diligence

scot/diligence

Fork 0

Commit graph

Author	SHA1	Message	Date
Claude	0ce1463de8	Fix setup.ps1: correct execution order and add API_TOKEN generation Bug: API_TOKEN replacement ran before .env existed, and before the existence check. On a clean clone the script errored immediately. Fixed flow: banner → existence check → generate SECRET_KEY → generate API_TOKEN → copy .env.example → replace both keys. Also adds MCP connection info to output (matching setup.sh).	2026-06-26 23:37:11 +00:00
Claude	6e082ce58f	Stream D: Security hardening — 10 fixes from QA review - SEC-05: Fail fast if SECRET_KEY is default 'change-me-in-production' - SEC-06: CORS allow_credentials=False (Bearer tokens don't need it) - SEC-08: Input validation on auth schemas (min/max length, username pattern) - SEC-10: .dockerignore files (root, backend, mcp-connector) - SEC-11: Hardcode ALGORITHM='HS256' as constant, remove from settings - CQ-01: Gate crawl scheduler on CRAWL_ENABLED env var (default false) - OS-02: CONTRIBUTING.md - OS-03: CHANGELOG.md with v1.0.0 entry - setup.ps1: Add API_TOKEN generation (Windows parity with setup.sh)	2026-06-21 23:13:53 +00:00
Claude	dfc5ab3c9d	Add Windows setup (setup.ps1), expand README with cross-platform install, Claude Desktop example, backup/restore, architecture diagram, .dockerignore	2026-06-16 03:25:03 +00:00

Author

SHA1

Message

Date

Claude

0ce1463de8

Fix setup.ps1: correct execution order and add API_TOKEN generation

Bug: API_TOKEN replacement ran before .env existed, and before the
existence check. On a clean clone the script errored immediately.

Fixed flow: banner → existence check → generate SECRET_KEY →
generate API_TOKEN → copy .env.example → replace both keys.

Also adds MCP connection info to output (matching setup.sh).

2026-06-26 23:37:11 +00:00

Claude

6e082ce58f

Stream D: Security hardening — 10 fixes from QA review

- SEC-05: Fail fast if SECRET_KEY is default 'change-me-in-production'
- SEC-06: CORS allow_credentials=False (Bearer tokens don't need it)
- SEC-08: Input validation on auth schemas (min/max length, username pattern)
- SEC-10: .dockerignore files (root, backend, mcp-connector)
- SEC-11: Hardcode ALGORITHM='HS256' as constant, remove from settings
- CQ-01: Gate crawl scheduler on CRAWL_ENABLED env var (default false)
- OS-02: CONTRIBUTING.md
- OS-03: CHANGELOG.md with v1.0.0 entry
- setup.ps1: Add API_TOKEN generation (Windows parity with setup.sh)

2026-06-21 23:13:53 +00:00

Claude

dfc5ab3c9d

Add Windows setup (setup.ps1), expand README with cross-platform install, Claude Desktop example, backup/restore, architecture diagram, .dockerignore

2026-06-16 03:25:03 +00:00

3 commits