chore(security): fail closed booking development configuration

server/.java-version

@@ -0,0 +1 @@
+17

server/pom.xml

@@ -56,11 +56,20 @@
             <groupId>org.flywaydb</groupId>
             <artifactId>flyway-mysql</artifactId>
         </dependency>
+        <dependency>
+            <groupId>org.flywaydb</groupId>
+            <artifactId>flyway-database-postgresql</artifactId>
+        </dependency>
         <dependency>
             <groupId>com.mysql</groupId>
             <artifactId>mysql-connector-j</artifactId>
             <scope>runtime</scope>
         </dependency>
+        <dependency>
+            <groupId>org.postgresql</groupId>
+            <artifactId>postgresql</artifactId>
+            <scope>runtime</scope>
+        </dependency>
         <dependency>
             <groupId>org.springdoc</groupId>
             <artifactId>springdoc-openapi-starter-webmvc-ui</artifactId>

server/src/main/resources/application-dev.yml

@@ -1,9 +1,10 @@
 spring:
   datasource:
-    # dev 使用可提交的开发测试库地址；密码仍通过环境变量注入。
-    url: "jdbc:mysql://rm-7xv137v8f04vfk7a4ko.mysql.rds.aliyuncs.com:3306/th_hotel?useUnicode=true&characterEncoding=utf8&useSSL=false&allowPublicKeyRetrieval=true&serverTimezone=UTC"
-    username: th_hotel_user
-    password: 'CxrLg6b6kw2zJjmcjHUj'
+    # dev 连接信息只能由部署环境注入。缺失任一变量时 Spring 会在启动阶段失败，
+    # 禁止使用可提交的远程默认值。
+    url: ${TH_HOTEL_DEV_DB_URL}
+    username: ${TH_HOTEL_DEV_DB_USERNAME}
+    password: ${TH_HOTEL_DEV_DB_PASSWORD}
     driver-class-name: com.mysql.cj.jdbc.Driver
   flyway:
     enabled: true
@@ -18,13 +19,12 @@ agentbus:
     # dev 默认不主动连接 AgentBus，避免本地启动误消费消息。
     enabled: false
   ws:
-    # AgentBus dev/test 真实测试地址可以提交；Token 仍走环境变量。
-    url: wss://mesh.nianxx.cn/ws
-    token: ${AGENTBUS_DEV_WS_TOKEN:}
+    url: ${AGENTBUS_DEV_WS_URL:${AGENTBUS_WS_URL:}}
+    token: ${AGENTBUS_DEV_WS_TOKEN:${AGENTBUS_WS_TOKEN:}}
     reconnect-delay: 5s
     connect-timeout: 15s
   capture:
-    enabled: true
+    enabled: false
   superagent-dispatch:
     # dev 默认不自动调用 SuperAgent，需要联调时显式开启。
     enabled: ${AGENTBUS_DEV_SUPERAGENT_DISPATCH_ENABLED:${AGENTBUS_SUPERAGENT_DISPATCH_ENABLED:false}}
@@ -99,10 +99,9 @@ auth:
 
 reservation:
   demo-data:
-    # dev 本地联调默认开启演示数据造数接口；生产环境不得开启。
-    enabled: true
-    # 本地演示数据接口访问口令，需和 X-TH-Hotel-Demo-Data-Key 请求头一致。
+    # 本地演示数据接口必须显式开启。
+    enabled: ${RESERVATION_DEV_DEMO_DATA_ENABLED:${RESERVATION_DEMO_DATA_ENABLED:false}}
     access-key: ${RESERVATION_DEV_DEMO_DATA_ACCESS_KEY:${RESERVATION_DEMO_DATA_ACCESS_KEY:}}
 
 server:
-  port: 8080
+  port: ${SERVER_PORT:8080}

server/src/main/resources/application-local.yml

@@ -0,0 +1,42 @@
+# 默认本机 profile：只使用进程内 H2，所有外部入口和写入型调试能力保持关闭。
+spring:
+  datasource:
+    url: jdbc:h2:mem:th_hotel_local;MODE=MySQL;DATABASE_TO_LOWER=TRUE;CASE_INSENSITIVE_IDENTIFIERS=TRUE;DB_CLOSE_DELAY=-1
+    username: sa
+    password: ""
+    driver-class-name: org.h2.Driver
+  flyway:
+    enabled: true
+
+springdoc:
+  api-docs:
+    enabled: false
+  swagger-ui:
+    enabled: false
+
+agentbus:
+  capture:
+    enabled: false
+  superagent-dispatch:
+    enabled: false
+    worker-enabled: false
+
+superagent:
+  open-api:
+    enabled: false
+
+debug:
+  eml-upload:
+    enabled: false
+
+document-conversion:
+  enabled: false
+  worker-enabled: false
+
+reservation:
+  demo-data:
+    enabled: false
+
+server:
+  address: 127.0.0.1
+  port: ${SERVER_PORT:8080}

