mcp-xdx-schema-ctx 1.1.9

package/.env.example

@@ -0,0 +1,43 @@
+# ============================================================
+# 必填 - 系统 A SQL Server 连接参数
+# ============================================================
+DB_SERVER=localhost\MSSQLSERVER2019
+DB_USER=sa
+DB_PASSWORD=your-password-here
+DB_DATABASE=XDWmsCommon
+
+# ============================================================
+# 可选 - 目标用户库（多个用逗号分隔）
+# ============================================================
+DB_TARGET_DATABASES=XDWmsUser
+
+# ============================================================
+# 可选 - 系统 B 连接参数（用于比对和迁移功能）
+# 配置后 diff_xxx / migrate_xxx 系列工具可用
+# ============================================================
+# DB_B_SERVER=192.168.1.100
+# DB_B_USER=sa
+# DB_B_PASSWORD=your-password-here
+# DB_B_DATABASE=XDWmsCommon_New
+# DB_B_TARGET_DATABASES=XDWmsUser_New
+
+# ============================================================
+# 可选 - 凭据加密（DPAPI）替代明文
+#
+# 支持的加密字段：DB_SERVER, DB_PASSWORD, DB_B_SERVER, DB_B_PASSWORD
+# 使用 _DPAPI 后缀字段替代明文，密文绑定当前 Windows 用户+机器。
+# 运行 npm run encrypt-secrets 交互式生成密文。
+# ============================================================
+# DB_SERVER_DPAPI=dpapi:AQAAANCMnd8BFdERjHo...
+# DB_PASSWORD_DPAPI=dpapi:AQAAANCMnd8BFdERjHo...
+# DB_B_SERVER_DPAPI=dpapi:AQAAANCMnd8BFdERjHo...
+# DB_B_PASSWORD_DPAPI=dpapi:AQAAANCMnd8BFdERjHo...
+
+# ============================================================
+# 可选 - 连接池选项（以下为默认值）
+# ============================================================
+# DB_TRUST_SERVER_CERT=true
+# DB_ENCRYPT=false
+# DB_POOL_MAX=10
+# DB_POOL_MIN=0
+# DB_POOL_IDLE_TIMEOUT=30000

package/README.md

@@ -0,0 +1,269 @@
+# mcp-xdx-schema-ctx
+
+为 AI 助手提供 XDX SQL Server 数据库结构、应用元数据查询、**双系统比对**和**数据迁移脚本生成**能力的 MCP STDIO 服务。
+
+## 快速开始
+
+### 安装
+
+```bash
+npm install -g mcp-xdx-schema-ctx
+```
+
+### MCP 客户端配置
+
+```json
+{
+  "mcpServers": {
+    "xdx-schema": {
+      "command": "npx",
+      "args": ["-y", "mcp-xdx-schema-ctx"],
+      "env": {
+        "DB_SERVER_DPAPI": "dpapi:AQAAANCMnd8BFdERjHo...",
+        "DB_USER": "your-user",
+        "DB_PASSWORD_DPAPI": "dpapi:AQAAANCMnd8BFdERjHo...",
+        "DB_DATABASE": "XDWmsCommon",
+        "DB_TARGET_DATABASES": "XDWmsUser",
+        "DB_B_SERVER_DPAPI": "dpapi:AQAAANCMnd8BFdERjHo...",
+        "DB_B_USER": "your-user",
+        "DB_B_PASSWORD_DPAPI": "dpapi:AQAAANCMnd8BFdERjHo...",
+        "DB_B_DATABASE": "XDWmsCommon_New",
+        "DB_B_TARGET_DATABASES": "XDWmsUser_New"
+      }
+    }
+  }
+}
+```
+
+> 全局安装后可将 `command` 改为 `mcp-xdx-schema-ctx` 并移除 `args`。
+> 推荐使用 `_DPAPI` 加密字段替代明文（见[凭据加密](#凭据加密)）。
+
+## 环境变量
+
+### 系统 A（必填）
+
+| 变量                  | 必填 | 说明                                                         |
+| --------------------- | :--: | ------------------------------------------------------------ |
+| `DB_SERVER`           |  是  | SQL Server 主机，支持 `host` / `host,port` / `host\instance` |
+| `DB_USER`             |  是  | 数据库用户名                                                 |
+| `DB_PASSWORD`         |  是  | 数据库密码                                                   |
+| `DB_DATABASE`         |  是  | 环境库名（如 `XDWmsCommon`）                                 |
+| `DB_TARGET_DATABASES` |  否  | 目标用户库，多个用逗号分隔                                   |
+
+### 系统 B（可选）
+
+配置后 `diff_*` / `migrate_*` 系列工具可用，未配置时返回友好提示。
+
+| 变量                    | 说明                   |
+| ----------------------- | ---------------------- |
+| `DB_B_SERVER`           | 系统 B SQL Server 主机 |
+| `DB_B_USER`             | 系统 B 用户名          |
+| `DB_B_PASSWORD`         | 系统 B 密码            |
+| `DB_B_DATABASE`         | 系统 B 环境库          |
+| `DB_B_TARGET_DATABASES` | 系统 B 用户库          |
+
+### 连接池选项
+
