create-windy 0.2.33 → 0.3.0

package/template/packages/config/index.test.ts

@@ -29,6 +29,51 @@ test("平台 Redis 与 RuoYi 旧 Redis 使用独立 SecretResolver 配置", () =
   );
 });
 
+test("平台设置提供类型化默认值并校验 IANA 时区", () => {
+  const config = loadPlatformConfig({});
+
+  expect(config.security).toMatchObject({
+    sessionTtlSeconds: 28_800,
+    passwordMinLength: 12,
+    passwordMaxLength: 128,
+  });
+  expect(config.storage).toEqual({
+    bulkDataMaxByteSize: 512 * 1024 * 1024,
+    brandingLogoMaxByteSize: 5 * 1024 * 1024,
+  });
+  expect(config.mail).toMatchObject({
+    enabled: false,
+    port: 587,
+    secure: false,
+  });
+  expect(config.regional.timeZone).toBe("Asia/Shanghai");
+  expect(() =>
+    loadPlatformConfig({ REGIONAL_TIME_ZONE: "Invalid/Timezone" }),
+  ).toThrow(
+    expect.objectContaining<Partial<ConfigLoadError>>({
+      code: "CONFIG_INVALID_VALUE",
+      fieldPath: "regional.timeZone",
+    }),
+  );
+  expect(() =>
+    loadPlatformConfig({
+      PASSWORD_MIN_LENGTH: "64",
+      PASSWORD_MAX_LENGTH: "32",
+    }),
+  ).toThrow(
+    expect.objectContaining<Partial<ConfigLoadError>>({
+      code: "CONFIG_INVALID_VALUE",
+      fieldPath: "security.passwordMinLength",
+    }),
+  );
+  expect(() => loadPlatformConfig({ MAIL_ENABLED: "true" })).toThrow(
+    expect.objectContaining<Partial<ConfigLoadError>>({
+      code: "CONFIG_INVALID_VALUE",
+      fieldPath: "mail.fromAddress",
+    }),
+  );
+});
+
 test("strict loader 对 unknown 与错误类型 fail-fast 且不回显输入值", () => {
   expect(() => loadPlatformConfig({ PLATFORM_ENABLE_AII: "true" })).toThrow(
     expect.objectContaining<Partial<ConfigLoadError>>({

package/template/packages/config/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@southwind-ai/config",
-  "version": "0.1.3",
+  "version": "0.2.0",
   "license": "UNLICENSED",
   "type": "module",
   "engines": {

package/template/packages/config/src/platform.ts

@@ -34,7 +34,23 @@ export interface PlatformConfig {
     sessionCookieName: string;
     sessionTtlSeconds: number;
     passwordHash: "argon2id";
+    passwordMinLength: number;
+    passwordMaxLength: number;
   };
+  storage: {
+    bulkDataMaxByteSize: number;
+    brandingLogoMaxByteSize: number;
+  };
+  mail: {
+    enabled: boolean;
+    host: string;
+    port: number;
+    secure: boolean;
+    fromAddress: string;
+    connectTimeoutMs: number;
+    smtpUrl?: string;
+  };
+  regional: { timeZone: string };
   license: {
     enabled: boolean;
     publicKeyId?: string;
@@ -60,56 +76,111 @@ export interface ProjectConfig {
   modules: string[];
 }
 
