github-featured/learningcircuit--local-deep-research
2
0
Fork 0
Code Issues Pull Requests Deployments Models Agent Notes Packages Projects Releases Wiki Activity

Commit Graph

  • 8ba3db2fb4 docs(adr-0010,0011): re-derive the ledger after the merge and the dead-code delete refactor/fastapi-migration-phase1 LearningCircuit 2026-08-22 19:43:53 +02:00
  • fd8a895ea7 merge: origin/main into the FastAPI migration branch LearningCircuit 2026-08-22 19:42:28 +02:00
  • 1f5e4fef87 fix(proxy): warn when X-Forwarded-Proto: https is not being honoured LearningCircuit 2026-08-22 19:25:25 +02:00
  • 5140423f40 docs(deps): record that two-component ~= pins float far wider than they read LearningCircuit 2026-08-22 19:22:32 +02:00
  • 48041bef7f refactor(queue): delete process_user_request, which nothing calls LearningCircuit 2026-08-22 19:21:44 +02:00
  • 067847e15b fix(cors): scope CORS to API paths again instead of the whole app LearningCircuit 2026-08-22 19:17:18 +02:00
  • 6dc4efdacd fix(socket): re-validate the session on unsubscribe, and sever when revoked LearningCircuit 2026-08-22 19:14:14 +02:00
  • 785ad8cd37 Merge branch 'main' into fix/5517-followup-eviction-polish fix/5517-followup-eviction-polish LearningCircuit 2026-08-22 18:51:41 +02:00
  • 5ccfcf1f03 test: verify the socket tests for real; close register rows 27 and the empty-log gap LearningCircuit 2026-08-22 14:34:33 +02:00
  • 0cabf843c5 fix(searxng): drop the orphan-timestamp prune, re-warn on an interval LearningCircuit 2026-08-22 14:19:59 +02:00
  • 9ae0c6538e test: assert framed prompt blocks in library-document fetch; apply ruff format rebuild/prompt-content-boundaries LearningCircuit 2026-08-22 14:18:12 +02:00
  • 8d40aa2181 test: align provider tests with bounded request timeouts (#5339) rebuild/5339-timeout LearningCircuit 2026-08-22 14:18:11 +02:00
  • 0595ce42b0 fix(ci): exempt the sanctioned socket research-id boundary from the int ban rebuild/socket-id-validation LearningCircuit 2026-08-22 14:12:35 +02:00
  • ca2103863a test: add old-vs-new route-table parity testing LearningCircuit 2026-08-22 14:14:16 +02:00
  • 3ded635243 docs: add the missing rollback procedure; unstale the architecture docs LearningCircuit 2026-08-22 14:08:43 +02:00
  • d6841f450e fix(searxng): snapshot keys before pruning orphaned timestamps LearningCircuit 2026-08-22 14:07:18 +02:00
  • bc9c0cb527 docs(changelog): note empty-search logging privacy fix fix/omit-query-from-empty-search-log LearningCircuit 2026-08-22 14:06:30 +02:00
  • 5979f1fa1b docs: retract the SlowAPIASGIMiddleware fix — it is worse than the bug LearningCircuit 2026-08-22 14:06:10 +02:00
  • 69a2b392d7 test: de-flake the two failures blocking the required check LearningCircuit 2026-08-22 14:05:00 +02:00
  • 539b8ecd7c docs: add a living merge-readiness task list for #3299 LearningCircuit 2026-08-22 13:57:58 +02:00
  • f8e1889811 docs: update coverage report 10bacd499f gh-pages github-actions[bot] 2026-08-22 09:40:23 +00:00
  • 80cac6b18d docs(adr-0011): review the migration against published practice LearningCircuit 2026-08-22 11:14:27 +02:00
  • d081e8b9ec chore: auto-bump version to 1.10.6 chore/auto-version-bump LearningCircuit 2026-08-22 09:01:02 +00:00
  • 10bacd499f fix(metrics): persist the provider-reported total token count (#5623) main Ehsan 2026-08-22 11:57:10 +03:00