server/src/main/resources/application-test.yml

@@ -1,10 +1,10 @@
 spring:
   datasource:
-    # test 数据库连接信息通过测试机 env 文件统一注入，默认值仅用于本机快速启动。
-    url: ${SPRING_DATASOURCE_URL:jdbc:mysql://127.0.0.1:3306/th_hotel_test?useUnicode=true&characterEncoding=utf8&useSSL=false&allowPublicKeyRetrieval=true&serverTimezone=UTC}
-    username: ${SPRING_DATASOURCE_USERNAME:th_hotel_test}
-    password: ${SPRING_DATASOURCE_PASSWORD:${TH_HOTEL_TEST_DB_PASSWORD:}}
-    driver-class-name: com.mysql.cj.jdbc.Driver
+    # 本机 test 一律使用 H2；测试机远程数据库必须由三项专属 Secret 同时注入，禁止任何远程默认值。
+    url: ${TH_HOTEL_TEST_DB_URL:jdbc:h2:mem:th_hotel_test;MODE=MySQL;DATABASE_TO_LOWER=TRUE;CASE_INSENSITIVE_IDENTIFIERS=TRUE;DB_CLOSE_DELAY=-1}
+    username: ${TH_HOTEL_TEST_DB_USERNAME:sa}
+    password: ${TH_HOTEL_TEST_DB_PASSWORD:}
+    driver-class-name: ${TH_HOTEL_TEST_DB_DRIVER:org.h2.Driver}
   flyway:
     enabled: true
   servlet:

server/src/main/resources/application.yml

@@ -2,8 +2,8 @@ spring:
   application:
     name: th-hotel-server
   profiles:
-    # 未显式指定 profile 时默认使用 dev，避免本地启动误连 test/prod。
-    default: dev
+    # 未显式指定 profile 时只使用本机 H2，禁止本地启动隐式连接任何远程数据库。
+    default: local
   flyway:
     enabled: true
   servlet:
@@ -16,6 +16,28 @@ spring:
       # Spring MVC async timeout 是应用级全局值；当前主要用于避免 Debug EML SSE 先于 SuperAgent 调试调用关闭。
       request-timeout: ${DEBUG_EML_UPLOAD_SSE_REQUEST_TIMEOUT:${SPRING_MVC_ASYNC_REQUEST_TIMEOUT:1800s}}
 
+# 新 Booking 主线 PostgreSQL runtime 默认关闭。启用时仅允许部署 Secret 注入连接信息，
+# 与旧 MySQL/H2 datasource 隔离，不建立跨库事务或未定义双写。
+booking:
+  agent:
+    # 真实 Booking Agent 必须显式启用；未启用时不确定材料只形成 Risk，不会伪造任务。
+    enabled: ${TH_HOTEL_BOOKING_AGENT_ENABLED:false}
+    # 外部 Agent 调用默认通过 processing-run worker 完成；入口立即返回 202 和 run ID。
+    async-enabled: ${TH_HOTEL_BOOKING_AGENT_ASYNC_ENABLED:true}
+    profile-version: ${TH_HOTEL_BOOKING_AGENT_PROFILE_VERSION:booking-agent-v1}
+    external-subject-id: ${TH_HOTEL_BOOKING_AGENT_EXTERNAL_SUBJECT_ID:}
+  postgres:
+    enabled: ${TH_HOTEL_BOOKING_PG_ENABLED:false}
+    url: ${TH_HOTEL_BOOKING_PG_URL:}
+    username: ${TH_HOTEL_BOOKING_PG_USERNAME:}
+    password: ${TH_HOTEL_BOOKING_PG_PASSWORD:}
+    schema: th_hotel_booking
+    maximum-pool-size: ${TH_HOTEL_BOOKING_PG_MAX_POOL_SIZE:4}
+    connection-timeout-ms: ${TH_HOTEL_BOOKING_PG_CONNECTION_TIMEOUT_MS:10000}
+    material-download-max-bytes: ${TH_HOTEL_BOOKING_MATERIAL_DOWNLOAD_MAX_BYTES:10485760}
+    retention-enabled: ${TH_HOTEL_BOOKING_RETENTION_ENABLED:false}
+    retention-cron: ${TH_HOTEL_BOOKING_RETENTION_CRON:0 15 3 * * *}
+
 mybatis-plus:
   configuration:
     map-underscore-to-camel-case: true