befly 3.14.3 → 3.15.0

package/dist/loader/loadPlugins.js

@@ -7,13 +7,14 @@ import { sortModules } from "../utils/sortModules";
 export async function loadPlugins(plugins, context) {
     const pluginsMap = [];
     const enabledPlugins = plugins.filter((item) => {
-        const moduleName = item?.moduleName;
+        const moduleName = item.moduleName;
         if (typeof moduleName !== "string" || moduleName.trim() === "") {
             return false;
         }
         // enable=false 表示禁用（替代 disablePlugins 列表）。
         // enable 仅允许 boolean；缺失 enable 的默认值应在 checkPlugin 阶段被补全为 true。
-        if (item?.enable === false) {
+        const enable = Object.hasOwn(item, "enable") ? item.enable : undefined;
+        if (enable === false) {
             return false;
         }
         return true;
@@ -24,15 +25,21 @@ export async function loadPlugins(plugins, context) {
     }
     for (const item of sortedPlugins) {
         const pluginName = item.moduleName;
-        const plugin = item;
+        const depsRaw = Object.hasOwn(item, "deps") ? item.deps : undefined;
+        const deps = Array.isArray(depsRaw) ? depsRaw.filter((x) => typeof x === "string") : [];
+        const handlerRaw = Object.hasOwn(item, "handler") ? item.handler : undefined;
+        if (typeof handlerRaw !== "function") {
+            throw new Error(`插件 '${pluginName}' handler 必须是函数`);
+        }
+        const handler = handlerRaw;
         try {
-            const pluginInstance = typeof plugin.handler === "function" ? await plugin.handler(context) : {};
+            const pluginInstance = await handler(context);
             context[pluginName] = pluginInstance;
             pluginsMap.push({
                 name: pluginName,
                 enable: true,
-                deps: Array.isArray(plugin.deps) ? plugin.deps : [],
-                handler: plugin.handler
+                deps: deps,
+                handler: handler
             });
         }
         catch (error) {

package/dist/plugins/tool.d.ts

@@ -2,8 +2,10 @@
  * 工具插件
  * 提供常用的工具函数
  */
+import type { JsonValue } from "../types/common";
 import type { RequestContext } from "../types/context";
 import type { Plugin } from "../types/plugin";
+type ToolExtra = Record<string, JsonValue | undefined>;
 /**
  * 成功响应
  * @param msg - 消息
@@ -11,11 +13,11 @@ import type { Plugin } from "../types/plugin";
  * @param other - 其他字段（可选）
  * @returns 成功响应对象
  */
-export declare function Yes(msg: string, data?: any, other?: Record<string, any>): {
-    code: number;
+export declare function Yes<TData extends JsonValue = JsonValue, TOther extends ToolExtra = ToolExtra>(msg: string, data?: TData, other?: TOther): {
+    code: 0;
     msg: string;
-    data: any;
-};
+    data: TData;
+} & TOther;
 /**
  * 失败响应
  * @param msg - 消息
@@ -23,11 +25,11 @@ export declare function Yes(msg: string, data?: any, other?: Record<string, any>
  * @param other - 其他字段（可选）
  * @returns 失败响应对象
  */
-export declare function No(msg: string, data?: any, other?: Record<string, any>): {
-    code: number;
+export declare function No<TData extends JsonValue = JsonValue, TOther extends ToolExtra = ToolExtra>(msg: string, data?: TData, other?: TOther): {
+    code: 1;
     msg: string;
-    data: any;
-};
+    data: TData;
+} & TOther;
 /**
  * 响应选项
  */
@@ -68,6 +70,6 @@ interface ResponseOptions {
  *   headers: { 'X-Custom': 'value' }
  * });
  */
-export declare function Raw(ctx: RequestContext, data: Record<string, any> | string, options?: ResponseOptions): Response;
+export declare function Raw(ctx: RequestContext, data: JsonValue | string, options?: ResponseOptions): Response;
 declare const toolPlugin: Plugin;
 export default toolPlugin;

