Merge pull request #98 from rebase-network/dev

Dev

Author: xrdavies

.env.example

@@ -1,25 +1,37 @@
+# Runtime
 NODE_ENV=development
 APP_VERSION=dev
 PORT=8788
+API_HOST_PORT=8788
 
+# Database
 DATABASE_URL=postgresql://rebase:rebase@127.0.0.1:55433/rebase
 
+# Auth
 BETTER_AUTH_SECRET=replace-with-a-long-random-string
 BETTER_AUTH_URL=http://127.0.0.1:8788
 CORS_ALLOWED_ORIGINS=http://127.0.0.1:5174,http://localhost:5174,http://127.0.0.1:4321,http://localhost:4321
 
+# Admin bootstrap
 DEV_ADMIN_EMAIL=admin@rebase.local
 DEV_ADMIN_PASSWORD=RebaseAdmin123456!
 DEV_ADMIN_NAME=Rebase Super Admin
 
+# Public site and frontend runtime
 VITE_API_BASE_URL=http://127.0.0.1:8788
 VITE_PUBLIC_SITE_BASE_URL=https://rebase.network
 API_BASE_URL=http://127.0.0.1:8788
 SITE_URL=https://rebase.network
 
+# Cloudflare R2
 R2_ACCOUNT_ID=
 R2_ACCESS_KEY_ID=
 R2_SECRET_ACCESS_KEY=
 R2_BUCKET=rebase-media
 R2_PUBLIC_BASE_URL=
 R2_DEV_USE_WRANGLER=false
+
+# WeChat Official Account
+WECHAT_OFFICIAL_APP_ID=
+WECHAT_OFFICIAL_APP_SECRET=
+WECHAT_DEFAULT_THUMB_MEDIA_ID=

.github/workflows/ci.yml

@@ -19,8 +19,6 @@ jobs:
 
       - name: Setup pnpm
         uses: pnpm/action-setup@v4
-        with:
-          version: 10.6.5
 
       - name: Setup Node.js
         uses: actions/setup-node@v4

.github/workflows/smoke.yml

@@ -12,8 +12,6 @@ jobs:
 
       - name: Setup pnpm
         uses: pnpm/action-setup@v4
-        with:
-          version: 10.6.5
 
       - name: Setup Node.js
         uses: actions/setup-node@v4

apps/admin/src/lib/format.ts

@@ -263,6 +263,7 @@ export const formatAuditSummary = (summary: string) => {
     [/^Archived article (.+)$/i, (m) => `已归档文章 ${m[1]}`],
     [/^Created GeekDaily episode (.+)$/i, (m) => `已创建极客日报第 ${m[1]} 期`],
     [/^Updated GeekDaily episode (.+)$/i, (m) => `已更新极客日报第 ${m[1]} 期`],
+    [/^Created GeekDaily WeChat draft (.+)$/i, (m) => `已创建极客日报第 ${m[1]} 期微信公众号草稿`],
     [/^Published GeekDaily episode (.+)$/i, (m) => `已发布极客日报第 ${m[1]} 期`],
     [/^Archived GeekDaily episode (.+)$/i, (m) => `已归档极客日报第 ${m[1]} 期`],
     [/^Created asset (.+)$/i, (m) => `已创建媒体记录 ${m[1]}`],

apps/admin/src/lib/geekdaily-wechat.ts

@@ -11,6 +11,9 @@ export interface AppEnv {
   r2Bucket: string;
   r2PublicBaseUrl: string;
   r2DevUseWrangler: boolean;
+  wechatOfficialAppId: string;
+  wechatOfficialAppSecret: string;
+  wechatDefaultThumbMediaId: string;
 }
 
 let envCache: AppEnv | null = null;
@@ -49,6 +52,9 @@ export const getEnv = (): AppEnv => {
     r2Bucket: process.env.R2_BUCKET ?? 'rebase-media',
     r2PublicBaseUrl: process.env.R2_PUBLIC_BASE_URL ?? '',
     r2DevUseWrangler: parseBoolean(process.env.R2_DEV_USE_WRANGLER, false),
+    wechatOfficialAppId: process.env.WECHAT_OFFICIAL_APP_ID ?? '',
+    wechatOfficialAppSecret: process.env.WECHAT_OFFICIAL_APP_SECRET ?? '',
+    wechatDefaultThumbMediaId: process.env.WECHAT_DEFAULT_THUMB_MEDIA_ID ?? '',
   };
 
   return envCache;

apps/api/src/lib/env.ts

@@ -2,10 +2,14 @@ import { asc, count, desc, eq, ilike, inArray, or, sql } from 'drizzle-orm';
 
