befly 3.13.10 → 3.14.1

package/dist/sync/syncTable.js

@@ -611,8 +611,14 @@ async function getTableColumnsRuntime(runtime, tableName) {
                 let max = null;
                 const m = /^(\w+)\s*\((\d+)\)/.exec(baseType);
                 if (m) {
-                    baseType = m[1];
-                    max = Number(m[2]);
+                    const base = m[1];
+                    const maxText = m[2];
+                    if (typeof base === "string") {
+                        baseType = base;
+                    }
+                    if (typeof maxText === "string") {
+                        max = Number(maxText);
+                    }
                 }
                 columns[row.name] = {
                     type: baseType.toLowerCase(),
@@ -649,9 +655,14 @@ async function getTableIndexesRuntime(runtime, tableName) {
             const q = getSyncTableIndexesQuery({ dialect: "mysql", table: tableName, dbName: runtime.dbName });
             const result = await runtime.db.unsafe(q.sql, q.params);
             for (const row of result.data) {
-                if (!indexes[row.INDEX_NAME])
-                    indexes[row.INDEX_NAME] = [];
-                indexes[row.INDEX_NAME].push(row.COLUMN_NAME);
+                const indexName = row.INDEX_NAME;
+                const current = indexes[indexName];
+                if (Array.isArray(current)) {
+                    current.push(row.COLUMN_NAME);
+                }
+                else {
+                    indexes[indexName] = [row.COLUMN_NAME];
+                }
             }
         }
         else if (runtime.dbDialect === "postgresql") {
@@ -660,7 +671,8 @@ async function getTableIndexesRuntime(runtime, tableName) {
             for (const row of result.data) {
                 const m = /\(([^)]+)\)/.exec(row.indexdef);
                 if (m) {
-                    const col = m[1].replace(/"/g, "").trim();
+                    const colPart = m[1];
+                    const col = typeof colPart === "string" ? colPart.replace(/"/g, "").trim() : "";
                     indexes[row.indexname] = [col];
                 }
             }
@@ -701,7 +713,8 @@ async function ensureDbVersion(dbDialect, db) {
             throw new Error("无法获取 MySQL 版本信息");
         }
         const version = r.data[0].version;
-        const majorVersion = parseInt(String(version).split(".")[0], 10);
+        const majorPart = String(version).split(".")[0] || "0";
+        const majorVersion = parseInt(majorPart, 10);
         if (!Number.isFinite(majorVersion) || majorVersion < DB_VERSION_REQUIREMENTS.MYSQL_MIN_MAJOR) {
             throw new Error(`此脚本仅支持 MySQL ${DB_VERSION_REQUIREMENTS.MYSQL_MIN_MAJOR}.0+，当前版本: ${version}`);
         }
@@ -714,7 +727,8 @@ async function ensureDbVersion(dbDialect, db) {
         }
         const versionText = r.data[0].version;
         const m = /PostgreSQL\s+(\d+)/i.exec(versionText);
-        const major = m ? parseInt(m[1], 10) : NaN;
+        const majorText = m ? m[1] : undefined;
+        const major = typeof majorText === "string" ? parseInt(majorText, 10) : NaN;
         if (!Number.isFinite(major) || major < DB_VERSION_REQUIREMENTS.POSTGRES_MIN_MAJOR) {
             throw new Error(`此脚本要求 PostgreSQL >= ${DB_VERSION_REQUIREMENTS.POSTGRES_MIN_MAJOR}，当前: ${versionText}`);
         }
@@ -726,9 +740,12 @@ async function ensureDbVersion(dbDialect, db) {
             throw new Error("无法获取 SQLite 版本信息");
         }
         const version = r.data[0].version;
-        const [maj, min, patch] = String(version)
+        const parts = String(version)
             .split(".")
             .map((v) => parseInt(v, 10) || 0);
+        const maj = parts[0] ?? 0;
+        const min = parts[1] ?? 0;
+        const patch = parts[2] ?? 0;
         const vnum = maj * 10000 + min * 100 + patch;
         if (!Number.isFinite(vnum) || vnum < DB_VERSION_REQUIREMENTS.SQLITE_MIN_VERSION_NUM) {
             throw new Error(`此脚本要求 SQLite >= ${DB_VERSION_REQUIREMENTS.SQLITE_MIN_VERSION}，当前: ${version}`);
@@ -765,7 +782,11 @@ function compareFieldDefinition(dbDialect, existingColumn, fieldDef) {
         }
     }
     const typeMapping = getTypeMapping(dbDialect);
-    const expectedType = typeMapping[fieldDef.type].toLowerCase();
+    const mapped = typeMapping[fieldDef.type];
+    if (typeof mapped !== "string") {
+        throw new Error(`未知字段类型映射：dialect=${dbDialect} type=${String(fieldDef.type)}`);
+    }
+    const expectedType = mapped.toLowerCase();
     const currentType = existingColumn.type.toLowerCase();
     if (currentType !== expectedType) {
         changes.push({

