159 Commits

Author	SHA1	Message	Date
xiaoxia	fff644deac	fix: resolve bandit security issues and fix vitest configuration (#132)	2026-06-30 18:35:20 +08:00
xiaoxia	560856cf22	fix: resolve all flake8 errors and apply Prettier formatting (#131)	2026-06-30 18:26:53 +08:00
xiaoxia	1217d8cef0	style: apply isort formatting to pass CI validation (#129)	2026-06-30 18:17:44 +08:00
xiaoxia	52ff2f80ad	style: apply black formatting to pass CI validation (#126)	2026-06-30 17:23:08 +08:00
Audit Bot	16b18dc2fd	test: 补充表单上传端点单元测试 ... - 新增 tests/unit/test_form_upload_routes.py，覆盖10个测试场景 - 修复 upload.py 表单参数处理：从 Annotated[Model, Form()] 改为独立 Form() 参数 - 测试覆盖：正常上传成功、缺少文件字段、缺少必填参数、项目/素材库不存在、OSS未配置 - 所有测试通过，与现有 upload/chunked_upload 测试风格保持一致 Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>	2026-06-30 13:12:49 +08:00
Audit Bot	37152a0729	fix: list_by_project → find_by_project (修复上传/诊断端点 500) ... 根因：upload.py、chunked_upload.py、asset_diagnosis.py 调用了 asset_library_repository.list_by_project()，但 SQLAlchemy 实现 只有 find_by_project()，导致 AttributeError → 500。 同步修复 InMemory 实现的方法名以保持一致。	2026-06-30 10:14:08 +08:00
Audit Bot	05c9137ece	fix: 上传端点异常处理 + OSS 诊断能力 ... 问题：PR#119 修复变量名后上传端点仍然 500，说明根因不仅是变量名错误 修复： 1. upload.py — 所有 3 个上传端点添加完整异常捕获和日志 - prepare_direct_upload: 捕获 RuntimeError→503 + 其他异常→500+日志 - complete_direct_upload: file_exists() 异常捕获→503（之前未捕获→500） - upload_asset: upload_file() 异常捕获→503/500+日志（之前未捕获→500） 2. storage.py — OSSStorageService.__init__ 添加启动诊断日志 - 凭证缺失时记录 missing env vars - oss2 SDK 未安装时记录错误 - bucket 初始化成功/失败时记录 3. health.py — /ready 端点增加 OSS 检查 - 检查凭证是否配置 - 检查 oss2 SDK 是否可用 - 调用 get_bucket_info() 验证连通性 部署后请调用 GET /api/v1/ready 查看 OSS 状态	2026-06-30 09:56:20 +08:00
Audit Bot	e6ecce79ee	fix: rename OSS_DIRECT_UPLOAD_EXPRESS_SECRET to OSS_DIRECT_UPLOAD_EXPIRE_SECONDS ... Root cause of upload endpoint 500 errors: - config.py defined OSS_DIRECT_UPLOAD_EXPRESS_SECRET (wrong name) - upload.py accessed settings.OSS_DIRECT_UPLOAD_EXPIRE_SECONDS (correct name) - AttributeError on every call to prepare_direct_upload → 500 This fixes both /api/v1/upload/prepare-direct-upload and any other upload endpoints that reference the expire seconds config.	2026-06-30 09:24:27 +08:00
Audit Bot	b98c83582b	fix: 上传文件大小限制从 800MB 提升至 2000MB ... P0 修复: - config.py: OSS_DIRECT_UPLOAD_MAX_MB 默认值从 800 改为 2000 - config.py: 添加 AliasChoices 支持 MAX_UPLOAD_SIZE_MB 环境变量 （.env.production 中 MAX_UPLOAD_SIZE_MB=2000 现在可被正确读取） P1 修复: - infra/nginx/xiaoxia-saas.conf: client_max_body_size 800m → 2g（3处） - infra/docker/nginx-production.conf: client_max_body_size 800m → 2g	2026-06-29 22:11:22 +08:00
