@vlian/infrastructure 0.9.10

package/dist/cjs/managers/PermissionManager/modules/AuditLogger.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../../src/managers/PermissionManager/modules/AuditLogger.ts"],"sourcesContent":["/**\n * 审计日志模块\n * 负责记录所有权限相关操作，用于审计和安全监控\n */\n\nimport type { AuditLogEntry } from '../types';\n\n/**\n * 审计日志器\n */\nexport class AuditLogger {\n  private logs: AuditLogEntry[] = [];\n  private maxSize: number;\n  private logger?: { info: (message: string, ...args: unknown[]) => void };\n\n  constructor(options: {\n    maxSize?: number;\n    logger?: { info: (message: string, ...args: unknown[]) => void };\n  }) {\n    this.maxSize = options.maxSize ?? 1000;\n    this.logger = options.logger;\n  }\n\n  /**\n   * 记录操作\n   */\n  log(entry: Omit<AuditLogEntry, 'id' | 'timestamp'>): void {\n    const fullEntry: AuditLogEntry = {\n      id: this.generateId(),\n      timestamp: Date.now(),\n      ...entry,\n    };\n\n    this.logs.push(fullEntry);\n\n    // 保持日志大小限制\n    if (this.logs.length > this.maxSize) {\n      this.logs.shift();\n    }\n\n    // 输出到日志\n    this.logger?.info('Audit log:', fullEntry);\n  }\n\n  /**\n   * 获取日志\n   */\n  getLogs(filter?: {\n    operation?: AuditLogEntry['operation'];\n    result?: AuditLogEntry['result'];\n    startTime?: number;\n    endTime?: number;\n    limit?: number;\n  }): AuditLogEntry[] {\n    let filtered = [...this.logs];\n\n    if (filter) {\n      if (filter.operation) {\n        filtered = filtered.filter(log => log.operation === filter.operation);\n      }\n      if (filter.result) {\n        filtered = filtered.filter(log => log.result === filter.result);\n      }\n      if (filter.startTime) {\n        filtered = filtered.filter(log => log.timestamp >= filter.startTime!);\n      }\n      if (filter.endTime) {\n        filtered = filtered.filter(log => log.timestamp <= filter.endTime!);\n      }\n    }\n\n    // 按时间倒序排序\n    filtered.sort((a, b) => b.timestamp - a.timestamp);\n\n    // 限制数量\n    if (filter?.limit) {\n      filtered = filtered.slice(0, filter.limit);\n    }\n\n    return filtered;\n  }\n\n  /**\n   * 导出日志\n   */\n  export(format: 'json' | 'csv' = 'json'): string {\n    if (format === 'json') {\n      return JSON.stringify(this.logs, null, 2);\n    }\n\n    // CSV 格式\n    const headers = ['id', 'operation', 'target', 'result', 'timestamp', 'userId'];\n    const rows = this.logs.map(log => [\n      log.id,\n      log.operation,\n      log.target || '',\n      log.result,\n      log.timestamp.toString(),\n      log.userId || '',\n    ]);\n\n    return [headers.join(','), ...rows.map(row => row.join(','))].join('\\n');\n  }\n\n  /**\n   * 清除日志\n   */\n  clear(): void {\n    this.logs = [];\n  }\n\n  /**\n   * 生成 ID\n   */\n  private generateId(): string {\n    return `audit_${Date.now()}_${Math.random().toString(36).substring(2, 9)}`;\n  }\n}\n"],"names":["AuditLogger","log","entry","fullEntry","id","generateId","timestamp","Date","now","logs","push","length","maxSize","shift","logger","info","getLogs","filter","filtered","operation","result","startTime","endTime","sort","a","b","limit","slice","export","format","JSON","stringify","headers","rows","map","target","toString","userId","join","row","clear","Math","random","substring","options"],"mappings":"AAAA;;;CAGC;;;;+BAOYA;;;eAAAA;;;;;;;;;;;;;;;;AAAN,IAAA,AAAMA,cAAN,MAAMA;IAaX;;GAEC,GACDC,IAAIC,KAA8C,EAAQ;QACxD,MAAMC,YAA2B;YAC/BC,IAAI,IAAI,CAACC,UAAU;YACnBC,WAAWC,KAAKC,GAAG;YACnB,GAAGN,KAAK;QACV;QAEA,IAAI,CAACO,IAAI,CAACC,IAAI,CAACP;QAEf,WAAW;QACX,IAAI,IAAI,CAACM,IAAI,CAACE,MAAM,GAAG,IAAI,CAACC,OAAO,EAAE;YACnC,IAAI,CAACH,IAAI,CAACI,KAAK;QACjB;QAEA,QAAQ;QACR,IAAI,CAACC,MAAM,EAAEC,KAAK,cAAcZ;IAClC;IAEA;;GAEC,GACDa,QAAQC,MAMP,EAAmB;QAClB,IAAIC,WAAW;eAAI,IAAI,CAACT,IAAI;SAAC;QAE7B,IAAIQ,QAAQ;YACV,IAAIA,OAAOE,SAAS,EAAE;gBACpBD,WAAWA,SAASD,MAAM,CAAChB,CAAAA,MAAOA,IAAIkB,SAAS,KAAKF,OAAOE,SAAS;YACtE;YACA,IAAIF,OAAOG,MAAM,EAAE;gBACjBF,WAAWA,SAASD,MAAM,CAAChB,CAAAA,MAAOA,IAAImB,MAAM,KAAKH,OAAOG,MAAM;YAChE;YACA,IAAIH,OAAOI,SAAS,EAAE;gBACpBH,WAAWA,SAASD,MAAM,CAAChB,CAAAA,MAAOA,IAAIK,SAAS,IAAIW,OAAOI,SAAS;YACrE;YACA,IAAIJ,OAAOK,OAAO,EAAE;gBAClBJ,WAAWA,SAASD,MAAM,CAAChB,CAAAA,MAAOA,IAAIK,SAAS,IAAIW,OAAOK,OAAO;YACnE;QACF;QAEA,UAAU;QACVJ,SAASK,IAAI,CAAC,CAACC,GAAGC,IAAMA,EAAEnB,SAAS,GAAGkB,EAAElB,SAAS;QAEjD,OAAO;QACP,IAAIW,QAAQS,OAAO;YACjBR,WAAWA,SAASS,KAAK,CAAC,GAAGV,OAAOS,KAAK;QAC3C;QAEA,OAAOR;IACT;IAEA;;GAEC,GACDU,OAAOC,SAAyB,MAAM,EAAU;QAC9C,IAAIA,WAAW,QAAQ;YACrB,OAAOC,KAAKC,SAAS,CAAC,IAAI,CAACtB,IAAI,EAAE,MAAM;QACzC;QAEA,SAAS;QACT,MAAMuB,UAAU;YAAC;YAAM;YAAa;YAAU;YAAU;YAAa;SAAS;QAC9E,MAAMC,OAAO,IAAI,CAACxB,IAAI,CAACyB,GAAG,CAACjC,CAAAA,MAAO;gBAChCA,IAAIG,EAAE;gBACNH,IAAIkB,SAAS;gBACblB,IAAIkC,MAAM,IAAI;gBACdlC,IAAImB,MAAM;gBACVnB,IAAIK,SAAS,CAAC8B,QAAQ;gBACtBnC,IAAIoC,MAAM,IAAI;aACf;QAED,OAAO;YAACL,QAAQM,IAAI,CAAC;eAASL,KAAKC,GAAG,CAACK,CAAAA,MAAOA,IAAID,IAAI,CAAC;SAAM,CAACA,IAAI,CAAC;IACrE;IAEA;;GAEC,GACDE,QAAc;QACZ,IAAI,CAAC/B,IAAI,GAAG,EAAE;IAChB;IAEA;;GAEC,GACD,AAAQJ,aAAqB;QAC3B,OAAO,CAAC,MAAM,EAAEE,KAAKC,GAAG,GAAG,CAAC,EAAEiC,KAAKC,MAAM,GAAGN,QAAQ,CAAC,IAAIO,SAAS,CAAC,GAAG,IAAI;IAC5E;IArGA,YAAYC,OAGX,CAAE;QAPH,uBAAQnC,QAAwB,EAAE;QAClC,uBAAQG,WAAR,KAAA;QACA,uBAAQE,UAAR,KAAA;QAME,IAAI,CAACF,OAAO,GAAGgC,QAAQhC,OAAO,IAAI;QAClC,IAAI,CAACE,MAAM,GAAG8B,QAAQ9B,MAAM;IAC9B;AAgGF"}

package/dist/cjs/managers/PermissionManager/modules/CacheManager.js

@@ -0,0 +1,146 @@
+/**
+ * 缓存管理器
+ * 负责带 TTL 的缓存管理
+ */ "use strict";
+Object.defineProperty(exports, "__esModule", {
+    value: true
+});
+Object.defineProperty(exports, "CacheManager", {
+    enumerable: true,
+    get: function() {
+        return CacheManager;
+    }
+});
+function _define_property(obj, key, value) {
+    if (key in obj) {
+        Object.defineProperty(obj, key, {
+            value: value,
+            enumerable: true,
+            configurable: true,
+            writable: true
+        });
+    } else {
+        obj[key] = value;
+    }
+    return obj;
+}
+let CacheManager = class CacheManager {
+    /**
+   * 获取缓存值
+   */ get(key) {
+        const item = this.cache.get(key);
+        if (!item) {
+            return null;
+        }
+        // 检查是否过期
+        if (item.expiresAt && Date.now() >= item.expiresAt) {
