@fgbg/mdocs 0.6.0

package/dist/server/documents/tree.service.js

@@ -0,0 +1,146 @@
+import { getDb } from "../db/connection.js";
+import { listDocumentsByDomain } from "../db/repositories/document.repo.js";
+import { findDomainById, isDomainMember } from "../db/repositories/domain.repo.js";
+import { resolveDomainAccess, canEnterDomainTree } from "../access/domain-access.js";
+import { canReadDocument } from "../access/access-control.js";
+import { getConfig } from "../config/index.js";
+import { FOLDER_DESC_FILENAME } from "../../shared/folderDesc.js";
+/**
+ * 构建指定域的文档目录树。
+ */
+export function buildDocumentTree(domainId, visitorId) {
+    const cfg = getConfig();
+    const effective = domainId?.trim() || cfg.defaultDomainId;
+    const db = getDb();
+    const domain = findDomainById(db, effective);
+    const access = resolveDomainAccess(db, domain, effective, visitorId);
+    if (!canEnterDomainTree(access))
+        return [];
+    const domainPermission = domain?.permission ?? "public";
+    const isMember = !!(visitorId && domain && isDomainMember(db, domain.domain_id, visitorId));
+    const domainInfo = { domainPermission, isDomainMember: isMember };
+    const rows = listDocumentsByDomain(db, effective);
+    const filtered = rows.filter((r) => canReadDocument(r, visitorId ?? null, domainInfo));
+    return buildTreeFromRows(filtered);
+}
+/**
+ * 根据过滤后的文档行数组，按 parent_id 构建文档树。
+ *
+ * 步骤：
+ * 1. 为所有 dir 创建文件夹节点，document_id → TreeFolderNode 映射
+ * 2. 处理 md：___desc___.md 挂载到父文件夹，普通文档挂在父文件夹下
+ * 3. 将文件夹挂在各自的父文件夹下
+ * 4. 对根节点和子节点递归排序
+ */
+function buildTreeFromRows(rows) {
+    const roots = [];
+    const folderById = new Map();
+    // 记录已添加到 roots 的文件夹 ID，避免重复
+    const addedToRoots = new Set();
+    // 第一步：创建所有文件夹节点
+    for (const row of rows) {
+        if (row.file_type === 'dir') {
+            const node = {
+                type: "folder",
+                name: deriveFolderName(row),
+                path: row.relative_path,
+                documentId: row.document_id,
+                children: [],
+            };
+            folderById.set(row.document_id, node);
+        }
+    }
+    // 第二步：将文件夹挂在父节点或根级
+    for (const row of rows) {
+        if (row.file_type !== 'dir')
+            continue;
+        const node = folderById.get(row.document_id);
+        if (row.parent_id) {
+            const parent = folderById.get(row.parent_id);
+            if (parent) {
+                parent.children.push(node);
+            }
+            else {
+                roots.push(node);
+                addedToRoots.add(row.document_id);
+            }
+        }
+        else {
+            roots.push(node);
+            addedToRoots.add(row.document_id);
+        }
+    }
+    // 第三步：处理 md 类型
+    for (const row of rows) {
+        if (row.file_type !== 'md')
+            continue;
+        const leafName = row.relative_path.split("/").pop();
+        if (leafName.toLowerCase() === FOLDER_DESC_FILENAME.toLowerCase()) {
+            // 描述文档：挂载到父文件夹
+            if (row.parent_id) {
+                const parent = folderById.get(row.parent_id);
+                if (parent) {
+                    parent.descDocumentId = row.document_id;
+                    const t = row.display_name.trim();
+                    if (t)
+                        parent.folderDisplayName = t;
+                }
+            }
+        }
+        else {
+            // 普通文档
+            const node = {
+                type: "document",
+                name: leafName,
+                path: row.relative_path,
+                documentId: row.document_id,
+                displayName: row.display_name,
+                ownerVisitorId: row.owner_visitor_id,
+                updatedAt: row.updated_at,
+            };
+            if (row.parent_id) {
+                const parent = folderById.get(row.parent_id);
+                if (parent) {
+                    parent.children.push(node);
+                }
+                else {
+                    roots.push(node);
+                }
+            }
+            else {
+                roots.push(node);
+            }
+        }
+    }
+    // 递归排序
+    for (const node of roots) {
+        if (node.type === "folder")
+            sortFolder(node);
+    }
+    return roots;
+}
+function deriveFolderName(row) {
+    const t = row.display_name.trim();
+    if (t)
+        return t;
+    return row.relative_path.split("/").pop() ?? row.relative_path;
+}
+function sortFolder(folder) {
+    folder.children.sort(compareNode);
+    for (const c of folder.children) {
+        if (c.type === "folder")
+            sortFolder(c);
+    }
+}
+function compareNode(a, b) {
+    if (a.type !== b.type)
+        return a.type === "folder" ? -1 : 1;
+    if (a.type === "folder" && b.type === "folder") {
+        return folderSortKey(a).localeCompare(folderSortKey(b));
+    }
+    return a.name.localeCompare(b.name);
+}
+function folderSortKey(f) {
+    return (f.folderDisplayName ?? f.name).toLowerCase();
+}
+//# sourceMappingURL=tree.service.js.map

package/dist/server/documents/tree.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tree.service.js","sourceRoot":"","sources":["../../../src/server/documents/tree.service.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,qBAAqB,CAAC;AAC5C,OAAO,EAAE,qBAAqB,EAAoB,MAAM,qCAAqC,CAAC;AAC9F,OAAO,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,mCAAmC,CAAC;AACnF,OAAO,EAAE,mBAAmB,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAC;AACrF,OAAO,EAAE,eAAe,EAAyB,MAAM,6BAA6B,CAAC;AACrF,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAC/C,OAAO,EAAE,oBAAoB,EAAE,MAAM,4BAA4B,CAAC;AAMlE;;GAEG;AACH,MAAM,UAAU,iBAAiB,CAAC,QAAiB,EAAE,SAAyB;IAC5E,MAAM,GAAG,GAAG,SAAS,EAAE,CAAC;IACxB,MAAM,SAAS,GAAG,QAAQ,EAAE,IAAI,EAAE,IAAI,GAAG,CAAC,eAAe,CAAC;IAC1D,MAAM,EAAE,GAAG,KAAK,EAAE,CAAC;IAEnB,MAAM,MAAM,GAAG,cAAc,CAAC,EAAE,EAAE,SAAS,CAAC,CAAC;IAC7C,MAAM,MAAM,GAAG,mBAAmB,CAAC,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC;IACrE,IAAI,CAAC,kBAAkB,CAAC,MAAM,CAAC;QAAE,OAAO,EAAE,CAAC;IAE3C,MAAM,gBAAgB,GAAG,MAAM,EAAE,UAAU,IAAI,QAAQ,CAAC;IACxD,MAAM,QAAQ,GAAG,CAAC,CAAC,CACjB,SAAS,IAAI,MAAM,IAAI,cAAc,CAAC,EAAE,EAAE,MAAM,CAAC,SAAS,EAAE,SAAS,CAAC,CACvE,CAAC;IACF,MAAM,UAAU,GAAqB,EAAE,gBAAgB,EAAE,cAAc,EAAE,QAAQ,EAAE,CAAC;IAEpF,MAAM,IAAI,GAAG,qBAAqB,CAAC,EAAE,EAAE,SAAS,CAAC,CAAC;IAClD,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,eAAe,CAAC,CAAC,EAAE,SAAS,IAAI,IAAI,EAAE,UAAU,CAAC,CAAC,CAAC;IACvF,OAAO,iBAAiB,CAAC,QAAQ,CAAC,CAAC;AACrC,CAAC;AAED;;;;;;;;GAQG;AACH,SAAS,iBAAiB,CAAC,IAAmB;IAC5C,MAAM,KAAK,GAAe,EAAE,CAAC;IAC7B,MAAM,UAAU,GAAG,IAAI,GAAG,EAA0B,CAAC;IACrD,4BAA4B;IAC5B,MAAM,YAAY,GAAG,IAAI,GAAG,EAAU,CAAC;IAEvC,gBAAgB;IAChB,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,IAAI,GAAG,CAAC,SAAS,KAAK,KAAK,EAAE,CAAC;YAC5B,MAAM,IAAI,GAAmB;gBAC3B,IAAI,EAAE,QAAQ;gBACd,IAAI,EAAE,gBAAgB,CAAC,GAAG,CAAC;gBAC3B,IAAI,EAAE,GAAG,CAAC,aAAa;gBACvB,UAAU,EAAE,GAAG,CAAC,WAAW;gBAC3B,QAAQ,EAAE,EAAE;aACb,CAAC;YACF,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC;QACxC,CAAC;IACH,CAAC;IAED,mBAAmB;IACnB,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,IAAI,GAAG,CAAC,SAAS,KAAK,KAAK;YAAE,SAAS;QACtC,MAAM,IAAI,GAAG,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,WAAW,CAAE,CAAC;QAC9C,IAAI,GAAG,CAAC,SAAS,EAAE,CAAC;YAClB,MAAM,MAAM,GAAG,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;YAC7C,IAAI,MAAM,EAAE,CAAC;gBACX,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC7B,CAAC;iBAAM,CAAC;gBACN,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBACjB,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;YACpC,CAAC;QACH,CAAC;aAAM,CAAC;YACN,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACjB,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;QACpC,CAAC;IACH,CAAC;IAED,eAAe;IACf,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,IAAI,GAAG,CAAC,SAAS,KAAK,IAAI;YAAE,SAAS;QACrC,MAAM,QAAQ,GAAG,GAAG,CAAC,aAAa,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAG,CAAC;QAErD,IAAI,QAAQ,CAAC,WAAW,EAAE,KAAK,oBAAoB,CAAC,WAAW,EAAE,EAAE,CAAC;YAClE,eAAe;YACf,IAAI,GAAG,CAAC,SAAS,EAAE,CAAC;gBAClB,MAAM,MAAM,GAAG,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;gBAC7C,IAAI,MAAM,EAAE,CAAC;oBACX,MAAM,CAAC,cAAc,GAAG,GAAG,CAAC,WAAW,CAAC;oBACxC,MAAM,CAAC,GAAG,GAAG,CAAC,YAAY,CAAC,IAAI,EAAE,CAAC;oBAClC,IAAI,CAAC;wBAAE,MAAM,CAAC,iBAAiB,GAAG,CAAC,CAAC;gBACtC,CAAC;YACH,CAAC;QACH,CAAC;aAAM,CAAC;YACN,OAAO;YACP,MAAM,IAAI,GAAa;gBACrB,IAAI,EAAE,UAAU;gBAChB,IAAI,EAAE,QAAQ;gBACd,IAAI,EAAE,GAAG,CAAC,aAAa;gBACvB,UAAU,EAAE,GAAG,CAAC,WAAW;gBAC3B,WAAW,EAAE,GAAG,CAAC,YAAY;gBAC7B,cAAc,EAAE,GAAG,CAAC,gBAAgB;gBACpC,SAAS,EAAE,GAAG,CAAC,UAAU;aAC1B,CAAC;YAEF,IAAI,GAAG,CAAC,SAAS,EAAE,CAAC;gBAClB,MAAM,MAAM,GAAG,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;gBAC7C,IAAI,MAAM,EAAE,CAAC;oBACX,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBAC7B,CAAC;qBAAM,CAAC;oBACN,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBACnB,CAAC;YACH,CAAC;iBAAM,CAAC;gBACN,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACnB,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO;IACP,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,IAAI,CAAC,IAAI,KAAK,QAAQ;YAAE,UAAU,CAAC,IAAI,CAAC,CAAC;IAC/C,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,gBAAgB,CAAC,GAAgB;IACxC,MAAM,CAAC,GAAG,GAAG,CAAC,YAAY,CAAC,IAAI,EAAE,CAAC;IAClC,IAAI,CAAC;QAAE,OAAO,CAAC,CAAC;IAChB,OAAO,GAAG,CAAC,aAAa,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,IAAI,GAAG,CAAC,aAAa,CAAC;AACjE,CAAC;AAED,SAAS,UAAU,CAAC,MAAsB;IACxC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IAClC,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;QAChC,IAAI,CAAC,CAAC,IAAI,KAAK,QAAQ;YAAE,UAAU,CAAC,CAAC,CAAC,CAAC;IACzC,CAAC;AACH,CAAC;AAED,SAAS,WAAW,CAAC,CAAW,EAAE,CAAW;IAC3C,IAAI,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,IAAI;QAAE,OAAO,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC3D,IAAI,CAAC,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC/C,OAAO,aAAa,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC;IAC1D,CAAC;IACD,OAAO,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;AACtC,CAAC;AAED,SAAS,aAAa,CAAC,CAAiB;IACtC,OAAO,CAAC,CAAC,CAAC,iBAAiB,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC;AACvD,CAAC"}

package/dist/server/domains/personal-domain.service.js

@@ -0,0 +1,27 @@
+import { findDomainById, insertDomain } from "../db/repositories/domain.repo.js";
+import { personalDomainDisplayName } from "../../shared/personalDomain.js";
+/**
+ * 确保指定访客拥有个人域（domain_id === visitor_id）。
+ * 幂等操作：若该访客的个人域已存在则直接返回，否则创建一个新的私有域。
+ * 私有域仅允许单一成员（参见 shared/types/domain 中的 PRIVATE_DOMAIN_MAX_MEMBERS）。
+ *
+ * @param db - 数据库连接实例
+ * @param visitorId - 访客 ID，同时也作为个人域的 domain_id
+ * @param visitorName - 访客名称，用于生成域的展示名称
+ */
+export function ensurePersonalDomain(db, visitorId, visitorName) {
+    // 若该访客的个人域已存在，无需重复创建
+    if (findDomainById(db, visitorId))
+        return;
+    const now = new Date().toISOString();
+    // 插入新的私有域记录，domainId 与 visitorId 相同
+    insertDomain(db, {
+        domainId: visitorId,
+        domainName: personalDomainDisplayName(visitorName),
+        creatorVisitorId: visitorId,
+        createdAt: now,
+        updatedAt: now,
+        permission: "private",
+    });
+}
+//# sourceMappingURL=personal-domain.service.js.map

package/dist/server/domains/personal-domain.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"personal-domain.service.js","sourceRoot":"","sources":["../../../src/server/domains/personal-domain.service.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,cAAc,EAAE,YAAY,EAAE,MAAM,mCAAmC,CAAC;AACjF,OAAO,EAAE,yBAAyB,EAAE,MAAM,gCAAgC,CAAC;AAE3E;;;;;;;;GAQG;AACH,MAAM,UAAU,oBAAoB,CAAC,EAAqB,EAAE,SAAiB,EAAE,WAAmB;IAChG,qBAAqB;IACrB,IAAI,cAAc,CAAC,EAAE,EAAE,SAAS,CAAC;QAAE,OAAO;IAE1C,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACrC,oCAAoC;IACpC,YAAY,CAAC,EAAE,EAAE;QACf,QAAQ,EAAE,SAAS;QACnB,UAAU,EAAE,yBAAyB,CAAC,WAAW,CAAC;QAClD,gBAAgB,EAAE,SAAS;QAC3B,SAAS,EAAE,GAAG;QACd,SAAS,EAAE,GAAG;QACd,UAAU,EAAE,SAAS;KACtB,CAAC,CAAC;AACL,CAAC"}

package/dist/server/identity/auth.middleware.js

@@ -0,0 +1,97 @@
+import { resolveVisitorByToken } from "./visitor.service.js";
+import { resolveCliVisitor } from "./cli-token.service.js";
+// 无需身份认证即可访问的路径白名单
+const EXEMPT_PATHS = new Set([
+    "/visitors/register",
+    "/visitors/recover",
+    "/health",
+]);
+/**
+ * Express 身份认证中间件。
+ *
+ * 支持两种认证方式：
+ * 1. Web 端：x-visitor-token 请求头（访客 token）
+ * 2. CLI 端：x-cli-token 请求头（CLI token）
+ *
+ * 两种 token 都会被解析为 req.visitor，后续业务逻辑无需区分来源。
+ * 对非豁免路径要求至少携带一种有效的令牌。
+ *
+ * @param req - Express 请求对象
+ * @param res - Express 响应对象
+ * @param next - 下一个中间件函数
+ */
+export function authMiddleware(req, res, next) {
+    // 对豁免路径仍尝试解析令牌（若有），但不强制要求
+    if (EXEMPT_PATHS.has(req.path)) {
+        const visitor = tryResolveVisitor(req);
+        if (visitor)
+            req.visitor = visitor;
+        next();
+        return;
+    }
+    // 非豁免路径：依次尝试访客 token 和 CLI token
+    const visitor = tryResolveVisitor(req);
+    if (!visitor) {
+        // 两种 token 都没提供
+        const hasVisitorToken = !!readVisitorToken(req);
+        const hasCliToken = !!readCliToken(req);
+        if (!hasVisitorToken && !hasCliToken) {
+            res.status(401).json({ error: { code: "UNAUTHENTICATED", message: "missing visitor token" } });
+            return;
+        }
+        // 提供了 token 但无效
+        res.status(401).json({ error: { code: "INVALID_TOKEN", message: "visitor token is not recognised" } });
+        return;
+    }
+    // 认证通过，将访客信息挂载到请求对象
+    req.visitor = visitor;
+    next();
+}
+/**
+ * 依次尝试通过两种认证方式解析访客。
+ * 先尝试 Web 端访客 token，失败后尝试 CLI token。
+ *
+ * @returns 解析到的访客信息，两种方式都失败则返回 null
+ */
+function tryResolveVisitor(req) {
+    // 方式一：Web 端访客 token
+    const visitorToken = readVisitorToken(req);
+    if (visitorToken) {
+        const visitor = resolveVisitorByToken(visitorToken);
+        if (visitor)
+            return visitor;
+    }
+    // 方式二：CLI token
+    const cliToken = readCliToken(req);
+    if (cliToken) {
+        const visitor = resolveCliVisitor(cliToken);
+        if (visitor)
+            return visitor;
+    }
+    return null;
+}
+/**
+ * 从请求头中读取 Web 端访客令牌。
+ *
+ * @param req - Express 请求对象
+ * @returns 读取到的令牌字符串，不存在或为空时返回 null
+ */
+function readVisitorToken(req) {
+    const header = req.header("x-visitor-token");
+    if (header && header.trim())
+        return header.trim();
+    return null;
+}
+/**
+ * 从请求头中读取 CLI 令牌。
+ *
+ * @param req - Express 请求对象
+ * @returns 读取到的令牌字符串，不存在或为空时返回 null
+ */
+function readCliToken(req) {
+    const header = req.header("x-cli-token");
+    if (header && header.trim())
+        return header.trim();
+    return null;
+}
+//# sourceMappingURL=auth.middleware.js.map

