Fix 21 safety and reliability defects found by audit - #131

Merged

dovvnloading merged 34 commits into

mainfrom

codex/qa-reliability-pass-2

Aug 15, 2026

Commits on Aug 12, 2026

fix: harden generation lifecycle and frontend builds
dovvnloading
committed
eda80ad

Commits on Aug 15, 2026

fix: lock PermanentMemoryManager read-modify-write-save sequences
dovvnloading
committed
9f07146
fix: bound the shared ollama client with an explicit http timeout
dovvnloading
committed
ed2774e
fix: slow the native window monitor and switch it to the liveness route
dovvnloading
committed
de55f9f
fix: cache binary directory verification on unchanged tree identity
dovvnloading
committed
12b50c1
fix: encode credentials before hmac.compare_digest to avoid 500 on non-ASCII input

dovvnloading
and
claude
committed
8563243
fix: reclaim stale frontend build staging dirs and cache npm installs
dovvnloading
committed
3512121
fix: preserve the configured chat model when the inventory is empty
dovvnloading
committed
b4bc2dc
fix: migrate per-chat generation overrides to the real thread id
dovvnloading
committed
b7ac041
fix: stop remounting the virtualized streaming bubble every frame
dovvnloading
committed
3a4d537
Merge branch 'worktree-wf_5c33af9a-5e3-1' into fix/reliability-quickfixes-batch
dovvnloading
committed
9ca85cd
Merge branch 'worktree-wf_5c33af9a-5e3-2' into fix/reliability-quickfixes-batch
dovvnloading
committed
9db09fb
Merge branch 'worktree-wf_5c33af9a-5e3-3' into fix/reliability-quickfixes-batch
dovvnloading
committed
5d7db94
Merge branch 'worktree-wf_5c33af9a-5e3-4' into fix/reliability-quickfixes-batch
dovvnloading
committed
a5d0296
Merge branch 'worktree-wf_5c33af9a-5e3-5' into fix/reliability-quickfixes-batch
dovvnloading
committed
15231aa
Merge branch 'worktree-wf_5c33af9a-5e3-6' into fix/reliability-quickfixes-batch
dovvnloading
committed
9c20725
fix: use a valid connection status in the empty-inventory test
dovvnloading
committed
fb192cc
fix: type the react-virtuoso test double instead of using any
dovvnloading
committed
e525117
fix: stop the context-budget allocator from discarding history and starving attachments

dovvnloading
and
claude
committed
1bf5ac2
Merge pull request #125 from dovvnloading/fix/reliability-quickfixes-batch
dovvnloading
authored
337cfdf
Merge pull request #126 from dovvnloading/fix/context-window-budgeting
dovvnloading
authored
a5ec42b
fix: bound generation shutdown so llama-server is never orphaned on exit

dovvnloading
and
claude
committed
705cac4
Merge pull request #127 from dovvnloading/fix/generation-shutdown-hang
dovvnloading
authored
3136dd9
fix: thread cancellation into the chat-client call so Stop actually stops

dovvnloading
and
claude
committed
ef4609f
Merge pull request #128 from dovvnloading/fix/generation-cancellation
dovvnloading
authored
fa6eee8
fix: harden llama-server process lifecycle (orphans, locking, GPU bans)

dovvnloading
and
claude
committed
a66a928
Merge pull request #129 from dovvnloading/fix/llamacpp-process-lifecycle
dovvnloading
authored
3ce6ee6
fix: slide the session expiry forward on every authenticated request

dovvnloading
and
claude
committed
48d8482
Merge pull request #130 from dovvnloading/fix/session-auth-lifecycle
dovvnloading
authored
137dbdf
fix: stop the SSE replay from printing the answer twice on remount

dovvnloading
and
claude
committed
ffcb23b
fix: pin the vetted address so DNS rebinding cannot defeat the network guard

dovvnloading
and
claude
committed
90deff7
fix: give settings their own database instead of the chat one

dovvnloading
and
claude
committed
0d1cfad
Merge branch 'fix/network-capability-dns-rebinding' into codex/qa-reliability-pass-2
dovvnloading
committed
0c24de8
Merge branch 'fix/settings-storage-separation' into codex/qa-reliability-pass-2
dovvnloading
committed
4d443b5

Navigation Menu

Fix 21 safety and reliability defects found by audit - #131

Fix 21 safety and reliability defects found by audit#131
dovvnloading merged 34 commits into
mainfrom
codex/qa-reliability-pass-2

Commits on Aug 12, 2026

fix: harden generation lifecycle and frontend builds

Commits on Aug 15, 2026

fix: lock PermanentMemoryManager read-modify-write-save sequences

fix: bound the shared ollama client with an explicit http timeout

fix: slow the native window monitor and switch it to the liveness route

fix: cache binary directory verification on unchanged tree identity

fix: encode credentials before hmac.compare_digest to avoid 500 on non-ASCII input

fix: reclaim stale frontend build staging dirs and cache npm installs

fix: preserve the configured chat model when the inventory is empty

fix: migrate per-chat generation overrides to the real thread id

fix: stop remounting the virtualized streaming bubble every frame

Merge branch 'worktree-wf_5c33af9a-5e3-1' into fix/reliability-quickfixes-batch

Merge branch 'worktree-wf_5c33af9a-5e3-2' into fix/reliability-quickfixes-batch

Merge branch 'worktree-wf_5c33af9a-5e3-3' into fix/reliability-quickfixes-batch

Merge branch 'worktree-wf_5c33af9a-5e3-4' into fix/reliability-quickfixes-batch

Merge branch 'worktree-wf_5c33af9a-5e3-5' into fix/reliability-quickfixes-batch

Merge branch 'worktree-wf_5c33af9a-5e3-6' into fix/reliability-quickfixes-batch

fix: use a valid connection status in the empty-inventory test

fix: type the react-virtuoso test double instead of using any

fix: stop the context-budget allocator from discarding history and starving attachments

Merge pull request #125 from dovvnloading/fix/reliability-quickfixes-batch

Merge pull request #126 from dovvnloading/fix/context-window-budgeting

fix: bound generation shutdown so llama-server is never orphaned on exit

Merge pull request #127 from dovvnloading/fix/generation-shutdown-hang

fix: thread cancellation into the chat-client call so Stop actually stops

Merge pull request #128 from dovvnloading/fix/generation-cancellation

fix: harden llama-server process lifecycle (orphans, locking, GPU bans)

Merge pull request #129 from dovvnloading/fix/llamacpp-process-lifecycle

fix: slide the session expiry forward on every authenticated request

Merge pull request #130 from dovvnloading/fix/session-auth-lifecycle

fix: stop the SSE replay from printing the answer twice on remount

fix: pin the vetted address so DNS rebinding cannot defeat the network guard

fix: give settings their own database instead of the chat one

Merge branch 'fix/network-capability-dns-rebinding' into codex/qa-reliability-pass-2

Merge branch 'fix/settings-storage-separation' into codex/qa-reliability-pass-2