main

FFlow Maintainerfix(security): finish fail-closed gates and gate runner safety tests

cfc51593Add on 7 days agoHistory

Files	Last commit	Last update
addresses	feat: 后端模块补全（AI/支付/退款/地址）+ 依赖安全升级 + CI 接入 本轮变更（CI 四道全绿：lint / typecheck / 52 tests / build；npm audit 0 漏洞）： 安全升级 - drizzle-orm 0.44.6 → 0.45.4：修复 GHSA-gpj5-g38j-94v9（高severity， SQL 标识符转义不当可致注入）。升级后全量门禁复跑通过、audit 归零。 用法面（eq/and/desc/inArray/drizzle()）均为稳定 API，无破坏性改动。 后端模块（server/modules，32 文件） - ai：自定义 agent / AI 设置 / 客服支持（含检索） - payments / refunds / reviews / shipping / seed 等模块与 DTO - addresses、products 服务实现 - common 公共层 + database schema/provider 新增工程配置 - .github/workflows/ci.yml：lint + type:check(server+client) + test:coverage + build - vitest.config.ts、tsconfig.eslint.json、drizzle/ 迁移（meta 快照） - scripts/smoke-workflows.mjs 冒烟脚本 - .dockerignore；client/src 页面与 visit-beacon 埋点	24 days ago
ai	fix(security): harden outbound requests and isolate E2E environments - bind DNS-validated addresses at connection time for seller-controlled LLM endpoints and webhooks; reject redirects and non-public responses - treat only explicit development/test as local exemptions - cover IPv6 special ranges, IPv4 boundaries and DNS family/all handling - give E2E runners opt-in disposable databases, owned-process cleanup, environment isolation, and loopback-only listeners - document isolated sandbox verification for Stripe, PayPal webhook, 17TRACK, SMTP and deployment rollback without claiming they passed	7 days ago
analytics	feat: 后端模块补全（AI/支付/退款/地址）+ 依赖安全升级 + CI 接入 本轮变更（CI 四道全绿：lint / typecheck / 52 tests / build；npm audit 0 漏洞）： 安全升级 - drizzle-orm 0.44.6 → 0.45.4：修复 GHSA-gpj5-g38j-94v9（高severity， SQL 标识符转义不当可致注入）。升级后全量门禁复跑通过、audit 归零。 用法面（eq/and/desc/inArray/drizzle()）均为稳定 API，无破坏性改动。 后端模块（server/modules，32 文件） - ai：自定义 agent / AI 设置 / 客服支持（含检索） - payments / refunds / reviews / shipping / seed 等模块与 DTO - addresses、products 服务实现 - common 公共层 + database schema/provider 新增工程配置 - .github/workflows/ci.yml：lint + type:check(server+client) + test:coverage + build - vitest.config.ts、tsconfig.eslint.json、drizzle/ 迁移（meta 快照） - scripts/smoke-workflows.mjs 冒烟脚本 - .dockerignore；client/src 页面与 visit-beacon 埋点	24 days ago
audit	feat(release): v1.21.0 — 安全闭环、SEO/OpenAPI、批量运营与展示资产 - 修复订单跨租户读写、退款并发重复打款、支付并发重复入账、退款数量越界、优惠券限次失效 - 补齐卖家看板/巡检/审计/咨询/漏斗的租户隔离（新增 inquiry_sessions.seller_id + 迁移 0007） - 结算透传 variantId；多规格缺省拒绝；CSV 导入行错位与上架门禁绕过修复 - 新增 SEO 注入（sitemap/robots/llms.txt/JSON-LD）、OpenAPI 3.1、CLI、批量上下架与 CSV 导出 - 新增 Stripe 支付确认页、PayPal capture、评价图片、搜索联想、相关推荐、最近浏览 - 安全响应头、请求 ID、全局异常脱敏、静态资源缓存、优雅关闭；移动端与可访问性修复 - README 重写为展示型；30 张自动截图 + 演示视频 + 社交预览 + 发布说明 - 验证：lint 0 / typecheck 0 / 166 单测 / build 通过 / 6 套 E2E 全通过	15 days ago
