@taicode/common-server 4.0.0-beta.1 → 4.0.0-beta.10

package/output/app/middleware/auth.js

@@ -1,190 +0,0 @@
-import { readConfigKey } from '../context.js';
-import { readServerIdentity } from '../core/identity.js';
-import { DOC_ROUTE_PREFIX } from '../core/openapi.js';
-import { SystemError, UserError } from '../errors.js';
-import { readRegisteredOperations, toPermissionOperations } from '../permission-operations.js';
-function readAccount(config) {
-    return readConfigKey(config, 'account');
-}
-function readServer(config) {
-    return readConfigKey(config, 'server');
-}
-function readCookieNames(config, fallback) {
-    if (fallback && fallback.length > 0) {
-        return fallback;
-    }
-    const configured = readServer(config)?.cookieNames;
-    return Array.isArray(configured) && configured.length > 0 ? configured : ['token'];
-}
-function extractAuth(request, cookieNames) {
-    const authorization = request.headers.authorization;
-    if (typeof authorization === 'string' && authorization.startsWith('Bearer ')) {
-        return { token: authorization.slice('Bearer '.length).trim() };
-    }
-    if (typeof authorization === 'string' && authorization.startsWith('apikey-')) {
-        return { apiKey: authorization.slice('apikey-'.length).trim() };
-    }
-    for (const name of cookieNames) {
-        const value = request.cookies?.[name];
-        if (typeof value === 'string' && value) {
-            return { token: value };
-        }
-    }
-    return {};
-}
-/** 框架默认 skip：OPTIONS → 未匹配路由 → NoLoginRequired → docPath */
-export function defaultAuthSkip(request, ctx) {
-    void ctx;
-    if (request.method === 'OPTIONS') {
-        return true;
-    }
-    const url = request.routeOptions?.url;
-    if (!url) {
-        return true;
-    }
-    if (url.startsWith(DOC_ROUTE_PREFIX)) {
-        return true;
-    }
-    if (request.routeOptions?.config?.accessControls?.includes('NoLoginRequired')) {
-        return true;
-    }
-    return false;
-}
-async function defaultVerify(input, account) {
-    const serviceUrl = account?.serviceUrl;
-    if (!serviceUrl) {
-        // 内置 verify 依赖 account `serviceUrl`；缺失时抛明确错误
-        // （不再 `new URL(path, undefined)` 抛 TypeError）
-        throw new SystemError('CONFIG_UNAVAILABLE', undefined, 'account 未配置 serviceUrl，无法使用内置 verify（可用 verify 选项整体替换校验实现）');
-    }
-    const target = new URL('/gateway/verify', serviceUrl);
-    const response = await fetch(target, {
-        method: 'POST',
-        headers: { 'content-type': 'application/json' },
-        body: JSON.stringify({
-            token: input.token,
-            apiKey: input.apiKey,
-            service: input.service,
-            operation: input.operation,
-            resource: input.resource,
-            accessControls: input.accessControls,
-            metadata: input.metadata,
-        }),
-    });
-    const payload = (await response.json());
-    if (!response.ok || payload.status !== 'SUCCESS') {
-        throw new UserError(payload.status ?? 'AUTH_FAILED', undefined, payload.message ?? '');
-    }
-    return { user: payload.data?.user, token: payload.data?.token ?? input.token };
-}
-/** account 权限操作注册端点（固定路径） */
-const PERMISSION_OPERATION_REGISTER_PATH = '/permission/operation/register';
-/**
- * 框架内置 account HTTP 客户端：`POST /permission/operation/register`。
- *
- * 成功判定与 `/gateway/verify` 同口径：HTTP ok **且** 信封 `status === 'SUCCESS'`。
- */
-async function requestPermissionRegistration(account, body) {
-    const target = new URL(PERMISSION_OPERATION_REGISTER_PATH, account.serviceUrl);
-    const response = await fetch(target, {
-        method: 'POST',
-        headers: { 'content-type': 'application/json' },
-        body: JSON.stringify(body),
-    });
-    const payload = (await response.json().catch(() => undefined));
-    if (!response.ok || payload?.status !== 'SUCCESS') {
-        throw new SystemError('EXTERNAL_SERVICE_ERROR', { cause: response }, payload?.message ?? `权限操作注册失败（HTTP ${response.status}）`);
