2.3 KiB
2.3 KiB
Changelog
All notable changes to yedir-ai will be documented in this file.
This project follows a pragmatic changelog format inspired by Keep a Changelog. Dates use ISO format.
Unreleased
Added
- Lovart home release smoke script via
pnpm smoke:routes. - Unified local and CI quality gate via
pnpm check:quality. - Release readiness checklist, deployment guide, operations guide, architecture overview, security policy, contribution guide, support policy, code of conduct, PR template, issue templates, CODEOWNERS, and Dependabot configuration.
- Scoped log hygiene gate for high-risk server/client files.
- Route-level helper tests for Canvas chat helper behavior.
Changed
/home now prioritizes a lightweight shell and progressively loads personalized data./classicand/chat/[id]legacy UI routes redirect to/./api/chatis documented and treated as an internal Canvas/Agent generation API.- Admin settings local AI sections were modularized into focused components with shared section shells and types.
- Lovart home and Canvas/ImageNode presentation surfaces were split into more focused modules.
- Chat API internals were partially extracted into focused
_libhelpers. - CI now reuses the same quality gate command as local development.
Security
- Production logging now uses structured redaction for storage/upload, auth, AI provider, Canvas, scene fusion, Pick Object, Tripo 3D, World Labs, and internal generation paths.
- Sensitive values such as tokens, cookies, Authorization headers, signed URLs, base64 payloads, prompts, provider responses, and private user content are documented as non-loggable/non-shareable.
- Tracked local artifact checks prevent
.env.local,.DS_Store, swap files,.claude/, migration backups, andtsconfig.tsbuildinfofrom entering Git. - Security disclosure guidance is documented in
SECURITY.md.
Verification
- Current local release checks:
pnpm check:qualityAUTH_TRUST_HOST=true PORT=3001 pnpm devSMOKE_BASE_URL=http://127.0.0.1:3001 pnpm smoke:routes
Known Follow-ups
- Confirm remote GitHub Actions on a pushed PR.
- Continue optional log hygiene coverage for remaining historical image enhancement interfaces.
- Continue optional modularization of large Canvas/Agent historical modules.