25db029859
feat: 租户访客策略 SQL、访客邀约验证包、component-org 与发布脚本
...
- docs/sql: organization_* 与 tenant_* 访客楼层策略脚本
- docs/testing: 访客邀约页初始化验证、pack 脚本与 README（忽略 dist/__pycache__）
- maven-ninca-common-component-organization: CpImageStoreServiceImpl、starter、run-verify、releases 脚本与 javap 审计 JSON
- docs/superpowers: component-org 生产问题修复计划
- scripts/test-env/prepare-db.sh 更新
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-05-06 22:00:16 +08:00
86cf41890e
docs: component-org production error audit report
...
Analyzed 21 error log files (~600MB, 2026-02-19 to 2026-05-06).
Findings:
- 80,446 ERROR entries across 12 categories
- Top 3: Feign fallback (36K), addFace retry (36K), device update (4.7K)
- 0 errors related to policy implementation changes
- Root causes: downstream service unavailability, Redis contention,
missing person images, connection timeouts
Recommendations:
- P0: Fix addFace infinite retry loop
- P0: Investigate cwos-portal service availability
- P1: Redis lock contention optimization
- P1: Null-safety for device updatePerson
2026-05-06 20:42:36 +08:00
50af6e739d
fix: P0+P2+P3 — CpOrgDevieKit, ValidateManager, OrganizationServiceImpl clean
...
P0: CpOrgDevieKitServiceImpl (54→0)
- Fixed 10 $\$ artifacts with correct variable names
- Typed 7 raw Collection/List/Set declarations
- Removed (Object) casts from redisTemplate calls
P2: CpImageStorePersonValidateManager (36→0)
- Added RedisCallback cast for execute() ambiguity
- Typed Map.Entry for-each with proper generics
- Fixed ternary type mismatch (List<Object>→SyncPersonLocal)
- Typed waitAddValidateList as List<GroupPersonRef>
P3: OrganizationServiceImpl (32→0)
- Typed 7 raw List declarations (refDTOS, data, organizations, etc)
- Fixed ArrayList<> vs List<> assignment
- Typed passableArea/officeArea streams
2026-05-05 23:47:18 +08:00
18810ef9c6
feat: add component-organization decompiled Maven module
...
- Reactor POM with 4 sub-modules (interface/data/service/web)
- all-lib/ with 255 extracted JARs from original fat JAR
- .m2-isolated/ repo with 252 installed JARs
- interface module: BUILD SUCCESS (325 classes)
- data module: BUILD SUCCESS (120 classes)
- service module: 200 type errors (CFR decompilation artifacts)
- install-libs.sh for isolated repo setup
- Feign fallback inner classes separated
2026-05-05 22:36:52 +08:00
1cac12d940
docs: add initialization flow analysis to policy design doc
...
- Add §7 initialization flow: /component/person/detail call chain
from decompiled component-organization source
- Document floorList assembly in ImgPersonServiceImpl (via
elevatorFeignClient.listByImageId)
- Analyze init vs submit consistency: gap when policy exists
2026-05-05 19:57:01 +08:00
f7da04caea
fix: policy always checked regardless of caller-provided floors
...
Redesign addVisitor four-phase flow:
- Phase1: ALWAYS query person detail (orgIds for policy lookup)
- Phase2: candidate = caller floors or org floorList
- Phase3: ALWAYS check policy; intersect candidate with allow
- Phase4: empty set validation
Fixes UC-02 bypass: policy was entirely skipped when caller
provided floorIds. Now policy always constrains.
Bump v2.0.19
2026-05-05 19:47:01 +08:00
c5febc9905
docs: fix stale references post v2.0.17 alignment
...
- Update deploy/README.md: remove NincaCrkStdRibbonConfiguration ref,
update JAR naming, add v2.0.17 config instructions
- Update elevator-v1-v2-init-timing-config-audit.md: add baseline note
- Update org-policy-verify-manual.md: JAR path + AppApplication class
- Update release script comment with current baseline version
- docs/AGENTS.md and service-discovery spec already updated in v2.0.17
2026-05-05 19:08:33 +08:00
ec05aa777d
docs: record v2.0.17 as baseline, update service discovery doc
...
- Mark v2.0.17 as current production baseline in AGENTS.md
- Update service discovery architecture design doc: add §6-10 for
actual implementation state, preserve original as history (§1-5)
- Document key decisions: no ZK discovery, ConfigurationBasedServerList,
bootstrap aligned with V1
2026-05-05 19:01:33 +08:00
b7b678782a
docs: add ConsulServerList static/IP discovery analysis
...
Document the investigation into how ConsulServerList was replaced by
ConfigurationBasedServerList with hardcoded IPs for Feign client service
discovery. Covers V1 vs V2 config gap, three upstream services, and
P0-P2 investigation items.
Former-commit-id: 15a0d8567de43f8741d50cbcddc2599383942754
2026-05-05 15:25:56 +08:00
43c7da2300
docs: add v2 deployment plan; gitignore: exclude generated test-env files
...
- Add full-deploy-and-compare implementation plan
- Add application-test.properties (generated test config template)
- Ignore scripts/test-env/logs/, services/, *.jar.bak
Former-commit-id: d8139e3dc14d0b00f5b9d7fd74b9f45b6db0c84f
2026-05-03 16:20:08 +08:00
8b15445328
feat: add service config templates and extraction script
...
Former-commit-id: 1de24b7eb79676d1aba9d799a58c5a753290cf52
2026-05-01 19:38:01 +08:00
e8672a3c7b
fix: relocate cwos-portal decompiled output to correct path; remove nested directory
...
Former-commit-id: dc30d42a8c55ed8b2382a41dc2434233fbed9930
2026-04-29 12:09:48 +08:00
反编译工作区