next修复CVE-2025-66478漏洞，编程代理改成claude

.claude/settings.json

@@ -0,0 +1,12 @@
+{
+  "permissions": {
+    "allow": [
+      "Read(./.env.example)"
+    ],
+    "deny": [
+      "Read(./.env)",
+      "Read(./.env.development)",
+      "Read(./.env.production)"
+    ]
+  }
+}

.clineignore

@@ -1,53 +0,0 @@
-# 这里的文件会被Cline忽略，一般从 .gitignore 直接复制就行，一些需要保密不便给大模型看的文件也可以写在这
-
-# dependencies
-/node_modules
-/.pnp
-.pnp.*
-.yarn/*
-!.yarn/patches
-!.yarn/plugins
-!.yarn/releases
-!.yarn/versions
-
-# testing
-/coverage
-
-# next.js
-/.next/
-/out/
-
-# production
-/build
-
-# misc
-.DS_Store
-*.pem
-
-# debug
-npm-debug.log*
-yarn-debug.log*
-yarn-error.log*
-.pnpm-debug.log*
-
-# env files (can opt-in for committing if needed)
-.env*
-!.env*.example
-
-# vercel
-.vercel
-
-# typescript
-*.tsbuildinfo
-next-env.d.ts
-
-/postgresql
-tasks.md
-/prisma/zod
-
-# pnpm
-.pnpm-store/
-
-# lock 一般的项目需要用git管理，但这个是模板项目就不管理
-package-lock.json
-pnpm-lock.yaml

.cloud-dev/Dockerfile

@@ -44,6 +44,7 @@ RUN apt-get update && apt-get install -y \
     cmake \
     telnet \
     redis-tools \
+    iputils-ping \
     potrace \
     imagemagick \
     zsh \
@@ -108,7 +109,6 @@ RUN mkdir -p /var/run/sshd && \
 RUN code-server --install-extension ms-ceintl.vscode-language-pack-zh-hans \
     && code-server --install-extension bierner.markdown-mermaid \
     && code-server --install-extension ms-python.python \
-    && code-server --install-extension rooveterinaryinc.roo-cline \
     && code-server --install-extension dbaeumer.vscode-eslint \
     && code-server --install-extension prisma.prisma \
     && code-server --install-extension ecmel.vscode-html-css \

.cloud-dev/README.md

@@ -29,6 +29,7 @@
 - **cmake**: 构建工具
 - **telnet**: 网络调试
 - **redis-tools**: Redis 命令行工具
+- **ping**: 网络连通性测试
 - **potrace**: 位图转矢量图
 - **imagemagick**: 图像处理工具
 - **uv**: 快速 Python 包管理器

.cloud-dev/docker-compose.yml

@@ -11,14 +11,12 @@ services:
       - "7681:7681"    # ttyd (Web Terminal)
       - "3000:3000"    # Next.js Dev Server
     volumes:
-      # 项目代码映射（使用 cached 模式提高性能）
+      # 项目代码映射（如果映射到Windows/Mac宿主机的本地目录，使用 cached 模式提高性能）
       - ../:/workspace:cached
-      # node_modules 使用命名卷以提高性能
+      # Code Server 配置（包含 config.yaml 和密码）
-      - node_modules:/workspace/node_modules
+      - code-server-config:/root/.config/code-server
-      # pnpm store 缓存
+      # Code Server 数据（插件、用户设置、扩展数据）
-      - pnpm_store:/root/.local/share/pnpm/store
+      - code-server-data:/root/.local/share/code-server
-      # Git 配置（可选，如果需要保留 Git 配置）
-      - ~/.gitconfig:/root/.gitconfig:ro
     environment:
       - NODE_ENV=development
       - TZ=Asia/Shanghai

.env.example

@@ -26,6 +26,7 @@ POSTGRESQL_PASSWORD=
 POSTGRESQL_PORT=
 DATABASE_URL=
 
+REDIS_HOST=
 REDIS_PORT=
 REDIS_PASSWORD=
 
@@ -46,7 +47,6 @@ DB_PARALLEL_LIMIT =
 
 # NextAuth.js Configuration
 NEXTAUTH_SECRET=
-NEXTAUTH_URL=
 
 PKUAI_API_KEY=
 PKUAI_API_BASE=

.roo/mcp.json

@@ -1,12 +0,0 @@
-{
-    "mcpServers":{
-        "ai-elements": {
-            "command": "npx",
-                "args": [
-                    "-y",
-                    "mcp-remote",
-                    "https://registry.ai-sdk.dev/api/mcp"
-                 ]
-        }
-    }
-}

.vscode/settings.json

@@ -0,0 +1,3 @@
+{
+    "prisma.pinToPrisma6": true
+}

CLAUDE.md

@@ -1,3 +1,7 @@
+# CLAUDE.md
+
+This file provides guidance to Claude Code (claude.ai/code) when working with code in this repository.
+
 ## 项目说明
 本项目模板（Hair Keeper v1.1.0）是一个高度集成、深度定制、约定优于配置的全栈Web应用模板，旨在保持灵活性的同时提供一套基于成熟架构的开发底座，自带身份认证、权限控制、丰富前端组件、文件上传、后台任务、智能体开发等丰富功能，提供AI开发辅助，免于纠结功能如何实现，可快速上手专注于业务逻辑。
 

