Block a user
Security: remove hardcoded database credentials from docker-compose.yml
Verified complete: docker-compose.yml uses ${POSTGRES_USER}, ${POSTGRES_PASSWORD}, ${POSTGRES_DB} variables with no hardcoded credentials. .env is in .gitignore. .env.example has…
Security: remove hardcoded database credentials from docker-compose.yml
Security: make CORS allowed origins configurable via environment variable
chore: verify in-memory cache implementation — 30s TTL, RWMutex, write invalidation
Triage: Code Review Complete - Verified
Reviewed internal/gitea/client.go against all acceptance criteria:
sync.RWMutex
- Line 23:
mu sync.RWMutexfield on Client struct - `getFromCach…
Security: refuse to start with default JWT secret in non-dev environments
Security: make CORS allowed origins configurable via environment variable
Verified complete: config.py reads CORS_ORIGINS env var (comma-separated), falls back to localhost origins. api.py uses config.cors_origins in CORS middleware. Documented in `docker-compose…
Security: refuse to start with default JWT secret in non-dev environments
Verified complete: check_jwt_secret() in auth.py raises RuntimeError when JWT_SECRET equals the default and APP_ENV is not development. Tests exist in tests/test_security.py. Closing…
feat: implement POST /pulls/{owner}/{repo}/{index}/review — approve, request-changes, and comment actions
feat: wire HTMX infinite scroll sentinel for issues and pulls list views
feat: implement POST /pulls/{owner}/{repo}/{index}/review — approve, request-changes, and comment actions
Triage: Already Implemented
Code review shows this feature is already fully wired:
- Client method (
internal/gitea/client.golines 831-851):SubmitReview()exists, accepts owner,…
feat: wire HTMX infinite scroll sentinel for issues and pulls list views
Triage: Already Implemented
Code review shows this feature is already fully implemented:
- Issues template (
internal/templates/issues.htmlline 17): Hasscroll-sentineldiv with…
chore: verify in-memory cache implementation — 30s TTL, RWMutex, write invalidation
feat: wire HTMX infinite scroll sentinel for issues and pulls list views
feat: display assignee avatar in issue list rows
feat: add review status icon and merge status indicator to PR list rows
feat: implement POST /pulls/{owner}/{repo}/{index}/review — approve, request-changes, and comment actions
Feature: multi-model support allowing users to choose LLM provider per analysis
Feature: auto-generate TypeScript API client from FastAPI OpenAPI spec
Feature: cursor-based pagination for /analyze/batch and /jobs endpoints
Feature: patent trend charts showing filing frequency and category distribution over time