@fgbg/mdocs 0.6.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 feigebuge
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,108 @@
+# mdocs
+
+Markdown knowledge base for small teams.
+
+- TypeScript front-end and back-end
+- Vite + React web, Express back-end
+- SQLite metadata, Markdown files as primary storage
+- Lightweight visitor identity, no account system
+- Runs locally or on a small team server
+
+> 文档站点：[xuhuafeifei.github.io/mdocs-site](https://xuhuafeifei.github.io/mdocs-site/)
+
+## Clean-room policy
+
+`mdocs` is implemented from scratch. It MUST NOT reuse any code from
+`markdown-docs` (located at `~/ddmc/markdown-docs`). That includes, but is
+not limited to:
+
+- Source files, functions, classes, interfaces, types
+- SQL statements or schema definitions
+- React components, hooks, CSS
+- Utility helpers and configuration shapes
+- API route wiring or identity logic
+
+Reuse of the `agent-demo` logger design is permitted because it is the
+author's own demo project.
+
+The **Meta2d / Vditor flow** matches `markdown-docs`: `useFlowRenderer`,
+`registerPens`, fenced `` ```meta2 `` blocks with inline JSON, **wysiwyg**
+mode (not IR), SVG preview in the preview half of each block, and
+`window.vditorInstance` for `getValue` / `setValue` when editing or deleting
+blocks.
+
+## Diagrams (Meta2d in Markdown)
+
+Diagrams live in the `.md` source as fenced blocks:
+
+````markdown
+```meta2
+{ "pens": [ … ] }
+```
+````
+
+The editor renders them as SVG (via `canvas2svg` + Meta2d, same approach as
+`markdown-docs`). Saving the modal rewrites that JSON in the document with
+`Vditor#setValue`. Use the toolbar **Insert diagram** (or double-click a
+diagram). Switch **edit-mode** / **both** in the Vditor toolbar for source vs
+wysiwyg. Large documents: API JSON body limit is 32 MiB.
+
+## Layout
+
+```
+src/
+  server/    Node back-end
+  web/       Vite React front-end
+  shared/    Cross-cutting types and schemas
+```
+
+Runtime data lives under `~/.mdocs/`:
+
+```
+~/.mdocs/
+  data.sqlite
+  files/
+    docs/
+    assets/
+  logs/
+```
+
+`domain_id` is a logical grouping inside SQLite and does not appear in file
+paths. Moving a document between domains only updates the database.
+
+## Development
+
+```bash
+pnpm install
+pnpm dev:server   # http://localhost:4000
+pnpm dev:web      # http://localhost:5173, proxies /api
+```
+
+## Build and run
+
+```bash
+pnpm build
+pnpm start        # serves web static files and /api on one port
+```
+
+## Visitor identity
+
+On first visit the user enters a nickname. The server issues a
+`visitor_id` (UUID) and a high-entropy `visitor_token`. The browser keeps
+the raw token; the server only stores `SHA-256(token)`. Each request
+sends the raw token in an `x-visitor-token` header; the server hashes it
+and looks up the visitor.
+
+## Visitor migration
+
+If the browser cache is cleared a user will register a new visitor. An
+administrator can merge the old identity into the new one:
+
+```bash
+pnpm mdocs visitor migrate --from OLD_VISITOR_ID --to NEW_VISITOR_ID --dry-run
+pnpm mdocs visitor migrate --from OLD_VISITOR_ID --to NEW_VISITOR_ID --confirm
+```
+
+The script backs up the SQLite file, runs inside a transaction, updates
+ownership, disables the old visitor, and appends an entry to
+`visitor_migrations` and `audit_logs`. Markdown files are never moved.

package/bin/mdocs.js

@@ -0,0 +1,6 @@
+#!/usr/bin/env node
+
+// mdocs CLI entry — starts the server by default.
+// Subcommands: mdocs visitor list, mdocs visitor migrate
+
+import("../dist/server/cli/main.js");

package/dist/server/access/access-control.js

@@ -0,0 +1,186 @@
+/**
+ * 统一访问控制模块
+ *
+ * == 设计原则 ==
+ * - 五级权限 + invite 叠加，域类型约束文档档位
+ * - 所有读/写/删的权限判断都收拢在此，不分散到各服务和路由
+ * - canReadDocument / canEditDocument 需调用方提供域上下文（域类型 + 成员身份），
+ *   避免在批量操作中反复查库
+ * - assertDocumentAccess 自带 DB 查询，适合路由中间件单篇鉴权
+ *
+ * == 鉴权顺序 ==
+ *   1. 创建者（owner）→ 直接放行
+ *   2. public 域 → 走 3/4 档语义（任何人可读/可写）
+ *   3. restricted 域 → 域成员走 1/2 档；非成员靠 invite
+ *   4. private 域 → 按五档实际语义 + invite
+ *   5. invite 叠加（与域成员互斥，见 addDocumentInvite）
+ */
+import { getDb } from "../db/connection.js";
+import { findDocumentById, findDocumentInvite } from "../db/repositories/document.repo.js";
+import { findDomainById, isDomainMember as checkDomainMember } from "../db/repositories/domain.repo.js";
+// ============================================================
+//  通用错误类型
+// ============================================================
+export class DocumentError extends Error {
+    status;
+    code;
+    constructor(code, message, status = 400) {
+        super(message);
+        this.code = code;
+        this.status = status;
+    }
+}
+// ============================================================
+//  五级权限
+// ============================================================
