Provider save for non-configurable types and mailbox member email mapping
**************** selections now immediately persist via saveProvider API instead of only updating local state. Mailboxes tab now correctly extracts emailAddress...
修复 PRE TIKET DB 约束 + 重新设计创建格式
- 固定的CHECK对支持的制约 ticket.status允许正数 14 - 重新设计基于现代卡片的出票模式: - "我们能帮上什么忙?" - “有支持的聊天”卡(主打,突出显示)——开始预选 - "签票"卡片——以标题/说明形式全开 - 后键返回票单选择者 - 两种路径都允许与指定代理人聊天
从{主题: [...]} 中提取话题数组 API 反应
GET / api/ 支持/ 专题终点返回{主题: [...]},而不是 a 原始阵列 。 现在所有消费者在使用数组之前先提取数据.
在创建时指派默认角色给成员
现在指定"成员" (每个人)从组织的角色。 现在指定两个 "成员"(每个人)角色和"团队成员"角色来自 组织。 这是空成员-权利-应用-角色存在的根本原因 在含有权限配置的org roles中,但从未与成员链接 通过成员 roles,所以权利计算总是产生0被授予的权利.
Recalculate member_rights_applied after role create/update/delete
The member_rights_applied table was never recalculated when roles were modified, causing all members to have 0 applied rights. Now calls **************** after ...
在 API 响应上添加 Array.is 守护以预防.map 出错
API 在后端表格中返回错误对象而不是数组 还不存在 使用 Array.is Array 检查守护所有阵列操作 .
Enable redirect following for MaxMind download
MaxMind returns 302 redirect to the actual file. HttpClient wasn't following it, causing the sync to fail with HTTP 302.
Add SecurityConfig to permit daemon trigger and actuator endpoints
Spring Security defaults blocked all endpoints with 401. Added explicit config to permit /api/daemon/** and /actuator/** without authentication.
Update ticket popup tool window to use light theme matching chatColors
Replace dark theme (dark backgrounds, white text, amber accents) with the light color scheme used by all other popup tool windows in the app.
Remove MANAGE_SUPPORT conditional from settings/analytics tabs, enable NavPri slide-out
All tabs now always visible. Removed disablePanel from NavPri Support entry so the slide-out panel works on hover.
Make description textarea fill remaining popup window height
Removed minRows/maxRows constraints and set flex layout on the input root so the textarea expands to fill all available vertical space.
正确的 Media ObjImgDownload FK 用 Media ObjImg UUID PK 代替复合键
复合 FK( OBJ ID, IMG ID) 引用非 PK 列导致类型 不匹配( uuid vs int) 。 在 OBJ IMG ID 上更改为单 FK 引用 Media ObjImg.ID (UUID PK). (英语).
使用本地查询求取avg解析时间来避免 Hibernate EXTRACT( EXTRACT) 限制
休眠 6 无法将 EXTRACT( EPOCH from...) 应用到时间戳减法 (生产期限类型,而不是TEMPORAL)。 切换到本地 SQL 查询 CockroachDB 处理本地.
Redesign AI processing toggle as labeled switch with Assistant icon
Replace icon button with a toggle switch using the MUI Assistant icon, labeled "Train AI With This Note". Moved to the left of the save button. Renamed "Create"...
Add filter toggle button to notes header
The sidebar collapse button was hidden behind the app's left nav bar. Replaced it with a filter icon toggle in the NotesHeader that is always accessible regardl...
Transparent server-side encryption with stable master key
- Add permanent notes.master-encryption-key to ConfigMap (was generating a random key on each pod restart, making old notes undecryptable) - Always encrypt ...
Clear undecryptable note content and disable encryption flag
When server-side decryption fails (corrupted data or key mismatch), clear the content and set isEncrypted=false on the entity so the note stops showing cipherte...
Decrypt encrypted notes in getAllNotes and searchNotes responses
getAllNotes and searchNotes were returning raw encrypted content for notes with isEncrypted=true. Now decrypts content server-side before returning, matching th...
Extract plain text from Lexical JSON for note card previews
The note content is now Lexical JSON, not HTML. The preview function was falling back to stripHtml which dumped raw JSON as the preview. Now parses Lexical JSON...
将 NoteDTO 长ID作为 JavaScript 精密安全的字符串
CockroachDB 独有的 rowid () ID 超过 JavaScript 的 MAXQ-SAFE INTEGER, 分析为数字时造成精度损失。 添加@ Json 序列化为 将序列器拖到 id 和 userId 字段, 使其序列化为 JSON弦乐.
Rewrite GeoLite sync — correct download URL, streaming hash, batch inserts
- Use MaxMind's current permalink API with HTTP Basic Auth (account-id + license-key) - Streaming SHA-256 instead of Files.readAllBytes (prevents OOM on 100MB+ ...
