@yss123/cage-cli 0.0.0-stage → 0.1.0

package/dist/gen/index.js

@@ -0,0 +1,137 @@
+// cage gen：从声明生成 contracts、路由清单、安全视图与策略 DDL、迁移草稿、状态图、本体图。
+import { existsSync, mkdirSync, readFileSync, writeFileSync } from 'node:fs';
+import { dirname, join } from 'node:path';
+import { kebab } from '@yss123/cage-kernel';
+import { createTableSql, diffSchemas, embedSnapshot, latestSnapshot, readMigrations, safeLayerSql, schemaModel, } from '@yss123/cage-kernel/db';
+import { abs } from '../config.js';
+import { statesHoldingResources } from '../rules.js';
+import { contractsFiles } from './contracts.js';
+export function stateDiagram(g, agg) {
+    const lines = ['stateDiagram-v2'];
+    const states = g.nodes.filter((n) => n.kind === 'state' && n.id.startsWith(`${agg}.`));
+    const short = (id) => id.slice(agg.length + 1);
+    for (const t of g.edges.filter((e) => e.kind === 'transition' && e.to.startsWith(`${agg}.`))) {
+        const from = t.from.endsWith('.[new]') ? '[*]' : short(t.from);
+        lines.push(`  ${from} --> ${short(t.to)} : ${t.via.slice(agg.length + 1)}`);
+    }
+    for (const s of states)
+        if (s.attrs.terminal)
+            lines.push(`  ${short(s.id)} --> [*]`);
+    for (const h of statesHoldingResources(g).filter((x) => x.state.startsWith(`${agg}.`))) {
+        lines.push(`  note right of ${short(h.state)} : 持有 ${h.resource}`);
+    }
+    return lines.join('\n') + '\n';
+}
+function writeIf(path, content, check, written, findings, code = 'CAGE-GEN-001') {
+    const cur = existsSync(path) ? readFileSync(path, 'utf8') : null;
+    if (cur === content)
+        return;
+    if (check) {
+        findings.push({
+            code,
+            at: path,
+            reason: '生成物和声明不一致（有人手改了生成物，或声明改了没有重新生成）',
+            fix: '运行 cage gen，并提交生成结果',
+        });
+        return;
+    }
+    mkdirSync(dirname(path), { recursive: true });
+    writeFileSync(path, content);
+    written.push(path);
+}
+export function generate(cfg, reg, g, sites, opts = {}) {
+    const check = !!opts.check;
+    const written = [];
+    const findings = [];
+    const gen = abs(cfg, cfg.generated);
+    // 不入库的生成物：直接覆盖（check 模式不比较）
+    if (!check) {
+        const put = (rel, content) => {
+            const p = join(gen, rel);
+            mkdirSync(dirname(p), { recursive: true });
+            writeFileSync(p, content);
+            written.push(p);
+        };
+        mkdirSync(abs(cfg, '.cage'), { recursive: true });
+        writeFileSync(abs(cfg, '.cage/ontology.json'), JSON.stringify(g, null, 2));
+        const model = schemaModel(reg);
+        put('sql/schema.sql', `-- 生成物：期望的表结构（不要手改）\n\n${model.tables.map(createTableSql).join('\n\n')}\n`);
+        put('sql/safe-layer.sql', `-- 生成物：安全层（函数、行级策略、安全视图），cage migrate 每次整体重建\n${safeLayerSql(reg)}\n`);
+        put('capabilities.json', JSON.stringify(reg.capabilityCatalog(), null, 2));
+        put('routes.json', JSON.stringify(routes(reg), null, 2));
+        const md = ['# 状态图（生成物）', ''];
+        for (const a of reg.aggregates) {
+            const d = stateDiagram(g, a.name);
+            put(`diagrams/${a.name}.mmd`, d);
+            md.push(`## ${a.description ?? a.name}（${a.name}）`, '', '```mermaid', d.trimEnd(), '```', '');
+        }
+        put('diagrams/README.md', md.join('\n'));
+    }
+    // 入库的生成物：前端契约
+    const files = contractsFiles(reg, sites);
+    for (const [name, content] of Object.entries(files))
+        writeIf(join(abs(cfg, cfg.contracts), name), content, check, written, findings);
+    // 迁移草稿：声明的期望结构 vs 最后一个迁移里内嵌的结构快照
+    const dir = abs(cfg, cfg.migrations);
+    const migrations = readMigrations(dir);
+    const model = schemaModel(reg);
+    const stmts = diffSchemas(latestSnapshot(migrations), model);
+    let migrationDraft;
+    if (stmts.length > 0) {
+        if (check) {
+            findings.push({
+                code: 'CAGE-GEN-002',
+                at: cfg.migrations,
+                reason: `声明的表结构与迁移不一致（${stmts.length} 处变化）`,
+                fix: '运行 cage gen 生成迁移草稿，人审后提交',
+            });
+        }
+        else {
+            const n = String(migrations.length + 1).padStart(4, '0');
+            const name = `${n}_${migrations.length === 0 ? 'init' : 'draft'}.sql`;
+            const body = [
+                `-- 迁移草稿：由 cage gen 生成，人审后提交；已发布的迁移不要修改`,
+                `-- 破坏性变更按「先扩展再收缩」分多次发布`,
+                '',
+                stmts.join('\n\n'),
+            ].join('\n');
+            mkdirSync(dir, { recursive: true });
+            migrationDraft = join(dir, name);
+            writeFileSync(migrationDraft, embedSnapshot(body, model));
+            written.push(migrationDraft);
+        }
+    }
+    return { written, findings, migrationDraft };
+}
+export function routes(reg) {
+    const out = [];
+    for (const c of reg.commands) {
+        if (!c.cmd.invokedBy.includes('user'))
+            continue;
+        const base = `/api/${kebab(c.cmd.agg.name)}`;
+        out.push({
+            method: 'POST',
+            url: c.cmd.from === 'new' ? `${base}/${kebab(c.name)}` : `${base}/:id/${kebab(c.name)}`,
+            capability: c.capability,
+        });
+    }
+    for (const a of reg.aggregates) {
+        const base = `/api/${kebab(a.name)}`;
+        out.push({ method: 'GET', url: base, capability: `${a.name}.read` }, { method: 'GET', url: `${base}/:id`, capability: `${a.name}.read` }, { method: 'POST', url: `${base}/export`, capability: `${a.name}.export` });
+    }
+    for (const q of reg.queries)
+        out.push({
+            method: 'GET',
+            url: `/api/queries/${kebab(q.name)}`,
+            capability: q.reads.map((r) => `${r.name}.read`).join(' + '),
+        });
+    for (const e of reg.extensions)
+        if (e.kind === 'INBOUND')
+            out.push({
+                method: 'POST',
+                url: `/hooks/${e.value.connector.name}/${kebab(e.value.event)}`,
+                capability: `验签 ${e.value.verify.secret}`,
+            });
+    return out;
+}
+//# sourceMappingURL=index.js.map

