@fudanda/client 1.20261015.1-beta.1 → 2.20261024.1-beta.2

package/dist/shared/settings/modules/workflow.js

@@ -0,0 +1,24 @@
+import * as z from 'zod';
+import { defineSettingsModule } from '../module-def.js';
+export const workflowSettingsSchema = z.object({
+    engine: z.object({
+        healthWarn: z.number().min(0).max(100).default(90).meta({ title: '健康分预警线', description: '低于该分值显示 warning' }),
+        healthCritical: z.number().min(0).max(100).default(70).meta({ title: '健康分严重线', description: '低于该分值显示 critical' }),
+        backlogWarn: z.int().min(0).default(50).meta({ title: '积压预警数', description: '待处理任务超过该数量视为预警' }),
+        backlogCritical: z.int().min(0).default(200).meta({ title: '积压严重数' }),
+        errorRateWarn: z.number().min(0).max(1).default(0.05).meta({ title: '错误率预警', description: '0–1 之间的比例' }),
+        errorRateCritical: z.number().min(0).max(1).default(0.15).meta({ title: '错误率严重' }),
+        apdexThresholdMs: z.int().min(1).default(100).meta({ title: 'Apdex 满意阈值（ms）' }),
+    }).prefault({}).meta({ title: '引擎健康度' }),
+}).meta({ id: 'Settings.Workflow' });
+export const workflowSettingsModule = defineSettingsModule({
+    schema: workflowSettingsSchema,
+    title: '工作流引擎',
+    description: '引擎诊断的健康分、积压与错误率阈值',
+    scope: 'platform',
+    feature: 'workflow',
+    readPermission: 'system:setting:view',
+    writePermission: 'system:setting:update',
+    sort: 100,
+});
+//# sourceMappingURL=workflow.js.map

package/dist/shared/settings/modules/workflow.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"workflow.js","sourceRoot":"","sources":["../../../src/settings/modules/workflow.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,KAAK,CAAC;AACzB,OAAO,EAAE,oBAAoB,EAAE,MAAM,eAAe,CAAC;AAGrD,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC7C,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC;QACf,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,WAAW,EAAE,iBAAiB,EAAE,CAAC;QAC5G,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,WAAW,EAAE,kBAAkB,EAAE,CAAC;QACjH,WAAW,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,WAAW,EAAE,gBAAgB,EAAE,CAAC;QAC/F,eAAe,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC;QACrE,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,CAAC;QACxG,iBAAiB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC;QAClF,gBAAgB,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,gBAAgB,EAAE,CAAC;KAChF,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC;CACzC,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,mBAAmB,EAAE,CAAC,CAAC;AAIrC,MAAM,CAAC,MAAM,sBAAsB,GAAG,oBAAoB,CAAC;IACzD,MAAM,EAAE,sBAAsB;IAC9B,KAAK,EAAE,OAAO;IACd,WAAW,EAAE,mBAAmB;IAChC,KAAK,EAAE,UAAU;IACjB,OAAO,EAAE,UAAU;IACnB,cAAc,EAAE,qBAAqB;IACrC,eAAe,EAAE,uBAAuB;IACxC,IAAI,EAAE,GAAG;CACV,CAAC,CAAC"}

