@dangao/bun-server 1.7.1 → 1.8.1

package/dist/security/filter.d.ts

@@ -1,8 +1,11 @@
 import type { Context } from '../core/context';
 import type { Middleware } from '../middleware';
+import type { Container } from '../di/container';
 import { AuthenticationManager } from './authentication-manager';
 import { RoleBasedAccessDecisionManager } from './access-decision-manager';
 import type { SecurityConfig } from './types';
+import { GuardRegistry } from './guards/guard-registry';
+import { Reflector } from './guards/reflector';
 /**
  * 安全过滤器配置
  */
@@ -19,9 +22,29 @@ export interface SecurityFilterConfig extends SecurityConfig {
      * 令牌提取函数
      */
     extractToken?: (ctx: Context) => string | null;
+    /**
+     * DI 容器（用于解析守卫）
+     */
+    container?: Container;
+    /**
+     * 守卫注册表
+     */
+    guardRegistry?: GuardRegistry;
 }
 /**
  * 创建安全过滤器
  */
 export declare function createSecurityFilter(config: SecurityFilterConfig): Middleware;
+/**
+ * 获取守卫注册表
+ * @param container - DI 容器
+ * @returns 守卫注册表实例
+ */
+export declare function getGuardRegistry(container: Container): GuardRegistry;
+/**
+ * 注册 Reflector 到 DI 容器
+ * @param container - DI 容器
+ * @returns Reflector 实例
+ */
+export declare function registerReflector(container: Container): Reflector;
 //# sourceMappingURL=filter.d.ts.map

package/dist/security/filter.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"filter.d.ts","sourceRoot":"","sources":["../../src/security/filter.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,iBAAiB,CAAC;AAC/C,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAEhD,OAAO,EAAE,qBAAqB,EAAE,MAAM,0BAA0B,CAAC;AACjE,OAAO,EAAE,8BAA8B,EAAE,MAAM,2BAA2B,CAAC;AAC3E,OAAO,KAAK,EAAE,cAAc,EAAyB,MAAM,SAAS,CAAC;AAQrE;;GAEG;AACH,MAAM,WAAW,oBAAqB,SAAQ,cAAc;IAC1D;;OAEG;IACH,qBAAqB,EAAE,qBAAqB,CAAC;IAC7C;;OAEG;IACH,qBAAqB,CAAC,EAAE,8BAA8B,CAAC;IACvD;;OAEG;IACH,YAAY,CAAC,EAAE,CAAC,GAAG,EAAE,OAAO,KAAK,MAAM,GAAG,IAAI,CAAC;CAChD;AAED;;GAEG;AACH,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,oBAAoB,GAAG,UAAU,CAqG7E"}
+{"version":3,"file":"filter.d.ts","sourceRoot":"","sources":["../../src/security/filter.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,iBAAiB,CAAC;AAC/C,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAChD,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAEjD,OAAO,EAAE,qBAAqB,EAAE,MAAM,0BAA0B,CAAC;AACjE,OAAO,EAAE,8BAA8B,EAAE,MAAM,2BAA2B,CAAC;AAC3E,OAAO,KAAK,EAAE,cAAc,EAAyB,MAAM,SAAS,CAAC;AAOrE,OAAO,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAC;AAExD,OAAO,EAAE,SAAS,EAAmB,MAAM,oBAAoB,CAAC;AAGhE;;GAEG;AACH,MAAM,WAAW,oBAAqB,SAAQ,cAAc;IAC1D;;OAEG;IACH,qBAAqB,EAAE,qBAAqB,CAAC;IAC7C;;OAEG;IACH,qBAAqB,CAAC,EAAE,8BAA8B,CAAC;IACvD;;OAEG;IACH,YAAY,CAAC,EAAE,CAAC,GAAG,EAAE,OAAO,KAAK,MAAM,GAAG,IAAI,CAAC;IAC/C;;OAEG;IACH,SAAS,CAAC,EAAE,SAAS,CAAC;IACtB;;OAEG;IACH,aAAa,CAAC,EAAE,aAAa,CAAC;CAC/B;AAED;;GAEG;AACH,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,oBAAoB,GAAG,UAAU,CA4I7E;AAED;;;;GAIG;AACH,wBAAgB,gBAAgB,CAAC,SAAS,EAAE,SAAS,GAAG,aAAa,CAOpE;AAED;;;;GAIG;AACH,wBAAgB,iBAAiB,CAAC,SAAS,EAAE,SAAS,GAAG,SAAS,CAOjE"}

