refactor(types): 消除非必要 as 逃逸，锁紧 strict 政策

按 Oracle 复核处置全仓 5 处类型断言：

- fields.ts: as const → satisfies Record<GeneratedFieldKey, true>
- compile.ts: as readonly string[] → ReadonlySet<string>.has()
- embed-migrations.ts: JSON.parse as Journal → Zod schema 运行时校验，JSON.parse 显式 unknown
- interceptors.ts: 唯一保留的跨包断言（ORPC→Zod）注释扩写为完整背景
- router.tsx: satisfies 非 cast，保留

biome.json 增配 noExplicitAny / noTsIgnore / noNonNullAssertion，防止后续漂移。

biome.json

@@ -24,6 +24,13 @@
       },
       "correctness": {
         "noReactPropAssignments": "error"
+      },
+      "style": {
+        "noNonNullAssertion": "error"
+      },
+      "suspicious": {
+        "noExplicitAny": "error",
+        "noTsIgnore": "error"
       }
     }
   },

compile.ts

@@ -12,8 +12,9 @@ const SUPPORTED_TARGETS: readonly Bun.Build.CompileTarget[] = [
   'bun-linux-arm64',
 ]
 
-const isSupportedTarget = (value: string): value is Bun.Build.CompileTarget =>
-  (SUPPORTED_TARGETS as readonly string[]).includes(value)
+const SUPPORTED_TARGET_SET: ReadonlySet<string> = new Set(SUPPORTED_TARGETS)
+
+const isSupportedTarget = (value: string): value is Bun.Build.CompileTarget => SUPPORTED_TARGET_SET.has(value)
 
 const { values } = parseArgs({
   options: { target: { type: 'string' } },

embed-migrations.ts

@@ -1,17 +1,31 @@
 import { existsSync } from 'node:fs'
 import { readFile, writeFile } from 'node:fs/promises'
+import { z } from 'zod'
 
 const JOURNAL = './drizzle/meta/_journal.json'
 const OUTPUT = './src/server/db/migrations.gen.ts'
 const SQL_RELATIVE_FROM_OUTPUT = '../../../drizzle'
 
-type JournalEntry = { idx: number; tag: string; when: number; breakpoints: boolean }
-type Journal = { entries: JournalEntry[] }
+const journalEntrySchema = z.object({
+  idx: z.number(),
+  tag: z.string(),
+  when: z.number(),
+  breakpoints: z.boolean(),
+})
+const journalSchema = z.object({ entries: z.array(journalEntrySchema).default([]) })
+
+type JournalEntry = z.infer<typeof journalEntrySchema>
+
+const readJournalEntries = async (): Promise<JournalEntry[]> => {
+  if (!existsSync(JOURNAL)) {
+    return []
+  }
+  const raw: unknown = JSON.parse(await readFile(JOURNAL, 'utf-8'))
+  return journalSchema.parse(raw).entries.sort((a, b) => a.idx - b.idx)
+}
 
 const main = async () => {
-  const entries: JournalEntry[] = existsSync(JOURNAL)
-    ? ((JSON.parse(await readFile(JOURNAL, 'utf-8')) as Journal).entries ?? []).sort((a, b) => a.idx - b.idx)
-    : []
+  const entries = await readJournalEntries()
 
   const imports = entries
     .map((e) => `import sql_${e.idx} from '${SQL_RELATIVE_FROM_OUTPUT}/${e.tag}.sql' with { type: 'text' }`)

src/server/api/interceptors.ts

@@ -8,7 +8,8 @@ export const logError = (error: unknown) => {
 
 export const handleValidationError = (error: unknown) => {
   if (error instanceof ORPCError && error.code === 'BAD_REQUEST' && error.cause instanceof ValidationError) {
-    // ORPC ValidationError.issues are Zod issues in this app.
+    // ORPC widens issues to the Standard Schema shape; every contract here is built from Zod/drizzle-zod,
+    // so the runtime objects are Zod issues. Rehydrate to reuse z.prettifyError / z.flattenError.
     const zodError = new z.ZodError(error.cause.issues as z.core.$ZodIssue[])
 
     throw new ORPCError('INPUT_VALIDATION_FAILED', {

src/server/db/fields.ts

@@ -12,4 +12,10 @@ export const generatedFields = {
     .$onUpdateFn(() => new Date()),
 }
 
-export const generatedFieldKeys = { id: true, createdAt: true, updatedAt: true } as const
+type GeneratedFieldKey = keyof typeof generatedFields
+
+export const generatedFieldKeys = {
+  id: true,
+  createdAt: true,
+  updatedAt: true,
+} satisfies Record<GeneratedFieldKey, true>