Commit Graph

10 Commits

Author SHA1 Message Date
qzl dbd3f68dd4 test: add invite code validation tests and fix migration rollback
- Add TestInviteCodeSignup integration tests for valid/invalid invite codes
- Fix migration downgrade: avoid dropping trigger dependency
- Add DB CHECK constraint for invite_codes.code format
- Update runtime-route.md with invite_code documentation
- Update runtime-runbook.md with change log
2026-02-28 10:56:09 +08:00
qzl 80d04688fc feat: add invite code feature (create, validate, referrer tracking) 2026-02-27 17:27:55 +08:00
qzl e4e995854d feat: 实现密码重置功能与用户搜索API,优化注册登录流程
- 新增忘记密码页面与重置密码确认流程(前端+后端)
- 修复注册验证码页登录跳转路由
- 新增用户搜索API(按邮箱查询)
- 简化infra脚本,统一为app.sh
- 补充密码重置与用户API测试覆盖
- 更新runtime文档与AGENTS配置
2026-02-27 15:22:42 +08:00
qzl f3d08a7fcf refactor: remove legacy migration revisions
drop obsolete alembic history replaced by the new split social schema migration chain
2026-02-26 17:58:49 +08:00
qzl 6641eba9df feat: split initial social schema migration chain
replace monolithic migration with ordered scripts, include profiles/sessions in migration, and verify full downgrade/upgrade cycle for clean Supabase bootstrap
2026-02-26 17:58:37 +08:00
qzl 443977be9b fix(security): enforce defensive RLS for agent chat tables
Close Supabase advisor findings by enabling RLS and deny-by-default policies on new public agent-chat tables. Clarify backend RLS governance and incident runbook steps to prevent config-drift regressions.
2026-02-25 18:04:05 +08:00
qzl cd40b2b4f4 feat(agent-chat): complete core workflow and strengthen auth rate limiting 2026-02-25 16:51:12 +08:00
qzl 7d6dda57c1 feat: complete auth/profile username migration and runtime safeguards 2026-02-25 10:20:43 +08:00
qzl 08571cfc95 chore: sync current workspace to dev 2026-02-24 18:18:42 +08:00
qzl ad06fe7de4 refactor: align backend layout and supabase infra
Consolidate backend modules/tests under the backend package while syncing Supabase compose/env config and related plans.
2026-02-05 15:13:06 +08:00