3 CRITICAL security fixes: (1) get_cache_stats() no longer exposes raw API keys, (2) .env created with 0o600 perms + dir with 0o700, (3) google_creds.json same restricted permissions. 3 BUG fixes: validation rules aligned between keys.py and provider.py, cleanup return type (0 is success not failure), show_stats() now aggregates across all callers vs show_session() for current session. 290/290 tests pass, seedgo 99%. Co-Authored-By: @api <api@aipass>
Modules
Business logic for API. One module per command.
Modules orchestrate work by calling handlers. They are the public API of the branch — drone routes commands here.