@yss123/cage-kernel 0.0.0-stage → 0.2.0

package/dist/transfer/index.d.ts

@@ -0,0 +1,49 @@
+import { z } from 'zod';
+import type { Kernel } from '../kernel.js';
+import type { Ctx } from '../types.js';
+import type { EventConsumer } from '../worker/outbox.js';
+export declare const importRequestSchema: z.ZodObject<{
+    command: z.ZodString;
+    csv: z.ZodString;
+    atomic: z.ZodDefault<z.ZodBoolean>;
+}, z.core.$strict>;
+export interface TransferTask {
+    id: string;
+    kind: 'export' | 'import';
+    target: string;
+    status: 'queued' | 'processing' | 'retrying' | 'completed' | 'failed' | 'expired';
+    createdAt: string;
+    expiresAt: string;
+    finishedAt: string | null;
+    errorCode: string | null;
+    result: {
+        rows: number;
+        succeeded?: number;
+        failed?: number;
+        filename?: string;
+        atomic?: boolean;
+    } | null;
+}
+/**
+ * 原始文件和文件内容不会出现在列表、审计 diff 或 outbox 中。
+ * 队列只携带任务 id；任务查询始终绑定租户和提交人，运维权限也不能下载别人的文件。
+ */
+export declare class DataTransfers {
+    private readonly k;
+    constructor(k: Kernel);
+    export(aggregate: string, params: Record<string, unknown>, ctx: Ctx, key: string): Promise<TransferTask>;
+    import(request: unknown, ctx: Ctx, key: string): Promise<TransferTask>;
+    private enqueue;
+    private own;
+    list(ctx: Ctx, aggregate?: string): Promise<TransferTask[]>;
+    private row;
+    get(id: string, ctx: Ctx): Promise<TransferTask>;
+    download(id: string, ctx: Ctx): Promise<{
+        body: string;
+        filename: string;
+        contentType: string;
+    }>;
+}
+export declare function transferConsumer(k: Kernel): EventConsumer;
+/** 定期清除原文件、结果文件和授权指纹；保留轻量任务记录防止旧幂等键被重复执行。 */
+export declare function expireTransfers(k: Kernel): Promise<void>;

