@yss123/cage-kernel 0.0.0-stage → 0.2.0

package/dist/registry.js

@@ -0,0 +1,177 @@
+// 注册表：遍历 domain 包的导出，靠品牌标记识别原语，用导出名给命令和反应命名。
+import { CONSUMERS, CONNECTOR, INBOUND, OUTBOUND, ROUTE, SYSTEM_DDL, brandOf } from './brands.js';
+import { declError } from './errors.js';
+import { sensitiveFields } from './primitives/aggregate.js';
+import { relationTable } from './relations.js';
+import { isRelation } from './primitives/fields.js';
+/** 遍历一个或多个 domain 模块的导出，建立注册表。 */
+export function buildRegistry(domains, opts = {}) {
+    const mods = Array.isArray(domains) ? domains : [domains];
+    const names = new Map();
+    const aggregates = [];
+    const commands = [];
+    const events = [];
+    const reactions = [];
+    const queries = [];
+    const approvals = [];
+    const jobs = [];
+    const extensions = [];
+    const systemDdl = [];
+    for (const mod of mods) {
+        for (const [exportName, v] of Object.entries(mod)) {
+            if (!v || (typeof v !== 'object' && typeof v !== 'function'))
+                continue;
+            if (names.has(v))
+                continue; // 同一个对象被重复导出：保留第一个名字
+            const brand = brandOf(v);
+            if (!brand)
+                continue;
+            names.set(v, exportName);
+            switch (brand) {
+                case 'AGGREGATE':
+                    if (aggregates.some((a) => a.name === v.name)) {
+                        throw declError('CAGE-REG-002', `聚合名重复：${v.name}`);
+                    }
+                    aggregates.push(v);
+                    break;
+                case 'COMMAND': {
+                    const cmd = v;
+                    const name = cmd.name ?? exportName;
+                    commands.push({ cmd, name, capability: `${cmd.agg.name}.${name}`, exportName });
+                    break;
+                }
+                case 'EVENT':
+                    events.push(v);
+                    break;
+                case 'REACTION':
+                    reactions.push({ r: v, name: v.name ?? exportName });
+                    break;
+                case 'QUERY':
+                    queries.push(v);
+                    break;
+                case 'APPROVAL':
+                    approvals.push({ a: v, name: exportName });
+                    break;
+                case 'JOB':
+                    jobs.push(v);
+                    break;
+                case 'CONNECTOR':
+                case 'OUTBOUND':
+                case 'INBOUND':
+                case 'ROUTE':
+                    extensions.push({ kind: brand, name: exportName, value: v });
+                    break;
+                default:
+                    break;
+            }
+            const ddl = v[SYSTEM_DDL];
+            if (typeof ddl === 'function') {
+                const text = String(ddl());
+                if (!systemDdl.includes(text))
+                    systemDdl.push(text);
+            }
+        }
+    }
+    // ---- 一致性校验：引用的东西都必须被导出，否则抽取器和内核看不到 ----
+    const aggSet = new Set(aggregates);
+    // 注册后解析字符串引用，支持循环引用，并在连接数据库前发现声明错误。
+    const tables = new Set(aggregates.map((a) => `${a.table.schema}.${a.table.name}`));
+    for (const a of aggregates)
+        for (const [key, field] of Object.entries(a.fields)) {
+            if (!field.ref)
+                continue;
+            const target = aggregates.find((item) => item.name === field.ref);
+            if (!target)
+                throw declError('CAGE-REL-001', `${a.name}.${key} 引用的 ${field.ref} 未从 domain 导出`);
+            if (field.kind === 'hasMany') {
+                const inverse = target.fields[field.mappedBy];
+                if (!inverse || inverse.kind !== 'ref' || inverse.ref !== a.name || inverse.isHidden || inverse.sensitiveKind)
+                    throw declError('CAGE-REL-001', `${a.name}.${key} 的 mappedBy 必须指向 ${target.name} 上引用 ${a.name} 的 ref 字段`);
+            }
+            if (field.kind === 'manyToMany') {
+                const table = relationTable(a, key);
+                const name = `${table.schema}.${table.name}`;
+                if (tables.has(name) || table.name.length > 63)
+                    throw declError('CAGE-REL-001', `${a.name}.${key} 的关系表名冲突或超过 PostgreSQL 63 字符限制，请缩短或调整名称`);
+                tables.add(name);
+            }
+        }
+    const caps = new Set();
+    for (const c of commands) {
+        if (!aggSet.has(c.cmd.agg))
+            throw declError('CAGE-REG-001', `命令 ${c.capability} 所属的聚合 ${c.cmd.agg.name} 没有从 domain 导出`);
+        if (c.name === 'related' && c.cmd.invokedBy.includes('user') && Object.values(c.cmd.agg.fields).some(isRelation))
+            throw declError('CAGE-REL-001', `${c.cmd.agg.name}.related 是生成客户端的关联读取入口；请为业务命令使用其他 name`);
+        if (caps.has(c.capability))
+            throw declError('CAGE-REG-003', `能力点重复：${c.capability}，可用 command({ name }) 区分`);
+        caps.add(c.capability);
+        for (const [alias, a] of Object.entries(c.cmd.reads)) {
+            if (!aggSet.has(a))
+                throw declError('CAGE-REG-001', `命令 ${c.capability} 的 reads.${alias} 引用的聚合没有导出`);
+        }
+    }
+    const cmdSet = new Set(commands.map((c) => c.cmd));
+    for (const { r, name } of reactions) {
+        if (!cmdSet.has(r.command))
+            throw declError('CAGE-REG-001', `反应 ${name} 调用的命令没有从 domain 导出`);
+    }
+    for (const { a, name } of approvals) {
+        if (!cmdSet.has(a.onApproved) || !cmdSet.has(a.onRejected)) {
+            throw declError('CAGE-REG-001', `审批绑定 ${name} 的结论命令没有从 domain 导出`);
+        }
+    }
+    for (const j of jobs) {
+        for (const c of j.calls)
+            if (!cmdSet.has(c))
+                throw declError('CAGE-REG-001', `任务 ${j.name} 调用的命令没有导出`);
+    }
+    const queryNames = new Set();
+    for (const q of queries) {
+        if (queryNames.has(q.name))
+            throw declError('CAGE-REG-002', `查询名重复：${q.name}`);
+        queryNames.add(q.name);
+    }
+    const byCap = new Map(commands.map((c) => [c.capability, c]));
+    const byCmd = new Map(commands.map((c) => [c.cmd, c]));
+    const byAgg = new Map(aggregates.map((a) => [a.name, a]));
+    const registry = {
+        aggregates, commands, events, reactions, queries, approvals, jobs, extensions, systemDdl,
+        aggregate: (name) => byAgg.get(name),
+        command: (ref) => (typeof ref === 'string' ? byCap.get(ref) : byCmd.get(ref)),
+        capabilityOf: (cmd) => {
+            const c = byCmd.get(cmd);
+            if (!c)
+                throw declError('CAGE-REG-001', `命令（${cmd.agg.name}）没有从 domain 导出，无法确定能力点`);
+            return c.capability;
+        },
+        nameOf: (v) => names.get(v),
+        reactionsFor: (eventName) => reactions.filter((x) => x.r.event.name === eventName),
+        approvalFor: (aggName) => approvals.find((x) => x.a.agg.name === aggName),
+        approvalByProcess: (process) => approvals.find((x) => x.a.process === process),
+        capabilityCatalog: () => {
+            const out = [];
+            for (const a of aggregates) {
+                out.push({ capability: `${a.name}.read`, kind: 'read', aggregate: a.name, description: `查看${a.description ?? a.name}` });
+                out.push({ capability: `${a.name}.export`, kind: 'export', aggregate: a.name, description: `导出${a.description ?? a.name}` });
+                for (const kind of new Set(Object.values(sensitiveFields(a)))) {
+                    out.push({ capability: `${a.name}.unmask.${kind}`, kind: 'unmask', aggregate: a.name, description: `查看 ${a.name} 的 ${kind} 明文` });
+                }
+            }
+            for (const c of commands) {
+                out.push({
+                    capability: c.capability, kind: 'command', aggregate: c.cmd.agg.name,
+                    description: c.cmd.description, invokedBy: c.cmd.invokedBy,
+                });
+            }
+            // 框架系统能力：审计查询、异步任务运维（内核拥有审计表和 outbox）
+            out.push({ capability: 'Sys.audit.read', kind: 'system', description: '查询审计记录' }, { capability: 'Sys.ops.read', kind: 'system', description: '查看异步任务、死信、第三方同步记录' }, { capability: 'Sys.ops.manage', kind: 'system', description: '重放或丢弃死信、启停定时任务' });
+            for (const e of opts.extraCapabilities ?? [])
+                out.push(e);
+            return out.sort((x, y) => x.capability.localeCompare(y.capability));
+        },
+        consumerProviders: () => extensions.map((e) => e.value).filter((v) => typeof v?.[CONSUMERS] === 'function'),
+    };
+    return Object.freeze(registry);
+}
+export { CONNECTOR, INBOUND, OUTBOUND, ROUTE };
+//# sourceMappingURL=registry.js.map