package/dist/security/guards/builtin/auth-guard.d.ts

@@ -0,0 +1,44 @@
+import type { CanActivate, ExecutionContext } from '../types';
+/**
+ * 认证守卫
+ * 检查请求是否已认证
+ *
+ * @example
+ * @Controller('/api/users')
+ * @UseGuards(AuthGuard)
+ * class UserController {
+ *   @GET('/profile')
+ *   getProfile() {
+ *     // 只有已认证的用户才能访问
+ *   }
+ * }
+ */
+export declare class AuthGuard implements CanActivate {
+    /**
+     * 判断是否允许访问
+     * @param context - 执行上下文
+     * @returns 如果已认证则返回 true，否则抛出 UnauthorizedException
+     */
+    canActivate(context: ExecutionContext): boolean;
+}
+/**
+ * 可选认证守卫
+ * 如果有 token 则验证，没有 token 也允许访问
+ *
+ * @example
+ * @GET('/public')
+ * @UseGuards(OptionalAuthGuard)
+ * publicEndpoint() {
+ *   // 未认证也可以访问，但如果有 token 会被验证
+ * }
+ */
+export declare class OptionalAuthGuard implements CanActivate {
+    /**
+     * 判断是否允许访问
+     * 总是返回 true，但会检查认证状态
+     * @param context - 执行上下文
+     * @returns 总是返回 true
+     */
+    canActivate(context: ExecutionContext): boolean;
+}
+//# sourceMappingURL=auth-guard.d.ts.map

package/dist/security/guards/builtin/auth-guard.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-guard.d.ts","sourceRoot":"","sources":["../../../../src/security/guards/builtin/auth-guard.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,WAAW,EAAE,gBAAgB,EAAE,MAAM,UAAU,CAAC;AAK9D;;;;;;;;;;;;;GAaG;AACH,qBACa,SAAU,YAAW,WAAW;IAC3C;;;;OAIG;IACI,WAAW,CAAC,OAAO,EAAE,gBAAgB,GAAG,OAAO;CAavD;AAED;;;;;;;;;;GAUG;AACH,qBACa,iBAAkB,YAAW,WAAW;IACnD;;;;;OAKG;IACI,WAAW,CAAC,OAAO,EAAE,gBAAgB,GAAG,OAAO;CAKvD"}

package/dist/security/guards/builtin/index.d.ts

@@ -0,0 +1,3 @@
+export { AuthGuard, OptionalAuthGuard } from './auth-guard';
+export { RolesGuard, createRolesGuard, type RolesGuardOptions } from './roles-guard';
+//# sourceMappingURL=index.d.ts.map

package/dist/security/guards/builtin/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/security/guards/builtin/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AAC5D,OAAO,EAAE,UAAU,EAAE,gBAAgB,EAAE,KAAK,iBAAiB,EAAE,MAAM,eAAe,CAAC"}

package/dist/security/guards/builtin/roles-guard.d.ts

@@ -0,0 +1,66 @@
+import type { CanActivate, ExecutionContext } from '../types';
+import { Reflector } from '../reflector';
+/**
+ * 角色守卫
+ * 检查用户是否具有所需角色
+ *
+ * @example
+ * @Controller('/api/admin')
+ * @UseGuards(AuthGuard, RolesGuard)
+ * class AdminController {
+ *   @GET('/dashboard')
+ *   @Roles('admin')
+ *   dashboard() {
+ *     // 只有 admin 角色才能访问
+ *   }
+ *
+ *   @GET('/super')
+ *   @Roles('admin', 'superadmin')
+ *   superAdmin() {
+ *     // admin 或 superadmin 角色可以访问
+ *   }
+ * }
+ */
+export declare class RolesGuard implements CanActivate {
+    private readonly reflector;
+    constructor(reflector?: Reflector);
+    /**
+     * 判断是否允许访问
+     * @param context - 执行上下文
+     * @returns 如果用户具有所需角色则返回 true
+     */
+    canActivate(context: ExecutionContext): boolean;
+}
+/**
+ * 创建自定义角色守卫
+ * 支持自定义角色验证逻辑
+ *
+ * @example
+ * const CustomRolesGuard = createRolesGuard({
+ *   // 所有角色都必须匹配
+ *   matchAll: true,
+ *   // 自定义角色获取逻辑
+ *   getRoles: (context) => {
+ *     const user = context.switchToHttp().getRequest().auth?.user;
+ *     return user?.roles || [];
+ *   },
+ * });
+ */
+export interface RolesGuardOptions {
+    /**
+     * 是否需要匹配所有角色
+     * @default false (只需匹配其中一个)
+     */
+    matchAll?: boolean;
+    /**
+     * 自定义获取用户角色的函数
+     */
+    getRoles?: (context: ExecutionContext) => string[];
+}
+/**
+ * 创建自定义角色守卫工厂
+ * @param options - 配置选项
+ * @returns 自定义角色守卫类
+ */
+export declare function createRolesGuard(options?: RolesGuardOptions): new () => CanActivate;
+//# sourceMappingURL=roles-guard.d.ts.map