-    }
-}
-export function createAuthMiddleware(ctx, options = {}) {
-    const skip = options.skip ?? defaultAuthSkip;
-    const mapError = options.mapError ??
-        ((error) => UserError.is(error) || SystemError.is(error)
-            ? error
-            : new SystemError('EXTERNAL_SERVICE_ERROR', { cause: error }));
-    return {
-        name: 'auth',
-        register: (app) => {
-            const identity = readServerIdentity(app);
-            const service = identity?.service ?? '';
-            app.addHook('preValidation', async (request) => {
-                if (skip(request, ctx)) {
-                    return;
-                }
-                const account = readAccount(ctx.config);
-                // account `serviceUrl` 门槛仅作用于内置 verify：自定义 verify 不受约束，仍照常校验
-                if (!options.verify && !account?.serviceUrl) {
-                    return;
-                }
-                const { token, apiKey } = extractAuth(request, readCookieNames(ctx.config, options.cookieNames));
-                if (!token && !apiKey) {
-                    throw new UserError('INVALID_TOKEN', undefined, '缺少访问凭证');
-                }
-                const verifyInput = {
-                    token,
-                    apiKey,
-                    service,
-                    // 权限目录同源、与 url 解耦：优先路由 `schema.operationId`，未声明时回落 url
-                    operation: request.routeOptions?.schema?.operationId ?? request.routeOptions?.url,
-                    resource: request.params,
-                    accessControls: request.routeOptions?.config?.accessControls,
-                    metadata: {
-                        requestId: request.id,
-                        method: request.method,
-                        url: request.url,
-                        ip: request.ip,
-                        ips: request.ips,
-                        userAgent: request.headers['user-agent'],
-                        referrer: request.headers.referer,
-                    },
-                };
-                try {
-                    const result = options.verify
-                        ? await options.verify(verifyInput, ctx)
-                        : await defaultVerify(verifyInput, account);
-                    request.user = result.user;
-                    request.token = result.token;
-                }
-                catch (error) {
-                    throw mapError(error);
-                }
-            });
-            if (options.registerPermissions === false) {
-                return;
-            }
-            app.addHook('onReady', async () => {
-                let account;
-                try {
-                    account = readAccount(ctx.config);
-                }
-                catch (error) {
-                    if (SystemError.is(error) && error.type === 'CONFIG_UNAVAILABLE') {
-                        // 出 spec 路径（generateOpenApi 不跑 config 槽位）：配置不可用 → 跳过自注册
-                        return;
-                    }
-                    ctx.log.error({ error }, '[PermissionOperation][auth] read account config failed');
-                    return;
-                }
-                // 未配置 account `serviceUrl`（含 account 自身）→ 不注册
-                if (!account?.serviceUrl) {
-                    return;
-                }
-                try {
-                    const operations = toPermissionOperations(readRegisteredOperations(app));
-                    if (operations.length === 0) {
-                        return;
-                    }
-                    await requestPermissionRegistration(account, {
-                        service,
-                        version: identity?.version ?? '',
-                        operations,
-                    });
-                }
-                catch (error) {
-                    // 失败不致命：只记日志、继续启动（不得抛错中断）
-                    ctx.log.error({ error }, '[PermissionOperation][auth] self-registration failed');
-                }
-            });
-        },
-    };
-}

