c6ae84de81
refactor(layout): adopt wavelet manifest layout for configs and docker while preserving docker-compose
2026-09-03 10:46:51 +08:00
953a224245
refactor(arch): decouple private imports, enforce contracts and comply with cordis architecture
2026-09-03 10:40:02 +08:00
630803d5a3
merge: sync upstream wavelet/main (clean contracts DTOs and configs)
2026-09-03 10:25:52 +08:00
807343c82c
feat(config): load manifest config.default.yaml with config.yaml override and clean root configs
2026-09-03 10:13:57 +08:00
b183e80565
merge(wavelet): sync upstream changes
2026-09-03 09:29:28 +08:00
87e3bfd0e6
chore: doc
2026-09-02 22:41:06 +08:00
fff3a7589c
docs(plugin): unify plugin development template based on custom_example
2026-09-02 22:39:13 +08:00
f975c4f7cc
merge(cordis): abort helpers and gold upgrade fixture
...
Bring Wavelet AbortNotFoundIfMissing/AbortBadRequestOnError, switch OpenFlare handlers to them, and pin the golden upgrade test to v3.5.4 via git archive.
2026-08-30 18:03:04 +08:00
b72b1cfc16
refactor(server): use Wavelet response abort helpers
...
Call response.AbortNotFoundIfMissing and AbortBadRequestOnError from handlers and drop the OpenFlare-local copies.
2026-08-30 17:46:45 +08:00
c93ff6674f
refactor(backend): rename OpenFlare directory to lowercase openflare
2026-08-30 17:43:23 +08:00
06d5fedbfc
refactor(server): nest kernel and domain under classified roots
...
Keep only plugin entry, httpapi, migrate and updater at the server root. Shared model/repository/adapters live in kernel/; product bounded contexts live in domain/.
2026-08-30 17:35:26 +08:00
f064237081
refactor(server): group OpenFlare domains into bounded contexts
...
Drop the openflare/ and router/v1 nesting. Product code lives under site, fleet, pages, waf, tls, cloudflare, observability, dashboard and option; HTTP wiring is httpapi. Shared model/repository stay the kernel.
2026-08-30 17:31:15 +08:00
d531d71778
refactor(server): merge migrate package and drop unused admin/migrator trees
...
Collapse stamp, of_* SQL and ClickHouse into server/migrate, hoist updater out of admin, and delete the unused 76-file historical chain.
2026-08-30 16:54:08 +08:00
471d237af0
test(cmd): require v1 cap and /api/healthz only
...
Update route assertions and regenerate swagger so the process no longer documents /api/cap or /api/health.
2026-08-30 16:44:10 +08:00
8931c3559c
fix(frontend): call /api/v1/cap and document /api/healthz
...
Point the login captcha solver at the versioned challenge/redeem endpoints and document the remaining health probe.
2026-08-30 16:42:33 +08:00
d1e5c9acd8
docs(cordis): 添加 API 收口与 server 目录整理计划
...
Wavelet 去掉 cap/health 别名，前端改 v1；00001 补 OF 种子；
合并 migrate/updater 并删除 76 条历史 SQL。
2026-08-30 16:36:19 +08:00
14232838dd
docs(cordis): 记录 API 收口与 server 目录整理设计
...
cap/health 只留 v1 或 /api/healthz；server 合并 migrate 包；
压缩 00001 必须含 of_* 建表与 OpenFlare 种子数据。
2026-08-30 16:33:22 +08:00
a347c33608
chore(cordis): persist merge.ours and isolate wavelet extras
...
Add a repo .gitconfig so merge=ours in .gitattributes can actually run.
Disable the Wavelet canary image workflow and keep docker-compose.yaml
as the OpenFlare default so a merge cannot ship the wrong product.
2026-08-30 15:00:44 +08:00
df271ff708
chore(cordis): drop rsync sync after git upstream is connected
2026-08-30 14:32:18 +08:00
c68038ad06
Merge remote-tracking branch 'wavelet/feat/cordis-alignment' into cordis
...
# Conflicts:
# .agents/skills/cache-framework/SKILL.md
# .agents/skills/clickhouse-batchwriter/SKILL.md
# .agents/skills/database-migration/SKILL.md
# .agents/skills/file-upload/SKILL.md
# .agents/skills/logstore/SKILL.md
# .agents/skills/new-api/SKILL.md
# .agents/skills/new-api/references/handler_example.go
# .agents/skills/new-api/references/logics_example.go
# .agents/skills/new-api/references/service_example.go
# .agents/skills/new-async-task/SKILL.md
# .agents/skills/new-async-task/references/CODE-EXAMPLES.md
# .agents/skills/new-setting/SKILL.md
# .agents/skills/push-notification/SKILL.md
# .agents/skills/release-guide/SKILL.md
# .auto/checks.sh
# .auto/ideas.md
# .auto/log.jsonl
# .auto/measure.sh
# .auto/prompt.md
# .dockerignore
# .env.example
# .github/copilot-instructions.md
# .github/workflows/build-release.yml
# .gitignore
# .golangci.yml
# AGENTS.md
# Makefile
# README.md
# backend/cmd/app.go
# backend/cmd/app_test.go
# backend/cmd/banner.go
# backend/cmd/banner_test.go
# backend/docs/docs.go
# backend/docs/swagger.json
# backend/docs/swagger.yaml
# backend/go.mod
# backend/go.sum
# backend/main.go
# config.example.yaml
# docker/Dockerfile
# docker/Dockerfile.backend
# docker/Dockerfile.cross
# scripts/swagger.sh
# scripts/update_go_license.sh
2026-08-30 14:30:56 +08:00
6cabad3197
fix(cordis): satisfy L2 test and swagger gates
2026-08-30 14:17:51 +08:00
d3a91dcc3f
feat(server): stamp legacy goose versions and own of_* migrations only
2026-08-30 13:43:38 +08:00
6c7090aa8e
fix(server): route system config and lookups through Wavelet contracts
2026-08-30 13:25:11 +08:00
8b24af1310
refactor(server): drop Wavelet-duplicated domains and use contracts
2026-08-30 13:00:13 +08:00
e48485f27d
feat(cmd): assemble control plane via Wavelet plugins plus server
2026-08-30 12:13:43 +08:00
dd333643f2
docs(cordis): 添加与 Wavelet 对齐的实施计划
...
按 W1–W9、装配根、删平台副本、stamp 升级与 git merge 拆成
带测试的任务，金标准 v3.5.4 只读。
2026-08-30 10:37:13 +08:00
823bec1272
docs(cordis): 记录与 Wavelet 对齐的 Cordis 设计
...
明确框架与业务边界、Wavelet 通用扩展点、stamp 升级路径、
金标准库验证，以及以 git merge 接入上游且不改写历史。
2026-08-30 10:26:37 +08:00
dbaa3bf140
feat(cordis): add OpenFlare Cordis 架构改造设计
...
