@yss123/cage-cli 0.0.0-stage → 0.2.0

package/dist/process.d.ts

@@ -0,0 +1,6 @@
+import { type ChildProcess } from 'node:child_process';
+export declare function binPath(pkg: string, bin?: string): string;
+export declare function launch(file: string, args: string[], cwd: string, env?: NodeJS.ProcessEnv): ChildProcess;
+export declare function run(file: string, args: string[], cwd: string, env?: NodeJS.ProcessEnv): Promise<number>;
+/** 升级时安装更新后的清单。这里不接收任意 shell 字符串，参数固定为 install。 */
+export declare function installDependencies(cwd: string): Promise<number>;

package/dist/process.js

@@ -0,0 +1,39 @@
+import { spawn } from 'node:child_process';
+import { fileURLToPath } from 'node:url';
+import { dirname, join } from 'node:path';
+import { existsSync, readFileSync } from 'node:fs';
+export function binPath(pkg, bin) {
+    // 使用 ESM 解析条件，dependency-cruiser 等纯 ESM 包没有 require 入口。
+    let dir = dirname(fileURLToPath(import.meta.resolve(pkg)));
+    while (!existsSync(join(dir, 'package.json')) ||
+        JSON.parse(readFileSync(join(dir, 'package.json'), 'utf8')).name !== pkg) {
+        const parent = dirname(dir);
+        if (parent === dir)
+            throw new Error(`找不到 ${pkg} 的命令入口`);
+        dir = parent;
+    }
+    const p = JSON.parse(readFileSync(join(dir, 'package.json'), 'utf8'));
+    return join(dir, typeof p.bin === 'string' ? p.bin : p.bin[bin ?? Object.keys(p.bin)[0]]);
+}
+export function launch(file, args, cwd, env = process.env) {
+    return spawn(process.execPath, [file, ...args], { cwd, env, stdio: 'inherit', windowsHide: true });
+}
+export async function run(file, args, cwd, env = process.env) {
+    const child = launch(file, args, cwd, env);
+    return new Promise((resolve, reject) => {
+        child.once('error', reject);
+        child.once('exit', (code) => resolve(code ?? 1));
+    });
+}
+/** 升级时安装更新后的清单。这里不接收任意 shell 字符串，参数固定为 install。 */
+export async function installDependencies(cwd) {
+    const pnpm = process.env.npm_execpath;
+    if (pnpm && /pnpm/i.test(pnpm))
+        return run(pnpm, ['install'], cwd);
+    const child = spawn('pnpm', ['install'], { cwd, stdio: 'inherit', windowsHide: true, shell: process.platform === 'win32' });
+    return new Promise((resolve, reject) => {
+        child.once('error', reject);
+        child.once('exit', (code) => resolve(code ?? 1));
+    });
+}
+//# sourceMappingURL=process.js.map

package/dist/process.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"process.js","sourceRoot":"","sources":["../src/process.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAqB,MAAM,oBAAoB,CAAC;AAC9D,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAEnD,MAAM,UAAU,OAAO,CAAC,GAAW,EAAE,GAAY;IAC/C,wDAAwD;IACxD,IAAI,GAAG,GAAG,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IAC3D,OACE,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC;QACtC,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,GAAG,EAAE,cAAc,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,KAAK,GAAG,EACxE,CAAC;QACD,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;QAC5B,IAAI,MAAM,KAAK,GAAG;YAAE,MAAM,IAAI,KAAK,CAAC,OAAO,GAAG,QAAQ,CAAC,CAAC;QACxD,GAAG,GAAG,MAAM,CAAC;IACf,CAAC;IACD,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,GAAG,EAAE,cAAc,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC;IACtE,OAAO,IAAI,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAC5F,CAAC;AAED,MAAM,UAAU,MAAM,CAAC,IAAY,EAAE,IAAc,EAAE,GAAW,EAAE,GAAG,GAAG,OAAO,CAAC,GAAG;IACjF,OAAO,KAAK,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,KAAK,EAAE,SAAS,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC;AACrG,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,GAAG,CAAC,IAAY,EAAE,IAAc,EAAE,GAAW,EAAE,GAAG,GAAG,OAAO,CAAC,GAAG;IACpF,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;IAC3C,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAC5B,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC;IACnD,CAAC,CAAC,CAAC;AACL,CAAC;AAED,mDAAmD;AACnD,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,GAAW;IACnD,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC;IACtC,IAAI,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,GAAG,CAAC,IAAI,EAAE,CAAC,SAAS,CAAC,EAAE,GAAG,CAAC,CAAC;IACnE,MAAM,KAAK,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,SAAS,CAAC,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,SAAS,EAAE,WAAW,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC,CAAC;IAC5H,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAC5B,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC;IACnD,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/project-structure.d.ts

@@ -0,0 +1,8 @@
+import { type CageConfig } from './config.js';
+import type { Finding } from './findings.js';
+/**
+ * 目录规则只在 structure: modular 的应用启用，不约束框架自身或旧应用。
+ * 使用 TypeScript 的模块解析处理 .js 源码导入、目录 index 和 tsconfig paths，
+ * 这样换用别名也不能绕过模块边界。这里只读源码，绝不加载或执行页面模块。
+ */
+export declare function checkProjectStructure(cfg: CageConfig): Finding[];

