Complete rewrite: ES modules, SQLite auth, modern SPA frontend, Docker deployment#4

Draft

Copilot wants to merge 18 commits into

copilot/1-complete-rewrite-modernization

Commits on Mar 30, 2026

Initial plan
Copilot
committed
Complete rewrite: ES modules, SQLite auth, modern SPA, Docker deployment

Copilot
and
dany-on-demand
committed
Security hardening: CSRF protection, rate limiting, secure cookie flag

Copilot
and
dany-on-demand
committed
Add proper CSRF token (synchronizer pattern), rate limiting on all endpoints

Copilot
and
dany-on-demand
committed
Add rate limiting to SPA fallback and static file routes

Copilot
and
dany-on-demand
committed
perf: modernise to Node 24 with data-oriented patterns

Copilot
and
dany-on-demand
committed
feat: performance, security, UX and deployment improvements

Copilot
and
dany-on-demand
committed
feat: perf, security and UX improvements — progress bar, caching, rate limiting fixes

Copilot
and
dany-on-demand
committed
feat: remove Express — replace with vanilla Node.js http, inline session/rate-limit/gzip

Copilot
and
dany-on-demand
committed

Commits on Mar 31, 2026