koa-boot-runtime 1.0.0

package/dist/config/index.d.ts

@@ -0,0 +1,144 @@
+declare const _default: {
+    app: {
+        port: string | number;
+        nodeEnv: string;
+    };
+    database: {
+        dialect: string;
+        host: string;
+        port: number;
+        username: string;
+        password: string;
+        database: string;
+    };
+    jwt: {
+        secret: string;
+        expiresIn: string;
+    };
+    supabase: {
+        url: string | undefined;
+        serviceKey: string | undefined;
+        anonKey: string | undefined;
+    };
+    redis: {
+        url: string;
+    };
+    scalar: {
+        routePrefix: string;
+        specUrl: string;
+        theme: string;
+        layout: string;
+        darkMode: boolean;
+        localization: {
+            locale: string;
+        };
+    };
+    /**
+     * 权限控制配置
+     *
+     * strictMode（安全开关）：
+     * - true（生产推荐）：未在 sys_permissions 中注册的 API 端点，默认 403 拒绝
+     * - false（开发默认）：未注册的端点默认放行，方便联调
+     *
+     * 环境变量：PERMISSION_STRICT_MODE=true
+     *
+     * menuBypassRoleFilter（调试开关）：
+     * - true：/system/user/current 返回全量菜单（绕过角色-菜单绑定过滤），
+     *   仅用于开发/联调阶段角色菜单尚未配置时快速验证页面
+     * - false（默认）：按用户绑定角色过滤菜单
+     * - 安全约束：由服务端环境变量控制（客户端无法传参伪造），
+     *   且在 NODE_ENV=production 时强制失效（见 user.service.ts）
+     *
+     * 环境变量：MENU_BYPASS_ROLE_FILTER=true
+     */
+    permission: {
+        strictMode: boolean;
+        menuBypassRoleFilter: boolean;
+    };
+    /**
+     * 外部通知方式选择（V6.2）：
+     * 内部通知（站内信 sysMessage）为独立链路不受影响；此开关只决定外部渠道（旁路推送）走哪家。
+     * - sms   = 阿里云短信
+     * - email = SMTP 邮件
+     * - wecom = 企业微信应用消息
+     * - none / 空 = 关闭外部通知（仅站内信）
+     */
+    notify: {
+        externalChannel: string;
+    };
+    /**
+     * APP 应用推送（V6.3）：UniPush 2.0 独立链路。
+     * 独立开关 APP_PUSH_ENABLED=true 启用，不受 EXTERNAL_NOTIFY_CHANNEL 影响（两者可同时启用）。
+     * 打包 APP 时：前端 manifest 勾选 Push 模块，登录后调用 uni.getPushClientId 获取 cid 并上报绑定用户。
+     */
+    appPush: {
+        enabled: boolean;
+        /** DCloud 开发者中心 → UniPush 2.0 的 appid（即 manifest 的 appid） */
+        appid: string;
+        appkey: string;
+        /** REST API 鉴权密钥（HMAC 签名用，请勿泄露） */
+        masterSecret: string;
+    };
+    /** SMTP 邮件（EXTERNAL_NOTIFY_CHANNEL=email 时启用） */
+    email: {
+        host: string;
+        port: number;
+        /** true = 465 端口 SSL/TLS（默认）；false = 587 端口 STARTTLS */
+        secure: boolean;
+        /** 发件邮箱账号（通常与 from 的邮箱部分相同） */
+        user: string;
+        /** 邮箱授权码（非登录密码，需在邮箱设置中开启 SMTP 并生成） */
+        pass: string;
+        /** 发件人显示（nodemailer 支持 "名称 <addr>" 格式，如 "WIS供应链 <noreply@example.com>"） */
+        from: string;
+    };
+    /** 阿里云短信（EXTERNAL_NOTIFY_CHANNEL=sms 时启用） */
+    sms: {
+        accessKeyId: string;
+        accessKeySecret: string;
+        /** 短信签名（短信服务控制台 → 签名管理，如「WIS供应链」） */
+        signName: string;
+        /** 短信模板 Code（短信服务控制台 → 模板管理，如 SMS_xxxx） */
+        templateCode: string;
+        /** 阿里云 OpenAPI 地域，短信固定使用 dysmsapi 终端节点，此处仅用于区分（默认 ap-southeast-1 外网直连） */
+        region: string;
+    };
+    /**
+     * 企业微信应用消息（V6.0）：消息通知二期，服务端推送不校验域名。
+     * 注意：V6.1 起渠道启用与否改由 EXTERNAL_NOTIFY_CHANNEL 决定，此处的 enabled
+     * 仅表示企微凭证是否可用（EXTERNAL_NOTIFY_CHANNEL=wecom 时生效）
+     */
+    wecom: {
+        enabled: boolean;
+        corpId: string;
+        agentId: string;
+        secret: string;
+        /** 按手机号自动解析企微 userid（未绑定用户时），解析成功回写 sys_users.wechat_userid */
+        autoBind: boolean;
+        /** admin 端 H5 基础地址，textcard 跳转链接前缀（本地开发可指向 dev server） */
+        h5BaseUrl: string;
+    };
+    /** 阿里云 OSS 文件存储配置 */
+    oss: {
+        accessKeyId: string;
+        accessKeySecret: string;
+        bucket: string;
+        endpoint: string;
+        region: string;
+    };
+    /**
+     * DeepSeek AI 智能助手（V7.0）：Function Calling 工具调用查询业务数据。
+     * - AI_ENABLED=true 开启；AI_API_KEY 必填（https://platform.deepseek.com）
+     * - AI_BASE_URL 默认 DeepSeek 官方，兼容 OpenAI 格式可指向任意代理
+     */
+    ai: {
+        enabled: boolean;
+        apiKey: string;
+        baseUrl: string;
+        model: string;
+        /** 厂商扩展参数透传（JSON 字符串）。例：DeepSeek V4 Pro 思考模式 {"thinking":{"type":"enabled"}} */
+        extraBody: Record<string, unknown>;
+    };
+};
+export default _default;
+//# sourceMappingURL=index.d.ts.map

