4 Commits

Include renames

Author	SHA1	Message	Date
tiennm99	3c1263add6	fix(canvas): make multi-chunk pixel writes atomic and refund cooldown on failure ... - wrap writePixels in state.storage.transactionSync so a partial multi-chunk failure doesn't leave the canvas half-written or out of sync with the WS broadcast - size new chunk buffer against chunkSize(chunkId) instead of the persisted blob's length so writes after a canvas-grow no longer silently drop OOB bytes in the formerly-last short chunk - refund the cooldown row when writePixels throws so transient storage errors stop soft-DOSing the user (and halving image-uploader throughput) - bound readAllChunks by chunk_id < CHUNK_COUNT and trim oversized blobs so orphan rows from a future shrink no longer crash GET /api/canvas - require a positive Content-Length on /api/place (411) and reject above the pre-parse cap (413); previously a missing or zero header bypassed the cap - drop String(err) from the 500 response body - drain the INSERT cursor symmetrically with the UPDATE branch in tryAcquire - assert CHUNK_BYTES <= 2 MB at module load (DO SQLite per-cell BLOB cap) - correct the inverted webSocketClose comment and guard the re-close call - add tests for missing / zero / oversized Content-Length Plan: plans/260510-0232-fix-do-migration-followups/phase-01-do-storage-atomicity.md	2026-05-10 02:57:30 +07:00
tiennm99	c3f7c02f6d	feat(canvas): migrate canvas + cooldown storage to DO SQLite ... Move pixel state and rate-limit cooldowns out of Upstash Redis and into the existing CanvasRoom Durable Object's SQLite-backed storage. Worker becomes a thin validation/proxy; the DO does atomic cooldown check + pixel write + WS broadcast in one in-memory step. Why: eliminate external dependency, keep $0/month free-tier forever, exploit single-threaded actor for strong consistency without round-trips. Architecture: - canvas_chunks: 256 BLOB rows × 64 KB; CHUNK_COUNT derived from CANVAS_WIDTH × CANVAS_HEIGHT / CHUNK_BYTES so resize is config-only. - cooldowns: user_id → expires_at, 1% sample-rate lazy GC. - Worker forwards /api/canvas, /api/place, /api/ws to DO endpoints. - POST /admin/migrate-from-upstash: token-gated one-shot importer. Phases 1-3 code complete; Upstash dependency stays until prod migration runs and 7-day rollback window passes (Phase 4). Plan: plans/260509-2309-canvas-on-do-storage/	2026-05-09 23:53:21 +07:00
tiennm99	f59e55a852	refactor(rate-limit): 1 req/sec cooldown, batch up to 2048 (#3) ... * refactor(rate-limit): switch to 1 req/sec cooldown, batch size up to 2048 Replace per-pixel credit/token-bucket model with a simple per-user cooldown (SET NX EX 1). Batch size is now independent of the rate limit and capped at MAX_BATCH_SIZE = 2048. - rate-limiter: SET NX EX replaces Lua credit script - worker: response shape { ok: true } (no credits field) - client: drop credit state/timer/UserInfo; uploader paces by cooldown - tests: mock checkRateLimit; integration test exercises SET NX EX - docs: README, system-architecture, code-standards, deployment-guide * chore(plans): remove implemented plan directories rplace-implementation (base build), review-fixes, and image-importer-enhancements are all shipped. Keep plans/reports/ as historical code-review and research references.	2026-04-18 10:19:00 +07:00
tiennm99	33cfd3d7b3	test: add comprehensive unit tests with Vitest ... 65 tests covering canvas decoder, pixel buffer, user ID hashing, canvas storage (with binary encoding regression test), Redis client API shape, and worker endpoint validation.	2026-04-16 22:37:12 +07:00