@h-ai/serv 0.1.0-alpha.73 → 0.1.0-alpha.75

package/README.en.md

@@ -228,6 +228,8 @@ Empty POSTs still send an authenticated envelope for empty plaintext. GET/HEAD c
 
 Set `transport.maxPlaintextBytes` for both request and response JSON plaintext, measured in UTF-8 bytes: default 1 MiB, integer range 1 KiB–64 MiB. Clients learn the server limit during key exchange. `resolveTransportBodyLimits()` derives encrypted/proxy bytes as twice the plaintext limit plus 32 KiB. Handshake, public-key, header and replay constraints remain independent. Oversized streams are cancelled and readers released: requests return 413; oversized responses return an encrypted 500 capacity error, recognized as `TransportBodyTooLargeError` / `hai:crypto:070`. [Transport capacity and upgrade](../crypto/TRANSPORT-CAPACITY.md)。
 
+Ordinary routes retain `transport.maxPlaintextBytes` (auto/omitted: 1 MiB). Declare Feedback report intake, evidence, attachments and ZIP download capacity separately using `routePlaintextBytes` and `feedback.budget.maxTransportBytes`; `*` matches one complete path segment and explicit host route values take precedence. Handshakes, adapter-node and proxies use the maximum route capacity. HTTP adapters admit at most 2 explicitly declared material requests above 1 MiB and a separate 16 ordinary business requests, releasing admission after the entire response or failure. Busy admission returns 503 / `hai:crypto:072`; business writes are not automatically replayed.
+
 serv/kit return an encrypted HTTP 400 time error for an out-of-window message only after request binding, signature and MAC verification. The client throws `TransportTimeError` (`hai:crypto:071`) with advice to synchronize device/server clocks and refresh. `api-client` maps it to `VALIDATION_FAILED` and preserves `cause.transportCode`. Requests are not replayed automatically and replay windows remain unchanged; tampered or unauthenticated messages retain the generic authentication failure.
 
 #### Token authentication (`iam` / `refreshCookie`)
@@ -744,6 +746,8 @@ See policy, defaults and recovery boundaries in [IAM](../iam/README.en.md).
 
 `session.endOnPageHide` defaults to `false`. Hosts call `actions.bindPageExit({ enabled: config.session.endOnPageHide })` and invoke its returned cleanup on unmount; standard admin/H5/fullstack templates already bind it. A non-BFCache `pagehide` (including reload and full document navigation) makes a best effort POST to `/auth/session/close`, revoking the held access and related refresh through the existing CSRF/encrypted transport with `keepalive` and no automatic refresh. This response does not clear cookies/local credentials, avoiding a late old response overwriting a new login. Explicit logout still revokes and clears current credentials normally. Browsers may omit page exit requests; configure server `idleTimeout`/`absoluteTimeout` as appropriate. Immediate revocation on browser close is not guaranteed.
 
+## Transport capacity and module budgets
+
 ## Development and testing
 
 ```bash

package/README.ja.md

@@ -228,6 +228,8 @@ const app = serv.createApp({
 
 `transport.maxPlaintextBytes` でリクエストとレスポンスの JSON 平文容量を共通設定します。単位は UTF-8 バイト、既定値は 1 MiB、有効範囲は 1 KiB～64 MiB の整数です。クライアントは鍵交換で上限を取得し、`resolveTransportBodyLimits()` が暗号文とプロキシ容量（平文の 2 倍 + 32 KiB）を算出します。鍵交換、公開鍵、認証ヘッダー、防リプレイ制約は独立です。超過時は元ストリームを停止して reader を解放します。要求は 413、応答は暗号化された 500 容量エラーとなり、`TransportBodyTooLargeError` / `hai:crypto:070` で識別できます。 [Transport capacity and upgrade](../crypto/TRANSPORT-CAPACITY.md)。
 
+通常業務は `transport.maxPlaintextBytes`（auto/省略は 1 MiB）を維持します。Feedback の受理・証拠・添付・ZIP ダウンロードは `routePlaintextBytes` と `feedback.budget.maxTransportBytes` で別途宣言します。`*` は完全な1パス区間のみ一致し、ホストの明示値が優先です。ハンドシェイク、adapter-node、プロキシは経路の最大値を使用します。HTTP アダプターは個別宣言された 1 MiB 超の資料経路を最大2件、通常業務を別枠で16件まで許可し、応答完了・失敗時に解放します。混雑は503 / `hai:crypto:072` を返し、業務書込は自動再送しません。
+
 serv/kit は要求の結合、署名、MAC を検証した後、時間窓を超えた報文に暗号化した HTTP 400 時刻エラーを返します。クライアントは `TransportTimeError`（`hai:crypto:071`）で端末とサーバーの時刻同期・再読み込みを案内します。`api-client` は `VALIDATION_FAILED` に変換し `cause.transportCode` に原因を保持します。自動再送やリプレイ時間窓の緩和は行わず、改ざん・未認証の要求は従来の認証エラーです。
 
 #### Token 認証（`iam` / `refreshCookie`）
@@ -744,6 +746,10 @@ audit の初期化後、procedure は検証済み主体・信頼できる接続
 
 `session.endOnPageHide` の既定値は `false` です。ホストは `actions.bindPageExit({ enabled: config.session.endOnPageHide })` を呼び、破棄時に戻り値の解除関数を実行します。標準 admin/H5/fullstack テンプレートは接続済みです。BFCache 以外の `pagehide`（再読み込み、文書全体の移動を含む）で POST `/auth/session/close` を最善努力で送信し、保持する access と関連 refresh を失効します。既存の CSRF/暗号化転送を使用し、`keepalive` を付け、自動更新しません。古い応答が新しいログインを上書きしないよう Cookie/ローカル資格情報を消去しません。明示的ログアウトは通常どおり失効と消去を行います。ブラウザーが離脱要求を送らない場合もあるため、業務に応じてサーバーの `idleTimeout`/`absoluteTimeout` を併用してください。閉じた瞬間の失効は保証できません。
 
+## 転送容量とモジュール予算
+
+設定 transport.maxPlaintextBytes は 1 KiB～64 MiB の明示整数または auto を受け付けます。auto/省略は undefined に正規化され、要件なしの既定は 1 MiB、フィードバックのホストでは crypto.resolveTransportBodyLimits の requiredPlaintextBytes で統合します。明示上限の不足は起動/梱包時の失敗とし、上書きしません。プロキシ・adapter-node・ハンドシェイク・実行時の予算を一致させ、添付・展開・行数の制限は独立して検証します。
+
 ## 開発とテスト
 
 ```bash

package/README.md

@@ -228,6 +228,8 @@ const app = serv.createApp({
 
 业务容量通过 `transport.maxPlaintextBytes` 统一配置：默认 1 MiB，整数范围 1 KiB～64 MiB，请求和响应共用 UTF-8 明文字节预算。客户端从握手自动获取上限，密文与部署代理预算由 `resolveTransportBodyLimits()` 推导（两倍明文 + 32 KiB）。握手、公钥、认证头和防重放约束独立；超限取消原流并释放 reader，请求 413、响应为加密的 500 容量错误，客户端识别 `TransportBodyTooLargeError` / `hai:crypto:070`。 [Transport capacity and upgrade](../crypto/TRANSPORT-CAPACITY.md)。
 
+普通业务仍使用 `transport.maxPlaintextBytes`（auto/省略为 1 MiB）；Feedback 的报告受理、证据、附件及 ZIP 下载路由通过 `routePlaintextBytes` 单独声明 `feedback.budget.maxTransportBytes`。路径中的 `*` 仅匹配一个完整路径段；宿主显式路由值优先。握手、adapter-node 与代理使用各路由最大容量，普通业务不会随材料预算扩大。HTTP 适配器为单独声明且大于 1 MiB 的材料路由保留最多 2 个槽，普通业务另有 16 个槽，完整响应/失败后释放；忙碌返回 503 / `hai:crypto:072`，不自动重放业务写入。
+
 serv/kit 对通过请求绑定、签名和 MAC 校验但超出时间窗口的报文返回加密的 HTTP 400 时间错误；客户端抛 `TransportTimeError`（`hai:crypto:071`），提示同步设备和服务器时间后刷新重试。`api-client` 映射为 `VALIDATION_FAILED`，在 `cause.transportCode` 保留该原因。不会自动重放请求或放宽防重放窗口；篡改或未认证报文仍返回通用认证失败。
 
 #### Token 认证（`iam` / `refreshCookie`）
@@ -744,6 +746,10 @@ audit 已初始化时，procedure 自动绑定经过验证的身份、可信连
 
 `session.endOnPageHide` 默认 `false`。启用后宿主调用 `actions.bindPageExit({ enabled: config.session.endOnPageHide })` 并在卸载时调用返回的清理函数；标准 admin/H5/fullstack 模板已经接入。非 BFCache 的 `pagehide`（也包括刷新、整页导航）通过 POST `/auth/session/close` 尽力撤销当前 access 及关联 refresh，沿用 CSRF/传输加密，使用 `keepalive` 且不自动刷新会话。该响应不清 Cookie/本地凭据，避免旧响应覆盖下一次登录。显式退出仍使用正常 logout，可靠撤销并清理当前凭据。浏览器可能不发送页面离开请求，因此必须按业务配合服务端 `idleTimeout`/`absoluteTimeout`；不能据此保证关闭即撤销。
 
+## 传输容量与模块预算
+
+配置 `transport.maxPlaintextBytes` 支持 1 KiB～64 MiB 的显式整数或 `auto`。auto/省略在解析后为 undefined：无模块需求时仍为 1 MiB，反馈宿主使用 crypto.resolveTransportBodyLimits 的 requiredPlaintextBytes 统一推导。显式上限不足时启动/打包失败，不能被反馈覆盖；代理、adapter-node、握手与运行时使用一致预算。业务附件、解压和数据行数上限继续独立校验。
+
 ## 开发测试
 
 ```bash

package/dist/{chunk-IRZVJW4V.js → chunk-65XNI7TH.js}

@@ -1,4 +1,4 @@
-import { normalizeServLocale, servM } from './chunk-N6IOKLQY.js';
+import { normalizeServLocale, servM } from './chunk-JAQIEQJS.js';
 import { core, ok, err, HaiCommonError } from '@h-ai/core';
 
 var DEFAULT_LOCALE = "zh-CN";
@@ -33,5 +33,5 @@ function validateInputOrFail(schema, input, locale = DEFAULT_LOCALE) {
 }
 
 export { localizeZodError, resolveRequestLocale, validateInputOrFail };
-//# sourceMappingURL=chunk-IRZVJW4V.js.map
-//# sourceMappingURL=chunk-IRZVJW4V.js.map
+//# sourceMappingURL=chunk-65XNI7TH.js.map
+//# sourceMappingURL=chunk-65XNI7TH.js.map

package/dist/{chunk-IRZVJW4V.js.map → chunk-65XNI7TH.js.map}

@@ -1 +1 @@
-{"version":3,"sources":["../src/serv-validation.ts"],"names":[],"mappings":";;;AAiBA,IAAM,cAAA,GAAiB,OAAA;AAmDhB,SAAS,qBAAqB,OAAA,EAA+D;AAClG,EAAA,MAAM,GAAA,GAAM,CAAC,IAAA,KAAqC;AAChD,IAAA,IAAI,OAAA,YAAmB,OAAA;AACrB,MAAA,OAAO,OAAA,CAAQ,GAAA,CAAI,IAAI,CAAA,IAAK,MAAA;AAC9B,IAAA,OAAO,QAAQ,IAAI,CAAA,IAAK,OAAA,CAAQ,IAAA,CAAK,aAAa,CAAA;AAAA,EACpD,CAAA;AAEA,EAAA,MAAM,QAAA,GAAW,IAAI,cAAc,CAAA;AACnC,EAAA,IAAI,QAAA;AACF,IAAA,OAAO,oBAAoB,QAAQ,CAAA;AAErC,EAAA,OAAO,oBAAoB,GAAA,CAAI,iBAAiB,KAAK,GAAA,CAAI,iBAAiB,KAAK,cAAc,CAAA;AAC/F;AAiBO,SAAS,gBAAA,CAAiB,UAAmB,MAAA,EAAuC;AACzF,EAAA,MAAM,cAAA,GAAiB,oBAAoB,MAAM,CAAA;AACjD,EAAA,OAAO,KAAK,aAAA,CAAc,uBAAA;AAAA,IACxB,QAAA;AAAA,IACA,KAAK,aAAA,CAAc,8BAAA;AAAA,MACjB,MAAA;AAAA,MACA,CAAC,YAAY,MAAA,KAAW,KAAA,CAAM,YAAY,EAAE,MAAA,EAAQ,cAAA,EAAgB,MAAA,EAAQ;AAAA;AAC9E,GACF;AACF;AA2CO,SAAS,mBAAA,CACd,MAAA,EACA,KAAA,EACA,MAAA,GAAiB,cAAA,EACG;AACpB,EAAA,MAAM,cAAA,GAAiB,oBAAoB,MAAM,CAAA;AACjD,EAAA,MAAM,MAAA,GAAS,MAAA,CAAO,SAAA,CAAU,KAAK,CAAA;AACrC,EAAA,IAAI,MAAA,CAAO,OAAA;AACT,IAAA,OAAO,EAAA,CAAG,OAAO,IAAI,CAAA;AACvB,EAAA,MAAM,MAAA,GAAS,gBAAA,CAAiB,MAAA,CAAO,KAAA,EAAO,cAAc,CAAA;AAC5D,EAAA,OAAO,GAAA,CAAI,cAAA,CAAe,gBAAA,EAAkB,KAAA,CAAM,uBAAA,EAAyB,EAAE,MAAA,EAAQ,cAAA,EAAgB,CAAA,EAAG,MAAM,CAAA;AAChH","file":"chunk-IRZVJW4V.js","sourcesContent":["/**\n * @h-ai/serv — 校验工具\n *\n * 为 API service 提供与 kit 对等的校验 i18n 能力：\n * - {@link resolveRequestLocale}：从请求头（`x-hai-locale` / `Accept-Language`）解析语言。\n * - {@link validateInputOrFail}：在 procedure 内显式校验数据，失败返回 `HaiResult` 错误。\n * - oRPC contract 输入校验失败的自动本地化由 `serv-app.ts` 中的 oRPC 响应拦截器处理。\n *\n * @module serv-validation\n */\n\nimport type { HaiResult, ValidationFormError } from '@h-ai/core'\nimport type { ZodType } from 'zod'\nimport type { ServMessageKey } from './serv-i18n.js'\nimport { core, err, HaiCommonError, ok } from '@h-ai/core'\nimport { normalizeServLocale, servM } from './serv-i18n.js'\n\nconst DEFAULT_LOCALE = 'zh-CN'\n\n/**\n * 校验失败响应体（含 i18n 错误列表）。\n *\n * 复用 `HaiResult` 失败分支结构。字段错误同时在两处出现：\n * - `error.cause`：与 `validateInputOrFail` 输出对齐，HaiResult 标准位置\n * - 顶层 `errors`：保留以兼容已有客户端\n *\n * @example\n * ```ts\n * import type { ServValidationFailureBody } from '@h-ai/serv'\n * import { serv } from '@h-ai/serv'\n *\n * function fields(body: ServValidationFailureBody) {\n *   return body.error.cause ?? body.errors\n * }\n * // 业务调用先判断 success，字段错误仅包含安全的本地化文案。\n * ```\n */\nexport interface ServValidationFailureBody {\n  readonly success: false\n  readonly error: {\n    readonly code: string | number\n    readonly message: string\n    readonly traceId?: string\n    readonly httpStatus: number\n    readonly system: string\n    readonly module: string\n    readonly cause?: readonly ValidationFormError[]\n  }\n  readonly errors: readonly ValidationFormError[]\n}\n\n/**\n * 从请求头解析客户端期望 locale。\n *\n * 优先级：`x-hai-locale` > `Accept-Language` 第一个匹配项 > 默认值（`zh-CN`）。\n * 返回值会被规范化为 serv 当前支持的 locale（如 `en` → `en-US`）。\n *\n * @param headers - 请求头（`Headers` 或与之等价的对象）\n * @returns 解析得到的 locale\n *\n * @example\n * ```ts\n * import { serv } from '@h-ai/serv'\n *\n * const locale = serv.resolveRequestLocale(new Headers({ 'x-hai-locale': 'en-US' }))\n * const fallback = serv.resolveRequestLocale(new Headers())\n * ```\n */\nexport function resolveRequestLocale(headers: Headers | Record<string, string | undefined>): string {\n  const get = (name: string): string | undefined => {\n    if (headers instanceof Headers)\n      return headers.get(name) ?? undefined\n    return headers[name] ?? headers[name.toLowerCase()]\n  }\n\n  const explicit = get('x-hai-locale')\n  if (explicit)\n    return normalizeServLocale(explicit)\n\n  return normalizeServLocale(get('accept-language') ?? get('Accept-Language') ?? DEFAULT_LOCALE)\n}\n\n/**\n * 把 Zod 错误转为本地化的扁平错误列表。\n *\n * @param zodError - Zod `SafeParseError` 或 `ZodError`\n * @param locale - 期望 locale\n *\n * @example\n * ```ts\n * // 模块内部上下文：示例复用当前声明所在模块的实际绑定。\n * const { z } = await import('zod')\n * const parsed = z.object({ name: z.string().min(1) }).safeParse({ name: '' })\n * if (parsed.success) return []\n * return localizeZodError(parsed.error, 'en-US')\n * ```\n */\nexport function localizeZodError(zodError: unknown, locale: string): ValidationFormError[] {\n  const resolvedLocale = normalizeServLocale(locale)\n  return core.zodValidation.mapZodErrorToFormErrors(\n    zodError,\n    core.zodValidation.createPrefixedZodMessageGetter<ServMessageKey>(\n      'serv',\n      (messageKey, params) => servM(messageKey, { locale: resolvedLocale, params }),\n    ),\n  )\n}\n\n/**\n * 在 procedure handler 内显式校验数据。\n *\n * 与 oRPC contract 自动校验不同，本函数用于业务层二次校验（例如对从数据库读到的对象再校验）。\n * 失败时返回 `HaiResult` 错误分支，错误的 `cause` 字段携带 `ValidationFormError[]`。\n *\n * 推荐使用方式：\n * ```ts\n * import { z } from 'zod'\n * import { serv } from '@h-ai/serv'\n *\n * const Schema = z.object({ name: z.string().min(1) })\n *\n * export const procedures = serv\n *   .implement(contract)\n *   .context<ServContext>()\n *   .route('profile.update', ({ input, context }) => {\n *     const result = serv.validateInputOrFail(Schema, input, context.locale)\n *     if (!result.success) return result\n *     return profileService.update(result.data)\n *   })\n *   .build()\n * ```\n *\n * @param schema - Zod schema\n * @param input - 待校验数据\n * @param locale - 期望 locale（通常来自请求上下文）\n *\n * @example\n * ```ts\n * import { serv } from '@h-ai/serv'\n * import { z } from 'zod'\n *\n * const result = serv.validateInputOrFail(z.object({ name: z.string().min(1) }), { name: '' }, 'en-US')\n * if (!result.success) {\n *   const fields = result.error.cause\n * } else {\n *   const name = result.data.name\n * }\n * ```\n */\nexport function validateInputOrFail<TOutput>(\n  schema: ZodType<TOutput>,\n  input: unknown,\n  locale: string = DEFAULT_LOCALE,\n): HaiResult<TOutput> {\n  const resolvedLocale = normalizeServLocale(locale)\n  const result = schema.safeParse(input)\n  if (result.success)\n    return ok(result.data)\n  const errors = localizeZodError(result.error, resolvedLocale)\n  return err(HaiCommonError.VALIDATION_ERROR, servM('serv_validationFailed', { locale: resolvedLocale }), errors)\n}\n"]}
+{"version":3,"sources":["../src/serv-validation.ts"],"names":[],"mappings":";;;AAiBA,IAAM,cAAA,GAAiB,OAAA;AAmDhB,SAAS,qBAAqB,OAAA,EAA+D;AAClG,EAAA,MAAM,GAAA,GAAM,CAAC,IAAA,KAAqC;AAChD,IAAA,IAAI,OAAA,YAAmB,OAAA;AACrB,MAAA,OAAO,OAAA,CAAQ,GAAA,CAAI,IAAI,CAAA,IAAK,MAAA;AAC9B,IAAA,OAAO,QAAQ,IAAI,CAAA,IAAK,OAAA,CAAQ,IAAA,CAAK,aAAa,CAAA;AAAA,EACpD,CAAA;AAEA,EAAA,MAAM,QAAA,GAAW,IAAI,cAAc,CAAA;AACnC,EAAA,IAAI,QAAA;AACF,IAAA,OAAO,oBAAoB,QAAQ,CAAA;AAErC,EAAA,OAAO,oBAAoB,GAAA,CAAI,iBAAiB,KAAK,GAAA,CAAI,iBAAiB,KAAK,cAAc,CAAA;AAC/F;AAiBO,SAAS,gBAAA,CAAiB,UAAmB,MAAA,EAAuC;AACzF,EAAA,MAAM,cAAA,GAAiB,oBAAoB,MAAM,CAAA;AACjD,EAAA,OAAO,KAAK,aAAA,CAAc,uBAAA;AAAA,IACxB,QAAA;AAAA,IACA,KAAK,aAAA,CAAc,8BAAA;AAAA,MACjB,MAAA;AAAA,MACA,CAAC,YAAY,MAAA,KAAW,KAAA,CAAM,YAAY,EAAE,MAAA,EAAQ,cAAA,EAAgB,MAAA,EAAQ;AAAA;AAC9E,GACF;AACF;AA2CO,SAAS,mBAAA,CACd,MAAA,EACA,KAAA,EACA,MAAA,GAAiB,cAAA,EACG;AACpB,EAAA,MAAM,cAAA,GAAiB,oBAAoB,MAAM,CAAA;AACjD,EAAA,MAAM,MAAA,GAAS,MAAA,CAAO,SAAA,CAAU,KAAK,CAAA;AACrC,EAAA,IAAI,MAAA,CAAO,OAAA;AACT,IAAA,OAAO,EAAA,CAAG,OAAO,IAAI,CAAA;AACvB,EAAA,MAAM,MAAA,GAAS,gBAAA,CAAiB,MAAA,CAAO,KAAA,EAAO,cAAc,CAAA;AAC5D,EAAA,OAAO,GAAA,CAAI,cAAA,CAAe,gBAAA,EAAkB,KAAA,CAAM,uBAAA,EAAyB,EAAE,MAAA,EAAQ,cAAA,EAAgB,CAAA,EAAG,MAAM,CAAA;AAChH","file":"chunk-65XNI7TH.js","sourcesContent":["/**\n * @h-ai/serv — 校验工具\n *\n * 为 API service 提供与 kit 对等的校验 i18n 能力：\n * - {@link resolveRequestLocale}：从请求头（`x-hai-locale` / `Accept-Language`）解析语言。\n * - {@link validateInputOrFail}：在 procedure 内显式校验数据，失败返回 `HaiResult` 错误。\n * - oRPC contract 输入校验失败的自动本地化由 `serv-app.ts` 中的 oRPC 响应拦截器处理。\n *\n * @module serv-validation\n */\n\nimport type { HaiResult, ValidationFormError } from '@h-ai/core'\nimport type { ZodType } from 'zod'\nimport type { ServMessageKey } from './serv-i18n.js'\nimport { core, err, HaiCommonError, ok } from '@h-ai/core'\nimport { normalizeServLocale, servM } from './serv-i18n.js'\n\nconst DEFAULT_LOCALE = 'zh-CN'\n\n/**\n * 校验失败响应体（含 i18n 错误列表）。\n *\n * 复用 `HaiResult` 失败分支结构。字段错误同时在两处出现：\n * - `error.cause`：与 `validateInputOrFail` 输出对齐，HaiResult 标准位置\n * - 顶层 `errors`：保留以兼容已有客户端\n *\n * @example\n * ```ts\n * import type { ServValidationFailureBody } from '@h-ai/serv'\n * import { serv } from '@h-ai/serv'\n *\n * function fields(body: ServValidationFailureBody) {\n *   return body.error.cause ?? body.errors\n * }\n * // 业务调用先判断 success，字段错误仅包含安全的本地化文案。\n * ```\n */\nexport interface ServValidationFailureBody {\n  readonly success: false\n  readonly error: {\n    readonly code: string | number\n    readonly message: string\n    readonly traceId?: string\n    readonly httpStatus: number\n    readonly system: string\n    readonly module: string\n    readonly cause?: readonly ValidationFormError[]\n  }\n  readonly errors: readonly ValidationFormError[]\n}\n\n/**\n * 从请求头解析客户端期望 locale。\n *\n * 优先级：`x-hai-locale` > `Accept-Language` 第一个匹配项 > 默认值（`zh-CN`）。\n * 返回值会被规范化为 serv 当前支持的 locale（如 `en` → `en-US`）。\n *\n * @param headers - 请求头（`Headers` 或与之等价的对象）\n * @returns 解析得到的 locale\n *\n * @example\n * ```ts\n * import { serv } from '@h-ai/serv'\n *\n * const locale = serv.resolveRequestLocale(new Headers({ 'x-hai-locale': 'en-US' }))\n * const fallback = serv.resolveRequestLocale(new Headers())\n * ```\n */\nexport function resolveRequestLocale(headers: Headers | Record<string, string | undefined>): string {\n  const get = (name: string): string | undefined => {\n    if (headers instanceof Headers)\n      return headers.get(name) ?? undefined\n    return headers[name] ?? headers[name.toLowerCase()]\n  }\n\n  const explicit = get('x-hai-locale')\n  if (explicit)\n    return normalizeServLocale(explicit)\n\n  return normalizeServLocale(get('accept-language') ?? get('Accept-Language') ?? DEFAULT_LOCALE)\n}\n\n/**\n * 把 Zod 错误转为本地化的扁平错误列表。\n *\n * @param zodError - Zod `SafeParseError` 或 `ZodError`\n * @param locale - 期望 locale\n *\n * @example\n * ```ts\n * // 模块内部上下文：示例复用当前声明所在模块的实际绑定。\n * const { z } = await import('zod')\n * const parsed = z.object({ name: z.string().min(1) }).safeParse({ name: '' })\n * if (parsed.success) return []\n * return localizeZodError(parsed.error, 'en-US')\n * ```\n */\nexport function localizeZodError(zodError: unknown, locale: string): ValidationFormError[] {\n  const resolvedLocale = normalizeServLocale(locale)\n  return core.zodValidation.mapZodErrorToFormErrors(\n    zodError,\n    core.zodValidation.createPrefixedZodMessageGetter<ServMessageKey>(\n      'serv',\n      (messageKey, params) => servM(messageKey, { locale: resolvedLocale, params }),\n    ),\n  )\n}\n\n/**\n * 在 procedure handler 内显式校验数据。\n *\n * 与 oRPC contract 自动校验不同，本函数用于业务层二次校验（例如对从数据库读到的对象再校验）。\n * 失败时返回 `HaiResult` 错误分支，错误的 `cause` 字段携带 `ValidationFormError[]`。\n *\n * 推荐使用方式：\n * ```ts\n * import { z } from 'zod'\n * import { serv } from '@h-ai/serv'\n *\n * const Schema = z.object({ name: z.string().min(1) })\n *\n * export const procedures = serv\n *   .implement(contract)\n *   .context<ServContext>()\n *   .route('profile.update', ({ input, context }) => {\n *     const result = serv.validateInputOrFail(Schema, input, context.locale)\n *     if (!result.success) return result\n *     return profileService.update(result.data)\n *   })\n *   .build()\n * ```\n *\n * @param schema - Zod schema\n * @param input - 待校验数据\n * @param locale - 期望 locale（通常来自请求上下文）\n *\n * @example\n * ```ts\n * import { serv } from '@h-ai/serv'\n * import { z } from 'zod'\n *\n * const result = serv.validateInputOrFail(z.object({ name: z.string().min(1) }), { name: '' }, 'en-US')\n * if (!result.success) {\n *   const fields = result.error.cause\n * } else {\n *   const name = result.data.name\n * }\n * ```\n */\nexport function validateInputOrFail<TOutput>(\n  schema: ZodType<TOutput>,\n  input: unknown,\n  locale: string = DEFAULT_LOCALE,\n): HaiResult<TOutput> {\n  const resolvedLocale = normalizeServLocale(locale)\n  const result = schema.safeParse(input)\n  if (result.success)\n    return ok(result.data)\n  const errors = localizeZodError(result.error, resolvedLocale)\n  return err(HaiCommonError.VALIDATION_ERROR, servM('serv_validationFailed', { locale: resolvedLocale }), errors)\n}\n"]}

package/dist/{chunk-N6IOKLQY.js → chunk-JAQIEQJS.js}

@@ -37,7 +37,9 @@ var en_US_default = {
   serv_transportClientKeyNotFound: "Client not registered or session expired; complete key exchange again",
   serv_transportDecryptFailed: "Failed to decrypt request",
   serv_transportEncryptFailed: "Failed to encrypt response",
-  serv_transportKeyExchangeFailed: "Key exchange failed"
+  serv_transportKeyExchangeFailed: "Key exchange failed",
+  serv_transportBusy: "Material processing is busy. Please retry shortly.",
+  serv_feedbackUnavailable: "Feedback is temporarily unavailable. Business features remain available."
 };
 
 // messages/ja-JP.json
@@ -73,7 +75,9 @@ var ja_JP_default = {
   serv_transportClientKeyNotFound: "\u30AF\u30E9\u30A4\u30A2\u30F3\u30C8\u304C\u672A\u767B\u9332\u304B\u3001\u30BB\u30C3\u30B7\u30E7\u30F3\u306E\u6709\u52B9\u671F\u9650\u304C\u5207\u308C\u3066\u3044\u307E\u3059\u3002\u518D\u5EA6\u9375\u4EA4\u63DB\u3092\u884C\u3063\u3066\u304F\u3060\u3055\u3044",
   serv_transportDecryptFailed: "\u30EA\u30AF\u30A8\u30B9\u30C8\u306E\u5FA9\u53F7\u306B\u5931\u6557\u3057\u307E\u3057\u305F",
   serv_transportEncryptFailed: "\u30EC\u30B9\u30DD\u30F3\u30B9\u306E\u6697\u53F7\u5316\u306B\u5931\u6557\u3057\u307E\u3057\u305F",
-  serv_transportKeyExchangeFailed: "\u9375\u4EA4\u63DB\u306B\u5931\u6557\u3057\u307E\u3057\u305F"
+  serv_transportKeyExchangeFailed: "\u9375\u4EA4\u63DB\u306B\u5931\u6557\u3057\u307E\u3057\u305F",
+  serv_transportBusy: "\u8CC7\u6599\u306E\u51E6\u7406\u304C\u6DF7\u307F\u5408\u3063\u3066\u3044\u307E\u3059\u3002\u3057\u3070\u3089\u304F\u3057\u3066\u304B\u3089\u518D\u8A66\u884C\u3057\u3066\u304F\u3060\u3055\u3044\u3002",
