@rei-standard/amsg-server 1.2.1 → 2.0.1

package/README.md

@@ -1,17 +1,18 @@
 # @rei-standard/amsg-server
 
-`@rei-standard/amsg-server` 是 ReiStandard 主动消息标准的服务端 SDK 包。
+`@rei-standard/amsg-server` 是 ReiStandard 主动消息标准的服务端 SDK（v2.0.1），提供 Blob 租户配置、租户 token 鉴权和标准路由处理器。
 
-## 文档导航
+## v2.0.1 变更摘要
 
-- [SDK 总览](../README.md)
-- [主 README](../../../README.md)
-- [API 技术规范](../../../standards/active-messaging-api.md)
+- 初始化流程合并为 `POST /api/v1/init-tenant`
+- 移除旧端点：`init-database`、`init-master-key`
+- 业务端点统一使用 `Authorization: Bearer <tenantToken>`
+- `send-notifications` 支持 `cronToken`（Header 或 query token）
 
 ## 安装
 
 ```bash
-npm install @rei-standard/amsg-server web-push
+npm install @rei-standard/amsg-server web-push @netlify/blobs
 
 # 数据库驱动二选一
 npm install @neondatabase/serverless
@@ -19,43 +20,96 @@ npm install @neondatabase/serverless
 npm install pg
 ```
 
-## 使用
+## 快速使用
 
 ```js
 import { createReiServer } from '@rei-standard/amsg-server';
 
 const rei = await createReiServer({
-  db: {
-    driver: 'neon',
-    connectionString: process.env.DATABASE_URL
-  },
-  cronSecret: process.env.CRON_SECRET,
   vapid: {
     email: process.env.VAPID_EMAIL,
     publicKey: process.env.NEXT_PUBLIC_VAPID_PUBLIC_KEY,
     privateKey: process.env.VAPID_PRIVATE_KEY
+  },
+  tenant: {
+    blobNamespace: 'rei-tenants',
+    kek: process.env.TENANT_CONFIG_KEK,
+    tokenSigningKey: process.env.TENANT_TOKEN_SIGNING_KEY,
+    initSecret: process.env.INIT_SECRET,
+    publicBaseUrl: process.env.PUBLIC_BASE_URL
   }
 });
+
+// 映射路由
+// POST /api/v1/init-tenant          -> rei.handlers.initTenant.POST
+// GET  /api/v1/get-user-key         -> rei.handlers.getUserKey.GET
+// POST /api/v1/schedule-message     -> rei.handlers.scheduleMessage.POST
+// POST /api/v1/send-notifications   -> rei.handlers.sendNotifications.POST
+// PUT  /api/v1/update-message       -> rei.handlers.updateMessage.PUT
+// DELETE /api/v1/cancel-message     -> rei.handlers.cancelMessage.DELETE
+// GET  /api/v1/messages             -> rei.handlers.messages.GET
 ```
 
-导出的标准 handler：
+## AI 接口 `apiUrl` 约束
+
+当 `messageType` 为 `prompted` / `auto`，或 `instant` 使用 AI 配置时：
+
+- `apiUrl` 必须是完整聊天端点（例如：`https://api.openai.com/v1/chat/completions`）。
+- SDK 会自动做最小规范化：去首尾空白、去路径尾部多余 `/`。
+- SDK **不会**自动补全 `/v1`、`/chat/completions` 等路径。
+- `maxTokens` 为可选字段：传了就映射为 `max_tokens`；不传则不指定（由上游模型默认策略决定）。
+
+如果上游返回 `405 Method Not Allowed`，通常表示 `apiUrl` 指向了基础域名而非聊天端点，请优先检查配置值。
+
+## 一体化初始化流程
+
+1. 管理员配置环境变量（VAPID + tenant secrets）
+2. 租户调用 `POST /api/v1/init-tenant` 提交自己的 `databaseUrl`
+3. 服务端自动完成：建表 + 生成 masterKey + 写入 Blob + 返回 `tenantToken`/`cronToken`
+4. 前端使用 `tenantToken`，cron 使用 `cronToken`
+
+## 端点鉴权
+
+- `get-user-key`、`schedule-message`、`update-message`、`cancel-message`、`messages`
+  - `Authorization: Bearer <tenantToken>`
+- `send-notifications`
+  - `Authorization: Bearer <cronToken>` 或 `?token=<cronToken>`
+
+## 导出 API（Exports）
 
