@visiblebase/core 0.2.0 → 0.2.3

package/README.md

@@ -1,6 +1,6 @@
-# @visiblebase/base
+# @visiblebase/core
 
-`@visiblebase/base` 是 VisibleBase 的服务端 Runtime。
+`@visiblebase/core` 是 VisibleBase 的服务端 Runtime。
 
 它负责这些共用能力：
 
@@ -13,7 +13,7 @@
 ## 安装
 
 ```bash
-pnpm add @visiblebase/base
+pnpm add @visiblebase/core
 ```
 
 需要 Node `>=22.13.0`。
@@ -21,7 +21,7 @@ pnpm add @visiblebase/base
 ## 最小示例
 
 ```ts
-import { Base } from "@visiblebase/base";
+import { Base } from "@visiblebase/core";
 
 const base = new Base();
 
@@ -70,7 +70,7 @@ console.log(`VisibleBase listening on http://${server.host}:${server.port}`);
 
 ```ts
 import { sqliteTable, text } from "drizzle-orm/sqlite-core";
-import { Base } from "@visiblebase/base";
+import { Base } from "@visiblebase/core";
 
 const notes = sqliteTable("notes", {
   id: text("id").primaryKey(),
@@ -96,14 +96,14 @@ const rows = await base.table("notes").select();
 插件用于把多个 client 产品会复用的 Base 能力封装起来，例如用户注册登录、支付、订阅权益、usage 扣费或通知。
 
 ```ts
-import { Base } from "@visiblebase/base";
-import { authPlugin } from "@visiblebase/plugin-auth";
+import { Base } from "@visiblebase/core";
+import { accountsPlugin } from "@visiblebase/plugin-accounts";
 import { usagePlugin } from "@visiblebase/plugin-usage";
 import { stripePaymentPlugin } from "@visiblebase/plugin-payment-stripe";
 
 const base = new Base({
   plugins: [
-    authPlugin(),
+    accountsPlugin(),
     usagePlugin(),
     stripePaymentPlugin(),
   ],
@@ -114,10 +114,11 @@ Base 使用者不需要为官方插件定义数据库表。插件包内部会声
 
 `models` 和 `products` 也是默认内置插件。你不传 `plugins` 时，Base 会自动启用它们；你传入其他插件时，它们仍然保留；如果你传入同 ID 的 `models` 或 `products` 插件，则会替换默认实现。
 
-插件路由按鉴权模式挂载：
+插件路由统一挂到同一个 `/v1/{pluginId}/{path}` 空间。
 
-- `auth: "public"` 和 `auth: "user"`：`/v1/plugins/{pluginId}/{path}`
-- `auth: "admin"`：`/api/admin/plugins/{pluginId}/{path}`
+- `auth` 不传：默认要求 `user`
+- `auth: ["admin"]`：只允许 admin
+- `auth: []`：免登录
 
 如果你在开发插件，插件可以声明自己的 `schema`，并通过 `ctx.table(name)` 读写插件表；也可以通过 `ctx.hook.before()`、`ctx.hook.after()` 和 `ctx.hook.onError()` 介入 service 调用。
 

package/bin/core/auth/authenticator.d.ts

@@ -6,14 +6,14 @@
  *
  * TokenSigner 实例通过 getSigner() 缓存，避免重复 new TokenSigner(key)。
  */
-import type { RouteAuth } from "../../service/service.js";
+import { type RouteAuth, type RouteIdentity } from "../../service/service.js";
 import type { EnvProvider } from "../runtime.js";
 import type { CreateUserTokenInput, UserTokenPayload, UserTokenIssueResult, RuntimeUser } from "./types.js";
 /** 鉴权级别 */
 /** 鉴权结果 */
 export interface AuthResult {
     /** 鉴权后的实际级别 */
-    level: RouteAuth;
+    level: RouteIdentity;
     /** 解析出的用户信息（user 级别时可用） */
     user?: RuntimeUser;
     /** 解析出的 Product 信息（user 级别时可用） */
@@ -43,13 +43,24 @@ export declare class Authenticator {
      */
     private getSigner;
     /**
-     * 对请求执行鉴权。
+     * 解析请求身份。
      *
      * @param request - 原始 HTTP Request
-     * @param required - 要求的鉴权级别
-     * @returns 鉴权结果（含 user/product 信息）
+     * @returns 当前请求身份；无 token 或 token 无效时返回 guest
      */
-    authenticate(request: Request, required: RouteAuth): Promise<AuthResult>;
+    resolve(request: Request): Promise<AuthResult>;
+    /**
+     * 根据 action 的 auth 配置判断当前身份是否允许继续。
+     *
+     * @param result - 当前已解析身份