package/dist/shared/settings/registry.d.ts

@@ -0,0 +1,241 @@
+import type * as z from 'zod';
+import type { SettingsModuleDef } from './module-def.js';
+export declare const SETTINGS_MODULES: {
+    readonly auth: SettingsModuleDef<z.ZodObject<{
+        captchaEnabled: z.ZodDefault<z.ZodBoolean>;
+        captchaComplexity: z.ZodDefault<z.ZodEnum<{
+            high: "high";
+            low: "low";
+            medium: "medium";
+        }>>;
+        allowRegistration: z.ZodDefault<z.ZodBoolean>;
+        forgotPasswordEnabled: z.ZodDefault<z.ZodBoolean>;
+    }, z.core.$strip>>;
+    readonly identitySecurity: SettingsModuleDef<z.ZodObject<{
+        password: z.ZodPrefault<z.ZodObject<{
+            minLength: z.ZodDefault<z.ZodInt>;
+            requireUppercase: z.ZodDefault<z.ZodBoolean>;
+            requireSpecialChar: z.ZodDefault<z.ZodBoolean>;
+            expiryEnabled: z.ZodDefault<z.ZodBoolean>;
+            expiryDays: z.ZodDefault<z.ZodInt>;
+        }, z.core.$strip>>;
+        loginChallenge: z.ZodPrefault<z.ZodObject<{
+            maxAttemptsPerSource: z.ZodDefault<z.ZodInt>;
+            sourceLimit: z.ZodDefault<z.ZodInt>;
+            windowMinutes: z.ZodDefault<z.ZodInt>;
+            alert: z.ZodPrefault<z.ZodObject<{
+                enabled: z.ZodDefault<z.ZodBoolean>;
+                sourceThreshold: z.ZodDefault<z.ZodInt>;
+                failureThreshold: z.ZodDefault<z.ZodInt>;
+            }, z.core.$strip>>;
+        }, z.core.$strip>>;
+        session: z.ZodPrefault<z.ZodObject<{
+            maxSessions: z.ZodDefault<z.ZodInt>;
+            scope: z.ZodDefault<z.ZodEnum<{
+                global: "global";
+                "per-client": "per-client";
+            }>>;
+            exceedAction: z.ZodDefault<z.ZodEnum<{
+                "kick-oldest": "kick-oldest";
+                "reject-new": "reject-new";
+            }>>;
+        }, z.core.$strip>>;
+        mfa: z.ZodPrefault<z.ZodObject<{
+            enabled: z.ZodDefault<z.ZodBoolean>;
+            mode: z.ZodDefault<z.ZodEnum<{
+                off: "off";
+                optional: "optional";
+                required: "required";
+            }>>;
+            rememberDeviceDays: z.ZodDefault<z.ZodInt>;
+        }, z.core.$strip>>;
+        risk: z.ZodPrefault<z.ZodObject<{
+            enabled: z.ZodDefault<z.ZodBoolean>;
+            newDeviceAction: z.ZodDefault<z.ZodEnum<{
+                allow: "allow";
+                challenge: "challenge";
+            }>>;
+        }, z.core.$strip>>;
+        impersonation: z.ZodPrefault<z.ZodObject<{
+            enabled: z.ZodDefault<z.ZodBoolean>;
+            maxMinutes: z.ZodDefault<z.ZodInt>;
+            allowWrite: z.ZodDefault<z.ZodBoolean>;
+            notifyTarget: z.ZodDefault<z.ZodBoolean>;
+        }, z.core.$strip>>;
+    }, z.core.$strip>>;
+    readonly ui: SettingsModuleDef<z.ZodObject<{
+        watermark: z.ZodPrefault<z.ZodObject<{
+            enabled: z.ZodDefault<z.ZodBoolean>;
+            content: z.ZodDefault<z.ZodString>;
+            fontSize: z.ZodDefault<z.ZodInt>;
+            opacity: z.ZodDefault<z.ZodInt>;
+        }, z.core.$strip>>;
+        quickChatEnabled: z.ZodDefault<z.ZodBoolean>;
+        feedbackEntryEnabled: z.ZodDefault<z.ZodBoolean>;
+        preferencesEntryEnabled: z.ZodDefault<z.ZodBoolean>;
+        preferences: z.ZodPrefault<z.ZodType<import("../generated/api/identity.js").ApiPreferencePolicy, import("../generated/api/identity.js").ApiPreferencePolicyInput, z.core.$ZodTypeInternals<import("../generated/api/identity.js").ApiPreferencePolicy, import("../generated/api/identity.js").ApiPreferencePolicyInput>>>;
+    }, z.core.$strip>>;
+    readonly files: SettingsModuleDef<z.ZodObject<{
+        uploadValidateType: z.ZodDefault<z.ZodBoolean>;
+        uploadAllowedTypes: z.ZodDefault<z.ZodArray<z.ZodString>>;
+        uploadMaxSizeMb: z.ZodDefault<z.ZodInt>;
+        chunkThresholdMb: z.ZodDefault<z.ZodInt>;
+        chunkSizeMb: z.ZodDefault<z.ZodInt>;
+    }, z.core.$strip>>;
+    readonly terminal: SettingsModuleDef<z.ZodObject<{
+        recordingEnabled: z.ZodDefault<z.ZodBoolean>;
+        recordingRetainDays: z.ZodDefault<z.ZodInt>;
+        recordingMaxSizeMb: z.ZodDefault<z.ZodInt>;
+        uploadMaxSizeMb: z.ZodDefault<z.ZodInt>;
+    }, z.core.$strip>>;
+    readonly member: SettingsModuleDef<z.ZodObject<{
+        pointExpireDays: z.ZodDefault<z.ZodInt>;
+        birthdayPoints: z.ZodDefault<z.ZodInt>;
+        birthdayCouponId: z.ZodDefault<z.ZodNullable<z.ZodInt>>;
+        inviteRewardPoints: z.ZodDefault<z.ZodInt>;
+    }, z.core.$strip>>;
+    readonly ai: SettingsModuleDef<z.ZodObject<{
+        dailyTokenQuota: z.ZodDefault<z.ZodInt>;
+        contentFilterEnabled: z.ZodDefault<z.ZodBoolean>;
+        embeddingModel: z.ZodDefault<z.ZodString>;
+        imageModel: z.ZodDefault<z.ZodString>;
+    }, z.core.$strip>>;
+    readonly analytics: SettingsModuleDef<z.ZodObject<{
+        enabled: z.ZodDefault<z.ZodBoolean>;
+        sampleRate: z.ZodDefault<z.ZodNumber>;
+        trackPageviews: z.ZodDefault<z.ZodBoolean>;
+        trackClicks: z.ZodDefault<z.ZodBoolean>;
+        trackPerformance: z.ZodDefault<z.ZodBoolean>;
+        trackErrors: z.ZodDefault<z.ZodBoolean>;
+        trackApi: z.ZodDefault<z.ZodBoolean>;
+        maskInputs: z.ZodDefault<z.ZodBoolean>;
+        respectDnt: z.ZodDefault<z.ZodBoolean>;
+        anonymizeIp: z.ZodDefault<z.ZodBoolean>;
+        blacklistPaths: z.ZodDefault<z.ZodArray<z.ZodString>>;
+        errorIgnorePatterns: z.ZodDefault<z.ZodArray<z.ZodString>>;
+        retentionDays: z.ZodDefault<z.ZodInt>;
+        errorRetentionDays: z.ZodDefault<z.ZodInt>;
+        sessionTimeoutMinutes: z.ZodDefault<z.ZodInt>;
+        trackReplay: z.ZodDefault<z.ZodBoolean>;
+        replaySessionSampleRate: z.ZodDefault<z.ZodNumber>;
+        replayOnError: z.ZodDefault<z.ZodBoolean>;
+        replayMaskAllText: z.ZodDefault<z.ZodBoolean>;
+        replayBlockSelector: z.ZodDefault<z.ZodString>;
+        replayRetentionDays: z.ZodDefault<z.ZodInt>;
+        replayStorageQuotaMb: z.ZodDefault<z.ZodInt>;
+    }, z.core.$strip>>;
+    readonly rules: SettingsModuleDef<z.ZodObject<{
+        publishApproval: z.ZodDefault<z.ZodBoolean>;
+    }, z.core.$strip>>;
+    readonly payment: SettingsModuleDef<z.ZodObject<{
+        refundApprovalThreshold: z.ZodDefault<z.ZodInt>;
+        transferApprovalThreshold: z.ZodDefault<z.ZodInt>;
+        reconEnabled: z.ZodDefault<z.ZodBoolean>;
+        reconDownloadHour: z.ZodDefault<z.ZodInt>;
+        reconWaitMinutes: z.ZodDefault<z.ZodInt>;
+        reconDeadlineHours: z.ZodDefault<z.ZodInt>;
+        reconCaseSlaHours: z.ZodDefault<z.ZodInt>;
+        reconAlertUserIds: z.ZodDefault<z.ZodArray<z.ZodInt>>;
+        reconApprovalDefinitionId: z.ZodDefault<z.ZodNullable<z.ZodInt>>;
+    }, z.core.$strip>>;
+    readonly workflow: SettingsModuleDef<z.ZodObject<{
+        engine: z.ZodPrefault<z.ZodObject<{
+            healthWarn: z.ZodDefault<z.ZodNumber>;
+            healthCritical: z.ZodDefault<z.ZodNumber>;
+            backlogWarn: z.ZodDefault<z.ZodInt>;
+            backlogCritical: z.ZodDefault<z.ZodInt>;
+            errorRateWarn: z.ZodDefault<z.ZodNumber>;
+            errorRateCritical: z.ZodDefault<z.ZodNumber>;
+            apdexThresholdMs: z.ZodDefault<z.ZodInt>;
+        }, z.core.$strip>>;
+    }, z.core.$strip>>;
+    readonly ipAccess: SettingsModuleDef<z.ZodObject<{
+        whitelistEnabled: z.ZodDefault<z.ZodBoolean>;
+        whitelist: z.ZodDefault<z.ZodArray<z.ZodString>>;
+        blacklistEnabled: z.ZodDefault<z.ZodBoolean>;
+        blacklist: z.ZodDefault<z.ZodArray<z.ZodString>>;
+    }, z.core.$strip>>;
+    readonly drive: SettingsModuleDef<z.ZodObject<{
+        personalQuotaGb: z.ZodDefault<z.ZodNumber>;
+        departmentQuotaGb: z.ZodDefault<z.ZodNumber>;
+        teamQuotaGb: z.ZodDefault<z.ZodNumber>;
+        departmentSpaceAutoCreate: z.ZodDefault<z.ZodBoolean>;
+        recycleRetentionDays: z.ZodDefault<z.ZodInt>;
+        maxVersions: z.ZodDefault<z.ZodInt>;
+        quotaWarningPercent: z.ZodDefault<z.ZodInt>;
+        externalShareEnabled: z.ZodDefault<z.ZodBoolean>;
+        externalShareMaxDays: z.ZodDefault<z.ZodInt>;
+        externalShareRequirePassword: z.ZodDefault<z.ZodBoolean>;
+        collectMaxFileSizeMb: z.ZodDefault<z.ZodInt>;
+        shareExpiryReminderHours: z.ZodDefault<z.ZodInt>;
+        previewWatermarkEnabled: z.ZodDefault<z.ZodBoolean>;
+        alertWindowMinutes: z.ZodDefault<z.ZodInt>;
+        alertBulkDownloadCount: z.ZodDefault<z.ZodInt>;
+        alertShareFailureCount: z.ZodDefault<z.ZodInt>;
+        blockedExtensions: z.ZodDefault<z.ZodArray<z.ZodString>>;
+        thumbnailEnabled: z.ZodDefault<z.ZodBoolean>;
+        textIndexEnabled: z.ZodDefault<z.ZodBoolean>;
+    }, z.core.$strip>>;
+    readonly wiki: SettingsModuleDef<z.ZodObject<{
+        requireApproval: z.ZodDefault<z.ZodBoolean>;
+        defaultVisibility: z.ZodDefault<z.ZodEnum<{
+            private: "private";
+            public: "public";
+        }>>;
+        aiSyncEnabled: z.ZodDefault<z.ZodBoolean>;
+        aiSyncKbId: z.ZodDefault<z.ZodNullable<z.ZodInt>>;
+        commentsEnabled: z.ZodDefault<z.ZodBoolean>;
+        recycleRetentionDays: z.ZodDefault<z.ZodInt>;
+        pendingRemindHours: z.ZodDefault<z.ZodInt>;
+    }, z.core.$strip>>;
+    readonly errorTracking: SettingsModuleDef<z.ZodObject<{
+        enabled: z.ZodDefault<z.ZodBoolean>;
+        captureLoggedErrors: z.ZodDefault<z.ZodBoolean>;
+        perIssuePerMinute: z.ZodDefault<z.ZodInt>;
+        globalPerMinute: z.ZodDefault<z.ZodInt>;
+        request: z.ZodPrefault<z.ZodObject<{
+            captureBody: z.ZodDefault<z.ZodBoolean>;
+            bodyMaxBytes: z.ZodDefault<z.ZodInt>;
+            redactKeys: z.ZodDefault<z.ZodArray<z.ZodString>>;
+        }, z.core.$strip>>;
+        ignorePatterns: z.ZodDefault<z.ZodArray<z.ZodString>>;
+    }, z.core.$strip>>;
+    readonly sqlMonitor: SettingsModuleDef<z.ZodObject<{
+        enabled: z.ZodDefault<z.ZodBoolean>;
+        sampleIntervalMinutes: z.ZodDefault<z.ZodInt>;
+        sampleLimit: z.ZodDefault<z.ZodInt>;
+        queryTextMaxChars: z.ZodDefault<z.ZodInt>;
+    }, z.core.$strip>>;
+};
+export type SettingsModuleKey = keyof typeof SETTINGS_MODULES;
+export type SettingsSchemaOf<M extends SettingsModuleKey> = (typeof SETTINGS_MODULES)[M]['schema'];
+export type SettingsOf<M extends SettingsModuleKey> = z.output<SettingsSchemaOf<M>>;
+export type SettingsInputOf<M extends SettingsModuleKey> = z.input<SettingsSchemaOf<M>>;
+export declare const SETTINGS_MODULE_PATHS: {
+    readonly auth: '/auth';
+    readonly identitySecurity: '/identity-security';
+    readonly ui: '/ui';
+    readonly files: '/files';
+    readonly terminal: '/terminal';
+    readonly member: '/member';
+    readonly ai: '/ai';
+    readonly analytics: '/analytics';
+    readonly rules: '/rules';
+    readonly payment: '/payment';
+    readonly workflow: '/workflow';
+    readonly ipAccess: '/ip-access';
+    readonly drive: '/drive';
+    readonly wiki: '/wiki';
+    readonly errorTracking: '/error-tracking';
+    readonly sqlMonitor: '/sql-monitor';
+};
+export declare const SETTINGS_MODULE_KEYS: SettingsModuleKey[];
+export declare function isSettingsModuleKey(value: string): value is SettingsModuleKey;
+export declare function settingsModuleBySlug(slug: string): SettingsModuleKey | null;
+export declare function settingsLeafPaths(schema: z.ZodObject, prefix?: string): string[];
+export declare function settingsLeafFields(schema: z.ZodObject, prefix?: string): Array<{
+    path: string;
+    type: string;
+}>;
+export declare function validateSettingsRegistry(): string[];
+//# sourceMappingURL=registry.d.ts.map

