@yss123/cage-kernel 0.0.0-stage → 0.2.0

package/dist/db/ddl.js

@@ -0,0 +1,522 @@
+import { isRelation } from '../primitives/fields.js';
+import { snake } from '../util/names.js';
+import { TRANSFER_MIGRATION } from '../transfer/schema.js';
+import { relationTable } from '../relations.js';
+export const q = (ident) => `"${ident.replace(/"/g, '""')}"`;
+export const qt = (t) => `${q(t.schema)}.${q(t.name)}`;
+const lit = (s) => `'${s.replace(/'/g, "''")}'`;
+export function tableModel(agg, reg) {
+    const t = agg.table;
+    const columns = [
+        { name: 'id', type: 'uuid', notNull: true },
+        { name: 'tenant_id', type: 'uuid', notNull: true },
+    ];
+    for (const [k, f] of Object.entries(agg.fields)) {
+        if (isRelation(f))
+            continue;
+        const target = f.ref ? reg.aggregate(f.ref) : undefined;
+        columns.push({
+            name: snake(k),
+            type: f.sql,
+            notNull: !f.isOptional,
+            references: target ? `${target.table.schema}.${target.table.name}` : undefined,
+            unique: f.isUnique || undefined,
+            values: f.kind === 'enum' ? [...(f.values ?? [])] : undefined,
+        });
+    }
+    columns.push({ name: 'status', type: 'text', notNull: true }, { name: 'version', type: 'integer', notNull: true }, { name: 'created_at', type: 'timestamptz', notNull: true }, { name: 'updated_at', type: 'timestamptz', notNull: true });
+    const indexes = [];
+    const scopeCols = [agg.scope.deptField, agg.scope.ownerField].filter((x) => !!x && x !== 'id');
+    for (const f of scopeCols)
+        indexes.push({ name: `${t.name}_tenant_${snake(f)}_idx`, columns: ['tenant_id', snake(f)] });
+    indexes.push({ name: `${t.name}_status_idx`, columns: ['tenant_id', 'status'] });
+    for (const [k, f] of Object.entries(agg.fields)) {
+        if (f.kind === 'ref' && !scopeCols.includes(k))
+            indexes.push({ name: `${t.name}_${snake(k)}_idx`, columns: [snake(k)] });
+    }
+    const participates = reg.aggregates.some((owner) => Object.values(owner.fields)
+        .some((f) => f.kind === 'manyToMany' && (owner === agg || f.ref === agg.name)));
+    if (participates)
+        indexes.push({ name: `${t.name}_tenant_id_uq`, columns: ['tenant_id', 'id'], unique: true });
+    return { schema: t.schema, name: t.name, aggregate: agg.name, columns, statusValues: [...agg.states.values], indexes };
+}
+/** 按外键依赖排序：被引用的表在前 */
+export function schemaModel(reg) {
+    const models = reg.aggregates.map((a) => tableModel(a, reg));
+    const key = (t) => `${t.schema}.${t.name}`;
+    const byKey = new Map(models.map((m) => [key(m), m]));
+    const out = [];
+    const seen = new Set();
+    const visit = (m, stack) => {
+        if (seen.has(key(m)))
+            return;
+        stack.add(key(m));
+        for (const c of m.columns) {
+            const dep = c.references && byKey.get(c.references);
+            if (dep && !stack.has(key(dep)))
+                visit(dep, stack);
+        }
+        stack.delete(key(m));
+        seen.add(key(m));
+        out.push(m);
+    };
+    for (const m of [...models].sort((a, b) => key(a).localeCompare(key(b))))
+        visit(m, new Set());
+    // 主表及复合唯一键先就绪，再建立关联表，避免前向外键依赖。
+    for (const owner of reg.aggregates)
+        for (const [field, f] of Object.entries(owner.fields)) {
+            if (f.kind !== 'manyToMany')
+                continue;
+            const target = reg.aggregate(f.ref);
+            const table = relationTable(owner, field);
+            out.push({ ...table, aggregate: owner.name, relation: {
+                    field, source: `${owner.table.schema}.${owner.table.name}`, target: `${target.table.schema}.${target.table.name}`,
+                }, columns: ['tenant_id', 'source_id', 'target_id'].map((name) => ({ name, type: 'uuid', notNull: true })),
+                statusValues: [], indexes: [{ name: `${table.name.slice(0, 52)}_target_idx`, columns: ['tenant_id', 'target_id'] }] });
+        }
+    return { version: 1, tables: out };
+}
+function columnSql(t, c, forCreate) {
+    let s = `${q(c.name)} ${c.type}`;
+    if (c.name === 'id')
+        return `${s} PRIMARY KEY DEFAULT gen_random_uuid()`;
+    if (c.notNull && forCreate)
+        s += ' NOT NULL';
+    if (c.name === 'version')
+        s += ' DEFAULT 1';
+    if (c.name === 'created_at' || c.name === 'updated_at')
+        s += ' DEFAULT now()';
+    if (c.references) {
+        const [rs, rn] = c.references.split('.');
+        s += ` REFERENCES ${q(rs)}.${q(rn)}(id)`;
+    }
+    if (c.values)
+        s += ` CONSTRAINT ${q(`${t.name}_${c.name}_check`)} CHECK (${q(c.name)} IN (${c.values.map(lit).join(', ')}))`;
+    return s;
+}
+function statusCheckSql(t) {
+    return `CONSTRAINT ${q(`${t.name}_status_check`)} CHECK (status IN (${t.statusValues.map(lit).join(', ')}))`;
+}
+export function createTableSql(t) {
+    const cols = t.columns.map((c) => `  ${columnSql(t, c, true)}`);
+    if (t.relation) {
+        cols.push('  PRIMARY KEY (tenant_id, source_id, target_id)', ...relationForeignKeys(t).map((fk) => `  ${fk}`));
+    }
+    else
+        cols.push(`  ${statusCheckSql(t)}`);
+    const lines = [`CREATE TABLE IF NOT EXISTS ${qt(t)} (`, cols.join(',\n'), ');'];
+    for (const c of t.columns.filter((x) => x.unique)) {
