[JOY (JOY)]

Promote dev to main.

• fix(importer): harden AiReviewAnalyzer config, summary, and vote bounds (#834) #835 fix(importer): harden AiReviewAnalyzer config, summary, and vote bounds (fix(importer): harden AiReviewAnalyzer config, summary sanitization, and vote/flag bounds #834)
• fix(importer): enforce integer RAM/storage bounds and asset checks (#836) #837 fix(importer): enforce integer RAM/storage bounds and asset checks (fix(importer): enforce integer RAM/storage bounds, TB formatting, and asset/color sanitization in ProductNormalizer #836)
• fix(importer): clamp fetchAllPages bounds and harden merchant risk (#838) #839 fix(importer): clamp fetchAllPages bounds and harden merchant risk (fix(importer): clamp fetchAllPages bounds, harden parseShopeeEnqueueUrl, and cap follower_count in merchant risk #838)
• fix(importer): harden computeRetryDelayMs, logger redaction, and mergeKeySpecs (#840) #841 fix(importer): harden computeRetryDelayMs, logger redaction, and mergeKeySpecs (fix(importer): harden computeRetryDelayMs, logger secret redaction, and mergeKeySpecs key bounds #840)
• fix(web): harden cache-tags targets, api-handler bounds, and cookie token parsing (#842) #843 fix(web): harden cache-tags targets, api-handler bounds, and cookie token parsing (fix(web): harden cache-tags revalidation targets, api-handler bounds, and cookie token parsing #842)
• fix(web): harden structured logger redaction and extension URL/payload bounds (#844) #845 fix(web): harden structured logger redaction and extension URL/payload bounds (fix(web): harden structured logger circular/bigint/secret redaction and extension URL/payload bounds #844)
• fix(extension): harden security-guards and detector JSON-LD/ID bounds (#846) #847 fix(extension): harden security-guards and detector JSON-LD/ID bounds (fix(extension): harden security-guards signal/URL sanitization and ecommerce-detector JSON-LD/ID bounds #846)
• fix(web): harden csv-safe, seo, merchant-directory, and sold-count bounds (#848) #849 fix(web): harden csv-safe, seo, merchant-directory, and sold-count bounds (fix(web): harden csv-safe formula guard, seo absoluteUrl/fitTitle, merchant-directory, and sold-count bounds #848)
• fix(web): harden offer-plausibility, competitors, review-display, and sitemap bounds (#850) #851 fix(web): harden offer-plausibility, competitors, review-display, and sitemap bounds (fix(web): harden offer-plausibility, product-competitors, review-display, and sitemap-lastmod bounds #850)
• fix(web): harden deal-radar, leaderboard-engine, category-filters, and i18n (#852) #853 fix(web): harden deal-radar, leaderboard-engine, category-filters, and i18n (fix(web): harden deal-radar, leaderboard-engine, category-filters, and i18n helpers #852)
• fix(web): harden catalog-listing, analyzer-copy, product-detail-copy, and spec-localizer (#854) #855 fix(web): harden catalog-listing, analyzer-copy, product-detail-copy, and spec-localizer (fix(web): harden catalog-listing, analyzer-copy, product-detail-copy, and spec-localizer bounds #854)
• fix(web): harden navigation, merchant-directory, hero suggestions, and rate-i18n bounds (#856) #857 fix(web): harden navigation, merchant-directory, hero suggestions, and rate-i18n bounds (fix(web): harden navigation, merchant-directory, hero suggestions, and rate-i18n bounds #856)
• fix(web): harden server rate deals radar and cached query key bounds (#858) #859 fix(web): harden server rate deals radar and cached query key bounds (fix(web): harden server rate deals radar and cached query key bounds #858)
• fix(web): harden review vote eligibility, community review mapper, and openapi origin bounds (#860) #861 fix(web): harden review vote eligibility, community review mapper, and openapi origin bounds (fix(web): harden review vote eligibility, community review mapper, and openapi origin bounds #860)
• fix(importer): harden peer floor, merchant risk, and arena/entity bounds (#862) #863 fix(importer): harden peer floor, merchant risk, and arena/entity bounds (fix(importer): harden cluster peer floor, merchant review risk, and arena/entity URL bounds #862)
• fix(web): harden API handler price/IP bounds, watchlist offers, and crowd ingest URLs (#864) #866 fix(web): harden API handler price/IP bounds, watchlist offers, and crowd ingest URLs (fix(web): harden API handler price/IP bounds, watchlist offer selection, and crowd ingest URL checks #864)
• fix(web): deal radar counts every offer of a cluster (#867) #869 fix(web): deal radar counts every offer of a cluster (fix(web): deal radar truncates offers to 200 before computing the spread (dev E2E red since #859) #867)
• fix(web): harden inspect observed prices, health TTL clock guard, and revalidate tokens (#868) #872 fix(web): harden inspect observed prices, health TTL clock guard, and revalidate tokens (fix(web): harden inspect observed price bounds, health TTL clock guard, and revalidate token checks #868)
• feat(ops): commit agent release helpers and report the live commit (#865) #870 feat(ops): commit agent release helpers and report the live commit (ops: commit agent release helpers (merge-when-green, board, promote, verify-live) #865)

Merge with a merge commit, never squash (Docs/Resources/RELEASE.md).

