v0.3.5

What's Changed

Bug Fixes

• fix: clamp search results per query to API hard cap — Brave Search API rejects count > 20 with 422 for all plans. Added max_results_per_query valve (default: 20) to prevent this. Closes #3.
• fix: guard against race condition in DebugService.emit and outlet — concurrent requests on the shared Filter singleton could reset self.ctx = None mid-execution, causing 'NoneType' has no attribute 'model' crashes. outlet() and DebugService.emit() now capture a local reference to ctx. Closes #1.
• fix: await Users.get_user_by_id calls (PR #4 by @jaybill) — missing await was returning coroutines instead of user objects, causing 'coroutine' has no attribute 'role'. Closes #5.

Security

• Wrap search results in XML tags — raw web content is now enclosed in <search_results> tags with an explicit untrusted-data instruction to mitigate indirect prompt injection from malicious pages. Addresses #2.

Contributors

• @jaybill — PR #4