9 Commits

Include renames

Author	SHA1	Message	Date
Claude	667921b100	chore: fix lint errors — duplicate import, unused imports, formatting ... Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>	2026-07-28 20:09:42 +07:00
Claude	002492626b	fix: secure SigV4, temp leaks, OOM risk, duplicate migration, and cache issues ... Security fixes: - SigV4 signature comparison now uses crypto.timingSafeEqual (timing attack fix) - AccessKey, region, and HMAC signature all timing-safe - Presigned URL expiry capped at 7 days (AWS spec compliance) - Removed duplicate migration import (dead code) Memory & leak fixes: - Temp file leak in createZip(): cleanup temp file on error in both utils/ and shared/utils/ - OOM risk in web-api/v1 upload: stream File to temp instead of arrayBuffer() - Removed duplicate migration import at startup Performance fixes: - Removed file.arrayBuffer() -> Bun.write() pattern in web-api-controller (stream + hash) Test improvements: - All fixes verified: 74/75 tests pass (1 pre-existing env config test) - S3 auth tests: 7/7 pass after timing-safe fix	2026-07-28 19:33:05 +07:00
Claude	82c7f81ffa	fix: streaming uploads, timeouts, and rate limiting for Docker registry safety ... Critical fixes for S3 Docker registry backend: - Stream PutObject body to temp file instead of req.arrayBuffer() - O(1) memory usage regardless of file size - SHA-256 hash computed while streaming - Stream UploadPart body similarly - Also fixes: size check after streaming, not before - Add 30s timeout to Telegram CDN chunk fetches (object-stream.ts) - Prevents hanging on stalled CDN connections - Add rate limiting to S3 API routes (100 req/60s window) - Prevents resource exhaustion from concurrent layer pushes - Add comprehensive test suite (10 tests): - Streaming verification (no arrayBuffer in PUT path) - Multi-MB body streaming safety - Empty body edge case - Concurrent upload isolation - Timeout signal presence - Rate limit route coverage Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>	2026-07-28 18:47:16 +07:00
Claude	da7d7c2396	chore: clean up leftover directories from agent portability ... Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>	2026-07-28 18:39:27 +07:00
Claude	a9a1938ffe	Merge branch 'worktree-ddd-clean-architecture-restructure' ... # Conflicts: # src/infrastructure/cache/index.ts # src/interfaces/http/middleware/auth.ts # src/interfaces/http/middleware/rate-limit.ts # src/shared/logger/index.ts	2026-07-28 18:38:49 +07:00
Claude	ee10cb494e	fix: resolve code review issues - import paths and structure cleanup ... - Fix infrastructure imports: chunked-storage uses new path for shared/utils and interfaces/s3 - Fix health-controller: imports from infrastructure/persistence/drizzle instead of old db/ - Fix routes/index.ts: imports from new interfaces/s3 and middleware paths - Marked Telegram-specific types in shared/utils/file.ts as future extraction Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>	2026-07-28 18:21:57 +07:00
Claude	4568644922	fix: correct import paths and add missing protocol files for DDD structure ... Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>	2026-07-28 18:19:45 +07:00
Claude	234ca7b14c	feat: rewire entry point to new architecture ... Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>	2026-07-28 18:12:48 +07:00
Claude	e40dfd8084	feat: create HTTP middleware layer ... Create auth.ts and rate-limit.ts middleware files in the interfaces layer as part of the DDD/clean architecture restructure. Also add a config re-export at src/interfaces/config/index.ts so the middleware can access configuration through the interfaces layer boundary. Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>	2026-07-28 18:06:38 +07:00