@yss123/cage-kernel 0.0.0-stage → 0.2.0

package/dist/db/migrate.js

@@ -0,0 +1,87 @@
+// 迁移执行器：框架系统表 → 项目迁移（db/migrations）→ 重建安全层。用迁移账号执行，带咨询锁防止并发。
+import { createHash } from 'node:crypto';
+import { readdirSync, readFileSync, existsSync } from 'node:fs';
+import { join } from 'node:path';
+import pg from 'pg';
+import { SCHEMA_MIGRATIONS_SQL, SYSTEM_MIGRATIONS, safeLayerSql } from './ddl.js';
+const MIGRATION_LOCK = 727274; // 固定的咨询锁编号
+/** 读取 db/migrations 下的 .sql 文件，按文件名排序 */
+export function readMigrations(dir) {
+    if (!existsSync(dir))
+        return [];
+    return readdirSync(dir)
+        .filter((f) => f.endsWith('.sql'))
+        .sort()
+        .map((f) => ({ name: f.replace(/\.sql$/, ''), sql: readFileSync(join(dir, f), 'utf8') }));
+}
+const SNAPSHOT_RE = /\/\* cage:schema\n([\s\S]*?)\n\*\//;
+/** 迁移文件末尾内嵌的结构快照（cage gen 写入），用于下一次比较 */
+export function snapshotOf(m) {
+    const hit = SNAPSHOT_RE.exec(m.sql);
+    return hit ? JSON.parse(hit[1]) : null;
+}
+export function latestSnapshot(files) {
+    for (let i = files.length - 1; i >= 0; i--) {
+        const s = snapshotOf(files[i]);
+        if (s)
+            return s;
+    }
+    return null;
+}
+export function embedSnapshot(sql, model) {
+    return `${sql.trimEnd()}\n\n/* cage:schema\n${JSON.stringify(model)}\n*/\n`;
+}
+const checksum = (s) => createHash('sha256').update(s).digest('hex').slice(0, 16);
+export async function runMigrations(opts) {
+    const log = opts.log ?? (() => { });
+    const client = new pg.Client({ connectionString: opts.migrateUrl, application_name: 'cage-migrate' });
+    await client.connect();
+    const applied = [];
+    try {
+        await client.query('select pg_advisory_lock($1)', [MIGRATION_LOCK]);
+        await client.query(SCHEMA_MIGRATIONS_SQL);
+        const done = new Map((await client.query('select name, checksum from sys.schema_migrations')).rows.map((r) => [r.name, r.checksum]));
+        const all = [...SYSTEM_MIGRATIONS, ...opts.registry.systemDdl.map((sql, i) => ({ name: `cage:ext_${checksum(sql)}_${i}`, sql })), ...opts.migrations];
+        // 在执行任何新迁移之前核对历史内容。否则同名文件被改写后会被直接跳过，
+        // 本地结构快照看起来已更新，真实数据库却仍保持旧结构，下一次发布才会出错。
+        for (const migration of all) {
+            if (done.has(migration.name) && done.get(migration.name) !== checksum(migration.sql)) {
+                throw new Error(`[CAGE-MIG-005] 已执行迁移 ${migration.name} 的内容被修改，请恢复原文件并新增迁移`);
+            }
+        }
+        for (const m of all) {
+            if (done.has(m.name))
+                continue;
+            log(`迁移 ${m.name}`);
+            await client.query('begin');
+            try {
+                await client.query(m.sql);
+                await client.query('insert into sys.schema_migrations (name, checksum) values ($1, $2)', [m.name, checksum(m.sql)]);
+                await client.query('commit');
+            }
+            catch (e) {
+                await client.query('rollback');
+                throw new Error(`[CAGE-MIG-001] 迁移 ${m.name} 失败：${e.message}`);
+            }
+            applied.push(m.name);
+        }
+        // 安全层每次整体重建
+        await client.query('begin');
+        try {
+            await client.query(safeLayerSql(opts.registry));
+            await client.query('select sys.ensure_audit_partitions(3)');
+            await client.query('commit');
+        }
+        catch (e) {
+            await client.query('rollback');
+            throw new Error(`[CAGE-MIG-002] 重建安全层失败：${e.message}`);
+        }
+        log('安全层已重建');
+        return { applied, safeLayerRebuilt: true };
+    }
+    finally {
+        await client.query('select pg_advisory_unlock($1)', [MIGRATION_LOCK]).catch(() => { });
+        await client.end();
+    }
+}
+//# sourceMappingURL=migrate.js.map

