Replace curl-download with paginated inline results + widget JSON endpoint#232

Merged

RafaelPo merged 20 commits intomainfrom

feat/curl-download-results

Feb 26, 2026

Commits on Feb 26, 2026

Harden JSON download endpoint and improve result UX

RafaelPo
and
claude
committed
Fix security findings 1-7 from security review

RafaelPo
and
claude
committed
Remove escape hatches from ask-before-fetching instructions

RafaelPo
and
claude
committed
Only emit widget JSON on first page, revert Lua pop_download_token

RafaelPo
and
claude
committed
Add design note about widget emission strategy

RafaelPo
and
claude
committed
Disable network policy — breaks DNS resolution on GKE

RafaelPo
and
claude
committed
Reword model instructions: "into my context" not "into our conversation"

RafaelPo
and
claude
committed
Change widget default copy format from TSV to CSV

RafaelPo
and
claude
committed
Add global search bar to results widget

RafaelPo
and
claude
committed
Remove dtype=str from JSON download endpoint to preserve numeric types

RafaelPo
and
claude
committed
Move search box to top-right, hide widget on subsequent pages

RafaelPo
and
claude
committed
Start widget hidden to prevent flash on non-widget tool calls

RafaelPo
and
claude
committed
Fix widget not showing: ignore non-widget ontoolresult events

RafaelPo
and
claude
committed
Fix widget visibility: use display:block not empty string

RafaelPo
and
claude
committed
Collapse widget iframe to zero height instead of display:none

RafaelPo
and
claude
committed