Commit Graph

2 Commits (d48edfb965f354b31254f4d22de9b0e9227001e3)

Author SHA1 Message Date
Council d48edfb965 feat(Task1): C端票夹页面 + API 完成(附路由调试经验文档)
## Task 1 交付物
- view/goods/ticket_wallet.html       # 票夹页面
- api/Ticket.php                     # C端 API(list/detail/refreshQr)
- service/WalletService.php           # 票夹服务层
- index/Index.php                     # C端入口(wallet action)
- Hook.php                           # 注入票夹入口链接

## Bug 修复(Task1 调试过程中发现)
- index/Index.php: UserService::LoginInfo() → LoginUserInfo()
- Hook.php: session('user_id') → UserService::LoginUserInfo()(key 不存在)
- api/Ticket.php: LoginInfo() + :Json 返回类型 + json() 包裹
- WalletService.php: JOIN order 表 → 直接 WHERE user_id
- API URL: ?s=api/plugins/index(错误) → /api.php?s=plugins/index(正确)

## 新增文档
- docs/DEBUGGING_ROUTING.md  # 🔑 ShopXO 路由调试经验(必读)
- docs/TASK1_C_WALLET.md     # Task 1 交付文档
- README.md                  # 增加 Agent 快速索引

## 核心经验
ShopXO 多入口:页面=public/index.php,API=public/api.php,勿混用。
详见 docs/DEBUGGING_ROUTING.md
2026-04-24 09:48:32 +08:00
Council 652433abc3 council(cleanup): SecurityEngineer - cleanup debug artifacts, preserve vr_ticket plugin
Security cleanup:
- Removed file_put_contents() debug logging (isPower, plugins, aipower logs)
- Restored is_develop: false (was true, prevented stack trace leak)
- Restored Plugins.php permission check logic (was rewritten)
- Restored AdminPowerService.php cache bypass (admin_id==1 force refresh)
- Removed debug scripts: adminwatekc.php, debug_power.php, test_admin.php
- Preserved vr_ticket plugin (untracked, now committed to worktree)

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-04-15 12:26:57 +08:00