@yss123/cage-kernel 0.0.0-stage → 0.2.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 shunshunyue and Cage contributors
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -1,3 +1,21 @@
-# Temporary Holding Version
+# @yss123/cage-kernel
 
-This version is a temporary placeholder for this package. An operational version to replace this has been submitted for review and is awaiting a staged release.
+笼子内核：声明原语、写入流水线、范围组合子、读侧、worker 运行时
+
+Cage 是通过 TypeScript 声明业务、由框架统一执行权限和数据规则的中后台框架。此包是框架的一部分。
+
+## 使用
+
+```powershell
+pnpm add @yss123/cage-kernel
+```
+
+首次使用建议通过脚手架创建完整项目，所需依赖由模板统一配置。需要 Node.js 24 或更新版本。
+
+从 `0.2.0` 起，支持把 `ref()`、`hasMany()`、`manyToMany()` 统一声明在聚合 `fields` 中。多对多中间表由框架生成，关联通过命令修改、通过安全接口分页读取。详见[对象关系指南](https://github.com/shunshunyue/cage/blob/main/docs/ai/relations.md)；脚手架产物也自带这份指南。
+
+- [完整使用说明](https://github.com/shunshunyue/cage/blob/main/docs/使用说明.md)
+- [框架源码与范例](https://github.com/shunshunyue/cage)
+- [问题反馈](https://github.com/shunshunyue/cage/issues)
+
+许可证：[MIT](https://github.com/shunshunyue/cage/blob/main/LICENSE)。

package/dist/brands.d.ts

@@ -0,0 +1,32 @@
+export declare const AGGREGATE: unique symbol;
+export declare const STATES: unique symbol;
+export declare const COMMAND: unique symbol;
+export declare const EVENT: unique symbol;
+export declare const REACTION: unique symbol;
+export declare const QUERY: unique symbol;
+export declare const APPROVAL: unique symbol;
+export declare const JOB: unique symbol;
+export declare const UNSAFE: unique symbol;
+export declare const CONNECTOR: unique symbol;
+export declare const OUTBOUND: unique symbol;
+export declare const INBOUND: unique symbol;
+export declare const ROUTE: unique symbol;
+export declare const CONSUMERS: unique symbol;
+export declare const SYSTEM_DDL: unique symbol;
+export declare const ALL_BRANDS: {
+    readonly AGGREGATE: typeof AGGREGATE;
+    readonly STATES: typeof STATES;
+    readonly COMMAND: typeof COMMAND;
+    readonly EVENT: typeof EVENT;
+    readonly REACTION: typeof REACTION;
+    readonly QUERY: typeof QUERY;
+    readonly APPROVAL: typeof APPROVAL;
+    readonly JOB: typeof JOB;
+    readonly UNSAFE: typeof UNSAFE;
+    readonly CONNECTOR: typeof CONNECTOR;
+    readonly OUTBOUND: typeof OUTBOUND;
+    readonly INBOUND: typeof INBOUND;
+    readonly ROUTE: typeof ROUTE;
+};
+/** 判断一个值属于哪种原语；不是原语返回 null。 */
+export declare function brandOf(v: unknown): keyof typeof ALL_BRANDS | null;

