koa-boot-runtime 1.0.0

package/dist/types.js

@@ -0,0 +1,70 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.userRole = exports.user = exports.rolePermission = exports.roleMenu = exports.role = exports.permission = exports.operationLog = exports.menu = exports.loginLog = exports.fileUpload = exports.employee = exports.dictType = exports.dictItem = exports.department = exports.normalizeDto = exports.paginateQuery = exports.decorators = exports.enums = void 0;
+/**
+ * 类型聚合导出（供用户 import type 引用）。
+ *
+ * 示例：
+ *   import { types } from 'koa-boot-runtime';
+ *   import type { types as KBRTypes } from 'koa-boot-runtime';
+ *   const u: KBRTypes.user.User = ...;
+ */
+__exportStar(require("./common/types"), exports);
+exports.enums = __importStar(require("./common/enums"));
+exports.decorators = __importStar(require("./common/decorators"));
+var paginate_1 = require("./common/paginate");
+Object.defineProperty(exports, "paginateQuery", { enumerable: true, get: function () { return paginate_1.paginateQuery; } });
+var dto_1 = require("./common/dto");
+Object.defineProperty(exports, "normalizeDto", { enumerable: true, get: function () { return dto_1.normalizeDto; } });
+// ===== 系统核心表只读类型（用户可 import type 引用，业务 DTO 由用户自定义）=====
+exports.department = __importStar(require("./system/department/department.model"));
+exports.dictItem = __importStar(require("./system/dictItem/dictItem.model"));
+exports.dictType = __importStar(require("./system/dictType/dictType.model"));
+exports.employee = __importStar(require("./system/employee/employee.model"));
+exports.fileUpload = __importStar(require("./system/fileUpload/fileUpload.model"));
+exports.loginLog = __importStar(require("./system/loginLog/loginLog.model"));
+exports.menu = __importStar(require("./system/menu/menu.model"));
+exports.operationLog = __importStar(require("./system/operationLog/operationLog.model"));
+exports.permission = __importStar(require("./system/permission/permission.model"));
+exports.role = __importStar(require("./system/role/role.model"));
+exports.roleMenu = __importStar(require("./system/roleMenu/roleMenu.model"));
+exports.rolePermission = __importStar(require("./system/rolePermission/rolePermission.model"));
+exports.user = __importStar(require("./system/user/user.model"));
+exports.userRole = __importStar(require("./system/userRole/userRole.model"));
+//# sourceMappingURL=types.js.map

package/dist/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA;;;;;;;GAOG;AACH,iDAA+B;AAC/B,wDAAwC;AACxC,kEAAkD;AAClD,8CAAkD;AAAzC,yGAAA,aAAa,OAAA;AAEtB,oCAA4C;AAAnC,mGAAA,YAAY,OAAA;AAErB,yDAAyD;AACzD,mFAAmE;AACnE,6EAA6D;AAC7D,6EAA6D;AAC7D,6EAA6D;AAC7D,mFAAmE;AACnE,6EAA6D;AAC7D,iEAAiD;AACjD,yFAAyE;AACzE,mFAAmE;AACnE,iEAAiD;AACjD,6EAA6D;AAC7D,+FAA+E;AAC/E,iEAAiD;AACjD,6EAA6D"}

package/dist/utils/aiClient.d.ts

@@ -0,0 +1,55 @@
+/** OpenAI 兼容对话消息 */
+export interface AiMessage {
+    role: 'system' | 'user' | 'assistant' | 'tool';
+    content: string | null;
+    /** tool 角色消息必须携带，关联 assistant 返回的 tool_call_id */
+    tool_call_id?: string;
+    /** assistant 角色携带，透传模型返回的工具调用指令（二次请求必须原样回传） */
+    tool_calls?: AiToolCall[];
+    /**
+     * assistant 角色携带，思考模式（thinking）下的推理内容。
+     * DeepSeek V4 / 通义千问 thinking / GLM thinking 等厂商要求原样回传，否则 400。
+     */
+    reasoning_content?: string;
+}
+/** 模型返回的工具调用指令（只决定"调哪个工具 + 参数"，不负责执行） */
+export interface AiToolCall {
+    id: string;
+    type: 'function';
+    function: {
+        name: string;
+        arguments: string;
+    };
+}
+/** 工具定义（JSON Schema，随请求发给模型作为"说明书"） */
+export interface AiToolDef {
+    type: 'function';
+    function: {
+        name: string;
+        description: string;
+        parameters: Record<string, unknown>;
+    };
+}
+export interface AiChatOptions {
+    messages: AiMessage[];
+    tools?: AiToolDef[];
+    temperature?: number;
+    maxTokens?: number;
+}
+export interface AiChatResult {
+    content: string | null;
+    toolCalls: AiToolCall[];
+    /** 思考模式下的推理内容（供调用方在下一轮请求中原样回传） */
+    reasoningContent?: string | null;
+}
+/** AI 开关与凭证检查 */
+export declare function isAiConfigured(): {
+    ok: boolean;
+    reason?: string;
+};
+/**
+ * 调用 Chat Completions（非流式，OpenAI 兼容协议）。
+ * 模型返回的 toolCalls 仅为"调用意图"，由调用方解析后执行真实查询并回填 tool 消息。
+ */
+export declare function aiChat(options: AiChatOptions): Promise<AiChatResult>;
+//# sourceMappingURL=aiClient.d.ts.map