+        lines.push(`CREATE UNIQUE INDEX IF NOT EXISTS ${q(`${t.name}_${c.name}_uq`)} ON ${qt(t)} (tenant_id, ${q(c.name)});`);
+    }
+    for (const i of t.indexes) {
+        lines.push(indexSql(t, i));
+    }
+    if (t.relation)
+        lines.push(`GRANT DELETE ON ${qt(t)} TO cage_app;`);
+    return lines.join('\n');
+}
+const tableNameSql = (name) => name.split('.').map(q).join('.');
+const indexSql = (t, i) => `CREATE ${i.unique ? 'UNIQUE ' : ''}INDEX IF NOT EXISTS ${q(i.name)} ON ${qt(t)} (${i.columns.map(q).join(', ')});`;
+/** 两个复合外键把租户一致性放进数据库；解绑只删链接，源对象硬删除才级联清理链接。 */
+function relationForeignKeys(t) {
+    return [
+        `CONSTRAINT ${q(`${t.name.slice(0, 53)}_source_fk`)} FOREIGN KEY (tenant_id, source_id) REFERENCES ${tableNameSql(t.relation.source)} (tenant_id, id) ON DELETE CASCADE`,
+        `CONSTRAINT ${q(`${t.name.slice(0, 53)}_target_fk`)} FOREIGN KEY (tenant_id, target_id) REFERENCES ${tableNameSql(t.relation.target)} (tenant_id, id)`,
+    ];
+}
+/**
+ * 比较两份结构，生成迁移草稿语句。破坏性变更（删表、删列）只生成注释，按「先扩展再收缩」由人决定。
+ */
+export function diffSchemas(prev, next) {
+    const out = [];
+    const prevMap = new Map((prev?.tables ?? []).map((t) => [`${t.schema}.${t.name}`, t]));
+    const nextMap = new Map(next.tables.map((t) => [`${t.schema}.${t.name}`, t]));
+    for (const t of next.tables) {
+        const p = prevMap.get(`${t.schema}.${t.name}`);
+        if (!p) {
+            out.push(`-- 新表：来自聚合 ${t.aggregate}\n${createTableSql(t)}`);
+            continue;
+        }
+        const pc = new Map(p.columns.map((c) => [c.name, c]));
+        const nc = new Map(t.columns.map((c) => [c.name, c]));
+        for (const c of t.columns) {
+            const old = pc.get(c.name);
+            if (!old) {
+                if (c.notNull) {
+                    out.push(`-- 新列 ${t.aggregate}.${c.name}（必填）：先加可空列，回填后再加 NOT NULL\n` +
+                        `ALTER TABLE ${qt(t)} ADD COLUMN IF NOT EXISTS ${columnSql(t, c, false)};\n` +
+                        `-- TODO 回填：UPDATE ${qt(t)} SET ${q(c.name)} = … WHERE ${q(c.name)} IS NULL;\n` +
+                        `ALTER TABLE ${qt(t)} ALTER COLUMN ${q(c.name)} SET NOT NULL;`);
+                }
+                else {
+                    out.push(`ALTER TABLE ${qt(t)} ADD COLUMN IF NOT EXISTS ${columnSql(t, c, false)};`);
+                }
+                if (c.unique)
+                    out.push(`CREATE UNIQUE INDEX IF NOT EXISTS ${q(`${t.name}_${c.name}_uq`)} ON ${qt(t)} (tenant_id, ${q(c.name)});`);
+                continue;
+            }
+            if (old.type !== c.type) {
+                out.push(`-- 列类型变化 ${t.aggregate}.${c.name}：${old.type} → ${c.type}，请确认 USING 表达式\nALTER TABLE ${qt(t)} ALTER COLUMN ${q(c.name)} TYPE ${c.type} USING ${q(c.name)}::${c.type};`);
+            }
+            if (old.notNull !== c.notNull) {
+                out.push(`ALTER TABLE ${qt(t)} ALTER COLUMN ${q(c.name)} ${c.notNull ? 'SET' : 'DROP'} NOT NULL;`);
+            }
+            if (JSON.stringify(old.values ?? null) !== JSON.stringify(c.values ?? null)) {
+                out.push(`ALTER TABLE ${qt(t)} DROP CONSTRAINT IF EXISTS ${q(`${t.name}_${c.name}_check`)};`);
+                if (c.values)
+                    out.push(`ALTER TABLE ${qt(t)} ADD CONSTRAINT ${q(`${t.name}_${c.name}_check`)} CHECK (${q(c.name)} IN (${c.values.map(lit).join(', ')}));`);
+            }
+            if (!old.unique && c.unique)
+                out.push(`CREATE UNIQUE INDEX IF NOT EXISTS ${q(`${t.name}_${c.name}_uq`)} ON ${qt(t)} (tenant_id, ${q(c.name)});`);
+            if (old.unique && !c.unique)
+                out.push(`DROP INDEX IF EXISTS ${q(t.schema)}.${q(`${t.name}_${c.name}_uq`)};`);
+            if (old.references !== c.references && c.references) {
+                const [rs, rn] = c.references.split('.');
+                out.push(`ALTER TABLE ${qt(t)} ADD FOREIGN KEY (${q(c.name)}) REFERENCES ${q(rs)}.${q(rn)}(id);`);
+            }
+        }
+        for (const c of p.columns) {
+            if (!nc.has(c.name)) {
+                out.push(`-- 收缩：字段 ${t.aggregate}.${c.name} 已从声明删除。确认所有读写都已切走后再取消注释（先扩展再收缩）\n-- ALTER TABLE ${qt(t)} DROP COLUMN ${q(c.name)};`);
+            }
+        }
+        if (!t.relation && JSON.stringify(p.statusValues) !== JSON.stringify(t.statusValues)) {
+            const removed = p.statusValues.filter((s) => !t.statusValues.includes(s));
+            if (removed.length)
+                out.push(`-- 注意：状态 ${removed.join(', ')} 被删除，先确认没有数据处于这些状态`);
+            out.push(`ALTER TABLE ${qt(t)} DROP CONSTRAINT IF EXISTS ${q(`${t.name}_status_check`)};\nALTER TABLE ${qt(t)} ADD ${statusCheckSql(t)};`);
+        }
+        const pi = new Set(p.indexes.map((i) => i.name));
+        for (const i of t.indexes)
+            if (!pi.has(i.name))
+                out.push(indexSql(t, i));
+        if (t.relation && p.relation && JSON.stringify(t.relation) !== JSON.stringify(p.relation)) {
+            out.push(`-- 关联目标变化：请先迁移已有链接，再应用新的外键`);
+            for (const side of ['source', 'target'])
+                out.push(`ALTER TABLE ${qt(t)} DROP CONSTRAINT ${q(`${t.name.slice(0, 53)}_${side}_fk`)};`);
+            for (const fk of relationForeignKeys(t))
+                out.push(`ALTER TABLE ${qt(t)} ADD ${fk};`);
+        }
+    }
+    for (const [k, p] of prevMap) {
+        if (!nextMap.has(k))
+            out.push(`-- 收缩：聚合 ${p.aggregate} 已从声明删除。确认后再取消注释\n-- DROP TABLE ${qt(p)};`);