package/dist/brands.js

@@ -0,0 +1,35 @@
+// 品牌标记：抽取器、注册表和内核靠它们识别原语返回的描述对象。
+// 使用 Symbol.for，即使同一个包被加载两份，标记也相同。
+export const AGGREGATE = Symbol.for('cage.aggregate');
+export const STATES = Symbol.for('cage.states');
+export const COMMAND = Symbol.for('cage.command');
+export const EVENT = Symbol.for('cage.event');
+export const REACTION = Symbol.for('cage.reaction');
+export const QUERY = Symbol.for('cage.query');
+export const APPROVAL = Symbol.for('cage.approval');
+export const JOB = Symbol.for('cage.job');
+export const UNSAFE = Symbol.for('cage.unsafe');
+// 以下原语由 @yss123/cage-connectors、@yss123/cage-approval 实现，标记放在这里统一管理
+export const CONNECTOR = Symbol.for('cage.connector');
+export const OUTBOUND = Symbol.for('cage.outbound');
+export const INBOUND = Symbol.for('cage.inbound');
+export const ROUTE = Symbol.for('cage.route');
+// 运行时扩展点：带这个标记的声明对象可以向 worker 提供事件消费者
+export const CONSUMERS = Symbol.for('cage.consumers');
+// 运行时扩展点：带这个标记的声明对象可以提供框架自己的系统表 DDL
+export const SYSTEM_DDL = Symbol.for('cage.systemDdl');
+export const ALL_BRANDS = {
+    AGGREGATE, STATES, COMMAND, EVENT, REACTION, QUERY, APPROVAL, JOB, UNSAFE,
+    CONNECTOR, OUTBOUND, INBOUND, ROUTE,
+};
+/** 判断一个值属于哪种原语；不是原语返回 null。 */
+export function brandOf(v) {
+    if (!v || (typeof v !== 'object' && typeof v !== 'function'))
+        return null;
+    for (const [k, s] of Object.entries(ALL_BRANDS)) {
+        if (v[s])
+            return k;
+    }
+    return null;
+}
+//# sourceMappingURL=brands.js.map

package/dist/brands.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"brands.js","sourceRoot":"","sources":["../src/brands.ts"],"names":[],"mappings":"AAAA,iCAAiC;AACjC,mCAAmC;AAEnC,MAAM,CAAC,MAAM,SAAS,GAAG,MAAM,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;AACtD,MAAM,CAAC,MAAM,MAAM,GAAG,MAAM,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;AAChD,MAAM,CAAC,MAAM,OAAO,GAAG,MAAM,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;AAClD,MAAM,CAAC,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;AAC9C,MAAM,CAAC,MAAM,QAAQ,GAAG,MAAM,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;AACpD,MAAM,CAAC,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;AAC9C,MAAM,CAAC,MAAM,QAAQ,GAAG,MAAM,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;AACpD,MAAM,CAAC,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;AAC1C,MAAM,CAAC,MAAM,MAAM,GAAG,MAAM,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;AAChD,oEAAoE;AACpE,MAAM,CAAC,MAAM,SAAS,GAAG,MAAM,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;AACtD,MAAM,CAAC,MAAM,QAAQ,GAAG,MAAM,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;AACpD,MAAM,CAAC,MAAM,OAAO,GAAG,MAAM,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;AAClD,MAAM,CAAC,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;AAE9C,sCAAsC;AACtC,MAAM,CAAC,MAAM,SAAS,GAAG,MAAM,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;AACtD,oCAAoC;AACpC,MAAM,CAAC,MAAM,UAAU,GAAG,MAAM,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;AAEvD,MAAM,CAAC,MAAM,UAAU,GAAG;IACxB,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,QAAQ,EAAE,GAAG,EAAE,MAAM;IACzE,SAAS,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK;CAC3B,CAAC;AAEX,+BAA+B;AAC/B,MAAM,UAAU,OAAO,CAAC,CAAU;IAChC,IAAI,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,OAAO,CAAC,KAAK,UAAU,CAAC;QAAE,OAAO,IAAI,CAAC;IAC1E,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;QAChD,IAAK,CAAS,CAAC,CAAC,CAAC;YAAE,OAAO,CAA4B,CAAC;IACzD,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/db/connect.d.ts

