Juan DenisandClaude Fable 5 57c0dc3956 feat(utils): CachedRemoteIndex — one remote-catalog engine (plan 77 F1) ...

The fetch -> TTL -> last-good -> bundled pipeline that four services
re-implemented (and that produced the bundled-index and proxy-rewrite
incidents) now lives once in utils/remote_index. The extension registry
and theme registry become thin normalizers over it; the registry gains
the failure-retry throttling the theme copy had already hardened to
(last-good under full TTL, bundled held only error_ttl). Deliberate
non-adopters, documented: template_service (keyed per-repo cache with
targeted invalidation) and security_feed (DB-durable last-good for a
daily job). Engine unit tests pin the semantics; registry/theme/signing
suites stay green (test seeds updated to the shared cache seam).

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

2026-08-19 05:27:10 -04:00

..

__init__.py

Implement security features: key rotation, IP allowlist, anomaly detection

2026-01-22 18:11:22 -05:00

background_loop.py

feat(realtime): BackgroundLoop helper; sockets broadcasters adopt it (plan 77 E5)

2026-08-19 05:01:10 -04:00

backup_crypto.py

feat(backups): client-side encryption (opt-in, reuses the Fernet key)

2026-06-19 13:22:43 -04:00

client_ip.py

feat(security): trust reverse-proxy client IP via one gated seam

2026-07-18 00:51:21 -04:00

config_store.py

refactor(db): one SQL-exec dispatcher, and adopt the doors already built

2026-08-18 11:26:40 -04:00

crypto.py

fix(system): version resolution honors custom install dirs and Docker

2026-07-02 22:14:37 -04:00

domain.py

feat: canonical domain + encryption key bootstrap

2026-06-19 01:34:02 -04:00

env.py

feat(utils): env one-door — env_str/env_bool/env_int (plan 77 F4)

2026-08-19 02:12:45 -04:00

formatting.py

refactor(utils): one byte formatter for prose, not three copies of it

2026-08-17 19:59:16 -04:00

git_security.py

fix(security): close git argument injection in repo_url/app_path/branch (GHSA-8vx6-432p-h62q)

2026-08-11 19:43:46 -04:00

ingress.py

feat: make the ingress-plane boundary explicit (host Nginx vs proxy stack)

2026-06-23 20:57:40 -04:00

ip_utils.py

Implement security features: key rotation, IP allowlist, anomaly detection

2026-01-22 18:11:22 -05:00

remote_index.py

feat(utils): CachedRemoteIndex — one remote-catalog engine (plan 77 F1)

2026-08-19 05:27:10 -04:00

sdk.py

feat(sdk): bump to 1.2.0 + PluginSlot/ErrorBoundary exports

2026-08-05 02:38:13 -04:00

sensitive_data_filter.py

refactor(security): one sensitive-keyword union for all four redaction sinks (plan 77 F3)

2026-08-19 02:10:22 -04:00

slug.py

refactor(db): one SQL-exec dispatcher, and adopt the doors already built

2026-08-18 11:26:40 -04:00

system.py

refactor: finish the §G1 subprocess migration (census 195 -> 28)

2026-08-18 16:38:25 -04:00

version.py

feat(files): Stack quick link follows the real install dir

2026-07-02 22:19:14 -04:00