@sfmc-bds/db-server 0.1.0 → 0.2.0-beta.0

package/dist/tx-runner.js

@@ -1,273 +1,316 @@
-/**
- * tx-runner.ts — 事务 RPC 处理器
- *
- * 协议:
- *   POST /api/sfmc/db/tx
- *   body = { moduleId, steps: TxStep[] }
- *   reply: { ok: true } | { ok: false, step: <index>, error, code }
- *
- * 流程:
- *   1. 校验 moduleId in enabled + permission "db:write:*"
- *   2. BEGIN IMMEDIATE
- *   3. 顺序跑 steps — 任一抛错 → ROLLBACK + reply { ok:false, step:<i>, ... }
- *   4. 全过 → COMMIT + reply { ok:true }
- *
- * step.op:
- *   - query      { table, opts? }
- *   - get        { table, id }
- *   - insert     { table, row }
- *   - update     { table, id, patch }
- *   - delete     { table, id, hard }
- *   - audit      { table, rowId, action, data? }  → 平台 sfmc__audit 表
- *   - service    { name, input }                  → 派发;失败抛错回退整事务
- *
- * 事务内 service call:不持有 db handle 给 handler(避免并发写) —
- *   实现:handler 是"同步纯函数",返回 result 写回 step 的输出。
- *   若 handler 自己也想写 db,应通过其它接口在事务外做(避免嵌套)。
- */
 import { randomUUID } from "node:crypto";
 import { compile } from "./where.js";
 import { log } from "./lib/log.js";
 import { DispatchError } from "./service-registry.js";
-import { PermissionDeniedError, Perm, assertModulePermission, } from "./permission-gate.js";
+import {
+  PermissionDeniedError,
+  Perm,
+  assertModulePermission
+} from "./permission-gate.js";
+import { normalizeOrderBy } from "./lib/order-by.js";
 const IDENT = /^[A-Za-z_][A-Za-z0-9_]*$/;
 function identOk(t) {
-    if (!IDENT.test(t))
-        throw new Error(`[tx] invalid table name "${t}"`);
+  if (!IDENT.test(t)) throw new Error(`[tx] invalid table name "${t}"`);
 }
-export class TxRunner {
-    deps;
-    constructor(deps) {
-        this.deps = deps;
+class TxRunner {
+  constructor(deps) {
+    this.deps = deps;
+  }
+  deps;
+  sessions = /* @__PURE__ */ new Map();
+  async run(req) {
+    const { moduleId, steps } = req;
+    const manifest = this.deps.enabled.get(moduleId);
+    if (!manifest) return { ok: false, step: -1, error: "\u6A21\u5757\u672A enabled", code: "forbidden" };
+    const traceId = randomUUID().slice(0, 8);
+    const results = [];
+    try {
+      this.deps.db.exec("BEGIN IMMEDIATE");
+    } catch (e) {
+      return { ok: false, step: -1, error: `BEGIN \u5931\u8D25: ${e.message}`, code: "internal" };
     }
-    async run(req) {
-        const { moduleId, steps } = req;
-        const manifest = this.deps.enabled.get(moduleId);
-        if (!manifest)
-            return { ok: false, step: -1, error: "模块未 enabled", code: "forbidden" };
-        // 注意:不在此处做「整体 db:write:*」断言。
-        // 通配 `db:write:*` 无法通过 permission-gate 的 validPermissionKey 校验(模块声明它会启动失败),
-        // 因此该断言会让所有事务(含只读事务)恒被拒。真正的读写权限由每个 step 的
-        // requireTableRead / requireTableWrite 按具体表精确 gate。
-        const traceId = randomUUID().slice(0, 8);
-        const results = [];
-        try {
-            this.deps.db.exec("BEGIN IMMEDIATE");
-        }
-        catch (e) {
-            return { ok: false, step: -1, error: `BEGIN 失败: ${e.message}`, code: "internal" };
-        }
-        for (let i = 0; i < steps.length; i++) {
-            const step = steps[i];
-            try {
-                const r = await this.runOne(moduleId, manifest, step);
-                results.push(r);
-            }
-            catch (err) {
-                this.rollback();
-                const code = err instanceof PermissionDeniedError
-                    ? "permission_denied"
