13 Commits

Author	SHA1	Message	Date
sulaimaannaasif6866	7434e5195e	feat(api): tiered cumulative quota + self-service registration ... Anonymous callers get a free cumulative quota (1000 calls per IP); once exhausted they get 403 quota_exhausted and must register. Public users can self-register (email+password) to obtain a higher-quota API key, view usage, and regenerate the key. Quota counters live in Redis; the public API stays read-only except for the registration writes. - migration 0011: app_user table + api_key.quota_total + 'registered' tier - ratelimit: IncrTotal/TotalUsed/CopyTotal lifetime counters - middleware: enforce cumulative quota + X-Quota-* headers - store: RegisterUser/Authenticate/RegenerateKey (bcrypt) - handlers: POST /api/v1/register, /account, /account/regenerate - admin: quota_total column + registered tier - public: 'API 密钥' account page + API docs quota section Co-Authored-By: Devin AI <158243242+devin-ai-integration[bot]@users.noreply.github.com>	2026-06-21 07:26:41 +00:00
sulaimaannaasif6866	916bdd9c7c	feat: 可扩展档案模式框架 + 内置 3C(电子) 模式 ... - 新增 category.archive_kind 与 kind_field 字段模板表（迁移 0010） - 种子 electronics 字段模板 + 3C 品类树（手机/笔记本/平板等） - 后端按档案模式动态计算完整度/合格：食品沿用 food_detail， 其它模式走 product.attributes + kind_field - 新增 GET /api/kind-fields?kind= 接口 - 后台编辑页按品类模式动态渲染规格参数表单 - 公开详情页/接口输出带标签的规格表 Co-Authored-By: Devin AI <158243242+devin-ai-integration[bot]@users.noreply.github.com>	2026-06-21 06:13:42 +00:00
sulaimaannaasif6866	51304d782a	feat(admin): 商品编辑页增加上一个/下一个导航 ... Co-Authored-By: Devin AI <158243242+devin-ai-integration[bot]@users.noreply.github.com>	2026-06-21 05:50:20 +00:00
sulaimaannaasif6866	8bee570cb2	feat(admin): 商品列表底部增加每页数量与跳页控制 ... Co-Authored-By: Devin AI <158243242+devin-ai-integration[bot]@users.noreply.github.com>	2026-06-21 03:26:43 +00:00
sulaimaannaasif6866	01593dcbdc	style(admin): 后台各页容器统一居中 (mx-auto) ... Co-Authored-By: Devin AI <158243242+devin-ai-integration[bot]@users.noreply.github.com>	2026-06-21 03:05:26 +00:00
sulaimaannaasif6866	f382c27200	feat: 数据概览/操作日志/批量操作 + 首页合格档案数 ... 后台新增「数据概览」(商品/合格/按状态/品牌/分类/待审核) 与「操作日志」(全局审计分页)；商品列表支持多选批量改状态/分类。公开首页标题改为「天工」并展示合格档案数；新增公开接口 /api/v1/stats 与后台 /api/stats、/api/audit、/api/products/bulk。合格口径=quality_score≥0.6 且在用。 Co-Authored-By: Devin AI <158243242+devin-ai-integration[bot]@users.noreply.github.com>	2026-06-21 01:45:28 +00:00
sulaimaannaasif6866	a36700076e	feat(admin): 品牌管理 + 新建商品 ... 品牌管理：列出品牌及引用商品数，支持改名、合并重复品牌（把源品牌的商品并入目标后删除源）、删除未被引用的品牌。新建商品：商品列表新增「新建商品」入口，填写名称/条码/品牌/品类后创建并进入详情页继续补全。 Co-Authored-By: Devin AI <158243242+devin-ai-integration[bot]@users.noreply.github.com>	2026-06-21 01:31:07 +00:00
sulaimaannaasif6866	4a693c8fe9	feat(admin): 分类管理（分类树增删改移 + 后台页面） ... Co-Authored-By: Devin AI <158243242+devin-ai-integration[bot]@users.noreply.github.com>	2026-06-21 00:43:49 +00:00
novaalphastrikeomegaz663	2820823b36	feat(api): API keys + Redis rate limiting + usage stats ... Add an optional API-key layer to the public read-only API. Keys grant higher per-minute rate limits and attribute usage; anonymous callers are still allowed at a lower IP-based budget. - migration 0008_api_key: api_key table (sha256 hash only, plaintext shown once) - apikey pkg: key generation + hashing - ratelimit pkg: Redis fixed-window limiter + per-key usage counters; fails open - public API middleware: X-API-Key / Bearer auth, X-RateLimit-* headers, 429+Retry-After - admin: issue/list/revoke keys + usage view (API + UI tab) Co-Authored-By: Devin AI <158243242+devin-ai-integration[bot]@users.noreply.github.com>	2026-06-20 08:24:07 +00:00
novaalphastrikeomegaz663	98b5f1575d	feat(barcode): admin barcode CRUD endpoints + UI; show extra barcodes publicly ... Wire the multi-barcode store layer to HTTP and the operator console: - adminhandler: add POST /products/{id}/barcodes, DELETE /products/{id}/barcodes/{barcodeID}, and POST .../primary. A barcode owned by another product returns 409 with the conflicting product (gtin/product_id/product_name); an invalid GTIN returns 400. - admin-frontend: BarcodesCard on the product detail page lists all barcodes (primary starred), adds with type/pack-level/region, sets primary, and deletes; audit labels for the new actions. - public-frontend: product detail surfaces non-primary barcodes so a case/region code resolves and is visible to consumers. Co-Authored-By: Devin AI <158243242+devin-ai-integration[bot]@users.noreply.github.com>	2026-06-20 07:06:07 +00:00
oyaegeli98668	5bfb2d3a5f	chore: 站名改为「天工商品档案公共仓」（公开站 + 后台标题/页头/页脚/API 文案） ... Co-Authored-By: Devin AI <158243242+devin-ai-integration[bot]@users.noreply.github.com>	2026-06-20 05:37:23 +00:00
oyaegeli98668	c9a4404052	feat: 公开首页(搜索+商品详情) + 好心人投稿 + 后台审核收纳 ... - 公开前端 SPA（根路径 /）：首页大搜索框、检索结果、只读商品详情、贡献档案表单 - 公开写入端点 POST /api/public/submissions（无需登录，基础频率限流），投稿进入 submission 待审核队列，不直接写 product - 迁移 0006：submission 投稿表 + community 来源(trust=0.50) - 后台审核队列：列表(待审核/已通过/已驳回) → 查看投稿 → 通过(创建/补全商品 + 记 source=community + 字段级溯源 + 审计 + 重算质量分) / 驳回(记原因) - 公开只读 api 服务内嵌公开 SPA；Dockerfile.prod 增加 node 构建阶段 + 内嵌 dist Co-Authored-By: Devin AI <158243242+devin-ai-integration[bot]@users.noreply.github.com>	2026-06-20 05:11:07 +00:00
oyaegeli98668	d90a539e6b	feat(admin): 运营后台（登录/查看/审核编辑/补全）+ 写入API + 审计留痕 ... Co-Authored-By: Devin AI <158243242+devin-ai-integration[bot]@users.noreply.github.com>	2026-06-20 02:53:30 +00:00