14 Commits

Author	SHA1	Message	Date
ZhenYi	c7cee8c344	misc: polish git hooks, billing services, fctool, and API/WebSocket ... - git: clean up hook pool worker, commit sync, HTTP rate limiting - billing: tighten workspace/project/agent billing logic - fctool: add project boards and issues management tools - api/ws: minor room WebSocket protocol adjustments - frontend: add RoomSettingsPanel component	2026-04-30 19:16:57 +08:00
ZhenYi	09645d8641	fix: resolve multiple bugs across backend and frontend ... Security fixes: - Remove WS token from plaintext log output (ws_universal.rs) - Replace weak LCG PRNG with rand::thread_rng() for access key generation - Add project membership check to issue triage endpoint (prevent unauthorized AI usage) - Validate deepLinkUrl to prevent javascript: navigation (XSS defense-in-depth) Data integrity fixes: - Fix UUID truncation in AI model sync (as_u128() as i64 -> timestamp_millis) - Wrap PR cascade delete in database transaction - Add missing cascade deletes for room_message_reaction, room_message_edit_history, room_notifications - Fix N+1 query for last_commit_times (single grouped query instead of per-repo) Panic prevention: - Replace unwrap() with safe fallbacks in health/metrics endpoints (email, git-hook apps) - Replace unwrap() in access key scopes serialization - Replace expect() in tool executor result map with synthetic error - Replace expect() in log level parsing with default fallback Logic bugs: - Fix users_online metric double-decrement (decrement only when count reaches 0) - Fix Map iteration + deletion bug in universal-ws.ts onclose handler - Fix stale audioStream reference in catch block (use local stream variable) - Add missing reInit event cleanup in carousel.tsx - Fix email retry backoff integer overflow ((1 << i) as u64 -> 1u64 << i) React fixes: - Use message.id instead of index as key in message-list - Add audio stream cleanup on unmount in use-audio-recording	2026-04-27 13:54:21 +08:00
ZhenYi	d72019e39f	feat(room): add WS events for AI config and repo lifecycle changes ... Add RoomAiUpdated, RepoCreated, RepoUpdated, RepoDeleted event types. Publish RoomAiUpdated after room_ai upsert/delete and repo events after repo create/update. Always set model_name in AI list response (fallback to "AI {uuid}" when model lookup fails) so frontend never displays a raw UUID.	2026-04-26 23:58:33 +08:00
ZhenYi	07e74c230c	feat: thinking_content column + first-project budget logic ... - Add thinking_content column to room_message table - Migration for thinking_content column - ws-protocol update with streaming chunk types - Billing: first project gets $10, first workspace gets $30 - Subsequent projects/workspaces get $0 budget	2026-04-26 13:11:06 +08:00
ZhenYi	8b47f677bb	fix(avatar): add upload API routes and fix URL path prefix ... - Add /api/users/me/avatar and /api/projects/{name}/avatar multipart upload endpoints - Fix avatar URL path: missing /avatar prefix (static.gitdata.ai/avatar/{file}) - Fix project avatar: Utc::now() → .timestamp(), missing extension, wrong return type - Replace broken SkipNoisyPaths middleware with self-contained RequestLogger (actix-web 4.13 body type incompatibility with newer actix-http) - Exclude /assets/* requests from main app logger - Exclude /avatar/*, /blob/*, /media/*, /static/* from static server logger - Fix TypingEvent missing sender_type field in ws_universal.rs and connection.rs - Wire real fetch-based upload in user profile settings - Add project avatar upload UI to project settings page	2026-04-25 23:19:22 +08:00
ZhenYi	f7e087e066	fix(agent/service): retry jitter, tool executor ordering, curl SSRF, grep/JSON ... - agent/client: full jitter backoff (random(0, base_ms)) instead of equal jitter - agent/tool/executor: fix buffer_unordered ordering mismatch with HashMap-by-index approach for concurrent tool execution - agent/chat: AiChunkType emit fixes, is_retryable_tool_error refinements, process_react uses request.max_tool_depth - agent/chat/context: fix Function message sender_name field - file_tools/curl: shared reqwest::Client via OnceLock, manual redirect following with per-hop SSRF validation, blocked sensitive headers - file_tools/grep: fix case-insensitive glob matching, segment consumption - file_tools/json: bracket notation support, remove .vscodeignore from JSONC - git_tools: git_diff_stats resolve base/head independently, DiffFileOut old_file.path for Deleted, reflog offset_minutes - git/repo: create_commit read parent tree into index, bare repo init - project_tools/repos: branch/path validation, .git/ prefix check - service/agent: tokent integration, billing, pr_summary, code_review fixes	2026-04-25 09:53:31 +08:00
ZhenYi	1e6ba34827	fix(project): invitation accept always 404 due to wrong column filter ... Column::Project was used twice instead of Column::User in the query, causing the filter to be project_id = X AND project_id = user_uid which never matches.	2026-04-21 23:05:18 +08:00
ZhenYi	773da34fab	refactor(service): migrate auth, git service, agent from slog to tracing ... - Remove all use slog::* imports and slog::Logger fields/parameters - Replace slog::info!/warn!/error! with tracing::info!/warn!/error! - AppService: remove pub logs: slog::Logger field, update callers of AppEmail::init(), MessageProducer::new(), RoomService::new(), start_email_worker(), start_room_workers() - auth/: captcha, email, login, logout, password, register, rsa, totp - git/: archive, blame, blob, branch, commit, contributors, diff, refs, star, tag, tree, watch - agent/: billing (ai_usage_recorded), code_review, pr_summary, sync - project/activity.rs, workspace/alert.rs	2026-04-21 22:28:33 +08:00
ZhenYi	8316fe926f	feat(service): add push and storage service modules, update project/user/workspace services	2026-04-20 15:45:40 +08:00
ZhenYi	e612043e5f	feat(room): auto-add new project members to all rooms	2026-04-19 22:27:57 +08:00
ZhenYi	9336250f1c	fix(agent): skip reasoning_effort when think=false to avoid API errors	2026-04-18 19:41:59 +08:00
ZhenYi	c4fb943e07	fix(backend): add project_name and invited_by_username to InvitationResponse ... InvitationResponse was missing project_name and invited_by_username fields, causing /invitations accept to redirect to /project/undefined. Now populated via async from_model() with batch DB lookups.	2026-04-18 19:24:43 +08:00
ZhenYi	8b433c9169	feat(repo): return ssh/https clone URLs from backend ... Add ssh_clone_url and https_clone_url to ProjectRepositoryItem, constructed from config.ssh_domain() and config.git_http_domain(). Update frontend RepoInfo interface and header.tsx to use the server-provided URLs instead of hardcoded values.	2026-04-16 18:20:48 +08:00
ZhenYi	93cfff9738	init	2026-04-15 09:08:09 +08:00