package/dist/server/identity/auth.middleware.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.middleware.js","sourceRoot":"","sources":["../../../src/server/identity/auth.middleware.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,qBAAqB,EAAE,MAAM,sBAAsB,CAAC;AAC7D,OAAO,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAE3D,mBAAmB;AACnB,MAAM,YAAY,GAAG,IAAI,GAAG,CAAS;IACnC,oBAAoB;IACpB,mBAAmB;IACnB,SAAS;CACV,CAAC,CAAC;AAEH;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,cAAc,CAAC,GAAY,EAAE,GAAa,EAAE,IAAkB;IAC5E,0BAA0B;IAC1B,IAAI,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;QAC/B,MAAM,OAAO,GAAG,iBAAiB,CAAC,GAAG,CAAC,CAAC;QACvC,IAAI,OAAO;YAAE,GAAG,CAAC,OAAO,GAAG,OAAO,CAAC;QACnC,IAAI,EAAE,CAAC;QACP,OAAO;IACT,CAAC;IAED,iCAAiC;IACjC,MAAM,OAAO,GAAG,iBAAiB,CAAC,GAAG,CAAC,CAAC;IACvC,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,gBAAgB;QAChB,MAAM,eAAe,GAAG,CAAC,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC;QAChD,MAAM,WAAW,GAAG,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC;QACxC,IAAI,CAAC,eAAe,IAAI,CAAC,WAAW,EAAE,CAAC;YACrC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,iBAAiB,EAAE,OAAO,EAAE,uBAAuB,EAAE,EAAE,CAAC,CAAC;YAC/F,OAAO;QACT,CAAC;QACD,gBAAgB;QAChB,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE,iCAAiC,EAAE,EAAE,CAAC,CAAC;QACvG,OAAO;IACT,CAAC;IAED,oBAAoB;IACpB,GAAG,CAAC,OAAO,GAAG,OAAO,CAAC;IACtB,IAAI,EAAE,CAAC;AACT,CAAC;AAED;;;;;GAKG;AACH,SAAS,iBAAiB,CAAC,GAAY;IACrC,oBAAoB;IACpB,MAAM,YAAY,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC;IAC3C,IAAI,YAAY,EAAE,CAAC;QACjB,MAAM,OAAO,GAAG,qBAAqB,CAAC,YAAY,CAAC,CAAC;QACpD,IAAI,OAAO;YAAE,OAAO,OAAO,CAAC;IAC9B,CAAC;IAED,gBAAgB;IAChB,MAAM,QAAQ,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;IACnC,IAAI,QAAQ,EAAE,CAAC;QACb,MAAM,OAAO,GAAG,iBAAiB,CAAC,QAAQ,CAAC,CAAC;QAC5C,IAAI,OAAO;YAAE,OAAO,OAAO,CAAC;IAC9B,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;GAKG;AACH,SAAS,gBAAgB,CAAC,GAAY;IACpC,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC;IAC7C,IAAI,MAAM,IAAI,MAAM,CAAC,IAAI,EAAE;QAAE,OAAO,MAAM,CAAC,IAAI,EAAE,CAAC;IAClD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;GAKG;AACH,SAAS,YAAY,CAAC,GAAY;IAChC,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;IACzC,IAAI,MAAM,IAAI,MAAM,CAAC,IAAI,EAAE;QAAE,OAAO,MAAM,CAAC,IAAI,EAAE,CAAC;IAClD,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/server/identity/cli-token.service.js

@@ -0,0 +1,101 @@
+import { randomUUID } from "node:crypto";
+import { randomBytes } from "node:crypto";
+import { getDb } from "../db/connection.js";
+import { insertCliToken, findCliTokenByHash, listCliTokensByVisitor, revokeAllCliTokensByVisitor, } from "../db/repositories/cli-token.repo.js";
+import { hashVisitorToken } from "../identity/token.js";
+import { findVisitorById } from "../db/repositories/visitor.repo.js";
+/**
+ * 为指定访客创建 CLI Token。
+ *
+ * 创建前会吊销该访客的所有已有 Token（确保同一时刻只有一个活跃 token）。
+ * 返回原始 token（仅展示一次，服务端只存 hash）和元数据。
+ *
+ * @param params.visitorId - 绑定的访客 ID
+ * @param params.name - Token 别名，不传则使用默认名
+ */
+export function createCliToken(params) {
+    // 生成高熵随机原始 token（32 字节，base64url 编码）
+    const rawToken = generateCliToken();
+    // 服务端只存 hash，原始 token 返回给调用方后丢弃
+    const tokenHash = hashVisitorToken(rawToken);
+    const now = new Date().toISOString();
+    const name = params.name?.trim() || "cli-token";
+    const tokenId = randomUUID();
+    // 在事务中：先吊销已有，再插入新记录
+    const db = getDb();
+    const tx = db.transaction(() => {
+        // 吊销该访客的所有已有 CLI Token（重置语义）
+        revokeAllCliTokensByVisitor(db, params.visitorId);
+        // 插入新 token 记录
+        insertCliToken(db, {
+            tokenId,
+            visitorId: params.visitorId,
+            tokenHash,
+            name,
+            createdAt: now,
+        });
+    });
+    tx();
+    return { tokenId, token: rawToken, name, createdAt: now };
+}
+/**
+ * 列出指定访客的所有 CLI Token（含已吊销的）。
+ * 按创建时间倒序排列，最新的在前。
+ * 返回值不包含 token_hash，避免泄露。
+ */
+export function listCliTokens(visitorId) {
+    const db = getDb();
+    const rows = listCliTokensByVisitor(db, visitorId);
+    return rows.map((r) => ({
+        tokenId: r.token_id,
+        name: r.name,
+        revoked: r.revoked === 1,
+        createdAt: r.created_at,
+    }));
+}
+/**
+ * 吊销指定 CLI Token。
+ * 仅该 Token 的创建者可以吊销自己的 Token。
+ */
+export function revokeCliToken(visitorId, tokenId) {
+    const db = getDb();
+    const rows = listCliTokensByVisitor(db, visitorId);
+    const token = rows.find((r) => r.token_id === tokenId);
+    if (!token)
+        throw new Error("CLI token not found");
+    db.prepare(`UPDATE cli_tokens SET revoked = 1 WHERE token_id = ?`).run(tokenId);
+}
+/**
+ * 通过原始 CLI token 解析对应的访客信息。
+ *
+ * 认证流程：
+ * 1. 对原始 token 做 SHA-256 hash
+ * 2. 在 cli_tokens 表中查找匹配的 hash
+ * 3. 检查是否已吊销（revoked=1 则拒绝）
+ * 4. 通过 visitor_id 查询访客信息
+ * 5. 检查访客是否已停用（disabled_at 存在则拒绝）
+ *
+ * @returns 访客信息，若 token 无效或已吊销则返回 null
+ */
+export function resolveCliVisitor(rawToken) {
+    // 计算 token hash
+    const tokenHash = hashVisitorToken(rawToken);
+    const db = getDb();
+    // 查找 CLI token 记录
+    const cliToken = findCliTokenByHash(db, tokenHash);
+    if (!cliToken || cliToken.revoked === 1)
+        return null;
+    // 查询对应的访客信息
+    const visitor = findVisitorById(db, cliToken.visitor_id);
+    if (!visitor || visitor.disabled_at)
+        return null;
+    return visitor;
+}
+/**
+ * 生成高熵随机 CLI token（32 字节，base64url 编码）。
+ * 与访客 token 使用相同的生成方式，保持一致性。
+ */
+function generateCliToken() {
+    return randomBytes(32).toString("base64url");
+}
+//# sourceMappingURL=cli-token.service.js.map