package/dist/utils/aiClient.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"aiClient.d.ts","sourceRoot":"","sources":["../../src/utils/aiClient.ts"],"names":[],"mappings":"AAKA,oBAAoB;AACpB,MAAM,WAAW,SAAS;IACxB,IAAI,EAAE,QAAQ,GAAG,MAAM,GAAG,WAAW,GAAG,MAAM,CAAC;IAC/C,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,kDAAkD;IAClD,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,+CAA+C;IAC/C,UAAU,CAAC,EAAE,UAAU,EAAE,CAAC;IAC1B;;;OAGG;IACH,iBAAiB,CAAC,EAAE,MAAM,CAAC;CAC5B;AAED,yCAAyC;AACzC,MAAM,WAAW,UAAU;IACzB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,UAAU,CAAC;IACjB,QAAQ,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE,CAAC;CAC/C;AAED,uCAAuC;AACvC,MAAM,WAAW,SAAS;IACxB,IAAI,EAAE,UAAU,CAAC;IACjB,QAAQ,EAAE;QACR,IAAI,EAAE,MAAM,CAAC;QACb,WAAW,EAAE,MAAM,CAAC;QACpB,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;KACrC,CAAC;CACH;AAED,MAAM,WAAW,aAAa;IAC5B,QAAQ,EAAE,SAAS,EAAE,CAAC;IACtB,KAAK,CAAC,EAAE,SAAS,EAAE,CAAC;IACpB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,YAAY;IAC3B,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,SAAS,EAAE,UAAU,EAAE,CAAC;IACxB,kCAAkC;IAClC,gBAAgB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAClC;AAED,iBAAiB;AACjB,wBAAgB,cAAc,IAAI;IAAE,EAAE,EAAE,OAAO,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,CAKjE;AAED;;;GAGG;AACH,wBAAsB,MAAM,CAAC,OAAO,EAAE,aAAa,GAAG,OAAO,CAAC,YAAY,CAAC,CAyC1E"}

package/dist/utils/aiClient.js

@@ -0,0 +1,59 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.isAiConfigured = isAiConfigured;
+exports.aiChat = aiChat;
+// 通用 OpenAI 兼容 AI 客户端：支持任意提供 /chat/completions 的厂商
+// 换厂商只需改环境变量 AI_BASE_URL / AI_API_KEY / AI_MODEL，无需改动代码
+// 已知兼容厂商：DeepSeek、OpenAI、Kimi(Moonshot)、智谱GLM、通义千问(DashScope)、豆包(火山方舟) 等
+const config_1 = __importDefault(require("../config"));
+/** AI 开关与凭证检查 */
+function isAiConfigured() {
+    const { enabled, apiKey } = config_1.default.ai;
+    if (!enabled)
+        return { ok: false, reason: 'AI 助手未启用（服务端未设置 AI_ENABLED=true）' };
+    if (!apiKey)
+        return { ok: false, reason: 'AI 助手未配置密钥（服务端未设置 AI_API_KEY）' };
+    return { ok: true };
+}
+/**
+ * 调用 Chat Completions（非流式，OpenAI 兼容协议）。
+ * 模型返回的 toolCalls 仅为"调用意图"，由调用方解析后执行真实查询并回填 tool 消息。
+ */
+async function aiChat(options) {
+    const { baseUrl, apiKey, model, extraBody } = config_1.default.ai;
+    const hasTools = !!options.tools?.length;
+    const res = await fetch(`${baseUrl.replace(/\/+$/, '')}/chat/completions`, {
+        method: 'POST',
+        headers: {
+            'Content-Type': 'application/json',
+            Authorization: `Bearer ${apiKey}`,
+        },
+        body: JSON.stringify({
+            model,
+            messages: options.messages,
+            tools: hasTools ? options.tools : undefined,
+            tool_choice: hasTools ? 'auto' : undefined,
+            temperature: options.temperature ?? 0.3,
+            max_tokens: options.maxTokens ?? 2048,
+            stream: false,
+            // 厂商扩展参数透传（如 DeepSeek V4 Pro 的 thinking 开关），未配置时为空
+            ...(extraBody ?? {}),
+        }),
+    });
+    if (!res.ok) {
+        const text = await res.text().catch(() => '');
+        throw new Error(`[ai] HTTP ${res.status} ${res.statusText} ${text.slice(0, 300)}`);
+    }
+    const data = (await res.json());
+    const message = data?.choices?.[0]?.message;
+    return {
+        content: message?.content ?? null,
+        toolCalls: message?.tool_calls ?? [],
+        // 思考模式的推理内容，原样透出供下一轮回传（厂商无关客户端不应丢弃未知字段）
+        reasoningContent: message?.reasoning_content ?? null,
+    };
+}
+//# sourceMappingURL=aiClient.js.map

