@tbox.cn/app-toolkit 0.5.0 → 0.7.0

package/dist/index.js

@@ -1,9 +1,9 @@
-import{a as je,b as T,c as Te}from"./chunk-WUULQDOV.js";import{z as I}from"zod";var z=/^[a-zA-Z0-9][a-zA-Z0-9._-]*$/,it=I.object({cardType:I.string(),schemaVersion:I.number().optional()}),fn=I.object({route:I.string(),component:I.string()}),gn=I.object({route:I.string(),label:I.string().optional(),icon:I.string().optional(),order:I.number().optional()}),mn=I.object({id:I.string(),range:I.string().optional(),required:I.boolean().default(!0)}),vn=I.object({service:I.string(),provider:I.string().regex(z,"provider 名含非法字符（需 /^[a-zA-Z0-9][a-zA-Z0-9._-]*$/）"),implementation:I.string(),credentialType:I.string(),local:I.boolean().optional(),configSchema:I.string().optional(),credentialSchema:I.string().optional()}),yn=I.object({service:I.string(),optional:I.boolean().default(!0),defaults:I.array(I.object({provider:I.string().regex(z,"provider 名含非法字符（需 /^[a-zA-Z0-9][a-zA-Z0-9._-]*$/）"),implementation:I.string()})).default([]),name:I.string().optional(),description:I.string().optional()}),Sn=I.object({service:I.string()}).strict(),wn=I.object({id:I.string(),type:I.string()}),hn=I.object({schemaVersion:I.number().default(1),id:I.string(),name:I.string().optional(),description:I.string().optional(),version:I.string().default("0.0.0"),kind:I.enum(["platform","business","third-party"]).default("business"),risk:I.object({level:I.enum(["high","medium","low"]).default("low"),writeBoundary:I.enum(["sdk-enforced","source"]).default("source")}).default({}),distribution:I.object({defaultMode:I.enum(["hybrid","sdk","codegen","local"]).default("codegen")}).default({}),declare:I.object({handlers:I.array(I.string()).default([]),tools:I.array(I.string()).default([]),cards:I.array(it).default([]),routes:I.array(I.string()).default([]),pages:I.array(fn).default([]),tabs:I.array(gn).default([]),providers:I.object({slots:I.array(vn).default([])}).default({}),owns:I.array(Sn).default([]),consumes:I.array(yn).default([]),resources:I.array(wn).default([])}).default({}),dependencies:I.object({modules:I.array(mn).default([])}).default({}),env:I.array(I.string()).default([])}).strict();function ot(e){if(!e||typeof e!="object"||Array.isArray(e))return[];let n=[],r=e;"contributes"in r&&n.push("(root): manifest 旧键 `contributes` 已更名 `declare`（v6 声明面）——codegen 副本经 `module update --source` 重新生成 / sdk 模式升级模块包 / 手改两键");let t=r.declare;t&&typeof t=="object"&&!Array.isArray(t)&&"services"in t&&n.push("declare: manifest 旧键 `declare.services` 已更名 `declare.consumes`（消费关系定向化）——同上三路径升级"),!("id"in r)&&"name"in r&&n.push("(root): manifest 标识键 `name` 已更名 `id`（v7 词汇统一）——codegen 副本经 `module update --source` 重新生成 / sdk 模式升级模块包 / 手改两键");let o=t&&typeof t=="object"&&!Array.isArray(t)?t:void 0,s=Array.isArray(o?.consumes)&&o.consumes.some(i=>i!==null&&typeof i=="object"&&"title"in i);return("title"in r||s)&&n.push("(root): manifest 展示名键 `title` 已更名 `name`（v7 词汇统一；declare.consumes[].title 同步改 name）——同上三路径升级"),n}function ie(e){let n=ot(e);if(n.length>0)return{ok:!1,errors:n,legacy:!0};let r=hn.safeParse(e);return r.success?{ok:!0,value:r.data}:{ok:!1,errors:r.error.issues.map(t=>`${t.path.join(".")||"(root)"}: ${t.message}`)}}var st=/\$\$?\{([A-Z][A-Z0-9_]*)(?::-([^}]*))?\}/g;function Rn(e){return JSON.stringify(e).slice(1,-1)}function Ne(e,n=process.env){let r=[],t=e.replace(st,(o,s,i)=>{if(o.startsWith("$$"))return o.slice(1);let d=n[s];return d!==void 0?Rn(d):i!==void 0?Rn(i):(r.push(s),o)});return r.length>0?{missing:r}:{text:t,missing:[]}}import{mkdirSync as at,existsSync as In,readFileSync as ct,writeFileSync as lt}from"fs";import{dirname as dt,join as kn}from"path";function ge(e){let n={};for(let[r,t]of Object.entries(e)){if(typeof t!="string"){n[r]=null;continue}n[r]=t.length<=4?"****":`${t.slice(0,2)}****`}return n}var x=class extends Error{code;httpStatus;fields;constructor(n,r,t,o){super(t),this.name="AppToolkitError",this.code=n,this.httpStatus=r,this.fields=o}};function Pe(e){return e.notes.length>0?e.notes[0]:e.version===null?"contracts 不可解析（未安装）——检查应用依赖安装后重试":e.strictValidation?"contracts workspace 源码态未构建——执行 pnpm --filter @tbox.cn/app-contracts build 后重试":`contracts ${e.version} 无严格校验面（需 ≥0.9.0）——升级应用 @tbox.cn/app-contracts 依赖后可用`}function me(e,n){if(n!==void 0&&(n.includes("/")||n.includes("\\")||n.includes("..")))throw new x("VALIDATION_FAILED",400,`凭据 stem 派生输入含路径敌对字符（${e}）——拒绝派生`)}function Q(e){if(me("provider",e.provider),me("service",e.service),me("instanceId",e.instanceId),me("domain",e.domain),e.instanceId!==void 0){let n=e.domain??e.service??"global";return`${e.provider}-${e.instanceId}-${n}`}return e.service!==void 0?`${e.provider}-${e.service}`:`${e.provider}-global`}function ut(e){return`secret://${e}`}function _(e){return`config/credentials/${e}.json`}function oe(e,n){let r=kn(e,_(n));if(!In(r))return null;try{let t=JSON.parse(ct(r,"utf8"));if(typeof t.type!="string")return null;let{type:o,...s}=t,i={};for(let[d,p]of Object.entries(s))typeof p=="string"&&(i[d]=p);return{type:o,values:i}}catch{return null}}function Ve(e,n,r){let t=kn(e,_(n)),o=In(t);return at(dt(t),{recursive:!0}),lt(t,`${JSON.stringify({type:r.type,...r.values},null,2)}
