weifuwu 0.91.0 → 0.92.0

package/dist/server/index.js

@@ -457,6 +457,101 @@ function serve(router, options) {
 // src/server/core/router.ts
 import { WebSocketServer } from "ws";
 
+// src/server/db/errors.ts
+var DbError = class extends Error {
+  kind;
+  code;
+  cause;
+  constructor(kind, message, options) {
+    super(message);
+    this.name = "DbError";
+    this.kind = kind;
+    this.code = options?.code;
+    this.cause = options?.cause;
+  }
+};
+var ProtocolError = class extends DbError {
+  constructor(feature, message) {
+    super("protocol", message ?? `${feature} is not supported by weifuwu/db`, { code: "UNSUPPORTED" });
+    this.name = "ProtocolError";
+  }
+};
+var ConnectionError = class extends DbError {
+  attempts;
+  constructor(message, attempts = 1, cause) {
+    super("connection", message, { cause });
+    this.name = "ConnectionError";
+    this.attempts = attempts;
+  }
+};
+var TimeoutError = class extends DbError {
+  operation;
+  ms;
+  constructor(operation, ms) {
+    super("timeout", `${operation} timed out after ${ms}ms`);
+    this.name = "TimeoutError";
+    this.operation = operation;
+    this.ms = ms;
+  }
+};
+var ValidationError = class extends DbError {
+  constructor(message) {
+    super("validation", message);
+    this.name = "ValidationError";
+  }
+};
+
+// src/server/response.ts
+function ok(data, init) {
+  return Response.json(data, { status: 200, ...init });
+}
+function created(data, init) {
+  return Response.json(data, { status: 201, ...init });
+}
+function noContent(init) {
+  return new Response(null, { status: 204, ...init });
+}
+function badRequest(message) {
+  return Response.json({ error: message ?? "Bad Request" }, { status: 400 });
+}
+function unauthorized(message) {
+  return Response.json({ error: message ?? "Unauthorized" }, { status: 401 });
+}
+function forbidden(message) {
+  return Response.json({ error: message ?? "Forbidden" }, { status: 403 });
+}
+function notFound(message) {
+  return Response.json({ error: message ?? "Not Found" }, { status: 404 });
+}
+function conflict(message) {
+  return Response.json({ error: message ?? "Conflict" }, { status: 409 });
+}
+function unprocessable(message) {
+  return Response.json({ error: message ?? "Unprocessable Entity" }, { status: 422 });
+}
+function tooManyRequests(message) {
+  return Response.json({ error: message ?? "Too Many Requests" }, { status: 429 });
+}
+function serverError(message) {
+  return Response.json({ error: message ?? "Internal Server Error" }, { status: 500 });
+}
+function redirect(url, status = 302) {
+  return new Response(null, { status, headers: { Location: url } });
+}
+function errorResponse(e, status) {
+  const msg = e instanceof Error ? e.message : String(e);
+  let code;
+  if (e instanceof HttpError) {
+    return Response.json({ error: msg }, { status: status ?? e.status });
+  }
+  if (e instanceof DbError) {
+    const st = status ?? (e.code === "23505" ? 409 : 400);
+    code = e.code === "23505" ? "conflict" : e.kind;
+    return Response.json({ error: msg, code }, { status: st });
+  }
+  return Response.json({ error: msg }, { status: status ?? 400 });
+}
+
 // src/server/core/ws.ts
 function safeHook(hookName, fn, onError) {
   if (!fn) return () => {
@@ -995,12 +1090,12 @@ async function runChain(mws, finalHandler, req, ctx) {
 }
 
