feat: extend feishu track sync

.dockerignore

@@ -0,0 +1,29 @@
+.git
+.github
+.DS_Store
+.env
+.env.*
+
+node_modules
+.nuxt
+.output
+output
+coverage
+tmp
+
+.serena
+.playwright-mcp
+.codexpotter
+.spec-workflow
+.golutra
+.vscode
+
+docs
+docs.zip
+exports
+deploy
+false
+--port
+
+*.log
+*.tsbuildinfo

.env.example

@@ -2,6 +2,10 @@
 WINLOOP_PG_URL=postgresql://winloop:password@127.0.0.1:5432/winloop
 WINLOOP_REDIS_URL=redis://:password@127.0.0.1:6379/0
 
+# ===== 开发态地址契约（pnpm dev / pnpm dev:pwa 必填）=====
+WINLOOP_DEV_HOST=127.0.0.1
+WINLOOP_DEV_PORT=3510
+
 WINLOOP_STORAGE_PROVIDER=local
 WINLOOP_STORAGE_LOCAL_ROOT=./tmp/document-storage
 WINLOOP_STORAGE_ENDPOINT=
@@ -13,6 +17,8 @@ WINLOOP_STORAGE_FORCE_PATH_STYLE=true
 
 # 配置加密主密钥（建议生产必配；用于敏感配置加密落库）
 WINLOOP_CONFIG_MASTER_KEY=
+# 第三方登录引导 pending cookie 签名密钥（生产建议独立配置；未配置时回退到上方主密钥）
+WINLOOP_AUTH_ONBOARDING_SECRET=
 
 # ===== 业务参数（支持 UI 覆盖，Env 作为兜底）=====
 # 若 ONLYOFFICE 与应用不在同一网络，请配置为可被 ONLYOFFICE 访问的绝对地址（示例：https://app.example.com/api）
@@ -27,5 +33,48 @@ WINLOOP_ONLYOFFICE_ENDPOINT=
 WINLOOP_ONLYOFFICE_JWT_SECRET=
 # 应用外网基地址（推荐，必须为可访问应用的绝对地址，不带 /api；例如 https://app.example.com）
 WINLOOP_PUBLIC_BASE_URL=
+# draw.io embed 宿主（留空默认 https://embed.diagrams.net；若使用内网或自托管 draw.io，请填写可访问的绝对地址）
+WINLOOP_PUBLIC_DRAWIO_EMBED_BASE_URL=
+# tldraw 4.x 生产 license key（仅生产 HTTPS 非 localhost 部署必配）
+WINLOOP_TLDRAW_LICENSE_KEY=
 # 项目资源临时访问地址有效期（秒）
 WINLOOP_PROJECT_RESOURCE_ACCESS_URL_TTL_SECONDS=600
+
+# ===== 答辩 Realtime（当前验收主链路：Qwen + audio_video）=====
+WINLOOP_DEFENSE_REALTIME_QWEN_BASE_WS_URL=wss://dashscope.aliyuncs.com/api-ws/v1/inference
+WINLOOP_DEFENSE_REALTIME_QWEN_API_KEY=
+WINLOOP_DEFENSE_REALTIME_QWEN_WORKSPACE_ID=
+WINLOOP_DEFENSE_REALTIME_QWEN_APP_ID=
+WINLOOP_DEFENSE_REALTIME_QWEN_VOICE=
+WINLOOP_DEFENSE_REALTIME_QWEN_FRAME_INTERVAL_MS=1000
+
+# Coze 当前保留为备选链路，本轮默认不作为主验收路径
+WINLOOP_DEFENSE_REALTIME_COZE_BASE_URL=https://api.coze.cn
+WINLOOP_DEFENSE_REALTIME_COZE_BOT_ID=
+WINLOOP_DEFENSE_REALTIME_COZE_CONNECTOR_ID=
+WINLOOP_DEFENSE_REALTIME_COZE_VOICE_ID=
+WINLOOP_DEFENSE_REALTIME_COZE_AUTH_MODE=pat
+WINLOOP_DEFENSE_REALTIME_COZE_PAT_OR_OAUTH_SECRET=
+
+# ===== 本地 ASR dev bridge（可选；推荐先接 Groq 免费试用）=====
+MEETING_ASR_DEV_TRANSCRIBE_URL=https://api.groq.com/openai/v1/audio/transcriptions
+MEETING_ASR_DEV_TRANSCRIBE_MODEL=whisper-large-v3-turbo
+MEETING_ASR_DEV_TRANSCRIBE_MODEL_FALLBACKS=whisper-large-v3
+MEETING_ASR_DEV_TRANSCRIBE_LANGUAGE=zh
+MEETING_ASR_DEV_TRANSCRIBE_API_KEY=
+MEETING_ASR_DEV_CALLBACK_URL=http://127.0.0.1:3510/api/internal/meetings/asr-events
+MEETING_ASR_DEV_CALLBACK_SECRET=
+MEETING_ASR_DEV_MIN_CHUNK_MS=4000
+
+# ===== Sentry（可选；未配置时应用仍可运行，只是不启用上报）=====
+WINLOOP_SENTRY_DSN=
+# 仅支持 staging / production；本地开发可留空
+WINLOOP_SENTRY_ENVIRONMENT=
+WINLOOP_SENTRY_TRACES_SAMPLE_RATE=0.1
+# 可选；默认复用 WINLOOP_BUILD_VERSION
+WINLOOP_SENTRY_RELEASE=
+
+# ===== Sentry 构建期参数（仅 CI/CD 构建并上传 source map 时需要）=====
+SENTRY_AUTH_TOKEN=
+WINLOOP_SENTRY_ORG=
+WINLOOP_SENTRY_PROJECT=