+    }
+    return out;
+}
+// ---------------- 安全层：函数、策略、视图（每次整体重建） ----------------
+export const IN_SCOPE_SQL = `
+-- 生成物：范围判断。读取会话变量 app.scopes（{"聚合":[{"c":"组合子","deptIds":[...]}]}），多个授权取并集。
+-- SECURITY DEFINER：以表属主身份读部门表，避免部门表自己的行级策略递归。
+CREATE OR REPLACE FUNCTION sys.in_scope(agg text, dept uuid, owner uuid)
+RETURNS boolean LANGUAGE sql STABLE SECURITY DEFINER SET search_path = pg_catalog, sys AS $$
+  SELECT coalesce(bool_or(
+    CASE g->>'c'
+      WHEN 'all' THEN true
+      WHEN 'self' THEN owner IS NOT NULL AND owner = nullif(current_setting('app.user_id', true), '')::uuid
+      WHEN 'dept' THEN dept IS NOT NULL AND dept = nullif(current_setting('app.dept_id', true), '')::uuid
+      WHEN 'deptSubtree' THEN dept IN (
+        SELECT d.id FROM sys.dept d
+        WHERE d.ancestors LIKE nullif(current_setting('app.dept_path', true), '') || '%')
+      WHEN 'deptSet' THEN dept = ANY (ARRAY(SELECT jsonb_array_elements_text(coalesce(g->'deptIds', '[]'::jsonb)))::uuid[])
+      ELSE false
+    END), false)
+  FROM jsonb_array_elements(coalesce(
+    nullif(current_setting('app.scopes', true), '')::jsonb -> agg,
+    nullif(current_setting('app.scopes', true), '')::jsonb -> '*',
+    '[{"c":"self"}]'::jsonb)) AS g
+$$;`;
+export const MASK_SQL = `
+-- 生成物：按敏感种类掩码。持有「聚合.种类」明文权限时原样返回。
+CREATE OR REPLACE FUNCTION sys.mask(agg text, kind text, val text)
+RETURNS text LANGUAGE sql STABLE AS $$
+  SELECT CASE
+    WHEN val IS NULL THEN NULL
+    WHEN (agg || '.' || kind) = ANY (string_to_array(coalesce(current_setting('app.unmask', true), ''), ','))
+      OR ('*.' || kind) = ANY (string_to_array(coalesce(current_setting('app.unmask', true), ''), ',')) THEN val
+    WHEN kind = 'phone' THEN CASE WHEN length(val) >= 7 THEN left(val, 3) || '****' || right(val, 4) ELSE '****' END
+    WHEN kind = 'idCard' THEN CASE WHEN length(val) >= 8 THEN left(val, 4) || '**********' || right(val, 4) ELSE '****' END
+    WHEN kind = 'bankCard' THEN '**** **** **** ' || right(val, 4)
+    WHEN kind = 'email' THEN CASE WHEN strpos(val, '@') > 1 THEN left(val, 1) || '***' || substr(val, strpos(val, '@')) ELSE '******' END
+    WHEN kind = 'name' THEN left(val, 1) || '**'
+    WHEN kind = 'address' THEN left(val, 6) || '******'
+    ELSE '******'
+  END
+$$;`;
+export function aggregateSafeSql(agg) {
+    const t = agg.table;
+    const dept = agg.scope.deptField ? q(snake(agg.scope.deptField)) : 'NULL::uuid';
+    const owner = agg.scope.ownerField ? q(snake(agg.scope.ownerField)) : 'NULL::uuid';
+    const cols = ['id'];
+    for (const [k, f] of Object.entries(agg.fields)) {
+        if (f.isHidden || isRelation(f))
+            continue;
+        const c = q(snake(k));
+        cols.push(f.sensitiveKind ? `sys.mask(${lit(agg.name)}, ${lit(f.sensitiveKind)}, ${c}::text) AS ${c}` : c);
+    }
+    cols.push('status', 'version', 'created_at', 'updated_at');
+    const view = `${q('safe')}.${q(t.name)}`;
+    return [
+        `-- ${agg.name}：行级策略 + 安全视图`,
+        `ALTER TABLE ${qt(t)} ENABLE ROW LEVEL SECURITY;`,
+        `DROP POLICY IF EXISTS scope_read ON ${qt(t)};`,
+        `CREATE POLICY scope_read ON ${qt(t)} FOR SELECT TO cage_view_owner USING (`,
+        `  tenant_id = nullif(current_setting('app.tenant_id', true), '')::uuid`,
+        `  AND sys.in_scope(${lit(agg.name)}, ${dept}, ${owner}));`,
+        `DROP POLICY IF EXISTS kernel_rw ON ${qt(t)};`,
+        `CREATE POLICY kernel_rw ON ${qt(t)} TO cage_app USING (true) WITH CHECK (true);`,
+        `DROP VIEW IF EXISTS ${view};`,
+        `CREATE VIEW ${view} WITH (security_barrier) AS`,
+        `  SELECT ${cols.join(', ')}`,
+        `  FROM ${qt(t)};`,
+        `ALTER VIEW ${view} OWNER TO cage_view_owner;`,
+        `GRANT SELECT ON ${view} TO cage_read;`,
+    ].join('\n');
+}
+export const SYSTEM_SAFE_SQL = `
+-- 审计查询视图：读侧账号经系统管理接口使用，按租户过滤
+DROP VIEW IF EXISTS safe.audit_log;
+CREATE VIEW safe.audit_log WITH (security_barrier) AS
+  SELECT id, at, actor, actor_kind, on_behalf_of, source, kind, capability, command, aggregate, aggregate_id,
+         result, diff, request_id, idempotency_key, client
+  FROM sys.audit_log
+  WHERE tenant_id = nullif(current_setting('app.tenant_id', true), '')::uuid;
+ALTER VIEW safe.audit_log OWNER TO cage_view_owner;
+GRANT SELECT ON safe.audit_log TO cage_read;`;
+/** 整个安全层：先删掉旧的 safe 视图，再按声明重建（幂等） */
+export function safeLayerSql(reg) {
+    // 关系视图依赖两侧主视图，先删除框架标记的旧关系视图（包括已删除声明的关系）。
+    // 不用 CASCADE，防止顺带移除用户自己维护的数据库对象。
+    const parts = [IN_SCOPE_SQL, MASK_SQL, `DO $$ DECLARE v record; BEGIN
+    FOR v IN SELECT c.relname FROM pg_class c JOIN pg_namespace n ON n.oid = c.relnamespace
+      WHERE n.nspname = 'safe' AND c.relkind = 'v' AND obj_description(c.oid, 'pg_class') = 'cage:relation'
+    LOOP EXECUTE format('DROP VIEW safe.%I', v.relname); END LOOP;
+  END $$;`];
+    for (const a of reg.aggregates)
+        parts.push(aggregateSafeSql(a));
+    for (const t of schemaModel(reg).tables)
+        if (t.relation) {
+            const source = t.relation.source.split('.')[1], target = t.relation.target.split('.')[1];
+            const view = `${q('safe')}.${q(t.name)}`;
+            parts.push([
+                `ALTER TABLE ${qt(t)} ENABLE ROW LEVEL SECURITY;`,
+                `DROP POLICY IF EXISTS scope_read ON ${qt(t)};`,
