Thomas DurieuxandClaude Opus 5.5 0f78182c58 fix: keep legacy prices and address review findings ...

Subscriptions sold at a replaced price lost their plan, because a
subscription was matched only against the configured price. Resolve
prices through the configured price, STRIPE_LEGACY_PRICES, then a
registry that now also records subscription prices and every configured
price at startup. Store the price on subscription grants.

Review fixes:
- Recover a Never expire add-on found by reconciliation before expiring.
- Open Checkout for the subscription cycle the hosting option shows.
- Report conference hosting only while the package payment stands.
- Keep automatic updates on a paid-slot repository while its owner subscribes.
- Apply the repository expiration limit only to repositories.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

2026-11-12 17:13:19 +00:00

..

fixtures

fix: bound ZIP directory memory for slow downloads

2026-11-09 08:54:26 +00:00

admin-queue-jobs.test.js

fix: send queue job payloads to the admin page as objects

2026-10-08 14:46:01 +02:00

anonymize-byte-safety.test.js

feat: preserve raw bytes when anonymization is a no-op

2026-05-04 11:52:03 +02:00

anonymize-literal-performance.test.js

fix: avoid timeouts for safe ZIP anonymization (#873)

2026-10-08 08:20:26 +01:00

anonymize-regex-prefix.test.js

perf: skip unmatched regex scans in large anonymized files

2026-11-02 21:48:40 +00:00

anonymize-utils.test.js

fix: harden anonymization privacy paths (#754)

2026-07-22 04:28:01 +02:00

anonymized-file-custom-path.test.js

fix: harden anonymization privacy paths (#754)

2026-07-22 04:28:01 +02:00

anonymized-file.test.js

Fix .bat anonymization, truncated-tree misses, submodule warning, account deletion (#742)

2026-07-02 13:35:48 +02:00

anonymizer-large-files.test.js

perf: index anonymization terms before scanning large files

2026-10-07 10:57:09 +00:00

anonymous-error.test.js

Fix 9 bugs and add 103 tests for core anonymization, config, and routing (#669)

2026-04-15 09:41:00 +02:00

app-reinstall-recovery.test.js

fix: repair private repository access from the edit page (#892)

2026-10-11 12:13:02 +01:00

asset-build.test.js

feat: migrate backend to Go with streaming and provider support

2026-11-04 14:21:36 +00:00

auth-utils.test.js

fix: close account authorization gaps (#755)

2026-07-22 04:29:04 +02:00

backend-reliability.test.js

fix: persist and recover repository removals for banned owners

2026-09-06 09:16:20 +02:00

billing-integration.test.js

fix: keep legacy prices and address review findings

2026-11-12 17:13:19 +00:00

billing-reliability.test.js

fix: protect reactivation claims and retain historical purchase prices

2026-11-02 21:39:17 +00:00

billing.test.js

feat: let authors pay once per paper instead of subscribing

2026-11-12 16:04:31 +00:00

bounded-zip.test.js

fix: bound ZIP directory memory for slow downloads

2026-11-09 08:54:26 +00:00

cached-file-probe.test.js

fix: preserve streamer error semantics for cache probes

2026-11-10 12:55:55 +00:00

conference-pricing.test.js

Fix 9 bugs and add 103 tests for core anonymization, config, and routing (#669)

2026-04-15 09:41:00 +02:00

conference.test.js

Fix 9 bugs and add 103 tests for core anonymization, config, and routing (#669)

2026-04-15 09:41:00 +02:00

config.test.js

fix: rate-limit visitors by real IP regardless of Cloudflare proxy hops (#750)

2026-07-17 06:44:21 +02:00

credential-crypto.test.js

fix: encrypt stored GitHub credentials (#797)

2026-09-08 13:04:28 +02:00

credential-migration.test.js

fix: save verified email addresses during GitHub registration

2026-10-09 13:24:21 +00:00

credential-session.test.js

fix: encrypt stored GitHub credentials (#797)

