@tbox.cn/app-toolkit 0.1.0 → 0.3.0

package/tests/credentials-view.test.ts

@@ -0,0 +1,152 @@
+import { describe, it, expect } from 'vitest';
+import { join } from 'node:path';
+import { createAppToolkit, type AppToolkit } from '../src/factory.js';
+import { invalidateContractsResolver } from '../src/core/contracts-resolver.js';
+import { createTempApp, writeFakeContractsPackage, linkContracts, writeAppFile, type TempApp } from './demo-app.js';
+
+/**
+ * v4.4 D33 凭据域视图矩阵（F6——C1-C5）：键集三断言（app.byInstance = 注册表 ids ∩ 有 ref /
+ * services = 已配置 / services.byInstance = 节点 instances map 全键含 '*'）/ null 语义
+ * （未就绪——诊断归 issues #1）/ 零真值（masked 形态）/ credential-types 清单 + ?provider= 过滤 /
+ * 删净断言（instances[].credential、组合单体 credentialSchema——序列化面不信 typecheck）。
+ */
+
+const OK_RESOLVE = [
+  'const slot = integrations && integrations.services && integrations.services[service];',
+  'if (!slot) return { status: "service-not-configured" };',
+  'const prov = typeof slot.provider === "string" ? slot.provider : slot.provider && slot.provider.provider;',
+  'if (!prov) return { status: "service-not-configured" };',
+  'return { status: "ok", effective: { provider: prov, implementation: slot.implementation || "impl@1", config: slot.config || {}, ...(slot.credentialRef ? { credentialRef: slot.credentialRef } : {}) } };',
+].join(' ');
+
+function credHarness(): { app: TempApp; tk: AppToolkit } {
+  const app = createTempApp('tbox-cred-');
+  invalidateContractsResolver();
+  const store = join(app.appDir, 'contracts');
+  writeFakeContractsPackage(store, { version: '0.9.0', resolveBody: OK_RESOLVE });
+  linkContracts(app.appDir, store, { subdir: 'apps/server' });
+  // 供给 manifest（wanda 两槽共享 type + schema 文件；mock '-' 槽）——types 清单与组合单体删净断言用
+  writeAppFile(
+    app.appDir,
+    'packages/provider-w/tbox.module.json',
+    JSON.stringify({
+      schemaVersion: 1,
+      name: 'provider-w',
+      version: '0.1.0',
+      kind: 'business',
+      contributes: {
+        providers: {
+          slots: [
+            { service: 'parking.payment', provider: 'wanda', implementation: 'wanda-parking@1', credentialType: 'wanda-c-signed-v1', credentialSchema: 'schemas/cred.json' },
+            { service: 'mall.info', provider: 'mock', implementation: 'mock-mall@1', credentialType: '-' },
+          ],
+        },
+      },
+      dependencies: { modules: [] },
+      env: [],
+    }),
+  );
+  writeAppFile(app.appDir, 'packages/provider-w/schemas/cred.json', JSON.stringify({ type: 'object', properties: { appKey: { type: 'string' } } }));
+  writeAppFile(
+    app.appDir,
+    'config/integrations.json',
+    JSON.stringify({
+      provider: 'wanda',
+      credentialRef: 'secret://wanda-global',
+      instances: [
+        { id: 'mall-bj-01', name: '北京店' },
+        { id: 'mall-sh-01', name: '上海店' },
+      ],
+      credentialRefByInstance: { 'mall-sh-01': 'secret://wanda-mall-sh-01-global', 'ghost-id': 'secret://wanda-ghost' },
+      services: {
+        'parking.payment': {
+          provider: 'wanda',
+          implementation: 'wanda-parking@1',
+          credentialRef: 'secret://wanda-parking.payment',
+          instances: { 'mall-bj-01': { credentialRef: 'secret://wanda-mall-bj-01-parking' }, '*': {} },
+        },
+      },
+    }),
+  );
+  writeAppFile(app.appDir, 'config/credentials/wanda-global.json', JSON.stringify({ type: 'wanda-c-signed-v1', appKey: 'KEY-GLOBAL', salt: 'SALT-GLOBAL-VALUE' }));
+  writeAppFile(app.appDir, 'config/credentials/wanda-mall-sh-01-global.json', JSON.stringify({ type: 'wanda-c-signed-v1', appKey: 'SH' }));
+  writeAppFile(app.appDir, 'config/credentials/wanda-parking.payment.json', JSON.stringify({ type: 'wanda-c-signed-v1', appKey: 'SVC-KEY' }));
+  // wanda-mall-bj-01-parking.json 故意缺席（文件缺失 → null——诊断归 issues #1）