+export const Permission = {
+    /** 仅创建者读+写 */
+    PRIVATE: 0,
+    /** 域成员可读，仅创建者可写 */
+    DOMAIN_READ: 1,
+    /** 域成员可读+写 */
+    DOMAIN_WRITE: 2,
+    /** 任何人可读，仅创建者可写 */
+    PUBLIC_READ: 3,
+    /** 任何人可读+写 */
+    PUBLIC_WRITE: 4,
+};
+// ============================================================
+//  域类型 × 允许的文档权限档位
+// ============================================================
+const DOMAIN_ALLOWED_PERMISSIONS = {
+    public: [Permission.PUBLIC_READ, Permission.PUBLIC_WRITE],
+    restricted: [Permission.DOMAIN_READ, Permission.DOMAIN_WRITE],
+    private: [
+        Permission.PRIVATE,
+        Permission.DOMAIN_READ,
+        Permission.DOMAIN_WRITE,
+        Permission.PUBLIC_READ,
+        Permission.PUBLIC_WRITE,
+    ],
+};
+/** 检查某域类型是否允许该文档权限值 */
+export function validateDomainPermission(domainPermission, docPermission) {
+    const allowed = DOMAIN_ALLOWED_PERMISSIONS[domainPermission];
+    return allowed ? allowed.includes(docPermission) : false;
+}
+// ============================================================
+//  读权限
+// ============================================================
+/**
+ * 判断某访客是否有权读取该文档。
+ * 注意：此函数不检查域入口（domain entry）—— 调用方应先用 canEnterDomainTree 过滤。
+ */
+export function canReadDocument(row, visitorId, domainInfo) {
+    // 1. 创建者永远可读
+    if (row.owner_visitor_id === visitorId)
+        return true;
+    // 2. 未登录：只能读 public_read / public_write（3/4 档）
+    if (!visitorId)
+        return row.permission >= Permission.PUBLIC_READ;
+    // 3. 根据域上下文 + 权限值判断
+    if (domainInfo.domainPermission === "public") {
+        // public 域仅 3/4 档，两者都是"任何人可读"
+        return row.permission >= Permission.PUBLIC_READ;
+    }
+    if (domainInfo.domainPermission === "restricted") {
+        // restricted 域仅 1/2 档
+        if (row.permission >= Permission.DOMAIN_READ) {
+            if (domainInfo.isDomainMember)
+                return true;
+        }
+        // 非成员靠 invite
+        return !!findDocumentInvite(getDb(), row.document_id, visitorId);
+    }
+    // private 域：按五档实际语义
+    if (row.permission === Permission.PRIVATE) {
+        // 仅创建者（已在第 1 步判断过），其他人靠 invite
+        return !!findDocumentInvite(getDb(), row.document_id, visitorId);
+    }
+    if (row.permission <= Permission.DOMAIN_WRITE) {
+        // domain_read / domain_write：private 域只有创建者一名成员
+        // 不是创建者，且不是成员 → 靠 invite
+        return !!findDocumentInvite(getDb(), row.document_id, visitorId);
+    }
+    // public_read / public_write：任何人可读
+    return true;
+}
+// ============================================================
+//  写权限
+// ============================================================
+/**
+ * 判断某访客是否有权编辑该文档。
+ */
+export function canEditDocument(row, visitorId, domainInfo) {
+    // 1. 创建者永远可写
+    if (row.owner_visitor_id === visitorId)
+        return true;
+    // 2. 未登录：只能写 public_write（4 档）
+    if (!visitorId)
+        return row.permission === Permission.PUBLIC_WRITE;
+    // 3. 根据域上下文 + 权限值判断
+    if (domainInfo.domainPermission === "public") {
+        // public 域仅 3/4 档，仅 4 (public_write) 允许任何人写
+        return row.permission === Permission.PUBLIC_WRITE;
+    }
+    if (domainInfo.domainPermission === "restricted") {
+        // restricted 域仅 1/2 档，仅 2 (domain_write) 允许域成员写
+        if (row.permission === Permission.DOMAIN_WRITE && domainInfo.isDomainMember)
+            return true;
+        // 非成员靠 invite
+        const invite = findDocumentInvite(getDb(), row.document_id, visitorId);
+        return invite?.permission === "edit";
+    }
+    // private 域：按五档实际语义
+    if (row.permission === Permission.PRIVATE) {
+        // 仅创建者可写
+        return false;
+    }
+    if (row.permission === Permission.DOMAIN_READ) {
+        // domain_read：仅创建者可写（已在第 1 步排除了）
+        return false;
+    }
+    if (row.permission === Permission.DOMAIN_WRITE) {
+        // domain_write：域成员可写，但 private 域只有创建者一名成员
+        return false;
+    }
+    if (row.permission === Permission.PUBLIC_READ) {
+        // public_read：仅创建者可写
+        return false;
+    }
+    // public_write：任何人可写
+    return true;
+}
+// ============================================================
+//  统一鉴权入口（自带 DB 查询，适合路由中间件）
+// ============================================================
+/**
+ * 全量鉴权：查文档 → 查域 → 判断读写删权限。
+ * 抛 DocumentError（404/403），由 error-handling 中间件或路由 catch 处理。
+ */
+export function assertDocumentAccess(documentId, visitorId, action) {
+    const db = getDb();
+    const row = findDocumentById(db, documentId);
+    if (!row) {
+        throw new DocumentError("DOC_NOT_FOUND", "文档不存在", 404);
+    }
+    // 删除：始终仅创建者
+    if (action === "delete") {
+        if (row.owner_visitor_id !== visitorId) {
+            throw new DocumentError("FORBIDDEN", "仅创建者可删除此文档", 403);
+        }
+        return;
+    }
+    // 读/写：需要域上下文
