@tbox.cn/app-toolkit 0.3.0 → 0.5.0

package/dist/index.js

@@ -1,8 +1,9 @@
-import{a as Se,b as M,c as we}from"./chunk-KPD3LUH4.js";import{z as h}from"zod";var W=/^[a-zA-Z0-9][a-zA-Z0-9._-]*$/,zn=h.object({cardType:h.string(),schemaVersion:h.number().optional()}),Ge=h.object({route:h.string(),component:h.string()}),Qe=h.object({route:h.string(),label:h.string().optional(),icon:h.string().optional(),order:h.number().optional()}),Xe=h.object({id:h.string(),range:h.string().optional(),required:h.boolean().default(!0)}),en=h.object({service:h.string(),provider:h.string().regex(W,"provider 名含非法字符（需 /^[a-zA-Z0-9][a-zA-Z0-9._-]*$/）"),implementation:h.string(),credentialType:h.string(),local:h.boolean().optional(),configSchema:h.string().optional(),credentialSchema:h.string().optional()}),nn=h.object({service:h.string(),optional:h.boolean().default(!0),defaults:h.array(h.object({provider:h.string().regex(W,"provider 名含非法字符（需 /^[a-zA-Z0-9][a-zA-Z0-9._-]*$/）"),implementation:h.string()})).default([]),title:h.string().optional(),description:h.string().optional()}),tn=h.object({id:h.string(),type:h.string()}),rn=h.object({schemaVersion:h.number().default(1),name:h.string(),version:h.string().default("0.0.0"),kind:h.enum(["platform","business","third-party"]).default("business"),risk:h.object({level:h.enum(["high","medium","low"]).default("low"),writeBoundary:h.enum(["sdk-enforced","source"]).default("source")}).default({}),distribution:h.object({defaultMode:h.enum(["hybrid","sdk","codegen","local"]).default("codegen")}).default({}),contributes:h.object({handlers:h.array(h.string()).default([]),tools:h.array(h.string()).default([]),cards:h.array(zn).default([]),routes:h.array(h.string()).default([]),pages:h.array(Ge).default([]),tabs:h.array(Qe).default([]),providers:h.object({slots:h.array(en).default([])}).default({}),services:h.array(nn).default([]),resources:h.array(tn).default([])}).default({}),dependencies:h.object({modules:h.array(Xe).default([])}).default({}),env:h.array(h.string()).default([])}).strict();function G(e){let n=rn.safeParse(e);return n.success?{ok:!0,value:n.data}:{ok:!1,errors:n.error.issues.map(r=>`${r.path.join(".")||"(root)"}: ${r.message}`)}}var Un=/\$\$?\{([A-Z][A-Z0-9_]*)\}/g;function Jn(e){return JSON.stringify(e).slice(1,-1)}function Yn(e,n=process.env){let r=[],t=e.replace(Un,(i,o)=>{if(i.startsWith("$$"))return i.slice(1);let s=n[o];return s===void 0?(r.push(o),i):Jn(s)});return r.length>0?{missing:r}:{text:t,missing:[]}}import{mkdirSync as Hn,existsSync as on,readFileSync as Zn,writeFileSync as qn}from"fs";import{dirname as Gn,join as sn}from"path";function oe(e){let n={};for(let[r,t]of Object.entries(e)){if(typeof t!="string"){n[r]=null;continue}n[r]=t.length<=4?"****":`${t.slice(0,2)}****`}return n}var A=class extends Error{code;httpStatus;fields;constructor(n,r,t,i){super(t),this.name="AppToolkitError",this.code=n,this.httpStatus=r,this.fields=i}};function he(e){return e.notes.length>0?e.notes[0]:e.version===null?"contracts 不可解析（未安装）——检查应用依赖安装后重试":e.strictValidation?"contracts workspace 源码态未构建——执行 pnpm --filter @tbox.cn/app-contracts build 后重试":`contracts ${e.version} 无严格校验面（需 ≥0.9.0）——升级应用 @tbox.cn/app-contracts 依赖后可用`}function se(e,n){if(n!==void 0&&(n.includes("/")||n.includes("\\")||n.includes("..")))throw new A("VALIDATION_FAILED",400,`凭据 stem 派生输入含路径敌对字符（${e}）——拒绝派生`)}function z(e){if(se("provider",e.provider),se("service",e.service),se("instanceId",e.instanceId),se("domain",e.domain),e.instanceId!==void 0){let n=e.domain??e.service??"global";return`${e.provider}-${e.instanceId}-${n}`}return e.service!==void 0?`${e.provider}-${e.service}`:`${e.provider}-global`}function Qn(e){return`secret://${e}`}function D(e){return`config/credentials/${e}.json`}function Q(e,n){let r=sn(e,D(n));if(!on(r))return null;try{let t=JSON.parse(Zn(r,"utf8"));if(typeof t.type!="string")return null;let{type:i,...o}=t,s={};for(let[f,u]of Object.entries(o))typeof u=="string"&&(s[f]=u);return{type:i,values:s}}catch{return null}}function Re(e,n,r){let t=sn(e,D(n)),i=on(t);return Hn(Gn(t),{recursive:!0}),qn(t,`${JSON.stringify({type:r.type,...r.values},null,2)}
-`,"utf8"),i}import{mkdirSync as Xn,renameSync as et,writeFileSync as nt}from"fs";import{dirname as tt}from"path";function _(e,n){an(tt(e));let r=`${e}.tmp-${process.pid}-${Date.now()}`;nt(r,n,"utf8"),et(r,e)}function an(e){Xn(e,{recursive:!0})}function L(e){let n=e.indexOf(".");return n===-1?e:e.slice(0,n)}function F(e,n){let r=e?.domains?.[n]?.provider;if(typeof r=="string"&&r.length>0)return{provider:r,layer:"module"};let t=e?.provider;return typeof t=="string"&&t.length>0?{provider:t,layer:"app"}:{provider:null,layer:null}}function U(e,n){let r=[...new Set((n.descriptor.contributes.services??[]).map(o=>L(o.service)))].sort();if(r.length===0)return{writable:!1,reason:"zero-domain",domainKeys:[]};if(r.length>1)return{writable:!1,reason:"multi-domain",domainKeys:r};let t=r[0],i=new Set;for(let[o,s]of Object.entries(e.catalog.services))if(L(o)===t)for(let f of s.owners)i.add(f);return i.size>1?{writable:!1,reason:"shared-key",domainKeys:[t],domainKey:t,coOwners:[...i].sort()}:{writable:!0,domainKeys:[t],domainKey:t}}function cn(e,n){let r=e.find(t=>t.pkg===n||`@app/${t.id}`===n);return r?r.id:n.startsWith("@app/")?n.slice(5):n}function ln(e,n){return[...new Set(Object.values(e.providers[n]??{}).flatMap(r=>r.services))].sort()}function ee(e){if(!e||typeof e!="object")return!1;let n=Object.keys(e),r=new Set(["provider","credentialType","configSchema"]);if(!n.every(i=>r.has(i)))return!1;let t=e;return typeof t.provider=="string"&&t.provider.length>0&&typeof t.credentialType=="string"&&t.credentialType.length>0&&(t.configSchema===void 0||typeof t.configSchema=="string")}function dn(e,n,r){return e==="*"||r.has(e)?null:{severity:"error",code:"INSTANCE_KEY_NOT_REGISTERED",instance:e,message:`integrations: ${n} 键 ${e} 不在 malls 白名单内（${[...r].join(", ")}）`}}function Ie(e,n){let r=new Set(n),t=[],i=(o,s)=>{let f=dn(o,s,r);f&&t.push(f)};for(let o of Object.keys(e.configByInstance??{}))i(o,"configByInstance");for(let o of Object.keys(e.credentialRefByInstance??{}))i(o,"credentialRefByInstance");for(let[o,s]of Object.entries(e.services??{}))for(let f of Object.keys(s.instances??{}))i(f,`services.${o}.instances`);return t}function ae(e){let n=[],r=e.contracts,{integrations:t,suppliedProviders:i,demandedServices:o,supplies:s,malls:f,credentialSchemaMissing:u,vendorConfigKeys:p,vendorConfigSchemaMissing:v,credentialFileMissing:S,credentialFileType:d,realmSwitchHints:y,moduleResourceNeeds:R}=e,a=f?new Set(f):void 0;for(let c of y??[])n.push({severity:"warning",code:"REALM_SWITCH_HINT",message:c});let l=new Set(Object.keys(i).map(c=>c.slice(0,c.indexOf("\0"))).filter(c=>c.length>0)),g=(c,w,x,k)=>{if(typeof x?.provider=="string"&&typeof x.implementation=="string"&&x.provider&&x.implementation)return i[X(x.provider,x.implementation)]?.credentialType;if(typeof w.provider=="string"&&typeof w.implementation=="string")return i[X(w.provider,w.implementation)]?.credentialType;let E=w.provider?.credentialType;if(typeof E=="string")return E;if(!s)return;let T=k??Object.keys(w.instances??{})[0]??"",O=r.resolveEffectiveService(t,c,T,s);if(!(O.status!=="ok"||typeof O.effective.provider!="string"))return i[X(O.effective.provider,O.effective.implementation)]?.credentialType};if(S||d)for(let[c,w]of Object.entries(t.services))for(let[x,k]of Object.entries(w.instances??{})){if(k.enabled===!1)continue;let E=k.credentialRef??w.credentialRef??t.credentialRefByInstance?.[x]??t.credentialRef;if(typeof E!="string"||!E.startsWith("secret://"))continue;let T=E.slice(9);S?.[T]===!0&&n.push({severity:"error",code:"CREDENTIAL_FILE_MISSING",service:c,instance:x,message:`integrations: 凭据文件缺失 ${T}（${c}@${x} effective ref=${E}；档内 config/credentials/ 无此文件）`});let O=d?.[T];if(O){let P=g(c,w,k,x);P&&O!==P&&n.push({severity:"error",code:"CREDENTIAL_TYPE_MISMATCH",service:c,instance:x,message:`integrations: 凭据文件 ${T}.json type=${O} 与绑定 credentialType ${P} 不一致（${c}@${x}——transport 创建期将按 type 选策略）`})}}let b=(c,w)=>{if(!a)return;let x=dn(c,w,a);x&&n.push(x)};for(let[c]of Object.entries(t.configByInstance??{}))b(c,"configByInstance");for(let[c]of Object.entries(t.credentialRefByInstance??{}))b(c,"credentialRefByInstance");let C=Object.entries(t.services).filter(([,c])=>c.instances==null||c.instances["*"]!=null).map(([c])=>c);if(C.length>0){let c=Object.entries(t.services).filter(([,w])=>w.instances!=null&&w.instances["*"]==null).map(([w])=>w);c.length>0&&n.push({severity:"warning",code:"WILDCARD_ALIGNMENT",message:`integrations: 激活形态不对称（通配：${C.join(", ")}；显式键集：${c.join(", ")}）——动态 mallId 将在显式键集槽上 INSTANCE_NOT_FOUND（provider 业务限制表达位），确认是否齐步`})}let m=r.normalizeInstances({instances:t.instances,defaultInstanceId:t.defaultInstanceId});m.instances.length>=2&&m.defaultInstanceId===null&&n.push({severity:"warning",code:"MULTI_INSTANCE_NO_DEFAULT",message:`integrations: ${m.instances.length} 个部署实例（${m.instances.map(c=>c.id).join(", ")}）均无 defaultInstanceId——无 scope 参数访问将落全局会话（默认商圈不注入）`});for(let[c,w]of Object.entries(t.services)){if(o[c]||n.push({severity:"warning",code:"SLOT_NOT_DECLARED",service:c,message:`integrations: 服务槽 ${c} 无消费方声明（拼写错误或需求方未安装）——若为拆分前旧槽位词汇（member.main/parking.main/promotion.read/shopping-guide.main），参照 cookbook·app-config 槽位迁移配方展开为新槽`}),typeof w.provider=="string"?typeof w.implementation=="string"&&!i[X(w.provider,w.implementation)]&&n.push({severity:"error",code:"INSTANCE_SUPPLY_UNMATCHED",service:c,message:`integrations: provider ${w.provider}/${w.implementation} 未命中已装供给（${c} 槽级）——装对应 provider 包或改绑`}):w.provider!==void 0&&!ee(w.provider)&&n.push({severity:"error",code:"INLINE_PROVIDER_INVALID",service:c,message:`integrations: 内联 provider 超受控形状（${c} 槽级；允许键 provider/credentialType/configSchema）`}),u){let k=g(c,w);k&&u[k]===!0&&n.push({severity:"error",code:"SCHEMA_FILE_MISSING",service:c,message:`integrations: credentialType ${k} 的 schema 引用不存在（${c}；manifest 声明指向缺失文件）`})}typeof w.provider=="object"&&typeof w.implementation!="string"&&n.push({severity:"error",code:"IMPL_WITHOUT_PROVIDER",service:c,message:`integrations: 内联厂商声明必须同时提供 implementation（${c} 槽级）`});for(let[k,E]of Object.entries(w.instances??{})){b(k,`services.${c}.instances`);let T=E.provider!==void 0,O=E.implementation!==void 0;if(O&&!T&&n.push({severity:"error",code:"IMPL_WITHOUT_PROVIDER",service:c,instance:k,message:`integrations: 实例级 implementation 需伴随 provider（${c}@${k}——impl-only 禁止，provider 是绑定组头）`}),T&&O){let P=E.provider,V=E.implementation;typeof P=="string"&&typeof V=="string"?i[X(P,V)]||n.push({severity:"error",code:"INSTANCE_SUPPLY_UNMATCHED",service:c,instance:k,message:`integrations: 实例级 provider 覆盖 ${P}/${V} 未命中已装供给（${c}@${k}）`}):ee(P)||n.push({severity:"error",code:"INLINE_PROVIDER_INVALID",service:c,instance:k,message:`integrations: 实例级内联 provider 超受控形状（${c}@${k}）`})}}}for(let[c,w]of[["root",t.provider],...Object.entries(t.domains??{}).map(([x,k])=>[`domains.${x}`,k?.provider])])typeof w!="string"||w.length===0||l.has(w)||n.push({severity:"error",code:"VENDOR_NOT_INSTALLED",module:c.startsWith("domains.")?c.slice(8):void 0,message:`integrations: ${c} provider ${w} 未命中已装供给——装对应 provider 包或 provider use 改绑`});if(s)for(let[c,w]of Object.entries(t.services)){let x=w.instances?Object.keys(w.instances):[""];for(let k of x){let E=r.resolveEffectiveService(t,c,k,s);E.status==="binding-unresolved"&&n.push({severity:"error",code:"BINDING_UNRESOLVED",service:c,instance:k||void 0,message:`integrations: ${E.message}`})}}for(let[c,w]of Object.entries(t.services))w.implementation!==void 0&&w.provider===void 0&&n.push({severity:"error",code:"IMPL_WITHOUT_PROVIDER",service:c,message:`integrations: 槽级 implementation 需伴随 provider（${c}——impl-only 禁止，provider 是绑定组头）`});let I=new Set([...Object.keys(t.services).map(c=>r.moduleDomainOf(c)),...Object.keys(o).map(c=>r.moduleDomainOf(c))]);for(let c of Object.keys(t.domains??{}))I.has(c)||n.push({severity:"warning",code:"DOMAIN_KEY_UNMATCHED",module:c,message:`integrations: domains.${c} 无对应槽位或需求声明（域前缀拼写错误？——键 = 槽位 id 点分前缀）`});if(p){let c=new Set,w=!1,x=k=>{typeof k!="string"||k.length===0||(p[k]&&c.add(k),!p[k]&&!v?.[k]&&(w=!0),v?.[k]&&(w=!0))};x(t.provider);for(let k of Object.values(t.domains??{}))x(k?.provider);for(let k of Object.values(t.services)){let E=k.provider;x(typeof k.provider=="string"?k.provider:E?.provider)}if(c.size>0&&!w){let k=new Set;for(let T of c)for(let O of p[T]??[])k.add(O);let E=(T,O,P)=>{for(let[V]of Object.entries(T??{}))(P??k).has(V)||n.push({severity:"error",code:"DOMAIN_CONFIG_INVALID",message:`integrations: ${O} 键 ${V} 不在引用厂商（${[...c].join("/")}）任何槽 schema properties 内（死配置）`})};E(t.config,"root.config");for(let[T,O]of Object.entries(t.configByInstance??{}))E(O,`root.configByInstance[${T}]`);for(let[T,O]of Object.entries(t.domains??{})){if(!O?.config)continue;let P=F(t,T).provider??void 0;if(P===void 0){E(O.config,`domains.${T}.config`);continue}let V=p[P];!V||v?.[P]||E(O.config,`domains.${T}.config`,new Set(V))}}}for(let[c,w]of Object.entries(o)){let x=t.services[c];if(!x){n.push({severity:"warning",code:"SLOT_NOT_CONFIGURED",service:c,message:`integrations: 服务槽 ${c}（需求方 ${w.owners.join(", ")}）未配置${w.optional?"（可选槽）":"（必需槽——模块将走降级链）"}`});continue}let k=Object.entries(x.instances??{}).filter(([,E])=>E.enabled===!1).map(([E])=>E);k.length>0&&n.push({severity:"warning",code:"INSTANCE_DISABLED",service:c,instance:k.join(", "),message:`integrations: ${c} 实例禁用（${k.join(", ")}）`})}for(let[c,w]of Object.entries(t.modules??{})){let x=R?.[c];R&&!(c in R)&&n.push({severity:"warning",code:"RESOURCE_NOT_DECLARED",module:c,message:`integrations: modules.${c} 未命中已装模块（键 = install id——检查 .tbox/app.json entry.id / packages/ 目录名）`});for(let[k,E]of Object.entries(w?.resources??{})){let T=E?.type;(typeof T!="string"||!r.RESOURCE_TYPE_IDS.includes(T))&&n.push({severity:"error",code:"RESOURCE_TYPE_UNKNOWN",module:c,message:`integrations: modules.${c}.resources.${k} type 非法（${String(T)}；词汇表 = ${r.RESOURCE_TYPE_IDS.join("/")}）`}),x&&x.size>0&&!x.has(k)&&n.push({severity:"warning",code:"RESOURCE_NOT_DECLARED",module:c,message:`integrations: modules.${c}.resources.${k} 未被模块 manifest contributes.resources 声明`})}}return n}function X(e,n){return`${e}\0${n}`}import{existsSync as ke,readFileSync as rt,readdirSync as it}from"fs";import{join as ce}from"path";function pn(e){return e.replaceAll("-","_").toUpperCase()}function un(e){if(!ke(e))return null;try{let n=JSON.parse(rt(e,"utf8"));return n&&typeof n=="object"?n:null}catch{return null}}function ot(e){let n=new Set,r=e.properties;if(r&&typeof r=="object"&&!Array.isArray(r))for(let t of Object.keys(r))n.add(t);return n}function be(e,n,r,t=process.env){let i={};for(let[m,I]of Object.entries(n.catalog.providers))for(let[c,w]of Object.entries(I))i[`${m}\0${c}`]={services:[...w.services],owner:w.owner,credentialType:w.credentialType};let o={};for(let[m,I]of Object.entries(n.catalog.services))o[m]={optional:I.optional,owners:[...I.owners]};let s={},f={},u={},p={};for(let m of n.modules){p[m.id]=new Set((m.descriptor.contributes.resources??[]).map(I=>I.id));for(let I of m.descriptor.contributes.providers?.slots??[]){if(I.configSchema){let c=un(ce(m.dir,I.configSchema));if(c){let w=s[I.provider]??=new Set;for(let x of ot(c))w.add(x)}else f[I.provider]=!0}I.credentialSchema&&!ke(ce(m.dir,I.credentialSchema))&&(u[I.credentialType]=!0)}}let v={},S=new Set,d=ce(e,"config","credentials");if(ke(d))for(let m of it(d)){if(!m.endsWith(".json"))continue;let I=m.slice(0,-5);S.add(I);let c=un(ce(d,m));c&&typeof c.type=="string"&&(v[I]=c.type)}let y=r,R=[],a=m=>{typeof m=="string"&&m.startsWith("secret://")&&R.push(m)};for(let m of Object.values(y.services??{}))if(m&&typeof m=="object"){a(m.credentialRef);for(let I of Object.values(m.instances??{}))I&&typeof I=="object"&&a(I.credentialRef)}for(let m of Object.values(y.credentialRefByInstance??{}))a(m);a(y.credentialRef);let l={};for(let m of R){let I=m.slice(9);t[pn(I)]===void 0&&(S.has(I)||(l[I]=!0))}let g=[];for(let[m,I]of Object.entries(y.services??{})){let c=I&&typeof I=="object"&&typeof I.provider=="string"?I.provider:void 0;for(let[w,x]of Object.entries((I&&typeof I=="object"?I.instances:void 0)??{})){let k=x&&typeof x=="object"&&typeof x.provider=="string"?x.provider:void 0;c&&k&&k!==c&&g.push(`integrations: ${m}@${w} 实现覆盖跨厂商（${c} → ${k}）——凭据域切换，确认该 mall 对应凭据在场`)}}let C=((Array.isArray(y.instances)?y.instances:void 0)??[]).map(m=>m&&typeof m=="object"&&typeof m.id=="string"?m.id:void 0).filter(m=>typeof m=="string");return{suppliedProviders:i,demandedServices:o,credentialFileMissing:l,credentialFileType:v,credentialSchemaMissing:u,vendorConfigKeys:s,vendorConfigSchemaMissing:f,realmSwitchHints:g,moduleResourceNeeds:p,...C.length>0?{malls:C}:{}}}import{existsSync as $,readdirSync as Ce,readFileSync as J}from"fs";import{join as j}from"path";import{existsSync as st,readFileSync as fn,mkdirSync as at,writeFileSync as ct}from"fs";import gn from"path";function le(e){return gn.join(e,".tbox","app.json")}function mn(e){let n=le(e);if(!st(n))return null;try{let r=JSON.parse(fn(n,"utf8")),t=r?.templateVersion;return typeof t!="string"||t.trim().length===0?null:{templateVersion:t.trim(),npmModules:Array.isArray(r?.npmModules)?r.npmModules:[]}}catch{return null}}function lt(e,n){let r=le(e);at(gn.dirname(r),{recursive:!0}),ct(r,`${JSON.stringify(n,null,2)}
-`,"utf8")}function Ae(e){let n=mn(e);if(n===null)return null;let r=le(e);try{let t=JSON.parse(fn(r,"utf8"));return{...n,miniappContainers:Array.isArray(t?.miniappContainers)?t.miniappContainers:[]}}catch{return{...n,miniappContainers:[]}}}function dt(e,n){let r=e.npmModules.filter(t=>t.id!==n.id);return{...e,npmModules:[...r,n]}}function ut(e,n){return{...e,npmModules:e.npmModules.filter(r=>r.id!==n)}}function pt(e,n){let r=(e.miniappContainers??[]).filter(t=>t.id!==n.id);return{...e,miniappContainers:[...r,n]}}function ft(e,n,r){return{...e,npmModules:e.npmModules.map(t=>t.id===n?{...t,...r}:t)}}function vn(e){return/^[a-z0-9]+(-[a-z0-9]+)*$/.test(e)&&!e.includes("..")}function gt(e,n){if(!vn(e))throw new Error(`非法模块 id "${e}"（来自 ${n}）：仅允许小写字母/数字/中划线`)}function de(e,n){let r=t=>{try{let i=JSON.parse(t),o=G(i);if(o.ok)return{kind:"strict",name:o.value.name,version:o.value.version,descriptor:o.value,contributes:o.value.contributes};if(i&&typeof i=="object"&&"contributes"in i){let s=i;return{kind:"loose",...typeof s.name=="string"?{name:s.name}:{},contributes:{providers:s.contributes?.providers,services:s.contributes?.services}}}return null}catch{return null}};if(n)return n.read(e,r)??null;if(!$(e))return null;try{return r(J(e,"utf8"))}catch{return null}}function mt(e){let n=j(e,".tbox","app.json");if(!$(n))return[];try{let r=JSON.parse(J(n,"utf8"));return Array.isArray(r.npmModules)?r.npmModules.filter(t=>!!t&&typeof t=="object"&&typeof t.id=="string"&&typeof t.package=="string"):[]}catch{return[]}}function vt(e){let n=j(e,".tbox-dev.local"),r=j(n,"dev-manifest.json");if(!$(r))return[];try{let t=JSON.parse(J(r,"utf8")),i=[];for(let[o,s]of Object.entries(t.redirects??{}))typeof s!="string"||!o.startsWith("@tbox.cn/app-")||i.push({pkg:o,dir:j(n,s)});return i}catch{return[]}}function yt(e,n){let r=[],t=[e];for(let o of["apps","packages"]){let s=j(e,o);if($(s))try{for(let f of Ce(s,{withFileTypes:!0}))f.isDirectory()&&t.push(j(s,f.name))}catch{}}let i=new Set;for(let o of t){let s=j(o,"node_modules","@tbox.cn");if(!$(s))continue;let f=[];try{f=Ce(s)}catch{continue}for(let u of f){let p=j(s,u);if(i.has(p))continue;i.add(p);let v=j(p,"service-slots.json");if(!$(v))continue;let S=y=>{try{let R=JSON.parse(y);if(Array.isArray(R.slots))return R.slots.filter(a=>typeof a=="string")}catch{}return null},d=n?n.read(v,S):S(J(v,"utf8"));d!=null&&r.push({dir:p,slots:d})}}return r}function N(e,n){let r=[],t={providers:{},services:{},credentialTypes:{}},i={},o=[],s=new Set,f=new Map,u=(d,y,R)=>{for(let a of d){let l=t.providers[a.provider]??={},g=l[a.implementation];g?g.services.includes(a.service)||g.services.push(a.service):(l[a.implementation]={provider:a.provider,implementation:a.implementation,credentialType:a.credentialType,owner:y,...a.local?{local:!0}:{},...a.configSchema?{configSchema:a.configSchema}:{},...a.credentialSchema?{credentialSchema:a.credentialSchema}:{},services:[a.service]},t.credentialTypes[a.credentialType]??={owner:y,packageDir:R,...a.credentialSchema?{credentialSchema:a.credentialSchema}:{}});let b=`${a.provider}\0${a.service}`;i[b]||(i[b]={...a.configSchema?{configSchema:a.configSchema}:{},...a.credentialSchema?{credentialSchema:a.credentialSchema}:{},packageDir:R})}},p=(d,y)=>{let R=d.optional!==!1,a=d.defaults??[],l=t.services[d.service];if(l){l.optional=l.optional&&R;let C=new Set(l.defaults.map(m=>`${m.provider}\0${m.implementation}`));for(let m of a){let I=`${m.provider}\0${m.implementation}`;C.has(I)||(l.defaults.push(m),C.add(I))}l.owners.includes(y)||l.owners.push(y);return}t.services[d.service]={optional:R,defaults:[...a],...d.title?{title:d.title}:{},...d.description?{description:d.description}:{},owners:[y]};let g=d.service.includes(".")?d.service.slice(0,d.service.indexOf(".")):d.service,b=f.get(g);b===void 0?f.set(g,y):b!==y&&o.push({severity:"warning",code:"DOMAIN_KEY_CONFLICT",module:y,message:`域键 ${g} 被多模块声明（${b} 与 ${y}）——domains 换算歧义（P13）`})};for(let d of mt(e)){if(s.has(d.id))continue;let y=j(e,"packages",d.id),R=j(e,"node_modules",...d.package.split("/")),a=de(j(y,"tbox.module.json"),n)??de(j(R,"tbox.module.json"),n);if(!a)continue;s.add(d.id);let l=$(j(y,"tbox.module.json"))?y:R,g=a.contributes;a.kind==="strict"&&r.push({id:d.id,dir:l,pkg:d.mode==="sdk"?d.package:`@app/${d.id}`,descriptor:a.descriptor});let b=g.providers?.slots??[];b.length&&u(b,d.package,l);let C=g.services??[];if(C.length)for(let m of C)p(m,d.package)}for(let{pkg:d,dir:y}of vt(e)){let R=de(j(y,"tbox.module.json"),n);if(!R?.name||s.has(R.name))continue;s.add(R.name);let a=R.contributes.providers?.slots??[];a.length&&u(a,d,y);let l=R.contributes.services??[];if(l.length)for(let g of l)p(g,d)}let v=j(e,"packages");if($(v)){let d=[];try{d=Ce(v,{withFileTypes:!0}).filter(y=>y.isDirectory()).map(y=>y.name)}catch{}for(let y of d){if(s.has(y))continue;let R=j(v,y),a=de(j(R,"tbox.module.json"),n);if(!a)continue;let l=a.name??y;if(s.has(l))continue;s.add(l);let g=a.contributes;a.kind==="strict"&&r.push({id:l,dir:R,pkg:`@app/${l}`,descriptor:a.descriptor});let b=g.providers?.slots??[];b.length&&u(b,`@app/${l}`,R);let C=g.services??[];if(C.length)for(let m of C)p(m,`@app/${l}`)}}let S=new Set;for(let d of yt(e,n))for(let y of d.slots)S.add(y);return{modules:r,catalog:t,serviceSchemas:i,vocabulary:[...S].sort(),domainKeyIssues:o}}function yn(e,n,r){let t=j(e,"src",n,"index.ts");if(!$(t))return!1;try{let i=J(t,"utf8");return new RegExp(`export\\s+const\\s+${r}\\b`).test(i)}catch{return!1}}function St(e){let n=j(e,"src","server","index.ts");if(!$(n))return"";try{return J(n,"utf8")}catch{return""}}function Sn(e){return e.match(/declaration\s*:\s*\{[\s\S]*?moduleId\s*:\s*['"]([^'"]+)['"]/)?.[1]}function wt(e){let n=[],r=N(e),t=Ae(e),i=new Map;for(let o of t?.npmModules??[])i.set(o.id,o.mode);for(let o of r.modules){let s=i.get(o.id)??"local",f=yn(o.dir,"server","serverModule"),u=o.descriptor.contributes;n.push({id:o.id,pkg:s==="sdk"?o.pkg:`@app/${o.id}`,mode:s,hasServerEntry:f,hasClientEntry:yn(o.dir,"client","clientModule"),hasCards:(u.cards?.length??0)>0,...f?{moduleId:Sn(St(o.dir))}:{}})}return n.sort((o,s)=>o.id.localeCompare(s.id))}import{existsSync as kr,readFileSync as br}from"fs";import{join as Cr,resolve as xr}from"path";function xe(e){return N(e).catalog}function wn(e){let n=N(e).catalog,r={};for(let[o,s]of Object.entries(n.providers)){r[o]={};for(let[f,u]of Object.entries(s))r[o][f]={provider:u.provider,implementation:u.implementation,credentialType:u.credentialType,owner:u.owner,...u.local?{local:!0}:{},...u.configSchema?{configSchema:u.configSchema}:{},...u.credentialSchema?{credentialSchema:u.credentialSchema}:{},services:[...u.services]}}let t={};for(let[o,s]of Object.entries(n.services))t[o]={optional:s.optional,defaults:s.defaults.map(f=>({...f})),owners:[...s.owners]};let i={};for(let[o,s]of Object.entries(n.credentialTypes))i[o]={owner:s.owner,...s.credentialSchema?{credentialSchema:s.credentialSchema}:{}};return{providers:r,services:t,credentialTypes:i}}import{existsSync as ht,readFileSync as Rt}from"fs";import{join as hn}from"path";var It=hn("config","integrations.json");function Y(e,n){let r=hn(e,It),t=i=>JSON.parse(i);if(n)return n.read(r,t)??null;if(!ht(r))return null;try{return t(Rt(r,"utf8"))}catch{return null}}async function Rn(e,n){let r=await M(e),t=Y(e,n);if(t===null)return{config:null,strict:!1,contracts:r};if(r.strictValidation&&r.module.parseIntegrationsConfig)try{return{config:r.module.parseIntegrationsConfig(t),strict:!0,contracts:r}}catch(i){if(i instanceof Error&&Array.isArray(i.issues)){let o=i.issues.filter(s=>Array.isArray(s.path)).map(s=>s.path.map(String).join(".")).filter(s=>s.length>0);throw new A("VALIDATION_FAILED",400,"integrations.json 校验失败",o.length>0?o:void 0)}throw new A("VALIDATION_FAILED",400,i instanceof Error?i.message:String(i))}return{config:t,strict:!1,contracts:r}}function ne(e,n,r){return e.includes(r)||n.includes(r)}import{existsSync as Cn,readFileSync as xn}from"fs";import{join as H,resolve as Ct}from"path";import xt from"ajv";var te=["provider","config","configByInstance","credentialRef","credentialRefByInstance","instances","defaultInstanceId"];import{readdirSync as kt,existsSync as ue,readFileSync as bt}from"fs";import{join as pe}from"path";function In(e,n,r){let t=[];if(n){let i=z({provider:e});t.push({stem:i,ref:`secret://${i}`,input:n})}for(let[i,o]of Object.entries(r??{})){let s=z({provider:e,instanceId:i});t.push({instanceId:i,stem:s,ref:`secret://${s}`,input:o})}return t}function kn(e,n,r,t,i){let o=[];if(t){let s=z({provider:e,service:n});o.push({stem:s,ref:`secret://${s}`,input:t})}for(let[s,f]of Object.entries(i??{})){let u=z({provider:e,instanceId:s,domain:r});o.push({instanceId:s,stem:u,ref:`secret://${u}`,input:f})}return o}function Oe(e,n,r){return n.map(t=>({stem:t.stem,ref:t.ref,overwrote:r?ue(pe(e,D(t.stem))):Re(e,t.stem,t.input)}))}function At(e,n){return ue(pe(e,D(n)))}function Ee(e,n){if(typeof e=="string"){e.startsWith("secret://")&&n.add(e.slice(9));return}if(Array.isArray(e)){for(let r of e)Ee(r,n);return}if(e&&typeof e=="object")for(let r of Object.values(e))Ee(r,n)}function Me(e){let n=pe(e,"config","credentials"),r=new Set,t=pe(e,"config","integrations.json");if(ue(t))try{Ee(JSON.parse(bt(t,"utf8")),r)}catch{}let i=[];if(!ue(n))return i;let o=[];try{o=kt(n).filter(s=>s.endsWith(".json")).map(s=>s.slice(0,-5))}catch{return i}for(let s of o.sort()){if(r.has(s))continue;let f=Q(e,s);i.push({severity:"warning",code:"ORPHANED_CREDENTIAL",message:`${D(s)} 不再被引用（凭据文件保留，可手动清理）`})}return i}var B=H("config","integrations.json");function Z(e,n){if(e===n)return!0;if(Array.isArray(e)&&Array.isArray(n))return e.length!==n.length?!1:e.every((r,t)=>Z(r,n[t]));if(e&&n&&typeof e=="object"&&typeof n=="object"){let r=Object.keys(e),t=Object.keys(n);return r.length!==t.length?!1:r.every(i=>Z(e[i],n[i]))}return!1}function me(e,n){if(typeof e!="string"&&e&&typeof e=="object")for(let[r,t]of Object.entries(e)){if((r==="provider"||r==="instanceId")&&typeof t=="string"&&!W.test(t))throw new A("VALIDATION_FAILED",400,`${r} 名含非法字符（需 /^[a-zA-Z0-9][a-zA-Z0-9._-]*$/）`,[`${n}.${r}`]);me(t,`${n}.${r}`)}}function fe(e,n,r){if(!(!e||typeof e!="object"||Array.isArray(e))){for(let t of Object.keys(e))if(!(r&&(t==="*"||t==="**"))&&!W.test(t))throw new A("VALIDATION_FAILED",400,`${n} 键 ${t} 含非法字符（需 /^[a-zA-Z0-9][a-zA-Z0-9._-]*$/）——进凭据 stem 派生，防路径逃逸`,[n])}}function bn(e,n,r){if(r==="root"){let t=e.instances;Array.isArray(t)&&t.forEach((i,o)=>{let s=i&&typeof i=="object"?i.id:void 0;if(typeof s=="string"&&!W.test(s))throw new A("VALIDATION_FAILED",400,`instances[${o}].id 含非法字符（需 /^[a-zA-Z0-9][a-zA-Z0-9._-]*$/）`,[`root.instances[${o}].id`])}),fe(e.configByInstance,"root.configByInstance",!1),fe(e.credentialRefByInstance,"root.credentialRefByInstance",!1)}else fe(e.instances,"services.instances",!0);fe(n.credentialsByInstance,"credentialsByInstance",!1)}function ge(e,n){let r=H(e,B),t=i=>JSON.parse(i);if(n)return n.read(r,t)??null;if(!Cn(r))return null;try{return t(xn(r,"utf8"))}catch{return null}}function Te(e){let n=(e.instances??[]).map(r=>r.id);return n.length===0?[]:Ie(e,n)}function Et(e,n,r,t){let{catalog:i}=N(e,t),o=i.providers[n];if(!o)return;let s=new Set;for(let f of Object.values(o))(r===void 0||f.services.includes(r))&&s.add(f.credentialType);return s.size===1?[...s][0]:void 0}function An(e,n,r,t,i,o){if(typeof t.type!="string"||t.type.length===0)throw new A("VALIDATION_FAILED",400,"凭据 type 缺失或为空字符串",["credentials.type"]);let s=i??Et(e,n,r,o);if(s!==void 0&&s!=="-"&&t.type!==s)throw new A("VALIDATION_FAILED",400,`凭据 type=${t.type} 与绑定 credentialType ${s} 不一致`,["credentials.type"]);if(r===void 0)return;let{serviceSchemas:f}=N(e,o),u=f[`${n}\0${r}`];if(!u?.credentialSchema)return;let p=Ct(u.packageDir,u.credentialSchema);if(Cn(p))try{let S=new xt({allErrors:!0}).compile(JSON.parse(xn(p,"utf8")));if(!S({type:t.type,...t.values})){let d=(S.errors??[]).map(y=>`credentials.values.${String(y.instancePath||y.params?.missingProperty||"").replace(/^\//,"")}`);throw new A("VALIDATION_FAILED",400,"凭据字段校验失败（ajv 字段级）",d)}}catch(v){if(v instanceof A)throw v}}function je(e,n={}){let{onApplied:r,cache:t}=n;function i(p,v,S,d){let y=p!==null,R=v.length>0,a=!d&&y,l=!d&&R;a&&(_(H(e,B),`${JSON.stringify(p,null,2)}