+| 变量                   | 默认值  | 说明             |
+| ---------------------- | ------- | ---------------- |
+| `DB_TRUST_SERVER_CERT` | `true`  | 信任服务器证书   |
+| `DB_ENCRYPT`           | `false` | 加密连接         |
+| `DB_POOL_MAX`          | `10`    | 最大连接池       |
+| `DB_POOL_MIN`          | `0`     | 最小连接池       |
+| `DB_POOL_IDLE_TIMEOUT` | `30000` | 空闲超时（毫秒） |
+
+项目目录中可使用 `.env` 文件（格式参考 `.env.example`），运行时优先读取 MCP 客户端传入的环境变量。
+
+## 凭据加密
+
+为避免 MCP JSON 配置或 `.env` 中明文暴露连接信息，支持 **Windows DPAPI** 加密 `DB_SERVER` / `DB_PASSWORD` / `DB_B_SERVER` / `DB_B_PASSWORD` 四个字段。
+
+| 场景     | 命令                                            | 说明                                |
+| -------- | ----------------------------------------------- | ----------------------------------- |
+| 开发环境 | `npm run encrypt-secrets`                       | 读取 `.env`，交互式确认后输出密文   |
+| 生产环境 | `npx -p mcp-xdx-schema-ctx xdx-encrypt-secrets` | 纯交互输入，输出密文贴入 MCP config |
+
+加密后使用 `_DPAPI` 后缀字段替代明文：
+
+- 密文绑定当前 **Windows 用户 + 机器**，文件被拷走无法解密
+- 非 Windows 环境降级为 Base64 混淆
+- 向后兼容：明文和 `_DPAPI` 二选一，明文仍然可用
+
+## 可用工具（43 个）
+
+所有工具输出统一为 `{ items, pagination, warnings, ...上下文键 }`；支持 **分页**（`page`/`pageSize`，默认每页 50 条）与 **安全截断**（超 50KB 保留数组前缀 + `_dropped_*` 计数）。详见文末「返回结构」与「分页与截断语义」。
+
+### 表结构 / 数据（12 个）
+
+| 工具                   | 说明                                                         |
+| ---------------------- | ------------------------------------------------------------ |
+| `list_tables`          | 列出表，`scope=registered`（登记表）/`system`（环境库物理表）/`all` |
+| `describe_table`       | 获取表的完整字段定义（未登记的系统表回退 INFORMATION_SCHEMA） |
+| `search_schema`        | 全局搜索表名/字段名/描述/字段使用追踪                        |
+| `get_table_relations`  | 分析表的主从关系和外键关联                                   |
+| `check_user_table`     | 检查用户库表是否存在，对比环境库定义                         |
+| `get_table_indexes`    | 查询索引和外键（用户库系统视图）                             |
+| `suggest_indexes`      | 基于字段定义分析索引优化建议                                 |
+| `get_virtual_tables`   | 查询虚拟表定义及关联物理表                                   |
+| `get_module_tree`      | 获取模块树及各模块功能数量                                   |
+| `get_inoutkind_detail` | 出入库类型表(InOutKindTB)定义与明细数据                      |
+| `resolve_table`        | 中文表名/关键词 → 实际表名（返回 `matchType=exact\|fuzzy`）   |
+| `query_table_data`     | **只读查数据**：TOP≤200、值参数化、敏感列默认脱敏；列名写错返回候选建议 |
+
+### 窗体（4 个）
+
+| 工具                    | 说明                                                                                   |
+| ----------------------- | -------------------------------------------------------------------------------------- |
+| `get_form_full`         | **核心工具**：模块化解耦，子表缺失仅该模块 `available:false`；`include=basic` 永不失败 |
+| `get_form`              | 窗体存在性：只查 FormSetTB，中文名 → FormID                                            |
+| `list_forms`            | 窗体清单（FormID/FormName/LinkTable/FormType），SQL 端分页                             |
+| `get_user_form_schemes` | 用户个性化窗体方案（字段显示/列宽/冻结等）                                             |
+
+### DBO（1 个）
+
+| 工具             | 说明                                             |
+| ---------------- | ------------------------------------------------ |
+| `get_dbo_detail` | DBO 定义 → 字段 → 操作方案 → 操作字段 → 操作参数 |
+
+### 数据流（3 个）
+
+| 工具                   | 说明                                                     |
+| ---------------------- | -------------------------------------------------------- |
+| `trace_dataflow`       | 业务流程全链路：定义 → 明细 → 节点 → 关系 → 关联窗体和表 |
+| `get_data_source_full` | 数据源定义链：数据源头 → 关联表 → 字段映射               |
+| `get_transfer_rules`   | 跨库数据转换规则（Import / Export / Mapping）            |
+
+### 系统（9 个）
+
+| 工具                   | 说明                                                        |