 // src/shared/router/pipeline.ts
-function badRequest(reason) {
+function badRequest2(reason) {
   return Response.json({ error: "Bad Request", reason }, { status: 400 });
 }
 async function dispatchRouter(root, pipeline, req, ctx) {
   const target = parseRequestTarget(req);
-  if (!target.ok) return badRequest(target.reason);
+  if (!target.ok) return badRequest2(target.reason);
   const m = trieMatch(root, target.segments);
   const match = m ? { value: m.value, params: freshParams(m), wildcard: m.wildcard } : null;
   pipeline.enrichCtx?.(ctx, match, target.pathname, target.query);
@@ -1356,11 +1451,8 @@ var Router = class _Router {
   async handleError(e, req, ctx, path) {
     const err = e instanceof Error ? e : new Error(String(e));
     if (this.errorHandler) return this.errorHandler(err, req, ctx);
-    if (err instanceof HttpError) {
-      return new Response(JSON.stringify({ error: err.message }), {
-        status: err.status,
-        headers: { "Content-Type": "application/json" }
-      });
+    if (err instanceof HttpError || err instanceof DbError || err instanceof ValidationError) {
+      return errorResponse(err);
     }
     noteHandlerError(`${req.method} ${path ?? new URL(req.url).pathname}`, e);
     return Response.json({ error: "Internal Server Error" }, { status: 500 });
@@ -2521,44 +2613,6 @@ function hashRefreshToken(token) {
   return createHash("sha256").update(token).digest("hex");
 }
 
-// src/server/response.ts
-function ok(data, init) {
-  return Response.json(data, { status: 200, ...init });
-}
-function created(data, init) {
-  return Response.json(data, { status: 201, ...init });
-}
-function noContent(init) {
-  return new Response(null, { status: 204, ...init });
-}
-function badRequest2(message) {
-  return Response.json({ error: message ?? "Bad Request" }, { status: 400 });
-}
-function unauthorized(message) {
-  return Response.json({ error: message ?? "Unauthorized" }, { status: 401 });
-}
-function forbidden(message) {
-  return Response.json({ error: message ?? "Forbidden" }, { status: 403 });
-}
-function notFound(message) {
-  return Response.json({ error: message ?? "Not Found" }, { status: 404 });
-}
-function conflict(message) {
-  return Response.json({ error: message ?? "Conflict" }, { status: 409 });
-}
-function unprocessable(message) {
-  return Response.json({ error: message ?? "Unprocessable Entity" }, { status: 422 });
-}
-function tooManyRequests(message) {
-  return Response.json({ error: message ?? "Too Many Requests" }, { status: 429 });
-}
-function serverError(message) {
-  return Response.json({ error: message ?? "Internal Server Error" }, { status: 500 });
-}
-function redirect(url, status = 302) {
-  return new Response(null, { status, headers: { Location: url } });
-}
-
 // src/server/user/index.ts
 import { randomBytes as randomBytes3 } from "node:crypto";
 var USER_TABLES = {
@@ -3116,13 +3170,13 @@ function userSystem(options) {
     });
     if (!excluded.has("login")) app.post(`${p}/login`, async (req, ctx) => {
       const body = await req.json().catch(() => ({}));
-      if (!body.email || !body.password) return badRequest2("email and password are required");
+      if (!body.email || !body.password) return badRequest("email and password are required");
       const result = await ctx.auth.login(body.email, body.password);
       return ok(result);
     });
     if (!excluded.has("logout")) app.post(`${p}/logout`, async (req, ctx) => {
       const body = await req.json().catch(() => ({}));
-      if (!body.refreshToken) return badRequest2("refreshToken is required");
+      if (!body.refreshToken) return badRequest("refreshToken is required");
       await ctx.auth.logout(body.refreshToken);
       return noContent();
     });
@@ -3224,13 +3278,13 @@ function userSystem(options) {
       });
       app.post(`${p}/apps/:appSlug/auth/login`, async (req, ctx) => {
         const body = await req.json().catch(() => ({}));
-        if (!body.email || !body.password) return badRequest2("email and password are required");
+        if (!body.email || !body.password) return badRequest("email and password are required");
         const result = await ctx.auth.loginApp(ctx.params.appSlug, body.email, body.password);
         return ok(result);
       });
       app.patch(`${p}/apps/:appSlug/auth/registration`, async (req, ctx) => {
         const body = await req.json().catch(() => ({}));
-        if (typeof body.open !== "boolean") return badRequest2("open is required (boolean)");
+        if (typeof body.open !== "boolean") return badRequest("open is required (boolean)");
         const appId = await findAppIdBySlug(ctx.params.appSlug);
         if (!appId) throw new HttpError("Application not found", 404);
         await ctx.auth.setOpenRegistration(appId, body.open);
@@ -3239,7 +3293,7 @@ function userSystem(options) {
       app.post(`${p}/apps/:appSlug/auth/verify`, async (req, ctx) => {
         const appId = req.headers.get("x-wf-app-id");
         const appKey = req.headers.get("x-wf-app-key");
-        if (!appId || !appKey) return badRequest2("X-Wf-App-Id / X-Wf-App-Key required");
+        if (!appId || !appKey) return badRequest("X-Wf-App-Id / X-Wf-App-Key required");
         const rows = await A.select("id", "slug", "name").where({ id: { eq: appId }, app_key: { eq: appKey } }).run();
         if (!rows.length) throw new HttpError("Invalid app credentials", 403);
         const a = rows[0];
@@ -3390,50 +3444,6 @@ function appAuth(options) {
   return mw;
 }
 
