菜单
Documents local and S3 attachment storage, upload API, and cleanup for simple-books. Use when working with file uploads, attachments, Garage/S3 config, or IRS retention.
用 Codex 或 Claude 帮你安装 复制这段 Prompt，粘贴到 Codex、Claude 或其他助手里，让它检查 Skill 页面并帮你完成安装。
基于 SOC 职业分类
Documents Docker image build, Helm chart, release-please versioning, GitHub Actions CI, and K8s deploy constraints for simple-books. Use when deploying, releasing, adding CI workflows, or configuring production infrastructure.
Documents smoke test runbook, when to add tests, and Playwright selector pitfalls for simple-books. Use when running E2E tests, debugging flakes, or writing UI tests.
Documents double-entry journal posting via postJournalSync, ACCT codes, and MVP recipes in simple-books. Use when adding business events, invoices, payments, mileage, reversals, or ledger entries.
Creates TanStack Start createServerFn RPC endpoints with requireAuthMiddleware and dynamic server imports in simple-books. Use when adding *.functions.ts files, server mutations, or fixing import-protection build errors.
Documents bootstrap sign-up, OIDC-only login when configured, and single-owner bootstrap in simple-books. Use when changing auth, login, OIDC env vars, or user access.
Adversarial security review for financial apps: novel and chained exploits, LLM-powered attacker tactics, auth/RPC/upload/ledger invariants, and bad secure-coding process. Use before merge on security-sensitive changes, when auditing auth, money, attachments, deployment, or when the user asks for threat modeling, penetration mindset, or codesec review.
| name | document-storage |
| description | Documents local and S3 attachment storage, upload API, and cleanup for simple-books. Use when working with file uploads, attachments, Garage/S3 config, or IRS retention. |
.env.example: S3_ENDPOINT, S3_BUCKET, S3_ACCESS_KEY, S3_SECRET_KEY, UPLOAD_MAX_BYTES.
@aws-sdk/client-s3 (forcePathStyle: true)./data/uploads/<storage_key>POST /api/attachments/upload — multipart: file, sourceType, sourceIdGET /api/attachments/:id — stream (local) or redirect (presigned S3)attachments table links source_type + source_id to storage_key.
PendingFileField on invoice/receipt/mileage create formsuploadPendingAttachment(file, type, id) after record createS3_ENDPOINT is setdeleteAttachmentsForSource in src/server/attachments.server.ts — called on receipt/mileage delete and invoice void.