dialog-survey 1.1.0

package/CHANGELOG.md

@@ -0,0 +1,95 @@
+# Changelog
+
+All notable changes to this project will be documented in this file.
+
+The format is based on [Keep a Changelog](https://keepachangelog.com/),
+and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
+
+## [1.1.0] - 2026-06-16
+
+### Added
+- **CLI for npx-based install**: `npx dialog-survey install/uninstall/start/stop/status/help` — zero external dependencies, interactive + non-interactive modes, PM2 integration, health check polling
+- **npm publish pipeline**: `.npmignore` + GitHub Actions workflow for automated publishing on `v*` tags
+- **25 CLI unit tests**: parseArgs, config generation, prerequisite checks, command routing
+
+### Changed
+- **Project renamed**: `interview-bot` → `dialog-survey` (npm package name, PM2 app name, Docker container names, all references)
+- **Version bump**: 1.0.4 → 1.1.0
+
+### Fixed
+- **Windows CJK path ESM entry check**: `pathToFileURL(normalize(process.argv[1])).href` comparison — fixes server startup failure on Windows with Chinese characters in path — **Fixes #59-5**
+- **System DATABASE_URL overrides .env**: `dotenv.config({ override: process.env.NODE_ENV !== 'test' })` — conditional override preserves test isolation via `vi.stubEnv()` — **Fixes #59-2**
+- **Prisma generate file lock**: deploy.sh now stops service BEFORE `npm ci` to prevent DLL lock — **Fixes #59-3**
+- **Windows colon filenames**: `.delphi/` added to `.gitignore`, removed from git tracking — **Fixes #59-1**
+- **npm audit vulnerabilities**: all dependencies updated, 0 vulnerabilities — **Fixes #59-4**
+
+### Quality
+- 9 atomic commits on `sprint/2026-06-16-01`
+- Code walkthrough review: APPROVED (2 blocking issues caught and fixed)
+- Test-specification alignment: 91.3% (21/23 acceptance criteria fully covered)
+- Quality gates: 8-10/10 across all commits
+- 622 unit tests pass (95 integration tests blocked by PostgreSQL env — not code regression)
+
+## [1.0.4] - 2026-06-16
+
+### Added
+- Phone member support: add members via phone number, auto-resolve to DingTalk userId — **Closes #54**
+- DingTalk `getUserIdByMobile()` API client with token caching and PII masking (`138****1234`)
+- Docker deployment: multi-stage Dockerfile + docker-compose.yml (PG16 + app) — **Closes #53**
+- 12 phone-specific tests + 7 dingtalk mobile lookup tests
+
+### Quality
+- Pre-commit hook: Score 10.0/10, all 9 gates passed
+- Full regression: 73 files / 750 tests pass, `tsc --noEmit` clean
+
+## [1.0.3] - 2026-06-15
+
+### Fixed
+- Fix lint errors: remove redundant type annotation in `audit-cleanup.service.ts` (`noInferrableTypes`)
+- Fix lint errors: replace `as any` with `as Record<string, unknown>` in `template.repository.ts` (`noExplicitAny`)
+- Run full regression: 71 files / 731 tests pass, `biome lint src` clean
+
+## [1.0.2] - 2026-06-14
+
+### Security
+- Redact DINGTALK_CLIENT_SECRET from `.omo/` and `.sisyphus/` plan docs
+- Add `.gitleaks.toml` for pre-commit secret scanning (Gate 8)
+- Replace side-effect `import 'dotenv/config'` with explicit `dotenv.config()`
+- Add `.omo/` and `.sisyphus/` to `.gitignore` to prevent future secret leaks
+- Add npm `overrides` for `qs@6.15.2` to resolve moderate vulnerability (GHSA-q8mj-m7cp-5q26)
+
+### Fixed
+- Fix `server-api.test.ts` and `admin-tree.test.ts`: `buildApp()` now returns `{fastify, prisma}` — use `result.fastify.inject` instead of `app.inject`
+- Export `checkDatabaseConnection` from `src/server.ts` for test access
+- Fix `dingtalk-services.test.ts`: update file-existence tests for refactored modules
+- Fix `security.test.ts`: mock `apiKey.findFirst` instead of `auditLog.findFirst`
+- Fix `health-api.test.ts`: align DingTalk env var checks with Stream mode
+- Add `postinstall` script for Prisma Client auto-generation - **Fixes #48**
+- Remove deprecated webhook module (replaced by DingTalk Stream mode) - **Fixes #43**
+- Add `await prisma.$disconnect()` to graceful shutdown - **Fixes #41**
+- Add AuditLog TTL (expiresAt + @@index), cleanup service, and daily cron at 2:00 AM - **Fixes #42**
+- Reduce AuditLog verbosity: only log mutations (POST/PUT/DELETE) and admin paths
+- Close false-positive env-config issue (#45): DingTalk Stream mode already handles this
+
+### Quality
+- Pre-commit hook: Score 10.0/10, all 9 gates passed
+- TDD: audit-cleanup service had tests written before implementation
+
+## [1.0.1] - 2026-06-13
+
+### Fixed
+- Extract `formatTemplateResponse` helper in `src/api/templates.ts` (DRY principle)
+- Extract `_loadStateWithMessages` private method in `src/repositories/interview-state.repository.ts` (eliminate code duplication)
+- Extract `_buildUpdateData` private method in `src/repositories/template.repository.ts` (eliminate code duplication)
+- Fix empty catch block in `src/services/interview-plan-send.service.ts` (add warn logging instead of silent suppression) - **Fixes #40**
+- Fix test assertions: void expression checks in `tests/dingtalk-signature.test.ts`
+- Fix missing imports and mock types in `tests/admin-templates.test.ts`
+- Fix undefined access using optional chaining in `tests/interviewing-node.test.ts`
+- Add missing InterviewState fields in `tests/state-persistence.test.ts`
+- Replace `jest.Mock` with vitest Mock type in `tests/dingtalk-stream.test.ts` - **Fixes #44**
+- Update AGENTS.md: document third-party library exclusion rule for architecture checks (public/js/*.min.js, node_modules/)
+
+### Quality
+- Pre-commit hook: Score 10.0/10, all 9 gates passed
+- Resolved Gate 6 Architecture Code Clone warnings for source files
+