package/dist/project-structure.js

@@ -0,0 +1,94 @@
+import { existsSync, readFileSync } from 'node:fs';
+import { dirname, isAbsolute, join, relative, resolve } from 'node:path';
+import ts from 'typescript';
+import { abs } from './config.js';
+import { listTs } from './static-check.js';
+/** 相对 src 识别归属；检查目录职责，不强迫小模块拆出空的 components/hooks 文件夹。 */
+function area(root, file) {
+    const path = relative(root, file).replace(/\\/g, '/');
+    if (isAbsolute(path) || path.startsWith('../') || path === '..')
+        return;
+    const parts = path.split('/');
+    return {
+        layer: parts.length === 1 ? 'entry' : parts[0],
+        module: parts[0] === 'modules' ? parts[1] : undefined,
+        path,
+    };
+}
+/**
+ * 目录规则只在 structure: modular 的应用启用，不约束框架自身或旧应用。
+ * 使用 TypeScript 的模块解析处理 .js 源码导入、目录 index 和 tsconfig paths，
+ * 这样换用别名也不能绕过模块边界。这里只读源码，绝不加载或执行页面模块。
+ */
+export function checkProjectStructure(cfg) {
+    if (cfg.structure !== 'modular')
+        return [];
+    const findings = [];
+    for (const kind of ['domain', 'web']) {
+        const root = kind === 'domain' ? dirname(abs(cfg, cfg.domain)) : abs(cfg, join(cfg.web, 'src'));
+        if (!existsSync(root))
+            continue;
+        const entry = kind === 'domain' ? resolve(abs(cfg, cfg.domain)) : join(root, 'main.tsx');
+        const layers = kind === 'domain' ? ['modules', 'workflows', 'integrations', 'shared'] : ['app', 'modules', 'shared'];
+        const configFile = ts.findConfigFile(dirname(root), ts.sys.fileExists);
+        const options = configFile
+            ? ts.parseJsonConfigFileContent(ts.readConfigFile(configFile, ts.sys.readFile).config, ts.sys, dirname(configFile)).options
+            : { moduleResolution: ts.ModuleResolutionKind.Bundler };
+        const resolutionCache = ts.createModuleResolutionCache(cfg.root, (name) => name, options);
+        for (const file of listTs(root)) {
+            const from = area(root, file);
+            const at = relative(cfg.root, file).replace(/\\/g, '/');
+            if ((from.layer === 'entry' && resolve(file) !== entry) ||
+                (from.layer !== 'entry' && !layers.includes(from.layer))) {
+                findings.push({
+                    code: 'CAGE-STRUCT-001',
+                    at,
+                    reason: `${kind} 源码没有放入约定模块：${from.path}`,
+                    fix: `src 根目录只保留${kind === 'domain' ? '领域 index.ts' : '浏览器 main.tsx'}；业务按归属放入 ${layers.join(' / ')}，见 docs/ai/project-structure.md`,
+                });
+            }
+            const source = readFileSync(file, 'utf8');
+            // preProcessFile 同时收集 import、export ... from 和字面量动态导入，防止转导出绕过边界。
+            for (const spec of ts.preProcessFile(source, true, true).importedFiles) {
+                const target = ts.resolveModuleName(spec.fileName, file, options, ts.sys, resolutionCache).resolvedModule;
+                const to = target && area(root, target.resolvedFileName);
+                if (!to)
+                    continue;
+                let reason;
+                if (from.layer === 'shared' && to.layer !== 'shared')
+                    reason = 'shared 不能依赖业务模块或应用组合层';
+                else if (from.layer === 'modules') {
+                    if (kind === 'web' &&
+                        to.layer !== 'shared' &&
+                        !(to.layer === 'modules' && from.module === to.module))
+                        reason = '前端模块只依赖本模块与 shared；跨业务页面由 app 组合或通过参数协作';
+                    if (kind === 'domain' && !['modules', 'shared'].includes(to.layer))
+                        reason = '领域模块不能反向依赖 workflows、integrations 或领域总入口';
+                }
+                // 聚合间允许单向 reads/命令依赖，但其他模块必须经过 index，避免内部文件成为事实公共 API。
+                if (!reason &&
+                    to.layer === 'modules' &&
+                    from.module !== to.module &&
+                    to.path !== `modules/${to.module}/index.ts`)
+                    reason = '跨模块导入必须经过目标模块的 index.ts 公开入口';
+                if (!reason &&
+                    kind === 'web' &&
+                    from.layer === 'entry' &&
+                    to.layer !== 'app' &&
+                    to.layer !== 'shared')
+                    reason = '浏览器入口只挂载 app 和共享基础设施，不直接组装业务页面';
+                if (!reason && kind === 'domain' && from.layer === 'integrations' && to.layer === 'workflows')
+                    reason = '连接器不能反向依赖跨模块流程；流程和外部协议分别组合领域声明';
+                if (reason)
+                    findings.push({
+                        code: 'CAGE-STRUCT-002',
+                        at: `${at}:${source.slice(0, spec.pos).split('\n').length}`,
+                        reason: `${reason}（${spec.fileName}）`,
+                        fix: '调整依赖归属；共用纯逻辑下沉到 shared，页面协作由 app 传参，领域交互通过模块公开声明。见 docs/ai/project-structure.md',
+                    });
+            }
+        }
+    }
+    return findings;
+}
+//# sourceMappingURL=project-structure.js.map

