tezign-ai-appstore-sdk 0.1.0 → 0.1.2

package/README.md

@@ -1,8 +1,16 @@
 # tezign-ai-appstore-sdk
 
-浏览器端上传 SDK：调用平台的 uploads API 创建文件记录，获取最小权限 STS 临时凭证，然后使用 `ali-oss` 在浏览器侧执行 `multipartUpload` 上传，并返回你们的 CDN 永久公网链接。
+AI 应用商店 SDK：提供文件上传和结构化数据存储功能。
 
-## 使用方式（浏览器）
+## 安装
+
+```bash
+npm install tezign-ai-appstore-sdk
+```
+
+## 快速开始
+
+### 文件上传
 
 ```ts
 import { createOssUploadClient } from 'tezign-ai-appstore-sdk'
@@ -10,21 +18,135 @@ import { createOssUploadClient } from 'tezign-ai-appstore-sdk'
 const client = createOssUploadClient({
   baseUrl: 'https://platform.example.com',
   projectId: 'your-project-id',
-  // 第三方 Supabase：由业务方获取 access_token 后提供给 SDK
-  getAccessToken: async () => supabase.auth.getSession().then((r) => r.data.session?.access_token ?? null),
+  getAccessToken: async () => 'your-token',
 })
 
 const result = await client.upload({
   file,
-  onProgress: (p) => console.log(p.loaded, p.total),
+  onProgress: (p) => console.log(`${p.loaded}/${p.total}`),
+})
+
+console.log(result.publicUrl)
+```
+
+### 结构化数据存储
+
+```ts
+import { createSchemaClient, createSchema } from 'tezign-ai-appstore-sdk'
+
+// 定义数据模型
+const postSchema = createSchema('posts')
+  .string('title', { required: true, filterable: true })
+  .string('content', { required: true })
+  .string('status', { enum: ['draft', 'published'], filterable: true })
+  .setVersion(1)
+  .build()
+
+// 创建客户端（同步返回，自动初始化 + 自动迁移）
+const db = createSchemaClient({ posts: postSchema }, storageClient)
+
+// 数据操作（类型完全推导，自动等待初始化完成）
+const post = await db.posts.create('post-1', {
+  title: 'Hello',
+  content: 'World',
+  status: 'published',
+})
+```
+
+## 核心概念
+
+**统一入口**：所有数据建模和操作通过 `createSchemaClient` 完成。
+
+1. **定义 Schema** - 使用 `createSchema` 定义数据模型
+2. **创建客户端** - 使用 `createSchemaClient` 自动完成初始化、迁移和客户端创建
+3. **数据操作** - 通过返回的客户端进行类型安全的数据操作
+
+## Schema 定义
+
+```ts
+const postSchema = createSchema('posts')
+  .string('title', { required: true, filterable: true })
+  .string('content', { required: true })
+  .number('viewCount', { default: 0 })
+  .setVersion(1)
+  .setPolicy({
+    createSubjectsByScope: {
+      members: ['project:member'],
+    },
+  })
+  .build()
+```
+
+**字段类型**：`.string()` `.number()` `.boolean()` `.datetime()` `.json()`
+
+**字段选项**：
+- `required` - 是否必填
+- `default` - 默认值
+- `filterable` - 是否可过滤
+- `sortable` - 是否可排序
+- `previousName` - 声明之前的字段名（用于字段更名）
+
+## 自动迁移
+
+`createSchemaClient` 自动检测并应用 Schema 变更：
+
+```ts
+// 字段更名
+const postSchemaV2 = createSchema('posts')
+  .string('title', { required: true })
+  .string('authorId', { 
+    filterable: true, 
+    previousName: 'author'  // 声明更名
+  })
+  .setVersion(2)
+  .build()
+
+const db = createSchemaClient({ posts: postSchemaV2 }, storageClient)
+```
+
+**预览变更**：
+
+```ts
+const db = createSchemaClient({ posts: postSchema }, storageClient, {
+  migrateOptions: {
+    dryRun: true,
+    onChangesDetected: (namespace, changes) => {
+      console.log(changes)
+    }
+  }
+})
+```
+
+## 数据操作
+
+```ts
+// 创建
+const post = await db.posts.create('post-1', { title: 'Hello' })
+
+// 获取
+const post = await db.posts.get('post-1')
+
+// 更新
+await db.posts.update('post-1', { title: 'Updated' }, post.version)
+
+// 删除
+await db.posts.delete('post-1')
+
+// 查询
+const result = await db.posts.findMany({
+  filter: { field: 'status', op: 'eq', value: 'published' },
+  sort: { field: '__sys.createdAt', direction: 'desc' },
+  limit: 20,
 })
 
-console.log(result.publicUrl) // https://{OSS_CDN_DOMAIN}/{objectKey}
+// 计数
+const count = await db.posts.count()
 ```
 