@@ -0,0 +1,28 @@
+import { Kysely } from 'kysely';
+import pg from 'pg';
+export interface DbHandle {
+    db: Kysely<any>;
+    pool: pg.Pool;
+    close(): Promise<void>;
+}
+export declare function connect(url: string, opts?: {
+    max?: number;
+    onConnect?: (c: pg.PoolClient) => Promise<void>;
+    applicationName?: string;
+}): DbHandle;
+/** 单独的长连接（LISTEN、咨询锁用），不进连接池 */
+export declare function dedicatedClient(url: string, applicationName?: string): Promise<pg.Client>;
+export interface DatabaseUrls {
+    /** 内核账号 cage_app */
+    app: string;
+    /** 读侧账号 cage_read */
+    read: string;
+    /** 迁移账号 cage_migrate（只在 migrate 时使用） */
+    migrate?: string;
+}
+/**
+ * 从环境变量读取连接串：
+ *   CAGE_APP_DATABASE_URL / CAGE_READ_DATABASE_URL / CAGE_MIGRATE_DATABASE_URL
+ * 或只给一个 DATABASE_URL（主机、端口、库名），各账号用默认用户名和 CAGE_DB_PASSWORD。
+ */
+export declare function urlsFromEnv(env?: NodeJS.ProcessEnv): DatabaseUrls;

package/dist/db/connect.js

@@ -0,0 +1,57 @@
+// 数据库连接：内核账号（写）、读侧账号（只能看安全视图）、迁移账号（DDL）。
+import { Kysely, PostgresDialect } from 'kysely';
+import pg from 'pg';
+// 类型解析：bigint 转数字（计数用），date 保持字符串（避免时区换算），numeric 保持字符串（金额）
+const PARSERS = {
+    20: (v) => Number(v), // int8
+    1082: (v) => v, // date
+};
+const types = {
+    getTypeParser(oid, format) {
+        const p = PARSERS[oid];
+        return p ?? pg.types.getTypeParser(oid, format);
+    },
+};
+export function connect(url, opts = {}) {
+    const pool = new pg.Pool({ connectionString: url, max: opts.max ?? 10, types: types, application_name: opts.applicationName ?? 'cage' });
+    if (opts.onConnect)
+        pool.on('connect', (c) => void opts.onConnect(c));
+    const db = new Kysely({ dialect: new PostgresDialect({ pool }) });
+    return {
+        db,
+        pool,
+        close: async () => {
+            await db.destroy();
+        },
+    };
+}
+/** 单独的长连接（LISTEN、咨询锁用），不进连接池 */
+export async function dedicatedClient(url, applicationName = 'cage-listener') {
+    const c = new pg.Client({ connectionString: url, types: types, application_name: applicationName });
+    await c.connect();
+    return c;
+}
+/**
+ * 从环境变量读取连接串：
+ *   CAGE_APP_DATABASE_URL / CAGE_READ_DATABASE_URL / CAGE_MIGRATE_DATABASE_URL
+ * 或只给一个 DATABASE_URL（主机、端口、库名），各账号用默认用户名和 CAGE_DB_PASSWORD。
+ */
+export function urlsFromEnv(env = process.env) {
+    const base = env.DATABASE_URL;
+    const derive = (user, pwVar) => {
+        if (!base)
+            return undefined;
+        const u = new URL(base);
+        u.username = user;
+        u.password = env[pwVar] ?? env.CAGE_DB_PASSWORD ?? user;
+        return u.toString();
+    };
+    const app = env.CAGE_APP_DATABASE_URL ?? derive('cage_app', 'CAGE_APP_PASSWORD');
+    const read = env.CAGE_READ_DATABASE_URL ?? derive('cage_read', 'CAGE_READ_PASSWORD');
+    const migrate = env.CAGE_MIGRATE_DATABASE_URL ?? derive('cage_migrate', 'CAGE_MIGRATE_PASSWORD');
+    if (!app || !read) {
+        throw new Error('[CAGE-ENV-001] 缺少数据库连接：设置 DATABASE_URL，或 CAGE_APP_DATABASE_URL 与 CAGE_READ_DATABASE_URL');
+    }
+    return { app, read, migrate };
+}
+//# sourceMappingURL=connect.js.map

