Squashed commit of the following:
commit dbe3eae405
Author: Lawrence Hook <lawrencehook@gmail.com>
Date: Mon Mar 2 00:13:35 2026 -0500
Add Stripe checkout hint to upgrade modal
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
commit b433727754
Author: Lawrence Hook <lawrencehook@gmail.com>
Date: Sun Mar 1 23:48:01 2026 -0500
Add email validation, IP rate limiting, and fix SES parsing bug
Add SES email validation with 2s timeout and fail-open behavior to
send-magic-link. Add per-IP rate limiting with decrement on verify.
Fix SES response parsing path (MailboxValidation.IsValid.ConfidenceVerdict).
Add dedicated unit tests for validateEmail.
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
commit 84b103e46b
Author: Lawrence Hook <lawrencehook@gmail.com>
Date: Sun Mar 1 23:47:51 2026 -0500
Migrate storage layer from flat files to SQLite
Replace file-per-record auth requests, file-per-hash rate limits, and
JSON blob subscription cache with a single SQLite database via
better-sqlite3. Consolidate duplicated email/IP rate limit code into
shared helpers. Add missing IP rate limit pruning to cleanup interval.
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
commit 84c2ea5586
Author: Lawrence Hook <lawrencehook@gmail.com>
Date: Sun Mar 1 21:58:47 2026 -0500
update versions
commit a4d5a97664
Merge: 53a18e72fe77fa
Author: Lawrence Hook <lawrencehook@gmail.com>
Date: Sun Mar 1 21:58:09 2026 -0500
Merge branch 'released'
commit 53a18e7987
Author: Lawrence Hook <lawrencehook@gmail.com>
Date: Sun Mar 1 16:56:50 2026 -0500
Hide donate link for premium users instead of showing dead label
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
commit e2732dee6f
Author: Lawrence Hook <lawrencehook@gmail.com>
Date: Sun Mar 1 16:50:33 2026 -0500
Fix fast-xml-parser vulnerability via npm override and update @aws-sdk/client-ses
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
commit 281c0f1103
Author: Lawrence Hook <lawrencehook@gmail.com>
Date: Sun Mar 1 16:46:31 2026 -0500
Add "Active" sidebar tab and soften selected sidebar styling
Adds "all" and "active" tabs at the top of the sidebar. "Active" shows
all currently-enabled options in one place; "all" explicitly resets to
the default view. Also lightens the sidebar selected state from solid
black to a subtle tint.
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
commit 56b119ed98
Author: Lawrence Hook <lawrencehook@gmail.com>
Date: Sun Feb 22 05:01:00 2026 -0500
Cache grandfathered emails in memory at startup
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
commit afed16a38a
Author: Lawrence Hook <lawrencehook@gmail.com>
Date: Sun Feb 22 04:47:51 2026 -0500
Add tests for cache TTL and webhook ordering race condition
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
commit 361a8caf84
Author: Lawrence Hook <lawrencehook@gmail.com>
Date: Sun Feb 22 04:34:00 2026 -0500
Harden license cache: 10s TTL and skip incomplete subscription.created
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
commit d857ae8c26
Author: Lawrence Hook <lawrencehook@gmail.com>
Date: Sat Feb 21 18:24:33 2026 -0500
Update README: replace donations blurb with premium link
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
commit c473314ca5
Author: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Date: Sat Feb 21 18:22:39 2026 -0500
Bump fast-xml-parser and @aws-sdk/xml-builder in /server (#201)
Bumps [fast-xml-parser](https://github.com/NaturalIntelligence/fast-xml-parser) and [@aws-sdk/xml-builder](https://github.com/aws/aws-sdk-js-v3/tree/HEAD/packages-internal/xml-builder). These dependencies needed to be updated together.
Updates `fast-xml-parser` from 5.3.4 to 5.3.6
- [Release notes](https://github.com/NaturalIntelligence/fast-xml-parser/releases)
- [Changelog](https://github.com/NaturalIntelligence/fast-xml-parser/blob/master/CHANGELOG.md)
- [Commits](https://github.com/NaturalIntelligence/fast-xml-parser/compare/v5.3.4...v5.3.6)
Updates `@aws-sdk/xml-builder` from 3.972.4 to 3.972.5
- [Release notes](https://github.com/aws/aws-sdk-js-v3/releases)
- [Changelog](https://github.com/aws/aws-sdk-js-v3/blob/main/packages-internal/xml-builder/CHANGELOG.md)
- [Commits](https://github.com/aws/aws-sdk-js-v3/commits/HEAD/packages-internal/xml-builder)
---
updated-dependencies:
- dependency-name: fast-xml-parser
dependency-version: 5.3.6
dependency-type: indirect
- dependency-name: "@aws-sdk/xml-builder"
dependency-version: 3.972.5
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
commit 49e1a5d9ba
Author: Lawrence Hook <lawrencehook@gmail.com>
Date: Sat Feb 21 17:30:29 2026 -0500
Fix license cache not updating after checkout
The checkout.session.completed webhook only sent a welcome email but
did not update the subscription cache, so users kept getting cached
free status after paying.