package/README.md

@@ -0,0 +1,242 @@
+# Interview Bot
+
+AI-powered interview robot with intelligent follow-up questions, multi-turn context memory, and voice input support.
+
+## Features
+
+- **AI智能追问**: 基于LLM的完全智能型追问能力
+- **多轮上下文记忆**: 支持跨多天、多条消息的对话连贯性
+- **语音输入**: 支持语音消息回答
+- **异步消息式访谈**: 被访谈者可以在碎片时间回答
+- **自动生成报告**: 访谈结束后自动生成Markdown报告
+- **私有部署**: 数据全留存，确保安全性
+
+## Tech Stack
+
+- **对话引擎**: LangGraph.js
+- **LLM服务**: 阿里云通义千问 (DashScope)
+- **语音识别**: 阿里云Fun-ASR
+- **消息平台**: 钉钉
+- **数据存储**: PostgreSQL (Prisma ORM)
+- **Web框架**: Fastify
+- **语言**: TypeScript (strict mode)
+
+## Quick Start
+
+### 1. 安装依赖
+
+```bash
+cd dialog-survey
+npm install
+```
+
+### 2. 配置环境变量
+
+```bash
+cp .env.example .env
+# 编辑 .env 填入你的配置
+```
+
+### 3. 初始化数据库
+
+```bash
+npx prisma generate
+npx prisma db push
+```
+
+### 4. 启动服务
+
+```bash
+npm run dev
+```
+
+## 项目结构
+
+```
+dialog-survey/
+├── src/
+│   ├── api/          # API层 (Fastify routes)
+│   ├── core/         # 核心逻辑 (LangGraph StateGraph)
+│   ├── services/    # 服务层 (LLM, ASR, 钉钉)
+│   ├── repositories/ # 数据访问层 (Prisma)
+│   └── utils/       # 工具函数
+├── tests/           # 测试 (Vitest)
+├── prisma/          # Prisma schema
+├── templates/       # 访谈模板
+├── reports/         # 生成的报告
+├── package.json
+├── tsconfig.json
+└── vitest.config.ts
+```
+
+## 开发命令
+
+```bash
+# 类型检查
+npm run type-check
+
+# 运行测试
+npm test
+
+# 测试覆盖率
+npm run test:coverage
+
+# 代码检查
+npm run lint
+
+# 构建
+npm run build
+```
+
+## 部署
+
+### 环境要求
+
+| 组件 | 版本/说明 |
+|------|-----------|
+| Node.js | >= 20.0.0 (推荐 v20 LTS) |
+| PostgreSQL | 14+ |
+| npm | 随 Node.js 自带 |
+| 操作系统 | Linux / macOS / Windows |
+
+### 部署步骤
+
+#### 1. 克隆或复制项目
+
+```bash
+# 推荐: 从 Git 仓库克隆
+git clone <repo-url> dialog-survey
+cd dialog-survey
+
+# 或: 直接拷贝项目目录到目标机器
+```
+
+#### 2. 安装依赖
+
+```bash
+npm install
+```
+
+#### 3. 配置环境变量
+
+```bash
+cp .env.example .env
+# 编辑 .env，填入实际配置值（见下方环境变量说明）
+```
+
+#### 4. 初始化数据库
+
+```bash
+npx prisma generate   # 生成 Prisma Client
+npx prisma db push     # 同步 schema 到数据库
+```
+
+#### 5. 启动服务
+
+**开发模式** (热重载):
+```bash
+npm run dev
+# 默认监听 http://0.0.0.0:3001
+```
+
+**生产模式** (推荐用于长期运行):
+```bash
+npm run build   # 编译到 dist/
+node dist/src/server.ts
+```
+
+或使用 PM2 管理进程:
+```bash
+npm install -g pm2
+pm2 start dist/src/server.ts --name dialog-survey
+pm2 save
+pm2 startup  # 设置开机自启
+```
+
+### 环境变量说明
+
+| 变量名 | 说明 | 示例 |
+|--------|------|------|
+| `NODE_ENV` | 运行环境 | `production` |
+| `PORT` | 服务端口 | `3001` |
+| `HOST` | 监听地址 | `0.0.0.0` |
+| `DATABASE_URL` | PostgreSQL 连接串 | `postgresql://user:pass@localhost:5432/interview_bot?schema=public` |
+| `DASHSCOPE_API_KEY` | 阿里云通义千问 API Key | `sk-xxx` |
+| `DINGTALK_APP_KEY` | 钉钉 AppKey | 开放平台获取 |
+| `DINGTALK_APP_SECRET` | 钉钉 AppSecret | 开放平台获取 |
+| `DINGTALK_AGENT_ID` | 钉钉 AgentId | 开放平台获取 |
+| `PUBLIC_URL` | 公网回调地址 | `https://your-domain.com` |
+| `FUN_ASR_API_KEY` | 阿里云 Fun-ASR API Key | 语音识别用 |
+| `ENCRYPTION_KEY` | AES 加密密钥 | 32 字节 hex 字符串 |
+| `ADMIN_API_KEY` | 管理后台 API Key | 自定义密钥 |
+| `REPORTS_DIR` | 报告存储目录 | `./reports` |
+| `LOG_LEVEL` | 日志级别 | `info` |
+
+安全起见，`ENCRYPTION_KEY` 可通过 Node.js 生成:
+```bash
+node -e "console.log(require('crypto').randomBytes(16).toString('hex'))"
+```
+
+### 健康检查
+
+服务启动后可访问:
+```bash
+curl http://localhost:3001/health
+```
+
+### Docker 部署 (推荐)
+
+使用 Docker Compose 一键部署应用和 PostgreSQL 数据库。
+
+#### 1. 配置环境变量
+
+```bash
+cp .env.example .env
+# 编辑 .env，填入 DingTalk、LLM、ASR 等实际配置值
+```
+
+#### 2. 启动服务
+
+```bash
+# 构建并启动所有服务
+docker-compose up -d
+
+# 查看日志
+docker-compose logs -f app
+
+# 查看所有服务状态
+docker-compose ps
+```
+
+#### 3. 验证部署
+
+服务启动后，访问健康检查端点：
+```bash
+curl http://localhost:3001/health
+```
+
+#### 常用 Docker 命令
+
+```bash
+# 停止服务
+docker-compose down
+
+# 重启服务
+docker-compose restart
+
+# 查看数据库日志
+docker-compose logs -f postgres
+
+# 进入数据库 shell
+docker-compose exec postgres psql -U interview_bot -d interview_bot
+
+# 重新构建应用镜像
+docker-compose build --no-cache app
+docker-compose up -d app
+```
+
+### 预提交检查 (开发时)
+
+```bash
+npm run type-check && npm run lint && npm run test:coverage
+```