-`,"utf8"),o}import{mkdirSync as pt,renameSync as ft,writeFileSync as gt}from"fs";import{dirname as mt}from"path";function $(e,n){bn(mt(e));let r=`${e}.tmp-${process.pid}-${Date.now()}`;gt(r,n,"utf8"),ft(r,e)}function bn(e){pt(e,{recursive:!0})}import{existsSync as F,readdirSync as Fe,readFileSync as X}from"fs";import{join as P}from"path";import{existsSync as vt,readFileSync as Cn,mkdirSync as yt,writeFileSync as St}from"fs";import An from"path";function ve(e){return An.join(e,".tbox","app.json")}function En(e){let n=ve(e);if(!vt(n))return null;try{let r=JSON.parse(Cn(n,"utf8")),t=r?.templateVersion;return typeof t!="string"||t.trim().length===0?null:{templateVersion:t.trim(),npmModules:Array.isArray(r?.npmModules)?r.npmModules:[]}}catch{return null}}function wt(e,n){let r=ve(e);yt(An.dirname(r),{recursive:!0}),St(r,`${JSON.stringify(n,null,2)}
-`,"utf8")}function De(e){let n=En(e);if(n===null)return null;let r=ve(e);try{let t=JSON.parse(Cn(r,"utf8"));return{...n,miniappContainers:Array.isArray(t?.miniappContainers)?t.miniappContainers:[]}}catch{return{...n,miniappContainers:[]}}}function ht(e,n){let r=e.npmModules.filter(t=>t.id!==n.id);return{...e,npmModules:[...r,n]}}function Rt(e,n){return{...e,npmModules:e.npmModules.filter(r=>r.id!==n)}}function It(e,n){let r=(e.miniappContainers??[]).filter(t=>t.id!==n.id);return{...e,miniappContainers:[...r,n]}}function kt(e,n,r){return{...e,npmModules:e.npmModules.map(t=>t.id===n?{...t,...r}:t)}}function On(e){return/^[a-z0-9]+(-[a-z0-9]+)*$/.test(e)&&!e.includes("..")}function bt(e,n){if(!On(e))throw new Error(`非法模块 id "${e}"（来自 ${n}）：仅允许小写字母/数字/中划线`)}function xn(e){try{let n=JSON.parse(e);if(!Array.isArray(n.slots))return null;let r=n.slots.filter(o=>typeof o=="string"),t={};if(n.meta&&typeof n.meta=="object"&&!Array.isArray(n.meta))for(let[o,s]of Object.entries(n.meta)){if(!s||typeof s!="object"||Array.isArray(s))continue;let{name:i,description:d}=s,p={};typeof i=="string"&&i.length>0&&(p.name=i),typeof d=="string"&&d.length>0&&(p.description=d),(p.name!==void 0||p.description!==void 0)&&(t[o]=p)}return{slots:r,meta:t}}catch{return null}}function ye(e,n){let r=t=>{try{let o=JSON.parse(t),s=ie(o);if(s.ok)return{kind:"strict",id:s.value.id,version:s.value.version,descriptor:s.value,declare:s.value.declare};if(s.legacy)return{kind:"legacy",detail:s.errors.join("; ")};if(o&&typeof o=="object"&&"declare"in o){let i=o;return{kind:"loose",...typeof i.id=="string"?{id:i.id}:{},declare:{providers:i.declare?.providers,consumes:i.declare?.consumes}}}return null}catch{return null}};if(n)return n.read(e,r)??null;if(!F(e))return null;try{return r(X(e,"utf8"))}catch{return null}}function Ct(e){let n=P(e,".tbox","app.json");if(!F(n))return[];try{let r=JSON.parse(X(n,"utf8"));return Array.isArray(r.npmModules)?r.npmModules.filter(t=>!!t&&typeof t=="object"&&typeof t.id=="string"&&typeof t.package=="string"):[]}catch{return[]}}function At(e){let n=P(e,".tbox-dev.local"),r=P(n,"dev-manifest.json");if(!F(r))return[];try{let t=JSON.parse(X(r,"utf8")),o=[];for(let[s,i]of Object.entries(t.redirects??{}))typeof i!="string"||!s.startsWith("@tbox.cn/app-")||o.push({pkg:s,dir:P(n,i)});return o}catch{return[]}}function Et(e,n){let r=[],t=[e];for(let i of["apps","packages"]){let d=P(e,i);if(F(d))try{for(let p of Fe(d,{withFileTypes:!0}))p.isDirectory()&&t.push(P(d,p.name))}catch{}}let o=new Set,s=(i,d)=>{let p=n?n.read(d,xn):xn(X(d,"utf8"));p!=null&&r.push({dir:i,slots:p.slots,meta:p.meta})};for(let i of t){let d=P(i,"node_modules","@tbox.cn");if(!F(d))continue;let p=[];try{p=Fe(d)}catch{continue}for(let l of p){let m=P(d,l);if(o.has(m))continue;o.add(m);let k=P(m,"service-slots.json"),R=P(m,"src","service-slots.json");F(k)?s(m,k):F(R)&&s(m,R)}}for(let i of t)for(let d of[P(i,"service-slots.json"),P(i,"src","service-slots.json")])F(d)&&s(i,d);return r}function V(e,n){let r=[],t={providers:{},services:{},credentialTypes:{}},o={},s=[],i={},d=new Set,p=(a,g,h,y)=>{for(let u of a){let v=t.providers[u.provider]??={},b=v[u.implementation];b?b.services.includes(u.service)||b.services.push(u.service):(v[u.implementation]={provider:u.provider,implementation:u.implementation,credentialType:u.credentialType,owner:g,...y?.name?{name:y.name}:{},...y?.description?{description:y.description}:{},...u.local?{local:!0}:{},...u.configSchema?{configSchema:u.configSchema}:{},...u.credentialSchema?{credentialSchema:u.credentialSchema}:{},services:[u.service]},t.credentialTypes[u.credentialType]??={owner:g,packageDir:h,...u.credentialSchema?{credentialSchema:u.credentialSchema}:{}});let c=`${u.provider}\0${u.service}`;o[c]||(o[c]={...u.configSchema?{configSchema:u.configSchema}:{},...u.credentialSchema?{credentialSchema:u.credentialSchema}:{},packageDir:h})}},l=a=>a.kind==="strict"?{name:a.descriptor.name,description:a.descriptor.description}:void 0,m=(a,g)=>{for(let h of a){let y=i[h];y===void 0?i[h]=g:y!==g&&s.push({severity:"error",code:"OWNERSHIP_CONFLICT",module:g,message:`服务 ${h} 归属冲突：${y} 与 ${g} 均声明 owns（先声明 ${y} 胜出）——修正 manifest declare.owns 互斥`})}},k=(a,g)=>{a.kind==="legacy"&&s.push({severity:"error",code:"OLD_MANIFEST_KEY",module:g,message:`${g}：${a.detail}`})},R=a=>a.kind==="strict"||a.kind==="loose"?a.declare:null,w=(a,g)=>{let h=a.optional!==!1,y=a.defaults??[],u=t.services[a.service];if(u){u.optional=u.optional&&h;let v=new Set(u.defaults.map(b=>`${b.provider}\0${b.implementation}`));for(let b of y){let c=`${b.provider}\0${b.implementation}`;v.has(c)||(u.defaults.push(b),v.add(c))}u.owners.includes(g)||u.owners.push(g);return}t.services[a.service]={optional:h,defaults:[...y],...a.name?{name:a.name}:{},...a.description?