31 Commits

Author	SHA1	Message	Date
CI Bot	f21d981585	style: auto-format with black + isort + prettier	2026-07-23 15:57:09 +00:00
xiaoxia	ed21ee11d2	refactor(#776): 统一配置入口，建立packages/config消除重复定义 (#791)	2026-07-23 23:55:01 +08:00
CI Bot	a2bddf726e	style: auto-format with black + isort + prettier	2026-07-23 15:05:23 +00:00
xiaoxia	956d90c5c2	refactor(#774): 统一配置管理，消除重复定义和默认值不一致	2026-07-23 22:17:50 +08:00
CI Bot	545293fe5c	feat(#674): 豆包大模型 Phase 3 - AI推荐片段编排 + 客户端抽共享层 ... - 豆包客户端抽 packages/shared/ai_client.py，API和Worker共用 - 配置移到 SharedSettings，两边统一读取 - Worker AI推荐接入豆包大模型，替换原stub - 智能编排：intro/showcase/outro 三段式结构 + 转场分配 - 降级机制：无Key/调用失败/解析失败均回退本地规则 - 响应解析：格式校验+字段兜底+非法asset过滤+order排序重编号 - 新增22个worker AI单测 + 调整41个API单测mock - 累计63个AI单测全部通过	2026-07-23 14:05:15 +08:00
xiaoxia	ad3e2f4834	feat(#674): 接入豆包大模型 Phase 1 - 智能标题生成 + 统一AI服务层 (#752)	2026-07-23 13:17:39 +08:00
CI Bot	a3967c6829	Phase 4 Backend P0 cleanup ... 1. Remove unused aiosmtplib dependency from requirements.txt 2. Remove 5 unused config items (API_PREFIX, REDIS_MAX_CONNECTION, JWT_SECRET_KEY_OLD, SECRET_ROTATION_DAYS, LOG_LEVEL) from config.py, .env.production.example, and init_production_env.sh. Kept ENABLE_REDIS_SESSIONS (actively used in dependencies.py). 3. Fix project permission check TODOs in test_error_scenarios.py — permissions are implemented, updated assertions to expect 403. 4. Merge two Storage implementations into shared package: - packages/shared/storage.py: merged API features (HTTPS endpoint fix, diagnose(), detailed logging) into SharedStorageService - apps/api/app/core/storage.py: thin re-export wrapper for backward compatibility - Updated test mocks to target packages.shared.storage	2026-07-13 17:45:37 +08:00
CI Bot	0634fc4833	fix: 修复 OSS_ENDPOINT 拼写错误 aliiyuncs → aliyun ... OSS_ENDPOINT 默认值中的域名拼写错误： - 错误：oss-cn-hangzhou.aliiyuncs.com（多了一个 i） - 正确：oss-cn-hangzhou.aliyuncs.com 同步修复： - apps/api/app/config.py - packages/shared/config.py - tests/unit/test_config_oss.py	2026-07-13 15:10:43 +08:00
CI Bot	9c6c477f55	fix(backend): Phase 1 后端代码清理与修复 ... P0 关键修复: - P0-1: 注册接口添加 RateLimitMiddleware 限流保护 - P0-3: /metrics 端点添加 JWT 认证（移除匿名访问） - P0-4: 修复 Celery 任务名冲突（generation_task vs generate_video） - P1-5: JWT logout token 黑名单机制 P1 修复: - P1-1: forgot_password 硬编码 localhost → 使用 settings.APP_BASE_URL - P1-2: generation.py 直接创建 DB 连接 → 使用依赖注入 - P1-6: Image.open() 未关闭 → 统一使用 with 语句 - P1-7: 订阅续费事务修复 P2 代码质量: - P2-1: 修复 EditingMode 枚举重复定义 → 统一引用 shared 包 - P2-2: 修复 SMTP_FRON_NAME → SMTP_FROM_NAME 拼写 - P2-3: UserModel subscription_quota 类型统一为 float - P2-4: .env.production DATABASE_MAX_OVERFLOW 30 → 10 - 清理 15 处 except:pass（保留 2 处有注释说明的） - 禁用 SVG 上传（XSS 风险） - 删除 decode_token_unsafe() 不安全函数 - 简化 /ready 端点 - 删除 8 处死代码、10 个空文件/模块 - 合并 3 对 100% 重复函数 - 对齐 6 个废弃环境变量 v2 修复（代码审查后）: - 修复密码重置路由路径: /password/forgot → /forgot-password, /password/reset → /reset-password（与前端 API 对齐） - 合并 _check_project_access: asset_libraries.py 和 edit_plans.py 中的重复函数统一到 _helpers.py（含空字符串守卫 + 中文错误信息） - 顺手修复: HTTPException 统一从 fastapi 导入（替换 starlette 导入） - OSS_ENDPOINT 拼写修复拆分为单独 PR，本 PR 不包含	2026-07-13 13:50:52 +08:00