+     * @param required - action 声明的允许身份集合
+     * @returns 通过授权后的身份结果
+     */
+    authorize(result: AuthResult, required?: RouteAuth): AuthResult;
+    /**
+     * 对请求执行鉴权并强制满足 action 的 auth 配置。
+     */
+    authenticate(request: Request, required?: RouteAuth): Promise<AuthResult>;
     /**
      * 签发 user_token（验证 product 状态后签发）。
      *

package/bin/core/auth/authenticator.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"authenticator.d.ts","sourceRoot":"","sources":["../../../src/core/auth/authenticator.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAIH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,0BAA0B,CAAC;AAC1D,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAEjD,OAAO,KAAK,EAAE,oBAAoB,EAAE,gBAAgB,EAAE,oBAAoB,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAE5G,WAAW;AACX,WAAW;AACX,MAAM,WAAW,UAAU;IACzB,eAAe;IACf,KAAK,EAAE,SAAS,CAAC;IACjB,2BAA2B;IAC3B,IAAI,CAAC,EAAE,WAAW,CAAC;IACnB,kCAAkC;IAClC,OAAO,CAAC,EAAE;QAAE,UAAU,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC;CAClD;AAED,YAAY;AACZ,qBAAa,aAAa;IAKtB,OAAO,CAAC,GAAG;IACX,OAAO,CAAC,KAAK;IALf,yBAAyB;IACzB,OAAO,CAAC,WAAW,CAAC,CAAc;gBAGxB,GAAG,EAAE,WAAW,EAChB,KAAK,EAAE,MAAM,OAAO,CAAC;QAAE,OAAO,EAAE;YAAE,GAAG,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC;gBAAE,UAAU,EAAE,MAAM,CAAC;gBAAC,MAAM,EAAE,MAAM,CAAA;aAAE,GAAG,SAAS,CAAC,CAAA;SAAE,CAAA;KAAE,CAAC;IAG7H;;;;OAIG;IACH,OAAO,CAAC,SAAS;IASjB;;;;;;OAMG;IACG,YAAY,CAAC,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,SAAS,GAAG,OAAO,CAAC,UAAU,CAAC;IAgC9E;;;;;OAKG;IACG,WAAW,CAAC,KAAK,EAAE,oBAAoB,GAAG,OAAO,CAAC,oBAAoB,CAAC;IAiB7E;;;;;OAKG;IACG,WAAW,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,CAAC;CAG5D"}
+{"version":3,"file":"authenticator.d.ts","sourceRoot":"","sources":["../../../src/core/auth/authenticator.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAIH,OAAO,EAAsB,KAAK,SAAS,EAAE,KAAK,aAAa,EAAE,MAAM,0BAA0B,CAAC;AAClG,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAEjD,OAAO,KAAK,EAAE,oBAAoB,EAAE,gBAAgB,EAAE,oBAAoB,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAE5G,WAAW;AACX,WAAW;AACX,MAAM,WAAW,UAAU;IACzB,eAAe;IACf,KAAK,EAAE,aAAa,CAAC;IACrB,2BAA2B;IAC3B,IAAI,CAAC,EAAE,WAAW,CAAC;IACnB,kCAAkC;IAClC,OAAO,CAAC,EAAE;QAAE,UAAU,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC;CAClD;AAED,YAAY;AACZ,qBAAa,aAAa;IAKtB,OAAO,CAAC,GAAG;IACX,OAAO,CAAC,KAAK;IALf,yBAAyB;IACzB,OAAO,CAAC,WAAW,CAAC,CAAc;gBAGxB,GAAG,EAAE,WAAW,EAChB,KAAK,EAAE,MAAM,OAAO,CAAC;QAAE,OAAO,EAAE;YAAE,GAAG,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC;gBAAE,UAAU,EAAE,MAAM,CAAC;gBAAC,MAAM,EAAE,MAAM,CAAA;aAAE,GAAG,SAAS,CAAC,CAAA;SAAE,CAAA;KAAE,CAAC;IAG7H;;;;OAIG;IACH,OAAO,CAAC,SAAS;IASjB;;;;;OAKG;IACG,OAAO,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,UAAU,CAAC;IA0BpD;;;;;;OAMG;IACH,SAAS,CAAC,MAAM,EAAE,UAAU,EAAE,QAAQ,CAAC,EAAE,SAAS,GAAG,UAAU;IAY/D;;OAEG;IACG,YAAY,CAAC,OAAO,EAAE,OAAO,EAAE,QAAQ,CAAC,EAAE,SAAS,GAAG,OAAO,CAAC,UAAU,CAAC;IAI/E;;;;;OAKG;IACG,WAAW,CAAC,KAAK,EAAE,oBAAoB,GAAG,OAAO,CAAC,oBAAoB,CAAC;IAiB7E;;;;;OAKG;IACG,WAAW,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,CAAC;CAG5D"}

package/bin/core/auth/authenticator.js

@@ -8,6 +8,7 @@
  */
 import { bearerToken, httpError } from "../../utils/helpers.js";