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
commit c5734518c4
Author: Lawrence Hook <lawrencehook@gmail.com>
Date: Sun Feb 15 19:10:05 2026 -0500
Remove TESTING.md and DEPLOYMENT.md
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
commit 6ed3ad0291
Author: Lawrence Hook <lawrencehook@gmail.com>
Date: Sun Feb 15 19:08:03 2026 -0500
Remove obsolete docs and update TODO for YouTube DOM change
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
commit 83693504e3
Author: Lawrence Hook <lawrencehook@gmail.com>
Date: Sun Feb 15 18:54:29 2026 -0500
update versions
commit 27a6ae6f18
Merge: 3f4b42bd6e642b
Author: Lawrence Hook <lawrencehook@gmail.com>
Date: Sun Feb 15 18:53:37 2026 -0500
Merge branch 'released'
commit 3f4b42b2de
Author: Lawrence Hook <lawrencehook@gmail.com>
Date: Sun Feb 15 18:49:28 2026 -0500
Update qs to 6.14.2 to fix low-severity DoS vulnerability
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
commit 8825666512
Author: Lawrence Hook <lawrencehook@gmail.com>
Date: Sun Feb 15 18:45:37 2026 -0500
Merge the monetization feature branch.
Add RYS Premium subscription system
Introduce optional paid tier with sign-in, Stripe billing, and premium
feature gating. Core features remain free. Includes Node.js server for
auth, payments, and license management.
Extension changes:
- Sign-in flow with magic link email
- Premium/upgrade/account modals with branded UI
- Premium feature gating (60+ advanced settings)
- Password lock and scheduling (premium)
- Fix "hide all but first row" for YouTube's new flat homepage DOM
- Hide sidebar ad panels by default
- Enable "Hide all Shorts" by default
Server:
- Magic link auth with rate limiting
- Stripe checkout, webhooks, and billing portal
- JWT-based license tokens
- AWS SES transactional emails (welcome, sign-in, cancellation)
- Grandfathered donor support
Also adds CI workflow, server test suite, and extension unit tests.
commit a76f69804b
Author: Lawrence Hook <lawrencehook@gmail.com>
Date: Sun Feb 8 20:45:35 2026 -0500
update description in README
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
commit b5d1384ca8
Author: Lawrence Hook <lawrencehook@gmail.com>
Date: Sun Feb 8 20:44:26 2026 -0500
update "Why I made it" section in README
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
commit 18b64708b6
Author: Lawrence Hook <lawrencehook@gmail.com>
Date: Sun Feb 8 20:14:23 2026 -0500
update version to 4.3.71
Squashed commit of the following:
commit 53a18e7987
Author: Lawrence Hook <lawrencehook@gmail.com>
Date: Sun Mar 1 16:56:50 2026 -0500
Hide donate link for premium users instead of showing dead label
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
commit e2732dee6f
Author: Lawrence Hook <lawrencehook@gmail.com>
Date: Sun Mar 1 16:50:33 2026 -0500
Fix fast-xml-parser vulnerability via npm override and update @aws-sdk/client-ses
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
commit 281c0f1103
Author: Lawrence Hook <lawrencehook@gmail.com>
Date: Sun Mar 1 16:46:31 2026 -0500
Add "Active" sidebar tab and soften selected sidebar styling
Adds "all" and "active" tabs at the top of the sidebar. "Active" shows
all currently-enabled options in one place; "all" explicitly resets to
the default view. Also lightens the sidebar selected state from solid
black to a subtle tint.
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
commit 56b119ed98
Author: Lawrence Hook <lawrencehook@gmail.com>
Date: Sun Feb 22 05:01:00 2026 -0500
Cache grandfathered emails in memory at startup
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
commit afed16a38a
Author: Lawrence Hook <lawrencehook@gmail.com>
Date: Sun Feb 22 04:47:51 2026 -0500
Add tests for cache TTL and webhook ordering race condition
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
commit 361a8caf84
Author: Lawrence Hook <lawrencehook@gmail.com>
Date: Sun Feb 22 04:34:00 2026 -0500
Harden license cache: 10s TTL and skip incomplete subscription.created
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
commit d857ae8c26
Author: Lawrence Hook <lawrencehook@gmail.com>
Date: Sat Feb 21 18:24:33 2026 -0500
Update README: replace donations blurb with premium link
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
commit c473314ca5
Author: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Date: Sat Feb 21 18:22:39 2026 -0500
Bump fast-xml-parser and @aws-sdk/xml-builder in /server (#201)
Bumps [fast-xml-parser](https://github.com/NaturalIntelligence/fast-xml-parser) and [@aws-sdk/xml-builder](https://github.com/aws/aws-sdk-js-v3/tree/HEAD/packages-internal/xml-builder). These dependencies needed to be updated together.
