Autonomous fixes batch#8

Open

adrianstanca1 wants to merge 55 commits into

agent0ai:mainfrom

adrianstanca1:main

Commits on Apr 22, 2026

autonomous: add 30s timeout to proxy upstream fetch with proper abort handling
Adrian Stanca
committed
autonomous: handle client abort in pipeReadableToResponse

Adrian Stanca
and
claude
committed
autonomous: limit max redirects in proxy to prevent loops

Adrian Stanca
and
claude
committed
autonomous: remove unnecessary JSON indentation from API responses

Adrian Stanca
and
claude
committed
autonomous: abort upstream fetch on client disconnect in proxy

Adrian Stanca
and
claude
committed
autonomous: add 10MB request body size limit to prevent memory exhaustion

Adrian Stanca
and
claude
committed
autonomous: surface processor-load errors as LOAD_ERROR instead of silently continuing

Adrian Stanca
and
claude
committed
autonomous: sanitize JSON parse error message in request_body.js

Adrian Stanca
and
claude
committed
autonomous: add 50MB Content-Length check before proxying in proxy.js

Adrian Stanca
and
claude
committed
autonomous: sanitize error messages for non-5xx errors in router.js

Adrian Stanca
and
claude
committed
autonomous: sanitize error messages in share service
Adrian Stanca
committed
autonomous: Replace magic number 250 with HEALTH_CHECK_POLL_INTERVAL_MS constant

Adrian Stanca
and
claude
committed
add loading state to share-to-cloud button

Adrian Stanca
and
claude
committed
autonomous: add timeout to cluster primary request promises

Adrian Stanca
and
claude
committed
autonomous: Make MAX_REQUEST_BODY_SIZE_BYTES configurable via runtime params

Adrian Stanca
and
claude
committed
autonomous: remove redundant clones and O(n) normalization from prompt ops

Adrian Stanca
and
claude
committed
autonomous: add startup health check for critical services

Adrian Stanca
and
claude
committed
autonomous: replace console.log with console.error for production server startup

Adrian Stanca
and
claude
committed
autonomous: add in-memory rate limiter (100 req/min per IP)

Adrian Stanca
and
claude
committed
autonomous: add SIGTERM handler for graceful job shutdown

Adrian Stanca
and
claude
committed
autonomous: log file system watch errors for operator visibility

Adrian Stanca
and
claude
committed
autonomous: extract magic number to MAX_PROXY_REQUEST_BODY_BYTES constant

Adrian Stanca
and
claude
committed
autonomous: add basic type validation to config.js

Adrian Stanca
and
claude
committed
autonomous: add 5-minute timeout to streamCompletion

Adrian Stanca
and
claude
committed
autonomous: add X-Request-ID header for end-to-end request tracing

Adrian Stanca
and
claude
committed
autonomous: remove stale loading indicator on component fetch failure

Adrian Stanca
and
claude
committed
autonomous: show toast error and reset creating state on new space failure

Adrian Stanca
and
claude
committed
autonomous: add .catch() to cloud share fetch to handle network errors

Adrian Stanca
and
claude
committed
autonomous: add AbortSignal support to loadParamSpecs for proper cancellation

Adrian Stanca
and
claude
committed
autonomous: add size limit and eviction to rateLimitMap

Adrian Stanca
and
claude
committed
autonomous: add X-API-Version header check for deprecated client detection

Adrian Stanca
and
claude
committed
autonomous: add server/lib/errors.js with named error codes

Adrian Stanca
and
claude
committed
autonomous: add jitter to state sync retry delay

Adrian Stanca
and
claude
committed
autonomous: add JSDoc comments to login, user_self_info, password_change routes

Adrian Stanca
and
claude
committed
autonomous: add periodic session cleanup to auth service

Adrian Stanca
and
claude
committed
autonomous: add environment variables section to README

Adrian Stanca
and
claude
committed
autonomous: add TTL and LRU eviction to userFolderSizeCache

Adrian Stanca
and
claude
committed
autonomous: add code field to all error responses in router.js

Adrian Stanca
and
claude
committed
autonomous: cap pendingRestartReasons Set at 1000 entries

Adrian Stanca
and
claude
committed
autonomous: add CSRF protection for state-changing API requests

Adrian Stanca
and
claude
committed
autonomous: standardize error message format to lowercase no-period style

Adrian Stanca
and
claude
committed
autonomous: replace Math.random() with window.crypto.getRandomValues

Adrian Stanca
and
claude
committed
autonomous: fix overly permissive CORS configuration

Adrian Stanca
and
claude
committed
autonomous: add input validation to file_copy and file_move API routes

Adrian Stanca
and
claude
committed
autonomous: cap pendingChangedPaths at 10000 entries

Adrian Stanca
and
claude
committed
autonomous: cap git history refs at 1000 to bound storage growth

Adrian Stanca
and
claude
committed
autonomous: detect WebGPU context loss and restart worker

Adrian Stanca
and
claude
committed
autonomous: add 10-minute timeout to job execution

Adrian Stanca
and
claude
committed
autonomous: add path traversal and symlink checks to file read/write

Adrian Stanca
and
claude
committed
autonomous: add backpressure to watchdog queue

Adrian Stanca
and
claude
committed
fix: restore missing export and fix retry backoff

Adrian Stanca
and
claude
committed
fix: pass req to applyApiCorsHeaders in router.js

Adrian Stanca
and
claude
committed
fix: hoist requestUrl before res.on(finish) closure in router

Adrian Stanca
and
claude
committed
fix: increase rate limit from 100 to 500 req/min for browser loads

Adrian Stanca
and
claude
committed

Commits on Apr 24, 2026

Merge remote-tracking branch 'origin/main'
adrianstanca1
committed