2 Commits

Author	SHA1	Message	Date
Brendan Chen	8d5e5c8a4d	Fix TypeScript config for .ts import extensions ... - allowImportingTsExtensions: true + noEmit: true in tsconfig - build script runs tsc --noEmit (type-check only) - Dockerfile simplified to single stage using tsx at runtime (no tsc compilation needed; tsx handles .ts imports natively) Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>	2026-03-03 16:02:29 -08:00
Brendan Chen	6d8fb9105d	Code review fixes, Docker, and deployment config ... - Fix tsconfig: switch to ESNext/Bundler module resolution (tsx compatible) - Sanitize file extensions against path traversal (^.[a-zA-Z0-9]+$ only) - Sanitize Content-Disposition filename to prevent header injection - Extract tokenCookieOptions helper to eliminate duplication across auth handlers - Remove unused baseUrl param from fileListPage - Add Dockerfile (multi-stage build with alpine + native tools for bcrypt) - Add docker-compose.yml with named volume for data persistence - Add .env.example with all environment variables documented Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>	2026-03-03 15:58:39 -08:00