4b4e719470
feat(attachments): add Live Photo and Motion Photo support ( #5810 )
2 months ago
894b3eb045
fix(map): refine Leaflet controls and memo map styling
2 months ago
25feef3aad
fix(api): tolerate missing related users in memo conversions ( #5809 )
2 months ago
87d411bc70
docs(agents): align contributor guidance with current CI workflows ( #5808 )
2 months ago
f403f8c03c
refactor: simplify memo metadata components
2 months ago
0e4d2d25ca
refactor: simplify audio attachment playback component
2 months ago
9676e72533
i18n: complete Turkish (tr) translations to 100% coverage ( #5802 )
...
Signed-off-by: Serhat <49079271+onwp@users.noreply.github.com>
Co-authored-by: coderabbitai[bot] <136622811+coderabbitai[bot]@users.noreply.github.com>
2 months ago
c0d5854f67
feat(editor): add voice note recording to the memo composer ( #5801 )
...
Co-authored-by: memoclaw <265580040+memoclaw@users.noreply.github.com>
2 months ago
a0d83e1a9e
fix(web): refine attachment media layout
2 months ago
cdbe40a390
chore: update security.md
2 months ago
63a17d897d
refactor: split audio attachment view into reusable components
2 months ago
1921b57662
fix(tags): allow blur-only tag metadata ( #5800 )
...
Co-authored-by: memoclaw <265580040+memoclaw@users.noreply.github.com>
2 months ago
201c8a8ea9
chore: add rc release handling
2 months ago
0e89407ee9
fix(filter): enforce CEL syntax semantics
...
Reject non-standard truthy numeric expressions in filters and document the parser as a supported subset of standard CEL syntax.
- remove legacy filter rewrites
- support standard equality in tag exists predicates
- add regression coverage for accepted and rejected expressions
2 months ago
d3f6e8ee31
chore: harden MCP access control and origin validation
2 months ago
7c708ee27e
chore: add migration upgrade coverage ( #5796 )
2 months ago
e520b637fd
fix: prevent stale comment drafts from being restored
2 months ago
acbc914dea
fix(webhooks): trigger memo updates for attachment and relation changes ( #5795 )
...
Co-authored-by: memoclaw <265580040+memoclaw@users.noreply.github.com>
2 months ago
9610ed8fc8
fix(lint): correct goimports struct literal alignment after removing write-only credential fields ( #5794 )
...
Co-authored-by: Claude <noreply@anthropic.com>
2 months ago
9d3a74bccc
fix(api): make credentials write-only and restrict sensitive settings to admins
...
Security fixes for credential leakage across three resources:
- NOTIFICATION setting: restrict GetInstanceSetting to admin-only
(was publicly accessible, exposing SMTP credentials)
- SMTP password: never return SmtpPassword in API responses (write-only)
- S3 secret: never return AccessKeySecret in API responses (write-only)
- OAuth2 ClientSecret: never return in API responses for any role
(was previously returned to admins); remove redactIdentityProviderResponse
in favor of omitting the field at the conversion layer
- Preserve-on-empty: when updating settings with an empty credential
field, preserve the existing stored value instead of overwriting
(applies to SmtpPassword, AccessKeySecret, and ClientSecret)
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2 months ago
c53677fcba
fix(api): improve SSE hub design and fix double-broadcast on comments
...
- Fix duplicate SSE event on comment creation: CreateMemoComment now
suppresses the redundant memo.created broadcast from the inner
CreateMemo call, emitting only memo.comment.created
- Extract reaction event-building IIFEs into buildMemoReactionSSEEvent
helper, removing duplicated inline DB-fetch logic
- Promote resolveSSEAudienceCreatorID from method to free function
(resolveSSECreatorID) since it never used the receiver
- Add userID to SSE connect/disconnect log lines for traceability
- Change canReceive default from permissive (return true) to
deny-with-warning for unknown visibility types
- Add comprehensive tests covering all new helpers, visibility edge
cases, slow-client drop behavior, and the double-broadcast fix
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2 months ago
d720efb6e6
chore: tweak featured sponsors
...
Removed the old sponsors table and replaced it with individual sponsor links and descriptions.
Signed-off-by: boojack <stevenlgtm@gmail.com>
2 months ago
4add9b04ad
fix: prevent local attachment uploads from overwriting files
2 months ago
a24d420922
fix(api): restrict user email exposure to self and admins ( #5784 )
...
Co-authored-by: memoclaw <265580040+memoclaw@users.noreply.github.com>
2 months ago
acddef1f3d
fix(api): switch user resource names to usernames ( #5779 )
...
Co-authored-by: memoclaw <265580040+memoclaw@users.noreply.github.com>
2 months ago
2327f4e3a6
chore: revamp featured sponsors in README
...
Updated featured sponsors section with new layout and content.
Signed-off-by: boojack <stevenlgtm@gmail.com>
2 months ago
60a7d49874
chore: add InstaPods promotion to README
...
