admin
971ccc3703
三条线合并入库 —— 均已完成并上线（源码与生产一致，此前只部署未入仓）。 ⚠️ 其中域名迁移线为**另一会话**产出，本会话只做入库、**未复验其正确性**（它自报零回归）。 【档案 134 · 注册页人机验证 + 邮箱验证码】 - DB 迁移 v10：users.email（唯一索引 LOWER(email)）+ email_codes 事件表（2 索引） - 新增模块 src/web/{register-guard,mail,turnstile,email-code}.ts - routes/auth.ts：新增 GET /api/auth/register/config、POST /api/auth/register/email-code； 注册接口加人机验证与验证码校验；config.ts 新增 12 项配置（默认空 ⇒ 不配 = 老行为） - 邮件走**可插拔驱动**（brevo/http/log），发件人 [email protected]（Brevo 域名已认证 + DKIM + SPF） - 防爆破：三层配额（邮箱 6/h、8/天；IP 20/h；全局 200/h）+ 递增冷却阶梯 （60→60→180→300→900→1800s）+ 试错 5 次作废 + 码只存哈希 + 单次使用 + 与用户名绑定 - Turnstile 服务端校 **success + action + hostname 三项**：sitekey 是公开的， 只校 success 时"拿我们的 sitekey 在自己站点替真人取合法 token 再打我们接口"这条路是通的 - 新增 test/register-guard.test.mjs（19 用例） 【档案 137 · 品牌标识改造 — 去 DeepSeek 图形】 - login/register/admin 页头：删 DeepSeek 鲸鱼图标 + 「DeepSeek」文字图形 → 平台标识（中文「能力枢纽」／英语及其他语言「CapabilityNet」，走 i18n 词条 brand.name） - portal 顶栏换图标（页面名「管理门户」保留） - 新建 web/favicon.svg（平台自有 hub 图标，避开 DeepSeek 蓝）+ 四页 favicon 指向它 - 新增 test/i18n-brand.test.mjs（node:vm 跑真实 i18n.js，六条语言路径断言渲染结果） - scripts/verify-static.mjs 新增 SVG 段：XML 注释不得含 ASCII 双连字符（否则整份 SVG 解析失败、图标静默不显示 —— 实际踩到过） - 🔴 会话页面（实例内官方 dsh 界面）的标识**按用户要求未动**（也受 R2 约束） 【档案 135/136 · 域名迁移线（另一会话产出）】 - 域名收敛为 ai1net.com；旧域 alotbuy.com 降级为 301 过渡装置 - src/net/relay/{addr-override,directory,rendezvous,switcher}.ts 种子与候选链更新； src/web/server.ts、src/worker/relay-tunnel.ts、scripts/verify-cluster-domain.mjs - 档案 136 = 控制面按两台中继取并集（**已立项、未落地**） 验证（本会话两条线）：新增单测 21 条全通过｜全量 221 pass / 0 fail / 1 skipped｜ verify-static 全合格｜其余 10 个 verify 脚本全 OK｜线上实测：Turnstile 假 token 403、 发码 delivered、四页 deepseek 命中 0、favicon 200。
86 lines
3.5 KiB
JSON
86 lines
3.5 KiB
JSON
{
|
|
"name": "dshs",
|
|
"version": "0.1.0",
|
|
"description": "面向公网的多租户 DSH 托管平台：登录审核、每用户隔离的 DSH 环境（主 + 按需守护）、桌面与域名访问。",
|
|
"type": "module",
|
|
"main": "./lib/index.js",
|
|
"exports": {
|
|
".": "./lib/index.js",
|
|
"./runtime": "./lib/runtime.js"
|
|
},
|
|
"bin": {
|
|
"dshs": "./lib/cli.js"
|
|
},
|
|
"files": [
|
|
"lib",
|
|
"web",
|
|
"cordis.patch.yml",
|
|
"README.md"
|
|
],
|
|
"scripts": {
|
|
"build": "tsc -p tsconfig.json",
|
|
"prepare": "npm run build",
|
|
"dev": "node lib/cli.js",
|
|
"typecheck": "tsc -p tsconfig.json --noEmit",
|
|
"check:layering": "node scripts/check-layering.mjs",
|
|
