70 Commits

Author	SHA1	Message	Date
xiaoxia	dfb41452cb	Merge pull request '[P1 Hotfix] 修复登录故障 - password_hasher导入错误' (#180) from hotfix/fix-login-p1-import-error into develop	2026-07-03 09:42:48 +08:00
CI Test	3f8091e597	fix(security): 删除 decode_token_unsafe() 方法，消除不安全的 JWT 解码	2026-07-03 09:42:21 +08:00
灵应	ed3ab22b88	fix: 修复登录P1故障 - password_hasher导入错误 ... 根因：login_use_case.py 第14行错误地导入了模块而非实例 - 错误: from packages.application.auth import password_hasher - 正确: from packages.application.auth.password_hasher import password_hasher 这导致调用 password_hasher.verify_password() 时抛出 AttributeError: module 'packages.application.auth.password_hasher' has no attribute 'verify_password' 异常被 except Exception 捕获后返回 'Login failed: ...'，最终显示为 '邮箱或密码错误'，所有用户均无法登录。 修复后导入正确的 PasswordHasher 实例，登录功能恢复正常。 P1 紧急修复	2026-07-03 08:34:06 +08:00
灵应	e539105256	fix: 3.09 审计问题修复 — P1-1 TTS Celery 执行器 + P2-1~P2-4 ... P1-1 (阻塞性): TTS 合成完整异步链路 - CosyVoiceService 新增 submit_synthesize_task() + poll_synthesize_task() - 新建 TTSWorkflowService 编排层 (packages/application/tts_job/workflow.py) - 新建 Celery 任务 process_tts_synthesis (apps/worker/worker_app/tasks/tts_synthesis.py) - 注册到 celery_app.conf.imports + tasks/__init__.py 懒加载 - TTS 路由 synthesize() 增加 CosyVoice 提交 + Celery 调度 P2-1: voice_clone.py 添加详细 Celery 重试策略注释 P2-2: 修复 voice_clone.py Session 泄漏 (session=None 安全模式) P2-3: ListVoiceLibraryUseCase 返回 (items, count) 元组，消除重复 count_by_user() P2-4: 新增 find_profile_ids_by_voice_ids() 批量方法，填充 voice_clone_profile_id 测试: 749 passed, 0 failed	2026-07-02 16:30:37 +08:00
灵应	796aeff499	fix: 修复 PR #169 代码审查发现的 4 个 P2 问题 ... P2-1: workflow.py start_clone() 将 mark_processing() 移到音频 URL 检查之后， 无 URL 时保持 pending 状态，避免永久卡在 processing P2-2: voice_clone.py Celery 任务改用 VoiceCloneWorkflowService 公开方法 (process_clone_result/process_clone_failure)，不再直接操作 profile P2-3: voice_clones.py 路由中 Celery .delay() 失败时调用 process_clone_failure() 标记 profile 为 failed（create + retry 两个路由） P2-4: 由 P2-2 修复自动解决 同步更新 test_voice_clone_workflow.py 测试用例适配 P2-1 行为变更 Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>	2026-07-02 14:37:37 +08:00
灵应	24ac12167c	feat(task-308): 音色克隆完整流程实现 ... - CosyVoiceService: 新增 submit_clone_task() 和 check_task_status() 非阻塞方法 - VoiceCloneWorkflowService: 编排层，处理 start_clone/process_result/process_failure/retry - Celery 任务 process_voice_clone: 异步轮询 CosyVoice 克隆结果 - API 路由: 创建后触发 Celery 异步任务，支持重试 - 57 个单元测试全部通过（workflow 14 + task 6 + cosyvoice 37）	2026-07-02 12:46:44 +08:00
灵应	099bc31cf2	feat: CosyVoice 语音服务层 (Task 3.07) ... - 创建 CosyVoiceService 封装阿里云 CosyVoice API - list_preset_voices(): 返回预置音色列表 - clone_voice(): 音色克隆（提交任务 + 轮询状态） - synthesize_speech(): 语音合成（提交任务 + 轮询状态） - 支持同步/异步两种 API 模式 - 指数退避重试（最多 3 次）+ 超时控制 - 完整错误处理：AuthError / TimeoutError / 通用 Error - 26 个单元测试全部通过（mock CosyVoice API 响应）	2026-07-02 11:36:02 +08:00