docs(changelog): 修正表述笔误
refactor(cordis): 磁盘缓存改用上上游能力并清理本地副本
按上游/下游归属规约：类型断言守卫已回流 Wavelet（f3d85d5，附回归用例），
本仓库删除 OpenFlare/plugins/server/pkg/cache 整包并改 import 到
Wavelet/pkg/cache/disk，同步后与上游零漂移。
验证：go build 通过；go test ./... exit 0（137 包 ok）；256 条路由对拍与
232 条 swagger 操作均零差异；make build-all 四进制；前端零改动。
docs(cordis): 记录 T1 清理结果与五个复用阻塞点
refactor(cordis): server 复用上游 pkg 能力并删除等价本地副本
按上游/下游归属规约清理重复实现，删除 7 个与上游等价的本地包并改 import：
shared/response→pkg/response、pkg/{logger,mail,trace,httppool,cache/ram}→
上游同名包、infra/persistence/batchwriter→pkg/batchwriter。逐项核过差异：
httppool 逐字节相同；logger 的 Config 字段完全一致；response 的 7 个 Abort*
一致；cache/ram 换过去顺带把裸 go 变回带 panic 恢复的 util.Go。
两处非等价差异按语义处理：
- batchwriter.Stats 与 status DTO 原为类型别名，改为消费侧逐字段转换，
避免 model 反向依赖基础设施类型；
- 上游 pkg/idgen 要求显式 Init（本地副本为懒加载自动初始化），本次保留本地
副本，待与 infra 初始化一并迁移（已登记在清理计划）。
验证：go build 通过；go test ./... exit 0（138 包 ok）；256 条路由对拍零差异；
make swagger 232 条操作零增减，且归一化后与旧文档深度相等——差异仅为
response.Any / logger.LogEntry 两个定义名随包路径改名，接口形状未变。
chore(cordis): 回流内核与 pkg/util 通用能力并清理 vendoring 污染
按新增的上游/下游归属规约：HandleRaw/BasePath 与版本比较、网络、格式化助手
属通用能力，已提交到 Wavelet 分支 feat/cordis-router-raw-routes，本仓库改为
纯同步获取（pkg/util 已零漂移），补丁登记保留至上游合并。
同时修掉我此前 git add -A 造成的污染：首次 vendoring 把上游工作区里被
gitignore 的运行期产物一起提交进来（upload 的 diskcache 缓存块 650 个与
driver_http/dist 前端构建物 380 个，共 12872 行/1030 文件）。sync-upstream.sh
现显式排除 uploads/dist/data/*.db，.gitignore 补上对应兜底规则。
AGENTS.md 增加上游/下游改动归属规约，并把仍指向前 Cordis 布局的硬性约束
（internal/router + Serve、internal/repository/logstore、internal/platform/bootstrap、
internal/cmd）改到当前插件路径。
验证：go build 通过；go test ./... exit 0（144 包 ok）；make swagger 232 条
操作与基线逐条一致；make build-all 四进制；gofmt 干净。
feat(cordis): server 插件化并改由内核挂载控制面路由
新增 plugins/server/plugin.go：Apply 以 ctx.Router().Group(app.api_prefix)
声明根级与 /v1 全部路由；33 个注册函数由 *gin.RouterGroup 改为
core.RouterExtension，RegisterCollection 改用内核新增的 HandleRaw 保留
尾部斜杠变体，AdminMiddlewares 返回 []any（Go 不允许把 []T 展开为 ...any）。
删除 router.Serve 与 registerRoutes，装配根改为 core.App +
driver_http.New(WithEngine(router.BuildEngine()))，监听、信号与优雅退出归内核；
前端 SPA 的 NoRoute 兜底因内核暂无贡献点而保留在引擎层。
路由保真证据：plugin_parity_test 对拍 baseline/routes-engine.txt 的 256 条
(方法 路径) 零差异；go test ./... exit 0（144 包 ok，含真实 handler 的
openflare/integration 用例走同一条挂载路径）；make swagger 232 条操作与基线
逐条一致；golangci-lint 0 issues；make build-all 四进制；embed_frontend
标签编译通过；前端零改动。
已知待补：带 Redis 的实机 HTTP 冒烟（本机 6379 未启动，session store 与
