Skip to content

v2.3.0

Choose a tag to compare

View all tags
@cyyever cyyever released this 24 Feb 08:51
· 413 commits to main since this release
v2.3.0
b263d0f
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Features

  • DLP token detection — 19 hardcoded content-based patterns (AWS, GitHub, Stripe, OpenAI, Anthropic, etc.) + optional gitleaks
    Tier 2 scanning (dlp.go, dlp_scanner.go)
  • Security hardening — Unicode normalization (NFKC), null byte blocking, tool name sanitization at engine boundary

Bug Fixes

  • Stale WAL/SHM recovery — SQLite recovers from crashed/force-killed processes on Windows instead of failing to start
  • Upstream base path preservation — --endpoint mode now preserves the upstream base path when forwarding (e.g. OpenRouter's /api)
  • JetBrains/PhpStorm compatibility — /api/v1/... prefix stripped automatically from client requests (#19)

Refactoring

  • Reduced code complexity in proxy, main, and SSE buffer (-628 / +1867 lines net)
  • Extracted API prefixes and CLI API handler into dedicated modules
  • Improved test coverage (new dlp_test.go, storage_test.go, expanded proxy_test.go)

Chores

  • Docs: consolidated client table, updated how-it-works with DLP section
Assets 2
Loading