vicky-dev-24/localai-gateway-backend

Fix: wrap exception raises as RuntimeError in _call_model_space/_stream_from_model_space to prevent unhandled 500 errors in failover loop

Clean up: remove all old models, keep only Phi-4 Mini with 3-Space failover

chore: add HF_TOKEN_DARKSYNTRIXA2 support and migrate 6 chat models to darksyntrixa2 spaces

ci: trigger pipeline to test HF_TOKEN_VICKYDEV

fix: remove duplicate import os in config.py, suppress TestResult pytest warnings

chore: add os import and update test results

Fix 3 issues: Redis-backed token revocation, chat empty messages 422, cognition broadcast

fix: remove blocking aread() to enable true streaming from model space

fix: security fixes - CORS env var, admin password logging, auth v2 migration, JWT secret hardening

Remove all hardcoded secrets and credentials from source code

Security hardening: auto-generate JWT secret, fix cognition router import, add comprehensive api test

Fix remaining security issues: add auth to node_runtime, cognition health, infra endpoints

Fix critical tool bugs: terminal allowlist, wasm async, validator, sandbox zombies, browser double truncation, filesystem realpath

Fix remaining audit issues: C3 role validation, M1 env sanitization, M2 re-auth refresh, M3 token revocation, L2 asyncio, L4 error redaction, H5 token masking

Fix remaining audit issues: C1 block default JWT_SECRET, C5 tighten sandbox, C9+C16 validate session tokens as API keys, M4 rate limit registration

Fix audit issues: C16/C15/C6/C8/H3/H7/H8/H16/H17/M4/M14/L5/L8

Fix auth: wire security_v2 Argon2, sandbox terminal, protect metrics, hide docs in prod

Remove ineffective builtins pop, final cleanup

Fix browser.py --no-sandbox regression, simplify JWT_SECRET config

Fix JWT_SECRET to use env-based settings value

Fix auth expiry checks, sandbox hardening, CORS, SSRF, filesystem safety

Fix deploy script: unshallow clone before pushing to HF

Fix CI/CD: use alpine:3.19 instead of alpine/git which has ENTRYPOINT=git

Fix CI/CD: use external deploy script to avoid YAML parsing issues

Fix CI/CD YAML syntax + add pytest.ini for async tests

Fix CI/CD YAML: use literal block scalar | for script

Fix CI/CD YAML: simplify script syntax to avoid parsing issues

Fix CI/CD YAML syntax + add verify_imports script

Fix sandbox.py lock + web_search.py cleanup

Fix CI/CD: install requirements.prod.txt, add environment keyword

Add CI/CD pipeline: auto-deploy development branch to HF Space

Fix 15 critical/high bugs: sandbox escapes, schemas, dead code, MCP server

fix: reorder models/providers before models/{model_id} to prevent route capture

fix: add all missing API routes to match frontend expectations

fix: add missing RealDictCursor import causing empty API key list on CockroachDB

fix: SQLite connection pool returning closed connections causing empty API key list

revert: remove admin frontend pages from backend (static files + routes)

feat: add admin frontend pages with static file serving

feat: add admin dashboard with live monitoring and paginated logs

fix: add created_by field to Organization dataclass

fix: Dockerfile chmod +x start.sh to fix HF permission denied error

feat: expose all microservices as API routes, enable MCP server

fix: resolve 4 API 500 errors on HF deployment

fix: critical bug fixes and cleanup - fix dead validation code in tools/__init__.py, fix broken event_bus publish() retry logic, fix admin.py dependency injection, remove deprecated memory_v2.py, fix unbounded L1 cache, fix incomplete distributed.py async stubs

fix: enhance security with input validation and sanitization

fix: add thread safety and timeout handling to critical components

fix: add few-shot examples to system prompt to override stubborn training identities

fix: strengthen DarkSyntrix system prompt to override stubborn model training identities

fix: inject DarkSyntrix system prompt to ensure models identify as DarkSyntrix by VR instead of default training identity

fix: correct Prometheus label name from cache to cache_type in L1 cache functions