"verify": "npm run build && node scripts/check-layering.mjs && node --test test/db.test.mjs test/register-guard.test.mjs test/i18n-brand.test.mjs test/local-user-fs.test.mjs test/remote-user-fs.test.mjs test/crash-policy.test.mjs test/locale-pref.test.mjs test/worker-provision.test.mjs test/reachability.test.mjs test/instance-port.test.mjs test/relay.test.mjs test/remote-spawner.test.mjs test/overlay-network.test.mjs test/overlay-auth.test.mjs test/overlay-bootstrap.test.mjs && node scripts/verify-inject.cjs lib/supervisor/proxy.js && node scripts/verify-static.mjs && node scripts/verify-platform-admin-section.mjs && node scripts/verify-mem-model.mjs && node scripts/verify-model-landing.mjs && node scripts/verify-dsh-install.mjs && node scripts/verify-models-dict.mjs && node scripts/verify-models-render.cjs && node scripts/verify-dsh-compat.mjs && node scripts/verify-my-skills.mjs && node scripts/verify-portal-entry.mjs",
|
|
"test": "npm run build && node --test test/db.test.mjs test/register-guard.test.mjs test/i18n-brand.test.mjs test/local-user-fs.test.mjs test/remote-user-fs.test.mjs test/crash-policy.test.mjs test/reachability.test.mjs test/instance-port.test.mjs test/relay.test.mjs test/remote-spawner.test.mjs test/overlay-network.test.mjs test/overlay-auth.test.mjs test/overlay-bootstrap.test.mjs test/overlay-identity.test.mjs test/relay-failover.test.mjs test/overlay-jitter.test.mjs && node scripts/verify-inject.cjs lib/supervisor/proxy.js",
|
|
"smoke": "node scripts/smoke.mjs",
|
|
"smoke:admin": "node scripts/smoke-admin.mjs",
|
|
"smoke:auth": "node scripts/smoke-auth.mjs",
|
|
"smoke:fs": "node scripts/smoke-fs.mjs",
|
|
"smoke:dsh": "node scripts/smoke-dsh.mjs",
|
|
"smoke:domain": "node scripts/smoke-domain.mjs",
|
|
"smoke:isolation": "node scripts/smoke-isolation.mjs",
|
|
"smoke:subdomain": "node scripts/smoke-subdomain.mjs"
|
|
},
|
|
"dsh": {
|
|
"plugin": true,
|
|
"kind": "server",
|
|
"bundle": {
|
|
"patch": "./cordis.patch.yml"
|
|
}
|
|
},
|
|
"disclosure": {
|
|
"cloud": true,
|
|
"network": [
|
|
"https://api.deepseek.com"
|
|
],
|
|
"apiKeys": [
|
|
{
|
|
"env": "DEEPSEEK_API_KEY",
|
|
"storage": "sqlite-encrypted-ref"
|
|
}
|
|
],
|
|
"permissions": {
|
|
"filesystem": "per-user-0700",
|
|
"network": "egress",
|
|
"env": "read-listed"
|
|
},
|
|
"jurisdiction": [
|
|
"PIPL(CN)"
|
|
],
|
|
"retention": "server"
|
|
},
|
|
"dependencies": {
|
|
"@fastify/rate-limit": "^10.0.0",
|
|
"@fastify/static": "^10.1.3",
|
|
"better-sqlite3": "^11.10.0",
|
|
"fastify": "^5.0.0",
|
|
"pg": "^8.23.0"
|
|
},
|
|
"devDependencies": {
|
|
"@types/better-sqlite3": "^7.6.11",
|
|
"@types/node": "^22.10.0",
|
|
"@types/pg": "^8.23.1",
|
|
"typescript": "^5.7.0"
|
|
},
|
|
"engines": {
|
|
"node": "^22.19.0 || >=24"
|
|
},
|
|
"repository": {
|
|
"type": "git",
|
|
"url": "https://work.alotbuy.com/maogeigei/dsh_shenxian.git"
|
|
}
|
|
}
|