Audit Bot	f9e8d6efdc	fix: 修复 3 个 P0 端点 500 错误的真正根因 ... Bug 1 — GET /api/v1/assets → 500: asset_repository 所有方法为 async def，但调用方为同步上下文， 未 await 导致返回 coroutine 对象而非实际数据。 修复：全部改为 def（同步），与 SQLAlchemy 同步 Session 一致。 Bug 2 — POST /api/v1/generation/tasks → 500: GenerationTaskModel 仍定义 edit_plan_id 列，但迁移 011 已从数据库 删除该列，INSERT 时报 column does not exist。 修复：从 model、repository、domain entity、application use case、 所有路由中彻底移除 edit_plan_id 引用。 Bug 3 — GET /api/v1/dashboard/overview → 500: generation_task_repository._to_domain() 访问 model.edit_plan_id， 该列已被迁移 011 删除，触发 AttributeError。 修复：同上，移除 edit_plan_id 引用。 涉及文件： - packages/adapters/sqlalchemy_impl/asset_repository.py (async→sync) - packages/ports/asset_repository.py (async→sync 接口) - packages/adapters/sqlalchemy_impl/models.py (移除 edit_plan_id 列) - packages/adapters/sqlalchemy_impl/generation_task_repository.py - packages/domain/generation_task.py - packages/application/generation_tasks.py - apps/api/app/api/routes/generation_tasks.py - apps/api/app/api/routes/task_center.py	2026-06-29 20:10:51 +08:00
Audit Bot	d2578a9093	fix: PR#112 P2 建议修复 ... P2-1: list_by_user[:5] → list_recent_by_user(user_id, limit=5) SQL层LIMIT P2-2: DashboardOverviewResponse 补充 subscription 字段（plan + is_active） - packages/ports/generation_task_repository.py: 新增 list_recent_by_user - packages/adapters/sqlalchemy_impl/generation_task_repository.py: 实现 - apps/api/app/schemas/dashboard.py: 新增 SubscriptionInfo + subscription 字段 - apps/api/app/api/routes/dashboard.py: 使用新接口 + 填充 subscription	2026-06-29 18:23:49 +08:00
Audit Bot	e723025889	fix: 修复 projects 500 + 实现 dashboard/overview 端点 ... Bug 1: GET /api/v1/projects → 500 - _to_project_response() 缺少 owner_user_id 和 shared_users 字段 - 补全 ProjectResponse schema 必填字段 Bug 2: GET /api/v1/dashboard/overview → 404 - 新建 dashboard schema + route - 添加 count_by_user / count_by_project_ids / sum_storage_by_project_ids 仓储方法 - 注册 /api/v1/dashboard 路由	2026-06-29 18:12:39 +08:00
Audit Bot	d2097744e4	fix: retry 端点增加归属校验 (P1 安全修复) ... - generation_tasks.py: retry_generation_task 增加 created_by_user_id 校验 - task_center.py: retry_task_by_id 增加 created_by_user_id 校验 - 非任务创建者返回 403 Access denied	2026-06-29 17:19:13 +08:00
Audit Bot	ea9e536740	feat: 扩展生成任务API支持模板模式 ... 方案A: 后端扩展3处API改动，支持前端模板中心化模型。 1. POST /api/v1/generation/tasks — project_id改为可选，新增template_id/asset_ids/title_ids/voice_ids 2. GET /api/v1/generation/tasks + GET /api/v1/tasks — 新增用户级列表（跨project） 3. POST /api/v1/tasks/{task_id}/retry + POST /api/v1/generation/tasks/{task_id}/retry — 简化重试 改动涉及： - Domain: GenerationTask新增6个字段，放宽create()校验 - Application: CreateGenerationTaskCommand新增字段 - Ports: GenerationTaskRepository新增list_by_user() - Adapter: SQLAlchemy模型+仓储实现新字段和list_by_user - Schema: 双模式校验（project模式/模板模式） - Routes: generation_tasks + task_center双路由注册 - Migration: 015_add_generation_task_extensions 向后兼容：所有旧端点和参数不变。	2026-06-29 17:05:53 +08:00
