BuddAI/CHANGELOG.md

Changelog

[3.2.0] - 2025-12-29

Added

• WebSocket streaming for real-time token-by-token responses
• Multi-user support with session isolation
• Connection pooling for Ollama requests (10 connection pool)
• File upload validation (50MB limit, type checking)
• Zip slip protection for malicious archives
• Filename sanitization
• Type hints throughout codebase
• Enhanced iOS PWA support

Security

• File size limits enforced (50MB)
• Magic number validation for ZIP files
• Path traversal prevention in zip extraction
• Maximum upload file count (10 files)
• Sanitized filenames to prevent path injection

Performance

• Connection pooling reduces latency by ~30%
• WebSocket streaming improves perceived response time
• Per-user instance management

Fixed

• Session isolation bug (users can no longer see each other's data)
• Connection leak in Ollama requests
• Memory growth in long-running server instances

[3.1.0] - 2025-12-29

[Previous changelog content...]