Conversation
…ng based on rules + documents)
…formatting to marketing pipeline generator
… research integration in run.ts
…h API-first fallback - add platform research clients for Reddit, X, LinkedIn, and Bluesky - extend pipeline types and input schema to support Bluesky - implement API-first research orchestration with Tavily fallback - add platform credential env support - add integration test script for platform research flow - update marketing pipeline platform selection and output support
…ne feature/metadata-display
…egration - Add Tavily/Serper providers with fallback and parallel strategies- Route marketing trend references through trend-search pipeline for general news (not platform-specific site: queries) - Fixed inggest for document context - Fix ESLint/TS errors in marketing-pipeline clients and page
created marketing pipeline and campaign generator
Feature/metadata display
integrate Vercel Blob (Issue #209)
…ment Feature/front page improvement
|
The latest updates on your projects. Learn more about Vercel for GitHub.
|
There was a problem hiding this comment.
💡 Codex Review
Here are some automated review suggestions for this pull request.
Reviewed commit: 5e3bdf3254
ℹ️ About Codex in GitHub
Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you
- Open a pull request for review
- Mark a draft as ready
- Comment "@codex review".
If Codex has suggestions, it will comment; otherwise it will react with 👍.
Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".
| const [doc] = await db | ||
| .select({ url: document.url, title: document.title }) | ||
| .from(document) | ||
| .where(eq(document.id, docId)); |
There was a problem hiding this comment.
Enforce tenant check before serving document content
The new /api/documents/[id]/content handler authorizes only that a user is signed in, then loads a document solely by document.id; there is no check that the document belongs to the caller's company. Any authenticated user who can guess IDs can fetch or redirect to another tenant's document URL via this endpoint, which is a cross-company data exposure path for both private-blob proxies and public URLs.
Useful? React with 👍 / 👎.
…t-analysis-improvement modified PDA with better results and working
…t-analysis-improvement fix test
No description provided.