-未提供 `getAccessToken` 时，SDK 默认使用 cookie（`credentials: 'include'`）。
+## 完整文档
 
-## API 文档
+见 [API.md](./API.md)。
 
-见 `API.md`。
+## License
 
+MIT

package/dist/index.d.ts

@@ -1,78 +1,13 @@
-export type UploadProgress = {
-    loaded: number;
-    total: number;
-};
-export type CreateOssUploadClientOptions = {
-    /**
-     * Base URL（不带末尾 /）
-     * - 不传时默认使用 window.location.origin（同域部署场景）
-     */
-    baseUrl?: string;
-    /**
-     * 固定 projectId（多项目场景可按项目创建 client）
-     * - 不传时由服务端通过 host 解析
-     */
-    projectId?: string;
-    /**
-     * 返回 Bearer token（第三方 Supabase 的 access_token）
-     * - 返回 null 表示不使用 Authorization（可用于同域 cookie 场景）
-     */
-    getAccessToken?: () => Promise<string | null>;
-};
-export type PrepareUploadInput = {
-    file: File;
-};
-export type PrepareUploadResult = {
-    uploadToken: string;
-    objectKey: string;
-    publicUrl: string;
-};
-export type CompleteUploadResult = {
-    id: string;
-    objectKey: string;
-    filename: string;
-    contentType: string | null;
-    size: number | null;
-    status: string;
-    createdAt: string;
-    publicUrl: string;
-};
-export type UploadTokenRef = {
-    uploadToken: string;
-};
-export type UploadListItem = {
-    id: string;
-    objectKey: string;
-    filename: string;
-    contentType: string | null;
-    size: number | null;
-    status: string;
-    createdAt: string;
-    publicUrl: string | null;
-};
-export type UploadListResult = {
-    page: number;
-    pageSize: number;
-    total: number;
-    items: UploadListItem[];
-};
-export type UploadListOptions = {
-    page?: number;
-    pageSize?: number;
-};
-export type UploadInput = PrepareUploadInput & {
-    onProgress?: (p: UploadProgress) => void;
-    /** ali-oss multipart 并发数（默认 3） */
-    concurrency?: number;
-};
-export declare function createOssUploadClient(options: CreateOssUploadClientOptions): {
-    upload: (input: UploadInput) => Promise<CompleteUploadResult>;
-    list: (options?: UploadListOptions) => Promise<{
-        success: true;
-        data: UploadListResult;
-    }>;
-    remove: (fileId: string) => Promise<{
-        success: true;
-    }>;
-};
+export { createStorageClient, StorageClient, StorageError } from './storage/storage.js';
+export type { StorageItem, Filter, Sort, StorageIndexDefinition, NamespacePolicy, PermissionResource, PermissionAction, CheckPermissionRequest, CheckPermissionResponse, } from './storage/storage-types.js';
+export { createSchema, SchemaBuilder, OWNER_ID, subject, buildAclConfig, } from './storage/schema.js';
+export type { FieldDef, FieldPermission, StringFieldDef, NumberFieldDef, BooleanFieldDef, DateTimeFieldDef, JsonFieldDef, FieldsDefinition, SchemaDefinition, IndexConfig, AccessConfig, InferSchemaType, CreateSchemaType, UpdateSchemaType, SchemaAclConfig, AclConfig, } from './storage/schema.js';
+export type { TypedStorageClient } from './storage/typed-storage.js';
+export { createTypedStorage } from './storage/typed-storage.js';
+export { createFieldPermissionChecker } from './storage/field-permission.js';
+export type { FieldPermissionContext, FieldPermissionCheck } from './storage/field-permission.js';
+export { createSchemaClient, defineSchemas, PermissionError, UserCancelledError, SchemaClient, } from './storage/schema-client.js';
