Star0
0
Code
Code
Issues
Pull Requests
Discussion
Wiki
Analysis
Star0
0
FFlow Maintainerfix(server): close E2E-found regressions; add local full-chain harness
bf0acfddAdd on 9 days agoHistory
FilesLast commitLast update
database.module.ts
feat: 后端模块补全（AI/支付/退款/地址）+ 依赖安全升级 + CI 接入 本轮变更（CI 四道全绿：lint / typecheck / 52 tests / build；npm audit 0 漏洞）： 安全升级 - drizzle-orm 0.44.6 → 0.45.4：修复 GHSA-gpj5-g38j-94v9（高severity， SQL 标识符转义不当可致注入）。升级后全量门禁复跑通过、audit 归零。 用法面（eq/and/desc/inArray/drizzle()）均为稳定 API，无破坏性改动。 后端模块（server/modules，32 文件） - ai：自定义 agent / AI 设置 / 客服支持（含检索） - payments / refunds / reviews / shipping / seed 等模块与 DTO - addresses、products 服务实现 - common 公共层 + database schema/provider 新增工程配置 - .github/workflows/ci.yml：lint + type:check(server+client) + test:coverage + build - vitest.config.ts、tsconfig.eslint.json、drizzle/ 迁移（meta 快照） - scripts/smoke-workflows.mjs 冒烟脚本 - .dockerignore；client/src 页面与 visit-beacon 埋点
25 days ago
database.provider.ts
feat: 后端模块补全（AI/支付/退款/地址）+ 依赖安全升级 + CI 接入 本轮变更（CI 四道全绿：lint / typecheck / 52 tests / build；npm audit 0 漏洞）： 安全升级 - drizzle-orm 0.44.6 → 0.45.4：修复 GHSA-gpj5-g38j-94v9（高severity， SQL 标识符转义不当可致注入）。升级后全量门禁复跑通过、audit 归零。 用法面（eq/and/desc/inArray/drizzle()）均为稳定 API，无破坏性改动。 后端模块（server/modules，32 文件） - ai：自定义 agent / AI 设置 / 客服支持（含检索） - payments / refunds / reviews / shipping / seed 等模块与 DTO - addresses、products 服务实现 - common 公共层 + database schema/provider 新增工程配置 - .github/workflows/ci.yml：lint + type:check(server+client) + test:coverage + build - vitest.config.ts、tsconfig.eslint.json、drizzle/ 迁移（meta 快照） - scripts/smoke-workflows.mjs 冒烟脚本 - .dockerignore；client/src 页面与 visit-beacon 埋点
25 days ago
schema.ts
fix(server): close E2E-found regressions; add local full-chain harness - scope copilot watch run/snapshot/lock per actor: manual runs use the caller's settings and webhook; the background scheduler stays admin-driven - widen ai_settings.key to varchar(120): scoped keys like '{uuid}:copilot_watch_last_snapshot' (64 chars) overflowed varchar(50) with a 500 - keep honest degradation observable: select agent only short-circuits empty stores when a model is configured, so unconfigured calls still land in ai_usage_log - tier SSRF guards by environment: production blocks private addresses from seller-editable config; development allows local gateways (Ollama/LM Studio, mocks) - add scripts/run-e2e-local.mjs (npm run e2e:local): fresh-database, two-instance, mock-provider harness matching CI - verified: 6/6 smoke suites pass against real PostgreSQL (workflows, degraded, 19-step transaction, providers, copilot push, shopper)
9 days ago