+| ---------------------- | ----------------------------------------------------------- |
+| `get_capabilities`     | **能力自描述**：分别探测环境库/用户库表与各工具可用性      |
+| `get_function_tree`    | 功能菜单树，含关联窗体/路由/组件，支持平台过滤              |
+| `get_page_actions`     | 按页面 Code 查询可用按钮及功能                              |
+| `get_choose_ui_detail` | UI 选择器（下拉框/参照）配置详情                            |
+| `get_button_detail`    | 按钮定义及其使用场景（哪些窗体/页面引用）                   |
+| `get_system_enums`     | 内置字典：链接类型/操作类型/功能类型/用户报表方案（缺表降级） |
+| `get_sys_dict`         | 系统字典（SysDbType / SyDbValue），支持分类树               |
+| `get_db_object_source` | 用户库视图/存储过程/函数的 CREATE SQL 源码                  |
+| `get_view_lineage`     | 视图/对象依赖血缘（`sys.sql_expression_dependencies` 递归） |
+
+### 比对（7 个 · 需系统 B）
+
+| 工具             | 业务键       | 说明                                |
+| ---------------- | ------------ | ----------------------------------- |
+| `diff_tables`    | TableName    | 表定义比对（含字段级深入对比）      |
+| `diff_forms`     | FormName     | 窗体定义比对（含规则子表对比）      |
+| `diff_dbos`      | DBOName      | DBO 定义比对                        |
+| `diff_dataflows` | DataFlowName | 数据流定义比对                      |
+| `diff_functions` | FunctionName | 功能菜单定义比对                    |
+| `diff_sys_dict`  | DbType       | 系统字典类型比对                    |
+| `diff_all`       | —            | 并行运行上述 6 个比对，返回摘要汇总 |
+
+### 迁移（7 个 · 需系统 B）
+
+| 工具                        | 说明                                                          |
+| --------------------------- | ------------------------------------------------------------- |
+| `list_migratable_features`  | 列出源系统可迁移功能清单（窗体/DBO/数据流/功能菜单）          |
+| `analyze_feature`           | 分析指定功能的完整依赖树                                      |
+| `export_feature`            | 导出功能关联的全部数据为 JSON                                 |
+| `check_migration_conflicts` | 预检目标系统是否存在同名实体及跨功能依赖                      |
+| `generate_migration_sql`    | 生成 INSERT SQL 迁移脚本（skip / replace 策略，含 ID 重映射） |
+| `migrate_sys_dict`          | 生成系统字典迁移 SQL                                          |
+| `generate_rollback_sql`     | 为迁移生成 DELETE 回滚脚本                                    |
+
+## 典型用法
+
+### 探索表结构
+
+```
+list_tables(modular="CK", keyword="Order")
+  → describe_table(tableName="SaleOrderHedTB")
+  → get_table_relations(tableName="SaleOrderHedTB")
+  → search_schema(keyword="WareID", searchIn="usage")
+```
+
+### 查看窗体配置
+
+```
+get_form_full(formId="SaleOrder", include="basic,colors,buttons,dataflows")
+```
+
+### 双系统比对
+
+```
+diff_all()
+  → diff_tables(keyword="Order")
+  → diff_forms(keyword="SaleOrder")
+```
+
+### 功能迁移
+
+```
+list_migratable_features(featureType="form", keyword="Sale")
+  → analyze_feature(featureType="form", featureName="SaleOrder")
+  → check_migration_conflicts(featureType="form", featureName="SaleOrder")
+  → generate_migration_sql(featureType="form", featureName="SaleOrder", options={conflictStrategy:"skip"})
+```
+
+### 查看存储过程/视图源码
+
+```
+get_db_object_source(objectType="procedure", keyword="sp_")
+  → get_db_object_source(objectType="view", name="v_SaleOrder")
+```
+
+### 查数据 / 中文名定位（新增）
+
+```
+resolve_table(nameOrKeyword="发货通知")            # 中文名 → 表名
+  → query_table_data(tableName="SaleSendHedTB", top=5, filter=[{column:"BillNo", op:"like", value:"SO"}])
+get_capabilities()                                # 本环境支持哪些工具？
+  → get_view_lineage(name="vwAboutOut")           # 视图由哪些表构成
+```
+
+## 返回结构
+
+所有工具统一返回：
+
+| 键                | 说明                                                                                                       |
+| ----------------- | ---------------------------------------------------------------------------------------------------------- |
