59 Commits

Author	SHA1	Message	Date
xiaoxia	1217d8cef0	style: apply isort formatting to pass CI validation (#129)	2026-06-30 18:17:44 +08:00
xiaoxia	52ff2f80ad	style: apply black formatting to pass CI validation (#126)	2026-06-30 17:23:08 +08:00
Audit Bot	f9e8d6efdc	fix: 修复 3 个 P0 端点 500 错误的真正根因 ... Bug 1 — GET /api/v1/assets → 500: asset_repository 所有方法为 async def，但调用方为同步上下文， 未 await 导致返回 coroutine 对象而非实际数据。 修复：全部改为 def（同步），与 SQLAlchemy 同步 Session 一致。 Bug 2 — POST /api/v1/generation/tasks → 500: GenerationTaskModel 仍定义 edit_plan_id 列，但迁移 011 已从数据库 删除该列，INSERT 时报 column does not exist。 修复：从 model、repository、domain entity、application use case、 所有路由中彻底移除 edit_plan_id 引用。 Bug 3 — GET /api/v1/dashboard/overview → 500: generation_task_repository._to_domain() 访问 model.edit_plan_id， 该列已被迁移 011 删除，触发 AttributeError。 修复：同上，移除 edit_plan_id 引用。 涉及文件： - packages/adapters/sqlalchemy_impl/asset_repository.py (async→sync) - packages/ports/asset_repository.py (async→sync 接口) - packages/adapters/sqlalchemy_impl/models.py (移除 edit_plan_id 列) - packages/adapters/sqlalchemy_impl/generation_task_repository.py - packages/domain/generation_task.py - packages/application/generation_tasks.py - apps/api/app/api/routes/generation_tasks.py - apps/api/app/api/routes/task_center.py	2026-06-29 20:10:51 +08:00
Audit Bot	ea9e536740	feat: 扩展生成任务API支持模板模式 ... 方案A: 后端扩展3处API改动，支持前端模板中心化模型。 1. POST /api/v1/generation/tasks — project_id改为可选，新增template_id/asset_ids/title_ids/voice_ids 2. GET /api/v1/generation/tasks + GET /api/v1/tasks — 新增用户级列表（跨project） 3. POST /api/v1/tasks/{task_id}/retry + POST /api/v1/generation/tasks/{task_id}/retry — 简化重试 改动涉及： - Domain: GenerationTask新增6个字段，放宽create()校验 - Application: CreateGenerationTaskCommand新增字段 - Ports: GenerationTaskRepository新增list_by_user() - Adapter: SQLAlchemy模型+仓储实现新字段和list_by_user - Schema: 双模式校验（project模式/模板模式） - Routes: generation_tasks + task_center双路由注册 - Migration: 015_add_generation_task_extensions 向后兼容：所有旧端点和参数不变。	2026-06-29 17:05:53 +08:00
Audit Bot	78524a04eb	fix: 修复复审2个建议 (models注释 + N+1查询 + 事务边界) ... - models.py: 注释中旧模式名对齐 EditingMode 枚举 - list_by_user: 批量加载 segments 避免 N+1 查询 - create(): flush 替代 commit，create_segments 统一提交事务	2026-06-29 14:53:21 +08:00
Audit Bot	9b6a0b8b14	fix: 修复代码审计5个问题 (P0-1,P0-2,P1-3,P1-4,P1-5) ... P0-1: 剪辑模式使用 EditingMode 枚举，移除硬编码字符串 - voice_over_mix → voice_over, person_narration → voice_pip - use_cases.py 导入 EditingMode 枚举替代硬编码 VALID_MODES P0-2: 补充 packages/application/template/__init__.py P1-3: Use Cases 依赖 TemplateRepositoryPort 而非 SQLAlchemyTemplateRepository P1-4: generate 端点重命名为 validate（只校验不生成） - GenerateFromTemplateUseCase → ValidateTemplateUseCase - POST /{id}/generate → POST /{id}/validate P1-5: 软删除模板时级联清理关联 segments，避免孤儿数据 测试全部通过 (21/21)	2026-06-29 14:44:24 +08:00
Audit Bot	62c8d1cdff	feat: 剪辑计划编辑器后端 — 模板 CRUD + 分类 + 生成校验 ... - domain: Template, TemplateSegment, TemplateCategory 实体 - ports: TemplateRepositoryPort Protocol - adapters: SQLAlchemyTemplateRepository + 3 个 ORM Model - application: CRUD use cases + GenerateFromTemplateUseCase - 业务规则: one_take=1片段, voice_over_mix=每段需material_type, 配音±30%警告 - schemas: Pydantic request/response models - routes: /api/v1/templates CRUD + /generate + /categories - alembic: 014_add_template_tables (templates/template_segments/template_categories) - tests: 21 个单元测试全部通过	2026-06-29 14:14:58 +08:00
