Dries Peeters ea913c6c4b feat(ai,security): add web AI helper, secret encryption, and 2FA ...

Introduce a web-first AI helper with admin-configurable providers (Ollama or hosted OpenAI-compatible), server-side context building, and confirmed write actions. Expose the feature via session /api/ai/* endpoints and scoped /api/v1/ai/* endpoints.

Harden security by requiring a strong SECRET_KEY for Docker Compose, adding optional settings encryption-at-rest (Fernet), and introducing TOTP-based 2FA plus password reset flows. Update admin UI, API docs, and install documentation.

2026-04-26 07:55:47 +02:00

..

api_auth.py

feat(api): v1 CSV import, bulk time entries, idempotency, and rate limits

2026-04-05 08:39:14 +02:00

api_deprecation.py

feat(api): clarify /api vs /api/v1 and reduce duplication

2026-04-16 15:36:01 +02:00

api_idempotency.py

feat(api): v1 CSV import, bulk time entries, idempotency, and rate limits

2026-04-05 08:39:14 +02:00

api_rate_limit.py

feat(api): v1 CSV import, bulk time entries, idempotency, and rate limits

2026-04-05 08:39:14 +02:00

api_responses.py

fix: CI tests, code quality, and duplicate DB indexes

2026-03-15 10:51:52 +01:00

audit.py

fix: CI tests, code quality, and duplicate DB indexes

2026-03-15 10:51:52 +01:00

backup.py

chore(app): routes, utils, and bootstrap updates

2026-03-16 15:15:47 +01:00

budget_forecasting.py

fix: CI tests, code quality, and duplicate DB indexes

2026-03-15 10:51:52 +01:00

cache_redis.py

fix: CI tests, code quality, and duplicate DB indexes

2026-03-15 10:51:52 +01:00

cache.py

fix: CI tests, code quality, and duplicate DB indexes

2026-03-15 10:51:52 +01:00

cii_invoice.py

fix: quote create 500, line order, and Factur-X PDF parity

2026-04-12 13:34:58 +02:00

cli.py

fix: CI tests, code quality, and duplicate DB indexes

2026-03-15 10:51:52 +01:00

client_lock.py

chore(app): routes, utils, and bootstrap updates

2026-03-16 15:15:47 +01:00

config_manager.py

fix: CI tests, code quality, and duplicate DB indexes

2026-03-15 10:51:52 +01:00

context_processors.py

feat(web): high-visibility support modal, prompts, and supporter UX

2026-04-15 10:55:37 +02:00

data_export.py

fix: CI tests, code quality, and duplicate DB indexes

2026-03-15 10:51:52 +01:00

data_import.py

chore(app): routes, utils, and bootstrap updates

2026-03-16 15:15:47 +01:00

datetime_utils.py

fix: CI tests, code quality, and duplicate DB indexes

2026-03-15 10:51:52 +01:00

db.py

feat(api): v1 CSV import, bulk time entries, idempotency, and rate limits

2026-04-05 08:39:14 +02:00

decorators.py

fix: CI tests, code quality, and duplicate DB indexes

2026-03-15 10:51:52 +01:00

donate_hide_code.py

fix: CI tests, code quality, and duplicate DB indexes

2026-03-15 10:51:52 +01:00

email.py