package/dist/plugins/tool.js

@@ -75,7 +75,7 @@ export function Raw(ctx, data, options = {}) {
         }
     }
     else {
-        // 对象类型，JSON 序列化
+        // JSON 序列化（对象/数组/原始值均可）
         body = JSON.stringify(data);
         finalContentType = finalContentType || "application/json";
     }

package/dist/sync/syncApi.d.ts

@@ -1,3 +1,3 @@
 import type { BeflyContext } from "../types/befly";
-import type { SyncApiItem } from "../types/sync";
-export declare function syncApi(ctx: Pick<BeflyContext, "db" | "cache">, apis: SyncApiItem[]): Promise<void>;
+import type { ScanFileResult } from "../utils/scanFiles";
+export declare function syncApi(ctx: Pick<BeflyContext, "db" | "cache">, apis: ScanFileResult[]): Promise<void>;

package/dist/sync/syncApi.js

@@ -45,31 +45,43 @@ export async function syncApi(ctx, apis) {
         if (api.type !== "api") {
             continue;
         }
+        const record = api;
+        const path = record["path"];
+        const name = record["name"];
+        const addonNameRaw = record["addonName"];
+        if (typeof path !== "string" || path.trim() === "") {
+            continue;
+        }
+        if (typeof name !== "string" || name.trim() === "") {
+            continue;
+        }
+        const addonName = typeof addonNameRaw === "string" ? addonNameRaw : "";
         // auth：运行时 API 定义使用 boolean；DB 字段使用 0/1。
         // 统一在 syncApi 写库前做归一化，避免类型不一致导致每次启动都触发更新。
-        const auth = api.auth === false || api.auth === 0 ? 0 : 1;
-        const parentPath = getApiParentPath(api.path);
-        apiRouteKeys.add(api.path);
-        const item = allDbApiMap[api.path];
+        const authRaw = record["auth"];
+        const auth = authRaw === false || authRaw === 0 ? 0 : 1;
+        const parentPath = getApiParentPath(path);
+        apiRouteKeys.add(path);
+        const item = allDbApiMap[path];
         if (item) {
-            const shouldUpdate = api.name !== item.name || api.path !== item.path || api.addonName !== item.addonName || parentPath !== item.parentPath || auth !== item.auth;
+            const shouldUpdate = name !== item.name || path !== item.path || addonName !== item.addonName || parentPath !== item.parentPath || auth !== item.auth;
             if (shouldUpdate) {
                 updData.push({
                     id: item.id,
-                    name: api.name,
-                    path: api.path,
+                    name: name,
+                    path: path,
                     parentPath: parentPath,
-                    addonName: api.addonName,
+                    addonName: addonName,
                     auth: auth
                 });
             }
         }
         else {
             insData.push({
-                name: api.name,
-                path: api.path,
+                name: name,
+                path: path,
                 parentPath: parentPath,
-                addonName: api.addonName,
+                addonName: addonName,
                 auth: auth
             });
         }

package/dist/sync/syncDev.js

@@ -46,8 +46,8 @@ export async function syncDev(ctx, config = {}) {
         code: "dev",
         name: "开发者角色",
         description: "拥有所有菜单和接口权限的开发者角色",
-        menus: allMenus.data.lists.map((item) => item.path).filter((v) => v),
-        apis: allApis.data.lists.map((item) => item.path).filter((v) => v),
+        menus: allMenus.data.lists.map((item) => item.path).filter((v) => typeof v === "string" && v.length > 0),
+        apis: allApis.data.lists.map((item) => item.path).filter((v) => typeof v === "string" && v.length > 0),
         sort: 0
     };
     if (typeof devRole.data.id === "number") {

package/dist/sync/syncMenu.js

@@ -36,12 +36,13 @@ function createDisableMenuMatcher(ctx) {
             candidates.push(`/${trimmed}`);
         }
         for (const glob of globs) {
-            const match = glob.match;
+            const match = typeof glob === "object" && glob !== null && "match" in glob ? glob.match : undefined;
             if (typeof match !== "function") {
                 throw new Error("syncMenu: 当前 Bun 版本不支持 Bun.Glob.match，无法按 disableMenus 做 glob 匹配");
             }
+            const matchFn = match;
             for (const candidate of candidates) {
-                if (match.call(glob, candidate)) {
+                if (matchFn.call(glob, candidate)) {
                     return true;
                 }
             }

