Cyrene_v2

8 Commits

Include renames

Author	SHA1	Message	Date
AskaEth	f43751fd07	feat(history): 消息正向增量拉取(A5) — GET /sessions/{id}/messages?after= CI / Backend (build / vet / test / cross-compile) (push) Has been cancelled Details CI / Frontend (tsc + vite build) (push) Has been cancelled Details - history/list_after.go: ListAfter(升序, created_at>after, 走覆盖索引, rowid兜底同毫秒) - HistoryStore 新增 ListAfter(store+fakes同步) - gateway history.go: handleListMessages解析after分流; after+before互斥400; 负数/非数字400 - 新增测试(list_after/history_after), build/vet/test绿+交叉编译 - Docs/api-client v0.26 + api-reference §3.4 同步	2026-09-08 21:49:12 +08:00
AskaEth	026b27b310	feat(auth): refresh token 续期(B2) — 不透明哈希+单次旋转+/auth/refresh+/auth/logout CI / Backend (build / vet / test / cross-compile) (push) Has been cancelled Details CI / Frontend (tsc + vite build) (push) Has been cancelled Details - auth/refresh.go: RefreshStore(Issue/Rotate/Revoke/RevokeAll/RevokeByUser), SHA-256哈希256-bit随机串, 单次旋转事务(并发重放fail-closed) - 迁移0008_refresh_tokens(id/user_id/role/token_hash UNIQUE/expires_at/revoked_at + 索引) - gateway: POST /v1/auth/refresh(旋转/续期) + /v1/auth/logout(单/全设备); login响应增refreshToken - config: AUTH_REFRESH_TTL(720h)/AUTH_REFRESH_ROTATE_DISABLED; decode.go 支持time.Duration - rotate-jwt成功后RevokeAll(响应refreshTokensRevoked), revoke-keys不动refresh - 14测试+真实二进制e2e, build/vet/test绿+交叉编译 - Docs/api-client v0.25 + api-reference §2.3/2.4 同步	2026-09-08 21:45:00 +08:00
AskaEth	7ecb43bd5d	feat(gateway): 图片上传端点(B1) — POST /v1/upload + GET /v1/files/{name} CI / Backend (build / vet / test / cross-compile) (push) Has been cancelled Details CI / Frontend (tsc + vite build) (push) Has been cancelled Details - upload.go: multipart上传(owner/admin+审计)→ {url,size,mime,name}; MaxBytesReader 5MB + DetectContentType嗅探 + 白名单raster(拒SVG/HTML) + crypto/rand 128-bit随机名 + 0700目录 - 静态服务: 同端口 GET /v1/files/{name}, 能力URL, 路径穿越全形态拒绝(.. / %2f / %2e%2e), nosniff, Range - errors: ErrPayloadTooLarge(413)/ErrUnsupportedMediaType(415) - server.go 路由+Deps.DataDir; wire.go resolveDataDir 注入 - 8测试+真实二进制E2E, build/vet/test绿+交叉编译 - Docs/api-client v0.24 + api-reference §0.3 同步	2026-09-08 21:36:03 +08:00
AskaEth	3fc10fb86f	docs(cors): X-API-Version 明确为 advisory 惯例头(E1) — 消除版本协商假象 CI / Backend (build / vet / test / cross-compile) (push) Has been cancelled Details CI / Frontend (tsc + vite build) (push) Has been cancelled Details - middleware: CORS Allow-Headers 加 X-API-Version(跨域客户端不再预检失败) - api-reference §0.2 + api-client §4.1: 声明服务端不校验、不据此协商版本 - 后端/前端零行为改动(前端仍在发,现CORS放行)	2026-09-08 21:24:36 +08:00
AskaEth	99f222761e	feat(voice): 语音silent降级信号(C2) — provider仅在结果为空时出现 CI / Backend (build / vet / test / cross-compile) (push) Has been cancelled Details CI / Frontend (tsc + vite build) (push) Has been cancelled Details - voice/Chain+Service: STTWithProvider/TTSWithProvider(真实档位cloud/local/edge-tts/espeak/silent), 旧方法改薄包装 - gateway: transcribe空文本带{text,provider} / voice_output空音频带provider / speech空音频tts_empty+X-Voice-Provider头 - middleware: CORS Access-Control-Expose-Headers: X-Voice-Provider - 可选接口 voiceProviderReporter(type断言透传), 自定义实现回退silent - 新增测试10个(provider_signal/voice_signal), build/vet/test全绿+交叉编译 - Docs/api-client v0.23 + api-reference CORS 同步	2026-09-08 21:23:12 +08:00
Aska	d8044763ac	docs(api): 后端全部API超详细调用文档(api-reference.md) CI / Backend (build / vet / test / cross-compile) (push) Has been cancelled Details CI / Frontend (tsc + vite build) (push) Has been cancelled Details	2026-09-08 05:25:38 +08:00
Aska	9b3d1d4b44	docs: 撤销误入的未审阅 api-reference.md(非本任务产物,退回工作树未跟踪) CI / Backend (build / vet / test / cross-compile) (push) Has been cancelled Details CI / Frontend (tsc + vite build) (push) Has been cancelled Details	2026-09-08 05:21:20 +08:00
Aska	f46692c329	docs: 按实际进度诚实化能力清单(已实现/降级/未实现三档) CI / Backend (build / vet / test / cross-compile) (push) Has been cancelled Details CI / Frontend (tsc + vite build) (push) Has been cancelled Details	2026-09-08 05:20:48 +08:00