@allbluecn/admin-app 0.3.1 → 0.3.3

package/src/server/__tests__/compliance.test.ts

@@ -95,7 +95,7 @@ describe('listComplianceExportsFn（admin 合规导出任务列表）', () => {
     expect(complianceExport.findMany).not.toHaveBeenCalled()
   })
 
-  it('Pro 服务缺省时走 prisma 分页查询，skip/take 按页计算', async () => {
+  it('Pro 服务缺省时走 prisma 分页查询，skip/take 按页计算 + 白名单 select', async () => {
     const items = [{ id: 'e-1' }]
     complianceExport.findMany.mockResolvedValue(items)
     complianceExport.count.mockResolvedValue(42)
@@ -103,25 +103,62 @@ describe('listComplianceExportsFn（admin 合规导出任务列表）', () => {
     const result = await listComplianceExportsFn({ data: { page: 3, pageSize: 10 } })
 
     expect(complianceExport.findMany).toHaveBeenCalledWith({
+      where: {},
       orderBy: { createdAt: 'desc' },
       skip: 20,
       take: 10,
+      select: {
+        id: true,
+        type: true,
+        scope: true,
+        targetId: true,
+        status: true,
+        expiresAt: true,
+        error: true,
+        requestedBy: true,
+        createdAt: true,
+      },
     })
-    expect(complianceExport.count).toHaveBeenCalledWith()
+    expect(complianceExport.count).toHaveBeenCalledWith({ where: {} })
     expect(result).toEqual({ items, total: 42 })
   })
 
+  it('DB-02：status 过滤参数化，where 同时作用于 findMany 与 count', async () => {
+    complianceExport.findMany.mockResolvedValue([])
+    complianceExport.count.mockResolvedValue(0)
+
+    await listComplianceExportsFn({ data: { page: 1, pageSize: 20, status: 'pending' } })
+
+    const arg = complianceExport.findMany.mock.calls[0][0]
+    expect(arg.where).toEqual({ status: 'pending' })
+    expect(complianceExport.count).toHaveBeenCalledWith({ where: { status: 'pending' } })
+  })
+
+  it('DB-05：select 白名单排除 content 大字段与 downloadUrl', async () => {
+    complianceExport.findMany.mockResolvedValue([])
+    complianceExport.count.mockResolvedValue(0)
+
+    await listComplianceExportsFn({ data: {} })
+
+    const arg = complianceExport.findMany.mock.calls[0][0]
+    expect(arg.select).not.toHaveProperty('content')
+    expect(arg.select).not.toHaveProperty('downloadUrl')
+    expect(arg.select).not.toHaveProperty('completedAt')
+  })
+
   it('未传分页参数时使用默认值（page=1, pageSize=20）', async () => {
     complianceExport.findMany.mockResolvedValue([])
     complianceExport.count.mockResolvedValue(0)
 
     await listComplianceExportsFn({ data: {} })
 
-    expect(complianceExport.findMany).toHaveBeenCalledWith({
-      orderBy: { createdAt: 'desc' },
-      skip: 0,
-      take: 20,
-    })
+    expect(complianceExport.findMany).toHaveBeenCalledWith(
+      expect.objectContaining({
+        orderBy: { createdAt: 'desc' },
+        skip: 0,
+        take: 20,
+      }),
+    )
   })
 
   it('查询前强制管理员身份与合规功能授权', async () => {

package/src/server/__tests__/permissions.test.ts

@@ -51,6 +51,7 @@ vi.mock('@allbluecn/database', () => ({
     customRole: {
       count: vi.fn(),
       create: vi.fn(),
+      createMany: vi.fn(),
       findMany: vi.fn(),
       findFirst: vi.fn(),
       delete: vi.fn(),
@@ -101,6 +102,7 @@ import {
 const customRole = prisma.customRole as unknown as {
   count: ReturnType<typeof vi.fn>
   create: ReturnType<typeof vi.fn>
+  createMany: ReturnType<typeof vi.fn>
   findMany: ReturnType<typeof vi.fn>
   findFirst: ReturnType<typeof vi.fn>
   delete: ReturnType<typeof vi.fn>
@@ -170,17 +172,20 @@ describe('listRolesFn', () => {
     expect(roleAssignment.createMany).not.toHaveBeenCalled()
   })
 
