Your Name
0d056a45e9
Vue 3 + Vuetify 4 + TypeScript + Vue Router 4 + Pinia frontend, replacing the old Tailwind+Alpine.js static pages. Infrastructure (8 new files): - composables/useSnackbar.ts — centralized notifications - composables/useServerList.ts — server dropdown data - composables/useServerPagination.ts — paginated server table - types/api.ts — 14 typed API response interfaces - types/global.d.ts — Window augmentation - utils/status.ts — server status display helpers - utils/validation.ts — 8 form validation rules - components/MonacoEditor.vue — fullscreen code editor 14 pages rebuilt: - LoginPage, DashboardPage, ServersPage, TerminalPage - FilesPage, PushPage, ScriptsPage, CredentialsPage - SchedulesPage, RetriesPage, CommandsPage - AlertsPage, AuditPage, SettingsPage Critical fixes (from audit): - Files upload JWT auth (was missing Authorization header) - API Key reveal password verification dialog - 6 silent catch blocks → snackbar error feedback - 33 as any → 0 (typed interfaces + global.d.ts) - Dashboard: alerts/summary/categories/audit data loading - WebSocket reconnect timer cleanup + auth failure handling - Terminal ResizeObserver leak fix - PushPage timer cleanup on unmount - FilesPage path double-slash fix (joinPath helper) - Filter changes reset pagination to page 1 Features added: - Servers: batch operations, CSV export/import, detail panel - Push: sync modes, ZIP upload, WebSocket real-time progress, cancel - Scripts: quick execute panel, execution status tracking - Files: Monaco editor, context menu, batch delete, rename, chmod - Terminal: right-click menu, server sidebar, tab persistence - Settings: batch save, TOTP manual key, password TOTP verification - Dashboard: category distribution, recent audit, WS refresh Quality: - vue-tsc --noEmit zero errors - vite build passes (1613 modules) - Formal 8-step security audit passed (0 FINDING) - .gitignore: dist/ → **/dist/ to cover web/app/dist/ Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
Nexus 文档索引
最后更新: 2026-05-23
project/ — 项目概况
| 文件 | 说明 |
|---|---|
project/status.md |
项目进度总览 + 数据库结构 + 实施进度 |
project/roadmap.md |
功能规划 + ADR架构决策(11项) + 技术债务 |
project/deploy.md |
部署指南 (Ubuntu 20-24, Nginx+Supervisor) |
project/phase-2-audit-remediation.md |
Phase 2 审计修复总览（开发 SSOT） |
project/wsl-integration-test.md |
WSL 代码验证（venv → 启动 → smoke，不审 key） |
project/production-verification-checklist.md |
首次部署验证清单（逐项勾选） |
project/alert-push-policy.md |
告警推送产品策略 + 数据流 |
project/script-execution.md |
脚本批量执行平台 SSOT |
project/audit-line-review-cursor-rule.md |
逐行走读 Cursor 规则 |
project/line-walk-audit-standard.md |
逐行走读判定标准 |
project/mysql-mcp-setup.md |
Cursor MySQL MCP 安装与 .env 同步 |
project/tech-stack-inventory.md |
技术栈清单 + 连接池参数对齐 + v1勘误 |
design/ — 设计规格与实施计划
活跃设计
| 文件 | 说明 |
|---|---|
design/specs/design-standards.md |
设计标准 — 安全模型/性能基线/代码规范/架构模式 |
design/specs/2026-05-18-redis-iot-optimization.md |
Redis+实时数据架构 + Key规范 |
design/specs/2026-05-17-architecture-optimization.md |
配置分发与部署架构 |
design/specs/2026-05-19-sprint-planning.md |
Sprint规划 — 已完成升级项 + 待实现建议 |
design/tech-stack-evaluation.md |
技术栈评估 + 风险矩阵 + 连接池配置 |
已归档设计（历史参考）
| 文件 | 说明 |
|---|---|
design/specs/2026-05-16-password-presets-design.md |
⚠️ 归档 — 密码预设设计（引用旧文件结构） |
design/specs/2026-05-16-simplified-push-design.md |
⚠️ 归档 — 简化推送设计（引用旧文件结构） |
design/specs/2026-05-17-retry-progress-design.md |
⚠️ 归档 — 重试+进度设计（引用旧文件结构） |
design/specs/2026-05-17-server-add-optimize-design.md |
⚠️ 归档 — 服务器添加优化设计（引用旧文件结构） |
design/specs/2026-05-18-file-manager-v2-design.md |
⚠️ 归档 — 文件管理器v2设计（引用旧文件结构） |
design/specs/2026-05-19-code-review-followup.md |