+  serv_feedbackUnavailable: "\u30D5\u30A3\u30FC\u30C9\u30D0\u30C3\u30AF\u306F\u4E00\u6642\u7684\u306B\u5229\u7528\u3067\u304D\u307E\u305B\u3093\u3002\u696D\u52D9\u6A5F\u80FD\u306F\u5F15\u304D\u7D9A\u304D\u5229\u7528\u3067\u304D\u307E\u3059\u3002"
 };
 
 // messages/zh-CN.json
@@ -109,7 +113,9 @@ var zh_CN_default = {
   serv_transportClientKeyNotFound: "\u5BA2\u6237\u7AEF\u672A\u6CE8\u518C\u6216\u4F1A\u8BDD\u5DF2\u8FC7\u671F\uFF0C\u8BF7\u91CD\u65B0\u5B8C\u6210\u5BC6\u94A5\u534F\u5546",
   serv_transportDecryptFailed: "\u8BF7\u6C42\u89E3\u5BC6\u5931\u8D25",
   serv_transportEncryptFailed: "\u54CD\u5E94\u52A0\u5BC6\u5931\u8D25",
-  serv_transportKeyExchangeFailed: "\u5BC6\u94A5\u534F\u5546\u5931\u8D25"
+  serv_transportKeyExchangeFailed: "\u5BC6\u94A5\u534F\u5546\u5931\u8D25",
+  serv_transportBusy: "\u6750\u6599\u5904\u7406\u7E41\u5FD9\uFF0C\u8BF7\u7A0D\u540E\u91CD\u8BD5",
+  serv_feedbackUnavailable: "\u95EE\u9898\u53CD\u9988\u6682\u4E0D\u53EF\u7528\uFF0C\u4E1A\u52A1\u529F\u80FD\u53EF\u7EE7\u7EED\u4F7F\u7528"
 };
 
 // src/serv-i18n.ts
@@ -210,6 +216,8 @@ function mapHaiError(handler) {
   }, async () => {
     const resource = options.path.join(".") || "procedure";
     const capture = async (status, reasonCode) => {
+      if (!audit.isInitialized)
+        return;
       const written = await audit.capture({
         action: "request.execute",
         resource,
@@ -389,5 +397,5 @@ function getHandlerMethod(value) {
 }
 
 export { WILDCARD_PERMISSION, WILDCARD_ROLE, buildHaiErrorBody, implement, normalizeServLocale, servM };
-//# sourceMappingURL=chunk-N6IOKLQY.js.map
-//# sourceMappingURL=chunk-N6IOKLQY.js.map
+//# sourceMappingURL=chunk-JAQIEQJS.js.map
+//# sourceMappingURL=chunk-JAQIEQJS.js.map

package/dist/chunk-JAQIEQJS.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../messages/en-US.json","../messages/ja-JP.json","../messages/zh-CN.json","../src/serv-i18n.ts","../src/pipelines/serv-pipeline-guard.ts","../src/pipelines/serv-pipeline-helper.ts","../src/serv-router.ts"],"names":["core","HaiCommonError","err","orpcImplement"],"mappings":";;;;;;;AAAA,IAAA,aAAA,GAAA;AAAA,EACE,OAAA,EAAW,iDAAA;AAAA,EACX,qBAAA,EAAyB,mBAAA;AAAA,EACzB,uBAAA,EAA2B,wBAAA;AAAA,EAC3B,sBAAA,EAA0B,sBAAA;AAAA,EAC1B,0BAAA,EAA8B,oBAAA;AAAA,EAC9B,wBAAA,EAA4B,iCAAA;AAAA,EAC5B,wBAAA,EAA4B,iCAAA;AAAA,EAC5B,wBAAA,EAA4B,8BAAA;AAAA,EAC5B,wBAAA,EAA4B,6BAAA;AAAA,EAC5B,uBAAA,EAA2B,+BAAA;AAAA,EAC3B,uBAAA,EAA2B,8BAAA;AAAA,EAC3B,uBAAA,EAA2B,8BAAA;AAAA,EAC3B,qBAAA,EAAyB,6BAAA;AAAA,EACzB,oBAAA,EAAwB,6BAAA;AAAA,EACxB,kBAAA,EAAsB,mBAAA;AAAA,EACtB,mBAAA,EAAuB,oBAAA;AAAA,EACvB,mBAAA,EAAuB,uBAAA;AAAA,EACvB,sBAAA,EAA0B,cAAA;AAAA,EAC1B,mBAAA,EAAuB,WAAA;AAAA,EACvB,kBAAA,EAAsB,uBAAA;AAAA,EACtB,uBAAA,EAA2B,+BAAA;AAAA,EAC3B,sBAAA,EAA0B,8CAAA;AAAA,EAC1B,2BAAA,EAA+B,yCAAA;AAAA,EAC/B,0BAAA,EAA8B,oDAAA;AAAA,EAC9B,+BAAA,EAAmC,0CAAA;AAAA,EACnC,4BAAA,EAAgC,qCAAA;AAAA,EAChC,2BAAA,EAA+B,kDAAA;AAAA,EAC/B,8BAAA,EAAkC,mDAAA;AAAA,EAClC,+BAAA,EAAmC,uEAAA;AAAA,EACnC,2BAAA,EAA+B,2BAAA;AAAA,EAC/B,2BAAA,EAA+B,4BAAA;AAAA,EAC/B,+BAAA,EAAmC,qBAAA;AAAA,EACnC,kBAAA,EAAsB,oDAAA;AAAA,EACtB,wBAAA,EAA4B;AAC9B,CAAA;;;ACnCA,IAAA,aAAA,GAAA;AAAA,EACE,OAAA,EAAW,iDAAA;AAAA,EACX,qBAAA,EAAyB,sFAAA;AAAA,EACzB,uBAAA,EAA2B,wDAAA;AAAA,EAC3B,sBAAA,EAA0B,wDAAA;AAAA,EAC1B,0BAAA,EAA8B,0EAAA;AAAA,EAC9B,wBAAA,EAA4B,qFAAA;AAAA,EAC5B,wBAAA,EAA4B,yGAAA;AAAA,EAC5B,wBAAA,EAA4B,qFAAA;AAAA,EAC5B,wBAAA,EAA4B,qFAAA;AAAA,EAC5B,uBAAA,EAA2B,yEAAA;AAAA,EAC3B,uBAAA,EAA2B,+EAAA;AAAA,EAC3B,uBAAA,EAA2B,qFAAA;AAAA,EAC3B,qBAAA,EAAyB,qFAAA;AAAA,EACzB,oBAAA,EAAwB,oHAAA;AAAA,EACxB,kBAAA,EAAsB,6EAAA;AAAA,EACtB,mBAAA,EAAuB,8EAAA;AAAA,EACvB,mBAAA,EAAuB,sFAAA;AAAA,EACvB,sBAAA,EAA0B,wDAAA;AAAA,EAC1B,mBAAA,EAAuB,0EAAA;AAAA,EACvB,kBAAA,EAAsB,wDAAA;AAAA,EACtB,uBAAA,EAA2B,0HAAA;AAAA,EAC3B,sBAAA,EAA0B,qIAAA;AAAA,EAC1B,2BAAA,EAA+B,gIAAA;AAAA,EAC/B,0BAAA,EAA8B,yLAAA;AAAA,EAC9B,+BAAA,EAAmC,0HAAA;AAAA,EACnC,4BAAA,EAAgC,8GAAA;AAAA,EAChC,2BAAA,EAA+B,4IAAA;AAAA,EAC/B,8BAAA,EAAkC,+HAAA;AAAA,EAClC,+BAAA,EAAmC,oQAAA;AAAA,EACnC,2BAAA,EAA+B,4FAAA;AAAA,EAC/B,2BAAA,EAA+B,kGAAA;AAAA,EAC/B,+BAAA,EAAmC,8DAAA;AAAA,EACnC,kBAAA,EAAsB,wMAAA;AAAA,EACtB,wBAAA,EAA4B;AAC9B,CAAA;;;ACnCA,IAAA,aAAA,GAAA;AAAA,EACE,OAAA,EAAW,iDAAA;AAAA,EACX,qBAAA,EAAyB,sCAAA;AAAA,EACzB,uBAAA,EAA2B,gCAAA;AAAA,EAC3B,sBAAA,EAA0B,sCAAA;AAAA,EAC1B,0BAAA,EAA8B,4CAAA;AAAA,EAC9B,wBAAA,EAA4B,mDAAA;AAAA,EAC5B,wBAAA,EAA4B,0DAAA;AAAA,EAC5B,wBAAA,EAA4B,4CAAA;AAAA,EAC5B,wBAAA,EAA4B,4CAAA;AAAA,EAC5B,uBAAA,EAA2B,uCAAA;AAAA,EAC3B,uBAAA,EAA2B,uCAAA;AAAA,EAC3B,uBAAA,EAA2B,gCAAA;AAAA,EAC3B,qBAAA,EAAyB,gCAAA;AAAA,EACzB,oBAAA,EAAwB,8DAAA;AAAA,EACxB,kBAAA,EAAsB,kDAAA;AAAA,EACtB,mBAAA,EAAuB,2CAAA;AAAA,EACvB,mBAAA,EAAuB,4CAAA;AAAA,EACvB,sBAAA,EAA0B,wDAAA;AAAA,EAC1B,mBAAA,EAAuB,4CAAA;AAAA,EACvB,kBAAA,EAAsB,4CAAA;AAAA,EACtB,uBAAA,EAA2B,2CAAA;AAAA,EAC3B,sBAAA,EAA0B,oEAAA;AAAA,EAC1B,2BAAA,EAA+B,uDAAA;AAAA,EAC/B,0BAAA,EAA8B,0EAAA;AAAA,EAC9B,+BAAA,EAAmC,8DAAA;AAAA,EACnC,4BAAA,EAAgC,oEAAA;AAAA,EAChC,2BAAA,EAA+B,8GAAA;AAAA,EAC/B,8BAAA,EAAkC,mGAAA;AAAA,EAClC,+BAAA,EAAmC,sIAAA;AAAA,EACnC,2BAAA,EAA+B,sCAAA;AAAA,EAC/B,2BAAA,EAA+B,sCAAA;AAAA,EAC/B,+BAAA,EAAmC,sCAAA;AAAA,EACnC,kBAAA,EAAsB,0EAAA;AAAA,EACtB,wBAAA,EAA4B;AAC9B,CAAA;;;ACVA,IAAM,sBAAA,GAAyB,CAAC,OAAA,EAAS,OAAA,EAAS,OAAO,CAAA;AACzD,IAAM,mBAAA,GAAsB,OAAA;AAmBrB,SAAS,oBAAoB,MAAA,EAAoC;AACtE,EAAA,MAAM,YAAY,MAAA,EAAQ,KAAA,CAAM,GAAG,CAAA,CAAE,CAAC,GAAG,IAAA,EAAK;AAC9C,EAAA,IAAI,CAAC,SAAA;AACH,IAAA,OAAO,mBAAA;AAET,EAAA,MAAM,KAAA,GAAQ,uBAAuB,IAAA,CAAK,CAAA,IAAA,KAAQ,KAAK,WAAA,EAAY,KAAM,SAAA,CAAU,WAAA,EAAa,CAAA;AAChG,EAAA,IAAI,KAAA;AACF,IAAA,OAAO,KAAA;AAET,EAAA,MAAM,eAAe,SAAA,CAAU,KAAA,CAAM,GAAG,CAAA,CAAE,CAAC,GAAG,WAAA,EAAY;AAC1D,EAAA,IAAI,YAAA,KAAiB,IAAA;AACnB,IAAA,OAAO,OAAA;AACT,EAAA,IAAI,YAAA,KAAiB,IAAA;AACnB,IAAA,OAAO,OAAA;AACT,EAAA,IAAI,YAAA,KAAiB,IAAA;AACnB,IAAA,OAAO,OAAA;AAET,EAAA,OAAO,mBAAA;AACT;AAiBO,IAAM,KAAA,GAAQ,IAAA,CAAK,IAAA,CAAK,mBAAA,CAAoC;AAAA,EACjE,OAAA,EAAS,aAAA;AAAA,EACT,OAAA,EAAS,aAAA;AAAA,EACT,OAAA,EAAS;AACX,CAAC;ACzDM,IAAM,mBAAA,GAAsB;AAa5B,IAAM,aAAA,GAAgB;AA+BtB,SAAS,eAAA,CAOd,cACA,OAAA,EAOwE;AACxE,EAAA,OAAO,OAAO,OAAA,KAAY;AACxB,IAAA,IAAI;AACF,MAAA,IAAI,CAAC,uBAAA,CAAwB,OAAA,CAAQ,OAAO,CAAA,EAAG;AAC7C,QAAA,OAAO,GAAA;AAAA,UACL,cAAA,CAAe,YAAA;AAAA,UACf,MAAM,wBAAA,EAA0B,EAAE,QAAQ,OAAA,CAAQ,OAAA,CAAQ,QAAQ;AAAA,SACpE;AAAA,MACF;AAEA,MAAA,MAAM,EAAE,OAAA,EAAQ,GAAI,OAAA,CAAQ,OAAA;AAC5B,MAAA,IAAI,YAAA,CAAa,aAAa,MAAA,EAAQ;AACpC,QAAA,MAAM,UAAU,OAAA,CAAQ,WAAA,CAAY,SAAS,mBAAmB,CAAA,IAC3D,aAAa,WAAA,CAAY,KAAA;AAAA,UAC1B,CAAA,UAAA,KAAc,OAAA,CAAQ,WAAA,CAAY,QAAA,CAAS,UAAU;AAAA,SACvD;AACF,QAAA,IAAI,CAAC,OAAA,EAAS;AACZ,UAAA,OAAO,GAAA;AAAA,YACL,cAAA,CAAe,SAAA;AAAA,YACf,MAAM,qBAAA,EAAuB,EAAE,QAAQ,OAAA,CAAQ,OAAA,CAAQ,QAAQ;AAAA,WACjE;AAAA,QACF;AAAA,MACF;AAEA,MAAA,IAAI,YAAA,CAAa,OAAO,MAAA,EAAQ;AAC9B,QAAA,MAAM,UAAU,OAAA,CAAQ,KAAA,CAAM,SAAS,aAAa,CAAA,IAC/C,aAAa,KAAA,CAAM,KAAA;AAAA,UACpB,CAAA,IAAA,KAAQ,OAAA,CAAQ,KAAA,CAAM,QAAA,CAAS,IAAI;AAAA,SACrC;AACF,QAAA,IAAI,CAAC,OAAA,EAAS;AACZ,UAAA,OAAO,GAAA;AAAA,YACL,cAAA,CAAe,SAAA;AAAA,YACf,MAAM,qBAAA,EAAuB,EAAE,QAAQ,OAAA,CAAQ,OAAA,CAAQ,QAAQ;AAAA,WACjE;AAAA,QACF;AAAA,MACF;AAEA,MAAA,OAAO,MAAM,OAAA,CAAQ;AAAA,QACnB,GAAG,OAAA;AAAA,QACH,SAAS,OAAA,CAAQ;AAAA,OAClB,CAAA;AAAA,IACH,SACO,KAAA,EAAO;AACZ,MAAA,OAAO,GAAA;AAAA,QACL,cAAA,CAAe,cAAA;AAAA,QACf,MAAM,oBAAA,EAAsB,EAAE,QAAQ,OAAA,CAAQ,OAAA,CAAQ,QAAQ,CAAA;AAAA,QAC9D;AAAA,OACF;AAAA,IACF;AAAA,EACF,CAAA;AACF;AAEA,SAAS,wBACP,OAAA,EAC+C;AAC/C,EAAA,OAAO,OAAA,CAAQ,OAAA,KAAY,MAAA,IAAa,OAAA,CAAQ,OAAA,KAAY,IAAA;AAC9D;ACnGO,SAAS,iBAAA,CAAkB,KAAuB,OAAA,EAAiB;AACxE,EAAA,OAAO;AAAA,IACL,OAAA,EAAS,KAAA;AAAA,IACT,KAAA,EAAO;AAAA,MACL,MAAM,GAAA,CAAI,IAAA;AAAA,MACV,SAASA,IAAAA,CAAK,KAAA,CAAM,aAAA,CAAc,EAAE,SAAS,OAAA,EAASA,IAAAA,CAAK,OAAA,CAAQ,GAAA,GAAM,OAAA,IAAWA,IAAAA,CAAK,QAAQ,GAAA,EAAI,CAAE,WAAW,CAAA;AAAA,MAClH,OAAA,EAASA,KAAK,OAAA,CAAQ,GAAA,GAAM,OAAA,IAAWA,IAAAA,CAAK,OAAA,CAAQ,GAAA,EAAI,CAAE,SAAA;AAAA,MAC1D,YAAY,GAAA,CAAI,UAAA;AAAA,MAChB,QAAQ,GAAA,CAAI,MAAA;AAAA,MACZ,QAAQ,GAAA,CAAI;AAAA;AACd,GACF;AACF;AAiBO,SAAS,YAA6B,OAAA,EAAuF;AAClI,EAAA,OAAO,CAAA,OAAA,KAAW,MAAM,WAAA,CAAY;AAAA,IAClC,KAAA,EAAO,QAAQ,OAAA,CAAQ,OAAA,GAAU,EAAE,EAAA,EAAI,OAAA,CAAQ,QAAQ,OAAA,CAAQ,MAAA,EAAQ,UAAU,OAAA,CAAQ,OAAA,CAAQ,QAAQ,QAAA,EAAU,KAAA,EAAO,QAAQ,OAAA,CAAQ,OAAA,CAAQ,OAAM,GAAI,IAAA;AAAA,IAC5J,SAAA,EAAW,QAAQ,OAAA,CAAQ,SAAA;AAAA,IAC3B,OAAA,EAAS,QAAQ,OAAA,CAAQ,SAAA;AAAA,IACzB,OAAA,EAAS,QAAQ,OAAA,CAAQ,OAAA;AAAA,IACzB,SAAA,EAAW,QAAQ,OAAA,CAAQ,EAAA;AAAA,IAC3B,WAAW,OAAA,CAAQ,OAAA,CAAQ,SAAA,EAAW,KAAA,CAAM,GAAG,IAAI;AAAA,KAClD,YAAY;AACb,IAAA,MAAM,QAAA,GAAW,OAAA,CAAQ,IAAA,CAAK,IAAA,CAAK,GAAG,CAAA,IAAK,WAAA;AAC3C,IAAA,MAAM,OAAA,GAAU,OAAO,MAAA,EAAgB,UAAA,KAAiC;AACtE,MAAA,IAAI,CAAC,KAAA,CAAM,aAAA;AACT,QAAA;AACF,MAAA,MAAM,OAAA,GAAU,MAAM,KAAA,CAAM,OAAA,CAAQ;AAAA,QAClC,MAAA,EAAQ,iBAAA;AAAA,QACR,QAAA;AAAA,QACA,QAAA,EAAU,6BAAA,CAA8B,IAAA,CAAK,QAAQ,IAAI,QAAA,GAAW,UAAA;AAAA,QACpE,OAAA,EAAS,CAAC,GAAA,EAAK,GAAA,EAAK,GAAA,EAAK,GAAG,CAAA,CAAE,QAAA,CAAS,MAAM,CAAA,GAAI,QAAA,GAAW,MAAA,IAAU,MAAM,SAAA,GAAY,SAAA;AAAA,QACxF,OAAA,EAAS,EAAE,MAAA,EAAQ,OAAA,CAAQ,QAAQ,OAAA,CAAQ,MAAA,EAAQ,MAAA,EAAQ,GAAI,eAAe,MAAA,GAAY,EAAC,GAAI,EAAE,YAAW;AAAG,OACjH,EAAG,EAAE,IAAA,EAAM,CAAC,OAAO,MAAA,EAAQ,SAAS,CAAA,CAAE,QAAA,CAAS,OAAA,CAAQ,OAAA,CAAQ,OAAA,CAAQ,MAAM,GAAG,CAAA;AAChF,MAAA,IAAI,CAAC,OAAA,CAAQ,OAAA;AACX,QAAA,OAAA,CAAQ,OAAA,CAAQ,OAAO,KAAA,CAAM,sBAAA,EAAwB,EAAE,QAAA,EAAU,KAAA,EAAO,OAAA,CAAQ,KAAA,EAAO,CAAA;AAAA,IAC3F,CAAA;AACA,IAAA,IAAI;AACF,MAAA,MAAM,MAAA,GAAS,MAAM,OAAA,CAAQ,OAAO,CAAA;AACpC,MAAA,MAAM,OAAA,CAAQ,MAAA,CAAO,OAAA,GAAU,GAAA,GAAM,MAAA,CAAO,KAAA,CAAM,UAAA,IAAc,GAAA,EAAK,MAAA,CAAO,OAAA,GAAU,KAAA,CAAA,GAAY,MAAA,CAAO,MAAM,IAAI,CAAA;AACnH,MAAA,IAAI,MAAA,CAAO,OAAA;AACT,QAAA,OAAO,MAAA;AACT,MAAA,MAAM,KAAA,GAAQA,IAAAA,CAAK,KAAA,CAAM,QAAA,CAAS,MAAA,CAAO,KAAA,EAAO,OAAA,CAAQ,OAAA,CAAQ,SAAA,EAAW,OAAA,CAAQ,OAAA,CAAQ,MAAM,CAAA;AACjG,MAAA,OAAA,CAAQ,OAAA,CAAQ,MAAA,CAAO,KAAA,CAAM,kBAAA,EAAoB,EAAE,OAAA,EAAS,KAAA,CAAM,OAAA,EAAS,KAAA,EAAO,MAAA,CAAO,KAAA,EAAO,CAAA;AAChG,MAAA,OAAO,EAAE,OAAA,EAAS,KAAA,EAAO,KAAA,EAAM;AAAA,IACjC,SACO,KAAA,EAAO;AAEZ,MAAA,MAAM,IAAA,GAAOA,IAAAA,CAAK,KAAA,CAAM,QAAA,CAAS,EAAE,GAAGC,cAAAA,CAAe,cAAA,EAAgB,OAAA,EAAS,KAAA,CAAM,oBAAA,EAAsB,EAAE,QAAQ,OAAA,CAAQ,OAAA,CAAQ,MAAA,EAAQ,CAAA,EAAE,EAAG,QAAQ,OAAA,CAAQ,SAAA,EAAW,OAAA,CAAQ,OAAA,CAAQ,MAAM,CAAA;AAClM,MAAA,OAAA,CAAQ,OAAA,CAAQ,OAAO,KAAA,CAAM,8BAAA,EAAgC,EAAE,OAAA,EAAS,IAAA,CAAK,OAAA,EAAS,KAAA,EAAO,CAAA;AAC7F,MAAA,MAAM,OAAA,CAAQ,GAAA,EAAKA,cAAAA,CAAe,cAAA,CAAe,IAAI,CAAA;AACrD,MAAA,OAAOC,IAAI,IAAI,CAAA;AAAA,IACjB;AAAA,EACF,CAAC,CAAA;AACH;;;ACuYO,SAAS,UACd,QAAA,EAC4B;AAC5B,EAAA,OAAO;AAAA,IACL,SAAS,MAAoC;AAC3C,MAAA,MAAM,MAAA,GAASC,WAAA,CAAc,QAAQ,CAAA,CAAE,QAAA,EAAmB;AAC1D,MAAA,OAAO,uBAAA,CAAwB,UAAU,MAAM,CAAA;AAAA,IACjD;AAAA,GACF;AACF;AAEA,SAAS,uBAAA,CAKP,UACA,WAAA,EACgE;AAChE,EAAA,MAAM,OAAA,GAAU,IAAI,wBAAA,CAAyB,QAAA,EAAU,WAAW,CAAA;AAIlE,EAAA,OAAO,OAAA;AAKT;AAuCA,IAAM,2BAAN,MAA+B;AAAA,EAK7B,WAAA,CACE,UACiB,WAAA,EACjB;AADiB,IAAA,IAAA,CAAA,WAAA,GAAA,WAAA;AAEjB,IAAA,IAAA,CAAK,aAAA,GAAgB,IAAI,GAAA,CAAI,qBAAA,CAAsB,QAAQ,CAAC,CAAA;AAC5D,IAAA,IAAA,CAAK,iBAAA,GAAoB,kBAAkB,QAAQ,CAAA;AAAA,EACrD;AAAA,EAJmB,WAAA;AAAA,EANF,aAAA;AAAA,EACA,iBAAA;AAAA,EACA,eAAA,uBAAsB,GAAA,EAAY;AAAA,EAUnD,KAAA,CAAM,MAAc,OAAA,EAA4B;AAC9C,IAAA,IAAI,OAAA,KAAY,MAAA;AACd,MAAA,OAAO,IAAA,CAAK,QAAA,CAAS,IAAA,EAAM,IAAI,OAAO,CAAA;AAExC,IAAA,OAAO,IAAI,4BAAA,CAA6B,IAAA,EAAM,IAAI,CAAA;AAAA,EACpD;AAAA,EAEA,QAAA,CAAS,IAAA,EAAc,MAAA,EAA+B,OAAA,EAAwB;AAC5E,IAAA,IAAI,CAAC,IAAA,CAAK,aAAA,CAAc,GAAA,CAAI,IAAI,CAAA;AAC9B,MAAA,MAAM,IAAI,SAAA,CAAU,CAAA,oCAAA,EAAuC,IAAI,CAAA,CAAE,CAAA;AACnE,IAAA,IAAI,IAAA,CAAK,eAAA,CAAgB,GAAA,CAAI,IAAI,CAAA;AAC/B,MAAA,MAAM,IAAI,SAAA,CAAU,CAAA,oCAAA,EAAuC,IAAI,CAAA,CAAE,CAAA;AACnE,IAAA,IAAI,OAAO,OAAA,KAAY,UAAA;AACrB,MAAA,MAAM,IAAI,SAAA,CAAU,CAAA,sCAAA,EAAyC,IAAI,CAAA,CAAE,CAAA;AAErE,IAAA,MAAM,oBAAA,GAAuB,SAAA,CAAU,IAAA,CAAK,WAAA,EAAa,IAAI,CAAA;AAC7D,IAAA,MAAM,gBAAA,GAAmB,iBAAiB,oBAAoB,CAAA;AAC9D,IAAA,IAAI,CAAC,gBAAA;AACH,MAAA,MAAM,IAAI,SAAA,CAAU,CAAA,oCAAA,EAAuC,IAAI,CAAA,CAAE,CAAA;AAInE,IAAA,MAAM,iBAAiB,SAAA,CAAU,MAAM,IACnC,eAAA,CAAgB,MAAA,EAAQ,OAA+C,CAAA,GACvE,OAAA;AACJ,IAAA,MAAM,WAAA,GAAc,YAAY,cAAc,CAAA;AAC9C,IAAA,MAAM,cAAc,OAAA,CAAQ,KAAA;AAAA,MAC1B,gBAAA;AAAA,MACA,oBAAA;AAAA,MACA,CAAC,WAAW;AAAA,KACd;AAEA,IAAA,SAAA,CAAU,IAAA,CAAK,iBAAA,EAAmB,IAAA,EAAM,WAAW,CAAA;AACnD,IAAA,IAAA,CAAK,eAAA,CAAgB,IAAI,IAAI,CAAA;AAC7B,IAAA,OAAO,IAAA;AAAA,EACT;AAAA,EAEA,KAAA,GAAiB;AACf,IAAA,MAAM,YAAA,GAAe,CAAC,GAAG,IAAA,CAAK,aAAa,CAAA,CACxC,MAAA,CAAO,CAAA,IAAA,KAAQ,CAAC,KAAK,eAAA,CAAgB,GAAA,CAAI,IAAI,CAAC,EAC9C,IAAA,EAAK;AACR,IAAA,IAAI,YAAA,CAAa,SAAS,CAAA,EAAG;AAC3B,MAAA,MAAM,IAAI,SAAA;AAAA,QACR,CAAA,yCAAA,EAA4C,YAAA,CAAa,IAAA,CAAK,IAAI,CAAC,CAAA;AAAA,OACrE;AAAA,IACF;AAEA,IAAA,MAAM,YAAA,GAAe,OAAA,CAAQ,GAAA,CAAI,IAAA,CAAK,aAAa,QAAQ,CAAA;AAC3D,IAAA,IAAI,OAAO,YAAA,KAAiB,UAAA;AAC1B,MAAA,MAAM,IAAI,UAAU,+CAA+C,CAAA;AAErE,IAAA,OAAO,OAAA,CAAQ,MAAM,YAAA,EAAc,IAAA,CAAK,aAAa,CAAC,IAAA,CAAK,iBAAiB,CAAC,CAAA;AAAA,EAC/E;AACF,CAAA;AAEA,IAAM,+BAAN,MAAmC;AAAA,EAKjC,WAAA,CACmB,QACA,IAAA,EACjB;AAFiB,IAAA,IAAA,CAAA,MAAA,GAAA,MAAA;AACA,IAAA,IAAA,CAAA,IAAA,GAAA,IAAA;AAAA,EAChB;AAAA,EAFgB,MAAA;AAAA,EACA,IAAA;AAAA,EANX,YAAA,GAAe,KAAA;AAAA,EACN,WAAA,uBAAkB,GAAA,EAAY;AAAA,EAC9B,KAAA,uBAAY,GAAA,EAAY;AAAA,EAOzC,IAAA,GAAa;AACX,IAAA,IAAA,CAAK,YAAA,GAAe,IAAA;AACpB,IAAA,OAAO,IAAA;AAAA,EACT;AAAA,EAEA,WAAW,UAAA,EAA0B;AACnC,IAAA,IAAA,CAAK,YAAA,GAAe,IAAA;AACpB,IAAA,IAAA,CAAK,WAAA,CAAY,IAAI,UAAU,CAAA;AAC/B,IAAA,OAAO,IAAA;AAAA,EACT;AAAA,EAEA,KAAK,IAAA,EAAoB;AACvB,IAAA,IAAA,CAAK,YAAA,GAAe,IAAA;AACpB,IAAA,IAAA,CAAK,KAAA,CAAM,IAAI,IAAI,CAAA;AACnB,IAAA,OAAO,IAAA;AAAA,EACT;AAAA,EAEA,OAAO,OAAA,EAA4C;AACjD,IAAA,OAAO,IAAA,CAAK,MAAA,CAAO,QAAA,CAAS,IAAA,CAAK,IAAA,EAAM;AAAA,MACrC,MAAM,IAAA,CAAK,YAAA;AAAA,MACX,WAAA,EAAa,CAAC,GAAG,IAAA,CAAK,WAAW,CAAA;AAAA,MACjC,KAAA,EAAO,CAAC,GAAG,IAAA,CAAK,KAAK;AAAA,OACpB,OAAO,CAAA;AAAA,EACZ;AACF,CAAA;AAEA,SAAS,UAAU,MAAA,EAAwC;AACzD,EAAA,OAAO,MAAA,CAAO,IAAA,KAAS,IAAA,IAAA,CACjB,MAAA,CAAO,WAAA,EAAa,MAAA,IAAU,CAAA,IAAK,CAAA,IAAA,CACnC,MAAA,CAAO,KAAA,EAAO,MAAA,IAAU,CAAA,IAAK,CAAA;AACrC;AAEA,SAAS,qBAAA,CACP,QAAA,EACA,MAAA,GAA4B,EAAC,EACnB;AACV,EAAA,IAAI,oBAAoB,QAAQ,CAAA;AAC9B,IAAA,OAAO,MAAA,CAAO,SAAS,CAAA,GAAI,CAAC,OAAO,IAAA,CAAK,GAAG,CAAC,CAAA,GAAI,EAAC;AAEnD,EAAA,OAAO,OAAO,OAAA,CAAQ,QAAQ,CAAA,CAAE,OAAA,CAAQ,CAAC,CAAC,GAAA,EAAK,KAAK,CAAA,KAClD,sBAAsB,KAAA,EAAO,CAAC,GAAG,MAAA,EAAQ,GAAG,CAAC,CAAC,CAAA;AAClD;AAEA,SAAS,oBAAoB,QAAA,EAAiC;AAC5D,EAAA,OAAO,OAAA,IAAW,QAAA;AACpB;AAEA,SAAS,kBAAkB,QAAA,EAAiD;AAC1E,EAAA,MAAM,KAAA,mBAAiC,MAAA,CAAO,MAAA,CAAO,IAAI,CAAA;AAEzD,EAAA,KAAA,MAAW,CAAC,GAAA,EAAK,KAAK,KAAK,MAAA,CAAO,OAAA,CAAQ,QAAQ,CAAA,EAAG;AACnD,IAAA,IAAI,CAAC,oBAAoB,KAAK,CAAA;AAC5B,MAAA,KAAA,CAAM,GAAG,CAAA,GAAI,iBAAA,CAAkB,KAAK,CAAA;AAAA,EACxC;AAEA,EAAA,OAAO,KAAA;AACT;AAEA,SAAS,SAAA,CAAU,MAAc,IAAA,EAAuB;AACtD,EAAA,IAAI,OAAA,GAAmB,IAAA;AAEvB,EAAA,KAAA,MAAW,OAAA,IAAW,IAAA,CAAK,KAAA,CAAM,GAAG,CAAA,EAAG;AACrC,IAAA,IACG,OAAO,OAAA,KAAY,QAAA,IAAY,OAAO,OAAA,KAAY,cAChD,OAAA,KAAY,IAAA,IACZ,EAAE,OAAA,IAAW,OAAA,CAAA,EAChB;AACA,MAAA,OAAO,MAAA;AAAA,IACT;AAEA,IAAA,OAAA,GAAU,OAAA,CAAQ,GAAA,CAAI,OAAA,EAAS,OAAO,CAAA;AAAA,EACxC;AAEA,EAAA,OAAO,OAAA;AACT;AAEA,SAAS,SAAA,CAAU,IAAA,EAA+B,IAAA,EAAc,KAAA,EAAsB;AACpF,EAAA,MAAM,QAAA,GAAW,IAAA,CAAK,KAAA,CAAM,GAAG,CAAA;AAC/B,EAAA,MAAM,IAAA,GAAO,SAAS,GAAA,EAAI;AAC1B,EAAA,IAAI,CAAC,IAAA;AACH,IAAA,MAAM,IAAI,UAAU,gCAAgC,CAAA;AAEtD,EAAA,IAAI,OAAA,GAAU,IAAA;AACd,EAAA,KAAA,MAAW,WAAW,QAAA,EAAU;AAC9B,IAAA,MAAM,QAAA,GAAW,QAAQ,OAAO,CAAA;AAChC,IAAA,IAAI,aAAa,MAAA,EAAW;AAC1B,MAAA,MAAM,KAAA,mBAAiC,MAAA,CAAO,MAAA,CAAO,IAAI,CAAA;AACzD,MAAA,OAAA,CAAQ,OAAO,CAAA,GAAI,KAAA;AACnB,MAAA,OAAA,GAAU,KAAA;AACV,MAAA;AAAA,IACF;AAEA,IAAA,IAAI,CAAC,QAAA,IAAY,OAAO,QAAA,KAAa,QAAA;AACnC,MAAA,MAAM,IAAI,SAAA,CAAU,CAAA,iDAAA,EAAoD,IAAI,CAAA,CAAE,CAAA;AAEhF,IAAA,OAAA,GAAU,QAAA;AAAA,EACZ;AAEA,EAAA,OAAA,CAAQ,IAAI,CAAA,GAAI,KAAA;AAClB;AAEA,SAAS,iBAAiB,KAAA,EAA6D;AACrF,EAAA,IAAK,OAAO,KAAA,KAAU,QAAA,IAAY,OAAO,KAAA,KAAU,cAAe,KAAA,KAAU,IAAA;AAC1E,IAAA,OAAO,MAAA;AAET,EAAA,MAAM,OAAA,GAAU,OAAA,CAAQ,GAAA,CAAI,KAAA,EAAO,SAAS,CAAA;AAC5C,EAAA,OAAO,OAAO,OAAA,KAAY,UAAA,GACtB,OAAA,GACA,MAAA;AACN","file":"chunk-JAQIEQJS.js","sourcesContent":["{\n  \"$schema\": \"https://inlang.com/schema/inlang-message-format\",\n  \"serv_validationFailed\": \"Validation failed\",\n  \"serv_validationRequired\": \"This field is required\",\n  \"serv_validationInvalid\": \"Invalid input format\",\n  \"serv_validationInvalidType\": \"Invalid field type\",\n  \"serv_validationStringMin\": \"Enter at least {min} characters\",\n  \"serv_validationStringMax\": \"Enter at most {max} UTF-8 bytes\",\n  \"serv_validationNumberMin\": \"Value must be at least {min}\",\n  \"serv_validationNumberMax\": \"Value must be at most {max}\",\n  \"serv_validationArrayMin\": \"Select at least {min} item(s)\",\n  \"serv_validationArrayMax\": \"Select at most {max} item(s)\",\n  \"serv_validationTooSmall\": \"Value must be at least {min}\",\n  \"serv_validationTooBig\": \"Value must be at most {max}\",\n  \"serv_validationEmail\": \"Enter a valid email address\",\n  \"serv_validationUrl\": \"Enter a valid URL\",\n  \"serv_validationUuid\": \"Enter a valid UUID\",\n  \"serv_validationEnum\": \"Select a valid option\",\n  \"serv_errorUnauthorized\": \"Unauthorized\",\n  \"serv_errorForbidden\": \"Forbidden\",\n  \"serv_errorInternal\": \"Internal server error\",\n  \"serv_storageKeyRequired\": \"Storage key must not be empty\",\n  \"serv_storageKeyTooLong\": \"Storage key must not exceed {max} characters\",\n  \"serv_storageKeyIllegalChars\": \"Storage key contains illegal characters\",\n  \"serv_storageKeyDotSegments\": \"Storage key must not contain . or .. path segments\",\n  \"serv_iamCannotDeleteCurrentUser\": \"Cannot delete the current logged-in user\",\n  \"serv_transportInvalidPayload\": \"Invalid encrypted transport payload\",\n  \"serv_transportUnknownClient\": \"Unknown encryption client; key exchange required\",\n  \"serv_transportClientIdRequired\": \"Missing X-Client-Id header; key exchange required\",\n  \"serv_transportClientKeyNotFound\": \"Client not registered or session expired; complete key exchange again\",\n  \"serv_transportDecryptFailed\": \"Failed to decrypt request\",\n  \"serv_transportEncryptFailed\": \"Failed to encrypt response\",\n  \"serv_transportKeyExchangeFailed\": \"Key exchange failed\",\n  \"serv_transportBusy\": \"Material processing is busy. Please retry shortly.\",\n  \"serv_feedbackUnavailable\": \"Feedback is temporarily unavailable. Business features remain available.\"\n}\n","{\n  \"$schema\": \"https://inlang.com/schema/inlang-message-format\",\n  \"serv_validationFailed\": \"入力内容の検証に失敗しました\",\n  \"serv_validationRequired\": \"この項目は必須です\",\n  \"serv_validationInvalid\": \"入力形式が無効です\",\n  \"serv_validationInvalidType\": \"フィールドの型が無効です\",\n  \"serv_validationStringMin\": \"{min}文字以上で入力してください\",\n  \"serv_validationStringMax\": \"UTF-8 で {max} バイト以内で入力してください\",\n  \"serv_validationNumberMin\": \"{min}以上の値を入力してください\",\n  \"serv_validationNumberMax\": \"{max}以下の値を入力してください\",\n  \"serv_validationArrayMin\": \"{min}件以上選択してください\",\n  \"serv_validationArrayMax\": \"{max}件以内で選択してください\",\n  \"serv_validationTooSmall\": \"{min}以上の値を入力してください\",\n  \"serv_validationTooBig\": \"{max}以下の値を入力してください\",\n  \"serv_validationEmail\": \"有効なメールアドレスを入力してください\",\n  \"serv_validationUrl\": \"有効なURLを入力してください\",\n  \"serv_validationUuid\": \"有効なUUIDを入力してください\",\n  \"serv_validationEnum\": \"有効な選択肢を選んでください\",\n  \"serv_errorUnauthorized\": \"認証されていません\",\n  \"serv_errorForbidden\": \"アクセスが拒否されました\",\n  \"serv_errorInternal\": \"サーバー内部エラー\",\n  \"serv_storageKeyRequired\": \"ストレージキーを空にすることはできません\",\n  \"serv_storageKeyTooLong\": \"ストレージキーは{max}文字以内で指定してください\",\n  \"serv_storageKeyIllegalChars\": \"ストレージキーに無効な文字が含まれています\",\n  \"serv_storageKeyDotSegments\": \"ストレージキーに「.」や「..」のパス要素を含めることはできません\",\n  \"serv_iamCannotDeleteCurrentUser\": \"現在ログイン中のユーザーは削除できません\",\n  \"serv_transportInvalidPayload\": \"暗号化された通信ペイロードが無効です\",\n  \"serv_transportUnknownClient\": \"暗号化クライアントが不明です。鍵交換が必要です\",\n  \"serv_transportClientIdRequired\": \"X-Client-Idヘッダーがありません。鍵交換が必要です\",\n  \"serv_transportClientKeyNotFound\": \"クライアントが未登録か、セッションの有効期限が切れています。再度鍵交換を行ってください\",\n  \"serv_transportDecryptFailed\": \"リクエストの復号に失敗しました\",\n  \"serv_transportEncryptFailed\": \"レスポンスの暗号化に失敗しました\",\n  \"serv_transportKeyExchangeFailed\": \"鍵交換に失敗しました\",\n  \"serv_transportBusy\": \"資料の処理が混み合っています。しばらくしてから再試行してください。\",\n  \"serv_feedbackUnavailable\": \"フィードバックは一時的に利用できません。業務機能は引き続き利用できます。\"\n}\n","{\n  \"$schema\": \"https://inlang.com/schema/inlang-message-format\",\n  \"serv_validationFailed\": \"数据验证失败\",\n  \"serv_validationRequired\": \"此字段必填\",\n  \"serv_validationInvalid\": \"输入格式无效\",\n  \"serv_validationInvalidType\": \"字段类型不正确\",\n  \"serv_validationStringMin\": \"至少输入 {min} 个字符\",\n  \"serv_validationStringMax\": \"最多输入 {max} 个 UTF-8 字节\",\n  \"serv_validationNumberMin\": \"数值不能小于 {min}\",\n  \"serv_validationNumberMax\": \"数值不能大于 {max}\",\n  \"serv_validationArrayMin\": \"至少选择 {min} 项\",\n  \"serv_validationArrayMax\": \"最多选择 {max} 项\",\n  \"serv_validationTooSmall\": \"不能小于 {min}\",\n  \"serv_validationTooBig\": \"不能大于 {max}\",\n  \"serv_validationEmail\": \"请输入有效的邮箱地址\",\n  \"serv_validationUrl\": \"请输入有效的网址\",\n  \"serv_validationUuid\": \"请输入有效的 UUID\",\n  \"serv_validationEnum\": \"请选择有效选项\",\n  \"serv_errorUnauthorized\": \"未登录或登录已失效\",\n  \"serv_errorForbidden\": \"无权执行该操作\",\n  \"serv_errorInternal\": \"服务器内部错误\",\n  \"serv_storageKeyRequired\": \"存储 key 不能为空\",\n  \"serv_storageKeyTooLong\": \"存储 key 不能超过 {max} 个字符\",\n  \"serv_storageKeyIllegalChars\": \"存储 key 包含非法字符\",\n  \"serv_storageKeyDotSegments\": \"存储 key 不能包含 . 或 .. 路径段\",\n  \"serv_iamCannotDeleteCurrentUser\": \"不能删除当前登录用户\",\n  \"serv_transportInvalidPayload\": \"传输层加密载荷格式无效\",\n  \"serv_transportUnknownClient\": \"未识别的加密客户端，请先完成密钥协商\",\n  \"serv_transportClientIdRequired\": \"缺少 X-Client-Id 请求头，请先完成密钥协商\",\n  \"serv_transportClientKeyNotFound\": \"客户端未注册或会话已过期，请重新完成密钥协商\",\n  \"serv_transportDecryptFailed\": \"请求解密失败\",\n  \"serv_transportEncryptFailed\": \"响应加密失败\",\n  \"serv_transportKeyExchangeFailed\": \"密钥协商失败\",\n  \"serv_transportBusy\": \"材料处理繁忙，请稍后重试\",\n  \"serv_feedbackUnavailable\": \"问题反馈暂不可用，业务功能可继续使用\"\n}\n","/**\n * @h-ai/serv — i18n 工具\n *\n * Serv 模块的国际化消息工具，从 @h-ai/core 调用 i18n API。\n * 与 kit-i18n 结构对齐，便于跨包统一维护。\n * @module serv-i18n\n */\n\nimport { core } from '@h-ai/core'\nimport messagesEnUS from '../messages/en-US.json'\nimport messagesJaJP from '../messages/ja-JP.json'\nimport messagesZhCN from '../messages/zh-CN.json'\n\n/**\n * Serv 本地化消息的真实 key 联合。\n *\n * @example\n * ```ts\n * // 模块内部上下文：示例复用当前声明所在模块的实际绑定。\n * const key: ServMessageKey = 'serv_errorForbidden'\n * const message = servM(key, { locale: 'en-US' })\n * ```\n */\ntype ServMessageKey = keyof typeof messagesZhCN\n\nconst SUPPORTED_SERV_LOCALES = ['zh-CN', 'en-US', 'ja-JP'] as const\nconst DEFAULT_SERV_LOCALE = 'zh-CN'\n\n/**\n * 规范化 serv 请求 locale。\n *\n * 支持：\n * - 完整 locale：`zh-CN` / `en-US` / `ja-JP`\n * - 简写：`zh` / `en` / `ja`\n * - `Accept-Language` 风格值：`en-US,en;q=0.9`\n *\n * 未识别时回退到默认 `zh-CN`。\n *\n * @example\n * ```ts\n * // 模块内部上下文：示例复用当前声明所在模块的实际绑定。\n * const english = normalizeServLocale('en-US,en;q=0.9')\n * const fallback = normalizeServLocale(undefined)\n * ```\n */\nexport function normalizeServLocale(locale: string | undefined): string {\n  const candidate = locale?.split(',')[0]?.trim()\n  if (!candidate)\n    return DEFAULT_SERV_LOCALE\n\n  const exact = SUPPORTED_SERV_LOCALES.find(item => item.toLowerCase() === candidate.toLowerCase())\n  if (exact)\n    return exact\n\n  const baseLanguage = candidate.split('-')[0]?.toLowerCase()\n  if (baseLanguage === 'en')\n    return 'en-US'\n  if (baseLanguage === 'ja')\n    return 'ja-JP'\n  if (baseLanguage === 'zh')\n    return 'zh-CN'\n\n  return DEFAULT_SERV_LOCALE\n}\n\n/**\n * 获取 Serv 模块的 i18n 消息。\n *\n * 单次调用可通过 `options.locale` 指定该次调用使用的语言，\n * 用于在请求处理过程中根据 `Accept-Language` 头本地化错误消息，\n * 而不污染全局 locale（多并发请求安全）。\n *\n * @example\n * ```ts\n * import { serv } from '@h-ai/serv'\n *\n * const message = serv.m('serv_validationStringMin', { locale: 'en-US', params: { min: 3 } })\n * // 单次 locale 不修改并发请求的全局语言。\n * ```\n */\nexport const servM = core.i18n.createMessageGetter<ServMessageKey>({\n  'zh-CN': messagesZhCN,\n  'en-US': messagesEnUS,\n  'ja-JP': messagesJaJP,\n})\n\nexport type { ServMessageKey }\n","/**\n * @h-ai/serv — procedure 认证与授权 guard\n *\n * 将认证、权限、角色及异常映射合并为单个 handler 包装层，并在类型上把\n * `context.session` 收窄为非空。\n *\n * @module pipelines/serv-pipeline-guard\n */\n\nimport type { HaiResult } from '@h-ai/core'\nimport type { ErrorMap, Meta, ProcedureHandler } from '@orpc/server'\nimport type { ServContext } from '../serv-context.js'\nimport type { AuthenticatedServContext } from '../serv-router.js'\nimport { err, HaiCommonError } from '@h-ai/core'\nimport { servM } from '../serv-i18n.js'\n\n/**\n * 通配符权限。仅应授予受信任的超级管理员，可通过任意 permission guard。\n *\n * @example\n * ```ts\n * import { serv } from '@h-ai/serv'\n *\n * const wildcard = serv.WILDCARD_PERMISSION\n * // 仅可信超级管理员可拥有通配符 permissions；普通用户使用明确能力列表。\n * ```\n */\nexport const WILDCARD_PERMISSION = '*'\n\n/**\n * 通配符角色。仅应授予受信任的超级管理员，可通过任意 role guard。\n *\n * @example\n * ```ts\n * import { serv } from '@h-ai/serv'\n *\n * const wildcard = serv.WILDCARD_ROLE\n * // 仅可信超级管理员可拥有通配符 roles；普通用户使用明确能力列表。\n * ```\n */\nexport const WILDCARD_ROLE = '*'\n\n/**\n * 内部 route guard 要求；权限/角色检查以可信非空会话为前提。\n *\n * @example\n * ```ts\n * // 模块内部上下文：示例复用当前声明所在模块的实际绑定。\n * const requirements: ServGuardRequirements = { auth: true, permissions: ['reports.read'] }\n * const guarded = applyServGuards(requirements, ({ context }) => ({ success: true, data: { userId: context.session.userId } }))\n * ```\n */\nexport interface ServGuardRequirements {\n  readonly auth?: boolean\n  readonly permissions?: readonly string[]\n  readonly roles?: readonly string[]\n}\n\n/**\n * 将 guard 应用于一个使用 HaiResult 输出的 oRPC handler。\n *\n * 完整保留 oRPC 的 `path`、`procedure`、`signal`、`lastEventId`、`errors` 等\n * options；只在校验成功后把 `context` 收窄为带非空 session 的类型。\n *\n * @example\n * ```ts\n * // 模块内部上下文：示例复用当前声明所在模块的实际绑定。\n * const guarded = applyServGuards({ permissions: ['reports.read'] }, ({ context }) => ({ success: true, data: { userId: context.session.userId } }))\n * // 业务 handler 只在可信 session 满足全部权限后执行。\n * ```\n */\nexport function applyServGuards<\n  TContext extends ServContext,\n  TInput,\n  TData,\n  TErrorMap extends ErrorMap,\n  TMeta extends Meta,\n>(\n  requirements: ServGuardRequirements,\n  handler: ProcedureHandler<\n    AuthenticatedServContext<TContext>,\n    TInput,\n    HaiResult<TData>,\n    TErrorMap,\n    TMeta\n  >,\n): ProcedureHandler<TContext, TInput, HaiResult<TData>, TErrorMap, TMeta> {\n  return async (options) => {\n    try {\n      if (!hasAuthenticatedSession(options.context)) {\n        return err(\n          HaiCommonError.UNAUTHORIZED,\n          servM('serv_errorUnauthorized', { locale: options.context.locale }),\n        )\n      }\n\n      const { session } = options.context\n      if (requirements.permissions?.length) {\n        const allowed = session.permissions.includes(WILDCARD_PERMISSION)\n          || requirements.permissions.every(\n            permission => session.permissions.includes(permission),\n          )\n        if (!allowed) {\n          return err(\n            HaiCommonError.FORBIDDEN,\n            servM('serv_errorForbidden', { locale: options.context.locale }),\n          )\n        }\n      }\n\n      if (requirements.roles?.length) {\n        const allowed = session.roles.includes(WILDCARD_ROLE)\n          || requirements.roles.every(\n            role => session.roles.includes(role),\n          )\n        if (!allowed) {\n          return err(\n            HaiCommonError.FORBIDDEN,\n            servM('serv_errorForbidden', { locale: options.context.locale }),\n          )\n        }\n      }\n\n      return await handler({\n        ...options,\n        context: options.context,\n      })\n    }\n    catch (error) {\n      return err(\n        HaiCommonError.INTERNAL_ERROR,\n        servM('serv_errorInternal', { locale: options.context.locale }),\n        error,\n      )\n    }\n  }\n}\n\nfunction hasAuthenticatedSession<TContext extends ServContext>(\n  context: TContext,\n): context is AuthenticatedServContext<TContext> {\n  return context.session !== undefined && context.session !== null\n}\n","/**\n * @h-ai/serv — Pipeline 公共 helper\n *\n * 放置不属于 Hono middleware / route guard 默认实现本身、\n * 但会被多个 pipeline 复用的公共工具。\n * @module pipelines/serv-pipeline-helper\n */\n\nimport type { ServProcedureHandler } from './serv-pipeline-types.js'\nimport { audit } from '@h-ai/audit'\nimport { core, err, HaiCommonError } from '@h-ai/core'\nimport { servM } from '../serv-i18n.js'\n\n/**\n * 构造 `HaiResult` 失败分支同构的 HTTP 错误定义。\n *\n * @example\n * ```ts\n * // 模块内部上下文：示例复用当前声明所在模块的实际绑定。\n * const definition: ServErrorBodyDef = HaiCommonError.UNAUTHORIZED\n * const body = buildHaiErrorBody(definition, servM('serv_errorUnauthorized'))\n * ```\n */\nexport interface ServErrorBodyDef {\n  readonly code: string | number\n  readonly httpStatus: number\n  readonly system: string\n  readonly module: string\n}\n\n/**\n * 构造与 `HaiResult` 失败分支同构的 HTTP 响应体。\n *\n * - 字段顺序与 `haiResultSchema()` 输出一致，便于客户端统一解析。\n * - 仅暴露最小信息（code/message/httpStatus），避免泄漏内部细节。\n *\n * @example\n * ```ts\n * // 模块内部上下文：示例复用当前声明所在模块的实际绑定。\n * const body = buildHaiErrorBody(HaiCommonError.FORBIDDEN, servM('serv_errorForbidden'))\n * // HTTP middleware 再设置 status；body 只包含安全的领域错误字段。\n * ```\n */\nexport function buildHaiErrorBody(def: ServErrorBodyDef, message: string) {\n  return {\n    success: false as const,\n    error: {\n      code: def.code,\n      message: core.error.formatMessage({ message, traceId: core.context.get().traceId ?? core.context.get().requestId }),\n      traceId: core.context.get().traceId ?? core.context.get().requestId,\n      httpStatus: def.httpStatus,\n      system: def.system,\n      module: def.module,\n    },\n  }\n}\n\n/**\n * 捕获未处理异常并转换为 HaiResult。