-const platformSchema: z.ZodType<PlatformConfig> = z.strictObject({
-  name: z.string().trim().min(1).max(120),
-  logoUrl: z.string().trim().url().optional(),
-  enableAI: z.boolean(),
-  database: z.strictObject({
-    dialect: z.enum(["postgresql", "mysql", "dm", "kingbase"]),
-    url: z.string().trim().min(1).optional(),
-    legacyRuoYiMysqlUrl: z.string().trim().min(1).optional(),
-    legacyRuoYiRedisUrl: z.string().trim().min(1).optional(),
-  }),
-  cache: z.strictObject({
-    redisUrl: z.string().trim().min(1).optional(),
-    healthTimeoutMs: z.number().int().min(50).max(10_000),
-  }),
-  security: z.strictObject({
-    sessionCookieName: z.string().trim().min(1).max(120),
-    sessionTtlSeconds: z.number().int().min(60).max(2_592_000),
-    passwordHash: z.literal("argon2id"),
-  }),
-  license: z.strictObject({
-    enabled: z.boolean(),
-    publicKeyId: z.string().trim().min(1).optional(),
-    publicKey: z.string().trim().min(1).optional(),
-    machineCode: z.string().trim().min(1).optional(),
-    versions: z
-      .unknown()
-      .transform((value, context) => {
-        try {
-          return parseLicenseCatalog(value);
-        } catch (error) {
-          context.addIssue({
-            code: "custom",
-            message: error instanceof Error ? error.message : "版本目录无效",
-          });
-          return z.NEVER;
-        }
-      })
-      .optional(),
-  }),
-  audit: z.strictObject({
-    enabled: z.boolean(),
-    redactFields: z.array(z.string().min(1)).min(1),
-  }),
-  compatibility: z.strictObject({
-    ruoyiVue: z.strictObject({
+const platformSchema: z.ZodType<PlatformConfig> = z
+  .strictObject({
+    name: z.string().trim().min(1).max(120),
+    logoUrl: z.string().trim().url().optional(),
+    enableAI: z.boolean(),
+    database: z.strictObject({
+      dialect: z.enum(["postgresql", "mysql", "dm", "kingbase"]),
+      url: z.string().trim().min(1).optional(),
+      legacyRuoYiMysqlUrl: z.string().trim().min(1).optional(),
+      legacyRuoYiRedisUrl: z.string().trim().min(1).optional(),
+    }),
+    cache: z.strictObject({
+      redisUrl: z.string().trim().min(1).optional(),
+      healthTimeoutMs: z.number().int().min(50).max(10_000),
+    }),
+    security: z.strictObject({
+      sessionCookieName: z.string().trim().min(1).max(120),
+      sessionTtlSeconds: z.number().int().min(60).max(2_592_000),
+      passwordHash: z.literal("argon2id"),
+      passwordMinLength: z.number().int().min(8).max(128),
+      passwordMaxLength: z.number().int().min(12).max(512),
+    }),
+    storage: z.strictObject({
+      bulkDataMaxByteSize: z
+        .number()
+        .int()
+        .min(1024)
+        .max(10 * 1024 ** 3),
+      brandingLogoMaxByteSize: z
+        .number()
+        .int()
+        .min(1024)
+        .max(50 * 1024 ** 2),
+    }),
+    mail: z.strictObject({
       enabled: z.boolean(),
-      runtimeReadonly: z.boolean(),
+      host: z.string().trim().max(253),
+      port: z.number().int().min(1).max(65_535),
+      secure: z.boolean(),
+      fromAddress: z.string().trim().max(320),
+      connectTimeoutMs: z.number().int().min(100).max(120_000),
+      smtpUrl: z.string().trim().min(1).optional(),
     }),
-  }),
-});
+    regional: z.strictObject({
+      timeZone: z
+        .string()
+        .trim()
+        .min(1)
+        .max(100)
+        .refine(isSupportedTimeZone, "时区必须是有效的 IANA 时区"),
+    }),
+    license: z.strictObject({
+      enabled: z.boolean(),
+      publicKeyId: z.string().trim().min(1).optional(),
+      publicKey: z.string().trim().min(1).optional(),
+      machineCode: z.string().trim().min(1).optional(),
+      versions: z
+        .unknown()
+        .transform((value, context) => {
+          try {
+            return parseLicenseCatalog(value);
+          } catch (error) {
+            context.addIssue({
+              code: "custom",
+              message: error instanceof Error ? error.message : "版本目录无效",
+            });
+            return z.NEVER;
+          }
+        })
+        .optional(),
+    }),
+    audit: z.strictObject({
+      enabled: z.boolean(),
+      redactFields: z.array(z.string().min(1)).min(1),
+    }),
+    compatibility: z.strictObject({
+      ruoyiVue: z.strictObject({
+        enabled: z.boolean(),
+        runtimeReadonly: z.boolean(),
+      }),
+    }),
+  })
+  .superRefine((config, context) => {
+    if (config.security.passwordMinLength > config.security.passwordMaxLength) {
+      context.addIssue({
+        code: "custom",
+        path: ["security", "passwordMinLength"],
+        message: "密码最小长度不能大于最大长度",
+      });
+    }
+    if (config.mail.enabled && !config.mail.fromAddress) {
+      context.addIssue({
+        code: "custom",
+        path: ["mail", "fromAddress"],
+        message: "启用邮件传输时必须配置发件地址",
+      });
+    }
+    if (config.mail.enabled && !config.mail.smtpUrl && !config.mail.host) {
+      context.addIssue({
+        code: "custom",
+        path: ["mail", "host"],
+        message: "启用邮件传输时必须配置 SMTP URL 或主机",
+      });
+    }
+  });
 
