- TestGolemAdminSchemas: no key column in the list, a password api_key
field, the access_settings permission, a model that never serializes
its key, the admin hooks' refusals
- TestGolemImportCommand: missing app or database, the notice path, a
numbered repeater with PHP's scalar forms, a refused second run and
malformed or missing files
- golem15_golem_models (encrypted write-only api_key) with its cabana list
and form under golem15.golem.access_settings, and the Settings lookups
(Models, DefaultModel with PHP's position-0 quirk, Vision, Image, File,
ByName), every one Trusted
- golem:import-settings copies the WinterCMS golem_settings repeater once
- AnthropicAdapter; SendStream, SendFile/SendFilePath/SendFileReader,
SendWithModel, SendToImageModel, SendToVisionModel, GenerateImage, Ask
- PromptFactory; README documents the config keys, the environment
variable, the command and the admin screen
https only, the golem15.golem.ssrf.allowed_hosts allowlist (overridden by
GOLEM15_SSRF_ALLOWED_HOSTS) with dotted-suffix entries, and a resolve-time
check that every address is public, judged by fetchguard.IsPrivateAddr.
Failures carry PHP's RuntimeException messages.
- Prompt, Payload and AIResponse value objects ported from Golem15.Golem
- OpenAIAdapter: chat completions mapping with PHP's response_format,
max_completion_tokens and reasoning_effort rules
- AIService.Send through fetchguard (TrustedMode for operator models,
PublicOnlyMode otherwise) with PHP's failure messages
- config defaults for the SSRF allowlist and the AI timeout, lang, README
