@tbox.cn/app-toolkit 0.1.0 → 0.3.0

package/tests/write-core.test.ts

@@ -22,10 +22,16 @@ interface Harness {
   credFile(stem: string): string;
 }
 
-function harness(opts: { rejectMarker?: string } = {}): Harness {
+function harness(opts: { rejectMarker?: string; zodRejectPaths?: string[][] } = {}): Harness {
   const app = createTempApp('tbox-write-core-');
   const store = join(app.appDir, 'contracts-store');
-  writeFakeContractsPackage(store, { version: '0.9.0', withStrict: true, rejectMarker: opts.rejectMarker });
+  writeFakeContractsPackage(store, {
+    version: '0.9.0',
+    withStrict: true,
+    rejectMarker: opts.rejectMarker,
+    zodRejectPaths: opts.zodRejectPaths,
+    slots: ['parking.query'],
+  });
   linkContracts(app.appDir, store, { subdir: 'apps/server' });
   writeAppFile(app.appDir, INTEGRATIONS_FILE, JSON.stringify({ services: {} }, null, 2));
   const tk = createAppToolkit(app.appDir);
@@ -67,10 +73,10 @@ describe('写核心管线（FX-1c）', () => {
     // 回读逐字等价（GET = PUT = 落盘物）
     const app = await h.tk.loadApp();
     expect(app.integration).toEqual(node);
-    // dryRun + 不同节点 → 不落盘
+    // dryRun + 不同节点 → 不落盘；files = 将触碰预览（D35——与真实写逐字对称）
     const r2 = await h.tk.writeAppIntegration({ provider: 'changed' } as never, { dryRun: true });
     expect(r2.written).toBe(false);
-    expect(r2.files).toEqual([]);
+    expect(r2.files).toEqual([INTEGRATIONS_FILE]);
     expect(h.readConfig().provider).toBe('mock-x');
   });
 
@@ -96,13 +102,13 @@ describe('写核心管线（FX-1c）', () => {
     expect(readFileSync(h.credFile('joycity-parking.query'), 'utf8')).toContain('ROTATED-SECOND');
   });
 
-  it('T3 dryRun + credentials（B3 钉死）：零落盘 + credentials[] 预览 + files 恒 []', async () => {
+  it('T3 dryRun + credentials（B3 钉死）：零落盘 + credentials[] 预览 + files = 双路径预览（D35）', async () => {
     const r = await h.tk.writeServiceIntegration('parking.query', { provider: 'joycity' }, {
       dryRun: true,
       credentials: { type: 'api-key', values: { apiKey: 'SECRET-DRYRUN' } },
     });
     expect(r.written).toBe(false);
-    expect(r.files).toEqual([]);
+    expect(r.files).toEqual([INTEGRATIONS_FILE, 'config/credentials/joycity-parking.query.json']);
     expect(r.credentials).toEqual([{ stem: 'joycity-parking.query', ref: 'secret://joycity-parking.query', overwrote: false }]);
     // 凭据目录与 integrations.json 均零变更
     expect(existsSync(h.credFile('joycity-parking.query'))).toBe(false);
@@ -119,21 +125,114 @@ describe('写核心管线（FX-1c）', () => {
       credentials: { type: 'api-key', values: { apiKey: 'SHOULD-NOT-WRITE' } },
     });
     expect(r.credentials[0].overwrote).toBe(true);
+    // D35：no-diff + 同 stem → 仅凭据路径入预览（integrations 节点无变更不入清单）
+    expect(r.files).toEqual(['config/credentials/joycity-parking.query.json']);
     expect(readFileSync(h.credFile('joycity-parking.query'), 'utf8')).toBe(before);
   });
 
-  it('T5 严格校验失败次序：凭据零落盘 + integrations 零变更（落盘后置于校验通过）', async () => {
+  it('T-sym dryRun ≡ 真实写（D35 对称性）：同 body files 逐字相等 + written 相反 + dryRun 腿磁盘零变更', async () => {
+    const node = { provider: 'joycity', config: { baseUrl: 'https://sym.example' } };
+    const dry = await h.tk.writeServiceIntegration('parking.query', node, {
+      dryRun: true,
+      credentials: { type: 'api-key', values: { apiKey: 'SYM-DRY' } },
+    });
+    expect(dry.written).toBe(false);
+    // dryRun 零副作用（integrations 与凭据均零落盘）→ 免重置 harness 直接接真实写
+    expect(existsSync(h.credFile('joycity-parking.query'))).toBe(false);
+    expect((h.readConfig().services as Record<string, unknown>)['parking.query']).toBeUndefined();
+    const real = await h.tk.writeServiceIntegration('parking.query', node, {
+      credentials: { type: 'api-key', values: { apiKey: 'SYM-DRY' } },
+    });
+    expect(real.written).toBe(true);
+    expect(real.restartScheduled).toBe(false); // 工厂未注入 onApplied
+    // 对称性核心：同 body → files 逐字相等（integrations + 凭据工件双路径）
+    expect(dry.files).toEqual(real.files);
+    expect(dry.files).toEqual([INTEGRATIONS_FILE, 'config/credentials/joycity-parking.query.json']);
+  });
+
+  it('T5 严格校验失败次序（A1）：400 VALIDATION_FAILED + message 直通 + 凭据零落盘 + integrations 零变更', async () => {
     h.app.dispose();
     h = harness({ rejectMarker: '__reject__' });
     await expect(
       h.tk.writeServiceIntegration('parking.query', { provider: 'joycity', __reject__: true } as never, {
         credentials: { type: 'api-key', values: { apiKey: 'X' } },
       }),
-    ).rejects.toThrow();
+    ).rejects.toMatchObject({
+      code: 'VALIDATION_FAILED',
+      httpStatus: 400,
+      message: expect.stringContaining('fake strict reject'),
+    });
     expect(existsSync(h.credFile('joycity-parking.query'))).toBe(false);
     expect((h.readConfig().services as Record<string, unknown>)['parking.query']).toBeUndefined();
   });
 
