327 Commits

This Branch

This Branch

All Branches

Author	SHA1	Message	Date
mathiasandClaude Opus 5.5	cace7d179d	fix(deps): bump x/text past GO-2026-5970 ... govulncheck reported GO-2026-5970 as called via golang.org/x/text v0.31.0 (reached through the DB driver). Bump to v0.39.0; x/sync moves to v0.21.0 as its required minimum. govulncheck ./...: 0 vulnerabilities. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> v0.32.1	2026-10-04 22:52:55 +02:00
mathiasandClaude Opus 5.5	550764d43c	fix(oidc): retry issuer discovery with bounded back-off at start-up ... A 503 from the issuer's discovery endpoint made `serve` exit and the pod restart. New now retries discovery 5 times (2+4+8+16 s back-off, ~30 s) before failing as before; a cancelled ctx ends the back-off at once. WithDiscoveryRetry lets tests shrink the schedule. Closes #59 Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>	2026-10-04 22:52:26 +02:00
mathiasandClaude Sonnet 5.5	4affeb12e8	docs: ADR-034 second blind check protocol; D8 decided (Berget allowed, per-recording local-only opt-out first, #60); #37 verified ... Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-10-04 08:47:10 +02:00
mathiasandClaude Sonnet 5.5	460e07719d	docs(sprint): #50 observed live (old pod Completed); #37 and #52 wait for an authenticated look ... Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-10-04 00:41:07 +02:00
mathiasandClaude Sonnet 5.5	7b7da650d4	docs(sprint): v0.31.1 and v0.32.0 shipped; what is observed live and what waits for an authenticated look ... Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-10-04 00:34:59 +02:00
mathias	85f4cc3236	Merge pull request 'v0.32.0: per-recording delete and nav link, cloud-served note, tracker hardening, bounded LLM reads (#37 #51 #52 #53)' (#58) from sprint/v032 into main v0.32.0	2026-10-03 22:31:26 +00:00
mathiasandClaude Sonnet 5.5	41ab1f5d50	fix(web): take the reconciled endpoint apart exactly, so a connector word used as a model name is still judged (#52) ... Skipping 'by', 'reconciled' and '+' as words everywhere let an alias with one of those names pass as local. The two-engine shape is now split on its own separators and each alias judged whole; a reconciler that is not local is pinned too. Hardening suggested by the third PR #58 review. Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-10-04 00:28:09 +02:00
mathiasandClaude Sonnet 5.5	67bd0350a3	fix(web): judge every word of a reconciled endpoint that is not a connector, so an unprefixed alias is not called local (#52) ... The previous version kept only words containing '/' and dropped the rest, so a bare TAPIR_TRANSCRIBE_MODEL alias in the composite produced a false 'all local' result. Found by the PR #58 re-review; red tests for a bare alias, an alias with a space and a split 'berget / x' first. Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-10-04 00:22:41 +02:00
mathiasandClaude Sonnet 5.5	c24573bd9f	docs: state what the save timeout and a racing delete actually guarantee (#51, #37) ... The tracker comment said 'never a stalled job'; each transition can wait up to the timeout. The delete refusal is judged at the moment of the attempt. Found by the PR #58 review. Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-10-03 21:32:14 +02:00
mathiasandClaude Sonnet 5.5	fc1e8e7ba8	test(web): a foreign post to the recording delete route leaves the recording, on an app that mounts uploads (#37, #48) ... The earlier entry posted to an app without uploads, where the route does not exist, and stayed green with the route removed. This one seeds a finished row and goes red without the gate. Found by the PR #58 review. Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-10-03 21:32:14 +02:00
mathiasandClaude Sonnet 5.5	4a0226d8bd	test(llm): the response cap is pinned at its boundary and as the production default (#53) ... Only the 8-byte override was exercised; >= vs >, a huge default and a non-positive option all stayed green. Also says why the error-body read ignores its error. Found by the PR #58 review. Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-10-03 21:31:30 +02:00
mathiasandClaude Sonnet 5.5	2e54d80a78	test(uploads): jobSink forwards the tracker's timestamp to the store (#51) ... The worker fake ignored the heartbeat time, so the store-boundary half of the app-clock fix had no assertion. Found by the PR #58 review. Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-10-03 21:31:14 +02:00
mathiasandClaude Sonnet 5.5	01c1606caa	test(progress): the default save and heartbeat deadline is pinned, not only the override (#51) ... Every earlier test passed WithSaveTimeout; the worker passes nothing, so the 5 s default was the only production value and a flip to 0, 1ms or 1h stayed green. Found by the PR #58 review; each flip is now red. Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-10-03 21:30:58 +02:00
mathiasandClaude Sonnet 5.5	9aa01468ce	fix(web): judge each alias of a reconciled endpoint, so an all-local transcript is not called cloud-served (#52) ... The two-engine path writes '<base> + <alt>, reconciled by <model>'. IsLocalModel is a single-alias match, so the composite was 'not local' and the note claimed the audio left the homelab, naming a local host as the provider. Found by the PR #58 review. Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-10-03 21:30:44 +02:00
mathiasandClaude Sonnet 5.5	25628a9994	test(web): the per-recording delete route is covered by the cross-origin gate (#37, #48) ... Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-10-03 21:22:24 +02:00
mathiasandClaude Sonnet 5.5	a6691ac46b	docs: per-recording delete and the recordings link are built; feature scenarios and coverage map (#37) ... Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-10-03 21:22:17 +02:00
mathiasandClaude Sonnet 5.5	c909b4e775	feat(web): confirm-then-delete control on a finished or failed recording (#37) ... Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-10-03 21:22:17 +02:00
mathiasandClaude Sonnet 5.5	f309a39027	feat(web): POST /uploads/{id}/delete, owner-scoped and refused while the recording is active (#37) ... Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-10-03 21:22:17 +02:00
mathiasandClaude Sonnet 5.5	89611164e3	test(web): per-recording delete is owner-scoped, refused while active, offered only when finished (#37), red ... Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-10-03 21:22:17 +02:00
mathiasandClaude Sonnet 5.5	93860210ef	feat(store): DeleteUpload removes a finished upload of the owner (#37) ... Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-10-03 21:22:17 +02:00
mathiasandClaude Sonnet 5.5	8509004eb7	test(store): an owner can delete a finished upload; an active or foreign one is refused (#37), red ... Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-10-03 21:22:17 +02:00
mathiasandClaude Sonnet 5.5	453464a22b	feat(web): the home list links to recordings when uploads are mounted (#37) ... Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-10-03 21:22:17 +02:00
mathiasandClaude Sonnet 5.5	4ef3e85d16	test(web): the home list links to recordings only when uploads are mounted (#37), red ... Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-10-03 21:22:17 +02:00
mathiasandClaude Sonnet 5.5	b8af7f32c7	fix(progress): stamp the heartbeat with the application clock the page compares it with (#51) ... Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-10-03 21:22:17 +02:00
mathiasandClaude Sonnet 5.5	813192e5ba	test: heartbeats are stamped with the application clock, not the database's NOW() (#51), red ... Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-10-03 21:22:17 +02:00
mathiasandClaude Sonnet 5.5	2ec1557a8c	fix(progress): bound every save and heartbeat write so a hung database cannot stall the job (#51) ... Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-10-03 21:22:17 +02:00
mathiasandClaude Sonnet 5.5	68815755e8	test(progress): a hung save or beat must not stall the reporter or the heartbeat (#51), red ... Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-10-03 21:22:17 +02:00
mathiasandClaude Sonnet 5.5	ba18668796	docs(feature): cloud-served transcripts say the audio left the homelab; empty transcript also triggers the fallback (#52) ... Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-10-03 21:22:17 +02:00
mathiasandClaude Sonnet 5.5	a65f2f2492	feat(web): say in plain words when a recording's audio left the homelab (#52) ... Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-10-03 21:22:17 +02:00
