zerosaturation
a337f43f86
fix(config): port alignment + service test doubles (batch 4.1/4.5)
...
- gateway/config Dubbo URL 默认端口修正(原 20004/20005 与服务实际 20001/20004 不符);
- userService main.go 硬编码 WithPort(20000) 修死码, -port flag / PORT env 真正生效;
- .env.example 11 个 DUBBO URL 同步(对齐 serviceDefaultPorts map + 实际服务 bind);
- 删除 DUBBO_STARBOOK_SERVICE_URL 死引用(starbookService 已在 batch 4.2 删除);
- .env.example Service Ports 注释块补全 10 行, 与网关 Dubbo URL + port_test 三方一致;
- 10 个 service 各加 port_test.go, 断言 flag 默认与 serviceDefaultPorts map 一致;
- 11 个 port_test 总计 13 测试覆盖(网关 + 10 service);
- .gitignore 加 userService/main.go.bak 排除(临时备份)。
Co-Authored-By: Claude <noreply@anthropic.com>
2026-07-24 14:02:14 +08:00
zerosaturation
e1326acaf9
fix(backend): service stability — bcrypt off-txn / login anti-enum / MQ stub / aiChat / event reliability / gateway aggregate (batch 3)
...
- 3.1 bcrypt 移出事务 (Register): repository.HashPassword 前移到 db.Transaction 之前,消除连接池占用。
- 3.2 Login 消除用户枚举 + 限流 + timing 抹平: pkg/errors 加 ErrInvalidCredential
/ErrTooManyLoginAttempts; 用户不存在/密码错/密码空 三路径统一返回同一错误;
mobile 5次/ip 20次 per 15min 限流 (Redis, fail-open 降级); user-not-found 走
dummy bcrypt 抹平 ~100ms 时序差,完全消除枚举侧信道;空密码分支已核实无时序 leak。
- 3.3 MQ streams adapter 停用 → stub: 0 业务调用方, 新 stub EventProducer.Publish no-op;
pkg/mq/mq.go Init 不再装配 streams; 全仓 grep 验证 11 处硬编码
'gallery'/'default' 集中到 pkg/queue/consts (值不变, 仅消漂移)。
- 3.5 JWT 密钥治理: pkg/jwt MustInit fail-fast + atomic.Value (见上一个 commit 293c7b1
2026-07-23 18:50:40 +08:00
zerosaturation
3407e30395
refactor(assetService): CreateMintOrder 3-phase txn + orphan reconciliation (P0-2)
...
- CreateMintOrder 拆三段: txn1(PENDING→PROCESSING,不调RPC/不写asset)
→ 事务外 UpdateCrystalBalance 扣水晶 → txn2(建asset+registry→SUCCESS);
消除 DB 事务内嵌跨服务 gRPC(连接池占用+跨服务事务风险)。
- 任一步失败 markMintOrderFailed 独立事务标 FAILED(不回滚已扣水晶=审计流水,
重试靠 Task1 source_id 幂等 + Task2 入口短路防双扣); nil-cause 防御。
- 孤儿订单对账 ReconcileStuckMintOrders: 扫陈旧 PROCESSING 单,查 mint_cost 流水—
已扣未建→FOR UPDATE 行锁下幂等补完 SUCCESS(串行化并发防双建),未扣→FAILED,绝不退款。
- main.go 接线周期 worker(MINT_RECONCILE_INTERVAL_SEC 默认600s,0关,优雅退出)。
- 测试: RPC失败落FAILED / 对账未扣→FAILED / 已扣未建→补完(含幂等二次跑)。
Co-Authored-By: Claude <noreply@anthropic.com>
2026-07-23 12:28:57 +08:00
zerosaturation
b7022d2dc1
fix(backend): auth boundary — trusted identity from ctx (batch 2)
...
