Skip to content

chore: clean up untracked working-tree files - #134

Merged
willwearing merged 1 commit into
mainfrom
chore/untracked-cleanup
Sep 5, 2026
Merged

chore: clean up untracked working-tree files#134
willwearing merged 1 commit into
mainfrom
chore/untracked-cleanup

Conversation

@willwearing

Copy link
Copy Markdown
Owner

Resolves the four unrelated leftovers that had been sitting untracked in the working tree.

Deleted

backend/debug-mastery.ts, backend/debug-mastery2.ts
Standalone Prisma scripts from April that dump one hardcoded user's mastery state to the console. Nothing imports them and the UUIDs they target are stale.

backend/src/config/cors-origin.ts + spec
An unwired second implementation of CORS origin checking. main.ts imports buildStaticOrigins, createCorsOriginGuard and isOriginAllowed from ./config/cors; nothing referenced createCorsOriginHandler. Keeping a duplicate of a security control beside the live one risks someone wiring up the wrong one later.

The behaviour it was exploring, answering a disallowed origin by omitting CORS headers rather than returning 403, can be revisited in config/cors.ts directly if that turns out to be wanted.

Gitignored

.posthog-audit-checks.json — regenerated wizard output, and the copy on disk was already stale on SDK versions.

Added

.claude/skills/audit/, .claude/skills/integration-nextjs-app-router/ — same shape as the already-tracked integration-javascript_node skill; they were just never added.

Testing

bun run test: 7/7 turbo tasks pass. Backend is 650 tests, down exactly 4 from 654, which is cors-origin.spec.ts being removed. No other suite changed.

🤖 Generated with Claude Code

Four unrelated leftovers had been sitting untracked in the working tree.
Resolving each rather than carrying them further.

Deleted backend/debug-mastery.ts and debug-mastery2.ts. Standalone Prisma
scripts from April that dump one hardcoded user's mastery state to the
console. Nothing imports them and the UUIDs they target are stale.

Deleted backend/src/config/cors-origin.ts and its spec. An unwired second
implementation of CORS origin checking. main.ts imports buildStaticOrigins,
createCorsOriginGuard and isOriginAllowed from ./config/cors, and nothing
referenced createCorsOriginHandler. Keeping a duplicate of a security
control next to the live one risks someone wiring up the wrong one later.
The behaviour it was exploring, answering a disallowed origin by omitting
CORS headers instead of returning 403, can be revisited in config/cors.ts
directly if that turns out to be wanted.

Gitignored .posthog-audit-checks.json. Regenerated wizard output, and the
committed copy was already stale on SDK versions.

Committed .claude/skills/audit and integration-nextjs-app-router. Same
shape as the tracked integration-javascript_node skill; they were just
never added.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
@vercel

vercel Bot commented Sep 5, 2026

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated
graspful Ready Ready Preview Sep 5, 2026 6:03pm UTC

@willwearing
willwearing merged commit 141b489 into main Sep 5, 2026
5 checks passed
@willwearing
willwearing deleted the chore/untracked-cleanup branch September 5, 2026 18:12
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant