66bb0d87ab
fix(security): 删除 .env.production 并清理硬编码密码
...
ci/cd Manually approved by coordinator
CI/CD Pipeline / Validate Code Quality And Tests (pull_request) Has been cancelled
CI/CD Pipeline / Frontend Lint (pull_request) Has been cancelled
- 删除 .env.production（含占位符密钥，已从版本控制移除）
- scripts/smoke_public_*.py: 密码改为从环境变量 SMOKE_TEST_PASSWORD 读取
- infra/docker/infra.yml: POSTGRES_PASSWORD 改为引用环境变量
- packages/application/auth/jwt_handler.py: 文档示例密钥改为占位符
2026-06-27 18:10:52 +08:00
xiaoxia
f7d109830a
Merge pull request 'fix: 修复后端 8 项审计问题 (P1/P2)' ( #51 ) from fix/audit-backend-p1p2 into develop
CI/CD Pipeline / Validate Code Quality And Tests (push) Has been cancelled
CI/CD Pipeline / Frontend Lint (push) Has been cancelled
2026-06-27 17:20:32 +08:00
9d70d5d056
feat( #31 ): 添加密钥轮换机制支持
...
CI/CD Pipeline / Validate Code Quality And Tests (pull_request) Has been cancelled
CI/CD Pipeline / Frontend Lint (pull_request) Has been cancelled
- 添加 JWT_SECRET_KEY_OLD 配置项支持双密钥平滑迁移
- 添加 SECRET_ROTATION_DAYS 配置项(默认90天)提示轮换周期
- 创建 docs/KEY-ROTATION.md 密钥轮换操作指南文档
- 包含完整的轮换流程和注意事项
2026-06-27 17:20:17 +08:00
0ac81bfb1b
fix( #25 ): 移除硬编码 localhost:3000
...
- 添加 APP_BASE_URL 配置项到 Settings
- auth.py 中改用 settings.APP_BASE_URL
- register_user_use_case.py 和 password_reset_use_case.py 移除默认值
- base_url 参数改为必须由调用方传入
- 更新 .env.example 添加 APP_BASE_URL
2026-06-27 17:20:17 +08:00
ebe5babccd
fix(#23,#24): 统一 storage_key/file_url 命名和 file_size 类型
...
- AssetModel: 添加 storage_key 字段注释说明为 OSS 对象键
- AssetModel/GeneratedVideoModel: file_size 从 Float 改为 Integer
- 添加 file_url 字段注释说明为完整可访问 URL
- 确保字节数精度，避免浮点数精度问题
2026-06-27 17:20:17 +08:00
c6010f490a
fix( #12 ): 实现 refresh token 查找功能
...
- 完善 _find_session_by_refresh_token() 方法
- 使用 session_store.get_session_by_refresh_token() 直接查询
- 利用 Redis 反向索引实现 O(1) 查找复杂度
2026-06-27 17:20:17 +08:00
bc01d7ee6c
fix( #17 ): 调整数据库连接池配置
...
- 将 DATABASE_MAX_OVERFLOW 从 40 调整为 10
- pool_size(20) + max_overflow(10) = 最大 30 连接
- 添加注释说明连接池配置
2026-06-27 17:20:17 +08:00
xiaoxia
1cbf8ce042
Merge pull request 'fix: 修复前端审计问题 (#26-28)' ( #50 ) from fix/audit-frontend-p2 into develop
CI/CD Pipeline / Validate Code Quality And Tests (push) Has been cancelled
CI/CD Pipeline / Frontend Lint (push) Has been cancelled
2026-06-27 17:19:51 +08:00
xiaoxia
70fe068fd3
Merge pull request 'fix: Redis session env fix + JWT import path fix (登录失败根因修复)' ( #52 ) from hotfix/redis-session-env-fix into develop
CI/CD Pipeline / Validate Code Quality And Tests (push) Has been cancelled
CI/CD Pipeline / Frontend Lint (push) Has been cancelled
2026-06-27 17:18:11 +08:00
xiaoxia
88c02e1532
fix: 修复 jwt_service.py 错误的 settings 导入路径导致登录 401
...
