w-web-perm 1.1.12 → 1.1.13

package/docs/src_plugins_reuseDeletedIds.mjs.html

@@ -29,7 +29,7 @@
 <nav >
     
     
-    <h2><a href="index.html">Home</a></h2><h3>Classes</h3><ul><li><a href="WWebPerm.html">WWebPerm</a></li></ul><h3>Global</h3><ul><li><a href="global.html#createAuthorizeExec">createAuthorizeExec</a></li><li><a href="global.html#createLegendMeasurer">createLegendMeasurer</a></li><li><a href="global.html#createLockSave">createLockSave</a></li><li><a href="global.html#cvKpToArr">cvKpToArr</a></li><li><a href="global.html#cvKpToObj">cvKpToObj</a></li><li><a href="global.html#decideLegendType">decideLegendType</a></li><li><a href="global.html#describeUpstream">describeUpstream</a></li><li><a href="global.html#eachOwn">eachOwn</a></li><li><a href="global.html#fetchJson">fetchJson</a></li><li><a href="global.html#fmtLossyMsg">fmtLossyMsg</a></li><li><a href="global.html#genLegend">genLegend</a></li><li><a href="global.html#getKeyOrderLost">getKeyOrderLost</a></li><li><a href="global.html#getKpLossy">getKpLossy</a></li><li><a href="global.html#getKpWriteLost">getKpWriteLost</a></li><li><a href="global.html#getOwn">getOwn</a></li><li><a href="global.html#getRuleEnable">getRuleEnable</a></li><li><a href="global.html#isAuthMode">isAuthMode</a></li><li><a href="global.html#joinNames">joinNames</a></li><li><a href="global.html#keepKeyOrder">keepKeyOrder</a></li><li><a href="global.html#keyOrderOf">keyOrderOf</a></li><li><a href="global.html#maskQuery">maskQuery</a></li><li><a href="global.html#maskTok">maskTok</a></li><li><a href="global.html#maskUrl">maskUrl</a></li><li><a href="global.html#mergePickKeysOnly">mergePickKeysOnly</a></li><li><a href="global.html#resolveShellWorker">resolveShellWorker</a></li><li><a href="global.html#reuseDeletedIds">reuseDeletedIds</a></li><li><a href="global.html#submitGuard">submitGuard</a></li><li><a href="global.html#validateRowsBeforeWrite">validateRowsBeforeWrite</a></li><li><a href="global.html#wrapInjected">wrapInjected</a></li><li><a href="global.html#wrapOperOrm">wrapOperOrm</a></li></ul>
+    <h2><a href="index.html">Home</a></h2><h3>Classes</h3><ul><li><a href="WWebPerm.html">WWebPerm</a></li></ul><h3>Global</h3><ul><li><a href="global.html#applyPurgePlan">applyPurgePlan</a></li><li><a href="global.html#auditFrom">auditFrom</a></li><li><a href="global.html#auditRefs">auditRefs</a></li><li><a href="global.html#buildReport">buildReport</a></li><li><a href="global.html#buildRowsSend">buildRowsSend</a></li><li><a href="global.html#buildSyncRowsNew">buildSyncRowsNew</a></li><li><a href="global.html#checkBaseline">checkBaseline</a></li><li><a href="global.html#checkCascadePlan">checkCascadePlan</a></li><li><a href="global.html#checkDbNotInUse">checkDbNotInUse</a></li><li><a href="global.html#checkExternalWrite">checkExternalWrite</a></li><li><a href="global.html#checkMapKeyBatch">checkMapKeyBatch</a></li><li><a href="global.html#checkUsersWrite">checkUsersWrite</a></li><li><a href="global.html#cleanOutOf">cleanOutOf</a></li><li><a href="global.html#compareBaseline">compareBaseline</a></li><li><a href="global.html#countAndRefs">countAndRefs</a></li><li><a href="global.html#countExternalRows">countExternalRows</a></li><li><a href="global.html#countIdRenumber">countIdRenumber</a></li><li><a href="global.html#createAuthorizeExec">createAuthorizeExec</a></li><li><a href="global.html#createLegendMeasurer">createLegendMeasurer</a></li><li><a href="global.html#createLockSave">createLockSave</a></li><li><a href="global.html#cvKpToArr">cvKpToArr</a></li><li><a href="global.html#cvKpToObj">cvKpToObj</a></li><li><a href="global.html#decideLegendType">decideLegendType</a></li><li><a href="global.html#describeUpstream">describeUpstream</a></li><li><a href="global.html#diffRefTargets">diffRefTargets</a></li><li><a href="global.html#dropServerOnlyDiff">dropServerOnlyDiff</a></li><li><a href="global.html#eachOwn">eachOwn</a></li><li><a href="global.html#fetchJson">fetchJson</a></li><li><a href="global.html#fillIdlessIds">fillIdlessIds</a></li><li><a href="global.html#findDupIndex">findDupIndex</a></li><li><a href="global.html#findKeyOtherFrom">findKeyOtherFrom</a></li><li><a href="global.html#findRefRows">findRefRows</a></li><li><a href="global.html#findTouchedDup">findTouchedDup</a></li><li><a href="global.html#fmtLossyMsg">fmtLossyMsg</a></li><li><a href="global.html#fmtVars">fmtVars</a></li><li><a href="global.html#fmtWarn">fmtWarn</a></li><li><a href="global.html#formatFixReport">formatFixReport</a></li><li><a href="global.html#formatFromAudit">formatFromAudit</a></li><li><a href="global.html#formatPurgeReport">formatPurgeReport</a></li><li><a href="global.html#genLegend">genLegend</a></li><li><a href="global.html#getAddConfirmText">getAddConfirmText</a></li><li><a href="global.html#getAddImpact">getAddImpact</a></li><li><a href="global.html#getBannerLines">getBannerLines</a></li><li><a