Audit pass over the four apps: BEP 52, GDPR, PWA — and what probing the running stack found - #28

Merged

Dim145 merged 96 commits into

mainfrom

feat/audit-bep52-gdpr-pwa

Sep 3, 2026

Commits on Aug 31, 2026

feat(torznab): the seeding rules a client was never told, and rates that were a lie

Dim145
and
claude
committed
cbc161d
feat(tracker): the second infohash a hybrid torrent announces under

Dim145
and
claude
committed
efe9845
feat(web): installable, with an icon size nobody made up

Dim145
and
claude
committed
44b5f41
feat(me): a copy of your own record, and what it deliberately leaves out

Dim145
and
claude
committed
083655d
feat(admin): who did what, across the whole console

Dim145
and
claude
committed
5e80e32
docs(roadmap): the five that shipped, and two that shipped a while ago

Dim145
and
claude
committed
8cfd071

Commits on Sep 1, 2026

feat(bonus): a freeleech you can put on one torrent

Dim145
and
claude
committed
067f2be
feat(tracker): a partial seed is not a seed

Dim145
and
claude
committed
0df67d7
feat(torrents): three things a catalogue needs when it gets old

Dim145
and
claude
committed
939111d
feat(me): three keys, because one was doing three jobs

Dim145
and
claude
committed
3bcf60c
feat(me): tell me when something like this turns up

Dim145
and
claude
committed
d13d5a8
feat(auth): where an account has been signed in from

Dim145
and
claude
committed
36c4bbc
feat(admin): who vouched for them, and who they let in

Dim145
and
claude
committed
1965a23
feat(torznab): a Prowlarr definition, generated per instance

Dim145
and
claude
committed
b1dbae9
fix(api): a bad filter on the audit log was a 500

Dim145
and
claude
committed
19a664d
docs(roadmap): eight lines that are no longer wishes

Dim145
and
claude
committed
98e3be2
fix(torznab): a block a member could lift by rotating their own key

Dim145
and
claude
committed
0c47ec6
fix(themes): the contrast gate was not looking at the field it types into

Dim145
and
claude
committed
6915bdb
feat(stats): the site, looking at itself

Dim145
and
claude
committed
c2ad7e1
feat(irc): one line in a channel, and the parser for it in the same breath

Dim145
and
claude
committed
5d4ac27
fix(torznab): the feed published the announce passkey to read-key holders

Dim145
and
claude
committed
e0e1b45
fix(irc): the queue paced nothing, and two thirds of announces never left

Dim145
and
claude
committed
b2c6648
fix(stats): the adult opt-in never worked, and four figures were wrong

Dim145
and
claude
committed
ededfe1
fix(privacy): the register, the history, the export and the erasure

Dim145
and
claude
committed
57755cb
fix(tracker): an unauthenticated scrape could reach Postgres, and two oracles

Dim145
and
claude
committed
5749e8c
fix(ui): three pages rendered bare native buttons, and the toast said nothing
Dim145
committed
481dd4e
fix(web): a date in the future is not an age, and a bar must fit its slot
Dim145
committed
6c5d8d6
fix(stats): the page's title outweighed its numbers, and the charts overstated growth
Dim145
committed
0f570c1
fix(alerts): an armed alert looked exactly like a silent one, and the page had no door
Dim145
committed
c6637d2
fix(me): rotating a key you had not revealed threw the new one away
Dim145
committed
3b25bd5
fix(security): one address on five days read as five different places
Dim145
committed
30138a2
fix(irc): the test button destroyed unsaved edits, and the state block was a snapshot
Dim145
committed
72222f8
fix(audit): a fresh install read as a broken page, and the register was not dense
Dim145
committed
6044e5e
fix(invites): the chain was flat, the truncation notice was under the wrong half
Dim145
committed
19667b0
fix(themes): the contrast warning printed English inside a French sentence
Dim145
committed
172de5a
fix(torrents): a live freeleech advertised itself as already over
Dim145
committed
6058b1c
docs: what the interface pass changed, and what the contrast gate cannot see
Dim145
committed
b7f9a71

Commits on Sep 2, 2026

fix(api): a malformed query parameter answered 500, not 400

Dim145
and
claude
committed
0bc7bce
fix(admin): the dashboard's tracker light was a constant, not a status

Dim145
and
claude
committed
3a62385
fix(web): two pages shipped the server's clock and corrected it on hydration

Dim145
and
claude
committed
609c6b4
fix(alerts): a saved search rebuilt its link with the API's parameter names

Dim145
and
claude
committed
bd16c2a
fix(api): a saved search carrying a tag could not be created at all

Dim145
and
claude
committed
1a8b36b
fix(forum): a post from twelve minutes ago read as two hours old

Dim145
and
claude
committed
fb17a69
fix(messaging): stop() then start() left an orphan stream delivering twice

Dim145
and
claude
committed
7bc83b4
fix(caddy): the credential scrub in the access log had never matched a field

Dim145
and
claude
committed
f135299
refactor(api): the role cache moved out of adminAuth, and re-exporting it collided

Dim145
and
claude
committed
d97bfd1
fix(security): the API served a CSP written for the web application

Dim145
and
claude
committed
93a8fa8
fix(security): an IP ban locked staff out of the route that lifts it