灵应	e29a698325	feat: implement TTS synthesis API (task 3.06) ... - POST /api/v1/tts/synthesize: create TTS job (status=pending) - GET /api/v1/tts/jobs: list user's jobs (page/page_size pagination) - GET /api/v1/tts/jobs/{job_id}: get job details - GET /api/v1/tts/jobs/{job_id}/status: query status for polling - DELETE /api/v1/tts/jobs/{job_id}: delete job (soft delete) Includes: - Schema: TTSSynthesizeRequest, TTSJobResponse, ListTTSJobResponse, TTSStatusResponse - Use Cases: CreateTTSJob, ListTTSJobs, GetTTSJob, GetTTSJobStatus, DeleteTTSJob - SQLAlchemy adapter: SQLAlchemyTTSJobRepository - ORM model: TTSJobModel - Alembic migration: 020_add_tts_jobs_table - Unit tests: 14 tests covering all use cases CosyVoice API calls deferred to task 3.07. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>	2026-07-02 11:06:25 +08:00
灵应	c55dafdbb1	feat: implement voice clone API (Task 3.05) ... - Add VoiceCloneProfile CRUD endpoints: POST /api/v1/voice-clones (create clone task, status=pending) GET /api/v1/voice-clones (list with pagination + status filter) GET /api/v1/voice-clones/{id} (get details) GET /api/v1/voice-clones/{id}/status (polling endpoint) DELETE /api/v1/voice-clones/{id} (soft delete) POST /api/v1/voice-clones/{id}/retry (retry failed clone) - Add VoiceCloneProfile SQLAlchemy model and repository adapter - Add Alembic migration 019 for voice_clone_profiles table - Add use cases: Create, List, Get, GetStatus, Delete, Retry - Add Pydantic schemas for request/response validation - Add 19 unit tests (all passing) - CosyVoice API integration deferred to Task 3.07 Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>	2026-07-02 10:50:57 +08:00
CI Test	43366f290c	feat: 实现任务2.10 JobService — 异步任务管理 ... - 新增 Job 领域模型（状态机、JobType/JobStatus 枚举） - 新增 JobRepository 端口 + SQLAlchemy 实现 - 新增 10 个 Use Cases（CreateJob/Submit/Progress/Complete/Fail/Retry/Cancel/Get/List/Statistics） - 新增 JobService 服务层，集成 VideoComposeService - 新增 Pydantic schemas + RESTful API 路由 - 新增 Celery compose_video 任务（含进度追踪） - 新增数据库迁移 018（jobs 表） - 新增 44 个单元测试，全部通过 - 修复状态转换：允许 pending→success（快速完成场景）	2026-07-01 22:54:21 +08:00
灵应	ee8c60a143	perf(duplication): 查重模块代码优化 — 修复6个代码质量问题 ... 1. 修复 hamming_distance 不等长哈希处理（hex() 前导零丢失） 2. 集成颜色直方图到 check_duplicate（此前计算但未使用，浪费 CPU） 3. check_duplicate 改为返回最佳匹配而非首个匹配 4. 修复仓库删除顺序（先删片段再删记录，防止孤儿数据） 5. 域模型添加 can_retry()/reset_for_retry()，仅 failed 状态允许重试 6. 列表接口暴露 offset/limit 分页参数	2026-07-01 14:48:15 +08:00
xiaoxia	1217d8cef0	style: apply isort formatting to pass CI validation (#129)	2026-06-30 18:17:44 +08:00
xiaoxia	52ff2f80ad	style: apply black formatting to pass CI validation (#126)	2026-06-30 17:23:08 +08:00
Audit Bot	f9e8d6efdc	fix: 修复 3 个 P0 端点 500 错误的真正根因 ... Bug 1 — GET /api/v1/assets → 500: asset_repository 所有方法为 async def，但调用方为同步上下文， 未 await 导致返回 coroutine 对象而非实际数据。 修复：全部改为 def（同步），与 SQLAlchemy 同步 Session 一致。 Bug 2 — POST /api/v1/generation/tasks → 500: GenerationTaskModel 仍定义 edit_plan_id 列，但迁移 011 已从数据库 删除该列，INSERT 时报 column does not exist。 修复：从 model、repository、domain entity、application use case、 所有路由中彻底移除 edit_plan_id 引用。 Bug 3 — GET /api/v1/dashboard/overview → 500: generation_task_repository._to_domain() 访问 model.edit_plan_id， 该列已被迁移 011 删除，触发 AttributeError。 