Issues

• chore: enforce CI strictness on protected branches

  KeplerOps/coronagraph#59 · Filter by author Brad-Edwards opened on Jun 13, 2026

• Harden conversation surface against external interaction

  KeplerOps/coronagraph#57 · Filter by author Brad-Edwards opened on May 17, 2026

• LOW: Export _resetConfig() for test isolation

  KeplerOps/coronagraph#46 · Filter by author Brad-Edwards opened on Mar 7, 2026

• LOW: Extract shared splitMessage and formatItemsForPrompt utilities

  KeplerOps/coronagraph#45 · Filter by author Brad-Edwards opened on Mar 7, 2026

• LOW: Add test coverage for bot, MCP server, research, and web routes

  KeplerOps/coronagraph#44 · Filter by author Brad-Edwards opened on Mar 7, 2026

• LOW: Change ArXiv collector to use HTTPS

  KeplerOps/coronagraph#43 · Filter by author Brad-Edwards opened on Mar 7, 2026

• LOW: Fix Load More button replacing items instead of appending

  KeplerOps/coronagraph#42 · Filter by author Brad-Edwards opened on Mar 7, 2026

• LOW: Extract shared Anthropic client singleton

  KeplerOps/coronagraph#41 · Filter by author Brad-Edwards opened on Mar 7, 2026

• LOW: Close database client on process exit

  KeplerOps/coronagraph#40 · Filter by author Brad-Edwards opened on Mar 7, 2026

• MEDIUM: Push time filtering to SQL in getRecentItems

  KeplerOps/coronagraph#39 · Filter by author Brad-Edwards opened on Mar 7, 2026

• MEDIUM: Exclude embedding column from query results

  KeplerOps/coronagraph#38 · Filter by author Brad-Edwards opened on Mar 7, 2026

• MEDIUM: Sanitize error messages returned to clients

  KeplerOps/coronagraph#37 · Filter by author Brad-Edwards opened on Mar 7, 2026

• MEDIUM: Fix embedding dimension mismatch between config and schema

  KeplerOps/coronagraph#36 · Filter by author Brad-Edwards opened on Mar 7, 2026

• MEDIUM: Add timeouts to all external API fetch calls

  KeplerOps/coronagraph#35 · Filter by author Brad-Edwards opened on Mar 7, 2026

• MEDIUM: Add SRI integrity checks on CDN-loaded scripts

  KeplerOps/coronagraph#34 · Filter by author Brad-Edwards opened on Mar 7, 2026

• MEDIUM: Add rate limiting to API and bot endpoints

  KeplerOps/coronagraph#33 · Filter by author Brad-Edwards opened on Mar 7, 2026

• HIGH: Validate UUID route parameters

  KeplerOps/coronagraph#31 · Filter by author Brad-Edwards opened on Mar 7, 2026

• HIGH: insertItem uses onConflictDoNothing instead of documented onConflictDoUpdate

  KeplerOps/coronagraph#30 · Filter by author Brad-Edwards opened on Mar 7, 2026

• HIGH: Validate and cap limit/offset query parameters

  KeplerOps/coronagraph#29 · Filter by author Brad-Edwards opened on Mar 7, 2026

• HIGH: Remove default DATABASE_URL credentials

  KeplerOps/coronagraph#28 · Filter by author Brad-Edwards opened on Mar 7, 2026

• HIGH: Prompt injection in research sessions

  KeplerOps/coronagraph#26 · Filter by author Brad-Edwards opened on Mar 7, 2026

• HIGH: Fix SQL injection risk in vector similarity query

  KeplerOps/coronagraph#25 · Filter by author Brad-Edwards opened on Mar 7, 2026

• CRITICAL: Add Telegram bot user authorization

  KeplerOps/coronagraph#24 · Filter by author Brad-Edwards opened on Mar 7, 2026

• Code quality review

  KeplerOps/coronagraph#22 · Filter by author Brad-Edwards opened on Mar 7, 2026

• Application security review

  KeplerOps/coronagraph#21 · Filter by author Brad-Edwards opened on Mar 7, 2026