package/dist/registry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry.js","sourceRoot":"","sources":["../src/registry.ts"],"names":[],"mappings":"AAAA,6CAA6C;AAC7C,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,UAAU,EAAE,OAAO,EAAE,MAAM,aAAa,CAAC;AAClG,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AACxC,OAAO,EAAqB,eAAe,EAAE,MAAM,2BAA2B,CAAC;AAI/E,OAAO,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAC/C,OAAO,EAAE,UAAU,EAAe,MAAM,wBAAwB,CAAC;AAuDjE,kCAAkC;AAClC,MAAM,UAAU,aAAa,CAAC,OAA0B,EAAE,OAAwB,EAAE;IAClF,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;IAC1D,MAAM,KAAK,GAAG,IAAI,GAAG,EAAkB,CAAC;IACxC,MAAM,UAAU,GAAmB,EAAE,CAAC;IACtC,MAAM,QAAQ,GAAwB,EAAE,CAAC;IACzC,MAAM,MAAM,GAAe,EAAE,CAAC;IAC9B,MAAM,SAAS,GAAuC,EAAE,CAAC;IACzD,MAAM,OAAO,GAAe,EAAE,CAAC;IAC/B,MAAM,SAAS,GAAoC,EAAE,CAAC;IACtD,MAAM,IAAI,GAAU,EAAE,CAAC;IACvB,MAAM,UAAU,GAAuB,EAAE,CAAC;IAC1C,MAAM,SAAS,GAAa,EAAE,CAAC;IAE/B,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,KAAK,MAAM,CAAC,UAAU,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;YAClD,IAAI,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,OAAO,CAAC,KAAK,UAAU,CAAC;gBAAE,SAAS;YACvE,IAAI,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;gBAAE,SAAS,CAAC,qBAAqB;YACjD,MAAM,KAAK,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;YACzB,IAAI,CAAC,KAAK;gBAAE,SAAS;YACrB,KAAK,CAAC,GAAG,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC;YACzB,QAAQ,KAAK,EAAE,CAAC;gBACd,KAAK,WAAW;oBACd,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAM,CAAkB,CAAC,IAAI,CAAC,EAAE,CAAC;wBAChE,MAAM,SAAS,CAAC,cAAc,EAAE,SAAU,CAAkB,CAAC,IAAI,EAAE,CAAC,CAAC;oBACvE,CAAC;oBACD,UAAU,CAAC,IAAI,CAAC,CAAiB,CAAC,CAAC;oBACnC,MAAM;gBACR,KAAK,SAAS,CAAC,CAAC,CAAC;oBACf,MAAM,GAAG,GAAG,CAAe,CAAC;oBAC5B,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,IAAI,UAAU,CAAC;oBACpC,QAAQ,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,UAAU,EAAE,GAAG,GAAG,CAAC,GAAG,CAAC,IAAI,IAAI,IAAI,EAAE,EAAE,UAAU,EAAE,CAAC,CAAC;oBAChF,MAAM;gBACR,CAAC;gBACD,KAAK,OAAO;oBACV,MAAM,CAAC,IAAI,CAAC,CAAa,CAAC,CAAC;oBAC3B,MAAM;gBACR,KAAK,UAAU;oBACb,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAgB,EAAE,IAAI,EAAG,CAAiB,CAAC,IAAI,IAAI,UAAU,EAAE,CAAC,CAAC;oBACrF,MAAM;gBACR,KAAK,OAAO;oBACV,OAAO,CAAC,IAAI,CAAC,CAAa,CAAC,CAAC;oBAC5B,MAAM;gBACR,KAAK,UAAU;oBACb,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAa,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC,CAAC;oBACvD,MAAM;gBACR,KAAK,KAAK;oBACR,IAAI,CAAC,IAAI,CAAC,CAAQ,CAAC,CAAC;oBACpB,MAAM;gBACR,KAAK,WAAW,CAAC;gBACjB,KAAK,UAAU,CAAC;gBAChB,KAAK,SAAS,CAAC;gBACf,KAAK,OAAO;oBACV,UAAU,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC;oBAC7D,MAAM;gBACR;oBACE,MAAM;YACV,CAAC;YACD,MAAM,GAAG,GAAI,CAAS,CAAC,UAAU,CAAC,CAAC;YACnC,IAAI,OAAO,GAAG,KAAK,UAAU,EAAE,CAAC;gBAC9B,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC;gBAC3B,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC;oBAAE,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACtD,CAAC;QACH,CAAC;IACH,CAAC;IAED,0CAA0C;IAC1C,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,CAAC;IACnC,oCAAoC;IACpC,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,MAAM,IAAI,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;IACnF,KAAK,MAAM,CAAC,IAAI,UAAU;QAAE,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,MAAgB,CAAC,EAAE,CAAC;YAC1F,IAAI,CAAC,KAAK,CAAC,GAAG;gBAAE,SAAS;YACzB,MAAM,MAAM,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,KAAK,CAAC,GAAG,CAAC,CAAC;YAClE,IAAI,CAAC,MAAM;gBAAE,MAAM,SAAS,CAAC,cAAc,EAAE,GAAG,CAAC,CAAC,IAAI,IAAI,GAAG,QAAQ,KAAK,CAAC,GAAG,eAAe,CAAC,CAAC;YAC/F,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;gBAC7B,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,QAAS,CAAC,CAAC;gBAC/C,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,IAAI,KAAK,KAAK,IAAI,OAAO,CAAC,GAAG,KAAK,CAAC,CAAC,IAAI,IAAI,OAAO,CAAC,QAAQ,IAAI,OAAO,CAAC,aAAa;oBAC3G,MAAM,SAAS,CAAC,cAAc,EAAE,GAAG,CAAC,CAAC,IAAI,IAAI,GAAG,oBAAoB,MAAM,CAAC,IAAI,QAAQ,CAAC,CAAC,IAAI,WAAW,CAAC,CAAC;YAC9G,CAAC;YACD,IAAI,KAAK,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;gBAChC,MAAM,KAAK,GAAG,aAAa,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;gBACpC,MAAM,IAAI,GAAG,GAAG,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC;gBAC7C,IAAI,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,MAAM,GAAG,EAAE;oBAC5C,MAAM,SAAS,CAAC,cAAc,EAAE,GAAG,CAAC,CAAC,IAAI,IAAI,GAAG,yCAAyC,CAAC,CAAC;gBAC7F,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YACnB,CAAC;QACH,CAAC;IACD,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;QACzB,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,MAAM,SAAS,CAAC,cAAc,EAAE,MAAM,CAAC,CAAC,UAAU,UAAU,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