wangdl/api-server
2
0
Fork 0
Code Issues 29 Pull Requests Actions Packages Projects Releases Wiki Activity
210 Commits 1 Branch 0 Tags
Commit Graph

39 Commits

Author SHA1 Message Date
WangDL
b188988e82 feat: M4-05 — reporting & export module (user/learning/review CSV)
All checks were successful
Deploy API Server / build-and-deploy (push) Successful in 42s
Details 
- Add ExportJob Prisma model
- ReportingService: userReport, learningReport, reviewReport
- ReportingController: GET export/users, export/learning, export/reviews

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
 2026-05-24 18:01:23 +08:00
WangDL
76c42f437c feat: M4-04 — backup & cleanup module with admin interface
All checks were successful
Deploy API Server / build-and-deploy (push) Successful in 42s
Details 
- Add CleanupJob Prisma model
- Create BackupService with backup/cleanup job tracking
- Create BackupController (AAPI: GET jobs, POST trigger backup, GET cleanup, POST cleanup)
- Supports cleanup types: soft-delete, api-metrics, task-logs

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
 2026-05-24 17:56:26 +08:00
WangDL
8e5d722a1e feat: M3-04/05/06 — Workspace Experience, Notification, Cache Module
All checks were successful
Deploy API Server / build-and-deploy (push) Successful in 44s
Details 
M3-04: RecentItem/Favorite/SearchHistory models, Tag CRUD, global search, workspace dashboard
M3-05: NotificationPreference/PushToken/Template models, preferences, push tokens, admin templates
M3-06: CacheService with wrap() penetration protection, key naming conventions, admin cache management
E2E: 27 new tests for M3-04/05/06 (35/36 passing overall)

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
 2026-05-24 16:01:34 +08:00
WangDL
98bc9961ba feat: M2-07 — RAG Chat module with sessions, messages, citations
Some checks failed
Deploy API Server / build-and-deploy (push) Failing after 33s
Details 
- ChatSession/ChatMessage/ChatCitation Prisma models
- CAPI: create/list sessions, send message, get history, delete
- Admin AAPI: view user sessions and messages
- Content safety integration on user input
- Placeholder RAG pipeline (real pipeline in M3)

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
 2026-05-24 13:39:14 +08:00
WangDL
5fd737967f feat: M1-01~03 — AI Gateway deepening, Vector module, Task Queue deepening
Some checks failed
Deploy API Server / build-and-deploy (push) Failing after 23s
Details 
M1-01 AI Gateway:
- DB-driven ModelRoute/ProviderConfig/FallbackEvent tables
- ModelRouter rewrite with loadFromDb() hot-reload
- Fallback event recording + AIUsageRecorded event publishing
- Admin AAPI: routes CRUD, provider enable/disable, fallback events log

M1-02 Vector & Retrieval:
- VectorService with Qdrant client (upsert/delete/search/rerank)
- Admin AAPI: collection status, vector count, reindex trigger

M1-03 Task Queue:
- 16 task types with default retry/timeout configs
- Task stats dashboard, worker status panel, batch retry endpoint

M0 audit fixes:
- ApiMetric retention policy (30-day cleanup)
- Content Safety integration in Files module
- Queue registration centralized (domain-events)
- SECRET_MASTER_KEY production validation

E2E tests:
- M0: 28 smoke tests covering all 14 M0 issues
- M1: 16 tests covering M1-01/02/03
- Mock infrastructure: prisma, ioredis, jose, bullmq, qdrant