CI/CD Pipeline / Validate Code Quality And Tests (push) Has been cancelled
CI/CD Pipeline / Frontend Lint (push) Has been cancelled
CI/CD Pipeline / Validate Code Quality And Tests (pull_request) Has been cancelled
CI/CD Pipeline / Frontend Lint (pull_request) Has been cancelled
- packages.config.settings 模块不存在，改为 from app.config import settings
- 此 bug 导致 JWT token 生成时 ModuleNotFoundError，被 except 捕获后返回通用 401
2026-06-27 17:17:38 +08:00
xiaoxia
e068e301a1
fix: 统一 ENABLE_REDIS_SESSIONS 命名，修复登录因 AttributeError 导致 500
CI/CD Pipeline / Validate Code Quality And Tests (push) Has been cancelled
CI/CD Pipeline / Frontend Lint (push) Has been cancelled
2026-06-27 17:05:48 +08:00
c41406b4da
fix: remove duplicate route configuration
...
CI/CD Pipeline / Validate Code Quality And Tests (pull_request) Has been cancelled
CI/CD Pipeline / Frontend Lint (pull_request) Has been cancelled
Issue #28 : Clean up duplicate routes
- Removed duplicate 'profile/settings' route that pointed to same Settings component
- 'profile' route is now the single route for settings page
2026-06-27 17:01:31 +08:00
f65ae2f607
fix: remove console.log statements from frontend code
...
Issue #26 : Clean up console.log debug statements in production code
- Removed debug console.log from Plans.tsx (subscription page)
- Removed debug console.log from ProjectGeneration.tsx (workspace page)
- Kept console.error for error logging
2026-06-27 16:59:43 +08:00
xiaoxia
74662c3bf6
Merge pull request 'fix: correct ENABLE_REDIS_SESSIONS typo to ENABLE_REDIS_SESSION' ( #46 ) from fix/enable-redis-session-typo into develop
...
CI/CD Pipeline / Validate Code Quality And Tests (push) Has been cancelled
CI/CD Pipeline / Frontend Lint (push) Has been cancelled
Merge pull request #46 : fix ENABLE_REDIS_SESSIONS typo
2026-06-27 14:46:20 +08:00
xiaoxia
4e0f65ed03
fix: correct ENABLE_REDIS_SESSIONS typo to ENABLE_REDIS_SESSION
CI/CD Pipeline / Validate Code Quality And Tests (pull_request) Has been cancelled
CI/CD Pipeline / Frontend Lint (pull_request) Has been cancelled
2026-06-27 14:45:50 +08:00
xiaoxia
3f384fa8f9
Merge pull request 'fix: 修复部署v0.1.64 - SmartEditPlanGenerator迁移 + 移除workspaces死路由' ( #45 ) from fix/deployment-v0.1.64-hotfix into develop
CI/CD Pipeline / Validate Code Quality And Tests (push) Has been cancelled
CI/CD Pipeline / Frontend Lint (push) Has been cancelled
2026-06-27 12:44:38 +08:00
4068a91413
fix: move SmartEditPlanGenerator to domain layer, remove dead workspaces route
CI/CD Pipeline / Validate Code Quality And Tests (pull_request) Has been cancelled
CI/CD Pipeline / Frontend Lint (pull_request) Has been cancelled
2026-06-27 12:44:04 +08:00
4db830b247
fix: remove Workspace from domain __init__ (class removed but import remained)
2026-06-27 12:09:16 +08:00
xiaoxia
a7e17c8043
Merge pull request 'fix: 消除 API↔Worker 跨端依赖（架构解耦）' ( #44 ) from fix/architecture-decouple into develop
CI/CD Pipeline / Validate Code Quality And Tests (push) Has been cancelled
CI/CD Pipeline / Frontend Lint (push) Has been cancelled
2026-06-27 11:16:03 +08:00
xiaoxia
113d87af0e
Merge pull request 'fix: 修复数据库迁移版本冲突 (007→008→009)' ( #43 ) from fix/migration-repair into develop
