mathias
85f4cc3236
Merge pull request 'v0.32.0: per-recording delete and nav link, cloud-served note, tracker hardening, bounded LLM reads ( #37 #51 #52 #53 )' ( #58 ) from sprint/v032 into main
CI / Deploy via GitOps (push) Successful in 5s
CI / Lint / Test / Vet (push) Successful in 34s
CI / Build & Import (push) Successful in 11s
2026-10-03 22:31:26 +00:00
mathias and Claude Sonnet 5.5
41ab1f5d50
fix(web): take the reconciled endpoint apart exactly, so a connector word used as a model name is still judged ( #52 )
...
CI / Lint / Test / Vet (pull_request) Successful in 35s
CI / Build & Import (pull_request) Skipped
CI / Deploy via GitOps (pull_request) Skipped
Skipping 'by', 'reconciled' and '+' as words everywhere let an alias with one of those
names pass as local. The two-engine shape is now split on its own separators and each alias
judged whole; a reconciler that is not local is pinned too. Hardening suggested by the third
PR #58 review.
Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com >
2026-10-04 00:28:09 +02:00
mathias and Claude Sonnet 5.5
67bd0350a3
fix(web): judge every word of a reconciled endpoint that is not a connector, so an unprefixed alias is not called local ( #52 )
...
CI / Lint / Test / Vet (pull_request) Successful in 33s
CI / Build & Import (pull_request) Skipped
CI / Deploy via GitOps (pull_request) Skipped
The previous version kept only words containing '/' and dropped the rest, so a bare
TAPIR_TRANSCRIBE_MODEL alias in the composite produced a false 'all local' result. Found
by the PR #58 re-review; red tests for a bare alias, an alias with a space and a split
'berget / x' first.
Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com >
2026-10-04 00:22:41 +02:00
mathias and Claude Sonnet 5.5
c24573bd9f
docs: state what the save timeout and a racing delete actually guarantee ( #51 , #37 )
...
CI / Lint / Test / Vet (pull_request) Successful in 29s
CI / Build & Import (pull_request) Skipped
CI / Deploy via GitOps (pull_request) Skipped
The tracker comment said 'never a stalled job'; each transition can wait up to the timeout.
The delete refusal is judged at the moment of the attempt. Found by the PR #58 review.
Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com >
2026-10-03 21:32:14 +02:00
mathias and Claude Sonnet 5.5
fc1e8e7ba8
test(web): a foreign post to the recording delete route leaves the recording, on an app that mounts uploads ( #37 , #48 )
...
The earlier entry posted to an app without uploads, where the route does not exist, and
stayed green with the route removed. This one seeds a finished row and goes red without the
gate. Found by the PR #58 review.
Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com >
2026-10-03 21:32:14 +02:00
mathias and Claude Sonnet 5.5
4a0226d8bd
test(llm): the response cap is pinned at its boundary and as the production default ( #53 )
...
Only the 8-byte override was exercised; >= vs >, a huge default and a non-positive option
all stayed green. Also says why the error-body read ignores its error. Found by the PR #58
review.
Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com >
2026-10-03 21:31:30 +02:00
mathias and Claude Sonnet 5.5
2e54d80a78
test(uploads): jobSink forwards the tracker's timestamp to the store ( #51 )
...
The worker fake ignored the heartbeat time, so the store-boundary half of the app-clock
fix had no assertion. Found by the PR #58 review.
Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com >
2026-10-03 21:31:14 +02:00
mathias and Claude Sonnet 5.5
01c1606caa
test(progress): the default save and heartbeat deadline is pinned, not only the override ( #51 )
...
Every earlier test passed WithSaveTimeout; the worker passes nothing, so the 5 s default
was the only production value and a flip to 0, 1ms or 1h stayed green. Found by the PR #58
review; each flip is now red.
Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com >
2026-10-03 21:30:58 +02:00
mathias and Claude Sonnet 5.5
9aa01468ce
fix(web): judge each alias of a reconciled endpoint, so an all-local transcript is not called cloud-served ( #52 )
...
The two-engine path writes '<base> + <alt>, reconciled by <model>'. IsLocalModel is a
single-alias match, so the composite was 'not local' and the note claimed the audio left
the homelab, naming a local host as the provider. Found by the PR #58 review.
Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com >
2026-10-03 21:30:44 +02:00
mathias and Claude Sonnet 5.5
25628a9994
test(web): the per-recording delete route is covered by the cross-origin gate ( #37 , #48 )
...
CI / Lint / Test / Vet (pull_request) Successful in 30s
CI / Build & Import (pull_request) Skipped
CI / Deploy via GitOps (pull_request) Skipped
Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com >
2026-10-03 21:22:24 +02:00
mathias and Claude Sonnet 5.5
a6691ac46b
docs: per-recording delete and the recordings link are built; feature scenarios and coverage map ( #37 )
...
Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com >
2026-10-03 21:22:17 +02:00
mathias and Claude Sonnet 5.5
c909b4e775
feat(web): confirm-then-delete control on a finished or failed recording ( #37 )
...
Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com >
2026-10-03 21:22:17 +02:00
mathias and Claude Sonnet 5.5
f309a39027
feat(web): POST /uploads/{id}/delete, owner-scoped and refused while the recording is active ( #37 )
...
Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com >
2026-10-03 21:22:17 +02:00
mathias and Claude Sonnet 5.5
89611164e3
test(web): per-recording delete is owner-scoped, refused while active, offered only when finished ( #37 ), red
...
Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com >
2026-10-03 21:22:17 +02:00
mathias and Claude Sonnet 5.5
93860210ef
feat(store): DeleteUpload removes a finished upload of the owner ( #37 )
...
Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com >
2026-10-03 21:22:17 +02:00
mathias and Claude Sonnet 5.5
8509004eb7
test(store): an owner can delete a finished upload; an active or foreign one is refused ( #37 ), red
...
Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com >
2026-10-03 21:22:17 +02:00
mathias and Claude Sonnet 5.5
453464a22b
feat(web): the home list links to recordings when uploads are mounted ( #37 )
...
Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com >
2026-10-03 21:22:17 +02:00
mathias and Claude Sonnet 5.5
4ef3e85d16
test(web): the home list links to recordings only when uploads are mounted ( #37 ), red
...
Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com >
2026-10-03 21:22:17 +02:00
mathias and Claude Sonnet 5.5
b8af7f32c7
fix(progress): stamp the heartbeat with the application clock the page compares it with ( #51 )
...
Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com >
2026-10-03 21:22:17 +02:00
mathias and Claude Sonnet 5.5
813192e5ba
test: heartbeats are stamped with the application clock, not the database's NOW() ( #51 ), red
...
Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com >
2026-10-03 21:22:17 +02:00
mathias and Claude Sonnet 5.5
2ec1557a8c
fix(progress): bound every save and heartbeat write so a hung database cannot stall the job ( #51 )
...
Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com >
2026-10-03 21:22:17 +02:00
mathias and Claude Sonnet 5.5
68815755e8
test(progress): a hung save or beat must not stall the reporter or the heartbeat ( #51 ), red
...
Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com >
2026-10-03 21:22:17 +02:00
mathias and Claude Sonnet 5.5
ba18668796
docs(feature): cloud-served transcripts say the audio left the homelab; empty transcript also triggers the fallback ( #52 )
...
Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com >
2026-10-03 21:22:17 +02:00
mathias and Claude Sonnet 5.5
a65f2f2492
feat(web): say in plain words when a recording's audio left the homelab ( #52 )
...
Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com >
2026-10-03 21:22:17 +02:00
mathias and Claude Sonnet 5.5
a43ee19505
feat(web): helper naming the cloud provider of a transcript, one definition of local ( #52 )
...
Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com >
2026-10-03 21:22:17 +02:00
mathias and Claude Sonnet 5.5
4301e691f5
test(web): a cloud-served transcript says the audio left the homelab ( #52 ), red
...
Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com >
2026-10-03 21:22:17 +02:00
mathias and Claude Sonnet 5.5
61d1ff2255
fix(llm): read a bounded response body, 8 MiB on success and the error bound on failure ( #53 )
...
Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com >
2026-10-03 21:22:17 +02:00
mathias and Claude Sonnet 5.5
9cc954df40
test(llm): the client reads a bounded response body, success and error ( #53 ), red
...
Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com >
2026-10-03 21:22:17 +02:00
mathias
e037c6b683
Merge pull request 'v0.31.1: cross-origin POST protection, ffprobe/ffmpeg limits, receive cap, SIGTERM, lint gate ( #41 #47 #48 #49 #50 )' ( #55 ) from sprint/audio-followups into main
CI / Deploy via GitOps (push) Successful in 6s
CI / Lint / Test / Vet (push) Successful in 30s
CI / Build & Import (push) Successful in 10s
2026-10-03 19:19:55 +00:00
mathias and Claude Sonnet 5.5
5baffd0189
fix(test): strip colour codes before looking for the lint skip notice (CI run 8937)
...
CI / Lint / Test / Vet (pull_request) Successful in 30s
CI / Build & Import (pull_request) Skipped
CI / Deploy via GitOps (pull_request) Skipped
Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com >
2026-10-03 21:18:05 +02:00
mathias and Claude Sonnet 5.5
228bcc77da
test(lint): the skip notice is found behind CI's colour codes, red
...
Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com >
2026-10-03 21:18:01 +02:00
mathias and Claude Sonnet 5.5
4ef446548d
docs(adr): spool arithmetic and the unbounded slow-drip limitation for the receive cap ( #47 )
...
CI / Lint / Test / Vet (pull_request) Failing after 30s
CI / Build & Import (pull_request) Skipped
CI / Deploy via GitOps (pull_request) Skipped
Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com >
2026-10-03 21:12:48 +02:00
mathias and Claude Sonnet 5.5
145949875e
fix(audio): keep a bounded head of ffmpeg's output instead of buffering all of it ( #49 )
...
Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com >
2026-10-03 21:12:48 +02:00
mathias and Claude Sonnet 5.5
82aeac7c19
fix(store): FailUpload only fails a queued or transcribing upload (review of #55 )
...
Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com >
2026-10-03 21:12:48 +02:00
mathias and Claude Sonnet 5.5
1b4747ed03
test: FailUpload must not overwrite a finished upload; ffmpeg stderr is bounded, red (review of #55 )
...
Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com >
2026-10-03 21:12:34 +02:00
mathias and Claude Sonnet 5.5
9939afb90c
test: pin the production receive limits, split the vacuous drain test, harden the lint-gate test (review of #55 )
...
Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com >
2026-10-03 21:12:34 +02:00
mathias and Claude Sonnet 5.5
3e69c00a64
docs(adr): ADR-033 amended for SIGTERM handling and the recorded deploy limitation ( #50 , #47 )
...
CI / Lint / Test / Vet (pull_request) Failing after 31s
CI / Build & Import (pull_request) Skipped
CI / Deploy via GitOps (pull_request) Skipped
Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com >
2026-10-03 21:00:55 +02:00
mathias and Claude Sonnet 5.5
253aa567aa
fix(serve): handle SIGTERM and wait for in-flight requests and the worker before exiting ( #50 )
...
Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com >
2026-10-03 21:00:55 +02:00
mathias and Claude Sonnet 5.5
5644dc3fc8
fix(uploads): record a job interrupted by shutdown at once, on its own short context ( #50 )
...
Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com >
2026-10-03 21:00:55 +02:00
mathias and Claude Sonnet 5.5
7df1de6628
test(serve): shutdown waits for in-flight requests and the worker, bounded ( #50 ), red
...
Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com >
2026-10-03 20:59:57 +02:00
mathias and Claude Sonnet 5.5
7e920102f6
test: SIGTERM cancels the process context; a shutdown mid-job records the row interrupted at once ( #50 ), red
...
Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com >
2026-10-03 20:59:40 +02:00
mathias and Claude Sonnet 5.5
480c7227b5
fix(uploads): bound concurrent request-body receives, 4 total and 2 per user ( #47 )
...
Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com >
2026-10-03 20:59:09 +02:00
mathias and Claude Sonnet 5.5
0eb3be9631
test(uploads): concurrent receives are bounded in total and per user ( #47 ), red
...
Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com >
2026-10-03 20:57:31 +02:00
mathias and Claude Sonnet 5.5
e8c5ac50bf
fix(audio): give ffprobe its own 45s deadline, a timeout is the file's fault ( #49 )
...
Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com >
2026-10-03 20:56:58 +02:00
mathias and Claude Sonnet 5.5
6101dd4e2f
test(audio): a hung ffprobe times out on its own deadline as unreadable ( #49 ), red
...
Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com >
2026-10-03 20:56:47 +02:00
mathias and Claude Sonnet 5.5
089444c19f
fix(audio): stop reading ffprobe output past a cap and call the file unreadable ( #49 )
...
Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com >
2026-10-03 20:56:47 +02:00
mathias and Claude Sonnet 5.5
d44db88787
test(audio): ffprobe output past a cap is unreadable, not buffered ( #49 ), red
...
Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com >
2026-10-03 20:56:37 +02:00
mathias and Claude Sonnet 5.5
1f8bd849fe
fix(audio): cap ffprobe/ffmpeg streams at 32 and narrow the probe output ( #49 )
...
A 900-stream file cost ~570 MB RSS in each tool; with the cap the same file fails
in ~18 MB and is reported as unreadable.
Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com >
2026-10-03 20:56:28 +02:00
mathias and Claude Sonnet 5.5
7b19801bfa
test(audio): ffprobe/ffmpeg must cap streams, ffprobe must narrow its output ( #49 ), red
...
Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com >
2026-10-03 20:55:54 +02:00
mathias and Claude Sonnet 5.5
1260500d32
fix(web): refuse cross-origin non-safe requests at the router ( #48 )
...
Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com >
2026-10-03 20:55:19 +02:00
