Merge pull request #9 from WaveringAna/codex/fix-webhook-delivery-ssrf-vulnerability

Harden webhook delivery URL validation to mitigate SSRF

Harden webhook delivery URL validation

Merge pull request #7 from WaveringAna/codex/propose-fix-for-firehose-leader-election-bug

Avoid aborting leader-election loop on firehose failures (add voluntary stepDown)

Fix firehose leader stepdown loop

Merge pull request #6 from WaveringAna/codex/fix-unauthenticated-dos-vulnerability-in-hosting

Fix unauthenticated HTML prewarm scan amplification

Fix unauthenticated HTML prewarm scan amplification

Merge pull request #5 from WaveringAna/codex/propose-fix-for-handle-resolver-vulnerability

Validate resolver-provided DIDs against DID document before PDS discovery

Verify handle resolution against DID document

Merge pull request #3 from WaveringAna/dependabot/npm_and_yarn/apps/main-app/esbuild-0.28.1

Bump esbuild from 0.26.0 to 0.28.1 in /apps/main-app

Merge pull request #4 from WaveringAna/codex/fix-on-demand-cache-vulnerability

Prevent disk path traversal in on-demand cache and disk storage tier

Fix disk cache path traversal

more stansite work

Bump esbuild from 0.26.0 to 0.28.1 in /apps/main-app

Bumps [esbuild](https://github.com/evanw/esbuild) from 0.26.0 to 0.28.1. - [Release notes](https://github.com/evanw/esbuild/releases) - [Changelog](https://github.com/evanw/esbuild/blob/main/CHANGELOG-2025.md) - [Commits](https://github.com/evanw/esbuild/compare/v0.26.0...v0.28.1) --- updated-dependencies: - dependency-name: esbuild dependency-version: 0.28.1 dependency-type: direct:development ... Signed-off-by: dependabot[bot] <support@github.com>

preliminary injection work

llms.txt, standardsite package, hosting service http cache fix

Merge pull request #2 from nova-sharkgirl/dev/nova/add-ci-env-check

feat: check CI env var for silent spinner mode

feat: also check CI env var for silent spinner mode

the TTY/PTY distinction can be hard to detect in headless environments like CI runners or agent harnesses. adding 'process.env.CI === "true"' to the existing WISPCTL_NO_PROGRESS check so CI environments automatically get clean log output without spinner artifacts. also updated comment to reflect the broader scope

fix docs missing place.wisp.settings

add verify lexi and fix delete lexi

fix firehose/on demand cache wipe race condition

narrow down hate enforcement into a simple rule: dont do it

fix connection pooling starvation

general cleanup work in cli

fix node type and lowercase wisp on docs

update cli docs

update astro version

update webhook doc

more work

major webhook work

:3

cache the db call for site manifest

check against db

e2e and prewarm hot tier

docs: fix architecture.md relay/gzip, clean hosting-service readme, add cli toc

- architecture.md: firehose watches relay not jetstream, keeps gzipped as-is - hosting-service readme: remove outdated firehose worker feature, fix jetstream reference - cli.md: add table of contents with anchor links for navigation

docs: writing pass — fix inconsistencies, add intros, clean boilerplate

- README.md: fix max files limit (1000 not 2000), add 300MB size limit - deployment.md: fix port conflict (firehose HEALTH_PORT 3001→3002) - docs/README.md: replace starlight starter boilerplate with actual content - webhook-service README.md: replace bun init boilerplate with real docs - index.mdx: rewrite truncated ending, add how-it-works section - monitoring.md: add intro explaining what the integration does - grafana-setup.md: improve intro - bun.lock: updated from starlight build

docs: add blob reuse & framework caveats guide

Documents SvelteKit version hash breaking Wisp blob reuse, with workaround and tradeoffs. References #37.

v1.1.2: add --quiet flag and WISPCTL_NO_PROGRESS env var

replay

add --quiet flag and WISPCTL_NO_PROGRESS env var to suppress spinner output

finish work in removing old sites table codepaths

fix old sites table still being used

fix cache invalidation token parsing and stabilize html rewriting to be byte based

remove ~ from filter

remove memory o11y

fix folders ending with .extension being treated as files then 404ing

docs

fix: lowercase site name in deploy to match rkey format

html rewriter fixes

i can sleep now yay

add secondary relay support