,gBAAgB,CAAC,CAAC;QACxH,IAAI,CAAC,CAAC,IAAI,KAAK,SAAS,IAAI,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,MAAgB,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC;YACxH,MAAM,SAAS,CAAC,cAAc,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,wCAAwC,CAAC,CAAC;QAC7F,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,UAAU,CAAC;YAAE,MAAM,SAAS,CAAC,cAAc,EAAE,SAAS,CAAC,CAAC,UAAU,0BAA0B,CAAC,CAAC;QAC7G,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC;QACvB,KAAK,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;YACrD,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;gBAAE,MAAM,SAAS,CAAC,cAAc,EAAE,MAAM,CAAC,CAAC,UAAU,YAAY,KAAK,YAAY,CAAC,CAAC;QACvG,CAAC;IACH,CAAC;IACD,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IACnD,KAAK,MAAM,EAAE,CAAC,EAAE,IAAI,EAAE,IAAI,SAAS,EAAE,CAAC;QACpC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC;YAAE,MAAM,SAAS,CAAC,cAAc,EAAE,MAAM,IAAI,qBAAqB,CAAC,CAAC;IAC/F,CAAC;IACD,KAAK,MAAM,EAAE,CAAC,EAAE,IAAI,EAAE,IAAI,SAAS,EAAE,CAAC;QACpC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,UAAU,CAAC,EAAE,CAAC;YAC3D,MAAM,SAAS,CAAC,cAAc,EAAE,QAAQ,IAAI,qBAAqB,CAAC,CAAC;QACrE,CAAC;IACH,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;QACrB,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK;YAAE,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;gBAAE,MAAM,SAAS,CAAC,cAAc,EAAE,MAAM,CAAC,CAAC,IAAI,YAAY,CAAC,CAAC;IACzG,CAAC;IACD,MAAM,UAAU,GAAG,IAAI,GAAG,EAAU,CAAC;IACrC,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;QACxB,IAAI,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;YAAE,MAAM,SAAS,CAAC,cAAc,EAAE,SAAS,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;QAC/E,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IACzB,CAAC;IAED,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IAC9D,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IACvD,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IAE1D,MAAM,QAAQ,GAAa;QACzB,UAAU,EAAE,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,UAAU,EAAE,SAAS;QACxF,SAAS,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC;QACpC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,OAAO,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAC7E,YAAY,EAAE,CAAC,GAAG,EAAE,EAAE;YACpB,MAAM,CAAC,GAAG,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YACzB,IAAI,CAAC,CAAC;gBAAE,MAAM,SAAS,CAAC,cAAc,EAAE,MAAM,GAAG,CAAC,GAAG,CAAC,IAAI,wBAAwB,CAAC,CAAC;YACpF,OAAO,CAAC,CAAC,UAAU,CAAC;QACtB,CAAC;QACD,MAAM,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;QAC3B,YAAY,EAAE,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,KAAK,SAAS,CAAC;QAClF,WAAW,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,KAAK,OAAO,CAAC;QACzE,iBAAiB,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,KAAK,OAAO,CAAC;QAC9E,iBAAiB,EAAE,GAAG,EAAE;YACtB,MAAM,GAAG,GAAmB,EAAE,CAAC;YAC/B,KAAK,MAAM,CAAC,IAAI,UAAU,EAAE,CAAC;gBAC3B,GAAG,CAAC,IAAI,CAAC,EAAE,UAAU,EAAE,GAAG,CAAC,CAAC,IAAI,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC,IAAI,EAAE,WAAW,EAAE,KAAK,CAAC,CAAC,WAAW,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;gBACzH,GAAG,CAAC,IAAI,CAAC,EAAE,UAAU,EAAE,GAAG,CAAC,CAAC,IAAI,SAAS,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,CAAC,IAAI,EAAE,WAAW,EAAE,KAAK,CAAC,CAAC,WAAW,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;gBAC7H,KAAK,MAAM,IAAI,IAAI,IAAI,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;oBAC9D,GAAG,CAAC,IAAI,CAAC,EAAE,UAAU,EAAE,GAAG,CAAC,CAAC,IAAI,WAAW,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,CAAC,IAAI,EAAE,WAAW,EAAE,MAAM,CAAC,CAAC,IAAI,MAAM,IAAI,KAAK,EAAE,CAAC,CAAC;gBACpI,CAAC;YACH,CAAC;YACD,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;gBACzB,GAAG,CAAC,IAAI,CAAC;oBACP,UAAU,EAAE,CAAC,CAAC,UAAU,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI;oBACpE,WAAW,EAAE,CAAC,CAAC,GAAG,CAAC,WAAW,EAAE,SAAS,EAAE,CAAC,CAAC,GAAG,CAAC,SAAS;iBAC3D,CAAC,CAAC;YACL,CAAC;YACD,sCAAsC;YACtC,GAAG,CAAC,IAAI,CACN,EAAE,UAAU,EAAE,gBAAgB,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,QAAQ,EAAE,EACvE,EAAE,UAAU,EAAE,cAAc,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,mBAAmB,EAAE,EAChF,EAAE,UAAU,EAAE,gBAAgB,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,gBAAgB,EAAE,CAChF,CAAC;YACF,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,iBAAiB,IAAI,EAAE;gBAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAC1D,OAAO,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC;QACtE,CAAC;QACD,iBAAiB,EAAE,GAAG,EAAE,CACtB,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,SAAS,CAAC,KAAK,UAAU,CAAC;KACrF,CAAC;IACF,OAAO,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;AACjC,CAAC;AAED,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC"}