+| `items`           | 主结果数组（表数据 / 候选 / 工具可用性…）                                                                  |
+| `pagination`      | 分页信息；SQL 端分页含 `totalItems/totalPages/hasMore/nextPage`，TOP N 查询为 `{mode:"topN",limit,returned,hasMore}` |
+| `warnings`        | 降级/跳过提示，元素含 `module`/`message`/`hint?`/`fallback?`；**有 warning 不代表失败**                    |
+| 其余上下文键      | 如 `table`/`fields`/`env`/`candidates` 等                                                                  |
+
+旧键 → 新键映射：`tables`/`fields`/`values`/`objects`/`modules` → 统一为 `items`（次要结果保留在上下文键，如 `search_schema.fields`）。
+
+## 分页与截断语义
+
+- **分页**：`page`（≥1）/`pageSize`（1..200，默认 50）。SQL 端 `COUNT(*)` + `OFFSET/FETCH`，`totalItems` 为真实总数，不再受 `TOP` 影响。
+- **TOP N 查询**（`query_table_data`/`get_form`）：`top` 默认 20、上限 200；`pagination.mode="topN"`。
+- **截断**：输出超 50KB 时保留 `pagination`/`warnings`/`summary`/`fieldNames` 与各数组**前缀预览**，并给出 `_dropped_<key>` 丢弃计数与 `_hint`，不再返回空 body。`describe_table`/`get_form_full` 即使被截断也会返回 `fieldNames`（纯字段名清单）。用 `fieldKeyword`/`columns`/`pageSize` 缩小范围。
+
+## 安全
+
+- **只读**：所有查询经 `FORBIDDEN` 关键字扫描（`INSERT`、`UPDATE`、`DELETE`、`DROP`、`CREATE`、`ALTER`、`TRUNCATE`、`EXEC` 等），拒绝写操作
+- **防注入**：用户输入字符串参数经 `escapeSql()` 单引号转义；所有 `z.string()` 参数附加 `.max()` 约束
+- **凭据加密**：支持 DPAPI 加密连接信息，避免明文泄露
+- **输出保护**：JSON 输出经 `safeJson()` 检查，超 50KB 自动截断并提示分页
+- **迁移不直写**：迁移工具仅生成 SQL 脚本，需人工审查后手动执行
+- **最小权限**：建议使用仅具有必要读取权限的 SQL Server 账号
+
+## 本地开发
+
+```bash
+# 安装依赖
+npm install
+
+# 编译
+npm run build
+
+# 开发模式（tsx 热加载）
+npm run dev
+
+# 凭据加密 CLI
+npm run encrypt-secrets
+
+# 启动
+npm start
+```

package/dist/config.d.ts

@@ -0,0 +1,131 @@
+export declare const env: {
+    DB_SERVER: string;
+    DB_USER: string;
+    DB_PASSWORD: string;
+    DB_DATABASE: string;
+    DB_TARGET_DATABASES: string;
+    DB_TRUST_SERVER_CERT: string;
+    DB_ENCRYPT: string;
+    DB_POOL_MAX: string;
+    DB_POOL_MIN: string;
+    DB_POOL_IDLE_TIMEOUT: string;
+    DB_QUERY_TIMEOUT: string;
+    DB_SENSITIVE_COLUMNS: string;
+    DB_B_SERVER: string;
+    DB_B_USER: string;
+    DB_B_PASSWORD: string;
+    DB_B_DATABASE: string;
+    DB_B_TARGET_DATABASES: string;
+};
+export declare const tableNames: {
+    readonly tableDef: "TableSetTB";
+    readonly fieldDef: "TableFieldSetTB";
+    readonly virtualTable: "VirtualTableTB";
+    readonly formDef: "FormSetTB";
+    readonly formState: "FormStateSetTB";
+    readonly formRuleHed: "FormRuleSetHedTB";
+    readonly formRuleDet: "FormRuleSetDetTB";
+    readonly formRuleButton: "FormRuleSetButtonTB";
+    readonly formRuleDataSource: "FormRuleSetDataSourceTB";
+    readonly formRuleLink: "FormRuleSetLinkTB";
+    readonly formRuleMenu: "FormRuleSetMenuTB";
+    readonly formRuleReferHed: "FormRuleSetReferHedTB";
+    readonly formRuleRefer: "FormRuleSetReferTB";
+    readonly formRuleReferCase: "FormRuleSetReferCaseTB";
+    readonly formRuleReferFilter: "FormRuleSetReferFilterTB";
+    readonly formRuleSQLReplace: "FormRuleSQLReplaceTB";
+    readonly formRuleDataFlow: "FormRuleDataFlowTB";
+    readonly formRuleColor: "FormRuleColorInfoTB";
+    readonly userFormHed: "UserFormSetHedTB";
+    readonly userFormDet: "UserFormSetDetTB";
+    readonly function: "FunctionTB";
+    readonly functionKind: "FunctionKindTB";
+    readonly menuFunction: "MenuFunction";
+    readonly button: "ButtonTB";
+    readonly moduleManage: "ModuleManageTB";
+    readonly dataSourceHed: "DataSourceSetHedTB";
+    readonly dataSourceDet: "DataSourceSetDetTB";
+    readonly dataSourceField: "DataSourceSetFieldTB";
+    readonly dboSet: "DBOSetTB";
+    readonly dboSetField: "DBOSetFieldTB";
+    readonly dboPrSetHed: "DBOPrSetHedTB";
+    readonly dboPrSetField: "DBOPrSetFieldTB";
+    readonly dboPrSetParam: "DBOPrSetParamTB";
