@tbox.cn/app-toolkit 0.1.0 → 0.2.0

package/tests/vendor-schema-keywords.test.ts

@@ -0,0 +1,101 @@
+import { describe, it, expect } from 'vitest';
+import { readdirSync, readFileSync, statSync } from 'node:fs';
+import { join } from 'node:path';
+import { fileURLToPath } from 'node:url';
+
+/**
+ * 同仓关键词矩阵静态断言（v4.4 D32 配套——tbox-app 侧义务）：
+ * 真实 vendor schema 文件（modules/<pkg>/schemas/**，config + credentials 双面）关键词
+ * ⊆ agtcodingbox SchemaForm v2 渲染器支持集（清单钉 module-tab-config-refinement Note
+ * 前端配套节：format/minLength/maxLength/additionalProperties/$schema 提示级不降级；
+ * oneOf/anyOf/$ref/items/patternProperties 只读降级 + 值保全）。
+ *
+ * 断言红 = 新 vendor schema 引入渲染器不支持的键 → 人工确认渲染器扩容或改 schema 后
+ * 同批更新 SUPPORTED（禁止静默扩清单——该断言是「表单引导能力」的tripwire）。
+ */
+
+const SUPPORTED: ReadonlySet<string> = new Set([
+  // 结构基础（SchemaForm v2 全渲染）
+  'type', 'properties', 'required', 'enum', 'title', 'description', 'default',
+  'minimum', 'maximum', 'writeOnly',
+  // 提示级（note 扩容清单——不降级）
+  'format', 'minLength', 'maxLength', 'additionalProperties', '$schema',
+  // 结构性（只读降级 + 值保全——支持集含之，出现不红）
+  'oneOf', 'anyOf', '$ref', 'items', 'patternProperties',
+]);
+
+/** 递归走已知 subschema 位，收集 schema 节点自身键（properties 值下的键 = 字段名，不属关键词） */
+function collectKeywords(node: unknown, out: Set<string>): void {
+  if (Array.isArray(node)) {
+    for (const v of node) collectKeywords(v, out);
+    return;
+  }
+  if (!node || typeof node !== 'object') return;
+  for (const [k, v] of Object.entries(node as Record<string, unknown>)) {
+    out.add(k);
+    if (k === 'properties' || k === 'patternProperties') {
+      for (const sv of Object.values(v as Record<string, unknown>)) collectKeywords(sv, out);
+    } else if (k === 'items' && v !== null && typeof v === 'object') {
+      collectKeywords(v, out);
+    } else if ((k === 'oneOf' || k === 'anyOf' || k === 'allOf') && Array.isArray(v)) {
+      for (const sv of v) collectKeywords(sv, out);
+    } else if (k === 'additionalProperties' && v !== null && typeof v === 'object') {
+      collectKeywords(v, out);
+    } else if (k === '$defs' || k === 'definitions') {
+      for (const sv of Object.values(v as Record<string, unknown>)) collectKeywords(sv, out);
+    }
+  }
+}
+
+function schemaFiles(): Array<{ pkg: string; rel: string }> {
+  const modulesRoot = join(fileURLToPath(new URL('../../..', import.meta.url)), 'modules');
+  const out: Array<{ pkg: string; rel: string }> = [];
+  for (const pkg of readdirSync(modulesRoot)) {
+    const dir = join(modulesRoot, pkg, 'schemas');
+    if (!statSyncSafe(dir)) continue;
+    (function scan(d: string): void {
+      for (const e of readdirSync(d)) {
+        const p = join(d, e);
+        if (statSync(p).isDirectory()) scan(p);
+        else if (e.endsWith('.json')) out.push({ pkg, rel: p });
+      }
+    })(dir);
+  }
+  return out;
+}
+
+function statSyncSafe(p: string): boolean {
+  try {
+    return statSync(p).isDirectory();
+  } catch {
+    return false;
+  }
+}
+
+describe('vendor schema 关键词矩阵 ⊆ 渲染器支持集（D32 表单引导 tripwire）', () => {
+  it('modules/**/schemas 全文件关键词 ⊆ SUPPORTED（红 = 渲染器扩容人工确认）', () => {
+    const files = schemaFiles();
+    expect(files.length, 'vendor schema 文件扫描面非空（防目录改名静默失效）').toBeGreaterThan(5);
+    for (const { pkg, rel } of files) {
+      const keywords = new Set<string>();
+      try {
+        collectKeywords(JSON.parse(readFileSync(rel, 'utf8')), keywords);
