Repository navigation

Pre-ship security pass: 25-item audit and fixes - #148

Merged

Programcode merged 28 commits into

mainfrom

security/preship-pass

Oct 17, 2026

Merged

Pre-ship security pass: 25-item audit and fixes#148
Programcode merged 28 commits into
mainfrom
security/preship-pass

Commits on Oct 16, 2026
- Add a per-agent, Docker-free local Supabase stack helper
  
  Programcode
  and
  claude
  committed
  62899a8
- Plan the 25-item pre-ship security pass
  
  Programcode
  and
  claude
  committed
  77ffc84
- Document the per-agent stack and run the full database suite on it
  
  Programcode
  and
  claude
  committed
  ce8883b
- Harden promo redemption, client grants and account deletion
  
  Programcode
  and
  claude
  committed
  786017b
- Serve Edge Functions on the per-agent stack
  
  Programcode
  and
  claude
  committed
  4b566b7
- Render Markdown images from model output as links
  
  Programcode
  and
  claude
  committed
  7b8e7d7
- Clear tool drafts on sign-out and user switch
  
  Programcode
  and
  claude
  committed
  f406e95
- Tighten the CSP to the hosts the app uses
  
  Programcode
  and
  claude
  committed
  3e17be4
- Guard the public build and trim client telemetry
  
  Programcode
  and
  claude
  committed
  fea03d1
- fix(edge): claim Stripe events before applying current subscription state
  
  Programcode
  and
  codex
  committed
  c7d59d1
- fix(edge): authenticate and allowlist AI features before processing input
  
  Programcode
  and
  codex
  committed
  f5097e9
- fix(edge): conceal internal and provider errors from clients
  
  Programcode
  and
  codex
  committed
  71b7a85
- fix(edge): validate promo inputs and omit attempted codes from logs
  
  Programcode
  and
  codex
  committed
  46e8622
- fix(edge): rate limit unknown demo callers without extending refusals
  
  Programcode
  and
  codex
  committed
  63590ba
- fix(edge): validate import bodies and public hosts before reserving quota
  
  Programcode
  and
  codex
  committed
  d375141
- fix(edge): restrict export origins and vary CORS responses by Origin
  
  Programcode
  and
  codex
  committed
  9dfab93
- fix(edge): keep prompt and research text out of diagnostic logs
  
  Programcode
  and
  codex
  committed
  2af63d8
- Recover abandoned webhook claims and take payment status from Stripe
  
  Programcode
  and
  claude
  committed
  9bd27e4
- Pin supabase-js in Edge Functions to the client's version
  
  Programcode
  and
  claude
  committed
  9671fc0
- Record the pre-ship security findings and new database rules
  
  Programcode
  and
  claude
  committed
  7b234b8
- Describe the explicit Supabase hosts in the CSP
  
  Programcode
  and
  claude
  committed
  66ca201
- Give the webhook a fake Stripe in the full-stack gate
  
  Programcode
  and
  claude
  committed
  660d00f
- Find Library source fields by placeholder in full-stack journeys
  
  Programcode
  and
  claude
  committed
  d5a2a8e
- Claim webhook events on the database clock and retry in-flight ones
  
  Programcode
  and
  claude
  committed
  af01c87
- Report a webhook duplicate only for a completed claim
  
  Programcode
  and
  claude
  committed
  4323a68
- Update the security report for the review fixes
  
  Programcode
  and
  claude
  committed
  0dae75e
Commits on Oct 17, 2026
- Merge remote-tracking branch 'origin/main' into security/preship-pass
  Programcode
  committed
  633317c
- Drop hosted rate_limits and global_prompts policies by catalog
  
  Programcode
  and
  claude
  committed
  ebb3f40

Commits

Commits on Oct 16, 2026

Commits on Oct 17, 2026