package/dist/types/common.d.ts

@@ -5,11 +5,11 @@
 /**
  * SQL 值类型
  */
-export type SqlValue = string | number | boolean | null | Date | Record<string, any> | any[];
+export type SqlValue = string | number | boolean | null | Date | Record<string, unknown> | unknown[];
 /**
  * 通用键值对类型
  */
-export type KeyValue<T = any> = Record<string, T>;
+export type KeyValue<T = unknown> = Record<string, T>;
 /**
  * WHERE 条件操作符
  */
@@ -17,7 +17,7 @@ export type WhereOperator = "$eq" | "$ne" | "$not" | "$gt" | "$gte" | "$lt" | "$
 /**
  * WHERE 条件类型
  */
-export type WhereConditions = Record<string, any>;
+export type WhereConditions = Record<string, unknown>;
 /**
  * 排序方向
  */
@@ -47,7 +47,7 @@ export type UpdateData = Record<string, SqlValue>;
 /**
  * 任意对象类型
  */
-export type AnyObject = Record<string, any>;
+export type AnyObject = Record<string, unknown>;
 /**
  * 字段规则字符串（已废弃，保留用于兼容）
  * 格式: "字段名|类型|最小值|最大值|默认值|是否索引|正则约束"
@@ -68,7 +68,7 @@ export interface ParsedFieldRule {
     type: "string" | "number" | "text" | "array_string" | "array_text";
     min: number | null;
     max: number | null;
-    default: any;
+    default: unknown;
     index: 0 | 1;
     regex: string | null;
 }
@@ -95,7 +95,7 @@ export interface JoinOption {
 /**
  * 工具函数返回类型
  */
-export interface ToolResponse<T = any> {
+export interface ToolResponse<T = unknown> {
     success: boolean;
     data?: T;
     error?: string;
@@ -123,12 +123,12 @@ export interface BaseRecord {
 /**
  * 异步函数类型
  */
-export type AsyncFunction<T = any> = (...args: any[]) => Promise<T>;
+export type AsyncFunction<T = unknown> = (...args: unknown[]) => Promise<T>;
 /**
  * 同步函数类型
  */
-export type SyncFunction<T = any> = (...args: any[]) => T;
+export type SyncFunction<T = unknown> = (...args: unknown[]) => T;
 /**
  * 通用回调函数
  */
-export type Callback<T = any> = (error: Error | null, result?: T) => void;
+export type Callback<T = unknown> = (error: Error | null, result?: T) => void;