- 新增 pkg/authctx: 从 Dubbo attachment/gRPC metadata 提取可信 user_id/star_id,
统一覆盖 req 同名字段, 缺身份返 Unauthenticated。
- 各 provider 接入(堵身份伪造/越权):
* moderation SubmitReport 等 6 RPC(举报人伪造)
* asset CheckAssetLike/GetAssetQrcode/TrackShare(点赞/分享归因伪造)
* social CheckFriendship(修 starID=0 隐私预言机)
* activity PurchaseItem/BatchPurchaseItem(水晶扣费伪造)等 5 RPC
* gallery/aiChat/task/notification 迁移 authctx, 删散落 extractUserInfo*
- social 正确性: GetUserLikedAssets OR 显式分组(防御); GetRandomUsersByStar 真随机(去 rand.Seed)。
- gateway: /auth/validate 移入 AuthMiddleware 保护组(/refresh 保留,依赖注入身份)。
- 删 userService 已迁移死函数; notification 缺身份错误码统一为 Unauthenticated。
- 各 provider 单测(伪造身份被覆盖 + 缺身份拒绝)。
Co-Authored-By: Claude <noreply@anthropic.com>
2026-07-23 01:12:35 +08:00
zerosaturation
878bd46399
fix(backend): financial correctness — settlement/hours/mint idempotency (batch 1)
...
- settlement(1.1): exhibition_revenue_records 加 UNIQUE(exhibition_id,cycle_start_time)
+ CreateRevenueRecord ON CONFLICT DO NOTHING; MQ 用 settled_at 替代复用 is_processed;
恢复扫描器过滤改 settled_at IS NULL; created_at 统一毫秒; 删死代码 cleanup_worker.go。
- hours(1.2): 新增 exhibition_hours_log/asset_exhibition_hours_log(source_id 唯一)幂等表;
fan_profile/assetLevel 的 AddExhibitionHours 按 sourceID 幂等(事务包裹); 存量重算脚本。
- mint(1.4/1.5/1.6): crystal_transaction_records (source_id,change_type) 部分唯一索引
+ UpdateCrystalBalance/CreateMintOrder 幂等; 保底改 crypto/rand; 下线伪 tx_hash;
doMint Redis Lua 原子限流。
- migrations 001/002/003; 各服务单测(自包含, 缺 DB t.Skip)。
Co-Authored-By: Claude <noreply@anthropic.com>
2026-07-23 01:11:54 +08:00
zerosaturation
d554d7be83
feat:修改周边验证
2026-07-17 16:53:57 +08:00
zerosaturation
18aff3b682
fix：修改bug
2026-07-15 13:12:27 +08:00
zerosaturation
c0b577dd40
feat:增加邮箱管理功能
2026-07-14 21:59:15 +08:00
zerosaturation
d900c0d8b2
feat:增加验证真伪访问次数和首次验证
2026-07-13 14:24:42 +08:00
zerosaturation
74853800b6
feat:增加二维码验证真伪的功能
2026-07-13 11:22:56 +08:00
zerosaturation
e5bd0c854c
feat:增加忘记密码的功能
2026-07-09 19:00:03 +08:00
zerosaturation
958c867309
fix:修改举报/反馈的bug
2026-07-06 16:22:26 +08:00
zerosaturation
dcb4e451a1
fix：修改合并后bug
2026-07-06 10:25:06 +08:00
66d226948f
Merge pull request 'feat/actvity' ( #4 ) from feat/actvity into dev
...
Reviewed-on: https://git.liantu.tech/xiaoyu/topfans/pulls/4
合并feat/actvity
2026-07-03 16:28:30 +00:00
zerosaturation
8376afc5d6
feat:修改websocket的性能和相关的问题
2026-07-03 22:04:11 +08:00
zerosaturation
1afee2de73
feat:修改的欢迎页的冷启动和系统重启的错误触发和一键登录页的路径修改
2026-07-03 18:54:03 +08:00
zerosaturation
c07e8e9c19
fix：修改数据看板bug
2026-07-03 14:57:14 +08:00
zerosaturation
d12a84c1f0
feat:增加队列修改收益方面把轮询改为MQ队列，修改数据看板的数据问题出错
2026-07-03 12:34:55 +08:00
zerosaturation
355ac4393b
feat：修改收益的计算
2026-07-03 12:34:55 +08:00
Lenticular Studio Agent
65ce6bba12
feat: Dify 部署脚本修复 + AI 搭子 MVP 接入
...