package/dist/db/connect.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"connect.js","sourceRoot":"","sources":["../../src/db/connect.ts"],"names":[],"mappings":"AAAA,yCAAyC;AACzC,OAAO,EAAE,MAAM,EAAE,eAAe,EAAE,MAAM,QAAQ,CAAC;AACjD,OAAO,EAAE,MAAM,IAAI,CAAC;AAEpB,4DAA4D;AAC5D,MAAM,OAAO,GAA2C;IACtD,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,OAAO;IAC7B,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,OAAO;CACxB,CAAC;AAEF,MAAM,KAAK,GAAG;IACZ,aAAa,CAAC,GAAW,EAAE,MAAY;QACrC,MAAM,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;QACvB,OAAO,CAAC,IAAK,EAAE,CAAC,KAAK,CAAC,aAAqB,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IAC3D,CAAC;CACF,CAAC;AAQF,MAAM,UAAU,OAAO,CACrB,GAAW,EACX,OAAoG,EAAE;IAEtG,MAAM,IAAI,GAAG,IAAI,EAAE,CAAC,IAAI,CAAC,EAAE,gBAAgB,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,IAAI,EAAE,EAAE,KAAK,EAAE,KAAY,EAAE,gBAAgB,EAAE,IAAI,CAAC,eAAe,IAAI,MAAM,EAAE,CAAC,CAAC;IAChJ,IAAI,IAAI,CAAC,SAAS;QAAE,IAAI,CAAC,EAAE,CAAC,SAAS,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,IAAI,CAAC,SAAU,CAAC,CAAC,CAAC,CAAC,CAAC;IACvE,MAAM,EAAE,GAAG,IAAI,MAAM,CAAM,EAAE,OAAO,EAAE,IAAI,eAAe,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC;IACvE,OAAO;QACL,EAAE;QACF,IAAI;QACJ,KAAK,EAAE,KAAK,IAAI,EAAE;YAChB,MAAM,EAAE,CAAC,OAAO,EAAE,CAAC;QACrB,CAAC;KACF,CAAC;AACJ,CAAC;AAED,gCAAgC;AAChC,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,GAAW,EAAE,eAAe,GAAG,eAAe;IAClF,MAAM,CAAC,GAAG,IAAI,EAAE,CAAC,MAAM,CAAC,EAAE,gBAAgB,EAAE,GAAG,EAAE,KAAK,EAAE,KAAY,EAAE,gBAAgB,EAAE,eAAe,EAAE,CAAC,CAAC;IAC3G,MAAM,CAAC,CAAC,OAAO,EAAE,CAAC;IAClB,OAAO,CAAC,CAAC;AACX,CAAC;AAWD;;;;GAIG;AACH,MAAM,UAAU,WAAW,CAAC,MAAyB,OAAO,CAAC,GAAG;IAC9D,MAAM,IAAI,GAAG,GAAG,CAAC,YAAY,CAAC;IAC9B,MAAM,MAAM,GAAG,CAAC,IAAY,EAAE,KAAa,EAAE,EAAE;QAC7C,IAAI,CAAC,IAAI;YAAE,OAAO,SAAS,CAAC;QAC5B,MAAM,CAAC,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,CAAC;QACxB,CAAC,CAAC,QAAQ,GAAG,IAAI,CAAC;QAClB,CAAC,CAAC,QAAQ,GAAG,GAAG,CAAC,KAAK,CAAC,IAAI,GAAG,CAAC,gBAAgB,IAAI,IAAI,CAAC;QACxD,OAAO,CAAC,CAAC,QAAQ,EAAE,CAAC;IACtB,CAAC,CAAC;IACF,MAAM,GAAG,GAAG,GAAG,CAAC,qBAAqB,IAAI,MAAM,CAAC,UAAU,EAAE,mBAAmB,CAAC,CAAC;IACjF,MAAM,IAAI,GAAG,GAAG,CAAC,sBAAsB,IAAI,MAAM,CAAC,WAAW,EAAE,oBAAoB,CAAC,CAAC;IACrF,MAAM,OAAO,GAAG,GAAG,CAAC,yBAAyB,IAAI,MAAM,CAAC,cAAc,EAAE,uBAAuB,CAAC,CAAC;IACjG,IAAI,CAAC,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QAClB,MAAM,IAAI,KAAK,CAAC,yFAAyF,CAAC,CAAC;IAC7G,CAAC;IACD,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;AAChC,CAAC"}