package/dist/db/migrate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"migrate.js","sourceRoot":"","sources":["../../src/db/migrate.ts"],"names":[],"mappings":"AAAA,6DAA6D;AAC7D,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAChE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,MAAM,IAAI,CAAC;AAEpB,OAAO,EAAE,qBAAqB,EAAE,iBAAiB,EAAE,YAAY,EAAoB,MAAM,UAAU,CAAC;AAEpG,MAAM,cAAc,GAAG,MAAM,CAAC,CAAC,WAAW;AAY1C,yCAAyC;AACzC,MAAM,UAAU,cAAc,CAAC,GAAW;IACxC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,EAAE,CAAC;IAChC,OAAO,WAAW,CAAC,GAAG,CAAC;SACpB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;SACjC,IAAI,EAAE;SACN,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,EAAE,GAAG,EAAE,YAAY,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;AAC9F,CAAC;AAED,MAAM,WAAW,GAAG,oCAAoC,CAAC;AAEzD,yCAAyC;AACzC,MAAM,UAAU,UAAU,CAAC,CAAgB;IACzC,MAAM,GAAG,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IACpC,OAAO,GAAG,CAAC,CAAC,CAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAiB,CAAC,CAAC,CAAC,IAAI,CAAC;AAC1D,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,KAAsB;IACnD,KAAK,IAAI,CAAC,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QAC3C,MAAM,CAAC,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QAC/B,IAAI,CAAC;YAAE,OAAO,CAAC,CAAC;IAClB,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,GAAW,EAAE,KAAkB;IAC3D,OAAO,GAAG,GAAG,CAAC,OAAO,EAAE,uBAAuB,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,QAAQ,CAAC;AAC9E,CAAC;AAED,MAAM,QAAQ,GAAG,CAAC,CAAS,EAAE,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;AAE1F,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,IAKnC;IACC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;IACnC,MAAM,MAAM,GAAG,IAAI,EAAE,CAAC,MAAM,CAAC,EAAE,gBAAgB,EAAE,IAAI,CAAC,UAAU,EAAE,gBAAgB,EAAE,cAAc,EAAE,CAAC,CAAC;IACtG,MAAM,MAAM,CAAC,OAAO,EAAE,CAAC;IACvB,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,IAAI,CAAC;QACH,MAAM,MAAM,CAAC,KAAK,CAAC,6BAA6B,EAAE,CAAC,cAAc,CAAC,CAAC,CAAC;QACpE,MAAM,MAAM,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAC;QAC1C,MAAM,IAAI,GAAG,IAAI,GAAG,CAAiB,CAAC,MAAM,MAAM,CAAC,KAAK,CAAC,kDAAkD,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;QACrJ,MAAM,GAAG,GAAG,CAAC,GAAG,iBAAiB,EAAE,GAAG,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,YAAY,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,GAAG,IAAI,CAAC,UAAU,CAAC,CAAC;QACtJ,qCAAqC;QACrC,uCAAuC;QACvC,KAAK,MAAM,SAAS,IAAI,GAAG,EAAE,CAAC;YAC5B,IAAI,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,QAAQ,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC;gBACrF,MAAM,IAAI,KAAK,CAAC,wBAAwB,SAAS,CAAC,IAAI,qBAAqB,CAAC,CAAC;YAC/E,CAAC;QACH,CAAC;QACD,KAAK,MAAM,CAAC,IAAI,GAAG,EAAE,CAAC;YACpB,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;gBAAE,SAAS;YAC/B,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;YACpB,MAAM,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YAC5B,IAAI,CAAC;gBACH,MAAM,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;gBAC1B,MAAM,MAAM,CAAC,KAAK,CAAC,oEAAoE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;gBACpH,MAAM,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;YAC/B,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBACX,MAAM,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;gBAC/B,MAAM,IAAI,KAAK,CAAC,qBAAqB,CAAC,CAAC,IAAI,OAAQ,CAAW,CAAC,OAAO,EAAE,CAAC,CAAC;YAC5E,CAAC;YACD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QACvB,CAAC;QACD,YAAY;QACZ,MAAM,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAC5B,IAAI,CAAC;YACH,MAAM,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC;YAChD,MAAM,MAAM,CAAC,KAAK,CAAC,uCAAuC,CAAC,CAAC;YAC5D,MAAM,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QAC/B,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,MAAM,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;YAC/B,MAAM,IAAI,KAAK,CAAC,0BAA2B,CAAW,CAAC,OAAO,EAAE,CAAC,CAAC;QACpE,CAAC;QACD,GAAG,CAAC,QAAQ,CAAC,CAAC;QACd,OAAO,EAAE,OAAO,EAAE,gBAAgB,EAAE,IAAI,EAAE,CAAC;IAC7C,CAAC;YAAS,CAAC;QACT,MAAM,MAAM,CAAC,KAAK,CAAC,+BAA+B,EAAE,CAAC,cAAc,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QACtF,MAAM,MAAM,CAAC,GAAG,EAAE,CAAC;IACrB,CAAC;AACH,CAAC"}

package/dist/db/rows.d.ts

@@ -0,0 +1,10 @@
+import type { AnyAggregate } from '../primitives/aggregate.js';
+export declare const SYSTEM_COLUMNS: string[];
+/** 行 → 快照（不含 tenantId；hidden 字段可选保留） */
+export declare function rowToSnapshot(agg: AnyAggregate, row: Record<string, unknown>, keepHidden?: boolean): Record<string, any>;
+/** 视图行（列名 snake_case）→ camelCase 对象 */
+export declare function viewRowToObject(row: Record<string, unknown>): Record<string, any>;
+/** 快照字段 → 列值（jsonb 字段序列化） */
+export declare function fieldsToColumns(agg: AnyAggregate, values: Record<string, unknown>): Record<string, unknown>;
+/** 只比较业务字段，找出变化的字段 */
+export declare function diffFields(agg: AnyAggregate, cur: Record<string, unknown>, next: Record<string, unknown>): string[];

