Commit Graph

115 Commits

Author SHA1 Message Date
HouYunFei f038406070 feat(agent): enhance model resolution logic by normalizing model options and improving generation model selection 2026-06-16 17:25:45 +08:00
HouYunFei 1b289f6a77 feat(agent): align online Agent tools with local Agent capabilities and enhance node creation and generation configuration 2026-06-16 16:52:52 +08:00
HouYunFei 27bd6f004b feat(agent): implement streaming responses for online Agent and enhance tool execution feedback 2026-06-16 16:16:04 +08:00
HouYunFei 7893bd72dd feat(agent): refactor tool response handling and enhance online agent functionality 2026-06-16 15:54:20 +08:00
HouYunFei f7b030e209 feat(agent): enhance online Agent functionality with improved read-only responses and log view 2026-06-16 14:02:53 +08:00
HouYunFei bce9c2d897 feat(agent): improve Agent panel interactions and enhance text model selection UI 2026-06-16 13:44:33 +08:00
HouYunFei b4515ed85f feat(agent): enhance Codex thread management with workspace verification and improved thread loading 2026-06-16 13:22:15 +08:00
HouYunFei 7f0199da59 feat: transition to a fully frontend architecture by removing backend dependencies and updating configuration for local deployment 2026-06-16 12:56:49 +08:00
HouYunFei 8a66524ea7 feat: update admin navigation and configuration for local deployment, enhance user experience with direct API connections 2026-06-16 12:07:35 +08:00
soldier 0d90465339 feat: enhance MentionMenu with active item scrolling functionality 2026-06-16 11:00:32 +08:00
HouYunFei d3923e21e0 feat(agent): enhance Canvas Agent with new operations and improved message handling 2026-06-15 23:24:56 +08:00
HouYunFei b6d358d6f8 feat: rename package to @basketikun/canvas-agent and update related configurations 2026-06-15 17:16:27 +08:00
HouYunFei e422285c59 feat(agent): implement local Canvas Agent with MCP integration and HTTP server 2026-06-14 18:27:44 +08:00
HouYunFei 8d0b5ecdb8 feat(video): implement video generation task creation and polling mechanism 2026-06-08 15:26:35 +08:00
HouYunFei 373229a04a fix(canvas): resolve text node editing issues and improve textarea rendering 2026-06-08 15:11:16 +08:00
HouYunFei 39a1e859b1 feat(webdav): add WebDAV synchronization configuration and functionality 2026-06-08 14:59:30 +08:00
HouYunFei 81b9a207b9 feat(toolbar): add image splitting feature to toolbar for generating sub-images 2026-06-07 12:25:52 +08:00
kunkun 3667557dc2 Merge pull request #37 from 1847123733/main
添加图像节点双击放大预览功能
2026-06-04 17:41:54 +08:00
HouYunFei 6d3b89c842 feat(toolbar): add reverse prompt feature to image node toolbar for generating prompt text 2026-06-04 17:25:30 +08:00
1847123733 eb050fc08a Merge branch 'basketikun:main' into main 2026-06-04 17:15:17 +08:00
王鑫凯 72024c8138 feat(canvas): 添加图像节点预览功能
- 在CanvasNode组件中添加onViewImage回调属性
- 实现图像节点点击时触发预览功能
- 修复事件冒泡问题,确保图像预览操作不会触发其他交互
2026-06-04 17:13:28 +08:00
HouYunFei 96cca4d97c feat(canvas): enhance configuration node with new input handling and reference selection features 2026-06-04 17:03:48 +08:00
HouYunFei 8a51cc609f feat(toolbar): add mask editing feature to image node toolbar for localized modifications 2026-06-04 16:12:38 +08:00
HouYunFei 0adf547db9 feat(toolbar): update image toolbar tools visibility settings for better user experience 2026-06-04 15:19:05 +08:00
HouYunFei 68aca6fa16 feat(toolbar): enhance image node hover toolbar with new tools and settings modal 2026-06-03 17:52:01 +08:00
HouYunFei ceb7605a1e feat(canvas): add image upscaling and super resolution features with UI enhancements 2026-06-03 16:05:35 +08:00
stupid-h4er 76a4e7c4a2 fix: prefer config resources for canvas mentions 2026-06-03 12:49:29 +08:00