-  it('首次种子化创建 5 个系统角色预设', async () => {
+  it('首次种子化创建 5 个系统角色预设（DB-01：一次 createMany 替代逐 preset create）', async () => {
     customRole.count.mockResolvedValue(0)
+    customRole.createMany.mockResolvedValue({ count: 5 })
     services.set('permissions', { kind: 'pro' })
 
     await listRolesFn({ data: { workspaceId: WS } })
 
-    const names = customRole.create.mock.calls.map((c: any[]) => c[0].data.name)
-    expect(names).toEqual(['owner', 'admin', 'member', 'editor', 'viewer'])
+    expect(customRole.createMany).toHaveBeenCalledTimes(1)
+    const rows = customRole.createMany.mock.calls[0][0].data
+    expect(rows.map((r: any) => r.name)).toEqual(['owner', 'admin', 'member', 'editor', 'viewer'])
     // 系统角色必须标记 isSystem，用户不可伪造/删除
-    expect(customRole.create.mock.calls.every((c: any[]) => c[0].data.isSystem === true)).toBe(true)
-    expect(customRole.create.mock.calls.every((c: any[]) => c[0].data.workspaceId === WS)).toBe(true)
+    expect(rows.every((r: any) => r.isSystem === true)).toBe(true)
+    expect(rows.every((r: any) => r.workspaceId === WS)).toBe(true)
+    expect(customRole.create).not.toHaveBeenCalled()
   })
 
   it('种子化时给 ADMIN 用户赋 owner 角色', async () => {

package/src/server/__tests__/prompt-defaults.test.ts

@@ -16,7 +16,7 @@
 // along with this program. If not, see <https://www.gnu.org/licenses/>.
 
 import { describe, it, expect, vi, beforeEach } from "vitest"
-import { type PromptSection } from "@allbluecn/web-app/ai-gateway/prompts/definitions"
+import type { PromptSection } from "@allbluecn/kernel"
 
 const mocks = vi.hoisted(() => {
   const findMany = vi.fn()
@@ -34,9 +34,9 @@ vi.mock("@allbluecn/database", () => ({ prisma: mocks.prisma }))
 
 // 内置定义走真实实现：admin 与 web 共享同一份默认提示词，
 // 这里 mock 掉会掩盖「默认值为空」这类回归。
-import { backfillMissingPromptTemplates } from "../serverFns/ai-prompts/prompt-defaults"
+import { backfillMissingPromptTemplates } from "../ai-prompts/prompt-defaults"
 import { promptSectionSchema } from "../serverFns/ai-prompts/prompt-schemas"
-import { listPromptDefinitions } from "@allbluecn/web-app/ai-gateway/prompts/definitions"
+import { listPromptDefinitions } from "@allbluecn/kernel"
 
 interface BackfillRow {
   key: string

package/src/server/admin-ai-alerts.ts

@@ -1,4 +1,4 @@
-import { prisma } from '@allbluecn/database'
+import { getPrisma } from '@allbluecn/database/get-prisma'
 
 export interface AiAlert {
   type: 'quota_exhausted' | 'high_cost' | 'error_spike' | 'provider_failure'
@@ -31,6 +31,7 @@ export interface AlertCheckOptions {
 }
 
 export async function checkAiAlerts(options: AlertCheckOptions = {}): Promise<AiAlert[]> {
+  const prisma = await getPrisma()
   const { hours = 24, errorRateThreshold = 0.05 } = options
   const dailyCostThresholdUsd =
     options.dailyCostThresholdUsd ??

package/src/server/admin-ai-usage.ts

@@ -1,4 +1,4 @@
-import { prisma } from '@allbluecn/database'
+import { getPrisma } from '@allbluecn/database/get-prisma'
 
 export interface AiUsageOverview {
   totalCalls: number
@@ -24,6 +24,7 @@ export interface AiUsageOverviewOptions {
 }
 
 export async function getAiUsageOverview(options: AiUsageOverviewOptions = {}): Promise<AiUsageOverview> {
+  const prisma = await getPrisma()
   const {
     days = 30,
     workspace: workspaceOpt = {},

package/src/server/ai-memory/store.ts

@@ -16,10 +16,10 @@
 // along with this program. If not, see <https://www.gnu.org/licenses/>.
 