href="global.html#getBaselineDigest">getBaselineDigest</a></li><li><a href="global.html#getCascadePreview">getCascadePreview</a></li><li><a href="global.html#getChangedIdx">getChangedIdx</a></li><li><a href="global.html#getDelConfirmText">getDelConfirmText</a></li><li><a href="global.html#getDelImpact">getDelImpact</a></li><li><a href="global.html#getDelRefCount">getDelRefCount</a></li><li><a href="global.html#getDigestFields">getDigestFields</a></li><li><a href="global.html#getDupRowsInconsistent">getDupRowsInconsistent</a></li><li><a href="global.html#getEffMode">getEffMode</a></li><li><a href="global.html#getExternalEdits">getExternalEdits</a></li><li><a href="global.html#getItemWarnText">getItemWarnText</a></li><li><a href="global.html#getKpLossy">getKpLossy</a></li><li><a href="global.html#getLockFields">getLockFields</a></li><li><a href="global.html#getNameErrs">getNameErrs</a></li><li><a href="global.html#getOwn">getOwn</a></li><li><a href="global.html#getPropKey">getPropKey</a></li><li><a href="global.html#getRawModeMap">getRawModeMap</a></li><li><a href="global.html#getRefRowsExtra">getRefRowsExtra</a></li><li><a href="global.html#getRefState">getRefState</a></li><li><a href="global.html#getRefWarnText">getRefWarnText</a></li><li><a href="global.html#getRefWarns">getRefWarns</a></li><li><a href="global.html#getRowIdxs">getRowIdxs</a></li><li><a href="global.html#getRowState">getRowState</a></li><li><a href="global.html#getRuleEnable">getRuleEnable</a></li><li><a href="global.html#getRuleWarnText">getRuleWarnText</a></li><li><a href="global.html#getRuleWarns">getRuleWarns</a></li><li><a href="global.html#getSavePreview">getSavePreview</a></li><li><a href="global.html#getSyncWarnLines">getSyncWarnLines</a></li><li><a href="global.html#hasDupKey">hasDupKey</a></li><li><a href="global.html#hasExternalDiff">hasExternalDiff</a></li><li><a href="global.html#isAuthMode">isAuthMode</a></li><li><a href="global.html#isBaselineStale">isBaselineStale</a></li><li><a href="global.html#isBaselineValid">isBaselineValid</a></li><li><a href="global.html#isDraftStale">isDraftStale</a></li><li><a href="global.html#isExternalRow">isExternalRow</a></li><li><a href="global.html#isJsonLossy">isJsonLossy</a></li><li><a href="global.html#isMain">isMain</a></li><li><a href="global.html#joinList">joinList</a></li><li><a href="global.html#joinNames">joinNames</a></li><li><a href="global.html#keepAssignByEntity">keepAssignByEntity</a></li><li><a href="global.html#keepAssignOnMissing">keepAssignOnMissing</a></li><li><a href="global.html#makeBaseline">makeBaseline</a></li><li><a href="global.html#makeRowStates">makeRowStates</a></li><li><a href="global.html#mapKeyOf">mapKeyOf</a></li><li><a href="global.html#mapNameKp">mapNameKp</a></li><li><a href="global.html#markDataReload">markDataReload</a></li><li><a href="global.html#markHasKey">markHasKey</a></li><li><a href="global.html#maskQuery">maskQuery</a></li><li><a href="global.html#maskTok">maskTok</a></li><li><a href="global.html#maskUrl">maskUrl</a></li><li><a href="global.html#mergePickKeysOnly">mergePickKeysOnly</a></li><li><a href="global.html#pairRowsToSnapshot">pairRowsToSnapshot</a></li><li><a href="global.html#pickUniqueUser">pickUniqueUser</a></li><li><a href="global.html#planDraftSync">planDraftSync</a></li><li><a href="global.html#planFixFromType">planFixFromType</a></li><li><a href="global.html#planPurgeChain">planPurgeChain</a></li><li><a href="global.html#planPurgeFrom">planPurgeFrom</a></li><li><a href="global.html#planRefChanges">planRefChanges</a></li><li><a href="global.html#putRefEntry">putRefEntry</a></li><li><a href="global.html#putRowsToKp">putRowsToKp</a></li><li><a href="global.html#refsChanged">refsChanged</a></li><li><a href="global.html#resolveShellWorker">resolveShellWorker</a></li><li><a href="global.html#restoreExternalOrder">restoreExternalOrder</a></li><li><a href="global.html#restoreServerFields">restoreServerFields</a></li><li><a href="global.html#reuseDeletedIds">reuseDeletedIds</a></li><li><a href="global.html#rewriteRefs">rewriteRefs</a></li><li><a href="global.html#rowDigest">rowDigest</a></li><li><a href="global.html#runAuditFrom">runAuditFrom</a></li><li><a href="global.html#runClean">runClean</a></li><li><a href="global.html#runFixFromType">runFixFromType</a></li><li><a href="global.html#runPurgeFrom">runPurgeFrom</a></li><li><a href="global.html#splitCheckedRows">splitCheckedRows</a></li><li><a href="global.html#submitGuard">submitGuard</a></li><li><a href="global.html#tabWriteKey">tabWriteKey</a></li><li><a href="global.html#validateRowsBeforeWrite">validateRowsBeforeWrite</a></li><li><a href="global.html#withTabLocks">withTabLocks</a></li><li><a href="global.html#wrapInjected">wrapInjected</a></li><li><a href="global.html#wrapOperOrm">wrapOperOrm</a></li><li><a href="global.html#writeWithCascade">writeWithCascade</a></li></ul>
     