Signed-off-by: boojack <stevenlgtm@gmail.com>
2 months ago
4818bf3559
refactor(store): remove synthetic system bot user lookup ( #5778 )
...
Co-authored-by: memoclaw <265580040+memoclaw@users.noreply.github.com>
2 months ago
4f6730a12e
chore: show compact attachment count instead of thumbnails in comment previews
...
When truncate mode is active (comment list), display an inline file icon
with attachment count instead of rendering full image thumbnails.
2 months ago
6a03917f6e
chore: upgrade TypeScript to 6.0.2
2 months ago
bb7f4978e5
refactor(web): consolidate SharedMemo into MemoDetail ( #5773 )
...
Co-authored-by: memoclaw <265580040+memoclaw@users.noreply.github.com>
2 months ago
6b30579903
feat: add outline navigation to memo detail sidebar ( #5771 )
...
Co-authored-by: memoclaw <265580040+memoclaw@users.noreply.github.com>
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
2 months ago
2aaca27bd5
refactor(web): improve MemoDetail and sidebar maintainability ( #5769 )
...
Co-authored-by: memoclaw <265580040+memoclaw@users.noreply.github.com>
2 months ago
e176b28c80
feat(memo-preview): support comment metadata in previews ( #5768 )
...
Co-authored-by: memoclaw <265580040+memoclaw@users.noreply.github.com>
2 months ago
22519b57a0
fix(web): prevent MemoContent prop leaks
2 months ago
45b21530d9
feat: add blur_content attribute to tag metadata settings ( #5767 )
...
Co-authored-by: memoclaw <265580040+memoclaw@users.noreply.github.com>
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
2 months ago
9e04049632
feat: treat tag setting keys as anchored regex patterns ( #5759 )
...
Co-authored-by: memoclaw <265580040+memoclaw@users.noreply.github.com>
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
2 months ago
9ded59a1aa
refactor(web): improve Settings page maintainability and consistency ( #5757 )
...
Co-authored-by: memoclaw <265580040+memoclaw@users.noreply.github.com>
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
2 months ago
d5de325ff4
refactor(web): simplify main layout sidebar structure ( #5756 )
...
Co-authored-by: memoclaw <265580040+memoclaw@users.noreply.github.com>
2 months ago
4177898054
refactor(web): consolidate memo metadata components into MemoMetadata ( #5755 )
...
Co-authored-by: memoclaw <265580040+memoclaw@users.noreply.github.com>
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
2 months ago
ac077ac3d3
refactor(web): improve MemoView and MemoEditor maintainability ( #5754 )
...
Co-authored-by: memoclaw <265580040+memoclaw@users.noreply.github.com>
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
2 months ago
7b4f3a9fa5
refactor(memo): simplify MemoDetail error handling, drop memo.failed-to-load i18n key
...
The failed-to-load key was only used for non-ConnectError exceptions, which
are unreachable in practice since the Connect RPC client always wraps errors
as ConnectError. Use (error as Error).message as a plain fallback instead.
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
2 months ago
5f6f624635
i18n: add missing auth.protected-memo-notice and memo.failed-to-load fallbacks to all locales
...
30 locale files were missing the two keys added in the auth redirect PR.
Added English fallback strings so all locales render properly until
community translations are contributed.
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
2 months ago
7601708ae4
Redirect unauthenticated protected memo access to sign in ( #5738 )
2 months ago
551ee1d81f
fix(auth): recover session via refresh cookie when localStorage is empty ( #5748 )
2 months ago
be00abe852
fix: sync html lang attribute with active locale ( #5753 )
...
Co-authored-by: memoclaw <265580040+memoclaw@users.noreply.github.com>
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
2 months ago
ff32869d2f
chore: improve access to default fields in cron parser ( #5750 )
...
Co-authored-by: google-labs-jules[bot] <161369871+google-labs-jules[bot]@users.noreply.github.com>
Co-authored-by: memoclaw <265580040+memoclaw@users.noreply.github.com>
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
2 months ago
e0cc247823
chore: optimize multi-user RSS feed generation by fixing N+1 query ( #5749 )
...
Co-authored-by: google-labs-jules[bot] <161369871+google-labs-jules[bot]@users.noreply.github.com>
2 months ago
23a7e99a21
chore: optimize unreact network requests ( #5747 )
...
Co-authored-by: google-labs-jules[bot] <161369871+google-labs-jules[bot]@users.noreply.github.com>
Co-authored-by: boojack <stevenlgtm@gmail.com>
2 months ago
a7cabb7ce6
refactor(web): remove masonry memo layout ( #5746 )
...
Co-authored-by: memoclaw <265580040+memoclaw@users.noreply.github.com>
2 months ago
boojack
memoclaw
Serhat
memoclaw
xun zhao
fiatcode
google-labs-jules[bot]