16 Commits

Author SHA1 Message Date
Daniel O'Connell
53f97485c2 Calendar view 2026-01-01 21:45:06 +01:00
Daniel O'Connell
849f03877a google docs + frontend 2025-12-29 15:01:45 +01:00
Daniel O'Connell
a238ca6329 Add proactive check-in functionality for Discord
- Add proactive_cron, proactive_prompt, last_proactive_at fields to Discord models
- Add /proactive command handler for configuring check-in schedules
- Add evaluate_proactive_checkins task (runs every minute via celery beat)
- Add execute_proactive_checkin task that evaluates interest and sends messages
- Smart bot selection finds the correct bot for each server
- Channel selection defaults to "general" text channel for servers
- Add database migration for new fields
- Add comprehensive tests for commands and tasks

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2025-12-25 09:21:30 +01:00
Daniel O'Connell
48c380b903 migrate to fastmcp 2025-12-24 23:19:41 +01:00
d9fcfe3878 more search improvements 2025-12-21 12:29:44 +00:00
d644281b26 Fix 5 security and quality bugs
BUG-030: Add rate limiting via slowapi middleware
- Added slowapi to requirements
- Configurable limits: 100/min default, 30/min search, 10/min auth
- Rate limit settings in settings.py

BUG-028: Fix filter validation in embeddings.py
- Unknown filter keys now logged and ignored instead of passed through
- Prevents potential filter injection

BUG-034: Fix timezone handling in oauth_provider.py
- Now uses timezone-aware UTC comparison for refresh tokens

BUG-050: Fix SQL injection in test database handling
- Added validate_db_identifier() function
- Validates database names contain only safe characters

Also:
- Updated tests for bcrypt password format
- Updated test for filter validation behavior
- Updated INVESTIGATION.md with fix status

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2025-12-19 21:41:16 +00:00
1c43f1ae62 Fix 7 critical security and code quality bugs (BUG-061 to BUG-068)
Security Fixes:
- BUG-061: Replace insecure SHA-256 password hashing with bcrypt
- BUG-065: Add constant-time comparison for password verification
- BUG-062: Remove full OAuth token logging
- BUG-064: Remove shell=True from subprocess calls

Code Quality:
- BUG-063: Update 24+ deprecated SQLAlchemy .get() calls

Infrastructure:
- BUG-067: Add resource limits to Docker services
- BUG-068: Enable Redis persistence (AOF)

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>
2025-12-19 20:22:46 +00:00
e95a082147 allow discord tools 2025-11-02 00:50:12 +00:00
a5bc53326d backups 2025-11-02 00:01:35 +00:00
Daniel O'Connell
bcb470db9b use redis for celery backend 2025-11-01 15:55:59 +01:00
Daniel O'Connell
e68671deb4 handle openai 2025-10-13 11:59:23 +02:00
Daniel O'Connell
99d3843f47 move to general LLM providers 2025-10-13 03:23:20 +02:00
Daniel O'Connell
08d17c28dd run discord collector 2025-10-12 23:43:44 +02:00
Daniel O'Connell
e086b4a3a6 add Discord ingester 2025-10-12 23:13:30 +02:00
Daniel O'Connell
6b48a768b9 better file retrieval 2025-06-27 03:38:55 +02:00
Daniel O'Connell
f2c24cca3b packageable + proxy 2025-06-03 18:48:45 +02:00