{description:a.description}:{},owners:[g]}};for(let a of Ct(e)){if(d.has(a.id))continue;let g=P(e,"packages",a.id),h=P(e,"node_modules",...a.package.split("/")),y=ye(P(g,"tbox.module.json"),n)??ye(P(h,"tbox.module.json"),n);if(y?.kind==="legacy"){k(y,a.id),d.add(a.id);continue}if(!y)continue;d.add(a.id);let u=F(P(g,"tbox.module.json"))?g:h,v=R(y);y.kind==="strict"&&r.push({id:a.id,dir:u,pkg:a.mode==="sdk"?a.package:`@app/${a.id}`,descriptor:y.descriptor});let b=v?.providers?.slots??[];b.length&&p(b,a.package,u,l(y));let c=v?.consumes??[];for(let E of c)w(E,a.package);let S=y.kind==="strict"?y.descriptor.declare.owns:[];S.length&&m(S.map(E=>E.service),a.id)}for(let{pkg:a,dir:g}of At(e)){let h=ye(P(g,"tbox.module.json"),n);if(h?.kind==="legacy"){k(h,a);continue}if(!h?.id||d.has(h.id))continue;d.add(h.id);let y=R(h),u=y?.providers?.slots??[];u.length&&p(u,a,g,l(h));let v=y?.consumes??[];for(let c of v)w(c,a);let b=h.kind==="strict"?h.descriptor.declare.owns:[];b.length&&m(b.map(c=>c.service),h.id)}let A=P(e,"packages");if(F(A)){let a=[];try{a=Fe(A,{withFileTypes:!0}).filter(g=>g.isDirectory()).map(g=>g.name)}catch{}for(let g of a){if(d.has(g))continue;let h=P(A,g),y=ye(P(h,"tbox.module.json"),n);if(y?.kind==="legacy"){k(y,g),d.add(g);continue}if(!y)continue;let u=y.id??g;if(d.has(u))continue;d.add(u);let v=R(y);y.kind==="strict"&&r.push({id:u,dir:h,pkg:`@app/${u}`,descriptor:y.descriptor});let b=v?.providers?.slots??[];b.length&&p(b,`@app/${u}`,h,l(y));let c=v?.consumes??[];for(let E of c)w(E,`@app/${u}`);let S=y.kind==="strict"?y.descriptor.declare.owns:[];S.length&&m(S.map(E=>E.service),u)}}let O=new Set,f={};for(let a of Et(e,n)){for(let g of a.slots)O.add(g);for(let[g,h]of Object.entries(a.meta))f[g]===void 0&&(f[g]=h)}return{modules:r,catalog:t,serviceSchemas:o,vocabulary:[...O].sort(),slotMeta:f,ownership:i,declarationIssues:s}}function Mn(e,n,r){let t=P(e,"src",n,"index.ts");if(!F(t))return!1;try{let o=X(t,"utf8");return new RegExp(`export\\s+const\\s+${r}\\b`).test(o)}catch{return!1}}function Ot(e){let n=P(e,"src","server","index.ts");if(!F(n))return"";try{return X(n,"utf8")}catch{return""}}function jn(e){return e.match(/declaration\s*:\s*\{[\s\S]*?moduleId\s*:\s*['"]([^'"]+)['"]/)?.[1]}function xt(e){let n=[],r=V(e),t=De(e),o=new Map;for(let s of t?.npmModules??[])o.set(s.id,s.mode);for(let s of r.modules){let i=o.get(s.id)??"local",d=Mn(s.dir,"server","serverModule"),p=s.descriptor.declare;n.push({id:s.id,pkg:i==="sdk"?s.pkg:`@app/${s.id}`,mode:i,hasServerEntry:d,hasClientEntry:Mn(s.dir,"client","clientModule"),hasCards:(p.cards?.length??0)>0,...d?{moduleId:jn(Ot(s.dir))}:{}})}return n.sort((s,i)=>s.id.localeCompare(i.id))}function Mt(e){return V(e).ownership}function L(e,n){let r=e?.modules?.[n]?.provider;if(typeof r=="string"&&r.length>0)return{provider:r,layer:"module"};let t=e?.provider;return typeof t=="string"&&t.length>0?{provider:t,layer:"app"}:{provider:null,layer:null}}function K(e,n){let r=(n.descriptor.declare.owns??[]).map(t=>t.service).sort();return r.length===0?{writable:!1,reason:"zero-ownership",ownedServices:[]}:{writable:!0,ownedServices:r}}function _e(e,n){return[...new Set(Object.values(e.providers[n]??{}).flatMap(r=>r.services))].sort()}function J(e){if(!e||typeof e!="object")return!1;let n=Object.keys(e),r=new Set(["provider","credentialType","configSchema"]);if(!n.every(o=>r.has(o)))return!1;let t=e;return typeof t.provider=="string"&&t.provider.length>0&&typeof t.credentialType=="string"&&t.credentialType.length>0&&(t.configSchema===void 0||typeof t.configSchema=="string")}function Tn(e,n,r){return e==="*"||r.has(e)?null:{severity:"error",code:"INSTANCE_KEY_NOT_REGISTERED",instance:e,message:`integrations: ${n} 键 ${e} 不在 malls 白名单内（${[...r].join(", ")}）`}}function $e(e,n){let r=new Set(n),t=[],o=(s,i)=>{let d=Tn(s,i,r);d&&t.push(d)};for(let s of Object.keys(e.configByInstance??{}))o(s,"configByInstance");for(let s of Object.keys(e.credentialRefByInstance??{}))o(s,"credentialRefByInstance");for(let[s,i]of Object.entries(e.services??{}))for(let d of Object.keys(i.instances??{}))o(d,`services.${s}.instances`);return t}function ee(e){let n=[],r=e.contracts,{integrations:t,suppliedProviders:o,demandedServices:s,supplies:i,malls:d,credentialSchemaMissing:p,vendorConfigKeys:l,vendorGlobalConfigKeys:m,vendorConfigSchemaMissing:k,credentialFileMissing:R,credentialFileType:w,realmSwitchHints:A,moduleResourceNeeds:O,ownership:f,installedModuleIds:a}=e,g=d?new Set(d):void 0;for(let c of A??[])n.push({severity:"warning",code:"REALM_SWITCH_HINT",message:c});let h=new Set(Object.keys(o).map(c=>c.slice(0,c.indexOf("\0"))).filter(c=>c.length>0)),y=(c,S,E,C)=>{if(typeof E?.provider=="string"&&typeof E.implementation=="string"&&E.provider&&E.implementation)return o[se(E.provider,E.implementation)]?.credentialType;if(typeof S.provider=="string"&&typeof S.implementation=="string")return o[se(S.provider,S.implementation)]?.credentialType;let M=S.provider?.credentialType;if(typeof M=="string")return M;if(!i)return;let N=C??Object.keys(S.instances??{})[0]??"",j=r.resolveEffectiveService(t,c,N,i,f);if(!(j.status!=="ok"||typeof j.effective.provider!="string"))return o[se(j.effective.provider,j.effective.implementation)]?.credentialType};if(R||w)for(let[c,S]of Object.entries(t.services))for(let[E,C]of Object.entries(S.instances??{})){if(C.enabled===!1)continue;let M=C.credentialRef??S.credentialRef??t.credentialRefByInstance?.[E]??t.credentialRef;if(typeof M!="string"||!M.startsWith("secret://"))continue;let N=M.slice(9);R?.