DrDavidL 7fdfea854b security: add unicode safety guard to hooks and CI (#1710) ...

* security: add unicode safety guard to hooks and CI

* fix(unicode-safety): drop FE0F, PUA; fix col tracking; scan .husky/

- Remove FE0F (emoji presentation selector) from suspicious set — it
  false-positives on ASCII keycap sequences (#️⃣ etc.) in source strings
- Remove Private Use Area (E000–F8FF) check — not a parser attack vector
  and legitimately used by icon font string literals
- Fix column tracking for astral-plane characters (cp > 0xFFFF): increment
  by 2 to match UTF-16 editor column positions
- Remove now-unused prevCp variable
- Add .husky/ to SCAN_ROOTS and '' to INCLUDED_EXTENSIONS so extensionless
  hook scripts (pre-commit, pre-push) are included in full-repo scans

---------

Co-authored-by: Elie Habib <elie.habib@gmail.com>

2026-03-19 08:48:08 +04:00

..

data

feat(forecast): add structured scenario pipeline and trace export (#1646)

2026-03-15 15:57:22 +04:00

lib

Add thermal escalation seeded service (#1747)

2026-03-17 14:24:26 +04:00

shared

feat: expand commodities from 6 to 14 symbols (#1776)

2026-03-17 19:16:13 +04:00

telegram

fix(telegram): fix ESM import path in session-auth script (#542)

2026-02-28 17:43:56 +04:00

_clustering.mjs

feat(correlation): server-side correlation engine seed + bootstrap hydration (#1571)

2026-03-14 15:07:30 +04:00

_military-surges.mjs

fix(forecast): bundle military surge inputs (#1706)

2026-03-16 08:40:14 +04:00

_prediction-scoring.mjs

feat: harness engineering P0 - linting, testing, architecture docs (#1587)

2026-03-14 21:29:21 +04:00

_r2-storage.mjs

fix(r2): retry transient trace storage failures (#1832)

2026-03-19 00:24:47 +04:00

_seed-utils.mjs

fix(health): adjust gdeltIntel maxStaleMin for 6h cron; warn on expired-key EXPIRE no-op (#1853)

2026-03-19 08:33:14 +04:00

_trade-parse-utils.mjs

feat: effective tariff rate source (#1790)

2026-03-19 03:45:32 +04:00

ais-relay-rss.test.cjs

feat: harness engineering P0 - linting, testing, architecture docs (#1587)

2026-03-14 21:29:21 +04:00

ais-relay.cjs

fix(market): prevent stale-data overwrite and add Yahoo retry for commodities/macro panels (#1854)

2026-03-19 08:38:13 +04:00

build-military-bases-final.mjs

feat: harness engineering P0 - linting, testing, architecture docs (#1587)

2026-03-14 21:29:21 +04:00

build-sidecar-handlers.mjs

feat(desktop): sidecar cloud proxy, domain handlers, and panel fixes (#1454)

2026-03-12 06:50:30 +04:00

build-sidecar-sebuf.mjs

feat: Arabic font support and HLS live streaming UI (#1020)

2026-03-05 10:16:43 +04:00

check-unicode-safety.mjs

security: add unicode safety guard to hooks and CI (#1710)

2026-03-19 08:48:08 +04:00

desktop-package.mjs

feat: harness engineering P0 - linting, testing, architecture docs (#1587)

2026-03-14 21:29:21 +04:00

download-node.sh

feat: add ARM64 Linux build target and download detection (#427)

2026-02-26 20:52:44 +04:00

evaluate-forecast-benchmark.mjs

feat(forecast): add structured scenario pipeline and trace export (#1646)

2026-03-15 15:57:22 +04:00

extract-forecast-benchmark-candidates.mjs

feat(forecast): add structured scenario pipeline and trace export (#1646)

2026-03-15 15:57:22 +04:00

fetch-country-boundary-overrides.mjs

fix: add India boundary override from Natural Earth 50m data (#1796)

2026-03-19 02:40:05 +04:00

fetch-gpsjam.mjs

fix(seeds): extend seed-meta TTL alongside data keys on fetch failure (#1724)

2026-03-17 06:35:12 +04:00

fetch-mirta-bases.mjs

Cost/traffic hardening, runtime fallback controls, and PostHog removal (#638)

2026-03-01 11:53:20 +04:00

fetch-osm-bases.mjs

Cost/traffic hardening, runtime fallback controls, and PostHog removal (#638)

