@sfmc-bds/db-server 0.1.0

package/dist/manifest-loader.js

@@ -0,0 +1,212 @@
+/**
+ * manifest-loader.ts — 读 v2 manifest,失败 = 启动失败
+ *
+ * v2 schema:
+ *   {
+ *     "schemaVersion": 2,
+ *     "id": "feature-land",
+ *     "name": "领地",
+ *     "type": "feature",
+ *     "configKey": "land",
+ *     "requires": ["feature-economy"],
+ *     "permissions": ["db:read:lands", "service:economy.account"],
+ *     "services": {
+ *       "provides": [{ "name": "lands.byOwner", "input": {...}, "output": {...} }],
+ *       "requires":  [{ "name": "economy.account" }]
+ *     },
+ *     "notes": "..."
+ *   }
+ *
+ *   不要 routes / tables / migrations / seeds / handlers / events。
+ *
+ * 调用方:db-server/src/index.ts 启动时一次 loadManifestV2,
+ *        throw 即 crash。
+ */
+import { existsSync, readdirSync, readFileSync } from "node:fs";
+import { resolve } from "node:path";
+import { defaultPackagesDir } from "./manifest.js";
+import { validateManifestPermissions } from "./permission-gate.js";
+const VALID_TYPES = new Set(["core", "feature"]);
+const IDENT = /^[A-Za-z0-9_-]+$/;
+/** v1 / 缺 schemaVersion:跳过(直到所有模块迁 v2) */
+export class ModuleV1SkippedError extends Error {
+    moduleId;
+    declaredVersion;
+    constructor(moduleId, declaredVersion) {
+        super(`moduleId=${moduleId} schemaVersion=${String(declaredVersion)} (需要 2),跳过`);
+        this.moduleId = moduleId;
+        this.declaredVersion = declaredVersion;
+    }
+}
+function assertModuleObject(modId, obj) {
+    if (typeof obj.schemaVersion !== "number") {
+        throw new Error(`[manifest] ${modId}: schemaVersion 缺失`);
+    }
+    if (obj.schemaVersion !== 2) {
+        throw new Error(`[manifest] ${modId}: schemaVersion=${obj.schemaVersion} (需要 2)`);
+    }
+    if (typeof obj.id !== "string" || !IDENT.test(obj.id)) {
+        throw new Error(`[manifest] ${modId}: id 缺失或非法 "${String(obj.id)}"`);
+    }
+    if (typeof obj.name !== "string" || obj.name.length === 0) {
+        throw new Error(`[manifest] ${modId}: name 缺失`);
+    }
+    if (typeof obj.type !== "string" || !VALID_TYPES.has(obj.type)) {
+        throw new Error(`[manifest] ${modId}: type 必须是 core|feature ("${String(obj.type)}")`);
+    }
+    if (typeof obj.configKey !== "string" || obj.configKey.length === 0) {
+        throw new Error(`[manifest] ${modId}: configKey 缺失`);
+    }
+    if (Array.isArray(obj.routes)) {
+        throw new Error(`[manifest] ${modId}: 不再支持 routes 字段,改用 db.defineTable + platform routes`);
+    }
+    if (Array.isArray(obj.migrations)) {
+        throw new Error(`[manifest] ${modId}: 不再支持 migrations 字段,改用 db.defineTable 自动建表`);
+    }
+    if (Array.isArray(obj.tables)) {
+        throw new Error(`[manifest] ${modId}: 不再支持 tables 字段,改用 db.defineTable`);
+    }
+    if (Array.isArray(obj.events)) {
+        throw new Error(`[manifest] ${modId}: 不再支持 events 字段,改用 platform event-bus`);
+    }
+}
+function parseServices(modId, raw) {
+    if (raw === undefined)
+        return { provides: [], requires: [] };
+    if (typeof raw !== "object" || raw === null) {
+        throw new Error(`[manifest] ${modId}: services 必须是对象`);
+    }
+    const obj = raw;
+    const provides = parseServiceList(modId, "provides", obj.provides);
+    const requires = parseServiceList(modId, "requires", obj.requires);
+    for (const r of requires) {
+        if (provides.find((p) => p.name === r.name)) {
+            throw new Error(`[manifest] ${modId}: service "${r.name}" 既 provides 又 requires`);
+        }
+    }
+    return { provides, requires };
+}
+function parseServiceList(modId, dir, raw) {
+    if (raw === undefined)
+        return [];
+    if (!Array.isArray(raw))
+        throw new Error(`[manifest] ${modId}: services.${dir} 必须是数组`);
+    const out = [];
+    for (const item of raw) {
+        if (typeof item !== "object" || item === null) {
+            throw new Error(`[manifest] ${modId}: services.${dir} 项必须是对象`);
+        }
+        const e = item;
+        if (typeof e.name !== "string" || e.name.length === 0) {
+            throw new Error(`[manifest] ${modId}: services.${dir} 项缺少 name`);
+        }
+        const seen = new Set();
+        if (seen.has(e.name)) {
+            throw new Error(`[manifest] ${modId}: services.${dir} name 重复 "${e.name}"`);
+        }
+        seen.add(e.name);
+        out.push({ name: e.name, input: e.input, output: e.output });
+    }
+    return out;
+}
+function parseMod(modId, raw) {
+    if (raw.schemaVersion !== 2) {
+        throw new ModuleV1SkippedError(modId, raw.schemaVersion);
+    }
+    assertModuleObject(modId, raw);
+    const requires = Array.isArray(raw.requires) ? raw.requires.filter((x) => typeof x === "string") : [];
+    const permissions = Array.isArray(raw.permissions) ? raw.permissions.filter((x) => typeof x === "string") : [];
+    validateManifestPermissions(modId, permissions);
+    return {
+        schemaVersion: 2,
+        id: raw.id,
+        name: raw.name,
+        type: raw.type,
+        configKey: raw.configKey,
+        requires,
+        permissions,
+        services: parseServices(modId, raw.services),
+        notes: typeof raw.notes === "string" ? raw.notes : undefined,
+    };
+}
+/**
+ * 启动期调。throw = 启动失败。
+ * 注:不读 v1 manifest。只有 schemaVersion=2 才走。
+ */
+export function loadManifestV2(packagesDir = defaultPackagesDir()) {
+    if (!existsSync(packagesDir)) {
+        throw new Error(`[manifest] ${packagesDir} 不存在;无法启动 v2 协议`);
+    }
+    const ids = readdirSync(packagesDir, { withFileTypes: true })
+        .filter((e) => e.isDirectory())
+        .map((e) => e.name);
+    const modules = {};
+    const providesMap = new Map();
+    for (const id of ids) {
+        const p = resolve(packagesDir, id, "sapi", "manifest.json");
+        if (!existsSync(p))
+            continue;
+        let raw;
+        try {
+            raw = readFileSync(p, "utf8");
+        }
+        catch (e) {
+            throw new Error(`[manifest] ${id}: 读 ${p} 失败: ${e.message}`);
+        }
+        let parsed;
+        try {
+            parsed = JSON.parse(raw);
+        }
+        catch (e) {
+            throw new Error(`[manifest] ${id}: ${p} 非合法 JSON: ${e.message}`);
+        }
+        try {
+            const m = parseMod(id, parsed);
+            modules[m.id] = m;
+            for (const s of m.services.provides) {
+                const prev = providesMap.get(s.name);
+                if (prev) {
+                    throw new Error(`[manifest] service "${s.name}" 已被 ${prev} provides,${m.id} 抢注`);
+                }
+                providesMap.set(s.name, m.id);
+            }
+        }
+        catch (e) {
+            if (e instanceof ModuleV1SkippedError) {
+                // PoC 兼容:不是 v2 的模块跳过,等到所有模块迁 v2 后改为 throw
+                console.warn(`[manifest] ${id}: ${e.message}; v1 跳过`);
+                continue;
+            }
+            throw e;
+        }
+    }
+    // requires:校验目标 service 在某个 provides 里
+    for (const m of Object.values(modules)) {
+        for (const r of m.services.requires) {
+            const owner = providesMap.get(r.name);
+            if (!owner) {
+                throw new Error(`[manifest] ${m.id}.services.requires.${r.name} 没有模块 provides`);
+            }
+        }
+        // requires 模块依赖也要么 enabled 要么本身 installed (启动期不强求 enabled;运行时再查)
+        for (const dep of m.requires) {
+            if (!modules[dep]) {
+                throw new Error(`[manifest] ${m.id}.requires.${dep} 没找到对应模块`);
+            }
+        }
+    }
+    return { modules, providesMap };
+}
+/**
+ * 给定 moduleId 集合,过滤出 enabled (= lock 文件 enabled 的) 子集。
+ * map(moduleId → manifest) — 没装则跳过。
+ */
+export function filterEnabled(loaded, enabledIds) {
+    const out = {};
+    for (const [id, m] of Object.entries(loaded.modules)) {
+        if (enabledIds.has(id))
+            out[id] = m;
+    }
+    return out;
+}
+//# sourceMappingURL=manifest-loader.js.map

package/dist/manifest-loader.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"manifest-loader.js","sourceRoot":"","sources":["../src/manifest-loader.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAEH,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAChE,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AACnD,OAAO,EAAE,2BAA2B,EAAE,MAAM,sBAAsB,CAAC;AA0BnE,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC,CAAC;AACjD,MAAM,KAAK,GAAG,kBAAkB,CAAC;AAEjC,0CAA0C;AAC1C,MAAM,OAAO,oBAAqB,SAAQ,KAAK;IAC1B;IAAyB;IAA5C,YAAmB,QAAgB,EAAS,eAAwB;QAClE,KAAK,CAAC,YAAY,QAAQ,kBAAkB,MAAM,CAAC,eAAe,CAAC,YAAY,CAAC,CAAC;QADhE,aAAQ,GAAR,QAAQ,CAAQ;QAAS,oBAAe,GAAf,eAAe,CAAS;IAEpE,CAAC;CACF;AAED,SAAS,kBAAkB,CAAC,KAAa,EAAE,GAA4B;IACrE,IAAI,OAAO,GAAG,CAAC,aAAa,KAAK,QAAQ,EAAE,CAAC;QAC1C,MAAM,IAAI,KAAK,CAAC,cAAc,KAAK,oBAAoB,CAAC,CAAC;IAC3D,CAAC;IACD,IAAI,GAAG,CAAC,aAAa,KAAK,CAAC,EAAE,CAAC;QAC5B,MAAM,IAAI,KAAK,CAAC,cAAc,KAAK,mBAAmB,GAAG,CAAC,aAAa,SAAS,CAAC,CAAC;IACpF,CAAC;IACD,IAAI,OAAO,GAAG,CAAC,EAAE,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC;QACtD,MAAM,IAAI,KAAK,CAAC,cAAc,KAAK,eAAe,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC;IACvE,CAAC;IACD,IAAI,OAAO,GAAG,CAAC,IAAI,KAAK,QAAQ,IAAI,GAAG,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1D,MAAM,IAAI,KAAK,CAAC,cAAc,KAAK,WAAW,CAAC,CAAC;IAClD,CAAC;IACD,IAAI,OAAO,GAAG,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;QAC/D,MAAM,IAAI,KAAK,CAAC,cAAc,KAAK,6BAA6B,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACxF,CAAC;IACD,IAAI,OAAO,GAAG,CAAC,SAAS,KAAK,QAAQ,IAAI,GAAG,CAAC,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACpE,MAAM,IAAI,KAAK,CAAC,cAAc,KAAK,gBAAgB,CAAC,CAAC;IACvD,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;QAC9B,MAAM,IAAI,KAAK,CAAC,cAAc,KAAK,sDAAsD,CAAC,CAAC;IAC7F,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC;QAClC,MAAM,IAAI,KAAK,CAAC,cAAc,KAAK,6CAA6C,CAAC,CAAC;IACpF,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;QAC9B,MAAM,IAAI,KAAK,CAAC,cAAc,KAAK,oCAAoC,CAAC,CAAC;IAC3E,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;QAC9B,MAAM,IAAI,KAAK,CAAC,cAAc,KAAK,wCAAwC,CAAC,CAAC;IAC/E,CAAC;AACH,CAAC;AAED,SAAS,aAAa,CAAC,KAAa,EAAE,GAAY;IAChD,IAAI,GAAG,KAAK,SAAS;QAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;IAC7D,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;QAC5C,MAAM,IAAI,KAAK,CAAC,cAAc,KAAK,kBAAkB,CAAC,CAAC;IACzD,CAAC;IACD,MAAM,GAAG,GAAG,GAA8B,CAAC;IAC3C,MAAM,QAAQ,GAAG,gBAAgB,CAAC,KAAK,EAAE,UAAU,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAC;IACnE,MAAM,QAAQ,GAAG,gBAAgB,CAAC,KAAK,EAAE,UAAU,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAC;IACnE,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;QACzB,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;YAC5C,MAAM,IAAI,KAAK,CAAC,cAAc,KAAK,cAAc,CAAC,CAAC,IAAI,yBAAyB,CAAC,CAAC;QACpF,CAAC;IACH,CAAC;IACD,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC;AAChC,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAa,EAAE,GAAW,EAAE,GAAY;IAChE,IAAI,GAAG,KAAK,SAAS;QAAE,OAAO,EAAE,CAAC;IACjC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,cAAc,KAAK,cAAc,GAAG,QAAQ,CAAC,CAAC;IACvF,MAAM,GAAG,GAAmB,EAAE,CAAC;IAC/B,KAAK,MAAM,IAAI,IAAI,GAAG,EAAE,CAAC;QACvB,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;YAC9C,MAAM,IAAI,KAAK,CAAC,cAAc,KAAK,cAAc,GAAG,SAAS,CAAC,CAAC;QACjE,CAAC;QACD,MAAM,CAAC,GAAG,IAA+B,CAAC;QAC1C,IAAI,OAAO,CAAC,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACtD,MAAM,IAAI,KAAK,CAAC,cAAc,KAAK,cAAc,GAAG,WAAW,CAAC,CAAC;QACnE,CAAC;QACD,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;QAC/B,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;YACrB,MAAM,IAAI,KAAK,CAAC,cAAc,KAAK,cAAc,GAAG,aAAa,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC;QAC9E,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QACjB,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,KAAsC,EAAE,MAAM,EAAE,CAAC,CAAC,MAAuC,EAAE,CAAC,CAAC;IACjI,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,QAAQ,CAAC,KAAa,EAAE,GAA4B;IAC3D,IAAI,GAAG,CAAC,aAAa,KAAK,CAAC,EAAE,CAAC;QAC5B,MAAM,IAAI,oBAAoB,CAAC,KAAK,EAAE,GAAG,CAAC,aAAa,CAAC,CAAC;IAC3D,CAAC;IACD,kBAAkB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IAC/B,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAE,GAAG,CAAC,QAAsB,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAa,CAAC,CAAC,CAAC,EAAE,CAAC;IACjI,MAAM,WAAW,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,CAAE,GAAG,CAAC,WAAyB,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAa,CAAC,CAAC,CAAC,EAAE,CAAC;IAC1I,2BAA2B,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC;IAChD,OAAO;QACL,aAAa,EAAE,CAAC;QAChB,EAAE,EAAE,GAAG,CAAC,EAAY;QACpB,IAAI,EAAE,GAAG,CAAC,IAAc;QACxB,IAAI,EAAE,GAAG,CAAC,IAA0B;QACpC,SAAS,EAAE,GAAG,CAAC,SAAmB;QAClC,QAAQ;QACR,WAAW;QACX,QAAQ,EAAE,aAAa,CAAC,KAAK,EAAE,GAAG,CAAC,QAAQ,CAAC;QAC5C,KAAK,EAAE,OAAO,GAAG,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS;KAC7D,CAAC;AACJ,CAAC;AAOD;;;GAGG;AACH,MAAM,UAAU,cAAc,CAAC,cAAsB,kBAAkB,EAAE;IACvE,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;QAC7B,MAAM,IAAI,KAAK,CAAC,cAAc,WAAW,iBAAiB,CAAC,CAAC;IAC9D,CAAC;IACD,MAAM,GAAG,GAAG,WAAW,CAAC,WAAW,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC;SAC1D,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;SAC9B,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IACtB,MAAM,OAAO,GAAqC,EAAE,CAAC;IACrD,MAAM,WAAW,GAAG,IAAI,GAAG,EAAkB,CAAC;IAE9C,KAAK,MAAM,EAAE,IAAI,GAAG,EAAE,CAAC;QACrB,MAAM,CAAC,GAAG,OAAO,CAAC,WAAW,EAAE,EAAE,EAAE,MAAM,EAAE,eAAe,CAAC,CAAC;QAC5D,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC;YAAE,SAAS;QAC7B,IAAI,GAAW,CAAC;QAChB,IAAI,CAAC;YACH,GAAG,GAAG,YAAY,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;QAChC,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,MAAM,IAAI,KAAK,CAAC,cAAc,EAAE,OAAO,CAAC,QAAS,CAAW,CAAC,OAAO,EAAE,CAAC,CAAC;QAC1E,CAAC;QACD,IAAI,MAA+B,CAAC;QACpC,IAAI,CAAC;YACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAA4B,CAAC;QACtD,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,MAAM,IAAI,KAAK,CAAC,cAAc,EAAE,KAAK,CAAC,cAAe,CAAW,CAAC,OAAO,EAAE,CAAC,CAAC;QAC9E,CAAC;QACD,IAAI,CAAC;YACH,MAAM,CAAC,GAAG,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;YAC/B,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC;YAClB,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC;gBACpC,MAAM,IAAI,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;gBACrC,IAAI,IAAI,EAAE,CAAC;oBACT,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC,IAAI,QAAQ,IAAI,aAAa,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;gBACnF,CAAC;gBACD,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;YAChC,CAAC;QACH,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,IAAI,CAAC,YAAY,oBAAoB,EAAE,CAAC;gBACtC,0CAA0C;gBAC1C,OAAO,CAAC,IAAI,CAAC,cAAc,EAAE,KAAK,CAAC,CAAC,OAAO,SAAS,CAAC,CAAC;gBACtD,SAAS;YACX,CAAC;YACD,MAAM,CAAC,CAAC;QACV,CAAC;IACH,CAAC;IAED,uCAAuC;IACvC,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;QACvC,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC;YACpC,MAAM,KAAK,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;YACtC,IAAI,CAAC,KAAK,EAAE,CAAC;gBACX,MAAM,IAAI,KAAK,CAAC,cAAc,CAAC,CAAC,EAAE,sBAAsB,CAAC,CAAC,IAAI,gBAAgB,CAAC,CAAC;YAClF,CAAC;QACH,CAAC;QACD,iEAAiE;QACjE,KAAK,MAAM,GAAG,IAAI,CAAC,CAAC,QAAQ,EAAE,CAAC;YAC7B,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;gBAClB,MAAM,IAAI,KAAK,CAAC,cAAc,CAAC,CAAC,EAAE,aAAa,GAAG,UAAU,CAAC,CAAC;YAChE,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC;AAClC,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,aAAa,CAC3B,MAAuB,EACvB,UAA+B;IAE/B,MAAM,GAAG,GAAqC,EAAE,CAAC;IACjD,KAAK,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;QACrD,IAAI,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YAAE,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC;IACtC,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/manifest.d.ts

@@ -0,0 +1,76 @@
+/**
+ * manifest.ts — runtime SAPI module manifest reader.
+ *
+ * At db-server startup, scan `modules/packages/<id>/sapi/manifest.json` for
+ * every installed module and aggregate them into a single in-memory manifest.
+ * No pre-built `modules/_manifests/module-manifests.json` is required; the
+ * per-module files are the single source of truth (the SEA reads them at
+ * runtime too).
+ *
+ * Behavior:
+ *   - Missing file: skip that module (WARN).
+ *   - Corrupt JSON: skip + WARN.
+ *   - schemaVersion > supported: WARN, continue best-effort.
+ *   - schemaVersion < supported: refuse to load that module.
+ *
+ * Reconcile: every route declared in a module's manifest is checked against
+ * the prefix table; mismatches WARN but do not block startup.
+ */
+export interface ModuleManifestRoute {
+    method: string;
+    path: string;
+    handler: string;
+}
+export interface ModuleManifestMigration {
+    name: string;
+    version: number;
+}
+export interface ModuleManifestEntry {
+    name?: string | undefined;
+    type?: string | undefined;
+    configKey?: string | undefined;
+    requires?: string[] | undefined;
+    handlers?: string[] | undefined;
+    routes: ModuleManifestRoute[];
+    migrations: ModuleManifestMigration[];
+    notes?: string | undefined;
+}
+export interface ModuleManifest {
+    schemaVersion: number;
+    generatedAt: string;
+    modules: Record<string, ModuleManifestEntry>;
+}
+export type PackagesDirResolver = () => string;
+/** Resolve where db-server should look for `modules/packages/`.
+ *
+ * 优先级:
+ *   1. `process.env.SFMC_PACKAGES_DIR` —— sfmc/SEA 的 spawnService 在启动 db 时注入
+ *      (SEA 模式下 exe 目录, npm 模式下 process.cwd())
+ *   2. `__dirname` 上溯两级到仓库根 —— 仅当 db-server 独立启动时兜底(CLI 调试)
+ *
+ * SEA 模式必须走 env 路径:SEA CJS bundle 里 `__dirname` 是虚拟路径,
+ * 不能用 `import.meta.url` 解析;靠 SFMC_PACKAGES_DIR 才是稳定的。
+ */
+export declare function defaultPackagesDir(): string;
+/**
+ * Read every `modules/packages/<id>/sapi/manifest.json` and aggregate.
+ * Modules without a manifest are silently skipped (the SAPI side will fall
+ * back to a default-empty surface); modules with a corrupt or too-new
+ * manifest produce warnings.
+ */
+export declare function loadManifest(packagesDir?: string): ModuleManifest;
+export interface ManifestSummary {
+    moduleCount: number;
+    routeCount: number;
+    handlerCount: number;
+    migrationCount: number;
+    moduleIds: string[];
+}
+export declare function summarize(m: ModuleManifest): ManifestSummary;
+/**
+ * Reconcile manifest routes against the routes the db-server currently serves.
+ * Returns a list of warnings for routes declared in the manifest that no route
+ * file covers. Routes already covered by `routes/*.ts` files are not flagged.
+ */
+export declare function reconcile(m: ModuleManifest, knownRoutePrefixes: string[]): string[];
+//# sourceMappingURL=manifest.d.ts.map

package/dist/manifest.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"manifest.d.ts","sourceRoot":"","sources":["../src/manifest.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAMH,MAAM,WAAW,mBAAmB;IAClC,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,uBAAuB;IACtC,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,mBAAmB;IAClC,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC1B,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC1B,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC/B,QAAQ,CAAC,EAAE,MAAM,EAAE,GAAG,SAAS,CAAC;IAChC,QAAQ,CAAC,EAAE,MAAM,EAAE,GAAG,SAAS,CAAC;IAChC,MAAM,EAAE,mBAAmB,EAAE,CAAC;IAC9B,UAAU,EAAE,uBAAuB,EAAE,CAAC;IACtC,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAC5B;AAED,MAAM,WAAW,cAAc;IAC7B,aAAa,EAAE,MAAM,CAAC;IACtB,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,mBAAmB,CAAC,CAAC;CAC9C;AAKD,MAAM,MAAM,mBAAmB,GAAG,MAAM,MAAM,CAAC;AAE/C;;;;;;;;;GASG;AACH,wBAAgB,kBAAkB,IAAI,MAAM,CAE3C;AAED;;;;;GAKG;AACH,wBAAgB,YAAY,CAAC,WAAW,GAAE,MAA6B,GAAG,cAAc,CA8CvF;AAED,MAAM,WAAW,eAAe;IAC9B,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,EAAE,MAAM,CAAC;IACrB,cAAc,EAAE,MAAM,CAAC;IACvB,SAAS,EAAE,MAAM,EAAE,CAAC;CACrB;AAED,wBAAgB,SAAS,CAAC,CAAC,EAAE,cAAc,GAAG,eAAe,CAgB5D;AAED;;;;GAIG;AACH,wBAAgB,SAAS,CAAC,CAAC,EAAE,cAAc,EAAE,kBAAkB,EAAE,MAAM,EAAE,GAAG,MAAM,EAAE,CAYnF"}

package/dist/manifest.js

@@ -0,0 +1,128 @@
+/**
+ * manifest.ts — runtime SAPI module manifest reader.
+ *
+ * At db-server startup, scan `modules/packages/<id>/sapi/manifest.json` for
+ * every installed module and aggregate them into a single in-memory manifest.
+ * No pre-built `modules/_manifests/module-manifests.json` is required; the
+ * per-module files are the single source of truth (the SEA reads them at
+ * runtime too).
+ *
+ * Behavior:
+ *   - Missing file: skip that module (WARN).
+ *   - Corrupt JSON: skip + WARN.
+ *   - schemaVersion > supported: WARN, continue best-effort.
+ *   - schemaVersion < supported: refuse to load that module.
+ *
+ * Reconcile: every route declared in a module's manifest is checked against
+ * the prefix table; mismatches WARN but do not block startup.
+ */
+import { existsSync, readdirSync, readFileSync } from "node:fs";
+import { fileURLToPath } from "node:url";
+import { dirname, resolve } from "node:path";
+const SUPPORTED_SCHEMA = 1;
+const __dirname = dirname(fileURLToPath(import.meta.url));
+/** Resolve where db-server should look for `modules/packages/`.
+ *
+ * 优先级:
+ *   1. `process.env.SFMC_PACKAGES_DIR` —— sfmc/SEA 的 spawnService 在启动 db 时注入
+ *      (SEA 模式下 exe 目录, npm 模式下 process.cwd())
+ *   2. `__dirname` 上溯两级到仓库根 —— 仅当 db-server 独立启动时兜底(CLI 调试)
+ *
+ * SEA 模式必须走 env 路径:SEA CJS bundle 里 `__dirname` 是虚拟路径,
+ * 不能用 `import.meta.url` 解析;靠 SFMC_PACKAGES_DIR 才是稳定的。
+ */
+export function defaultPackagesDir() {
+    return process.env.SFMC_PACKAGES_DIR || resolve(__dirname, "..", "..", "modules", "packages");
+}
+/**
+ * Read every `modules/packages/<id>/sapi/manifest.json` and aggregate.
+ * Modules without a manifest are silently skipped (the SAPI side will fall
+ * back to a default-empty surface); modules with a corrupt or too-new
+ * manifest produce warnings.
+ */
+export function loadManifest(packagesDir = defaultPackagesDir()) {
+    const modules = {};
+    if (!existsSync(packagesDir)) {
+        console.warn(`[manifest] ${packagesDir} does not exist; db-server will run with zero modules`);
+        return { schemaVersion: SUPPORTED_SCHEMA, generatedAt: new Date().toISOString(), modules };
+    }
+    const ids = readdirSync(packagesDir, { withFileTypes: true })
+        .filter((e) => e.isDirectory())
+        .map((e) => e.name)
+        .sort();
+    for (const id of ids) {
+        const manifestPath = resolve(packagesDir, id, "sapi", "manifest.json");
+        if (!existsSync(manifestPath))
+            continue;
+        let raw;
+        try {
+            raw = readFileSync(manifestPath, "utf8");
+        }
+        catch (err) {
+            console.warn(`[manifest] ${id}: cannot read ${manifestPath}: ${err.message}`);
+            continue;
+        }
+        let parsed;
+        try {
+            parsed = JSON.parse(raw);
+        }
+        catch (err) {
+            console.warn(`[manifest] ${id}: ${manifestPath} is not valid JSON: ${err.message}`);
+            continue;
+        }
+        if (typeof parsed.schemaVersion === "number" && parsed.schemaVersion > SUPPORTED_SCHEMA) {
+            console.warn(`[manifest] ${id}: schemaVersion=${parsed.schemaVersion} > supported ${SUPPORTED_SCHEMA}; parsing best-effort`);
+        }
+        modules[id] = {
+            name: parsed.name,
+            type: parsed.type,
+            configKey: parsed.configKey,
+            requires: Array.isArray(parsed.requires) ? parsed.requires : [],
+            handlers: Array.isArray(parsed.handlers) ? parsed.handlers : [],
+            routes: Array.isArray(parsed.routes) ? parsed.routes : [],
+            migrations: Array.isArray(parsed.migrations) ? parsed.migrations : [],
+            notes: parsed.notes,
+        };
+    }
+    return {
+        schemaVersion: SUPPORTED_SCHEMA,
+        generatedAt: new Date().toISOString(),
+        modules,
+    };
+}
+export function summarize(m) {
+    let routeCount = 0;
+    let handlerCount = 0;
+    let migrationCount = 0;
+    for (const entry of Object.values(m.modules)) {
+        routeCount += entry.routes.length;
+        handlerCount += entry.handlers?.length ?? 0;
+        migrationCount += entry.migrations.length;
+    }
+    return {
+        moduleCount: Object.keys(m.modules).length,
+        routeCount,
+        handlerCount,
+        migrationCount,
+        moduleIds: Object.keys(m.modules).sort(),
+    };
+}
+/**
+ * Reconcile manifest routes against the routes the db-server currently serves.
+ * Returns a list of warnings for routes declared in the manifest that no route
+ * file covers. Routes already covered by `routes/*.ts` files are not flagged.
+ */
+export function reconcile(m, knownRoutePrefixes) {
+    const warnings = [];
+    for (const [moduleId, entry] of Object.entries(m.modules)) {
+        for (const route of entry.routes) {
+            const prefix = route.path.split("/").slice(0, 4).join("/");
+            const matched = knownRoutePrefixes.some((p) => prefix.startsWith(p.split("/").slice(0, 4).join("/")));
+            if (!matched) {
+                warnings.push(`${moduleId}: route ${route.method} ${route.path} is not covered by db-server`);
+            }
+        }
+    }
+    return warnings;
+}
+//# sourceMappingURL=manifest.js.map

package/dist/manifest.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"manifest.js","sourceRoot":"","sources":["../src/manifest.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAChE,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AA8B7C,MAAM,gBAAgB,GAAG,CAAC,CAAC;AAC3B,MAAM,SAAS,GAAG,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;AAI1D;;;;;;;;;GASG;AACH,MAAM,UAAU,kBAAkB;IAChC,OAAO,OAAO,CAAC,GAAG,CAAC,iBAAiB,IAAI,OAAO,CAAC,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,UAAU,CAAC,CAAC;AAChG,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,YAAY,CAAC,cAAsB,kBAAkB,EAAE;IACrE,MAAM,OAAO,GAAwC,EAAE,CAAC;IACxD,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;QAC7B,OAAO,CAAC,IAAI,CAAC,cAAc,WAAW,uDAAuD,CAAC,CAAC;QAC/F,OAAO,EAAE,aAAa,EAAE,gBAAgB,EAAE,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,OAAO,EAAE,CAAC;IAC7F,CAAC;IACD,MAAM,GAAG,GAAG,WAAW,CAAC,WAAW,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC;SAC1D,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;SAC9B,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;SAClB,IAAI,EAAE,CAAC;IACV,KAAK,MAAM,EAAE,IAAI,GAAG,EAAE,CAAC;QACrB,MAAM,YAAY,GAAG,OAAO,CAAC,WAAW,EAAE,EAAE,EAAE,MAAM,EAAE,eAAe,CAAC,CAAC;QACvE,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC;YAAE,SAAS;QACxC,IAAI,GAAW,CAAC;QAChB,IAAI,CAAC;YACH,GAAG,GAAG,YAAY,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;QAC3C,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,IAAI,CAAC,cAAc,EAAE,iBAAiB,YAAY,KAAM,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;YACzF,SAAS;QACX,CAAC;QACD,IAAI,MAAiE,CAAC;QACtE,IAAI,CAAC;YACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAkB,CAAC;QAC5C,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,IAAI,CAAC,cAAc,EAAE,KAAK,YAAY,uBAAwB,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;YAC/F,SAAS;QACX,CAAC;QACD,IAAI,OAAO,MAAM,CAAC,aAAa,KAAK,QAAQ,IAAI,MAAM,CAAC,aAAa,GAAG,gBAAgB,EAAE,CAAC;YACxF,OAAO,CAAC,IAAI,CAAC,cAAc,EAAE,mBAAmB,MAAM,CAAC,aAAa,gBAAgB,gBAAgB,uBAAuB,CAAC,CAAC;QAC/H,CAAC;QACD,OAAO,CAAC,EAAE,CAAC,GAAG;YACZ,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,QAAQ,EAAE,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE;YAC/D,QAAQ,EAAE,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE;YAC/D,MAAM,EAAE,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE;YACzD,UAAU,EAAE,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE;YACrE,KAAK,EAAE,MAAM,CAAC,KAAK;SACpB,CAAC;IACJ,CAAC;IACD,OAAO;QACL,aAAa,EAAE,gBAAgB;QAC/B,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACrC,OAAO;KACR,CAAC;AACJ,CAAC;AAUD,MAAM,UAAU,SAAS,CAAC,CAAiB;IACzC,IAAI,UAAU,GAAG,CAAC,CAAC;IACnB,IAAI,YAAY,GAAG,CAAC,CAAC;IACrB,IAAI,cAAc,GAAG,CAAC,CAAC;IACvB,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;QAC7C,UAAU,IAAI,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC;QAClC,YAAY,IAAI,KAAK,CAAC,QAAQ,EAAE,MAAM,IAAI,CAAC,CAAC;QAC5C,cAAc,IAAI,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC;IAC5C,CAAC;IACD,OAAO;QACL,WAAW,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,MAAM;QAC1C,UAAU;QACV,YAAY;QACZ,cAAc;QACd,SAAS,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE;KACzC,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,SAAS,CAAC,CAAiB,EAAE,kBAA4B;IACvE,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,KAAK,MAAM,CAAC,QAAQ,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;QAC1D,KAAK,MAAM,KAAK,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;YACjC,MAAM,MAAM,GAAG,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAC3D,MAAM,OAAO,GAAG,kBAAkB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;YACtG,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,QAAQ,CAAC,IAAI,CAAC,GAAG,QAAQ,WAAW,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,IAAI,8BAA8B,CAAC,CAAC;YAChG,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC"}

package/dist/module-auth.d.ts

@@ -0,0 +1,58 @@
+/**
+ * module-auth.ts — 模块身份的 HMAC token 派生与校验
+ *
+ * 两套并存:
+ *   - `env.AUTH_TOKEN` (config db_config.json http_auth):sfmc 管控 / 平台内部用
+ *   - `moduleTokens[moduleId]`:db-server 给每个 enabled 模块在启动时派生,
+ *     写到 data/module-tokens.json,SAPI host-bootstrap 启动时读,按
+ *     `setDbModuleContext(moduleId, token)` 注入。
+ *
+ * 派生公式:
+ *   module_token = HMAC-SHA256(auth_secret, "sfmc-module:" + moduleId).hex
+ *
+ * auth_secret 优先级:
+ *   1. env.AUTH_TOKEN
+ *   2. 启动时随机生成(无 AUTH_TOKEN 时),写到 data/module-tokens.json,
+ *      只警告一次(每次重启模块 token 都变,SAPI host 必须重读文件)
+ *
+ * 校验:
+ *   - HTTP `Authorization: Bearer <module_token>` 头
+ *   - Query `?moduleId=<id>`
+ *   - 两都匹配 = 调用方身份
+ *   - 校验调用方 moduleId 在 enabled 列表(否则 403)
+ */
+export interface ModuleAuthMap {
+    /** moduleId → hex token */
+    tokens: Record<string, string>;
+    /** 用于派生 token 的 secret (env.AUTH_TOKEN 或本次启动随机生成) */
+    secret: string;
+}
+export declare function deriveToken(moduleId: string, secret: string): string;
+/**
+ * 启动时调用一次:
+ *   - 把 env.AUTH_TOKEN 当 secret
+ *   - 给每个 enabled moduleId 派生 token
+ *   - 写 data/module-tokens.json (SAPI host-bootstrap 读)
+ *   - 控制台打印摘要(env var SFMC_LOG_MODULE_TOKEN=1 时打完整)
+ */
+export declare function buildModuleAuth(opts: {
+    projectRoot: string;
+    envAuthToken: string;
+    enabledModuleIds: string[];
+}): ModuleAuthMap;
+export declare function loadModuleAuth(projectRoot: string): ModuleAuthMap | null;
+/**
+ * 校验请求方身份:
+ *   - Bearer 头 / X-Module-Token 二选一
+ *   - ?moduleId=<id> 必须存在
+ *   - 模块必须在 enabledModuleIds 集合中
+ *   - token 必须 = deriveToken(moduleId, secret)
+ * 返回模块 ID 或 null。
+ */
+export declare function verifyModuleAuth(opts: {
+    headers: NodeJS.Dict<string | string[]>;
+    params: URLSearchParams;
+    auth: ModuleAuthMap;
+    enabledModuleIds: Set<string>;
+}): string | null;
+//# sourceMappingURL=module-auth.d.ts.map

package/dist/module-auth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"module-auth.d.ts","sourceRoot":"","sources":["../src/module-auth.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAOH,MAAM,WAAW,aAAa;IAC5B,2BAA2B;IAC3B,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC/B,qDAAqD;IACrD,MAAM,EAAE,MAAM,CAAC;CAChB;AASD,wBAAgB,WAAW,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM,CAEpE;AAED;;;;;;GAMG;AACH,wBAAgB,eAAe,CAAC,IAAI,EAAE;IACpC,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;IACrB,gBAAgB,EAAE,MAAM,EAAE,CAAC;CAC5B,GAAG,aAAa,CAsChB;AAED,wBAAgB,cAAc,CAAC,WAAW,EAAE,MAAM,GAAG,aAAa,GAAG,IAAI,CAIxE;AAED;;;;;;;GAOG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,EAAE;IACrC,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM,GAAG,MAAM,EAAE,CAAC,CAAC;IACxC,MAAM,EAAE,eAAe,CAAC;IACxB,IAAI,EAAE,aAAa,CAAC;IACpB,gBAAgB,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;CAC/B,GAAG,MAAM,GAAG,IAAI,CAuBhB"}

package/dist/module-auth.js

@@ -0,0 +1,118 @@
+/**
+ * module-auth.ts — 模块身份的 HMAC token 派生与校验
+ *
+ * 两套并存:
+ *   - `env.AUTH_TOKEN` (config db_config.json http_auth):sfmc 管控 / 平台内部用
+ *   - `moduleTokens[moduleId]`:db-server 给每个 enabled 模块在启动时派生,
+ *     写到 data/module-tokens.json,SAPI host-bootstrap 启动时读,按
+ *     `setDbModuleContext(moduleId, token)` 注入。
+ *
+ * 派生公式:
+ *   module_token = HMAC-SHA256(auth_secret, "sfmc-module:" + moduleId).hex
+ *
+ * auth_secret 优先级:
+ *   1. env.AUTH_TOKEN
+ *   2. 启动时随机生成(无 AUTH_TOKEN 时),写到 data/module-tokens.json,
+ *      只警告一次(每次重启模块 token 都变,SAPI host 必须重读文件)
+ *
+ * 校验:
+ *   - HTTP `Authorization: Bearer <module_token>` 头
+ *   - Query `?moduleId=<id>`
+ *   - 两都匹配 = 调用方身份
+ *   - 校验调用方 moduleId 在 enabled 列表(否则 403)
+ */
+import { readJson, writeJson } from "@sfmc-bds/sdk/node/config";
+import { createHmac, randomBytes } from "node:crypto";
+import { join } from "node:path";
+import { log } from "./lib/log.js";
+const IDENT = /^[A-Za-z0-9_\-]+$/;
+function safeId(id) {
+    if (!IDENT.test(id))
+        throw new Error(`[auth] invalid module id: ${id}`);
+    return id;
+}
+export function deriveToken(moduleId, secret) {
+    return createHmac("sha256", secret).update(`sfmc-module:${safeId(moduleId)}`).digest("hex");
+}
+/**
+ * 启动时调用一次:
+ *   - 把 env.AUTH_TOKEN 当 secret
+ *   - 给每个 enabled moduleId 派生 token
+ *   - 写 data/module-tokens.json (SAPI host-bootstrap 读)
+ *   - 控制台打印摘要(env var SFMC_LOG_MODULE_TOKEN=1 时打完整)
+ */
+export function buildModuleAuth(opts) {
+    const secret = opts.envAuthToken || randomBytes(32).toString("hex");
+    const tokens = {};
+    for (const id of opts.enabledModuleIds) {
+        tokens[id] = deriveToken(id, secret);
+    }
+    const outDir = join(opts.projectRoot, "data");
+    const outFile = join(outDir, "module-tokens.json");
+    writeJson(outFile, {
+        tokens,
+        secret,
+        generatedAt: new Date().toISOString(),
+        secretGenerated: !opts.envAuthToken,
+    });
+    log.success(`[auth] 已为 ${opts.enabledModuleIds.length} 个模块派生 HMAC token,写入 ${outFile}`);
+    if (!opts.envAuthToken) {
+        log.warn("[auth] 未配置 env.AUTH_TOKEN(冲突 config http_auth),本次启动使用了随机 secret;"
+            + " 重启后 token 会变,host-bootstrap 必须每次重新读 module-tokens.json");
+    }
+    if (process.env.SFMC_LOG_MODULE_TOKEN === "1") {
+        log.info("[auth] module tokens (SFMC_LOG_MODULE_TOKEN=1):");
+        for (const [id, t] of Object.entries(tokens)) {
+            console.log(`  ${id} = ${t}`);
+        }
+    }
+    else {
+        const lines = Object.entries(tokens)
+            .map(([id, t]) => `  ${id} = ${t.slice(0, 6)}…${t.slice(-4)}`)
+            .join("\n");
+        log.info(`[auth] token 摘要:\n${lines}`);
+    }
+    return { tokens, secret };
+}