 </nav>
 
@@ -123,7 +123,7 @@ export default reuseDeletedIds
 <br class="clear">
 
 <footer>
-    Documentation generated by <a href="https://github.com/jsdoc3/jsdoc">JSDoc 4.0.5</a> on Wed Oct 21 2026 01:27:46 GMT+0800 (台北標準時間) using the <a href="https://github.com/clenemt/docdash">docdash</a> theme.
+    Documentation generated by <a href="https://github.com/jsdoc3/jsdoc">JSDoc 4.0.5</a> on Fri Oct 23 2026 10:56:39 GMT+0800 (台北標準時間) using the <a href="https://github.com/clenemt/docdash">docdash</a> theme.
 </footer>
 
 <script>prettyPrint();</script>

package/docs/src_plugins_submitGuard.mjs.html

@@ -29,7 +29,7 @@
 <nav >
     
     
-    <h2><a href="index.html">Home</a></h2><h3>Classes</h3><ul><li><a href="WWebPerm.html">WWebPerm</a></li></ul><h3>Global</h3><ul><li><a href="global.html#createAuthorizeExec">createAuthorizeExec</a></li><li><a href="global.html#createLegendMeasurer">createLegendMeasurer</a></li><li><a href="global.html#createLockSave">createLockSave</a></li><li><a href="global.html#cvKpToArr">cvKpToArr</a></li><li><a href="global.html#cvKpToObj">cvKpToObj</a></li><li><a href="global.html#decideLegendType">decideLegendType</a></li><li><a href="global.html#describeUpstream">describeUpstream</a></li><li><a href="global.html#eachOwn">eachOwn</a></li><li><a href="global.html#fetchJson">fetchJson</a></li><li><a href="global.html#fmtLossyMsg">fmtLossyMsg</a></li><li><a href="global.html#genLegend">genLegend</a></li><li><a href="global.html#getKeyOrderLost">getKeyOrderLost</a></li><li><a href="global.html#getKpLossy">getKpLossy</a></li><li><a href="global.html#getKpWriteLost">getKpWriteLost</a></li><li><a href="global.html#getOwn">getOwn</a></li><li><a href="global.html#getRuleEnable">getRuleEnable</a></li><li><a href="global.html#isAuthMode">isAuthMode</a></li><li><a href="global.html#joinNames">joinNames</a></li><li><a href="global.html#keepKeyOrder">keepKeyOrder</a></li><li><a href="global.html#keyOrderOf">keyOrderOf</a></li><li><a href="global.html#maskQuery">maskQuery</a></li><li><a href="global.html#maskTok">maskTok</a></li><li><a href="global.html#maskUrl">maskUrl</a></li><li><a href="global.html#mergePickKeysOnly">mergePickKeysOnly</a></li><li><a href="global.html#resolveShellWorker">resolveShellWorker</a></li><li><a href="global.html#reuseDeletedIds">reuseDeletedIds</a></li><li><a href="global.html#submitGuard">submitGuard</a></li><li><a href="global.html#validateRowsBeforeWrite">validateRowsBeforeWrite</a></li><li><a href="global.html#wrapInjected">wrapInjected</a></li><li><a href="global.html#wrapOperOrm">wrapOperOrm</a></li></ul>
+    <h2><a href="index.html">Home</a></h2><h3>Classes</h3><ul><li><a href="WWebPerm.html">WWebPerm</a></li></ul><h3>Global</h3><ul><li><a href="global.html#applyPurgePlan">applyPurgePlan</a></li><li><a href="global.html#auditFrom">auditFrom</a></li><li><a href="global.html#auditRefs">auditRefs</a></li><li><a href="global.html#buildReport">buildReport</a></li><li><a href="global.html#buildRowsSend">buildRowsSend</a></li><li><a href="global.html#buildSyncRowsNew">buildSyncRowsNew</a></li><li><a href="global.html#checkBaseline">checkBaseline</a></li><li><a href="global.html#checkCascadePlan">checkCascadePlan</a></li><li><a href="global.html#checkDbNotInUse">checkDbNotInUse</a></li><li><a href="global.html#checkExternalWrite">checkExternalWrite</a></li><li><a href="global.html#checkMapKeyBatch">checkMapKeyBatch</a></li><li><a href="global.html#checkUsersWrite">checkUsersWrite</a></li><li><a href="global.html#cleanOutOf">cleanOutOf</a></li><li><a href="global.html#compareBaseline">compareBaseline</a></li><li><a href="global.html#countAndRefs">countAndRefs</a></li><li><a href="global.html#countExternalRows">countExternalRows</a></li><li><a href="global.html#countIdRenumber">countIdRenumber</a></li><li><a href="global.html#createAuthorizeExec">createAuthorizeExec</a></li><li><a href="global.html#createLegendMeasurer">createLegendMeasurer</a></li><li><a href="global.html#createLockSave">createLockSave</a></li><li><a href="global.html#cvKpToArr">cvKpToArr</a></li><li><a href="global.html#cvKpToObj">cvKpToObj</a></li><li><a href="global.html#decideLegendType">decideLegendType</a></li><li><a href="global.html#describeUpstream">describeUpstream</a></li><li><a href="global.html#diffRefTargets">diffRefTargets</a></li><li><a href="global.html#dropServerOnlyDiff">dropServerOnlyDiff</a></li><li><a href="global.html#eachOwn">eachOwn</a></li><li><a href="global.html#fetchJson">fetchJson</a></li><li><a href="global.html#fillIdlessIds">fillIdlessIds</a></li><li><a href="global.html#findDupIndex">findDupIndex</a></li><li><a href="global.html#findKeyOtherFrom">findKeyOtherFrom</a></li><li><a href="global.html#findRefRows">findRefRows</a></li><li><a href="global.html#findTouchedDup">findTouchedDup</a></li><li><a href="global.html#fmtLossyMsg">fmtLossyMsg</a></li><li><a href="global.html#fmtVars">fmtVars</a></li><li><a href="global.html#fmtWarn">fmtWarn</a></li><li><a href="global.html#formatFixReport">formatFixReport</a></li><li><a href="global.html#formatFromAudit">formatFromAudit</a></li><li><a href="global.html#formatPurgeReport">formatPurgeReport</a></li><li><a