Spaces:
Sleeping
Sleeping
Commit History
-
chore: Apply Ponytail audit fixes and code cleanup
a963267
-
security: military-grade archive hardening with extension allowlist
- Replace BINARY_EXTENSIONS blocklist with CODE_EXTENSIONS allowlist (70+ recognized code/config/doc extensions; unknown types auto-rejected) - Extension-less files (Makefile, Dockerfile) allowed as special case - System prompt hardened with explicit static-analysis-only framing - System prompt now declares format A (single file) vs B (project dir) - Frontend: .zip added to single-file accept attribute - Frontend: HTTP 413 gets dedicated user-friendly error message explaining zip-bomb defense limit with remediation guidance - Tests expanded: allowlist verification, unknown extensions, Makefile35755b6 -
feat: add multi-file and folder upload support for project evaluation
- Backend: Accept single file (file field), multiple files (files field), .zip, and .tar.gz archives at POST /submit with full backwards compat - Archive extraction with Zip Slip prevention, binary/non-code filtering - Structured project tree assembly for multi-file LLM evaluation - Extended system prompt for architectural analysis across files - Frontend: Upload mode toggle (Single File / Folder / .zip Archive) - Recursive folder drag-and-drop via webkitGetAsEntry() - File preview panel with size summary before submission - Result rendering for architecture_notes and per-file issues - 1 MB aggregate payload limit (up from 100 KB single-file) - Version bump to 4.0.0b15e89c
-
docs: developer handoff API guide
8313679