 // apps/admin/src/server/ai-memory/store.ts
-import { prisma } from "@allbluecn/database"
+import { getPrisma } from "@allbluecn/database/get-prisma"
 
 // memory_facts 是 pgvector 原生表（Prisma 无法表达 vector 类型，同族参考
-// knowledge_embeddings / prd_embeddings），由 migration 建表、以 raw SQL 读写。
+// knowledge_embeddings / design_embeddings），由 migration 建表、以 raw SQL 读写。
 // 桌面端 SQLite 无此表，本模块仅在 Web/Admin 服务端路径使用。
 
 export interface MemoryFactRow {
@@ -46,6 +46,7 @@ export async function listMemoryFacts(
   userId: string,
   limit = MEMORY_FACTS_LIST_LIMIT,
 ): Promise<Array<MemoryFactRow>> {
+  const prisma = await getPrisma()
   const rows = (await prisma.$queryRawUnsafe(
     `SELECT "id", "content", "threadId", "createdAt"
      FROM "memory_facts"
@@ -75,6 +76,7 @@ export async function listMemoryFacts(
 export async function countMemoryFacts(
   userId: string,
 ): Promise<MemoryStats> {
+  const prisma = await getPrisma()
   const rows = (await prisma.$queryRawUnsafe(
     `SELECT COUNT(*)::int AS "c", MAX("createdAt") AS "lastWriteAt"
      FROM "memory_facts"
@@ -89,6 +91,7 @@ export async function countMemoryFacts(
 }
 
 export async function deleteMemoryFact(id: string): Promise<number> {
+  const prisma = await getPrisma()
   return prisma.$executeRawUnsafe(
     `DELETE FROM "memory_facts" WHERE "id" = $1`,
     id,
@@ -96,6 +99,7 @@ export async function deleteMemoryFact(id: string): Promise<number> {
 }
 
 export async function clearMemoryFacts(userId: string): Promise<number> {
+  const prisma = await getPrisma()
   return prisma.$executeRawUnsafe(
     `DELETE FROM "memory_facts" WHERE "userId" = $1`,
     userId,

package/src/server/{serverFns/ai-prompts → ai-prompts}/prompt-defaults.ts

@@ -15,9 +15,10 @@
 // You should have received a copy of the GNU Affero General Public License
 // along with this program. If not, see <https://www.gnu.org/licenses/>.
 
-// apps/admin/src/server/serverFns/ai-prompts/prompt-defaults.ts
-import { prisma, type Prisma } from "@allbluecn/database"
-import { listPromptDefinitions } from "@allbluecn/web-app/ai-gateway/prompts/definitions"
+// apps/admin/src/server/ai-prompts/prompt-defaults.ts
+import { getPrisma } from "@allbluecn/database/get-prisma"
+import type { Prisma } from "@allbluecn/database"
+import { listPromptDefinitions } from "@allbluecn/kernel"
 
 // 提示词的唯一来源是代码内置定义（apps/web ai-gateway/prompts/builtin.ts）；
 // admin 后台只是查看与二次编辑的入口，DB 永远不该是「唯一事实」——
@@ -34,6 +35,7 @@ function toJson(value: unknown): Prisma.InputJsonValue {
 }
 
 export async function backfillMissingPromptTemplates() {
+  const prisma = await getPrisma()
   const defaults = listPromptDefinitions()
   const existing = await prisma.systemPromptTemplate.findMany({
     select: { key: true },

package/src/server/{serverFns/dependency → dependency}/helpers.ts

@@ -15,11 +15,11 @@
 // You should have received a copy of the GNU Affero General Public License
 // along with this program. If not, see <https://www.gnu.org/licenses/>.
 
