@wecode-team/cms-supabase-api 0.1.53 → 0.1.55

package/dist/index.js

@@ -697,6 +697,7 @@ function getSupabaseSetupSQL() {
 }
 
 var feishuAlertConfig = {
+  environment: process.env.CMS_ALERT_ENV || process.env.NODE_ENV || "development",
   crudErrorWebhookUrls: ["https://open.feishu.cn/open-apis/bot/v2/hook/784e9470-c1fd-4e38-97a2-b9a1856c00b1"]
 };
 
@@ -4169,6 +4170,10 @@ function getWebhookUrls() {
     return item.trim();
   }).filter(Boolean);
 }
+function getAlertEnvironmentLabel() {
+  var environment = String(feishuAlertConfig.environment || "").trim();
+  return environment === "production" ? "生产" : "测试";
+}
 function safeJsonStringify(value) {
   var seen = new WeakSet();
   try {
@@ -4287,7 +4292,7 @@ function _notifyCmsCrudErrorToFeishu() {
             content: {
               post: {
                 zh_cn: {
-                  title: "[cms-supabase-api] ".concat(TARGET_LABELS[options.target]).concat(ACTION_LABELS[options.action], "\u5F02\u5E38"),
+                  title: "[".concat(getAlertEnvironmentLabel(), "][cms-supabase-api] ").concat(TARGET_LABELS[options.target]).concat(ACTION_LABELS[options.action], "\u5F02\u5E38"),
                   content: [[{
                     tag: "text",
                     text: buildAlertText(c, options)
@@ -7554,64 +7559,117 @@ function _supabaseCurrentUser() {
   return _supabaseCurrentUser.apply(this, arguments);
 }
 