CI/CD Pipeline / Validate Code Quality And Tests (push) Has been cancelled
CI/CD Pipeline / Frontend Lint (push) Has been cancelled
2026-06-27 11:15:53 +08:00
xiaoxia
d3c6b94b86
Merge pull request 'fix: resolve all workspace removal breakage - stub permissions, quota, ports, adapters' ( #42 ) from fix/workspace-removal-compat into develop
CI/CD Pipeline / Validate Code Quality And Tests (push) Has been cancelled
CI/CD Pipeline / Frontend Lint (push) Has been cancelled
2026-06-27 11:15:40 +08:00
49665496aa
feat: decouple API and Worker cross-service dependencies
CI/CD Pipeline / Validate Code Quality And Tests (pull_request) Has been cancelled
CI/CD Pipeline / Frontend Lint (pull_request) Has been cancelled
2026-06-27 10:22:25 +08:00
b16f3243f8
fix: resolve alembic migration version conflict (007)
...
CI/CD Pipeline / Validate Code Quality And Tests (pull_request) Has been cancelled
CI/CD Pipeline / Frontend Lint (pull_request) Has been cancelled
Problem:
- Two migrations had revision ID 007 causing conflict:
- 007_add_editing_mode.py
- 007_add_video_dedup_fields.py
- 007_remove_workspace_concept had incorrect down_revision
Solution:
- Keep 007_add_editing_mode.py as revision=007 (first created)
- Rename 007_add_video_dedup_fields.py -> 008_add_video_dedup_fields.py
with revision=008, down_revision=006
- Rename 007_remove_workspace_concept.py -> 009_remove_workspace_concept.py
with revision=007_remove_workspace_concept, down_revision=008
Migration chain: 006 -> 007 -> 008 -> 009_remove_workspace_concept
2026-06-27 10:21:12 +08:00
1c7c9958ce
fix: add lazy jwt_service singleton proxy
CI/CD Pipeline / Validate Code Quality And Tests (pull_request) Has been cancelled
CI/CD Pipeline / Frontend Lint (pull_request) Has been cancelled
2026-06-27 09:54:28 +08:00
37a3654eea
fix: add missing project_title_repository port
CI/CD Pipeline / Validate Code Quality And Tests (pull_request) Has been cancelled
CI/CD Pipeline / Frontend Lint (pull_request) Has been cancelled
2026-06-27 09:51:37 +08:00
cb7f272c6d
fix: remove WorkspaceMember entity import from stub
CI/CD Pipeline / Validate Code Quality And Tests (pull_request) Has been cancelled
CI/CD Pipeline / Frontend Lint (pull_request) Has been cancelled
2026-06-27 09:48:56 +08:00
0ab8586c4f
fix: replace workspace_member_repository with stub (no model dependency)
CI/CD Pipeline / Validate Code Quality And Tests (pull_request) Has been cancelled
CI/CD Pipeline / Frontend Lint (pull_request) Has been cancelled
2026-06-27 09:46:42 +08:00
e8d8165c96
fix: correct dataclass field ordering and create() param order in generated_video and generation_task
...
CI/CD Pipeline / Validate Code Quality And Tests (pull_request) Has been cancelled
CI/CD Pipeline / Frontend Lint (pull_request) Has been cancelled
- Move workspace_id after required fields in both dataclass and create()
- Fix indentation in create() method body
- Add missing timezone import in generation_task.py
2026-06-27 09:44:24 +08:00
16043717b8
fix: resolve all workspace removal breakage - stub permissions, quota, ports, adapters
...
