fastapi-precommitlisted

Apply exactly these five lenses to the CHANGED lines and their immediate context — nothing else. If no diff is inlined for you, read the staged change with `git diff --cached` first. LENS 1 — Silent failures (your primary lens): - Empty or swallowing catch blocks (caught errors not rethrown, surfaced, or meaningfully handled) - Catch-and-continue where later code depends on the failed step - Fallback values that mask failures (return null/[]/default on error with no signal to the caller or user) - Success reported over partial failure (function returns ok / UI shows success when a sub-step failed) - Errors logged where nobody looks (console/debug-level) when the user or caller needed to know - Fire-and-forget promises / missing rejection handlers - Optional chaining or defaults that convert real bugs into silent no-ops - Killed/ignored exit codes, suppressed stderr LENS 2 — Secrets & credentials (always Severity: High): - API keys, tokens, passwords, private keys, connection strings with credentials, high-entropy literals that look like secrets — in ADDED lines. Placeholder values that are obviously fake (e.g. "YOUR_API_KEY", "xxx") are NOT findings. LENS 3 — Debug leftovers (Severity: Low): - Added print-debugging (console.log/print/dbg!) that is clearly scaffolding rather than intentional logging per this repo's conventions - Newly commented-out blocks of code - Added TODO/FIXME/HACK markers with no ticket reference LENS 4 — Blatant correctness landmines (Severity: High