+            this.cache.delete(key);
+            return null;
+        }
+        return item.value;
+    }
+    /**
+   * 设置缓存值
+   */ set(key, value, ttl) {
+        const expiresAt = ttl ? Date.now() + ttl : this.defaultTTL ? Date.now() + this.defaultTTL : undefined;
+        const item = {
+            value,
+            timestamp: Date.now(),
+            expiresAt
+        };
+        // 检查大小限制
+        if (this.maxSize && this.cache.size >= this.maxSize) {
+            // 删除最旧的项
+            const oldestKey = this.getOldestKey();
+            if (oldestKey) {
+                this.cache.delete(oldestKey);
+            }
+        }
+        this.cache.set(key, item);
+    }
+    /**
+   * 检查是否存在
+   */ has(key) {
+        const item = this.cache.get(key);
+        if (!item) {
+            return false;
+        }
+        // 检查是否过期
+        if (item.expiresAt && Date.now() >= item.expiresAt) {
+            this.cache.delete(key);
+            return false;
+        }
+        return true;
+    }
+    /**
+   * 删除缓存
+   */ delete(key) {
+        return this.cache.delete(key);
+    }
+    /**
+   * 清除所有缓存
+   */ clear() {
+        this.cache.clear();
+    }
+    /**
+   * 获取缓存大小
+   */ size() {
+        // 清理过期项
+        this.cleanExpired();
+        return this.cache.size;
+    }
+    /**
+   * 清理过期项
+   */ cleanExpired() {
+        const now = Date.now();
+        const keysToDelete = [];
+        for (const [key, item] of this.cache.entries()){
+            if (item.expiresAt && now >= item.expiresAt) {
+                keysToDelete.push(key);
+            }
+        }
+        keysToDelete.forEach((key)=>this.cache.delete(key));
+    }
+    /**
+   * 获取最旧的键
+   */ getOldestKey() {
+        let oldestKey = null;
+        let oldestTimestamp = Infinity;
+        for (const [key, item] of this.cache.entries()){
+            if (item.timestamp < oldestTimestamp) {
+                oldestTimestamp = item.timestamp;
+                oldestKey = key;
+            }
+        }
+        return oldestKey;
+    }
+    /**
+   * 获取缓存统计信息
+   */ getStats() {
+        this.cleanExpired();
+        let oldestTimestamp;
+        let newestTimestamp;
+        for (const item of this.cache.values()){
+            if (!oldestTimestamp || item.timestamp < oldestTimestamp) {
+                oldestTimestamp = item.timestamp;
+            }
+            if (!newestTimestamp || item.timestamp > newestTimestamp) {
+                newestTimestamp = item.timestamp;
+            }
+        }
+        return {
+            size: this.cache.size,
+            oldestTimestamp,
+            newestTimestamp
+        };
+    }
+    constructor(options){
+        _define_property(this, "cache", new Map());
+        _define_property(this, "defaultTTL", void 0);
+        _define_property(this, "maxSize", void 0);
+        this.defaultTTL = options?.defaultTTL;
+        this.maxSize = options?.maxSize;
+    }
+};
+
+//# sourceMappingURL=CacheManager.js.map

package/dist/cjs/managers/PermissionManager/modules/CacheManager.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../../src/managers/PermissionManager/modules/CacheManager.ts"],"sourcesContent":["/**\n * 缓存管理器\n * 负责带 TTL 的缓存管理\n */\n\nimport type { CacheItem } from '../types';\n\n/**\n * 缓存管理器\n */\nexport class CacheManager<T> {\n  private cache: Map<string, CacheItem<T>> = new Map();\n  private defaultTTL?: number;\n  private maxSize?: number;\n\n  constructor(options?: {\n    defaultTTL?: number;\n    maxSize?: number;\n  }) {\n    this.defaultTTL = options?.defaultTTL;\n    this.maxSize = options?.maxSize;\n  }\n\n  /**\n   * 获取缓存值\n   */\n  get(key: string): T | null {\n    const item = this.cache.get(key);\n    if (!item) {\n      return null;\n    }\n\n    // 检查是否过期\n    if (item.expiresAt && Date.now() >= item.expiresAt) {\n      this.cache.delete(key);\n      return null;\n    }\n\n    return item.value;\n  }\n\n  /**\n   * 设置缓存值\n   */\n  set(key: string, value: T, ttl?: number): void {\n    const expiresAt = ttl\n      ? Date.now() + ttl\n      : this.defaultTTL\n        ? Date.now() + this.defaultTTL\n        : undefined;\n\n    const item: CacheItem<T> = {\n      value,\n      timestamp: Date.now(),\n      expiresAt,\n    };\n\n    // 检查大小限制\n    if (this.maxSize && this.cache.size >= this.maxSize) {\n      // 删除最旧的项\n      const oldestKey = this.getOldestKey();\n      if (oldestKey) {\n        this.cache.delete(oldestKey);\n      }\n    }\n\n    this.cache.set(key, item);\n  }\n\n  /**\n   * 检查是否存在\n   */\n  has(key: string): boolean {\n    const item = this.cache.get(key);\n    if (!item) {\n      return false;\n    }\n\n    // 检查是否过期\n    if (item.expiresAt && Date.now() >= item.expiresAt) {\n      this.cache.delete(key);\n      return false;\n    }\n\n    return true;\n  }\n\n  /**\n   * 删除缓存\n   */\n  delete(key: string): boolean {\n    return this.cache.delete(key);\n  }\n\n  /**\n   * 清除所有缓存\n   */\n  clear(): void {\n    this.cache.clear();\n  }\n\n  /**\n   * 获取缓存大小\n   */\n  size(): number {\n    // 清理过期项\n    this.cleanExpired();\n    return this.cache.size;\n  }\n\n  /**\n   * 清理过期项\n   */\n  cleanExpired(): void {\n    const now = Date.now();\n    const keysToDelete: string[] = [];\n\n    for (const [key, item] of this.cache.entries()) {\n      if (item.expiresAt && now >= item.expiresAt) {\n        keysToDelete.push(key);\n      }\n    }\n\n    keysToDelete.forEach(key => this.cache.delete(key));\n  }\n\n  /**\n   * 获取最旧的键\n   */\n  private getOldestKey(): string | null {\n    let oldestKey: string | null = null;\n    let oldestTimestamp = Infinity;\n\n    for (const [key, item] of this.cache.entries()) {\n      if (item.timestamp < oldestTimestamp) {\n        oldestTimestamp = item.timestamp;\n        oldestKey = key;\n      }\n    }\n\n    return oldestKey;\n  }\n\n  /**\n   * 获取缓存统计信息\n   */\n  getStats(): {\n    size: number;\n    hitRate?: number;\n    oldestTimestamp?: number;\n    newestTimestamp?: number;\n  } {\n    this.cleanExpired();\n    \n    let oldestTimestamp: number | undefined;\n    let newestTimestamp: number | undefined;\n\n    for (const item of this.cache.values()) {\n      if (!oldestTimestamp || item.timestamp < oldestTimestamp) {\n        oldestTimestamp = item.timestamp;\n      }\n      if (!newestTimestamp || item.timestamp > newestTimestamp) {\n        newestTimestamp = item.timestamp;\n      }\n    }\n\n    return {\n      size: this.cache.size,\n      oldestTimestamp,\n      newestTimestamp,\n    };\n  }\n}\n"],"names":["CacheManager","get","key","item","cache","expiresAt","Date","now","delete","value","set","ttl","defaultTTL","undefined","timestamp","maxSize","size","oldestKey","getOldestKey","has","clear","cleanExpired","keysToDelete","entries","push","forEach","oldestTimestamp","Infinity","getStats","newestTimestamp","values","options","Map"],"mappings":"AAAA;;;CAGC;;;;+BAOYA;;;eAAAA;;;;;;;;;;;;;;;;AAAN,IAAA,AAAMA,eAAN,MAAMA;IAaX;;GAEC,GACDC,IAAIC,GAAW,EAAY;QACzB,MAAMC,OAAO,IAAI,CAACC,KAAK,CAACH,GAAG,CAACC;QAC5B,IAAI,CAACC,MAAM;YACT,OAAO;QACT;QAEA,SAAS;QACT,IAAIA,KAAKE,SAAS,IAAIC,KAAKC,GAAG,MAAMJ,KAAKE,SAAS,EAAE;YAClD,IAAI,CAACD,KAAK,CAACI,MAAM,CAACN;YAClB,OAAO;QACT;QAEA,OAAOC,KAAKM,KAAK;IACnB;IAEA;;GAEC,GACDC,IAAIR,GAAW,EAAEO,KAAQ,EAAEE,GAAY,EAAQ;QAC7C,MAAMN,YAAYM,MACdL,KAAKC,GAAG,KAAKI,MACb,IAAI,CAACC,UAAU,GACbN,KAAKC,GAAG,KAAK,IAAI,CAACK,UAAU,GAC5BC;QAEN,MAAMV,OAAqB;YACzBM;YACAK,WAAWR,KAAKC,GAAG;YACnBF;QACF;QAEA,SAAS;QACT,IAAI,IAAI,CAACU,OAAO,IAAI,IAAI,CAACX,KAAK,CAACY,IAAI,IAAI,IAAI,CAACD,OAAO,EAAE;YACnD,SAAS;YACT,MAAME,YAAY,IAAI,CAACC,YAAY;YACnC,IAAID,WAAW;gBACb,IAAI,CAACb,KAAK,CAACI,MAAM,CAACS;YACpB;QACF;QAEA,IAAI,CAACb,KAAK,CAACM,GAAG,CAACR,KAAKC;IACtB;IAEA;;GAEC,GACDgB,IAAIjB,GAAW,EAAW;QACxB,MAAMC,OAAO,IAAI,CAACC,KAAK,CAACH,GAAG,CAACC;QAC5B,IAAI,CAACC,MAAM;YACT,OAAO;QACT;QAEA,SAAS;QACT,IAAIA,KAAKE,SAAS,IAAIC,KAAKC,GAAG,MAAMJ,KAAKE,SAAS,EAAE;YAClD,IAAI,CAACD,KAAK,CAACI,MAAM,CAACN;YAClB,OAAO;QACT;QAEA,OAAO;IACT;IAEA;;GAEC,GACDM,OAAON,GAAW,EAAW;QAC3B,OAAO,IAAI,CAACE,KAAK,CAACI,MAAM,CAACN;IAC3B;IAEA;;GAEC,GACDkB,QAAc;QACZ,IAAI,CAAChB,KAAK,CAACgB,KAAK;IAClB;IAEA;;GAEC,GACDJ,OAAe;QACb,QAAQ;QACR,IAAI,CAACK,YAAY;QACjB,OAAO,IAAI,CAACjB,KAAK,CAACY,IAAI;IACxB;IAEA;;GAEC,GACDK,eAAqB;QACnB,MAAMd,MAAMD,KAAKC,GAAG;QACpB,MAAMe,eAAyB,EAAE;QAEjC,KAAK,MAAM,CAACpB,KAAKC,KAAK,IAAI,IAAI,CAACC,KAAK,CAACmB,OAAO,GAAI;YAC9C,IAAIpB,KAAKE,SAAS,IAAIE,OAAOJ,KAAKE,SAAS,EAAE;gBAC3CiB,aAAaE,IAAI,CAACtB;YACpB;QACF;QAEAoB,aAAaG,OAAO,CAACvB,CAAAA,MAAO,IAAI,CAACE,KAAK,CAACI,MAAM,CAACN;IAChD;IAEA;;GAEC,GACD,AAAQgB,eAA8B;QACpC,IAAID,YAA2B;QAC/B,IAAIS,kBAAkBC;QAEtB,KAAK,MAAM,CAACzB,KAAKC,KAAK,IAAI,IAAI,CAACC,KAAK,CAACmB,OAAO,GAAI;YAC9C,IAAIpB,KAAKW,SAAS,GAAGY,iBAAiB;gBACpCA,kBAAkBvB,KAAKW,SAAS;gBAChCG,YAAYf;YACd;QACF;QAEA,OAAOe;IACT;IAEA;;GAEC,GACDW,WAKE;QACA,IAAI,CAACP,YAAY;QAEjB,IAAIK;QACJ,IAAIG;QAEJ,KAAK,MAAM1B,QAAQ,IAAI,CAACC,KAAK,CAAC0B,MAAM,GAAI;YACtC,IAAI,CAACJ,mBAAmBvB,KAAKW,SAAS,GAAGY,iBAAiB;gBACxDA,kBAAkBvB,KAAKW,SAAS;YAClC;YACA,IAAI,CAACe,mBAAmB1B,KAAKW,SAAS,GAAGe,iBAAiB;gBACxDA,kBAAkB1B,KAAKW,SAAS;YAClC;QACF;QAEA,OAAO;YACLE,MAAM,IAAI,CAACZ,KAAK,CAACY,IAAI;YACrBU;YACAG;QACF;IACF;IA5JA,YAAYE,OAGX,CAAE;QAPH,uBAAQ3B,SAAmC,IAAI4B;QAC/C,uBAAQpB,cAAR,KAAA;QACA,uBAAQG,WAAR,KAAA;QAME,IAAI,CAACH,UAAU,GAAGmB,SAASnB;QAC3B,IAAI,CAACG,OAAO,GAAGgB,SAAShB;IAC1B;AAuJF"}

package/dist/cjs/managers/PermissionManager/modules/ChangeHistory.js

@@ -0,0 +1,98 @@
+/**
+ * 变更历史模块
+ * 负责记录权限和角色的变更历史
+ */ "use strict";
+Object.defineProperty(exports, "__esModule", {
+    value: true
+});
+Object.defineProperty(exports, "ChangeHistory", {
+    enumerable: true,
+    get: function() {
+        return ChangeHistory;
+    }
+});
+function _define_property(obj, key, value) {
+    if (key in obj) {
+        Object.defineProperty(obj, key, {
+            value: value,
+            enumerable: true,
+            configurable: true,
+            writable: true
+        });
+    } else {
+        obj[key] = value;
+    }
+    return obj;
+}
+let ChangeHistory = class ChangeHistory {
+    /**
+   * 记录变更
+   */ record(entry) {
+        const fullEntry = {
+            id: this.generateId(),
+            timestamp: Date.now(),
+            ...entry
+        };
+        this.history.push(fullEntry);
+        // 保持历史大小限制
+        if (this.history.length > this.maxSize) {
+            this.history.shift();
+        }
+    }
+    /**
+   * 获取变更历史
+   */ getHistory(filter) {
+        let filtered = [
+            ...this.history
+        ];
+        if (filter) {
+            if (filter.changeType) {
+                filtered = filtered.filter((h)=>h.changeType === filter.changeType);
+            }
+            if (filter.targetType) {
+                filtered = filtered.filter((h)=>h.targetType === filter.targetType);
+            }
+            if (filter.target) {
+                filtered = filtered.filter((h)=>h.target === filter.target);
+            }
+            if (filter.startTime) {
+                filtered = filtered.filter((h)=>h.timestamp >= filter.startTime);
+            }
+            if (filter.endTime) {
+                filtered = filtered.filter((h)=>h.timestamp <= filter.endTime);
+            }
+        }
+        // 按时间倒序排序
+        filtered.sort((a, b)=>b.timestamp - a.timestamp);
+        // 限制数量
+        if (filter?.limit) {
+            filtered = filtered.slice(0, filter.limit);
+        }
+        return filtered;
+    }
+    /**
+   * 获取特定权限/角色的变更历史
+   */ getHistoryForTarget(target, targetType) {
+        return this.getHistory({
+            target,
+            targetType
+        });
+    }
+    /**
+   * 清除历史
+   */ clear() {
+        this.history = [];
+    }
+    /**
+   * 生成 ID
+   */ generateId() {
+        return `change_${Date.now()}_${Math.random().toString(36).substring(2, 9)}`;
+    }
+    constructor(options){
+        _define_property(this, "history", []);
+        _define_property(this, "maxSize", void 0);
+        this.maxSize = options.maxSize ?? 500;
+    }
+};
+
+//# sourceMappingURL=ChangeHistory.js.map

