ZhenYi cce9d216b8 fix: resolve 4 remaining "design decision" bugs ... - SSH rate limiter: wire SshRateLimiter into SSHServer with IP-based rate limiting on new_client connections - Room startup: cap initial room load at 1000 via limit() to prevent resource exhaustion on large instances - WS token exposure: only include token in URL for cross-origin connections; same-origin web clients authenticate via secure cookies - CSRF: confirmed SameSite::Lax + Secure + HttpOnly are all set (session config defaults)		2026-04-27 11:20:38 +08:00
..
agent	feat(room): inject repository details into AI system prompt on mention	2026-04-26 23:58:52 +08:00
agent-tool-derive
api	fix: resolve 30+ bugs from security audit	2026-04-27 10:57:23 +08:00
avatar
config	refactor(db): simplify read-replica to single connection for CNPG	2026-04-26 01:03:39 +08:00
db	revert(db): remove check_compatibility — method not available in sqlx 0.8	2026-04-26 15:49:51 +08:00
email	feat: add health endpoints and Prometheus metrics to git-hook and email-worker	2026-04-25 23:45:48 +08:00
fctool	refactor(fctool): extract tool modules into standalone fctool crate	2026-04-26 23:58:16 +08:00
frontend	feat(api): pre-compress static assets with brotli and gzip	2026-04-25 20:09:09 +08:00
git	fix: resolve 4 remaining "design decision" bugs	2026-04-27 11:20:38 +08:00
migrate	feat: thinking_content column + first-project budget logic	2026-04-26 13:11:06 +08:00
models	feat: thinking_content column + first-project budget logic	2026-04-26 13:11:06 +08:00
observability	feat(observability): use human-readable log format for terminals	2026-04-26 16:39:03 +08:00
queue	feat(room): store ordered streaming chunks + billing integration	2026-04-26 13:10:42 +08:00
room	fix: resolve 4 remaining "design decision" bugs	2026-04-27 11:20:38 +08:00
rpc	chore(rpc): regenerate after removing metrics endpoints	2026-04-24 13:22:01 +08:00
service	fix: additional bugs - push notification unwraps and as any cleanup	2026-04-27 11:01:59 +08:00
session
session_manager
transport
webhook