Commit Graph

21 Commits

Author SHA1 Message Date
cra88y 4a16b6360b fix: regex escaping for first-chunk cleanup 2026-01-11 10:56:11 -06:00
cra88y 0ce0bc2da1 fix: revert to display:none, max-height broke layout 2026-01-11 10:32:39 -06:00
cra88y 8653b98aa0 harden: timeouts, crash guards, UX polish 2026-01-11 10:26:19 -06:00
cra88y 3072abfce8 refactor: stateless hmac security and scope fixes 2026-01-11 09:50:01 -06:00
cra88y 9bb5aa068d refactor: stateless signatures and logging 2026-01-11 09:47:49 -06:00
cra88y daacae3842 refactor: stateless auth and parser hardening 2026-01-11 09:46:45 -06:00
cra88y ea53d8dceb refactor: memory cleanup and parser hardening 2026-01-11 09:41:16 -06:00
cra88y 57888c9a18 refactor: zero-latency stream and ui cleanup 2026-01-10 21:33:27 -06:00
cra88y 224e14b0e7 refactor: prompt structure 2026-01-10 21:23:48 -06:00
cra88y 28f946736d refactor: final code purge 2026-01-10 21:23:08 -06:00
cra88y 290126a99b refactor: default to openrouter and gemma-3-27b 2026-01-10 21:21:14 -06:00
cra88y 0d55fb123f refactor: default to openrouter with gemma-3-27b fallback 2026-01-10 21:18:11 -06:00
cra88y f84c1791e8 feat: multi-provider support (gemini/openrouter) 2026-01-10 21:01:33 -06:00
cra88y 9b2c903f7e refactor: improve stream parsing 2026-01-10 20:33:05 -06:00
cra88y 310d810390 optimize: prompt engineering and model config 2026-01-10 19:53:59 -06:00
cra88y dd3eea5182 feat: robust stateless hybrid architecture using base64 context handover 2026-01-10 19:42:37 -06:00
cra88y d736cb304d fix: ensure plugin stays active by returning True in init and update README 2026-01-10 19:17:45 -06:00
cra88y 0e962ab720 test: add standalone integration test harness 2026-01-10 18:27:34 -06:00
cra88y bf04b62577 feat: implement RAG context awareness and non-blocking streaming 2026-01-10 18:25:34 -06:00
cra88y/pc 531128e828 refactor(gemini_flash): implement CSP-compliant single-file architecture
- Replace inline script injection with dynamic asset route /gemini.js to satisfy script-src 'self' CSP policies.

- Implement server-side parameter injection via URL params (	oken, q) to eliminate XSS vectors from data-* attributes.

- Secure JS injection using json.dumps for proper serialization.

- Integrate markupsafe.Markup to prevent Jinja2 template auto-escaping of the result injection.

- Reduce log verbosity in the streaming loop while maintaining visibility for critical hooks.

- Remove external dependencies, relying solely on standard lib and host environment packages.
2026-01-10 18:13:12 -06:00
cra88y/pc f849763c4a initial commit: gemini streaming plugin for searxng 2026-01-10 17:04:51 -06:00