baseline: 批次A-D 成果 + membership 半成品(测试红)

This commit is contained in:
agent
2026-09-11 23:11:35 +08:00
commit b3f3095d53
311 changed files with 40540 additions and 0 deletions
View File
+204
View File
@@ -0,0 +1,204 @@
"""
基础配置:所有环境共享的部分。
具体环境差异:
- 开发:config.settings.dev(继承 base,DEBUG=True,SQLite)
- 生产:config.settings.prod(继承 base,DEBUG=False,PostgreSQL + Granian)
- 测试:config.settings.test(继承 base,内存 SQLite)
"""
from pathlib import Path
import environ
BASE_DIR = Path(__file__).resolve().parent.parent.parent # backend/
env = environ.Env()
# 读取 backend/.env(若存在)
env_file = BASE_DIR / ".env"
if env_file.exists():
environ.Env.read_env(str(env_file))
# === 核心 ===
SECRET_KEY = env(
"DJANGO_SECRET_KEY",
default="dev-insecure-change-me-IN-PROD-PLEASE",
)
DEBUG = False # 必须在子模块覆盖
ALLOWED_HOSTS = ["*"] # 子模块覆盖
# === 应用 ===
INSTALLED_APPS = [
"django.contrib.admin",
"django.contrib.auth",
"django.contrib.contenttypes",
"django.contrib.sessions",
"django.contrib.messages",
"django.contrib.staticfiles",
# 第三方
"rest_framework",
"rest_framework_simplejwt",
# 业务应用
"apps.core",
"apps.catalog",
"apps.partner",
"apps.inventory",
"apps.finance",
"apps.purchase",
"apps.sales",
"apps.report",
"apps.channel",
"apps.notify",
"apps.openapi",
"apps.printing",
"apps.ai",
"apps.billing",
"apps.website",
"apps.storefront",
]
MIDDLEWARE = [
"django.middleware.security.SecurityMiddleware",
"whitenoise.middleware.WhiteNoiseMiddleware", # 前端静态资源同源托管
"django.contrib.sessions.middleware.SessionMiddleware",
"django.middleware.common.CommonMiddleware",
"django.middleware.csrf.CsrfViewMiddleware",
"django.contrib.auth.middleware.AuthenticationMiddleware",
"django.contrib.messages.middleware.MessageMiddleware",
"django.middleware.clickjacking.XFrameOptionsMiddleware",
# 多租户识别
"apps.core.context.RequestContextMiddleware", # 请求上下文(审计用)
"apps.core.middleware.TenantMiddleware",
"apps.core.middleware.DemoReadOnlyMiddleware",
]
# Vue3 构建产物(dist)由 Django 同源服务:/static/* 托管资源,/ 返回 index.html
FRONTEND_DIST = BASE_DIR / "frontend_dist" # 容器内:/app/frontend_dist
if not FRONTEND_DIST.exists():
FRONTEND_DIST = BASE_DIR.parent / "frontend" / "dist" # 本机开发:dealerhub/frontend/dist
STATICFILES_DIRS = [FRONTEND_DIST] if FRONTEND_DIST.exists() else []
ROOT_URLCONF = "config.urls"
ASGI_APPLICATION = "config.asgi.application"
WSGI_APPLICATION = "config.wsgi.application"
TEMPLATES = [
{
"BACKEND": "django.template.backends.django.DjangoTemplates",
"DIRS": [],
"APP_DIRS": True,
"OPTIONS": {
"context_processors": [
"django.template.context_processors.request",
"django.contrib.auth.context_processors.auth",
"django.contrib.messages.context_processors.messages",
],
},
},
]
# === 数据库(默认 SQLite,子模块可覆盖) ===
DATABASES = {
"default": {
"ENGINE": "django.db.backends.sqlite3",
"NAME": BASE_DIR / "db.sqlite3",
}
}
# === 密码校验 ===
AUTH_PASSWORD_VALIDATORS = [