\n *\n * 由 contract router 在注册 handler 时统一应用，业务代码无需手动包装。\n *\n * @param handler - 被包装的 procedure handler\n * @returns 带异常保护的新 handler\n *\n * @example\n * ```ts\n * // 模块内部上下文：示例复用当前声明所在模块的实际绑定。\n * const wrapped = mapHaiError<{ id: string }, { id: string }>(async ({ input }) => ({ success: true, data: { id: input.id } }))\n * // oRPC 原始 options 原样传入；未处理异常在此转换为领域错误。\n * ```\n */\nexport function mapHaiError<TInput, TOutput>(handler: ServProcedureHandler<TInput, TOutput>): ServProcedureHandler<TInput, TOutput> {\n  return options => audit.withContext({\n    actor: options.context.session ? { id: options.context.session.userId, username: options.context.session.username, roles: options.context.session.roles } : null,\n    requestId: options.context.requestId,\n    traceId: options.context.requestId,\n    scopeId: options.context.scopeId,\n    ipAddress: options.context.ip,\n    userAgent: options.context.userAgent?.slice(0, 4096),\n  }, async () => {\n    const resource = options.path.join('.') || 'procedure'\n    const capture = async (status: number, reasonCode?: string | number) => {\n      if (!audit.isInitialized)\n        return\n      const written = await audit.capture({\n        action: 'request.execute',\n        resource,\n        category: /^(?:iam|auth|audit)(?:\\.|$)/.test(resource) ? 'system' : 'business',\n        outcome: [401, 403, 423, 429].includes(status) ? 'denied' : status >= 400 ? 'failure' : 'success',\n        details: { method: options.context.request.method, status, ...(reasonCode === undefined ? {} : { reasonCode }) },\n      }, { read: ['GET', 'HEAD', 'OPTIONS'].includes(options.context.request.method) })\n      if (!written.success)\n        options.context.logger.error('Request audit failed', { resource, error: written.error })\n    }\n    try {\n      const result = await handler(options)\n      await capture(result.success ? 200 : result.error.httpStatus ?? 500, result.success ? undefined : result.error.code)\n      if (result.success)\n        return result\n      const error = core.error.toPublic(result.error, options.context.requestId, options.context.locale)\n      options.context.logger.error('Procedure failed', { traceId: error.traceId, error: result.error })\n      return { success: false, error }\n    }\n    catch (error) {\n      // 所有未捕获异常统一在这里收口，避免直接把异常冒泡到 HTTP 层。\n      const safe = core.error.toPublic({ ...HaiCommonError.INTERNAL_ERROR, message: servM('serv_errorInternal', { locale: options.context.locale }) }, options.context.requestId, options.context.locale)\n      options.context.logger.error('Procedure threw an exception', { traceId: safe.traceId, error })\n      await capture(500, HaiCommonError.INTERNAL_ERROR.code)\n      return err(safe)\n    }\n  })\n}\n","/**\n * @h-ai/serv — contract-first 链式 procedure 实现器\n *\n * 在 oRPC `implement()` 之上提供 route 名只出现一次的链式 DSL。\n * 应用只接触 contract 路径、上下文与 guard，不需要组装 oRPC router 对象。\n *\n * @module serv-router\n */\n\nimport type { HaiResult } from '@h-ai/core'\nimport type {\n  Context,\n  ContractProcedure,\n  ContractRouter,\n  ErrorMap,\n  Implementer,\n  InferSchemaInput,\n  InferSchemaOutput,\n  Meta,\n  ProcedureHandler,\n  Router,\n  UnlaziedRouter,\n} from '@orpc/server'\nimport type { ServGuardRequirements } from './pipelines/serv-pipeline-guard.js'\nimport type { ServContext } from './serv-context.js'\nimport { implement as orpcImplement } from '@orpc/server'\nimport { applyServGuards } from './pipelines/serv-pipeline-guard.js'\nimport { mapHaiError } from './pipelines/serv-pipeline-helper.js'\n\n/**\n * 内部初始 context 空约束，用于保持 oRPC 推导而不伪造运行时字段。\n *\n * @example\n * ```ts\n * // 模块内部上下文：示例复用当前声明所在模块的实际绑定。\n * const { serv } = await import('@h-ai/serv')\n * const context: ServContext & EmptyContext = serv.parseRequestContext({ request: new Request('https://example.com/ping') })\n * const requestId = context.requestId\n * ```\n */\ntype EmptyContext = Record<never, never>\n/**\n * 提取 contract 的字符串键，排除 symbol/数字索引。\n *\n * @example\n * ```ts\n * // 模块内部上下文：示例复用当前声明所在模块的实际绑定。\n * const { apiContract } = await import('@h-ai/api-contract')\n * const { z } = await import('zod')\n * const { ok } = await import('@h-ai/core')\n * const contract = { ping: apiContract.route({ method: 'GET', path: '/ping' }).output(apiContract.haiResultSchema(z.object({ ready: z.boolean() }))) }\n * const path: StringKey<typeof contract> = 'ping'\n * const procedure = contract[path]\n * ```\n */\ntype StringKey<T> = Extract<keyof T, string>\n/**\n * 内部 contract 泛型边界；真实 procedure 输出须为 HaiResult。\n *\n * @example\n * ```ts\n * // 模块内部上下文：示例复用当前声明所在模块的实际绑定。\n * const { apiContract } = await import('@h-ai/api-contract')\n * const { z } = await import('zod')\n * const { ok } = await import('@h-ai/core')\n * const contract = { ping: apiContract.route({ method: 'GET', path: '/ping' }).output(apiContract.haiResultSchema(z.object({ ready: z.boolean() }))) }\n * const checked = contract satisfies ServContract\n * const procedures = implement(checked).context<ServContext>().route('ping', () => ok({ ready: true })).build()\n * ```\n */\ntype ServContract = ContractRouter<Meta>\n\n/**\n * contract 中所有 procedure 的点分路径。\n *\n * @example\n * ```ts\n * import type { ServRoutePath } from '@h-ai/serv'\n * import type { ServContext } from '@h-ai/serv'\n * import { apiContract } from '@h-ai/api-contract'\n * import { ok } from '@h-ai/core'\n * import { serv } from '@h-ai/serv'\n * import { z } from 'zod'\n *\n * const contract = { ping: apiContract.route({ method: 'GET', path: '/ping' }).output(apiContract.haiResultSchema(z.object({ ready: z.boolean() }))) }\n * const path: ServRoutePath<typeof contract> = 'ping'\n * const procedures = serv.implement(contract).context<ServContext>().route(path, () => ok({ ready: true })).build()\n * ```\n */\nexport type ServRoutePath<TContract extends ServContract>\n  = TContract extends ContractProcedure<\n    infer _TInputSchema,\n    infer _TOutputSchema,\n    infer _TErrorMap,\n    infer _TMeta\n  >\n    ? never\n    : {\n        [K in StringKey<TContract>]: TContract[K] extends ContractProcedure<\n          infer _TChildInputSchema,\n          infer _TChildOutputSchema,\n          infer _TChildErrorMap,\n          infer _TChildMeta\n        >\n          ? K\n          : TContract[K] extends ServContract\n            ? ServRoutePath<TContract[K]> extends infer TChild extends string\n              ? `${K}.${TChild}`\n              : never\n            : never\n      }[StringKey<TContract>]\n\n/**\n * 按点分路径查找原始 contract procedure；不存在的路径推导为 never。\n *\n * @example\n * ```ts\n * // 模块内部上下文：示例复用当前声明所在模块的实际绑定。\n * const { apiContract } = await import('@h-ai/api-contract')\n * const { z } = await import('zod')\n * const { ok } = await import('@h-ai/core')\n * const contract = { ping: apiContract.route({ method: 'GET', path: '/ping' }).output(apiContract.haiResultSchema(z.object({ ready: z.boolean() }))) }\n * const procedure: ContractAtPath<typeof contract, 'ping'> = contract.ping\n * const scoped = implement({ ping: procedure }).context<ServContext>().route('ping', () => ok({ ready: true })).build()\n * ```\n */\ntype ContractAtPath<TContract, TPath extends string>\n  = TPath extends `${infer THead}.${infer TTail}`\n    ? THead extends keyof TContract\n      ? ContractAtPath<TContract[THead], TTail>\n      : never\n    : TPath extends keyof TContract\n      ? TContract[TPath]\n      : never\n\n/**\n * 将合法路由路径映射到对应 contract，供 handler 推导复用。\n *\n * @example\n * ```ts\n * // 模块内部上下文：示例复用当前声明所在模块的实际绑定。\n * const { apiContract } = await import('@h-ai/api-contract')\n * const { z } = await import('zod')\n * const { ok } = await import('@h-ai/core')\n * const contract = { ping: apiContract.route({ method: 'GET', path: '/ping' }).output(apiContract.haiResultSchema(z.object({ ready: z.boolean() }))) }\n * const procedure: RouteContract<typeof contract, 'ping'> = contract.ping\n * const scoped = implement({ ping: procedure }).context<ServContext>().route('ping', () => ok({ ready: true })).build()\n * ```\n */\ntype RouteContract<\n  TContract extends ServContract,\n  TPath extends ServRoutePath<TContract>,\n> = ContractAtPath<TContract, TPath>\n\n/**\n * `.auth()`、`.permission()`、`.role()` 后的非空会话上下文。\n *\n * @example\n * ```ts\n * import type { AuthenticatedServContext } from '@h-ai/serv'\n *\n * function owner(context: AuthenticatedServContext): string {\n *   return context.session.userId\n * }\n * // 仅成功 guard 或可信认证结果能建立此上下文，禁止用客户端字段断言。\n * ```\n */\nexport type AuthenticatedServContext<TContext extends ServContext = ServContext>\n  = TContext & {\n    readonly session: NonNullable<TContext['session']>\n  }\n\n/**\n * 内部从具体 procedure 的输入/输出与 context 推导 HaiResult handler。\n *\n * @example\n * ```ts\n * // 模块内部上下文：示例复用当前声明所在模块的实际绑定。\n * const { apiContract } = await import('@h-ai/api-contract')\n * const { z } = await import('zod')\n * const { ok } = await import('@h-ai/core')\n * const contract = { ping: apiContract.route({ method: 'GET', path: '/ping' }).output(apiContract.haiResultSchema(z.object({ ready: z.boolean() }))) }\n * const handler: RouteHandler<typeof contract.ping, ServContext> = () => ok({ ready: true })\n * const procedures = implement(contract).context<ServContext>().route('ping', handler).build()\n * ```\n */\ntype RouteHandler<\n  TRouteContract,\n  TContext extends Context,\n> = TRouteContract extends ContractProcedure<\n  infer TInputSchema,\n  infer TOutputSchema,\n  infer TErrorMap,\n  infer TMeta\n>\n  ? InferSchemaInput<TOutputSchema> extends HaiResult<unknown>\n    ? ProcedureHandler<\n      TContext,\n      InferSchemaOutput<TInputSchema>,\n      InferSchemaInput<TOutputSchema>,\n      TErrorMap,\n      TMeta\n    >\n    : never\n  : never\n\n/**\n * 从 contract procedure 精确推导当前 route 的 HaiResult handler。\n *\n * @example\n * ```ts\n * import type { ServRouteHandler } from '@h-ai/serv'\n * import type { ServContext } from '@h-ai/serv'\n * import { apiContract } from '@h-ai/api-contract'\n * import { ok } from '@h-ai/core'\n * import { serv } from '@h-ai/serv'\n * import { z } from 'zod'\n *\n * const contract = { ping: apiContract.route({ method: 'GET', path: '/ping' }).output(apiContract.haiResultSchema(z.object({ ready: z.boolean() }))) }\n * const handler: ServRouteHandler<typeof contract, 'ping', ServContext> = () => ok({ ready: true })\n * const procedures = serv.implement(contract).context<ServContext>().route('ping', handler).build()\n * ```\n */\nexport type ServRouteHandler<\n  TContract extends ServContract,\n  TPath extends ServRoutePath<TContract>,\n  TContext extends Context,\n> = RouteHandler<RouteContract<TContract, TPath>, TContext>\n\n/**\n * 内部认证成功 handler 类型；session 在 guard 之后非空。\n *\n * @example\n * ```ts\n * // 模块内部上下文：示例复用当前声明所在模块的实际绑定。\n * const { apiContract } = await import('@h-ai/api-contract')\n * const { z } = await import('zod')\n * const { ok } = await import('@h-ai/core')\n * const contract = { ping: apiContract.route({ method: 'GET', path: '/ping' }).output(apiContract.haiResultSchema(z.object({ ready: z.boolean() }))) }\n * const handler: ServGuardedRouteHandler<typeof contract, 'ping', ServContext> = ({ context }) => ok({ ready: context.session.userId.length > 0 })\n * const procedures = implement(contract).context<ServContext>().route('ping').auth().handle(handler).build()\n * ```\n */\ntype ServGuardedRouteHandler<\n  TContract extends ServContract,\n  TPath extends ServRoutePath<TContract>,\n  TContext extends ServContext,\n> = RouteHandler<RouteContract<TContract, TPath>, AuthenticatedServContext<TContext>>\n\n/**\n * 一次注册后移除该路径的 builder；全部路径完成才提供 build。\n *\n * @example\n * ```ts\n * // 模块内部上下文：示例复用当前声明所在模块的实际绑定。\n * const { apiContract } = await import('@h-ai/api-contract')\n * const { z } = await import('zod')\n * const { ok } = await import('@h-ai/core')\n * const contract = { ping: apiContract.route({ method: 'GET', path: '/ping' }).output(apiContract.haiResultSchema(z.object({ ready: z.boolean() }))) }\n * const next: NextBuilder<typeof contract, ServContext, ServContext, 'ping', 'ping'> = implement(contract).context<ServContext>().route('ping', () => ok({ ready: true }))\n * const procedures = next.build()\n * ```\n */\ntype NextBuilder<\n  TContract extends ServContract,\n  TInitialContext extends Context,\n  TCurrentContext extends ServContext,\n  TRemaining extends ServRoutePath<TContract>,\n  TPath extends TRemaining,\n> = ServRouterBuilder<\n  TContract,\n  TInitialContext,\n  TCurrentContext,\n  Exclude<TRemaining, TPath>\n>\n\n/**\n * 尚未声明 guard 的单 route 注册器。\n *\n * @example\n * ```ts\n * // 模块内部上下文：示例复用当前声明所在模块的实际绑定。\n * const { apiContract } = await import('@h-ai/api-contract')\n * const { z } = await import('zod')\n * const { ok } = await import('@h-ai/core')\n * const contract = { ping: apiContract.route({ method: 'GET', path: '/ping' }).output(apiContract.haiResultSchema(z.object({ ready: z.boolean() }))) }\n * const route: ServRouteRegistration<typeof contract, ServContext, ServContext, 'ping', 'ping'> = implement(contract).context<ServContext>().route('ping')\n * const procedures = route.auth().handle(() => ok({ ready: true })).build()\n * ```\n */\nexport interface ServRouteRegistration<\n  TContract extends ServContract,\n  TInitialContext extends Context,\n  TCurrentContext extends ServContext,\n  TRemaining extends ServRoutePath<TContract>,\n  TPath extends TRemaining,\n> {\n  readonly auth: () => ServGuardedRouteRegistration<\n    TContract,\n    TInitialContext,\n    TCurrentContext,\n    TRemaining,\n    TPath\n  >\n  readonly permission: (permission: string) => ServGuardedRouteRegistration<\n    TContract,\n    TInitialContext,\n    TCurrentContext,\n    TRemaining,\n    TPath\n  >\n  readonly role: (role: string) => ServGuardedRouteRegistration<\n    TContract,\n    TInitialContext,\n    TCurrentContext,\n    TRemaining,\n    TPath\n  >\n}\n\n/**\n * 已声明认证或授权 guard 的单 route 注册器。\n *\n * @example\n * ```ts\n * // 模块内部上下文：示例复用当前声明所在模块的实际绑定。\n * const { apiContract } = await import('@h-ai/api-contract')\n * const { z } = await import('zod')\n * const { ok } = await import('@h-ai/core')\n * const contract = { ping: apiContract.route({ method: 'GET', path: '/ping' }).output(apiContract.haiResultSchema(z.object({ ready: z.boolean() }))) }\n * const guarded: ServGuardedRouteRegistration<typeof contract, ServContext, ServContext, 'ping', 'ping'> = implement(contract).context<ServContext>().route('ping').permission('reports.read')\n * const procedures = guarded.handle(() => ok({ ready: true })).build()\n * ```\n */\nexport interface ServGuardedRouteRegistration<\n  TContract extends ServContract,\n  TInitialContext extends Context,\n  TCurrentContext extends ServContext,\n  TRemaining extends ServRoutePath<TContract>,\n  TPath extends TRemaining,\n> {\n  readonly auth: () => ServGuardedRouteRegistration<\n    TContract,\n    TInitialContext,\n    TCurrentContext,\n    TRemaining,\n    TPath\n  >\n  readonly permission: (permission: string) => ServGuardedRouteRegistration<\n    TContract,\n    TInitialContext,\n    TCurrentContext,\n    TRemaining,\n    TPath\n  >\n  readonly role: (role: string) => ServGuardedRouteRegistration<\n    TContract,\n    TInitialContext,\n    TCurrentContext,\n    TRemaining,\n    TPath\n  >\n  readonly handle: (\n    handler: ServGuardedRouteHandler<TContract, TPath, TCurrentContext>,\n  ) => NextBuilder<TContract, TInitialContext, TCurrentContext, TRemaining, TPath>\n}\n\n/**\n * 内部 route 重载：直接 handler 或先声明 guard，再收窄剩余路径。