R18-1/R18-3: 接入企业微信入口绑定与免登回退

deploy/trialrun/.env.example

@@ -23,6 +23,18 @@ FIELD_ENCRYPTION_KEY=""
 # OIDC_REDIRECT_URI="http://127.0.0.1:3000/api/auth/oidc/callback"
 # OIDC_SCOPES="openid profile email"
 
+# ===== 企业微信入口 / OAuth（R18，可选） =====
+WECOM_ENABLED="false"
+WECOM_ENTRY_ENABLED="false"
+WECOM_CORP_ID=""
+WECOM_AGENT_ID=""
+WECOM_AGENT_SECRET=""
+WECOM_OAUTH_ENABLED="false"
+WECOM_REDIRECT_URI="https://oa.example.com/api/auth/wecom/callback"
+# 可填写多个 host，逗号分隔，用于企微回跳和公网 returnTo 白名单
+WECOM_ALLOWED_RETURN_HOSTS="oa.example.com"
+IM_NOTIFIER_ENABLED="true"
+
 # ===== 数据库（Compose 内部连接）=====
 POSTGRES_DB="hyb_oa"
 POSTGRES_USER="hyboa_user"
@@ -49,6 +61,7 @@ MINIO_ROOT_PASSWORD="minioadmin"
 # ===== 单域托管 client/dist =====
 SERVE_CLIENT_DIST="true"
 CLIENT_DIST_DIR="../client/dist"
+OPENAPI_DOCS_ENABLED="false"
 
 # ===== 网络与端口 =====
 HOST="0.0.0.0"
@@ -106,5 +119,9 @@ PRESENCE_BOARD_ENABLED="true"
 WEEKLY_REPORT_ENABLED="true"
 EMPLOYEE_LIFECYCLE_ENABLED="true"
 TODO_BOARD_ENABLED="true"
+PROJECT_DOMAIN_ENABLED="true"
+PROJECT_LINKING_ENABLED="true"
+CONFIDENTIAL_DOC_REFS_ENABLED="true"
+PUBLIC_SECURITY_HARDENING_ENABLED="true"
 PAYMENT_BATCH_ENABLED="false"
 CUTOVER_CONSOLE_ENABLED="false"