mathiasandClaude Sonnet 5.5	a43ee19505	feat(web): helper naming the cloud provider of a transcript, one definition of local (#52) ... Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-10-03 21:22:17 +02:00
mathiasandClaude Sonnet 5.5	4301e691f5	test(web): a cloud-served transcript says the audio left the homelab (#52), red ... Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-10-03 21:22:17 +02:00
mathiasandClaude Sonnet 5.5	61d1ff2255	fix(llm): read a bounded response body, 8 MiB on success and the error bound on failure (#53) ... Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-10-03 21:22:17 +02:00
mathiasandClaude Sonnet 5.5	9cc954df40	test(llm): the client reads a bounded response body, success and error (#53), red ... Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-10-03 21:22:17 +02:00
mathias	e037c6b683	Merge pull request 'v0.31.1: cross-origin POST protection, ffprobe/ffmpeg limits, receive cap, SIGTERM, lint gate (#41 #47 #48 #49 #50)' (#55) from sprint/audio-followups into main v0.31.1	2026-10-03 19:19:55 +00:00
mathiasandClaude Sonnet 5.5	5baffd0189	fix(test): strip colour codes before looking for the lint skip notice (CI run 8937) ... Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-10-03 21:18:05 +02:00
mathiasandClaude Sonnet 5.5	228bcc77da	test(lint): the skip notice is found behind CI's colour codes, red ... Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-10-03 21:18:01 +02:00
mathiasandClaude Sonnet 5.5	4ef446548d	docs(adr): spool arithmetic and the unbounded slow-drip limitation for the receive cap (#47) ... Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-10-03 21:12:48 +02:00
mathiasandClaude Sonnet 5.5	145949875e	fix(audio): keep a bounded head of ffmpeg's output instead of buffering all of it (#49) ... Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-10-03 21:12:48 +02:00
mathiasandClaude Sonnet 5.5	82aeac7c19	fix(store): FailUpload only fails a queued or transcribing upload (review of #55) ... Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-10-03 21:12:48 +02:00
mathiasandClaude Sonnet 5.5	1b4747ed03	test: FailUpload must not overwrite a finished upload; ffmpeg stderr is bounded, red (review of #55) ... Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-10-03 21:12:34 +02:00
mathiasandClaude Sonnet 5.5	9939afb90c	test: pin the production receive limits, split the vacuous drain test, harden the lint-gate test (review of #55) ... Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-10-03 21:12:34 +02:00
mathiasandClaude Sonnet 5.5	3e69c00a64	docs(adr): ADR-033 amended for SIGTERM handling and the recorded deploy limitation (#50, #47) ... Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-10-03 21:00:55 +02:00
mathiasandClaude Sonnet 5.5	253aa567aa	fix(serve): handle SIGTERM and wait for in-flight requests and the worker before exiting (#50) ... Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-10-03 21:00:55 +02:00
mathiasandClaude Sonnet 5.5	5644dc3fc8	fix(uploads): record a job interrupted by shutdown at once, on its own short context (#50) ... Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-10-03 21:00:55 +02:00
mathiasandClaude Sonnet 5.5	7df1de6628	test(serve): shutdown waits for in-flight requests and the worker, bounded (#50), red ... Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-10-03 20:59:57 +02:00
mathiasandClaude Sonnet 5.5	7e920102f6	test: SIGTERM cancels the process context; a shutdown mid-job records the row interrupted at once (#50), red ... Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-10-03 20:59:40 +02:00
mathiasandClaude Sonnet 5.5	480c7227b5	fix(uploads): bound concurrent request-body receives, 4 total and 2 per user (#47) ... Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-10-03 20:59:09 +02:00
mathiasandClaude Sonnet 5.5	0eb3be9631	test(uploads): concurrent receives are bounded in total and per user (#47), red ... Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-10-03 20:57:31 +02:00
mathiasandClaude Sonnet 5.5	e8c5ac50bf	fix(audio): give ffprobe its own 45s deadline, a timeout is the file's fault (#49) ... Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-10-03 20:56:58 +02:00
mathiasandClaude Sonnet 5.5	6101dd4e2f	test(audio): a hung ffprobe times out on its own deadline as unreadable (#49), red ... Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-10-03 20:56:47 +02:00