-
fix(P1-security): Rate limiter fails CLOSED for auth/AI endpoints when Redis is down
-
fix(P1-security): Auth routes use refresh sessions, logout revokes, 15min access tokens
-
fix(P1-security): Reduce access token to 15min, add refresh session table, implement token revocation on logout
-
fix(P0): Add key_prefix and key_last4 to UserAPIKey model, settings route uses them"
-
fix(P0): Migration uses vector(768), remove direct port exposure in prod compose, add lockfile note
-
fix(P0): encryption.py uses settings.ENCRYPTION_KEY from config properly
-
fix(P0): Remove unused Field import from config, add ENCRYPTION_KEY to settings"
-
fix(P0): Fix semantic search to use 768 dims (nomic-embed-text) for local-first, document choice
-
fix: Separate ENCRYPTION_KEY from SECRET_KEY, add key_last4 to avoid decrypt on list
-
fix: LLM gateway with Pydantic schema validation per task + safe retry variable + user-key-aware routing
-
fix(critical): Alembic env.py uses settings.database_url_sync consistently
-
fix(critical): LLM gateway actually passes user API keys to litellm calls
-
fix(critical): database.py uses correct settings.database_url_async property
-
fix: Implement real salary parsing + fix normalize_salary stub"
-
fix: Clean main.py - uses centralized api_router, much simpler
-
fix: Router refactor - centralized api_router.py instead of 65 imports in main.py
-
fix: LLM gateway with JSON retry, all providers configured, structured validation
-
fix: Add cryptography to pyproject.toml for Fernet encryption
-
fix: Auth register with password validation, proper flush order, stronger Pydantic
-
fix(security): Enforce SECRET_KEY in prod, stronger password validation, fix config
-
fix(security): Settings API uses real encryption, never returns raw keys
-
fix(security): Real Fernet encryption for API keys, JWT secret enforcement, password validation
-
feat: 🕷️ SmartJobSearch - searches ALL sources with params, no URL needed
-
feat: 🕷️ Complete scraper rewrite - smart scraping with params OR urls, full data extraction
-
fix: Update Dockerfile to install fpdf2 + weasyprint deps, playwright setup
-
fix: Add fpdf2 to deps, register pdf_export + all remaining routes in main.py
-
fix: Wire up resume PDF download API endpoint using @react-pdf on server
-
fix: Add python-docx + pdfminer to pyproject.toml, add dotenv dep for alembic
-
feat: Add auto-discovery admin controls and user discovery page"
-
feat: Add autonomous job discovery - scrapes without user input from 20+ free sources
-
feat: Add scrape-any-url API endpoint + admin bulk discovery"
-
feat: Add RSS/Atom feed parser for job boards and Google Jobs RSS integration
-
feat: Add LLM-powered job extraction for pages that resist pattern matching
-
feat: Add universal web scraper - scrapes ANY career page with intelligent extraction
-
feat: Add job search coaching tips based on user behavior"
-
feat: Add job application A/B testing (track which resume versions get more responses)
-
feat: Add career path exploration AI tool
-
feat: Add job search journal for reflections and learnings
-
feat: Add AI elevator pitch generator
-
feat: Add job fit score calculator (multi-dimensional match)"
-
feat: Add job application tracker widget data for external embeds
-
feat: Add work style assessment and culture match scoring"
-
feat: Add job application deadline tracker and calendar integration
-
feat: Add interview question bank with crowdsourced data
-
feat: Add daily job digest with personalized AI summary
-
feat: Add company reviews and rating system"
-
feat: Add job market trends analysis endpoint
-
feat: Add AI resume keyword optimizer endpoint
-
feat: Add job sharing and collaborative lists
-
feat: Add job search preferences learning system
