Juan Denis ad96423966 feat(themes): hardening — preview validation, registry caching, token wiring (plan 61) ...

- Validate preview swatches as colors server-side (closes url() smuggling
  via POST /import); import tolerates unknown metadata (license, image, modes)
- theme_registry_service: negative caching on fetch failure (TTL-stamped
  last-good + 60s failure backoff — no more 15s gallery stalls offline);
  drop dead base_url cache key; refresh stale comment
- .env.example: document SERVERKIT_THEMES_REGISTRY_URL/_TTL
- SCSS: route $success/$warning/$danger/$info through --green/--amber/
  --red/--cyan (raw twins for color-function call sites), $font-main/$font-mono
  through --sans/--mono, scrollbar track through --scrollbar-track
- Fix 5 undefined CSS var consumers (--radius-md/--card-bg/--danger/
  --accent-subtle/--accent-soft -> existing tokens)
- Nits: drop dead ThemeStudioTrigger export, dedupe lucide import,
  run check-theme-tokens in pre-commit hook
- docs/plans/61_THEMES_HARDENING_PLAN.md

23 backend theme tests pass; check-theme-tokens, lint (0 errors), build green

2026-07-23 09:25:01 -04:00

..

app

feat(themes): hardening — preview validation, registry caching, token wiring (plan 61)

2026-07-23 09:25:01 -04:00

migrations

feat(themes): backend model, API, and registry pipeline (plan 60 Phase 2-3)

2026-07-23 00:24:00 -04:00

serverkit_installer

docs: adopt numbered filenames for docs/plans and update references

2026-07-01 20:49:41 -04:00

templates

fix(templates): pin prompture-hub to 0.0.1 (0.0.2 was never published to PyPI)

2026-07-21 23:13:08 -04:00

tests

feat(themes): hardening — preview validation, registry caching, token wiring (plan 61)

2026-07-23 09:25:01 -04:00

_dbcheck.py

Add test sandbox and harden install scripts

2026-07-20 22:26:19 -04:00

.bandit

Add dev launcher; harden backups & storage

2026-03-02 22:48:29 -05:00

.dockerignore

Compose: containerize backend & build frontend

2026-03-01 14:30:21 -05:00

.env.example

Add review rules and proxy/auth docs

2026-07-18 01:23:47 -04:00

.gitignore

Add dev launcher; harden backups & storage

2026-03-02 22:48:29 -05:00

cli.py

feat(cli): --json output on read-only admin CLI verbs

2026-07-11 01:22:49 -04:00

config.py

feat(auth): per-IP login brute-force throttle

2026-07-18 00:59:19 -04:00

Dockerfile

fix(deploy): make docker-compose.yml frontend-only (backend runs on host)

2026-06-25 16:20:32 -04:00

requirements.txt

Add pip-audit CI gate and bump click

2026-07-20 02:16:47 -04:00

run.py

Add unified dev scripts and improve login UX

2026-01-25 18:33:25 -05:00

serverkit_cron_run.py

feat(cron): completion — run history, project scope, cwd/run-as (plan 34)

2026-07-07 20:29:29 -04:00

smoke_sandbox.py

Add test sandbox and harden install scripts

2026-07-20 22:26:19 -04:00

wp-cli.phar

Add multi-site WordPress management and UI overhaul

2026-01-28 22:15:57 -05:00