package/dist/sync/syncTable.d.ts

@@ -6,7 +6,6 @@
  * - 现在按项目要求，将所有实现合并到本文件（目录 packages/core/sync/syncTable/ 已删除）
  */
 import type { DbDialectName } from "../lib/dbDialect";
-import type { BeflyContext } from "../types/befly";
 import type { DbResult, SqlInfo } from "../types/database";
 import type { ColumnInfo, FieldChange, IndexInfo } from "../types/sync";
 import type { FieldDefinition } from "../types/validate";
@@ -14,6 +13,18 @@ import type { ScanFileResult } from "../utils/scanFiles";
 type SqlExecutor = {
     unsafe<T = unknown>(sqlStr: string, params?: unknown[]): Promise<DbResult<T, SqlInfo>>;
 };
+type SyncTableContext = {
+    db: SqlExecutor;
+    redis: {
+        delBatch(keys: string[]): Promise<unknown>;
+    };
+    config: {
+        db?: {
+            type?: string;
+            database?: string;
+        };
+    };
+};
 type DbDialect = DbDialectName;
 /**
  * 文件导航（推荐阅读顺序）
@@ -23,7 +34,7 @@ type DbDialect = DbDialectName;
  * 4) Runtime I/O（只读元信息：表/列/索引/版本）
  * 5) plan/apply（写变更：建表/改表/SQLite 重建）
  */
-type SyncTableFn = ((ctx: BeflyContext, items: ScanFileResult[]) => Promise<void>) & {
+type SyncTableFn = ((ctx: SyncTableContext, items: ScanFileResult[]) => Promise<void>) & {
     TestKit: typeof SYNC_TABLE_TEST_KIT;
 };
 /**
@@ -68,7 +79,7 @@ declare const SYNC_TABLE_TEST_KIT: {
     tableExistsRuntime: typeof tableExistsRuntime;
     getTableColumnsRuntime: typeof getTableColumnsRuntime;
     getTableIndexesRuntime: typeof getTableIndexesRuntime;
-    createRuntime: (dbDialect: DbDialectName, db: SqlExecutor, dbName?: string) => SyncRuntime;
+    createRuntime: (dbDialect: DbDialectName, db: SqlExecutor | null, dbName?: string) => SyncRuntimeForIO;
 };
 /**
  * 获取字段类型映射（根据当前数据库类型）
@@ -82,10 +93,7 @@ declare function quoteIdentifier(dbDialect: DbDialect, identifier: string): stri
  * 转义 SQL 注释中的双引号
  */
 declare function escapeComment(str: string): string;
-/**
- * 为字段定义应用默认值
- */
-declare function applyFieldDefaults(fieldDef: any): void;
+declare function applyFieldDefaults(fieldDef: unknown): void;
 /**
  * 判断是否为字符串或数组类型（需要长度参数）
  */
@@ -121,31 +129,19 @@ declare function generateDDLClause(dbDialect: DbDialect, fieldKey: string, field
 /**
  * 判断是否为兼容的类型变更（宽化型变更，无数据丢失风险）
  */
-declare function isCompatibleTypeChange(currentType: string, newType: string): boolean;
-type SyncRuntime = {
-    /**
-     * 当前数据库方言（mysql/postgresql/sqlite），决定 SQL 片段与元信息查询方式。
-     * 约束：必须与 ctx.config.db.type 一致（经归一化）。
-     */
+declare function isCompatibleTypeChange(currentType: string | null | undefined, newType: string | null | undefined): boolean;
+type SyncRuntimeForIO = {
     dbDialect: DbDialect;
-    /**
-     * SQL 执行器：必须复用 ctx.db。
-     * 约束：syncTable 内部禁止新建 DB 连接/事务；runtime 仅保存引用，不拥有生命周期。
-     */
-    db: SqlExecutor;
-    /**
-     * 数据库名：主要用于 MySQL information_schema 查询。
-     * 约束：PG/SQLite 可以传空字符串；不要在非 MySQL 方言依赖该值。
-     */
+    db: SqlExecutor | null;
     dbName: string;
 };
-declare function tableExistsRuntime(runtime: SyncRuntime, tableName: string): Promise<boolean>;
-declare function getTableColumnsRuntime(runtime: SyncRuntime, tableName: string): Promise<{
+declare function tableExistsRuntime(runtime: SyncRuntimeForIO, tableName: string): Promise<boolean>;
+declare function getTableColumnsRuntime(runtime: SyncRuntimeForIO, tableName: string): Promise<{
     [key: string]: ColumnInfo;
 }>;
-declare function getTableIndexesRuntime(runtime: SyncRuntime, tableName: string): Promise<IndexInfo>;
+declare function getTableIndexesRuntime(runtime: SyncRuntimeForIO, tableName: string): Promise<IndexInfo>;
 /**
  * 比较字段定义变化
  */
-declare function compareFieldDefinition(dbDialect: DbDialect, existingColumn: ColumnInfo, fieldDef: FieldDefinition): FieldChange[];
+declare function compareFieldDefinition(dbDialect: DbDialect, existingColumn: Pick<ColumnInfo, "type" | "max" | "nullable" | "defaultValue" | "comment">, fieldDef: FieldDefinition): FieldChange[];
 export {};

