4 commits

Author	SHA1	Message	Date
Vadym Samoilenko	1b387daacf	Migrate task result delivery from WebSocket to HTTP polling ... Backend: - task_manager.py: add result/error/completed_at storage, TTL sweeper (5min), store_task_result() helper - tasks.py: add GET /<task_id> endpoint returning stored result; cancel route stores 'cancelled' status - __init__.py: start TTL sweeper on app startup - All 8 bg functions: store result before emitting lightweight WS hint (no payload data) Frontend: - src/lib/taskPolling.ts: waitForTaskResult() — polls GET /tasks/{id} every 2s, WS hint triggers immediate poll, 5min timeout - src/hooks/useTaskPolling.ts: drop-in replacement for useCancellableGeneration using polling - Migrate 6 Promise-based WS listeners → waitForTaskResult() in DiscussionPanel, FocusGroupSession (×2), PersonaProfile, PersonaModificationModal, useDiscussionGuideGeneration - Migrate 3 hook-based consumers → useTaskPolling in AIRecruiter, SyntheticUsers, BulkExportProgressModal Fixes WS Promise leak: polling survives disconnects, background tabs, page reloads. WS events retained as zero-payload hints for near-zero latency when connected. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>	2026-03-23 16:46:58 +00:00
Vadym Samoilenko	3e1865edbd	Apply Jintech security audit remediation (sprint 3) — 87/92 findings fixed ... - Fix missing await on FocusGroup.get_messages() (N-L1) - Replace time.sleep with asyncio.sleep in key_theme_service and focus_group_service (N-P10) - Replace flask import with quart in focus_groups.py (N-S3) - Add logger.error before all 500 returns in focus_groups.py (N-P6) - Add logging to silent except blocks across routes (N-M10, N-M11) - Add @rate_limit to 6 remaining AI endpoints (N-H4) - Add --confirm flag to populate scripts before delete_many (S-H2) - Remove hardcoded Azure ID fallbacks from msal_service.py and msalConfig.ts (A-M2, F-H4) - Centralize make_serializable() in utils.py, remove duplicates from 3 route files (N-P7) - Replace all datetime.utcnow() with datetime.now(timezone.utc) across entire backend (M-L2) - AuthContext.tsx: only mark token validated on 200 success, not on non-401 errors (F-H2) - Rename authType → auth_type in auth.py (N-S4) - Add security_report.md and security_report.pdf with full 92-finding status Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>	2026-03-20 12:51:18 +00:00
Michael Clervi	893b537b67	changed permissions	2025-12-19 19:26:16 +00:00
michael	e29d2a0bb9	made long actions cancellable (like persona generation, etc.), increased variety of persona generation with prompt changes and temperature variable, reduced length of key theme quotes, bug fixes	2025-09-10 16:24:05 -05:00