ochenstarik-ui
|
17faecd962
|
Prepare stage-one dependency, VK and deployment hardening
|
2026-10-19 12:44:13 +07:00 |
|
Ochenstarik
|
8e39ce0cbd
|
fix(validation): Task 14 reject excludeDuplicateComments in API schemas and upgrade CI node-version to 22
|
2026-08-21 22:49:37 +07:00 |
|
Ochenstarik
|
906148813e
|
chore: Task 11 dead code cleanup and capability validation unification
|
2026-08-21 19:49:16 +07:00 |
|
Ochenstarik
|
2da8b01b1b
|
fix(core): Task 07 resolve duplicate comments semantics, fix commentsCount merging, and maintain legacy snapshot hash compatibility
|
2026-08-21 19:31:01 +07:00 |
|
Ochenstarik
|
78151572bd
|
fix(draw): Phase 2.4 enforce seed pre-commit at snapshot lock to prevent grinding
|
2026-08-20 17:24:07 +07:00 |
|
Ochenstarik
|
4e4370d6f1
|
fix(vk): Phase 2.3.1 derive effectiveCapabilities from actual resolved auth mode
|
2026-08-18 14:50:47 +07:00 |
|
Ochenstarik
|
d6f087c21e
|
feat(vk): Phase 2.3 Authenticated VK Organizer Integration - VkAuthContextResolver, single-flight token refresh mutex, controlled user token fallback, runtime capabilities, and test suite
|
2026-08-18 13:04:57 +07:00 |
|
Ochenstarik
|
5d2554f33a
|
feat(security): Phase 2.2.1 Critical AuthZ & Credential Security - centralized ownership guards, protected giveaway mutations, safe redirect validator, CSRF defenses, TokenVault production fail-fast, and comprehensive security tests
|
2026-08-18 03:08:02 +07:00 |
|
Ochenstarik
|
a27341a302
|
feat(core): Phase 1.5 Final Production Gate - Idempotency hardening with canonical request fingerprinting, secure client IP resolver with trusted proxy validation, proactive rate limit & idempotency bucket eviction, strict winner count contract (no silent under-delivery), DRAW_ALREADY_COMPLETED terminal error, 100-concurrency draw regression test, and PRODUCTION_GUARDS documentation
|
2026-08-18 02:22:54 +07:00 |
|
Ochenstarik
|
50973b4f85
|
feat(core): Phase 1.4 Production Hardening - double draw atomic protection, snapshot concurrency safety, Zod API validation, payload scalability & pagination, provider safety, normalized errors, idempotency, rate limiting, and 20 concurrent draw integration tests
|
2026-08-18 01:54:35 +07:00 |
|
Ochenstarik
|
46bf8aad6e
|
Merge remote-tracking branch 'origin/main'
|
2026-08-18 00:42:06 +07:00 |
|
Ochenstarik
|
d0aa55ae30
|
test(opencode): independent review, VK integration plan, expanded unit tests, provider capabilities validation, and security/concurrency coverage
|
2026-08-18 00:24:00 +07:00 |
|
Ochenstarik
|
26e82fcf8d
|
feat(core): Phase 1.3 Public Verification Integrity - drawId persistence, real participant snapshot and rules recalculation, reserve winners check, auditEventHash verification, strict snapshot lookup, and anti-tampering test suite
|
2026-08-18 00:15:30 +07:00 |
|
Ochenstarik
|
1bc6650041
|
feat(core): Phase 1.2 Final Core Audit Fixes - storage driver policy, snapshot relation binding, true Fisher-Yates HMAC_SHA256_FY_V1, proof/event hash separation, verification API, and GitHub Actions CI
|
2026-08-17 23:55:01 +07:00 |
|
Ochenstarik
|
0fb5fe3f8d
|
feat(core): Phase 1.1 hardening - Prisma persistence, FSM, immutable snapshots, unbiased HMAC_SHA256_FY_V1 randomizer, and audit proof
|
2026-08-17 23:44:51 +07:00 |
|
Ochenstarik
|
02920a8743
|
feat: initial commit - VK Giveaway Randomizer Phase 1
|
2026-08-17 23:34:49 +07:00 |
|