Add SES email validation with 2s timeout and fail-open behavior to
send-magic-link. Add per-IP rate limiting with decrement on verify.
Fix SES response parsing path (MailboxValidation.IsValid.ConfidenceVerdict).
Add dedicated unit tests for validateEmail.
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
Replace file-per-record auth requests, file-per-hash rate limits, and
JSON blob subscription cache with a single SQLite database via
better-sqlite3. Consolidate duplicated email/IP rate limit code into
shared helpers. Add missing IP rate limit pruning to cleanup interval.
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
Squashed commit of the following:
commit 53a18e7987
Author: Lawrence Hook <lawrencehook@gmail.com>
Date: Sun Mar 1 16:56:50 2026 -0500
Hide donate link for premium users instead of showing dead label
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
commit e2732dee6f
Author: Lawrence Hook <lawrencehook@gmail.com>
Date: Sun Mar 1 16:50:33 2026 -0500
Fix fast-xml-parser vulnerability via npm override and update @aws-sdk/client-ses
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
commit 281c0f1103
Author: Lawrence Hook <lawrencehook@gmail.com>
Date: Sun Mar 1 16:46:31 2026 -0500
Add "Active" sidebar tab and soften selected sidebar styling
Adds "all" and "active" tabs at the top of the sidebar. "Active" shows
all currently-enabled options in one place; "all" explicitly resets to
the default view. Also lightens the sidebar selected state from solid
black to a subtle tint.
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
commit 56b119ed98
Author: Lawrence Hook <lawrencehook@gmail.com>
Date: Sun Feb 22 05:01:00 2026 -0500
Cache grandfathered emails in memory at startup
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
commit afed16a38a
Author: Lawrence Hook <lawrencehook@gmail.com>
Date: Sun Feb 22 04:47:51 2026 -0500
Add tests for cache TTL and webhook ordering race condition
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
commit 361a8caf84
Author: Lawrence Hook <lawrencehook@gmail.com>
Date: Sun Feb 22 04:34:00 2026 -0500
Harden license cache: 10s TTL and skip incomplete subscription.created
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
commit d857ae8c26
Author: Lawrence Hook <lawrencehook@gmail.com>
Date: Sat Feb 21 18:24:33 2026 -0500
Update README: replace donations blurb with premium link
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
commit c473314ca5
Author: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Date: Sat Feb 21 18:22:39 2026 -0500
Bump fast-xml-parser and @aws-sdk/xml-builder in /server (#201)
Bumps [fast-xml-parser](https://github.com/NaturalIntelligence/fast-xml-parser) and [@aws-sdk/xml-builder](https://github.com/aws/aws-sdk-js-v3/tree/HEAD/packages-internal/xml-builder). These dependencies needed to be updated together.
Updates `fast-xml-parser` from 5.3.4 to 5.3.6
- [Release notes](https://github.com/NaturalIntelligence/fast-xml-parser/releases)
- [Changelog](https://github.com/NaturalIntelligence/fast-xml-parser/blob/master/CHANGELOG.md)
- [Commits](https://github.com/NaturalIntelligence/fast-xml-parser/compare/v5.3.4...v5.3.6)
Updates `@aws-sdk/xml-builder` from 3.972.4 to 3.972.5
- [Release notes](https://github.com/aws/aws-sdk-js-v3/releases)
- [Changelog](https://github.com/aws/aws-sdk-js-v3/blob/main/packages-internal/xml-builder/CHANGELOG.md)
- [Commits](https://github.com/aws/aws-sdk-js-v3/commits/HEAD/packages-internal/xml-builder)
---
updated-dependencies:
- dependency-name: fast-xml-parser
dependency-version: 5.3.6
dependency-type: indirect
- dependency-name: "@aws-sdk/xml-builder"
dependency-version: 3.972.5
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
commit 49e1a5d9ba
Author: Lawrence Hook <lawrencehook@gmail.com>
Date: Sat Feb 21 17:30:29 2026 -0500
Fix license cache not updating after checkout
The checkout.session.completed webhook only sent a welcome email but
did not update the subscription cache, so users kept getting cached
free status after paying.
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
commit c5734518c4
Author: Lawrence Hook <lawrencehook@gmail.com>
Date: Sun Feb 15 19:10:05 2026 -0500
Remove TESTING.md and DEPLOYMENT.md
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
commit 6ed3ad0291
Author: Lawrence Hook <lawrencehook@gmail.com>
Date: Sun Feb 15 19:08:03 2026 -0500
Remove obsolete docs and update TODO for YouTube DOM change
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
commit 83693504e3
Author: Lawrence Hook <lawrencehook@gmail.com>
Date: Sun Feb 15 18:54:29 2026 -0500
update versions
commit 27a6ae6f18
Merge: 3f4b42bd6e642b
Author: Lawrence Hook <lawrencehook@gmail.com>
Date: Sun Feb 15 18:53:37 2026 -0500
Merge branch 'released'
commit 3f4b42b2de
Author: Lawrence Hook <lawrencehook@gmail.com>
Date: Sun Feb 15 18:49:28 2026 -0500
Update qs to 6.14.2 to fix low-severity DoS vulnerability
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
commit 8825666512
Author: Lawrence Hook <lawrencehook@gmail.com>
Date: Sun Feb 15 18:45:37 2026 -0500
Merge the monetization feature branch.