package/dist/db/rows.js

@@ -0,0 +1,59 @@
+import { isRelation } from '../primitives/fields.js';
+import { camel, snake } from '../util/names.js';
+export const SYSTEM_COLUMNS = ['id', 'tenant_id', 'status', 'version', 'created_at', 'updated_at'];
+function normalize(v) {
+    if (v instanceof Date)
+        return v.toISOString();
+    return v;
+}
+/** 行 → 快照（不含 tenantId；hidden 字段可选保留） */
+export function rowToSnapshot(agg, row, keepHidden = true) {
+    const out = {
+        id: row.id,
+        status: row.status,
+        version: row.version,
+        createdAt: normalize(row.created_at),
+        updatedAt: normalize(row.updated_at),
+    };
+    for (const [k, f] of Object.entries(agg.fields)) {
+        if (f.isHidden && !keepHidden)
+            continue;
+        const col = snake(k);
+        if (col in row)
+            out[k] = normalize(row[col]) ?? null;
+    }
+    return out;
+}
+/** 视图行（列名 snake_case）→ camelCase 对象 */
+export function viewRowToObject(row) {
+    const out = {};
+    for (const [k, v] of Object.entries(row)) {
+        if (k === 'tenant_id')
+            continue;
+        out[camel(k)] = normalize(v);
+    }
+    return out;
+}
+/** 快照字段 → 列值（jsonb 字段序列化） */
+export function fieldsToColumns(agg, values) {
+    const out = {};
+    for (const [k, f] of Object.entries(agg.fields)) {
+        if (isRelation(f))
+            continue;
+        if (!(k in values))
+            continue;
+        const v = values[k];
+        out[snake(k)] = f.sql === 'jsonb' && v !== null && v !== undefined ? JSON.stringify(v) : v ?? null;
+    }
+    return out;
+}
+/** 只比较业务字段，找出变化的字段 */
+export function diffFields(agg, cur, next) {
+    const changed = [];
+    for (const k of Object.keys(agg.fields)) {
+        if (JSON.stringify(cur[k] ?? null) !== JSON.stringify(next[k] ?? null))
+            changed.push(k);
+    }
+    return changed;
+}
+//# sourceMappingURL=rows.js.map

package/dist/db/rows.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rows.js","sourceRoot":"","sources":["../../src/db/rows.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,UAAU,EAAe,MAAM,yBAAyB,CAAC;AAClE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,kBAAkB,CAAC;AAEhD,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,IAAI,EAAE,WAAW,EAAE,QAAQ,EAAE,SAAS,EAAE,YAAY,EAAE,YAAY,CAAC,CAAC;AAEnG,SAAS,SAAS,CAAC,CAAU;IAC3B,IAAI,CAAC,YAAY,IAAI;QAAE,OAAO,CAAC,CAAC,WAAW,EAAE,CAAC;IAC9C,OAAO,CAAC,CAAC;AACX,CAAC;AAED,wCAAwC;AACxC,MAAM,UAAU,aAAa,CAAC,GAAiB,EAAE,GAA4B,EAAE,UAAU,GAAG,IAAI;IAC9F,MAAM,GAAG,GAAwB;QAC/B,EAAE,EAAE,GAAG,CAAC,EAAE;QACV,MAAM,EAAE,GAAG,CAAC,MAAM;QAClB,OAAO,EAAE,GAAG,CAAC,OAAO;QACpB,SAAS,EAAE,SAAS,CAAC,GAAG,CAAC,UAAU,CAAC;QACpC,SAAS,EAAE,SAAS,CAAC,GAAG,CAAC,UAAU,CAAC;KACrC,CAAC;IACF,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,MAAgB,CAAC,EAAE,CAAC;QAC1D,IAAI,CAAC,CAAC,QAAQ,IAAI,CAAC,UAAU;YAAE,SAAS;QACxC,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;QACrB,IAAI,GAAG,IAAI,GAAG;YAAE,GAAG,CAAC,CAAC,CAAC,GAAG,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,IAAI,IAAI,CAAC;IACvD,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,uCAAuC;AACvC,MAAM,UAAU,eAAe,CAAC,GAA4B;IAC1D,MAAM,GAAG,GAAwB,EAAE,CAAC;IACpC,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QACzC,IAAI,CAAC,KAAK,WAAW;YAAE,SAAS;QAChC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,SAAS,CAAC,CAAC,CAAC,CAAC;IAC/B,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,6BAA6B;AAC7B,MAAM,UAAU,eAAe,CAAC,GAAiB,EAAE,MAA+B;IAChF,MAAM,GAAG,GAA4B,EAAE,CAAC;IACxC,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,MAAgB,CAAC,EAAE,CAAC;QAC1D,IAAI,UAAU,CAAC,CAAC,CAAC;YAAE,SAAS;QAC5B,IAAI,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC;YAAE,SAAS;QAC7B,MAAM,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;QACpB,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,KAAK,OAAO,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC;IACrG,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,sBAAsB;AACtB,MAAM,UAAU,UAAU,CAAC,GAAiB,EAAE,GAA4B,EAAE,IAA6B;IACvG,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;QACxC,IAAI,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC;YAAE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC1F,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC"}

package/dist/db/session.d.ts

@@ -0,0 +1,4 @@
+import { type Kysely, type Transaction } from 'kysely';
+import type { Ctx } from '../types.js';
+export declare function scopesJson(ctx: Ctx): string;
+export declare function setSessionVars(tx: Transaction<any> | Kysely<any>, ctx: Ctx, local?: boolean): Promise<void>;