package/dist/relations.d.ts

@@ -0,0 +1,14 @@
+import type { Kysely, Transaction } from 'kysely';
+import type { AnyAggregate } from './primitives/aggregate.js';
+import type { Registry } from './registry.js';
+import type { Ctx } from './types.js';
+export declare const relationTable: (owner: AnyAggregate, field: string) => {
+    schema: "core" | "sys";
+    name: string;
+};
+/** 命令/已声明读依赖的内部快照包含完整关联 ID，才能保留未被本次命令修改的关系。
+ * 对外读侧不使用此函数，而通过安全视图分页读取目标对象。 */
+export declare function loadRelationIds(tx: Kysely<any> | Transaction<any>, owner: AnyAggregate, rows: Record<string, any>[], ctx: Ctx): Promise<Record<string, any>[]>;
+/** 只校验新增的目标：无关字段更新不应因旧目标当前不可见而失败或丢失旧关系。
+ * 新增目标必须可选择且属于同一租户；数据库的复合外键再保证持久化一致性。 */
+export declare function writeRelations(tx: Transaction<any>, reg: Registry, owner: AnyAggregate, previous: Record<string, any>, next: Record<string, any>, ctx: Ctx): Promise<void>;

package/dist/relations.js

@@ -0,0 +1,58 @@
+import { cageError } from './errors.js';
+import { compileScope } from './scope/index.js';
+import { snake } from './util/names.js';
+export const relationTable = (owner, field) => ({
+    schema: owner.table.schema,
+    name: `${owner.table.name}__${snake(field)}`,
+});
+/** 命令/已声明读依赖的内部快照包含完整关联 ID，才能保留未被本次命令修改的关系。
+ * 对外读侧不使用此函数，而通过安全视图分页读取目标对象。 */
+export async function loadRelationIds(tx, owner, rows, ctx) {
+    if (!rows.length)
+        return rows;
+    for (const [key, field] of Object.entries(owner.fields)) {
+        if (field.kind !== 'manyToMany')
+            continue;
+        const table = relationTable(owner, key);
+        const links = await tx.selectFrom(`${table.schema}.${table.name}`)
+            .select(['source_id', 'target_id']).where('tenant_id', '=', ctx.tenantId)
+            .where('source_id', 'in', rows.map((row) => row.id)).orderBy('target_id').execute();
+        const byId = new Map(rows.map((row) => [row.id, row]));
+        for (const row of rows)
+            row[key] = [];
+        for (const link of links)
+            byId.get(link.source_id)[key].push(link.target_id);
+    }
+    return rows;
+}
+/** 只校验新增的目标：无关字段更新不应因旧目标当前不可见而失败或丢失旧关系。
+ * 新增目标必须可选择且属于同一租户；数据库的复合外键再保证持久化一致性。 */
+export async function writeRelations(tx, reg, owner, previous, next, ctx) {
+    for (const [key, field] of Object.entries(owner.fields)) {
+        if (field.kind !== 'manyToMany')
+            continue;
+        const before = previous[key] ?? [];
+        const after = next[key];
+        if (JSON.stringify(before) === JSON.stringify(after))
+            continue;
+        const added = after.filter((id) => !before.includes(id));
+        if (added.length) {
+            const target = reg.aggregate(field.ref);
+            if (ctx.actor?.kind === 'user' && !ctx.capabilities.has(`${target.name}.read`))
+                throw cageError('FORBIDDEN', { capability: `${target.name}.read` });
+            const visible = await tx.selectFrom(`${target.table.schema}.${target.table.name} as target`)
+                .select('target.id').where('target.id', 'in', added)
+                .where('target.status', '<>', 'deleted')
+                .where(compileScope(target.scope, target.name, ctx, 'target')).forKeyShare().execute();
+            if (visible.length !== added.length)
+                throw cageError('NOT_FOUND');
+        }
+        const table = relationTable(owner, key);
+        await tx.deleteFrom(`${table.schema}.${table.name}`)
+            .where('tenant_id', '=', ctx.tenantId).where('source_id', '=', next.id).execute();
+        if (after.length)
+            await tx.insertInto(`${table.schema}.${table.name}`)
+                .values(after.map((id) => ({ tenant_id: ctx.tenantId, source_id: next.id, target_id: id }))).execute();
+    }
+}
+//# sourceMappingURL=relations.js.map

package/dist/relations.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"relations.js","sourceRoot":"","sources":["../src/relations.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AACxC,OAAO,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAChD,OAAO,EAAE,KAAK,EAAE,MAAM,iBAAiB,CAAC;AAGxC,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,KAAmB,EAAE,KAAa,EAAE,EAAE,CAAC,CAAC;IACpE,MAAM,EAAE,KAAK,CAAC,KAAK,CAAC,MAAM;IAC1B,IAAI,EAAE,GAAG,KAAK,CAAC,KAAK,CAAC,IAAI,KAAK,KAAK,CAAC,KAAK,CAAC,EAAE;CAC7C,CAAC,CAAC;AAEH;iCACiC;AACjC,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,EAAkC,EAAE,KAAmB,EACvD,IAA2B,EAAE,GAAQ;IAErC,IAAI,CAAC,IAAI,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IAC9B,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,MAAgB,CAAC,EAAE,CAAC;QAClE,IAAI,KAAK,CAAC,IAAI,KAAK,YAAY;YAAE,SAAS;QAC1C,MAAM,KAAK,GAAG,aAAa,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QACxC,MAAM,KAAK,GAAG,MAAM,EAAE,CAAC,UAAU,CAAC,GAAG,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC;aAC/D,MAAM,CAAC,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,EAAE,GAAG,EAAE,GAAG,CAAC,QAAQ,CAAC;aACxE,KAAK,CAAC,WAAW,EAAE,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,OAAO,EAAE,CAAC;QACtF,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC;QACvD,KAAK,MAAM,GAAG,IAAI,IAAI;YAAE,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC;QACtC,KAAK,MAAM,IAAI,IAAI,KAAK;YAAE,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAE,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAChF,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;yCACyC;AACzC,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,EAAoB,EAAE,GAAa,EAAE,KAAmB,EACxD,QAA6B,EAAE,IAAyB,EAAE,GAAQ;IAElE,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,MAAgB,CAAC,EAAE,CAAC;QAClE,IAAI,KAAK,CAAC,IAAI,KAAK,YAAY;YAAE,SAAS;QAC1C,MAAM,MAAM,GAAa,QAAQ,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;QAC7C,MAAM,KAAK,GAAa,IAAI,CAAC,GAAG,CAAC,CAAC;QAClC,IAAI,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC;YAAE,SAAS;QAC/D,MAAM,KAAK,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC;QACzD,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;YACjB,MAAM,MAAM,GAAG,GAAG,CAAC,SAAS,CAAC,KAAK,CAAC,GAAI,CAAE,CAAC;YAC1C,IAAI,GAAG,CAAC,KAAK,EAAE,IAAI,KAAK,MAAM,IAAI,CAAC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,IAAI,OAAO,CAAC;gBAC5E,MAAM,SAAS,CAAC,WAAW,EAAE,EAAE,UAAU,EAAE,GAAG,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC,CAAC;YACtE,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,UAAU,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,YAAY,CAAC;iBACzF,MAAM,CAAC,WAAW,CAAC,CAAC,KAAK,CAAC,WAAW,EAAE,IAAI,EAAE,KAAK,CAAC;iBACnD,KAAK,CAAC,eAAe,EAAE,IAAI,EAAE,SAAS,CAAC;iBACvC,KAAK,CAAC,YAAY,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,IAAI,EAAE,GAAG,EAAE,QAAQ,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,OAAO,EAAE,CAAC;YACzF,IAAI,OAAO,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM;gBAAE,MAAM,SAAS,CAAC,WAAW,CAAC,CAAC;QACpE,CAAC;QACD,MAAM,KAAK,GAAG,aAAa,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QACxC,MAAM,EAAE,CAAC,UAAU,CAAC,GAAG,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC;aACjD,KAAK,CAAC,WAAW,EAAE,GAAG,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAC,KAAK,CAAC,WAAW,EAAE,GAAG,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC;QACpF,IAAI,KAAK,CAAC,MAAM;YAAE,MAAM,EAAE,CAAC,UAAU,CAAC,GAAG,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC;iBACnE,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,SAAS,EAAE,GAAG,CAAC,QAAQ,EAAE,SAAS,EAAE,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;IAC3G,CAAC;AACH,CAAC"}