 import { geekdailyEpisodeItems, geekdailyEpisodes } from '@rebase/db';
 import {
+  buildGeekDailyWechatHtml,
   buildGeekDailyBodyMarkdown,
   buildGeekDailySummary,
   extractGeekDailyBodyNote,
+  getGeekDailyEpisodePath,
   getGeekDailyEpisodeSlug,
+  getGeekDailyWechatGenerationIssue,
+  type AdminGeekDailyWechatDraftRecord,
   type AdminGeekDailyListItem,
   type ContentStatus,
   type GeekDailyEpisodeInput,
@@ -14,10 +18,13 @@ import {
 
 import { createAuditEntry, type AuditActor } from './audit.js';
 import { getDb } from './db.js';
-import { badRequest, notFound } from './errors.js';
+import { getEnv } from './env.js';
+import { badRequest, notFound, serviceUnavailable } from './errors.js';
 import { buildPaginatedMeta, resolvePagination, type PaginationInput } from './pagination.js';
 import { combineFilters, toContainsPattern } from './query-filters.js';
+import { getPublicSiteConfig } from './site.js';
 import { toIsoString } from './utils.js';
+import { createWechatOfficialDraft } from './wechat-official.js';
 
 const mapEpisodeItem = (row: typeof geekdailyEpisodeItems.$inferSelect) => ({
   title: row.title,
@@ -220,6 +227,18 @@ const resolveGeekDailyPublishedAt = (status: ContentStatus, currentPublishedAt?:
   return currentPublishedAt ? coerceDate(currentPublishedAt) : new Date();
 };
 
+const withBaseUrl = (baseUrl: string, pathname: string) => new URL(pathname, baseUrl).toString();
+
+const truncateByCodePoints = (value: string, maxLength: number) => Array.from(value).slice(0, maxLength).join('');
+
+const buildWechatDraftTitle = (record: ReturnType<typeof mapEpisodeDetail>) =>
+  truncateByCodePoints((record.title.trim() || `极客日报#${record.episodeNumber}`).trim(), 32);
+
+const buildWechatDraftAuthor = (editors: string[]) => truncateByCodePoints((editors.join('、') || 'Rebase').trim(), 16);
+
+const buildWechatDraftDigest = (record: ReturnType<typeof mapEpisodeDetail>) =>
+  truncateByCodePoints((record.summary.trim() || buildGeekDailySummary({ items: record.items })).trim(), 128);
+
 const mapEpisodeDetail = (row: any, items: any[]) => ({
   id: row.id,
   slug: getGeekDailyEpisodeSlug(row.episodeNumber),
@@ -518,6 +537,79 @@ export const archiveAdminGeekDailyEpisode = async (id: string, actor: AuditActor
   return getAdminGeekDailyEpisode(id);
 };
 
+export const createAdminGeekDailyWechatDraft = async (
+  id: string,
+  actor: AuditActor,
+): Promise<AdminGeekDailyWechatDraftRecord> => {
+  const current = await getAdminGeekDailyEpisode(id);
+  if (!current) {
+    throw notFound('GeekDaily episode not found');
+  }
+
+  if (current.status !== 'published') {
+    throw badRequest('only published GeekDaily episodes can create a WeChat draft');
+  }
+
+  const editorName = current.editors.length > 0 ? current.editors.join('、') : 'Rebase';
+  const wechatInput = {
+    episodeNumber: current.episodeNumber,
+    editorName,
+    bodyMarkdown: extractGeekDailyBodyNote(current.bodyMarkdown),
+    items: current.items,
+  };
+  const issue = getGeekDailyWechatGenerationIssue(wechatInput);
+  if (issue) {
+    throw badRequest('wechat draft generation failed validation', { issue });
+  }
+
+  const content = buildGeekDailyWechatHtml(wechatInput);
+  if (!content) {
+    throw badRequest('wechat draft content is empty');
+  }
+
+  const site = await getPublicSiteConfig();
+  const title = buildWechatDraftTitle(current);
+  const author = buildWechatDraftAuthor(current.editors);
+  const digest = buildWechatDraftDigest(current);
+
+  const thumbMediaId = getEnv().wechatDefaultThumbMediaId.trim();
+  if (!thumbMediaId) {
+    throw serviceUnavailable('wechat default thumb media id is not configured', {
+      missing: ['WECHAT_DEFAULT_THUMB_MEDIA_ID'],
+    });
+  }
+
+  const contentSourceUrl = withBaseUrl(site.primaryDomain, getGeekDailyEpisodePath(current.episodeNumber));
+  const { mediaId } = await createWechatOfficialDraft({
+    title,
+    author,
+    digest,
+    content,
+    contentSourceUrl,
+    thumbMediaId,
+  });
+
+  await createAuditEntry({
+    ...actor,
+    action: 'geekdaily.wechat_draft.create',
+    targetType: 'geekdaily_episode',
+    targetId: id,
+    summary: `Created GeekDaily WeChat draft ${current.episodeNumber}`,
+  });
+
+  return {
+    episodeId: id,
+    episodeNumber: current.episodeNumber,
+    title,
+    author,
+    digest,
+    mediaId,
+    thumbMediaId,
+    contentSourceUrl,
+    itemCount: current.items.length,
+  };
+};
+
 export const listPublicGeekDailyEpisodes = async (limit = -1) => {
   return withPublicGeekDailyCache(`episodes:${limit}`, async () => {
     const db = getDb();

