fix: PR-review findings cleanup (security, cost, UX guards)#50

Merged

sharonds merged 20 commits intomainfrom

fix/pr-review-cleanup

Apr 22, 2026

Commits on Apr 22, 2026

test(e2e+unit): failing CSRF + loopback regression for Deep Audit POST (#46 review)
sharonds
committed
test(cost): failing regression for premium-tier sync estimate (#46 review)
sharonds
committed
test(llm): failing regression for Gemini maxOutputTokens clamp (#46 review)
sharonds
committed
test(utils): failing regression for URL encoding in Gemini interactions API (#46 review)
sharonds
committed
test(dashboard-format): failing regression for invalid date input (#47 review)
sharonds
committed
fix(dashboard): add CSRF + loopback guard to Deep Audit POST (#44 review-#46)
sharonds
committed
ci: run browser E2E lane so new UI regressions are caught (#46 review)
sharonds
committed
fix(cost): premium tier uses basic sync cost; Deep Audit stays separate (#46 review)
sharonds
committed
fix(llm): Gemini maxOutputTokens respects caller budget, capped at 8192 (#46 review)
sharonds
committed
fix(dashboard): formatShortDate fallback on invalid date input (#47 review)
sharonds
committed
fix(gemini): URL-encode api key and interaction id in all Gemini endpoints (#46 review)
sharonds
committed
fix(providers): gemini tier costs are per-claim, aligned with 4-claim tier prices (#46 review)
sharonds
committed
docs(readme): align skills table with shipped defaults and costs (#43 review)
sharonds
committed
docs(changelog): document PR-review-findings cleanup under [Unreleased]
sharonds
committed
fix(grounded): emit per-claim cost from registry (Copilot PR #50 review)
sharonds
committed
test(e2e): bump CSRF-test post-stop delay to 500ms (Copilot PR #50 review)
sharonds
committed
ci: pin agent-browser to 0.26.0 (Copilot PR #50 review)
sharonds
committed
refactor(dashboard): hoist formatShortDate result in ClaimDrillDown (Copilot PR #50 review)
sharonds
committed
test(e2e): poll for skills list before asserting body text (fixes CI flake)
sharonds
committed
Merge branch 'main' into fix/pr-review-cleanup
sharonds
committed