Theodore Li d362e6816e improvement(setup): reuse shared helpers, parallelize probes, drop dead code ...

- PKCE verifier/state/pairing code now use generateSecureToken, generateRandomHex
  and generateShortId instead of hand-rolled randomBytes; the pairing loop's
  modulo was unbiased only because 256 % 32 == 0
- new sha256Base64Url in @sim/security/hash so both sides of the PKCE exchange
  derive the challenge from one implementation
- isUsableSecret moved beside SECRET_KEYS so setup and doctor apply the same
  rule; doctor previously passed a key setup would replace
- isTruthy narrowed to true/1, matching the app it claims to mirror — it accepted
  yes/on, so a flag could read on in doctor and off in the app
- checkLive runs its five probes concurrently (~17s serial worst case)
- detection overlaps the banner animation instead of queueing behind it
- glyph.fail/glyph.warn at 13 sites that bypassed the constant; removed unused
  prompter exports, a dead ENV_PATHS re-export, and an unused export keyword

2026-07-23 19:56:52 -07:00

..

docs

chore(deps): bump next to 16.2.11 to clear security advisories (#5890)

2026-07-23 10:47:07 -07:00

pii

fix(pii): mask offloaded large payloads chunk-by-chunk instead of aborting at 16MB (#5810)

2026-07-21 18:03:14 -04:00

realtime

fix(workflow-edges): enforce edge/block validation server-side, not just client-side (#5571)

2026-07-10 15:25:25 -07:00

sim

improvement(setup): reuse shared helpers, parallelize probes, drop dead code

2026-07-23 19:56:52 -07:00