-// src/server/db/errors.ts
-var DbError = class extends Error {
-  kind;
-  code;
-  cause;
-  constructor(kind, message, options) {
-    super(message);
-    this.name = "DbError";
-    this.kind = kind;
-    this.code = options?.code;
-    this.cause = options?.cause;
-  }
-};
-var ProtocolError = class extends DbError {
-  constructor(feature, message) {
-    super("protocol", message ?? `${feature} is not supported by weifuwu/db`, { code: "UNSUPPORTED" });
-    this.name = "ProtocolError";
-  }
-};
-var ConnectionError = class extends DbError {
-  attempts;
-  constructor(message, attempts = 1, cause) {
-    super("connection", message, { cause });
-    this.name = "ConnectionError";
-    this.attempts = attempts;
-  }
-};
-var TimeoutError = class extends DbError {
-  operation;
-  ms;
-  constructor(operation, ms) {
-    super("timeout", `${operation} timed out after ${ms}ms`);
-    this.name = "TimeoutError";
-    this.operation = operation;
-    this.ms = ms;
-  }
-};
-var ValidationError = class extends DbError {
-  constructor(message) {
-    super("validation", message);
-    this.name = "ValidationError";
-  }
-};
-
 // src/server/db/body.ts
 function shapeOf(s) {
   const sh = s.__shape;
@@ -3510,11 +3520,6 @@ function listQuery(url, shapeDef, opts = {}) {
   const offset = Math.max(0, parseInt(search.get("offset") ?? "0", 10) || 0);
   return { filter: filter2, sort, limit, offset };
 }
-function errorResponse(e, status) {
-  const msg = e instanceof Error ? e.message : String(e);
-  const st = status ?? (e instanceof DbError ? e.code === "23505" ? 409 : 400 : 400);
-  return Response.json({ error: msg }, { status: st });
-}
 