+export type { SchemaDefinitions, InferSchemaTypes, CreateSchemaClientOptions, MigrateOptions, MigrationChange, MigrationResult, ConfirmDialogOptions, ConfirmDialogResult, ConfirmDialogFunction, } from './storage/schema-client.js';
+export { createOssUploadClient } from './uploader/index.js';
+export type { CreateOssUploadClientOptions, CompleteUploadResult, UploadListItem, UploadListResult, } from './uploader/index.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,cAAc,GAAG;IAC3B,MAAM,EAAE,MAAM,CAAA;IACd,KAAK,EAAE,MAAM,CAAA;CACd,CAAA;AAOD,MAAM,MAAM,4BAA4B,GAAG;IACzC;;;OAGG;IACH,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB;;;OAGG;IACH,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB;;;OAGG;IACH,cAAc,CAAC,EAAE,MAAM,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAA;CAC9C,CAAA;AAED,MAAM,MAAM,kBAAkB,GAAG;IAC/B,IAAI,EAAE,IAAI,CAAA;CACX,CAAA;AAED,MAAM,MAAM,mBAAmB,GAAG;IAEhC,WAAW,EAAE,MAAM,CAAA;IACnB,SAAS,EAAE,MAAM,CAAA;IACjB,SAAS,EAAE,MAAM,CAAA;CAClB,CAAA;AAED,MAAM,MAAM,oBAAoB,GAAG;IACjC,EAAE,EAAE,MAAM,CAAA;IACV,SAAS,EAAE,MAAM,CAAA;IACjB,QAAQ,EAAE,MAAM,CAAA;IAChB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAA;IAC1B,IAAI,EAAE,MAAM,GAAG,IAAI,CAAA;IACnB,MAAM,EAAE,MAAM,CAAA;IACd,SAAS,EAAE,MAAM,CAAA;IACjB,SAAS,EAAE,MAAM,CAAA;CAClB,CAAA;AAED,MAAM,MAAM,cAAc,GAAG;IAAE,WAAW,EAAE,MAAM,CAAA;CAAE,CAAA;AAEpD,MAAM,MAAM,cAAc,GAAG;IAC3B,EAAE,EAAE,MAAM,CAAA;IACV,SAAS,EAAE,MAAM,CAAA;IACjB,QAAQ,EAAE,MAAM,CAAA;IAChB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAA;IAC1B,IAAI,EAAE,MAAM,GAAG,IAAI,CAAA;IACnB,MAAM,EAAE,MAAM,CAAA;IACd,SAAS,EAAE,MAAM,CAAA;IACjB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;CACzB,CAAA;AAED,MAAM,MAAM,gBAAgB,GAAG;IAC7B,IAAI,EAAE,MAAM,CAAA;IACZ,QAAQ,EAAE,MAAM,CAAA;IAChB,KAAK,EAAE,MAAM,CAAA;IACb,KAAK,EAAE,cAAc,EAAE,CAAA;CACxB,CAAA;AAED,MAAM,MAAM,iBAAiB,GAAG;IAC9B,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,QAAQ,CAAC,EAAE,MAAM,CAAA;CAClB,CAAA;AAED,MAAM,MAAM,WAAW,GAAG,kBAAkB,GAAG;IAC7C,UAAU,CAAC,EAAE,CAAC,CAAC,EAAE,cAAc,KAAK,IAAI,CAAA;IACxC,kCAAkC;IAClC,WAAW,CAAC,EAAE,MAAM,CAAA;CACrB,CAAA;AAuHD,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,4BAA4B;oBAmH5C,WAAW,KAAG,OAAO,CAAC,oBAAoB,CAAC;qBAK1C,iBAAiB,KAAG,OAAO,CAAC;QAAE,OAAO,EAAE,IAAI,CAAC;QAAC,IAAI,EAAE,gBAAgB,CAAA;KAAE,CAAC;qBAetE,MAAM,KAAG,OAAO,CAAC;QAAE,OAAO,EAAE,IAAI,CAAA;KAAE,CAAC;EAgBlE"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAA;AACvF,YAAY,EACV,WAAW,EACX,MAAM,EACN,IAAI,EACJ,sBAAsB,EACtB,eAAe,EACf,kBAAkB,EAClB,gBAAgB,EAChB,sBAAsB,EACtB,uBAAuB,GACxB,MAAM,4BAA4B,CAAA;AAEnC,OAAO,EACL,YAAY,EACZ,aAAa,EACb,QAAQ,EACR,OAAO,EACP,cAAc,GACf,MAAM,qBAAqB,CAAA;AAC5B,YAAY,EACV,QAAQ,EACR,eAAe,EACf,cAAc,EACd,cAAc,EACd,eAAe,EACf,gBAAgB,EAChB,YAAY,EACZ,gBAAgB,EAChB,gBAAgB,EAChB,WAAW,EACX,YAAY,EACZ,eAAe,EACf,gBAAgB,EAChB,gBAAgB,EAChB,eAAe,EACf,SAAS,GACV,MAAM,qBAAqB,CAAA;AAE5B,YAAY,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAA;AACpE,OAAO,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAA;AAE/D,OAAO,EAAE,4BAA4B,EAAE,MAAM,+BAA+B,CAAA;AAC5E,YAAY,EAAE,sBAAsB,EAAE,oBAAoB,EAAE,MAAM,+BAA+B,CAAA;AAEjG,OAAO,EACL,kBAAkB,EAClB,aAAa,EACb,eAAe,EACf,kBAAkB,EAClB,YAAY,GACb,MAAM,4BAA4B,CAAA;AACnC,YAAY,EACV,iBAAiB,EACjB,gBAAgB,EAChB,yBAAyB,EACzB,cAAc,EACd,eAAe,EACf,eAAe,EACf,oBAAoB,EACpB,mBAAmB,EACnB,qBAAqB,GACtB,MAAM,4BAA4B,CAAA;AAEnC,OAAO,EAAE,qBAAqB,EAAE,MAAM,qBAAqB,CAAA;AAC3D,YAAY,EACV,4BAA4B,EAC5B,oBAAoB,EACpB,cAAc,EACd,gBAAgB,GACjB,MAAM,qBAAqB,CAAA"}

package/dist/index.js

@@ -1,196 +1,7 @@
-function trimTrailingSlash(url) {
-    const v = url || '';
-    return v.endsWith('/') ? v.slice(0, -1) : v;
-}
-function isRecord(value) {
-    return typeof value === 'object' && value !== null;
-}
-function isApiSuccess(value) {
-    return isRecord(value) && value.success === true && 'data' in value;
-}
-function isApiOk(value) {
-    return isRecord(value) && value.success === true;
-}
-function getErrorMessage(value) {
-    if (!isRecord(value))
-        return null;
-    const error = value.error;
-    if (typeof error === 'string' && error.trim())
-        return error;
-    const message = value.message;
-    if (typeof message === 'string' && message.trim())
-        return message;
-    return null;
-}
-async function fetchJson(fetchImpl, url, init) {
-    const res = await fetchImpl(url, init);
-    const text = await res.text().catch(() => '');
-    let json = null;
-    try {
-        json = text ? JSON.parse(text) : null;
-    }
-    catch {
-        // ignore
-    }
-    if (!res.ok) {
-        const msg = getErrorMessage(json) || res.statusText || 'Request failed';
-        throw new Error(`${res.status} ${msg}`);
-    }
-    return json;
-}
-async function fetchApiSuccess(fetchImpl, url, init) {
-    const json = await fetchJson(fetchImpl, url, init);
-    const error = getErrorMessage(json);
-    if (error)
-        throw new Error(error);
-    if (isApiSuccess(json)) {
-        return json;
-    }
-    throw new Error('响应格式无效');
-}
-async function fetchApiData(fetchImpl, url, init) {
-    const result = await fetchApiSuccess(fetchImpl, url, init);
-    return result.data;
-}
-async function fetchApiOk(fetchImpl, url, init) {
-    const json = await fetchJson(fetchImpl, url, init);
-    const error = getErrorMessage(json);
-    if (error)
-        throw new Error(error);
-    if (isApiOk(json)) {
-        return json;
-    }
-    throw new Error('响应格式无效');
-}
-function resolveAliOssConstructor(mod) {
-    const candidate = isRecord(mod) && 'default' in mod ? mod.default : mod;
-    if (typeof candidate !== 'function') {
-        throw new Error('ali-oss 模块加载失败');
-    }
-    return candidate;
-}
-function resolveUploadRef(prepared) {
-    return { uploadToken: prepared.uploadToken };
-}
-export function createOssUploadClient(options) {
-    const fetchImpl = fetch;
-    const baseUrl = trimTrailingSlash(options.baseUrl ||
-        (typeof window !== 'undefined' ? window.location.origin : ''));
-    const credentials = options.getAccessToken ? 'omit' : 'include';
-    const projectId = options.projectId;
-    if (!baseUrl) {
-        throw new Error('baseUrl is required in non-browser environments');
-    }
-    async function buildAuthHeaders() {
-        const token = options.getAccessToken ? await options.getAccessToken() : null;
-        return token ? { Authorization: `Bearer ${token}` } : {};
-    }
-    async function prepare(input) {
-        const headers = await buildAuthHeaders();
-        const url = `${baseUrl}/api/uploads/prepare`;
-        const data = await fetchApiData(fetchImpl, url, {
-            method: 'POST',
-            headers: {
-                ...headers,
-                'Content-Type': 'application/json',
-            },
-            credentials,
-            body: JSON.stringify({
-                projectId,
-                filename: input.file.name,
-                size: input.file.size,
-                contentType: input.file.type || 'application/octet-stream',
-            }),
-        });
-        return data;
-    }
-    async function complete(input) {
-        const headers = await buildAuthHeaders();
-        const url = `${baseUrl}/api/uploads/complete`;
-        const data = await fetchApiData(fetchImpl, url, {
-            method: 'POST',
-            headers: {
-                ...headers,
-                'Content-Type': 'application/json',
-            },
-            credentials,
-            body: JSON.stringify({ ...input }),
-        });
-        return data;
-    }
-    async function getSts(input) {
-        const headers = await buildAuthHeaders();
-        const url = `${baseUrl}/api/uploads/sts`;
-        const data = await fetchApiData(fetchImpl, url, {
-            method: 'POST',
-            headers: {
-                ...headers,
-                'Content-Type': 'application/json',
-            },
-            credentials,
-            body: JSON.stringify({ ...input }),
-        });
-        return data;
-    }
-    async function ossUploadViaAliOss(input, prepared) {
-        const uploadRef = resolveUploadRef(prepared);
-        const sts = await getSts(uploadRef);
-        // ali-oss 为 CJS/ESM 混合导出，这里做一次兼容处理
-        const OSSMod = (await import('ali-oss'));
-        const OSS = resolveAliOssConstructor(OSSMod);
-        const client = new OSS({
-            region: sts.region,
-            bucket: sts.bucket,
-            accessKeyId: sts.credentials.accessKeyId,