package/dist/transfer/index.js

@@ -0,0 +1,245 @@
+// 导入/导出是内核提供的任务服务，不增加领域原语。业务数据仍只经过安全读侧或命令。
+// outbox 消费事务同时提交导入写入、逐行结果和任务状态：进程崩溃时一起回滚，重投不重复导入。
+import { createHash, randomUUID } from 'node:crypto';
+import { sql } from 'kysely';
+import { z } from 'zod';
+import { cageError, toCageError } from '../errors.js';
+import { loadUserGrants, userCtx } from '../org.js';
+import { stableStringify } from '../util/names.js';
+import { traceCarrier } from '../telemetry.js';
+import { csvInputs, importShape } from './csv.js';
+const EVENT = 'cage:DataTransferRequested';
+const hash = (value) => createHash('sha256').update(stableStringify(value)).digest('hex');
+export const importRequestSchema = z.object({ command: z.string(), csv: z.string(), atomic: z.boolean().default(false) }).strict();
+function requireUser(ctx) {
+    if (ctx.actor?.kind !== 'user' || !ctx.userId)
+        throw cageError('UNAUTHENTICATED');
+    return ctx.userId;
+}
+function requireCap(ctx, capability) {
+    if (!ctx.capabilities.has(capability))
+        throw cageError('FORBIDDEN', { capability });
+}
+async function liveContext(k, userId, tenantId, db = k.app) {
+    const grants = await loadUserGrants(db, userId, tenantId);
+    if (!grants?.active)
+        throw cageError('FORBIDDEN', '用户已被禁用或删除');
+    return userCtx(grants);
+}
+function importCommand(k, capability, ctx) {
+    const command = k.registry.command(capability);
+    if (!command || !command.cmd.invokedBy.includes('user'))
+        throw cageError('NOT_FOUND');
+    requireCap(ctx, capability);
+    importShape(command.cmd.input);
+    return command;
+}
+/** 下载不能沿用排队时保存的授权。范围、明文权限或部门树变化后，旧文件必须重新生成。 */
+async function accessHash(k, ctx, aggregate) {
+    const depts = await k.app.selectFrom('sys.dept').select(['id', 'ancestors', 'status'])
+        .where('tenant_id', '=', ctx.tenantId).orderBy('id').execute();
+    return hash({ user: ctx.userId, dept: ctx.deptId, path: ctx.deptPath, scopes: ctx.scopes[aggregate] ?? ctx.scopes['*'], unmask: [...ctx.unmask].sort(), depts });
+}
+/**
+ * 原始文件和文件内容不会出现在列表、审计 diff 或 outbox 中。
+ * 队列只携带任务 id；任务查询始终绑定租户和提交人，运维权限也不能下载别人的文件。
+ */
+export class DataTransfers {
+    k;
+    constructor(k) {
+        this.k = k;
+    }
+    async export(aggregate, params, ctx, key) {
+        const user = requireUser(ctx), current = await liveContext(this.k, user, ctx.tenantId);
+        if (!this.k.registry.aggregate(aggregate))
+            throw cageError('NOT_FOUND');
+        requireCap(current, `${aggregate}.export`);
+        return this.enqueue('export', aggregate, params, ctx, key);
+    }
+    async import(request, ctx, key) {
+        const user = requireUser(ctx), current = await liveContext(this.k, user, ctx.tenantId);
+        const parsed = importRequestSchema.safeParse(request);
+        if (!parsed.success)
+            throw cageError('INVALID_INPUT', '需要 command、csv 和可选的 atomic 参数');
+        const { command, csv, atomic } = parsed.data;
+        const rc = importCommand(this.k, command, current);
+        // 文件格式错误立即反馈；单行输入或业务错误留给命令校验，在任务结果中报告。
+        csvInputs(csv, rc.cmd.input);
+        return this.enqueue('import', command, { csv, atomic, stepUpAt: ctx.stepUpAt ?? null }, ctx, key);
+    }
+    async enqueue(kind, target, input, ctx, key) {
+        if (!key || key.length > 200)
+            throw cageError('INVALID_INPUT', '请提供不超过 200 字符的 Idempotency-Key');
+        // 二次认证时间属于会话上下文，不属于用户提交的文件；重试时不要因此误报冲突。
+        const { stepUpAt: _, ...requestInput } = input;
+        const requestHash = hash({ kind, target, input: requestInput });
+        const id = await this.k.app.transaction().execute(async (tx) => {
+            const lockKey = `${ctx.tenantId}:${ctx.userId}:${key}`;
+            await sql `select pg_advisory_xact_lock(hashtextextended(${lockKey}, 0))`.execute(tx);
+            const previous = await tx.selectFrom('sys.data_transfer').select(['id', 'request_hash'])
+                .where('tenant_id', '=', ctx.tenantId).where('user_id', '=', ctx.userId).where('idempotency_key', '=', key).executeTakeFirst();
+            if (previous) {
+                if (previous.request_hash !== requestHash)
+                    throw cageError('CONFLICT', '同一幂等键不能提交不同的任务');
+                return previous.id;
+            }
+            const taskId = randomUUID();
+            const outbox = await tx.insertInto('sys.outbox').values({
+                tenant_id: ctx.tenantId, event: EVENT, aggregate: 'DataTransfer', aggregate_id: taskId,
+                payload: JSON.stringify({ taskId }), actor: JSON.stringify(ctx.actor), trace: JSON.stringify(traceCarrier()), request_id: ctx.requestId ?? null,
+            }).returning('id').executeTakeFirstOrThrow();
+            await tx.insertInto('sys.data_transfer').values({
+                id: taskId, tenant_id: ctx.tenantId, user_id: ctx.userId, kind, target,
+                idempotency_key: key, request_hash: requestHash, input: JSON.stringify(input), outbox_id: outbox.id,
+            }).execute();
+            await this.k.writeAudit(tx, {
+                tenantId: ctx.tenantId, actor: ctx.userId, actorKind: 'user', source: kind === 'import' ? 'import' : 'api', kind: 'ops',
+                capability: kind === 'export' ? `${target}.export` : target, command: `dataTransfer.${kind}`, result: 'queued',
+                diff: { taskId }, requestId: ctx.requestId ?? null,
+            });
+            await sql `select pg_notify('cage_outbox', '')`.execute(tx);
+            return taskId;
+        });
+        return this.get(id, ctx);
+    }
+    own(ctx) {
+        return this.k.app.selectFrom('sys.data_transfer as t').innerJoin('sys.outbox as o', 'o.id', 't.outbox_id')
+            .where('t.tenant_id', '=', ctx.tenantId).where('t.user_id', '=', requireUser(ctx));
+    }
+    async list(ctx, aggregate) {
+        let query = this.own(ctx);
+        // 业务列表只需要当前对象的任务；先在数据库筛选再取最近 100 条，
+        // 避免其他页面的任务把当前对象的记录挤出结果集。
+        if (aggregate) {
+            if (!this.k.registry.aggregate(aggregate))
+                throw cageError('NOT_FOUND');
+            query = query.where((eb) => eb.or([eb('t.target', '=', aggregate), eb('t.target', 'like', `${aggregate}.%`)]));
+        }
+        const rows = await query.select(['t.id', 't.kind', 't.target', 't.status', 't.result', 't.error_code', 't.created_at', 't.finished_at', 't.expires_at', 'o.status as delivery', 'o.attempts'])
+            .orderBy('t.created_at', 'desc').limit(100).execute();
+        return rows.map(taskView);
+    }
+    async row(id, ctx) {
+        if (!z.uuid().safeParse(id).success)
+            throw cageError('NOT_FOUND');
+        const row = await this.own(ctx).selectAll('t').select(['o.status as delivery', 'o.attempts']).where('t.id', '=', id).executeTakeFirst();
+        if (!row)