package/dist/shared/settings/registry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry.d.ts","sourceRoot":"","sources":["../../src/settings/registry.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,KAAK,CAAC,MAAM,KAAK,CAAC;AAE9B,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AAsBtD,eAAO,MAAM,gBAAgB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAiByB,CAAC;AAEvD,MAAM,MAAM,iBAAiB,GAAG,MAAM,OAAO,gBAAgB,CAAC;AAC9D,MAAM,MAAM,gBAAgB,CAAC,CAAC,SAAS,iBAAiB,IAAI,CAAC,OAAO,gBAAgB,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;AAEnG,MAAM,MAAM,UAAU,CAAC,CAAC,SAAS,iBAAiB,IAAI,CAAC,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,CAAC;AAEpF,MAAM,MAAM,eAAe,CAAC,CAAC,SAAS,iBAAiB,IAAI,CAAC,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,CAAC;AAGxF,eAAO,MAAM,qBAAqB;mBAC1B,OAAO;+BACK,oBAAoB;iBAClC,KAAK;oBACF,QAAQ;uBACL,WAAW;qBACb,SAAS;iBACb,KAAK;wBACE,YAAY;oBAChB,QAAQ;sBACN,UAAU;uBACT,WAAW;uBACX,YAAY;oBACf,QAAQ;mBACT,OAAO;4BACE,iBAAiB;yBACpB,cAAc;CACgC,CAAC;AAE7D,eAAO,MAAM,oBAAoB,EAAoC,iBAAiB,EAAE,CAAC;AAEzF,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,MAAM,GAAG,KAAK,IAAI,iBAAiB,CAE7E;AAGD,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,MAAM,GAAG,iBAAiB,GAAG,IAAI,CAK3E;AAmBD,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,CAAC,CAAC,SAAS,EAAE,MAAM,SAAK,GAAG,MAAM,EAAE,CAE5E;AAGD,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,CAAC,CAAC,SAAS,EAAE,MAAM,SAAK,GAAG,KAAK,CAAC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC,CAS1G;AASD,wBAAgB,wBAAwB,IAAI,MAAM,EAAE,CAqCnD"}