+  return { app, tk: createAppToolkit(app.appDir) };
+}
+
+describe('v4.4 D33 凭据域（F6）', () => {
+  it('C1 键集三断言：app.byInstance = 注册表 ∩ 有 ref；services = 已配置；byInstance = 节点全键含 *', async () => {
+    const { app, tk } = credHarness();
+    const view = await tk.loadCredentials();
+    // app 本位 = wanda-global echo
+    expect(view.app.credential).toEqual({
+      type: 'wanda-c-signed-v1',
+      ref: 'secret://wanda-global',
+      file: 'config/credentials/wanda-global.json',
+      masked: { appKey: 'KE****', salt: 'SA****' },
+    });
+    // app.byInstance：mall-bj-01（无 ref）不出现；ghost-id（未注册 ref）跳过不虚报；mall-sh-01 在场
+    expect(Object.keys(view.app.byInstance)).toEqual(['mall-sh-01']);
+    expect(view.app.byInstance['mall-sh-01']?.ref).toBe('secret://wanda-mall-sh-01-global');
+    // services 键集 = 已配置服务；byInstance 键集 = 节点 instances map 全键（含 '*'）
+    expect(Object.keys(view.services)).toEqual(['parking.payment']);
+    expect(Object.keys(view.services['parking.payment']!.byInstance).sort()).toEqual(['*', 'mall-bj-01']);
+    app.dispose();
+  });
+
+  it('C2 null 语义：ref 缺席/文件缺失 → null（未就绪——诊断归 issues #1 分工）', async () => {
+    const { app, tk } = credHarness();
+    const view = await tk.loadCredentials();
+    expect(view.services['parking.payment']!.credential).toEqual({
+      type: 'wanda-c-signed-v1',
+      ref: 'secret://wanda-parking.payment',
+      file: 'config/credentials/wanda-parking.payment.json',
+      masked: { appKey: 'SV****' },
+    });
+    expect(view.services['parking.payment']!.byInstance['*']).toBeNull(); // 无 ref → null
+    expect(view.services['parking.payment']!.byInstance['mall-bj-01']).toBeNull(); // ref 在场文件缺失 → null
+    app.dispose();
+  });
+
+  it('C3 零真值：序列化无明文；≤4 字符全掩码（掩码单源）', async () => {
+    const { app, tk } = credHarness();
+    const view = await tk.loadCredentials();
+    const serialized = JSON.stringify(view);
+    expect(serialized).not.toContain('KEY-GLOBAL');
+    expect(serialized).not.toContain('SALT-GLOBAL-VALUE');
+    expect(serialized).not.toContain('SVC-KEY');
+    expect(view.app.byInstance['mall-sh-01']?.masked.appKey).toBe('****'); // ≤4 字符全掩码
+    app.dispose();
+  });
+
+  it('C4 credential-types：全量清单 + ?provider= 过滤（未知 → 空不 404）+ schema 原文', async () => {
+    const { app, tk } = credHarness();
+    const all = await tk.loadCredentialTypes();
+    expect(all.types.map((t) => t.credentialType)).toEqual(['-', 'wanda-c-signed-v1']);
+    const wanda = await tk.loadCredentialTypes('wanda');
+    expect(wanda.types).toHaveLength(1);
+    expect(wanda.types[0]).toEqual({
+      credentialType: 'wanda-c-signed-v1',
+      owner: expect.any(String),
+      credentialSchema: { type: 'object', properties: { appKey: { type: 'string' } } },
+    });
+    expect((await tk.loadCredentialTypes('mock')).types.map((t) => t.credentialType)).toEqual(['-']);
+    expect((await tk.loadCredentialTypes('ghost')).types).toEqual([]);
+    app.dispose();
+  });
+
+  it('C5 删净断言：单体 instances[].credential 与组合单体 credentialSchema 全链不在场', async () => {
+    const { app, tk } = credHarness();
+    const detail = await tk.loadServiceResolution('parking.payment');
+    const inst = detail.resolution.instances.find((i) => i.instanceId === 'mall-bj-01');
+    // 假 resolve 仅读槽级 ref（简化级联）——effective.credentialRef = 槽级 secret://wanda-parking.payment
+    expect(inst?.effective?.credentialRef).toBe('secret://wanda-parking.payment');
+    expect(inst && 'credential' in inst).toBe(false);
+    expect('credential' in JSON.parse(JSON.stringify(detail.resolution))).toBe(false);
+    const combo = await tk.loadProviderService('wanda', 'parking.payment');
+    expect('credentialSchema' in combo.integrationSchemas).toBe(false);
+    expect(combo.implementations[0]?.credentialType).toBe('wanda-c-signed-v1'); // 寻址键保留
+    app.dispose();
+  });
+});