-// apps/admin/src/server/serverFns/dependency/helpers.ts
+// apps/admin/src/server/dependency/helpers.ts
 import { existsSync } from "node:fs"
 import { readFile } from "node:fs/promises"
 import path from "node:path"
-import { prisma } from "@allbluecn/database"
+import { getPrisma } from "@allbluecn/database/get-prisma"
 import {
   DEFAULT_WATCHED_DEPENDENCIES,
   type DependencyUsage,
@@ -123,7 +123,7 @@ export async function queryNpmRegistry(
 /** 从 repository URL 解析 GitHub owner/repo */
 function parseGitHubRepo(repoUrl: string): { owner: string; repo: string } | null {
   // 匹配 github.com/owner/repo（容忍 git+ 前缀、.git 后缀、ssh 协议）
-  const m = repoUrl.match(/github\.com[:/]([^/]+)\/([^/\.]+)/i)
+  const m = repoUrl.match(/github\.com[:/]([^/]+)\/([^/.]+)/i)
   if (!m) return null
   return { owner: m[1], repo: m[2] }
 }
@@ -212,6 +212,7 @@ export function pickCurrentVersion(usages: DependencyUsage[]): string | null {
 /** 首次访问时 seed 预设关注列表；若已 seed 则回填缺失的 description（升级兼容） */
 let seeded = false
 export async function ensureSeedData(): Promise<void> {
+  const prisma = await getPrisma()
   if (seeded) return
   const count = await prisma.thirdPartyDependency.count()
   if (count === 0) {

package/src/server/knowledge-public/github-sync.ts

@@ -15,7 +15,7 @@
 // You should have received a copy of the GNU Affero General Public License
 // along with this program. If not, see <https://www.gnu.org/licenses/>.
 
-import { prisma } from '@allbluecn/database'
+import { getPrisma } from '@allbluecn/database/get-prisma'
 
 export interface GithubData {
   stars: number
@@ -63,6 +63,7 @@ export async function fetchGithubData(
 }
 
 export async function syncBookmarkGithub(bookmarkId: string): Promise<boolean> {
+  const prisma = await getPrisma()
   const bm = await prisma.websiteBookmark.findUnique({
     where: { id: bookmarkId },
     select: { id: true, isGithub: true, githubOwner: true, githubRepo: true },

package/src/server/license-issue.ts

@@ -15,7 +15,7 @@
 // You should have received a copy of the GNU Affero General Public License
 // along with this program. If not, see <https://www.gnu.org/licenses/>.
 
-import { prisma } from '@allbluecn/database'
+import { getPrisma } from '@allbluecn/database/get-prisma'
 import { getProService } from '@/server/pro-services'
 import { FeatureRegistry } from '@allbluecn/kernel'
 import { requireAdmin } from '@/server/auth-helpers'
@@ -29,6 +29,7 @@ export const issueLicense = async (data: {
   features: Record<string, boolean>
   expiresAt: string | null
 }) => {
+  const prisma = await getPrisma()
   const session = await requireAdmin()
 
