feat: harden support, localize knowledge and add operator availability [skip ci]

Source-only publication of reviewed commit 64e96a7f423673dc29ad56485be9fc79bce8af1c.

Passed in isolation: focused frontend/backend tests, race checks, TypeScript typecheck, lint, Go compilation, Flowgram build, and deterministic SDK build/tests.

Not accepted as a production release: Next.js export/native assembly remains blocked by environment memory limits; browser interaction and MySQL staging acceptance remain unverified. No production server, database/schema, runtime configuration, deployment, release tag, or workflow execution was performed.

Expected source tree: 0a4a7528e9.
This commit is contained in:
2026-10-16 15:21:42 +00:00
parent 299ea50fb5
commit 2f7a491666
176 changed files with 11869 additions and 2716 deletions

View File

@@ -1,3 +1,6 @@
// Modified in AgentDeskNext: authenticated support availability and calendars.
// Modified in the independent hardening fork; see docs/hardening.
package bootstrap
import (
@@ -26,6 +29,7 @@ import (
type publicRateLimits struct {
login *ratelimit.Limiter
supportRegister *ratelimit.Limiter
supportStatus *ratelimit.Limiter
sessionExchange *ratelimit.Limiter
upload *ratelimit.Limiter
docFeedback *ratelimit.Limiter
@@ -39,6 +43,7 @@ type publicRateLimits struct {
const (
limitLogin = 20
limitSupportRegister = 10
limitSupportStatus = 120
limitSessionExchange = 120
limitUpload = 30
limitDocFeedback = 20
@@ -57,6 +62,7 @@ func newPublicRateLimits(cfg config.RateLimitConfig) publicRateLimits {
return publicRateLimits{
login: ratelimit.New(limitLogin, window),
supportRegister: ratelimit.New(limitSupportRegister, window),
supportStatus: ratelimit.New(limitSupportStatus, window),
sessionExchange: ratelimit.New(limitSessionExchange, window),
upload: ratelimit.New(limitUpload, window),
docFeedback: ratelimit.New(limitDocFeedback, window),
@@ -87,6 +93,7 @@ func registerApiWebhookRoutes(group *gin.RouterGroup) {
func registerApiCustomerRoutes(group *gin.RouterGroup, limits publicRateLimits) {
group.POST("/session_exchange", middleware.RateLimit(limits.sessionExchange), api.CustomerPostSession_exchange)
group.POST("/session_refresh", middleware.RateLimit(limits.sessionExchange), api.CustomerPostSession_refresh)
}
func registerApiConversationRoutes(group *gin.RouterGroup) {
@@ -112,6 +119,7 @@ func registerApiMessageRoutes(group *gin.RouterGroup, limits publicRateLimits) {
func registerApiSupportRoutes(group *gin.RouterGroup, limits publicRateLimits) {
group.GET("/config", api.SupportConfigGetConfig)
group.GET("/status", middleware.RateLimit(limits.supportStatus), api.SupportGetStatus)
group.POST("/auth/register", middleware.RateLimit(limits.supportRegister), api.SupportAuthPostRegister)
group.GET("/me", api.SupportGetMe)
group.Any("/doc-page/list", api.DocPageAnyList)
@@ -522,3 +530,13 @@ func registerThirdEmailRoutes(group *gin.RouterGroup, limits publicRateLimits) {
group.POST("/request", middleware.RateLimit(limits.emailRequest), third.EmailPostRequest)
group.POST("/request/:channel_id", middleware.RateLimit(limits.emailRequest), third.EmailPostRequest)
}
func registerDashboardSupportAvailabilityRoutes(group *gin.RouterGroup) {
group.GET("/me", dashboard.SupportAvailabilityGetMe)
group.POST("/me", dashboard.SupportAvailabilityPostMe)
group.GET("/agents", dashboard.SupportAvailabilityGetAgents)
group.POST("/agent", dashboard.SupportAvailabilityPostAgent)
group.GET("/calendar", dashboard.SupportAvailabilityGetCalendar)
group.POST("/calendar", dashboard.SupportAvailabilityPostCalendar)
group.POST("/calendar/preview", dashboard.SupportAvailabilityPostCalendarPreview)
}

View File

@@ -1,3 +1,4 @@
// Modified in AgentDeskNext: authenticated support availability and calendars.
package bootstrap
import (
@@ -192,6 +193,7 @@ func addRouter(app *gin.Engine) {
dashboardGroup := app.Group("/api/dashboard", middleware.AuthMiddleware)
registerDashboardDashboardRoutes(dashboardGroup.Group("/dashboard"))
registerDashboardSetupRoutes(dashboardGroup.Group("/setup"))
registerDashboardSupportAvailabilityRoutes(dashboardGroup.Group("/support_availability"))
registerDashboardUserRoutes(dashboardGroup.Group("/user"))
registerDashboardOrganizationRoutes(dashboardGroup.Group("/organization"))
registerDashboardCompanyRoutes(dashboardGroup.Group("/company"))