+      } catch (err) {
+        throw new Error(`vendor schema 解析失败（${pkg}）：${(err as Error).message}`);
+      }
+      for (const k of keywords) {
+        expect(SUPPORTED.has(k), `${pkg} schema 关键词 "${k}" ∉ 渲染器支持集——确认 SchemaForm v2 扩容后同批更新本清单`).toBe(true);
+      }
+    }
+  });
+
+  it('实际用到的关键词 ⊆ SUPPORTED 且扫描面覆盖 config/credentials 双面（自检）', () => {
+    const files = schemaFiles();
+    const used = new Set<string>();
+    for (const { rel } of files) collectKeywords(JSON.parse(readFileSync(rel, 'utf8')), used);
+    // 实测基线（2026-09 扫描）：14 键——防「提取器失效全空集」假绿
+    for (const k of ['$schema', 'type', 'properties', 'required', 'format', 'writeOnly', 'additionalProperties']) {
+      expect(used.has(k), `基线关键词 ${k} 未被提取到——提取器或目录布局变化，人工核对`).toBe(true);
+    }
+  });
+});

package/tests/views.test.ts

@@ -19,11 +19,17 @@ interface Harness {
   tk: AppToolkit;
 }
 
-function harnessWithContracts(opts: { version?: string; withStrict?: boolean } = {}): Harness {
+function harnessWithContracts(
+  opts: { version?: string; withStrict?: boolean; missingEvaluationExports?: boolean } = {},
+): Harness {
   const app = createTempApp('tbox-views-');
   invalidateContractsResolver();
   const store = joinStore(app.appDir, 'contracts');
-  writeFakeContractsPackage(store, { version: opts.version ?? '0.9.0', withStrict: opts.withStrict ?? true });
+  writeFakeContractsPackage(store, {
+    version: opts.version ?? '0.9.0',
+    withStrict: opts.withStrict ?? true,
+    missingEvaluationExports: opts.missingEvaluationExports,
+  });
   linkContracts(app.appDir, store, { subdir: 'apps/server' });
   // 应用结构：parking 模块（packages/ 约定发现）+ 注册表两实例 + integrations.json
   mkdirDeep(join(app.appDir, 'packages', 'module-parking'));
@@ -95,13 +101,14 @@ describe('views/工厂（O 矩阵核心族）', () => {
     const appView = await h.tk.loadApp();
     expect(Object.keys(appView)).toEqual(['services', 'integration']);
     const mod = await h.tk.loadModule('module-parking');
-    expect(Object.keys(mod)).toEqual(['integration', 'services']);
+    // v4.4 D34：domainKeys/providerBindings/configEditable 显式化（include 两键可选缺席——F4）
+    expect(Object.keys(mod)).toEqual(['domainKeys', 'integration', 'providerBindings', 'configEditable', 'services']);
     const svc = await h.tk.loadService('parking.query');
     expect(Object.keys(svc).some((k) => ['resolution', 'issues', 'contracts'].includes(k))).toBe(false);
     // 静态端点在 <0.9 下照常（永不 503——O13 反例联动）
   });
 
-  it('O8 P14 三处等价：map 值 ≡ 单体 resolution 摘要基（单源函数结构保证）', async () => {
+  it('O8 P14 等价：map 值 ≡ 单体 resolution 摘要基（单源函数结构保证；v4.4 内嵌两处见 I4）', async () => {
     const batch = await h.tk.loadServiceResolutions();
     const single = await h.tk.loadServiceResolution('parking.query');
     const entry = batch.resolutions['parking.query'];
@@ -172,7 +179,7 @@ describe('views/工厂（O 矩阵核心族）', () => {
     wild.app.dispose();
   });
 
-  it('N1 命名对齐：13 行映射表 × 工厂方法 typeof（L1 改名漂移即红）', async () => {
+  it('N1 命名对齐：15 行映射表 × 工厂方法 typeof（L1 改名漂移即红——v4.4 15 端点）', async () => {
     for (const row of URL_METHOD_MAP) {
       const fn = (h.tk as unknown as Record<string, unknown>)[row.method];
       expect(typeof fn, row.method).toBe('function');
@@ -204,12 +211,12 @@ describe('views/工厂（O 矩阵核心族）', () => {
     expect(dry.files).toEqual([]);
   });
 
-  it('写时自动初始化（R13 语义翻转提示）+ N1 清域（模块 {} 删 domains 键）', async () => {
+  it('写时自动初始化（R13 语义翻转提示）+ N1 清域（模块 {} 删域键）', async () => {