 import { TokenSigner } from "./token-signer.js";
+import { normalizeRouteAuth } from "../../service/service.js";
 /** 统一鉴权器 */
 export class Authenticator {
     env;
@@ -33,42 +34,60 @@ export class Authenticator {
         return this.tokenSigner;
     }
     /**
-     * 对请求执行鉴权。
+     * 解析请求身份。
      *
      * @param request - 原始 HTTP Request
-     * @param required - 要求的鉴权级别
-     * @returns 鉴权结果（含 user/product 信息）
+     * @returns 当前请求身份；无 token 或 token 无效时返回 guest
      */
-    async authenticate(request, required) {
-        if (required === "public") {
-            return { level: "public" };
-        }
+    async resolve(request) {
         const token = bearerToken(request);
-        if (!token) {
-            throw httpError(401, "Missing authorization token");
-        }
-        // admin 鉴权
-        if (required === "admin") {
-            const adminKey = this.env.get("VISIBLEBASE_ADMIN_SECRET_KEY");
-            if (!adminKey)
-                throw httpError(500, "VISIBLEBASE_ADMIN_SECRET_KEY is required");
-            if (token !== adminKey)
-                throw httpError(401, "Invalid admin_secret_key");
+        if (!token)
+            return { level: "guest" };
+        const adminKey = this.env.get("VISIBLEBASE_ADMIN_SECRET_KEY");
+        if (adminKey && token === adminKey) {
             return { level: "admin" };
         }
-        // user 鉴权
-        const payload = await this.getSigner().verify(token);
-        const store = await this.store();
-        const product = await store.product.get(payload.product_id);
-        if (!product)
-            throw httpError(401, "Unknown token product");
-        if (product.status !== "active")
-            throw httpError(403, "Token product is not active");
-        return {
-            level: "user",
-            user: { user_id: payload.user_id, metadata: payload.metadata ?? {} },
-            product,
-        };
+        try {
+            const payload = await this.getSigner().verify(token);
+            const store = await this.store();
+            const product = await store.product.get(payload.product_id);
+            if (!product)
+                return { level: "guest" };
+            if (product.status !== "active")
+                return { level: "guest" };
+            return {
+                level: "user",
+                user: { user_id: payload.user_id, metadata: payload.metadata ?? {} },
+                product,
+            };
+        }
+        catch {
+            return { level: "guest" };
+        }
+    }
+    /**
+     * 根据 action 的 auth 配置判断当前身份是否允许继续。
+     *
+     * @param result - 当前已解析身份
+     * @param required - action 声明的允许身份集合
+     * @returns 通过授权后的身份结果
+     */
+    authorize(result, required) {
+        const allowed = normalizeRouteAuth(required);
+        if (allowed.length === 0)
+            return result;
+        if (result.level !== "guest" && allowed.includes(result.level))
+            return result;
+        if (result.level === "guest") {
+            throw httpError(401, "Authentication required");
+        }
+        throw httpError(403, `Forbidden for identity: ${result.level}`);
+    }
+    /**
+     * 对请求执行鉴权并强制满足 action 的 auth 配置。
+     */
+    async authenticate(request, required) {
