boojack
38fc22b754
feat(memo): add image sharing in detail view
...
Keep the unpublished image-sharing flow scoped to memo detail pages.
- add a dedicated share-image preview and export pipeline
- measure the rendered memo card so preview and exported image stay aligned
- move the entry point into the detail sidebar and drawer only
2026-04-06 18:30:01 +08:00
boojack
2cbc70762b
refactor(attachments): simplify the attachment library
...
- split attachment page states and primitives into focused components
- unify card and list item presentation across media, audio, documents, and unused uploads
- move attachment paging and cleanup flows onto shared query and view-model hooks
2026-04-06 17:39:58 +08:00
boojack
7ac9989d43
fix(map): align dark mode map styling
2026-04-06 17:38:56 +08:00
boojack
15d8ec10d5
chore: update locale translations for new i18n entries
2026-04-06 16:11:21 +08:00
boojack
067d7ff0ce
chore: refactor memo editor audio recording flow
2026-04-06 15:46:38 +08:00
boojack
c3e7e2c316
fix: normalize attachment MIME types before validation
2026-04-06 14:05:24 +08:00
boojack
aafcc21ae6
fix: improve image preview dialog and live photo trigger
2026-04-06 13:41:27 +08:00
boojack
6b0487dcd8
fix: unify live photo previews around LIVE badge playback
2026-04-06 11:56:58 +08:00
boojack
065e817470
fix: backend tests action
2026-04-06 11:19:31 +08:00
boojack
10a955fd62
refactor: move plugin packages under internal
2026-04-06 11:10:32 +08:00
boojack
4b4e719470
feat(attachments): add Live Photo and Motion Photo support ( #5810 )
2026-04-06 10:47:01 +08:00
boojack
894b3eb045
fix(map): refine Leaflet controls and memo map styling
2026-04-06 08:45:54 +08:00
boojack
25feef3aad
fix(api): tolerate missing related users in memo conversions ( #5809 )
2026-04-06 08:23:18 +08:00
boojack
87d411bc70
docs(agents): align contributor guidance with current CI workflows ( #5808 )
2026-04-06 08:02:21 +08:00
memoclaw
f403f8c03c
refactor: simplify memo metadata components
2026-04-02 22:30:21 +08:00
memoclaw
0e4d2d25ca
refactor: simplify audio attachment playback component
2026-04-02 21:56:01 +08:00
Serhat
9676e72533
i18n: complete Turkish (tr) translations to 100% coverage ( #5802 )
...
Signed-off-by: Serhat <49079271+onwp@users.noreply.github.com>
Co-authored-by: coderabbitai[bot] <136622811+coderabbitai[bot]@users.noreply.github.com>
2026-04-01 19:25:18 +08:00
memoclaw
c0d5854f67
feat(editor): add voice note recording to the memo composer ( #5801 )
...
Co-authored-by: memoclaw <265580040+memoclaw@users.noreply.github.com>
2026-04-01 09:36:33 +08:00
memoclaw
a0d83e1a9e
fix(web): refine attachment media layout
2026-04-01 08:40:36 +08:00
memoclaw
cdbe40a390
chore: update security.md
2026-04-01 08:39:49 +08:00
memoclaw
63a17d897d
refactor: split audio attachment view into reusable components
2026-03-31 23:03:38 +08:00
memoclaw
1921b57662
fix(tags): allow blur-only tag metadata ( #5800 )
...
Co-authored-by: memoclaw <265580040+memoclaw@users.noreply.github.com>
2026-03-31 21:38:55 +08:00
boojack
201c8a8ea9
chore: add rc release handling
2026-03-31 08:34:36 +08:00
boojack
0e89407ee9
fix(filter): enforce CEL syntax semantics
...
Reject non-standard truthy numeric expressions in filters and document the parser as a supported subset of standard CEL syntax.
- remove legacy filter rewrites
- support standard equality in tag exists predicates
- add regression coverage for accepted and rejected expressions
2026-03-31 08:10:49 +08:00
boojack
d3f6e8ee31
chore: harden MCP access control and origin validation
2026-03-31 00:12:28 +08:00
boojack
7c708ee27e
chore: add migration upgrade coverage ( #5796 )
2026-03-30 23:51:57 +08:00
memoclaw
e520b637fd
fix: prevent stale comment drafts from being restored
2026-03-30 22:37:07 +08:00
memoclaw
acbc914dea
fix(webhooks): trigger memo updates for attachment and relation changes ( #5795 )
...
Co-authored-by: memoclaw <265580040+memoclaw@users.noreply.github.com>
2026-03-30 20:01:16 +08:00
memoclaw
9610ed8fc8
fix(lint): correct goimports struct literal alignment after removing write-only credential fields ( #5794 )
...
Co-authored-by: Claude <noreply@anthropic.com>
2026-03-29 20:31:09 +08:00
memoclaw
9d3a74bccc
fix(api): make credentials write-only and restrict sensitive settings to admins
...
Security fixes for credential leakage across three resources:
- NOTIFICATION setting: restrict GetInstanceSetting to admin-only
(was publicly accessible, exposing SMTP credentials)
- SMTP password: never return SmtpPassword in API responses (write-only)
- S3 secret: never return AccessKeySecret in API responses (write-only)
- OAuth2 ClientSecret: never return in API responses for any role
(was previously returned to admins); remove redactIdentityProviderResponse
in favor of omitting the field at the conversion layer
- Preserve-on-empty: when updating settings with an empty credential
field, preserve the existing stored value instead of overwriting
(applies to SmtpPassword, AccessKeySecret, and ClientSecret)
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-03-29 07:34:00 +08:00
memoclaw
c53677fcba
fix(api): improve SSE hub design and fix double-broadcast on comments
...