package/tests/demo-app.ts

@@ -48,15 +48,24 @@ export interface FakeContractsOptions {
   /** resolveEffectiveService 自定义函数体（FX-2c O4 fixture：默认恒 service-not-configured；
    *  入参 (integrations, service, instanceId, supplies)，需 return EffectiveServiceResolution 形状） */
   resolveBody?: string;
+  /** service-slots.json 词汇（P9 身份判据/求值键集；缺省不物化 = 词汇空） */
+  slots?: string[];
+  /** zod 形拒绝 fixture（A1 T9/T10）：parseIntegrationsConfig 恒抛带 issues 的结构化错误
+   *  （结构性 ZodError 形——issues[].path 供 fields 断言；仅在专属 fixture 上使用） */
+  zodRejectPaths?: string[][];
 }
 
 /** 假 contracts 包：package.json exports 形态逐字段复刻发布面（types+import 双条件、无 require/default）
  *  ——resolver 不经 exports 解析（包根直探），该形态为 E4 类错误的机械防线。 */
 export function writeFakeContractsPackage(packageRoot: string, opts: FakeContractsOptions = {}): void {
-  const { version = '0.9.0', withStrict = true, withDist = true, brokenDist = false, missingEvaluationExports = false, rejectMarker, resolveBody } = opts;
+  const { version = '0.9.0', withStrict = true, withDist = true, brokenDist = false, missingEvaluationExports = false, rejectMarker, resolveBody, slots, zodRejectPaths } = opts;
   const strictBody = withStrict
     ? `export function parseIntegrationsConfig(raw) { ${
         rejectMarker ? `if (JSON.stringify(raw).includes(${JSON.stringify(rejectMarker)})) throw new Error("fake strict reject"); ` : ''
+      }${
+        zodRejectPaths
+          ? `throw Object.assign(new Error("fake zod reject"), { issues: ${JSON.stringify(zodRejectPaths.map((p) => ({ path: p })))} }); `
+          : ''
       }return raw; }`
     : '';
   const resolveLine = `export function resolveEffectiveService(integrations, service, instanceId, supplies) { ${
@@ -104,6 +113,10 @@ export function writeFakeContractsPackage(packageRoot: string, opts: FakeContrac
     mkdirSync(join(packageRoot, 'src'), { recursive: true });
     writeFileSync(join(packageRoot, 'src', 'runtime.ts'), exportsBody);
   }
+  // service-slots.json（P9 词汇源——探测链发现位 = 包根；缺省不物化 = 词汇空）
+  if (slots && slots.length > 0) {
+    writeFileSync(join(packageRoot, 'service-slots.json'), `${JSON.stringify({ slots }, null, 2)}\n`);
+  }
 }
 
 export interface LinkOptions {

package/tests/file-cache.test.ts

@@ -180,7 +180,9 @@ describe('Freshness Contract W3/W7 — agent 动线矩阵（工厂方法级；FX
       }),
     );
     const modules = await tk.loadModules();
-    expect(modules.modules.map((m) => m.id)).toContain('provider-x');
+    // provider 家族包不在清单（2026-09-16 bug-fix）——排除本身随目录新增即时生效；
+    // loadModules 新鲜度由下方 case c（module-sdk-y）承载，供给轴新鲜度见下两行
+    expect(modules.modules.map((m) => m.id)).not.toContain('provider-x');
     const providers = await tk.loadProviders();
     expect(providers.providers.map((p) => p.provider)).toContain('joycity');
 

package/tests/naming-alignment.test.ts

@@ -6,7 +6,7 @@ import { describe, it, expect } from 'vitest';
  * （方法名断言依赖 factory 导出——届时 import { createAppToolkit } 逐行断言 typeof）。
  */
 
