@sfmc-bds/db-server 0.2.0-beta.1 → 0.2.0-beta.10

package/dist/manifest.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../src/manifest.ts"],
-  "sourcesContent": ["/**\n * manifest.ts \u2014 runtime SAPI module manifest reader.\n *\n * At db-server startup, scan `modules/packages/<id>/sapi/manifest.json` for\n * every installed module and aggregate them into a single in-memory manifest.\n * No pre-built `modules/_manifests/module-manifests.json` is required; the\n * per-module files are the single source of truth.\n *\n * Behavior:\n *   - Missing file: skip that module (WARN).\n *   - Corrupt JSON: skip + WARN.\n *   - schemaVersion > supported: WARN, continue best-effort.\n *   - schemaVersion < supported: refuse to load that module.\n *\n * Reconcile: every route declared in a module's manifest is checked against\n * the prefix table; mismatches WARN but do not block startup.\n */\n\nimport { existsSync, readdirSync, readFileSync } from \"node:fs\";\nimport { fileURLToPath } from \"node:url\";\nimport { dirname, resolve } from \"node:path\";\n\nexport interface ModuleManifestRoute {\n  method: string;\n  path: string;\n  handler: string;\n}\n\nexport interface ModuleManifestMigration {\n  name: string;\n  version: number;\n}\n\nexport interface ModuleManifestEntry {\n  name?: string | undefined;\n  type?: string | undefined;\n  configKey?: string | undefined;\n  requires?: string[] | undefined;\n  handlers?: string[] | undefined;\n  routes: ModuleManifestRoute[];\n  migrations: ModuleManifestMigration[];\n  notes?: string | undefined;\n}\n\nexport interface ModuleManifest {\n  schemaVersion: number;\n  generatedAt: string;\n  modules: Record<string, ModuleManifestEntry>;\n}\n\nconst SUPPORTED_SCHEMA = 1;\nconst __dirname = dirname(fileURLToPath(import.meta.url));\n\nexport type PackagesDirResolver = () => string;\n\n/** Resolve where db-server should look for `modules/packages/`.\n *\n * \u4F18\u5148\u7EA7:\n *   1. `process.env.SFMC_PACKAGES_DIR` \u2014\u2014 sfmc spawnService \u542F\u52A8 db \u65F6\u6CE8\u5165\n *      (\u901A\u5E38\u4E0E SFMC_ROOT \u5BF9\u9F50)\n *   2. `__dirname` \u4E0A\u6EAF\u4E24\u7EA7\u5230\u4ED3\u5E93\u6839 \u2014\u2014 \u4EC5\u5F53 db-server \u72EC\u7ACB\u542F\u52A8\u65F6\u515C\u5E95(CLI \u8C03\u8BD5)\n */\nexport function defaultPackagesDir(): string {\n  return process.env.SFMC_PACKAGES_DIR || resolve(__dirname, \"..\", \"..\", \"modules\", \"packages\");\n}\n\n/**\n * Read every `modules/packages/<id>/sapi/manifest.json` and aggregate.\n * Modules without a manifest are silently skipped (the SAPI side will fall\n * back to a default-empty surface); modules with a corrupt or too-new\n * manifest produce warnings.\n */\nexport function loadManifest(packagesDir: string = defaultPackagesDir()): ModuleManifest {\n  const modules: Record<string, ModuleManifestEntry> = {};\n  if (!existsSync(packagesDir)) {\n    console.warn(`[manifest] ${packagesDir} does not exist; db-server will run with zero modules`);\n    return { schemaVersion: SUPPORTED_SCHEMA, generatedAt: new Date().toISOString(), modules };\n  }\n  const ids = readdirSync(packagesDir, { withFileTypes: true })\n    .filter((e) => e.isDirectory())\n    .map((e) => e.name)\n    .sort();\n  for (const id of ids) {\n    const manifestPath = resolve(packagesDir, id, \"sapi\", \"manifest.json\");\n    if (!existsSync(manifestPath)) continue;\n    let raw: string;\n    try {\n      raw = readFileSync(manifestPath, \"utf8\");\n    } catch (err) {\n      console.warn(`[manifest] ${id}: cannot read ${manifestPath}: ${(err as Error).message}`);\n      continue;\n    }\n    let parsed: Partial<ModuleManifestEntry> & { schemaVersion?: number };\n    try {\n      parsed = JSON.parse(raw) as typeof parsed;\n    } catch (err) {\n      console.warn(`[manifest] ${id}: ${manifestPath} is not valid JSON: ${(err as Error).message}`);\n      continue;\n    }\n    if (typeof parsed.schemaVersion === \"number\" && parsed.schemaVersion > SUPPORTED_SCHEMA) {\n      console.warn(`[manifest] ${id}: schemaVersion=${parsed.schemaVersion} > supported ${SUPPORTED_SCHEMA}; parsing best-effort`);\n    }\n    modules[id] = {\n      name: parsed.name,\n      type: parsed.type,\n      configKey: parsed.configKey,\n      requires: Array.isArray(parsed.requires) ? parsed.requires : [],\n      handlers: Array.isArray(parsed.handlers) ? parsed.handlers : [],\n      routes: Array.isArray(parsed.routes) ? parsed.routes : [],\n      migrations: Array.isArray(parsed.migrations) ? parsed.migrations : [],\n      notes: parsed.notes,\n    };\n  }\n  return {\n    schemaVersion: SUPPORTED_SCHEMA,\n    generatedAt: new Date().toISOString(),\n    modules,\n  };\n}\n\nexport interface ManifestSummary {\n  moduleCount: number;\n  routeCount: number;\n  handlerCount: number;\n  migrationCount: number;\n  moduleIds: string[];\n}\n\nexport function summarize(m: ModuleManifest): ManifestSummary {\n  let routeCount = 0;\n  let handlerCount = 0;\n  let migrationCount = 0;\n  for (const entry of Object.values(m.modules)) {\n    routeCount += entry.routes.length;\n    handlerCount += entry.handlers?.length ?? 0;\n    migrationCount += entry.migrations.length;\n  }\n  return {\n    moduleCount: Object.keys(m.modules).length,\n    routeCount,\n    handlerCount,\n    migrationCount,\n    moduleIds: Object.keys(m.modules).sort(),\n  };\n}\n\n/**\n * Reconcile manifest routes against the routes the db-server currently serves.\n * Returns a list of warnings for routes declared in the manifest that no route\n * file covers. Routes already covered by `routes/*.ts` files are not flagged.\n */\nexport function reconcile(m: ModuleManifest, knownRoutePrefixes: string[]): string[] {\n  const warnings: string[] = [];\n  for (const [moduleId, entry] of Object.entries(m.modules)) {\n    for (const route of entry.routes) {\n      const prefix = route.path.split(\"/\").slice(0, 4).join(\"/\");\n      const matched = knownRoutePrefixes.some((p) => prefix.startsWith(p.split(\"/\").slice(0, 4).join(\"/\")));\n      if (!matched) {\n        warnings.push(`${moduleId}: route ${route.method} ${route.path} is not covered by db-server`);\n      }\n    }\n  }\n  return warnings;\n}"],
-  "mappings": "AAkBA,SAAS,YAAY,aAAa,oBAAoB;AACtD,SAAS,qBAAqB;AAC9B,SAAS,SAAS,eAAe;AA8BjC,MAAM,mBAAmB;AACzB,MAAM,YAAY,QAAQ,cAAc,YAAY,GAAG,CAAC;AAWjD,SAAS,qBAA6B;AAC3C,SAAO,QAAQ,IAAI,qBAAqB,QAAQ,WAAW,MAAM,MAAM,WAAW,UAAU;AAC9F;AAQO,SAAS,aAAa,cAAsB,mBAAmB,GAAmB;AACvF,QAAM,UAA+C,CAAC;AACtD,MAAI,CAAC,WAAW,WAAW,GAAG;AAC5B,YAAQ,KAAK,cAAc,WAAW,uDAAuD;AAC7F,WAAO,EAAE,eAAe,kBAAkB,cAAa,oBAAI,KAAK,GAAE,YAAY,GAAG,QAAQ;AAAA,EAC3F;AACA,QAAM,MAAM,YAAY,aAAa,EAAE,eAAe,KAAK,CAAC,EACzD,OAAO,CAAC,MAAM,EAAE,YAAY,CAAC,EAC7B,IAAI,CAAC,MAAM,EAAE,IAAI,EACjB,KAAK;AACR,aAAW,MAAM,KAAK;AACpB,UAAM,eAAe,QAAQ,aAAa,IAAI,QAAQ,eAAe;AACrE,QAAI,CAAC,WAAW,YAAY,EAAG;AAC/B,QAAI;AACJ,QAAI;AACF,YAAM,aAAa,cAAc,MAAM;AAAA,IACzC,SAAS,KAAK;AACZ,cAAQ,KAAK,cAAc,EAAE,iBAAiB,YAAY,KAAM,IAAc,OAAO,EAAE;AACvF;AAAA,IACF;AACA,QAAI;AACJ,QAAI;AACF,eAAS,KAAK,MAAM,GAAG;AAAA,IACzB,SAAS,KAAK;AACZ,cAAQ,KAAK,cAAc,EAAE,KAAK,YAAY,uBAAwB,IAAc,OAAO,EAAE;AAC7F;AAAA,IACF;AACA,QAAI,OAAO,OAAO,kBAAkB,YAAY,OAAO,gBAAgB,kBAAkB;AACvF,cAAQ,KAAK,cAAc,EAAE,mBAAmB,OAAO,aAAa,gBAAgB,gBAAgB,uBAAuB;AAAA,IAC7H;AACA,YAAQ,EAAE,IAAI;AAAA,MACZ,MAAM,OAAO;AAAA,MACb,MAAM,OAAO;AAAA,MACb,WAAW,OAAO;AAAA,MAClB,UAAU,MAAM,QAAQ,OAAO,QAAQ,IAAI,OAAO,WAAW,CAAC;AAAA,MAC9D,UAAU,MAAM,QAAQ,OAAO,QAAQ,IAAI,OAAO,WAAW,CAAC;AAAA,MAC9D,QAAQ,MAAM,QAAQ,OAAO,MAAM,IAAI,OAAO,SAAS,CAAC;AAAA,MACxD,YAAY,MAAM,QAAQ,OAAO,UAAU,IAAI,OAAO,aAAa,CAAC;AAAA,MACpE,OAAO,OAAO;AAAA,IAChB;AAAA,EACF;AACA,SAAO;AAAA,IACL,eAAe;AAAA,IACf,cAAa,oBAAI,KAAK,GAAE,YAAY;AAAA,IACpC;AAAA,EACF;AACF;AAUO,SAAS,UAAU,GAAoC;AAC5D,MAAI,aAAa;AACjB,MAAI,eAAe;AACnB,MAAI,iBAAiB;AACrB,aAAW,SAAS,OAAO,OAAO,EAAE,OAAO,GAAG;AAC5C,kBAAc,MAAM,OAAO;AAC3B,oBAAgB,MAAM,UAAU,UAAU;AAC1C,sBAAkB,MAAM,WAAW;AAAA,EACrC;AACA,SAAO;AAAA,IACL,aAAa,OAAO,KAAK,EAAE,OAAO,EAAE;AAAA,IACpC;AAAA,IACA;AAAA,IACA;AAAA,IACA,WAAW,OAAO,KAAK,EAAE,OAAO,EAAE,KAAK;AAAA,EACzC;AACF;AAOO,SAAS,UAAU,GAAmB,oBAAwC;AACnF,QAAM,WAAqB,CAAC;AAC5B,aAAW,CAAC,UAAU,KAAK,KAAK,OAAO,QAAQ,EAAE,OAAO,GAAG;AACzD,eAAW,SAAS,MAAM,QAAQ;AAChC,YAAM,SAAS,MAAM,KAAK,MAAM,GAAG,EAAE,MAAM,GAAG,CAAC,EAAE,KAAK,GAAG;AACzD,YAAM,UAAU,mBAAmB,KAAK,CAAC,MAAM,OAAO,WAAW,EAAE,MAAM,GAAG,EAAE,MAAM,GAAG,CAAC,EAAE,KAAK,GAAG,CAAC,CAAC;AACpG,UAAI,CAAC,SAAS;AACZ,iBAAS,KAAK,GAAG,QAAQ,WAAW,MAAM,MAAM,IAAI,MAAM,IAAI,8BAA8B;AAAA,MAC9F;AAAA,IACF;AAAA,EACF;AACA,SAAO;AACT;",
+  "sourcesContent": ["/**\n * manifest.ts \u2014 runtime SAPI module manifest reader.\n *\n * At db-server startup, scan `modules/packages/<id>/sapi/manifest.json` for\n * every installed module and aggregate them into a single in-memory manifest.\n * No pre-built `modules/_manifests/module-manifests.json` is required; the\n * per-module files are the single source of truth.\n *\n * Behavior:\n *   - Missing file: skip that module (WARN).\n *   - Corrupt JSON: skip + WARN.\n *   - schemaVersion > supported: WARN, continue best-effort.\n *   - schemaVersion < supported: refuse to load that module.\n *\n * Reconcile: every route declared in a module's manifest is checked against\n * the prefix table; mismatches WARN but do not block startup.\n */\n\nimport { existsSync, readdirSync, readFileSync, statSync } from \"node:fs\";\nimport { join } from \"node:path\";\nimport { PROJECT_ROOT } from \"./project-root.js\";\n\nexport interface ModuleManifestRoute {\n  method: string;\n  path: string;\n  handler: string;\n}\n\nexport interface ModuleManifestMigration {\n  name: string;\n  version: number;\n}\n\nexport interface ModuleManifestEntry {\n  name?: string | undefined;\n  configKey?: string | undefined;\n  requires?: string[] | undefined;\n  handlers?: string[] | undefined;\n  routes: ModuleManifestRoute[];\n  migrations: ModuleManifestMigration[];\n  notes?: string | undefined;\n}\n\nexport interface ModuleManifest {\n  schemaVersion: number;\n  generatedAt: string;\n  modules: Record<string, ModuleManifestEntry>;\n}\n\nconst SUPPORTED_SCHEMA = 1;\n\nexport type PackagesDirResolver = () => string;\n\n/** Resolve where db-server should look for `modules/packages/`.\n *\n * \u4F18\u5148\u7EA7:\n *   1. `process.env.SFMC_PACKAGES_DIR` \u2014\u2014 sfmc spawnService \u542F\u52A8 db \u65F6\u6CE8\u5165\n *      (\u901A\u5E38\u4E0E SFMC_ROOT \u5BF9\u9F50)\n *   2. PROJECT_ROOT/modules/packages \u2014\u2014 \u72EC\u7ACB\u542F\u52A8\u65F6\u515C\u5E95\n */\nexport function defaultPackagesDir(): string {\n  return process.env.SFMC_PACKAGES_DIR || join(PROJECT_ROOT, \"modules\", \"packages\");\n}\n\n/**\n * Read every `modules/packages/<id>/sapi/manifest.json` and aggregate.\n * Modules without a manifest are silently skipped (the SAPI side will fall\n * back to a default-empty surface); modules with a corrupt or too-new\n * manifest produce warnings.\n */\nexport function loadManifest(packagesDir: string = defaultPackagesDir()): ModuleManifest {\n  const modules: Record<string, ModuleManifestEntry> = {};\n  if (!existsSync(packagesDir)) {\n    console.warn(`[manifest] ${packagesDir} does not exist; db-server will run with zero modules`);\n    return { schemaVersion: SUPPORTED_SCHEMA, generatedAt: new Date().toISOString(), modules };\n  }\n  const ids = readdirSync(packagesDir, { withFileTypes: true })\n    .filter((e) => {\n      if (e.name.startsWith(\".\")) return false;\n      try {\n        return statSync(join(packagesDir, e.name)).isDirectory();\n      } catch {\n        return false;\n      }\n    })\n    .map((e) => e.name)\n    .sort();\n  for (const id of ids) {\n    const manifestPath = join(packagesDir, id, \"sapi\", \"manifest.json\");\n    if (!existsSync(manifestPath)) continue;\n    let raw: string;\n    try {\n      raw = readFileSync(manifestPath, \"utf8\");\n    } catch (err) {\n      console.warn(`[manifest] ${id}: cannot read ${manifestPath}: ${(err as Error).message}`);\n      continue;\n    }\n    let parsed: Partial<ModuleManifestEntry> & { schemaVersion?: number };\n    try {\n      parsed = JSON.parse(raw) as typeof parsed;\n    } catch (err) {\n      console.warn(`[manifest] ${id}: ${manifestPath} is not valid JSON: ${(err as Error).message}`);\n      continue;\n    }\n    if (typeof parsed.schemaVersion === \"number\" && parsed.schemaVersion > SUPPORTED_SCHEMA) {\n      console.warn(`[manifest] ${id}: schemaVersion=${parsed.schemaVersion} > supported ${SUPPORTED_SCHEMA}; parsing best-effort`);\n    }\n    modules[id] = {\n      name: parsed.name,\n      configKey: parsed.configKey,\n      requires: Array.isArray(parsed.requires) ? parsed.requires : [],\n      handlers: Array.isArray(parsed.handlers) ? parsed.handlers : [],\n      routes: Array.isArray(parsed.routes) ? parsed.routes : [],\n      migrations: Array.isArray(parsed.migrations) ? parsed.migrations : [],\n      notes: parsed.notes,\n    };\n  }\n  return {\n    schemaVersion: SUPPORTED_SCHEMA,\n    generatedAt: new Date().toISOString(),\n    modules,\n  };\n}\n\nexport interface ManifestSummary {\n  moduleCount: number;\n  routeCount: number;\n  handlerCount: number;\n  migrationCount: number;\n  moduleIds: string[];\n}\n\nexport function summarize(m: ModuleManifest): ManifestSummary {\n  let routeCount = 0;\n  let handlerCount = 0;\n  let migrationCount = 0;\n  for (const entry of Object.values(m.modules)) {\n    routeCount += entry.routes.length;\n    handlerCount += entry.handlers?.length ?? 0;\n    migrationCount += entry.migrations.length;\n  }\n  return {\n    moduleCount: Object.keys(m.modules).length,\n    routeCount,\n    handlerCount,\n    migrationCount,\n    moduleIds: Object.keys(m.modules).sort(),\n  };\n}\n\n/**\n * Reconcile manifest routes against the routes the db-server currently serves.\n * Returns a list of warnings for routes declared in the manifest that no route\n * file covers. Routes already covered by `routes/*.ts` files are not flagged.\n */\nexport function reconcile(m: ModuleManifest, knownRoutePrefixes: string[]): string[] {\n  const warnings: string[] = [];\n  for (const [moduleId, entry] of Object.entries(m.modules)) {\n    for (const route of entry.routes) {\n      const prefix = route.path.split(\"/\").slice(0, 4).join(\"/\");\n      const matched = knownRoutePrefixes.some((p) => prefix.startsWith(p.split(\"/\").slice(0, 4).join(\"/\")));\n      if (!matched) {\n        warnings.push(`${moduleId}: route ${route.method} ${route.path} is not covered by db-server`);\n      }\n    }\n  }\n  return warnings;\n}"],
+  "mappings": "AAkBA,SAAS,YAAY,aAAa,cAAc,gBAAgB;AAChE,SAAS,YAAY;AACrB,SAAS,oBAAoB;AA6B7B,MAAM,mBAAmB;AAWlB,SAAS,qBAA6B;AAC3C,SAAO,QAAQ,IAAI,qBAAqB,KAAK,cAAc,WAAW,UAAU;AAClF;AAQO,SAAS,aAAa,cAAsB,mBAAmB,GAAmB;AACvF,QAAM,UAA+C,CAAC;AACtD,MAAI,CAAC,WAAW,WAAW,GAAG;AAC5B,YAAQ,KAAK,cAAc,WAAW,uDAAuD;AAC7F,WAAO,EAAE,eAAe,kBAAkB,cAAa,oBAAI,KAAK,GAAE,YAAY,GAAG,QAAQ;AAAA,EAC3F;AACA,QAAM,MAAM,YAAY,aAAa,EAAE,eAAe,KAAK,CAAC,EACzD,OAAO,CAAC,MAAM;AACb,QAAI,EAAE,KAAK,WAAW,GAAG,EAAG,QAAO;AACnC,QAAI;AACF,aAAO,SAAS,KAAK,aAAa,EAAE,IAAI,CAAC,EAAE,YAAY;AAAA,IACzD,QAAQ;AACN,aAAO;AAAA,IACT;AAAA,EACF,CAAC,EACA,IAAI,CAAC,MAAM,EAAE,IAAI,EACjB,KAAK;AACR,aAAW,MAAM,KAAK;AACpB,UAAM,eAAe,KAAK,aAAa,IAAI,QAAQ,eAAe;AAClE,QAAI,CAAC,WAAW,YAAY,EAAG;AAC/B,QAAI;AACJ,QAAI;AACF,YAAM,aAAa,cAAc,MAAM;AAAA,IACzC,SAAS,KAAK;AACZ,cAAQ,KAAK,cAAc,EAAE,iBAAiB,YAAY,KAAM,IAAc,OAAO,EAAE;AACvF;AAAA,IACF;AACA,QAAI;AACJ,QAAI;AACF,eAAS,KAAK,MAAM,GAAG;AAAA,IACzB,SAAS,KAAK;AACZ,cAAQ,KAAK,cAAc,EAAE,KAAK,YAAY,uBAAwB,IAAc,OAAO,EAAE;AAC7F;AAAA,IACF;AACA,QAAI,OAAO,OAAO,kBAAkB,YAAY,OAAO,gBAAgB,kBAAkB;AACvF,cAAQ,KAAK,cAAc,EAAE,mBAAmB,OAAO,aAAa,gBAAgB,gBAAgB,uBAAuB;AAAA,IAC7H;AACA,YAAQ,EAAE,IAAI;AAAA,MACZ,MAAM,OAAO;AAAA,MACb,WAAW,OAAO;AAAA,MAClB,UAAU,MAAM,QAAQ,OAAO,QAAQ,IAAI,OAAO,WAAW,CAAC;AAAA,MAC9D,UAAU,MAAM,QAAQ,OAAO,QAAQ,IAAI,OAAO,WAAW,CAAC;AAAA,MAC9D,QAAQ,MAAM,QAAQ,OAAO,MAAM,IAAI,OAAO,SAAS,CAAC;AAAA,MACxD,YAAY,MAAM,QAAQ,OAAO,UAAU,IAAI,OAAO,aAAa,CAAC;AAAA,MACpE,OAAO,OAAO;AAAA,IAChB;AAAA,EACF;AACA,SAAO;AAAA,IACL,eAAe;AAAA,IACf,cAAa,oBAAI,KAAK,GAAE,YAAY;AAAA,IACpC;AAAA,EACF;AACF;AAUO,SAAS,UAAU,GAAoC;AAC5D,MAAI,aAAa;AACjB,MAAI,eAAe;AACnB,MAAI,iBAAiB;AACrB,aAAW,SAAS,OAAO,OAAO,EAAE,OAAO,GAAG;AAC5C,kBAAc,MAAM,OAAO;AAC3B,oBAAgB,MAAM,UAAU,UAAU;AAC1C,sBAAkB,MAAM,WAAW;AAAA,EACrC;AACA,SAAO;AAAA,IACL,aAAa,OAAO,KAAK,EAAE,OAAO,EAAE;AAAA,IACpC;AAAA,IACA;AAAA,IACA;AAAA,IACA,WAAW,OAAO,KAAK,EAAE,OAAO,EAAE,KAAK;AAAA,EACzC;AACF;AAOO,SAAS,UAAU,GAAmB,oBAAwC;AACnF,QAAM,WAAqB,CAAC;AAC5B,aAAW,CAAC,UAAU,KAAK,KAAK,OAAO,QAAQ,EAAE,OAAO,GAAG;AACzD,eAAW,SAAS,MAAM,QAAQ;AAChC,YAAM,SAAS,MAAM,KAAK,MAAM,GAAG,EAAE,MAAM,GAAG,CAAC,EAAE,KAAK,GAAG;AACzD,YAAM,UAAU,mBAAmB,KAAK,CAAC,MAAM,OAAO,WAAW,EAAE,MAAM,GAAG,EAAE,MAAM,GAAG,CAAC,EAAE,KAAK,GAAG,CAAC,CAAC;AACpG,UAAI,CAAC,SAAS;AACZ,iBAAS,KAAK,GAAG,QAAQ,WAAW,MAAM,MAAM,IAAI,MAAM,IAAI,8BAA8B;AAAA,MAC9F;AAAA,IACF;AAAA,EACF;AACA,SAAO;AACT;",
   "names": []
 }

