shaw 9eb394e3e9 fix(typesafe): 堵住校验解析差异与审计盲区，收紧模型列表口径 ...

- System One 校验拒绝重复键与大小写/Unicode 折叠变体键（请求顶层、
  questions、问题对象）：encoding/json 大小写不敏感且取最后一个重复键，
  而原始 body 原样转发，此前 {"model":"x","MODEL":"jev-latest"} 可绕过
  jev-latest 限制、模型白名单与流式限制。
- Prompt 审计与旧审核同时收集对象键名、问题 ID 与未知扩展字段（不含规范
  字段名与已校验的 type），此前把内容放进键名即可完全绕过审计。
- 上游成功响应的 usage/model 宽松解码（浮点、数字字符串），避免上游已
  计费而网关整体 502 不记账；解码失败记录 response_error ops 事件。
- 上游 413 与 400/422 同视为请求错误：透传状态码、不切换、不改账号状态。
- TypeSafe base_url 末尾的 /v1 自动剥离，避免拼出 /v1/v1/systemone；
  /v1/systemone 改挂文本请求体上限。
- Composite 静态兜底模型列表、管理端候选列表恢复为不含 jev-latest；
  Codex 清单永不列出 TypeSafe 模型；TypeSafe 分组候选默认 jev-latest。
- 创建账号从 Grok 切到 TypeSafe 时重置为白名单模式；错误透传平台列表补 typesafe。

2026-10-02 13:51:58 +08:00

..

coordinator_legacy.go

feat(security-audit): add OpenAI-compatible prompt auditing

2026-07-17 00:39:39 +08:00

coordinator_test.go

feat(security-audit): add OpenAI-compatible prompt auditing

2026-07-17 00:39:39 +08:00

coordinator.go

feat(security-audit): add OpenAI-compatible prompt auditing

2026-07-17 00:39:39 +08:00

prompt_config_integration_test.go

fix(security-audit): 解密失败不再吞掉整份配置，修复升级后配置消失且无法保存的死锁 (#4887)

2026-07-28 09:31:36 +08:00

prompt_config_store.go

fix(securityaudit): log prompt_guard.config_loaded only on change

2026-08-21 15:51:11 +07:00

prompt_config_test.go

fix(securityaudit): log prompt_guard.config_loaded only on change

2026-08-21 15:51:11 +07:00

prompt_config.go

feat(security-audit): add narrow blocking audit scope

2026-07-31 01:47:53 +00:00

prompt_enqueue.go

feat(security-audit): add OpenAI-compatible prompt auditing

2026-07-17 00:39:39 +08:00

prompt_event_repository.go

feat(security-audit): persist full prompts on audit events and polish event review UI

2026-07-17 14:38:10 +08:00

prompt_guard_test.go

test: stop four concurrency tests from failing on a busy machine

2026-07-25 21:59:20 +07:00

prompt_guard.go

feat(security-audit): add OpenAI-compatible prompt auditing

2026-07-17 00:39:39 +08:00

prompt_handler_test.go

fix(security-audit): 解密失败不再吞掉整份配置，修复升级后配置消失且无法保存的死锁 (#4887)

2026-07-28 09:31:36 +08:00

prompt_handler.go

feat(security-audit): add narrow blocking audit scope

2026-07-31 01:47:53 +00:00

prompt_issue_summary.go

feat(security-audit): add OpenAI-compatible prompt auditing

2026-07-17 00:39:39 +08:00

prompt_logging_test.go

fix(security-audit): 解密失败不再吞掉整份配置，修复升级后配置消失且无法保存的死锁 (#4887)

2026-07-28 09:31:36 +08:00

prompt_logging.go

fix(security-audit): 解密失败不再吞掉整份配置，修复升级后配置消失且无法保存的死锁 (#4887)

2026-07-28 09:31:36 +08:00

prompt_metrics_test.go

feat(security-audit): add OpenAI-compatible prompt auditing

2026-07-17 00:39:39 +08:00

prompt_metrics.go

feat(security-audit): add OpenAI-compatible prompt auditing

2026-07-17 00:39:39 +08:00

prompt_module.go

fix: 过滤入口拒绝日志并强化鉴权边界

2026-07-18 00:11:18 +08:00

prompt_outbound_security_test.go

feat(security-audit): allow admin-managed audit node targets and polish pool UI

2026-07-17 11:45:14 +08:00

prompt_outbound_security.go

feat(security-audit): allow admin-managed audit node targets and polish pool UI

2026-07-17 11:45:14 +08:00

prompt_payload_store_integration_test.go

feat(security-audit): add OpenAI-compatible prompt auditing

2026-07-17 00:39:39 +08:00

prompt_payload_store.go

feat(security-audit): add OpenAI-compatible prompt auditing

2026-07-17 00:39:39 +08:00

prompt_qwen3guard_test.go

feat(security-audit): allow Qwen3Guard auxiliary fields

2026-07-27 17:40:11 +08:00

prompt_qwen3guard.go

feat(security-audit): allow Qwen3Guard auxiliary fields

2026-07-27 17:40:11 +08:00

prompt_repository_integration_test.go

feat(security-audit): persist full prompts on audit events and polish event review UI

2026-07-17 14:38:10 +08:00

prompt_repository_test.go

feat(security-audit): persist full prompts on audit events and polish event review UI

2026-07-17 14:38:10 +08:00

prompt_repository.go

feat(security-audit): persist full prompts on audit events and polish event review UI

2026-07-17 14:38:10 +08:00

prompt_scanner.go

fix(security-audit): isolate latest user prompt chunk

2026-07-17 12:12:41 +08:00

prompt_service_test.go

feat(security-audit): add narrow blocking audit scope

2026-07-31 01:47:53 +00:00

prompt_service.go

feat(security-audit): add narrow blocking audit scope

2026-07-31 01:47:53 +00:00

prompt_snapshot_test.go

fix(typesafe): 堵住校验解析差异与审计盲区，收紧模型列表口径

2026-10-02 13:51:58 +08:00

prompt_snapshot.go

fix(typesafe): 堵住校验解析差异与审计盲区，收紧模型列表口径

2026-10-02 13:51:58 +08:00

prompt_types.go

fix(security-audit): 解密失败不再吞掉整份配置，修复升级后配置消失且无法保存的死锁 (#4887)

2026-07-28 09:31:36 +08:00

prompt_worker_test.go

fix(security-audit): reject unavailable prompt config

2026-07-26 14:33:59 +08:00

prompt_worker.go

feat(security-audit): persist full prompts on audit events and polish event review UI

2026-07-17 14:38:10 +08:00