⚠️ 归档 — PHP代码审查（前端已迁移到Tailwind） |
design/plans/2026-05-16-password-presets.md |
⚠️ 归档 — 密码预设实施计划 |
design/plans/2026-05-16-simplified-push.md |
⚠️ 归档 — 简化推送实施计划 |
design/plans/2026-05-17-retry-progress.md |
⚠️ 归档 — 重试+进度实施计划 |
design/plans/2026-05-17-server-add-optimize.md |
⚠️ 归档 — 服务器添加优化实施计划 |
design/plans/2026-05-18-file-manager-v2.md |
⚠️ 归档 — 文件管理器v2实施计划 |
reports/ — 审查与工作报告
Phase 2 逐行走读（2026-05-22～23）
| 文件 | 说明 |
|---|---|
reports/audit-phase-2-findings-matrix.md |
63 条 FINDING 全量状态表 |
reports/audit-phase-2-walk-closure.md |
走读闭环 |
reports/audit-phase-2a～2j-line-walk.md |
各批次逐行报告 |
reports/2026-05-23-full-audit-report.md |
7 部门并行初审（与 Phase 2 交叉引用） |
reports/audit-full-vs-phase2-reconciliation.md |
C1–C12 与 Phase 2 对照表 |
部门审查报告
| 文件 | 说明 |
|---|---|
reports/review-cto-2026-05-21.md |
CTO审查 — 连接池/SSH/CORS/依赖（含勘误） |
reports/review-deploy-architecture-2026-05-21.md |
运维总监审查 — 部署架构/三层守护/Nginx（含勘误） |
reports/review-quality-director-2026-05-21.md |
质量总监审查 — 代码规范/datetime/测试（含勘误） |
reports/step-0-infrastructure/ecc-security-report.md |
ECC组安全审查 — Redis/Schema/认证/SSH/编码（含勘误） |
reports/signoff-2026-05-21.md |
审查签字确认 |
reports/session-log-2026-05-21.md |
会话操作日志 |
实施报告
| 文件 | 说明 |
|---|---|
reports/implementation-progress-2026-05-21.md |
6步实施进度总览 |
reports/step-0-infrastructure/engineering-report.md |
Step 0: 基础设施加固 |
reports/step-0-infrastructure/ag-code-review-report.md |
Step 0: 代码审查 |
reports/step-0-infrastructure/testing-report.md |
Step 0: 测试报告 |
reports/step-1-data-layer/engineering-report.md |
Step 1: 数据层 |
reports/step-2-auth/engineering-report.md |
Step 2: 认证层 |
reports/step-3-webssh/engineering-report.md |
Step 3: Web SSH（含paramiko→asyncssh迁移） |
reports/step-4-sync/engineering-report.md |
Step 4: Sync引擎 |
reports/step-5-frontend/engineering-report.md |
Step 5: 前端迁移 |
reports/step-5-frontend/design-review-report.md |
Step 5: 前端设计审查 |
reports/step-5-frontend/product-department-report.md |
Step 5: 产品部报告 |
research/ — 竞品与技术调研
| 文件 | 说明 |
|---|---|
research/jumpserver-easynode-architecture-analysis.md |
JumpServer & EasyNode 架构对比分析 |
research/ag-research-report.md |
AI Agent 调研报告 |
changelog/ — 变更记录（强制）
纪律：每次有意义的代码/配置修改都必须在此目录新增
YYYY-MM-DD-<主题>.md。见.cursor/rules/perfect-implementation.mdc。
Phase 2 安全与审计（2026-05-22～23）
| 文件 | 说明 |
|---|---|
changelog/2026-05-22-security-fixes-p0.md |
P0：WebSSH、中心 exec、crypto |
changelog/2026-05-22-security-fixes-p1.md |
P1：注入、危险命令、Agent |
changelog/2026-05-22-audit-p2-fixes.md |
P2 批次修复 |
changelog/2026-05-22-global-jwt-middleware.md |
全局 JWT 中间件 |
changelog/2026-05-22-alert-push-dashboard.md |
告警策略 + 仪表盘 |
changelog/2026-05-22-telegram-sanitize-and-security-tests.md |
Telegram 脱敏 + 单测 |
changelog/2026-05-22-frontend-vendor-selfhost.md |
前端 vendor 自托管 |
changelog/2026-05-22-line-walk-audit-standard.md |
逐行走读标准 |
其他
| 文件 | 说明 |
|---|---|
changelog/2026-05-22-implementation-standards-rule.md |
完美实现与文档纪律全局规则 |
changelog/2026-05-22-tech-stack-rules-mysql-mcp.md |
技术栈 Cursor 规则 + MySQL MCP |
changelog/2026-05-22-local-mysql-full-access-node20-fix.md |
本地库可写 + Node20 安装修复 |
changelog/fix-plan-2026-05-20.md |
代码问题修复计划（13项） |
changelog/fix-plan-full-2026-05-20.md |
全量未完成项修复计划（24项） |
changelog/fix-verification-report-2026-05-20.md |
修复验证报告 |
memory/ — 项目记忆（AI辅助）
| 文件 | 说明 |
|---|---|
memory/MEMORY.md |
记忆索引 |
memory/mem_*.md |
17个记忆文件（概述/决策/数据流/守护/模块/测试/等） |
team/ — 部门协作
| 文件 | 说明 |
|---|---|
team/collaboration-charter.md |
部门协作章程（5阶段流水线） |
team/roster-2026-05-21.md |
团队编制档案（194人/9部门） |
team/roles/ |
12个部门角色定义文档 |
skills/ — 团队技能定义（AI辅助）
| 目录 | 说明 |
|---|---|
skills/ |
194个技能文件（各部门AI技能定义） |