Alexandre Teixeira 26483661da Restrict provider discovery to admins ...

Require admin access before serving provider discovery data from
GET /api/providers. This prevents normal authenticated users from
triggering provider discovery or receiving cached provider host data.

Keep GET /api/models available to normal users and leave the existing
admin-only GET /api/discover behavior unchanged.

Add a focused regression test to ensure unauthorized callers cannot
trigger discovery and cannot receive cached provider data.

2026-06-02 05:54:40 +09:00

..

__init__.py

Odysseus v1.0

2026-05-31 23:58:26 +09:00

admin_wipe_routes.py

Add native Windows compatibility layer

2026-06-01 15:09:47 +09:00

api_token_routes.py

Odysseus v1.0

2026-05-31 23:58:26 +09:00

assistant_routes.py

Odysseus v1.0

2026-05-31 23:58:26 +09:00

auth_routes.py

Run auth password work off the event loop

2026-06-01 23:12:12 +09:00

backup_routes.py

Odysseus v1.0

2026-05-31 23:58:26 +09:00

calendar_routes.py

Fix YEARLY recurring CalDAV events only showing on DTSTART year (#179)

2026-06-01 13:42:44 +09:00

chat_helpers.py

feat(ai): add OpenRouter and Ollama Cloud providers (#231)

2026-06-01 14:26:10 +09:00

chat_routes.py

Add SSRF-guarded web fetch agent tool

2026-06-01 16:57:28 +09:00

cleanup_routes.py

Odysseus v1.0

2026-05-31 23:58:26 +09:00

compare_routes.py

feat(ai): add OpenRouter and Ollama Cloud providers (#231)

2026-06-01 14:26:10 +09:00

contacts_routes.py

Add native Windows compatibility layer

2026-06-01 15:09:47 +09:00

cookbook_helpers.py

Allow serving cached local llama.cpp models

2026-06-01 23:10:08 +09:00

cookbook_routes.py

Allow serving cached local llama.cpp models

2026-06-01 23:10:08 +09:00

diagnostics_routes.py

Fix email-thread HTML injection, attachment path traversal, and missing authz (#475)

2026-06-01 22:20:17 +09:00

document_helpers.py

Harden PDF document markers against cross-owner upload access (#445)

2026-06-01 22:38:14 +09:00

document_routes.py

Harden PDF document markers against cross-owner upload access (#445)

2026-06-01 22:38:14 +09:00

editor_draft_routes.py

Odysseus v1.0

2026-05-31 23:58:26 +09:00

email_helpers.py

Fix email-thread HTML injection, attachment path traversal, and missing authz (#475)

2026-06-01 22:20:17 +09:00

email_pollers.py

Scope email calendar extraction to account owner

2026-06-01 23:12:32 +09:00

email_routes.py

Fix email-thread HTML injection, attachment path traversal, and missing authz (#475)

2026-06-01 22:20:17 +09:00

embedding_routes.py

Add native Windows compatibility layer

2026-06-01 15:09:47 +09:00

emoji_routes.py

Odysseus v1.0

2026-05-31 23:58:26 +09:00

font_routes.py

Odysseus v1.0

2026-05-31 23:58:26 +09:00

gallery_helpers.py

Odysseus v1.0

2026-05-31 23:58:26 +09:00

gallery_routes.py

Gate image editor AI endpoints by privilege (#447)

2026-06-01 22:35:24 +09:00

history_routes.py

Odysseus v1.0

2026-05-31 23:58:26 +09:00

hwfit_routes.py

Odysseus v1.0

2026-05-31 23:58:26 +09:00

mcp_routes.py

Fix email-thread HTML injection, attachment path traversal, and missing authz (#475)

2026-06-01 22:20:17 +09:00

memory_routes.py

feat: allow memory import without session (#493)

2026-06-01 22:32:17 +09:00

model_routes.py

Restrict provider discovery to admins

2026-06-02 05:54:40 +09:00

note_routes.py

Add native Windows compatibility layer

2026-06-01 15:09:47 +09:00

personal_routes.py

Scope personal RAG uploads by owner (#446)

2026-06-01 22:36:53 +09:00

prefs_routes.py

Add native Windows compatibility layer

2026-06-01 15:09:47 +09:00

preset_routes.py

Odysseus v1.0

2026-05-31 23:58:26 +09:00

research_routes.py

Add native Windows compatibility layer

2026-06-01 15:09:47 +09:00

search_routes.py

Odysseus v1.0

2026-05-31 23:58:26 +09:00

session_routes.py

Fix email-thread HTML injection, attachment path traversal, and missing authz (#475)

2026-06-01 22:20:17 +09:00

shell_routes.py

Harden Cookbook package SSH probe

2026-06-01 22:44:34 +09:00

signature_routes.py

Odysseus v1.0

2026-05-31 23:58:26 +09:00

skills_routes.py

Odysseus v1.0

2026-05-31 23:58:26 +09:00

stt_routes.py

Odysseus v1.0

2026-05-31 23:58:26 +09:00

task_routes.py

Polish email tasks and window controls

2026-06-01 20:56:46 +09:00

tts_routes.py

Odysseus v1.0

2026-05-31 23:58:26 +09:00

upload_routes.py

Add native Windows compatibility layer

2026-06-01 15:09:47 +09:00

vault_routes.py

Add native Windows compatibility layer

2026-06-01 15:09:47 +09:00

webhook_routes.py

feat(ai): add OpenRouter and Ollama Cloud providers (#231)

2026-06-01 14:26:10 +09:00