builtbykev 2ba3958c7a Session 31: Code audit + security review — NFL MARKET_MAP gap fixed, npm audit 0 vulns (1695 tests) ...

- Add NFL keys to oddsNormalizer.MARKET_MAP (defensive; same silent-zero
  class as the Session 30 MLB bug) + NFL surface test
- npm audit fix: ws/qs + Supabase transitives, 7 vulns -> 0 (semver-safe)
- Audit findings documented in BUILD-STATE: grades cache has no writer,
  NFL/NHL not wired end-to-end, rate limiting only on /analyze, tests
  mutate a tracked jsonl, leaked GitHub PAT in origin remote (rotate)

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

2026-06-14 23:48:40 -04:00

.github/workflows

Sessions 5-7a: 955 tests, deployment ready

2026-06-08 18:35:13 -04:00

data/training

Sessions 29-30: Content templates + PropLine 3-key adapter + MLB Stats API + ESPN summary (1694 tests)

2026-06-14 22:29:01 -04:00

docs

Session 14: Africa checkout, Tank01 NBA/MLB wiring, WNBA+MLB odds proxies, OAuth icons, loading skeletons (1330 tests)

2026-06-11 10:06:49 -04:00

nba-service

Sessions 5-7a: 955 tests, deployment ready

2026-06-08 18:35:13 -04:00

poller

Session 20: Provider intelligence — quota tracker, gateway with fallback cascade, admin quota dashboard (1476 tests)

2026-06-12 00:54:39 -04:00

scripts

Session 22: Tracker-driven quota guard, configurable cache TTL (1hr default), opt-in odds prewarmer (1505 tests)

2026-06-12 02:41:51 -04:00

specs

Sessions 5-7a: 955 tests, deployment ready

2026-06-08 18:35:13 -04:00

src

Session 31: Code audit + security review — NFL MARKET_MAP gap fixed, npm audit 0 vulns (1695 tests)

2026-06-14 23:48:40 -04:00

supabase/migrations

Sessions 5-7a: 955 tests, deployment ready

2026-06-08 18:35:13 -04:00

tests

Session 31: Code audit + security review — NFL MARKET_MAP gap fixed, npm audit 0 vulns (1695 tests)

2026-06-14 23:48:40 -04:00

web

Sessions 29-30: Content templates + PropLine 3-key adapter + MLB Stats API + ESPN summary (1694 tests)

2026-06-14 22:29:01 -04:00

workflows

Sessions 5-7a: 955 tests, deployment ready

2026-06-08 18:35:13 -04:00

.dockerignore

Sessions 5-7a: 955 tests, deployment ready

2026-06-08 18:35:13 -04:00

.gitignore

Sessions 5-7a: 955 tests, deployment ready

2026-06-08 18:35:13 -04:00

ARCHITECTURE.md

Sessions 5-7a: 955 tests, deployment ready

2026-06-08 18:35:13 -04:00

BLOCKERS.md

Sessions 5-7a: 955 tests, deployment ready

2026-06-08 18:35:13 -04:00

BUILD-STATE.md

Session 31: Code audit + security review — NFL MARKET_MAP gap fixed, npm audit 0 vulns (1695 tests)

2026-06-14 23:48:40 -04:00

CLAUDE.md

Sessions 29-30: Content templates + PropLine 3-key adapter + MLB Stats API + ESPN summary (1694 tests)

2026-06-14 22:29:01 -04:00

DECISIONS.md

Sessions 5-7a: 955 tests, deployment ready

2026-06-08 18:35:13 -04:00

Dockerfile

Session 7b: Fix pipeline - body parser, Redis queueing, poller visibility, auto-start

2026-06-10 01:22:55 -04:00

features.season_avg

Session 7h: Stripe products, tier config, scan limits, response gating, free tier

2026-06-10 13:24:11 -04:00

package-lock.json

Session 31: Code audit + security review — NFL MARKET_MAP gap fixed, npm audit 0 vulns (1695 tests)

2026-06-14 23:48:40 -04:00

package.json

Session 10: Internal auth refactor, prefetch cascade keys, Sentry, welcome email (1286 tests)

2026-06-10 20:45:05 -04:00

railway.toml

Sessions 5-7a: 955 tests, deployment ready

2026-06-08 18:35:13 -04:00

ROADMAP.md

Sessions 5-7a: 955 tests, deployment ready

2026-06-08 18:35:13 -04:00

S

Description

No description provided

4.2 MiB

Languages

JavaScript 59.6%

TypeScript 23.2%

Python 14.9%

CSS 0.9%

PLpgSQL 0.8%

Other 0.5%