Initial commit: img-infinite-canvas AI design workbench MVP

Moteva-style AI design workbench replica. Home prompt creates a project;
the project page provides an infinite canvas with node drag, zoom/pan,
a design chat panel, history replay, image asset upload, and project
save/regenerate.

- Backend: go-zero, DDD layering, sqlc/pgx, optional PostgreSQL; memory
  or Redis cache; asynq job queue; MinIO/S3/R2/OSS object storage;
  sky-valley/pi agent runtime adapter.
- Frontend: Next.js App Router + Vite artifact build, TypeScript, i18n,
  shadcn/ui components, auth (OTP/Turnstile/Google/WeChat).
- Deploy: Docker Compose and k3s manifests.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

deploy/config/api.docker.yaml

@@ -0,0 +1,96 @@
+Name: img_infinite_canvas-api
+Host: 0.0.0.0
+Port: 8888
+Timeout: 1200000
+MaxBytes: 33554432
+Storage:
+  Driver: postgres
+  DataSource: postgres://canvas:canvas@postgres:5432/canvas?sslmode=disable
+Cache:
+  Driver: redis
+  Addr: redis:6379
+  Password: ""
+  DB: 0
+  TTLSeconds: 300
+JobQueue:
+  Driver: asynq
+  Addr: redis:6379
+  Password: ""
+  DB: 0
+  Queue: default
+  Concurrency: 10
+  MaxRetry: 3
+  TimeoutSeconds: 900
+  ShutdownTimeoutSeconds: 30
+Realtime:
+  Driver: redis
+  Addr: redis:6379
+  Password: ""
+  DB: 0
+  ChannelPrefix: canvas:realtime
+  FallbackPollMillis: 10000
+Outbox:
+  Driver: postgres
+  DataSource: postgres://canvas:canvas@postgres:5432/canvas?sslmode=disable
+  PollMillis: 1000
+  BatchSize: 100
+Auth:
+  Region: global
+  RegionMode: manual
+  TokenSecret: local-dev-change-me
+  TokenTTLSeconds: 604800
+  RefreshTTLSeconds: 2592000
+  CodeTTLSeconds: 600
+  DevReturnCode: true
+  Email:
+    Driver: none # none|smtp
+    Host: ""
+    Port: 587
+    Username: ""
+    Password: ""
+    FromName: hello
+    FromEmail: hello@auth.moteva.local
+    BrandName: Moteva
+    UseTLS: false
+    StartTLS: true
+    InsecureSkipVerify: false
+    TimeoutSeconds: 10
+  Turnstile:
+    Enabled: true
+    SiteKey: "1x00000000000000000000AA"
+    SecretKey: "1x0000000000000000000000000000000AA"
+    SecretKeyEnv: TURNSTILE_SECRET_KEY
+    SiteVerifyURL: https://challenges.cloudflare.com/turnstile/v0/siteverify
+    TimeoutSeconds: 5
+  Google:
+    ClientID: ""
+    TokenInfoURL: https://oauth2.googleapis.com/tokeninfo
+    TimeoutSeconds: 8
+  Wechat:
+    AppID: ""
+    AppSecret: ""
+    RedirectURI: ""
+    Scope: snsapi_login
+    AuthURL: https://open.weixin.qq.com/connect/qrconnect
+    TokenURL: https://api.weixin.qq.com/sns/oauth2/access_token
+    TimeoutSeconds: 8
+Agent:
+  Driver: pi
+  Text:
+    Driver: vision
+    Model: gpt-5.4-mini
+    TimeoutSeconds: 240
+  Planner:
+    Driver: vision
+    Model: gpt-5.5
+    TimeoutSeconds: 240
+ObjectStorage:
+  Driver: minio
+  Bucket: canvas-assets
+  Endpoint: minio:9000
+  Region: us-east-1
+  AccessKey: canvas
+  SecretKey: canvas-secret
+  PublicBase: http://localhost:19000/canvas-assets
+  UseSSL: false
+  ExpiresIn: 900

