工程化加固、安全与性能修复、API 契约统一 snake_case（含 CI 测试流水线） - #514

Open

Marrrrrrrrry wants to merge 36 commits into

vastsa:masterfrom

Marrrrrrrrry:fix/m0-stop-bleeding

Commits on Sep 7, 2026

chore: engineering hardening - test tooling, lint, security fix, and cleanup
Marrrrrrrrry
committed
d701c6e

Commits on Sep 8, 2026

test: add shared test helpers and ASGI fixtures, dedupe 10x boilerplate
Marrrrrrrrry
committed
177a212

Commits on Sep 9, 2026

test: add end-to-end ASGI journey tests for share, chunk, and auth flows
Marrrrrrrrry
committed
625e50c
test: cover the three data-deleting cleanup tasks (expired files, stale chunks, presign sessions)
Marrrrrrrrry
committed
3f58e42
test: cover merge_chunks failure modes and temp-file hygiene
Marrrrrrrrry
committed
2bc278a
test: cover presigned upload journey (proxy mode auto-confirm, status, cancel, size limit)
Marrrrrrrrry
committed
a8c4072
fix: validate background config as http(s) URL to close CSS quote-breakout in 2023 theme
Marrrrrrrrry
committed
4cab625
chore: add hashed universal lockfile (uv pip compile --generate-hashes)
Marrrrrrrrry
committed
4904695
chore: install dependencies from hashed lockfile in Docker build
Marrrrrrrrry
committed
964cba3
docs: document lockfile regeneration flow in dependabot config
Marrrrrrrrry
committed
bde1fee
feat: upgrade password hashing to memory-hard scrypt with transparent rehash
Marrrrrrrrry
committed
443cfe7
refactor: extract FileUploadService into apps/base/services.py with shared rollback helper
Marrrrrrrrry
committed
357ab2f
refactor: use rollback_saved_file helper in presign proxy/confirm workflows
Marrrrrrrrry
committed
a75936d
refactor: extract shared chunk-record fetch and hash verification into storage base class
Marrrrrrrrry
committed
81d33b7
refactor: move config and tasks modules from core to apps/base (core no longer imports apps)
Marrrrrrrrry
committed
3396644
refactor: storage layer accepts plain StoredFile refs and caller-fetched chunk records (core/ is now ORM-free)
Marrrrrrrrry
committed
892fb24
refactor: storage raises framework-neutral StorageError rendered identically by app handler
Marrrrrrrrry
committed
ad3d319
refactor: storage returns StoredDownload data; view layer builds starlette responses
Marrrrrrrrry
committed
8322661
refactor: extract setup wizard and public pages from main.py (945 -> 148 lines)
Marrrrrrrrry
committed
6587ec8
chore: warn at startup when multi-worker deployment weakens in-process rate limiting
Marrrrrrrrry
committed
61724cb
feat: declare missing config keys (opendal_scheme, chunk_expire_hours) and add config schema guard
Marrrrrrrrry
committed
c5d525d
feat: rename all config keys to snake_case with DB migration 007
Marrrrrrrrry
committed
5121db6
perf: make is_config_initialized cheap — no scrypt on the per-request probe (D1)
Marrrrrrrrry
committed
ec424dd
perf: cache settings refresh behind a 2s TTL, force refresh on write paths (D6)
Marrrrrrrrry
committed
61d72ab
fix: save_file accepts plain binary streams; repair admin local file share (D2)
Marrrrrrrrry
committed
bb95017
perf: dashboard counters and storage quota use SQL aggregation (D3)
Marrrrrrrrry
committed
baecebd
fix: FileCodes.expired_count defaults to -1 (time-based) instead of instantly-expired 0 (D4)
Marrrrrrrrry
committed
3c93718
fix: serialize KeyValue JSON read-modify-write sections behind a process lock (D5)
Marrrrrrrrry
committed
0038636

Commits on Sep 10, 2026