  • c38d50daea fix(settings): validate imported values (#5597) Atirna 2026-08-22 12:58:36 +05:30
  • 5ffad486d9 docs: record SSE buffering by the rate-limit middleware (confirmed) LearningCircuit 2026-08-22 09:25:14 +02:00
  • 7e8e9cbc8e fix(tests): use loguru_caplog's string level, not stdlib logging LearningCircuit 2026-08-22 09:08:22 +02:00
  • c41556ab03 chore: add changelog fragment for #5663 LearningCircuit 2026-08-22 07:56:05 +02:00
  • 50980d8d1c fix(searxng): throttle the all-locks-held warning and bound orphan timestamps LearningCircuit 2026-08-22 07:55:30 +02:00
  • 2b39a8d000 test(library-deletion): harden lock and race-log contracts (#5639) Chanhyo Jung 2026-08-22 14:55:07 +09:00
  • e252002d0d chore: add changelog fragment for #5661 docs/env-file-error-report LearningCircuit 2026-08-22 07:50:25 +02:00
  • e546339cce docs: the auth-error report still implied .env files are read LearningCircuit 2026-08-22 07:49:46 +02:00
  • 915746ff16 docs(adr-0011): measure the leaf-name error rate instead of caveating it LearningCircuit 2026-08-22 07:17:45 +02:00
  • 336271db58 test(logging): assert query absence across full mock-call repr LearningCircuit 2026-08-22 07:16:18 +02:00
  • a462368143 docs(adr-0011): correct findings 1 and 2 after adversarial review LearningCircuit 2026-08-22 07:16:05 +02:00
  • 35ff001ea4 docs: the FAQ called the .env method deprecated, not unsupported docs/env-file-not-loaded LearningCircuit 2026-08-21 17:16:47 +02:00
  • 472f852daf fix(tests): await the socket teardown inside the patch context LearningCircuit 2026-08-21 17:14:11 +02:00
  • e5133246d0 docs(adr-0011): map source provenance; add the socket teardown tests LearningCircuit 2026-08-21 17:08:51 +02:00
  • cc4b30be82 fix(searxng): skip in-use locks when the rate-limit tracker evicts at capacity (#5607) Ehsan 2026-08-21 18:02:05 +03:00
  • 1c021378bb docs(adr-0010): reconcile the surviving-file bucket and make it self-checking LearningCircuit 2026-08-21 16:48:24 +02:00
  • 6466972975 docs(unraid): normalize to "requires v1.10.5 or newer" docs/allowlist-v1105-caveats LearningCircuit 2026-08-21 12:13:54 +02:00
  • d522ebb1e2 🤖 Update dependencies (#5640) github-actions[bot] 2026-08-21 12:10:27 +02:00
  • bedd2f1ae6 🤖 Update dependencies (#5641) github-actions[bot] 2026-08-21 12:00:53 +02:00
  • 3a4c620d46 🤖 Update dependencies (#5642) github-actions[bot] 2026-08-21 11:59:38 +02:00
  • e462418881 chore(deps): bump puppeteer from 25.7.0 to 25.8.0 in /tests/ui_tests (#5652) dependabot[bot] 2026-08-21 11:50:47 +02:00
  • 6c4db232c1 chore(deps-dev): bump puppeteer in /tests/api_tests_with_login (#5653) dependabot[bot] 2026-08-21 11:48:20 +02:00
  • 7d8c1fbdd2 chore(deps): bump puppeteer from 25.7.0 to 25.8.0 in /tests (#5651) dependabot[bot] 2026-08-21 11:45:31 +02:00
  • 055a3b2707 chore(deps): bump puppeteer from 25.7.0 to 25.8.0 in /tests/puppeteer (#5650) dependabot[bot] 2026-08-21 11:44:36 +02:00
  • 5c18aac685 test(security): rename constant to avoid Flask SECRET_KEY scanner false positive fix/llm-request-timeout LearningCircuit 2026-08-21 09:37:52 +02:00
  • 31cefe08cf test(security): exercise PDF upload route validation end-to-end LearningCircuit 2026-08-21 09:33:16 +02:00