     h.app.dispose();
     const fresh = createTempApp('tbox-views-fresh-');
     invalidateContractsResolver();
     const store = joinStore(fresh.appDir, 'contracts');
-    writeFakeContractsPackage(store, { version: '0.9.0' });
+    writeFakeContractsPackage(store, { version: '0.9.0', slots: ['auth.alipay-login'] });
     linkContracts(fresh.appDir, store, { subdir: 'apps/server' });
     const tk = createAppToolkit(fresh.appDir);
     // 缺席文件首写 → 骨架物化 + R13 warning
@@ -315,14 +322,18 @@ describe('views/工厂（O 矩阵核心族）', () => {
       credentialRef: 'secret://wanda-parking.query',
       layer: 'service',
     });
-    expect(inst?.credential).toEqual({
+    // v4.4 D33 删净：instances[].credential 移除（凭据掩码归 GET /credentials——求值路径零凭据 I/O）
+    expect(inst && 'credential' in inst).toBe(false);
+    // 本位 ref（服务级 credentialRef）掩码经 GET /credentials 回显
+    const credView = await tk.loadCredentials();
+    expect(credView.services['parking.query']?.credential).toEqual({
       type: 'wanda-c-signed-v1',
       ref: 'secret://wanda-parking.query',
       file: 'config/credentials/wanda-parking.query.json',
       masked: { appKey: 'SE****', appSecret: 'SE****' },
     });
     // O4 零真值：序列化后 grep 断言
-    const serialized = JSON.stringify(detail);
+    const serialized = JSON.stringify({ detail, credView });
     expect(serialized).not.toContain('SECRET-APP-KEY');
     expect(serialized).not.toContain('SECRET-APP-SECRET');
     // inheritance 实例层 = 默认实例口径（FX-2c）：无实例级声明 → 继承位（provider 缺席）
@@ -367,7 +378,8 @@ describe('O6/O7/O10/O14（FX-3 补全）', () => {
     const combo = await tk.loadProviderService('joycity', 'parking.query');
     expect(combo.implementations).toHaveLength(2);
     expect(combo.integrationSchemas.configSchema).toEqual({ type: 'object', properties: { baseUrl: { type: 'string' } } });
-    expect(combo.integrationSchemas.credentialSchema).toBeNull(); // 供给在场未声明 credentialSchema → null（非 404）
+    // v4.4 D33：credentialSchema 删净（结构归 GET /credential-types——组合单体纯 config）
+    expect('credentialSchema' in combo.integrationSchemas).toBe(false);
     app.dispose();
   });
 
@@ -425,3 +437,395 @@ describe('O6/O7/O10/O14（FX-3 补全）', () => {
     }
   });
 });
+
+describe('A2 错误面（P-4 notes 优先 / P-5 畸形包 503）', () => {
+  it('M1 导入失败 message 含构建指引且不再误报未安装（P-4 notes 优先）', async () => {
+    const app = createTempApp('tbox-m1-');
+    invalidateContractsResolver();
+    const store = joinStore(app.appDir, 'contracts');
+    writeFakeContractsPackage(store, { version: '0.9.0', brokenDist: true });
+    linkContracts(app.appDir, store, { subdir: 'apps/server' });
+    const tk = createAppToolkit(app.appDir);
+    await expect(tk.loadServiceResolutions()).rejects.toThrow(/构建产物导入失败/);
+    await expect(tk.loadServiceResolutions()).rejects.not.toThrow(/未安装/);
+    app.dispose();
+  });
+
+  it('M2 <0.9 message 对齐 api.md 信封（需 ≥0.9.0——resolver note 文案）', async () => {
+    const app = createTempApp('tbox-m2-');
+    invalidateContractsResolver();
+    const store = joinStore(app.appDir, 'contracts');
+    writeFakeContractsPackage(store, { version: '0.8.2', withStrict: false });
+    linkContracts(app.appDir, store, { subdir: 'apps/server' });
+    const tk = createAppToolkit(app.appDir);
+    await expect(tk.loadServiceResolutions()).rejects.toThrow(/需 ≥0\.9\.0/);
+    app.dispose();
+  });
+
+  it('M3 畸形包（求值面缺席）+ 无 config → 503 非 500（P-5——predicateIssues 早退绕过 assertFn 的唯一后续拦截点）', async () => {