+    const domain = findDomainById(db, row.domain_id);
+    const domainPermission = domain?.permission ?? "public";
+    const isMember = !!(visitorId && domain && checkDomainMember(db, domain.domain_id, visitorId));
+    const domainInfo = { domainPermission, isDomainMember: isMember };
+    if (action === "read" && !canReadDocument(row, visitorId, domainInfo)) {
+        throw new DocumentError("FORBIDDEN", "无权读取此文档", 403);
+    }
+    if (action === "edit" && !canEditDocument(row, visitorId, domainInfo)) {
+        throw new DocumentError("FORBIDDEN", "无权编辑此文档", 403);
+    }
+}
+//# sourceMappingURL=access-control.js.map

package/dist/server/access/access-control.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"access-control.js","sourceRoot":"","sources":["../../../src/server/access/access-control.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,EAAE,KAAK,EAAE,MAAM,qBAAqB,CAAC;AAC5C,OAAO,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,MAAM,qCAAqC,CAAC;AAC3F,OAAO,EAAE,cAAc,EAAE,cAAc,IAAI,iBAAiB,EAAE,MAAM,mCAAmC,CAAC;AAExG,+DAA+D;AAC/D,UAAU;AACV,+DAA+D;AAE/D,MAAM,OAAO,aAAc,SAAQ,KAAK;IACtC,MAAM,CAAS;IACf,IAAI,CAAS;IACb,YAAY,IAAY,EAAE,OAAe,EAAE,MAAM,GAAG,GAAG;QACrD,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACvB,CAAC;CACF;AAED,+DAA+D;AAC/D,QAAQ;AACR,+DAA+D;AAE/D,MAAM,CAAC,MAAM,UAAU,GAAG;IACxB,cAAc;IACd,OAAO,EAAE,CAAC;IACV,mBAAmB;IACnB,WAAW,EAAE,CAAC;IACd,cAAc;IACd,YAAY,EAAE,CAAC;IACf,mBAAmB;IACnB,WAAW,EAAE,CAAC;IACd,cAAc;IACd,YAAY,EAAE,CAAC;CACP,CAAC;AAEX,+DAA+D;AAC/D,mBAAmB;AACnB,+DAA+D;AAE/D,MAAM,0BAA0B,GAAsC;IACpE,MAAM,EAAE,CAAC,UAAU,CAAC,WAAW,EAAE,UAAU,CAAC,YAAY,CAAC;IACzD,UAAU,EAAE,CAAC,UAAU,CAAC,WAAW,EAAE,UAAU,CAAC,YAAY,CAAC;IAC7D,OAAO,EAAE;QACP,UAAU,CAAC,OAAO;QAClB,UAAU,CAAC,WAAW;QACtB,UAAU,CAAC,YAAY;QACvB,UAAU,CAAC,WAAW;QACtB,UAAU,CAAC,YAAY;KACxB;CACF,CAAC;AAEF,uBAAuB;AACvB,MAAM,UAAU,wBAAwB,CAAC,gBAAwB,EAAE,aAAqB;IACtF,MAAM,OAAO,GAAG,0BAA0B,CAAC,gBAAgB,CAAC,CAAC;IAC7D,OAAO,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;AAC3D,CAAC;AAaD,+DAA+D;AAC/D,OAAO;AACP,+DAA+D;AAE/D;;;GAGG;AACH,MAAM,UAAU,eAAe,CAC7B,GAAgB,EAChB,SAAoC,EACpC,UAA4B;IAE5B,aAAa;IACb,IAAI,GAAG,CAAC,gBAAgB,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IAEpD,+CAA+C;IAC/C,IAAI,CAAC,SAAS;QAAE,OAAO,GAAG,CAAC,UAAU,IAAI,UAAU,CAAC,WAAW,CAAC;IAEhE,oBAAoB;IACpB,IAAI,UAAU,CAAC,gBAAgB,KAAK,QAAQ,EAAE,CAAC;QAC7C,8BAA8B;QAC9B,OAAO,GAAG,CAAC,UAAU,IAAI,UAAU,CAAC,WAAW,CAAC;IAClD,CAAC;IAED,IAAI,UAAU,CAAC,gBAAgB,KAAK,YAAY,EAAE,CAAC;QACjD,sBAAsB;QACtB,IAAI,GAAG,CAAC,UAAU,IAAI,UAAU,CAAC,WAAW,EAAE,CAAC;YAC7C,IAAI,UAAU,CAAC,cAAc;gBAAE,OAAO,IAAI,CAAC;QAC7C,CAAC;QACD,cAAc;QACd,OAAO,CAAC,CAAC,kBAAkB,CAAC,KAAK,EAAE,EAAE,GAAG,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC;IACnE,CAAC;IAED,oBAAoB;IACpB,IAAI,GAAG,CAAC,UAAU,KAAK,UAAU,CAAC,OAAO,EAAE,CAAC;QAC1C,+BAA+B;QAC/B,OAAO,CAAC,CAAC,kBAAkB,CAAC,KAAK,EAAE,EAAE,GAAG,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC;IACnE,CAAC;IACD,IAAI,GAAG,CAAC,UAAU,IAAI,UAAU,CAAC,YAAY,EAAE,CAAC;QAC9C,gDAAgD;QAChD,yBAAyB;QACzB,OAAO,CAAC,CAAC,kBAAkB,CAAC,KAAK,EAAE,EAAE,GAAG,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC;IACnE,CAAC;IACD,mCAAmC;IACnC,OAAO,IAAI,CAAC;AACd,CAAC;AAED,+DAA+D;AAC/D,OAAO;AACP,+DAA+D;AAE/D;;GAEG;AACH,MAAM,UAAU,eAAe,CAC7B,GAAgB,EAChB,SAAoC,EACpC,UAA4B;IAE5B,aAAa;IACb,IAAI,GAAG,CAAC,gBAAgB,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IAEpD,+BAA+B;IAC/B,IAAI,CAAC,SAAS;QAAE,OAAO,GAAG,CAAC,UAAU,KAAK,UAAU,CAAC,YAAY,CAAC;IAElE,oBAAoB;IACpB,IAAI,UAAU,CAAC,gBAAgB,KAAK,QAAQ,EAAE,CAAC;QAC7C,4CAA4C;QAC5C,OAAO,GAAG,CAAC,UAAU,KAAK,UAAU,CAAC,YAAY,CAAC;IACpD,CAAC;IAED,IAAI,UAAU,CAAC,gBAAgB,KAAK,YAAY,EAAE,CAAC;QACjD,gDAAgD;QAChD,IAAI,GAAG,CAAC,UAAU,KAAK,UAAU,CAAC,YAAY,IAAI,UAAU,CAAC,cAAc;YAAE,OAAO,IAAI,CAAC;QACzF,cAAc;QACd,MAAM,MAAM,GAAG,kBAAkB,CAAC,KAAK,EAAE,EAAE,GAAG,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC;QACvE,OAAO,MAAM,EAAE,UAAU,KAAK,MAAM,CAAC;IACvC,CAAC;IAED,oBAAoB;IACpB,IAAI,GAAG,CAAC,UAAU,KAAK,UAAU,CAAC,OAAO,EAAE,CAAC;QAC1C,SAAS;QACT,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,GAAG,CAAC,UAAU,KAAK,UAAU,CAAC,WAAW,EAAE,CAAC;QAC9C,iCAAiC;QACjC,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,GAAG,CAAC,UAAU,KAAK,UAAU,CAAC,YAAY,EAAE,CAAC;QAC/C,0CAA0C;QAC1C,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,GAAG,CAAC,UAAU,KAAK,UAAU,CAAC,WAAW,EAAE,CAAC;QAC9C,qBAAqB;QACrB,OAAO,KAAK,CAAC;IACf,CAAC;IACD,qBAAqB;IACrB,OAAO,IAAI,CAAC;AACd,CAAC;AAED,+DAA+D;AAC/D,4BAA4B;AAC5B,+DAA+D;AAE/D;;;GAGG;AACH,MAAM,UAAU,oBAAoB,CAClC,UAAkB,EAClB,SAAwB,EACxB,MAAkC;IAElC,MAAM,EAAE,GAAG,KAAK,EAAE,CAAC;IACnB,MAAM,GAAG,GAAG,gBAAgB,CAAC,EAAE,EAAE,UAAU,CAAC,CAAC;IAC7C,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,MAAM,IAAI,aAAa,CAAC,eAAe,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC;IACzD,CAAC;IAED,YAAY;IACZ,IAAI,MAAM,KAAK,QAAQ,EAAE,CAAC;QACxB,IAAI,GAAG,CAAC,gBAAgB,KAAK,SAAS,EAAE,CAAC;YACvC,MAAM,IAAI,aAAa,CAAC,WAAW,EAAE,YAAY,EAAE,GAAG,CAAC,CAAC;QAC1D,CAAC;QACD,OAAO;IACT,CAAC;IAED,aAAa;IACb,MAAM,MAAM,GAAG,cAAc,CAAC,EAAE,EAAE,GAAG,CAAC,SAAS,CAAC,CAAC;IACjD,MAAM,gBAAgB,GAAG,MAAM,EAAE,UAAU,IAAI,QAAQ,CAAC;IACxD,MAAM,QAAQ,GAAG,CAAC,CAAC,CAAC,SAAS,IAAI,MAAM,IAAI,iBAAiB,CAAC,EAAE,EAAE,MAAM,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC,CAAC;IAC/F,MAAM,UAAU,GAAqB,EAAE,gBAAgB,EAAE,cAAc,EAAE,QAAQ,EAAE,CAAC;IAEpF,IAAI,MAAM,KAAK,MAAM,IAAI,CAAC,eAAe,CAAC,GAAG,EAAE,SAAS,EAAE,UAAU,CAAC,EAAE,CAAC;QACtE,MAAM,IAAI,aAAa,CAAC,WAAW,EAAE,SAAS,EAAE,GAAG,CAAC,CAAC;IACvD,CAAC;IACD,IAAI,MAAM,KAAK,MAAM,IAAI,CAAC,eAAe,CAAC,GAAG,EAAE,SAAS,EAAE,UAAU,CAAC,EAAE,CAAC;QACtE,MAAM,IAAI,aAAa,CAAC,WAAW,EAAE,SAAS,EAAE,GAAG,CAAC,CAAC;IACvD,CAAC;AACH,CAAC"}

package/dist/server/access/access-control.test.js

@@ -0,0 +1,197 @@
+/**
+ * 权限模块单元测试（access-control.ts）
+ *
+ * 覆盖：
+ * - validateDomainPermission 所有域类型 × 权限值组合
+ * - assertDocumentAccess 全量鉴权（doc not found / delete / read / edit）
+ */
+import { describe, it, expect, beforeAll, afterEach, vi } from "vitest";
+import Database from "better-sqlite3";
+import { applySchema } from "../db/schema.js";
+/* ── Mock getDb ── */
+const testDbRef = vi.hoisted(() => ({ db: null }));
+vi.mock("../db/connection.js", () => ({
+    getDb: () => testDbRef.db,
+}));
+import { Permission, validateDomainPermission, assertDocumentAccess, DocumentError, } from "./access-control.js";
+/* ── 生命周期 ── */
+beforeAll(() => {
+    const db = new Database(":memory:");
+    applySchema(db);
+    testDbRef.db = db;
+});
+afterEach(() => {
+    const db = testDbRef.db;
+    db.exec("DELETE FROM domain_members");
+    db.exec("DELETE FROM documents");
+    db.exec("DELETE FROM domains");
+    db.exec("DELETE FROM document_invites");
+});
+/* ── 辅助函数 ── */
+const OWNER = "owner-1";
+const OTHER = "other-1";
+/** 在数据库中插入一个域 + 文档，返回 domain_id */
+function seedDocInDomain(options) {
+    const db = testDbRef.db;
+    const domainId = options.domainId ?? "test-domain";
+    const docId = options.docId ?? "test-doc";
+    const ownerId = options.ownerId ?? OWNER;
+    const now = new Date().toISOString();
+    // 创建域
+    db.prepare(`INSERT INTO domains (domain_id, domain_name, creator_visitor_id, created_at, updated_at, permission)
+     VALUES (?, ?, ?, ?, ?, ?)`).run(domainId, "测试域", ownerId, now, now, options.domainPermission);
+    // 创建文档
+    db.prepare(`INSERT INTO documents
+     (document_id, domain_id, relative_path, display_name, owner_visitor_id,
+      created_by, updated_by, content_hash, created_at, updated_at, permission)
+     VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)`).run(docId, domainId, "test.md", "测试文档", ownerId, ownerId, ownerId, "abc", now, now, options.docPermission);
+    // 添加域成员
+    if (options.memberIds) {
+        for (const mid of options.memberIds) {
+            db.prepare(`INSERT OR IGNORE INTO domain_members (domain_id, visitor_id, joined_at) VALUES (?, ?, ?)`).run(domainId, mid, now);
+        }
+    }
+    return domainId;
+}
+// ============================================================
+//  validateDomainPermission
+// ============================================================
+describe("validateDomainPermission", () => {
+    describe("public 域", () => {
+        it("允许 public_read(3) 和 public_write(4)", () => {
+            expect(validateDomainPermission("public", Permission.PUBLIC_READ)).toBe(true);
+            expect(validateDomainPermission("public", Permission.PUBLIC_WRITE)).toBe(true);
+        });
+        it("禁止 private(0) / domain_read(1) / domain_write(2)", () => {
+            expect(validateDomainPermission("public", Permission.PRIVATE)).toBe(false);
+            expect(validateDomainPermission("public", Permission.DOMAIN_READ)).toBe(false);
+            expect(validateDomainPermission("public", Permission.DOMAIN_WRITE)).toBe(false);
+        });
+    });
+    describe("restricted 域", () => {
+        it("允许 domain_read(1) 和 domain_write(2)", () => {
+            expect(validateDomainPermission("restricted", Permission.DOMAIN_READ)).toBe(true);
+            expect(validateDomainPermission("restricted", Permission.DOMAIN_WRITE)).toBe(true);
+        });
+        it("禁止 private(0) / public_read(3) / public_write(4)", () => {
+            expect(validateDomainPermission("restricted", Permission.PRIVATE)).toBe(false);
+            expect(validateDomainPermission("restricted", Permission.PUBLIC_READ)).toBe(false);
+            expect(validateDomainPermission("restricted", Permission.PUBLIC_WRITE)).toBe(false);
+        });
+    });
+    describe("private 域", () => {
+        it("允许全部 0-4 档位", () => {
+            expect(validateDomainPermission("private", Permission.PRIVATE)).toBe(true);
+            expect(validateDomainPermission("private", Permission.DOMAIN_READ)).toBe(true);