package/dist/db/session.js

@@ -0,0 +1,20 @@
+// 会话变量：内核在事务开始时写入当前主体，安全视图和行级策略读取它们。
+// set_config 的第三个参数 true 表示只在本事务内有效，事务结束自动清空；忘了设置时一条都查不到。
+import { sql } from 'kysely';
+export function scopesJson(ctx) {
+    const out = {};
+    for (const [agg, grants] of Object.entries(ctx.scopes)) {
+        out[agg] = grants.map((g) => (g.deptIds ? { c: g.combinator, deptIds: g.deptIds } : { c: g.combinator }));
+    }
+    return JSON.stringify(out);
+}
+export async function setSessionVars(tx, ctx, local = true) {
+    await sql `select
+    set_config('app.user_id',   ${ctx.userId ?? ctx.onBehalfOf ?? ''}, ${local}),
+    set_config('app.tenant_id', ${ctx.tenantId}, ${local}),
+    set_config('app.dept_id',   ${ctx.deptId ?? ''}, ${local}),
+    set_config('app.dept_path', ${ctx.deptPath ?? ''}, ${local}),
+    set_config('app.scopes',    ${scopesJson(ctx)}, ${local}),
+    set_config('app.unmask',    ${ctx.unmask.join(',')}, ${local})`.execute(tx);
+}
+//# sourceMappingURL=session.js.map

package/dist/db/session.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"session.js","sourceRoot":"","sources":["../../src/db/session.ts"],"names":[],"mappings":"AAAA,qCAAqC;AACrC,0DAA0D;AAC1D,OAAO,EAAe,GAAG,EAAoB,MAAM,QAAQ,CAAC;AAG5D,MAAM,UAAU,UAAU,CAAC,GAAQ;IACjC,MAAM,GAAG,GAAwD,EAAE,CAAC;IACpE,KAAK,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;QACvD,GAAG,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,UAAU,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC;IAC5G,CAAC;IACD,OAAO,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;AAC7B,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,EAAkC,EAAE,GAAQ,EAAE,KAAK,GAAG,IAAI;IAC7F,MAAM,GAAG,CAAA;kCACuB,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,UAAU,IAAI,EAAE,KAAK,KAAK;kCAC5C,GAAG,CAAC,QAAQ,KAAK,KAAK;kCACtB,GAAG,CAAC,MAAM,IAAI,EAAE,KAAK,KAAK;kCAC1B,GAAG,CAAC,QAAQ,IAAI,EAAE,KAAK,KAAK;kCAC5B,UAAU,CAAC,GAAG,CAAC,KAAK,KAAK;kCACzB,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,KAAK,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;AAChF,CAAC"}

package/dist/errors.d.ts

@@ -0,0 +1,44 @@
+export declare const ERROR_HTTP: {
+    readonly UNAUTHENTICATED: 401;
+    readonly FORBIDDEN: 403;
+    readonly NOT_FOUND: 404;
+    readonly INVALID_INPUT: 400;
+    readonly INVALID_TRANSITION: 409;
+    readonly CONSTRAINT_VIOLATED: 403;
+    readonly INVARIANT_VIOLATED: 409;
+    readonly CONFLICT: 409;
+    readonly DOMAIN_ERROR: 422;
+    readonly RATE_LIMITED: 429;
+    readonly INTERNAL: 500;
+};
+export type CageErrorCode = keyof typeof ERROR_HTTP;
+export declare class CageError extends Error {
+    readonly code: CageErrorCode;
+    readonly http: number;
+    readonly detail?: unknown;
+    /** 业务错误码，只有 DOMAIN_ERROR 才有 */
+    readonly domainCode?: string;
+    constructor(code: CageErrorCode, detail?: unknown, domainCode?: string);
+    toJSON(): {
+        detail: unknown;
+        domainCode?: string | undefined;
+        code: "UNAUTHENTICATED" | "FORBIDDEN" | "NOT_FOUND" | "INVALID_INPUT" | "INVALID_TRANSITION" | "CONSTRAINT_VIOLATED" | "INVARIANT_VIOLATED" | "CONFLICT" | "DOMAIN_ERROR" | "RATE_LIMITED" | "INTERNAL";
+    };
+}
+export declare function cageError(code: CageErrorCode, detail?: unknown): CageError;
+export declare function isCageError(e: unknown): e is CageError;
+declare const DOMAIN: unique symbol;
+/** handler 返回的业务错误。整个事务回滚，HTTP 返回 422 + 业务码。 */
+export interface DomainError<C extends string = string> {
+    readonly [DOMAIN]: true;
+    readonly code: C;
+    readonly detail?: unknown;
+}
+/** 在 handler 里返回业务错误：return fail('STOCK_SHORT', short) */
+export declare function fail<C extends string>(code: C, detail?: unknown): DomainError<C>;
+export declare function isDomainError(v: unknown): v is DomainError;
+/** 把任何异常转换成 CageError，不泄露堆栈。 */
+export declare function toCageError(err: unknown): CageError;
+/** 声明期错误（构建时抛出），带错误码，agent 可以查 docs/errors。 */
+export declare function declError(code: string, message: string): Error;
+export {};