package/dist/gen/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/gen/index.ts"],"names":[],"mappings":"AAAA,0DAA0D;AAC1D,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAC7E,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,KAAK,EAAiB,MAAM,qBAAqB,CAAC;AAC3D,OAAO,EACL,cAAc,EACd,WAAW,EACX,aAAa,EACb,cAAc,EACd,cAAc,EACd,YAAY,EACZ,WAAW,GACZ,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,GAAG,EAAmB,MAAM,cAAc,CAAC;AAEpD,OAAO,EAAE,sBAAsB,EAAE,MAAM,aAAa,CAAC;AAGrD,OAAO,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAEhD,MAAM,UAAU,YAAY,CAAC,CAAW,EAAE,GAAW;IACnD,MAAM,KAAK,GAAG,CAAC,iBAAiB,CAAC,CAAC;IAClC,MAAM,MAAM,GAAG,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,OAAO,IAAI,CAAC,CAAC,EAAE,CAAC,UAAU,CAAC,GAAG,GAAG,GAAG,CAAC,CAAC,CAAC;IACvF,MAAM,KAAK,GAAG,CAAC,EAAU,EAAE,EAAE,CAAC,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IACvD,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,YAAY,IAAI,CAAC,CAAC,EAAE,CAAC,UAAU,CAAC,GAAG,GAAG,GAAG,CAAC,CAAC,EAAE,CAAC;QAC7F,MAAM,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QAC/D,KAAK,CAAC,IAAI,CAAC,KAAK,IAAI,QAAQ,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC,GAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC;IAC/E,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,MAAM;QAAE,IAAI,CAAC,CAAC,KAAK,CAAC,QAAQ;YAAE,KAAK,CAAC,IAAI,CAAC,KAAK,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,UAAU,CAAC,CAAC;IACrF,KAAK,MAAM,CAAC,IAAI,sBAAsB,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,GAAG,GAAG,CAAC,CAAC,EAAE,CAAC;QACvF,KAAK,CAAC,IAAI,CAAC,mBAAmB,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC;IACrE,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;AACjC,CAAC;AAQD,SAAS,OAAO,CACd,IAAY,EACZ,OAAe,EACf,KAAc,EACd,OAAiB,EACjB,QAAmB,EACnB,IAAI,GAAG,cAAc;IAErB,MAAM,GAAG,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACjE,IAAI,GAAG,KAAK,OAAO;QAAE,OAAO;IAC5B,IAAI,KAAK,EAAE,CAAC;QACV,QAAQ,CAAC,IAAI,CAAC;YACZ,IAAI;YACJ,EAAE,EAAE,IAAI;YACR,MAAM,EAAE,iCAAiC;YACzC,GAAG,EAAE,qBAAqB;SAC3B,CAAC,CAAC;QACH,OAAO;IACT,CAAC;IACD,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC9C,aAAa,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IAC7B,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACrB,CAAC;AAED,MAAM,UAAU,QAAQ,CACtB,GAAe,EACf,GAAa,EACb,CAAW,EACX,KAAiB,EACjB,OAA4B,EAAE;IAE9B,MAAM,KAAK,GAAG,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC;IAC3B,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,MAAM,QAAQ,GAAc,EAAE,CAAC;IAC/B,MAAM,GAAG,GAAG,GAAG,CAAC,GAAG,EAAE,GAAG,CAAC,SAAS,CAAC,CAAC;IAEpC,4BAA4B;IAC5B,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,GAAG,GAAG,CAAC,GAAW,EAAE,OAAe,EAAE,EAAE;YAC3C,MAAM,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;YACzB,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YAC3C,aAAa,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;YAC1B,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC,CAAC;QACF,SAAS,CAAC,GAAG,CAAC,GAAG,EAAE,OAAO,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAClD,aAAa,CAAC,GAAG,CAAC,GAAG,EAAE,qBAAqB,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QAC3E,MAAM,KAAK,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;QAC/B,GAAG,CACD,gBAAgB,EAChB,0BAA0B,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAC5E,CAAC;QACF,GAAG,CACD,oBAAoB,EACpB,iDAAiD,YAAY,CAAC,GAAG,CAAC,IAAI,CACvE,CAAC;QACF,GAAG,CAAC,mBAAmB,EAAE,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,iBAAiB,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QAC3E,GAAG,CAAC,aAAa,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QACzD,MAAM,EAAE,GAAG,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC;QAC9B,KAAK,MAAM,CAAC,IAAI,GAAG,CAAC,UAAU,EAAE,CAAC;YAC/B,MAAM,CAAC,GAAG,YAAY,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;YAClC,GAAG,CAAC,YAAY,CAAC,CAAC,IAAI,MAAM,EAAE,CAAC,CAAC,CAAC;YACjC,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,WAAW,IAAI,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,IAAI,GAAG,EAAE,EAAE,EAAE,YAAY,EAAE,CAAC,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC;QAChG,CAAC;QACD,GAAG,CAAC,oBAAoB,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IAC3C,CAAC;IAED,cAAc;IACd,MAAM,KAAK,GAAG,cAAc,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IACzC,KAAK,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC;QACjD,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,CAAC,SAAS,CAAC,EAAE,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC;IAElF,iCAAiC;IACjC,MAAM,GAAG,GAAG,GAAG,CAAC,GAAG,EAAE,GAAG,CAAC,UAAU,CAAC,CAAC;IACrC,MAAM,UAAU,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC;IACvC,MAAM,KAAK,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;IAC/B,MAAM,KAAK,GAAG,WAAW,CAAC,cAAc,CAAC,UAAU,CAAC,EAAE,KAAK,CAAC,CAAC;IAC7D,IAAI,cAAkC,CAAC;IACvC,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACrB,IAAI,KAAK,EAAE,CAAC;YACV,QAAQ,CAAC,IAAI,CAAC;gBACZ,IAAI,EAAE,cAAc;gBACpB,EAAE,EAAE,GAAG,CAAC,UAAU;gBAClB,MAAM,EAAE,gBAAgB,KAAK,CAAC,MAAM,OAAO;gBAC3C,GAAG,EAAE,0BAA0B;aAChC,CAAC,CAAC;QACL,CAAC;aAAM,CAAC;YACN,MAAM,CAAC,GAAG,MAAM,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;YACzD,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,MAAM,CAAC;YACtE,MAAM,IAAI,GAAG;gBACX,wCAAwC;gBACxC,wBAAwB;gBACxB,EAAE;gBACF,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC;aACnB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACb,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YACpC,cAAc,GAAG,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;YACjC,aAAa,CAAC,cAAc,EAAE,aAAa,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC;YAC1D,OAAO,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;QAC/B,CAAC;IACH,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,cAAc,EAAE,CAAC;AAC/C,CAAC;AAED,MAAM,UAAU,MAAM,CAAC,GAAa;IAClC,MAAM,GAAG,GAA0D,EAAE,CAAC;IACtE,KAAK,MAAM,CAAC,IAAI,GAAG,CAAC,QAAQ,EAAE,CAAC;QAC7B,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,QAAQ,CAAC,MAAM,CAAC;YAAE,SAAS;QAChD,MAAM,IAAI,GAAG,QAAQ,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;QAC7C,GAAG,CAAC,IAAI,CAAC;YACP,MAAM,EAAE,MAAM;YACd,GAAG,EAAE,CAAC,CAAC,GAAG,CAAC,IAAI,KAAK,KAAK,CAAC,CAAC,CAAC,GAAG,IAAI,IAAI,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,IAAI,QAAQ,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE;YACvF,UAAU,EAAE,CAAC,CAAC,UAAU;SACzB,CAAC,CAAC;IACL,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,GAAG,CAAC,UAAU,EAAE,CAAC;QAC/B,MAAM,IAAI,GAAG,QAAQ,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;QACrC,GAAG,CAAC,IAAI,CACN,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,UAAU,EAAE,GAAG,CAAC,CAAC,IAAI,OAAO,EAAE,EAC1D,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,IAAI,MAAM,EAAE,UAAU,EAAE,GAAG,CAAC,CAAC,IAAI,OAAO,EAAE,EACnE,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,GAAG,IAAI,SAAS,EAAE,UAAU,EAAE,GAAG,CAAC,CAAC,IAAI,SAAS,EAAE,CAC1E,CAAC;IACJ,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,GAAG,CAAC,OAAO;QACzB,GAAG,CAAC,IAAI,CAAC;YACP,MAAM,EAAE,KAAK;YACb,GAAG,EAAE,gBAAgB,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE;YACpC,UAAU,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC;SAC7D,CAAC,CAAC;IACL,KAAK,MAAM,CAAC,IAAI,GAAG,CAAC,UAAU;QAC5B,IAAI,CAAC,CAAC,IAAI,KAAK,SAAS;YACtB,GAAG,CAAC,IAAI,CAAC;gBACP,MAAM,EAAE,MAAM;gBACd,GAAG,EAAE,UAAU,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE;gBAC/D,UAAU,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE;aAC1C,CAAC,CAAC;IACP,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/gen/zod-code.d.ts