package/dist/scope/index.d.ts

@@ -0,0 +1,42 @@
+import { type RawBuilder } from 'kysely';
+import type { Combinator, Ctx, ScopeGrant } from '../types.js';
+export interface ScopeSpec {
+    /** 部门字段（dept、deptSubtree、deptSet 依赖它） */
+    readonly deptField?: string;
+    /** 创建人字段（self 依赖它） */
+    readonly ownerField?: string;
+    /** 声明时给出的建议组合子，仅用于文档与状态图 */
+    readonly hint?: Combinator;
+}
+/**
+ * 范围声明：
+ *   scope.deptSubtree('deptId')            部门字段是 deptId，创建人字段自动识别 createdBy
+ *   scope.self('createdBy')                只有创建人字段
+ *   scope.of({ dept: 'deptId', owner: 'ownerId' })
+ *   scope.none()                           没有部门和创建人字段（只能授予 all）
+ */
+export declare const scope: {
+    self: (ownerField?: string) => ScopeSpec;
+    dept: (deptField: string, ownerField?: string) => ScopeSpec;
+    deptSubtree: (deptField: string, ownerField?: string) => ScopeSpec;
+    deptSet: (deptField: string, ownerField?: string) => ScopeSpec;
+    all: () => ScopeSpec;
+    of: (f: {
+        dept?: string;
+        owner?: string;
+    }) => ScopeSpec;
+    none: () => ScopeSpec;
+};
+/** 没有任何授权时按「仅本人」处理（默认拒绝的一部分） */
+export declare const DEFAULT_GRANTS: ScopeGrant[];
+export declare function grantsFor(ctx: Ctx, aggName: string): ScopeGrant[];
+/** 把一个组合子翻译成参数化 SQL 条件。字段名用 sql.ref 引用，值全部参数化，没有字符串拼接。 */
+export declare function compileGrant(s: ScopeSpec, g: ScopeGrant, ctx: Ctx, alias?: string): RawBuilder<boolean>;
+/** 多个授权取并集：用 OR 连接；外层始终加租户条件。 */
+export declare function compileScope(s: ScopeSpec, aggName: string, ctx: Ctx, alias?: string): RawBuilder<boolean>;
+/**
+ * 内存判定：与 SQL 翻译语义一致。deptSubtree 需要知道记录所在部门的祖先路径，由调用方提供。
+ */
+export declare function scopeMatches(s: ScopeSpec, aggName: string, ctx: Ctx, row: Record<string, unknown> & {
+    tenantId?: string;
+}, deptAncestorsOf?: (deptId: string) => string | undefined): boolean;

package/dist/scope/index.js

@@ -0,0 +1,90 @@
+// 数据范围：聚合声明「哪个字段是部门、哪个字段是创建人」，授权数据决定用哪个组合子。
+// 每个组合子都有 SQL 翻译（compileScope）和内存判定（scopeMatches），两者语义一致。
+import { sql } from 'kysely';
+import { snake } from '../util/names.js';
+function spec(hint, deptField, ownerField) {
+    return Object.freeze({ deptField, ownerField, hint });
+}
+/**
+ * 范围声明：
+ *   scope.deptSubtree('deptId')            部门字段是 deptId，创建人字段自动识别 createdBy
+ *   scope.self('createdBy')                只有创建人字段
+ *   scope.of({ dept: 'deptId', owner: 'ownerId' })
+ *   scope.none()                           没有部门和创建人字段（只能授予 all）
+ */
+export const scope = {
+    self: (ownerField = 'createdBy') => spec('self', undefined, ownerField),
+    dept: (deptField, ownerField) => spec('dept', deptField, ownerField),
+    deptSubtree: (deptField, ownerField) => spec('deptSubtree', deptField, ownerField),
+    deptSet: (deptField, ownerField) => spec('deptSet', deptField, ownerField),
+    all: () => spec('all'),
+    of: (f) => spec(undefined, f.dept, f.owner),
+    none: () => spec(undefined),
+};
+/** 没有任何授权时按「仅本人」处理（默认拒绝的一部分） */
+export const DEFAULT_GRANTS = [{ combinator: 'self' }];
+export function grantsFor(ctx, aggName) {
+    const g = ctx.scopes[aggName] ?? ctx.scopes['*'];
+    return g && g.length > 0 ? g : DEFAULT_GRANTS;
+}
+/** 把一个组合子翻译成参数化 SQL 条件。字段名用 sql.ref 引用，值全部参数化，没有字符串拼接。 */
+export function compileGrant(s, g, ctx, alias) {
+    const col = (field) => sql.ref(alias ? `${alias}.${snake(field)}` : snake(field));
+    switch (g.combinator) {
+        case 'all':
+            return sql `true`;
+        case 'self': {
+            const who = ctx.userId ?? ctx.onBehalfOf ?? null;
+            return s.ownerField && who ? sql `${col(s.ownerField)} = ${who}` : sql `false`;
+        }
+        case 'dept':
+            return s.deptField && ctx.deptId ? sql `${col(s.deptField)} = ${ctx.deptId}` : sql `false`;
+        case 'deptSubtree':
+            return s.deptField && ctx.deptPath
+                ? sql `${col(s.deptField)} in (select d.id from sys.dept d where d.tenant_id = ${ctx.tenantId} and d.ancestors like ${ctx.deptPath + '%'})`
+                : sql `false`;
+        case 'deptSet':
+            return s.deptField && g.deptIds && g.deptIds.length > 0
+                ? sql `${col(s.deptField)} = any(${g.deptIds}::uuid[])`
+                : sql `false`;
+        default:
+            throw new Error('[CAGE-SCOPE-001] 未知的范围组合子');
+    }
+}
+/** 多个授权取并集：用 OR 连接；外层始终加租户条件。 */
+export function compileScope(s, aggName, ctx, alias) {
+    const grants = grantsFor(ctx, aggName);
+    const parts = grants.map((g) => compileGrant(s, g, ctx, alias));
+    const tenantCol = sql.ref(alias ? `${alias}.tenant_id` : 'tenant_id');
+    return sql `(${tenantCol} = ${ctx.tenantId} and (${sql.join(parts, sql ` or `)}))`;
+}
+/**
+ * 内存判定：与 SQL 翻译语义一致。deptSubtree 需要知道记录所在部门的祖先路径，由调用方提供。
+ */
+export function scopeMatches(s, aggName, ctx, row, deptAncestorsOf) {
+    if (row.tenantId !== undefined && row.tenantId !== ctx.tenantId)
+        return false;
+    return grantsFor(ctx, aggName).some((g) => {
+        switch (g.combinator) {
+            case 'all':
+                return true;
+            case 'self': {
+                const who = ctx.userId ?? ctx.onBehalfOf ?? null;
+                return !!s.ownerField && !!who && row[s.ownerField] === who;
+            }
+            case 'dept':
+                return !!s.deptField && !!ctx.deptId && row[s.deptField] === ctx.deptId;
+            case 'deptSubtree': {
+                if (!s.deptField || !ctx.deptPath)
+                    return false;
+                const anc = deptAncestorsOf?.(String(row[s.deptField]));
+                return !!anc && anc.startsWith(ctx.deptPath);
+            }
+            case 'deptSet':
+                return !!s.deptField && !!g.deptIds?.includes(String(row[s.deptField]));
+            default:
+                return false;
+        }
+    });
+}
+//# sourceMappingURL=index.js.map