package/output/app/middleware/context.d.ts

@@ -1,13 +0,0 @@
-import type { MiddlewareUnit } from '../types.js';
-/**
- * 标准中间件单元 `context`（可替换）。
- *
- * `decorateRequest(decorateAs, ...)`（默认 `'ctx'`），消费既有 `context/createContext`。
- * 装饰必须在 `ready()` 之前注册（`register` 期完成）。
- */
-export interface ContextMiddlewareOptions {
-    /** 默认 `'ctx'` */
-    decorateAs?: string;
-}
-export declare function createContextMiddleware(options?: ContextMiddlewareOptions): MiddlewareUnit;
-//# sourceMappingURL=context.d.ts.map

package/output/app/middleware/context.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"context.d.ts","sourceRoot":"","sources":["../../../source/app/middleware/context.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,aAAa,CAAA;AAEjD;;;;;GAKG;AAEH,MAAM,WAAW,wBAAwB;IACvC,iBAAiB;IACjB,UAAU,CAAC,EAAE,MAAM,CAAA;CACpB;AAED,wBAAgB,uBAAuB,CAAC,OAAO,GAAE,wBAA6B,GAAG,cAAc,CAa9F"}

package/output/app/middleware/context.js

@@ -1,15 +0,0 @@
-import { createContext } from '../../context/index.js';
-export function createContextMiddleware(options = {}) {
-    const decorateAs = options.decorateAs ?? 'ctx';
-    return {
-        name: 'context',
-        register: (app) => {
-            app.decorateRequest(decorateAs, null);
-            app.addHook('onRequest', (request, _reply, done) => {
-                ;
-                request[decorateAs] = createContext(request);
-                done();
-            });
-        },
-    };
-}

package/output/app/middleware/cors.d.ts

@@ -1,14 +0,0 @@
-import type { MiddlewareContext, MiddlewareUnit } from '../types.js';
-/**
- * 标准中间件单元 `cors`（可替换）。
- *
- * 不传 `origins` → **每次请求现读**配置的 `cors` 键（配置加载后即生效，不得缓存）；
- * **未配置即放行任意源 + 首次请求 warn 一次**（对齐四家现状）。构造期**不读配置**，
- * 故出 spec 路径（配置不可用）不受影响。
- */
-export interface CorsMiddlewareOptions {
-    origins?: string[] | '*';
-    credentials?: boolean;
-}
-export declare function createCorsMiddleware<C = unknown, S = unknown>(ctx: MiddlewareContext<C, S>, options?: CorsMiddlewareOptions): MiddlewareUnit;
-//# sourceMappingURL=cors.d.ts.map

package/output/app/middleware/cors.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"cors.d.ts","sourceRoot":"","sources":["../../../source/app/middleware/cors.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,iBAAiB,EAAE,cAAc,EAAE,MAAM,aAAa,CAAA;AAEpE;;;;;;GAMG;AAEH,MAAM,WAAW,qBAAqB;IACpC,OAAO,CAAC,EAAE,MAAM,EAAE,GAAG,GAAG,CAAA;IACxB,WAAW,CAAC,EAAE,OAAO,CAAA;CACtB;AAOD,wBAAgB,oBAAoB,CAAC,CAAC,GAAG,OAAO,EAAE,CAAC,GAAG,OAAO,EAAE,GAAG,EAAE,iBAAiB,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,OAAO,GAAE,qBAA0B,GAAG,cAAc,CA6BhJ"}

package/output/app/middleware/cors.js

@@ -1,30 +0,0 @@
-import cors from '@fastify/cors';
-import { readConfigKey } from '../context.js';
-export function createCorsMiddleware(ctx, options = {}) {
-    return {
-        name: 'cors',
-        register: async (app) => {
-            let warned = false;
-            // 请求期现读：`cors` 配置变化立即生效；构造期不读
-            const resolveOrigins = () => {
-                const configured = readConfigKey(ctx.config, 'cors');
-                return options.origins ?? (configured?.enabled ? configured.origins : undefined);
-            };
-            await app.register(cors, {
-                origin: (origin, callback) => {
-                    const origins = resolveOrigins();
-                    if (origins === undefined || origins === '*') {
-                        if (!warned) {
-                            warned = true;
-                            ctx.log.warn({}, '[middleware] cors origins not configured; allowing any origin');
-                        }
-                        callback(null, true);
-                        return;
-                    }
-                    callback(null, origins.includes(origin ?? ''));
-                },
-                credentials: options.credentials ?? true,
-            });
-        },
-    };
-}