apps/api/src/lib/geekdaily.ts

@@ -0,0 +1,148 @@
+import { getEnv } from './env.js';
+import { serviceUnavailable } from './errors.js';
+
+interface WechatApiPayload {
+  errcode?: number;
+  errmsg?: string;
+}
+
+interface WechatAccessTokenPayload extends WechatApiPayload {
+  access_token?: string;
+  expires_in?: number;
+}
+
+interface WechatDraftAddPayload extends WechatApiPayload {
+  media_id?: string;
+}
+
+export interface WechatNewsDraftInput {
+  title: string;
+  author: string;
+  digest: string;
+  content: string;
+  contentSourceUrl: string;
+  thumbMediaId: string;
+}
+
+let accessTokenCache: { appId: string; accessToken: string; expiresAt: number } | null = null;
+
+const requestTimeoutMs = 15_000;
+const accessTokenRefreshBufferMs = 5 * 60 * 1000;
+
+const createWechatApiError = (stage: string, payload: unknown) =>
+  serviceUnavailable(`wechat official account ${stage} failed`, {
+    stage,
+    payload,
+  });
+
+const parseJson = async <T>(response: Response): Promise<T> => {
+  const text = await response.text();
+
+  try {
+    return JSON.parse(text) as T;
+  } catch {
+    throw createWechatApiError('response parsing', {
+      status: response.status,
+      body: text,
+    });
+  }
+};
+
+const getWechatCredentials = () => {
+  const env = getEnv();
+  const appId = env.wechatOfficialAppId.trim();
+  const appSecret = env.wechatOfficialAppSecret.trim();
+  const missing = [
+    !appId && 'WECHAT_OFFICIAL_APP_ID',
+    !appSecret && 'WECHAT_OFFICIAL_APP_SECRET',
+  ].filter(Boolean);
+
+  if (missing.length > 0) {
+    throw serviceUnavailable('wechat official account is not configured', { missing });
+  }
+
+  return { appId, appSecret };
+};
+
+const fetchWechatAccessToken = async () => {
+  const { appId, appSecret } = getWechatCredentials();
+  const cached = accessTokenCache;
+
+  if (cached && cached.appId === appId && cached.expiresAt > Date.now()) {
+    return cached.accessToken;
+  }
+
+  const url = new URL('https://api.weixin.qq.com/cgi-bin/token');
+  url.searchParams.set('grant_type', 'client_credential');
+  url.searchParams.set('appid', appId);
+  url.searchParams.set('secret', appSecret);
+
+  let response: Response;
+  try {
+    response = await fetch(url, {
+      signal: AbortSignal.timeout(requestTimeoutMs),
+    });
+  } catch (error) {
+    throw createWechatApiError('access token request', {
+      message: error instanceof Error ? error.message : String(error),
+    });
+  }
+
+  const payload = await parseJson<WechatAccessTokenPayload>(response);
+  if (!response.ok || payload.errcode || !payload.access_token || !payload.expires_in) {
+    throw createWechatApiError('access token response', payload);
+  }
+
+  accessTokenCache = {
+    appId,
+    accessToken: payload.access_token,
+    expiresAt: Date.now() + payload.expires_in * 1000 - accessTokenRefreshBufferMs,
+  };
+
+  return payload.access_token;
+};
+
+export const createWechatOfficialDraft = async (input: WechatNewsDraftInput) => {
+  const accessToken = await fetchWechatAccessToken();
+  const url = new URL('https://api.weixin.qq.com/cgi-bin/draft/add');
+  url.searchParams.set('access_token', accessToken);
+
+  const body = {
+    articles: [
+      {
+        article_type: 'news',
+        title: input.title,
+        author: input.author,
+        digest: input.digest,
+        content: input.content,
+        content_source_url: input.contentSourceUrl,
+        thumb_media_id: input.thumbMediaId,
+      },
+    ],
+  };
+
+  let response: Response;
+  try {
+    response = await fetch(url, {
+      method: 'POST',
+      headers: {
+        'content-type': 'application/json',
+      },
+      body: JSON.stringify(body),
+      signal: AbortSignal.timeout(requestTimeoutMs),
+    });
+  } catch (error) {
+    throw createWechatApiError('draft request', {
+      message: error instanceof Error ? error.message : String(error),
+    });
+  }
+
+  const payload = await parseJson<WechatDraftAddPayload>(response);
+  if (!response.ok || payload.errcode || !payload.media_id) {
+    throw createWechatApiError('draft response', payload);
+  }
+
+  return {
+    mediaId: payload.media_id,
+  };
+};