[N]===!0&&n.push({severity:"error",code:"CREDENTIAL_FILE_MISSING",service:c,instance:E,message:`integrations: 凭据文件缺失 ${N}（${c}@${E} effective ref=${M}；档内 config/credentials/ 无此文件）`});let j=w?.[N];if(j){let D=y(c,S,C,E);D&&j!==D&&n.push({severity:"error",code:"CREDENTIAL_TYPE_MISMATCH",service:c,instance:E,message:`integrations: 凭据文件 ${N}.json type=${j} 与绑定 credentialType ${D} 不一致（${c}@${E}——transport 创建期将按 type 选策略）`})}}let u=(c,S)=>{if(!g)return;let E=Tn(c,S,g);E&&n.push(E)};for(let[c]of Object.entries(t.configByInstance??{}))u(c,"configByInstance");for(let[c]of Object.entries(t.credentialRefByInstance??{}))u(c,"credentialRefByInstance");let v=Object.entries(t.services).filter(([,c])=>c.instances==null||c.instances["*"]!=null).map(([c])=>c);if(v.length>0){let c=Object.entries(t.services).filter(([,S])=>S.instances!=null&&S.instances["*"]==null).map(([S])=>S);c.length>0&&n.push({severity:"warning",code:"WILDCARD_ALIGNMENT",message:`integrations: 激活形态不对称（通配：${v.join(", ")}；显式键集：${c.join(", ")}）——动态 mallId 将在显式键集槽上 INSTANCE_NOT_FOUND（provider 业务限制表达位），确认是否齐步`})}let b=r.normalizeInstances({instances:t.instances,defaultInstanceId:t.defaultInstanceId});b.instances.length>=2&&b.defaultInstanceId===null&&n.push({severity:"warning",code:"MULTI_INSTANCE_NO_DEFAULT",message:`integrations: ${b.instances.length} 个部署实例（${b.instances.map(c=>c.id).join(", ")}）均无 defaultInstanceId——无 scope 参数访问将落全局会话（默认商圈不注入）`});for(let[c,S]of Object.entries(t.services)){if(s[c]||n.push({severity:"warning",code:"SLOT_NOT_DECLARED",service:c,message:`integrations: 服务槽 ${c} 无消费方声明（拼写错误或需求方未安装）——若为拆分前旧槽位词汇（member.main/parking.main/promotion.read/shopping-guide.main），参照 cookbook·app-config 槽位迁移配方展开为新槽`}),typeof S.provider=="string"?typeof S.implementation=="string"&&!o[se(S.provider,S.implementation)]&&n.push({severity:"error",code:"INSTANCE_SUPPLY_UNMATCHED",service:c,message:`integrations: provider ${S.provider}/${S.implementation} 未命中已装供给（${c} 槽级）——装对应 provider 包或改绑`}):S.provider!==void 0&&!J(S.provider)&&n.push({severity:"error",code:"INLINE_PROVIDER_INVALID",service:c,message:`integrations: 内联 provider 超受控形状（${c} 槽级；允许键 provider/credentialType/configSchema）`}),p){let C=y(c,S);C&&p[C]===!0&&n.push({severity:"error",code:"SCHEMA_FILE_MISSING",service:c,message:`integrations: credentialType ${C} 的 schema 引用不存在（${c}；manifest 声明指向缺失文件）`})}typeof S.provider=="object"&&typeof S.implementation!="string"&&n.push({severity:"error",code:"IMPL_WITHOUT_PROVIDER",service:c,message:`integrations: 内联厂商声明必须同时提供 implementation（${c} 槽级）`});for(let[C,M]of Object.entries(S.instances??{})){u(C,`services.${c}.instances`);let N=M.provider!==void 0,j=M.implementation!==void 0;if(j&&!N&&n.push({severity:"error",code:"IMPL_WITHOUT_PROVIDER",service:c,instance:C,message:`integrations: 实例级 implementation 需伴随 provider（${c}@${C}——impl-only 禁止，provider 是绑定组头）`}),N&&j){let D=M.provider,W=M.implementation;typeof D=="string"&&typeof W=="string"?o[se(D,W)]||n.push({severity:"error",code:"INSTANCE_SUPPLY_UNMATCHED",service:c,instance:C,message:`integrations: 实例级 provider 覆盖 ${D}/${W} 未命中已装供给（${c}@${C}）`}):J(D)||n.push({severity:"error",code:"INLINE_PROVIDER_INVALID",service:c,instance:C,message:`integrations: 实例级内联 provider 超受控形状（${c}@${C}）`})}}}for(let[c,S]of[["root",t.provider],...Object.entries(t.modules??{}).map(([E,C])=>[`modules.${E}`,C?.provider])])typeof S!="string"||S.length===0||h.has(S)||n.push({severity:"error",code:"VENDOR_NOT_INSTALLED",module:c.startsWith("modules.")?c.slice(8):void 0,message:`integrations: ${c} provider ${S} 未命中已装供给——装对应 provider 包或 provider use 改绑`});if(i)for(let[c,S]of Object.entries(t.services)){let E=S.instances?Object.keys(S.instances):[""];for(let C of E){let M=r.resolveEffectiveService(t,c,C,i,f);M.status==="binding-unresolved"&&n.push({severity:"error",code:"BINDING_UNRESOLVED",service:c,instance:C||void 0,message:`integrations: ${M.message}`})}}for(let[c,S]of Object.entries(t.services))S.implementation!==void 0&&S.provider===void 0&&n.push({severity:"error",code:"IMPL_WITHOUT_PROVIDER",service:c,message:`integrations: 槽级 implementation 需伴随 provider（${c}——impl-only 禁止，provider 是绑定组头）`});for(let[c,S]of Object.entries(t.modules??{})){if(!(S?.provider!==void 0||S?.config!==void 0))continue;let C=a?!a.has(c):!1,M=0;if(f)for(let j of Object.values(f))j===c&&(M+=1);if(C||!(f===void 0)&&M===0){let j=C?"未安装（键 = install id）":"未声明任何 owns（无模块级配置位）";n.push({severity:"error",code:"MODULE_CONFIG_DEAD",module:c,message:`integrations: modules.${c} 携带 provider/config 但模块${j}（MODULE_CONFIG_DEAD——模块级集成位作用于 declare.owns 服务，改 declare.owns 或删除该节点）`})}}if(l){let c=new Set,S=!1,E=C=>{typeof C!="string"||C.length===0||(l[C]&&c.add(C),!l[C]&&!k?.[C]&&(S=!0),k?.[C]&&(S=!0))};E(t.provider);for(let C of Object.values(t.modules??{}))E(C?.provider);for(let C of Object.values(t.services)){let M=C.provider;E(typeof C.provider=="string"?C.provider:M?.provider)}if(c.size>0&&!S){let C=new Set;for(let j of c)for(let D of l[j]??[])C.add(D);let M=new Set;for(let j of c)for(let D of m?.[j]??[])M.add(D);let N=(j,D,W,Z)=>{for(let[q]of Object.entries(j??{}))(W??C).has(q)?Z&&Z.size>0&&!Z.has(q)&&n.push({severity:"warning",code:"GLOBAL_FIELD_UNDECLARED",message:`integrations: ${D} 键 ${q} 过 schema 校验但未声明 x-tbox-global（不进应用/模块全局表单；已配置值照常生效——如需全局编辑请在 provider schema 标记）`}):n.push({severity:"error",code:"DOMAIN_CONFIG_INVALID",message:`integrations: ${D} 键 ${q} 不在引用厂商（${[...c].join("/")}）任何槽 schema properties 内（死配置）`})};N(t.config,"root.config",void 0,M);for(let[j,D]of Object.entries(t.configByInstance??