-`),t?.invalidate([H(e,B)]));let g=a||l,b=g&&r!==void 0;b&&r?.();let C=[];return y&&C.push(B),R&&C.push(...v.map(m=>D(m.stem))),{written:g,restartScheduled:b,files:C,credentials:v,issues:S}}let o;async function s(){o=await M(e)}function f(p,v){return p.filter(S=>Array.isArray(S.path)).map(S=>{let d=S.path.map(String).join(".");return v!==""&&d.startsWith(v)&&d.length>v.length?d.slice(v.length):d}).filter(S=>S.length>0)}function u(p,v,S){let d=o;if(!d||!d.strictValidation||!d.module.parseIntegrationsConfig)throw new A("CONTRACTS_NOT_RESOLVED",503,"contracts 严格校验面不可用（需 ≥0.9）——写路径门控失败（工厂边缘断言应先行拦截）");try{d.module.parseIntegrationsConfig(p)}catch(y){throw y instanceof Error&&Array.isArray(y.issues)?new A("VALIDATION_FAILED",400,"节点 schema 校验失败",f(y.issues,S)):new A("VALIDATION_FAILED",400,y instanceof Error?y.message:String(y))}}return{warmup:s,applyApp(p,v={}){me(p,"root"),bn(p,v,"root");let S=[],d=ge(e,t),y=d??{services:{}};d===null&&S.push({severity:"warning",code:"SKELETON_MATERIALIZED",message:"config/integrations.json 缺席——已物化骨架（写时自动初始化；R13 语义翻转提示）"});let R={...y};for(let c of te)c in p||delete R[c];for(let[c,w]of Object.entries(p))R[c]=w;let a=typeof R.provider=="string"?R.provider:"app",l=In(a,v.credentials,v.credentialsByInstance);for(let c of l)An(e,a,void 0,c.input,void 0,t);let g=l.find(c=>c.instanceId===void 0);if(v.credentials&&g&&(R.credentialRef=g.ref),v.credentialsByInstance){let c={...R.credentialRefByInstance??{}};for(let w of l)w.instanceId!==void 0&&(c[w.instanceId]=w.ref);R.credentialRefByInstance=c}let b=v.credentials!==void 0||v.credentialsByInstance!==void 0,C=Z(d,R);if(C&&!b)return{written:!1,restartScheduled:!1,files:[],credentials:[],issues:S};u(R,S,"");let m=v.dryRun===!0,I=Oe(e,l,m);return S.push(...Te(R)),i(C?null:R,I,S,v.dryRun)},applyModule(p,v,S={}){me(v,"root");let{modules:d,catalog:y}=N(e,t),R=d.find(c=>c.id===p);if(!R)throw new A("MODULE_NOT_FOUND",404,`模块 ${p} 非已装模块`);let a=U({modules:d,catalog:y},R);if(!a.writable)throw a.reason==="multi-domain"?new A("VALIDATION_FAILED",400,`模块 ${p} 跨 ${a.domainKeys.length} 个域（${a.domainKeys.join("、")}）——模块级统一配置仅支持单域模块，请按服务级配置（编辑各服务行）`):a.reason==="zero-domain"?new A("VALIDATION_FAILED",400,`模块 ${p} 无服务需求声明，无域配置位`):new A("VALIDATION_FAILED",400,`域键 ${a.domainKey} 由 ${a.coOwners.map(c=>cn(d,c)).join("、")} 共用——写通道拒绝歧义操作，请按服务级配置`);let l=a.domainKey,g=[],b=ge(e,t);if(b===null&&Object.keys(v).length===0)return{written:!1,restartScheduled:!1,files:[],credentials:[],issues:g};b===null&&g.push({severity:"warning",code:"SKELETON_MATERIALIZED",message:"config/integrations.json 缺席——已物化骨架（写时自动初始化；R13 语义翻转提示）"});let C=b??{services:{}},m={...C.domains??{}},I={...C,domains:m};return Object.keys(v).length===0?delete m[l]:m[l]={...v},Z(b,I)?{written:!1,restartScheduled:!1,files:[],credentials:[],issues:g}:(u(I,g,`domains.${l}.`),g.push(...Te(I)),i(I,[],g,S.dryRun))},applyService(p,v,S={}){me(v,"root"),bn(v,S,"slot");let d=[],y=ge(e,t);if(!ne(N(e,t).vocabulary,Object.keys(y?.services??{}),p))throw new A("SERVICE_NOT_FOUND",404,`服务 ${p} 不在服务词汇（已装契约包 ∪ 已配置）`);y===null&&d.push({severity:"warning",code:"SKELETON_MATERIALIZED",message:"config/integrations.json 缺席——已物化骨架（写时自动初始化；R13 语义翻转提示）"});let R=y??{services:{}},a={...R.services??{}},l={...R,services:a};a[p]={...v};let g=v.provider,b=g!==null&&typeof g=="object"?g:void 0,C=typeof g=="string"?g:typeof b?.provider=="string"?b.provider:"app",m=p.includes(".")?p.slice(0,p.indexOf(".")):p,I=kn(C,p,m,S.credentials,S.credentialsByInstance);for(let O of I)An(e,C,p,O.input,typeof b?.credentialType=="string"?b.credentialType:void 0,t);let c=a[p],w=I.find(O=>O.instanceId===void 0);if(S.credentials&&w&&(c.credentialRef=w.ref),S.credentialsByInstance){let O={...c.instances??{}};for(let P of I){if(P.instanceId===void 0)continue;let V={...O[P.instanceId]??{}};V.credentialRef=P.ref,O[P.instanceId]=V}c.instances=O}let x=S.credentials!==void 0||S.credentialsByInstance!==void 0,k=Z(y,l);if(k&&!x)return{written:!1,restartScheduled:!1,files:[],credentials:[],issues:d};u(l,d,`services.${p}.`);let E=S.dryRun===!0,T=Oe(e,I,E);return d.push(...Te(l)),i(k?null:l,T,d,S.dryRun)},deleteService(p){let v=[],S=ge(e,t);if(!ne(N(e,t).vocabulary,Object.keys(S?.services??{}),p))throw new A("SERVICE_NOT_FOUND",404,`服务 ${p} 不在服务词汇（已装契约包 ∪ 已配置）`);let d={...S?.services??{}};if(!(p in d))return{written:!1,restartScheduled:!1,files:[],credentials:[],issues:v};delete d[p];let y={...S??{services:{}},services:d};_(H(e,B),`${JSON.stringify(y,null,2)}
-`),t?.invalidate([H(e,B)]),v.push(...Me(e));let R=r!==void 0;return R&&r?.(),{written:!0,restartScheduled:R,files:[B],credentials:[],issues:v}}}}import{existsSync as Ot}from"fs";import{join as Mt}from"path";function Pe(e){let n=Mt(e,"config","integrations.json");if(Ot(n))return{generated:!1,reason:"in-place",services:[]};let r=[];for(let o of N(e).modules)for(let s of o.descriptor.contributes.providers?.slots??[])s.local===!0&&r.push({service:s.service,provider:s.provider,implementation:s.implementation});if(r.length===0)return{generated:!1,reason:"no-local-slots",services:[]};let t={},i=new Set(r.map(o=>o.provider));if(i.size===1){let[o]=i;for(let s of r)t[s.service]={};_(n,`${JSON.stringify({provider:o,services:t},null,2)}
-`)}else{for(let o of r)t[o.service]={provider:o.provider,implementation:o.implementation};_(n,`${JSON.stringify({services:t},null,2)}
-`)}return{generated:!0,reason:"generated",services:r.map(o=>o.service).sort()}}function En(e){return e.replace(/^@tbox\.cn\/app-/,"").replace(/^@[^/]+\//,"")}function Tt(e){return En(e.id).startsWith("provider-")||En(e.pkg).startsWith("provider-")}function Ne(e){return{modules:e.walk.modules.filter(r=>!Tt(r)).map(r=>({id:r.id,name:r.descriptor.name,title:r.descriptor.name,description:""})).sort((r,t)=>r.id.localeCompare(t.id))}}function Ve(e,n){let r=e.walk.modules.find(u=>u.id===n);if(!r)throw new A("MODULE_NOT_FOUND",404,`模块 ${n} 非已装模块`);let t=(r.descriptor.contributes.services??[]).map(u=>({service:u.service,...u.title?{title:u.title}:{},...u.description?{description:u.description}:{},required:u.optional===!1})),i=U(e.walk,r),o=e.integrations?.domains??{},s=i.writable?o[i.domainKey]??null:null,f=i.domainKeys.map(u=>{let p=F(e.integrations,u);return{domain:u,effective:p.provider,layer:p.layer}});return{domainKeys:[...i.domainKeys],integration:s,providerBindings:f,configEditable:i.writable,services:t}}function On(e,n){let r=N(e.appDir,e.cache),t=Y(e.appDir,e.cache);return{appDir:e.appDir,walk:r,catalog:r.catalog,integrations:t,contracts:n}}function Mn(e){let n=new Set;for(let r of e.modules){for(let t of r.descriptor.contributes.services??[])n.add(t.service);for(let t of r.descriptor.contributes.providers?.slots??[])n.add(t.service)}return n}function ve(e,n,r){let t=e.providers[n];return t?Object.values(t).some(i=>i.services.includes(r)):!1}function Tn(e,n){let r=[];for(let[t,i]of Object.entries(e.providers))Object.values(i).some(o=>o.services.includes(n))&&r.push(t);return r.sort()}function De(e){let n=Mn(e.walk),r=e.walk.vocabulary.filter(o=>!n.has(o)).map(o=>({service:o,required:!1})),t=e.integrations,i=null;if(t){let o={};for(let s of te)s in t&&(o[s]=t[s]);i=o}return{services:r,integration:i}}function Fe(e,n){let r=e.integrations?.services??{},t=e.catalog.services[n];if(!ne(e.walk.vocabulary,Object.keys(r),n))throw new A("SERVICE_NOT_FOUND",404,`服务 ${n} 不在服务词汇（已装契约包 ∪ 已配置）`);let i=r[n]??null;return{service:n,...t?.title?{title:t.title}:{title:n},...t?.description?{description:t.description}:{},required:t?!t.optional:!1,defaults:t?t.defaults.map(o=>({...o})):[],integration:i,suppliedBy:Tn(e.catalog,n)}}import{existsSync as Nn,readFileSync as Vn,realpathSync as jn}from"fs";import{isAbsolute as jt,join as Pt,relative as Nt,resolve as Pn,sep as Vt}from"path";function $e(e){let n=[];for(let[r,t]of Object.entries(e.catalog.providers)){let i=Object.values(t);i.length!==0&&n.push({provider:r,local:i.every(o=>o.local===!0),owner:i[0].owner})}return{providers:n.sort((r,t)=>r.provider.localeCompare(t.provider))}}function _e(e,n,r){let t=e.catalog.providers[n];if(!t)throw new A("PROVIDER_NOT_FOUND",404,`厂商 ${n} 不 ∈ catalog（内联声明厂商无包级档案——身份与表单经组合端点暴露）`);let i={};for(let s of Object.values(t))for(let f of s.services)(i[f]??={implementations:[]}).implementations.push({implementation:s.implementation,credentialType:s.credentialType});if(r?.has("integrationSchemas"))for(let[s,f]of Object.entries(i))f.integrationSchemas={configSchema:K(e,n,s)};let o=Object.values(t);return{provider:n,local:o.every(s=>s.local===!0),owner:o[0].owner,services:i}}function Le(e,n,r){let t=e.catalog.providers[n],i=e.integrations?.services??{},o=[];if(t)for(let p of Object.values(t))p.services.includes(r)&&o.push({implementation:p.implementation,credentialType:p.credentialType});let s=i[r]?.provider,f=s&&typeof s=="object"&&s.provider===n?s:void 0;if(o.length===0&&!f)throw t?new A("SUPPLY_NOT_FOUND",404,`厂商 ${n} 未供给服务 ${r}（AI 帮我实现流：PUT 显式绑定后实施）`):new A("PROVIDER_NOT_FOUND",404,`厂商 ${n} 完全未知（不 ∈ catalog 且无任何内联声明）`);o.length===0&&f&&o.push({implementation:i[r]?.implementation??`${n}-inline@1`,credentialType:f.credentialType});let u=K(e,n,r,f?s?.configSchema:void 0);return{provider:n,service:r,implementations:o,integrationSchemas:{configSchema:u}}}function K(e,n,r,t){let i=e.walk.serviceSchemas[`${n}\0${r}`];return i?We(e.appDir,i.packageDir,i.configSchema):typeof t=="string"?Dt(e.appDir,t):null}function We(e,n,r){if(!r)return null;let t=Pt(n,r);if(!Nn(t))return null;try{return JSON.parse(Vn(t,"utf8"))}catch{return null}}function Dt(e,n){let r=Pn(e,"config","schemas"),t=Pn(e,n),i=Nt(r,t);if(i===""||i.startsWith("..")||jt(i))throw new A("VALIDATION_FAILED",400,"configSchema 引用必须落在 config/schemas/ 内（禁路径逃逸）",["provider.configSchema"]);if(!Nn(t))return null;let o,s;try{o=jn(r),s=jn(t)}catch{return null}if(s!==o&&!s.startsWith(o+Vt))throw new A("VALIDATION_FAILED",400,"configSchema 引用经 symlink 逃逸出 config/schemas/（realpath 复核拒绝）",["provider.configSchema"]);try{return JSON.parse(Vn(t,"utf8"))}catch{return null}}function Dn(e){return{version:e.version,evaluation:e.evaluation,strictValidation:e.strictValidation,notes:[...e.notes]}}function Fn(e,n,r){let t=e.integrations,i=L(n),o=t?.services?.[n],s=o?.instances?.[r]??o?.instances?.["*"];return s&&s.provider!==void 0?"instance":o?.provider!==void 0?"service":F(t,i).layer==="module"?"module":typeof t?.provider=="string"&&t.provider.length>0?"app":null}function $n(e,n,r,t,i){let o=n.resolveEffectiveService(e.integrations,r,t,i);if(o.status==="ok"&&o.effective){let s=o.effective.provider,f=typeof s=="string"?s:String(s?.provider??"");return{status:"ok",provider:f,implementation:o.effective.implementation,effective:{provider:f,implementation:o.effective.implementation,...o.effective.config!==void 0?{config:{...o.effective.config}}:{},...o.effective.credentialRef!==void 0?{credentialRef:o.effective.credentialRef}:{},layer:Fn(e,r,t)??"app"}}}return o.status==="binding-unresolved"?{status:"binding-unresolved",statusMessage:o.message}:{status:o.status}}function Be(e){let n=e.contracts.module;if(!n.resolveEffectiveService||!n.normalizeInstances)throw new A("CONTRACTS_NOT_RESOLVED",503,"contracts 求值面缺席（契约包形态异常）——重新安装或升级应用 @tbox.cn/app-contracts 后重试");return n}function Ke(e,n){let r=Be(n),{integrations:t,catalog:i}=n,o=r.buildSupplyLookup(i),s=t,u=r.normalizeInstances({instances:s?.instances,defaultInstanceId:s?.defaultInstanceId}).defaultInstanceId??"*",p=$n(n,r,e,u,o),v=Fn(n,e,u),S=n.integrations?.services?.[e]?.provider,d=p.provider??(typeof S=="string"?S:typeof S=="object"&&S?String(S.provider):void 0),y=new Set(Object.keys(n.catalog.providers)),R=d!==void 0&&y.has(d)?Ft(n.catalog,d,e):void 0,a=i.services[e],l=a!==void 0?!a.optional:void 0,g=a?.owners[0];return{status:p.status,...p.statusMessage?{statusMessage:p.statusMessage}:{},...d!==void 0?{provider:d}:{},...d!==void 0&&v!==null?{layer:v}:{},...R!==void 0?{supplied:R}:{},...g!==void 0?{module:g}:{},...l!==void 0?{required:l}:{}}}function Ft(e,n,r){return ve(e,n,r)}function re(e,n,r){let t=new Set([...e.walk.vocabulary,...Object.keys(e.catalog.services)]),i=e.integrations?.services??{};for(let s of Object.keys(i))t.add(s);let o={};for(let s of[...t].sort())r&&!r.includes(s)||(o[s]=Ke(s,e));return{contracts:Dn(e.contracts),resolutions:o,issues:n}}function ze(e,n,r){let t=Be(n),i=t.buildSupplyLookup(n.catalog),o=n.integrations,f=t.normalizeInstances({instances:o?.instances,defaultInstanceId:o?.defaultInstanceId}).instances.map(a=>a.id),u=n.integrations?.services?.[e],p=u?.instances?Object.keys(u.instances):void 0,v;f.length>0?(v=[...f],p?.includes("*")&&v.push("*")):p!==void 0&&p.length>0?v=p.includes("*")?["*"]:p:v=[];let S=v.map(a=>{let l=$n(n,t,e,a,i);return{instanceId:a,status:l.status,...l.statusMessage?{statusMessage:l.statusMessage}:{},...l.effective?{effective:l.effective}:{}}}),d=$t(n,e),R={...Ke(e,n),instances:S,inheritance:d};return{contracts:Dn(n.contracts),resolution:R,issues:r.filter(a=>a.service===e)}}function $t(e,n){let r=e.integrations,t=L(n),i=r?.services?.[n],o=e.integrations,f=Be(e).normalizeInstances({instances:o?.instances,defaultInstanceId:o?.defaultInstanceId}).defaultInstanceId??"*",u=i?.instances?.[f]??i?.instances?.["*"],p=F(r,t);return[{layer:"app",...r?.provider?{provider:r.provider}:{}},{layer:"module",...p.layer==="module"&&p.provider?{provider:p.provider}:{}},{layer:"service",...typeof i?.provider=="string"?{provider:i.provider}:{},...i?.implementation?{implementation:i.implementation}:{}},{layer:"instance",...u?.provider?{provider:u.provider}:{},...u?.implementation?{implementation:u.implementation}:{}}]}function Ue(e,n,r){if(n===null)return null;let t={};for(let i of r)t[i]={configSchema:K(e,n,i)};return{provider:n,services:t}}function q(e){return e===null||typeof e!="object"?JSON.stringify(e??null):Array.isArray(e)?`[${e.map(q).join(",")}]`:`{${Object.keys(e).sort().map(r=>`${JSON.stringify(r)}:${q(e[r])}`).join(",")}}`}var _t="\0no-enum";function Lt(e){let n=e.enum;return Array.isArray(n)?`[${[...new Set(n.map(q))].sort().join(",")}]`:_t}function Wt(e){if(!e||typeof e!="object"||Array.isArray(e))return null;let n=e.type;return n===void 0?null:q(n)}function Bt(e){let n=e.map(t=>Wt(t.subschema));if(n.some(t=>t===null)||new Set(n).size>1)return null;if(n[0]==='"object"'){let t=q(e[0].subschema);return e.every(i=>q(i.subschema)===t)?e[0].subschema:null}return new Set(e.map(t=>Lt(t.subschema))).size===1?e[0].subschema:null}function _n(e,n){let r=[],t=!0,i=new Map;for(let[s,f]of Object.entries(e.services)){let u=f.configSchema;if(u===null){r.push(s);continue}if(!u||typeof u!="object"||Array.isArray(u))continue;let p=u;p.additionalProperties===!1&&(t=!1);let v=p.properties;if(!v||typeof v!="object"||Array.isArray(v))continue;let S=Array.isArray(p.required)?p.required:[];for(let d of Object.keys(v)){let y=i.get(d)??[];y.push({service:s,subschema:v[d],required:S.includes(d)}),i.set(d,y)}}let o=[];for(let[s,f]of i)o.push({key:s,schema:Bt(f),sources:f.map(({service:u,required:p})=>({service:u,required:p}))});return{provider:e.provider,schemaless:r,unsupplied:[...n?.unsupplied??[]],additionalPropertiesAllowed:t,fields:o}}function Ln(e,n,r,t){let i=typeof t=="string"&&t.length>0?t:void 0;if(e==="app"){if(i!==void 0)return i;let f=n.integrations?.provider;return typeof f=="string"&&f.length>0?f:null}let o=n.walk.modules.find(f=>f.id===r);if(!o)return null;let s=U(n.walk,o);return s.writable?i!