Commit Graph

3 Commits

Author SHA1 Message Date
marcos 4e1285dc96 fix: constant-time comparison for share tokens
Applies the reviewer's suggestion on app/auth.py — hmac was already imported.
2026-08-18 13:00:08 +00:00
marcos a1aefa08c7 feat: note search and shareable links
Adds title search, shareable note links, and attachment downloads.

- store.search_notes filters an owner's notes by title substring
- auth.make_share_token / check_share_token back the share-link flow
- api.download_attachment streams a file from the attachment directory
2026-08-18 12:31:37 +00:00
marcos 9378fe0427 initial: toy notes service used to demo pragent
A deliberately small Python service — auth helpers, a sqlite-backed store, and
two request handlers — plus a .pr-review.json that steers the reviewer toward
this repo's house rules. Pull requests against it carry planted defects so the
reviewer has something real to find.
2026-08-18 12:31:09 +00:00