-                    : err instanceof DispatchError &&
-                        (err.code === "no_such_service" ||
-                            err.code === "not_in_requires" ||
-                            err.code === "forbidden" ||
-                            err.code === "domain_error")
-                        ? err.code
-                        : err.code === "no_such_service"
-                            ? "no_such_service"
-                            : err.code === "not_in_requires"
-                                ? "not_in_requires"
-                                : err.code === "no_such_table"
-                                    ? "no_such_table"
-                                    : "internal";
-                log.warn(`[tx ${traceId}] step=${i} failed: ${err.message}`);
-                return { ok: false, step: i, error: err.message, code };
-            }
-        }
-        try {
-            this.deps.db.exec("COMMIT");
-        }
-        catch (e) {
-            this.rollback();
-            return { ok: false, step: -1, error: `COMMIT 失败: ${e.message}`, code: "internal" };
-        }
-        log.info(`[tx ${traceId}] module=${moduleId} ${steps.length} steps OK`);
-        return { ok: true, results };
+    for (let i = 0; i < steps.length; i++) {
+      const step = steps[i];
+      try {
+        const r = await this.runOne(moduleId, manifest, step);
+        results.push(r);
+      } catch (err) {
+        this.rollback();
+        const code = this.mapErrorCode(err);
+        log.warn(`[tx ${traceId}] step=${i} failed: ${err.message}`);
+        return { ok: false, step: i, error: err.message, code };
+      }
     }
-    rollback() {
-        try {
-            this.deps.db.exec("ROLLBACK");
-        }
-        catch {
-            // best-effort; fall through
-        }
+    try {
+      this.deps.db.exec("COMMIT");
+    } catch (e) {
+      this.rollback();
+      return { ok: false, step: -1, error: `COMMIT \u5931\u8D25: ${e.message}`, code: "internal" };
     }
-    /** 单 step 由对应权限检查 + SQL 路径执行 */
-    async runOne(moduleId, manifest, step) {
-        switch (step.op) {
-            case "query":
-                return this.doQuery(moduleId, manifest, step);
-            case "get":
-                return this.doGet(moduleId, manifest, step);
-            case "insert":
-                return this.doInsert(moduleId, manifest, step);
-            case "update":
-                return this.doUpdate(moduleId, manifest, step);
-            case "delete":
-                return this.doDelete(moduleId, manifest, step);
-            case "audit":
-                return this.doAudit(moduleId, manifest, step);
-            case "service":
-                return this.doService(moduleId, manifest, step);
-        }
+    log.info(`[tx ${traceId}] module=${moduleId} ${steps.length} steps OK`);
+    return { ok: true, results };
+  }
+  /**
+   * 交互式事务:begin → step* → commit|rollback。
+   * 供 SDK db.tx 在回调内 await query/get/call 真实结果(PR #31 未完成项)。
+   * 单连接模型:新会话会先清掉残留会话(避免 BEGIN 锁死)。
+   */
+  beginSession(moduleId) {
+    const manifest = this.deps.enabled.get(moduleId);
+    if (!manifest) return { ok: false, step: -1, error: "\u6A21\u5757\u672A enabled", code: "forbidden" };
+    if (this.sessions.size > 0) {
+      for (const id of [...this.sessions.keys()]) {
+        this.abortSession(id);
+      }
     }
-    requireTableRead(mod, table) {