{"NAME": "django.contrib.auth.password_validation.UserAttributeSimilarityValidator"},
{"NAME": "django.contrib.auth.password_validation.MinimumLengthValidator"},
{"NAME": "django.contrib.auth.password_validation.CommonPasswordValidator"},
{"NAME": "django.contrib.auth.password_validation.NumericPasswordValidator"},
]
AUTH_USER_MODEL = "auth.User" # 阶段 1 后改为 apps.authx.User
# === 本地化 ===
LANGUAGE_CODE = "zh-hans"
TIME_ZONE = "Asia/Shanghai"
USE_I18N = True
USE_TZ = True
# === 静态文件 ===
STATIC_URL = "static/"
STATIC_ROOT = BASE_DIR / "staticfiles"
MEDIA_URL = "media/"
MEDIA_ROOT = BASE_DIR / "media"
DEFAULT_AUTO_FIELD = "django.db.models.BigAutoField"
# === DRF ===
REST_FRAMEWORK = {
"DEFAULT_AUTHENTICATION_CLASSES": (
"rest_framework_simplejwt.authentication.JWTAuthentication",
"rest_framework.authentication.SessionAuthentication", # admin 用
),
"DEFAULT_PERMISSION_CLASSES": (
"rest_framework.permissions.IsAuthenticated",
"apps.core.permissions.TenantMembershipPermission",
),
"DEFAULT_PAGINATION_CLASS": "rest_framework.pagination.PageNumberPagination",
"PAGE_SIZE": 20,
"DATETIME_FORMAT": "%Y-%m-%d %H:%M:%S",
# 统一业务异常 → HTTP 语义(迭代第 2 轮);见 apps/core/exceptions.py
"EXCEPTION_HANDLER": "apps.core.exceptions.api_exception_handler",
}
# === JWT ===
from datetime import timedelta # noqa: E402
SIMPLE_JWT = {
"ACCESS_TOKEN_LIFETIME": timedelta(hours=1),
"REFRESH_TOKEN_LIFETIME": timedelta(days=30),
"AUTH_HEADER_TYPES": ("Bearer",),
}
# === 日志 ===
LOGGING = {
"version": 1,
"disable_existing_loggers": False,
"formatters": {
"verbose": {
"format": "[{asctime}] {levelname} {name}: {message}",
"style": "{",
},
},
"handlers": {
"console": {
"class": "logging.StreamHandler",
"formatter": "verbose",
},
},
"root": {
"handlers": ["console"],
"level": "INFO",
},
"loggers": {
"django": {"handlers": ["console"], "level": "INFO", "propagate": False},
"dealerhub": {"handlers": ["console"], "level": "DEBUG", "propagate": False},
},
}
# === 多租户配置 ===
TENANT_HEADER = "X-Tenant-Id"
TENANT_DEFAULT = env("TENANT_DEFAULT", default="default")
# === AI 配置(批次 B) ===
# 无 KEY 时全部功能降级为纯统计版,不阻塞测试与演示。
AI_PROVIDER = env("AI_PROVIDER", default="") # 空 = 未接 LLM,只跑统计引擎
AI_BASE_URL = env("AI_BASE_URL", default="https://api.openai.com/v1")
AI_API_KEY = env("AI_API_KEY", default="")
AI_MODEL = env("AI_MODEL", default="gpt-4o-mini")
AI_TIMEOUT = env.int("AI_TIMEOUT", default=20)
AI_FREE_MONTHLY_QUOTA = env.int("AI_FREE_MONTHLY_QUOTA", default=10) # 0 = 不限
+21
View File
@@ -0,0 +1,21 @@
"""开发环境配置:DEBUG + SQLite + 本地 Granian。"""
from .base import * # noqa
from .base import BASE_DIR
DEBUG = True
ALLOWED_HOSTS = ["*"]
# SQLite(开发快速启动,无需安装 PG)
DATABASES = {
"default": {
"ENGINE": "django.db.backends.sqlite3",
"NAME": BASE_DIR / "db.sqlite3",
}
}
# 控制台打印 SQL
LOGGING["loggers"]["django.db.backends"] = { # noqa: F405
"handlers": ["console"],