package/dist/config/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/config/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;IAqEE;;;;;;;;;;;;;;;;;OAiBG;;;;;IAKH;;;;;;;OAOG;;;;IAIH;;;;OAIG;;;QAGD,6DAA6D;;;QAG7D,mCAAmC;;;IAGrC,iDAAiD;;;;QAI/C,wDAAwD;;QAExD,+BAA+B;;QAE/B,sCAAsC;;QAEtC,2EAA2E;;;IAG7E,6CAA6C;;;;QAI3C,qCAAqC;;QAErC,2CAA2C;;QAE3C,0EAA0E;;;IAG5E;;;;OAIG;;;;;;QAMD,+DAA+D;;QAE/D,0DAA0D;;;IAG5D,qBAAqB;;;;;;;;IAQrB;;;;OAIG;;;;;;QAOD,gFAAgF;;;;AA3IpF,wBA8IE"}

package/dist/config/index.js

@@ -0,0 +1,180 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+const dotenv_1 = __importDefault(require("dotenv"));
+/**
+ * 环境变量加载策略（优先级从高到低）：
+ *
+ * 1. .env.{NODE_ENV}   — 环境专属配置（最高优先级）
+ *    - 开发：.env.development
+ *    - 生产：.env.production
+ *
+ * 2. .env              — 兜底默认值
+ *    - Prisma CLI 也依赖此文件读取 DATABASE_URL
+ *    - 只填充环境专属文件中未定义的变量
+ *
+ * 运行 `npm run dev` 时 cross-env 已设置 NODE_ENV=development，
+ * 生产部署时由运行环境注入 NODE_ENV=production。
+ */
+// 1. 先加载环境专属文件（高优先级）
+const envFile = `.env.${process.env.NODE_ENV || 'development'}`;
+dotenv_1.default.config({ path: envFile });
+// 2. 再加载 .env 兜底（不会覆盖已在步骤1中设值的变量）
+dotenv_1.default.config();
+/** 解析可选的厂商扩展参数（JSON 字符串 → 对象；解析失败返回空对象） */
+function parseExtraBody(raw) {
+    if (!raw)
+        return {};
+    try {
+        return JSON.parse(raw);
+    }
+    catch {
+        return {};
+    }
+}
+exports.default = {
+    app: {
+        port: process.env.PORT || 3003,
+        nodeEnv: process.env.NODE_ENV || 'development'
+    },
+    database: {
+        dialect: 'mysql',
+        host: process.env.DB_HOST || 'localhost',
+        port: parseInt(process.env.DB_PORT || '3306'),
+        username: process.env.DB_USER || 'root',
+        password: process.env.DB_PASSWORD || 'root',
+        database: process.env.DB_NAME || 'wis_supply_cloud'
+    },
+    jwt: {
+        secret: process.env.JWT_SECRET || 'your-secret-key-change-in-production',
+        expiresIn: process.env.JWT_EXPIRES_IN || '7d'
+    },
+    supabase: {
+        url: process.env.SUPABASE_URL,
+        serviceKey: process.env.SUPABASE_SERVICE_KEY,
+        anonKey: process.env.SUPABASE_ANON_KEY
+    },
+    redis: {
+        url: process.env.REDIS_URL || 'redis://localhost:6379'
+    },
+    scalar: {
+        routePrefix: '/docs',
+        specUrl: '/swagger.json',
+        theme: 'purple',
+        layout: 'modern',
+        darkMode: true,
+        localization: {
+            locale: 'zh-CN',
+        },
+    },
+    /**
+     * 权限控制配置
+     *
+     * strictMode（安全开关）：
+     * - true（生产推荐）：未在 sys_permissions 中注册的 API 端点，默认 403 拒绝
+     * - false（开发默认）：未注册的端点默认放行，方便联调
+     *
+     * 环境变量：PERMISSION_STRICT_MODE=true
+     *
+     * menuBypassRoleFilter（调试开关）：
+     * - true：/system/user/current 返回全量菜单（绕过角色-菜单绑定过滤），
+     *   仅用于开发/联调阶段角色菜单尚未配置时快速验证页面
+     * - false（默认）：按用户绑定角色过滤菜单
+     * - 安全约束：由服务端环境变量控制（客户端无法传参伪造），
+     *   且在 NODE_ENV=production 时强制失效（见 user.service.ts）
+     *
+     * 环境变量：MENU_BYPASS_ROLE_FILTER=true
+     */
+    permission: {
+        strictMode: process.env.PERMISSION_STRICT_MODE === 'true',
+        menuBypassRoleFilter: process.env.MENU_BYPASS_ROLE_FILTER === 'true',
+    },
+    /**
+     * 外部通知方式选择（V6.2）：
+     * 内部通知（站内信 sysMessage）为独立链路不受影响；此开关只决定外部渠道（旁路推送）走哪家。
+     * - sms   = 阿里云短信
+     * - email = SMTP 邮件
+     * - wecom = 企业微信应用消息
+     * - none / 空 = 关闭外部通知（仅站内信）
+     */
+    notify: {
+        externalChannel: (process.env.EXTERNAL_NOTIFY_CHANNEL || 'none').toLowerCase(),
+    },
+    /**
