Merge dev: app-review fixes (security, env validation, docs, licensing)#9

Merged

chriskehayias merged 20 commits into

mainfrom

dev

May 31, 2026

Commits on May 30, 2026

feat: route MP datetime through DomainTimezoneService at the boundary

chriskehayias
and
claude
committed
refactor: eliminate hardcoded Northwoods references

chriskehayias
and
claude
committed
build: fix SDK build typecheck and unblock ESLint

chriskehayias
and
claude
committed
updated release command
chriskehayias
committed
fix: resolve pre-existing lint errors surfaced after ESLint unblock

chriskehayias
and
claude
committed
chore(deps): fix 2 moderate CVEs and apply safe dependency updates

chriskehayias
and
claude
committed
chore(deps): bump @types/node to 22.19.19 in @mpnext/embed-sdk

chriskehayias
and
claude
committed
chore(deps): bump typescript to 6.0.3 in workspace packages

chriskehayias
and
claude
committed
chore(deps): upgrade concurrently 9.2.1 -> 10.0.0

chriskehayias
and
claude
committed
chore(env): document all env vars and remove NEXTAUTH fallbacks

chriskehayias
and
claude
committed
docs(readme): correct inaccurate claims after full-app review

chriskehayias
and
claude
committed
fix(http-client): remove request-body logging from MP HTTP client (security)

chriskehayias
and
claude
committed
chore(logging): remove leftover debug console.log statements

chriskehayias
and
claude
committed
refactor(env): validate required env vars with a fail-fast helper

chriskehayias
and
claude
committed
fix(signin): handle rejected getSession with error + retry instead of perpetual spinner

chriskehayias
and
claude
committed
chore(embed): drop unused Idempotency-Key CORS header (no dedup implemented)

chriskehayias
and
claude
committed
docs(claude): correct stale widget count, bundle name, gzip size, and services list

chriskehayias
and
claude
committed
chore: canonicalize project name to MPNext-Widgets

chriskehayias
and
claude
committed
chore(node): enforce Node >=20.9 via engines + engine-strict

chriskehayias
and
claude
committed
chore(license): add UNLICENSED license field and proprietary LICENSE file

chriskehayias
and
claude
committed

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Merge dev: app-review fixes (security, env validation, docs, licensing)#9

Merge dev: app-review fixes (security, env validation, docs, licensing)#9
chriskehayias merged 20 commits into
mainfrom
dev

Commits on May 30, 2026

feat: route MP datetime through DomainTimezoneService at the boundary

refactor: eliminate hardcoded Northwoods references

build: fix SDK build typecheck and unblock ESLint

updated release command

fix: resolve pre-existing lint errors surfaced after ESLint unblock

chore(deps): fix 2 moderate CVEs and apply safe dependency updates

chore(deps): bump @types/node to 22.19.19 in @mpnext/embed-sdk

chore(deps): bump typescript to 6.0.3 in workspace packages

chore(deps): upgrade concurrently 9.2.1 -> 10.0.0

chore(env): document all env vars and remove NEXTAUTH fallbacks

docs(readme): correct inaccurate claims after full-app review

fix(http-client): remove request-body logging from MP HTTP client (security)

chore(logging): remove leftover debug console.log statements

refactor(env): validate required env vars with a fail-fast helper

fix(signin): handle rejected getSession with error + retry instead of perpetual spinner

chore(embed): drop unused Idempotency-Key CORS header (no dedup implemented)

docs(claude): correct stale widget count, bundle name, gzip size, and services list

chore: canonicalize project name to MPNext-Widgets

chore(node): enforce Node >=20.9 via engines + engine-strict

chore(license): add UNLICENSED license field and proprietary LICENSE file