fdb2 1.0.26 → 1.0.31

package/dist/server/core/errors.js

@@ -0,0 +1,61 @@
+"use strict";
+/**
+ * CLI 统一错误码与错误类型
+ * 退出码：
+ *   0 成功
+ *   1 通用错误（GENERIC）
+ *   2 参数/用法错误（PARAM_ERROR、UNKNOWN_COMMAND、INVALID_FILTER）
+ *   3 连接不存在（CONN_NOT_FOUND、NO_DEFAULT_CONN）
+ *   4 未就绪（NOT_READY）
+ *   5 需确认/预演（REQUIRE_DRYRUN、CONFIRM_REQUIRED、CONFIRM_EXPIRED、FORCE_REQUIRED、WRITE_BLOCKED、MULTI_STATEMENT_BLOCKED）
+ *   6 SQL/数据库错误（SQL_ERROR、DB_NOT_FOUND、TABLE_NOT_FOUND、COLUMN_NOT_FOUND、UNSUPPORTED、DRIVER_UNAVAILABLE）
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AppError = void 0;
+exports.exitCodeOf = exitCodeOf;
+class AppError extends Error {
+    code;
+    hint;
+    details;
+    constructor(code, message, opts) {
+        super(message);
+        this.code = code;
+        this.hint = opts?.hint;
+        this.details = opts?.details;
+    }
+}
+exports.AppError = AppError;
+function exitCodeOf(code) {
+    switch (code) {
+        case 'PARAM_ERROR':
+        case 'UNKNOWN_COMMAND':
+        case 'INVALID_FILTER':
+        case 'INVALID_COLUMN_SPEC':
+        case 'INVALID_OPTION':
+            return 2;
+        case 'CONN_NOT_FOUND':
+        case 'NO_DEFAULT_CONN':
+            return 3;
+        case 'NOT_READY':
+            return 4;
+        case 'REQUIRE_DRYRUN':
+        case 'CONFIRM_REQUIRED':
+        case 'CONFIRM_EXPIRED':
+        case 'FORCE_REQUIRED':
+        case 'WRITE_BLOCKED':
+        case 'MULTI_STATEMENT_BLOCKED':
+        case 'WRITE_NOT_ALLOWED':
+            return 5;
+        case 'SQL_ERROR':
+        case 'DB_NOT_FOUND':
+        case 'TABLE_NOT_FOUND':
+        case 'COLUMN_NOT_FOUND':
+        case 'UNSUPPORTED':
+        case 'DRIVER_UNAVAILABLE':
+        case 'EXEC_ERROR':
+            return 6;
+        default:
+            return 1;
+    }
+}
+//# sourceMappingURL=errors.js.map

package/dist/server/core/errors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../../../server/core/errors.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;GAUG;;;AAeH,gCAgCC;AA7CD,MAAa,QAAS,SAAQ,KAAK;IACjC,IAAI,CAAS;IACb,IAAI,CAAU;IACd,OAAO,CAAO;IAEd,YAAY,IAAY,EAAE,OAAe,EAAE,IAAuC;QAChF,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,IAAI,GAAG,IAAI,EAAE,IAAI,CAAC;QACvB,IAAI,CAAC,OAAO,GAAG,IAAI,EAAE,OAAO,CAAC;IAC/B,CAAC;CACF;AAXD,4BAWC;AAED,SAAgB,UAAU,CAAC,IAAY;IACrC,QAAQ,IAAI,EAAE,CAAC;QACb,KAAK,aAAa,CAAC;QACnB,KAAK,iBAAiB,CAAC;QACvB,KAAK,gBAAgB,CAAC;QACtB,KAAK,qBAAqB,CAAC;QAC3B,KAAK,gBAAgB;YACnB,OAAO,CAAC,CAAC;QACX,KAAK,gBAAgB,CAAC;QACtB,KAAK,iBAAiB;YACpB,OAAO,CAAC,CAAC;QACX,KAAK,WAAW;YACd,OAAO,CAAC,CAAC;QACX,KAAK,gBAAgB,CAAC;QACtB,KAAK,kBAAkB,CAAC;QACxB,KAAK,iBAAiB,CAAC;QACvB,KAAK,gBAAgB,CAAC;QACtB,KAAK,eAAe,CAAC;QACrB,KAAK,yBAAyB,CAAC;QAC/B,KAAK,mBAAmB;YACtB,OAAO,CAAC,CAAC;QACX,KAAK,WAAW,CAAC;QACjB,KAAK,cAAc,CAAC;QACpB,KAAK,iBAAiB,CAAC;QACvB,KAAK,kBAAkB,CAAC;QACxB,KAAK,aAAa,CAAC;QACnB,KAAK,oBAAoB,CAAC;QAC1B,KAAK,YAAY;YACf,OAAO,CAAC,CAAC;QACX;YACE,OAAO,CAAC,CAAC;IACb,CAAC;AACH,CAAC"}

