v2.15.1
Security & Reliability
- Comprehensive Codebase Audit — Addressed 17+ CodeRabbit audit fixes for security and stability (PR #9).
- Concurrency Deadlock Fix — Reset prompt claim on early exit to prevent permanent deadlocks.
- Data Loss Prevention — Delete shards only after successful re-embedding.
- Pagination Hardening — Cap pagination at 500 records and fetch precisely per shard.
- Auth Hardening — Removed 'enabled' flag from auth gate and restricted static asset auth to API paths only.
- Redaction Regex — Narrowed redaction matching to exact keys preventing aggressive over-redaction.
Fixed
- FTS5 Triggers — Use implicit rowid for FTS5 triggers instead of TEXT id.
- AISessionManager — Converted to lazy singleton and mocked before configuration to prevent test import crashes.
What's Changed
Other Changes
- 🔍 Full Codebase Audit — DO NOT MERGE by @ZeR020 in #7
- 🔍 Full Codebase Audit — DO NOT MERGE by @ZeR020 in #9
Full Changelog: v2.15.0...v2.15.1