package/dist/types/database.d.ts

@@ -63,7 +63,7 @@ export interface DeleteOptions {
  */
 export interface SqlInfo {
     sql: string;
-    params: any[];
+    params: unknown[];
     duration: number;
 }
 /**
@@ -76,15 +76,15 @@ export interface ListSql {
 /**
  * 统一返回结构
  */
-export interface DbResult<T = any, SqlT = SqlInfo> {
-    data: T;
-    sql: SqlT;
-}
+export type DbResult<TData = unknown, TSql = SqlInfo> = {
+    data: TData;
+    sql: TSql;
+};
 /**
  * 分页结果
  */
-export interface ListResult<T = any> {
-    lists: T[];
+export interface DbPageResult<TItem = unknown> {
+    lists: TItem[];
     total: number;
     page: number;
     limit: number;
@@ -93,14 +93,14 @@ export interface ListResult<T = any> {
 /**
  * 不分页结果（带 total）
  */
-export interface AllResult<T = any> {
-    lists: T[];
+export interface DbListResult<TItem = unknown> {
+    lists: TItem[];
     total: number;
 }
 /**
  * 事务回调
  */
-export type TransactionCallback<T = any> = (db: any) => Promise<T>;
+export type TransactionCallback<TResult = unknown, TDb = unknown> = (db: TDb) => Promise<TResult>;
 /**
  * DbHelper 公开接口（类型层）。
  *
@@ -110,29 +110,32 @@ export type TransactionCallback<T = any> = (db: any) => Promise<T>;
 export interface DbHelper {
     tableExists(tableName: string): Promise<DbResult<boolean>>;
     getCount(options: Omit<QueryOptions, "fields" | "page" | "limit" | "orderBy">): Promise<DbResult<number>>;
-    getOne<T extends Record<string, any> = Record<string, any>>(options: QueryOptions): Promise<DbResult<T | null>>;
-    getList<T extends Record<string, any> = Record<string, any>>(options: QueryOptions): Promise<DbResult<ListResult<T>, ListSql>>;
-    getAll<T extends Record<string, any> = Record<string, any>>(options: Omit<QueryOptions, "page" | "limit">): Promise<DbResult<AllResult<T>, ListSql>>;
+    getOne<TItem = unknown>(options: QueryOptions): Promise<DbResult<TItem | null>>;
+    getDetail<TItem = unknown>(options: QueryOptions): Promise<DbResult<TItem | null>>;
+    getList<TItem = unknown>(options: QueryOptions): Promise<DbResult<DbPageResult<TItem>, ListSql>>;
+    getAll<TItem = unknown>(options: Omit<QueryOptions, "page" | "limit">): Promise<DbResult<DbListResult<TItem>, ListSql>>;
     exists(options: Omit<QueryOptions, "fields" | "orderBy" | "page" | "limit">): Promise<DbResult<boolean>>;
-    getFieldValue<T = any>(options: Omit<QueryOptions, "fields"> & {
+    getFieldValue<TValue = unknown>(options: Omit<QueryOptions, "fields"> & {
         field: string;
-    }): Promise<DbResult<T | null>>;
-    insData(options: InsertOptions): Promise<DbResult<number>>;
-    insBatch(table: string, dataList: Record<string, any>[]): Promise<DbResult<number[]>>;
+    }): Promise<DbResult<TValue | null>>;
+    insData<TInsert extends Record<string, SqlValue> = Record<string, SqlValue>>(options: Omit<InsertOptions, "data"> & {
+        data: TInsert | TInsert[];
+    }): Promise<DbResult<number>>;
+    insBatch<TInsert extends Record<string, SqlValue> = Record<string, SqlValue>>(table: string, dataList: TInsert[]): Promise<DbResult<number[]>>;
     updData(options: UpdateOptions): Promise<DbResult<number>>;
     updBatch(table: string, dataList: Array<{
         id: number;
-        data: Record<string, any>;
+        data: Record<string, unknown>;
     }>): Promise<DbResult<number>>;
     delData(options: DeleteOptions): Promise<DbResult<number>>;
     delForce(options: Omit<DeleteOptions, "hard">): Promise<DbResult<number>>;
     delForceBatch(table: string, ids: number[]): Promise<DbResult<number>>;
     enableData(options: Omit<DeleteOptions, "hard">): Promise<DbResult<number>>;
     disableData(options: Omit<DeleteOptions, "hard">): Promise<DbResult<number>>;
-    query(sql: string, params?: any[]): Promise<DbResult<any>>;
-    unsafe(sqlStr: string, params?: any[]): Promise<DbResult<any>>;
-    trans<T = any>(callback: TransactionCallback<T>): Promise<T>;
+    query<TResult = unknown>(sql: string, params?: unknown[]): Promise<DbResult<TResult>>;
+    unsafe<TResult = unknown>(sqlStr: string, params?: unknown[]): Promise<DbResult<TResult>>;
+    trans<TResult = unknown>(callback: TransactionCallback<TResult, DbHelper>): Promise<TResult>;
     increment(table: string, field: string, where: WhereConditions, value?: number): Promise<DbResult<number>>;
     decrement(table: string, field: string, where: WhereConditions, value?: number): Promise<DbResult<number>>;
-    [key: string]: any;
+    [key: string]: unknown;
 }