package/dist/server/identity/cli-token.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli-token.service.js","sourceRoot":"","sources":["../../../src/server/identity/cli-token.service.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,KAAK,EAAE,MAAM,qBAAqB,CAAC;AAC5C,OAAO,EACL,cAAc,EACd,kBAAkB,EAClB,sBAAsB,EACtB,2BAA2B,GAC5B,MAAM,sCAAsC,CAAC;AAC9C,OAAO,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AACxD,OAAO,EAAE,eAAe,EAAmB,MAAM,oCAAoC,CAAC;AAStF;;;;;;;;GAQG;AACH,MAAM,UAAU,cAAc,CAAC,MAG9B;IACC,qCAAqC;IACrC,MAAM,QAAQ,GAAG,gBAAgB,EAAE,CAAC;IACpC,gCAAgC;IAChC,MAAM,SAAS,GAAG,gBAAgB,CAAC,QAAQ,CAAC,CAAC;IAC7C,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACrC,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,WAAW,CAAC;IAChD,MAAM,OAAO,GAAG,UAAU,EAAE,CAAC;IAE7B,oBAAoB;IACpB,MAAM,EAAE,GAAG,KAAK,EAAE,CAAC;IACnB,MAAM,EAAE,GAAG,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE;QAC7B,6BAA6B;QAC7B,2BAA2B,CAAC,EAAE,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC;QAClD,eAAe;QACf,cAAc,CAAC,EAAE,EAAE;YACjB,OAAO;YACP,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,SAAS;YACT,IAAI;YACJ,SAAS,EAAE,GAAG;SACf,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IACH,EAAE,EAAE,CAAC;IAEL,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC;AAC5D,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,aAAa,CAAC,SAAiB;IAC7C,MAAM,EAAE,GAAG,KAAK,EAAE,CAAC;IACnB,MAAM,IAAI,GAAG,sBAAsB,CAAC,EAAE,EAAE,SAAS,CAAC,CAAC;IACnD,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACtB,OAAO,EAAE,CAAC,CAAC,QAAQ;QACnB,IAAI,EAAE,CAAC,CAAC,IAAI;QACZ,OAAO,EAAE,CAAC,CAAC,OAAO,KAAK,CAAC;QACxB,SAAS,EAAE,CAAC,CAAC,UAAU;KACxB,CAAC,CAAC,CAAC;AACN,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,cAAc,CAAC,SAAiB,EAAE,OAAe;IAC/D,MAAM,EAAE,GAAG,KAAK,EAAE,CAAC;IACnB,MAAM,IAAI,GAAG,sBAAsB,CAAC,EAAE,EAAE,SAAS,CAAC,CAAC;IACnD,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC;IACvD,IAAI,CAAC,KAAK;QAAE,MAAM,IAAI,KAAK,CAAC,qBAAqB,CAAC,CAAC;IACnD,EAAE,CAAC,OAAO,CAAC,sDAAsD,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;AAClF,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,iBAAiB,CAAC,QAAgB;IAChD,gBAAgB;IAChB,MAAM,SAAS,GAAG,gBAAgB,CAAC,QAAQ,CAAC,CAAC;IAC7C,MAAM,EAAE,GAAG,KAAK,EAAE,CAAC;IAEnB,kBAAkB;IAClB,MAAM,QAAQ,GAAG,kBAAkB,CAAC,EAAE,EAAE,SAAS,CAAC,CAAC;IACnD,IAAI,CAAC,QAAQ,IAAI,QAAQ,CAAC,OAAO,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAErD,YAAY;IACZ,MAAM,OAAO,GAAG,eAAe,CAAC,EAAE,EAAE,QAAQ,CAAC,UAAU,CAAC,CAAC;IACzD,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,WAAW;QAAE,OAAO,IAAI,CAAC;IAEjD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;GAGG;AACH,SAAS,gBAAgB;IACvB,OAAO,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;AAC/C,CAAC"}