package/dist/shared/settings/registry.js

@@ -0,0 +1,135 @@
+import { SETTINGS_RESERVED_MODULE_NAMES } from './constants.js';
+import { aiSettingsModule } from './modules/ai.js';
+import { analyticsSettingsModule } from './modules/analytics.js';
+import { authSettingsModule } from './modules/auth.js';
+import { driveSettingsModule } from './modules/drive.js';
+import { errorTrackingSettingsModule } from './modules/error-tracking.js';
+import { filesSettingsModule } from './modules/files.js';
+import { identitySecuritySettingsModule } from './modules/identity-security.js';
+import { ipAccessSettingsModule } from './modules/ip-access.js';
+import { memberSettingsModule } from './modules/member.js';
+import { paymentSettingsModule } from './modules/payment.js';
+import { rulesSettingsModule } from './modules/rules.js';
+import { terminalSettingsModule } from './modules/terminal.js';
+import { sqlMonitorSettingsModule } from './modules/sql-monitor.js';
+import { uiSettingsModule } from './modules/ui.js';
+import { wikiSettingsModule } from './modules/wiki.js';
+import { workflowSettingsModule } from './modules/workflow.js';
+export const SETTINGS_MODULES = {
+    auth: authSettingsModule,
+    identitySecurity: identitySecuritySettingsModule,
+    ui: uiSettingsModule,
+    files: filesSettingsModule,
+    terminal: terminalSettingsModule,
+    member: memberSettingsModule,
+    ai: aiSettingsModule,
+    analytics: analyticsSettingsModule,
+    rules: rulesSettingsModule,
+    payment: paymentSettingsModule,
+    workflow: workflowSettingsModule,
+    ipAccess: ipAccessSettingsModule,
+    drive: driveSettingsModule,
+    wiki: wikiSettingsModule,
+    errorTracking: errorTrackingSettingsModule,
+    sqlMonitor: sqlMonitorSettingsModule,
+};
+export const SETTINGS_MODULE_PATHS = {
+    auth: '/auth',
+    identitySecurity: '/identity-security',
+    ui: '/ui',
+    files: '/files',
+    terminal: '/terminal',
+    member: '/member',
+    ai: '/ai',
+    analytics: '/analytics',
+    rules: '/rules',
+    payment: '/payment',
+    workflow: '/workflow',
+    ipAccess: '/ip-access',
+    drive: '/drive',
+    wiki: '/wiki',
+    errorTracking: '/error-tracking',
+    sqlMonitor: '/sql-monitor',
+};
+export const SETTINGS_MODULE_KEYS = Object.keys(SETTINGS_MODULES);
+export function isSettingsModuleKey(value) {
+    return Object.hasOwn(SETTINGS_MODULES, value);
+}
+export function settingsModuleBySlug(slug) {
+    for (const key of SETTINGS_MODULE_KEYS) {
+        if (SETTINGS_MODULE_PATHS[key] === `/${slug}`)
+            return key;
+    }
+    return null;
+}
+const SENSITIVE_FIELD_TOKENS = ['password', 'secret', 'token', 'apikey', 'api_key', 'privatekey', 'private_key', 'credential'];
+function unwrap(field) {
+    let current = field;
+    for (;;) {
+        const def = current.def;
+        if ((def.type === 'default' || def.type === 'prefault' || def.type === 'optional' || def.type === 'nullable') && def.innerType) {
+            current = def.innerType;
+            continue;
+        }
+        return current;
+    }
+}
+export function settingsLeafPaths(schema, prefix = '') {
+    return settingsLeafFields(schema, prefix).map((leaf) => leaf.path);
+}
+export function settingsLeafFields(schema, prefix = '') {
+    const leaves = [];
+    for (const [key, field] of Object.entries(schema.shape)) {
+        const inner = unwrap(field);
+        const path = prefix ? `${prefix}.${key}` : key;
+        if (inner.def.type === 'object')
+            leaves.push(...settingsLeafFields(inner, path));
+        else
+            leaves.push({ path, type: String(inner.def.type) });
+    }
+    return leaves;
+}
+export function validateSettingsRegistry() {
+    const errors = [];
+    const seenPaths = new Set();
+    for (const key of SETTINGS_MODULE_KEYS) {
+        const def = SETTINGS_MODULES[key];
+        const path = SETTINGS_MODULE_PATHS[key];
+        if (SETTINGS_RESERVED_MODULE_NAMES.includes(key))
+            errors.push(`[${key}] 模块名是保留字`);
+        if (!/^\/[a-z][a-z0-9-]*$/.test(path))
+            errors.push(`[${key}] 路径片段必须为 kebab-case：${path}`);
+        if (seenPaths.has(path))
+            errors.push(`[${key}] 路径片段重复：${path}`);
+        seenPaths.add(path);
+        if (SETTINGS_RESERVED_MODULE_NAMES.includes(path.slice(1)))
+            errors.push(`[${key}] 路径片段是保留字：${path}`);
+        const first = def.schema.safeParse({});
+        if (!first.success) {
+            errors.push(`[${key}] 空文档解析失败（缺默认值或嵌套对象缺 .prefault({})）：${first.error.issues.map((i) => i.path.join('.')).join(', ')}`);
+        }
+        else {
+            const second = def.schema.safeParse(first.data);
+            if (!second.success || JSON.stringify(second.data) !== JSON.stringify(first.data)) {
+                errors.push(`[${key}] 默认文档解析不幂等`);
+            }
+        }
+        const fields = Object.keys(def.schema.shape);
+        if (fields.length === 0)
+            errors.push(`[${key}] schema 没有任何字段`);
+        for (const leaf of settingsLeafFields(def.schema)) {
+            if (leaf.type !== 'string' && leaf.type !== 'array')
+                continue;
+            const name = leaf.path.slice(leaf.path.lastIndexOf('.') + 1).toLowerCase();
+            if (SENSITIVE_FIELD_TOKENS.some((token) => name.includes(token))) {
+                errors.push(`[${key}.${leaf.path}] 字段名命中敏感词，设置文档不得承载凭证`);
+            }
+        }
+        for (const field of Object.keys(def.visibility ?? {})) {
+            if (!fields.includes(field))
+                errors.push(`[${key}] visibility 引用了不存在的字段：${field}`);
+        }
+    }
+    return errors;
+}
+//# sourceMappingURL=registry.js.map

