feat: enable type-aware linting and type checking

Turn on lint.options.typeAware and typeCheck in vite.config.ts and fix
everything they surfaced:

- void 58 floating promises across web routes and stores; restructure
  destructures flagged by unbound-method
- retype useState<any> and redundant any unions with real DTO types
- narrow unknown values before stringification in the mongo migration
  script and the moderation scan decoder
- give package tsconfigs explicit rootDir (or noEmit for @cnode/db) so
  tsgolint can type-check each project; apps/api keeps its existing
  nested dist layout
- declare *.css modules for side-effect imports in apps/web
- upgrade TypeScript to 7.0.2 and @types/node to 24 to match Node 24

Typing @cnode/db's DB export (currently any) surfaces ~40 more type
errors in @cnode/api, including likely real bugs in message rendering
(topic.author does not exist on the row type); left as a follow-up,
see the TODO in packages/db/src/client.ts.

Author: fengmk2

apps/api/package.json

@@ -38,13 +38,13 @@
   "devDependencies": {
     "@types/bcryptjs": "^2.4.6",
     "@types/lodash": "^4.17.24",
-    "@types/node": "^22.0.0",
+    "@types/node": "^24.0.0",
     "@types/nodemailer": "^8.0.0",
     "@types/react": "19.2.2",
     "@types/react-dom": "19.2.3",
     "@types/uuid": "^10.0.0",
     "tsx": "^4.19.0",
-    "typescript": "^5.7.0",
+    "typescript": "^7.0.0",
     "vite": "catalog:",
     "vite-plus": "catalog:"
   }

apps/api/src/lib/db.ts

@@ -21,7 +21,7 @@ import { boolEq, boolValue } from "./db-compat";
 import { deleteReplyWithStore, type ReplyDeletionStore } from "./reply-deletion";
 import { createReplyWithStore, type ReplyCreationStore } from "./reply-creation";
 
-let dbInstance: DB | null = null;
+let dbInstance: DB = null;
 const INTERNAL_TABS = ["dev", "test"];
 
 function getDb(): DB {

apps/api/src/lib/moderation-scan.ts

@@ -35,8 +35,9 @@ export function scanDefaults() {
 function decodeJsonArray(value: unknown): number[] | null {
   if (!value) return null;
   if (Array.isArray(value)) return value.map(Number).filter((v) => v > 0);
+  if (typeof value !== "string") return null;
   try {
-    const parsed = JSON.parse(String(value));
+    const parsed = JSON.parse(value);
     return Array.isArray(parsed) ? parsed.map(Number).filter((v) => v > 0) : null;
   } catch {
     return null;

apps/api/src/middleware/auth.ts

@@ -4,7 +4,7 @@ import { roleQueries, userQueries } from "../lib/db";
 import { resolveUserAccess } from "../lib/user-access";
 
 export interface AuthVars {
-  user: Awaited<ReturnType<typeof userQueries.getById>> | null;
+  user: Awaited<ReturnType<typeof userQueries.getById>>;
   isLogin: boolean;
   isAdmin: boolean;
   isMod: boolean;

apps/api/src/routes/auth.ts

@@ -572,7 +572,7 @@ auth.openapi(githubCreateRoute, async (c) => {
   if (!profile)
     return c.json({ success: false as const, error_msg: "GitHub 登录状态已过期，请重新授权" }, 401);
   const body = c.req.valid("json");
-  let user: Awaited<ReturnType<typeof userQueries.getById>> | null = null;
+  let user: Awaited<ReturnType<typeof userQueries.getById>> = null;
   if (body.isnew) {
     const loginname = profile.login.toLowerCase();
     if (await userQueries.getByLoginName(loginname))
@@ -706,7 +706,7 @@ auth.openapi(githubUnbindRoute, async (c) => {
   let result: Awaited<ReturnType<typeof executeGithubUnbind>>;
   try {
     result = await executeGithubUnbind(user, password, {
-      clearGithubInfo: userQueries.clearGithubInfo,
+      clearGithubInfo: (userId, githubId) => userQueries.clearGithubInfo(userId, githubId),
       revokeToken: revokeGithubToken,
       verifyPassword: bcryptjs.compare,
     });
@@ -999,8 +999,8 @@ auth.post("/upload/image", async (c) => {
     return c.json({ success: false, error_msg: "只支持 png/jpeg/gif/webp/svg 图片上传" }, 422);
   const maxSize = Number(process.env.OSS_UPLOAD_MAX_BYTES || 5 * 1024 * 1024);
   if (file.size > maxSize) return c.json({ success: false, error_msg: "图片不能超过 5MB" }, 413);
-  const purpose =
-    typeof formData?.get("purpose") === "string" ? String(formData.get("purpose")) : null;
+  const purposeValue = formData?.get("purpose");
+  const purpose = typeof purposeValue === "string" ? purposeValue : null;
   const filename = `${uploadPrefix(purpose)}/${uuidv4()}${extensionForContentType(file.type)}`;
   await createOssClient().put(filename, Buffer.from(await file.arrayBuffer()), {
     headers: { "Content-Type": file.type },

apps/api/tsconfig.json

@@ -2,6 +2,7 @@
   "extends": "../../tsconfig.base.json",
   "compilerOptions": {
     "jsx": "react-jsx",
+    "rootDir": "../..",
     "outDir": "./dist",
     "types": ["node"],
     "noImplicitAny": false,

apps/web/app/components/CommandPalette.tsx

@@ -72,12 +72,12 @@ export function CommandPalette({
     const value = query.trim();
     if (!value) return;
     onOpenChange(false);
-    navigate(`/search?q=${encodeURIComponent(value)}`);
+    void navigate(`/search?q=${encodeURIComponent(value)}`);
   }
 
   function go(to: string) {
     onOpenChange(false);
-    navigate(to);
+    void navigate(to);
   }
 
   return (

apps/web/app/components/ThemeToggle.tsx

@@ -9,7 +9,7 @@ export function ThemeToggle() {
   const applyToDocument = useThemeStore((s) => s.applyToDocument);
 
   useEffect(() => {
-    Promise.resolve(useThemeStore.persist.rehydrate()).then(() => {
+    void Promise.resolve(useThemeStore.persist.rehydrate()).then(() => {
       useThemeStore.getState().applyToDocument();
     });
   }, [applyToDocument]);

apps/web/app/lib/stores/auth-store.ts

@@ -31,7 +31,7 @@ export const useAuthStore = create<AuthState>()((set, get) => ({
     if (get().hydrated) return;
     set({ user, hydrated: true });
     if (user) {
-      get().fetchUnread();
+      void get().fetchUnread();
     }
   },
   fetchUnread: async () => {

apps/web/app/routes/_index.tsx

@@ -101,7 +101,7 @@ export default function Index({ loaderData }: Route.ComponentProps) {
               onValueChange={(value) => {
                 const params = new URLSearchParams();
                 if (value !== "all") params.set("tab", value);
-                navigate(params.size ? `/?${params.toString()}` : "/");
+                void navigate(params.size ? `/?${params.toString()}` : "/");
               }}
             >
               <Card>