auth	fix(security): close tenant, auth and payment trust-boundary gaps - reject unknown or missing NODE_ENV for JWT and demo payment gates - replace public fixed JWT fallback with process-local random dev secret - enforce seller scope across AI usage, shopper analytics, product audit, variants and publish checks - await refund ownership guards before payment or state changes - propagate actor roles through AI gateway calls - harden session ownership for public support conversations and orders - cover the changes with RED-to-GREEN regression tests	7 days ago
cart	feat: 后端模块补全（AI/支付/退款/地址）+ 依赖安全升级 + CI 接入 本轮变更（CI 四道全绿：lint / typecheck / 52 tests / build；npm audit 0 漏洞）： 安全升级 - drizzle-orm 0.44.6 → 0.45.4：修复 GHSA-gpj5-g38j-94v9（高severity， SQL 标识符转义不当可致注入）。升级后全量门禁复跑通过、audit 归零。 用法面（eq/and/desc/inArray/drizzle()）均为稳定 API，无破坏性改动。 后端模块（server/modules，32 文件） - ai：自定义 agent / AI 设置 / 客服支持（含检索） - payments / refunds / reviews / shipping / seed 等模块与 DTO - addresses、products 服务实现 - common 公共层 + database schema/provider 新增工程配置 - .github/workflows/ci.yml：lint + type:check(server+client) + test:coverage + build - vitest.config.ts、tsconfig.eslint.json、drizzle/ 迁移（meta 快照） - scripts/smoke-workflows.mjs 冒烟脚本 - .dockerignore；client/src 页面与 visit-beacon 埋点	24 days ago
categories	feat: 后端模块补全（AI/支付/退款/地址）+ 依赖安全升级 + CI 接入 本轮变更（CI 四道全绿：lint / typecheck / 52 tests / build；npm audit 0 漏洞）： 安全升级 - drizzle-orm 0.44.6 → 0.45.4：修复 GHSA-gpj5-g38j-94v9（高severity， SQL 标识符转义不当可致注入）。升级后全量门禁复跑通过、audit 归零。 用法面（eq/and/desc/inArray/drizzle()）均为稳定 API，无破坏性改动。 后端模块（server/modules，32 文件） - ai：自定义 agent / AI 设置 / 客服支持（含检索） - payments / refunds / reviews / shipping / seed 等模块与 DTO - addresses、products 服务实现 - common 公共层 + database schema/provider 新增工程配置 - .github/workflows/ci.yml：lint + type:check(server+client) + test:coverage + build - vitest.config.ts、tsconfig.eslint.json、drizzle/ 迁移（meta 快照） - scripts/smoke-workflows.mjs 冒烟脚本 - .dockerignore；client/src 页面与 visit-beacon 埋点	24 days ago
cms	feat: 后端模块补全（AI/支付/退款/地址）+ 依赖安全升级 + CI 接入 本轮变更（CI 四道全绿：lint / typecheck / 52 tests / build；npm audit 0 漏洞）： 安全升级 - drizzle-orm 0.44.6 → 0.45.4：修复 GHSA-gpj5-g38j-94v9（高severity， SQL 标识符转义不当可致注入）。升级后全量门禁复跑通过、audit 归零。 用法面（eq/and/desc/inArray/drizzle()）均为稳定 API，无破坏性改动。 后端模块（server/modules，32 文件） - ai：自定义 agent / AI 设置 / 客服支持（含检索） - payments / refunds / reviews / shipping / seed 等模块与 DTO - addresses、products 服务实现 - common 公共层 + database schema/provider 新增工程配置 - .github/workflows/ci.yml：lint + type:check(server+client) + test:coverage + build - vitest.config.ts、tsconfig.eslint.json、drizzle/ 迁移（meta 快照） - scripts/smoke-workflows.mjs 冒烟脚本 - .dockerignore；client/src 页面与 visit-beacon 埋点	24 days ago
collections	feat(release): v1.21.0 — 安全闭环、SEO/OpenAPI、批量运营与展示资产 - 修复订单跨租户读写、退款并发重复打款、支付并发重复入账、退款数量越界、优惠券限次失效 - 补齐卖家看板/巡检/审计/咨询/漏斗的租户隔离（新增 inquiry_sessions.seller_id + 迁移 0007） - 结算透传 variantId；多规格缺省拒绝；CSV 导入行错位与上架门禁绕过修复 - 新增 SEO 注入（sitemap/robots/llms.txt/JSON-LD）、OpenAPI 3.1、CLI、批量上下架与 CSV 导出 - 新增 Stripe 支付确认页、PayPal capture、评价图片、搜索联想、相关推荐、最近浏览 - 安全响应头、请求 ID、全局异常脱敏、静态资源缓存、优雅关闭；移动端与可访问性修复 - README 重写为展示型；30 张自动截图 + 演示视频 + 社交预览 + 发布说明 - 验证：lint 0 / typecheck 0 / 166 单测 / build 通过 / 6 套 E2E 全通过	15 days ago
