SnapOtter db6f7bf38a feat(enterprise): add IP allowlisting with CIDR matching and Redis cache ...

Enterprise-gated onRequest hook that restricts API access to
configured CIDR ranges using Node 22's native BlockList.

- Plugin (ip-allowlist.ts): builds a BlockList from the ipAllowlist
  setting, caches in-process, syncs across instances via Redis pub/sub.
  Exempt paths for health probes, SCIM, SAML/OIDC callbacks.
  Handles IPv4-mapped IPv6 (::ffff:x.x.x.x) transparently.
- Admin API (enterprise/ip-allowlist.ts): GET/PUT endpoints gated by
  security:manage permission and ip_allowlist feature flag.  Validates
  CIDRs, prevents self-lockout, emits IP_ALLOWLIST_UPDATED audit event.
- 32 unit tests covering CIDR matching, validation, exempt paths, IPv6,
  and edge cases (/0, /32, mapped addresses).

2026-06-13 22:54:06 +08:00

..

ai

fix(ai): broaden SSRF pre-scan regex to cover srcset, poster, formaction, @import

2026-06-13 10:36:12 +08:00

api

feat(enterprise): add IP allowlisting with CIDR matching and Redis cache

2026-06-13 22:54:06 +08:00

doc-engine

feat(tools): 2.0 phase 5 wave 4 - office, ebooks, data, archives (14 tools) (#224)

2026-06-13 10:19:11 +08:00

features

feat(tools): 2.0 phase 5 wave 5b - ai pool: ocr-pdf, transcription, background composites (5 tools) (#226)

2026-06-13 10:19:47 +08:00

image-engine

test: expand test coverage across all layers (+1,157 tests)

2026-06-06 19:37:29 +08:00

landing

feat(tools)!: SnapOtter 2.0 phase 4 wave 1: 45 core tools across all modalities (#219)

2026-06-13 10:18:49 +08:00

media-engine

feat(tools): 2.0 phase 5 wave 3a - video depth (22 tools) (#221)

2026-06-13 10:19:00 +08:00

shared

feat(tools): 2.0 phase 5 wave 4 - office, ebooks, data, archives (14 tools) (#224)

2026-06-13 10:19:11 +08:00

web

fix(web): resolve feature install status sync and mutual exclusivity (#214)

2026-06-13 13:44:37 +08:00

analytics-consent-extended.test.ts

chore: deploy to Cloudflare Pages and update branding

2026-04-24 18:06:29 +08:00

analytics-consent.test.ts

chore: deploy to Cloudflare Pages and update branding

2026-04-24 18:06:29 +08:00

analytics-events.test.ts

chore: deploy to Cloudflare Pages and update branding

2026-04-24 18:06:29 +08:00

analytics-types.test.ts

chore: deploy to Cloudflare Pages and update branding

2026-04-24 18:06:29 +08:00

auto-enhance.test.ts

test: expand coverage across all layers -- 1,268 new tests, fix replace-color div-by-zero

2026-05-09 18:02:58 +08:00

beautify-backgrounds.test.ts

feat(beautify): add background generation (solid, gradient, image, transparent)

2026-05-08 16:04:34 +08:00

beautify-frames.test.ts

feat(beautify): add device frame assets and PNG frame compositing

2026-05-08 16:12:46 +08:00

beautify-shadow.test.ts

feat(beautify): add shadow rendering (extracted from border.ts pattern)

2026-05-08 16:06:37 +08:00

docker-file-secrets.test.ts

feat: add Docker _FILE secret convention for sensitive env vars (#205)

2026-06-06 21:18:14 +08:00

features.test.ts

feat(tools): 2.0 phase 5 wave 5b - ai pool: ocr-pdf, transcription, background composites (5 tools) (#226)

2026-06-13 10:19:47 +08:00

meme-templates.test.ts

test(meme-generator): add template manifest validation tests

2026-05-08 16:03:21 +08:00

pairwise.test.ts

test: testing overhaul -- CI e2e gates, parallel suites, generated matrices, mutation testing (#215)

2026-06-10 22:01:13 +08:00

pdf-to-image.test.ts

test: add unit tests for pdf-to-image page range parser

2026-04-10 20:56:13 +08:00

pipeline-step-summary.test.ts

feat: SOTA overhaul of automate pipeline page (#53)

2026-04-13 16:26:38 +08:00

pipeline-store.test.ts

feat: SOTA overhaul of automate pipeline page (#53)

2026-04-13 16:26:38 +08:00

security-auth-hardening.test.ts

feat(db)!: SnapOtter 2.0 phase 1 foundation: postgres, migrator, compose stack (#216)

2026-06-13 10:15:23 +08:00

security-error-handling.test.ts

fix(security): comprehensive security audit and hardening

2026-05-13 21:33:50 +08:00

security-file-processing.test.ts

fix(security): comprehensive security audit and hardening

2026-05-13 21:33:50 +08:00

security-input-validation.test.ts

test: expand test coverage across all layers (+1,157 tests)

2026-06-06 19:37:29 +08:00

security-network.test.ts

fix(security): comprehensive security audit and hardening

2026-05-13 21:33:50 +08:00

security-rate-limiting.test.ts

fix(security): comprehensive security audit and hardening

2026-05-13 21:33:50 +08:00

security-svg-sanitize.test.ts

fix(security): security audit and hardening (#207)

2026-06-07 10:43:52 +08:00

use-focus-trap.test.ts

feat(a11y): WCAG 2.2 AA accessibility compliance (#209)

2026-06-07 23:32:41 +08:00

venv-upgrade-stamp.test.ts

fix(docker): make venv bootstrap upgrade-aware with pip-freeze stamp

2026-06-13 10:31:22 +08:00