saopig1andClaude Opus 4.8 907a6651f5 fix(perm): access-check before bot-existence (no 403/404 leak); label permissions audit action ...

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

2026-05-30 14:12:04 +08:00

..

api

fix(perm): access-check before bot-existence (no 403/404 leak); label permissions audit action

2026-05-30 14:12:04 +08:00

auth

fix(auth): race-safe first-run setup + rolling cookie max-age refresh

2026-05-27 14:54:19 +08:00

middleware

feat(perm): enforce capabilities + bot access on action routes

2026-05-30 13:32:08 +08:00

security-headers.test.ts

feat(auth): X-Frame-Options + CSP frame-ancestors clickjacking defence

2026-05-27 16:34:52 +08:00

server.ts

feat(perm): admin permissions API + audit + new-member basic tier

2026-05-30 13:44:12 +08:00

websocket-auth.test.ts

feat(auth): two-role permission system (admin/member)

2026-05-27 15:35:15 +08:00

websocket.ts

fix: harden bot lifecycle, validate HTTP inputs, make YouTube truly optional

2026-04-11 01:35:14 +08:00