- Fix duplicate SSE event on comment creation: CreateMemoComment now
suppresses the redundant memo.created broadcast from the inner
CreateMemo call, emitting only memo.comment.created
- Extract reaction event-building IIFEs into buildMemoReactionSSEEvent
helper, removing duplicated inline DB-fetch logic
- Promote resolveSSEAudienceCreatorID from method to free function
(resolveSSECreatorID) since it never used the receiver
- Add userID to SSE connect/disconnect log lines for traceability
- Change canReceive default from permissive (return true) to
deny-with-warning for unknown visibility types
- Add comprehensive tests covering all new helpers, visibility edge
cases, slow-client drop behavior, and the double-broadcast fix
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-03-29 07:33:40 +08:00
boojack
d720efb6e6
chore: tweak featured sponsors
...
Removed the old sponsors table and replaced it with individual sponsor links and descriptions.
Signed-off-by: boojack <stevenlgtm@gmail.com>
2026-03-29 02:17:29 +08:00
memoclaw
4add9b04ad
fix: prevent local attachment uploads from overwriting files
2026-03-26 21:46:51 +08:00
memoclaw
a24d420922
fix(api): restrict user email exposure to self and admins ( #5784 )
...
Co-authored-by: memoclaw <265580040+memoclaw@users.noreply.github.com>
2026-03-25 22:02:08 +08:00
memoclaw
acddef1f3d
fix(api): switch user resource names to usernames ( #5779 )
...
Co-authored-by: memoclaw <265580040+memoclaw@users.noreply.github.com>
2026-03-25 09:11:17 +08:00
boojack
2327f4e3a6
chore: revamp featured sponsors in README
...
Updated featured sponsors section with new layout and content.
Signed-off-by: boojack <stevenlgtm@gmail.com>
2026-03-25 00:02:26 +08:00
boojack
60a7d49874
chore: add InstaPods promotion to README
...
Signed-off-by: boojack <stevenlgtm@gmail.com>
2026-03-24 23:46:37 +08:00
memoclaw
4818bf3559
refactor(store): remove synthetic system bot user lookup ( #5778 )
...
Co-authored-by: memoclaw <265580040+memoclaw@users.noreply.github.com>
2026-03-24 22:16:30 +08:00
memoclaw
4f6730a12e
chore: show compact attachment count instead of thumbnails in comment previews
...
When truncate mode is active (comment list), display an inline file icon
with attachment count instead of rendering full image thumbnails.
2026-03-24 19:30:39 +08:00
memoclaw
6a03917f6e
chore: upgrade TypeScript to 6.0.2
2026-03-24 08:45:56 +08:00
memoclaw
bb7f4978e5
refactor(web): consolidate SharedMemo into MemoDetail ( #5773 )
...
Co-authored-by: memoclaw <265580040+memoclaw@users.noreply.github.com>
2026-03-24 08:40:49 +08:00
memoclaw
6b30579903
feat: add outline navigation to memo detail sidebar ( #5771 )
...
Co-authored-by: memoclaw <265580040+memoclaw@users.noreply.github.com>
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
2026-03-24 00:20:40 +08:00
memoclaw
2aaca27bd5
refactor(web): improve MemoDetail and sidebar maintainability ( #5769 )
...
Co-authored-by: memoclaw <265580040+memoclaw@users.noreply.github.com>
2026-03-23 22:51:24 +08:00
memoclaw
e176b28c80
feat(memo-preview): support comment metadata in previews ( #5768 )
...
Co-authored-by: memoclaw <265580040+memoclaw@users.noreply.github.com>
2026-03-23 21:51:30 +08:00
memoclaw
22519b57a0
fix(web): prevent MemoContent prop leaks
2026-03-23 20:34:14 +08:00
memoclaw
45b21530d9
feat: add blur_content attribute to tag metadata settings ( #5767 )
...
Co-authored-by: memoclaw <265580040+memoclaw@users.noreply.github.com>
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
2026-03-23 19:42:27 +08:00
memoclaw
9e04049632
feat: treat tag setting keys as anchored regex patterns ( #5759 )
...
Co-authored-by: memoclaw <265580040+memoclaw@users.noreply.github.com>
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
2026-03-22 08:07:45 +08:00
memoclaw
9ded59a1aa
refactor(web): improve Settings page maintainability and consistency ( #5757 )
...
Co-authored-by: memoclaw <265580040+memoclaw@users.noreply.github.com>
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
2026-03-21 15:05:48 +08:00
memoclaw
d5de325ff4
refactor(web): simplify main layout sidebar structure ( #5756 )
...
Co-authored-by: memoclaw <265580040+memoclaw@users.noreply.github.com>
2026-03-21 12:54:18 +08:00
memoclaw
4177898054
refactor(web): consolidate memo metadata components into MemoMetadata ( #5755 )
...
Co-authored-by: memoclaw <265580040+memoclaw@users.noreply.github.com>
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
2026-03-21 09:04:15 +08:00