3 Commits

Include renames

Author	SHA1	Message	Date
cgalo5758	0b28a9dc29	Remediate security audit findings ... - Replace gorilla/csrf with net/http CrossOriginProtection - Require valkey-password and add TLS options for session store - End session at /logout and revoke refresh tokens - Re-derive identity and roles from provider every five minutes - Process each Stripe webhook event in its own Temporal workflow - Give each outbox entry its own workflow with Temporal retries - Guard against stale Stripe events with provider timestamps - Derive transport security from base-url scheme	2026-09-09 13:25:43 -05:00
cgalo5758	88db730fcc	Add dual licensing and SPDX headers ... Introduce a commercial license option alongside AGPL-3.0-only, require a CLA for contributors, and document the terms in COMMERCIAL.md and NOTICE. Add a script to stamp SPDX headers on Go files and apply it across the tree.	2026-09-06 02:29:42 -05:00
cgalo5758	e581bf81c3	Add typed config keys and config CLI ... Parse every config value through a single declared type at save, boot, and validate, and expose the settings seam from the terminal so operators can list, set, clear, and validate overrides without SQL.	2026-09-05 17:47:04 -05:00