+            throw cageError('NOT_FOUND');
+        return row;
+    }
+    async get(id, ctx) { return taskView(await this.row(id, ctx)); }
+    async download(id, ctx) {
+        const row = await this.row(id, ctx);
+        if (taskView(row).status !== 'completed')
+            throw cageError('INVALID_TRANSITION', '任务尚未完成或文件已过期');
+        const current = await liveContext(this.k, requireUser(ctx), ctx.tenantId);
+        requireCap(current, row.kind === 'export' ? `${row.target}.export` : row.target);
+        if (row.kind === 'export' && row.access_hash !== await accessHash(this.k, current, row.target)) {
+            throw cageError('FORBIDDEN', '数据范围或明文权限已经变化，请重新导出');
+        }
+        await this.k.writeAudit(this.k.app, {
+            tenantId: ctx.tenantId, actor: ctx.userId, actorKind: 'user', source: 'api', kind: 'read',
+            capability: row.kind === 'export' ? `${row.target}.export` : row.target, command: 'dataTransfer.download', result: 'ok', diff: { taskId: id },
+        });
+        return { body: row.file_body, filename: row.result.filename, contentType: row.kind === 'export' ? 'text/csv; charset=utf-8' : 'application/json; charset=utf-8' };
+    }
+}
+function taskView(row) {
+    const expired = new Date(row.expires_at).getTime() <= Date.now();
+    const status = expired ? 'expired' : row.status !== 'queued' ? row.status : row.delivery === 'dead' || row.delivery === 'done' ? 'failed' : row.delivery === 'processing' ? 'processing' : row.attempts > 0 ? 'retrying' : 'queued';
+    return {
+        id: row.id, kind: row.kind, target: row.target, status, result: expired ? null : row.result,
+        createdAt: new Date(row.created_at).toISOString(), expiresAt: new Date(row.expires_at).toISOString(),
+        finishedAt: row.finished_at ? new Date(row.finished_at).toISOString() : null, errorCode: row.error_code ?? (status === 'failed' ? 'INTERNAL' : null),
+    };
+}
+/**
+ * 保存点让错误行只回滚自己的写入（含审计和同事务反应）。
+ * 整批模式再包一层保存点；出错时撤销全部业务写入，但保留每行的失败报告。
+ * 不保存命令返回快照或输入值，避免权限日后收回后从结果文件读到敏感内容。
+ */
+async function runImport(k, tx, task, ctx) {
+    const rc = importCommand(k, task.target, ctx);
+    const inputs = csvInputs(task.input.csv, rc.cmd.input);
+    const results = [];
+    await sql `savepoint cage_import_batch`.execute(tx);
+    for (const [index, input] of inputs.entries()) {
+        await sql `savepoint cage_import_row`.execute(tx);
+        try {
+            await k.executeIn(tx, rc.cmd, input, ctx);
+            results.push({ row: index + 2, ok: true });
+        }
+        catch (err) {
+            await sql `rollback to savepoint cage_import_row`.execute(tx);
+            const error = toCageError(err);
+            // 程序错误、连接故障和死锁属于任务失败，交给 outbox 重试，不能伪装成坏数据行。
+            if (error.code === 'INTERNAL' || ['40001', '40P01'].includes(err?.code))
+                throw err;
+            // 只报告出错的输入字段名，不保存原始值、数据库错误文本或完整领域错误 detail。
+            const fields = error.code === 'INVALID_INPUT' && Array.isArray(error.detail)
+                ? error.detail.filter((issue) => typeof issue.path === 'string').map((issue) => issue.path) : [];
+            results.push({ row: index + 2, ok: false, code: error.code,
+                ...(error.domainCode ? { domainCode: error.domainCode } : {}), ...(fields.length ? { fields } : {}) });
+        }
+        await sql `release savepoint cage_import_row`.execute(tx);
+    }
+    if (task.input.atomic && results.some((r) => !r.ok)) {
+        await sql `rollback to savepoint cage_import_batch`.execute(tx);
+        for (const row of results)
+            if (row.ok) {
+                row.ok = false;
+                row.code = 'ABORTED';
+            }
+    }
+    await sql `release savepoint cage_import_batch`.execute(tx);
+    const succeeded = results.filter((r) => r.ok).length;
+    const result = { rows: results.length, succeeded, failed: results.length - succeeded, atomic: task.input.atomic, filename: `import-${task.id}.json` };
+    return { result, body: JSON.stringify({ ...result, results }, null, 2), access: null };
+}
+export function transferConsumer(k) {
+    return {
+        name: 'cage:data-transfer', event: EVENT,
+        async handle(event, tx) {
+            const task = await tx.selectFrom('sys.data_transfer').selectAll().where('id', '=', event.aggregate_id)
+                .where('tenant_id', '=', event.tenant_id).forUpdate().executeTakeFirstOrThrow();
+            if (task.status !== 'queued')
+                return;
+            if (new Date(task.expires_at).getTime() <= Date.now()) {
+                await tx.updateTable('sys.data_transfer').set({ status: 'expired', input: null }).where('id', '=', task.id).execute();
+                return;
+            }
+            // 整个任务的业务失败也使用保存点，使 PostgreSQL 错误后仍能可靠记录失败状态。
+            await sql `savepoint cage_transfer`.execute(tx);
+            try {
+                const ctx = await liveContext(k, task.user_id, task.tenant_id, tx);
+                ctx.requestId = event.request_id ?? undefined;
+                ctx.source = task.kind === 'import' ? 'import' : 'api';
+                ctx.stepUpAt = task.input.stepUpAt;
+                let output;
+                if (task.kind === 'export') {
+                    const access = await accessHash(k, ctx, task.target);
+                    const file = await k.read.export(task.target, task.input, ctx);
+                    output = { result: { rows: file.rows, filename: file.filename }, body: file.body, access };
+                }
+                else
+                    output = await runImport(k, tx, task, ctx);
+                await tx.updateTable('sys.data_transfer').set({ status: 'completed', result: JSON.stringify(output.result), file_body: output.body,
+                    access_hash: output.access, input: null, finished_at: sql `now()` }).where('id', '=', task.id).execute();
+            }
+            catch (err) {
+                await sql `rollback to savepoint cage_transfer`.execute(tx);
+                const error = toCageError(err);
+                if (error.code === 'INTERNAL' || error.code === 'CONFLICT')
+                    throw err;
+                await tx.updateTable('sys.data_transfer').set({ status: 'failed', error_code: error.code, input: null, finished_at: sql `now()` }).where('id', '=', task.id).execute();
+            }
+            await sql `release savepoint cage_transfer`.execute(tx);
+        },
+    };
+}
+/** 定期清除原文件、结果文件和授权指纹；保留轻量任务记录防止旧幂等键被重复执行。 */
+export async function expireTransfers(k) {
+    await k.app.updateTable('sys.data_transfer').set({ status: 'expired', input: null, file_body: null, result: null, access_hash: null })
+        .where('expires_at', '<=', new Date()).where('status', '<>', 'expired').execute();
+}
+//# sourceMappingURL=index.js.map