package/dist/project-structure.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"project-structure.js","sourceRoot":"","sources":["../src/project-structure.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACzE,OAAO,EAAE,MAAM,YAAY,CAAC;AAC5B,OAAO,EAAE,GAAG,EAAmB,MAAM,aAAa,CAAC;AAEnD,OAAO,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAC;AAQ3C,0DAA0D;AAC1D,SAAS,IAAI,CAAC,IAAY,EAAE,IAAY;IACtC,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IACtD,IAAI,UAAU,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,IAAI,KAAK,IAAI;QAAE,OAAO;IACxE,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC9B,OAAO;QACL,KAAK,EAAE,KAAK,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;QAC9C,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS;QACrD,IAAI;KACL,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,qBAAqB,CAAC,GAAe;IACnD,IAAI,GAAG,CAAC,SAAS,KAAK,SAAS;QAAE,OAAO,EAAE,CAAC;IAC3C,MAAM,QAAQ,GAAc,EAAE,CAAC;IAC/B,KAAK,MAAM,IAAI,IAAI,CAAC,QAAQ,EAAE,KAAK,CAAU,EAAE,CAAC;QAC9C,MAAM,IAAI,GAAG,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC;QAChG,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;YAAE,SAAS;QAChC,MAAM,KAAK,GAAG,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;QACzF,MAAM,MAAM,GACV,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS,EAAE,WAAW,EAAE,cAAc,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC;QACxG,MAAM,UAAU,GAAG,EAAE,CAAC,cAAc,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QACvE,MAAM,OAAO,GAAG,UAAU;YACxB,CAAC,CAAC,EAAE,CAAC,0BAA0B,CAC3B,EAAE,CAAC,cAAc,CAAC,UAAU,EAAE,EAAE,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,MAAM,EACrD,EAAE,CAAC,GAAG,EACN,OAAO,CAAC,UAAU,CAAC,CACpB,CAAC,OAAO;YACX,CAAC,CAAC,EAAE,gBAAgB,EAAE,EAAE,CAAC,oBAAoB,CAAC,OAAO,EAAE,CAAC;QAC1D,MAAM,eAAe,GAAG,EAAE,CAAC,2BAA2B,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QAE1F,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;YAChC,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,EAAE,IAAI,CAAE,CAAC;YAC/B,MAAM,EAAE,GAAG,QAAQ,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;YACxD,IACE,CAAC,IAAI,CAAC,KAAK,KAAK,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC,KAAK,KAAK,CAAC;gBACnD,CAAC,IAAI,CAAC,KAAK,KAAK,OAAO,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EACxD,CAAC;gBACD,QAAQ,CAAC,IAAI,CAAC;oBACZ,IAAI,EAAE,iBAAiB;oBACvB,EAAE;oBACF,MAAM,EAAE,GAAG,IAAI,eAAe,IAAI,CAAC,IAAI,EAAE;oBACzC,GAAG,EAAE,aAAa,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,cAAc,YAAY,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,iCAAiC;iBACpI,CAAC,CAAC;YACL,CAAC;YACD,MAAM,MAAM,GAAG,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;YAC1C,iEAAiE;YACjE,KAAK,MAAM,IAAI,IAAI,EAAE,CAAC,cAAc,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,aAAa,EAAE,CAAC;gBACvE,MAAM,MAAM,GAAG,EAAE,CAAC,iBAAiB,CACjC,IAAI,CAAC,QAAQ,EACb,IAAI,EACJ,OAAO,EACP,EAAE,CAAC,GAAG,EACN,eAAe,CAChB,CAAC,cAAc,CAAC;gBACjB,MAAM,EAAE,GAAG,MAAM,IAAI,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,gBAAgB,CAAC,CAAC;gBACzD,IAAI,CAAC,EAAE;oBAAE,SAAS;gBAClB,IAAI,MAA0B,CAAC;gBAC/B,IAAI,IAAI,CAAC,KAAK,KAAK,QAAQ,IAAI,EAAE,CAAC,KAAK,KAAK,QAAQ;oBAAE,MAAM,GAAG,uBAAuB,CAAC;qBAClF,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;oBAClC,IACE,IAAI,KAAK,KAAK;wBACd,EAAE,CAAC,KAAK,KAAK,QAAQ;wBACrB,CAAC,CAAC,EAAE,CAAC,KAAK,KAAK,SAAS,IAAI,IAAI,CAAC,MAAM,KAAK,EAAE,CAAC,MAAM,CAAC;wBAEtD,MAAM,GAAG,yCAAyC,CAAC;oBACrD,IAAI,IAAI,KAAK,QAAQ,IAAI,CAAC,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,KAAK,CAAC;wBAChE,MAAM,GAAG,0CAA0C,CAAC;gBACxD,CAAC;gBACD,uDAAuD;gBACvD,IACE,CAAC,MAAM;oBACP,EAAE,CAAC,KAAK,KAAK,SAAS;oBACtB,IAAI,CAAC,MAAM,KAAK,EAAE,CAAC,MAAM;oBACzB,EAAE,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC,MAAM,WAAW;oBAE3C,MAAM,GAAG,8BAA8B,CAAC;gBAC1C,IACE,CAAC,MAAM;oBACP,IAAI,KAAK,KAAK;oBACd,IAAI,CAAC,KAAK,KAAK,OAAO;oBACtB,EAAE,CAAC,KAAK,KAAK,KAAK;oBAClB,EAAE,CAAC,KAAK,KAAK,QAAQ;oBAErB,MAAM,GAAG,gCAAgC,CAAC;gBAC5C,IAAI,CAAC,MAAM,IAAI,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,KAAK,KAAK,cAAc,IAAI,EAAE,CAAC,KAAK,KAAK,WAAW;oBAC3F,MAAM,GAAG,gCAAgC,CAAC;gBAC5C,IAAI,MAAM;oBACR,QAAQ,CAAC,IAAI,CAAC;wBACZ,IAAI,EAAE,iBAAiB;wBACvB,EAAE,EAAE,GAAG,EAAE,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE;wBAC3D,MAAM,EAAE,GAAG,MAAM,IAAI,IAAI,CAAC,QAAQ,GAAG;wBACrC,GAAG,EAAE,iFAAiF;qBACvF,CAAC,CAAC;YACP,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC"}

