11 Commits

Author	SHA1	Message	Date
SpecialX	81a539b9ab	chore(deps): 统一依赖管理 - pnpm 11 + node:22 + golang:1.25 + python:3.12 + shared-* 集中化 ... - Node.js 统一到 node:22-alpine，Go 统一到 golang:1.25-alpine，Python 统一到 python:3.12-slim - pnpm 升级到 11.13.0（corepack），新增 allowBuilds 白名单解决 ERR_PNPM_IGNORED_BUILDS - 新增 packages/shared-py 集中 Python 共享依赖，shared-ts 补充 graphql-yoga/prom-client - api-gateway 修复 go.mod 的 shared-go 依赖 + Dockerfile 改用 repo 根作 context - Python 服务（data-ana/ai）Dockerfile 改用 repo 根作 context + 声明 uv workspace sources - 16 个服务的 Dockerfile + CI + docker-compose.tools.yml 全部对齐版本矩阵 - known-issues.md 沉淀 9 条 pnpm 11 / uv workspace / Go shared-go 迁移经验 - 验证：4 服务完全成功（api-gateway /healthz 200），其余 install 成功（build 失败为预存 TS 错误）	2026-07-14 12:04:49 +08:00
SpecialX	faaaf29f67	docs: ai 协作文档体系重构与多 ai 仲裁结果落地 ... 1.AI 协作文档体系重构(objections/worklines/contracts+matrix.md) 2.coord 仲裁文档(final-decisions/cross-review/final-rulings/orchestration) 3.各服务 01/02 文档补全 4.共享包初始化(shared-ts/shared-go/hooks/ui-components/ui-tokens) 5.Proto 契约补全 6.004 架构影响地图更新 7.端口分配表 8.设计规格文档	2026-07-10 12:58:22 +08:00
SpecialX	0a71b02e04	fix: code compliance audit and fix across all services ... NestJS (6 services): implement @RequirePermission decorator with SetMetadata+Reflector, register APP_GUARD globally, fix as assertions to type guards, add explicit return types, fix import type for express, fix /metrics implicit any, replace native Error with ApplicationError, remove typeorm remnants, register LifecycleService. teacher-bff: add logger, ApplicationError, GlobalErrorFilter, forward real userId to downstream, log downstream failures, migrate health controller to shared/health. Go (2 services): interface to any, doc comments, CORS dev whitelist, JWT secret fail-fast, push-gateway internal API auth, metrics and readyz endpoints, remove dead code. Python (2 services): lifespan return type, dev_mode to bool, data-ana APIRouter, ai POST body model, ClickHouse async wrapping.	2026-07-09 17:28:27 +08:00
SpecialX	f1e466a772	fix(infra): resolve NestJS dist build and Prometheus target issues ... NestJS: disable incremental in 6 services tsconfig.json to fix dist not emitted when nest-cli deleteOutDir conflicts with tsc tsbuildinfo. classes/iam: import HealthModule in AppModule to fix /healthz 404. classes: rewrite HealthController to Drizzle getDb from TypeORM DI. teacher-bff: add /metrics endpoint for Prometheus scraping. infra: add node/mysql/redis exporters to observability profile. mysql-exporter v0.15.1 uses command-line flags not DATA_SOURCE_NAME. prometheus: enable web.enable-lifecycle for hot reload.	2026-07-09 15:12:15 +08:00
SpecialX	d8dab70406	feat(infra): add OTel auto-instrumentations across all services ... NestJS 6 services use getNodeAutoInstrumentations(). Python 2 services use FastAPIInstrumentor. Go 2 services use otelgin.	2026-07-09 13:25:46 +08:00
SpecialX	958b17c9d8	feat(infra): p6 hardening - metrics collection and registry mirror ... - 4 services add collectDefaultMetrics for process metrics - docker-compose.yml images prefixed with docker.m.daocloud.io - Prometheus v0.51.0 (nonexistent) fixed to v2.51.0 - Grafana port remapped 3000 to 3030 to avoid teacher-portal conflict - ClickHouse edu_analytics database initialized - known-issues.md documents 7 new P6 scenario-to-rule mappings	2026-07-09 12:29:36 +08:00
SpecialX	566060fade	feat(infra): p6 hardening - observability and deploy compose ... - 5 NestJS services add /metrics endpoint via app.getHttpAdapter() - prometheus.yml scales to 8 services with rule_files and alertmanager - monitoring compose replaces blackbox with Loki+Promtail - Grafana datasource adds Loki - docker-compose.deploy.yml scales to 11 services - deploy.env.example completes Neo4j/ES/ClickHouse/LLM vars - teacher-bff adds health.controller - CI removes continue-on-error on lint step - teacher-portal lint script changed to eslint src	2026-07-09 10:21:06 +08:00