package/dist/server/core/errors.ts

@@ -0,0 +1,58 @@
+/**
+ * CLI 统一错误码与错误类型
+ * 退出码：
+ *   0 成功
+ *   1 通用错误（GENERIC）
+ *   2 参数/用法错误（PARAM_ERROR、UNKNOWN_COMMAND、INVALID_FILTER）
+ *   3 连接不存在（CONN_NOT_FOUND、NO_DEFAULT_CONN）
+ *   4 未就绪（NOT_READY）
+ *   5 需确认/预演（REQUIRE_DRYRUN、CONFIRM_REQUIRED、CONFIRM_EXPIRED、FORCE_REQUIRED、WRITE_BLOCKED、MULTI_STATEMENT_BLOCKED）
+ *   6 SQL/数据库错误（SQL_ERROR、DB_NOT_FOUND、TABLE_NOT_FOUND、COLUMN_NOT_FOUND、UNSUPPORTED、DRIVER_UNAVAILABLE）
+ */
+
+export class AppError extends Error {
+  code: string;
+  hint?: string;
+  details?: any;
+
+  constructor(code: string, message: string, opts?: { hint?: string; details?: any }) {
+    super(message);
+    this.code = code;
+    this.hint = opts?.hint;
+    this.details = opts?.details;
+  }
+}
+
+export function exitCodeOf(code: string): number {
+  switch (code) {
+    case 'PARAM_ERROR':
+    case 'UNKNOWN_COMMAND':
+    case 'INVALID_FILTER':
+    case 'INVALID_COLUMN_SPEC':
+    case 'INVALID_OPTION':
+      return 2;
+    case 'CONN_NOT_FOUND':
+    case 'NO_DEFAULT_CONN':
+      return 3;
+    case 'NOT_READY':
+      return 4;
+    case 'REQUIRE_DRYRUN':
+    case 'CONFIRM_REQUIRED':
+    case 'CONFIRM_EXPIRED':
+    case 'FORCE_REQUIRED':
+    case 'WRITE_BLOCKED':
+    case 'MULTI_STATEMENT_BLOCKED':
+    case 'WRITE_NOT_ALLOWED':
+      return 5;
+    case 'SQL_ERROR':
+    case 'DB_NOT_FOUND':
+    case 'TABLE_NOT_FOUND':
+    case 'COLUMN_NOT_FOUND':
+    case 'UNSUPPORTED':
+    case 'DRIVER_UNAVAILABLE':
+    case 'EXEC_ERROR':
+      return 6;
+    default:
+      return 1;
+  }
+}

package/dist/server/core/filter-dsl.d.ts

@@ -0,0 +1,39 @@
+/**
+ * 过滤条件 DSL：把自然语言里的结构化筛选条件解析成条件树，
+ * 由 query-builder 编译为带白名单校验与参数绑定的 SQL。
+ *
+ * 行内语法  --filter "<field><op><value>"
+ *   =  !=  <>  >  >=  <  <=
+ *   ~  包含子串(模糊)    ^  前缀    $  后缀
+ *   ~c 区分大小写包含
+ *   in/nin 集合      between 区间      null/notnull 空值
+ *   值中逗号用 \, 转义
+ *
+ * 复杂逻辑 --filter-json '{"or":[...],"and":[...]}'
+ */
+export interface FilterLeaf {
+    field: string;
+    op: 'eq' | 'neq' | 'gt' | 'gte' | 'lt' | 'lte' | 'like' | 'likeCase' | 'starts' | 'ends' | 'in' | 'nin' | 'between' | 'isNull' | 'notNull';
+    value?: any;
+}
+export type FilterNode = {
+    type: 'and';
+    children: FilterNode[];
+} | {
+    type: 'or';
+    children: FilterNode[];
+} | {
+    type: 'not';
+    child: FilterNode;
+} | {
+    type: 'leaf';
+    leaf: FilterLeaf;
+};
+export declare function alwaysTrue(): FilterNode;
+/** 单个条件文本解析 */
+export declare function parseFilterExpr(expr: string): FilterLeaf;
+/** 解析 --filter 重复参数（多个 AND） */
+export declare function parseFilters(exprs: string[]): FilterNode;
+/** 解析 --filter-json 复杂条件 */
+export declare function parseFilterJson(jsonStr: string): FilterNode;
+//# sourceMappingURL=filter-dsl.d.ts.map

