Merge development_mik_6_1 into development #15

Merged
mik-tf merged 9 commits from development_mik_6_1 into development 2026-03-18 06:29:22 +00:00
Owner
No description provided.
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
Regenerate lockfile to resolve conflict markers from stash pop.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
Stats: Read actual process RSS from /proc/self/status and compute
uptime from server start_time instead of hardcoded "N/A".

Create DB: Return existing handle if database index is already
open, preventing redb "Cannot acquire lock" errors on duplicate
create calls.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
- Songs: 3 per context (acid_trumpet, gymnopedie_no1, there_it_is), orphan TOMLs removed
- Embedder: ensure_models_downloaded() in lib, called from hero_osis_server init
- AI Assistant: SSE parser for Shrimp responses, message field fix
- Auth/Redis SSO: postMessage token from island components + sso-login endpoint
- AI stop button with AbortController
- Multi-conversation support (Shrimp backend + UI sidebar + localStorage persistence)

Issue: lhumina_code/home#23

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
- Fix SSO token validation: use OSIS UI HTTP endpoint (port 3377) instead of raw socket
- Hide navbar when embedded in Hero OS iframe (body.in-iframe)
- Listen for hero:auth postMessage and call /sso-login endpoint
- Validate OSIS token via authservice.validate_session on 127.0.0.1:3377/rpc/root

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
Previously the SSO handler in base.html set the cookie but didn't
reload, causing a blank page until manual refresh.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
base.html is the dashboard (already authenticated). SSO should only
happen in login.html. The hero:auth postMessage was triggering
infinite reloads on the dashboard.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
Added ssoInProgress flag to prevent multiple concurrent SSO attempts.
Use location.replace instead of href to avoid back-button loop.
Small delay before redirect ensures cookie is set.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
fix: use form POST + 303 redirect for SSO login (no cookie race)
Some checks failed
CI / cargo check + clippy (pull_request) Failing after 4s
Build and Test / build (pull_request) Failing after 38s
CI / cargo test (pull_request) Failing after 38s
f1b8246d79
Changed /sso-login from JSON response to 303 redirect with Set-Cookie.
Login.html now submits a hidden form instead of using fetch(), so the
browser handles cookie + redirect atomically in one navigation.
Also changed SameSite from Strict to Lax for iframe compatibility.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
mik-tf merged commit cfee806f2f into development 2026-03-18 06:29:21 +00:00
Sign in to join this conversation.
No reviewers
No labels
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
lhumina_code/hero_redis!15
No description provided.