2 Commits

Include renames

Author	SHA1	Message	Date
MythEclipse	cb6191902e	fix: critical bugs, serverless stability, and security hardening ... Bug Fixes: - Fix rate limiter API mismatch: check() -> checkAsync() in index.ts, worker.ts, api/relay.ts - Fix WebSocket SSRF silent drop: return error Response instead of undefined - Fix isDevMode() default: changed from true to false (production-safe) - Fix process.env -> env bindings in worker.ts requireAuth for Cloudflare Workers - Fix Bun.file() crash in Workers: add try/catch with fallback - Fix Bun.CryptoHasher -> Web Crypto API in mimo-auth.ts for Workers compat Architecture: - Add public methods to ProxyPool (getEntryAtIndex, getProxyUrlAtIndex, getCurrentIndex, setCurrentIndex) to remove all 'as any' casts in SessionProxyPool - Add addProxy() method for manual proxy management - Add loadAsync(), tryLoadAsync(), loadFromString() to ProxyPool Serverless Stability: - Add optional DNS rebinding protection via SSRF_DNS_CHECK env flag - CORS cache now auto-invalidates when CORS_ORIGIN env changes - Rate limiter max-size eviction (10k keys) prevents unbounded memory growth Tests: - Fix type assertions in test files (body as Record<string, unknown>) - All 153 tests pass, typecheck clean	2026-06-19 18:10:49 +07:00
MythEclipseandClaude	e4406b586e	feat: add Xiaomi MiMo Free API provider (mimo-auto) ... - Add mimo-auth.ts: JWT bootstrap with device fingerprint, cached auto-refresh, 401/403 invalidation - Add mimo-auto entry to MODEL_ROUTES with anti-abuse system message injection - Inject JWT auth + x-session-affinity header before Mimo API fetch - Retry once on 401/403 (invalidate JWT, re-bootstrap) - Extend SSE passthrough for mimo-free provider - Strip 'data:' prefix from Mimo non-streaming responses Co-Authored-By: Claude <noreply@anthropic.com>	2026-06-17 13:22:07 +07:00