package/dist/sync/syncTable.js

@@ -89,11 +89,12 @@ export const syncTable = (async (ctx, items) => {
                 applyFieldDefaults(fieldDef);
             }
             const existsTable = await tableExistsRuntime(runtime, tableName);
+            const tableFields = tableDefinition;
             if (existsTable) {
-                await modifyTableRuntime(runtime, tableName, tableDefinition);
+                await modifyTableRuntime(runtime, tableName, tableFields);
             }
             else {
-                await createTable(runtime, tableName, tableDefinition);
+                await createTable(runtime, tableName, tableFields);
             }
             // 记录处理过的表名（用于清理缓存）
             processedTables.push(tableName);
@@ -264,24 +265,105 @@ function quoteIdentifier(dbDialect, identifier) {
 function escapeComment(str) {
     return String(str).replace(/"/g, '\\"');
 }
+function normalizeColumnDefaultValue(value) {
+    if (value === null)
+        return null;
+    if (typeof value === "string" || typeof value === "number" || typeof value === "boolean")
+        return value;
+    if (Array.isArray(value)) {
+        const items = [];
+        for (const v of value) {
+            items.push(normalizeColumnDefaultValue(v));
+        }
+        return items;
+    }
+    return String(value);
+}
 // 注意：这里刻意不封装“logFieldChange/formatFieldList”之类的一次性工具函数，
 // 以减少抽象层级（按项目要求：能直写就直写）。
 /**
  * 为字段定义应用默认值
  */
+function isJsonValue(value) {
+    if (value === null)
+        return true;
+    if (typeof value === "string" || typeof value === "number" || typeof value === "boolean")
+        return true;
+    if (Array.isArray(value)) {
+        return value.every((v) => isJsonValue(v));
+    }
+    if (typeof value === "object") {
+        for (const v of Object.values(value)) {
+            if (v === undefined)
+                continue;
+            if (!isJsonValue(v))
+                return false;
+        }
+        return true;
+    }
+    return false;
+}
 function applyFieldDefaults(fieldDef) {
     if (!fieldDef || typeof fieldDef !== "object")
         return;
-    const normalized = normalizeFieldDefinition(fieldDef);
-    fieldDef.detail = normalized.detail;
-    fieldDef.min = normalized.min;
-    fieldDef.max = normalized.max;
-    fieldDef.default = normalized.default;
-    fieldDef.index = normalized.index;
-    fieldDef.unique = normalized.unique;
-    fieldDef.nullable = normalized.nullable;
-    fieldDef.unsigned = normalized.unsigned;
-    fieldDef.regexp = normalized.regexp;
+    const record = fieldDef;
+    const name = record["name"];
+    const type = record["type"];
+    if (typeof name !== "string" || typeof type !== "string")
+        return;
+    const minRaw = record["min"];
+    const maxRaw = record["max"];
+    const defaultRaw = record["default"];
+    const detailRaw = record["detail"];
+    const indexRaw = record["index"];
+    const uniqueRaw = record["unique"];
+    const nullableRaw = record["nullable"];
+    const unsignedRaw = record["unsigned"];
+    const regexpRaw = record["regexp"];
+    const input = {
+        name: name,
+        type: type
+    };
+    if (typeof detailRaw === "string") {
+        input.detail = detailRaw;
+    }
+    if (typeof minRaw === "number" || minRaw === null) {
+        input.min = minRaw;
+    }
+    if (typeof maxRaw === "number" || maxRaw === null) {
+        input.max = maxRaw;
+    }
+    if (defaultRaw === null) {
+        input.default = null;
+    }
+    else if (isJsonValue(defaultRaw)) {
+        input.default = defaultRaw;
+    }
+    if (typeof indexRaw === "boolean") {
+        input.index = indexRaw;
+    }
+    if (typeof uniqueRaw === "boolean") {
