@yss123/cage-admin 0.0.0-stage → 0.1.0

package/dist/domain/org.js

@@ -0,0 +1,238 @@
+// 组织模型：部门、用户、角色。它们本身也是聚合，增删改都是命令，同样被鉴权、写审计。
+// 业务 domain 包通过 export * from '@yss123/cage-admin/domain' 把它们纳入注册表。
+import { scryptSync, randomBytes } from 'node:crypto';
+import { aggregate, command, enumOf, fail, id, json, list, ref, scope, states, text, COMBINATORS, } from '@yss123/cage-kernel';
+import { z } from 'zod';
+import { noEscalation, noEscalationViaRoles, noWiderScope, knownCapability } from './constraints.js';
+// ---------------- 部门 ----------------
+export const Dept = aggregate('Dept', {
+    description: '部门',
+    fields: {
+        name: text(100),
+        code: text(64).optional(),
+        parentId: ref('Dept').optional(),
+        /** 祖先路径（含自己），例如 /根id/采购部id/，「本部门及下级」按前缀匹配 */
+        ancestors: text(4000),
+        /** 部门负责人（审批路由 approver.deptLeader 使用） */
+        leaderId: id().optional(),
+    },
+    states: states('active', 'archived', { terminal: ['archived'] }),
+    scope: scope.of({ dept: 'id' }),
+    table: { schema: 'sys', name: 'dept' },
+    options: { grants: 'all' },
+});
+export const User = aggregate('User', {
+    description: '用户',
+    fields: {
+        username: text(64).unique(),
+        name: text(100).sensitive('name'),
+        deptId: ref(Dept),
+        roleIds: list(id()),
+        phone: text(32).sensitive('phone').optional(),
+        email: text(200).sensitive('email').optional(),
+        /** SSO 主体标识 */
+        ssoSubject: text(200).optional(),
+        /** 密码哈希：隐藏字段，不进入读侧、审计、事件和前端契约 */
+        passwordHash: text(500).hidden().optional(),
+    },
+    states: states('active', 'disabled'),
+    scope: scope.of({ dept: 'deptId' }),
+    table: { schema: 'sys', name: 'user' },
+    options: { grants: 'self' },
+});
+export const Role = aggregate('Role', {
+    description: '角色',
+    fields: {
+        code: text(64).unique(),
+        name: text(100),
+        /** 能力点及参数，例如 { capability: 'PurchaseOrder.approve', params: { ceiling: 50000 } } */
+        capabilities: list({ capability: text(200), params: json().optional() }),
+        /** 各聚合上的数据范围；aggregate 为 * 表示所有聚合 */
+        scopes: list({ aggregate: text(100), combinator: enumOf(...COMBINATORS), deptIds: list(id()).optional() }),
+    },
+    states: states('active', 'archived', { terminal: ['archived'] }),
+    scope: scope.none(),
+    table: { schema: 'sys', name: 'role' },
+    options: { grants: 'all' },
+});
+// ---------------- 部门命令 ----------------
+export const createDept = command(Dept, {
+    name: 'create',
+    description: '新建部门',
+    from: 'new',
+    to: 'active',
+    input: z.object({ name: z.string().min(1).max(100), code: z.string().max(64).optional(), parentId: z.string().uuid().nullable().optional(), leaderId: z.string().uuid().nullable().optional() }),
+    reads: { depts: Dept },
+    handler: async (o, input, { depts }) => {
+        const parent = input.parentId ? await depts.get(input.parentId) : null;
+        if (input.parentId && !parent)
+            return fail('PARENT_NOT_FOUND');
+        return { ancestors: `${parent?.ancestors ?? '/'}${o.id}/` };
+    },
+});
+export const updateDept = command(Dept, {
+    name: 'update',
+    description: '修改部门名称、编码、负责人',
+    from: 'active',
+    to: 'active',
+    input: z.object({ id: z.string().uuid(), name: z.string().min(1).max(100).optional(), code: z.string().max(64).nullable().optional(), leaderId: z.string().uuid().nullable().optional() }),
+    handler: (o, input) => ({
+        name: input.name ?? o.name,
+        code: input.code === undefined ? o.code : input.code,
+        leaderId: input.leaderId === undefined ? o.leaderId : input.leaderId,
+    }),
+});
+export const archiveDept = command(Dept, {
+    name: 'archive',
+    description: '停用部门（没有在职用户和下级部门时）',
+    from: 'active',
+    to: 'archived',
+    reads: { users: User, depts: Dept },
+    handler: async (o, _input, deps) => {
+        if ((await deps.depts.count({ parentId: o.id, status: 'active' })) > 0)
+            return fail('HAS_CHILDREN');
+        if ((await deps.users.count({ deptId: o.id, status: 'active' })) > 0)
+            return fail('HAS_USERS');
+        return {};
+    },
+});
+// ---------------- 用户 ----------------
+const userInput = {
+    name: z.string().min(1).max(100),
+    deptId: z.string().uuid(),
+    phone: z.string().max(32).nullable().optional(),
+    email: z.string().email().max(200).nullable().optional(),
+};
+export const createUser = command(User, {
+    name: 'create',
+    description: '新建用户（默认没有任何角色）',
+    from: 'new',
+    to: 'active',
+    input: z.object({ username: z.string().min(2).max(64).regex(/^[A-Za-z0-9_.@-]+$/), ...userInput, ssoSubject: z.string().max(200).nullable().optional() }),
+    reads: { users: User, depts: Dept },
+    handler: async (o, input, { users, depts }) => {
+        if (await users.findOne({ username: input.username }))
+            return fail('USERNAME_TAKEN');
+        if (!(await depts.get(input.deptId)))
+            return fail('DEPT_NOT_FOUND');
+        return { roleIds: [] };
+    },
+});
+export const updateUser = command(User, {
+    name: 'update',
+    description: '修改用户信息',
+    from: 'active',
+    to: 'active',
+    input: z.object({ id: z.string().uuid(), name: userInput.name.optional(), deptId: userInput.deptId.optional(), phone: userInput.phone, email: userInput.email }),
+    reads: { depts: Dept },
+    handler: async (o, input, { depts }) => {
