Skip to content

feat: add generic dataset ingestion skill with review hardening - #1

Closed
scottysilvia wants to merge 1 commit into
mainfrom
claude/explore-repo-nqBBn
Closed

feat: add generic dataset ingestion skill with review hardening#1
scottysilvia wants to merge 1 commit into
mainfrom
claude/explore-repo-nqBBn

Conversation

@scottysilvia

Copy link
Copy Markdown
Member

Adds ingest-dataset system skill for CSV, JSON, JSONL, HuggingFace, and
Parquet datasets. Lightweight formats run on the actor; heavy formats
(HF, Parquet) delegate to the sandbox via a Python loader.

Also addresses review findings:

  • Auth middleware validates API_KEY with timing-safe comparison
  • Shared ActorDb interface replaces any escape hatch
  • Position embeddings cached and used for novelty scoring
  • Drain writes markdown after SQLite commit (true atomicity)
  • crypto.randomUUID() replaces Date.now() for all IDs
  • Remove double session destroy + dead teardownSession export
  • Domain relevance gate uses whole-word matching + stop words
  • Silent catch blocks now log with console.warn

https://claude.ai/code/session_01BmJuzKQC7xoR7vsdFcRUYA

Adds ingest-dataset system skill for CSV, JSON, JSONL, HuggingFace, and
Parquet datasets. Lightweight formats run on the actor; heavy formats
(HF, Parquet) delegate to the sandbox via a Python loader.

Also addresses review findings:
- Auth middleware validates API_KEY with timing-safe comparison
- Shared ActorDb interface replaces `any` escape hatch
- Position embeddings cached and used for novelty scoring
- Drain writes markdown after SQLite commit (true atomicity)
- crypto.randomUUID() replaces Date.now() for all IDs
- Remove double session destroy + dead teardownSession export
- Domain relevance gate uses whole-word matching + stop words
- Silent catch blocks now log with console.warn

https://claude.ai/code/session_01BmJuzKQC7xoR7vsdFcRUYA
scottysilvia pushed a commit that referenced this pull request Mar 11, 2026
…skill

Cherry-pick hardening from PR #1: crypto.randomUUID for all IDs,
timing-safe auth, typed ActorDb, drain writes after SQLite commit,
console.warn on silent catches, whole-word domain matching with
stop words, remove dead teardownSession.

Add dataset ingestion as a pure skill — no actor-side parsers, no
Python in Dockerfile. The sandbox agent loads any data source
(CSV, JSON, HuggingFace, Parquet, URL), installs dependencies at
runtime, and writes structured output for the actor to drain.
@scottysilvia

Copy link
Copy Markdown
Member Author

Closing — cherry-picked hardening fixes (crypto.randomUUID, timing-safe auth, ActorDb type, drain atomicity, console.warn, whole-word domain matching) into main at 3ff78c2. Dataset ingestion reimplemented as a pure sandbox skill (no Python in Dockerfile, no actor-side parsers). See commit message for details.

@scottysilvia
scottysilvia deleted the claude/explore-repo-nqBBn branch March 11, 2026 01:34
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants