9 Commits

Author	SHA1	Message	Date
ZhenYi	ba2490dab4	feat(core): initialize project with access control and AI integration	2026-05-10 21:01:21 +08:00
ZhenYi	14f6e1e500	feat(core): initialize project with access control and AI integration ... - Add gitignore and prettier configuration files for project scaffolding - Implement room access control service with project member verification - Create user access key management with CRUD operations and activity logging - Add accordion UI component for frontend expandable sections - Implement room AI configuration with list, upsert, and delete operations - Add AI event types for agent join/leave/status change tracking - Create streaming AI processing services for mode and react patterns - Build room AI service with model detection and idempotency handling - Integrate chat service orchestration for AI message processing - Add typing indicators and stream cancellation for AI interactions - Implement mention parsing and context extraction for AI agents	2026-05-03 06:04:31 +08:00
ZhenYi	bdb5393835	fix: resolve 30+ bugs from security audit ... Critical: - CORS: replace allow_any_origin + credentials with env-configured origins - XSS: escape HTML before dangerouslySetInnerHTML in search results - Path traversal: sanitize storage keys to reject ".." components - Auth missing: add Session requirement to git init/open/is-repo endpoints - Transaction: wrap issue cascade delete in DB transaction High: - Mutex poisoning: replace unwrap() with poison-recovering guards - Drop tokio::spawn: use runtime handle or fallback thread for lock release - Redis KEYS: replace with non-blocking SCAN for typing events - SSH panic: handle missing stdin/stdout/stderr gracefully - LFS auth: remove x-user-uid header injection vector, generate per-request tokens Medium: - Memory leak: remove Box::leak in provider normalization - Race conditions: query closed count directly instead of subtraction - Silent failures: add tracing::warn for AI tasks, room events, activity logs - Frontend nav: sync activeRoomId when initialRoomId prop changes - Duplicate nav: remove redundant setActiveRoom in delete handler - Callback conflict: skip undefined values in updateCallbacks merge - Stale closure: use wsClient state instead of wsClientRef.current in useMemo Low: - Captcha: validate captcha not empty before login submission - Broadcast capacity: reduce from 100K to 1000 - Error handling: add try/catch for removeMember and updateMemberRole - Loading state: show placeholder instead of null in RepositoryContextProvider - WebSocket: add heartbeat ping and jitter to reconnect backoff	2026-04-27 10:57:23 +08:00
ZhenYi	8b47f677bb	fix(avatar): add upload API routes and fix URL path prefix ... - Add /api/users/me/avatar and /api/projects/{name}/avatar multipart upload endpoints - Fix avatar URL path: missing /avatar prefix (static.gitdata.ai/avatar/{file}) - Fix project avatar: Utc::now() → .timestamp(), missing extension, wrong return type - Replace broken SkipNoisyPaths middleware with self-contained RequestLogger (actix-web 4.13 body type incompatibility with newer actix-http) - Exclude /assets/* requests from main app logger - Exclude /avatar/*, /blob/*, /media/*, /static/* from static server logger - Fix TypingEvent missing sender_type field in ws_universal.rs and connection.rs - Wire real fetch-based upload in user profile settings - Add project avatar upload UI to project settings page	2026-04-25 23:19:22 +08:00
ZhenYi	99bc4eeb80	chore: API and frontend UI adjustments ... - API: issue label bulk add, search messages, room WS push, openapi - Frontend: notify page, issue detail AI triage banner, search page, repository settings, preferences, PR components, file browser - Room: DiscordChannelSidebar, RoomPinPanel, RoomMessageActions, RoomThreadPanel, MessageContent, repository-context - Frontend SDK regenerated from openapi.json	2026-04-25 09:54:05 +08:00
ZhenYi	43e2d26ea2	feat(frontend): channel sidebar toggle, member list default closed, fix accent-fg colors	2026-04-20 19:33:14 +08:00
ZhenYi	b73cc8d421	refactor(room): Discord-style UI redesign for channel sidebar and member list	2026-04-19 01:12:38 +08:00
ZhenYi	00a5369fe1	feat(frontend): Discord layout + AI Studio theme + Room Settings ... Frontend: - Add Discord-style 3-column layout (server icons / channel sidebar / chat) - AI Studio design system: new CSS token palette (--room-* vars) - Replace all hardcoded Discord colors with CSS variable tokens - Add RoomSettingsPanel (name, visibility, AI model management) - Settings + Member list panels mutually exclusive (don't overlap) - AI models shown at top of member list with green accent - Fix TS errors: TipTap SuggestionOptions, unused imports, StarterKit options - Remove MentionInput, MentionPopover, old room components (废弃代码清理) Backend: - RoomAiResponse returns model_name from agents.model JOIN - room_ai_list and room_ai_upsert fetch model name for each config - AiConfigData ws-protocol interface updated with model_name Note: RoomSettingsPanel UI still uses shadcn defaults (未完全迁移到AI Studio)	2026-04-18 16:59:36 +08:00
ZhenYi	93cfff9738	init	2026-04-15 09:08:09 +08:00