package/dist/server/identity/token.js

@@ -0,0 +1,58 @@
+import { createHash, randomBytes, randomUUID } from "node:crypto";
+/**
+ * 生成一个新的访客唯一标识符（UUID v4）。
+ *
+ * @returns 访客 ID 字符串
+ */
+export function newVisitorId() {
+    return randomUUID();
+}
+/**
+ * 生成一个新的访客原始令牌。
+ * 使用 32 字节随机数并通过 base64url 编码，保证 URL 安全且长度适中。
+ *
+ * @returns 原始访客令牌字符串
+ */
+export function newVisitorToken() {
+    return randomBytes(32).toString("base64url");
+}
+/**
+ * 对原始访客令牌进行 SHA-256 哈希，用于安全存储。
+ * 数据库中保存的是哈希值而非原始令牌，原始令牌仅在注册时返回给客户端一次。
+ *
+ * @param rawToken - 原始访客令牌
+ * @returns SHA-256 十六进制哈希字符串
+ */
+export function hashVisitorToken(rawToken) {
+    return createHash("sha256").update(rawToken, "utf8").digest("hex");
+}
+/**
+ * 生成一个新的恢复码。
+ * 格式：XXXX-XXXX-XXXX-XXXX（4 组 4 位大写字母+数字，共 20 字符）
+ * 熵值约 80 bit，适合人类抄写。
+ *
+ * @returns 恢复码字符串
+ */
+export function newRecoveryCode() {
+    const groups = [];
+    const chars = "ABCDEFGHJKLMNPQRSTUVWXYZ23456789"; // 去掉易混淆的 0/O/1/I
+    for (let g = 0; g < 4; g++) {
+        let group = "";
+        for (let i = 0; i < 4; i++) {
+            group += chars[Math.floor(Math.random() * chars.length)];
+        }
+        groups.push(group);
+    }
+    return groups.join("-");
+}
+/**
+ * 对恢复码进行 SHA-256 哈希，用于安全存储。
+ * 数据库中保存哈希值，原始恢复码仅在注册时展示一次。
+ *
+ * @param code - 原始恢复码
+ * @returns SHA-256 十六进制哈希字符串
+ */
+export function hashRecoveryCode(code) {
+    return createHash("sha256").update(code.toUpperCase(), "utf8").digest("hex");
+}
+//# sourceMappingURL=token.js.map

package/dist/server/identity/token.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"token.js","sourceRoot":"","sources":["../../../src/server/identity/token.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAElE;;;;GAIG;AACH,MAAM,UAAU,YAAY;IAC1B,OAAO,UAAU,EAAE,CAAC;AACtB,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,eAAe;IAC7B,OAAO,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;AAC/C,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,gBAAgB,CAAC,QAAgB;IAC/C,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACrE,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,eAAe;IAC7B,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,MAAM,KAAK,GAAG,kCAAkC,CAAC,CAAC,iBAAiB;IACnE,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QAC3B,IAAI,KAAK,GAAG,EAAE,CAAC;QACf,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;YAC3B,KAAK,IAAI,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC;QAC3D,CAAC;QACD,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACrB,CAAC;IACD,OAAO,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAC1B,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,gBAAgB,CAAC,IAAY;IAC3C,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,WAAW,EAAE,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC/E,CAAC"}

package/dist/server/identity/visitor.service.js

@@ -0,0 +1,200 @@
+import { getDb } from "../db/connection.js";
+import { findVisitorById, findVisitorByRecoveryCodeHash, findVisitorByTokenHash, insertVisitor, listVisitors, updateRecoveryCodeHash, updateVisitorLastSeen, } from "../db/repositories/visitor.repo.js";
+import { insertAuditLog } from "../db/repositories/audit.repo.js";
+import { ensurePersonalDomain } from "../domains/personal-domain.service.js";
+import { hashRecoveryCode, hashVisitorToken, newRecoveryCode, newVisitorId, newVisitorToken, } from "./token.js";
+import { useLogger } from "../logger/logger.js";
+const log = useLogger("identity");
+/**
+ * 注册一个新访客。
+ * 校验名称合法性后，生成访客 ID 与令牌，在数据库中创建记录并为其建立个人域。
+ *
+ * @param visitorName - 访客名称
+ * @returns 包含访客公开信息与原始令牌的注册结果
+ */
+export function registerVisitor(visitorName) {
+    const trimmed = visitorName.trim();
+    // 校验名称非空
+    if (!trimmed) {
+        throw new VisitorValidationError("visitor name is required");
+    }
+    // 校验名称长度不超过 60 字符
+    if (trimmed.length > 60) {
+        throw new VisitorValidationError("visitor name is too long");
+    }
+    const db = getDb();
+    // 生成访客唯一标识、原始令牌、恢复码及其哈希
+    const visitorId = newVisitorId();
+    const rawToken = newVisitorToken();
+    const tokenHash = hashVisitorToken(rawToken);
+    const recoveryCode = newRecoveryCode();
+    const recoveryCodeHash = hashRecoveryCode(recoveryCode);
+    const createdAt = new Date().toISOString();
+    // 在事务中插入访客记录（含恢复码哈希）、创建个人域并记录审计日志
+    const tx = db.transaction(() => {
+        insertVisitor(db, {
+            visitorId,
+            visitorName: trimmed,
+            visitorTokenHash: tokenHash,
+            recoveryCodeHash,
+            createdAt,
+        });