+        if (input.deptId && !(await depts.get(input.deptId)))
+            return fail('DEPT_NOT_FOUND');
+        return {
+            name: input.name ?? o.name,
+            deptId: input.deptId ?? o.deptId,
+            phone: input.phone === undefined ? o.phone : input.phone,
+            email: input.email === undefined ? o.email : input.email,
+        };
+    },
+});
+export const assignRoles = command(User, {
+    name: 'assignRoles',
+    description: '设置用户的角色（不能分配包含自己没有的能力的角色）',
+    from: 'active',
+    to: 'active',
+    input: z.object({ id: z.string().uuid(), roleIds: z.array(z.string().uuid()).max(50) }),
+    constraints: [noEscalationViaRoles()],
+    reads: { roles: Role },
+    handler: async (_o, input, deps) => {
+        for (const rid of input.roleIds) {
+            const r = await deps.roles.get(rid);
+            if (!r || r.status !== 'active')
+                return fail('ROLE_NOT_FOUND', { roleId: rid });
+        }
+        return { roleIds: [...new Set(input.roleIds)] };
+    },
+});
+export const disableUser = command(User, { name: 'disable', description: '停用用户', from: 'active', to: 'disabled', handler: () => ({}) });
+export const enableUser = command(User, { name: 'enable', description: '启用用户', from: 'disabled', to: 'active', handler: () => ({}) });
+/** 密码哈希：scrypt$盐$哈希（纯计算，不做 IO） */
+export function hashPassword(pw) {
+    const salt = randomBytes(16).toString('hex');
+    return `scrypt$${salt}$${scryptSync(pw, salt, 32).toString('hex')}`;
+}
+export const setPassword = command(User, {
+    name: 'setPassword',
+    description: '重置密码',
+    from: 'active',
+    to: 'active',
+    input: z.object({ id: z.string().uuid(), password: z.string().min(8).max(200) }),
+    handler: (_o, input) => ({ passwordHash: hashPassword(input.password) }),
+});
+// ---------------- 角色命令 ----------------
+export const createRole = command(Role, {
+    name: 'create',
+    description: '新建角色（默认没有任何能力）',
+    from: 'new',
+    to: 'active',
+    input: z.object({ code: z.string().min(1).max(64).regex(/^[a-z][a-z0-9_]*$/), name: z.string().min(1).max(100) }),
+    reads: { roles: Role },
+    handler: async (_o, input, { roles }) => {
+        if (await roles.findOne({ code: input.code }))
+            return fail('CODE_TAKEN');
+        return { capabilities: [], scopes: [] };
+    },
+});
+export const renameRole = command(Role, {
+    name: 'rename',
+    description: '修改角色名称',
+    from: 'active',
+    to: 'active',
+    input: z.object({ id: z.string().uuid(), name: z.string().min(1).max(100) }),
+    handler: (_o, input) => ({ name: input.name }),
+});
+export const grantCapability = command(Role, {
+    name: 'grantCapability',
+    description: '给角色授予能力点（不能授出自己没有的能力点）',
+    from: 'active',
+    to: 'active',
+    input: z.object({ id: z.string().uuid(), capability: z.string().min(1).max(200), params: z.record(z.string(), z.unknown()).optional() }),
+    constraints: [knownCapability(), noEscalation()],
+    handler: (role, input) => ({
+        capabilities: [
+            ...role.capabilities.filter((c) => c.capability !== input.capability),
+            { capability: input.capability, params: input.params ?? null },
+        ].sort((a, b) => a.capability.localeCompare(b.capability)),
+    }),
+});
+export const revokeCapability = command(Role, {
+    name: 'revokeCapability',
+    description: '收回角色的能力点',
+    from: 'active',
+    to: 'active',
+    input: z.object({ id: z.string().uuid(), capability: z.string().min(1).max(200) }),
+    handler: (role, input) => ({ capabilities: role.capabilities.filter((c) => c.capability !== input.capability) }),
+});
+export const setScope = command(Role, {
+    name: 'setScope',
+    description: '设置角色在某个聚合上的数据范围（不能授出比自己更宽的范围）',
+    from: 'active',
+    to: 'active',
+    input: z.object({
+        id: z.string().uuid(),
+        aggregate: z.string().min(1).max(100),
+        combinator: z.enum(['all', 'self', 'dept', 'deptSubtree', 'deptSet']).nullable(),
+        deptIds: z.array(z.string().uuid()).optional(),
+    }),
+    constraints: [noWiderScope()],
+    handler: (role, input) => {
+        const rest = role.scopes.filter((s) => s.aggregate !== input.aggregate);
+        if (input.combinator === null)
+            return { scopes: rest };
+        return {
+            scopes: [...rest, { aggregate: input.aggregate, combinator: input.combinator, deptIds: input.combinator === 'deptSet' ? input.deptIds ?? [] : null }]
+                .sort((a, b) => a.aggregate.localeCompare(b.aggregate)),
+        };
+    },
+});
+export const archiveRole = command(Role, { name: 'archive', description: '停用角色', from: 'active', to: 'archived', handler: () => ({}) });
+//# sourceMappingURL=org.js.map