package/dist/shared/settings/registry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry.js","sourceRoot":"","sources":["../../src/settings/registry.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,8BAA8B,EAAE,MAAM,aAAa,CAAC;AAE7D,OAAO,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAChD,OAAO,EAAE,uBAAuB,EAAE,MAAM,qBAAqB,CAAC;AAC9D,OAAO,EAAE,kBAAkB,EAAE,MAAM,gBAAgB,CAAC;AACpD,OAAO,EAAE,mBAAmB,EAAE,MAAM,iBAAiB,CAAC;AACtD,OAAO,EAAE,2BAA2B,EAAE,MAAM,0BAA0B,CAAC;AACvE,OAAO,EAAE,mBAAmB,EAAE,MAAM,iBAAiB,CAAC;AACtD,OAAO,EAAE,8BAA8B,EAAE,MAAM,6BAA6B,CAAC;AAC7E,OAAO,EAAE,sBAAsB,EAAE,MAAM,qBAAqB,CAAC;AAC7D,OAAO,EAAE,oBAAoB,EAAE,MAAM,kBAAkB,CAAC;AACxD,OAAO,EAAE,qBAAqB,EAAE,MAAM,mBAAmB,CAAC;AAC1D,OAAO,EAAE,mBAAmB,EAAE,MAAM,iBAAiB,CAAC;AACtD,OAAO,EAAE,sBAAsB,EAAE,MAAM,oBAAoB,CAAC;AAC5D,OAAO,EAAE,wBAAwB,EAAE,MAAM,uBAAuB,CAAC;AACjE,OAAO,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAChD,OAAO,EAAE,kBAAkB,EAAE,MAAM,gBAAgB,CAAC;AACpD,OAAO,EAAE,sBAAsB,EAAE,MAAM,oBAAoB,CAAC;AAM5D,MAAM,CAAC,MAAM,gBAAgB,GAAG;IAC9B,IAAI,EAAE,kBAAkB;IACxB,gBAAgB,EAAE,8BAA8B;IAChD,EAAE,EAAE,gBAAgB;IACpB,KAAK,EAAE,mBAAmB;IAC1B,QAAQ,EAAE,sBAAsB;IAChC,MAAM,EAAE,oBAAoB;IAC5B,EAAE,EAAE,gBAAgB;IACpB,SAAS,EAAE,uBAAuB;IAClC,KAAK,EAAE,mBAAmB;IAC1B,OAAO,EAAE,qBAAqB;IAC9B,QAAQ,EAAE,sBAAsB;IAChC,QAAQ,EAAE,sBAAsB;IAChC,KAAK,EAAE,mBAAmB;IAC1B,IAAI,EAAE,kBAAkB;IACxB,aAAa,EAAE,2BAA2B;IAC1C,UAAU,EAAE,wBAAwB;CACgB,CAAC;AAUvD,MAAM,CAAC,MAAM,qBAAqB,GAAG;IACnC,IAAI,EAAE,OAAO;IACb,gBAAgB,EAAE,oBAAoB;IACtC,EAAE,EAAE,KAAK;IACT,KAAK,EAAE,QAAQ;IACf,QAAQ,EAAE,WAAW;IACrB,MAAM,EAAE,SAAS;IACjB,EAAE,EAAE,KAAK;IACT,SAAS,EAAE,YAAY;IACvB,KAAK,EAAE,QAAQ;IACf,OAAO,EAAE,UAAU;IACnB,QAAQ,EAAE,WAAW;IACrB,QAAQ,EAAE,YAAY;IACtB,KAAK,EAAE,QAAQ;IACf,IAAI,EAAE,OAAO;IACb,aAAa,EAAE,iBAAiB;IAChC,UAAU,EAAE,cAAc;CACgC,CAAC;AAE7D,MAAM,CAAC,MAAM,oBAAoB,GAAG,MAAM,CAAC,IAAI,CAAC,gBAAgB,CAAwB,CAAC;AAEzF,MAAM,UAAU,mBAAmB,CAAC,KAAa;IAC/C,OAAO,MAAM,CAAC,MAAM,CAAC,gBAAgB,EAAE,KAAK,CAAC,CAAC;AAChD,CAAC;AAGD,MAAM,UAAU,oBAAoB,CAAC,IAAY;IAC/C,KAAK,MAAM,GAAG,IAAI,oBAAoB,EAAE,CAAC;QACvC,IAAI,qBAAqB,CAAC,GAAG,CAAC,KAAK,IAAI,IAAI,EAAE;YAAE,OAAO,GAAG,CAAC;IAC5D,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAGD,MAAM,sBAAsB,GAAG,CAAC,UAAU,EAAE,QAAQ,EAAE,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,YAAY,EAAE,aAAa,EAAE,YAAY,CAAC,CAAC;AAG/H,SAAS,MAAM,CAAC,KAAgB;IAC9B,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,SAAS,CAAC;QACR,MAAM,GAAG,GAAG,OAAO,CAAC,GAA+C,CAAC;QACpE,IAAI,CAAC,GAAG,CAAC,IAAI,KAAK,SAAS,IAAI,GAAG,CAAC,IAAI,KAAK,UAAU,IAAI,GAAG,CAAC,IAAI,KAAK,UAAU,IAAI,GAAG,CAAC,IAAI,KAAK,UAAU,CAAC,IAAI,GAAG,CAAC,SAAS,EAAE,CAAC;YAC/H,OAAO,GAAG,GAAG,CAAC,SAAS,CAAC;YACxB,SAAS;QACX,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC;AACH,CAAC;AAGD,MAAM,UAAU,iBAAiB,CAAC,MAAmB,EAAE,MAAM,GAAG,EAAE;IAChE,OAAO,kBAAkB,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACrE,CAAC;AAGD,MAAM,UAAU,kBAAkB,CAAC,MAAmB,EAAE,MAAM,GAAG,EAAE;IACjE,MAAM,MAAM,GAA0C,EAAE,CAAC;IACzD,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,KAAkC,CAAC,EAAE,CAAC;QACrF,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;QAC5B,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,CAAC,GAAG,MAAM,IAAI,GAAG,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC;QAC/C,IAAI,KAAK,CAAC,GAAG,CAAC,IAAI,KAAK,QAAQ;YAAE,MAAM,CAAC,IAAI,CAAC,GAAG,kBAAkB,CAAC,KAAoB,EAAE,IAAI,CAAC,CAAC,CAAC;;YAC3F,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC3D,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AASD,MAAM,UAAU,wBAAwB;IACtC,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,MAAM,SAAS,GAAG,IAAI,GAAG,EAAU,CAAC;IACpC,KAAK,MAAM,GAAG,IAAI,oBAAoB,EAAE,CAAC;QACvC,MAAM,GAAG,GAAsB,gBAAgB,CAAC,GAAG,CAAC,CAAC;QACrD,MAAM,IAAI,GAAG,qBAAqB,CAAC,GAAG,CAAC,CAAC;QACxC,IAAK,8BAAoD,CAAC,QAAQ,CAAC,GAAG,CAAC;YAAE,MAAM,CAAC,IAAI,CAAC,IAAI,GAAG,WAAW,CAAC,CAAC;QACzG,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,MAAM,CAAC,IAAI,CAAC,IAAI,GAAG,wBAAwB,IAAI,EAAE,CAAC,CAAC;QAC1F,IAAI,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,MAAM,CAAC,IAAI,CAAC,IAAI,GAAG,YAAY,IAAI,EAAE,CAAC,CAAC;QAChE,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACpB,IAAK,8BAAoD,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YAAE,MAAM,CAAC,IAAI,CAAC,IAAI,GAAG,cAAc,IAAI,EAAE,CAAC,CAAC;QAE5H,MAAM,KAAK,GAAG,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;QACvC,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;YACnB,MAAM,CAAC,IAAI,CAAC,IAAI,GAAG,uCAAuC,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC1H,CAAC;aAAM,CAAC;YACN,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAChD,IAAI,CAAC,MAAM,CAAC,OAAO,IAAI,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;gBAClF,MAAM,CAAC,IAAI,CAAC,IAAI,GAAG,aAAa,CAAC,CAAC;YACpC,CAAC;QACH,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAC7C,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;YAAE,MAAM,CAAC,IAAI,CAAC,IAAI,GAAG,iBAAiB,CAAC,CAAC;QAE/D,KAAK,MAAM,IAAI,IAAI,kBAAkB,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;YAClD,IAAI,IAAI,CAAC,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,IAAI,KAAK,OAAO;gBAAE,SAAS;YAC9D,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;YAC3E,IAAI,sBAAsB,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;gBACjE,MAAM,CAAC,IAAI,CAAC,IAAI,GAAG,IAAI,IAAI,CAAC,IAAI,uBAAuB,CAAC,CAAC;YAC3D,CAAC;QACH,CAAC;QACD,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,UAAU,IAAI,EAAE,CAAC,EAAE,CAAC;YACtD,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;gBAAE,MAAM,CAAC,IAAI,CAAC,IAAI,GAAG,0BAA0B,KAAK,EAAE,CAAC,CAAC;QACrF,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/shared/settings/resolve.d.ts

