4 Commits

Author SHA1 Message Date
czlonkowski
297acb039e fix: resolve all TypeScript linting errors
- Fix searchTemplatesByMetadata calls to pass limit/offset as separate params
- Fix syntax errors with brace placement in test files
- Add type annotations for implicit any types
- All tests passing and TypeScript compilation successful
2025-09-15 09:52:13 +02:00
czlonkowski
aaf7c83301 fix: resolve all 5 failing integration tests
- Fix setup time test: expected 1 result not 2 (only 15min < 30min)
- Fix category test: 'ai' substring matches 2 templates due to LIKE pattern
- Fix templates without metadata: increase view count to avoid filter (>10)
- Fix metadata stats: use correct property names (withMetadata not totalWithMetadata)
- Fix pagination test: pass limit/offset as separate params not in filters object
2025-09-15 09:38:04 +02:00
czlonkowski
7147f5ef05 fix: integration test database initialization issues
- Remove non-existent BetterSqlite3Adapter import
- Use createDatabaseAdapter instead of direct instantiation
- Initialize database schema in test setup
- Fix path imports and duplicate imports
2025-09-15 09:13:22 +02:00
czlonkowski
c18c4e7584 fix: address critical security issues in template metadata
- Fix SQL injection vulnerability in template-repository.ts
  - Use proper parameterization with SQLite concatenation operator
  - Escape JSON strings correctly for LIKE queries
  - Prevent malicious SQL through filter parameters

- Add input sanitization for OpenAI API calls
  - Sanitize template names and descriptions before sending to API
  - Remove control characters and prompt injection patterns
  - Limit input length to prevent token abuse

- Lower temperature to 0.3 for consistent structured outputs

- Add comprehensive test coverage
  - 100+ new tests for metadata functionality
  - Security-focused tests for SQL injection prevention
  - Integration tests with real database operations

Co-Authored-By: Claude <noreply@anthropic.com>
2025-09-15 00:51:41 +02:00