Skip to content

Update Mar 5th#236

Merged
Deodat-Lawson merged 39 commits intostablefrom
main
Mar 5, 2026
Merged

Update Mar 5th#236
Deodat-Lawson merged 39 commits intostablefrom
main

Conversation

@Deodat-Lawson
Copy link
Owner

No description provided.

rafchen and others added 30 commits February 26, 2026 02:17
…h API-first fallback

- add platform research clients for Reddit, X, LinkedIn, and Bluesky
- extend pipeline types and input schema to support Bluesky
- implement API-first research orchestration with Tavily fallback
- add platform credential env support
- add integration test script for platform research flow
- update marketing pipeline platform selection and output support
…egration

- Add Tavily/Serper providers with fallback and parallel strategies- Route marketing trend references through trend-search pipeline for general news (not platform-specific site: queries)
- Fixed inggest for document context
- Fix ESLint/TS errors in marketing-pipeline clients and page
created marketing pipeline and campaign generator
@vercel
Copy link

vercel bot commented Mar 5, 2026

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated (UTC)
pdr-ai-v2 Ready Ready Preview, Comment Mar 5, 2026 9:38am

Copy link

@chatgpt-codex-connector chatgpt-codex-connector bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 5e3bdf3254

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

Comment on lines +49 to +52
const [doc] = await db
.select({ url: document.url, title: document.title })
.from(document)
.where(eq(document.id, docId));

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

P1 Badge Enforce tenant check before serving document content

The new /api/documents/[id]/content handler authorizes only that a user is signed in, then loads a document solely by document.id; there is no check that the document belongs to the caller's company. Any authenticated user who can guess IDs can fetch or redirect to another tenant's document URL via this endpoint, which is a cross-company data exposure path for both private-blob proxies and public URLs.

Useful? React with 👍 / 👎.

@Deodat-Lawson Deodat-Lawson merged commit fb3d0b0 into stable Mar 5, 2026
5 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

7 participants