package/dist/types/sync.d.ts

@@ -61,7 +61,8 @@ export interface SyncApiItem {
     name: string;
     /** 是否需要登录：0=免登录，1=需登录（同步时会归一化为 0/1） */
     auth?: 0 | 1 | boolean;
-    routePath: string;
+    path: string;
+    parentPath: string;
     addonName: string;
     [key: string]: any;
 }

package/dist/utils/loadMenuConfigs.js

@@ -73,7 +73,7 @@ export async function scanViewsDirToMenuConfigs(viewsDir, prefix, parentPath = "
 export function getParentPath(path) {
     // "/a/b" => "/a"
     // "/a" => ""
-    const parts = path.split("/").filter((p) => !!p);
+    const parts = path.split("/").filter((p) => Boolean(p));
     if (parts.length <= 1) {
         return "";
     }

package/dist/utils/loggerUtils.js

@@ -51,7 +51,7 @@ function sanitizeErrorValue(err, options) {
         message: truncateString(err.message || "", options.maxStringLen)
     };
     if (typeof err.stack === "string") {
-        out.stack = truncateString(err.stack, options.maxStringLen);
+        out["stack"] = truncateString(err.stack, options.maxStringLen);
     }
     return out;
 }
@@ -142,8 +142,12 @@ function sanitizeAny(value, options, state, depth, visited) {
     const entries = Object.entries(obj);
     const limit = entries.length > options.sanitizeObjectKeys ? options.sanitizeObjectKeys : entries.length;
     for (let i = 0; i < limit; i++) {
-        const key = entries[i][0];
-        const child = entries[i][1];
+        const entry = entries[i];
+        if (!entry) {
+            continue;
+        }
+        const key = entry[0];
+        const child = entry[1];
         if (isSensitiveKey(key, options.sensitiveKeyMatcher)) {
             out[key] = "[MASKED]";
             continue;

package/dist/utils/processAtSymbol.d.ts

@@ -1,4 +1,4 @@
 /**
  * 处理字段定义：将 @ 符号引用替换为实际字段定义
  */
-export declare function processAtSymbol(fields: Record<string, any>, apiName: string, routePath: string): Record<string, any>;
+export declare function processAtSymbol(fields: Record<string, any>, apiName: string, path: string): Record<string, any>;

package/dist/utils/processAtSymbol.js

@@ -2,7 +2,7 @@ import { presetFields } from "../configs/presetFields";
 /**
  * 处理字段定义：将 @ 符号引用替换为实际字段定义
  */
-export function processAtSymbol(fields, apiName, routePath) {
+export function processAtSymbol(fields, apiName, path) {
     if (!fields || typeof fields !== "object")
         return fields;
     const processed = {};
@@ -13,7 +13,7 @@ export function processAtSymbol(fields, apiName, routePath) {
                 continue;
             }
             const validKeys = Object.keys(presetFields).join(", ");
-            throw new Error(`API [${apiName}] (${routePath}) 字段 [${key}] 引用了未定义的预设字段 "${value}"。可用的预设字段有: ${validKeys}`);
+            throw new Error(`API [${apiName}] (${path}) 字段 [${key}] 引用了未定义的预设字段 "${value}"。可用的预设字段有: ${validKeys}`);
         }
         processed[key] = value;
     }