package/dist/cjs/managers/PermissionManager/modules/ChangeHistory.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../../src/managers/PermissionManager/modules/ChangeHistory.ts"],"sourcesContent":["/**\n * 变更历史模块\n * 负责记录权限和角色的变更历史\n */\n\nimport type { PermissionChangeHistory } from '../types';\n\n/**\n * 变更历史管理器\n */\nexport class ChangeHistory {\n  private history: PermissionChangeHistory[] = [];\n  private maxSize: number;\n\n  constructor(options: { maxSize?: number }) {\n    this.maxSize = options.maxSize ?? 500;\n  }\n\n  /**\n   * 记录变更\n   */\n  record(entry: Omit<PermissionChangeHistory, 'id' | 'timestamp'>): void {\n    const fullEntry: PermissionChangeHistory = {\n      id: this.generateId(),\n      timestamp: Date.now(),\n      ...entry,\n    };\n\n    this.history.push(fullEntry);\n\n    // 保持历史大小限制\n    if (this.history.length > this.maxSize) {\n      this.history.shift();\n    }\n  }\n\n  /**\n   * 获取变更历史\n   */\n  getHistory(filter?: {\n    changeType?: PermissionChangeHistory['changeType'];\n    targetType?: PermissionChangeHistory['targetType'];\n    target?: string;\n    startTime?: number;\n    endTime?: number;\n    limit?: number;\n  }): PermissionChangeHistory[] {\n    let filtered = [...this.history];\n\n    if (filter) {\n      if (filter.changeType) {\n        filtered = filtered.filter(h => h.changeType === filter.changeType);\n      }\n      if (filter.targetType) {\n        filtered = filtered.filter(h => h.targetType === filter.targetType);\n      }\n      if (filter.target) {\n        filtered = filtered.filter(h => h.target === filter.target);\n      }\n      if (filter.startTime) {\n        filtered = filtered.filter(h => h.timestamp >= filter.startTime!);\n      }\n      if (filter.endTime) {\n        filtered = filtered.filter(h => h.timestamp <= filter.endTime!);\n      }\n    }\n\n    // 按时间倒序排序\n    filtered.sort((a, b) => b.timestamp - a.timestamp);\n\n    // 限制数量\n    if (filter?.limit) {\n      filtered = filtered.slice(0, filter.limit);\n    }\n\n    return filtered;\n  }\n\n  /**\n   * 获取特定权限/角色的变更历史\n   */\n  getHistoryForTarget(target: string, targetType: 'permission' | 'role'): PermissionChangeHistory[] {\n    return this.getHistory({ target, targetType });\n  }\n\n  /**\n   * 清除历史\n   */\n  clear(): void {\n    this.history = [];\n  }\n\n  /**\n   * 生成 ID\n   */\n  private generateId(): string {\n    return `change_${Date.now()}_${Math.random().toString(36).substring(2, 9)}`;\n  }\n}\n"],"names":["ChangeHistory","record","entry","fullEntry","id","generateId","timestamp","Date","now","history","push","length","maxSize","shift","getHistory","filter","filtered","changeType","h","targetType","target","startTime","endTime","sort","a","b","limit","slice","getHistoryForTarget","clear","Math","random","toString","substring","options"],"mappings":"AAAA;;;CAGC;;;;+BAOYA;;;eAAAA;;;;;;;;;;;;;;;;AAAN,IAAA,AAAMA,gBAAN,MAAMA;IAQX;;GAEC,GACDC,OAAOC,KAAwD,EAAQ;QACrE,MAAMC,YAAqC;YACzCC,IAAI,IAAI,CAACC,UAAU;YACnBC,WAAWC,KAAKC,GAAG;YACnB,GAAGN,KAAK;QACV;QAEA,IAAI,CAACO,OAAO,CAACC,IAAI,CAACP;QAElB,WAAW;QACX,IAAI,IAAI,CAACM,OAAO,CAACE,MAAM,GAAG,IAAI,CAACC,OAAO,EAAE;YACtC,IAAI,CAACH,OAAO,CAACI,KAAK;QACpB;IACF;IAEA;;GAEC,GACDC,WAAWC,MAOV,EAA6B;QAC5B,IAAIC,WAAW;eAAI,IAAI,CAACP,OAAO;SAAC;QAEhC,IAAIM,QAAQ;YACV,IAAIA,OAAOE,UAAU,EAAE;gBACrBD,WAAWA,SAASD,MAAM,CAACG,CAAAA,IAAKA,EAAED,UAAU,KAAKF,OAAOE,UAAU;YACpE;YACA,IAAIF,OAAOI,UAAU,EAAE;gBACrBH,WAAWA,SAASD,MAAM,CAACG,CAAAA,IAAKA,EAAEC,UAAU,KAAKJ,OAAOI,UAAU;YACpE;YACA,IAAIJ,OAAOK,MAAM,EAAE;gBACjBJ,WAAWA,SAASD,MAAM,CAACG,CAAAA,IAAKA,EAAEE,MAAM,KAAKL,OAAOK,MAAM;YAC5D;YACA,IAAIL,OAAOM,SAAS,EAAE;gBACpBL,WAAWA,SAASD,MAAM,CAACG,CAAAA,IAAKA,EAAEZ,SAAS,IAAIS,OAAOM,SAAS;YACjE;YACA,IAAIN,OAAOO,OAAO,EAAE;gBAClBN,WAAWA,SAASD,MAAM,CAACG,CAAAA,IAAKA,EAAEZ,SAAS,IAAIS,OAAOO,OAAO;YAC/D;QACF;QAEA,UAAU;QACVN,SAASO,IAAI,CAAC,CAACC,GAAGC,IAAMA,EAAEnB,SAAS,GAAGkB,EAAElB,SAAS;QAEjD,OAAO;QACP,IAAIS,QAAQW,OAAO;YACjBV,WAAWA,SAASW,KAAK,CAAC,GAAGZ,OAAOW,KAAK;QAC3C;QAEA,OAAOV;IACT;IAEA;;GAEC,GACDY,oBAAoBR,MAAc,EAAED,UAAiC,EAA6B;QAChG,OAAO,IAAI,CAACL,UAAU,CAAC;YAAEM;YAAQD;QAAW;IAC9C;IAEA;;GAEC,GACDU,QAAc;QACZ,IAAI,CAACpB,OAAO,GAAG,EAAE;IACnB;IAEA;;GAEC,GACD,AAAQJ,aAAqB;QAC3B,OAAO,CAAC,OAAO,EAAEE,KAAKC,GAAG,GAAG,CAAC,EAAEsB,KAAKC,MAAM,GAAGC,QAAQ,CAAC,IAAIC,SAAS,CAAC,GAAG,IAAI;IAC7E;IAnFA,YAAYC,OAA6B,CAAE;QAH3C,uBAAQzB,WAAqC,EAAE;QAC/C,uBAAQG,WAAR,KAAA;QAGE,IAAI,CAACA,OAAO,GAAGsB,QAAQtB,OAAO,IAAI;IACpC;AAkFF"}

package/dist/cjs/managers/PermissionManager/modules/DataSourceManager.js

@@ -0,0 +1,176 @@
+/**
+ * 数据源管理器
+ * 负责管理多个权限数据源并合并数据
+ */ "use strict";
+Object.defineProperty(exports, "__esModule", {
+    value: true
+});
+Object.defineProperty(exports, "DataSourceManager", {
+    enumerable: true,
+    get: function() {
+        return DataSourceManager;
+    }
+});
+function _define_property(obj, key, value) {
+    if (key in obj) {
+        Object.defineProperty(obj, key, {
+            value: value,
+            enumerable: true,
+            configurable: true,
+            writable: true
+        });
+    } else {
+        obj[key] = value;
+    }
+    return obj;
+}
+let DataSourceManager = class DataSourceManager {
+    /**
+   * 添加数据源
+   */ addDataSource(dataSource) {
+        this.dataSources.push(dataSource);
+        this.sortDataSources();
+    }
+    /**
+   * 移除数据源
+   */ removeDataSource(name) {
+        this.dataSources = this.dataSources.filter((ds)=>ds.name !== name);
+    }
+    /**
+   * 获取权限数据（从所有数据源）
+   */ async fetchPermissionData() {
+        const enabledSources = this.dataSources.filter((ds)=>ds.enabled !== false);
+        if (enabledSources.length === 0) {
+            return null;
+        }
+        // 按优先级排序
+        const sortedSources = [
+            ...enabledSources
+        ].sort((a, b)=>b.priority - a.priority);
+        // 根据合并策略获取数据
+        switch(this.mergeStrategy){
+            case 'priority':
+                return this.mergeByPriority(sortedSources);
+            case 'union':
+                return this.mergeByUnion(sortedSources);
+            case 'intersection':
+                return this.mergeByIntersection(sortedSources);
+            case 'custom':
+                // 自定义合并策略需要外部提供
+                return null;
+            default:
+                return this.mergeByUnion(sortedSources);
+        }
+    }
+    /**
+   * 按优先级合并（使用最高优先级的数据源）
+   */ async mergeByPriority(sources) {
+        for (const source of sources){
+            try {
+                const data = await source.fetch();
+                if (data) {
+                    return data;
+                }
+            } catch (error) {
+                console.error(`DataSource ${source.name} fetch error:`, error);