-            accessKeySecret: sts.credentials.accessKeySecret,
-            stsToken: sts.credentials.securityToken,
-            secure: true,
-        });
-        const parallel = Math.max(1, Math.min(8, input.concurrency ?? 3));
-        await client.multipartUpload(sts.objectKey, input.file, {
-            parallel,
-            progress: async (p) => {
-                if (!input.onProgress)
-                    return;
-                input.onProgress({ loaded: Math.round(p * input.file.size), total: input.file.size });
-            },
-        });
-        return await complete(uploadRef);
-    }
-    async function upload(input) {
-        const prepared = await prepare({ file: input.file });
-        return await ossUploadViaAliOss(input, prepared);
-    }
-    async function list(options) {
-        const headers = await buildAuthHeaders();
-        const urlObj = new URL(`${baseUrl}/api/uploads`);
-        if (projectId)
-            urlObj.searchParams.set('projectId', projectId);
-        if (options?.page)
-            urlObj.searchParams.set('page', String(options.page));
-        if (options?.pageSize)
-            urlObj.searchParams.set('pageSize', String(options.pageSize));
-        return await fetchApiSuccess(fetchImpl, urlObj.toString(), {
-            method: 'GET',
-            headers,
-            credentials,
-        });
-    }
-    async function remove(fileId) {
-        const headers = await buildAuthHeaders();
-        const urlObj = new URL(`${baseUrl}/api/uploads/${encodeURIComponent(fileId)}`);
-        if (projectId)
-            urlObj.searchParams.set('projectId', projectId);
-        return await fetchApiOk(fetchImpl, urlObj.toString(), {
-            method: 'DELETE',
-            headers,
-            credentials,
-        });
-    }
-    return {
-        upload,
-        list,
-        remove,
-    };
-}
+export { createStorageClient, StorageClient, StorageError } from './storage/storage.js';
+export { createSchema, SchemaBuilder, OWNER_ID, subject, buildAclConfig, } from './storage/schema.js';
+export { createTypedStorage } from './storage/typed-storage.js';
+export { createFieldPermissionChecker } from './storage/field-permission.js';
+export { createSchemaClient, defineSchemas, PermissionError, UserCancelledError, SchemaClient, } from './storage/schema-client.js';
+export { createOssUploadClient } from './uploader/index.js';
 //# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAiFA,SAAS,iBAAiB,CAAC,GAA8B;IACvD,MAAM,CAAC,GAAG,GAAG,IAAI,EAAE,CAAA;IACnB,OAAO,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;AAC7C,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,CAAA;AACpD,CAAC;AAED,SAAS,YAAY,CAAI,KAAc;IACrC,OAAO,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,OAAO,KAAK,IAAI,IAAI,MAAM,IAAI,KAAK,CAAA;AACrE,CAAC;AAED,SAAS,OAAO,CAAC,KAAc;IAC7B,OAAO,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,OAAO,KAAK,IAAI,CAAA;AAClD,CAAC;AAED,SAAS,eAAe,CAAC,KAAc;IACrC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAA;IACjC,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAA;IACzB,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE;QAAE,OAAO,KAAK,CAAA;IAC3D,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAA;IAC7B,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,CAAC,IAAI,EAAE;QAAE,OAAO,OAAO,CAAA;IACjE,OAAO,IAAI,CAAA;AACb,CAAC;AAED,KAAK,UAAU,SAAS,CACtB,SAAuB,EACvB,GAAW,EACX,IAAiB;IAEjB,MAAM,GAAG,GAAG,MAAM,SAAS,CAAC,GAAG,EAAE,IAAI,CAAC,CAAA;IACtC,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAA;IAC7C,IAAI,IAAI,GAAY,IAAI,CAAA;IACxB,IAAI,CAAC;QACH,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;IACvC,CAAC;IAAC,MAAM,CAAC;QACP,SAAS;IACX,CAAC;IACD,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;QACZ,MAAM,GAAG,GAAG,eAAe,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,UAAU,IAAI,gBAAgB,CAAA;QACvE,MAAM,IAAI,KAAK,CAAC,GAAG,GAAG,CAAC,MAAM,IAAI,GAAG,EAAE,CAAC,CAAA;IACzC,CAAC;IACD,OAAO,IAAS,CAAA;AAClB,CAAC;AAED,KAAK,UAAU,eAAe,CAC5B,SAAuB,EACvB,GAAW,EACX,IAAiB;IAEjB,MAAM,IAAI,GAAG,MAAM,SAAS,CAAU,SAAS,EAAE,GAAG,EAAE,IAAI,CAAC,CAAA;IAC3D,MAAM,KAAK,GAAG,eAAe,CAAC,IAAI,CAAC,CAAA;IACnC,IAAI,KAAK;QAAE,MAAM,IAAI,KAAK,CAAC,KAAK,CAAC,CAAA;IACjC,IAAI,YAAY,CAAI,IAAI,CAAC,EAAE,CAAC;QAC1B,OAAO,IAAI,CAAA;IACb,CAAC;IACD,MAAM,IAAI,KAAK,CAAC,QAAQ,CAAC,CAAA;AAC3B,CAAC;AAED,KAAK,UAAU,YAAY,CACzB,SAAuB,EACvB,GAAW,EACX,IAAiB;IAEjB,MAAM,MAAM,GAAG,MAAM,eAAe,CAAI,SAAS,EAAE,GAAG,EAAE,IAAI,CAAC,CAAA;IAC7D,OAAO,MAAM,CAAC,IAAI,CAAA;AACpB,CAAC;AAED,KAAK,UAAU,UAAU,CACvB,SAAuB,EACvB,GAAW,EACX,IAAiB;IAEjB,MAAM,IAAI,GAAG,MAAM,SAAS,CAAU,SAAS,EAAE,GAAG,EAAE,IAAI,CAAC,CAAA;IAC3D,MAAM,KAAK,GAAG,eAAe,CAAC,IAAI,CAAC,CAAA;IACnC,IAAI,KAAK;QAAE,MAAM,IAAI,KAAK,CAAC,KAAK,CAAC,CAAA;IACjC,IAAI,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QAClB,OAAO,IAAI,CAAA;IACb,CAAC;IACD,MAAM,IAAI,KAAK,CAAC,QAAQ,CAAC,CAAA;AAC3B,CAAC;AAwBD,SAAS,wBAAwB,CAAC,GAAY;IAC5C,MAAM,SAAS,GAAG,QAAQ,CAAC,GAAG,CAAC,IAAI,SAAS,IAAI,GAAG,CAAC,CAAC,CAAE,GAA6B,