@@ -0,0 +1,7 @@
+import type { AnyField, Fields } from '@yss123/cage-kernel';
+import { z } from 'zod';
+export declare function zodCodeOf(schema: z.ZodType): string;
+export declare function jsonToZod(s: any, root: any): string;
+/** 读侧快照的字段 schema：敏感字段返回的是掩码值，所以只校验为字符串 */
+export declare function fieldReadCode(f: AnyField): string;
+export declare function snapshotCode(fields: Fields, states: readonly string[]): string;

package/dist/gen/zod-code.js

@@ -0,0 +1,161 @@
+import { z } from 'zod';
+const str = (s) => JSON.stringify(s);
+export function zodCodeOf(schema) {
+    let js;
+    try {
+        js = z.toJSONSchema(schema, { unrepresentable: 'any', io: 'input' });
+    }
+    catch {
+        return 'z.unknown()';
+    }
+    return jsonToZod(js, js);
+}
+function withChecks(base, s) {
+    let out = base;
+    if (s.type === 'string' || base.startsWith('z.string')) {
+        if (typeof s.minLength === 'number')
+            out += `.min(${s.minLength})`;
+        if (typeof s.maxLength === 'number')
+            out += `.max(${s.maxLength})`;
+        if (typeof s.pattern === 'string' && !s.format)
+            out += `.regex(new RegExp(${str(s.pattern)}))`;
+    }
+    if (s.type === 'number' || s.type === 'integer') {
+        if (typeof s.minimum === 'number')
+            out += `.min(${s.minimum})`;
+        if (typeof s.maximum === 'number')
+            out += `.max(${s.maximum})`;
+        if (typeof s.exclusiveMinimum === 'number')
+            out += `.gt(${s.exclusiveMinimum})`;
+        if (typeof s.exclusiveMaximum === 'number')
+            out += `.lt(${s.exclusiveMaximum})`;
+    }
+    if (s.type === 'array') {
+        if (typeof s.minItems === 'number')
+            out += `.min(${s.minItems})`;
+        if (typeof s.maxItems === 'number')
+            out += `.max(${s.maxItems})`;
+    }
+    return out;
+}
+export function jsonToZod(s, root) {
+    if (!s || typeof s !== 'object' || Object.keys(s).length === 0)
+        return 'z.unknown()';
+    if (s.$ref) {
+        const name = String(s.$ref).split('/').pop();
+        const def = root.$defs?.[name] ?? root.definitions?.[name];
+        return def ? jsonToZod(def, root) : 'z.unknown()';
+    }
+    if (s.const !== undefined)
+        return `z.literal(${JSON.stringify(s.const)})`;
+    if (Array.isArray(s.enum)) {
+        if (s.enum.every((v) => typeof v === 'string'))
+            return `z.enum([${s.enum.map(str).join(', ')}])`;
+        return `z.union([${s.enum.map((v) => `z.literal(${JSON.stringify(v)})`).join(', ')}])`;
+    }
+    const variants = s.anyOf ?? s.oneOf;
+    if (Array.isArray(variants)) {
+        const nonNull = variants.filter((v) => v.type !== 'null');
+        const nullable = nonNull.length !== variants.length;
+        const inner = nonNull.length === 1
+            ? jsonToZod(nonNull[0], root)
+            : `z.union([${nonNull.map((v) => jsonToZod(v, root)).join(', ')}])`;
+        return nullable ? `${inner}.nullable()` : inner;
+    }
+    if (Array.isArray(s.type)) {
+        const nonNull = s.type.filter((t) => t !== 'null');
+        const inner = nonNull.length === 1 ? jsonToZod({ ...s, type: nonNull[0] }, root) : 'z.unknown()';
+        return s.type.includes('null') ? `${inner}.nullable()` : inner;
+    }
+    switch (s.type) {
+        case 'string': {
+            if (s.format === 'uuid')
+                return 'z.string().uuid()';
+            if (s.format === 'email')
+                return withChecks('z.string().email()', { ...s, pattern: undefined });
+            if (s.format === 'date-time')
+                return 'z.string().datetime({ offset: true })';
+            return withChecks('z.string()', s);
+        }
+        case 'integer':
+            return withChecks('z.number().int()', s);
+        case 'number':
+            return withChecks('z.number()', s);
+        case 'boolean':
+            return 'z.boolean()';
+        case 'null':
+            return 'z.null()';
+        case 'array':
+            return withChecks(`z.array(${jsonToZod(s.items ?? {}, root)})`, s);
+        case 'object': {
+            const props = Object.entries(s.properties ?? {});
+            if (props.length === 0 && s.additionalProperties && typeof s.additionalProperties === 'object') {
+                return `z.record(z.string(), ${jsonToZod(s.additionalProperties, root)})`;
+            }
+            if (props.length === 0)
+                return 'z.record(z.string(), z.unknown())';
+            const req = new Set(s.required ?? []);
+            const body = props
+                .map(([k, v]) => `${/^[A-Za-z_$][\w$]*$/.test(k) ? k : str(k)}: ${jsonToZod(v, root)}${req.has(k) ? '' : '.optional()'}`)
+                .join(', ');
+            return `z.object({ ${body} })`;
+        }
+        default:
+            return 'z.unknown()';
+    }
+}
+/** 读侧快照的字段 schema：敏感字段返回的是掩码值，所以只校验为字符串 */
+export function fieldReadCode(f) {
+    let base;
+    if (f.sensitiveKind)
+        base = 'z.string()';
+    else {
+        switch (f.kind) {
+            case 'int':
+                base = 'z.number().int()';
+                break;
+            case 'number':
+                base = 'z.number()';
+                break;
+            case 'bool':
+                base = 'z.boolean()';
+                break;
+            case 'id':
+            case 'ref':
+                base = 'z.string().uuid()';
+                break;
+            case 'enum':
+                base = `z.enum([${(f.values ?? []).map(str).join(', ')}])`;
+                break;
+            case 'list': {
+                const shape = f.shape ?? {};
+                if ('item' in shape && Object.keys(shape).length === 1)
+                    base = `z.array(${fieldReadCode(shape.item)})`;
+                else if (Object.keys(shape).length === 0)
+                    base = 'z.record(z.string(), z.unknown())';
+                else
+                    base = `z.array(z.object({ ${Object.entries(shape)
+                        .map(([k, sf]) => `${k}: ${fieldReadCode(sf)}`)
+                        .join(', ')} }))`;
+                break;
+            }
+            default:
+                base = 'z.string()';
+        }
+    }
+    return f.isOptional ? `${base}.nullable().optional()` : base;
+}
+export function snapshotCode(fields, states) {
+    const lines = [
+        'id: z.string().uuid()',
+        ...Object.entries(fields)
+            .filter(([, f]) => !f.isHidden)
+            .map(([k, f]) => `${k}: ${fieldReadCode(f)}`),
+        `status: z.enum([${states.map(str).join(', ')}])`,
+        'version: z.number().int()',
+        'createdAt: z.string()',
+        'updatedAt: z.string()',
+    ];
+    return `z.object({\n${lines.map((l) => `  ${l},`).join('\n')}\n})`;
+}
+//# sourceMappingURL=zod-code.js.map