href="global.html#genLegend">genLegend</a></li><li><a href="global.html#getAddConfirmText">getAddConfirmText</a></li><li><a href="global.html#getAddImpact">getAddImpact</a></li><li><a href="global.html#getBannerLines">getBannerLines</a></li><li><a href="global.html#getBaselineDigest">getBaselineDigest</a></li><li><a href="global.html#getCascadePreview">getCascadePreview</a></li><li><a href="global.html#getChangedIdx">getChangedIdx</a></li><li><a href="global.html#getDelConfirmText">getDelConfirmText</a></li><li><a href="global.html#getDelImpact">getDelImpact</a></li><li><a href="global.html#getDelRefCount">getDelRefCount</a></li><li><a href="global.html#getDigestFields">getDigestFields</a></li><li><a href="global.html#getDupRowsInconsistent">getDupRowsInconsistent</a></li><li><a href="global.html#getEffMode">getEffMode</a></li><li><a href="global.html#getExternalEdits">getExternalEdits</a></li><li><a href="global.html#getItemWarnText">getItemWarnText</a></li><li><a href="global.html#getKpLossy">getKpLossy</a></li><li><a href="global.html#getLockFields">getLockFields</a></li><li><a href="global.html#getNameErrs">getNameErrs</a></li><li><a href="global.html#getOwn">getOwn</a></li><li><a href="global.html#getPropKey">getPropKey</a></li><li><a href="global.html#getRawModeMap">getRawModeMap</a></li><li><a href="global.html#getRefRowsExtra">getRefRowsExtra</a></li><li><a href="global.html#getRefState">getRefState</a></li><li><a href="global.html#getRefWarnText">getRefWarnText</a></li><li><a href="global.html#getRefWarns">getRefWarns</a></li><li><a href="global.html#getRowIdxs">getRowIdxs</a></li><li><a href="global.html#getRowState">getRowState</a></li><li><a href="global.html#getRuleEnable">getRuleEnable</a></li><li><a href="global.html#getRuleWarnText">getRuleWarnText</a></li><li><a href="global.html#getRuleWarns">getRuleWarns</a></li><li><a href="global.html#getSavePreview">getSavePreview</a></li><li><a href="global.html#getSyncWarnLines">getSyncWarnLines</a></li><li><a href="global.html#hasDupKey">hasDupKey</a></li><li><a href="global.html#hasExternalDiff">hasExternalDiff</a></li><li><a href="global.html#isAuthMode">isAuthMode</a></li><li><a href="global.html#isBaselineStale">isBaselineStale</a></li><li><a href="global.html#isBaselineValid">isBaselineValid</a></li><li><a href="global.html#isDraftStale">isDraftStale</a></li><li><a href="global.html#isExternalRow">isExternalRow</a></li><li><a href="global.html#isJsonLossy">isJsonLossy</a></li><li><a href="global.html#isMain">isMain</a></li><li><a href="global.html#joinList">joinList</a></li><li><a href="global.html#joinNames">joinNames</a></li><li><a href="global.html#keepAssignByEntity">keepAssignByEntity</a></li><li><a href="global.html#keepAssignOnMissing">keepAssignOnMissing</a></li><li><a href="global.html#makeBaseline">makeBaseline</a></li><li><a href="global.html#makeRowStates">makeRowStates</a></li><li><a href="global.html#mapKeyOf">mapKeyOf</a></li><li><a href="global.html#mapNameKp">mapNameKp</a></li><li><a href="global.html#markDataReload">markDataReload</a></li><li><a href="global.html#markHasKey">markHasKey</a></li><li><a href="global.html#maskQuery">maskQuery</a></li><li><a href="global.html#maskTok">maskTok</a></li><li><a href="global.html#maskUrl">maskUrl</a></li><li><a href="global.html#mergePickKeysOnly">mergePickKeysOnly</a></li><li><a href="global.html#pairRowsToSnapshot">pairRowsToSnapshot</a></li><li><a href="global.html#pickUniqueUser">pickUniqueUser</a></li><li><a href="global.html#planDraftSync">planDraftSync</a></li><li><a href="global.html#planFixFromType">planFixFromType</a></li><li><a href="global.html#planPurgeChain">planPurgeChain</a></li><li><a href="global.html#planPurgeFrom">planPurgeFrom</a></li><li><a href="global.html#planRefChanges">planRefChanges</a></li><li><a href="global.html#putRefEntry">putRefEntry</a></li><li><a href="global.html#putRowsToKp">putRowsToKp</a></li><li><a href="global.html#refsChanged">refsChanged</a></li><li><a href="global.html#resolveShellWorker">resolveShellWorker</a></li><li><a href="global.html#restoreExternalOrder">restoreExternalOrder</a></li><li><a href="global.html#restoreServerFields">restoreServerFields</a></li><li><a href="global.html#reuseDeletedIds">reuseDeletedIds</a></li><li><a href="global.html#rewriteRefs">rewriteRefs</a></li><li><a href="global.html#rowDigest">rowDigest</a></li><li><a href="global.html#runAuditFrom">runAuditFrom</a></li><li><a href="global.html#runClean">runClean</a></li><li><a href="global.html#runFixFromType">runFixFromType</a></li><li><a href="global.html#runPurgeFrom">runPurgeFrom</a></li><li><a href="global.html#splitCheckedRows">splitCheckedRows</a></li><li><a href="global.html#submitGuard">submitGuard</a></li><li><a href="global.html#tabWriteKey">tabWriteKey</a></li><li><a href="global.html#validateRowsBeforeWrite">validateRowsBeforeWrite</a></li><li><a href="global.html#withTabLocks">withTabLocks</a></li><li><a href="global.html#wrapInjected">wrapInjected</a></li><li><a href="global.html#wrapOperOrm">wrapOperOrm</a></li><li><a href="global.html#writeWithCascade">writeWithCascade</a></li></ul>
     
