4 Commits

This Branch

This Branch

All Branches

Author	SHA1	Message	Date
dokploy-bot	571ee2c801	feat: 无限画布 — infinite canvas with generation integration ... Backend: - canvases table + owner-scoped CRUD under /admin/api/canvas (list/create/get/save/delete, 50 docs/user, 4MiB cap, JSON validation) Frontend: - /canvas full-screen workspace: DOM+CSS-transform infinite pan/zoom (GPU-composited world layer, viewport culling, rAF-batched pointer moves) - nodes: image (thumb display, natural-size correction), note (uncontrolled contenteditable), generation placeholder with edges - generate on canvas: prompt from panel or selected notes, selected image nodes as references, results auto-placed + bezier edges to sources - multi-canvas management, debounced autosave + keepalive flush, snapshot undo/redo (60 steps), marquee/keyboard interactions	2026-09-19 22:38:41 +08:00
dokploy-bot	42208c0753	security: fix rate-limit bypass, payment amount check, stats leak, owner-dir collision, video panic guard ... - clientIP: stop trusting client-supplied X-Forwarded-For; use gin ClientIP with trusted proxies limited to private docker networks - payment: verify notify money matches order amount; remove hardcoded gateway default, fail loudly when api_base is unset - stats: public endpoint now serves aggregates only; recent files (owner names) moved to admin-only /stats/recent - auth: reject signups whose username/email-local collides with another user's media directory namespace - v1: recover panics in background video jobs, refund + mark failed	2026-09-19 22:13:08 +08:00
dokploy-bot	34f808e7e3	fix: attach web to default network too (overlay-only endpoint fails)	2026-09-19 15:26:54 +02:00
dokploy-bot	be23e9fe77	fix: use quay.io/minio/mc (minio/mc unavailable on Docker Hub)	2026-09-19 14:51:05 +02:00