+            expect(validateDomainPermission("private", Permission.DOMAIN_WRITE)).toBe(true);
+            expect(validateDomainPermission("private", Permission.PUBLIC_READ)).toBe(true);
+            expect(validateDomainPermission("private", Permission.PUBLIC_WRITE)).toBe(true);
+        });
+    });
+    it("未知域类型返回 false", () => {
+        expect(validateDomainPermission("unknown", Permission.PRIVATE)).toBe(false);
+        expect(validateDomainPermission("", Permission.PUBLIC_READ)).toBe(false);
+    });
+});
+// ============================================================
+//  assertDocumentAccess
+// ============================================================
+describe("assertDocumentAccess", () => {
+    // ── 文档不存在 ──
+    it("文档不存在时抛 404", () => {
+        expect(() => assertDocumentAccess("no-such-doc", OWNER, "read")).toThrow(DocumentError);
+        try {
+            assertDocumentAccess("no-such-doc", OWNER, "read");
+        }
+        catch (e) {
+            expect(e.status).toBe(404);
+        }
+    });
+    // ── 删除 ──
+    it("删除：创建者可删", () => {
+        seedDocInDomain({ domainPermission: "public", docPermission: Permission.PUBLIC_READ });
+        expect(() => assertDocumentAccess("test-doc", OWNER, "delete")).not.toThrow();
+    });
+    it("删除：非创建者不可删（403）", () => {
+        seedDocInDomain({ domainPermission: "public", docPermission: Permission.PUBLIC_READ });
+        expect(() => assertDocumentAccess("test-doc", OTHER, "delete")).toThrow(DocumentError);
+        try {
+            assertDocumentAccess("test-doc", OTHER, "delete");
+        }
+        catch (e) {
+            expect(e.status).toBe(403);
+        }
+    });
+    // ── public 域读 ──
+    it("public 域：非创建者可读 public_read(3) 文档", () => {
+        seedDocInDomain({ domainPermission: "public", docPermission: Permission.PUBLIC_READ });
+        expect(() => assertDocumentAccess("test-doc", OTHER, "read")).not.toThrow();
+    });
+    it("public 域：未登录可读 public_write(4) 文档", () => {
+        seedDocInDomain({ domainPermission: "public", docPermission: Permission.PUBLIC_WRITE });
+        expect(() => assertDocumentAccess("test-doc", null, "read")).not.toThrow();
+    });
+    // ── public 域写 ──
+    it("public 域：非创建者可写 public_write(4) 文档", () => {
+        seedDocInDomain({ domainPermission: "public", docPermission: Permission.PUBLIC_WRITE });
+        expect(() => assertDocumentAccess("test-doc", OTHER, "edit")).not.toThrow();
+    });
+    it("public 域：非创建者不可写 public_read(3) 文档（403）", () => {
+        seedDocInDomain({ domainPermission: "public", docPermission: Permission.PUBLIC_READ });
+        expect(() => assertDocumentAccess("test-doc", OTHER, "edit")).toThrow(DocumentError);
+        try {
+            assertDocumentAccess("test-doc", OTHER, "edit");
+        }
+        catch (e) {
+            expect(e.status).toBe(403);
+        }
+    });
+    // ── restricted 域读 ──
+    it("restricted 域：成员可读 domain_write(2) 文档", () => {
+        seedDocInDomain({ domainPermission: "restricted", docPermission: Permission.DOMAIN_WRITE, memberIds: [OTHER] });
+        expect(() => assertDocumentAccess("test-doc", OTHER, "read")).not.toThrow();
+    });
+    it("restricted 域：非成员不可读（403）", () => {
+        seedDocInDomain({ domainPermission: "restricted", docPermission: Permission.DOMAIN_READ });
+        expect(() => assertDocumentAccess("test-doc", OTHER, "read")).toThrow(DocumentError);
+        try {
+            assertDocumentAccess("test-doc", OTHER, "read");
+        }
+        catch (e) {
+            expect(e.status).toBe(403);
+        }
+    });
+    // ── restricted 域写 ──
+    it("restricted 域：成员可写 domain_write(2) 文档", () => {
+        seedDocInDomain({ domainPermission: "restricted", docPermission: Permission.DOMAIN_WRITE, memberIds: [OTHER] });
+        expect(() => assertDocumentAccess("test-doc", OTHER, "edit")).not.toThrow();
+    });
+    it("restricted 域：成员不可写 domain_read(1) 文档", () => {
+        seedDocInDomain({ domainPermission: "restricted", docPermission: Permission.DOMAIN_READ, memberIds: [OTHER] });
+        expect(() => assertDocumentAccess("test-doc", OTHER, "edit")).toThrow(DocumentError);
+    });
+    // ── private 域 ──
+    it("private 域：非创建者不可读 private(0) 文档（403）", () => {
+        seedDocInDomain({ domainPermission: "private", docPermission: Permission.PRIVATE });
+        expect(() => assertDocumentAccess("test-doc", OTHER, "read")).toThrow(DocumentError);
+    });
+    it("private 域：非创建者可读 public_write(4) 文档", () => {
+        seedDocInDomain({ domainPermission: "private", docPermission: Permission.PUBLIC_WRITE });
+        expect(() => assertDocumentAccess("test-doc", OTHER, "read")).not.toThrow();
+    });
+    it("private 域：非创建者不可写 public_read(3) 文档（仅 owner 可写）", () => {
+        seedDocInDomain({ domainPermission: "private", docPermission: Permission.PUBLIC_READ });