Audit Bot	f2e123a017	feat: 配方复用功能后端实现 ... - domain: Recipe/RecipeItem 实体 - ports: RecipeRepository Protocol - adapters: SQLAlchemy RecipeRepository 实现 + ORM models - application: 6个 UseCase (CRUD + Use) + Commands - API: 6个端点 POST/GET/PATCH/DELETE /recipes + POST /recipes/{id}/use - feature flag: recipe_reuse 仅 basic/premium 可用 - Alembic 迁移: recipes + recipe_items 表 - 单元测试: 覆盖所有 UseCase	2026-06-29 10:59:05 +08:00
API文档维护Agent	312dad7497	feat: Phase 2 查重后端 API 实现 ... 六边形架构分层实现： Domain 层: - DuplicationRecord / DuplicateSegment 实体 - 状态机生命周期 (pending→processing→completed/failed) Ports 层: - DuplicationRecordRepository Protocol Adapters 层: - SQLAlchemyDuplicationRecordRepository 完整实现 - DuplicationRecordModel / DuplicationSegmentModel ORM 模型 Application 层: - UploadForDuplicationUseCase (上传查重) - ListDuplicationRecordsUseCase (记录列表) - GetDuplicationDetailUseCase (详情查询) - DeleteDuplicationRecordUseCase (删除) - RetryDuplicationUseCase (重新查重) API 层: - POST /api/v1/duplication/upload (上传视频查重) - GET /api/v1/duplication/records (记录列表) - GET /api/v1/duplication/records/{id} (详情含片段) - DELETE /api/v1/duplication/records/{id} (删除) - POST /api/v1/duplication/records/{id}/retry (重新查重) Alembic 迁移: - 011_add_duplication_tables.py (duplication_records + duplication_segments) API 契约与前端 feat/phase2-duplication-ui (PR#75) 完全对齐。 Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>	2026-06-28 16:12:46 +08:00
API文档维护Agent	abe2bfab63	fix: resolve P0 bugs in voice library use cases and clean up obsolete tests ... - Fix voice_id field mapping in CreateVoiceLibraryUseCase (line 60) - Fix voice_id field mapping in UpdateVoiceLibraryUseCase (lines 88-89) - Delete obsolete test files for removed ProjectTitle modules - Remove edit_plans.py reference from architecture boundaries test	2026-06-28 15:33:00 +08:00
API文档维护Agent	a43ddb4b63	feat: Phase 1 - 核心重构（去Project层/标题库API/配音库API/清理废弃代码） ... ## 主要变更 ### 1. 清理废弃代码（18个文件删除） - 删除 TaskModel/MilestoneModel/TaskIssueModel 及相关文件 - 删除 ProjectTitleModel/EditPlanModel/EditPlanClipModel 及相关文件 - 清理 domain/ports/adapters/application/api 各层引用 - 从 GenerationTaskModel 移除 edit_plan_id 字段 ### 2. 新建标题库 API（/api/v1/titles） - Domain: TitleLibraryItem 数据类 - Ports: TitleLibraryRepository 接口 - Adapters: SQLAlchemy 实现（软删除） - Application: CRUD Use Cases + 配额检查（max_titles: free=50, basic=500, premium=500） - API: GET/POST/PUT/DELETE 端点 - Schema: Pydantic 请求/响应模型 ### 3. 新建配音库 API（/api/v1/voices） - Domain: VoiceLibraryItem 数据类 - Ports: VoiceLibraryRepository 接口 - Adapters: SQLAlchemy 实现（软删除） - Application: CRUD Use Cases + 配额检查（max_voiceovers: free=10, basic=100, premium=100） - API: GET/POST/PUT/DELETE 端点 - Schema: Pydantic 请求/响应模型 ### 4. 去掉 Project 层依赖 - 修复 authenticated_user.id → authenticated_user.user.id bug - asset_libraries.py: project_id 改为可选查询参数 - generated_videos.py: project_id 改为可选查询参数 - 无 project_id 时通过 find_accessible_projects 获取用户可访问的所有项目 ### 5. 数据库迁移 - 创建 011_phase1_core_refactor.py - 删除 6 个废弃表：tasks, milestones, task_issues, project_titles, edit_plans, edit_plan_clips - 从 generation_tasks 表删除 edit_plan_id 列 ### 6. 其他改进 - 迁移 EditingMode 到独立模块 packages/domain/editing_mode.py - 注册 titles_router 和 voices_router - 添加 get_title_library_repository 和 get_voice_library_repository 依赖 - 更新 domain/ports __init__.py 导出新实体和仓储接口 ## 技术细节 - 遵循六边形架构模式 - 配额检查通过 QuotaRegistry 实现 - 软删除：标题库用 is_active=False，配音库用 status='deleted' - 配音库支持可选的 project_id 关联 ## 破坏性变更 - 删除 6 个废弃表（需先备份数据） - 删除 /api/v1/edit-plans, /api/v1/project-titles, /api/v1/project-management 端点 - generation_tasks API 不再包含 edit_plan_id 字段	2026-06-28 15:02:10 +08:00