package/dist/rules.d.ts

@@ -0,0 +1,23 @@
+import type { Finding } from './findings.js';
+import type { Ontology } from './ontology.js';
+/** 状态 → 进入时获得的资源：命令迁移到 S、发出事件、事件触发标注了 acquires 的反应 */
+export declare function statesHoldingResources(g: Ontology): {
+    state: string;
+    resource: string;
+    via: string;
+}[];
+/** CAGE-PAIR-002：进入某状态时获得了资源，从该状态出发的每一条迁移都必须释放它，或进入一个同样持有它的状态 */
+export declare function checkPairing(g: Ontology): Finding[];
+/** CAGE-STATE-010：每个状态都能从初始状态到达；CAGE-STATE-011：非终态必须有出边 */
+export declare function checkStates(g: Ontology): Finding[];
+/** CAGE-SENS-001：敏感字段不得原样进入事件载荷 */
+export declare function checkSensitiveEvents(g: Ontology): Finding[];
+/** CAGE-APPR-010：invokedBy 为 process 的命令必须有审批绑定或反应调用它，否则没有人能调用 */
+export declare function checkProcessCommands(g: Ontology): Finding[];
+/** CAGE-QUERY-003：手写 SQL 只能引用 reads 里聚合的安全视图 */
+export declare function checkQueries(g: Ontology): Finding[];
+/** CAGE-ORG-001：domain 必须包含框架自带的组织模型 */
+export declare function checkOrg(g: Ontology): Finding[];
+/** CAGE-EVENT-002：事件载荷只允许向后兼容的变更（只能新增可选字段） */
+export declare function checkEventCompat(base: Ontology, head: Ontology): Finding[];
+export declare function runRules(g: Ontology, base?: Ontology | null): Finding[];