改造前一样在建店阶段即 fatal），以及 bootstrap 的任务/设置/迁移注册迁入 Apply。
feat(core): RouterExtension 增加 HandleRaw 与 BasePath 以保真尾部斜杠路由
server 插件化的前置：Handle 经 cleanPath 会剥掉尾部斜杠，无法表达
/resource 与 /resource/ 两条不同路由，而 OpenFlare 有 20 个历史 list
端点两者都注册且部署关闭了 RedirectTrailingSlash，缺失即 404。新增
HandleRaw 与 BasePath（作用域包装器同样登记反注册），补 extpoints 用例；
并把 router.Serve 拆出 BuildEngine 以便交给 driver_http.WithEngine 复用，
新增路由表导出 harness，固化 256 条 (方法 路径) 基线供插件化对拍。
上游补丁登记于 backend/OpenFlare/upstream-patches.md，同步脚本改为按目录
前缀输出差异并在同步后提醒确认补丁是否仍在。
验证：go build 通过；go test ./... exit 0（143 包 ok）；gofmt 干净。
docs(cordis): 记录 server 插件接入内核的可行路径与内核能力缺口
feat(cordis): agent/relay/flared 落地为内核驱动插件
三个边缘守护进程各新增 plugin.go，实现 core.Plugin + core.Driver
（自定义 DriverType 与同名 profile），装配与生命周期从 main 迁入
Apply/Start/Stop：Apply 负责 JSON 配置加载、运行环境与用户确保、
openresty/frps/frpc 管理器与各服务装配；Start 以 util.Go 拉起阻塞式
runner 与 GeoIP 周期更新；Stop 收敛主循环结果并在超时时报错而非静默。
入口改为 core.NewApp(core.WithProfile(...)) + Prepare/Run，保持
-config 旗标、默认路径、退出码与启动/停止日志不变。
验证：go build 通过；go test ./... exit 0（143 包 ok，含 3 个插件身份
与配置失败路径测试）；make build-all 四进制产出；三进制实跑缺失配置
均 exit 1 且错误链保留 load {agent,relay,flared} config 原因；gofmt 干净。
refactor(cordis): 按功能职责拆分为 4 个插件与 share 共享层
backend/OpenFlare 不再平铺遗留分层，改为 plugins/{server,agent,relay,flared}
加 share/：控制面业务（openflare/admin/oauth/user/upload/cap/config/health 与
repository/model/infra/router 等支撑层）归 server；三个边缘守护进程各自成插件；
被两个以上插件消费的 protocol/geoip/wsclient/render/pagesarchive/edge 归 share。
同时把 pkg/util 与 buildinfo 合并回上游 pkg（上游已覆盖全部符号，仅 8 个函数与
2 个类型为 OpenFlare 独有，已一并迁入），装配根统一到 backend/cmd（含三个 daemon
入口），Dockerfile 与 release 工作流的构建路径和 -X 注入路径同步更新。
验证：go build 通过；go test ./... exit 0（141 包 ok）；make swagger exit 0 且
232 条 API 操作与基线逐条一致；make build-all 产出 4 进制；-X 注入经二进制
strings 实测生效；日志后端直连门禁改写为按 server 插件业务域扫描并在扫描数为 0
时报错（防门禁静默失效）；前端零改动。
feat(cordis): 落地 backend/share 共享层与上游同步脚本
跨插件共享资源（控制消息协议、GeoIP+iputil、边缘守护进程日志）从下游包
移入 backend/share，并声明其只能依赖 core/pkg 与标准/第三方库，禁止反向
引用下游业务与具体插件实现；新增 scripts/sync-upstream.sh 只覆盖
backend/{core,pkg,plugins}，同步后 --check 报告零差异，证明与上游逐字一致。
go build 通过，go test ./... exit 0（142 包 ok），前端零改动。
refactor(cordis): 采用与 Wavelet 同构的单模块布局并引入上游内核
按上游结构落位：backend/{core,pkg,plugins} 为 Wavelet 上游拷贝，OpenFlare
全部业务收拢到上游 downstream 所对应的位置 backend/OpenFlare/，模块名保持
Wavelet 以保证上游 import 路径逐字一致、同步零改写；三个 daemon 入口移至
backend/OpenFlare/cmd，backend/cmd 与 main.go 作为控制面装配根。
行为不变：go build 通过，142 个测试包全绿（含上游插件测试），232 条 API
操作与改造前逐条一致，四进制产物正常，前端零改动。swagger 暂只扫描下游代码，
