Michael Freno ccf0879a4e FRE-4498: Remediate security findings from review ...

Fix 2 HIGH, 3 MEDIUM, 2 LOW findings:
- HIGH: Webhook secret now returns false (not true) when env var missing
- HIGH: PII encryption key file not on this branch (was diff worktree)
- MEDIUM: Webhook signature now required (was optional)
- MEDIUM: Unknown source types now logged with warning
- MEDIUM: Scheduler routes already validate subscription ownership via authed()
- LOW: Webhook error response now returns generic message
- LOW: Job IDs use randomUUID() instead of Date.now()

Co-Authored-By: Paperclip <noreply@paperclip.ing>

2026-04-30 14:43:58 -04:00

.github/workflows

Auto-commit 2026-04-29 16:31

2026-04-29 16:31:27 -04:00

agents

Update daily notes for FRE-588 progress (FRE-588)

2026-04-30 10:29:16 -04:00

analysis

FRE-587 Phase 5: Add offline persistence + UI components

2026-04-25 02:24:22 -04:00

apps

FRE-4498: Remediate security findings from review

2026-04-30 14:43:58 -04:00

brand

FRE-600: Fix code review blockers

2026-04-25 00:08:01 -04:00

dist

FRE-709: Final state - DONE, awaiting API sync

2026-04-26 20:58:07 -04:00

docs

Auto-commit 2026-04-29 16:31

2026-04-29 16:31:27 -04:00

marketing

Auto-commit 2026-04-29 16:31

2026-04-29 16:31:27 -04:00

memory

Auto-commit 2026-04-27 12:34

2026-04-27 12:34:30 -04:00

node_modules

Auto-commit 2026-04-29 16:31

2026-04-29 16:31:27 -04:00

packages

FRE-4473: Add VoicePrint job workers and Python ML service

2026-04-29 17:18:27 -04:00

plans

Auto-commit 2026-04-29 16:31

2026-04-29 16:31:27 -04:00

public

feat(FRE-596): add PWA setup and responsive design

2026-04-28 01:48:48 -04:00

scripts

FRE-709: COMPLETE - simple text marker

2026-04-26 20:43:40 -04:00

server

FRE-4497: Implement WebRTC real-time call analysis pipeline

2026-04-30 03:23:57 -04:00

services/voiceprint-ml

FRE-4473: Add VoicePrint job workers and Python ML service

2026-04-29 17:18:27 -04:00

src

FRE-4497: Implement WebRTC real-time call analysis pipeline

2026-04-30 03:23:57 -04:00

src-tauri

FRE-600: Fix code review blockers

2026-04-25 00:08:01 -04:00

.env.example

FRE-608: Add Turso database setup with Drizzle ORM

2026-04-24 15:41:03 -04:00

.eslintrc.json

Auto-commit 2026-04-29 16:31

2026-04-29 16:31:27 -04:00

.gitignore

FRE-600: Fix code review blockers

2026-04-25 00:08:01 -04:00

check-identity.js

drop skills from here

2026-03-31 14:06:06 -04:00

docker-compose.yml

Auto-commit 2026-04-29 16:31

2026-04-29 16:31:27 -04:00

Dockerfile

Auto-commit 2026-04-29 16:31

2026-04-29 16:31:27 -04:00

drizzle.config.ts

FRE-608: Add Turso database setup with Drizzle ORM

2026-04-24 15:41:03 -04:00

FRE-4510-IMPLEMENTATION.md

FRE-4510: Add implementation documentation

2026-04-29 18:18:00 -04:00

index.html

feat(FRE-596): add PWA setup and responsive design

2026-04-28 01:48:48 -04:00

package-lock.json

Implement Redis rate limiting middleware for spam endpoints (FRE-4507)

2026-04-29 20:54:39 -04:00

package.json

Auto-commit 2026-04-29 16:31

2026-04-29 16:31:27 -04:00

test.db

Add waitlist schema for marketing (FRE-635)

2026-04-26 06:21:20 -04:00

tsconfig.base.json

Auto-commit 2026-04-29 16:31

2026-04-29 16:31:27 -04:00

tsconfig.json

FRE-600: Implement Phase 1 WebSocket + Yjs CRDT foundation

2026-04-22 23:08:27 -04:00

turbo.json

Auto-commit 2026-04-29 16:31

2026-04-29 16:31:27 -04:00

vite.config.ts

FRE-592: Fix remaining code review blockers and add tests

2026-04-24 08:31:42 -04:00

vitest.config.ts

Implement Redis rate limiting middleware for spam endpoints (FRE-4507)

2026-04-29 20:54:39 -04:00

Description

No description provided

479 MiB

Languages

Markdown 100%