Audit Bot	9b6a0b8b14	fix: 修复代码审计5个问题 (P0-1,P0-2,P1-3,P1-4,P1-5) ... P0-1: 剪辑模式使用 EditingMode 枚举，移除硬编码字符串 - voice_over_mix → voice_over, person_narration → voice_pip - use_cases.py 导入 EditingMode 枚举替代硬编码 VALID_MODES P0-2: 补充 packages/application/template/__init__.py P1-3: Use Cases 依赖 TemplateRepositoryPort 而非 SQLAlchemyTemplateRepository P1-4: generate 端点重命名为 validate（只校验不生成） - GenerateFromTemplateUseCase → ValidateTemplateUseCase - POST /{id}/generate → POST /{id}/validate P1-5: 软删除模板时级联清理关联 segments，避免孤儿数据 测试全部通过 (21/21)	2026-06-29 14:44:24 +08:00
Audit Bot	62c8d1cdff	feat: 剪辑计划编辑器后端 — 模板 CRUD + 分类 + 生成校验 ... - domain: Template, TemplateSegment, TemplateCategory 实体 - ports: TemplateRepositoryPort Protocol - adapters: SQLAlchemyTemplateRepository + 3 个 ORM Model - application: CRUD use cases + GenerateFromTemplateUseCase - 业务规则: one_take=1片段, voice_over_mix=每段需material_type, 配音±30%警告 - schemas: Pydantic request/response models - routes: /api/v1/templates CRUD + /generate + /categories - alembic: 014_add_template_tables (templates/template_segments/template_categories) - tests: 21 个单元测试全部通过	2026-06-29 14:14:58 +08:00
Audit Bot	f2e123a017	feat: 配方复用功能后端实现 ... - domain: Recipe/RecipeItem 实体 - ports: RecipeRepository Protocol - adapters: SQLAlchemy RecipeRepository 实现 + ORM models - application: 6个 UseCase (CRUD + Use) + Commands - API: 6个端点 POST/GET/PATCH/DELETE /recipes + POST /recipes/{id}/use - feature flag: recipe_reuse 仅 basic/premium 可用 - Alembic 迁移: recipes + recipe_items 表 - 单元测试: 覆盖所有 UseCase	2026-06-29 10:59:05 +08:00
API文档维护Agent	573e4485b7	fix: 同步改进CORS配置 - 始终包含生产域名 ... 与main分支PR #93保持一致：无论CORS_ORIGINS_RAW环境变量是否设置， 都确保 https://saas.xiaoxiajianji.com 在allow_origins中。	2026-06-28 21:59:39 +08:00
API文档维护Agent	47533e7037	fix: 修复标题/配音创建500、素材库列表500、CORS缺失 ... - titles.py/voices.py: get_by_id → find_by_id（方法名错误导致AttributeError） - project_repository.py: cast shared_users to JSONB for @> operator（JSON列不支持@>） - main.py: CORS allow_origins 添加 https://saas.xiaoxiajianji.com	2026-06-28 21:33:07 +08:00
API文档维护Agent	25ce4830a6	fix: 禁用 redirect_slashes 修复 307 重定向导致前端新建失败 ... - FastAPI 初始化添加 redirect_slashes=False，避免反向代理后 307 重定向 URL 丢失 HTTPS 协议 - 移除 titles.py/voices.py/generation_tasks.py 路由中的尾斜杠 （'/' → ''，'/tasks/' → '/tasks'，'/tasks/{id}/results/' → '/tasks/{id}/results'） Fixes: 前端调用 POST /api/v1/titles 等接口时 307 重定向到 http:// 导致失败	2026-06-28 18:54:27 +08:00
xiaoxia	ce25bacbac	Merge pull request 'fix: 查重上传接口错误信息不再泄露内部异常（安全审计 P1）' (#82) from fix/p1-duplication-error-info-leak into develop	2026-06-28 18:35:41 +08:00
xiaoxia	a55a30b085	Merge pull request 'feat: Phase 2 订阅管理后端 API' (#78) from feat/phase2-subscription-api into develop	2026-06-28 18:35:41 +08:00