package/dist/errors.js

@@ -0,0 +1,83 @@
+// 内核错误码：机器可读，前端与 agent 都按码处理（设计文档第 5 节）。
+export const ERROR_HTTP = {
+    UNAUTHENTICATED: 401,
+    FORBIDDEN: 403,
+    NOT_FOUND: 404,
+    INVALID_INPUT: 400,
+    INVALID_TRANSITION: 409,
+    CONSTRAINT_VIOLATED: 403,
+    INVARIANT_VIOLATED: 409,
+    CONFLICT: 409,
+    DOMAIN_ERROR: 422,
+    RATE_LIMITED: 429,
+    INTERNAL: 500,
+};
+export class CageError extends Error {
+    code;
+    http;
+    detail;
+    /** 业务错误码，只有 DOMAIN_ERROR 才有 */
+    domainCode;
+    constructor(code, detail, domainCode) {
+        super(domainCode ? `${code}:${domainCode}` : code);
+        this.name = 'CageError';
+        this.code = code;
+        this.http = ERROR_HTTP[code];
+        this.detail = detail;
+        this.domainCode = domainCode;
+    }
+    toJSON() {
+        return { code: this.code, ...(this.domainCode ? { domainCode: this.domainCode } : {}), detail: this.detail };
+    }
+}
+export function cageError(code, detail) {
+    return new CageError(code, detail);
+}
+export function isCageError(e) {
+    return e instanceof CageError || (!!e && e.name === 'CageError' && typeof e.code === 'string');
+}
+const DOMAIN = Symbol.for('cage.domainError');
+/** 在 handler 里返回业务错误：return fail('STOCK_SHORT', short) */
+export function fail(code, detail) {
+    return Object.freeze({ [DOMAIN]: true, code, detail });
+}
+export function isDomainError(v) {
+    return !!v && typeof v === 'object' && v[DOMAIN] === true;
+}
+/** 把任何异常转换成 CageError，不泄露堆栈。 */
+export function toCageError(err) {
+    if (isCageError(err))
+        return err;
+    if (isDomainError(err))
+        return new CageError('DOMAIN_ERROR', err.detail, err.code);
+    const anyErr = err;
+    if (anyErr?.validation || anyErr?.code === 'FST_ERR_VALIDATION')
+        return new CageError('INVALID_INPUT', anyErr.message);
+    if (anyErr?.statusCode === 429)
+        return new CageError('RATE_LIMITED');
+    if (anyErr?.statusCode === 413)
+        return new CageError('INVALID_INPUT', '请求体超过大小限制');
+    if (anyErr?.statusCode === 403 && /csrf/i.test(String(anyErr?.message)))
+        return new CageError('FORBIDDEN', 'CSRF');
+    if (anyErr?.statusCode === 404)
+        return new CageError('NOT_FOUND');
+    if (anyErr?.statusCode === 415 || anyErr?.statusCode === 400)
+        return new CageError('INVALID_INPUT', anyErr.message);
+    // 数据库序列化失败与死锁：作为冲突返回，调用方重试
+    if (anyErr?.code === '40001' || anyErr?.code === '40P01')
+        return new CageError('CONFLICT');
+    // 唯一约束冲突（例如确定性主键重复、唯一字段重复）
+    if (anyErr?.code === '23505')
+        return new CageError('CONFLICT', { constraint: anyErr.constraint });
+    // 检查约束、外键：数据库层兜底拦下的非法数据
+    if (anyErr?.code === '23514' || anyErr?.code === '23503')
+        return new CageError('INVALID_INPUT', { constraint: anyErr.constraint });
+    return new CageError('INTERNAL');
+}
+/** 声明期错误（构建时抛出），带错误码，agent 可以查 docs/errors。 */
+export function declError(code, message) {
+    const e = new Error(`[${code}] ${message}（详见 docs/errors/${code}.md）`);
+    e.name = 'CageDeclarationError';
+    return e;
+}
+//# sourceMappingURL=errors.js.map