package/dist/db/ddl.d.ts

@@ -0,0 +1,69 @@
+import type { AnyAggregate } from '../primitives/aggregate.js';
+import type { Registry } from '../registry.js';
+export declare const q: (ident: string) => string;
+export declare const qt: (t: {
+    schema: string;
+    name: string;
+}) => string;
+export interface ColumnModel {
+    name: string;
+    type: string;
+    notNull: boolean;
+    /** 外键目标表，例如 sys.dept */
+    references?: string;
+    unique?: boolean;
+    /** 枚举取值（CHECK 约束） */
+    values?: string[];
+}
+export interface TableModel {
+    schema: string;
+    name: string;
+    aggregate: string;
+    columns: ColumnModel[];
+    statusValues: string[];
+    /** 索引也表达租户复合唯一键，供自动关系表的复合外键引用。 */
+    indexes: {
+        name: string;
+        columns: string[];
+        unique?: boolean;
+    }[];
+    /** 物理关联表不是聚合：没有状态、版本、独立命令和能力点。 */
+    relation?: {
+        field: string;
+        source: string;
+        target: string;
+    };
+}
+export interface SchemaModel {
+    version: 1;
+    tables: TableModel[];
+}
+export declare function tableModel(agg: AnyAggregate, reg: Registry): TableModel;
+/** 按外键依赖排序：被引用的表在前 */
+export declare function schemaModel(reg: Registry): SchemaModel;
+export declare function createTableSql(t: TableModel): string;
+/**
+ * 比较两份结构，生成迁移草稿语句。破坏性变更（删表、删列）只生成注释，按「先扩展再收缩」由人决定。
+ */
+export declare function diffSchemas(prev: SchemaModel | null, next: SchemaModel): string[];
+export declare const IN_SCOPE_SQL = "\n-- \u751F\u6210\u7269\uFF1A\u8303\u56F4\u5224\u65AD\u3002\u8BFB\u53D6\u4F1A\u8BDD\u53D8\u91CF app.scopes\uFF08{\"\u805A\u5408\":[{\"c\":\"\u7EC4\u5408\u5B50\",\"deptIds\":[...]}]}\uFF09\uFF0C\u591A\u4E2A\u6388\u6743\u53D6\u5E76\u96C6\u3002\n-- SECURITY DEFINER\uFF1A\u4EE5\u8868\u5C5E\u4E3B\u8EAB\u4EFD\u8BFB\u90E8\u95E8\u8868\uFF0C\u907F\u514D\u90E8\u95E8\u8868\u81EA\u5DF1\u7684\u884C\u7EA7\u7B56\u7565\u9012\u5F52\u3002\nCREATE OR REPLACE FUNCTION sys.in_scope(agg text, dept uuid, owner uuid)\nRETURNS boolean LANGUAGE sql STABLE SECURITY DEFINER SET search_path = pg_catalog, sys AS $$\n  SELECT coalesce(bool_or(\n    CASE g->>'c'\n      WHEN 'all' THEN true\n      WHEN 'self' THEN owner IS NOT NULL AND owner = nullif(current_setting('app.user_id', true), '')::uuid\n      WHEN 'dept' THEN dept IS NOT NULL AND dept = nullif(current_setting('app.dept_id', true), '')::uuid\n      WHEN 'deptSubtree' THEN dept IN (\n        SELECT d.id FROM sys.dept d\n        WHERE d.ancestors LIKE nullif(current_setting('app.dept_path', true), '') || '%')\n      WHEN 'deptSet' THEN dept = ANY (ARRAY(SELECT jsonb_array_elements_text(coalesce(g->'deptIds', '[]'::jsonb)))::uuid[])\n      ELSE false\n    END), false)\n  FROM jsonb_array_elements(coalesce(\n    nullif(current_setting('app.scopes', true), '')::jsonb -> agg,\n    nullif(current_setting('app.scopes', true), '')::jsonb -> '*',\n    '[{\"c\":\"self\"}]'::jsonb)) AS g\n$$;";