package/dist/security/guards/builtin/roles-guard.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"roles-guard.d.ts","sourceRoot":"","sources":["../../../../src/security/guards/builtin/roles-guard.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,WAAW,EAAE,gBAAgB,EAAE,MAAM,UAAU,CAAC;AAK9D,OAAO,EAAE,SAAS,EAAmB,MAAM,cAAc,CAAC;AAE1D;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,qBACa,UAAW,YAAW,WAAW;IAC5C,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAY;gBAGX,SAAS,CAAC,EAAE,SAAS;IAKhD;;;;OAIG;IACI,WAAW,CAAC,OAAO,EAAE,gBAAgB,GAAG,OAAO;CAwCvD;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,WAAW,iBAAiB;IAChC;;;OAGG;IACH,QAAQ,CAAC,EAAE,OAAO,CAAC;IAEnB;;OAEG;IACH,QAAQ,CAAC,EAAE,CAAC,OAAO,EAAE,gBAAgB,KAAK,MAAM,EAAE,CAAC;CACpD;AAED;;;;GAIG;AACH,wBAAgB,gBAAgB,CAAC,OAAO,GAAE,iBAAsB,GAAG,UAAU,WAAW,CA4CvF"}

package/dist/security/guards/decorators.d.ts

@@ -0,0 +1,50 @@
+import 'reflect-metadata';
+import type { GuardType } from './types';
+/**
+ * 守卫装饰器
+ * 可用于控制器或方法级别
+ *
+ * @example
+ * // 控制器级别
+ * @Controller('/api/admin')
+ * @UseGuards(AuthGuard, RolesGuard)
+ * class AdminController {}
+ *
+ * @example
+ * // 方法级别
+ * @GET('/profile')
+ * @UseGuards(AuthGuard)
+ * getProfile() {}
+ *
+ * @param guards - 守卫类或守卫实例
+ * @returns 类或方法装饰器
+ */
+export declare function UseGuards(...guards: GuardType[]): ClassDecorator & MethodDecorator;
+/**
+ * 角色装饰器
+ * 用于标记需要特定角色的方法或控制器
+ *
+ * @example
+ * @GET('/admin')
+ * @Roles('admin', 'superadmin')
+ * adminOnly() {}
+ *
+ * @param roles - 允许访问的角色列表
+ * @returns 类或方法装饰器
+ */
+export declare function Roles(...roles: string[]): ClassDecorator & MethodDecorator;
+/**
+ * 获取守卫元数据
+ * @param target - 目标对象（类或原型）
+ * @param propertyKey - 方法名（可选）
+ * @returns 守卫列表
+ */
+export declare function getGuardsMetadata(target: Object | Function, propertyKey?: string | symbol): GuardType[];
+/**
+ * 获取角色元数据
+ * @param target - 目标对象（类或原型）
+ * @param propertyKey - 方法名（可选）
+ * @returns 角色列表
+ */
+export declare function getRolesMetadata(target: Object | Function, propertyKey?: string | symbol): string[];
+//# sourceMappingURL=decorators.d.ts.map

package/dist/security/guards/decorators.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"decorators.d.ts","sourceRoot":"","sources":["../../../src/security/guards/decorators.ts"],"names":[],"mappings":"AAAA,OAAO,kBAAkB,CAAC;AAC1B,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AAGzC;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAgB,SAAS,CACvB,GAAG,MAAM,EAAE,SAAS,EAAE,GACrB,cAAc,GAAG,eAAe,CA2BlC;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,KAAK,CACnB,GAAG,KAAK,EAAE,MAAM,EAAE,GACjB,cAAc,GAAG,eAAe,CAclC;AAED;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAC/B,MAAM,EAAE,MAAM,GAAG,QAAQ,EACzB,WAAW,CAAC,EAAE,MAAM,GAAG,MAAM,GAC5B,SAAS,EAAE,CAab;AAED;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAC9B,MAAM,EAAE,MAAM,GAAG,QAAQ,EACzB,WAAW,CAAC,EAAE,MAAM,GAAG,MAAM,GAC5B,MAAM,EAAE,CAKV"}