\n *\n * @example\n * ```ts\n * // 模块内部上下文：示例复用当前声明所在模块的实际绑定。\n * const { apiContract } = await import('@h-ai/api-contract')\n * const { z } = await import('zod')\n * const { ok } = await import('@h-ai/core')\n * const contract = { ping: apiContract.route({ method: 'GET', path: '/ping' }).output(apiContract.haiResultSchema(z.object({ ready: z.boolean() }))) }\n * const route: ServRouteMethod<typeof contract, ServContext, ServContext, 'ping'> = implement(contract).context<ServContext>().route\n * const procedures = route('ping', () => ok({ ready: true })).build()\n * ```\n */\ninterface ServRouteMethod<\n  TContract extends ServContract,\n  TInitialContext extends Context,\n  TCurrentContext extends ServContext,\n  TRemaining extends ServRoutePath<TContract>,\n> {\n  <TPath extends TRemaining>(\n    path: TPath,\n    handler: ServRouteHandler<TContract, TPath, TCurrentContext>,\n  ): NextBuilder<TContract, TInitialContext, TCurrentContext, TRemaining, TPath>\n  <TPath extends TRemaining>(\n    path: TPath,\n  ): ServRouteRegistration<\n    TContract,\n    TInitialContext,\n    TCurrentContext,\n    TRemaining,\n    TPath\n  >\n}\n\n/**\n * 剩余路径为 never 时才暴露 build，否则仅提供缺失路径类型提示。\n *\n * @example\n * ```ts\n * // 模块内部上下文：示例复用当前声明所在模块的实际绑定。\n * const { apiContract } = await import('@h-ai/api-contract')\n * const { z } = await import('zod')\n * const { ok } = await import('@h-ai/core')\n * const contract = { ping: apiContract.route({ method: 'GET', path: '/ping' }).output(apiContract.haiResultSchema(z.object({ ready: z.boolean() }))) }\n * const complete: ServRouterBuilderBuild<typeof contract, ServContext, never> = implement(contract).context<ServContext>().route('ping', () => ok({ ready: true }))\n * const procedures = complete.build()\n * ```\n */\ntype ServRouterBuilderBuild<\n  TContract extends ServContract,\n  TInitialContext extends Context,\n  TRemaining,\n> = [TRemaining] extends [never]\n  ? {\n      /** 同步返回完整的普通 router，允许按需选用嵌套的默认 procedures。 */\n      readonly build: () => UnlaziedRouter<Router<TContract, TInitialContext>>\n    }\n  : {\n      /** 仅供 TypeScript/IDE 展示尚未实现的 route；运行时不存在。 */\n      readonly missingRoutes: TRemaining\n    }\n\n/**\n * 链式 router builder。\n *\n * `TRemaining` 会随着 `.route()` 注册逐步收窄；未实现完整 contract 时没有 `.build()`。\n *\n * @example\n * ```ts\n * import type { ServRouterBuilder } from '@h-ai/serv'\n * import type { ServContext } from '@h-ai/serv'\n * import { apiContract } from '@h-ai/api-contract'\n * import { ok } from '@h-ai/core'\n * import { serv } from '@h-ai/serv'\n * import { z } from 'zod'\n *\n * const contract = { ping: apiContract.route({ method: 'GET', path: '/ping' }).output(apiContract.haiResultSchema(z.object({ ready: z.boolean() }))) }\n * const builder: ServRouterBuilder<typeof contract, ServContext, ServContext> = serv.implement(contract).context<ServContext>()\n * const procedures = builder.route('ping', () => ok({ ready: true })).build()\n * ```\n */\nexport type ServRouterBuilder<\n  TContract extends ServContract,\n  TInitialContext extends Context,\n  TCurrentContext extends ServContext,\n  TRemaining extends ServRoutePath<TContract> = ServRoutePath<TContract>,\n> = {\n  readonly route: ServRouteMethod<\n    TContract,\n    TInitialContext,\n    TCurrentContext,\n    TRemaining\n  >\n} & ServRouterBuilderBuild<TContract, TInitialContext, TRemaining>\n\n/**\n * hai-framework 链式 contract 实现器。\n *\n * @example\n * ```ts\n * import type { ServImplementer } from '@h-ai/serv'\n * import type { ServContext } from '@h-ai/serv'\n * import { apiContract } from '@h-ai/api-contract'\n * import { ok } from '@h-ai/core'\n * import { serv } from '@h-ai/serv'\n * import { z } from 'zod'\n *\n * const contract = { ping: apiContract.route({ method: 'GET', path: '/ping' }).output(apiContract.haiResultSchema(z.object({ ready: z.boolean() }))) }\n * const implementer: ServImplementer<typeof contract> = serv.implement(contract)\n * const procedures = implementer.context<ServContext>().route('ping', () => ok({ ready: true })).build()\n * ```\n */\nexport interface ServImplementer<TContract extends ServContract> {\n  readonly context: <TContext extends ServContext>() => ServRouterBuilder<\n    TContract,\n    TContext & EmptyContext,\n    TContext\n  >\n}\n\n/**\n * 创建链式 contract 实现器。\n *\n * @example\n * ```ts\n * import type { ServContext } from '@h-ai/serv'\n * import { apiContract } from '@h-ai/api-contract'\n * import { ok } from '@h-ai/core'\n * import { serv } from '@h-ai/serv'\n * import { z } from 'zod'\n *\n * const contract = { ping: apiContract.route({ method: 'GET', path: '/ping' }).output(apiContract.haiResultSchema(z.object({ ready: z.boolean() }))) }\n * const procedures = serv.implement(contract).context<ServContext>().route('ping', () => ok({ ready: true })).build()\n * ```\n */\nexport function implement<TContract extends ServContract>(\n  contract: TContract,\n): ServImplementer<TContract> {\n  return {\n    context: <TContext extends ServContext>() => {\n      const native = orpcImplement(contract).$context<TContext>()\n      return createServRouterBuilder(contract, native)\n    },\n  }\n}\n\nfunction createServRouterBuilder<\n  TContract extends ServContract,\n  TInitialContext extends Context,\n  TCurrentContext extends ServContext,\n>(\n  contract: TContract,\n  implementer: Implementer<TContract, TInitialContext, TCurrentContext>,\n): ServRouterBuilder<TContract, TInitialContext, TCurrentContext> {\n  const runtime = new ServRouterBuilderRuntime(contract, implementer)\n\n  // oRPC 的 contract 泛型只能在编译期表示；运行时 builder 由同一 contract\n  // 创建并逐项校验路径，因此这里将动态实现收敛到唯一的类型边界。\n  return runtime as unknown as ServRouterBuilder<\n    TContract,\n    TInitialContext,\n    TCurrentContext\n  >\n}\n\n/**\n * 内部运行时 handler 边界；最终输入/输出验证仍由对应 contract 决定。\n *\n * @example\n * ```ts\n * // 模块内部上下文：示例复用当前声明所在模块的实际绑定。\n * const { ok } = await import('@h-ai/core')\n * const handler: RuntimeProcedureHandler = ({ input }) => ok(input)\n * // 动态装配边界仍由相同 contract 校验路径与 options，不提升未知输入类型。\n * ```\n */\ntype RuntimeProcedureHandler = ProcedureHandler<\n  ServContext,\n  unknown,\n  HaiResult<unknown>,\n  ErrorMap,\n  Meta\n>\n/**\n * 内部认证后的运行时 handler，原始 oRPC options 与可信 session 保留。\n *\n * @example\n * ```ts\n * // 模块内部上下文：示例复用当前声明所在模块的实际绑定。\n * const { ok } = await import('@h-ai/core')\n * const handler: AuthenticatedRuntimeProcedureHandler = ({ context }) => ok({ userId: context.session.userId })\n * const guarded = applyServGuards({ auth: true }, handler)\n * ```\n */\ntype AuthenticatedRuntimeProcedureHandler = ProcedureHandler<\n  AuthenticatedServContext,\n  unknown,\n  HaiResult<unknown>,\n  ErrorMap,\n  Meta\n>\n\nclass ServRouterBuilderRuntime {\n  private readonly expectedPaths: ReadonlySet<string>\n  private readonly implementedRoutes: Record<string, unknown>\n  private readonly registeredPaths = new Set<string>()\n\n  constructor(\n    contract: ServContract,\n    private readonly implementer: object,\n  ) {\n    this.expectedPaths = new Set(collectProcedurePaths(contract))\n    this.implementedRoutes = createRouterShape(contract)\n  }\n\n  route(path: string, handler?: unknown): unknown {\n    if (handler !== undefined)\n      return this.register(path, {}, handler)\n\n    return new ServRouteRegistrationRuntime(this, path)\n  }\n\n  register(path: string, guards: ServGuardRequirements, handler: unknown): this {\n    if (!this.expectedPaths.has(path))\n      throw new TypeError(`Contract path is not implementable: ${path}`)\n    if (this.registeredPaths.has(path))\n      throw new TypeError(`Duplicate procedure implementation: ${path}`)\n    if (typeof handler !== 'function')\n      throw new TypeError(`Procedure handler must be a function: ${path}`)\n\n    const procedureImplementer = getAtPath(this.implementer, path)\n    const implementHandler = getHandlerMethod(procedureImplementer)\n    if (!implementHandler)\n      throw new TypeError(`Contract path is not implementable: ${path}`)\n\n    // 点路径反射会丢失单条 contract 的泛型；路径已由 expectedPaths 校验，\n    // handler 的精确 input/output 则由公开的 ServRouteHandler 在调用侧保证。\n    const guardedHandler = hasGuards(guards)\n      ? applyServGuards(guards, handler as AuthenticatedRuntimeProcedureHandler)\n      : handler as RuntimeProcedureHandler\n    const safeHandler = mapHaiError(guardedHandler)\n    const implemented = Reflect.apply(\n      implementHandler,\n      procedureImplementer,\n      [safeHandler],\n    )\n\n    setAtPath(this.implementedRoutes, path, implemented)\n    this.registeredPaths.add(path)\n    return this\n  }\n\n  build(): unknown {\n    const missingPaths = [...this.expectedPaths]\n      .filter(path => !this.registeredPaths.has(path))\n      .sort()\n    if (missingPaths.length > 0) {\n      throw new TypeError(\n        `Cannot build router. Missing procedures: ${missingPaths.join(', ')}`,\n      )\n    }\n\n    const routerMethod = Reflect.get(this.implementer, 'router')\n    if (typeof routerMethod !== 'function')\n      throw new TypeError('The oRPC implementer does not expose router()')\n\n    return Reflect.apply(routerMethod, this.implementer, [this.implementedRoutes])\n  }\n}\n\nclass ServRouteRegistrationRuntime {\n  private authRequired = false\n  private readonly permissions = new Set<string>()\n  private readonly roles = new Set<string>()\n\n  constructor(\n    private readonly parent: ServRouterBuilderRuntime,\n    private readonly path: string,\n  ) {}\n\n  auth(): this {\n    this.authRequired = true\n    return this\n  }\n\n  permission(permission: string): this {\n    this.authRequired = true\n    this.permissions.add(permission)\n    return this\n  }\n\n  role(role: string): this {\n    this.authRequired = true\n    this.roles.add(role)\n    return this\n  }\n\n  handle(handler: unknown): ServRouterBuilderRuntime {\n    return this.parent.register(this.path, {\n      auth: this.authRequired,\n      permissions: [...this.permissions],\n      roles: [...this.roles],\n    }, handler)\n  }\n}\n\nfunction hasGuards(guards: ServGuardRequirements): boolean {\n  return guards.auth === true\n    || (guards.permissions?.length ?? 0) > 0\n    || (guards.roles?.length ?? 0) > 0\n}\n\nfunction collectProcedurePaths(\n  contract: ServContract,\n  prefix: readonly string[] = [],\n): string[] {\n  if (isContractProcedure(contract))\n    return prefix.length > 0 ? [prefix.join('.')] : []\n\n  return Object.entries(contract).flatMap(([key, child]) =>\n    collectProcedurePaths(child, [...prefix, key]))\n}\n\nfunction isContractProcedure(contract: ServContract): boolean {\n  return '~orpc' in contract\n}\n\nfunction createRouterShape(contract: ServContract): Record<string, unknown> {\n  const shape: Record<string, unknown> = Object.create(null)\n\n  for (const [key, child] of Object.entries(contract)) {\n    if (!isContractProcedure(child))\n      shape[key] = createRouterShape(child)\n  }\n\n  return shape\n}\n\nfunction getAtPath(root: object, path: string): unknown {\n  let current: unknown = root\n\n  for (const segment of path.split('.')) {\n    if (\n      (typeof current !== 'object' && typeof current !== 'function')\n      || current === null\n      || !(segment in current)\n    ) {\n      return undefined\n    }\n\n    current = Reflect.get(current, segment)\n  }\n\n  return current\n}\n\nfunction setAtPath(root: Record<string, unknown>, path: string, value: unknown): void {\n  const segments = path.split('.')\n  const leaf = segments.pop()\n  if (!leaf)\n    throw new TypeError('Procedure path cannot be empty')\n\n  let current = root\n  for (const segment of segments) {\n    const existing = current[segment]\n    if (existing === undefined) {\n      const child: Record<string, unknown> = Object.create(null)\n      current[segment] = child\n      current = child\n      continue\n    }\n\n    if (!existing || typeof existing !== 'object')\n      throw new TypeError(`Procedure path conflicts with an existing route: ${path}`)\n\n    current = existing as Record<string, unknown>\n  }\n\n  current[leaf] = value\n}\n\nfunction getHandlerMethod(value: unknown): ((handler: unknown) => unknown) | undefined {\n  if ((typeof value !== 'object' && typeof value !== 'function') || value === null)\n    return undefined\n\n  const handler = Reflect.get(value, 'handler')\n  return typeof handler === 'function'\n    ? handler as (handler: unknown) => unknown\n    : undefined\n}\n"]}

package/dist/features/ai.d.ts

@@ -2,8 +2,8 @@ import * as _orpc_server from '@orpc/server';
 import * as zod_v4_core from 'zod/v4/core';
 import * as zod from 'zod';
 import { AIFunctions } from '@h-ai/ai';
-import { S as ServContext } from '../serv-context-B-AxU8hj.js';
-import { A as AuthenticatedServContext } from '../serv-router-C8dSz2k-.js';
+import { S as ServContext } from '../serv-context-DE1JH5bd.js';
+import { A as AuthenticatedServContext } from '../serv-router-BJk04-oS.js';
 import '@h-ai/core';
 
 /**

package/dist/features/ai.js

@@ -1,5 +1,5 @@
 import { wrapItemsResult } from '../chunk-XKCLD42I.js';
-import { implement, servM } from '../chunk-N6IOKLQY.js';
+import { implement, servM } from '../chunk-JAQIEQJS.js';
 import { apiContract } from '@h-ai/api-contract';
 import { ok, err, HaiCommonError } from '@h-ai/core';
 

package/dist/features/feedback.d.ts

@@ -2,8 +2,8 @@ import * as _orpc_server from '@orpc/server';
 import * as zod from 'zod';
 import * as zod_v4_core from 'zod/v4/core';
 import { FeedbackFunctions, FeedbackContext } from '@h-ai/feedback';
-import { S as ServContext } from '../serv-context-B-AxU8hj.js';
-import { A as AuthenticatedServContext } from '../serv-router-C8dSz2k-.js';
+import { S as ServContext } from '../serv-context-DE1JH5bd.js';
+import { A as AuthenticatedServContext } from '../serv-router-BJk04-oS.js';
 import '@h-ai/core';
 
 /**
@@ -319,6 +319,7 @@ declare function createFeedbackProcedures(deps: FeedbackProcedureDeps): {
                     type: zod.ZodEnum<{
                         collect: "collect";
                         notify: "notify";
+                        webhook: "webhook";
                         export: "export";
                         cleanup: "cleanup";
                     }>;