package/dist/utils/aiClient.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"aiClient.js","sourceRoot":"","sources":["../../src/utils/aiClient.ts"],"names":[],"mappings":";;;;;AAoDA,wCAKC;AAMD,wBAyCC;AAxGD,mDAAmD;AACnD,wDAAwD;AACxD,yEAAyE;AACzE,uDAA+B;AAgD/B,iBAAiB;AACjB,SAAgB,cAAc;IAC5B,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,gBAAM,CAAC,EAAE,CAAC;IACtC,IAAI,CAAC,OAAO;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,kCAAkC,EAAE,CAAC;IAC/E,IAAI,CAAC,MAAM;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,+BAA+B,EAAE,CAAC;IAC3E,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;AACtB,CAAC;AAED;;;GAGG;AACI,KAAK,UAAU,MAAM,CAAC,OAAsB;IACjD,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,GAAG,gBAAM,CAAC,EAAE,CAAC;IACxD,MAAM,QAAQ,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC;IACzC,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,mBAAmB,EAAE;QACzE,MAAM,EAAE,MAAM;QACd,OAAO,EAAE;YACP,cAAc,EAAE,kBAAkB;YAClC,aAAa,EAAE,UAAU,MAAM,EAAE;SAClC;QACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;YACnB,KAAK;YACL,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,KAAK,EAAE,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS;YAC3C,WAAW,EAAE,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS;YAC1C,WAAW,EAAE,OAAO,CAAC,WAAW,IAAI,GAAG;YACvC,UAAU,EAAE,OAAO,CAAC,SAAS,IAAI,IAAI;YACrC,MAAM,EAAE,KAAK;YACb,mDAAmD;YACnD,GAAG,CAAC,SAAS,IAAI,EAAE,CAAC;SACrB,CAAC;KACH,CAAC,CAAC;IACH,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;QACZ,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;QAC9C,MAAM,IAAI,KAAK,CAAC,aAAa,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,UAAU,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;IACrF,CAAC;IACD,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAQ7B,CAAC;IACF,MAAM,OAAO,GAAG,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC;IAC5C,OAAO;QACL,OAAO,EAAE,OAAO,EAAE,OAAO,IAAI,IAAI;QACjC,SAAS,EAAE,OAAO,EAAE,UAAU,IAAI,EAAE;QACpC,wCAAwC;QACxC,gBAAgB,EAAE,OAAO,EAAE,iBAAiB,IAAI,IAAI;KACrD,CAAC;AACJ,CAAC"}

package/dist/utils/banner.d.ts

@@ -0,0 +1,10 @@
+/**
+ * 启动 Banner 模块
+ *
+ * 在服务启动时输出品牌标识和技术栈信息
+ */
+/**
+ * 输出启动 Banner
+ */
+export declare function printBanner(port: number | string): void;
+//# sourceMappingURL=banner.d.ts.map

package/dist/utils/banner.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"banner.d.ts","sourceRoot":"","sources":["../../src/utils/banner.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAoBH;;GAEG;AACH,wBAAgB,WAAW,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAavD"}

package/dist/utils/banner.js

@@ -0,0 +1,40 @@
+"use strict";
+/**
+ * 启动 Banner 模块
+ *
+ * 在服务启动时输出品牌标识和技术栈信息
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.printBanner = printBanner;
+const BANNER = `
+  ██╗  ██╗ ██████╗  █████╗ ██████╗ ██████╗  ██████╗ ████████╗
+  ██║ ██╔╝██╔═══██╗██╔══██╗██╔══██╗██╔═══██╗██╔═══██╗╚══██╔══╝
+  █████╔╝ ██║   ██║███████║██████╔╝██║   ██║██║   ██║   ██║   
+  ██╔═██╗ ██║   ██║██╔══██║██╔══██╗██║   ██║██║   ██║   ██║   
+  ██║  ██╗╚██████╔╝██║  ██║██████╔╝╚██████╔╝╚██████╔╝   ██║   
+  ╚═╝  ╚═╝ ╚═════╝ ╚═╝  ╚═╝╚═════╝  ╚═════╝  ╚═════╝    ╚═╝   
+`;
+const VERSION = '1.0.0';
+const TECH_STACK = [
+    'Koa v3',
+    'Prisma',
+    'tsoa',
+    'Redis',
+];
+/**
+ * 输出启动 Banner
+ */
+function printBanner(port) {
+    const lines = [
+        '',
+        BANNER,
+        `  Enterprise Admin System · v${VERSION}`,
+        `  ${TECH_STACK.join(' + ')}`,
+        '',
+        `  → Local:   http://localhost:${port}`,
+        `  → Docs:    http://localhost:${port}/docs`,
+        '',
+    ];
+    console.log(lines.join('\n'));
+}
+//# sourceMappingURL=banner.js.map

package/dist/utils/banner.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"banner.js","sourceRoot":"","sources":["../../src/utils/banner.ts"],"names":[],"mappings":";AAAA;;;;GAIG;;AAuBH,kCAaC;AAlCD,MAAM,MAAM,GAAG;;;;;;;CAOd,CAAC;AAEF,MAAM,OAAO,GAAG,OAAO,CAAC;AAExB,MAAM,UAAU,GAAG;IACjB,QAAQ;IACR,QAAQ;IACR,MAAM;IACN,OAAO;CACR,CAAC;AAEF;;GAEG;AACH,SAAgB,WAAW,CAAC,IAAqB;IAC/C,MAAM,KAAK,GAAG;QACZ,EAAE;QACF,MAAM;QACN,gCAAgC,OAAO,EAAE;QACzC,KAAK,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE;QAC7B,EAAE;QACF,iCAAiC,IAAI,EAAE;QACvC,iCAAiC,IAAI,OAAO;QAC5C,EAAE;KACH,CAAC;IAEF,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;AAChC,CAAC"}