package/dist/security/guards/execution-context.d.ts

@@ -0,0 +1,56 @@
+import 'reflect-metadata';
+import type { ServerWebSocket } from 'bun';
+import type { Context } from '../../core/context';
+import type { ResponseBuilder } from '../../request/response';
+import type { Constructor } from '../../core/types';
+import type { ExecutionContext, HttpArgumentsHost, WsArgumentsHost } from './types';
+/**
+ * 执行上下文实现
+ */
+export declare class ExecutionContextImpl implements ExecutionContext {
+    private readonly ctx;
+    private readonly controllerClass;
+    private readonly methodName;
+    private readonly handler;
+    private readonly args;
+    private readonly httpHost;
+    private wsHost?;
+    constructor(ctx: Context, controllerClass: Constructor<unknown>, methodName: string, handler: Function, args?: unknown[], responseBuilder?: ResponseBuilder);
+    /**
+     * 设置 WebSocket 上下文
+     * @param client - WebSocket 客户端
+     * @param data - 消息数据
+     */
+    setWsContext(client: ServerWebSocket<unknown>, data: unknown): void;
+    /**
+     * 获取 HTTP 上下文
+     */
+    switchToHttp(): HttpArgumentsHost;
+    /**
+     * 获取 WebSocket 上下文
+     */
+    switchToWs(): WsArgumentsHost;
+    /**
+     * 获取当前处理的控制器类
+     */
+    getClass(): Constructor<unknown>;
+    /**
+     * 获取当前处理的方法
+     */
+    getHandler(): Function;
+    /**
+     * 获取方法名
+     */
+    getMethodName(): string;
+    /**
+     * 获取方法或类的元数据
+     * @param key - 元数据键
+     * @returns 元数据值
+     */
+    getMetadata<T>(key: string | symbol): T | undefined;
+    /**
+     * 获取请求参数
+     */
+    getArgs(): unknown[];
+}
+//# sourceMappingURL=execution-context.d.ts.map

package/dist/security/guards/execution-context.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"execution-context.d.ts","sourceRoot":"","sources":["../../../src/security/guards/execution-context.ts"],"names":[],"mappings":"AAAA,OAAO,kBAAkB,CAAC;AAC1B,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,KAAK,CAAC;AAC3C,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AAC9D,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AACpD,OAAO,KAAK,EACV,gBAAgB,EAChB,iBAAiB,EACjB,eAAe,EAChB,MAAM,SAAS,CAAC;AAkDjB;;GAEG;AACH,qBAAa,oBAAqB,YAAW,gBAAgB;IAKzD,OAAO,CAAC,QAAQ,CAAC,GAAG;IACpB,OAAO,CAAC,QAAQ,CAAC,eAAe;IAChC,OAAO,CAAC,QAAQ,CAAC,UAAU;IAC3B,OAAO,CAAC,QAAQ,CAAC,OAAO;IACxB,OAAO,CAAC,QAAQ,CAAC,IAAI;IARvB,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAoB;IAC7C,OAAO,CAAC,MAAM,CAAC,CAAkB;gBAGd,GAAG,EAAE,OAAO,EACZ,eAAe,EAAE,WAAW,CAAC,OAAO,CAAC,EACrC,UAAU,EAAE,MAAM,EAClB,OAAO,EAAE,QAAQ,EACjB,IAAI,GAAE,OAAO,EAAO,EACrC,eAAe,CAAC,EAAE,eAAe;IAKnC;;;;OAIG;IACI,YAAY,CAAC,MAAM,EAAE,eAAe,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,OAAO,GAAG,IAAI;IAI1E;;OAEG;IACI,YAAY,IAAI,iBAAiB;IAIxC;;OAEG;IACI,UAAU,IAAI,eAAe;IAOpC;;OAEG;IACI,QAAQ,IAAI,WAAW,CAAC,OAAO,CAAC;IAIvC;;OAEG;IACI,UAAU,IAAI,QAAQ;IAI7B;;OAEG;IACI,aAAa,IAAI,MAAM;IAI9B;;;;OAIG;IACI,WAAW,CAAC,CAAC,EAAE,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,CAAC,GAAG,SAAS;IAe1D;;OAEG;IACI,OAAO,IAAI,OAAO,EAAE;CAG5B"}

package/dist/security/guards/guard-registry.d.ts

@@ -0,0 +1,67 @@
+import type { Container } from '../../di/container';
+import type { Constructor } from '../../core/types';
+import type { GuardType, ExecutionContext } from './types';
+/**
+ * 守卫注册表
+ * 管理全局守卫和执行守卫链
+ */
+export declare class GuardRegistry {
+    /**
+     * 全局守卫列表
+     */
+    private globalGuards;
+    /**
+     * 守卫实例缓存（用于缓存从 DI 容器解析的守卫实例）
+     */
+    private guardInstances;
+    /**
+     * 注册全局守卫
+     * @param guards - 守卫类或实例
+     */
+    addGlobalGuards(...guards: GuardType[]): void;
+    /**
+     * 获取全局守卫
+     * @returns 全局守卫列表
+     */
+    getGlobalGuards(): GuardType[];
+    /**
+     * 清除所有全局守卫
+     */
+    clearGlobalGuards(): void;
+    /**
+     * 解析守卫实例
+     * @param guard - 守卫类或实例
+     * @param container - DI 容器
+     * @returns 守卫实例
+     */
+    private resolveGuard;
+    /**
+     * 获取控制器级别的守卫
+     * @param controllerClass - 控制器类
+     * @returns 守卫列表
+     */
+    getControllerGuards(controllerClass: Constructor<unknown>): GuardType[];
+    /**
+     * 获取方法级别的守卫
+     * @param controllerClass - 控制器类
+     * @param methodName - 方法名
+     * @returns 守卫列表
+     */
+    getMethodGuards(controllerClass: Constructor<unknown>, methodName: string): GuardType[];
+    /**
+     * 收集所有守卫（全局 + 控制器 + 方法）
+     * @param controllerClass - 控制器类
+     * @param methodName - 方法名
+     * @returns 按顺序排列的守卫列表
+     */
+    collectGuards(controllerClass: Constructor<unknown>, methodName: string): GuardType[];
+    /**
+     * 执行守卫链
+     * @param context - 执行上下文
+     * @param container - DI 容器
+     * @returns 是否允许访问
+     * @throws ForbiddenException 如果守卫拒绝访问
+     */
+    executeGuards(context: ExecutionContext, container: Container): Promise<boolean>;
+}
+//# sourceMappingURL=guard-registry.d.ts.map

