try_files with $uri/ causes Nginx to treat / as a directory and return
403 when no index.html exists in dist root. Use $uri/index.html so
static directory indexes still work while unmatched routes (including /)
fall through to the Next.js runtime.
- logo.svg: remove dark-mode white fill so header/hero calligraphy stays
visible on white backgrounds and matches footer logo-white.svg
- about/brand: replace sans-serif brand title with BrandCalligraphyName,
reusing the same AoyagiReisho SVG paths as the footer logo without
loading the 4.4MB font file
- add unit tests for BrandCalligraphyName and document decision in CONTEXT.md
- Replace fabricated 12-year/500+/8+ team experience claims with
2026 founding, first-client co-creation, professional team wording
- Remove fake case studies and unverified certifications from seeds,
cases page, products and ERP upgrade page
- Enable Next.js standalone output and production hybrid deployment
(Dockerfile.prod, docker-compose.server.yml, Nginx nextjs upstream)
- Add linux-musl Prisma engine target and production crypto key build
- Sync production CMS database with cleaned seed content
- Add externalUrl field to standalone product content type
- Filter out externalUrl products from generateStaticParams
- Fix email icon vertical alignment in footer
- Add 10 core user journey tests (UJ-01~UJ-10) covering complete workflows
- Add security test suite (18 cases: headers, CSP, XSS, info disclosure)
- Add comprehensive test report with coverage analysis and defect tracking
- Fix mobile test stability: StaticLink touch compatibility, Next.js HMR timeout
- Fix cases-filter test: softening assertions for dynamic filter behavior
- Fix mobile-user-journeys: desktop viewport direct navigation fallback
- Update README with final test progress and metrics
Also accumulates other pre-existing changes:
- refactor(icons): replace deprecated BarChart3 with TrendingUp
- refactor(services): replace emoji icons with LucideIcon components
- refactor(footer): use logo-white for dark background
- cleanup(archive): remove unused archive components
- cleanup(constants): remove unused types and exports
- Add getExpandedMenusForPath to auto-expand the parent menu group
when navigating to a child page (e.g., /admin/users expands "系统管理")
- Add hasActiveChild highlight on parent menu group button (bg-gray-100)
- Use lazy initialization for expandedMenus state based on current path
- Use useEffect to track pathname changes and auto-expand accordingly
- Replace `path` unused param with `_path` to satisfy TypeScript strict
The server-side encrypt function in crypto-server.ts used format
`iv + authTag + encrypted`, but the client-side decrypt function in
crypto.ts expects `iv + encrypted + authTag` (authTag at the end,
matching Web Crypto API convention where ciphertext includes authTag).
This mismatch caused all admin API requests to fail with
"The operation failed for an operation-specific reason" when
NEXT_PUBLIC_ENCRYPTION_SECRET was configured, since the client
could not decrypt the server's response.
Fix: swap the order of authTag and encrypted in both encrypt and
decrypt functions in crypto-server.ts.
- Fix loginAdminAndSetCookie to set both cookie (middleware) and localStorage (auth-context)
- Add page navigation before localStorage evaluate to avoid SecurityError
- Update Playwright webServer to npm run dev for API route support
- Fix UJ-10 CSS selector parsing error (text= regex mixed with CSS)
- Fix cases-filter flaky test (getByRole('radio') → locator('button[role="radio"]'))
- Update test-strategy-plan.md: mark UJ-03/06/07 as ✅ completed
- Update README.md with admin fix progress record
- Dashboard: add stats API with content status distribution, recent notifications,
and recent content updates; display active users, pending reviews, unread counts
- User management: full CRUD with role assignment, search, pagination, delete dialog
- Notification center: list with unread filter, mark as read, mark all as read,
pagination, and auto-refresh unread count
- Content editor: form validation (required fields, slug format, blur-triggered
errors), auto-save with 3s debounce and status indicator, publish confirmation
dialog, unsaved changes warning on leave
- Admin layout: add navigation links for user management, roles, and notifications
- admin-api: make request() method public for custom API calls
- gitignore: add reports/mutation/ to exclude mutation test output
- Add Content-Security-Policy and Permissions-Policy headers to nginx config
- Add same headers to next.config.mjs for dev/preview mode
- Add Referrer-Policy to next.config.mjs (was only in nginx)
- Generate production JWT/CMS secrets via openssl rand -base64 64
- Update README mark production env/security header task as complete
Archive old component versions no longer in use:
- home-content.tsx (orphan, superseded by v14)
- solution-detail-content-v1/v2 (superseded by v3)
- service-detail-content-v1/v2/v3 (superseded by v4)
- news-detail-content-v1/v2 (superseded by v3)
All pages verified to use CMS data layer:
home, products, solutions, services, cases, news, about, team, contact
Quality gates: type-check, 992 tests, coverage all passing.
- Adjust Next.js Image width/height in homepage hero to 192x48 (4:1)
matching logo.svg viewBox, so the full logo (seal + calligraphy + NOVALON)
renders instead of being cropped to a square.
- Update visual regression baselines across desktop/mobile/tablet and
chromium/firefox/webkit after the logo render fix.
- Include homepage brand visual acceptance report and manual screenshots.
Closes visual issue: logo did not show company name like header.
- Remove redundant `trackConversion('contact_form_submission')` in contact-content-v3.tsx
and rely on `trackContactForm(..., true)` to avoid double-counting conversions in GA4
- Update contact-content-v3.test.tsx assertions to match single analytics call
- Add Logo + company name + NOVALON to homepage HeroSection in home-content-v14.tsx
- Update homepage visual regression baselines across desktop/tablet/mobile
- Record progress in README.md
- Fix list-to-detail navigation on product/service/solution/case pages
- Fix soft 404 on service detail by removing (marketing)/loading.tsx and using force-dynamic
- Fix contact form submission feedback and news placeholder image handling
- Unify SSR/client authentication state in auth.ts
- Add "新闻动态" to main navigation
- Fix Playwright storageState path and Firefox footer link flakiness
- Add E2E coverage for nav dropdown, cases filter and auth token parsing
- Update visual regression baselines (desktop/tablet/mobile, chromium/webkit/firefox)
- Update README, lessons-learned and add REGRESSION_REPORT_2026-07-27.md
- Ignore .lighthouseci/ and heading-hierarchy-report.json
- Remove e2e/visual-snapshots/ from .gitignore so baselines are tracked
- Generate baseline screenshots across desktop/tablet/mobile and chromium/firefox/webkit
- Total: 95 snapshots (~114MB) covering 12 pages and component states
NOTE: Consider migrating to Git LFS if snapshot history grows too large.
- Add missing-paths E2E spec for desktop/mobile navigation and contrast
- Add local Playwright config for dev server testing
- Expand unit tests for CMS data server, products, contact and UI components
- Adjust jest config for new test patterns
- Replace decorative numbering and side-stripe borders with structured copy
- Add scenario positioning, capability metrics and verifiable dimensions
- Refine service timelines, deliverables and case-study narratives
- Update content constants to support CMS seeding
- Move site-config and navigation to CMS-backed SiteConfigProvider
- Keep static constants as fallback for dev and degraded modes
- Add ADR-0005 recording the global layout CMS strategy
Refs ADR-0005
zhangxiang
张翔