create-bubbles 0.1.23 → 0.1.25

package/template-vp-monorepo-react-nestjs/.vscode/launch.json

@@ -0,0 +1,16 @@
+{
+  "version": "0.2.0",
+  "configurations": [
+    {
+      "name": "Nest Attach 9229",
+      "type": "node",
+      "request": "attach",
+      "address": "127.0.0.1",
+      "port": 9229,
+      "restart": true,
+      "sourceMaps": true,
+      "outFiles": ["${workspaceFolder}/apps/server/dist/**/*.js"],
+      "skipFiles": ["<node_internals>/**", "${workspaceFolder}/**/node_modules/**"]
+    }
+  ]
+}

package/template-vp-monorepo-react-nestjs/.vscode/settings.json

@@ -1,26 +1,29 @@
 {
-  "eslint.enable": false,
+  "eslint.enable": true,
   "prettier.enable": false,
   "biome.enabled": false,
-  // "npm.scriptRunner": "vp",
+
   "editor.defaultFormatter": "oxc.oxc-vscode",
-  "[javascript]": {
-    "editor.defaultFormatter": "oxc.oxc-vscode"
-  },
-  "[javascriptreact]": {
-    "editor.defaultFormatter": "oxc.oxc-vscode"
-  },
-  "[typescript]": {
-    "editor.defaultFormatter": "oxc.oxc-vscode"
-  },
-  "[typescriptreact]": {
-    "editor.defaultFormatter": "oxc.oxc-vscode"
-  },
-  "oxc.fmt.configPath": "./vite.config.ts",
   "editor.formatOnSave": true,
-  "editor.formatOnSaveMode": "file",
+
   "editor.codeActionsOnSave": {
-    "source.organizeImports": "always",
-    "source.fixAll.oxc": "always"
+    "source.organizeImports": "explicit",
+    "source.fixAll.oxc": "explicit",
+    "source.fixAll.eslint": "explicit"
+  },
+
+  "oxc.typeAware": false,
+  "oxc.lint.run": "onType",
+
+  // ESLint 只把 web-vue 当作工作目录
+  "eslint.workingDirectories": ["./apps/web-vue"],
+  "eslint.validate": ["javascript", "javascriptreact", "typescript", "typescriptreact", "vue"],
+
+  "files.watcherExclude": {
+    "**/node_modules/**": true,
+    "**/.pnpm/**": true,
+    "**/dist/**": true,
+    "**/coverage/**": true,
+    "**/.vite/**": true
   }
 }

package/template-vp-monorepo-react-nestjs/apps/server/.env.development

@@ -20,42 +20,6 @@ REDIS_PORT=6379
 REDIS_PASSWORD=ml
 REDIS_DB=0
 
-
-# JWT的签名密钥 服务器签发access token 使用它签名 整整token shi
-JWT_ACCESS_SECRET=oM1FmlgA-tpflskKz5jZRYf2-_QK-aPhjtboFYaqTtlqB4RNgWUFNsp3irMUUdJF
-# JWT 的签发者，对应 JWT 中的 iss 字段：
-JWT_ISSUER=bubbles-auth
-# 验证 Token 时，服务器会检查它是不是由 bubbles-auth 签发的。它是标识符，不是密码。 JWT 的目标使用者，对应 aud 字段
-# 表示这个 Token 是给 bubbles-api 使用的，避免一个系统签发的 JWT 被误用到另一个系统。
-JWT_AUDIENCE=bubbles-api
-# Access Token 的有效时间：
-JWT_ACCESS_TTL_SECONDS=600
-# JWT 时间校验的允许误差：
-JWT_CLOCK_TOLERANCE_SECONDS=30
-
-
-# Refresh Token 的服务端“椒值”，通常用于计算哈希：
-REFRESH_TOKEN_PEPPER=ON-ECMSvcmjVryktpp-1BLpDl3r7Sl63-GXyy1uto2_1AbqCbNOndIfdtuBVe1o_
-# Refresh Token 的有效时间： 30 天
-REFRESH_TOKEN_TTL_SECONDS=2592000
-# 保存 Refresh Token 的 Cookie 名称，浏览器中大致是：
-# 生产环境如果使用 __Host- 安全前缀，可以改成： __Host-refresh_token
-# REFRESH_COOKIE_PATH=/
-# REFRESH_COOKIE_SECURE=true
-# 并且不能设置 Domain。
-REFRESH_COOKIE_NAME=refresh_token
-# Cookie 只会自动发送给 /auth 路径下的接口 这样可以减少 Refresh Token 暴露给无关接口的机会。
-REFRESH_COOKIE_PATH=/auth
-# 表示这个 Cookie 不强制要求 HTTPS，适合本地 HTTP 开发
-REFRESH_COOKIE_SECURE=false
-
-# 认证状态在当前服务进程的本地内存中缓存
-# 例如服务器查到“用户正常、会话有效”，可以缓存 30 秒，避免每个请求都查询数据库或 Redis。
-# 本地缓存意味着每个 NestJS 实例都有自己的缓存，所以还需要下面的失效通知机制。
-AUTH_LOCAL_CACHE_TTL_MS=30000
-
-# 
-AUTH_TOMBSTONE_TTL_SECONDS=900
-
-# 当修改密码或者踢人的时候通过这个通道 通知用户失效
-AUTH_EVENT_CHANNEL=auth-state:invalidate
+SESSION_TOKEN_PEPPER=EfN6+CbfvlXkxp9SeTkFpziHPtr0/krxZItsjqUCc7AnbH9cmnDXNSFeNpa78Z42
+SESSION_IDLE_TTL_SECONDS=7200
+SESSION_ABSOLUTE_TTL_SECONDS=604800