xiaoxia	6142b2478a	fix: 修复 login_use_case.py 的 jwt_service 导入路径（P0 登录401） (#67)	2026-06-28 10:10:40 +08:00
CI Test	e90076f794	feat(auth): implement refresh token mechanism ... - Add /auth/refresh endpoint for token renewal - Login response now includes refresh_token - Update JWT defaults: access_token 15min, refresh_token 7days - Reuse existing RefreshTokenUseCase with Redis session store	2026-06-27 22:57:25 +08:00
API文档维护Agent	e3fb518ab2	refactor: remove all workspace_id references from codebase ... - Remove workspace_id from Pydantic models in project_management routes - Remove workspace_id from SQLAlchemy and SQLite project management repos - Remove workspace_id from worker tasks (storage keys, entity creation) - Remove workspace_id from video dedup and title usage modules - Remove workspace_id from generation and ingest worker tasks - Clean workspace_id from all test files and scripts - Remove workspace-specific test files (list_workspaces, workspace repos) Task: #14 workspace_id 残留清理	2026-06-27 22:52:09 +08:00
CI Test	9d54b3e586	fix: correct all import paths for jwt_service and password_hasher (move from domain to application)	2026-06-27 21:41:56 +08:00
CI Test	e1efbdaf6e	fix: resolve circular import for password_hasher/password_validator in auth __init__	2026-06-27 21:33:51 +08:00
CI Test	5b47d1adb7	fix: 修复 password_reset_use_case 循环导入问题	2026-06-27 21:30:57 +08:00
CI Test	02992a3fcd	P2-2: Move auth services from domain to application layer ... - Move jwt_service.py from packages/domain/auth to packages/application/auth - Move password_hasher.py from packages/domain/auth to packages/application/auth - Update all import paths in use cases and tests	2026-06-27 19:23:56 +08:00
XiaoXia Bot	0b990017ca	fix(security): 删除 .env.production 并清理硬编码密码 ... - 删除 .env.production（含占位符密钥，已从版本控制移除） - scripts/smoke_public_*.py: 密码改为从环境变量 SMOKE_TEST_PASSWORD 读取 - infra/docker/infra.yml: POSTGRES_PASSWORD 改为引用环境变量 - packages/application/auth/jwt_handler.py: 文档示例密钥改为占位符	2026-06-27 18:10:52 +08:00
Audit Bot	2c6d920bcb	fix(#25): 移除硬编码 localhost:3000 ... - 添加 APP_BASE_URL 配置项到 Settings - auth.py 中改用 settings.APP_BASE_URL - register_user_use_case.py 和 password_reset_use_case.py 移除默认值 - base_url 参数改为必须由调用方传入 - 更新 .env.example 添加 APP_BASE_URL	2026-06-27 17:20:17 +08:00
Audit Bot	793104c8e7	fix(#12): 实现 refresh token 查找功能 ... - 完善 _find_session_by_refresh_token() 方法 - 使用 session_store.get_session_by_refresh_token() 直接查询 - 利用 Redis 反向索引实现 O(1) 查找复杂度	2026-06-27 17:20:17 +08:00
xiaoxia	a6e85092ce	fix: 统一 ENABLE_REDIS_SESSIONS 命名，修复登录因 AttributeError 导致 500	2026-06-27 17:05:48 +08:00
CI Bot	60adbf95ce	chore: remove redundant .github/workflows (using Gitea Actions)	2026-06-27 00:41:09 +08:00
xiaoxia	f687b4207f	feat: add download_url field to generated video APIs (#20)	2026-06-26 21:13:18 +08:00