package/dist/utils/crypto.d.ts

@@ -0,0 +1,49 @@
+/**
+ * 简单哈希（不可逆，适用于非敏感数据签名、校验）
+ */
+export declare function hash(value: string, algorithm?: string): string;
+/**
+ * MD5 哈希快捷方法
+ */
+export declare function md5(value: string): string;
+/**
+ * SHA256 哈希
+ */
+export declare function sha256(value: string): string;
+export interface PasswordHashResult {
+    hash: string;
+    salt: string;
+}
+/**
+ * 使用 PBKDF2 加密密码（安全等级高，适合生产环境）
+ */
+export declare function hashPassword(password: string, salt?: string): PasswordHashResult;
+/**
+ * 验证密码是否匹配
+ */
+export declare function verifyPassword(password: string, hashedPassword: string, salt: string): boolean;
+/**
+ * 生成 HMAC 签名
+ */
+export declare function hmacSign(data: string, secret: string, algorithm?: string): string;
+/**
+ * 验证 HMAC 签名
+ */
+export declare function hmacVerify(data: string, signature: string, secret: string, algorithm?: string): boolean;
+/**
+ * AES-256-CBC 加密
+ */
+export declare function aesEncrypt(plaintext: string, secretKey: string): string;
+/**
+ * AES-256-CBC 解密
+ */
+export declare function aesDecrypt(ciphertext: string, secretKey: string): string;
+/**
+ * 生成随机字符串
+ */
+export declare function randomString(length?: number): string;
+/**
+ * 生成 UUID v4
+ */
+export declare function uuid(): string;
+//# sourceMappingURL=crypto.d.ts.map

package/dist/utils/crypto.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"crypto.d.ts","sourceRoot":"","sources":["../../src/utils/crypto.ts"],"names":[],"mappings":"AAYA;;GAEG;AACH,wBAAgB,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,SAAS,GAAE,MAA+B,GAAG,MAAM,CAEtF;AAED;;GAEG;AACH,wBAAgB,GAAG,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAEzC;AAED;;GAEG;AACH,wBAAgB,MAAM,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAE5C;AAID,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;CACd;AAED;;GAEG;AACH,wBAAgB,YAAY,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,GAAG,kBAAkB,CAMhF;AAED;;GAEG;AACH,wBAAgB,cAAc,CAAC,QAAQ,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAG9F;AAID;;GAEG;AACH,wBAAgB,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,GAAE,MAAiB,GAAG,MAAM,CAE3F;AAED;;GAEG;AACH,wBAAgB,UAAU,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,GAAE,MAAiB,GAAG,OAAO,CAGjH;AAOD;;GAEG;AACH,wBAAgB,UAAU,CAAC,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,MAAM,CAOvE;AAED;;GAEG;AACH,wBAAgB,UAAU,CAAC,UAAU,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,MAAM,CAQxE;AAID;;GAEG;AACH,wBAAgB,YAAY,CAAC,MAAM,GAAE,MAAW,GAAG,MAAM,CAExD;AAED;;GAEG;AACH,wBAAgB,IAAI,IAAI,MAAM,CAE7B"}

package/dist/utils/crypto.js

@@ -0,0 +1,113 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.hash = hash;
+exports.md5 = md5;
+exports.sha256 = sha256;
+exports.hashPassword = hashPassword;
+exports.verifyPassword = verifyPassword;
+exports.hmacSign = hmacSign;
+exports.hmacVerify = hmacVerify;
+exports.aesEncrypt = aesEncrypt;
+exports.aesDecrypt = aesDecrypt;
+exports.randomString = randomString;
+exports.uuid = uuid;
+const crypto_1 = __importDefault(require("crypto"));
+// ============ 配置 ============
+const DEFAULT_HASH_ALGORITHM = 'md5';
+const DEFAULT_SALT_LENGTH = 16;
+const DEFAULT_ITERATIONS = 10000;
+const DEFAULT_KEY_LENGTH = 64;
+const DEFAULT_DIGEST = 'hex';
+// ============ 哈希 ============
+/**
+ * 简单哈希（不可逆，适用于非敏感数据签名、校验）
+ */
+function hash(value, algorithm = DEFAULT_HASH_ALGORITHM) {
+    return crypto_1.default.createHash(algorithm).update(value).digest(DEFAULT_DIGEST);
+}
+/**
+ * MD5 哈希快捷方法
+ */
+function md5(value) {
+    return hash(value, 'md5');
+}
+/**
+ * SHA256 哈希
+ */
+function sha256(value) {
+    return hash(value, 'sha256');
+}
+/**
+ * 使用 PBKDF2 加密密码（安全等级高，适合生产环境）
+ */
+function hashPassword(password, salt) {
+    const actualSalt = salt || crypto_1.default.randomBytes(DEFAULT_SALT_LENGTH).toString(DEFAULT_DIGEST);
+    const derivedKey = crypto_1.default
+        .pbkdf2Sync(password, actualSalt, DEFAULT_ITERATIONS, DEFAULT_KEY_LENGTH, 'sha512')
+        .toString(DEFAULT_DIGEST);
+    return { hash: derivedKey, salt: actualSalt };
+}
+/**
+ * 验证密码是否匹配
+ */
+function verifyPassword(password, hashedPassword, salt) {
+    const { hash } = hashPassword(password, salt);
+    return hash === hashedPassword;
+}
+// ============ HMAC 签名 ============
+/**
+ * 生成 HMAC 签名
+ */
+function hmacSign(data, secret, algorithm = 'sha256') {
+    return crypto_1.default.createHmac(algorithm, secret).update(data).digest(DEFAULT_DIGEST);
+}
+/**
+ * 验证 HMAC 签名
+ */
+function hmacVerify(data, signature, secret, algorithm = 'sha256') {
+    const expected = hmacSign(data, secret, algorithm);
+    return crypto_1.default.timingSafeEqual(Buffer.from(expected), Buffer.from(signature));
+}
+// ============ 对称加解密（AES） ============
+const AES_ALGORITHM = 'aes-256-cbc';
+const IV_LENGTH = 16;
+/**
+ * AES-256-CBC 加密
+ */
+function aesEncrypt(plaintext, secretKey) {
+    const key = crypto_1.default.createHash('sha256').update(secretKey).digest();
+    const iv = crypto_1.default.randomBytes(IV_LENGTH);
+    const cipher = crypto_1.default.createCipheriv(AES_ALGORITHM, key, iv);
+    const encrypted = Buffer.concat([cipher.update(plaintext, 'utf8'), cipher.final()]);
+    // 输出格式: iv:encrypted (均为 hex)
+    return `${iv.toString(DEFAULT_DIGEST)}:${encrypted.toString(DEFAULT_DIGEST)}`;
+}
+/**
+ * AES-256-CBC 解密
+ */
+function aesDecrypt(ciphertext, secretKey) {
+    const key = crypto_1.default.createHash('sha256').update(secretKey).digest();
+    const [ivHex, encryptedHex] = ciphertext.split(':');
+    const iv = Buffer.from(ivHex, DEFAULT_DIGEST);
+    const encrypted = Buffer.from(encryptedHex, DEFAULT_DIGEST);
+    const decipher = crypto_1.default.createDecipheriv(AES_ALGORITHM, key, iv);
+    const decrypted = Buffer.concat([decipher.update(encrypted), decipher.final()]);
+    return decrypted.toString('utf8');
+}
+// ============ 随机值 ============
+/**
+ * 生成随机字符串
+ */
+function randomString(length = 32) {
+    return crypto_1.default.randomBytes(Math.ceil(length / 2)).toString(DEFAULT_DIGEST).slice(0, length);
+}
+/**
+ * 生成 UUID v4
+ */
+function uuid() {
+    return crypto_1.default.randomUUID();
+}
+//# sourceMappingURL=crypto.js.map

