Skip to content

Releases: mycyg/AutoCSR

v2.1.0 — AI pair release: Codex security + Claude UI redesign

Choose a tag to compare

@mycyg mycyg released this 25 May 02:54

A maintenance + polish release driven by AI pair iteration. The first AutoCSR release co-developed by two AI systems (Claude + Codex) with all work reviewed and integrated by the project maintainer.

Codex-contributed

  • Route-level tenant + ACL guard (server/middlewares/project_access.py) with dev-mode fall-through to preserve legacy e2e scripts
  • Cross-project workbench search (server/routes/workbench.py)
  • Normalized WebSocket task event DTOs (server/task_events.py)
  • Upload path traversal guard + frontend input sanitization
  • Tightened sandbox AST denylist (sandbox/ast_guard.py)
  • Playwright e2e infrastructure (frontend/e2e/)
  • 10 new backend unit tests + 16 prompt files tuned across writer/editor/analyst/plan/reviewer/proposer/router/harmonizer

Claude UI redesign

  • Emoji-free interface — 31 emoji across 5 frontend files plus 8 README section headers replaced with lucide-vue-next icons or numeric ordinals
  • Warm orange primary (#BA5535 light / #DA7756 dark) replacing the cyan-blue (#0891b2); aligned with Claude product aesthetic
  • Inter web font + 1.6 line-height for readable typography
  • Flat shadows (0 1px 2px rgba(0,0,0,0.04)) replacing heavy elevation
  • True-black dark-mode background (#0a0a0a from #081421)
  • LoginView: solid white background + bordered card (was gradient + shadow)
  • Element Plus theme fully overridden via CSS variables in element-overrides.css

Fixes

  • ProjectDTO frontend types synced with backend M21 multi-tenant schema (tenant_id, created_by)
  • literature_search unknown source now raises AgentError (was bare ValueError)
  • CI: added frontend-e2e Playwright job
  • README e2e badge: 17 → 22 passing
  • docs/api.md curl / Python / TypeScript examples for /auth/login, /literature_search, /polish
  • ChapterReader.vue: 13 hardcoded Chinese strings extracted to 17 new report.* i18n keys

Verification

  • 22 e2e scripts (m2 – m22) all passing
  • 91 backend unit tests passing
  • Frontend build clean (vue-tsc --noEmit + vite build, 0 errors)
  • Zero refer/ leaks on remote

Acknowledgments

Built with AI pair programming: Claude Opus 4.7 (architecture + implementation) and OpenAI Codex (testing iteration + security hardening). All code reviewed and integrated by the project maintainer.

Full changelog: v2.0.0...v2.1.0