mirror of https://github.com/johannesjo/super-productivity.git synced 2026-07-17 16:37:43 +00:00

History

Johannes Millan 3dc86dd183 Fix/add rate limits (#6745 ) * fix(build): fix tag resolution and add error handling in bump-android-version The previous two-tag approach (`currentTag` → `prevTag`) would resolve the wrong changelog range during `npm version` since the new tag doesn't exist yet. Simplified to a single `lastTag...HEAD` range which correctly captures all commits since the last release. Added try-catch with fallback to last 20 commits when no tags exist, and a fallback message for empty changelogs. * fix(sync): differentiate auth error messages and clarify token revocation - Rename server dashboard "Refresh Token" to "Revoke & Replace Token" with explicit warning that ALL devices will be disconnected - Return rejection reason in 401 responses (revoked, expired, etc.) via discriminated union TokenVerificationResult type - Show different client error messages for server-side token rejection vs missing local credentials to aid user diagnosis - Extract server error reason from JSON response body in AuthFailSPError Closes #6597 * refactor(sync): use generic auth reason and improve test readability - Replace 'User not found' and 'Account not verified' with generic 'Account unavailable' to avoid leaking account state in API responses - Extract long reason strings to constants in middleware.spec.ts * fix(sync-server): add per-route rate limits to silence CodeQL alert Add explicit rate limits to routes that only had the global rate limit: - GET /api/sync/status: 60/min - DELETE /api/sync/data: 3/15min (destructive operation) - GET /api/sync/restore-points: 30/min - GET /api/sync/restore/:serverSeq: 10/5min (CPU-intensive) - GET /reset-password: 20/15min - GET /recover-passkey: 10/15min These complement the global @fastify/rate-limit (100/15min) and silence the CodeQL 'Missing rate limiting' alert on authenticated handlers.		2026-03-05 21:18:36 +01:00
..
plugin-api	build: update types map	2026-03-04 11:25:28 +01:00
plugin-dev	fix(build): ensure plugin-api is built before plugin builds (#6720 )	2026-03-04 11:25:21 +01:00
shared-schema	test(sync): add vector clock pruning edge case tests (#6506 )	2026-02-13 12:42:36 +01:00
super-sync-server	Fix/add rate limits (#6745 )	2026-03-05 21:18:36 +01:00
vite-plugin	feat(plugins): add i18n support to boilerplate-solid-js	2026-01-16 22:34:50 +01:00
build-packages.js	fix(plugins): fix TS errors and build for iFrame-less plugins	2026-03-03 20:14:54 +01:00
README.md	feat: cleanup and update plugins 2	2025-06-29 06:36:02 +02:00

README.md

Super Productivity Packages

This directory contains plugin packages and the plugin API for Super Productivity.

Structure

plugin-api/ - TypeScript definitions for the plugin API
plugin-dev/ - Plugin development examples and tools
- api-test-plugin/ - Basic API test plugin
- procrastination-buster/ - Example SolidJS-based plugin
- yesterday-tasks-plugin/ - Simple plugin showing yesterday's tasks
- boilerplate-solid-js/ - Template for creating new SolidJS plugins (not built)
- sync-md/ - Markdown sync plugin (not built)

Building Packages

All packages are built automatically when running the main build process:

npm run build:packages

This command:

Builds the plugin-api TypeScript definitions
Builds plugins that require compilation (e.g., procrastination-buster)
Copies plugin files to src/assets/ for inclusion in the app

Development

To work on a specific plugin:

cd plugin-dev/[plugin-name]
npm install
npm run dev

Adding a New Plugin

Create a new directory in plugin-dev/
Add the plugin configuration to /packages/build-packages.js
Run npm run build:packages to test the build

Notes

The boilerplate-solid-js and sync-md plugins are development templates and are not included in production builds
Plugin files are automatically copied to src/assets/ during the build process
The build script handles dependency installation automatically