+            }
+        }
+        return null;
+    }
+    /**
+   * 按并集合并（合并所有数据源的数据）
+   */ async mergeByUnion(sources) {
+        const allPermissions = new Set();
+        const allRoles = new Set();
+        let permissionTree;
+        let latestUpdatedAt = 0;
+        for (const source of sources){
+            try {
+                const data = await source.fetch();
+                if (data) {
+                    data.permissions?.forEach((p)=>allPermissions.add(p));
+                    data.roles?.forEach((r)=>allRoles.add(r));
+                    if (data.permissionTree && !permissionTree) {
+                        permissionTree = data.permissionTree;
+                    }
+                    if (data.updatedAt && data.updatedAt > latestUpdatedAt) {
+                        latestUpdatedAt = data.updatedAt;
+                    }
+                }
+            } catch (error) {
+                console.error(`DataSource ${source.name} fetch error:`, error);
+            }
+        }
+        if (allPermissions.size === 0 && allRoles.size === 0) {
+            return null;
+        }
+        return {
+            permissions: Array.from(allPermissions),
+            roles: Array.from(allRoles),
+            permissionTree,
+            updatedAt: latestUpdatedAt || Date.now()
+        };
+    }
+    /**
+   * 按交集合并（只保留所有数据源都有的数据）
+   */ async mergeByIntersection(sources) {
+        if (sources.length === 0) {
+            return null;
+        }
+        // 获取第一个数据源的数据作为基准
+        const firstData = await sources[0].fetch();
+        if (!firstData) {
+            return null;
+        }
+        const basePermissions = new Set(firstData.permissions || []);
+        const baseRoles = new Set(firstData.roles || []);
+        // 与其他数据源求交集
+        for(let i = 1; i < sources.length; i++){
+            try {
+                const data = await sources[i].fetch();
+                if (data) {
+                    const dataPermissions = new Set(data.permissions || []);
+                    const dataRoles = new Set(data.roles || []);
+                    // 求交集
+                    basePermissions.forEach((p)=>{
+                        if (!dataPermissions.has(p)) {
+                            basePermissions.delete(p);
+                        }
+                    });
+                    baseRoles.forEach((r)=>{
+                        if (!dataRoles.has(r)) {
+                            baseRoles.delete(r);
+                        }
+                    });
+                } else {
+                    // 如果某个数据源返回 null，交集为空
+                    return null;
+                }
+            } catch (error) {
+                console.error(`DataSource ${sources[i].name} fetch error:`, error);
+                return null;
+            }
+        }
+        return {
+            permissions: Array.from(basePermissions),
+            roles: Array.from(baseRoles),
+            updatedAt: Date.now()
+        };
+    }
+    /**
+   * 排序数据源（按优先级）
+   */ sortDataSources() {
+        this.dataSources.sort((a, b)=>b.priority - a.priority);
+    }
+    constructor(dataSources, mergeStrategy = 'union'){
+        _define_property(this, "dataSources", []);
+        _define_property(this, "mergeStrategy", void 0);
+        this.mergeStrategy = mergeStrategy;
+        if (dataSources) {
+            this.dataSources = dataSources.filter((ds)=>ds.enabled !== false);
+            this.sortDataSources();
+        }
+    }
+};
+
+//# sourceMappingURL=DataSourceManager.js.map

package/dist/cjs/managers/PermissionManager/modules/DataSourceManager.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../../src/managers/PermissionManager/modules/DataSourceManager.ts"],"sourcesContent":["/**\n * 数据源管理器\n * 负责管理多个权限数据源并合并数据\n */\n\nimport type {\n  PermissionDataSource,\n  PermissionData,\n  DataSourceMergeStrategy,\n} from '../types';\n\n/**\n * 数据源管理器\n */\nexport class DataSourceManager {\n  private dataSources: PermissionDataSource[] = [];\n  private mergeStrategy: DataSourceMergeStrategy;\n\n  constructor(\n    dataSources?: PermissionDataSource[],\n    mergeStrategy: DataSourceMergeStrategy = 'union'\n  ) {\n    this.mergeStrategy = mergeStrategy;\n    if (dataSources) {\n      this.dataSources = dataSources.filter(ds => ds.enabled !== false);\n      this.sortDataSources();\n    }\n  }\n\n  /**\n   * 添加数据源\n   */\n  addDataSource(dataSource: PermissionDataSource): void {\n    this.dataSources.push(dataSource);\n    this.sortDataSources();\n  }\n\n  /**\n   * 移除数据源\n   */\n  removeDataSource(name: string): void {\n    this.dataSources = this.dataSources.filter(ds => ds.name !== name);\n  }\n\n  /**\n   * 获取权限数据（从所有数据源）\n   */\n  async fetchPermissionData(): Promise<PermissionData | null> {\n    const enabledSources = this.dataSources.filter(ds => ds.enabled !== false);\n    if (enabledSources.length === 0) {\n      return null;\n    }\n\n    // 按优先级排序\n    const sortedSources = [...enabledSources].sort(\n      (a, b) => b.priority - a.priority\n    );\n\n    // 根据合并策略获取数据\n    switch (this.mergeStrategy) {\n      case 'priority':\n        return this.mergeByPriority(sortedSources);\n      case 'union':\n        return this.mergeByUnion(sortedSources);\n      case 'intersection':\n        return this.mergeByIntersection(sortedSources);\n      case 'custom':\n        // 自定义合并策略需要外部提供\n        return null;\n      default:\n        return this.mergeByUnion(sortedSources);\n    }\n  }\n\n  /**\n   * 按优先级合并（使用最高优先级的数据源）\n   */\n  private async mergeByPriority(\n    sources: PermissionDataSource[]\n  ): Promise<PermissionData | null> {\n    for (const source of sources) {\n      try {\n        const data = await source.fetch();\n        if (data) {\n          return data;\n        }\n      } catch (error) {\n        console.error(`DataSource ${source.name} fetch error:`, error);\n      }\n    }\n    return null;\n  }\n\n  /**\n   * 按并集合并（合并所有数据源的数据）\n   */\n  private async mergeByUnion(\n    sources: PermissionDataSource[]\n  ): Promise<PermissionData | null> {\n    const allPermissions = new Set<string>();\n    const allRoles = new Set<string>();\n    let permissionTree: PermissionData['permissionTree'] | undefined;\n    