111 Commits

Include renames

Author	SHA1	Message	Date
poslop	ea9edc211a	UI: consistent sort arrow gap, uniform pill roundness (slug -> radius-sm)	2026-09-09 16:50:06 -05:00
poslop	b21be29daa	minor fixes: version label (#93), view dedupe tests (#95)	2026-09-09 16:40:53 -05:00
poslop	cd70dd0b0e	Merge origin/main (license, compose, #65 leak guard) into cans work	2026-09-09 16:39:14 -05:00
poslop	19804d47a3	Cans UI + parity: unlock-cookie flow, /can page, listings badge, custom slug, delete, sweeper; #32 perf notes (#4, #32)	2026-09-09 16:34:51 -05:00
fen	3d415edbdc	fix #84: security headers dropped because they were set post-flush; set pre-handler	2026-09-09 10:54:16 -05:00
poslop	4cb8a3e127	Merge pull request 'Search: loading indicator and performance note (#32)' (#72) from issue-32-search-indicator into main	2026-09-09 14:26:25 +00:00
poslop	44fe3c5772	Merge pull request 'Security headers middleware: CSP, Referrer-Policy, nosniff (#59)' (#76) from issue-59-security-headers into main	2026-09-09 14:26:01 +00:00
agent	78374b2d49	fix: atomic burn-after-read claim (#58) ... SoftDelete now reports whether it performed the delete (conditional UPDATE ... WHERE deleted_at IS NULL checked via RowsAffected). RegisterRead returns an admitted flag: legacy burn pastes admit exactly one reader (the atomic soft-delete winner), and burn-after-N pastes increment reads_used via a conditional UPDATE guarded on reads_used < reads_limit, so concurrent readers cannot both consume the final read. API, HTML, and raw read paths return 404 when the reader loses the burn claim; content is never served twice. OpenStore pins the SQLite pool to one connection: concurrent writes on separate pooled connections surfaced SQLITE_BUSY as spurious 500s instead of serializing. Adds concurrency regression tests: 24 parallel readers of a burn paste (exactly one receives content, none of the others leak it) and 30 parallel readers vs a 3-read budget (exactly 3 admitted, then 404).	2026-09-09 09:18:42 -05:00
palette-agent	e08cafe9c8	security headers middleware: CSP, Referrer-Policy, nosniff on HTML pages (#59) ... - web.SecurityHeaders middleware wired into the chi router - Content-Security-Policy: default-src 'self'; script-src 'self' 'unsafe-inline' (page scripts are inline); frame-ancestors 'none' - Referrer-Policy: no-referrer, X-Content-Type-Options: nosniff - Applied only to text/html responses; JSON API and /raw pass through unchanged - Regression test internal/web/securityheaders_test.go	2026-09-09 09:16:42 -05:00
poslop	c288fc73a7	Search: spinner indicator + performance note on client-side filtering (#32) ... - Fix filter fetch to request limit=100 (API max) instead of 500, which the API silently clamped, so filtered results actually cover the fetch window. - Document client-side filtering behavior and limits in README Performance Notes.	2026-09-09 09:13:40 -05:00
poslop	4f1e901f04	Refactor: split monolith into cmd/palette + internal/{store,api,web,lang} (#35)	2026-09-09 01:33:39 -05:00