Spaces:
Running
Running
Commit History
14 days ago
-
Pin M2 webhook retry and H2 mention gate with failing-first tests
SilverElixirb711b21
15 days ago
-
Fix flaky webhook throttle test on fresh CI machines
SilverElixirade5ff6
16 days ago
-
Fix small hardening issues across logging media and errors
SilverElixir3438464 -
Read numeric env settings through guarded helper
SilverElixira5fc83f -
Bound webhook body size inflight tasks and denial logs
SilverElixir0562341 -
Exit nonzero when the HTTP server dies first
SilverElixire2c6512 -
Fix hmac compare_digest for non-ASCII secrets
SilverElixirb0fd5ea
18 days ago
-
Add owner-only /selftest route-head probe with quota accounting
SilverElixir0e3aacf
22 days ago
-
setWebhook retries with backoff; fail fast with exit(1) on dead setup (D4: A1-7)
SilverElixirc1767cf -
CI/deploy hardening: lease push, concurrency, permissions, backup failure step, export snapshot, slimmer image (A11-01, A11-04..A11-07)
SilverElixir350f2ff -
Harden startup/shutdown: token exit, tick survival, off-loop IO, honest command log (A1-1..A1-4, A1-6, A8-06)
SilverElixir8cc0538
24 days ago
-
Subagent re-review: fix confirmed misses, harden thin tests
SilverElixirFour parallel adversarial reviewers re-checked the wave. Confirmed and fixed: - lumen_routes: a failed MALFORMED_FUNCTION_CALL retry returned the "response blocked" placeholder as a successful answer and stopped the chain. Retry failure now falls through to the next model like the spent-budget path. - lumen_message_core/bot.py: lock-busy replies and pick language fallback no longer create chat state via get_state (_t_no_create/_peek_chat_lang). - lumen_commands: a pick tap without a message no longer burns the token. - bot.py: lock comment now states the truth — slash commands bypass the lock, draw/tts trigger phrases run under it. - lumen_formatting: table-block lines without a leading pipe are skipped by both inline splitters, closing the HTML/rich divergence on bare tables. Tests hardened (each fails without its fix where stated): timeout fallback now uses a real async hang with distinct answers; budget assertion tightened; deadline test bounds elapsed time; admin seed f…3d3384a
25 days ago
-
Fix regressions found by adversarial review: routing, rendering, rate limits
SilverElixirRegressions from the previous waves, found by six independent adversarial reviews and confirmed directly: - lumen_routes: the account-wide OpenRouter early exit had moved into the request wrapper, where the shared except swallowed it, so the whole chain was burned instead of stopping after one attempt. The decision now lives in the loop via stop_on. - lumen_routes: a skipped retry after a malformed tool call used to answer the user with a "response blocked" placeholder instead of falling through to the next model. - lumen_formatting: the inline list splitters ate blockquotes, headings and markdown table rows, so quotes rendered empty, a bare heading marker leaked and tables broke differently in the stream and in the final message. - lumen_formatting: the element-of command preceded the integral command in the symbol map, so int with limits turned into element-of plus t. Headings were also extracted before the LaTeX scrub, leaving raw commands in h3. - lumen_streaming…62c1832 -
Security wave 2: gate deploy on push+own repo, 401 and denial logging on admin endpoints, FastAPI schema off, proxy body cap, ownerless pick confined to chat, loud warning about secrets derived from BOT_TOKEN
SilverElixir1c833d2
-
Revert guest_message removal (valid Bot API Update field, guest mode) + dependabot grouping
SilverElixir00454c6 -
Move tests to tests/ and proxy to proxy/, update CI and docs paths
SilverElixir7a11b13