package/dist/utils/crypto.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"crypto.js","sourceRoot":"","sources":["../../src/utils/crypto.ts"],"names":[],"mappings":";;;;;AAeA,oBAEC;AAKD,kBAEC;AAKD,wBAEC;AAYD,oCAMC;AAKD,wCAGC;AAOD,4BAEC;AAKD,gCAGC;AAUD,gCAOC;AAKD,gCAQC;AAOD,oCAEC;AAKD,oBAEC;AAxHD,oDAA4B;AAE5B,+BAA+B;AAE/B,MAAM,sBAAsB,GAAG,KAAK,CAAC;AACrC,MAAM,mBAAmB,GAAG,EAAE,CAAC;AAC/B,MAAM,kBAAkB,GAAG,KAAK,CAAC;AACjC,MAAM,kBAAkB,GAAG,EAAE,CAAC;AAC9B,MAAM,cAAc,GAAG,KAAK,CAAC;AAE7B,+BAA+B;AAE/B;;GAEG;AACH,SAAgB,IAAI,CAAC,KAAa,EAAE,YAAoB,sBAAsB;IAC5E,OAAO,gBAAM,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC;AAC3E,CAAC;AAED;;GAEG;AACH,SAAgB,GAAG,CAAC,KAAa;IAC/B,OAAO,IAAI,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;AAC5B,CAAC;AAED;;GAEG;AACH,SAAgB,MAAM,CAAC,KAAa;IAClC,OAAO,IAAI,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;AAC/B,CAAC;AASD;;GAEG;AACH,SAAgB,YAAY,CAAC,QAAgB,EAAE,IAAa;IAC1D,MAAM,UAAU,GAAG,IAAI,IAAI,gBAAM,CAAC,WAAW,CAAC,mBAAmB,CAAC,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAC;IAC5F,MAAM,UAAU,GAAG,gBAAM;SACtB,UAAU,CAAC,QAAQ,EAAE,UAAU,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,QAAQ,CAAC;SAClF,QAAQ,CAAC,cAAc,CAAC,CAAC;IAC5B,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC;AAChD,CAAC;AAED;;GAEG;AACH,SAAgB,cAAc,CAAC,QAAgB,EAAE,cAAsB,EAAE,IAAY;IACnF,MAAM,EAAE,IAAI,EAAE,GAAG,YAAY,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;IAC9C,OAAO,IAAI,KAAK,cAAc,CAAC;AACjC,CAAC;AAED,oCAAoC;AAEpC;;GAEG;AACH,SAAgB,QAAQ,CAAC,IAAY,EAAE,MAAc,EAAE,YAAoB,QAAQ;IACjF,OAAO,gBAAM,CAAC,UAAU,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC;AAClF,CAAC;AAED;;GAEG;AACH,SAAgB,UAAU,CAAC,IAAY,EAAE,SAAiB,EAAE,MAAc,EAAE,YAAoB,QAAQ;IACtG,MAAM,QAAQ,GAAG,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC;IACnD,OAAO,gBAAM,CAAC,eAAe,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC;AAC/E,CAAC;AAED,uCAAuC;AAEvC,MAAM,aAAa,GAAG,aAAa,CAAC;AACpC,MAAM,SAAS,GAAG,EAAE,CAAC;AAErB;;GAEG;AACH,SAAgB,UAAU,CAAC,SAAiB,EAAE,SAAiB;IAC7D,MAAM,GAAG,GAAG,gBAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,MAAM,EAAE,CAAC;IACnE,MAAM,EAAE,GAAG,gBAAM,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC;IACzC,MAAM,MAAM,GAAG,gBAAM,CAAC,cAAc,CAAC,aAAa,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC;IAC7D,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;IACpF,8BAA8B;IAC9B,OAAO,GAAG,EAAE,CAAC,QAAQ,CAAC,cAAc,CAAC,IAAI,SAAS,CAAC,QAAQ,CAAC,cAAc,CAAC,EAAE,CAAC;AAChF,CAAC;AAED;;GAEG;AACH,SAAgB,UAAU,CAAC,UAAkB,EAAE,SAAiB;IAC9D,MAAM,GAAG,GAAG,gBAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,MAAM,EAAE,CAAC;IACnE,MAAM,CAAC,KAAK,EAAE,YAAY,CAAC,GAAG,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACpD,MAAM,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,cAAc,CAAC,CAAC;IAC9C,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,YAAY,EAAE,cAAc,CAAC,CAAC;IAC5D,MAAM,QAAQ,GAAG,gBAAM,CAAC,gBAAgB,CAAC,aAAa,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC;IACjE,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;IAChF,OAAO,SAAS,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;AACpC,CAAC;AAED,gCAAgC;AAEhC;;GAEG;AACH,SAAgB,YAAY,CAAC,SAAiB,EAAE;IAC9C,OAAO,gBAAM,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;AAC7F,CAAC;AAED;;GAEG;AACH,SAAgB,IAAI;IAClB,OAAO,gBAAM,CAAC,UAAU,EAAE,CAAC;AAC7B,CAAC"}