package/output/app/middleware/index.d.ts

@@ -1,17 +0,0 @@
-import type { MiddlewareContext, MiddlewareUnit } from '../types.js';
-export { createCorsMiddleware } from './cors.js';
-export { createContextMiddleware } from './context.js';
-export { createAuthMiddleware, defaultAuthSkip } from './auth.js';
-export { createRateLimitMiddleware } from './rate-limit.js';
-export type { CorsMiddlewareOptions } from './cors.js';
-export type { ContextMiddlewareOptions } from './context.js';
-export type { AccountIntegrationConfig, AuthMiddlewareOptions, AuthSkip, AuthVerifyInput, AuthVerifyMetadata, AuthVerifyResult, } from './auth.js';
-export type { RateLimitMiddlewareOptions } from './rate-limit.js';
-/**
- * 默认中间件预设：`[cors, context, auth]`。
- *
- * 顺序 `cors → context → auth` 只是**预设内容**，不是框架常量：可 `...defaultMiddlewares(ctx)`
- * 后替换 / 插入 / 删除任意项。`rateLimit` **不在**预设内（唯一一个默认不装的项）。
- */
-export declare function defaultMiddlewares<C = unknown, S = unknown>(ctx: MiddlewareContext<C, S>): MiddlewareUnit[];
-//# sourceMappingURL=index.d.ts.map

package/output/app/middleware/index.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../source/app/middleware/index.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,iBAAiB,EAAE,cAAc,EAAE,MAAM,aAAa,CAAA;AAEpE,OAAO,EAAE,oBAAoB,EAAE,MAAM,WAAW,CAAA;AAChD,OAAO,EAAE,uBAAuB,EAAE,MAAM,cAAc,CAAA;AACtD,OAAO,EAAE,oBAAoB,EAAE,eAAe,EAAE,MAAM,WAAW,CAAA;AACjE,OAAO,EAAE,yBAAyB,EAAE,MAAM,iBAAiB,CAAA;AAE3D,YAAY,EAAE,qBAAqB,EAAE,MAAM,WAAW,CAAA;AACtD,YAAY,EAAE,wBAAwB,EAAE,MAAM,cAAc,CAAA;AAC5D,YAAY,EACV,wBAAwB,EACxB,qBAAqB,EACrB,QAAQ,EACR,eAAe,EACf,kBAAkB,EAClB,gBAAgB,GACjB,MAAM,WAAW,CAAA;AAClB,YAAY,EAAE,0BAA0B,EAAE,MAAM,iBAAiB,CAAA;AAEjE;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAAC,CAAC,GAAG,OAAO,EAAE,CAAC,GAAG,OAAO,EACzD,GAAG,EAAE,iBAAiB,CAAC,CAAC,EAAE,CAAC,CAAC,GAC3B,cAAc,EAAE,CAElB"}

package/output/app/middleware/index.js

@@ -1,16 +0,0 @@
-import { createAuthMiddleware } from './auth.js';
-import { createContextMiddleware } from './context.js';
-import { createCorsMiddleware } from './cors.js';
-export { createCorsMiddleware } from './cors.js';
-export { createContextMiddleware } from './context.js';
-export { createAuthMiddleware, defaultAuthSkip } from './auth.js';
-export { createRateLimitMiddleware } from './rate-limit.js';
-/**
- * 默认中间件预设：`[cors, context, auth]`。
- *
- * 顺序 `cors → context → auth` 只是**预设内容**，不是框架常量：可 `...defaultMiddlewares(ctx)`
- * 后替换 / 插入 / 删除任意项。`rateLimit` **不在**预设内（唯一一个默认不装的项）。
- */
-export function defaultMiddlewares(ctx) {
-    return [createCorsMiddleware(ctx), createContextMiddleware(), createAuthMiddleware(ctx)];
-}