+function isSkipAuthRequest(c) {
+  return c.req.header("X-CMS-Skip-Auth") === "true";
+}
+function withAdmin() {
+  return [(/*#__PURE__*/function () {
+    var _ref = _asyncToGenerator(/*#__PURE__*/_regeneratorRuntime.mark(function _callee(c, next) {
+      return _regeneratorRuntime.wrap(function (_context) {
+        while (1) switch (_context.prev = _context.next) {
+          case 0:
+            if (!isSkipAuthRequest(c)) {
+              _context.next = 2;
+              break;
+            }
+            _context.next = 1;
+            return next();
+          case 1:
+            return _context.abrupt("return");
+          case 2:
+            return _context.abrupt("return", requireJwtAuth(c, next));
+          case 3:
+          case "end":
+            return _context.stop();
+        }
+      }, _callee);
+    }));
+    return function (_x, _x2) {
+      return _ref.apply(this, arguments);
+    };
+  }()), (/*#__PURE__*/function () {
+    var _ref2 = _asyncToGenerator(/*#__PURE__*/_regeneratorRuntime.mark(function _callee2(c, next) {
+      return _regeneratorRuntime.wrap(function (_context2) {
+        while (1) switch (_context2.prev = _context2.next) {
+          case 0:
+            if (!isSkipAuthRequest(c)) {
+              _context2.next = 2;
+              break;
+            }
+            _context2.next = 1;
+            return next();
+          case 1:
+            return _context2.abrupt("return");
+          case 2:
+            return _context2.abrupt("return", requireAdminRole(c, next));
+          case 3:
+          case "end":
+            return _context2.stop();
+        }
+      }, _callee2);
+    }));
+    return function (_x3, _x4) {
+      return _ref2.apply(this, arguments);
+    };
+  }())];
+}
 // 创建模型路由处理器
 function createModelRoute(app) {
-  // CMS 管理接口：要求登录 + admin 权限（兼容 Supabase Auth JWT / 旧 CMS JWT）
-  app.get("/models", requireJwtAuth, requireAdminRole, getModels);
-  app.post("/models", requireJwtAuth, requireAdminRole, createModel);
-  app.put("/models", requireJwtAuth, requireAdminRole, updateModel);
-  app["delete"]("/models", requireJwtAuth, requireAdminRole, deleteModel);
+  app.get.apply(app, ["/models"].concat(_toConsumableArray(withAdmin()), [getModels]));
+  app.post.apply(app, ["/models"].concat(_toConsumableArray(withAdmin()), [createModel]));
+  app.put.apply(app, ["/models"].concat(_toConsumableArray(withAdmin()), [updateModel]));
+  app["delete"].apply(app, ["/models"].concat(_toConsumableArray(withAdmin()), [deleteModel]));
   return app;
 }
 // 创建数据表路由处理器（固定表名）
 function createDataRoute(app, tableName) {
-  app.get("/data/".concat(tableName), requireJwtAuth, requireAdminRole, function (c) {
+  app.get.apply(app, ["/data/".concat(tableName)].concat(_toConsumableArray(withAdmin()), [function (c) {
     return getTableData(c, tableName);
-  });
-  app.post("/data/".concat(tableName), requireJwtAuth, requireAdminRole, function (c) {
+  }]));
+  app.post.apply(app, ["/data/".concat(tableName)].concat(_toConsumableArray(withAdmin()), [function (c) {
     return createTableData(c, tableName);
-  });
-  app.put("/data/".concat(tableName), requireJwtAuth, requireAdminRole, function (c) {
+  }]));
+  app.put.apply(app, ["/data/".concat(tableName)].concat(_toConsumableArray(withAdmin()), [function (c) {
     return updateTableData(c, tableName);
-  });
-  app["delete"]("/data/".concat(tableName), requireJwtAuth, requireAdminRole, function (c) {
+  }]));
+  app["delete"].apply(app, ["/data/".concat(tableName)].concat(_toConsumableArray(withAdmin()), [function (c) {
     return deleteTableData(c, tableName);
-  });
+  }]));
   return app;
 }
 // 动态创建数据表路由处理器（从URL参数获取表名）
 function createDynamicDataRoute(app) {
   // 获取关联表选项（放在 :tableName 路由之前，避免被匹配）
-  app.get("/relation/:tableName/options", requireJwtAuth, requireAdminRole, function (c) {
-    var tableName = c.req.param("tableName");
+  app.get.apply(app, ["/relation/:tableName/options"].concat(_toConsumableArray(withAdmin()), [function (c) {
+    var tableName = c.req.param("tableName") || "";
     return getRelationOptions(c, tableName);
-  });
+  }]));
   // 获取带关联数据的表数据
-  app.get("/data/:tableName/with-relations", requireJwtAuth, requireAdminRole, function (c) {
-    var tableName = c.req.param("tableName");
+  app.get.apply(app, ["/data/:tableName/with-relations"].concat(_toConsumableArray(withAdmin()), [function (c) {
+    var tableName = c.req.param("tableName") || "";
     return getTableDataWithRelations(c, tableName);
-  });
-  app.get("/data/:tableName", requireJwtAuth, requireAdminRole, function (c) {
-    var tableName = c.req.param("tableName");
+  }]));
+  app.get.apply(app, ["/data/:tableName"].concat(_toConsumableArray(withAdmin()), [function (c) {
+    var tableName = c.req.param("tableName") || "";
     return getTableData(c, tableName);
-  });
-  app.post("/data/:tableName", requireJwtAuth, requireAdminRole, function (c) {
-    var tableName = c.req.param("tableName");
+  }]));
+  app.post.apply(app, ["/data/:tableName"].concat(_toConsumableArray(withAdmin()), [function (c) {
+    var tableName = c.req.param("tableName") || "";
     return createTableData(c, tableName);
-  });
-  app.put("/data/:tableName", requireJwtAuth, requireAdminRole, function (c) {
-    var tableName = c.req.param("tableName");
+  }]));
+  app.put.apply(app, ["/data/:tableName"].concat(_toConsumableArray(withAdmin()), [function (c) {
+    var tableName = c.req.param("tableName") || "";
     return updateTableData(c, tableName);
-  });
-  app["delete"]("/data/:tableName", requireJwtAuth, requireAdminRole, function (c) {
-    var tableName = c.req.param("tableName");
+  }]));
+  app["delete"].apply(app, ["/data/:tableName"].concat(_toConsumableArray(withAdmin()), [function (c) {
+    var tableName = c.req.param("tableName") || "";
     return deleteTableData(c, tableName);
-  });
+  }]));
   // 删除表的所有外键约束（用于解决外键引用错误表的问题）
-  app["delete"]("/data/:tableName/foreign-keys", requireJwtAuth, requireAdminRole, function (c) {
-    var tableName = c.req.param("tableName");
+  app["delete"].apply(app, ["/data/:tableName/foreign-keys"].concat(_toConsumableArray(withAdmin()), [function (c) {
+    var tableName = c.req.param("tableName") || "";
     return dropForeignKeys(c, tableName);
-  });
+  }]));
   return app;
 }
 // 动态创建认证路由处理器（从URL参数获取表名）
@@ -7694,14 +7752,14 @@ function createAuthRoute(app, tableName) {
   return app;
 }
 function createOssUploadRoute(app) {
-  app.post("/upload", requireJwtAuth, requireAdminRole, uploadToOss);
+  app.post.apply(app, ["/upload"].concat(_toConsumableArray(withAdmin()), [uploadToOss]));
   return app;
 }
 function createConfigRoute(app) {
-  app.get("/configs", requireJwtAuth, requireAdminRole, getConfig);
-  app.put("/configs/:namespace", requireJwtAuth, requireAdminRole, function (c) {
+  app.get.apply(app, ["/configs"].concat(_toConsumableArray(withAdmin()), [getConfig]));
+  app.put.apply(app, ["/configs/:namespace"].concat(_toConsumableArray(withAdmin()), [function (c) {
     return updateConfig(c);
-  });
+  }]));
   return app;
 }
 // 一键创建所有CMS路由