2026-09-08 13:04:28 +02:00

credential-validation.test.js

perf: reduce GitHub quota spent validating credentials

2026-11-10 11:36:55 +00:00

credentials.test.js

fix: encrypt stored GitHub credentials (#797)

2026-09-08 13:04:28 +02:00

daily-stats-history.test.js

repo change + daily stat improvements

2026-05-11 12:10:17 +03:00

dashboard-conference-overflow.test.js

refactor: migrate the frontend from AngularJS to Vue 3

2026-09-09 13:19:53 +02:00

dashboard-refresh.test.js

perf: bound request work and resource usage (#866)

2026-10-08 03:38:19 +01:00

dashboard-ui.test.js

feat(ui): redesign the viewer, landing, author and admin screens

2026-11-08 10:52:10 +00:00

database-connection.test.js

feat: add optional MongoDB replica deployment (#765)

2026-07-30 02:28:19 +02:00

database-storage.test.js

Fix 9 bugs and add 103 tests for core anonymization, config, and routing (#669)

2026-04-15 09:41:00 +02:00

dependency-archive.test.js

feat: migrate backend to Go with streaming and provider support

2026-11-04 14:21:36 +00:00

dependency-redis-integration.test.js

chore(deps): upgrade dependencies and remove production vulnerabilities

2026-10-08 10:21:00 +00:00

deploy-owner-alert-migration.test.js

fix: coordinate deployments when shared cache writers are active

2026-11-03 08:33:12 +00:00

dev-proxy.test.js

chore(deps): upgrade dependencies and remove production vulnerabilities

2026-10-08 10:21:00 +00:00

download-header-performance.test.js

feat: migrate backend to Go with streaming and provider support

2026-11-04 14:21:36 +00:00

download-progress-fences.test.js

test: declare timer used by progress race regression

2026-11-02 21:55:05 +00:00

error-codes.test.js

fix: handle production source failures and reduce ZIP work

2026-10-09 09:40:54 +00:00

express-routing.test.js

chore: upgrade Express to 5.2.1

2026-09-08 16:22:23 +02:00

file-etag.test.js

fix: include file path in cache ETag

2026-05-03 21:19:39 +02:00

file-route-path.test.js

fix persistance bugs

2026-05-06 20:00:59 +03:00

file-route-sandbox.test.js

feat: migrate backend to Go with streaming and provider support

2026-11-04 14:21:36 +00:00

folder-counts.test.js

perf: select the covering index for folder counts

2026-11-11 10:04:03 +00:00

folder-file-security.test.js

fix: prevent folder downloads from exposing GitHub metadata

2026-11-09 10:45:24 +00:00

frontend-regressions.test.js

feat: let authors leave their bibliography unredacted (#941) (#943)

2026-11-11 14:10:54 +01:00

gist-auth-errors.test.js

fix: support gists through GitHub App login (#875)

2026-10-08 10:26:13 +01:00

gist-schema.test.js

fix: try to fix gist

2026-07-02 14:53:26 +03:00

github-app.test.js

fix: repair private repository access from the edit page (#892)

2026-10-11 12:13:02 +01:00

github-repository-pages.test.js

test: cover repository loading with restricted Pages settings

2026-09-14 16:44:53 +02:00

github-stream-url.test.js

fix persistance bugs

2026-05-06 20:00:59 +03:00

github-submodules.test.js

fix: keep repositories readable with invalid submodule commits

2026-11-06 12:01:25 +00:00

hashed-assets.test.js

fix: prevent path traversal through hashed asset routes

2026-09-15 20:26:42 +00:00

humanFileSize.test.js

Fix 9 bugs and add 103 tests for core anonymization, config, and routing (#669)

2026-04-15 09:41:00 +02:00

is-text-file.test.js

Fix .bat anonymization, truncated-tree misses, submodule warning, account deletion (#742)