package/dist/utils/dataScope.d.ts

@@ -0,0 +1,41 @@
+/**
+ * 解析当前用户可见的仓库范围（数据权限收口函数）
+ * 所有"按仓库过滤"的业务查询必须通过本函数解析范围，禁止在业务层直接写 managerId 过滤。
+ *
+ * 当前实现（V4.0）：admin 角色不限制（返回 null）；门店店长（store_manager）按门店（storeId）
+ * 维度收口、不参与仓库维度收口（返回 null）；其他用户仅返回其直接负责的仓库（managerId）。
+ *
+ * 注意：返回 null 表示不限；返回空数组 [] 会被调用方转成 in:[占位] 恒空（数据权限失效保护），
+ * 因此不负责任何仓库的门店角色必须在此豁免，否则其业务列表会被误判为空。
+ *
+ * 后期组织架构扩展点：引入部门挂载（warehouses.department_id）后，改为返回
+ * 「用户所属部门及其全部下级部门的仓库 ∪ 直接负责仓库」的并集，
+ * 仅需替换本函数内部实现，函数签名与所有调用方保持不变。
+ */
+export declare function resolveScopeWarehouseIds(userId: string, roles: string[]): Promise<string[] | null>;
+/**
+ * 解析当前用户"负责的仓库"范围（库存查询/仓库 tabs 等按负责人收口的接口专用）
+ * 与 resolveScopeWarehouseIds 的区别：门店店长（store_manager）不返回 null 豁免，
+ * 而是收口到其负责门店关联的仓库（warehouse.storeId ∈ 负责门店），
+ * 确保门店/前置仓人员只能看到自己负责的仓库。
+ *
+ * 规则：
+ * - admin：不限（返回 null）
+ * - store_manager：仅其负责门店（store.contactPersonId = userId）关联的仓库（warehouse.storeId）
+ * - 其余角色（branch_warehouse_manager 前置仓、warehouse_manager 总仓等）：仅直接负责的仓库（warehouse.managerId = userId）
+ *
+ * 返回 null 表示不限；返回 [] 表示无可见仓库（调用方转成 in:[] 恒空）。
+ */
+export declare function resolveManagedWarehouseIds(userId: string, roles: string[]): Promise<string[] | null>;
+/**
+ * 解析当前用户可见的门店范围（销售订单数据权限收口函数）
+ * 销售订单按门店（storeId）维度收口，规则：
+ * - store_manager（门店店长）：仅可见其管理的门店（store.contactPersonId = userId）
+ * - branch_warehouse_manager（前置仓管理员）：仅可见其负责的前置仓覆盖的门店
+ *   （前置仓自身 storeId ∪ 其下级镇仓关联的 storeId）
+ * - 其余角色（admin 总部管理员、warehouse_manager 总仓管理员、purchaser 采购、finance_CFO 财务）：不限（返回 null）
+ *
+ * 返回 null 表示不限；返回 [] 表示无可见门店（调用方转成 in:[] 恒空，符合"只能看自己管辖数据"）。
+ */
+export declare function resolveScopeStoreIds(userId: string, roles: string[]): Promise<string[] | null>;
+//# sourceMappingURL=dataScope.d.ts.map

package/dist/utils/dataScope.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"dataScope.d.ts","sourceRoot":"","sources":["../../src/utils/dataScope.ts"],"names":[],"mappings":"AAeA;;;;;;;;;;;;;GAaG;AACH,wBAAsB,wBAAwB,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,MAAM,EAAE,GAAG,IAAI,CAAC,CAYxG;AAED;;;;;;;;;;;;GAYG;AACH,wBAAsB,0BAA0B,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,MAAM,EAAE,GAAG,IAAI,CAAC,CAsC1G;AAED;;;;;;;;;GASG;AACH,wBAAsB,oBAAoB,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,MAAM,EAAE,GAAG,IAAI,CAAC,CAwCpG"}