fix(security): sandbox Jinja2 for database-backed PDF and email templates

2026-04-24 21:13:29 +02:00

env_validation.py

fix: CI tests, code quality, and duplicate DB indexes

2026-03-15 10:51:52 +01:00

error_handlers.py

fix: CI tests, code quality, and duplicate DB indexes

2026-03-15 10:51:52 +01:00

error_handling.py

chore(app): routes, utils, and bootstrap updates

2026-03-16 15:15:47 +01:00

event_bus.py

fix: CI tests, code quality, and duplicate DB indexes

2026-03-15 10:51:52 +01:00

excel_export.py

feat(invoices): add fully configurable invoice number patterns

2026-03-26 14:51:55 +01:00

file_upload.py

fix: CI tests, code quality, and duplicate DB indexes

2026-03-15 10:51:52 +01:00

i18n_helpers.py

fix: CI tests, code quality, and duplicate DB indexes

2026-03-15 10:51:52 +01:00

i18n.py

fix: CI tests, code quality, and duplicate DB indexes

2026-03-15 10:51:52 +01:00

installation.py

feat(telemetry): add install_id UUID and consent-aware telemetry service

2026-03-16 13:00:49 +01:00

integration_http.py

feat(integrations): Linear connector and shared HTTP/sync helpers

2026-04-05 08:39:18 +02:00

integration_sync_context.py

feat(integrations): Linear connector and shared HTTP/sync helpers

2026-04-05 08:39:18 +02:00

invoice_numbering.py

feat(invoices): add fully configurable invoice number patterns

2026-03-26 14:51:55 +01:00

invoice_pdf_postprocess.py

fix: quote create 500, line order, and Factur-X PDF parity

2026-04-12 13:34:58 +02:00

invoice_validators.py

fix: quote create 500, line order, and Factur-X PDF parity

2026-04-12 13:34:58 +02:00

keyboard_shortcuts_defaults.py

feat(settings): keyboard shortcut overrides and developer documentation

2026-03-16 15:15:34 +01:00

legacy_migrations.py

fix: CI tests, code quality, and duplicate DB indexes

2026-03-15 10:51:52 +01:00

license_utils.py

feat(web): high-visibility support modal, prompts, and supporter UX

2026-04-15 10:55:37 +02:00

logger.py

fix: CI tests, code quality, and duplicate DB indexes

2026-03-15 10:51:52 +01:00

mileage_pdf.py

fix: CI tests, code quality, and duplicate DB indexes

2026-03-15 10:51:52 +01:00

module_helpers.py

fix: CI tests, code quality, and duplicate DB indexes

2026-03-15 10:51:52 +01:00

module_registry.py

fix: CI tests, code quality, and duplicate DB indexes

2026-03-15 10:51:52 +01:00

ocr.py

fix: CI tests, code quality, and duplicate DB indexes

2026-03-15 10:51:52 +01:00

oidc_metadata.py

fix: CI tests, code quality, and duplicate DB indexes

2026-03-15 10:51:52 +01:00

overtime.py

fix: CI tests, code quality, and duplicate DB indexes

2026-03-15 10:51:52 +01:00

pagination.py

fix: CI tests, code quality, and duplicate DB indexes

2026-03-15 10:51:52 +01:00

pdf_generator_fallback.py

feat(quotes): invoice-style line items, costs, and extra goods (#585)

