saopig1andClaude Opus 4.8 e0acbf5457 feat(bot): lock settings reads from guests + persist guestMode ...

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

2026-06-25 11:48:26 +08:00

..

api

feat(bot): lock settings reads from guests + persist guestMode

2026-06-25 11:48:26 +08:00

auth

fix(auth): race-safe first-run setup + rolling cookie max-age refresh

2026-05-27 14:54:19 +08:00

middleware

feat(mw): add unified authorize() gate and requireNotGuest

2026-06-25 11:38:21 +08:00

referrer-policy.test.ts

fix(web): referrer-policy same-origin so same-origin POSTs keep a real Origin

2026-05-29 21:25:20 +08:00

security-headers.test.ts

feat(auth): X-Frame-Options + CSP frame-ancestors clickjacking defence

2026-05-27 16:34:52 +08:00

server.ts

feat(session): guest login endpoint, guestAllowed, guest /me payload

2026-06-25 11:35:10 +08:00

websocket-auth.test.ts

feat(auth): two-role permission system (admin/member)

2026-05-27 15:35:15 +08:00

websocket.ts

fix: harden bot lifecycle, validate HTTP inputs, make YouTube truly optional

2026-04-11 01:35:14 +08:00