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAA;IAClG,IAAI,OAAO,SAAS,KAAK,UAAU,EAAE,CAAC;QACpC,MAAM,IAAI,KAAK,CAAC,gBAAgB,CAAC,CAAA;IACnC,CAAC;IACD,OAAO,SAAoC,CAAA;AAC7C,CAAC;AAED,SAAS,gBAAgB,CAAC,QAA6B;IACrD,OAAO,EAAE,WAAW,EAAE,QAAQ,CAAC,WAAW,EAAE,CAAA;AAC9C,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,OAAqC;IACzE,MAAM,SAAS,GAAG,KAAK,CAAA;IACvB,MAAM,OAAO,GACX,iBAAiB,CACf,OAAO,CAAC,OAAO;QACb,CAAC,OAAO,MAAM,KAAK,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAChE,CAAA;IACH,MAAM,WAAW,GAAG,OAAO,CAAC,cAAc,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAA;IAC/D,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,CAAA;IACnC,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAA;IACpE,CAAC;IAED,KAAK,UAAU,gBAAgB;QAC7B,MAAM,KAAK,GAAG,OAAO,CAAC,cAAc,CAAC,CAAC,CAAC,MAAM,OAAO,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,IAAI,CAAA;QAC5E,OAAO,KAAK,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,UAAU,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAA;IAC1D,CAAC;IAED,KAAK,UAAU,OAAO,CAAC,KAAyB;QAC9C,MAAM,OAAO,GAAG,MAAM,gBAAgB,EAAE,CAAA;QACxC,MAAM,GAAG,GAAG,GAAG,OAAO,sBAAsB,CAAA;QAC5C,MAAM,IAAI,GAAG,MAAM,YAAY,CAAsB,SAAS,EAAE,GAAG,EAAE;YACnE,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,GAAG,OAAO;gBACV,cAAc,EAAE,kBAAkB;aACnC;YACD,WAAW;YACX,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;gBACnB,SAAS;gBACT,QAAQ,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI;gBACzB,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI;gBACrB,WAAW,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,IAAI,0BAA0B;aAC3D,CAAC;SACH,CAAC,CAAA;QACF,OAAO,IAAI,CAAA;IACb,CAAC;IAED,KAAK,UAAU,QAAQ,CAAC,KAAqB;QAC3C,MAAM,OAAO,GAAG,MAAM,gBAAgB,EAAE,CAAA;QACxC,MAAM,GAAG,GAAG,GAAG,OAAO,uBAAuB,CAAA;QAC7C,MAAM,IAAI,GAAG,MAAM,YAAY,CAAuB,SAAS,EAAE,GAAG,EAAE;YACpE,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,GAAG,OAAO;gBACV,cAAc,EAAE,kBAAkB;aACnC;YACD,WAAW;YACX,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,KAAK,EAAE,CAAC;SACnC,CAAC,CAAA;QACF,OAAO,IAAI,CAAA;IACb,CAAC;IAED,KAAK,UAAU,MAAM,CAAC,KAAqB;QAOzC,MAAM,OAAO,GAAG,MAAM,gBAAgB,EAAE,CAAA;QACxC,MAAM,GAAG,GAAG,GAAG,OAAO,kBAAkB,CAAA;QACxC,MAAM,IAAI,GAAG,MAAM,YAAY,CAW5B,SAAS,EAAE,GAAG,EAAE;YACjB,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,GAAG,OAAO;gBACV,cAAc,EAAE,kBAAkB;aACnC;YACD,WAAW;YACX,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,KAAK,EAAE,CAAC;SACnC,CAAC,CAAA;QACF,OAAO,IAAI,CAAA;IACb,CAAC;IAED,KAAK,UAAU,kBAAkB,CAAC,KAAkB,EAAE,QAA6B;QACjF,MAAM,SAAS,GAAG,gBAAgB,CAAC,QAAQ,CAAC,CAAA;QAC5C,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,SAAS,CAAC,CAAA;QAEnC,mCAAmC;QACnC,MAAM,MAAM,GAAG,CAAC,MAAM,MAAM,CAAC,SAAS,CAAC,CAAY,CAAA;QACnD,MAAM,GAAG,GAAG,wBAAwB,CAAC,MAAM,CAAC,CAAA;QAE5C,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC;YACrB,MAAM,EAAE,GAAG,CAAC,MAAM;YAClB,MAAM,EAAE,GAAG,CAAC,MAAM;YAClB,WAAW,EAAE,GAAG,CAAC,WAAW,CAAC,WAAW;YACxC,eAAe,EAAE,GAAG,CAAC,WAAW,CAAC,eAAe;YAChD,QAAQ,EAAE,GAAG,CAAC,WAAW,CAAC,aAAa;YACvC,MAAM,EAAE,IAAI;SACb,CAAC,CAAA;QAEF,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,CAAC,WAAW,IAAI,CAAC,CAAC,CAAC,CAAA;QAEjE,MAAM,MAAM,CAAC,eAAe,CAAC,GAAG,CAAC,SAAS,EAAE,KAAK,CAAC,IAAI,EAAE;YACtD,QAAQ;YACR,QAAQ,EAAE,KAAK,EAAE,CAAS,EAAE,EAAE;gBAC5B,IAAI,CAAC,KAAK,CAAC,UAAU;oBAAE,OAAM;gBAC7B,KAAK,CAAC,UAAU,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAA;YACvF,CAAC;SACF,CAAC,CAAA;QAEF,OAAO,MAAM,QAAQ,CAAC,SAAS,CAAC,CAAA;IAClC,CAAC;IAED,KAAK,UAAU,MAAM,CAAC,KAAkB;QACtC,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,CAAA;QACpD,OAAO,MAAM,kBAAkB,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAA;IAClD,CAAC;IAED,KAAK,UAAU,IAAI,CAAC,OAA2B;QAC7C,MAAM,OAAO,GAAG,MAAM,gBAAgB,EAAE,CAAA;QACxC,MAAM,MAAM,GAAG,IAAI,GAAG,CACpB,GAAG,OAAO,cAAc,CACzB,CAAA;QACD,IAAI,SAAS;YAAE,MAAM,CAAC,YAAY,CAAC,GAAG,CAAC,WAAW,EAAE,SAAS,CAAC,CAAA;QAC9D,IAAI,OAAO,EAAE,IAAI;YAAE,MAAM,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAA;QACxE,IAAI,OAAO,EAAE,QAAQ;YAAE,MAAM,CAAC,YAAY,CAAC,GAAG,CAAC,UAAU,EAAE,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAA;QACpF,OAAO,MAAM,eAAe,CAAmB,SAAS,EAAE,MAAM,CAAC,QAAQ,EAAE,EAAE;YAC3E,MAAM,EAAE,KAAK;YACb,OAAO;YACP,WAAW;SACZ,CAAC,CAAA;IACJ,CAAC;IAED,KAAK,UAAU,MAAM,CAAC,MAAc;QAClC,MAAM,OAAO,GAAG,MAAM,gBAAgB,EAAE,CAAA;QACxC,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,GAAG,OAAO,gBAAgB,kBAAkB,CAAC,MAAM,CAAC,EAAE,CAAC,CAAA;QAC9E,IAAI,SAAS;YAAE,MAAM,CAAC,YAAY,CAAC,GAAG,CAAC,WAAW,EAAE,SAAS,CAAC,CAAA;QAC9D,OAAO,MAAM,UAAU,CAAC,SAAS,EAAE,MAAM,CAAC,QAAQ,EAAE,EAAE;YACpD,MAAM,EAAE,QAAQ;YAChB,OAAO;YACP,WAAW;SACZ,CAAC,CAAA;IACJ,CAAC;IAED,OAAO;QACL,MAAM;QACN,IAAI;QACJ,MAAM;KACP,CAAA;AACH,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAA;AAavF,OAAO,EACL,YAAY,EACZ,aAAa,EACb,QAAQ,EACR,OAAO,EACP,cAAc,GACf,MAAM,qBAAqB,CAAA;AAqB5B,OAAO,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAA;AAE/D,OAAO,EAAE,4BAA4B,EAAE,MAAM,+BAA+B,CAAA;AAG5E,OAAO,EACL,kBAAkB,EAClB,aAAa,EACb,eAAe,EACf,kBAAkB,EAClB,YAAY,GACb,MAAM,4BAA4B,CAAA;AAanC,OAAO,EAAE,qBAAqB,EAAE,MAAM,qBAAqB,CAAA"}