  • c2070623b0 test(security): cover rekey inter-process lock, fetch metadata logging, untrusted framing LearningCircuit 2026-08-21 09:33:14 +02:00
  • 31114f839e test(security): add static sink tripwires and WebSocket payload-type pins LearningCircuit 2026-08-21 09:33:05 +02:00
  • 3026258ebd test(security): add red pins for upload extraction bombs, core-dump claim, auto-download docs LearningCircuit 2026-08-21 09:32:04 +02:00
  • 2bb9b9a3cf test(security): pin socket eviction on logout/password change and settings_changed isolation LearningCircuit 2026-08-21 09:29:17 +02:00
  • 8c2a3f29a2 test(security): pin DNS-rebinding fix and SearXNG egress-policy guard LearningCircuit 2026-08-21 09:29:03 +02:00
  • 55e81d11d0 test(security): secure-logging scrub tripwires, hypothesis path fuzz, queue-processor artifact pins security/test-file-write-risk-battery LearningCircuit 2026-08-21 09:29:00 +02:00
  • 019a8cce34 test(security): auth and settings API security batteries test/security-cross-user-and-validator LearningCircuit 2026-08-21 09:28:50 +02:00
  • 20253d1278 test(security): align cross-user suites with hardened paths LearningCircuit 2026-08-21 09:27:06 +02:00
  • 2e7c76b538 test(settings): cover hardened route endpoints LearningCircuit 2026-08-21 09:27:04 +02:00
  • 3cb8a4ef60 fix(security): type settings API writes from raw JSON values LearningCircuit 2026-08-21 09:26:43 +02:00
  • 3ace9a0e53 fix(security): harden notification destination validation and egress alignment LearningCircuit 2026-08-21 09:26:27 +02:00
  • 4c689e1f70 test(security): add deep DB-connection security tests for the #5596 incident class test/db-connection-security-deep LearningCircuit 2026-08-21 09:24:14 +02:00
  • a956188449 Merge remote-tracking branch 'origin/main' into pr3299-merge LearningCircuit 2026-08-21 08:58:29 +02:00
  • 9dfb7e3b75 test(security): close ADR-0010 Tier 2 rows 12, 13, 23-25, 30-36 LearningCircuit 2026-08-21 03:08:40 +02:00
  • ed3ce918da fix(auto-research): rate-limit start, batch N+1, ownership-before-liveness, frontend hardening feature/auto-researcher-virtual-collections LearningCircuit 2026-08-21 01:49:54 +02:00
  • 3bae9270c6 test(migration): make the gap register self-checking; close rows 9-11 LearningCircuit 2026-08-21 01:45:37 +02:00
  • 0487458856 chore: rename changelog fragment to PR number (#5649) LearningCircuit 2026-08-21 01:44:17 +02:00
  • f6e630e69a docs: clarify that LDR does not read a .env file LearningCircuit 2026-08-21 01:44:07 +02:00
  • 57c4d822ac docs(adr-0010): reconcile the Tier 2 register — 14 closed, 17 open, no overlap LearningCircuit 2026-08-21 00:00:42 +02:00
  • bc24a446b1 test(security): close ADR-0010 Tier 2 rows 6-8 (followup SSRF, #3800 leak, spoofing) LearningCircuit 2026-08-20 23:45:51 +02:00
  • f9f576643a test(security): close ADR-0010 Tier 2 rows 17-22 (/api/v1 boundary, socket edges) LearningCircuit 2026-08-20 23:44:42 +02:00
  • be6eb9d6eb docs(adr-0010): move metrics rows 14-16 to closed LearningCircuit 2026-08-20 23:22:19 +02:00
  • 453d6f0d75 test(migration): verify every COVERED citation in ADR-0010 still resolves LearningCircuit 2026-08-20 23:20:18 +02:00
  • 50bdcf8945 test(security): add messaging and storage guard suites fix/frontend-security-xss-hardening LearningCircuit 2026-08-20 22:55:27 +02:00
