- client.test.ts: use globalThis.fetch instead of global.fetch and drop the
unused describe import, fixing the broken `npm run build`
- DocumentEditor: separate load-error (replaces view) from save-error (shown
inline, editor and unsaved content stay mounted so a failed save no longer
destroys in-progress edits); expose dirty state via onDirtyChange
- App: prompt via window.confirm before switching documents while dirty;
increment a refreshKey on successful upload so FileExplorer re-fetches the
tree; track isSearching so the "no results" overlay doesn't flash during
the search debounce window
- FileExplorer: accept a refreshKey prop to force a root-listing re-fetch
- SearchBar: convert to a controlled component (value prop) so App can clear
the input after jumping to a search result, fixing input/state desync
- UploadButton: surface upload failures inline instead of swallowing the
rejected promise, and keep the modal open for retry
- main.py: remove duplicate /health endpoint definition
- text_extract.py: HTML-escape extracted plain text before indexing so raw
markup in uploaded documents can't render as live HTML via search snippets
(stored XSS fix)
- document_service.py: base64-encode content when UTF-8 decoding fails
instead of raising UnicodeDecodeError (500) on binary files; add upload
validation for file extension (allowlist) and size (10MB max)
- routers/documents.py: map new validation errors to HTTP 400 with a clear
detail message instead of letting them 500
- add/extend tests covering escaping, binary get_document, and upload
validation rejection + acceptance paths