==void 0?i:F(n.integrations,s.domainKey).provider:null}var Wn={integrationSchemas:null,integrationFieldRegistry:null};function Je(e,n){let r=Ln("app",e,void 0,n);if(r===null)return Wn;let t=Ue(e,r,ln(e.catalog,r));return{integrationSchemas:t,integrationFieldRegistry:_n(t)}}function Ye(e,n,r){let t=Ln("module",e,n,r),i=e.walk.modules.find(u=>u.id===n);if(t===null||!i)return Wn;let o=(i.descriptor.contributes.services??[]).map(u=>u.service),s=u=>ve(e.catalog,t,u),f=Ue(e,t,o.filter(s));return{integrationSchemas:f,integrationFieldRegistry:_n(f,{unsupplied:[...new Set(o.filter(u=>!s(u)))]})}}function Kt(e){return Je(e).integrationSchemas}function zt(e,n){return Ye(e,n).integrationSchemas}function He(e,n){let r=e.integrations?.services?.[n]?.provider;if(r===void 0||r===""){let t=F(e.integrations,L(n));return t.provider===null?null:{provider:t.provider,configSchema:K(e,t.provider,n)}}if(typeof r=="string")return{provider:r,configSchema:K(e,r,n)};if(ee(r)){let t=r;return{provider:t.provider,configSchema:K(e,t.provider,n,t.configSchema)}}return null}function ie(e,n){if(n===void 0||!n.startsWith("secret://"))return;let r=n.slice(9),t=Q(e,r);if(t)return{type:t.type,ref:n,file:D(r),masked:oe(t.values)}}function Ze(e){let n=e.integrations,r={credential:ie(e.appDir,typeof n?.credentialRef=="string"?n.credentialRef:void 0)??null,byInstance:{}};for(let{id:i}of n?.instances??[]){let o=n?.credentialRefByInstance?.[i];o!==void 0&&(r.byInstance[i]=ie(e.appDir,o)??null)}let t={};for(let[i,o]of Object.entries(n?.services??{})){let s={credential:ie(e.appDir,o.credentialRef)??null,byInstance:{}};for(let[f,u]of Object.entries(o.instances??{}))s.byInstance[f]=ie(e.appDir,u.credentialRef)??null;t[i]=s}return{app:r,services:t}}function qe(e,n){return{types:(n===void 0?Object.keys(e.catalog.credentialTypes):[...new Set(Object.values(e.catalog.providers[n]??{}).map(t=>t.credentialType))]).sort().map(t=>{let i=e.catalog.credentialTypes[t];return{credentialType:t,owner:i?.owner??"",credentialSchema:i?We(e.appDir,i.packageDir,i.credentialSchema):null}})}}import Ut from"path";var Jt={app:["serviceResolutions","integrationSchemas","integrationFieldRegistry"],module:["serviceResolutions","integrationSchemas","integrationFieldRegistry"],provider:["integrationSchemas"],service:["integrationSchemas"]};function ye(e,n){if(!n||n.length===0)return new Set;let r=Jt[e],t=[...new Set(n)].filter(i=>!r.includes(i));if(t.length>0)throw new A("VALIDATION_FAILED",400,`include 含未知或不适用于本端点的键：${t.join("、")}（白名单：${r.join("、")}）`,["include"]);return new Set(n)}var Bn=["integrationSchemas","integrationFieldRegistry"];function Kn(e,n,r){if(!(typeof n!="string"||n.length===0)&&!Bn.some(t=>r.has(t)))throw new A("VALIDATION_FAILED",400,`参数 ${e} 需与表单 include 键（${Bn.join("、")}）同现——轴参仅重定向表单层双投影`,[e])}function Yt(e,n={}){let r=Se(),t=Promise.resolve(),i={appDir:e,cache:r};function o(a){if(!a.strictValidation)throw new A("CONTRACTS_NOT_RESOLVED",503,he(a))}function s(a){return On(i,a)}async function f(){let a=await M(e),l=s(a),g=l.integrations;if(g===null)return[];let b={resolveEffectiveService:u(a.module.resolveEffectiveService,"resolveEffectiveService"),buildSupplyLookup:u(a.module.buildSupplyLookup,"buildSupplyLookup"),moduleDomainOf:u(a.module.moduleDomainOf,"moduleDomainOf"),normalizeInstances:u(a.module.normalizeInstances,"normalizeInstances"),RESOURCE_TYPE_IDS:a.module.RESOURCE_TYPE_IDS??[]},C=be(e,l.walk,g,process.env);return ae({contracts:b,integrations:g,supplies:b.buildSupplyLookup(l.catalog),...C})}function u(a,l){if(typeof a!="function")throw new A("CONTRACTS_NOT_RESOLVED",503,`contracts 求值面 ${l} 缺席（形态异常）`);return a}function p(a){let l=t.then(a,a);return t=l.catch(()=>{}),l}let v={async loadModules(){let a=await M(e);return Ne(s(a))},async loadModule(a,l){let g=ye("module",l?.include);Kn("moduleProvider",l?.moduleProvider,g);let b=await M(e),C=s(b),m=Ve(C,a);if(g.has("serviceResolutions")&&(m.serviceResolutions=b.evaluation&&b.strictValidation?await f().then(I=>re(C,I,m.services.map(c=>c.service))):null),g.has("integrationSchemas")||g.has("integrationFieldRegistry")){let I=Ye(C,a,l?.moduleProvider);g.has("integrationSchemas")&&(m.integrationSchemas=I.integrationSchemas),g.has("integrationFieldRegistry")&&(m.integrationFieldRegistry=I.integrationFieldRegistry)}return m},async loadApp(a){let l=ye("app",a?.include);Kn("appProvider",a?.appProvider,l);let g=await M(e),b=s(g),C=De(b);if(l.has("serviceResolutions")&&(C.serviceResolutions=g.evaluation&&g.strictValidation?await f().then(m=>re(b,m)):null),l.has("integrationSchemas")||l.has("integrationFieldRegistry")){let m=Je(b,a?.appProvider);l.has("integrationSchemas")&&(C.integrationSchemas=m.integrationSchemas),l.has("integrationFieldRegistry")&&(C.integrationFieldRegistry=m.integrationFieldRegistry)}return C},async loadService(a,l){let g=ye("service",l?.include),b=await M(e),C=s(b),m=Fe(C,a);return g.has("integrationSchemas")&&(m.integrationSchemas=He(C,a)),m},async loadServiceResolutions(a){let l=await M(e);o(l);let g=await f();return re(s(l),g,a)},async loadServiceResolution(a){let l=await M(e);o(l);let g=await f();return ze(a,s(l),g)},async loadProviders(){let a=await M(e);return $e(s(a))},async loadProvider(a,l){let g=ye("provider",l?.include),b=await M(e);return _e(s(b),a,g)},async loadProviderService(a,l){let g=await M(e);return Le(s(g),a,l)},async loadCredentials(){let a=await M(e);return Ze(s(a))},async loadCredentialTypes(a){let l=await M(e);return qe(s(l),a)}},S=je(e,{onApplied:n.onApplied,cache:r}),d={async writeAppIntegration(a,l){await S.warmup();let g=await M(e);return o(g),p(()=>S.applyApp(a,l))},async writeModuleIntegration(a,l,g){await S.warmup();let b=await M(e);return o(b),p(()=>S.applyModule(a,l,g))},async writeServiceIntegration(a,l,g){await S.warmup();let b=await M(e);return o(b),p(()=>S.applyService(a,l,g))},async deleteServiceIntegration(a){await S.warmup();let l=await M(e);return o(l),p(()=>S.deleteService(a))}},y={invalidate(){r.invalidate(),we(e)},async resolveContracts(){return M(e)},walkManifests(){return R(e)},parseModuleDescriptor(a){return G(a)},loadProviderCatalogRaw(){return xe(e)},async readIntegrationsConfig(){return Y(e,r)},async writeIntegrationsConfig(a){await S.warmup();let l=await M(e);return o(l),p(()=>Ht(e,a,r))},async ensureMockBindings(){await S.warmup();let a=await M(e);return o(a),p(()=>Pe(e))},async evaluateIntegrationServices(a){await S.warmup();let l=await M(e);o(l);let g={resolveEffectiveService:u(l.module.resolveEffectiveService,"resolveEffectiveService"),buildSupplyLookup:u(l.module.buildSupplyLookup,"buildSupplyLookup"),moduleDomainOf:u(l.module.moduleDomainOf,"moduleDomainOf"),normalizeInstances:u(l.module.normalizeInstances,"normalizeInstances"),RESOURCE_TYPE_IDS:l.module.RESOURCE_TYPE_IDS??[]};return ae({...a,contracts:g})}};function R(a){return N(a,r)}return{...v,...d,...y}}function Ht(e,n,r){let t=Ut.join(e,"config","integrations.json");_(t,`${JSON.stringify(n,null,2)}
-`),r.invalidate([t])}export{te as APP_INTEGRATION_NODE_KEYS,A as AppToolkitError,W as SAFE_NAME_PATTERN,gt as assertValidModuleId,be as buildPredicateAssembly,Ie as checkInstanceKeys,wt as collectDeclaredModules,he as contractsNotResolvedMessage,Yt as createAppToolkit,Se as createFileCache,je as createWriteCore,At as credentialArtifactExists,Z as deepEqual,z as deriveStem,ie as echoForRef,an as ensureDir,Pe as ensureMockBindings,ae as evaluateIntegrationServices,Yn as expandEnvVars,Sn as extractModuleIdFromSource,we as invalidateContractsResolver,ee as isControlledInlineProvider,vn as isValidModuleId,Kt as loadAppIntegrationSchemas,De as loadAppView,qe as loadCredentialTypesView,Ze as loadCredentialsView,Ve as loadModuleDetailView,zt as loadModuleIntegrationSchemas,Ne as loadModulesView,wn as loadProviderCatalog,xe as loadProviderCatalogRaw,_e as loadProviderDetailView,Le as loadProviderServiceDetailView,$e as loadProvidersView,Fe as loadServiceDetailView,He as loadServiceIntegrationSchemas,ze as loadServiceResolutionDetail,re as loadServiceResolutionsView,le as manifestPath,oe as maskCredentialValues,Xe as moduleDependencySchema,rn as moduleDescriptorSchema,Ge as pageContribSchema,G as parseModuleDescriptor,en as providerSlotContribSchema,mn as readAppManifest,Ae as readAppManifestFull,Q as readCredentialFile,Y as readIntegrationsConfig,Rn as readIntegrationsStrict,Me as reconcileOrphanCredentials,pn as refToEnvKey,ut as removeNpmModule,M as resolveContractsForApp,M as resolveContractsForAppExport,Ue as resolveLayerIntegrationSchemas,Ke as resolveServiceSummary,tn as resourceNeedContribSchema,nn as serviceNeedContribSchema,D as stemToFilePath,Qn as stemToRef,Qe as tabContribSchema,ft as updateNpmModule,pt as upsertMiniappContainer,dt as upsertNpmModule,N as walkManifests,lt as writeAppManifest,_ as writeAtomic,Re as writeCredentialFile};
+import{a as je,b as T,c as Te}from"./chunk-WUULQDOV.js";import{z as I}from"zod";var z=/^[a-zA-Z0-9][a-zA-Z0-9._-]*$/,it=I.object({cardType:I.string(),schemaVersion:I.number().optional()}),fn=I.object({route:I.string(),component:I.string()}),gn=I.object({route:I.string(),label:I.string().optional(),icon:I.string().optional(),order:I.number().optional()}),mn=I.object({id:I.string(),range:I.string().optional(),required:I.boolean().default(!0)}),vn=I.object({service:I.string(),provider:I.string().regex(z,"provider 名含非法字符（需 /^[a-zA-Z0-9][a-zA-Z0-9._-]*$/）"),implementation:I.string(),credentialType:I.string(),local:I.boolean().optional(),configSchema:I.string().optional(),credentialSchema:I.string().optional()}),yn=I.object({service:I.string(),optional:I.boolean().default(!0),defaults:I.array(I.object({provider:I.string().regex(z,"provider 名含非法字符（需 /^[a-zA-Z0-9][a-zA-Z0-9._-]*$/）"),implementation:I.string()})).default([]),name:I.string().optional(),description:I.string().optional()}),Sn=I.object({service:I.string()}).strict(),wn=I.object({id:I.string(),type:I.string()}),hn=I.object({schemaVersion:I.number().default(1),id:I.string(),name:I.string().optional(),description:I.string().optional(),version:I.string().default("0.0.0"),kind:I.enum(["platform","business","third-party"]).default("business"),risk:I.object({level:I.enum(["high","medium","low"]).default("low"),writeBoundary:I.enum(["sdk-enforced","source"]).default("source")}).default({}),distribution:I.object({defaultMode:I.enum(["hybrid","sdk","codegen","local"]).default("codegen")}).default({}),declare:I.object({handlers:I.array(I.string()).default([]),tools:I.array(I.string()).default([]),cards:I.array(it).default([]),routes:I.array(I.string()).default([]),pages:I.array(fn).default([]),tabs:I.array(gn).default([]),providers:I.object({slots:I.array(vn).default([])}).default({}),owns:I.array(Sn).default([]),consumes:I.array(yn).default([]),resources:I.array(wn).default([])}).default({}),dependencies:I.object({modules:I.array(mn).default([])}).default({}),env:I.array(I.string()).default([])}).strict();function ot(e){if(!e||typeof e!="object"||Array.isArray(e))return[];let n=[],r=e;"contributes"in r&&n.push("(root): manifest 旧键 `contributes` 已更名 `declare`（v6 声明面）——codegen 副本经 `module update --source` 重新生成 / sdk 模式升级模块包 / 手改两键");let t=r.declare;t&&typeof t=="object"&&!Array.isArray(t)&&"services"in t&&n.push("declare: manifest 旧键 `declare.services` 已更名 `declare.consumes`（消费关系定向化）——同上三路径升级"),!("id"in r)&&"name"in r&&n.push("(root): manifest 标识键 `name` 已更名 `id`（v7 词汇统一）——codegen 副本经 `module update --source` 重新生成 / sdk 模式升级模块包 / 手改两键");let o=t&&typeof t=="object"&&!Array.isArray(t)?t:void 0,s=Array.isArray(o?.consumes)&&o.consumes.some(i=>i!==null&&typeof i=="object"&&"title"in i);return("title"in r||s)&&n.push("(root): manifest 展示名键 `title` 已更名 `name`（v7 词汇统一；declare.consumes[].title 同步改 name）——同上三路径升级"),n}function ie(e){let n=ot(e);if(n.length>0)return{ok:!1,errors:n,legacy:!0};let r=hn.safeParse(e);return r.success?{ok:!0,value:r.data}:{ok:!1,errors:r.error.issues.map(t=>`${t.path.join(".")||"(root)"}: ${t.message}`)}}var st=/\$\$?\{([A-Z][A-Z0-9_]*)(?::-([^}]*))?\}/g;function Rn(e){return JSON.stringify(e).slice(1,-1)}function Ne(e,n=process.env){let r=[],t=e.replace(st,(o,s,i)=>{if(o.startsWith("$$"))return o.slice(1);let d=n[s];return d!==void 0?Rn(d):i!==void 0?Rn(i):(r.push(s),o)});return r.length>0?{missing:r}:{text:t,missing:[]}}import{mkdirSync as at,existsSync as In,readFileSync as ct,writeFileSync as lt}from"fs";import{dirname as dt,join as kn}from"path";function ge(e){let n={};for(let[r,t]of Object.entries(e)){if(typeof t!="string"){n[r]=null;continue}n[r]=t.length<=4?"****":`${t.slice(0,2)}****`}return n}var x=class extends Error{code;httpStatus;fields;constructor(n,r,t,o){super(t),this.name="AppToolkitError",this.code=n,this.httpStatus=r,this.fields=o}};function Pe(e){return e.notes.length>0?e.notes[0]:e.version===null?"contracts 不可解析（未安装）——检查应用依赖安装后重试":e.strictValidation?"contracts workspace 源码态未构建——执行 pnpm --filter @tbox.cn/app-contracts build 后重试":`contracts ${e.version} 无严格校验面（需 ≥0.9.0）——升级应用 @tbox.cn/app-contracts 依赖后可用`}function me(e,n){if(n!==void 0&&(n.includes("/")||n.includes("\\")||n.includes("..")))throw new x("VALIDATION_FAILED",400,`凭据 stem 派生输入含路径敌对字符（${e}）——拒绝派生`)}function Q(e){if(me("provider",e.provider),me("service",e.service),me("instanceId",e.instanceId),me("domain",e.domain),e.instanceId!==void 0){let n=e.domain??e.service??"global";return`${e.provider}-${e.instanceId}-${n}`}return e.service!==void 0?`${e.provider}-${e.service}`:`${e.provider}-global`}function ut(e){return`secret://${e}`}function _(e){return`config/credentials/${e}.json`}function oe(e,n){let r=kn(e,_(n));if(!In(r))return null;try{let t=JSON.parse(ct(r,"utf8"));if(typeof t.type!="string")return null;let{type:o,...s}=t,i={};for(let[d,p]of Object.entries(s))typeof p=="string"&&(i[d]=p);return{type:o,values:i}}catch{return null}}function Ve(e,n,r){let t=kn(e,_(n)),o=In(t);return at(dt(t),{recursive:!0}),lt(t,`${JSON.stringify({type:r.type,...r.values},null,2)}
+`,"utf8"),o}import{mkdirSync as pt,renameSync as ft,writeFileSync as gt}from"fs";import{dirname as mt}from"path";function $(e,n){bn(mt(e));let r=`${e}.tmp-${process.pid}-${Date.now()}`;gt(r,n,"utf8"),ft(r,e)}function bn(e){pt(e,{recursive:!0})}import{existsSync as F,readdirSync as Fe,readFileSync as X}from"fs";import{join as P}from"path";import{existsSync as vt,readFileSync as Cn,mkdirSync as yt,writeFileSync as St}from"fs";import An from"path";function ve(e){return An.join(e,".tbox","app.json")}function En(e){let n=ve(e);if(!vt(n))return null;try{let r=JSON.parse(Cn(n,"utf8")),t=r?.templateVersion;return typeof t!="string"||t.trim().length===0?null:{templateVersion:t.trim(),npmModules:Array.isArray(r?.npmModules)?r.npmModules:[]}}catch{return null}}function wt(e,n){let r=ve(e);yt(An.dirname(r),{recursive:!0}),St(r,`${JSON.stringify(n,null,2)}
