peter 2a7f49c981 fix(r5): address the /code-review high round — 10 findings ...

- HLS sweep only deletes directories matching the session-name shape; the root
  is admin-configurable and may be a shared path
- playlist unwrap picks the first entry that actually downloaded, not entries[0]
- concat quoting keeps backslashes literal (ffmpeg treats them so inside '')
- ArrowUp/Down defer while the focused element can still scroll that way
- the staging fallback skips yt-dlp working files (.part-Frag/.ytdl/.temp/.fNNN)
- the boot HLS sweep runs off the event loop
- volume persistence is debounced (was a setItem per wheel notch) and a spin no
  longer loses notches to the iframe's lagging getVolume
- _Breaker.run owns the whole open/call/record protocol; four call sites shrink
- should_prune extracted and unit-tested, plus RSS error-vs-empty tests
- the worker exits non-zero when the schema never lands

2026-07-23 23:25:06 +02:00

..

alembic

feat(security): R4 S3 — abuse & leak hardening

2026-07-23 03:38:57 +02:00

app

fix(r5): address the /code-review high round — 10 findings

2026-07-23 23:25:06 +02:00

tests

fix(r5): address the /code-review high round — 10 findings

2026-07-23 23:25:06 +02:00

alembic.ini

feat: M1 foundation — compose stack, FastAPI, Google OAuth, encrypted tokens

2026-06-11 01:01:37 +02:00

Dockerfile

feat: M1 foundation — compose stack, FastAPI, Google OAuth, encrypted tokens

2026-06-11 01:01:37 +02:00

Dockerfile.test

test(backend): pure-logic pytest harness, run in an isolated test image

2026-07-21 03:29:24 +02:00

entrypoint.sh

harden(auth): SA3 review follow-ups — IPv6-mapped match + no-proxy-headers guardrail

2026-07-12 03:49:08 +02:00

log_config.json

chore: rename remaining subfeed references to siftlode

2026-06-21 06:53:12 +02:00

pytest.ini

test(backend): pure-logic pytest harness, run in an isolated test image

2026-07-21 03:29:24 +02:00

requirements-dev.txt

test(backend): pin the traversal guard against a string-prefix bypass

2026-07-21 03:36:42 +02:00

requirements.txt

feat(downloads): Deno JS runtime + web/android clients to complete the POT setup

2026-07-03 22:46:32 +02:00

ruff.toml

chore(hygiene): Phase 4 guardrails — noUnusedLocals/Parameters + dead-code sweep

2026-07-12 02:15:52 +02:00