@oondemand/oon-core-back 0.7.11 → 0.7.12

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@oondemand/oon-core-back",
-  "version": "0.7.11",
+  "version": "0.7.12",
   "repository": {
     "type": "git",
     "url": "git+https://github.com/oondemand/oon-platform.git",

package/src/index.js

@@ -23,6 +23,7 @@ const localDevelopment = require("./core/runtime/localDevelopment");
 const localExecutionPolicy = require("./core/runtime/localExecutionPolicy");
 
 module.exports = {
+  appArchitecture: require("./manifest/appArchitecture"),
   start, createApp, activate,
   defineCentral: define.defineCentral, defineModel: define.defineModel,
   defineCollection: define.defineCollection, defineDocument: define.defineDocument,

package/src/manifest/appArchitecture.js

@@ -0,0 +1,31 @@
+"use strict";
+
+// Canonical #290 contract. Deployment is a derived technical projection, never
+// a second architectural authority. This module has no commercial policy.
+const DEPLOYMENT_BY_TENANCY = Object.freeze({ none: "singleton", single_tenant: "dedicated", multi_tenant: "shared" });
+const AVAILABILITY_TENANCY = Object.freeze({
+  system: Object.freeze(["none"]), common: Object.freeze(["none", "multi_tenant"]),
+  self: Object.freeze(["single_tenant"]), licensed: Object.freeze(["single_tenant", "multi_tenant"]),
+});
+function invalid(code, field, message) {
+  throw Object.assign(new Error(message), { code, statusCode: 422, details: { field } });
+}
+function deriveDeploymentMode(tenancyModel) {
+  if (!Object.hasOwn(DEPLOYMENT_BY_TENANCY, tenancyModel)) invalid("APP_TENANCY_INVALID", "tenancyModel", "Modelo de tenancy inválido.");
+  return DEPLOYMENT_BY_TENANCY[tenancyModel];
+}
+function resolveAppArchitecture(input) {
+  const { availability, tenancyModel } = input || {};
+  const deploymentMode = deriveDeploymentMode(tenancyModel);
+  if (!Object.hasOwn(AVAILABILITY_TENANCY, availability) || !AVAILABILITY_TENANCY[availability].includes(tenancyModel)) {
+    invalid("APP_ARCHITECTURE_INVALID", "availability", "Disponibilidade e tenancy fora da matriz suportada.");
+  }
+  if (input.ecosystemRole && (input.ecosystemRole === "root") !== (availability === "system")) {
+    invalid("APP_ARCHITECTURE_INVALID", "ecosystemRole", "Somente a Central root usa availability=system.");
+  }
+  if (input.deploymentMode !== undefined && input.deploymentMode !== deploymentMode) {
+    invalid(input.deploymentMode === "hybrid" ? "APP_HYBRID_UNSUPPORTED" : "APP_DEPLOYMENT_CONTRADICTION", "deploymentMode", "Implantação legada deve concordar com tenancyModel; hybrid não é suportado.");
+  }
+  return Object.freeze({ availability, tenancyModel, deploymentMode });
+}
+module.exports = { DEPLOYMENT_BY_TENANCY, AVAILABILITY_TENANCY, deriveDeploymentMode, resolveAppArchitecture };

package/src/manifest/appManifest.js

@@ -5,6 +5,7 @@ const path = require("node:path");
 const ctx = require("../core/context");
 const corePackage = require("../../package.json");
 const { validateRbac } = require("./rbacManifest");
+const { deriveDeploymentMode, resolveAppArchitecture } = require("./appArchitecture");
 
 const APP_MANIFEST_FILENAME = "central.app.json";
 const APP_MANIFEST_SCHEMA_VERSION = 2;
@@ -13,10 +14,10 @@ const SUPPORTED_MODULES = Object.freeze([
   "collections", "documents", "pipelines", "assistants", "currencies",
 ]);
 const SUPPORTED_TENANCY_MODELS = Object.freeze(["none", "single_tenant", "multi_tenant"]);
-const SUPPORTED_AVAILABILITIES = Object.freeze(["system", "common", "licensed"]);
+const SUPPORTED_AVAILABILITIES = Object.freeze(["system", "common", "self", "licensed"]);
 const SUPPORTED_ACCESS_MODES = Object.freeze(["tenant_members", "explicit_users", "authenticated_users"]);
 const SUPPORTED_AUTHORIZATION_MODES = Object.freeze(["none", "rbac"]);
-const SUPPORTED_DEPLOYMENT_MODES = Object.freeze(["singleton", "shared", "dedicated", "hybrid"]);
+const SUPPORTED_DEPLOYMENT_MODES = Object.freeze(["singleton", "shared", "dedicated"]);
 const TRANSACTIONAL_EMAIL_CAPABILITY = "core.transactional-email";
 const EMAIL_SCOPE_POLICIES = Object.freeze(["app_only", "tenant_required", "tenant_override"]);
 const APP_KIND_ROLE = Object.freeze({
@@ -201,7 +202,7 @@ function dimensionsFor(manifest) {
     availability: manifest.availability || defaults.availability,
     accessMode: manifest.accessMode || defaults.accessMode,
     authorizationMode: manifest.authorizationMode || defaults.authorizationMode,
-    deploymentMode: manifest.deploymentMode || defaults.deploymentMode,
+    deploymentMode: deriveDeploymentMode(SUPPORTED_TENANCY_MODELS.includes(manifest.tenancyModel) ? manifest.tenancyModel : defaults.tenancyModel),
   };
 }
 
@@ -238,6 +239,11 @@ function validateAppManifest(input, { coreVersion = corePackage.version } = {})
   validateDimension(input.deploymentMode, "deploymentMode", SUPPORTED_DEPLOYMENT_MODES, issues);
   const dimensions = dimensionsFor(input);
   const role = APP_KIND_ROLE[input.appKind];
+  try {
+    resolveAppArchitecture({ ...dimensions, ecosystemRole: role, ...(input.deploymentMode !== undefined ? { deploymentMode: input.deploymentMode } : {}) });
+  } catch (error) {
+    addIssue(issues, error.details?.field || "tenancyModel", `${error.code}: ${error.message}`);
+  }
   if (role === "root" && (
     dimensions.tenancyModel !== "none" ||
     dimensions.availability !== "system" ||