v0.8.0-alpha.6 - Merchant inventory insights UI

INV-03 adds the read-only merchant inventory insights experience.

Highlights:

• /merchant/ai-operations route and “AI 经营助手” navigation entry
• deterministic risk summary, filters, stable ordering, desktop table, and mobile cards
• lazy privacy-minimized evidence drawer with explicit rules, windows, calculation time, and limitations
• loading, timeout, permission, error, and empty states
• 64-bit-safe SKU identifiers plus component/API coverage

Safety boundary:

• no model or explain request on initial load or elsewhere in this release
• no automatic pricing, stock mutation, publish/unpublish, order, or refund action
• no deployment or production-data change

Validation:

• PR #73 CI: 14/14 successful
• main CI run 29733883336: 14/14 successful
• server Node 22 unit tests: 7 files / 19 tests
• TypeScript/Vite build and high-severity dependency audit passed
• desktop 1440×900 and mobile 390×844 browser checks passed

This remains a prerelease. INV-04 AI explanation and later stocktake/customer-service stages are not included.

v0.8.0-alpha.5 - Deterministic inventory insights

Deterministic inventory insights milestone

This prerelease records completion of INV-02, the read-only inventory insight backend:

• deterministic SKU metrics for 7/30/90-day confirmed sales, demand, revenue, velocity, cover, recent sales, age, and sell-through
• stable OUT_OF_STOCK, LOW_STOCK, DEAD_STOCK, SLOW_MOVING, OVERSTOCK, and HEALTHY classification
• merchant-only list, summary, and privacy-minimized evidence APIs
• fixed Asia/Shanghai snapshot semantics and legacy negative SKU compatibility
• MySQL Testcontainers fixtures covering every risk, boundary windows, COD, cancelled/timeout demand, decimal precision, privacy, and EXPLAIN index evidence

Pull request #72 closed issue #64 and was squash-merged as main commit 9d425b7. The complete 14-job pull-request and post-merge main CI workflows passed.

Important boundary

This release is read-only and contains no frontend or model call. It does not change price, stock, product status, orders, or refunds. The server application images are not upgraded by this GitHub release; deployment remains a separately backed-up PILOT-01 activity.

v0.8.0-alpha.4 - Inventory ledger integrity

Inventory ledger integrity milestone

This prerelease records completion of INV-01, the inventory fact-chain foundation:

• transactional ledgers for order reserve, release, and confirmation
• stable event keys that make order stock retries idempotent
• before/after total, locked, and available inventory snapshots
• forward-compatible Flyway V18 migration and rollback boundary documentation
• MySQL Testcontainers coverage for invariants, concurrency, duplicate events, and transaction rollback

Pull request #63 was squash-merged as main commit 49f4369. The complete 14-job pull-request and post-merge main CI workflows passed.

Important boundary

This release does not deploy or execute inventory changes automatically. The production-like server remains on the previously deployed application images until a separately backed-up and verified upgrade is performed.

v0.8.0-alpha.3 - Eval42 regression gates

Eval42 PhoneMall implementation milestone

This prerelease records the target-project implementation of Eval42 Phases 1 and 2:

• protected, merchant-only, disabled-by-default retrieval evaluation endpoint
• shared read-only retrieval service with raw and eligible ranked candidates
• deterministic 20-case offline evaluator and report generation
• Recall@5, MRR, forbidden-product, hard-constraint, and unexpected-empty metrics
• Baseline v1 fingerprints, case-hash comparison, regression gates, and execution budgets
• CI report artifacts and an opt-in protected live nightly workflow

Main commit 5fed019 passed the complete 14-job CI workflow.

Important boundary

The 20 source-derived labels remain pending-human-review in issue #58. The fixture baseline proves deterministic regression plumbing; it is not a certification of live recommendation quality. Live nightly evaluation remains disabled until the protected deployment, secrets, and reviewed live baseline exist.

v0.8.0-alpha.2 - Media storage and release hardening

Highlights

• add S3-compatible product media storage while preserving stable /api/media URLs and local-volume defaults
• include S3 media objects in encrypted backup and restore workflows
• add SKU migration verification and rollback guidance
• pin and checksum CI security scanners, scan full Git history, and allow cold-cache Trivy runs
• apply current Debian security updates to application and MySQL runtime images
• restore all CI jobs to standard GitHub-hosted ubuntu-latest runners

Validation

• PR #53 completed all backend, frontend, configuration, source security, image security and full-stack E2E checks
• PR #54 and the resulting main commit both completed all 13 GitHub-hosted CI jobs
• merchant-to-customer Playwright flow and dependency/service recovery drills passed