{}))N(D,`root.configByInstance[${j}]`,void 0,M);for(let[j,D]of Object.entries(t.modules??{})){if(!D?.config)continue;let W=L(t,j).provider??void 0;if(W===void 0){N(D.config,`modules.${j}.config`,void 0,M);continue}let Z=l[W];if(!Z||k?.[W])continue;let q=m?.[W];N(D.config,`modules.${j}.config`,new Set(Z),q)}}}for(let[c,S]of Object.entries(s)){let E=t.services[c];if(!E){n.push({severity:"warning",code:"SLOT_NOT_CONFIGURED",service:c,message:`integrations: 服务槽 ${c}（需求方 ${S.owners.join(", ")}）未配置${S.optional?"（可选槽）":"（必需槽——模块将走降级链）"}`});continue}let C=Object.entries(E.instances??{}).filter(([,M])=>M.enabled===!1).map(([M])=>M);C.length>0&&n.push({severity:"warning",code:"INSTANCE_DISABLED",service:c,instance:C.join(", "),message:`integrations: ${c} 实例禁用（${C.join(", ")}）`})}for(let[c,S]of Object.entries(t.modules??{})){let E=O?.[c];O&&!(c in O)&&n.push({severity:"warning",code:"RESOURCE_NOT_DECLARED",module:c,message:`integrations: modules.${c} 未命中已装模块（键 = install id——检查 .tbox/app.json entry.id / packages/ 目录名）`});for(let[C,M]of Object.entries(S?.resources??{})){let N=M?.type;(typeof N!="string"||!r.RESOURCE_TYPE_IDS.includes(N))&&n.push({severity:"error",code:"RESOURCE_TYPE_UNKNOWN",module:c,message:`integrations: modules.${c}.resources.${C} type 非法（${String(N)}；词汇表 = ${r.RESOURCE_TYPE_IDS.join("/")}）`}),E&&E.size>0&&!E.has(C)&&n.push({severity:"warning",code:"RESOURCE_NOT_DECLARED",module:c,message:`integrations: modules.${c}.resources.${C} 未被模块 manifest declare.resources 声明`})}}return n}function se(e,n){return`${e}\0${n}`}import{existsSync as Le,readFileSync as jt,readdirSync as Tt}from"fs";import{join as Se}from"path";function Pn(e){return e.replaceAll("-","_").toUpperCase()}function Nn(e){if(!Le(e))return null;try{let n=JSON.parse(jt(e,"utf8"));return n&&typeof n=="object"?n:null}catch{return null}}function Nt(e){let n=new Set,r=e.properties;if(r&&typeof r=="object"&&!Array.isArray(r))for(let t of Object.keys(r))n.add(t);return n}function ae(e,n,r,t=process.env){let o={};for(let[u,v]of Object.entries(n.catalog.providers))for(let[b,c]of Object.entries(v))o[`${u}\0${b}`]={services:[...c.services],owner:c.owner,credentialType:c.credentialType};let s={};for(let[u,v]of Object.entries(n.catalog.services))s[u]={optional:v.optional,owners:[...v.owners]};let i={},d={},p={},l={},m={};for(let u of n.modules){m[u.id]=new Set((u.descriptor.declare.resources??[]).map(v=>v.id));for(let v of u.descriptor.declare.providers?.slots??[]){if(v.configSchema){let b=Nn(Se(u.dir,v.configSchema));if(b){let c=i[v.provider]??=new Set,S=d[v.provider]??=new Set;for(let C of Nt(b))c.add(C);let E=b.properties;if(E&&typeof E=="object"&&!Array.isArray(E))for(let[C,M]of Object.entries(E))M&&typeof M=="object"&&M["x-tbox-global"]===!0&&S.add(C)}else p[v.provider]=!0}v.credentialSchema&&!Le(Se(u.dir,v.credentialSchema))&&(l[v.credentialType]=!0)}}let k={},R=new Set,w=Se(e,"config","credentials");if(Le(w))for(let u of Tt(w)){if(!u.endsWith(".json"))continue;let v=u.slice(0,-5);R.add(v);let b=Nn(Se(w,u));b&&typeof b.type=="string"&&(k[v]=b.type)}let A=r,O=[],f=u=>{typeof u=="string"&&u.startsWith("secret://")&&O.push(u)};for(let u of Object.values(A.services??{}))if(u&&typeof u=="object"){f(u.credentialRef);for(let v of Object.values(u.instances??{}))v&&typeof v=="object"&&f(v.credentialRef)}for(let u of Object.values(A.credentialRefByInstance??{}))f(u);f(A.credentialRef);let a={};for(let u of O){let v=u.slice(9);t[Pn(v)]===void 0&&(R.has(v)||(a[v]=!0))}let g=[];for(let[u,v]of Object.entries(A.services??{})){let b=v&&typeof v=="object"&&typeof v.provider=="string"?v.provider:void 0;for(let[c,S]of Object.entries((v&&typeof v=="object"?v.instances:void 0)??{})){let E=S&&typeof S=="object"&&typeof S.provider=="string"?S.provider:void 0;b&&E&&E!==b&&g.push(`integrations: ${u}@${c} 实现覆盖跨厂商（${b} → ${E}）——凭据域切换，确认该 mall 对应凭据在场`)}}let y=((Array.isArray(A.instances)?A.instances:void 0)??[]).map(u=>u&&typeof u=="object"&&typeof u.id=="string"?u.id:void 0).filter(u=>typeof u=="string");return{suppliedProviders:o,demandedServices:s,credentialFileMissing:a,credentialFileType:k,credentialSchemaMissing:l,vendorConfigKeys:i,vendorGlobalConfigKeys:d,vendorConfigSchemaMissing:p,realmSwitchHints:g,moduleResourceNeeds:m,...y.length>0?{malls:y}:{},ownership:n.ownership,installedModuleIds:new Set([...n.modules.map(u=>u.id),...new Set(Object.values(n.ownership))])}}import{existsSync as Ur,readFileSync as zr}from"fs";import{join as Jr,resolve as Gr}from"path";function We(e){return V(e).catalog}function we(e){let n=V(e).catalog,r={};for(let[s,i]of Object.entries(n.providers)){r[s]={};for(let[d,p]of Object.entries(i))r[s][d]={provider:p.provider,implementation:p.implementation,credentialType:p.credentialType,owner:p.owner,...p.local?{local:!0}:{},...p.configSchema?{configSchema:p.configSchema}:{},...p.credentialSchema?{credentialSchema:p.credentialSchema}:{},services:[...p.services]}}let t={};for(let[s,i]of Object.entries(n.services))t[s]={optional:i.optional,defaults:i.defaults.map(d=>({...d})),owners:[...i.owners]};let o={};for(let[s,i]of Object.entries(n.credentialTypes))o[s]={owner:i.owner,...i.credentialSchema?