.github/actions/setup-pnpm/action.yml

@@ -0,0 +1,34 @@
+name: Setup pnpm project
+description: Install Node.js, enable pnpm, and install dependencies.
+
+inputs:
+  node-version:
+    description: Node.js version used by CI jobs.
+    required: false
+    default: 20
+  pnpm-version:
+    description: pnpm version used by the repository.
+    required: false
+    default: 10.29.2
+
+runs:
+  using: composite
+  steps:
+    - uses: pnpm/action-setup@v4
+      with:
+        version: ${{ inputs.pnpm-version }}
+        run_install: false
+
+    - uses: actions/setup-node@v5
+      with:
+        node-version: ${{ inputs.node-version }}
+        cache: pnpm
+        cache-dependency-path: pnpm-lock.yaml
+
+    - name: Verify pnpm
+      shell: bash
+      run: pnpm --version
+
+    - name: Install
+      shell: bash
+      run: pnpm install --frozen-lockfile

.github/workflows/ci.yml

@@ -13,25 +13,17 @@ on:
 
 env:
   FORCE_JAVASCRIPT_ACTIONS_TO_NODE24: true
+  CI_NODE_VERSION: '20'
 
 jobs:
   lint:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v5
-      - uses: actions/setup-node@v5
-        with:
-          node-version: lts/*
-          package-manager-cache: false
-
-      - name: Enable Corepack (pnpm)
-        run: |
-          corepack enable
-          corepack prepare pnpm@10.29.2 --activate
-          pnpm --version
 
-      - name: Install
-        run: pnpm install --frozen-lockfile
+      - uses: ./.github/actions/setup-pnpm
+        with:
+          node-version: ${{ env.CI_NODE_VERSION }}
 
       - name: Lint
         run: pnpm run lint
@@ -40,47 +32,61 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v5
-      - uses: actions/setup-node@v5
-        with:
-          node-version: lts/*
-          package-manager-cache: false
-
-      - name: Enable Corepack (pnpm)
-        run: |
-          corepack enable
-          corepack prepare pnpm@10.29.2 --activate
-          pnpm --version
 
-      - name: Install
-        run: pnpm install --frozen-lockfile
+      - uses: ./.github/actions/setup-pnpm
+        with:
+          node-version: ${{ env.CI_NODE_VERSION }}
 
       - name: Typecheck
         run: pnpm run typecheck
 
       - name: Project Visibility Guard
         run: pnpm run test:project-visibility
 
-  build_and_smoke:
+  test_unit:
     runs-on: ubuntu-latest
-    timeout-minutes: 30
     steps:
       - uses: actions/checkout@v5
-      - uses: actions/setup-node@v5
+
+      - uses: ./.github/actions/setup-pnpm
         with:
-          node-version: lts/*
-          package-manager-cache: false
+          node-version: ${{ env.CI_NODE_VERSION }}
 
-      - name: Enable Corepack (pnpm)
-        run: |
-          corepack enable
-          corepack prepare pnpm@10.29.2 --activate
-          pnpm --version
+      - name: Unit Tests
+        run: pnpm run test:unit
+
+  smoke:
+    runs-on: ubuntu-latest
+    timeout-minutes: 30
+    steps:
+      - uses: actions/checkout@v5
 
-      - name: Install
-        run: pnpm install --frozen-lockfile
+      - uses: ./.github/actions/setup-pnpm
+        with:
+          node-version: ${{ env.CI_NODE_VERSION }}
 
       - name: Build
         run: pnpm run build
 
       - name: Smoke
         run: pnpm run ci:smoke
+
+  e2e_smoke:
+    runs-on: ubuntu-latest
+    timeout-minutes: 30
+    steps:
+      - uses: actions/checkout@v5
+
+      - uses: ./.github/actions/setup-pnpm
+        with:
+          node-version: ${{ env.CI_NODE_VERSION }}
+
+      - name: E2E Smoke
+        env:
+          WINLOOP_PG_URL: ${{ secrets.WINLOOP_PG_URL }}
+        run: |
+          if [ -z "$WINLOOP_PG_URL" ]; then
+            echo "WINLOOP_PG_URL 未配置，跳过 E2E smoke。"
+            exit 0
+          fi
+          pnpm run test:e2e