package/dist/security/guards/guard-registry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"guard-registry.d.ts","sourceRoot":"","sources":["../../../src/security/guards/guard-registry.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AACpD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AACpD,OAAO,KAAK,EAEV,SAAS,EACT,gBAAgB,EACjB,MAAM,SAAS,CAAC;AAKjB;;;GAGG;AACH,qBAAa,aAAa;IACxB;;OAEG;IACH,OAAO,CAAC,YAAY,CAAmB;IAEvC;;OAEG;IACH,OAAO,CAAC,cAAc,CAAoD;IAE1E;;;OAGG;IACI,eAAe,CAAC,GAAG,MAAM,EAAE,SAAS,EAAE,GAAG,IAAI;IAIpD;;;OAGG;IACI,eAAe,IAAI,SAAS,EAAE;IAIrC;;OAEG;IACI,iBAAiB,IAAI,IAAI;IAKhC;;;;;OAKG;IACH,OAAO,CAAC,YAAY;IA8BpB;;;;OAIG;IACI,mBAAmB,CAAC,eAAe,EAAE,WAAW,CAAC,OAAO,CAAC,GAAG,SAAS,EAAE;IAI9E;;;;;OAKG;IACI,eAAe,CACpB,eAAe,EAAE,WAAW,CAAC,OAAO,CAAC,EACrC,UAAU,EAAE,MAAM,GACjB,SAAS,EAAE;IAId;;;;;OAKG;IACI,aAAa,CAClB,eAAe,EAAE,WAAW,CAAC,OAAO,CAAC,EACrC,UAAU,EAAE,MAAM,GACjB,SAAS,EAAE;IASd;;;;;;OAMG;IACU,aAAa,CACxB,OAAO,EAAE,gBAAgB,EACzB,SAAS,EAAE,SAAS,GACnB,OAAO,CAAC,OAAO,CAAC;CA0BpB"}

package/dist/security/guards/index.d.ts

@@ -0,0 +1,7 @@
+export * from './types';
+export * from './decorators';
+export * from './execution-context';
+export * from './guard-registry';
+export * from './reflector';
+export * from './builtin';
+//# sourceMappingURL=index.d.ts.map

package/dist/security/guards/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/security/guards/index.ts"],"names":[],"mappings":"AAAA,cAAc,SAAS,CAAC;AACxB,cAAc,cAAc,CAAC;AAC7B,cAAc,qBAAqB,CAAC;AACpC,cAAc,kBAAkB,CAAC;AACjC,cAAc,aAAa,CAAC;AAC5B,cAAc,WAAW,CAAC"}

