Martin Vogel 630bd40a90 Replace the graph-UI HTTP server with a first-party implementation ...

The web server behind the graph UI is now a purpose-built in-house
module (src/ui/httpd.c): localhost-only listener, strict HTTP/1.1
parsing with fixed request caps, a per-connection receive deadline,
and Connection: close semantics. http_server.c keeps the routing and
handlers, rewritten against the new transport API; the public server
API and main.c are unchanged. The previously vendored third-party
server is removed entirely.

Comes with a new 28-test transport + routing suite (tests/test_httpd.c)
covering parsing edge cases (strict CRLF, Content-Length limits, raw
path matching, percent-decode rules) and live-socket behavior (CORS
policy, RPC dispatch, receive deadline, clean shutdown). The security
audit scripts now check the new file layout and treat any network call
in vendored code as a failure.

2026-06-12 02:17:25 +02:00

..

ci

fix: deliver the static -portable linux binary on all install/update paths

2026-06-09 11:36:00 +02:00

hooks

Add time-bomb + MCP file read audit, tracked pre-commit hooks

2026-03-21 16:43:48 +01:00

audit-grammar-security.sh

Add 89 new tree-sitter grammars (66 to 155 languages)

2026-04-15 21:28:51 +02:00

benchmark-index.sh

Fix C++ SEGV: NULL deref in LSP type resolver on large header files

2026-03-26 16:19:10 +01:00

benchmark-search-graph.sh

Fix search_graph query= multi-minute latency: two-step FTS5 subquery

2026-05-10 19:50:50 +02:00

build.sh

Auto-detect WIN32_LIBS in Makefile, remove shell quoting entirely

2026-03-19 00:00:19 +01:00

check-no-test-skips.sh

Forbid test skips and convert existing skips to hard failures

2026-06-05 21:53:25 +02:00

check-nolint-whitelist.sh

Fix lint: magic numbers in cypher/sqlite_writer/configlink/gitignore, extract URL-in-args helpers

2026-04-02 01:08:51 +02:00

clean.sh

Add 8-layer security test suite + hardening

2026-03-20 18:19:15 +01:00

clone-bench-repos.sh

Cross-service communication discovery + RAM-first incremental indexing

2026-03-28 13:59:42 +01:00

embed-frontend.sh

Fix Windows build: add zip pkg, portable embed (od replaces xxd)

2026-03-19 10:59:14 +01:00

env.sh

Fix production build errors, add build step to Docker test infra

2026-03-18 17:15:46 +01:00

extract_nomic_vectors.py

Parallelize post-passes, fix mode filtering + semantic edge quality

2026-04-06 12:41:30 +02:00

gen-py-stdlib.py

feat(py_lsp): Round 1 parity push (parent-modules, cast, Self, fwd-refs)

2026-05-09 01:39:28 +02:00

generate-lang-code.py

Add 89 new tree-sitter grammars (66 to 155 languages)

2026-04-15 21:28:51 +02:00

lint.sh

Forbid test skips and convert existing skips to hard failures

2026-06-05 21:53:25 +02:00

new-languages.json

feat(lang): add Pine Script support via vendored kvarenzn/tree-sitter-pine (#273)

2026-05-09 11:50:05 +02:00

security-allowlist.txt

Allow-list the project repository URL in the security audit

2026-06-06 00:20:47 +02:00

security-audit.sh

fix(ci): resolve cppcheck null-deref + variable-scope and security-audit findings

2026-05-29 00:30:17 +02:00

security-fuzz-random.sh

Fix 29 CodeQL alerts: command injection, snprintf overflow, TOCTOU races

2026-03-21 22:18:31 +01:00

security-fuzz.sh

Separate perf tests from CI, fix cross-platform build issues

2026-04-02 14:52:14 +02:00

security-install.sh

fix(install): respect $CLAUDE_CONFIG_DIR in install/uninstall/update

2026-05-30 15:22:37 +02:00

security-network.sh

Add 8-layer security test suite + hardening

2026-03-20 18:19:15 +01:00

security-strings.sh

fix(security): widen release audit to all files in binaries/

2026-05-05 00:59:58 +02:00

security-ui.sh

Replace the graph-UI HTTP server with a first-party implementation

2026-06-12 02:17:25 +02:00

security-vendored.sh

Replace the graph-UI HTTP server with a first-party implementation

2026-06-12 02:17:25 +02:00

setup-windows.ps1

Remove Go-era cruft, update THIRD_PARTY.md for pure C project

2026-03-22 01:09:12 +01:00

setup.sh

fix(install): respect $CLAUDE_CONFIG_DIR in install/uninstall/update

2026-05-30 15:22:37 +02:00

smoke-test.sh

Merge branch 'session-combined'

2026-06-09 11:57:03 +02:00

soak-test.sh

Separate perf tests from CI, fix cross-platform build issues

2026-04-02 14:52:14 +02:00

test_mcp_rapid_init.py

fix(mcp): address QA round 1 findings

2026-03-21 12:37:28 -05:00

test.sh

Distill PR #407 (#406) and PR #414 (#413): parent-death watchdog + CBM_LOG_LEVEL

2026-06-06 22:30:38 +02:00

vendor-grammar.sh

Add grammar security audit and enhance vendor script

2026-04-15 20:08:35 +02:00

vendored-checksums.txt

Replace the graph-UI HTTP server with a first-party implementation

2026-06-12 02:17:25 +02:00