package/dist/scope/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/scope/index.ts"],"names":[],"mappings":"AAAA,4CAA4C;AAC5C,0DAA0D;AAC1D,OAAO,EAAE,GAAG,EAAmB,MAAM,QAAQ,CAAC;AAE9C,OAAO,EAAE,KAAK,EAAE,MAAM,kBAAkB,CAAC;AAWzC,SAAS,IAAI,CAAC,IAA4B,EAAE,SAAkB,EAAE,UAAmB;IACjF,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC;AACxD,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,KAAK,GAAG;IACnB,IAAI,EAAE,CAAC,UAAU,GAAG,WAAW,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,EAAE,SAAS,EAAE,UAAU,CAAC;IACvE,IAAI,EAAE,CAAC,SAAiB,EAAE,UAAmB,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,EAAE,SAAS,EAAE,UAAU,CAAC;IACrF,WAAW,EAAE,CAAC,SAAiB,EAAE,UAAmB,EAAE,EAAE,CAAC,IAAI,CAAC,aAAa,EAAE,SAAS,EAAE,UAAU,CAAC;IACnG,OAAO,EAAE,CAAC,SAAiB,EAAE,UAAmB,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,EAAE,SAAS,EAAE,UAAU,CAAC;IAC3F,GAAG,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC;IACtB,EAAE,EAAE,CAAC,CAAoC,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC;IAC9E,IAAI,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC;CAC5B,CAAC;AAEF,gCAAgC;AAChC,MAAM,CAAC,MAAM,cAAc,GAAiB,CAAC,EAAE,UAAU,EAAE,MAAM,EAAE,CAAC,CAAC;AAErE,MAAM,UAAU,SAAS,CAAC,GAAQ,EAAE,OAAe;IACjD,MAAM,CAAC,GAAG,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IACjD,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC;AAChD,CAAC;AAED,0DAA0D;AAC1D,MAAM,UAAU,YAAY,CAAC,CAAY,EAAE,CAAa,EAAE,GAAQ,EAAE,KAAc;IAChF,MAAM,GAAG,GAAG,CAAC,KAAa,EAAE,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,KAAK,IAAI,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC;IAC1F,QAAQ,CAAC,CAAC,UAAU,EAAE,CAAC;QACrB,KAAK,KAAK;YACR,OAAO,GAAG,CAAS,MAAM,CAAC;QAC5B,KAAK,MAAM,CAAC,CAAC,CAAC;YACZ,MAAM,GAAG,GAAG,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,UAAU,IAAI,IAAI,CAAC;YACjD,OAAO,CAAC,CAAC,UAAU,IAAI,GAAG,CAAC,CAAC,CAAC,GAAG,CAAS,GAAG,GAAG,CAAC,CAAC,CAAC,UAAU,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC,CAAC,GAAG,CAAS,OAAO,CAAC;QACjG,CAAC;QACD,KAAK,MAAM;YACT,OAAO,CAAC,CAAC,SAAS,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAS,GAAG,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,GAAG,CAAS,OAAO,CAAC;QAC7G,KAAK,aAAa;YAChB,OAAO,CAAC,CAAC,SAAS,IAAI,GAAG,CAAC,QAAQ;gBAChC,CAAC,CAAC,GAAG,CAAS,GAAG,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,wDAAwD,GAAG,CAAC,QAAQ,yBAAyB,GAAG,CAAC,QAAQ,GAAG,GAAG,GAAG;gBACnJ,CAAC,CAAC,GAAG,CAAS,OAAO,CAAC;QAC1B,KAAK,SAAS;YACZ,OAAO,CAAC,CAAC,SAAS,IAAI,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC;gBACrD,CAAC,CAAC,GAAG,CAAS,GAAG,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC,OAAO,WAAW;gBAC/D,CAAC,CAAC,GAAG,CAAS,OAAO,CAAC;QAC1B;YACE,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;IACjD,CAAC;AACH,CAAC;AAED,iCAAiC;AACjC,MAAM,UAAU,YAAY,CAAC,CAAY,EAAE,OAAe,EAAE,GAAQ,EAAE,KAAc;IAClF,MAAM,MAAM,GAAG,SAAS,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;IACvC,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,YAAY,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC;IAChE,MAAM,SAAS,GAAG,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,KAAK,YAAY,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC;IACtE,OAAO,GAAG,CAAS,IAAI,SAAS,MAAM,GAAG,CAAC,QAAQ,SAAS,GAAG,CAAC,IAAI,CAAC,KAAK,EAAE,GAAG,CAAA,MAAM,CAAC,IAAI,CAAC;AAC5F,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,YAAY,CAC1B,CAAY,EACZ,OAAe,EACf,GAAQ,EACR,GAAoD,EACpD,eAAwD;IAExD,IAAI,GAAG,CAAC,QAAQ,KAAK,SAAS,IAAI,GAAG,CAAC,QAAQ,KAAK,GAAG,CAAC,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC9E,OAAO,SAAS,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE;QACxC,QAAQ,CAAC,CAAC,UAAU,EAAE,CAAC;YACrB,KAAK,KAAK;gBACR,OAAO,IAAI,CAAC;YACd,KAAK,MAAM,CAAC,CAAC,CAAC;gBACZ,MAAM,GAAG,GAAG,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,UAAU,IAAI,IAAI,CAAC;gBACjD,OAAO,CAAC,CAAC,CAAC,CAAC,UAAU,IAAI,CAAC,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,CAAC,UAAU,CAAC,KAAK,GAAG,CAAC;YAC9D,CAAC;YACD,KAAK,MAAM;gBACT,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS,IAAI,CAAC,CAAC,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,KAAK,GAAG,CAAC,MAAM,CAAC;YAC1E,KAAK,aAAa,CAAC,CAAC,CAAC;gBACnB,IAAI,CAAC,CAAC,CAAC,SAAS,IAAI,CAAC,GAAG,CAAC,QAAQ;oBAAE,OAAO,KAAK,CAAC;gBAChD,MAAM,GAAG,GAAG,eAAe,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;gBACxD,OAAO,CAAC,CAAC,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;YAC/C,CAAC;YACD,KAAK,SAAS;gBACZ,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS,IAAI,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;YAC1E;gBACE,OAAO,KAAK,CAAC;QACjB,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/telemetry.d.ts

@@ -0,0 +1,11 @@
+export declare function step<T>(name: string, fn: () => Promise<T>): Promise<T>;
+export declare function traceCarrier(): Record<string, string>;
+export declare function withCarrier<T>(carrier: Record<string, string> | null | undefined, fn: () => Promise<T>): Promise<T>;
+export interface Logger {
+    info(obj: object | string, msg?: string): void;
+    warn(obj: object | string, msg?: string): void;
+    error(obj: object | string, msg?: string): void;
+    debug?(obj: object | string, msg?: string): void;
+}
+export declare const consoleLogger: Logger;
+export declare const silentLogger: Logger;

package/dist/telemetry.js

@@ -0,0 +1,35 @@
+// 链路追踪：流水线每一关一个 span；写 outbox 时把链路上下文带上，worker 处理时接上。
+import { context, propagation, trace } from '@opentelemetry/api';
+const tracer = trace.getTracer('cage');
+export async function step(name, fn) {
+    return tracer.startActiveSpan(`cage.${name}`, async (span) => {
+        try {
+            return await fn();
+        }
+        catch (e) {
+            span.recordException(e);
+            throw e;
+        }
+        finally {
+            span.end();
+        }
+    });
+}
+export function traceCarrier() {
+    const carrier = {};
+    propagation.inject(context.active(), carrier);
+    return carrier;
+}
+export function withCarrier(carrier, fn) {
+    if (!carrier)
+        return fn();
+    const ctx = propagation.extract(context.active(), carrier);
+    return context.with(ctx, fn);
+}
+export const consoleLogger = {
+    info: (o, m) => console.log(m ?? '', typeof o === 'string' ? o : JSON.stringify(o)),
+    warn: (o, m) => console.warn(m ?? '', typeof o === 'string' ? o : JSON.stringify(o)),
+    error: (o, m) => console.error(m ?? '', typeof o === 'string' ? o : JSON.stringify(o)),
+};
+export const silentLogger = { info() { }, warn() { }, error() { } };
+//# sourceMappingURL=telemetry.js.map