待 P4 挂载上游路由后再纳入 plugins/。
style: 修正模块路径改写导致的 import 分组排序漂移
refactor(layout): Go 代码迁入 backend/ 并将模块名简化为 OpenFlare
对齐上游 Wavelet 的仓库布局，为以第二 module 形态 vendoring Cordis 内核与
平台插件做准备：模块路径整体改写为 OpenFlare，Go 目标加 cd backend，
swaggo 产物移至 backend/docs 并把 json/yaml 复制回 docs/ 供站点消费，
Dockerfile 与 release 工作流的构建目录、ldflags 模块路径同步更新。
行为保持不变：232 条路由与改造前逐条一致，95 个测试包全绿，
四进制产物正常，前端零改动。
chore(cordis): 落地改造计划与 schema/路由基线
新增 legacy_dump_test 迁移快照 harness：在临时 sqlite 库上按生产顺序
（goose.UpTo → zone 导入 → goose.Up）跑完 76 个历史迁移并导出 schema 与
版本序列，作为改造前后一致性门禁的唯一事实来源。同时记录 232 条路由清单
与 foundation 实施计划。
docs(cordis): add OpenFlare Cordis 架构改造设计
明确上游以第二 module 形态 vendoring 进 backend/Wavelet、4 个插件
(server/agent/relay/flared) 全部装载内核，并规定保留 76 个历史 goose
迁移 + 一次性版本 stamp 桥接的迁移方案，配套三方 schema 一致性门禁，
确保已部署库不重跑历史、不丢数据。
2026-08-30 10:12:52 +08:00
9f79fb9969
chore(release): v3.5.4
...
### ✨ 新功能
- 控制台接入中英双语（next-intl，无 URL 语言前缀）：默认中文，可在顶栏或「外观设置」切换，选择写入 cookie 后刷新生效。
### 🛠 修复
- 修复在网站列表中删除已加入 Cloudflare 指向分组的域名后，访问 Cloudflare 指向分组详情报错「Cloudflare 资源不存在」的问题。
- 修复自定义 Webhook 推送在企业微信/钉钉返回 HTTP 200 但 `errcode` 非零时仍记为成功的问题；任务日志会记录上游响应体。
- 修复 OpenTelemetry Resource 绑定 semconv schema 版本导致 SDK 升级后可能无法启动的问题。
- 修复静态导出（build:embed）部署下切换语言无效的问题：此前页面在构建时固定为默认中文，运行时不再读取 `NEXT_LOCALE`；现在客户端会按 cookie/浏览器语言重新解析并切换界面语言与 `html lang`。
- 修复 frpc 子进程在被杀后孤儿进程继续持有管道导致退出阻塞的问题。
### 💄 其他/体验
- 前端使用 `next/font` 自托管 Inter 字体，并忽略浏览器扩展改写 `body` 属性引起的 hydration 警告。
2026-08-29 18:34:07 +08:00
bbd7f72c2d
fix(cloudflare): clean up pointing member when zone domain is deleted
2026-08-29 18:32:02 +08:00
e568b96388
fix(auth): add missing masked_token column to w_access_tokens table in migrations
2026-08-29 11:57:04 +08:00
d043e7366f
docs: update developer guide and white paper with router whitelist and session fallback
2026-08-29 11:40:50 +08:00
4d65e57f9a
merge: feat(core): implement cordis configuration extension and migrate all plugins
2026-08-29 10:54:28 +08:00
ed8491addf
feat(core): implement cordis configuration extension and migrate all plugins
2026-08-29 10:53:53 +08:00
efa75558af
autoresearch iter 20: give the telegram poller a real long-poll window
...
telebot types LongPoller.Timeout as time.Duration and sends
int(timeout / time.Second) to getUpdates, so the literal 10 meant ten
nanoseconds: Telegram received timeout=0, long polling never held the
connection, and the adapter polled the Bot API in a tight loop instead.