package/dist/utils/dataScope.js

@@ -0,0 +1,130 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.resolveScopeWarehouseIds = resolveScopeWarehouseIds;
+exports.resolveManagedWarehouseIds = resolveManagedWarehouseIds;
+exports.resolveScopeStoreIds = resolveScopeStoreIds;
+const database_1 = require("../config/database");
+const db = database_1.prisma;
+/**
+ * 解析当前用户可见的仓库范围（数据权限收口函数）
+ * 所有"按仓库过滤"的业务查询必须通过本函数解析范围，禁止在业务层直接写 managerId 过滤。
+ *
+ * 当前实现（V4.0）：admin 角色不限制（返回 null）；门店店长（store_manager）按门店（storeId）
+ * 维度收口、不参与仓库维度收口（返回 null）；其他用户仅返回其直接负责的仓库（managerId）。
+ *
+ * 注意：返回 null 表示不限；返回空数组 [] 会被调用方转成 in:[占位] 恒空（数据权限失效保护），
+ * 因此不负责任何仓库的门店角色必须在此豁免，否则其业务列表会被误判为空。
+ *
+ * 后期组织架构扩展点：引入部门挂载（warehouses.department_id）后，改为返回
+ * 「用户所属部门及其全部下级部门的仓库 ∪ 直接负责仓库」的并集，
+ * 仅需替换本函数内部实现，函数签名与所有调用方保持不变。
+ */
+async function resolveScopeWarehouseIds(userId, roles) {
+    // admin 拥有全部仓库数据权限
+    if (roles.includes('admin'))
+        return null;
+    // 门店店长：数据权限按门店（storeId）收口，与仓库维度无关
+    if (roles.includes('store_manager'))
+        return null;
+    const warehouses = await db.warehouse.findMany({
+        where: { managerId: userId },
+        select: { id: true },
+    });
+    return warehouses.map((w) => w.id);
+}
+/**
+ * 解析当前用户"负责的仓库"范围（库存查询/仓库 tabs 等按负责人收口的接口专用）
+ * 与 resolveScopeWarehouseIds 的区别：门店店长（store_manager）不返回 null 豁免，
+ * 而是收口到其负责门店关联的仓库（warehouse.storeId ∈ 负责门店），
+ * 确保门店/前置仓人员只能看到自己负责的仓库。
+ *
+ * 规则：
+ * - admin：不限（返回 null）
+ * - store_manager：仅其负责门店（store.contactPersonId = userId）关联的仓库（warehouse.storeId）
+ * - 其余角色（branch_warehouse_manager 前置仓、warehouse_manager 总仓等）：仅直接负责的仓库（warehouse.managerId = userId）
+ *
+ * 返回 null 表示不限；返回 [] 表示无可见仓库（调用方转成 in:[] 恒空）。
+ */
+async function resolveManagedWarehouseIds(userId, roles) {
+    // admin 拥有全部仓库数据权限
+    if (roles.includes('admin'))
+        return null;
+    // 门店店长：其负责的门店关联的仓库（兼容两种数据关联，取并集）
+    if (roles.includes('store_manager')) {
+        const ids = new Set();
+        // ① 店长直接负责的仓库（warehouse.managerId = userId，镇仓通常直接挂店长）
+        const managed = await db.warehouse.findMany({
+            where: { managerId: userId },
+            select: { id: true },
+        });
+        managed.forEach((w) => ids.add(w.id));
+        // ② 店长负责门店（store.contactPersonId = userId）关联的仓库（warehouse.storeId ∈ 负责门店）
+        const stores = await db.store.findMany({
+            where: { contactPersonId: userId },
+            select: { id: true },
+        });
+        if (stores.length > 0) {
+            const storeIds = stores.map((s) => s.id);
+            const warehouses = await db.warehouse.findMany({
+                where: { storeId: { in: storeIds } },
+                select: { id: true },
+            });
+            warehouses.forEach((w) => ids.add(w.id));
+        }
+        return Array.from(ids);
+    }
+    // 前置仓/总仓管理员：其直接负责的仓库
+    const warehouses = await db.warehouse.findMany({
+        where: { managerId: userId },
+        select: { id: true },
+    });
+    return warehouses.map((w) => w.id);
+}
+/**
+ * 解析当前用户可见的门店范围（销售订单数据权限收口函数）
+ * 销售订单按门店（storeId）维度收口，规则：
+ * - store_manager（门店店长）：仅可见其管理的门店（store.contactPersonId = userId）
+ * - branch_warehouse_manager（前置仓管理员）：仅可见其负责的前置仓覆盖的门店
+ *   （前置仓自身 storeId ∪ 其下级镇仓关联的 storeId）
+ * - 其余角色（admin 总部管理员、warehouse_manager 总仓管理员、purchaser 采购、finance_CFO 财务）：不限（返回 null）
+ *
+ * 返回 null 表示不限；返回 [] 表示无可见门店（调用方转成 in:[] 恒空，符合"只能看自己管辖数据"）。
+ */
+async function resolveScopeStoreIds(userId, roles) {
+    const isStoreManager = roles.includes('store_manager');
+    const isBranchManager = roles.includes('branch_warehouse_manager');
+    if (!isStoreManager && !isBranchManager)
+        return null;
+    const storeIds = new Set();
+    // 门店店长：可见其管理的门店（兼容两种数据关联，取并集：
+    // ① store.contactPersonId = userId；② 店长负责的镇仓 warehouse.managerId = userId 关联的门店）
+    if (isStoreManager) {
+        const stores = await db.store.findMany({
+            where: { contactPersonId: userId },
+            select: { id: true },
+        });
+        stores.forEach((s) => storeIds.add(s.id));
+        const towns = await db.warehouse.findMany({
+            where: { managerId: userId },
+            select: { storeId: true },
+        });
+        towns.forEach((t) => t.storeId && storeIds.add(t.storeId));
+    }
+    // 前置仓管理员：负责的前置仓及其下级镇仓关联的门店
+    if (isBranchManager) {
+        const branches = await db.warehouse.findMany({
+            where: { level: 'preposition', managerId: userId },
+            select: { id: true, storeId: true },
+        });
+        if (branches.length > 0) {
+            branches.forEach((b) => b.storeId && storeIds.add(b.storeId));
+            const towns = await db.warehouse.findMany({
+                where: { parentWarehouseId: { in: branches.map((b) => b.id) }, level: 'town' },
+                select: { storeId: true },
+            });
+            towns.forEach((t) => t.storeId && storeIds.add(t.storeId));
+        }
+    }
+    return Array.from(storeIds);
+}
+//# sourceMappingURL=dataScope.js.map