package/dist/transfer/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/transfer/index.ts"],"names":[],"mappings":"AAAA,2CAA2C;AAC3C,mDAAmD;AACnD,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACrD,OAAO,EAAE,GAAG,EAAiC,MAAM,QAAQ,CAAC;AAC5D,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAEtD,OAAO,EAAE,cAAc,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEpD,OAAO,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AACnD,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAE/C,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,UAAU,CAAC;AAElD,MAAM,KAAK,GAAG,4BAA4B,CAAC;AAC3C,MAAM,IAAI,GAAG,CAAC,KAAc,EAAE,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACnG,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;AAcnI,SAAS,WAAW,CAAC,GAAQ;IAC3B,IAAI,GAAG,CAAC,KAAK,EAAE,IAAI,KAAK,MAAM,IAAI,CAAC,GAAG,CAAC,MAAM;QAAE,MAAM,SAAS,CAAC,iBAAiB,CAAC,CAAC;IAClF,OAAO,GAAG,CAAC,MAAM,CAAC;AACpB,CAAC;AAED,SAAS,UAAU,CAAC,GAAQ,EAAE,UAAkB;IAC9C,IAAI,CAAC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,UAAU,CAAC;QAAE,MAAM,SAAS,CAAC,WAAW,EAAE,EAAE,UAAU,EAAE,CAAC,CAAC;AACtF,CAAC;AAED,KAAK,UAAU,WAAW,CAAC,CAAS,EAAE,MAAc,EAAE,QAAgB,EAAE,KAAkB,CAAC,CAAC,GAAG;IAC7F,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,EAAE,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC;IAC1D,IAAI,CAAC,MAAM,EAAE,MAAM;QAAE,MAAM,SAAS,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC;IAC/D,OAAO,OAAO,CAAC,MAAM,CAAC,CAAC;AACzB,CAAC;AAED,SAAS,aAAa,CAAC,CAAS,EAAE,UAAkB,EAAE,GAAQ;IAC5D,MAAM,OAAO,GAAG,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IAC/C,IAAI,CAAC,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,QAAQ,CAAC,MAAM,CAAC;QAAE,MAAM,SAAS,CAAC,WAAW,CAAC,CAAC;IACtF,UAAU,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC;IAC5B,WAAW,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IAC/B,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,+CAA+C;AAC/C,KAAK,UAAU,UAAU,CAAC,CAAS,EAAE,GAAQ,EAAE,SAAiB;IAC9D,MAAM,KAAK,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,WAAW,EAAE,QAAQ,CAAC,CAAC;SACnF,KAAK,CAAC,WAAW,EAAE,GAAG,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,CAAC;IACjE,OAAO,IAAI,CAAC,EAAE,IAAI,EAAE,GAAG,CAAC,MAAM,EAAE,IAAI,EAAE,GAAG,CAAC,MAAM,EAAE,IAAI,EAAE,GAAG,CAAC,QAAQ,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,MAAM,EAAE,CAAC,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;AACnK,CAAC;AAED;;;GAGG;AACH,MAAM,OAAO,aAAa;IACK;IAA7B,YAA6B,CAAS;QAAT,MAAC,GAAD,CAAC,CAAQ;IAAG,CAAC;IAE1C,KAAK,CAAC,MAAM,CAAC,SAAiB,EAAE,MAA+B,EAAE,GAAQ,EAAE,GAAW;QACpF,MAAM,IAAI,GAAG,WAAW,CAAC,GAAG,CAAC,EAAE,OAAO,GAAG,MAAM,WAAW,CAAC,IAAI,CAAC,CAAC,EAAE,IAAI,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAC;QACvF,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,SAAS,CAAC,SAAS,CAAC;YAAE,MAAM,SAAS,CAAC,WAAW,CAAC,CAAC;QACxE,UAAU,CAAC,OAAO,EAAE,GAAG,SAAS,SAAS,CAAC,CAAC;QAC3C,OAAO,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;IAC7D,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,OAAgB,EAAE,GAAQ,EAAE,GAAW;QAClD,MAAM,IAAI,GAAG,WAAW,CAAC,GAAG,CAAC,EAAE,OAAO,GAAG,MAAM,WAAW,CAAC,IAAI,CAAC,CAAC,EAAE,IAAI,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAC;QACvF,MAAM,MAAM,GAAG,mBAAmB,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;QACtD,IAAI,CAAC,MAAM,CAAC,OAAO;YAAE,MAAM,SAAS,CAAC,eAAe,EAAE,+BAA+B,CAAC,CAAC;QACvF,MAAM,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC;QAC7C,MAAM,EAAE,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;QACnD,uCAAuC;QACvC,SAAS,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAC7B,OAAO,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,OAAO,EAAE,EAAE,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,IAAI,IAAI,EAAE,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;IACpG,CAAC;IAEO,KAAK,CAAC,OAAO,CAAC,IAAyB,EAAE,MAAc,EAAE,KAAa,EAAE,GAAQ,EAAE,GAAW;QACnG,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,GAAG,GAAG;YAAE,MAAM,SAAS,CAAC,eAAe,EAAE,gCAAgC,CAAC,CAAC;QACjG,wCAAwC;QACxC,MAAM,EAAE,QAAQ,EAAE,CAAC,EAAE,GAAG,YAAY,EAAE,GAAG,KAAgC,CAAC;QAC1E,MAAM,WAAW,GAAG,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,YAAY,EAAE,CAAC,CAAC;QAChE,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,EAAE,EAAE;YAC7D,MAAM,OAAO,GAAG,GAAG,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,MAAM,IAAI,GAAG,EAAE,CAAC;YACvD,MAAM,GAAG,CAAA,iDAAiD,OAAO,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;YACrF,MAAM,QAAQ,GAAG,MAAM,EAAE,CAAC,UAAU,CAAC,mBAAmB,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,cAAc,CAAC,CAAC;iBACrF,KAAK,CAAC,WAAW,EAAE,GAAG,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAC,KAAK,CAAC,SAAS,EAAE,GAAG,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,iBAAiB,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC,gBAAgB,EAAE,CAAC;YACjI,IAAI,QAAQ,EAAE,CAAC;gBACb,IAAI,QAAQ,CAAC,YAAY,KAAK,WAAW;oBAAE,MAAM,SAAS,CAAC,UAAU,EAAE,gBAAgB,CAAC,CAAC;gBACzF,OAAO,QAAQ,CAAC,EAAY,CAAC;YAC/B,CAAC;YACD,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC;YAC5B,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC,MAAM,CAAC;gBACtD,SAAS,EAAE,GAAG,CAAC,QAAQ,EAAE,KAAK,EAAE,KAAK,EAAE,SAAS,EAAE,cAAc,EAAE,YAAY,EAAE,MAAM;gBACtF,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,SAAS,CAAC,YAAY,EAAE,CAAC,EAAE,UAAU,EAAE,GAAG,CAAC,SAAS,IAAI,IAAI;aAChJ,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,uBAAuB,EAAE,CAAC;YAC7C,MAAM,EAAE,CAAC,UAAU,CAAC,mBAAmB,CAAC,CAAC,MAAM,CAAC;gBAC9C,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,GAAG,CAAC,QAAQ,EAAE,OAAO,EAAE,GAAG,CAAC,MAAM,EAAE,IAAI,EAAE,MAAM;gBACtE,eAAe,EAAE,GAAG,EAAE,YAAY,EAAE,WAAW,EAAE,KAAK,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,EAAE;aACpG,CAAC,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,EAAE,EAAE;gBAC1B,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE,KAAK,EAAE,GAAG,CAAC,MAAO,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,EAAE,IAAI,EAAE,KAAK;gBACxH,UAAU,EAAE,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,MAAM,SAAS,CAAC,CAAC,CAAC,MAAM,EAAE,OAAO,EAAE,gBAAgB,IAAI,EAAE,EAAE,MAAM,EAAE,QAAQ;gBAC9G,IAAI,EAAE,EAAE,MAAM,EAAE,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,IAAI,IAAI;aACnD,CAAC,CAAC;YACH,MAAM,GAAG,CAAA,qCAAqC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;YAC3D,OAAO,MAAM,CAAC;QAChB,CAAC,CAAC,CAAC;QACH,OAAO,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC;IAC3B,CAAC;IAEO,GAAG,CAAC,GAAQ;QAClB,OAAO,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,wBAAwB,CAAC,CAAC,SAAS,CAAC,iBAAiB,EAAE,MAAM,EAAE,aAAa,CAAC;aACvG,KAAK,CAAC,aAAa,EAAE,GAAG,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAC,KAAK,CAAC,WAAW,EAAE,GAAG,EAAE,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC;IACvF,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,GAAQ,EAAE,SAAkB;QACrC,IAAI,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAC1B,oCAAoC;QACpC,0BAA0B;QAC1B,IAAI,SAAS,EAAE,CAAC;YACd,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,SAAS,CAAC,SAAS,CAAC;gBAAE,MAAM,SAAS,CAAC,WAAW,CAAC,CAAC;YACxE,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC,UAAU,EAAE,GAAG,EAAE,SAAS,CAAC,EAAE,EAAE,CAAC,UAAU,EAAE,MAAM,EAAE,GAAG,SAAS,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;QACjH,CAAC;QACD,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,QAAQ,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,cAAc,EAAE,cAAc,EAAE,eAAe,EAAE,cAAc,EAAE,sBAAsB,EAAE,YAAY,CAAC,CAAC;aAC3L,OAAO,CAAC,cAAc,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,CAAC;QACxD,OAAO,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IAC5B,CAAC;IAEO,KAAK,CAAC,GAAG,CAAC,EAAU,EAAE,GAAQ;QACpC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,OAAO;YAAE,MAAM,SAAS,CAAC,WAAW,CAAC,CAAC;QAClE,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,sBAAsB,EAAE,YAAY,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC,gBAAgB,EAAE,CAAC;QACxI,IAAI,CAAC,GAAG;YAAE,MAAM,SAAS,CAAC,WAAW,CAAC,CAAC;QACvC,OAAO,GAAG,CAAC;IACb,