Audit remediation: full P0–P3 fix pass (2026-05-11 plan) - #87

Merged

AndresL230 merged 14 commits into

mainfrom

audit-fixes-2026-05-11

May 12, 2026

Commits on May 12, 2026

fix(callers): await compressClusters in webview, CLI, extension activator, and tests
AndresL230
committed
329720d
fix(webview): route intelligence debug output through OutputChannel
AndresL230
committed
5bd3d40
fix(webview): serialize scenario persistence through a single-flight queue
AndresL230
committed
7bed29e
fix(webview): use recost.simulatorScenarios storage key to match the loader

AndresL230
and
claude
committed
b833636
fix(webview): surface debug-export failures to the user
AndresL230
committed
09302a5
refactor(webview): extract ChatHandler from webview-provider
AndresL230
committed
6ab8f3c
refactor(webview): extract KeyManagementHandler from webview-provider

AndresL230
and
claude
committed
c119c78
feat(span): add SourceSpan type and helpers (issue #80)
AndresL230
committed
5139dd6
refactor(webview): extract SimulationHandler from webview-provider

AndresL230
and
claude
committed
ada6674
refactor(webview): extract ScanPublishingHandler from webview-provider

AndresL230
and
claude
committed
40ef019
test(extension): smoke test for activate/deactivate exports

AndresL230
and
claude
committed
db8e17a
chore(deps): upgrade esbuild to ^0.28 (fixes GHSA-67mh-4wv8-2f99)

AndresL230
and
claude
committed
0eb8709
chore(deps): upgrade openai to ^4.104 (latest in v4 line)

AndresL230
and
claude
committed
3f28a41
fix(pr-87): address CodeRabbit review comments

AndresL230
and
claude
committed
93c0972