package/dist/rules.js

@@ -0,0 +1,251 @@
+const at = (n) => (n?.file ? `${n.file}:${n.line ?? 1}` : undefined);
+function index(g) {
+    const byId = new Map(g.nodes.map((n) => [`${n.kind}:${n.id}`, n]));
+    const get = (kind, id) => byId.get(`${kind}:${id}`);
+    const out = (kind, from) => g.edges.filter((e) => e.kind === kind && e.from === from);
+    const into = (kind, to) => g.edges.filter((e) => e.kind === kind && e.to === to);
+    return { get, out, into };
+}
+/** 状态 → 进入时获得的资源：命令迁移到 S、发出事件、事件触发标注了 acquires 的反应 */
+export function statesHoldingResources(g) {
+    const { out } = index(g);
+    const held = [];
+    for (const t of g.edges.filter((e) => e.kind === 'transition')) {
+        for (const ev of out('emits', t.via)) {
+            for (const tr of out('triggers', ev.to)) {
+                for (const tg of out('targets', tr.to)) {
+                    if (tg.acquires && !held.some((h) => h.state === t.to && h.resource === tg.acquires))
+                        held.push({ state: t.to, resource: tg.acquires, via: t.via });
+                }
+            }
+        }
+    }
+    return held;
+}
+function releasesOnPath(g, via, resource) {
+    const { out } = index(g);
+    for (const ev of out('emits', via)) {
+        for (const tr of out('triggers', ev.to)) {
+            if (out('targets', tr.to).some((tg) => tg.releases === resource))
+                return true;
+        }
+    }
+    return false;
+}
+/** CAGE-PAIR-002：进入某状态时获得了资源，从该状态出发的每一条迁移都必须释放它，或进入一个同样持有它的状态 */
+export function checkPairing(g) {
+    const { get } = index(g);
+    const findings = [];
+    const held = statesHoldingResources(g);
+    const holds = (state, resource) => held.some((h) => h.state === state && h.resource === resource);
+    for (const h of held) {
+        for (const t of g.edges.filter((e) => e.kind === 'transition' && e.from === h.state && e.to !== h.state)) {
+            if (!releasesOnPath(g, t.via, h.resource) && !holds(t.to, h.resource)) {
+                findings.push({
+                    code: 'CAGE-PAIR-002',
+                    at: at(get('command', t.via)),
+                    reason: `${t.via} 让单据离开 ${h.state}，但没有释放 ${h.resource}`,
+                    fix: `新增订阅 ${t.via} 所发事件的反应，并标注 releases: '${h.resource}'`,
+                });
+            }
+        }
+    }
+    return findings;
+}
+/** CAGE-STATE-010：每个状态都能从初始状态到达；CAGE-STATE-011：非终态必须有出边 */
+export function checkStates(g) {
+    const { get } = index(g);
+    const findings = [];
+    for (const a of g.nodes.filter((n) => n.kind === 'aggregate')) {
+        const states = g.nodes.filter((n) => n.kind === 'state' && n.id.startsWith(`${a.id}.`));
+        const trans = g.edges.filter((e) => e.kind === 'transition' && e.to.startsWith(`${a.id}.`));
+        const reached = new Set(trans.filter((t) => t.from === `${a.id}.[new]`).map((t) => t.to));
+        if (reached.size === 0) {
+            const init = states.find((s) => s.attrs.initial);
+            if (init)
+                reached.add(init.id);
+        }
+        let grew = true;
+        while (grew) {
+            grew = false;
+            for (const t of trans)
+                if (reached.has(t.from) && !reached.has(t.to)) {
+                    reached.add(t.to);
+                    grew = true;
+                }
+        }
+        const defaults = !!a.attrs.defaultStates;
+        for (const s of states) {
+            if (defaults && s.id.endsWith('.deleted'))
+                continue; // 默认生命周期的 deleted 由框架提供
+            if (!reached.has(s.id)) {
+                findings.push({
+                    code: 'CAGE-STATE-010',
+                    at: at(a),
+                    reason: `状态 ${s.id} 从初始状态不可达`,
+                    fix: '增加一个迁移到它的命令，或从 states 里删掉它',
+                });
+            }
+            const outs = trans.filter((t) => t.from === s.id);
+            if (!s.attrs.terminal && outs.length === 0 && !defaults) {
+                findings.push({
+                    code: 'CAGE-STATE-011',
+                    at: at(a),
+                    reason: `非终态 ${s.id} 没有任何出边，单据会卡在这里`,
+                    fix: '增加离开它的命令，或在 states 里把它标记为 terminal',
+                });
+            }
+        }
+    }
+    void get;
+    return findings;
+}
+/** CAGE-SENS-001：敏感字段不得原样进入事件载荷 */
+export function checkSensitiveEvents(g) {
+    const { get, out } = index(g);
+    const findings = [];
+    for (const c of g.nodes.filter((n) => n.kind === 'command')) {
+        const agg = c.id.split('.')[0];
+        const custom = new Set(c.attrs.customEmit ?? []);
+        for (const e of out('emits', c.id)) {
+            const ev = get('event', e.to);
+            if (!ev)
+                continue;
+            for (const [k, f] of Object.entries((ev.attrs.fields ?? {}))) {
+                const af = get('field', `${agg}.${k}`);
+                if (af?.attrs.sensitive && !f.sensitive) {
+                    findings.push({
+                        code: 'CAGE-SENS-001',
+                        at: at(ev),
+                        reason: `事件 ${ev.id} 的载荷字段 ${k}${custom.has(ev.id) ? '（自定义映射）' : ''} 对应敏感字段 ${agg}.${k}，会原样进入 outbox 和下游系统`,