package/dist/domain/org.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"org.js","sourceRoot":"","sources":["../../src/domain/org.ts"],"names":[],"mappings":"AAAA,4CAA4C;AAC5C,oEAAoE;AACpE,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AACtD,OAAO,EACL,SAAS,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,WAAW,GACxF,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,YAAY,EAAE,oBAAoB,EAAE,YAAY,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AAErG,uCAAuC;AAEvC,MAAM,CAAC,MAAM,IAAI,GAAG,SAAS,CAAC,MAAM,EAAE;IACpC,WAAW,EAAE,IAAI;IACjB,MAAM,EAAE;QACN,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC;QACf,IAAI,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE;QACzB,QAAQ,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE;QAChC,6CAA6C;QAC7C,SAAS,EAAE,IAAI,CAAC,IAAI,CAAC;QACrB,yCAAyC;QACzC,QAAQ,EAAE,EAAE,EAAE,CAAC,QAAQ,EAAE;KAC1B;IACD,MAAM,EAAE,MAAM,CAAC,QAAQ,EAAE,UAAU,EAAE,EAAE,QAAQ,EAAE,CAAC,UAAU,CAAC,EAAE,CAAC;IAChE,KAAK,EAAE,KAAK,CAAC,EAAE,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IAC/B,KAAK,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE;IACtC,OAAO,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE;CAC3B,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,IAAI,GAAG,SAAS,CAAC,MAAM,EAAE;IACpC,WAAW,EAAE,IAAI;IACjB,MAAM,EAAE;QACN,QAAQ,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE;QAC3B,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC;QACjC,MAAM,EAAE,GAAG,CAAC,IAAI,CAAC;QACjB,OAAO,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC;QACnB,KAAK,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,QAAQ,EAAE;QAC7C,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,QAAQ,EAAE;QAC9C,eAAe;QACf,UAAU,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;QAChC,iCAAiC;QACjC,YAAY,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;KAC5C;IACD,MAAM,EAAE,MAAM,CAAC,QAAQ,EAAE,UAAU,CAAC;IACpC,KAAK,EAAE,KAAK,CAAC,EAAE,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;IACnC,KAAK,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE;IACtC,OAAO,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE;CAC5B,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,IAAI,GAAG,SAAS,CAAC,MAAM,EAAE;IACpC,WAAW,EAAE,IAAI;IACjB,MAAM,EAAE;QACN,IAAI,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE;QACvB,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC;QACf,oFAAoF;QACpF,YAAY,EAAE,IAAI,CAAC,EAAE,UAAU,EAAE,IAAI,CAAC,GAAG,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC;QACxE,qCAAqC;QACrC,MAAM,EAAE,IAAI,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,CAAC,EAAE,UAAU,EAAE,MAAM,CAAC,GAAI,WAA4E,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC;KAC7K;IACD,MAAM,EAAE,MAAM,CAAC,QAAQ,EAAE,UAAU,EAAE,EAAE,QAAQ,EAAE,CAAC,UAAU,CAAC,EAAE,CAAC;IAChE,KAAK,EAAE,KAAK,CAAC,IAAI,EAAE;IACnB,KAAK,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE;IACtC,OAAO,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE;CAC3B,CAAC,CAAC;AACH,yCAAyC;AAEzC,MAAM,CAAC,MAAM,UAAU,GAAG,OAAO,CAAC,IAAI,EAAE;IACtC,IAAI,EAAE,QAAQ;IACd,WAAW,EAAE,MAAM;IACnB,IAAI,EAAE,KAAK;IACX,EAAE,EAAE,QAAQ;IACZ,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC;IAChM,KAAK,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE;IACtB,OAAO,EAAE,KAAK,EAAE,CAAC,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE;QACrC,MAAM,MAAM,GAAG,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QACvE,IAAI,KAAK,CAAC,QAAQ,IAAI,CAAC,MAAM;YAAE,OAAO,IAAI,CAAC,kBAAkB,CAAC,CAAC;QAC/D,OAAO,EAAE,SAAS,EAAE,GAAG,MAAM,EAAE,SAAS,IAAI,GAAG,GAAG,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC;IAC9D,CAAC;CACF,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,UAAU,GAAG,OAAO,CAAC,IAAI,EAAE;IACtC,IAAI,EAAE,QAAQ;IACd,WAAW,EAAE,eAAe;IAC5B,IAAI,EAAE,QAAQ;IACd,EAAE,EAAE,QAAQ;IACZ,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC;IAC1L,OAAO,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC;QACtB,IAAI,EAAE,KAAK,CAAC,IAAI,IAAI,CAAC,CAAC,IAAI;QAC1B,IAAI,EAAE,KAAK,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI;QACpD,QAAQ,EAAE,KAAK,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ;KACrE,CAAC;CACH,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,WAAW,GAAG,OAAO,CAAC,IAAI,EAAE;IACvC,IAAI,EAAE,SAAS;IACf,WAAW,EAAE,oBAAoB;IACjC,IAAI,EAAE,QAAQ;IACd,EAAE,EAAE,UAAU;IACd,KAAK,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE;IACnC,OAAO,EAAE,KAAK,EAAE,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE;QACjC,IAAI,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC,GAAG,CAAC;YAAE,OAAO,IAAI,CAAC,cAAc,CAAC,CAAC;QACpG,IAAI,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC,GAAG,CAAC;YAAE,OAAO,IAAI,CAAC,WAAW,CAAC,CAAC;QAC/F,OAAO,EAAE,CAAC;IACZ,CAAC;CACF,CAAC,CAAC;AAEH,uCAAuC;AAEvC,MAAM,SAAS,GAAG;IAChB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IAChC,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE;IACzB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IAC/C,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;CACzD,CAAC;AAEF,MAAM,CAAC,MAAM,UAAU,GAAG,OAAO,CAAC,IAAI,EAAE;IACtC,IAAI,EAAE,QAAQ;IACd,WAAW,EAAE,gBAAgB;IAC7B,IAAI,EAAE,KAAK;IACX,EAAE,EAAE,QAAQ;IACZ,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,oBAAoB,CAAC,EAAE,GAAG,SAAS,EAAE,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC;IACzJ,KAAK,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE;IACnC,OAAO,EAAE,KAAK,EAAE,CAAC,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,EAAE;QAC5C,IAAI,MAAM,KAAK,CAAC,OAAO,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,CAAC;YAAE,OAAO,IAAI,CAAC,gBAAgB,CAAC,CAAC;QACrF,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;YAAE,OAAO,IAAI,CAAC,gBAAgB,CAAC,CAAC;QACpE,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;IACzB,CAAC;CACF,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,UAAU,GAAG,OAAO,CAAC,IAAI,EAAE;IACtC,IAAI,EAAE,QAAQ;IACd,WAAW,EAAE,QAAQ;IACrB,IAAI,EAAE,QAAQ;IACd,EAAE,EAAE,QAAQ;IACZ,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,SAAS,CAAC,IAAI,CAAC,QAAQ,EAAE,EAAE,MAAM,EAAE,SAAS,CAAC,MAAM,CAAC,QAAQ,EAAE,EAAE,KAAK,EAAE,SAAS,CAAC,KAAK,EAAE,KAAK,EAAE,SAAS,CAAC,KAAK,EAAE,CAAC;IAChK,KAAK,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE;IACtB,OAAO,EAAE,KAAK,EAAE,CAAC,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE;QACrC,IAAI,KAAK,CAAC,MAAM,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;YAAE,OAAO,IAAI,CAAC,gBAAgB,CAAC,CAAC;QACpF,OAAO;YACL,IAAI,EAAE,KAAK,CAAC,IAAI,IAAI,CAAC,CAAC,IAAI;YAC1B,MAAM,EAAE,KAAK,CAAC,MAAM,IAAI,CAAC,CAAC,MAAM;YAChC,KAAK,EAAE,KAAK,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK;YACxD,KAAK,EAAE,KAAK,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK;SACzD,CAAC;IACJ,CAAC;CACF,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,WAAW,GAAG,OAAO,CAAC,IAAI,EAAE;IACvC,IAAI,EAAE,aAAa;IACnB,WAAW,EAAE,2BAA2B;IACxC,IAAI,EAAE,QAAQ;IACd,EAAE,EAAE,QAAQ;IACZ,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC;IACvF,WAAW,EAAE,CAAC,oBAAoB,EAAE,CAAC;IACrC,KAAK,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE;IACtB,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;QACjC,KAAK,MAAM,GAAG,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;YAChC,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YACpC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,KAAK,QAAQ;gBAAE,OAAO,IAAI,CAAC,gBAAgB,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;QAClF,CAAC;QACD,OAAO,EAAE,OAAO,EAAE,CAAC,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC;IAClD,CAAC;CACF,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,WAAW,GAAG,OAAO,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,UAAU,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;AACxI,MAAM,CAAC,MAAM,UAAU,GAAG,OAAO,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;AAEtI,kCAAkC;AAClC,MAAM,UAAU,YAAY,CAAC,EAAU;IACrC,MAAM,IAAI,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC7C,OAAO,UAAU,IAAI,IAAI,UAAU,CAAC,EAAE,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;AACtE,CAAC;AAED,MAAM,CAAC,MAAM,WAAW,GAAG,OAAO,CAAC,IAAI,EAAE;IACvC,IAAI,EAAE,aAAa;IACnB,WAAW,EAAE,MAAM;IACnB,IAAI,EAAE,QAAQ;IACd,EAAE,EAAE,QAAQ;IACZ,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;IAChF,OAAO,EAAE,CAAC,EAAE,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC,EAAE,YAAY,EAAE,YAAY,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC;CACzE,CAAC,CAAC;AAEH,yCAAyC;AAEzC,MAAM,CAAC,MAAM,UAAU,GAAG,OAAO,CAAC,IAAI,EAAE;IACtC,IAAI,EAAE,QAAQ;IACd,WAAW,EAAE,gBAAgB;IAC7B,IAAI,EAAE,KAAK;IACX,EAAE,EAAE,QAAQ;IACZ,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,mBAAmB,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;IACjH,KAAK,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE;IACtB,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE;QACtC,IAAI,MAAM,KAAK,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC;YAAE,OAAO,IAAI,CAAC,YAAY,CAAC,CAAC;QACzE,OAAO,EAAE,YAAY,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;IAC1C,CAAC;CACF,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,UAAU,GAAG,OAAO,CAAC,IAAI,EAAE;IACtC,IAAI,EAAE,QAAQ;IACd,WAAW,EAAE,QAAQ;IACrB,IAAI,EAAE,QAAQ;IACd,EAAE,EAAE,QAAQ;IACZ,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;IAC5E,OAAO,EAAE,CAAC,EAAE,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC;CAC/C,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,eAAe,GAAG,OAAO,CAAC,IAAI,EAAE;IAC3C,IAAI,EAAE,iBAAiB;IACvB,WAAW,EAAE,wBAAwB;IACrC,IAAI,EAAE,QAAQ;IACd,EAAE,EAAE,QAAQ;IACZ,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC;IACxI,WAAW,EAAE,CAAC,eAAe,EAAE,EAAE,YAAY,EAAE,CAAC;IAChD,OAAO,EAAE,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC;QACzB,YAAY,EAAE;YACZ,GAAG,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,KAAK,KAAK,CAAC,UAAU,CAAC;YACrE,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,IAAI,IAAI,EAAE;SAC/D,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC;KAC3D,CAAC;CACH,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,gBAAgB,GAAG,OAAO,CAAC,IAAI,EAAE;IAC5C,IAAI,EAAE,kBAAkB;IACxB,WAAW,EAAE,UAAU;IACvB,IAAI,EAAE,QAAQ;IACd,EAAE,EAAE,QAAQ;IACZ,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;IAClF,OAAO,EAAE,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC,EAAE,YAAY,EAAE,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,KAAK,KAAK,CAAC,UAAU,CAAC,EAAE,CAAC;CACjH,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,QAAQ,GAAG,OAAO,CAAC,IAAI,EAAE;IACpC,IAAI,EAAE,UAAU;IAChB,WAAW,EAAE,+BAA+B;IAC5C,IAAI,EAAE,QAAQ;IACd,EAAE,EAAE,QAAQ;IACZ,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC;QACd,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE;QACrB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;QACrC,UAAU,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,aAAa,EAAE,SAAS,CAAC,CAAC,CAAC,QAAQ,EAAE;QAChF,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC,QAAQ,EAAE;KAC/C,CAAC;IACF,WAAW,EAAE,CAAC,YAAY,EAAE,CAAC;IAC7B,OAAO,EAAE,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE;QACvB,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,KAAK,CAAC,SAAS,CAAC,CAAC;QACxE,IAAI,KAAK,CAAC,UAAU,KAAK,IAAI;YAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;QACvD,OAAO;YACL,MAAM,EAAE,CAAC,GAAG,IAAI,EAAE,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,OAAO,EAAE,KAAK,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;iBAClJ,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;SAC1D,CAAC;IACJ,CAAC;CACF,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,WAAW,GAAG,OAAO,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,UAAU,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC"}

package/dist/http.d.ts

@@ -0,0 +1,3 @@
+import { type Kernel } from '@yss123/cage-kernel';
+import type { FastifyInstance } from 'fastify';
+export declare function adminRoutes(app: FastifyInstance, k: Kernel): void;