 </nav>
 
@@ -150,7 +150,7 @@ export default submitGuard
 <br class="clear">
 
 <footer>
-    Documentation generated by <a href="https://github.com/jsdoc3/jsdoc">JSDoc 4.0.5</a> on Wed Oct 21 2026 01:27:46 GMT+0800 (台北標準時間) using the <a href="https://github.com/clenemt/docdash">docdash</a> theme.
+    Documentation generated by <a href="https://github.com/jsdoc3/jsdoc">JSDoc 4.0.5</a> on Fri Oct 23 2026 10:56:39 GMT+0800 (台北標準時間) using the <a href="https://github.com/clenemt/docdash">docdash</a> theme.
 </footer>
 
 <script>prettyPrint();</script>

package/g_authRefsClean.mjs

@@ -0,0 +1,79 @@
+import fs from 'fs'
+import path from 'path'
+import WOrm from 'w-orm-lmdb/src/WOrmLmdb.mjs'
+import WServOrm from 'w-serv-orm/src/WServOrm.mjs'
+import ds from './src/schema/index.mjs'
+import getSettings from './g_getSettings.mjs'
+import { runClean } from './server/tools/authRefsClean.mjs'
+
+
+//懸空引用之一次性清理(升版工具; 適用表 n 上線前之舊資料可能已有查無實體之引用: users.cgrups 引用不存在之群組、grups.cpemis 引用不存在之權限、pemis.crules 引用不存在之管控對象 id)
+//效果等同舊版「找不到即忽略」: 把懸空項目自授權字串移除(不論 isActive); 經 ORM 寫入, 只改該欄位.
+//
+//用法(自專案根):
+//  node g_authRefsClean.mjs                        只列不改(預設): 連專案資料庫(./db)稽核並輸出報告
+//  node g_authRefsClean.mjs --apply                寫入: 先備份資料庫(backup-時間.json, 於工作目錄)與將改寫之三張引用端表全部列(./authRefsClean-backup-時間.json), 任一備份失敗即中止、不寫入; 寫完重新稽核, 應為 0 懸空
+//  node g_authRefsClean.mjs --apply --backup <檔>  指定引用端表備份檔路徑(不覆寫既有檔)
+//  node g_authRefsClean.mjs --db <資料夾>          覆寫資料庫位置(同 g_getSettings 之 dbUrl; 資料庫名稱仍為 dbName), 供測試用臨時資料庫; 資料夾不存在即中止(不憑空建立空庫)
+//離線版(只讀匯出檔、不連庫): node server/tools/authRefsAudit.mjs <匯出檔.json> [--json] [--clean-out <檔>]
+//
+//不清理者(報告列為「須人工處理」, 非失敗): 壞 JSON、名稱非字串之引用、缺字串主鍵之列, 以及含 JSON5 Infinity／NaN 數值而命中須改寫之授權欄位(JSON.stringify 會把它編成 null, 作規則名時改指別的規則); 寫後重新稽核時其懸空項為已知殘留.
+//--backup 路徑以 wx 建立: 同名既有檔(含資料庫檔、別名——大小寫不同、相對／絕對、硬連結)一律拒絕、不覆寫, 失敗於備份階段(零寫入).
+//離開碼: 0 成功(含只列不改與無須清理); 1 失敗(備份失敗、資料於稽核後被改動、寫入有 ok:0、寫後重稽核不為 0 等, 報告會列出); 2 參數錯誤.
+//建議於停服(或無人編輯)時 --apply, 完成後重啟服務. 備份檔含 email 等個資, 請妥善保管、勿外傳、勿納入版控.
+
+
+async function main() {
+    let args = process.argv.slice(2)
+    let flag = (k) => args.includes(k)
+    let val = (k) => {
+        let i = args.indexOf(k)
+        return i >= 0 ? args[i + 1] : undefined
+    }
+    let known = ['--apply', '--backup', '--db', '--help']
+    let bad = args.filter((a, k) => (a.startsWith('--') ? !known.includes(a) : !(k > 0 && ['--backup', '--db'].includes(args[k - 1]))))
+    let missing = ['--backup', '--db'].some((k) => flag(k) && (val(k) === undefined || val(k).startsWith('--')))
+    if (flag('--help') || bad.length > 0 || missing) {
+        console.log('用法: node g_authRefsClean.mjs [--apply] [--backup <檔>] [--db <資料夾>]')
+        process.exitCode = flag('--help') ? 0 : 2
+        return
+    }
+
+    //連線: 預設走 g_mOrm.mjs(專案資料庫, 動態載入——靜態 import 會於載入時即開啟 ./db); --db 則依指定資料夾自建(WServOrm 組裝同 g_mOrm.mjs)
+    let st = getSettings()
+    let url = flag('--db') ? val('--db') : st.dbUrl
+    if (!fs.existsSync(path.join(url, st.dbName))) {
+        console.log(`資料庫不存在: ${path.resolve(url, st.dbName)}(不憑空建立空庫, 已中止)`)
+        process.exitCode = 1
+        return
+    }
+    let woItems = null
+    let closeAll = null
+    if (flag('--db')) {
+        let r = WServOrm(ds, WOrm, url, st.dbName)
+        woItems = r.woItems
+        closeAll = r.closeAll
+    }
+    else {
+        woItems = (await import('./g_mOrm.mjs')).woItems
+    }
+
+    try {
+        let res = await runClean({ woItems, apply: flag('--apply'), backupPath: val('--backup') })
+        if (!res.ok) {
+            process.exitCode = 1
+        }
+    }
+    finally {
+        if (closeAll) {
+            await closeAll()
+        }
+    }
+}
+
+
+main()
+    .catch((err) => {
+        console.log('authRefsClean catch', err)
+        process.exitCode = 1 //失敗以非 0 離開碼表達(規則帳本 R-SEED-01、R-ERR-01: 未 await 之 promise 於源頭 catch)
+    })