+        input.unique = uniqueRaw;
+    }
+    if (typeof nullableRaw === "boolean") {
+        input.nullable = nullableRaw;
+    }
+    if (typeof unsignedRaw === "boolean") {
+        input.unsigned = unsignedRaw;
+    }
+    if (typeof regexpRaw === "string" || regexpRaw === null) {
+        input.regexp = regexpRaw;
+    }
+    const normalized = normalizeFieldDefinition(input);
+    record["detail"] = normalized.detail;
+    record["min"] = normalized.min;
+    record["max"] = normalized.max;
+    record["default"] = normalized.default;
+    record["index"] = normalized.index;
+    record["unique"] = normalized.unique;
+    record["nullable"] = normalized.nullable;
+    record["unsigned"] = normalized.unsigned;
+    record["regexp"] = normalized.regexp;
 }
 /**
  * 判断是否为字符串或数组类型（需要长度参数）
@@ -538,7 +620,8 @@ function isCompatibleTypeChange(currentType, newType) {
 // 读：表是否存在
 // ---------------------------------------------------------------------------
 async function tableExistsRuntime(runtime, tableName) {
-    if (!runtime.db)
+    const db = runtime.db;
+    if (!db)
         throw new Error("SQL 执行器未初始化");
     try {
         // 统一交由方言层构造 SQL；syncTable 仅决定“要查哪个 schema/db”。
@@ -553,7 +636,7 @@ async function tableExistsRuntime(runtime, tableName) {
             schema = "public";
         }
         const q = getDialectByName(runtime.dbDialect).tableExistsQuery(tableName, schema);
-        const res = await runtime.db.unsafe(q.sql, q.params);
+        const res = await db.unsafe(q.sql, q.params);
         return (res.data?.[0]?.count || 0) > 0;
     }
     catch (error) {
@@ -569,6 +652,9 @@ async function tableExistsRuntime(runtime, tableName) {
 // ---------------------------------------------------------------------------
 async function getTableColumnsRuntime(runtime, tableName) {
     const columns = {};
+    const db = runtime.db;
+    if (!db)
+        throw new Error("SQL 执行器未初始化");
     try {
         // 方言差异说明：
         // - MySQL：information_schema.columns 最完整，包含 COLUMN_TYPE 与 COLUMN_COMMENT。
@@ -576,9 +662,9 @@ async function getTableColumnsRuntime(runtime, tableName) {
         // - SQLite：PRAGMA table_info 仅提供 type/notnull/default 等有限信息，无列注释。
         if (runtime.dbDialect === "mysql") {
             const q = getSyncTableColumnsInfoQuery({ dialect: "mysql", table: tableName, dbName: runtime.dbName });
-            const result = await runtime.db.unsafe(q.columns.sql, q.columns.params);
+            const result = await db.unsafe(q.columns.sql, q.columns.params);
             for (const row of result.data) {
-                const defaultValue = row.COLUMN_DEFAULT;
+                const defaultValue = normalizeColumnDefaultValue(row.COLUMN_DEFAULT);
                 columns[row.COLUMN_NAME] = {
                     type: row.DATA_TYPE,
                     columnType: row.COLUMN_TYPE,
@@ -592,8 +678,8 @@ async function getTableColumnsRuntime(runtime, tableName) {
         }
         else if (runtime.dbDialect === "postgresql") {
             const q = getSyncTableColumnsInfoQuery({ dialect: "postgresql", table: tableName, dbName: runtime.dbName });
-            const result = await runtime.db.unsafe(q.columns.sql, q.columns.params);
-            const comments = q.comments ? (await runtime.db.unsafe(q.comments.sql, q.comments.params)).data : [];
+            const result = await db.unsafe(q.columns.sql, q.columns.params);
+            const comments = q.comments ? (await db.unsafe(q.comments.sql, q.comments.params)).data : [];
             const commentMap = {};
             for (const r of comments)
                 commentMap[r.column_name] = r.column_comment;
@@ -604,14 +690,14 @@ async function getTableColumnsRuntime(runtime, tableName) {