package/dist/security/guards/reflector.d.ts

@@ -0,0 +1,57 @@
+import 'reflect-metadata';
+import type { Constructor } from '../../core/types';
+/**
+ * Reflector 工具类
+ * 用于获取类和方法的元数据
+ */
+export declare class Reflector {
+    /**
+     * 获取元数据
+     * 优先从方法获取，如果方法没有则从类获取
+     *
+     * @param metadataKey - 元数据键
+     * @param target - 目标类或方法
+     * @returns 元数据值
+     */
+    get<T>(metadataKey: string | symbol, target: Function | Object): T | undefined;
+    /**
+     * 从类获取元数据
+     * @param metadataKey - 元数据键
+     * @param target - 目标类
+     * @returns 元数据值
+     */
+    getFromClass<T>(metadataKey: string | symbol, target: Constructor<unknown>): T | undefined;
+    /**
+     * 从方法获取元数据
+     * @param metadataKey - 元数据键
+     * @param target - 目标类原型
+     * @param propertyKey - 方法名
+     * @returns 元数据值
+     */
+    getFromMethod<T>(metadataKey: string | symbol, target: Object, propertyKey: string | symbol): T | undefined;
+    /**
+     * 获取元数据（支持合并类和方法的元数据）
+     * 对于数组类型，将类和方法的元数据合并
+     *
+     * @param metadataKey - 元数据键
+     * @param target - 目标类
+     * @param propertyKey - 方法名
+     * @returns 合并后的元数据值
+     */
+    getAllAndMerge<T extends unknown[]>(metadataKey: string | symbol, target: Constructor<unknown>, propertyKey: string | symbol): T;
+    /**
+     * 获取元数据（方法优先）
+     * 如果方法有元数据则返回方法的，否则返回类的
+     *
+     * @param metadataKey - 元数据键
+     * @param target - 目标类
+     * @param propertyKey - 方法名
+     * @returns 元数据值
+     */
+    getAllAndOverride<T>(metadataKey: string | symbol, target: Constructor<unknown>, propertyKey: string | symbol): T | undefined;
+}
+/**
+ * Reflector Token
+ */
+export declare const REFLECTOR_TOKEN: unique symbol;
+//# sourceMappingURL=reflector.d.ts.map

package/dist/security/guards/reflector.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"reflector.d.ts","sourceRoot":"","sources":["../../../src/security/guards/reflector.ts"],"names":[],"mappings":"AAAA,OAAO,kBAAkB,CAAC;AAC1B,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAEpD;;;GAGG;AACH,qBAAa,SAAS;IACpB;;;;;;;OAOG;IACI,GAAG,CAAC,CAAC,EACV,WAAW,EAAE,MAAM,GAAG,MAAM,EAC5B,MAAM,EAAE,QAAQ,GAAG,MAAM,GACxB,CAAC,GAAG,SAAS;IAIhB;;;;;OAKG;IACI,YAAY,CAAC,CAAC,EACnB,WAAW,EAAE,MAAM,GAAG,MAAM,EAC5B,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,GAC3B,CAAC,GAAG,SAAS;IAIhB;;;;;;OAMG;IACI,aAAa,CAAC,CAAC,EACpB,WAAW,EAAE,MAAM,GAAG,MAAM,EAC5B,MAAM,EAAE,MAAM,EACd,WAAW,EAAE,MAAM,GAAG,MAAM,GAC3B,CAAC,GAAG,SAAS;IAIhB;;;;;;;;OAQG;IACI,cAAc,CAAC,CAAC,SAAS,OAAO,EAAE,EACvC,WAAW,EAAE,MAAM,GAAG,MAAM,EAC5B,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,EAC5B,WAAW,EAAE,MAAM,GAAG,MAAM,GAC3B,CAAC;IAQJ;;;;;;;;OAQG;IACI,iBAAiB,CAAC,CAAC,EACxB,WAAW,EAAE,MAAM,GAAG,MAAM,EAC5B,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,EAC5B,WAAW,EAAE,MAAM,GAAG,MAAM,GAC3B,CAAC,GAAG,SAAS;CAOjB;AAED;;GAEG;AACH,eAAO,MAAM,eAAe,eAAyC,CAAC"}