CI/CD Pipeline / Validate Code Quality And Tests (pull_request) Has been cancelled
CI/CD Pipeline / Frontend Lint (pull_request) Has been cancelled
- Remove Workspace from domain/__init__.py exports
- Stub domain/permissions.py (all checks pass)
- Stub domain/quota.py (all checks pass)
- Create missing port stubs: workspace_member_repository, workspace_repository, workspace_invitation_repository
- Create missing adapter stubs: workspace_repository, workspace_invitation_repository
- Create routes/permissions.py stub (require_workspace_member no-op)
- Fix .env Redis URL encoding on production server
2026-06-27 09:16:53 +08:00
019cb195a7
fix: add workspace_id compatibility for removed workspace concept
2026-06-27 08:43:02 +08:00
xiaoxia
b615e52c13
Merge pull request 'refactor(web): remove workspace-related frontend code' ( #41 ) from refactor/remove-workspace-code into develop
...
CI/CD Pipeline / Validate Code Quality And Tests (push) Has been cancelled
CI/CD Pipeline / Frontend Lint (push) Has been cancelled
Merge PR #41 : remove workspace frontend code into develop
2026-06-27 07:35:56 +08:00
0689bd956f
refactor(web): remove workspace-related frontend code after backend removal
CI/CD Pipeline / Validate Code Quality And Tests (pull_request) Has been cancelled
CI/CD Pipeline / Frontend Lint (pull_request) Has been cancelled
2026-06-27 07:34:29 +08:00
xiaoxia
f9675f95df
Merge pull request 'refactor: sync workspace removal to main' ( #40 ) from develop into main
Auto Merge PRs / auto-merge (push) Failing after 0s
CI/CD Pipeline / Validate Code Quality And Tests (push) Has been cancelled
CI/CD Pipeline / Frontend Lint (push) Has been cancelled
2026-06-27 00:51:51 +08:00
xiaoxia
34f6a6cde9
Merge pull request 'docs: add release process and update git workflow' ( #39 ) from chore/unify-ci-runners into develop
CI/CD Pipeline / Validate Code Quality And Tests (push) Has been cancelled
CI/CD Pipeline / Frontend Lint (push) Has been cancelled
CI/CD Pipeline / Validate Code Quality And Tests (pull_request) Has been cancelled
CI/CD Pipeline / Frontend Lint (pull_request) Has been cancelled
2026-06-27 00:51:02 +08:00
c0f6c148a3
fix: update default APP_VERSION to 0.1.61
CI/CD Pipeline / Validate Code Quality And Tests (pull_request) Has been cancelled
CI/CD Pipeline / Frontend Lint (pull_request) Has been cancelled
2026-06-27 00:42:24 +08:00
d6a30bd4eb
feat: add auto-merge scripts and CI failure notification
...
CI/CD Pipeline / Validate Code Quality And Tests (pull_request) Has been cancelled
CI/CD Pipeline / Frontend Lint (pull_request) Has been cancelled
- Auto merge script for PRs targeting develop/main
- CI failure check script
- Gitea Actions workflow for scheduled auto-merge
- Cron jobs for periodic execution
2026-06-27 00:42:05 +08:00
44e9ef362a
chore: unify CI/CD runner labels to runtime-builder:host
2026-06-27 00:41:39 +08:00
c96ac31132
chore: remove redundant .github/workflows (using Gitea Actions)
CI/CD Pipeline / Frontend Lint (push) Failing after 0s
CI/CD Pipeline / Frontend Lint (pull_request) Failing after 0s
CI/CD Pipeline / Validate Code Quality And Tests (push) Has been cancelled
CI/CD Pipeline / Validate Code Quality And Tests (pull_request) Has been cancelled
2026-06-27 00:41:09 +08:00
xiaoxia
c72675a594
Merge pull request 'Merge develop to main - Release PR' ( #37 ) from develop into main
Deploy / Deploy Staging (push) Failing after 1m28s
Deploy / Build Production Runtime Images (push) Has been skipped
Deploy / Deploy Production (push) Has been skipped
Deploy / Production Browser E2E (push) Has been skipped
CI/CD Pipeline / Validate Code Quality And Tests (push) Has been cancelled
2026-06-27 00:24:48 +08:00
e2e0194eda
Merge branch 'pr-35' into develop
Deploy / Deploy Staging (push) Failing after 1m47s
Deploy / Build Production Runtime Images (push) Has been skipped
Deploy / Deploy Production (push) Has been skipped
Deploy / Production Browser E2E (push) Has been skipped
CI/CD Pipeline / Validate Code Quality And Tests (push) Has been cancelled
CI/CD Pipeline / Validate Code Quality And Tests (pull_request) Has been cancelled
2026-06-27 00:23:55 +08:00
d6f28e8f37
feat: 标准化部署流程和文档化
...