+                `CREATE POLICY scope_read ON ${qt(t)} FOR SELECT TO cage_view_owner USING (tenant_id = nullif(current_setting('app.tenant_id', true), '')::uuid);`,
+                `DROP POLICY IF EXISTS kernel_rw ON ${qt(t)};`,
+                `CREATE POLICY kernel_rw ON ${qt(t)} TO cage_app USING (true) WITH CHECK (true);`,
+                `CREATE VIEW ${view} WITH (security_barrier) AS SELECT link.source_id, link.target_id FROM ${qt(t)} link`,
+                `JOIN safe.${q(source)} src ON src.id = link.source_id JOIN safe.${q(target)} dst ON dst.id = link.target_id`,
+                `WHERE src.status <> 'deleted' AND dst.status <> 'deleted';`,
+                `COMMENT ON VIEW ${view} IS 'cage:relation';`,
+                `ALTER VIEW ${view} OWNER TO cage_view_owner;`,
+                `GRANT SELECT ON ${view} TO cage_read;`,
+            ].join('\n'));
+        }
+    parts.push(SYSTEM_SAFE_SQL);
+    return parts.join('\n\n');
+}
+/** 建库时执行一次（超级用户）：模式、账号、默认权限 */
+export function bootstrapSql(pw, dbName) {
+    const role = (name, login, password) => `
+DO $$ BEGIN
+  IF NOT EXISTS (SELECT 1 FROM pg_roles WHERE rolname = ${lit(name)}) THEN
+    CREATE ROLE ${name} ${login ? 'LOGIN' : 'NOLOGIN'}${password ? ` PASSWORD ${lit(password)}` : ''};
+  ${password ? `ELSE ALTER ROLE ${name} ${login ? 'LOGIN' : 'NOLOGIN'} PASSWORD ${lit(password)};` : ''}
+  END IF;
+END $$;`;
+    return `
+-- db/bootstrap.sql：框架提供，建库时执行一次
+CREATE EXTENSION IF NOT EXISTS pgcrypto;
+${role('cage_app', true, pw.app)}
+${role('cage_read', true, pw.read)}
+${role('cage_view_owner', false)}
+${role('cage_migrate', true, pw.migrate)}
+${dbName ? `GRANT CONNECT, CREATE ON DATABASE ${q(dbName)} TO cage_migrate;\nGRANT CONNECT ON DATABASE ${q(dbName)} TO cage_app, cage_read;` : ''}
+CREATE SCHEMA IF NOT EXISTS core AUTHORIZATION cage_migrate;
+CREATE SCHEMA IF NOT EXISTS sys AUTHORIZATION cage_migrate;
+CREATE SCHEMA IF NOT EXISTS safe AUTHORIZATION cage_migrate;
+CREATE SCHEMA IF NOT EXISTS flow AUTHORIZATION cage_migrate;
+-- 迁移账号要把视图属主改成 cage_view_owner，必须是它的成员
+GRANT cage_view_owner TO cage_migrate;
+GRANT USAGE ON SCHEMA core, sys, flow TO cage_app;
+GRANT USAGE ON SCHEMA core, sys TO cage_view_owner;
+GRANT CREATE, USAGE ON SCHEMA safe TO cage_view_owner;
+GRANT USAGE ON SCHEMA safe TO cage_read;
+REVOKE ALL ON SCHEMA core, sys, flow FROM cage_read;
+REVOKE ALL ON SCHEMA core, sys, safe, flow FROM PUBLIC;
+-- 以后迁移建的表：内核账号读写但不能删除；视图属主只能读
+ALTER DEFAULT PRIVILEGES FOR ROLE cage_migrate IN SCHEMA core GRANT SELECT, INSERT, UPDATE ON TABLES TO cage_app;
+ALTER DEFAULT PRIVILEGES FOR ROLE cage_migrate IN SCHEMA core GRANT SELECT ON TABLES TO cage_view_owner;
+ALTER DEFAULT PRIVILEGES FOR ROLE cage_migrate IN SCHEMA sys GRANT SELECT, INSERT, UPDATE ON TABLES TO cage_app;
+ALTER DEFAULT PRIVILEGES FOR ROLE cage_migrate IN SCHEMA sys GRANT SELECT ON TABLES TO cage_view_owner;
+ALTER DEFAULT PRIVILEGES FOR ROLE cage_migrate IN SCHEMA sys GRANT USAGE, SELECT ON SEQUENCES TO cage_app;
+ALTER DEFAULT PRIVILEGES FOR ROLE cage_migrate IN SCHEMA flow GRANT SELECT, INSERT, UPDATE ON TABLES TO cage_app;
+ALTER DEFAULT PRIVILEGES FOR ROLE cage_migrate IN SCHEMA flow GRANT USAGE, SELECT ON SEQUENCES TO cage_app;
+`;
+}
+/** 单租户部署使用的默认租户（启用多租户时每个租户一行 sys.tenant） */
+export const DEFAULT_TENANT = '00000000-0000-4000-8000-000000000001';
+/** 框架系统表（框架自己的迁移流，按名字记入 sys.schema_migrations） */
+export const SYSTEM_MIGRATIONS = [
+    {
+        name: 'cage:0001_system',
+        sql: `
+CREATE TABLE IF NOT EXISTS sys.tenant (
+  id uuid PRIMARY KEY,
+  name text NOT NULL,
+  created_at timestamptz NOT NULL DEFAULT now()
+);
+INSERT INTO sys.tenant (id, name) VALUES ('${DEFAULT_TENANT}', 'default') ON CONFLICT DO NOTHING;
+
+CREATE TABLE IF NOT EXISTS sys.session (
+  id text PRIMARY KEY,
+  user_id uuid NOT NULL,
+  tenant_id uuid NOT NULL,
+  created_at timestamptz NOT NULL DEFAULT now(),
+  expires_at timestamptz NOT NULL,
+  step_up_at timestamptz,
+  ip text,
+  user_agent text
+);
+CREATE INDEX IF NOT EXISTS session_user_idx ON sys.session (user_id);
+GRANT DELETE ON sys.session TO cage_app;
+
+CREATE TABLE IF NOT EXISTS sys.idempotency (
+  key text PRIMARY KEY,
+  status text NOT NULL,
+  result jsonb,
+  created_at timestamptz NOT NULL DEFAULT now(),
+  expires_at timestamptz NOT NULL
+);
+GRANT DELETE ON sys.idempotency TO cage_app;
+
+CREATE TABLE IF NOT EXISTS sys.outbox (
+  id bigserial PRIMARY KEY,
+  tenant_id uuid NOT NULL,
+  event text NOT NULL,
+  aggregate text NOT NULL,
+  aggregate_id uuid NOT NULL,
+  payload jsonb NOT NULL,
+  actor jsonb,
+  trace jsonb,
+  request_id text,
+  status text NOT NULL DEFAULT 'pending',
+  attempts int NOT NULL DEFAULT 0,
+  last_error text,
+  next_at timestamptz NOT NULL DEFAULT now(),
+  locked_at timestamptz,
+  created_at timestamptz NOT NULL DEFAULT now(),
+  done_at timestamptz
+);
+CREATE INDEX IF NOT EXISTS outbox_status_next_idx ON sys.outbox (status, next_at);
+CREATE INDEX IF NOT EXISTS outbox_aggregate_idx ON sys.outbox (aggregate_id, id);
+
+CREATE TABLE IF NOT EXISTS sys.processed_event (
+  event_id bigint NOT NULL,
+  consumer text NOT NULL,
+  at timestamptz NOT NULL DEFAULT now(),
+  PRIMARY KEY (event_id, consumer)
+);
+
+CREATE TABLE IF NOT EXISTS sys.audit_log (
+  id bigserial,
+  at timestamptz NOT NULL DEFAULT now(),
+  tenant_id uuid NOT NULL,
+  actor text NOT NULL,
+  actor_kind text NOT NULL,