+`,"utf8")}function De(e){let n=En(e);if(n===null)return null;let r=ve(e);try{let t=JSON.parse(Cn(r,"utf8"));return{...n,miniappContainers:Array.isArray(t?.miniappContainers)?t.miniappContainers:[]}}catch{return{...n,miniappContainers:[]}}}function ht(e,n){let r=e.npmModules.filter(t=>t.id!==n.id);return{...e,npmModules:[...r,n]}}function Rt(e,n){return{...e,npmModules:e.npmModules.filter(r=>r.id!==n)}}function It(e,n){let r=(e.miniappContainers??[]).filter(t=>t.id!==n.id);return{...e,miniappContainers:[...r,n]}}function kt(e,n,r){return{...e,npmModules:e.npmModules.map(t=>t.id===n?{...t,...r}:t)}}function On(e){return/^[a-z0-9]+(-[a-z0-9]+)*$/.test(e)&&!e.includes("..")}function bt(e,n){if(!On(e))throw new Error(`非法模块 id "${e}"（来自 ${n}）：仅允许小写字母/数字/中划线`)}function xn(e){try{let n=JSON.parse(e);if(!Array.isArray(n.slots))return null;let r=n.slots.filter(o=>typeof o=="string"),t={};if(n.meta&&typeof n.meta=="object"&&!Array.isArray(n.meta))for(let[o,s]of Object.entries(n.meta)){if(!s||typeof s!="object"||Array.isArray(s))continue;let{name:i,description:d}=s,p={};typeof i=="string"&&i.length>0&&(p.name=i),typeof d=="string"&&d.length>0&&(p.description=d),(p.name!==void 0||p.description!==void 0)&&(t[o]=p)}return{slots:r,meta:t}}catch{return null}}function ye(e,n){let r=t=>{try{let o=JSON.parse(t),s=ie(o);if(s.ok)return{kind:"strict",id:s.value.id,version:s.value.version,descriptor:s.value,declare:s.value.declare};if(s.legacy)return{kind:"legacy",detail:s.errors.join("; ")};if(o&&typeof o=="object"&&"declare"in o){let i=o;return{kind:"loose",...typeof i.id=="string"?{id:i.id}:{},declare:{providers:i.declare?.providers,consumes:i.declare?.consumes}}}return null}catch{return null}};if(n)return n.read(e,r)??null;if(!F(e))return null;try{return r(X(e,"utf8"))}catch{return null}}function Ct(e){let n=P(e,".tbox","app.json");if(!F(n))return[];try{let r=JSON.parse(X(n,"utf8"));return Array.isArray(r.npmModules)?r.npmModules.filter(t=>!!t&&typeof t=="object"&&typeof t.id=="string"&&typeof t.package=="string"):[]}catch{return[]}}function At(e){let n=P(e,".tbox-dev.local"),r=P(n,"dev-manifest.json");if(!F(r))return[];try{let t=JSON.parse(X(r,"utf8")),o=[];for(let[s,i]of Object.entries(t.redirects??{}))typeof i!="string"||!s.startsWith("@tbox.cn/app-")||o.push({pkg:s,dir:P(n,i)});return o}catch{return[]}}function Et(e,n){let r=[],t=[e];for(let i of["apps","packages"]){let d=P(e,i);if(F(d))try{for(let p of Fe(d,{withFileTypes:!0}))p.isDirectory()&&t.push(P(d,p.name))}catch{}}let o=new Set,s=(i,d)=>{let p=n?n.read(d,xn):xn(X(d,"utf8"));p!=null&&r.push({dir:i,slots:p.slots,meta:p.meta})};for(let i of t){let d=P(i,"node_modules","@tbox.cn");if(!F(d))continue;let p=[];try{p=Fe(d)}catch{continue}for(let l of p){let m=P(d,l);if(o.has(m))continue;o.add(m);let k=P(m,"service-slots.json"),R=P(m,"src","service-slots.json");F(k)?s(m,k):F(R)&&s(m,R)}}for(let i of t)for(let d of[P(i,"service-slots.json"),P(i,"src","service-slots.json")])F(d)&&s(i,d);return r}function V(e,n){let r=[],t={providers:{},services:{},credentialTypes:{}},o={},s=[],i={},d=new Set,p=(a,g,h,y)=>{for(let u of a){let v=t.providers[u.provider]??={},b=v[u.implementation];b?b.services.includes(u.service)||b.services.push(u.service):(v[u.implementation]={provider:u.provider,implementation:u.implementation,credentialType:u.credentialType,owner:g,...y?.name?{name:y.name}:{},...y?.description?{description:y.description}:{},...u.local?{local:!0}:{},...u.configSchema?{configSchema:u.configSchema}:{},...u.credentialSchema?{credentialSchema:u.credentialSchema}:{},services:[u.service]},t.credentialTypes[u.credentialType]??={owner:g,packageDir:h,...u.credentialSchema?{credentialSchema:u.credentialSchema}:{}});let c=`${u.provider}\0${u.service}`;o[c]||(o[c]={...u.configSchema?{configSchema:u.configSchema}:{},...u.credentialSchema?{credentialSchema:u.credentialSchema}:{},packageDir:h})}},l=a=>a.kind==="strict"?{name:a.descriptor.name,description:a.descriptor.description}:void 0,m=(a,g)=>{for(let h of a){let y=i[h];y===void 0?i[h]=g:y!==g&&s.push({severity:"error",code:"OWNERSHIP_CONFLICT",module:g,message:`服务 ${h} 归属冲突：${y} 与 ${g} 均声明 owns（先声明 ${y} 胜出）——修正 manifest declare.owns 互斥`})}},k=(a,g)=>{a.kind==="legacy"&&s.push({severity:"error",code:"OLD_MANIFEST_KEY",module:g,message:`${g}：${a.detail}`})},R=a=>a.kind==="strict"||a.kind==="loose"?a.declare:null,w=(a,g)=>{let h=a.optional!==!1,y=a.defaults??[],u=t.services[a.service];if(u){u.optional=u.optional&&h;let v=new Set(u.defaults.map(b=>`${b.provider}\0${b.implementation}`));for(let b of y){let c=`${b.provider}\0${b.implementation}`;v.has(c)||(u.defaults.push(b),v.add(c))}u.owners.includes(g)||u.owners.push(g);return}t.services[a.service]={optional:h,defaults:[...y],...a.name?{name:a.name}:{},...a.description?{description:a.description}:{},owners:[g]}};for(let a of Ct(e)){if(d.has(a.id))continue;let g=P(e,"packages",a.id),h=P(e,"node_modules",...a.package.split("/")),y=ye(P(g,"tbox.module.json"),n)??ye(P(h,"tbox.module.json"),n);if(y?.kind==="legacy"){k(y,a.id),d.add(a.id);continue}if(!y)continue;d.add(a.id);let u=F(P(g,"tbox.module.json"))?g:h,v=R(y);y.kind==="strict"&&r.push({id:a.id,dir:u,pkg:a.mode==="sdk"?a.package:`@app/${a.id}`,descriptor:y.descriptor});let b=v?.providers?.slots??[];b.length&&p(b,a.package,u,l(y));let c=v?.consumes??[];for(let E of c)w(E,a.package);let S=y.kind==="strict"?y.descriptor.declare.owns:[];S.length&&m(S.map(E=>E.service),a.id)}for(let{pkg:a,dir:g}of At(e)){let h=ye(P(g,"tbox.module.json"),n);if(h?.kind==="legacy"){k(h,a);continue}if(!h?.id||d.has(h.id))continue;d.add(h.id);let y=R(h),u=y?.providers?.slots??[];u.length&&p(u,a,g,l(h));let v=y?.consumes??[];for(let c of v)w(c,a);let b=h.kind==="strict"?h.descriptor.declare.owns:[];b.length&&m(b.map(c=>c.service),h.id)}let A=P(e,"packages");if(F(A)){let a=[];try{a=Fe(A,{withFileTypes:!0}).filter(g=>g.isDirectory()).map(g=>g.name)}catch{}for(let g of a){if(d.has(g))continue;let h=P(A,g),y=ye(P(h,"tbox.module.json"),n);if(y?.kind==="legacy"){k(y,g),d.add(g);continue}if(!y)continue;let u=y.id??g;if(d.has(u))continue;d.add(u);let v=R(y);y.kind==="strict"&&r.push({id:u,dir:h,pkg:`@app/${u}`,descriptor:y.descriptor});let b=v?.providers?.slots??[];b.length&&p(b,`@app/${u}`,h,l(y));let c=v?.consumes??[];for(let E of c)w(E,`@app/${u}`);let S=y.kind==="strict"?y.descriptor.declare.owns:[];S.length&&m(S.map(E=>E.service),u)}}let O=new Set,f={};for(let a of Et(e,n)){for(let g of a.slots)O.add(g);for(let[g,h]of Object.entries(a.meta))f[g]===void 0&&(f[g]=h)}return{modules:r,catalog:t,serviceSchemas:o,vocabulary:[...O].sort(),slotMeta:f,ownership:i,declarationIssues:s}}function Mn(e,n,r){let t=P(e,"src",n,"index.ts");if(!F(t))return!1;try{let o=X(t,"utf8");return new RegExp(`export\\s+const\\s+${r}\\b`).test(o)}catch{return!1}}function Ot(e){let n=P(e,"src","server","index.ts");if(!F(n))return"";try{return X(n,"utf8")}catch{return""}}function jn(e){return e.match(/declaration\s*:\s*\{[\s\S]*?moduleId\s*:\s*['"]([^'"]+)['"]/)?.[1]}function xt(e){let n=[],r=V(e),t=De(e),o=new Map;for(let s of t?.npmModules??[])o.set(s.id,s.mode);for(let s of r.modules){let i=o.get(s.id)??"local",d=Mn(s.dir,"server","serverModule"),p=s.descriptor.declare;n.push({id:s.id,pkg:i==="sdk"?s.pkg:`@app/${s.id}`,mode:i,hasServerEntry:d,hasClientEntry:Mn(s.dir,"client","clientModule"),hasCards:(p.cards?.length??0)>0,...d?{moduleId:jn(Ot(s.dir))}:{}})}return n.sort((s,i)=>s.id.localeCompare(i.id))}function Mt(e){return V(e).ownership}function L(e,n){let r=e?.modules?.[n]?.provider;if(typeof r=="string"&&r.length>0)return{provider:r,layer:"module"};let t=e?.provider;return typeof t=="string"&&t.length>0?{provider:t,layer:"app"}:{provider:null,layer:null}}function K(e,n){let r=(n.descriptor.declare.owns??[]).map(t=>t.service).sort();return r.length===0?{writable:!1,reason:"zero-ownership",ownedServices:[]}:{writable:!0,ownedServices:r}}function _e(e,n){return[...new Set(Object.values(e.providers[n]??{}).flatMap(r=>r.services))].sort()}function J(e){if(!e||typeof e!="object")return!1;let n=Object.keys(e),r=new Set(["provider","credentialType","configSchema"]);if(!n.every(o=>r.has(o)))return!1;let t=e;return typeof t.provider=="string"&&t.provider.length>0&&typeof t.credentialType=="string"&&t.credentialType.length>0&&(t.configSchema===void 0||typeof t.configSchema=="string")}function Tn(e,n,r){return e==="*"||r.has(e)?null:{severity:"error",code:"INSTANCE_KEY_NOT_REGISTERED",instance:e,message:`integrations: ${n} 键 ${e} 不在 malls 白名单内（${[...r].join(", ")}）`}}function $e(e,n){let r=new Set(n),t=[],o=(s,i)=>{let d=Tn(s,i,r);d&&t.push(d)};for(let s of Object.keys(e.configByInstance??{}))o(s,"configByInstance");for(let s of Object.keys(e.credentialRefByInstance??{}))o(s,"credentialRefByInstance");for(let[s,i]of Object.entries(e.services??{}))for(let d of Object.keys(i.instances??{}))o(d,`services.${s}.instances`);return t}function ee(e){let n=[],r=e.contracts,{integrations:t,suppliedProviders:o,demandedServices:s,supplies:i,malls:d,credentialSchemaMissing:p,vendorConfigKeys:l,vendorGlobalConfigKeys:m,vendorConfigSchemaMissing:k,credentialFileMissing:R,credentialFileType:w,realmSwitchHints:A,moduleResourceNeeds:O,ownership:f,installedModuleIds:a}=e,g=d?new Set(d):void 0;for(let c of A??[])n.push({severity:"warning",code:"REALM_SWITCH_HINT",message:c});let h=new Set(Object.keys(o).map(c=>c.slice(0,c.indexOf("\0"))).filter(c=>c.length>0)),y=(c,S,E,C)=>{if(typeof E?.provider=="string"&&typeof E.implementation=="string"&&E.provider&&E.implementation)return o[se(E.provider,E.implementation)]?.credentialType;if(typeof S.provider=="string"&&typeof S.implementation=="string")return o[se(S.provider,S.implementation)]?.credentialType;let M=S.provider?.credentialType;if(typeof M=="string")return M;if(!i)return;let N=C??Object.keys(S.instances??{})[0]??"",j=r.resolveEffectiveService(t,c,N,i,f);if(!(j.status!=="ok"||typeof j.effective.provider!="string"))return o[se(j.effective.provider,j.effective.implementation)]?.credentialType};if(R||w)for(let[c,S]of Object.entries(t.services))for(let[E,C]of Object.entries(S.instances??{})){if(C.enabled===!1)continue;let M=C.credentialRef??S.credentialRef??t.credentialRefByInstance?.[E]??t.credentialRef;if(typeof M!="string"||!M.startsWith("secret://"))continue;let N=M.slice(9);R?.[N]===!0&&n.push({severity:"error",code:"CREDENTIAL_FILE_MISSING",service:c,instance:E,message:`integrations: 凭据文件缺失 ${N}（${c}@${E} effective ref=${M}；档内 config/credentials/ 无此文件）`});let j=w?.[N];if(j){let D=y(c,S,C,E);D&&j!==D&&n.push({severity:"error",code:"CREDENTIAL_TYPE_MISMATCH",service:c,instance:E,message:`integrations: 凭据文件 ${N}.json type=${j} 与绑定 credentialType ${D} 不一致（${c}@${E}——transport 创建期将按 type 选策略）`})}}let u=(c,S)=>{if(!g)return;let E=Tn(c,S,g);E&&n.push(E)};for(let[c]of Object.entries(t.configByInstance??{}))u(c,"configByInstance");for(let[c]of Object.entries(t.credentialRefByInstance??{}))u(c,"credentialRefByInstance");let v=Object.entries(t.services).filter(([,c])=>c.instances==null||c.instances["*"]!=null).map(([c])=>c);if(v.length>0){let c=Object.entries(t.services).filter(([,S])=>S.instances!=null&&S.instances["*"]==null).map(([S])=>S);c.length>0&&n.push({severity:"warning",code:"WILDCARD_ALIGNMENT",message:`integrations: 激活形态不对称（通配：${v.join(", ")}；显式键集：${c.join(", ")}）——动态 mallId 将在显式键集槽上 INSTANCE_NOT_FOUND（provider 业务限制表达位），确认是否齐步`})}let b=r.normalizeInstances({instances:t.instances,defaultInstanceId:t.defaultInstanceId});b.instances.length>=2&&b.defaultInstanceId===null&&n.push({severity:"warning",code:"MULTI_INSTANCE_NO_DEFAULT",message:`integrations: ${b.instances.length} 个部署实例（${b.instances.map(c=>c.id).join(", ")}）均无 defaultInstanceId——无 scope 参数访问将落全局会话（默认商圈不注入）`});for(let[c,S]of Object.entries(t.services)){if(s[c]||n.push({severity:"warning",code:"SLOT_NOT_DECLARED",service:c,message:`integrations: 服务槽 ${c} 无消费方声明（拼写错误或需求方未安装）——若为拆分前旧槽位词汇（member.main/parking.main/promotion.read/shopping-guide.main），参照 cookbook·app-config 槽位迁移配方展开为新槽`}),typeof S.provider=="string"?typeof S.implementation=="string"&&!o[se(S.provider,S.implementation)]&&n.push({severity:"error",code:"INSTANCE_SUPPLY_UNMATCHED",service:c,message:`integrations: provider ${S.provider}/${S.implementation} 未命中已装供给（${c} 槽级）——装对应 provider 包或改绑`}):S.provider!==void 0&&!J(S.provider)&&n.push({severity:"error",code:"INLINE_PROVIDER_INVALID",service:c,message:`integrations: 内联 provider 超受控形状（${c} 槽级；允许键 provider/credentialType/configSchema）`}),p){let C=y(c,S);C&&p[C]===!0&&n.push({severity:"error",code:"SCHEMA_FILE_MISSING",service:c,message:`integrations: credentialType ${C} 的 schema 引用不存在（${c}；manifest 声明指向缺失文件）`})}typeof S.provider=="object"&&typeof S.implementation!="string"&&n.push({severity:"error",code:"IMPL_WITHOUT_PROVIDER",service:c,message:`integrations: 内联厂商声明必须同时提供 implementation（${c} 槽级）`});for(let[C,M]of Object.entries(S.instances??{})){u(C,`services.${c}.instances`);let N=M.provider!==void 0,j=M.implementation!==void 0;if(j&&!N&&n.push({severity:"error",code:"IMPL_WITHOUT_PROVIDER",service:c,instance:C,message:`integrations: 实例级 implementation 需伴随 provider（${c}@${C}——impl-only 禁止，provider 是绑定组头）`}),N&&j){let D=M.provider,W=M.implementation;typeof D=="string"&&typeof W=="string"?o[se(D,W)]||n.push({severity:"error",code:"INSTANCE_SUPPLY_UNMATCHED",service:c,instance:C,message:`integrations: 实例级 provider 覆盖 ${D}/${W} 未命中已装供给（${c}@${C}）`}):J(D)||n.push({severity:"error",code:"INLINE_PROVIDER_INVALID",service:c,instance:C,message:`integrations: 实例级内联 provider 超受控形状（${c}@${C}）`})}}}for(let[c,S]of[["root",t.provider],...Object.entries(t.modules??{}).map(([E,C])=>[`modules.${E}`,C?.provider])])typeof S!="string"||S.length===0||h.has(S)||n.push({severity:"error",code:"VENDOR_NOT_INSTALLED",module:c.startsWith("modules.")?c.slice(8):void 0,message:`integrations: ${c} provider ${S} 未命中已装供给——装对应 provider 包或 provider use 改绑`});if(i)for(let[c,S]of Object.entries(t.services)){let E=S.instances?Object.keys(S.instances):[""];for(let C of E){let M=r.resolveEffectiveService(t,c,C,i,f);M.status==="binding-unresolved"&&n.push({severity:"error",code:"BINDING_UNRESOLVED",service:c,instance:C||void 0,message:`integrations: ${M.message}`})}}for(let[c,S]of Object.entries(t.services))S.implementation!==void 0&&S.provider===void 0&&n.push({severity:"error",code:"IMPL_WITHOUT_PROVIDER",service:c,message:`integrations: 槽级 implementation 需伴随 provider（${c}——impl-only 禁止，provider 是绑定组头）`});for(let[c,S]of Object.entries(t.modules??{})){if(!(S?.provider!==void 0||S?.config!==void 0))continue;let C=a?!a.has(c):!1,M=0;if(f)for(let j of Object.values(f))j===c&&(M+=1);if(C||!(f===void 0)&&M===0){let j=C?"未安装（键 = install id）":"未声明任何 owns（无模块级配置位）";n.push({severity:"error",code:"MODULE_CONFIG_DEAD",module:c,message:`integrations: modules.${c} 携带 provider/config 但模块${j}（MODULE_CONFIG_DEAD——模块级集成位作用于 declare.owns 服务，改 declare.owns 或删除该节点）`})}}if(l){let c=new Set,S=!1,E=C=>{typeof C!="string"||C.length===0||(l[C]&&c.add(C),!l[C]&&!k?.[C]&&(S=!0),k?.[C]&&(S=!0))};E(t.provider);for(let C of Object.values(t.modules??{}))E(C?.provider);for(let C of Object.values(t.services)){let M=C.provider;E(typeof C.provider=="string"?C.provider:M?.provider)}if(c.size>0&&!S){let C=new Set;for(let j of c)for(let D of l[j]??[])C.add(D);let M=new Set;for(let j of c)for(let D of m?.[j]??[])M.add(D);let N=(j,D,W,Z)=>{for(let[q]of Object.entries(j??