Dim145
and
claude
committed
cfbf60e
fix(tracker): a hundred concurrent peer ids reached a hundred GiB/s of credit

Dim145
and
claude
committed
3e6d848
fix(db): a case-different username was a second account, and the FKs had no index

Dim145
and
claude
committed
14df017
fix(ci): the documentation was built and deployed on a Node that is end of life

Dim145
and
claude
committed
dca011f
fix(docker): Postgres trusted the network, and Caddy had no body limit

Dim145
and
claude
committed
60cb560
chore(deps): sixteen updates, and the two version decisions worth writing down

Dim145
and
claude
committed
222b46c
test(e2e): the forum and the ticket queue were empty on a kept stack

Dim145
and
claude
committed
947aa84
test(api): the panic suite timed out on its own key-derivation cost

Dim145
and
claude
committed
9788a17
fix(panic): a twelve-character password was derived at Node's defaults

Dim145
and
claude
committed
387df95
fix(auth): one proof of work could be spent twice, and a name differed by case

Dim145
and
claude
committed
0ba6daa
fix(channels): a webhook reflected its target's response back to the member

Dim145
and
claude
committed
02c211c
fix(api): an announce could claim more bytes than a number can hold

Dim145
and
claude
committed
347a9bb
fix(torrents): a wrong type in an edit reached Postgres as a 500

Dim145
and
claude
committed
d5d50b7
feat(web): keep what is being written until it is sent

Dim145
and
claude
committed
deb0918
fix(web): an error page in English, and numbers formatted in the wrong locale

Dim145
and
claude
committed
96f9c28
fix(web): four systemic faults behind five hundred interface findings

Dim145
and
claude
committed
4d9b63f
fix(shared): tighten the DID proof and the theme token helpers

Dim145
and
claude
committed
fe8db1f
docs: three pages promised protection the code does not provide

Dim145
and
claude
committed
61eae16
fix(api): the freeleech pool named its top members to anonymous callers

Dim145
and
claude
committed
87f3a69
fix(panic): encrypt was an unbounded oracle against the panic password

Dim145
and
claude
committed
6671993
fix(forum): a topic author could delete everyone else's replies

Dim145
and
claude
committed
776d746
fix(api): the upload count contradicted the anonymous-uploads setting

Dim145
and
claude
committed
ea8ce0f
fix(forum): the last two mutating routes without a schema

Dim145
and
claude
committed
bac5d58
fix(me): the one verifyTotp call without its replay guard, and a stamp reset

Dim145
and
claude
committed
3d49573
fix(security): a banned member kept the account routes under /api/auth

Dim145
and
claude
committed
b1d588a
fix(torrents): a takedown left the catalogue, the page and the file untouched

Dim145
and
claude
committed
4113ba0
feat(auth): sign out everywhere

Dim145
and
claude
committed
d0f894e
fix(relay): a race unsubscribed a channel for good, and the drain signalled nobody

Dim145
and
claude
committed
00a3482
ci(relay): the relay had no workflow at all

Dim145
and
claude
committed
e5168ed
fix(tracker): the swarm-cache ceiling counted traffic, not memory

Dim145
and
claude
committed
66d2b87
fix(tracker): budget spent before the credit was decided, and dead code removed

Dim145
and
claude
committed
a4bf1fe
feat(tracker): let an operator close UDP scrape, and stop flooding the log

Dim145
and
claude
committed
b244b8c
docs: /api/health publishes more than the reference admitted

Dim145
and
claude
committed
52c26dd
fix(web): the sanitiser passed a phishing link and ate legitimate attributes

Dim145
and
claude
committed
f624d47
fix(web): the path guard did not see %2e%2e

Dim145
and
claude
committed
dd597d4
fix(web): the bell died on reconnect, and three more values differed across hydration

Dim145
and
claude
committed
8ee6dd4
fix(web): a modal with no focus trap, and a group row only a mouse could open

Dim145
and
claude
committed
1c8515e
fix(web): 49 form controls had no accessible name

Dim145
and
claude
committed
49eff95
fix(web): document.write on the recovery-codes screen

Dim145
and
claude
committed
40199bd
fix(web): two locales hardcoded in a bilingual site

Dim145
and
claude
committed
c076dde
feat(web): the "sign out everywhere" control

Dim145
and
claude
committed
c875ee7
fix(tracker): a failed seed-time write blocked its own retry for 900 seconds

Dim145
and
claude
committed
0641035
perf(db): hnr_tracking updates could not be HOT, so each one wrote seven indexes

Dim145
and
claude
committed
ebf9ade

Commits on Sep 3, 2026

fix(db): 0071 measured a benchmark artefact, not hnr_tracking

Dim145
and
claude
committed
1053ab3
perf(tracker): a member seeding 70 torrents wrote their own row 70 times per interval

Dim145
and
claude
committed
d3322be
fix(api): safeFetch handed the caller's credentials to whoever asked for a redirect

Dim145
and
claude
committed
2eda5b3
fix(tracker): closing the UDP socket stopped the loop, not the work in flight

Dim145
and
claude
committed
047fba5
fix(web): a session revoked from another device showed a raw failure

Dim145
and
claude
committed
d7d4f08
fix(web): 24 form controls announced themselves as "text field" and nothing else

Dim145
and
claude
committed
718584b