 export const platformConfigDefinition = defineModuleConfig<PlatformConfig>({
   key: "platform.runtime",
@@ -118,9 +189,13 @@ export const platformConfigDefinition = defineModuleConfig<PlatformConfig>({
   ownedEnvironmentPrefixes: [
     "PLATFORM_",
     "DATABASE_",
+    "PASSWORD_",
     "REDIS_",
     "RUOYI_",
     "SESSION_",
+    "STORAGE_",
+    "MAIL_",
+    "REGIONAL_",
     "AUDIT_",
   ],
   ownedEnvironmentKeys: [
@@ -153,6 +228,43 @@ export const platformConfigDefinition = defineModuleConfig<PlatformConfig>({
       strictInteger,
     ),
     value("PLATFORM_PASSWORD_HASH", "security.passwordHash", "argon2id"),
+    value(
+      "PASSWORD_MIN_LENGTH",
+      "security.passwordMinLength",
+      12,
+      strictInteger,
+    ),
+    value(
+      "PASSWORD_MAX_LENGTH",
+      "security.passwordMaxLength",
+      128,
+      strictInteger,
+    ),
+    value(
+      "STORAGE_BULK_DATA_MAX_BYTE_SIZE",
+      "storage.bulkDataMaxByteSize",
+      512 * 1024 * 1024,
+      strictInteger,
+    ),
+    value(
+      "STORAGE_BRANDING_LOGO_MAX_BYTE_SIZE",
+      "storage.brandingLogoMaxByteSize",
+      5 * 1024 * 1024,
+      strictInteger,
+    ),
+    value("MAIL_ENABLED", "mail.enabled", false, strictBoolean),
+    value("MAIL_HOST", "mail.host", ""),
+    value("MAIL_PORT", "mail.port", 587, strictInteger),
+    value("MAIL_SECURE", "mail.secure", false, strictBoolean),
+    value("MAIL_FROM_ADDRESS", "mail.fromAddress", ""),
+    value(
+      "MAIL_CONNECT_TIMEOUT_MS",
+      "mail.connectTimeoutMs",
+      10_000,
+      strictInteger,
+    ),
+    secret("MAIL_SMTP_URL", "mail.smtpUrl"),
+    value("REGIONAL_TIME_ZONE", "regional.timeZone", "Asia/Shanghai"),
     value("LICENSE_ENABLED", "license.enabled", true, strictBoolean),
     value("LICENSE_PUBLIC_KEY_ID", "license.publicKeyId"),
     value("LICENSE_PUBLIC_KEY", "license.publicKey"),
@@ -210,3 +322,12 @@ function value(
 function secret(key: string, path: string) {
   return { key, path, secret: { provider: "env" as const } };
 }
+
+function isSupportedTimeZone(value: string): boolean {
+  try {
+    new Intl.DateTimeFormat("zh-CN", { timeZone: value });
+    return true;
+  } catch {
+    return false;
+  }
+}

package/template/packages/database/drizzle/0035_material_nightshade.sql

@@ -0,0 +1,10 @@
+CREATE TABLE "notification_favorites" (
+	"notification_id" varchar(64) NOT NULL,
+	"user_id" varchar(64) NOT NULL,
+	"favorited_at" timestamp with time zone DEFAULT now() NOT NULL,
+	CONSTRAINT "notification_favorites_notification_id_user_id_pk" PRIMARY KEY("notification_id","user_id")
+);
+--> statement-breakpoint
+ALTER TABLE "notification_favorites" ADD CONSTRAINT "notification_favorites_notification_id_platform_notifications_id_fk" FOREIGN KEY ("notification_id") REFERENCES "public"."platform_notifications"("id") ON DELETE restrict ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "notification_favorites" ADD CONSTRAINT "notification_favorites_user_id_users_id_fk" FOREIGN KEY ("user_id") REFERENCES "public"."users"("id") ON DELETE restrict ON UPDATE no action;--> statement-breakpoint
+CREATE INDEX "idx_notification_favorites_user" ON "notification_favorites" USING btree ("user_id","favorited_at");

package/template/packages/database/drizzle/0036_hesitant_speed.sql

@@ -0,0 +1,35 @@
+CREATE TABLE "notification_revisions" (
+	"notification_id" varchar(64) NOT NULL,
+	"revision" integer NOT NULL,
+	"title" varchar(120) NOT NULL,
+	"summary" varchar(240) NOT NULL,
+	"content" text NOT NULL,
+	"category" varchar(40) NOT NULL,
+	"edited_at" timestamp with time zone NOT NULL,
+	"edited_by" varchar(64) NOT NULL,
+	CONSTRAINT "notification_revisions_notification_id_revision_pk" PRIMARY KEY("notification_id","revision")
+);
+--> statement-breakpoint
+ALTER TABLE "platform_notifications" ADD COLUMN "revision" integer DEFAULT 1 NOT NULL;--> statement-breakpoint
+ALTER TABLE "notification_revisions" ADD CONSTRAINT "notification_revisions_notification_id_platform_notifications_id_fk" FOREIGN KEY ("notification_id") REFERENCES "public"."platform_notifications"("id") ON DELETE restrict ON UPDATE no action;--> statement-breakpoint
+CREATE INDEX "idx_notification_revisions_time" ON "notification_revisions" USING btree ("notification_id","edited_at");--> statement-breakpoint
+INSERT INTO "notification_revisions" (
+	"notification_id",
+	"revision",
+	"title",
+	"summary",
+	"content",
+	"category",
+	"edited_at",
+	"edited_by"
+)
+SELECT
+	"id",
+	1,
+	"title",
+	"summary",
+	"content",
+	"category",
+	"published_at",
+	"created_by"
+FROM "platform_notifications";

