block 1: critical ship-blockers (upload cap, auth hardening, bounded workq, scoped search)#60

Merged

aksOps merged 16 commits intomainfrom

feat/block1-critical

Apr 23, 2026

Commits on Apr 23, 2026

feat(api): cap multipart upload size via MaxBytesReader

aksOps
and
claude
committed
fix(api): address Task 1 code-review feedback

aksOps
and
claude
committed
feat(serve): refuse insecure default on non-loopback bind

aksOps
and
claude
committed
fix(serve): address Task 2 code-review feedback

aksOps
and
claude
committed
feat(workq): bounded worker pool with graceful drain

aksOps
and
claude
committed
fix(workq): guard Submit against send-on-closed-channel race

aksOps
and
claude
committed
feat(api): submit upload indexing through workq with graceful drain

aksOps
and
claude
committed
fix(api): address Task 4 code-review follow-ups

aksOps
and
claude
committed
chore(api): silence unused-parameter lint in upload_workq_test

aksOps
and
claude
committed
feat(api): session cookie path alongside bearer auth

aksOps
and
claude
committed
fix(api): defense-in-depth symmetry for session auth

aksOps
and
claude
committed
feat(ui): cookie-based auth; stop reading bearer from DOM

aksOps
and
claude
committed
fix(ui): surface session-exchange failures, scrub meta tag first

aksOps
and
claude
committed
fix(api): stop injecting API key into served HTML

aksOps
and
claude
committed
perf(search): scope entity fetch to top-hit docs in local search

aksOps
and
claude
committed
fix(ui): drop legacy meta-tag read in MCP hook, use cookie auth

aksOps
and
claude
committed