package/dist/security/guards/types.d.ts

@@ -0,0 +1,126 @@
+import type { Context } from '../../core/context';
+import type { ResponseBuilder } from '../../request/response';
+import type { Constructor } from '../../core/types';
+import type { ServerWebSocket } from 'bun';
+/**
+ * 守卫接口
+ * 守卫用于决定请求是否可以继续执行
+ */
+export interface CanActivate {
+    /**
+     * 判断是否允许访问
+     * @param context - 执行上下文
+     * @returns 是否允许访问，可以是同步或异步的布尔值
+     */
+    canActivate(context: ExecutionContext): boolean | Promise<boolean>;
+}
+/**
+ * HTTP 参数主机接口
+ * 提供 HTTP 请求相关的上下文信息
+ */
+export interface HttpArgumentsHost {
+    /**
+     * 获取请求上下文
+     * @returns Context 对象
+     */
+    getRequest(): Context;
+    /**
+     * 获取响应构建器
+     * @returns ResponseBuilder 对象（可能为 undefined）
+     */
+    getResponse(): ResponseBuilder | undefined;
+}
+/**
+ * WebSocket 参数主机接口
+ * 提供 WebSocket 连接相关的上下文信息
+ */
+export interface WsArgumentsHost {
+    /**
+     * 获取 WebSocket 客户端
+     * @returns WebSocket 连接对象
+     */
+    getClient(): ServerWebSocket<unknown>;
+    /**
+     * 获取消息数据
+     * @returns 消息数据
+     */
+    getData(): unknown;
+}
+/**
+ * 执行上下文接口
+ * 提供请求处理过程中的上下文信息
+ */
+export interface ExecutionContext {
+    /**
+     * 获取 HTTP 上下文
+     * @returns HTTP 参数主机
+     */
+    switchToHttp(): HttpArgumentsHost;
+    /**
+     * 获取 WebSocket 上下文
+     * @returns WebSocket 参数主机
+     */
+    switchToWs(): WsArgumentsHost;
+    /**
+     * 获取当前处理的控制器类
+     * @returns 控制器类构造函数
+     */
+    getClass(): Constructor<unknown>;
+    /**
+     * 获取当前处理的方法
+     * @returns 方法函数
+     */
+    getHandler(): Function;
+    /**
+     * 获取方法名
+     * @returns 方法名字符串
+     */
+    getMethodName(): string;
+    /**
+     * 获取方法或类的元数据
+     * @param key - 元数据键
+     * @returns 元数据值，如果不存在则返回 undefined
+     */
+    getMetadata<T>(key: string | symbol): T | undefined;
+    /**
+     * 获取请求参数
+     * @returns 请求参数数组
+     */
+    getArgs(): unknown[];
+}
+/**
+ * 守卫类型：可以是守卫类构造函数或守卫实例
+ */
+export type GuardType = Constructor<CanActivate> | CanActivate;
+/**
+ * 守卫元数据
+ */
+export interface GuardMetadata {
+    /**
+     * 守卫列表
+     */
+    guards: GuardType[];
+}
+/**
+ * 守卫配置选项
+ */
+export interface GuardOptions {
+    /**
+     * 是否跳过全局守卫
+     * @default false
+     */
+    skipGlobalGuards?: boolean;
+}
+/**
+ * 守卫元数据键
+ */
+export declare const GUARDS_METADATA_KEY: unique symbol;
+/**
+ * 守卫注册表 Token
+ */
+export declare const GUARD_REGISTRY_TOKEN: unique symbol;
+/**
+ * Roles 元数据键
+ */
+export declare const ROLES_METADATA_KEY: unique symbol;
+//# sourceMappingURL=types.d.ts.map

package/dist/security/guards/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/security/guards/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AAC9D,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AACpD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,KAAK,CAAC;AAE3C;;;GAGG;AACH,MAAM,WAAW,WAAW;IAC1B;;;;OAIG;IACH,WAAW,CAAC,OAAO,EAAE,gBAAgB,GAAG,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CACpE;AAED;;;GAGG;AACH,MAAM,WAAW,iBAAiB;IAChC;;;OAGG;IACH,UAAU,IAAI,OAAO,CAAC;IAEtB;;;OAGG;IACH,WAAW,IAAI,eAAe,GAAG,SAAS,CAAC;CAC5C;AAED;;;GAGG;AACH,MAAM,WAAW,eAAe;IAC9B;;;OAGG;IACH,SAAS,IAAI,eAAe,CAAC,OAAO,CAAC,CAAC;IAEtC;;;OAGG;IACH,OAAO,IAAI,OAAO,CAAC;CACpB;AAED;;;GAGG;AACH,MAAM,WAAW,gBAAgB;IAC/B;;;OAGG;IACH,YAAY,IAAI,iBAAiB,CAAC;IAElC;;;OAGG;IACH,UAAU,IAAI,eAAe,CAAC;IAE9B;;;OAGG;IACH,QAAQ,IAAI,WAAW,CAAC,OAAO,CAAC,CAAC;IAEjC;;;OAGG;IACH,UAAU,IAAI,QAAQ,CAAC;IAEvB;;;OAGG;IACH,aAAa,IAAI,MAAM,CAAC;IAExB;;;;OAIG;IACH,WAAW,CAAC,CAAC,EAAE,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,CAAC,GAAG,SAAS,CAAC;IAEpD;;;OAGG;IACH,OAAO,IAAI,OAAO,EAAE,CAAC;CACtB;AAED;;GAEG;AACH,MAAM,MAAM,SAAS,GAAG,WAAW,CAAC,WAAW,CAAC,GAAG,WAAW,CAAC;AAE/D;;GAEG;AACH,MAAM,WAAW,aAAa;IAC5B;;OAEG;IACH,MAAM,EAAE,SAAS,EAAE,CAAC;CACrB;AAED;;GAEG;AACH,MAAM,WAAW,YAAY;IAC3B;;;OAGG;IACH,gBAAgB,CAAC,EAAE,OAAO,CAAC;CAC5B;AAED;;GAEG;AACH,eAAO,MAAM,mBAAmB,eAAsC,CAAC;AAEvE;;GAEG;AACH,eAAO,MAAM,oBAAoB,eAA8C,CAAC;AAEhF;;GAEG;AACH,eAAO,MAAM,kBAAkB,eAAqC,CAAC"}

package/dist/security/index.d.ts

@@ -5,4 +5,5 @@ export * from './access-decision-manager';
 export * from './filter';
 export * from './providers';
 export * from './security-module';
+export * from './guards';
 //# sourceMappingURL=index.d.ts.map