2026-07-02 13:35:48 +02:00

large-notebook-download.test.js

fix: avoid timeouts for safe ZIP anonymization (#873)

2026-10-08 08:20:26 +01:00

large-repository-tree.test.js

merge: preserve billing admission with bounded tree preparation

2026-11-03 08:33:12 +00:00

lfs-detect.test.js

fix: resolve eslint unused-var and useless-assignment warnings

2026-05-06 08:22:45 +03:00

maintenance-api.test.js

feat: let authors leave their bibliography unredacted (#941) (#943)

2026-11-11 14:10:54 +01:00

markdown-compatibility.test.js

feat: migrate backend to Go with streaming and provider support

2026-11-04 14:21:36 +00:00

markdown-fonts.test.js

fix: fill gaps in GitHub Markdown rendering (#912)

2026-11-02 07:56:32 +01:00

markdown-sanitization.test.js

feat: migrate backend to Go with streaming and provider support

2026-11-04 14:21:36 +00:00

markdown-security.test.js

fix: fill gaps in GitHub Markdown rendering (#912)

2026-11-02 07:56:32 +01:00

mermaid-security.test.js

feat: migrate backend to Go with streaming and provider support

2026-11-04 14:21:36 +00:00

mongo-index-audit.test.js

perf: index repository lookups and billing maintenance

2026-11-11 10:18:20 +00:00

monitoring-access.test.js

feat: migrate backend to Go with streaming and provider support

2026-11-04 14:21:36 +00:00

oauth-session-preservation.test.js

fix: preserve anonymous sessions during GitHub sign-in

2026-09-10 16:15:39 +02:00

owner-alert-actions.test.js

fix: rearm owner alerts across recovery actions safely

2026-10-09 07:47:51 +00:00

owner-notifications.test.js

fix: prevent folder downloads from exposing GitHub metadata

2026-11-09 10:45:24 +00:00

performance-integration.test.js

fix: bound large repository tree memory and cleanup

2026-11-02 21:57:33 +00:00

performance-monitoring-integration.test.js

chore(deps): upgrade dependencies and remove production vulnerabilities

2026-10-08 10:21:00 +00:00

performance-regressions.test.js

fix: bound large repository tree memory and cleanup

2026-11-02 21:57:33 +00:00

performance-storage-integration.test.js

chore(deps): upgrade dependencies and remove production vulnerabilities

2026-10-08 10:21:00 +00:00

performance-streamer-integration.test.js

fix: contain upstream failures and back off repeated retries

2026-10-09 03:48:05 +00:00

performance-worker.test.js

fix: bound ZIP directory memory for slow downloads

2026-11-09 08:54:26 +00:00

persistent-session.test.js

fix: persist login sessions across browser restarts

2026-11-08 20:32:03 +00:00

preserve-files.test.js

feat: let authors leave their bibliography unredacted (#941) (#943)

2026-11-11 14:10:54 +01:00

production-failure-fixes.test.js

fix: admit replacement sources and account for resolved storage

2026-11-02 21:18:43 +00:00

production-followup-fixes.test.js

fix: cancel token-gate waits and detect complete LFS prefixes

2026-10-09 10:08:49 +00:00

production-regressions.test.js

fix: prevent folder downloads from exposing GitHub metadata

2026-11-09 10:45:24 +00:00

project-names.test.js

fix: make dashboard UI consistent and compact on mobile

2026-10-07 14:54:49 +00:00

pull-request-content.test.js

Fix 9 bugs and add 103 tests for core anonymization, config, and routing (#669)

2026-04-15 09:41:00 +02:00

rate-limit-key.test.js

chore(deps): upgrade dependencies and remove production vulnerabilities

2026-10-08 10:21:00 +00:00

recipient-alerts-mongo.test.js

fix: retain recipient suppression after access recovery (#897)

