chore: code-check

2026-09-29 05:56:38 +08:00 · 2026-08-28 13:42:49 +08:00
parent 9213ee79b3
commit 48211fa587
12 changed files with 289 additions and 41 deletions
@@ -0,0 +1,195 @@
+#!/usr/bin/env bash
+# Copyright 2026 Arctel.net
+# SPDX-License-Identifier: Apache-2.0
+#
+# check_cordis_architecture.sh
+# 验证代码库是否严格遵循 Cordis 插件化架构规约与设计规范。
+
+set -euo pipefail
+
+ROOT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")/.." && pwd)"
+BACKEND_DIR="${ROOT_DIR}/backend"
+
+MODULE=$(cd "${BACKEND_DIR}" && go list -m 2>/dev/null || echo "Wavelet")
+
+RED='\033[0;31m'
+GREEN='\033[0;32m'
+YELLOW='\033[1;33m'
+BLUE='\033[0;34m'
+BOLD='\033[1m'
+NC='\033[0m' # No Color
+
+ERRORS=0
+
+log_check() {
+    echo -e "${BLUE}==>${NC} ${BOLD}$1${NC}"
+}
+
+log_pass() {
+    echo -e "  ${GREEN}✓${NC} $1"
+}
+
+log_fail() {
+    echo -e "  ${RED}✗ [FAIL]${NC} $1" >&2
+    ERRORS=$((ERRORS + 1))
+}
+
+log_warn() {
+    echo -e "  ${YELLOW}! [WARN]${NC} $1"
+}
+
+# 确保 ripgrep 可用
+if ! command -v rg >/dev/null 2>&1; then
+    echo -e "${RED}error: rg (ripgrep) is required to run architecture checks.${NC}" >&2
+    exit 1
+fi
+
+echo -e "${BOLD}═══════════════════════════════════════════════════════════════${NC}"
+echo -e "${BOLD}     Cordis Architecture & Spatiotemporal Composability Linter   ${NC}"
+echo -e "${BOLD}═══════════════════════════════════════════════════════════════${NC}"
+
+# ==============================================================================
+# 1. 微内核绝对隔离 (Core Micro-Kernel Isolation)
+# ==============================================================================
+log_check "1. 检查微内核 (backend/core/) 纯洁度..."
+
+# 1.1 禁止直接依赖重型 Web/ORM/Worker 框架
+CORE_FRAMEWORK_IMPORTS=$(rg -n '"github.com/gin-gonic/gin"|"gorm.io/gorm"|"github.com/hibiken/asynq"|"github.com/robfig/cron' \
+    "${BACKEND_DIR}/core/" --glob '*.go' -g '!*contracts*' -g '!*_test.go' || true)
+
+if [ -n "${CORE_FRAMEWORK_IMPORTS}" ]; then
+    log_fail "backend/core/ 严禁导入具体 Web/ORM/Worker 运行时框架 (gin, gorm, asynq, cron):"
+    echo "${CORE_FRAMEWORK_IMPORTS}" >&2
+else
+    log_pass "backend/core/ 无重型框架依赖"
+fi
+
+# 1.2 core/ 禁止导入任何插件
+CORE_PLUGIN_IMPORTS=$(rg -n "\"${MODULE}/plugins/|\"${MODULE}/downstream/" \
+    "${BACKEND_DIR}/core/" --glob '*.go' -g '!*_test.go' || true)
+
+if [ -n "${CORE_PLUGIN_IMPORTS}" ]; then
+    log_fail "backend/core/ 严禁直接依赖具体插件 (plugins/ 或 downstream/):"
+    echo "${CORE_PLUGIN_IMPORTS}" >&2
+else
+    log_pass "backend/core/ 零插件反向依赖"
+fi
+
+# ==============================================================================
+# 2. 服务契约纯洁度 (Contracts Cleanliness)
+# ==============================================================================
+log_check "2. 检查契约层 (backend/core/contracts/) 抽象纯洁度..."
+
+CONTRACTS_PLUGIN_IMPORTS=$(rg -n "\"${MODULE}/plugins/|\"${MODULE}/downstream/|\"github.com/gin-gonic/gin\"|\"github.com/hibiken/asynq\"" \
+    "${BACKEND_DIR}/core/contracts/" --glob '*.go' || true)
+
+if [ -n "${CONTRACTS_PLUGIN_IMPORTS}" ]; then
+    log_fail "backend/core/contracts/ 必须保持纯 Interface/DTO，严禁导入插件或 Web/Worker 框架依赖:"
+    echo "${CONTRACTS_PLUGIN_IMPORTS}" >&2
+else
+    log_pass "backend/core/contracts/ 纯抽象无侵入"
+fi
+
+# ==============================================================================
+# 3. 基础包纯洁度 (backend/pkg/ Purity)
+# ==============================================================================
+log_check "3. 检查基础库 (backend/pkg/) 纯洁度..."