{credentialSchema:i.credentialSchema}:{}};return{providers:r,services:t,credentialTypes:o}}async function Be(e,n,r,t=process.env){let o=r.module,s=V(e),i=o.buildSupplyLookup(we(e)),d=ae(e,s,n,t);return ee({contracts:o,integrations:n,supplies:i,...d})}import{existsSync as Lt,rmSync as Wt}from"fs";import{join as Bt}from"path";import{existsSync as Pt,readFileSync as Vt}from"fs";import{join as Vn}from"path";var Dt=Vn("config","integrations.json");function B(e,n){let r=Vn(e,Dt),t=o=>JSON.parse(o);if(n)return n.read(r,t)??null;if(!Pt(r))return null;try{return t(Vt(r,"utf8"))}catch{return null}}async function Dn(e,n){let r=await T(e),t=B(e,n);if(t===null)return{config:null,strict:!1,contracts:r};if(r.strictValidation&&r.module.parseIntegrationsConfig)try{return{config:r.module.parseIntegrationsConfig(t),strict:!0,contracts:r}}catch(o){if(o instanceof Error&&Array.isArray(o.issues)){let s=o.issues.filter(i=>Array.isArray(i.path)).map(i=>i.path.map(String).join(".")).filter(i=>i.length>0);throw new x("VALIDATION_FAILED",400,"integrations.json 校验失败",s.length>0?s:void 0)}throw new x("VALIDATION_FAILED",400,o instanceof Error?o.message:String(o))}return{config:t,strict:!1,contracts:r}}function ce(e,n,r){return e.includes(r)||n.includes(r)}import{readdirSync as Ft,existsSync as he,readFileSync as _t}from"fs";import{join as Re}from"path";function Fn(e,n,r){let t=[];if(n){let o=Q({provider:e});t.push({stem:o,ref:`secret://${o}`,input:n})}for(let[o,s]of Object.entries(r??{})){let i=Q({provider:e,instanceId:o});t.push({instanceId:o,stem:i,ref:`secret://${i}`,input:s})}return t}function _n(e,n,r,t,o){let s=[];if(t){let i=Q({provider:e,service:n});s.push({stem:i,ref:`secret://${i}`,input:t})}for(let[i,d]of Object.entries(o??{})){let p=Q({provider:e,instanceId:i,domain:r});s.push({instanceId:i,stem:p,ref:`secret://${p}`,input:d})}return s}function ze(e,n,r){return n.map(t=>({stem:t.stem,ref:t.ref,overwrote:r?he(Re(e,_(t.stem))):Ve(e,t.stem,t.input)}))}function $t(e,n){return he(Re(e,_(n)))}function Ue(e,n){if(typeof e=="string"){e.startsWith("secret://")&&n.add(e.slice(9));return}if(Array.isArray(e)){for(let r of e)Ue(r,n);return}if(e&&typeof e=="object")for(let r of Object.values(e))Ue(r,n)}function le(e){let n=Re(e,"config","credentials"),r=new Set,t=Re(e,"config","integrations.json");if(he(t))try{Ue(JSON.parse(_t(t,"utf8")),r)}catch{}let o=[];if(!he(n))return o;let s=[];try{s=Ft(n).filter(i=>i.endsWith(".json")).map(i=>i.slice(0,-5))}catch{return o}for(let i of s.sort()){if(r.has(i))continue;let d=oe(e,i);o.push({severity:"warning",code:"ORPHANED_CREDENTIAL",message:`${_(i)} 不再被引用（凭据文件保留，可手动清理）`})}return o}function Ie(e){if(typeof e=="string")return e.length>0?e:void 0;if(e&&typeof e=="object"&&J(e)){let n=e.provider;return n.length>0?n:void 0}}async function Ut(e){let n=Bt(e,"config","integrations.json"),r=B(e);if(r===null)return{removed:[],orphanCredentials:[],skipped:"not-configured"};let t=await T(e);if(!t.strictValidation)return{removed:[],orphanCredentials:[],skipped:"predicate-unavailable"};let o;try{let w=Ne(JSON.stringify(r),process.env);if(w.missing.length>0||w.text===void 0)return{removed:[],orphanCredentials:[],skipped:"predicate-unavailable"};o=JSON.parse(w.text)}catch{return{removed:[],orphanCredentials:[],skipped:"predicate-unavailable"}}let s;try{s=await Be(e,o,t,process.env)}catch{return{removed:[],orphanCredentials:[],skipped:"predicate-unavailable"}}let i=V(e),d=new Set(Object.keys(i.catalog.providers)),p=i.ownership,l=structuredClone(r);l.services??={};let m=[];for(let w of s)if(w.severity==="error"){if(w.code==="VENDOR_NOT_INSTALLED")if(w.module){let O=(l.modules??{})[w.module];O?.provider&&(m.push(`modules.${w.module}.provider=${String(O.provider)}`),delete O.provider,Object.keys(O).length===0&&delete l.modules[w.module])}else l.provider&&(m.push(`root.provider=${l.provider}`),delete l.provider);else if(w.code==="MODULE_CONFIG_DEAD"&&w.module){let A=l.modules??{};if(A[w.module]){let O=A[w.module],f=[O.provider!==void 0?"provider":void 0,O.config!==void 0?"config":void 0,O.resources!==void 0?"resources":void 0].filter(Boolean);m.push(`modules.${w.module}（${f.join("+")} 整节点）`),delete l.modules[w.module]}}else if(w.code==="BINDING_UNRESOLVED"&&w.service){let A=l.services[w.service];if(!A)continue;let O=p[w.service];if([w.instance?Ie(A.instances?.[w.instance]?.provider):void 0,Ie(A.provider),O!==void 0?Ie(l.modules?.[O]?.provider):void 0,Ie(l.provider)].filter(a=>typeof a=="string").some(a=>d.has(a)))continue;if(w.instance){let a=A.instances;if(!a||!(w.instance in a))continue;delete a[w.instance],m.push(`services.${w.service}.instances.${w.instance}`),Object.keys(a).length===0&&delete A.instances,Object.keys(A).length===0&&delete l.services[w.service]}else delete l.services[w.service],m.push(`services.${w.service}`)}}if(Object.keys(l.services).length===0&&delete l.services,m.length===0)return{removed:m,orphanCredentials:[]};let k=!l.provider&&Object.keys(l.services??{}).length===0&&Object.keys(l.config??{}).length===0&&Object.keys(l.configByInstance??{}).length===0&&!l.credentialRef&&Object.keys(l.credentialRefByInstance??{}).length===0&&(l.instances??[]).length===0&&l.defaultInstanceId==null&&Object.keys(l.modules??{}).length===0;if(!k&&(l.services??={},typeof t.module.parseIntegrationsConfig=="function"))try{t.module.parseIntegrationsConfig(l)}catch{return{removed:[],orphanCredentials:[],skipped:"validation-failed"}}let R=[];return k?Lt(n)&&Wt(n,{force:!0}):$(n,`${JSON.stringify(l,null,2)}