package/dist/server/core/filter-dsl.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"filter-dsl.d.ts","sourceRoot":"","sources":["../../../server/core/filter-dsl.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,MAAM,WAAW,UAAU;IACzB,KAAK,EAAE,MAAM,CAAC;IACd,EAAE,EACE,IAAI,GAAG,KAAK,GACZ,IAAI,GAAG,KAAK,GAAG,IAAI,GAAG,KAAK,GAC3B,MAAM,GAAG,UAAU,GAAG,QAAQ,GAAG,MAAM,GACvC,IAAI,GAAG,KAAK,GAAG,SAAS,GACxB,QAAQ,GAAG,SAAS,CAAC;IACzB,KAAK,CAAC,EAAE,GAAG,CAAC;CACb;AAED,MAAM,MAAM,UAAU,GAClB;IAAE,IAAI,EAAE,KAAK,CAAC;IAAC,QAAQ,EAAE,UAAU,EAAE,CAAA;CAAE,GACvC;IAAE,IAAI,EAAE,IAAI,CAAC;IAAC,QAAQ,EAAE,UAAU,EAAE,CAAA;CAAE,GACtC;IAAE,IAAI,EAAE,KAAK,CAAC;IAAC,KAAK,EAAE,UAAU,CAAA;CAAE,GAClC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,UAAU,CAAA;CAAE,CAAC;AAEvC,wBAAgB,UAAU,IAAI,UAAU,CAEvC;AAED,eAAe;AACf,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,GAAG,UAAU,CAqDxD;AA4BD,+BAA+B;AAC/B,wBAAgB,YAAY,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,UAAU,CAKxD;AAED,4BAA4B;AAC5B,wBAAgB,eAAe,CAAC,OAAO,EAAE,MAAM,GAAG,UAAU,CAQ3D"}