@@ -0,0 +1,15 @@
+import type { SettingsVisibility } from './constants.js';
+import { type SettingsModuleKey, type SettingsOf } from './registry.js';
+export type SettingsDoc = Record<string, unknown>;
+export declare function mergeSettingsLayers(base: SettingsDoc, override: SettingsDoc): SettingsDoc;
+export interface ResolvedSettings<M extends SettingsModuleKey> {
+    readonly value: SettingsOf<M>;
+    readonly degraded: boolean;
+    readonly droppedPaths: readonly string[];
+}
+export declare function resolveSettings<M extends SettingsModuleKey>(module: M, layers: readonly SettingsDoc[]): ResolvedSettings<M>;
+export declare function diffSettings(effective: SettingsDoc, inherited: SettingsDoc): SettingsDoc;
+export declare function settingsOverriddenPaths(own: SettingsDoc, prefix?: string): string[];
+export declare function pickSettingsFields<M extends SettingsModuleKey>(module: M, effective: SettingsOf<M>, levels: readonly SettingsVisibility[]): Partial<SettingsOf<M>>;
+export declare function settingsModuleHasVisibility(module: SettingsModuleKey, levels: readonly SettingsVisibility[]): boolean;
+//# sourceMappingURL=resolve.d.ts.map

package/dist/shared/settings/resolve.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"resolve.d.ts","sourceRoot":"","sources":["../../src/settings/resolve.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AACtD,OAAO,EAAoB,KAAK,iBAAiB,EAAE,KAAK,UAAU,EAAE,MAAM,YAAY,CAAC;AAGvF,MAAM,MAAM,WAAW,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AAUlD,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,WAAW,EAAE,QAAQ,EAAE,WAAW,GAAG,WAAW,CAQzF;AAED,MAAM,WAAW,gBAAgB,CAAC,CAAC,SAAS,iBAAiB;IAC3D,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC,CAAC,CAAC;IAE9B,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC;IAE3B,QAAQ,CAAC,YAAY,EAAE,SAAS,MAAM,EAAE,CAAC;CAC1C;AAoBD,wBAAgB,eAAe,CAAC,CAAC,SAAS,iBAAiB,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,EAAE,SAAS,WAAW,EAAE,GAAG,gBAAgB,CAAC,CAAC,CAAC,CAa3H;AAMD,wBAAgB,YAAY,CAAC,SAAS,EAAE,WAAW,EAAE,SAAS,EAAE,WAAW,GAAG,WAAW,CAYxF;AAGD,wBAAgB,uBAAuB,CAAC,GAAG,EAAE,WAAW,EAAE,MAAM,SAAK,GAAG,MAAM,EAAE,CAQ/E;AAGD,wBAAgB,kBAAkB,CAAC,CAAC,SAAS,iBAAiB,EAC5D,MAAM,EAAE,CAAC,EACT,SAAS,EAAE,UAAU,CAAC,CAAC,CAAC,EACxB,MAAM,EAAE,SAAS,kBAAkB,EAAE,GACpC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAOxB;AAGD,wBAAgB,2BAA2B,CAAC,MAAM,EAAE,iBAAiB,EAAE,MAAM,EAAE,SAAS,kBAAkB,EAAE,GAAG,OAAO,CAGrH"}

package/dist/shared/settings/resolve.js

@@ -0,0 +1,82 @@
+import { isPlainObject } from '../core/json.js';
+import { SETTINGS_MODULES } from './registry.js';
+function sameLeaf(a, b) {
+    return JSON.stringify(a) === JSON.stringify(b);
+}
+export function mergeSettingsLayers(base, override) {
+    const result = { ...base };
+    for (const [key, value] of Object.entries(override)) {
+        if (value === undefined)
+            continue;
+        const current = result[key];
+        result[key] = isPlainObject(current) && isPlainObject(value) ? mergeSettingsLayers(current, value) : value;
+    }
+    return result;
+}
+function deletePath(doc, path) {
+    if (path.length === 0)
+        return;
+    let cursor = doc;
+    for (const segment of path.slice(0, -1)) {
+        if (!isPlainObject(cursor))
+            return;
+        cursor = cursor[String(segment)];
+    }
+    if (isPlainObject(cursor))
+        delete cursor[String(path[path.length - 1])];
+}
+export function resolveSettings(module, layers) {
+    const schema = SETTINGS_MODULES[module].schema;
+    const merged = layers.reduce((acc, layer) => mergeSettingsLayers(acc, layer), {});
+    const first = schema.safeParse(merged);
+    if (first.success)
+        return { value: first.data, degraded: false, droppedPaths: [] };
+    const dropped = [...new Set(first.error.issues.map((issue) => issue.path.map(String).join('.')))].filter(Boolean);
+    const pruned = structuredClone(merged);
+    for (const issue of first.error.issues)
+        deletePath(pruned, issue.path);
+    const second = schema.safeParse(pruned);
+    if (second.success)
+        return { value: second.data, degraded: true, droppedPaths: dropped };
+    return { value: schema.parse({}), degraded: true, droppedPaths: dropped };
+}
+export function diffSettings(effective, inherited) {
+    const result = {};
+    for (const [key, value] of Object.entries(effective)) {
+        const base = inherited[key];
+        if (isPlainObject(value) && isPlainObject(base)) {
+            const nested = diffSettings(value, base);
+            if (Object.keys(nested).length > 0)
+                result[key] = nested;
+        }
+        else if (!sameLeaf(value, base)) {
+            result[key] = value;
+        }
+    }
+    return result;
+}
+export function settingsOverriddenPaths(own, prefix = '') {
+    const paths = [];
+    for (const [key, value] of Object.entries(own)) {
+        const path = prefix ? `${prefix}.${key}` : key;
+        if (isPlainObject(value))
+            paths.push(...settingsOverriddenPaths(value, path));
+        else if (value !== undefined)
+            paths.push(path);
+    }
+    return paths;
+}
+export function pickSettingsFields(module, effective, levels) {
+    const visibility = (SETTINGS_MODULES[module].visibility ?? {});
+    const result = {};
+    for (const [key, value] of Object.entries(effective)) {
+        if (levels.includes(visibility[key] ?? 'admin'))
+            result[key] = value;
+    }
+    return result;
+}
+export function settingsModuleHasVisibility(module, levels) {
+    const visibility = SETTINGS_MODULES[module].visibility ?? {};
+    return Object.values(visibility).some((level) => level !== undefined && levels.includes(level));
+}
+//# sourceMappingURL=resolve.js.map