{}))(W??C).has(q)?Z&&Z.size>0&&!Z.has(q)&&n.push({severity:"warning",code:"GLOBAL_FIELD_UNDECLARED",message:`integrations: ${D} 键 ${q} 过 schema 校验但未声明 x-tbox-global（不进应用/模块全局表单；已配置值照常生效——如需全局编辑请在 provider schema 标记）`}):n.push({severity:"error",code:"DOMAIN_CONFIG_INVALID",message:`integrations: ${D} 键 ${q} 不在引用厂商（${[...c].join("/")}）任何槽 schema properties 内（死配置）`})};N(t.config,"root.config",void 0,M);for(let[j,D]of Object.entries(t.configByInstance??{}))N(D,`root.configByInstance[${j}]`,void 0,M);for(let[j,D]of Object.entries(t.modules??{})){if(!D?.config)continue;let W=L(t,j).provider??void 0;if(W===void 0){N(D.config,`modules.${j}.config`,void 0,M);continue}let Z=l[W];if(!Z||k?.[W])continue;let q=m?.[W];N(D.config,`modules.${j}.config`,new Set(Z),q)}}}for(let[c,S]of Object.entries(s)){let E=t.services[c];if(!E){n.push({severity:"warning",code:"SLOT_NOT_CONFIGURED",service:c,message:`integrations: 服务槽 ${c}（需求方 ${S.owners.join(", ")}）未配置${S.optional?"（可选槽）":"（必需槽——模块将走降级链）"}`});continue}let C=Object.entries(E.instances??{}).filter(([,M])=>M.enabled===!1).map(([M])=>M);C.length>0&&n.push({severity:"warning",code:"INSTANCE_DISABLED",service:c,instance:C.join(", "),message:`integrations: ${c} 实例禁用（${C.join(", ")}）`})}for(let[c,S]of Object.entries(t.modules??{})){let E=O?.[c];O&&!(c in O)&&n.push({severity:"warning",code:"RESOURCE_NOT_DECLARED",module:c,message:`integrations: modules.${c} 未命中已装模块（键 = install id——检查 .tbox/app.json entry.id / packages/ 目录名）`});for(let[C,M]of Object.entries(S?.resources??{})){let N=M?.type;(typeof N!="string"||!r.RESOURCE_TYPE_IDS.includes(N))&&n.push({severity:"error",code:"RESOURCE_TYPE_UNKNOWN",module:c,message:`integrations: modules.${c}.resources.${C} type 非法（${String(N)}；词汇表 = ${r.RESOURCE_TYPE_IDS.join("/")}）`}),E&&E.size>0&&!E.has(C)&&n.push({severity:"warning",code:"RESOURCE_NOT_DECLARED",module:c,message:`integrations: modules.${c}.resources.${C} 未被模块 manifest declare.resources 声明`})}}return n}function se(e,n){return`${e}\0${n}`}import{existsSync as Le,readFileSync as jt,readdirSync as Tt}from"fs";import{join as Se}from"path";function Pn(e){return e.replaceAll("-","_").toUpperCase()}function Nn(e){if(!Le(e))return null;try{let n=JSON.parse(jt(e,"utf8"));return n&&typeof n=="object"?n:null}catch{return null}}function Nt(e){let n=new Set,r=e.properties;if(r&&typeof r=="object"&&!Array.isArray(r))for(let t of Object.keys(r))n.add(t);return n}function ae(e,n,r,t=process.env){let o={};for(let[u,v]of Object.entries(n.catalog.providers))for(let[b,c]of Object.entries(v))o[`${u}\0${b}`]={services:[...c.services],owner:c.owner,credentialType:c.credentialType};let s={};for(let[u,v]of Object.entries(n.catalog.services))s[u]={optional:v.optional,owners:[...v.owners]};let i={},d={},p={},l={},m={};for(let u of n.modules){m[u.id]=new Set((u.descriptor.declare.resources??[]).map(v=>v.id));for(let v of u.descriptor.declare.providers?.slots??[]){if(v.configSchema){let b=Nn(Se(u.dir,v.configSchema));if(b){let c=i[v.provider]??=new Set,S=d[v.provider]??=new Set;for(let C of Nt(b))c.add(C);let E=b.properties;if(E&&typeof E=="object"&&!Array.isArray(E))for(let[C,M]of Object.entries(E))M&&typeof M=="object"&&M["x-tbox-global"]===!0&&S.add(C)}else p[v.provider]=!0}v.credentialSchema&&!Le(Se(u.dir,v.credentialSchema))&&(l[v.credentialType]=!0)}}let k={},R=new Set,w=Se(e,"config","credentials");if(Le(w))for(let u of Tt(w)){if(!u.endsWith(".json"))continue;let v=u.slice(0,-5);R.add(v);let b=Nn(Se(w,u));b&&typeof b.type=="string"&&(k[v]=b.type)}let A=r,O=[],f=u=>{typeof u=="string"&&u.startsWith("secret://")&&O.push(u)};for(let u of Object.values(A.services??{}))if(u&&typeof u=="object"){f(u.credentialRef);for(let v of Object.values(u.instances??{}))v&&typeof v=="object"&&f(v.credentialRef)}for(let u of Object.values(A.credentialRefByInstance??{}))f(u);f(A.credentialRef);let a={};for(let u of O){let v=u.slice(9);t[Pn(v)]===void 0&&(R.has(v)||(a[v]=!0))}let g=[];for(let[u,v]of Object.entries(A.services??{})){let b=v&&typeof v=="object"&&typeof v.provider=="string"?v.provider:void 0;for(let[c,S]of Object.entries((v&&typeof v=="object"?v.instances:void 0)??{})){let E=S&&typeof S=="object"&&typeof S.provider=="string"?S.provider:void 0;b&&E&&E!==b&&g.push(`integrations: ${u}@${c} 实现覆盖跨厂商（${b} → ${E}）——凭据域切换，确认该 mall 对应凭据在场`)}}let y=((Array.isArray(A.instances)?A.instances:void 0)??[]).map(u=>u&&typeof u=="object"&&typeof u.id=="string"?u.id:void 0).filter(u=>typeof u=="string");return{suppliedProviders:o,demandedServices:s,credentialFileMissing:a,credentialFileType:k,credentialSchemaMissing:l,vendorConfigKeys:i,vendorGlobalConfigKeys:d,vendorConfigSchemaMissing:p,realmSwitchHints:g,moduleResourceNeeds:m,...y.length>0?{malls:y}:{},ownership:n.ownership,installedModuleIds:new Set([...n.modules.map(u=>u.id),...new Set(Object.values(n.ownership))])}}import{existsSync as Ur,readFileSync as zr}from"fs";import{join as Jr,resolve as Gr}from"path";function We(e){return V(e).catalog}function we(e){let n=V(e).catalog,r={};for(let[s,i]of Object.entries(n.providers)){r[s]={};for(let[d,p]of Object.entries(i))r[s][d]={provider:p.provider,implementation:p.implementation,credentialType:p.credentialType,owner:p.owner,...p.local?{local:!0}:{},...p.configSchema?{configSchema:p.configSchema}:{},...p.credentialSchema?{credentialSchema:p.credentialSchema}:{},services:[...p.services]}}let t={};for(let[s,i]of Object.entries(n.services))t[s]={optional:i.optional,defaults:i.defaults.map(d=>({...d})),owners:[...i.owners]};let o={};for(let[s,i]of Object.entries(n.credentialTypes))o[s]={owner:i.owner,...i.credentialSchema?{credentialSchema:i.credentialSchema}:{}};return{providers:r,services:t,credentialTypes:o}}async function Be(e,n,r,t=process.env){let o=r.module,s=V(e),i=o.buildSupplyLookup(we(e)),d=ae(e,s,n,t);return ee({contracts:o,integrations:n,supplies:i,...d})}import{existsSync as Lt,rmSync as Wt}from"fs";import{join as Bt}from"path";import{existsSync as Pt,readFileSync as Vt}from"fs";import{join as Vn}from"path";var Dt=Vn("config","integrations.json");function B(e,n){let r=Vn(e,Dt),t=o=>JSON.parse(o);if(n)return n.read(r,t)??null;if(!Pt(r))return null;try{return t(Vt(r,"utf8"))}catch{return null}}async function Dn(e,n){let r=await T(e),t=B(e,n);if(t===null)return{config:null,strict:!1,contracts:r};if(r.strictValidation&&r.module.parseIntegrationsConfig)try{return{config:r.module.parseIntegrationsConfig(t),strict:!0,contracts:r}}catch(o){if(o instanceof Error&&Array.isArray(o.issues)){let s=o.issues.filter(i=>Array.isArray(i.path)).map(i=>i.path.map(String).join(".")).filter(i=>i.length>0);throw new x("VALIDATION_FAILED",400,"integrations.json 校验失败",s.length>0?s:void 0)}throw new x("VALIDATION_FAILED",400,o instanceof Error?o.message:String(o))}return{config:t,strict:!1,contracts:r}}function ce(e,n,r){return e.includes(r)||n.includes(r)}import{readdirSync as Ft,existsSync as he,readFileSync as _t}from"fs";import{join as Re}from"path";function Fn(e,n,r){let t=[];if(n){let o=Q({provider:e});t.push({stem:o,ref:`secret://${o}`,input:n})}for(let[o,s]of Object.entries(r??{})){let i=Q({provider:e,instanceId:o});t.push({instanceId:o,stem:i,ref:`secret://${i}`,input:s})}return t}function _n(e,n,r,t,o){let s=[];if(t){let i=Q({provider:e,service:n});s.push({stem:i,ref:`secret://${i}`,input:t})}for(let[i,d]of Object.entries(o??{})){let p=Q({provider:e,instanceId:i,domain:r});s.push({instanceId:i,stem:p,ref:`secret://${p}`,input:d})}return s}function ze(e,n,r){return n.map(t=>({stem:t.stem,ref:t.ref,overwrote:r?he(Re(e,_(t.stem))):Ve(e,t.stem,t.input)}))}function $t(e,n){return he(Re(e,_(n)))}function Ue(e,n){if(typeof e=="string"){e.startsWith("secret://")&&n.add(e.slice(9));return}if(Array.isArray(e)){for(let r of e)Ue(r,n);return}if(e&&typeof e=="object")for(let r of Object.values(e))Ue(r,n)}function le(e){let n=Re(e,"config","credentials"),r=new Set,t=Re(e,"config","integrations.json");if(he(t))try{Ue(JSON.parse(_t(t,"utf8")),r)}catch{}let o=[];if(!he(n))return o;let s=[];try{s=Ft(n).filter(i=>i.endsWith(".json")).map(i=>i.slice(0,-5))}catch{return o}for(let i of s.sort()){if(r.has(i))continue;let d=oe(e,i);o.push({severity:"warning",code:"ORPHANED_CREDENTIAL",message:`${_(i)} 不再被引用（凭据文件保留，可手动清理）`})}return o}function Ie(e){if(typeof e=="string")return e.length>0?e:void 0;if(e&&typeof e=="object"&&J(e)){let n=e.provider;return n.length>0?n:void 0}}async function Ut(e){let n=Bt(e,"config","integrations.json"),r=B(e);if(r===null)return{removed:[],orphanCredentials:[],skipped:"not-configured"};let t=await T(e);if(!t.strictValidation)return{removed:[],orphanCredentials:[],skipped:"predicate-unavailable"};let o;try{let w=Ne(JSON.stringify(r),process.env);if(w.missing.length>0||w.text===void 0)return{removed:[],orphanCredentials:[],skipped:"predicate-unavailable"};o=JSON.parse(w.text)}catch{return{removed:[],orphanCredentials:[],skipped:"predicate-unavailable"}}let s;try{s=await Be(e,o,t,process.env)}catch{return{removed:[],orphanCredentials:[],skipped:"predicate-unavailable"}}let i=V(e),d=new Set(Object.keys(i.catalog.providers)),p=i.ownership,l=structuredClone(r);l.services??={};let m=[];for(let w of s)if(w.severity==="error"){if(w.code==="VENDOR_NOT_INSTALLED")if(w.module){let O=(l.modules??{})[w.module];O?.provider&&(m.push(`modules.${w.module}.provider=${String(O.provider)}`),delete O.provider,Object.keys(O).length===0&&delete l.modules[w.module])}else l.provider&&(m.push(`root.provider=${l.provider}`),delete l.provider);else if(w.code==="MODULE_CONFIG_DEAD"&&w.module){let A=l.modules??{};if(A[w.module]){let O=A[w.module],f=[O.provider!==void 0?"provider":void 0,O.config!==void 0?"config":void 0,O.resources!==void 0?"resources":void 0].filter(Boolean);m.push(`modules.${w.module}（${f.join("+")} 整节点）`),delete l.modules[w.module]}}else if(w.code==="BINDING_UNRESOLVED"&&w.service){let A=l.services[w.service];if(!A)continue;let O=p[w.service];if([w.instance?Ie(A.instances?.[w.instance]?.provider):void 0,Ie(A.provider),O!==void 0?Ie(l.modules?.[O]?.provider):void 0,Ie(l.provider)].filter(a=>typeof a=="string").some(a=>d.has(a)))continue;if(w.instance){let a=A.instances;if(!a||!(w.instance in a))continue;delete a[w.instance],m.push(`services.${w.service}.instances.${w.instance}`),Object.keys(a).length===0&&delete A.instances,Object.keys(A).length===0&&delete l.services[w.service]}else delete l.services[w.service],m.push(`services.${w.service}`)}}if(Object.keys(l.services).length===0&&delete l.services,m.length===0)return{removed:m,orphanCredentials:[]};let k=!l.provider&&Object.keys(l.services??{}).length===0&&Object.keys(l.config??{}).length===0&&Object.keys(l.configByInstance??{}).length===0&&!l.credentialRef&&Object.keys(l.credentialRefByInstance??{}).length===0&&(l.instances??[]).length===0&&l.defaultInstanceId==null&&Object.keys(l.modules??{}).length===0;if(!k&&(l.services??={},typeof t.module.parseIntegrationsConfig=="function"))try{t.module.parseIntegrationsConfig(l)}catch{return{removed:[],orphanCredentials:[],skipped:"validation-failed"}}let R=[];return k?Lt(n)&&Wt(n,{force:!0}):$(n,`${JSON.stringify(l,null,2)}
+`),R=le(e).map(w=>w.message),{removed:m,orphanCredentials:R}}function ke(e,n){let r=e.modules.find(o=>o.id===n);if(r)return r;let t=e.modules.filter(o=>(o.descriptor.name??o.descriptor.id)===n);if(t.length===1)return t[0];throw t.length>1?new x("MODULE_NOT_FOUND",404,`模块展示名「${n}」命中多个模块：${t.map(o=>`${o.descriptor.name}(id=${o.id})`).join(" / ")}——请改用模块 id 寻址`):new x("MODULE_NOT_FOUND",404,`模块 ${n} 非已装模块（id / 展示名均未命中）`)}function G(e,n,r){let t=new Set;for(let i of Object.values(e.catalog.providers))for(let d of Object.values(i))for(let p of d.services)t.add(p);if(e.vocabulary.includes(r)||Object.hasOwn(e.catalog.services,r)||t.has(r)||n.includes(r))return r;let o=[],s=i=>{o.includes(i)||o.push(i)};for(let i of e.vocabulary)(e.slotMeta[i]?.name??e.catalog.services[i]?.name)===r&&s(i);for(let[i,d]of Object.entries(e.catalog.services))d.name===r&&s(i);if(o.length===1)return o[0];throw o.length>1?new x("SERVICE_NOT_FOUND",404,`服务展示名「${r}」命中多个服务：${o.join(" / ")}——请改用服务 id 寻址`):new x("SERVICE_NOT_FOUND",404,`服务 ${r} 不在服务词汇（已装契约包 ∪ 已配置）`)}import{existsSync as Wn,readFileSync as Bn}from"fs";import{join as ne,resolve as zt}from"path";import Kt from"ajv";var de=["provider","config","configByInstance","credentialRef","credentialRefByInstance","instances","defaultInstanceId"],ue=["provider","config"];var Y=ne("config","integrations.json");function te(e,n){if(e===n)return!0;if(Array.isArray(e)&&Array.isArray(n))return e.length!==n.length?!1:e.every((r,t)=>te(r,n[t]));if(e&&n&&typeof e=="object"&&typeof n=="object"){let r=Object.keys(e),t=Object.keys(n);return r.length!==t.length?!1:r.every(o=>te(e[o],n[o]))}return!1}function Ae(e,n){if(typeof e!="string"&&e&&typeof e=="object")for(let[r,t]of Object.entries(e)){if((r==="provider"||r==="instanceId")&&typeof t=="string"&&!z.test(t))throw new x("VALIDATION_FAILED",400,`${r} 名含非法字符（需 /^[a-zA-Z0-9][a-zA-Z0-9._-]*$/）`,[`${n}.${r}`]);Ae(t,`${n}.${r}`)}}function be(e,n,r){if(!(!e||typeof e!="object"||Array.isArray(e))){for(let t of Object.keys(e))if(!(r&&(t==="*"||t==="**"))&&!z.test(t))throw new x("VALIDATION_FAILED",400,`${n} 键 ${t} 含非法字符（需 /^[a-zA-Z0-9][a-zA-Z0-9._-]*$/）——进凭据 stem 派生，防路径逃逸`,[n])}}function $n(e,n,r){if(r==="root"){let t=e.instances;Array.isArray(t)&&t.forEach((o,s)=>{let i=o&&typeof o=="object"?o.id:void 0;if(typeof i=="string"&&!z.test(i))throw new x("VALIDATION_FAILED",400,`instances[${s}].id 含非法字符（需 /^[a-zA-Z0-9][a-zA-Z0-9._-]*$/）`,[`root.instances[${s}].id`])}),be(e.configByInstance,"root.configByInstance",!1),be(e.credentialRefByInstance,"root.credentialRefByInstance",!1)}else be(e.instances,"services.instances",!0);be(n.credentialsByInstance,"credentialsByInstance",!1)}function Ce(e,n){let r=ne(e,Y),t=o=>JSON.parse(o);if(n)return n.read(r,t)??null;if(!Wn(r))return null;try{return t(Bn(r,"utf8"))}catch{return null}}function Ke(e){let n=(e.instances??[]).map(r=>r.id);return n.length===0?[]:$e(e,n)}function Jt(e,n,r,t){let{catalog:o}=V(e,t),s=o.providers[n];if(!s)return;let i=new Set;for(let d of Object.values(s))(r===void 0||d.services.includes(r))&&i.add(d.credentialType);return i.size===1?[...i][0]:void 0}function Ln(e,n,r,t,o,s){if(typeof t.type!="string"||t.type.length===0)throw new x("VALIDATION_FAILED",400,"凭据 type 缺失或为空字符串",["credentials.type"]);let i=o??Jt(e,n,r,s);if(i!==void 0&&i!=="-"&&t.type!==i)throw new x("VALIDATION_FAILED",400,`凭据 type=${t.type} 与绑定 credentialType ${i} 不一致`,["credentials.type"]);if(r===void 0)return;let{serviceSchemas:d}=V(e,s),p=d[`${n}\0${r}`];if(!p?.credentialSchema)return;let l=zt(p.packageDir,p.credentialSchema);if(Wn(l))try{let k=new Kt({allErrors:!0}).compile(JSON.parse(Bn(l,"utf8")));if(!k({type:t.type,...t.values})){let R=(k.errors??[]).map(w=>`credentials.values.${String(w.instancePath||w.params?.missingProperty||"").replace(/^\//,"")}`);throw new x("VALIDATION_FAILED",400,"凭据字段校验失败（ajv 字段级）",R)}}catch(m){if(m instanceof x)throw m}}function Je(e,n={}){let{onApplied:r,cache:t}=n;function o(l,m,k,R){let w=l!==null,A=m.length>0,O=!R&&w,f=!R&&A;O&&($(ne(e,Y),`${JSON.stringify(l,null,2)}