package/output/app/middleware/rate-limit.d.ts

@@ -1,24 +0,0 @@
-import type { MiddlewareContext, MiddlewareUnit } from '../types.js';
-import type { RateLimitStore } from '../../rate-limiter/types.js';
-/**
- * 标准中间件单元 `rateLimit`（可替换；**不在默认预设内**）。
- *
- * 路由级限流；存储后端由调用方注入（缺省进程内 memory）。`TOO_MANY_REQUESTS` 经 `UserError`
- * 仍映射 **400**。路由未声明 `config.rateLimit` 且未给 `defaultLimit` 时该项空转。
- *
- * 注：中间件的 ctx 看不到 `resources`（中间件不得直连数据层），因此 Redis store 需由调用方
- * 在 `services` 侧构造后注入（`store`），框架不再自行探测 Redis。
- */
-export interface RateLimitMiddlewareOptions {
-    /** 存储后端（缺省进程内 memory） */
-    store?: RateLimitStore;
-    /** 限流键前缀（缺省 `<service>:`） */
-    keyPrefix?: string;
-    /** 缺省规则：路由未声明 `config.rateLimit` 时使用 */
-    defaultLimit?: {
-        max: number;
-        windowMs: number;
-    };
-}
-export declare function createRateLimitMiddleware<C = unknown, S = unknown>(ctx: MiddlewareContext<C, S>, options?: RateLimitMiddlewareOptions): MiddlewareUnit;
-//# sourceMappingURL=rate-limit.d.ts.map

package/output/app/middleware/rate-limit.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"rate-limit.d.ts","sourceRoot":"","sources":["../../../source/app/middleware/rate-limit.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,iBAAiB,EAAE,cAAc,EAAE,MAAM,aAAa,CAAA;AACpE,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,6BAA6B,CAAA;AAGjE;;;;;;;;GAQG;AAEH,MAAM,WAAW,0BAA0B;IACzC,yBAAyB;IACzB,KAAK,CAAC,EAAE,cAAc,CAAA;IACtB,6BAA6B;IAC7B,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,wCAAwC;IACxC,YAAY,CAAC,EAAE;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAA;KAAE,CAAA;CACjD;AAsBD,wBAAgB,yBAAyB,CAAC,CAAC,GAAG,OAAO,EAAE,CAAC,GAAG,OAAO,EAAE,GAAG,EAAE,iBAAiB,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,OAAO,GAAE,0BAA+B,GAAG,cAAc,CA0B1J"}