package/dist/storage/field-permission.d.ts

@@ -0,0 +1,33 @@
+import type { SchemaDefinition, FieldsDefinition } from './schema.js';
+export interface FieldPermissionContext {
+    userId?: string;
+    role?: string;
+    isOwner?: boolean;
+}
+export interface FieldPermissionCheck {
+    allowed: boolean;
+    forbiddenFields: string[];
+    reason?: string;
+}
+export declare class FieldPermissionChecker<TFields extends FieldsDefinition> {
+    private schema;
+    constructor(schema: SchemaDefinition<TFields>);
+    /**
+     * 检查创建操作是否有权限修改指定字段
+     */
+    checkCreate(data: Record<string, unknown>, context: FieldPermissionContext): FieldPermissionCheck;
+    /**
+     * 检查更新操作是否有权限修改指定字段
+     */
+    checkUpdate(patch: Record<string, unknown>, existingData: Record<string, unknown>, context: FieldPermissionContext): FieldPermissionCheck;
+    /**
+     * 过滤返回数据中的隐藏字段
+     */
+    filterHiddenFields(data: Record<string, unknown>): Record<string, unknown>;
+    /**
+     * 获取可编辑的字段列表
+     */
+    getEditableFields(context: FieldPermissionContext): string[];
+}
+export declare function createFieldPermissionChecker<TFields extends FieldsDefinition>(schema: SchemaDefinition<TFields>): FieldPermissionChecker<TFields>;
+//# sourceMappingURL=field-permission.d.ts.map

package/dist/storage/field-permission.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"field-permission.d.ts","sourceRoot":"","sources":["../../src/storage/field-permission.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,gBAAgB,EAAmB,MAAM,aAAa,CAAA;AAEtF,MAAM,WAAW,sBAAsB;IACrC,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,OAAO,CAAC,EAAE,OAAO,CAAA;CAClB;AAED,MAAM,WAAW,oBAAoB;IACnC,OAAO,EAAE,OAAO,CAAA;IAChB,eAAe,EAAE,MAAM,EAAE,CAAA;IACzB,MAAM,CAAC,EAAE,MAAM,CAAA;CAChB;AAED,qBAAa,sBAAsB,CAAC,OAAO,SAAS,gBAAgB;IACtD,OAAO,CAAC,MAAM;gBAAN,MAAM,EAAE,gBAAgB,CAAC,OAAO,CAAC;IAErD;;OAEG;IACH,WAAW,CACT,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC7B,OAAO,EAAE,sBAAsB,GAC9B,oBAAoB;IAyBvB;;OAEG;IACH,WAAW,CACT,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC9B,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EACrC,OAAO,EAAE,sBAAsB,GAC9B,oBAAoB;IAkDvB;;OAEG;IACH,kBAAkB,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;IAuB1E;;OAEG;IACH,iBAAiB,CAAC,OAAO,EAAE,sBAAsB,GAAG,MAAM,EAAE;CA+B7D;AAED,wBAAgB,4BAA4B,CAAC,OAAO,SAAS,gBAAgB,EAC3E,MAAM,EAAE,gBAAgB,CAAC,OAAO,CAAC,GAChC,sBAAsB,CAAC,OAAO,CAAC,CAEjC"}