+     * APP 应用推送（V6.3）：UniPush 2.0 独立链路。
+     * 独立开关 APP_PUSH_ENABLED=true 启用，不受 EXTERNAL_NOTIFY_CHANNEL 影响（两者可同时启用）。
+     * 打包 APP 时：前端 manifest 勾选 Push 模块，登录后调用 uni.getPushClientId 获取 cid 并上报绑定用户。
+     */
+    appPush: {
+        enabled: process.env.APP_PUSH_ENABLED === 'true',
+        /** DCloud 开发者中心 → UniPush 2.0 的 appid（即 manifest 的 appid） */
+        appid: process.env.UNI_PUSH_APPID || '',
+        appkey: process.env.UNI_PUSH_APPKEY || '',
+        /** REST API 鉴权密钥（HMAC 签名用，请勿泄露） */
+        masterSecret: process.env.UNI_PUSH_MASTER_SECRET || '',
+    },
+    /** SMTP 邮件（EXTERNAL_NOTIFY_CHANNEL=email 时启用） */
+    email: {
+        host: process.env.EMAIL_SMTP_HOST || '',
+        port: parseInt(process.env.EMAIL_SMTP_PORT || '465'),
+        /** true = 465 端口 SSL/TLS（默认）；false = 587 端口 STARTTLS */
+        secure: (process.env.EMAIL_SMTP_SECURE || 'true') === 'true',
+        /** 发件邮箱账号（通常与 from 的邮箱部分相同） */
+        user: process.env.EMAIL_SMTP_USER || '',
+        /** 邮箱授权码（非登录密码，需在邮箱设置中开启 SMTP 并生成） */
+        pass: process.env.EMAIL_SMTP_PASS || '',
+        /** 发件人显示（nodemailer 支持 "名称 <addr>" 格式，如 "WIS供应链 <noreply@example.com>"） */
+        from: process.env.EMAIL_FROM || '',
+    },
+    /** 阿里云短信（EXTERNAL_NOTIFY_CHANNEL=sms 时启用） */
+    sms: {
+        accessKeyId: process.env.SMS_ACCESS_KEY_ID || '',
+        accessKeySecret: process.env.SMS_ACCESS_KEY_SECRET || '',
+        /** 短信签名（短信服务控制台 → 签名管理，如「WIS供应链」） */
+        signName: process.env.SMS_SIGN_NAME || '',
+        /** 短信模板 Code（短信服务控制台 → 模板管理，如 SMS_xxxx） */
+        templateCode: process.env.SMS_TEMPLATE_CODE || '',
+        /** 阿里云 OpenAPI 地域，短信固定使用 dysmsapi 终端节点，此处仅用于区分（默认 ap-southeast-1 外网直连） */
+        region: process.env.SMS_REGION || 'ap-southeast-1',
+    },
+    /**
+     * 企业微信应用消息（V6.0）：消息通知二期，服务端推送不校验域名。
+     * 注意：V6.1 起渠道启用与否改由 EXTERNAL_NOTIFY_CHANNEL 决定，此处的 enabled
+     * 仅表示企微凭证是否可用（EXTERNAL_NOTIFY_CHANNEL=wecom 时生效）
+     */
+    wecom: {
+        enabled: process.env.WECOM_ENABLED === 'true',
+        corpId: process.env.WECOM_CORP_ID || '',
+        agentId: process.env.WECOM_AGENT_ID || '',
+        secret: process.env.WECOM_SECRET || '',
+        /** 按手机号自动解析企微 userid（未绑定用户时），解析成功回写 sys_users.wechat_userid */
+        autoBind: process.env.WECOM_AUTO_BIND === 'true',
+        /** admin 端 H5 基础地址，textcard 跳转链接前缀（本地开发可指向 dev server） */
+        h5BaseUrl: process.env.WECOM_H5_BASE_URL || '',
+    },
+    /** 阿里云 OSS 文件存储配置 */
+    oss: {
+        accessKeyId: process.env.OSS_ACCESS_KEY_ID || '',
+        accessKeySecret: process.env.OSS_ACCESS_KEY_SECRET || '',
+        bucket: process.env.OSS_BUCKET || '',
+        endpoint: process.env.OSS_ENDPOINT || 'https://oss-cn-chengdu.aliyuncs.com',
+        region: process.env.OSS_REGION || 'oss-cn-chengdu',
+    },
+    /**
+     * DeepSeek AI 智能助手（V7.0）：Function Calling 工具调用查询业务数据。
+     * - AI_ENABLED=true 开启；AI_API_KEY 必填（https://platform.deepseek.com）
+     * - AI_BASE_URL 默认 DeepSeek 官方，兼容 OpenAI 格式可指向任意代理
+     */
+    ai: {
+        enabled: process.env.AI_ENABLED === 'true',
+        apiKey: process.env.AI_API_KEY || '',
+        baseUrl: process.env.AI_BASE_URL || 'https://api.deepseek.com',
+        // 注意：旧名 deepseek-chat / deepseek-reasoner 已于 2026-07-24 停用
+        model: process.env.AI_MODEL || 'deepseek-v4-flash',
+        /** 厂商扩展参数透传（JSON 字符串）。例：DeepSeek V4 Pro 思考模式 {"thinking":{"type":"enabled"}} */
+        extraBody: parseExtraBody(process.env.AI_EXTRA_BODY),
+    },
+};
+//# sourceMappingURL=index.js.map