package/dist/errors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../src/errors.ts"],"names":[],"mappings":"AAAA,yCAAyC;AAEzC,MAAM,CAAC,MAAM,UAAU,GAAG;IACxB,eAAe,EAAE,GAAG;IACpB,SAAS,EAAE,GAAG;IACd,SAAS,EAAE,GAAG;IACd,aAAa,EAAE,GAAG;IAClB,kBAAkB,EAAE,GAAG;IACvB,mBAAmB,EAAE,GAAG;IACxB,kBAAkB,EAAE,GAAG;IACvB,QAAQ,EAAE,GAAG;IACb,YAAY,EAAE,GAAG;IACjB,YAAY,EAAE,GAAG;IACjB,QAAQ,EAAE,GAAG;CACL,CAAC;AAIX,MAAM,OAAO,SAAU,SAAQ,KAAK;IACzB,IAAI,CAAgB;IACpB,IAAI,CAAS;IACb,MAAM,CAAW;IAC1B,+BAA+B;IACtB,UAAU,CAAU;IAE7B,YAAY,IAAmB,EAAE,MAAgB,EAAE,UAAmB;QACpE,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,GAAG,IAAI,IAAI,UAAU,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QACnD,IAAI,CAAC,IAAI,GAAG,WAAW,CAAC;QACxB,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,IAAI,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC;QAC7B,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;IAC/B,CAAC;IAED,MAAM;QACJ,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC;IAC/G,CAAC;CACF;AAED,MAAM,UAAU,SAAS,CAAC,IAAmB,EAAE,MAAgB;IAC7D,OAAO,IAAI,SAAS,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;AACrC,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,CAAU;IACpC,OAAO,CAAC,YAAY,SAAS,IAAI,CAAC,CAAC,CAAC,CAAC,IAAK,CAAS,CAAC,IAAI,KAAK,WAAW,IAAI,OAAQ,CAAS,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC;AACnH,CAAC;AAED,MAAM,MAAM,GAAG,MAAM,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC;AAS9C,0DAA0D;AAC1D,MAAM,UAAU,IAAI,CAAmB,IAAO,EAAE,MAAgB;IAC9D,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,EAAE,IAAa,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;AAClE,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,CAAU;IACtC,OAAO,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAK,CAAS,CAAC,MAAM,CAAC,KAAK,IAAI,CAAC;AACrE,CAAC;AAED,gCAAgC;AAChC,MAAM,UAAU,WAAW,CAAC,GAAY;IACtC,IAAI,WAAW,CAAC,GAAG,CAAC;QAAE,OAAO,GAAgB,CAAC;IAC9C,IAAI,aAAa,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,SAAS,CAAC,cAAc,EAAE,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC;IACnF,MAAM,MAAM,GAAG,GAAU,CAAC;IAC1B,IAAI,MAAM,EAAE,UAAU,IAAI,MAAM,EAAE,IAAI,KAAK,oBAAoB;QAAE,OAAO,IAAI,SAAS,CAAC,eAAe,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC;IACvH,IAAI,MAAM,EAAE,UAAU,KAAK,GAAG;QAAE,OAAO,IAAI,SAAS,CAAC,cAAc,CAAC,CAAC;IACrE,IAAI,MAAM,EAAE,UAAU,KAAK,GAAG;QAAE,OAAO,IAAI,SAAS,CAAC,eAAe,EAAE,WAAW,CAAC,CAAC;IACnF,IAAI,MAAM,EAAE,UAAU,KAAK,GAAG,IAAI,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAAE,OAAO,IAAI,SAAS,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;IACnH,IAAI,MAAM,EAAE,UAAU,KAAK,GAAG;QAAE,OAAO,IAAI,SAAS,CAAC,WAAW,CAAC,CAAC;IAClE,IAAI,MAAM,EAAE,UAAU,KAAK,GAAG,IAAI,MAAM,EAAE,UAAU,KAAK,GAAG;QAAE,OAAO,IAAI,SAAS,CAAC,eAAe,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC;IACpH,2BAA2B;IAC3B,IAAI,MAAM,EAAE,IAAI,KAAK,OAAO,IAAI,MAAM,EAAE,IAAI,KAAK,OAAO;QAAE,OAAO,IAAI,SAAS,CAAC,UAAU,CAAC,CAAC;IAC3F,2BAA2B;IAC3B,IAAI,MAAM,EAAE,IAAI,KAAK,OAAO;QAAE,OAAO,IAAI,SAAS,CAAC,UAAU,EAAE,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE,CAAC,CAAC;IAClG,wBAAwB;IACxB,IAAI,MAAM,EAAE,IAAI,KAAK,OAAO,IAAI,MAAM,EAAE,IAAI,KAAK,OAAO;QAAE,OAAO,IAAI,SAAS,CAAC,eAAe,EAAE,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE,CAAC,CAAC;IACnI,OAAO,IAAI,SAAS,CAAC,UAAU,CAAC,CAAC;AACnC,CAAC;AAED,+CAA+C;AAC/C,MAAM,UAAU,SAAS,CAAC,IAAY,EAAE,OAAe;IACrD,MAAM,CAAC,GAAG,IAAI,KAAK,CAAC,IAAI,IAAI,KAAK,OAAO,mBAAmB,IAAI,MAAM,CAAC,CAAC;IACvE,CAAC,CAAC,IAAI,GAAG,sBAAsB,CAAC;IAChC,OAAO,CAAC,CAAC;AACX,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,23 @@
+export * from './brands.js';
+export * from './errors.js';
+export * from './types.js';
+export { Field, text, int, number, money, id, date, datetime, bool, enumOf, ref, hasMany, manyToMany, isRelation, list, json, isField, objectSchema, SENSITIVE_KINDS, type SensitiveKind, type FieldKind, type FieldMeta, type AnyField, type Fields, type FieldValues, type ValueOf, } from './primitives/fields.js';
+export { states, isStates, DEFAULT_STATES, type StatesDef } from './primitives/states.js';
+export { aggregate, isAggregate, hasStates, hiddenFields, sensitiveFields, RESERVED_FIELDS, type Aggregate, type AnyAggregate, type Snapshot, type SnapshotOf, type StateOf, type FieldsOf, type FieldValuesOf, type SystemCols, } from './primitives/aggregate.js';
+export { command, isCommand, idOnly, empty, type Command, type AnyCommand, type Reads, type ReadRepo, type DepsOf, type Draft, type HandlerCtx, type HandlerResult, type Invoker, type FindOptions, } from './primitives/command.js';
+export { event, emit, isEvent, defaultPayload, type Event, type AnyEvent, type PayloadOf, type EmitSpec } from './primitives/event.js';
+export { sod, ceiling, stepUp, ok, violation, type Constraint, type ConstraintResult, type ConstraintMeta, } from './primitives/constraints.js';
+export { reaction, query, approval, job, unsafe, daysAgo, type Reaction, type AnyReaction, type Query, type AnyQuery, type Approval, type Job, type JobApi, type JobQueryApi, type TxMode, type UnsafeTag, } from './primitives/flow.js';
+export { scope, compileScope, compileGrant, scopeMatches, grantsFor, DEFAULT_GRANTS, type ScopeSpec } from './scope/index.js';
+export { buildRegistry, type Registry, type RegisteredCommand, type CatalogEntry, type RegistryOptions, type RuntimeExtension } from './registry.js';
+export { Kernel, createKernel, type KernelOptions, type AuditEntry, type BatchResult, type EmittedEvent } from './kernel.js';
+export { ReadSide, compileNamedSql, type ListParams, type Page } from './read.js';
+export { DataTransfers, importRequestSchema, type TransferTask } from './transfer/index.js';
+export { maskValue, present, canUnmask, auditDiff } from './mask.js';
+export { mergeCaps, mergeScopes, unmaskFrom, loadUserGrants, userCtx, anonymousCtx, systemCtx, type UserGrants, type RoleGrantRow } from './org.js';
+export { step, traceCarrier, withCarrier, consoleLogger, silentLogger, type Logger } from './telemetry.js';
+export { snake, kebab, camel, lowerFirst, upperFirst, hash32, stableStringify } from './util/names.js';
+export { loadScoped, bindReads, scopedFind, tableRef } from './pipeline/load.js';
+export { setSessionVars } from './db/session.js';
+export { urlsFromEnv, type DatabaseUrls } from './db/connect.js';
+export { DEFAULT_TENANT } from './db/ddl.js';

