Vonic
4eb6ed18d6
Epic 5 Complete: Billing, Subscriptions, and Admin Features
...
Resolve all 5 deferred items from Epic 5 adversarial code review:
- Migration 124: Add CASCADE to subscriptionstatus enum drop (prevent orphaned references)
- Stripe rate limiting: In-memory per-user limiter (20 calls/60s) on verify-checkout-session
- Subscription request cooldown: 24h cooldown before resubmitting rejected requests
- Token reset date: Initialize on first subscription activation
- Checkout URL validation: Confirmed HTTPS-only (Stripe always returns HTTPS)
Implement Story 5.4 (Usage Tracking & Rate Limit Enforcement):
- Page quota pre-check at HTTP upload layer
- Extend UserRead schema with token quota fields
- Frontend 402 error handling in document upload
- Quota indicator in dashboard sidebar
Story 5.5 (Admin Seed & Approval Flow):
- Seed admin user migration with default credentials warning
- Subscription approval/rejection routes with admin guard
- 24h rejection cooldown enforcement
Story 5.6 (Admin-Only Model Config):
- Global model config visible across all search spaces
- Per-search-space model configs with user access control
- Superuser CRUD for global configs
Additional fixes from code review:
- PageLimitService: PAST_DUE subscriptions enforce free-tier limits
- TokenQuotaService: PAST_DUE subscriptions enforce free-tier limits
- Config routes: Fixed user_id.is_(None) filter on mutation endpoints
- Stripe webhook: Added guard against silent plan downgrade on unrecognized price_id
All changes formatted with Ruff (Python) and Biome (TypeScript).
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-04-15 03:54:45 +07:00
Vonic
c1776b3ec8
feat(story-3.5): add cloud-mode LLM model selection with token quota enforcement
...
Implement system-managed model catalog, subscription tier enforcement,
atomic token quota tracking, and frontend cloud/self-hosted conditional
rendering. Apply all 20 BMAD code review patches including security
fixes (cross-user API key hijack), race condition mitigation (atomic SQL
UPDATE), and SSE mid-stream quota error handling.
Co-Authored-By: Claude Sonnet 4 <noreply@anthropic.com>
2026-04-14 17:01:21 +07:00
Vonic
6e86cd7e8a
chore: merge upstream with local feature additions
...
- Merged dexscreener connector, composio connectors, crypto realtime tools from upstream
- Kept local additions: dropbox/onedrive connectors, memory routes, model_list routes, RefreshToken model
- Resolved frontend conflicts: kept tool UIs from both sides
- Accepted upstream lock files (uv.lock, pnpm-lock.yaml)
2026-04-13 23:31:52 +07:00
Vonic
b35b4337bb
feat: initialize agent and claude skill libraries with comprehensive knowledge bases, workflow templates, and implementation artifacts.
2026-04-13 09:49:58 +07:00
CREDO23
a95bf58c8f
Make Vision LLM opt-in for uploads and connectors
2026-04-10 16:45:51 +02:00
CREDO23
4ccdd80e26
Harden vision LLM fallback, folder upload validation, and export memory
2026-04-09 16:14:53 +02:00
CREDO23
1af5725bd1
fix: track dedup'd filename in used_paths to prevent collisions
2026-04-09 13:51:32 +02:00
CREDO23
b5f6e44fc3
security: sanitize folder names in ZIP export paths
2026-04-09 13:39:36 +02:00
CREDO23
47f1d7e373
feat: implement KB export as ZIP with service layer
2026-04-09 12:17:43 +02:00
Anish Sarkar
8455451ce1
chore: ran linting
2026-04-08 05:20:03 +05:30
CREDO23
26bffbcc47
Add dynamic vision model list from OpenRouter with combobox selector
2026-04-07 23:39:52 +02:00
CREDO23
43b8862ac7
Update get_vision_llm to use dedicated VisionLLMConfig system
2026-04-07 19:16:51 +02:00
CREDO23
362cd3590c
Add VisionLLMRouterService for Auto mode routing
2026-04-07 18:59:33 +02:00
DESKTOP-RTLN3BA\$punk
91ea293fa2
chore: linting
2026-04-07 03:10:06 -07:00
DESKTOP-RTLN3BA\$punk
82b5c7f19e
Merge commit ' 056fc0e7ff' into dev_mod
2026-04-07 02:56:46 -07:00
DESKTOP-RTLN3BA\$punk
bb1dcd32b6
feat: enhance vision autocomplete service and UI feedback
...
