5 次代码提交

包含重命名

作者	SHA1	备注	提交日期
Guoguo	ca1b9b4377	debug: log FFE1 command hex on every writeRawCommand	2026-06-24 04:10:58 -07:00
Guoguo	36f12e098e	feat: upgrade FFE1 command to 34 bytes with control byte ... Per 协议简述(3): Byte33 is now control instruction (0=IDLE, 1=scan, 2=treat), Byte34 is XOR checksum. Backward compat with 33-byte read-back preserved. All command sites updated with correct control: - auto-scan: control=0x01 (scan mode) - treatment-setup: control=0x02 (treat mode) - stopTreatment: control=0x00 (IDLE)	2026-06-12 09:00:01 -07:00
Guoguo	583fcb7e3d	feat: add user deactivation and vendor BLE protocol	2026-05-11 21:14:41 +08:00
Guoguo	2eb38195f1	fix: address critical security and data integrity issues from cross-audit ... - Add expire_time > NOW() filter to findActive() preventing stale subscriptions - Add express-rate-limit on login endpoints (user: 10/15min, admin: 5/15min) - Add production guard for default admin credentials - Fix BLE bindDevice userId encoding (uint32 instead of hexToBytes on numeric) - Wrap adminCreate in transaction to prevent race condition - Add settings cache invalidation after admin saves - Read trial_days from settings instead of hardcoding 7 - Fix double JSON.stringify in commandDao.finish call - Cancel stale pending bindings before creating new ones - Reduce token refresh grace period from 3 days to 1 day - Fix subscribe-success to fetch expiry from server (correct for renewals) - Add keep-alive name property to DashboardView and SettingsView - Fix BLE disconnect() to preserve listener registrations across reconnects	2026-05-05 02:33:25 -07:00
Guoguo	bb4b80f867	refactor: restructure entire project for human maintainability ... Server: - Add Express framework, replace custom router/request parser - Create DAO layer (12 files) centralizing all 73 SQL queries - Rewrite 7 route files as thin Express controllers calling DAOs - Add SCF-to-Express adapter (lib/serverless.js) - Add auth middleware (middleware/auth.js) - Remove dead code from lib/auth.js Admin console: - Extract DataTable component (table + pagination) - Extract ConfirmModal component (modal + form styles) - Create listMixin for paginated list pages - Move form styles to common.css for slot compatibility - Refactor device + subscription pages as examples Miniprogram: - Split 734-line BLE monolith into 4 focused modules (protocol, connection, commands, barrel index) - Create API module (utils/api.js) with named functions - Create page utilities (utils/page.js) - Refactor index + profile pages to use API module	2026-04-29 05:58:20 -07:00