package/template-vp-monorepo-react-nestjs/apps/server/.swcrc

@@ -0,0 +1,8 @@
+{
+  "jsc": {
+    "baseUrl": ".",
+    "paths": {
+      "@/*": ["./src/*"]
+    }
+  }
+}

package/template-vp-monorepo-react-nestjs/apps/server/drizzle.config.ts

@@ -1,9 +1,14 @@
+import { ENV_ARR } from '@/utils/env-arr'
 import { config } from 'dotenv'
 import { defineConfig } from 'drizzle-kit'
 
-config({
-  path: '.env.development',
-})
+for (const path of ENV_ARR) {
+  config({ path })
+}
+
+if (!process.env.DATABASE_URL) {
+  throw new Error('DATABASE_URL 未配置')
+}
 
 export default defineConfig({
   schema: './src/database/schema.ts',

package/template-vp-monorepo-react-nestjs/apps/server/nest-cli.json

@@ -3,6 +3,13 @@
   "collection": "@nestjs/schematics",
   "sourceRoot": "src",
   "compilerOptions": {
-    "deleteOutDir": true
+    "deleteOutDir": true,
+    "builder": {
+      "type": "swc",
+      "options": {
+        "swcrcPath": ".swcrc"
+      }
+    },
+    "typeCheck": false
   }
 }

package/template-vp-monorepo-react-nestjs/apps/server/package.json

@@ -7,22 +7,22 @@
   "author": "",
   "scripts": {
     "build": "nest build",
-    "format": "prettier --write \"src/**/*.ts\" \"test/**/*.ts\"",
+    "format": "vp fmt",
     "dev": "nest start --watch",
     "debug": "nest start --debug --watch",
+    "debug:start": "nest start --watch --exec \"node --inspect-brk\"",
     "build:preview": "node dist/main",
     "db:push": "drizzle-kit push",
     "db:generate": "drizzle-kit generate",
     "db:migrate": "drizzle-kit migrate",
-    "db:studio": "drizzle-kit studio"
+    "db:studio": "drizzle-kit studio",
+    "test": "vp test"
   },
   "dependencies": {
-    "@fastify/cookie": "catalog:",
     "@nestjs-modules/ioredis": "catalog:",
     "@nestjs/common": "catalog:",
     "@nestjs/config": "catalog:",
     "@nestjs/core": "catalog:",
-    "@nestjs/jwt": "catalog:",
     "@nestjs/mapped-types": "catalog:",
     "@nestjs/platform-fastify": "catalog:",
     "argon2": "catalog:",
@@ -42,16 +42,21 @@
     "@nestjs/schematics": "catalog:",
     "@nestjs/swagger": "catalog:",
     "@nestjs/testing": "catalog:",
+    "@swc/cli": "catalog:",
+    "@swc/core": "catalog:",
     "@types/express": "catalog:",
-    "@types/node": "catalog:node24",
+    "@types/node": "catalog:",
+    "@types/pg": "catalog:",
     "cross-env": "catalog:",
     "dotenv": "catalog:",
     "drizzle-kit": "catalog:",
     "globals": "catalog:",
+    "shared": "workspace:*",
     "source-map-support": "catalog:",
     "ts-loader": "catalog:",
     "ts-node": "catalog:",
     "tsconfig-paths": "catalog:",
-    "typescript": "catalog:"
+    "typescript": "catalog:",
+    "vite-plus": "catalog:"
   }
 }