+  on_behalf_of uuid,
+  source text NOT NULL,
+  kind text NOT NULL DEFAULT 'write',
+  capability text,
+  command text,
+  aggregate text,
+  aggregate_id uuid,
+  result text NOT NULL,
+  diff jsonb,
+  request_id text,
+  idempotency_key text,
+  client jsonb,
+  PRIMARY KEY (id, at)
+) PARTITION BY RANGE (at);
+CREATE TABLE IF NOT EXISTS sys.audit_log_default PARTITION OF sys.audit_log DEFAULT;
+REVOKE ALL ON sys.audit_log FROM cage_app;
+GRANT INSERT ON sys.audit_log TO cage_app;
+REVOKE UPDATE, DELETE ON sys.audit_log FROM cage_app;
+GRANT USAGE ON SEQUENCE sys.audit_log_id_seq TO cage_app;
+
+-- 按月建分区：迁移时与 worker 每天调用
+CREATE OR REPLACE FUNCTION sys.ensure_audit_partitions(months_ahead int DEFAULT 3)
+RETURNS void LANGUAGE plpgsql SECURITY DEFINER SET search_path = pg_catalog, sys AS $$
+DECLARE
+  m date := date_trunc('month', now())::date;
+  i int;
+  name text;
+BEGIN
+  FOR i IN 0..months_ahead LOOP
+    name := 'audit_log_' || to_char(m + (i || ' month')::interval, 'YYYYMM');
+    IF NOT EXISTS (SELECT 1 FROM pg_class c JOIN pg_namespace n ON n.oid = c.relnamespace
+                   WHERE n.nspname = 'sys' AND c.relname = name) THEN
+      BEGIN
+        EXECUTE format('CREATE TABLE sys.%I PARTITION OF sys.audit_log FOR VALUES FROM (%L) TO (%L)',
+          name, m + (i || ' month')::interval, m + ((i + 1) || ' month')::interval);
+      EXCEPTION WHEN others THEN
+        RAISE NOTICE '跳过分区 %: %', name, SQLERRM;
+      END;
+    END IF;
+  END LOOP;
+END $$;
+REVOKE ALL ON FUNCTION sys.ensure_audit_partitions(int) FROM PUBLIC;
+GRANT EXECUTE ON FUNCTION sys.ensure_audit_partitions(int) TO cage_app;
+
+CREATE TABLE IF NOT EXISTS sys.sync_record (
+  id bigserial PRIMARY KEY,
+  tenant_id uuid,
+  connector text NOT NULL,
+  operation text NOT NULL,
+  ref_id text,
+  idempotency_key text,
+  status text NOT NULL,
+  http_status int,
+  attempts int NOT NULL DEFAULT 1,
+  request jsonb,
+  response jsonb,
+  error text,
+  created_at timestamptz NOT NULL DEFAULT now(),
+  updated_at timestamptz NOT NULL DEFAULT now()
+);
+CREATE UNIQUE INDEX IF NOT EXISTS sync_record_key_uq ON sys.sync_record (connector, operation, idempotency_key);
+
+CREATE TABLE IF NOT EXISTS sys.dead_letter (
+  id bigserial PRIMARY KEY,
+  outbox_id bigint NOT NULL,
+  tenant_id uuid NOT NULL,
+  event text NOT NULL,
+  aggregate_id uuid NOT NULL,
+  payload jsonb NOT NULL,
+  error text,
+  attempts int NOT NULL,
+  created_at timestamptz NOT NULL DEFAULT now(),
+  handled_by text,
+  handled_at timestamptz,
+  resolution text
+);
+
+CREATE TABLE IF NOT EXISTS sys.job_state (
+  name text PRIMARY KEY,
+  enabled boolean NOT NULL DEFAULT true,
+  last_run_at timestamptz,
+  last_status text,
+  last_error text,
+  updated_at timestamptz NOT NULL DEFAULT now()
+);
+`,
+    },
+    TRANSFER_MIGRATION,
+];
+export const SCHEMA_MIGRATIONS_SQL = `
+CREATE TABLE IF NOT EXISTS sys.schema_migrations (
+  name text PRIMARY KEY,
+  checksum text,
+  applied_at timestamptz NOT NULL DEFAULT now()
+);`;
+//# sourceMappingURL=ddl.js.map

package/dist/db/ddl.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ddl.js","sourceRoot":"","sources":["../../src/db/ddl.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,UAAU,EAAe,MAAM,yBAAyB,CAAC;AAElE,OAAO,EAAE,KAAK,EAAE,MAAM,kBAAkB,CAAC;AACzC,OAAO,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AAC3D,OAAO,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAEhD,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,KAAa,EAAE,EAAE,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC;AACrE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAmC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;AACzF,MAAM,GAAG,GAAG,CAAC,CAAS,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC;AAgCxD,MAAM,UAAU,UAAU,CAAC,GAAiB,EAAE,GAAa;IACzD,MAAM,CAAC,GAAG,GAAG,CAAC,KAAK,CAAC;IACpB,MAAM,OAAO,GAAkB;QAC7B,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE;QAC3C,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE;KACnD,CAAC;IACF,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,MAAgB,CAAC,EAAE,CAAC;QAC1D,IAAI,UAAU,CAAC,CAAC,CAAC;YAAE,SAAS;QAC5B,MAAM,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QACxD,OAAO,CAAC,IAAI,CAAC;YACX,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC;YACd,IAAI,EAAE,CAAC,CAAC,GAAG;YACX,OAAO,EAAE,CAAC,CAAC,CAAC,UAAU;YACtB,UAAU,EAAE,MAAM,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,SAAS;YAC9E,MAAM,EAAE,CAAC,CAAC,QAAQ,IAAI,SAAS;YAC/B,MAAM,EAAE,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS;SAC9D,CAAC,CAAC;IACL,CAAC;IACD,OAAO,CAAC,IAAI,CACV,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,EAC/C,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,IAAI,EAAE,EACnD,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,IAAI,EAAE,EAC1D,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,IAAI,EAAE,CAC3D,CAAC;IACF,MAAM,OAAO,GAA0B,EAAE,CAAC;IAC1C,MAAM,SAAS,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,EAAE,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,IAAI,CAAC,CAAC;IAC5G,KAAK,MAAM,CAAC,IAAI,SAAS;QAAE,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC,IAAI,WAAW,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IACxH,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC,IAAI,aAAa,EAAE,OAAO,EAAE,CAAC,WAAW,EAAE,QAAQ,CAAC,EAAE,CAAC,CAAC;IACjF,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