@@ -480,6 +481,7 @@ declare function createFeedbackProcedures(deps: FeedbackProcedureDeps): {
             target: zod.ZodEnum<{
                 collect: "collect";
                 notify: "notify";
+                webhook: "webhook";
                 export: "export";
                 attachment: "attachment";
             }>;
@@ -512,6 +514,7 @@ declare function createFeedbackProcedures(deps: FeedbackProcedureDeps): {
                 type: zod.ZodEnum<{
                     collect: "collect";
                     notify: "notify";
+                    webhook: "webhook";
                     export: "export";
                     cleanup: "cleanup";
                 }>;

package/dist/features/feedback.js

@@ -1,6 +1,6 @@
-import { implement, servM } from '../chunk-N6IOKLQY.js';
+import { implement, servM } from '../chunk-JAQIEQJS.js';
 import { apiContract } from '@h-ai/api-contract';
-import { ok, core, err, HaiCommonError } from '@h-ai/core';
+import { err, HaiCommonError, ok, core } from '@h-ai/core';
 
 function createFeedbackProcedures(deps) {
   const contextFor = async (context) => {
@@ -16,7 +16,9 @@ function createFeedbackProcedures(deps) {
   const router = implement(apiContract.feedback).context();
   return router.route("reports.policy").auth().handle(async ({ context }) => {
     const actor = await contextFor(context);
-    return actor.success ? ok(deps.feedback.budget) : actor;
+    if (!actor.success)
+      return actor;
+    return deps.feedback.isInitialized === false ? err(HaiCommonError.SERVICE_UNAVAILABLE, servM("serv_feedbackUnavailable")) : ok(deps.feedback.budget);
   }).route("reports.submit").auth().handle(async ({ input, context }) => {
     const actor = await contextFor(context);
     if (!actor.success)

package/dist/features/feedback.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/features/serv-feature-feedback.ts"],"names":[],"mappings":";;;;AAgCO,SAAS,yBAAyB,IAAA,EAA6B;AACpE,EAAA,MAAM,UAAA,GAAa,OAAO,OAAA,KAAsC;AAC9D,IAAA,IAAI;AACF,MAAA,MAAM,KAAA,GAAQ,MAAM,IAAA,CAAK,cAAA,CAAe,OAAO,CAAA;AAC/C,MAAA,IAAI,CAAC,KAAA,EAAO,OAAA,IAAW,KAAA,CAAM,MAAA,KAAW,QAAQ,OAAA,CAAQ,MAAA;AACtD,QAAA,OAAO,GAAA,CAAI,cAAA,CAAe,SAAA,EAAW,KAAA,CAAM,qBAAA,EAAuB,EAAE,MAAA,EAAQ,OAAA,CAAQ,MAAA,EAAQ,CAAC,CAAA;AAC/F,MAAA,OAAO,EAAE,OAAA,EAAS,IAAA,EAAe,IAAA,EAAM,KAAA,EAAM;AAAA,IAC/C,CAAA,CAAA,MACM;AACJ,MAAA,OAAO,GAAA,CAAI,cAAA,CAAe,cAAA,EAAgB,KAAA,CAAM,oBAAA,EAAsB,EAAE,MAAA,EAAQ,OAAA,CAAQ,MAAA,EAAQ,CAAC,CAAA;AAAA,IACnG;AAAA,EACF,CAAA;AACA,EAAA,MAAM,MAAA,GAAS,SAAA,CAAU,WAAA,CAAY,QAAQ,EAAE,OAAA,EAAqB;AACpE,EAAA,OAAO,MAAA,CACJ,KAAA,CAAM,gBAAgB,CAAA,CACtB,IAAA,GACA,MAAA,CAAO,OAAO,EAAE,OAAA,EAAQ,KAAM;AAC7B,IAAA,MAAM,KAAA,GAAQ,MAAM,UAAA,CAAW,OAAO,CAAA;AACtC,IAAA,OAAO,MAAM,OAAA,GAAU,EAAA,CAAG,IAAA,CAAK,QAAA,CAAS,MAAM,CAAA,GAAI,KAAA;AAAA,EACpD,CAAC,CAAA,CACA,KAAA,CAAM,gBAAgB,CAAA,CACtB,IAAA,EAAK,CACL,MAAA,CAAO,OAAO,EAAE,KAAA,EAAO,OAAA,EAAQ,KAAM;AACpC,IAAA,MAAM,KAAA,GAAQ,MAAM,UAAA,CAAW,OAAO,CAAA;AACtC,IAAA,IAAI,CAAC,KAAA,CAAM,OAAA;AACT,MAAA,OAAO,KAAA;AACT,IAAA,OAAO,IAAA,CAAK,OAAA,CAAQ,GAAA,CAAI,KAAA,CAAM,IAAA,EAAM,MAAM,IAAA,CAAK,QAAA,CAAS,MAAA,CAAO,KAAA,EAAO,KAAA,CAAM,IAAI,CAAC,CAAA;AAAA,EACnF,CAAC,CAAA,CACA,KAAA,CAAM,cAAc,CAAA,CACpB,IAAA,EAAK,CACL,MAAA,CAAO,OAAO,EAAE,KAAA,EAAO,OAAA,EAAQ,KAAM;AACpC,IAAA,MAAM,KAAA,GAAQ,MAAM,UAAA,CAAW,OAAO,CAAA;AACtC,IAAA,IAAI,CAAC,KAAA,CAAM,OAAA;AACT,MAAA,OAAO,KAAA;AACT,IAAA,OAAO,IAAA,CAAK,OAAA,CAAQ,GAAA,CAAI,KAAA,CAAM,IAAA,EAAM,MAAM,IAAA,CAAK,QAAA,CAAS,IAAA,CAAK,KAAA,EAAO,KAAA,CAAM,IAAI,CAAC,CAAA;AAAA,EACjF,CAAC,CAAA,CACA,KAAA,CAAM,aAAa,CAAA,CACnB,IAAA,EAAK,CACL,MAAA,CAAO,OAAO,EAAE,KAAA,EAAO,OAAA,EAAQ,KAAM;AACpC,IAAA,MAAM,KAAA,GAAQ,MAAM,UAAA,CAAW,OAAO,CAAA;AACtC,IAAA,IAAI,CAAC,KAAA,CAAM,OAAA;AACT,MAAA,OAAO,KAAA;AACT,IAAA,OAAO,IAAA,CAAK,OAAA,CAAQ,GAAA,CAAI,KAAA,CAAM,IAAA,EAAM,MAAM,IAAA,CAAK,QAAA,CAAS,GAAA,CAAI,KAAA,CAAM,EAAA,EAAI,KAAA,CAAM,IAAI,CAAC,CAAA;AAAA,EACnF,CAAC,CAAA,CACA,KAAA,CAAM,qBAAqB,CAAA,CAC3B,IAAA,EAAK,CACL,MAAA,CAAO,OAAO,EAAE,KAAA,EAAO,OAAA,EAAQ,KAAM;AACpC,IAAA,MAAM,KAAA,GAAQ,MAAM,UAAA,CAAW,OAAO,CAAA;AACtC,IAAA,IAAI,CAAC,KAAA,CAAM,OAAA;AACT,MAAA,OAAO,KAAA;AACT,IAAA,OAAO,IAAA,CAAK,OAAA,CAAQ,GAAA,CAAI,KAAA,CAAM,IAAA,EAAM,MAAM,IAAA,CAAK,QAAA,CAAS,WAAA,CAAY,KAAA,EAAO,KAAA,CAAM,IAAI,CAAC,CAAA;AAAA,EACxF,CAAC,CAAA,CACA,KAAA,CAAM,mBAAmB,CAAA,CACzB,IAAA,EAAK,CACL,MAAA,CAAO,OAAO,EAAE,KAAA,EAAO,OAAA,EAAQ,KAAM;AACpC,IAAA,MAAM,KAAA,GAAQ,MAAM,UAAA,CAAW,OAAO,CAAA;AACtC,IAAA,IAAI,CAAC,KAAA,CAAM,OAAA;AACT,MAAA,OAAO,KAAA;AACT,IAAA,OAAO,IAAA,CAAK,OAAA,CAAQ,GAAA,CAAI,KAAA,CAAM,IAAA,EAAM,MAAM,IAAA,CAAK,QAAA,CAAS,SAAA,CAAU,KAAA,EAAO,KAAA,CAAM,IAAI,CAAC,CAAA;AAAA,EACtF,CAAC,CAAA,CACA,KAAA,CAAM,eAAe,CAAA,CACrB,IAAA,EAAK,CACL,MAAA,CAAO,OAAO,EAAE,KAAA,EAAO,OAAA,EAAQ,KAAM;AACpC,IAAA,MAAM,KAAA,GAAQ,MAAM,UAAA,CAAW,OAAO,CAAA;AACtC,IAAA,IAAI,CAAC,KAAA,CAAM,OAAA;AACT,MAAA,OAAO,KAAA;AACT,IAAA,OAAO,IAAA,CAAK,OAAA,CAAQ,GAAA,CAAI,KAAA,CAAM,IAAA,EAAM,MAAM,IAAA,CAAK,QAAA,CAAS,KAAA,CAAM,KAAA,EAAO,KAAA,CAAM,IAAI,CAAC,CAAA;AAAA,EAClF,CAAC,CAAA,CACA,KAAA,CAAM,gBAAgB,CAAA,CACtB,IAAA,EAAK,CACL,MAAA,CAAO,OAAO,EAAE,KAAA,EAAO,OAAA,EAAQ,KAAM;AACpC,IAAA,MAAM,KAAA,GAAQ,MAAM,UAAA,CAAW,OAAO,CAAA;AACtC,IAAA,IAAI,CAAC,KAAA,CAAM,OAAA;AACT,MAAA,OAAO,KAAA;AACT,IAAA,OAAO,IAAA,CAAK,OAAA,CAAQ,GAAA,CAAI,KAAA,CAAM,IAAA,EAAM,MAAM,IAAA,CAAK,QAAA,CAAS,MAAA,CAAO,KAAA,EAAO,KAAA,CAAM,IAAI,CAAC,CAAA;AAAA,EACnF,CAAC,CAAA,CACA,KAAA,CAAM,mBAAmB,CAAA,CACzB,IAAA,EAAK,CACL,MAAA,CAAO,OAAO,EAAE,KAAA,EAAO,OAAA,EAAQ,KAAM;AACpC,IAAA,MAAM,KAAA,GAAQ,MAAM,UAAA,CAAW,OAAO,CAAA;AACtC,IAAA,IAAI,CAAC,KAAA,CAAM,OAAA;AACT,MAAA,OAAO,KAAA;AACT,IAAA,OAAO,IAAA,CAAK,OAAA,CAAQ,GAAA,CAAI,KAAA,CAAM,IAAA,EAAM,MAAM,IAAA,CAAK,QAAA,CAAS,SAAA,CAAU,KAAA,EAAO,KAAA,CAAM,IAAI,CAAC,CAAA;AAAA,EACtF,CAAC,CAAA,CACA,KAAA,CAAM,wBAAwB,CAAA,CAC9B,IAAA,EAAK,CACL,MAAA,CAAO,OAAO,EAAE,KAAA,EAAO,OAAA,EAAQ,KAAM;AACpC,IAAA,MAAM,KAAA,GAAQ,MAAM,UAAA,CAAW,OAAO,CAAA;AACtC,IAAA,IAAI,CAAC,KAAA,CAAM,OAAA;AACT,MAAA,OAAO,KAAA;AACT,IAAA,OAAO,IAAA,CAAK,OAAA,CAAQ,GAAA,CAAI,KAAA,CAAM,IAAA,EAAM,MAAM,IAAA,CAAK,QAAA,CAAS,cAAA,CAAe,KAAA,EAAO,KAAA,CAAM,IAAI,CAAC,CAAA;AAAA,EAC3F,CAAC,CAAA,CACA,KAAA,CAAM,4BAA4B,CAAA,CAClC,IAAA,EAAK,CACL,MAAA,CAAO,OAAO,EAAE,KAAA,EAAO,OAAA,EAAQ,KAAM;AACpC,IAAA,MAAM,KAAA,GAAQ,MAAM,UAAA,CAAW,OAAO,CAAA;AACtC,IAAA,IAAI,CAAC,KAAA,CAAM,OAAA;AACT,MAAA,OAAO,KAAA;AACT,IAAA,OAAO,IAAA,CAAK,OAAA,CAAQ,GAAA,CAAI,KAAA,CAAM,IAAA,EAAM,MAAM,IAAA,CAAK,QAAA,CAAS,kBAAA,CAAmB,KAAA,EAAO,KAAA,CAAM,IAAI,CAAC,CAAA;AAAA,EAC/F,CAAC,CAAA,CACA,KAAA,CAAM,oBAAoB,CAAA,CAC1B,IAAA,EAAK,CACL,MAAA,CAAO,OAAO,EAAE,KAAA,EAAO,OAAA,EAAQ,KAAM;AACpC,IAAA,MAAM,KAAA,GAAQ,MAAM,UAAA,CAAW,OAAO,CAAA;AACtC,IAAA,IAAI,CAAC,KAAA,CAAM,OAAA;AACT,MAAA,OAAO,KAAA;AACT,IAAA,OAAO,IAAA,CAAK,OAAA,CAAQ,GAAA,CAAI,KAAA,CAAM,IAAA,EAAM,MAAM,IAAA,CAAK,QAAA,CAAS,gBAAA,CAAiB,KAAA,EAAO,KAAA,CAAM,IAAI,CAAC,CAAA;AAAA,EAC7F,CAAC,CAAA,CACA,KAAA,CAAM,iBAAiB,CAAA,CACvB,IAAA,EAAK,CACL,MAAA,CAAO,OAAO,EAAE,KAAA,EAAO,OAAA,EAAQ,KAAM;AACpC,IAAA,MAAM,KAAA,GAAQ,MAAM,UAAA,CAAW,OAAO,CAAA;AACtC,IAAA,IAAI,CAAC,KAAA,CAAM,OAAA;AACT,MAAA,OAAO,KAAA;AACT,IAAA,OAAO,IAAA,CAAK,OAAA,CAAQ,GAAA,CAAI,KAAA,CAAM,IAAA,EAAM,MAAM,IAAA,CAAK,QAAA,CAAS,aAAA,CAAc,KAAA,EAAO,KAAA,CAAM,IAAI,CAAC,CAAA;AAAA,EAC1F,CAAC,EACA,KAAA,EAAM;AACX","file":"feedback.js","sourcesContent":["/** @h-ai/serv — 按需挂载反馈领域，不接收客户端身份或对象存储路径。 */\nimport type { FeedbackContext, FeedbackFunctions } from '@h-ai/feedback'\nimport type { ServContext } from '../serv-context.js'\nimport type { AuthenticatedServContext } from '../serv-router.js'\nimport { apiContract } from '@h-ai/api-contract'\nimport { core, err, HaiCommonError, ok } from '@h-ai/core'\nimport { servM } from '../serv-i18n.js'\nimport { implement } from '../serv-router.js'\n\n/**\n * 已认证请求到反馈范围的可信映射，返回 null 时拒绝访问。\n * @example\n * ```ts\n * import type { FeedbackProcedureDeps } from '@h-ai/serv/features/feedback'\n * import { feedback } from '@h-ai/feedback'\n * const deps: FeedbackProcedureDeps = { feedback, resolveContext: ({ session }) => ({ scopeId: 'tenant-from-server', userId: session.userId, permissions: session.permissions }) }\n * ```\n */\nexport interface FeedbackProcedureDeps {\n  readonly feedback: FeedbackFunctions\n  readonly resolveContext: (context: AuthenticatedServContext) => FeedbackContext | null | Promise<FeedbackContext | null>\n}\n\n/**\n * 创建反馈的默认 procedures。宿主解析租户与权限，领域模块再次检查资源范围。\n * @example\n * ```ts\n * import { feedback } from '@h-ai/feedback'\n * import { createFeedbackProcedures } from '@h-ai/serv/features/feedback'\n * const procedures = createFeedbackProcedures({ feedback, resolveContext: ({ session }) => ({ scopeId: 'trusted-tenant', userId: session.userId, permissions: session.permissions }) })\n * ```\n */\nexport function createFeedbackProcedures(deps: FeedbackProcedureDeps) {\n  const contextFor = async (context: AuthenticatedServContext) => {\n    try {\n      const actor = await deps.resolveContext(context)\n      if (!actor?.scopeId || actor.userId !== context.session.userId)\n        return err(HaiCommonError.FORBIDDEN, servM('serv_errorForbidden', { locale: context.locale }))\n      return { success: true as const, data: actor }\n    }\n    catch {\n      return err(HaiCommonError.INTERNAL_ERROR, servM('serv_errorInternal', { locale: context.locale }))\n    }\n  }\n  const router = implement(apiContract.feedback).context<ServContext>()\n  return router\n    .route('reports.policy')\n    .auth()\n    .handle(async ({ context }) => {\n      const actor = await contextFor(context)\n      return actor.success ? ok(deps.feedback.budget) : actor\n    })\n    .route('reports.submit')\n    .auth()\n    .handle(async ({ input, context }) => {\n      const actor = await contextFor(context)\n      if (!actor.success)\n        return actor\n      return core.context.run(actor.data, () => deps.feedback.submit(input, actor.data))\n    })\n    .route('reports.list')\n    .auth()\n    .handle(async ({ input, context }) => {\n      const actor = await contextFor(context)\n      if (!actor.success)\n        return actor\n      return core.context.run(actor.data, () => deps.feedback.list(input, actor.data))\n    })\n    .route('reports.get')\n    .auth()\n    .handle(async ({ input, context }) => {\n      const actor = await contextFor(context)\n      if (!actor.success)\n        return actor\n      return core.context.run(actor.data, () => deps.feedback.get(input.id, actor.data))\n    })\n    .route('reports.getEvidence')\n    .auth()\n    .handle(async ({ input, context }) => {\n      const actor = await contextFor(context)\n      if (!actor.success)\n        return actor\n      return core.context.run(actor.data, () => deps.feedback.getEvidence(input, actor.data))\n    })\n    .route('reports.setStatus')\n    .auth()\n    .handle(async ({ input, context }) => {\n      const actor = await contextFor(context)\n      if (!actor.success)\n        return actor\n      return core.context.run(actor.data, () => deps.feedback.setStatus(input, actor.data))\n    })\n    .route('reports.retry')\n    .auth()\n    .handle(async ({ input, context }) => {\n      const actor = await contextFor(context)\n      if (!actor.success)\n        return actor\n      return core.context.run(actor.data, () => deps.feedback.retry(input, actor.data))\n    })\n    .route('reports.export')\n    .auth()\n    .handle(async ({ input, context }) => {\n      const actor = await contextFor(context)\n      if (!actor.success)\n        return actor\n      return core.context.run(actor.data, () => deps.feedback.export(input, actor.data))\n    })\n    .route('reports.getExport')\n    .auth()\n    .handle(async ({ input, context }) => {\n      const actor = await contextFor(context)\n      if (!actor.success)\n        return actor\n      return core.context.run(actor.data, () => deps.feedback.getExport(input, actor.data))\n    })\n    .route('reports.appendEvidence')\n    .auth()\n    .handle(async ({ input, context }) => {\n      const actor = await contextFor(context)\n      if (!actor.success)\n        return actor\n      return core.context.run(actor.data, () => deps.feedback.appendEvidence(input, actor.data))\n    })\n    .route('reports.completeCollection')\n    .auth()\n    .handle(async ({ input, context }) => {\n      const actor = await contextFor(context)\n      if (!actor.success)\n        return actor\n      return core.context.run(actor.data, () => deps.feedback.completeCollection(input, actor.data))\n    })\n    .route('attachments.upload')\n    .auth()\n    .handle(async ({ input, context }) => {\n      const actor = await contextFor(context)\n      if (!actor.success)\n        return actor\n      return core.context.run(actor.data, () => deps.feedback.uploadAttachment(input, actor.data))\n    })\n    .route('attachments.get')\n    .auth()\n    .handle(async ({ input, context }) => {\n      const actor = await contextFor(context)\n      if (!actor.success)\n        return actor\n      return core.context.run(actor.data, () => deps.feedback.getAttachment(input, actor.data))\n    })\n    .build()\n}\n"]}
