Travis
repo: ~/Projects/Travis · 6 commits · 0 in last 24h, 0 in last 7d ·
Skills used
- /report1
- /travis-data-202605191
- /stereo-data1
Creative ideas + design notes
Commits with substantial prose (≥120 chars) — the rationale behind each move.
3901827 · 2026-05-19 · SECURITY: remove stereo-data.csv (was publicly exposed unauthed on prod :7350)
The 312 KB stereo-data.csv held film-production data and was being served
via /api/report on a 0.0.0.0:7350 prod instance with NO authentication
despite the server.js header comment claiming "Auth: admin / DWSecure2024!"
(the auth was never wired). Surfaced by tick 184 session #102 Teal
mechanical refactor sweep; user (Steve) ordered immediate removal.
Backup preserved at ~/Backups/travis-data-20260519/stereo-data.csv on Mac2
(sha256 5500411f2ddad85e61f644c7ffe576f404816a671dca25de94f7d642622eeb37)
in case the data is needed for recovery.
Prod (45.61.58.125:7350 / Kamatera) requires separate pm2 stop + file
removal — being handled in the same session.
NOTE: file is in git HISTORY before this commit (5500411f sha). To purge
the historical leak, `git filter-repo --invert-paths --path stereo-data.csv`
is needed — left for Steve's explicit yes.
Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
4a87b4b · 2026-05-19 · add 404 fallback middleware after static + routes
Returns JSON {error:'not_found', path} instead of silent Express default
HTML 404 — easier to debug from logs and consistent with the rest of
the JSON API.
Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
File tree
6 files tracked. Click any to browse the source at HEAD.
rendered in 0ms