-`),R=le(e).map(w=>w.message),{removed:m,orphanCredentials:R}}function ke(e,n){let r=e.modules.find(o=>o.id===n);if(r)return r;let t=e.modules.filter(o=>(o.descriptor.name??o.descriptor.id)===n);if(t.length===1)return t[0];throw t.length>1?new x("MODULE_NOT_FOUND",404,`模块展示名「${n}」命中多个模块：${t.map(o=>`${o.descriptor.name}(id=${o.id})`).join(" / ")}——请改用模块 id 寻址`):new x("MODULE_NOT_FOUND",404,`模块 ${n} 非已装模块（id / 展示名均未命中）`)}function G(e,n,r){let t=new Set;for(let i of Object.values(e.catalog.providers))for(let d of Object.values(i))for(let p of d.services)t.add(p);if(e.vocabulary.includes(r)||Object.hasOwn(e.catalog.services,r)||t.has(r)||n.includes(r))return r;let o=[],s=i=>{o.includes(i)||o.push(i)};for(let i of e.vocabulary)(e.slotMeta[i]?.name??e.catalog.services[i]?.name)===r&&s(i);for(let[i,d]of Object.entries(e.catalog.services))d.name===r&&s(i);if(o.length===1)return o[0];throw o.length>1?new x("SERVICE_NOT_FOUND",404,`服务展示名「${r}」命中多个服务：${o.join(" / ")}——请改用服务 id 寻址`):new x("SERVICE_NOT_FOUND",404,`服务 ${r} 不在服务词汇（已装契约包 ∪ 已配置）`)}import{existsSync as Wn,readFileSync as Bn}from"fs";import{join as ne,resolve as zt}from"path";import Kt from"ajv";var de=["provider","config","configByInstance","credentialRef","credentialRefByInstance","instances","defaultInstanceId"],ue=["provider","config"];var Y=ne("config","integrations.json");function te(e,n){if(e===n)return!0;if(Array.isArray(e)&&Array.isArray(n))return e.length!==n.length?!1:e.every((r,t)=>te(r,n[t]));if(e&&n&&typeof e=="object"&&typeof n=="object"){let r=Object.keys(e),t=Object.keys(n);return r.length!==t.length?!1:r.every(o=>te(e[o],n[o]))}return!1}function Ae(e,n){if(typeof e!="string"&&e&&typeof e=="object")for(let[r,t]of Object.entries(e)){if((r==="provider"||r==="instanceId")&&typeof t=="string"&&!z.test(t))throw new x("VALIDATION_FAILED",400,`${r} 名含非法字符（需 /^[a-zA-Z0-9][a-zA-Z0-9._-]*$/）`,[`${n}.${r}`]);Ae(t,`${n}.${r}`)}}function be(e,n,r){if(!(!e||typeof e!="object"||Array.isArray(e))){for(let t of Object.keys(e))if(!(r&&(t==="*"||t==="**"))&&!z.test(t))throw new x("VALIDATION_FAILED",400,`${n} 键 ${t} 含非法字符（需 /^[a-zA-Z0-9][a-zA-Z0-9._-]*$/）——进凭据 stem 派生，防路径逃逸`,[n])}}function $n(e,n,r){if(r==="root"){let t=e.instances;Array.isArray(t)&&t.forEach((o,s)=>{let i=o&&typeof o=="object"?o.id:void 0;if(typeof i=="string"&&!z.test(i))throw new x("VALIDATION_FAILED",400,`instances[${s}].id 含非法字符（需 /^[a-zA-Z0-9][a-zA-Z0-9._-]*$/）`,[`root.instances[${s}].id`])}),be(e.configByInstance,"root.configByInstance",!1),be(e.credentialRefByInstance,"root.credentialRefByInstance",!1)}else be(e.instances,"services.instances",!0);be(n.credentialsByInstance,"credentialsByInstance",!1)}function Ce(e,n){let r=ne(e,Y),t=o=>JSON.parse(o);if(n)return n.read(r,t)??null;if(!Wn(r))return null;try{return t(Bn(r,"utf8"))}catch{return null}}function Ke(e){let n=(e.instances??[]).map(r=>r.id);return n.length===0?[]:$e(e,n)}function Jt(e,n,r,t){let{catalog:o}=V(e,t),s=o.providers[n];if(!s)return;let i=new Set;for(let d of Object.values(s))(r===void 0||d.services.includes(r))&&i.add(d.credentialType);return i.size===1?[...i][0]:void 0}function Ln(e,n,r,t,o,s){if(typeof t.type!="string"||t.type.length===0)throw new x("VALIDATION_FAILED",400,"凭据 type 缺失或为空字符串",["credentials.type"]);let i=o??Jt(e,n,r,s);if(i!==void 0&&i!=="-"&&t.type!==i)throw new x("VALIDATION_FAILED",400,`凭据 type=${t.type} 与绑定 credentialType ${i} 不一致`,["credentials.type"]);if(r===void 0)return;let{serviceSchemas:d}=V(e,s),p=d[`${n}\0${r}`];if(!p?.credentialSchema)return;let l=zt(p.packageDir,p.credentialSchema);if(Wn(l))try{let k=new Kt({allErrors:!0}).compile(JSON.parse(Bn(l,"utf8")));if(!k({type:t.type,...t.values})){let R=(k.errors??[]).map(w=>`credentials.values.${String(w.instancePath||w.params?.missingProperty||"").replace(/^\//,"")}`);throw new x("VALIDATION_FAILED",400,"凭据字段校验失败（ajv 字段级）",R)}}catch(m){if(m instanceof x)throw m}}function Je(e,n={}){let{onApplied:r,cache:t}=n;function o(l,m,k,R){let w=l!==null,A=m.length>0,O=!R&&w,f=!R&&A;O&&($(ne(e,Y),`${JSON.stringify(l,null,2)}
-`),t?.invalidate([ne(e,Y)]));let a=O||f,g=a&&r!==void 0;g&&r?.();let h=[];return w&&h.push(Y),A&&h.push(...m.map(y=>_(y.stem))),{written:a,restartScheduled:g,files:h,credentials:m,issues:k}}let s;async function i(){s=await T(e)}function d(l,m){return l.filter(k=>Array.isArray(k.path)).map(k=>{let R=k.path.map(String).join(".");return m!==""&&R.startsWith(m)&&R.length>m.length?R.slice(m.length):R}).filter(k=>k.length>0)}function p(l,m,k){let R=s;if(!R||!R.strictValidation||!R.module.parseIntegrationsConfig)throw new x("CONTRACTS_NOT_RESOLVED",503,"contracts 严格校验面不可用（需 ≥0.9）——写路径门控失败（工厂边缘断言应先行拦截）");try{R.module.parseIntegrationsConfig(l)}catch(w){throw w instanceof Error&&Array.isArray(w.issues)?new x("VALIDATION_FAILED",400,"节点 schema 校验失败",d(w.issues,k)):new x("VALIDATION_FAILED",400,w instanceof Error?w.message:String(w))}}return{warmup:i,applyApp(l,m={}){Ae(l,"root"),$n(l,m,"root");let k=[],R=Ce(e,t),w=R??{services:{}};R===null&&k.push({severity:"warning",code:"SKELETON_MATERIALIZED",message:"config/integrations.json 缺席——已物化骨架（写时自动初始化；R13 语义翻转提示）"});let A={...w};for(let v of de)v in l||delete A[v];for(let[v,b]of Object.entries(l))A[v]=b;let O=typeof A.provider=="string"?A.provider:"app",f=Fn(O,m.credentials,m.credentialsByInstance);for(let v of f)Ln(e,O,void 0,v.input,void 0,t);let a=f.find(v=>v.instanceId===void 0);if(m.credentials&&a&&(A.credentialRef=a.ref),m.credentialsByInstance){let v={...A.credentialRefByInstance??{}};for(let b of f)b.instanceId!==void 0&&(v[b.instanceId]=b.ref);A.credentialRefByInstance=v}let g=m.credentials!==void 0||m.credentialsByInstance!