+        return this.authorize(await this.resolve(request), required);
     }
     /**
      * 签发 user_token（验证 product 状态后签发）。

package/bin/core/auth/authenticator.js.map

@@ -1 +1 @@
-{"version":3,"file":"authenticator.js","sourceRoot":"","sources":["../../../src/core/auth/authenticator.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM,wBAAwB,CAAC;AAChE,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAiBhD,YAAY;AACZ,MAAM,OAAO,aAAa;IAKd;IACA;IALV,yBAAyB;IACjB,WAAW,CAAe;IAElC,YACU,GAAgB,EAChB,KAAmH;QADnH,QAAG,GAAH,GAAG,CAAa;QAChB,UAAK,GAAL,KAAK,CAA8G;IAC1H,CAAC;IAEJ;;;;OAIG;IACK,SAAS;QACf,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;YACtB,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,+BAA+B,CAAC,CAAC;YACjE,IAAI,CAAC,UAAU;gBAAE,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;YAC9E,IAAI,CAAC,WAAW,GAAG,IAAI,WAAW,CAAC,UAAU,CAAC,CAAC;QACjD,CAAC;QACD,OAAO,IAAI,CAAC,WAAW,CAAC;IAC1B,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,YAAY,CAAC,OAAgB,EAAE,QAAmB;QACtD,IAAI,QAAQ,KAAK,QAAQ,EAAE,CAAC;YAC1B,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC;QAC7B,CAAC;QAED,MAAM,KAAK,GAAG,WAAW,CAAC,OAAO,CAAC,CAAC;QACnC,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,MAAM,SAAS,CAAC,GAAG,EAAE,6BAA6B,CAAC,CAAC;QACtD,CAAC;QAED,WAAW;QACX,IAAI,QAAQ,KAAK,OAAO,EAAE,CAAC;YACzB,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,8BAA8B,CAAC,CAAC;YAC9D,IAAI,CAAC,QAAQ;gBAAE,MAAM,SAAS,CAAC,GAAG,EAAE,0CAA0C,CAAC,CAAC;YAChF,IAAI,KAAK,KAAK,QAAQ;gBAAE,MAAM,SAAS,CAAC,GAAG,EAAE,0BAA0B,CAAC,CAAC;YACzE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC;QAC5B,CAAC;QAED,UAAU;QACV,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,SAAS,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACrD,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC;QACjC,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;QAC5D,IAAI,CAAC,OAAO;YAAE,MAAM,SAAS,CAAC,GAAG,EAAE,uBAAuB,CAAC,CAAC;QAC5D,IAAI,OAAO,CAAC,MAAM,KAAK,QAAQ;YAAE,MAAM,SAAS,CAAC,GAAG,EAAE,6BAA6B,CAAC,CAAC;QAErF,OAAO;YACL,KAAK,EAAE,MAAM;YACb,IAAI,EAAE,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,IAAI,EAAE,EAAE;YACpE,OAAO;SACR,CAAC;IACJ,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,WAAW,CAAC,KAA2B;QAC3C,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC;QACjC,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;QAC1D,IAAI,CAAC,OAAO;YAAE,MAAM,IAAI,KAAK,CAAC,oBAAoB,KAAK,CAAC,UAAU,EAAE,CAAC,CAAC;QACtE,IAAI,OAAO,CAAC,MAAM,KAAK,QAAQ;YAAE,MAAM,IAAI,KAAK,CAAC,0BAA0B,KAAK,CAAC,UAAU,EAAE,CAAC,CAAC;QAE/F,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,SAAS,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACtD,OAAO;YACL,UAAU;YACV,UAAU,EAAE,KAAK,CAAC,UAAU;YAC5B,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,GAAG,CAAC,KAAK,CAAC,GAAG;gBACX,CAAC,CAAC,EAAE,UAAU,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,WAAW,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,CAAC,WAAW,EAAE,EAAE;gBAC7F,CAAC,CAAC,EAAE,CAAC;SACR,CAAC;IACJ,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,WAAW,CAAC,KAAa;QAC7B,OAAO,IAAI,CAAC,SAAS,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACxC,CAAC;CACF"}
