bchanot 346d6aeab2 feat(mods): model-router hardening — user-only /route, effort-only agent routes, config caps, visible fail-open ...

Security-gate round on the wave 1-A mod: /route answers only a composer
origin; an in-agent route call can no longer change the agent's model
(effort only, model fixed at spawn); config patterns capped (200 chars,
4096-char scan), phase keys restricted, override file refused above 64 KB,
additionalProperties false on the tool schema; every .catch logs once per
session; post-next bookkeeping isolated. 14 plugin tests, verifier 11/11.

2026-10-08 16:53:43 +02:00

..

hooks.json

feat(mods): model-router mod, wave 1-A — per-request model/effort routing

2026-10-08 16:26:57 +02:00

register.test.ts

feat(mods): model-router hardening — user-only /route, effort-only agent routes, config caps, visible fail-open

2026-10-08 16:53:43 +02:00

register.ts

feat(mods): model-router hardening — user-only /route, effort-only agent routes, config caps, visible fail-open

2026-10-08 16:53:43 +02:00