deploy/docker-compose.yml

@@ -0,0 +1,91 @@
+services:
+  postgres:
+    image: postgres:18-alpine
+    environment:
+      POSTGRES_DB: canvas
+      POSTGRES_USER: canvas
+      POSTGRES_PASSWORD: canvas
+    ports:
+      - "15432:5432"
+    volumes:
+      - postgres18-data:/var/lib/postgresql
+    healthcheck:
+      test: ["CMD-SHELL", "pg_isready -U canvas -d canvas"]
+      interval: 5s
+      timeout: 5s
+      retries: 20
+
+  redis:
+    image: redis:8-alpine
+    command: ["redis-server", "--appendonly", "yes"]
+    ports:
+      - "16379:6379"
+    volumes:
+      - redis-data:/data
+    healthcheck:
+      test: ["CMD", "redis-cli", "ping"]
+      interval: 5s
+      timeout: 5s
+      retries: 20
+
+  minio:
+    image: minio/minio:RELEASE.2025-09-07T16-13-09Z
+    command: ["server", "/data", "--console-address", ":9001"]
+    environment:
+      MINIO_ROOT_USER: canvas
+      MINIO_ROOT_PASSWORD: canvas-secret
+    volumes:
+      - minio-data:/data
+    ports:
+      - "19000:9000"
+      - "19001:9001"
+    healthcheck:
+      test: ["CMD", "mc", "ready", "local"]
+      interval: 5s
+      timeout: 5s
+      retries: 20
+
+  api:
+    build:
+      context: ../server
+    command: ["/app/img-infinite-canvas", "-f", "/app/etc/config.yaml", "-mode", "api"]
+    depends_on:
+      postgres:
+        condition: service_healthy
+      redis:
+        condition: service_healthy
+      minio:
+        condition: service_healthy
+    volumes:
+      - ./config/api.docker.yaml:/app/etc/config.yaml:ro
+    ports:
+      - "8888:8888"
+
+  worker:
+    build:
+      context: ../server
+    command: ["/app/img-infinite-canvas", "-f", "/app/etc/config.yaml", "-mode", "worker"]
+    depends_on:
+      postgres:
+        condition: service_healthy
+      redis:
+        condition: service_healthy
+      minio:
+        condition: service_healthy
+    volumes:
+      - ./config/api.docker.yaml:/app/etc/config.yaml:ro
+
+  web:
+    build:
+      context: ../frontend
+    environment:
+      NEXT_PUBLIC_API_PROXY: http://api:8888
+    depends_on:
+      - api
+    ports:
+      - "3000:3000"
+
+volumes:
+  postgres18-data:
+  redis-data:
+  minio-data:

deploy/k3s/img-infinite-canvas.yaml

@@ -0,0 +1,342 @@
+apiVersion: v1
+kind: Namespace
+metadata:
+  name: img-infinite-canvas
+---
+apiVersion: v1
+kind: Secret
+metadata:
+  name: turnstile-secret
+  namespace: img-infinite-canvas
+type: Opaque
+stringData:
+  TURNSTILE_SECRET_KEY: 1x0000000000000000000000000000000AA
+---
+apiVersion: v1
+kind: Secret
+metadata:
+  name: postgres-secret
+  namespace: img-infinite-canvas
+type: Opaque
+stringData:
+  POSTGRES_DB: canvas
+  POSTGRES_USER: canvas
+  POSTGRES_PASSWORD: canvas
+---
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  name: api-config
+  namespace: img-infinite-canvas
+data:
+  config.yaml: |
+    Name: img_infinite_canvas-api
+    Host: 0.0.0.0
+    Port: 8888
+    Timeout: 1200000
+    Storage:
+      Driver: postgres
+      DataSource: postgres://canvas:canvas@postgres:5432/canvas?sslmode=disable
+    Cache:
+      Driver: redis
+      Addr: redis:6379
+      Password: ""
+      DB: 0
+      TTLSeconds: 300
+    JobQueue:
+      Driver: asynq
+      Addr: redis:6379
+      Password: ""
+      DB: 0
+      Queue: default
+      Concurrency: 10
+      MaxRetry: 3
+      TimeoutSeconds: 900
+      ShutdownTimeoutSeconds: 30
+    Agent:
+      Driver: pi
+    Auth:
+      Region: global
+      RegionMode: manual
+      TokenSecret: local-dev-change-me
+      TokenTTLSeconds: 604800
+      RefreshTTLSeconds: 2592000
+      CodeTTLSeconds: 600
+      DevReturnCode: true
+      Email:
+        Driver: none
+        Host: ""
+        Port: 587
+        Username: ""
+        Password: ""
+        FromName: hello
+        FromEmail: hello@auth.moteva.local
+        BrandName: Moteva
+        UseTLS: false
+        StartTLS: true
+        InsecureSkipVerify: false
+        TimeoutSeconds: 10
+      Turnstile:
+        Enabled: true
+        SiteKey: 1x00000000000000000000AA
+        SecretKey: ""
+        SecretKeyEnv: TURNSTILE_SECRET_KEY
+        SiteVerifyURL: https://challenges.cloudflare.com/turnstile/v0/siteverify
+        TimeoutSeconds: 5
+    ObjectStorage:
+      Driver: minio
+      Bucket: canvas-assets
+      Endpoint: minio:9000
+      Region: us-east-1
+      AccessKey: canvas
+      SecretKey: canvas-secret
+      PublicBase: http://minio:9000/canvas-assets
+      UseSSL: false
+      ExpiresIn: 900
+---
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: postgres
+  namespace: img-infinite-canvas
+spec:
+  replicas: 1
+  selector:
+    matchLabels:
+      app: postgres
+  template:
+    metadata:
+      labels:
+        app: postgres
+    spec:
+      containers:
+        - name: postgres
+          image: postgres:18-alpine
+          envFrom:
+            - secretRef:
+                name: postgres-secret
+          ports:
+            - containerPort: 5432
+---
+apiVersion: v1
+kind: Service
+metadata:
+  name: postgres
+  namespace: img-infinite-canvas
+spec:
+  selector:
+    app: postgres
+  ports:
+    - port: 5432
+      targetPort: 5432
+---
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: redis
+  namespace: img-infinite-canvas
+spec:
+  replicas: 1
+  selector:
+    matchLabels:
+      app: redis
+  template:
+    metadata:
+      labels:
+        app: redis
+    spec:
+      containers:
+        - name: redis
+          image: redis:8-alpine
+          args: ["redis-server", "--appendonly", "yes"]
+          ports:
+            - containerPort: 6379
+---
+apiVersion: v1
+kind: Service
+metadata:
+  name: redis
+  namespace: img-infinite-canvas
+spec:
+  selector:
+    app: redis
+  ports:
+    - port: 6379
+      targetPort: 6379
+---
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: minio
+  namespace: img-infinite-canvas
+spec:
+  replicas: 1
+  selector:
+    matchLabels:
+      app: minio
+  template:
+    metadata:
+      labels:
+        app: minio
+    spec:
+      containers:
+        - name: minio
+          image: minio/minio:RELEASE.2025-09-07T16-13-09Z
+          args: ["server", "/data", "--console-address", ":9001"]
+          env:
+            - name: MINIO_ROOT_USER
+              value: canvas
+            - name: MINIO_ROOT_PASSWORD
+              value: canvas-secret
+          ports:
+            - containerPort: 9000
+            - containerPort: 9001
+---
+apiVersion: v1
+kind: Service
+metadata:
+  name: minio
+  namespace: img-infinite-canvas
+spec:
+  selector:
+    app: minio
+  ports:
+    - name: api
+      port: 9000
+      targetPort: 9000
+    - name: console
+      port: 9001
+      targetPort: 9001
+---
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: api
+  namespace: img-infinite-canvas
+spec:
+  replicas: 1
+  selector:
+    matchLabels:
+      app: api
+  template:
+    metadata:
+      labels:
+        app: api
+    spec:
+      containers:
+        - name: api
+          image: img-infinite-canvas-api:latest
+          imagePullPolicy: IfNotPresent
+          args: ["-f", "/app/etc/config.yaml", "-mode", "api"]
+          ports:
+            - containerPort: 8888
+          envFrom:
+            - secretRef:
+                name: turnstile-secret
+          volumeMounts:
+            - name: api-config
+              mountPath: /app/etc/config.yaml
+              subPath: config.yaml
+      volumes:
+        - name: api-config
+          configMap:
+            name: api-config
+---
+apiVersion: v1
+kind: Service
+metadata:
+  name: api
+  namespace: img-infinite-canvas
+spec:
+  selector:
+    app: api
+  ports:
+    - port: 8888
+      targetPort: 8888
+---
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: worker
+  namespace: img-infinite-canvas
+spec:
+  replicas: 1
+  selector:
+    matchLabels:
+      app: worker
+  template:
+    metadata:
+      labels:
+        app: worker
+    spec:
+      containers:
+        - name: worker
+          image: img-infinite-canvas-api:latest
+          imagePullPolicy: IfNotPresent
+          args: ["-f", "/app/etc/config.yaml", "-mode", "worker"]
+          envFrom:
+            - secretRef:
+                name: turnstile-secret
+          volumeMounts:
+            - name: api-config
+              mountPath: /app/etc/config.yaml
+              subPath: config.yaml
+      volumes:
+        - name: api-config
+          configMap:
+            name: api-config
+---
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: web
+  namespace: img-infinite-canvas
+spec:
+  replicas: 1
+  selector:
+    matchLabels:
+      app: web
+  template:
+    metadata:
+      labels:
+        app: web
+    spec:
+      containers:
+        - name: web
+          image: img-infinite-canvas-web:latest
+          imagePullPolicy: IfNotPresent
+          env:
+            - name: NEXT_PUBLIC_API_PROXY
+              value: http://api:8888
+          ports:
+            - containerPort: 3000
+---
+apiVersion: v1
+kind: Service
+metadata:
+  name: web
+  namespace: img-infinite-canvas
+spec:
+  selector:
+    app: web
+  ports:
+    - port: 80
+      targetPort: 3000
+---
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+  name: web
+  namespace: img-infinite-canvas
+spec:
+  rules:
+    - host: canvas.local
+      http:
+        paths:
+          - path: /
+            pathType: Prefix
+            backend:
+              service:
+                name: web
+                port:
+                  number: 80