package/output/app/middleware/rate-limit.js

@@ -1,46 +0,0 @@
-import { createRateLimitKey, RateLimiter } from '../../rate-limiter/rate-limiter.js';
-import { MemoryRateLimitStore } from '../../rate-limiter/memory-store.js';
-import { readServerIdentity } from '../core/identity.js';
-import { UserError } from '../errors.js';
-function resolveRule(request, defaultRule) {
-    const configured = request.routeOptions?.config?.rateLimit;
-    return configured ?? defaultRule;
-}
-function buildKeys(request, keys) {
-    return keys.map((key) => {
-        if (key === 'ip') {
-            return `ip:${request.ip}`;
-        }
-        if (key === 'user') {
-            return `user:${String(request.user?.id ?? 'anonymous')}`;
-        }
-        if (key === 'path') {
-            return `path:${request.routeOptions?.url ?? request.url}`;
-        }
-        return `${key}:${String(request[key] ?? '')}`;
-    });
-}
-export function createRateLimitMiddleware(ctx, options = {}) {
-    void ctx;
-    return {
-        name: 'rateLimit',
-        register: (app) => {
-            const limiter = new RateLimiter({ store: options.store ?? new MemoryRateLimitStore() });
-            const prefix = options.keyPrefix ?? `${readServerIdentity(app)?.service ?? ''}:`;
-            const defaultRule = options.defaultLimit
-                ? { limit: options.defaultLimit.max, window: options.defaultLimit.windowMs / 1000 }
-                : undefined;
-            app.addHook('preValidation', async (request) => {
-                const rule = resolveRule(request, defaultRule);
-                if (!rule) {
-                    return;
-                }
-                const keys = buildKeys(request, rule.keys ?? ['ip']).map((key) => createRateLimitKey(prefix, key));
-                const result = await limiter.checkMultiLimit(keys, { limit: rule.limit, window: rule.window });
-                if (!result.allowed) {
-                    throw new UserError('TOO_MANY_REQUESTS', undefined, '请求过于频繁');
-                }
-            });
-        },
-    };
-}

package/output/app/middleware-order.test.d.ts

@@ -1,2 +0,0 @@
-export {};
-//# sourceMappingURL=middleware-order.test.d.ts.map

package/output/app/middleware-order.test.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"middleware-order.test.d.ts","sourceRoot":"","sources":["../../source/app/middleware-order.test.ts"],"names":[],"mappings":""}

