d27dd0ffbb
Close 12 audit-driven platform-compliance gaps on a single branch. - D4 dispatch: app/integrations/dispatch_client.py participant `legacyhub`, emits LegacyhubDocumentIndexed + AssetDerivativeReady after the indexing commit (idempotent uuid5), http_inbox route (reindex/tombstone) with audit-based dedupe; docs/dispatch-contract.md. Celery+Redis stays intra-module. - D2 SSO: app/integrations/identity.py validates X-TeamHub-* + role/scope mapper; security.py adds trusted-header enforcement (AUTH_REQUIRE_IDENTITY) and a scope check on /search; docker-compose.teamhub.yml (external teamhub_net + internal db net, api not host-published); RUNBOOK network/firewall section. - Asset standard: SearchHit/Citation carry asset_id/owner_module; buckets renamed teamhub-legacyhub-* (+quarantine/tmp/exports); purge-by-asset_id with legal-hold guard (app/indexing/projection.py); OCR-markdown derivative event. - audit_log model + Alembic 0003 + record_audit on writes (same transaction). - Secret masking: app/common/json_logger.py recursive mask wired into structlog (+ensure_ascii=False); event payloads redacted before persistence. - Service X-API-Key mandatory on ingest endpoints (defence-in-depth). - Port: host API 8000->8050 (collision with SalesHUB/MailHUB resolved), container still listens on 8000. - Config: no plaintext secret defaults; fail-loud in non-dev (no value leak). - Docs drift: README PG 5440, layered-auth note, 5173 removed from CORS; ingest/folder gated by ENABLE_FOLDER_INGEST (410 by default). - ADRs: layers mapping, shared-core extraction, UI locale (RU-first). Tests: 78 passing (ruff, compileall, pytest, tsc, vite build, compose config). Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
54 lines
1.6 KiB
TypeScript
54 lines
1.6 KiB
TypeScript
import { defineConfig } from "vite";
|
|
import react from "@vitejs/plugin-react";
|
|
import path from "node:path";
|
|
|
|
export default defineConfig({
|
|
plugins: [react()],
|
|
resolve: {
|
|
alias: {
|
|
"@": path.resolve(__dirname, "./src"),
|
|
},
|
|
},
|
|
server: {
|
|
port: 5273,
|
|
strictPort: true,
|
|
proxy: {
|
|
"/api": {
|
|
target: "http://localhost:8050",
|
|
changeOrigin: true,
|
|
},
|
|
},
|
|
},
|
|
build: {
|
|
outDir: "dist",
|
|
sourcemap: true,
|
|
chunkSizeWarningLimit: 800,
|
|
rollupOptions: {
|
|
output: {
|
|
// Split heavy third-party libs into their own long-lived chunks so
|
|
// page-level chunks stay small and the vendor cache is reused across
|
|
// releases.
|
|
manualChunks: (id) => {
|
|
if (!id.includes("node_modules")) return undefined;
|
|
if (id.includes("recharts") || id.includes("d3-")) return "vendor-recharts";
|
|
if (id.includes("framer-motion")) return "vendor-motion";
|
|
if (id.includes("@radix-ui") || id.includes("cmdk")) return "vendor-radix";
|
|
if (id.includes("@tanstack")) return "vendor-tanstack";
|
|
if (id.includes("react-router")) return "vendor-router";
|
|
if (id.includes("axios")) return "vendor-axios";
|
|
if (id.includes("lucide-react")) return "vendor-lucide";
|
|
if (id.includes("zustand")) return "vendor-state";
|
|
if (id.includes("sonner")) return "vendor-toast";
|
|
if (
|
|
id.includes("react/") ||
|
|
id.includes("react-dom") ||
|
|
id.includes("scheduler")
|
|
)
|
|
return "vendor-react";
|
|
return "vendor";
|
|
},
|
|
},
|
|
},
|
|
},
|
|
});
|