+export function loadModuleAuth(projectRoot) {
+    const parsed = readJson(join(projectRoot, "data", "module-tokens.json"));
+    if (!parsed || !parsed.tokens || !parsed.secret)
+        return null;
+    return { tokens: parsed.tokens, secret: parsed.secret };
+}
+/**
+ * 校验请求方身份:
+ *   - Bearer 头 / X-Module-Token 二选一
+ *   - ?moduleId=<id> 必须存在
+ *   - 模块必须在 enabledModuleIds 集合中
+ *   - token 必须 = deriveToken(moduleId, secret)
+ * 返回模块 ID 或 null。
+ */
+export function verifyModuleAuth(opts) {
+    const moduleId = opts.params.get("moduleId") || "";
+    if (!moduleId || !opts.enabledModuleIds.has(moduleId))
+        return null;
+    let provided = "";
+    const auth = opts.headers["authorization"];
+    const token = opts.headers["x-module-token"];
+    if (typeof auth === "string" && auth.startsWith("Bearer ")) {
+        provided = auth.slice(7);
+    }
+    else if (typeof token === "string") {
+        provided = token;
+    }
+    if (!provided)
+        return null;
+    const expected = opts.auth.tokens[moduleId];
+    if (!expected)
+        return null;
+    // constant-time 比较
+    if (provided.length !== expected.length)
+        return null;
+    let diff = 0;
+    for (let i = 0; i < provided.length; i++) {
+        diff |= provided.charCodeAt(i) ^ expected.charCodeAt(i);
+    }
+    return diff === 0 ? moduleId : null;
+}
+//# sourceMappingURL=module-auth.js.map

package/dist/module-auth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"module-auth.js","sourceRoot":"","sources":["../src/module-auth.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAEH,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAmB,MAAM,2BAA2B,CAAC;AACjF,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AACtD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,GAAG,EAAE,MAAM,cAAc,CAAC;AASnC,MAAM,KAAK,GAAG,mBAAmB,CAAC;AAElC,SAAS,MAAM,CAAC,EAAU;IACxB,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,6BAA6B,EAAE,EAAE,CAAC,CAAC;IACxE,OAAO,EAAE,CAAC;AACZ,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,QAAgB,EAAE,MAAc;IAC1D,OAAO,UAAU,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,eAAe,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC9F,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,eAAe,CAAC,IAI/B;IACC,MAAM,MAAM,GAAG,IAAI,CAAC,YAAY,IAAI,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IACpE,MAAM,MAAM,GAA2B,EAAE,CAAC;IAC1C,KAAK,MAAM,EAAE,IAAI,IAAI,CAAC,gBAAgB,EAAE,CAAC;QACvC,MAAM,CAAC,EAAE,CAAC,GAAG,WAAW,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;IACvC,CAAC;IAED,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;IAC9C,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,EAAE,oBAAoB,CAAC,CAAC;IACnD,SAAS,CAAC,OAAO,EAAE;QACjB,MAAM;QACN,MAAM;QACN,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACrC,eAAe,EAAE,CAAC,IAAI,CAAC,YAAY;KACpC,CAAC,CAAC;IAEH,GAAG,CAAC,OAAO,CACT,aAAa,IAAI,CAAC,gBAAgB,CAAC,MAAM,wBAAwB,OAAO,EAAE,CAC3E,CAAC;IACF,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC;QACvB,GAAG,CAAC,IAAI,CACN,kEAAkE;cAC9D,yDAAyD,CAC9D,CAAC;IACJ,CAAC;IACD,IAAI,OAAO,CAAC,GAAG,CAAC,qBAAqB,KAAK,GAAG,EAAE,CAAC;QAC9C,GAAG,CAAC,IAAI,CAAC,iDAAiD,CAAC,CAAC;QAC5D,KAAK,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;YAC7C,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC;QAChC,CAAC;IACH,CAAC;SAAM,CAAC;QACN,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC;aACjC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;aAC7D,IAAI,CAAC,IAAI,CAAC,CAAC;QACd,GAAG,CAAC,IAAI,CAAC,qBAAqB,KAAK,EAAE,CAAC,CAAC;IACzC,CAAC;IAED,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;AAC5B,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,WAAmB;IAChD,MAAM,MAAM,GAAG,QAAQ,CAAa,IAAI,CAAC,WAAW,EAAE,MAAM,EAAE,oBAAoB,CAAC,CAAC,CAAC;IACrF,IAAI,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IAC7D,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC;AAC1D,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,gBAAgB,CAAC,IAKhC;IACC,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC;IACnD,IAAI,CAAC,QAAQ,IAAI,CAAC,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,QAAQ,CAAC;QAAE,OAAO,IAAI,CAAC;IAEnE,IAAI,QAAQ,GAAG,EAAE,CAAC;IAClB,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC;IAC3C,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC;IAC7C,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QAC3D,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAC3B,CAAC;SAAM,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QACrC,QAAQ,GAAG,KAAK,CAAC;IACnB,CAAC;IACD,IAAI,CAAC,QAAQ;QAAE,OAAO,IAAI,CAAC;IAE3B,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IAC5C,IAAI,CAAC,QAAQ;QAAE,OAAO,IAAI,CAAC;IAC3B,mBAAmB;IACnB,IAAI,QAAQ,CAAC,MAAM,KAAK,QAAQ,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IACrD,IAAI,IAAI,GAAG,CAAC,CAAC;IACb,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,QAAQ,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACzC,IAAI,IAAI,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC,GAAG,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;IAC1D,CAAC;IACD,OAAO,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC;AACtC,CAAC"}