b166477202
fix: harden security, eliminate panics, remove dead code, add Dockerfile
...
Security:
- Use constant-time password comparison (subtle crate) to prevent timing attacks
- Replace permissive CORS with configurable origin-restricted CORS
- Add TLS warning when password auth is used without HTTPS
Bug fixes:
- Convert MetaPlugin panics to anyhow::Result (get_meta_plugin, outputs_mut, options_mut)
- Replace item.id.unwrap() with proper error handling across 15 call sites
- Fix panic on unknown column type in list mode
- Fix conflicting PIPESIZE constant (was 8192 vs 65536, now unified to 8192)
- Add 256MB filter chain buffer limit to prevent OOM
- Gracefully skip unregistered plugins instead of panicking
Dead code removal:
- Delete unused filter parser files (filter_parser.rs, filter.pest, parser/ module)
- ~260 lines of dead PEG parser code removed
Code consolidation:
- Add is_content_binary_from_metadata() helper (was duplicated in 4 places)
- Simplify save_item_raw() to delegate to save_item_raw_streaming() (~90 lines removed)
Incomplete features:
- Populate filter_plugins in status output from global registry
- Add FallbackMagicFileMetaPlugin (was referenced but never implemented)
- Document init_plugins() as intentional no-op
Infrastructure:
- Add Dockerfile (static musl binary on scratch, 4.8MB)
- Add .dockerignore
- Add cors_origin to ServerConfig and config.rs
2026-03-13 07:57:36 -03:00
9b7cbd5244
fix: resolve doctest failures, database bugs, and remove dead code
...
- Fix all 96 doctest failures across 20 files by adding hidden imports and
proper test setup (68 pass, 33 intentionally ignored)
- Fix set_item_tags: wrap in transaction and replace item.id.unwrap() with
proper error handling
- Fix get_items_matching: replace N+1 per-item meta queries with batch
get_meta_for_items() call
- Fix get_item_matching: apply meta filtering instead of ignoring the parameter
- Remove duplicate doc comment in store_meta
- Remove dead code files: plugin.rs, plugins.rs, binary_detection.rs
(never declared as modules)
- Apply cargo fmt formatting fixes
- Add keep.db to .gitignore
2026-03-12 11:58:44 -03:00
8a8a6e1c4b
fix: correct critical bugs and improve pipe streaming performance
...
Critical bug fixes:
- save_item now returns real Item from database, not a hardcoded fake
- AsyncDataService::save() reuses self.sync_service instead of creating redundant instance
- GenerateStatus trait signature mismatch fixed (CLI/API decoupling)
Performance improvements (pipe path untouched):
- CompressionEngine::open() returns Box<dyn Read + Send> enabling true streaming
- mode_get eliminates triple full-file read (was sampling then re-reading entire file)
- FilteringReader adds fast-path bypass when no filters, pre-allocates temp buffer
- text.rs meta plugin processes &[u8] slice directly, eliminates data.to_vec() clone
API correctness:
- Tag parse errors now return 400 instead of being silently discarded
- compute_diff uses similar crate (LCS-based) instead of naive positional comparison
Cleanup:
- Modernize string formatting (format!({x})) across codebase
- Remove redundant DB query in get mode
- Derive Debug/ToSchema on public types
- Delete placeholder test files with no real assertions
- Extract parse_comma_tags utility function
2026-03-11 20:45:05 -03:00
Andrew Phillips
fdeb5f7951
Ugh
2026-02-19 13:57:39 -04:00
Andrew Phillips
d44f3fbb5b
docs: Add Rustdoc comments for various structs and functions
...
Co-authored-by: aider (openai/andrew/openrouter/sonoma-sky-alpha) <aider@aider.chat >
2025-09-10 14:23:12 -03:00
Andrew Phillips
3d4ed341e7
fix: remove automatic addition of digest plugin and use config for enabled_meta_plugins
...
Co-authored-by: aider (openai/andrew/openrouter/deepseek/deepseek-chat-v3.1) <aider@aider.chat >
2025-08-28 17:11:01 -03:00
Andrew Phillips
fc54b8ff8f
fix: remove duplicate meta_type and replace meta_name with meta_type
...
Co-authored-by: aider (openai/andrew/openrouter/deepseek/deepseek-chat-v3.1) <aider@aider.chat >
2025-08-27 21:17:48 -03:00
Andrew Phillips
1d61ac1243
feat: use strum to serialize MetaPluginType
...
Co-authored-by: aider (openai/andrew/openrouter/deepseek/deepseek-chat-v3.1) <aider@aider.chat >
2025-08-27 19:40:29 -03:00
Andrew Phillips
0d6d200ab2
fix: remove unused MetaPluginType variants
...
Co-authored-by: aider (openai/andrew/openrouter/deepseek/deepseek-chat-v3.1) <aider@aider.chat >
2025-08-27 19:38:20 -03:00
Andrew Phillips
1159bbe0f5
fix: update meta plugin function calls and imports
...
Co-authored-by: aider (openai/andrew/openrouter/deepseek/deepseek-chat-v3.1) <aider@aider.chat >
2025-08-27 14:02:59 -03:00
Andrew Phillips
442f20dda3
refactor: merge get_meta_plugin_with_config into get_meta_plugin
...
Co-authored-by: aider (openai/andrew/openrouter/deepseek/deepseek-chat-v3.1) <aider@aider.chat >
2025-08-27 14:01:18 -03:00
Andrew Phillips
89d62c7b11
fix: remove deprecated strum::ToString and fix HashMap type conversion
...