-/** 13 行映射表（api.md §8 单源；C4 补全为逐行断言） */
+/** 15 行映射表（api.md §8 单源——v4.4 +GET /credentials、+GET /credential-types） */
 export const URL_METHOD_MAP: ReadonlyArray<{ method: string; url: string }> = [
   // ── 静态（7）──
   { method: 'loadModules', url: 'GET /modules' },
@@ -19,6 +19,9 @@ export const URL_METHOD_MAP: ReadonlyArray<{ method: string; url: string }> = [
   // ── 求值（2）──
   { method: 'loadServiceResolutions', url: 'GET /service-resolutions' },
   { method: 'loadServiceResolution', url: 'GET /service-resolutions/:service' },
+  // ── 凭据域（2；v4.4 D33）──
+  { method: 'loadCredentials', url: 'GET /credentials' },
+  { method: 'loadCredentialTypes', url: 'GET /credential-types' },
   // ── 写（4）──
   { method: 'writeAppIntegration', url: 'PUT /app/integration' },
   { method: 'writeModuleIntegration', url: 'PUT /modules/:module/integration' },
@@ -26,10 +29,10 @@ export const URL_METHOD_MAP: ReadonlyArray<{ method: string; url: string }> = [
   { method: 'deleteServiceIntegration', url: 'DELETE /services/:service/integration' },
 ];
 
-describe('naming-alignment（L1 映射表——C2 骨架）', () => {
-  it('映射表骨架 = 13 行（静态 7 + 求值 2 + 写 4）——计数守卫', () => {
-    expect(URL_METHOD_MAP).toHaveLength(13);
-    expect(URL_METHOD_MAP.filter((r) => r.url.startsWith('GET '))).toHaveLength(9);
+describe('naming-alignment（L1 映射表）', () => {
+  it('映射表 = 15 行（静态 7 + 求值 2 + 凭据域 2 + 写 4）——计数守卫（v4.4）', () => {
+    expect(URL_METHOD_MAP).toHaveLength(15);
+    expect(URL_METHOD_MAP.filter((r) => r.url.startsWith('GET '))).toHaveLength(11);
     expect(URL_METHOD_MAP.filter((r) => r.url.startsWith('PUT '))).toHaveLength(3);
     expect(URL_METHOD_MAP.filter((r) => r.url.startsWith('DELETE '))).toHaveLength(1);
   });