package/dist/config/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/config/index.ts"],"names":[],"mappings":";;;;;AAAA,oDAA4B;AAE5B;;;;;;;;;;;;;GAaG;AAEH,qBAAqB;AACrB,MAAM,OAAO,GAAG,QAAQ,OAAO,CAAC,GAAG,CAAC,QAAQ,IAAI,aAAa,EAAE,CAAC;AAChE,gBAAM,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;AAEjC,kCAAkC;AAClC,gBAAM,CAAC,MAAM,EAAE,CAAC;AAEhB,2CAA2C;AAC3C,SAAS,cAAc,CAAC,GAAY;IAClC,IAAI,CAAC,GAAG;QAAE,OAAO,EAAE,CAAC;IACpB,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACzB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,kBAAe;IACb,GAAG,EAAE;QACH,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,IAAI;QAC9B,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,QAAQ,IAAI,aAAa;KAC/C;IACD,QAAQ,EAAE;QACR,OAAO,EAAE,OAAO;QAChB,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC,OAAO,IAAI,WAAW;QACxC,IAAI,EAAE,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,IAAI,MAAM,CAAC;QAC7C,QAAQ,EAAE,OAAO,CAAC,GAAG,CAAC,OAAO,IAAI,MAAM;QACvC,QAAQ,EAAE,OAAO,CAAC,GAAG,CAAC,WAAW,IAAI,MAAM;QAC3C,QAAQ,EAAE,OAAO,CAAC,GAAG,CAAC,OAAO,IAAI,kBAAkB;KACpD;IACD,GAAG,EAAE;QACH,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,UAAU,IAAI,sCAAsC;QACxE,SAAS,EAAE,OAAO,CAAC,GAAG,CAAC,cAAc,IAAI,IAAI;KAC9C;IACD,QAAQ,EAAE;QACR,GAAG,EAAE,OAAO,CAAC,GAAG,CAAC,YAAY;QAC7B,UAAU,EAAE,OAAO,CAAC,GAAG,CAAC,oBAAoB;QAC5C,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,iBAAiB;KACvC;IACD,KAAK,EAAE;QACL,GAAG,EAAE,OAAO,CAAC,GAAG,CAAC,SAAS,IAAI,wBAAwB;KACvD;IACD,MAAM,EAAE;QACN,WAAW,EAAE,OAAO;QACpB,OAAO,EAAE,eAAe;QACxB,KAAK,EAAE,QAAQ;QACf,MAAM,EAAE,QAAQ;QAChB,QAAQ,EAAE,IAAI;QACd,YAAY,EAAE;YACZ,MAAM,EAAE,OAAO;SAChB;KACF;IACD;;;;;;;;;;;;;;;;;OAiBG;IACH,UAAU,EAAE;QACV,UAAU,EAAE,OAAO,CAAC,GAAG,CAAC,sBAAsB,KAAK,MAAM;QACzD,oBAAoB,EAAE,OAAO,CAAC,GAAG,CAAC,uBAAuB,KAAK,MAAM;KACrE;IACD;;;;;;;OAOG;IACH,MAAM,EAAE;QACN,eAAe,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,uBAAuB,IAAI,MAAM,CAAC,CAAC,WAAW,EAAE;KAC/E;IACD;;;;OAIG;IACH,OAAO,EAAE;QACP,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,gBAAgB,KAAK,MAAM;QAChD,6DAA6D;QAC7D,KAAK,EAAE,OAAO,CAAC,GAAG,CAAC,cAAc,IAAI,EAAE;QACvC,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,eAAe,IAAI,EAAE;QACzC,mCAAmC;QACnC,YAAY,EAAE,OAAO,CAAC,GAAG,CAAC,sBAAsB,IAAI,EAAE;KACvD;IACD,iDAAiD;IACjD,KAAK,EAAE;QACL,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC,eAAe,IAAI,EAAE;QACvC,IAAI,EAAE,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,IAAI,KAAK,CAAC;QACpD,wDAAwD;QACxD,MAAM,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,iBAAiB,IAAI,MAAM,CAAC,KAAK,MAAM;QAC5D,+BAA+B;QAC/B,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC,eAAe,IAAI,EAAE;QACvC,sCAAsC;QACtC,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC,eAAe,IAAI,EAAE;QACvC,2EAA2E;QAC3E,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC,UAAU,IAAI,EAAE;KACnC;IACD,6CAA6C;IAC7C,GAAG,EAAE;QACH,WAAW,EAAE,OAAO,CAAC,GAAG,CAAC,iBAAiB,IAAI,EAAE;QAChD,eAAe,EAAE,OAAO,CAAC,GAAG,CAAC,qBAAqB,IAAI,EAAE;QACxD,qCAAqC;QACrC,QAAQ,EAAE,OAAO,CAAC,GAAG,CAAC,aAAa,IAAI,EAAE;QACzC,2CAA2C;QAC3C,YAAY,EAAE,OAAO,CAAC,GAAG,CAAC,iBAAiB,IAAI,EAAE;QACjD,0EAA0E;QAC1E,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,UAAU,IAAI,gBAAgB;KACnD;IACD;;;;OAIG;IACH,KAAK,EAAE;QACL,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,aAAa,KAAK,MAAM;QAC7C,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,aAAa,IAAI,EAAE;QACvC,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,cAAc,IAAI,EAAE;QACzC,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,YAAY,IAAI,EAAE;QACtC,+DAA+D;QAC/D,QAAQ,EAAE,OAAO,CAAC,GAAG,CAAC,eAAe,KAAK,MAAM;QAChD,0DAA0D;QAC1D,SAAS,EAAE,OAAO,CAAC,GAAG,CAAC,iBAAiB,IAAI,EAAE;KAC/C;IACD,qBAAqB;IACrB,GAAG,EAAE;QACH,WAAW,EAAE,OAAO,CAAC,GAAG,CAAC,iBAAiB,IAAI,EAAE;QAChD,eAAe,EAAE,OAAO,CAAC,GAAG,CAAC,qBAAqB,IAAI,EAAE;QACxD,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,UAAU,IAAI,EAAE;QACpC,QAAQ,EAAE,OAAO,CAAC,GAAG,CAAC,YAAY,IAAI,qCAAqC;QAC3E,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,UAAU,IAAI,gBAAgB;KACnD;IACD;;;;OAIG;IACH,EAAE,EAAE;QACF,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,UAAU,KAAK,MAAM;QAC1C,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,UAAU,IAAI,EAAE;QACpC,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,WAAW,IAAI,0BAA0B;QAC9D,2DAA2D;QAC3D,KAAK,EAAE,OAAO,CAAC,GAAG,CAAC,QAAQ,IAAI,mBAAmB;QAClD,gFAAgF;QAChF,SAAS,EAAE,cAAc,CAAC,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC;KACrD;CACF,CAAC"}