+`),t?.invalidate([ne(e,Y)]));let a=O||f,g=a&&r!==void 0;g&&r?.();let h=[];return w&&h.push(Y),A&&h.push(...m.map(y=>_(y.stem))),{written:a,restartScheduled:g,files:h,credentials:m,issues:k}}let s;async function i(){s=await T(e)}function d(l,m){return l.filter(k=>Array.isArray(k.path)).map(k=>{let R=k.path.map(String).join(".");return m!==""&&R.startsWith(m)&&R.length>m.length?R.slice(m.length):R}).filter(k=>k.length>0)}function p(l,m,k){let R=s;if(!R||!R.strictValidation||!R.module.parseIntegrationsConfig)throw new x("CONTRACTS_NOT_RESOLVED",503,"contracts 严格校验面不可用（需 ≥0.9）——写路径门控失败（工厂边缘断言应先行拦截）");try{R.module.parseIntegrationsConfig(l)}catch(w){throw w instanceof Error&&Array.isArray(w.issues)?new x("VALIDATION_FAILED",400,"节点 schema 校验失败",d(w.issues,k)):new x("VALIDATION_FAILED",400,w instanceof Error?w.message:String(w))}}return{warmup:i,applyApp(l,m={}){Ae(l,"root"),$n(l,m,"root");let k=[],R=Ce(e,t),w=R??{services:{}};R===null&&k.push({severity:"warning",code:"SKELETON_MATERIALIZED",message:"config/integrations.json 缺席——已物化骨架（写时自动初始化；R13 语义翻转提示）"});let A={...w};for(let v of de)v in l||delete A[v];for(let[v,b]of Object.entries(l))A[v]=b;let O=typeof A.provider=="string"?A.provider:"app",f=Fn(O,m.credentials,m.credentialsByInstance);for(let v of f)Ln(e,O,void 0,v.input,void 0,t);let a=f.find(v=>v.instanceId===void 0);if(m.credentials&&a&&(A.credentialRef=a.ref),m.credentialsByInstance){let v={...A.credentialRefByInstance??{}};for(let b of f)b.instanceId!==void 0&&(v[b.instanceId]=b.ref);A.credentialRefByInstance=v}let g=m.credentials!==void 0||m.credentialsByInstance!==void 0,h=te(R,A);if(h&&!g)return{written:!1,restartScheduled:!1,files:[],credentials:[],issues:k};p(A,k,"");let y=m.dryRun===!0,u=ze(e,f,y);return k.push(...Ke(A)),o(h?null:A,u,k,m.dryRun)},applyModule(l,m,k={}){Ae(m,"root");let{modules:R,catalog:w,ownership:A}=V(e,t),O=R.find(c=>c.id===l);if(!O)throw new x("MODULE_NOT_FOUND",404,`模块 ${l} 非已装模块`);if(!K({modules:R,catalog:w,ownership:A},O).writable)throw new x("VALIDATION_FAILED",400,`模块 ${l} 未声明任何 declare.owns——无模块级配置位（模块级 provider/config 作用于归属服务）`);let a=[],g=Ce(e,t);if(g===null&&Object.keys(m).length===0)return{written:!1,restartScheduled:!1,files:[],credentials:[],issues:a};g===null&&a.push({severity:"warning",code:"SKELETON_MATERIALIZED",message:"config/integrations.json 缺席——已物化骨架（写时自动初始化；R13 语义翻转提示）"});let h=g??{services:{}},y={...h.modules??{}},u={...y[l]??{}};for(let c of Object.keys(m))if(!ue.includes(c))throw new x("VALIDATION_FAILED",400,`模块集成位仅接受 ${ue.join("/")} 键（收到 ${c}）`,[c]);let v={...u};for(let c of ue){let S=m[c];S==null||S===""||typeof S=="object"&&!Array.isArray(S)&&Object.keys(S).length===0?delete v[c]:v[c]=S}Object.keys(v).length===0?delete y[l]:y[l]=v;let b={...h,modules:y};return te(g,b)?{written:!1,restartScheduled:!1,files:[],credentials:[],issues:a}:(p(b,a,`modules.${l}.`),a.push(...Ke(b)),o(b,[],a,k.dryRun))},applyService(l,m,k={}){Ae(m,"root"),$n(m,k,"slot");let R=[],w=Ce(e,t);if(!ce(V(e,t).vocabulary,Object.keys(w?.services??{}),l))throw new x("SERVICE_NOT_FOUND",404,`服务 ${l} 不在服务词汇（已装契约包 ∪ 已配置）`);w===null&&R.push({severity:"warning",code:"SKELETON_MATERIALIZED",message:"config/integrations.json 缺席——已物化骨架（写时自动初始化；R13 语义翻转提示）"});let A=w??{services:{}},O={...A.services??{}},f={...A,services:O};O[l]={...m};let a=m.provider,g=a!==null&&typeof a=="object"?a:void 0,h=typeof a=="string"?a:typeof g?.provider=="string"?g.provider:"app",y=l.includes(".")?l.slice(0,l.indexOf(".")):l,u=_n(h,l,y,k.credentials,k.credentialsByInstance);for(let M of u)Ln(e,h,l,M.input,typeof g?.credentialType=="string"?g.credentialType:void 0,t);let v=O[l],b=u.find(M=>M.instanceId===void 0);if(k.credentials&&b&&(v.credentialRef=b.ref),k.credentialsByInstance){let M={...v.instances??{}};for(let N of u){if(N.instanceId===void 0)continue;let j={...M[N.instanceId]??{}};j.credentialRef=N.ref,M[N.instanceId]=j}v.instances=M}let c=k.credentials!==void 0||k.credentialsByInstance!==void 0,S=te(w,f);if(S&&!c)return{written:!1,restartScheduled:!1,files:[],credentials:[],issues:R};p(f,R,`services.${l}.`);let E=k.dryRun===!0,C=ze(e,u,E);return R.push(...Ke(f)),o(S?null:f,C,R,k.dryRun)},deleteService(l){let m=[],k=Ce(e,t);if(!ce(V(e,t).vocabulary,Object.keys(k?.services??{}),l))throw new x("SERVICE_NOT_FOUND",404,`服务 ${l} 不在服务词汇（已装契约包 ∪ 已配置）`);let R={...k?.services??{}};if(!(l in R))return{written:!1,restartScheduled:!1,files:[],credentials:[],issues:m};delete R[l];let w={...k??{services:{}},services:R};$(ne(e,Y),`${JSON.stringify(w,null,2)}
+`),t?.invalidate([ne(e,Y)]),m.push(...le(e));let A=r!==void 0;return A&&r?.(),{written:!0,restartScheduled:A,files:[Y],credentials:[],issues:m}}}}import{existsSync as Gt}from"fs";import{join as Yt}from"path";function Ge(e){let n=Yt(e,"config","integrations.json");if(Gt(n))return{generated:!1,reason:"in-place",services:[]};let r=[];for(let s of V(e).modules)for(let i of s.descriptor.declare.providers?.slots??[])i.local===!0&&r.push({service:i.service,provider:i.provider,implementation:i.implementation});if(r.length===0)return{generated:!1,reason:"no-local-slots",services:[]};let t={},o=new Set(r.map(s=>s.provider));if(o.size===1){let[s]=o;for(let i of r)t[i.service]={};$(n,`${JSON.stringify({provider:s,services:t},null,2)}
+`)}else{for(let s of r)t[s.service]={provider:s.provider,implementation:s.implementation};$(n,`${JSON.stringify({services:t},null,2)}
+`)}return{generated:!0,reason:"generated",services:r.map(s=>s.service).sort()}}function Un(e,n){let r=V(e.appDir,e.cache),t=B(e.appDir,e.cache);return{appDir:e.appDir,walk:r,catalog:r.catalog,integrations:t,contracts:n}}function zn(e){let n=new Set;for(let r of e.modules){for(let t of r.descriptor.declare.owns??[])n.add(t.service);for(let t of r.descriptor.declare.consumes??[])n.add(t.service);for(let t of r.descriptor.declare.providers?.slots??[])n.add(t.service)}return n}function Ee(e,n,r){let t=e.providers[n];return t?Object.values(t).some(o=>o.services.includes(r)):!1}function Kn(e,n){let r=[];for(let[t,o]of Object.entries(e.providers))Object.values(o).some(s=>s.services.includes(n))&&r.push(t);return r.sort()}function U(e,n){let r=e.slotMeta[n],t=e.catalog.services[n],o=r?.name??t?.name??n,s=r?.description??t?.description;return{name:o,...s!==void 0?{description:s}:{}}}function Jn(e){return e.replace(/^@tbox\.cn\/app-/,"").replace(/^@[^/]+\//,"")}function Ht(e){return Jn(e.id).startsWith("provider-")||Jn(e.pkg).startsWith("provider-")}function Ye(e){return{modules:e.walk.modules.filter(r=>!Ht(r)).map(r=>({id:r.id,name:r.descriptor.name??r.descriptor.id,description:r.descriptor.description??""})).sort((r,t)=>r.id.localeCompare(t.id))}}function He(e,n){let r=e.walk.modules.find(l=>l.id===n);if(!r)throw new x("MODULE_NOT_FOUND",404,`模块 ${n} 非已装模块`);let t=(r.descriptor.declare.consumes??[]).map(l=>{let m=U(e.walk,l.service);return{service:l.service,name:m.name,...m.description!==void 0?{description:m.description}:{},required:l.optional===!1}}),o=K(e.walk,r),i=(e.integrations?.modules??{})[n],d=i?{...typeof i.provider=="string"?{provider:i.provider}:{},...i.config&&typeof i.config=="object"&&!Array.isArray(i.config)?{config:i.config}:{}}:null,p=L(e.integrations,n);return{name:r.descriptor.name??r.descriptor.id,description:r.descriptor.description??"",ownedServices:o.ownedServices,integration:d,binding:{provider:p.provider,layer:p.layer},configEditable:o.writable,services:t}}function Ze(e){let n=zn(e.walk),r=e.walk.vocabulary.filter(s=>!n.has(s)).map(s=>{let i=U(e.walk,s);return{service:s,name:i.name,...i.description!==void 0?{description:i.description}:{},required:!1}}),t=e.integrations,o=null;if(t){let s={};for(let i of de)i in t&&(s[i]=t[i]);o=s}return{services:r,integration:o}}function qe(e,n){let r=e.integrations?.services??{},t=e.catalog.services[n];if(!ce(e.walk.vocabulary,Object.keys(r),n))throw new x("SERVICE_NOT_FOUND",404,`服务 ${n} 不在服务词汇（已装契约包 ∪ 已配置）`);let o=r[n]??null,s=U(e.walk,n);return{service:n,name:s.name,...s.description!==void 0?{description:s.description}:{},required:t?!t.optional:!1,defaults:t?t.defaults.map(i=>({...i})):[],integration:o,suppliedBy:Kn(e.catalog,n)}}import{existsSync as Hn,readFileSync as Zn,realpathSync as Gn}from"fs";import{isAbsolute as Zt,join as qt,relative as Qt,resolve as Yn,sep as Xt}from"path";function Qe(e){let n=[];for(let[r,t]of Object.entries(e.catalog.providers)){let o=Object.values(t);o.length!==0&&n.push({provider:r,local:o.every(s=>s.local===!0),owner:o[0].owner,...o[0].name?{name:o[0].name}:{},...o[0].description?{description:o[0].description}:{}})}return{providers:n.sort((r,t)=>r.provider.localeCompare(t.provider))}}function Xe(e,n,r){let t=e.catalog.providers[n];if(!t)throw new x("PROVIDER_NOT_FOUND",404,`厂商 ${n} 不 ∈ catalog（内联声明厂商无包级档案——身份与表单经组合端点暴露）`);let o={};for(let i of Object.values(t))for(let d of i.services)(o[d]??={implementations:[]}).implementations.push({implementation:i.implementation,credentialType:i.credentialType});for(let[i,d]of Object.entries(o)){let p=U(e.walk,i);d.name=p.name,p.description!==void 0&&(d.description=p.description)}if(r?.has("integrationSchemas"))for(let[i,d]of Object.entries(o))d.integrationSchemas={configSchema:H(e,n,i)};let s=Object.values(t);return{provider:n,local:s.every(i=>i.local===!0),owner:s[0].owner,...s[0].name?{name:s[0].name}:{},...s[0].description?{description:s[0].description}:{},services:o}}function en(e,n,r){let t=e.catalog.providers[n],o=e.integrations?.services??{},s=[];if(t)for(let l of Object.values(t))l.services.includes(r)&&s.push({implementation:l.implementation,credentialType:l.credentialType});let i=o[r]?.provider,d=i&&typeof i=="object"&&i.provider===n?i:void 0;if(s.length===0&&!d)throw t?new x("SUPPLY_NOT_FOUND",404,`厂商 ${n} 未供给服务 ${r}（AI 帮我实现流：PUT 显式绑定后实施）`):new x("PROVIDER_NOT_FOUND",404,`厂商 ${n} 完全未知（不 ∈ catalog 且无任何内联声明）`);s.length===0&&d&&s.push({implementation:o[r]?.implementation??`${n}-inline@1`,credentialType:d.credentialType});let p=H(e,n,r,d?i?.configSchema:void 0);return{provider:n,service:r,implementations:s,integrationSchemas:{configSchema:p}}}function H(e,n,r,t){let o=e.walk.serviceSchemas[`${n}\0${r}`];return o?nn(e.appDir,o.packageDir,o.configSchema):typeof t=="string"?er(e.appDir,t):null}function nn(e,n,r){if(!r)return null;let t=qt(n,r);if(!Hn(t))return null;try{return JSON.parse(Zn(t,"utf8"))}catch{return null}}function er(e,n){let r=Yn(e,"config","schemas"),t=Yn(e,n),o=Qt(r,t);if(o===""||o.startsWith("..")||Zt(o))throw new x("VALIDATION_FAILED",400,"configSchema 引用必须落在 config/schemas/ 内（禁路径逃逸）",["provider.configSchema"]);if(!Hn(t))return null;let s,i;try{s=Gn(r),i=Gn(t)}catch{return null}if(i!==s&&!i.startsWith(s+Xt))throw new x("VALIDATION_FAILED",400,"configSchema 引用经 symlink 逃逸出 config/schemas/（realpath 复核拒绝）",["provider.configSchema"]);try{return JSON.parse(Zn(t,"utf8"))}catch{return null}}function qn(e){return{version:e.version,evaluation:e.evaluation,strictValidation:e.strictValidation,notes:[...e.notes]}}function Qn(e,n,r){let t=e.integrations,o=t?.services?.[n],s=o?.instances?.[r]??o?.instances?.["*"];if(s&&s.provider!==void 0)return"instance";if(o?.provider!==void 0)return"service";let i=e.walk.ownership[n];return i!==void 0&&L(e.integrations,i).layer==="module"?"module":typeof t?.provider=="string"&&t.provider.length>0?"app":null}function Xn(e,n,r,t,o){let s=n.resolveEffectiveService(e.integrations,r,t,o);if(s.status==="ok"&&s.effective){let i=s.effective.provider,d=typeof i=="string"?i:String(i?.provider??"");return{status:"ok",provider:d,implementation:s.effective.implementation,effective:{provider:d,implementation:s.effective.implementation,...s.effective.config!==void 0?{config:{...s.effective.config}}:{},...s.effective.credentialRef!==void 0?{credentialRef:s.effective.credentialRef}:{},layer:Qn(e,r,t)??"app"}}}return s.status==="binding-unresolved"?{status:"binding-unresolved",statusMessage:s.message}:{status:s.status}}function tn(e){let n=e.contracts.module;if(!n.resolveEffectiveService||!n.normalizeInstances)throw new x("CONTRACTS_NOT_RESOLVED",503,"contracts 求值面缺席（契约包形态异常）——重新安装或升级应用 @tbox.cn/app-contracts 后重试");return n}function rn(e,n){let r=tn(n),{integrations:t,catalog:o}=n,s=r.buildSupplyLookup(o),i=t,p=r.normalizeInstances({instances:i?.instances,defaultInstanceId:i?.defaultInstanceId}).defaultInstanceId??"*",l=Xn(n,r,e,p,s),m=Qn(n,e,p),k=n.integrations?.services?.[e]?.provider,R=l.provider??(typeof k=="string"?k:typeof k=="object"&&k?String(k.provider):void 0),w=new Set(Object.keys(n.catalog.providers)),A=R!==void 0&&w.has(R)?nr(n.catalog,R,e):void 0,O=o.services[e],f=O!==void 0?!O.optional:void 0,a=O?.owners[0];return{status:l.status,...l.statusMessage?{statusMessage:l.statusMessage}:{},...R!==void 0?{provider:R}:{},...R!==void 0&&m!==null?{layer:m}:{},...A!==void 0?{supplied:A}:{},...a!==void 0?{module:a}:{},...f!==void 0?{required:f}:{}}}function nr(e,n,r){return Ee(e,n,r)}function pe(e,n,r){let t=new Set([...e.walk.vocabulary,...Object.keys(e.catalog.services)]),o=e.integrations?.services??{};for(let i of Object.keys(o))t.add(i);let s={};for(let i of[...t].sort())r&&!r.includes(i)||(s[i]=rn(i,e));return{contracts:qn(e.contracts),resolutions:s,issues:n}}function on(e,n,r){let t=tn(n),o=t.buildSupplyLookup(n.catalog),s=n.integrations,d=t.normalizeInstances({instances:s?.instances,defaultInstanceId:s?.defaultInstanceId}).instances.map(O=>O.id),p=n.integrations?.services?.[e],l=p?.instances?Object.keys(p.instances):void 0,m;d.length>0?(m=[...d],l?.includes("*")&&m.push("*")):l!==void 0&&l.length>0?m=l.includes("*")?["*"]:l:m=[];let k=m.map(O=>{let f=Xn(n,t,e,O,o);return{instanceId:O,status:f.status,...f.statusMessage?{statusMessage:f.statusMessage}:{},...f.effective?{effective:f.effective}:{}}}),R=tr(n,e),A={...rn(e,n),instances:k,inheritance:R};return{contracts:qn(n.contracts),resolution:A,issues:r.filter(O=>O.service===e)}}function tr(e,n){let r=e.integrations,t=r?.services?.[n],o=e.integrations,i=tn(e).normalizeInstances({instances:o?.instances,defaultInstanceId:o?.defaultInstanceId}).defaultInstanceId??"*",d=t?.instances?.[i]??t?.instances?.["*"],p=e.walk.ownership[n],l=p!==void 0?L(r,p):{provider:null,layer:null};return[{layer:"app",...r?.provider?{provider:r.provider}:{}},{layer:"module",...l.layer==="module"&&l.provider?{provider:l.provider}:{}},{layer:"service",...typeof t?.provider=="string"?{provider:t.provider}:{},...t?.implementation?{implementation:t.implementation}:{}},{layer:"instance",...d?.provider?{provider:d.provider}:{},...d?.implementation?{implementation:d.implementation}:{}}]}function sn(e,n,r){if(n===null)return null;let t={};for(let o of r)t[o]={configSchema:H(e,n,o)};return{provider:n,services:t}}function re(e){return e===null||typeof e!="object"?JSON.stringify(e??null):Array.isArray(e)?`[${e.map(re).join(",")}]`:`{${Object.keys(e).sort().map(r=>`${JSON.stringify(r)}:${re(e[r])}`).join(",")}}`}var rr="\0no-enum";function ir(e){let n=e.enum;return Array.isArray(n)?`[${[...new Set(n.map(re))].sort().join(",")}]`:rr}function or(e){if(!e||typeof e!