Update project configuration files, and API routes accordingly. Add SQLite runtime file ignores to .gitignore for better file management.

SECURITY_FIXES.md

@@ -7,7 +7,7 @@
 | **Publication Date** | 2026-07-21 |
 | **Status** | Patches applied — operator action required |
 | **Classification** | Internal — Distribution Restricted |
-| **Affected Product** | ZyroX CV2 AIO Discord Bot with Dashboard |
+| **Affected Product** | HexaHost CV2 AIO Discord Bot with Dashboard |
 
 ---
 
@@ -46,7 +46,7 @@ This document tracks remediation of findings identified during static security a
 | File | Change |
 |------|--------|
 | `bot/utils/config.py` | `_parse_ids()` returns empty list on missing env var |
-| `bot/CodeX.py` | Startup warning when `OWNER_IDS` is empty |
+| `bot/HexaHost.py` | Startup warning when `OWNER_IDS` is empty |
 | `bot/.env.example` | Placeholder `YOUR_DISCORD_USER_ID_HERE`; foreign IDs removed |
 | `dashboard/.env.example` | `ADMIN_IDS` placeholder replaces foreign ID |
 
@@ -67,7 +67,7 @@ OWNER_IDS=<your_discord_snowflake>
 | File | Change |
 |------|--------|
 | `bot/utils/config.py` | `JISHAKU_ENABLED` flag (default: `false`) |
-| `bot/CodeX.py` | Conditional extension load |
+| `bot/HexaHost.py` | Conditional extension load |
 | `bot/.env.example` | Documented opt-in flag |
 
 **Post-patch behavior:** Jishaku inactive unless `JISHAKU_ENABLED=true`. Recommended for local debugging only.
@@ -82,7 +82,7 @@ OWNER_IDS=<your_discord_snowflake>
 | File | Change |
 |------|--------|
 | `bot/utils/config.py` | `_valid_webhook_url()` rejects empty/placeholder values |
-| `bot/CodeX.py` | `on_command_completion` early-return when URL invalid |
+| `bot/HexaHost.py` | `on_command_completion` early-return when URL invalid |
 
 **Post-patch behavior:** No outbound command telemetry without fully qualified, operator-configured webhook URL.
 
@@ -96,7 +96,7 @@ OWNER_IDS=<your_discord_snowflake>
 | File | Change |
 |------|--------|
 | `bot/utils/config.py` | `LOG_CHANNEL_ID`, `SERVER_COUNT_CHANNEL_ID`, `USER_COUNT_CHANNEL_ID` |
-| `bot/CodeX.py` | Config-driven channel references; stats task gated on config |
+| `bot/HexaHost.py` | Config-driven channel references; stats task gated on config |
 | `bot/cogs/events/on_guild.py` | Join/leave logging conditional on `LOG_CHANNEL_ID` |
 | `bot/cogs/commands/np.py` | Audit logs use `LOG_CHANNEL_ID` |
 | `bot/.env.example` | Optional IDs documented (commented) |
@@ -120,7 +120,7 @@ USER_COUNT_CHANNEL_ID=<channel_snowflake>
 | File | Change |
 |------|--------|
 | `bot/utils/config.py` | `API_ENABLED=false`, `API_HOST=127.0.0.1`, `TUNNEL_ENABLED=false` |
-| `bot/CodeX.py` | Bind to `API_HOST`; warn on `0.0.0.0` |
+| `bot/HexaHost.py` | Bind to `API_HOST`; warn on `0.0.0.0` |
 | `bot/.env.example` | Secure defaults documented |
 
 **Post-patch behavior:** API and tunnel disabled until explicitly enabled. Localhost binding by default.
@@ -200,7 +200,7 @@ Remove `NEXT_PUBLIC_DASHBOARD_API_KEY` from any existing `.env`.
 | File | Change |
 |------|--------|
 | `bot/cogs/commands/general.py` | Removed `hack`, `token`, `wizz`; dead code cleanup |
-| `bot/cogs/zyrox/general.py` | Help index updated |
+| `bot/cogs/hexahost/general.py` | Help index updated |
 
 **Post-patch behavior:** Commands no longer registered. No regression in remaining general commands.
 
@@ -234,8 +234,8 @@ Secondary pass on remediation code identified gaps in the initial proxy implemen
 | API proxy accessible without session | Critical | Session gate + guild/admin validation in proxy route |
 | Guild dashboard pages lacking authZ check | High | `guild/[guildId]/layout.tsx` enforces Discord permissions |
 | `GET /guilds` returned all bot guilds | High | Proxy filters to user-manageable intersection |
-| `on_command_completion` NullPointer on `command is None` | Medium | Guard clause in `CodeX.py` |
-| Orphaned `jishaku` import in `bot/core/zyrox.py` | Low | Import removed |
+| `on_command_completion` NullPointer on `command is None` | Medium | Guard clause in `HexaHost.py` |
+| Orphaned `jishaku` import in `bot/core/hexahost.py` | Low | Import removed |
 | Admin check relied solely on `NEXT_PUBLIC_ADMIN_IDS` | Medium | Server-side `ADMIN_IDS` supported |
 
 ---
@@ -274,8 +274,8 @@ Execute after pulling patched codebase:
 | Item | Rationale | Risk Level |
 |------|-----------|------------|
 | Developer credits in `mention.py`, `stats.py` | Cosmetic attribution | Informational |
-| CodeX file headers | Branding | Informational |
-| `discord.gg/codexdev` in welcome templates | Operator-configurable content | Informational |
+| Legacy file headers | Branding | Informational |
+| `discord.gg/hexahost` in welcome templates | Operator-configurable content | Informational |
 
 These items do not constitute exploitable vulnerabilities under the assessed threat model.