,MAAgB,CAAC,EAAE,CAAC;QAC1D,IAAI,CAAC,CAAC,IAAI,KAAK,KAAK,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC;YAAE,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC,IAAI,IAAI,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IAC3H,CAAC;IACD,MAAM,YAAY,GAAG,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,MAAgB,CAAC;SACtF,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,YAAY,IAAI,CAAC,KAAK,KAAK,GAAG,IAAI,CAAC,CAAC,GAAG,KAAK,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClF,IAAI,YAAY;QAAE,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC,IAAI,eAAe,EAAE,OAAO,EAAE,CAAC,WAAW,EAAE,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;IAC/G,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,SAAS,EAAE,GAAG,CAAC,IAAI,EAAE,OAAO,EAAE,YAAY,EAAE,CAAC,GAAG,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,CAAC;AACzH,CAAC;AAED,sBAAsB;AACtB,MAAM,UAAU,WAAW,CAAC,GAAa;IACvC,MAAM,MAAM,GAAG,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;IAC7D,MAAM,GAAG,GAAG,CAAC,CAAa,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC;IACvD,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IACtD,MAAM,GAAG,GAAiB,EAAE,CAAC;IAC7B,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,MAAM,KAAK,GAAG,CAAC,CAAa,EAAE,KAAkB,EAAE,EAAE;QAClD,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;YAAE,OAAO;QAC7B,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QAClB,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,CAAC;YAC1B,MAAM,GAAG,GAAG,CAAC,CAAC,UAAU,IAAI,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC;YACpD,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;gBAAE,KAAK,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QACrD,CAAC;QACD,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QACrB,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QACjB,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACd,CAAC,CAAC;IACF,KAAK,MAAM,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QAAE,KAAK,CAAC,CAAC,EAAE,IAAI,GAAG,EAAE,CAAC,CAAC;IAC9F,+BAA+B;IAC/B,KAAK,MAAM,KAAK,IAAI,GAAG,CAAC,UAAU;QAAE,KAAK,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,MAAgB,CAAC,EAAE,CAAC;YACpG,IAAI,CAAC,CAAC,IAAI,KAAK,YAAY;gBAAE,SAAS;YACtC,MAAM,MAAM,GAAG,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,GAAI,CAAE,CAAC;YACtC,MAAM,KAAK,GAAG,aAAa,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;YAC1C,GAAG,CAAC,IAAI,CAAC,EAAE,GAAG,KAAK,EAAE,SAAS,EAAE,KAAK,CAAC,IAAI,EAAE,QAAQ,EAAE;oBACpD,KAAK,EAAE,MAAM,EAAE,GAAG,KAAK,CAAC,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE;iBAClH,EAAE,OAAO,EAAE,CAAC,WAAW,EAAE,WAAW,EAAE,WAAW,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;gBAC1G,YAAY,EAAE,EAAE,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,GAAG,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,aAAa,EAAE,OAAO,EAAE,CAAC,WAAW,EAAE,WAAW,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;QACzH,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;AACrC,CAAC;AAED,SAAS,SAAS,CAAC,CAAa,EAAE,CAAc,EAAE,SAAkB;IAClE,IAAI,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC;IACjC,IAAI,CAAC,CAAC,IAAI,KAAK,IAAI;QAAE,OAAO,GAAG,CAAC,wCAAwC,CAAC;IACzE,IAAI,CAAC,CAAC,OAAO,IAAI,SAAS;QAAE,CAAC,IAAI,WAAW,CAAC;IAC7C,IAAI,CAAC,CAAC,IAAI,KAAK,SAAS;QAAE,CAAC,IAAI,YAAY,CAAC;IAC5C,IAAI,CAAC,CAAC,IAAI,KAAK,YAAY,IAAI,CAAC,CAAC,IAAI,KAAK,YAAY;QAAE,CAAC,IAAI,gBAAgB,CAAC;IAC9E,IAAI,CAAC,CAAC,UAAU,EAAE,CAAC;QACjB,MAAM,CAAC,EAAE,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACzC,CAAC,IAAI,eAAe,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,MAAM,CAAC;IAC3C,CAAC;IACD,IAAI,CAAC,CAAC,MAAM;QAAE,CAAC,IAAI,eAAe,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,IAAI,QAAQ,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC;IAC7H,OAAO,CAAC,CAAC;AACX,CAAC;AAED,SAAS,cAAc,CAAC,CAAa;IACnC,OAAO,cAAc,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,eAAe,CAAC,sBAAsB,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC;AAC/G,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,CAAa;IAC1C,MAAM,IAAI,GAAG,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,SAAS,CAAC,CAAC,EAAE,CAAC,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC;IAChE,IAAI,CAAC,CAAC,QAAQ,EAAE,CAAC;QACf,IAAI,CAAC,IAAI,CAAC,iDAAiD,EAAE,GAAG,mBAAmB,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC;IACjH,CAAC;;QAAM,IAAI,CAAC,IAAI,CAAC,KAAK,cAAc,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IAC3C,MAAM,KAAK,GAAG,CAAC,8BAA8B,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,IAAI,CAAC,CAAC;IAChF,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC;QAClD,KAAK,CAAC,IAAI,CAAC,qCAAqC,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACxH,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,CAAC;QAC1B,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IAC7B,CAAC;IACD,IAAI,CAAC,CAAC,QAAQ;QAAE,KAAK,CAAC,IAAI,CAAC,mBAAmB,EAAE,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC;IACpE,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED,MAAM,YAAY,GAAG,CAAC,IAAY,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACxE,MAAM,QAAQ,GAAG,CAAC,CAAa,EAAE,CAAgC,EAAE,EAAE,CACnE,UAAU,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,uBAAuB,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC;AAEtH,8CAA8C;AAC9C,SAAS,mBAAmB,CAAC,CAAa;IACxC,OAAO;QACL,cAAc,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,YAAY,CAAC,kDAAkD,YAAY,CAAC,CAAC,CAAC,QAAS,CAAC,MAAM,CAAC,oCAAoC;QACzK,cAAc,