat(runtime): enforce server request authority	2026-10-01 18:35:41 +01:00
pewdiepie-archdaemon	84aa9a91de	Squash Odysseus development history	2026-09-11 06:04:19 +00:00
yuandonghao	1a2d889c33	refactor(routes): move task domain into routes/task/ subpackage ... Slice 2p of the route-domain reorganization (#4082/#4071). Moves task_routes.py (1181 lines) into routes/task/, leaving a backward-compat sys.modules shim. Pure file reorganization, no behavior change. The shim uses sys.modules replacement so the `import ... as task_routes` + `monkeypatch.setattr(task_routes, "SessionLocal", ...)` / `"get_current_user"` pattern and the `task_routes.__file__` reads in test_auth_regressions.py all reach the canonical module. Four source-introspection test sites repointed: - test_aux_llm_owner_scope.py - test_model_helper_owner_scope.py - test_internal_api_base.py - test_webhook_trigger_auth_exempt.py Adds tests/test_task_routes_shim.py to pin the sys.modules shim contract. Verified: compileall clean; full suite 5040 passed, 3 skipped.	2026-08-17 10:07:17 +08:00