-- `rei.handlers.initDatabase`
-- `rei.handlers.initMasterKey`
-- `rei.handlers.getUserKey`
-- `rei.handlers.scheduleMessage`
-- `rei.handlers.sendNotifications`
-- `rei.handlers.updateMessage`
-- `rei.handlers.cancelMessage`
-- `rei.handlers.messages`
+- `createReiServer`
+- `createAdapter`
+- `createTenantToken`
+- `verifyTenantToken`
+- `deriveUserEncryptionKey`
+- `decryptPayload`
+- `encryptForStorage`
+- `decryptFromStorage`
+- `validateScheduleMessagePayload`
+- `isValidISO8601`
+- `isValidUrl`
+- `isValidUUID`
+- `isValidUUIDv4`
 
-推荐初始化顺序：
+## 运行环境与要求
 
-1. 调用 `initDatabase.GET`（幂等创建表）
-2. 调用 `initMasterKey.POST`（一次性初始化系统密钥）
-3. 客户端携带 UUID v4 `X-User-Id` 调用 `getUserKey.GET`
+- Node.js `>=20`
+- 必须安装 `web-push`
+- 必须安装 `@netlify/blobs`
+- 必须安装至少一个数据库驱动（`@neondatabase/serverless` 或 `pg`）
+- 必须配置：
+  - `VAPID_EMAIL`
+  - `NEXT_PUBLIC_VAPID_PUBLIC_KEY`
+  - `VAPID_PRIVATE_KEY`
+  - `TENANT_CONFIG_KEK`
+  - `TENANT_TOKEN_SIGNING_KEY`
+- 可选配置：
+  - `INIT_SECRET`（配置后 `init-tenant` 必须带 `X-Init-Secret`）
 
-## 相关包
+## 相关链接（绝对 URL）
 
-- 浏览器 SDK：[`@rei-standard/amsg-client`](../client/README.md)
-- Service Worker SDK：[`@rei-standard/amsg-sw`](../sw/README.md)
+- [SDK Workspace 总览](https://github.com/Tosd0/ReiStandard/blob/main/packages/rei-standard-amsg/README.md)
+- [Client 包 README](https://github.com/Tosd0/ReiStandard/blob/main/packages/rei-standard-amsg/client/README.md)
+- [SW 包 README](https://github.com/Tosd0/ReiStandard/blob/main/packages/rei-standard-amsg/sw/README.md)
+- [API 技术规范](https://github.com/Tosd0/ReiStandard/blob/main/standards/active-messaging-api.md)
+- [Service Worker 规范](https://github.com/Tosd0/ReiStandard/blob/main/standards/service-worker-specification.md)

package/dist/{chunk-H5EQVHAY.mjs → chunk-5ENJGVZX.mjs}

@@ -13,14 +13,6 @@ var TABLE_SQL = `
     updated_at TIMESTAMP WITH TIME ZONE DEFAULT NOW()
   )
 `;
-var SYSTEM_CONFIG_SQL = `
-  CREATE TABLE IF NOT EXISTS system_config (
-    key TEXT PRIMARY KEY,
-    value TEXT NOT NULL,
-    created_at TIMESTAMP WITH TIME ZONE DEFAULT NOW(),
-    updated_at TIMESTAMP WITH TIME ZONE DEFAULT NOW()
-  )
-`;
 var INDEXES = [
   {
     name: "idx_pending_tasks_optimized",
@@ -64,12 +56,6 @@ var VERIFY_TABLE_SQL = `
   WHERE table_schema = 'public'
     AND table_name = 'scheduled_messages'
 `;
-var VERIFY_SYSTEM_CONFIG_SQL = `
-  SELECT table_name
-  FROM information_schema.tables
-  WHERE table_schema = 'public'
-    AND table_name = 'system_config'
-`;
 var COLUMNS_SQL = `
   SELECT column_name, data_type, is_nullable
   FROM information_schema.columns
@@ -77,31 +63,10 @@ var COLUMNS_SQL = `
     AND table_name = 'scheduled_messages'
   ORDER BY ordinal_position
 `;
-var SYSTEM_CONFIG_COLUMNS_SQL = `
-  SELECT column_name, data_type, is_nullable
-  FROM information_schema.columns
-  WHERE table_schema = 'public'
-    AND table_name = 'system_config'
-  ORDER BY ordinal_position
-`;
-var REQUIRED_COLUMNS = [
-  "id",
-  "user_id",
-  "uuid",
-  "encrypted_payload",
-  "message_type",
-  "next_send_at",
-  "status",
-  "retry_count"
-];
 