stupid-h4er c70e7af14d feat: add canvas resource mention references 2026-06-03 11:26:59 +08:00
HouYunFei 8f19a18c35 feat(audio): add audio generation capabilities with configurable settings and UI enhancements 2026-06-02 17:50:36 +08:00
HouYunFei 38ec654748 feat(config): enhance model configuration with support for audio models and improve UI for user preferences 2026-06-02 17:24:27 +08:00
HouYunFei 39793e890d feat(canvas): add canvas default image count configuration and update model picker capabilities 2026-06-02 17:07:31 +08:00
HouYunFei 98a229af5c feat(docs): add documentation link in top menu and user status actions 2026-06-02 16:22:40 +08:00
HouYunFei d12cceeecf feat(image): enhance image generation settings with dimension snapping and thumbnail filtering 2026-06-02 16:00:20 +08:00
HouYunFei 50176d8c7a feat(image): enhance action buttons with tooltips and improve layout 2026-06-02 15:06:50 +08:00
HouYunFei e926223385 feat(image): add output format for image processing and update routes type reference 2026-06-02 14:56:23 +08:00
HouYunFei 965270b6e3 feat(docker): update Dockerfile for standalone Next.js app and adjust build paths 2026-06-02 14:37:13 +08:00
HouYunFei 7802771e56 Merge branch 'fork/stupid-h4er/feat/ark-agentplan-seedance-video'
# Conflicts:
#	docs/content/docs/progress/pending-test.mdx
2026-06-02 09:41:28 +08:00
stupid-h4er c7e3e0af6a feat: improve canvas connection interactions 2026-06-01 15:26:24 +08:00
kunkun 5f59b4bed3 Merge pull request #20 from aaronjmars/security/open-redirect-guard
fix(security): block open redirect in login redirect target
2026-06-01 11:17:39 +08:00
HouYunFei 3aee6d1eee Merge branch 'fork/stupid-h4er/feat/ark-agentplan-seedance-video'
# Conflicts:
#	docs/pending-test.md
2026-06-01 10:53:16 +08:00
stupid-h4er c3b1ba2943 feat: label image references in generation 2026-05-31 00:56:40 +08:00
HouYunFei 6867f3e1e6 feat(config): 支持通过URL参数自动配置API设置
- 新增通过URL查询参数baseUrl/baseurl和apiKey/apikey自动填充配置的功能
- 实现读取参数后从地址栏自动移除相关参数的安全机制
- 添加后台是否允许自定义渠道的检查逻辑
- 集成Ant Design的消息提示和对话框组件用于用户反馈
- 更新文档说明New API自动配置的使用方法和参数格式
- 优化配置初始化流程以处理外部软件跳转场景
2026-05-30 13:08:43 +08:00
stupid-h4er 923e21c581 fix: normalize gpt image request size 2026-05-28 14:28:53 +08:00
aeonframework 5ca5b72b01 fix(security): block open redirect in login redirect target
The login redirect accepted any value beginning with a single slash, so a
protocol-relative URL such as "//evil.com" (or a backslash variant) slipped
through and the browser resolved it to an external site. Both the Go OAuth
state decoder and the web login page used the same prefix-only check, so an
attacker could send a victim to /login?redirect=//evil.com — or supply it via
the Linux.do OAuth redirect param — and bounce them off-site after login.

Harden both layers: strip Tab/CR/LF (which browsers ignore inside URLs) and
reject protocol-relative and backslash-prefixed targets, allowing only genuine
same-site relative paths.

Detected by Aeon + semgrep (go.lang.security.injection.open-redirect).
Severity: medium
CWE-601 (URL Redirection to Untrusted Site)

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
2026-05-27 20:06:22 +00:00
stupid-h4er 74ea4b81f2 fix: improve seedance reference handling 2026-05-27 21:55:05 +08:00
stupid-h4er 4bffb55695 feat: add seedance media params and model visibility 2026-05-27 13:02:36 +08:00
stupid-h4er 3be0df0df6 fix: clarify ark agent plan model discovery 2026-05-27 10:52:59 +08:00
stupid-h4er fa9a3c1920 fix: normalize ark agent plan base url 2026-05-27 10:08:01 +08:00
stupid-h4er 1b2d473d9c feat: add video node preview 2026-05-26 23:10:49 +08:00
stupid-h4er c9fea71821 feat: add ark seedance video generation 2026-05-26 23:10:41 +08:00