package/template/packages/database/drizzle/0037_absent_nick_fury.sql

@@ -0,0 +1,2 @@
+CREATE UNIQUE INDEX "uk_departments_single_root" ON "departments" USING btree (((1))) WHERE "departments"."parent_id" is null and "departments"."deleted_at" is null;--> statement-breakpoint
+ALTER TABLE "departments" ADD CONSTRAINT "departments_parent_not_self" CHECK ("departments"."parent_id" is null or "departments"."parent_id" <> "departments"."id");

package/template/packages/database/drizzle/0038_uneven_wasp.sql

@@ -0,0 +1,38 @@
+CREATE TABLE "notification_delivery_outbox" (
+	"id" varchar(64) PRIMARY KEY NOT NULL,
+	"notification_id" varchar(64) NOT NULL,
+	"user_id" varchar(64) NOT NULL,
+	"channel" varchar(16) NOT NULL,
+	"status" varchar(16) NOT NULL,
+	"subject" varchar(120) NOT NULL,
+	"content" text NOT NULL,
+	"attempt_count" integer DEFAULT 0 NOT NULL,
+	"next_attempt_at" timestamp with time zone DEFAULT now() NOT NULL,
+	"lease_token" varchar(64),
+	"lease_expires_at" timestamp with time zone,
+	"delivered_at" timestamp with time zone,
+	"provider_message_id" varchar(180),
+	"last_error_code" varchar(64),
+	"created_at" timestamp with time zone DEFAULT now() NOT NULL,
+	"updated_at" timestamp with time zone DEFAULT now() NOT NULL
+);
+--> statement-breakpoint
+CREATE TABLE "notification_preferences" (
+	"user_id" varchar(64) PRIMARY KEY NOT NULL,
+	"enabled_channels" jsonb DEFAULT '[]'::jsonb NOT NULL,
+	"disabled_categories" jsonb DEFAULT '[]'::jsonb NOT NULL,
+	"updated_at" timestamp with time zone DEFAULT now() NOT NULL,
+	"updated_by" varchar(64) NOT NULL
+);
+--> statement-breakpoint
+ALTER TABLE "platform_notifications" ADD COLUMN "scheduled_for" timestamp with time zone;--> statement-breakpoint
+ALTER TABLE "platform_notifications" ADD COLUMN "recipient_user_ids" jsonb DEFAULT '[]'::jsonb NOT NULL;--> statement-breakpoint
+ALTER TABLE "platform_notifications" ADD COLUMN "recipient_department_ids" jsonb DEFAULT '[]'::jsonb NOT NULL;--> statement-breakpoint
+ALTER TABLE "platform_notifications" ADD COLUMN "include_child_departments" boolean DEFAULT false NOT NULL;--> statement-breakpoint
+ALTER TABLE "platform_notifications" ADD COLUMN "delivery_channels" jsonb DEFAULT '[]'::jsonb NOT NULL;--> statement-breakpoint
+ALTER TABLE "notification_delivery_outbox" ADD CONSTRAINT "notification_delivery_outbox_notification_id_platform_notifications_id_fk" FOREIGN KEY ("notification_id") REFERENCES "public"."platform_notifications"("id") ON DELETE restrict ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "notification_delivery_outbox" ADD CONSTRAINT "notification_delivery_outbox_user_id_users_id_fk" FOREIGN KEY ("user_id") REFERENCES "public"."users"("id") ON DELETE restrict ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "notification_preferences" ADD CONSTRAINT "notification_preferences_user_id_users_id_fk" FOREIGN KEY ("user_id") REFERENCES "public"."users"("id") ON DELETE restrict ON UPDATE no action;--> statement-breakpoint
+CREATE UNIQUE INDEX "uk_notification_delivery_target" ON "notification_delivery_outbox" USING btree ("notification_id","user_id","channel");--> statement-breakpoint
+CREATE INDEX "idx_notification_delivery_claim" ON "notification_delivery_outbox" USING btree ("status","next_attempt_at","lease_expires_at");--> statement-breakpoint
+CREATE INDEX "idx_notification_delivery_notification" ON "notification_delivery_outbox" USING btree ("notification_id");