3 Commits

Author	SHA1	Message	Date
End3r	8cce8e6c2e	security: add CSRF protection, input sanitization, security logging, and JWT expiry reduction	2026-04-12 18:43:39 -05:00
3nd3r	1d6413cfd6	Switch Violet model to sadiq-bd/llama3.2-3b-uncensored (installed)	2026-04-12 13:25:28 -05:00
3nd3r	99859f009f	Fix #1+#8: Extract shared config module, unify JWT secret ... - Create config.py with shared constants, AES-GCM helpers, and JWT helpers - app.py and routes.py now import from the single source of truth - Eliminates JWT secret mismatch (routes.py had hardcoded default) - Removes all duplicate _issue_jwt, _verify_jwt, _aesgcm_encrypt, _aesgcm_decrypt definitions - start.py also uses shared config loader	2026-04-12 12:49:44 -05:00