package/dist/server/core/filter-dsl.js

@@ -0,0 +1,167 @@
+"use strict";
+/**
+ * 过滤条件 DSL：把自然语言里的结构化筛选条件解析成条件树，
+ * 由 query-builder 编译为带白名单校验与参数绑定的 SQL。
+ *
+ * 行内语法  --filter "<field><op><value>"
+ *   =  !=  <>  >  >=  <  <=
+ *   ~  包含子串(模糊)    ^  前缀    $  后缀
+ *   ~c 区分大小写包含
+ *   in/nin 集合      between 区间      null/notnull 空值
+ *   值中逗号用 \, 转义
+ *
+ * 复杂逻辑 --filter-json '{"or":[...],"and":[...]}'
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.alwaysTrue = alwaysTrue;
+exports.parseFilterExpr = parseFilterExpr;
+exports.parseFilters = parseFilters;
+exports.parseFilterJson = parseFilterJson;
+function alwaysTrue() {
+    return { type: 'leaf', leaf: { field: '', op: 'eq', value: 1 } };
+}
+/** 单个条件文本解析 */
+function parseFilterExpr(expr) {
+    if (expr == null || typeof expr !== 'string') {
+        throw new Error('条件为空');
+    }
+    const text = expr.trim();
+    if (!text) {
+        throw new Error('条件为空');
+    }
+    const nullMatch = /^([^\s=<>~^$!]+)\s*(null|notnull|isnull|notnull)$/i.exec(text);
+    if (nullMatch) {
+        const op = nullMatch[2].toLowerCase();
+        return { field: nullMatch[1], op: op === 'isnull' || op === 'null' ? 'isNull' : 'notNull' };
+    }
+    // 操作符顺序：多字符在前
+    const ops = [
+        ['!=', 'neq'],
+        ['<>', 'neq'],
+        ['>=', 'gte'],
+        ['<=', 'lte'],
+        ['~c', 'likeCase'],
+        ['~', 'like'],
+        ['like', 'like'],
+        ['starts', 'starts'],
+        ['ends', 'ends'],
+        ['in', 'in'],
+        ['nin', 'nin'],
+        ['between', 'between'],
+        ['>', 'gt'],
+        ['<', 'lt'],
+        ['=', 'eq'],
+        ['^', 'starts'],
+        ['$', 'ends']
+    ];
+    for (const [sym, op] of ops) {
+        const idx = text.indexOf(sym);
+        if (idx > 0) {
+            const field = text.slice(0, idx).trim();
+            let rawValue = text.slice(idx + sym.length).trim();
+            if (!field || rawValue === '') {
+                continue;
+            }
+            if (op === 'in' || op === 'nin' || op === 'between') {
+                const parts = splitEscaped(rawValue);
+                return { field, op: op, value: parts };
+            }
+            return { field, op: op, value: unescapeValue(rawValue) };
+        }
+    }
+    throw new Error(`无法解析条件: ${expr}（支持 = != > < >= <= ~ ^ $ in nin between null）`);
+}
+function splitEscaped(value) {
+    const parts = [];
+    let current = '';
+    let escaped = false;
+    for (const ch of value) {
+        if (escaped) {
+            current += ch;
+            escaped = false;
+        }
+        else if (ch === '\\') {
+            escaped = true;
+        }
+        else if (ch === ',') {
+            parts.push(current);
+            current = '';
+        }
+        else {
+            current += ch;
+        }
+    }
+    if (escaped)
+        current += '\\';
+    parts.push(current);
+    return parts;
+}
+function unescapeValue(value) {
+    return value.replace(/\\,/g, ',').trim();
+}
+/** 解析 --filter 重复参数（多个 AND） */
+function parseFilters(exprs) {
+    const leaves = (exprs || []).filter(Boolean).map((e) => parseFilterExpr(e));
+    if (leaves.length === 0)
+        return alwaysTrue();
+    if (leaves.length === 1)
+        return { type: 'leaf', leaf: leaves[0] };
+    return { type: 'and', children: leaves.map((l) => ({ type: 'leaf', leaf: l })) };
+}
+/** 解析 --filter-json 复杂条件 */
+function parseFilterJson(jsonStr) {
+    let raw;
+    try {
+        raw = JSON.parse(jsonStr);
+    }
+    catch (e) {
+        throw new Error('--filter-json 不是合法 JSON');
+    }
+    return parseJsonNode(raw);
+}
+function parseJsonNode(node) {
+    if (!node || typeof node !== 'object') {
+        throw new Error('filter-json 节点必须是对象');
+    }
+    if (node.and) {
+        return { type: 'and', children: (Array.isArray(node.and) ? node.and : [node.and]).map(parseJsonNode) };
+    }
+    if (node.or) {
+        return { type: 'or', children: (Array.isArray(node.or) ? node.or : [node.or]).map(parseJsonNode) };
+    }
+    if (node.not) {
+        return { type: 'not', child: parseJsonNode(node.not) };
+    }
+    const field = node.field ?? node.f;
+    if (!field)
+        throw new Error('filter-json 条件缺少 field');
+    const opRaw = (node.op ?? '=');
+    const value = node.value !== undefined ? node.value : node.v;
+    const leaf = {
+        field: String(field),
+        op: normalizeOp(opRaw),
+        value
+    };
+    return { type: 'leaf', leaf };
+}
+function normalizeOp(op) {
+    const map = {
+        '=': 'eq', '==': 'eq', eq: 'eq',
+        '!=': 'neq', '<>': 'neq', neq: 'neq',
+        '>': 'gt', gt: 'gt', '>=': 'gte', gte: 'gte',
+        '<': 'lt', lt: 'lt', '<=': 'lte', lte: 'lte',
+        '~': 'like', like: 'like', 'contains': 'like',
+        '~c': 'likeCase', likecase: 'likeCase',
+        '^': 'starts', starts: 'starts', 'starts_with': 'starts',
+        '$': 'ends', ends: 'ends', 'ends_with': 'ends',
+        in: 'in', 'not_in': 'nin', nin: 'nin',
+        between: 'between',
+        'is_null': 'isNull', isnull: 'isNull', null: 'isNull', 'is null': 'isNull',
+        'not_null': 'notNull', notnull: 'notNull', 'not null': 'notNull'
+    };
+    const key = String(op).toLowerCase();
+    if (map[key])
+        return map[key];
+    throw new Error(`不支持的操作符: ${op}`);
+}
+//# sourceMappingURL=filter-dsl.js.map