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,EAAU,EAAE,GAAQ,IAA2B,OAAO,QAAQ,CAAC,MAAM,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IAEpG,KAAK,CAAC,QAAQ,CAAC,EAAU,EAAE,GAAQ;QACjC,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC;QACpC,IAAI,QAAQ,CAAC,GAAG,CAAC,CAAC,MAAM,KAAK,WAAW;YAAE,MAAM,SAAS,CAAC,oBAAoB,EAAE,cAAc,CAAC,CAAC;QAChG,MAAM,OAAO,GAAG,MAAM,WAAW,CAAC,IAAI,CAAC,CAAC,EAAE,WAAW,CAAC,GAAG,CAAC,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC1E,UAAU,CAAC,OAAO,EAAE,GAAG,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,MAAM,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACjF,IAAI,GAAG,CAAC,IAAI,KAAK,QAAQ,IAAI,GAAG,CAAC,WAAW,KAAK,MAAM,UAAU,CAAC,IAAI,CAAC,CAAC,EAAE,OAAO,EAAE,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;YAC/F,MAAM,SAAS,CAAC,WAAW,EAAE,qBAAqB,CAAC,CAAC;QACtD,CAAC;QACD,MAAM,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,EAAE;YAClC,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE,KAAK,EAAE,GAAG,CAAC,MAAO,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM;YAC1F,UAAU,EAAE,GAAG,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,MAAM,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,EAAE,OAAO,EAAE,uBAAuB,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE;SAC9I,CAAC,CAAC;QACH,OAAO,EAAE,IAAI,EAAE,GAAG,CAAC,SAAmB,EAAE,QAAQ,EAAE,GAAG,CAAC,MAAM,CAAC,QAAkB,EAAE,WAAW,EAAE,GAAG,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,yBAAyB,CAAC,CAAC,CAAC,iCAAiC,EAAE,CAAC;IACxL,CAAC;CACF;AAED,SAAS,QAAQ,CAAC,GAAQ;IACxB,MAAM,OAAO,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,OAAO,EAAE,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;IACjE,MAAM,MAAM,GAAG,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,KAAK,MAAM,IAAI,GAAG,CAAC,QAAQ,KAAK,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,KAAK,YAAY,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,GAAG,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,QAAQ,CAAC;IACpO,OAAO;QACL,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM;QAC3F,SAAS,EAAE,IAAI,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,WAAW,EAAE,EAAE,SAAS,EAAE,IAAI,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,WAAW,EAAE;QACpG,UAAU,EAAE,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,SAAS,EAAE,GAAG,CAAC,UAAU,IAAI,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC;KACrJ,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,KAAK,UAAU,SAAS,CAAC,CAAS,EAAE,EAAoB,EAAE,IAAS,EAAE,GAAQ;IAC3E,MAAM,EAAE,GAAG,aAAa,CAAC,CAAC,EAAE,IAAI,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAC9C,MAAM,MAAM,GAAG,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IACvD,MAAM,OAAO,GAA0F,EAAE,CAAC;IAC1G,MAAM,GAAG,CAAA,6BAA6B,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IACnD,KAAK,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,EAAE,EAAE,CAAC;QAC9C,MAAM,GAAG,CAAA,2BAA2B,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QACjD,IAAI,CAAC;YACH,MAAM,CAAC,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,CAAC,GAAG,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC;YAC1C,OAAO,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,KAAK,GAAG,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;QAC7C,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,GAAG,CAAA,uCAAuC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;YAC7D,MAAM,KAAK,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;YAC/B,6CAA6C;YAC7C,IAAI,KAAK,CAAC,IAAI,KAAK,UAAU,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAE,GAAW,EAAE,IAAI,CAAC;gBAAE,MAAM,GAAG,CAAC;YAC5F,4CAA4C;YAC5C,MAAM,MAAM,GAAG,KAAK,CAAC,IAAI,KAAK,eAAe,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC;gBAC1E,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YACnG,OAAO,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,KAAK,GAAG,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI;gBACxD,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;QAC3G,CAAC;QACD,MAAM,GAAG,CAAA,mCAAmC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IAC3D,CAAC;IACD,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;QACpD,MAAM,GAAG,CAAA,yCAAyC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QAC/D,KAAK,MAAM,GAAG,IAAI,OAAO;YAAE,IAAI,GAAG,CAAC,EAAE,EAAE,CAAC;gBAAC,GAAG,CAAC,EAAE,GAAG,KAAK,CAAC;gBAAC,GAAG,CAAC,IAAI,GAAG,SAAS,CAAC;YAAC,CAAC;IAClF,CAAC;IACD,MAAM,GAAG,CAAA,qCAAqC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IAC3D,MAAM,SAAS,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC;IACrD,MAAM,MAAM,GAAG,EAAE,IAAI,EAAE,OAAO,CAAC,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,GAAG,SAAS,EAAE,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,QAAQ,EAAE,UAAU,IAAI,CAAC,EAAE,OAAO,EAAE,CAAC;IACtJ,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,MAAM,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;AACzF,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,CAAS;IACxC,OAAO;QACL,IAAI,EAAE,oBAAoB,EAAE,KAAK,EAAE,KAAK;QACxC,KAAK,CAAC,MAAM,CAAC,KAAK,EAAE,EAAE;YACpB,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,UAAU,CAAC,mBAAmB,CAAC,CAAC,SAAS,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,GAAG,EAAE,KAAK,CAAC,YAAY,CAAC;iBACnG,KAAK,CAAC,WAAW,EAAE,GAAG,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC,SAAS,EAAE,CAAC,uBAAuB,EAAE,CAAC;YAClF,IAAI,IAAI,CAAC,MAAM,KAAK,QAAQ;gBAAE,OAAO;YACrC,IAAI,IAAI,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,OAAO,EAAE,IAAI,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;gBACtD,MAAM,EAAE,CAAC,WAAW,CAAC,mBAAmB,CAAC,CAAC,GAAG,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,GAAG,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC;gBACtH,OAAO;YACT,CAAC;YACD,8CAA8C;YAC9C,MAAM,GAAG,CAAA,yBAAyB,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;YAC/C,IAAI,CAAC;gBACH,MAAM,GAAG,GAAG,MAAM,WAAW,CAAC,CAAC,EAAE,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;gBACnE,GAAG,CAAC,SAAS,GAAG,KAAK,CAAC,UAAU,IAAI,SAAS,CAAC;gBAC9C,GAAG,CAAC,MAAM,GAAG,IAAI,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC;gBACvD,GAAG,CAAC,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC;gBACnC,IAAI,MAAM,CAAC;gBACX,IAAI,IAAI,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;oBAC3B,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,CAAC,EAAE,GAAG,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;oBACrD,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;oBAC/D,MAAM,GAAG,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC;gBAC7F,CAAC;;oBAAM,MAAM,GAAG,MAAM,SAAS,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;gBAClD,MAAM,EAAE,CAAC,WAAW,CAAC,mBAAmB,CAAC,CAAC,GAAG,CAAC,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,IAAI;oBAChI,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,WAAW,EAAE,GAAG,CAAA,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,GAAG,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC;YAC5G,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,MAAM,GAAG,CAAA,qCAAqC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;gBAC3D,MAAM,KAAK,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;gBAC/B,IAAI,KAAK,CAAC,IAAI,KAAK,UAAU,IAAI,KAAK,CAAC,IAAI,KAAK,UAAU;oBAAE,MAAM,GAAG,CAAC;gBACtE,MAAM,EAAE,CAAC,WAAW,CAAC,mBAAmB,CAAC,CAAC,GAAG,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,UAAU,EAAE,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,WAAW,EAAE,GAAG,CAAA,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,GAAG,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC;YACxK,CAAC;YACD,MAAM,GAAG,CAAA,iCAAiC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QACzD,CAAC;KACF,CAAC;AACJ,CAAC;AAED,6CAA6C;AAC7C,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,CAAS;IAC7C,MAAM,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,mBAAmB,CAAC,CAAC,GAAG,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC;SACnI,KAAK,CAAC,YAAY,EAAE,IAAI,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,QAAQ,EAAE,IAAI,EAAE,SAAS,CAAC,CAAC,OAAO,EAAE,CAAC;AACtF,CAAC"}

