[1e1]

…I and tooling

Backend:

• add missing typing imports in core.py (import-time NameError)
• fix undefined variables in get_cache (crash on disk-mode startup)
• guard None thumbnails/title/url in RSS generation; escape feed link
• fix undefined 'redirect' variable in enclosure URL
• add per-entry cache TTL; short TTL for signed video URLs
• validate video_id before building YouTube URLs
• make CORS origins configurable; restrict methods to GET
• drop dead imports and unused dependencies

Module layout:

• extract settings.py and cache.py so the import graph is acyclic (settings <- cache <- api <- main); routers no longer import main, making startup order-independent

Video proxy:

• parametrable size cap via YT2RSS_MAX_VIDEO_BYTES (early 413 on known size, streaming byte-count backstop, yt-dlp max_filesize on fallback)

Extension:

• make background/content/options scripts work on Firefox (MV2) and Chrome (MV3)
• switch content messaging to sendResponse pattern for cross-browser support
• escape RSS URL injected into the toast
• remove reference to missing toast.css
• single parametric build.sh producing correct MV2 and MV3 packages

Infra:

• slim multi-stage Dockerfile, drop non-reproducible network warmup
• wire memcached in compose, align volume with _DATA, add env docs

Quality gates:

• pytest suite (49 tests): cache, helpers, routes, size cap, streaming branch (truncation + content-length), and an import-order regression guard
• ruff lint + format config, applied across the codebase
• CI: ruff, pytest on Python 3.10/3.12, Docker build with /healthz smoke test
• Release workflow: build and push versioned image to GHCR on tags