package/g_fixFromType.mjs

@@ -0,0 +1,92 @@
+import fs from 'fs'
+import path from 'path'
+import WOrm from 'w-orm-lmdb/src/WOrmLmdb.mjs'
+import WServOrm from 'w-serv-orm/src/WServOrm.mjs'
+import ds from './src/schema/index.mjs'
+import getSettings from './g_getSettings.mjs'
+import { checkDbNotInUse, runFixFromType } from './server/tools/fromTools.mjs'
+
+
+//來源欄 from 之型別正規化(升版工具; F-23 外部列受保護, 規則帳本 R-PRINCIPLE-00 原則 5): 升版後後台寫入起拒收非字串 from, 既有資料中 from 為 null／數字／布林／物件／陣列者須先正規化為 ''(後台列).
+//外部列＝from 為非空字串者; ''、缺欄、非字串皆為後台列, 故本工具只把「非字串」改為 '', 不改變任何列是否為外部列; 缺欄視同 ''(已是後台列), 不改; 非空字串(外部列)不動.
+//經 ORM 寫入, 只改 from 欄(不動其餘欄位與更新者／更新時間).
+//
+//用法(自專案根):
+//  node g_fixFromType.mjs                        只列不改(預設): 連專案資料庫(./db)列出各表非字串 from 之列數、型別分佈與前 10 個 id
+//  node g_fixFromType.mjs --apply                寫入: 後端須先停止(偵測到資料庫被占用即拒絕); 先備份資料庫(backup-時間.json, 於工作目錄)與四表全部列(./fixFromType-backup-時間.json), 任一備份失敗即中止、不寫入; 寫完回讀驗證(預期結果逐位元相同、已無非字串 from)
+//  node g_fixFromType.mjs --apply --backup <檔>  指定四表備份檔路徑(不覆寫既有檔)
+//  node g_fixFromType.mjs --db <資料夾>          覆寫資料庫位置(同 g_getSettings 之 dbUrl; 資料庫名稱仍為 dbName), 供測試用臨時資料庫; 資料夾不存在即中止(不憑空建立空庫)
+//
+//後端占用偵測(--apply 時, 於開啟資料庫之前; 僅 Windows 可偵測, 其他平台請自行確認後端已停止): 被占用即拒絕、零寫入(離開碼 1).
+//冪等: 失敗後修正原因可原樣重跑; 已正規化者不再出現. 備份檔含 email 等個資, 請妥善保管、勿外傳、勿納入版控.
+//離開碼: 0 成功(含只列不改與無須修正); 1 失敗(資料庫不存在、被占用、備份失敗、資料於稽核後被改動、寫入有失敗、寫後驗證不符等, 報告會列出); 2 參數錯誤.
+
+
+async function main() {
+    let args = process.argv.slice(2)
+    let flag = (k) => args.includes(k)
+    let val = (k) => {
+        let i = args.indexOf(k)
+        return i >= 0 ? args[i + 1] : undefined
+    }
+    let known = ['--apply', '--backup', '--db', '--help']
+    let bad = args.filter((a, k) => (a.startsWith('--') ? !known.includes(a) : !(k > 0 && ['--backup', '--db'].includes(args[k - 1]))))
+    let missing = ['--backup', '--db'].some((k) => flag(k) && (val(k) === undefined || val(k).startsWith('--')))
+    if (flag('--help') || bad.length > 0 || missing) {
+        console.log('用法: node g_fixFromType.mjs [--apply] [--backup <檔>] [--db <資料夾>]')
+        process.exitCode = flag('--help') ? 0 : 2
+        return
+    }
+
+    //連線: 預設走 g_mOrm.mjs(專案資料庫, 動態載入——靜態 import 會於載入時即開啟 ./db); --db 則依指定資料夾自建(WServOrm 組裝同 g_mOrm.mjs)
+    let st = getSettings()
+    let url = flag('--db') ? val('--db') : st.dbUrl
+    if (!fs.existsSync(path.join(url, st.dbName))) {
+        console.log(`資料庫不存在: ${path.resolve(url, st.dbName)}(不憑空建立空庫, 已中止)`)
+        process.exitCode = 1
+        return
+    }
+
+    //後端占用偵測(寫入前, 且須於本行程開啟資料庫之前)
+    if (flag('--apply')) {
+        let u = checkDbNotInUse({ url, dbName: st.dbName })
+        if (!u.ok) {
+            console.log(`失敗(階段 inuse): ${u.err}`)
+            process.exitCode = 1
+            return
+        }
+        if (!u.checked) {
+            console.log('(此平台無法自動偵測後端是否占用資料庫, 請自行確認後端已停止)')
+        }
+    }
+
+    let woItems = null
+    let closeAll = null
+    if (flag('--db')) {
+        let r = WServOrm(ds, WOrm, url, st.dbName)
+        woItems = r.woItems
+        closeAll = r.closeAll
+    }
+    else {
+        woItems = (await import('./g_mOrm.mjs')).woItems
+    }
+
+    try {
+        let res = await runFixFromType({ woItems, apply: flag('--apply'), backupPath: val('--backup') })
+        if (!res.ok) {
+            process.exitCode = 1
+        }
+    }
+    finally {
+        if (closeAll) {
+            await closeAll()
+        }
+    }
+}
+
+
+main()
+    .catch((err) => {
+        console.log('fixFromType catch', err)
+        process.exitCode = 1 //失敗以非 0 離開碼表達(規則帳本 R-SEED-01、R-ERR-01: 未 await 之 promise 於源頭 catch)
+    })

