giles 41f4772ba7 Strip legacy CSS from SX app: no Prism, Ghost, FontAwesome extras ...

Add css_extras parameter to create_base_app. Legacy apps (blog, market
etc) get the default extras (basics.css, cards.css, blog-content.css,
prism.css, FontAwesome). SX app passes css_extras=[] — it uses CSSX
for styling and custom highlighting, not Prism/FA/Ghost.

Reduces <style id="sx-css"> from ~100KB+ of irrelevant CSS to ~5KB
of Tailwind resets + only the utility rules the page actually uses.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

2026-03-14 16:17:27 +00:00

..

__init__.py

Monorepo: consolidate 7 repos into one

2026-02-24 19:44:17 +00:00

actions.py

Security audit: fix IDOR, add rate limiting, HMAC auth, token hashing, XSS sanitization

2026-02-26 13:30:27 +00:00

activitypub.py

Replace sx_call() with render_to_sx() across all services

2026-03-04 00:08:33 +00:00

ap_inbox_handlers.py

Security audit: fix IDOR, add rate limiting, HMAC auth, token hashing, XSS sanitization

2026-02-26 13:30:27 +00:00

ap_social_sx.py

Replace sx_call() with render_to_sx() across all services

2026-03-04 00:08:33 +00:00

ap_social.py

Replace sx_call() with render_to_sx() across all services

2026-03-04 00:08:33 +00:00

auth_redis.py

Split databases and Redis — prepare infrastructure for per-domain isolation

2026-02-25 02:20:34 +00:00

cart_identity.py

Monorepo: consolidate 7 repos into one

2026-02-24 19:44:17 +00:00

context.py

Rebrand sexp → sx across web platform (173 files)

2026-03-01 11:06:57 +00:00

data_client.py

Security audit: fix IDOR, add rate limiting, HMAC auth, token hashing, XSS sanitization

2026-02-26 13:30:27 +00:00

factory.py

Strip legacy CSS from SX app: no Prism, Ghost, FontAwesome extras

2026-03-14 16:17:27 +00:00

fragments.py

Rebrand sexp → sx across web platform (173 files)

2026-03-01 11:06:57 +00:00

ghost_admin_token.py

Decouple cross-domain DB queries for per-app database split

2026-02-25 11:32:14 +00:00

http_utils.py

Send all responses as sexp wire format with client-side rendering

2026-03-01 09:45:07 +00:00

internal_auth.py

Security audit: fix IDOR, add rate limiting, HMAC auth, token hashing, XSS sanitization

2026-02-26 13:30:27 +00:00

internal_inbox_client.py

Decouple cart/market DBs: denormalize product data, AP internal inbox, OAuth scraper auth

2026-02-26 14:49:04 +00:00

internal_inbox.py

Decouple cart/market DBs: denormalize product data, AP internal inbox, OAuth scraper auth

2026-02-26 14:49:04 +00:00

jinja_setup.py

Remove widget system — fully replaced by fragment composition

2026-02-25 01:20:58 +00:00

oauth.py

Fix cross-DB queries: move page_configs to cart, fix OAuth code_hash lookup

2026-02-26 17:43:21 +00:00

oembed.py

Add Phase 5: link-card fragments, oEmbed endpoints, OG meta

2026-02-24 21:44:11 +00:00

protocol_manifest.py

Replace inter-service _handlers dicts with declarative sx defquery/defaction

2026-03-04 08:13:50 +00:00

query_blueprint.py

Replace inter-service _handlers dicts with declarative sx defquery/defaction

2026-03-04 08:13:50 +00:00

rate_limit.py

Security audit: fix IDOR, add rate limiting, HMAC auth, token hashing, XSS sanitization

2026-02-26 13:30:27 +00:00

schema_blueprint.py

Replace inter-service _handlers dicts with declarative sx defquery/defaction

2026-03-04 08:13:50 +00:00

urls.py

Split cart into 4 microservices: relations, likes, orders, page-config→blog

2026-02-27 09:03:33 +00:00

user_loader.py

Split databases and Redis — prepare infrastructure for per-domain isolation

2026-02-25 02:20:34 +00:00