• v0.3.2 ccb373dee1

    coreci-bot released this 2026-09-30 10:31:45 +00:00 | 16 commits to milestone/v0.3-hosted since this release

    v0.3 Phase 2 — Per-User Settings + Model Keys.

    REQ-72 per-user settings persistence (GET/PUT /api/config/settings; partial updates; null-poisoning P0 fixed in verify).
    REQ-73 encrypted model keys: AES-256-GCM (KEK from env-file 'keys' scope, user_id as AAD, fresh nonce per write, 0600), masked-only API (last-4), honest disabled state without KEK (409 with reason).
    REQ-74 per-run credential chain user → server → keyless via ModelAdapterFactory — one adapter per run (shared-adapter fallback bug dead), probe per resolved tier, credential_tier stamped on run state. Config rework: factory-resolved probe (P-1 closed), owner-keyed cost counters (P-13). Production entrypoint researchx.api.main (P-3 backend half): auth hardwired, cookie_secure=True, no fakes reachable.

    Verify: PASS-WITH-FIXES (P0 fixed in-phase). 264 backend + 131 frontend tests green.

    Downloads