package/output/app/middleware-order.test.js

@@ -1,148 +0,0 @@
-import { describe, expect, expectTypeOf, it } from 'vitest';
-import { defineServer, startServer } from './entries.js';
-import { defaultMiddlewares } from './middleware/index.js';
-/**
- * 中间件数组序（N1 §1 / §4）。
- *
- * `middlewares(ctx)` 返回**有序数组**，框架**严格按数组序**注册（无键、无枚举、无内置相对顺序魔法）；
- * `rateLimit` **不在**默认预设内。中间件单元是 `{ name?, register(app) }`：**不参与生命周期**。
- */
-const fakeMiddlewareContext = {
-    app: {},
-    log: { debug: () => { }, info: () => { }, warn: () => { }, error: () => { } },
-    services: {},
-    config: {},
-};
-describe('ctx 可见性（N1 §2）', () => {
-    it('MiddlewareContext 有 app / log / services / config；没有 resources / env / disposer', () => {
-        expectTypeOf().toHaveProperty('app');
-        expectTypeOf().toHaveProperty('services');
-        expectTypeOf().toHaveProperty('config');
-        // @ts-expect-error 中间件看不到 resources（禁直连数据层）
-        void 0..resources;
-        // @ts-expect-error 中间件看不到 env
-        void 0..env;
-        // @ts-expect-error 中间件看不到 disposer（disposer 只属 services）
-        void 0..disposer;
-    });
-});
-describe('默认预设', () => {
-    it('defaultMiddlewares 为 [cors, context, auth]，且不含 rateLimit', () => {
-        const units = defaultMiddlewares(fakeMiddlewareContext);
-        expect(units.map((unit) => unit.name)).toEqual(['cors', 'context', 'auth']);
-        expect(units.map((unit) => unit.name)).not.toContain('rateLimit');
-    });
-});
-describe('数组序即注册序', () => {
-    it('严格按数组序执行每一项注册的钩子', async () => {
-        const calls = [];
-        const makeUnit = (name) => ({
-            name,
-            register: (app) => {
-                app.addHook('preValidation', (_request, _reply, done) => {
-                    calls.push(name);
-                    done();
-                });
-            },
-        });
-        const server = defineServer({
-            app: { service: 'middleware-order', title: 'Middleware Order', version: '1.0.0' },
-            resources: () => ({}),
-            config: () => ({}),
-            services: () => ({}),
-            middlewares: () => [makeUnit('third'), makeUnit('first'), makeUnit('second')],
-            routers: (ctx) => {
-                ctx.app.get('/ping', () => ({ pong: true }));
-            },
-        });
-        const app = await startServer(server, { listen: false });
-        const response = await app.inject({ method: 'GET', url: '/ping' });
-        expect(response.statusCode).toBe(200);
-        expect(calls).toEqual(['third', 'first', 'second']);
-        await app.close();
-    });
-    it('ctx.services 与 services 槽位产物是同一个实例（M5 强类型）', async () => {
-        const servicesValue = { user: { find: (id) => `user:${id}` } };
-        let seen;
-        let seenFind;
-        const server = defineServer({
-            app: { service: 'middleware-services', title: 'Middleware Services', version: '1.0.0' },
-            resources: () => ({}),
-            config: () => ({}),
-            services: () => servicesValue,
-            middlewares: (ctx) => {
-                seen = ctx.services;
-                seenFind = ctx.services.user.find;
-                return [];
-            },
-            routers: (ctx) => {
-                ctx.app.get('/ping', () => ({ pong: true }));
-            },
-        });
-        const app = await startServer(server, { listen: false });
-        expect(seen).toBe(servicesValue);
-        expect(seenFind).toBe(servicesValue.user.find);
-        await app.close();
-    });
-    it('注册的钩子返回 reply → 终止链（后续单元不执行）', async () => {
-        const calls = [];
-        const server = defineServer({
-            app: { service: 'middleware-terminate', title: 'Middleware Terminate', version: '1.0.0' },
-            resources: () => ({}),
-            config: () => ({}),
-            services: () => ({}),
-            middlewares: () => [
-                {
-                    name: 'short',
-                    register: (app) => {
-                        app.addHook('preValidation', (_request, reply, done) => {
-                            calls.push('short');
-                            void reply.status(418).send({ stopped: true });
-                            done();
-                        });
-                    },
-                },
-                {
-                    name: 'after',
-                    register: (app) => {
-                        app.addHook('preValidation', (_request, _reply, done) => {
-                            calls.push('after');
-                            done();
-                        });
-                    },
-                },
-            ],
-            routers: (ctx) => {
-                ctx.app.get('/ping', () => ({ pong: true }));
-            },
-        });
-        const app = await startServer(server, { listen: false });
-        const response = await app.inject({ method: 'GET', url: '/ping' });
-        expect(response.statusCode).toBe(418);
-        expect(calls).toEqual(['short']);
-        await app.close();
-    });
-    it('出 spec 路径也注册中间件（保证 schema 一致）', async () => {
-        const { generateOpenApi } = await import('./entries.js');
-        const calls = [];
-        const server = defineServer({
-            app: { service: 'middleware-openapi', title: 'Middleware OpenApi', version: '1.0.0' },
-            resources: () => ({}),
-            config: () => ({}),
-            services: () => ({}),
-            middlewares: () => [
-                {
-                    name: 'probe',
-                    register: () => {
-                        calls.push('register:probe');
-                    },
-                },
-            ],
-            routers: (ctx) => {
-                ctx.app.get('/ping', () => ({ pong: true }));
-            },
-        });
-        await generateOpenApi(server);
-        expect(calls).toEqual(['register:probe']);
-    });
-});

