rootandClaude Fable 5.1
304feea141
- root deno.json workspace (nodeModulesDir auto), npm versions registered once in imports, deno.lock; remove pnpm-lock/pnpm-workspace/root package.json; members keep minimal package.json (name/type/exports) - tasks: dev, typecheck (tsc 7.0.2 per member + deno check), lint/fmt (biome, useImportExtensions), test (vitest via deno), check:tokens, build (web + deno compile), ci, db:migrate/reset, gen:types - tsconfig base moved to config/ (no root tsconfig.json); deno types -> types/deno.d.ts; web drops baseUrl - server: Deno.serve entry with graceful shutdown, --role migrate|preflight|probe, WEB_ROOT static SPA hosting; drop @hono/node-server, tsx, esbuild build.mjs - logger: redact child() bindings and serialize err by message/stack; sync stdout destination; tests - relative imports get explicit extensions (sites/mp-sync paths left for follow-up) - crash-recovery tests spawn `deno run -A`; tasks tests use unique per-file schemas - single-container Dockerfile + entrypoint (migrate -> preflight -> api+worker watchdog), docker-compose.yml - docs: README, runbook, ADR-001 superseded, plan §1 validation row Co-Authored-By: Claude Fable 5.1 <[email protected]>
46 lines
1.5 KiB
TypeScript
46 lines
1.5 KiB
TypeScript
import { join } from "node:path";
|
|
import type { DB, Kysely } from "@umt/db";
|
|
import { sql } from "@umt/db";
|
|
import type { Config } from "./config.ts";
|
|
|
|
export interface PreflightProblem {
|
|
check: string;
|
|
message: string;
|
|
}
|
|
|
|
export interface PreflightDeps {
|
|
config: Config;
|
|
db: Kysely<DB>;
|
|
/** 测试可注入;默认取当前进程 uid(Windows 上为 null) */
|
|
uid?: number | null;
|
|
}
|
|
|
|
// 明显的占位符密钥:生产环境拒绝启动
|
|
const PLACEHOLDER = /change[-_]?me|replace[-_]?me|dev[-_]?only|example/i;
|
|
|
|
/** 启动自检:返回问题列表,空数组表示通过。不打印变量值。 */
|
|
export async function runPreflight({ config, db, uid = Deno.uid() }: PreflightDeps): Promise<PreflightProblem[]> {
|
|
const problems: PreflightProblem[] = [];
|
|
const prod = config.NODE_ENV === "production";
|
|
|
|
if (prod && PLACEHOLDER.test(config.SECRET_MASTER_KEY)) {
|
|
problems.push({ check: "secret", message: "SECRET_MASTER_KEY 仍是占位符,生产环境必须换成随机串" });
|
|
}
|
|
if (prod && uid === 0) {
|
|
problems.push({ check: "user", message: "生产环境不允许以 root 运行" });
|
|
}
|
|
try {
|
|
await sql`select 1`.execute(db);
|
|
} catch (err) {
|
|
problems.push({ check: "db", message: `数据库不可达: ${(err as Error).message}` });
|
|
}
|
|
if (config.WEB_ROOT) {
|
|
try {
|
|
await Deno.stat(join(config.WEB_ROOT, "index.html"));
|
|
} catch {
|
|
problems.push({ check: "web", message: `WEB_ROOT 下没有 index.html: ${config.WEB_ROOT}` });
|
|
}
|
|
}
|
|
return problems;
|
|
}
|