package/template-vp-monorepo-react-nestjs/apps/server/src/app.controller.ts

@@ -1,11 +1,13 @@
 import { Controller, Get } from '@nestjs/common'
 import { AppService } from './app.service'
+import { Public } from './common/decorators/public.decorator'
 
 @Controller()
 export class AppController {
   constructor(private readonly appService: AppService) {}
 
   @Get()
+  @Public()
   getHello(): string {
     return this.appService.getHello()
   }

package/template-vp-monorepo-react-nestjs/apps/server/src/app.module.ts

@@ -1,24 +1,24 @@
+import { appConfig, databaseConfig, llmConfig, redisConfig, sessionConfig } from '@/config'
+import { RedisModule } from '@nestjs-modules/ioredis'
 import { Module } from '@nestjs/common'
+import { ConfigModule, ConfigService } from '@nestjs/config'
+import { APP_FILTER, APP_INTERCEPTOR, APP_PIPE } from '@nestjs/core'
+import { ZodSerializerInterceptor, ZodValidationPipe } from 'nestjs-zod'
 import { AppController } from './app.controller'
 import { AppService } from './app.service'
-import { ConfigModule, ConfigService } from '@nestjs/config'
-import { appConfig, databaseConfig, llmConfig, redisConfig, authConfig } from '@/config'
-import { ResponseInterceptor } from '@/common/interceptors/transform'
-import { APP_INTERCEPTOR, APP_PIPE } from '@nestjs/core'
-import { RedisModule } from '@nestjs-modules/ioredis'
-import { TestRedisModule } from './modules/test/redis/redis.module'
+import { GlobalExceptionFilter } from './common/filters/global-exception.filter'
 import { DatabaseModule } from './database/db.module'
+import { AuthModule } from './modules/auth/auth.module'
 import { TestDbModule } from './modules/test/db/db.module'
-import { ZodSerializerInterceptor, ZodValidationPipe } from 'nestjs-zod'
-
-const nodeEnv = process.env.NODE_ENV ?? 'development'
+import { TestRedisModule } from './modules/test/redis/redis.module'
+import { ENV_ARR } from './utils/env-arr'
 
 @Module({
   imports: [
     ConfigModule.forRoot({
       isGlobal: true,
-      envFilePath: [`.env.${nodeEnv}.local`, '.env.local', `.env.${nodeEnv}`, '.env'],
-      load: [appConfig, databaseConfig, llmConfig, redisConfig, authConfig],
+      envFilePath: ENV_ARR,
+      load: [appConfig, databaseConfig, llmConfig, redisConfig, sessionConfig],
     }),
     DatabaseModule,
     RedisModule.forRootAsync({
@@ -30,19 +30,20 @@ const nodeEnv = process.env.NODE_ENV ?? 'development'
           port: config.get('redis.port'),
           password: config.get('redis.password'),
           db: config.get('redis.db'),
+          connectTimeout: 3000,
+          commandTimeout: 2000,
+          maxRetriesPerRequest: 1,
+          enableOfflineQueue: false,
         },
       }),
     }),
     TestRedisModule,
     TestDbModule,
+    AuthModule,
   ],
   controllers: [AppController],
   providers: [
     AppService,
-    {
-      provide: APP_INTERCEPTOR,
-      useClass: ResponseInterceptor,
-    },
     // ZOD 全局校验管道
     {
       provide: APP_PIPE,
@@ -53,6 +54,10 @@ const nodeEnv = process.env.NODE_ENV ?? 'development'
       provide: APP_INTERCEPTOR,
       useClass: ZodSerializerInterceptor,
     },
+    {
+      provide: APP_FILTER,
+      useClass: GlobalExceptionFilter,
+    },
   ],
 })
 export class AppModule {}

package/template-vp-monorepo-react-nestjs/apps/server/src/common/adapters/fastify.adapter.ts

