Go to file

marcuspaico 876aa0f181 feat(security): CSP and hardening headers with upload serving

Implement Content-Security-Policy headers and strict content-type handling
for non-API responses, with x-content-type-options applied to all routes.
Adds security-headers test suite to verify header presence.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

2026-08-17 16:06:05 -07:00

.gitea/workflows

ci: fetch via public hostname — job network cannot resolve internal gitea

2026-08-17 15:02:29 -07:00

docs

docs: fix DHEA-S molar mass in M2 plan (368.49, was 384.5)

2026-08-17 15:27:09 -07:00

server

feat(security): CSP and hardening headers with upload serving

2026-08-17 16:06:05 -07:00

shared

feat(labs): draft review, confirm with normalization, discard

2026-08-17 15:46:10 -07:00

web

feat(web): labs upload, draft review, draw dashboard with history sparklines

2026-08-17 16:01:59 -07:00

.dockerignore

fix: 404 unknown API routes, add .dockerignore

2026-08-17 14:27:15 -07:00

.gitignore

fix: typecheck without emit, placeholder test, drop build artifacts

2026-08-17 14:02:12 -07:00

bun.lock

feat(labs): PDF upload, text extraction, LLM draft pipeline

2026-08-17 15:41:02 -07:00

docker-compose.yml

feat(deploy): serve SPA from server, Dockerfile, compose, deploy docs

2026-08-17 14:23:29 -07:00

Dockerfile

feat(deploy): serve SPA from server, Dockerfile, compose, deploy docs

2026-08-17 14:23:29 -07:00

LICENSE

chore: monorepo scaffold, CI, MIT license

2026-08-17 13:55:39 -07:00

package.json

fix: typecheck uses -p (non-composite projects)

2026-08-17 14:21:07 -07:00

README.md

chore: monorepo scaffold, CI, MIT license

2026-08-17 13:55:39 -07:00

tsconfig.base.json

fix: typecheck without emit, placeholder test, drop build artifacts

2026-08-17 14:02:12 -07:00

README.md

Helios

Self-hosted, open-source health companion — a FOSS alternative to closed "24/7 AI health companion" products. Your data stays on your server; the AI runs on a key you provide (OpenRouter, or Ollama for zero third parties).

Status: pre-alpha scaffold. See docs/superpowers/specs/ for the design.

Develop

bun install
bun run typecheck && bun test