package/dist/gen/zod-code.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"zod-code.js","sourceRoot":"","sources":["../../src/gen/zod-code.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,MAAM,GAAG,GAAG,CAAC,CAAS,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;AAE7C,MAAM,UAAU,SAAS,CAAC,MAAiB;IACzC,IAAI,EAAO,CAAC;IACZ,IAAI,CAAC;QACH,EAAE,GAAG,CAAC,CAAC,YAAY,CAAC,MAAM,EAAE,EAAE,eAAe,EAAE,KAAK,EAAE,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC;IACvE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,aAAa,CAAC;IACvB,CAAC;IACD,OAAO,SAAS,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;AAC3B,CAAC;AAED,SAAS,UAAU,CAAC,IAAY,EAAE,CAAM;IACtC,IAAI,GAAG,GAAG,IAAI,CAAC;IACf,IAAI,CAAC,CAAC,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QACvD,IAAI,OAAO,CAAC,CAAC,SAAS,KAAK,QAAQ;YAAE,GAAG,IAAI,QAAQ,CAAC,CAAC,SAAS,GAAG,CAAC;QACnE,IAAI,OAAO,CAAC,CAAC,SAAS,KAAK,QAAQ;YAAE,GAAG,IAAI,QAAQ,CAAC,CAAC,SAAS,GAAG,CAAC;QACnE,IAAI,OAAO,CAAC,CAAC,OAAO,KAAK,QAAQ,IAAI,CAAC,CAAC,CAAC,MAAM;YAAE,GAAG,IAAI,qBAAqB,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC;IACjG,CAAC;IACD,IAAI,CAAC,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QAChD,IAAI,OAAO,CAAC,CAAC,OAAO,KAAK,QAAQ;YAAE,GAAG,IAAI,QAAQ,CAAC,CAAC,OAAO,GAAG,CAAC;QAC/D,IAAI,OAAO,CAAC,CAAC,OAAO,KAAK,QAAQ;YAAE,GAAG,IAAI,QAAQ,CAAC,CAAC,OAAO,GAAG,CAAC;QAC/D,IAAI,OAAO,CAAC,CAAC,gBAAgB,KAAK,QAAQ;YAAE,GAAG,IAAI,OAAO,CAAC,CAAC,gBAAgB,GAAG,CAAC;QAChF,IAAI,OAAO,CAAC,CAAC,gBAAgB,KAAK,QAAQ;YAAE,GAAG,IAAI,OAAO,CAAC,CAAC,gBAAgB,GAAG,CAAC;IAClF,CAAC;IACD,IAAI,CAAC,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;QACvB,IAAI,OAAO,CAAC,CAAC,QAAQ,KAAK,QAAQ;YAAE,GAAG,IAAI,QAAQ,CAAC,CAAC,QAAQ,GAAG,CAAC;QACjE,IAAI,OAAO,CAAC,CAAC,QAAQ,KAAK,QAAQ;YAAE,GAAG,IAAI,QAAQ,CAAC,CAAC,QAAQ,GAAG,CAAC;IACnE,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,CAAM,EAAE,IAAS;IACzC,IAAI,CAAC,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,aAAa,CAAC;IACrF,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC;QACX,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAG,CAAC;QAC9C,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,EAAE,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC,IAAI,CAAC,CAAC;QAC3D,OAAO,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC;IACpD,CAAC;IACD,IAAI,CAAC,CAAC,KAAK,KAAK,SAAS;QAAE,OAAO,aAAa,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC;IAC1E,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;QAC1B,IAAI,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAU,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC;YAAE,OAAO,WAAW,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC;QAC1G,OAAO,YAAY,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAU,EAAE,EAAE,CAAC,aAAa,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC;IAClG,CAAC;IACD,MAAM,QAAQ,GAAG,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,KAAK,CAAC;IACpC,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC5B,MAAM,OAAO,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC;QAC/D,MAAM,QAAQ,GAAG,OAAO,CAAC,MAAM,KAAK,QAAQ,CAAC,MAAM,CAAC;QACpD,MAAM,KAAK,GACT,OAAO,CAAC,MAAM,KAAK,CAAC;YAClB,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC;YAC7B,CAAC,CAAC,YAAY,OAAO,CAAC,GAAG,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC,SAAS,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC;QAC7E,OAAO,QAAQ,CAAC,CAAC,CAAC,GAAG,KAAK,aAAa,CAAC,CAAC,CAAC,KAAK,CAAC;IAClD,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;QAC1B,MAAM,OAAO,GAAG,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAS,EAAE,EAAE,CAAC,CAAC,KAAK,MAAM,CAAC,CAAC;QAC3D,MAAM,KAAK,GAAG,OAAO,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