@@ -0,0 +1,16 @@
+import { FastifyAdapter } from '@nestjs/platform-fastify'
+import { randomUUID } from 'crypto'
+
+export function createFastifyAdapter() {
+  const adapter = new FastifyAdapter({
+    trustProxy: true,
+    genReqId: () => randomUUID(),
+    logger: false,
+  })
+
+  adapter.getInstance().addHook('onRequest', (request, reply, done) => {
+    reply.header('x-request-id', request.id)
+    done()
+  })
+  return adapter
+}

package/template-vp-monorepo-react-nestjs/apps/server/src/common/constants/auth.ts

@@ -0,0 +1,2 @@
+/** 不需要权限校验的路由 */
+export const IS_PUBLIC_KEY = Symbol('is_public')

package/template-vp-monorepo-react-nestjs/apps/server/src/common/constants/response.ts

@@ -1,7 +1,3 @@
-export const RESPONSE_SUCCESS_CODE = 200
-
-export const RESPONSE_SUCCESS_MSG = 'success'
-
 /**
  * @description  contentType
  */

package/template-vp-monorepo-react-nestjs/apps/server/src/common/constants/session.constants.ts

@@ -0,0 +1,28 @@
+import type { SessionTerminalType } from 'shared/types'
+
+export { isSessionTerminal, SESSION_TERMINALS } from 'shared/utils'
+
+export const SESSION_KEY_PREFIX = 'auth:v1:session:'
+export const SESSION_SLOT_PREFIX = 'auth:v1:slot:'
+
+export function createSessionKey(tokenDigest: string) {
+  return `${SESSION_KEY_PREFIX}${tokenDigest}`
+}
+
+export function createSessionSlotKey(userId: string, terminal: SessionTerminalType) {
+  return `${SESSION_SLOT_PREFIX}${userId}:${terminal}`
+}
+
+export function detectSessionTerminal(userAgent: string | undefined): SessionTerminalType {
+  const value = userAgent ?? ''
+
+  if (/\bElectron\//i.test(value)) {
+    return 'desktop'
+  }
+
+  if (/Android|iPhone|iPad|iPod/i.test(value)) {
+    return 'mobile'
+  }
+
+  return 'web'
+}

package/template-vp-monorepo-react-nestjs/apps/server/src/common/decorators/current-auth.decorator.ts

@@ -0,0 +1,16 @@
+import { AUTH_ERRORS } from '@/modules/auth/auth.errors'
+import { AuthenticatedRequest, CurrentAuthType } from '@/modules/auth/session/session.types'
+import { createParamDecorator, ExecutionContext } from '@nestjs/common'
+import { AppException } from '../exceptions/app.exception'
+
+export const CurrentAuth = createParamDecorator(
+  (_data: unknown, context: ExecutionContext): CurrentAuthType => {
+    const request = context.switchToHttp().getRequest<AuthenticatedRequest>()
+
+    if (!request.auth) {
+      throw new AppException(AUTH_ERRORS.CONTEXT_MISSING)
+    }
+
+    return request.auth
+  },
+)

package/template-vp-monorepo-react-nestjs/apps/server/src/common/decorators/public.decorator.ts

@@ -0,0 +1,4 @@
+import { SetMetadata } from '@nestjs/common'
+import { IS_PUBLIC_KEY } from '../constants/auth'
+
+export const Public = () => SetMetadata(IS_PUBLIC_KEY, true)

package/template-vp-monorepo-react-nestjs/apps/server/src/common/dto/api-failure.dto.ts

@@ -0,0 +1,25 @@
+import { ApiProperty, ApiPropertyOptional } from '@nestjs/swagger'
+
+export class ApiErrorDetailDto {
+  @ApiPropertyOptional({ example: 'account' })
+  path?: string
+
+  @ApiProperty({ example: 'too_small' })
+  code!: string
+
+  @ApiProperty({ example: '账号至少需要 4 个字符' })
+  message!: string
+}
+
+export class ApiFailureDto {
+  @ApiProperty({ example: 'COMMON.VALIDATION_FAILED' })
+  code!: string
+
+  @ApiProperty({ example: '请求参数校验失败' })
+  message!: string
+
+  @ApiPropertyOptional({
+    type: () => [ApiErrorDetailDto],
+  })
+  details?: ApiErrorDetailDto[]
+}

package/template-vp-monorepo-react-nestjs/apps/server/src/common/error/common.error.ts

