@tbox.cn/app-toolkit 0.1.0

package/src/integrations/predicate-io.ts

@@ -0,0 +1,199 @@
+import { existsSync, readFileSync, readdirSync } from 'node:fs';
+import { join } from 'node:path';
+import type { WalkManifestsResult } from '../assembly/walk-manifests.js';
+
+/**
+ * 谓词装配单源（FX-2b/F1）：CLI doctor 规则 与 toolkit 工厂（求值轴 / SaveResult.issues）
+ * 共用同一 I/O 装配与供给/需求聚合——「面板 issues ≡ doctor issues」的机制保证。
+ *
+ * 迁移源：cli/src/doctor/schema-reader.ts（collectVendorSchemaProfiles，105 行）
+ * + doctor 规则壳内联段（#1 effective stem 收集含 root ByInstance/标量兜底 + env 通道 +
+ * #9 realmSwitchHints + malls 注册表 + moduleResourceNeeds）。
+ *
+ * **装配源 = walkManifests 双通道产物**（声明性改进：sdk 模式模块（npmModules 登记、
+ * node_modules 消费）从 doctor 原单通道（listLocalModules = packages/* 本地扫描）的静默
+ * 忽略，转纳入检查面——与 toolkit 求值轴同源）。
+ *
+ * env 参数注入（默认 process.env——工厂边缘）：#1 的 env 通道兜底（wanda env 化形态：
+ * stem kebab → UPPER_SNAKE，env 键在场即视为已供给，不算缺文件）。
+ */
+
+export interface PredicateIoInputs {
+  /** #1：effective 候选 stem → 缺文件（env 通道在场不算缺失） */
+  credentialFileMissing: Record<string, boolean>;
+  /** #2：凭据文件 stem → .type（无 type 则缺键） */
+  credentialFileType: Record<string, string | undefined>;
+  /** #6：credentialType → schema 引用文件缺失 */
+  credentialSchemaMissing: Record<string, boolean>;
+  /** #7：厂商 → configSchema properties 键集并集 */
+  vendorConfigKeys: Record<string, Set<string>>;
+  /** #7：厂商 → configSchema 引用缺失（跳过该厂商死配置判定） */
+  vendorConfigSchemaMissing: Record<string, boolean>;
+  /** #9：实现覆盖跨厂商提示文案（已成形——谓词直投） */
+  realmSwitchHints: string[];
+  /** #8：root instances 注册表 ids（在场才传；缺席 → 键检查跳过） */
+  malls?: string[];
+  /** #15-#16：已装模块 id → manifest contributes.resources 声明 id 集 */
+  moduleResourceNeeds: Record<string, ReadonlySet<string>>;
+}
+
+/** 装配全产物（= PredicateIoInputs + 供给/需求聚合——喂 evaluateIntegrationServices 的
+ *  非 contracts/integrations 入参全集，两消费方 spread 直投，零各自组装） */
+export interface PredicateAssembly extends PredicateIoInputs {
+  suppliedProviders: Record<string, { services: string[]; owner: string; credentialType?: string }>;
+  demandedServices: Record<string, { optional: boolean; owners: string[] }>;
+}
+
+/** stem → env 键（kebab → UPPER_SNAKE；与 SDK/provider-secret env 兜底同公式） */
+export function refToEnvKey(stem: string): string {
+  return stem.replaceAll('-', '_').toUpperCase();
+}
+
+function readJsonOrNull(file: string): Record<string, unknown> | null {
+  if (!existsSync(file)) return null;
+  try {
+    const parsed = JSON.parse(readFileSync(file, 'utf8')) as unknown;
+    return parsed && typeof parsed === 'object' ? (parsed as Record<string, unknown>) : null;
+  } catch {
+    return null;
+  }
+}
+
+/** 提取 JSON schema properties 键集（$ref 单级；properties 缺失 → 空集） */
+function collectPropertyKeys(schema: Record<string, unknown>): Set<string> {
+  const keys = new Set<string>();
+  const props = schema.properties;
+  if (props && typeof props === 'object' && !Array.isArray(props)) {
+    for (const k of Object.keys(props)) keys.add(k);
+  }
+  return keys;
+}
+
+/**
+ * 装配谓词输入全集（供给/需求聚合 + I/O 档案）。
+ * @param walk 调用方已执行的 walkManifests 产物（目录枚举零缓存——每方法调用独立）
+ */
+export function buildPredicateAssembly(
+  appDir: string,
+  walk: WalkManifestsResult,
+  integrations: Record<string, unknown>,
+  env: Readonly<Record<string, string | undefined>> = process.env,
+): PredicateAssembly {
+  // ── 供给/需求聚合（walk catalog 双通道——工厂与 CLI 同源）──
+  const suppliedProviders: PredicateAssembly['suppliedProviders'] = {};
+  for (const [vendor, impls] of Object.entries(walk.catalog.providers)) {
+    for (const [impl, entry] of Object.entries(impls)) {
+      suppliedProviders[`${vendor}\u0000${impl}`] = {
+        services: [...entry.services],
+        owner: entry.owner,
+        credentialType: entry.credentialType,
+      };
+    }
+  }
+  const demandedServices: PredicateAssembly['demandedServices'] = {};
+  for (const [service, entry] of Object.entries(walk.catalog.services)) {
+    demandedServices[service] = { optional: entry.optional, owners: [...entry.owners] };
+  }
+
+  // ── #6/#7 schema 档案 + #15/#16 需求面（manifest 引用 → 存在性 + 键集；双通道）──
+  const vendorConfigKeys: Record<string, Set<string>> = {};
+  const vendorConfigSchemaMissing: Record<string, boolean> = {};
+  const credentialSchemaMissing: Record<string, boolean> = {};
