marcuspaico 876aa0f181 feat(security): CSP and hardening headers with upload serving ...

Implement Content-Security-Policy headers and strict content-type handling
for non-API responses, with x-content-type-options applied to all routes.
Adds security-headers test suite to verify header presence.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

2026-08-17 16:06:05 -07:00

..

drizzle

feat(db): lab_drafts, lab_draws, biomarkers tables

2026-08-17 15:17:37 -07:00

src

feat(security): CSP and hardening headers with upload serving

2026-08-17 16:06:05 -07:00

test

feat(security): CSP and hardening headers with upload serving

2026-08-17 16:06:05 -07:00

drizzle.config.ts

feat(db): drizzle schema (settings, sessions) + boot migrations

2026-08-17 14:04:56 -07:00

package.json

feat(labs): PDF upload, text extraction, LLM draft pipeline

2026-08-17 15:41:02 -07:00

tsconfig.json

fix: typecheck without emit, placeholder test, drop build artifacts

2026-08-17 14:02:12 -07:00