copilot	fix(security): finish fail-closed gates and gate runner safety tests - SMTP allowlist now applies to every non-development environment - demo seed refuses any environment other than explicit development/test - align demo payment messages and changelog with the allowlist behavior - e2e:local rejects stale builds without HOST support before touching the database - run runner safety tests in CI	7 days ago
coupons	feat(release): v1.21.0 — 安全闭环、SEO/OpenAPI、批量运营与展示资产 - 修复订单跨租户读写、退款并发重复打款、支付并发重复入账、退款数量越界、优惠券限次失效 - 补齐卖家看板/巡检/审计/咨询/漏斗的租户隔离（新增 inquiry_sessions.seller_id + 迁移 0007） - 结算透传 variantId；多规格缺省拒绝；CSV 导入行错位与上架门禁绕过修复 - 新增 SEO 注入（sitemap/robots/llms.txt/JSON-LD）、OpenAPI 3.1、CLI、批量上下架与 CSV 导出 - 新增 Stripe 支付确认页、PayPal capture、评价图片、搜索联想、相关推荐、最近浏览 - 安全响应头、请求 ID、全局异常脱敏、静态资源缓存、优雅关闭；移动端与可访问性修复 - README 重写为展示型；30 张自动截图 + 演示视频 + 社交预览 + 发布说明 - 验证：lint 0 / typecheck 0 / 166 单测 / build 通过 / 6 套 E2E 全通过	15 days ago
dashboard	feat(release): v1.21.0 — 安全闭环、SEO/OpenAPI、批量运营与展示资产 - 修复订单跨租户读写、退款并发重复打款、支付并发重复入账、退款数量越界、优惠券限次失效 - 补齐卖家看板/巡检/审计/咨询/漏斗的租户隔离（新增 inquiry_sessions.seller_id + 迁移 0007） - 结算透传 variantId；多规格缺省拒绝；CSV 导入行错位与上架门禁绕过修复 - 新增 SEO 注入（sitemap/robots/llms.txt/JSON-LD）、OpenAPI 3.1、CLI、批量上下架与 CSV 导出 - 新增 Stripe 支付确认页、PayPal capture、评价图片、搜索联想、相关推荐、最近浏览 - 安全响应头、请求 ID、全局异常脱敏、静态资源缓存、优雅关闭；移动端与可访问性修复 - README 重写为展示型；30 张自动截图 + 演示视频 + 社交预览 + 发布说明 - 验证：lint 0 / typecheck 0 / 166 单测 / build 通过 / 6 套 E2E 全通过	15 days ago
favorites	feat: 后端模块补全（AI/支付/退款/地址）+ 依赖安全升级 + CI 接入 本轮变更（CI 四道全绿：lint / typecheck / 52 tests / build；npm audit 0 漏洞）： 安全升级 - drizzle-orm 0.44.6 → 0.45.4：修复 GHSA-gpj5-g38j-94v9（高severity， SQL 标识符转义不当可致注入）。升级后全量门禁复跑通过、audit 归零。 用法面（eq/and/desc/inArray/drizzle()）均为稳定 API，无破坏性改动。 后端模块（server/modules，32 文件） - ai：自定义 agent / AI 设置 / 客服支持（含检索） - payments / refunds / reviews / shipping / seed 等模块与 DTO - addresses、products 服务实现 - common 公共层 + database schema/provider 新增工程配置 - .github/workflows/ci.yml：lint + type:check(server+client) + test:coverage + build - vitest.config.ts、tsconfig.eslint.json、drizzle/ 迁移（meta 快照） - scripts/smoke-workflows.mjs 冒烟脚本 - .dockerignore；client/src 页面与 visit-beacon 埋点	24 days ago
health	feat: 后端模块补全（AI/支付/退款/地址）+ 依赖安全升级 + CI 接入 本轮变更（CI 四道全绿：lint / typecheck / 52 tests / build；npm audit 0 漏洞）： 安全升级 - drizzle-orm 0.44.6 → 0.45.4：修复 GHSA-gpj5-g38j-94v9（高severity， SQL 标识符转义不当可致注入）。升级后全量门禁复跑通过、audit 归零。 用法面（eq/and/desc/inArray/drizzle()）均为稳定 API，无破坏性改动。 后端模块（server/modules，32 文件） - ai：自定义 agent / AI 设置 / 客服支持（含检索） - payments / refunds / reviews / shipping / seed 等模块与 DTO - addresses、products 服务实现 - common 公共层 + database schema/provider 新增工程配置 - .github/workflows/ci.yml：lint + type:check(server+client) + test:coverage + build - vitest.config.ts、tsconfig.eslint.json、drizzle/ 迁移（meta 快照） - scripts/smoke-workflows.mjs 冒烟脚本 - .dockerignore；client/src 页面与 visit-beacon 埋点	24 days ago