xiaoxia	0422967229	refactor: Remove workspace concept - Projects now directly under User ... BREAKING CHANGES: - Removed Workspace, WorkspaceMember, WorkspaceInvitation entities - Project now has owner_user_id instead of workspace_id - Added shared_users list to Project for collaboration - Subscription/quota moved from Workspace to User level Changes: - packages/domain/entities.py: Removed Workspace entities, updated Project - packages/adapters/sqlalchemy_impl/models.py: Updated models - packages/application/: Removed workspace use cases, updated other use cases - packages/ports/: Removed workspace repository interfaces - apps/api/: Updated routes, schemas, dependencies, router - alembic/versions/007_remove_workspace_concept.py: Database migration New APIs: - POST /projects/{id}/share: Share project with user - DELETE /projects/{id}/share/{user_id}: Unshare project	2026-06-26 19:16:54 +08:00
xiaoxia	756ac14331	P2-2: 更新 packages/application/auth/__init__.py 导出 JWT 和 Password 委托处理器	2026-06-26 18:36:21 +08:00
xiaoxia	df28dc294f	P2-2: 创建 packages/application/auth/password_handler.py 委托层，隔离 Domain 层对 bcrypt 库的依赖	2026-06-26 18:36:04 +08:00
xiaoxia	e70d328087	P2-2: 创建 packages/application/auth/jwt_handler.py 委托层，隔离 Domain 层对 jwt 库的依赖	2026-06-26 18:35:45 +08:00
Coze Agent	07b5589253	fix(p1): resolve 4 P1 technical debt issues ... - P1-1: CORS configuration security - use DEBUG mode to differentiate production vs development CORS settings - P1-2: Implement token refresh logic in RefreshTokenUseCase - Add get_session_by_refresh_token to SessionStore - Verify session validity and expiry - Generate new access token on refresh - P1-3: Fix database connection leak in worker ingest task - Add proper try-except-finally block - Ensure db.close() is always called - P1-4: Implement real media metadata extraction - Use ffprobe for video metadata - Use Pillow for image metadata - Return empty dict on failure (no mock data)	2026-06-26 18:11:07 +08:00
xiaoxia	b326e4a249	fix(P1-2): implement token refresh use case with session verification	2026-06-26 17:52:34 +08:00
Xiaoxia AI	0f59b412bc	feat(plans): add edit plan preview workflow	2026-06-24 10:10:25 +08:00
Xiaoxia AI	34353506d7	fix(web): restore project workspace context	2026-06-22 13:19:45 +08:00
Xiaoxia AI	ea92092d12	chore(security): triage bandit findings	2026-06-21 13:38:46 +08:00
Xiaoxia AI	b78a290bdd	feat(auth): add verification and password reset routes	2026-06-21 10:40:56 +08:00
Xiaoxia AI	27ea04264f	feat(workspace): restore member management routes	2026-06-21 09:36:08 +08:00
Xiaoxia AI	93271f7dda	refactor(auth): route simple auth through use cases	2026-06-21 08:22:49 +08:00
Xiaoxia AI	bfbaddbd9a	style: normalize python formatting gates	2026-06-21 06:52:19 +08:00
Xiaoxia AI	0e93d2e71f	refactor(domain): move auth infrastructure to adapters	2026-06-21 00:46:56 +08:00
Xiaoxia AI	5e047972cd	fix(phase7): resolve remaining TODOs - session_id in JWT and repository injection	2026-06-19 09:47:20 +08:00
Xiaoxia AI	642d01eee4	feat(phase7): prefer presigned generated video downloads	2026-06-18 20:49:31 +08:00
Xiaoxia AI	3d6b90c022	feat(phase7): add generated video download endpoint	2026-06-18 20:33:14 +08:00
Xiaoxia AI	758c2c7e13	feat(phase7): align asset flow and scaffold generation pipeline	2026-06-18 19:59:37 +08:00
Xiaoxia AI	a67f1b2a0f	feat(pagination): add generic pagination support ... - Implement PaginationParams with offset/limit calculation - Add PaginationMeta with navigation metadata - Create generic PaginatedResponse[T] with type safety - Support both in-memory and database pagination - Include has_next/has_prev navigation flags - Add comprehensive pagination documentation - Include frontend integration examples (React/Vue) - Cover cursor pagination for large datasets Phase 4 Task 47/68 completed	2026-06-17 08:49:26 +08:00
