tkmind/memind
1
0
Fork 0
Code Issues Pull Requests 1 Actions Packages Projects Releases Wiki Activity
483 Commits 58 Branches 1 Tag
0122d89db3ca9e7eac6be57bc6f7d0b77e8791a6
Commit Graph

9 Commits

Author SHA1 Message Date
john 933466c8ab fix: preserve chat order and published page scripts 2026-07-15 14:05:09 +08:00
john 16fd99e8ba fix(page-data): trust live API smoke and WeChat survey submit compat 
Stop blocking WeChat delivery when Page Data insert works but publish
quota blocks h5_publish_records; fix smoke URL missing /api; patch survey
radios for WeChat X5 and detect dataset constants in admin pages.

Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-07-12 22:42:47 +08:00
john eea14c1855 Add page data delivery and publication guards 2026-07-08 21:10:47 +08:00
john ac520d8ae5 fix(mindspace-public): 公开页区分作者与访客视图 + 图片加载自动重试 
工作区直链 /MindSpace/<userId>/public/*.html 此前对所有人（含匿名访客、
转发链接收到的其他登录用户）展示完全相同的悬浮操作按钮，导致非作者也能
看到"发布 Plaza"入口——而 Plaza 发布会把内容归属到操作者自己的账号下，
必须只对作者开放。

- server.mjs: serveUserPublishFile 用现有 session/cookie 鉴权判断访问者是
  否等于 URL 中的 ownerKey，结果透传给 sendPublishFile；该响应内容因人
  而异，显式加 Cache-Control: private, no-store（原来未设置任何缓存头）
- mindspace-public-share-widget.mjs: injectPublicFileShareButton 新增
  isOwner 参数（默认 true 保持兼容），非作者时隐藏"发布 Plaza"按钮与确认
  弹窗，"保存长图"/"公开分享"对所有访客保留
- mindspace-public-delivery.mjs: 透传 isOwner，并注入图片重试脚本
- mindspace-public-image-retry.mjs（新增）: 页面级 onerror 之前用捕获阶段
  监听拦截 mindspace 资产图片的加载失败，带退避自动重试 3 次，避免刚生成
  页面时的资产物化竞态被"永久占位符"放大成显示故障

本地起服务用 owner / 非 owner 已登录用户 / 匿名访客三种身份实测验证。

Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-07-07 10:56:26 +08:00
john 927e16d861 fix(brand): force visible platform-brand footer on published pages 
Inject serve-time CSS so author styles cannot hide TKMind · 智趣 with
low opacity, which made pages like weather.html look brandless.

Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-07-04 14:32:36 +08:00
john b5a88d9746 fix(brand): require TKMind platform marker on wechat page delivery 
Backfill missing platform-brand footer at serve time and block service-
account links when the HTML file omits data-mindspace-page-tag.

Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-07-04 14:15:42 +08:00
john 03c46b37c3 fix(og): fall back to thumbnail when declared cover file is missing 
WeChat link cards were pointing og:image at mindspace-cover paths that
never landed on disk; serve-time injection now uses thumbnail.png instead.

Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-07-04 14:07:49 +08:00
john f543a91cc4 fix: allow inline page scripts in MindSpace public page CSP 
Collect sha256 hashes from all inline scripts in published HTML so agent-generated
fade-in animations are not blocked while keeping the share-button CSP model.

Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-07-03 22:42:29 +08:00
john ec5b1a6e3f feat: finalize mindspace service extraction phase a 2026-07-03 08:40:28 +08:00