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
 2026-05-24 10:18:07 +08:00
WangDL
d32411760f feat: M0-12 Secret & Vendor Asset — AES-256-GCM encrypted key storage + Admin AAPI
All checks were successful
Deploy API Server / build-and-deploy (push) Successful in 38s
Details
2026-05-23 20:36:39 +08:00
WangDL
fd1897d385 feat: M0-11 — QuotaService + Redis deduction + Admin AAPI + CostDailySummary + UserMembership
Some checks failed
Deploy API Server / build-and-deploy (push) Failing after 21s
Details
2026-05-23 20:13:49 +08:00
WangDL
2bd416c807 feat: M0-07 Observability — MetricsInterceptor + admin metrics AAPI
All checks were successful
Deploy API Server / build-and-deploy (push) Successful in 36s
Details
2026-05-22 23:19:31 +08:00
WangDL
178225f212 fix: last duplicate
Some checks failed
Deploy API Server / build-and-deploy (push) Failing after 17s
Details
2026-05-22 23:15:48 +08:00
WangDL
52ae413c19 fix: remove duplicate TimeoutInterceptor import
Some checks failed
Deploy API Server / build-and-deploy (push) Failing after 17s
Details
2026-05-22 23:15:24 +08:00
WangDL
966bda8b26 fix: restore AppModule class declaration
Some checks failed
Deploy API Server / build-and-deploy (push) Has been cancelled
Details
2026-05-22 23:15:12 +08:00
WangDL
2f979a7048 fix: duplicate TimeoutInterceptor
Some checks failed
Deploy API Server / build-and-deploy (push) Failing after 18s
Details
2026-05-22 23:13:50 +08:00
WangDL
ec78330773 fix: remove duplicate AdminThrottleModule
Some checks failed
Deploy API Server / build-and-deploy (push) Failing after 19s
Details
2026-05-22 23:13:17 +08:00
WangDL
e8eeae55df fix: remove duplicate ContentSafetyModule import
Some checks failed
Deploy API Server / build-and-deploy (push) Has been cancelled
Details
2026-05-22 23:13:02 +08:00
WangDL
504861c5a1 fix: app.module dedup
Some checks failed
Deploy API Server / build-and-deploy (push) Has been cancelled
Details
2026-05-22 23:12:49 +08:00
WangDL
9e8f3dccd7 feat: M0-06 Content Safety — sensitive word check + admin AAPI
Some checks failed
Deploy API Server / build-and-deploy (push) Has been cancelled
Details
2026-05-22 23:12:39 +08:00
WangDL
28d68675b1 feat: M0-05 Traffic Protection — Redis throttle + timeout
Some checks failed
Deploy API Server / build-and-deploy (push) Failing after 18s
Details
2026-05-22 23:09:16 +08:00
WangDL
8d52214dd5 feat: M0-03 Config & Feature Flag — DB-backed config + Redis cache + Admin AAPI
Some checks failed
Deploy API Server / build-and-deploy (push) Has been cancelled
Details
2026-05-22 22:36:32 +08:00
WangDL
4c4d14724a feat: M0-02 Admin event management AAPI — queues overview + failed + retry
All checks were successful
Deploy API Server / build-and-deploy (push) Successful in 37s
Details
2026-05-22 22:27:07 +08:00
WangDL
42e9e80f4c feat: M0-02 EventBus — sync+async publish + DomainEvents queue
All checks were successful
Deploy API Server / build-and-deploy (push) Successful in 1m14s
Details
2026-05-22 22:22:25 +08:00
WangDL
3fd5f94db5 feat: complete M0-01 — TraceId + BaseService + DomainEvent + SensitiveLogger
All checks were successful
Deploy API Server / build-and-deploy (push) Successful in 35s
Details
2026-05-22 22:19:06 +08:00
WangDL
0e85231712 feat: admin knowledge base list with Prisma
Some checks failed
Deploy API Server / build-and-deploy (push) Failing after 17s
Details
2026-05-22 15:54:06 +08:00
WangDL
997b3c0cdb feat: admin cost management — CRUD + monthly summary + expiry
All checks were successful
Deploy API Server / build-and-deploy (push) Successful in 39s
Details
2026-05-22 15:40:24 +08:00
WangDL
c170f6048b feat: admin billing API — query DeepSeek + SiliconFlow balances
All checks were successful
Deploy API Server / build-and-deploy (push) Successful in 39s
Details
2026-05-22 15:23:25 +08:00
WangDL
f30a446bd5 feat: server metrics API — local os + remote SSH
All checks were successful
Deploy API Server / build-and-deploy (push) Successful in 38s
Details
2026-05-22 13:30:44 +08:00
WangDL
f20bdc0d7a feat: add conversation management — sessionId + X-Hermes-Session-Id + CRUD
All checks were successful
Deploy API Server / build-and-deploy (push) Successful in 37s
Details
2026-05-22 10:43:18 +08:00
WangDL
017d78a8d6 fix: add admin-ai-chat module + fix AdminUsersModule PasswordService dependency
All checks were successful
Deploy API Server / build-and-deploy (push) Successful in 11s
Details
2026-05-21 23:57:59 +08:00
WangDL
b8a1fb0921 feat: add admin backend modules — dashboard, audit-log, admin-users
All checks were successful
Deploy API Server / build-and-deploy (push) Successful in 10s
Details 
Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
 2026-05-21 17:22:48 +08:00
WangDL
5a7c21dd60 feat: implement complete admin authentication system
All checks were successful
Deploy API Server / build-and-deploy (push) Successful in 9s
Details 
- Add AdminRole enum (SUPER_ADMIN/ADMIN/OPERATIONS/DEVELOPER/READONLY) with hierarchy
- Add PasswordService (bcryptjs, 12 rounds), AdminTokenService (type=admin JWT)
- Add AdminAuthService: login/lockout/refresh/logout with audit logging
- Add AdminAuthController: /admin-api/auth/{login,refresh,logout,me}
- Add AdminAuthGuard: validates type=admin, user status, session, lockout
- Add AdminRolesGuard + @AdminRoles() decorator for RBAC
- Add AdminAuditService for audit log persistence
- Add AdminLoginRateLimit (10 req/15min per IP)
- Add prisma/seed.ts for SUPER_ADMIN initialization via env vars
- Update JwtAuthGuard to skip /admin-api/* and /internal/* paths
- Update main.ts to exclude admin-api/internal from global 'api' prefix
- Update jwt.config.ts with admin JWT secrets and expiry config