package/dist/server/core/filter-dsl.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"filter-dsl.js","sourceRoot":"","sources":["../../../server/core/filter-dsl.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;GAYG;;AAmBH,gCAEC;AAGD,0CAqDC;AA6BD,oCAKC;AAGD,0CAQC;AAvGD,SAAgB,UAAU;IACxB,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE,CAAC;AACnE,CAAC;AAED,eAAe;AACf,SAAgB,eAAe,CAAC,IAAY;IAC1C,IAAI,IAAI,IAAI,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC7C,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,CAAC;IAC1B,CAAC;IACD,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;IACzB,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,CAAC;IAC1B,CAAC;IAED,MAAM,SAAS,GAAG,oDAAoD,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAClF,IAAI,SAAS,EAAE,CAAC;QACd,MAAM,EAAE,GAAG,SAAS,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;QACtC,OAAO,EAAE,KAAK,EAAE,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,EAAE,KAAK,QAAQ,IAAI,EAAE,KAAK,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC;IAC9F,CAAC;IAED,cAAc;IACd,MAAM,GAAG,GAAG;QACV,CAAC,IAAI,EAAE,KAAK,CAAC;QACb,CAAC,IAAI,EAAE,KAAK,CAAC;QACb,CAAC,IAAI,EAAE,KAAK,CAAC;QACb,CAAC,IAAI,EAAE,KAAK,CAAC;QACb,CAAC,IAAI,EAAE,UAAU,CAAC;QAClB,CAAC,GAAG,EAAE,MAAM,CAAC;QACb,CAAC,MAAM,EAAE,MAAM,CAAC;QAChB,CAAC,QAAQ,EAAE,QAAQ,CAAC;QACpB,CAAC,MAAM,EAAE,MAAM,CAAC;QAChB,CAAC,IAAI,EAAE,IAAI,CAAC;QACZ,CAAC,KAAK,EAAE,KAAK,CAAC;QACd,CAAC,SAAS,EAAE,SAAS,CAAC;QACtB,CAAC,GAAG,EAAE,IAAI,CAAC;QACX,CAAC,GAAG,EAAE,IAAI,CAAC;QACX,CAAC,GAAG,EAAE,IAAI,CAAC;QACX,CAAC,GAAG,EAAE,QAAQ,CAAC;QACf,CAAC,GAAG,EAAE,MAAM,CAAC;KACd,CAAC;IAEF,KAAK,MAAM,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,GAAG,EAAE,CAAC;QAC5B,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAC9B,IAAI,GAAG,GAAG,CAAC,EAAE,CAAC;YACZ,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;YACxC,IAAI,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;YACnD,IAAI,CAAC,KAAK,IAAI,QAAQ,KAAK,EAAE,EAAE,CAAC;gBAC9B,SAAS;YACX,CAAC;YACD,IAAI,EAAE,KAAK,IAAI,IAAI,EAAE,KAAK,KAAK,IAAI,EAAE,KAAK,SAAS,EAAE,CAAC;gBACpD,MAAM,KAAK,GAAG,YAAY,CAAC,QAAQ,CAAC,CAAC;gBACrC,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,EAAS,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;YAChD,CAAC;YACD,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,EAAS,EAAE,KAAK,EAAE,aAAa,CAAC,QAAQ,CAAC,EAAE,CAAC;QAClE,CAAC;IACH,CAAC;IAED,MAAM,IAAI,KAAK,CAAC,WAAW,IAAI,+CAA+C,CAAC,CAAC;AAClF,CAAC;AAED,SAAS,YAAY,CAAC,KAAa;IACjC,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,IAAI,OAAO,GAAG,EAAE,CAAC;IACjB,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,KAAK,MAAM,EAAE,IAAI,KAAK,EAAE,CAAC;QACvB,IAAI,OAAO,EAAE,CAAC;YACZ,OAAO,IAAI,EAAE,CAAC;YACd,OAAO,GAAG,KAAK,CAAC;QAClB,CAAC;aAAM,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC;YACvB,OAAO,GAAG,IAAI,CAAC;QACjB,CAAC;aAAM,IAAI,EAAE,KAAK,GAAG,EAAE,CAAC;YACtB,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YACpB,OAAO,GAAG,EAAE,CAAC;QACf,CAAC;aAAM,CAAC;YACN,OAAO,IAAI,EAAE,CAAC;QAChB,CAAC;IACH,CAAC;IACD,IAAI,OAAO;QAAE,OAAO,IAAI,IAAI,CAAC;IAC7B,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACpB,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,aAAa,CAAC,KAAa;IAClC,OAAO,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;AAC3C,CAAC;AAED,+BAA+B;AAC/B,SAAgB,YAAY,CAAC,KAAe;IAC1C,MAAM,MAAM,GAAG,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,CAAC;IAC5E,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,UAAU,EAAE,CAAC;IAC7C,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;IAClE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;AAC5F,CAAC;AAED,4BAA4B;AAC5B,SAAgB,eAAe,CAAC,OAAe;IAC7C,IAAI,GAAQ,CAAC;IACb,IAAI,CAAC;QACH,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAC5B,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;IAC7C,CAAC;IACD,OAAO,aAAa,CAAC,GAAG,CAAC,CAAC;AAC5B,CAAC;AAED,SAAS,aAAa,CAAC,IAAS;IAC9B,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;QACtC,MAAM,IAAI,KAAK,CAAC,qBAAqB,CAAC,CAAC;IACzC,CAAC;IACD,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;QACb,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,aAAa,CAAC,EAAE,CAAC;IACzG,CAAC;IACD,IAAI,IAAI,CAAC,EAAE,EAAE,CAAC;QACZ,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,aAAa,CAAC,EAAE,CAAC;IACrG,CAAC;IACD,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;QACb,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,aAAa,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;IACzD,CAAC;IACD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,CAAC,CAAC;IACnC,IAAI,CAAC,KAAK;QAAE,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC;IACtD,MAAM,KAAK,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,GAAG,CAAW,CAAC;IACzC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IAC7D,MAAM,IAAI,GAAe;QACvB,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC;QACpB,EAAE,EAAE,WAAW,CAAC,KAAK,CAAC;QACtB,KAAK;KACN,CAAC;IACF,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;AAChC,CAAC;AAED,SAAS,WAAW,CAAC,EAAU;IAC7B,MAAM,GAAG,GAAqC;QAC5C,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,EAAE,IAAI;QAC/B,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK;QACpC,GAAG,EAAE,IAAI,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK;QAC5C,GAAG,EAAE,IAAI,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK;QAC5C,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM;QAC7C,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,UAAU;QACtC,GAAG,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,aAAa,EAAE,QAAQ;QACxD,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM;QAC9C,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK;QACrC,OAAO,EAAE,SAAS;QAClB,SAAS,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,QAAQ;QAC1E,UAAU,EAAE,SAAS,EAAE,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,SAAS;KACjE,CAAC;IACF,MAAM,GAAG,GAAG,MAAM,CAAC,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;IACrC,IAAI,GAAG,CAAC,GAAG,CAAC;QAAE,OAAO,GAAG,CAAC,GAAG,CAAC,CAAC;IAC9B,MAAM,IAAI,KAAK,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC;AACpC,CAAC"}

