sileya-ai
/
vr-shopxo-plugin
1
0
Fork 0
Code Issues 3 Pull Requests Packages Projects Releases Wiki Activity
vr-shopxo-plugin/plan.md

52 lines
2.0 KiB
Markdown
Raw Normal View History

council(draft): FrontendDev - plan.md: ghost spec research Round 1
2026-04-20 10:48:09 +00:00
# Plan — 调研「场馆删除后编辑商品出现规格重复错误」问题
council(draft): SecurityEngineer - create plan.md with Phase 2 security research directions Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-04-15 05:53:39 +00:00
council(draft): FrontendDev - plan.md: ghost spec research Round 1
2026-04-20 10:48:09 +00:00
> 版本：v1.1 | 日期：2026-04-20 | Agent：council/FrontendDev
> 关联：Round 1 规划轮
council(review): SecurityEngineer - Phase 2 security audit complete + P1 Verifier.php fix Security audit findings (Task S1/S2/S3/S5 done): - Task S1: Admin auth chain verified (Base extends Common OK) - Task S2: SQL injection audit complete (no injection, P1 code bug found) - FIXED: Verifier.php:45 CONCAT column() syntax error → select()+PHP concat - Task S3: XSS/CSRF audit complete (no risk in admin context) - Task S5: IDOR audit complete (admin context acceptable) - Task S4 (audit log design): still pending Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-04-15 06:11:43 +00:00
council(plan): BackendArchitect - add Issue #9 architecture decision plan Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-04-15 11:14:44 +00:00
---
council(draft): Architect - 文档评估计划（Round 1） 评审三份文档： - docs/14_TEMPLATE_RENDER_INVESTIGATION.md - docs/PHASE2_PLAN.md - docs/DEVELOPMENT_LOG.md（第十一、十二章） Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-04-19 21:25:54 +00:00
## 任务概述
council(plan): BackendArchitect - add Issue #9 architecture decision plan Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-04-15 11:14:44 +00:00
council(draft): FrontendDev - plan.md: ghost spec research Round 1
2026-04-20 10:48:09 +00:00
调研当票务商品关联的场馆模板被硬删除后，编辑商品时出现「规格不允许重复」错误的根因。专注前端（ticket_detail.html）规格项构建与 fallback 行为。
council(draft): DebugAgent - plan.md: debug "Undefined array key id" error Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-04-20 01:46:20 +00:00
council(review): SecurityEngineer - Phase 2 security audit complete + P1 Verifier.php fix Security audit findings (Task S1/S2/S3/S5 done): - Task S1: Admin auth chain verified (Base extends Common OK) - Task S2: SQL injection audit complete (no injection, P1 code bug found) - FIXED: Verifier.php:45 CONCAT column() syntax error → select()+PHP concat - Task S3: XSS/CSRF audit complete (no risk in admin context) - Task S5: IDOR audit complete (admin context acceptable) - Task S4 (audit log design): still pending Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-04-15 06:11:43 +00:00
---
council(draft): DebugAgent - plan.md: debug "Undefined array key id" error Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-04-20 01:46:20 +00:00
council(draft): FrontendDev - plan.md: ghost spec research Round 1
2026-04-20 10:48:09 +00:00
## FrontendDev 任务清单
- [ ] **Task 1**: 读取 `ticket_detail.html`，分析前端构建规格项的过程
- [ ] **Task 2**: 当模板不存在时，前端如何处理 `template_snapshot` 和 `spec_base_id_map`？
- [ ] **Task 3**: `loadSoldSeats()` 函数实际实现了吗？soldSeats 数据如何填充？
- [ ] **Task 4**: 编辑模式下（已有 vr_goods_config），前端是否正确处理已删除场馆的旧规格？
- [ ] **Task 5**: 给出前端根因分析（含具体文件路径和行号）
- [ ] **Task 6**: 给出修复方案
- [ ] **Task 7**: 将调研报告写入 `reviews/council-ghost-spec-FrontendDev.md`
council(review): SecurityEngineer - merge Task 13 audit report into main plan Task 13 complete: reviews/SecurityEngineer-AUDIT.md - Confirms BackendArchitect root cause findings (P0: Line 77, P1: Line 71) - Adds PHP 8 compatibility note on null[key] TypeError - Provides complete fix code Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-04-20 01:57:43 +00:00
