Repository navigation

v1.2.0 — Hardening & Performance (roadmap phases 0–5) - #6

Merged

badry-dev merged 36 commits into

mainfrom

claude/v1-2-0-roadmap-c45vag

Sep 2, 2026

Commits on Aug 21, 2026

Phase 0.1/0.2: upgrade dependency pins, split out dev dependencies
claude
committed
6619660
Phase 0.3/0.4: add CI workflow and ruff/pytest configuration
claude
committed
38646b7
Phase 0.5: apply ruff lint fixes and formatting
claude
committed
2dc846d
Phase 0.6: correct the license references to GPL-3.0
claude
committed
3fc5730
Phase 0.7: gate Render auto-deploy on passing CI checks
claude
committed
9070be2
Phase 0.8: remove dead find_candidate_arrays and sync the stale docs
claude
committed
4e37551
Phase 1.1: neutralize spreadsheet formula injection on all four export paths
claude
committed
e493e29
Phase 1.2/1.3: stop logging API-fetch URLs; malformed API JSONL is a 400
claude
committed
1fd8a25
Phase 1.4: replace the outbound header rule with a real allowlist
claude
committed
4c8a49a
Phase 1.5: add the missing hardening headers and tighten CSP
claude
committed
c5291b2
Phase 1.6: fail fast on the dev SECRET_KEY in production; validate int config
claude
committed
773e886
Phase 1.7: bound recursion depth in extract_table_data and handle RecursionError
claude
committed
b03c5a9
Phase 1.8: run DNS on a shared bounded pool with admission control
claude
committed
0651651
Phase 1.9: restrict API fetch to an allowlist of ports
claude
committed
ed60332
Phase 1.10: opt-in proxy-aware rate limiting
claude
committed
a36b688
Phase 1.11-1.15: JSON error handlers, no-store, upload checks, cookies, health gate
claude
committed
7614f58
Phase 2.1: gzip large text and JSON responses
claude
committed
4e285bc
Phase 2.2: cache static assets for a day behind versioned URLs
claude
committed
dac58c6
Phase 2.3-2.10: exports, preview projection, client caps, topology guard
claude
committed
0a9515f
Phase 2.3: record the confirming measurement for MAX_EXPORT_CELLS
claude
committed
8e1773b
Phase 3.1-3.5: split process_json, add annotations, return preview_limit
claude
committed
b1f6a23
Phase 4.1-4.5, 4.7, 4.8: client features and the /health split
claude
committed
213da85
Phase 5.1-5.5: sync docs and memory, add DX tooling, bump to 1.2.0
claude
committed
20b3ef4
Phase 1.11 follow-up: return JSON for CSRF rejections too
claude
committed
b47ed46

Commits

Commits on Aug 21, 2026

Commits on Aug 22, 2026

Commits on Sep 2, 2026