package/dist/telemetry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"telemetry.js","sourceRoot":"","sources":["../src/telemetry.ts"],"names":[],"mappings":"AAAA,sDAAsD;AACtD,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAEjE,MAAM,MAAM,GAAG,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;AAEvC,MAAM,CAAC,KAAK,UAAU,IAAI,CAAI,IAAY,EAAE,EAAoB;IAC9D,OAAO,MAAM,CAAC,eAAe,CAAC,QAAQ,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;QAC3D,IAAI,CAAC;YACH,OAAO,MAAM,EAAE,EAAE,CAAC;QACpB,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,IAAI,CAAC,eAAe,CAAC,CAAU,CAAC,CAAC;YACjC,MAAM,CAAC,CAAC;QACV,CAAC;gBAAS,CAAC;YACT,IAAI,CAAC,GAAG,EAAE,CAAC;QACb,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,YAAY;IAC1B,MAAM,OAAO,GAA2B,EAAE,CAAC;IAC3C,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,OAAO,CAAC,CAAC;IAC9C,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,UAAU,WAAW,CAAI,OAAkD,EAAE,EAAoB;IACrG,IAAI,CAAC,OAAO;QAAE,OAAO,EAAE,EAAE,CAAC;IAC1B,MAAM,GAAG,GAAG,WAAW,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,OAAO,CAAC,CAAC;IAC3D,OAAO,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;AAC/B,CAAC;AASD,MAAM,CAAC,MAAM,aAAa,GAAW;IACnC,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;IACnF,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;IACpF,KAAK,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;CACvF,CAAC;AAEF,MAAM,CAAC,MAAM,YAAY,GAAW,EAAE,IAAI,KAAI,CAAC,EAAE,IAAI,KAAI,CAAC,EAAE,KAAK,KAAI,CAAC,EAAE,CAAC"}

package/dist/transfer/csv.d.ts

@@ -0,0 +1,8 @@
+import { z } from 'zod';
+export declare const MAX_IMPORT_BYTES = 1048576;
+export declare const MAX_IMPORT_ROWS = 1000;
+export declare function csvCell(value: unknown): string;
+/** 接受 UTF-8 BOM、CRLF、引号内换行和双引号转义；拒绝歧义输入，不静默修正错列。 */
+export declare function parseCsv(text: string): string[][];
+export declare function importShape(schema: z.ZodType): Record<string, z.ZodType>;
+export declare function csvInputs(text: string, schema: z.ZodType): Record<string, unknown>[];

package/dist/transfer/csv.js

@@ -0,0 +1,114 @@
+// CSV 是传输格式，不是一条新的写入通道：这里只拆分单元格、按命令输入类型转换，
+// 必填、长度、业务约束仍由 worker 调用原命令时统一检查。
+import { z } from 'zod';
+import { cageError } from '../errors.js';
+export const MAX_IMPORT_BYTES = 1_048_576;
+export const MAX_IMPORT_ROWS = 1000;
+export function csvCell(value) {
+    const text = value == null ? '' : typeof value === 'object' ? JSON.stringify(value) : String(value);
+    // 表格软件会执行以这些字符开头的单元格。导出文件用于查看，不能把公式当作数据执行。
+    const safe = /^[=+\-@\t\r]/.test(text) ? `'${text}` : text;
+    return /[",\r\n]/.test(safe) ? `"${safe.replace(/"/g, '""')}"` : safe;
+}
+function invalid(message) { throw cageError('INVALID_INPUT', message); }
+/** 接受 UTF-8 BOM、CRLF、引号内换行和双引号转义；拒绝歧义输入，不静默修正错列。 */
+export function parseCsv(text) {
+    if (Buffer.byteLength(text, 'utf8') > MAX_IMPORT_BYTES)
+        invalid('CSV 文件不能超过 1 MiB');
+    text = text.replace(/^\uFEFF/, '');
+    const rows = [];
+    let row = [], cell = '', quoted = false, closed = false;
+    const endRow = () => {
+        row.push(cell);
+        if (row.length !== 1 || row[0] !== '')
+            rows.push(row);
+        if (rows.length > MAX_IMPORT_ROWS + 1)
+            invalid(`一次最多导入 ${MAX_IMPORT_ROWS} 行`);
+        row = [];
+        cell = '';
+        closed = false;
+    };
+    for (let i = 0; i < text.length; i++) {
+        const ch = text[i];
+        if (quoted) {
+            if (ch !== '"')
+                cell += ch;
+            else if (text[i + 1] === '"') {
+                cell += '"';
+                i++;
+            }
+            else {
+                quoted = false;
+                closed = true;
+            }
+        }
+        else if (ch === ',') {
+            row.push(cell);
+            cell = '';
+            closed = false;
+        }
+        else if (ch === '\n' || ch === '\r') {
+            if (ch === '\r' && text[i + 1] === '\n')
+                i++;
+            endRow();
+        }
+        else if (ch === '"' && !cell && !closed)
+            quoted = true;
+        else if (closed || ch === '"')
+            invalid('CSV 引号格式错误');
+        else
+            cell += ch;
+    }
+    if (quoted)
+        invalid('CSV 存在未闭合的引号');
+    if (cell || row.length || closed)
+        endRow();
+    if (rows.length < 2)
+        invalid('CSV 需要表头和至少一行数据');
+    if (new Set(rows[0]).size !== rows[0].length || rows[0].some((v) => !v))
+        invalid('CSV 表头不能为空或重复');
+    for (let i = 1; i < rows.length; i++)
+        if (rows[i].length !== rows[0].length)
+            invalid(`第 ${i + 1} 条 CSV 记录的列数与表头不一致`);
+    return rows;
+}
+/** 只剥掉输入外壳；复杂联合类型保持字符串，由命令自己的 schema 给出校验结果。 */
+function inner(schema) {
+    if (schema instanceof z.ZodOptional || schema instanceof z.ZodNullable || schema instanceof z.ZodDefault)
+        return inner(schema.unwrap());
+    return schema;
+}
+export function importShape(schema) {
+    if (!(schema instanceof z.ZodObject))
+        invalid('CSV 导入要求命令使用 z.object 声明输入');
+    return { ...schema.shape, expectedVersion: z.number().int().optional() };
+}
+export function csvInputs(text, schema) {
+    const [headers, ...rows] = parseCsv(text);
+    const shape = importShape(schema);
+    for (const header of headers)
+        if (!Object.hasOwn(shape, header))
+            invalid(`命令输入中没有字段 ${header}`);
+    return rows.map((cells) => Object.fromEntries(headers.flatMap((header, index) => {
+        const value = cells[index], field = shape[header], type = inner(field);
+        // 空的可选列表示不提供，避免把“保持原值”误解释成“清空字段”。
+        if (value === '' && field.isOptional())
+            return [];
+        let parsed = value;
+        if (type instanceof z.ZodNumber && value.trim() !== '')
+            parsed = Number(value);
+        else if (type instanceof z.ZodBoolean && ['true', 'false'].includes(value))
+            parsed = value === 'true';
+        else if (type instanceof z.ZodArray || type instanceof z.ZodObject || type instanceof z.ZodRecord || (field.isNullable() && value === 'null')) {
+            // JSON 错误保留原字符串，让该行在命令校验阶段失败，不丢掉其他正确行。
+            try {
+                parsed = JSON.parse(value);
+            }
+            catch {
+                parsed = value;
+            }
+        }
+        return [[header, parsed]];
+    })));
+}
+//# sourceMappingURL=csv.js.map