README.md

@@ -79,6 +79,7 @@ Hair Keeper是个诙谐有趣的名称，和项目内容毫无关系。
 ### 其他
 - `constants/`：项目全局常量管理
 - `constants/permissions.ts`：权限定义，支持前后端一致的权限控制，支持解析复杂的权限表达式（如"A&B|(C&D)"）
+- `constants/menu.ts`: 菜单管理工具库，提供菜单项定义、查询、权限过滤等功能
 - `lib/schema/`：集中管理数据验证schema，定义前后端统一的数据结构和验证规则，前端对默认值等其他要求写在表单组件中，后端对默认值等其他要求写在接口文件中，使用z.input而不是z.infer来获取Schema的输入类型
 - `lib/algorithom.ts`：通用计算机算法实现，例如拓扑排序
 - `lib/format.ts`：数据格式化工具函数库

package.json

@@ -1,13 +1,13 @@
 {
   "name": "hair-keeper",
-  "version": "0.1.0",
+  "version": "1.1.0",
   "private": true,
   "scripts": {
     "dev": "next dev -p 3000 --turbo",
     "dev:attach": "DEV_TERMINAL=nextdev;tmux new-session -A -s $DEV_TERMINAL\\;  send-keys \"pnpm run dev\" ^M",
     "build": "next build",
     "start": "next start -p 3000",
-    "lint": "eslint",
+    "lint": "next lint && tsc --noEmit",
     "db:seed": "tsx prisma/seed.ts",
     "build:analyze": "ANALYZE=true next build"
   },
@@ -74,7 +74,7 @@
     "minio": "^8.0.6",
     "motion": "^12.23.22",
     "nanoid": "^5.1.6",
-    "next": "~15.4.0",
+    "next": "~15.4.8",
     "next-auth": "^4.24.11",
     "next-themes": "^0.4.6",
     "nuqs": "^2.6.0",
@@ -109,7 +109,6 @@
     "@types/react-dom": "^19",
     "eslint": "^9",
     "eslint-config-next": "15.5.2",
-    "react-icons": "^5.5.0",
     "react-live": "^4.1.8",
     "shadcn": "^3.5.0",
     "tailwindcss": "^4",

quickstart.sh

@@ -0,0 +1,2 @@
+#!/bin/bash
+# 您可以运行这个脚本来快速初始化和使用本模板项目

simple_deploy.sh

@@ -1,6 +1,6 @@
 #!/bin/bash
 # 此脚本用来一键部署到生产服务器
-# 需事先配置好ssh免密登录，目标服务器需要安装好node、pnpm和pm2来运行容器
+# 需事先配置好ssh免密登录，目标服务器需要安装好node、pnpm、tsx、pm2来运行容器
 set -e
 
 # 配置
@@ -10,6 +10,7 @@ REMOTE_PORT=""
 PROJECT_NAME=""
 REMOTE_DIR="~/$PROJECT_NAME"
 
+pnpm run lint
 echo "🔨 开始构建项目..."
 pnpm run build
 
@@ -46,10 +47,6 @@ cd ${REMOTE_DIR}
 echo "📥 安装依赖..."
 pnpm install --prod
 
-# 等待数据库启动
-echo "⏳ 等待数据库启动..."
-sleep 5
-
 # 运行数据库迁移
 echo "🗄️  运行数据库迁移..."
 npx prisma migrate deploy

src/app/(main)/welcome.tsx

@@ -29,7 +29,7 @@ export function WelcomeDialog({ open, onOpenChange }: WelcomeDialogProps) {
             <DialogTitle className="text-2xl">欢迎您，开发者</DialogTitle>
           </div>
           <DialogDescription className="pt-4 text-base">
-            {/* 内容暂时没想好，先不实现 */}
+            感谢您选择 Hair Keeper 作为开发底座，祝您开发顺利！
           </DialogDescription>
         </DialogHeader>
         <div className="flex justify-end gap-2 pt-4">