package/dist/security/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/security/index.ts"],"names":[],"mappings":"AAAA,cAAc,SAAS,CAAC;AACxB,cAAc,WAAW,CAAC;AAC1B,cAAc,0BAA0B,CAAC;AACzC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,UAAU,CAAC;AACzB,cAAc,aAAa,CAAC;AAC5B,cAAc,mBAAmB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/security/index.ts"],"names":[],"mappings":"AAAA,cAAc,SAAS,CAAC;AACxB,cAAc,WAAW,CAAC;AAC1B,cAAc,0BAA0B,CAAC;AACzC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,UAAU,CAAC;AACzB,cAAc,aAAa,CAAC;AAC5B,cAAc,mBAAmB,CAAC;AAClC,cAAc,UAAU,CAAC"}

package/dist/security/security-module.d.ts

@@ -1,4 +1,6 @@
 import type { JWTConfig, OAuth2Client, UserInfo } from '../auth/types';
+import type { GuardType } from './guards/types';
+import { GuardRegistry } from './guards/guard-registry';
 /**
  * 安全模块配置
  */
@@ -36,6 +38,10 @@ export interface SecurityModuleConfig {
      * @default false
      */
     defaultAuthRequired?: boolean;
+    /**
+     * 全局守卫列表
+     */
+    globalGuards?: GuardType[];
 }
 /**
  * 安全模块
@@ -46,5 +52,19 @@ export declare class SecurityModule {
      * @param config - 模块配置
      */
     static forRoot(config: SecurityModuleConfig): typeof SecurityModule;
+    /**
+     * 获取守卫注册表
+     * @returns 守卫注册表实例
+     */
+    static getGuardRegistry(): GuardRegistry | null;
+    /**
+     * 添加全局守卫
+     * @param guards - 守卫类或实例
+     */
+    static addGlobalGuards(...guards: GuardType[]): void;
+    /**
+     * 重置模块状态（主要用于测试）
+     */
+    static reset(): void;
 }
 //# sourceMappingURL=security-module.d.ts.map

package/dist/security/security-module.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"security-module.d.ts","sourceRoot":"","sources":["../../src/security/security-module.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EAAE,SAAS,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAEvE;;GAEG;AACH,MAAM,WAAW,oBAAoB;IACnC;;OAEG;IACH,GAAG,EAAE,SAAS,CAAC;IACf;;OAEG;IACH,aAAa,CAAC,EAAE,YAAY,EAAE,CAAC;IAC/B;;OAEG;IACH,YAAY,CAAC,EAAE;QACb,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAC,CAAC;KACpD,CAAC;IACF;;;OAGG;IACH,qBAAqB,CAAC,EAAE,OAAO,CAAC;IAChC;;;OAGG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB;;OAEG;IACH,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB;;;OAGG;IACH,mBAAmB,CAAC,EAAE,OAAO,CAAC;CAC/B;AAED;;GAEG;AACH,qBAKa,cAAc;IACzB;;;OAGG;WACW,OAAO,CAAC,MAAM,EAAE,oBAAoB,GAAG,OAAO,cAAc;CAiF3E"}
+{"version":3,"file":"security-module.d.ts","sourceRoot":"","sources":["../../src/security/security-module.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EAAE,SAAS,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AACvE,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAEhD,OAAO,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAC;AAGxD;;GAEG;AACH,MAAM,WAAW,oBAAoB;IACnC;;OAEG;IACH,GAAG,EAAE,SAAS,CAAC;IACf;;OAEG;IACH,aAAa,CAAC,EAAE,YAAY,EAAE,CAAC;IAC/B;;OAEG;IACH,YAAY,CAAC,EAAE;QACb,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAC,CAAC;KACpD,CAAC;IACF;;;OAGG;IACH,qBAAqB,CAAC,EAAE,OAAO,CAAC;IAChC;;;OAGG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB;;OAEG;IACH,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB;;;OAGG;IACH,mBAAmB,CAAC,EAAE,OAAO,CAAC;IAC9B;;OAEG;IACH,YAAY,CAAC,EAAE,SAAS,EAAE,CAAC;CAC5B;AAOD;;GAEG;AACH,qBAKa,cAAc;IACzB;;;OAGG;WACW,OAAO,CAAC,MAAM,EAAE,oBAAoB,GAAG,OAAO,cAAc;IA6G1E;;;OAGG;WACW,gBAAgB,IAAI,aAAa,GAAG,IAAI;IAItD;;;OAGG;WACW,eAAe,CAAC,GAAG,MAAM,EAAE,SAAS,EAAE,GAAG,IAAI;IAM3D;;OAEG;WACW,KAAK,IAAI,IAAI;CAQ5B"}