API文档维护Agent	06f0b9cc46	fix: 修复订阅API的3个P0问题 ... P0-1: 修复错误的导入路径 - from app.database import get_db → from app.dependencies import get_user_repository - 移除不存在的 Session 依赖 P0-2: 修复直接修改 dataclass 的问题 - 使用 dataclasses.replace() 创建新实例 - 通过 UserRepository.save() 持久化更改 - 更新 UserRepository 以支持订阅字段的读写 P0-3: 移除不存在的 quota_registry 模块 - 硬编码配额定义 PLAN_QUOTAS - free: 3项目/10GB, standard: 10项目/50GB - pro: 无限项目/100GB, enterprise: 无限项目/1000GB 额外: - 添加支付验证 TODO 注释（方案C） - 更新 UserRepository.save() 保存订阅相关字段 - 更新 UserRepository._to_entity() 读取订阅相关字段	2026-06-28 18:26:01 +08:00
API文档维护Agent	22196198bb	fix: 查重上传接口错误信息不再泄露内部异常 ... - L150: detail=f"读取文件失败: {exc}" → detail="文件读取失败，请稍后重试" - L162: detail=f"文件上传失败: {exc}" → detail="文件上传失败，请稍后重试" - 添加 logger.error 记录完整异常信息供内部排查	2026-06-28 18:24:38 +08:00
xiaoxia	5279636261	Merge pull request 'fix: P0 紧急修复 — 回退域对象 extra_meta → metadata' (#80) from fix/p0-extra-meta-rollback into develop	2026-06-28 18:11:09 +08:00
API文档维护Agent	71dd13eebb	fix: 删除 GET/POST 端点中错误的 204 返回 ... - get_duplication_detail (GET): 删除 L209 的 return Response(status_code=204) - retry_duplication (POST): 删除 L262 的 return Response(status_code=204) - delete_duplication_record (DELETE): 保留 204 返回（正确） 这两个 Bug 导致 GET 和 POST 端点永远返回空 204，正常逻辑被短路。	2026-06-28 17:59:45 +08:00
API文档维护Agent	9b016e3b2d	fix: 回退域对象 extra_meta → metadata（5文件16处） ... Asset 域对象属性名为 metadata，不是 extra_meta。 extra_meta 仅用于 SQLAlchemy model 层（对应 DB 列）。 修复文件： - packages/adapters/sqlalchemy_impl/asset_repository.py (L63, L88) - apps/api/app/api/routes/assets.py (L30, L72, L73) - apps/api/app/api/routes/asset_diagnosis.py (L52, L55, L56, L57) - apps/worker/worker_app/core/asset_usage.py (L5, L6, L7, L9) - apps/worker/worker_app/tasks/voice_extraction.py (L69, L70, L71, L104, L105, L106)	2026-06-28 17:56:02 +08:00
API文档维护Agent	27303e34eb	feat: implement Phase 2 subscription management API ... Implement 5 subscription endpoints matching frontend subscription.ts: API Endpoints: - GET /api/v1/subscription/current — get current subscription info - GET /api/v1/subscription/billing-records — get billing history - POST /api/v1/subscription/change-plan — upgrade/downgrade plan - POST /api/v1/subscription/cancel — cancel subscription - POST /api/v1/subscription/toggle-auto-renew — toggle auto-renewal Implementation Details: - Created subscription schemas (SubscriptionInfo, BillingRecord, etc.) - Created subscription routes with proper authentication - Integrated with quota_registry for plan limits - Added plan validation (free/standard/pro/enterprise) - Added billing cycle validation (monthly/yearly) - Registered subscription router in api_router Note: Billing records currently returns empty list (TODO: implement billing system) Auto-renew toggle is simulated (TODO: add auto_renew field to User model) All endpoints follow existing patterns from titles/voices/duplication APIs.	2026-06-28 17:40:59 +08:00