package/dist/http.js

@@ -0,0 +1,159 @@
+// /api/sys/*：系统管理接口。组织与授权的写操作直接用生成的命令路由（/api/role/:id/grant-capability 等），
+// 这里只放内核系统表的查询与运维动作；每个接口都要求对应的系统能力点，运维动作写审计。
+import { cageError, sensitiveFields } from '@yss123/cage-kernel';
+import { discardDeadLetter, nextRun, replayDeadLetter } from '@yss123/cage-kernel/worker';
+import { sql } from 'kysely';
+const ctxOf = (req) => req.cageCtx;
+function need(ctx, cap) {
+    if (!ctx.userId)
+        throw cageError('UNAUTHENTICATED');
+    if (!ctx.capabilities.has(cap))
+        throw cageError('FORBIDDEN', { capability: cap });
+}
+const intParam = (v, d, max) => Math.min(max, Math.max(1, Number(v ?? d) || d));
+export function adminRoutes(app, k) {
+    const opsAudit = (ctx, command, detail) => k.writeAudit(k.app, {
+        tenantId: ctx.tenantId, actor: ctx.actor.id, actorKind: ctx.actor.kind, source: 'api', kind: 'ops',
+        capability: 'Sys.ops.manage', command, result: 'ok', diff: detail, requestId: ctx.requestId ?? null, client: ctx.client ?? null,
+    });
+    app.get('/api/sys/catalog', async (req) => {
+        const ctx = ctxOf(req);
+        if (!ctx.userId)
+            throw cageError('UNAUTHENTICATED');
+        return {
+            capabilities: k.registry.capabilityCatalog(),
+            aggregates: k.registry.aggregates.map((a) => ({
+                name: a.name, description: a.description ?? null, states: a.states.values,
+                scope: { deptField: a.scope.deptField ?? null, ownerField: a.scope.ownerField ?? null },
+                sensitive: sensitiveFields(a),
+            })),
+            combinators: ['self', 'dept', 'deptSubtree', 'deptSet', 'all'],
+            approvals: k.registry.approvals.map(({ a, name }) => ({ name, process: a.process, aggregate: a.agg.name, routable: a.routable })),
+            jobs: k.registry.jobs.map((j) => ({ name: j.name, cron: j.cron, description: j.description ?? null })),
+        };
+    });
+    // ---------- 审计查询：读侧账号 + safe.audit_log 视图（内核账号本身读不到审计） ----------
+    app.get('/api/sys/audit', async (req) => {
+        const ctx = ctxOf(req);
+        need(ctx, 'Sys.audit.read');
+        const q = req.query;
+        const page = intParam(q.page, 1, 100000);
+        const pageSize = intParam(q.pageSize, 50, 200);
+        return k.read.tx(ctx, async (tx) => {
+            let b = tx.selectFrom('safe.audit_log').selectAll();
+            if (q.actor)
+                b = b.where('actor', '=', q.actor);
+            if (q.aggregate)
+                b = b.where('aggregate', '=', q.aggregate);
+            if (q.aggregateId && /^[0-9a-f-]{36}$/i.test(q.aggregateId))
+                b = b.where('aggregate_id', '=', q.aggregateId);
+            if (q.command)
+                b = b.where('command', '=', q.command);
+            if (q.kind)
+                b = b.where('kind', '=', q.kind);
+            if (q.result)
+                b = b.where('result', '=', q.result);
+            if (q.from)
+                b = b.where('at', '>=', new Date(q.from));
+            if (q.to)
+                b = b.where('at', '<', new Date(q.to));
+            const rows = await b.orderBy('at', 'desc').orderBy('id', 'desc').limit(pageSize).offset((page - 1) * pageSize).execute();
+            return { items: rows, page, pageSize };
+        });
+    });
+    // ---------- 异步任务 ----------
+    app.get('/api/sys/ops/summary', async (req) => {
+        const ctx = ctxOf(req);
+        need(ctx, 'Sys.ops.read');
+        const outbox = await k.app.selectFrom('sys.outbox').select(['status', sql `count(*)::int`.as('n'), sql `min(created_at)`.as('oldest')])
+            .where('tenant_id', '=', ctx.tenantId).where('status', '<>', 'done').groupBy('status').execute();
+        const dead = await k.app.selectFrom('sys.dead_letter').select(sql `count(*)::int`.as('n'))
+            .where('tenant_id', '=', ctx.tenantId).where('handled_at', 'is', null).executeTakeFirst();
+        const sync = await k.app.selectFrom('sys.sync_record').select(['connector', 'status', sql `count(*)::int`.as('n')])
+            .where('tenant_id', '=', ctx.tenantId).groupBy(['connector', 'status']).execute();
+        return { outbox, deadLetters: dead?.n ?? 0, sync };
+    });
+    app.get('/api/sys/ops/outbox', async (req) => {
+        const ctx = ctxOf(req);
+        need(ctx, 'Sys.ops.read');
+        const q = req.query;
+        return k.app.selectFrom('sys.outbox').select(['id', 'event', 'aggregate', 'aggregate_id', 'status', 'attempts', 'last_error', 'next_at', 'created_at'])
+            .where('tenant_id', '=', ctx.tenantId).where('status', '=', q.status ?? 'pending').orderBy('id', 'desc').limit(200).execute();
+    });
+    app.get('/api/sys/ops/dead-letters', async (req) => {
+        const ctx = ctxOf(req);
+        need(ctx, 'Sys.ops.read');
+        const handled = req.query?.handled === 'true';
+        let b = k.app.selectFrom('sys.dead_letter').selectAll().where('tenant_id', '=', ctx.tenantId);
+        b = handled ? b.where('handled_at', 'is not', null) : b.where('handled_at', 'is', null);
+        return b.orderBy('id', 'desc').limit(200).execute();
+    });
+    for (const action of ['replay', 'discard']) {
+        app.post(`/api/sys/ops/dead-letters/:id/${action}`, async (req) => {
+            const ctx = ctxOf(req);
+            need(ctx, 'Sys.ops.manage');
+            const id = Number(req.params.id);
+            if (!Number.isInteger(id))