修复：同上，移除 edit_plan_id 引用。 涉及文件： - packages/adapters/sqlalchemy_impl/asset_repository.py (async→sync) - packages/ports/asset_repository.py (async→sync 接口) - packages/adapters/sqlalchemy_impl/models.py (移除 edit_plan_id 列) - packages/adapters/sqlalchemy_impl/generation_task_repository.py - packages/domain/generation_task.py - packages/application/generation_tasks.py - apps/api/app/api/routes/generation_tasks.py - apps/api/app/api/routes/task_center.py	2026-06-29 20:10:51 +08:00
Audit Bot	ea9e536740	feat: 扩展生成任务API支持模板模式 ... 方案A: 后端扩展3处API改动，支持前端模板中心化模型。 1. POST /api/v1/generation/tasks — project_id改为可选，新增template_id/asset_ids/title_ids/voice_ids 2. GET /api/v1/generation/tasks + GET /api/v1/tasks — 新增用户级列表（跨project） 3. POST /api/v1/tasks/{task_id}/retry + POST /api/v1/generation/tasks/{task_id}/retry — 简化重试 改动涉及： - Domain: GenerationTask新增6个字段，放宽create()校验 - Application: CreateGenerationTaskCommand新增字段 - Ports: GenerationTaskRepository新增list_by_user() - Adapter: SQLAlchemy模型+仓储实现新字段和list_by_user - Schema: 双模式校验（project模式/模板模式） - Routes: generation_tasks + task_center双路由注册 - Migration: 015_add_generation_task_extensions 向后兼容：所有旧端点和参数不变。	2026-06-29 17:05:53 +08:00
Audit Bot	78524a04eb	fix: 修复复审2个建议 (models注释 + N+1查询 + 事务边界) ... - models.py: 注释中旧模式名对齐 EditingMode 枚举 - list_by_user: 批量加载 segments 避免 N+1 查询 - create(): flush 替代 commit，create_segments 统一提交事务	2026-06-29 14:53:21 +08:00
Audit Bot	9b6a0b8b14	fix: 修复代码审计5个问题 (P0-1,P0-2,P1-3,P1-4,P1-5) ... P0-1: 剪辑模式使用 EditingMode 枚举，移除硬编码字符串 - voice_over_mix → voice_over, person_narration → voice_pip - use_cases.py 导入 EditingMode 枚举替代硬编码 VALID_MODES P0-2: 补充 packages/application/template/__init__.py P1-3: Use Cases 依赖 TemplateRepositoryPort 而非 SQLAlchemyTemplateRepository P1-4: generate 端点重命名为 validate（只校验不生成） - GenerateFromTemplateUseCase → ValidateTemplateUseCase - POST /{id}/generate → POST /{id}/validate P1-5: 软删除模板时级联清理关联 segments，避免孤儿数据 测试全部通过 (21/21)	2026-06-29 14:44:24 +08:00
Audit Bot	62c8d1cdff	feat: 剪辑计划编辑器后端 — 模板 CRUD + 分类 + 生成校验 ... - domain: Template, TemplateSegment, TemplateCategory 实体 - ports: TemplateRepositoryPort Protocol - adapters: SQLAlchemyTemplateRepository + 3 个 ORM Model - application: CRUD use cases + GenerateFromTemplateUseCase - 业务规则: one_take=1片段, voice_over_mix=每段需material_type, 配音±30%警告 - schemas: Pydantic request/response models - routes: /api/v1/templates CRUD + /generate + /categories - alembic: 014_add_template_tables (templates/template_segments/template_categories) - tests: 21 个单元测试全部通过	2026-06-29 14:14:58 +08:00
Audit Bot	f2e123a017	feat: 配方复用功能后端实现 ... - domain: Recipe/RecipeItem 实体 - ports: RecipeRepository Protocol - adapters: SQLAlchemy RecipeRepository 实现 + ORM models - application: 6个 UseCase (CRUD + Use) + Commands - API: 6个端点 POST/GET/PATCH/DELETE /recipes + POST /recipes/{id}/use - feature flag: recipe_reuse 仅 basic/premium 可用 - Alembic 迁移: recipes + recipe_items 表 - 单元测试: 覆盖所有 UseCase	2026-06-29 10:59:05 +08:00