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,YAAY,CAAC,kDAAkD,YAAY,CAAC,CAAC,CAAC,QAAS,CAAC,MAAM,CAAC,kBAAkB;KACxJ,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,WAAW,CAAC,IAAwB,EAAE,IAAiB;IACrE,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,CAAC,IAAI,EAAE,MAAM,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IACvF,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IAC9E,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;QAC5B,MAAM,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;QAC/C,IAAI,CAAC,CAAC,EAAE,CAAC;YACP,GAAG,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,SAAS,KAAK,cAAc,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YAC5D,SAAS;QACX,CAAC;QACD,MAAM,EAAE,GAAG,IAAI,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QACtD,MAAM,EAAE,GAAG,IAAI,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QACtD,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,CAAC;YAC1B,MAAM,GAAG,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;YAC3B,IAAI,CAAC,GAAG,EAAE,CAAC;gBACT,IAAI,CAAC,CAAC,OAAO,EAAE,CAAC;oBACd,GAAG,CAAC,IAAI,CACN,SAAS,CAAC,CAAC,SAAS,IAAI,CAAC,CAAC,IAAI,6BAA6B;wBACzD,eAAe,EAAE,CAAC,CAAC,CAAC,6BAA6B,SAAS,CAAC,CAAC,EAAE,CAAC,EAAE,KAAK,CAAC,KAAK;wBAC5E,qBAAqB,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa;wBAC/E,eAAe,EAAE,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,gBAAgB,CACjE,CAAC;gBACJ,CAAC;qBAAM,CAAC;oBACN,GAAG,CAAC,IAAI,CAAC,eAAe,EAAE,CAAC,CAAC,CAAC,6BAA6B,SAAS,CAAC,CAAC,EAAE,CAAC,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC;gBACvF,CAAC;gBACD,IAAI,CAAC,CAAC,MAAM;oBAAE,GAAG,CAAC,IAAI,CAAC,qCAAqC,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBAClI,SAAS;YACX,CAAC;YACD,IAAI,GAAG,CAAC,IAAI,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC;gBACxB,GAAG,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,SAAS,IAAI,CAAC,CAAC,IAAI,IAAI,GAAG,CAAC,IAAI,MAAM,CAAC,CAAC,IAAI,+BAA+B,EAAE,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC;YACpL,CAAC;YACD,IAAI,GAAG,CAAC,OAAO,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC;gBAC9B,GAAG,CAAC,IAAI,CAAC,eAAe,EAAE,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,YAAY,CAAC,CAAC;YACrG,CAAC;YACD,IAAI,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,MAAM,IAAI,IAAI,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,IAAI,IAAI,CAAC,EAAE,CAAC;gBAC5E,GAAG,CAAC,IAAI,CAAC,eAAe,EAAE,CAAC,CAAC,CAAC,8BAA8B,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,IAAI,QAAQ,CAAC,GAAG,CAAC,CAAC;gBAC9F,IAAI,CAAC,CAAC,MAAM;oBAAE,GAAG,CAAC,IAAI,CAAC,eAAe,EAAE,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,IAAI,QAAQ,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAC7J,CAAC;YACD,IAAI,CAAC,GAAG,CAAC,MAAM,IAAI,CAAC,CAAC,MAAM;gBAAE,GAAG,CAAC,IAAI,CAAC,qCAAqC,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACjJ,IAAI,GAAG,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC,MAAM;gBAAE,GAAG,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,IAAI,KAAK,CAAC,GAAG,CAAC,CAAC;YAC7G,IAAI,GAAG,CAAC,UAAU,KAAK,CAAC,CAAC,UAAU,IAAI,CAAC,CAAC,UAAU,EAAE,CAAC;gBACpD,MAAM,CAAC,EAAE,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;gBACzC,GAAG,CAAC,IAAI,CAAC,eAAe,EAAE,CAAC,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC;YACpG,CAAC;QACH,CAAC;QACD,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,CAAC;YAC1B,IAAI,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;gBACpB,GAAG,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,SAAS,IAAI,CAAC,CAAC,IAAI,oDAAoD,EAAE,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACnI,CAAC;QACH,CAAC;QACD,IAAI,CAAC,CAAC,CAAC,QAAQ,IAAI,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,YAAY,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,YAAY,CAAC,EAAE,CAAC;YACrF,MAAM,OAAO,GAAG,CAAC,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;YAC1E,IAAI,OAAO,CAAC,MAAM;gBAAE,GAAG,CAAC,IAAI,CAAC,YAAY,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC;YACjF,GAAG,CAAC,IAAI,CAAC,eAAe,EAAE,CAAC,CAAC,CAAC,8BAA8B,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,eAAe,CAAC,kBAAkB,EAAE,CAAC,CAAC,CAAC,QAAQ,cAAc,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;QAC7I,CAAC;QACD,MAAM,EAAE,GAAG,IAAI,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;QACjD,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,OAAO;YAAE,IAAI,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;gBAAE,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QACzE,IAAI,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,QAAQ,IAAI,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC1F,GAAG,CAAC,IAAI,CAAC,4BAA4B,CAAC,CAAC;YACvC,KAAK,MAAM,IAAI,IAAI,CAAC,QAAQ,EAAE,QAAQ,CAAC;gBAAE,GAAG,CAAC,IAAI,CAAC,eAAe,EAAE,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,IAAI,KAAK,CAAC,GAAG,CAAC,CAAC;YACrI,KAAK,MAAM,EAAE,IAAI,mBAAmB,CAAC,CAAC,CAAC;gBAAE,GAAG,CAAC,IAAI,CAAC,eAAe,EAAE,CAAC,CAAC,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;QACvF,CAAC;IACH,CAAC;IACD,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,OAAO,EAAE,CAAC;QAC7B,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC;YAAE,GAAG,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,SAAS,mCAAmC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IACpG,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,yDAAyD;AAEzD,MAAM,CAAC,MAAM,YAAY,GAAG;;;;;;;;;;;;;;;;;;;;IAoBxB,CAAC;AAEL,MAAM,CAAC,MAAM,QAAQ,GAAG;;;;;;;;;;;;;;;;IAgBpB,CAAC;AAEL,MAAM,UAAU,gBAAgB,CAAC,GAAiB;IAChD,MAAM,CAAC,GAAG,GAAG,CAAC,KAAK,CAAC;IACpB,MAAM,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC;IAChF,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC;IACnF,MAAM,IAAI,GAAa,CAAC,IAAI,CAAC,CAAC;IAC9B,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,MAAgB,CAAC,EAAE,CAAC;QAC1D,IAAI,CAAC,CAAC,QAAQ,IAAI,UAAU,CAAC,CAAC,CAAC;YAAE,SAAS;QAC1C,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QACtB,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,YAAY,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,aAAa,CAAC,KAAK,CAAC,cAAc,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC7G,CAAC;IACD,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,SAAS,EAAE,YAAY,EAAE,YAAY,CAAC,CAAC;IAC3D,MAAM,IAAI,GAAG,GAAG,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;IACzC,OAAO;QACL,MAAM,GAAG,CAAC,IAAI,cAAc;QAC5B,eAAe,EAAE,CAAC,CAAC,CAAC,6BAA6B;QACjD,uCAAuC,EAAE,CAAC,CAAC,CAAC,GAAG;QAC/C,+BAA+B,EAAE,CAAC,CAAC,CAAC,wCAAwC;QAC5E,wEAAwE;QACxE,sBAAsB,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,IAAI,KAAK,KAAK,KAAK;QAC3D,sCAAsC,EAAE,CAAC,CAAC,CAAC,GAAG;QAC9C,8BAA8B,EAAE,CAAC,CAAC,CAAC,8CAA8C;QACjF,uBAAuB,IAAI,GAAG;QAC9B,eAAe,IAAI,6BAA6B;QAChD,YAAY,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;QAC7B,UAAU,EAAE,CAAC,CAAC,CAAC,GAAG;QAClB,cAAc,IAAI,4BAA4B;QAC9C,mBAAmB,IAAI,gBAAgB;KACxC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC;AAED,MAAM,CAAC,MAAM,eAAe,GAAG;;;;;;;;;6CASc,CAAC;AAE9C,qCAAqC;AACrC,MAAM,UAAU,YAAY,CAAC,GAAa;IACxC,yCAAyC;IACzC,iCAAiC;IACjC,MAAM,KAAK,GAAG,CAAC,YAAY,EAAE,QAAQ,EAAE;;;;UAI/B,CAAC,CAAC;IACV,KAAK,MAAM,CAAC,IAAI,GAAG,CAAC,UAAU;QAAE,KAAK,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,CAAC;IAChE,KAAK,MAAM,CAAC,IAAI,WAAW,CAAC,GAAG,CAAC,CAAC,MAAM;QAAE,IAAI,CAAC,CAAC,QAAQ,EAAE,CAAC;YACxD,MAAM,MAAM,GAAG,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,GAAG,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;YACzF,MAAM,IAAI,GAAG,GAAG,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;YACzC,KAAK,CAAC,IAAI,CAAC;gBACT,eAAe,EAAE,CAAC,CAAC,CAAC,6BAA6B;gBACjD,uCAAuC,EAAE,CAAC,CAAC,CAAC,GAAG;gBAC/C,+BAA+B,EAAE,CAAC,CAAC,CAAC,8GAA8G;gBAClJ,sCAAsC,EAAE,CAAC,CAAC,CAAC,GAAG;gBAC9C,8BAA8B,EAAE,CAAC,CAAC,CAAC,8CAA8C;gBACjF,eAAe,IAAI,0EAA0E,EAAE,CAAC,CAAC,CAAC,OAAO;gBACzG,aAAa,CAAC,CAAC,MAAM,CAAC,6CAA6C,CAAC,CAAC,MAAM,CAAC,iCAAiC;gBAC7G,4DAA4D;gBAC5D,mBAAmB,IAAI,sBAAsB;gBAC7C,cAAc,IAAI,4BAA4B;gBAC9C,mBAAmB,IAAI,gBAAgB;aACxC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;QAChB,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;IAC5B,OAAO,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;AAC5B,CAAC;AAUD,+BAA+B;AAC/B,MAAM,UAAU,YAAY,CAAC,EAAsB,EAAE,MAAe;IAClE,MAAM,IAAI,GAAG,CAAC,IAAY,EAAE,KAAc,EAAE,QAAiB,EAAE,EAAE,CAAC;;0DAEV,GAAG,CAAC,IAAI,CAAC;kBACjD,IAAI,IAAI,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,GAAG,QAAQ,CAAC,CAAC,CAAC,aAAa,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE;IAChG,QAAQ,CAAC,CAAC,CAAC,mBAAmB,IAAI,IAAI,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,aAAa,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE;;QAE/F,CAAC;IACP,OAAO;;;EAGP,IAAI,CAAC,UAAU,EAAE,IAAI,EAAE,EAAE,CAAC,GAAG,CAAC;EAC9B,IAAI,CAAC,WAAW,EAAE,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC;EAChC,IAAI,CAAC,iBAAiB,EAAE,KAAK,CAAC;EAC9B,IAAI,CAAC,cAAc,EAAE,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC;EACtC,MAAM,CAAC,CAAC,CAAC,qCAAqC,CAAC,CAAC,MAAM,CAAC,gDAAgD,CAAC,CAAC,MAAM,CAAC,0BAA0B,CAAC,CAAC,CAAC,EAAE;;;;;;;;;;;;;;;;;;;;;CAqBhJ,CAAC;AACF,CAAC;AAED,4CAA4C;AAC5C,MAAM,CAAC,MAAM,cAAc,GAAG,sCAAsC,CAAC;AAErE,kDAAkD;AAClD,MAAM,CAAC,MAAM,iBAAiB,GAAoC;IAChE;QACE,IAAI,EAAE,kBAAkB;QACxB,GAAG,EAAE;;;;;;6CAMoC,cAAc;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA+I1D;KACE;IACD,kBAAkB;CACnB,CAAC;AAEF,MAAM,CAAC,MAAM,qBAAqB,GAAG;;;;;GAKlC,CAAC"}

package/dist/db/index.d.ts

@@ -0,0 +1,5 @@
+export * from './connect.js';
+export * from './ddl.js';
+export * from './migrate.js';
+export * from './rows.js';
+export * from './session.js';

package/dist/db/index.js

@@ -0,0 +1,7 @@
+// @yss123/cage-kernel/db：连接、DDL 生成、迁移执行（cli、testkit、http 使用；业务代码不应导入）
+export * from './connect.js';
+export * from './ddl.js';
+export * from './migrate.js';
+export * from './rows.js';
+export * from './session.js';
+//# sourceMappingURL=index.js.map

package/dist/db/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/db/index.ts"],"names":[],"mappings":"AAAA,sEAAsE;AACtE,cAAc,cAAc,CAAC;AAC7B,cAAc,UAAU,CAAC;AACzB,cAAc,cAAc,CAAC;AAC7B,cAAc,WAAW,CAAC;AAC1B,cAAc,cAAc,CAAC"}

package/dist/db/migrate.d.ts

@@ -0,0 +1,22 @@
+import type { Registry } from '../registry.js';
+import { type SchemaModel } from './ddl.js';
+export interface MigrateResult {
+    applied: string[];
+    safeLayerRebuilt: boolean;
+}
+export interface MigrationFile {
+    name: string;
+    sql: string;
+}
+/** 读取 db/migrations 下的 .sql 文件，按文件名排序 */
+export declare function readMigrations(dir: string): MigrationFile[];
+/** 迁移文件末尾内嵌的结构快照（cage gen 写入），用于下一次比较 */
+export declare function snapshotOf(m: MigrationFile): SchemaModel | null;
+export declare function latestSnapshot(files: MigrationFile[]): SchemaModel | null;
+export declare function embedSnapshot(sql: string, model: SchemaModel): string;
+export declare function runMigrations(opts: {
+    migrateUrl: string;
+    registry: Registry;
+    migrations: MigrationFile[];
+    log?: (msg: string) => void;
+}): Promise<MigrateResult>;