+{"version":3,"sources":["../../src/features/serv-feature-feedback.ts"],"names":[],"mappings":";;;;AAgCO,SAAS,yBAAyB,IAAA,EAA6B;AACpE,EAAA,MAAM,UAAA,GAAa,OAAO,OAAA,KAAsC;AAC9D,IAAA,IAAI;AACF,MAAA,MAAM,KAAA,GAAQ,MAAM,IAAA,CAAK,cAAA,CAAe,OAAO,CAAA;AAC/C,MAAA,IAAI,CAAC,KAAA,EAAO,OAAA,IAAW,KAAA,CAAM,MAAA,KAAW,QAAQ,OAAA,CAAQ,MAAA;AACtD,QAAA,OAAO,GAAA,CAAI,cAAA,CAAe,SAAA,EAAW,KAAA,CAAM,qBAAA,EAAuB,EAAE,MAAA,EAAQ,OAAA,CAAQ,MAAA,EAAQ,CAAC,CAAA;AAC/F,MAAA,OAAO,EAAE,OAAA,EAAS,IAAA,EAAe,IAAA,EAAM,KAAA,EAAM;AAAA,IAC/C,CAAA,CAAA,MACM;AACJ,MAAA,OAAO,GAAA,CAAI,cAAA,CAAe,cAAA,EAAgB,KAAA,CAAM,oBAAA,EAAsB,EAAE,MAAA,EAAQ,OAAA,CAAQ,MAAA,EAAQ,CAAC,CAAA;AAAA,IACnG;AAAA,EACF,CAAA;AACA,EAAA,MAAM,MAAA,GAAS,SAAA,CAAU,WAAA,CAAY,QAAQ,EAAE,OAAA,EAAqB;AACpE,EAAA,OAAO,MAAA,CACJ,KAAA,CAAM,gBAAgB,CAAA,CACtB,IAAA,GACA,MAAA,CAAO,OAAO,EAAE,OAAA,EAAQ,KAAM;AAC7B,IAAA,MAAM,KAAA,GAAQ,MAAM,UAAA,CAAW,OAAO,CAAA;AACtC,IAAA,IAAI,CAAC,KAAA,CAAM,OAAA;AACT,MAAA,OAAO,KAAA;AACT,IAAA,OAAO,IAAA,CAAK,QAAA,CAAS,aAAA,KAAkB,KAAA,GAAQ,IAAI,cAAA,CAAe,mBAAA,EAAqB,KAAA,CAAM,0BAA0B,CAAC,CAAA,GAAI,EAAA,CAAG,IAAA,CAAK,SAAS,MAAM,CAAA;AAAA,EACrJ,CAAC,CAAA,CACA,KAAA,CAAM,gBAAgB,CAAA,CACtB,IAAA,EAAK,CACL,MAAA,CAAO,OAAO,EAAE,KAAA,EAAO,OAAA,EAAQ,KAAM;AACpC,IAAA,MAAM,KAAA,GAAQ,MAAM,UAAA,CAAW,OAAO,CAAA;AACtC,IAAA,IAAI,CAAC,KAAA,CAAM,OAAA;AACT,MAAA,OAAO,KAAA;AACT,IAAA,OAAO,IAAA,CAAK,OAAA,CAAQ,GAAA,CAAI,KAAA,CAAM,IAAA,EAAM,MAAM,IAAA,CAAK,QAAA,CAAS,MAAA,CAAO,KAAA,EAAO,KAAA,CAAM,IAAI,CAAC,CAAA;AAAA,EACnF,CAAC,CAAA,CACA,KAAA,CAAM,cAAc,CAAA,CACpB,IAAA,EAAK,CACL,MAAA,CAAO,OAAO,EAAE,KAAA,EAAO,OAAA,EAAQ,KAAM;AACpC,IAAA,MAAM,KAAA,GAAQ,MAAM,UAAA,CAAW,OAAO,CAAA;AACtC,IAAA,IAAI,CAAC,KAAA,CAAM,OAAA;AACT,MAAA,OAAO,KAAA;AACT,IAAA,OAAO,IAAA,CAAK,OAAA,CAAQ,GAAA,CAAI,KAAA,CAAM,IAAA,EAAM,MAAM,IAAA,CAAK,QAAA,CAAS,IAAA,CAAK,KAAA,EAAO,KAAA,CAAM,IAAI,CAAC,CAAA;AAAA,EACjF,CAAC,CAAA,CACA,KAAA,CAAM,aAAa,CAAA,CACnB,IAAA,EAAK,CACL,MAAA,CAAO,OAAO,EAAE,KAAA,EAAO,OAAA,EAAQ,KAAM;AACpC,IAAA,MAAM,KAAA,GAAQ,MAAM,UAAA,CAAW,OAAO,CAAA;AACtC,IAAA,IAAI,CAAC,KAAA,CAAM,OAAA;AACT,MAAA,OAAO,KAAA;AACT,IAAA,OAAO,IAAA,CAAK,OAAA,CAAQ,GAAA,CAAI,KAAA,CAAM,IAAA,EAAM,MAAM,IAAA,CAAK,QAAA,CAAS,GAAA,CAAI,KAAA,CAAM,EAAA,EAAI,KAAA,CAAM,IAAI,CAAC,CAAA;AAAA,EACnF,CAAC,CAAA,CACA,KAAA,CAAM,qBAAqB,CAAA,CAC3B,IAAA,EAAK,CACL,MAAA,CAAO,OAAO,EAAE,KAAA,EAAO,OAAA,EAAQ,KAAM;AACpC,IAAA,MAAM,KAAA,GAAQ,MAAM,UAAA,CAAW,OAAO,CAAA;AACtC,IAAA,IAAI,CAAC,KAAA,CAAM,OAAA;AACT,MAAA,OAAO,KAAA;AACT,IAAA,OAAO,IAAA,CAAK,OAAA,CAAQ,GAAA,CAAI,KAAA,CAAM,IAAA,EAAM,MAAM,IAAA,CAAK,QAAA,CAAS,WAAA,CAAY,KAAA,EAAO,KAAA,CAAM,IAAI,CAAC,CAAA;AAAA,EACxF,CAAC,CAAA,CACA,KAAA,CAAM,mBAAmB,CAAA,CACzB,IAAA,EAAK,CACL,MAAA,CAAO,OAAO,EAAE,KAAA,EAAO,OAAA,EAAQ,KAAM;AACpC,IAAA,MAAM,KAAA,GAAQ,MAAM,UAAA,CAAW,OAAO,CAAA;AACtC,IAAA,IAAI,CAAC,KAAA,CAAM,OAAA;AACT,MAAA,OAAO,KAAA;AACT,IAAA,OAAO,IAAA,CAAK,OAAA,CAAQ,GAAA,CAAI,KAAA,CAAM,IAAA,EAAM,MAAM,IAAA,CAAK,QAAA,CAAS,SAAA,CAAU,KAAA,EAAO,KAAA,CAAM,IAAI,CAAC,CAAA;AAAA,EACtF,CAAC,CAAA,CACA,KAAA,CAAM,eAAe,CAAA,CACrB,IAAA,EAAK,CACL,MAAA,CAAO,OAAO,EAAE,KAAA,EAAO,OAAA,EAAQ,KAAM;AACpC,IAAA,MAAM,KAAA,GAAQ,MAAM,UAAA,CAAW,OAAO,CAAA;AACtC,IAAA,IAAI,CAAC,KAAA,CAAM,OAAA;AACT,MAAA,OAAO,KAAA;AACT,IAAA,OAAO,IAAA,CAAK,OAAA,CAAQ,GAAA,CAAI,KAAA,CAAM,IAAA,EAAM,MAAM,IAAA,CAAK,QAAA,CAAS,KAAA,CAAM,KAAA,EAAO,KAAA,CAAM,IAAI,CAAC,CAAA;AAAA,EAClF,CAAC,CAAA,CACA,KAAA,CAAM,gBAAgB,CAAA,CACtB,IAAA,EAAK,CACL,MAAA,CAAO,OAAO,EAAE,KAAA,EAAO,OAAA,EAAQ,KAAM;AACpC,IAAA,MAAM,KAAA,GAAQ,MAAM,UAAA,CAAW,OAAO,CAAA;AACtC,IAAA,IAAI,CAAC,KAAA,CAAM,OAAA;AACT,MAAA,OAAO,KAAA;AACT,IAAA,OAAO,IAAA,CAAK,OAAA,CAAQ,GAAA,CAAI,KAAA,CAAM,IAAA,EAAM,MAAM,IAAA,CAAK,QAAA,CAAS,MAAA,CAAO,KAAA,EAAO,KAAA,CAAM,IAAI,CAAC,CAAA;AAAA,EACnF,CAAC,CAAA,CACA,KAAA,CAAM,mBAAmB,CAAA,CACzB,IAAA,EAAK,CACL,MAAA,CAAO,OAAO,EAAE,KAAA,EAAO,OAAA,EAAQ,KAAM;AACpC,IAAA,MAAM,KAAA,GAAQ,MAAM,UAAA,CAAW,OAAO,CAAA;AACtC,IAAA,IAAI,CAAC,KAAA,CAAM,OAAA;AACT,MAAA,OAAO,KAAA;AACT,IAAA,OAAO,IAAA,CAAK,OAAA,CAAQ,GAAA,CAAI,KAAA,CAAM,IAAA,EAAM,MAAM,IAAA,CAAK,QAAA,CAAS,SAAA,CAAU,KAAA,EAAO,KAAA,CAAM,IAAI,CAAC,CAAA;AAAA,EACtF,CAAC,CAAA,CACA,KAAA,CAAM,wBAAwB,CAAA,CAC9B,IAAA,EAAK,CACL,MAAA,CAAO,OAAO,EAAE,KAAA,EAAO,OAAA,EAAQ,KAAM;AACpC,IAAA,MAAM,KAAA,GAAQ,MAAM,UAAA,CAAW,OAAO,CAAA;AACtC,IAAA,IAAI,CAAC,KAAA,CAAM,OAAA;AACT,MAAA,OAAO,KAAA;AACT,IAAA,OAAO,IAAA,CAAK,OAAA,CAAQ,GAAA,CAAI,KAAA,CAAM,IAAA,EAAM,MAAM,IAAA,CAAK,QAAA,CAAS,cAAA,CAAe,KAAA,EAAO,KAAA,CAAM,IAAI,CAAC,CAAA;AAAA,EAC3F,CAAC,CAAA,CACA,KAAA,CAAM,4BAA4B,CAAA,CAClC,IAAA,EAAK,CACL,MAAA,CAAO,OAAO,EAAE,KAAA,EAAO,OAAA,EAAQ,KAAM;AACpC,IAAA,MAAM,KAAA,GAAQ,MAAM,UAAA,CAAW,OAAO,CAAA;AACtC,IAAA,IAAI,CAAC,KAAA,CAAM,OAAA;AACT,MAAA,OAAO,KAAA;AACT,IAAA,OAAO,IAAA,CAAK,OAAA,CAAQ,GAAA,CAAI,KAAA,CAAM,IAAA,EAAM,MAAM,IAAA,CAAK,QAAA,CAAS,kBAAA,CAAmB,KAAA,EAAO,KAAA,CAAM,IAAI,CAAC,CAAA;AAAA,EAC/F,CAAC,CAAA,CACA,KAAA,CAAM,oBAAoB,CAAA,CAC1B,IAAA,EAAK,CACL,MAAA,CAAO,OAAO,EAAE,KAAA,EAAO,OAAA,EAAQ,KAAM;AACpC,IAAA,MAAM,KAAA,GAAQ,MAAM,UAAA,CAAW,OAAO,CAAA;AACtC,IAAA,IAAI,CAAC,KAAA,CAAM,OAAA;AACT,MAAA,OAAO,KAAA;AACT,IAAA,OAAO,IAAA,CAAK,OAAA,CAAQ,GAAA,CAAI,KAAA,CAAM,IAAA,EAAM,MAAM,IAAA,CAAK,QAAA,CAAS,gBAAA,CAAiB,KAAA,EAAO,KAAA,CAAM,IAAI,CAAC,CAAA;AAAA,EAC7F,CAAC,CAAA,CACA,KAAA,CAAM,iBAAiB,CAAA,CACvB,IAAA,EAAK,CACL,MAAA,CAAO,OAAO,EAAE,KAAA,EAAO,OAAA,EAAQ,KAAM;AACpC,IAAA,MAAM,KAAA,GAAQ,MAAM,UAAA,CAAW,OAAO,CAAA;AACtC,IAAA,IAAI,CAAC,KAAA,CAAM,OAAA;AACT,MAAA,OAAO,KAAA;AACT,IAAA,OAAO,IAAA,CAAK,OAAA,CAAQ,GAAA,CAAI,KAAA,CAAM,IAAA,EAAM,MAAM,IAAA,CAAK,QAAA,CAAS,aAAA,CAAc,KAAA,EAAO,KAAA,CAAM,IAAI,CAAC,CAAA;AAAA,EAC1F,CAAC,EACA,KAAA,EAAM;AACX","file":"feedback.js","sourcesContent":["/** @h-ai/serv — 按需挂载反馈领域，不接收客户端身份或对象存储路径。 */\nimport type { FeedbackContext, FeedbackFunctions } from '@h-ai/feedback'\nimport type { ServContext } from '../serv-context.js'\nimport type { AuthenticatedServContext } from '../serv-router.js'\nimport { apiContract } from '@h-ai/api-contract'\nimport { core, err, HaiCommonError, ok } from '@h-ai/core'\nimport { servM } from '../serv-i18n.js'\nimport { implement } from '../serv-router.js'\n\n/**\n * 已认证请求到反馈范围的可信映射，返回 null 时拒绝访问。\n * @example\n * ```ts\n * import type { FeedbackProcedureDeps } from '@h-ai/serv/features/feedback'\n * import { feedback } from '@h-ai/feedback'\n * const deps: FeedbackProcedureDeps = { feedback, resolveContext: ({ session }) => ({ scopeId: 'tenant-from-server', userId: session.userId, permissions: session.permissions }) }\n * ```\n */\nexport interface FeedbackProcedureDeps {\n  readonly feedback: FeedbackFunctions\n  readonly resolveContext: (context: AuthenticatedServContext) => FeedbackContext | null | Promise<FeedbackContext | null>\n}\n\n/**\n * 创建反馈的默认 procedures。宿主解析租户与权限，领域模块再次检查资源范围。\n * @example\n * ```ts\n * import { feedback } from '@h-ai/feedback'\n * import { createFeedbackProcedures } from '@h-ai/serv/features/feedback'\n * const procedures = createFeedbackProcedures({ feedback, resolveContext: ({ session }) => ({ scopeId: 'trusted-tenant', userId: session.userId, permissions: session.permissions }) })\n * ```\n */\nexport function createFeedbackProcedures(deps: FeedbackProcedureDeps) {\n  const contextFor = async (context: AuthenticatedServContext) => {\n    try {\n      const actor = await deps.resolveContext(context)\n      if (!actor?.scopeId || actor.userId !== context.session.userId)\n        return err(HaiCommonError.FORBIDDEN, servM('serv_errorForbidden', { locale: context.locale }))\n      return { success: true as const, data: actor }\n    }\n    catch {\n      return err(HaiCommonError.INTERNAL_ERROR, servM('serv_errorInternal', { locale: context.locale }))\n    }\n  }\n  const router = implement(apiContract.feedback).context<ServContext>()\n  return router\n    .route('reports.policy')\n    .auth()\n    .handle(async ({ context }) => {\n      const actor = await contextFor(context)\n      if (!actor.success)\n        return actor\n      return deps.feedback.isInitialized === false ? err(HaiCommonError.SERVICE_UNAVAILABLE, servM('serv_feedbackUnavailable')) : ok(deps.feedback.budget)\n    })\n    .route('reports.submit')\n    .auth()\n    .handle(async ({ input, context }) => {\n      const actor = await contextFor(context)\n      if (!actor.success)\n        return actor\n      return core.context.run(actor.data, () => deps.feedback.submit(input, actor.data))\n    })\n    .route('reports.list')\n    .auth()\n    .handle(async ({ input, context }) => {\n      const actor = await contextFor(context)\n      if (!actor.success)\n        return actor\n      return core.context.run(actor.data, () => deps.feedback.list(input, actor.data))\n    })\n    .route('reports.get')\n    .auth()\n    .handle(async ({ input, context }) => {\n      const actor = await contextFor(context)\n      if (!actor.success)\n        return actor\n      return core.context.run(actor.data, () => deps.feedback.get(input.id, actor.data))\n    })\n    .route('reports.getEvidence')\n    .auth()\n    .handle(async ({ input, context }) => {\n      const actor = await contextFor(context)\n      if (!actor.success)\n        return actor\n      return core.context.run(actor.data, () => deps.feedback.getEvidence(input, actor.data))\n    })\n    .route('reports.setStatus')\n    .auth()\n    .handle(async ({ input, context }) => {\n      const actor = await contextFor(context)\n      if (!actor.success)\n        return actor\n      return core.context.run(actor.data, () => deps.feedback.setStatus(input, actor.data))\n    })\n    .route('reports.retry')\n    .auth()\n    .handle(async ({ input, context }) => {\n      const actor = await contextFor(context)\n      if (!actor.success)\n        return actor\n      return core.context.run(actor.data, () => deps.feedback.retry(input, actor.data))\n    })\n    .route('reports.export')\n    .auth()\n    .handle(async ({ input, context }) => {\n      const actor = await contextFor(context)\n      if (!actor.success)\n        return actor\n      return core.context.run(actor.data, () => deps.feedback.export(input, actor.data))\n    })\n    .route('reports.getExport')\n    .auth()\n    .handle(async ({ input, context }) => {\n      const actor = await contextFor(context)\n      if (!actor.success)\n        return actor\n      return core.context.run(actor.data, () => deps.feedback.getExport(input, actor.data))\n    })\n    .route('reports.appendEvidence')\n    .auth()\n    .handle(async ({ input, context }) => {\n      const actor = await contextFor(context)\n      if (!actor.success)\n        return actor\n      return core.context.run(actor.data, () => deps.feedback.appendEvidence(input, actor.data))\n    })\n    .route('reports.completeCollection')\n    .auth()\n    .handle(async ({ input, context }) => {\n      const actor = await contextFor(context)\n      if (!actor.success)\n        return actor\n      return core.context.run(actor.data, () => deps.feedback.completeCollection(input, actor.data))\n    })\n    .route('attachments.upload')\n    .auth()\n    .handle(async ({ input, context }) => {\n      const actor = await contextFor(context)\n      if (!actor.success)\n        return actor\n      return core.context.run(actor.data, () => deps.feedback.uploadAttachment(input, actor.data))\n    })\n    .route('attachments.get')\n    .auth()\n    .handle(async ({ input, context }) => {\n      const actor = await contextFor(context)\n      if (!actor.success)\n        return actor\n      return core.context.run(actor.data, () => deps.feedback.getAttachment(input, actor.data))\n    })\n    .build()\n}\n"]}

package/dist/features/iam.d.ts

@@ -4,7 +4,7 @@ import * as zod_v4_core from 'zod/v4/core';
 import * as zod from 'zod';
 import { IamFunctions } from '@h-ai/iam';
 export { TokenPair } from '@h-ai/iam';
-import { S as ServContext } from '../serv-context-B-AxU8hj.js';
+import { S as ServContext } from '../serv-context-DE1JH5bd.js';
 import '@h-ai/core';
 
 /**
@@ -214,6 +214,7 @@ declare function createIamProcedures(deps: IamProcedureDeps): {
             username: zod.ZodString;
             password: zod.ZodString;
             captcha: zod.ZodOptional<zod.ZodString>;
+            expectedUserId: zod.ZodOptional<zod.ZodString>;
         }, zod_v4_core.$strip>, zod.ZodDiscriminatedUnion<[zod.ZodObject<{
             success: zod.ZodLiteral<true>;
             data: zod.ZodObject<{
@@ -315,6 +316,7 @@ declare function createIamProcedures(deps: IamProcedureDeps): {
             }, zod_v4_core.$strip>;
         }, zod_v4_core.$strip>], "success">, Record<never, never>, Record<never, never>>;
         login: _orpc_server.Procedure<ServContext & {}, any, zod.ZodObject<{
+            expectedUserId: zod.ZodOptional<zod.ZodString>;
             captcha: zod.ZodOptional<zod.ZodString>;
             identifier: zod.ZodString;
             password: zod.ZodString;
@@ -379,6 +381,7 @@ declare function createIamProcedures(deps: IamProcedureDeps): {
             }, zod_v4_core.$strip>;
         }, zod_v4_core.$strip>], "success">, Record<never, never>, Record<never, never>>;
         loginWithOtp: _orpc_server.Procedure<ServContext & {}, any, zod.ZodObject<{
+            expectedUserId: zod.ZodOptional<zod.ZodString>;
             captcha: zod.ZodOptional<zod.ZodString>;
             identifier: zod.ZodString;
             code: zod.ZodString;
@@ -1168,6 +1171,26 @@ declare function createIamProcedures(deps: IamProcedureDeps): {
         }, zod_v4_core.$strip>], "success">, Record<never, never>, Record<never, never>>;
     };
     permissions: {
+        setSensitiveOperations: _orpc_server.Procedure<ServContext & {}, any, zod.ZodObject<{
+            id: zod.ZodString;
+            sensitiveOperations: zod.ZodPipe<zod.ZodOptional<zod.ZodNullable<zod.ZodArray<zod.ZodString>>>, zod.ZodTransform<string[], string[] | null | undefined>>;
+        }, zod_v4_core.$strip>, zod.ZodDiscriminatedUnion<[zod.ZodObject<{
+            success: zod.ZodLiteral<true>;
+            data: zod.ZodVoid;
+        }, zod_v4_core.$strip>, zod.ZodObject<{
+            success: zod.ZodLiteral<false>;
+            error: zod.ZodObject<{
+                code: zod.ZodUnion<readonly [zod.ZodString, zod.ZodNumber]>;
+                message: zod.ZodString;
+                traceId: zod.ZodOptional<zod.ZodString>;
+                httpStatus: zod.ZodOptional<zod.ZodNumber>;
+                system: zod.ZodOptional<zod.ZodString>;
+                module: zod.ZodOptional<zod.ZodString>;
+                cause: zod.ZodOptional<zod.ZodUnknown>;
+                suggestion: zod.ZodOptional<zod.ZodString>;
+                ext: zod.ZodOptional<zod.ZodRecord<zod.ZodString, zod.ZodUnknown>>;
+            }, zod_v4_core.$strip>;
+        }, zod_v4_core.$strip>], "success">, Record<never, never>, Record<never, never>>;
         list: _orpc_server.Procedure<ServContext & {}, any, zod.ZodObject<{
             page: zod.ZodOptional<zod.ZodCoercedNumber<unknown>>;
             pageSize: zod.ZodOptional<zod.ZodCoercedNumber<unknown>>;
@@ -1181,6 +1204,7 @@ declare function createIamProcedures(deps: IamProcedureDeps): {
             success: zod.ZodLiteral<true>;
             data: zod.ZodObject<{
                 items: zod.ZodArray<zod.ZodObject<{
+                    sensitiveOperations: zod.ZodPipe<zod.ZodOptional<zod.ZodNullable<zod.ZodArray<zod.ZodString>>>, zod.ZodTransform<string[], string[] | null | undefined>>;
                     id: zod.ZodString;
                     code: zod.ZodString;
                     name: zod.ZodString;
@@ -1218,6 +1242,7 @@ declare function createIamProcedures(deps: IamProcedureDeps): {
         }, zod_v4_core.$strip>, zod.ZodDiscriminatedUnion<[zod.ZodObject<{
             success: zod.ZodLiteral<true>;
             data: zod.ZodNullable<zod.ZodObject<{
+                sensitiveOperations: zod.ZodPipe<zod.ZodOptional<zod.ZodNullable<zod.ZodArray<zod.ZodString>>>, zod.ZodTransform<string[], string[] | null | undefined>>;
                 id: zod.ZodString;
                 code: zod.ZodString;
                 name: zod.ZodString;
@@ -1247,6 +1272,7 @@ declare function createIamProcedures(deps: IamProcedureDeps): {
             }, zod_v4_core.$strip>;
         }, zod_v4_core.$strip>], "success">, Record<never, never>, Record<never, never>>;
         create: _orpc_server.Procedure<ServContext & {}, any, zod.ZodObject<{
+            sensitiveOperations: zod.ZodDefault<zod.ZodArray<zod.ZodString>>;
             code: zod.ZodString;
             name: zod.ZodString;
             description: zod.ZodOptional<zod.ZodString>;
@@ -1260,6 +1286,7 @@ declare function createIamProcedures(deps: IamProcedureDeps): {
         }, zod_v4_core.$strip>, zod.ZodDiscriminatedUnion<[zod.ZodObject<{
             success: zod.ZodLiteral<true>;
             data: zod.ZodObject<{
+                sensitiveOperations: zod.ZodPipe<zod.ZodOptional<zod.ZodNullable<zod.ZodArray<zod.ZodString>>>, zod.ZodTransform<string[], string[] | null | undefined>>;
                 id: zod.ZodString;
                 code: zod.ZodString;
                 name: zod.ZodString;