API文档维护Agent	312dad7497	feat: Phase 2 查重后端 API 实现 ... 六边形架构分层实现： Domain 层: - DuplicationRecord / DuplicateSegment 实体 - 状态机生命周期 (pending→processing→completed/failed) Ports 层: - DuplicationRecordRepository Protocol Adapters 层: - SQLAlchemyDuplicationRecordRepository 完整实现 - DuplicationRecordModel / DuplicationSegmentModel ORM 模型 Application 层: - UploadForDuplicationUseCase (上传查重) - ListDuplicationRecordsUseCase (记录列表) - GetDuplicationDetailUseCase (详情查询) - DeleteDuplicationRecordUseCase (删除) - RetryDuplicationUseCase (重新查重) API 层: - POST /api/v1/duplication/upload (上传视频查重) - GET /api/v1/duplication/records (记录列表) - GET /api/v1/duplication/records/{id} (详情含片段) - DELETE /api/v1/duplication/records/{id} (删除) - POST /api/v1/duplication/records/{id}/retry (重新查重) Alembic 迁移: - 011_add_duplication_tables.py (duplication_records + duplication_segments) API 契约与前端 feat/phase2-duplication-ui (PR#75) 完全对齐。 Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>	2026-06-28 16:12:46 +08:00
API文档维护Agent	abe2bfab63	fix: resolve P0 bugs in voice library use cases and clean up obsolete tests ... - Fix voice_id field mapping in CreateVoiceLibraryUseCase (line 60) - Fix voice_id field mapping in UpdateVoiceLibraryUseCase (lines 88-89) - Delete obsolete test files for removed ProjectTitle modules - Remove edit_plans.py reference from architecture boundaries test	2026-06-28 15:33:00 +08:00
API文档维护Agent	a43ddb4b63	feat: Phase 1 - 核心重构（去Project层/标题库API/配音库API/清理废弃代码） ... ## 主要变更 ### 1. 清理废弃代码（18个文件删除） - 删除 TaskModel/MilestoneModel/TaskIssueModel 及相关文件 - 删除 ProjectTitleModel/EditPlanModel/EditPlanClipModel 及相关文件 - 清理 domain/ports/adapters/application/api 各层引用 - 从 GenerationTaskModel 移除 edit_plan_id 字段 ### 2. 新建标题库 API（/api/v1/titles） - Domain: TitleLibraryItem 数据类 - Ports: TitleLibraryRepository 接口 - Adapters: SQLAlchemy 实现（软删除） - Application: CRUD Use Cases + 配额检查（max_titles: free=50, basic=500, premium=500） - API: GET/POST/PUT/DELETE 端点 - Schema: Pydantic 请求/响应模型 ### 3. 新建配音库 API（/api/v1/voices） - Domain: VoiceLibraryItem 数据类 - Ports: VoiceLibraryRepository 接口 - Adapters: SQLAlchemy 实现（软删除） - Application: CRUD Use Cases + 配额检查（max_voiceovers: free=10, basic=100, premium=100） - API: GET/POST/PUT/DELETE 端点 - Schema: Pydantic 请求/响应模型 ### 4. 去掉 Project 层依赖 - 修复 authenticated_user.id → authenticated_user.user.id bug - asset_libraries.py: project_id 改为可选查询参数 - generated_videos.py: project_id 改为可选查询参数 - 无 project_id 时通过 find_accessible_projects 获取用户可访问的所有项目 ### 5. 数据库迁移 - 创建 011_phase1_core_refactor.py - 删除 6 个废弃表：tasks, milestones, task_issues, project_titles, edit_plans, edit_plan_clips - 从 generation_tasks 表删除 edit_plan_id 列 ### 6. 其他改进 - 迁移 EditingMode 到独立模块 packages/domain/editing_mode.py - 注册 titles_router 和 voices_router - 添加 get_title_library_repository 和 get_voice_library_repository 依赖 - 更新 domain/ports __init__.py 导出新实体和仓储接口 ## 技术细节 - 遵循六边形架构模式 - 配额检查通过 QuotaRegistry 实现 - 软删除：标题库用 is_active=False，配音库用 status='deleted' - 配音库支持可选的 project_id 关联 ## 破坏性变更 - 删除 6 个废弃表（需先备份数据） - 删除 /api/v1/edit-plans, /api/v1/project-titles, /api/v1/project-management 端点 - generation_tasks API 不再包含 edit_plan_id 字段	2026-06-28 15:02:10 +08:00
