Block a user
Remove duplicate
sheets.open_by_key() call in get_full_roster_from_sheets
Rotate credentials committed in .env
Add
aiohttp.ClientError handling to all API call functions
Use constant-time comparison for bearer token validation
Remove plaintext bearer token from warning logs
Remove hardcoded
master_debug = True flag from api_calls.py
Resolve or document the pitcher OPS aggregation formula
Fix potential
NameError on db_game when db_post fails in complete_game
Guard
GUILD_ID env var cast against missing/invalid value
Replace bare
except: clauses with typed exception handling in gameplay_queries.py
Remove
db.close() from handle_db_errors error handler
Implement paperdex dupe-detection logic
Push
limit/offset to the database in PlayerService.get_players
Standardize home-run detection to use
_on_final fields only
Add
get_away_team and get_home_team methods to StratGame dataclass
Validate
sort_by parameter against allowed field names in views.py
Remove token value from log messages in legacy router files
Implement reserve vs. replacement card tracking in pack distribution