package/dist/transfer/csv.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"csv.js","sourceRoot":"","sources":["../../src/transfer/csv.ts"],"names":[],"mappings":"AAAA,2CAA2C;AAC3C,kCAAkC;AAClC,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AAEzC,MAAM,CAAC,MAAM,gBAAgB,GAAG,SAAS,CAAC;AAC1C,MAAM,CAAC,MAAM,eAAe,GAAG,IAAI,CAAC;AAEpC,MAAM,UAAU,OAAO,CAAC,KAAc;IACpC,MAAM,IAAI,GAAG,KAAK,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACpG,2CAA2C;IAC3C,MAAM,IAAI,GAAG,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;IAC3D,OAAO,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;AACxE,CAAC;AAED,SAAS,OAAO,CAAC,OAAe,IAAW,MAAM,SAAS,CAAC,eAAe,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC;AAEvF,oDAAoD;AACpD,MAAM,UAAU,QAAQ,CAAC,IAAY;IACnC,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,EAAE,MAAM,CAAC,GAAG,gBAAgB;QAAE,OAAO,CAAC,kBAAkB,CAAC,CAAC;IACpF,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;IACnC,MAAM,IAAI,GAAe,EAAE,CAAC;IAC5B,IAAI,GAAG,GAAa,EAAE,EAAE,IAAI,GAAG,EAAE,EAAE,MAAM,GAAG,KAAK,EAAE,MAAM,GAAG,KAAK,CAAC;IAClE,MAAM,MAAM,GAAG,GAAG,EAAE;QAClB,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACf,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,EAAE;YAAE,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACtD,IAAI,IAAI,CAAC,MAAM,GAAG,eAAe,GAAG,CAAC;YAAE,OAAO,CAAC,UAAU,eAAe,IAAI,CAAC,CAAC;QAC9E,GAAG,GAAG,EAAE,CAAC;QAAC,IAAI,GAAG,EAAE,CAAC;QAAC,MAAM,GAAG,KAAK,CAAC;IACtC,CAAC,CAAC;IACF,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACrC,MAAM,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QACnB,IAAI,MAAM,EAAE,CAAC;YACX,IAAI,EAAE,KAAK,GAAG;gBAAE,IAAI,IAAI,EAAE,CAAC;iBACtB,IAAI,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC;gBAAC,IAAI,IAAI,GAAG,CAAC;gBAAC,CAAC,EAAE,CAAC;YAAC,CAAC;iBAC9C,CAAC;gBAAC,MAAM,GAAG,KAAK,CAAC;gBAAC,MAAM,GAAG,IAAI,CAAC;YAAC,CAAC;QACzC,CAAC;aAAM,IAAI,EAAE,KAAK,GAAG,EAAE,CAAC;YAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAAC,IAAI,GAAG,EAAE,CAAC;YAAC,MAAM,GAAG,KAAK,CAAC;QAAC,CAAC;aAChE,IAAI,EAAE,KAAK,IAAI,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC;YACpC,IAAI,EAAE,KAAK,IAAI,IAAI,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,IAAI;gBAAE,CAAC,EAAE,CAAC;YAC7C,MAAM,EAAE,CAAC;QACX,CAAC;aAAM,IAAI,EAAE,KAAK,GAAG,IAAI,CAAC,IAAI,IAAI,CAAC,MAAM;YAAE,MAAM,GAAG,IAAI,CAAC;aACpD,IAAI,MAAM,IAAI,EAAE,KAAK,GAAG;YAAE,OAAO,CAAC,YAAY,CAAC,CAAC;;YAChD,IAAI,IAAI,EAAE,CAAC;IAClB,CAAC;IACD,IAAI,MAAM;QAAE,OAAO,CAAC,cAAc,CAAC,CAAC;IACpC,IAAI,IAAI,IAAI,GAAG,CAAC,MAAM,IAAI,MAAM;QAAE,MAAM,EAAE,CAAC;IAC3C,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,CAAC,iBAAiB,CAAC,CAAC;IAChD,IAAI,IAAI,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC;QAAE,OAAO,CAAC,eAAe,CAAC,CAAC;IAClG,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE;QAAE,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM;YAAE,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAC;IACrH,OAAO,IAAI,CAAC;AACd,CAAC;AAED,gDAAgD;AAChD,SAAS,KAAK,CAAC,MAAiB;IAC9B,IAAI,MAAM,YAAY,CAAC,CAAC,WAAW,IAAI,MAAM,YAAY,CAAC,CAAC,WAAW,IAAI,MAAM,YAAY,CAAC,CAAC,UAAU;QAAE,OAAO,KAAK,CAAC,MAAM,CAAC,MAAM,EAAe,CAAC,CAAC;IACrJ,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,MAAiB;IAC3C,IAAI,CAAC,CAAC,MAAM,YAAY,CAAC,CAAC,SAAS,CAAC;QAAE,OAAO,CAAC,4BAA4B,CAAC,CAAC;IAC5E,OAAO,EAAE,GAAG,MAAM,CAAC,KAAK,EAAE,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC;AAC3E,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,IAAY,EAAE,MAAiB;IACvD,MAAM,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;IAC1C,MAAM,KAAK,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC;IAClC,KAAK,MAAM,MAAM,IAAI,OAAO;QAAE,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC;YAAE,OAAO,CAAC,aAAa,MAAM,EAAE,CAAC,CAAC;IAChG,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE;QAC9E,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,EAAE,KAAK,GAAG,KAAK,CAAC,MAAM,CAAC,EAAE,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC;QACvE,kCAAkC;QAClC,IAAI,KAAK,KAAK,EAAE,IAAI,KAAK,CAAC,UAAU,EAAE;YAAE,OAAO,EAAE,CAAC;QAClD,IAAI,MAAM,GAAY,KAAK,CAAC;QAC5B,IAAI,IAAI,YAAY,CAAC,CAAC,SAAS,IAAI,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE;YAAE,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;aAC1E,IAAI,IAAI,YAAY,CAAC,CAAC,UAAU,IAAI,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC;YAAE,MAAM,GAAG,KAAK,KAAK,MAAM,CAAC;aACjG,IAAI,IAAI,YAAY,CAAC,CAAC,QAAQ,IAAI,IAAI,YAAY,CAAC,CAAC,SAAS,IAAI,IAAI,YAAY,CAAC,CAAC,SAAS,IAAI,CAAC,KAAK,CAAC,UAAU,EAAE,IAAI,KAAK,KAAK,MAAM,CAAC,EAAE,CAAC;YAC9I,uCAAuC;YACvC,IAAI,CAAC;gBAAC,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC;gBAAC,MAAM,GAAG,KAAK,CAAC;YAAC,CAAC;QAC/D,CAAC;QACD,OAAO,CAAC,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IAC5B,CAAC,CAAC,CAAC,CAAC,CAAC;AACP,CAAC"}