+                throw cageError('NOT_FOUND');
+            const own = await k.app.selectFrom('sys.dead_letter').select('id').where('id', '=', id).where('tenant_id', '=', ctx.tenantId).executeTakeFirst();
+            if (!own)
+                throw cageError('NOT_FOUND');
+            try {
+                await (action === 'replay' ? replayDeadLetter : discardDeadLetter)(k, id, ctx.actor.id);
+            }
+            catch (e) {
+                throw cageError('INVALID_TRANSITION', String(e.message));
+            }
+            await opsAudit(ctx, `deadLetter.${action}`, { deadLetterId: id });
+            return { ok: true };
+        });
+    }
+    app.get('/api/sys/ops/jobs', async (req) => {
+        const ctx = ctxOf(req);
+        need(ctx, 'Sys.ops.read');
+        const states = await k.app.selectFrom('sys.job_state').selectAll().execute();
+        const byName = new Map(states.map((s) => [s.name, s]));
+        return k.registry.jobs.map((j) => {
+            const s = byName.get(j.name);
+            let next = null;
+            try {
+                next = nextRun(j.cron, new Date()).toISOString();
+            }
+            catch {
+                next = null;
+            }
+            return {
+                name: j.name, cron: j.cron, description: j.description ?? null, enabled: s?.enabled ?? true,
+                lastRunAt: s?.last_run_at ?? null, lastStatus: s?.last_status ?? null, lastError: s?.last_error ?? null, nextRunAt: next,
+                reads: j.reads.map((a) => a.name), calls: j.calls.map((c) => k.registry.capabilityOf(c)),
+            };
+        });
+    });
+    for (const action of ['enable', 'disable']) {
+        app.post(`/api/sys/ops/jobs/:name/${action}`, async (req) => {
+            const ctx = ctxOf(req);
+            need(ctx, 'Sys.ops.manage');
+            const name = String(req.params.name);
+            if (!k.registry.jobs.some((j) => j.name === name))
+                throw cageError('NOT_FOUND');
+            await k.app.insertInto('sys.job_state').values({ name, enabled: action === 'enable' })
+                .onConflict((oc) => oc.column('name').doUpdateSet({ enabled: action === 'enable', updated_at: sql `now()` })).execute();
+            await opsAudit(ctx, `job.${action}`, { job: name });
+            return { ok: true };
+        });
+    }
+    // ---------- 第三方同步 ----------
+    app.get('/api/sys/ops/sync-records', async (req) => {
+        const ctx = ctxOf(req);
+        need(ctx, 'Sys.ops.read');
+        const q = req.query;
+        let b = k.app.selectFrom('sys.sync_record').select(['id', 'connector', 'operation', 'ref_id', 'status', 'http_status', 'attempts', 'error', 'created_at', 'updated_at'])
+            .where('tenant_id', '=', ctx.tenantId);
+        if (q.connector)
+            b = b.where('connector', '=', q.connector);
+        if (q.status)
+            b = b.where('status', '=', q.status);
+        return b.orderBy('id', 'desc').limit(200).execute();
+    });
+}
+//# sourceMappingURL=http.js.map

package/dist/http.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"http.js","sourceRoot":"","sources":["../src/http.ts"],"names":[],"mappings":"AAAA,2EAA2E;AAC3E,6CAA6C;AAC7C,OAAO,EAAE,SAAS,EAAE,eAAe,EAAyB,MAAM,qBAAqB,CAAC;AACxF,OAAO,EAAE,iBAAiB,EAAE,OAAO,EAAE,gBAAgB,EAAE,MAAM,4BAA4B,CAAC;AAE1F,OAAO,EAAE,GAAG,EAAE,MAAM,QAAQ,CAAC;AAE7B,MAAM,KAAK,GAAG,CAAC,GAAQ,EAAO,EAAE,CAAC,GAAG,CAAC,OAAc,CAAC;AAEpD,SAAS,IAAI,CAAC,GAAQ,EAAE,GAAW;IACjC,IAAI,CAAC,GAAG,CAAC,MAAM;QAAE,MAAM,SAAS,CAAC,iBAAiB,CAAC,CAAC;IACpD,IAAI,CAAC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC;QAAE,MAAM,SAAS,CAAC,WAAW,EAAE,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC,CAAC;AACpF,CAAC;AAED,MAAM,QAAQ,GAAG,CAAC,CAAU,EAAE,CAAS,EAAE,GAAW,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAEzG,MAAM,UAAU,WAAW,CAAC,GAAoB,EAAE,CAAS;IACzD,MAAM,QAAQ,GAAG,CAAC,GAAQ,EAAE,OAAe,EAAE,MAAe,EAAE,EAAE,CAC9D,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,GAAG,EAAE;QAClB,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE,KAAK,EAAE,GAAG,CAAC,KAAM,CAAC,EAAE,EAAE,SAAS,EAAE,GAAG,CAAC,KAAM,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK;QACpG,UAAU,EAAE,gBAAgB,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,IAAI,IAAI,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,IAAI,IAAI;KAChI,CAAC,CAAC;IAEL,GAAG,CAAC,GAAG,CAAC,kBAAkB,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;QACxC,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC;QACvB,IAAI,CAAC,GAAG,CAAC,MAAM;YAAE,MAAM,SAAS,CAAC,iBAAiB,CAAC,CAAC;QACpD,OAAO;YACL,YAAY,EAAE,CAAC,CAAC,QAAQ,CAAC,iBAAiB,EAAE;YAC5C,UAAU,EAAE,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;gBAC5C,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,WAAW,EAAE,CAAC,CAAC,WAAW,IAAI,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM;gBACzE,KAAK,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,SAAS,IAAI,IAAI,EAAE,UAAU,EAAE,CAAC,CAAC,KAAK,CAAC,UAAU,IAAI,IAAI,EAAE;gBACvF,SAAS,EAAE,eAAe,CAAC,CAAC,CAAC;aAC9B,CAAC,CAAC;YACH,WAAW,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,aAAa,EAAE,SAAS,EAAE,KAAK,CAAC;YAC9D,SAAS,EAAE,CAAC,CAAC,QAAQ,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,SAAS,EAAE,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC;YACjI,IAAI,EAAE,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,WAAW,EAAE,CAAC,CAAC,WAAW,IAAI,IAAI,EAAE,CAAC,CAAC;SACvG,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,mEAAmE;IACnE,GAAG,CAAC,GAAG,CAAC,gBAAgB,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;QACtC,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC;QACvB,IAAI,CAAC,GAAG,EAAE,gBAAgB,CAAC,CAAC;QAC5B,MAAM,CAAC,GAAG,GAAG,CAAC,KAA2C,CAAC;QAC1D,MAAM,IAAI,GAAG,QAAQ,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,MAAM,CAAC,CAAC;QACzC,MAAM,QAAQ,GAAG,QAAQ,CAAC,CAAC,CAAC,QAAQ,EAAE,EAAE,EAAE,GAAG,CAAC,CAAC;QAC/C,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE;YACjC,IAAI,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,gBAAgB,CAAC,CAAC,SAAS,EAAE,CAAC;YACpD,IAAI,CAAC,CAAC,KAAK;gBAAE,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC;YAChD,IAAI,CAAC,CAAC,SAAS;gBAAE,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,WAAW,EAAE,GAAG,EAAE,CAAC,CAAC,SAAS,CAAC,CAAC;YAC5D,IAAI,CAAC,CAAC,WAAW,IAAI,kBAAkB,CAAC,IAAI,CAAC,CAAC,CAAC,WAAW,CAAC;gBAAE,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,cAAc,EAAE,GAAG,EAAE,CAAC,CAAC,WAAW,CAAC,CAAC;YAC7G,IAAI,CAAC,CAAC,OAAO;gBAAE,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC;YACtD,IAAI,CAAC,CAAC,IAAI;gBAAE,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;YAC7C,IAAI,CAAC,CAAC,MAAM;gBAAE,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,QAAQ,EAAE,GAAG,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC;YACnD,IAAI,CAAC,CAAC,IAAI;gBAAE,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;YACtD,IAAI,CAAC,CAAC,EAAE;gBAAE,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,GAAG,EAAE,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;YACjD,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,GAAG,QAAQ,CAAC,CAAC,OAAO,EAAE,CAAC;YACzH,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;QACzC,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,6BAA6B;IAC7B,GAAG,CAAC,GAAG,CAAC,sBAAsB,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;QAC5C,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC;QACvB,IAAI,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC;QAC1B,MAAM,MAAM,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,GAAG,CAAQ,eAAe,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,GAAG,CAAQ,iBAAiB,CAAC,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC;aAClJ,KAAK,CAAC,WAAW,EAAE,GAAG,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAC,KAAK,CAAC,QAAQ,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,OAAO,EAAE,CAAC;QACnG,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,iBAAiB,CAAC,CAAC,MAAM,CAAC,GAAG,CAAQ,eAAe,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC;aAC9F,KAAK,CAAC,WAAW,EAAE,GAAG,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAC,KAAK,CAAC,YAAY,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,gBAAgB,EAAE,CAAC;QAC5F,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,iBAAiB,CAAC,CAAC,MAAM,CAAC,CAAC,WAAW,EAAE,QAAQ,EAAE,GAAG,CAAQ,eAAe,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;aACvH,KAAK,CAAC,WAAW,EAAE,GAAG,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;QACpF,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC;IACrD,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,GAAG,CAAC,qBAAqB,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;QAC3C,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC;QACvB,IAAI,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC;QAC1B,MAAM,CAAC,GAAG,GAAG,CAAC,KAA2C,CAAC;QAC1D,OAAO,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,OAAO,EAAE,WAAW,EAAE,cAAc,EAAE,QAAQ,EAAE,UAAU,EAAE,YAAY,EAAE,SAAS,EAAE,YAAY,CAAC,CAAC;aACpJ,KAAK,CAAC,WAAW,EAAE,GAAG,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAC,KAAK,CAAC,QAAQ,EAAE,GAAG,EAAE,CAAC,CAAC,MAAM,IAAI,SAAS,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,CAAC;IAClI,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,GAAG,CAAC,2BAA2B,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;QACjD,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC;QACvB,IAAI,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC;QAC1B,MAAM,OAAO,GAAI,GAAG,CAAC,KAAa,EAAE,OAAO,KAAK,MAAM,CAAC;QACvD,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,iBAAiB,CAAC,CAAC,SAAS,EAAE,CAAC,KAAK,CAAC,WAAW,EAAE,GAAG,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC9F,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,YAAY,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,YAAY,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;QACxF,OAAO,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,CAAC;IACtD,CAAC,CAAC,CAAC;IAEH,KAAK,MAAM,MAAM,IAAI,CAAC,QAAQ,EAAE,SAAS,CAAU,EAAE,CAAC;QACpD,GAAG,CAAC,IAAI,CAAC,iCAAiC,MAAM,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;YAChE,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC;YACvB,IAAI,CAAC,GAAG,EAAE,gBAAgB,CAAC,CAAC;YAC5B,MAAM,EAAE,GAAG,MAAM,CAAE,GAAG,CAAC,MAAc,CAAC,EAAE,CAAC,CAAC;YAC1C,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC;gBAAE,MAAM,SAAS,CAAC,WAAW,CAAC,CAAC;YACxD,MAAM,GAAG,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,iBAAiB,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,WAAW,EAAE,GAAG,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAC,gBAAgB,EAAE,CAAC;YACjJ,IAAI,CAAC,GAAG;gBAAE,MAAM,SAAS,CAAC,WAAW,CAAC,CAAC;YACvC,IAAI,CAAC;gBACH,MAAM,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,GAAG,CAAC,KAAM,CAAC,EAAE,CAAC,CAAC;YAC3F,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBACX,MAAM,SAAS,CAAC,oBAAoB,EAAE,MAAM,CAAE,CAAW,CAAC,OAAO,CAAC,CAAC,CAAC;YACtE,CAAC;YACD,MAAM,QAAQ,CAAC,GAAG,EAAE,cAAc,MAAM,EAAE,EAAE,EAAE,YAAY,EAAE,EAAE,EAAE,CAAC,CAAC;YAClE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