+
+# 3.1 pkg/ 严禁导入 plugins/
+PKG_PLUGIN_IMPORTS=$(rg -n "\"${MODULE}/plugins/" \
+    "${BACKEND_DIR}/pkg/" --glob '*.go' -g '!*testhelper*' -g '!*_test.go' || true)
+
+if [ -n "${PKG_PLUGIN_IMPORTS}" ]; then
+    log_fail "backend/pkg/ 严禁导入任何上层 plugins/:"
+    echo "${PKG_PLUGIN_IMPORTS}" >&2
+else
+    log_pass "backend/pkg/ 零插件依赖"
+fi
+
+# 3.2 pkg/util/ 严禁导入 ORM / Session 框架
+UTIL_FRAMEWORK_IMPORTS=$(rg -n '"gorm.io/gorm"|"github.com/gorilla/sessions"' \
+    "${BACKEND_DIR}/pkg/util/" --glob '*.go' -g '!*_test.go' || true)
+
+if [ -n "${UTIL_FRAMEWORK_IMPORTS}" ]; then
+    log_fail "backend/pkg/util/ 必须保持纯粹，禁止导入 gorm、sessions 等数据库/会话框架包:"
+    echo "${UTIL_FRAMEWORK_IMPORTS}" >&2
+else
+    log_pass "backend/pkg/util/ 保持纯净无状态"
+fi
+
+# ==============================================================================
+# 4. 插件间隔离与单一所有者防线 (Plugin-to-Plugin Isolation & Single Owner Principle)
+# ==============================================================================
+log_check "4. 检查插件间隔离性 (禁止跨域直接 import)..."
+
+# 4.1 Domain 插件之间严禁相互 import
+DOMAIN_CROSS_IMPORTS=""
+for d in "${BACKEND_DIR}"/plugins/domain/*/; do
+    [ -d "$d" ] || continue
+    name=$(basename "$d")
+    imports=$(rg -n "\"${MODULE}/plugins/domain/" "${BACKEND_DIR}/plugins/domain/${name}" \
+        -g '*.go' -g '!*_test.go' 2>/dev/null | rg -v "backend/plugins/domain/${name}/" || true)
+    if [ -n "$imports" ]; then
+        DOMAIN_CROSS_IMPORTS="${DOMAIN_CROSS_IMPORTS}\n[domain/${name} -> other domain]:\n${imports}\n"
+    fi
+done
+
+if [ -n "${DOMAIN_CROSS_IMPORTS}" ]; then
+    log_fail "发现跨 Domain 插件直接依赖（必须通过 core/contracts 接口或 EventBus 解耦）:"
+    echo -e "${DOMAIN_CROSS_IMPORTS}" >&2
+else
+    log_pass "Domain 插件间 100% 解耦，无跨域直连 import"
+fi
+
+# 4.2 Driver 插件严禁导入 Domain 插件
+DRIVER_DOMAIN_IMPORTS=$(rg -n "\"${MODULE}/plugins/domain/" \
+    "${BACKEND_DIR}/plugins/drivers/" --glob '*.go' -g '!*_test.go' || true)
+
+if [ -n "${DRIVER_DOMAIN_IMPORTS}" ]; then
+    log_fail "Driver 驱动插件严禁直接依赖具体业务 domain 插件:"
+    echo "${DRIVER_DOMAIN_IMPORTS}" >&2
+else
+    log_pass "Driver 驱动插件独立无业务污染"
+fi
+
+# ==============================================================================
+# 5. 数据库规范与 GORM AutoMigrate 禁令 (Database Migration & ORM Rules)
+# ==============================================================================
+log_check "5. 检查数据库操作与 AutoMigrate 禁令..."
+
+AUTOMIGRATE_CALLS=$(rg -n '\.AutoMigrate\(' "${BACKEND_DIR}" \
+    --glob '*.go' -g '!*_test.go' -g '!*testhelper*' || true)
+
+if [ -n "${AUTOMIGRATE_CALLS}" ]; then
+    log_fail "严禁在生产代码中使用 GORM AutoMigrate（必须使用插件自包含 Goose SQL 迁移）:"
+    echo "${AUTOMIGRATE_CALLS}" >&2
+else
+    log_pass "零 GORM AutoMigrate，100% Goose SQL 迁移管理"
+fi
+
+# ==============================================================================
+# 6. 并发安全规范 (Goroutine Concurrency Safety)
+# ==============================================================================
+log_check "6. 检查并发安全规范 (禁止生产代码中使用裸 go func())..."
+
+BARE_GO_ROUTINES=$(rg -n '\bgo func\(' "${BACKEND_DIR}" \
+    --glob '*.go' -g '!*_test.go' -g '!goroutine.go' -g '!events.go' || true)
+
+if [ -n "${BARE_GO_ROUTINES}" ]; then
+    log_fail "生产代码严禁使用裸 'go func()'，必须使用 'util.Go' 确保 panic 恢复与调用栈追踪:"
+    echo "${BARE_GO_ROUTINES}" >&2
+else
+    log_pass "并发调用统一使用 util.Go 具备 panic 恢复能力"
+fi
+
+# ==============================================================================
+# 总结与判定
+# ==============================================================================
+echo -e "${BOLD}═══════════════════════════════════════════════════════════════${NC}"
+if [ ${ERRORS} -eq 0 ]; then
+    echo -e "${GREEN}${BOLD}✓ 所有 Cordis 架构合规性检查全部通过 (0 Violations)!${NC}"
+    exit 0
+else
+    echo -e "${RED}${BOLD}✗ 发现 ${ERRORS} 项 Cordis 架构规约违背，请根据上述提示修复！${NC}" >&2
+    exit 1
+fi