"level": "DEBUG",
}
+35
View File
@@ -0,0 +1,35 @@
"""PostgreSQL 测试环境(用于并发/行锁验证)。
**为什么需要**:SQLite 用数据库级写锁,多线程并发会直接报 `database table is locked`,
无法验证"并发下不超卖"这类核心不变量。生产环境是 PostgreSQL(行级锁),
因此并发用例必须在 PG 上跑才有意义。
用法:
# 一次性准备(本机 PG,默认 5433 端口;见 scripts/setup_pg.py)
python scripts/setup_pg.py
# 跑全部测试(含并发)
DJANGO_SETTINGS_MODULE=config.settings.pgtest python -m pytest tests/ -p no:cacheprovider
# 只跑并发用例
DJANGO_SETTINGS_MODULE=config.settings.pgtest python -m pytest tests/test_concurrency.py -p no:cacheprovider -m postgres
环境变量可覆盖:PG_TEST_DB / PG_USER / PG_PASSWORD / PG_HOST / PG_PORT
"""
from .base import env # noqa: F401
from .test import * # noqa: F401,F403 继承测试配置(迁移禁用、密码哈希加速)
DATABASES = {
"default": {
"ENGINE": "django.db.backends.postgresql",
"NAME": env("PG_TEST_DB", default="dealerhub_test"),
"USER": env("PG_USER", default="postgres"),
"PASSWORD": env("PG_PASSWORD", default="postgres"),
"HOST": env("PG_HOST", default="127.0.0.1"),
"PORT": env("PG_PORT", default="5433"),
# 并发测试需要每个线程独立的持久连接(连接复用会串事务)
"CONN_MAX_AGE": 0,
"OPTIONS": {"connect_timeout": 5},
}
}
+56
View File
@@ -0,0 +1,56 @@
"""生产环境配置:PostgreSQL + 严格安全 + Granian。"""
import os
from .base import * # noqa
from .base import env
DEBUG = False
ALLOWED_HOSTS = env.list("DJANGO_ALLOWED_HOSTS", default=["*"])
# PostgreSQL(用 DATABASE_URL 环境变量)
DATABASES = {
"default": env.db(
"DATABASE_URL",
default="postgres://dealerhub:dealerhub@pg-main:5432/dealerhub",
)
}
# 异步连接池
DATABASES["default"]["OPTIONS"] = {
"pool": {"min_size": 2, "max_size": 10, "timeout": 10},
}
# Redis
CACHES = {
"default": {
"BACKEND": env(
"CACHE_BACKEND",
default="django.core.cache.backends.locmem.LocMemCache",
),
"LOCATION": env("CACHE_LOCATION", default="dealerhub-cache"),
}
}
# 安全
SECURE_PROXY_SSL_HEADER = ("HTTP_X_FORWARDED_PROTO", "https")
SESSION_COOKIE_SECURE = True
CSRF_COOKIE_SECURE = True
SECURE_HSTS_SECONDS = 60 * 60 * 24 * 30 # 30 天
SECURE_HSTS_INCLUDE_SUBDOMAINS = True
SECURE_HSTS_PRELOAD = True
SECURE_CONTENT_TYPE_NOSNIFF = True
SECURE_REFERRER_POLICY = "same-origin"
X_FRAME_OPTIONS = "DENY"
# 生产不打印 SQL(prod 不继承 dev 的配置,避免 KeyError)
LOGGING.setdefault("loggers", {})
LOGGING["loggers"].setdefault("django", {
"handlers": ["console"],
"level": "INFO",
"propagate": False,
})
LOGGING["loggers"].setdefault("django.db.backends", {
"handlers": ["console"],
"level": "WARNING",
"propagate": False,
})
+26
View File
@@ -0,0 +1,26 @@
"""测试环境配置:内存 SQLite + pytest。"""
from .base import * # noqa
DEBUG = False
DATABASES = {
"default": {
"ENGINE": "django.db.backends.sqlite3",
"NAME": ":memory:",
}
}
# 测试时禁用迁移,按需 fixture 创建 schema
class DisableMigrations:
def __contains__(self, item):
return True
def __getitem__(self, item):
return None
MIGRATION_MODULES = DisableMigrations()
# 测试用 PASSWORD_HASHERS 加速
PASSWORD_HASHERS = ["django.contrib.auth.hashers.MD5PasswordHasher"]