holden093 352f4cf52b fix(oidc): enforce reserved-username check in _create_user_locked ... The reserved-username guard was only in create_user(), but setup() now calls _create_user_locked() directly (to avoid nested flock deadlock). Move the check into the shared helper so it applies regardless of which path creates the user. Fixes CI failure in test_setup_rejects_reserved_admin_username.		2026-07-25 18:32:56 +02:00
..
__init__.py	Odysseus v1.0	2026-05-31 23:58:26 +09:00
atomic_io.py	Reject non-string atomic text writes (#1819)	2026-06-29 14:36:21 +01:00
auth.py	fix(oidc): enforce reserved-username check in _create_user_locked	2026-07-25 18:32:56 +02:00
constants.py	refactor(constants): single source of truth for data dir (#3368)	2026-06-08 09:58:52 +02:00
database.py	fix(db): restrict data/app.db to 0600 (#4420)	2026-07-11 21:15:49 +02:00
exceptions.py	refactor(exceptions): dedupe src/exceptions via core re-export (#4785)	2026-06-24 16:50:07 +02:00
log_safety.py	fix(security): redact credential-bearing URLs and PII from logs (#4750)	2026-06-22 23:12:39 +02:00
middleware.py	Show thumbnails on past research cards	2026-06-30 08:00:01 +00:00
models.py	fix: session context drifting — messages leaking between chats (#135) (#267)	2026-06-09 14:12:52 +01:00
oidc.py	fix(oidc): address four current-head blockers from RaresKeY review	2026-07-25 18:32:56 +02:00
platform_compat.py	fix(platform): read proc version with utf-8	2026-06-11 21:58:22 +01:00
session_manager.py	Merge verified Odysseus fixes	2026-07-23 14:49:02 +00:00