package/g_initialData.mjs

@@ -143,7 +143,7 @@ async function initialData() {
 
     rs = [
 
-        ['peter', 'teamA', `
+        ['peter', '', `
             { 
                 '權限群組M1': {
                     'mode': 'OR',
@@ -151,7 +151,7 @@ async function initialData() {
                 }
             }
         `, 'n'],
-        ['mary', 'teamA', `
+        ['mary', '', `
             { 
                 '權限群組M2': {
                     'mode': 'OR',
@@ -159,7 +159,7 @@ async function initialData() {
                 }
             }
         `, 'n'],
-        ['john', 'teamA', `
+        ['john', '', `
             { 
                 '權限群組M3': {
                     'mode': 'OR',

package/g_purgeFrom.mjs

@@ -0,0 +1,127 @@
+import fs from 'fs'
+import path from 'path'
+import WOrm from 'w-orm-lmdb/src/WOrmLmdb.mjs'
+import WServOrm from 'w-serv-orm/src/WServOrm.mjs'
+import ds from './src/schema/index.mjs'
+import getSettings from './g_getSettings.mjs'
+import { checkDbNotInUse, runAuditFrom, runPurgeFrom } from './server/tools/fromTools.mjs'
+
+
+//來源欄 from 之整來源清除(升版工具; F-23 外部列受保護, 規則帳本 R-PRINCIPLE-00 原則 5): 升版後 from 為非空字串之列為外部列, 後台唯讀(不得改、不得刪);
+//某外部來源已不再同步而須整批移除時, 以本工具清除該來源寫入之全部列, 並於同一次清理引用(效果同後台刪除該些列: users.cgrups 引用被清除群組、grups.cpemis 引用被清除權限、pemis.crules 引用被清除標的者, 自授權字串移除; 與伺服端同一純函數 refCascade.planRefChanges).
+//比對為精確 ===(不 trim、不分大小寫、不模糊); from 不可為空字串(拒絕); 不做「認領」(外部列改成後台列); 不得有自動刪除之預設——預設只列, 明確加 --apply 才寫入.
+//
+//用法(自專案根):
+//  node g_purgeFrom.mjs                                           只列(預設): 各表 (表, from 值型別/值) 之筆數(含 '' 與非字串者之摘要), 並標示非空 from 為外部列
+//  node g_purgeFrom.mjs --table <targets|pemis|grups|users|all> --from <來源名>
+//                                                                 只列出將被清除之列與將被連帶清理之引用端筆數(dry-run, 不寫); all 為四表依 targets → pemis → grups → users 之引用鏈序逐表處理
+//  node g_purgeFrom.mjs --table <表|all> --from <來源名> --apply  寫入(不可逆): 後端須先停止(偵測到資料庫被占用即拒絕); 先備份資料庫(backup-時間.json, 於工作目錄)與四表全部列(./purgeFrom-backup-時間.json), 任一備份失敗即中止、不寫入;
+//                                                                 逐表先寫引用端改寫、後刪被清除列; 任一步失敗即中止並提示依備份回復; 寫完回驗(與預測狀態逐位元相同、指定表已無該來源之列、未製造新的懸空引用)
+//  --backup <檔>                                                  指定四表備份檔路徑(不覆寫既有檔)
+//  --db <資料夾>                                                  覆寫資料庫位置(同 g_getSettings 之 dbUrl; 資料庫名稱仍為 dbName), 供測試用臨時資料庫; 資料夾不存在即中止(不憑空建立空庫)
+//
+//拒絕(零寫入): from 為空字串(--from '' 於部分 shell 會被吃掉而成缺值, 亦視為參數錯誤); 被清除列缺非空字串主鍵; 引用端授權字串含無法安全重新編碼之內容(JSON5 Infinity／NaN 數值, 清理會改指別的規則, 須先人工處理該引用端列).
+//冪等: 失敗後修正原因可原樣重跑同一指令. 備份檔含 email 等個資, 請妥善保管、勿外傳、勿納入版控. 輸出可列 id 與群組／權限／標的名稱, 不列使用者姓名與 email.
+//離開碼: 0 成功(含只列與無須清除); 1 失敗(資料庫不存在、被占用、規劃被拒、備份失敗、資料於稽核後被改動、寫入有失敗、寫後驗證不符等, 報告會列出; 規劃被拒於 dry-run 亦為 1, 表示 --apply 亦將拒絕); 2 參數錯誤.
+
+const TABLE_NAMES = ['targets', 'pemis', 'grups', 'users', 'all']
+
+
+async function main() {
+    let args = process.argv.slice(2)
+    let flag = (k) => args.includes(k)
+    let val = (k) => {
+        let i = args.indexOf(k)
+        return i >= 0 ? args[i + 1] : undefined
+    }
+    let USAGE = '用法: node g_purgeFrom.mjs [--table <targets|pemis|grups|users|all> --from <來源名> [--apply] [--backup <檔>]] [--db <資料夾>]'