Use 10 seconds and extract the settings so the conversion is asserted.
The adapter also has no media temp-dir cleanup (downloadMedia creates an
MkdirTemp per attachment and nothing removes it); that is left as a separate
change rather than bundled here.
2026-08-29 09:32:27 +08:00
fd83496a05
docs(config): add implementation plan for the Cordis config extension point
...
覆盖 P1+P2：core 配置引擎、viper 适配器隔离、门禁与 FiberSkipped、
新旧解析对拍。迁移 27 个消费文件与旧单例退场由后续计划承接。
2026-08-29 09:20:22 +08:00
020ebebfaa
chore(autoresearch): log iter 18
2026-08-29 09:12:03 +08:00
8c4955c835
autoresearch iter 18: remove the phantom user:daily_audit schedule
...
The user plugin registered a cron dispatching to user:daily_audit, a task
pattern it never registers, and no audit logic exists anywhere in the plugin.
The daily run therefore went nowhere while a test asserted the schedule was
registered — proving the wiring existed, not that it worked. Implementing a
real daily audit is unstarted functionality, so the schedule is removed rather
than stubbed.
The combined domain test now asserts the real invariant across all applied
plugins: every schedule's task type must have a registered handler.
2026-08-29 09:11:16 +08:00
1b1c45206c
autoresearch iter 17: wire the pairing-code cleanup cron to a real handler
...
message_gateway scheduled message_gateway:cleanup_pairing_codes every 10
minutes but never registered a task under that pattern, so every dispatch
went to a task type with no handler and expired pairing rows accumulated
forever, even though repository.DeleteExpiredPairingCodes already existed.
Add a test that fails for any schedule whose task pattern is unregistered:
it reports the exact orphan rather than relying on a schedule-exists assert.
2026-08-29 09:03:33 +08:00
850f99a2c8
docs(config): add Cordis config extension point design
...
pkg/config 以全局单例暴露全量配置，使组合根可跨插件判断 redis.enabled、
配置读者与所有者无约束。本设计将配置读取框架下沉为内核扩展点，由 infra
适配器隔离 viper，各插件声明自读字段并以门禁谓词取代组合根选型判断，
一次性迁移全部 27 个消费文件。
2026-08-29 08:16:24 +08:00
f4975d6732
refactor(plugins): restructure admin and message_gateway into standard layered sub-packages
2026-08-28 22:33:26 +08:00
b68060255f
docs(plugins): add plugin layered architecture spec and templates
2026-08-28 20:35:11 +08:00
f048dc528e
fix(docs): move swagger generated docs.go into backend/docs module directory
2026-08-28 15:13:34 +08:00
acad091127
docs: add implementation plan for zero-redis pluggable architecture
2026-08-28 15:11:03 +08:00
299ac30ee4
refactor(core): align with cordis spatiotemporal composability architecture
...
- Purify core micro-kernel by removing context hardcoded helpers and reverse dependencies
- Eliminate init() side effects in infra plugins with reversible lifecycle disposal
- Completely isolate plugins by removing cross-plugin imports and using core/contracts
- Introduce TaskService and RiskControlService contracts for unified cross-plugin APIs
- Regenerate Swagger documentation and update developer guide matrix
- Achieve 0 violations in check_cordis_architecture.sh and 100% test pass
2026-08-28 15:05:31 +08:00
fc7fae7b0e
docs: add design spec for zero-redis pluggable architecture
2026-08-28 14:02:28 +08:00
0b4e928d1a
docs(core): add cordis architecture alignment implementation plan
2026-08-28 13:32:55 +08:00
0bc19e34cb
docs(core): add cordis architecture alignment design spec
2026-08-28 13:32:05 +08:00
b92ba54707
docs(core): update developer guide and white paper with cordis composability standards
2026-08-28 13:30:47 +08:00
e19bf36580
refactor(core): align architecture with cordis spatiotemporal composability
2026-08-28 13:28:58 +08:00
ryan