photo-live

xinyouhe/photo-live

Fork 0

Commit Graph

Author	SHA1	Message	Date
浅念	e04e1f3bdf	feat(api): members and categories management 成员（/v1/albums/{albumId}/members）：owner/管理员邀请已开通同事为协作者（重复 409 MEMBER_CONFLICT、owner 目标 400、未开通/停用账号 400）、成员列表（(addedAt,id) DESC 键集分页）、移除协作者（幂等 204；成员行是唯一权限来源，删除行即失去可见性 A02；owner 不可移除 403）。分类（/albums/{albumId}/categories 与 /categories/{categoryId}）：创建/部分更新/删除，translations 全量替换，相册详情按 sortOrder 升序带出；404 统一 ALBUM_NOT_FOUND（分类不存在与相册不可见同码）。审计 album.member.add/remove、album.category.add/update/remove （resourceId=albumId，metadata 记目标 id/字段）。共用错误/P2002 判定抽至 support.ts（修复 meta.target 为 DB 约束名时的误判）。 Co-Authored-By: Claude Code <noreply@anthropic.com>	2026-09-17 22:16:16 +08:00
浅念	1faefa4227	feat(api): album update with independent upload/public switches PATCH /v1/albums/{albumId}（契约 updateAlbum）：部分更新，各开关互相独立； translations 全量替换（deleteMany+createMany），defaultLocale 可同请求切换但替换后的翻译集必须覆盖最终 defaultLocale。权限顺序 404（不可见）→403（可见不可管）与 getAlbum 一致防枚举；合并校验（endAt vs 存量 startAt、单边提交）在事务内对最终状态裁决。audit album.update 记录 metadata.fields（契约属性序）。 Co-Authored-By: Claude Code <noreply@anthropic.com>	2026-09-17 22:05:36 +08:00
浅念	1c48a4108b	feat(api): album creation with translations and owner membership Task 15: POST/GET /v1/albums, GET /v1/albums/{id}. - create: single transaction writes albums + album_translations + album_members(owner) + audit_logs(album.create); publicToken 24-char [0-9a-z] with one P2002 retry; duplicate-locale input rejected as 400. - dto: class-validator per contract AlbumCreateRequest, incl. cross-field rules (defaultLocale must be covered by translations; endAt>startAt when present; timezone string-only per P1a scope). - get: PermissionsService.canViewAlbum gate -> 404 ALBUM_NOT_FOUND for non-member/nonexistent alike (anti-enumeration); admin bypass; joins categories (empty until Task 17). - list: admin sees all, members see joined albums; stable createdAt DESC, id DESC keyset pagination via new shared/cursor.ts (encode/decode + typed where-builder, designed for Task 23 photo list reuse). - e2e: services/api/test/albums.e2e-spec.ts (12 cases, seeded sessions). Co-Authored-By: Claude Code <noreply@anthropic.com>	2026-09-17 21:51:50 +08:00

Author

SHA1

Message

Date

浅念

e04e1f3bdf

feat(api): members and categories management

成员（/v1/albums/{albumId}/members）：owner/管理员邀请已开通同事为协作者
（重复 409 MEMBER_CONFLICT、owner 目标 400、未开通/停用账号 400）、成员列表
（(addedAt,id) DESC 键集分页）、移除协作者（幂等 204；成员行是唯一权限来源，
删除行即失去可见性 A02；owner 不可移除 403）。分类（/albums/{albumId}/categories
与 /categories/{categoryId}）：创建/部分更新/删除，translations 全量替换，
相册详情按 sortOrder 升序带出；404 统一 ALBUM_NOT_FOUND（分类不存在与相册
不可见同码）。审计 album.member.add/remove、album.category.add/update/remove
（resourceId=albumId，metadata 记目标 id/字段）。共用错误/P2002 判定抽至
support.ts（修复 meta.target 为 DB 约束名时的误判）。

Co-Authored-By: Claude Code <noreply@anthropic.com>

2026-09-17 22:16:16 +08:00

浅念

1faefa4227

feat(api): album update with independent upload/public switches

PATCH /v1/albums/{albumId}（契约 updateAlbum）：部分更新，各开关互相独立；
translations 全量替换（deleteMany+createMany），defaultLocale 可同请求切换但
替换后的翻译集必须覆盖最终 defaultLocale。权限顺序 404（不可见）→403（可见
不可管）与 getAlbum 一致防枚举；合并校验（endAt vs 存量 startAt、单边提交）
在事务内对最终状态裁决。audit album.update 记录 metadata.fields（契约属性序）。

Co-Authored-By: Claude Code <noreply@anthropic.com>

2026-09-17 22:05:36 +08:00

浅念

1c48a4108b

feat(api): album creation with translations and owner membership

Task 15: POST/GET /v1/albums, GET /v1/albums/{id}.
- create: single transaction writes albums + album_translations +
  album_members(owner) + audit_logs(album.create); publicToken 24-char
  [0-9a-z] with one P2002 retry; duplicate-locale input rejected as 400.
- dto: class-validator per contract AlbumCreateRequest, incl. cross-field
  rules (defaultLocale must be covered by translations; endAt>startAt when
  present; timezone string-only per P1a scope).
- get: PermissionsService.canViewAlbum gate -> 404 ALBUM_NOT_FOUND for
  non-member/nonexistent alike (anti-enumeration); admin bypass; joins
  categories (empty until Task 17).
- list: admin sees all, members see joined albums; stable createdAt DESC,
  id DESC keyset pagination via new shared/cursor.ts (encode/decode +
  typed where-builder, designed for Task 23 photo list reuse).
- e2e: services/api/test/albums.e2e-spec.ts (12 cases, seeded sessions).

Co-Authored-By: Claude Code <noreply@anthropic.com>

2026-09-17 21:51:50 +08:00

3 Commits