,EAAE,GAAG,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC;QACjG,OAAO,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,GAAG,KAAK,aAAa,CAAC,CAAC,CAAC,KAAK,CAAC;IACjE,CAAC;IACD,QAAQ,CAAC,CAAC,IAAI,EAAE,CAAC;QACf,KAAK,QAAQ,CAAC,CAAC,CAAC;YACd,IAAI,CAAC,CAAC,MAAM,KAAK,MAAM;gBAAE,OAAO,mBAAmB,CAAC;YACpD,IAAI,CAAC,CAAC,MAAM,KAAK,OAAO;gBAAE,OAAO,UAAU,CAAC,oBAAoB,EAAE,EAAE,GAAG,CAAC,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC,CAAC;YAChG,IAAI,CAAC,CAAC,MAAM,KAAK,WAAW;gBAAE,OAAO,uCAAuC,CAAC;YAC7E,OAAO,UAAU,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC;QACrC,CAAC;QACD,KAAK,SAAS;YACZ,OAAO,UAAU,CAAC,kBAAkB,EAAE,CAAC,CAAC,CAAC;QAC3C,KAAK,QAAQ;YACX,OAAO,UAAU,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC;QACrC,KAAK,SAAS;YACZ,OAAO,aAAa,CAAC;QACvB,KAAK,MAAM;YACT,OAAO,UAAU,CAAC;QACpB,KAAK,OAAO;YACV,OAAO,UAAU,CAAC,WAAW,SAAS,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QACrE,KAAK,QAAQ,CAAC,CAAC,CAAC;YACd,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC;YACjD,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC,oBAAoB,IAAI,OAAO,CAAC,CAAC,oBAAoB,KAAK,QAAQ,EAAE,CAAC;gBAC/F,OAAO,wBAAwB,SAAS,CAAC,CAAC,CAAC,oBAAoB,EAAE,IAAI,CAAC,GAAG,CAAC;YAC5E,CAAC;YACD,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;gBAAE,OAAO,mCAAmC,CAAC;YACnE,MAAM,GAAG,GAAG,IAAI,GAAG,CAAS,CAAC,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC;YAC9C,MAAM,IAAI,GAAG,KAAK;iBACf,GAAG,CACF,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CACT,GAAG,oBAAoB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,SAAS,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,aAAa,EAAE,CAC1G;iBACA,IAAI,CAAC,IAAI,CAAC,CAAC;YACd,OAAO,cAAc,IAAI,KAAK,CAAC;QACjC,CAAC;QACD;YACE,OAAO,aAAa,CAAC;IACzB,CAAC;AACH,CAAC;AAED,2CAA2C;AAC3C,MAAM,UAAU,aAAa,CAAC,CAAW;IACvC,IAAI,IAAY,CAAC;IACjB,IAAI,CAAC,CAAC,aAAa;QAAE,IAAI,GAAG,YAAY,CAAC;SACpC,CAAC;QACJ,QAAQ,CAAC,CAAC,IAAI,EAAE,CAAC;YACf,KAAK,KAAK;gBACR,IAAI,GAAG,kBAAkB,CAAC;gBAC1B,MAAM;YACR,KAAK,QAAQ;gBACX,IAAI,GAAG,YAAY,CAAC;gBACpB,MAAM;YACR,KAAK,MAAM;gBACT,IAAI,GAAG,aAAa,CAAC;gBACrB,MAAM;YACR,KAAK,IAAI,CAAC;YACV,KAAK,KAAK;gBACR,IAAI,GAAG,mBAAmB,CAAC;gBAC3B,MAAM;YACR,KAAK,MAAM;gBACT,IAAI,GAAG,WAAW,CAAC,CAAC,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC;gBAC3D,MAAM;YACR,KAAK,MAAM,CAAC,CAAC,CAAC;gBACZ,MAAM,KAAK,GAAG,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;gBAC5B,IAAI,MAAM,IAAI,KAAK,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,KAAK,CAAC;oBACpD,IAAI,GAAG,WAAW,aAAa,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC;qBAC5C,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,KAAK,CAAC;oBAAE,IAAI,GAAG,mCAAmC,CAAC;;oBAEnF,IAAI,GAAG,sBAAsB,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC;yBAC/C,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,KAAK,aAAa,CAAC,EAAE,CAAC,EAAE,CAAC;yBAC9C,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC;gBACtB,MAAM;YACR,CAAC;YACD;gBACE,IAAI,GAAG,YAAY,CAAC;QACxB,CAAC;IACH,CAAC;IACD,OAAO,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,GAAG,IAAI,wBAAwB,CAAC,CAAC,CAAC,IAAI,CAAC;AAC/D,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,MAAc,EAAE,MAAyB;IACpE,MAAM,KAAK,GAAG;QACZ,uBAAuB;QACvB,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC;aACtB,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC;aAC9B,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,KAAK,aAAa,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/C,mBAAmB,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI;QACjD,2BAA2B;QAC3B,uBAAuB;QACvB,uBAAuB;KACxB,CAAC;IACF,OAAO,eAAe,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC;AACrE,CAAC"}

