feat: implement 8 OpenSpec proposals for security, reliability, and UX improvements

## Security Enhancements (P0)
- Add input validation with max_length and numeric range constraints
- Implement WebSocket token authentication via first message
- Add path traversal prevention in file storage service

## Permission Enhancements (P0)
- Add project member management for cross-department access
- Implement is_department_manager flag for workload visibility

## Cycle Detection (P0)
- Add DFS-based cycle detection for task dependencies
- Add formula field circular reference detection
- Display user-friendly cycle path visualization

## Concurrency & Reliability (P1)
- Implement optimistic locking with version field (409 Conflict on mismatch)
- Add trigger retry mechanism with exponential backoff (1s, 2s, 4s)
- Implement cascade restore for soft-deleted tasks

## Rate Limiting (P1)
- Add tiered rate limits: standard (60/min), sensitive (20/min), heavy (5/min)
- Apply rate limits to tasks, reports, attachments, and comments

## Frontend Improvements (P1)
- Add responsive sidebar with hamburger menu for mobile
- Improve touch-friendly UI with proper tap target sizes
- Complete i18n translations for all components

## Backend Reliability (P2)
- Configure database connection pool (size=10, overflow=20)
- Add Redis fallback mechanism with message queue
- Add blocker check before task deletion

## API Enhancements (P3)
- Add standardized response wrapper utility
- Add /health/ready and /health/live endpoints
- Implement project templates with status/field copying

## Tests Added
- test_input_validation.py - Schema and path traversal tests
- test_concurrency_reliability.py - Optimistic locking and retry tests
- test_backend_reliability.py - Connection pool and Redis tests
- test_api_enhancements.py - Health check and template tests

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
This commit is contained in:
beabigegg
2026-01-10 22:13:43 +08:00
parent 96210c7ad4
commit 3bdc6ff1c9
106 changed files with 9704 additions and 429 deletions

View File

@@ -53,7 +53,10 @@
"searchUsers": "搜尋使用者...",
"noUsersFound": "找不到使用者",
"typeToSearch": "輸入以搜尋使用者",
"task": "任務"
"task": "任務",
"admin": "管理員",
"live": "即時",
"offline": "離線"
},
"messages": {
"success": "操作成功",
@@ -81,7 +84,9 @@
"health": "專案健康度",
"audit": "稽核日誌",
"settings": "設定",
"logout": "登出"
"logout": "登出",
"toggleMenu": "切換選單",
"menu": "選單"
},
"language": {
"switch": "切換語言",

View File

@@ -64,5 +64,16 @@
"empty": {
"title": "沒有專案",
"description": "建立您的第一個專案來開始管理任務"
},
"template": {
"label": "模板",
"selectTemplate": "選擇模板",
"blankProject": "空白專案",
"blankProjectDescription": "從頭開始建立",
"loadingTemplates": "載入模板中...",
"loadFailed": "載入模板失敗",
"statusCount": "{{count}} 個狀態",
"fieldCount": "{{count}} 個自訂欄位",
"publicTemplate": "公開"
}
}

View File

@@ -39,13 +39,39 @@
},
"members": {
"title": "成員管理",
"description": "管理可以存取此專案的使用者。專案成員可以檢視和編輯專案內容。",
"addMember": "新增成員",
"invite": "邀請成員",
"inviteByEmail": "透過電子郵件邀請",
"emailPlaceholder": "輸入電子郵件地址",
"selectUser": "選擇使用者",
"searchUserPlaceholder": "搜尋使用者...",
"user": "使用者",
"role": "角色",
"joinedAt": "加入時間",
"changeRole": "變更角色",
"remove": "移除成員",
"confirmRemove": "確定要移除此成員嗎?"
"remove": "移除",
"confirmRemove": "確定要移除此成員嗎?",
"removeConfirmTitle": "移除成員",
"removeConfirmMessage": "確定要將 {{name}} 從此專案移除嗎?移除後該成員將無法存取此專案。",
"empty": "此專案尚無成員。",
"emptyHint": "點擊「新增成員」來添加專案成員。",
"loadError": "載入成員列表失敗",
"addError": "新增成員失敗",
"removeError": "移除成員失敗",
"roleChangeError": "變更角色失敗",
"memberAdded": "成員已新增",
"adding": "新增中...",
"selectUserRequired": "請選擇要新增的使用者",
"alreadyMember": "此使用者已經是專案成員",
"roles": {
"member": "成員",
"admin": "管理員"
},
"roleHelp": {
"member": "成員可以檢視和編輯專案中的任務。",
"admin": "管理員可以管理專案設定和成員。"
}
},
"customFields": {
"title": "自訂欄位",
@@ -104,6 +130,12 @@
},
"validation": {
"nameRequired": "欄位名稱為必填"
},
"circularError": {
"title": "偵測到循環參照",
"description": "此公式會產生循環參照,這是不被允許的。",
"cyclePath": "參照循環路徑",
"helpText": "要解決此問題,請修改公式以避免參照直接或間接參照此欄位的其他欄位。"
}
},
"notifications": {

View File

@@ -181,5 +181,33 @@
"title": "沒有任務",
"description": "目前沒有任務。建立您的第一個任務開始吧!",
"filtered": "沒有符合篩選條件的任務"
},
"dependencies": {
"title": "任務相依性",
"add": "新增相依性",
"remove": "移除相依性",
"predecessor": "前置任務",
"successor": "後續任務",
"type": "相依性類型",
"types": {
"FS": "完成後開始",
"SS": "同時開始",
"FF": "同時完成",
"SF": "開始後完成"
},
"circularError": {
"title": "偵測到循環相依",
"description": "新增此相依性會產生循環參照,這是不被允許的。",
"cyclePath": "相依性循環路徑",
"helpText": "要解決此問題,請選擇不同的任務作為相依項,或移除循環中現有的某個相依關係。"
},
"error": {
"addFailed": "新增相依性失敗",
"removeFailed": "移除相依性失敗"
}
},
"conflict": {
"title": "更新衝突",
"message": "此任務已被其他使用者修改。請重新整理頁面以取得最新版本,然後再試一次。"
}
}