package/dist/index.js

@@ -0,0 +1,25 @@
+// @yss123/cage-kernel：声明原语、写入流水线、范围组合子、读侧上下文。不含任何业务名词。
+export * from './brands.js';
+export * from './errors.js';
+export * from './types.js';
+export { Field, text, int, number, money, id, date, datetime, bool, enumOf, ref, hasMany, manyToMany, isRelation, list, json, isField, objectSchema, SENSITIVE_KINDS, } from './primitives/fields.js';
+export { states, isStates, DEFAULT_STATES } from './primitives/states.js';
+export { aggregate, isAggregate, hasStates, hiddenFields, sensitiveFields, RESERVED_FIELDS, } from './primitives/aggregate.js';
+export { command, isCommand, idOnly, empty, } from './primitives/command.js';
+export { event, emit, isEvent, defaultPayload } from './primitives/event.js';
+export { sod, ceiling, stepUp, ok, violation, } from './primitives/constraints.js';
+export { reaction, query, approval, job, unsafe, daysAgo, } from './primitives/flow.js';
+export { scope, compileScope, compileGrant, scopeMatches, grantsFor, DEFAULT_GRANTS } from './scope/index.js';
+export { buildRegistry } from './registry.js';
+export { Kernel, createKernel } from './kernel.js';
+export { ReadSide, compileNamedSql } from './read.js';
+export { DataTransfers, importRequestSchema } from './transfer/index.js';
+export { maskValue, present, canUnmask, auditDiff } from './mask.js';
+export { mergeCaps, mergeScopes, unmaskFrom, loadUserGrants, userCtx, anonymousCtx, systemCtx } from './org.js';
+export { step, traceCarrier, withCarrier, consoleLogger, silentLogger } from './telemetry.js';
+export { snake, kebab, camel, lowerFirst, upperFirst, hash32, stableStringify } from './util/names.js';
+export { loadScoped, bindReads, scopedFind, tableRef } from './pipeline/load.js';
+export { setSessionVars } from './db/session.js';
+export { urlsFromEnv } from './db/connect.js';
+export { DEFAULT_TENANT } from './db/ddl.js';
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,uDAAuD;AACvD,cAAc,aAAa,CAAC;AAC5B,cAAc,aAAa,CAAC;AAC5B,cAAc,YAAY,CAAC;AAC3B,OAAO,EACL,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,YAAY,EAC1I,eAAe,GAChB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,cAAc,EAAkB,MAAM,wBAAwB,CAAC;AAC1F,OAAO,EACL,SAAS,EAAE,WAAW,EAAE,SAAS,EAAE,YAAY,EAAE,eAAe,EAAE,eAAe,GAElF,MAAM,2BAA2B,CAAC;AACnC,OAAO,EACL,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,KAAK,GAElC,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,cAAc,EAA4D,MAAM,uBAAuB,CAAC;AACvI,OAAO,EACL,GAAG,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,SAAS,GACpC,MAAM,6BAA6B,CAAC;AACrC,OAAO,EACL,QAAQ,EAAE,KAAK,EAAE,QAAQ,EAAE,GAAG,EAAE,MAAM,EAAE,OAAO,GAEhD,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,KAAK,EAAE,YAAY,EAAE,YAAY,EAAE,YAAY,EAAE,SAAS,EAAE,cAAc,EAAkB,MAAM,kBAAkB,CAAC;AAC9H,OAAO,EAAE,aAAa,EAAyG,MAAM,eAAe,CAAC;AACrJ,OAAO,EAAE,MAAM,EAAE,YAAY,EAA4E,MAAM,aAAa,CAAC;AAC7H,OAAO,EAAE,QAAQ,EAAE,eAAe,EAA8B,MAAM,WAAW,CAAC;AAClF,OAAO,EAAE,aAAa,EAAE,mBAAmB,EAAqB,MAAM,qBAAqB,CAAC;AAC5F,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AACrE,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,UAAU,EAAE,cAAc,EAAE,OAAO,EAAE,YAAY,EAAE,SAAS,EAAsC,MAAM,UAAU,CAAC;AACpJ,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,WAAW,EAAE,aAAa,EAAE,YAAY,EAAe,MAAM,gBAAgB,CAAC;AAC3G,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AACvG,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AACjF,OAAO,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AACjD,OAAO,EAAE,WAAW,EAAqB,MAAM,iBAAiB,CAAC;AACjE,OAAO,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC"}