package/VERSION

@@ -0,0 +1 @@
+1.1.0

package/dist/api/admin-templates.d.ts

@@ -0,0 +1,15 @@
+import type { FastifyInstance } from 'fastify';
+import type { InterviewRepository } from '../repositories/interview.repository.js';
+import type { TemplateRepository } from '../repositories/template.repository.js';
+import type { AnalysisService } from '../services/analysis.service.js';
+import type { AnalyticsService } from '../services/analytics.service.js';
+import type { InterviewPlanService } from '../services/interview-plan.service.js';
+export interface AdminTemplatesRoutesOptions {
+    templateRepo: TemplateRepository;
+    interviewPlanService: InterviewPlanService;
+    interviewRepo: InterviewRepository;
+    analysisService: AnalysisService;
+    analyticsService: AnalyticsService;
+}
+export declare function adminTemplatesRoutes(fastify: FastifyInstance, opts: AdminTemplatesRoutesOptions): Promise<void>;
+//# sourceMappingURL=admin-templates.d.ts.map

package/dist/api/admin-templates.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"admin-templates.d.ts","sourceRoot":"","sources":["../../src/api/admin-templates.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAgC,MAAM,SAAS,CAAC;AAG7E,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,yCAAyC,CAAC;AACnF,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,wCAAwC,CAAC;AACjF,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,iCAAiC,CAAC;AACvE,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,kCAAkC,CAAC;AACzE,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,uCAAuC,CAAC;AAGlF,MAAM,WAAW,2BAA2B;IAC1C,YAAY,EAAE,kBAAkB,CAAC;IACjC,oBAAoB,EAAE,oBAAoB,CAAC;IAC3C,aAAa,EAAE,mBAAmB,CAAC;IACnC,eAAe,EAAE,eAAe,CAAC;IACjC,gBAAgB,EAAE,gBAAgB,CAAC;CACpC;AAiHD,wBAAsB,oBAAoB,CACxC,OAAO,EAAE,eAAe,EACxB,IAAI,EAAE,2BAA2B,iBAsmBlC"}