2 Commits

Author	SHA1	Message	Date
dolgolyov.alexei	d86d53f473	Phase 10: Per-User Rate Limits — messages + tokens, quota UI, admin usage ... Backend: - max_ai_messages_per_day + max_ai_tokens_per_day on User model (nullable, override) - Migration 008: add columns + seed default settings (100 msgs, 500K tokens) - usage_service: count today's messages + tokens, check quota, get limits - GET /chats/quota returns usage vs limits + reset time - POST /chats/{id}/messages checks quota before streaming (429 if exceeded) - Admin user schemas expose both limit fields - GET /admin/usage returns per-user daily message + token counts - admin_user_service allows updating both limit fields Frontend: - Chat header shows "X/Y messages · XK/YK tokens" with red highlight at limit - Quota refreshes every 30s via TanStack Query - Admin usage page with table: user, messages today, tokens today - Route + sidebar entry for admin usage - English + Russian translations Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-03-19 15:44:51 +03:00
dolgolyov.alexei	fed6a3df1b	Phase 6: PDF & Polish — PDF generation, admin users/settings, AI tool ... Backend: - Setting + GeneratedPdf models, Alembic migration with default settings seed - PDF generation service (WeasyPrint + Jinja2 with autoescape) - Health report HTML template with memory entries + document excerpts - Admin user management: list, create, update (role/max_chats/is_active) - Admin settings: self_registration_enabled, default_max_chats - Self-registration check wired into auth register endpoint - default_max_chats applied to new user registrations - AI tool: generate_pdf creates health compilation PDFs - PDF compile/list/download API endpoints - WeasyPrint system deps added to Dockerfile Frontend: - PDF reports page with generate + download - Admin users page with create/edit/activate/deactivate - Admin settings page with self-registration toggle + max chats - Extended sidebar with PDF reports + admin users/settings links - English + Russian translations for all new UI Review fixes applied: - Jinja2 autoescape enabled (XSS prevention in PDFs) - db.refresh after flush (created_at populated correctly) - storage_path removed from API response (no internal path leak) - Role field uses Literal["user", "admin"] validation - React hooks called before conditional returns (rules of hooks) - default_max_chats setting now applied during registration Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-03-19 14:37:43 +03:00