CI Test	be102d0088	fix: fix 204 response in titles.py and voices.py delete endpoints	2026-06-28 17:14:17 +08:00
CI Test	f782e49829	fix: return Response explicitly for 204 DELETE endpoint	2026-06-28 17:11:54 +08:00
CI Test	f6916fc8d6	fix: add response_class=Response for 204 DELETE endpoint	2026-06-28 17:07:45 +08:00
API文档维护Agent	87360051fa	fix: rename metadata to extra_meta to avoid SQLAlchemy reserved field conflict ... SQLAlchemy's 'metadata' attribute is reserved for model metadata, causing service startup crash. Changed to 'extra_meta' with Column('metadata', JSON) mapping to preserve database column name. Affected models (7): - AssetLibraryModel, AssetModel, AssetClassificationModel - GenerationTaskModel, DuplicationRecordModel - TitleLibraryModel, VoiceLibraryModel Updated all references across: - packages/adapters/sqlalchemy_impl/{title_library,voice_library,asset}_repository.py - apps/worker/worker_app/{core/asset_usage.py,tasks/voice_extraction.py} - apps/api/app/api/routes/{asset_diagnosis.py,assets.py}	2026-06-28 16:49:23 +08:00
API文档维护Agent	ea0bde3742	fix: add security validations to duplication upload API ... P0-1: Add MIME type whitelist validation (video files only) - Accept: mp4, mpeg, mov, avi, webm, mkv, 3gp - Reject non-video files with 415 Unsupported Media Type P0-2: Add file size limit validation - Use OSS_DIRECT_UPLOAD_MAX_MB config (default 800MB) - Check Content-Length header before reading file - Verify actual file size after reading - Return 413 Request Entity Too Large if exceeded Reference: apps/api/app/api/routes/upload.py implementation	2026-06-28 16:13:28 +08:00
API文档维护Agent	312dad7497	feat: Phase 2 查重后端 API 实现 ... 六边形架构分层实现： Domain 层: - DuplicationRecord / DuplicateSegment 实体 - 状态机生命周期 (pending→processing→completed/failed) Ports 层: - DuplicationRecordRepository Protocol Adapters 层: - SQLAlchemyDuplicationRecordRepository 完整实现 - DuplicationRecordModel / DuplicationSegmentModel ORM 模型 Application 层: - UploadForDuplicationUseCase (上传查重) - ListDuplicationRecordsUseCase (记录列表) - GetDuplicationDetailUseCase (详情查询) - DeleteDuplicationRecordUseCase (删除) - RetryDuplicationUseCase (重新查重) API 层: - POST /api/v1/duplication/upload (上传视频查重) - GET /api/v1/duplication/records (记录列表) - GET /api/v1/duplication/records/{id} (详情含片段) - DELETE /api/v1/duplication/records/{id} (删除) - POST /api/v1/duplication/records/{id}/retry (重新查重) Alembic 迁移: - 011_add_duplication_tables.py (duplication_records + duplication_segments) API 契约与前端 feat/phase2-duplication-ui (PR#75) 完全对齐。 Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>	2026-06-28 16:12:46 +08:00
