Block a user
LOW: Deduplicate MOOD_EMOJIS mapping between moods.py and evil_mode.py
MEDIUM: Add input validation and allowlist to /config/set API endpoint
LOW: Fix logger.error() misuse for non-error messages in bot.py
LOW: Add timeouts to subprocess.run() calls in container_manager.py
MEDIUM: Fix mixed async/sync API endpoints with fire-and-forget patterns
LOW: Add eviction policy for conversation history to prevent memory leak
LOW: Move hardcoded user IDs and IP addresses to configuration
MEDIUM: Add file locking for concurrent JSON persistence