                     length: row.character_maximum_length,
                     max: row.character_maximum_length,
                     nullable: String(row.is_nullable).toUpperCase() === "YES",
-                    defaultValue: row.column_default,
+                    defaultValue: normalizeColumnDefaultValue(row.column_default),
                     comment: commentMap[row.column_name] ?? null
                 };
             }
         }
         else if (runtime.dbDialect === "sqlite") {
             const q = getSyncTableColumnsInfoQuery({ dialect: "sqlite", table: tableName, dbName: runtime.dbName });
-            const result = await runtime.db.unsafe(q.columns.sql, q.columns.params);
+            const result = await db.unsafe(q.columns.sql, q.columns.params);
             for (const row of result.data) {
                 let baseType = String(row.type || "").toUpperCase();
                 let max = null;
@@ -632,7 +718,7 @@ async function getTableColumnsRuntime(runtime, tableName) {
                     length: max,
                     max: max,
                     nullable: row.notnull === 0,
-                    defaultValue: row.dflt_value,
+                    defaultValue: normalizeColumnDefaultValue(row.dflt_value),
                     comment: null
                 };
             }
@@ -652,6 +738,9 @@ async function getTableColumnsRuntime(runtime, tableName) {
 // ---------------------------------------------------------------------------
 async function getTableIndexesRuntime(runtime, tableName) {
     const indexes = {};
+    const db = runtime.db;
+    if (!db)
+        throw new Error("SQL 执行器未初始化");
     try {
         // 方言差异说明：
         // - MySQL：information_schema.statistics 直接给出 index -> column 映射。
@@ -659,7 +748,7 @@ async function getTableIndexesRuntime(runtime, tableName) {
         // - SQLite：PRAGMA index_list + index_info；同样仅收集单列索引，避免多列索引误判。
         if (runtime.dbDialect === "mysql") {
             const q = getSyncTableIndexesQuery({ dialect: "mysql", table: tableName, dbName: runtime.dbName });
-            const result = await runtime.db.unsafe(q.sql, q.params);
+            const result = await db.unsafe(q.sql, q.params);
             for (const row of result.data) {
                 const indexName = row.INDEX_NAME;
                 const current = indexes[indexName];
@@ -673,7 +762,7 @@ async function getTableIndexesRuntime(runtime, tableName) {
         }
         else if (runtime.dbDialect === "postgresql") {
             const q = getSyncTableIndexesQuery({ dialect: "postgresql", table: tableName, dbName: runtime.dbName });
-            const result = await runtime.db.unsafe(q.sql, q.params);
+            const result = await db.unsafe(q.sql, q.params);
             for (const row of result.data) {
                 const m = /\(([^)]+)\)/.exec(row.indexdef);
                 if (m) {
@@ -685,10 +774,10 @@ async function getTableIndexesRuntime(runtime, tableName) {
         }
         else if (runtime.dbDialect === "sqlite") {
             const quotedTable = quoteIdentifier("sqlite", tableName);
-            const list = await runtime.db.unsafe(`PRAGMA index_list(${quotedTable})`);
+            const list = await db.unsafe(`PRAGMA index_list(${quotedTable})`);
             for (const idx of list.data) {
                 const quotedIndex = quoteIdentifier("sqlite", idx.name);
-                const info = await runtime.db.unsafe(`PRAGMA index_info(${quotedIndex})`);
+                const info = await db.unsafe(`PRAGMA index_info(${quotedIndex})`);
                 const cols = info.data.map((r) => r.name);
                 if (cols.length === 1)
                     indexes[idx.name] = cols;