package/dist/server/core/filter-dsl.ts

@@ -0,0 +1,180 @@
+/**
+ * 过滤条件 DSL：把自然语言里的结构化筛选条件解析成条件树，
+ * 由 query-builder 编译为带白名单校验与参数绑定的 SQL。
+ *
+ * 行内语法  --filter "<field><op><value>"
+ *   =  !=  <>  >  >=  <  <=
+ *   ~  包含子串(模糊)    ^  前缀    $  后缀
+ *   ~c 区分大小写包含
+ *   in/nin 集合      between 区间      null/notnull 空值
+ *   值中逗号用 \, 转义
+ *
+ * 复杂逻辑 --filter-json '{"or":[...],"and":[...]}'
+ */
+
+export interface FilterLeaf {
+  field: string;
+  op:
+    | 'eq' | 'neq'
+    | 'gt' | 'gte' | 'lt' | 'lte'
+    | 'like' | 'likeCase' | 'starts' | 'ends'
+    | 'in' | 'nin' | 'between'
+    | 'isNull' | 'notNull';
+  value?: any;
+}
+
+export type FilterNode =
+  | { type: 'and'; children: FilterNode[] }
+  | { type: 'or'; children: FilterNode[] }
+  | { type: 'not'; child: FilterNode }
+  | { type: 'leaf'; leaf: FilterLeaf };
+
+export function alwaysTrue(): FilterNode {
+  return { type: 'leaf', leaf: { field: '', op: 'eq', value: 1 } };
+}
+
+/** 单个条件文本解析 */
+export function parseFilterExpr(expr: string): FilterLeaf {
+  if (expr == null || typeof expr !== 'string') {
+    throw new Error('条件为空');
+  }
+  const text = expr.trim();
+  if (!text) {
+    throw new Error('条件为空');
+  }
+
+  const nullMatch = /^([^\s=<>~^$!]+)\s*(null|notnull|isnull|notnull)$/i.exec(text);
+  if (nullMatch) {
+    const op = nullMatch[2].toLowerCase();
+    return { field: nullMatch[1], op: op === 'isnull' || op === 'null' ? 'isNull' : 'notNull' };
+  }
+
+  // 操作符顺序：多字符在前
+  const ops = [
+    ['!=', 'neq'],
+    ['<>', 'neq'],
+    ['>=', 'gte'],
+    ['<=', 'lte'],
+    ['~c', 'likeCase'],
+    ['~', 'like'],
+    ['like', 'like'],
+    ['starts', 'starts'],
+    ['ends', 'ends'],
+    ['in', 'in'],
+    ['nin', 'nin'],
+    ['between', 'between'],
+    ['>', 'gt'],
+    ['<', 'lt'],
+    ['=', 'eq'],
+    ['^', 'starts'],
+    ['$', 'ends']
+  ];
+
+  for (const [sym, op] of ops) {
+    const idx = text.indexOf(sym);
+    if (idx > 0) {
+      const field = text.slice(0, idx).trim();
+      let rawValue = text.slice(idx + sym.length).trim();
+      if (!field || rawValue === '') {
+        continue;
+      }
+      if (op === 'in' || op === 'nin' || op === 'between') {
+        const parts = splitEscaped(rawValue);
+        return { field, op: op as any, value: parts };
+      }
+      return { field, op: op as any, value: unescapeValue(rawValue) };
+    }
+  }
+
+  throw new Error(`无法解析条件: ${expr}（支持 = != > < >= <= ~ ^ $ in nin between null）`);
+}
+
+function splitEscaped(value: string): string[] {
+  const parts: string[] = [];
+  let current = '';
+  let escaped = false;
+  for (const ch of value) {
+    if (escaped) {
+      current += ch;
+      escaped = false;
+    } else if (ch === '\\') {
+      escaped = true;
+    } else if (ch === ',') {
+      parts.push(current);
+      current = '';
+    } else {
+      current += ch;
+    }
+  }
+  if (escaped) current += '\\';
+  parts.push(current);
+  return parts;
+}
+
+function unescapeValue(value: string): string {
+  return value.replace(/\\,/g, ',').trim();
+}
+
+/** 解析 --filter 重复参数（多个 AND） */
+export function parseFilters(exprs: string[]): FilterNode {
+  const leaves = (exprs || []).filter(Boolean).map((e) => parseFilterExpr(e));
+  if (leaves.length === 0) return alwaysTrue();
+  if (leaves.length === 1) return { type: 'leaf', leaf: leaves[0] };
+  return { type: 'and', children: leaves.map((l) => ({ type: 'leaf' as const, leaf: l })) };
+}
+
+/** 解析 --filter-json 复杂条件 */
+export function parseFilterJson(jsonStr: string): FilterNode {
+  let raw: any;
+  try {
+    raw = JSON.parse(jsonStr);
+  } catch (e) {
+    throw new Error('--filter-json 不是合法 JSON');
+  }
+  return parseJsonNode(raw);
+}
+
+function parseJsonNode(node: any): FilterNode {
+  if (!node || typeof node !== 'object') {
+    throw new Error('filter-json 节点必须是对象');
+  }
+  if (node.and) {
+    return { type: 'and', children: (Array.isArray(node.and) ? node.and : [node.and]).map(parseJsonNode) };
+  }
+  if (node.or) {
+    return { type: 'or', children: (Array.isArray(node.or) ? node.or : [node.or]).map(parseJsonNode) };
+  }
+  if (node.not) {
+    return { type: 'not', child: parseJsonNode(node.not) };
+  }
+  const field = node.field ?? node.f;
+  if (!field) throw new Error('filter-json 条件缺少 field');
+  const opRaw = (node.op ?? '=') as string;
+  const value = node.value !== undefined ? node.value : node.v;
+  const leaf: FilterLeaf = {
+    field: String(field),
+    op: normalizeOp(opRaw),
+    value
+  };
+  return { type: 'leaf', leaf };
+}
+
+function normalizeOp(op: string): FilterLeaf['op'] {
+  const map: Record<string, FilterLeaf['op']> = {
+    '=': 'eq', '==': 'eq', eq: 'eq',
+    '!=': 'neq', '<>': 'neq', neq: 'neq',
+    '>': 'gt', gt: 'gt', '>=': 'gte', gte: 'gte',
+    '<': 'lt', lt: 'lt', '<=': 'lte', lte: 'lte',
+    '~': 'like', like: 'like', 'contains': 'like',
+    '~c': 'likeCase', likecase: 'likeCase',
+    '^': 'starts', starts: 'starts', 'starts_with': 'starts',
+    '$': 'ends', ends: 'ends', 'ends_with': 'ends',
+    in: 'in', 'not_in': 'nin', nin: 'nin',
+    between: 'between',
+    'is_null': 'isNull', isnull: 'isNull', null: 'isNull', 'is null': 'isNull',
+    'not_null': 'notNull', notnull: 'notNull', 'not null': 'notNull'
+  };
+  const key = String(op).toLowerCase();
+  if (map[key]) return map[key];
+  throw new Error(`不支持的操作符: ${op}`);
+}