2026-03-01 11:53:20 +04:00

fetch-pizzint-bases.mjs

feat: harness engineering P0 - linting, testing, architecture docs (#1587)

2026-03-14 21:29:21 +04:00

generate-oref-locations.mjs

feat(oref): add 1,478 Hebrew→English location translations + wire sirens into breaking news banner (#661)

2026-03-01 15:59:53 +04:00

lint-boundaries.mjs

feat: harness engineering P0 - linting, testing, architecture docs (#1587)

2026-03-14 21:29:21 +04:00

need-work.csv

Cost/traffic hardening, runtime fallback controls, and PostHog removal (#638)

2026-03-01 11:53:20 +04:00

nixpacks.toml

fix(railway): keep Node 20 + force IPv4 DNS ordering (#1641)

2026-03-15 11:20:51 +04:00

package-lock.json

fix(r2): add s3 client to scripts runtime (#1831)

2026-03-19 00:51:54 +04:00

package.json

fix(r2): add s3 client to scripts runtime (#1831)

2026-03-19 00:51:54 +04:00

promote-forecast-benchmark-candidate.mjs

feat(forecast): add structured scenario pipeline and trace export (#1646)

2026-03-15 15:57:22 +04:00

railway-set-watch-paths.mjs

fix(railway): detect and fix wrong startCommand on seed services (#1775)

2026-03-17 18:34:53 +04:00

rss-feeds-report.csv

Cost/traffic hardening, runtime fallback controls, and PostHog removal (#638)

2026-03-01 11:53:20 +04:00

seed-airport-delays.mjs

fix(seeds): add empty-data guards and fix health semantics (#1767)

2026-03-17 16:12:05 +04:00

seed-aviation.mjs

fix(seeds): improve resilience and fix dead APIs across seed scripts (#1644)

2026-03-15 13:31:41 +04:00

seed-bis-data.mjs

fix: add fetch error cause logging to all remaining seed scripts (#1643)

2026-03-15 12:02:37 +04:00

seed-climate-anomalies.mjs

fix: add fetch error cause logging to all remaining seed scripts (#1643)

2026-03-15 12:02:37 +04:00

seed-commodity-quotes.mjs

fix: add fetch error cause logging to all remaining seed scripts (#1643)

2026-03-15 12:02:37 +04:00

seed-conflict-intel.mjs

chore: clear baseline lint debt (173 warnings → 49) (#1712)

2026-03-16 08:48:00 +04:00

seed-correlation.mjs

fix(health): align seed TTLs and maxStaleMin thresholds to prevent false STALE alerts (#1814)

2026-03-18 19:53:57 +04:00

seed-crypto-quotes.mjs

fix: add fetch error cause logging to all remaining seed scripts (#1643)

2026-03-15 12:02:37 +04:00

seed-cyber-threats.mjs

fix: add fetch error cause logging to all remaining seed scripts (#1643)

2026-03-15 12:02:37 +04:00

seed-displacement-summary.mjs

fix: add fetch error cause logging to all remaining seed scripts (#1643)

2026-03-15 12:02:37 +04:00

seed-earthquakes.mjs

fix: add fetch error cause logging to all remaining seed scripts (#1643)

2026-03-15 12:02:37 +04:00

seed-economy.mjs

fix(market): prevent stale-data overwrite and add Yahoo retry for commodities/macro panels (#1854)

2026-03-19 08:38:13 +04:00

seed-etf-flows.mjs

fix: log fetch error cause in seed retry/FATAL handlers (#1638)

2026-03-15 11:09:34 +04:00

seed-fire-detections.mjs

fix: add fetch error cause logging to all remaining seed scripts (#1643)

2026-03-15 12:02:37 +04:00

seed-forecasts.mjs

fix(forecast): align published and candidate state surfaces (#1852)

2026-03-19 08:24:26 +04:00

seed-gdelt-intel.mjs

fix(gdelt): exponential backoff + post-exhaust cooldown for persistent 429s (#1856)

2026-03-19 08:41:35 +04:00

seed-gulf-quotes.mjs

fix: add fetch error cause logging to all remaining seed scripts (#1643)

2026-03-15 12:02:37 +04:00

seed-infra.mjs

fix(seeds): improve resilience and fix dead APIs across seed scripts (#1644)

2026-03-15 13:31:41 +04:00

seed-insights.mjs

fix: add fetch error cause logging to all remaining seed scripts (#1643)

