Moheeb ZaraandClaude Opus 4.8 71ba558522 fix(secrets): store ops-created secrets encrypted via createSecret (security) ...

The ops 'Add Secret' modal wrote the secret value straight to the DB from the
browser in PLAINTEXT — despite the 'Stored encrypted at rest' label — because
the AES key is server-only. Route it through the createSecret server action,
which encrypts the value (AES-256-GCM), enforces the admin/board gate, validates
input, and logs the activity. Existing plaintext rows (encryption_version 0)
still reveal correctly; new secrets are encrypted when a key is configured.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

2026-08-04 06:15:45 -07:00

..

(app)

fix(secrets): store ops-created secrets encrypted via createSecret (security)

2026-08-04 06:15:45 -07:00

(landing)

Use the real hack.build logo and fix the showcase grid

2026-07-29 02:11:35 -07:00

(resources)

Use the real hack.build logo and fix the showcase grid

2026-07-29 02:11:35 -07:00

api

types: clear remaining tsc errors across 41 files (76→14, behavior-preserving)

2026-08-01 18:56:11 -07:00

auth

fix(auth): validate /auth/callback next param against open-redirect (D3)

2026-05-18 18:31:06 -07:00

f/[space]/[slug]

types: clear remaining tsc errors across 41 files (76→14, behavior-preserving)

2026-08-01 18:56:11 -07:00

join/[space]

feat(invites): role-granting + usage-capped invites; audit hardening (P7)

2026-05-16 17:34:45 -07:00

login

Add talk to resources, public-site nav, and homepage link

2026-07-28 23:18:50 -07:00

onboarding

audit: fix onboarding payment_url XSS + forum comment tenant check + joinSpace rate limit

2026-05-20 02:22:50 -07:00

signup

feat: Customize hub + roles editor, terminal logo, invite links

2026-05-15 16:03:52 -07:00

track

types: clear remaining tsc errors across 41 files (76→14, behavior-preserving)

2026-08-01 18:56:11 -07:00

error.tsx

feat: comprehensive application audit and fixes

2026-03-11 08:18:57 +00:00

global-error.tsx

feat: comprehensive application audit and fixes

2026-03-11 08:18:57 +00:00

globals.css

fix(ux): focus visibility, tap targets, form labels, surfaced errors

2026-05-16 00:00:23 -07:00

layout.tsx

feat: forum, polymorphic comments, custom tiers, multi-invite, secrets encryption

2026-05-14 17:47:52 -07:00

loading.tsx

feat: comprehensive application audit and fixes

2026-03-11 08:18:57 +00:00

not-found.tsx

tooling: add ESLint 9 flat config and a typecheck script

2026-08-01 20:37:56 -07:00