+    const app = createTempApp('tbox-m3-');
+    invalidateContractsResolver();
+    const store = joinStore(app.appDir, 'contracts');
+    writeFakeContractsPackage(store, { version: '0.9.0', missingEvaluationExports: true, slots: ['parking.query'] });
+    linkContracts(app.appDir, store, { subdir: 'apps/server' });
+    const tk = createAppToolkit(app.appDir); // 不写 integrations.json——config === null 早退路径
+    await expect(tk.loadServiceResolutions()).rejects.toMatchObject({
+      code: 'CONTRACTS_NOT_RESOLVED',
+      httpStatus: 503,
+    });
+    await expect(tk.loadServiceResolutions()).rejects.not.toThrow(/工厂门控应先行拦截/);
+    app.dispose();
+  });
+});
+
+describe('D34 多域模块钉死（v4.4 F3）', () => {
+  it('D1 单域回归：domainKeys/providerBindings/configEditable 装配 + integration 原值', async () => {
+    const h2 = harnessWithContracts();
+    const mod = await h2.tk.loadModule('module-parking');
+    expect(mod.domainKeys).toEqual(['parking']);
+    expect(mod.configEditable).toBe(true);
+    expect(mod.providerBindings).toEqual([{ domain: 'parking', effective: 'wanda', layer: 'module' }]);
+    expect(mod.integration).toEqual({ provider: 'wanda' });
+    h2.app.dispose();
+  });
+
+  it('D2 多域模块：GET integration null + providerBindings 双条 + PUT 400 分支①（含 {} 清域）', async () => {
+    const app = createTempApp('tbox-d2-');
+    invalidateContractsResolver();
+    const store = joinStore(app.appDir, 'contracts');
+    writeFakeContractsPackage(store, { version: '0.9.0' });
+    linkContracts(app.appDir, store, { subdir: 'apps/server' });
+    writeAppFile(
+      app.appDir,
+      'packages/module-multi/tbox.module.json',
+      JSON.stringify({
+        schemaVersion: 1,
+        name: 'module-multi',
+        version: '0.1.0',
+        kind: 'business',
+        contributes: { services: [{ service: 'parking.query', optional: false }, { service: 'member.account', optional: false }] },
+        dependencies: { modules: [] },
+        env: [],
+      }),
+    );
+    const tk = createAppToolkit(app.appDir);
+    const mod = await tk.loadModule('module-multi');
+    expect(mod.domainKeys).toEqual(['member', 'parking']);
+    expect(mod.integration).toBeNull();
+    expect(mod.configEditable).toBe(false);
+    expect(mod.providerBindings).toEqual([
+      { domain: 'member', effective: null, layer: null },
+      { domain: 'parking', effective: null, layer: null },
+    ]);
+    await expect(tk.writeModuleIntegration('module-multi', { provider: 'wanda' })).rejects.toMatchObject({
+      code: 'VALIDATION_FAILED',
+      httpStatus: 400,
+      message: expect.stringContaining('跨 2 个域（member、parking）'),
+    });
+    await expect(tk.writeModuleIntegration('module-multi', {})).rejects.toMatchObject({ code: 'VALIDATION_FAILED' });
+    app.dispose();
+  });
+
+  it('D3 零域模块：domainKeys [] + PUT 400 分支②', async () => {
+    const app = createTempApp('tbox-d3-');
+    invalidateContractsResolver();
+    const store = joinStore(app.appDir, 'contracts');
+    writeFakeContractsPackage(store, { version: '0.9.0' });
+    linkContracts(app.appDir, store, { subdir: 'apps/server' });
+    writeAppFile(
+      app.appDir,
+      'packages/module-zero/tbox.module.json',
+      JSON.stringify({
+        schemaVersion: 1,
+        name: 'module-zero',
+        version: '0.1.0',
+        kind: 'business',
+        contributes: {},