package/dist/graph-snapshot.d.ts

@@ -0,0 +1,13 @@
+import type { Finding } from './findings.js';
+import type { Ontology } from './ontology.js';
+export interface GraphSnapshot {
+    project: string;
+    domain: string;
+    generatedAt: string;
+    graph: Ontology;
+    findings: Finding[];
+    presentation: {
+        title: string;
+        labels: Record<string, string>;
+    };
+}

package/dist/graph-snapshot.js

@@ -0,0 +1,46 @@
+// 图谱每次刷新都在独立进程抽取。ESM 会缓存 domain 及其依赖；只给入口添加
+// 时间戳无法刷新所有间接导入，因此不在常驻 Web 服务里重复 import domain。
+import { analyze } from './analyze.js';
+import { loadConfig } from './config.js';
+async function collect() {
+    const cfg = loadConfig(process.argv[2]);
+    const result = await analyze(cfg, { write: true });
+    if (!result.graph) {
+        throw new Error(result.findings.map((f) => `[${f.code}] ${f.reason}`).join('\n'));
+    }
+    // 优先复用声明已有的描述。图谱文案单独传递，不给本体节点改名或改哈希，
+    // 避免一次中文标题调整被误认为命令、能力点或数据库结构发生变化。
+    const labels = {};
+    const remember = (kind, id, description) => {
+        if (description)
+            labels[`${kind}:${id}`] = description;
+    };
+    const registry = result.registry;
+    for (const a of registry.aggregates)
+        remember('aggregate', a.name, a.description);
+    for (const c of registry.commands)
+        remember('command', c.capability, c.cmd.description);
+    for (const e of registry.events)
+        remember('event', e.name, e.description);
+    for (const q of registry.queries)
+        remember('query', q.name, q.description);
+    for (const j of registry.jobs)
+        remember('job', j.name, j.description);
+    // 有图规则问题时仍展示图和问题列表，开发者可以借助关系图定位错误。
+    const snapshot = {
+        project: cfg.name,
+        domain: cfg.domain,
+        generatedAt: new Date().toISOString(),
+        graph: result.graph,
+        findings: result.findings,
+        presentation: { title: cfg.graph?.title ?? cfg.name, labels: { ...labels, ...cfg.graph?.labels } },
+    };
+    process.send({ snapshot });
+}
+collect()
+    .catch((error) => {
+    process.send({ error: error.message });
+    process.exitCode = 1;
+})
+    .finally(() => process.disconnect());
+//# sourceMappingURL=graph-snapshot.js.map

package/dist/graph-snapshot.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"graph-snapshot.js","sourceRoot":"","sources":["../src/graph-snapshot.ts"],"names":[],"mappings":"AAAA,4CAA4C;AAC5C,gDAAgD;AAChD,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AACvC,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAazC,KAAK,UAAU,OAAO;IACpB,MAAM,GAAG,GAAG,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IACxC,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACnD,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;QAClB,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IACpF,CAAC;IACD,qCAAqC;IACrC,kCAAkC;IAClC,MAAM,MAAM,GAA2B,EAAE,CAAC;IAC1C,MAAM,QAAQ,GAAG,CAAC,IAAY,EAAE,EAAU,EAAE,WAAoB,EAAE,EAAE;QAClE,IAAI,WAAW;YAAE,MAAM,CAAC,GAAG,IAAI,IAAI,EAAE,EAAE,CAAC,GAAG,WAAW,CAAC;IACzD,CAAC,CAAC;IACF,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAS,CAAC;IAClC,KAAK,MAAM,CAAC,IAAI,QAAQ,CAAC,UAAU;QAAE,QAAQ,CAAC,WAAW,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,WAAW,CAAC,CAAC;IAClF,KAAK,MAAM,CAAC,IAAI,QAAQ,CAAC,QAAQ;QAAE,QAAQ,CAAC,SAAS,EAAE,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;IACxF,KAAK,MAAM,CAAC,IAAI,QAAQ,CAAC,MAAM;QAAE,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,WAAW,CAAC,CAAC;IAC1E,KAAK,MAAM,CAAC,IAAI,QAAQ,CAAC,OAAO;QAAE,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,WAAW,CAAC,CAAC;IAC3E,KAAK,MAAM,CAAC,IAAI,QAAQ,CAAC,IAAI;QAAE,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,WAAW,CAAC,CAAC;IACtE,mCAAmC;IACnC,MAAM,QAAQ,GAAkB;QAC9B,OAAO,EAAE,GAAG,CAAC,IAAI;QACjB,MAAM,EAAE,GAAG,CAAC,MAAM;QAClB,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACrC,KAAK,EAAE,MAAM,CAAC,KAAK;QACnB,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,YAAY,EAAE,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,KAAK,IAAI,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,GAAG,MAAM,EAAE,GAAG,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE;KACnG,CAAC;IACF,OAAO,CAAC,IAAK,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC;AAC9B,CAAC;AAED,OAAO,EAAE;KACN,KAAK,CAAC,CAAC,KAAY,EAAE,EAAE;IACtB,OAAO,CAAC,IAAK,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;IACxC,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;AACvB,CAAC,CAAC;KACD,OAAO,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,UAAU,EAAE,CAAC,CAAC"}