+        ensurePersonalDomain(db, visitorId, trimmed);
+        insertAuditLog(db, {
+            actorVisitorId: visitorId,
+            action: "visitor.register",
+            targetType: "visitor",
+            targetId: visitorId,
+            metadata: { visitorName: trimmed },
+            createdAt,
+        });
+    });
+    tx();
+    log.info("registered visitor %s", visitorId);
+    return {
+        visitor: toPublic({
+            visitor_id: visitorId,
+            visitor_name: trimmed,
+            visitor_token_hash: tokenHash,
+            recovery_code_hash: recoveryCodeHash,
+            created_at: createdAt,
+            last_seen_at: null,
+            disabled_at: null,
+            merged_into_visitor_id: null,
+        }),
+        visitorToken: rawToken,
+        recoveryCode,
+    };
+}
+/**
+ * 根据原始访客令牌解析对应的访客记录，并更新最后访问时间。
+ * 若令牌无效或对应访客已被禁用，则返回 null。
+ *
+ * @param rawToken - 原始访客令牌
+ * @returns 访客数据库记录，解析失败时返回 null
+ */
+export function resolveVisitorByToken(rawToken) {
+    const tokenHash = hashVisitorToken(rawToken);
+    const db = getDb();
+    const row = findVisitorByTokenHash(db, tokenHash);
+    // 未找到记录或访客已禁用均视为无效
+    if (!row)
+        return null;
+    if (row.disabled_at)
+        return null;
+    // 更新最后访问时间戳
+    updateVisitorLastSeen(db, row.visitor_id, new Date().toISOString());
+    return row;
+}
+/**
+ * 根据访客 ID 获取访客记录。
+ *
+ * @param visitorId - 访客 ID
+ * @returns 访客数据库记录，不存在时返回 null
+ */
+export function getVisitorById(visitorId) {
+    const row = findVisitorById(getDb(), visitorId);
+    return row ?? null;
+}
+/**
+ * 列出系统中所有访客记录。
+ *
+ * @returns 访客数据库记录数组
+ */
+export function listAllVisitors() {
+    return listVisitors(getDb());
+}
+/**
+ * 使用恢复码找回访客身份。
+ * 验证恢复码 → 生成新 Token → 清除恢复码（一次性使用）→ 返回新的身份。
+ *
+ * @param recoveryCode - 用户输入的恢复码
+ * @returns 新的身份信息（访客 + 新 Token），若恢复码无效则返回 null
+ */
+export function recoverVisitor(recoveryCode) {
+    const db = getDb();
+    const codeHash = hashRecoveryCode(recoveryCode);
+    const row = findVisitorByRecoveryCodeHash(db, codeHash);
+    if (!row)
+        return null;
+    // 生成新 Token，更新数据库
+    const rawToken = newVisitorToken();
+    const tokenHash = hashVisitorToken(rawToken);
+    const now = new Date().toISOString();
+    const tx = db.transaction(() => {
+        // 更新 Token
+        db.prepare(`UPDATE visitors SET visitor_token_hash = ?, last_seen_at = ? WHERE visitor_id = ?`).run(tokenHash, now, row.visitor_id);
+        // 清除恢复码（一次性）
+        updateRecoveryCodeHash(db, row.visitor_id, null);
+        // 审计日志
+        insertAuditLog(db, {
+            actorVisitorId: row.visitor_id,
+            action: "visitor.recover",
+            targetType: "visitor",
+            targetId: row.visitor_id,
+            metadata: {},
+            createdAt: now,
+        });
+    });
+    tx();
+    log.info("recovered visitor %s via recovery code", row.visitor_id);
+    return {
+        visitor: toPublic({
+            ...row,
+            visitor_token_hash: tokenHash,
+            recovery_code_hash: null,
+        }),
+        visitorToken: rawToken,
+        recoveryCode: "",
+    };
+}
+/**
+ * 将数据库中的访客行转换为对外公开的访客信息结构。
+ *
+ * @param row - 访客数据库行
+ * @returns 访客公开信息对象
+ */
+export function toPublic(row) {
+    return {
+        visitorId: row.visitor_id,
+        visitorName: row.visitor_name,
+        createdAt: row.created_at,
+        lastSeenAt: row.last_seen_at,
+        disabledAt: row.disabled_at,
+        mergedIntoVisitorId: row.merged_into_visitor_id,
+    };
+}
+/**
+ * 为已登录的访客生成新的恢复码（覆盖旧码）。
+ *
+ * @param visitorId - 当前已登录的访客 ID
+ * @returns 新的恢复码字符串
+ */
+export function generateRecoveryCode(visitorId) {
+    const db = getDb();
+    const recoveryCode = newRecoveryCode();
+    const codeHash = hashRecoveryCode(recoveryCode);
+    const now = new Date().toISOString();
+    const tx = db.transaction(() => {
+        updateRecoveryCodeHash(db, visitorId, codeHash);
+        insertAuditLog(db, {
+            actorVisitorId: visitorId,
+            action: "visitor.generate-recovery-code",
+            targetType: "visitor",
+            targetId: visitorId,
+            metadata: {},
+            createdAt: now,
+        });
+    });
+    tx();
+    log.info("generated new recovery code for visitor %s", visitorId);
+    return recoveryCode;
+}
+/** 访客信息校验失败的自定义错误 */
+export class VisitorValidationError extends Error {
+    constructor(message) {
+        super(message);
+        this.name = "VisitorValidationError";
+    }
+}
+//# sourceMappingURL=visitor.service.js.map