Forward raw JSON responses in notes API routes to preserve ID precision
CockroachDB unique_rowid() IDs exceed JavaScript's MAX_SAFE_INTEGER. The previous response.json() + NextResponse.json() round-trip caused JSON.parse to convert ...
Improve notes save flow — keep editor open, show actual errors
- Don't close the editor after saving an existing note (only close after creating a new one) - Fix fetchWithAuth to read error.error instead of error.message ...
Open notes directly on click, derive categories from data, remove encryption
- Click a note to open it directly in the editor instead of making a separate API call that was failing - Derive categories and tags from loaded notes data in...
Use OTKPreAuthFilter attributes instead of re-validating OTK in NotesController
The OTKPreAuthFilter already consumes and validates the OTK, storing the session data in request attributes. NotesController was trying to re-validate the alrea...
Explicitly forward visitor IP to downstream services
ForwardedHeaderFilter consumes X-Forwarded-For from the incoming request, so when APIService forwards to SecurityService via RestTemplate the header is missing....
Resolve notes page load failure and replace Quill editor with Lexical
Add missing runtime/dynamic exports to all notes API routes to enable proper OTK authentication. Replace React Quill WYSIWYG editor with the same Lexical-based ...
Forward visitor IP/User-Agent to backend, add duration unit picker
apiProxy: Now forwards X-Forwarded-For and User-Agent from the original visitor so backend logs the real client info instead of the Next.js server. AccessBlock...
Remove RoleRightsSyncRunner — rights are added manually for existing orgs
The underlying bug in **************** (detached entity issue) has been fixed in kamo-shared-library. New rights for existing roles will be added manually via S...
在创建角色权利时使用管理下的角色参考
继Repository.save()之后,当地角色Admin/角色Everyone 变量可以脱离持久性背景。 创建 RoleRights () 正在将 OrgRoleRight 条目添加到离散对象中, 这些对象从来没有 级联在之后的保存。 现在检索管理的角色引用 在初始保存后从 stained Org.getRoles...
Restore permission gate on AccessBlockManager
Re-adds the MANAGE_ACCESS_RULES permission check that was incorrectly removed. The underlying issue (admin roles missing new rights) is fixed by KamoInitializer...
Remove full-component permission gate from AccessBlockManager
New rights aren't assigned to any role yet, blocking all users. Other security settings tabs (API Access, OAuth2, System Debug) don't have permission gates — fo...
Remove GD check from ****************
The sed command that added the god-mode bypass incorrectly inserted it into all methods containing sessionData, not just hasRight. This caused 'return true' (bo...
Initialize god mode state synchronously from localStorage
isGodMode was initialized as false and only loaded from localStorage in a useEffect (after first render), so checkRight() returned false on initial render even ...
Allow god-mode-active users to bypass right checks in checkRight
New security rights aren't assigned to any role yet, causing all users to be denied. God-mode-active users now pass all checkRight() calls.
Allow god-eligible users to bypass access security permission checks
New rights (MANAGE_ACCESS_RULES, VIEW_ACCESS_LOGS, etc.) aren't granted to any existing role yet, so all users get Forbidden. God-eligible users (GD=true in ses...
Move AccessEnforcementFilter to scanned package, revert ComponentScan
The widened @ComponentScan caused a corsFilter bean conflict between CorsConfig and WebConfig. Moved the filter into com.kamo.api.app.config (already scanned by...
Add Redis connection config to K8s configmap
APIService pod was failing to start because spring-boot-starter-data-redis auto-configuration couldn't connect to Redis at localhost:6379. Points to redis.kamo....
Show KB nav item unconditionally in sidebar
Removed the isKnowledgeBase feature gate so KB always displays, matching the previous NavTop behavior.
删除跟随鼠标编码器的渐变MeshBackground orbs
蓝色和紫色的梯度圈是由 GradientMeshBackground组件跟踪鼠标位置.
防止密码输入在步骤过渡时丢下第一个按键
焦点投票循环是呼叫设置 每50msSelection Rang(0,长度) 用于 1.2s,它选择了任意键入字符,因此替换了下一个键盘 这个 现在跟踪用户输入,只选择用于浏览器自动填充的文本.
Replace broken Anthropic, OpenRouter, and xAI logo SVGs
The original files were 404 placeholders (14 bytes). Replaced with proper SVG logos from Simple Icons.
替换已破损的 Anthropic、 OpenRouter 和 xAI 标识 SVGs
Kamo-Internal中的原始文件有404个占位符(14字节). 从简单图标取而代之的是适当的 SVG 标志 .