Ukuphepha & Ukwethembeka

Ukuphepha kuphila ku-Postgres, hhayi ekuziphatheni kohlelo lokusebenza. Wonke umkhiqizo unika amandla i-Row-Level Security kuwo wonke ithebula, kusukela ngosuku lokuqala.

• Imikhiqizo ene-tenant eziningi (AdminOS) iphoqelela ukuhlukaniswa ngokuqhathanisa i-tenant_id ye-JWT ne-tenant_id yomugqa kunqubomgomo ye-RLS kuwo wonke ithebula — i-tenant_id ihlala ixazululwa ngaseseva esuka kuthokheni eqinisekisiwe, ayikaze ithenjwe kuvela kumklayenti.
• I-service-role key enelungelo ivalelwe ezindleleni zeseva kuphela (ama-webhooks, i-cron, ukukhokhisa) futhi ayifinyeleli isiphequluli; ukufunda/ukubhala okujwayelekile kusebenza ngaphansi kwesimo se-RLS somsebenzisi.
• Ukufunda komphakathi okushicilelwe-kuphela, izibuyekezo zombhali-kuphela, kanye nokususa kancane (deleted_at) yisimo se-RLS esizenzakalelayo — amarekhodi awakaze asuswe ngokuqinile.

Wonke i-webhook engenayo iqinisekiswa nge-cryptography ngaphambi kokuba ithinte idatha — ngokuqhathanisa kwesikhathi esingaguquki kanye, lapho kufanele, isivikeli sokuphinda.

• Meta WhatsApp Cloud API: HMAC-SHA256 phezu komzimba oluhlaza (x-hub-signature-256), kuqhathaniswa nokuhlola kokulingana okuphephile ngesikhathi; isiginesha engalungile yi-401.
• PayFast ITN: isiginesha ye-MD5 kanye nokuhlolwa kwe-IP yomthombo ngaphambi kwanoma yiziphi izinguquko zesimo sohlelo noma se-oda.
• Izingcingo zesistimu-kuye-kwisistimu zangaphakathi (isitolo ↔ injini): Bearer key + HMAC-SHA256(body) ephumayo; isiginesha phezu kwe-timestamp.body engenayo, ngewindi lokuphinda lemizuzu emihlanu.
• Paystack (True Access): ukuqinisekiswa kwe-HMAC-SHA512 kwi-webhook yokukhokha.

Izindawo zomphakathi zivalwa ngaphambi kokuba zifinyelele kwidathabhesi noma i-LLM, ukuze izindleko nokuhlukumeza kunqunyelwe.

• Ukuvikeleka konqenqema (Arcjet) kwemithetho ye-bot, izinga kanye ne-shield kumkhiqizo obhekene nomfundi.
• Ama-limiters e-Upstash e-sliding-window ezindleleni ze-API, i-webhook, i-AI kanye nokungenisa — kugcinwe njengama-singletons ukugwema ukuvula kabusha izixhumo ze-Redis.
• Izabelomali ze-AI nge-endpoint ngayinye kanye nemikhawulo ye-token yansuku zonke nge-plan ngayinye, ephoqelelwe ku-Redis nge-429 ekuphelelweni.

Inombolo ye-WhatsApp yomphakathi iyipayipi elivulekile kuya kumodeli yolimi. Okufakwayo okungathenjwa kuhlanzwa ekungeneni, ngaphambi kokuba kugcinwe.

• Imilayezo engenayo idluliswa ngomhlanzi (amaphethini we-injection angu-16–17 + umkhawulo wezinhlamvu ezingu-2,000) ngaphambi kwanoma yikuphi ukubhala kwidathabhesi — ngakho akukho mthwalo onobungozi ogcinwayo noma ophindekayo.
• Ukucushwa okunikezwe abalawuli kuthola umhlanzi ohlukile, oqinile kakhulu ukuvimbela ukungcoliswa kwe-cache kuyo yonke ama-tenant.
• Ama-prompt esistimu ahlukaniswe kuphakheji ye-system yemodeli nge-caching engahlali, ukuze okuqukethwe komsebenzisi okufakiwe kungoni i-prompt egcinwe ku-cache.

Amathokheni ahlala ngaphandle kwesiphequluli, izimfihlo zihlala ngaphandle kwe-bundle, futhi yonke impendulo ihambisana nezihloko eziqinisiwe.

• Amaseshini asebenzisa amakhukhi e-HTTP-only — akukho mathokheni e-auth ku-localStorage; i-OAuth isebenza nge-PKCE.
• Izimfihlo ze-service-role, imodeli kanye ne-webhook azikaze zembulwe njenge-NEXT_PUBLIC futhi azikaze ziloggwe; impahla ebhaliwe inikeza umnikazi wokujikeleza.
• Izihloko zokuphepha zihlolwe kuyo yonke imizila: HSTS (nge-preload), X-Frame-Options: DENY, X-Content-Type-Options: nosniff, i-Content-Security-Policy, kanye ne-Permissions-Policy ecindezelayo.

Izistimu ezibucayi zigcina irekhodi elibonakalisa ukuphazanyiswa lalokho okwenzekile — ngokwakheka, hhayi ngokwesivumelwano.

• Ilogi yokucubungula inamalungelo e-UPDATE ne-DELETE asusiwe ezingeni ledathabhesi — ngisho ne-service role ayikwazi ukushintsha umfaki.
• Amarekhodi ezimali (iminikelo, izinkokhelo, izimali mboleko) aphethe izinombolo zerisidi eziyingqayizivele kanye nereferensi ye-recorded_by; isimo esingaguquki sangaphambili/sangemuva sithathwa ngenguquko ngayinye.
• Ama-ID e-webhook angenayo agcinwa e-UNIQUE ukuze kuqedwe ukuphinda kabili kokuzama komhlinzeki.