CI/CD Pipeline / Validate Code Quality And Tests (push) Has been cancelled
CI/CD Pipeline / Validate Code Quality And Tests (pull_request) Has been cancelled
- 添加 docs/deployment.md 完整部署文档，包含：
- 环境要求
- 首次部署流程
- 版本更新流程
- 回滚流程
- 常见问题排查
- 环境变量说明
- 添加标准化部署脚本：
- scripts/deploy_production.sh: 生产环境部署脚本
- scripts/deploy_staging.sh: 预发布环境部署脚本
- scripts/rollback.sh: 回滚脚本（支持交互式和命令行模式）
- 完善 infra/docker/compose.yml：
- 添加详细注释说明
- 添加资源限制建议（注释）
- 记录 web volume 挂载的注意事项（避免 403 问题）
- 添加 .github/workflows/release.yml：
- 完整的发布流程
- 构建所有三个镜像（api、worker、web）
- 自动部署到生产环境
- E2E 测试和 GitHub Release 创建
2026-06-27 00:09:46 +08:00
xiaoxia
a22fad9dd6
fix: 创建 API 和 Worker Dockerfiles
...
CI/CD Pipeline / Validate Code Quality And Tests (pull_request) Has been cancelled
- 创建 infra/docker/api.Dockerfile 用于 FastAPI 应用
- 创建 infra/docker/worker.Dockerfile 用于 Celery Worker
- 使用 python:3.12-slim-bookworm 作为基础镜像
- Worker 包含 ffmpeg 和 opencv 依赖（用于视频处理）
- API 包含 PostgreSQL 开发库（用于 psycopg2 编译）
- 分离镜像减少不必要的依赖
2026-06-27 00:04:15 +08:00
xiaoxia
f626dff4e7
fix: Web Dockerfile API URL 改为通用默认值
...
CI/CD Pipeline / Validate Code Quality And Tests (pull_request) Has been cancelled
- 将硬编码的 VITE_API_URL=http://47.98.113.167:8000 改为 https://saas-api.xiaoxiajianji.com
- 支持通过 --build-arg VITE_API_URL=xxx 在构建时覆盖默认值
2026-06-27 00:02:34 +08:00
xiaoxia
116ef1d7ce
fix: 修复 DATABASE_POOL_RECYLE 拼写错误 -> DATABASE_POOL_RECYCLE
...
CI/CD Pipeline / Validate Code Quality And Tests (pull_request) Has been cancelled
- 将配置变量名从 DATABASE_POOL_RECYLE 更改为 DATABASE_POOL_RECYCLE
- 修正了拼写错误，使配置与标准 SQLAlchemy 命名一致
2026-06-27 00:01:44 +08:00
xiaoxia
e68aa5f759
Merge pull request 'fix: 统一编辑模式枚举名并删除重复workflow' ( #32 ) from develop into main
Deploy / Deploy Staging (push) Successful in 1m25s
Deploy / Build Production Runtime Images (push) Has been skipped
Deploy / Deploy Production (push) Has been skipped
Deploy / Production Browser E2E (push) Has been skipped
CI/CD Pipeline / Validate Code Quality And Tests (push) Has been cancelled
2026-06-26 23:12:45 +08:00
1dd1dca473
fix: 统一编辑模式枚举名并删除重复workflow
...
