yusiboyz

yusiboyz pushed to master at yusiboyz/platform

2026-03-29 15:38:44 -05:00

877021ff20 fix: remaining code issues — TLS, CORS, disconnect safety, cleanup

yusiboyz commented on issue yusiboyz/platform#9

2026-03-29 15:17:41 -05:00

Performance Hardening: Cache and De-risk Summary Endpoints

Completed. Budget /transactions/recent cached 30s, /uncategorized-count cached 2min. Actual Budget per-account API constraint documented. All inventory full scans already eliminated. No…

yusiboyz commented on issue yusiboyz/platform#8

2026-03-29 15:17:41 -05:00

Dependency Security and CI Enforcement

Repo-side complete. Workflow reviewed and confirmed. Runner dependency documented in .gitea/README.md. Status: blocked on Gitea Actions runner infrastructure — not a code issue.

yusiboyz commented on issue yusiboyz/platform#5

2026-03-29 15:17:41 -05:00

Gateway Trust Model: Protect Internal Services and Service-Level Data

Completed. Removed /test endpoint from inventory. Trust model doc rewritten with accurate per-user vs gateway-key distinction, known limitations documented. No remaining debug surfaces.

yusiboyz pushed to master at yusiboyz/platform

2026-03-29 15:17:30 -05:00

ac5c758056 fix: complete remaining partial issues (#5, #8, #9)

yusiboyz pushed to master at yusiboyz/platform

2026-03-29 15:12:51 -05:00

6087be599b fix: remove fitness dropdown from desktop navbar — single link instead

yusiboyz pushed to master at yusiboyz/platform

2026-03-29 14:51:36 -05:00

792d89a377 fix: move fitness goals to Settings, clean up mobile nav

yusiboyz pushed to master at yusiboyz/platform

2026-03-29 14:47:34 -05:00

e8d1cd1681 fix: add fitness sub-pages to mobile More sheet

yusiboyz pushed to master at yusiboyz/platform

2026-03-29 14:44:47 -05:00

810502ab9d feat: multi-user support, goals editing, shared food library

yusiboyz commented on issue yusiboyz/platform#8

2026-03-29 13:50:24 -05:00

Dependency Security and CI Enforcement

Repo-side work complete. .gitea/workflows/security.yml covers dependency audit, secret scanning, Dockerfile lint. Remaining: configure a Gitea Actions runner to execute the workflow. This is…

yusiboyz commented on issue yusiboyz/platform#9

2026-03-29 13:50:24 -05:00

Performance Hardening: Cache and De-risk Summary Endpoints

Completed in 9e13984 — Inventory /issues and /needs-review-count use server-side NocoDB WHERE filters (no full scans). Budget buildLookups cached 2min. Budget summary cached 1min. Dashboard…

yusiboyz commented on issue yusiboyz/platform#5

2026-03-29 13:50:24 -05:00

Gateway Trust Model: Protect Internal Services and Service-Level Data

Completed in 7a7286a — SERVICE_LEVEL_AUTH renamed to GATEWAY_KEY_SERVICES. /debug-nocodb removed. NocoDB search sanitized (strips filter operators). Token validation uses protected endpoints…

yusiboyz commented on issue yusiboyz/platform#7

2026-03-29 13:50:24 -05:00

Transport Security: Finish Cookie Hardening, TLS Verification, and Proxy Controls

Completed in 7c05ef1 + 9e13984 — _internal_ssl_ctx removed entirely. proxy.py uses plain urlopen() (all internal services are HTTP). ssl import removed from config.py. External calls (OpenAI,…

yusiboyz pushed to master at yusiboyz/platform

2026-03-29 13:50:07 -05:00

9e13984b05 fix: performance hardening — eliminate full table scans (#9)

yusiboyz pushed to master at yusiboyz/platform

2026-03-29 13:48:20 -05:00

7a7286ac1c fix(gateway,inventory): trust model hardening (#5)

yusiboyz pushed to master at yusiboyz/platform

2026-03-29 13:46:13 -05:00

7c05ef14c7 fix(gateway): remove no-verify SSL context from proxy (#7)

yusiboyz commented on issue yusiboyz/platform#9

2026-03-29 10:13:12 -05:00

Performance Hardening: Cache and De-risk Summary Endpoints

Fixed in 4ecd233 — Budget summary cached 1min. Dashboard cached 30s per user (2.1s→40ms). Inventory health endpoint added.

yusiboyz commented on issue yusiboyz/platform#8

2026-03-29 10:13:12 -05:00

Dependency Security and CI Enforcement

Fixed in 4ecd233 — Added .gitea/workflows/security.yml: dependency audit, secret scanning, Dockerfile lint. Requires Gitea Actions runner to execute.

yusiboyz commented on issue yusiboyz/platform#5

2026-03-29 10:13:12 -05:00

Gateway Trust Model: Protect Internal Services and Service-Level Data

Fixed in 4ecd233 — Token validation uses protected endpoints. Trust model documented in docs/trust-model.md. Unknown services rejected.

yusiboyz pushed to master at yusiboyz/platform

2026-03-29 10:13:02 -05:00

4ecd2336b5 fix: complete remaining remediation (#5, #8, #9)