Updates `fast-xml-parser` from 5.3.4 to 5.3.6
- [Release notes](https://github.com/NaturalIntelligence/fast-xml-parser/releases)
- [Changelog](https://github.com/NaturalIntelligence/fast-xml-parser/blob/master/CHANGELOG.md)
- [Commits](https://github.com/NaturalIntelligence/fast-xml-parser/compare/v5.3.4...v5.3.6)
Updates `@aws-sdk/xml-builder` from 3.972.4 to 3.972.5
- [Release notes](https://github.com/aws/aws-sdk-js-v3/releases)
- [Changelog](https://github.com/aws/aws-sdk-js-v3/blob/main/packages-internal/xml-builder/CHANGELOG.md)
- [Commits](https://github.com/aws/aws-sdk-js-v3/commits/HEAD/packages-internal/xml-builder)
---
updated-dependencies:
- dependency-name: fast-xml-parser
dependency-version: 5.3.6
dependency-type: indirect
- dependency-name: "@aws-sdk/xml-builder"
dependency-version: 3.972.5
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
commit 49e1a5d9ba
Author: Lawrence Hook <lawrencehook@gmail.com>
Date: Sat Feb 21 17:30:29 2026 -0500
Fix license cache not updating after checkout
The checkout.session.completed webhook only sent a welcome email but
did not update the subscription cache, so users kept getting cached
free status after paying.
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
commit c5734518c4
Author: Lawrence Hook <lawrencehook@gmail.com>
Date: Sun Feb 15 19:10:05 2026 -0500
Remove TESTING.md and DEPLOYMENT.md
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
commit 6ed3ad0291
Author: Lawrence Hook <lawrencehook@gmail.com>
Date: Sun Feb 15 19:08:03 2026 -0500
Remove obsolete docs and update TODO for YouTube DOM change
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
commit 83693504e3
Author: Lawrence Hook <lawrencehook@gmail.com>
Date: Sun Feb 15 18:54:29 2026 -0500
update versions
commit 27a6ae6f18
Merge: 3f4b42bd6e642b
Author: Lawrence Hook <lawrencehook@gmail.com>
Date: Sun Feb 15 18:53:37 2026 -0500
Merge branch 'released'
commit 3f4b42b2de
Author: Lawrence Hook <lawrencehook@gmail.com>
Date: Sun Feb 15 18:49:28 2026 -0500
Update qs to 6.14.2 to fix low-severity DoS vulnerability
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
commit 8825666512
Author: Lawrence Hook <lawrencehook@gmail.com>
Date: Sun Feb 15 18:45:37 2026 -0500
Merge the monetization feature branch.
Add RYS Premium subscription system
Introduce optional paid tier with sign-in, Stripe billing, and premium
feature gating. Core features remain free. Includes Node.js server for
auth, payments, and license management.
Extension changes:
- Sign-in flow with magic link email
- Premium/upgrade/account modals with branded UI
- Premium feature gating (60+ advanced settings)
- Password lock and scheduling (premium)
- Fix "hide all but first row" for YouTube's new flat homepage DOM
- Hide sidebar ad panels by default
- Enable "Hide all Shorts" by default
Server:
- Magic link auth with rate limiting
- Stripe checkout, webhooks, and billing portal
- JWT-based license tokens
- AWS SES transactional emails (welcome, sign-in, cancellation)
- Grandfathered donor support
Also adds CI workflow, server test suite, and extension unit tests.
commit a76f69804b
Author: Lawrence Hook <lawrencehook@gmail.com>
Date: Sun Feb 8 20:45:35 2026 -0500
update description in README
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
commit b5d1384ca8
Author: Lawrence Hook <lawrencehook@gmail.com>
Date: Sun Feb 8 20:44:26 2026 -0500
update "Why I made it" section in README
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
commit 18b64708b6
Author: Lawrence Hook <lawrencehook@gmail.com>
Date: Sun Feb 8 20:14:23 2026 -0500
update version to 4.3.71
Lawrence Hook