;QACtB,CAAC,CAAC,CAAC;IACL,CAAC;IAED,GAAG,CAAC,GAAG,CAAC,mBAAmB,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;QACzC,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC;QACvB,IAAI,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC;QAC1B,MAAM,MAAM,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,eAAe,CAAC,CAAC,SAAS,EAAE,CAAC,OAAO,EAAE,CAAC;QAC7E,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QACvD,OAAO,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;YAC/B,MAAM,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;YAC7B,IAAI,IAAI,GAAkB,IAAI,CAAC;YAC/B,IAAI,CAAC;gBACH,IAAI,GAAG,OAAO,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;YACnD,CAAC;YAAC,MAAM,CAAC;gBACP,IAAI,GAAG,IAAI,CAAC;YACd,CAAC;YACD,OAAO;gBACL,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,WAAW,EAAE,CAAC,CAAC,WAAW,IAAI,IAAI,EAAE,OAAO,EAAE,CAAC,EAAE,OAAO,IAAI,IAAI;gBAC3F,SAAS,EAAE,CAAC,EAAE,WAAW,IAAI,IAAI,EAAE,UAAU,EAAE,CAAC,EAAE,WAAW,IAAI,IAAI,EAAE,SAAS,EAAE,CAAC,EAAE,UAAU,IAAI,IAAI,EAAE,SAAS,EAAE,IAAI;gBACxH,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;aACzF,CAAC;QACJ,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,KAAK,MAAM,MAAM,IAAI,CAAC,QAAQ,EAAE,SAAS,CAAU,EAAE,CAAC;QACpD,GAAG,CAAC,IAAI,CAAC,2BAA2B,MAAM,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;YAC1D,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC;YACvB,IAAI,CAAC,GAAG,EAAE,gBAAgB,CAAC,CAAC;YAC5B,MAAM,IAAI,GAAG,MAAM,CAAE,GAAG,CAAC,MAAc,CAAC,IAAI,CAAC,CAAC;YAC9C,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC;gBAAE,MAAM,SAAS,CAAC,WAAW,CAAC,CAAC;YAChF,MAAM,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,eAAe,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,KAAK,QAAQ,EAAE,CAAC;iBACnF,UAAU,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,WAAW,CAAC,EAAE,OAAO,EAAE,MAAM,KAAK,QAAQ,EAAE,UAAU,EAAE,GAAG,CAAA,OAAO,EAAE,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;YACzH,MAAM,QAAQ,CAAC,GAAG,EAAE,OAAO,MAAM,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC;YACpD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;QACtB,CAAC,CAAC,CAAC;IACL,CAAC;IAED,8BAA8B;IAC9B,GAAG,CAAC,GAAG,CAAC,2BAA2B,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;QACjD,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC;QACvB,IAAI,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC;QAC1B,MAAM,CAAC,GAAG,GAAG,CAAC,KAA2C,CAAC;QAC1D,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,iBAAiB,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,WAAW,EAAE,WAAW,EAAE,QAAQ,EAAE,QAAQ,EAAE,aAAa,EAAE,UAAU,EAAE,OAAO,EAAE,YAAY,EAAE,YAAY,CAAC,CAAC;aACrK,KAAK,CAAC,WAAW,EAAE,GAAG,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAC;QACzC,IAAI,CAAC,CAAC,SAAS;YAAE,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,WAAW,EAAE,GAAG,EAAE,CAAC,CAAC,SAAS,CAAC,CAAC;QAC5D,IAAI,CAAC,CAAC,MAAM;YAAE,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,QAAQ,EAAE,GAAG,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC;QACnD,OAAO,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,CAAC;IACtD,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,5 @@
+export * from './domain/index.js';
+export { noEscalation, noEscalationViaRoles, noWiderScope, knownCapability } from './domain/constraints.js';
+export { hashPassword } from './domain/org.js';
+export { bootstrapOrg, grantAll, grantAllToSuperadmin, type BootstrapResult } from './bootstrap.js';
+export { adminRoutes } from './http.js';

package/dist/index.js

@@ -0,0 +1,7 @@
+// @yss123/cage-admin：组织模型声明、初始化、/admin 系统管理（接口与前端页面）。
+export * from './domain/index.js';
+export { noEscalation, noEscalationViaRoles, noWiderScope, knownCapability } from './domain/constraints.js';
+export { hashPassword } from './domain/org.js';
+export { bootstrapOrg, grantAll, grantAllToSuperadmin } from './bootstrap.js';
+export { adminRoutes } from './http.js';
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,sDAAsD;AACtD,cAAc,mBAAmB,CAAC;AAClC,OAAO,EAAE,YAAY,EAAE,oBAAoB,EAAE,YAAY,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAC5G,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAC/C,OAAO,EAAE,YAAY,EAAE,QAAQ,EAAE,oBAAoB,EAAwB,MAAM,gBAAgB,CAAC;AACpG,OAAO,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC"}

package/package.json

@@ -1,6 +1,49 @@
 {
   "name": "@yss123/cage-admin",
-  "version": "0.0.0-stage",
-  "stub": true,
-  "description": "Temporary package placeholder for staged publishing"
+  "version": "0.1.0",
+  "description": "组织模型声明与 /admin 系统管理",
+  "type": "module",
+  "main": "dist/index.js",
+  "types": "dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "default": "./dist/index.js"
+    },
+    "./domain": {
+      "types": "./dist/domain/index.d.ts",
+      "default": "./dist/domain/index.js"
+    }
+  },
+  "files": [
+    "dist",
+    "ui"
+  ],
+  "dependencies": {
+    "fastify": "^5.6.0",
+    "zod": "^4.1.5",
+    "kysely": "^0.28.5",
+    "@yss123/cage-kernel": "0.1.0"
+  },
+  "license": "MIT",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/shunshunyue/cage.git",
+    "directory": "packages/admin"
+  },
+  "homepage": "https://github.com/shunshunyue/cage#readme",
+  "bugs": {
+    "url": "https://github.com/shunshunyue/cage/issues"
+  },
+  "publishConfig": {
+    "access": "public",
+    "registry": "https://registry.npmjs.org/"
+  },
+  "engines": {
+    "node": ">=24"
+  },
+  "scripts": {
+    "build": "tsc -p tsconfig.json",
+    "typecheck": "tsc -p tsconfig.json --noEmit"
+  }
 }