 export {
   TABLE_SQL,
-  SYSTEM_CONFIG_SQL,
   INDEXES,
   VERIFY_TABLE_SQL,
-  VERIFY_SYSTEM_CONFIG_SQL,
-  COLUMNS_SQL,
-  SYSTEM_CONFIG_COLUMNS_SQL,
-  REQUIRED_COLUMNS
+  COLUMNS_SQL
 };

package/dist/{chunk-74H4WV6Q.cjs → chunk-RGECD4OH.cjs}

@@ -13,14 +13,6 @@ var TABLE_SQL = `
     updated_at TIMESTAMP WITH TIME ZONE DEFAULT NOW()
   )
 `;
-var SYSTEM_CONFIG_SQL = `
-  CREATE TABLE IF NOT EXISTS system_config (
-    key TEXT PRIMARY KEY,
-    value TEXT NOT NULL,
-    created_at TIMESTAMP WITH TIME ZONE DEFAULT NOW(),
-    updated_at TIMESTAMP WITH TIME ZONE DEFAULT NOW()
-  )
-`;
 var INDEXES = [
   {
     name: "idx_pending_tasks_optimized",
@@ -64,12 +56,6 @@ var VERIFY_TABLE_SQL = `
   WHERE table_schema = 'public'
     AND table_name = 'scheduled_messages'
 `;
-var VERIFY_SYSTEM_CONFIG_SQL = `
-  SELECT table_name
-  FROM information_schema.tables
-  WHERE table_schema = 'public'
-    AND table_name = 'system_config'
-`;
 var COLUMNS_SQL = `
   SELECT column_name, data_type, is_nullable
   FROM information_schema.columns
@@ -77,31 +63,10 @@ var COLUMNS_SQL = `
     AND table_name = 'scheduled_messages'
   ORDER BY ordinal_position
 `;
-var SYSTEM_CONFIG_COLUMNS_SQL = `
-  SELECT column_name, data_type, is_nullable
-  FROM information_schema.columns
-  WHERE table_schema = 'public'
-    AND table_name = 'system_config'
-  ORDER BY ordinal_position
-`;
-var REQUIRED_COLUMNS = [
-  "id",
-  "user_id",
-  "uuid",
-  "encrypted_payload",
-  "message_type",
-  "next_send_at",
-  "status",
-  "retry_count"
-];
-
-
-
-
 
 
 
 
 
 
-exports.TABLE_SQL = TABLE_SQL; exports.SYSTEM_CONFIG_SQL = SYSTEM_CONFIG_SQL; exports.INDEXES = INDEXES; exports.VERIFY_TABLE_SQL = VERIFY_TABLE_SQL; exports.VERIFY_SYSTEM_CONFIG_SQL = VERIFY_SYSTEM_CONFIG_SQL; exports.COLUMNS_SQL = COLUMNS_SQL; exports.SYSTEM_CONFIG_COLUMNS_SQL = SYSTEM_CONFIG_COLUMNS_SQL; exports.REQUIRED_COLUMNS = REQUIRED_COLUMNS;
+exports.TABLE_SQL = TABLE_SQL; exports.INDEXES = INDEXES; exports.VERIFY_TABLE_SQL = VERIFY_TABLE_SQL; exports.COLUMNS_SQL = COLUMNS_SQL;