feat(worker): Phase 2 hybrid routing — TikTok/Instagram/X via browser-downloader - #141

Open

tomkabel wants to merge 31 commits into

mainfrom

fix/insta-and-tiktok-failing

Commits on Jun 26, 2026

fix(security): remove nginx CSP header and replace hx-on with nonced listeners
tomkabel
committed
299f412
fix(security): harden CSRF validation and stop token rotation on HTMX responses
tomkabel
committed
0ec96dc
fix(security): prefix auth cookies with __Host- and remove email from JWT
tomkabel
committed
38bebb7
fix(security): add ConfigDict(extra="forbid") to Pydantic input schemas
tomkabel
committed
c55e06a
chore(ruff): enable flake8-bandit (S) and flake8-async (ASYNC) rules
tomkabel
committed
db4204e
fix(security): pin Docker base images and verify NodeSource GPG key
tomkabel
committed
893e099
refactor(types): add comprehensive type annotations for strict mypy compliance
tomkabel
committed
a3e461d
feat(security): add CSP nonce support and stricter CSP for templates
tomkabel
committed
06ed702
fix(auth): blacklist refresh tokens and strengthen CSRF handling
tomkabel
committed
63e1e02
feat(rate-limit): apply limiter to SSE stream and improve parser
tomkabel
committed
25b559d
fix(error): secure RNG & improve regex matching; default job max retries
tomkabel
committed
62bd73a
fix(models): tidy SQLAlchemy column declarations and core config messages
tomkabel
committed
70208c2
fix(service): normalize DB query chaining and exception styles
tomkabel
committed
a422ace
fix(worker): normalize DB chaining, health host, and minor robustness fixes
tomkabel
committed
656d716
style(api): normalize signatures, docstrings, and trailing commas
tomkabel
committed
e7ab432
fix(resilience/yt-dlp/security): robustness and safety improvements
tomkabel
committed
48b7f99
chore(gitignore): ignore local scan/audit artifacts and HAR exports
tomkabel
committed
073080a
fix(tests): make jitter patchable and avoid youtube-only options in non-youtube scripts
tomkabel
committed
08857aa
fix(yt-dlp): prevent subdomain bypass and embed youtube opts as dict entries
tomkabel
committed
76bcad9
fix(yt-dlp): extend subdomain-bypass detection to all platforms
tomkabel
committed
44a131b
fix(error): move module-level assignment below all imports
tomkabel
committed
6ef17e5
fix(yt-dlp): add type annotation to _host_matches inner function
tomkabel
committed
0c99832

Commits on Jun 28, 2026

feat(worker): Phase 2 hybrid routing — TikTok/Instagram/X via browser-downloader
tomkabel
committed
1c38ad3

Commits on Aug 1, 2026

fix: address all valid PR review issues from gh-pr-comments.md
tomkabel
committed
511e668
feat(browser-downloader): enhance with VDH/FlowPick patterns
tomkabel
committed
200ab0a
fix: outbox dedup, chaos refactor, browser-downloader patches, and lint cleanup
tomkabel
committed
016df2d
ruff formatting
tomkabel
committed
6017e01
fix: resolve remaining pre-commit warnings in worker/main.py
tomkabel
committed
fa247e7
format pnpm workspace
tomkabel
committed
6bc89f0
fix: resolve PR review issues — security, correctness, and robustness
tomkabel
committed
15d6b2a
commit
tomkabel
committed
9dff171