keisei/KeiSeiKit-1.0
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
KeiSeiKit-1.0/_primitives/_rust/kei-cortex/src
History
Parfii-bot 03d57c7395 fix(kei-cortex): SSRF + atomic token + body limits + capped reads 
Group C — kei-cortex daemon security hardening (post-audit 2026-05-02).

- fal_ssrf.rs (new): validate_fal_url whitelist (fal.ai/.media/.run only).
                      Applied to upload_url, file_url, status_url, images[0].url,
                      and download_image. Closes SSRF where compromised fal response
                      could direct daemon to fetch IMDSv1 (169.254.169.254) and
                      stream cloud creds.
- fal_pipeline.rs (new): HTTP step functions extracted from fal.rs; fal.rs trimmed
                          to thin orchestrator (101 LOC, was over 200 LOC limit).
- auth.rs: save_token now writes to <path>.<nanos>.tmp + sync_all + rename. Was
            non-atomic OpenOptions truncate+write — crash mid-write produced empty
            token file -> bootstrap rotated -> stale clients locked out.
- routes.rs + routes_auth.rs (new): explicit DefaultBodyLimit per route — chat 256 KiB,
                                     tool/apply 11 MiB, pet/interaction 64 KiB, tts 32 KiB.
                                     Bearer auth middleware extracted to routes_auth.
- handlers/chat.rs: validate_body enforces MAX_MESSAGE_CHARS = 50_000. Closed cost
                     amplification where 1.99 MiB chat message billed 500K tokens
                     ($1.50/turn at Sonnet pricing) on every send.
- anthropic_sse.rs: SseParser MAX_BUF = 1 MiB cap; was unbounded — peer streaming
                     1 GB without \\n\\n would OOM daemon.
- http_helpers.rs (new): HTTP_CLIENT: Lazy<reqwest::Client> shared across handlers
                          (was per-request Client::new() => 100-300ms TLS handshake
                          per chat turn, no HTTP/2 multiplexing, fd leak risk on
                          macOS TIME_WAIT).
- http_helpers.rs::read_capped: per-response body cap (16 KiB error / 64 MiB success).
                                  Applied to anthropic, anthropic_invoker, elevenlabs,
                                  fal_pipeline. Closed unbounded resp.text() / .bytes()
                                  pattern that compromised upstream could exploit.

Test results: 462 passed; 0 failed (single-threaded). cargo check clean.
2 pre-existing port-binding flakes in openai_loop_wiring tests are unrelated.

Findings consensus: fal SSRF + body-size + bearer-token-atomicity appeared in
Wave-A retest; chat message cap + SSE buf cap appeared in Wave-A only. Would have
been missed by single audit pass.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
2026-05-02 21:39:57 +08:00
..
agent KeiSeiKit-public — clean state 2026-05-01 12:09:03 +08:00
context KeiSeiKit-public — clean state 2026-05-01 12:09:03 +08:00
handlers fix(kei-cortex): SSRF + atomic token + body limits + capped reads 2026-05-02 21:39:57 +08:00
routes/openai KeiSeiKit-public — clean state 2026-05-01 12:09:03 +08:00
tool KeiSeiKit-public — clean state 2026-05-01 12:09:03 +08:00
anthropic.rs fix(kei-cortex): SSRF + atomic token + body limits + capped reads 2026-05-02 21:39:57 +08:00
anthropic_config.rs KeiSeiKit-public — clean state 2026-05-01 12:09:03 +08:00
anthropic_invoker.rs fix(kei-cortex): SSRF + atomic token + body limits + capped reads 2026-05-02 21:39:57 +08:00
anthropic_invoker_test.rs KeiSeiKit-public — clean state 2026-05-01 12:09:03 +08:00
anthropic_sse.rs fix(kei-cortex): SSRF + atomic token + body limits + capped reads 2026-05-02 21:39:57 +08:00
auth.rs fix(kei-cortex): SSRF + atomic token + body limits + capped reads 2026-05-02 21:39:57 +08:00
auth_test.rs KeiSeiKit-public — clean state 2026-05-01 12:09:03 +08:00
config.rs KeiSeiKit-public — clean state 2026-05-01 12:09:03 +08:00
elevenlabs.rs fix(kei-cortex): SSRF + atomic token + body limits + capped reads 2026-05-02 21:39:57 +08:00
error.rs KeiSeiKit-public — clean state 2026-05-01 12:09:03 +08:00
fal.rs fix(kei-cortex): SSRF + atomic token + body limits + capped reads 2026-05-02 21:39:57 +08:00
fal_pipeline.rs fix(kei-cortex): SSRF + atomic token + body limits + capped reads 2026-05-02 21:39:57 +08:00
fal_ssrf.rs fix(kei-cortex): SSRF + atomic token + body limits + capped reads 2026-05-02 21:39:57 +08:00
http_helpers.rs fix(kei-cortex): SSRF + atomic token + body limits + capped reads 2026-05-02 21:39:57 +08:00
lib.rs fix(kei-cortex): SSRF + atomic token + body limits + capped reads 2026-05-02 21:39:57 +08:00
main.rs KeiSeiKit-public — clean state 2026-05-01 12:09:03 +08:00
persona.rs KeiSeiKit-public — clean state 2026-05-01 12:09:03 +08:00
rig_clone.rs KeiSeiKit-public — clean state 2026-05-01 12:09:03 +08:00
routes.rs fix(kei-cortex): SSRF + atomic token + body limits + capped reads 2026-05-02 21:39:57 +08:00
routes_auth.rs fix(kei-cortex): SSRF + atomic token + body limits + capped reads 2026-05-02 21:39:57 +08:00
sentiment.rs KeiSeiKit-public — clean state 2026-05-01 12:09:03 +08:00
state.rs KeiSeiKit-public — clean state 2026-05-01 12:09:03 +08:00
state_test.rs KeiSeiKit-public — clean state 2026-05-01 12:09:03 +08:00
validate.rs KeiSeiKit-public — clean state 2026-05-01 12:09:03 +08:00
whisper_local.rs KeiSeiKit-public — clean state 2026-05-01 12:09:03 +08:00