Xiaoxia AI	dba2fe94ac	feat(subscription): add upgrade and cancel subscription use cases ... - Implement UpgradeSubscriptionUseCase (Free→Pro→Enterprise) - Prevent downgrades (must use cancel to return to Free) - Auto-set quotas and expiration date on upgrade - Implement CancelSubscriptionUseCase to downgrade to Free - Only workspace owner can manage subscription - Add 8 comprehensive unit tests (all passed) Phase 4 Task 21/68 completed	2026-06-17 07:20:34 +08:00
Xiaoxia AI	0a2137c2aa	feat(workspace): add list members use case ... - Implement ListMembersUseCase to get all workspace members - Return member info with user details (username, email, display_name) - Show role, inviter, and join time for each member - Only workspace members can view member list - Add 6 comprehensive unit tests (all passed) Phase 4 Task 18/68 completed	2026-06-17 07:06:33 +08:00
Xiaoxia AI	ee3935abdc	feat(workspace): add list workspaces and get detail use cases ... - Implement ListWorkspacesUseCase to get user's all workspaces - Return workspace info with user's role and member count - Implement GetWorkspaceDetailUseCase with permission check - Show detailed subscription and storage info - Verify user is member before showing details - Add 8 comprehensive unit tests (all passed) Phase 4 Task 17/68 completed	2026-06-17 07:04:55 +08:00
Xiaoxia AI	a222c7f278	feat(workspace): add update member role use case ... - Implement UpdateMemberRoleUseCase with role-based permission - Owner/Admin can change roles, but Admin cannot change other Admins - Cannot change owner's role or change your own role - Cannot change to owner role (owner is unique) - Validate role not already assigned - Add 8 comprehensive unit tests (all passed) Phase 4 Task 16/68 completed	2026-06-17 05:12:34 +08:00
Xiaoxia AI	8ff42a1bf9	feat(workspace): add remove member and leave workspace use cases ... - Implement RemoveMemberUseCase with role-based permission - Owner/Admin can remove members, but Admin cannot remove other Admins - Cannot remove workspace owner or remove yourself - Implement LeaveWorkspaceUseCase for self-removal - Owner cannot leave (must transfer ownership or delete workspace first) - Add 9 comprehensive unit tests (all passed) Phase 4 Task 15/68 completed	2026-06-17 05:10:06 +08:00
Xiaoxia AI	82240d7953	feat(workspace): add accept and decline invitation use cases ... - Implement AcceptInvitationUseCase with validation - Check invitation status, expiration, and email match - Auto-create WorkspaceMember on accept - Handle case when user is already a member - Implement DeclineInvitationUseCase to reject invitations - Update invitation status (accepted/declined/expired) - Add 9 comprehensive unit tests (all passed) Phase 4 Task 14/68 completed	2026-06-17 05:08:31 +08:00
Xiaoxia AI	5d77d334ee	feat(workspace): add invite member use case ... - Implement InviteMemberUseCase with role-based permission check - Only owner/admin can invite members (not regular members) - Cannot invite as owner (owner is unique per workspace) - Check for duplicate invitations and existing members - Generate invitation token with 7-day expiration - Send invitation email with accept link - Add 7 comprehensive unit tests (all passed) Phase 4 Task 13/68 completed	2026-06-17 05:06:57 +08:00