- Optimized the vision autocomplete service by starting the SSE stream immediately and deriving KB search queries directly from window titles.
- Refactored the service to run KB filesystem pre-computation and agent graph compilation in parallel, improving performance.
- Updated the SuggestionPage component to handle new agent step data, displaying progress indicators for each step.
- Enhanced the CSS for the suggestion tooltip and agent activity indicators, improving the user interface and experience.
2026-04-07 02:49:24 -07:00
Anish Sarkar
0a26a6c5bb
chore: ran linting
2026-04-07 05:55:39 +05:30
Anish Sarkar
3a1d700817
refactor: enhance file skipping logic across Dropbox, Google Drive, and OneDrive connectors to return unsupported extensions, improving error reporting and maintainability
2026-04-07 03:16:34 +05:30
Anish Sarkar
63a75052ca
Merge remote-tracking branch 'upstream/dev' into feat/unified-etl-pipeline
2026-04-06 22:04:51 +05:30
Anish Sarkar
47f4be08d9
refactor: remove allowed_formats from DocumentConverter initialization in DoclingService to allow acceptance of all supported formats
2026-04-06 19:31:42 +05:30
Anish Sarkar
b5a15b7681
feat: implement cursor-based delta sync for Dropbox integration, enhancing file indexing efficiency and preserving folder cursors during re-authentication
2026-04-06 18:36:29 +05:30
Rohan Verma
74bf3df880
Merge pull request #1130 from CREDO23/feat/vision-autocomplete
...
[Feat] Vision-based autocomplete with KB grounding
2026-04-05 13:24:55 -07:00
CREDO23
a180bf5576
fix merge conflicts
2026-04-04 09:39:20 +02:00
CREDO23
d7315e7f27
Merge upstream/dev into feat/vision-autocomplete
2026-04-04 09:15:13 +02:00
CREDO23
18103417bb
fix: harden autocomplete endpoint security and error handling
2026-04-04 08:57:09 +02:00
CREDO23
46e8134b23
catch non-vision model errors with actionable user message
2026-04-04 08:40:55 +02:00
Anish Sarkar
a2b3541046
chore: ran linting
2026-04-04 03:11:56 +05:30
Anish Sarkar
0d2acc665d
Merge remote-tracking branch 'upstream/dev' into feat/page-limit-connectors
2026-04-04 03:08:27 +05:30
Anish Sarkar
ce40da80ea
feat: implement page limit estimation and enforcement in file based connector indexers
...
- Added a static method `estimate_pages_from_metadata` to `PageLimitService` for estimating page counts based on file metadata.
- Integrated page limit checks in Google Drive, Dropbox, and OneDrive indexers to prevent exceeding user quotas during file indexing.
- Updated relevant indexing methods to utilize the new page estimation logic and enforce limits accordingly.
- Enhanced tests for page limit functionality, ensuring accurate estimation and enforcement across different file types.
