maaz519 b4104b9769 feat(media): allow HTML/Markdown/CSV uploads; serve scriptable types as downloads ...

- media upload policy now allows text/html, text/markdown, text/x-markdown,
  text/csv (in addition to images/av, pdf, txt, zip, office docs)
- blob endpoint adds X-Content-Type-Options: nosniff, and forces
  Content-Disposition: attachment for script-capable types (html, xhtml, svg,
  xml) so an uploaded file can't render/execute inline from the IIOS origin
  (stored-XSS). Images/video/audio/pdf still serve inline for preview.
- dev-opa test covering the allowed types + unknown/oversize denials

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

2026-07-20 14:30:25 +05:30

.claude/memory

docs: add repo-local project memory under .claude/memory/

2026-07-09 19:55:38 +05:30

.gitea/workflows

build: publish @insignia/iios-* SDKs to the Gitea package registry

2026-07-10 17:13:55 +05:30

.github/workflows

ci: start Postgres via docker run on localhost (services: not wired on runner)

2026-07-04 15:25:30 +00:00

apps

feat(p8): meeting-studio demo + smoke-calendar; P8 verification green

2026-07-01 18:22:24 +05:30

docs

feat(mail): email attachments over SMTP

2026-07-18 14:14:20 +05:30

packages

feat(media): allow HTML/Markdown/CSV uploads; serve scriptable types as downloads

2026-07-20 14:30:25 +05:30

scripts

fix(iios): thread subject on create, graceful open_thread error, isolated test DB

2026-07-06 19:39:19 +05:30

test

ci: import-boundary law + CI workflow (P0 complete)

2026-06-30 21:09:37 +05:30

.dockerignore

chore(iios): production Dockerfile + migrate entrypoint + env/secrets contract

2026-07-03 19:19:13 +05:30

.env.example

chore: iios workspace skeleton (pnpm workspace, configs, postgres:5434)

2026-06-30 20:56:36 +05:30

.gitignore

chore: iios workspace skeleton (pnpm workspace, configs, postgres:5434)

2026-06-30 20:56:36 +05:30

.npmrc

build: publish @insignia/iios-* SDKs to the Gitea package registry

2026-07-10 17:13:55 +05:30

CLAUDE.md

docs: add repo-local project memory under .claude/memory/

2026-07-09 19:55:38 +05:30

docker-compose.yml

feat(iios): socket.io Redis adapter for cross-replica realtime (P9 scaling)

2026-07-03 19:28:11 +05:30

package.json

build: publish @insignia/iios-* SDKs to the Gitea package registry

2026-07-10 17:13:55 +05:30

pnpm-lock.yaml

feat(media): S3/MinIO storage adapter (StoragePort)

2026-07-18 14:26:53 +05:30

pnpm-workspace.yaml

feat(demo): P2.7 Vite React two-pane realtime demo + dev token endpoint (P2 complete)

2026-07-01 01:36:14 +05:30

PUBLISHING.md

build: publish @insignia/iios-* SDKs to the Gitea package registry

2026-07-10 17:13:55 +05:30

tsconfig.base.json

chore: iios workspace skeleton (pnpm workspace, configs, postgres:5434)

2026-06-30 20:56:36 +05:30

vitest.config.ts

fix(iios): thread subject on create, graceful open_thread error, isolated test DB

2026-07-06 19:39:19 +05:30

S

Description

No description provided

1.6 MiB

Languages

TypeScript 88.8%

JavaScript 10.4%

Dockerfile 0.4%

HTML 0.3%

Shell 0.1%