fix: remediate 2026-07-13 external audit findings (lexical retrieval, privacy, upload, CSP, a11y)#582

Merged

BigSimmo merged 10 commits into

mainfrom

claude/audit-remediation-2026-07-13

Jul 13, 2026

Commits on Jul 13, 2026

fix(db): remediate 2026-07-13 audit database findings

BigSimmo
and
claude
committed
fix(privacy): owner-scope recent queries and purge the legacy unscoped key

BigSimmo
and
claude
committed
fix(upload): validate OOXML and PDF structure at admission

BigSimmo
and
claude
committed
fix(security): drop api.openai.com from CSP connect-src

BigSimmo
and
claude
committed
fix(a11y): explicit accessible names for tool-card buttons

BigSimmo
and
claude
committed
fix: apply CodeRabbit auto-fixes

coderabbitai[bot]
and
CodeRabbit
authored
Merge branch 'main' into claude/audit-remediation-2026-07-13
BigSimmo
authored
Update supabase/schema.sql

BigSimmo
and
coderabbitai[bot]
authored
fix(db): correct CodeRabbit auto-fix regressions in audit migrations

BigSimmo
and
claude
committed
Merge origin (main sync + UI-applied suggestion); keep guarded degradation

BigSimmo
and
claude
committed