let latestUpdatedAt = 0;\n\n    for (const source of sources) {\n      try {\n        const data = await source.fetch();\n        if (data) {\n          data.permissions?.forEach(p => allPermissions.add(p));\n          data.roles?.forEach(r => allRoles.add(r));\n          if (data.permissionTree && !permissionTree) {\n            permissionTree = data.permissionTree;\n          }\n          if (data.updatedAt && data.updatedAt > latestUpdatedAt) {\n            latestUpdatedAt = data.updatedAt;\n          }\n        }\n      } catch (error) {\n        console.error(`DataSource ${source.name} fetch error:`, error);\n      }\n    }\n\n    if (allPermissions.size === 0 && allRoles.size === 0) {\n      return null;\n    }\n\n    return {\n      permissions: Array.from(allPermissions),\n      roles: Array.from(allRoles),\n      permissionTree,\n      updatedAt: latestUpdatedAt || Date.now(),\n    };\n  }\n\n  /**\n   * 按交集合并（只保留所有数据源都有的数据）\n   */\n  private async mergeByIntersection(\n    sources: PermissionDataSource[]\n  ): Promise<PermissionData | null> {\n    if (sources.length === 0) {\n      return null;\n    }\n\n    // 获取第一个数据源的数据作为基准\n    const firstData = await sources[0].fetch();\n    if (!firstData) {\n      return null;\n    }\n\n    const basePermissions = new Set(firstData.permissions || []);\n    const baseRoles = new Set(firstData.roles || []);\n\n    // 与其他数据源求交集\n    for (let i = 1; i < sources.length; i++) {\n      try {\n        const data = await sources[i].fetch();\n        if (data) {\n          const dataPermissions = new Set(data.permissions || []);\n          const dataRoles = new Set(data.roles || []);\n\n          // 求交集\n          basePermissions.forEach(p => {\n            if (!dataPermissions.has(p)) {\n              basePermissions.delete(p);\n            }\n          });\n          baseRoles.forEach(r => {\n            if (!dataRoles.has(r)) {\n              baseRoles.delete(r);\n            }\n          });\n        } else {\n          // 如果某个数据源返回 null，交集为空\n          return null;\n        }\n      } catch (error) {\n        console.error(`DataSource ${sources[i].name} fetch error:`, error);\n        return null;\n      }\n    }\n\n    return {\n      permissions: Array.from(basePermissions),\n      roles: Array.from(baseRoles),\n      updatedAt: Date.now(),\n    };\n  }\n\n  /**\n   * 排序数据源（按优先级）\n   */\n  private sortDataSources(): void {\n    this.dataSources.sort((a, b) => b.priority - a.priority);\n  }\n}\n"],"names":["DataSourceManager","addDataSource","dataSource","dataSources","push","sortDataSources","removeDataSource","name","filter","ds","fetchPermissionData","enabledSources","enabled","length","sortedSources","sort","a","b","priority","mergeStrategy","mergeByPriority","mergeByUnion","mergeByIntersection","sources","source","data","fetch","error","console","allPermissions","Set","allRoles","permissionTree","latestUpdatedAt","permissions","forEach","p","add","roles","r","updatedAt","size","Array","from","Date","now","firstData","basePermissions","baseRoles","i","dataPermissions","dataRoles","has","delete"],"mappings":"AAAA;;;CAGC;;;;+BAWYA;;;eAAAA;;;;;;;;;;;;;;;;AAAN,IAAA,AAAMA,oBAAN,MAAMA;IAeX;;GAEC,GACDC,cAAcC,UAAgC,EAAQ;QACpD,IAAI,CAACC,WAAW,CAACC,IAAI,CAACF;QACtB,IAAI,CAACG,eAAe;IACtB;IAEA;;GAEC,GACDC,iBAAiBC,IAAY,EAAQ;QACnC,IAAI,CAACJ,WAAW,GAAG,IAAI,CAACA,WAAW,CAACK,MAAM,CAACC,CAAAA,KAAMA,GAAGF,IAAI,KAAKA;IAC/D;IAEA;;GAEC,GACD,MAAMG,sBAAsD;QAC1D,MAAMC,iBAAiB,IAAI,CAACR,WAAW,CAACK,MAAM,CAACC,CAAAA,KAAMA,GAAGG,OAAO,KAAK;QACpE,IAAID,eAAeE,MAAM,KAAK,GAAG;YAC/B,OAAO;QACT;QAEA,SAAS;QACT,MAAMC,gBAAgB;eAAIH;SAAe,CAACI,IAAI,CAC5C,CAACC,GAAGC,IAAMA,EAAEC,QAAQ,GAAGF,EAAEE,QAAQ;QAGnC,aAAa;QACb,OAAQ,IAAI,CAACC,aAAa;YACxB,KAAK;gBACH,OAAO,IAAI,CAACC,eAAe,CAACN;YAC9B,KAAK;gBACH,OAAO,IAAI,CAACO,YAAY,CAACP;YAC3B,KAAK;gBACH,OAAO,IAAI,CAACQ,mBAAmB,CAACR;YAClC,KAAK;gBACH,gBAAgB;gBAChB,OAAO;YACT;gBACE,OAAO,IAAI,CAACO,YAAY,CAACP;QAC7B;IACF;IAEA;;GAEC,GACD,MAAcM,gBACZG,OAA+B,EACC;QAChC,KAAK,MAAMC,UAAUD,QAAS;YAC5B,IAAI;gBACF,MAAME,OAAO,MAAMD,OAAOE,KAAK;gBAC/B,IAAID,MAAM;oBACR,OAAOA;gBACT;YACF,EAAE,OAAOE,OAAO;gBACdC,QAAQD,KAAK,CAAC,CAAC,WAAW,EAAEH,OAAOjB,IAAI,CAAC,aAAa,CAAC,EAAEoB;YAC1D;QACF;QACA,OAAO;IACT;IAEA;;GAEC,GACD,MAAcN,aACZE,OAA+B,EACC;QAChC,MAAMM,iBAAiB,IAAIC;QAC3B,MAAMC,WAAW,IAAID;QACrB,IAAIE;QACJ,IAAIC,kBAAkB;QAEtB,KAAK,MAAMT,UAAUD,QAAS;YAC5B,IAAI;gBACF,MAAME,OAAO,MAAMD,OAAOE,KAAK;gBAC/B,IAAID,MAAM;oBACRA,KAAKS,WAAW,EAAEC,QAAQC,CAAAA,IAAKP,eAAeQ,GAAG,CAACD;oBAClDX,KAAKa,KAAK,EAAEH,QAAQI,CAAAA,IAAKR,SAASM,GAAG,CAACE;oBACtC,IAAId,KAAKO,cAAc,IAAI,CAACA,gBAAgB;wBAC1CA,iBAAiBP,KAAKO,cAAc;oBACtC;oBACA,IAAIP,KAAKe,SAAS,IAAIf,KAAKe,SAAS,GAAGP,iBAAiB;wBACtDA,kBAAkBR,KAAKe,SAAS;oBAClC;gBACF;YACF,EAAE,OAAOb,OAAO;gBACdC,QAAQD,KAAK,CAAC,CAAC,WAAW,EAAEH,OAAOjB,IAAI,CAAC,aAAa,CAAC,EAAEoB;YAC1D;QACF;QAEA,IAAIE,eAAeY,IAAI,KAAK,KAAKV,SAASU,IAAI,KAAK,GAAG;YACpD,OAAO;QACT;QAEA,OAAO;YACLP,aAAaQ,MAAMC,IAAI,CAACd;YACxBS,OAAOI,MAAMC,IAAI,CAACZ;YAClBC;YACAQ,WAAWP,mBAAmBW,KAAKC,GAAG;QACxC;IACF;IAEA;;GAEC,GACD,MAAcvB,oBACZC,OAA+B,EACC;QAChC,IAAIA,QAAQV,MAAM,KAAK,GAAG;YACxB,OAAO;QACT;QAEA,kBAAkB;QAClB,MAAMiC,YAAY,MAAMvB,OAAO,CAAC,EAAE,CAACG,KAAK;QACxC,IAAI,CAACoB,WAAW;YACd,OAAO;QACT;QAEA,MAAMC,kBAAkB,IAAIjB,IAAIgB,UAAUZ,WAAW,IAAI,EAAE;QAC3D,MAAMc,YAAY,IAAIlB,IAAIgB,UAAUR,KAAK,IAAI,EAAE;QAE/C,YAAY;QACZ,IAAK,IAAIW,IAAI,GAAGA,IAAI1B,QAAQV,MAAM,EAAEoC,IAAK;YACvC,IAAI;gBACF,MAAMxB,OAAO,MAAMF,OAAO,CAAC0B,EAAE,CAACvB,KAAK;gBACnC,IAAID,MAAM;oBACR,MAAMyB,kBAAkB,IAAIpB,IAAIL,KAAKS,WAAW,IAAI,EAAE;oBACtD,MAAMiB,YAAY,IAAIrB,IAAIL,KAAKa,KAAK,IAAI,EAAE;oBAE1C,MAAM;oBACNS,gBAAgBZ,OAAO,CAACC,CAAAA;wBACtB,IAAI,CAACc,gBAAgBE,GAAG,CAAChB,IAAI;4BAC3BW,gBAAgBM,MAAM,CAACjB;wBACzB;oBACF;oBACAY,UAAUb,OAAO,CAACI,CAAAA;wBAChB,IAAI,CAACY,UAAUC,GAAG,CAACb,IAAI;4BACrBS,UAAUK,MAAM,CAACd;wBACnB;oBACF;gBACF,OAAO;oBACL,sBAAsB;oBACtB,OAAO;gBACT;YACF,EAAE,OAAOZ,OAAO;gBACdC,QAAQD,KAAK,CAAC,CAAC,WAAW,EAAEJ,OAAO,CAAC0B,EAAE,CAAC1C,IAAI,CAAC,aAAa,CAAC,EAAEoB;gBAC5D,OAAO;YACT;QACF;QAEA,OAAO;YACLO,aAAaQ,MAAMC,IAAI,CAACI;YACxBT,OAAOI,MAAMC,IAAI,CAACK;YAClBR,WAAWI,KAAKC,GAAG;QACrB;IACF;IAEA;;GAEC,GACD,AAAQxC,kBAAwB;QAC9B,IAAI,CAACF,WAAW,CAACY,IAAI,CAAC,CAACC,GAAGC,IAAMA,EAAEC,QAAQ,GAAGF,EAAEE,QAAQ;IACzD;IAhLA,YACEf,WAAoC,EACpCgB,gBAAyC,OAAO,CAChD;QANF,uBAAQhB,eAAsC,EAAE;QAChD,uBAAQgB,iBAAR,KAAA;QAME,IAAI,CAACA,aAAa,GAAGA;QACrB,IAAIhB,aAAa;YACf,IAAI,CAACA,WAAW,GAAGA,YAAYK,MAAM,CAACC,CAAAA,KAAMA,GAAGG,OAAO,KAAK;YAC3D,IAAI,CAACP,eAAe;QACtB;IACF;AAwKF"}