package/dist/shared/settings/resolve.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"resolve.js","sourceRoot":"","sources":["../../src/settings/resolve.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAE7C,OAAO,EAAE,gBAAgB,EAA2C,MAAM,YAAY,CAAC;AAKvF,SAAS,QAAQ,CAAC,CAAU,EAAE,CAAU;IACtC,OAAO,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;AACjD,CAAC;AAMD,MAAM,UAAU,mBAAmB,CAAC,IAAiB,EAAE,QAAqB;IAC1E,MAAM,MAAM,GAAgB,EAAE,GAAG,IAAI,EAAE,CAAC;IACxC,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;QACpD,IAAI,KAAK,KAAK,SAAS;YAAE,SAAS;QAClC,MAAM,OAAO,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;QAC5B,MAAM,CAAC,GAAG,CAAC,GAAG,aAAa,CAAC,OAAO,CAAC,IAAI,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,mBAAmB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;IAC7G,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAUD,SAAS,UAAU,CAAC,GAAgB,EAAE,IAA4B;IAChE,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO;IAC9B,IAAI,MAAM,GAAY,GAAG,CAAC;IAC1B,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACxC,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC;YAAE,OAAO;QACnC,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC;IACnC,CAAC;IACD,IAAI,aAAa,CAAC,MAAM,CAAC;QAAE,OAAO,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;AAC1E,CAAC;AAUD,MAAM,UAAU,eAAe,CAA8B,MAAS,EAAE,MAA8B;IACpG,MAAM,MAAM,GAAG,gBAAgB,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC;IAC/C,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAc,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE,CAAC,mBAAmB,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC;IAC/F,MAAM,KAAK,GAAG,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;IACvC,IAAI,KAAK,CAAC,OAAO;QAAE,OAAO,EAAE,KAAK,EAAE,KAAK,CAAC,IAAqB,EAAE,QAAQ,EAAE,KAAK,EAAE,YAAY,EAAE,EAAE,EAAE,CAAC;IAEpG,MAAM,OAAO,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAClH,MAAM,MAAM,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC;IACvC,KAAK,MAAM,KAAK,IAAI,KAAK,CAAC,KAAK,CAAC,MAAM;QAAE,UAAU,CAAC,MAAM,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;IACvE,MAAM,MAAM,GAAG,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;IACxC,IAAI,MAAM,CAAC,OAAO;QAAE,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,IAAqB,EAAE,QAAQ,EAAE,IAAI,EAAE,YAAY,EAAE,OAAO,EAAE,CAAC;IAE1G,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,CAAkB,EAAE,QAAQ,EAAE,IAAI,EAAE,YAAY,EAAE,OAAO,EAAE,CAAC;AAC7F,CAAC;AAMD,MAAM,UAAU,YAAY,CAAC,SAAsB,EAAE,SAAsB;IACzE,MAAM,MAAM,GAAgB,EAAE,CAAC;IAC/B,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;QACrD,MAAM,IAAI,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC;QAC5B,IAAI,aAAa,CAAC,KAAK,CAAC,IAAI,aAAa,CAAC,IAAI,CAAC,EAAE,CAAC;YAChD,MAAM,MAAM,GAAG,YAAY,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;YACzC,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,MAAM,GAAG,CAAC;gBAAE,MAAM,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC;QAC3D,CAAC;aAAM,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,IAAI,CAAC,EAAE,CAAC;YAClC,MAAM,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;QACtB,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAGD,MAAM,UAAU,uBAAuB,CAAC,GAAgB,EAAE,MAAM,GAAG,EAAE;IACnE,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QAC/C,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,CAAC,GAAG,MAAM,IAAI,GAAG,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC;QAC/C,IAAI,aAAa,CAAC,KAAK,CAAC;YAAE,KAAK,CAAC,IAAI,CAAC,GAAG,uBAAuB,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC;aACzE,IAAI,KAAK,KAAK,SAAS;YAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACjD,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAGD,MAAM,UAAU,kBAAkB,CAChC,MAAS,EACT,SAAwB,EACxB,MAAqC;IAErC,MAAM,UAAU,GAAG,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC,UAAU,IAAI,EAAE,CAAgD,CAAC;IAC9G,MAAM,MAAM,GAAgB,EAAE,CAAC;IAC/B,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,SAAwB,CAAC,EAAE,CAAC;QACpE,IAAI,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,OAAO,CAAC;YAAE,MAAM,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;IACvE,CAAC;IACD,OAAO,MAAgC,CAAC;AAC1C,CAAC;AAGD,MAAM,UAAU,2BAA2B,CAAC,MAAyB,EAAE,MAAqC;IAC1G,MAAM,UAAU,GAAG,gBAAgB,CAAC,MAAM,CAAC,CAAC,UAAU,IAAI,EAAE,CAAC;IAC7D,OAAO,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,KAAK,SAAS,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC;AAClG,CAAC"}

package/dist/shared/settings/security-policy.d.ts

@@ -0,0 +1,8 @@
+import type { ApiPasswordPolicy, ApiSessionPolicy } from '../generated/api/settings.js';
+export type PasswordPolicy = ApiPasswordPolicy;
+export type SessionConcurrencyPolicy = ApiSessionPolicy;
+export type PasswordRules = Pick<PasswordPolicy, 'minLength' | 'requireUppercase' | 'requireSpecialChar'>;
+export declare function validatePassword(password: string, policy: PasswordRules): string | null;
+export declare function formatPasswordPolicyHint(policy: PasswordRules | null | undefined): string;
+export declare function formatSessionPolicyHint(policy: SessionConcurrencyPolicy): string;
+//# sourceMappingURL=security-policy.d.ts.map

package/dist/shared/settings/security-policy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"security-policy.d.ts","sourceRoot":"","sources":["../../src/settings/security-policy.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,MAAM,2BAA2B,CAAC;AACrF,MAAM,MAAM,cAAc,GAAG,iBAAiB,CAAC;AAC/C,MAAM,MAAM,wBAAwB,GAAG,gBAAgB,CAAC;AACxD,MAAM,MAAM,aAAa,GAAG,IAAI,CAAC,cAAc,EAAE,WAAW,GAAG,kBAAkB,GAAG,oBAAoB,CAAC,CAAC;AAE1G,wBAAgB,gBAAgB,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,aAAa,GAAG,MAAM,GAAG,IAAI,CAWvF;AAGD,wBAAgB,wBAAwB,CAAC,MAAM,EAAE,aAAa,GAAG,IAAI,GAAG,SAAS,GAAG,MAAM,CAMzF;AAMD,wBAAgB,uBAAuB,CAAC,MAAM,EAAE,wBAAwB,GAAG,MAAM,CAQhF"}

