glass beadian b24ebc5862 fix: logic-audit P0/P1 wave — CORS PUT, chunked cap, presign checksums, logout await, refresh rotation race ... From the logic audit (HEAD 04f5f7e): - P0 CORS: enableCors methods lacked PUT — browsers could not chunk-upload at all (cross-origin preflight refused) - P0 chunked: validateUpload enforced the 2 GiB whole-body cap on chunked completes, so every >2 GiB chunked upload failed after full upload - P1 presignPut: the SDK's flexible-checksum default added an x-amz-checksum-crc32 header browsers cannot reproduce; S3Client now uses requestChecksumCalculation WHEN_REQUIRED - P1 refresh rotation race: concurrent refreshes both succeeded (consume ignored rowCount) forking the token family; consume now returns whether it won and the loser revokes the chain - P2 logout: awaits the revocation and ignores missing/forged bearers honestly		2026-10-18 10:18:02 +00:00
..
api	fix: logic-audit P0/P1 wave — CORS PUT, chunked cap, presign checksums, logout await, refresh rotation race	2026-10-18 10:18:02 +00:00
archive-bot	Phase B: encrypted archive export bundles (age), power-level-gated export command, encryption-state linter	2026-10-12 12:46:56 +00:00
media-worker	fix: bound the audio-less clip bed with atrim (the card bed was fixed; this branch was missed by a silent no-op replace)	2026-10-16 22:27:09 +00:00
scheduler	fix: deliver alt texts to providers at publish time	2026-10-16 01:52:35 +00:00
web	feat: video uploads up to 20 GiB via the chunked path	2026-10-18 08:31:44 +00:00