+{"version":3,"file":"authenticator.js","sourceRoot":"","sources":["../../../src/core/auth/authenticator.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM,wBAAwB,CAAC;AAChE,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAChD,OAAO,EAAE,kBAAkB,EAAsC,MAAM,0BAA0B,CAAC;AAgBlG,YAAY;AACZ,MAAM,OAAO,aAAa;IAKd;IACA;IALV,yBAAyB;IACjB,WAAW,CAAe;IAElC,YACU,GAAgB,EAChB,KAAmH;QADnH,QAAG,GAAH,GAAG,CAAa;QAChB,UAAK,GAAL,KAAK,CAA8G;IAC1H,CAAC;IAEJ;;;;OAIG;IACK,SAAS;QACf,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;YACtB,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,+BAA+B,CAAC,CAAC;YACjE,IAAI,CAAC,UAAU;gBAAE,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;YAC9E,IAAI,CAAC,WAAW,GAAG,IAAI,WAAW,CAAC,UAAU,CAAC,CAAC;QACjD,CAAC;QACD,OAAO,IAAI,CAAC,WAAW,CAAC;IAC1B,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,OAAO,CAAC,OAAgB;QAC5B,MAAM,KAAK,GAAG,WAAW,CAAC,OAAO,CAAC,CAAC;QACnC,IAAI,CAAC,KAAK;YAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC;QAEtC,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,8BAA8B,CAAC,CAAC;QAC9D,IAAI,QAAQ,IAAI,KAAK,KAAK,QAAQ,EAAE,CAAC;YACnC,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC;QAC5B,CAAC;QAED,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,SAAS,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACrD,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC;YACjC,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;YAC5D,IAAI,CAAC,OAAO;gBAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC;YACxC,IAAI,OAAO,CAAC,MAAM,KAAK,QAAQ;gBAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC;YAE3D,OAAO;gBACL,KAAK,EAAE,MAAM;gBACb,IAAI,EAAE,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,IAAI,EAAE,EAAE;gBACpE,OAAO;aACR,CAAC;QACJ,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC;QAC5B,CAAC;IACH,CAAC;IAED;;;;;;OAMG;IACH,SAAS,CAAC,MAAkB,EAAE,QAAoB;QAChD,MAAM,OAAO,GAAG,kBAAkB,CAAC,QAAQ,CAAC,CAAC;QAC7C,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,MAAM,CAAC;QACxC,IAAI,MAAM,CAAC,KAAK,KAAK,OAAO,IAAI,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC;YAAE,OAAO,MAAM,CAAC;QAE9E,IAAI,MAAM,CAAC,KAAK,KAAK,OAAO,EAAE,CAAC;YAC7B,MAAM,SAAS,CAAC,GAAG,EAAE,yBAAyB,CAAC,CAAC;QAClD,CAAC;QAED,MAAM,SAAS,CAAC,GAAG,EAAE,2BAA2B,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC;IAClE,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,YAAY,CAAC,OAAgB,EAAE,QAAoB;QACvD,OAAO,IAAI,CAAC,SAAS,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,QAAQ,CAAC,CAAC;IAC/D,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,WAAW,CAAC,KAA2B;QAC3C,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC;QACjC,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;QAC1D,IAAI,CAAC,OAAO;YAAE,MAAM,IAAI,KAAK,CAAC,oBAAoB,KAAK,CAAC,UAAU,EAAE,CAAC,CAAC;QACtE,IAAI,OAAO,CAAC,MAAM,KAAK,QAAQ;YAAE,MAAM,IAAI,KAAK,CAAC,0BAA0B,KAAK,CAAC,UAAU,EAAE,CAAC,CAAC;QAE/F,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,SAAS,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACtD,OAAO;YACL,UAAU;YACV,UAAU,EAAE,KAAK,CAAC,UAAU;YAC5B,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,GAAG,CAAC,KAAK,CAAC,GAAG;gBACX,CAAC,CAAC,EAAE,UAAU,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,WAAW,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,CAAC,WAAW,EAAE,EAAE;gBAC7F,CAAC,CAAC,EAAE,CAAC;SACR,CAAC;IACJ,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,WAAW,CAAC,KAAa;QAC7B,OAAO,IAAI,CAAC,SAAS,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACxC,CAAC;CACF"}