-        identOk(table);
-        this.assertTableRegistered(table);
-        assertModulePermission(mod.id, mod.permissions, Perm.dbRead(table));
+    try {
+      this.deps.db.exec("BEGIN IMMEDIATE");
+    } catch (e) {
+      return { ok: false, step: -1, error: `BEGIN \u5931\u8D25: ${e.message}`, code: "internal" };
     }
-    requireTableWrite(mod, table) {
-        identOk(table);
-        this.assertTableRegistered(table);
-        assertModulePermission(mod.id, mod.permissions, Perm.dbWrite(table));
+    const txId = randomUUID();
+    this.sessions.set(txId, {
+      moduleId,
+      results: [],
+      openedAt: Date.now()
+    });
+    log.info(`[tx-session ${txId.slice(0, 8)}] begin module=${moduleId}`);
+    return { ok: true, txId };
+  }
+  async stepSession(txId, moduleId, step) {
+    const session = this.sessions.get(txId);
+    if (!session) {
+      return { ok: false, step: -1, error: "\u4E8B\u52A1\u4F1A\u8BDD\u4E0D\u5B58\u5728\u6216\u5DF2\u7ED3\u675F", code: "internal" };
     }
-    assertTableRegistered(table) {
-        if (table.startsWith("sfmc_"))
-            return; // 平台表 — 始终可读写(平台层)
-        if (!this.deps.schema.isRegistered(table)) {
-            const err = new Error(`表 "${table}" 未注册到 schema-registry`);
-            err.code = "no_such_table";
-            throw err;
-        }
+    if (session.moduleId !== moduleId) {
+      return { ok: false, step: session.results.length, error: "moduleId \u4E0E\u4F1A\u8BDD\u4E0D\u7B26", code: "forbidden" };
     }
-    doQuery(_mid, mod, step) {
-        this.requireTableRead(mod, step.table);
-        const where = compile(step.opts?.where);
-        const orderBy = step.opts?.orderBy;
-        const limit = typeof step.opts?.limit === "number" ? step.opts?.limit : undefined;
-        const offset = typeof step.opts?.offset === "number" ? step.opts?.offset : undefined;
-        const whereClause = where.sql;
-        const params = [...where.values];
-        let extra = "";
-        if (orderBy) {
-            if (!IDENT.test(orderBy.col))
-                throw new Error(`[tx] orderBy bad column "${orderBy.col}"`);
-            const dir = orderBy.dir === "desc" ? "DESC" : "ASC";
-            extra += ` ORDER BY "${orderBy.col}" ${dir}`;
-        }
-        if (typeof limit === "number") {
-            extra += " LIMIT " + Math.max(0, Math.floor(limit));
-        }
-        if (typeof offset === "number") {
-            extra += " OFFSET " + Math.max(0, Math.floor(offset));
-        }
-        const sql = `SELECT * FROM "${step.table}" WHERE ${whereClause}${extra}`;
-        const rows = this.deps.db.prepare(sql).all(...params);
-        return { op: "query", rows };
+    const manifest = this.deps.enabled.get(moduleId);
+    if (!manifest) {
+      this.abortSession(txId);
+      return { ok: false, step: session.results.length, error: "\u6A21\u5757\u672A enabled", code: "forbidden" };
     }
-    /** 解析主键 WHERE。单列直接等值;联合主键支持 `a|b|c`(与 data-backup 约定一致)。 */
-    pkWhere(table, id) {
-        const cols = this.deps.db.prepare(`PRAGMA table_info("${table}")`).all();
-        const pkCols = cols
-            .filter((c) => c.pk > 0)
-            .sort((a, b) => a.pk - b.pk)
-            .map((c) => c.name);
-        if (pkCols.length === 0) {
-            throw new Error(`[tx] ${table} 没有 primary key`);
-        }
-        if (pkCols.length === 1) {
-            return { clause: `"${pkCols[0]}" = ?`, values: [id] };
-        }
-        const parts = String(id).split("|");
-        if (parts.length === pkCols.length) {
-            return {
-                clause: pkCols.map((c) => `"${c}" = ?`).join(" AND "),
-                values: parts,
-            };
-        }
-        // 联合主键但只传了首列(频道 id 等):按第一主键列匹配
-        return { clause: `"${pkCols[0]}" = ?`, values: [id] };
+    const stepIndex = session.results.length;
+    try {
+      const r = await this.runOne(moduleId, manifest, step);
+      session.results.push(r);
+      return { ok: true, result: r };
+    } catch (err) {
+      this.abortSession(txId);
+      const code = this.mapErrorCode(err);
+      log.warn(`[tx-session ${txId.slice(0, 8)}] step=${stepIndex} failed: ${err.message}`);
+      return { ok: false, step: stepIndex, error: err.message, code };
     }
-    doGet(_mid, mod, step) {
-        this.requireTableRead(mod, step.table);
-        const where = this.pkWhere(step.table, step.id);
-        const row = this.deps.db
-            .prepare(`SELECT * FROM "${step.table}" WHERE ${where.clause}`)
-            .get(...where.values);
-        return { op: "get", row: row ?? null };
+  }
+  commitSession(txId, moduleId) {
+    const session = this.sessions.get(txId);
+    if (!session) {
+      return { ok: false, step: -1, error: "\u4E8B\u52A1\u4F1A\u8BDD\u4E0D\u5B58\u5728\u6216\u5DF2\u7ED3\u675F", code: "internal" };
     }
-    doInsert(_mid, mod, step) {
-        this.requireTableWrite(mod, step.table);
-        const cols = Object.keys(step.row);
-        if (cols.length === 0)
-            throw new Error("[tx] insert row 必须至少一个字段");
-        for (const c of cols) {
-            if (!IDENT.test(c))
-                throw new Error(`[tx] invalid column name "${c}"`);
-        }
-        const placeholders = cols.map(() => "?").join(",");
-        const quoted = cols.map((c) => `"${c}"`).join(",");
-        const values = cols.map((c) => step.row[c]);
-        const sql = `INSERT INTO "${step.table}" (${quoted}) VALUES (${placeholders})`;
-        try {
-            this.deps.db.prepare(sql).run(...values);
-        }
-        catch (e) {
-            throw new Error(`INSERT ${step.table} 失败: ${e.message}`);
-        }
-        return { op: "insert", row: { ...step.row } };
+    if (session.moduleId !== moduleId) {
+      return { ok: false, step: -1, error: "moduleId \u4E0E\u4F1A\u8BDD\u4E0D\u7B26", code: "forbidden" };
     }
-    doUpdate(_mid, mod, step) {
-        this.requireTableWrite(mod, step.table);
-        const cols = Object.keys(step.patch);
-        if (cols.length === 0)
-            throw new Error("[tx] update patch 不能为空");
-        for (const c of cols) {
-            if (!IDENT.test(c))
-                throw new Error(`[tx] invalid column name "${c}"`);
-        }
-        const where = this.pkWhere(step.table, step.id);
-        const sets = cols.map((c) => `"${c}" = ?`).join(",");
-        const params = [...cols.map((c) => step.patch[c]), ...where.values];
-        const sql = `UPDATE "${step.table}" SET ${sets} WHERE ${where.clause}`;
-        const result = this.deps.db.prepare(sql).run(...params);
-        if (result.changes === 0) {
-            throw new Error(`UPDATE ${step.table} id=${step.id} 影响 0 行(找不到 / 已删?)`);
-        }
-        return { op: "update", row: { ...step.patch, id: step.id } };
+    try {
+      this.deps.db.exec("COMMIT");
+    } catch (e) {
+      this.abortSession(txId);
+      return { ok: false, step: -1, error: `COMMIT \u5931\u8D25: ${e.message}`, code: "internal" };
     }
-    doDelete(_mid, mod, step) {
-        this.requireTableWrite(mod, step.table);
-        const where = this.pkWhere(step.table, step.id);
-        if (step.hard) {
-            const sql = `DELETE FROM "${step.table}" WHERE ${where.clause}`;
-            const r = this.deps.db.prepare(sql).run(...where.values);
-            return { op: "delete", changes: Number(r.changes) };
-        }
-        const cols = this.deps.db.prepare(`PRAGMA table_info("${step.table}")`).all();
-        const hasDeletedAt = cols.find((c) => c.name === "_deleted_at");
-        if (!hasDeletedAt) {
-            throw new Error(`[tx] ${step.table} 没启用 softDelete,删不掉;请 hard=true 或 schema 设 softDelete=true`);
-        }
-        const sql = `UPDATE "${step.table}" SET "_deleted_at" = ?, "_version" = COALESCE("_version",0)+1 WHERE ${where.clause}`;
-        const r = this.deps.db.prepare(sql).run(Date.now(), ...where.values);
-        return { op: "delete", changes: Number(r.changes) };
+    const results = session.results;
+    this.sessions.delete(txId);
+    log.info(`[tx-session ${txId.slice(0, 8)}] commit ${results.length} steps OK`);
+    return { ok: true, results };
+  }
+  rollbackSession(txId, moduleId) {
+    const session = this.sessions.get(txId);
+    if (!session) {
+      return { ok: true };
     }
-    doAudit(_mid, mod, step) {
-        this.requireTableWrite(mod, step.table);
-        const dataJson = step.data ? JSON.stringify(step.data) : null;
-        const r = this.deps.db
-            .prepare(`INSERT INTO sfmc__audit (module_id, table_name, row_id, action, data, created_at)
-         VALUES (?, ?, ?, ?, ?, ?)`)
-            .run(mod.id, step.table, step.rowId, step.action, dataJson, new Date().toISOString());
-        return { op: "audit", changes: Number(r.changes) };
+    if (session.moduleId !== moduleId) {
+      return { ok: false, step: -1, error: "moduleId \u4E0E\u4F1A\u8BDD\u4E0D\u7B26", code: "forbidden" };
     }
-    async doService(_mid, mod, step) {
-        // requires / 自调用豁免的唯一权威在 ServiceRegistry.dispatch(DRY/LSP);
-        // 此处只补 dispatch 不做的 service:<name> 权限门(与 HTTP service-routes 对齐)。
-        assertModulePermission(mod.id, mod.permissions, Perm.service(step.name));
-        const result = await this.deps.serviceRegistry.dispatch(this.deps.enabled, mod.id, step.name, step.input, { query: this.deps.query, db: this.deps.db });
-        return { op: "service", result: result.result };
+    this.abortSession(txId);
+    return { ok: true };
+  }
+  abortSession(txId) {
+    this.sessions.delete(txId);
+    this.rollback();
+    log.info(`[tx-session ${txId.slice(0, 8)}] aborted`);
+  }
+  mapErrorCode(err) {
+    return err instanceof PermissionDeniedError ? "permission_denied" : err instanceof DispatchError && (err.code === "no_such_service" || err.code === "not_in_requires" || err.code === "forbidden" || err.code === "domain_error") ? err.code : err.code === "no_such_service" ? "no_such_service" : err.code === "not_in_requires" ? "not_in_requires" : err.code === "no_such_table" ? "no_such_table" : "internal";
+  }
+  rollback() {
+    try {
+      this.deps.db.exec("ROLLBACK");
+    } catch {
     }
+  }
+  /** 单 step 由对应权限检查 + SQL 路径执行 */
+  async runOne(moduleId, manifest, step) {
+    switch (step.op) {
+      case "query":
+        return this.doQuery(moduleId, manifest, step);
+      case "get":
+        return this.doGet(moduleId, manifest, step);
+      case "insert":
+        return this.doInsert(moduleId, manifest, step);
+      case "update":
+        return this.doUpdate(moduleId, manifest, step);
+      case "delete":
+        return this.doDelete(moduleId, manifest, step);
+      case "audit":
+        return this.doAudit(moduleId, manifest, step);
+      case "service":
+        return this.doService(moduleId, manifest, step);
+    }
+  }
+  requireTableRead(mod, table) {
+    identOk(table);
+    this.assertTableRegistered(table);
+    assertModulePermission(mod.id, mod.permissions, Perm.dbRead(table));
+  }
+  requireTableWrite(mod, table) {
+    identOk(table);
+    this.assertTableRegistered(table);
+    assertModulePermission(mod.id, mod.permissions, Perm.dbWrite(table));
+  }
+  assertTableRegistered(table) {
+    if (table.startsWith("sfmc_")) return;
+    if (!this.deps.schema.isRegistered(table)) {
+      const err = new Error(`\u8868 "${table}" \u672A\u6CE8\u518C\u5230 schema-registry`);
+      err.code = "no_such_table";
+      throw err;
+    }
+  }
+  doQuery(_mid, mod, step) {
+    this.requireTableRead(mod, step.table);
+    const where = compile(step.opts?.where);
+    const orders = normalizeOrderBy(step.opts?.orderBy);
+    const limit = typeof step.opts?.limit === "number" ? step.opts?.limit : void 0;
+    const offset = typeof step.opts?.offset === "number" ? step.opts?.offset : void 0;
+    const whereClause = where.sql;
+    const params = [...where.values];
+    let extra = "";
+    if (orders.length > 0) {
+      const parts = [];
+      for (const o of orders) {
+        if (!IDENT.test(o.col)) throw new Error(`[tx] orderBy bad column "${o.col}"`);
+        parts.push(`"${o.col}" ${o.dir === "desc" ? "DESC" : "ASC"}`);
+      }
+      extra += ` ORDER BY ${parts.join(", ")}`;
+    }
+    if (typeof limit === "number") {
+      extra += " LIMIT " + Math.max(0, Math.floor(limit));
+    }
+    if (typeof offset === "number") {
+      extra += " OFFSET " + Math.max(0, Math.floor(offset));
+    }
+    const sql = `SELECT * FROM "${step.table}" WHERE ${whereClause}${extra}`;
+    const rows = this.deps.db.prepare(sql).all(...params);
+    return { op: "query", rows };
+  }
+  /** 解析主键 WHERE。单列直接等值;联合主键支持 `a|b|c`(与 data-backup 约定一致)。 */
+  pkWhere(table, id) {
+    const cols = this.deps.db.prepare(`PRAGMA table_info("${table}")`).all();
+    const pkCols = cols.filter((c) => c.pk > 0).sort((a, b) => a.pk - b.pk).map((c) => c.name);
+    if (pkCols.length === 0) {
+      throw new Error(`[tx] ${table} \u6CA1\u6709 primary key`);
+    }
+    if (pkCols.length === 1) {
+      return { clause: `"${pkCols[0]}" = ?`, values: [id] };
+    }
+    const parts = String(id).split("|");
+    if (parts.length === pkCols.length) {
+      return {
+        clause: pkCols.map((c) => `"${c}" = ?`).join(" AND "),
+        values: parts
+      };
+    }
+    return { clause: `"${pkCols[0]}" = ?`, values: [id] };
+  }
+  doGet(_mid, mod, step) {
+    this.requireTableRead(mod, step.table);
+    const where = this.pkWhere(step.table, step.id);
+    const row = this.deps.db.prepare(`SELECT * FROM "${step.table}" WHERE ${where.clause}`).get(...where.values);
+    return { op: "get", row: row ?? null };
+  }
+  doInsert(_mid, mod, step) {
+    this.requireTableWrite(mod, step.table);
+    const cols = Object.keys(step.row);
+    if (cols.length === 0) throw new Error("[tx] insert row \u5FC5\u987B\u81F3\u5C11\u4E00\u4E2A\u5B57\u6BB5");
