kjanat/livedash-node
1
0
Fork 0
mirror of https://github.com/kjanat/livedash-node.git synced 2026-01-16 12:52:09 +01:00
Code Issues Packages Projects Releases Wiki Activity

docs: update CLAUDE.md with batch API and security features

Browse Source 
- Document new batch processing architecture and libraries
- Add batch scheduler to scheduler system documentation
- Document 50% AI cost reduction with OpenAI Batch API
- Add comprehensive security features documentation
- Document rate limiting configuration for all auth endpoints
- Add input validation and session security details
This commit is contained in:
Kaj Kowalski
2025-07-05 15:16:27 +02:00
committed by Kaj Kowalski
parent 7cc5cad14f
commit 7d80ffe704
1 changed files with 25 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

26
CLAUDE.md
View File

@ -87,6 +87,9 @@ The system processes user sessions through distinct stages tracked in `SessionPr
- `lib/processingScheduler.ts` - AI analysis pipeline - `lib/processingScheduler.ts` - AI analysis pipeline
- `lib/transcriptFetcher.ts` - External transcript fetching - `lib/transcriptFetcher.ts` - External transcript fetching
- `lib/transcriptParser.ts` - Message parsing from transcripts - `lib/transcriptParser.ts` - Message parsing from transcripts
- `lib/batchProcessor.ts` - OpenAI Batch API integration for cost-efficient processing
- `lib/batchScheduler.ts` - Automated batch job lifecycle management
- `lib/rateLimiter.ts` - In-memory rate limiting utility for API endpoints
### Development Environment ### Development Environment
@ -117,10 +120,11 @@ Environment variables are managed through `lib/env.ts` with .env.local file supp
- Schedulers are optional and controlled by `SCHEDULER_ENABLED` environment variable - Schedulers are optional and controlled by `SCHEDULER_ENABLED` environment variable
- Use `pnpm dev:next-only` to run without schedulers for pure frontend development - Use `pnpm dev:next-only` to run without schedulers for pure frontend development
- Three separate schedulers handle different pipeline stages: - Four separate schedulers handle different pipeline stages:
- CSV Import Scheduler (`lib/scheduler.ts`) - CSV Import Scheduler (`lib/scheduler.ts`)
- Import Processing Scheduler (`lib/importProcessor.ts`) - Import Processing Scheduler (`lib/importProcessor.ts`)
- Session Processing Scheduler (`lib/processingScheduler.ts`) - Session Processing Scheduler (`lib/processingScheduler.ts`)
- Batch Processing Scheduler (`lib/batchScheduler.ts`) - Manages OpenAI Batch API lifecycle
**Database Migrations:** **Database Migrations:**
@ -135,6 +139,11 @@ Environment variables are managed through `lib/env.ts` with .env.local file supp
- Support for multiple AI models per company - Support for multiple AI models per company
- Time-based pricing management for accurate cost calculation - Time-based pricing management for accurate cost calculation
- Processing stages can be retried on failure with retry count tracking - Processing stages can be retried on failure with retry count tracking
- **Batch API Integration**: 50% cost reduction using OpenAI Batch API
- Automatic batching of AI requests every 5 minutes
- Batch status checking every 2 minutes
- Result processing every minute
- Failed request retry with individual API calls
**Code Quality Standards:** **Code Quality Standards:**
@ -142,3 +151,18 @@ Environment variables are managed through `lib/env.ts` with .env.local file supp
- TypeScript with ES modules (type: "module" in package.json) - TypeScript with ES modules (type: "module" in package.json)
- React 19 with Next.js 15 App Router - React 19 with Next.js 15 App Router
- TailwindCSS 4 for styling - TailwindCSS 4 for styling
**Security Features:**
- **Rate Limiting**: In-memory rate limiting for all authentication endpoints
- Login: 5 attempts per 15 minutes
- Registration: 3 attempts per hour
- Password Reset: 5 attempts per 15 minutes
- **Input Validation**: Comprehensive Zod schemas for all user inputs
- Strong password requirements (12+ chars, uppercase, lowercase, numbers, special chars)
- Email normalization and validation
- XSS and SQL injection prevention
- **Session Security**:
- JWT tokens with 24-hour expiration
- HttpOnly, Secure, SameSite cookies
- Company status verification on login