Co-authored-by: aider (openai/andrew/openrouter/deepseek/deepseek-chat-v3.1) <aider@aider.chat >
2025-08-27 12:17:09 -03:00
Andrew Phillips
2f0e7e1c5e
fix: add to_snake_case_string dependency and fix imports and type mismatch
...
Co-authored-by: aider (openai/andrew/openrouter/deepseek/deepseek-chat-v3.1) <aider@aider.chat >
2025-08-27 11:56:41 -03:00
Andrew Phillips
539f99f803
fix: replace to_string with explicit plugin name mapping
...
Co-authored-by: aider (openai/andrew/openrouter/deepseek/deepseek-chat-v3.1) <aider@aider.chat >
2025-08-27 10:50:38 -03:00
Andrew Phillips
0ed7e3aae7
refactor: update plugin creation to use consistent config approach
...
Co-authored-by: aider (openai/andrew/openrouter/deepseek/deepseek-chat-v3.1) <aider@aider.chat >
2025-08-27 10:50:11 -03:00
Andrew Phillips
7bc6dd89a1
fix: update meta service to use new plugin configuration approach
...
Co-authored-by: aider (openai/andrew/openrouter/deepseek/deepseek-chat-v3.1) <aider@aider.chat >
2025-08-27 10:48:48 -03:00
Andrew Phillips
8f5ec6381f
fix: update md5 usage and remove unused imports
...
Co-authored-by: aider (openai/andrew/openrouter/deepseek/deepseek-chat-v3.1) <aider@aider.chat >
2025-08-26 23:47:18 -03:00
Andrew Phillips
34c942e73b
refactor: unify digest plugin type handling
...
Co-authored-by: aider (openai/andrew/openrouter/deepseek/deepseek-chat-v3.1) <aider@aider.chat >
2025-08-26 23:44:56 -03:00
Andrew Phillips
efc71d6f0e
feat: add debug logs for meta service plugin initialization
...
Co-authored-by: aider (openai/andrew/openrouter/deepseek/deepseek-chat-v3.1) <aider@aider.chat >
2025-08-26 22:43:44 -03:00
Andrew Phillips
9f9e2749a9
fix: resolve mutable borrow error in text plugin
...
Co-authored-by: aider (openai/andrew/openrouter/qwen/qwen3-coder) <aider@aider.chat >
2025-08-26 19:09:10 -03:00
Andrew Phillips
e3e9db145d
fix: remove duplicate metadata processing in meta service
...
Co-authored-by: aider (openai/andrew/openrouter/qwen/qwen3-coder) <aider@aider.chat >
2025-08-26 18:50:20 -03:00
Andrew Phillips
b73ba17f80
fix: restrict self to sized types and clone response in process_chunk and finalize_plugins
...
Co-authored-by: aider (openai/andrew/openrouter/qwen/qwen3-coder) <aider@aider.chat >
2025-08-26 18:25:00 -03:00
Andrew Phillips
4b66b094d5
feat: add finalization state management for meta plugins
...
Co-authored-by: aider (openai/andrew/openrouter/qwen/qwen3-coder) <aider@aider.chat >
2025-08-26 18:23:17 -03:00
Andrew Phillips
bd879100be
feat: add finalization state tracking to meta plugins
...
Co-authored-by: aider (openai/andrew/openrouter/qwen/qwen3-coder) <aider@aider.chat >
2025-08-26 18:23:02 -03:00
Andrew Phillips
45b57fc547
fix: add missing item_id parameter to process_chunk and finalize_plugins
...
Co-authored-by: aider (openai/andrew/openrouter/deepseek/deepseek-chat-v3.1) <aider@aider.chat >
2025-08-26 17:11:55 -03:00
Andrew Phillips
ec428f5fc4
feat: add default implementations for initialize, update, finalize in MetaPlugin
...
Co-authored-by: aider (openai/andrew/openrouter/deepseek/deepseek-chat-v3.1) <aider@aider.chat >
2025-08-26 17:05:44 -03:00
Andrew Phillips
56f3c924b3
feat: add META_SERVICE log prefix to all debug and warn messages
2025-08-26 17:05:39 -03:00
Andrew Phillips
f48d7b33b8
fix: update warnings to use log::warn
...
Co-authored-by: aider (openai/andrew/openrouter/mistralai/mistral-medium-3.1) <aider@aider.chat >
2025-08-26 15:02:31 -03:00
Andrew Phillips
4795a2b2cc
fix: add meta service prefix to log messages
2025-08-26 15:02:22 -03:00
Andrew Phillips
e5eadbfc53
feat: handle output name remapping and disabled outputs in plugin initialization
...
Co-authored-by: aider (openai/andrew/openrouter/qwen/qwen3-coder) <aider@aider.chat >
2025-08-26 14:51:30 -03:00
Andrew Phillips
902c2f9c17
fix: replace eprintln with log::warn for warnings
...
Co-authored-by: aider (openai/andrew/openrouter/qwen/qwen3-coder) <aider@aider.chat >
2025-08-26 10:03:25 -03:00
Andrew Phillips
6b06b23686
feat: add duplicate output name check for meta plugins
...
Co-authored-by: aider (openai/andrew/openrouter/qwen/qwen3-coder) <aider@aider.chat >
2025-08-26 08:57:56 -03:00
Andrew Phillips
321e00171e
feat: move core services to services directory
2025-08-25 18:22:17 -03:00