3 Commits

Include renames

Author	SHA1	Message	Date
nmemmertandClaude Sonnet 5.5	2a64f29a00	Second hardening pass: atomic data writes, bible-passage limits, webhook SSRF guard, note sanitizing, CI gates; v2.10.1 ... - Atomic temp-file + rename for all JSON data writes (no truncated files on crash) - /api/bible-passage: rate limit, range caps (60 verses), bounded cache - Admin webhooks: https-only, block private/internal/Tailscale addresses (checked at registration and delivery), no redirects - Resend webhook token compare is timing-safe - DOMPurify on rendered study notes and broadcast preview - CI runs lint + tests before build - Permissions-Policy and HSTS (production) headers; JSON error handler for /api - Tests for URL safety and atomic writes Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-10-09 09:00:28 -04:00
nmemmertandClaude Sonnet 4.6	26a51f9089	Fix Seafile API path from /api/v2.1/ to /api2/; v2.0.14 ... This Seafile instance exposes /api2/ not /api/v2.1/. Updated both the upload-link call in the host upload route and the dir listing in the Seafile watcher. Confirmed /api2/ works via node fetch test on the server. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>	2026-09-08 15:25:48 -04:00
nmemmertandClaude Sonnet 4.6	1e396644a9	Add upload email notifications with Seafile direct-upload watcher; v2.0.6 ... - Portal uploads send one email immediately (host, episode, passage, description, filenames) via Resend to NUGGETS_NOTIFY_EMAIL - Seafile watcher polls /Episode Upload every 15 min for direct uploads and sends a notification for any new file not already seen via portal - Files uploaded through the portal are marked seen so the watcher never sends a duplicate notification - Credentials kept out of git: SEAFILE_TOKEN, SEAFILE_NUGGETS_REPO_ID, NUGGETS_NOTIFY_EMAIL now sourced from docker .env file Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>	2026-09-08 13:54:46 -04:00