contrib/memos
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
4,475 Commits 5 Branches 95 Tags
1df3fe79559ccf94b6c71e9ffb58e870ed43820d
Commit Graph

983 Commits

Author SHA1 Message Date
boojack 1df3fe7955 fix(user): omit internal settings from list responses (#5917) 2026-04-30 08:49:03 +08:00
boojack 9c5c604944 feat: add link metadata endpoints 2026-04-29 22:38:08 +08:00
memoclaw c7242324a1 fix(fileserver): preserve HDR image metadata in thumbnails 2026-04-29 21:32:10 +08:00
boojack 94ce1e5347 chore(settings): show build commit in version info 2026-04-27 08:51:11 +08:00
boojack c268551a16 feat(memos): choose created or updated time for memos (#5894) 2026-04-26 11:50:26 +08:00
boojack 0fb83a745d fix(auth): harden authorization and username validation (#5890) 2026-04-25 21:24:16 +08:00
boojack ee1799851e feat: redesign account and SSO management (#5886) 2026-04-24 09:08:58 +08:00
boojack 30c0611a82 fix: fix legacy username auth flows (#5885) 2026-04-23 22:35:38 +08:00
boojack d688914b28 feat(auth): add SSO user identity linkage (#5883) 2026-04-23 08:51:45 +08:00
boojack 50638040f6 fix: reduce list memo query overhead (#5880) 2026-04-22 09:31:48 +08:00
George Wu bbded584ce fix: user resource names can be uuidv4 from idp sub claim (#5856) 2026-04-19 13:05:08 +08:00
boojack 01be01f4b7 fix: mixed-case user resource names (#5853) 2026-04-19 10:44:25 +08:00
boojack 583c3d24f4 feat(mcp): harden tool exposure and side effects (#5850) 2026-04-18 22:28:35 +08:00
wndnjs0 0fc1dab28b fix: add unix socket file permission setting (755 -> 660) (#5849) 2026-04-18 13:21:03 +08:00
boojack ff6389a5ef fix(api): appease image size lint 2026-04-16 23:21:07 +08:00
boojack c45663761d fix(api): reduce memory pressure in backend paths 2026-04-16 23:08:48 +08:00
boojack 8479e1d5a3 test: close SSE response body explicitly 2026-04-16 22:57:31 +08:00
boojack a5ddd5adaf fix(server): close SSE clients during shutdown 
Close long-lived SSE streams before HTTP shutdown so graceful shutdown is not held until the deadline. Also wait for background runners before closing the store to make shutdown ordering explicit.
 2026-04-16 22:49:10 +08:00
boojack a7fd1dacc9 refactor(ai): use official provider SDKs (#5845) 2026-04-16 22:27:57 +08:00
boojack 101704c8ea feat(ai): add BYOK audio transcription (#5832) 2026-04-13 22:09:24 +08:00
boojack 0ad0fec8d4 feat(ai): add Anthropic provider option 2026-04-12 21:42:17 +08:00
memoclaw d87539a1e1 feat: add Gemini transcription provider (#5830) 
Co-authored-by: memoclaw <265580040+memoclaw@users.noreply.github.com>
 2026-04-12 21:12:03 +08:00
memoclaw 83ed32f119 feat(ai): add instance AI providers and transcription (#5829) 
Co-authored-by: memoclaw <265580040+memoclaw@users.noreply.github.com>
 2026-04-12 19:23:34 +08:00
boojack 40fd700fb8 fix(fileserver): render SVG attachment previews 2026-04-12 10:41:38 +08:00
boojack fee7fcd660 fix(frontend): restore sitemap and robots routes 2026-04-10 22:23:00 +08:00
memoclaw 24fc8ab8ca feat(mentions): add memo mention parsing, notifications, and rendering (#5811) 
Co-authored-by: memoclaw <265580040+memoclaw@users.noreply.github.com>
 2026-04-06 22:16:53 +08:00
boojack c3e7e2c316 fix: normalize attachment MIME types before validation 2026-04-06 14:05:24 +08:00
boojack 10a955fd62 refactor: move plugin packages under internal 2026-04-06 11:10:32 +08:00
boojack 4b4e719470 feat(attachments): add Live Photo and Motion Photo support (#5810) 2026-04-06 10:47:01 +08:00
boojack 25feef3aad fix(api): tolerate missing related users in memo conversions (#5809) 2026-04-06 08:23:18 +08:00
memoclaw 1921b57662 fix(tags): allow blur-only tag metadata (#5800) 
Co-authored-by: memoclaw <265580040+memoclaw@users.noreply.github.com>
 2026-03-31 21:38:55 +08:00
boojack 0e89407ee9 fix(filter): enforce CEL syntax semantics 
Reject non-standard truthy numeric expressions in filters and document the parser as a supported subset of standard CEL syntax.