xiaoxia	6142b2478a	fix: 修复 login_use_case.py 的 jwt_service 导入路径（P0 登录401） (#67)	2026-06-28 10:10:40 +08:00
CI Test	e90076f794	feat(auth): implement refresh token mechanism ... - Add /auth/refresh endpoint for token renewal - Login response now includes refresh_token - Update JWT defaults: access_token 15min, refresh_token 7days - Reuse existing RefreshTokenUseCase with Redis session store	2026-06-27 22:57:25 +08:00
API文档维护Agent	e3fb518ab2	refactor: remove all workspace_id references from codebase ... - Remove workspace_id from Pydantic models in project_management routes - Remove workspace_id from SQLAlchemy and SQLite project management repos - Remove workspace_id from worker tasks (storage keys, entity creation) - Remove workspace_id from video dedup and title usage modules - Remove workspace_id from generation and ingest worker tasks - Clean workspace_id from all test files and scripts - Remove workspace-specific test files (list_workspaces, workspace repos) Task: #14 workspace_id 残留清理	2026-06-27 22:52:09 +08:00
CI Test	9d54b3e586	fix: correct all import paths for jwt_service and password_hasher (move from domain to application)	2026-06-27 21:41:56 +08:00
CI Test	e1efbdaf6e	fix: resolve circular import for password_hasher/password_validator in auth __init__	2026-06-27 21:33:51 +08:00
CI Test	5b47d1adb7	fix: 修复 password_reset_use_case 循环导入问题	2026-06-27 21:30:57 +08:00
CI Test	02992a3fcd	P2-2: Move auth services from domain to application layer ... - Move jwt_service.py from packages/domain/auth to packages/application/auth - Move password_hasher.py from packages/domain/auth to packages/application/auth - Update all import paths in use cases and tests	2026-06-27 19:23:56 +08:00
XiaoXia Bot	0b990017ca	fix(security): 删除 .env.production 并清理硬编码密码 ... - 删除 .env.production（含占位符密钥，已从版本控制移除） - scripts/smoke_public_*.py: 密码改为从环境变量 SMOKE_TEST_PASSWORD 读取 - infra/docker/infra.yml: POSTGRES_PASSWORD 改为引用环境变量 - packages/application/auth/jwt_handler.py: 文档示例密钥改为占位符	2026-06-27 18:10:52 +08:00
Audit Bot	2c6d920bcb	fix(#25): 移除硬编码 localhost:3000 ... - 添加 APP_BASE_URL 配置项到 Settings - auth.py 中改用 settings.APP_BASE_URL - register_user_use_case.py 和 password_reset_use_case.py 移除默认值 - base_url 参数改为必须由调用方传入 - 更新 .env.example 添加 APP_BASE_URL	2026-06-27 17:20:17 +08:00
Audit Bot	793104c8e7	fix(#12): 实现 refresh token 查找功能 ... - 完善 _find_session_by_refresh_token() 方法 - 使用 session_store.get_session_by_refresh_token() 直接查询 - 利用 Redis 反向索引实现 O(1) 查找复杂度	2026-06-27 17:20:17 +08:00
xiaoxia	a6e85092ce	fix: 统一 ENABLE_REDIS_SESSIONS 命名，修复登录因 AttributeError 导致 500	2026-06-27 17:05:48 +08:00
CI Bot	60adbf95ce	chore: remove redundant .github/workflows (using Gitea Actions)	2026-06-27 00:41:09 +08:00
xiaoxia	f687b4207f	feat: add download_url field to generated video APIs (#20)	2026-06-26 21:13:18 +08:00