package/bin/core/base/base.d.ts

@@ -1,11 +1,9 @@
 /**
  * Base Runtime 主模块。
  *
- * Base 是运行时容器，只负责：Service 路由、鉴权、HTTP。
+ * Base 是运行时容器，负责：Service 生命周期、鉴权、HTTP 桥接。
  * 不知道任何具体 Service 的实现，所有 Service 通过 _onInit() 自初始化。
  *
- * 数据库连接、环境变量存储等运行时特定逻辑由 Runtime 适配器注入。
- *
  * 使用方式：
  * ```ts
  * import { Base } from "@visiblebase/core";
@@ -13,7 +11,6 @@
  *
  * const base = new Base({ runtime: node({ database: "sqlite:./data.sqlite" }) });
  * base.use(new AIService());
- * // 路由始终是标准 Hono app
  * serve({ fetch: base.router().fetch, port: 3000 });
  * ```
  */
@@ -26,6 +23,9 @@ import type { BaseOptions, BaseHealthStatus } from "../types.js";
 import type { RuntimeUser } from "../auth/types.js";
 declare module "hono" {
     interface ContextVariableMap {
+        identity?: {
+            kind: "guest" | "user" | "admin";
+        };
         user?: RuntimeUser;
         product?: {
             product_id: string;
@@ -33,12 +33,6 @@ declare module "hono" {
         };
     }
 }
-/**
- * VisibleBase 运行时容器。
- *
- * 接收 Service 注册、构建 Hono 路由、管理初始化生命周期。
- * 数据库和 env 通过 Runtime 适配器注入，不依赖任何特定运行时。
- */
 export declare class Base {
     private readonly runtime;
     private readonly services;
@@ -49,43 +43,13 @@ export declare class Base {
     private hono?;
     private authenticator?;
     constructor(options: BaseOptions);
-    /**
-     * 注册一个 Service。
-     *
-     * Service 在 Base 初始化时自动获得数据库、鉴权器、env 等基础设施。
-     */
     use(svc: Service | BasePlugin): this;
-    /** 获取指定 ID 的 Service */
     getService(id: string): Service | undefined;
-    /** 获取所有已注册的 Service */
     getServices(): Service[];
     getAuthenticator(): Promise<Authenticator>;
-    /**
-     * 获取指定名称的数据库表 API。
-     *
-     * @param name - 表名（格式为 "service_id.table_name" 或内置表名）
-     */
     table<TRow extends Record<string, unknown> = Record<string, unknown>>(name: string): Promise<BaseTableApi<TRow>>;
-    /**
-     * 获取 Hono 路由实例（需先完成初始化）。
-     *
-     * 路由可以直接挂载到任何支持 fetch 的 HTTP 服务器：
-     * ```ts
-     * // Node.js
-     * serve({ fetch: base.router().fetch, port: 3000 });
-     *
-     * // Cloudflare Workers
-     * export default { fetch: base.router().fetch };
-     * ```
-     */
     router(): Hono;
-    /**
-     * 直接处理一个 Request（用于 Serverless 场景）。
-     */
     handleRequest(request: Request): Promise<Response>;
-    /**
-     * 健康检查。
-     */
     health(): Promise<BaseHealthStatus>;
     private initialize;
     private collectServiceSchemas;
@@ -93,6 +57,13 @@ export declare class Base {
     private ensureReady;
     private requireReadySync;
     private requireReady;
+    /**
+     * 收集插件注册的全局 hook。
+     *
+     * Service.hook 只作用于当前 Service；Plugin.globalHook 用于 usage、
+     * billing 等需要观察所有用户侧调用的横切能力。
+     */
+    private globalPluginHooks;
 }
 export { Base as VisibleBase };
 //# sourceMappingURL=base.d.ts.map