package/dist/graph.d.ts

@@ -0,0 +1,11 @@
+import type { CageConfig } from './config.js';
+import type { GraphSnapshot } from './graph-snapshot.js';
+/** 只采集声明元数据，不连接业务数据库。子进程的 IPC 把日志和 JSON 分开，
+ * domain 的普通日志不会污染响应，也不会把进程环境变量发送给浏览器。 */
+export declare function collectGraph(root: string): Promise<GraphSnapshot>;
+/** 本地开发工具只监听回环地址；固定路由表不接受文件路径，不能拿来读取
+ * 项目的 .env、源码或任意本机文件。它不挂载到业务 API 或生产 /admin。 */
+export declare function serveGraph(cfg: CageConfig, port?: number): Promise<{
+    server: import("http").Server<typeof import("http").IncomingMessage, typeof import("http").ServerResponse>;
+    url: string;
+}>;

package/dist/graph.js

@@ -0,0 +1,87 @@
+import { fork } from 'node:child_process';
+import { readFile } from 'node:fs/promises';
+import { createServer } from 'node:http';
+import { fileURLToPath } from 'node:url';
+/** 只采集声明元数据，不连接业务数据库。子进程的 IPC 把日志和 JSON 分开，
+ * domain 的普通日志不会污染响应，也不会把进程环境变量发送给浏览器。 */
+export function collectGraph(root) {
+    return new Promise((resolve, reject) => {
+        const child = fork(fileURLToPath(new URL('./graph-snapshot.js', import.meta.url)), [root], {
+            windowsHide: true,
+            stdio: ['ignore', 'ignore', 'pipe', 'ipc'],
+        });
+        let failure = '';
+        child.stderr.on('data', (chunk) => {
+            failure += String(chunk);
+        });
+        child.once('message', (message) => {
+            if (message.snapshot)
+                resolve(message.snapshot);
+            else
+                reject(new Error(message.error));
+        });
+        child.once('error', reject);
+        child.once('exit', (code) => reject(new Error(failure || `本体抽取进程退出（${code}）`)));
+    });
+}
+/** 本地开发工具只监听回环地址；固定路由表不接受文件路径，不能拿来读取
+ * 项目的 .env、源码或任意本机文件。它不挂载到业务 API 或生产 /admin。 */
+export async function serveGraph(cfg, port = 15418) {
+    let snapshot = await collectGraph(cfg.root);
+    let refreshing;
+    const assets = new Map([
+        ['/', ['index.html', 'text/html; charset=utf-8']],
+        ['/app.js', ['app.js', 'text/javascript; charset=utf-8']],
+        ['/model.js', ['model.js', 'text/javascript; charset=utf-8']],
+        ['/relations.js', ['relations.js', 'text/javascript; charset=utf-8']],
+        ['/structure.js', ['structure.js', 'text/javascript; charset=utf-8']],
+        ['/style.css', ['style.css', 'text/css; charset=utf-8']],
+    ]);
+    let origin = '';
+    const server = createServer(async (req, res) => {
+        res.setHeader('Cache-Control', 'no-store');
+        res.setHeader('X-Content-Type-Options', 'nosniff');
+        res.setHeader('Content-Security-Policy', "default-src 'self'; script-src 'self'; style-src 'self' 'unsafe-inline'; img-src 'self' blob: data:; object-src 'none'; base-uri 'none'; frame-ancestors 'none'");
+        const json = (status, data) => {
+            res.writeHead(status, { 'Content-Type': 'application/json; charset=utf-8' });
+            res.end(JSON.stringify(data));
+        };
+        // 限制 Host 和刷新来源，避免其他网站借用户浏览器触发本地模块求值。
+        if (req.headers.host !== new URL(origin).host)
+            return json(403, { error: '请使用终端输出的本地地址访问' });
+        const path = new URL(req.url, origin).pathname;
+        try {
+            if (req.method === 'GET' && path === '/api/graph')
+                return json(200, snapshot);
+            if (req.method === 'POST' && path === '/api/refresh') {
+                if (req.headers.origin !== origin)
+                    return json(403, { error: '刷新必须由本地图谱页面发起' });
+                // 同时点击刷新共享一次抽取；失败向页面报告，不伪装成新图。
+                refreshing ??= collectGraph(cfg.root).finally(() => {
+                    refreshing = undefined;
+                });
+                snapshot = await refreshing;
+                return json(200, snapshot);
+            }
+            const asset = req.method === 'GET' ? assets.get(path) : undefined;
+            if (!asset)
+                return json(404, { error: '页面不存在' });
+            const content = await readFile(new URL(`../graph-ui/${asset[0]}`, import.meta.url));
+            res.writeHead(200, { 'Content-Type': asset[1] });
+            res.end(content);
+        }
+        catch (error) {
+            json(500, { error: error.message });
+        }
+    });
+    await new Promise((resolve, reject) => {
+        server.once('error', reject);
+        server.listen(port, '127.0.0.1', () => {
+            const address = server.address();
+            origin = `http://127.0.0.1:${address.port}`;
+            resolve();
+        });
+    });
+    return { server, url: origin };
+}
+//# sourceMappingURL=graph.js.map

