Ubuntu 868ce39577 fix(storage,db): path traversal fix, delete_prefix validation, remove dead import, factory uses Config ... - local.py: use relative_to() for path traversal guard (fixes prefix-collision false negative) - local.py: validate delete_prefix rejects empty/root prefix to prevent full-storage wipe - local.py: remove unused `import os` - db_models.py: remove dead UniqueConstraint import - db_models.py: replace deprecated datetime.utcnow() with datetime.now(timezone.utc) - factory.py: read STORAGE_TYPE and related settings from Config instead of os.environ directly; remove `import os` Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>		2026-05-03 00:06:58 +00:00
..
api	feat(recovery): persist active_task_id to project.json for browser-refresh reconnection	2026-04-26 14:54:44 +00:00
graph	fix(graph): cap get_all_edges to 5000 edges to prevent unbounded RAM growth	2026-04-26 14:50:21 +00:00
models	fix(storage,db): path traversal fix, delete_prefix validation, remove dead import, factory uses Config	2026-05-03 00:06:58 +00:00
services	fix(report): strip fabricated tool_result blocks to prevent LLM hallucination loop	2026-04-26 15:06:24 +00:00
storage	fix(storage,db): path traversal fix, delete_prefix validation, remove dead import, factory uses Config	2026-05-03 00:06:58 +00:00
utils	fix(llm): centralise Azure URL normalisation in parse_azure_url utility	2026-04-25 21:09:48 +00:00
__init__.py	feat(report): add PDF download endpoint via PyMuPDF	2026-04-26 00:07:09 +00:00
config.py	feat(config): add DATABASE_URL, STORAGE_TYPE, AZURE_STORAGE_*, JWT config vars	2026-05-02 23:53:16 +00:00
db.py	feat(db): add SQLAlchemy Base, session factory, and all ORM models	2026-05-02 23:54:05 +00:00