package/dist/transfer/schema.d.ts

@@ -0,0 +1,4 @@
+export declare const TRANSFER_MIGRATION: {
+    name: string;
+    sql: string;
+};

package/dist/transfer/schema.js

@@ -0,0 +1,31 @@
+// 独立的前向系统迁移；不改动已发布的 cage:0001_system 校验和。
+// 文件与任务存在同一 PostgreSQL 中，API/worker 不需要共享本地磁盘。
+// 原始文件和结果仅保留 24 小时；索引记录保留用于幂等及操作追踪。
+export const TRANSFER_MIGRATION = {
+    name: 'cage:0002_data_transfer',
+    sql: `
+CREATE TABLE sys.data_transfer (
+  id uuid PRIMARY KEY,
+  tenant_id uuid NOT NULL,
+  user_id uuid NOT NULL,
+  kind text NOT NULL CHECK (kind IN ('export', 'import')),
+  target text NOT NULL,
+  idempotency_key text NOT NULL,
+  request_hash text NOT NULL,
+  input jsonb,
+  status text NOT NULL DEFAULT 'queued',
+  outbox_id bigint NOT NULL REFERENCES sys.outbox(id),
+  result jsonb,
+  file_body text,
+  access_hash text,
+  error_code text,
+  created_at timestamptz NOT NULL DEFAULT now(),
+  finished_at timestamptz,
+  expires_at timestamptz NOT NULL DEFAULT now() + interval '24 hours',
+  UNIQUE (tenant_id, user_id, idempotency_key)
+);
+CREATE INDEX data_transfer_owner_idx ON sys.data_transfer (tenant_id, user_id, created_at DESC);
+CREATE INDEX data_transfer_expiry_idx ON sys.data_transfer (expires_at) WHERE status <> 'expired';
+`,
+};
+//# sourceMappingURL=schema.js.map

package/dist/transfer/schema.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema.js","sourceRoot":"","sources":["../../src/transfer/schema.ts"],"names":[],"mappings":"AAAA,0CAA0C;AAC1C,+CAA+C;AAC/C,oCAAoC;AACpC,MAAM,CAAC,MAAM,kBAAkB,GAAG;IAChC,IAAI,EAAE,yBAAyB;IAC/B,GAAG,EAAE;;;;;;;;;;;;;;;;;;;;;;;CAuBN;CACA,CAAC"}

package/dist/types.d.ts

@@ -0,0 +1,52 @@
+/** 主体种类。系统身份（process/job/external/reaction）只能调用声明了对应 invokedBy 的命令，或自己声明过的命令。 */
+export type ActorKind = 'user' | 'process' | 'job' | 'external' | 'reaction' | 'system' | 'anonymous';
+export interface Actor {
+    kind: ActorKind;
+    /** 用户 id，或系统身份名，例如 job:expireStaleOrders */
+    id: string;
+}
+/** 写入来源，记入审计 */
+export type Source = 'api' | 'process' | 'job' | 'import' | 'external' | 'reaction' | 'system';
+/** 范围组合子：封闭集合，每个都同时有内存语义和 SQL 语义 */
+export type Combinator = 'all' | 'self' | 'dept' | 'deptSubtree' | 'deptSet';
+export declare const COMBINATORS: readonly Combinator[];
+/** 组合子由窄到宽的顺序，用于「不能授出比自己更宽的范围」 */
+export declare const COMBINATOR_WIDTH: Record<Combinator, number>;
+/** 角色在某个聚合上的数据范围授权 */
+export interface ScopeGrant {
+    combinator: Combinator;
+    /** deptSet 用：角色配置的部门集合 */
+    deptIds?: string[];
+}
+/** 能力点参数，例如 { ceiling: 50000 } */
+export type CapabilityParams = Record<string, unknown>;
+/** 当前主体的上下文。HTTP 认证、审批桥接、调度器、反应各自构造它，交给内核。 */
+export interface Ctx {
+    actor: Actor | null;
+    /** 当前真人用户；系统身份时为 null（真人在 onBehalfOf） */
+    userId: string | null;
+    /** 系统身份代表的真人，用于职责分离和审计 */
+    onBehalfOf?: string | null;
+    tenantId: string;
+    deptId: string | null;
+    /** 当前部门的祖先路径（含自己），例如 /root/purchase/ */
+    deptPath: string | null;
+    /** 能力集合及参数；多角色取并集，额度取最大值 */
+    capabilities: Map<string, CapabilityParams>;
+    /** 各聚合上的范围授权，多角色取并集（OR）；未配置的聚合按「仅本人」 */
+    scopes: Record<string, ScopeGrant[]>;
+    /** 可以看明文的「聚合.种类」，例如 PurchaseOrder.phone */
+    unmask: string[];
+    source: Source;
+    requestId?: string;
+    idempotencyKey?: string;
+    /** 二次认证时间（毫秒时间戳） */
+    stepUpAt?: number | null;
+    client?: {
+        ip?: string;
+        userAgent?: string;
+    };
+    /** onBehalfOf 那个人的能力（额度类约束按他判断）；内核会按需加载 */
+    onBehalfOfCapabilities?: Map<string, CapabilityParams>;
+}
+export type MaybePromise<T> = T | Promise<T>;

package/dist/types.js

@@ -0,0 +1,5 @@
+// 内核公共类型：上下文 ctx、主体、范围授权。
+export const COMBINATORS = ['all', 'self', 'dept', 'deptSubtree', 'deptSet'];
+/** 组合子由窄到宽的顺序，用于「不能授出比自己更宽的范围」 */
+export const COMBINATOR_WIDTH = { self: 0, dept: 1, deptSet: 2, deptSubtree: 2, all: 3 };
+//# sourceMappingURL=types.js.map

package/dist/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA,0BAA0B;AAgB1B,MAAM,CAAC,MAAM,WAAW,GAA0B,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,aAAa,EAAE,SAAS,CAAC,CAAC;AACpG,kCAAkC;AAClC,MAAM,CAAC,MAAM,gBAAgB,GAA+B,EAAE,IAAI,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,WAAW,EAAE,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC"}

package/dist/util/names.d.ts

@@ -0,0 +1,9 @@
+export declare function snake(s: string): string;
+export declare function kebab(s: string): string;
+export declare function camel(s: string): string;
+export declare function lowerFirst(s: string): string;
+export declare function upperFirst(s: string): string;
+/** 32 位哈希（FNV-1a），用于咨询锁编号 */
+export declare function hash32(s: string): number;
+/** 稳定的 JSON 序列化（键排序），用于本体图比较 */
+export declare function stableStringify(v: unknown): string;

package/dist/util/names.js

@@ -0,0 +1,38 @@
+// 命名转换：聚合名大驼峰 → 表名 snake_case、路由 kebab-case；字段名 camelCase ↔ 列名 snake_case。
+export function snake(s) {
+    return s
+        .replace(/([a-z0-9])([A-Z])/g, '$1_$2')
+        .replace(/([A-Z]+)([A-Z][a-z])/g, '$1_$2')
+        .toLowerCase();
+}
+export function kebab(s) {
+    return snake(s).replace(/_/g, '-');
+}
+export function camel(s) {
+    return s.replace(/_([a-z0-9])/g, (_, c) => c.toUpperCase());
+}
+export function lowerFirst(s) {
+    return s.charAt(0).toLowerCase() + s.slice(1);
+}
+export function upperFirst(s) {
+    return s.charAt(0).toUpperCase() + s.slice(1);
+}
+/** 32 位哈希（FNV-1a），用于咨询锁编号 */
+export function hash32(s) {
+    let h = 0x811c9dc5;
+    for (let i = 0; i < s.length; i++) {
+        h ^= s.charCodeAt(i);
+        h = Math.imul(h, 0x01000193);
+    }
+    return h | 0;
+}
+/** 稳定的 JSON 序列化（键排序），用于本体图比较 */
+export function stableStringify(v) {
+    if (v === null || typeof v !== 'object')
+        return JSON.stringify(v);
+    if (Array.isArray(v))
+        return `[${v.map(stableStringify).join(',')}]`;
+    const keys = Object.keys(v).filter((k) => v[k] !== undefined).sort();
+    return `{${keys.map((k) => `${JSON.stringify(k)}:${stableStringify(v[k])}`).join(',')}}`;
+}
+//# sourceMappingURL=names.js.map

