List view

refactor: analyze URL pattern consistency: domain-segregated vs resource-hierarchical

apiAPI design and implementationAPI design and implementation

enhancementNew feature or requestNew feature or request

Status: Closed (completed).

#131 In ericfitz/tmi;

· by ericfitz was closed on Mar 26, 2026

feat: add support for opentelemetry for logs and metrics

enhancementNew feature or requestNew feature or request

Status: Closed (completed).

#150 In ericfitz/tmi;

· by ericfitz was closed on Apr 9, 2026

perf: optimize Heroku deployment speed

enhancementNew feature or requestNew feature or request

Status: Closed (completed).

#189 In ericfitz/tmi;

· by ericfitz was closed on Mar 24, 2026

feat: create a built-in tmi account for automation access to threat models

Status: Closed (completed).

#192 In ericfitz/tmi;

· by ericfitz was closed on Mar 19, 2026

fix: various places in tmi server code still look up users by email address or provider + email

Status: Closed (completed).

#211 In ericfitz/tmi;

· by ericfitz was closed on Mar 23, 2026

refactor: add meaningful way to migrate config from files/env to db

Status: Closed (completed).

#212 In ericfitz/tmi;

· by ericfitz was closed on Apr 11, 2026

feat: add HEAD method support for all GET endpoints (RFC 9110 compliance)

apiAPI design and implementationAPI design and implementation

enhancementNew feature or requestNew feature or request

rfc-complianceRFC and standards complianceRFC and standards compliance

Status: Closed (completed).

#76 In ericfitz/tmi;

· by ericfitz was closed on Mar 29, 2026

refactor: webhook events for addon invocation should put invocation id in X-Webhook-Delivery-Id instead of X-Invocation-Id

Status: Closed (completed).

#194 In ericfitz/tmi;

· by ericfitz was closed on Mar 30, 2026

feat: backend for timmy

Status: Closed (completed).

#214 In ericfitz/tmi;

· by ericfitz was closed on Apr 7, 2026

refactor: move logic out of makefile and into scripts

Status: Closed (completed).

#215 In ericfitz/tmi;

· by ericfitz was closed on Apr 8, 2026

feat: team and project notes

enhancementNew feature or requestNew feature or request

Status: Closed (completed).

#217 In ericfitz/tmi;

· by ericfitz was closed on Mar 29, 2026

refactor: unify webhook delivery pipeline and migrate to Redis

apiAPI design and implementationAPI design and implementation

Status: Closed (completed).

#220 In ericfitz/tmi;

· by ericfitz was closed on Apr 5, 2026

fix: API schema too restrictive for client-generated diagram data (additionalProperties: false)

apiAPI design and implementationAPI design and implementation

bugSomething isn't workingSomething isn't working

Status: Closed (completed).

#221 In ericfitz/tmi;

· by ericfitz was closed on Apr 1, 2026

Investigate removing server-side PKCE challenge storage from Redis

enhancementNew feature or requestNew feature or request

Status: Not planned (skipped).

#224 In ericfitz/tmi;

· by ericfitz was closed on Apr 2, 2026

bug: only security reviewers and admins should be able to create client credentials via /me/credentials

bugSomething isn't workingSomething isn't working

security

Status: Closed (completed).

#226 In ericfitz/tmi;

· by ericfitz was closed on Apr 4, 2026

fix: set default status 'not_started' when creating threat model from survey response

bugSomething isn't workingSomething isn't working

Status: Closed (completed).

#228 In ericfitz/tmi;

· by ericfitz was closed on Apr 5, 2026

feat: add security_reviewer query parameter to GET /threat_models

apiAPI design and implementationAPI design and implementation

enhancementNew feature or requestNew feature or request

Status: Closed (completed).

#230 In ericfitz/tmi;

· by ericfitz was closed on Apr 5, 2026

refactor: SSRF protections for document, repo, and issue uris (threat models and threats)

enhancementNew feature or requestNew feature or request

security

Status: Closed (completed).

#231 In ericfitz/tmi;

· by ericfitz was closed on Apr 5, 2026

fix: POST /chat/sessions returns 406 Not Acceptable for Accept: text/event-stream

apiAPI design and implementationAPI design and implementation

bugSomething isn't workingSomething isn't working

Status: Closed (completed).

#233 In ericfitz/tmi;

· by ericfitz was closed on Apr 5, 2026

chore: update the json workflows file and arazzo files to accommodate 1.3.x and 1.4.x api changes.

Status: Closed (completed).

#236 In ericfitz/tmi;

· by ericfitz was closed on Apr 5, 2026

fix(timmy): LLM response timeout with large conversation context

bugSomething isn't workingSomething isn't working

Status: Closed (completed).

#237 In ericfitz/tmi;

· by ericfitz was closed on Apr 7, 2026

bug: investigate whether 404 is the right response to an empty list from a List<Objects> (GET /object) API call

Status: Closed (completed).

#239 In ericfitz/tmi;

· by ericfitz was closed on Apr 7, 2026

fix: chat session creation returns 0 sources loaded despite timmy_enabled entities

apiAPI design and implementationAPI design and implementation

bugSomething isn't workingSomething isn't working

Status: Closed (completed).

#240 In ericfitz/tmi;

· by ericfitz was closed on Apr 7, 2026

feat(timmy): dual-index RAG with external embedding ingestion, query decomposition, and cross-encoder reranking

enhancementNew feature or requestNew feature or request

Status: Closed (completed).

#241 In ericfitz/tmi;

· by ericfitz was closed on Apr 10, 2026

feat(timmy): content provider infrastructure and Google Drive source

enhancementNew feature or requestNew feature or request

Status: Closed (completed).

#232 In ericfitz/tmi;

· by ericfitz was closed on Apr 10, 2026