xiaoxia	8427bb6852	feat(unified-render): Phase 2 - Feature Flag + RenderAdapter 适配层 (#231) ... ## 统一渲染引擎 Phase 2 - Feature Flag 开关 + 适配层 ### 变更内容 1. **Feature Flag 开关** - API 端 `Settings.RENDER_ENGINE`（默认 `legacy`） - Worker 端 `WorkerSettings.render_engine`（默认 `legacy`） - 支持环境变量 `RENDER_ENGINE=unified` 一键切换 2. **RenderAdapter 适配层** (`apps/worker/video_processing/render_adapter.py`) - EditPlan + EditPlanClips → UnifiedRenderService 输入的完整适配 - 素材自动下载（OSS → 本地路径映射） - 进度回调对接（ProgressCallback） - 结果自动上传 OSS - `validate_plan()` 兼容旧接口，便于灰度切换 3. **compose_video 任务改造** - 根据 `RENDER_ENGINE` 配置分流到 legacy / unified 路径 - 新引擎结果回写字段对齐（engine/width/height/file_size） - 错误处理与重试逻辑保持一致 ### 测试 - 新增 16 个单元测试：validate_plan(7) + render_plan(6) + download_assets(3) - 原有 52 个 unified_render_service 测试全部通过 - 合计 **68 个测试全绿** ### 灰度策略 - 默认 `legacy`，不影响现有功能 - 灰度时设置环境变量 `RENDER_ENGINE=unified` 即可切换 - 后续可支持按 plan_id / user_id 灰度（Phase 3） --------- Co-authored-by: 灵应 <lingying@coze.email> Reviewed-on: #231	2026-07-12 19:43:08 +08:00
xiaoxia	f5d3482fa9	fix: P0-2 OSS 凭证启动验证 + 诊断日志 (#209)	2026-07-10 18:15:42 +08:00
xiaoxia	52ff2f80ad	style: apply black formatting to pass CI validation (#126)	2026-06-30 17:23:08 +08:00
Audit Bot	e6ecce79ee	fix: rename OSS_DIRECT_UPLOAD_EXPRESS_SECRET to OSS_DIRECT_UPLOAD_EXPIRE_SECONDS ... Root cause of upload endpoint 500 errors: - config.py defined OSS_DIRECT_UPLOAD_EXPRESS_SECRET (wrong name) - upload.py accessed settings.OSS_DIRECT_UPLOAD_EXPIRE_SECONDS (correct name) - AttributeError on every call to prepare_direct_upload → 500 This fixes both /api/v1/upload/prepare-direct-upload and any other upload endpoints that reference the expire seconds config.	2026-06-30 09:24:27 +08:00
Audit Bot	b98c83582b	fix: 上传文件大小限制从 800MB 提升至 2000MB ... P0 修复: - config.py: OSS_DIRECT_UPLOAD_MAX_MB 默认值从 800 改为 2000 - config.py: 添加 AliasChoices 支持 MAX_UPLOAD_SIZE_MB 环境变量 （.env.production 中 MAX_UPLOAD_SIZE_MB=2000 现在可被正确读取） P1 修复: - infra/nginx/xiaoxia-saas.conf: client_max_body_size 800m → 2g（3处） - infra/docker/nginx-production.conf: client_max_body_size 800m → 2g	2026-06-29 22:11:22 +08:00
CI Test	095e3b5d00	fix(P2-2): SMTP_FRON_NAME 拼写错误修正为 SMTP_FROM_NAME	2026-06-28 10:26:28 +08:00
Audit Bot	b58388dec0	fix(#17): 调整数据库连接池配置 ... - 将 DATABASE_MAX_OVERFLOW 从 40 调整为 10 - pool_size(20) + max_overflow(10) = 最大 30 连接 - 添加注释说明连接池配置	2026-06-27 17:20:17 +08:00
xiaoxia	a6e85092ce	fix: 统一 ENABLE_REDIS_SESSIONS 命名，修复登录因 AttributeError 导致 500	2026-06-27 17:05:48 +08:00