package/dist/utils/processInfo.js

@@ -4,8 +4,8 @@
  */
 export function getProcessRole(env) {
     const runtimeEnv = env || {};
-    const bunWorkerId = runtimeEnv.BUN_WORKER_ID;
-    const pm2InstanceId = runtimeEnv.PM2_INSTANCE_ID;
+    const bunWorkerId = runtimeEnv["BUN_WORKER_ID"];
+    const pm2InstanceId = runtimeEnv["PM2_INSTANCE_ID"];
     // Bun 集群模式
     if (bunWorkerId !== undefined) {
         return {

package/dist/utils/scanFiles.js

@@ -86,7 +86,7 @@ export async function scanFiles(dir, source, type, pattern) {
             const base = {
                 source: source,
                 type: type,
-                sourceName: { core: "核心", addon: "组件", app: "项目" }[source],
+                sourceName: source === "core" ? "核心" : source === "addon" ? "组件" : "项目",
                 filePath: normalizedFile,
                 relativePath: relativePath,
                 fileName: fileName,
@@ -97,28 +97,32 @@ export async function scanFiles(dir, source, type, pattern) {
                 customKeys: isPlainObject(content) ? Object.keys(content) : []
             };
             if (type === "table") {
-                base.content = content;
+                base["content"] = content;
                 results.push(base);
                 continue;
             }
             if (type === "api") {
-                base.auth = true;
-                base.rawBody = false;
-                base.method = "POST";
-                base.fields = {};
-                base.required = [];
+                // 运行时 auth 必须是 boolean：
+                // - checkApi 会校验 auth 类型
+                // - permission hook 以 ctx.api.auth === false 判断公开接口
+                // DB 存储的 0/1 由 syncApi 负责转换写入。
+                base["auth"] = true;
+                base["rawBody"] = false;
+                base["method"] = "POST";
+                base["fields"] = {};
+                base["required"] = [];
             }
             if (type === "plugin" || type === "hook") {
-                base.deps = [];
-                base.name = "";
-                base.handler = null;
+                base["deps"] = [];
+                base["name"] = "";
+                base["handler"] = null;
             }
             forOwn(content, (value, key) => {
                 base[key] = value;
             });
             if (type === "api") {
-                base.routePrefix = source === "app" ? "/app" : `/addon/${addonName}`;
-                base.routePath = `/api${base.routePrefix}/${relativePath}`;
+                base["routePrefix"] = source === "app" ? "/app" : `/addon/${addonName}`;
+                base["path"] = `/api${base["routePrefix"]}/${relativePath}`;
             }
             results.push(base);
         }

package/dist/utils/util.js

@@ -108,7 +108,7 @@ function upperFirst(s) {
     if (s.length === 0) {
         return s;
     }
-    return s[0].toUpperCase() + s.slice(1);
+    return s.charAt(0).toUpperCase() + s.slice(1);
 }
 /**
  * 把字符串转为小驼峰。
@@ -119,9 +119,13 @@ export function camelCase(input) {
     if (parts.length === 0) {
         return "";
     }
-    const first = parts[0].toLowerCase();
+    const firstPart = parts[0];
+    if (!firstPart) {
+        return "";
+    }
+    const first = firstPart.toLowerCase();
     const rest = parts.slice(1).map((p) => upperFirst(p.toLowerCase()));
-    return [first, ...rest].join("");
+    return [first].concat(rest).join("");
 }
 function normalizeToWords(input) {
     return String(input)
@@ -227,6 +231,9 @@ export function setByPath(target, path, value) {
     let cur = target;
     for (let i = 0; i < parts.length; i++) {
         const key = parts[i];
+        if (!key) {
+            return;
+        }
         const isLast = i === parts.length - 1;
         if (isLast) {
             cur[key] = value;

package/package.json

@@ -1,7 +1,7 @@
 {
     "name": "befly",
-    "version": "3.13.10",
-    "gitHead": "28629fbf7854a0268d3963fd4a8ee8820175951c",
+    "version": "3.14.1",
+    "gitHead": "f836a457a4b5936d566051b629ed80eb264d6bf8",
     "private": false,
     "description": "Befly - 为 Bun 专属打造的 TypeScript API 接口框架核心引擎",
     "keywords": [