src/components/data-table/filters/range-filter.tsx

@@ -1,122 +0,0 @@
-"use client";
-
-import type { Column } from "@tanstack/react-table";
-import * as React from "react";
-
-import { Input } from "@/components/ui/input";
-import { cn } from "@/lib/utils";
-import type { ExtendedColumnFilter } from "@/types/data-table";
-
-interface DataTableRangeFilterProps<TData> extends React.ComponentProps<"div"> {
-  filter: ExtendedColumnFilter<TData>;
-  column: Column<TData>;
-  inputId: string;
-  onFilterUpdate: (
-    filterId: string,
-    updates: Partial<Omit<ExtendedColumnFilter<TData>, "filterId">>,
-  ) => void;
-}
-
-export function DataTableRangeFilter<TData>({
-  filter,
-  column,
-  inputId,
-  onFilterUpdate,
-  className,
-  ...props
-}: DataTableRangeFilterProps<TData>) {
-  const meta = column.columnDef.meta;
-
-  const [min, max] = React.useMemo(() => {
-    const range = column.columnDef.meta?.filter?.range;
-    if (range) return range;
-
-    const values = column.getFacetedMinMaxValues();
-    if (!values) return [0, 100];
-
-    return [values[0], values[1]];
-  }, [column]);
-
-  const formatValue = React.useCallback(
-    (value: string | number | undefined) => {
-      if (value === undefined || value === "") return "";
-      const numValue = Number(value);
-      return Number.isNaN(numValue)
-        ? ""
-        : numValue.toLocaleString(undefined, {
-            maximumFractionDigits: 0,
-          });
-    },
-    [],
-  );
-
-  const value = React.useMemo(() => {
-    if (Array.isArray(filter.value)) return filter.value.map(formatValue);
-    return [formatValue(filter.value), ""];
-  }, [filter.value, formatValue]);
-
-  const onRangeValueChange = React.useCallback(
-    (value: string, isMin?: boolean) => {
-      const numValue = Number(value);
-      const currentValues = Array.isArray(filter.value)
-        ? filter.value
-        : ["", ""];
-      const otherValue = isMin
-        ? (currentValues[1] ?? "")
-        : (currentValues[0] ?? "");
-
-      if (
-        value === "" ||
-        (!Number.isNaN(numValue) &&
-          (isMin
-            ? numValue >= min && numValue <= (Number(otherValue) || max)
-            : numValue <= max && numValue >= (Number(otherValue) || min)))
-      ) {
-        onFilterUpdate(filter.filterId, {
-          value: isMin ? [value, otherValue] : [otherValue, value],
-        });
-      }
-    },
-    [filter.filterId, filter.value, min, max, onFilterUpdate],
-  );
-
-  return (
-    <div
-      data-slot="range"
-      className={cn("flex w-full items-center gap-2", className)}
-      {...props}
-    >
-      <Input
-        id={`${inputId}-min`}
-        type="number"
-        aria-label={`${meta?.label} minimum value`}
-        aria-valuemin={min}
-        aria-valuemax={max}
-        data-slot="range-min"
-        inputMode="numeric"
-        placeholder={min.toString()}
-        min={min}
-        max={max}
-        className="h-8 w-full rounded"
-        defaultValue={value[0]}
-        onChange={(event) => onRangeValueChange(event.target.value, true)}
-      />
-      <span className="sr-only shrink-0 text-muted-foreground">to</span>
-      <Input
-        id={`${inputId}-max`}
-        type="number"
-        aria-label={`${meta?.label} maximum value`}
-        aria-valuemin={min}
-        aria-valuemax={max}
-        data-slot="range-max"
-        inputMode="numeric"
-        placeholder={max.toString()}
-        min={min}
-        max={max}
-        className="h-8 w-full rounded"
-        defaultValue={value[1]}
-        onChange={(event) => onRangeValueChange(event.target.value)}
-      />
-    </div>
-  );
-}

src/server/redis.ts

@@ -13,7 +13,7 @@ export function getRedisClient() {
     const redisPassword = process.env.REDIS_PASSWORD
 
     redisClient = new Redis({
-      host: 'localhost',
+      host: process.env.REDIS_HOST || 'localhost',
       port: parseInt(redisPort, 10),
       password: redisPassword,
       maxRetriesPerRequest: null, // BullMQ 推荐设置

src/server/routers/upload.ts

@@ -225,26 +225,7 @@ export function createDownloadProcedure(config: DownloadConfig) {
  * 提供文件上传相关的接口，使用工厂函数创建特定业务的上传接口
  */
 export const uploadRouter = createTRPCRouter({
-  // 供给照片批量上传接口
+
-  supplyPhotos: createBatchUploadProcedure({
-    category: 'transfer/supply',
-    maxSize: 1 * 1024 * 1024, // 1MB
-    allowedContentType: 'image/*',
-    expirySeconds: 3600,
-    permission: Permissions.TRANSFER_SUPPLY_CREATE,
-  }),
-  supplyPdfs: createBatchUploadProcedure({
-    category: 'transfer/supply',
-    maxSize: 1 * 1024 * 1024, // 1MB
-    allowedContentType: 'application/pdf',
-    expirySeconds: 3600,
-    permission: Permissions.TRANSFER_SUPPLY_CREATE,
-  }),
-  // 已上传的供给照片下载
-  downloadSupplyPhotos: createDownloadProcedure({
-    expirySeconds: 3600,
-    permission: Permissions.TRANSFER_SUPPLY_CREATE,
-  })
 });
 
 export type SingleUploadProcedureInput = inferProcedureInput<ReturnType<typeof createSingleUploadProcedure>>; // createSingleUploadProcedure 创建的接口调用参数