package/dist/config/ioc.d.ts

@@ -0,0 +1,6 @@
+export declare const iocContainer: {
+    get<T>(controller: {
+        new (...args: any[]): T;
+    }): T;
+};
+//# sourceMappingURL=ioc.d.ts.map

package/dist/config/ioc.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ioc.d.ts","sourceRoot":"","sources":["../../src/config/ioc.ts"],"names":[],"mappings":"AAcA,eAAO,MAAM,YAAY;QACnB,CAAC,cAAc;QAAE,KAAK,GAAG,IAAI,EAAE,GAAG,EAAE,GAAG,CAAC,CAAA;KAAE,GAAG,CAAC;CASnD,CAAC"}

package/dist/config/ioc.js

@@ -0,0 +1,29 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.iocContainer = void 0;
+/**
+ * tsoa + typedi 依赖注入适配模块
+ *
+ * tsoa 生成的路由代码期望 iocContainer 为 IocContainer 对象（有 .get() 方法），
+ * 或 IocContainerFactory 函数（接收 request，返回 IocContainer 对象）。
+ *
+ * 当前项目采用渐进式 DI：Controller 内部手动 new Service()，
+ * 未使用 @Service() 装饰器注册到容器。因此 .get() 先尝试 typedi 解析，
+ * 失败时降级为直接 new，兼容两种模式。
+ *
+ * 配置位置：tsoa.json → routes.iocModule
+ */
+const typedi_1 = require("typedi");
+exports.iocContainer = {
+    get(controller) {
+        try {
+            // 优先从 typedi 容器获取（适用于已用 @Service() 注册的 Controller）
+            return typedi_1.Container.get(controller);
+        }
+        catch {
+            // 降级：直接 new（适用于未注册的 Controller，当前默认行为）
+            return new controller();
+        }
+    },
+};
+//# sourceMappingURL=ioc.js.map

