Senior Engineer a10ef7eb70 Harden CORS origin validation in production (FRE-4749) ...

- Add ALLOWED_ORIGINS env var with comma-separated origin list
- Validate origins at startup in production: reject wildcards, empty values,
  and malformed URLs (non-http/https protocol)
- Update both server entry points (server.ts, index.ts) to use getCorsOrigins()
- Development mode retains existing localhost fallback behavior

Co-Authored-By: Paperclip <noreply@paperclip.ing>

2026-05-09 11:48:33 -04:00

.github/workflows

Fix load test scenarios, runner, and CI threshold checks

2026-05-09 10:35:45 -04:00

.turbo/cache

turbo

2026-05-03 22:45:03 -04:00

examples

FRE-4529: Transfer ShieldAI code from FrenoCorp repo

2026-05-02 10:13:13 -04:00

infra

Add rollback procedure documentation and testing scripts (FRE-4808)

2026-05-09 06:27:31 -04:00

load-tests

Add k6 load test scripts for Darkwatch authentication endpoints (FRE-4928)

2026-05-09 08:08:10 -04:00

memory

FRE-4493: Complete API gateway review

2026-05-02 01:51:23 -04:00

packages

Harden CORS origin validation in production (FRE-4749)

2026-05-09 11:48:33 -04:00

plans

Auto-commit 2026-05-02 09:37

2026-05-02 09:37:30 -04:00

scripts/load-test

Fix load test scenarios, runner, and CI threshold checks

2026-05-09 10:35:45 -04:00

server

FRE-4529: Transfer ShieldAI code from FrenoCorp repo

2026-05-02 10:13:13 -04:00

services

use crypto package instead

2026-05-03 22:44:48 -04:00

.env.example

FRE-4471: Scaffold DarkWatch MVP — monorepo, schema, services, API routes, tests

2026-04-29 09:47:45 -04:00

.env.prod.example

Add tier-based scan scheduler and webhook triggers (FRE-4498)

2026-04-30 10:57:56 -04:00

.gitignore

Add k6 load test scripts for Voiceprint verification endpoints (FRE-4930)

2026-05-09 07:50:29 -04:00

check-identity.js

FRE-4529: Transfer ShieldAI code from FrenoCorp repo

2026-05-02 10:13:13 -04:00

docker-compose.prod.yml

Add tier-based scan scheduler and webhook triggers (FRE-4498)

2026-04-30 10:57:56 -04:00

docker-compose.yml

FRE-4529: Transfer ShieldAI code from FrenoCorp repo

2026-05-02 10:13:13 -04:00

Dockerfile

FRE-4529: Transfer ShieldAI code from FrenoCorp repo

2026-05-02 10:13:13 -04:00

drizzle.config.ts

FRE-4529: Transfer ShieldAI code from FrenoCorp repo

2026-05-02 10:13:13 -04:00

index.html

FRE-4529: Transfer ShieldAI code from FrenoCorp repo

2026-05-02 10:13:13 -04:00

package-lock.json

Add tier-based scan scheduler and webhook triggers (FRE-4498)

2026-04-30 10:57:56 -04:00

package.json

FRE-4474 Phase 5: Verify and resolve security review findings for SpamShield and Cross-Service Correlation

2026-05-02 18:36:29 -04:00

pnpm-lock.yaml

Add cross-service alert correlation system FRE-4500

2026-05-02 01:10:44 -04:00

pnpm-workspace.yaml

FRE-4533: Merge apps/{api,web,mobile} and shared-db into ShieldAI repo

2026-05-02 10:19:11 -04:00

test-classifier.ts

FRE-4517, FRE-4499: Complete SpamShield implementation and billing updates

2026-05-01 19:53:19 -04:00

tsconfig.base.json

FRE-4529: Transfer ShieldAI code from FrenoCorp repo

2026-05-02 10:13:13 -04:00

tsconfig.json

FRE-4471: Scaffold DarkWatch MVP — monorepo, schema, services, API routes, tests

2026-04-29 09:47:45 -04:00

turbo.json

FRE-4474 Phase 5: Verify and resolve security review findings for SpamShield and Cross-Service Correlation

2026-05-02 18:36:29 -04:00

vite.config.ts

FRE-4529: Transfer ShieldAI code from FrenoCorp repo

2026-05-02 10:13:13 -04:00

vitest.config.ts

FRE-4529: Transfer ShieldAI code from FrenoCorp repo

2026-05-02 10:13:13 -04:00

Description

No description provided

1.3 MiB

Languages

TypeScript 84.7%

HCL 5.1%

JavaScript 3.6%

Shell 3.1%

HTML 2.8%

Other 0.7%