security: fix 12 audit findings — v0.3.0#11

Merged

GeiserX merged 18 commits intomainfrom

fix/security-audit

Mar 30, 2026

Commits on Mar 30, 2026

security: fix 12 audit findings (4 critical, 3 high, 5 medium)
GeiserX
committed
fix: address remaining security review findings
GeiserX
committed
fix: close unauthenticated worker exposure on default compose
GeiserX
committed
fix: pin worker URL to request source IP in no-key mode
GeiserX
committed
fix: auto-generate shared fleet key, close worker impersonation
GeiserX
committed
fix: close fleet key first-boot race with retry-read
GeiserX
committed
test: add fleet key resolution and bootstrap coverage
GeiserX
committed
fix: auto-resolve worker_id, port protocol, fleet key in auth, bytelixir fallback
GeiserX
committed
fix: worker URL override, fleet copy button, viewer role guards
GeiserX
committed
fix: catalog cache mutation, viewer UI guards, FK pragma, wizard persistence
GeiserX
committed
fix: complete viewer UI gating, partial preference updates, CSS var
GeiserX
committed
fix: owner self-demotion guard, viewer logs/settings gating
GeiserX
committed
fix: zero-threshold payout eligibility, storj default URL, alert routing
GeiserX
committed
fix: onboarding step 4 CTAs role-aware, no /settings dead-end for non-owners
GeiserX
committed
test: regression coverage for eligibility, storj optional api_url
GeiserX
committed
test: replace mirrored eligibility tests with integration tests
GeiserX
committed
fix: use asyncio.run() in eligibility tests for CI compatibility
GeiserX
committed
release: v0.2.49 changelog and version bump
GeiserX
committed