xiaoxia-saas

Author	SHA1	Message	Date
xiaoxia	b7a0d29b0d	P1-1: 一键生成P1级效果层补齐 - clip级转场/滤镜/片头片尾从模板映射 (#468 ) CI/CD Pipeline / Check if frontend-only change (push) Has been skipped Details CI/CD Pipeline / Frontend Lint (push) Successful in 42s Details CI/CD Pipeline / Unit Tests (push) Successful in 3m4s Details CI/CD Pipeline / Validate Code Quality And Tests (push) Successful in 3m7s Details CI/CD Pipeline / Integration Tests (push) Successful in 1m37s Details CI Build & Deploy Pipeline / Build Staging API Image (push) Has been cancelled Details CI Build & Deploy Pipeline / Build Staging Web Image (push) Has been cancelled Details CI Build & Deploy Pipeline / Build Staging Worker Image (push) Has been cancelled Details CI Build & Deploy Pipeline / Deploy Staging (Watchtower auto-deploy) (push) Has been cancelled Details CI Build & Deploy Pipeline / Staging E2E Tests (push) Has been cancelled Details CI Build & Deploy Pipeline / Staging API Integration Tests (push) Has been cancelled Details CI Build & Deploy Pipeline / Build Production API Image (push) Has been cancelled Details CI Build & Deploy Pipeline / Build Production Web Image (push) Has been cancelled Details CI Build & Deploy Pipeline / Build Production Worker Image (push) Has been cancelled Details CI Build & Deploy Pipeline / Deploy Production (push) Has been cancelled Details CI Build & Deploy Pipeline / Production Browser E2E (push) Has been cancelled Details Co-authored-by: xiaoxia <dev@xiaoxiajianji.com> Co-committed-by: xiaoxia <dev@xiaoxiajianji.com>	2026-07-17 13:59:04 +08:00
xiaoxia	fe2ab121e7	fix(security): 后端安全技术债务第二轮（P1+P2+P2） (#332 ) CI/CD Pipeline / Validate Code Quality And Tests (push) Failing after 40s Details CI/CD Pipeline / Unit Tests (push) Failing after 1m42s Details CI/CD Pipeline / Integration Tests (push) Successful in 1m20s Details CI/CD Pipeline / Frontend Lint (push) Has been cancelled Details CI/CD Pipeline / Build Staging API Image (push) Has been cancelled Details CI/CD Pipeline / Build Staging Worker Image (push) Has been cancelled Details CI/CD Pipeline / Build Staging Web Image (push) Has been cancelled Details CI/CD Pipeline / Deploy Staging (Watchtower auto-deploy) (push) Has been cancelled Details CI/CD Pipeline / Staging E2E Tests (push) Has been cancelled Details CI/CD Pipeline / Staging API Integration Tests (push) Has been cancelled Details CI/CD Pipeline / Build Production API Image (push) Has been cancelled Details CI/CD Pipeline / Build Production Worker Image (push) Has been cancelled Details CI/CD Pipeline / Build Production Web Image (push) Has been cancelled Details CI/CD Pipeline / Deploy Production (push) Has been cancelled Details CI/CD Pipeline / Production Browser E2E (push) Has been cancelled Details fix(security): 后端安全技术债务第二轮（P1+P2+P2） - audio_merger裸subprocess下沉 + ffmpeg_utils架构下沉到packages/shared - _verify_url_accessible重定向每跳SSRF校验 - url_security下载文件魔数校验 - 新增33个单测	2026-07-15 00:12:04 +08:00
灵应	a6ae041944	fix(test): 修正test_all_asset_ids_fail_raises的mock层级，三层filter改为两层 CI/CD Pipeline / Validate Code Quality And Tests (pull_request) Successful in 1m52s Details CI/CD Pipeline / Frontend Lint (pull_request) Successful in 2m3s Details CI/CD Pipeline / Build & Push Staging (Watchtower auto-deploy) (pull_request) Has been skipped Details CI/CD Pipeline / Build Production Runtime Images (pull_request) Has been skipped Details CI/CD Pipeline / Staging E2E Tests (pull_request) Has been skipped Details CI/CD Pipeline / Staging API Integration Tests (pull_request) Has been skipped Details CI/CD Pipeline / Deploy Production (pull_request) Has been skipped Details CI/CD Pipeline / Production Browser E2E (pull_request) Has been skipped Details CI/CD Pipeline / Integration Tests (pull_request) Successful in 2m16s Details	2026-07-12 11:03:48 +08:00
