shishengliang/ln-bi
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
436 Commits 10 Branches 1 Tag
f1b3f8d3da38c82b731510568a73ad935c226707
Commit Graph
11 Commits
Author SHA1 Message Date
shishengliang f1b3f8d3da feat(assets): add dimension analysis and authorized user previews
ci/woodpecker/push/woodpecker Pipeline was successful
Details 
Refactor asset drilldowns with combined dimension filters, parent summaries and progressive loading. Add the hidden /who read-only permission preview with scoped authorization, identity mapping and audit logging. Refine inventory counts and AI问数 presentation.
 2026-09-28 12:29:51 +08:00
shishengliang 6ea1b3d5dd revert: restore v1.1.14 (37a9f303)
ci/woodpecker/push/woodpecker Pipeline failed
Details
2026-09-16 09:29:30 +08:00
dsh-agent b28ca49491 refactor(stage7): 后端目录分层、架构守护测试与文档 
后端目录
- db/：mysql / hydrogen / heatmap 连接与氢能只读 SQL 守卫收拢到一处。
- middleware/：auth（JWT → 注入 user）与 read-only 归位。
- 相关测试随文件移动（middleware/read-only.test.ts、db/hydrogen-read-only.test.ts）。
  import 改写由一次性 codemod 完成，未改变任何逻辑。

架构守护
- 新增 src/architecture.test.ts，断言 6 条分层铁律：
  server 不依赖 modules、前端不依赖 server、shared 为叶子层、
  无 vendor 引用、model.ts 不依赖 react、@ts-nocheck 仅限已登记的原型快照。
  豁免清单只减不增。

测试基建
- npm test 的 glob 同时匹配 .test.ts 与 .test.tsx（此前 .tsx 测试会被静默漏掉）。

文档
- 新增根 README.md：入口、快速开始、命令、目录、部署注意事项
  （JWT_SECRET 必须注入且 >=32 字符，否则拒绝启动）。
- 新增 docs/ARCHITECTURE.md：依赖方向、6 条硬规则、业务域形状、
  中间件顺序、新增模块步骤，以及"已知未尽事项"的诚实清单。

lint / test(134) / build 全绿。
 2026-09-11 10:20:47 +08:00
kfluousandHiFox Agent 0dc7e89c1d feat(auth): add configurable password login with SSO default
ci/woodpecker/push/woodpecker Pipeline was successful
Details 
Co-authored-by: HiFox Agent <agents-noreply@hifox.com>
 2026-09-05 18:22:41 +08:00
kkfluousandClaude Opus 4.7 26f7d7ab3f feat(auth): 能源管理模块需要 BI-LEADER-ENERGY 角色
ci/woodpecker/push/woodpecker Pipeline was successful
Details 
- 新增 ENERGY_ACCESS_ROLES 与 canAccessEnergy(roles) 守卫（全量权限角色亦可访问）
- 后端 /api/energy/* 加模块级守卫：无角色返回 403
- 前端 App.tsx 按角色动态注入 EnergyModule，无权限时主导航不显示
- dev mock 用户（前端 + 后端）追加 BI-LEADER-ENERGY 便于本地调试

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
 2026-04-30 17:55:29 +08:00
kkfluousandClaude Opus 4.7 9bbd11cc86 fix(feedback): 反馈管理跳转无效 + 本地调试角色补齐
ci/woodpecker/push/woodpecker Pipeline is pending
Details 
问题 1：菜单点「反馈管理」跳到 #/admin/feedback，URL 变了但
AuthGate 只在初始 render 读 location，hashchange 不会重渲染。
修复：AuthGate 用 useState/useEffect 监听 hashchange/popstate，
URL 变化即时切换页面。

问题 2：本地 DEV_BYPASS_AUTH 模式下 roles 没有 BI-ADMIN-FEEDBACK，
菜单看不到入口。前后端 dev bypass 的 roles 都补上：
  ['所有权限', 'BI-SCHEDULE-OPT', 'BI-ADMIN-FEEDBACK']

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
 2026-04-30 14:25:30 +08:00
kkfluousandClaude Opus 4.7 9ea2f306c4 feat(dev): env-gated local auth bypass for development 
.env 里设 DEV_BYPASS_AUTH=1 + VITE_DEV_BYPASS_AUTH=1 即可本地免登录调试。
前端判定强制要求 import.meta.env.DEV，避免生产构建误启用。
后端塞入 dev 身份（含 所有权限 / BI-SCHEDULE-OPT 角色），保证 c.get('user')
下游依赖不会 crash。

新增 src/vite-env.d.ts 引入 vite/client 类型以访问 import.meta.env。

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
 2026-04-24 11:00:30 +08:00
kkfluousandClaude Opus 4.7 200172f0af feat(scheduling): role-based access + align list count with qualifiedCount
ci/woodpecker/push/woodpecker Pipeline was successful
Details 
- Gate 智能调度 module on BI-SCHEDULE-OPT role (or full-access roles)
  via shared canAccessScheduling helper, replacing hardcoded userId allowlist
- Thread roles[] through JWT payload → middleware → frontend nav
- Add router guard that 403s non-authorized users on /api/scheduling/*
- Emit replace_qualified suggestion for every qualified vehicle so list
  count matches the 已完成考核目标 card; recalc qualifiedCount /
  hopelessCount post-permission-filter for card↔list consistency

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
 2026-04-17 15:42:21 +08:00
kkfluousandClaude Opus 4.6 694e9a207a feat(scheduling): enable department/personal permission filtering
ci/woodpecker/push/woodpecker Pipeline was successful
Details 
- Disable BYPASS_AUTH (was true, now false) — backend enforces JWT auth
- Scheduling suggestions filtered by department/manager permissions:
  - full: see all suggestions
  - department: see only own department's vehicles
  - personal: see only own managed vehicles
- Candidate vehicles (inventory) remain fully visible to all
- Summary recalculated after permission filtering
- Consistent with mileage module permission model

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
 2026-04-16 22:04:52 +08:00
kkfluousandClaude Opus 4.6 4acf10ef79 fix: 修复打包 lint 报错，版本号 1.1.1
ci/woodpecker/push/woodpecker Pipeline failed
Details 
middleware.ts 临时跳过认证的早 return 导致后续代码 unreachable，
TS 在不可达分支里不做类型 narrowing 触发 TS18048；
改为 BYPASS_AUTH 常量分支保留完整鉴权逻辑便于恢复。

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
 2026-04-15 16:53:01 +08:00
kkfluousandClaude Opus 4.6 2575778293 feat: 后端用户认证和权限过滤 
- 新增 auth 模块：jumpToken 代理交换、用户信息获取、JWT 签发
- 三级权限：full(所有权限/数智中心/BI-Leader)、department(BI-Leader-Dep)、personal
- 添加 managerId 到车辆数据模型，支持个人级别按 userId 精确过滤
- auth 中间件保护所有 /api/* 端点（跳过 /api/health 和 /api/auth/*）
- 所有路由集成 filterByPermission 权限过滤

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
 2026-04-02 15:35:29 +08:00