7 Commits

Include renames

Author	SHA1	Message	Date
openhands	59b63d6e70	Fix real Biome bugs: inner declarations, dup keys, assign-in-expr, implicit any, cookie, a11y svg/keyboard, json	2026-07-14 18:58:40 +02:00
openhands	2455a4850e	fix: make useServerAction accept void-returning actions and remove dead queryCount ... - Type run()'s action param as Promise<unknown> and cast result (Biome strips void from unions) - Remove unused queryCount field increment in DbService (dead code) - Reformat theme-contrast test pair assertions	2026-07-13 22:25:56 +02:00
openhands	045dc06a1f	fix: resolve type errors and migrate pnpm settings to pnpm-workspace.yaml ... - Move pnpm.onlyBuiltDependencies/overrides from package.json to pnpm-workspace.yaml (clears pnpm WARN) - Allow useServerAction run() to accept actions returning void - Make adminAction/authAction input optional so no-schema actions can be called without args - Return ActionResult from updateBcPage - Fix categoryPageMap value type (number | undefined) - Declare DbService.queryCount field - Use definite assignment for release in withFurniDataLock - Narrow pair type in theme-contrast test	2026-07-13 22:10:50 +02:00
openhands	df38dccbf1	style: format code biome	2026-07-13 21:57:41 +02:00
openhands	8efd032cc6	style: format code with prettier agian	2026-07-13 21:41:52 +02:00
openhands	bef458dbf8	Rename executeRaw → executeRawUnsafe to make SQL injection risk explicit ... The method wraps Prisma's which trusts the caller to use ? placeholders. The Unsafe suffix is a naming convention that signals 'review caller for parameterization'.	2026-07-13 12:41:11 +02:00
openhands	f6ad030c5b	Add EpicNext CMS foundation layer and fix critical security gaps ... - Create src/lib/foundation/ (860 LOC, 9 files): typed action wrappers, DbService with health checks, CSRF validation, safe redirects, AsyncLocalStorage request tracing, branded types, reusable Zod schemas - Migrate moderation.ts and user-settings.ts to foundation patterns - Fix abuse-guard.ts: bound in-memory Maps with LRU eviction (was unbounded) - Fix access-guard.ts: separate try/catch per check, log degradation instead of blanket fail-open - Replace raw redirect() calls with safeRedirect() in guard.ts and permissions.ts to prevent open-redirect attacks - Add CSRF validation to api-handler.ts for mutating methods - Add canonicalizeFormData() utility for FormData input sanitization	2026-07-13 12:03:49 +02:00