+        dependencies: { modules: [] },
+        env: [],
+      }),
+    );
+    const tk = createAppToolkit(app.appDir);
+    const mod = await tk.loadModule('module-zero');
+    expect(mod.domainKeys).toEqual([]);
+    expect(mod.providerBindings).toEqual([]);
+    expect(mod.integration).toBeNull();
+    await expect(tk.writeModuleIntegration('module-zero', { provider: 'x' })).rejects.toMatchObject({
+      code: 'VALIDATION_FAILED',
+      httpStatus: 400,
+      message: expect.stringContaining('无服务需求声明'),
+    });
+    app.dispose();
+  });
+
+  it('D4 域键共享（P13）：双方 configEditable false + PUT 400 分支③（他方同域异服务——并集计数）', async () => {
+    const app = createTempApp('tbox-d4-');
+    invalidateContractsResolver();
+    const store = joinStore(app.appDir, 'contracts');
+    writeFakeContractsPackage(store, { version: '0.9.0' });
+    linkContracts(app.appDir, store, { subdir: 'apps/server' });
+    const manifest = (name: string, service: string): string =>
+      JSON.stringify({
+        schemaVersion: 1,
+        name,
+        version: '0.1.0',
+        kind: 'business',
+        contributes: { services: [{ service, optional: false }] },
+        dependencies: { modules: [] },
+        env: [],
+      });
+    writeAppFile(app.appDir, 'packages/module-a/tbox.module.json', manifest('module-a', 'parking.alpha'));
+    writeAppFile(app.appDir, 'packages/module-b/tbox.module.json', manifest('module-b', 'parking.beta'));
+    const tk = createAppToolkit(app.appDir);
+    const a = await tk.loadModule('module-a');
+    const b = await tk.loadModule('module-b');
+    expect(a.configEditable).toBe(false);
+    expect(b.configEditable).toBe(false);
+    await expect(tk.writeModuleIntegration('module-a', { provider: 'x' })).rejects.toMatchObject({
+      code: 'VALIDATION_FAILED',
+      httpStatus: 400,
+      message: expect.stringContaining('由 module-a、module-b 共用'),
+    });
+    app.dispose();
+  });
+
+  it('D5 死键扫尾：moduleDomainKey/moduleDomainKeyOf 全链删除（源文件内容断言）', () => {
+    const read = (rel: string): string => readFileSync(fileURLToPath(new URL(rel, import.meta.url)), 'utf8');
+    expect(read('../src/views/modules.ts')).not.toContain('moduleDomainKeyOf');
+    expect(read('../src/integrations/write.ts')).not.toContain('moduleDomainKey');
+    expect(read('../src/index.ts')).not.toContain('moduleDomainKeyOf');
+  });
+});
+
+describe('v4.4 include 协议 + Entry.layer + 层级 schema（F4/F5）', () => {
+  /** 层级 schema 测试基座：wanda 供给两服务（单域 schema 文件）+ module-parking 单域双 demand */
+  function layerHarness(): { app: TempApp; tk: AppToolkit; schemas: { query: object; parking: object } } {
+    const app = createTempApp('tbox-v44-');
+    invalidateContractsResolver();
+    const store = joinStore(app.appDir, 'contracts');
+    writeFakeContractsPackage(store, {
+      version: '0.9.0',
+      resolveBody: [
+        'const slot = integrations && integrations.services && integrations.services[service];',
+        'if (!slot) return { status: "service-not-configured" };',
+        'const prov = typeof slot.provider === "string" ? slot.provider : slot.provider && slot.provider.provider;',
+        'if (!prov) return { status: "service-not-configured" };',
+        'return { status: "ok", effective: { provider: prov, implementation: slot.implementation || "impl@1", config: slot.config || {} } };',
+      ].join(' '),
+    });
+    linkContracts(app.appDir, store, { subdir: 'apps/server' });
