AIOSAIand@api
2fdbf62568
3 CRITICAL security fixes: (1) get_cache_stats() no longer exposes raw API keys, (2) .env created with 0o600 perms + dir with 0o700, (3) google_creds.json same restricted permissions. 3 BUG fixes: validation rules aligned between keys.py and provider.py, cleanup return type (0 is success not failure), show_stats() now aggregates across all callers vs show_session() for current session. 290/290 tests pass, seedgo 99%. Co-Authored-By: @api <api@aipass>
Apps
Application layer for API.
api.py— Entry point. Auto-discovers and routes commands to modules.modules/— Business logic and orchestration. One module per command.handlers/— Implementation details. Called by modules, never by CLI directly.plugins/— Scheduled tasks and extensions.