+    readonly dataFlowHed: "DataFlowHedTB";
+    readonly dataFlowDet: "DataFlowDetTB";
+    readonly dataFlowNode: "DataFlowNodeTB";
+    readonly dataFlowRelation: "DataFlowRelationTB";
+    readonly transferRuleHed: "TransferRuleHedTB";
+    readonly transferRuleDet: "TransferRuleDetTB";
+    readonly chooseUISet: "ChooseUISetTB";
+    readonly linkType: "LinkTypeTB";
+    readonly operateType: "OperateTypeTB";
+    readonly inOutKind: "InOutKindTB";
+    readonly userReportFind: "UserReportFindSetTB";
+};
+export type TableKey = keyof typeof tableNames;
+export declare const schemaSource: {
+    database: string;
+    tables: {
+        readonly tableDef: "TableSetTB";
+        readonly fieldDef: "TableFieldSetTB";
+        readonly virtualTable: "VirtualTableTB";
+        readonly formDef: "FormSetTB";
+        readonly formState: "FormStateSetTB";
+        readonly formRuleHed: "FormRuleSetHedTB";
+        readonly formRuleDet: "FormRuleSetDetTB";
+        readonly formRuleButton: "FormRuleSetButtonTB";
+        readonly formRuleDataSource: "FormRuleSetDataSourceTB";
+        readonly formRuleLink: "FormRuleSetLinkTB";
+        readonly formRuleMenu: "FormRuleSetMenuTB";
+        readonly formRuleReferHed: "FormRuleSetReferHedTB";
+        readonly formRuleRefer: "FormRuleSetReferTB";
+        readonly formRuleReferCase: "FormRuleSetReferCaseTB";
+        readonly formRuleReferFilter: "FormRuleSetReferFilterTB";
+        readonly formRuleSQLReplace: "FormRuleSQLReplaceTB";
+        readonly formRuleDataFlow: "FormRuleDataFlowTB";
+        readonly formRuleColor: "FormRuleColorInfoTB";
+        readonly userFormHed: "UserFormSetHedTB";
+        readonly userFormDet: "UserFormSetDetTB";
+        readonly function: "FunctionTB";
+        readonly functionKind: "FunctionKindTB";
+        readonly menuFunction: "MenuFunction";
+        readonly button: "ButtonTB";
+        readonly moduleManage: "ModuleManageTB";
+        readonly dataSourceHed: "DataSourceSetHedTB";
+        readonly dataSourceDet: "DataSourceSetDetTB";
+        readonly dataSourceField: "DataSourceSetFieldTB";
+        readonly dboSet: "DBOSetTB";
+        readonly dboSetField: "DBOSetFieldTB";
+        readonly dboPrSetHed: "DBOPrSetHedTB";
+        readonly dboPrSetField: "DBOPrSetFieldTB";
+        readonly dboPrSetParam: "DBOPrSetParamTB";
+        readonly dataFlowHed: "DataFlowHedTB";
+        readonly dataFlowDet: "DataFlowDetTB";
+        readonly dataFlowNode: "DataFlowNodeTB";
+        readonly dataFlowRelation: "DataFlowRelationTB";
+        readonly transferRuleHed: "TransferRuleHedTB";
+        readonly transferRuleDet: "TransferRuleDetTB";
+        readonly chooseUISet: "ChooseUISetTB";
+        readonly linkType: "LinkTypeTB";
+        readonly operateType: "OperateTypeTB";
+        readonly inOutKind: "InOutKindTB";
+        readonly userReportFind: "UserReportFindSetTB";
+    };
+};
+export interface SystemConfig {
+    server: string;
+    user: string;
+    password: string;
+    database: string;
+    targetDatabases: string[];
+    userDb: string;
+}
+export declare function getSystemConfig(systemName?: string): SystemConfig;
+export declare function isSystemBConfigured(): boolean;
+export declare function table(db: string, name: string): string;
+export declare const envDb: () => string;
+export declare const envTable: (key: TableKey) => string;
+export declare function systemTable(systemName: string, key: TableKey): string;
+export declare const userDb: (systemName?: string) => string;
+export declare const targetDatabases: string[];

package/dist/config.js

@@ -0,0 +1,138 @@
+import dotenv from "dotenv";
+import { z } from "zod";