+    let known = ['--apply', '--backup', '--db', '--table', '--from', '--help']
+    let valueFlags = ['--backup', '--db', '--table', '--from']
+    let bad = args.filter((a, k) => (a.startsWith('--') ? !known.includes(a) : !(k > 0 && valueFlags.includes(args[k - 1]))))
+    let missing = valueFlags.some((k) => flag(k) && (val(k) === undefined || val(k).startsWith('--')))
+    if (flag('--help') || bad.length > 0 || missing) {
+        console.log(USAGE)
+        process.exitCode = flag('--help') ? 0 : 2
+        return
+    }
+    let table = val('--table')
+    let from = val('--from')
+    let usageErr = (msg) => {
+        console.log(`${msg}\n${USAGE}`)
+        process.exitCode = 2
+    }
+    if (flag('--from') && from === '') {
+        usageErr('--from 不可為空字串(空字串為後台列, 不是一個來源)')
+        return
+    }
+    if (flag('--table') !== flag('--from')) {
+        usageErr('--table 與 --from 須同時給')
+        return
+    }
+    if (flag('--table') && !TABLE_NAMES.includes(table)) {
+        usageErr(`--table 須為 ${TABLE_NAMES.join('／')} 之一`)
+        return
+    }
+    if (flag('--apply') && !flag('--table')) {
+        usageErr('--apply 須搭配 --table 與 --from(不提供無條件清除)')
+        return
+    }
+
+    //連線: 預設走 g_mOrm.mjs(專案資料庫, 動態載入——靜態 import 會於載入時即開啟 ./db); --db 則依指定資料夾自建(WServOrm 組裝同 g_mOrm.mjs)
+    let st = getSettings()
+    let url = flag('--db') ? val('--db') : st.dbUrl
+    if (!fs.existsSync(path.join(url, st.dbName))) {
+        console.log(`資料庫不存在: ${path.resolve(url, st.dbName)}(不憑空建立空庫, 已中止)`)
+        process.exitCode = 1
+        return
+    }
+
+    //後端占用偵測(寫入前, 且須於本行程開啟資料庫之前)
+    if (flag('--apply')) {
+        let u = checkDbNotInUse({ url, dbName: st.dbName })
+        if (!u.ok) {
+            console.log(`失敗(階段 inuse): ${u.err}`)
+            process.exitCode = 1
+            return
+        }
+        if (!u.checked) {
+            console.log('(此平台無法自動偵測後端是否占用資料庫, 請自行確認後端已停止)')
+        }
+    }
+
+    let woItems = null
+    let closeAll = null
+    if (flag('--db')) {
+        let r = WServOrm(ds, WOrm, url, st.dbName)
+        woItems = r.woItems
+        closeAll = r.closeAll
+    }
+    else {
+        woItems = (await import('./g_mOrm.mjs')).woItems
+    }
+
+    try {
+        let res = null
+        if (flag('--table')) {
+            res = await runPurgeFrom({ woItems, table, from, apply: flag('--apply'), backupPath: val('--backup') })
+        }
+        else {
+            res = await runAuditFrom({ woItems })
+        }
+        if (!res.ok) {
+            process.exitCode = 1
+        }
+    }
+    finally {
+        if (closeAll) {
+            await closeAll()
+        }
+    }
+}
+
+
+main()
+    .catch((err) => {
+        console.log('purgeFrom catch', err)
+        process.exitCode = 1 //失敗以非 0 離開碼表達(規則帳本 R-SEED-01、R-ERR-01: 未 await 之 promise 於源頭 catch)
+    })

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "w-web-perm",
-  "version": "1.1.12",
+  "version": "1.1.13",
   "main": "dist/w-web-perm.umd.js",
   "dependencies": {
     "json5": "^2.2.3",