mirror of
https://github.com/bilawalsidhu/gods-eye-view.git
synced 2026-11-04 10:24:02 +00:00
Tom-NeverwinterandClaude Opus 5
0584a1d71d
Four small, independently-verified issues from the audit backlog: - #262/#263: the celestrak, terrain-heights, adsbdb and launch-library proxies put raw `err.message` / raw upstream error bodies into HTTP responses, contradicting the sanitized-error property KNOWN-ISSUES.md documents. They now log the real error server-side (matching the GBFS and CCTV proxy convention) and return a generic message. - #265: scripts/dev-cctv.sh defaulted to HOST=0.0.0.0 while dev-fresh.sh and dev-secure.sh default to loopback. Now loopback, opt in with HOST=0.0.0.0. - #274: naturalEarthRegions.js's internal haversineKm took (lon, lat, lon, lat) while every other haversineKm in src/ takes (lat, lon, lat, lon). Same name, same signature shape, opposite order — a silent wrong-distance landmine. Reordered to match; the one call site was updated, so behavior is unchanged. - #270: removed CCTV_AUTO_CALIBRATE and CCTV_DRAPE_MESH from .env.example; no code anywhere reads them. Not done: deduplicating the ~10 haversine implementations into one shared utility. That is issue #188's scope and a far larger diff; removing the argument-order landmine is what makes the current state safe. Verified: npm test (2705 pass / 0 fail), npm run build green. Co-Authored-By: Claude Opus 5 (1M context) <[email protected]> Claude-Session: https://claude.ai/code/session_01C3eGYgDYBo2BCUeDGwGvrp