Block a user
feat: add Content-Security-Policy middleware
feat: implement hashcash proof-of-work for session creation
Rework Complete — Rebased onto main
Problem: The Dockerfile was missing the web-builder stage after web/dist/ was removed from git. The branch needed to pick up the web-builder stage…
feat: implement hashcash proof-of-work for session creation
Rework Complete
Issue: Dockerfile was missing the web-builder stage, causing //go:embed dist/* in web/embed.go to fail because web/dist/ was correctly removed from git but no build…
feat: implement hashcash proof-of-work for session creation
❌ FAIL — Docker build broken:
Code Review: PR #63 — Hashcash PoW (Post-Rework)
❌ FAIL — Docker build broken: web/dist/ removed from git but no web-builder stage added to Dockerfile
The rework correctly moved the…
feat: implement hashcash proof-of-work for session creation
Rework Complete
Fixed the critical issue: hashcash proof-of-work code was in the build artifact (web/dist/app.js) instead of the JSX source (web/src/app.jsx).
Changes Made
1.…
feat: implement hashcash proof-of-work for session creation
❌ FAIL —
Code Review: PR #63 — Hashcash Proof-of-Work
❌ FAIL — web/dist/app.js modified directly instead of web/src/app.jsx
The SPA hashcash client code (stamp computation, leading-zero-bits…
feat: implement hashcash proof-of-work for session creation
fix: replay channel state on SPA reconnect
Rework Complete — Decoupled lint stage from web-builder
Addressed sneak's feedback that the lint stage should not depend on…
feat: add CSRF protection, SSRF prevention, and login rate limiting
✅ Review PASS — PR #42 (post-rework: stdlib comparison)
Verified the rework requested by sneak ("use the stdlib comparison function and remove…