   const unknownKeys = Object.keys(data.features).filter(

package/src/server/middlewares/auth-rate-limit.ts

@@ -0,0 +1,117 @@
+// SPDX-License-Identifier: AGPL-3.0-or-later
+// AllBlue - 理想之海
+// Copyright (C) 2026 AllBlue Contributors
+//
+// This program is free software: you can redistribute it and/or modify
+// it under the terms of the GNU Affero General Public License as published by
+// the Free Software Foundation, either version 3 of the License, or
+// (at your option) any later version.
+//
+// This program is distributed in the hope that it will be useful,
+// but WITHOUT ANY WARRANTY; without even the implied warranty of
+// MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+// GNU Affero General Public License for more details.
+//
+// You should have received a copy of the GNU Affero General Public License
+// along with this program. If not, see <https://www.gnu.org/licenses/>.
+
+/**
+ * 认证类端点失败限流（SEC-09 登录 / SEC-10 分享密码）——进程内存态固定窗口。
+ *
+ * ⚠️ 架构边界：计数器存于单进程内存（Map），**多实例部署不共享**，
+ * 实际阈值 = 配置值 × 实例数。本期不实施分布式限流（Redis 等），
+ * 多实例部署落地前不得将本模块视为唯一防线。
+ *
+ * 设计要点：
+ * - 仅失败尝试计数（登录：用户不存在/密码错误；分享密码：校验失败），
+ *   成功后清零——正常用户与自动化 e2e（成功登录）不受影响
+ * - key 归一化：email 小写去空白，避免大小写变体绕过；IP 取不到时归入
+ *   `unknown` 桶（按 email 维度仍受限流保护）
+ * - 测试环境豁免：NODE_ENV=test（vitest）时不计数不拦截，防单测互踩
+ * - 账号状态类失败（封禁/未激活）不计入——非口令爆破向量
+ */
+
+const store = new Map<string, { count: number; resetAt: number }>()
+
+export const LOGIN_RATE_LIMIT = { max: 5, windowMs: 15 * 60 * 1000 } as const
+export const SHARE_PASSWORD_RATE_LIMIT = { max: 10, windowMs: 15 * 60 * 1000 } as const
+
+const CLEANUP_INTERVAL = 60_000
+const cleanupTimer = setInterval(() => {
+  const now = Date.now()
+  for (const [key, entry] of store) {
+    if (now > entry.resetAt) store.delete(key)
+  }
+}, CLEANUP_INTERVAL)
+// 防止 timer 阻止进程退出（jsdom 环境 setInterval 返回 number，无 unref）
+cleanupTimer.unref?.()
+
+/** 测试环境豁免（vitest 注入 NODE_ENV=test） */
+export function isAuthRateLimitBypassed(): boolean {
+  return process.env.NODE_ENV === 'test'
+}
+
+function isBlocked(key: string, max: number): boolean {
+  if (isAuthRateLimitBypassed()) return false
+  const entry = store.get(key)
+  if (!entry) return false
+  if (Date.now() > entry.resetAt) {
+    store.delete(key)
+    return false
+  }
+  return entry.count >= max
+}
+
+function recordFailure(key: string, windowMs: number): void {
+  if (isAuthRateLimitBypassed()) return
+  const now = Date.now()
+  const entry = store.get(key)
+  if (!entry || now > entry.resetAt) {
+    store.set(key, { count: 1, resetAt: now + windowMs })
+    return
+  }
+  entry.count++
+}
+
+function loginKey(email: string, ip: string | null): string {
+  return `login:${email.toLowerCase().trim()}:${ip ?? 'unknown'}`
+}
+
+/** 登录是否已被限流（email+IP 维度）。被限流时调用方应返回与密码错误不可区分的失败。 */
+export function isLoginBlocked(email: string, ip: string | null): boolean {
+  return isBlocked(loginKey(email, ip), LOGIN_RATE_LIMIT.max)
+}
+
+/** 记录一次登录失败（用户不存在或密码错误） */
+export function recordLoginFailure(email: string, ip: string | null): void {
+  recordFailure(loginKey(email, ip), LOGIN_RATE_LIMIT.windowMs)
+}
+
+/** 登录成功后清零失败计数 */
+export function clearLoginFailures(email: string, ip: string | null): void {
+  store.delete(loginKey(email, ip))
+}
+
+function sharePasswordKey(ip: string | null): string {
+  return `sharePwd:${ip ?? 'unknown'}`
+}
+
+/** 分享密码校验是否已被限流（IP 维度）。被限流时调用方应返回 valid:false（不泄露限流细节）。 */
+export function isSharePasswordBlocked(ip: string | null): boolean {
+  return isBlocked(sharePasswordKey(ip), SHARE_PASSWORD_RATE_LIMIT.max)
+}
+
+/** 记录一次分享密码校验失败 */
+export function recordSharePasswordFailure(ip: string | null): void {
+  recordFailure(sharePasswordKey(ip), SHARE_PASSWORD_RATE_LIMIT.windowMs)
+}
+
+/** 分享密码校验成功后清零失败计数 */
+export function clearSharePasswordFailures(ip: string | null): void {
+  store.delete(sharePasswordKey(ip))
+}
+
+/** 测试辅助：清空整个 store（用例隔离用，生产勿调） */
+export function resetAuthRateLimitStoreForTest(): void {
+  store.clear()
+}

package/src/server/observability/health-check.ts

@@ -16,7 +16,7 @@
 // along with this program. If not, see <https://www.gnu.org/licenses/>.
 
 import os from 'node:os'
-import { prisma } from '@allbluecn/database'
+import { getPrisma } from '@allbluecn/database/get-prisma'
 
 interface HealthResult {
   status: 'healthy' | 'unhealthy'
@@ -35,6 +35,7 @@ let healthTimer: ReturnType<typeof setInterval> | null = null
 let healthEnabled = true
 
 export async function performHealthCheck(): Promise<HealthResult> {
+  const prisma = await getPrisma()
   let dbResult: { status: 'connected' | 'error'; latency?: number; error?: string }
 