+    for (const c of cols) {
+      if (!IDENT.test(c)) throw new Error(`[tx] invalid column name "${c}"`);
+    }
+    const placeholders = cols.map(() => "?").join(",");
+    const quoted = cols.map((c) => `"${c}"`).join(",");
+    const values = cols.map((c) => step.row[c]);
+    const sql = `INSERT INTO "${step.table}" (${quoted}) VALUES (${placeholders})`;
+    try {
+      this.deps.db.prepare(sql).run(...values);
+    } catch (e) {
+      throw new Error(`INSERT ${step.table} \u5931\u8D25: ${e.message}`);
+    }
+    return { op: "insert", row: { ...step.row } };
+  }
+  doUpdate(_mid, mod, step) {
+    this.requireTableWrite(mod, step.table);
+    const cols = Object.keys(step.patch);
+    if (cols.length === 0) throw new Error("[tx] update patch \u4E0D\u80FD\u4E3A\u7A7A");
+    for (const c of cols) {
+      if (!IDENT.test(c)) throw new Error(`[tx] invalid column name "${c}"`);
+    }
+    const where = this.pkWhere(step.table, step.id);
+    const sets = cols.map((c) => `"${c}" = ?`).join(",");
+    const params = [...cols.map((c) => step.patch[c]), ...where.values];
+    const sql = `UPDATE "${step.table}" SET ${sets} WHERE ${where.clause}`;
+    const result = this.deps.db.prepare(sql).run(...params);
+    if (result.changes === 0) {
+      throw new Error(`UPDATE ${step.table} id=${step.id} \u5F71\u54CD 0 \u884C(\u627E\u4E0D\u5230 / \u5DF2\u5220?)`);
+    }
+    return { op: "update", row: { ...step.patch, id: step.id } };
+  }
+  doDelete(_mid, mod, step) {
+    this.requireTableWrite(mod, step.table);
+    const where = this.pkWhere(step.table, step.id);
+    if (step.hard) {
+      const sql2 = `DELETE FROM "${step.table}" WHERE ${where.clause}`;
+      const r2 = this.deps.db.prepare(sql2).run(...where.values);
+      return { op: "delete", changes: Number(r2.changes) };
+    }
+    const cols = this.deps.db.prepare(`PRAGMA table_info("${step.table}")`).all();
+    const hasDeletedAt = cols.find((c) => c.name === "_deleted_at");
+    if (!hasDeletedAt) {
+      throw new Error(
+        `[tx] ${step.table} \u6CA1\u542F\u7528 softDelete,\u5220\u4E0D\u6389;\u8BF7 hard=true \u6216 schema \u8BBE softDelete=true`
+      );
+    }
+    const sql = `UPDATE "${step.table}" SET "_deleted_at" = ?, "_version" = COALESCE("_version",0)+1 WHERE ${where.clause}`;
+    const r = this.deps.db.prepare(sql).run(Date.now(), ...where.values);
+    return { op: "delete", changes: Number(r.changes) };
+  }
+  doAudit(_mid, mod, step) {
+    this.requireTableWrite(mod, step.table);
+    const dataJson = step.data ? JSON.stringify(step.data) : null;
+    const r = this.deps.db.prepare(
+      `INSERT INTO sfmc__audit (module_id, table_name, row_id, action, data, created_at)
+         VALUES (?, ?, ?, ?, ?, ?)`
+    ).run(mod.id, step.table, step.rowId, step.action, dataJson, (/* @__PURE__ */ new Date()).toISOString());
+    return { op: "audit", changes: Number(r.changes) };
+  }
+  async doService(_mid, mod, step) {
+    assertModulePermission(mod.id, mod.permissions, Perm.service(step.name));
+    const result = await this.deps.serviceRegistry.dispatch(
+      this.deps.enabled,
+      mod.id,
+      step.name,
+      step.input,
+      { query: this.deps.query, db: this.deps.db }
+    );
+    return { op: "service", result: result.result };
+  }
 }
-//# sourceMappingURL=tx-runner.js.map
+export {
+  TxRunner
+};
+//# sourceMappingURL=tx-runner.js.map