2026-10-14 19:23:12 +01:00

recover-owner-credential.test.js

perf: parallelize credential migration owner analysis

2026-09-08 14:28:46 +02:00

recover-repository-owners.test.js

fix: archive legacy repository IDs containing spaces

2026-09-08 14:08:48 +02:00

registration-email.test.js

fix: deduplicate owner access alerts per recipient (#896)

2026-10-13 13:55:10 +01:00

repository-activity.test.js

feat: let authors pay once per paper instead of subscribing

2026-11-12 16:04:31 +00:00

repository-reconnect.test.js

feat: migrate backend to Go with streaming and provider support

2026-11-04 14:21:36 +00:00

repository-refresh.test.js

merge: preserve billing admission with bounded tree preparation

2026-11-03 08:33:12 +00:00

request-monitoring.test.js

fix: handle production source failures and reduce ZIP work

2026-10-09 09:40:54 +00:00

review-callbacks.test.js

Return artifact consent through registered POST callbacks

2026-09-27 15:59:36 +00:00

review-capabilities.test.js

fix: close rejected artifact service requests before body draining

2026-09-27 13:13:04 +00:00

review-completion-http.test.js

Add scoped completion exchange service transport

2026-09-27 15:18:49 +00:00

review-consent-http.test.js

Merge commit 'refs/security-review/pr849' into HEAD

2026-10-08 16:26:12 +00:00

review-consent-page.test.js

Add isolated artifact owner consent page

2026-09-27 14:56:06 +00:00

review-consent-ui.test.js

Return artifact consent through registered POST callbacks

2026-09-27 15:59:36 +00:00

review-intent-client.test.js

Add bounded authenticated review intent HTTPS consumer

2026-09-27 13:50:20 +00:00

review-owner-consent.test.js

Return artifact consent through registered POST callbacks

2026-09-27 15:59:36 +00:00

route-utils-auth.test.js

fix: close account authorization gaps (#755)

2026-07-22 04:29:04 +02:00

route-utils-handleError.test.js

fix: contain upstream failures and back off repeated retries

2026-10-09 03:48:05 +00:00

route-utils.test.js

Fix 9 bugs and add 103 tests for core anonymization, config, and routing (#669)

2026-04-15 09:41:00 +02:00

runtime-regressions.test.js

test: exercise streaming traversal in nested tree regression

2026-11-03 08:41:48 +00:00

shared-blob-cache.test.js

feat: migrate backend to Go with streaming and provider support

2026-11-04 14:21:36 +00:00

shared-cache-http.test.js

feat: migrate backend to Go with streaming and provider support

2026-11-04 14:21:36 +00:00

source-file-list.test.js

feat: let authors leave their bibliography unredacted (#941) (#943)

2026-11-11 14:10:54 +01:00

storage-error-origin.test.js

fix: distinguish upstream stream failures from storage errors

2026-10-07 12:24:23 +00:00

streamer-public-access.test.js

fix: address streamer review edge cases

2026-09-14 15:23:13 +00:00

term-hints.test.js

feat: let authors leave their bibliography unredacted (#941) (#943)

2026-11-11 14:10:54 +01:00

term-presence.test.js

fix: avoid rebuilding candidate regexes during anonymization (#895)

2026-10-12 21:27:36 +01:00

trust-proxy.test.js

fix: rate-limit visitors by real IP regardless of Cloudflare proxy hops (#750)

2026-07-17 06:44:21 +02:00

validation.test.js

Fix 9 bugs and add 103 tests for core anonymization, config, and routing (#669)

2026-04-15 09:41:00 +02:00

vue-ui.test.js

fix: keep legacy prices and address review findings

2026-11-12 17:13:19 +00:00

website-rate-limit.test.js

fix: isolate website limits and scope explorer counts

2026-11-03 15:03:23 +00:00

zip-proxy-errors.test.js

merge: reconcile paid hosting with latest main

2026-11-02 21:12:29 +00:00

zip-stream-errors.test.js

fix: address streamer review edge cases

2026-09-14 15:23:13 +00:00