package/dist/server/identity/visitor.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"visitor.service.js","sourceRoot":"","sources":["../../../src/server/identity/visitor.service.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,qBAAqB,CAAC;AAC5C,OAAO,EACL,eAAe,EACf,6BAA6B,EAC7B,sBAAsB,EACtB,aAAa,EACb,YAAY,EACZ,sBAAsB,EACtB,qBAAqB,GAEtB,MAAM,oCAAoC,CAAC;AAC5C,OAAO,EAAE,cAAc,EAAE,MAAM,kCAAkC,CAAC;AAClE,OAAO,EAAE,oBAAoB,EAAE,MAAM,uCAAuC,CAAC;AAC7E,OAAO,EACL,gBAAgB,EAChB,gBAAgB,EAChB,eAAe,EACf,YAAY,EACZ,eAAe,GAChB,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAGhD,MAAM,GAAG,GAAG,SAAS,CAAC,UAAU,CAAC,CAAC;AASlC;;;;;;GAMG;AACH,MAAM,UAAU,eAAe,CAAC,WAAmB;IACjD,MAAM,OAAO,GAAG,WAAW,CAAC,IAAI,EAAE,CAAC;IACnC,SAAS;IACT,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,IAAI,sBAAsB,CAAC,0BAA0B,CAAC,CAAC;IAC/D,CAAC;IACD,kBAAkB;IAClB,IAAI,OAAO,CAAC,MAAM,GAAG,EAAE,EAAE,CAAC;QACxB,MAAM,IAAI,sBAAsB,CAAC,0BAA0B,CAAC,CAAC;IAC/D,CAAC;IAED,MAAM,EAAE,GAAG,KAAK,EAAE,CAAC;IACnB,wBAAwB;IACxB,MAAM,SAAS,GAAG,YAAY,EAAE,CAAC;IACjC,MAAM,QAAQ,GAAG,eAAe,EAAE,CAAC;IACnC,MAAM,SAAS,GAAG,gBAAgB,CAAC,QAAQ,CAAC,CAAC;IAC7C,MAAM,YAAY,GAAG,eAAe,EAAE,CAAC;IACvC,MAAM,gBAAgB,GAAG,gBAAgB,CAAC,YAAY,CAAC,CAAC;IACxD,MAAM,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAE3C,kCAAkC;IAClC,MAAM,EAAE,GAAG,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE;QAC7B,aAAa,CAAC,EAAE,EAAE;YAChB,SAAS;YACT,WAAW,EAAE,OAAO;YACpB,gBAAgB,EAAE,SAAS;YAC3B,gBAAgB;YAChB,SAAS;SACV,CAAC,CAAC;QACH,oBAAoB,CAAC,EAAE,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC;QAC7C,cAAc,CAAC,EAAE,EAAE;YACjB,cAAc,EAAE,SAAS;YACzB,MAAM,EAAE,kBAAkB;YAC1B,UAAU,EAAE,SAAS;YACrB,QAAQ,EAAE,SAAS;YACnB,QAAQ,EAAE,EAAE,WAAW,EAAE,OAAO,EAAE;YAClC,SAAS;SACV,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IACH,EAAE,EAAE,CAAC;IAEL,GAAG,CAAC,IAAI,CAAC,uBAAuB,EAAE,SAAS,CAAC,CAAC;IAC7C,OAAO;QACL,OAAO,EAAE,QAAQ,CAAC;YAChB,UAAU,EAAE,SAAS;YACrB,YAAY,EAAE,OAAO;YACrB,kBAAkB,EAAE,SAAS;YAC7B,kBAAkB,EAAE,gBAAgB;YACpC,UAAU,EAAE,SAAS;YACrB,YAAY,EAAE,IAAI;YAClB,WAAW,EAAE,IAAI;YACjB,sBAAsB,EAAE,IAAI;SAC7B,CAAC;QACF,YAAY,EAAE,QAAQ;QACtB,YAAY;KACb,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,qBAAqB,CAAC,QAAgB;IACpD,MAAM,SAAS,GAAG,gBAAgB,CAAC,QAAQ,CAAC,CAAC;IAC7C,MAAM,EAAE,GAAG,KAAK,EAAE,CAAC;IACnB,MAAM,GAAG,GAAG,sBAAsB,CAAC,EAAE,EAAE,SAAS,CAAC,CAAC;IAClD,mBAAmB;IACnB,IAAI,CAAC,GAAG;QAAE,OAAO,IAAI,CAAC;IACtB,IAAI,GAAG,CAAC,WAAW;QAAE,OAAO,IAAI,CAAC;IACjC,YAAY;IACZ,qBAAqB,CAAC,EAAE,EAAE,GAAG,CAAC,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC;IACpE,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,cAAc,CAAC,SAAiB;IAC9C,MAAM,GAAG,GAAG,eAAe,CAAC,KAAK,EAAE,EAAE,SAAS,CAAC,CAAC;IAChD,OAAO,GAAG,IAAI,IAAI,CAAC;AACrB,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,eAAe;IAC7B,OAAO,YAAY,CAAC,KAAK,EAAE,CAAC,CAAC;AAC/B,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,cAAc,CAAC,YAAoB;IACjD,MAAM,EAAE,GAAG,KAAK,EAAE,CAAC;IACnB,MAAM,QAAQ,GAAG,gBAAgB,CAAC,YAAY,CAAC,CAAC;IAChD,MAAM,GAAG,GAAG,6BAA6B,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC;IACxD,IAAI,CAAC,GAAG;QAAE,OAAO,IAAI,CAAC;IAEtB,kBAAkB;IAClB,MAAM,QAAQ,GAAG,eAAe,EAAE,CAAC;IACnC,MAAM,SAAS,GAAG,gBAAgB,CAAC,QAAQ,CAAC,CAAC;IAC7C,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAErC,MAAM,EAAE,GAAG,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE;QAC7B,WAAW;QACX,EAAE,CAAC,OAAO,CACR,mFAAmF,CACpF,CAAC,GAAG,CAAC,SAAS,EAAE,GAAG,EAAE,GAAG,CAAC,UAAU,CAAC,CAAC;QACtC,aAAa;QACb,sBAAsB,CAAC,EAAE,EAAE,GAAG,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;QACjD,OAAO;QACP,cAAc,CAAC,EAAE,EAAE;YACjB,cAAc,EAAE,GAAG,CAAC,UAAU;YAC9B,MAAM,EAAE,iBAAiB;YACzB,UAAU,EAAE,SAAS;YACrB,QAAQ,EAAE,GAAG,CAAC,UAAU;YACxB,QAAQ,EAAE,EAAE;YACZ,SAAS,EAAE,GAAG;SACf,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IACH,EAAE,EAAE,CAAC;IAEL,GAAG,CAAC,IAAI,CAAC,wCAAwC,EAAE,GAAG,CAAC,UAAU,CAAC,CAAC;IACnE,OAAO;QACL,OAAO,EAAE,QAAQ,CAAC;YAChB,GAAG,GAAG;YACN,kBAAkB,EAAE,SAAS;YAC7B,kBAAkB,EAAE,IAAI;SACzB,CAAC;QACF,YAAY,EAAE,QAAQ;QACtB,YAAY,EAAE,EAAE;KACjB,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,QAAQ,CAAC,GAAe;IACtC,OAAO;QACL,SAAS,EAAE,GAAG,CAAC,UAAU;QACzB,WAAW,EAAE,GAAG,CAAC,YAAY;QAC7B,SAAS,EAAE,GAAG,CAAC,UAAU;QACzB,UAAU,EAAE,GAAG,CAAC,YAAY;QAC5B,UAAU,EAAE,GAAG,CAAC,WAAW;QAC3B,mBAAmB,EAAE,GAAG,CAAC,sBAAsB;KAChD,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,oBAAoB,CAAC,SAAiB;IACpD,MAAM,EAAE,GAAG,KAAK,EAAE,CAAC;IACnB,MAAM,YAAY,GAAG,eAAe,EAAE,CAAC;IACvC,MAAM,QAAQ,GAAG,gBAAgB,CAAC,YAAY,CAAC,CAAC;IAChD,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAErC,MAAM,EAAE,GAAG,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE;QAC7B,sBAAsB,CAAC,EAAE,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC;QAChD,cAAc,CAAC,EAAE,EAAE;YACjB,cAAc,EAAE,SAAS;YACzB,MAAM,EAAE,gCAAgC;YACxC,UAAU,EAAE,SAAS;YACrB,QAAQ,EAAE,SAAS;YACnB,QAAQ,EAAE,EAAE;YACZ,SAAS,EAAE,GAAG;SACf,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IACH,EAAE,EAAE,CAAC;IAEL,GAAG,CAAC,IAAI,CAAC,4CAA4C,EAAE,SAAS,CAAC,CAAC;IAClE,OAAO,YAAY,CAAC;AACtB,CAAC;AAED,qBAAqB;AACrB,MAAM,OAAO,sBAAuB,SAAQ,KAAK;IAC/C,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,wBAAwB,CAAC;IACvC,CAAC;CACF"}