---

📌 TL;DR

This PR implements comprehensive input validation, sanitization, and resource bounding across the browser extension and importer services to prevent security vulnerabilities (e.g., XSS, credential leakage, prototype pollution) and performance degradation (e.g., ReDoS, memory exhaustion). It also introduces operational scripts for automated release management and updates CI/CD workflows to test these new safeguards.

🎯 Type of Change

• 🚀 New feature
• 🐛 Bugfix
• 🧹 Refactor
• ⚡ Performance
• 📚 Documentation
• ⚙️ CI / Configuration

🔍 Changes Walkthrough

File	Summary of Changes
.github/workflows/ci.yml	Added a new CI step to run tests for the new operational scripts (merge-when-green, board, promote, verify-live).
AGENTS.md	Updated agent documentation to include instructions for using the new scripts/ops/ utilities for merging, promoting, verifying live status, and managing project boards.
Docs/Resources/RELEASE.md	Updated release documentation to reflect the new automated workflows provided by promote.mjs and verify-live.mjs.
apps/extension/src/extractors/ecommerce-detector.ts	Hardened URL parsing by rejecting URLs with embedded credentials, control characters, or excessive length. Added bounds to ID extraction (max length) and JSON-LD processing (max entities/offers) to prevent resource exhaustion.
apps/extension/src/security-guards.ts	Enhanced sanitization of product signals (URLs, IDs, titles) to strip control characters and validate formats. Added bounds to sparkline data points. Updated escapeSafeExternalHref to reject credential-embedded URLs.
apps/extension/src/test-extension-pipeline.ts	Added extensive test cases for the new security guards, URL sanitization, ID bounds, and JSON-LD limits.
apps/importer/src/shopee/__tests__/backfill-review-risk.test.ts	Added tests for vocabulary validation, follower count ceilings, key spec sanitization, retry delay bounds, sensitive string redaction, and circular reference handling in logs.
apps/importer/src/shopee/__tests__/paging.test.ts	Added tests for rejecting URLs with credentials, zero IDs, oversized IDs, and clamping page sizes.
apps/importer/src/shopee/ai-review-analyzer.ts	Hardened configuration parsing (URL validation, timeout clamping). Sanitized AI-generated text (pros/cons/summary). Validated review verdicts and flag categories against allowed sets. Added input validation for review votes.
apps/importer/src/shopee/arena-spec-syncer.ts	Added bounds to HTML processing (max length, max catalog items). Hardened URL normalization to reject credentials.
apps/importer/src/shopee/cluster-peer-floor.ts	Added bounds to peer row processing (max rows). Hardened price validation to reject booleans and non-finite numbers.
apps/importer/src/shopee/entity-matcher.ts	Added bounds to image list processing (max images). Hardened URL sanitization to reject credentials.
apps/importer/src/shopee/jobs/backfill-specs.ts	Implemented robust sanitization for key specs: stripping control characters, validating keys (rejecting __proto__, constructor, etc.), bounding string lengths and object keys.
apps/importer/src/shopee/logger.ts	Enhanced redactSensitiveString to cover more secret patterns (API keys, tokens) and bound output length. Rewrote sanitizeLogMeta to handle circular references, bound depth/keys, and redact sensitive data more effectively.
apps/importer/src/shopee/merchant-review-risk.ts	(Truncated in diff, but implied by tests) Hardened merchant scoring logic to handle overflowed follower counts and invalid inputs.

📊 Architectural Flow

flowchart TD
    subgraph "Browser Extension"
        A[Raw Product Signal] --> B[security-guards.ts]
        B -->|Sanitize URL/ID/Text| C[Cleaned Signal]
        C --> D[ecommerce-detector.ts]
        D -->|Validate & Extract| E[Final Product Data]
    end

    subgraph "Importer Service"
        F[Raw HTML/JSON Data] --> G[arena-spec-syncer.ts]
        G -->|Bound HTML/Items| H[Specs]
        I[Merchant/Review Data] --> J[merchant-review-risk.ts]
        J -->|Validate & Score| K[Risk Scores]
        L[Log Data] --> M[logger.ts]
        M -->|Redact & Sanitize| N[Safe Logs]
    end

    subgraph "Ops Scripts"
        O[CI Green] --> P[merge-when-green.mjs]
        P --> Q[Promote PR]
        R[Main Branch] --> S[verify-live.mjs]
        S -->|Check Health/Commit| T[Live Status]
    end

Loading

[claude]

⚠️ Code review skipped — your organization has no extra usage available to pay for this review.

If your organization's extra usage balance is empty, an organization admin can add extra usage credits at claude.ai/admin-settings/usage. If its monthly spend limit was reached, an admin can raise it on the same page. If neither applies, contact Anthropic support.

Once extra usage is available, someone with write access to this repository can comment @claude review on this pull request to trigger a review.

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated
rate	Ready	Preview	Oct 24, 2026 3:10pm UTC

[coderabbitai]

Important

Review skipped

Auto reviews are disabled on base/target branches other than the default branch.

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

Run configuration

• Source mode: Auto
• Repository: Unavailable
• Branch: Unavailable
• File: No configuration file from this repository applied
• Commit: Unavailable
• Layers: Organization UI
• Review profile: CHILL
• Plan: Advanced
• Run ID: b17720dd-d52c-4a61-8cef-bfb8236c1517

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

• Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}