yeuimu
e34398a002
deploy(nginx): route /assets/product-center/ to v2 api for shared icons; ignore backups/
2026-09-02 11:40:51 +08:00
yeuimu
93ac525c55
refactor(api): parsing out of runtime — pure-mirror sync, explicit organize, auto aggregate recompute
...
解析去运行时化（三层架构，plans/refactor/organize-script-refactor.md）：
- 同步 = 纯镜像：upsertOriginGood 不再写解析列、不再自动挂族；详情同步仍触发重算
- 整理 = 显式人工动作（OrganizeService）：解析列回填 → 派生标签（人工接管永不
覆盖）→ auto-group 建族 → 全量重算；入口 CLI（pnpm --filter @inkreach/api
organize）+ POST /product-families/organize + 后台「整理」按钮
- 重算 = 纯结构化聚合：不再按名称重派生标签（防上游改名倒灌，回归测试覆盖）；
矩阵维度只认标签/CUSTOM 显式标签，未整理成员不进矩阵；工艺=不打印时
印花数量以单面占位（纯结构化规则）；「恢复自动」走整理的单链接派生
- 派生默认补齐（脚本层假设）：名称无单/双面且工艺非不打印 → 印花数量单面印花
- goods 服务建品/更新后仅镜像标签+重算（不派生）；含商品名入库规范化
（normalizeGoodName，管理员输入边界质检）
- organize.service.spec 由 tag-sync spec 迁移 + 防倒灌回归；sync/recompute/
public/families spec 全部适配；API 173/173，admin typecheck+22/22
2026-08-30 01:27:01 +08:00
yeuimu
3ddc4c87e8
更新忽略文件
2026-08-28 15:34:24 +08:00
yeuimu
6c61a4e871
feat(deploy): production deployment setup and fixes
...
- Debian-based api image (bookworm-slim), docker/debian mirrors, prisma
binaryTargets for openssl 3.0
- nginx: admin SPA under /admin, TLS via acme.sh (ZeroSSL) + auto-renewal
cron, http->https redirect
- prisma: add origin_goods.delisted migration, sync missing schema
(good_image/tag_font_color/good_tags), fix users.createdAt Timestamptz
- api: CORS wildcard reflection, helmet CORP cross-origin, price
backfill in persistProductDetail, categoryIcon ancestor fallback,
mediaByColor per-color gallery in public goods detail
- admin: /admin base path (vite + router)
- import-data.mjs: udt_name casting, serial sequence advance fix
2026-08-26 14:23:09 +08:00
yeuimu
9c1106586a
fix(security): harden auth, upload, and API configuration
...
- Lock public registration to first-user bootstrap (403 afterwards)
- Require JwtAuthGuard on upload + whitelist png/jpg/webp/gif (SVG/XSS blocked)
- Add global throttling (login/register 5/min, upload 10/min)
- Add helmet security headers; serve uploads with nosniff
- Replace permissive CORS (origin:true+credentials) with CORS_ORIGINS whitelist
- Disable Swagger outside development; sanitize 500 error responses
- Enforce 32+ char JWT_SECRET; make token expiry configurable (TOKEN_EXPIRES_IN)
- Re-check user in DB on every JWT validation (revocation on user delete)
- Dummy bcrypt compare to prevent login user-enumeration via timing
- Map malformed BigInt inputs to 400 instead of 500
- Widen .gitignore to .env* and add apps/api/.env.example
- Disable Nuxt devtools and sourcemaps
2026-08-22 11:55:13 +08:00
yeuimu
6e5f7edbb7
chore: update admin generated types and env ignore
2026-08-21 10:39:23 +08:00
yeuimu
7e04877bb6
chore: migrate to pnpm workspaces monorepo with Turborepo
...
- Restructure directories: apps/api, apps/admin, apps/website
- Add root pnpm-workspace.yaml, turbo.json, .prettierrc, .gitignore
- Rename packages to @inkreach/api, @inkreach/admin, @inkreach/website
- Add shared packages: packages/tsconfig, packages/shared-types
- Add pnpm.onlyBuiltDependencies for native builds
- Update docs: README.md, structs.md
- All three projects build successfully
2026-07-11 16:54:05 +08:00
yeuimu