用户CI Test	6d1f4da112	refactor: 删除 _validate_asset_ids_ownership 死代码函数 CI/CD Pipeline / Frontend Lint (pull_request) Successful in 41s Details CI/CD Pipeline / Validate Code Quality And Tests (pull_request) Successful in 1m30s Details CI/CD Pipeline / Build & Push Staging (Watchtower auto-deploy) (pull_request) Has been skipped Details CI/CD Pipeline / Build Production Runtime Images (pull_request) Has been skipped Details CI/CD Pipeline / Staging E2E Tests (pull_request) Has been skipped Details CI/CD Pipeline / Staging API Integration Tests (pull_request) Has been skipped Details CI/CD Pipeline / Deploy Production (pull_request) Has been skipped Details CI/CD Pipeline / Production Browser E2E (pull_request) Has been skipped Details 该函数已在 P3-2 优化中合并到 _download_library_assets，不再被调用。同时删除 test_oneclick_gen_p0_fixes.py 中对应的 5 个测试用例，归属校验覆盖已由 test_generation_p3_optimizations.py 提供。	2026-07-10 08:33:18 +08:00
用户CI Test	ab413413b7	perf(P3): 三项代码审查优化 — strict模式/session合并/HEAD重试 CI/CD Pipeline / Frontend Lint (pull_request) Successful in 1m34s Details CI/CD Pipeline / Validate Code Quality And Tests (pull_request) Successful in 1m47s Details CI/CD Pipeline / Build & Push Staging (Watchtower auto-deploy) (pull_request) Has been skipped Details CI/CD Pipeline / Build Production Runtime Images (pull_request) Has been skipped Details CI/CD Pipeline / Staging E2E Tests (pull_request) Has been skipped Details CI/CD Pipeline / Staging API Integration Tests (pull_request) Has been skipped Details CI/CD Pipeline / Deploy Production (pull_request) Has been skipped Details CI/CD Pipeline / Production Browser E2E (pull_request) Has been skipped Details P3-1: _download_library_assets 增加 strict 参数（默认 true） - strict 模式：任意素材下载失败立即抛 RuntimeError - non-strict 模式：跳过失败素材返回成功列表，全部失败仍抛异常 - 归属校验合并到同一 DB session（P3-2），减少连接开销 P3-2: 移除 generate_video 中独立的 _validate_asset_ids_ownership 调用 - 归属校验已内联到 _download_library_assets 同一 session 中 P3-3: _verify_url_accessible 增加 HEAD 重试（默认 2 次，间隔 1s） - 防止 OSS 抖动导致误报不可访问新增 15 个单元测试覆盖三项优化更新 1 个旧测试适配新 strict 模式错误信息 Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>	2026-07-10 07:42:39 +08:00
用户CI Test	c947abc038	fix: 一键生成 P0 修复 + P1 校验 CI/CD Pipeline / Validate Code Quality And Tests (pull_request) Successful in 1m10s Details CI/CD Pipeline / Frontend Lint (pull_request) Successful in 3m40s Details CI/CD Pipeline / Build & Push Staging (Watchtower auto-deploy) (pull_request) Has been skipped Details CI/CD Pipeline / Build Production Runtime Images (pull_request) Has been skipped Details CI/CD Pipeline / Staging E2E Tests (pull_request) Has been skipped Details CI/CD Pipeline / Staging API Integration Tests (pull_request) Has been skipped Details CI/CD Pipeline / Deploy Production (pull_request) Has been skipped Details CI/CD Pipeline / Production Browser E2E (pull_request) Has been skipped Details P0-1: _download_library_assets 支持双模式查询（asset_library_id / project_id）下载失败时抛出 RuntimeError，不再静默忽略 P0-2: OSS 上传失败抛异常 + 上传后 HEAD 校验 URL 可访问性 P0-3: run_ffmpeg 失败时完整 stderr 打到日志（排查 exit code 183） _execute_ffmpeg 额外记录 filter_complex 便于诊断 P1: template_id 存在性校验（不存在/已禁用 → ValueError） asset_ids 归属校验（不属于指定项目/素材库 → ValueError）新增 16 个单元测试覆盖全部修复点，全量 1170 测试通过无回归	2026-07-10 00:28:47 +08:00

6 Commits