4 Commits

Include renames

Author	SHA1	Message	Date
nmemmertandClaude Sonnet 5.5	2a64f29a00	Second hardening pass: atomic data writes, bible-passage limits, webhook SSRF guard, note sanitizing, CI gates; v2.10.1 ... - Atomic temp-file + rename for all JSON data writes (no truncated files on crash) - /api/bible-passage: rate limit, range caps (60 verses), bounded cache - Admin webhooks: https-only, block private/internal/Tailscale addresses (checked at registration and delivery), no redirects - Resend webhook token compare is timing-safe - DOMPurify on rendered study notes and broadcast preview - CI runs lint + tests before build - Permissions-Policy and HSTS (production) headers; JSON error handler for /api - Tests for URL safety and atomic writes Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-10-09 09:00:28 -04:00
nmemmertandClaude Sonnet 5	335a9cbe31	Consolidate the three duplicate Bible-book lookup tables into one shared registry ... src/App.tsx (Scripture Index book map) and server/routes/bible-passage.js (BSB/bolls.life passage fetch) each hand-maintained their own independent 66-book list with a different key format (3-letter USFM id vs bolls.life's numeric id), so a future alias/rename fix in one would silently not apply to the other. Add shared/bible-books.js as the single canonical list (name + aliases + USFM id, in canonical order); the server derives its numeric bolls.life ids from the array position instead of hand-maintaining a second table. Requires allowJs + including shared/ in tsconfig.app.json so the client can import the plain-JS module alongside its TypeScript sources. Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_016Yvx4rPVy2HWe7ubuk3X3J	2026-09-07 09:49:52 -04:00
nmemmertandClaude Sonnet 4.6	2ba9c9f7f4	Add Fetch from BSB button to admin lesson editor; v1.1.36 ... Adds a one-click "Fetch from BSB" button in the lesson passage text field that calls the BSB API and overwrites the field with verse-numbered text. Also fixes reference parsing to tolerate leading book abbreviations like t:1-2 or col:1-2 by stripping letters before the chapter:verse pattern. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>	2026-08-10 10:23:48 -04:00
nmemmertandClaude Sonnet 4.6	9e602e29ec	Fetch BSB passage text from Bolls.life API in study lesson view; v1.1.35 ... Adds /api/bible-passage server route that proxies the Berean Standard Bible from Bolls.life per-verse, with in-memory caching. Study lesson scripture block now displays live BSB text instead of static passageText. Adds bibleBook field to StudyProgram so admins can set the book name explicitly when the study slug doesn't match (e.g. a study titled "ephesians-part-2"). Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>	2026-08-10 10:12:25 -04:00