主要改动:
fix(docker/dify-deploy): 修复脚本核心功能
- heredoc 单引号 bug: 'ENVEOF' 改为 ENVEOF,变量正确展开
- 端口默认值 8083/8084/8085 对齐 .env.prod 生产配置
- 加 dc_cmd() 兼容 docker-compose v1/v2 plugin
- openssl rand 生成强随机密码与 SECRET_KEY(42 字符)
- install 跳过已存在 .env,保护用户配置(管理员密码/SECRET_KEY)
- read -p < /dev/tty 兼容非 tty 环境(CI/CD)
- show-config 改用 DIFY_NGINX_PORT(nginx 入口)而非 APP_WEB_PORT
docs(mvp-design): 修正 §3.2 workflow inputs 描述
- 实际只有 query,删除错误的 user_id input 声明
- 节点序列图同步更新
feat(aiChatService): 新增 Dify 客户端与适配器
- service/dify_client.go: Dify Workflow 调用 + SSE 解析
- service/dify_adapter.go: 与现有 chat_service 桥接
- provider/ai_chat_provider.go: Dubbo 入口简化
- main.go: 装配 ConversationRepository + DifyClient
feat(migrations): 新增 AI 搭子会话表 ai_chat.sql
- ai_conversations / ai_messages 表 + 索引
docs: 新增 Dify 集成设计文档
- 2026-06-29-ai-chat-dify-mvp-design.md (MVP 实施级)
- 2026-06-29-ai-chat-dify-integration-v2-design.md (V2 演进路线图)
- docs/dify/角角.yml (Workflow DSL 导出)
config: 更新 env 模板与 docker 配置
- backend/.env.example: DIFY_* 环境变量声明
- docker/.env.prod: DIFY_API_BASE 对齐 8083
- docker/build.sh: 微调
- CLAUDE.md: 项目规范补充
🤖 Generated with [Claude Code](https://claude.com/claude-code )
Co-Authored-By: Claude <noreply@anthropic.com>
2026-07-02 12:32:34 +08:00
zerosaturation
9c3fe6d695
feat:修复点赞收益的问题
2026-07-01 11:03:50 +08:00
zerosaturation
3cd68acf6d
feat:完善计算点赞押注收益
2026-06-29 14:47:32 +08:00
c02e53fc0e
feat:修改h5地址
2026-06-26 18:10:51 +08:00
946e204573
feat:修改canvas合成图
2026-06-26 17:58:37 +08:00
zerosaturation
2032246fd0
feat:增加分享界面，完善的保存图片功能
2026-06-26 16:45:29 +08:00
zerosaturation
0d6b7a9e95
feat:增加购买道具的聚合功能
2026-06-24 19:51:13 +08:00
zerosaturation
b7e2aee399
feat:修改活动 TOP3 + 我的排名
2026-06-24 18:10:12 +08:00
Lenticular Studio Agent
fd5e317e05
merge: 解决 docker-compose 和 SocketManager 冲突
...
Co-Authored-By: Claude <noreply@anthropic.com>
2026-06-23 23:06:24 +08:00
Lenticular Studio Agent
67cf3d4177
chore: 清理 laserCompositor 微服务残留
...
- 删除已弃用的 compositor_client.go
- 删除激光合成微服务代码
- 添加 gateway 合成控制器和测试文件
- 添加 Dify prompt 补丁脚本
Co-Authored-By: Claude <noreply@anthropic.com>
2026-06-23 22:44:03 +08:00
zerosaturation
37a3f292df
feat:访问他人展览页面修改
2026-06-23 22:29:39 +08:00
zerosaturation
12571eedba
feat:修改活动弹窗bug
2026-06-23 18:57:50 +08:00
zerosaturation
75ab617c6c
feat:增加实时留言功能和修改轮询道具购买记录显示改为websocket显示
2026-06-23 18:13:55 +08:00
zerosaturation
7eb6dad434
feat:新增举报和反馈功能
2026-06-22 17:19:48 +08:00
zerosaturation
ef0a4f6afd
feat:修改通知系统的消息
2026-06-17 11:59:51 +08:00
ddc5b89a6c
frat:增加uniPush的配置
2026-06-16 23:49:40 +08:00
zerosaturation
7074546959
feat:新增通知系统
2026-06-16 21:30:58 +08:00
zerosaturation
060e4944fa
fix：修改JWTbug
2026-06-15 21:12:59 +08:00
zerosaturation
271e0350c7
feat:重构code状态码
2026-06-15 16:28:35 +08:00
zerosaturation
56fc2f6beb
feat:修改密码增加手机号+短信验证
2026-06-15 14:15:24 +08:00
zerosaturation
280b4bbee0
feat:docker新增统计的微服务
2026-06-11 16:35:56 +08:00
zerosaturation
dfb79af4b1
feat: 铸造菜单改为动态配置
2026-06-09 12:38:12 +08:00
zerosaturation
4f3bb7e3ab
feat:修改数据看板sql的数据问题
2026-06-09 01:24:03 +08:00
zerosaturation
d859650136
feat:修改数据看板
2026-06-09 00:37:42 +08:00
zerosaturation
0029fb8cc8
feat(statistic): T9-T12 dashboard 7 RPCs - additional business-side service modifications
...
