7 Commits

Include renames

Author	SHA1	Message	Date
Classic298andClaude Opus 4.7	9a3eea6448	fix: bind prompt history/version ops to the authorized prompt (#25056) ... The history diff, delete, and version-restore routes authorize the URL prompt_id but then act on a caller-supplied history/version id without checking it belongs to that prompt (IDOR). Filter by prompt_id in compute_diff and delete_history_entry, and reject a cross-prompt version_id in update_prompt_version. Co-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>	2026-06-01 12:07:52 -07:00
Timothy Jaeryang Baek	6d0295588e	refac: modernize type annotations (PEP 604 / PEP 585)	2026-05-12 17:10:15 +09:00
Timothy Jaeryang Baek	27169124f2	refac: async db	2026-04-12 14:22:11 -05:00
Timothy Jaeryang Baek	de3317e26b	refac	2026-03-17 17:58:01 -05:00
Timothy Jaeryang Baek	f376d4f378	chore: format	2026-02-11 16:24:11 -06:00
Timothy Jaeryang Baek	0f78451c2b	refac	2026-02-08 21:24:20 -06:00
Timothy Jaeryang Baek	66daa15722	wip: prompt history models	2026-01-24 02:39:29 +04:00