+        expect(() => assertDocumentAccess("test-doc", OTHER, "edit")).toThrow(DocumentError);
+    });
+    it("private 域：非创建者可写 public_write(4) 文档", () => {
+        seedDocInDomain({ domainPermission: "private", docPermission: Permission.PUBLIC_WRITE });
+        expect(() => assertDocumentAccess("test-doc", OTHER, "edit")).not.toThrow();
+    });
+    // ── 创建者不受限 ──
+    it("创建者在任何域类型下都可读写任意权限文档", () => {
+        seedDocInDomain({ domainPermission: "restricted", docPermission: Permission.DOMAIN_READ });
+        expect(() => assertDocumentAccess("test-doc", OWNER, "read")).not.toThrow();
+        expect(() => assertDocumentAccess("test-doc", OWNER, "edit")).not.toThrow();
+    });
+});
+//# sourceMappingURL=access-control.test.js.map

package/dist/server/access/access-control.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"access-control.test.js","sourceRoot":"","sources":["../../../src/server/access/access-control.test.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AACxE,OAAO,QAAQ,MAAM,gBAAgB,CAAC;AACtC,OAAO,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAE9C,sBAAsB;AAEtB,MAAM,SAAS,GAAG,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,IAAgC,EAAE,CAAC,CAAC,CAAC;AAE/E,EAAE,CAAC,IAAI,CAAC,qBAAqB,EAAE,GAAG,EAAE,CAAC,CAAC;IACpC,KAAK,EAAE,GAAG,EAAE,CAAC,SAAS,CAAC,EAAE;CAC1B,CAAC,CAAC,CAAC;AAEJ,OAAO,EACL,UAAU,EACV,wBAAwB,EACxB,oBAAoB,EACpB,aAAa,GACd,MAAM,qBAAqB,CAAC;AAI7B,gBAAgB;AAEhB,SAAS,CAAC,GAAG,EAAE;IACb,MAAM,EAAE,GAAG,IAAI,QAAQ,CAAC,UAAU,CAAC,CAAC;IACpC,WAAW,CAAC,EAAE,CAAC,CAAC;IAChB,SAAS,CAAC,EAAE,GAAG,EAAE,CAAC;AACpB,CAAC,CAAC,CAAC;AAEH,SAAS,CAAC,GAAG,EAAE;IACb,MAAM,EAAE,GAAG,SAAS,CAAC,EAAG,CAAC;IACzB,EAAE,CAAC,IAAI,CAAC,4BAA4B,CAAC,CAAC;IACtC,EAAE,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC;IACjC,EAAE,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC;IAC/B,EAAE,CAAC,IAAI,CAAC,8BAA8B,CAAC,CAAC;AAC1C,CAAC,CAAC,CAAC;AAEH,gBAAgB;AAEhB,MAAM,KAAK,GAAG,SAAS,CAAC;AACxB,MAAM,KAAK,GAAG,SAAS,CAAC;AAExB,mCAAmC;AACnC,SAAS,eAAe,CAAC,OAOxB;IACC,MAAM,EAAE,GAAG,SAAS,CAAC,EAAG,CAAC;IACzB,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,aAAa,CAAC;IACnD,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,UAAU,CAAC;IAC1C,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,KAAK,CAAC;IACzC,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAErC,MAAM;IACN,EAAE,CAAC,OAAO,CACR;+BAC2B,CAC5B,CAAC,GAAG,CAAC,QAAQ,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,GAAG,EAAE,OAAO,CAAC,gBAAgB,CAAC,CAAC;IAEpE,OAAO;IACP,EAAE,CAAC,OAAO,CACR;;;8CAG0C,CAC3C,CAAC,GAAG,CAAC,KAAK,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,OAAO,CAAC,aAAa,CAAC,CAAC;IAE7G,QAAQ;IACR,IAAI,OAAO,CAAC,SAAS,EAAE,CAAC;QACtB,KAAK,MAAM,GAAG,IAAI,OAAO,CAAC,SAAS,EAAE,CAAC;YACpC,EAAE,CAAC,OAAO,CACR,0FAA0F,CAC3F,CAAC,GAAG,CAAC,QAAQ,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;QAC5B,CAAC;IACH,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,+DAA+D;AAC/D,4BAA4B;AAC5B,+DAA+D;AAE/D,QAAQ,CAAC,0BAA0B,EAAE,GAAG,EAAE;IACxC,QAAQ,CAAC,UAAU,EAAE,GAAG,EAAE;QACxB,EAAE,CAAC,qCAAqC,EAAE,GAAG,EAAE;YAC7C,MAAM,CAAC,wBAAwB,CAAC,QAAQ,EAAE,UAAU,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC9E,MAAM,CAAC,wBAAwB,CAAC,QAAQ,EAAE,UAAU,CAAC,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACjF,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,kDAAkD,EAAE,GAAG,EAAE;YAC1D,MAAM,CAAC,wBAAwB,CAAC,QAAQ,EAAE,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAC3E,MAAM,CAAC,wBAAwB,CAAC,QAAQ,EAAE,UAAU,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAC/E,MAAM,CAAC,wBAAwB,CAAC,QAAQ,EAAE,UAAU,CAAC,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAClF,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,cAAc,EAAE,GAAG,EAAE;QAC5B,EAAE,CAAC,qCAAqC,EAAE,GAAG,EAAE;YAC7C,MAAM,CAAC,wBAAwB,CAAC,YAAY,EAAE,UAAU,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAClF,MAAM,CAAC,wBAAwB,CAAC,YAAY,EAAE,UAAU,CAAC,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACrF,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,kDAAkD,EAAE,GAAG,EAAE;YAC1D,MAAM,CAAC,wBAAwB,CAAC,YAAY,EAAE,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAC/E,MAAM,CAAC,wBAAwB,CAAC,YAAY,EAAE,UAAU,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACnF,MAAM,CAAC,wBAAwB,CAAC,YAAY,EAAE,UAAU,CAAC,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACtF,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,WAAW,EAAE,GAAG,EAAE;QACzB,EAAE,CAAC,aAAa,EAAE,GAAG,EAAE;YACrB,MAAM,CAAC,wBAAwB,CAAC,SAAS,EAAE,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC3E,MAAM,CAAC,wBAAwB,CAAC,SAAS,EAAE,UAAU,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC/E,MAAM,CAAC,wBAAwB,CAAC,SAAS,EAAE,UAAU,CAAC,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAChF,MAAM,CAAC,wBAAwB,CAAC,SAAS,EAAE,UAAU,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC/E,MAAM,CAAC,wBAAwB,CAAC,SAAS,EAAE,UAAU,CAAC,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAClF,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,eAAe,EAAE,GAAG,EAAE;QACvB,MAAM,CAAC,wBAAwB,CAAC,SAAS,EAAE,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC5E,MAAM,CAAC,wBAAwB,CAAC,EAAE,EAAE,UAAU,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC3E,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,+DAA+D;AAC/D,wBAAwB;AACxB,+DAA+D;AAE/D,QAAQ,CAAC,sBAAsB,EAAE,GAAG,EAAE;IACpC,cAAc;IAEd,EAAE,CAAC,aAAa,EAAE,GAAG,EAAE;QACrB,MAAM,CAAC,GAAG,EAAE,CAAC,oBAAoB,CAAC,aAAa,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;QACxF,IAAI,CAAC;YACH,oBAAoB,CAAC,aAAa,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;QACrD,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,MAAM,CAAE,CAAmB,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAChD,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,WAAW;IAEX,EAAE,CAAC,UAAU,EAAE,GAAG,EAAE;QAClB,eAAe,CAAC,EAAE,gBAAgB,EAAE,QAAQ,EAAE,aAAa,EAAE,UAAU,CAAC,WAAW,EAAE,CAAC,CAAC;QACvF,MAAM,CAAC,GAAG,EAAE,CAAC,oBAAoB,CAAC,UAAU,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC;IAChF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iBAAiB,EAAE,GAAG,EAAE;QACzB,eAAe,CAAC,EAAE,gBAAgB,EAAE,QAAQ,EAAE,aAAa,EAAE,UAAU,CAAC,WAAW,EAAE,CAAC,CAAC;QACvF,MAAM,CAAC,GAAG,EAAE,CAAC,oBAAoB,CAAC,UAAU,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;QACvF,IAAI,CAAC;YACH,oBAAoB,CAAC,UAAU,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC;QACpD,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,MAAM,CAAE,CAAmB,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAChD,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,kBAAkB;IAElB,EAAE,CAAC,mCAAmC,EAAE,GAAG,EAAE;QAC3C,eAAe,CAAC,EAAE,gBAAgB,EAAE,QAAQ,EAAE,aAAa,EAAE,UAAU,CAAC,WAAW,EAAE,CAAC,CAAC;QACvF,MAAM,CAAC,GAAG,EAAE,CAAC,oBAAoB,CAAC,UAAU,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC;IAC9E,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mCAAmC,EAAE,GAAG,EAAE;QAC3C,eAAe,CAAC,EAAE,gBAAgB,EAAE,QAAQ,EAAE,aAAa,EAAE,UAAU,CAAC,YAAY,EAAE,CAAC,CAAC;QACxF,MAAM,CAAC,GAAG,EAAE,CAAC,oBAAoB,CAAC,UAAU,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC;IAC7E,CAAC,CAAC,CAAC;IAEH,kBAAkB;IAElB,EAAE,CAAC,oCAAoC,EAAE,GAAG,EAAE;QAC5C,eAAe,CAAC,EAAE,gBAAgB,EAAE,QAAQ,EAAE,aAAa,EAAE,UAAU,CAAC,YAAY,EAAE,CAAC,CAAC;QACxF,MAAM,CAAC,GAAG,EAAE,CAAC,oBAAoB,CAAC,UAAU,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC;IAC9E,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yCAAyC,EAAE,GAAG,EAAE;QACjD,eAAe,CAAC,EAAE,gBAAgB,EAAE,QAAQ,EAAE,aAAa,EAAE,UAAU,CAAC,WAAW,EAAE,CAAC,CAAC;QACvF,MAAM,CAAC,GAAG,EAAE,CAAC,oBAAoB,CAAC,UAAU,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;QACrF,IAAI,CAAC;YACH,oBAAoB,CAAC,UAAU,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;QAClD,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,MAAM,CAAE,CAAmB,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAChD,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,sBAAsB;IAEtB,EAAE,CAAC,sCAAsC,EAAE,GAAG,EAAE;QAC9C,eAAe,CAAC,EAAE,gBAAgB,EAAE,YAAY,EAAE,aAAa,EAAE,UAAU,CAAC,YAAY,EAAE,SAAS,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAChH,MAAM,CAAC,GAAG,EAAE,CAAC,oBAAoB,CAAC,UAAU,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC;IAC9E,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0BAA0B,EAAE,GAAG,EAAE;QAClC,eAAe,CAAC,EAAE,gBAAgB,EAAE,YAAY,EAAE,aAAa,EAAE,UAAU,CAAC,WAAW,EAAE,CAAC,CAAC;QAC3F,MAAM,CAAC,GAAG,EAAE,CAAC,oBAAoB,CAAC,UAAU,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;QACrF,IAAI,CAAC;YACH,oBAAoB,CAAC,UAAU,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;QAClD,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,MAAM,CAAE,CAAmB,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAChD,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,sBAAsB;IAEtB,EAAE,CAAC,sCAAsC,EAAE,GAAG,EAAE;QAC9C,eAAe,CAAC,EAAE,gBAAgB,EAAE,YAAY,EAAE,aAAa,EAAE,UAAU,CAAC,YAAY,EAAE,SAAS,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAChH,MAAM,CAAC,GAAG,EAAE,CAAC,oBAAoB,CAAC,UAAU,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC;IAC9E,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sCAAsC,EAAE,GAAG,EAAE;QAC9C,eAAe,CAAC,EAAE,gBAAgB,EAAE,YAAY,EAAE,aAAa,EAAE,UAAU,CAAC,WAAW,EAAE,SAAS,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAC/G,MAAM,CAAC,GAAG,EAAE,CAAC,oBAAoB,CAAC,UAAU,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;IACvF,CAAC,CAAC,CAAC;IAEH,kBAAkB;IAElB,EAAE,CAAC,sCAAsC,EAAE,GAAG,EAAE;QAC9C,eAAe,CAAC,EAAE,gBAAgB,EAAE,SAAS,EAAE,aAAa,EAAE,UAAU,CAAC,OAAO,EAAE,CAAC,CAAC;QACpF,MAAM,CAAC,GAAG,EAAE,CAAC,oBAAoB,CAAC,UAAU,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;IACvF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qCAAqC,EAAE,GAAG,EAAE;QAC7C,eAAe,CAAC,EAAE,gBAAgB,EAAE,SAAS,EAAE,aAAa,EAAE,UAAU,CAAC,YAAY,EAAE,CAAC,CAAC;QACzF,MAAM,CAAC,GAAG,EAAE,CAAC,oBAAoB,CAAC,UAAU,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC;IAC9E,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iDAAiD,EAAE,GAAG,EAAE;QACzD,eAAe,CAAC,EAAE,gBAAgB,EAAE,SAAS,EAAE,aAAa,EAAE,UAAU,CAAC,WAAW,EAAE,CAAC,CAAC;QACxF,MAAM,CAAC,GAAG,EAAE,CAAC,oBAAoB,CAAC,UAAU,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;IACvF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qCAAqC,EAAE,GAAG,EAAE;QAC7C,eAAe,CAAC,EAAE,gBAAgB,EAAE,SAAS,EAAE,aAAa,EAAE,UAAU,CAAC,YAAY,EAAE,CAAC,CAAC;QACzF,MAAM,CAAC,GAAG,EAAE,CAAC,oBAAoB,CAAC,UAAU,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC;IAC9E,CAAC,CAAC,CAAC;IAEH,eAAe;IAEf,EAAE,CAAC,sBAAsB,EAAE,GAAG,EAAE;QAC9B,eAAe,CAAC,EAAE,gBAAgB,EAAE,YAAY,EAAE,aAAa,EAAE,UAAU,CAAC,WAAW,EAAE,CAAC,CAAC;QAC3F,MAAM,CAAC,GAAG,EAAE,CAAC,oBAAoB,CAAC,UAAU,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC;QAC5E,MAAM,CAAC,GAAG,EAAE,CAAC,oBAAoB,CAAC,UAAU,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC;IAC9E,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/server/access/domain-access.js

@@ -0,0 +1,53 @@
+/**
+ * 域入口控制
+ *
+ * 判断访客能否看到某个域、进入该域的目录树和文档列表。
+ * 这是第一道门禁——进域后单篇文档的可见性还需走 access-control.ts 的文档权限检查。
+ *
+ * 返回值：
+ *   "none"              → 不可见
+ *   "full"              → 可进域列表/树
+ *   "viaDocumentInvites" → 因域内有文档邀请过我而可见（private/restricted 域非成员通道）
+ */
+import { isDomainMember } from "../db/repositories/domain.repo.js";
+import { hasDocumentInviteInDomain } from "../db/repositories/document.repo.js";
+/** 解析访客对该域的入口级别 */
+export function resolveDomainAccess(db, domain, domainId, visitorId, options) {
+    if (!domain)
+        return { kind: "none" };
+    // public 域：任何人可进
+    if (domain.permission === "public")
+        return { kind: "full" };
+    if (!visitorId)
+        return { kind: "none" };
+    // 查一下该访客在域内是否有文档邀请
+    const hasDocInviteInDomain = options?.documentInviteDomainIds
+        ? options.documentInviteDomainIds.has(domainId)
+        : hasDocumentInviteInDomain(db, domainId, visitorId);
+    // private 域：仅域主（domain_id === visitorId）、创建者、或有文档邀请者可见
+    if (domain.permission === "private") {
+        if (domain.domain_id === visitorId)
+            return { kind: "full" };
+        if (domain.creator_visitor_id === visitorId)
+            return { kind: "full" };
+        if (hasDocInviteInDomain)
+            return { kind: "viaDocumentInvites" };
+        return { kind: "none" };
+    }
+    // restricted 域：仅域成员、创建者、或有文档邀请者可见
+    if (domain.permission === "restricted") {
+        if (isDomainMember(db, domainId, visitorId))
+            return { kind: "full" };
+        if (domain.creator_visitor_id === visitorId)
+            return { kind: "full" };
+        if (hasDocInviteInDomain)
+            return { kind: "viaDocumentInvites" };
+        return { kind: "none" };
+    }
+    return { kind: "none" };
+}
+/** 能否拉目录树 / 域下列表：kind 不是 "none" 即可 */
+export function canEnterDomainTree(access) {
+    return access.kind !== "none";
+}
+//# sourceMappingURL=domain-access.js.map

package/dist/server/access/domain-access.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"domain-access.js","sourceRoot":"","sources":["../../../src/server/access/domain-access.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAGH,OAAO,EAAE,cAAc,EAAkB,MAAM,mCAAmC,CAAC;AACnF,OAAO,EAAE,yBAAyB,EAAE,MAAM,qCAAqC,CAAC;AAahF,mBAAmB;AACnB,MAAM,UAAU,mBAAmB,CACjC,EAAqB,EACrB,MAA6B,EAC7B,QAAgB,EAChB,SAAoC,EACpC,OAAoC;IAEpC,IAAI,CAAC,MAAM;QAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;IAErC,iBAAiB;IACjB,IAAI,MAAM,CAAC,UAAU,KAAK,QAAQ;QAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;IAC5D,IAAI,CAAC,SAAS;QAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;IAExC,mBAAmB;IACnB,MAAM,oBAAoB,GAAG,OAAO,EAAE,uBAAuB;QAC3D,CAAC,CAAC,OAAO,CAAC,uBAAuB,CAAC,GAAG,CAAC,QAAQ,CAAC;QAC/C,CAAC,CAAC,yBAAyB,CAAC,EAAE,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC;IAEvD,uDAAuD;IACvD,IAAI,MAAM,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;QACpC,IAAI,MAAM,CAAC,SAAS,KAAK,SAAS;YAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;QAC5D,IAAI,MAAM,CAAC,kBAAkB,KAAK,SAAS;YAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;QACrE,IAAI,oBAAoB;YAAE,OAAO,EAAE,IAAI,EAAE,oBAAoB,EAAE,CAAC;QAChE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;IAC1B,CAAC;IAED,kCAAkC;IAClC,IAAI,MAAM,CAAC,UAAU,KAAK,YAAY,EAAE,CAAC;QACvC,IAAI,cAAc,CAAC,EAAE,EAAE,QAAQ,EAAE,SAAS,CAAC;YAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;QACrE,IAAI,MAAM,CAAC,kBAAkB,KAAK,SAAS;YAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;QACrE,IAAI,oBAAoB;YAAE,OAAO,EAAE,IAAI,EAAE,oBAAoB,EAAE,CAAC;QAChE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;IAC1B,CAAC;IAED,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;AAC1B,CAAC;AAED,sCAAsC;AACtC,MAAM,UAAU,kBAAkB,CAAC,MAAoB;IACrD,OAAO,MAAM,CAAC,IAAI,KAAK,MAAM,CAAC;AAChC,CAAC"}