SpecialX	3ca654619f	chore(infra): 配置ESLint 9 flat config并恢复lint-staged集成 ... - 新增 eslint.config.js（ESLint 9 flat config 格式） - 安装 @eslint/js + typescript-eslint + eslint-config-prettier - 6 个 TS 服务 lint 脚本：eslint src --ext .ts → eslint src - lint-staged 恢复 eslint --fix - .gitignore 忽略 docker-compose.minimal.override.yml - known-issues.md 新增 P6 硬化条目	2026-07-09 09:14:44 +08:00
SpecialX	a4ec5b72c5	fix(classes): 修复依赖注入与 ESM 导入路径 ... - classes.module.ts: 移除 useFactory，改用直接 provider 注册 - classes.service.ts: 添加 @Inject 装饰器显式注入 Repository - health.module.ts: 修复 import 添加 .js 后缀（ESM 模式） - package.json: 补充 ioredis/kafkajs/typeform 等运行时依赖	2026-07-08 15:11:12 +08:00
SpecialX	e9ea34fe53	feat(p6): production hardening with circuit breaker, backup, monitoring and chaos engineering ... P6 生产硬化阶段交付物（46 文件）： ## 1. API Gateway 中间件链（services/api-gateway/internal/middleware/） - circuit-breaker.go: gobreaker v2 熔断器（5s 窗口/50% 错误率/30s OPEN→HALF_OPEN） - ratelimit.go: 令牌桶限流（sync.Map + cleanup goroutine，默认 100rps/20 burst） - cors.go: CORS 中间件（CORS_ORIGINS 环境变量） - recovery.go: panic 恢复 + uuid request_id - security.go: 安全头 + 请求体 10MB 限制 - requestid.go: 请求 ID 注入 - health/health.go: /healthz + /readyz 健康检查 - main.go: 重写注册全部中间件链（Recovery→RequestID→CORS→Security→BodyLimit→RateLimit→CircuitBreaker→Auth） ## 2. 基础设施硬化（infra/） - backup/backup-mysql.sh: MySQL 全量备份（mysqldump+gzip，按服务独立） - backup/restore-mysql.sh: 恢复脚本 - backup/backup-cron.sh: cron 调度入口（5 服务批量备份） - alertmanager/alertmanager.yml: 告警路由（webhook + 邮件示例） - prometheus/rules.yml: 8 条告警规则（服务可用性/性能/资源 3 组） - grafana/dashboards/microservices-overview.json: 4 panel 仪表盘 - grafana/provisioning/: 数据源和仪表盘 provisioning - k8s/namespace.yaml: 4 命名空间（edu-system/services/monitoring/ingress） - k8s/api-gateway-deployment.yaml: Deployment + Service 骨架 - chaos/experiments.yaml: 3 个 Litmus 混沌实验（pod-kill/network-latency/disk-fill） - docker-compose.monitoring.yml: 监控栈 profile - security/secrets.example.env: 8 项密钥占位符 - security/waf-rules.conf: ModSecurity WAF 规则骨架 ## 3. 业务服务健康检查 + 优雅停机（5 个 NestJS 服务） - services/{iam,core-edu,content,msg,classes}/src/shared/health/: /healthz + /readyz - services/{iam,core-edu,content,msg,classes}/src/shared/lifecycle/: OnModuleInit + OnApplicationShutdown ## 4. Python 服务健康检查 - services/{ai,data-ana}/src/health/health.py: FastAPI APIRouter ## 5. 运维文档 - docs/architecture/runbooks/p6-hardening.md: P6 总览 Runbook（9 章节） - docs/architecture/runbooks/incident-response.md: 事件响应手册（5 章节） - docs/architecture/004-p6-addendum.md: 004 架构补记 P6 章节 - docs/troubleshooting/known-issues-p6-addendum.md: 15 条 P6 场景→技术映射 ## 验收信号 - RPO ≤ 15min（MySQL 备份 + binlog PITR） - RTO ≤ 30min（K8s 滚动更新 + DNS 切换） - P99 ≤ 500ms（熔断 + 限流 + 缓存） - 熔断器错误率 > 50% 触发 OPEN - 限流 100rps/20 burst - 备份保留 7 天 - 混沌实验每月 1 次	2026-07-08 02:16:58 +08:00
SpecialX	2ba4250165	feat(p1): complete P1 foundation stage ... - monorepo: pnpm workspace + go.work + pyproject.toml + commitlint/husky - infra: docker-compose (minimal + full profiles) + init-sql + prometheus - arch-scan: multi-language scanner skeleton (TS/Go/Python/Proto) - shared-proto: buf v2 + classes.proto (ClassService CRUD contract) - api-gateway: Go/Gin + JWT HS256 auth + reverse proxy + request ID - classes: NestJS golden template (error system + observability + middleware + CRUD + tests) - teacher-portal: Next.js + paper-feel UI design system - CI/CD: 4 workflows (go/ts/py/proto) - docs: migration guide + project_rules + coding-standards + git-workflow + ui-design-system + 004 + 9 module READMEs + known-issues + spec/plan migration + roadmap	2026-07-07 23:39:37 +08:00