Deploy / Deploy Staging (push) Successful in 1m45s
Deploy / Build Production Runtime Images (push) Has been skipped
Deploy / Deploy Production (push) Has been skipped
Deploy / Production Browser E2E (push) Has been skipped
CI/CD Pipeline / Validate Code Quality And Tests (push) Has been cancelled
CI/CD Pipeline / Validate Code Quality And Tests (pull_request) Has been cancelled
1. 修复 edit_plan_generator.py 中的枚举名与 editing_modes.py 保持一致:
- ONE_TAKE: one-take -> one_take
- VOICEOVER -> VOICE_OVER: voiceover -> voice_over
2. 更新相关文档字符串和注释
3. 删除重复的 .gitea/workflows/tests.yml (ci-cd.yml 已包含完整测试)
2026-06-26 23:12:06 +08:00
xiaoxia
f510e044dd
Merge pull request 'fix(web): disable noUnusedLocals/noUnusedParameters' ( #7 ) from develop into main
Deploy / Deploy Staging (push) Successful in 1m33s
Deploy / Build Production Runtime Images (push) Has been skipped
Deploy / Deploy Production (push) Has been skipped
Deploy / Production Browser E2E (push) Has been skipped
CI/CD Pipeline / Validate Code Quality And Tests (push) Has been cancelled
Tests / test (push) Has been cancelled
Tests / lint (push) Has been cancelled
2026-06-26 23:04:31 +08:00
d9bcd351e5
add-opencv-dep
Deploy / Deploy Staging (push) Successful in 1m21s
Deploy / Build Production Runtime Images (push) Has been skipped
Deploy / Deploy Production (push) Has been skipped
Deploy / Production Browser E2E (push) Has been skipped
CI/CD Pipeline / Validate Code Quality And Tests (push) Has been cancelled
CI/CD Pipeline / Validate Code Quality And Tests (pull_request) Has been cancelled
Tests / test (pull_request) Has been cancelled
Tests / lint (pull_request) Has been cancelled
2026-06-26 23:00:29 +08:00
a6dbd6c93a
chore: update requirements.txt
Deploy / Deploy Staging (push) Successful in 1m17s
Deploy / Build Production Runtime Images (push) Has been skipped
Deploy / Deploy Production (push) Has been skipped
Deploy / Production Browser E2E (push) Has been skipped
CI/CD Pipeline / Validate Code Quality And Tests (push) Has been cancelled
Tests / test (push) Has been cancelled
Tests / lint (push) Has been cancelled
CI/CD Pipeline / Validate Code Quality And Tests (pull_request) Has been cancelled
Tests / test (pull_request) Has been cancelled
Tests / lint (pull_request) Has been cancelled
2026-06-26 22:46:59 +08:00
b23bb8410f
fix: 修复 dedup.py 语法错误和 pHash DCT 实现，修复 chunked_upload.py 缩进错误
CI/CD Pipeline / Validate Code Quality And Tests (push) Has been cancelled
Deploy / Build Production Runtime Images (push) Has been cancelled
Deploy / Deploy Production (push) Has been cancelled
Deploy / Production Browser E2E (push) Has been cancelled
Deploy / Deploy Staging (push) Has been cancelled
CI/CD Pipeline / Validate Code Quality And Tests (pull_request) Has been cancelled
Tests / test (pull_request) Has been cancelled
Tests / lint (pull_request) Has been cancelled
2026-06-26 22:46:21 +08:00
XiaoXia Bot
xiaoxia