package/dist/server/core/guard.d.ts

@@ -0,0 +1,54 @@
+export interface WriteOpts {
+    dryRun?: boolean;
+    confirm?: string | null;
+    yes?: boolean;
+    force?: boolean;
+    write?: boolean;
+}
+export declare function computeToken(op: string, sql: string, params: any[]): string;
+export declare function verifyToken(token: string, op: string, sql: string, params: any[]): boolean;
+/** 令牌是否已使用（一次性，防重放） */
+export declare function isTokenUsed(token: string): boolean;
+/** 标记令牌已使用，保留到时间窗结束以便过期清理 */
+export declare function markTokenUsed(token: string): void;
+/** 检查全局只读模式 */
+export declare function checkReadonly(write: boolean | undefined): void;
+/** 影响行数阈值 */
+export declare function confirmThreshold(): number;
+/** 检查行数是否超阈值（超阈值需 --force） */
+export declare function checkThreshold(rows: number, force: boolean | undefined): void;
+/**
+ * 写操作统一入口：
+ *  - dryRun=true：估算行数，返回 token（不执行）
+ *  - 有 confirm：校验 token 并放行
+ *  - 破坏性操作（destructive=true）还需 --yes
+ */
+export declare function gateWrite(opts: {
+    op: string;
+    sql: string;
+    params: any[];
+    estimatedRows?: number | null;
+    destructive?: boolean;
+    write?: boolean;
+    dryRun?: boolean;
+    confirm?: string | null;
+    yes?: boolean;
+    force?: boolean;
+}): {
+    mode: 'execute' | 'dryrun';
+    token?: string;
+};
+/** 审计一个操作 */
+export declare function audit(opts: {
+    action: string;
+    conn?: string | null;
+    database?: string | null;
+    table?: string | null;
+    kind?: string | null;
+    sql?: string | null;
+    params?: any;
+    rows?: number | null;
+    ok: boolean;
+    error?: string | null;
+}): void;
+//# sourceMappingURL=guard.d.ts.map

package/dist/server/core/guard.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"guard.d.ts","sourceRoot":"","sources":["../../../server/core/guard.ts"],"names":[],"mappings":"AAcA,MAAM,WAAW,SAAS;IACxB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,GAAG,CAAC,EAAE,OAAO,CAAC;IACd,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,KAAK,CAAC,EAAE,OAAO,CAAC;CACjB;AAID,wBAAgB,YAAY,CAAC,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,GAAG,MAAM,CAK3E;AAED,wBAAgB,WAAW,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,GAAG,OAAO,CAY1F;AAsCD,uBAAuB;AACvB,wBAAgB,WAAW,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAGlD;AAED,6BAA6B;AAC7B,wBAAgB,aAAa,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAIjD;AAED,eAAe;AACf,wBAAgB,aAAa,CAAC,KAAK,EAAE,OAAO,GAAG,SAAS,GAAG,IAAI,CAO9D;AAED,aAAa;AACb,wBAAgB,gBAAgB,IAAI,MAAM,CAEzC;AAED,8BAA8B;AAC9B,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,GAAG,SAAS,GAAG,IAAI,CAM7E;AAED;;;;;GAKG;AACH,wBAAgB,SAAS,CACvB,IAAI,EAAE;IACJ,EAAE,EAAE,MAAM,CAAC;IACX,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,GAAG,EAAE,CAAC;IACd,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,GAAG,CAAC,EAAE,OAAO,CAAC;IACd,KAAK,CAAC,EAAE,OAAO,CAAC;CACjB,GACA;IAAE,IAAI,EAAE,SAAS,GAAG,QAAQ,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,CAiDhD;AAED,aAAa;AACb,wBAAgB,KAAK,CAAC,IAAI,EAAE;IAC1B,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,GAAG,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,MAAM,CAAC,EAAE,GAAG,CAAC;IACb,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,EAAE,EAAE,OAAO,CAAC;IACZ,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACvB,GAAG,IAAI,CAIP"}