2026-03-15 12:02:37 +04:00

seed-internet-outages.mjs

fix: log fetch error cause in seed retry/FATAL handlers (#1638)

2026-03-15 11:09:34 +04:00

seed-iran-events.mjs

fix: add fetch error cause logging to all remaining seed scripts (#1643)

2026-03-15 12:02:37 +04:00

seed-market-quotes.mjs

fix: add fetch error cause logging to all remaining seed scripts (#1643)

2026-03-15 12:02:37 +04:00

seed-military-bases.mjs

feat(forecast): add structured scenario pipeline and trace export (#1646)

2026-03-15 15:57:22 +04:00

seed-military-flights.mjs

fix(forecast): keep forecast execution in one runtime (#1813)

2026-03-18 19:46:12 +04:00

seed-military-maritime-news.mjs

fix(seeds): improve resilience and fix dead APIs across seed scripts (#1644)

2026-03-15 13:31:41 +04:00

seed-natural-events.mjs

fix: add fetch error cause logging to all remaining seed scripts (#1643)

2026-03-15 12:02:37 +04:00

seed-prediction-markets.mjs

fix(predictions): prepend event title to short Kalshi outcome labels (#1659)

2026-03-15 17:44:31 +04:00

seed-radiation-watch.mjs

feat: add Radiation Watch with seeded anomaly intelligence, map layers, and country exposure (#1735)

2026-03-17 09:18:06 +04:00

seed-research.mjs

fix(health): align seed TTLs and maxStaleMin thresholds to prevent false STALE alerts (#1814)

2026-03-18 19:53:57 +04:00

seed-sanctions-pressure.mjs

fix(sanctions): add progress logging to seed (fetch size, entry count, new count) (#1758)

2026-03-17 13:26:22 +04:00

seed-security-advisories.mjs

fix(health): align seed TTLs and maxStaleMin thresholds to prevent false STALE alerts (#1814)

2026-03-18 19:53:57 +04:00

seed-service-statuses.mjs

fix(seeds): extend seed-meta TTL alongside data keys on fetch failure (#1724)

2026-03-17 06:35:12 +04:00

seed-stablecoin-markets.mjs

fix: add fetch error cause logging to all remaining seed scripts (#1643)

2026-03-15 12:02:37 +04:00

seed-submarine-cables.mjs

fix: add fetch error cause logging to all remaining seed scripts (#1643)

2026-03-15 12:02:37 +04:00

seed-supply-chain-trade.mjs

feat: effective tariff rate source (#1790)

2026-03-19 03:45:32 +04:00

seed-thermal-escalation.mjs

Add thermal escalation seeded service (#1747)

2026-03-17 14:24:26 +04:00

seed-ucdp-events.mjs

fix(ucdp): never overwrite existing data with empty results (#1766)

2026-03-17 17:45:13 +04:00

seed-unrest-events.mjs

fix: log fetch error cause in seed retry/FATAL handlers (#1638)

2026-03-15 11:09:34 +04:00

seed-usa-spending.mjs

fix: add fetch error cause logging to all remaining seed scripts (#1643)

2026-03-15 12:02:37 +04:00

seed-wb-indicators.mjs

fix(seeds): add empty-data guards and fix health semantics (#1767)

2026-03-17 16:12:05 +04:00

seed-weather-alerts.mjs

fix: add fetch error cause logging to all remaining seed scripts (#1643)

2026-03-15 12:02:37 +04:00

seed-webcams.mjs

fix(seed-webcams): prevent infinite recursion on Windy API offset limit (#1559)

2026-03-14 10:23:20 +04:00

seo-indexnow-submit.mjs

fix(seo): split IndexNow submissions by host (IndexNow requires one host per request) (#1838)

2026-03-19 01:57:27 +04:00

sync-desktop-version.mjs

chore: enforce desktop version sync

2026-02-19 07:53:15 +04:00

validate-rss-feeds.mjs

feat: harness engineering P0 - linting, testing, architecture docs (#1587)

2026-03-14 21:29:21 +04:00

validate-seed-migration.mjs

feat: add seed-first pattern to 15 RPC handlers with Railway seed scripts (#989)

2026-03-04 17:37:15 +04:00

vercel-ignore.sh

perf(ci): skip Vercel deploy when only scripts/ change on main (#1633)

2026-03-15 09:29:50 +04:00