package/dist/graph.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"graph.js","sourceRoot":"","sources":["../src/graph.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,oBAAoB,CAAC;AAC1C,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,YAAY,EAAE,MAAM,WAAW,CAAC;AACzC,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAIzC;0CAC0C;AAC1C,MAAM,UAAU,YAAY,CAAC,IAAY;IACvC,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,KAAK,GAAG,IAAI,CAAC,aAAa,CAAC,IAAI,GAAG,CAAC,qBAAqB,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE;YACzF,WAAW,EAAE,IAAI;YACjB,KAAK,EAAE,CAAC,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,CAAC;SAC3C,CAAC,CAAC;QACH,IAAI,OAAO,GAAG,EAAE,CAAC;QACjB,KAAK,CAAC,MAAO,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE;YACjC,OAAO,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC;QAC3B,CAAC,CAAC,CAAC;QACH,KAAK,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC,OAAqD,EAAE,EAAE;YAC9E,IAAI,OAAO,CAAC,QAAQ;gBAAE,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;;gBAC3C,MAAM,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;QACxC,CAAC,CAAC,CAAC;QACH,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAC5B,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,OAAO,IAAI,YAAY,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC;IAClF,CAAC,CAAC,CAAC;AACL,CAAC;AAED;gDACgD;AAChD,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,GAAe,EAAE,IAAI,GAAG,KAAK;IAC5D,IAAI,QAAQ,GAAG,MAAM,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAC5C,IAAI,UAA8C,CAAC;IACnD,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC;QACrB,CAAC,GAAG,EAAE,CAAC,YAAY,EAAE,0BAA0B,CAAC,CAAC;QACjD,CAAC,SAAS,EAAE,CAAC,QAAQ,EAAE,gCAAgC,CAAC,CAAC;QACzD,CAAC,WAAW,EAAE,CAAC,UAAU,EAAE,gCAAgC,CAAC,CAAC;QAC7D,CAAC,eAAe,EAAE,CAAC,cAAc,EAAE,gCAAgC,CAAC,CAAC;QACrE,CAAC,eAAe,EAAE,CAAC,cAAc,EAAE,gCAAgC,CAAC,CAAC;QACrE,CAAC,YAAY,EAAE,CAAC,WAAW,EAAE,yBAAyB,CAAC,CAAC;KACzD,CAAC,CAAC;IACH,IAAI,MAAM,GAAG,EAAE,CAAC;IAChB,MAAM,MAAM,GAAG,YAAY,CAAC,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;QAC7C,GAAG,CAAC,SAAS,CAAC,eAAe,EAAE,UAAU,CAAC,CAAC;QAC3C,GAAG,CAAC,SAAS,CAAC,wBAAwB,EAAE,SAAS,CAAC,CAAC;QACnD,GAAG,CAAC,SAAS,CACX,yBAAyB,EACzB,iKAAiK,CAClK,CAAC;QACF,MAAM,IAAI,GAAG,CAAC,MAAc,EAAE,IAAa,EAAE,EAAE;YAC7C,GAAG,CAAC,SAAS,CAAC,MAAM,EAAE,EAAE,cAAc,EAAE,iCAAiC,EAAE,CAAC,CAAC;YAC7E,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;QAChC,CAAC,CAAC;QACF,sCAAsC;QACtC,IAAI,GAAG,CAAC,OAAO,CAAC,IAAI,KAAK,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI;YAC3C,OAAO,IAAI,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,gBAAgB,EAAE,CAAC,CAAC;QAChD,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,GAAI,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC;QAChD,IAAI,CAAC;YACH,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK,IAAI,IAAI,KAAK,YAAY;gBAAE,OAAO,IAAI,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;YAC9E,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM,IAAI,IAAI,KAAK,cAAc,EAAE,CAAC;gBACrD,IAAI,GAAG,CAAC,OAAO,CAAC,MAAM,KAAK,MAAM;oBAAE,OAAO,IAAI,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,eAAe,EAAE,CAAC,CAAC;gBAChF,+BAA+B;gBAC/B,UAAU,KAAK,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE;oBACjD,UAAU,GAAG,SAAS,CAAC;gBACzB,CAAC,CAAC,CAAC;gBACH,QAAQ,GAAG,MAAM,UAAU,CAAC;gBAC5B,OAAO,IAAI,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;YAC7B,CAAC;YACD,MAAM,KAAK,GAAG,GAAG,CAAC,MAAM,KAAK,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YAClE,IAAI,CAAC,KAAK;gBAAE,OAAO,IAAI,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;YACjD,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,IAAI,GAAG,CAAC,eAAe,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;YACpF,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YACjD,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QACnB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,GAAG,EAAE,EAAE,KAAK,EAAG,KAAe,CAAC,OAAO,EAAE,CAAC,CAAC;QACjD,CAAC;IACH,CAAC,CAAC,CAAC;IACH,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QAC1C,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAC7B,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,WAAW,EAAE,GAAG,EAAE;YACpC,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,EAAsB,CAAC;YACrD,MAAM,GAAG,oBAAoB,OAAO,CAAC,IAAI,EAAE,CAAC;YAC5C,OAAO,EAAE,CAAC;QACZ,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IACH,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC;AACjC,CAAC"}

package/dist/impact.d.ts

@@ -0,0 +1,28 @@
+import type { DerivedTest } from './derive.js';
+import { type NodeDiff, type Ontology } from './ontology.js';
+import type { Finding } from './findings.js';
+export interface ImpactResult {
+    diff: NodeDiff;
+    start: string[];
+    affected: string[];
+    /** 受影响节点 → 通过哪条边、以什么身份受影响 */
+    reasons: Map<string, string>;
+    tests: DerivedTest[];
+    projectTests: string[];
+    confirm: string[];
+    unsafe: {
+        base: number;
+        head: number;
+    };
+    findings: Finding[];
+}
+export declare function isGitRepo(root: string): boolean;
+export declare function changedFiles(root: string, base: string): string[];
+export declare function readOntology(path: string): Ontology;
+export declare function impact(base: Ontology, head: Ontology, files: string[], tests?: DerivedTest[], projectTestFiles?: string[]): ImpactResult;
+export declare function formatImpact(r: ImpactResult, head: Ontology, opts: {
+    base: string;
+    format: 'text' | 'md';
+    title?: string;
+    gates?: string;
+}): string;