2026-04-12 14:00:12 +02:00

pdf_generator_reportlab.py

fix(security): sandbox Jinja2 for database-backed PDF and email templates

2026-04-24 21:13:29 +02:00

pdf_generator.py

fix(security): sandbox Jinja2 for database-backed PDF and email templates

2026-04-24 21:13:29 +02:00

pdf_template_schema.py

fix: CI tests, code quality, and duplicate DB indexes

2026-03-15 10:51:52 +01:00

pdfa3.py

fix: quote create 500, line order, and Factur-X PDF parity

2026-04-12 13:34:58 +02:00

per_diem_pdf.py

fix: CI tests, code quality, and duplicate DB indexes

2026-03-15 10:51:52 +01:00

performance.py

fix: CI tests, code quality, and duplicate DB indexes

2026-03-15 10:51:52 +01:00

permissions_seed.py

fix: CI tests, code quality, and duplicate DB indexes

2026-03-15 10:51:52 +01:00

permissions.py

fix: CI tests, code quality, and duplicate DB indexes

2026-03-15 10:51:52 +01:00

posthog_funnels.py

feat(telemetry): migrate analytics pipeline from PostHog to OTLP

2026-03-26 17:01:55 +01:00

posthog_monitoring.py

feat(telemetry): migrate analytics pipeline from PostHog to OTLP

2026-03-26 17:01:55 +01:00

posthog_segmentation.py

chore(analytics): remove dead PostHog feature-flag module

2026-04-16 16:23:54 +02:00

powerpoint_export.py

fix: CI tests, code quality, and duplicate DB indexes

2026-03-15 10:51:52 +01:00

prepaid_hours.py

fix: CI tests, code quality, and duplicate DB indexes

2026-03-15 10:51:52 +01:00

query_logging.py

fix: CI tests, code quality, and duplicate DB indexes

2026-03-15 10:51:52 +01:00

query_optimization.py

fix: CI tests, code quality, and duplicate DB indexes

2026-03-15 10:51:52 +01:00

rate_limiting.py

fix: CI tests, code quality, and duplicate DB indexes

2026-03-15 10:51:52 +01:00

role_migration.py

fix: CI tests, code quality, and duplicate DB indexes

2026-03-15 10:51:52 +01:00

route_helpers.py

fix: CI tests, code quality, and duplicate DB indexes

2026-03-15 10:51:52 +01:00

safe_template_render.py

fix(security): sandbox Jinja2 for database-backed PDF and email templates

2026-04-24 21:13:29 +02:00

scheduled_tasks.py

feat(integrations): Linear connector and shared HTTP/sync helpers

2026-04-05 08:39:18 +02:00

scope_filter.py

fix(auth): scope client portal users to their assigned client

2026-04-24 16:15:24 +02:00

search.py

fix(api): align client search, OpenAPI version, and Client construction

2026-04-15 12:57:01 +02:00

secret_crypto.py

feat(ai,security): add web AI helper, secret encryption, and 2FA

2026-04-26 07:55:47 +02:00

seed_dev_data.py

fix: CI tests, code quality, and duplicate DB indexes

2026-03-15 10:51:52 +01:00

setup_logging.py

fix: CI tests, code quality, and duplicate DB indexes

2026-03-15 10:51:52 +01:00

stripe_integration.py

fix: CI tests, code quality, and duplicate DB indexes

2026-03-15 10:51:52 +01:00

summary_report_pdf.py

fix: CI tests, code quality, and duplicate DB indexes

2026-03-15 10:51:52 +01:00

support_report_generation.py

feat(web): high-visibility support modal, prompts, and supporter UX

2026-04-15 10:55:37 +02:00

telemetry.py

feat(telemetry): migrate analytics pipeline from PostHog to OTLP

2026-03-26 17:01:55 +01:00

template_filters.py

fix: CI tests, code quality, and duplicate DB indexes

2026-03-15 10:51:52 +01:00

time_entries_pdf.py

fix: CI tests, code quality, and duplicate DB indexes

2026-03-15 10:51:52 +01:00

time_entry_validation.py

fix: CI tests, code quality, and duplicate DB indexes

2026-03-15 10:51:52 +01:00

time_rounding.py

…

timezone.py

fix: CI tests, code quality, and duplicate DB indexes

2026-03-15 10:51:52 +01:00

transactions.py

fix: CI tests, code quality, and duplicate DB indexes

2026-03-15 10:51:52 +01:00

validation.py

fix: CI tests, code quality, and duplicate DB indexes

2026-03-15 10:51:52 +01:00

version_compare.py

feat(admin): GitHub-based version update notification for admins

2026-04-15 09:39:32 +02:00

webhook_dispatcher.py

fix: CI tests, code quality, and duplicate DB indexes

2026-03-15 10:51:52 +01:00

webhook_service.py

feat(observability): add OpenTelemetry traces, OTLP metrics, and log correlation

2026-03-28 17:32:18 +01:00

zugferd.py

fix: quote create 500, line order, and Factur-X PDF parity

2026-04-12 13:34:58 +02:00