Qwen38 Viewer

repo: ~/Projects/qwen38-viewer · 18 commits · 0 in last 24h, 0 in last 7d ·

Search the build

18 commits indexed

  1. ee652bf 2026-08-25 creds-safe fetch guard: resolve relative fetch vs credential-free location (creds-in-URL trap)
  2. 442d905 2026-08-19 proxy: idle-timeout guard (90s no-data -> clean 'model overloaded, retry' instead of a multi-minute hang)
  3. 4956adc 2026-08-19 chore: v1.1.0 (session close) — already lint/refactor-clean (code-reviewer pass bc74a90), 25 tests green
  4. 598f376 2026-08-19 add true E2E (npm run test:e2e): real Chromium drives full chat — 3D scene appears, reply streams, 3D removed on done, zero page/3D errors
  5. 6ce074b 2026-08-19 5x: two clean sweeps (7/7, 0 defects) — REPORT.md
  6. 518f2cf 2026-08-19 remove misleading Kamatera .deploy.conf; document local-only deploy in DEPLOY.md
  7. 114f772 2026-08-19 add npm test: 18 regression checks (auth matrix incl no-colon, static, streaming proxy, think/keep_alive passthrough, upstream-error, bad-request) against a stub Ollama
  8. bc74a90 2026-08-19 debug+refactor: fix 3D fallback setState + WebGL try/catch + render throttle; auth no-colon guard + upstream cancel + listener cleanup; mail-bridge fd-leak, dead-line, SMTP reuse+try/except, plus-address guard
  9. 3718af9 2026-08-19 self-host three.js (local /vendor/three.min.js) with CDN fallback — zero external dependency
  10. 29dca6a 2026-08-19 three.js 3D thinking scene w/ state machine: Thinking(orange)/Generating(teal)/STUCK(red+stutter) + stall watchdog; thinking toggle (default off); think passthrough
  11. 411e696 2026-08-19 send keep_alive as integer -1 (valid 'keep forever')
  12. 6458573 2026-08-19 pin model permanently warm (keep_alive -1) — no cold loads
  13. 78d2199 2026-08-19 viewer: motion-graphics thinking feedback (pulsing orb, elapsed timer, adaptive cold-load msg, live-streaming reasoning + caret)
  14. b4efa8a 2026-08-19 qwen mail bridge: allowlisted email -> uncensored qwen -> inline reply (armed, launchd 2min)
  15. 18c37a5 2026-08-19 add case-insensitive shared access code Dust2026
  16. e9ac061 2026-08-19 multi-user basic auth (admin + Dave)
  17. 5db1398 2026-08-19 keep model warm (keep_alive 30m) to avoid ~2min cold loads
  18. 46278be 2026-08-19 qwen38-viewer: auth-gated web chat for local Qwen3.8-27B Heretic (Ollama)

Authors

Agents used

  • code-reviewer1

Skills used

  • /refactor-clean1
  • /catch1
  • /except1
  • /vendor1
  • /three1

Creative ideas + design notes

Commits with substantial prose (≥120 chars) — the rationale behind each move.

ee652bf · 2026-08-25 · creds-safe fetch guard: resolve relative fetch vs credential-free location (creds-in-URL trap) 
Fleet inoculation — opening this basic-auth app with credentials in the URL
poisoned document.baseURI and made relative fetch('/api/…') throw. Guard resolves
non-absolute request URLs against location instead. Ref: creds-in-url-fetch-guard-fleet-pattern.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

File tree

12 files tracked. Click any to browse the source at HEAD.

Other build journals

← Quadrille Room Credit Enrich  ·  all 4 projects  ·  Raffiawallcoverings →

Export

commits.csv · feed.atom · project.json · commits.json

rendered in 1ms