+                        fix: `在事件声明里把 ${k} 标成 .sensitive('${af.attrs.sensitive}')（载荷里自动掩码），或从载荷里去掉它`,
+                    });
+                }
+            }
+        }
+    }
+    return findings;
+}
+/** CAGE-APPR-010：invokedBy 为 process 的命令必须有审批绑定或反应调用它，否则没有人能调用 */
+export function checkProcessCommands(g) {
+    const { into } = index(g);
+    const findings = [];
+    for (const c of g.nodes.filter((n) => n.kind === 'command')) {
+        const by = c.attrs.invokedBy;
+        const callers = [...into('binds', c.id), ...into('targets', c.id), ...into('calls', c.id)];
+        if (by.includes('process') && !by.includes('user') && callers.length === 0) {
+            findings.push({
+                code: 'CAGE-APPR-010',
+                at: at(c),
+                reason: `命令 ${c.id} 只接受流程调用，但没有审批绑定或反应调用它`,
+                fix: '用 approval(...) 把它绑定为 onApproved/onRejected，或让一个反应调用它；也可能是 invokedBy 写错了',
+            });
+        }
+        if (by.includes('external') && !by.includes('user') && callers.length === 0) {
+            findings.push({
+                code: 'CAGE-CONN-012',
+                at: at(c),
+                reason: `命令 ${c.id} 只接受外部调用，但没有入站回调或出站映射调用它`,
+                fix: '用 inbound(...) 或 outbound(..., { onSuccess }) 调用它',
+                severity: 'warning',
+            });
+        }
+    }
+    return findings;
+}
+/** CAGE-QUERY-003：手写 SQL 只能引用 reads 里聚合的安全视图 */
+export function checkQueries(g) {
+    const { get } = index(g);
+    const findings = [];
+    for (const q of g.nodes.filter((n) => n.kind === 'query')) {
+        const text = q.attrs.sqlText;
+        if (!text)
+            continue;
+        const allowed = new Set((q.attrs.reads ?? []).map((a) => String(get('aggregate', a)?.attrs.table ?? '').split('.')[1]));
+        for (const m of text.matchAll(/\bsafe\.("?)([a-z_][a-z0-9_]*)\1/gi)) {
+            if (!allowed.has(m[2])) {
+                findings.push({
+                    code: 'CAGE-QUERY-003',
+                    at: at(q),
+                    reason: `查询 ${q.id} 引用了 safe.${m[2]}，但 reads 里没有声明对应的聚合`,
+                    fix: `在 reads 里加上 safe.${m[2]} 对应的聚合，影响分析才能找到这个查询`,
+                });
+            }
+        }
+        if (/\b(from|join)\s+(?!safe\.|\(|lateral\b|unnest\b|generate_series\b|jsonb_|json_)("?[a-z_][a-z0-9_]*"?)\s*(\.|\b)/i.test(text.replace(/--.*$/gm, ''))) {
+            const m = /\b(from|join)\s+(?!safe\.|\(|lateral\b|unnest\b|generate_series\b|jsonb_|json_)("?[a-z_][a-z0-9_.]*"?)/i.exec(text);
+            if (m && m[2].includes('.'))
+                findings.push({
+                    code: 'CAGE-QUERY-003',
+                    at: at(q),
+                    reason: `查询 ${q.id} 引用了 ${m[2]}，只允许引用 safe.* 安全视图`,
+                    fix: '改为查询对应的安全视图',
+                });
+        }
+    }
+    return findings;
+}
+/** CAGE-ORG-001：domain 必须包含框架自带的组织模型 */
+export function checkOrg(g) {
+    const has = (id) => g.nodes.some((n) => n.kind === 'aggregate' && n.id === id);
+    return has('User') && has('Dept') && has('Role')
+        ? []
+        : [
+            {
+                code: 'CAGE-ORG-001',
+                reason: 'domain 没有导出组织模型（User、Dept、Role）',
+                fix: "在 domain 的 index.ts 里加上 export * from '@yss123/cage-admin/domain'",
+            },
+        ];
+}
+/** CAGE-EVENT-002：事件载荷只允许向后兼容的变更（只能新增可选字段） */
+export function checkEventCompat(base, head) {
+    const findings = [];
+    const b = new Map(base.nodes.filter((n) => n.kind === 'event').map((n) => [n.id, n]));
+    for (const ev of head.nodes.filter((n) => n.kind === 'event')) {
+        const old = b.get(ev.id);
+        if (!old)
+            continue;
+        const of = (old.attrs.fields ?? {});
+        const nf = (ev.attrs.fields ?? {});
+        for (const [k, f] of Object.entries(of)) {
+            if (!(k in nf))
+                findings.push({
+                    code: 'CAGE-EVENT-002',
+                    at: at(ev),
+                    reason: `事件 ${ev.id} 删除了载荷字段 ${k}，下游消费者会出错`,
+                    fix: '保留旧字段（标注废弃），新增字段承载新含义；或新建一个事件',
+                });
+            else if (nf[k].kind !== f.kind) {
+                findings.push({
+                    code: 'CAGE-EVENT-002',
+                    at: at(ev),
+                    reason: `事件 ${ev.id} 的字段 ${k} 类型从 ${f.kind} 变成了 ${nf[k].kind}`,
+                    fix: '新增一个字段承载新类型，旧字段保留',
+                });
+            }
+        }
+        for (const [k, f] of Object.entries(nf)) {
+            if (!(k in of) && !f.optional)
+                findings.push({
+                    code: 'CAGE-EVENT-002',
+                    at: at(ev),
+                    reason: `事件 ${ev.id} 新增了必填字段 ${k}，已在 outbox 里的旧事件没有它`,
+                    fix: `把 ${k} 声明为 .optional()`,
+                });
+        }
+    }
+    return findings;
+}
+export function runRules(g, base) {
+    return [
+        ...checkOrg(g),
+        ...checkStates(g),
+        ...checkPairing(g),
+        ...checkSensitiveEvents(g),
+        ...checkProcessCommands(g),
+        ...checkQueries(g),
+        ...(base ? checkEventCompat(base, g) : []),
+    ];
+}
+//# sourceMappingURL=rules.js.map