+  it('T9 zod 形拒绝（A1）：400 + fields 节点相对前缀剥离（applyService）', async () => {
+    h.app.dispose();
+    h = harness({ zodRejectPaths: [['services', 'parking.query', 'config', 'x']] });
+    await expect(
+      h.tk.writeServiceIntegration('parking.query', { provider: 'joycity', config: { x: 1 } }),
+    ).rejects.toMatchObject({ code: 'VALIDATION_FAILED', httpStatus: 400, fields: ['config.x'] });
+    expect(existsSync(h.credFile('joycity-parking.query'))).toBe(false);
+  });
+
+  it('T10 zod 形拒绝 root 级（A1）：applyApp fields 原样（无前缀可剥）', async () => {
+    h.app.dispose();
+    h = harness({ zodRejectPaths: [['config', 'requestTimeoutMs']] });
+    await expect(
+      h.tk.writeAppIntegration({ provider: 'mock-x', config: { requestTimeoutMs: 1 } } as never),
+    ).rejects.toMatchObject({ code: 'VALIDATION_FAILED', httpStatus: 400, fields: ['config.requestTimeoutMs'] });
+  });
+
+  it('T11 敌对服务名（A2）：路径参数不在词汇 → 404（身份判据先于 deriveStem）', async () => {
+    await expect(
+      h.tk.writeServiceIntegration('a/b', { provider: 'joycity' }, { credentials: { type: 'api-key', values: { apiKey: 'X' } } }),
+    ).rejects.toMatchObject({ code: 'SERVICE_NOT_FOUND', httpStatus: 404 });
+    await expect(h.tk.deleteServiceIntegration('a/b')).rejects.toMatchObject({ code: 'SERVICE_NOT_FOUND', httpStatus: 404 });
+  });
+
+  it('T11b 敌对 provider 值位（第一道防线对照）：400 + fields', async () => {
+    await expect(
+      h.tk.writeServiceIntegration('parking.query', { provider: 'a/b' }, { credentials: { type: 'api-key', values: { apiKey: 'X' } } }),
+    ).rejects.toMatchObject({ code: 'VALIDATION_FAILED', httpStatus: 400, fields: ['root.provider'] });
+  });
+
+  it('T12 credentials 缺 type（A1）：400 fields credentials.type（无声明厂商亦要求非空字符串）', async () => {
+    await expect(
+      h.tk.writeServiceIntegration('parking.query', { provider: 'joycity' }, { credentials: { type: '', values: { apiKey: 'X' } } }),
+    ).rejects.toMatchObject({ code: 'VALIDATION_FAILED', httpStatus: 400, fields: ['credentials.type'] });
+    await expect(
+      h.tk.writeAppIntegration({ provider: 'p-x' } as never, {
+        credentialsByInstance: { 'm-1': { values: { apiKey: 'X' } } },
+      } as never),
+    ).rejects.toMatchObject({ code: 'VALIDATION_FAILED', httpStatus: 400, fields: ['credentials.type'] });
+  });
+
+  it('W1 未知服务 PUT/DELETE 404（A2）：词汇 ∪ 已配置判据外', async () => {
+    await expect(h.tk.writeServiceIntegration('typo.query', { provider: 'mock' })).rejects.toMatchObject({
+      code: 'SERVICE_NOT_FOUND',
+      httpStatus: 404,
+    });
+    await expect(h.tk.deleteServiceIntegration('typo.query')).rejects.toMatchObject({
+      code: 'SERVICE_NOT_FOUND',
+      httpStatus: 404,
+    });
+  });
+
+  it('W2 已配置孤儿键 PUT/DELETE 200（A2 判据含已配置——词汇外可继续写/删）', async () => {
+    // 预置孤儿键（不在词汇）+ 节点变更（避开 no-diff 短路——本用例锚身份判据非幂等语义）
+    writeAppFile(h.app.appDir, INTEGRATIONS_FILE, JSON.stringify({ services: { 'orphan.key': { provider: 'mock', config: { a: 1 } } } }, null, 2));
+    const r = await h.tk.writeServiceIntegration('orphan.key', { provider: 'mock' });
+    expect(r.written).toBe(true);
+    const d = await h.tk.deleteServiceIntegration('orphan.key');
+    expect(d.written).toBe(true);
+  });
+
+  it('W3 词汇成员 DELETE 缺席节点：幂等 written:false（幂等语义仅判据内成员保留）', async () => {
+    const r = await h.tk.deleteServiceIntegration('parking.query');
+    expect(r.written).toBe(false);
+    expect(r.files).toEqual([]);
+  });
+
   it('T6 恶意 map 键 400（F4）：instances id / slot instances 键 / credentialsByInstance 键 / ByInstance 键', async () => {
     // root.instances[].id
     await expect(

package/dist/contracts-resolver-QM4FBQQV.js

@@ -1 +0,0 @@
-import{b as a,c as b}from"./chunk-VV3ERZXS.js";export{b as invalidateContractsResolver,a as resolveContractsForApp};