package/dist/config/ioc.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ioc.js","sourceRoot":"","sources":["../../src/config/ioc.ts"],"names":[],"mappings":";;;AAAA;;;;;;;;;;;GAWG;AACH,mCAAmC;AAEtB,QAAA,YAAY,GAAG;IAC1B,GAAG,CAAI,UAAuC;QAC5C,IAAI,CAAC;YACH,mDAAmD;YACnD,OAAO,kBAAS,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QACnC,CAAC;QAAC,MAAM,CAAC;YACP,uCAAuC;YACvC,OAAO,IAAI,UAAU,EAAE,CAAC;QAC1B,CAAC;IACH,CAAC;CACF,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,12 @@
+import 'reflect-metadata';
+/**
+ * Koa-Boot Runtime —— 框架运行时 Public API（仅导出 6 个命名，内部模块不导出）。
+ */
+export { registerRoutes } from './registerRoutes';
+export type { RegisterRoutesOptions } from './registerRoutes';
+export { createPrismaClient } from './config/database';
+export * as systemServices from './systemServices';
+export * as aiToolRegistry from './aiToolRegistry';
+export * as middlewares from './middlewares';
+export * as types from './types';
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,kBAAkB,CAAC;AAE1B;;GAEG;AACH,OAAO,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAClD,YAAY,EAAE,qBAAqB,EAAE,MAAM,kBAAkB,CAAC;AAC9D,OAAO,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AACvD,OAAO,KAAK,cAAc,MAAM,kBAAkB,CAAC;AACnD,OAAO,KAAK,cAAc,MAAM,kBAAkB,CAAC;AACnD,OAAO,KAAK,WAAW,MAAM,eAAe,CAAC;AAC7C,OAAO,KAAK,KAAK,MAAM,SAAS,CAAC"}

package/dist/index.js

@@ -0,0 +1,49 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.types = exports.middlewares = exports.aiToolRegistry = exports.systemServices = exports.createPrismaClient = exports.registerRoutes = void 0;
+require("reflect-metadata");
+/**
+ * Koa-Boot Runtime —— 框架运行时 Public API（仅导出 6 个命名，内部模块不导出）。
+ */
+var registerRoutes_1 = require("./registerRoutes");
+Object.defineProperty(exports, "registerRoutes", { enumerable: true, get: function () { return registerRoutes_1.registerRoutes; } });
+var database_1 = require("./config/database");
+Object.defineProperty(exports, "createPrismaClient", { enumerable: true, get: function () { return database_1.createPrismaClient; } });
+exports.systemServices = __importStar(require("./systemServices"));
+exports.aiToolRegistry = __importStar(require("./aiToolRegistry"));
+exports.middlewares = __importStar(require("./middlewares"));
+exports.types = __importStar(require("./types"));
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,4BAA0B;AAE1B;;GAEG;AACH,mDAAkD;AAAzC,gHAAA,cAAc,OAAA;AAEvB,8CAAuD;AAA9C,8GAAA,kBAAkB,OAAA;AAC3B,mEAAmD;AACnD,mEAAmD;AACnD,6DAA6C;AAC7C,iDAAiC"}

package/dist/middleware/auth.d.ts

@@ -0,0 +1,3 @@
+import { Middleware } from 'koa';
+export declare const authMiddleware: Middleware;
+//# sourceMappingURL=auth.d.ts.map

package/dist/middleware/auth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../../src/middleware/auth.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,KAAK,CAAC;AA8BjC,eAAO,MAAM,cAAc,EAAE,UA2B5B,CAAC"}

package/dist/middleware/auth.js

@@ -0,0 +1,52 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.authMiddleware = void 0;
+const jwt_1 = require("../utils/jwt");
+const types_1 = require("../common/types");
+// 放行路径API（tsoa basePath=/api，所有路由均带 /api 前缀）
+const whiteList = [
+    '/api/system/user/login',
+    // 登出：JWT 无状态，服务端不吊销 token，仅记日志；放行以兼容 token 已过期场景
+    '/api/system/user/logout',
+    // 批量查询文件 URL（溯源页图片回显），只读接口
+    '/api/system/file-upload/batch',
+    // API 文档页（Scalar/Swagger UI）公开可访问
+    '/api-docs',
+    '/docs',
+    '/swagger.json',
+];
+// 正则放行（路径中含动态参数的公开接口）
+const whiteListPatterns = [
+    // 消费者扫码查询溯源信息，无需登录
+    /^\/api\/traceability-codes\/[^/]+\/trace-info$/,
+];
+function isWhiteList(path) {
+    return (whiteList.some(pattern => path.startsWith(pattern)) ||
+        whiteListPatterns.some(pattern => pattern.test(path)));
+}
+const authMiddleware = async (ctx, next) => {
+    if (isWhiteList(ctx.path)) {
+        await next();
+        return;
+    }
+    const authorization = ctx.headers.authorization;
+    if (!authorization || !authorization.startsWith('Bearer ')) {
+        ctx.status = 401;
+        ctx.body = (0, types_1.fail)('未授权，请先登录', types_1.BizCode.UNAUTHORIZED);
+        return;
+    }
+    const token = authorization.slice(7);
+    const payload = (0, jwt_1.verifyToken)(token);
+    if (!payload) {
+        ctx.status = 401;
+        ctx.body = (0, types_1.fail)('Token 无效或已过期', types_1.BizCode.UNAUTHORIZED);
+        return;
+    }
+    ctx.state.user = payload;
+    // tsoa koa 模板 @Request() 注入的是 ctx.request（而非整个 ctx），
+    // 需将 state 同步挂到 request 上，controller 中 req.state.user 才能取到登录用户
+    ctx.request.state = ctx.state;
+    await next();
+};
+exports.authMiddleware = authMiddleware;
+//# sourceMappingURL=auth.js.map