package/dist/shared/settings/security-policy.js

@@ -0,0 +1,33 @@
+export function validatePassword(password, policy) {
+    if (password.length < policy.minLength) {
+        return `密码长度不能少于 ${policy.minLength} 位`;
+    }
+    if (policy.requireUppercase && !/[A-Z]/.test(password)) {
+        return '密码必须包含至少一个大写字母';
+    }
+    if (policy.requireSpecialChar && !/[!@#$%^&*()_+\-=[\]{};':"\\|,.<>/?]/.test(password)) {
+        return '密码必须包含至少一个特殊字符';
+    }
+    return null;
+}
+export function formatPasswordPolicyHint(policy) {
+    if (!policy)
+        return '至少 6 位';
+    const parts = [`至少 ${policy.minLength} 位`];
+    if (policy.requireUppercase)
+        parts.push('包含大写字母');
+    if (policy.requireSpecialChar)
+        parts.push('包含特殊字符');
+    return parts.join('、');
+}
+export function formatSessionPolicyHint(policy) {
+    if (policy.maxSessions <= 0)
+        return '不限制同一账号的同时在线数量。';
+    const where = policy.scope === 'per-client' ? '每种终端（网页 / 移动审批 / 桌面端）各' : '';
+    const limit = policy.maxSessions === 1 ? '只能在一处登录' : `最多同时在 ${policy.maxSessions} 处登录`;
+    const action = policy.exceedAction === 'kick-oldest'
+        ? '新登录会挤掉最早登录的会话，被挤设备会收到提示'
+        : '超出后新登录会被拒绝，可在登录页选择下线其它设备后再登录';
+    return `同一账号${where}${limit}；${action}。`;
+}
+//# sourceMappingURL=security-policy.js.map

package/dist/shared/settings/security-policy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"security-policy.js","sourceRoot":"","sources":["../../src/settings/security-policy.ts"],"names":[],"mappings":"AAKA,MAAM,UAAU,gBAAgB,CAAC,QAAgB,EAAE,MAAqB;IACtE,IAAI,QAAQ,CAAC,MAAM,GAAG,MAAM,CAAC,SAAS,EAAE,CAAC;QACvC,OAAO,YAAY,MAAM,CAAC,SAAS,IAAI,CAAC;IAC1C,CAAC;IACD,IAAI,MAAM,CAAC,gBAAgB,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;QACvD,OAAO,gBAAgB,CAAC;IAC1B,CAAC;IACD,IAAI,MAAM,CAAC,kBAAkB,IAAI,CAAC,qCAAqC,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;QACvF,OAAO,gBAAgB,CAAC;IAC1B,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAGD,MAAM,UAAU,wBAAwB,CAAC,MAAwC;IAC/E,IAAI,CAAC,MAAM;QAAE,OAAO,QAAQ,CAAC;IAC7B,MAAM,KAAK,GAAa,CAAC,MAAM,MAAM,CAAC,SAAS,IAAI,CAAC,CAAC;IACrD,IAAI,MAAM,CAAC,gBAAgB;QAAE,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAClD,IAAI,MAAM,CAAC,kBAAkB;QAAE,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACpD,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACzB,CAAC;AAMD,MAAM,UAAU,uBAAuB,CAAC,MAAgC;IACtE,IAAI,MAAM,CAAC,WAAW,IAAI,CAAC;QAAE,OAAO,iBAAiB,CAAC;IACtD,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,KAAK,YAAY,CAAC,CAAC,CAAC,wBAAwB,CAAC,CAAC,CAAC,EAAE,CAAC;IAC5E,MAAM,KAAK,GAAG,MAAM,CAAC,WAAW,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,MAAM,CAAC,WAAW,MAAM,CAAC;IACvF,MAAM,MAAM,GAAG,MAAM,CAAC,YAAY,KAAK,aAAa;QAClD,CAAC,CAAC,yBAAyB;QAC3B,CAAC,CAAC,8BAA8B,CAAC;IACnC,OAAO,OAAO,KAAK,GAAG,KAAK,IAAI,MAAM,GAAG,CAAC;AAC3C,CAAC"}

package/dist/shared/settings/upload-types.d.ts

@@ -0,0 +1,2 @@
+export declare const DEFAULT_UPLOAD_ALLOWED_TYPES: readonly ['image/*', 'video/*', 'audio/*', 'application/pdf', 'text/plain', 'text/csv', 'text/vtt', 'application/zip', 'application/x-zip-compressed', 'application/vnd.openxmlformats-officedocument.spreadsheetml.sheet', 'application/vnd.openxmlformats-officedocument.wordprocessingml.document', 'application/vnd.openxmlformats-officedocument.presentationml.presentation', 'application/vnd.ms-excel', 'application/msword', 'application/vnd.ms-powerpoint'];
+//# sourceMappingURL=upload-types.d.ts.map

package/dist/shared/settings/upload-types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"upload-types.d.ts","sourceRoot":"","sources":["../../src/settings/upload-types.ts"],"names":[],"mappings":"AACA,eAAO,MAAM,4BAA4B,YACvC,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,iBAAiB,EAAE,YAAY,EAAE,UAAU,EAAE,UAAU,EACxF,iBAAiB,EAAE,8BAA8B,EACjD,mEAAmE,EACnE,yEAAyE,EACzE,2EAA2E,EAC3E,0BAA0B,EAAE,oBAAoB,EAAE,+BAA+B,CACzE,CAAC"}

package/dist/shared/settings/upload-types.js

@@ -0,0 +1,9 @@
+export const DEFAULT_UPLOAD_ALLOWED_TYPES = [
+    'image/*', 'video/*', 'audio/*', 'application/pdf', 'text/plain', 'text/csv', 'text/vtt',
+    'application/zip', 'application/x-zip-compressed',
+    'application/vnd.openxmlformats-officedocument.spreadsheetml.sheet',
+    'application/vnd.openxmlformats-officedocument.wordprocessingml.document',
+    'application/vnd.openxmlformats-officedocument.presentationml.presentation',
+    'application/vnd.ms-excel', 'application/msword', 'application/vnd.ms-powerpoint',
+];
+//# sourceMappingURL=upload-types.js.map

package/dist/shared/settings/upload-types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"upload-types.js","sourceRoot":"","sources":["../../src/settings/upload-types.ts"],"names":[],"mappings":"AACA,MAAM,CAAC,MAAM,4BAA4B,GAAG;IAC1C,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,iBAAiB,EAAE,YAAY,EAAE,UAAU,EAAE,UAAU;IACxF,iBAAiB,EAAE,8BAA8B;IACjD,mEAAmE;IACnE,yEAAyE;IACzE,2EAA2E;IAC3E,0BAA0B,EAAE,oBAAoB,EAAE,+BAA+B;CACzE,CAAC"}