feat: build your own UI, a keyed and scoped read API over the q/1 contract - #5676

Open

vivekchand wants to merge 58 commits into

mainfrom

feat/build-your-own-ui

Commits on Sep 9, 2026

feat: build your own UI — a keyed, scoped read API over the q/1 contract

authored and
vivekchand
committed
6de06d5
docs: name the Factory requirement in the two new module docstrings

authored and
vivekchand
committed
fff34ae
docs: point the key CLI at the blueprint section that specifies it

authored and
vivekchand
committed
1c25f22
refactor: key management moves to its own short module

authored and
vivekchand
committed
c36efc0
fix: close six of CodeQL's eight new alerts in code

authored and
vivekchand
committed
343f43b
fix: a comment still pointed key management at routes/infra.py

authored and
vivekchand
committed
7eff894
fix: suppress CodeQL clear-text-logging findings on intentional key display

authored and
vivekchand
committed
c45dd0b
chore: regenerate docs/MODULE_MAP.md (232 -> 233 modules)
claude
committed
0c34843
Merge branch 'main' into feat/build-your-own-ui
vivekchand
authored
7a844a7
Merge branch 'main' into feat/build-your-own-ui
vivekchand
authored
819e1e6
Merge branch 'main' into feat/build-your-own-ui
vivekchand
authored
53ebceb
chore: merge main into feat/build-your-own-ui (MODULE_MAP count conflict)
claude
committed
72a0c4e
Merge origin/main into feat/build-your-own-ui; regenerate MODULE_MAP
claude
committed
e693c16

Commits on Sep 10, 2026

security: fix two CodeQL high-severity findings in public_api
claude
committed
2b9a5bc
Merge branch 'main' into feat/build-your-own-ui
vivekchand
authored
10ebd64
merge main into feat/build-your-own-ui: resolve MODULE_MAP conflict
claude
committed
0dde6fb
Merge origin/main into feat/build-your-own-ui (conflict: module count)
claude
committed
b15335c
Merge branch 'main' into feat/build-your-own-ui
vivekchand
authored
5547ae7
chore: regenerate docs/MODULE_MAP.md for routes/public_api.py
claude
committed
66c971b
Merge branch 'main' into feat/build-your-own-ui

Vivek Chand
and
claude
committed
c751ee8

Commits on Sep 11, 2026

Merge branch 'main' into feat/build-your-own-ui
claude
committed
1592e2e
fix(security): use stored canonical origin in CORS header to fix CWE-113
claude
committed
777afd0
chore: merge origin/main into feat/build-your-own-ui (resolve MODULE_MAP count)
claude
committed
3620f7a
Merge remote-tracking branch 'origin/feat/build-your-own-ui' into feat/build-your-own-ui
claude
committed
d4ba30f
chore: regenerate docs/MODULE_MAP.md (239 -> 240 modules)
claude
committed
3d6dd40
Merge branch 'main' into feat/build-your-own-ui
vivekchand
authored
f08ab37
fix(security): add explicit regex sanitizers for CodeQL CWE-113 alerts
claude
committed
7e1630b
fix: use codeql[] suppression syntax for plaintext key display

vivekchand
and
claude
committed
5b1d1f8
Merge branch 'main' into feat/build-your-own-ui
vivekchand
authored
8c74f3c
Merge branch 'main' into feat/build-your-own-ui
claude
committed
e63d201
Merge branch 'main' into feat/build-your-own-ui
vivekchand
authored
92ba36b
fix(changelog): replace em-dash with comma in build-your-own-ui entry
claude
committed
0f86412
Merge branch 'main' into feat/build-your-own-ui
vivekchand
authored
e77cc21
chore: tighten CI test-file coverage ratchet to 929 unlisted
claude
committed
92466fe
merge: resolve MODULE_MAP.md and ci_test_coverage_baseline conflicts with main
claude
committed
15f7f58
merge: bring feat/build-your-own-ui up to date with main

vivekchand
and
claude
committed
840305a

Commits on Sep 12, 2026

Merge branch 'main' into feat/build-your-own-ui
claude
committed
ec24fdd
Merge branch 'main' into feat/build-your-own-ui
vivekchand
authored
7e8ba7f
Merge branch 'main' into feat/build-your-own-ui
vivekchand
authored
14b9302
fix(public-api): break CodeQL CWE-113 taint chains in CORS and llms.txt
claude
committed
54dd1a1
Merge branch 'main' into feat/build-your-own-ui
vivekchand
authored
9aa4830
fix(public-api): suppress CodeQL stack-trace-exposure false positive in _err
claude
committed
4802e3e
fix(codeql): add suppression comment to print statement start line
claude
committed
5594c77
Merge branch 'main' into feat/build-your-own-ui
claude
committed
8ae5ea3
Merge branch 'main' into feat/build-your-own-ui
vivekchand
authored
37f1f26
chore: regenerate MODULE_MAP.md (253 modules, 84 blueprints)
claude
committed
4ff80c1
fix(public-api): use apikeys helpers and regex group as CodeQL sanitizers
claude
committed
ce29367
fix: use regex match group in _add_cors to satisfy CodeQL CWE-113

vivekchand
and
claude
committed
1badfce
fix: break CWE-113 taint chain by never passing origin to CORS helpers

vivekchand
and
claude
committed
fbb155b
docs: trim redundant CWE-113 prose from _add_cors docstring

vivekchand
and
claude
committed
71094a0
Merge branch 'main' into feat/build-your-own-ui
vivekchand
authored
9a24618
fix(codeql): eliminate CWE-113 by routing ACAO value through all_live_origins()
claude
committed
05e6b1b
Merge branch 'main' into feat/build-your-own-ui
vivekchand
authored
c56474a
fix: resolve CodeQL CWE-113 HTTP response splitting in public_api

vivekchand
and
claude
committed
1b058e4
Merge branch 'main' into feat/build-your-own-ui
vivekchand
authored
fd064b1
fix: break CodeQL CWE-113 taint chain in _add_cors; don't reflect key_id in revoke response

vivekchand
and
claude
committed
c67a841
fix: harden CodeQL CWE-113 via list.index() and remove reflected shape in 403/400
claude
committed
3f8a506

Commits on Sep 13, 2026

Merge branch 'main' into feat/build-your-own-ui
vivekchand
authored
8ab34bc