+    const schemas = {
+      query: { type: 'object', properties: { baseUrl: { type: 'string', format: 'uri' } }, required: ['baseUrl'] },
+      parking: { type: 'object', properties: { mallId: { type: 'string' } } },
+    };
+    writeAppFile(
+      app.appDir,
+      'packages/provider-w/tbox.module.json',
+      JSON.stringify({
+        schemaVersion: 1,
+        name: 'provider-w',
+        version: '0.1.0',
+        kind: 'business',
+        contributes: {
+          providers: {
+            slots: [
+              { service: 'parking.query', provider: 'wanda', implementation: 'wanda-parking@1', credentialType: 'wanda-c', configSchema: 'schemas/query.json' },
+              { service: 'parking.payment', provider: 'wanda', implementation: 'wanda-parking@1', credentialType: 'wanda-c', configSchema: 'schemas/parking.json' },
+            ],
+          },
+        },
+        dependencies: { modules: [] },
+        env: [],
+      }),
+    );
+    writeAppFile(app.appDir, 'packages/provider-w/schemas/query.json', JSON.stringify(schemas.query));
+    writeAppFile(app.appDir, 'packages/provider-w/schemas/parking.json', JSON.stringify(schemas.parking));
+    writeAppFile(
+      app.appDir,
+      'packages/module-parking/tbox.module.json',
+      JSON.stringify({
+        schemaVersion: 1,
+        name: 'module-parking',
+        version: '0.1.0',
+        kind: 'business',
+        contributes: { services: [{ service: 'parking.query', optional: false }, { service: 'parking.payment', optional: true }] },
+        dependencies: { modules: [] },
+        env: [],
+      }),
+    );
+    writeAppFile(
+      app.appDir,
+      'config/integrations.json',
+      JSON.stringify({
+        provider: 'wanda',
+        instances: [{ id: 'mall-bj-01', name: '北京店' }],
+        defaultInstanceId: 'mall-bj-01',
+        domains: { parking: { provider: 'wanda' } },
+        services: { 'parking.query': { provider: 'wanda', implementation: 'wanda-parking@1' } },
+      }),
+    );
+    return { app, tk: createAppToolkit(app.appDir), schemas };
+  }
+
+  it('I1 include 正例：app/module 双键内嵌 + 未请求缺席（内嵌三律）+ issues 恒全量', async () => {
+    const h2 = harnessWithContracts();
+    const appInc = await h2.tk.loadApp({ include: ['serviceResolutions', 'integrationSchemas'] });
+    expect(Object.keys(appInc.serviceResolutions!.resolutions).sort()).toEqual(['auth.alipay-login', 'parking.query']);
+    // harness 无供给 manifest → mock 足迹空（供给在场未声明形态由 S 系列覆盖）
+    expect(appInc.integrationSchemas).toEqual({ provider: 'mock', services: {} });
+    const modInc = await h2.tk.loadModule('module-parking', { include: ['serviceResolutions'] });
+    expect(Object.keys(modInc.serviceResolutions!.resolutions)).toEqual(['parking.query']); // demand 过滤
+    const batch = await h2.tk.loadServiceResolutions();
+    expect(modInc.serviceResolutions!.issues).toEqual(batch.issues); // 恒全量（不随过滤收窄）
+    // 未请求 → 字段缺席（D30 三律：未请求 = 缺席）
+    const plain = await h2.tk.loadApp();
+    expect('serviceResolutions' in plain).toBe(false);
+    expect('integrationSchemas' in plain).toBe(false);
+    h2.app.dispose();
+  });
+
+  it('I2 未知/越权键 400 + 校验先于 404 + 重复键去重（P15）', async () => {
+    const h2 = harnessWithContracts();
+    await expect(h2.tk.loadApp({ include: ['bogus'] })).rejects.toMatchObject({
+      code: 'VALIDATION_FAILED', httpStatus: 400, fields: ['include'],