package/bin/core/base/base.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"base.d.ts","sourceRoot":"","sources":["../../../src/core/base/base.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAE5B,OAAO,EAAqC,KAAK,YAAY,EAAE,MAAM,0BAA0B,CAAC;AAChG,OAAO,EAAE,OAAO,EAA2C,MAAM,0BAA0B,CAAC;AAC5F,OAAO,EAAY,KAAK,UAAU,EAAE,MAAM,yBAAyB,CAAC;AACpE,OAAO,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAC;AAEzD,OAAO,KAAK,EAAE,WAAW,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAEjE,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAOpD,OAAO,QAAQ,MAAM,CAAC;IACpB,UAAU,kBAAkB;QAC1B,IAAI,CAAC,EAAE,WAAW,CAAC;QACnB,OAAO,CAAC,EAAE;YAAE,UAAU,EAAE,MAAM,CAAC;YAAC,MAAM,EAAE,MAAM,CAAA;SAAE,CAAC;KAClD;CACF;AAMD;;;;;GAKG;AACH,qBAAa,IAAI;IACf,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAU;IAClC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAA8B;IAEvD,OAAO,CAAC,QAAQ,CAAC,CAAuC;IACxD,OAAO,CAAC,MAAM,CAAC,CAAoD;IACnE,OAAO,CAAC,QAAQ,CAAC,CAA4B;IAC7C,OAAO,CAAC,WAAW,CAAC,CAAgB;IACpC,OAAO,CAAC,IAAI,CAAC,CAAO;IACpB,OAAO,CAAC,aAAa,CAAC,CAAgB;gBAE1B,OAAO,EAAE,WAAW;IAWhC;;;;OAIG;IACH,GAAG,CAAC,GAAG,EAAE,OAAO,GAAG,UAAU,GAAG,IAAI;IAMpC,wBAAwB;IACxB,UAAU,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,GAAG,SAAS;IAI3C,uBAAuB;IACvB,WAAW,IAAI,OAAO,EAAE;IAQlB,gBAAgB,IAAI,OAAO,CAAC,aAAa,CAAC;IAShD;;;;OAIG;IACG,KAAK,CAAC,IAAI,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EACxE,IAAI,EAAE,MAAM,GACX,OAAO,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;IAW9B;;;;;;;;;;;OAWG;IACH,MAAM,IAAI,IAAI;IAKd;;OAEG;IACG,aAAa,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,QAAQ,CAAC;IAKxD;;OAEG;IACG,MAAM,IAAI,OAAO,CAAC,gBAAgB,CAAC;YAgB3B,UAAU;IAsDxB,OAAO,CAAC,qBAAqB;IAe7B,OAAO,CAAC,SAAS;YA8DH,WAAW;IAKzB,OAAO,CAAC,gBAAgB;YAIV,YAAY;CAK3B;AAED,OAAO,EAAE,IAAI,IAAI,WAAW,EAAE,CAAC"}
+{"version":3,"file":"base.d.ts","sourceRoot":"","sources":["../../../src/core/base/base.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAE5B,OAAO,EAAqC,KAAK,YAAY,EAAE,MAAM,0BAA0B,CAAC;AAChG,OAAO,EAAE,OAAO,EAAgB,MAAM,0BAA0B,CAAC;AACjE,OAAO,EAAoB,KAAK,UAAU,EAAE,MAAM,yBAAyB,CAAC;AAC5E,OAAO,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAC;AAEzD,OAAO,KAAK,EAAE,WAAW,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAEjE,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAGpD,OAAO,QAAQ,MAAM,CAAC;IACpB,UAAU,kBAAkB;QAC1B,QAAQ,CAAC,EAAE;YAAE,IAAI,EAAE,OAAO,GAAG,MAAM,GAAG,OAAO,CAAA;SAAE,CAAC;QAChD,IAAI,CAAC,EAAE,WAAW,CAAC;QACnB,OAAO,CAAC,EAAE;YAAE,UAAU,EAAE,MAAM,CAAC;YAAC,MAAM,EAAE,MAAM,CAAA;SAAE,CAAC;KAClD;CACF;AAED,qBAAa,IAAI;IACf,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAU;IAClC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAA8B;IAEvD,OAAO,CAAC,QAAQ,CAAC,CAAuC;IACxD,OAAO,CAAC,MAAM,CAAC,CAAoD;IACnE,OAAO,CAAC,QAAQ,CAAC,CAA4B;IAC7C,OAAO,CAAC,WAAW,CAAC,CAAgB;IACpC,OAAO,CAAC,IAAI,CAAC,CAAO;IACpB,OAAO,CAAC,aAAa,CAAC,CAAgB;gBAE1B,OAAO,EAAE,WAAW;IAWhC,GAAG,CAAC,GAAG,EAAE,OAAO,GAAG,UAAU,GAAG,IAAI;IAMpC,UAAU,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,GAAG,SAAS;IAI3C,WAAW,IAAI,OAAO,EAAE;IAQlB,gBAAgB,IAAI,OAAO,CAAC,aAAa,CAAC;IAS1C,KAAK,CAAC,IAAI,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EACxE,IAAI,EAAE,MAAM,GACX,OAAO,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;IAW9B,MAAM,IAAI,IAAI;IAKR,aAAa,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,QAAQ,CAAC;IAKlD,MAAM,IAAI,OAAO,CAAC,gBAAgB,CAAC;YAgB3B,UAAU;IA8CxB,OAAO,CAAC,qBAAqB;IAoB7B,OAAO,CAAC,SAAS;YAkHH,WAAW;IAKzB,OAAO,CAAC,gBAAgB;YAIV,YAAY;IAM1B;;;;;OAKG;IACH,OAAO,CAAC,iBAAiB;CAK1B;AAED,OAAO,EAAE,IAAI,IAAI,WAAW,EAAE,CAAC"}