+  const moduleResourceNeeds: Record<string, ReadonlySet<string>> = {};
+  for (const mod of walk.modules) {
+    moduleResourceNeeds[mod.id] = new Set((mod.descriptor.contributes.resources ?? []).map((r) => r.id));
+    for (const slot of mod.descriptor.contributes.providers?.slots ?? []) {
+      if (slot.configSchema) {
+        const schema = readJsonOrNull(join(mod.dir, slot.configSchema));
+        if (schema) {
+          const bucket = (vendorConfigKeys[slot.provider] ??= new Set<string>());
+          for (const k of collectPropertyKeys(schema)) bucket.add(k);
+        } else {
+          vendorConfigSchemaMissing[slot.provider] = true;
+        }
+      }
+      if (slot.credentialSchema && !existsSync(join(mod.dir, slot.credentialSchema))) {
+        credentialSchemaMissing[slot.credentialType] = true;
+      }
+    }
+  }
+
+  // ── #1/#2 凭据文件索引（config/credentials/ 目录扫描）──
+  const credentialFileType: Record<string, string | undefined> = {};
+  const credStems = new Set<string>();
+  const credDir = join(appDir, 'config', 'credentials');
+  if (existsSync(credDir)) {
+    for (const file of readdirSync(credDir)) {
+      if (!file.endsWith('.json')) continue;
+      const stem = file.slice(0, -'.json'.length);
+      credStems.add(stem);
+      const cred = readJsonOrNull(join(credDir, file));
+      if (cred && typeof cred.type === 'string') credentialFileType[stem] = cred.type;
+    }
+  }
+
+  const ig = integrations as {
+    services?: Record<string, { provider?: unknown; credentialRef?: unknown; instances?: Record<string, { provider?: unknown; credentialRef?: unknown }> }>;
+    credentialRefByInstance?: Record<string, unknown>;
+    credentialRef?: unknown;
+    instances?: unknown;
+  };
+
+  // ── #1 effective 候选 stem 收集（槽级 + 实例级 + root ByInstance + root 标量；env 通道兜底）──
+  const refs: string[] = [];
+  const pushRef = (v: unknown): void => {
+    if (typeof v === 'string' && v.startsWith('secret://')) refs.push(v);
+  };
+  for (const svc of Object.values(ig.services ?? {})) {
+    if (svc && typeof svc === 'object') {
+      pushRef(svc.credentialRef);
+      for (const inst of Object.values(svc.instances ?? {})) {
+        if (inst && typeof inst === 'object') pushRef(inst.credentialRef);
+      }
+    }
+  }
+  for (const v of Object.values(ig.credentialRefByInstance ?? {})) pushRef(v);
+  pushRef(ig.credentialRef);
+  const credentialFileMissing: Record<string, boolean> = {};
+  for (const ref of refs) {
+    const stem = ref.slice('secret://'.length);
+    // env 通道：文件缺席但 env 键在场 → 不算缺失（wanda env 化）
+    if (env[refToEnvKey(stem)] !== undefined) continue;
+    if (!credStems.has(stem)) credentialFileMissing[stem] = true;
+  }
+
+  // ── #9 realm switch 提示（实例级双字段厂商 ≠ 槽级厂商）──
+  const realmSwitchHints: string[] = [];
+  for (const [serviceId, svc] of Object.entries(ig.services ?? {})) {
+    const slotProvider = svc && typeof svc === 'object' && typeof svc.provider === 'string' ? svc.provider : undefined;
+    for (const [instanceId, inst] of Object.entries((svc && typeof svc === 'object' ? svc.instances : undefined) ?? {})) {
+      const instProvider = inst && typeof inst === 'object' && typeof (inst as { provider?: unknown }).provider === 'string'
+        ? (inst as { provider: string }).provider
+        : undefined;
+      if (slotProvider && instProvider && instProvider !== slotProvider) {
+        realmSwitchHints.push(
+          `integrations: ${serviceId}@${instanceId} 实现覆盖跨厂商（${slotProvider} → ${instProvider}）——凭据域切换，确认该 mall 对应凭据在场`,
+        );
+      }
+    }
+  }
+
+  // ── #8 malls（root instances 注册表 ids；参考表在场才传——缺席 → 键检查跳过）──
+  const rawInstances = Array.isArray(ig.instances) ? ig.instances : undefined;
+  const mallIds = (rawInstances ?? [])
+    .map((i) => (i && typeof i === 'object' && typeof (i as { id?: unknown }).id === 'string' ? (i as { id: string }).id : undefined))
+    .filter((id): id is string => typeof id === 'string');
+
+  return {
+    suppliedProviders,
+    demandedServices,
+    credentialFileMissing,
+    credentialFileType,
+    credentialSchemaMissing,
+    vendorConfigKeys,
+    vendorConfigSchemaMissing,
+    realmSwitchHints,
+    moduleResourceNeeds,
+    ...(mallIds.length > 0 ? { malls: mallIds } : {}),
+  };
+}