+    });
+    // 越权：provider 白名单仅 integrationSchemas——且 400 先于 PROVIDER_NOT_FOUND
+    await expect(h2.tk.loadProvider('wanda', { include: ['serviceResolutions'] })).rejects.toMatchObject({
+      code: 'VALIDATION_FAILED', httpStatus: 400, fields: ['include'],
+    });
+    // 校验先于 MODULE_NOT_FOUND
+    await expect(h2.tk.loadModule('ghost', { include: ['bogus'] })).rejects.toMatchObject({
+      code: 'VALIDATION_FAILED', httpStatus: 400,
+    });
+    const ok = await h2.tk.loadApp({ include: ['serviceResolutions', 'serviceResolutions'] });
+    expect(ok.serviceResolutions).not.toBeNull();
+    h2.app.dispose();
+  });
+
+  it('I3 degrade：<0.9 → null 永不 503；形态异常包（严格面在场求值面缺席）→ null（双条件）', async () => {
+    const low = harnessWithContracts({ version: '0.8.2', withStrict: false });
+    expect((await low.tk.loadApp({ include: ['serviceResolutions'] })).serviceResolutions).toBeNull();
+    expect((await low.tk.loadApp({ include: ['integrationSchemas'] })).integrationSchemas).toEqual({ provider: 'mock', services: {} }); // 静态轴富化零 contracts
+    low.app.dispose();
+    const malformed = harnessWithContracts({ missingEvaluationExports: true });
+    expect((await malformed.tk.loadApp({ include: ['serviceResolutions'] })).serviceResolutions).toBeNull();
+    // 对照：求值轴端点同 fixture → 503（M3 已钉——门控与内嵌两机制不共用断言）
+    await expect(malformed.tk.loadServiceResolutions()).rejects.toMatchObject({ httpStatus: 503 });
+    malformed.app.dispose();
+  });
+
+  it('I4 P14 四处等价：批量 / 单体摘要基 / app 内嵌 / module 内嵌（deep-equal 含 layer）', async () => {
+    const h2 = layerHarness();
+    const batch = await h2.tk.loadServiceResolutions();
+    const appInc = await h2.tk.loadApp({ include: ['serviceResolutions'] });
+    const modInc = await h2.tk.loadModule('module-parking', { include: ['serviceResolutions'] });
+    expect(Object.keys(modInc.serviceResolutions!.resolutions).sort()).toEqual(['parking.payment', 'parking.query']); // demand = 双服务
+    for (const s of ['parking.query', 'parking.payment']) {
+      const single = await h2.tk.loadServiceResolution(s);
+      const { instances, inheritance, ...base } = single.resolution;
+      void instances;
+      void inheritance;
+      expect(batch.resolutions[s], s).toEqual(base);
+      expect(appInc.serviceResolutions!.resolutions[s], `app:${s}`).toEqual(base);
+      expect(modInc.serviceResolutions!.resolutions[s], `module:${s}`).toEqual(base);
+    }
+    h2.app.dispose();
+  });
+
+  it('I5 layer 一致性：Entry.layer ≡ inheritance 逆序首个有 provider 层；未配置双缺席', async () => {
+    const h2 = layerHarness();
+    const batch = await h2.tk.loadServiceResolutions();
+    for (const [s, entry] of Object.entries(batch.resolutions)) {
+      const single = await h2.tk.loadServiceResolution(s);
+      const expected = [...single.resolution.inheritance].reverse().find((i) => i.provider !== undefined)?.layer ?? null;
+      if (entry.provider === undefined) {
+        expect(entry.layer, `${s} 双缺席`).toBeUndefined();
+      } else {
+        expect(entry.layer, s).toEqual(expected);
+      }
+    }
+    // parking.payment 未配置（slot 缺席）→ provider/layer 双缺席（无孤儿态）
+    expect(batch.resolutions['parking.payment']?.provider).toBeUndefined();
+    expect(batch.resolutions['parking.payment']?.layer).toBeUndefined();
+    // parking.query 槽级 wanda → layer 'service'
+    expect(batch.resolutions['parking.query']).toMatchObject({ status: 'ok', provider: 'wanda', layer: 'service' });
