7 Commits

Author	SHA1	Message	Date
ryan	9632604958	feat(auth): implement decoupled sliding-window rate limiting for login and oauth	2026-09-02 22:15:21 +08:00
ryan	455e2f8be5	fix(config): serve public settings and enforce login CAP ... Public config now comes from admin as a flat visibility=1 map instead of a cross-plugin query that compared an integer column to "visible". Login and register resolve CaptchaService per request so CAP is not skipped when user applies before cap.	2026-09-02 17:07:07 +08:00
ryan	4f50f6a8f9	feat(core): bind request services and implement registered tasks ... Wire plugin services through Bind/InjectFrom and AppContext so HTTP and workers resolve dependencies after Apply. Register TaskHandler objects with persisted results, and implement send_email_code, mail:send, cleanup_inactive_users, and dispatch_bot_msg.	2026-09-02 16:59:00 +08:00
ryan	374289bfda	fix(api): align upload permissions and mount robots and swagger routes	2026-08-30 17:53:42 +08:00
ryan	ea97b64407	fix(task): restore task metadata contract and type fields in task types api	2026-08-29 12:22:51 +08:00
ryan	f4975d6732	refactor(plugins): restructure admin and message_gateway into standard layered sub-packages	2026-08-28 22:33:26 +08:00
ryan	f048dc528e	fix(docs): move swagger generated docs.go into backend/docs module directory	2026-08-28 15:13:34 +08:00