apps/api/src/lib/wechat-official.ts

@@ -26,7 +26,7 @@ import { createAdminArticle, getAdminArticle, listAdminArticles, publishAdminArt
 import { createAdminAsset, deleteAdminAsset, getAdminAsset, getAdminAssetUploadConfig, listAdminAssets, updateAdminAsset, uploadAdminAsset } from '../lib/assets.js';
 import { createAdminContributor, createAdminContributorRole, getAdminContributor, listAdminContributorRoles, listAdminContributors, updateAdminContributor, updateAdminContributorRole } from '../lib/contributors.js';
 import { createAdminEvent, getAdminEvent, listAdminEvents, publishAdminEvent, updateAdminEvent, archiveAdminEvent } from '../lib/events.js';
-import { createAdminGeekDailyEpisode, getAdminGeekDailyEpisode, listAdminGeekDailyEpisodes, publishAdminGeekDailyEpisode, updateAdminGeekDailyEpisode, archiveAdminGeekDailyEpisode } from '../lib/geekdaily.js';
+import { createAdminGeekDailyEpisode, createAdminGeekDailyWechatDraft, getAdminGeekDailyEpisode, listAdminGeekDailyEpisodes, publishAdminGeekDailyEpisode, updateAdminGeekDailyEpisode, archiveAdminGeekDailyEpisode } from '../lib/geekdaily.js';
 import { badRequest } from '../lib/errors.js';
 import { handleApiError, jsonError, ok } from '../lib/http.js';
 import { createAdminJob, getAdminJob, listAdminJobs, publishAdminJob, updateAdminJob, archiveAdminJob } from '../lib/jobs.js';
@@ -217,6 +217,9 @@ adminRoutes.patch('/geekdaily/:id', requireActiveStaff('geekdaily.write'), async
   const payload = expectValid(c, validateGeekDailyEpisodeInput(await c.req.json().catch(() => null)));
   return c.json(ok(await updateAdminGeekDailyEpisode(c.req.param('id'), payload, getAuditActor(c))));
 });
+adminRoutes.post('/geekdaily/:id/wechat-draft', requireActiveStaff('geekdaily.publish'), async (c) =>
+  c.json(ok(await createAdminGeekDailyWechatDraft(c.req.param('id'), getAuditActor(c)))),
+);
 adminRoutes.post('/geekdaily/:id/publish', requireActiveStaff('geekdaily.publish'), async (c) => c.json(ok(await publishAdminGeekDailyEpisode(c.req.param('id'), getAuditActor(c)))));
 adminRoutes.post('/geekdaily/:id/archive', requireActiveStaff('geekdaily.publish'), async (c) => c.json(ok(await archiveAdminGeekDailyEpisode(c.req.param('id'), getAuditActor(c)))));
 

apps/api/src/routes/admin.ts

@@ -44,6 +44,9 @@ services:
       R2_BUCKET: ${R2_BUCKET:-rebase-media}
       R2_PUBLIC_BASE_URL: ${R2_PUBLIC_BASE_URL:-}
       R2_DEV_USE_WRANGLER: ${R2_DEV_USE_WRANGLER:-false}
+      WECHAT_OFFICIAL_APP_ID: ${WECHAT_OFFICIAL_APP_ID:-}
+      WECHAT_OFFICIAL_APP_SECRET: ${WECHAT_OFFICIAL_APP_SECRET:-}
+      WECHAT_DEFAULT_THUMB_MEDIA_ID: ${WECHAT_DEFAULT_THUMB_MEDIA_ID:-}
       CLOUDFLARE_API_TOKEN: ${CLOUDFLARE_API_TOKEN:-}
     ports:
       - "127.0.0.1:${API_HOST_PORT:-8788}:8788"