CI Bot	9f6ed89c09	fix: update default APP_VERSION to 0.1.61	2026-06-27 00:42:24 +08:00
xiaoxia	b966d24ecf	fix: resolve CI check failures - format code and add nosec comment	2026-06-26 18:00:11 +08:00
xiaoxia	c04b57a1f8	fix(security): P0 - JWT密钥强制环境变量，拒绝默认值	2026-06-26 17:43:35 +08:00
Xiaoxia AI	6e42f944c0	feat(upload): add OSS direct upload flow	2026-06-23 15:47:03 +08:00
Xiaoxia AI	ea92092d12	chore(security): triage bandit findings	2026-06-21 13:38:46 +08:00
Xiaoxia AI	3594cc1216	refactor(auth): configure external service adapters	2026-06-21 11:04:07 +08:00
Xiaoxia AI	bfbaddbd9a	style: normalize python formatting gates	2026-06-21 06:52:19 +08:00
Xiaoxia AI	0809a079c5	refactor(db): introduce alembic schema baseline	2026-06-21 06:48:16 +08:00
Xiaoxia AI	57310f33d4	fix(auth): harden simple auth and router imports	2026-06-21 00:27:58 +08:00
Xiaoxia AI	94dd60108c	refactor: 彻底迁移到阿里云 OSS 并重构基础设施 ... - 删除 MinIO 依赖，改用阿里云 OSS (oss2) - 重写存储服务 storage.py（完全兼容原接口） - 更新配置：config.py 改为 OSS_* 配置项 - 重构 Docker Compose：分离基础设施（infra.yml）和应用（compose.yml） - 添加健康检查和自动重启配置 - 创建标准化部署脚本（init-server.sh + deploy.sh） - 统一 Nginx 配置（主域名 api.xiaoxiajianji.com） - 修复 Web Dockerfile 端口映射（80 not 3000） 服务器清理完成： - 删除旧云控制台、监控系统、桌面版代码 - 删除 2.6GB 旧安装包 - 清理 Docker 缓存 2.5GB - 磁盘使用率从 48% 降至 26%	2026-06-20 15:24:24 +08:00
Xiaoxia AI	8d78798a7d	fix(phase7): align api runtime wiring for integration	2026-06-17 18:48:08 +08:00
Xiaoxia AI	81aaef4fb9	feat(config): add environment configuration management ... - Add comprehensive environment configuration guide - Create .env.development for development setup - Create .env.production.example as production template - Add LOG_LEVEL configuration to Settings - Add .env.production to .gitignore - Support multiple environments: dev/test/staging/prod - Include security best practices and checklists Phase 4 Task 43/68 completed	2026-06-17 08:38:13 +08:00
Xiaoxia AI	015fe3d507	feat(config): add database switch between InMemory and PostgreSQL ... - Add USE_IN_MEMORY_DB config flag - Auto-select repository implementation based on config - InMemory: for development and testing (no setup needed) - PostgreSQL: for production (persistent data) - Update DependencyContainer to support both - Add documentation for switching databases - Update .env.example with new config Phase 4 Task 36/68 completed	2026-06-17 08:25:20 +08:00
Xiaoxia AI	37836b2755	feat(app): add FastAPI main application and configuration ... - Create main.py with CORS and GZip middleware - Add Settings class with all configuration options - Support .env file for environment variables - Add health check and root endpoints - Create comprehensive README with quick start guide - Add .env.example template - Include API usage examples and troubleshooting Phase 4 Task 30/68 completed	2026-06-17 07:42:22 +08:00