package/dist/util/names.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"names.js","sourceRoot":"","sources":["../../src/util/names.ts"],"names":[],"mappings":"AAAA,2EAA2E;AAE3E,MAAM,UAAU,KAAK,CAAC,CAAS;IAC7B,OAAO,CAAC;SACL,OAAO,CAAC,oBAAoB,EAAE,OAAO,CAAC;SACtC,OAAO,CAAC,uBAAuB,EAAE,OAAO,CAAC;SACzC,WAAW,EAAE,CAAC;AACnB,CAAC;AAED,MAAM,UAAU,KAAK,CAAC,CAAS;IAC7B,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;AACrC,CAAC;AAED,MAAM,UAAU,KAAK,CAAC,CAAS;IAC7B,OAAO,CAAC,CAAC,OAAO,CAAC,cAAc,EAAE,CAAC,CAAC,EAAE,CAAS,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;AACtE,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,CAAS;IAClC,OAAO,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;AAChD,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,CAAS;IAClC,OAAO,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;AAChD,CAAC;AAED,6BAA6B;AAC7B,MAAM,UAAU,MAAM,CAAC,CAAS;IAC9B,IAAI,CAAC,GAAG,UAAU,CAAC;IACnB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QAClC,CAAC,IAAI,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;QACrB,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC;IAC/B,CAAC;IACD,OAAO,CAAC,GAAG,CAAC,CAAC;AACf,CAAC;AAED,gCAAgC;AAChC,MAAM,UAAU,eAAe,CAAC,CAAU;IACxC,IAAI,CAAC,KAAK,IAAI,IAAI,OAAO,CAAC,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;IAClE,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;IACrE,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,CAAW,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAE,CAAS,CAAC,CAAC,CAAC,KAAK,SAAS,CAAC,CAAC,IAAI,EAAE,CAAC;IACxF,OAAO,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,eAAe,CAAE,CAAS,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;AACpG,CAAC"}

package/dist/worker/consumers.d.ts

@@ -0,0 +1,29 @@
+import type { Transaction } from 'kysely';
+import type { Kernel } from '../kernel.js';
+import type { EventConsumer } from './outbox.js';
+/** 审批引擎的最小接口（完整接口见 @yss123/cage-approval）。引擎只给结论，结论由桥接代码转成命令。 */
+export interface ApprovalEngine {
+    start(input: {
+        process: string;
+        businessKey: string;
+        tenantId: string;
+        /** 只包含声明过的 routable 字段 */
+        vars: Record<string, unknown>;
+        tx: Transaction<any>;
+    }): Promise<{
+        instanceId: string;
+    }>;
+    cancel(input: {
+        process: string;
+        businessKey: string;
+        tenantId: string;
+        tx: Transaction<any>;
+    }): Promise<void>;
+}
+export declare function reactionConsumers(k: Kernel): EventConsumer[];
+/** 审批启动：只把 routable 字段作为流程变量传给引擎 */
+export declare function approvalConsumers(k: Kernel, engines: Record<string, ApprovalEngine>): EventConsumer[];
+/** 声明对象通过 CONSUMERS 扩展点提供的消费者（例如 @yss123/cage-connectors 的出站映射） */
+export declare function extensionConsumers(k: Kernel): EventConsumer[];
+/** 从 ROUTE 扩展（代码内封闭路由）里找审批引擎 */
+export declare function routeEngines(k: Kernel): Record<string, ApprovalEngine>;

package/dist/worker/consumers.js

@@ -0,0 +1,79 @@
+import { CONSUMERS } from '../brands.js';
+import { systemCtx } from '../org.js';
+import { loadScoped } from '../pipeline/load.js';
+function actorUser(row) {
+    return row.actor?.userId ?? row.actor?.onBehalfOf ?? null;
+}
+export function reactionConsumers(k) {
+    return k.registry.reactions
+        .filter(({ r }) => r.tx === 'outbox')
+        .map(({ r, name }) => ({
+        name: `reaction:${name}`,
+        event: r.event.name,
+        async handle(row, tx) {
+            const input = r.map(row.payload);
+            if (input === null || input === undefined)
+                return;
+            const ctx = systemCtx({
+                kind: 'reaction',
+                name,
+                tenantId: row.tenant_id,
+                capabilities: [k.registry.capabilityOf(r.command)],
+                onBehalfOf: actorUser(row),
+                requestId: row.request_id ?? undefined,
+            });
+            await k.executeIn(tx, r.command, input, ctx, 0);
+        },
+    }));
+}
+/** 审批启动：只把 routable 字段作为流程变量传给引擎 */
+export function approvalConsumers(k, engines) {
+    const out = [];
+    for (const { a, name } of k.registry.approvals) {
+        const engine = engines[a.process];
+        if (!engine) {
+            k.log.warn({ process: a.process }, `审批绑定 ${name} 没有可用的审批引擎，流程不会启动`);
+            continue;
+        }
+        out.push({
+            name: `approval:${name}:start`,
+            event: a.start.name,
+            async handle(row, tx) {
+                const vars = await routableVars(k, a, row, tx);
+                await engine.start({ process: a.process, businessKey: row.aggregate_id, tenantId: row.tenant_id, vars, tx });
+            },
+        });
+        for (const ev of a.cancelOn) {
+            out.push({
+                name: `approval:${name}:cancel:${ev.name}`,
+                event: ev.name,
+                async handle(row, tx) {
+                    await engine.cancel({ process: a.process, businessKey: row.aggregate_id, tenantId: row.tenant_id, tx });
+                },
+            });
+        }
+    }
+    return out;
+}
+async function routableVars(k, a, row, tx) {
+    const ctx = systemCtx({ kind: 'process', name: a.process, tenantId: row.tenant_id, capabilities: [] });
+    const snap = await loadScoped(tx, a.agg, row.aggregate_id, ctx, false);
+    const vars = {};
+    for (const f of a.routable)
+        vars[f] = snap?.[f] ?? row.payload?.[f] ?? null;
+    return vars;
+}
+/** 声明对象通过 CONSUMERS 扩展点提供的消费者（例如 @yss123/cage-connectors 的出站映射） */
+export function extensionConsumers(k) {
+    return k.registry.consumerProviders().flatMap((p) => p[CONSUMERS](k) ?? []);
+}
+/** 从 ROUTE 扩展（代码内封闭路由）里找审批引擎 */
+export function routeEngines(k) {
+    const out = {};
+    for (const e of k.registry.extensions) {
+        if (e.kind === 'ROUTE' && typeof e.value?.engine === 'function')
+            out[e.value.process] = e.value.engine(k);
+    }
+    return out;
+}
+//# sourceMappingURL=consumers.js.map