API文档维护Agent	a43ddb4b63	feat: Phase 1 - 核心重构（去Project层/标题库API/配音库API/清理废弃代码） ... ## 主要变更 ### 1. 清理废弃代码（18个文件删除） - 删除 TaskModel/MilestoneModel/TaskIssueModel 及相关文件 - 删除 ProjectTitleModel/EditPlanModel/EditPlanClipModel 及相关文件 - 清理 domain/ports/adapters/application/api 各层引用 - 从 GenerationTaskModel 移除 edit_plan_id 字段 ### 2. 新建标题库 API（/api/v1/titles） - Domain: TitleLibraryItem 数据类 - Ports: TitleLibraryRepository 接口 - Adapters: SQLAlchemy 实现（软删除） - Application: CRUD Use Cases + 配额检查（max_titles: free=50, basic=500, premium=500） - API: GET/POST/PUT/DELETE 端点 - Schema: Pydantic 请求/响应模型 ### 3. 新建配音库 API（/api/v1/voices） - Domain: VoiceLibraryItem 数据类 - Ports: VoiceLibraryRepository 接口 - Adapters: SQLAlchemy 实现（软删除） - Application: CRUD Use Cases + 配额检查（max_voiceovers: free=10, basic=100, premium=100） - API: GET/POST/PUT/DELETE 端点 - Schema: Pydantic 请求/响应模型 ### 4. 去掉 Project 层依赖 - 修复 authenticated_user.id → authenticated_user.user.id bug - asset_libraries.py: project_id 改为可选查询参数 - generated_videos.py: project_id 改为可选查询参数 - 无 project_id 时通过 find_accessible_projects 获取用户可访问的所有项目 ### 5. 数据库迁移 - 创建 011_phase1_core_refactor.py - 删除 6 个废弃表：tasks, milestones, task_issues, project_titles, edit_plans, edit_plan_clips - 从 generation_tasks 表删除 edit_plan_id 列 ### 6. 其他改进 - 迁移 EditingMode 到独立模块 packages/domain/editing_mode.py - 注册 titles_router 和 voices_router - 添加 get_title_library_repository 和 get_voice_library_repository 依赖 - 更新 domain/ports __init__.py 导出新实体和仓储接口 ## 技术细节 - 遵循六边形架构模式 - 配额检查通过 QuotaRegistry 实现 - 软删除：标题库用 is_active=False，配音库用 status='deleted' - 配音库支持可选的 project_id 关联 ## 破坏性变更 - 删除 6 个废弃表（需先备份数据） - 删除 /api/v1/edit-plans, /api/v1/project-titles, /api/v1/project-management 端点 - generation_tasks API 不再包含 edit_plan_id 字段	2026-06-28 15:02:10 +08:00
CI Test	095e3b5d00	fix(P2-2): SMTP_FRON_NAME 拼写错误修正为 SMTP_FROM_NAME	2026-06-28 10:26:28 +08:00
CI Test	d1f2dbffa4	fix(P1-1): auth.py forgot_password 硬编码 localhost 改为 settings.APP_BASE_URL	2026-06-28 10:25:03 +08:00
API文档维护Agent	e2c68888e9	refactor: 统一 OSS 配置命名（MINIO_* → OSS_*） ... - .env.production: MINIO_* 环境变量全部改为 OSS_* 命名 - MINIO_ENDPOINT → OSS_ENDPOINT - MINIO_ACCESS_KEY → OSS_ACCESS_KEY_ID - MINIO_SECRET_KEY → OSS_ACCESS_KEY_SECRET - MINIO_BUCKET → OSS_BUCKET_NAME - MINIO_SECURE → OSS_SECURE - MINIO_PUBLIC_URL → OSS_PUBLIC_URL - .env.staging: 修正 section header 为 OSS 对象存储配置 - storage.py: 移除 MinIOService 和 get_minio_service() 向后兼容别名 - test_architecture_boundaries.py: 移除 storage.py 的 allowed 例外 - 更新文档中的 MINIO_* 示例为 OSS_*: - docs/CI-CD.md - docs/基础设施安装指南.md - docs/本地验证检查清单.md - docs/静态验证报告-2026-06-19.md	2026-06-28 08:33:48 +08:00
CI Test	28733d6fc7	feat(api): add Prometheus metrics middleware and /metrics endpoint ... - Add prometheus-client==0.21.1 to requirements.txt - Create PrometheusMetricsMiddleware to track HTTP request duration, count, and in-progress requests - Add /metrics endpoint for Prometheus scraping - Exclude health/ready/startup/metrics paths from recording to reduce noise	2026-06-28 08:32:28 +08:00
