feat: 完成前端业务闭环与后端联调

2026-08-24 23:37:56 +08:00
parent c59e36f933
commit 9ad572907b
175 changed files with 10711 additions and 1740 deletions
@@ -40,6 +40,26 @@ parseJson('manifest.json')
 parseJson('package.json')
 parseJson('package-lock.json')

+const runtimeConfigSource = readText('utils/runtime-config.js')
+if (runtimeConfigSource.includes('import.meta.env')) {
+  fail('运行时配置直接读取 import.meta.env，会把构建机环境写入生产资源')
+}
+if (/\bmock\b|isMockMode|resolveRuntimeMode/.test(runtimeConfigSource)) {
+  fail('正式运行时配置仍保留不可达的 mock 双轨逻辑')
+}
+for (const productionValue of [
+  "const configuredBaseUrl = 'https://backend-api.ddxcjp.cn'",
+  "const configuredClientId = '428a8310cd442757ae699df5d894f051'",
+  "const configuredTenantId = '000000'",
+]) {
+  if (!runtimeConfigSource.includes(productionValue)) {
+    fail(`运行时正式配置不完整：${productionValue}`)
+  }
+}
+if (fs.existsSync(path.join(workspace, 'data', 'preview'))) {
+  fail('正式项目仍保留不可达的本地预览数据目录 data/preview')
+}
+
 const routeSource = readText('utils/navigation/routes.js')
 const routeEntries = [...routeSource.matchAll(/^\s{2}([A-Z]\d{2}): defineRoute\(\{[\s\S]*?^\s{2}\}\),/gm)]
 const routeKeys = routeEntries.map((match) => match[1])
@@ -60,9 +80,17 @@ const sourceFiles = listFiles(
  ['App.vue', 'main.js', 'pages', 'components', 'composables', 'services', 'utils'],
  new Set(['.js', '.vue']),
 )
+if (/hasRemoteConfig|REMOTE_(?:READ|WRITE)_REQUIRED|WRITE_UNAVAILABLE|本地预览/.test(
+  sourceFiles.map((filePath) => readText(filePath)).join('\n')
+)) {
+  fail('正式源码仍保留已经不可达的本地预览守卫或错误码')
+}
 const importPattern = /(?:from\s*|import\s*)["']([^"']+)["']/g
 for (const filePath of sourceFiles) {
  const source = readText(filePath)
+  if (source.includes('@/data/preview')) {
+    fail(`${filePath} 仍引用本地预览数据`)
+  }
  if (filePath.endsWith('.vue') && !/<(?:template|script)(?:\s|>)/.test(source)) {
    fail(`${filePath} 缺少 <template> 或 <script>`)
  }
@@ -101,27 +129,142 @@ if (fs.existsSync(path.join(workspace, '家谱.openapi.json'))) {
  fail('检测到旧 OpenAPI：家谱.openapi.json；genealogy-app-openapi.yaml 必须是唯一所有者')
 }