Add RYS Premium subscription system
Introduce optional paid tier with sign-in, Stripe billing, and premium
feature gating. Core features remain free. Includes Node.js server for
auth, payments, and license management.
Extension changes:
- Sign-in flow with magic link email
- Premium/upgrade/account modals with branded UI
- Premium feature gating (60+ advanced settings)
- Password lock and scheduling (premium)
- Fix "hide all but first row" for YouTube's new flat homepage DOM
- Hide sidebar ad panels by default
- Enable "Hide all Shorts" by default
Server:
- Magic link auth with rate limiting
- Stripe checkout, webhooks, and billing portal
- JWT-based license tokens
- AWS SES transactional emails (welcome, sign-in, cancellation)
- Grandfathered donor support
Also adds CI workflow, server test suite, and extension unit tests.
commit a76f69804b
Author: Lawrence Hook <lawrencehook@gmail.com>
Date: Sun Feb 8 20:45:35 2026 -0500
update description in README
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
commit b5d1384ca8
Author: Lawrence Hook <lawrencehook@gmail.com>
Date: Sun Feb 8 20:44:26 2026 -0500
update "Why I made it" section in README
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
commit 18b64708b6
Author: Lawrence Hook <lawrencehook@gmail.com>
Date: Sun Feb 8 20:14:23 2026 -0500
update version to 4.3.71
Adds "all" and "active" tabs at the top of the sidebar. "Active" shows
all currently-enabled options in one place; "all" explicitly resets to
the default view. Also lightens the sidebar selected state from solid
black to a subtle tint.
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
The checkout.session.completed webhook only sent a welcome email but
did not update the subscription cache, so users kept getting cached
free status after paying.
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
Add RYS Premium subscription system
Introduce optional paid tier with sign-in, Stripe billing, and premium
feature gating. Core features remain free. Includes Node.js server for
auth, payments, and license management.
Extension changes:
- Sign-in flow with magic link email
- Premium/upgrade/account modals with branded UI
- Premium feature gating (60+ advanced settings)
- Password lock and scheduling (premium)
- Fix "hide all but first row" for YouTube's new flat homepage DOM
- Hide sidebar ad panels by default
- Enable "Hide all Shorts" by default
Server:
- Magic link auth with rate limiting
- Stripe checkout, webhooks, and billing portal
- JWT-based license tokens
- AWS SES transactional emails (welcome, sign-in, cancellation)
- Grandfathered donor support
Also adds CI workflow, server test suite, and extension unit tests.
* fixed shrinking issue in channel tab
* fixed playlist video shirinking and overlapping in channel pages
* fixed post shirinking
* style: fix whitespace in shrink thumbnails CSS
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
---------
Co-authored-by: prinixoz <prinixoz@gmail.com>
Co-authored-by: Lawrence Hook <lawrencehook@gmail.com>
Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com>
* Added removing the bell in the title
* add comment on what it does
* Start of title
* style: fix spacing in if statement
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
---------
Co-authored-by: Lawrence Hook <lawrencehook@gmail.com>
Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com>
Options page:
- Pause timeLoop when popup is hidden (Page Visibility API)
- Use { once: true } for log prompt button listeners
- Remove stray console.log in settings import
Content script:
- Slow polling from 100ms to 500ms after page settles (was stuck at 100ms)
- Stop playlist autoplay interval once manager is found
- Only check dismiss buttons every 5th iteration
- Only check reveal boxes for first 30 iterations
- Only query clip button DOM if setting is enabled
- Skip subscriptions page queries if no sub-settings enabled
- Fix ad skip button selector for current YouTube UI
Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
- Add non-blocking bottom banner prompting users to enable logging
- Default log_enabled to false, track user response with log_prompt_answered
- Banner shows until user clicks Sure/No thanks, dismiss hides for session only
- Update settings menu icon from dots to gear
- Widen sidebar to prevent "Video Player" text wrapping
Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
- Add shared banner system (src/shared/banners.js) for extensible banner config
- Display RYS-branded announcement banner on YouTube homepage and options page
- Banner pushes down YouTube page content with CSS variable for height
- Revamp reveal suggestion boxes with polished two-row layout and RYS branding
- Add per-surface reveal settings (homepage/sidebar/end-of-video) with migration
- Consolidate colors and dimensions into CSS variables
- Cache reveal box config at module level for performance
Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
Lawrence Hook
dependabot[bot]
Sidhant
prinixoz
GeleArthur