package/dist/utils/dataScope.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"dataScope.js","sourceRoot":"","sources":["../../src/utils/dataScope.ts"],"names":[],"mappings":";;AA6BA,4DAYC;AAeD,gEAsCC;AAYD,oDAwCC;AAlJD,iDAA4C;AAa5C,MAAM,EAAE,GAAU,iBAA0B,CAAC;AAE7C;;;;;;;;;;;;;GAaG;AACI,KAAK,UAAU,wBAAwB,CAAC,MAAc,EAAE,KAAe;IAC5E,mBAAmB;IACnB,IAAI,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC;QAAE,OAAO,IAAI,CAAC;IAEzC,kCAAkC;IAClC,IAAI,KAAK,CAAC,QAAQ,CAAC,eAAe,CAAC;QAAE,OAAO,IAAI,CAAC;IAEjD,MAAM,UAAU,GAAG,MAAM,EAAE,CAAC,SAAS,CAAC,QAAQ,CAAC;QAC7C,KAAK,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE;QAC5B,MAAM,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE;KACrB,CAAC,CAAC;IACH,OAAO,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;AACrC,CAAC;AAED;;;;;;;;;;;;GAYG;AACI,KAAK,UAAU,0BAA0B,CAAC,MAAc,EAAE,KAAe;IAC9E,mBAAmB;IACnB,IAAI,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC;QAAE,OAAO,IAAI,CAAC;IAEzC,iCAAiC;IACjC,IAAI,KAAK,CAAC,QAAQ,CAAC,eAAe,CAAC,EAAE,CAAC;QACpC,MAAM,GAAG,GAAG,IAAI,GAAG,EAAU,CAAC;QAE9B,sDAAsD;QACtD,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,SAAS,CAAC,QAAQ,CAAC;YAC1C,KAAK,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE;YAC5B,MAAM,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE;SACrB,CAAC,CAAC;QACH,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QAEtC,0EAA0E;QAC1E,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC;YACrC,KAAK,EAAE,EAAE,eAAe,EAAE,MAAM,EAAE;YAClC,MAAM,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE;SACrB,CAAC,CAAC;QACH,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACtB,MAAM,QAAQ,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YACzC,MAAM,UAAU,GAAG,MAAM,EAAE,CAAC,SAAS,CAAC,QAAQ,CAAC;gBAC7C,KAAK,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE;gBACpC,MAAM,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE;aACrB,CAAC,CAAC;YACH,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QAC3C,CAAC;QAED,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACzB,CAAC;IAED,qBAAqB;IACrB,MAAM,UAAU,GAAG,MAAM,EAAE,CAAC,SAAS,CAAC,QAAQ,CAAC;QAC7C,KAAK,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE;QAC5B,MAAM,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE;KACrB,CAAC,CAAC;IACH,OAAO,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;AACrC,CAAC;AAED;;;;;;;;;GASG;AACI,KAAK,UAAU,oBAAoB,CAAC,MAAc,EAAE,KAAe;IACxE,MAAM,cAAc,GAAG,KAAK,CAAC,QAAQ,CAAC,eAAe,CAAC,CAAC;IACvD,MAAM,eAAe,GAAG,KAAK,CAAC,QAAQ,CAAC,0BAA0B,CAAC,CAAC;IACnE,IAAI,CAAC,cAAc,IAAI,CAAC,eAAe;QAAE,OAAO,IAAI,CAAC;IAErD,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAU,CAAC;IAEnC,8BAA8B;IAC9B,iFAAiF;IACjF,IAAI,cAAc,EAAE,CAAC;QACnB,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC;YACrC,KAAK,EAAE,EAAE,eAAe,EAAE,MAAM,EAAE;YAClC,MAAM,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE;SACrB,CAAC,CAAC;QACH,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QAE1C,MAAM,KAAK,GAAG,MAAM,EAAE,CAAC,SAAS,CAAC,QAAQ,CAAC;YACxC,KAAK,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE;YAC5B,MAAM,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE;SAC1B,CAAC,CAAC;QACH,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,IAAI,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IAC7D,CAAC;IAED,2BAA2B;IAC3B,IAAI,eAAe,EAAE,CAAC;QACpB,MAAM,QAAQ,GAAG,MAAM,EAAE,CAAC,SAAS,CAAC,QAAQ,CAAC;YAC3C,KAAK,EAAE,EAAE,KAAK,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM,EAAE;YAClD,MAAM,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE;SACpC,CAAC,CAAC;QACH,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACxB,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,IAAI,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;YAC9D,MAAM,KAAK,GAAG,MAAM,EAAE,CAAC,SAAS,CAAC,QAAQ,CAAC;gBACxC,KAAK,EAAE,EAAE,iBAAiB,EAAE,EAAE,EAAE,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE;gBAC9E,MAAM,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE;aAC1B,CAAC,CAAC;YACH,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,IAAI,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;QAC7D,CAAC;IACH,CAAC;IAED,OAAO,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;AAC9B,CAAC"}