inquiry	fix(inquiry): enforce seller ownership on message reads	7 days ago
logistics	feat(logistics): integrate real 17TRACK tracking (v2.2 API) - register shipments to 17TRACK on fulfillment (best-effort, never blocks shipping) - query real track events on demand; any failure falls back to the demo timeline with a warning instead of surfacing errors to buyers - pure mapping layer (seventeen-mapping) with 6 unit tests against the official response shape, including rejected numbers and malformed events - docs no longer claim tracking is a placeholder; roadmap moves real logistics to shipped - verified: 37 test files / 221 tests green, lint clean, build passes, 6/6 local E2E suites pass after the change	8 days ago
orders	feat(release): v1.21.0 — 安全闭环、SEO/OpenAPI、批量运营与展示资产 - 修复订单跨租户读写、退款并发重复打款、支付并发重复入账、退款数量越界、优惠券限次失效 - 补齐卖家看板/巡检/审计/咨询/漏斗的租户隔离（新增 inquiry_sessions.seller_id + 迁移 0007） - 结算透传 variantId；多规格缺省拒绝；CSV 导入行错位与上架门禁绕过修复 - 新增 SEO 注入（sitemap/robots/llms.txt/JSON-LD）、OpenAPI 3.1、CLI、批量上下架与 CSV 导出 - 新增 Stripe 支付确认页、PayPal capture、评价图片、搜索联想、相关推荐、最近浏览 - 安全响应头、请求 ID、全局异常脱敏、静态资源缓存、优雅关闭；移动端与可访问性修复 - README 重写为展示型；30 张自动截图 + 演示视频 + 社交预览 + 发布说明 - 验证：lint 0 / typecheck 0 / 166 单测 / build 通过 / 6 套 E2E 全通过	15 days ago
payments	fix(security): finish fail-closed gates and gate runner safety tests - SMTP allowlist now applies to every non-development environment - demo seed refuses any environment other than explicit development/test - align demo payment messages and changelog with the allowlist behavior - e2e:local rejects stale builds without HOST support before touching the database - run runner safety tests in CI	7 days ago
products	fix(security): close tenant, auth and payment trust-boundary gaps - reject unknown or missing NODE_ENV for JWT and demo payment gates - replace public fixed JWT fallback with process-local random dev secret - enforce seller scope across AI usage, shopper analytics, product audit, variants and publish checks - await refund ownership guards before payment or state changes - propagate actor roles through AI gateway calls - harden session ownership for public support conversations and orders - cover the changes with RED-to-GREEN regression tests	7 days ago
refunds	fix(security): close tenant, auth and payment trust-boundary gaps - reject unknown or missing NODE_ENV for JWT and demo payment gates - replace public fixed JWT fallback with process-local random dev secret - enforce seller scope across AI usage, shopper analytics, product audit, variants and publish checks - await refund ownership guards before payment or state changes - propagate actor roles through AI gateway calls - harden session ownership for public support conversations and orders - cover the changes with RED-to-GREEN regression tests	7 days ago