package/dist/kernel.d.ts

@@ -0,0 +1,99 @@
+import type { Kysely, Transaction } from 'kysely';
+import { type DatabaseUrls } from './db/connect.js';
+import { CageError } from './errors.js';
+import type { AnyAggregate } from './primitives/aggregate.js';
+import type { AnyCommand } from './primitives/command.js';
+import { ReadSide } from './read.js';
+import { type RegisteredCommand, type Registry, type RegistryOptions } from './registry.js';
+import { type Logger } from './telemetry.js';
+import type { CapabilityParams, Ctx } from './types.js';
+import { DataTransfers } from './transfer/index.js';
+export interface KernelOptions {
+    /** domain 包的导出（可以是多个模块，例如框架自带的组织模型 + 业务声明） */
+    domain: object | object[];
+    /** 数据库连接串；或者直接传入已有的连接 */
+    urls?: DatabaseUrls;
+    db?: {
+        app: Kysely<any>;
+        read: Kysely<any>;
+    };
+    registryOptions?: RegistryOptions;
+    logger?: Logger;
+    /** 同事务反应的最大嵌套深度 */
+    maxReactionDepth?: number;
+    /** 连接池大小 */
+    poolSize?: number;
+}
+export interface EmittedEvent {
+    outboxId: number;
+    event: string;
+    payload: Record<string, unknown>;
+}
+export interface BatchResult {
+    index: number;
+    ok: boolean;
+    data?: Record<string, unknown>;
+    error?: {
+        code: string;
+        domainCode?: string;
+        detail?: unknown;
+    };
+}
+export interface AuditEntry {
+    tenantId: string;
+    actor: string;
+    actorKind: string;
+    onBehalfOf?: string | null;
+    source: string;
+    kind: 'write' | 'read' | 'denied' | 'ops';
+    capability?: string | null;
+    command?: string | null;
+    aggregate?: string | null;
+    aggregateId?: string | null;
+    result: string;
+    diff?: unknown;
+    requestId?: string | null;
+    idempotencyKey?: string | null;
+    client?: unknown;
+}
+export declare class Kernel {
+    readonly registry: Registry;
+    readonly app: Kysely<any>;
+    readonly readDb: Kysely<any>;
+    readonly read: ReadSide;
+    readonly transfers: DataTransfers;
+    readonly log: Logger;
+    private readonly handles;
+    private readonly maxDepth;
+    constructor(opts: KernelOptions);
+    close(): Promise<void>;
+    resolve(ref: string | AnyCommand): RegisteredCommand;
+    /** 执行一个命令（自己开事务）。返回按当前主体掩码后的新快照。 */
+    execute(ref: string | AnyCommand, raw: unknown, ctx: Ctx): Promise<Record<string, any>>;
+    /** 在已有事务里执行（同事务反应、审批桥接、批量整批原子模式用）。返回未掩码的快照。 */
+    executeIn(tx: Transaction<any>, ref: string | AnyCommand, raw: unknown, ctx: Ctx, depth?: number): Promise<Record<string, any>>;
+    /** 批量写入：每一行都完整走 12 关；默认逐行独立提交，可选整批原子。批量没有快捷路径。 */
+    executeBatch(ref: string | AnyCommand, rows: unknown[], ctx: Ctx, opts?: {
+        atomic?: boolean;
+    }): Promise<BatchResult[]>;
+    private run;
+    private enqueueEvents;
+    writeAudit(db: Transaction<any> | Kysely<any>, e: AuditEntry): Promise<void>;
+    /** 被拒绝的尝试异步记录，用于发现探测和配置问题；记录失败不影响请求 */
+    auditDenied(rc: RegisteredCommand, raw: unknown, ctx: Ctx, err: CageError): Promise<void>;
+    private catalogCache?;
+    catalogCaps(): string[];
+    capabilitiesOf(userId: string, tenantId: string): Promise<Map<string, CapabilityParams>>;
+    /** 把一个用户解析成上下文（HTTP 层会加缓存） */
+    contextFor(userId: string, tenantId: string, extra?: Partial<Ctx>): Promise<Ctx | null>;
+    /** 审批流程身份：代表最后一位审批人调用结论命令 */
+    processCtx(opts: {
+        process: string;
+        tenantId: string;
+        onBehalfOf: string;
+        capabilities: string[];
+        requestId?: string;
+    }): Ctx;
+}
+export declare function createKernel(opts: KernelOptions): Kernel;
+export type { AnyAggregate };