fix: code hardening from senior dev audit #40

Merged

lerko merged 6 commits from fix/audit-phase1-hardening into main

2026-05-21 01:04:31 +00:00

Author	SHA1	Message	Date
lerko	ceb29fdd7b	chore: mark all audit phases complete in TODO CI / test (pull_request) Failing after 56s Details	2026-05-20 20:54:57 -04:00
lerko	2152baeb4f	feat: add export and backup commands - nib export: dump all entities to JSON (stdout or --output file) - nib backup: atomic SQLite backup via VACUUM INTO (WAL-safe) - Store.Backup() method on db layer - Tests for both commands	2026-05-20 20:54:44 -04:00
lerko	33f6d99ba7	test(cmd): add tests for add, delete, promote, demote, absorb, ls Covers happy paths, error cases (not found, already promoted, already fluid, crystallized target, same-entity absorb), and empty result sets. Uses NIB_DB env var for test isolation.	2026-05-20 20:52:57 -04:00
lerko	d715b053e7	refactor(db): thread context.Context through all Store methods Enables request-scoped cancellation, timeouts, and graceful shutdown for all database operations across API handlers, CLI commands, and TUI.	2026-05-20 20:51:51 -04:00
lerko	50b80f4407	ci: add Gitea Actions workflow for test and lint on PR	2026-05-20 20:42:16 -04:00
lerko	8663beeb96	fix: harden API, DB, and web layer from audit findings - Cap list API limit at 200 to prevent unbounded queries - Sanitize markdown output with DOMPurify to prevent XSS - Add v4 migration with indexes on deleted_at and modified_at - Fix v2 migration swallowed ALTER TABLE errors - Tighten ~/.nib directory permissions to 0o700	2026-05-20 20:41:53 -04:00