2 Commits

Include renames

Author	SHA1	Message	Date
Claude	639ad6877d	chore: code quality, CI/CD, and DX improvements ... Phase 3 — Code Quality: - Deduplicate nowUnix() in lock-ops.mjs (import from utils.mjs) - Promote ESLint no-unused-vars to error, fix all 46 violations - Remove dead code: unused imports, variables, and catch bindings - Add /* global marked */ for CDN-loaded library in dashboard Phase 4 — CI/CD: - Add Node.js version matrix (22, 23) to CI workflow - Add npm audit security scan step to CI - Add innerHTML usage check to CI pipeline - Enable Dependabot for npm and GitHub Actions dependencies - Create PR template Phase 5 — Developer Experience: - Create .env.example documenting all environment variables - Expand CONTRIBUTING.md with commit conventions, agent/prompt creation guide, architecture overview, and test integrity - Add system architecture diagram with Mermaid (docs/architecture/) https://claude.ai/code/session_01GfwUNbgeMgXreFDbsNQMsS	2026-02-19 21:03:30 +00:00
Claude	e7ecd2617e	fix(security): harden dashboard auth timing, XSS, and CSP ... - Fix timingSafeCompare to pad buffers to equal length before comparing, closing the content timing side-channel on length mismatch - Replace innerHTML with textContent for error messages to prevent XSS - Extract inline script from dashboard/index.html into dashboard/app.js - Remove 'unsafe-inline' from script-src CSP directive - Update security test to match new CSP policy https://claude.ai/code/session_01GfwUNbgeMgXreFDbsNQMsS	2026-02-19 20:53:15 +00:00