fabi b3d876fa85 fix(review-2): medium/low + docs — config validation, hygiene, doc sync ...

- compression_concurrency wired to boot config (state.rs) and removed as a
  dead admin control.
- patch_config gains per-key integer/range validation so numerically-valid-but-
  nonsensical values (-1/NaN/3.5) are rejected instead of silently reverting to
  default at read time.
- clearAuth now also clears the display name (shared-device residual).
- e2e/Caddyfile.test mirrors prod security headers + the SSE encode-exclusion so
  the test stack is representative and can catch header regressions.
- .gitignore: ignore root-level Playwright artifacts (test-results/, report).
- docs: USER_JOURNEYS §10 and SECURITY-BACKLOG updated to match the implemented
  read-only-ban behavior and the export-path fix.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

2026-07-02 22:19:56 +02:00

..

export-viewer

frontend(plumbing): shared theme tokens, cross-cutting stores, gestures, sheets

2026-05-16 14:32:37 +02:00

src

fix(review-2): medium/low + docs — config validation, hygiene, doc sync

2026-07-02 22:19:56 +02:00

static

feat(eventsnap): UX review batch-3 — feed virtualization, a11y/UX fixes, shared primitives

2026-06-30 19:16:48 +02:00

.npmrc

chore: scaffold monorepo for EventSnap

2026-03-31 20:15:44 +02:00

Dockerfile

fix(security): batch-2 hardening — XSS allowlist, event-scoping, deploy

2026-06-29 19:39:29 +02:00

package-lock.json

test(unit): broaden coverage — quota formula + auth token/JWT decode

2026-07-01 19:53:03 +02:00

package.json

test(unit): broaden coverage — quota formula + auth token/JWT decode

2026-07-01 19:53:03 +02:00

svelte.config.js

fix(security): high — live authz, XFF, SSE buffering, atomicity, pagination

2026-07-01 21:25:50 +02:00

tsconfig.json

chore: scaffold monorepo for EventSnap

2026-03-31 20:15:44 +02:00

vite.config.ts

fix: upload body limit, role case, and connection drain (v0.12.1)

2026-04-03 18:14:12 +02:00

vitest.config.ts

test(unit): add a unit-test layer (backend cargo + frontend vitest)

2026-07-01 19:14:33 +02:00