chore: audit remediation — dead code, real bugs, test gaps, doc drift#8

Merged

Koopa0 merged 31 commits into

mainfrom

chore/audit-remediation-2026-06-24

Jun 24, 2026

Commits on Jun 24, 2026

refactor(mcp): remove dead Server.registry field and WithRegistry option
Koopa0
committed
refactor: remove zero-reference dead types and sentinels
Koopa0
committed
refactor: remove zero-reference store methods and orphaned queries
Koopa0
committed
fix: catch SIGTERM for graceful shutdown
Koopa0
committed
fix: drain background workers when the listener errors
Koopa0
committed
fix: map goal CHECK violation to 400 not 500
Koopa0
committed
refactor(mcp): remove the never-supported search_knowledge project filter
Koopa0
committed
fix: narrow PutPlan to the plan_day state allowlist
Koopa0
committed
fix(content): reject control characters in admin Create/Update
Koopa0
committed
feat(auth): purge expired refresh tokens periodically
Koopa0
committed
feat(content): surface review_note in the admin detail read
Koopa0
committed
fix(frontend): SSR hardening — explicit transfer cache, prerender legal pages, zoneless server
Koopa0
committed
fix(frontend): render an error state on the home page
Koopa0
committed
fix(frontend): trap focus in the command palette
Koopa0
committed
refactor(frontend): prune 33 unused design-system components and the dead graph API
Koopa0
committed
test(frontend): add markdown XSS sanitization tests; drop hollow static-page specs
Koopa0
committed
test(mcp): cover validateProposeContent rejection branches + fuzz
Koopa0
committed
test(feed): replace fictional handler tests with real integration coverage
Koopa0
committed
test(stats): replace DB-mock handler tests with testcontainers integration
Koopa0
committed
test(todo): cover interval-mode recurrence arithmetic
Koopa0
committed
test(goal): assert a blank title returns ErrInvalidInput
Koopa0
committed
test(auth): cover the refresh-token consume cycle; drop skipped stub
Koopa0
committed
test: remove tautological tests in content and api
Koopa0
committed
docs: correct stale and wrong code comments
Koopa0
committed
test(mcp): drop the obsolete project-filter integration test
Koopa0
committed
fix: surface both listener and shutdown errors on exit
Koopa0
committed
fix(content): reject control characters in the admin slug field
Koopa0
committed
refactor: address review nits
Koopa0
committed
docs(readme): correct the authz model, tool count, and missing tool
Koopa0
committed
chore: regenerate sqlc after SQL comment fixes
Koopa0
committed
docs(readme): reframe the agent narrative around the active drivers
Koopa0
committed

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

chore: audit remediation — dead code, real bugs, test gaps, doc drift#8

chore: audit remediation — dead code, real bugs, test gaps, doc drift#8
Koopa0 merged 31 commits into
mainfrom
chore/audit-remediation-2026-06-24

Commits on Jun 24, 2026

refactor(mcp): remove dead Server.registry field and WithRegistry option

refactor: remove zero-reference dead types and sentinels

refactor: remove zero-reference store methods and orphaned queries

fix: catch SIGTERM for graceful shutdown

fix: drain background workers when the listener errors

fix: map goal CHECK violation to 400 not 500

refactor(mcp): remove the never-supported search_knowledge project filter

fix: narrow PutPlan to the plan_day state allowlist

fix(content): reject control characters in admin Create/Update

feat(auth): purge expired refresh tokens periodically

feat(content): surface review_note in the admin detail read

fix(frontend): SSR hardening — explicit transfer cache, prerender legal pages, zoneless server

fix(frontend): render an error state on the home page

fix(frontend): trap focus in the command palette

refactor(frontend): prune 33 unused design-system components and the dead graph API

test(frontend): add markdown XSS sanitization tests; drop hollow static-page specs

test(mcp): cover validateProposeContent rejection branches + fuzz

test(feed): replace fictional handler tests with real integration coverage

test(stats): replace DB-mock handler tests with testcontainers integration

test(todo): cover interval-mode recurrence arithmetic

test(goal): assert a blank title returns ErrInvalidInput

test(auth): cover the refresh-token consume cycle; drop skipped stub

test: remove tautological tests in content and api

docs: correct stale and wrong code comments

test(mcp): drop the obsolete project-filter integration test

fix: surface both listener and shutdown errors on exit

fix(content): reject control characters in the admin slug field

refactor: address review nits

docs(readme): correct the authz model, tool count, and missing tool

chore: regenerate sqlc after SQL comment fixes

docs(readme): reframe the agent narrative around the active drivers