2026-04-04 02:51:28 +05:30
CREDO23
960b8fc012
add app context and KB grounding to autocomplete suggestions
2026-04-03 21:34:01 +02:00
CREDO23
aeb3f13f91
replace text-based autocomplete with vision-based endpoint
2026-04-03 18:17:50 +02:00
CREDO23
482238e5d4
add vision LLM role for screenshot analysis
2026-04-03 17:40:27 +02:00
CREDO23
3e68d4aa3e
refactor: extract autocomplete service and fix tooltip screen-edge positioning
2026-04-02 20:38:09 +02:00
Anish Sarkar
000c2d9b5b
style: simplify LLM model terminology in UI
2026-04-02 10:11:35 +05:30
Anish Sarkar
7297a1724b
feat: implement Dropbox file creation and deletion tools for enhanced document management
2026-03-30 22:37:03 +05:30
Anish Sarkar
04691d572b
chore: ran linting
2026-03-30 01:50:41 +05:30
Anish Sarkar
fd87e38dac
feat: implement OneDrive knowledge base synchronization after file creation to enhance document management
2026-03-29 05:03:05 +05:30
Anish Sarkar
17091edb77
Merge remote-tracking branch 'upstream/dev' into refactor/indexing-pipelines
2026-03-27 22:36:34 +05:30
DESKTOP-RTLN3BA\$punk
685ad0c02d
feat: add folder management features including creation, deletion, and organization of documents within folders
2026-03-27 01:39:15 -07:00
Anish Sarkar
bbd5ee8a19
feat: enhance Google Calendar event update functionality
...
- Introduced helper functions `_is_date_only` and `_build_time_body` to streamline the construction of event start and end times for all-day and timed events.
- Refactored the `create_update_calendar_event_tool` to utilize the new helper functions, improving code readability and maintainability.
- Updated the Google Calendar sync service to ensure proper handling of calendar IDs with a default fallback to "primary".
- Modified the ApprovalCard component to simplify the construction of event update arguments, enhancing clarity and reducing redundancy.
2026-03-25 20:35:23 +05:30
Anish Sarkar
778cfac6fa
Merge remote-tracking branch 'upstream/dev' into impr/thinking-steps
2026-03-25 01:50:10 +05:30
CREDO23
5d8a62a4a6
merge upstream/dev into feat/migrate-electric-to-zero
...
Resolve 8 conflicts:
- Accept upstream deletion of 3 composio_*_connector.py (unified Google connectors)
- Accept our deletion of ElectricProvider.tsx, use-connectors-electric.ts,
use-messages-electric.ts (replaced by Zero equivalents)
- Keep both new deps in package.json (@rocicorp/zero + @slate-serializers/html)
- Regenerate pnpm-lock.yaml
2026-03-24 17:40:34 +02:00
Anish Sarkar
3f4e1a7dfd
refactor: remove frontend of scrape_webpage tool
2026-03-24 18:55:06 +05:30
Anish Sarkar
a009cae62a
refactor: remove link_preview tool and associated components to streamline agent functionality
2026-03-24 17:15:29 +05:30
Anish Sarkar
6c507989d2
refactor: remove display_image tool and update related components to streamline image handling
2026-03-24 16:28:11 +05:30
CREDO23
cf21eaacfc
fix: critical timestamp parsing and audit fixes
...
- Fix timestamp conversion: String(epochMs) → new Date(epochMs).toISOString()
in use-messages-sync, use-comments-sync, use-documents, use-inbox.
Without this, date comparisons (isEdited, cutoff filters) would fail.
- Fix updated_at: undefined → null in use-inbox to match InboxItem type
- Fix ZeroProvider: skip Zero connection for unauthenticated users
- Clean 30+ stale "Electric SQL" comments in backend Python code
2026-03-23 19:49:28 +02:00
Anish Sarkar
5c598e8588
Merge remote-tracking branch 'upstream/dev' into feat/human-in-the-loop
2026-03-22 15:45:45 +05:30
DESKTOP-RTLN3BA\$punk
eb8cfd296c
feat: add public routes for video presentations and audio streaming
2026-03-21 23:29:23 -07:00
Anish Sarkar
2bc6a0c3bc
chore: ran linting
2026-03-22 00:43:53 +05:30
Anish Sarkar
68f1a7c5ce
refactor: deduplicate issue type names in JiraToolMetadataService
2026-03-21 21:02:52 +05:30