reviews	feat(release): v1.21.0 — 安全闭环、SEO/OpenAPI、批量运营与展示资产 - 修复订单跨租户读写、退款并发重复打款、支付并发重复入账、退款数量越界、优惠券限次失效 - 补齐卖家看板/巡检/审计/咨询/漏斗的租户隔离（新增 inquiry_sessions.seller_id + 迁移 0007） - 结算透传 variantId；多规格缺省拒绝；CSV 导入行错位与上架门禁绕过修复 - 新增 SEO 注入（sitemap/robots/llms.txt/JSON-LD）、OpenAPI 3.1、CLI、批量上下架与 CSV 导出 - 新增 Stripe 支付确认页、PayPal capture、评价图片、搜索联想、相关推荐、最近浏览 - 安全响应头、请求 ID、全局异常脱敏、静态资源缓存、优雅关闭；移动端与可访问性修复 - README 重写为展示型；30 张自动截图 + 演示视频 + 社交预览 + 发布说明 - 验证：lint 0 / typecheck 0 / 166 单测 / build 通过 / 6 套 E2E 全通过	15 days ago
seed	fix(security): finish fail-closed gates and gate runner safety tests - SMTP allowlist now applies to every non-development environment - demo seed refuses any environment other than explicit development/test - align demo payment messages and changelog with the allowlist behavior - e2e:local rejects stale builds without HOST support before touching the database - run runner safety tests in CI	7 days ago
seo	fix(security): enforce fail-closed trust boundaries and publish-accurate docs - reject unknown or missing production configuration for JWT/demo/seed paths - harden scoped AI/commodity/shopping analytics and atomic Copilot approvals - protect mapped IPv6 and production SMTP targets from SSRF - prevent public support session/order ownership bypasses - make smoke failures exit nonzero and add production npm audit CI gate - synchronize v1.22.0 metadata, migration/deploy docs and environment ignore rules	7 days ago
shipping	feat: 后端模块补全（AI/支付/退款/地址）+ 依赖安全升级 + CI 接入 本轮变更（CI 四道全绿：lint / typecheck / 52 tests / build；npm audit 0 漏洞）： 安全升级 - drizzle-orm 0.44.6 → 0.45.4：修复 GHSA-gpj5-g38j-94v9（高severity， SQL 标识符转义不当可致注入）。升级后全量门禁复跑通过、audit 归零。 用法面（eq/and/desc/inArray/drizzle()）均为稳定 API，无破坏性改动。 后端模块（server/modules，32 文件） - ai：自定义 agent / AI 设置 / 客服支持（含检索） - payments / refunds / reviews / shipping / seed 等模块与 DTO - addresses、products 服务实现 - common 公共层 + database schema/provider 新增工程配置 - .github/workflows/ci.yml：lint + type:check(server+client) + test:coverage + build - vitest.config.ts、tsconfig.eslint.json、drizzle/ 迁移（meta 快照） - scripts/smoke-workflows.mjs 冒烟脚本 - .dockerignore；client/src 页面与 visit-beacon 埋点	24 days ago
shopper	fix(security): close tenant, auth and payment trust-boundary gaps - reject unknown or missing NODE_ENV for JWT and demo payment gates - replace public fixed JWT fallback with process-local random dev secret - enforce seller scope across AI usage, shopper analytics, product audit, variants and publish checks - await refund ownership guards before payment or state changes - propagate actor roles through AI gateway calls - harden session ownership for public support conversations and orders - cover the changes with RED-to-GREEN regression tests	7 days ago