package/dist/cjs/managers/PermissionManager/modules/EncryptionService.js

@@ -0,0 +1,142 @@
+/**
+ * 加密服务模块
+ * 负责权限数据的加密和解密
+ */ /**
+ * 加密服务
+ */ "use strict";
+Object.defineProperty(exports, "__esModule", {
+    value: true
+});
+Object.defineProperty(exports, "EncryptionService", {
+    enumerable: true,
+    get: function() {
+        return EncryptionService;
+    }
+});
+function _define_property(obj, key, value) {
+    if (key in obj) {
+        Object.defineProperty(obj, key, {
+            value: value,
+            enumerable: true,
+            configurable: true,
+            writable: true
+        });
+    } else {
+        obj[key] = value;
+    }
+    return obj;
+}
+let EncryptionService = class EncryptionService {
+    /**
+   * 加密权限数据
+   */ async encryptPermissionData(data) {
+        if (!this.enableEncryption || !this.encryptionKey) {
+            return data;
+        }
+        try {
+            const key = this.encryptionKey;
+            const encrypt = this.encryptFn || this.defaultEncrypt.bind(this);
+            // 序列化数据
+            const serialized = JSON.stringify(data);
+            // 加密
+            const encrypted = await encrypt(serialized, key);
+            // 返回加密后的数据（包装在特殊结构中，使用 permissions 数组临时存储）
+            // 注意：_encrypted 是内部标记，不影响外部类型
+            const encryptedData = {
+                permissions: [
+                    encrypted
+                ],
+                roles: [],
+                updatedAt: data.updatedAt,
+                expiresAt: data.expiresAt
+            };
+            return encryptedData;
+        } catch (error) {
+            this.logger?.error('Failed to encrypt permission data:', error);
+            throw error;
+        }
+    }
+    /**
+   * 解密权限数据
+   */ async decryptPermissionData(data) {
+        if (!this.enableEncryption || !this.encryptionKey) {
+            return data;
+        }
+        try {
+            const key = this.encryptionKey;
+            const decrypt = this.decryptFn || this.defaultDecrypt.bind(this);
+            // 检查是否是加密数据（permissions 数组只有一个元素且是长字符串）
+            if (data.permissions && data.permissions.length === 1 && typeof data.permissions[0] === 'string' && data.permissions[0].length > 100) {
+                // 可能是加密数据
+                const encrypted = data.permissions[0];
+                const decrypted = await decrypt(encrypted, key);
+                return JSON.parse(decrypted);
+            }
+            return data;
+        } catch (error) {
+            this.logger?.error('Failed to decrypt permission data:', error);
+            throw error;
+        }
+    }
+    /**
+   * 默认加密函数（简单 XOR 加密，仅用于开发环境）
+   */ defaultEncrypt(data, key) {
+        let encrypted = '';
+        for(let i = 0; i < data.length; i++){
+            const charCode = data.charCodeAt(i);
+            const keyCharCode = key.charCodeAt(i % key.length);
+            encrypted += String.fromCharCode(charCode ^ keyCharCode);
+        }
+        // Base64 编码
+        try {
+            if (typeof btoa !== 'undefined') {
+                return btoa(encrypted);
+            }
+            if (typeof Buffer !== 'undefined') {
+                return Buffer.from(encrypted, 'binary').toString('base64');
+            }
+        } catch  {
+            return encrypted;
+        }
+        return encrypted;
+    }
+    /**
+   * 默认解密函数
+   */ defaultDecrypt(encryptedData, key) {
+        // Base64 解码
+        let decoded;
+        try {
+            if (typeof atob !== 'undefined') {
+                decoded = atob(encryptedData);
+            } else if (typeof Buffer !== 'undefined') {
+                decoded = Buffer.from(encryptedData, 'base64').toString('binary');
+            } else {
+                decoded = encryptedData;
+            }
+        } catch  {
+            return encryptedData;
+        }
+        // XOR 解密
+        let decrypted = '';
+        for(let i = 0; i < decoded.length; i++){
+            const charCode = decoded.charCodeAt(i);
+            const keyCharCode = key.charCodeAt(i % key.length);
+            decrypted += String.fromCharCode(charCode ^ keyCharCode);
+        }
+        return decrypted;
+    }
+    constructor(options){
+        _define_property(this, "enableEncryption", void 0);
+        _define_property(this, "encryptionKey", void 0);
+        _define_property(this, "encryptFn", void 0);
+        _define_property(this, "decryptFn", void 0);
+        _define_property(this, "logger", void 0);
+        this.enableEncryption = options.enableEncryption;
+        this.encryptionKey = options.encryptionKey;
+        this.encryptFn = options.encrypt;
+        this.decryptFn = options.decrypt;
+        this.logger = options.logger;
+    }
+};
+
+//# sourceMappingURL=EncryptionService.js.map

package/dist/cjs/managers/PermissionManager/modules/EncryptionService.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../../src/managers/PermissionManager/modules/EncryptionService.ts"],"sourcesContent":["/**\n * 加密服务模块\n * 负责权限数据的加密和解密\n */\n\n/**\n * 加密服务\n */\nexport class EncryptionService {\n  private enableEncryption: boolean;\n  private encryptionKey?: string;\n  private encryptFn?: (data: string, key: string) => string | Promise<string>;\n  private decryptFn?: (encryptedData: string, key: string) => string | Promise<string>;\n  private logger?: { error: (message: string, ...args: unknown[]) => void };\n\n  constructor(\n    options: {\n      enableEncryption: boolean;\n      encryptionKey?: string;\n      encrypt?: (data: string, key: string) => string | Promise<string>;\n      decrypt?: (encryptedData: string, key: string) => string | Promise<string>;\n      logger?: { error: (message: string, ...args: unknown[]) => void };\n    }\n  ) {\n    this.enableEncryption = options.enableEncryption;\n    this.encryptionKey = options.encryptionKey;\n    this.encryptFn = options.encrypt;\n    this.decryptFn = options.decrypt;\n    this.logger = options.logger;\n  }\n\n  /**\n   * 加密权限数据\n   */\n  async