entropidelic 989b950fbc fix(security): enforce API_SERVER_KEY for non-loopback binding ...

Add is_network_accessible() helper using Python's ipaddress module to
robustly classify bind addresses (IPv4/IPv6 loopback, wildcards,
mapped addresses, hostname resolution with DNS-failure-fails-closed).

The API server connect() now refuses to start when the bind address is
network-accessible and no API_SERVER_KEY is set, preventing RCE from
other machines on the network.

Co-authored-by: entropidelic <entropidelic@users.noreply.github.com>

2026-04-10 16:51:44 -07:00

..

_category_.json

feat: add documentation website (Docusaurus)

2026-03-05 05:24:55 -08:00

acp.md

docs(acp): fix zed config

2026-04-03 01:46:45 -07:00

api-server.md

fix(security): enforce API_SERVER_KEY for non-loopback binding

2026-04-10 16:51:44 -07:00

batch-processing.md

fix: normalize remaining reasoning effort orderings and add missing 'minimal'

2026-04-09 14:20:16 -07:00

browser.md

docs: fix 40+ discrepancies between documentation and codebase (#5818)

2026-04-07 10:17:44 -07:00

code-execution.md

feat: env var passthrough for skills and user config (#2807)

2026-03-24 08:19:34 -07:00

context-files.md

feat: progressive subdirectory hint discovery (#5291)

2026-04-05 12:33:47 -07:00

context-references.md

docs: comprehensive documentation audit — fix stale info, expand thin pages, add depth (#5393)

2026-04-05 19:45:50 -07:00

credential-pools.md

docs: comprehensive docs audit — cover 13 features from last week's PRs (#5815)

2026-04-07 10:21:03 -07:00

cron.md

fix: complete Weixin platform parity audit — 16 missing integration points

2026-04-10 05:54:37 -07:00

delegation.md

docs: comprehensive docs audit — cover 13 features from last week's PRs (#5815)

2026-04-07 10:21:03 -07:00

fallback-providers.md

docs: clarify that provider "main" is for auxiliary tasks only (#6291)

2026-04-08 16:39:17 -07:00

honcho.md

docs: comprehensive documentation audit — fix stale info, expand thin pages, add depth (#5393)

2026-04-05 19:45:50 -07:00

hooks.md

fix: move pre_llm_call plugin context to user message, preserve prompt cache (#5146)

2026-04-04 16:55:44 -07:00

image-generation.md

docs: comprehensive documentation audit — fix stale info, expand thin pages, add depth (#5393)

2026-04-05 19:45:50 -07:00

mcp.md

docs: deep quality pass — expand 10 thin pages, fix specific issues (#4134)

2026-03-30 20:30:11 -07:00

memory-providers.md

feat(hindsight): feature parity, setup wizard, and config improvements

2026-04-08 23:54:15 -07:00

memory.md

docs: add Supermemory to memory providers docs, env vars, CLI reference

2026-04-06 22:15:58 -07:00

overview.md

docs: comprehensive documentation audit — fix stale info, expand thin pages, add depth (#5393)

2026-04-05 19:45:50 -07:00

personality.md

docs: document SOUL.md as primary agent identity (#1927)

2026-03-18 04:18:08 -07:00

plugins.md

docs: document rich requires_env format and install-time prompting

2026-04-06 16:43:42 -07:00

provider-routing.md

docs: fallback providers + /background command documentation

2026-03-15 06:24:28 -07:00

rl-training.md

docs: fix stale and incorrect documentation across 18 files

2026-03-24 07:53:07 -07:00

skills.md

feat(skills): add skill config interface + llm-wiki skill (#5635)

2026-04-06 13:49:13 -07:00

skins.md

docs: add Hermes Mod visual skin editor section to skins page (#6095)

2026-04-08 02:28:40 -07:00

tools.md

docs: fix stale references across 8 doc pages

2026-04-03 23:30:29 -07:00

tts.md

feat(tools): add Voxtral Transcribe STT provider (Mistral AI)

2026-04-08 13:47:08 -07:00

vision.md

docs: add Vision & Image Paste guide with platform compatibility

2026-03-05 23:51:46 -08:00

voice-mode.md

docs: fix 40+ discrepancies between documentation and codebase (#5818)

2026-04-07 10:17:44 -07:00