+import { decryptEnv } from "./crypto-utils.js";
+dotenv.config({ path: new URL("../.env", import.meta.url), quiet: true });
+decryptEnv();
+const envSchema = z.object({
+    // 必填项 - 系统 A
+    DB_SERVER: z.string().min(1, "DB_SERVER 是必填项"),
+    DB_USER: z.string().min(1, "DB_USER 是必填项"),
+    DB_PASSWORD: z.string().min(1, "DB_PASSWORD 是必填项"),
+    DB_DATABASE: z.string().min(1, "DB_DATABASE 是必填项"),
+    // 可选项 - 系统 A
+    DB_TARGET_DATABASES: z.string().optional().default(""),
+    DB_TRUST_SERVER_CERT: z.string().optional().default("true"),
+    DB_ENCRYPT: z.string().optional().default("false"),
+    DB_POOL_MAX: z.string().optional().default("10"),
+    DB_POOL_MIN: z.string().optional().default("0"),
+    DB_POOL_IDLE_TIMEOUT: z.string().optional().default("30000"),
+    // 查询与数据可见性
+    DB_QUERY_TIMEOUT: z.string().optional().default("30000"),
+    DB_SENSITIVE_COLUMNS: z
+        .string()
+        .optional()
+        .default("password|passwd|pwd|secret|token|credential"),
+    // 可选项 - 系统 B（第二套 XDX 系统，用于比对和迁移）
+    DB_B_SERVER: z.string().optional().default(""),
+    DB_B_USER: z.string().optional().default(""),
+    DB_B_PASSWORD: z.string().optional().default(""),
+    DB_B_DATABASE: z.string().optional().default(""),
+    DB_B_TARGET_DATABASES: z.string().optional().default(""),
+});
+export const env = envSchema.parse(process.env);
+// ============================================================
+// 37 张 XDX 系统表名映射
+// ============================================================
+export const tableNames = {
+    tableDef: "TableSetTB",
+    fieldDef: "TableFieldSetTB",
+    virtualTable: "VirtualTableTB",
+    formDef: "FormSetTB",
+    formState: "FormStateSetTB",
+    formRuleHed: "FormRuleSetHedTB",
+    formRuleDet: "FormRuleSetDetTB",
+    formRuleButton: "FormRuleSetButtonTB",
+    formRuleDataSource: "FormRuleSetDataSourceTB",
+    formRuleLink: "FormRuleSetLinkTB",
+    formRuleMenu: "FormRuleSetMenuTB",
+    formRuleReferHed: "FormRuleSetReferHedTB",
+    formRuleRefer: "FormRuleSetReferTB",
+    formRuleReferCase: "FormRuleSetReferCaseTB",
+    formRuleReferFilter: "FormRuleSetReferFilterTB",
+    formRuleSQLReplace: "FormRuleSQLReplaceTB",
+    formRuleDataFlow: "FormRuleDataFlowTB",
+    formRuleColor: "FormRuleColorInfoTB",
+    userFormHed: "UserFormSetHedTB",
+    userFormDet: "UserFormSetDetTB",
+    function: "FunctionTB",
+    functionKind: "FunctionKindTB",
+    menuFunction: "MenuFunction",
+    button: "ButtonTB",
+    moduleManage: "ModuleManageTB",
+    dataSourceHed: "DataSourceSetHedTB",
+    dataSourceDet: "DataSourceSetDetTB",
+    dataSourceField: "DataSourceSetFieldTB",
+    dboSet: "DBOSetTB",
+    dboSetField: "DBOSetFieldTB",
+    dboPrSetHed: "DBOPrSetHedTB",
+    dboPrSetField: "DBOPrSetFieldTB",
+    dboPrSetParam: "DBOPrSetParamTB",
+    dataFlowHed: "DataFlowHedTB",
+    dataFlowDet: "DataFlowDetTB",
+    dataFlowNode: "DataFlowNodeTB",
+    dataFlowRelation: "DataFlowRelationTB",
+    transferRuleHed: "TransferRuleHedTB",
+    transferRuleDet: "TransferRuleDetTB",
+    chooseUISet: "ChooseUISetTB",
+    linkType: "LinkTypeTB",
+    operateType: "OperateTypeTB",
+    inOutKind: "InOutKindTB",
+    userReportFind: "UserReportFindSetTB",
+};
+export const schemaSource = {
+    database: env.DB_DATABASE,
+    tables: tableNames,
+};
+export function getSystemConfig(systemName = "default") {
+    if (systemName === "b") {
+        return {
+            server: env.DB_B_SERVER,
+            user: env.DB_B_USER,
+            password: env.DB_B_PASSWORD,
+            database: env.DB_B_DATABASE,
+            targetDatabases: env.DB_B_TARGET_DATABASES
+                ? env.DB_B_TARGET_DATABASES.split(",").map((s) => s.trim())