xiaoxia	0422967229	refactor: Remove workspace concept - Projects now directly under User ... BREAKING CHANGES: - Removed Workspace, WorkspaceMember, WorkspaceInvitation entities - Project now has owner_user_id instead of workspace_id - Added shared_users list to Project for collaboration - Subscription/quota moved from Workspace to User level Changes: - packages/domain/entities.py: Removed Workspace entities, updated Project - packages/adapters/sqlalchemy_impl/models.py: Updated models - packages/application/: Removed workspace use cases, updated other use cases - packages/ports/: Removed workspace repository interfaces - apps/api/: Updated routes, schemas, dependencies, router - alembic/versions/007_remove_workspace_concept.py: Database migration New APIs: - POST /projects/{id}/share: Share project with user - DELETE /projects/{id}/share/{user_id}: Unshare project	2026-06-26 19:16:54 +08:00
xiaoxia	756ac14331	P2-2: 更新 packages/application/auth/__init__.py 导出 JWT 和 Password 委托处理器	2026-06-26 18:36:21 +08:00
xiaoxia	df28dc294f	P2-2: 创建 packages/application/auth/password_handler.py 委托层，隔离 Domain 层对 bcrypt 库的依赖	2026-06-26 18:36:04 +08:00
xiaoxia	e70d328087	P2-2: 创建 packages/application/auth/jwt_handler.py 委托层，隔离 Domain 层对 jwt 库的依赖	2026-06-26 18:35:45 +08:00
Coze Agent	07b5589253	fix(p1): resolve 4 P1 technical debt issues ... - P1-1: CORS configuration security - use DEBUG mode to differentiate production vs development CORS settings - P1-2: Implement token refresh logic in RefreshTokenUseCase - Add get_session_by_refresh_token to SessionStore - Verify session validity and expiry - Generate new access token on refresh - P1-3: Fix database connection leak in worker ingest task - Add proper try-except-finally block - Ensure db.close() is always called - P1-4: Implement real media metadata extraction - Use ffprobe for video metadata - Use Pillow for image metadata - Return empty dict on failure (no mock data)	2026-06-26 18:11:07 +08:00
xiaoxia	b326e4a249	fix(P1-2): implement token refresh use case with session verification	2026-06-26 17:52:34 +08:00
Xiaoxia AI	0f59b412bc	feat(plans): add edit plan preview workflow	2026-06-24 10:10:25 +08:00
Xiaoxia AI	34353506d7	fix(web): restore project workspace context	2026-06-22 13:19:45 +08:00
Xiaoxia AI	ea92092d12	chore(security): triage bandit findings	2026-06-21 13:38:46 +08:00
Xiaoxia AI	b78a290bdd	feat(auth): add verification and password reset routes	2026-06-21 10:40:56 +08:00
Xiaoxia AI	27ea04264f	feat(workspace): restore member management routes	2026-06-21 09:36:08 +08:00
Xiaoxia AI	93271f7dda	refactor(auth): route simple auth through use cases	2026-06-21 08:22:49 +08:00
Xiaoxia AI	bfbaddbd9a	style: normalize python formatting gates	2026-06-21 06:52:19 +08:00
Xiaoxia AI	0e93d2e71f	refactor(domain): move auth infrastructure to adapters	2026-06-21 00:46:56 +08:00
Xiaoxia AI	5e047972cd	fix(phase7): resolve remaining TODOs - session_id in JWT and repository injection	2026-06-19 09:47:20 +08:00