Fix Phantom audit findings (2026-07-05)#41

Merged

leesaenz merged 20 commits into

mainfrom

fix/audit-2026-07

Jul 6, 2026

Commits on Jul 6, 2026

fix(cli): parse pre-release version tags without crashing (P-11)

leesaenz
and
claude
committed
fix(cli): report failed uninstall removals and add uv timeout (P-15, P-16)

leesaenz
and
claude
committed
fix(cli): redact paths in error output and add update timeouts (P-17, P-16)

leesaenz
and
claude
committed
fix(dynamics): report None dynamic range for unmeasurably short audio (P-12)

leesaenz
and
claude
committed
perf(audio): memoize mono mixdown and full-signal RMS (P-03, P-04)

leesaenz
and
claude
committed
perf(analysis): compute true-peak once per file; share band-energy helper (P-02, P-06, P-09)

leesaenz
and
claude
committed
perf(server): route composite tools and analyze CLI through analysis cache (P-01)

leesaenz
and
claude
committed
perf(cache): memoize per-instance content hash; bench measures cold path (P-01 follow-up)

leesaenz
and
claude
committed
refactor: extract align_sample_rates helper (P-10b)

leesaenz
and
claude
committed
refactor: share sample-rate-mismatch injection between server and CLI (P-10)

leesaenz
and
claude
committed
refactor(cli): use one canonical startup-block stripper (P-10c)

leesaenz
and
claude
committed
chore(bench): add analyze_spectrum band-pass probe for P-05 gate (deferred)

leesaenz
and
claude
committed
refactor(comparison): drop unused key_name parameter (P-20)

leesaenz
and
claude
committed
fix: detect antiphase stereo DC and guard silent demucs input (P-13, P-14)

leesaenz
and
claude
committed
fix(cli): guard render self-overwrite and confine separate default dir (P-19, P-22)

leesaenz
and
claude
committed
fix(cli): filter doctor lua count, surface marketplace failure, narrow update catch (P-21, P-18)

leesaenz
and
claude
committed
perf: stream masking-matrix energies and avoid fix.py double-decode (P-07, P-08)

leesaenz
and
claude
committed
fix(cli): catch same-inode render self-overwrite; final review polish

leesaenz
and
claude
committed
test: make redaction fixtures policy-compliant and golden parity cross-platform (CI)

leesaenz
and
claude
committed
style(tests): use single import style per module in spy tests

leesaenz
and
claude
committed

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Fix Phantom audit findings (2026-07-05)#41

Fix Phantom audit findings (2026-07-05)#41
leesaenz merged 20 commits into
mainfrom
fix/audit-2026-07

Commits on Jul 6, 2026

fix(cli): parse pre-release version tags without crashing (P-11)

fix(cli): report failed uninstall removals and add uv timeout (P-15, P-16)

fix(cli): redact paths in error output and add update timeouts (P-17, P-16)

fix(dynamics): report None dynamic range for unmeasurably short audio (P-12)

perf(audio): memoize mono mixdown and full-signal RMS (P-03, P-04)

perf(analysis): compute true-peak once per file; share band-energy helper (P-02, P-06, P-09)

perf(server): route composite tools and analyze CLI through analysis cache (P-01)

perf(cache): memoize per-instance content hash; bench measures cold path (P-01 follow-up)

refactor: extract align_sample_rates helper (P-10b)

refactor: share sample-rate-mismatch injection between server and CLI (P-10)

refactor(cli): use one canonical startup-block stripper (P-10c)

chore(bench): add analyze_spectrum band-pass probe for P-05 gate (deferred)

refactor(comparison): drop unused key_name parameter (P-20)

fix: detect antiphase stereo DC and guard silent demucs input (P-13, P-14)

fix(cli): guard render self-overwrite and confine separate default dir (P-19, P-22)

fix(cli): filter doctor lua count, surface marketplace failure, narrow update catch (P-21, P-18)

perf: stream masking-matrix energies and avoid fix.py double-decode (P-07, P-08)

fix(cli): catch same-inode render self-overwrite; final review polish

test: make redaction fixtures policy-compliant and golden parity cross-platform (CI)

style(tests): use single import style per module in spy tests