Block a user
MEDIUM: Add input validation and allowlist to /config/set API endpoint
LOW: Fix logger.error() misuse for non-error messages in bot.py
LOW: Add timeouts to subprocess.run() calls in container_manager.py
MEDIUM: Fix mixed async/sync API endpoints with fire-and-forget patterns
LOW: Add eviction policy for conversation history to prevent memory leak
LOW: Move hardcoded user IDs and IP addresses to configuration
MEDIUM: Add file locking for concurrent JSON persistence
MEDIUM: Remove dead/vestigial code modules
BUG: Duplicate record_action() call in autonomous.py double-counts actions
MEDIUM: Extract system prompt to a single shared source (eliminate triple duplication)
HIGH: Unify the triple configuration system into a single source of truth
HIGH: Split api.py (3,219 lines) into FastAPI domain routers
LOW: No Documentation for Commands
Fixed in commit 305605f. Created comprehensive COMMANDS.md (661 lines) documenting all Discord commands (voice, UNO, inline), conversational features, mood system, personality modes, voice…
LOW: No Documentation for Commands
MEDIUM: Runtime Settings Not Persisted - Globals Need Migration
Fixed in commit d44f08a. Added restore_runtime_settings() to ConfigManager that reads config_runtime.yaml on startup and restores persisted values into globals (LANGUAGE_MODE, AUTONOMOUS_DEBUG,…
MEDIUM: Runtime Settings Not Persisted - Globals Need Migration