Issues

• fix: process_docs silently drops invalid paths instead of reporting rejection reason

  bug
  paulbreuler/limps#155 · Filter by author paulbreuler opened on Mar 2, 2026

• fix: HTTP GET /mcp returns 400 instead of 405 Method Not Allowed

  bug
  paulbreuler/limps#154 · Filter by author paulbreuler opened on Mar 2, 2026

• fix: search_docs reflects null bytes and ANSI escapes from user input in error messages

  bugsecurity
  paulbreuler/limps#153 · Filter by author paulbreuler opened on Mar 2, 2026

• security: health and version endpoints expose PID, Node version, and internal config

  bugsecurity
  paulbreuler/limps#152 · Filter by author paulbreuler opened on Mar 2, 2026

• security: maxBodySize bypassed by chunked transfer encoding (no Content-Length header)

  bugsecurity
  paulbreuler/limps#151 · Filter by author paulbreuler opened on Mar 2, 2026

• security: symlink traversal in process_doc allows reading arbitrary files

  bugsecurity
  paulbreuler/limps#150 · Filter by author paulbreuler opened on Mar 2, 2026

• feat(tui): wire usePlanTree to DB indexer for live plan state

  enhancement
  paulbreuler/limps#149 · Filter by author paulbreuler opened on Mar 2, 2026

• feat(acp): wire ACP create_artifact to the document model pipeline

  enhancement
  paulbreuler/limps#148 · Filter by author paulbreuler opened on Mar 2, 2026

• feat(acp): wire ACP validate_invest tool to invest.ts

  enhancement
  paulbreuler/limps#147 · Filter by author paulbreuler opened on Mar 2, 2026

• feat(acp): wire claim_task and list_tasks to the DB indexer

  enhancement
  paulbreuler/limps#146 · Filter by author paulbreuler opened on Mar 2, 2026

• 🎨 PREA was here — discovered limps

  paulbreuler/limps#143 · Filter by author EpicPollon opened on Feb 14, 2026