hzhang 90b494f097 Merge security/critical-auth-fixes into main ...

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

2026-05-16 17:55:59 +01:00

..

__init__.py

refactor: split monolithic main.py into FastAPI routers (v0.2.0)

2026-02-23 15:14:46 +00:00

auth.py

Fix milestones 422 + acc-mgr user + reset-apikey endpoint

2026-03-22 05:39:03 +00:00

calendar.py

feat: add /calendar/sync endpoint for multi-agent schedule sync

2026-04-19 09:30:57 +00:00

comments.py

Merge fix/three-bugs-2026-03-22: accept task_code/milestone_code as identifiers, add /config/status endpoint

2026-03-22 10:56:34 +00:00

essentials.py

feat: switch backend indexing to code-first identifiers

2026-04-03 16:25:11 +00:00

meetings.py

feat: switch backend indexing to code-first identifiers

2026-04-03 16:25:11 +00:00

milestone_actions.py

feat: switch backend indexing to code-first identifiers

2026-04-03 16:25:11 +00:00

milestones.py

feat: switch backend indexing to code-first identifiers

2026-04-03 16:25:11 +00:00

misc.py

fix(security): close critical auth/SSRF/RBAC holes

2026-05-16 16:53:14 +01:00

monitor.py

feat: add discord wakeup test endpoint

2026-04-04 21:03:48 +00:00

projects.py

Apply fix: accept project_code as identifier in project endpoints

2026-03-22 10:57:51 +00:00

proposals.py

feat: switch backend indexing to code-first identifiers

2026-04-03 16:25:11 +00:00

proposes.py

feat: switch backend indexing to code-first identifiers

2026-04-03 16:25:11 +00:00

roles.py

feat(users): switch account management to single-role model

2026-03-21 08:44:19 +00:00

schedule_type.py

feat: schedule type system for work/entertainment periods

2026-04-21 09:20:51 +00:00

tasks.py

fix(security): close critical auth/SSRF/RBAC holes

2026-05-16 16:53:14 +01:00

users.py

fix: Essential model uses created_by_id not user_id

2026-04-16 23:17:32 +01:00

webhooks.py

fix(security): close critical auth/SSRF/RBAC holes

2026-05-16 16:53:14 +01:00