package/dist/middleware/auth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.js","sourceRoot":"","sources":["../../src/middleware/auth.ts"],"names":[],"mappings":";;;AACA,sCAAuD;AACvD,2CAAgD;AAEhD,6CAA6C;AAC7C,MAAM,SAAS,GAAG;IAChB,wBAAwB;IACxB,iDAAiD;IACjD,yBAAyB;IACzB,2BAA2B;IAC3B,+BAA+B;IAC/B,kCAAkC;IAClC,WAAW;IACX,OAAO;IACP,eAAe;CAChB,CAAC;AAEF,sBAAsB;AACtB,MAAM,iBAAiB,GAAG;IACxB,mBAAmB;IACnB,gDAAgD;CACjD,CAAC;AAEF,SAAS,WAAW,CAAC,IAAY;IAC/B,OAAO,CACL,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;QACnD,iBAAiB,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CACtD,CAAC;AACJ,CAAC;AAEM,MAAM,cAAc,GAAe,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;IAC5D,IAAI,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;QAC1B,MAAM,IAAI,EAAE,CAAC;QACb,OAAO;IACT,CAAC;IAED,MAAM,aAAa,GAAG,GAAG,CAAC,OAAO,CAAC,aAAa,CAAC;IAChD,IAAI,CAAC,aAAa,IAAI,CAAC,aAAa,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QAC3D,GAAG,CAAC,MAAM,GAAG,GAAG,CAAC;QACjB,GAAG,CAAC,IAAI,GAAG,IAAA,YAAI,EAAC,UAAU,EAAE,eAAO,CAAC,YAAY,CAAC,CAAC;QAClD,OAAO;IACT,CAAC;IAED,MAAM,KAAK,GAAG,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACrC,MAAM,OAAO,GAAG,IAAA,iBAAW,EAAC,KAAK,CAAC,CAAC;IAEnC,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,GAAG,CAAC,MAAM,GAAG,GAAG,CAAC;QACjB,GAAG,CAAC,IAAI,GAAG,IAAA,YAAI,EAAC,cAAc,EAAE,eAAO,CAAC,YAAY,CAAC,CAAC;QACtD,OAAO;IACT,CAAC;IAED,GAAG,CAAC,KAAK,CAAC,IAAI,GAAG,OAAO,CAAC;IACzB,qDAAqD;IACrD,+DAA+D;IAC9D,GAAG,CAAC,OAAe,CAAC,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC;IACvC,MAAM,IAAI,EAAE,CAAC;AACf,CAAC,CAAC;AA3BW,QAAA,cAAc,kBA2BzB"}

package/dist/middleware/errorHandler.d.ts

@@ -0,0 +1,3 @@
+import { Middleware } from 'koa';
+export declare const errorHandler: Middleware;
+//# sourceMappingURL=errorHandler.d.ts.map

package/dist/middleware/errorHandler.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"errorHandler.d.ts","sourceRoot":"","sources":["../../src/middleware/errorHandler.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,KAAK,CAAC;AAIjC,eAAO,MAAM,YAAY,EAAE,UA4B1B,CAAC"}

package/dist/middleware/errorHandler.js

@@ -0,0 +1,40 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.errorHandler = void 0;
+const types_1 = require("../common/types");
+const logger_1 = require("../utils/logger");
+const errorHandler = async (ctx, next) => {
+    try {
+        await next();
+    }
+    catch (err) {
+        const error = err;
+        const status = error.status || 500;
+        ctx.status = status;
+        // 根据 HTTP 状态码映射业务码，保持响应格式统一
+        let bizCode;
+        switch (status) {
+            case 401:
+                bizCode = types_1.BizCode.UNAUTHORIZED;
+                break;
+            case 403:
+                bizCode = types_1.BizCode.FORBIDDEN;
+                break;
+            case 404:
+                bizCode = types_1.BizCode.NOT_FOUND;
+                break;
+            case 422:
+                bizCode = types_1.BizCode.VALIDATION_ERROR;
+                break;
+            default: bizCode = status >= 500 ? types_1.BizCode.INTERNAL_ERROR : types_1.BizCode.FAIL;
+        }
+        ctx.body = (0, types_1.fail)(error.message || '服务器内部错误', bizCode);
+        // 开发环境追加堆栈信息
+        if (process.env.NODE_ENV === 'development') {
+            ctx.body.stack = error.stack;
+        }
+        logger_1.logger.error(`[ErrorHandler] ${ctx.method} ${ctx.url} → ${status}`, error);
+    }
+};
+exports.errorHandler = errorHandler;
+//# sourceMappingURL=errorHandler.js.map