package/dist/types/api.d.ts

@@ -2,8 +2,9 @@
  * Befly API 类型定义
  */
 import type { BeflyContext } from "./befly";
-import type { KeyValue } from "./common";
+import type { JsonValue, KeyValue } from "./common";
 import type { RequestContext } from "./context";
+import type { JwtPayload } from "./jwt";
 import type { TableDefinition } from "./validate";
 /**
  * HTTP 方法类型
@@ -18,7 +19,7 @@ export interface UserInfo {
     username?: string;
     email?: string;
     role?: string;
-    [key: string]: any;
+    [key: string]: JsonValue | undefined;
 }
 /**
  * 认证类型
@@ -32,7 +33,7 @@ export type AuthType = boolean | "admin" | "user" | string[];
 /**
  * API 处理器函数类型
  */
-export type ApiHandler<TBody = any, R = any> = (befly: BeflyContext, ctx: RequestContext<TBody>) => Promise<Response | R> | Response | R;
+export type ApiHandler<TBody = Record<string, JsonValue>, R = JsonValue> = (befly: BeflyContext, ctx: RequestContext<TBody>) => Promise<Response | R> | Response | R;
 /**
  * 字段规则定义
  * 键为字段名，值为字段规则字符串
@@ -41,7 +42,7 @@ export type FieldRules = Record<string, string>;
 /**
  * API 配置选项
  */
-export interface ApiOptions<TBody = any, R = any> {
+export interface ApiOptions<TBody = Record<string, JsonValue>, R = JsonValue> {
     /** HTTP 方法 */
     method: HttpMethod;
     /** 是否需要认证（true/false/角色数组） */
@@ -56,7 +57,7 @@ export interface ApiOptions<TBody = any, R = any> {
 /**
  * API 路由配置
  */
-export interface ApiRoute<TBody = any, R = any> {
+export interface ApiRoute<TBody = Record<string, JsonValue>, R = JsonValue> {
     /** 接口名称（必填） */
     name: string;
     /** 处理器函数（必填） */
@@ -97,7 +98,7 @@ export interface ApiBuilder {
     /** 设置必填字段 */
     required(fields: string[]): this;
     /** 设置处理器 */
-    handler<TBody = any, R = any>(handler: ApiHandler<TBody, R>): this;
+    handler<TBody = Record<string, JsonValue>, R = JsonValue>(handler: ApiHandler<TBody, R>): this;
     /** 构建路由 */
     build(): ApiRoute;
 }
@@ -106,11 +107,11 @@ export interface ApiBuilder {
  */
 export interface ApiResponse {
     /** 成功响应 */
-    success<T = any>(message: string, data?: T): Response;
+    success<T = JsonValue>(message: string, data?: T): Response;
     /** 失败响应 */
-    error(message: string, error?: any): Response;
+    error(message: string, error?: Error | JsonValue): Response;
     /** JSON 响应 */
-    json<T = any>(data: T, status?: number): Response;
+    json<T = JsonValue>(data: T, status?: number): Response;
     /** 文本响应 */
     text(text: string, status?: number): Response;
     /** HTML 响应 */
@@ -147,7 +148,7 @@ export interface TokenCheckData {
     /** 令牌是否有效 */
     valid: boolean;
     /** JWT 载荷（有效时返回） */
-    payload?: any;
+    payload?: JwtPayload;
     /** 过期时间（秒） */
     expiresIn?: number;
 }