package/output/app/permission-operations.d.ts

@@ -1,48 +0,0 @@
-import type { FastifyInstance } from 'fastify';
-/**
- * 权限操作提取（设计 §5.2）——**框架内置**。
- *
- * 两条来源：
- *
- * 1. **路由注册表**（`installRegisteredOperations` / `readRegisteredOperations`）：core 装配期
- *    在 root 挂 `onRoute` 钩子，采集每条路由的 `{ method, url, operationId, summary, description, tags }`。
- *    `auth` 的权限自注册只读这张表，**不依赖 `app.swagger()`**（swagger 只负责出文档）。
- * 2. **OpenAPI 文档提取**（`extractPermissionOperations`）：从 `paths` 提取。
- *    各仓的 `onReady` 自注册（如 account 作为签发方走进程内调用）用它与 `app.swagger()` 配合，
- *    **替代各仓自写实现**（已从公共面导出）。
- *
- * 目录元素形状（`{ operation, summary?, description?, tags? }`）与各仓原自写实现一致：
- *
- * - 缺 `operationId` 的条目（如 `parameters` / vendor 扩展 / 文档路由）**跳过**；
- * - 缺 `paths` / 空文档 → 返回 `[]`；
- * - `summary` / `description` / `tags` 缺省分别归一为 `''` / `''` / `[]`。
- */
-/** 单条权限操作（对齐 account `POST /permission/operation/register` 的 `operations` 元素） */
-export interface PermissionOperation {
-    operation: string;
-    summary: string;
-    description: string;
-    tags: string[];
-}
-/** 单条已注册路由的采集项（`onRoute` 期收集；`operationId` 缺省表示该路由未声明） */
-export interface RegisteredOperation {
-    method: string;
-    url: string;
-    operationId?: string;
-    summary?: string;
-    description?: string;
-    tags?: string[];
-}
-/**
- * 在 root 挂 `onRoute` 钩子，收集框架自身可见的**路由注册表**（设计 §5.2）。
- *
- * 必须在**路由注册之前**（core 装配期）调用：钩子挂在 root，随后 `routers` 阶段注册的路由逐条被采集。
- * 该表与 swagger 解耦：swagger 只负责出文档，`auth` 的权限自注册只读这张表。
- */
-export declare function installRegisteredOperations(app: FastifyInstance): void;
-/** 读取 root `onRoute` 采集的路由注册表；未安装（未走框架装配）时返回空数组。 */
-export declare function readRegisteredOperations(app: FastifyInstance): RegisteredOperation[];
-/** 从路由注册表筛出声明了 `operationId` 的项，归一为权限操作目录元素 */
-export declare function toPermissionOperations(operations: readonly RegisteredOperation[]): PermissionOperation[];
-export declare function extractPermissionOperations(openApiSpec: unknown): PermissionOperation[];
-//# sourceMappingURL=permission-operations.d.ts.map

package/output/app/permission-operations.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"permission-operations.d.ts","sourceRoot":"","sources":["../../source/app/permission-operations.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAe,MAAM,SAAS,CAAA;AAE3D;;;;;;;;;;;;;;;;;GAiBG;AAEH,iFAAiF;AACjF,MAAM,WAAW,mBAAmB;IAClC,SAAS,EAAE,MAAM,CAAA;IACjB,OAAO,EAAE,MAAM,CAAA;IACf,WAAW,EAAE,MAAM,CAAA;IACnB,IAAI,EAAE,MAAM,EAAE,CAAA;CACf;AAeD,0DAA0D;AAC1D,MAAM,WAAW,mBAAmB;IAClC,MAAM,EAAE,MAAM,CAAA;IACd,GAAG,EAAE,MAAM,CAAA;IACX,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,IAAI,CAAC,EAAE,MAAM,EAAE,CAAA;CAChB;AAaD;;;;;GAKG;AACH,wBAAgB,2BAA2B,CAAC,GAAG,EAAE,eAAe,GAAG,IAAI,CA+BtE;AAED,oDAAoD;AACpD,wBAAgB,wBAAwB,CAAC,GAAG,EAAE,eAAe,GAAG,mBAAmB,EAAE,CAIpF;AAED,+CAA+C;AAC/C,wBAAgB,sBAAsB,CAAC,UAAU,EAAE,SAAS,mBAAmB,EAAE,GAAG,mBAAmB,EAAE,CAcxG;AAED,wBAAgB,2BAA2B,CAAC,WAAW,EAAE,OAAO,GAAG,mBAAmB,EAAE,CAoBvF"}