feat: 多用户登录 —— 账号存 DB + session cookie + per-user 隔离

.env.example

@@ -25,6 +25,10 @@ JWT_SECRET=please-change-me-32-chars-minimum-xxxx
 JWT_ALGORITHM=HS256
 LOG_LEVEL=INFO
 
+# 多用户登录开关:dashboard 读。false/不设(本地)=不登录回落 CONSOLE_SUBJECT;
+# true(线上)=强制登录。账号存 DB(users 表),用 services/paper/scripts/create_user.py 种入。
+AUTH_ENABLED=false
+
 
 # ───── 2. Service URLs & ports（本地默认） ─────────────────
 DATA_SERVICE_URL=http://localhost:8001

.github/workflows/ci.yml

@@ -92,6 +92,8 @@ jobs:
         run: pnpm install --frozen-lockfile
       - name: Type check
         run: pnpm typecheck
+      - name: Unit tests
+        run: pnpm test
       - name: Build (Next.js dynamic app)
         run: pnpm build
 

apps/dashboard/.env.local.example

@@ -9,6 +9,9 @@
 # CONSOLE_SUBJECT=console:dev
 # CONSOLE_EMAIL=console@inalpha.dev
 
+# ── 多用户登录。默认关;本地联调登录闸门再设 true(需先 migrate 建 users 表 + create_user)──
+# AUTH_ENABLED=false
+
 # ── 指向远端 / 非默认端口的后端 ──
 # PAPER_SERVICE_URL=http://127.0.0.1:8002
 # DATA_SERVICE_URL=http://127.0.0.1:8001

apps/dashboard/messages/en.json

@@ -16,7 +16,8 @@
     "menu": "Menu",
     "close": "Close",
     "collapse": "Collapse sidebar",
-    "expand": "Expand sidebar"
+    "expand": "Expand sidebar",
+    "logout": "Sign out"
   },
   "theme": {
     "label": "Theme",

apps/dashboard/messages/zh.json

@@ -16,7 +16,8 @@
     "menu": "菜单",
     "close": "关闭",
     "collapse": "收起侧边栏",
-    "expand": "展开侧边栏"
+    "expand": "展开侧边栏",
+    "logout": "登出"
   },
   "theme": {
     "label": "主题",

apps/dashboard/package.json

@@ -13,7 +13,8 @@
     "dev": "next dev -p 3001",
     "build": "next build",
     "start": "next start -p 3001",
-    "typecheck": "tsc --noEmit"
+    "typecheck": "tsc --noEmit",
+    "test": "vitest run"
   },
   "dependencies": {
     "@ag-ui/mastra": "^1.0.3",
@@ -45,6 +46,7 @@
     "@types/react-dom": "^19.2.3",
     "postcss": "^8.5.15",
     "tailwindcss": "^4.3.0",
-    "typescript": "^6.0.3"
+    "typescript": "^6.0.3",
+    "vitest": "^4.1.7"
   }
 }