Modifications to 5 existing business services for TrackEvent integration:
- socialService/asset_like_service.go: TrackEvent(asset.like) after LikeAsset
- galleryService/exhibition_service.go: TrackEvent(exhibition.start) + (exhibition.end with duration)
- taskService/revenue_service.go: TrackEvent(exhibition.revenue) after OnExhibitionCompleted
- assetService/mint_service.go: TrackEvent(asset.mint) after CreateMintOrder
- assetService/asset_level_service.go: TrackEvent(asset.level_up) in logLevelChange
- userService/user_service.go: fireCrystalChangeEvent wrapper (call site TBD by service owner)
🤖 Generated with [Claude Code](https://claude.com/claude-code )
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
2026-06-08 17:20:53 +08:00
zerosaturation
dd9952ccc9
feat(statistic): T9-T12 dashboard 7 RPCs (Provider + Materializer + Service + Cache)
...
- StatisticInternalProvider: TrackEvent/BatchTrackEvent
- StatisticCombinedProvider: all 9 RPCs (7 dashboard + 2 event) on single service
- materializer: 4 MV REFRESH CONCURRENTLY + pg_try_advisory_lock + refresh_log
- dashboard_repo: 7 aggregation SQLs (week_rank / 7d curve / top5 / level dist / upgrade progress)
- dashboard_service: 7 RPCs with Redis 5min TTL + cache miss protection (1min empty)
- Cache wrapper: JSON serialize + format dash:{rpc}:{starID}:{userID}
- main.go: integrated workers + Dubbo triple server :20009
- cross-service userService.GetFanProfile (for crystal_balance)
- client/user_rpc_client.go
🤖 Generated with [Claude Code](https://claude.com/claude-code )
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
2026-06-08 17:20:53 +08:00
zerosaturation
bed8f8e578
feat(statistic): T4-T8 event collection framework (Event + Sink + Repo + Service + Workers)
...
- Event model + ToJSON
- EventSink interface + ChannelEventSink (non-blocking Submit)
- event_repo: batch INSERT ON CONFLICT DO NOTHING dedup
- event_service: 7-type whitelist + 1KB props limit + ReceivedAt auto-fill
- event_flusher: 100/1s batch + sync metric_recent_level_ups on level_up
- metric_weekly + metric_upcoming workers (5min/15min with pg_try_advisory_lock)
- partitioner: 7-day pre-create + 30-day cleanup (00:05 create / 00:30 cleanup)
- 22 unit + integration tests (model/repo/service/sink/worker)
🤖 Generated with [Claude Code](https://claude.com/claude-code )
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
2026-06-08 17:20:53 +08:00
zerosaturation
f5ece5e1d2
feat(statistic): T3 service skeleton (config + main + healthz + metrics + 10 SQL)
...
- 6 config blocks (DB/Redis/Channel/Refresh/Partition/Extension with 4 EnableXxx=false)
- 14 Prometheus metric declarations
- self-impl healthz (/healthz + /metrics) — bypasses pkg/health to keep /metrics
- main.go startup: logger → config → DB → Redis → healthz HTTP :21009
- 10 SQL migrations: events partitioned + 4 MV + 3 pre-agg + refresh_log + 7-day initial
🤖 Generated with [Claude Code](https://claude.com/claude-code )
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
2026-06-08 17:20:53 +08:00
zerosaturation
3707125549
feat(statistic): scaffold statisticService with go.mod and directory structure
2026-06-08 17:20:53 +08:00
zerosaturation
23a8051e96
feat: 修改头像显示不全，修改docker的配置
2026-06-04 16:41:20 +08:00
liulong
6ff8743c72
feat:修复合并问题
2026-06-03 23:25:08 +08:00
