lukaszraczylo eaf7c4ddca fix(worker): key rate limiter on peer IP, not forged headers ...

The rate limiter trusted X-Real-IP, so a client could dodge its limit by
sending a new header value on each request. It must key on the connection
peer address. The key also strips the port, so one client shares one bucket.

2026-10-03 12:02:17 +01:00

..

config

fix: bound SQLite WAL growth and prevent worker hangs (#49)

2026-06-01 16:40:27 +01:00

db

fix(lint): clear the staticcheck findings

2026-10-03 05:00:27 +01:00

embedding

fix(deps): bundle ONNX Runtime 1.30.0 and bump onnxruntime_go to v1.36.0

2026-09-30 01:55:28 +01:00

graph

fix: plugin no longer vanishes after Claude Code updates

2026-05-24 01:56:54 +01:00

maintenance

style: apply gofmt

2026-06-19 14:26:36 +01:00

mcp

refactor(mcp): reduce exposed tools 42->4 via action dispatch

2026-06-19 14:26:33 +01:00

models

fix(models): handle cleanup errors and add download tests

2026-06-19 14:26:35 +01:00

pattern

mnemonic ralphised (#24)

2026-01-11 12:41:28 +00:00

privacy

Make things 'betterer' across the board (#23)

2026-01-11 01:51:20 +00:00

reranking

refactor: extract magic numbers to named constants

2026-06-19 14:26:36 +01:00

scoring

refactor: extract magic numbers to named constants

2026-06-19 14:26:36 +01:00

search

fix: address 15 additional hang vectors found during deep audit (#45)

2026-05-26 14:29:34 +01:00

update

style: apply gofmt

2026-06-19 14:26:36 +01:00

vector

fix: address 15 additional hang vectors found during deep audit (#45)

2026-05-26 14:29:34 +01:00

watcher

fix: plugin no longer vanishes after Claude Code updates

2026-05-24 01:56:54 +01:00

worker

fix(worker): key rate limiter on peer IP, not forged headers

2026-10-03 12:02:17 +01:00