+                : [],
+            userDb: env.DB_B_TARGET_DATABASES
+                ? env.DB_B_TARGET_DATABASES.split(",")[0].trim()
+                : "",
+        };
+    }
+    // "default" | "a" → 系统 A
+    return {
+        server: env.DB_SERVER,
+        user: env.DB_USER,
+        password: env.DB_PASSWORD,
+        database: env.DB_DATABASE,
+        targetDatabases: env.DB_TARGET_DATABASES
+            ? env.DB_TARGET_DATABASES.split(",").map((s) => s.trim())
+            : [],
+        userDb: env.DB_TARGET_DATABASES
+            ? env.DB_TARGET_DATABASES.split(",")[0].trim()
+            : "",
+    };
+}
+export function isSystemBConfigured() {
+    const cfg = getSystemConfig("b");
+    return cfg.server !== "" && cfg.user !== "" && cfg.database !== "";
+}
+// ============================================================
+// 便捷导出
+// ============================================================
+export function table(db, name) {
+    return `[${db}].[dbo].[${name}]`;
+}
+export const envDb = () => env.DB_DATABASE;
+export const envTable = (key) => table(env.DB_DATABASE, tableNames[key]);
+export function systemTable(systemName, key) {
+    const cfg = getSystemConfig(systemName);
+    return table(cfg.database, tableNames[key]);
+}
+export const userDb = (systemName = "default") => {
+    const cfg = getSystemConfig(systemName);
+    return cfg.userDb;
+};
+export const targetDatabases = env.DB_TARGET_DATABASES
+    ? env.DB_TARGET_DATABASES.split(",").map((s) => s.trim())
+    : [];
+//# sourceMappingURL=config.js.map

package/dist/config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,QAAQ,CAAC;AAC5B,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAE/C,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,IAAI,GAAG,CAAC,SAAS,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;AAC1E,UAAU,EAAE,CAAC;AAEb,MAAM,SAAS,GAAG,CAAC,CAAC,MAAM,CAAC;IACzB,aAAa;IACb,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,gBAAgB,CAAC;IAC9C,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,cAAc,CAAC;IAC1C,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,kBAAkB,CAAC;IAClD,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,kBAAkB,CAAC;IAElD,aAAa;IACb,mBAAmB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC;IACtD,oBAAoB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC;IAC3D,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC;IAClD,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;IAChD,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC;IAC/C,oBAAoB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC;IAE5D,WAAW;IACX,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC;IACxD,oBAAoB,EAAE,CAAC;SACpB,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,OAAO,CAAC,6CAA6C,CAAC;IAEzD,iCAAiC;IACjC,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC;IAC9C,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC;IAC5C,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC;IAChD,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC;IAChD,qBAAqB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC;CACzD,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,GAAG,GAAG,SAAS,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;AAEhD,+DAA+D;AAC/D,kBAAkB;AAClB,+DAA+D;AAC/D,MAAM,CAAC,MAAM,UAAU,GAAG;IACxB,QAAQ,EAAE,YAAY;IACtB,QAAQ,EAAE,iBAAiB;IAC3B,YAAY,EAAE,gBAAgB;IAC9B,OAAO,EAAE,WAAW;IACpB,SAAS,EAAE,gBAAgB;IAC3B,WAAW,EAAE,kBAAkB;IAC/B,WAAW,EAAE,kBAAkB;IAC/B,cAAc,EAAE,qBAAqB;IACrC,kBAAkB,EAAE,yBAAyB;IAC7C,YAAY,EAAE,mBAAmB;IACjC,YAAY,EAAE,mBAAmB;IACjC,gBAAgB,EAAE,uBAAuB;IACzC,aAAa,EAAE,oBAAoB;IACnC,iBAAiB,EAAE,wBAAwB;IAC3C,mBAAmB,EAAE,0BAA0B;IAC/C,kBAAkB,EAAE,sBAAsB;IAC1C,gBAAgB,EAAE,oBAAoB;IACtC,aAAa,EAAE,qBAAqB;IACpC,WAAW,EAAE,kBAAkB;IAC/B,WAAW,EAAE,kBAAkB;IAC/B,QAAQ,EAAE,YAAY;IACtB,YAAY,EAAE,gBAAgB;IAC9B,YAAY,EAAE,cAAc;IAC5B,MAAM,EAAE,UAAU;IAClB,YAAY,EAAE,gBAAgB;IAC9B,aAAa,EAAE,oBAAoB;IACnC,aAAa,EAAE,oBAAoB;IACnC,eAAe,EAAE,sBAAsB;IACvC,MAAM,EAAE,UAAU;IAClB,WAAW,EAAE,eAAe;IAC5B,WAAW,EAAE,eAAe;IAC5B,aAAa,EAAE,iBAAiB;IAChC,aAAa,EAAE,iBAAiB;IAChC,WAAW,EAAE,eAAe;IAC5B,WAAW,EAAE,eAAe;IAC5B,YAAY,EAAE,gBAAgB;IAC9B,gBAAgB,EAAE,oBAAoB;IACtC,eAAe,EAAE,mBAAmB;IACpC,eAAe,EAAE,mBAAmB;IACpC,WAAW,EAAE,eAAe;IAC5B,QAAQ,EAAE,YAAY;IACtB,WAAW,EAAE,eAAe;IAC5B,SAAS,EAAE,aAAa;IACxB,cAAc,EAAE,qBAAqB;CAC7B,CAAC;AAIX,MAAM,CAAC,MAAM,YAAY,GAAG;IAC1B,QAAQ,EAAE,GAAG,CAAC,WAAW;IACzB,MAAM,EAAE,UAAU;CACnB,CAAC;AAcF,MAAM,UAAU,eAAe,CAAC,UAAU,GAAG,SAAS;IACpD,IAAI,UAAU,KAAK,GAAG,EAAE,CAAC;QACvB,OAAO;YACL,MAAM,EAAE,GAAG,CAAC,WAAW;YACvB,IAAI,EAAE,GAAG,CAAC,SAAS;YACnB,QAAQ,EAAE,GAAG,CAAC,aAAa;YAC3B,QAAQ,EAAE,GAAG,CAAC,aAAa;YAC3B,eAAe,EAAE,GAAG,CAAC,qBAAqB;gBACxC,CAAC,CAAC,GAAG,CAAC,qBAAqB,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;gBAC3D,CAAC,CAAC,EAAE;YACN,MAAM,EAAE,GAAG,CAAC,qBAAqB;gBAC/B,CAAC,CAAC,GAAG,CAAC,qBAAqB,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE;gBAChD,CAAC,CAAC,EAAE;SACP,CAAC;IACJ,CAAC;IACD,yBAAyB;IACzB,OAAO;QACL,MAAM,EAAE,GAAG,CAAC,SAAS;QACrB,IAAI,EAAE,GAAG,CAAC,OAAO;QACjB,QAAQ,EAAE,GAAG,CAAC,WAAW;QACzB,QAAQ,EAAE,GAAG,CAAC,WAAW;QACzB,eAAe,EAAE,GAAG,CAAC,mBAAmB;YACtC,CAAC,CAAC,GAAG,CAAC,mBAAmB,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;YACzD,CAAC,CAAC,EAAE;QACN,MAAM,EAAE,GAAG,CAAC,mBAAmB;YAC7B,CAAC,CAAC,GAAG,CAAC,mBAAmB,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE;YAC9C,CAAC,CAAC,EAAE;KACP,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,mBAAmB;IACjC,MAAM,GAAG,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC;IACjC,OAAO,GAAG,CAAC,MAAM,KAAK,EAAE,IAAI,GAAG,CAAC,IAAI,KAAK,EAAE,IAAI,GAAG,CAAC,QAAQ,KAAK,EAAE,CAAC;AACrE,CAAC;AAED,+DAA+D;AAC/D,OAAO;AACP,+DAA+D;AAC/D,MAAM,UAAU,KAAK,CAAC,EAAU,EAAE,IAAY;IAC5C,OAAO,IAAI,EAAE,YAAY,IAAI,GAAG,CAAC;AACnC,CAAC;AAED,MAAM,CAAC,MAAM,KAAK,GAAG,GAAG,EAAE,CAAC,GAAG,CAAC,WAAW,CAAC;AAE3C,MAAM,CAAC,MAAM,QAAQ,GAAG,CAAC,GAAa,EAAE,EAAE,CACxC,KAAK,CAAC,GAAG,CAAC,WAAW,EAAE,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC;AAE1C,MAAM,UAAU,WAAW,CAAC,UAAkB,EAAE,GAAa;IAC3D,MAAM,GAAG,GAAG,eAAe,CAAC,UAAU,CAAC,CAAC;IACxC,OAAO,KAAK,CAAC,GAAG,CAAC,QAAQ,EAAE,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC;AAC9C,CAAC;AAED,MAAM,CAAC,MAAM,MAAM,GAAG,CAAC,UAAU,GAAG,SAAS,EAAE,EAAE;IAC/C,MAAM,GAAG,GAAG,eAAe,CAAC,UAAU,CAAC,CAAC;IACxC,OAAO,GAAG,CAAC,MAAM,CAAC;AACpB,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,eAAe,GAAa,GAAG,CAAC,mBAAmB;IAC9D,CAAC,CAAC,GAAG,CAAC,mBAAmB,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IACzD,CAAC,CAAC,EAAE,CAAC"}

package/dist/crypto-utils.d.ts

@@ -0,0 +1,29 @@
+/**
+ * DPAPI 凭据加密工具
+ *
+ * Windows: 使用 System.Security.Cryptography.ProtectedData（绑定当前用户+机器）
+ * 非 Windows: 降级为 Base64 混淆（仅防无意泄露，不防定向攻击）
+ */
+/** 需要加密的凭据字段名 */
+export declare const SENSITIVE_FIELDS: readonly ["DB_SERVER", "DB_PASSWORD", "DB_B_SERVER", "DB_B_PASSWORD"];
+/** DPAPI 后缀映射：DB_PASSWORD → DB_PASSWORD_DPAPI */
+export declare function dpapiField(field: string): string;
+/** 反向：DB_PASSWORD_DPAPI → DB_PASSWORD */
+export declare function originalField(dpapiField: string): string;
+/** 检测当前平台是否支持 DPAPI */
+export declare function isDpapiAvailable(): boolean;
+/**
+ * 加密明文 → 密文（前缀 dpapi:）
+ * Windows 上使用 DPAPI，非 Windows 使用 Base64 混淆
+ */
+export declare function encrypt(plaintext: string): string;
+/**
+ * 解密密文 → 原文
+ * 自动识别 dpapi: / obfuscated: 前缀
+ */
+export declare function decrypt(encrypted: string): string;
+/**
+ * 遍历 process.env，解密所有 *_DPAPI 字段并注入为原始字段名
+ * 在 dotenv 加载之后、zod 校验之前调用
+ */
+export declare function decryptEnv(): void;