Skip to content

Comprehensive repo audit and improvement plan#149

Draft
austeane wants to merge 539 commits intomainfrom
cursor/comprehensive-repo-audit-and-improvement-plan-73ef
Draft

Comprehensive repo audit and improvement plan#149
austeane wants to merge 539 commits intomainfrom
cursor/comprehensive-repo-audit-and-improvement-plan-73ef

Conversation

@austeane
Copy link
Owner

@austeane austeane commented Aug 8, 2025

Implement initial security hardening by sanitizing HTML, securing admin endpoints, and externalizing Sentry DSNs.


Open in Cursor Open in Web

austeane and others added 26 commits July 19, 2025 21:02
…dead-code-cleanup

Remove obsolete admin migration page
# Conflicts:
#	src/lib/stores/sectionsStore.js
…unctions

- Added comprehensive error handling with try-catch blocks
- Implemented backup/restore pattern for atomic operations
- Added input validation for all parameters
- Added user-friendly error messages via toast notifications
- Return boolean success/failure indicators
- Maintain data integrity on errors by restoring backup

🤖 Generated with Claude Code

Co-Authored-By: Claude <noreply@anthropic.com>
- Marked conflict as resolved
- Updated Phase 3 with completion status
- Removed outdated merge instructions

🤖 Generated with Claude Code

Co-Authored-By: Claude <noreply@anthropic.com>
Successfully decoupled SectionHeader and TimelineSelectorModal from sectionsStore by passing constants as props. This improves component reusability and testability.
…-filterpanel.md

Update FilterPanel basics
- Replace non-existent onErrorCaptured with window error event listeners
- Fix production error: "(0 , __vite_ssr_import_1__.onErrorCaptured) is not a function"
- Add tabbable package for focus trap functionality
- Document PR review progress for Phase 5

🤖 Generated with [Claude Code](https://claude.ai/code)

Co-Authored-By: Claude <noreply@anthropic.com>
- Fixed broken admin role checking by updating isAdmin() to fetch from DB
- Added setUserRole() method to actually assign admin roles
- Fixed admin route protection to check user roles, not just dev mode
- Populated user role in session from database in hooks.server.js
- Added permission helper functions and middleware
- Created admin UI for managing user roles at /admin/users
- Added comprehensive tests for new role methods
- Fixed test setup for getUserProfile with proper mocking

Critical fixes:
- Admin routes now properly check user roles
- Role is fetched and available in event.locals.user
- Admin role can be assigned through UI
- Maintains dev mode access while adding proper role-based security

🤖 Generated with [Claude Code](https://claude.ai/code)

Co-Authored-By: Claude <noreply@anthropic.com>
…efactor-userservice-perms

Update UserService refactor ticket
Co-authored-by: austeane <austeane@gmail.com>
…us PR reviews, including navigation, error handling, and user service permissions. This cleanup enhances repository maintainability by eliminating outdated files.
Co-authored-by: austeane <austeane@gmail.com>
@cursor
Copy link

cursor bot commented Aug 8, 2025

Cursor Agent can help with this pull request. Just @cursor in comments and I'll start working on changes in this branch.
Learn more about Cursor Agents

@vercel
Copy link

vercel bot commented Aug 8, 2025

The latest updates on your projects. Learn more about Vercel for Git ↗︎

Name Status Preview Comments Updated (UTC)
qdrill ❌ Failed (Inspect) Aug 8, 2025 7:19am

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants