@sfmc-bds/db-server 0.2.0-beta.5 → 0.2.0-beta.7

package/dist/module-auth.js

@@ -26,13 +26,9 @@ function buildModuleAuth(opts) {
     generatedAt: (/* @__PURE__ */ new Date()).toISOString(),
     secretGenerated: !opts.envAuthToken
   });
-  log.success(
-    `[auth] \u5DF2\u4E3A ${opts.enabledModuleIds.length} \u4E2A\u6A21\u5757\u6D3E\u751F HMAC token,\u5199\u5165 ${outFile}`
-  );
+  log.success(`[auth] \u5DF2\u4E3A ${opts.enabledModuleIds.length} \u4E2A\u6A21\u5757\u6D3E\u751F HMAC token,\u5199\u5165 ${outFile}`);
   if (!opts.envAuthToken) {
-    log.warn(
-      "[auth] \u672A\u914D\u7F6E env.AUTH_TOKEN(\u51B2\u7A81 config http_auth),\u672C\u6B21\u542F\u52A8\u4F7F\u7528\u4E86\u968F\u673A secret; \u91CD\u542F\u540E token \u4F1A\u53D8,host-bootstrap \u5FC5\u987B\u6BCF\u6B21\u91CD\u65B0\u8BFB module-tokens.json"
-    );
+    log.warn("[auth] \u672A\u914D\u7F6E env.AUTH_TOKEN,\u672C\u6B21\u542F\u52A8\u4F7F\u7528\u4E86\u968F\u673A secret;");
   }
   if (process.env.SFMC_LOG_MODULE_TOKEN === "1") {
     log.info("[auth] module tokens (SFMC_LOG_MODULE_TOKEN=1):");

package/dist/module-auth.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../src/module-auth.ts"],
-  "sourcesContent": ["/**\n * module-auth.ts \u2014 \u6A21\u5757\u8EAB\u4EFD\u7684 HMAC token \u6D3E\u751F\u4E0E\u6821\u9A8C\n *\n * \u4E24\u5957\u5E76\u5B58:\n *   - `env.AUTH_TOKEN` (config db_config.json http_auth):sfmc \u7BA1\u63A7 / \u5E73\u53F0\u5185\u90E8\u7528\n *   - `moduleTokens[moduleId]`:db-server \u7ED9\u6BCF\u4E2A enabled \u6A21\u5757\u5728\u542F\u52A8\u65F6\u6D3E\u751F,\n *     \u5199\u5230\u300C\u4E0E\u6570\u636E\u5E93\u540C\u76EE\u5F55\u300D\u7684 module-tokens.json\uFF08\u8DDF db_config.dbDir \u8D70\uFF0C\u52FF\u5199\u6B7B ROOT/data\uFF09,\n *     SAPI \u7ECF loopback API \u6CE8\u5165 setDbModuleContext\u3002\n *\n * \u6D3E\u751F\u516C\u5F0F:\n *   module_token = HMAC-SHA256(auth_secret, \"sfmc-module:\" + moduleId).hex\n *\n * auth_secret \u4F18\u5148\u7EA7:\n *   1. env.AUTH_TOKEN\n *   2. \u542F\u52A8\u65F6\u968F\u673A\u751F\u6210(\u65E0 AUTH_TOKEN \u65F6),\u5199\u5230 module-tokens.json,\n *      \u53EA\u8B66\u544A\u4E00\u6B21(\u6BCF\u6B21\u91CD\u542F\u6A21\u5757 token \u90FD\u53D8,SAPI host \u5FC5\u987B\u91CD\u8BFB\u6587\u4EF6)\n *\n * \u6821\u9A8C:\n *   - HTTP `Authorization: Bearer <module_token>` \u5934\n *   - Query `?moduleId=<id>`\n *   - \u4E24\u90FD\u5339\u914D = \u8C03\u7528\u65B9\u8EAB\u4EFD\n *   - \u6821\u9A8C\u8C03\u7528\u65B9 moduleId \u5728 enabled \u5217\u8868(\u5426\u5219 403)\n */\n\nimport { readJson, writeJson, type TokenStore } from \"@sfmc-bds/sdk/node/config\";\nimport { createHmac, randomBytes } from \"node:crypto\";\nimport { dirname, join } from \"node:path\";\nimport { log } from \"./lib/log.js\";\n\nexport interface ModuleAuthMap {\n  /** moduleId \u2192 hex token */\n  tokens: Record<string, string>;\n  /** \u7528\u4E8E\u6D3E\u751F token \u7684 secret (env.AUTH_TOKEN \u6216\u672C\u6B21\u542F\u52A8\u968F\u673A\u751F\u6210) */\n  secret: string;\n}\n\nconst IDENT = /^[A-Za-z0-9_\\-]+$/;\n\nfunction safeId(id: string): string {\n  if (!IDENT.test(id)) throw new Error(`[auth] invalid module id: ${id}`);\n  return id;\n}\n\n/** token \u6587\u4EF6\u4E0E SQLite \u540C\u76EE\u5F55\uFF08\u7531 dbDir \u51B3\u5B9A\uFF0C\u907F\u514D\u5411\u5BFC\u9009\u76EE\u5F55\u524D\u5C31\u521B\u5EFA ROOT/data\uFF09 */\nexport function moduleTokensFile(dbPath: string): string {\n  return join(dirname(dbPath), \"module-tokens.json\");\n}\n\nexport function deriveToken(moduleId: string, secret: string): string {\n  return createHmac(\"sha256\", secret).update(`sfmc-module:${safeId(moduleId)}`).digest(\"hex\");\n}\n\n/**\n * \u542F\u52A8\u65F6\u8C03\u7528\u4E00\u6B21:\n *   - \u628A env.AUTH_TOKEN \u5F53 secret\n *   - \u7ED9\u6BCF\u4E2A enabled moduleId \u6D3E\u751F token\n *   - \u5199 module-tokens.json\uFF08\u4E0E DB \u540C\u76EE\u5F55\uFF09\n *   - \u63A7\u5236\u53F0\u6253\u5370\u6458\u8981(env var SFMC_LOG_MODULE_TOKEN=1 \u65F6\u6253\u5B8C\u6574)\n */\nexport function buildModuleAuth(opts: {\n  dbPath: string;\n  envAuthToken: string;\n  enabledModuleIds: string[];\n}): ModuleAuthMap {\n  const secret = opts.envAuthToken || randomBytes(32).toString(\"hex\");\n  const tokens: Record<string, string> = {};\n  for (const id of opts.enabledModuleIds) {\n    tokens[id] = deriveToken(id, secret);\n  }\n\n  const outFile = moduleTokensFile(opts.dbPath);\n  writeJson(outFile, {\n    tokens,\n    secret,\n    generatedAt: new Date().toISOString(),\n    secretGenerated: !opts.envAuthToken,\n  });\n\n  log.success(\n    `[auth] \u5DF2\u4E3A ${opts.enabledModuleIds.length} \u4E2A\u6A21\u5757\u6D3E\u751F HMAC token,\u5199\u5165 ${outFile}`\n  );\n  if (!opts.envAuthToken) {\n    log.warn(\n      \"[auth] \u672A\u914D\u7F6E env.AUTH_TOKEN(\u51B2\u7A81 config http_auth),\u672C\u6B21\u542F\u52A8\u4F7F\u7528\u4E86\u968F\u673A secret;\"\n        + \" \u91CD\u542F\u540E token \u4F1A\u53D8,host-bootstrap \u5FC5\u987B\u6BCF\u6B21\u91CD\u65B0\u8BFB module-tokens.json\"\n    );\n  }\n  if (process.env.SFMC_LOG_MODULE_TOKEN === \"1\") {\n    log.info(\"[auth] module tokens (SFMC_LOG_MODULE_TOKEN=1):\");\n    for (const [id, t] of Object.entries(tokens)) {\n      log.info(`  ${id} = ${t}`);\n    }\n  } else {\n    const lines = Object.entries(tokens)\n      .map(([id, t]) => `  ${id} = ${t.slice(0, 6)}\u2026${t.slice(-4)}`)\n      .join(\"\\n\");\n    log.info(`[auth] token \u6458\u8981:\\n${lines}`);\n  }\n\n  return { tokens, secret };\n}\n\nexport function loadModuleAuth(dbPath: string): ModuleAuthMap | null {\n  const parsed = readJson<TokenStore>(moduleTokensFile(dbPath));\n  if (!parsed || !parsed.tokens || !parsed.secret) return null;\n  return { tokens: parsed.tokens, secret: parsed.secret };\n}\n\n/** \u628A\u5F53\u524D auth map \u5199\u56DE module-tokens.json(\u70ED\u66F4\u65B0 token \u65F6\u590D\u7528) */\nexport function persistModuleAuth(dbPath: string, auth: ModuleAuthMap, envAuthToken: string): void {\n  const outFile = moduleTokensFile(dbPath);\n  writeJson(outFile, {\n    tokens: auth.tokens,\n    secret: auth.secret,\n    generatedAt: new Date().toISOString(),\n    secretGenerated: !envAuthToken,\n  } satisfies TokenStore);\n}\n\n/**\n * \u786E\u4FDD moduleId \u5728 auth.tokens \u4E2D\u6709\u6D3E\u751F\u503C(\u590D\u7528\u73B0\u6709 secret,\u52FF\u91CD\u5EFA\u968F\u673A secret)\u3002\n * @returns \u662F\u5426\u65B0\u5199\u5165\u4E86 token\n */\nexport function ensureModuleToken(auth: ModuleAuthMap, moduleId: string): boolean {\n  if (auth.tokens[moduleId]) return false;\n  auth.tokens[moduleId] = deriveToken(moduleId, auth.secret);\n  return true;\n}\n\n/** \u7981\u7528\u65F6\u64A4\u9500\u5185\u5B58\u4E2D\u7684 token(\u78C1\u76D8\u7531 persistModuleAuth \u540C\u6B65) */\nexport function revokeModuleToken(auth: ModuleAuthMap, moduleId: string): boolean {\n  if (!(moduleId in auth.tokens)) return false;\n  delete auth.tokens[moduleId];\n  return true;\n}\n\n/**\n * \u6821\u9A8C\u8BF7\u6C42\u65B9\u8EAB\u4EFD:\n *   - Bearer \u5934 / X-Module-Token \u4E8C\u9009\u4E00\n *   - ?moduleId=<id> \u5FC5\u987B\u5B58\u5728\n *   - \u6A21\u5757\u5FC5\u987B\u5728 enabledModuleIds \u96C6\u5408\u4E2D\n *   - token \u5FC5\u987B = deriveToken(moduleId, secret)\n * \u8FD4\u56DE\u6A21\u5757 ID \u6216 null\u3002\n */\nexport function verifyModuleAuth(opts: {\n  headers: NodeJS.Dict<string | string[]>;\n  params: URLSearchParams;\n  auth: ModuleAuthMap;\n  enabledModuleIds: Set<string>;\n}): string | null {\n  const moduleId = opts.params.get(\"moduleId\") || \"\";\n  if (!moduleId || !opts.enabledModuleIds.has(moduleId)) return null;\n\n  let provided = \"\";\n  const auth = opts.headers[\"authorization\"];\n  const token = opts.headers[\"x-module-token\"];\n  if (typeof auth === \"string\" && auth.startsWith(\"Bearer \")) {\n    provided = auth.slice(7);\n  } else if (typeof token === \"string\") {\n    provided = token;\n  }\n  if (!provided) return null;\n\n  const expected = opts.auth.tokens[moduleId];\n  if (!expected) return null;\n  // constant-time \u6BD4\u8F83\n  if (provided.length !== expected.length) return null;\n  let diff = 0;\n  for (let i = 0; i < provided.length; i++) {\n    diff |= provided.charCodeAt(i) ^ expected.charCodeAt(i);\n  }\n  return diff === 0 ? moduleId : null;\n}\n"],
-  "mappings": "AAwBA,SAAS,UAAU,iBAAkC;AACrD,SAAS,YAAY,mBAAmB;AACxC,SAAS,SAAS,YAAY;AAC9B,SAAS,WAAW;AASpB,MAAM,QAAQ;AAEd,SAAS,OAAO,IAAoB;AAClC,MAAI,CAAC,MAAM,KAAK,EAAE,EAAG,OAAM,IAAI,MAAM,6BAA6B,EAAE,EAAE;AACtE,SAAO;AACT;AAGO,SAAS,iBAAiB,QAAwB;AACvD,SAAO,KAAK,QAAQ,MAAM,GAAG,oBAAoB;AACnD;AAEO,SAAS,YAAY,UAAkB,QAAwB;AACpE,SAAO,WAAW,UAAU,MAAM,EAAE,OAAO,eAAe,OAAO,QAAQ,CAAC,EAAE,EAAE,OAAO,KAAK;AAC5F;AASO,SAAS,gBAAgB,MAId;AAChB,QAAM,SAAS,KAAK,gBAAgB,YAAY,EAAE,EAAE,SAAS,KAAK;AAClE,QAAM,SAAiC,CAAC;AACxC,aAAW,MAAM,KAAK,kBAAkB;AACtC,WAAO,EAAE,IAAI,YAAY,IAAI,MAAM;AAAA,EACrC;AAEA,QAAM,UAAU,iBAAiB,KAAK,MAAM;AAC5C,YAAU,SAAS;AAAA,IACjB;AAAA,IACA;AAAA,IACA,cAAa,oBAAI,KAAK,GAAE,YAAY;AAAA,IACpC,iBAAiB,CAAC,KAAK;AAAA,EACzB,CAAC;AAED,MAAI;AAAA,IACF,uBAAa,KAAK,iBAAiB,MAAM,2DAAwB,OAAO;AAAA,EAC1E;AACA,MAAI,CAAC,KAAK,cAAc;AACtB,QAAI;AAAA,MACF;AAAA,IAEF;AAAA,EACF;AACA,MAAI,QAAQ,IAAI,0BAA0B,KAAK;AAC7C,QAAI,KAAK,iDAAiD;AAC1D,eAAW,CAAC,IAAI,CAAC,KAAK,OAAO,QAAQ,MAAM,GAAG;AAC5C,UAAI,KAAK,KAAK,EAAE,MAAM,CAAC,EAAE;AAAA,IAC3B;AAAA,EACF,OAAO;AACL,UAAM,QAAQ,OAAO,QAAQ,MAAM,EAChC,IAAI,CAAC,CAAC,IAAI,CAAC,MAAM,KAAK,EAAE,MAAM,EAAE,MAAM,GAAG,CAAC,CAAC,SAAI,EAAE,MAAM,EAAE,CAAC,EAAE,EAC5D,KAAK,IAAI;AACZ,QAAI,KAAK;AAAA,EAAqB,KAAK,EAAE;AAAA,EACvC;AAEA,SAAO,EAAE,QAAQ,OAAO;AAC1B;AAEO,SAAS,eAAe,QAAsC;AACnE,QAAM,SAAS,SAAqB,iBAAiB,MAAM,CAAC;AAC5D,MAAI,CAAC,UAAU,CAAC,OAAO,UAAU,CAAC,OAAO,OAAQ,QAAO;AACxD,SAAO,EAAE,QAAQ,OAAO,QAAQ,QAAQ,OAAO,OAAO;AACxD;AAGO,SAAS,kBAAkB,QAAgB,MAAqB,cAA4B;AACjG,QAAM,UAAU,iBAAiB,MAAM;AACvC,YAAU,SAAS;AAAA,IACjB,QAAQ,KAAK;AAAA,IACb,QAAQ,KAAK;AAAA,IACb,cAAa,oBAAI,KAAK,GAAE,YAAY;AAAA,IACpC,iBAAiB,CAAC;AAAA,EACpB,CAAsB;AACxB;AAMO,SAAS,kBAAkB,MAAqB,UAA2B;AAChF,MAAI,KAAK,OAAO,QAAQ,EAAG,QAAO;AAClC,OAAK,OAAO,QAAQ,IAAI,YAAY,UAAU,KAAK,MAAM;AACzD,SAAO;AACT;AAGO,SAAS,kBAAkB,MAAqB,UAA2B;AAChF,MAAI,EAAE,YAAY,KAAK,QAAS,QAAO;AACvC,SAAO,KAAK,OAAO,QAAQ;AAC3B,SAAO;AACT;AAUO,SAAS,iBAAiB,MAKf;AAChB,QAAM,WAAW,KAAK,OAAO,IAAI,UAAU,KAAK;AAChD,MAAI,CAAC,YAAY,CAAC,KAAK,iBAAiB,IAAI,QAAQ,EAAG,QAAO;AAE9D,MAAI,WAAW;AACf,QAAM,OAAO,KAAK,QAAQ,eAAe;AACzC,QAAM,QAAQ,KAAK,QAAQ,gBAAgB;AAC3C,MAAI,OAAO,SAAS,YAAY,KAAK,WAAW,SAAS,GAAG;AAC1D,eAAW,KAAK,MAAM,CAAC;AAAA,EACzB,WAAW,OAAO,UAAU,UAAU;AACpC,eAAW;AAAA,EACb;AACA,MAAI,CAAC,SAAU,QAAO;AAEtB,QAAM,WAAW,KAAK,KAAK,OAAO,QAAQ;AAC1C,MAAI,CAAC,SAAU,QAAO;AAEtB,MAAI,SAAS,WAAW,SAAS,OAAQ,QAAO;AAChD,MAAI,OAAO;AACX,WAAS,IAAI,GAAG,IAAI,SAAS,QAAQ,KAAK;AACxC,YAAQ,SAAS,WAAW,CAAC,IAAI,SAAS,WAAW,CAAC;AAAA,EACxD;AACA,SAAO,SAAS,IAAI,WAAW;AACjC;",
+  "sourcesContent": ["/**\n * module-auth.ts \u2014 \u6A21\u5757\u8EAB\u4EFD\u7684 HMAC token \u6D3E\u751F\u4E0E\u6821\u9A8C\n *\n * \u4E24\u5957\u5E76\u5B58:\n *   - `env.AUTH_TOKEN` (config db_config.json http_auth):sfmc \u7BA1\u63A7 / \u5E73\u53F0\u5185\u90E8\u7528\n *   - `moduleTokens[moduleId]`:db-server \u7ED9\u6BCF\u4E2A enabled \u6A21\u5757\u5728\u542F\u52A8\u65F6\u6D3E\u751F,\n *     \u5199\u5230\u300C\u4E0E\u6570\u636E\u5E93\u540C\u76EE\u5F55\u300D\u7684 module-tokens.json\uFF08\u8DDF db_config.dbDir \u8D70\uFF0C\u52FF\u5199\u6B7B ROOT/data\uFF09,\n *     SAPI \u7ECF loopback API \u6CE8\u5165 setDbModuleContext\u3002\n *\n * \u6D3E\u751F\u516C\u5F0F:\n *   module_token = HMAC-SHA256(auth_secret, \"sfmc-module:\" + moduleId).hex\n *\n * auth_secret \u4F18\u5148\u7EA7:\n *   1. env.AUTH_TOKEN\n *   2. \u542F\u52A8\u65F6\u968F\u673A\u751F\u6210(\u65E0 AUTH_TOKEN \u65F6),\u5199\u5230 module-tokens.json,\n *      \u53EA\u8B66\u544A\u4E00\u6B21(\u6BCF\u6B21\u91CD\u542F\u6A21\u5757 token \u90FD\u53D8,SAPI host \u5FC5\u987B\u91CD\u8BFB\u6587\u4EF6)\n *\n * \u6821\u9A8C:\n *   - HTTP `Authorization: Bearer <module_token>` \u5934\n *   - Query `?moduleId=<id>`\n *   - \u4E24\u90FD\u5339\u914D = \u8C03\u7528\u65B9\u8EAB\u4EFD\n *   - \u6821\u9A8C\u8C03\u7528\u65B9 moduleId \u5728 enabled \u5217\u8868(\u5426\u5219 403)\n */\n\nimport { readJson, writeJson, type TokenStore } from \"@sfmc-bds/sdk/node/config\";\nimport { createHmac, randomBytes } from \"node:crypto\";\nimport { dirname, join } from \"node:path\";\nimport { log } from \"./lib/log.js\";\n\nexport interface ModuleAuthMap {\n  /** moduleId \u2192 hex token */\n  tokens: Record<string, string>;\n  /** \u7528\u4E8E\u6D3E\u751F token \u7684 secret (env.AUTH_TOKEN \u6216\u672C\u6B21\u542F\u52A8\u968F\u673A\u751F\u6210) */\n  secret: string;\n}\n\nconst IDENT = /^[A-Za-z0-9_\\-]+$/;\n\nfunction safeId(id: string): string {\n  if (!IDENT.test(id)) throw new Error(`[auth] invalid module id: ${id}`);\n  return id;\n}\n\n/** token \u6587\u4EF6\u4E0E SQLite \u540C\u76EE\u5F55\uFF08\u7531 dbDir \u51B3\u5B9A\uFF0C\u907F\u514D\u5411\u5BFC\u9009\u76EE\u5F55\u524D\u5C31\u521B\u5EFA ROOT/data\uFF09 */\nexport function moduleTokensFile(dbPath: string): string {\n  return join(dirname(dbPath), \"module-tokens.json\");\n}\n\nexport function deriveToken(moduleId: string, secret: string): string {\n  return createHmac(\"sha256\", secret)\n    .update(`sfmc-module:${safeId(moduleId)}`)\n    .digest(\"hex\");\n}\n\n/**\n * \u542F\u52A8\u65F6\u8C03\u7528\u4E00\u6B21:\n *   - \u628A env.AUTH_TOKEN \u5F53 secret\n *   - \u7ED9\u6BCF\u4E2A enabled moduleId \u6D3E\u751F token\n *   - \u5199 module-tokens.json\uFF08\u4E0E DB \u540C\u76EE\u5F55\uFF09\n *   - \u63A7\u5236\u53F0\u6253\u5370\u6458\u8981(env var SFMC_LOG_MODULE_TOKEN=1 \u65F6\u6253\u5B8C\u6574)\n */\nexport function buildModuleAuth(opts: {\n  dbPath: string;\n  envAuthToken: string;\n  enabledModuleIds: string[];\n}): ModuleAuthMap {\n  const secret = opts.envAuthToken || randomBytes(32).toString(\"hex\");\n  const tokens: Record<string, string> = {};\n  for (const id of opts.enabledModuleIds) {\n    tokens[id] = deriveToken(id, secret);\n  }\n\n  const outFile = moduleTokensFile(opts.dbPath);\n  writeJson(outFile, {\n    tokens,\n    secret,\n    generatedAt: new Date().toISOString(),\n    secretGenerated: !opts.envAuthToken,\n  });\n\n  log.success(`[auth] \u5DF2\u4E3A ${opts.enabledModuleIds.length} \u4E2A\u6A21\u5757\u6D3E\u751F HMAC token,\u5199\u5165 ${outFile}`);\n  if (!opts.envAuthToken) {\n    log.warn(\"[auth] \u672A\u914D\u7F6E env.AUTH_TOKEN,\u672C\u6B21\u542F\u52A8\u4F7F\u7528\u4E86\u968F\u673A secret;\");\n  }\n  if (process.env.SFMC_LOG_MODULE_TOKEN === \"1\") {\n    log.info(\"[auth] module tokens (SFMC_LOG_MODULE_TOKEN=1):\");\n    for (const [id, t] of Object.entries(tokens)) {\n      log.info(`  ${id} = ${t}`);\n    }\n  } else {\n    const lines = Object.entries(tokens)\n      .map(([id, t]) => `  ${id} = ${t.slice(0, 6)}\u2026${t.slice(-4)}`)\n      .join(\"\\n\");\n    log.info(`[auth] token \u6458\u8981:\\n${lines}`);\n  }\n\n  return { tokens, secret };\n}\n\nexport function loadModuleAuth(dbPath: string): ModuleAuthMap | null {\n  const parsed = readJson<TokenStore>(moduleTokensFile(dbPath));\n  if (!parsed || !parsed.tokens || !parsed.secret) return null;\n  return { tokens: parsed.tokens, secret: parsed.secret };\n}\n\n/** \u628A\u5F53\u524D auth map \u5199\u56DE module-tokens.json(\u70ED\u66F4\u65B0 token \u65F6\u590D\u7528) */\nexport function persistModuleAuth(dbPath: string, auth: ModuleAuthMap, envAuthToken: string): void {\n  const outFile = moduleTokensFile(dbPath);\n  writeJson(outFile, {\n    tokens: auth.tokens,\n    secret: auth.secret,\n    generatedAt: new Date().toISOString(),\n    secretGenerated: !envAuthToken,\n  } satisfies TokenStore);\n}\n\n/**\n * \u786E\u4FDD moduleId \u5728 auth.tokens \u4E2D\u6709\u6D3E\u751F\u503C(\u590D\u7528\u73B0\u6709 secret,\u52FF\u91CD\u5EFA\u968F\u673A secret)\u3002\n * @returns \u662F\u5426\u65B0\u5199\u5165\u4E86 token\n */\nexport function ensureModuleToken(auth: ModuleAuthMap, moduleId: string): boolean {\n  if (auth.tokens[moduleId]) return false;\n  auth.tokens[moduleId] = deriveToken(moduleId, auth.secret);\n  return true;\n}\n\n/** \u7981\u7528\u65F6\u64A4\u9500\u5185\u5B58\u4E2D\u7684 token(\u78C1\u76D8\u7531 persistModuleAuth \u540C\u6B65) */\nexport function revokeModuleToken(auth: ModuleAuthMap, moduleId: string): boolean {\n  if (!(moduleId in auth.tokens)) return false;\n  delete auth.tokens[moduleId];\n  return true;\n}\n\n/**\n * \u6821\u9A8C\u8BF7\u6C42\u65B9\u8EAB\u4EFD:\n *   - Bearer \u5934 / X-Module-Token \u4E8C\u9009\u4E00\n *   - ?moduleId=<id> \u5FC5\u987B\u5B58\u5728\n *   - \u6A21\u5757\u5FC5\u987B\u5728 enabledModuleIds \u96C6\u5408\u4E2D\n *   - token \u5FC5\u987B = deriveToken(moduleId, secret)\n * \u8FD4\u56DE\u6A21\u5757 ID \u6216 null\u3002\n */\nexport function verifyModuleAuth(opts: {\n  headers: NodeJS.Dict<string | string[]>;\n  params: URLSearchParams;\n  auth: ModuleAuthMap;\n  enabledModuleIds: Set<string>;\n}): string | null {\n  const moduleId = opts.params.get(\"moduleId\") || \"\";\n  if (!moduleId || !opts.enabledModuleIds.has(moduleId)) return null;\n\n  let provided = \"\";\n  const auth = opts.headers[\"authorization\"];\n  const token = opts.headers[\"x-module-token\"];\n  if (typeof auth === \"string\" && auth.startsWith(\"Bearer \")) {\n    provided = auth.slice(7);\n  } else if (typeof token === \"string\") {\n    provided = token;\n  }\n  if (!provided) return null;\n\n  const expected = opts.auth.tokens[moduleId];\n  if (!expected) return null;\n  // constant-time \u6BD4\u8F83\n  if (provided.length !== expected.length) return null;\n  let diff = 0;\n  for (let i = 0; i < provided.length; i++) {\n    diff |= provided.charCodeAt(i) ^ expected.charCodeAt(i);\n  }\n  return diff === 0 ? moduleId : null;\n}\n"],
+  "mappings": "AAwBA,SAAS,UAAU,iBAAkC;AACrD,SAAS,YAAY,mBAAmB;AACxC,SAAS,SAAS,YAAY;AAC9B,SAAS,WAAW;AASpB,MAAM,QAAQ;AAEd,SAAS,OAAO,IAAoB;AAClC,MAAI,CAAC,MAAM,KAAK,EAAE,EAAG,OAAM,IAAI,MAAM,6BAA6B,EAAE,EAAE;AACtE,SAAO;AACT;AAGO,SAAS,iBAAiB,QAAwB;AACvD,SAAO,KAAK,QAAQ,MAAM,GAAG,oBAAoB;AACnD;AAEO,SAAS,YAAY,UAAkB,QAAwB;AACpE,SAAO,WAAW,UAAU,MAAM,EAC/B,OAAO,eAAe,OAAO,QAAQ,CAAC,EAAE,EACxC,OAAO,KAAK;AACjB;AASO,SAAS,gBAAgB,MAId;AAChB,QAAM,SAAS,KAAK,gBAAgB,YAAY,EAAE,EAAE,SAAS,KAAK;AAClE,QAAM,SAAiC,CAAC;AACxC,aAAW,MAAM,KAAK,kBAAkB;AACtC,WAAO,EAAE,IAAI,YAAY,IAAI,MAAM;AAAA,EACrC;AAEA,QAAM,UAAU,iBAAiB,KAAK,MAAM;AAC5C,YAAU,SAAS;AAAA,IACjB;AAAA,IACA;AAAA,IACA,cAAa,oBAAI,KAAK,GAAE,YAAY;AAAA,IACpC,iBAAiB,CAAC,KAAK;AAAA,EACzB,CAAC;AAED,MAAI,QAAQ,uBAAa,KAAK,iBAAiB,MAAM,2DAAwB,OAAO,EAAE;AACtF,MAAI,CAAC,KAAK,cAAc;AACtB,QAAI,KAAK,yGAA6C;AAAA,EACxD;AACA,MAAI,QAAQ,IAAI,0BAA0B,KAAK;AAC7C,QAAI,KAAK,iDAAiD;AAC1D,eAAW,CAAC,IAAI,CAAC,KAAK,OAAO,QAAQ,MAAM,GAAG;AAC5C,UAAI,KAAK,KAAK,EAAE,MAAM,CAAC,EAAE;AAAA,IAC3B;AAAA,EACF,OAAO;AACL,UAAM,QAAQ,OAAO,QAAQ,MAAM,EAChC,IAAI,CAAC,CAAC,IAAI,CAAC,MAAM,KAAK,EAAE,MAAM,EAAE,MAAM,GAAG,CAAC,CAAC,SAAI,EAAE,MAAM,EAAE,CAAC,EAAE,EAC5D,KAAK,IAAI;AACZ,QAAI,KAAK;AAAA,EAAqB,KAAK,EAAE;AAAA,EACvC;AAEA,SAAO,EAAE,QAAQ,OAAO;AAC1B;AAEO,SAAS,eAAe,QAAsC;AACnE,QAAM,SAAS,SAAqB,iBAAiB,MAAM,CAAC;AAC5D,MAAI,CAAC,UAAU,CAAC,OAAO,UAAU,CAAC,OAAO,OAAQ,QAAO;AACxD,SAAO,EAAE,QAAQ,OAAO,QAAQ,QAAQ,OAAO,OAAO;AACxD;AAGO,SAAS,kBAAkB,QAAgB,MAAqB,cAA4B;AACjG,QAAM,UAAU,iBAAiB,MAAM;AACvC,YAAU,SAAS;AAAA,IACjB,QAAQ,KAAK;AAAA,IACb,QAAQ,KAAK;AAAA,IACb,cAAa,oBAAI,KAAK,GAAE,YAAY;AAAA,IACpC,iBAAiB,CAAC;AAAA,EACpB,CAAsB;AACxB;AAMO,SAAS,kBAAkB,MAAqB,UAA2B;AAChF,MAAI,KAAK,OAAO,QAAQ,EAAG,QAAO;AAClC,OAAK,OAAO,QAAQ,IAAI,YAAY,UAAU,KAAK,MAAM;AACzD,SAAO;AACT;AAGO,SAAS,kBAAkB,MAAqB,UAA2B;AAChF,MAAI,EAAE,YAAY,KAAK,QAAS,QAAO;AACvC,SAAO,KAAK,OAAO,QAAQ;AAC3B,SAAO;AACT;AAUO,SAAS,iBAAiB,MAKf;AAChB,QAAM,WAAW,KAAK,OAAO,IAAI,UAAU,KAAK;AAChD,MAAI,CAAC,YAAY,CAAC,KAAK,iBAAiB,IAAI,QAAQ,EAAG,QAAO;AAE9D,MAAI,WAAW;AACf,QAAM,OAAO,KAAK,QAAQ,eAAe;AACzC,QAAM,QAAQ,KAAK,QAAQ,gBAAgB;AAC3C,MAAI,OAAO,SAAS,YAAY,KAAK,WAAW,SAAS,GAAG;AAC1D,eAAW,KAAK,MAAM,CAAC;AAAA,EACzB,WAAW,OAAO,UAAU,UAAU;AACpC,eAAW;AAAA,EACb;AACA,MAAI,CAAC,SAAU,QAAO;AAEtB,QAAM,WAAW,KAAK,KAAK,OAAO,QAAQ;AAC1C,MAAI,CAAC,SAAU,QAAO;AAEtB,MAAI,SAAS,WAAW,SAAS,OAAQ,QAAO;AAChD,MAAI,OAAO;AACX,WAAS,IAAI,GAAG,IAAI,SAAS,QAAQ,KAAK;AACxC,YAAQ,SAAS,WAAW,CAAC,IAAI,SAAS,WAAW,CAAC;AAAA,EACxD;AACA,SAAO,SAAS,IAAI,WAAW;AACjC;",
   "names": []
 }

package/dist/permission-gate.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"permission-gate.d.ts","sourceRoot":"","sources":["../src/permission-gate.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,MAAM,MAAM,aAAa,GAAG,MAAM,CAAC;AACnC,MAAM,MAAM,eAAe,GAAG,KAAK,GAAG,QAAQ,GAAG,IAAI,GAAG,OAAO,CAAC;AAEhE,MAAM,WAAW,sBAAsB;IACrC,gBAAgB;IAChB,WAAW,EAAE,aAAa,EAAE,CAAC;IAC7B,sBAAsB;IACtB,eAAe,EAAE,MAAM,EAAE,CAAC;CAC3B;AAoBD;;;GAGG;AACH,wBAAgB,2BAA2B,CACzC,QAAQ,EAAE,MAAM,EAChB,WAAW,EAAE,SAAS,MAAM,EAAE,GAC7B,IAAI,CAQN;AAED;;;;GAIG;AACH,wBAAgB,mBAAmB,CACjC,iBAAiB,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,EAChD,QAAQ,EAAE,MAAM,GACf,OAAO,CAUT;AAED,wBAAgB,sBAAsB,CACpC,QAAQ,EAAE,MAAM,EAChB,iBAAiB,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,EAChD,QAAQ,EAAE,MAAM,GACf,IAAI,CAIN;AAED,qBAAa,qBAAsB,SAAQ,KAAK;IAG3B,QAAQ,EAAE,MAAM;IAAS,UAAU,EAAE,MAAM;IAF9D,IAAI,SAAuB;IAC3B,MAAM,SAAO;IACb,YAAmB,QAAQ,EAAE,MAAM,EAAS,UAAU,EAAE,MAAM,EAE7D;CACF;AAED;;GAEG;AACH,eAAO,MAAM,IAAI;aACf,MAAM,UAAU,MAAM;aACtB,OAAO,UAAU,MAAM;aACvB,UAAU,QAAQ,MAAM;aACxB,WAAW,QAAQ,MAAM;aACzB,OAAO,SAAS,MAAM;CACd,CAAC;AAEX,eAAO,MAAM,wBAAwB,aAAkB,CAAC"}
+{"version":3,"file":"permission-gate.d.ts","sourceRoot":"","sources":["../src/permission-gate.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,MAAM,MAAM,aAAa,GAAG,MAAM,CAAC;AACnC,MAAM,MAAM,eAAe,GAAG,KAAK,GAAG,QAAQ,GAAG,IAAI,GAAG,OAAO,CAAC;AAEhE,MAAM,WAAW,sBAAsB;IACrC,gBAAgB;IAChB,WAAW,EAAE,aAAa,EAAE,CAAC;IAC7B,sBAAsB;IACtB,eAAe,EAAE,MAAM,EAAE,CAAC;CAC3B;AAoBD;;;GAGG;AACH,wBAAgB,2BAA2B,CACzC,QAAQ,EAAE,MAAM,EAChB,WAAW,EAAE,SAAS,MAAM,EAAE,GAC7B,IAAI,CAcN;AAED;;;;GAIG;AACH,wBAAgB,mBAAmB,CACjC,iBAAiB,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,EAChD,QAAQ,EAAE,MAAM,GACf,OAAO,CAUT;AAED,wBAAgB,sBAAsB,CACpC,QAAQ,EAAE,MAAM,EAChB,iBAAiB,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,EAChD,QAAQ,EAAE,MAAM,GACf,IAAI,CAIN;AAED,qBAAa,qBAAsB,SAAQ,KAAK;IAG3B,QAAQ,EAAE,MAAM;IAAS,UAAU,EAAE,MAAM;IAF9D,IAAI,SAAuB;IAC3B,MAAM,SAAO;IACb,YAAmB,QAAQ,EAAE,MAAM,EAAS,UAAU,EAAE,MAAM,EAE7D;CACF;AAED;;GAEG;AACH,eAAO,MAAM,IAAI;aACf,MAAM,UAAU,MAAM;aACtB,OAAO,UAAU,MAAM;aACvB,UAAU,QAAQ,MAAM;aACxB,WAAW,QAAQ,MAAM;aACzB,OAAO,SAAS,MAAM;CACd,CAAC;AAEX,eAAO,MAAM,wBAAwB,aAAkB,CAAC"}

package/dist/permission-gate.js

@@ -7,13 +7,19 @@ const PERMISSION_KEYS = /* @__PURE__ */ new Set([
 ]);
 function validPermissionKey(k) {
   if (/^service:[A-Za-z0-9_.]+$/.test(k)) return true;
-  return /^[a-z]+:[a-z]+:[A-Za-z0-9_.]+$/.test(k);
+  return /^[a-z]+:[a-z]+:[A-Za-z0-9_.*]+$/.test(k);
 }
 function validateManifestPermissions(moduleId, permissions) {
   const seen = /* @__PURE__ */ new Set();
   for (const k of permissions) {
     if (!k || typeof k !== "string") throw new Error(`[perm] ${moduleId}: permission \u4E0D\u662F\u5B57\u7B26\u4E32 "${k}"`);
-    if (!validPermissionKey(k)) throw new Error(`[perm] ${moduleId}: permission \u683C\u5F0F\u4E0D\u5408\u6CD5 "${k}"`);
+    if (!validPermissionKey(k)) {
+      throw new Error(
+        `[perm] ${moduleId}: permission \u683C\u5F0F\u4E0D\u5408\u6CD5 "${k}"\u3002
+  manifest.permissions \u4EC5\u7528\u4E8E\u58F0\u660E\u5E73\u53F0\u5E95\u5C42\u8D44\u6E90\u6743\u9650\uFF08db:read:*, db:write:*, config:read:*, config:write:*, service:*\uFF09\u3002
+  \u73A9\u5BB6\u547D\u4EE4\u4E0E\u6E38\u620F\u5185\u6743\u9650\u8BF7\u5728\u4EE3\u7801\u4E2D\u4F7F\u7528 Command.register / Permission.register \u767B\u8BB0\uFF0C\u4E0D\u8981\u5199\u5165 manifest.json\u3002`
+      );
+    }
     if (seen.has(k)) throw new Error(`[perm] ${moduleId}: permission \u91CD\u590D "${k}"`);
     seen.add(k);
   }

package/dist/permission-gate.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../src/permission-gate.ts"],
-  "sourcesContent": ["/**\n * permission-gate.ts \u2014 \u6A21\u5757\u6743\u9650\u6821\u9A8C\n *\n * \u542F\u52A8\u671F:manifest.permissions \u5168\u5728\u767D\u540D\u5355(PERMISSION_KEYS),\u5426\u5219\u629B\u9519\u542F\u52A8\u5931\u8D25\u3002\n *          (\u767D\u540D\u5355 = db:read:*, db:write:*, config:read:*, config:write:*,\n *           service:* + \u901A\u914D ** / <table>)\n *\n * \u8FD0\u884C\u65F6:\u53D1\u8D77 db / config / service \u8C03\u7528\u65F6,gatesdb.<op>.requirePermission =\n *   \"db:read:<table>\" / \"db:write:<table>\" / \"config:read:<key>\" /\n *   \"config:write:<key>\" / \"service:<name>\"\n *\n * \u8BBE\u8BA1:gate \u4E0D\u66FF\u8DEF\u7531\u62E6\u622A,\u662F\u4E1A\u52A1\u903B\u8F91\u81EA\u5DF1\u68C0\u67E5(\u907F\u514D\u6BCF\u6761\u8DEF\u7531\u90FD\u9A8C)\u3002\n *      \u8DEF\u7531\u5C42 fail-closed:\u4E0D\u901A\u8FC7 manifest.permissions \u8868\u7684\u8C03\u7528 = \u76F4\u63A5 403\u3002\n */\n\nexport type PermissionKey = string;\nexport type PermissionLevel = \"Any\" | \"Member\" | \"OP\" | \"Admin\";\n\nexport interface ManifestPermissionRule {\n  /** \u6A21\u5757\u58F0\u660E\u7684\u6743\u9650\u5168\u96C6 */\n  permissions: PermissionKey[];\n  /** \u8DE8\u6A21\u5757\u8C03\u7528\u5BF9\u5E94\u662F\u5426\u9700\u8981\u663E\u5F0F\u58F0\u660E */\n  serviceRequires: string[];\n}\n\nconst PERMISSION_KEYS = new Set<string>([\n  // db:* \u8D70\u6A21\u5F0F\u5339\u914D db:read:* / db:write:*\n  // \u914D\u7F6E\u6743\u9650\n  \"config:read:*\",\n  \"config:write:*\",\n  // service \u5728\u8C03\u7528\u65F6\u6309 service \u540D\u5B57\u5339\u914D service:* \u901A\u914D\n]);\n\nfunction validPermissionKey(k: string): boolean {\n  // \u4E09\u7C7B\u5408\u6CD5\u683C\u5F0F:\n  //   db:<op>:<table>      (\u4F8B db:read:lands / db:write:land_members)\n  //   config:<op>:<key>    (\u4F8B config:read:land / config:write:afk)\n  //   service:<name>       (\u4F8B service:economy.debit / service:land.byId \u2014 \u540D\u5B57\u53EF\u542B .)\n  // \u4E0D\u5141\u8BB8 raw \"*\"(\u8981\u6C42\u660E\u786E\u5BF9\u8C61) \u2014 \u8C03\u8BD5\u65F6\u4E00\u5F8B Resource-level\n  if (/^service:[A-Za-z0-9_.]+$/.test(k)) return true;\n  return /^[a-z]+:[a-z]+:[A-Za-z0-9_.]+$/.test(k);\n}\n\n/**\n * \u542F\u52A8\u671F\u4E00\u6B21\u6027\u6821\u9A8C:manifest.permissions \u662F\u5426\u90FD\u5408\u89C4\u3002\n * \u5931\u8D25 = \u629B\u9519(\u542F\u52A8\u5931\u8D25)\u3002\n */\nexport function validateManifestPermissions(\n  moduleId: string,\n  permissions: readonly string[]\n): void {\n  const seen = new Set<string>();\n  for (const k of permissions) {\n    if (!k || typeof k !== \"string\") throw new Error(`[perm] ${moduleId}: permission \u4E0D\u662F\u5B57\u7B26\u4E32 \"${k}\"`);\n    if (!validPermissionKey(k)) throw new Error(`[perm] ${moduleId}: permission \u683C\u5F0F\u4E0D\u5408\u6CD5 \"${k}\"`);\n    if (seen.has(k)) throw new Error(`[perm] ${moduleId}: permission \u91CD\u590D \"${k}\"`);\n    seen.add(k);\n  }\n}\n\n/**\n * \u8FD0\u884C\u65F6:\u6A21\u5757 id \u662F\u5426\u62E5\u6709\u6240\u9700 permission\u3002\n * \u5F53\u524D\u5B9E\u73B0:\u5FC5\u987B\u7CBE\u786E\u7B49\u4E8E\u624D\u653E\u884C,\u4E0D\u89E3\u91CA\u901A\u914D\u3002\n * (PoC \u7B80\u5316;\u751F\u4EA7\u53EF\u52A0 db:read:* \u2192 \u901A\u914D)\n */\nexport function moduleHasPermission(\n  modulePermissions: readonly string[] | undefined,\n  required: string\n): boolean {\n  if (!modulePermissions) return false;\n  if (modulePermissions.includes(required)) return true;\n  // db:read:* / db:write:* / config:read:* / config:write:* \u901A\u914D\n  const parts = required.split(\":\");\n  if (parts.length === 3) {\n    const wildcard = `${parts[0]}:${parts[1]}:*`;\n    if (modulePermissions.includes(wildcard)) return true;\n  }\n  return false;\n}\n\nexport function assertModulePermission(\n  moduleId: string,\n  modulePermissions: readonly string[] | undefined,\n  required: string\n): void {\n  if (!moduleHasPermission(modulePermissions, required)) {\n    throw new PermissionDeniedError(moduleId, required);\n  }\n}\n\nexport class PermissionDeniedError extends Error {\n  code = \"permission_denied\";\n  status = 403;\n  constructor(public moduleId: string, public permission: string) {\n    super(`[perm] \u6A21\u5757 ${moduleId} \u7F3A\u5C11\u6743\u9650 \"${permission}\"`);\n  }\n}\n\n/**\n * \u6240\u6709 platform \u6D3E\u53D1\u7684 required permission key \u8BA1\u7B97\u52A9\u624B\u3002\n */\nexport const Perm = {\n  dbRead: (table: string) => `db:read:${table}`,\n  dbWrite: (table: string) => `db:write:${table}`,\n  configRead: (key: string) => `config:read:${key}`,\n  configWrite: (key: string) => `config:write:${key}`,\n  service: (name: string) => `service:${name}`,\n} as const;\n\nexport const PlatformTablePermissions = PERMISSION_KEYS;\n"],
-  "mappings": "AAyBA,MAAM,kBAAkB,oBAAI,IAAY;AAAA;AAAA;AAAA,EAGtC;AAAA,EACA;AAAA;AAEF,CAAC;AAED,SAAS,mBAAmB,GAAoB;AAM9C,MAAI,2BAA2B,KAAK,CAAC,EAAG,QAAO;AAC/C,SAAO,iCAAiC,KAAK,CAAC;AAChD;AAMO,SAAS,4BACd,UACA,aACM;AACN,QAAM,OAAO,oBAAI,IAAY;AAC7B,aAAW,KAAK,aAAa;AAC3B,QAAI,CAAC,KAAK,OAAO,MAAM,SAAU,OAAM,IAAI,MAAM,UAAU,QAAQ,gDAAuB,CAAC,GAAG;AAC9F,QAAI,CAAC,mBAAmB,CAAC,EAAG,OAAM,IAAI,MAAM,UAAU,QAAQ,gDAAuB,CAAC,GAAG;AACzF,QAAI,KAAK,IAAI,CAAC,EAAG,OAAM,IAAI,MAAM,UAAU,QAAQ,8BAAoB,CAAC,GAAG;AAC3E,SAAK,IAAI,CAAC;AAAA,EACZ;AACF;AAOO,SAAS,oBACd,mBACA,UACS;AACT,MAAI,CAAC,kBAAmB,QAAO;AAC/B,MAAI,kBAAkB,SAAS,QAAQ,EAAG,QAAO;AAEjD,QAAM,QAAQ,SAAS,MAAM,GAAG;AAChC,MAAI,MAAM,WAAW,GAAG;AACtB,UAAM,WAAW,GAAG,MAAM,CAAC,CAAC,IAAI,MAAM,CAAC,CAAC;AACxC,QAAI,kBAAkB,SAAS,QAAQ,EAAG,QAAO;AAAA,EACnD;AACA,SAAO;AACT;AAEO,SAAS,uBACd,UACA,mBACA,UACM;AACN,MAAI,CAAC,oBAAoB,mBAAmB,QAAQ,GAAG;AACrD,UAAM,IAAI,sBAAsB,UAAU,QAAQ;AAAA,EACpD;AACF;AAEO,MAAM,8BAA8B,MAAM;AAAA,EAG/C,YAAmB,UAAyB,YAAoB;AAC9D,UAAM,uBAAa,QAAQ,8BAAU,UAAU,GAAG;AADjC;AAAyB;AAAA,EAE5C;AAAA,EAFmB;AAAA,EAAyB;AAAA,EAF5C,OAAO;AAAA,EACP,SAAS;AAIX;AAKO,MAAM,OAAO;AAAA,EAClB,QAAQ,CAAC,UAAkB,WAAW,KAAK;AAAA,EAC3C,SAAS,CAAC,UAAkB,YAAY,KAAK;AAAA,EAC7C,YAAY,CAAC,QAAgB,eAAe,GAAG;AAAA,EAC/C,aAAa,CAAC,QAAgB,gBAAgB,GAAG;AAAA,EACjD,SAAS,CAAC,SAAiB,WAAW,IAAI;AAC5C;AAEO,MAAM,2BAA2B;",
+  "sourcesContent": ["/**\n * permission-gate.ts \u2014 \u6A21\u5757\u6743\u9650\u6821\u9A8C\n *\n * \u542F\u52A8\u671F:manifest.permissions \u5168\u5728\u767D\u540D\u5355(PERMISSION_KEYS),\u5426\u5219\u629B\u9519\u542F\u52A8\u5931\u8D25\u3002\n *          (\u767D\u540D\u5355 = db:read:*, db:write:*, config:read:*, config:write:*,\n *           service:* + \u901A\u914D ** / <table>)\n *\n * \u8FD0\u884C\u65F6:\u53D1\u8D77 db / config / service \u8C03\u7528\u65F6,gatesdb.<op>.requirePermission =\n *   \"db:read:<table>\" / \"db:write:<table>\" / \"config:read:<key>\" /\n *   \"config:write:<key>\" / \"service:<name>\"\n *\n * \u8BBE\u8BA1:gate \u4E0D\u66FF\u8DEF\u7531\u62E6\u622A,\u662F\u4E1A\u52A1\u903B\u8F91\u81EA\u5DF1\u68C0\u67E5(\u907F\u514D\u6BCF\u6761\u8DEF\u7531\u90FD\u9A8C)\u3002\n *      \u8DEF\u7531\u5C42 fail-closed:\u4E0D\u901A\u8FC7 manifest.permissions \u8868\u7684\u8C03\u7528 = \u76F4\u63A5 403\u3002\n */\n\nexport type PermissionKey = string;\nexport type PermissionLevel = \"Any\" | \"Member\" | \"OP\" | \"Admin\";\n\nexport interface ManifestPermissionRule {\n  /** \u6A21\u5757\u58F0\u660E\u7684\u6743\u9650\u5168\u96C6 */\n  permissions: PermissionKey[];\n  /** \u8DE8\u6A21\u5757\u8C03\u7528\u5BF9\u5E94\u662F\u5426\u9700\u8981\u663E\u5F0F\u58F0\u660E */\n  serviceRequires: string[];\n}\n\nconst PERMISSION_KEYS = new Set<string>([\n  // db:* \u8D70\u6A21\u5F0F\u5339\u914D db:read:* / db:write:*\n  // \u914D\u7F6E\u6743\u9650\n  \"config:read:*\",\n  \"config:write:*\",\n  // service \u5728\u8C03\u7528\u65F6\u6309 service \u540D\u5B57\u5339\u914D service:* \u901A\u914D\n]);\n\nfunction validPermissionKey(k: string): boolean {\n  // \u4E09\u7C7B\u5408\u6CD5\u683C\u5F0F:\n  //   db:<op>:<table>      (\u4F8B db:read:lands / db:write:land_members)\n  //   config:<op>:<key>    (\u4F8B config:read:land / config:write:afk)\n  //   service:<name>       (\u4F8B service:economy.debit / service:land.byId \u2014 \u540D\u5B57\u53EF\u542B .)\n  // \u4E0D\u5141\u8BB8 raw \"*\"(\u8981\u6C42\u660E\u786E\u5BF9\u8C61) \u2014 \u8C03\u8BD5\u65F6\u4E00\u5F8B Resource-level\n  if (/^service:[A-Za-z0-9_.]+$/.test(k)) return true;\n  return /^[a-z]+:[a-z]+:[A-Za-z0-9_.*]+$/.test(k);\n}\n\n/**\n * \u542F\u52A8\u671F\u4E00\u6B21\u6027\u6821\u9A8C:manifest.permissions \u662F\u5426\u90FD\u5408\u89C4\u3002\n * \u5931\u8D25 = \u629B\u9519(\u542F\u52A8\u5931\u8D25)\u3002\n */\nexport function validateManifestPermissions(\n  moduleId: string,\n  permissions: readonly string[]\n): void {\n  const seen = new Set<string>();\n  for (const k of permissions) {\n    if (!k || typeof k !== \"string\") throw new Error(`[perm] ${moduleId}: permission \u4E0D\u662F\u5B57\u7B26\u4E32 \"${k}\"`);\n    if (!validPermissionKey(k)) {\n      throw new Error(\n        `[perm] ${moduleId}: permission \u683C\u5F0F\u4E0D\u5408\u6CD5 \"${k}\"\u3002\\n` +\n        `  manifest.permissions \u4EC5\u7528\u4E8E\u58F0\u660E\u5E73\u53F0\u5E95\u5C42\u8D44\u6E90\u6743\u9650\uFF08db:read:*, db:write:*, config:read:*, config:write:*, service:*\uFF09\u3002\\n` +\n        `  \u73A9\u5BB6\u547D\u4EE4\u4E0E\u6E38\u620F\u5185\u6743\u9650\u8BF7\u5728\u4EE3\u7801\u4E2D\u4F7F\u7528 Command.register / Permission.register \u767B\u8BB0\uFF0C\u4E0D\u8981\u5199\u5165 manifest.json\u3002`\n      );\n    }\n    if (seen.has(k)) throw new Error(`[perm] ${moduleId}: permission \u91CD\u590D \"${k}\"`);\n    seen.add(k);\n  }\n}\n\n/**\n * \u8FD0\u884C\u65F6:\u6A21\u5757 id \u662F\u5426\u62E5\u6709\u6240\u9700 permission\u3002\n * \u5F53\u524D\u5B9E\u73B0:\u5FC5\u987B\u7CBE\u786E\u7B49\u4E8E\u624D\u653E\u884C,\u4E0D\u89E3\u91CA\u901A\u914D\u3002\n * (PoC \u7B80\u5316;\u751F\u4EA7\u53EF\u52A0 db:read:* \u2192 \u901A\u914D)\n */\nexport function moduleHasPermission(\n  modulePermissions: readonly string[] | undefined,\n  required: string\n): boolean {\n  if (!modulePermissions) return false;\n  if (modulePermissions.includes(required)) return true;\n  // db:read:* / db:write:* / config:read:* / config:write:* \u901A\u914D\n  const parts = required.split(\":\");\n  if (parts.length === 3) {\n    const wildcard = `${parts[0]}:${parts[1]}:*`;\n    if (modulePermissions.includes(wildcard)) return true;\n  }\n  return false;\n}\n\nexport function assertModulePermission(\n  moduleId: string,\n  modulePermissions: readonly string[] | undefined,\n  required: string\n): void {\n  if (!moduleHasPermission(modulePermissions, required)) {\n    throw new PermissionDeniedError(moduleId, required);\n  }\n}\n\nexport class PermissionDeniedError extends Error {\n  code = \"permission_denied\";\n  status = 403;\n  constructor(public moduleId: string, public permission: string) {\n    super(`[perm] \u6A21\u5757 ${moduleId} \u7F3A\u5C11\u6743\u9650 \"${permission}\"`);\n  }\n}\n\n/**\n * \u6240\u6709 platform \u6D3E\u53D1\u7684 required permission key \u8BA1\u7B97\u52A9\u624B\u3002\n */\nexport const Perm = {\n  dbRead: (table: string) => `db:read:${table}`,\n  dbWrite: (table: string) => `db:write:${table}`,\n  configRead: (key: string) => `config:read:${key}`,\n  configWrite: (key: string) => `config:write:${key}`,\n  service: (name: string) => `service:${name}`,\n} as const;\n\nexport const PlatformTablePermissions = PERMISSION_KEYS;\n"],
+  "mappings": "AAyBA,MAAM,kBAAkB,oBAAI,IAAY;AAAA;AAAA;AAAA,EAGtC;AAAA,EACA;AAAA;AAEF,CAAC;AAED,SAAS,mBAAmB,GAAoB;AAM9C,MAAI,2BAA2B,KAAK,CAAC,EAAG,QAAO;AAC/C,SAAO,kCAAkC,KAAK,CAAC;AACjD;AAMO,SAAS,4BACd,UACA,aACM;AACN,QAAM,OAAO,oBAAI,IAAY;AAC7B,aAAW,KAAK,aAAa;AAC3B,QAAI,CAAC,KAAK,OAAO,MAAM,SAAU,OAAM,IAAI,MAAM,UAAU,QAAQ,gDAAuB,CAAC,GAAG;AAC9F,QAAI,CAAC,mBAAmB,CAAC,GAAG;AAC1B,YAAM,IAAI;AAAA,QACR,UAAU,QAAQ,gDAAuB,CAAC;AAAA;AAAA;AAAA,MAG5C;AAAA,IACF;AACA,QAAI,KAAK,IAAI,CAAC,EAAG,OAAM,IAAI,MAAM,UAAU,QAAQ,8BAAoB,CAAC,GAAG;AAC3E,SAAK,IAAI,CAAC;AAAA,EACZ;AACF;AAOO,SAAS,oBACd,mBACA,UACS;AACT,MAAI,CAAC,kBAAmB,QAAO;AAC/B,MAAI,kBAAkB,SAAS,QAAQ,EAAG,QAAO;AAEjD,QAAM,QAAQ,SAAS,MAAM,GAAG;AAChC,MAAI,MAAM,WAAW,GAAG;AACtB,UAAM,WAAW,GAAG,MAAM,CAAC,CAAC,IAAI,MAAM,CAAC,CAAC;AACxC,QAAI,kBAAkB,SAAS,QAAQ,EAAG,QAAO;AAAA,EACnD;AACA,SAAO;AACT;AAEO,SAAS,uBACd,UACA,mBACA,UACM;AACN,MAAI,CAAC,oBAAoB,mBAAmB,QAAQ,GAAG;AACrD,UAAM,IAAI,sBAAsB,UAAU,QAAQ;AAAA,EACpD;AACF;AAEO,MAAM,8BAA8B,MAAM;AAAA,EAG/C,YAAmB,UAAyB,YAAoB;AAC9D,UAAM,uBAAa,QAAQ,8BAAU,UAAU,GAAG;AADjC;AAAyB;AAAA,EAE5C;AAAA,EAFmB;AAAA,EAAyB;AAAA,EAF5C,OAAO;AAAA,EACP,SAAS;AAIX;AAKO,MAAM,OAAO;AAAA,EAClB,QAAQ,CAAC,UAAkB,WAAW,KAAK;AAAA,EAC3C,SAAS,CAAC,UAAkB,YAAY,KAAK;AAAA,EAC7C,YAAY,CAAC,QAAgB,eAAe,GAAG;AAAA,EAC/C,aAAa,CAAC,QAAgB,gBAAgB,GAAG;AAAA,EACjD,SAAS,CAAC,SAAiB,WAAW,IAAI;AAC5C;AAEO,MAAM,2BAA2B;",
   "names": []
 }

package/dist/project-root.d.ts

@@ -1,6 +1,6 @@
 /**
  * project-root.ts — 仓根唯一解析点（DRY/DIP：env / log 勿各自上溯）
  */
-/** SFMC_ROOT > 相对 db-server/src 上溯两级 */
+/** SFMC_ROOT > 从本文件向上找 sfmc-monorepo */
 export declare const PROJECT_ROOT: string;
 //# sourceMappingURL=project-root.d.ts.map

package/dist/project-root.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"project-root.d.ts","sourceRoot":"","sources":["../src/project-root.ts"],"names":[],"mappings":"AAAA;;GAEG;AAQH,wCAAwC;AACxC,eAAO,MAAM,YAAY,EAAE,MAAsD,CAAC"}
+{"version":3,"file":"project-root.d.ts","sourceRoot":"","sources":["../src/project-root.ts"],"names":[],"mappings":"AAAA;;GAEG;AAQH,wCAAwC;AACxC,eAAO,MAAM,YAAY,EAAE,MAAiC,CAAC"}

package/dist/project-root.js

@@ -1,8 +1,8 @@
 import { resolveRuntimeRoot } from "@sfmc-bds/sdk/node/config";
-import { dirname, resolve } from "node:path";
+import { dirname } from "node:path";
 import { fileURLToPath } from "node:url";
 const HERE = dirname(fileURLToPath(import.meta.url));
-const PROJECT_ROOT = resolveRuntimeRoot(resolve(HERE, "..", ".."));
+const PROJECT_ROOT = resolveRuntimeRoot(HERE);
 export {
   PROJECT_ROOT
 };

package/dist/project-root.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../src/project-root.ts"],
-  "sourcesContent": ["/**\n * project-root.ts \u2014 \u4ED3\u6839\u552F\u4E00\u89E3\u6790\u70B9\uFF08DRY/DIP\uFF1Aenv / log \u52FF\u5404\u81EA\u4E0A\u6EAF\uFF09\n */\n\nimport { resolveRuntimeRoot } from \"@sfmc-bds/sdk/node/config\";\nimport { dirname, resolve } from \"node:path\";\nimport { fileURLToPath } from \"node:url\";\n\nconst HERE = dirname(fileURLToPath(import.meta.url));\n\n/** SFMC_ROOT > \u76F8\u5BF9 db-server/src \u4E0A\u6EAF\u4E24\u7EA7 */\nexport const PROJECT_ROOT: string = resolveRuntimeRoot(resolve(HERE, \"..\", \"..\"));\n"],
-  "mappings": "AAIA,SAAS,0BAA0B;AACnC,SAAS,SAAS,eAAe;AACjC,SAAS,qBAAqB;AAE9B,MAAM,OAAO,QAAQ,cAAc,YAAY,GAAG,CAAC;AAG5C,MAAM,eAAuB,mBAAmB,QAAQ,MAAM,MAAM,IAAI,CAAC;",
+  "sourcesContent": ["/**\n * project-root.ts \u2014 \u4ED3\u6839\u552F\u4E00\u89E3\u6790\u70B9\uFF08DRY/DIP\uFF1Aenv / log \u52FF\u5404\u81EA\u4E0A\u6EAF\uFF09\n */\n\nimport { resolveRuntimeRoot } from \"@sfmc-bds/sdk/node/config\";\nimport { dirname } from \"node:path\";\nimport { fileURLToPath } from \"node:url\";\n\nconst HERE = dirname(fileURLToPath(import.meta.url));\n\n/** SFMC_ROOT > \u4ECE\u672C\u6587\u4EF6\u5411\u4E0A\u627E sfmc-monorepo */\nexport const PROJECT_ROOT: string = resolveRuntimeRoot(HERE);\n"],
+  "mappings": "AAIA,SAAS,0BAA0B;AACnC,SAAS,eAAe;AACxB,SAAS,qBAAqB;AAE9B,MAAM,OAAO,QAAQ,cAAc,YAAY,GAAG,CAAC;AAG5C,MAAM,eAAuB,mBAAmB,IAAI;",
   "names": []
 }

package/dist/routes/_shared.d.ts

@@ -59,14 +59,23 @@ export type RouteFactory = (deps: Partial<RouteDeps>) => RouteHandler;
 export declare const json: typeof sharedJson;
 export declare const body: typeof sharedBody;
 /**
- * v2 失败信封权威形态(DRY + LSP):
- * 一律 `{ ok:false, error, code? }`(+ 可选 extra),勿再混用 `{ success:false }`。
- * service-routes / db / module-config / index 模块鉴权门应走此助手。
+ * 标准失败响应信封生成工具（格式：`{ ok: false, error, code? }` + 可选 extra 字段）。
+ * 路由层与鉴权中间件统一调用此助手，杜绝与 `{ success: false }` 字段混用。
+ *
+ * @param res HTTP 响应对象。
+ * @param error 错误简短描述。
+ * @param status HTTP 状态码。
+ * @param code 可选的精细业务错误码。
+ * @param extra 可选的附加字段字典。
  */
 export declare function jsonV2Fail(res: ServerResponse, error: string, status: number, code?: string, extra?: Record<string, unknown>): void;
 /**
- * v2 成功信封权威形态(DRY + LSP):
- * 一律 `{ ok:true, ...fields }`,与 jsonV2Fail 对称;客户端已双认 ok/success。
+ * 标准成功响应信封生成工具（格式：`{ ok: true, ...fields }`）。
+ * 与 `jsonV2Fail` 对称统一。
+ *
+ * @param res HTTP 响应对象。
+ * @param fields 响应正文字段字典。
+ * @param status HTTP 状态码（默认为 200）。
  */
 export declare function jsonV2Ok(res: ServerResponse, fields?: Record<string, unknown>, status?: number): void;
 export {};

package/dist/routes/_shared.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"_shared.d.ts","sourceRoot":"","sources":["../../src/routes/_shared.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,KAAK,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AACjE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAChD,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,gBAAgB,CAAC;AAC7C,OAAO,EAAE,IAAI,IAAI,UAAU,EAAE,IAAI,IAAI,UAAU,EAAE,MAAM,gBAAgB,CAAC;AACxE,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAEhD,YAAY,EAAE,MAAM,EAAE,MAAM,gBAAgB,CAAC;AAC7C,YAAY,EAAE,OAAO,EAAE,CAAC;AAExB,6CAA6C;AAC7C,MAAM,MAAM,SAAS,GAAG;IACtB,KAAK,EAAE,OAAO,CAAC;IACf,EAAE,EAAE,YAAY,CAAC;IACjB,IAAI,EAAE,CAAC,GAAG,EAAE,cAAc,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,EAAE,MAAM,KAAK,IAAI,CAAC;IACpF,IAAI,EAAE,CAAC,GAAG,EAAE,eAAe,KAAK,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IACjE,MAAM,EAAE,eAAe,CAAC;IACxB,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,CAAC,EAAE;QAAE,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,OAAO,EAAE,MAAM,EAAE,CAAA;KAAE,CAAC;IAC7D,oBAAoB,CAAC,EAAE,CACrB,QAAQ,EAAE,MAAM,EAChB,UAAU,EAAE,MAAM,KACf;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;IAC7D,aAAa,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,GAAG,SAAS,KAAK;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC;IAC7F,iBAAiB,CAAC,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,KAAK,IAAI,CAAC;IACnG,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,GAAG,IAAI,EAAE,OAAO,EAAE,KAAK,OAAO,CAAC,CAAC;CACxD,CAAC;AAEF,uDAAuD;AACvD,MAAM,MAAM,UAAU,GAAG;IAAE,EAAE,EAAE,MAAM,CAAC;IAAC,WAAW,EAAE,MAAM,EAAE,CAAA;CAAE,CAAC;AAE/D,MAAM,MAAM,QAAQ,GAAG;IACrB,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,GAAG,MAAM,CAAC;IACxB,MAAM,EAAE,eAAe,CAAC;IACxB,GAAG,EAAE,eAAe,CAAC;IACrB,GAAG,EAAE,cAAc,CAAC;IACpB,qBAAqB;IACrB,UAAU,CAAC,EAAE,UAAU,CAAC;CACzB,CAAC;AAEF,MAAM,MAAM,YAAY,GAAG,CAAC,GAAG,EAAE,QAAQ,KAAK,OAAO,CAAC,OAAO,CAAC,GAAG,OAAO,CAAC;AAEzE,MAAM,MAAM,YAAY,GAAG,CAAC,IAAI,EAAE,OAAO,CAAC,SAAS,CAAC,KAAK,YAAY,CAAC;AAEtE,sCAAsC;AACtC,eAAO,MAAM,IAAI,mBAAa,CAAC;AAC/B,eAAO,MAAM,IAAI,mBAAa,CAAC;AAE/B;;;;GAIG;AACH,wBAAgB,UAAU,CACxB,GAAG,EAAE,cAAc,EACnB,KAAK,EAAE,MAAM,EACb,MAAM,EAAE,MAAM,EACd,IAAI,CAAC,EAAE,MAAM,EACb,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC9B,IAAI,CAIN;AAED;;;GAGG;AACH,wBAAgB,QAAQ,CACtB,GAAG,EAAE,cAAc,EACnB,MAAM,GAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAM,EACpC,MAAM,SAAM,GACX,IAAI,CAEN;AAED,OAAO,EAAE,CAAC"}
+{"version":3,"file":"_shared.d.ts","sourceRoot":"","sources":["../../src/routes/_shared.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,KAAK,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AACjE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAChD,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,gBAAgB,CAAC;AAC7C,OAAO,EAAE,IAAI,IAAI,UAAU,EAAE,IAAI,IAAI,UAAU,EAAE,MAAM,gBAAgB,CAAC;AACxE,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAEhD,YAAY,EAAE,MAAM,EAAE,MAAM,gBAAgB,CAAC;AAC7C,YAAY,EAAE,OAAO,EAAE,CAAC;AAExB,6CAA6C;AAC7C,MAAM,MAAM,SAAS,GAAG;IACtB,KAAK,EAAE,OAAO,CAAC;IACf,EAAE,EAAE,YAAY,CAAC;IACjB,IAAI,EAAE,CAAC,GAAG,EAAE,cAAc,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,EAAE,MAAM,KAAK,IAAI,CAAC;IACpF,IAAI,EAAE,CAAC,GAAG,EAAE,eAAe,KAAK,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IACjE,MAAM,EAAE,eAAe,CAAC;IACxB,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,CAAC,EAAE;QAAE,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,OAAO,EAAE,MAAM,EAAE,CAAA;KAAE,CAAC;IAC7D,oBAAoB,CAAC,EAAE,CACrB,QAAQ,EAAE,MAAM,EAChB,UAAU,EAAE,MAAM,KACf;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;IAC7D,aAAa,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,GAAG,SAAS,KAAK;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC;IAC7F,iBAAiB,CAAC,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,KAAK,IAAI,CAAC;IACnG,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,GAAG,IAAI,EAAE,OAAO,EAAE,KAAK,OAAO,CAAC,CAAC;CACxD,CAAC;AAEF,uDAAuD;AACvD,MAAM,MAAM,UAAU,GAAG;IAAE,EAAE,EAAE,MAAM,CAAC;IAAC,WAAW,EAAE,MAAM,EAAE,CAAA;CAAE,CAAC;AAE/D,MAAM,MAAM,QAAQ,GAAG;IACrB,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,GAAG,MAAM,CAAC;IACxB,MAAM,EAAE,eAAe,CAAC;IACxB,GAAG,EAAE,eAAe,CAAC;IACrB,GAAG,EAAE,cAAc,CAAC;IACpB,qBAAqB;IACrB,UAAU,CAAC,EAAE,UAAU,CAAC;CACzB,CAAC;AAEF,MAAM,MAAM,YAAY,GAAG,CAAC,GAAG,EAAE,QAAQ,KAAK,OAAO,CAAC,OAAO,CAAC,GAAG,OAAO,CAAC;AAEzE,MAAM,MAAM,YAAY,GAAG,CAAC,IAAI,EAAE,OAAO,CAAC,SAAS,CAAC,KAAK,YAAY,CAAC;AAEtE,sCAAsC;AACtC,eAAO,MAAM,IAAI,mBAAa,CAAC;AAC/B,eAAO,MAAM,IAAI,mBAAa,CAAC;AAE/B;;;;;;;;;GASG;AACH,wBAAgB,UAAU,CACxB,GAAG,EAAE,cAAc,EACnB,KAAK,EAAE,MAAM,EACb,MAAM,EAAE,MAAM,EACd,IAAI,CAAC,EAAE,MAAM,EACb,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC9B,IAAI,CAIN;AAED;;;;;;;GAOG;AACH,wBAAgB,QAAQ,CACtB,GAAG,EAAE,cAAc,EACnB,MAAM,GAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAM,EACpC,MAAM,SAAM,GACX,IAAI,CAEN;AAGD,OAAO,EAAE,CAAC"}

package/dist/routes/_shared.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../src/routes/_shared.ts"],
-  "sourcesContent": ["/**\n * routes/_shared.ts \u2014 \u8DEF\u7531\u6A21\u5757\u5171\u4EAB\u7C7B\u578B + \u5DE5\u5382\n *\n * \u6240\u6709 db-server \u8DEF\u7531\u7EDF\u4E00:\n *   - deps:  { query, db, body, json, ... }      \u2190 \u5171\u4EAB\u6CE8\u5165\n *   - ctx:   { path, method, params, req, res } \u2190 \u5171\u4EAB\u8BF7\u6C42\u4E0A\u4E0B\u6587\n *   - return: boolean                            \u2190 true \u8868\u793A\u5DF2\u5904\u7406\n *\n * http \u5DE5\u5177 (json / body) \u6765\u81EA lib/http.ts\n */\n\nimport type { IncomingMessage, ServerResponse } from \"node:http\";\nimport type { DatabaseSync } from \"node:sqlite\";\nimport type { Method } from \"../lib/http.js\";\nimport { body as sharedBody, json as sharedJson } from \"../lib/http.js\";\nimport type { QueryFn } from \"../lib/sqlite.js\";\n\nexport type { Method } from \"../lib/http.js\";\nexport type { QueryFn };\n\n/** shared deps factory \u2014 \u8DEF\u7531\u53EF\u58F0\u660E\u6700\u5C0F\u5316 deps \u5B50\u96C6 */\nexport type RouteDeps = {\n  query: QueryFn;\n  db: DatabaseSync;\n  json: (res: ServerResponse, data: Record<string, unknown>, status?: number) => void;\n  body: (req: IncomingMessage) => Promise<Record<string, unknown>>;\n  params: URLSearchParams;\n  projectRoot: string;\n  monitorState?: { metrics: object | null; players: object[] };\n  ensureEconomyAccount?: (\n    playerId: string,\n    playerName: string\n  ) => { balance: number; player_id: string; version: number };\n  economyResult?: (account: object | undefined) => { balance: number; version: number } | null;\n  forwardToQQBridge?: (channelId: string, fromName: string, content: string, fromId: string) => void;\n  land?: Record<string, (...args: unknown[]) => unknown>;\n};\n\n/** v2 \u6A21\u5757\u8EAB\u4EFD \u2014 \u7531 handle \u6821\u9A8C\u540E\u5199\u5165\u8DEF\u7531 ctx(\u52FF\u6302 req \u79C1\u6709\u5B57\u6BB5,LoD)\u3002 */\nexport type ModuleAuth = { id: string; permissions: string[] };\n\nexport type RouteCtx = {\n  path: string;\n  method: Method | string;\n  params: URLSearchParams;\n  req: IncomingMessage;\n  res: ServerResponse;\n  /** v2 \u8DEF\u7531\u4E13\u7528:\u6A21\u5757\u9274\u6743\u7ED3\u679C */\n  moduleAuth?: ModuleAuth;\n};\n\nexport type RouteHandler = (ctx: RouteCtx) => Promise<boolean> | boolean;\n\nexport type RouteFactory = (deps: Partial<RouteDeps>) => RouteHandler;\n\n/** \u4FBF\u6377 re-export\uFF1A\u8DEF\u7531\u9ED8\u8BA4\u4ECE\u8FD9\u91CC\u53D6 json/body */\nexport const json = sharedJson;\nexport const body = sharedBody;\n\n/**\n * v2 \u5931\u8D25\u4FE1\u5C01\u6743\u5A01\u5F62\u6001(DRY + LSP):\n * \u4E00\u5F8B `{ ok:false, error, code? }`(+ \u53EF\u9009 extra),\u52FF\u518D\u6DF7\u7528 `{ success:false }`\u3002\n * service-routes / db / module-config / index \u6A21\u5757\u9274\u6743\u95E8\u5E94\u8D70\u6B64\u52A9\u624B\u3002\n */\nexport function jsonV2Fail(\n  res: ServerResponse,\n  error: string,\n  status: number,\n  code?: string,\n  extra?: Record<string, unknown>\n): void {\n  const payload: Record<string, unknown> = { ...(extra ?? {}), ok: false, error };\n  if (code) payload.code = code;\n  sharedJson(res, payload, status);\n}\n\n/**\n * v2 \u6210\u529F\u4FE1\u5C01\u6743\u5A01\u5F62\u6001(DRY + LSP):\n * \u4E00\u5F8B `{ ok:true, ...fields }`,\u4E0E jsonV2Fail \u5BF9\u79F0;\u5BA2\u6237\u7AEF\u5DF2\u53CC\u8BA4 ok/success\u3002\n */\nexport function jsonV2Ok(\n  res: ServerResponse,\n  fields: Record<string, unknown> = {},\n  status = 200\n): void {\n  sharedJson(res, { ...fields, ok: true }, status);\n}\n\nexport {};\n\n"],
-  "mappings": "AAcA,SAAS,QAAQ,YAAY,QAAQ,kBAAkB;AA0ChD,MAAM,OAAO;AACb,MAAM,OAAO;AAOb,SAAS,WACd,KACA,OACA,QACA,MACA,OACM;AACN,QAAM,UAAmC,EAAE,GAAI,SAAS,CAAC,GAAI,IAAI,OAAO,MAAM;AAC9E,MAAI,KAAM,SAAQ,OAAO;AACzB,aAAW,KAAK,SAAS,MAAM;AACjC;AAMO,SAAS,SACd,KACA,SAAkC,CAAC,GACnC,SAAS,KACH;AACN,aAAW,KAAK,EAAE,GAAG,QAAQ,IAAI,KAAK,GAAG,MAAM;AACjD;",
+  "sourcesContent": ["/**\n * routes/_shared.ts \u2014 \u8DEF\u7531\u6A21\u5757\u5171\u4EAB\u7C7B\u578B + \u5DE5\u5382\n *\n * \u6240\u6709 db-server \u8DEF\u7531\u7EDF\u4E00:\n *   - deps:  { query, db, body, json, ... }      \u2190 \u5171\u4EAB\u6CE8\u5165\n *   - ctx:   { path, method, params, req, res } \u2190 \u5171\u4EAB\u8BF7\u6C42\u4E0A\u4E0B\u6587\n *   - return: boolean                            \u2190 true \u8868\u793A\u5DF2\u5904\u7406\n *\n * http \u5DE5\u5177 (json / body) \u6765\u81EA lib/http.ts\n */\n\nimport type { IncomingMessage, ServerResponse } from \"node:http\";\nimport type { DatabaseSync } from \"node:sqlite\";\nimport type { Method } from \"../lib/http.js\";\nimport { body as sharedBody, json as sharedJson } from \"../lib/http.js\";\nimport type { QueryFn } from \"../lib/sqlite.js\";\n\nexport type { Method } from \"../lib/http.js\";\nexport type { QueryFn };\n\n/** shared deps factory \u2014 \u8DEF\u7531\u53EF\u58F0\u660E\u6700\u5C0F\u5316 deps \u5B50\u96C6 */\nexport type RouteDeps = {\n  query: QueryFn;\n  db: DatabaseSync;\n  json: (res: ServerResponse, data: Record<string, unknown>, status?: number) => void;\n  body: (req: IncomingMessage) => Promise<Record<string, unknown>>;\n  params: URLSearchParams;\n  projectRoot: string;\n  monitorState?: { metrics: object | null; players: object[] };\n  ensureEconomyAccount?: (\n    playerId: string,\n    playerName: string\n  ) => { balance: number; player_id: string; version: number };\n  economyResult?: (account: object | undefined) => { balance: number; version: number } | null;\n  forwardToQQBridge?: (channelId: string, fromName: string, content: string, fromId: string) => void;\n  land?: Record<string, (...args: unknown[]) => unknown>;\n};\n\n/** v2 \u6A21\u5757\u8EAB\u4EFD \u2014 \u7531 handle \u6821\u9A8C\u540E\u5199\u5165\u8DEF\u7531 ctx(\u52FF\u6302 req \u79C1\u6709\u5B57\u6BB5,LoD)\u3002 */\nexport type ModuleAuth = { id: string; permissions: string[] };\n\nexport type RouteCtx = {\n  path: string;\n  method: Method | string;\n  params: URLSearchParams;\n  req: IncomingMessage;\n  res: ServerResponse;\n  /** v2 \u8DEF\u7531\u4E13\u7528:\u6A21\u5757\u9274\u6743\u7ED3\u679C */\n  moduleAuth?: ModuleAuth;\n};\n\nexport type RouteHandler = (ctx: RouteCtx) => Promise<boolean> | boolean;\n\nexport type RouteFactory = (deps: Partial<RouteDeps>) => RouteHandler;\n\n/** \u4FBF\u6377 re-export\uFF1A\u8DEF\u7531\u9ED8\u8BA4\u4ECE\u8FD9\u91CC\u53D6 json/body */\nexport const json = sharedJson;\nexport const body = sharedBody;\n\n/**\n * \u6807\u51C6\u5931\u8D25\u54CD\u5E94\u4FE1\u5C01\u751F\u6210\u5DE5\u5177\uFF08\u683C\u5F0F\uFF1A`{ ok: false, error, code? }` + \u53EF\u9009 extra \u5B57\u6BB5\uFF09\u3002\n * \u8DEF\u7531\u5C42\u4E0E\u9274\u6743\u4E2D\u95F4\u4EF6\u7EDF\u4E00\u8C03\u7528\u6B64\u52A9\u624B\uFF0C\u675C\u7EDD\u4E0E `{ success: false }` \u5B57\u6BB5\u6DF7\u7528\u3002\n *\n * @param res HTTP \u54CD\u5E94\u5BF9\u8C61\u3002\n * @param error \u9519\u8BEF\u7B80\u77ED\u63CF\u8FF0\u3002\n * @param status HTTP \u72B6\u6001\u7801\u3002\n * @param code \u53EF\u9009\u7684\u7CBE\u7EC6\u4E1A\u52A1\u9519\u8BEF\u7801\u3002\n * @param extra \u53EF\u9009\u7684\u9644\u52A0\u5B57\u6BB5\u5B57\u5178\u3002\n */\nexport function jsonV2Fail(\n  res: ServerResponse,\n  error: string,\n  status: number,\n  code?: string,\n  extra?: Record<string, unknown>\n): void {\n  const payload: Record<string, unknown> = { ...(extra ?? {}), ok: false, error };\n  if (code) payload.code = code;\n  sharedJson(res, payload, status);\n}\n\n/**\n * \u6807\u51C6\u6210\u529F\u54CD\u5E94\u4FE1\u5C01\u751F\u6210\u5DE5\u5177\uFF08\u683C\u5F0F\uFF1A`{ ok: true, ...fields }`\uFF09\u3002\n * \u4E0E `jsonV2Fail` \u5BF9\u79F0\u7EDF\u4E00\u3002\n *\n * @param res HTTP \u54CD\u5E94\u5BF9\u8C61\u3002\n * @param fields \u54CD\u5E94\u6B63\u6587\u5B57\u6BB5\u5B57\u5178\u3002\n * @param status HTTP \u72B6\u6001\u7801\uFF08\u9ED8\u8BA4\u4E3A 200\uFF09\u3002\n */\nexport function jsonV2Ok(\n  res: ServerResponse,\n  fields: Record<string, unknown> = {},\n  status = 200\n): void {\n  sharedJson(res, { ...fields, ok: true }, status);\n}\n\n\nexport {};\n\n"],
+  "mappings": "AAcA,SAAS,QAAQ,YAAY,QAAQ,kBAAkB;AA0ChD,MAAM,OAAO;AACb,MAAM,OAAO;AAYb,SAAS,WACd,KACA,OACA,QACA,MACA,OACM;AACN,QAAM,UAAmC,EAAE,GAAI,SAAS,CAAC,GAAI,IAAI,OAAO,MAAM;AAC9E,MAAI,KAAM,SAAQ,OAAO;AACzB,aAAW,KAAK,SAAS,MAAM;AACjC;AAUO,SAAS,SACd,KACA,SAAkC,CAAC,GACnC,SAAS,KACH;AACN,aAAW,KAAK,EAAE,GAAG,QAAQ,IAAI,KAAK,GAAG,MAAM;AACjD;",
   "names": []
 }

package/dist/routes/config.d.ts

@@ -1,17 +1,14 @@
 /**
- * routes/config.ts — 配置路由（直接读取 configs/*.json）
+ * routes/config.ts — 配置路由
  *
  * 路由列表：
- *   GET /api/sfmc/configs/all          — SAPI 启动时一次性拉取所有配置
- *   GET /api/sfmc/settings             — 平铺 settings.json
- *   GET /api/sfmc/settings/:key        — 含 land:* / bridge_channel_id 等 fallback 查询
- *   GET /api/sfmc/areas                — areas.json
- *   GET /api/sfmc/permissions          — permissions.json
- *   GET /api/sfmc/banned_items         — banned_items.json
- *   GET /api/sfmc/clean                — clean.json
- *   GET /api/sfmc/grids                — grids.json
- *   GET /api/sfmc/peace_filters        — peace_filters.json
- *   GET /api/sfmc/qa                   — questions.json
+ *   GET /api/sfmc/configs/all          — SAPI ConfigManager 启动快照（仅平台域）
+ *   GET /api/sfmc/settings             — 平铺 settings.json（legacy）
+ *   GET /api/sfmc/settings/:key        — 含 land:* / bridge_channel_id 等 fallback
+ *   GET /api/sfmc/areas|permissions|…  — legacy 只读 JSON（文件名对 db-server 为黑箱）
+ *
+ * DIP：模块/legacy JSON 不进 SDK ConfigName；本路由用 configDir + 文件名拼接路径。
+ * 模块私有配置的读写权威入口是 module-config-routes（configs/:configKey）。
  */
 interface Deps {
     json: (res: import("http").ServerResponse, data: Record<string, unknown>, status?: number) => void;

package/dist/routes/config.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../../src/routes/config.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAIH,UAAU,IAAI;IACZ,IAAI,EAAE,CAAC,GAAG,EAAE,OAAO,MAAM,EAAE,cAAc,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,EAAE,MAAM,KAAK,IAAI,CAAC;IACnG,WAAW,EAAE,MAAM,CAAC;IACpB;;;OAGG;IACH,WAAW,CAAC,EAAE,MAAM,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IACnD;;;OAGG;IACH,eAAe,CAAC,EAAE,MAAM,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAChD;AAmCD,iBAAS,kBAAkB,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,WAAW,EAAE,eAAe,EAAE,EAAE,IAAI,iDAgHhF;IACD,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,eAAe,CAAC;IACxB,GAAG,EAAE,OAAO,MAAM,EAAE,cAAc,CAAC;CACpC,KAAG,OAAO,CAAC,OAAO,CAAC,CAuErB;AAED,OAAO,EAAE,kBAAkB,EAAE,CAAC"}
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../../src/routes/config.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAKH,UAAU,IAAI;IACZ,IAAI,EAAE,CAAC,GAAG,EAAE,OAAO,MAAM,EAAE,cAAc,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,EAAE,MAAM,KAAK,IAAI,CAAC;IACnG,WAAW,EAAE,MAAM,CAAC;IACpB;;;OAGG;IACH,WAAW,CAAC,EAAE,MAAM,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IACnD;;;OAGG;IACH,eAAe,CAAC,EAAE,MAAM,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAChD;AAmCD,iBAAS,kBAAkB,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,WAAW,EAAE,eAAe,EAAE,EAAE,IAAI,iDAyGhF;IACD,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,eAAe,CAAC;IACxB,GAAG,EAAE,OAAO,MAAM,EAAE,cAAc,CAAC;CACpC,KAAG,OAAO,CAAC,OAAO,CAAC,CAuErB;AAED,OAAO,EAAE,kBAAkB,EAAE,CAAC"}

package/dist/routes/config.js

@@ -1,4 +1,5 @@
-import { configPath, readJson } from "@sfmc-bds/sdk/node/config";
+import { join } from "node:path";
+import { configDir, configPath, readJson } from "@sfmc-bds/sdk/node/config";
 function isMetaKey(k) {
   return k === "$schema" || String(k).startsWith("_");
 }
@@ -28,40 +29,33 @@ function arrayOrEmpty(v) {
   return Array.isArray(v) ? v : [];
 }
 function createConfigRoutes({ json, projectRoot, listModules, getModuleTokens }) {
-  const readCfg = (name) => readJson(configPath(projectRoot, name));
+  const readPlatform = (name) => readJson(configPath(projectRoot, name));
+  const readOpaque = (fileName) => readJson(join(configDir(projectRoot), fileName));
   function getAllConfigs() {
     const modules = typeof listModules === "function" ? listModules() : [];
     const module_tokens = typeof getModuleTokens === "function" ? getModuleTokens() : {};
     return {
-      // 与 /api/sfmc/modules 同源;ConfigManager.init 一次拉齐启停态(DRY)
       modules,
-      // loopback-only 下发;SAPI 无 fs,靠此注入模块身份(DIP)
       module_tokens,
-      settings: stripMeta(readCfg("settings.json")),
-      areas: getAreas(),
-      permissions: getPermissions(),
-      banned_items: getBannedItems(),
-      clean: getClean(),
-      grids: getGrids(),
-      peace_filters: getPeaceFilters(),
-      questions: getQA()
+      settings: stripMeta(readOpaque("settings.json")),
+      permissions: getPermissions()
     };
   }
   function getSettingsFlat() {
-    const obj = stripMeta(readJson(configPath(projectRoot, "settings.json")));
+    const obj = stripMeta(readOpaque("settings.json"));
     return Object.entries(obj).map(([key, value]) => ({ key, value: jsonValue(value) }));
   }
   function getSettingByKey(key) {
-    const settings = readJson(configPath(projectRoot, "settings.json")) ?? {};
+    const settings = readOpaque("settings.json") ?? {};
     if (Object.prototype.hasOwnProperty.call(settings, key) && !isMetaKey(key)) {
       return { value: settings[key], source: "settings.json" };
     }
     if (key === "bridge_channel_id") {
-      const qq = readCfg("qq_config.json") ?? {};
+      const qq = readPlatform("qq_config.json") ?? {};
       if (qq.bridge_channel_id) return { value: qq.bridge_channel_id, source: "qq_config.json" };
     }
     if (key.startsWith("land:")) {
-      const land = readCfg("land.json") ?? {};
+      const land = readOpaque("land.json") ?? {};
       if (Object.prototype.hasOwnProperty.call(land, key) && !isMetaKey(key)) {
         return { value: land[key], source: "land.json" };
       }
@@ -69,28 +63,28 @@ function createConfigRoutes({ json, projectRoot, listModules, getModuleTokens })
     return { value: null };
   }
   function getAreas() {
-    return arrayOrEmpty(readCfg("areas.json")).filter((r) => r && r.module && r.dimension != null).map((r) => stripMetaDeep(r));
+    return arrayOrEmpty(readOpaque("areas.json")).filter((r) => r && r.module && r.dimension != null).map((r) => stripMetaDeep(r));
   }
   function getPermissions() {
-    return arrayOrEmpty(readCfg("permissions.json")).filter((r) => r && r.player_name).map((r) => stripMetaDeep(r));
+    return arrayOrEmpty(readPlatform("permissions.json")).filter((r) => r && r.player_name).map((r) => stripMetaDeep(r));
   }
   function getBannedItems() {
-    return arrayOrEmpty(readCfg("banned_items.json")).filter(
+    return arrayOrEmpty(readOpaque("banned_items.json")).filter(
       (i) => typeof i === "string" && i && !i.startsWith("_")
     );
   }
   function getClean() {
-    const c = stripMetaDeep(readCfg("clean.json") ?? {});
+    const c = stripMetaDeep(readOpaque("clean.json") ?? {});
     return { item_max: c.item_max ?? 192, poll_interval: c.poll_interval ?? 60 };
   }
   function getGrids() {
-    return arrayOrEmpty(readCfg("grids.json")).filter((r) => r && r.name).map((r) => stripMetaDeep(r));
+    return arrayOrEmpty(readOpaque("grids.json")).filter((r) => r && r.name).map((r) => stripMetaDeep(r));
   }
   function getPeaceFilters() {
-    return arrayOrEmpty(readCfg("peace_filters.json")).filter((r) => r && r.family).map((r) => stripMetaDeep(r));
+    return arrayOrEmpty(readOpaque("peace_filters.json")).filter((r) => r && r.family).map((r) => stripMetaDeep(r));
   }
   function getQA() {
-    return arrayOrEmpty(readCfg("questions.json")).filter((r) => r && r.question).map((r, idx) => {
+    return arrayOrEmpty(readOpaque("questions.json")).filter((r) => r && r.question).map((r, idx) => {
       const clean = stripMetaDeep(r);
       return {
         id: idx + 1,

package/dist/routes/config.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../src/routes/config.ts"],
-  "sourcesContent": ["/**\n * routes/config.ts \u2014 \u914D\u7F6E\u8DEF\u7531\uFF08\u76F4\u63A5\u8BFB\u53D6 configs/*.json\uFF09\n *\n * \u8DEF\u7531\u5217\u8868\uFF1A\n *   GET /api/sfmc/configs/all          \u2014 SAPI \u542F\u52A8\u65F6\u4E00\u6B21\u6027\u62C9\u53D6\u6240\u6709\u914D\u7F6E\n *   GET /api/sfmc/settings             \u2014 \u5E73\u94FA settings.json\n *   GET /api/sfmc/settings/:key        \u2014 \u542B land:* / bridge_channel_id \u7B49 fallback \u67E5\u8BE2\n *   GET /api/sfmc/areas                \u2014 areas.json\n *   GET /api/sfmc/permissions          \u2014 permissions.json\n *   GET /api/sfmc/banned_items         \u2014 banned_items.json\n *   GET /api/sfmc/clean                \u2014 clean.json\n *   GET /api/sfmc/grids                \u2014 grids.json\n *   GET /api/sfmc/peace_filters        \u2014 peace_filters.json\n *   GET /api/sfmc/qa                   \u2014 questions.json\n */\n\nimport { configPath, readJson, type ConfigName } from \"@sfmc-bds/sdk/node/config\";\n\ninterface Deps {\n  json: (res: import(\"http\").ServerResponse, data: Record<string, unknown>, status?: number) => void;\n  projectRoot: string;\n  /**\n   * \u6CE8\u5165\u6A21\u5757\u5217\u8868(\u4E0E GET /api/sfmc/modules \u540C\u6E90 \u2014 DRY)\u3002\n   * \u52FF\u5728\u672C\u8DEF\u7531\u518D\u8BFB catalog/lock(DIP:\u9AD8\u5C42\u88C5\u914D,\u8DEF\u7531\u53EA\u6D88\u8D39\u62BD\u8C61)\u3002\n   */\n  listModules?: () => Array<Record<string, unknown>>;\n  /**\n   * \u6CE8\u5165\u6A21\u5757 HMAC token \u8868(\u4EC5 loopback \u53EF\u8FBE;\u4F9B SAPI host-bootstrap \u6CE8\u5165\n   * set*ModuleContext,\u56E0 SAPI \u4E0D\u80FD\u76F4\u63A5\u8BFB\u4E0E DB \u540C\u76EE\u5F55\u7684 module-tokens.json)\u3002\n   */\n  getModuleTokens?: () => Record<string, string>;\n}\n\nfunction isMetaKey(k: string): boolean {\n  return k === \"$schema\" || String(k).startsWith(\"_\");\n}\n\nfunction stripMetaDeep(v: unknown): unknown {\n  if (Array.isArray(v)) return v.map(stripMetaDeep);\n  if (v && typeof v === \"object\") {\n    const out: Record<string, unknown> = {};\n    for (const [k, val] of Object.entries(v as Record<string, unknown>)) {\n      if (!isMetaKey(k)) out[k] = stripMetaDeep(val);\n    }\n    return out;\n  }\n  return v;\n}\n\nfunction stripMeta(obj: Record<string, unknown> | null): Record<string, unknown> {\n  if (!obj || typeof obj !== \"object\" || Array.isArray(obj)) return {};\n  const out: Record<string, unknown> = {};\n  for (const [k, v] of Object.entries(obj)) {\n    if (!isMetaKey(k)) out[k] = v;\n  }\n  return out;\n}\n\nfunction jsonValue(v: unknown): string {\n  return v !== null && typeof v === \"object\" ? JSON.stringify(v) : String(v ?? \"\");\n}\n\nfunction arrayOrEmpty(v: unknown): unknown[] {\n  return Array.isArray(v) ? v : [];\n}\n\nfunction createConfigRoutes({ json, projectRoot, listModules, getModuleTokens }: Deps) {\n  /** \u4ED3\u9876\u670D\u52A1 config \u8BFB\u53D6\u7EDF\u4E00\u8D70 SDK;\u95ED\u5305\u6355\u83B7 projectRoot\u3002 */\n  const readCfg = (name: ConfigName): unknown => readJson(configPath(projectRoot, name));\n\n  function getAllConfigs(): Record<string, unknown> {\n    const modules = typeof listModules === \"function\" ? listModules() : [];\n    const module_tokens = typeof getModuleTokens === \"function\" ? getModuleTokens() : {};\n    /**\n     * SAPI ConfigManager \u5951\u7EA6:banned_items \u4E3A string[](\u4E0E GET /banned_items \u540C\u6E90)\u3002\n     * \u52FF\u518D\u6620\u5C04\u6210 {item_id} \u2014 \u5426\u5219 filter(typeof s === \"string\") \u4F1A\u5F97\u5230\u7A7A\u7F13\u5B58(LSP)\u3002\n     * \u5176\u4F59\u8D44\u6E90\u590D\u7528\u5355\u8D44\u6E90 helpers,\u907F\u514D getAllConfigs \u4E0E\u4E13\u7528\u8DEF\u7531\u53CC\u5199(DRY)\u3002\n     */\n    return {\n      // \u4E0E /api/sfmc/modules \u540C\u6E90;ConfigManager.init \u4E00\u6B21\u62C9\u9F50\u542F\u505C\u6001(DRY)\n      modules,\n      // loopback-only \u4E0B\u53D1;SAPI \u65E0 fs,\u9760\u6B64\u6CE8\u5165\u6A21\u5757\u8EAB\u4EFD(DIP)\n      module_tokens,\n      settings: stripMeta(readCfg(\"settings.json\") as Record<string, unknown> | null),\n      areas: getAreas(),\n      permissions: getPermissions(),\n      banned_items: getBannedItems(),\n      clean: getClean(),\n      grids: getGrids(),\n      peace_filters: getPeaceFilters(),\n      questions: getQA(),\n    };\n  }\n\n  function getSettingsFlat(): Array<{ key: string; value: string }> {\n    const obj = stripMeta(readJson(configPath(projectRoot, \"settings.json\")) as Record<string, unknown> | null);\n    return Object.entries(obj).map(([key, value]) => ({ key, value: jsonValue(value) }));\n  }\n\n  function getSettingByKey(key: string): { value: unknown; source?: string } {\n    const settings = (readJson(configPath(projectRoot, \"settings.json\")) as Record<string, unknown> | null) ?? {};\n    if (Object.prototype.hasOwnProperty.call(settings, key) && !isMetaKey(key)) {\n      return { value: settings[key], source: \"settings.json\" };\n    }\n    if (key === \"bridge_channel_id\") {\n      const qq = (readCfg(\"qq_config.json\") as Record<string, unknown> | null) ?? {};\n      if (qq.bridge_channel_id) return { value: qq.bridge_channel_id, source: \"qq_config.json\" };\n    }\n    if (key.startsWith(\"land:\")) {\n      const land = (readCfg(\"land.json\") as Record<string, unknown> | null) ?? {};\n      if (Object.prototype.hasOwnProperty.call(land, key) && !isMetaKey(key)) {\n        return { value: land[key], source: \"land.json\" };\n      }\n    }\n    return { value: null };\n  }\n\n  function getAreas(): unknown[] {\n    return (arrayOrEmpty(readCfg(\"areas.json\")) as Array<Record<string, unknown>>)\n      .filter((r) => r && r.module && r.dimension != null)\n      .map((r) => stripMetaDeep(r));\n  }\n\n  function getPermissions(): unknown[] {\n    return (arrayOrEmpty(readCfg(\"permissions.json\")) as Array<Record<string, unknown>>)\n      .filter((r) => r && r.player_name)\n      .map((r) => stripMetaDeep(r));\n  }\n\n  function getBannedItems(): string[] {\n    return (arrayOrEmpty(readCfg(\"banned_items.json\")) as Array<string>).filter(\n      (i) => typeof i === \"string\" && i && !i.startsWith(\"_\")\n    );\n  }\n\n  function getClean(): { item_max: number; poll_interval: number } {\n    const c = stripMetaDeep(readCfg(\"clean.json\") ?? {}) as Record<string, unknown>;\n    return { item_max: (c.item_max as number) ?? 192, poll_interval: (c.poll_interval as number) ?? 60 };\n  }\n\n  function getGrids(): unknown[] {\n    return (arrayOrEmpty(readCfg(\"grids.json\")) as Array<Record<string, unknown>>)\n      .filter((r) => r && r.name)\n      .map((r) => stripMetaDeep(r));\n  }\n\n  function getPeaceFilters(): unknown[] {\n    return (arrayOrEmpty(readCfg(\"peace_filters.json\")) as Array<Record<string, unknown>>)\n      .filter((r) => r && r.family)\n      .map((r) => stripMetaDeep(r));\n  }\n\n  function getQA(): Array<Record<string, unknown>> {\n    return (arrayOrEmpty(readCfg(\"questions.json\")) as Array<Record<string, unknown>>)\n      .filter((r) => r && r.question)\n      .map((r, idx) => {\n        const clean = stripMetaDeep(r) as Record<string, unknown>;\n        return {\n          id: idx + 1,\n          weight: clean.weight ?? 1,\n          question: clean.question,\n          answers: clean.answers ?? [],\n          msg_right: clean.msg_right ?? \"\",\n          msg_wrong: clean.msg_wrong ?? \"\",\n          explanation: clean.explanation ?? \"\",\n          min_rank: clean.min_rank ?? null,\n          max_rank: clean.max_rank ?? null,\n          rewards: clean.rewards ?? [],\n          punishments: clean.punishments ?? [],\n        };\n      });\n  }\n\n  return async function handleConfigRoute({\n    path: requestPath,\n    method,\n    params,\n    res,\n  }: {\n    path: string;\n    method: string;\n    params: URLSearchParams;\n    res: import(\"http\").ServerResponse;\n  }): Promise<boolean> {\n    void params;\n    if (requestPath === \"/api/sfmc/configs/all\") {\n      if (method !== \"GET\") {\n        json(res, { success: false, error: \"not_found\" }, 404);\n        return true;\n      }\n      json(res, getAllConfigs());\n      return true;\n    }\n    if (requestPath === \"/api/sfmc/settings\") {\n      if (method === \"GET\") {\n        json(res, { settings: getSettingsFlat() });\n        return true;\n      }\n      json(res, { success: false, error: \"not_found\" }, 404);\n      return true;\n    }\n    if (requestPath.startsWith(\"/api/sfmc/settings/\")) {\n      const key = decodeURIComponent(requestPath.slice(\"/api/sfmc/settings/\".length));\n      if (method === \"GET\") {\n        json(res, getSettingByKey(key));\n        return true;\n      }\n      json(res, { success: false, error: \"method_not_allowed\" }, 405);\n      return true;\n    }\n    if (requestPath === \"/api/sfmc/areas\") {\n      if (method === \"GET\") {\n        json(res, { areas: getAreas() });\n        return true;\n      }\n    }\n    if (requestPath === \"/api/sfmc/permissions\") {\n      if (method === \"GET\") {\n        json(res, { permissions: getPermissions() });\n        return true;\n      }\n    }\n    if (requestPath === \"/api/sfmc/banned_items\") {\n      if (method === \"GET\") {\n        json(res, { items: getBannedItems() });\n        return true;\n      }\n    }\n    if (requestPath === \"/api/sfmc/clean\") {\n      if (method === \"GET\") {\n        json(res, { clean: getClean() });\n        return true;\n      }\n    }\n    if (requestPath === \"/api/sfmc/grids\") {\n      if (method === \"GET\") {\n        json(res, { grids: getGrids() });\n        return true;\n      }\n    }\n    if (requestPath === \"/api/sfmc/peace_filters\") {\n      if (method === \"GET\") {\n        json(res, { filters: getPeaceFilters() });\n        return true;\n      }\n    }\n    if (requestPath === \"/api/sfmc/qa\") {\n      if (method === \"GET\") {\n        json(res, { questions: getQA() });\n        return true;\n      }\n    }\n    return false;\n  };\n}\n\nexport { createConfigRoutes };\n"],
-  "mappings": "AAgBA,SAAS,YAAY,gBAAiC;AAiBtD,SAAS,UAAU,GAAoB;AACrC,SAAO,MAAM,aAAa,OAAO,CAAC,EAAE,WAAW,GAAG;AACpD;AAEA,SAAS,cAAc,GAAqB;AAC1C,MAAI,MAAM,QAAQ,CAAC,EAAG,QAAO,EAAE,IAAI,aAAa;AAChD,MAAI,KAAK,OAAO,MAAM,UAAU;AAC9B,UAAM,MAA+B,CAAC;AACtC,eAAW,CAAC,GAAG,GAAG,KAAK,OAAO,QAAQ,CAA4B,GAAG;AACnE,UAAI,CAAC,UAAU,CAAC,EAAG,KAAI,CAAC,IAAI,cAAc,GAAG;AAAA,IAC/C;AACA,WAAO;AAAA,EACT;AACA,SAAO;AACT;AAEA,SAAS,UAAU,KAA8D;AAC/E,MAAI,CAAC,OAAO,OAAO,QAAQ,YAAY,MAAM,QAAQ,GAAG,EAAG,QAAO,CAAC;AACnE,QAAM,MAA+B,CAAC;AACtC,aAAW,CAAC,GAAG,CAAC,KAAK,OAAO,QAAQ,GAAG,GAAG;AACxC,QAAI,CAAC,UAAU,CAAC,EAAG,KAAI,CAAC,IAAI;AAAA,EAC9B;AACA,SAAO;AACT;AAEA,SAAS,UAAU,GAAoB;AACrC,SAAO,MAAM,QAAQ,OAAO,MAAM,WAAW,KAAK,UAAU,CAAC,IAAI,OAAO,KAAK,EAAE;AACjF;AAEA,SAAS,aAAa,GAAuB;AAC3C,SAAO,MAAM,QAAQ,CAAC,IAAI,IAAI,CAAC;AACjC;AAEA,SAAS,mBAAmB,EAAE,MAAM,aAAa,aAAa,gBAAgB,GAAS;AAErF,QAAM,UAAU,CAAC,SAA8B,SAAS,WAAW,aAAa,IAAI,CAAC;AAErF,WAAS,gBAAyC;AAChD,UAAM,UAAU,OAAO,gBAAgB,aAAa,YAAY,IAAI,CAAC;AACrE,UAAM,gBAAgB,OAAO,oBAAoB,aAAa,gBAAgB,IAAI,CAAC;AAMnF,WAAO;AAAA;AAAA,MAEL;AAAA;AAAA,MAEA;AAAA,MACA,UAAU,UAAU,QAAQ,eAAe,CAAmC;AAAA,MAC9E,OAAO,SAAS;AAAA,MAChB,aAAa,eAAe;AAAA,MAC5B,cAAc,eAAe;AAAA,MAC7B,OAAO,SAAS;AAAA,MAChB,OAAO,SAAS;AAAA,MAChB,eAAe,gBAAgB;AAAA,MAC/B,WAAW,MAAM;AAAA,IACnB;AAAA,EACF;AAEA,WAAS,kBAAyD;AAChE,UAAM,MAAM,UAAU,SAAS,WAAW,aAAa,eAAe,CAAC,CAAmC;AAC1G,WAAO,OAAO,QAAQ,GAAG,EAAE,IAAI,CAAC,CAAC,KAAK,KAAK,OAAO,EAAE,KAAK,OAAO,UAAU,KAAK,EAAE,EAAE;AAAA,EACrF;AAEA,WAAS,gBAAgB,KAAkD;AACzE,UAAM,WAAY,SAAS,WAAW,aAAa,eAAe,CAAC,KAAwC,CAAC;AAC5G,QAAI,OAAO,UAAU,eAAe,KAAK,UAAU,GAAG,KAAK,CAAC,UAAU,GAAG,GAAG;AAC1E,aAAO,EAAE,OAAO,SAAS,GAAG,GAAG,QAAQ,gBAAgB;AAAA,IACzD;AACA,QAAI,QAAQ,qBAAqB;AAC/B,YAAM,KAAM,QAAQ,gBAAgB,KAAwC,CAAC;AAC7E,UAAI,GAAG,kBAAmB,QAAO,EAAE,OAAO,GAAG,mBAAmB,QAAQ,iBAAiB;AAAA,IAC3F;AACA,QAAI,IAAI,WAAW,OAAO,GAAG;AAC3B,YAAM,OAAQ,QAAQ,WAAW,KAAwC,CAAC;AAC1E,UAAI,OAAO,UAAU,eAAe,KAAK,MAAM,GAAG,KAAK,CAAC,UAAU,GAAG,GAAG;AACtE,eAAO,EAAE,OAAO,KAAK,GAAG,GAAG,QAAQ,YAAY;AAAA,MACjD;AAAA,IACF;AACA,WAAO,EAAE,OAAO,KAAK;AAAA,EACvB;AAEA,WAAS,WAAsB;AAC7B,WAAQ,aAAa,QAAQ,YAAY,CAAC,EACvC,OAAO,CAAC,MAAM,KAAK,EAAE,UAAU,EAAE,aAAa,IAAI,EAClD,IAAI,CAAC,MAAM,cAAc,CAAC,CAAC;AAAA,EAChC;AAEA,WAAS,iBAA4B;AACnC,WAAQ,aAAa,QAAQ,kBAAkB,CAAC,EAC7C,OAAO,CAAC,MAAM,KAAK,EAAE,WAAW,EAChC,IAAI,CAAC,MAAM,cAAc,CAAC,CAAC;AAAA,EAChC;AAEA,WAAS,iBAA2B;AAClC,WAAQ,aAAa,QAAQ,mBAAmB,CAAC,EAAoB;AAAA,MACnE,CAAC,MAAM,OAAO,MAAM,YAAY,KAAK,CAAC,EAAE,WAAW,GAAG;AAAA,IACxD;AAAA,EACF;AAEA,WAAS,WAAwD;AAC/D,UAAM,IAAI,cAAc,QAAQ,YAAY,KAAK,CAAC,CAAC;AACnD,WAAO,EAAE,UAAW,EAAE,YAAuB,KAAK,eAAgB,EAAE,iBAA4B,GAAG;AAAA,EACrG;AAEA,WAAS,WAAsB;AAC7B,WAAQ,aAAa,QAAQ,YAAY,CAAC,EACvC,OAAO,CAAC,MAAM,KAAK,EAAE,IAAI,EACzB,IAAI,CAAC,MAAM,cAAc,CAAC,CAAC;AAAA,EAChC;AAEA,WAAS,kBAA6B;AACpC,WAAQ,aAAa,QAAQ,oBAAoB,CAAC,EAC/C,OAAO,CAAC,MAAM,KAAK,EAAE,MAAM,EAC3B,IAAI,CAAC,MAAM,cAAc,CAAC,CAAC;AAAA,EAChC;AAEA,WAAS,QAAwC;AAC/C,WAAQ,aAAa,QAAQ,gBAAgB,CAAC,EAC3C,OAAO,CAAC,MAAM,KAAK,EAAE,QAAQ,EAC7B,IAAI,CAAC,GAAG,QAAQ;AACf,YAAM,QAAQ,cAAc,CAAC;AAC7B,aAAO;AAAA,QACL,IAAI,MAAM;AAAA,QACV,QAAQ,MAAM,UAAU;AAAA,QACxB,UAAU,MAAM;AAAA,QAChB,SAAS,MAAM,WAAW,CAAC;AAAA,QAC3B,WAAW,MAAM,aAAa;AAAA,QAC9B,WAAW,MAAM,aAAa;AAAA,QAC9B,aAAa,MAAM,eAAe;AAAA,QAClC,UAAU,MAAM,YAAY;AAAA,QAC5B,UAAU,MAAM,YAAY;AAAA,QAC5B,SAAS,MAAM,WAAW,CAAC;AAAA,QAC3B,aAAa,MAAM,eAAe,CAAC;AAAA,MACrC;AAAA,IACF,CAAC;AAAA,EACL;AAEA,SAAO,eAAe,kBAAkB;AAAA,IACtC,MAAM;AAAA,IACN;AAAA,IACA;AAAA,IACA;AAAA,EACF,GAKqB;AACnB,SAAK;AACL,QAAI,gBAAgB,yBAAyB;AAC3C,UAAI,WAAW,OAAO;AACpB,aAAK,KAAK,EAAE,SAAS,OAAO,OAAO,YAAY,GAAG,GAAG;AACrD,eAAO;AAAA,MACT;AACA,WAAK,KAAK,cAAc,CAAC;AACzB,aAAO;AAAA,IACT;AACA,QAAI,gBAAgB,sBAAsB;AACxC,UAAI,WAAW,OAAO;AACpB,aAAK,KAAK,EAAE,UAAU,gBAAgB,EAAE,CAAC;AACzC,eAAO;AAAA,MACT;AACA,WAAK,KAAK,EAAE,SAAS,OAAO,OAAO,YAAY,GAAG,GAAG;AACrD,aAAO;AAAA,IACT;AACA,QAAI,YAAY,WAAW,qBAAqB,GAAG;AACjD,YAAM,MAAM,mBAAmB,YAAY,MAAM,sBAAsB,MAAM,CAAC;AAC9E,UAAI,WAAW,OAAO;AACpB,aAAK,KAAK,gBAAgB,GAAG,CAAC;AAC9B,eAAO;AAAA,MACT;AACA,WAAK,KAAK,EAAE,SAAS,OAAO,OAAO,qBAAqB,GAAG,GAAG;AAC9D,aAAO;AAAA,IACT;AACA,QAAI,gBAAgB,mBAAmB;AACrC,UAAI,WAAW,OAAO;AACpB,aAAK,KAAK,EAAE,OAAO,SAAS,EAAE,CAAC;AAC/B,eAAO;AAAA,MACT;AAAA,IACF;AACA,QAAI,gBAAgB,yBAAyB;AAC3C,UAAI,WAAW,OAAO;AACpB,aAAK,KAAK,EAAE,aAAa,eAAe,EAAE,CAAC;AAC3C,eAAO;AAAA,MACT;AAAA,IACF;AACA,QAAI,gBAAgB,0BAA0B;AAC5C,UAAI,WAAW,OAAO;AACpB,aAAK,KAAK,EAAE,OAAO,eAAe,EAAE,CAAC;AACrC,eAAO;AAAA,MACT;AAAA,IACF;AACA,QAAI,gBAAgB,mBAAmB;AACrC,UAAI,WAAW,OAAO;AACpB,aAAK,KAAK,EAAE,OAAO,SAAS,EAAE,CAAC;AAC/B,eAAO;AAAA,MACT;AAAA,IACF;AACA,QAAI,gBAAgB,mBAAmB;AACrC,UAAI,WAAW,OAAO;AACpB,aAAK,KAAK,EAAE,OAAO,SAAS,EAAE,CAAC;AAC/B,eAAO;AAAA,MACT;AAAA,IACF;AACA,QAAI,gBAAgB,2BAA2B;AAC7C,UAAI,WAAW,OAAO;AACpB,aAAK,KAAK,EAAE,SAAS,gBAAgB,EAAE,CAAC;AACxC,eAAO;AAAA,MACT;AAAA,IACF;AACA,QAAI,gBAAgB,gBAAgB;AAClC,UAAI,WAAW,OAAO;AACpB,aAAK,KAAK,EAAE,WAAW,MAAM,EAAE,CAAC;AAChC,eAAO;AAAA,MACT;AAAA,IACF;AACA,WAAO;AAAA,EACT;AACF;",
+  "sourcesContent": ["/**\n * routes/config.ts \u2014 \u914D\u7F6E\u8DEF\u7531\n *\n * \u8DEF\u7531\u5217\u8868\uFF1A\n *   GET /api/sfmc/configs/all          \u2014 SAPI ConfigManager \u542F\u52A8\u5FEB\u7167\uFF08\u4EC5\u5E73\u53F0\u57DF\uFF09\n *   GET /api/sfmc/settings             \u2014 \u5E73\u94FA settings.json\uFF08legacy\uFF09\n *   GET /api/sfmc/settings/:key        \u2014 \u542B land:* / bridge_channel_id \u7B49 fallback\n *   GET /api/sfmc/areas|permissions|\u2026  \u2014 legacy \u53EA\u8BFB JSON\uFF08\u6587\u4EF6\u540D\u5BF9 db-server \u4E3A\u9ED1\u7BB1\uFF09\n *\n * DIP\uFF1A\u6A21\u5757/legacy JSON \u4E0D\u8FDB SDK ConfigName\uFF1B\u672C\u8DEF\u7531\u7528 configDir + \u6587\u4EF6\u540D\u62FC\u63A5\u8DEF\u5F84\u3002\n * \u6A21\u5757\u79C1\u6709\u914D\u7F6E\u7684\u8BFB\u5199\u6743\u5A01\u5165\u53E3\u662F module-config-routes\uFF08configs/:configKey\uFF09\u3002\n */\n\nimport { join } from \"node:path\";\nimport { configDir, configPath, readJson, type ConfigName } from \"@sfmc-bds/sdk/node/config\";\n\ninterface Deps {\n  json: (res: import(\"http\").ServerResponse, data: Record<string, unknown>, status?: number) => void;\n  projectRoot: string;\n  /**\n   * \u6CE8\u5165\u6A21\u5757\u5217\u8868(\u4E0E GET /api/sfmc/modules \u540C\u6E90 \u2014 DRY)\u3002\n   * \u52FF\u5728\u672C\u8DEF\u7531\u518D\u8BFB catalog/lock(DIP:\u9AD8\u5C42\u88C5\u914D,\u8DEF\u7531\u53EA\u6D88\u8D39\u62BD\u8C61)\u3002\n   */\n  listModules?: () => Array<Record<string, unknown>>;\n  /**\n   * \u6CE8\u5165\u6A21\u5757 HMAC token \u8868(\u4EC5 loopback \u53EF\u8FBE;\u4F9B SAPI host-bootstrap \u6CE8\u5165\n   * set*ModuleContext,\u56E0 SAPI \u4E0D\u80FD\u76F4\u63A5\u8BFB\u4E0E DB \u540C\u76EE\u5F55\u7684 module-tokens.json)\u3002\n   */\n  getModuleTokens?: () => Record<string, string>;\n}\n\nfunction isMetaKey(k: string): boolean {\n  return k === \"$schema\" || String(k).startsWith(\"_\");\n}\n\nfunction stripMetaDeep(v: unknown): unknown {\n  if (Array.isArray(v)) return v.map(stripMetaDeep);\n  if (v && typeof v === \"object\") {\n    const out: Record<string, unknown> = {};\n    for (const [k, val] of Object.entries(v as Record<string, unknown>)) {\n      if (!isMetaKey(k)) out[k] = stripMetaDeep(val);\n    }\n    return out;\n  }\n  return v;\n}\n\nfunction stripMeta(obj: Record<string, unknown> | null): Record<string, unknown> {\n  if (!obj || typeof obj !== \"object\" || Array.isArray(obj)) return {};\n  const out: Record<string, unknown> = {};\n  for (const [k, v] of Object.entries(obj)) {\n    if (!isMetaKey(k)) out[k] = v;\n  }\n  return out;\n}\n\nfunction jsonValue(v: unknown): string {\n  return v !== null && typeof v === \"object\" ? JSON.stringify(v) : String(v ?? \"\");\n}\n\nfunction arrayOrEmpty(v: unknown): unknown[] {\n  return Array.isArray(v) ? v : [];\n}\n\nfunction createConfigRoutes({ json, projectRoot, listModules, getModuleTokens }: Deps) {\n  /** \u5E73\u53F0 ConfigName\uFF08qq_config \u7B49\uFF09 */\n  const readPlatform = (name: ConfigName): unknown => readJson(configPath(projectRoot, name));\n  /** \u9ED1\u7BB1 JSON\uFF1A\u4EFB\u610F configs/<file>\uFF0C\u4E0D\u8FDB ConfigName */\n  const readOpaque = (fileName: string): unknown => readJson(join(configDir(projectRoot), fileName));\n\n  /**\n   * SAPI ConfigManager \u5951\u7EA6\uFF1A\u53EA\u7F13\u5B58 modules / settings / permissions\u3002\n   * \u52FF\u518D\u5F80 all \u585E areas \u7B49 legacy \u57DF\uFF08\u90A3\u4E9B\u8D70\u4E13\u7528 GET \u6216\u6A21\u5757 configKey\uFF09\u3002\n   */\n  function getAllConfigs(): Record<string, unknown> {\n    const modules = typeof listModules === \"function\" ? listModules() : [];\n    const module_tokens = typeof getModuleTokens === \"function\" ? getModuleTokens() : {};\n    return {\n      modules,\n      module_tokens,\n      settings: stripMeta(readOpaque(\"settings.json\") as Record<string, unknown> | null),\n      permissions: getPermissions(),\n    };\n  }\n\n  function getSettingsFlat(): Array<{ key: string; value: string }> {\n    const obj = stripMeta(readOpaque(\"settings.json\") as Record<string, unknown> | null);\n    return Object.entries(obj).map(([key, value]) => ({ key, value: jsonValue(value) }));\n  }\n\n  function getSettingByKey(key: string): { value: unknown; source?: string } {\n    const settings = (readOpaque(\"settings.json\") as Record<string, unknown> | null) ?? {};\n    if (Object.prototype.hasOwnProperty.call(settings, key) && !isMetaKey(key)) {\n      return { value: settings[key], source: \"settings.json\" };\n    }\n    if (key === \"bridge_channel_id\") {\n      const qq = (readPlatform(\"qq_config.json\") as Record<string, unknown> | null) ?? {};\n      if (qq.bridge_channel_id) return { value: qq.bridge_channel_id, source: \"qq_config.json\" };\n    }\n    if (key.startsWith(\"land:\")) {\n      const land = (readOpaque(\"land.json\") as Record<string, unknown> | null) ?? {};\n      if (Object.prototype.hasOwnProperty.call(land, key) && !isMetaKey(key)) {\n        return { value: land[key], source: \"land.json\" };\n      }\n    }\n    return { value: null };\n  }\n\n  function getAreas(): unknown[] {\n    return (arrayOrEmpty(readOpaque(\"areas.json\")) as Array<Record<string, unknown>>)\n      .filter((r) => r && r.module && r.dimension != null)\n      .map((r) => stripMetaDeep(r));\n  }\n\n  function getPermissions(): unknown[] {\n    return (arrayOrEmpty(readPlatform(\"permissions.json\")) as Array<Record<string, unknown>>)\n      .filter((r) => r && r.player_name)\n      .map((r) => stripMetaDeep(r));\n  }\n\n  function getBannedItems(): string[] {\n    return (arrayOrEmpty(readOpaque(\"banned_items.json\")) as Array<string>).filter(\n      (i) => typeof i === \"string\" && i && !i.startsWith(\"_\")\n    );\n  }\n\n  function getClean(): { item_max: number; poll_interval: number } {\n    const c = stripMetaDeep(readOpaque(\"clean.json\") ?? {}) as Record<string, unknown>;\n    return { item_max: (c.item_max as number) ?? 192, poll_interval: (c.poll_interval as number) ?? 60 };\n  }\n\n  function getGrids(): unknown[] {\n    return (arrayOrEmpty(readOpaque(\"grids.json\")) as Array<Record<string, unknown>>)\n      .filter((r) => r && r.name)\n      .map((r) => stripMetaDeep(r));\n  }\n\n  function getPeaceFilters(): unknown[] {\n    return (arrayOrEmpty(readOpaque(\"peace_filters.json\")) as Array<Record<string, unknown>>)\n      .filter((r) => r && r.family)\n      .map((r) => stripMetaDeep(r));\n  }\n\n  function getQA(): Array<Record<string, unknown>> {\n    return (arrayOrEmpty(readOpaque(\"questions.json\")) as Array<Record<string, unknown>>)\n      .filter((r) => r && r.question)\n      .map((r, idx) => {\n        const clean = stripMetaDeep(r) as Record<string, unknown>;\n        return {\n          id: idx + 1,\n          weight: clean.weight ?? 1,\n          question: clean.question,\n          answers: clean.answers ?? [],\n          msg_right: clean.msg_right ?? \"\",\n          msg_wrong: clean.msg_wrong ?? \"\",\n          explanation: clean.explanation ?? \"\",\n          min_rank: clean.min_rank ?? null,\n          max_rank: clean.max_rank ?? null,\n          rewards: clean.rewards ?? [],\n          punishments: clean.punishments ?? [],\n        };\n      });\n  }\n\n  return async function handleConfigRoute({\n    path: requestPath,\n    method,\n    params,\n    res,\n  }: {\n    path: string;\n    method: string;\n    params: URLSearchParams;\n    res: import(\"http\").ServerResponse;\n  }): Promise<boolean> {\n    void params;\n    if (requestPath === \"/api/sfmc/configs/all\") {\n      if (method !== \"GET\") {\n        json(res, { success: false, error: \"not_found\" }, 404);\n        return true;\n      }\n      json(res, getAllConfigs());\n      return true;\n    }\n    if (requestPath === \"/api/sfmc/settings\") {\n      if (method === \"GET\") {\n        json(res, { settings: getSettingsFlat() });\n        return true;\n      }\n      json(res, { success: false, error: \"not_found\" }, 404);\n      return true;\n    }\n    if (requestPath.startsWith(\"/api/sfmc/settings/\")) {\n      const key = decodeURIComponent(requestPath.slice(\"/api/sfmc/settings/\".length));\n      if (method === \"GET\") {\n        json(res, getSettingByKey(key));\n        return true;\n      }\n      json(res, { success: false, error: \"method_not_allowed\" }, 405);\n      return true;\n    }\n    if (requestPath === \"/api/sfmc/areas\") {\n      if (method === \"GET\") {\n        json(res, { areas: getAreas() });\n        return true;\n      }\n    }\n    if (requestPath === \"/api/sfmc/permissions\") {\n      if (method === \"GET\") {\n        json(res, { permissions: getPermissions() });\n        return true;\n      }\n    }\n    if (requestPath === \"/api/sfmc/banned_items\") {\n      if (method === \"GET\") {\n        json(res, { items: getBannedItems() });\n        return true;\n      }\n    }\n    if (requestPath === \"/api/sfmc/clean\") {\n      if (method === \"GET\") {\n        json(res, { clean: getClean() });\n        return true;\n      }\n    }\n    if (requestPath === \"/api/sfmc/grids\") {\n      if (method === \"GET\") {\n        json(res, { grids: getGrids() });\n        return true;\n      }\n    }\n    if (requestPath === \"/api/sfmc/peace_filters\") {\n      if (method === \"GET\") {\n        json(res, { filters: getPeaceFilters() });\n        return true;\n      }\n    }\n    if (requestPath === \"/api/sfmc/qa\") {\n      if (method === \"GET\") {\n        json(res, { questions: getQA() });\n        return true;\n      }\n    }\n    return false;\n  };\n}\n\nexport { createConfigRoutes };\n"],
+  "mappings": "AAaA,SAAS,YAAY;AACrB,SAAS,WAAW,YAAY,gBAAiC;AAiBjE,SAAS,UAAU,GAAoB;AACrC,SAAO,MAAM,aAAa,OAAO,CAAC,EAAE,WAAW,GAAG;AACpD;AAEA,SAAS,cAAc,GAAqB;AAC1C,MAAI,MAAM,QAAQ,CAAC,EAAG,QAAO,EAAE,IAAI,aAAa;AAChD,MAAI,KAAK,OAAO,MAAM,UAAU;AAC9B,UAAM,MAA+B,CAAC;AACtC,eAAW,CAAC,GAAG,GAAG,KAAK,OAAO,QAAQ,CAA4B,GAAG;AACnE,UAAI,CAAC,UAAU,CAAC,EAAG,KAAI,CAAC,IAAI,cAAc,GAAG;AAAA,IAC/C;AACA,WAAO;AAAA,EACT;AACA,SAAO;AACT;AAEA,SAAS,UAAU,KAA8D;AAC/E,MAAI,CAAC,OAAO,OAAO,QAAQ,YAAY,MAAM,QAAQ,GAAG,EAAG,QAAO,CAAC;AACnE,QAAM,MAA+B,CAAC;AACtC,aAAW,CAAC,GAAG,CAAC,KAAK,OAAO,QAAQ,GAAG,GAAG;AACxC,QAAI,CAAC,UAAU,CAAC,EAAG,KAAI,CAAC,IAAI;AAAA,EAC9B;AACA,SAAO;AACT;AAEA,SAAS,UAAU,GAAoB;AACrC,SAAO,MAAM,QAAQ,OAAO,MAAM,WAAW,KAAK,UAAU,CAAC,IAAI,OAAO,KAAK,EAAE;AACjF;AAEA,SAAS,aAAa,GAAuB;AAC3C,SAAO,MAAM,QAAQ,CAAC,IAAI,IAAI,CAAC;AACjC;AAEA,SAAS,mBAAmB,EAAE,MAAM,aAAa,aAAa,gBAAgB,GAAS;AAErF,QAAM,eAAe,CAAC,SAA8B,SAAS,WAAW,aAAa,IAAI,CAAC;AAE1F,QAAM,aAAa,CAAC,aAA8B,SAAS,KAAK,UAAU,WAAW,GAAG,QAAQ,CAAC;AAMjG,WAAS,gBAAyC;AAChD,UAAM,UAAU,OAAO,gBAAgB,aAAa,YAAY,IAAI,CAAC;AACrE,UAAM,gBAAgB,OAAO,oBAAoB,aAAa,gBAAgB,IAAI,CAAC;AACnF,WAAO;AAAA,MACL;AAAA,MACA;AAAA,MACA,UAAU,UAAU,WAAW,eAAe,CAAmC;AAAA,MACjF,aAAa,eAAe;AAAA,IAC9B;AAAA,EACF;AAEA,WAAS,kBAAyD;AAChE,UAAM,MAAM,UAAU,WAAW,eAAe,CAAmC;AACnF,WAAO,OAAO,QAAQ,GAAG,EAAE,IAAI,CAAC,CAAC,KAAK,KAAK,OAAO,EAAE,KAAK,OAAO,UAAU,KAAK,EAAE,EAAE;AAAA,EACrF;AAEA,WAAS,gBAAgB,KAAkD;AACzE,UAAM,WAAY,WAAW,eAAe,KAAwC,CAAC;AACrF,QAAI,OAAO,UAAU,eAAe,KAAK,UAAU,GAAG,KAAK,CAAC,UAAU,GAAG,GAAG;AAC1E,aAAO,EAAE,OAAO,SAAS,GAAG,GAAG,QAAQ,gBAAgB;AAAA,IACzD;AACA,QAAI,QAAQ,qBAAqB;AAC/B,YAAM,KAAM,aAAa,gBAAgB,KAAwC,CAAC;AAClF,UAAI,GAAG,kBAAmB,QAAO,EAAE,OAAO,GAAG,mBAAmB,QAAQ,iBAAiB;AAAA,IAC3F;AACA,QAAI,IAAI,WAAW,OAAO,GAAG;AAC3B,YAAM,OAAQ,WAAW,WAAW,KAAwC,CAAC;AAC7E,UAAI,OAAO,UAAU,eAAe,KAAK,MAAM,GAAG,KAAK,CAAC,UAAU,GAAG,GAAG;AACtE,eAAO,EAAE,OAAO,KAAK,GAAG,GAAG,QAAQ,YAAY;AAAA,MACjD;AAAA,IACF;AACA,WAAO,EAAE,OAAO,KAAK;AAAA,EACvB;AAEA,WAAS,WAAsB;AAC7B,WAAQ,aAAa,WAAW,YAAY,CAAC,EAC1C,OAAO,CAAC,MAAM,KAAK,EAAE,UAAU,EAAE,aAAa,IAAI,EAClD,IAAI,CAAC,MAAM,cAAc,CAAC,CAAC;AAAA,EAChC;AAEA,WAAS,iBAA4B;AACnC,WAAQ,aAAa,aAAa,kBAAkB,CAAC,EAClD,OAAO,CAAC,MAAM,KAAK,EAAE,WAAW,EAChC,IAAI,CAAC,MAAM,cAAc,CAAC,CAAC;AAAA,EAChC;AAEA,WAAS,iBAA2B;AAClC,WAAQ,aAAa,WAAW,mBAAmB,CAAC,EAAoB;AAAA,MACtE,CAAC,MAAM,OAAO,MAAM,YAAY,KAAK,CAAC,EAAE,WAAW,GAAG;AAAA,IACxD;AAAA,EACF;AAEA,WAAS,WAAwD;AAC/D,UAAM,IAAI,cAAc,WAAW,YAAY,KAAK,CAAC,CAAC;AACtD,WAAO,EAAE,UAAW,EAAE,YAAuB,KAAK,eAAgB,EAAE,iBAA4B,GAAG;AAAA,EACrG;AAEA,WAAS,WAAsB;AAC7B,WAAQ,aAAa,WAAW,YAAY,CAAC,EAC1C,OAAO,CAAC,MAAM,KAAK,EAAE,IAAI,EACzB,IAAI,CAAC,MAAM,cAAc,CAAC,CAAC;AAAA,EAChC;AAEA,WAAS,kBAA6B;AACpC,WAAQ,aAAa,WAAW,oBAAoB,CAAC,EAClD,OAAO,CAAC,MAAM,KAAK,EAAE,MAAM,EAC3B,IAAI,CAAC,MAAM,cAAc,CAAC,CAAC;AAAA,EAChC;AAEA,WAAS,QAAwC;AAC/C,WAAQ,aAAa,WAAW,gBAAgB,CAAC,EAC9C,OAAO,CAAC,MAAM,KAAK,EAAE,QAAQ,EAC7B,IAAI,CAAC,GAAG,QAAQ;AACf,YAAM,QAAQ,cAAc,CAAC;AAC7B,aAAO;AAAA,QACL,IAAI,MAAM;AAAA,QACV,QAAQ,MAAM,UAAU;AAAA,QACxB,UAAU,MAAM;AAAA,QAChB,SAAS,MAAM,WAAW,CAAC;AAAA,QAC3B,WAAW,MAAM,aAAa;AAAA,QAC9B,WAAW,MAAM,aAAa;AAAA,QAC9B,aAAa,MAAM,eAAe;AAAA,QAClC,UAAU,MAAM,YAAY;AAAA,QAC5B,UAAU,MAAM,YAAY;AAAA,QAC5B,SAAS,MAAM,WAAW,CAAC;AAAA,QAC3B,aAAa,MAAM,eAAe,CAAC;AAAA,MACrC;AAAA,IACF,CAAC;AAAA,EACL;AAEA,SAAO,eAAe,kBAAkB;AAAA,IACtC,MAAM;AAAA,IACN;AAAA,IACA;AAAA,IACA;AAAA,EACF,GAKqB;AACnB,SAAK;AACL,QAAI,gBAAgB,yBAAyB;AAC3C,UAAI,WAAW,OAAO;AACpB,aAAK,KAAK,EAAE,SAAS,OAAO,OAAO,YAAY,GAAG,GAAG;AACrD,eAAO;AAAA,MACT;AACA,WAAK,KAAK,cAAc,CAAC;AACzB,aAAO;AAAA,IACT;AACA,QAAI,gBAAgB,sBAAsB;AACxC,UAAI,WAAW,OAAO;AACpB,aAAK,KAAK,EAAE,UAAU,gBAAgB,EAAE,CAAC;AACzC,eAAO;AAAA,MACT;AACA,WAAK,KAAK,EAAE,SAAS,OAAO,OAAO,YAAY,GAAG,GAAG;AACrD,aAAO;AAAA,IACT;AACA,QAAI,YAAY,WAAW,qBAAqB,GAAG;AACjD,YAAM,MAAM,mBAAmB,YAAY,MAAM,sBAAsB,MAAM,CAAC;AAC9E,UAAI,WAAW,OAAO;AACpB,aAAK,KAAK,gBAAgB,GAAG,CAAC;AAC9B,eAAO;AAAA,MACT;AACA,WAAK,KAAK,EAAE,SAAS,OAAO,OAAO,qBAAqB,GAAG,GAAG;AAC9D,aAAO;AAAA,IACT;AACA,QAAI,gBAAgB,mBAAmB;AACrC,UAAI,WAAW,OAAO;AACpB,aAAK,KAAK,EAAE,OAAO,SAAS,EAAE,CAAC;AAC/B,eAAO;AAAA,MACT;AAAA,IACF;AACA,QAAI,gBAAgB,yBAAyB;AAC3C,UAAI,WAAW,OAAO;AACpB,aAAK,KAAK,EAAE,aAAa,eAAe,EAAE,CAAC;AAC3C,eAAO;AAAA,MACT;AAAA,IACF;AACA,QAAI,gBAAgB,0BAA0B;AAC5C,UAAI,WAAW,OAAO;AACpB,aAAK,KAAK,EAAE,OAAO,eAAe,EAAE,CAAC;AACrC,eAAO;AAAA,MACT;AAAA,IACF;AACA,QAAI,gBAAgB,mBAAmB;AACrC,UAAI,WAAW,OAAO;AACpB,aAAK,KAAK,EAAE,OAAO,SAAS,EAAE,CAAC;AAC/B,eAAO;AAAA,MACT;AAAA,IACF;AACA,QAAI,gBAAgB,mBAAmB;AACrC,UAAI,WAAW,OAAO;AACpB,aAAK,KAAK,EAAE,OAAO,SAAS,EAAE,CAAC;AAC/B,eAAO;AAAA,MACT;AAAA,IACF;AACA,QAAI,gBAAgB,2BAA2B;AAC7C,UAAI,WAAW,OAAO;AACpB,aAAK,KAAK,EAAE,SAAS,gBAAgB,EAAE,CAAC;AACxC,eAAO;AAAA,MACT;AAAA,IACF;AACA,QAAI,gBAAgB,gBAAgB;AAClC,UAAI,WAAW,OAAO;AACpB,aAAK,KAAK,EAAE,WAAW,MAAM,EAAE,CAAC;AAChC,eAAO;AAAA,MACT;AAAA,IACF;AACA,WAAO;AAAA,EACT;AACF;",
   "names": []
 }

package/dist/routes/db-routes.d.ts

@@ -23,6 +23,12 @@ export interface DbRoutesDeps {
     idempotent: IdempotencyStore;
     json?: typeof defaultJson;
 }
+/**
+ * 创建 `/api/sfmc/db/*` 数据库路由请求处理器。
+ *
+ * @param depsIn 依赖注入项（包含 schemaRegistry、txRunner、idempotent 等）。
+ * @returns 异步路由处理函数。
+ */
 export declare function createDbRoutes(depsIn: Partial<DbRoutesDeps>): (ctx: {
     path: string;
     method: Method | string;

package/dist/routes/db-routes.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"db-routes.d.ts","sourceRoot":"","sources":["../../src/routes/db-routes.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,KAAK,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AACjE,OAAO,EAAE,IAAI,IAAI,WAAW,EAAE,KAAK,MAAM,EAAE,MAAM,gBAAgB,CAAC;AAClE,OAAO,EAAwB,KAAK,UAAU,EAAE,MAAM,cAAc,CAAC;AACrE,OAAO,KAAK,EAEV,cAAc,EACf,MAAM,uBAAuB,CAAC;AAC/B,OAAO,KAAK,EAEV,QAAQ,EAET,MAAM,iBAAiB,CAAC;AAEzB,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,6BAA6B,CAAC;AAEpE,MAAM,WAAW,YAAY;IAC3B,cAAc,EAAE,cAAc,CAAC;IAC/B,QAAQ,EAAE,QAAQ,CAAC;IACnB,UAAU,EAAE,gBAAgB,CAAC;IAC7B,IAAI,CAAC,EAAE,OAAO,WAAW,CAAC;CAC3B;AAED,wBAAgB,cAAc,CAAC,MAAM,EAAE,OAAO,CAAC,YAAY,CAAC,SAOvC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,GAAG,MAAM,CAAC;IACxB,GAAG,EAAE,eAAe,CAAC;IACrB,GAAG,EAAE,cAAc,CAAC;IACpB,IAAI,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAClE,UAAU,CAAC,EAAE,UAAU,CAAC;CACzB,KAAG,OAAO,CAAC,OAAO,CAAC,CA6KrB"}
+{"version":3,"file":"db-routes.d.ts","sourceRoot":"","sources":["../../src/routes/db-routes.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,KAAK,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AACjE,OAAO,EAAE,IAAI,IAAI,WAAW,EAAE,KAAK,MAAM,EAAE,MAAM,gBAAgB,CAAC;AAClE,OAAO,EAAwB,KAAK,UAAU,EAAE,MAAM,cAAc,CAAC;AACrE,OAAO,KAAK,EAEV,cAAc,EACf,MAAM,uBAAuB,CAAC;AAC/B,OAAO,KAAK,EAEV,QAAQ,EAET,MAAM,iBAAiB,CAAC;AAEzB,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,6BAA6B,CAAC;AAEpE,MAAM,WAAW,YAAY;IAC3B,cAAc,EAAE,cAAc,CAAC;IAC/B,QAAQ,EAAE,QAAQ,CAAC;IACnB,UAAU,EAAE,gBAAgB,CAAC;IAC7B,IAAI,CAAC,EAAE,OAAO,WAAW,CAAC;CAC3B;AAED;;;;;GAKG;AACH,wBAAgB,cAAc,CAAC,MAAM,EAAE,OAAO,CAAC,YAAY,CAAC,SAOvC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,GAAG,MAAM,CAAC;IACxB,GAAG,EAAE,eAAe,CAAC;IACrB,GAAG,EAAE,cAAc,CAAC;IACpB,IAAI,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAClE,UAAU,CAAC,EAAE,UAAU,CAAC;CACzB,KAAG,OAAO,CAAC,OAAO,CAAC,CA4KrB"}

package/dist/routes/db-routes.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../src/routes/db-routes.ts"],
-  "sourcesContent": ["/**\n * routes/db-routes.ts \u2014 /api/sfmc/db/* \u5904\u7406\u5668\n *\n * \u7AEF\u70B9:\n *   POST /api/sfmc/db/define-table      body {name, columns, softDelete?} \u2192 {table, created}\n *   POST /api/sfmc/db/tx                body {steps[]}                   \u2192 TxResponse | TxError (\u6279\u91CF)\n *   POST /api/sfmc/db/tx/begin          body {}                          \u2192 {txId}\n *   POST /api/sfmc/db/tx/step           body {txId, step}                \u2192 {result}\n *   POST /api/sfmc/db/tx/commit         body {txId}                      \u2192 TxResponse\n *   POST /api/sfmc/db/tx/rollback       body {txId}                      \u2192 {ok}\n *   POST /api/sfmc/db/query             body {table, opts?}              \u2192 {rows}\n *   ...\n */\n\nimport type { IncomingMessage, ServerResponse } from \"node:http\";\nimport { json as defaultJson, type Method } from \"../lib/http.js\";\nimport { jsonV2Fail, jsonV2Ok, type ModuleAuth } from \"./_shared.js\";\nimport type {\n  DefineTableRequest,\n  SchemaRegistry,\n} from \"../schema-registry.js\";\nimport type {\n  TxRequest,\n  TxRunner,\n  TxStep,\n} from \"../tx-runner.js\";\nimport { PermissionDeniedError } from \"../permission-gate.js\";\nimport type { IdempotencyStore } from \"../lib/idempotency-store.js\";\n\nexport interface DbRoutesDeps {\n  schemaRegistry: SchemaRegistry;\n  txRunner: TxRunner;\n  idempotent: IdempotencyStore;\n  json?: typeof defaultJson;\n}\n\nexport function createDbRoutes(depsIn: Partial<DbRoutesDeps>) {\n  const deps = depsIn as Partial<DbRoutesDeps>;\n  if (!deps.schemaRegistry || !deps.txRunner || !deps.idempotent) {\n    throw new Error(\"createDbRoutes: \u7F3A\u5C11 schemaRegistry / txRunner / idempotent\");\n  }\n  const json = deps.json || defaultJson;\n\n  return async (ctx: {\n    path: string;\n    method: Method | string;\n    req: IncomingMessage;\n    res: ServerResponse;\n    body?: Promise<Record<string, unknown>> | Record<string, unknown>;\n    moduleAuth?: ModuleAuth;\n  }): Promise<boolean> => {\n    const { path, method, res } = ctx;\n    if (!path.startsWith(\"/api/sfmc/db/\")) return false;\n    if (method !== \"POST\" && method !== \"DELETE\") return false;\n\n    const auth = ctx.moduleAuth ?? null;\n    if (!auth) {\n      jsonV2Fail(res, \"unauthorized: module identity missing\", 401, \"unauthorized\");\n      return true;\n    }\n\n    const body = (await (ctx.body as Promise<Record<string, unknown>> | undefined)) || {};\n    const moduleId = auth.id;\n\n    if (path === \"/api/sfmc/db/define-table\") {\n      try {\n        const req2 = body as unknown as DefineTableRequest & { moduleId?: string };\n        delete (req2 as { moduleId?: string }).moduleId;\n        const result = deps.schemaRegistry!.define(moduleId, req2);\n        jsonV2Ok(res, { table: result.table, created: result.created });\n      } catch (e) {\n        jsonV2Fail(res, (e as Error).message, 400);\n      }\n      return true;\n    }\n\n    if (path === \"/api/sfmc/db/tx\") {\n      try {\n        const txReq = body as unknown as TxRequest;\n        // \u5F3A\u5236\u4EE5\u300C\u9274\u6743\u8EAB\u4EFD\u300D\u6267\u884C\u4E8B\u52A1:\u5FFD\u7565 body \u91CC\u81EA\u5E26\u7684 moduleId,\n        // \u65E2\u9632\u6B62\u6301 A \u7684 token \u5192\u7528 B \u7684\u6743\u9650\u8D8A\u6743,\u4E5F\u4FEE\u590D\u5BA2\u6237\u7AEF\u53EA\u53D1 {steps} \u65F6\n        // moduleId \u7F3A\u5931\u5BFC\u81F4\u7684\u4E8B\u52A1\u6052\u88AB\u62D2\u3002\n        const steps = Array.isArray(txReq.steps) ? txReq.steps : [];\n        const result = await deps.txRunner!.run({ moduleId, steps });\n        const status = result.ok ? 200 : 400;\n        // TxResponse/TxError \u81EA\u8EAB\u5DF2\u5E26 ok \u5B57\u6BB5;\u539F\u6837\u56DE\u4F20\u4FDD\u6301\u5951\u7EA6\n        json(res, result as unknown as Record<string, unknown>, status);\n      } catch (e) {\n        jsonV2Fail(res, (e as Error).message, 500);\n      }\n      return true;\n    }\n\n    // \u4EA4\u4E92\u5F0F\u4E8B\u52A1\u4F1A\u8BDD \u2014 \u4F9B SDK \u5728\u56DE\u8C03\u5185\u8BFB\u56DE query/get/call \u7ED3\u679C\n    // OCP/DRY:\u65B0\u4F1A\u8BDD\u52A8\u8BCD\u53EA\u5F80\u8868\u91CC\u52A0\u4E00\u9879,\u52FF\u518D\u590D\u5236 try/catch \u56DB\u4EFD\n    type SessionReply = { ok: boolean } & Record<string, unknown>;\n    const sessionOps: Array<{\n      path: string;\n      requireTxId?: boolean;\n      requireStep?: boolean;\n      run: (args: { txId: string; step?: TxStep | undefined }) => Promise<SessionReply> | SessionReply;\n    }> = [\n      {\n        path: \"/api/sfmc/db/tx/begin\",\n        run: () => deps.txRunner!.beginSession(moduleId) as SessionReply,\n      },\n      {\n        path: \"/api/sfmc/db/tx/step\",\n        requireTxId: true,\n        requireStep: true,\n        run: ({ txId, step }) => deps.txRunner!.stepSession(txId, moduleId, step!) as Promise<SessionReply>,\n      },\n      {\n        path: \"/api/sfmc/db/tx/commit\",\n        requireTxId: true,\n        run: ({ txId }) => deps.txRunner!.commitSession(txId, moduleId) as SessionReply,\n      },\n      {\n        path: \"/api/sfmc/db/tx/rollback\",\n        requireTxId: true,\n        run: ({ txId }) => deps.txRunner!.rollbackSession(txId, moduleId) as SessionReply,\n      },\n    ];\n    for (const op of sessionOps) {\n      if (path !== op.path) continue;\n      try {\n        const txId = String(body.txId || \"\");\n        const step = body.step as TxStep | undefined;\n        if (op.requireTxId && !txId) {\n          jsonV2Fail(res, `${op.path.split(\"/\").pop()} \u9700\u8981 { txId }`, 400);\n          return true;\n        }\n        if (op.requireStep && (!step || typeof step !== \"object\" || !(\"op\" in step))) {\n          jsonV2Fail(res, \"tx/step \u9700\u8981 { txId, step }\", 400);\n          return true;\n        }\n        const result = await op.run(step !== undefined ? { txId, step } : { txId });\n        json(res, result as Record<string, unknown>, result.ok ? 200 : 400);\n      } catch (e) {\n        jsonV2Fail(res, (e as Error).message, 500);\n      }\n      return true;\n    }\n\n    type SingleOp = \"query\" | \"get\" | \"insert\" | \"update\" | \"delete\";\n    const singles: { match: RegExp; op: SingleOp }[] = [\n      { match: /^\\/api\\/sfmc\\/db\\/query$/, op: \"query\" },\n      { match: /^\\/api\\/sfmc\\/db\\/get$/, op: \"get\" },\n      { match: /^\\/api\\/sfmc\\/db\\/insert$/, op: \"insert\" },\n      { match: /^\\/api\\/sfmc\\/db\\/update$/, op: \"update\" },\n      { match: /^\\/api\\/sfmc\\/db\\/delete$/, op: \"delete\" },\n    ];\n    for (const cand of singles) {\n      if (cand.match.test(path)) {\n        try {\n          const step = buildSingleStep(cand.op, body);\n          const result = await deps.txRunner!.run({ moduleId, steps: [step] });\n          if (!result.ok) {\n            const code = result.code === \"permission_denied\" ? 403 : 400;\n            jsonV2Fail(res, result.error, code, result.code, { step: result.step });\n            return true;\n          }\n          const first = result.results[0];\n          jsonV2Ok(res, unwrapResult(first, cand.op) as Record<string, unknown>);\n        } catch (e) {\n          if (e instanceof PermissionDeniedError) {\n            jsonV2Fail(res, e.message, 403, \"permission_denied\");\n            return true;\n          }\n          jsonV2Fail(res, (e as Error).message, 500);\n        }\n        return true;\n      }\n    }\n\n    if (path === \"/api/sfmc/db/audit\") {\n      try {\n        const step: TxStep = {\n          op: \"audit\",\n          table: String(body.table),\n          rowId: String(body.rowId),\n          action: String(body.action),\n          ...(body.data ? { data: body.data as Record<string, unknown> } : {}),\n        };\n        const result = await deps.txRunner!.run({ moduleId, steps: [step] });\n        if (!result.ok) {\n          jsonV2Fail(res, result.error, 400, result.code);\n          return true;\n        }\n        jsonV2Ok(res);\n      } catch (e) {\n        jsonV2Fail(res, (e as Error).message, 500);\n      }\n      return true;\n    }\n\n    const m = path.match(/^\\/api\\/sfmc\\/db\\/idempotent\\/(probe|commit)$/);\n    if (m) {\n      try {\n        if (m[1] === \"probe\") {\n          const r = await deps.idempotent!.probe(\n            moduleId,\n            String(body.action),\n            String(body.key)\n          );\n          json(res, r as unknown as Record<string, unknown>);\n        } else {\n          const r = await deps.idempotent!.commit(\n            moduleId,\n            String(body.action),\n            String(body.key),\n            body.value\n          );\n          jsonV2Ok(res, { committed: r.ok });\n        }\n      } catch (e) {\n        jsonV2Fail(res, (e as Error).message, 500);\n      }\n      return true;\n    }\n\n    return false;\n  };\n}\n\nfunction buildSingleStep(op: \"query\" | \"get\" | \"insert\" | \"update\" | \"delete\", body: Record<string, unknown>): TxStep {\n  switch (op) {\n    case \"query\":\n      return {\n        op: \"query\",\n        table: String(body.table),\n        ...(body.opts ? { opts: body.opts as Parameters<typeof JSON.parse>[0] } : {}),\n      } as TxStep;\n    case \"get\":\n      return { op: \"get\", table: String(body.table), id: String(body.id) };\n    case \"insert\":\n      return {\n        op: \"insert\",\n        table: String(body.table),\n        row: body.row as Record<string, unknown>,\n      };\n    case \"update\":\n      return {\n        op: \"update\",\n        table: String(body.table),\n        id: String(body.id),\n        patch: body.patch as Record<string, unknown>,\n      };\n    case \"delete\":\n      return {\n        op: \"delete\",\n        table: String(body.table),\n        id: String(body.id),\n        hard: Boolean(body.hard),\n      };\n  }\n}\n\ninterface UnwrappedRow {\n  rows?: unknown[];\n  row?: unknown;\n  changes?: number;\n}\n\nfunction unwrapResult(r: unknown, op: string): UnwrappedRow {\n  const step = r as { op: string; rows?: unknown[]; row?: unknown; changes?: number };\n  switch (op) {\n    case \"query\":\n      return step.rows ? { rows: step.rows } : {};\n    case \"get\":\n    case \"insert\":\n    case \"update\":\n      return step.row !== undefined ? { row: step.row } : {};\n    case \"delete\":\n      return typeof step.changes === \"number\" ? { changes: step.changes } : {};\n    default:\n      return {};\n  }\n}\n"],
-  "mappings": "AAeA,SAAS,QAAQ,mBAAgC;AACjD,SAAS,YAAY,gBAAiC;AAUtD,SAAS,6BAA6B;AAU/B,SAAS,eAAe,QAA+B;AAC5D,QAAM,OAAO;AACb,MAAI,CAAC,KAAK,kBAAkB,CAAC,KAAK,YAAY,CAAC,KAAK,YAAY;AAC9D,UAAM,IAAI,MAAM,qEAA2D;AAAA,EAC7E;AACA,QAAM,OAAO,KAAK,QAAQ;AAE1B,SAAO,OAAO,QAOU;AACtB,UAAM,EAAE,MAAM,QAAQ,IAAI,IAAI;AAC9B,QAAI,CAAC,KAAK,WAAW,eAAe,EAAG,QAAO;AAC9C,QAAI,WAAW,UAAU,WAAW,SAAU,QAAO;AAErD,UAAM,OAAO,IAAI,cAAc;AAC/B,QAAI,CAAC,MAAM;AACT,iBAAW,KAAK,yCAAyC,KAAK,cAAc;AAC5E,aAAO;AAAA,IACT;AAEA,UAAM,OAAQ,MAAO,IAAI,QAA0D,CAAC;AACpF,UAAM,WAAW,KAAK;AAEtB,QAAI,SAAS,6BAA6B;AACxC,UAAI;AACF,cAAM,OAAO;AACb,eAAQ,KAA+B;AACvC,cAAM,SAAS,KAAK,eAAgB,OAAO,UAAU,IAAI;AACzD,iBAAS,KAAK,EAAE,OAAO,OAAO,OAAO,SAAS,OAAO,QAAQ,CAAC;AAAA,MAChE,SAAS,GAAG;AACV,mBAAW,KAAM,EAAY,SAAS,GAAG;AAAA,MAC3C;AACA,aAAO;AAAA,IACT;AAEA,QAAI,SAAS,mBAAmB;AAC9B,UAAI;AACF,cAAM,QAAQ;AAId,cAAM,QAAQ,MAAM,QAAQ,MAAM,KAAK,IAAI,MAAM,QAAQ,CAAC;AAC1D,cAAM,SAAS,MAAM,KAAK,SAAU,IAAI,EAAE,UAAU,MAAM,CAAC;AAC3D,cAAM,SAAS,OAAO,KAAK,MAAM;AAEjC,aAAK,KAAK,QAA8C,MAAM;AAAA,MAChE,SAAS,GAAG;AACV,mBAAW,KAAM,EAAY,SAAS,GAAG;AAAA,MAC3C;AACA,aAAO;AAAA,IACT;AAKA,UAAM,aAKD;AAAA,MACH;AAAA,QACE,MAAM;AAAA,QACN,KAAK,MAAM,KAAK,SAAU,aAAa,QAAQ;AAAA,MACjD;AAAA,MACA;AAAA,QACE,MAAM;AAAA,QACN,aAAa;AAAA,QACb,aAAa;AAAA,QACb,KAAK,CAAC,EAAE,MAAM,KAAK,MAAM,KAAK,SAAU,YAAY,MAAM,UAAU,IAAK;AAAA,MAC3E;AAAA,MACA;AAAA,QACE,MAAM;AAAA,QACN,aAAa;AAAA,QACb,KAAK,CAAC,EAAE,KAAK,MAAM,KAAK,SAAU,cAAc,MAAM,QAAQ;AAAA,MAChE;AAAA,MACA;AAAA,QACE,MAAM;AAAA,QACN,aAAa;AAAA,QACb,KAAK,CAAC,EAAE,KAAK,MAAM,KAAK,SAAU,gBAAgB,MAAM,QAAQ;AAAA,MAClE;AAAA,IACF;AACA,eAAW,MAAM,YAAY;AAC3B,UAAI,SAAS,GAAG,KAAM;AACtB,UAAI;AACF,cAAM,OAAO,OAAO,KAAK,QAAQ,EAAE;AACnC,cAAM,OAAO,KAAK;AAClB,YAAI,GAAG,eAAe,CAAC,MAAM;AAC3B,qBAAW,KAAK,GAAG,GAAG,KAAK,MAAM,GAAG,EAAE,IAAI,CAAC,0BAAgB,GAAG;AAC9D,iBAAO;AAAA,QACT;AACA,YAAI,GAAG,gBAAgB,CAAC,QAAQ,OAAO,SAAS,YAAY,EAAE,QAAQ,QAAQ;AAC5E,qBAAW,KAAK,uCAA6B,GAAG;AAChD,iBAAO;AAAA,QACT;AACA,cAAM,SAAS,MAAM,GAAG,IAAI,SAAS,SAAY,EAAE,MAAM,KAAK,IAAI,EAAE,KAAK,CAAC;AAC1E,aAAK,KAAK,QAAmC,OAAO,KAAK,MAAM,GAAG;AAAA,MACpE,SAAS,GAAG;AACV,mBAAW,KAAM,EAAY,SAAS,GAAG;AAAA,MAC3C;AACA,aAAO;AAAA,IACT;AAGA,UAAM,UAA6C;AAAA,MACjD,EAAE,OAAO,4BAA4B,IAAI,QAAQ;AAAA,MACjD,EAAE,OAAO,0BAA0B,IAAI,MAAM;AAAA,MAC7C,EAAE,OAAO,6BAA6B,IAAI,SAAS;AAAA,MACnD,EAAE,OAAO,6BAA6B,IAAI,SAAS;AAAA,MACnD,EAAE,OAAO,6BAA6B,IAAI,SAAS;AAAA,IACrD;AACA,eAAW,QAAQ,SAAS;AAC1B,UAAI,KAAK,MAAM,KAAK,IAAI,GAAG;AACzB,YAAI;AACF,gBAAM,OAAO,gBAAgB,KAAK,IAAI,IAAI;AAC1C,gBAAM,SAAS,MAAM,KAAK,SAAU,IAAI,EAAE,UAAU,OAAO,CAAC,IAAI,EAAE,CAAC;AACnE,cAAI,CAAC,OAAO,IAAI;AACd,kBAAM,OAAO,OAAO,SAAS,sBAAsB,MAAM;AACzD,uBAAW,KAAK,OAAO,OAAO,MAAM,OAAO,MAAM,EAAE,MAAM,OAAO,KAAK,CAAC;AACtE,mBAAO;AAAA,UACT;AACA,gBAAM,QAAQ,OAAO,QAAQ,CAAC;AAC9B,mBAAS,KAAK,aAAa,OAAO,KAAK,EAAE,CAA4B;AAAA,QACvE,SAAS,GAAG;AACV,cAAI,aAAa,uBAAuB;AACtC,uBAAW,KAAK,EAAE,SAAS,KAAK,mBAAmB;AACnD,mBAAO;AAAA,UACT;AACA,qBAAW,KAAM,EAAY,SAAS,GAAG;AAAA,QAC3C;AACA,eAAO;AAAA,MACT;AAAA,IACF;AAEA,QAAI,SAAS,sBAAsB;AACjC,UAAI;AACF,cAAM,OAAe;AAAA,UACnB,IAAI;AAAA,UACJ,OAAO,OAAO,KAAK,KAAK;AAAA,UACxB,OAAO,OAAO,KAAK,KAAK;AAAA,UACxB,QAAQ,OAAO,KAAK,MAAM;AAAA,UAC1B,GAAI,KAAK,OAAO,EAAE,MAAM,KAAK,KAAgC,IAAI,CAAC;AAAA,QACpE;AACA,cAAM,SAAS,MAAM,KAAK,SAAU,IAAI,EAAE,UAAU,OAAO,CAAC,IAAI,EAAE,CAAC;AACnE,YAAI,CAAC,OAAO,IAAI;AACd,qBAAW,KAAK,OAAO,OAAO,KAAK,OAAO,IAAI;AAC9C,iBAAO;AAAA,QACT;AACA,iBAAS,GAAG;AAAA,MACd,SAAS,GAAG;AACV,mBAAW,KAAM,EAAY,SAAS,GAAG;AAAA,MAC3C;AACA,aAAO;AAAA,IACT;AAEA,UAAM,IAAI,KAAK,MAAM,+CAA+C;AACpE,QAAI,GAAG;AACL,UAAI;AACF,YAAI,EAAE,CAAC,MAAM,SAAS;AACpB,gBAAM,IAAI,MAAM,KAAK,WAAY;AAAA,YAC/B;AAAA,YACA,OAAO,KAAK,MAAM;AAAA,YAClB,OAAO,KAAK,GAAG;AAAA,UACjB;AACA,eAAK,KAAK,CAAuC;AAAA,QACnD,OAAO;AACL,gBAAM,IAAI,MAAM,KAAK,WAAY;AAAA,YAC/B;AAAA,YACA,OAAO,KAAK,MAAM;AAAA,YAClB,OAAO,KAAK,GAAG;AAAA,YACf,KAAK;AAAA,UACP;AACA,mBAAS,KAAK,EAAE,WAAW,EAAE,GAAG,CAAC;AAAA,QACnC;AAAA,MACF,SAAS,GAAG;AACV,mBAAW,KAAM,EAAY,SAAS,GAAG;AAAA,MAC3C;AACA,aAAO;AAAA,IACT;AAEA,WAAO;AAAA,EACT;AACF;AAEA,SAAS,gBAAgB,IAAsD,MAAuC;AACpH,UAAQ,IAAI;AAAA,IACV,KAAK;AACH,aAAO;AAAA,QACL,IAAI;AAAA,QACJ,OAAO,OAAO,KAAK,KAAK;AAAA,QACxB,GAAI,KAAK,OAAO,EAAE,MAAM,KAAK,KAAyC,IAAI,CAAC;AAAA,MAC7E;AAAA,IACF,KAAK;AACH,aAAO,EAAE,IAAI,OAAO,OAAO,OAAO,KAAK,KAAK,GAAG,IAAI,OAAO,KAAK,EAAE,EAAE;AAAA,IACrE,KAAK;AACH,aAAO;AAAA,QACL,IAAI;AAAA,QACJ,OAAO,OAAO,KAAK,KAAK;AAAA,QACxB,KAAK,KAAK;AAAA,MACZ;AAAA,IACF,KAAK;AACH,aAAO;AAAA,QACL,IAAI;AAAA,QACJ,OAAO,OAAO,KAAK,KAAK;AAAA,QACxB,IAAI,OAAO,KAAK,EAAE;AAAA,QAClB,OAAO,KAAK;AAAA,MACd;AAAA,IACF,KAAK;AACH,aAAO;AAAA,QACL,IAAI;AAAA,QACJ,OAAO,OAAO,KAAK,KAAK;AAAA,QACxB,IAAI,OAAO,KAAK,EAAE;AAAA,QAClB,MAAM,QAAQ,KAAK,IAAI;AAAA,MACzB;AAAA,EACJ;AACF;AAQA,SAAS,aAAa,GAAY,IAA0B;AAC1D,QAAM,OAAO;AACb,UAAQ,IAAI;AAAA,IACV,KAAK;AACH,aAAO,KAAK,OAAO,EAAE,MAAM,KAAK,KAAK,IAAI,CAAC;AAAA,IAC5C,KAAK;AAAA,IACL,KAAK;AAAA,IACL,KAAK;AACH,aAAO,KAAK,QAAQ,SAAY,EAAE,KAAK,KAAK,IAAI,IAAI,CAAC;AAAA,IACvD,KAAK;AACH,aAAO,OAAO,KAAK,YAAY,WAAW,EAAE,SAAS,KAAK,QAAQ,IAAI,CAAC;AAAA,IACzE;AACE,aAAO,CAAC;AAAA,EACZ;AACF;",
+  "sourcesContent": ["/**\n * routes/db-routes.ts \u2014 /api/sfmc/db/* \u5904\u7406\u5668\n *\n * \u7AEF\u70B9:\n *   POST /api/sfmc/db/define-table      body {name, columns, softDelete?} \u2192 {table, created}\n *   POST /api/sfmc/db/tx                body {steps[]}                   \u2192 TxResponse | TxError (\u6279\u91CF)\n *   POST /api/sfmc/db/tx/begin          body {}                          \u2192 {txId}\n *   POST /api/sfmc/db/tx/step           body {txId, step}                \u2192 {result}\n *   POST /api/sfmc/db/tx/commit         body {txId}                      \u2192 TxResponse\n *   POST /api/sfmc/db/tx/rollback       body {txId}                      \u2192 {ok}\n *   POST /api/sfmc/db/query             body {table, opts?}              \u2192 {rows}\n *   ...\n */\n\nimport type { IncomingMessage, ServerResponse } from \"node:http\";\nimport { json as defaultJson, type Method } from \"../lib/http.js\";\nimport { jsonV2Fail, jsonV2Ok, type ModuleAuth } from \"./_shared.js\";\nimport type {\n  DefineTableRequest,\n  SchemaRegistry,\n} from \"../schema-registry.js\";\nimport type {\n  TxRequest,\n  TxRunner,\n  TxStep,\n} from \"../tx-runner.js\";\nimport { PermissionDeniedError } from \"../permission-gate.js\";\nimport type { IdempotencyStore } from \"../lib/idempotency-store.js\";\n\nexport interface DbRoutesDeps {\n  schemaRegistry: SchemaRegistry;\n  txRunner: TxRunner;\n  idempotent: IdempotencyStore;\n  json?: typeof defaultJson;\n}\n\n/**\n * \u521B\u5EFA `/api/sfmc/db/*` \u6570\u636E\u5E93\u8DEF\u7531\u8BF7\u6C42\u5904\u7406\u5668\u3002\n *\n * @param depsIn \u4F9D\u8D56\u6CE8\u5165\u9879\uFF08\u5305\u542B schemaRegistry\u3001txRunner\u3001idempotent \u7B49\uFF09\u3002\n * @returns \u5F02\u6B65\u8DEF\u7531\u5904\u7406\u51FD\u6570\u3002\n */\nexport function createDbRoutes(depsIn: Partial<DbRoutesDeps>) {\n  const deps = depsIn as Partial<DbRoutesDeps>;\n  if (!deps.schemaRegistry || !deps.txRunner || !deps.idempotent) {\n    throw new Error(\"createDbRoutes: \u7F3A\u5C11 schemaRegistry / txRunner / idempotent\");\n  }\n  const json = deps.json || defaultJson;\n\n  return async (ctx: {\n    path: string;\n    method: Method | string;\n    req: IncomingMessage;\n    res: ServerResponse;\n    body?: Promise<Record<string, unknown>> | Record<string, unknown>;\n    moduleAuth?: ModuleAuth;\n  }): Promise<boolean> => {\n    const { path, method, res } = ctx;\n    if (!path.startsWith(\"/api/sfmc/db/\")) return false;\n    if (method !== \"POST\" && method !== \"DELETE\") return false;\n\n    const auth = ctx.moduleAuth ?? null;\n    if (!auth) {\n      jsonV2Fail(res, \"unauthorized: module identity missing\", 401, \"unauthorized\");\n      return true;\n    }\n\n    const body = (await (ctx.body as Promise<Record<string, unknown>> | undefined)) || {};\n    const moduleId = auth.id;\n\n    if (path === \"/api/sfmc/db/define-table\") {\n      try {\n        const req2 = body as unknown as DefineTableRequest & { moduleId?: string };\n        delete (req2 as { moduleId?: string }).moduleId;\n        const result = deps.schemaRegistry!.define(moduleId, req2);\n        jsonV2Ok(res, { table: result.table, created: result.created });\n      } catch (e) {\n        jsonV2Fail(res, (e as Error).message, 400);\n      }\n      return true;\n    }\n\n    if (path === \"/api/sfmc/db/tx\") {\n      try {\n        const txReq = body as unknown as TxRequest;\n        // \u5F3A\u5236\u4EE5\u9274\u6743\u8EAB\u4EFD\u6267\u884C\u4E8B\u52A1\uFF1A\u5FFD\u7565\u8BF7\u6C42\u4F53\u4E2D\u81EA\u5E26\u7684 moduleId\uFF0C\n        // \u65E2\u675C\u7EDD\u8DE8\u6A21\u5757\u8D8A\u6743\u5047\u501F\u8EAB\u4EFD\uFF0C\u4E5F\u517C\u5BB9\u5BA2\u6237\u7AEF\u4EC5\u63D0\u4EA4 steps \u6570\u636E\u7684\u8C03\u7528\u573A\u666F\u3002\n        const steps = Array.isArray(txReq.steps) ? txReq.steps : [];\n        const result = await deps.txRunner!.run({ moduleId, steps });\n        const status = result.ok ? 200 : 400;\n        // TxResponse \u4E0E TxError \u81EA\u8EAB\u5DF2\u5305\u542B ok \u5B57\u6BB5\uFF0C\u539F\u6837\u56DE\u4F20\u4FDD\u6301\u534F\u8BAE\u5951\u7EA6\n        json(res, result as unknown as Record<string, unknown>, status);\n      } catch (e) {\n        jsonV2Fail(res, (e as Error).message, 500);\n      }\n      return true;\n    }\n\n    // \u4EA4\u4E92\u5F0F\u4E8B\u52A1\u4F1A\u8BDD \u2014 \u4F9B\u5BA2\u6237\u7AEF\u5728\u4E8B\u52A1\u56DE\u8C03\u6267\u884C\u8FC7\u7A0B\u4E2D\u8BFB\u56DE\u5B9E\u65F6 query/get/call \u7ED3\u679C\n\n    type SessionReply = { ok: boolean } & Record<string, unknown>;\n    const sessionOps: Array<{\n      path: string;\n      requireTxId?: boolean;\n      requireStep?: boolean;\n      run: (args: { txId: string; step?: TxStep | undefined }) => Promise<SessionReply> | SessionReply;\n    }> = [\n      {\n        path: \"/api/sfmc/db/tx/begin\",\n        run: () => deps.txRunner!.beginSession(moduleId) as SessionReply,\n      },\n      {\n        path: \"/api/sfmc/db/tx/step\",\n        requireTxId: true,\n        requireStep: true,\n        run: ({ txId, step }) => deps.txRunner!.stepSession(txId, moduleId, step!) as Promise<SessionReply>,\n      },\n      {\n        path: \"/api/sfmc/db/tx/commit\",\n        requireTxId: true,\n        run: ({ txId }) => deps.txRunner!.commitSession(txId, moduleId) as SessionReply,\n      },\n      {\n        path: \"/api/sfmc/db/tx/rollback\",\n        requireTxId: true,\n        run: ({ txId }) => deps.txRunner!.rollbackSession(txId, moduleId) as SessionReply,\n      },\n    ];\n    for (const op of sessionOps) {\n      if (path !== op.path) continue;\n      try {\n        const txId = String(body.txId || \"\");\n        const step = body.step as TxStep | undefined;\n        if (op.requireTxId && !txId) {\n          jsonV2Fail(res, `${op.path.split(\"/\").pop()} \u9700\u8981 { txId }`, 400);\n          return true;\n        }\n        if (op.requireStep && (!step || typeof step !== \"object\" || !(\"op\" in step))) {\n          jsonV2Fail(res, \"tx/step \u9700\u8981 { txId, step }\", 400);\n          return true;\n        }\n        const result = await op.run(step !== undefined ? { txId, step } : { txId });\n        json(res, result as Record<string, unknown>, result.ok ? 200 : 400);\n      } catch (e) {\n        jsonV2Fail(res, (e as Error).message, 500);\n      }\n      return true;\n    }\n\n    type SingleOp = \"query\" | \"get\" | \"insert\" | \"update\" | \"delete\";\n    const singles: { match: RegExp; op: SingleOp }[] = [\n      { match: /^\\/api\\/sfmc\\/db\\/query$/, op: \"query\" },\n      { match: /^\\/api\\/sfmc\\/db\\/get$/, op: \"get\" },\n      { match: /^\\/api\\/sfmc\\/db\\/insert$/, op: \"insert\" },\n      { match: /^\\/api\\/sfmc\\/db\\/update$/, op: \"update\" },\n      { match: /^\\/api\\/sfmc\\/db\\/delete$/, op: \"delete\" },\n    ];\n    for (const cand of singles) {\n      if (cand.match.test(path)) {\n        try {\n          const step = buildSingleStep(cand.op, body);\n          const result = await deps.txRunner!.run({ moduleId, steps: [step] });\n          if (!result.ok) {\n            const code = result.code === \"permission_denied\" ? 403 : 400;\n            jsonV2Fail(res, result.error, code, result.code, { step: result.step });\n            return true;\n          }\n          const first = result.results[0];\n          jsonV2Ok(res, unwrapResult(first, cand.op) as Record<string, unknown>);\n        } catch (e) {\n          if (e instanceof PermissionDeniedError) {\n            jsonV2Fail(res, e.message, 403, \"permission_denied\");\n            return true;\n          }\n          jsonV2Fail(res, (e as Error).message, 500);\n        }\n        return true;\n      }\n    }\n\n    if (path === \"/api/sfmc/db/audit\") {\n      try {\n        const step: TxStep = {\n          op: \"audit\",\n          table: String(body.table),\n          rowId: String(body.rowId),\n          action: String(body.action),\n          ...(body.data ? { data: body.data as Record<string, unknown> } : {}),\n        };\n        const result = await deps.txRunner!.run({ moduleId, steps: [step] });\n        if (!result.ok) {\n          jsonV2Fail(res, result.error, 400, result.code);\n          return true;\n        }\n        jsonV2Ok(res);\n      } catch (e) {\n        jsonV2Fail(res, (e as Error).message, 500);\n      }\n      return true;\n    }\n\n    const m = path.match(/^\\/api\\/sfmc\\/db\\/idempotent\\/(probe|commit)$/);\n    if (m) {\n      try {\n        if (m[1] === \"probe\") {\n          const r = await deps.idempotent!.probe(\n            moduleId,\n            String(body.action),\n            String(body.key)\n          );\n          json(res, r as unknown as Record<string, unknown>);\n        } else {\n          const r = await deps.idempotent!.commit(\n            moduleId,\n            String(body.action),\n            String(body.key),\n            body.value\n          );\n          jsonV2Ok(res, { committed: r.ok });\n        }\n      } catch (e) {\n        jsonV2Fail(res, (e as Error).message, 500);\n      }\n      return true;\n    }\n\n    return false;\n  };\n}\n\nfunction buildSingleStep(op: \"query\" | \"get\" | \"insert\" | \"update\" | \"delete\", body: Record<string, unknown>): TxStep {\n  switch (op) {\n    case \"query\":\n      return {\n        op: \"query\",\n        table: String(body.table),\n        ...(body.opts ? { opts: body.opts as Parameters<typeof JSON.parse>[0] } : {}),\n      } as TxStep;\n    case \"get\":\n      return { op: \"get\", table: String(body.table), id: String(body.id) };\n    case \"insert\":\n      return {\n        op: \"insert\",\n        table: String(body.table),\n        row: body.row as Record<string, unknown>,\n      };\n    case \"update\":\n      return {\n        op: \"update\",\n        table: String(body.table),\n        id: String(body.id),\n        patch: body.patch as Record<string, unknown>,\n      };\n    case \"delete\":\n      return {\n        op: \"delete\",\n        table: String(body.table),\n        id: String(body.id),\n        hard: Boolean(body.hard),\n      };\n  }\n}\n\ninterface UnwrappedRow {\n  rows?: unknown[];\n  row?: unknown;\n  changes?: number;\n}\n\nfunction unwrapResult(r: unknown, op: string): UnwrappedRow {\n  const step = r as { op: string; rows?: unknown[]; row?: unknown; changes?: number };\n  switch (op) {\n    case \"query\":\n      return step.rows ? { rows: step.rows } : {};\n    case \"get\":\n    case \"insert\":\n    case \"update\":\n      return step.row !== undefined ? { row: step.row } : {};\n    case \"delete\":\n      return typeof step.changes === \"number\" ? { changes: step.changes } : {};\n    default:\n      return {};\n  }\n}\n"],
+  "mappings": "AAeA,SAAS,QAAQ,mBAAgC;AACjD,SAAS,YAAY,gBAAiC;AAUtD,SAAS,6BAA6B;AAgB/B,SAAS,eAAe,QAA+B;AAC5D,QAAM,OAAO;AACb,MAAI,CAAC,KAAK,kBAAkB,CAAC,KAAK,YAAY,CAAC,KAAK,YAAY;AAC9D,UAAM,IAAI,MAAM,qEAA2D;AAAA,EAC7E;AACA,QAAM,OAAO,KAAK,QAAQ;AAE1B,SAAO,OAAO,QAOU;AACtB,UAAM,EAAE,MAAM,QAAQ,IAAI,IAAI;AAC9B,QAAI,CAAC,KAAK,WAAW,eAAe,EAAG,QAAO;AAC9C,QAAI,WAAW,UAAU,WAAW,SAAU,QAAO;AAErD,UAAM,OAAO,IAAI,cAAc;AAC/B,QAAI,CAAC,MAAM;AACT,iBAAW,KAAK,yCAAyC,KAAK,cAAc;AAC5E,aAAO;AAAA,IACT;AAEA,UAAM,OAAQ,MAAO,IAAI,QAA0D,CAAC;AACpF,UAAM,WAAW,KAAK;AAEtB,QAAI,SAAS,6BAA6B;AACxC,UAAI;AACF,cAAM,OAAO;AACb,eAAQ,KAA+B;AACvC,cAAM,SAAS,KAAK,eAAgB,OAAO,UAAU,IAAI;AACzD,iBAAS,KAAK,EAAE,OAAO,OAAO,OAAO,SAAS,OAAO,QAAQ,CAAC;AAAA,MAChE,SAAS,GAAG;AACV,mBAAW,KAAM,EAAY,SAAS,GAAG;AAAA,MAC3C;AACA,aAAO;AAAA,IACT;AAEA,QAAI,SAAS,mBAAmB;AAC9B,UAAI;AACF,cAAM,QAAQ;AAGd,cAAM,QAAQ,MAAM,QAAQ,MAAM,KAAK,IAAI,MAAM,QAAQ,CAAC;AAC1D,cAAM,SAAS,MAAM,KAAK,SAAU,IAAI,EAAE,UAAU,MAAM,CAAC;AAC3D,cAAM,SAAS,OAAO,KAAK,MAAM;AAEjC,aAAK,KAAK,QAA8C,MAAM;AAAA,MAChE,SAAS,GAAG;AACV,mBAAW,KAAM,EAAY,SAAS,GAAG;AAAA,MAC3C;AACA,aAAO;AAAA,IACT;AAKA,UAAM,aAKD;AAAA,MACH;AAAA,QACE,MAAM;AAAA,QACN,KAAK,MAAM,KAAK,SAAU,aAAa,QAAQ;AAAA,MACjD;AAAA,MACA;AAAA,QACE,MAAM;AAAA,QACN,aAAa;AAAA,QACb,aAAa;AAAA,QACb,KAAK,CAAC,EAAE,MAAM,KAAK,MAAM,KAAK,SAAU,YAAY,MAAM,UAAU,IAAK;AAAA,MAC3E;AAAA,MACA;AAAA,QACE,MAAM;AAAA,QACN,aAAa;AAAA,QACb,KAAK,CAAC,EAAE,KAAK,MAAM,KAAK,SAAU,cAAc,MAAM,QAAQ;AAAA,MAChE;AAAA,MACA;AAAA,QACE,MAAM;AAAA,QACN,aAAa;AAAA,QACb,KAAK,CAAC,EAAE,KAAK,MAAM,KAAK,SAAU,gBAAgB,MAAM,QAAQ;AAAA,MAClE;AAAA,IACF;AACA,eAAW,MAAM,YAAY;AAC3B,UAAI,SAAS,GAAG,KAAM;AACtB,UAAI;AACF,cAAM,OAAO,OAAO,KAAK,QAAQ,EAAE;AACnC,cAAM,OAAO,KAAK;AAClB,YAAI,GAAG,eAAe,CAAC,MAAM;AAC3B,qBAAW,KAAK,GAAG,GAAG,KAAK,MAAM,GAAG,EAAE,IAAI,CAAC,0BAAgB,GAAG;AAC9D,iBAAO;AAAA,QACT;AACA,YAAI,GAAG,gBAAgB,CAAC,QAAQ,OAAO,SAAS,YAAY,EAAE,QAAQ,QAAQ;AAC5E,qBAAW,KAAK,uCAA6B,GAAG;AAChD,iBAAO;AAAA,QACT;AACA,cAAM,SAAS,MAAM,GAAG,IAAI,SAAS,SAAY,EAAE,MAAM,KAAK,IAAI,EAAE,KAAK,CAAC;AAC1E,aAAK,KAAK,QAAmC,OAAO,KAAK,MAAM,GAAG;AAAA,MACpE,SAAS,GAAG;AACV,mBAAW,KAAM,EAAY,SAAS,GAAG;AAAA,MAC3C;AACA,aAAO;AAAA,IACT;AAGA,UAAM,UAA6C;AAAA,MACjD,EAAE,OAAO,4BAA4B,IAAI,QAAQ;AAAA,MACjD,EAAE,OAAO,0BAA0B,IAAI,MAAM;AAAA,MAC7C,EAAE,OAAO,6BAA6B,IAAI,SAAS;AAAA,MACnD,EAAE,OAAO,6BAA6B,IAAI,SAAS;AAAA,MACnD,EAAE,OAAO,6BAA6B,IAAI,SAAS;AAAA,IACrD;AACA,eAAW,QAAQ,SAAS;AAC1B,UAAI,KAAK,MAAM,KAAK,IAAI,GAAG;AACzB,YAAI;AACF,gBAAM,OAAO,gBAAgB,KAAK,IAAI,IAAI;AAC1C,gBAAM,SAAS,MAAM,KAAK,SAAU,IAAI,EAAE,UAAU,OAAO,CAAC,IAAI,EAAE,CAAC;AACnE,cAAI,CAAC,OAAO,IAAI;AACd,kBAAM,OAAO,OAAO,SAAS,sBAAsB,MAAM;AACzD,uBAAW,KAAK,OAAO,OAAO,MAAM,OAAO,MAAM,EAAE,MAAM,OAAO,KAAK,CAAC;AACtE,mBAAO;AAAA,UACT;AACA,gBAAM,QAAQ,OAAO,QAAQ,CAAC;AAC9B,mBAAS,KAAK,aAAa,OAAO,KAAK,EAAE,CAA4B;AAAA,QACvE,SAAS,GAAG;AACV,cAAI,aAAa,uBAAuB;AACtC,uBAAW,KAAK,EAAE,SAAS,KAAK,mBAAmB;AACnD,mBAAO;AAAA,UACT;AACA,qBAAW,KAAM,EAAY,SAAS,GAAG;AAAA,QAC3C;AACA,eAAO;AAAA,MACT;AAAA,IACF;AAEA,QAAI,SAAS,sBAAsB;AACjC,UAAI;AACF,cAAM,OAAe;AAAA,UACnB,IAAI;AAAA,UACJ,OAAO,OAAO,KAAK,KAAK;AAAA,UACxB,OAAO,OAAO,KAAK,KAAK;AAAA,UACxB,QAAQ,OAAO,KAAK,MAAM;AAAA,UAC1B,GAAI,KAAK,OAAO,EAAE,MAAM,KAAK,KAAgC,IAAI,CAAC;AAAA,QACpE;AACA,cAAM,SAAS,MAAM,KAAK,SAAU,IAAI,EAAE,UAAU,OAAO,CAAC,IAAI,EAAE,CAAC;AACnE,YAAI,CAAC,OAAO,IAAI;AACd,qBAAW,KAAK,OAAO,OAAO,KAAK,OAAO,IAAI;AAC9C,iBAAO;AAAA,QACT;AACA,iBAAS,GAAG;AAAA,MACd,SAAS,GAAG;AACV,mBAAW,KAAM,EAAY,SAAS,GAAG;AAAA,MAC3C;AACA,aAAO;AAAA,IACT;AAEA,UAAM,IAAI,KAAK,MAAM,+CAA+C;AACpE,QAAI,GAAG;AACL,UAAI;AACF,YAAI,EAAE,CAAC,MAAM,SAAS;AACpB,gBAAM,IAAI,MAAM,KAAK,WAAY;AAAA,YAC/B;AAAA,YACA,OAAO,KAAK,MAAM;AAAA,YAClB,OAAO,KAAK,GAAG;AAAA,UACjB;AACA,eAAK,KAAK,CAAuC;AAAA,QACnD,OAAO;AACL,gBAAM,IAAI,MAAM,KAAK,WAAY;AAAA,YAC/B;AAAA,YACA,OAAO,KAAK,MAAM;AAAA,YAClB,OAAO,KAAK,GAAG;AAAA,YACf,KAAK;AAAA,UACP;AACA,mBAAS,KAAK,EAAE,WAAW,EAAE,GAAG,CAAC;AAAA,QACnC;AAAA,MACF,SAAS,GAAG;AACV,mBAAW,KAAM,EAAY,SAAS,GAAG;AAAA,MAC3C;AACA,aAAO;AAAA,IACT;AAEA,WAAO;AAAA,EACT;AACF;AAEA,SAAS,gBAAgB,IAAsD,MAAuC;AACpH,UAAQ,IAAI;AAAA,IACV,KAAK;AACH,aAAO;AAAA,QACL,IAAI;AAAA,QACJ,OAAO,OAAO,KAAK,KAAK;AAAA,QACxB,GAAI,KAAK,OAAO,EAAE,MAAM,KAAK,KAAyC,IAAI,CAAC;AAAA,MAC7E;AAAA,IACF,KAAK;AACH,aAAO,EAAE,IAAI,OAAO,OAAO,OAAO,KAAK,KAAK,GAAG,IAAI,OAAO,KAAK,EAAE,EAAE;AAAA,IACrE,KAAK;AACH,aAAO;AAAA,QACL,IAAI;AAAA,QACJ,OAAO,OAAO,KAAK,KAAK;AAAA,QACxB,KAAK,KAAK;AAAA,MACZ;AAAA,IACF,KAAK;AACH,aAAO;AAAA,QACL,IAAI;AAAA,QACJ,OAAO,OAAO,KAAK,KAAK;AAAA,QACxB,IAAI,OAAO,KAAK,EAAE;AAAA,QAClB,OAAO,KAAK;AAAA,MACd;AAAA,IACF,KAAK;AACH,aAAO;AAAA,QACL,IAAI;AAAA,QACJ,OAAO,OAAO,KAAK,KAAK;AAAA,QACxB,IAAI,OAAO,KAAK,EAAE;AAAA,QAClB,MAAM,QAAQ,KAAK,IAAI;AAAA,MACzB;AAAA,EACJ;AACF;AAQA,SAAS,aAAa,GAAY,IAA0B;AAC1D,QAAM,OAAO;AACb,UAAQ,IAAI;AAAA,IACV,KAAK;AACH,aAAO,KAAK,OAAO,EAAE,MAAM,KAAK,KAAK,IAAI,CAAC;AAAA,IAC5C,KAAK;AAAA,IACL,KAAK;AAAA,IACL,KAAK;AACH,aAAO,KAAK,QAAQ,SAAY,EAAE,KAAK,KAAK,IAAI,IAAI,CAAC;AAAA,IACvD,KAAK;AACH,aAAO,OAAO,KAAK,YAAY,WAAW,EAAE,SAAS,KAAK,QAAQ,IAAI,CAAC;AAAA,IACzE;AACE,aAAO,CAAC;AAAA,EACZ;AACF;",
   "names": []
 }