package/dist/module-auth.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"module-auth.d.ts","sourceRoot":"","sources":["../src/module-auth.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAOH,MAAM,WAAW,aAAa;IAC5B,2BAA2B;IAC3B,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC/B,qDAAqD;IACrD,MAAM,EAAE,MAAM,CAAC;CAChB;AASD,6DAA6D;AAC7D,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAEvD;AAED,wBAAgB,WAAW,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM,CAEpE;AAED;;;;;;GAMG;AACH,wBAAgB,eAAe,CAAC,IAAI,EAAE;IACpC,MAAM,EAAE,MAAM,CAAC;IACf,YAAY,EAAE,MAAM,CAAC;IACrB,gBAAgB,EAAE,MAAM,EAAE,CAAC;CAC5B,GAAG,aAAa,CAqChB;AAED,wBAAgB,cAAc,CAAC,MAAM,EAAE,MAAM,GAAG,aAAa,GAAG,IAAI,CAInE;AAED,wDAAwD;AACxD,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,GAAG,IAAI,CAQjG;AAED;;;GAGG;AACH,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,aAAa,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAIhF;AAED,gDAAgD;AAChD,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,aAAa,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAIhF;AAED;;;;;;;GAOG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,EAAE;IACrC,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM,GAAG,MAAM,EAAE,CAAC,CAAC;IACxC,MAAM,EAAE,eAAe,CAAC;IACxB,IAAI,EAAE,aAAa,CAAC;IACpB,gBAAgB,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;CAC/B,GAAG,MAAM,GAAG,IAAI,CAuBhB"}
+{"version":3,"file":"module-auth.d.ts","sourceRoot":"","sources":["../src/module-auth.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAOH,MAAM,WAAW,aAAa;IAC5B,2BAA2B;IAC3B,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC/B,qDAAqD;IACrD,MAAM,EAAE,MAAM,CAAC;CAChB;AASD,6DAA6D;AAC7D,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAEvD;AAED,wBAAgB,WAAW,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM,CAIpE;AAED;;;;;;GAMG;AACH,wBAAgB,eAAe,CAAC,IAAI,EAAE;IACpC,MAAM,EAAE,MAAM,CAAC;IACf,YAAY,EAAE,MAAM,CAAC;IACrB,gBAAgB,EAAE,MAAM,EAAE,CAAC;CAC5B,GAAG,aAAa,CAgChB;AAED,wBAAgB,cAAc,CAAC,MAAM,EAAE,MAAM,GAAG,aAAa,GAAG,IAAI,CAInE;AAED,wDAAwD;AACxD,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,GAAG,IAAI,CAQjG;AAED;;;GAGG;AACH,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,aAAa,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAIhF;AAED,gDAAgD;AAChD,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,aAAa,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAIhF;AAED;;;;;;;GAOG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,EAAE;IACrC,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM,GAAG,MAAM,EAAE,CAAC,CAAC;IACxC,MAAM,EAAE,eAAe,CAAC;IACxB,IAAI,EAAE,aAAa,CAAC;IACpB,gBAAgB,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;CAC/B,GAAG,MAAM,GAAG,IAAI,CAuBhB"}

package/dist/module-auth.js

@@ -26,13 +26,9 @@ function buildModuleAuth(opts) {
     generatedAt: (/* @__PURE__ */ new Date()).toISOString(),
     secretGenerated: !opts.envAuthToken
   });
-  log.success(
-    `[auth] \u5DF2\u4E3A ${opts.enabledModuleIds.length} \u4E2A\u6A21\u5757\u6D3E\u751F HMAC token,\u5199\u5165 ${outFile}`
-  );
+  log.success(`[auth] \u5DF2\u4E3A ${opts.enabledModuleIds.length} \u4E2A\u6A21\u5757\u6D3E\u751F HMAC token,\u5199\u5165 ${outFile}`);
   if (!opts.envAuthToken) {
-    log.warn(
-      "[auth] \u672A\u914D\u7F6E env.AUTH_TOKEN(\u51B2\u7A81 config http_auth),\u672C\u6B21\u542F\u52A8\u4F7F\u7528\u4E86\u968F\u673A secret; \u91CD\u542F\u540E token \u4F1A\u53D8,host-bootstrap \u5FC5\u987B\u6BCF\u6B21\u91CD\u65B0\u8BFB module-tokens.json"
-    );
+    log.warn("[auth] \u672A\u914D\u7F6E env.AUTH_TOKEN,\u672C\u6B21\u542F\u52A8\u4F7F\u7528\u4E86\u968F\u673A secret;");
   }
   if (process.env.SFMC_LOG_MODULE_TOKEN === "1") {
     log.info("[auth] module tokens (SFMC_LOG_MODULE_TOKEN=1):");

package/dist/module-auth.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../src/module-auth.ts"],
-  "sourcesContent": ["/**\n * module-auth.ts \u2014 \u6A21\u5757\u8EAB\u4EFD\u7684 HMAC token \u6D3E\u751F\u4E0E\u6821\u9A8C\n *\n * \u4E24\u5957\u5E76\u5B58:\n *   - `env.AUTH_TOKEN` (config db_config.json http_auth):sfmc \u7BA1\u63A7 / \u5E73\u53F0\u5185\u90E8\u7528\n *   - `moduleTokens[moduleId]`:db-server \u7ED9\u6BCF\u4E2A enabled \u6A21\u5757\u5728\u542F\u52A8\u65F6\u6D3E\u751F,\n *     \u5199\u5230\u300C\u4E0E\u6570\u636E\u5E93\u540C\u76EE\u5F55\u300D\u7684 module-tokens.json\uFF08\u8DDF db_config.dbDir \u8D70\uFF0C\u52FF\u5199\u6B7B ROOT/data\uFF09,\n *     SAPI \u7ECF loopback API \u6CE8\u5165 setDbModuleContext\u3002\n *\n * \u6D3E\u751F\u516C\u5F0F:\n *   module_token = HMAC-SHA256(auth_secret, \"sfmc-module:\" + moduleId).hex\n *\n * auth_secret \u4F18\u5148\u7EA7:\n *   1. env.AUTH_TOKEN\n *   2. \u542F\u52A8\u65F6\u968F\u673A\u751F\u6210(\u65E0 AUTH_TOKEN \u65F6),\u5199\u5230 module-tokens.json,\n *      \u53EA\u8B66\u544A\u4E00\u6B21(\u6BCF\u6B21\u91CD\u542F\u6A21\u5757 token \u90FD\u53D8,SAPI host \u5FC5\u987B\u91CD\u8BFB\u6587\u4EF6)\n *\n * \u6821\u9A8C:\n *   - HTTP `Authorization: Bearer <module_token>` \u5934\n *   - Query `?moduleId=<id>`\n *   - \u4E24\u90FD\u5339\u914D = \u8C03\u7528\u65B9\u8EAB\u4EFD\n *   - \u6821\u9A8C\u8C03\u7528\u65B9 moduleId \u5728 enabled \u5217\u8868(\u5426\u5219 403)\n */\n\nimport { readJson, writeJson, type TokenStore } from \"@sfmc-bds/sdk/node/config\";\nimport { createHmac, randomBytes } from \"node:crypto\";\nimport { dirname, join } from \"node:path\";\nimport { log } from \"./lib/log.js\";\n\nexport interface ModuleAuthMap {\n  /** moduleId \u2192 hex token */\n  tokens: Record<string, string>;\n  /** \u7528\u4E8E\u6D3E\u751F token \u7684 secret (env.AUTH_TOKEN \u6216\u672C\u6B21\u542F\u52A8\u968F\u673A\u751F\u6210) */\n  secret: string;\n}\n\nconst IDENT = /^[A-Za-z0-9_\\-]+$/;\n\nfunction safeId(id: string): string {\n  if (!IDENT.test(id)) throw new Error(`[auth] invalid module id: ${id}`);\n  return id;\n}\n\n/** token \u6587\u4EF6\u4E0E SQLite \u540C\u76EE\u5F55\uFF08\u7531 dbDir \u51B3\u5B9A\uFF0C\u907F\u514D\u5411\u5BFC\u9009\u76EE\u5F55\u524D\u5C31\u521B\u5EFA ROOT/data\uFF09 */\nexport function moduleTokensFile(dbPath: string): string {\n  return join(dirname(dbPath), \"module-tokens.json\");\n}\n\nexport function deriveToken(moduleId: string, secret: string): string {\n  return createHmac(\"sha256\", secret).update(`sfmc-module:${safeId(moduleId)}`).digest(\"hex\");\n}\n\n/**\n * \u542F\u52A8\u65F6\u8C03\u7528\u4E00\u6B21:\n *   - \u628A env.AUTH_TOKEN \u5F53 secret\n *   - \u7ED9\u6BCF\u4E2A enabled moduleId \u6D3E\u751F token\n *   - \u5199 module-tokens.json\uFF08\u4E0E DB \u540C\u76EE\u5F55\uFF09\n *   - \u63A7\u5236\u53F0\u6253\u5370\u6458\u8981(env var SFMC_LOG_MODULE_TOKEN=1 \u65F6\u6253\u5B8C\u6574)\n */\nexport function buildModuleAuth(opts: {\n  dbPath: string;\n  envAuthToken: string;\n  enabledModuleIds: string[];\n}): ModuleAuthMap {\n  const secret = opts.envAuthToken || randomBytes(32).toString(\"hex\");\n  const tokens: Record<string, string> = {};\n  for (const id of opts.enabledModuleIds) {\n    tokens[id] = deriveToken(id, secret);\n  }\n\n  const outFile = moduleTokensFile(opts.dbPath);\n  writeJson(outFile, {\n    tokens,\n    secret,\n    generatedAt: new Date().toISOString(),\n    secretGenerated: !opts.envAuthToken,\n  });\n\n  log.success(\n    `[auth] \u5DF2\u4E3A ${opts.enabledModuleIds.length} \u4E2A\u6A21\u5757\u6D3E\u751F HMAC token,\u5199\u5165 ${outFile}`\n  );\n  if (!opts.envAuthToken) {\n    log.warn(\n      \"[auth] \u672A\u914D\u7F6E env.AUTH_TOKEN(\u51B2\u7A81 config http_auth),\u672C\u6B21\u542F\u52A8\u4F7F\u7528\u4E86\u968F\u673A secret;\"\n        + \" \u91CD\u542F\u540E token \u4F1A\u53D8,host-bootstrap \u5FC5\u987B\u6BCF\u6B21\u91CD\u65B0\u8BFB module-tokens.json\"\n    );\n  }\n  if (process.env.SFMC_LOG_MODULE_TOKEN === \"1\") {\n    log.info(\"[auth] module tokens (SFMC_LOG_MODULE_TOKEN=1):\");\n    for (const [id, t] of Object.entries(tokens)) {\n      log.info(`  ${id} = ${t}`);\n    }\n  } else {\n    const lines = Object.entries(tokens)\n      .map(([id, t]) => `  ${id} = ${t.slice(0, 6)}\u2026${t.slice(-4)}`)\n      .join(\"\\n\");\n    log.info(`[auth] token \u6458\u8981:\\n${lines}`);\n  }\n\n  return { tokens, secret };\n}\n\nexport function loadModuleAuth(dbPath: string): ModuleAuthMap | null {\n  const parsed = readJson<TokenStore>(moduleTokensFile(dbPath));\n  if (!parsed || !parsed.tokens || !parsed.secret) return null;\n  return { tokens: parsed.tokens, secret: parsed.secret };\n}\n\n/** \u628A\u5F53\u524D auth map \u5199\u56DE module-tokens.json(\u70ED\u66F4\u65B0 token \u65F6\u590D\u7528) */\nexport function persistModuleAuth(dbPath: string, auth: ModuleAuthMap, envAuthToken: string): void {\n  const outFile = moduleTokensFile(dbPath);\n  writeJson(outFile, {\n    tokens: auth.tokens,\n    secret: auth.secret,\n    generatedAt: new Date().toISOString(),\n    secretGenerated: !envAuthToken,\n  } satisfies TokenStore);\n}\n\n/**\n * \u786E\u4FDD moduleId \u5728 auth.tokens \u4E2D\u6709\u6D3E\u751F\u503C(\u590D\u7528\u73B0\u6709 secret,\u52FF\u91CD\u5EFA\u968F\u673A secret)\u3002\n * @returns \u662F\u5426\u65B0\u5199\u5165\u4E86 token\n */\nexport function ensureModuleToken(auth: ModuleAuthMap, moduleId: string): boolean {\n  if (auth.tokens[moduleId]) return false;\n  auth.tokens[moduleId] = deriveToken(moduleId, auth.secret);\n  return true;\n}\n\n/** \u7981\u7528\u65F6\u64A4\u9500\u5185\u5B58\u4E2D\u7684 token(\u78C1\u76D8\u7531 persistModuleAuth \u540C\u6B65) */\nexport function revokeModuleToken(auth: ModuleAuthMap, moduleId: string): boolean {\n  if (!(moduleId in auth.tokens)) return false;\n  delete auth.tokens[moduleId];\n  return true;\n}\n\n/**\n * \u6821\u9A8C\u8BF7\u6C42\u65B9\u8EAB\u4EFD:\n *   - Bearer \u5934 / X-Module-Token \u4E8C\u9009\u4E00\n *   - ?moduleId=<id> \u5FC5\u987B\u5B58\u5728\n *   - \u6A21\u5757\u5FC5\u987B\u5728 enabledModuleIds \u96C6\u5408\u4E2D\n *   - token \u5FC5\u987B = deriveToken(moduleId, secret)\n * \u8FD4\u56DE\u6A21\u5757 ID \u6216 null\u3002\n */\nexport function verifyModuleAuth(opts: {\n  headers: NodeJS.Dict<string | string[]>;\n  params: URLSearchParams;\n  auth: ModuleAuthMap;\n  enabledModuleIds: Set<string>;\n}): string | null {\n  const moduleId = opts.params.get(\"moduleId\") || \"\";\n  if (!moduleId || !opts.enabledModuleIds.has(moduleId)) return null;\n\n  let provided = \"\";\n  const auth = opts.headers[\"authorization\"];\n  const token = opts.headers[\"x-module-token\"];\n  if (typeof auth === \"string\" && auth.startsWith(\"Bearer \")) {\n    provided = auth.slice(7);\n  } else if (typeof token === \"string\") {\n    provided = token;\n  }\n  if (!provided) return null;\n\n  const expected = opts.auth.tokens[moduleId];\n  if (!expected) return null;\n  // constant-time \u6BD4\u8F83\n  if (provided.length !== expected.length) return null;\n  let diff = 0;\n  for (let i = 0; i < provided.length; i++) {\n    diff |= provided.charCodeAt(i) ^ expected.charCodeAt(i);\n  }\n  return diff === 0 ? moduleId : null;\n}\n"],
-  "mappings": "AAwBA,SAAS,UAAU,iBAAkC;AACrD,SAAS,YAAY,mBAAmB;AACxC,SAAS,SAAS,YAAY;AAC9B,SAAS,WAAW;AASpB,MAAM,QAAQ;AAEd,SAAS,OAAO,IAAoB;AAClC,MAAI,CAAC,MAAM,KAAK,EAAE,EAAG,OAAM,IAAI,MAAM,6BAA6B,EAAE,EAAE;AACtE,SAAO;AACT;AAGO,SAAS,iBAAiB,QAAwB;AACvD,SAAO,KAAK,QAAQ,MAAM,GAAG,oBAAoB;AACnD;AAEO,SAAS,YAAY,UAAkB,QAAwB;AACpE,SAAO,WAAW,UAAU,MAAM,EAAE,OAAO,eAAe,OAAO,QAAQ,CAAC,EAAE,EAAE,OAAO,KAAK;AAC5F;AASO,SAAS,gBAAgB,MAId;AAChB,QAAM,SAAS,KAAK,gBAAgB,YAAY,EAAE,EAAE,SAAS,KAAK;AAClE,QAAM,SAAiC,CAAC;AACxC,aAAW,MAAM,KAAK,kBAAkB;AACtC,WAAO,EAAE,IAAI,YAAY,IAAI,MAAM;AAAA,EACrC;AAEA,QAAM,UAAU,iBAAiB,KAAK,MAAM;AAC5C,YAAU,SAAS;AAAA,IACjB;AAAA,IACA;AAAA,IACA,cAAa,oBAAI,KAAK,GAAE,YAAY;AAAA,IACpC,iBAAiB,CAAC,KAAK;AAAA,EACzB,CAAC;AAED,MAAI;AAAA,IACF,uBAAa,KAAK,iBAAiB,MAAM,2DAAwB,OAAO;AAAA,EAC1E;AACA,MAAI,CAAC,KAAK,cAAc;AACtB,QAAI;AAAA,MACF;AAAA,IAEF;AAAA,EACF;AACA,MAAI,QAAQ,IAAI,0BAA0B,KAAK;AAC7C,QAAI,KAAK,iDAAiD;AAC1D,eAAW,CAAC,IAAI,CAAC,KAAK,OAAO,QAAQ,MAAM,GAAG;AAC5C,UAAI,KAAK,KAAK,EAAE,MAAM,CAAC,EAAE;AAAA,IAC3B;AAAA,EACF,OAAO;AACL,UAAM,QAAQ,OAAO,QAAQ,MAAM,EAChC,IAAI,CAAC,CAAC,IAAI,CAAC,MAAM,KAAK,EAAE,MAAM,EAAE,MAAM,GAAG,CAAC,CAAC,SAAI,EAAE,MAAM,EAAE,CAAC,EAAE,EAC5D,KAAK,IAAI;AACZ,QAAI,KAAK;AAAA,EAAqB,KAAK,EAAE;AAAA,EACvC;AAEA,SAAO,EAAE,QAAQ,OAAO;AAC1B;AAEO,SAAS,eAAe,QAAsC;AACnE,QAAM,SAAS,SAAqB,iBAAiB,MAAM,CAAC;AAC5D,MAAI,CAAC,UAAU,CAAC,OAAO,UAAU,CAAC,OAAO,OAAQ,QAAO;AACxD,SAAO,EAAE,QAAQ,OAAO,QAAQ,QAAQ,OAAO,OAAO;AACxD;AAGO,SAAS,kBAAkB,QAAgB,MAAqB,cAA4B;AACjG,QAAM,UAAU,iBAAiB,MAAM;AACvC,YAAU,SAAS;AAAA,IACjB,QAAQ,KAAK;AAAA,IACb,QAAQ,KAAK;AAAA,IACb,cAAa,oBAAI,KAAK,GAAE,YAAY;AAAA,IACpC,iBAAiB,CAAC;AAAA,EACpB,CAAsB;AACxB;AAMO,SAAS,kBAAkB,MAAqB,UAA2B;AAChF,MAAI,KAAK,OAAO,QAAQ,EAAG,QAAO;AAClC,OAAK,OAAO,QAAQ,IAAI,YAAY,UAAU,KAAK,MAAM;AACzD,SAAO;AACT;AAGO,SAAS,kBAAkB,MAAqB,UAA2B;AAChF,MAAI,EAAE,YAAY,KAAK,QAAS,QAAO;AACvC,SAAO,KAAK,OAAO,QAAQ;AAC3B,SAAO;AACT;AAUO,SAAS,iBAAiB,MAKf;AAChB,QAAM,WAAW,KAAK,OAAO,IAAI,UAAU,KAAK;AAChD,MAAI,CAAC,YAAY,CAAC,KAAK,iBAAiB,IAAI,QAAQ,EAAG,QAAO;AAE9D,MAAI,WAAW;AACf,QAAM,OAAO,KAAK,QAAQ,eAAe;AACzC,QAAM,QAAQ,KAAK,QAAQ,gBAAgB;AAC3C,MAAI,OAAO,SAAS,YAAY,KAAK,WAAW,SAAS,GAAG;AAC1D,eAAW,KAAK,MAAM,CAAC;AAAA,EACzB,WAAW,OAAO,UAAU,UAAU;AACpC,eAAW;AAAA,EACb;AACA,MAAI,CAAC,SAAU,QAAO;AAEtB,QAAM,WAAW,KAAK,KAAK,OAAO,QAAQ;AAC1C,MAAI,CAAC,SAAU,QAAO;AAEtB,MAAI,SAAS,WAAW,SAAS,OAAQ,QAAO;AAChD,MAAI,OAAO;AACX,WAAS,IAAI,GAAG,IAAI,SAAS,QAAQ,KAAK;AACxC,YAAQ,SAAS,WAAW,CAAC,IAAI,SAAS,WAAW,CAAC;AAAA,EACxD;AACA,SAAO,SAAS,IAAI,WAAW;AACjC;",
+  "sourcesContent": ["/**\n * module-auth.ts \u2014 \u6A21\u5757\u8EAB\u4EFD\u7684 HMAC token \u6D3E\u751F\u4E0E\u6821\u9A8C\n *\n * \u4E24\u5957\u5E76\u5B58:\n *   - `env.AUTH_TOKEN` (config db_config.json http_auth):sfmc \u7BA1\u63A7 / \u5E73\u53F0\u5185\u90E8\u7528\n *   - `moduleTokens[moduleId]`:db-server \u7ED9\u6BCF\u4E2A enabled \u6A21\u5757\u5728\u542F\u52A8\u65F6\u6D3E\u751F,\n *     \u5199\u5230\u300C\u4E0E\u6570\u636E\u5E93\u540C\u76EE\u5F55\u300D\u7684 module-tokens.json\uFF08\u8DDF db_config.dbDir \u8D70\uFF0C\u52FF\u5199\u6B7B ROOT/data\uFF09,\n *     SAPI \u7ECF loopback API \u6CE8\u5165 setDbModuleContext\u3002\n *\n * \u6D3E\u751F\u516C\u5F0F:\n *   module_token = HMAC-SHA256(auth_secret, \"sfmc-module:\" + moduleId).hex\n *\n * auth_secret \u4F18\u5148\u7EA7:\n *   1. env.AUTH_TOKEN\n *   2. \u542F\u52A8\u65F6\u968F\u673A\u751F\u6210(\u65E0 AUTH_TOKEN \u65F6),\u5199\u5230 module-tokens.json,\n *      \u53EA\u8B66\u544A\u4E00\u6B21(\u6BCF\u6B21\u91CD\u542F\u6A21\u5757 token \u90FD\u53D8,SAPI host \u5FC5\u987B\u91CD\u8BFB\u6587\u4EF6)\n *\n * \u6821\u9A8C:\n *   - HTTP `Authorization: Bearer <module_token>` \u5934\n *   - Query `?moduleId=<id>`\n *   - \u4E24\u90FD\u5339\u914D = \u8C03\u7528\u65B9\u8EAB\u4EFD\n *   - \u6821\u9A8C\u8C03\u7528\u65B9 moduleId \u5728 enabled \u5217\u8868(\u5426\u5219 403)\n */\n\nimport { readJson, writeJson, type TokenStore } from \"@sfmc-bds/sdk/node/config\";\nimport { createHmac, randomBytes } from \"node:crypto\";\nimport { dirname, join } from \"node:path\";\nimport { log } from \"./lib/log.js\";\n\nexport interface ModuleAuthMap {\n  /** moduleId \u2192 hex token */\n  tokens: Record<string, string>;\n  /** \u7528\u4E8E\u6D3E\u751F token \u7684 secret (env.AUTH_TOKEN \u6216\u672C\u6B21\u542F\u52A8\u968F\u673A\u751F\u6210) */\n  secret: string;\n}\n\nconst IDENT = /^[A-Za-z0-9_\\-]+$/;\n\nfunction safeId(id: string): string {\n  if (!IDENT.test(id)) throw new Error(`[auth] invalid module id: ${id}`);\n  return id;\n}\n\n/** token \u6587\u4EF6\u4E0E SQLite \u540C\u76EE\u5F55\uFF08\u7531 dbDir \u51B3\u5B9A\uFF0C\u907F\u514D\u5411\u5BFC\u9009\u76EE\u5F55\u524D\u5C31\u521B\u5EFA ROOT/data\uFF09 */\nexport function moduleTokensFile(dbPath: string): string {\n  return join(dirname(dbPath), \"module-tokens.json\");\n}\n\nexport function deriveToken(moduleId: string, secret: string): string {\n  return createHmac(\"sha256\", secret)\n    .update(`sfmc-module:${safeId(moduleId)}`)\n    .digest(\"hex\");\n}\n\n/**\n * \u542F\u52A8\u65F6\u8C03\u7528\u4E00\u6B21:\n *   - \u628A env.AUTH_TOKEN \u5F53 secret\n *   - \u7ED9\u6BCF\u4E2A enabled moduleId \u6D3E\u751F token\n *   - \u5199 module-tokens.json\uFF08\u4E0E DB \u540C\u76EE\u5F55\uFF09\n *   - \u63A7\u5236\u53F0\u6253\u5370\u6458\u8981(env var SFMC_LOG_MODULE_TOKEN=1 \u65F6\u6253\u5B8C\u6574)\n */\nexport function buildModuleAuth(opts: {\n  dbPath: string;\n  envAuthToken: string;\n  enabledModuleIds: string[];\n}): ModuleAuthMap {\n  const secret = opts.envAuthToken || randomBytes(32).toString(\"hex\");\n  const tokens: Record<string, string> = {};\n  for (const id of opts.enabledModuleIds) {\n    tokens[id] = deriveToken(id, secret);\n  }\n\n  const outFile = moduleTokensFile(opts.dbPath);\n  writeJson(outFile, {\n    tokens,\n    secret,\n    generatedAt: new Date().toISOString(),\n    secretGenerated: !opts.envAuthToken,\n  });\n\n  log.success(`[auth] \u5DF2\u4E3A ${opts.enabledModuleIds.length} \u4E2A\u6A21\u5757\u6D3E\u751F HMAC token,\u5199\u5165 ${outFile}`);\n  if (!opts.envAuthToken) {\n    log.warn(\"[auth] \u672A\u914D\u7F6E env.AUTH_TOKEN,\u672C\u6B21\u542F\u52A8\u4F7F\u7528\u4E86\u968F\u673A secret;\");\n  }\n  if (process.env.SFMC_LOG_MODULE_TOKEN === \"1\") {\n    log.info(\"[auth] module tokens (SFMC_LOG_MODULE_TOKEN=1):\");\n    for (const [id, t] of Object.entries(tokens)) {\n      log.info(`  ${id} = ${t}`);\n    }\n  } else {\n    const lines = Object.entries(tokens)\n      .map(([id, t]) => `  ${id} = ${t.slice(0, 6)}\u2026${t.slice(-4)}`)\n      .join(\"\\n\");\n    log.info(`[auth] token \u6458\u8981:\\n${lines}`);\n  }\n\n  return { tokens, secret };\n}\n\nexport function loadModuleAuth(dbPath: string): ModuleAuthMap | null {\n  const parsed = readJson<TokenStore>(moduleTokensFile(dbPath));\n  if (!parsed || !parsed.tokens || !parsed.secret) return null;\n  return { tokens: parsed.tokens, secret: parsed.secret };\n}\n\n/** \u628A\u5F53\u524D auth map \u5199\u56DE module-tokens.json(\u70ED\u66F4\u65B0 token \u65F6\u590D\u7528) */\nexport function persistModuleAuth(dbPath: string, auth: ModuleAuthMap, envAuthToken: string): void {\n  const outFile = moduleTokensFile(dbPath);\n  writeJson(outFile, {\n    tokens: auth.tokens,\n    secret: auth.secret,\n    generatedAt: new Date().toISOString(),\n    secretGenerated: !envAuthToken,\n  } satisfies TokenStore);\n}\n\n/**\n * \u786E\u4FDD moduleId \u5728 auth.tokens \u4E2D\u6709\u6D3E\u751F\u503C(\u590D\u7528\u73B0\u6709 secret,\u52FF\u91CD\u5EFA\u968F\u673A secret)\u3002\n * @returns \u662F\u5426\u65B0\u5199\u5165\u4E86 token\n */\nexport function ensureModuleToken(auth: ModuleAuthMap, moduleId: string): boolean {\n  if (auth.tokens[moduleId]) return false;\n  auth.tokens[moduleId] = deriveToken(moduleId, auth.secret);\n  return true;\n}\n\n/** \u7981\u7528\u65F6\u64A4\u9500\u5185\u5B58\u4E2D\u7684 token(\u78C1\u76D8\u7531 persistModuleAuth \u540C\u6B65) */\nexport function revokeModuleToken(auth: ModuleAuthMap, moduleId: string): boolean {\n  if (!(moduleId in auth.tokens)) return false;\n  delete auth.tokens[moduleId];\n  return true;\n}\n\n/**\n * \u6821\u9A8C\u8BF7\u6C42\u65B9\u8EAB\u4EFD:\n *   - Bearer \u5934 / X-Module-Token \u4E8C\u9009\u4E00\n *   - ?moduleId=<id> \u5FC5\u987B\u5B58\u5728\n *   - \u6A21\u5757\u5FC5\u987B\u5728 enabledModuleIds \u96C6\u5408\u4E2D\n *   - token \u5FC5\u987B = deriveToken(moduleId, secret)\n * \u8FD4\u56DE\u6A21\u5757 ID \u6216 null\u3002\n */\nexport function verifyModuleAuth(opts: {\n  headers: NodeJS.Dict<string | string[]>;\n  params: URLSearchParams;\n  auth: ModuleAuthMap;\n  enabledModuleIds: Set<string>;\n}): string | null {\n  const moduleId = opts.params.get(\"moduleId\") || \"\";\n  if (!moduleId || !opts.enabledModuleIds.has(moduleId)) return null;\n\n  let provided = \"\";\n  const auth = opts.headers[\"authorization\"];\n  const token = opts.headers[\"x-module-token\"];\n  if (typeof auth === \"string\" && auth.startsWith(\"Bearer \")) {\n    provided = auth.slice(7);\n  } else if (typeof token === \"string\") {\n    provided = token;\n  }\n  if (!provided) return null;\n\n  const expected = opts.auth.tokens[moduleId];\n  if (!expected) return null;\n  // constant-time \u6BD4\u8F83\n  if (provided.length !== expected.length) return null;\n  let diff = 0;\n  for (let i = 0; i < provided.length; i++) {\n    diff |= provided.charCodeAt(i) ^ expected.charCodeAt(i);\n  }\n  return diff === 0 ? moduleId : null;\n}\n"],
+  "mappings": "AAwBA,SAAS,UAAU,iBAAkC;AACrD,SAAS,YAAY,mBAAmB;AACxC,SAAS,SAAS,YAAY;AAC9B,SAAS,WAAW;AASpB,MAAM,QAAQ;AAEd,SAAS,OAAO,IAAoB;AAClC,MAAI,CAAC,MAAM,KAAK,EAAE,EAAG,OAAM,IAAI,MAAM,6BAA6B,EAAE,EAAE;AACtE,SAAO;AACT;AAGO,SAAS,iBAAiB,QAAwB;AACvD,SAAO,KAAK,QAAQ,MAAM,GAAG,oBAAoB;AACnD;AAEO,SAAS,YAAY,UAAkB,QAAwB;AACpE,SAAO,WAAW,UAAU,MAAM,EAC/B,OAAO,eAAe,OAAO,QAAQ,CAAC,EAAE,EACxC,OAAO,KAAK;AACjB;AASO,SAAS,gBAAgB,MAId;AAChB,QAAM,SAAS,KAAK,gBAAgB,YAAY,EAAE,EAAE,SAAS,KAAK;AAClE,QAAM,SAAiC,CAAC;AACxC,aAAW,MAAM,KAAK,kBAAkB;AACtC,WAAO,EAAE,IAAI,YAAY,IAAI,MAAM;AAAA,EACrC;AAEA,QAAM,UAAU,iBAAiB,KAAK,MAAM;AAC5C,YAAU,SAAS;AAAA,IACjB;AAAA,IACA;AAAA,IACA,cAAa,oBAAI,KAAK,GAAE,YAAY;AAAA,IACpC,iBAAiB,CAAC,KAAK;AAAA,EACzB,CAAC;AAED,MAAI,QAAQ,uBAAa,KAAK,iBAAiB,MAAM,2DAAwB,OAAO,EAAE;AACtF,MAAI,CAAC,KAAK,cAAc;AACtB,QAAI,KAAK,yGAA6C;AAAA,EACxD;AACA,MAAI,QAAQ,IAAI,0BAA0B,KAAK;AAC7C,QAAI,KAAK,iDAAiD;AAC1D,eAAW,CAAC,IAAI,CAAC,KAAK,OAAO,QAAQ,MAAM,GAAG;AAC5C,UAAI,KAAK,KAAK,EAAE,MAAM,CAAC,EAAE;AAAA,IAC3B;AAAA,EACF,OAAO;AACL,UAAM,QAAQ,OAAO,QAAQ,MAAM,EAChC,IAAI,CAAC,CAAC,IAAI,CAAC,MAAM,KAAK,EAAE,MAAM,EAAE,MAAM,GAAG,CAAC,CAAC,SAAI,EAAE,MAAM,EAAE,CAAC,EAAE,EAC5D,KAAK,IAAI;AACZ,QAAI,KAAK;AAAA,EAAqB,KAAK,EAAE;AAAA,EACvC;AAEA,SAAO,EAAE,QAAQ,OAAO;AAC1B;AAEO,SAAS,eAAe,QAAsC;AACnE,QAAM,SAAS,SAAqB,iBAAiB,MAAM,CAAC;AAC5D,MAAI,CAAC,UAAU,CAAC,OAAO,UAAU,CAAC,OAAO,OAAQ,QAAO;AACxD,SAAO,EAAE,QAAQ,OAAO,QAAQ,QAAQ,OAAO,OAAO;AACxD;AAGO,SAAS,kBAAkB,QAAgB,MAAqB,cAA4B;AACjG,QAAM,UAAU,iBAAiB,MAAM;AACvC,YAAU,SAAS;AAAA,IACjB,QAAQ,KAAK;AAAA,IACb,QAAQ,KAAK;AAAA,IACb,cAAa,oBAAI,KAAK,GAAE,YAAY;AAAA,IACpC,iBAAiB,CAAC;AAAA,EACpB,CAAsB;AACxB;AAMO,SAAS,kBAAkB,MAAqB,UAA2B;AAChF,MAAI,KAAK,OAAO,QAAQ,EAAG,QAAO;AAClC,OAAK,OAAO,QAAQ,IAAI,YAAY,UAAU,KAAK,MAAM;AACzD,SAAO;AACT;AAGO,SAAS,kBAAkB,MAAqB,UAA2B;AAChF,MAAI,EAAE,YAAY,KAAK,QAAS,QAAO;AACvC,SAAO,KAAK,OAAO,QAAQ;AAC3B,SAAO;AACT;AAUO,SAAS,iBAAiB,MAKf;AAChB,QAAM,WAAW,KAAK,OAAO,IAAI,UAAU,KAAK;AAChD,MAAI,CAAC,YAAY,CAAC,KAAK,iBAAiB,IAAI,QAAQ,EAAG,QAAO;AAE9D,MAAI,WAAW;AACf,QAAM,OAAO,KAAK,QAAQ,eAAe;AACzC,QAAM,QAAQ,KAAK,QAAQ,gBAAgB;AAC3C,MAAI,OAAO,SAAS,YAAY,KAAK,WAAW,SAAS,GAAG;AAC1D,eAAW,KAAK,MAAM,CAAC;AAAA,EACzB,WAAW,OAAO,UAAU,UAAU;AACpC,eAAW;AAAA,EACb;AACA,MAAI,CAAC,SAAU,QAAO;AAEtB,QAAM,WAAW,KAAK,KAAK,OAAO,QAAQ;AAC1C,MAAI,CAAC,SAAU,QAAO;AAEtB,MAAI,SAAS,WAAW,SAAS,OAAQ,QAAO;AAChD,MAAI,OAAO;AACX,WAAS,IAAI,GAAG,IAAI,SAAS,QAAQ,KAAK;AACxC,YAAQ,SAAS,WAAW,CAAC,IAAI,SAAS,WAAW,CAAC;AAAA,EACxD;AACA,SAAO,SAAS,IAAI,WAAW;AACjC;",
   "names": []
 }

package/dist/permission-gate.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"permission-gate.d.ts","sourceRoot":"","sources":["../src/permission-gate.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,MAAM,MAAM,aAAa,GAAG,MAAM,CAAC;AACnC,MAAM,MAAM,eAAe,GAAG,KAAK,GAAG,QAAQ,GAAG,IAAI,GAAG,OAAO,CAAC;AAEhE,MAAM,WAAW,sBAAsB;IACrC,gBAAgB;IAChB,WAAW,EAAE,aAAa,EAAE,CAAC;IAC7B,sBAAsB;IACtB,eAAe,EAAE,MAAM,EAAE,CAAC;CAC3B;AAoBD;;;GAGG;AACH,wBAAgB,2BAA2B,CACzC,QAAQ,EAAE,MAAM,EAChB,WAAW,EAAE,SAAS,MAAM,EAAE,GAC7B,IAAI,CAQN;AAED;;;;GAIG;AACH,wBAAgB,mBAAmB,CACjC,iBAAiB,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,EAChD,QAAQ,EAAE,MAAM,GACf,OAAO,CAUT;AAED,wBAAgB,sBAAsB,CACpC,QAAQ,EAAE,MAAM,EAChB,iBAAiB,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,EAChD,QAAQ,EAAE,MAAM,GACf,IAAI,CAIN;AAED,qBAAa,qBAAsB,SAAQ,KAAK;IAG3B,QAAQ,EAAE,MAAM;IAAS,UAAU,EAAE,MAAM;IAF9D,IAAI,SAAuB;IAC3B,MAAM,SAAO;IACb,YAAmB,QAAQ,EAAE,MAAM,EAAS,UAAU,EAAE,MAAM,EAE7D;CACF;AAED;;GAEG;AACH,eAAO,MAAM,IAAI;aACf,MAAM,UAAU,MAAM;aACtB,OAAO,UAAU,MAAM;aACvB,UAAU,QAAQ,MAAM;aACxB,WAAW,QAAQ,MAAM;aACzB,OAAO,SAAS,MAAM;CACd,CAAC;AAEX,eAAO,MAAM,wBAAwB,aAAkB,CAAC"}
+{"version":3,"file":"permission-gate.d.ts","sourceRoot":"","sources":["../src/permission-gate.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,MAAM,MAAM,aAAa,GAAG,MAAM,CAAC;AACnC,MAAM,MAAM,eAAe,GAAG,KAAK,GAAG,QAAQ,GAAG,IAAI,GAAG,OAAO,CAAC;AAEhE,MAAM,WAAW,sBAAsB;IACrC,gBAAgB;IAChB,WAAW,EAAE,aAAa,EAAE,CAAC;IAC7B,sBAAsB;IACtB,eAAe,EAAE,MAAM,EAAE,CAAC;CAC3B;AAoBD;;;GAGG;AACH,wBAAgB,2BAA2B,CACzC,QAAQ,EAAE,MAAM,EAChB,WAAW,EAAE,SAAS,MAAM,EAAE,GAC7B,IAAI,CAcN;AAED;;;;GAIG;AACH,wBAAgB,mBAAmB,CACjC,iBAAiB,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,EAChD,QAAQ,EAAE,MAAM,GACf,OAAO,CAUT;AAED,wBAAgB,sBAAsB,CACpC,QAAQ,EAAE,MAAM,EAChB,iBAAiB,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,EAChD,QAAQ,EAAE,MAAM,GACf,IAAI,CAIN;AAED,qBAAa,qBAAsB,SAAQ,KAAK;IAG3B,QAAQ,EAAE,MAAM;IAAS,UAAU,EAAE,MAAM;IAF9D,IAAI,SAAuB;IAC3B,MAAM,SAAO;IACb,YAAmB,QAAQ,EAAE,MAAM,EAAS,UAAU,EAAE,MAAM,EAE7D;CACF;AAED;;GAEG;AACH,eAAO,MAAM,IAAI;aACf,MAAM,UAAU,MAAM;aACtB,OAAO,UAAU,MAAM;aACvB,UAAU,QAAQ,MAAM;aACxB,WAAW,QAAQ,MAAM;aACzB,OAAO,SAAS,MAAM;CACd,CAAC;AAEX,eAAO,MAAM,wBAAwB,aAAkB,CAAC"}

package/dist/permission-gate.js

@@ -7,13 +7,19 @@ const PERMISSION_KEYS = /* @__PURE__ */ new Set([
 ]);
 function validPermissionKey(k) {
   if (/^service:[A-Za-z0-9_.]+$/.test(k)) return true;
-  return /^[a-z]+:[a-z]+:[A-Za-z0-9_.]+$/.test(k);
+  return /^[a-z]+:[a-z]+:[A-Za-z0-9_.*]+$/.test(k);
 }
 function validateManifestPermissions(moduleId, permissions) {
   const seen = /* @__PURE__ */ new Set();
   for (const k of permissions) {
     if (!k || typeof k !== "string") throw new Error(`[perm] ${moduleId}: permission \u4E0D\u662F\u5B57\u7B26\u4E32 "${k}"`);
-    if (!validPermissionKey(k)) throw new Error(`[perm] ${moduleId}: permission \u683C\u5F0F\u4E0D\u5408\u6CD5 "${k}"`);
+    if (!validPermissionKey(k)) {
+      throw new Error(
+        `[perm] ${moduleId}: permission \u683C\u5F0F\u4E0D\u5408\u6CD5 "${k}"\u3002
+  manifest.permissions \u4EC5\u7528\u4E8E\u58F0\u660E\u5E73\u53F0\u5E95\u5C42\u8D44\u6E90\u6743\u9650\uFF08db:read:*, db:write:*, config:read:*, config:write:*, service:*\uFF09\u3002
+  \u73A9\u5BB6\u547D\u4EE4\u4E0E\u6E38\u620F\u5185\u6743\u9650\u8BF7\u5728\u4EE3\u7801\u4E2D\u4F7F\u7528 Command.register / Permission.register \u767B\u8BB0\uFF0C\u4E0D\u8981\u5199\u5165 manifest.json\u3002`
+      );
+    }
     if (seen.has(k)) throw new Error(`[perm] ${moduleId}: permission \u91CD\u590D "${k}"`);
     seen.add(k);
   }

package/dist/permission-gate.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../src/permission-gate.ts"],
-  "sourcesContent": ["/**\n * permission-gate.ts \u2014 \u6A21\u5757\u6743\u9650\u6821\u9A8C\n *\n * \u542F\u52A8\u671F:manifest.permissions \u5168\u5728\u767D\u540D\u5355(PERMISSION_KEYS),\u5426\u5219\u629B\u9519\u542F\u52A8\u5931\u8D25\u3002\n *          (\u767D\u540D\u5355 = db:read:*, db:write:*, config:read:*, config:write:*,\n *           service:* + \u901A\u914D ** / <table>)\n *\n * \u8FD0\u884C\u65F6:\u53D1\u8D77 db / config / service \u8C03\u7528\u65F6,gatesdb.<op>.requirePermission =\n *   \"db:read:<table>\" / \"db:write:<table>\" / \"config:read:<key>\" /\n *   \"config:write:<key>\" / \"service:<name>\"\n *\n * \u8BBE\u8BA1:gate \u4E0D\u66FF\u8DEF\u7531\u62E6\u622A,\u662F\u4E1A\u52A1\u903B\u8F91\u81EA\u5DF1\u68C0\u67E5(\u907F\u514D\u6BCF\u6761\u8DEF\u7531\u90FD\u9A8C)\u3002\n *      \u8DEF\u7531\u5C42 fail-closed:\u4E0D\u901A\u8FC7 manifest.permissions \u8868\u7684\u8C03\u7528 = \u76F4\u63A5 403\u3002\n */\n\nexport type PermissionKey = string;\nexport type PermissionLevel = \"Any\" | \"Member\" | \"OP\" | \"Admin\";\n\nexport interface ManifestPermissionRule {\n  /** \u6A21\u5757\u58F0\u660E\u7684\u6743\u9650\u5168\u96C6 */\n  permissions: PermissionKey[];\n  /** \u8DE8\u6A21\u5757\u8C03\u7528\u5BF9\u5E94\u662F\u5426\u9700\u8981\u663E\u5F0F\u58F0\u660E */\n  serviceRequires: string[];\n}\n\nconst PERMISSION_KEYS = new Set<string>([\n  // db:* \u8D70\u6A21\u5F0F\u5339\u914D db:read:* / db:write:*\n  // \u914D\u7F6E\u6743\u9650\n  \"config:read:*\",\n  \"config:write:*\",\n  // service \u5728\u8C03\u7528\u65F6\u6309 service \u540D\u5B57\u5339\u914D service:* \u901A\u914D\n]);\n\nfunction validPermissionKey(k: string): boolean {\n  // \u4E09\u7C7B\u5408\u6CD5\u683C\u5F0F:\n  //   db:<op>:<table>      (\u4F8B db:read:lands / db:write:land_members)\n  //   config:<op>:<key>    (\u4F8B config:read:land / config:write:afk)\n  //   service:<name>       (\u4F8B service:economy.debit / service:land.byId \u2014 \u540D\u5B57\u53EF\u542B .)\n  // \u4E0D\u5141\u8BB8 raw \"*\"(\u8981\u6C42\u660E\u786E\u5BF9\u8C61) \u2014 \u8C03\u8BD5\u65F6\u4E00\u5F8B Resource-level\n  if (/^service:[A-Za-z0-9_.]+$/.test(k)) return true;\n  return /^[a-z]+:[a-z]+:[A-Za-z0-9_.]+$/.test(k);\n}\n\n/**\n * \u542F\u52A8\u671F\u4E00\u6B21\u6027\u6821\u9A8C:manifest.permissions \u662F\u5426\u90FD\u5408\u89C4\u3002\n * \u5931\u8D25 = \u629B\u9519(\u542F\u52A8\u5931\u8D25)\u3002\n */\nexport function validateManifestPermissions(\n  moduleId: string,\n  permissions: readonly string[]\n): void {\n  const seen = new Set<string>();\n  for (const k of permissions) {\n    if (!k || typeof k !== \"string\") throw new Error(`[perm] ${moduleId}: permission \u4E0D\u662F\u5B57\u7B26\u4E32 \"${k}\"`);\n    if (!validPermissionKey(k)) throw new Error(`[perm] ${moduleId}: permission \u683C\u5F0F\u4E0D\u5408\u6CD5 \"${k}\"`);\n    if (seen.has(k)) throw new Error(`[perm] ${moduleId}: permission \u91CD\u590D \"${k}\"`);\n    seen.add(k);\n  }\n}\n\n/**\n * \u8FD0\u884C\u65F6:\u6A21\u5757 id \u662F\u5426\u62E5\u6709\u6240\u9700 permission\u3002\n * \u5F53\u524D\u5B9E\u73B0:\u5FC5\u987B\u7CBE\u786E\u7B49\u4E8E\u624D\u653E\u884C,\u4E0D\u89E3\u91CA\u901A\u914D\u3002\n * (PoC \u7B80\u5316;\u751F\u4EA7\u53EF\u52A0 db:read:* \u2192 \u901A\u914D)\n */\nexport function moduleHasPermission(\n  modulePermissions: readonly string[] | undefined,\n  required: string\n): boolean {\n  if (!modulePermissions) return false;\n  if (modulePermissions.includes(required)) return true;\n  // db:read:* / db:write:* / config:read:* / config:write:* \u901A\u914D\n  const parts = required.split(\":\");\n  if (parts.length === 3) {\n    const wildcard = `${parts[0]}:${parts[1]}:*`;\n    if (modulePermissions.includes(wildcard)) return true;\n  }\n  return false;\n}\n\nexport function assertModulePermission(\n  moduleId: string,\n  modulePermissions: readonly string[] | undefined,\n  required: string\n): void {\n  if (!moduleHasPermission(modulePermissions, required)) {\n    throw new PermissionDeniedError(moduleId, required);\n  }\n}\n\nexport class PermissionDeniedError extends Error {\n  code = \"permission_denied\";\n  status = 403;\n  constructor(public moduleId: string, public permission: string) {\n    super(`[perm] \u6A21\u5757 ${moduleId} \u7F3A\u5C11\u6743\u9650 \"${permission}\"`);\n  }\n}\n\n/**\n * \u6240\u6709 platform \u6D3E\u53D1\u7684 required permission key \u8BA1\u7B97\u52A9\u624B\u3002\n */\nexport const Perm = {\n  dbRead: (table: string) => `db:read:${table}`,\n  dbWrite: (table: string) => `db:write:${table}`,\n  configRead: (key: string) => `config:read:${key}`,\n  configWrite: (key: string) => `config:write:${key}`,\n  service: (name: string) => `service:${name}`,\n} as const;\n\nexport const PlatformTablePermissions = PERMISSION_KEYS;\n"],
-  "mappings": "AAyBA,MAAM,kBAAkB,oBAAI,IAAY;AAAA;AAAA;AAAA,EAGtC;AAAA,EACA;AAAA;AAEF,CAAC;AAED,SAAS,mBAAmB,GAAoB;AAM9C,MAAI,2BAA2B,KAAK,CAAC,EAAG,QAAO;AAC/C,SAAO,iCAAiC,KAAK,CAAC;AAChD;AAMO,SAAS,4BACd,UACA,aACM;AACN,QAAM,OAAO,oBAAI,IAAY;AAC7B,aAAW,KAAK,aAAa;AAC3B,QAAI,CAAC,KAAK,OAAO,MAAM,SAAU,OAAM,IAAI,MAAM,UAAU,QAAQ,gDAAuB,CAAC,GAAG;AAC9F,QAAI,CAAC,mBAAmB,CAAC,EAAG,OAAM,IAAI,MAAM,UAAU,QAAQ,gDAAuB,CAAC,GAAG;AACzF,QAAI,KAAK,IAAI,CAAC,EAAG,OAAM,IAAI,MAAM,UAAU,QAAQ,8BAAoB,CAAC,GAAG;AAC3E,SAAK,IAAI,CAAC;AAAA,EACZ;AACF;AAOO,SAAS,oBACd,mBACA,UACS;AACT,MAAI,CAAC,kBAAmB,QAAO;AAC/B,MAAI,kBAAkB,SAAS,QAAQ,EAAG,QAAO;AAEjD,QAAM,QAAQ,SAAS,MAAM,GAAG;AAChC,MAAI,MAAM,WAAW,GAAG;AACtB,UAAM,WAAW,GAAG,MAAM,CAAC,CAAC,IAAI,MAAM,CAAC,CAAC;AACxC,QAAI,kBAAkB,SAAS,QAAQ,EAAG,QAAO;AAAA,EACnD;AACA,SAAO;AACT;AAEO,SAAS,uBACd,UACA,mBACA,UACM;AACN,MAAI,CAAC,oBAAoB,mBAAmB,QAAQ,GAAG;AACrD,UAAM,IAAI,sBAAsB,UAAU,QAAQ;AAAA,EACpD;AACF;AAEO,MAAM,8BAA8B,MAAM;AAAA,EAG/C,YAAmB,UAAyB,YAAoB;AAC9D,UAAM,uBAAa,QAAQ,8BAAU,UAAU,GAAG;AADjC;AAAyB;AAAA,EAE5C;AAAA,EAFmB;AAAA,EAAyB;AAAA,EAF5C,OAAO;AAAA,EACP,SAAS;AAIX;AAKO,MAAM,OAAO;AAAA,EAClB,QAAQ,CAAC,UAAkB,WAAW,KAAK;AAAA,EAC3C,SAAS,CAAC,UAAkB,YAAY,KAAK;AAAA,EAC7C,YAAY,CAAC,QAAgB,eAAe,GAAG;AAAA,EAC/C,aAAa,CAAC,QAAgB,gBAAgB,GAAG;AAAA,EACjD,SAAS,CAAC,SAAiB,WAAW,IAAI;AAC5C;AAEO,MAAM,2BAA2B;",
+  "sourcesContent": ["/**\n * permission-gate.ts \u2014 \u6A21\u5757\u6743\u9650\u6821\u9A8C\n *\n * \u542F\u52A8\u671F:manifest.permissions \u5168\u5728\u767D\u540D\u5355(PERMISSION_KEYS),\u5426\u5219\u629B\u9519\u542F\u52A8\u5931\u8D25\u3002\n *          (\u767D\u540D\u5355 = db:read:*, db:write:*, config:read:*, config:write:*,\n *           service:* + \u901A\u914D ** / <table>)\n *\n * \u8FD0\u884C\u65F6:\u53D1\u8D77 db / config / service \u8C03\u7528\u65F6,gatesdb.<op>.requirePermission =\n *   \"db:read:<table>\" / \"db:write:<table>\" / \"config:read:<key>\" /\n *   \"config:write:<key>\" / \"service:<name>\"\n *\n * \u8BBE\u8BA1:gate \u4E0D\u66FF\u8DEF\u7531\u62E6\u622A,\u662F\u4E1A\u52A1\u903B\u8F91\u81EA\u5DF1\u68C0\u67E5(\u907F\u514D\u6BCF\u6761\u8DEF\u7531\u90FD\u9A8C)\u3002\n *      \u8DEF\u7531\u5C42 fail-closed:\u4E0D\u901A\u8FC7 manifest.permissions \u8868\u7684\u8C03\u7528 = \u76F4\u63A5 403\u3002\n */\n\nexport type PermissionKey = string;\nexport type PermissionLevel = \"Any\" | \"Member\" | \"OP\" | \"Admin\";\n\nexport interface ManifestPermissionRule {\n  /** \u6A21\u5757\u58F0\u660E\u7684\u6743\u9650\u5168\u96C6 */\n  permissions: PermissionKey[];\n  /** \u8DE8\u6A21\u5757\u8C03\u7528\u5BF9\u5E94\u662F\u5426\u9700\u8981\u663E\u5F0F\u58F0\u660E */\n  serviceRequires: string[];\n}\n\nconst PERMISSION_KEYS = new Set<string>([\n  // db:* \u8D70\u6A21\u5F0F\u5339\u914D db:read:* / db:write:*\n  // \u914D\u7F6E\u6743\u9650\n  \"config:read:*\",\n  \"config:write:*\",\n  // service \u5728\u8C03\u7528\u65F6\u6309 service \u540D\u5B57\u5339\u914D service:* \u901A\u914D\n]);\n\nfunction validPermissionKey(k: string): boolean {\n  // \u4E09\u7C7B\u5408\u6CD5\u683C\u5F0F:\n  //   db:<op>:<table>      (\u4F8B db:read:lands / db:write:land_members)\n  //   config:<op>:<key>    (\u4F8B config:read:land / config:write:afk)\n  //   service:<name>       (\u4F8B service:economy.debit / service:land.byId \u2014 \u540D\u5B57\u53EF\u542B .)\n  // \u4E0D\u5141\u8BB8 raw \"*\"(\u8981\u6C42\u660E\u786E\u5BF9\u8C61) \u2014 \u8C03\u8BD5\u65F6\u4E00\u5F8B Resource-level\n  if (/^service:[A-Za-z0-9_.]+$/.test(k)) return true;\n  return /^[a-z]+:[a-z]+:[A-Za-z0-9_.*]+$/.test(k);\n}\n\n/**\n * \u542F\u52A8\u671F\u4E00\u6B21\u6027\u6821\u9A8C:manifest.permissions \u662F\u5426\u90FD\u5408\u89C4\u3002\n * \u5931\u8D25 = \u629B\u9519(\u542F\u52A8\u5931\u8D25)\u3002\n */\nexport function validateManifestPermissions(\n  moduleId: string,\n  permissions: readonly string[]\n): void {\n  const seen = new Set<string>();\n  for (const k of permissions) {\n    if (!k || typeof k !== \"string\") throw new Error(`[perm] ${moduleId}: permission \u4E0D\u662F\u5B57\u7B26\u4E32 \"${k}\"`);\n    if (!validPermissionKey(k)) {\n      throw new Error(\n        `[perm] ${moduleId}: permission \u683C\u5F0F\u4E0D\u5408\u6CD5 \"${k}\"\u3002\\n` +\n        `  manifest.permissions \u4EC5\u7528\u4E8E\u58F0\u660E\u5E73\u53F0\u5E95\u5C42\u8D44\u6E90\u6743\u9650\uFF08db:read:*, db:write:*, config:read:*, config:write:*, service:*\uFF09\u3002\\n` +\n        `  \u73A9\u5BB6\u547D\u4EE4\u4E0E\u6E38\u620F\u5185\u6743\u9650\u8BF7\u5728\u4EE3\u7801\u4E2D\u4F7F\u7528 Command.register / Permission.register \u767B\u8BB0\uFF0C\u4E0D\u8981\u5199\u5165 manifest.json\u3002`\n      );\n    }\n    if (seen.has(k)) throw new Error(`[perm] ${moduleId}: permission \u91CD\u590D \"${k}\"`);\n    seen.add(k);\n  }\n}\n\n/**\n * \u8FD0\u884C\u65F6:\u6A21\u5757 id \u662F\u5426\u62E5\u6709\u6240\u9700 permission\u3002\n * \u5F53\u524D\u5B9E\u73B0:\u5FC5\u987B\u7CBE\u786E\u7B49\u4E8E\u624D\u653E\u884C,\u4E0D\u89E3\u91CA\u901A\u914D\u3002\n * (PoC \u7B80\u5316;\u751F\u4EA7\u53EF\u52A0 db:read:* \u2192 \u901A\u914D)\n */\nexport function moduleHasPermission(\n  modulePermissions: readonly string[] | undefined,\n  required: string\n): boolean {\n  if (!modulePermissions) return false;\n  if (modulePermissions.includes(required)) return true;\n  // db:read:* / db:write:* / config:read:* / config:write:* \u901A\u914D\n  const parts = required.split(\":\");\n  if (parts.length === 3) {\n    const wildcard = `${parts[0]}:${parts[1]}:*`;\n    if (modulePermissions.includes(wildcard)) return true;\n  }\n  return false;\n}\n\nexport function assertModulePermission(\n  moduleId: string,\n  modulePermissions: readonly string[] | undefined,\n  required: string\n): void {\n  if (!moduleHasPermission(modulePermissions, required)) {\n    throw new PermissionDeniedError(moduleId, required);\n  }\n}\n\nexport class PermissionDeniedError extends Error {\n  code = \"permission_denied\";\n  status = 403;\n  constructor(public moduleId: string, public permission: string) {\n    super(`[perm] \u6A21\u5757 ${moduleId} \u7F3A\u5C11\u6743\u9650 \"${permission}\"`);\n  }\n}\n\n/**\n * \u6240\u6709 platform \u6D3E\u53D1\u7684 required permission key \u8BA1\u7B97\u52A9\u624B\u3002\n */\nexport const Perm = {\n  dbRead: (table: string) => `db:read:${table}`,\n  dbWrite: (table: string) => `db:write:${table}`,\n  configRead: (key: string) => `config:read:${key}`,\n  configWrite: (key: string) => `config:write:${key}`,\n  service: (name: string) => `service:${name}`,\n} as const;\n\nexport const PlatformTablePermissions = PERMISSION_KEYS;\n"],
+  "mappings": "AAyBA,MAAM,kBAAkB,oBAAI,IAAY;AAAA;AAAA;AAAA,EAGtC;AAAA,EACA;AAAA;AAEF,CAAC;AAED,SAAS,mBAAmB,GAAoB;AAM9C,MAAI,2BAA2B,KAAK,CAAC,EAAG,QAAO;AAC/C,SAAO,kCAAkC,KAAK,CAAC;AACjD;AAMO,SAAS,4BACd,UACA,aACM;AACN,QAAM,OAAO,oBAAI,IAAY;AAC7B,aAAW,KAAK,aAAa;AAC3B,QAAI,CAAC,KAAK,OAAO,MAAM,SAAU,OAAM,IAAI,MAAM,UAAU,QAAQ,gDAAuB,CAAC,GAAG;AAC9F,QAAI,CAAC,mBAAmB,CAAC,GAAG;AAC1B,YAAM,IAAI;AAAA,QACR,UAAU,QAAQ,gDAAuB,CAAC;AAAA;AAAA;AAAA,MAG5C;AAAA,IACF;AACA,QAAI,KAAK,IAAI,CAAC,EAAG,OAAM,IAAI,MAAM,UAAU,QAAQ,8BAAoB,CAAC,GAAG;AAC3E,SAAK,IAAI,CAAC;AAAA,EACZ;AACF;AAOO,SAAS,oBACd,mBACA,UACS;AACT,MAAI,CAAC,kBAAmB,QAAO;AAC/B,MAAI,kBAAkB,SAAS,QAAQ,EAAG,QAAO;AAEjD,QAAM,QAAQ,SAAS,MAAM,GAAG;AAChC,MAAI,MAAM,WAAW,GAAG;AACtB,UAAM,WAAW,GAAG,MAAM,CAAC,CAAC,IAAI,MAAM,CAAC,CAAC;AACxC,QAAI,kBAAkB,SAAS,QAAQ,EAAG,QAAO;AAAA,EACnD;AACA,SAAO;AACT;AAEO,SAAS,uBACd,UACA,mBACA,UACM;AACN,MAAI,CAAC,oBAAoB,mBAAmB,QAAQ,GAAG;AACrD,UAAM,IAAI,sBAAsB,UAAU,QAAQ;AAAA,EACpD;AACF;AAEO,MAAM,8BAA8B,MAAM;AAAA,EAG/C,YAAmB,UAAyB,YAAoB;AAC9D,UAAM,uBAAa,QAAQ,8BAAU,UAAU,GAAG;AADjC;AAAyB;AAAA,EAE5C;AAAA,EAFmB;AAAA,EAAyB;AAAA,EAF5C,OAAO;AAAA,EACP,SAAS;AAIX;AAKO,MAAM,OAAO;AAAA,EAClB,QAAQ,CAAC,UAAkB,WAAW,KAAK;AAAA,EAC3C,SAAS,CAAC,UAAkB,YAAY,KAAK;AAAA,EAC7C,YAAY,CAAC,QAAgB,eAAe,GAAG;AAAA,EAC/C,aAAa,CAAC,QAAgB,gBAAgB,GAAG;AAAA,EACjD,SAAS,CAAC,SAAiB,WAAW,IAAI;AAC5C;AAEO,MAAM,2BAA2B;",
   "names": []
 }

package/dist/project-root.d.ts

@@ -0,0 +1,6 @@
+/**
+ * project-root.ts — 仓根唯一解析点（DRY/DIP：env / log 勿各自上溯）
+ */
+/** SFMC_ROOT > 从本文件向上找 sfmc-monorepo */
+export declare const PROJECT_ROOT: string;
+//# sourceMappingURL=project-root.d.ts.map

package/dist/project-root.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"project-root.d.ts","sourceRoot":"","sources":["../src/project-root.ts"],"names":[],"mappings":"AAAA;;GAEG;AAQH,wCAAwC;AACxC,eAAO,MAAM,YAAY,EAAE,MAAiC,CAAC"}

package/dist/project-root.js

@@ -0,0 +1,9 @@
+import { resolveRuntimeRoot } from "@sfmc-bds/sdk/node/config";
+import { dirname } from "node:path";
+import { fileURLToPath } from "node:url";
+const HERE = dirname(fileURLToPath(import.meta.url));
+const PROJECT_ROOT = resolveRuntimeRoot(HERE);
+export {
+  PROJECT_ROOT
+};
+//# sourceMappingURL=project-root.js.map

package/dist/project-root.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../src/project-root.ts"],
+  "sourcesContent": ["/**\n * project-root.ts \u2014 \u4ED3\u6839\u552F\u4E00\u89E3\u6790\u70B9\uFF08DRY/DIP\uFF1Aenv / log \u52FF\u5404\u81EA\u4E0A\u6EAF\uFF09\n */\n\nimport { resolveRuntimeRoot } from \"@sfmc-bds/sdk/node/config\";\nimport { dirname } from \"node:path\";\nimport { fileURLToPath } from \"node:url\";\n\nconst HERE = dirname(fileURLToPath(import.meta.url));\n\n/** SFMC_ROOT > \u4ECE\u672C\u6587\u4EF6\u5411\u4E0A\u627E sfmc-monorepo */\nexport const PROJECT_ROOT: string = resolveRuntimeRoot(HERE);\n"],
+  "mappings": "AAIA,SAAS,0BAA0B;AACnC,SAAS,eAAe;AACxB,SAAS,qBAAqB;AAE9B,MAAM,OAAO,QAAQ,cAAc,YAAY,GAAG,CAAC;AAG5C,MAAM,eAAuB,mBAAmB,IAAI;",
+  "names": []
+}

package/dist/routes/_shared.d.ts

@@ -59,14 +59,23 @@ export type RouteFactory = (deps: Partial<RouteDeps>) => RouteHandler;
 export declare const json: typeof sharedJson;
 export declare const body: typeof sharedBody;
 /**
- * v2 失败信封权威形态(DRY + LSP):
- * 一律 `{ ok:false, error, code? }`(+ 可选 extra),勿再混用 `{ success:false }`。
- * service-routes / db / module-config / index 模块鉴权门应走此助手。
+ * 标准失败响应信封生成工具（格式：`{ ok: false, error, code? }` + 可选 extra 字段）。
+ * 路由层与鉴权中间件统一调用此助手，杜绝与 `{ success: false }` 字段混用。
+ *
+ * @param res HTTP 响应对象。
+ * @param error 错误简短描述。
+ * @param status HTTP 状态码。
+ * @param code 可选的精细业务错误码。
+ * @param extra 可选的附加字段字典。
  */
 export declare function jsonV2Fail(res: ServerResponse, error: string, status: number, code?: string, extra?: Record<string, unknown>): void;
 /**
- * v2 成功信封权威形态(DRY + LSP):
- * 一律 `{ ok:true, ...fields }`,与 jsonV2Fail 对称;客户端已双认 ok/success。
+ * 标准成功响应信封生成工具（格式：`{ ok: true, ...fields }`）。
+ * 与 `jsonV2Fail` 对称统一。
+ *
+ * @param res HTTP 响应对象。
+ * @param fields 响应正文字段字典。
+ * @param status HTTP 状态码（默认为 200）。
  */
 export declare function jsonV2Ok(res: ServerResponse, fields?: Record<string, unknown>, status?: number): void;
 export {};

package/dist/routes/_shared.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"_shared.d.ts","sourceRoot":"","sources":["../../src/routes/_shared.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,KAAK,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AACjE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAChD,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,gBAAgB,CAAC;AAC7C,OAAO,EAAE,IAAI,IAAI,UAAU,EAAE,IAAI,IAAI,UAAU,EAAE,MAAM,gBAAgB,CAAC;AACxE,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAEhD,YAAY,EAAE,MAAM,EAAE,MAAM,gBAAgB,CAAC;AAC7C,YAAY,EAAE,OAAO,EAAE,CAAC;AAExB,6CAA6C;AAC7C,MAAM,MAAM,SAAS,GAAG;IACtB,KAAK,EAAE,OAAO,CAAC;IACf,EAAE,EAAE,YAAY,CAAC;IACjB,IAAI,EAAE,CAAC,GAAG,EAAE,cAAc,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,EAAE,MAAM,KAAK,IAAI,CAAC;IACpF,IAAI,EAAE,CAAC,GAAG,EAAE,eAAe,KAAK,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IACjE,MAAM,EAAE,eAAe,CAAC;IACxB,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,CAAC,EAAE;QAAE,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,OAAO,EAAE,MAAM,EAAE,CAAA;KAAE,CAAC;IAC7D,oBAAoB,CAAC,EAAE,CACrB,QAAQ,EAAE,MAAM,EAChB,UAAU,EAAE,MAAM,KACf;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;IAC7D,aAAa,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,GAAG,SAAS,KAAK;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC;IAC7F,iBAAiB,CAAC,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,KAAK,IAAI,CAAC;IACnG,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,GAAG,IAAI,EAAE,OAAO,EAAE,KAAK,OAAO,CAAC,CAAC;CACxD,CAAC;AAEF,uDAAuD;AACvD,MAAM,MAAM,UAAU,GAAG;IAAE,EAAE,EAAE,MAAM,CAAC;IAAC,WAAW,EAAE,MAAM,EAAE,CAAA;CAAE,CAAC;AAE/D,MAAM,MAAM,QAAQ,GAAG;IACrB,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,GAAG,MAAM,CAAC;IACxB,MAAM,EAAE,eAAe,CAAC;IACxB,GAAG,EAAE,eAAe,CAAC;IACrB,GAAG,EAAE,cAAc,CAAC;IACpB,qBAAqB;IACrB,UAAU,CAAC,EAAE,UAAU,CAAC;CACzB,CAAC;AAEF,MAAM,MAAM,YAAY,GAAG,CAAC,GAAG,EAAE,QAAQ,KAAK,OAAO,CAAC,OAAO,CAAC,GAAG,OAAO,CAAC;AAEzE,MAAM,MAAM,YAAY,GAAG,CAAC,IAAI,EAAE,OAAO,CAAC,SAAS,CAAC,KAAK,YAAY,CAAC;AAEtE,sCAAsC;AACtC,eAAO,MAAM,IAAI,mBAAa,CAAC;AAC/B,eAAO,MAAM,IAAI,mBAAa,CAAC;AAE/B;;;;GAIG;AACH,wBAAgB,UAAU,CACxB,GAAG,EAAE,cAAc,EACnB,KAAK,EAAE,MAAM,EACb,MAAM,EAAE,MAAM,EACd,IAAI,CAAC,EAAE,MAAM,EACb,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC9B,IAAI,CAIN;AAED;;;GAGG;AACH,wBAAgB,QAAQ,CACtB,GAAG,EAAE,cAAc,EACnB,MAAM,GAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAM,EACpC,MAAM,SAAM,GACX,IAAI,CAEN;AAED,OAAO,EAAE,CAAC"}
+{"version":3,"file":"_shared.d.ts","sourceRoot":"","sources":["../../src/routes/_shared.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,KAAK,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AACjE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAChD,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,gBAAgB,CAAC;AAC7C,OAAO,EAAE,IAAI,IAAI,UAAU,EAAE,IAAI,IAAI,UAAU,EAAE,MAAM,gBAAgB,CAAC;AACxE,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAEhD,YAAY,EAAE,MAAM,EAAE,MAAM,gBAAgB,CAAC;AAC7C,YAAY,EAAE,OAAO,EAAE,CAAC;AAExB,6CAA6C;AAC7C,MAAM,MAAM,SAAS,GAAG;IACtB,KAAK,EAAE,OAAO,CAAC;IACf,EAAE,EAAE,YAAY,CAAC;IACjB,IAAI,EAAE,CAAC,GAAG,EAAE,cAAc,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,EAAE,MAAM,KAAK,IAAI,CAAC;IACpF,IAAI,EAAE,CAAC,GAAG,EAAE,eAAe,KAAK,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IACjE,MAAM,EAAE,eAAe,CAAC;IACxB,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,CAAC,EAAE;QAAE,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,OAAO,EAAE,MAAM,EAAE,CAAA;KAAE,CAAC;IAC7D,oBAAoB,CAAC,EAAE,CACrB,QAAQ,EAAE,MAAM,EAChB,UAAU,EAAE,MAAM,KACf;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;IAC7D,aAAa,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,GAAG,SAAS,KAAK;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC;IAC7F,iBAAiB,CAAC,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,KAAK,IAAI,CAAC;IACnG,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,GAAG,IAAI,EAAE,OAAO,EAAE,KAAK,OAAO,CAAC,CAAC;CACxD,CAAC;AAEF,uDAAuD;AACvD,MAAM,MAAM,UAAU,GAAG;IAAE,EAAE,EAAE,MAAM,CAAC;IAAC,WAAW,EAAE,MAAM,EAAE,CAAA;CAAE,CAAC;AAE/D,MAAM,MAAM,QAAQ,GAAG;IACrB,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,GAAG,MAAM,CAAC;IACxB,MAAM,EAAE,eAAe,CAAC;IACxB,GAAG,EAAE,eAAe,CAAC;IACrB,GAAG,EAAE,cAAc,CAAC;IACpB,qBAAqB;IACrB,UAAU,CAAC,EAAE,UAAU,CAAC;CACzB,CAAC;AAEF,MAAM,MAAM,YAAY,GAAG,CAAC,GAAG,EAAE,QAAQ,KAAK,OAAO,CAAC,OAAO,CAAC,GAAG,OAAO,CAAC;AAEzE,MAAM,MAAM,YAAY,GAAG,CAAC,IAAI,EAAE,OAAO,CAAC,SAAS,CAAC,KAAK,YAAY,CAAC;AAEtE,sCAAsC;AACtC,eAAO,MAAM,IAAI,mBAAa,CAAC;AAC/B,eAAO,MAAM,IAAI,mBAAa,CAAC;AAE/B;;;;;;;;;GASG;AACH,wBAAgB,UAAU,CACxB,GAAG,EAAE,cAAc,EACnB,KAAK,EAAE,MAAM,EACb,MAAM,EAAE,MAAM,EACd,IAAI,CAAC,EAAE,MAAM,EACb,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC9B,IAAI,CAIN;AAED;;;;;;;GAOG;AACH,wBAAgB,QAAQ,CACtB,GAAG,EAAE,cAAc,EACnB,MAAM,GAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAM,EACpC,MAAM,SAAM,GACX,IAAI,CAEN;AAGD,OAAO,EAAE,CAAC"}

package/dist/routes/_shared.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../src/routes/_shared.ts"],
-  "sourcesContent": ["/**\n * routes/_shared.ts \u2014 \u8DEF\u7531\u6A21\u5757\u5171\u4EAB\u7C7B\u578B + \u5DE5\u5382\n *\n * \u6240\u6709 db-server \u8DEF\u7531\u7EDF\u4E00:\n *   - deps:  { query, db, body, json, ... }      \u2190 \u5171\u4EAB\u6CE8\u5165\n *   - ctx:   { path, method, params, req, res } \u2190 \u5171\u4EAB\u8BF7\u6C42\u4E0A\u4E0B\u6587\n *   - return: boolean                            \u2190 true \u8868\u793A\u5DF2\u5904\u7406\n *\n * http \u5DE5\u5177 (json / body) \u6765\u81EA lib/http.ts\n */\n\nimport type { IncomingMessage, ServerResponse } from \"node:http\";\nimport type { DatabaseSync } from \"node:sqlite\";\nimport type { Method } from \"../lib/http.js\";\nimport { body as sharedBody, json as sharedJson } from \"../lib/http.js\";\nimport type { QueryFn } from \"../lib/sqlite.js\";\n\nexport type { Method } from \"../lib/http.js\";\nexport type { QueryFn };\n\n/** shared deps factory \u2014 \u8DEF\u7531\u53EF\u58F0\u660E\u6700\u5C0F\u5316 deps \u5B50\u96C6 */\nexport type RouteDeps = {\n  query: QueryFn;\n  db: DatabaseSync;\n  json: (res: ServerResponse, data: Record<string, unknown>, status?: number) => void;\n  body: (req: IncomingMessage) => Promise<Record<string, unknown>>;\n  params: URLSearchParams;\n  projectRoot: string;\n  monitorState?: { metrics: object | null; players: object[] };\n  ensureEconomyAccount?: (\n    playerId: string,\n    playerName: string\n  ) => { balance: number; player_id: string; version: number };\n  economyResult?: (account: object | undefined) => { balance: number; version: number } | null;\n  forwardToQQBridge?: (channelId: string, fromName: string, content: string, fromId: string) => void;\n  land?: Record<string, (...args: unknown[]) => unknown>;\n};\n\n/** v2 \u6A21\u5757\u8EAB\u4EFD \u2014 \u7531 handle \u6821\u9A8C\u540E\u5199\u5165\u8DEF\u7531 ctx(\u52FF\u6302 req \u79C1\u6709\u5B57\u6BB5,LoD)\u3002 */\nexport type ModuleAuth = { id: string; permissions: string[] };\n\nexport type RouteCtx = {\n  path: string;\n  method: Method | string;\n  params: URLSearchParams;\n  req: IncomingMessage;\n  res: ServerResponse;\n  /** v2 \u8DEF\u7531\u4E13\u7528:\u6A21\u5757\u9274\u6743\u7ED3\u679C */\n  moduleAuth?: ModuleAuth;\n};\n\nexport type RouteHandler = (ctx: RouteCtx) => Promise<boolean> | boolean;\n\nexport type RouteFactory = (deps: Partial<RouteDeps>) => RouteHandler;\n\n/** \u4FBF\u6377 re-export\uFF1A\u8DEF\u7531\u9ED8\u8BA4\u4ECE\u8FD9\u91CC\u53D6 json/body */\nexport const json = sharedJson;\nexport const body = sharedBody;\n\n/**\n * v2 \u5931\u8D25\u4FE1\u5C01\u6743\u5A01\u5F62\u6001(DRY + LSP):\n * \u4E00\u5F8B `{ ok:false, error, code? }`(+ \u53EF\u9009 extra),\u52FF\u518D\u6DF7\u7528 `{ success:false }`\u3002\n * service-routes / db / module-config / index \u6A21\u5757\u9274\u6743\u95E8\u5E94\u8D70\u6B64\u52A9\u624B\u3002\n */\nexport function jsonV2Fail(\n  res: ServerResponse,\n  error: string,\n  status: number,\n  code?: string,\n  extra?: Record<string, unknown>\n): void {\n  const payload: Record<string, unknown> = { ...(extra ?? {}), ok: false, error };\n  if (code) payload.code = code;\n  sharedJson(res, payload, status);\n}\n\n/**\n * v2 \u6210\u529F\u4FE1\u5C01\u6743\u5A01\u5F62\u6001(DRY + LSP):\n * \u4E00\u5F8B `{ ok:true, ...fields }`,\u4E0E jsonV2Fail \u5BF9\u79F0;\u5BA2\u6237\u7AEF\u5DF2\u53CC\u8BA4 ok/success\u3002\n */\nexport function jsonV2Ok(\n  res: ServerResponse,\n  fields: Record<string, unknown> = {},\n  status = 200\n): void {\n  sharedJson(res, { ...fields, ok: true }, status);\n}\n\nexport {};\n\n"],
-  "mappings": "AAcA,SAAS,QAAQ,YAAY,QAAQ,kBAAkB;AA0ChD,MAAM,OAAO;AACb,MAAM,OAAO;AAOb,SAAS,WACd,KACA,OACA,QACA,MACA,OACM;AACN,QAAM,UAAmC,EAAE,GAAI,SAAS,CAAC,GAAI,IAAI,OAAO,MAAM;AAC9E,MAAI,KAAM,SAAQ,OAAO;AACzB,aAAW,KAAK,SAAS,MAAM;AACjC;AAMO,SAAS,SACd,KACA,SAAkC,CAAC,GACnC,SAAS,KACH;AACN,aAAW,KAAK,EAAE,GAAG,QAAQ,IAAI,KAAK,GAAG,MAAM;AACjD;",
+  "sourcesContent": ["/**\n * routes/_shared.ts \u2014 \u8DEF\u7531\u6A21\u5757\u5171\u4EAB\u7C7B\u578B + \u5DE5\u5382\n *\n * \u6240\u6709 db-server \u8DEF\u7531\u7EDF\u4E00:\n *   - deps:  { query, db, body, json, ... }      \u2190 \u5171\u4EAB\u6CE8\u5165\n *   - ctx:   { path, method, params, req, res } \u2190 \u5171\u4EAB\u8BF7\u6C42\u4E0A\u4E0B\u6587\n *   - return: boolean                            \u2190 true \u8868\u793A\u5DF2\u5904\u7406\n *\n * http \u5DE5\u5177 (json / body) \u6765\u81EA lib/http.ts\n */\n\nimport type { IncomingMessage, ServerResponse } from \"node:http\";\nimport type { DatabaseSync } from \"node:sqlite\";\nimport type { Method } from \"../lib/http.js\";\nimport { body as sharedBody, json as sharedJson } from \"../lib/http.js\";\nimport type { QueryFn } from \"../lib/sqlite.js\";\n\nexport type { Method } from \"../lib/http.js\";\nexport type { QueryFn };\n\n/** shared deps factory \u2014 \u8DEF\u7531\u53EF\u58F0\u660E\u6700\u5C0F\u5316 deps \u5B50\u96C6 */\nexport type RouteDeps = {\n  query: QueryFn;\n  db: DatabaseSync;\n  json: (res: ServerResponse, data: Record<string, unknown>, status?: number) => void;\n  body: (req: IncomingMessage) => Promise<Record<string, unknown>>;\n  params: URLSearchParams;\n  projectRoot: string;\n  monitorState?: { metrics: object | null; players: object[] };\n  ensureEconomyAccount?: (\n    playerId: string,\n    playerName: string\n  ) => { balance: number; player_id: string; version: number };\n  economyResult?: (account: object | undefined) => { balance: number; version: number } | null;\n  forwardToQQBridge?: (channelId: string, fromName: string, content: string, fromId: string) => void;\n  land?: Record<string, (...args: unknown[]) => unknown>;\n};\n\n/** v2 \u6A21\u5757\u8EAB\u4EFD \u2014 \u7531 handle \u6821\u9A8C\u540E\u5199\u5165\u8DEF\u7531 ctx(\u52FF\u6302 req \u79C1\u6709\u5B57\u6BB5,LoD)\u3002 */\nexport type ModuleAuth = { id: string; permissions: string[] };\n\nexport type RouteCtx = {\n  path: string;\n  method: Method | string;\n  params: URLSearchParams;\n  req: IncomingMessage;\n  res: ServerResponse;\n  /** v2 \u8DEF\u7531\u4E13\u7528:\u6A21\u5757\u9274\u6743\u7ED3\u679C */\n  moduleAuth?: ModuleAuth;\n};\n\nexport type RouteHandler = (ctx: RouteCtx) => Promise<boolean> | boolean;\n\nexport type RouteFactory = (deps: Partial<RouteDeps>) => RouteHandler;\n\n/** \u4FBF\u6377 re-export\uFF1A\u8DEF\u7531\u9ED8\u8BA4\u4ECE\u8FD9\u91CC\u53D6 json/body */\nexport const json = sharedJson;\nexport const body = sharedBody;\n\n/**\n * \u6807\u51C6\u5931\u8D25\u54CD\u5E94\u4FE1\u5C01\u751F\u6210\u5DE5\u5177\uFF08\u683C\u5F0F\uFF1A`{ ok: false, error, code? }` + \u53EF\u9009 extra \u5B57\u6BB5\uFF09\u3002\n * \u8DEF\u7531\u5C42\u4E0E\u9274\u6743\u4E2D\u95F4\u4EF6\u7EDF\u4E00\u8C03\u7528\u6B64\u52A9\u624B\uFF0C\u675C\u7EDD\u4E0E `{ success: false }` \u5B57\u6BB5\u6DF7\u7528\u3002\n *\n * @param res HTTP \u54CD\u5E94\u5BF9\u8C61\u3002\n * @param error \u9519\u8BEF\u7B80\u77ED\u63CF\u8FF0\u3002\n * @param status HTTP \u72B6\u6001\u7801\u3002\n * @param code \u53EF\u9009\u7684\u7CBE\u7EC6\u4E1A\u52A1\u9519\u8BEF\u7801\u3002\n * @param extra \u53EF\u9009\u7684\u9644\u52A0\u5B57\u6BB5\u5B57\u5178\u3002\n */\nexport function jsonV2Fail(\n  res: ServerResponse,\n  error: string,\n  status: number,\n  code?: string,\n  extra?: Record<string, unknown>\n): void {\n  const payload: Record<string, unknown> = { ...(extra ?? {}), ok: false, error };\n  if (code) payload.code = code;\n  sharedJson(res, payload, status);\n}\n\n/**\n * \u6807\u51C6\u6210\u529F\u54CD\u5E94\u4FE1\u5C01\u751F\u6210\u5DE5\u5177\uFF08\u683C\u5F0F\uFF1A`{ ok: true, ...fields }`\uFF09\u3002\n * \u4E0E `jsonV2Fail` \u5BF9\u79F0\u7EDF\u4E00\u3002\n *\n * @param res HTTP \u54CD\u5E94\u5BF9\u8C61\u3002\n * @param fields \u54CD\u5E94\u6B63\u6587\u5B57\u6BB5\u5B57\u5178\u3002\n * @param status HTTP \u72B6\u6001\u7801\uFF08\u9ED8\u8BA4\u4E3A 200\uFF09\u3002\n */\nexport function jsonV2Ok(\n  res: ServerResponse,\n  fields: Record<string, unknown> = {},\n  status = 200\n): void {\n  sharedJson(res, { ...fields, ok: true }, status);\n}\n\n\nexport {};\n\n"],
+  "mappings": "AAcA,SAAS,QAAQ,YAAY,QAAQ,kBAAkB;AA0ChD,MAAM,OAAO;AACb,MAAM,OAAO;AAYb,SAAS,WACd,KACA,OACA,QACA,MACA,OACM;AACN,QAAM,UAAmC,EAAE,GAAI,SAAS,CAAC,GAAI,IAAI,OAAO,MAAM;AAC9E,MAAI,KAAM,SAAQ,OAAO;AACzB,aAAW,KAAK,SAAS,MAAM;AACjC;AAUO,SAAS,SACd,KACA,SAAkC,CAAC,GACnC,SAAS,KACH;AACN,aAAW,KAAK,EAAE,GAAG,QAAQ,IAAI,KAAK,GAAG,MAAM;AACjD;",
   "names": []
 }

package/dist/routes/config.d.ts

@@ -1,17 +1,14 @@
 /**
- * routes/config.ts — 配置路由（直接读取 configs/*.json）
+ * routes/config.ts — 配置路由
  *
  * 路由列表：
- *   GET /api/sfmc/configs/all          — SAPI 启动时一次性拉取所有配置
- *   GET /api/sfmc/settings             — 平铺 settings.json
- *   GET /api/sfmc/settings/:key        — 含 land:* / bridge_channel_id 等 fallback 查询
- *   GET /api/sfmc/areas                — areas.json
- *   GET /api/sfmc/permissions          — permissions.json
- *   GET /api/sfmc/banned_items         — banned_items.json
- *   GET /api/sfmc/clean                — clean.json
- *   GET /api/sfmc/grids                — grids.json
- *   GET /api/sfmc/peace_filters        — peace_filters.json
- *   GET /api/sfmc/qa                   — questions.json
+ *   GET /api/sfmc/configs/all          — SAPI ConfigManager 启动快照（仅平台域）
+ *   GET /api/sfmc/settings             — 平铺 settings.json（legacy）
+ *   GET /api/sfmc/settings/:key        — 含 land:* / bridge_channel_id 等 fallback
+ *   GET /api/sfmc/areas|permissions|…  — legacy 只读 JSON（文件名对 db-server 为黑箱）
+ *
+ * DIP：模块/legacy JSON 不进 SDK ConfigName；本路由用 configDir + 文件名拼接路径。
+ * 模块私有配置的读写权威入口是 module-config-routes（configs/:configKey）。
  */
 interface Deps {
     json: (res: import("http").ServerResponse, data: Record<string, unknown>, status?: number) => void;

package/dist/routes/config.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../../src/routes/config.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAIH,UAAU,IAAI;IACZ,IAAI,EAAE,CAAC,GAAG,EAAE,OAAO,MAAM,EAAE,cAAc,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,EAAE,MAAM,KAAK,IAAI,CAAC;IACnG,WAAW,EAAE,MAAM,CAAC;IACpB;;;OAGG;IACH,WAAW,CAAC,EAAE,MAAM,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IACnD;;;OAGG;IACH,eAAe,CAAC,EAAE,MAAM,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAChD;AAmCD,iBAAS,kBAAkB,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,WAAW,EAAE,eAAe,EAAE,EAAE,IAAI,iDAgHhF;IACD,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,eAAe,CAAC;IACxB,GAAG,EAAE,OAAO,MAAM,EAAE,cAAc,CAAC;CACpC,KAAG,OAAO,CAAC,OAAO,CAAC,CAuErB;AAED,OAAO,EAAE,kBAAkB,EAAE,CAAC"}
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../../src/routes/config.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAKH,UAAU,IAAI;IACZ,IAAI,EAAE,CAAC,GAAG,EAAE,OAAO,MAAM,EAAE,cAAc,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,EAAE,MAAM,KAAK,IAAI,CAAC;IACnG,WAAW,EAAE,MAAM,CAAC;IACpB;;;OAGG;IACH,WAAW,CAAC,EAAE,MAAM,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IACnD;;;OAGG;IACH,eAAe,CAAC,EAAE,MAAM,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAChD;AAmCD,iBAAS,kBAAkB,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,WAAW,EAAE,eAAe,EAAE,EAAE,IAAI,iDAyGhF;IACD,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,eAAe,CAAC;IACxB,GAAG,EAAE,OAAO,MAAM,EAAE,cAAc,CAAC;CACpC,KAAG,OAAO,CAAC,OAAO,CAAC,CAuErB;AAED,OAAO,EAAE,kBAAkB,EAAE,CAAC"}

package/dist/routes/config.js

@@ -1,4 +1,5 @@
-import { configPath, readJson } from "@sfmc-bds/sdk/node/config";
+import { join } from "node:path";
+import { configDir, configPath, readJson } from "@sfmc-bds/sdk/node/config";
 function isMetaKey(k) {
   return k === "$schema" || String(k).startsWith("_");
 }
@@ -28,40 +29,33 @@ function arrayOrEmpty(v) {
   return Array.isArray(v) ? v : [];
 }
 function createConfigRoutes({ json, projectRoot, listModules, getModuleTokens }) {
-  const readCfg = (name) => readJson(configPath(projectRoot, name));
+  const readPlatform = (name) => readJson(configPath(projectRoot, name));
+  const readOpaque = (fileName) => readJson(join(configDir(projectRoot), fileName));
   function getAllConfigs() {
     const modules = typeof listModules === "function" ? listModules() : [];
     const module_tokens = typeof getModuleTokens === "function" ? getModuleTokens() : {};
     return {
-      // 与 /api/sfmc/modules 同源;ConfigManager.init 一次拉齐启停态(DRY)
       modules,
-      // loopback-only 下发;SAPI 无 fs,靠此注入模块身份(DIP)
       module_tokens,
-      settings: stripMeta(readCfg("settings.json")),
-      areas: getAreas(),
-      permissions: getPermissions(),
-      banned_items: getBannedItems(),
-      clean: getClean(),
-      grids: getGrids(),
-      peace_filters: getPeaceFilters(),
-      questions: getQA()
+      settings: stripMeta(readOpaque("settings.json")),
+      permissions: getPermissions()
     };
   }
   function getSettingsFlat() {
-    const obj = stripMeta(readJson(configPath(projectRoot, "settings.json")));
+    const obj = stripMeta(readOpaque("settings.json"));
     return Object.entries(obj).map(([key, value]) => ({ key, value: jsonValue(value) }));
   }
   function getSettingByKey(key) {
-    const settings = readJson(configPath(projectRoot, "settings.json")) ?? {};
+    const settings = readOpaque("settings.json") ?? {};
     if (Object.prototype.hasOwnProperty.call(settings, key) && !isMetaKey(key)) {
       return { value: settings[key], source: "settings.json" };
     }
     if (key === "bridge_channel_id") {
-      const qq = readCfg("qq_config.json") ?? {};
+      const qq = readPlatform("qq_config.json") ?? {};
       if (qq.bridge_channel_id) return { value: qq.bridge_channel_id, source: "qq_config.json" };
     }
     if (key.startsWith("land:")) {
-      const land = readCfg("land.json") ?? {};
+      const land = readOpaque("land.json") ?? {};
       if (Object.prototype.hasOwnProperty.call(land, key) && !isMetaKey(key)) {
         return { value: land[key], source: "land.json" };
       }
@@ -69,28 +63,28 @@ function createConfigRoutes({ json, projectRoot, listModules, getModuleTokens })
     return { value: null };
   }
   function getAreas() {
-    return arrayOrEmpty(readCfg("areas.json")).filter((r) => r && r.module && r.dimension != null).map((r) => stripMetaDeep(r));
+    return arrayOrEmpty(readOpaque("areas.json")).filter((r) => r && r.module && r.dimension != null).map((r) => stripMetaDeep(r));
   }
   function getPermissions() {
-    return arrayOrEmpty(readCfg("permissions.json")).filter((r) => r && r.player_name).map((r) => stripMetaDeep(r));
+    return arrayOrEmpty(readPlatform("permissions.json")).filter((r) => r && r.player_name).map((r) => stripMetaDeep(r));
   }
   function getBannedItems() {
-    return arrayOrEmpty(readCfg("banned_items.json")).filter(
+    return arrayOrEmpty(readOpaque("banned_items.json")).filter(
       (i) => typeof i === "string" && i && !i.startsWith("_")
     );
   }
   function getClean() {
-    const c = stripMetaDeep(readCfg("clean.json") ?? {});
+    const c = stripMetaDeep(readOpaque("clean.json") ?? {});
     return { item_max: c.item_max ?? 192, poll_interval: c.poll_interval ?? 60 };
   }
   function getGrids() {
-    return arrayOrEmpty(readCfg("grids.json")).filter((r) => r && r.name).map((r) => stripMetaDeep(r));
+    return arrayOrEmpty(readOpaque("grids.json")).filter((r) => r && r.name).map((r) => stripMetaDeep(r));
   }
   function getPeaceFilters() {
-    return arrayOrEmpty(readCfg("peace_filters.json")).filter((r) => r && r.family).map((r) => stripMetaDeep(r));
+    return arrayOrEmpty(readOpaque("peace_filters.json")).filter((r) => r && r.family).map((r) => stripMetaDeep(r));
   }
   function getQA() {
-    return arrayOrEmpty(readCfg("questions.json")).filter((r) => r && r.question).map((r, idx) => {
+    return arrayOrEmpty(readOpaque("questions.json")).filter((r) => r && r.question).map((r, idx) => {
       const clean = stripMetaDeep(r);
       return {
         id: idx + 1,

package/dist/routes/config.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../src/routes/config.ts"],
-  "sourcesContent": ["/**\n * routes/config.ts \u2014 \u914D\u7F6E\u8DEF\u7531\uFF08\u76F4\u63A5\u8BFB\u53D6 configs/*.json\uFF09\n *\n * \u8DEF\u7531\u5217\u8868\uFF1A\n *   GET /api/sfmc/configs/all          \u2014 SAPI \u542F\u52A8\u65F6\u4E00\u6B21\u6027\u62C9\u53D6\u6240\u6709\u914D\u7F6E\n *   GET /api/sfmc/settings             \u2014 \u5E73\u94FA settings.json\n *   GET /api/sfmc/settings/:key        \u2014 \u542B land:* / bridge_channel_id \u7B49 fallback \u67E5\u8BE2\n *   GET /api/sfmc/areas                \u2014 areas.json\n *   GET /api/sfmc/permissions          \u2014 permissions.json\n *   GET /api/sfmc/banned_items         \u2014 banned_items.json\n *   GET /api/sfmc/clean                \u2014 clean.json\n *   GET /api/sfmc/grids                \u2014 grids.json\n *   GET /api/sfmc/peace_filters        \u2014 peace_filters.json\n *   GET /api/sfmc/qa                   \u2014 questions.json\n */\n\nimport { configPath, readJson, type ConfigName } from \"@sfmc-bds/sdk/node/config\";\n\ninterface Deps {\n  json: (res: import(\"http\").ServerResponse, data: Record<string, unknown>, status?: number) => void;\n  projectRoot: string;\n  /**\n   * \u6CE8\u5165\u6A21\u5757\u5217\u8868(\u4E0E GET /api/sfmc/modules \u540C\u6E90 \u2014 DRY)\u3002\n   * \u52FF\u5728\u672C\u8DEF\u7531\u518D\u8BFB catalog/lock(DIP:\u9AD8\u5C42\u88C5\u914D,\u8DEF\u7531\u53EA\u6D88\u8D39\u62BD\u8C61)\u3002\n   */\n  listModules?: () => Array<Record<string, unknown>>;\n  /**\n   * \u6CE8\u5165\u6A21\u5757 HMAC token \u8868(\u4EC5 loopback \u53EF\u8FBE;\u4F9B SAPI host-bootstrap \u6CE8\u5165\n   * set*ModuleContext,\u56E0 SAPI \u4E0D\u80FD\u76F4\u63A5\u8BFB\u4E0E DB \u540C\u76EE\u5F55\u7684 module-tokens.json)\u3002\n   */\n  getModuleTokens?: () => Record<string, string>;\n}\n\nfunction isMetaKey(k: string): boolean {\n  return k === \"$schema\" || String(k).startsWith(\"_\");\n}\n\nfunction stripMetaDeep(v: unknown): unknown {\n  if (Array.isArray(v)) return v.map(stripMetaDeep);\n  if (v && typeof v === \"object\") {\n    const out: Record<string, unknown> = {};\n    for (const [k, val] of Object.entries(v as Record<string, unknown>)) {\n      if (!isMetaKey(k)) out[k] = stripMetaDeep(val);\n    }\n    return out;\n  }\n  return v;\n}\n\nfunction stripMeta(obj: Record<string, unknown> | null): Record<string, unknown> {\n  if (!obj || typeof obj !== \"object\" || Array.isArray(obj)) return {};\n  const out: Record<string, unknown> = {};\n  for (const [k, v] of Object.entries(obj)) {\n    if (!isMetaKey(k)) out[k] = v;\n  }\n  return out;\n}\n\nfunction jsonValue(v: unknown): string {\n  return v !== null && typeof v === \"object\" ? JSON.stringify(v) : String(v ?? \"\");\n}\n\nfunction arrayOrEmpty(v: unknown): unknown[] {\n  return Array.isArray(v) ? v : [];\n}\n\nfunction createConfigRoutes({ json, projectRoot, listModules, getModuleTokens }: Deps) {\n  /** \u4ED3\u9876\u670D\u52A1 config \u8BFB\u53D6\u7EDF\u4E00\u8D70 SDK;\u95ED\u5305\u6355\u83B7 projectRoot\u3002 */\n  const readCfg = (name: ConfigName): unknown => readJson(configPath(projectRoot, name));\n\n  function getAllConfigs(): Record<string, unknown> {\n    const modules = typeof listModules === \"function\" ? listModules() : [];\n    const module_tokens = typeof getModuleTokens === \"function\" ? getModuleTokens() : {};\n    /**\n     * SAPI ConfigManager \u5951\u7EA6:banned_items \u4E3A string[](\u4E0E GET /banned_items \u540C\u6E90)\u3002\n     * \u52FF\u518D\u6620\u5C04\u6210 {item_id} \u2014 \u5426\u5219 filter(typeof s === \"string\") \u4F1A\u5F97\u5230\u7A7A\u7F13\u5B58(LSP)\u3002\n     * \u5176\u4F59\u8D44\u6E90\u590D\u7528\u5355\u8D44\u6E90 helpers,\u907F\u514D getAllConfigs \u4E0E\u4E13\u7528\u8DEF\u7531\u53CC\u5199(DRY)\u3002\n     */\n    return {\n      // \u4E0E /api/sfmc/modules \u540C\u6E90;ConfigManager.init \u4E00\u6B21\u62C9\u9F50\u542F\u505C\u6001(DRY)\n      modules,\n      // loopback-only \u4E0B\u53D1;SAPI \u65E0 fs,\u9760\u6B64\u6CE8\u5165\u6A21\u5757\u8EAB\u4EFD(DIP)\n      module_tokens,\n      settings: stripMeta(readCfg(\"settings.json\") as Record<string, unknown> | null),\n      areas: getAreas(),\n      permissions: getPermissions(),\n      banned_items: getBannedItems(),\n      clean: getClean(),\n      grids: getGrids(),\n      peace_filters: getPeaceFilters(),\n      questions: getQA(),\n    };\n  }\n\n  function getSettingsFlat(): Array<{ key: string; value: string }> {\n    const obj = stripMeta(readJson(configPath(projectRoot, \"settings.json\")) as Record<string, unknown> | null);\n    return Object.entries(obj).map(([key, value]) => ({ key, value: jsonValue(value) }));\n  }\n\n  function getSettingByKey(key: string): { value: unknown; source?: string } {\n    const settings = (readJson(configPath(projectRoot, \"settings.json\")) as Record<string, unknown> | null) ?? {};\n    if (Object.prototype.hasOwnProperty.call(settings, key) && !isMetaKey(key)) {\n      return { value: settings[key], source: \"settings.json\" };\n    }\n    if (key === \"bridge_channel_id\") {\n      const qq = (readCfg(\"qq_config.json\") as Record<string, unknown> | null) ?? {};\n      if (qq.bridge_channel_id) return { value: qq.bridge_channel_id, source: \"qq_config.json\" };\n    }\n    if (key.startsWith(\"land:\")) {\n      const land = (readCfg(\"land.json\") as Record<string, unknown> | null) ?? {};\n      if (Object.prototype.hasOwnProperty.call(land, key) && !isMetaKey(key)) {\n        return { value: land[key], source: \"land.json\" };\n      }\n    }\n    return { value: null };\n  }\n\n  function getAreas(): unknown[] {\n    return (arrayOrEmpty(readCfg(\"areas.json\")) as Array<Record<string, unknown>>)\n      .filter((r) => r && r.module && r.dimension != null)\n      .map((r) => stripMetaDeep(r));\n  }\n\n  function getPermissions(): unknown[] {\n    return (arrayOrEmpty(readCfg(\"permissions.json\")) as Array<Record<string, unknown>>)\n      .filter((r) => r && r.player_name)\n      .map((r) => stripMetaDeep(r));\n  }\n\n  function getBannedItems(): string[] {\n    return (arrayOrEmpty(readCfg(\"banned_items.json\")) as Array<string>).filter(\n      (i) => typeof i === \"string\" && i && !i.startsWith(\"_\")\n    );\n  }\n\n  function getClean(): { item_max: number; poll_interval: number } {\n    const c = stripMetaDeep(readCfg(\"clean.json\") ?? {}) as Record<string, unknown>;\n    return { item_max: (c.item_max as number) ?? 192, poll_interval: (c.poll_interval as number) ?? 60 };\n  }\n\n  function getGrids(): unknown[] {\n    return (arrayOrEmpty(readCfg(\"grids.json\")) as Array<Record<string, unknown>>)\n      .filter((r) => r && r.name)\n      .map((r) => stripMetaDeep(r));\n  }\n\n  function getPeaceFilters(): unknown[] {\n    return (arrayOrEmpty(readCfg(\"peace_filters.json\")) as Array<Record<string, unknown>>)\n      .filter((r) => r && r.family)\n      .map((r) => stripMetaDeep(r));\n  }\n\n  function getQA(): Array<Record<string, unknown>> {\n    return (arrayOrEmpty(readCfg(\"questions.json\")) as Array<Record<string, unknown>>)\n      .filter((r) => r && r.question)\n      .map((r, idx) => {\n        const clean = stripMetaDeep(r) as Record<string, unknown>;\n        return {\n          id: idx + 1,\n          weight: clean.weight ?? 1,\n          question: clean.question,\n          answers: clean.answers ?? [],\n          msg_right: clean.msg_right ?? \"\",\n          msg_wrong: clean.msg_wrong ?? \"\",\n          explanation: clean.explanation ?? \"\",\n          min_rank: clean.min_rank ?? null,\n          max_rank: clean.max_rank ?? null,\n          rewards: clean.rewards ?? [],\n          punishments: clean.punishments ?? [],\n        };\n      });\n  }\n\n  return async function handleConfigRoute({\n    path: requestPath,\n    method,\n    params,\n    res,\n  }: {\n    path: string;\n    method: string;\n    params: URLSearchParams;\n    res: import(\"http\").ServerResponse;\n  }): Promise<boolean> {\n    void params;\n    if (requestPath === \"/api/sfmc/configs/all\") {\n      if (method !== \"GET\") {\n        json(res, { success: false, error: \"not_found\" }, 404);\n        return true;\n      }\n      json(res, getAllConfigs());\n      return true;\n    }\n    if (requestPath === \"/api/sfmc/settings\") {\n      if (method === \"GET\") {\n        json(res, { settings: getSettingsFlat() });\n        return true;\n      }\n      json(res, { success: false, error: \"not_found\" }, 404);\n      return true;\n    }\n    if (requestPath.startsWith(\"/api/sfmc/settings/\")) {\n      const key = decodeURIComponent(requestPath.slice(\"/api/sfmc/settings/\".length));\n      if (method === \"GET\") {\n        json(res, getSettingByKey(key));\n        return true;\n      }\n      json(res, { success: false, error: \"method_not_allowed\" }, 405);\n      return true;\n    }\n    if (requestPath === \"/api/sfmc/areas\") {\n      if (method === \"GET\") {\n        json(res, { areas: getAreas() });\n        return true;\n      }\n    }\n    if (requestPath === \"/api/sfmc/permissions\") {\n      if (method === \"GET\") {\n        json(res, { permissions: getPermissions() });\n        return true;\n      }\n    }\n    if (requestPath === \"/api/sfmc/banned_items\") {\n      if (method === \"GET\") {\n        json(res, { items: getBannedItems() });\n        return true;\n      }\n    }\n    if (requestPath === \"/api/sfmc/clean\") {\n      if (method === \"GET\") {\n        json(res, { clean: getClean() });\n        return true;\n      }\n    }\n    if (requestPath === \"/api/sfmc/grids\") {\n      if (method === \"GET\") {\n        json(res, { grids: getGrids() });\n        return true;\n      }\n    }\n    if (requestPath === \"/api/sfmc/peace_filters\") {\n      if (method === \"GET\") {\n        json(res, { filters: getPeaceFilters() });\n        return true;\n      }\n    }\n    if (requestPath === \"/api/sfmc/qa\") {\n      if (method === \"GET\") {\n        json(res, { questions: getQA() });\n        return true;\n      }\n    }\n    return false;\n  };\n}\n\nexport { createConfigRoutes };\n"],
-  "mappings": "AAgBA,SAAS,YAAY,gBAAiC;AAiBtD,SAAS,UAAU,GAAoB;AACrC,SAAO,MAAM,aAAa,OAAO,CAAC,EAAE,WAAW,GAAG;AACpD;AAEA,SAAS,cAAc,GAAqB;AAC1C,MAAI,MAAM,QAAQ,CAAC,EAAG,QAAO,EAAE,IAAI,aAAa;AAChD,MAAI,KAAK,OAAO,MAAM,UAAU;AAC9B,UAAM,MAA+B,CAAC;AACtC,eAAW,CAAC,GAAG,GAAG,KAAK,OAAO,QAAQ,CAA4B,GAAG;AACnE,UAAI,CAAC,UAAU,CAAC,EAAG,KAAI,CAAC,IAAI,cAAc,GAAG;AAAA,IAC/C;AACA,WAAO;AAAA,EACT;AACA,SAAO;AACT;AAEA,SAAS,UAAU,KAA8D;AAC/E,MAAI,CAAC,OAAO,OAAO,QAAQ,YAAY,MAAM,QAAQ,GAAG,EAAG,QAAO,CAAC;AACnE,QAAM,MAA+B,CAAC;AACtC,aAAW,CAAC,GAAG,CAAC,KAAK,OAAO,QAAQ,GAAG,GAAG;AACxC,QAAI,CAAC,UAAU,CAAC,EAAG,KAAI,CAAC,IAAI;AAAA,EAC9B;AACA,SAAO;AACT;AAEA,SAAS,UAAU,GAAoB;AACrC,SAAO,MAAM,QAAQ,OAAO,MAAM,WAAW,KAAK,UAAU,CAAC,IAAI,OAAO,KAAK,EAAE;AACjF;AAEA,SAAS,aAAa,GAAuB;AAC3C,SAAO,MAAM,QAAQ,CAAC,IAAI,IAAI,CAAC;AACjC;AAEA,SAAS,mBAAmB,EAAE,MAAM,aAAa,aAAa,gBAAgB,GAAS;AAErF,QAAM,UAAU,CAAC,SAA8B,SAAS,WAAW,aAAa,IAAI,CAAC;AAErF,WAAS,gBAAyC;AAChD,UAAM,UAAU,OAAO,gBAAgB,aAAa,YAAY,IAAI,CAAC;AACrE,UAAM,gBAAgB,OAAO,oBAAoB,aAAa,gBAAgB,IAAI,CAAC;AAMnF,WAAO;AAAA;AAAA,MAEL;AAAA;AAAA,MAEA;AAAA,MACA,UAAU,UAAU,QAAQ,eAAe,CAAmC;AAAA,MAC9E,OAAO,SAAS;AAAA,MAChB,aAAa,eAAe;AAAA,MAC5B,cAAc,eAAe;AAAA,MAC7B,OAAO,SAAS;AAAA,MAChB,OAAO,SAAS;AAAA,MAChB,eAAe,gBAAgB;AAAA,MAC/B,WAAW,MAAM;AAAA,IACnB;AAAA,EACF;AAEA,WAAS,kBAAyD;AAChE,UAAM,MAAM,UAAU,SAAS,WAAW,aAAa,eAAe,CAAC,CAAmC;AAC1G,WAAO,OAAO,QAAQ,GAAG,EAAE,IAAI,CAAC,CAAC,KAAK,KAAK,OAAO,EAAE,KAAK,OAAO,UAAU,KAAK,EAAE,EAAE;AAAA,EACrF;AAEA,WAAS,gBAAgB,KAAkD;AACzE,UAAM,WAAY,SAAS,WAAW,aAAa,eAAe,CAAC,KAAwC,CAAC;AAC5G,QAAI,OAAO,UAAU,eAAe,KAAK,UAAU,GAAG,KAAK,CAAC,UAAU,GAAG,GAAG;AAC1E,aAAO,EAAE,OAAO,SAAS,GAAG,GAAG,QAAQ,gBAAgB;AAAA,IACzD;AACA,QAAI,QAAQ,qBAAqB;AAC/B,YAAM,KAAM,QAAQ,gBAAgB,KAAwC,CAAC;AAC7E,UAAI,GAAG,kBAAmB,QAAO,EAAE,OAAO,GAAG,mBAAmB,QAAQ,iBAAiB;AAAA,IAC3F;AACA,QAAI,IAAI,WAAW,OAAO,GAAG;AAC3B,YAAM,OAAQ,QAAQ,WAAW,KAAwC,CAAC;AAC1E,UAAI,OAAO,UAAU,eAAe,KAAK,MAAM,GAAG,KAAK,CAAC,UAAU,GAAG,GAAG;AACtE,eAAO,EAAE,OAAO,KAAK,GAAG,GAAG,QAAQ,YAAY;AAAA,MACjD;AAAA,IACF;AACA,WAAO,EAAE,OAAO,KAAK;AAAA,EACvB;AAEA,WAAS,WAAsB;AAC7B,WAAQ,aAAa,QAAQ,YAAY,CAAC,EACvC,OAAO,CAAC,MAAM,KAAK,EAAE,UAAU,EAAE,aAAa,IAAI,EAClD,IAAI,CAAC,MAAM,cAAc,CAAC,CAAC;AAAA,EAChC;AAEA,WAAS,iBAA4B;AACnC,WAAQ,aAAa,QAAQ,kBAAkB,CAAC,EAC7C,OAAO,CAAC,MAAM,KAAK,EAAE,WAAW,EAChC,IAAI,CAAC,MAAM,cAAc,CAAC,CAAC;AAAA,EAChC;AAEA,WAAS,iBAA2B;AAClC,WAAQ,aAAa,QAAQ,mBAAmB,CAAC,EAAoB;AAAA,MACnE,CAAC,MAAM,OAAO,MAAM,YAAY,KAAK,CAAC,EAAE,WAAW,GAAG;AAAA,IACxD;AAAA,EACF;AAEA,WAAS,WAAwD;AAC/D,UAAM,IAAI,cAAc,QAAQ,YAAY,KAAK,CAAC,CAAC;AACnD,WAAO,EAAE,UAAW,EAAE,YAAuB,KAAK,eAAgB,EAAE,iBAA4B,GAAG;AAAA,EACrG;AAEA,WAAS,WAAsB;AAC7B,WAAQ,aAAa,QAAQ,YAAY,CAAC,EACvC,OAAO,CAAC,MAAM,KAAK,EAAE,IAAI,EACzB,IAAI,CAAC,MAAM,cAAc,CAAC,CAAC;AAAA,EAChC;AAEA,WAAS,kBAA6B;AACpC,WAAQ,aAAa,QAAQ,oBAAoB,CAAC,EAC/C,OAAO,CAAC,MAAM,KAAK,EAAE,MAAM,EAC3B,IAAI,CAAC,MAAM,cAAc,CAAC,CAAC;AAAA,EAChC;AAEA,WAAS,QAAwC;AAC/C,WAAQ,aAAa,QAAQ,gBAAgB,CAAC,EAC3C,OAAO,CAAC,MAAM,KAAK,EAAE,QAAQ,EAC7B,IAAI,CAAC,GAAG,QAAQ;AACf,YAAM,QAAQ,cAAc,CAAC;AAC7B,aAAO;AAAA,QACL,IAAI,MAAM;AAAA,QACV,QAAQ,MAAM,UAAU;AAAA,QACxB,UAAU,MAAM;AAAA,QAChB,SAAS,MAAM,WAAW,CAAC;AAAA,QAC3B,WAAW,MAAM,aAAa;AAAA,QAC9B,WAAW,MAAM,aAAa;AAAA,QAC9B,aAAa,MAAM,eAAe;AAAA,QAClC,UAAU,MAAM,YAAY;AAAA,QAC5B,UAAU,MAAM,YAAY;AAAA,QAC5B,SAAS,MAAM,WAAW,CAAC;AAAA,QAC3B,aAAa,MAAM,eAAe,CAAC;AAAA,MACrC;AAAA,IACF,CAAC;AAAA,EACL;AAEA,SAAO,eAAe,kBAAkB;AAAA,IACtC,MAAM;AAAA,IACN;AAAA,IACA;AAAA,IACA;AAAA,EACF,GAKqB;AACnB,SAAK;AACL,QAAI,gBAAgB,yBAAyB;AAC3C,UAAI,WAAW,OAAO;AACpB,aAAK,KAAK,EAAE,SAAS,OAAO,OAAO,YAAY,GAAG,GAAG;AACrD,eAAO;AAAA,MACT;AACA,WAAK,KAAK,cAAc,CAAC;AACzB,aAAO;AAAA,IACT;AACA,QAAI,gBAAgB,sBAAsB;AACxC,UAAI,WAAW,OAAO;AACpB,aAAK,KAAK,EAAE,UAAU,gBAAgB,EAAE,CAAC;AACzC,eAAO;AAAA,MACT;AACA,WAAK,KAAK,EAAE,SAAS,OAAO,OAAO,YAAY,GAAG,GAAG;AACrD,aAAO;AAAA,IACT;AACA,QAAI,YAAY,WAAW,qBAAqB,GAAG;AACjD,YAAM,MAAM,mBAAmB,YAAY,MAAM,sBAAsB,MAAM,CAAC;AAC9E,UAAI,WAAW,OAAO;AACpB,aAAK,KAAK,gBAAgB,GAAG,CAAC;AAC9B,eAAO;AAAA,MACT;AACA,WAAK,KAAK,EAAE,SAAS,OAAO,OAAO,qBAAqB,GAAG,GAAG;AAC9D,aAAO;AAAA,IACT;AACA,QAAI,gBAAgB,mBAAmB;AACrC,UAAI,WAAW,OAAO;AACpB,aAAK,KAAK,EAAE,OAAO,SAAS,EAAE,CAAC;AAC/B,eAAO;AAAA,MACT;AAAA,IACF;AACA,QAAI,gBAAgB,yBAAyB;AAC3C,UAAI,WAAW,OAAO;AACpB,aAAK,KAAK,EAAE,aAAa,eAAe,EAAE,CAAC;AAC3C,eAAO;AAAA,MACT;AAAA,IACF;AACA,QAAI,gBAAgB,0BAA0B;AAC5C,UAAI,WAAW,OAAO;AACpB,aAAK,KAAK,EAAE,OAAO,eAAe,EAAE,CAAC;AACrC,eAAO;AAAA,MACT;AAAA,IACF;AACA,QAAI,gBAAgB,mBAAmB;AACrC,UAAI,WAAW,OAAO;AACpB,aAAK,KAAK,EAAE,OAAO,SAAS,EAAE,CAAC;AAC/B,eAAO;AAAA,MACT;AAAA,IACF;AACA,QAAI,gBAAgB,mBAAmB;AACrC,UAAI,WAAW,OAAO;AACpB,aAAK,KAAK,EAAE,OAAO,SAAS,EAAE,CAAC;AAC/B,eAAO;AAAA,MACT;AAAA,IACF;AACA,QAAI,gBAAgB,2BAA2B;AAC7C,UAAI,WAAW,OAAO;AACpB,aAAK,KAAK,EAAE,SAAS,gBAAgB,EAAE,CAAC;AACxC,eAAO;AAAA,MACT;AAAA,IACF;AACA,QAAI,gBAAgB,gBAAgB;AAClC,UAAI,WAAW,OAAO;AACpB,aAAK,KAAK,EAAE,WAAW,MAAM,EAAE,CAAC;AAChC,eAAO;AAAA,MACT;AAAA,IACF;AACA,WAAO;AAAA,EACT;AACF;",
+  "sourcesContent": ["/**\n * routes/config.ts \u2014 \u914D\u7F6E\u8DEF\u7531\n *\n * \u8DEF\u7531\u5217\u8868\uFF1A\n *   GET /api/sfmc/configs/all          \u2014 SAPI ConfigManager \u542F\u52A8\u5FEB\u7167\uFF08\u4EC5\u5E73\u53F0\u57DF\uFF09\n *   GET /api/sfmc/settings             \u2014 \u5E73\u94FA settings.json\uFF08legacy\uFF09\n *   GET /api/sfmc/settings/:key        \u2014 \u542B land:* / bridge_channel_id \u7B49 fallback\n *   GET /api/sfmc/areas|permissions|\u2026  \u2014 legacy \u53EA\u8BFB JSON\uFF08\u6587\u4EF6\u540D\u5BF9 db-server \u4E3A\u9ED1\u7BB1\uFF09\n *\n * DIP\uFF1A\u6A21\u5757/legacy JSON \u4E0D\u8FDB SDK ConfigName\uFF1B\u672C\u8DEF\u7531\u7528 configDir + \u6587\u4EF6\u540D\u62FC\u63A5\u8DEF\u5F84\u3002\n * \u6A21\u5757\u79C1\u6709\u914D\u7F6E\u7684\u8BFB\u5199\u6743\u5A01\u5165\u53E3\u662F module-config-routes\uFF08configs/:configKey\uFF09\u3002\n */\n\nimport { join } from \"node:path\";\nimport { configDir, configPath, readJson, type ConfigName } from \"@sfmc-bds/sdk/node/config\";\n\ninterface Deps {\n  json: (res: import(\"http\").ServerResponse, data: Record<string, unknown>, status?: number) => void;\n  projectRoot: string;\n  /**\n   * \u6CE8\u5165\u6A21\u5757\u5217\u8868(\u4E0E GET /api/sfmc/modules \u540C\u6E90 \u2014 DRY)\u3002\n   * \u52FF\u5728\u672C\u8DEF\u7531\u518D\u8BFB catalog/lock(DIP:\u9AD8\u5C42\u88C5\u914D,\u8DEF\u7531\u53EA\u6D88\u8D39\u62BD\u8C61)\u3002\n   */\n  listModules?: () => Array<Record<string, unknown>>;\n  /**\n   * \u6CE8\u5165\u6A21\u5757 HMAC token \u8868(\u4EC5 loopback \u53EF\u8FBE;\u4F9B SAPI host-bootstrap \u6CE8\u5165\n   * set*ModuleContext,\u56E0 SAPI \u4E0D\u80FD\u76F4\u63A5\u8BFB\u4E0E DB \u540C\u76EE\u5F55\u7684 module-tokens.json)\u3002\n   */\n  getModuleTokens?: () => Record<string, string>;\n}\n\nfunction isMetaKey(k: string): boolean {\n  return k === \"$schema\" || String(k).startsWith(\"_\");\n}\n\nfunction stripMetaDeep(v: unknown): unknown {\n  if (Array.isArray(v)) return v.map(stripMetaDeep);\n  if (v && typeof v === \"object\") {\n    const out: Record<string, unknown> = {};\n    for (const [k, val] of Object.entries(v as Record<string, unknown>)) {\n      if (!isMetaKey(k)) out[k] = stripMetaDeep(val);\n    }\n    return out;\n  }\n  return v;\n}\n\nfunction stripMeta(obj: Record<string, unknown> | null): Record<string, unknown> {\n  if (!obj || typeof obj !== \"object\" || Array.isArray(obj)) return {};\n  const out: Record<string, unknown> = {};\n  for (const [k, v] of Object.entries(obj)) {\n    if (!isMetaKey(k)) out[k] = v;\n  }\n  return out;\n}\n\nfunction jsonValue(v: unknown): string {\n  return v !== null && typeof v === \"object\" ? JSON.stringify(v) : String(v ?? \"\");\n}\n\nfunction arrayOrEmpty(v: unknown): unknown[] {\n  return Array.isArray(v) ? v : [];\n}\n\nfunction createConfigRoutes({ json, projectRoot, listModules, getModuleTokens }: Deps) {\n  /** \u5E73\u53F0 ConfigName\uFF08qq_config \u7B49\uFF09 */\n  const readPlatform = (name: ConfigName): unknown => readJson(configPath(projectRoot, name));\n  /** \u9ED1\u7BB1 JSON\uFF1A\u4EFB\u610F configs/<file>\uFF0C\u4E0D\u8FDB ConfigName */\n  const readOpaque = (fileName: string): unknown => readJson(join(configDir(projectRoot), fileName));\n\n  /**\n   * SAPI ConfigManager \u5951\u7EA6\uFF1A\u53EA\u7F13\u5B58 modules / settings / permissions\u3002\n   * \u52FF\u518D\u5F80 all \u585E areas \u7B49 legacy \u57DF\uFF08\u90A3\u4E9B\u8D70\u4E13\u7528 GET \u6216\u6A21\u5757 configKey\uFF09\u3002\n   */\n  function getAllConfigs(): Record<string, unknown> {\n    const modules = typeof listModules === \"function\" ? listModules() : [];\n    const module_tokens = typeof getModuleTokens === \"function\" ? getModuleTokens() : {};\n    return {\n      modules,\n      module_tokens,\n      settings: stripMeta(readOpaque(\"settings.json\") as Record<string, unknown> | null),\n      permissions: getPermissions(),\n    };\n  }\n\n  function getSettingsFlat(): Array<{ key: string; value: string }> {\n    const obj = stripMeta(readOpaque(\"settings.json\") as Record<string, unknown> | null);\n    return Object.entries(obj).map(([key, value]) => ({ key, value: jsonValue(value) }));\n  }\n\n  function getSettingByKey(key: string): { value: unknown; source?: string } {\n    const settings = (readOpaque(\"settings.json\") as Record<string, unknown> | null) ?? {};\n    if (Object.prototype.hasOwnProperty.call(settings, key) && !isMetaKey(key)) {\n      return { value: settings[key], source: \"settings.json\" };\n    }\n    if (key === \"bridge_channel_id\") {\n      const qq = (readPlatform(\"qq_config.json\") as Record<string, unknown> | null) ?? {};\n      if (qq.bridge_channel_id) return { value: qq.bridge_channel_id, source: \"qq_config.json\" };\n    }\n    if (key.startsWith(\"land:\")) {\n      const land = (readOpaque(\"land.json\") as Record<string, unknown> | null) ?? {};\n      if (Object.prototype.hasOwnProperty.call(land, key) && !isMetaKey(key)) {\n        return { value: land[key], source: \"land.json\" };\n      }\n    }\n    return { value: null };\n  }\n\n  function getAreas(): unknown[] {\n    return (arrayOrEmpty(readOpaque(\"areas.json\")) as Array<Record<string, unknown>>)\n      .filter((r) => r && r.module && r.dimension != null)\n      .map((r) => stripMetaDeep(r));\n  }\n\n  function getPermissions(): unknown[] {\n    return (arrayOrEmpty(readPlatform(\"permissions.json\")) as Array<Record<string, unknown>>)\n      .filter((r) => r && r.player_name)\n      .map((r) => stripMetaDeep(r));\n  }\n\n  function getBannedItems(): string[] {\n    return (arrayOrEmpty(readOpaque(\"banned_items.json\")) as Array<string>).filter(\n      (i) => typeof i === \"string\" && i && !i.startsWith(\"_\")\n    );\n  }\n\n  function getClean(): { item_max: number; poll_interval: number } {\n    const c = stripMetaDeep(readOpaque(\"clean.json\") ?? {}) as Record<string, unknown>;\n    return { item_max: (c.item_max as number) ?? 192, poll_interval: (c.poll_interval as number) ?? 60 };\n  }\n\n  function getGrids(): unknown[] {\n    return (arrayOrEmpty(readOpaque(\"grids.json\")) as Array<Record<string, unknown>>)\n      .filter((r) => r && r.name)\n      .map((r) => stripMetaDeep(r));\n  }\n\n  function getPeaceFilters(): unknown[] {\n    return (arrayOrEmpty(readOpaque(\"peace_filters.json\")) as Array<Record<string, unknown>>)\n      .filter((r) => r && r.family)\n      .map((r) => stripMetaDeep(r));\n  }\n\n  function getQA(): Array<Record<string, unknown>> {\n    return (arrayOrEmpty(readOpaque(\"questions.json\")) as Array<Record<string, unknown>>)\n      .filter((r) => r && r.question)\n      .map((r, idx) => {\n        const clean = stripMetaDeep(r) as Record<string, unknown>;\n        return {\n          id: idx + 1,\n          weight: clean.weight ?? 1,\n          question: clean.question,\n          answers: clean.answers ?? [],\n          msg_right: clean.msg_right ?? \"\",\n          msg_wrong: clean.msg_wrong ?? \"\",\n          explanation: clean.explanation ?? \"\",\n          min_rank: clean.min_rank ?? null,\n          max_rank: clean.max_rank ?? null,\n          rewards: clean.rewards ?? [],\n          punishments: clean.punishments ?? [],\n        };\n      });\n  }\n\n  return async function handleConfigRoute({\n    path: requestPath,\n    method,\n    params,\n    res,\n  }: {\n    path: string;\n    method: string;\n    params: URLSearchParams;\n    res: import(\"http\").ServerResponse;\n  }): Promise<boolean> {\n    void params;\n    if (requestPath === \"/api/sfmc/configs/all\") {\n      if (method !== \"GET\") {\n        json(res, { success: false, error: \"not_found\" }, 404);\n        return true;\n      }\n      json(res, getAllConfigs());\n      return true;\n    }\n    if (requestPath === \"/api/sfmc/settings\") {\n      if (method === \"GET\") {\n        json(res, { settings: getSettingsFlat() });\n        return true;\n      }\n      json(res, { success: false, error: \"not_found\" }, 404);\n      return true;\n    }\n    if (requestPath.startsWith(\"/api/sfmc/settings/\")) {\n      const key = decodeURIComponent(requestPath.slice(\"/api/sfmc/settings/\".length));\n      if (method === \"GET\") {\n        json(res, getSettingByKey(key));\n        return true;\n      }\n      json(res, { success: false, error: \"method_not_allowed\" }, 405);\n      return true;\n    }\n    if (requestPath === \"/api/sfmc/areas\") {\n      if (method === \"GET\") {\n        json(res, { areas: getAreas() });\n        return true;\n      }\n    }\n    if (requestPath === \"/api/sfmc/permissions\") {\n      if (method === \"GET\") {\n        json(res, { permissions: getPermissions() });\n        return true;\n      }\n    }\n    if (requestPath === \"/api/sfmc/banned_items\") {\n      if (method === \"GET\") {\n        json(res, { items: getBannedItems() });\n        return true;\n      }\n    }\n    if (requestPath === \"/api/sfmc/clean\") {\n      if (method === \"GET\") {\n        json(res, { clean: getClean() });\n        return true;\n      }\n    }\n    if (requestPath === \"/api/sfmc/grids\") {\n      if (method === \"GET\") {\n        json(res, { grids: getGrids() });\n        return true;\n      }\n    }\n    if (requestPath === \"/api/sfmc/peace_filters\") {\n      if (method === \"GET\") {\n        json(res, { filters: getPeaceFilters() });\n        return true;\n      }\n    }\n    if (requestPath === \"/api/sfmc/qa\") {\n      if (method === \"GET\") {\n        json(res, { questions: getQA() });\n        return true;\n      }\n    }\n    return false;\n  };\n}\n\nexport { createConfigRoutes };\n"],
+  "mappings": "AAaA,SAAS,YAAY;AACrB,SAAS,WAAW,YAAY,gBAAiC;AAiBjE,SAAS,UAAU,GAAoB;AACrC,SAAO,MAAM,aAAa,OAAO,CAAC,EAAE,WAAW,GAAG;AACpD;AAEA,SAAS,cAAc,GAAqB;AAC1C,MAAI,MAAM,QAAQ,CAAC,EAAG,QAAO,EAAE,IAAI,aAAa;AAChD,MAAI,KAAK,OAAO,MAAM,UAAU;AAC9B,UAAM,MAA+B,CAAC;AACtC,eAAW,CAAC,GAAG,GAAG,KAAK,OAAO,QAAQ,CAA4B,GAAG;AACnE,UAAI,CAAC,UAAU,CAAC,EAAG,KAAI,CAAC,IAAI,cAAc,GAAG;AAAA,IAC/C;AACA,WAAO;AAAA,EACT;AACA,SAAO;AACT;AAEA,SAAS,UAAU,KAA8D;AAC/E,MAAI,CAAC,OAAO,OAAO,QAAQ,YAAY,MAAM,QAAQ,GAAG,EAAG,QAAO,CAAC;AACnE,QAAM,MAA+B,CAAC;AACtC,aAAW,CAAC,GAAG,CAAC,KAAK,OAAO,QAAQ,GAAG,GAAG;AACxC,QAAI,CAAC,UAAU,CAAC,EAAG,KAAI,CAAC,IAAI;AAAA,EAC9B;AACA,SAAO;AACT;AAEA,SAAS,UAAU,GAAoB;AACrC,SAAO,MAAM,QAAQ,OAAO,MAAM,WAAW,KAAK,UAAU,CAAC,IAAI,OAAO,KAAK,EAAE;AACjF;AAEA,SAAS,aAAa,GAAuB;AAC3C,SAAO,MAAM,QAAQ,CAAC,IAAI,IAAI,CAAC;AACjC;AAEA,SAAS,mBAAmB,EAAE,MAAM,aAAa,aAAa,gBAAgB,GAAS;AAErF,QAAM,eAAe,CAAC,SAA8B,SAAS,WAAW,aAAa,IAAI,CAAC;AAE1F,QAAM,aAAa,CAAC,aAA8B,SAAS,KAAK,UAAU,WAAW,GAAG,QAAQ,CAAC;AAMjG,WAAS,gBAAyC;AAChD,UAAM,UAAU,OAAO,gBAAgB,aAAa,YAAY,IAAI,CAAC;AACrE,UAAM,gBAAgB,OAAO,oBAAoB,aAAa,gBAAgB,IAAI,CAAC;AACnF,WAAO;AAAA,MACL;AAAA,MACA;AAAA,MACA,UAAU,UAAU,WAAW,eAAe,CAAmC;AAAA,MACjF,aAAa,eAAe;AAAA,IAC9B;AAAA,EACF;AAEA,WAAS,kBAAyD;AAChE,UAAM,MAAM,UAAU,WAAW,eAAe,CAAmC;AACnF,WAAO,OAAO,QAAQ,GAAG,EAAE,IAAI,CAAC,CAAC,KAAK,KAAK,OAAO,EAAE,KAAK,OAAO,UAAU,KAAK,EAAE,EAAE;AAAA,EACrF;AAEA,WAAS,gBAAgB,KAAkD;AACzE,UAAM,WAAY,WAAW,eAAe,KAAwC,CAAC;AACrF,QAAI,OAAO,UAAU,eAAe,KAAK,UAAU,GAAG,KAAK,CAAC,UAAU,GAAG,GAAG;AAC1E,aAAO,EAAE,OAAO,SAAS,GAAG,GAAG,QAAQ,gBAAgB;AAAA,IACzD;AACA,QAAI,QAAQ,qBAAqB;AAC/B,YAAM,KAAM,aAAa,gBAAgB,KAAwC,CAAC;AAClF,UAAI,GAAG,kBAAmB,QAAO,EAAE,OAAO,GAAG,mBAAmB,QAAQ,iBAAiB;AAAA,IAC3F;AACA,QAAI,IAAI,WAAW,OAAO,GAAG;AAC3B,YAAM,OAAQ,WAAW,WAAW,KAAwC,CAAC;AAC7E,UAAI,OAAO,UAAU,eAAe,KAAK,MAAM,GAAG,KAAK,CAAC,UAAU,GAAG,GAAG;AACtE,eAAO,EAAE,OAAO,KAAK,GAAG,GAAG,QAAQ,YAAY;AAAA,MACjD;AAAA,IACF;AACA,WAAO,EAAE,OAAO,KAAK;AAAA,EACvB;AAEA,WAAS,WAAsB;AAC7B,WAAQ,aAAa,WAAW,YAAY,CAAC,EAC1C,OAAO,CAAC,MAAM,KAAK,EAAE,UAAU,EAAE,aAAa,IAAI,EAClD,IAAI,CAAC,MAAM,cAAc,CAAC,CAAC;AAAA,EAChC;AAEA,WAAS,iBAA4B;AACnC,WAAQ,aAAa,aAAa,kBAAkB,CAAC,EAClD,OAAO,CAAC,MAAM,KAAK,EAAE,WAAW,EAChC,IAAI,CAAC,MAAM,cAAc,CAAC,CAAC;AAAA,EAChC;AAEA,WAAS,iBAA2B;AAClC,WAAQ,aAAa,WAAW,mBAAmB,CAAC,EAAoB;AAAA,MACtE,CAAC,MAAM,OAAO,MAAM,YAAY,KAAK,CAAC,EAAE,WAAW,GAAG;AAAA,IACxD;AAAA,EACF;AAEA,WAAS,WAAwD;AAC/D,UAAM,IAAI,cAAc,WAAW,YAAY,KAAK,CAAC,CAAC;AACtD,WAAO,EAAE,UAAW,EAAE,YAAuB,KAAK,eAAgB,EAAE,iBAA4B,GAAG;AAAA,EACrG;AAEA,WAAS,WAAsB;AAC7B,WAAQ,aAAa,WAAW,YAAY,CAAC,EAC1C,OAAO,CAAC,MAAM,KAAK,EAAE,IAAI,EACzB,IAAI,CAAC,MAAM,cAAc,CAAC,CAAC;AAAA,EAChC;AAEA,WAAS,kBAA6B;AACpC,WAAQ,aAAa,WAAW,oBAAoB,CAAC,EAClD,OAAO,CAAC,MAAM,KAAK,EAAE,MAAM,EAC3B,IAAI,CAAC,MAAM,cAAc,CAAC,CAAC;AAAA,EAChC;AAEA,WAAS,QAAwC;AAC/C,WAAQ,aAAa,WAAW,gBAAgB,CAAC,EAC9C,OAAO,CAAC,MAAM,KAAK,EAAE,QAAQ,EAC7B,IAAI,CAAC,GAAG,QAAQ;AACf,YAAM,QAAQ,cAAc,CAAC;AAC7B,aAAO;AAAA,QACL,IAAI,MAAM;AAAA,QACV,QAAQ,MAAM,UAAU;AAAA,QACxB,UAAU,MAAM;AAAA,QAChB,SAAS,MAAM,WAAW,CAAC;AAAA,QAC3B,WAAW,MAAM,aAAa;AAAA,QAC9B,WAAW,MAAM,aAAa;AAAA,QAC9B,aAAa,MAAM,eAAe;AAAA,QAClC,UAAU,MAAM,YAAY;AAAA,QAC5B,UAAU,MAAM,YAAY;AAAA,QAC5B,SAAS,MAAM,WAAW,CAAC;AAAA,QAC3B,aAAa,MAAM,eAAe,CAAC;AAAA,MACrC;AAAA,IACF,CAAC;AAAA,EACL;AAEA,SAAO,eAAe,kBAAkB;AAAA,IACtC,MAAM;AAAA,IACN;AAAA,IACA;AAAA,IACA;AAAA,EACF,GAKqB;AACnB,SAAK;AACL,QAAI,gBAAgB,yBAAyB;AAC3C,UAAI,WAAW,OAAO;AACpB,aAAK,KAAK,EAAE,SAAS,OAAO,OAAO,YAAY,GAAG,GAAG;AACrD,eAAO;AAAA,MACT;AACA,WAAK,KAAK,cAAc,CAAC;AACzB,aAAO;AAAA,IACT;AACA,QAAI,gBAAgB,sBAAsB;AACxC,UAAI,WAAW,OAAO;AACpB,aAAK,KAAK,EAAE,UAAU,gBAAgB,EAAE,CAAC;AACzC,eAAO;AAAA,MACT;AACA,WAAK,KAAK,EAAE,SAAS,OAAO,OAAO,YAAY,GAAG,GAAG;AACrD,aAAO;AAAA,IACT;AACA,QAAI,YAAY,WAAW,qBAAqB,GAAG;AACjD,YAAM,MAAM,mBAAmB,YAAY,MAAM,sBAAsB,MAAM,CAAC;AAC9E,UAAI,WAAW,OAAO;AACpB,aAAK,KAAK,gBAAgB,GAAG,CAAC;AAC9B,eAAO;AAAA,MACT;AACA,WAAK,KAAK,EAAE,SAAS,OAAO,OAAO,qBAAqB,GAAG,GAAG;AAC9D,aAAO;AAAA,IACT;AACA,QAAI,gBAAgB,mBAAmB;AACrC,UAAI,WAAW,OAAO;AACpB,aAAK,KAAK,EAAE,OAAO,SAAS,EAAE,CAAC;AAC/B,eAAO;AAAA,MACT;AAAA,IACF;AACA,QAAI,gBAAgB,yBAAyB;AAC3C,UAAI,WAAW,OAAO;AACpB,aAAK,KAAK,EAAE,aAAa,eAAe,EAAE,CAAC;AAC3C,eAAO;AAAA,MACT;AAAA,IACF;AACA,QAAI,gBAAgB,0BAA0B;AAC5C,UAAI,WAAW,OAAO;AACpB,aAAK,KAAK,EAAE,OAAO,eAAe,EAAE,CAAC;AACrC,eAAO;AAAA,MACT;AAAA,IACF;AACA,QAAI,gBAAgB,mBAAmB;AACrC,UAAI,WAAW,OAAO;AACpB,aAAK,KAAK,EAAE,OAAO,SAAS,EAAE,CAAC;AAC/B,eAAO;AAAA,MACT;AAAA,IACF;AACA,QAAI,gBAAgB,mBAAmB;AACrC,UAAI,WAAW,OAAO;AACpB,aAAK,KAAK,EAAE,OAAO,SAAS,EAAE,CAAC;AAC/B,eAAO;AAAA,MACT;AAAA,IACF;AACA,QAAI,gBAAgB,2BAA2B;AAC7C,UAAI,WAAW,OAAO;AACpB,aAAK,KAAK,EAAE,SAAS,gBAAgB,EAAE,CAAC;AACxC,eAAO;AAAA,MACT;AAAA,IACF;AACA,QAAI,gBAAgB,gBAAgB;AAClC,UAAI,WAAW,OAAO;AACpB,aAAK,KAAK,EAAE,WAAW,MAAM,EAAE,CAAC;AAChC,eAAO;AAAA,MACT;AAAA,IACF;AACA,WAAO;AAAA,EACT;AACF;",
   "names": []
 }

package/dist/routes/db-routes.d.ts

@@ -13,16 +13,22 @@
  */
 import type { IncomingMessage, ServerResponse } from "node:http";
 import { json as defaultJson, type Method } from "../lib/http.js";
-import { type ModuleAuth } from "./_shared.js";
+import type { IdempotencyStore } from "../lib/idempotency-store.js";
 import type { SchemaRegistry } from "../schema-registry.js";
 import type { TxRunner } from "../tx-runner.js";
-import type { IdempotencyStore } from "../lib/idempotency-store.js";
+import { type ModuleAuth } from "./_shared.js";
 export interface DbRoutesDeps {
     schemaRegistry: SchemaRegistry;
     txRunner: TxRunner;
     idempotent: IdempotencyStore;
     json?: typeof defaultJson;
 }
+/**
+ * 创建 `/api/sfmc/db/*` 数据库路由请求处理器。
+ *
+ * @param depsIn 依赖注入项（包含 schemaRegistry、txRunner、idempotent 等）。
+ * @returns 异步路由处理函数。
+ */
 export declare function createDbRoutes(depsIn: Partial<DbRoutesDeps>): (ctx: {
     path: string;
     method: Method | string;

package/dist/routes/db-routes.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"db-routes.d.ts","sourceRoot":"","sources":["../../src/routes/db-routes.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,KAAK,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AACjE,OAAO,EAAE,IAAI,IAAI,WAAW,EAAE,KAAK,MAAM,EAAE,MAAM,gBAAgB,CAAC;AAClE,OAAO,EAAwB,KAAK,UAAU,EAAE,MAAM,cAAc,CAAC;AACrE,OAAO,KAAK,EAEV,cAAc,EACf,MAAM,uBAAuB,CAAC;AAC/B,OAAO,KAAK,EAEV,QAAQ,EAET,MAAM,iBAAiB,CAAC;AAEzB,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,6BAA6B,CAAC;AAEpE,MAAM,WAAW,YAAY;IAC3B,cAAc,EAAE,cAAc,CAAC;IAC/B,QAAQ,EAAE,QAAQ,CAAC;IACnB,UAAU,EAAE,gBAAgB,CAAC;IAC7B,IAAI,CAAC,EAAE,OAAO,WAAW,CAAC;CAC3B;AAED,wBAAgB,cAAc,CAAC,MAAM,EAAE,OAAO,CAAC,YAAY,CAAC,SAOvC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,GAAG,MAAM,CAAC;IACxB,GAAG,EAAE,eAAe,CAAC;IACrB,GAAG,EAAE,cAAc,CAAC;IACpB,IAAI,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAClE,UAAU,CAAC,EAAE,UAAU,CAAC;CACzB,KAAG,OAAO,CAAC,OAAO,CAAC,CA6KrB"}
+{"version":3,"file":"db-routes.d.ts","sourceRoot":"","sources":["../../src/routes/db-routes.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,KAAK,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AACjE,OAAO,EAAE,IAAI,IAAI,WAAW,EAAE,KAAK,MAAM,EAAE,MAAM,gBAAgB,CAAC;AAClE,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,6BAA6B,CAAC;AAGpE,OAAO,KAAK,EAAsB,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAChF,OAAO,KAAK,EAAa,QAAQ,EAAU,MAAM,iBAAiB,CAAC;AACnE,OAAO,EAAwB,KAAK,UAAU,EAAE,MAAM,cAAc,CAAC;AAErE,MAAM,WAAW,YAAY;IAC3B,cAAc,EAAE,cAAc,CAAC;IAC/B,QAAQ,EAAE,QAAQ,CAAC;IACnB,UAAU,EAAE,gBAAgB,CAAC;IAC7B,IAAI,CAAC,EAAE,OAAO,WAAW,CAAC;CAC3B;AAED;;;;;GAKG;AACH,wBAAgB,cAAc,CAAC,MAAM,EAAE,OAAO,CAAC,YAAY,CAAC,SAOvC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,GAAG,MAAM,CAAC;IACxB,GAAG,EAAE,eAAe,CAAC;IACrB,GAAG,EAAE,cAAc,CAAC;IACpB,IAAI,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAClE,UAAU,CAAC,EAAE,UAAU,CAAC;CACzB,KAAG,OAAO,CAAC,OAAO,CAAC,CAoKrB"}

package/dist/routes/db-routes.js

@@ -1,6 +1,7 @@
 import { json as defaultJson } from "../lib/http.js";
-import { jsonV2Fail, jsonV2Ok } from "./_shared.js";
+import { log } from "../lib/log.js";
 import { PermissionDeniedError } from "../permission-gate.js";
+import { jsonV2Fail, jsonV2Ok } from "./_shared.js";
 function createDbRoutes(depsIn) {
   const deps = depsIn;
   if (!deps.schemaRegistry || !deps.txRunner || !deps.idempotent) {
@@ -25,6 +26,7 @@ function createDbRoutes(depsIn) {
         const result = deps.schemaRegistry.define(moduleId, req2);
         jsonV2Ok(res, { table: result.table, created: result.created });
       } catch (e) {
+        log.warn(`[define-table failed] ${moduleId} table=${body?.name}: ${e.message}`);
         jsonV2Fail(res, e.message, 400);
       }
       return true;
@@ -136,19 +138,10 @@ function createDbRoutes(depsIn) {
     if (m) {
       try {
         if (m[1] === "probe") {
-          const r = await deps.idempotent.probe(
-            moduleId,
-            String(body.action),
-            String(body.key)
-          );
+          const r = await deps.idempotent.probe(moduleId, String(body.action), String(body.key));
           json(res, r);
         } else {
-          const r = await deps.idempotent.commit(
-            moduleId,
-            String(body.action),
-            String(body.key),
-            body.value
-          );
+          const r = await deps.idempotent.commit(moduleId, String(body.action), String(body.key), body.value);
           jsonV2Ok(res, { committed: r.ok });
         }
       } catch (e) {