@@ -0,0 +1,40 @@
+import { HttpStatus } from '@nestjs/common'
+import { AppErrorDefinition } from '../exceptions/app.exception'
+
+export const COMMON_ERRORS = {
+  VALIDATION_FAILED: {
+    code: 'COMMON.VALIDATION_FAILED',
+    publicMessage: '请求参数校验失败',
+    status: HttpStatus.BAD_REQUEST,
+  },
+  BAD_REQUEST: {
+    code: 'COMMON.BAD_REQUEST',
+    publicMessage: '请求内容无效',
+    status: HttpStatus.BAD_REQUEST,
+  },
+  FORBIDDEN: {
+    code: 'COMMON.FORBIDDEN',
+    publicMessage: '没有权限执行此操作',
+    status: HttpStatus.FORBIDDEN,
+  },
+  NOT_FOUND: {
+    code: 'COMMON.NOT_FOUND',
+    publicMessage: '请求的资源不存在',
+    status: HttpStatus.NOT_FOUND,
+  },
+  TOO_MANY_REQUESTS: {
+    code: 'COMMON.TOO_MANY_REQUESTS',
+    publicMessage: '请求过于频繁，请稍后重试',
+    status: HttpStatus.TOO_MANY_REQUESTS,
+  },
+  SERVICE_UNAVAILABLE: {
+    code: 'COMMON.SERVICE_UNAVAILABLE',
+    publicMessage: '服务暂时不可用，请稍后重试',
+    status: HttpStatus.SERVICE_UNAVAILABLE,
+  },
+  INTERNAL_SERVER_ERROR: {
+    code: 'COMMON.INTERNAL_SERVER_ERROR',
+    publicMessage: '服务器内部错误',
+    status: HttpStatus.INTERNAL_SERVER_ERROR,
+  },
+} as const satisfies Record<string, AppErrorDefinition>

package/template-vp-monorepo-react-nestjs/apps/server/src/common/exceptions/app.exception.ts

@@ -0,0 +1,55 @@
+import { HttpException, HttpStatus } from '@nestjs/common'
+import { ApiErrorDetail } from 'shared/types'
+
+const ERROR_CODE_PATTERN = /^[A-Z][A-Z0-9_]*(?:\.[A-Z][A-Z0-9_]*)+$/
+
+export interface AppErrorDefinition<Code extends string = string> {
+  readonly code: Code
+  readonly publicMessage: string
+  readonly status: HttpStatus
+  readonly bearerChallenge?: true
+}
+
+export interface AppExceptionOptions {
+  readonly cause?: unknown
+  readonly details?: readonly ApiErrorDetail[]
+}
+
+function assertErrorDefinition(definition: AppErrorDefinition): void {
+  if (!ERROR_CODE_PATTERN.test(definition.code) || definition.code.length > 80) {
+    throw new TypeError('Invalid application error code: ' + definition.code)
+  }
+
+  if (definition.status < 400 || definition.status > 599) {
+    throw new TypeError('Application error status must be between 400 and 599')
+  }
+
+  if (!definition.publicMessage.trim()) {
+    throw new TypeError('Application error publicMessage must not be empty')
+  }
+
+  if (definition.bearerChallenge && definition.status !== 401) {
+    throw new TypeError('bearerChallenge is only valid for HTTP 401')
+  }
+
+  if (definition.status === 401 && !definition.bearerChallenge) {
+    throw new TypeError('HTTP 401 errors must declare bearerChallenge')
+  }
+}
+
+export class AppException extends HttpException {
+  readonly definition: AppErrorDefinition
+  readonly details?: readonly ApiErrorDetail[]
+
+  constructor(definition: AppErrorDefinition, options: AppExceptionOptions = {}) {
+    assertErrorDefinition(definition)
+
+    super(definition.publicMessage, definition.status, {
+      cause: options.cause,
+    })
+
+    this.name = AppException.name
+    this.definition = definition
+    this.details = options.details
+  }
+}