- remove legacy filter rewrites
- support standard equality in tag exists predicates
- add regression coverage for accepted and rejected expressions
 2026-03-31 08:10:49 +08:00
boojack d3f6e8ee31 chore: harden MCP access control and origin validation 2026-03-31 00:12:28 +08:00
boojack 7c708ee27e chore: add migration upgrade coverage (#5796) 2026-03-30 23:51:57 +08:00
memoclaw acbc914dea fix(webhooks): trigger memo updates for attachment and relation changes (#5795) 
Co-authored-by: memoclaw <265580040+memoclaw@users.noreply.github.com>
 2026-03-30 20:01:16 +08:00
memoclaw 9610ed8fc8 fix(lint): correct goimports struct literal alignment after removing write-only credential fields (#5794) 
Co-authored-by: Claude <noreply@anthropic.com>
 2026-03-29 20:31:09 +08:00
memoclaw 9d3a74bccc fix(api): make credentials write-only and restrict sensitive settings to admins 
Security fixes for credential leakage across three resources:

- NOTIFICATION setting: restrict GetInstanceSetting to admin-only
  (was publicly accessible, exposing SMTP credentials)
- SMTP password: never return SmtpPassword in API responses (write-only)
- S3 secret: never return AccessKeySecret in API responses (write-only)
- OAuth2 ClientSecret: never return in API responses for any role
  (was previously returned to admins); remove redactIdentityProviderResponse
  in favor of omitting the field at the conversion layer
- Preserve-on-empty: when updating settings with an empty credential
  field, preserve the existing stored value instead of overwriting
  (applies to SmtpPassword, AccessKeySecret, and ClientSecret)

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
 2026-03-29 07:34:00 +08:00
memoclaw c53677fcba fix(api): improve SSE hub design and fix double-broadcast on comments 
- Fix duplicate SSE event on comment creation: CreateMemoComment now
  suppresses the redundant memo.created broadcast from the inner
  CreateMemo call, emitting only memo.comment.created
- Extract reaction event-building IIFEs into buildMemoReactionSSEEvent
  helper, removing duplicated inline DB-fetch logic
- Promote resolveSSEAudienceCreatorID from method to free function
  (resolveSSECreatorID) since it never used the receiver
- Add userID to SSE connect/disconnect log lines for traceability
- Change canReceive default from permissive (return true) to
  deny-with-warning for unknown visibility types
- Add comprehensive tests covering all new helpers, visibility edge
  cases, slow-client drop behavior, and the double-broadcast fix

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
 2026-03-29 07:33:40 +08:00
memoclaw 4add9b04ad fix: prevent local attachment uploads from overwriting files 2026-03-26 21:46:51 +08:00
memoclaw a24d420922 fix(api): restrict user email exposure to self and admins (#5784) 
Co-authored-by: memoclaw <265580040+memoclaw@users.noreply.github.com>
 2026-03-25 22:02:08 +08:00
memoclaw acddef1f3d fix(api): switch user resource names to usernames (#5779) 
Co-authored-by: memoclaw <265580040+memoclaw@users.noreply.github.com>
 2026-03-25 09:11:17 +08:00
memoclaw 45b21530d9 feat: add blur_content attribute to tag metadata settings (#5767) 
Co-authored-by: memoclaw <265580040+memoclaw@users.noreply.github.com>
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
 2026-03-23 19:42:27 +08:00
memoclaw 9e04049632 feat: treat tag setting keys as anchored regex patterns (#5759) 
Co-authored-by: memoclaw <265580040+memoclaw@users.noreply.github.com>
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
 2026-03-22 08:07:45 +08:00
google-labs-jules[bot] e0cc247823 chore: optimize multi-user RSS feed generation by fixing N+1 query (#5749) 
Co-authored-by: google-labs-jules[bot] <161369871+google-labs-jules[bot]@users.noreply.github.com>
 2026-03-20 18:09:24 +08:00
memoclaw 6f1f3d81c5 chore: remove disallow_public_visibility setting (#5743) 
Co-authored-by: memoclaw <265580040+memoclaw@users.noreply.github.com>
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
 2026-03-20 00:00:51 +08:00
memoclaw 3f3133d6e2 feat(memo): add share links for private memos (#5742) 
Co-authored-by: memoclaw <265580040+memoclaw@users.noreply.github.com>
 2026-03-19 23:47:22 +08:00
memoclaw f759b416af refactor(inbox): store memo comment payloads without activity records (#5741) 
Co-authored-by: memoclaw <265580040+memoclaw@users.noreply.github.com>
 2026-03-19 19:33:25 +08:00
memoclaw a249d06e2e feat(instance): add notification transport setting (#5737) 
Co-authored-by: memoclaw <265580040+memoclaw@users.noreply.github.com>
 2026-03-19 09:18:28 +08:00
boojack 65d14fbb63 feat(instance): add canonical tag metadata setting (#5736) 2026-03-19 08:54:43 +08:00
boojack 330291d4d9 feat(user): add per-user tag metadata settings (#5735) 2026-03-18 23:15:14 +08:00