+    h2.app.dispose();
+  });
+
+  it('S1 模块级层级 schema：demand ∩ 供给 + schema 文件原文（D32）+ 缺省缺席', async () => {
+    const h2 = layerHarness();
+    const mod = await h2.tk.loadModule('module-parking', { include: ['integrationSchemas'] });
+    expect(mod.integrationSchemas).toEqual({
+      provider: 'wanda', // resolveDomainBinding 单源（domains.parking）
+      services: {
+        'parking.query': { configSchema: h2.schemas.query },
+        'parking.payment': { configSchema: h2.schemas.parking },
+      },
+    });
+    const plain = await h2.tk.loadModule('module-parking');
+    expect('integrationSchemas' in plain).toBe(false);
+    h2.app.dispose();
+  });
+
+  it('S2 应用级：供给足迹全量（≠ AppView.services）+ root.provider 缺席 → null', async () => {
+    const h2 = layerHarness();
+    const appInc = await h2.tk.loadApp({ include: ['integrationSchemas'] });
+    expect(appInc.integrationSchemas).toEqual({
+      provider: 'wanda',
+      services: {
+        'parking.query': { configSchema: h2.schemas.query },
+        'parking.payment': { configSchema: h2.schemas.parking },
+      },
+    });
+    h2.app.dispose();
+    // root.provider 缺席 → null（未绑定——表单降级 ExtraFields）
+    const h3 = layerHarness();
+    writeAppFile(
+      h3.app.appDir,
+      'config/integrations.json',
+      JSON.stringify({
+        instances: [{ id: 'mall-bj-01', name: '北京店' }],
+        domains: { parking: { provider: 'wanda' } },
+        services: { 'parking.query': { provider: 'wanda', implementation: 'wanda-parking@1' } },
+      }),
+    );
+    expect((await h3.tk.loadApp({ include: ['integrationSchemas'] })).integrationSchemas).toBeNull();
+    h3.app.dispose();
+  });
+
+  it('S3 切换态批量：loadProvider include=integrationSchemas（供给轴逐服务）+ 未请求缺席', async () => {
+    const h2 = layerHarness();
+    const detail = await h2.tk.loadProvider('wanda', { include: ['integrationSchemas'] });
+    expect(detail.services['parking.query']?.integrationSchemas).toEqual({ configSchema: h2.schemas.query });
+    expect(detail.services['parking.payment']?.integrationSchemas).toEqual({ configSchema: h2.schemas.parking });
+    const plain = await h2.tk.loadProvider('wanda');
+    expect(plain.services['parking.query'] && 'integrationSchemas' in plain.services['parking.query']).toBe(false);
+    h2.app.dispose();
+  });
+
+  it('S4 多域模块 integrationSchemas → 整字段 null（D32——表单降级 ExtraFields）', async () => {
+    const app = createTempApp('tbox-s4-');
+    invalidateContractsResolver();
+    const store = joinStore(app.appDir, 'contracts');
+    writeFakeContractsPackage(store, { version: '0.9.0' });
+    linkContracts(app.appDir, store, { subdir: 'apps/server' });
+    writeAppFile(
+      app.appDir,
+      'packages/module-multi/tbox.module.json',
+      JSON.stringify({
+        schemaVersion: 1,
+        name: 'module-multi',
+        version: '0.1.0',
+        kind: 'business',
+        contributes: { services: [{ service: 'parking.query', optional: false }, { service: 'member.account', optional: false }] },
+        dependencies: { modules: [] },
+        env: [],
+      }),
+    );
+    const tk = createAppToolkit(app.appDir);
+    const mod = await tk.loadModule('module-multi', { include: ['integrationSchemas'] });
+    expect(mod.integrationSchemas).toBeNull();
+    expect(mod.serviceResolutions).toBeUndefined(); // 未请求
+    app.dispose();
+  });
+});