package/dist/middleware/errorHandler.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"errorHandler.js","sourceRoot":"","sources":["../../src/middleware/errorHandler.ts"],"names":[],"mappings":";;;AACA,2CAAgD;AAChD,4CAAyC;AAElC,MAAM,YAAY,GAAe,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;IAC1D,IAAI,CAAC;QACH,MAAM,IAAI,EAAE,CAAC;IACf,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,KAAK,GAAG,GAAkD,CAAC;QACjE,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,IAAI,GAAG,CAAC;QAEnC,GAAG,CAAC,MAAM,GAAG,MAAM,CAAC;QAEpB,4BAA4B;QAC5B,IAAI,OAAe,CAAC;QACpB,QAAQ,MAAM,EAAE,CAAC;YACf,KAAK,GAAG;gBAAE,OAAO,GAAG,eAAO,CAAC,YAAY,CAAC;gBAAC,MAAM;YAChD,KAAK,GAAG;gBAAE,OAAO,GAAG,eAAO,CAAC,SAAS,CAAC;gBAAC,MAAM;YAC7C,KAAK,GAAG;gBAAE,OAAO,GAAG,eAAO,CAAC,SAAS,CAAC;gBAAC,MAAM;YAC7C,KAAK,GAAG;gBAAE,OAAO,GAAG,eAAO,CAAC,gBAAgB,CAAC;gBAAC,MAAM;YACpD,OAAO,CAAC,CAAE,OAAO,GAAG,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC,eAAO,CAAC,cAAc,CAAC,CAAC,CAAC,eAAO,CAAC,IAAI,CAAC;QAC5E,CAAC;QAED,GAAG,CAAC,IAAI,GAAG,IAAA,YAAI,EAAC,KAAK,CAAC,OAAO,IAAI,SAAS,EAAE,OAAO,CAAC,CAAC;QAErD,aAAa;QACb,IAAI,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,aAAa,EAAE,CAAC;YAC1C,GAAG,CAAC,IAAgC,CAAC,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC;QAC5D,CAAC;QAED,eAAM,CAAC,KAAK,CAAC,kBAAkB,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,GAAG,MAAM,MAAM,EAAE,EAAE,KAAK,CAAC,CAAC;IAC7E,CAAC;AACH,CAAC,CAAC;AA5BW,QAAA,YAAY,gBA4BvB"}

package/dist/middleware/logger.d.ts

@@ -0,0 +1,3 @@
+import { Middleware } from 'koa';
+export declare const logger: Middleware;
+//# sourceMappingURL=logger.d.ts.map

package/dist/middleware/logger.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"logger.d.ts","sourceRoot":"","sources":["../../src/middleware/logger.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,UAAU,EAAE,MAAM,KAAK,CAAA;AAKhC,eAAO,MAAM,MAAM,EAAE,UAKpB,CAAC"}

package/dist/middleware/logger.js

@@ -0,0 +1,13 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.logger = void 0;
+const logger_1 = require("../utils/logger");
+const requestLogger = new logger_1.Logger('HTTP');
+const logger = async (ctx, next) => {
+    const start = Date.now();
+    await next();
+    const ms = Date.now() - start;
+    requestLogger.logRequest(ctx.method, ctx.url, ctx.status, ms);
+};
+exports.logger = logger;
+//# sourceMappingURL=logger.js.map

package/dist/middleware/logger.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"logger.js","sourceRoot":"","sources":["../../src/middleware/logger.ts"],"names":[],"mappings":";;;AAEA,4CAAwC;AAExC,MAAM,aAAa,GAAG,IAAI,eAAM,CAAC,MAAM,CAAC,CAAA;AAEjC,MAAM,MAAM,GAAe,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;IACpD,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACzB,MAAM,IAAI,EAAE,CAAC;IACb,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC;IAC9B,aAAa,CAAC,UAAU,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,EAAE,GAAG,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;AAChE,CAAC,CAAC;AALW,QAAA,MAAM,UAKjB"}

package/dist/middleware/operationLogger.d.ts

@@ -0,0 +1,11 @@
+import { Middleware } from 'koa';
+/**
+ * 操作日志中间件
+ *
+ * 自动拦截 POST/PUT/DELETE 请求，记录操作日志到数据库。
+ * 必须放在 authMiddleware 之后使用，以获取 ctx.state.user 中的用户信息。
+ *
+ * 日志写入采用 fire-and-forget 模式，不阻塞响应返回。
+ */
+export declare const operationLogger: Middleware;
+//# sourceMappingURL=operationLogger.d.ts.map

package/dist/middleware/operationLogger.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"operationLogger.d.ts","sourceRoot":"","sources":["../../src/middleware/operationLogger.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,KAAK,CAAC;AA2GjC;;;;;;;GAOG;AACH,eAAO,MAAM,eAAe,EAAE,UAiD7B,CAAC"}