   try {
@@ -113,6 +114,7 @@ export function isHealthCheckEnabled(): boolean {
 }
 
 export async function setHealthCheckEnabled(enabled: boolean): Promise<void> {
+  const prisma = await getPrisma()
   if (enabled) {
     startHealthCheckTimer()
   } else {
@@ -132,6 +134,7 @@ export async function setHealthCheckEnabled(enabled: boolean): Promise<void> {
 }
 
 export async function getHealthCheckEnabled(): Promise<boolean> {
+  const prisma = await getPrisma()
   const setting = await prisma.systemSetting.findUnique({
     where: { key: 'monitoring_health_check_enabled' },
   })

package/src/server/observability/metrics.ts

@@ -15,7 +15,7 @@
 // You should have received a copy of the GNU Affero General Public License
 // along with this program. If not, see <https://www.gnu.org/licenses/>.
 
-import { prisma } from '@allbluecn/database'
+import { getPrisma } from '@allbluecn/database/get-prisma'
 
 interface MetricStats {
   count: number
@@ -76,21 +76,23 @@ class MetricsCollector {
   }
 
   async flushToDb(): Promise<void> {
+    const prisma = await getPrisma()
     const allStats = this.getAllStats()
-    for (const [name, stats] of Object.entries(allStats)) {
-      await prisma.monitoringMetricsSnapshot.create({
-        data: {
-          metricName: name,
-          count: stats.count,
-          avg: stats.avg,
-          p50: stats.p50,
-          p95: stats.p95,
-          p99: stats.p99,
-          min: stats.min,
-          max: stats.max,
-        },
-      })
-    }
+    // DB-01/DB-06：快照落盘从逐指标 create（N 次串行查询）改为 1 次 createMany（返回值不被消费）
+    // 查询次数 before: N → after: 1
+    if (Object.keys(allStats).length === 0) return
+    await prisma.monitoringMetricsSnapshot.createMany({
+      data: Object.entries(allStats).map(([name, stats]) => ({
+        metricName: name,
+        count: stats.count,
+        avg: stats.avg,
+        p50: stats.p50,
+        p95: stats.p95,
+        p99: stats.p99,
+        min: stats.min,
+        max: stats.max,
+      })),
+    })
   }
 
   reset(): void {

package/src/server/observability/request-middleware.ts

@@ -16,7 +16,7 @@
 // along with this program. If not, see <https://www.gnu.org/licenses/>.
 
 import { createMiddleware } from '@tanstack/react-start'
-import { prisma } from '@allbluecn/database'
+import { getPrisma } from '@allbluecn/database/get-prisma'
 import { metrics } from './metrics'
 import { logger } from './logger'
 import { reportError } from './error-reporter'
@@ -111,6 +111,7 @@ export const observabilityMiddleware = createMiddleware().server(async ({ reques
 })
 
 async function saveRequestLogAsync(entry: RequestLogEntry): Promise<void> {
+  const prisma = await getPrisma()
   await prisma.monitoringRequestLog.create({
     data: {
       timestamp: new Date(entry.timestamp),

package/src/server/observability/timing.ts

@@ -23,20 +23,18 @@ export interface TimingResult {
   label: string
 }
 
-export function timed(label: string, fn: () => Promise<unknown> | unknown): Promise<TimingResult & { data: unknown }> {
-  return new Promise(async (resolve, reject) => {
-    const startTime = Date.now()
-    try {
-      const data = await fn()
-      const duration = Date.now() - startTime
-      metrics.recordTiming(label, duration)
-      logger('info', `Timed operation`, { label, duration })
-      resolve({ label, duration, data })
-    } catch (error) {
-      const duration = Date.now() - startTime
-      metrics.recordTiming(label, duration)
-      logger('error', `Timed operation failed`, { label, duration, error: (error as Error).message })
-      reject(error)
-    }
-  })
+export async function timed(label: string, fn: () => Promise<unknown> | unknown): Promise<TimingResult & { data: unknown }> {
+  const startTime = Date.now()
+  try {
+    const data = await fn()
+    const duration = Date.now() - startTime
+    metrics.recordTiming(label, duration)
+    logger('info', `Timed operation`, { label, duration })
+    return { label, duration, data }
+  } catch (error) {
+    const duration = Date.now() - startTime
+    metrics.recordTiming(label, duration)
+    logger('error', `Timed operation failed`, { label, duration, error: (error as Error).message })
+    throw error
+  }
 }