Upgrade notes

• ./start.sh upgrade v0.8.0-alpha.2 creates an encrypted backup before rebuilding and switching application images
• local media remains the default unless MEDIA_STORAGE_TYPE=s3 and the required S3 settings are configured
• review docs/SKU迁移与回滚手册.md before any manual database rollback

Known limitations

• pre-release only: real merchant pilot, public-domain TLS acceptance and external alert delivery remain deployment-specific work
• COD/OFFLINE only; no online payment gateway or reconciliation

v0.8.0-alpha.1 - Stage 7 release readiness

Highlights

• complete automated merchant-to-customer browser acceptance, migration and concurrent-stock verification
• add security abuse cases and dependency/service recovery drills
• remove Nacos from the fixed single-merchant topology and use private Docker DNS routes
• harden and scan MySQL, Redis, Nginx, application and observability images
• add quality evidence, pilot Go/No-Go guidance and explicit known limitations

Upgrade notes

• create and verify an encrypted backup before upgrading
• the upgrade rebuilds the MySQL 8.0.46 Debian runtime while preserving the data volume
• the retired Nacos container is removed; its old data volume is retained for manual confirmation
• run login, catalog, checkout, fulfillment, monitoring and backup checks after upgrade

Known limitations

• pre-release only: real merchant pilot and public-domain TLS acceptance are still pending
• COD/OFFLINE only; no online payment gateway or channel reconciliation
• external Alertmanager delivery requires deployment-specific receiver configuration

See docs/发布说明与已知限制.md, docs/质量与安全验收记录.md and docs/试点验收手册.md.

v0.7.0-alpha.1 - 生产安全与可观测

主要内容

• 完整应用与监控 Compose、非 root 运行和固定版本镜像
• GitHub Actions 供应链安全门禁：密钥、源码、配置与镜像扫描
• Spring Boot 3.5 / Spring Cloud 2025 平台升级
• Prometheus、Alertmanager、Node Exporter、cAdvisor 与 8 条生产告警
• ECS JSON 日志、应用聚合健康指标与 AI 成本/失败率指标
• 版本化安装、升级、回滚，以及数据库/媒体加密备份恢复
• Nginx TLS、Let's Encrypt、HSTS、安全响应头与入口分级限流
• 部署镜像拉取重试和前端构建产物属主修复

验证

• GitHub CI 全部通过
• 目标服务器四个应用服务与四个监控目标全部健康
• 自动恢复、告警 firing/resolved、Alertmanager 接收与 ECS 日志实机演练通过

已知限制

• 这是预发布版本；真实域名公网 TLS 验收和阶段 7 端到端/商家试点仍待完成。

v0.6.0-alpha.1 · AI 导购可运营

主要能力\n- AI 只推荐当前上架、存在启用 SKU 且有可用库存的真实商品\n- 商家可启停 AI、配置模型/温度/输出上限/免责声明/用户日配额\n- FAQ、配送、售后和店铺知识维护\n- 商品变更生成可追踪索引任务，支持失败查看与重试\n- 每日预估成本预算、Token 单价、成功率、耗时和失败指标\n- 提示注入边界、输入与跨 SSE 分片输出敏感词过滤、超时降级\n\n## 验证\n- PR #22–#30 全部合并且 GitHub Actions 通过\n- Flyway V12–V15 临时库迁移与正式迁移通过\n- 服务器 Java 17 完整构建与全部测试通过\n- 4 个应用服务健康，网关、商品 API 和前端入口冒烟通过\n\n## 已知限制\n- Token 与成本为字符换算估算，商家需按实际模型价格维护单价\n- 私有 LAN 地址受浏览器自动化策略限制，真实桌面/移动端交互验收仍列在后续计划中

v0.5.0-alpha.1 · 履约与消费者体验

主要内容

• 商家配送规则、运费快照、门店自提与经营概览
• OFFLINE/COD 履约及人工退款记录
• 消费者订单时间线、公开配送/售后/隐私说明
• 令牌刷新后保持商家角色，AI SSE 支持刷新后重试

验证

• GitHub CI 通过
• 服务器四服务健康、网关与前端冒烟通过

v0.4.0-alpha.4

• Merchant-managed delivery and pickup rules with order shipping snapshots\n- OFFLINE/COD checkout flow and merchant fulfillment\n- Manual refund request and processing records (no fabricated payment-channel refunds)\n- Flyway migrations V9-V11