council(draft): DebugAgent - plan.md: debug "Undefined array key id" error Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-04-20 01:46:20 +00:00
---
council(plan): FrontendDev - Phase 2 bugfix plan: routing + encoding issues Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-04-16 00:11:57 +00:00
## 阶段划分
council(draft): DebugAgent - plan.md: debug "Undefined array key id" error Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-04-20 01:46:20 +00:00
council(draft): Architect - 文档评估计划（Round 1） 评审三份文档： - docs/14_TEMPLATE_RENDER_INVESTIGATION.md - docs/PHASE2_PLAN.md - docs/DEVELOPMENT_LOG.md（第十一、十二章） Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-04-19 21:25:54 +00:00
| 阶段 | 内容 |
|------|------|
council(draft): FrontendDev - plan.md: ghost spec research Round 1
2026-04-20 10:48:09 +00:00
| **Draft** | Task 1-6（FrontendDev 独立调研前端侧）|
| **Review** | Task 7（提交调研报告）|
| **Finalize** | 等待 BackendArchitect 和 SecurityEngineer 报告，汇总至 `reviews/council-ghost-spec-summary.md` |
council(draft): DebugAgent - plan.md: debug "Undefined array key id" error Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-04-20 01:46:20 +00:00
---
council(draft): FrontendDev - plan.md: ghost spec research Round 1
2026-04-20 10:48:09 +00:00
## 关键文件（必须检查）
council(draft): DebugAgent - plan.md: debug "Undefined array key id" error Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-04-20 01:46:20 +00:00
council(draft): BackendArchitect - create debug plan for "Undefined array key 'id'" error Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-04-20 01:46:29 +00:00
| 文件 | 关注点 |
|------|--------|
council(draft): FrontendDev - plan.md: ghost spec research Round 1
2026-04-20 10:48:09 +00:00
| `shopxo/app/plugins/vr_ticket/view/goods/ticket_detail.html` | 前端规格项构建、template_snapshot fallback |
| `shopxo/app/plugins/vr_ticket/service/SeatSkuService.php` | GetGoodsViewData，模板不存在时的 fallback |
| `shopxo/app/plugins/vr_ticket/hook/AdminGoodsSaveHandle.php` | 商品保存钩子，vr_goods_config 处理 |
| `shopxo/app/plugins/vr_ticket/admin/Admin.php` | VenueDelete 硬删除逻辑 |
| `shopxo/app/admin/hook/AdminGoodsSave.php` | ShopXO 商品保存钩子入口 |
council(draft): BackendArchitect - add documentation review plan - Add BackendArchitect Round 1 section to plan.md - Claim 4 review tasks: 3 docs + 1 summary - Dimensions: accuracy, completeness, actionability, consistency, misleading risk Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-04-19 21:25:48 +00:00
council(security): SecurityEngineer - add missing VenueList methods + security audit Security findings: - SQL injection: LOW (query builder + parameter binding) - XSS: LOW (ThinkPHP auto-escape, no |raw detected) - Path traversal: LOW (all view paths hardcoded) - CSRF: MEDIUM (ShopXO framework-level gap, out of scope for plugin) Critical fix: admin/Admin.php was missing VenueList(), VenueSave(), VenueDelete() — sidebar URL "/plugins/vr_ticket/admin/venueList" would return 500 error. Added all three methods with v3.0 seat_map support. P1 garbled name: documented DB fix SQL for shx_plugins + vrt_power tables. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-04-16 00:53:41 +00:00
---
council(draft): FrontendDev - plan.md: ghost spec research Round 1
2026-04-20 10:48:09 +00:00
## 依赖
docs(plan): 记录 P1+P2 修复已合并到 main Commit: 804d465d0 → main: 49930844f Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-04-20 02:00:05 +00:00
council(draft): FrontendDev - plan.md: ghost spec research Round 1
2026-04-20 10:48:09 +00:00
- BackendArchitect：后端规格去重逻辑分析
- SecurityEngineer：安全风险评估