Claude/hostile code audit rbz3f8 - #590

Merged

smj1860 merged 11 commits into

mainfrom

claude/hostile-code-audit-rbz3f8

Aug 7, 2026

Commits on Aug 7, 2026

Compute the guest guidebook's clock in the property's timezone, not Eastern
claude
committed
6bb7314
Anchor the guest SMS correction window on a timestamp the upsert cannot move
claude
committed
eff4a3b
fix(guidebook): release SMS claims when the send throws, not only when it skips
claude
committed
9191742
fix(guidebook): stop the sponsor checkout from minting duplicate subscriptions
claude
committed
adbf0b8
fix(guidebook): validate uuid input at the redeem boundary; share UUID_RE
claude
committed
187524f
feat(guidebook): dedupe sponsor redemptions to one per booking per day
claude
committed
e196298
fix(guidebook): shape-check the media-kit token on all three entry points
claude
committed
935583f
feat(guidebook): open_count for engagement; arrival SMS on check-in day
claude
committed
45d5a11
fix(guidebook): clear the two semgrep findings and the Sonar assertion
claude
committed
aeb4cc9
fix(guidebook): bound every sponsor-pool read instead of relocating findings
claude
committed
fd303f2
fix(guidebook): make the offer-type list exhaustive, not just a membership check
claude
committed
f151ed3