ai_synth

Commit Graph

Author	SHA1	Message	Date
oabrivard	54d54f2a06	fix: architect assessment remediation — 6 issues across backend, frontend, and infra - Wire hardened scraper client into runtime (SSRF redirect validation was defined but unused) - Stream scraper body with per-chunk size limit instead of post-download check (DoS/OOM) - Persist user rate-limit overrides across generation jobs via AppState DashMap - Roll back magic-link token on email send failure to prevent quota exhaustion - Fix API error UX: prefer human message over machine error code in frontend - Unwrap GET /syntheses { items } wrapper in frontend API layer (contract mismatch) - Bind Postgres to localhost in docker-compose (was exposed on all interfaces) - Fix CLAUDE.md: runtime queries not compile-time, 10 migrations not 9 Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	3 months ago
oabrivard	6f3ff1e9a2	docs: add JSDoc to all frontend API modules, pages, components, utilities Add English JSDoc documentation to 32 source files across the frontend: - API layer (8 files): client CSRF strategy, credential handling, 401 redirect, and endpoint-level docs for auth, settings, sources, syntheses, admin, config, apiKeys - Pages (11 files): Settings export/import, GenerateSynthesis SSE state machine, Home delete confirmation timer, Sources bulk import parsing, SynthesisDetail email/export flows, Login/Register Turnstile lifecycle, AuthVerify token flow, admin Providers/RateLimits/Users - Components (8 files): ApiKeyManager CRUD, Turnstile polling init, Navbar/MobileMenu route detection, Layout/AdminLayout structure, ErrorBoundary retry, Button variants, Toast auto-dismiss timer, LoadingSpinner props - Utilities (2 files): SSE reconnection backoff, dates locale config - Context (1 file): AuthContext session check, isAdmin derived signal No logic changes. TypeScript and vitest pass unchanged. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	3 months ago
oabrivard	355dbf6a5a	Finished phase 1	3 months ago

Author

SHA1

Message

Date

oabrivard

54d54f2a06

fix: architect assessment remediation — 6 issues across backend, frontend, and infra

- Wire hardened scraper client into runtime (SSRF redirect validation was defined but unused)
- Stream scraper body with per-chunk size limit instead of post-download check (DoS/OOM)
- Persist user rate-limit overrides across generation jobs via AppState DashMap
- Roll back magic-link token on email send failure to prevent quota exhaustion
- Fix API error UX: prefer human message over machine error code in frontend
- Unwrap GET /syntheses { items } wrapper in frontend API layer (contract mismatch)
- Bind Postgres to localhost in docker-compose (was exposed on all interfaces)
- Fix CLAUDE.md: runtime queries not compile-time, 10 migrations not 9

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

oabrivard

6f3ff1e9a2

docs: add JSDoc to all frontend API modules, pages, components, utilities

Add English JSDoc documentation to 32 source files across the frontend:
- API layer (8 files): client CSRF strategy, credential handling, 401 redirect,
  and endpoint-level docs for auth, settings, sources, syntheses, admin, config, apiKeys
- Pages (11 files): Settings export/import, GenerateSynthesis SSE state machine,
  Home delete confirmation timer, Sources bulk import parsing, SynthesisDetail
  email/export flows, Login/Register Turnstile lifecycle, AuthVerify token flow,
  admin Providers/RateLimits/Users
- Components (8 files): ApiKeyManager CRUD, Turnstile polling init, Navbar/MobileMenu
  route detection, Layout/AdminLayout structure, ErrorBoundary retry, Button variants,
  Toast auto-dismiss timer, LoadingSpinner props
- Utilities (2 files): SSE reconnection backoff, dates locale config
- Context (1 file): AuthContext session check, isAdmin derived signal

No logic changes. TypeScript and vitest pass unchanged.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

oabrivard

355dbf6a5a

Finished phase 1

3 Commits (54d54f2a06dbd0fafb6dc95375115a4da2c2647f)