="object"||Array.isArray(e))return null;let n=e.type;return n===void 0?null:re(n)}function sr(e){let n=e.map(t=>or(t.subschema));if(n.some(t=>t===null)||new Set(n).size>1)return null;if(n[0]==='"object"'){let t=re(e[0].subschema);return e.every(o=>re(o.subschema)===t)?e[0].subschema:null}return new Set(e.map(t=>ir(t.subschema))).size===1?e[0].subschema:null}function Oe(e,n){let r=[],t=!0,o=new Map;for(let[i,d]of Object.entries(e.services)){let p=d.configSchema;if(p===null){r.push(i);continue}if(!p||typeof p!="object"||Array.isArray(p))continue;let l=p;l.additionalProperties===!1&&(t=!1);let m=l.properties;if(!m||typeof m!="object"||Array.isArray(m))continue;let k=Array.isArray(l.required)?l.required:[];for(let R of Object.keys(m)){let w=o.get(R)??[];w.push({service:i,subschema:m[R],required:k.includes(R)}),o.set(R,w)}}let s=[];for(let[i,d]of o)s.push({key:i,schema:sr(d),sources:d.map(({service:p,required:l})=>({service:p,required:l})),global:d.some(p=>!!p.subschema&&typeof p.subschema=="object"&&p.subschema["x-tbox-global"]===!0)});return{provider:e.provider,schemaless:r,unsupplied:[...n?.unsupplied??[]],additionalPropertiesAllowed:t,fields:s}}function an(e,n,r,t){let o=typeof t=="string"&&t.length>0?t:void 0;if(e==="app"){if(o!==void 0)return o;let d=n.integrations?.provider;return typeof d=="string"&&d.length>0?d:null}let s=n.walk.modules.find(d=>d.id===r);return!s||!K(n.walk,s).writable?null:o!==void 0?o:L(n.integrations,s.id).provider}var et={integrationSchemas:null,integrationFieldRegistry:null};function nt(e){return{...e,fields:e.fields.filter(n=>n.global)}}function cn(e,n){let r=an("app",e,void 0,n);if(r===null)return et;let t=sn(e,r,_e(e.catalog,r));return{integrationSchemas:t,integrationFieldRegistry:nt(Oe(t))}}function ln(e,n,r){let t=an("module",e,n,r),o=e.walk.modules.find(p=>p.id===n);if(t===null||!o)return et;let s=(o.descriptor.declare.owns??[]).map(p=>p.service),i=p=>Ee(e.catalog,t,p),d=sn(e,t,s.filter(i));return{integrationSchemas:d,integrationFieldRegistry:nt(Oe(d,{unsupplied:[...new Set(s.filter(p=>!i(p)))]}))}}function ar(e){return cn(e).integrationSchemas}function cr(e,n){return ln(e,n).integrationSchemas}function lr(e,n){let r=e.walk.ownership[n];if(r!==void 0)return L(e.integrations,r).provider;let t=e.integrations?.provider;return typeof t=="string"&&t.length>0?t:null}function xe(e,n){let r=e.integrations?.services?.[n]?.provider;if(r===void 0||r===""){let t=lr(e,n);return t===null?null:{provider:t,configSchema:H(e,t,n)}}if(typeof r=="string")return{provider:r,configSchema:H(e,r,n)};if(J(r)){let t=r;return{provider:t.provider,configSchema:H(e,t.provider,n,t.configSchema)}}return null}function dn(e,n){let r=xe(e,n);if(r===null)return null;let t={provider:r.provider,services:{[n]:{configSchema:r.configSchema}}};return Oe(t)}function fe(e,n){if(n===void 0||!n.startsWith("secret://"))return;let r=n.slice(9),t=oe(e,r);if(t)return{type:t.type,ref:n,file:_(r),masked:ge(t.values)}}function un(e){let n=e.integrations,r={credential:fe(e.appDir,typeof n?.credentialRef=="string"?n.credentialRef:void 0)??null,byInstance:{}};for(let{id:o}of n?.instances??[]){let s=n?.credentialRefByInstance?.[o];s!==void 0&&(r.byInstance[o]=fe(e.appDir,s)??null)}let t={};for(let[o,s]of Object.entries(n?.services??{})){let i={credential:fe(e.appDir,s.credentialRef)??null,byInstance:{}};for(let[d,p]of Object.entries(s.instances??{}))i.byInstance[d]=fe(e.appDir,p.credentialRef)??null;t[o]=i}return{app:r,services:t}}function pn(e,n){return{types:(n===void 0?Object.keys(e.catalog.credentialTypes):[...new Set(Object.values(e.catalog.providers[n]??{}).map(t=>t.credentialType))]).sort().map(t=>{let o=e.catalog.credentialTypes[t];return{credentialType:t,owner:o?.owner??"",credentialSchema:o?nn(e.appDir,o.packageDir,o.credentialSchema):null}})}}import dr from"path";var ur={app:["serviceResolutions","integrationSchemas","integrationFieldRegistry"],module:["serviceResolutions","integrationSchemas","integrationFieldRegistry"],provider:["integrationSchemas"],service:["integrationSchemas","integrationFieldRegistry"]};function Me(e,n){if(!n||n.length===0)return new Set;let r=ur[e],t=[...new Set(n)].filter(o=>!r.includes(o));if(t.length>0)throw new x("VALIDATION_FAILED",400,`include 含未知或不适用于本端点的键：${t.join("、")}（白名单：${r.join("、")}）`,["include"]);return new Set(n)}var tt=["integrationSchemas","integrationFieldRegistry"];function rt(e,n,r){if(!(typeof n!="string"||n.length===0)&&!tt.some(t=>r.has(t)))throw new x("VALIDATION_FAILED",400,`参数 ${e} 需与表单 include 键（${tt.join("、")}）同现——轴参仅重定向表单层双投影`,[e])}function pr(e,n={}){let r=je(),t=Promise.resolve(),o={appDir:e,cache:r};function s(f){if(!f.strictValidation)throw new x("CONTRACTS_NOT_RESOLVED",503,Pe(f));if(!f.ownershipBindingV6)throw new x("CONTRACTS_NOT_RESOLVED",503,`contracts ${f.version??"(版本未知)"} 不支持 v6 modules 绑定形状（OWNERSHIP_BINDING_V6 标记缺席）——升级应用 @tbox.cn/app-contracts 依赖后可用`)}function i(f){return Un(o,f)}function d(f){let a=f.integrations?.services;return a&&typeof a=="object"?Object.keys(a):[]}async function p(){let f=await T(e),a=i(f),g=a.integrations;if(g===null)return[];let h={resolveEffectiveService:l(f.module.resolveEffectiveService,"resolveEffectiveService"),buildSupplyLookup:l(f.module.buildSupplyLookup,"buildSupplyLookup"),normalizeInstances:l(f.module.normalizeInstances,"normalizeInstances"),RESOURCE_TYPE_IDS:f.module.RESOURCE_TYPE_IDS??[]},y=ae(e,a.walk,g,process.env);return ee({contracts:h,integrations:g,supplies:h.buildSupplyLookup(a.catalog),...y})}function l(f,a){if(typeof f!="function")throw new x("CONTRACTS_NOT_RESOLVED",503,`contracts 求值面 ${a} 缺席（形态异常）`);return f}function m(f){let a=t.then(f,f);return t=a.catch(()=>{}),a}let k={async loadModules(){let f=await T(e);return Ye(i(f))},async loadModule(f,a){let g=Me("module",a?.include);rt("moduleProvider",a?.moduleProvider,g);let h=await T(e),y=i(h),u=ke(y.walk,f),v=He(y,u.id);if(g.has("serviceResolutions")&&(v.serviceResolutions=h.evaluation&&h.strictValidation?await p().then(b=>pe(y,b,v.services.map(c=>c.service))):null),g.has("integrationSchemas")||g.has("integrationFieldRegistry")){let b=ln(y,u.id,a?.moduleProvider);g.has("integrationSchemas")&&(v.integrationSchemas=b.integrationSchemas),g.has("integrationFieldRegistry")&&(v.integrationFieldRegistry=b.integrationFieldRegistry)}return v},async loadApp(f){let a=Me("app",f?.include);rt("appProvider",f?.appProvider,a);let g=await T(e),h=i(g),y=Ze(h);if(a.has("serviceResolutions")&&(y.serviceResolutions=g.evaluation&&g.strictValidation?await p().then(u=>pe(h,u)):null),a.has("integrationSchemas")||a.has("integrationFieldRegistry")){let u=cn(h,f?.appProvider);a.has("integrationSchemas")&&(y.integrationSchemas=u.integrationSchemas),a.has("integrationFieldRegistry")&&(y.integrationFieldRegistry=u.integrationFieldRegistry)}return y},async loadService(f,a){let g=Me("service",a?.include),h=await T(e),y=i(h),u=G(y.walk,d(y),f),v=qe(y,u);return g.has("integrationSchemas")&&(v.integrationSchemas=xe(y,u)),g.has("integrationFieldRegistry")&&(v.integrationFieldRegistry=dn(y,u)),v},async loadServiceResolutions(f){let a=await T(e);s(a);let g=await p();return pe(i(a),g,f)},async loadServiceResolution(f){let a=await T(e);s(a);let g=i(a),h=G(g.walk,d(g),f),y=await p();return on(h,g,y)},async loadProviders(){let f=await T(e);return Qe(i(f))},async loadProvider(f,a){let g=Me("provider",a?.include),h=await T(e);return Xe(i(h),f,g)},async loadProviderService(f,a){let g=await T(e),h=i(g),y=G(h.walk,d(h),a);return en(h,f,y)},async loadCredentials(){let f=await T(e);return un(i(f))},async loadCredentialTypes(f){let a=await T(e);return pn(i(a),f)}},R=Je(e,{onApplied:n.onApplied,cache:r}),w={async writeAppIntegration(f,a){await R.warmup();let g=await T(e);return s(g),m(()=>R.applyApp(f,a))},async writeModuleIntegration(f,a,g){await R.warmup();let h=await T(e);return s(h),m(()=>{let y=ke(i(h).walk,f);return R.applyModule(y.id,a,g)})},async writeServiceIntegration(f,a,g){await R.warmup();let h=await T(e);return s(h),m(()=>{let y=i(h),u=G(y.walk,d(y),f);return R.applyService(u,a,g)})},async deleteServiceIntegration(f){await R.warmup();let a=await T(e);return s(a),m(()=>{let g=i(a),h=G(g.walk,d(g),f);return R.deleteService(h)})}},A={invalidate(){r.invalidate(),Te(e)},async resolveContracts(){return T(e)},walkManifests(){return O(e)},parseModuleDescriptor(f){return ie(f)},loadProviderCatalogRaw(){return We(e)},async readIntegrationsConfig(){return B(e,r)},async writeIntegrationsConfig(f){await R.warmup();let a=await T(e);return s(a),m(()=>fr(e,f,r))},async ensureMockBindings(){await R.warmup();let f=await T(e);return s(f),m(()=>Ge(e))},async evaluateIntegrationServices(f){await R.warmup();let a=await T(e);s(a);let g={resolveEffectiveService:l(a.module.resolveEffectiveService,"resolveEffectiveService"),buildSupplyLookup:l(a.module.buildSupplyLookup,"buildSupplyLookup"),normalizeInstances:l(a.module.normalizeInstances,"normalizeInstances"),RESOURCE_TYPE_IDS:a.module.RESOURCE_TYPE_IDS??[]};return ee({...f,contracts:g})}};function O(f){return V(f,r)}return{...k,...w,...A}}function fr(e,n,r){let t=dr.join(e,"config","integrations.json");$(t,`${JSON.stringify(n,null,2)}
+`),r.invalidate([t])}export{de as APP_INTEGRATION_NODE_KEYS,x as AppToolkitError,ue as MODULE_INTEGRATION_NODE_KEYS,z as SAFE_NAME_PATTERN,bt as assertValidModuleId,Oe as buildIntegrationFieldRegistry,Mt as buildOwnershipMap,ae as buildPredicateAssembly,$e as checkInstanceKeys,xt as collectDeclaredModules,Pe as contractsNotResolvedMessage,pr as createAppToolkit,je as createFileCache,Je as createWriteCore,$t as credentialArtifactExists,te as deepEqual,Q as deriveStem,fe as echoForRef,bn as ensureDir,Ge as ensureMockBindings,Be as evaluateAppIntegrationIssues,ee as evaluateIntegrationServices,Ne as expandEnvVars,jn as extractModuleIdFromSource,an as formProviderOf,Te as invalidateContractsResolver,J as isControlledInlineProvider,On as isValidModuleId,ar as loadAppIntegrationSchemas,Ze as loadAppView,pn as loadCredentialTypesView,un as loadCredentialsView,He as loadModuleDetailView,cr as loadModuleIntegrationSchemas,Ye as loadModulesView,we as loadProviderCatalog,We as loadProviderCatalogRaw,Xe as loadProviderDetailView,en as loadProviderServiceDetailView,Qe as loadProvidersView,qe as loadServiceDetailView,dn as loadServiceFieldRegistry,xe as loadServiceIntegrationSchemas,on as loadServiceResolutionDetail,pe as loadServiceResolutionsView,ve as manifestPath,ge as maskCredentialValues,mn as moduleDependencySchema,hn as moduleDescriptorSchema,K as moduleOwnershipWritable,fn as pageContribSchema,ie as parseModuleDescriptor,_e as providerFootprint,vn as providerSlotContribSchema,Ut as pruneIntegrationBindings,En as readAppManifest,De as readAppManifestFull,oe as readCredentialFile,B as readIntegrationsConfig,Dn as readIntegrationsStrict,le as reconcileOrphanCredentials,Pn as refToEnvKey,Rt as removeNpmModule,T as resolveContractsForApp,T as resolveContractsForAppExport,sn as resolveLayerIntegrationSchemas,L as resolveModuleBinding,ke as resolveModuleKey,G as resolveServiceKey,rn as resolveServiceSummary,wn as resourceNeedContribSchema,yn as serviceConsumeContribSchema,Sn as serviceOwnContribSchema,_ as stemToFilePath,ut as stemToRef,gn as tabContribSchema,kt as updateNpmModule,It as upsertMiniappContainer,ht as upsertNpmModule,V as walkManifests,wt as writeAppManifest,$ as writeAtomic,Ve as writeCredentialFile};

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tbox.cn/app-toolkit",
-  "version": "0.3.0",
+  "version": "0.5.0",
   "type": "module",
   "description": "tbox 应用工具面（运行面/工具面对仗：app-sdk 给运行的应用用，app-toolkit 给操作应用的工具用）——模块解析、集成配置求值/校验/写入内核，contracts 经应用侧动态解析（沙箱与目标应用版本解耦）。",
   "exports": {
@@ -18,7 +18,7 @@
     "zod": "3.25.76"
   },
   "devDependencies": {
-    "@tbox.cn/app-contracts": "0.10.0",
+    "@tbox.cn/app-contracts": "0.12.0",
     "typescript": "5.9.3",
     "tsup": "8.5.1",
     "vitest": "4.1.10",

package/src/assembly/provider-catalog.ts

@@ -41,7 +41,7 @@ export function loadProviderCatalogRaw(appDir: string): WalkCatalog {
   return walkManifests(appDir).catalog;
 }
 
-/** 桥源（形态冻结）：富形态 → 桥形状投影（demand meta title/description 剥离——桥面无此字段，
+/** 桥源（形态冻结）：富形态 → 桥形状投影（demand meta name/description 剥离——桥面无此字段，
  *  additive 差异声明见 app-sdk 桥 golden） */
 export function loadProviderCatalog(appDir: string): BridgeProviderCatalog {
   const rich = walkManifests(appDir).catalog;

package/src/assembly/resolve-key.ts

@@ -0,0 +1,75 @@
+import type { WalkManifestsResult, WalkModuleInfo } from './walk-manifests.js';
+import { AppToolkitError } from '../core/errors.js';
+
+/**
+ * 双键寻址（v7 词汇统一）：路径参数双键——id 精确优先 → 展示名唯一命中兜底 → 404
+ * （多命中 fail-visible，message 列候选 + 指引改用 id；复用既有 404 码零新错误码）。
+ *
+ * **消费边界（O1——双键语义单点）**：仅 factory.ts 控制面七方法入口接入；
+ * views / write-core / CLI 恒 id-only 纯函数。
+ *
+ * **纯参数式（F2）**：configuredKeys 由调用方注入——零 integrations 依赖、零 IO，
+ * 解析输入恒为 walk 产物快照 + 调用方键集。
+ */
+
+/** 模块双键解析：id 精确 → 展示名（descriptor.name ?? id）唯一命中 → 404。 */
+export function resolveModuleKey(walk: WalkManifestsResult, key: string): WalkModuleInfo {
+  const byId = walk.modules.find((m) => m.id === key);
+  if (byId) return byId;
+  const byName = walk.modules.filter((m) => (m.descriptor.name ?? m.descriptor.id) === key);
+  if (byName.length === 1) return byName[0];
+  if (byName.length > 1) {
+    throw new AppToolkitError(
+      'MODULE_NOT_FOUND',
+      404,
+      `模块展示名「${key}」命中多个模块：${byName.map((m) => `${m.descriptor.name}(id=${m.id})`).join(' / ')}——请改用模块 id 寻址`,
+    );
+  }
+  throw new AppToolkitError('MODULE_NOT_FOUND', 404, `模块 ${key} 非已装模块（id / 展示名均未命中）`);
+}
+
+/** 服务双键解析 → 真实 service id：服务键集（词汇 ∪ demand ∪ 供给足迹 ∪ configuredKeys）
+ *  精确命中 → 展示名（slotMeta.name ?? catalog.services[].name）唯一命中 → 404。
+ *  configuredKeys = 当前集成配置 services 节键集（调用方注入）。 */
+export function resolveServiceKey(
+  walk: WalkManifestsResult,
+  configuredKeys: readonly string[],
+  key: string,
+): string {
+  // 供给足迹（providers slots 展平——纯供给无 demand/词汇的槽合法，O6 同厂商多 impl 形态）
+  const supplied = new Set<string>();
+  for (const impls of Object.values(walk.catalog.providers)) {
+    for (const entry of Object.values(impls)) {
+      for (const s of entry.services) supplied.add(s);
+    }
+  }
+  // 自有键判据用 hasOwn（`in` 走原型链——"toString" 等键会误放行；下游 isKnownService 虽有
+  // 二道防线，解析层不放行原型键才是正确语义）
+  if (
+    walk.vocabulary.includes(key)
+    || Object.hasOwn(walk.catalog.services, key)
+    || supplied.has(key)
+    || configuredKeys.includes(key)
+  ) {
+    return key;
+  }
+  const matches: string[] = [];
+  const pushMatch = (svc: string): void => {
+    if (!matches.includes(svc)) matches.push(svc);
+  };
+  for (const svc of walk.vocabulary) {
+    if ((walk.slotMeta[svc]?.name ?? walk.catalog.services[svc]?.name) === key) pushMatch(svc);
+  }
+  for (const [svc, entry] of Object.entries(walk.catalog.services)) {
+    if (entry.name === key) pushMatch(svc);
+  }
+  if (matches.length === 1) return matches[0];
+  if (matches.length > 1) {
+    throw new AppToolkitError(
+      'SERVICE_NOT_FOUND',
+      404,
+      `服务展示名「${key}」命中多个服务：${matches.join(' / ')}——请改用服务 id 寻址`,
+    );
+  }
+  throw new AppToolkitError('SERVICE_NOT_FOUND', 404, `服务 ${key} 不在服务词汇（已装契约包 ∪ 已配置）`);
+}