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
 2026-05-21 15:05:31 +08:00
WangDL
fbdae9078f feat: Python RAG Worker + NestJS 内部 API（文档解析/切片/embedding/Qdrant/候选生成）
Some checks failed
Deploy API Server / build-and-deploy (push) Failing after 22s
Details
2026-05-19 22:35:12 +08:00
WangDL
9c161db26b feat: KnowledgeSource 和 ImportCandidate 模块
Some checks failed
Deploy API Server / build-and-deploy (push) Failing after 22s
Details
2026-05-19 22:20:29 +08:00
WangDL
82fcaa1f2f fix: replace RateLimitService with global RateLimitGuard
All checks were successful
Deploy API Server / build-and-deploy (push) Successful in 59s
Details 
RateLimitService could not be injected into feature modules due to
NestJS DI module isolation. Replaced with a global Guard that uses
@RateLimit() decorator metadata to apply per-endpoint limits.

- RateLimitGuard: checks Redis counters, throws 429 on exceed
- Decorators: LoginRateLimit, FeedbackRateLimit, AiAnalysisRateLimit,
  FileUploadRateLimit
- Applied to: auth (login), feedback, ai-analysis, files endpoints

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
 2026-05-18 10:23:19 +08:00
WangDL
6d7cbffc3b feat: COS 对象存储接入 — CosStorageProvider + FilesModule
Some checks failed
Deploy API Server / build-and-deploy (push) Failing after 3m0s
Details 
- 安装 cos-nodejs-sdk-v5，封装 CosStorageProvider（upload/download/delete/healthCheck）
- 重写 StorageService，新增 createUploadUrl/verifyUpload/getDownloadUrl/deleteObject
- 创建 FilesModule：POST /files/upload-url, POST /files/complete, GET /files/:id, DELETE /files/:id
- UploadedFile 新增 objectKey/bucket 字段
- 对象键格式 {userId}/{YYYYMM}/{sanitizedName}.{ext}
- 接入文件类型校验（ALLOWED_FILE_TYPES）+ 上传限流（10次/小时/用户）
- 配置文件 cos.longde.cloud → zhixi-1259685406 / ap-guangzhou

