Commit graph

17 commits

Author SHA1 Message Date
Vonic
4eb6ed18d6 Epic 5 Complete: Billing, Subscriptions, and Admin Features
Resolve all 5 deferred items from Epic 5 adversarial code review:
- Migration 124: Add CASCADE to subscriptionstatus enum drop (prevent orphaned references)
- Stripe rate limiting: In-memory per-user limiter (20 calls/60s) on verify-checkout-session
- Subscription request cooldown: 24h cooldown before resubmitting rejected requests
- Token reset date: Initialize on first subscription activation
- Checkout URL validation: Confirmed HTTPS-only (Stripe always returns HTTPS)

Implement Story 5.4 (Usage Tracking & Rate Limit Enforcement):
- Page quota pre-check at HTTP upload layer
- Extend UserRead schema with token quota fields
- Frontend 402 error handling in document upload
- Quota indicator in dashboard sidebar

Story 5.5 (Admin Seed & Approval Flow):
- Seed admin user migration with default credentials warning
- Subscription approval/rejection routes with admin guard
- 24h rejection cooldown enforcement

Story 5.6 (Admin-Only Model Config):
- Global model config visible across all search spaces
- Per-search-space model configs with user access control
- Superuser CRUD for global configs

Additional fixes from code review:
- PageLimitService: PAST_DUE subscriptions enforce free-tier limits
- TokenQuotaService: PAST_DUE subscriptions enforce free-tier limits
- Config routes: Fixed user_id.is_(None) filter on mutation endpoints
- Stripe webhook: Added guard against silent plan downgrade on unrecognized price_id

All changes formatted with Ruff (Python) and Biome (TypeScript).

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-04-15 03:54:45 +07:00
Vonic
c1776b3ec8 feat(story-3.5): add cloud-mode LLM model selection with token quota enforcement
Implement system-managed model catalog, subscription tier enforcement,
atomic token quota tracking, and frontend cloud/self-hosted conditional
rendering. Apply all 20 BMAD code review patches including security
fixes (cross-user API key hijack), race condition mitigation (atomic SQL
UPDATE), and SSE mid-stream quota error handling.

Co-Authored-By: Claude Sonnet 4 <noreply@anthropic.com>
2026-04-14 17:01:21 +07:00
CREDO23
13625acdd5 Add vision model tab to chat page model selector 2026-04-07 20:47:17 +02:00
Anish Sarkar
04691d572b chore: ran linting 2026-03-30 01:50:41 +05:30
Anish Sarkar
d88236d43b refactor: replace ModelConfigDialog with a shared component and update related imports for better organization and clarity 2026-03-29 17:32:23 +05:30
Anish Sarkar
430372a4ff refactor: move ImageConfigDialog to shared components and update imports in chat-header and image-model-manager for better organization 2026-03-29 17:02:20 +05:30
Anish Sarkar
3af9962abc feat: replace image config sidebar with dialog component in ChatHeader for improved user interaction and update related state management 2026-03-07 03:41:34 +05:30
Anish Sarkar
c9949303ae feat: integrate document upload dialog in ComposerAction and update sidebar components for improved user interaction and styling consistency 2026-03-07 03:29:46 +05:30
Anish Sarkar
8d5d8e490c refactor: remove ChatHeader from Thread component and update related logic, improving code clarity and maintaining consistent header display in chat interface 2026-03-06 22:38:49 +05:30
Anish Sarkar
312fedd6a2 refactor: remove ImageModelSelector component and update ModelSelector and ChatHeader to handle LLM and image model configurations more efficiently 2026-02-10 17:20:42 +05:30
DESKTOP-RTLN3BA\$punk
91fe7222b1 feat: enhance chat header with image generation configuration support and sidebar integration 2026-02-05 17:41:28 -08:00
DESKTOP-RTLN3BA\$punk
19e2857343 feat: added image gen support 2026-02-05 16:43:48 -08:00
Anish Sarkar
8e5a80fc19 feat: integrate chat sharing functionality in header component 2026-01-20 16:14:57 +05:30
DESKTOP-RTLN3BA\$punk
f22d649239 feat: added shared chats 2026-01-13 00:17:12 -08:00
DESKTOP-RTLN3BA\$punk
40e982d541 refactor: fix scroll to last user query ux
- Updated DashboardClientLayout to improve child component overflow handling.
- Refactored NewChatPage to streamline the layout and integrate ChatHeader directly within the Thread component.
- Added optional header prop to Thread component for better customization.
- Cleaned up ChatHeader by removing unnecessary wrapper for improved design.
2025-12-23 18:49:37 -08:00
Anish Sarkar
ed63e5a1d6 feat: add auto-scroll functionality for new user queries
- Introduced NewQueryScrollHandler component to automatically scroll to the latest user message when a new query is submitted, enhancing user experience.
- Updated ChatHeader component to remove unnecessary border for a cleaner design.
- Adjusted ModelSelector styles for improved visual consistency and accessibility.
2025-12-24 02:09:24 +05:30
DESKTOP-RTLN3BA\$punk
4a0c3e368a feat: migrated to surfsense deep agent 2025-12-23 01:16:25 -08:00