 // src/server/db/schema.ts
 function innerOf(t) {
@@ -5462,7 +5467,7 @@ function messager(options) {
         const conv = await createConversation(ctx.user.id, { type: "group", memberIds: body.memberIds });
         return created(conv);
       }
-      return badRequest2("conversation input invalid");
+      return badRequest("conversation input invalid");
     });
     app.get(`${p}/conversations`, async (_req, ctx) => {
       if (!ctx.user) throw new HttpError("Unauthorized", 401);
@@ -5482,7 +5487,7 @@ function messager(options) {
       const convId = ctx.params.id;
       await requireMember(convId, ctx);
       const body = await req.json().catch(() => ({}));
-      if (!body.content?.trim()) return badRequest2("content is required");
+      if (!body.content?.trim()) return badRequest("content is required");
       const message = await sendMessage(convId, {
         senderType: "user",
         senderId: ctx.user.id,
@@ -5503,15 +5508,15 @@ function messager(options) {
       if (!ctx.user) throw new HttpError("Unauthorized", 401);
       const messageId = ctx.params.id;
       const body = await req.json().catch(() => ({}));
-      if (!body.content?.trim()) return badRequest2("content is required");
+      if (!body.content?.trim()) return badRequest("content is required");
       const rows = await orm.query.from(`${MESSAGES} m`).join(`${MEMBERS} mem`, { "mem.conversation_id": { col: "m.conversation_id" } }).where({ "m.id": { eq: messageId }, "mem.user_id": { eq: String(ctx.user.id) } }).select("m.conversation_id", "m.sender_type", "m.sender_id").run();
-      if (!rows.length) return badRequest2("message not found");
+      if (!rows.length) return badRequest("message not found");
       const row = rows[0];
       if (row.sender_type === "user" && row.sender_id !== ctx.user.id) {
         throw new HttpError("Forbidden: not your message", 403);
       }
       const edited = await editMessage(messageId, body.content);
-      if (!edited) return badRequest2("message not found");
+      if (!edited) return badRequest("message not found");
       broadcast(`conv:${edited.conversation_id}`, { type: "message_edited", message: edited });
       return ok(edited);
     });
@@ -5519,7 +5524,7 @@ function messager(options) {
       if (!ctx.user) throw new HttpError("Unauthorized", 401);
       const messageId = ctx.params.id;
       const rows = await orm.query.from(`${MESSAGES} m`).join(`${MEMBERS} mem`, { "mem.conversation_id": { col: "m.conversation_id" } }).where({ "m.id": { eq: messageId }, "mem.user_id": { eq: String(ctx.user.id) } }).select("m.conversation_id", "m.sender_type", "m.sender_id").run();
-      if (!rows.length) return badRequest2("message not found");
+      if (!rows.length) return badRequest("message not found");
       const row = rows[0];
       if (row.sender_type === "user" && row.sender_id !== ctx.user.id) {
         throw new HttpError("Forbidden: not your message", 403);
@@ -8230,6 +8235,7 @@ function createScheduler(orm, execute, opts = {}) {
     start: () => {
       if (timer) return;
       timer = setInterval(() => void tick(), intervalMs);
+      timer.unref?.();
       void tick();
     },
     stop: () => {
@@ -18729,7 +18735,7 @@ export {
   WEIFUWU_WORKFLOW_SCHEMA,
   and,
   appAuth,
-  badRequest2 as badRequest,
+  badRequest,
   between,
   bodyOf,
   buildQuery,