encryptPermissionData(data: any): Promise<any> {\n    if (!this.enableEncryption || !this.encryptionKey) {\n      return data;\n    }\n\n    try {\n      const key = this.encryptionKey;\n      const encrypt = this.encryptFn || this.defaultEncrypt.bind(this);\n      \n      // 序列化数据\n      const serialized = JSON.stringify(data);\n      \n      // 加密\n      const encrypted = await encrypt(serialized, key);\n      \n      // 返回加密后的数据（包装在特殊结构中，使用 permissions 数组临时存储）\n      // 注意：_encrypted 是内部标记，不影响外部类型\n      const encryptedData = {\n        permissions: [encrypted], // 临时存储加密数据\n        roles: [],\n        updatedAt: data.updatedAt,\n        expiresAt: data.expiresAt,\n      };\n      return encryptedData;\n    } catch (error) {\n      this.logger?.error('Failed to encrypt permission data:', error);\n      throw error;\n    }\n  }\n\n  /**\n   * 解密权限数据\n   */\n  async decryptPermissionData(data: any): Promise<any> {\n    if (!this.enableEncryption || !this.encryptionKey) {\n      return data;\n    }\n\n    try {\n      const key = this.encryptionKey!;\n      const decrypt = this.decryptFn || this.defaultDecrypt.bind(this);\n      \n      // 检查是否是加密数据（permissions 数组只有一个元素且是长字符串）\n      if (data.permissions && data.permissions.length === 1 && typeof data.permissions[0] === 'string' && data.permissions[0].length > 100) {\n        // 可能是加密数据\n        const encrypted = data.permissions[0];\n        const decrypted = await decrypt(encrypted, key);\n        return JSON.parse(decrypted);\n      }\n      \n      return data;\n    } catch (error) {\n      this.logger?.error('Failed to decrypt permission data:', error);\n      throw error;\n    }\n  }\n\n  /**\n   * 默认加密函数（简单 XOR 加密，仅用于开发环境）\n   */\n  private defaultEncrypt(data: string, key: string): string {\n    let encrypted = '';\n    for (let i = 0; i < data.length; i++) {\n      const charCode = data.charCodeAt(i);\n      const keyCharCode = key.charCodeAt(i % key.length);\n      encrypted += String.fromCharCode(charCode ^ keyCharCode);\n    }\n    \n    // Base64 编码\n    try {\n      if (typeof btoa !== 'undefined') {\n        return btoa(encrypted);\n      }\n      if (typeof Buffer !== 'undefined') {\n        return Buffer.from(encrypted, 'binary').toString('base64');\n      }\n    } catch {\n      return encrypted;\n    }\n    \n    return encrypted;\n  }\n\n  /**\n   * 默认解密函数\n   */\n  private defaultDecrypt(encryptedData: string, key: string): string {\n    // Base64 解码\n    let decoded: string;\n    try {\n      if (typeof atob !== 'undefined') {\n        decoded = atob(encryptedData);\n      } else if (typeof Buffer !== 'undefined') {\n        decoded = Buffer.from(encryptedData, 'base64').toString('binary');\n      } else {\n        decoded = encryptedData;\n      }\n    } catch {\n      return encryptedData;\n    }\n    \n    // XOR 解密\n    let decrypted = '';\n    for (let i = 0; i < decoded.length; i++) {\n      const charCode = decoded.charCodeAt(i);\n      const keyCharCode = key.charCodeAt(i % key.length);\n      decrypted += String.fromCharCode(charCode ^ keyCharCode);\n    }\n    \n    return decrypted;\n  }\n}\n"],"names":["EncryptionService","encryptPermissionData","data","enableEncryption","encryptionKey","key","encrypt","encryptFn","defaultEncrypt","bind","serialized","JSON","stringify","encrypted","encryptedData","permissions","roles","updatedAt","expiresAt","error","logger","decryptPermissionData","decrypt","decryptFn","defaultDecrypt","length","decrypted","parse","i","charCode","charCodeAt","keyCharCode","String","fromCharCode","btoa","Buffer","from","toString","decoded","atob","options"],"mappings":"AAAA;;;CAGC,GAED;;CAEC;;;;+BACYA;;;eAAAA;;;;;;;;;;;;;;;;AAAN,IAAA,AAAMA,oBAAN,MAAMA;IAuBX;;GAEC,GACD,MAAMC,sBAAsBC,IAAS,EAAgB;QACnD,IAAI,CAAC,IAAI,CAACC,gBAAgB,IAAI,CAAC,IAAI,CAACC,aAAa,EAAE;YACjD,OAAOF;QACT;QAEA,IAAI;YACF,MAAMG,MAAM,IAAI,CAACD,aAAa;YAC9B,MAAME,UAAU,IAAI,CAACC,SAAS,IAAI,IAAI,CAACC,cAAc,CAACC,IAAI,CAAC,IAAI;YAE/D,QAAQ;YACR,MAAMC,aAAaC,KAAKC,SAAS,CAACV;YAElC,KAAK;YACL,MAAMW,YAAY,MAAMP,QAAQI,YAAYL;YAE5C,2CAA2C;YAC3C,8BAA8B;YAC9B,MAAMS,gBAAgB;gBACpBC,aAAa;oBAACF;iBAAU;gBACxBG,OAAO,EAAE;gBACTC,WAAWf,KAAKe,SAAS;gBACzBC,WAAWhB,KAAKgB,SAAS;YAC3B;YACA,OAAOJ;QACT,EAAE,OAAOK,OAAO;YACd,IAAI,CAACC,MAAM,EAAED,MAAM,sCAAsCA;YACzD,MAAMA;QACR;IACF;IAEA;;GAEC,GACD,MAAME,sBAAsBnB,IAAS,EAAgB;QACnD,IAAI,CAAC,IAAI,CAACC,gBAAgB,IAAI,CAAC,IAAI,CAACC,aAAa,EAAE;YACjD,OAAOF;QACT;QAEA,IAAI;YACF,MAAMG,MAAM,IAAI,CAACD,aAAa;YAC9B,MAAMkB,UAAU,IAAI,CAACC,SAAS,IAAI,IAAI,CAACC,cAAc,CAACf,IAAI,CAAC,IAAI;YAE/D,wCAAwC;YACxC,IAAIP,KAAKa,WAAW,IAAIb,KAAKa,WAAW,CAACU,MAAM,KAAK,KAAK,OAAOvB,KAAKa,WAAW,CAAC,EAAE,KAAK,YAAYb,KAAKa,WAAW,CAAC,EAAE,CAACU,MAAM,GAAG,KAAK;gBACpI,UAAU;gBACV,MAAMZ,YAAYX,KAAKa,WAAW,CAAC,EAAE;gBACrC,MAAMW,YAAY,MAAMJ,QAAQT,WAAWR;gBAC3C,OAAOM,KAAKgB,KAAK,CAACD;YACpB;YAEA,OAAOxB;QACT,EAAE,OAAOiB,OAAO;YACd,IAAI,CAACC,MAAM,EAAED,MAAM,sCAAsCA;YACzD,MAAMA;QACR;IACF;IAEA;;GAEC,GACD,AAAQX,eAAeN,IAAY,EAAEG,GAAW,EAAU;QACxD,IAAIQ,YAAY;QAChB,IAAK,IAAIe,IAAI,GAAGA,IAAI1B,KAAKuB,MAAM,EAAEG,IAAK;YACpC,MAAMC,WAAW3B,KAAK4B,UAAU,CAACF;YACjC,MAAMG,cAAc1B,IAAIyB,UAAU,CAACF,IAAIvB,IAAIoB,MAAM;YACjDZ,aAAamB,OAAOC,YAAY,CAACJ,WAAWE;QAC9C;QAEA,YAAY;QACZ,IAAI;YACF,IAAI,OAAOG,SAAS,aAAa;gBAC/B,OAAOA,KAAKrB;YACd;YACA,IAAI,OAAOsB,WAAW,aAAa;gBACjC,OAAOA,OAAOC,IAAI,CAACvB,WAAW,UAAUwB,QAAQ,CAAC;YACnD;QACF,EAAE,OAAM;YACN,OAAOxB;QACT;QAEA,OAAOA;IACT;IAEA;;GAEC,GACD,AAAQW,eAAeV,aAAqB,EAAET,GAAW,EAAU;QACjE,YAAY;QACZ,IAAIiC;QACJ,IAAI;YACF,IAAI,OAAOC,SAAS,aAAa;gBAC/BD,UAAUC,KAAKzB;YACjB,OAAO,IAAI,OAAOqB,WAAW,aAAa;gBACxCG,UAAUH,OAAOC,IAAI,CAACtB,eAAe,UAAUuB,QAAQ,CAAC;YAC1D,OAAO;gBACLC,UAAUxB;YACZ;QACF,EAAE,OAAM;YACN,OAAOA;QACT;QAEA,SAAS;QACT,IAAIY,YAAY;QAChB,IAAK,IAAIE,IAAI,GAAGA,IAAIU,QAAQb,MAAM,EAAEG,IAAK;YACvC,MAAMC,WAAWS,QAAQR,UAAU,CAACF;YACpC,MAAMG,cAAc1B,IAAIyB,UAAU,CAACF,IAAIvB,IAAIoB,MAAM;YACjDC,aAAaM,OAAOC,YAAY,CAACJ,WAAWE;QAC9C;QAEA,OAAOL;IACT;IAjIA,YACEc,OAMC,CACD;QAdF,uBAAQrC,oBAAR,KAAA;QACA,uBAAQC,iBAAR,KAAA;QACA,uBAAQG,aAAR,KAAA;QACA,uBAAQgB,aAAR,KAAA;QACA,uBAAQH,UAAR,KAAA;QAWE,IAAI,CAACjB,gBAAgB,GAAGqC,QAAQrC,gBAAgB;QAChD,IAAI,CAACC,aAAa,GAAGoC,QAAQpC,aAAa;QAC1C,IAAI,CAACG,SAAS,GAAGiC,QAAQlC,OAAO;QAChC,IAAI,CAACiB,SAAS,GAAGiB,QAAQlB,OAAO;QAChC,IAAI,CAACF,MAAM,GAAGoB,QAAQpB,MAAM;IAC9B;AAoHF"}