CI Test	e90076f794	feat(auth): implement refresh token mechanism ... - Add /auth/refresh endpoint for token renewal - Login response now includes refresh_token - Update JWT defaults: access_token 15min, refresh_token 7days - Reuse existing RefreshTokenUseCase with Redis session store	2026-06-27 22:57:25 +08:00
API文档维护Agent	e3fb518ab2	refactor: remove all workspace_id references from codebase ... - Remove workspace_id from Pydantic models in project_management routes - Remove workspace_id from SQLAlchemy and SQLite project management repos - Remove workspace_id from worker tasks (storage keys, entity creation) - Remove workspace_id from video dedup and title usage modules - Remove workspace_id from generation and ingest worker tasks - Clean workspace_id from all test files and scripts - Remove workspace-specific test files (list_workspaces, workspace repos) Task: #14 workspace_id 残留清理	2026-06-27 22:52:09 +08:00
CI Test	8d4677ddee	fix: swap parameter order in upload_asset to fix Python syntax error	2026-06-27 21:44:15 +08:00
xiaoxia	d1833d0bd4	fix: 修复 ENABLE_REDIS_SESSION 变量名不匹配导致登录500 (#58) ... Co-authored-by: xiaoxia-dev <dev@xiaoxiajianji.com> Co-committed-by: xiaoxia-dev <dev@xiaoxiajianji.com>	2026-06-27 19:52:35 +08:00
API文档维护Agent	8064b64ff5	docs: API文档准确性修复 ... 1. 修正上传端点schema命名：新增UploadAssetRequest模型替代自动生成的Body_upload_asset名称 2. 清理认证重复端点：移除/forgot-password和/reset-password旧路由，保留/password/forgot和/password/reset 3. 清理workspace_id残留：从edit_plan/asset_diagnosis/task_center/project_title等schema中移除，project_management和projects中改为可选 4. 更新README：移除过时的多租户/订阅/refresh token描述，修正仓库地址为git.xiaoxiajianji.com，更新API路径列表	2026-06-27 19:02:31 +08:00
Audit Bot	2c6d920bcb	fix(#25): 移除硬编码 localhost:3000 ... - 添加 APP_BASE_URL 配置项到 Settings - auth.py 中改用 settings.APP_BASE_URL - register_user_use_case.py 和 password_reset_use_case.py 移除默认值 - base_url 参数改为必须由调用方传入 - 更新 .env.example 添加 APP_BASE_URL	2026-06-27 17:20:17 +08:00
Audit Bot	b58388dec0	fix(#17): 调整数据库连接池配置 ... - 将 DATABASE_MAX_OVERFLOW 从 40 调整为 10 - pool_size(20) + max_overflow(10) = 最大 30 连接 - 添加注释说明连接池配置	2026-06-27 17:20:17 +08:00
xiaoxia	6ce9a0e67e	Merge pull request 'fix: Redis session env fix + JWT import path fix (登录失败根因修复)' (#52) from hotfix/redis-session-env-fix into develop	2026-06-27 17:18:11 +08:00
xiaoxia	a6e85092ce	fix: 统一 ENABLE_REDIS_SESSIONS 命名，修复登录因 AttributeError 导致 500	2026-06-27 17:05:48 +08:00
xiaoxia	388aafbab0	fix: correct ENABLE_REDIS_SESSIONS typo to ENABLE_REDIS_SESSION	2026-06-27 14:45:50 +08:00
CI Bot	36e12f77a9	fix: move SmartEditPlanGenerator to domain layer, remove dead workspaces route	2026-06-27 12:44:04 +08:00