package/dist/worker/consumers.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"consumers.js","sourceRoot":"","sources":["../../src/worker/consumers.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AAEzC,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AACtC,OAAO,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AAiBjD,SAAS,SAAS,CAAC,GAAc;IAC/B,OAAO,GAAG,CAAC,KAAK,EAAE,MAAM,IAAI,GAAG,CAAC,KAAK,EAAE,UAAU,IAAI,IAAI,CAAC;AAC5D,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,CAAS;IACzC,OAAO,CAAC,CAAC,QAAQ,CAAC,SAAS;SACxB,MAAM,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,QAAQ,CAAC;SACpC,GAAG,CAAC,CAAC,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;QACrB,IAAI,EAAE,YAAY,IAAI,EAAE;QACxB,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI;QACnB,KAAK,CAAC,MAAM,CAAC,GAAG,EAAE,EAAE;YAClB,MAAM,KAAK,GAAG,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,OAAc,CAAC,CAAC;YACxC,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,SAAS;gBAAE,OAAO;YAClD,MAAM,GAAG,GAAG,SAAS,CAAC;gBACpB,IAAI,EAAE,UAAU;gBAChB,IAAI;gBACJ,QAAQ,EAAE,GAAG,CAAC,SAAS;gBACvB,YAAY,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;gBAClD,UAAU,EAAE,SAAS,CAAC,GAAG,CAAC;gBAC1B,SAAS,EAAE,GAAG,CAAC,UAAU,IAAI,SAAS;aACvC,CAAC,CAAC;YACH,MAAM,CAAC,CAAC,SAAS,CAAC,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC;QAClD,CAAC;KACF,CAAC,CAAC,CAAC;AACR,CAAC;AAED,oCAAoC;AACpC,MAAM,UAAU,iBAAiB,CAAC,CAAS,EAAE,OAAuC;IAClF,MAAM,GAAG,GAAoB,EAAE,CAAC;IAChC,KAAK,MAAM,EAAE,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,QAAQ,CAAC,SAAS,EAAE,CAAC;QAC/C,MAAM,MAAM,GAAG,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;QAClC,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,EAAE,QAAQ,IAAI,mBAAmB,CAAC,CAAC;YACpE,SAAS;QACX,CAAC;QACD,GAAG,CAAC,IAAI,CAAC;YACP,IAAI,EAAE,YAAY,IAAI,QAAQ;YAC9B,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI;YACnB,KAAK,CAAC,MAAM,CAAC,GAAG,EAAE,EAAE;gBAClB,MAAM,IAAI,GAAG,MAAM,YAAY,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC;gBAC/C,MAAM,MAAM,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,WAAW,EAAE,GAAG,CAAC,YAAY,EAAE,QAAQ,EAAE,GAAG,CAAC,SAAS,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;YAC/G,CAAC;SACF,CAAC,CAAC;QACH,KAAK,MAAM,EAAE,IAAI,CAAC,CAAC,QAAQ,EAAE,CAAC;YAC5B,GAAG,CAAC,IAAI,CAAC;gBACP,IAAI,EAAE,YAAY,IAAI,WAAW,EAAE,CAAC,IAAI,EAAE;gBAC1C,KAAK,EAAE,EAAE,CAAC,IAAI;gBACd,KAAK,CAAC,MAAM,CAAC,GAAG,EAAE,EAAE;oBAClB,MAAM,MAAM,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,WAAW,EAAE,GAAG,CAAC,YAAY,EAAE,QAAQ,EAAE,GAAG,CAAC,SAAS,EAAE,EAAE,EAAE,CAAC,CAAC;gBAC1G,CAAC;aACF,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,KAAK,UAAU,YAAY,CAAC,CAAS,EAAE,CAAW,EAAE,GAAc,EAAE,EAAoB;IACtF,MAAM,GAAG,GAAG,SAAS,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,EAAE,QAAQ,EAAE,GAAG,CAAC,SAAS,EAAE,YAAY,EAAE,EAAE,EAAE,CAAC,CAAC;IACvG,MAAM,IAAI,GAAG,MAAM,UAAU,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,EAAE,GAAG,CAAC,YAAY,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC;IACvE,MAAM,IAAI,GAA4B,EAAE,CAAC;IACzC,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,QAAQ;QAAE,IAAI,CAAC,CAAC,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC,CAAC,IAAK,GAAG,CAAC,OAAe,EAAE,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC;IACrF,OAAO,IAAI,CAAC;AACd,CAAC;AAED,mEAAmE;AACnE,MAAM,UAAU,kBAAkB,CAAC,CAAS;IAC1C,OAAO,CAAC,CAAC,QAAQ,CAAC,iBAAiB,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAE,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAqB,IAAI,EAAE,CAAC,CAAC;AACnG,CAAC;AAED,gCAAgC;AAChC,MAAM,UAAU,YAAY,CAAC,CAAS;IACpC,MAAM,GAAG,GAAmC,EAAE,CAAC;IAC/C,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,UAAU,EAAE,CAAC;QACtC,IAAI,CAAC,CAAC,IAAI,KAAK,OAAO,IAAI,OAAO,CAAC,CAAC,KAAK,EAAE,MAAM,KAAK,UAAU;YAAE,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IAC5G,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/worker/index.d.ts

@@ -0,0 +1,36 @@
+import { type DatabaseUrls } from '../db/connect.js';
+import { type Kernel } from '../kernel.js';
+import { type Logger } from '../telemetry.js';
+import { type ApprovalEngine } from './consumers.js';
+import { type EventConsumer } from './outbox.js';
+export * from './outbox.js';
+export * from './consumers.js';
+export * from './scheduler.js';
+export interface WorkerOptions {
+    domain?: object | object[];
+    kernel?: Kernel;
+    urls?: DatabaseUrls;
+    /** 同时处理的事件数 */
+    concurrency?: number;
+    /** 没收到 NOTIFY 时的轮询间隔 */
+    pollIntervalMs?: number;
+    maxAttempts?: number;
+    /** 外部审批引擎（按流程名）；不传时使用代码内封闭路由 */
+    approvalEngines?: Record<string, ApprovalEngine>;
+    /** 额外的事件消费者 */
+    consumers?: EventConsumer[];
+    /** 是否运行定时任务，默认 true */
+    jobs?: boolean;
+    logger?: Logger;
+}
+export interface WorkerHandle {
+    kernel: Kernel;
+    consumers: EventConsumer[];
+    /** 处理到 outbox 为空为止（测试和 cage dev 用） */
+    drain(maxRounds?: number): Promise<number>;
+    stop(): Promise<void>;
+}
+export declare function buildConsumers(k: Kernel, opts?: Pick<WorkerOptions, 'approvalEngines' | 'consumers'>): EventConsumer[];
+/** 不启动循环，只创建可手动驱动的 worker（测试用） */
+export declare function createWorker(k: Kernel, opts?: WorkerOptions): Omit<WorkerHandle, 'stop'>;
+export declare function startWorker(opts?: WorkerOptions): Promise<WorkerHandle>;