  • f2aeaf85b8 fix(security): validate rerun mode via attribute comparison LearningCircuit 2026-08-20 22:55:24 +02:00
  • 9b1ae5f855 fix(security): add reparse inspection to sanitizers and prefix clobbering ids LearningCircuit 2026-08-20 22:55:21 +02:00
  • c3a5c18f41 chore: rename changelog fragment to PR number (#5648) fix/engine-url-guard-ux LearningCircuit 2026-08-20 22:50:21 +02:00
  • 93f36dcae0 feat(ux): surface engine-URL guard state across the web UI LearningCircuit 2026-08-20 22:49:54 +02:00
  • f9263f1932 chore: rename changelog fragment to PR number (#5647) LearningCircuit 2026-08-20 22:23:05 +02:00
  • 64a6b063e7 docs: name v1.10.5 as the allowlist's minimum version LearningCircuit 2026-08-20 22:22:44 +02:00
  • 956f4f99c5 🤖 Update dependencies (#5643) github-actions[bot] 2026-08-20 21:53:39 +02:00
  • 9a4945fde6 🤖 Update dependencies (#5644) github-actions[bot] 2026-08-20 21:52:58 +02:00
  • 1ed9af13d8 test(security): add library search and misc surface XSS regression suites LearningCircuit 2026-08-20 21:49:05 +02:00
  • 600d145929 fix(security): coerce folder counts and refresh intervals in subscription manager LearningCircuit 2026-08-20 21:49:03 +02:00
  • 8496323539 fix(security): delegate research form dismiss handling instead of inline onclick LearningCircuit 2026-08-20 21:49:01 +02:00
  • 62707430ad fix(test): stop the hostile-username filesystem check failing on other tests' writes LearningCircuit 2026-08-20 21:33:21 +02:00
  • ff906033ac wip: priority middleware rework for weighted queue feature/ldr-weight-priority LearningCircuit 2026-08-20 21:11:32 +02:00
  • b4cf525d0a wip: structured secret handling for settings write-backs salvage/ldr5-structured-secrets-wip LearningCircuit 2026-08-20 21:10:52 +02:00
  • 96e1e43015 fix(logging): omit queries from empty search events LearningCircuit 2026-07-19 19:56:35 +02:00
  • 1653f70ab5 docs(adr-0010): record the scope limits of the Tier 2 closures LearningCircuit 2026-08-20 20:56:21 +02:00
  • a4e570d752 test(security): drop session_password_store entries on teardown; fix line refs LearningCircuit 2026-08-20 20:55:58 +02:00
  • 190f63cf78 Merge remote-tracking branch 'origin/main' into pr3299-merge LearningCircuit 2026-08-20 20:54:37 +02:00
  • 3d9dfc9b84 docs(adr-0010): record the Tier 2 items closed since the register was written LearningCircuit 2026-08-20 20:52:36 +02:00
  • a0029ff991 test(security): real coverage for research_service, replacing tests that copy it LearningCircuit 2026-08-20 20:52:16 +02:00
  • 05a1826e74 test(security): add chat headers and deletion XSS regression suites LearningCircuit 2026-08-20 20:39:33 +02:00
  • 39345da92f fix(security): encode collection id in upload view link LearningCircuit 2026-08-20 20:39:30 +02:00
  • df9cedbcf0 fix(security): escape attribute contexts and coerce rates in context overflow panel LearningCircuit 2026-08-20 20:39:25 +02:00
  • aa30afed0f 🤖 Update dependencies (#5635) github-actions[bot] 2026-08-20 20:19:27 +02:00
  • 8e71274227 fix(ci): rename SECRET_KEY test constant that tripped the file-whitelist scanner LearningCircuit 2026-08-20 13:01:22 +02:00
  • f7a966fa36 test(security): an encrypted DB must never open with the unencrypted placeholder LearningCircuit 2026-08-20 12:56:33 +02:00