package/tests/vendor-schema-keywords.test.ts

@@ -0,0 +1,101 @@
+import { describe, it, expect } from 'vitest';
+import { readdirSync, readFileSync, statSync } from 'node:fs';
+import { join } from 'node:path';
+import { fileURLToPath } from 'node:url';
+
+/**
+ * 同仓关键词矩阵静态断言（v4.4 D32 配套——tbox-app 侧义务）：
+ * 真实 vendor schema 文件（modules/<pkg>/schemas/**，config + credentials 双面）关键词
+ * ⊆ agtcodingbox SchemaForm v2 渲染器支持集（清单钉 module-tab-config-refinement Note
+ * 前端配套节：format/minLength/maxLength/additionalProperties/$schema 提示级不降级；
+ * oneOf/anyOf/$ref/items/patternProperties 只读降级 + 值保全）。
+ *
+ * 断言红 = 新 vendor schema 引入渲染器不支持的键 → 人工确认渲染器扩容或改 schema 后
+ * 同批更新 SUPPORTED（禁止静默扩清单——该断言是「表单引导能力」的tripwire）。
+ */
+
+const SUPPORTED: ReadonlySet<string> = new Set([
+  // 结构基础（SchemaForm v2 全渲染）
+  'type', 'properties', 'required', 'enum', 'title', 'description', 'default',
+  'minimum', 'maximum', 'writeOnly',
+  // 提示级（note 扩容清单——不降级）
+  'format', 'minLength', 'maxLength', 'additionalProperties', '$schema',
+  // 结构性（只读降级 + 值保全——支持集含之，出现不红）
+  'oneOf', 'anyOf', '$ref', 'items', 'patternProperties',
+]);
+
+/** 递归走已知 subschema 位，收集 schema 节点自身键（properties 值下的键 = 字段名，不属关键词） */
+function collectKeywords(node: unknown, out: Set<string>): void {
+  if (Array.isArray(node)) {
+    for (const v of node) collectKeywords(v, out);
+    return;
+  }
+  if (!node || typeof node !== 'object') return;
+  for (const [k, v] of Object.entries(node as Record<string, unknown>)) {
+    out.add(k);
+    if (k === 'properties' || k === 'patternProperties') {
+      for (const sv of Object.values(v as Record<string, unknown>)) collectKeywords(sv, out);
+    } else if (k === 'items' && v !== null && typeof v === 'object') {
+      collectKeywords(v, out);
+    } else if ((k === 'oneOf' || k === 'anyOf' || k === 'allOf') && Array.isArray(v)) {
+      for (const sv of v) collectKeywords(sv, out);
+    } else if (k === 'additionalProperties' && v !== null && typeof v === 'object') {
+      collectKeywords(v, out);
+    } else if (k === '$defs' || k === 'definitions') {
+      for (const sv of Object.values(v as Record<string, unknown>)) collectKeywords(sv, out);
+    }
+  }
+}
+
+function schemaFiles(): Array<{ pkg: string; rel: string }> {
+  const modulesRoot = join(fileURLToPath(new URL('../../..', import.meta.url)), 'modules');
+  const out: Array<{ pkg: string; rel: string }> = [];
+  for (const pkg of readdirSync(modulesRoot)) {
+    const dir = join(modulesRoot, pkg, 'schemas');
+    if (!statSyncSafe(dir)) continue;
+    (function scan(d: string): void {
+      for (const e of readdirSync(d)) {
+        const p = join(d, e);
+        if (statSync(p).isDirectory()) scan(p);
+        else if (e.endsWith('.json')) out.push({ pkg, rel: p });
+      }
+    })(dir);
+  }
+  return out;
+}
+
+function statSyncSafe(p: string): boolean {
+  try {
+    return statSync(p).isDirectory();
+  } catch {
+    return false;
+  }
+}
+
+describe('vendor schema 关键词矩阵 ⊆ 渲染器支持集（D32 表单引导 tripwire）', () => {
+  it('modules/**/schemas 全文件关键词 ⊆ SUPPORTED（红 = 渲染器扩容人工确认）', () => {
+    const files = schemaFiles();
+    expect(files.length, 'vendor schema 文件扫描面非空（防目录改名静默失效）').toBeGreaterThan(5);
+    for (const { pkg, rel } of files) {
+      const keywords = new Set<string>();
+      try {
+        collectKeywords(JSON.parse(readFileSync(rel, 'utf8')), keywords);
+      } catch (err) {
+        throw new Error(`vendor schema 解析失败（${pkg}）：${(err as Error).message}`);
+      }
+      for (const k of keywords) {
+        expect(SUPPORTED.has(k), `${pkg} schema 关键词 "${k}" ∉ 渲染器支持集——确认 SchemaForm v2 扩容后同批更新本清单`).toBe(true);
+      }
+    }
+  });
+
+  it('实际用到的关键词 ⊆ SUPPORTED 且扫描面覆盖 config/credentials 双面（自检）', () => {
+    const files = schemaFiles();
+    const used = new Set<string>();
+    for (const { rel } of files) collectKeywords(JSON.parse(readFileSync(rel, 'utf8')), used);
+    // 实测基线（2026-09 扫描）：14 键——防「提取器失效全空集」假绿
+    for (const k of ['$schema', 'type', 'properties', 'required', 'format', 'writeOnly', 'additionalProperties']) {
+      expect(used.has(k), `基线关键词 ${k} 未被提取到——提取器或目录布局变化，人工核对`).toBe(true);
+    }
+  });
+});