+const resolveLocalOpenApiRef = (reference) => {
+  if (!openApi || typeof reference !== 'string' || !reference.startsWith('#/')) return undefined
+  return reference
+    .slice(2)
+    .split('/')
+    .map((segment) => segment.replace(/~1/g, '/').replace(/~0/g, '~'))
+    .reduce((value, segment) => value?.[segment], openApi)
+}
+const visitOpenApiNode = (value, location = '$') => {
+  if (Array.isArray(value)) {
+    value.forEach((entry, index) => visitOpenApiNode(entry, `${location}[${index}]`))
+    return
+  }
+  if (!value || typeof value !== 'object') return
+  for (const [key, child] of Object.entries(value)) {
+    if (key === '$ref' && typeof child === 'string' && child.startsWith('#/') && resolveLocalOpenApiRef(child) === undefined) {
+      fail(`OpenAPI 引用了不存在的本地定义：${child}（${location}）`)
+      continue
+    }
+    visitOpenApiNode(child, `${location}.${key}`)
+  }
+}
+visitOpenApiNode(openApi)
+
+if (openApi?.servers?.[0]?.url !== 'https://backend-api.ddxcjp.cn') {
+  fail('OpenAPI 首选服务地址必须与正式运行时 HTTPS 接口一致')
+}
+
+for (const [endpointPath, pathItem] of Object.entries(openApi?.paths || {})) {
+  const requiredPathParams = [...endpointPath.matchAll(/\{([^}]+)\}/g)].map((match) => match[1])
+  for (const method of ['get', 'post', 'put', 'patch', 'delete']) {
+    const operation = pathItem[method]
+    if (!operation) continue
+    const declaredPathParams = [...(pathItem.parameters || []), ...(operation.parameters || [])]
+      .map((parameter) => parameter?.$ref ? resolveLocalOpenApiRef(parameter.$ref) : parameter)
+      .filter((parameter) => parameter?.in === 'path')
+      .map((parameter) => parameter.name)
+    for (const name of requiredPathParams) {
+      if (!declaredPathParams.includes(name)) {
+        fail(`OpenAPI 路径参数未声明：${method.toUpperCase()} ${endpointPath} 缺少 ${name}`)
+      }
+    }
+  }
+}
+
+for (const compliancePath of [
+  '/genealogy/app/compliance/documents/{documentKey}',
+  '/genealogy/app/compliance/documents/{documentKey}/versions/{versionNo}',
+]) {
+  const security = openApi?.paths?.[compliancePath]?.get?.security
+  if (!Array.isArray(security) || security.length !== 0) {
+    fail(`OpenAPI 合规文档必须允许登录前读取：GET ${compliancePath}`)
+  }
+}
+
+for (const contentProtectionPath of [
+  '/genealogy/app/genealogies/{genealogyId}/articles/{articleId}/content-protection',
+  '/genealogy/app/genealogies/{genealogyId}/growth-records/{recordId}/content-protection',
+]) {
+  for (const method of ['put', 'delete']) {
+    const schemaRef = openApi?.paths?.[contentProtectionPath]?.[method]
+      ?.responses?.['200']?.content?.['application/json']?.schema?.$ref
+    if (schemaRef !== '#/components/schemas/RVoid') {
+      fail(`OpenAPI 内容密码写操作必须返回 RVoid：${method.toUpperCase()} ${contentProtectionPath}`)
+    }
+  }
+}
+
+for (const [schemaName, expectedGrantType] of [
+  ['PasswordRegisterBody', 'password'],
+  ['PasswordLoginBody', 'password'],
+  ['SmsLoginBody', 'sms'],
+  ['SmsCodeBody', 'sms'],
+  ['PasswordResetBody', 'password'],
+]) {
+  const grantType = openApi?.components?.schemas?.[schemaName]?.properties?.grantType
+  if (!Array.isArray(grantType?.enum) || grantType.enum.length !== 1 || grantType.enum[0] !== expectedGrantType) {
+    fail(`OpenAPI ${schemaName}.grantType 必须固定为 ${expectedGrantType}`)
+  }
+}
+if (openApi?.components?.schemas?.PasswordChangeBody?.additionalProperties !== false) {
+  fail('OpenAPI PasswordChangeBody 必须拒绝未知字段')
+}
+const loginSchema = openApi?.components?.schemas?.LoginVo
+if (
+  loginSchema?.additionalProperties !== false ||
+  !Array.isArray(loginSchema?.required) ||
+  loginSchema.required.length !== 1 ||
+  loginSchema.required[0] !== 'access_token' ||
+  !loginSchema?.properties?.access_token ||
+  ['token', 'accessToken', 'tokenValue'].some((field) => loginSchema?.properties?.[field])
+) {
+  fail('OpenAPI LoginVo 必须只以 access_token 作为会话令牌契约')
+}
+
 const normalizeEndpointPath = (endpointPath) => endpointPath
  .split('?')[0]
  .replace(/\$\{[^}]+\}/g, '{}')
  .replace(/\{[^}]+\}/g, '{}')
 const documentedPaths = new Set(Object.keys(openApi?.paths || {}).map(normalizeEndpointPath))
+const documentedOperations = new Set(
+  Object.entries(openApi?.paths || {}).flatMap(([endpointPath, pathItem]) =>
+    ['get', 'post', 'put', 'patch', 'delete']
+      .filter((method) => pathItem?.[method])
+      .map((method) => `${method.toUpperCase()} ${normalizeEndpointPath(endpointPath)}`),
+  ),
+)
 const dynamicEndpointBuilders = new Set([
  '/genealogy/app/genealogies/{}/{}',
  '/genealogy/app/genealogies/{}/lineage/persons/{}/{}',
 ])
+const servicePathBuilders = new Set([
+  '/genealogy/app/genealogies/{}/content-password-recovery/{}/{}',
+])
 const apiFiles = listFiles(['services/api'], new Set(['.js']))
  .filter((filePath) => filePath.endsWith('-service.js') || filePath.endsWith('request-client.js'))
 const endpointPattern = /([`'"])(\/(?:genealogy|captcha|auth)[\s\S]*?)\1/g
+const serviceOperationPattern = /url:\s*([`'"])(\/(?:genealogy|captcha|auth)[^`'"\r\n]*)\1,\s*method:\s*(['"])(GET|POST|PUT|PATCH|DELETE)\3/g
 for (const filePath of apiFiles) {
-  for (const match of readText(filePath).matchAll(endpointPattern)) {
+  const source = readText(filePath)
+  for (const match of source.matchAll(endpointPattern)) {
    const endpoint = match[2]
    if (endpoint.includes('\n')) continue
    const normalizedPath = normalizeEndpointPath(endpoint)
-    if (!documentedPaths.has(normalizedPath) && !dynamicEndpointBuilders.has(normalizedPath)) {
+    if (!documentedPaths.has(normalizedPath) && !dynamicEndpointBuilders.has(normalizedPath) && !servicePathBuilders.has(normalizedPath)) {
      fail(`${filePath} 使用了 OpenAPI 未声明的路径：${endpoint}`)
    }
  }
+  for (const match of source.matchAll(serviceOperationPattern)) {
+    const endpoint = normalizeEndpointPath(match[2])
+    if (dynamicEndpointBuilders.has(endpoint)) continue
+    const operation = `${match[4]} ${endpoint}`
+    if (!documentedOperations.has(operation)) {
+      fail(`${filePath} 使用了 OpenAPI 未声明的操作：${operation}`)
+    }
+  }
 }

 if (failures.length > 0) {