package/dist/rules.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rules.js","sourceRoot":"","sources":["../src/rules.ts"],"names":[],"mappings":"AAIA,MAAM,EAAE,GAAG,CAAC,CAAW,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,IAAI,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;AAE/E,SAAS,KAAK,CAAC,CAAW;IACxB,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IACnE,MAAM,GAAG,GAAG,CAAC,IAAY,EAAE,EAAU,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,IAAI,IAAI,EAAE,EAAE,CAAC,CAAC;IACpE,MAAM,GAAG,GAAG,CAAC,IAAqB,EAAE,IAAY,EAAE,EAAE,CAClD,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,IAAI,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;IAC5D,MAAM,IAAI,GAAG,CAAC,IAAqB,EAAE,EAAU,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,IAAI,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;IAC1G,OAAO,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC;AAC5B,CAAC;AAED,sDAAsD;AACtD,MAAM,UAAU,sBAAsB,CAAC,CAAW;IAChD,MAAM,EAAE,GAAG,EAAE,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;IACzB,MAAM,IAAI,GAAuD,EAAE,CAAC;IACpE,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,YAAY,CAAC,EAAE,CAAC;QAC/D,KAAK,MAAM,EAAE,IAAI,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,GAAI,CAAC,EAAE,CAAC;YACtC,KAAK,MAAM,EAAE,IAAI,GAAG,CAAC,UAAU,EAAE,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC;gBACxC,KAAK,MAAM,EAAE,IAAI,GAAG,CAAC,SAAS,EAAE,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC;oBACvC,IAAI,EAAE,CAAC,QAAQ,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,QAAQ,KAAK,EAAE,CAAC,QAAQ,CAAC;wBAClF,IAAI,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,EAAE,EAAE,QAAQ,EAAE,EAAE,CAAC,QAAQ,EAAE,GAAG,EAAE,CAAC,CAAC,GAAI,EAAE,CAAC,CAAC;gBACnE,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,cAAc,CAAC,CAAW,EAAE,GAAW,EAAE,QAAgB;IAChE,MAAM,EAAE,GAAG,EAAE,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;IACzB,KAAK,MAAM,EAAE,IAAI,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,EAAE,CAAC;QACnC,KAAK,MAAM,EAAE,IAAI,GAAG,CAAC,UAAU,EAAE,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC;YACxC,IAAI,GAAG,CAAC,SAAS,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,QAAQ,KAAK,QAAQ,CAAC;gBAAE,OAAO,IAAI,CAAC;QAChF,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,iEAAiE;AACjE,MAAM,UAAU,YAAY,CAAC,CAAW;IACtC,MAAM,EAAE,GAAG,EAAE,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;IACzB,MAAM,QAAQ,GAAc,EAAE,CAAC;IAC/B,MAAM,IAAI,GAAG,sBAAsB,CAAC,CAAC,CAAC,CAAC;IACvC,MAAM,KAAK,GAAG,CAAC,KAAa,EAAE,QAAgB,EAAE,EAAE,CAChD,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,KAAK,IAAI,CAAC,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC;IACjE,KAAK,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;QACrB,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,MAAM,CAC5B,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,YAAY,IAAI,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,KAAK,CACzE,EAAE,CAAC;YACF,IAAI,CAAC,cAAc,CAAC,CAAC,EAAE,CAAC,CAAC,GAAI,EAAE,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC;gBACvE,QAAQ,CAAC,IAAI,CAAC;oBACZ,IAAI,EAAE,eAAe;oBACrB,EAAE,EAAE,EAAE,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC,CAAC,GAAI,CAAC,CAAC;oBAC9B,MAAM,EAAE,GAAG,CAAC,CAAC,GAAG,UAAU,CAAC,CAAC,KAAK,UAAU,CAAC,CAAC,QAAQ,EAAE;oBACvD,GAAG,EAAE,QAAQ,CAAC,CAAC,GAAG,2BAA2B,CAAC,CAAC,QAAQ,GAAG;iBAC3D,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,2DAA2D;AAC3D,MAAM,UAAU,WAAW,CAAC,CAAW;IACrC,MAAM,EAAE,GAAG,EAAE,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;IACzB,MAAM,QAAQ,GAAc,EAAE,CAAC;IAC/B,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,WAAW,CAAC,EAAE,CAAC;QAC9D,MAAM,MAAM,GAAG,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,OAAO,IAAI,CAAC,CAAC,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;QACxF,MAAM,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,YAAY,IAAI,CAAC,CAAC,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;QAC5F,MAAM,OAAO,GAAG,IAAI,GAAG,CAAS,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,GAAG,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QAClG,IAAI,OAAO,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;YACvB,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YACjD,IAAI,IAAI;gBAAE,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACjC,CAAC;QACD,IAAI,IAAI,GAAG,IAAI,CAAC;QAChB,OAAO,IAAI,EAAE,CAAC;YACZ,IAAI,GAAG,KAAK,CAAC;YACb,KAAK,MAAM,CAAC,IAAI,KAAK;gBACnB,IAAI,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;oBAC9C,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;oBAClB,IAAI,GAAG,IAAI,CAAC;gBACd,CAAC;QACL,CAAC;QACD,MAAM,QAAQ,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,aAAa,CAAC;QACzC,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;YACvB,IAAI,QAAQ,IAAI,CAAC,CAAC,EAAE,CAAC,QAAQ,CAAC,UAAU,CAAC;gBAAE,SAAS,CAAC,wBAAwB;YAC7E,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;gBACvB,QAAQ,CAAC,IAAI,CAAC;oBACZ,IAAI,EAAE,gBAAgB;oBACtB,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC;oBACT,MAAM,EAAE,MAAM,CAAC,CAAC,EAAE,WAAW;oBAC7B,GAAG,EAAE,4BAA4B;iBAClC,CAAC,CAAC;YACL,CAAC;YACD,MAAM,IAAI,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC;YAClD,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACxD,QAAQ,CAAC,IAAI,CAAC;oBACZ,IAAI,EAAE,gBAAgB;oBACtB,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC;oBACT,MAAM,EAAE,OAAO,CAAC,CAAC,EAAE,iBAAiB;oBACpC,GAAG,EAAE,oCAAoC;iBAC1C,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;IACD,KAAK,GAAG,CAAC;IACT,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,mCAAmC;AACnC,MAAM,UAAU,oBAAoB,CAAC,CAAW;IAC9C,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;IAC9B,MAAM,QAAQ,GAAc,EAAE,CAAC;IAC/B,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,SAAS,CAAC,EAAE,CAAC;QAC5D,MAAM,GAAG,GAAG,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QAC/B,MAAM,MAAM,GAAG,IAAI,GAAG,CAAE,CAAC,CAAC,KAAK,CAAC,UAAuB,IAAI,EAAE,CAAC,CAAC;QAC/D,KAAK,MAAM,CAAC,IAAI,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;YACnC,MAAM,EAAE,GAAG,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;YAC9B,IAAI,CAAC,EAAE;gBAAE,SAAS;YAClB,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,MAAM,IAAI,EAAE,CAAwB,CAAC,EAAE,CAAC;gBACpF,MAAM,EAAE,GAAG,GAAG,CAAC,OAAO,EAAE,GAAG,GAAG,IAAI,CAAC,EAAE,CAAC,CAAC;gBACvC,IAAI,EAAE,EAAE,KAAK,CAAC,SAAS,IAAI,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC;oBACxC,QAAQ,CAAC,IAAI,CAAC;wBACZ,IAAI,EAAE,eAAe;wBACrB,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC;wBACV,MAAM,EAAE,MAAM,EAAE,CAAC,EAAE,UAAU,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,WAAW,GAAG,IAAI,CAAC,qBAAqB;wBAC3G,GAAG,EAAE,WAAW,CAAC,mBAAmB,EAAE,CAAC,KAAK,CAAC,SAAS,sBAAsB;qBAC7E,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,kEAAkE;AAClE,MAAM,UAAU,oBAAoB,CAAC,CAAW;IAC9C,MAAM,EAAE,IAAI,EAAE,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;IAC1B,MAAM,QAAQ,GAAc,EAAE,CAAC;IAC/B,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,SAAS,CAAC,EAAE,CAAC;QAC5D,MAAM,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,SAAqB,CAAC;QACzC,MAAM,OAAO,GAAG,CAAC,GAAG,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QAC3F,IAAI,EAAE,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC3E,QAAQ,CAAC,IAAI,CAAC;gBACZ,IAAI,EAAE,eAAe;gBACrB,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC;gBACT,MAAM,EAAE,MAAM,CAAC,CAAC,EAAE,wBAAwB;gBAC1C,GAAG,EAAE,0EAA0E;aAChF,CAAC,CAAC;QACL,CAAC;QACD,IAAI,EAAE,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC5E,QAAQ,CAAC,IAAI,CAAC;gBACZ,IAAI,EAAE,eAAe;gBACrB,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC;gBACT,MAAM,EAAE,MAAM,CAAC,CAAC,EAAE,0BAA0B;gBAC5C,GAAG,EAAE,mDAAmD;gBACxD,QAAQ,EAAE,SAAS;aACpB,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,gDAAgD;AAChD,MAAM,UAAU,YAAY,CAAC,CAAW;IACtC,MAAM,EAAE,GAAG,EAAE,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;IACzB,MAAM,QAAQ,GAAc,EAAE,CAAC;IAC/B,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,OAAO,CAAC,EAAE,CAAC;QAC1D,MAAM,IAAI,GAAG,CAAC,CAAC,KAAK,CAAC,OAAwB,CAAC;QAC9C,IAAI,CAAC,IAAI;YAAE,SAAS;QACpB,MAAM,OAAO,GAAG,IAAI,GAAG,CACrB,CAAE,CAAC,CAAC,KAAK,CAAC,KAAkB,IAAI,EAAE,CAAC,CAAC,GAAG,CACrC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,CAAC,EAAE,KAAK,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CACpE,CACF,CAAC;QACF,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,oCAAoC,CAAC,EAAE,CAAC;YACpE,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;gBACvB,QAAQ,CAAC,IAAI,CAAC;oBACZ,IAAI,EAAE,gBAAgB;oBACtB,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC;oBACT,MAAM,EAAE,MAAM,CAAC,CAAC,EAAE,aAAa,CAAC,CAAC,CAAC,CAAC,qBAAqB;oBACxD,GAAG,EAAE,oBAAoB,CAAC,CAAC,CAAC,CAAC,qBAAqB;iBACnD,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QACD,IACE,kHAAkH,CAAC,IAAI,CACrH,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAC5B,EACD,CAAC;YACD,MAAM,CAAC,GACL,yGAAyG,CAAC,IAAI,CAC5G,IAAI,CACL,CAAC;YACJ,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC;gBACzB,QAAQ,CAAC,IAAI,CAAC;oBACZ,IAAI,EAAE,gBAAgB;oBACtB,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC;oBACT,MAAM,EAAE,MAAM,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,oBAAoB;oBAClD,GAAG,EAAE,aAAa;iBACnB,CAAC,CAAC;QACP,CAAC;IACH,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,wCAAwC;AACxC,MAAM,UAAU,QAAQ,CAAC,CAAW;IAClC,MAAM,GAAG,GAAG,CAAC,EAAU,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,WAAW,IAAI,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;IACvF,OAAO,GAAG,CAAC,MAAM,CAAC,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,GAAG,CAAC,MAAM,CAAC;QAC9C,CAAC,CAAC,EAAE;QACJ,CAAC,CAAC;YACE;gBACE,IAAI,EAAE,cAAc;gBACpB,MAAM,EAAE,iCAAiC;gBACzC,GAAG,EAAE,mEAAmE;aACzE;SACF,CAAC;AACR,CAAC;AAED,8CAA8C;AAC9C,MAAM,UAAU,gBAAgB,CAAC,IAAc,EAAE,IAAc;IAC7D,MAAM,QAAQ,GAAc,EAAE,CAAC;IAC/B,MAAM,CAAC,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IACtF,KAAK,MAAM,EAAE,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,OAAO,CAAC,EAAE,CAAC;QAC9D,MAAM,GAAG,GAAG,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;QACzB,IAAI,CAAC,GAAG;YAAE,SAAS;QACnB,MAAM,EAAE,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,IAAI,EAAE,CAAwB,CAAC;QAC3D,MAAM,EAAE,GAAG,CAAC,EAAE,CAAC,KAAK,CAAC,MAAM,IAAI,EAAE,CAAwB,CAAC;QAC1D,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,EAAE,CAAC;YACxC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;gBACZ,QAAQ,CAAC,IAAI,CAAC;oBACZ,IAAI,EAAE,gBAAgB;oBACtB,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC;oBACV,MAAM,EAAE,MAAM,EAAE,CAAC,EAAE,YAAY,CAAC,WAAW;oBAC3C,GAAG,EAAE,+BAA+B;iBACrC,CAAC,CAAC;iBACA,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC;gBAC/B,QAAQ,CAAC,IAAI,CAAC;oBACZ,IAAI,EAAE,gBAAgB;oBACtB,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC;oBACV,MAAM,EAAE,MAAM,EAAE,CAAC,EAAE,QAAQ,CAAC,QAAQ,CAAC,CAAC,IAAI,QAAQ,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE;oBAC9D,GAAG,EAAE,mBAAmB;iBACzB,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QACD,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,EAAE,CAAC;YACxC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ;gBAC3B,QAAQ,CAAC,IAAI,CAAC;oBACZ,IAAI,EAAE,gBAAgB;oBACtB,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC;oBACV,MAAM,EAAE,MAAM,EAAE,CAAC,EAAE,YAAY,CAAC,qBAAqB;oBACrD,GAAG,EAAE,KAAK,CAAC,kBAAkB;iBAC9B,CAAC,CAAC;QACP,CAAC;IACH,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,MAAM,UAAU,QAAQ,CAAC,CAAW,EAAE,IAAsB;IAC1D,OAAO;QACL,GAAG,QAAQ,CAAC,CAAC,CAAC;QACd,GAAG,WAAW,CAAC,CAAC,CAAC;QACjB,GAAG,YAAY,CAAC,CAAC,CAAC;QAClB,GAAG,oBAAoB,CAAC,CAAC,CAAC;QAC1B,GAAG,oBAAoB,CAAC,CAAC,CAAC;QAC1B,GAAG,YAAY,CAAC,CAAC,CAAC;QAClB,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,gBAAgB,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;KAC3C,CAAC;AACJ,CAAC"}

package/dist/static-check.d.ts

@@ -0,0 +1,23 @@
+import type { CageConfig } from './config.js';
+import type { Finding } from './findings.js';
+export declare const PRIMITIVES: Set<string>;
+export interface DeclSite {
+    exportName: string;
+    primitive: string;
+    file: string;
+    line: number;
+    /** 声明调用的源码（用于哈希与业务错误码提取） */
+    text: string;
+    /** handler 里 fail('CODE') 的业务错误码 */
+    domainCodes: string[];
+}
+export interface StaticResult {
+    sites: DeclSite[];
+    findings: Finding[];
+    unsafeCount: number;
+    files: string[];
+}
+export declare function listTs(dir: string): string[];
+export declare function staticCheck(cfg: CageConfig): StaticResult;
+/** 有声明文件未被导出：静态扫到的声明必须出现在 domain 入口的导出里 */
+export declare function unexportedFindings(sites: DeclSite[], exported: Set<string>): Finding[];