package/dist/storage/field-permission.js

@@ -0,0 +1,138 @@
+export class FieldPermissionChecker {
+    schema;
+    constructor(schema) {
+        this.schema = schema;
+    }
+    /**
+     * 检查创建操作是否有权限修改指定字段
+     */
+    checkCreate(data, context) {
+        const forbiddenFields = [];
+        for (const [fieldName, value] of Object.entries(data)) {
+            const fieldDef = this.schema.fields[fieldName];
+            if (!fieldDef)
+                continue;
+            const permission = fieldDef.permission;
+            if (!permission)
+                continue;
+            // 检查 internal 字段
+            if (permission.internal && context.role !== 'admin') {
+                forbiddenFields.push(fieldName);
+            }
+        }
+        return {
+            allowed: forbiddenFields.length === 0,
+            forbiddenFields,
+            reason: forbiddenFields.length > 0
+                ? `Cannot create internal fields: ${forbiddenFields.join(', ')}`
+                : undefined,
+        };
+    }
+    /**
+     * 检查更新操作是否有权限修改指定字段
+     */
+    checkUpdate(patch, existingData, context) {
+        const forbiddenFields = [];
+        const reasons = [];
+        for (const [fieldName, value] of Object.entries(patch)) {
+            const fieldDef = this.schema.fields[fieldName];
+            if (!fieldDef)
+                continue;
+            const permission = fieldDef.permission;
+            if (!permission)
+                continue;
+            // 检查 immutable 字段
+            if (permission.immutable) {
+                // 检查是否真的在修改（值发生变化）
+                if (JSON.stringify(existingData[fieldName]) !== JSON.stringify(value)) {
+                    forbiddenFields.push(fieldName);
+                    reasons.push(`Field "${fieldName}" is immutable`);
+                }
+                continue;
+            }
+            // 检查 internal 字段
+            if (permission.internal && context.role !== 'admin') {
+                forbiddenFields.push(fieldName);
+                reasons.push(`Field "${fieldName}" is internal`);
+                continue;
+            }
+            // 检查 editableBy 限制
+            if (permission.editableBy && permission.editableBy.length > 0) {
+                const canEdit = permission.editableBy.some(role => {
+                    if (role === 'owner')
+                        return context.isOwner;
+                    if (role === 'admin')
+                        return context.role === 'admin' || context.role === 'owner';
+                    return context.role === role;
+                });
+                if (!canEdit) {
+                    forbiddenFields.push(fieldName);
+                    reasons.push(`Field "${fieldName}" can only be edited by: ${permission.editableBy.join(', ')}`);
+                }
+            }
+        }
+        return {
+            allowed: forbiddenFields.length === 0,
+            forbiddenFields,
+            reason: reasons.length > 0 ? reasons.join('; ') : undefined,
+        };
+    }
+    /**
+     * 过滤返回数据中的隐藏字段
+     */
+    filterHiddenFields(data) {
+        const result = {};
+        for (const [fieldName, value] of Object.entries(data)) {
+            const fieldDef = this.schema.fields[fieldName];
+            if (!fieldDef) {
+                // 保留未知字段（可能是系统字段如 __sys）
+                result[fieldName] = value;
+                continue;
+            }
+            const permission = fieldDef.permission;
+            if (permission?.hidden || permission?.internal) {
+                // 跳过隐藏/内部字段
+                continue;
+            }
+            result[fieldName] = value;
+        }
+        return result;
+    }
+    /**
+     * 获取可编辑的字段列表
+     */
+    getEditableFields(context) {
+        const editable = [];
+        for (const [fieldName, fieldDef] of Object.entries(this.schema.fields)) {
+            const permission = fieldDef.permission;
+            if (!permission) {
+                editable.push(fieldName);
+                continue;
+            }
+            // internal 字段不可编辑
+            if (permission.internal)
+                continue;
+            // immutable 字段不可编辑
+            if (permission.immutable)
+                continue;
+            // 检查 editableBy
+            if (permission.editableBy && permission.editableBy.length > 0) {
+                const canEdit = permission.editableBy.some(role => {
+                    if (role === 'owner')
+                        return context.isOwner;
+                    if (role === 'admin')
+                        return context.role === 'admin' || context.role === 'owner';
+                    return context.role === role;
+                });
+                if (!canEdit)
+                    continue;
+            }
+            editable.push(fieldName);
+        }
+        return editable;
+    }
+}
+export function createFieldPermissionChecker(schema) {
+    return new FieldPermissionChecker(schema);
+}
+//# sourceMappingURL=field-permission.js.map