package/dist/server/response.d.ts

@@ -44,3 +44,20 @@ export declare function serverError(message?: string): Response;
  * ```
  */
 export declare function redirect(url: string, status?: number): Response;
+/**
+ * 错误 → Response（总错误面——HTTP 链（router.onError/默认链）与 route 内
+ * catch 同语义——DbError/HttpError 映射单源）。
+ *
+ * 双层语义（有意分层——文档契约）：
+ * - **链面（未捕获）**：普通 Error → 500（Internal Server Error——意外错误
+ *   诚实现形不泄漏——router.handleError 默认链消费）；DbError/ValidationError
+ *   → 400/409（orm 错误不该 500）
+ * - **route 内 catch（已知业务）**：普通 Error → 400（业务守卫/校验——
+ *   「我知道这是什么错」→ errorResponse 显式调用）
+ * - HttpError：双面一致（status 权威——403/404/409 同输出）
+ *
+ * code 面（`{ error, code }`——前端可 switch 而非解析 message 字符串）：
+ *   ValidationError → 'validation' · DbError 23505 → 'conflict' ·
+ *   DbError.kind → kind · HttpError/普通 Error → 无 code（status 已是语义）。
+ */
+export declare function errorResponse(e: unknown, status?: number): Response;

package/docs/client.md

@@ -89,6 +89,10 @@ app.router(Router())
   回调/类函数属性差异**不触发**（比较器自有豁免权——如 CodeEditor 忽略 onChange
   闭包引用）。默认不挂 = 行为完全不变。典型：CodeEditor（value/lang/rows/readOnly
   比较——高频输入页面零 diff 扰动）
+  **页面级范式（web W3 试点——AgentGrid 先例）**：列表区独立成组件 +
+  `shouldRender` 比较**数据引用**（`agents` 数组未变 = 输入键击不重渲列表段——
+  高频输入页的「静态邻居」零 diff）；回调经闭包（onDm/onRemove 豁免——
+  CodeEditor 同款）；单消费者页内组件（不违反「>1 消费者入库」——判负登记）
 
 ### 5.2 三件套
 
@@ -142,6 +146,27 @@ style-audit 文件数基线 +1 · 覆盖哨兵跑绿（`scripts/audit-component-
 R-03：类名/结构变更**反查测试选择器**（`[class*="..."]` 定位器）·
 行为变化**必带契约测试** · 机制化优先（能进审计不靠记忆）
 
+---
+
+### 6.1 认证接线范式（fullstack W4——onRefresh 时序契约）
+
+```ts
+// uiServe options（v3-main.tsx）——auth 客户端接线（token 双源防线）
+auth: auth({ storage, onAuth: (c) => {...}, onRefresh: async () => {
+  // onRefresh 闭包直引（2027-09 教训：间接层 authRef 曾致 401 死循环——
+  // refresh 后 token 未更新——闭包直引 source 是唯一的）
+  const ok = await api.post('/api/auth/refresh', undefined, { skipAuth: true })
+  ...
+}})
+```
+
+- **时序契约**：onRefresh 返回 true 语义 = token 已重写（storage 就绪）——
+  false/异常 = 401 踢登录——**未配置 onRefresh → refresh() 恒 false + warn**
+  （机制化防线——401 时 console.warn 提示「未接线」——不再静默）
+- 401 → refresh 重试一次（ApiClient 层）→ 仍失败清 token 跳登录（兜底）
+
+---
+
 ## 6. 前端架构导论
 
 ```
@@ -172,5 +197,39 @@ R-03：类名/结构变更**反查测试选择器**（`[class*="..."]` 定位器
 
 ---
 
+### 7.1 页面数据世代（web W1——useAsyncData 首选手册）
+
+**为什么迁（v2 段复用实录）**：老世代 `load() + ctx.render()` 在工厂期异步启动
+——v2 段复用语义下**工厂不重跑 → 数据永不刷新**（导航返回/同会话停滞——
+Templates 迁移先例）。**getter 快照 bug（Agents W1 实录）**：`const agents =
+getAgents() ?? []` 在**工厂期**解构 = 渲染用旧快照（state$ 更新后不显示）——
+**必须在 renderFn 内读**（getter 纪律的页面级体现）。
+
+**怎么迁（5 行范本）**：
+
+```ts
+export const Agents: Component = (_p, ctx) => {
+  const [getAgents, reloadAgents] = ctx.ui.useAsyncData(async () => {
+    return (await ctx.api.get(`/api/agents`)).agents ?? []
+  }, 'agents-page')            // 同 key 并发合并 · key 稳定（页面级）
+  let qValue = ''              // 搜索闭包（getter 纪律）
+  return () => {
+    const agents = getAgents() ?? []        // 渲染期读最新（不是工厂期！）
+    const loading = getAgents() === null     // null = loading 态
+    return h('ul', {}, agents.map(...))
+  }
+}
+```
+
+**迁移后得到什么**：① 同 key 并发合并（多次挂载 1 次请求）② 竞态取消
+（switchMap——快速搜索乱序响应丢弃）③ 缓存保留（重挂载零请求——导航返回
+瞬时）④ reload 显式刷新（删除/变更后服务器权威）。搜索面：q 闭包 +
+debounce(reload)——触发读最新 q。
+
+**哨兵**：`apps/agent-platform/scripts/audit-page-generations.mjs`（async 工厂
+= 红 exit 1——工厂同步契约；老世代标记 = 黄报——迁移进度可见）。
+
+---
+
 > **运行**：`npm run test:client`（428 契约）· `npm run test:scenario`（123 场景）·
 > `npm run test:showcase`（324 组件测试）——全量防线见 AGENTS.md §1。