mirror of
https://github.com/R0m1k3/xtremflow.git
synced 2026-10-11 17:30:00 +02:00
MichaelandClaude Fable 5
60d3f42901
Security: - Replace unsalted SHA-256 password hashing with bcrypt (lazy rehash on login) - Add authenticated /api/xtream-api gateway: Xtream credentials are injected server-side and never sent to the frontend; /api/playlists no longer returns passwords - Redact credentials from all logs (login body, proxy/FFmpeg/scheduler URLs) - Add auth to recordings, EPG, season-passes and streaming routes (HttpOnly session cookie for hls.js; loopback bypass for local FFmpeg) - Lock player postMessage to same-origin in both directions - Vendor and pin hls.js 1.6.7 / mpegts.js 1.7.3 (drop CDN @latest) - Fix rate limiter (client IP was never resolved), add login rate limit, restrict CORS, add CSP Report-Only, block private-IP SSRF targets, fix path traversal in recording log retrieval, chmod 777 -> 770 - Remove dead HiveService (seeded admin/admin into IndexedDB with SHA-256) - Fix authMiddleware not populating 'user' context (getPlaylist ignored the logged-in user; admin purge always returned 403) Streaming: - New FfmpegSessionManager: process registry, idle reaper (4 min live / 15 min VOD), orphan cleanup at startup, clean SIGTERM shutdown, fast-fail with stderr instead of 30 s timeout - Quality selection (source/high/medium/low) for live and VOD; source mode streams with -c:v copy (zero transcoding); selector wired into the player - Concurrent recordings (MAX_CONCURRENT_RECORDINGS, default 2); conflicts retry on the next tick instead of silently failing - Lower live latency (HLS window 20 -> 10 segments, liveSync 10 -> 3) - Fix recording log lookup (.mp4 vs .mkv mismatch) Design: - Replace hardcoded colors with AppColors tokens (12 files) - web/theme.css syncs HTML players with the Flutter palette - DPAD/keyboard navigation (arrow-key focus, player shortcuts) - Tooltips on player icon buttons, Semantics on content cards - Remove 7 dead widgets broken since the Stitch merge Quality: - bin/test/: 21 unit tests (bcrypt, redaction, traversal, SSRF, recording conflicts) plus a quality-selector widget test - GitHub Actions CI (analyze + test + build web) - Archive stale status docs into docs/archive/ Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
134 lines
4.6 KiB
Markdown
134 lines
4.6 KiB
Markdown
<!-- rtk-instructions v2 -->
|
|
# RTK (Rust Token Killer) - Token-Optimized Commands
|
|
|
|
## Golden Rule
|
|
|
|
**Always prefix commands with `rtk`**. If RTK has a dedicated filter, it uses it. If not, it passes through unchanged. This means RTK is always safe to use.
|
|
|
|
**Important**: Even in command chains with `&&`, use `rtk`:
|
|
```bash
|
|
# ❌ Wrong
|
|
git add . && git commit -m "msg" && git push
|
|
|
|
# ✅ Correct
|
|
rtk git add . && rtk git commit -m "msg" && rtk git push
|
|
```
|
|
|
|
## RTK Commands by Workflow
|
|
|
|
### Build & Compile (80-90% savings)
|
|
```bash
|
|
rtk cargo build # Cargo build output
|
|
rtk cargo check # Cargo check output
|
|
rtk cargo clippy # Clippy warnings grouped by file (80%)
|
|
rtk tsc # TypeScript errors grouped by file/code (83%)
|
|
rtk lint # ESLint/Biome violations grouped (84%)
|
|
rtk prettier --check # Files needing format only (70%)
|
|
rtk next build # Next.js build with route metrics (87%)
|
|
```
|
|
|
|
### Test (90-99% savings)
|
|
```bash
|
|
rtk cargo test # Cargo test failures only (90%)
|
|
rtk vitest run # Vitest failures only (99.5%)
|
|
rtk playwright test # Playwright failures only (94%)
|
|
rtk test <cmd> # Generic test wrapper - failures only
|
|
```
|
|
|
|
### Git (59-80% savings)
|
|
```bash
|
|
rtk git status # Compact status
|
|
rtk git log # Compact log (works with all git flags)
|
|
rtk git diff # Compact diff (80%)
|
|
rtk git show # Compact show (80%)
|
|
rtk git add # Ultra-compact confirmations (59%)
|
|
rtk git commit # Ultra-compact confirmations (59%)
|
|
rtk git push # Ultra-compact confirmations
|
|
rtk git pull # Ultra-compact confirmations
|
|
rtk git branch # Compact branch list
|
|
rtk git fetch # Compact fetch
|
|
rtk git stash # Compact stash
|
|
rtk git worktree # Compact worktree
|
|
```
|
|
|
|
Note: Git passthrough works for ALL subcommands, even those not explicitly listed.
|
|
|
|
### GitHub (26-87% savings)
|
|
```bash
|
|
rtk gh pr view <num> # Compact PR view (87%)
|
|
rtk gh pr checks # Compact PR checks (79%)
|
|
rtk gh run list # Compact workflow runs (82%)
|
|
rtk gh issue list # Compact issue list (80%)
|
|
rtk gh api # Compact API responses (26%)
|
|
```
|
|
|
|
### JavaScript/TypeScript Tooling (70-90% savings)
|
|
```bash
|
|
rtk pnpm list # Compact dependency tree (70%)
|
|
rtk pnpm outdated # Compact outdated packages (80%)
|
|
rtk pnpm install # Compact install output (90%)
|
|
rtk npm run <script> # Compact npm script output
|
|
rtk npx <cmd> # Compact npx command output
|
|
rtk prisma # Prisma without ASCII art (88%)
|
|
```
|
|
|
|
### Files & Search (60-75% savings)
|
|
```bash
|
|
rtk ls <path> # Tree format, compact (65%)
|
|
rtk read <file> # Code reading with filtering (60%)
|
|
rtk grep <pattern> # Search grouped by file (75%)
|
|
rtk find <pattern> # Find grouped by directory (70%)
|
|
```
|
|
|
|
### Analysis & Debug (70-90% savings)
|
|
```bash
|
|
rtk err <cmd> # Filter errors only from any command
|
|
rtk log <file> # Deduplicated logs with counts
|
|
rtk json <file> # JSON structure without values
|
|
rtk deps # Dependency overview
|
|
rtk env # Environment variables compact
|
|
rtk summary <cmd> # Smart summary of command output
|
|
rtk diff # Ultra-compact diffs
|
|
```
|
|
|
|
### Infrastructure (85% savings)
|
|
```bash
|
|
rtk docker ps # Compact container list
|
|
rtk docker images # Compact image list
|
|
rtk docker logs <c> # Deduplicated logs
|
|
rtk kubectl get # Compact resource list
|
|
rtk kubectl logs # Deduplicated pod logs
|
|
```
|
|
|
|
### Network (65-70% savings)
|
|
```bash
|
|
rtk curl <url> # Compact HTTP responses (70%)
|
|
rtk wget <url> # Compact download output (65%)
|
|
```
|
|
|
|
### Meta Commands
|
|
```bash
|
|
rtk gain # View token savings statistics
|
|
rtk gain --history # View command history with savings
|
|
rtk discover # Analyze Codex sessions for missed RTK usage
|
|
rtk proxy <cmd> # Run command without filtering (for debugging)
|
|
rtk init # Add RTK instructions to AGENTS.md
|
|
rtk init --global # Add RTK to ~/.Codex/AGENTS.md
|
|
```
|
|
|
|
## Token Savings Overview
|
|
|
|
| Category | Commands | Typical Savings |
|
|
|----------|----------|-----------------|
|
|
| Tests | vitest, playwright, cargo test | 90-99% |
|
|
| Build | next, tsc, lint, prettier | 70-87% |
|
|
| Git | status, log, diff, add, commit | 59-80% |
|
|
| GitHub | gh pr, gh run, gh issue | 26-87% |
|
|
| Package Managers | pnpm, npm, npx | 70-90% |
|
|
| Files | ls, read, grep, find | 60-75% |
|
|
| Infrastructure | docker, kubectl | 85% |
|
|
| Network | curl, wget | 65-70% |
|
|
|
|
Overall average: **60-90% token reduction** on common development operations.
|
|
<!-- /rtk-instructions -->
|