Commit Graph

18 Commits

Author SHA1 Message Date
zl-q ec33bb0cee refactor: 统一认证端点并删除冗余 profile 模块
- 合并 auth 端点: /verifications/verify → /verify, /verifications/resend → /resend
- 整合密码重置到 /verify 端点 (type=recovery)
- 移除未使用的 /auth/users 端点
- 添加 redirect URL 白名单验证 (site_url + additional_redirect_urls)
- 限流改用 Redis + IP 标识,替代内存锁
- 删除 v1/profile 死代码模块
- 更新前端 auth_api 适配新端点
- 添加 supabase site_url 和 additional_redirect_urls 配置
2026-03-07 14:55:00 +08:00
qzl 105e7849fe refactor: Web 服务器从 gunicorn 迁移到 uvicorn 2026-03-06 17:55:01 +08:00
qzl b6087fd195 chore: checkpoint current backend/runtime changes 2026-03-06 17:28:17 +08:00
qzl b486e78ff3 feat(agent): complete closed-loop runtime and pricing fallback 2026-03-05 15:34:37 +08:00
qzl b02a322bf3 refactor: 移除 crewai agent 架构相关代码并更新 LLM 配置 2026-03-04 11:37:09 +08:00
qzl 99d540a18d refactor: 重命名 agent_chat 模块为 agent 2026-03-02 11:13:20 +08:00
qzl 2ac56e5084 docs: 整理 runtime 系列文档,修正 API 端点名称 2026-03-02 10:55:46 +08:00
qzl dbd3f68dd4 test: add invite code validation tests and fix migration rollback
- Add TestInviteCodeSignup integration tests for valid/invalid invite codes
- Fix migration downgrade: avoid dropping trigger dependency
- Add DB CHECK constraint for invite_codes.code format
- Update runtime-route.md with invite_code documentation
- Update runtime-runbook.md with change log
2026-02-28 10:56:09 +08:00
qzl e4e995854d feat: 实现密码重置功能与用户搜索API,优化注册登录流程
- 新增忘记密码页面与重置密码确认流程(前端+后端)
- 修复注册验证码页登录跳转路由
- 新增用户搜索API(按邮箱查询)
- 简化infra脚本,统一为app.sh
- 补充密码重置与用户API测试覆盖
- 更新runtime文档与AGENTS配置
2026-02-27 15:22:42 +08:00
qzl 443977be9b fix(security): enforce defensive RLS for agent chat tables
Close Supabase advisor findings by enabling RLS and deny-by-default policies on new public agent-chat tables. Clarify backend RLS governance and incident runbook steps to prevent config-drift regressions.
2026-02-25 18:04:05 +08:00
qzl aa30054d64 docs(runtime): optimize runbook for ops workflow 2026-02-25 17:21:20 +08:00
qzl 890de969cc merge: combine local dev updates into dev 2026-02-25 17:05:04 +08:00
qzl ce6388595b chore: snapshot local dev updates before merge 2026-02-25 17:04:17 +08:00
qzl cd40b2b4f4 feat(agent-chat): complete core workflow and strengthen auth rate limiting 2026-02-25 16:51:12 +08:00
qzl 1cc8fa1abf feat(auth): switch signup to OTP verification flow
Replace legacy signup with start/verify/resend endpoints, add OTP-focused mail templates and auth rate limits, and align compose/env/runbook for local self-hosted Supabase OTP behavior.
2026-02-25 13:34:02 +08:00
qzl 7d6dda57c1 feat: complete auth/profile username migration and runtime safeguards 2026-02-25 10:20:43 +08:00
qzl 08571cfc95 chore: sync current workspace to dev 2026-02-24 18:18:42 +08:00
qzl 105cf82d21 fix: 恢复Celery配置 + 修复测试文件
- 恢复 CelerySettings 和相关计算属性
- 修复 celery/app.py 调用 configure_celery_app 参数
- 创建 core/initialization/init_data.py stub
- 删除不完整的 test_auth_supabase_gateway.py
2026-02-24 16:38:30 +08:00