+export declare const MASK_SQL = "\n-- \u751F\u6210\u7269\uFF1A\u6309\u654F\u611F\u79CD\u7C7B\u63A9\u7801\u3002\u6301\u6709\u300C\u805A\u5408.\u79CD\u7C7B\u300D\u660E\u6587\u6743\u9650\u65F6\u539F\u6837\u8FD4\u56DE\u3002\nCREATE OR REPLACE FUNCTION sys.mask(agg text, kind text, val text)\nRETURNS text LANGUAGE sql STABLE AS $$\n  SELECT CASE\n    WHEN val IS NULL THEN NULL\n    WHEN (agg || '.' || kind) = ANY (string_to_array(coalesce(current_setting('app.unmask', true), ''), ','))\n      OR ('*.' || kind) = ANY (string_to_array(coalesce(current_setting('app.unmask', true), ''), ',')) THEN val\n    WHEN kind = 'phone' THEN CASE WHEN length(val) >= 7 THEN left(val, 3) || '****' || right(val, 4) ELSE '****' END\n    WHEN kind = 'idCard' THEN CASE WHEN length(val) >= 8 THEN left(val, 4) || '**********' || right(val, 4) ELSE '****' END\n    WHEN kind = 'bankCard' THEN '**** **** **** ' || right(val, 4)\n    WHEN kind = 'email' THEN CASE WHEN strpos(val, '@') > 1 THEN left(val, 1) || '***' || substr(val, strpos(val, '@')) ELSE '******' END\n    WHEN kind = 'name' THEN left(val, 1) || '**'\n    WHEN kind = 'address' THEN left(val, 6) || '******'\n    ELSE '******'\n  END\n$$;";
+export declare function aggregateSafeSql(agg: AnyAggregate): string;
+export declare const SYSTEM_SAFE_SQL = "\n-- \u5BA1\u8BA1\u67E5\u8BE2\u89C6\u56FE\uFF1A\u8BFB\u4FA7\u8D26\u53F7\u7ECF\u7CFB\u7EDF\u7BA1\u7406\u63A5\u53E3\u4F7F\u7528\uFF0C\u6309\u79DF\u6237\u8FC7\u6EE4\nDROP VIEW IF EXISTS safe.audit_log;\nCREATE VIEW safe.audit_log WITH (security_barrier) AS\n  SELECT id, at, actor, actor_kind, on_behalf_of, source, kind, capability, command, aggregate, aggregate_id,\n         result, diff, request_id, idempotency_key, client\n  FROM sys.audit_log\n  WHERE tenant_id = nullif(current_setting('app.tenant_id', true), '')::uuid;\nALTER VIEW safe.audit_log OWNER TO cage_view_owner;\nGRANT SELECT ON safe.audit_log TO cage_read;";
+/** 整个安全层：先删掉旧的 safe 视图，再按声明重建（幂等） */
+export declare function safeLayerSql(reg: Registry): string;
+export interface BootstrapPasswords {
+    app: string;
+    read: string;
+    migrate: string;
+}
+/** 建库时执行一次（超级用户）：模式、账号、默认权限 */
+export declare function bootstrapSql(pw: BootstrapPasswords, dbName?: string): string;
+/** 单租户部署使用的默认租户（启用多租户时每个租户一行 sys.tenant） */
+export declare const DEFAULT_TENANT = "00000000-0000-4000-8000-000000000001";
+/** 框架系统表（框架自己的迁移流，按名字记入 sys.schema_migrations） */
+export declare const SYSTEM_MIGRATIONS: {
+    name: string;
+    sql: string;
+}[];
+export declare const SCHEMA_MIGRATIONS_SQL = "\nCREATE TABLE IF NOT EXISTS sys.schema_migrations (\n  name text PRIMARY KEY,\n  checksum text,\n  applied_at timestamptz NOT NULL DEFAULT now()\n);";