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
 2026-05-17 22:30:14 +08:00
WangDL
08f31dd5b6 feat: P0 后端补全 — BullMQ Workers 注册 + 用户 Profile API + 角色权限 
- AppModule 注册 3 个 BullMQ Workers (AiAnalysis/DocumentImport/Notification)
- Users 模块新增 GET/PATCH /users/me/profile 端点:
  - GET 读取 UserProfile (learningIdentity, learningDirection, bio, currentGoal)
  - PATCH upsert UserProfile
  - GET /users/me 返回 profile + preferences (include join)
- 新增 RolesGuard + @Roles() 装饰器 (UserRole enum)
- QueueModule/QueueService 改进
- 各模块 controller/repository/service 完善

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
 2026-05-17 19:08:07 +08:00
WangDL
007b56dad5 feat: AI三层架构 + 全局JwtAuthGuard + 12个Repository迁Prisma
All checks were successful
Deploy API Server / build-and-deploy (push) Successful in 1m0s
Details 
- AI: 新三层架构 Provider→Gateway→Workflow（15文件，DeepSeek+MiniMax）
- Auth: 全局JwtAuthGuard + @Public()装饰器白名单路由
- DB: 12个Repository从Map/Array迁到Prisma
- Schema: 新增AiUsageLog、WaitlistEntry模型
- API: /api-docs-json加Basic Auth保护
- 清理: 删除infrastructure/ai、docs/旧文档

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
 2026-05-17 00:39:46 +08:00
WangDL
77c62599b1 feat: Apple 登录真实验签 - jwks-rsa + jsonwebtoken 验签 Apple identityToken
All checks were successful
Deploy API Server / build-and-deploy (push) Successful in 2m13s
Details
2026-05-13 15:35:41 +08:00
WangDL
ef7c1f1bc9 feat: 安全基线 + 4个安全漏洞修复 - JWT AuthGuard/OptionalAuthGuard, StrictValidationPipe, 全局异常过滤器, Redis限流429, Apple登录mock模式, BigInt精度修复, SECURITY.md 2026-05-09 18:57:33 +08:00
WangDL
35de65e99b feat: 重构 api-server 为模块化单体架构，接入 MySQL + Redis 
- 按 BACKEND-PLAN.md 将项目重构为 4 层架构:
  config/ -> common/ -> infrastructure/ -> modules/
- 15 个业务模块，遵循 Controller → Service → Repository 分层
- infrastructure: PrismaService / RedisService / QueueService / AiService / StorageService
- common: guards / interceptors / filters / pipes / decorators / dto / types / utils
- Prisma schema 含 27 张表，MySQL 8.0 服务器 db push 成功
- Redis 7 接入: 限流/任务状态/分布式锁/队列预留
- ai-analysis 模块: 每日 50 次限流 + 重复提交锁 + 异步任务状态追踪
- document-import 模块: 异步导入流程 + 进度追踪
- notifications 模块: BullMQ notification 队列预留
- /health 端点实时返回 database + redis 连接状态
- Swagger 注册 15 个 tag，67 个路由全部映射
 2026-05-09 18:25:04 +08:00
WangDL
bd44b7e138 feat: init api-server v0.1 
- NestJS + TypeScript 后端 API
- 用户认证 (auth)
- 用户管理 (users)
- 学习路径与课程 (learning)
- AI 分析与对话 (ai)
- 用户反馈 (feedback)
- 等待名单 (waitlist)
- 知识库 (knowledge)
- Swagger API 文档（中文、访问控制）
- Basic Auth 保护生产环境文档
 2026-05-04 16:09:01 +08:00