==void 0,h=te(R,A);if(h&&!g)return{written:!1,restartScheduled:!1,files:[],credentials:[],issues:k};p(A,k,"");let y=m.dryRun===!0,u=ze(e,f,y);return k.push(...Ke(A)),o(h?null:A,u,k,m.dryRun)},applyModule(l,m,k={}){Ae(m,"root");let{modules:R,catalog:w,ownership:A}=V(e,t),O=R.find(c=>c.id===l);if(!O)throw new x("MODULE_NOT_FOUND",404,`模块 ${l} 非已装模块`);if(!K({modules:R,catalog:w,ownership:A},O).writable)throw new x("VALIDATION_FAILED",400,`模块 ${l} 未声明任何 declare.owns——无模块级配置位（模块级 provider/config 作用于归属服务）`);let a=[],g=Ce(e,t);if(g===null&&Object.keys(m).length===0)return{written:!1,restartScheduled:!1,files:[],credentials:[],issues:a};g===null&&a.push({severity:"warning",code:"SKELETON_MATERIALIZED",message:"config/integrations.json 缺席——已物化骨架（写时自动初始化；R13 语义翻转提示）"});let h=g??{services:{}},y={...h.modules??{}},u={...y[l]??{}};for(let c of Object.keys(m))if(!ue.includes(c))throw new x("VALIDATION_FAILED",400,`模块集成位仅接受 ${ue.join("/")} 键（收到 ${c}）`,[c]);let v={...u};for(let c of ue){let S=m[c];S==null||S===""||typeof S=="object"&&!Array.isArray(S)&&Object.keys(S).length===0?delete v[c]:v[c]=S}Object.keys(v).length===0?delete y[l]:y[l]=v;let b={...h,modules:y};return te(g,b)?{written:!1,restartScheduled:!1,files:[],credentials:[],issues:a}:(p(b,a,`modules.${l}.`),a.push(...Ke(b)),o(b,[],a,k.dryRun))},applyService(l,m,k={}){Ae(m,"root"),$n(m,k,"slot");let R=[],w=Ce(e,t);if(!ce(V(e,t).vocabulary,Object.keys(w?.services??{}),l))throw new x("SERVICE_NOT_FOUND",404,`服务 ${l} 不在服务词汇（已装契约包 ∪ 已配置）`);w===null&&R.push({severity:"warning",code:"SKELETON_MATERIALIZED",message:"config/integrations.json 缺席——已物化骨架（写时自动初始化；R13 语义翻转提示）"});let A=w??{services:{}},O={...A.services??{}},f={...A,services:O};O[l]={...m};let a=m.provider,g=a!==null&&typeof a=="object"?a:void 0,h=typeof a=="string"?a:typeof g?.provider=="string"?g.provider:"app",y=l.includes(".")?l.slice(0,l.indexOf(".")):l,u=_n(h,l,y,k.credentials,k.credentialsByInstance);for(let M of u)Ln(e,h,l,M.input,typeof g?.credentialType=="string"?g.credentialType:void 0,t);let v=O[l],b=u.find(M=>M.instanceId===void 0);if(k.credentials&&b&&(v.credentialRef=b.ref),k.credentialsByInstance){let M={...v.instances??{}};for(let N of u){if(N.instanceId===void 0)continue;let j={...M[N.instanceId]??{}};j.credentialRef=N.ref,M[N.instanceId]=j}v.instances=M}let c=k.credentials!==void 0||k.credentialsByInstance!==void 0,S=te(w,f);if(S&&!c)return{written:!1,restartScheduled:!1,files:[],credentials:[],issues:R};p(f,R,`services.${l}.`);let E=k.dryRun===!0,C=ze(e,u,E);return R.push(...Ke(f)),o(S?null:f,C,R,k.dryRun)},deleteService(l){let m=[],k=Ce(e,t);if(!ce(V(e,t).vocabulary,Object.keys(k?.services??{}),l))throw new x("SERVICE_NOT_FOUND",404,`服务 ${l} 不在服务词汇（已装契约包 ∪ 已配置）`);let R={...k?.services??{}};if(!(l in R))return{written:!1,restartScheduled:!1,files:[],credentials:[],issues:m};delete R[l];let w={...k??{services:{}},services:R};$(ne(e,Y),`${JSON.stringify(w,null,2)}
-`),t?.invalidate([ne(e,Y)]),m.push(...le(e));let A=r!==void 0;return A&&r?.(),{written:!0,restartScheduled:A,files:[Y],credentials:[],issues:m}}}}import{existsSync as Gt}from"fs";import{join as Yt}from"path";function Ge(e){let n=Yt(e,"config","integrations.json");if(Gt(n))return{generated:!1,reason:"in-place",services:[]};let r=[];for(let s of V(e).modules)for(let i of s.descriptor.declare.providers?.slots??[])i.local===!0&&r.push({service:i.service,provider:i.provider,implementation:i.implementation});if(r.length===0)return{generated:!1,reason:"no-local-slots",services:[]};let t={},o=new Set(r.map(s=>s.provider));if(o.size===1){let[s]=o;for(let i of r)t[i.service]={};$(n,`${JSON.stringify({provider:s,services:t},null,2)}
-`)}else{for(let s of r)t[s.service]={provider:s.provider,implementation:s.implementation};$(n,`${JSON.stringify({services:t},null,2)}
-`)}return{generated:!0,reason:"generated",services:r.map(s=>s.service).sort()}}function Un(e,n){let r=V(e.appDir,e.cache),t=B(e.appDir,e.cache);return{appDir:e.appDir,walk:r,catalog:r.catalog,integrations:t,contracts:n}}function zn(e){let n=new Set;for(let r of e.modules){for(let t of r.descriptor.declare.owns??[])n.add(t.service);for(let t of r.descriptor.declare.consumes??[])n.add(t.service);for(let t of r.descriptor.declare.providers?.slots??[])n.add(t.service)}return n}function Ee(e,n,r){let t=e.providers[n];return t?Object.values(t).some(o=>o.services.includes(r)):!1}function Kn(e,n){let r=[];for(let[t,o]of Object.entries(e.providers))Object.values(o).some(s=>s.services.includes(n))&&r.push(t);return r.sort()}function U(e,n){let r=e.slotMeta[n],t=e.catalog.services[n],o=r?.name??t?.name??n,s=r?.description??t?.description;return{name:o,...s!==void 0?{description:s}:{}}}function Jn(e){return e.replace(/^@tbox\.cn\/app-/,"").replace(/^@[^/]+\//,"")}function Ht(e){return Jn(e.id).startsWith("provider-")||Jn(e.pkg).startsWith("provider-")}function Ye(e){return{modules:e.walk.modules.filter(r=>!Ht(r)).map(r=>({id:r.id,name:r.descriptor.name??r.descriptor.id,description:r.descriptor.description??""})).sort((r,t)=>r.id.localeCompare(t.id))}}function He(e,n){let r=e.walk.modules.find(l=>l.id===n);if(!r)throw new x("MODULE_NOT_FOUND",404,`模块 ${n} 非已装模块`);let t=(r.descriptor.declare.consumes??[]).map(l=>{let m=U(e.walk,l.service);return{service:l.service,name:m.name,...m.description!==void 0?{description:m.description}:{},required:l.optional===!1}}),o=K(e.walk,r),i=(e.integrations?.modules??{})[n],d=i?{...typeof i.provider=="string"?{provider:i.provider}:{},...i.config&&typeof i.config=="object"&&!Array.isArray(i.config)?{config:i.config}:{}}:null,p=L(e.integrations,n);return{name:r.descriptor.name??r.descriptor.id,description:r.descriptor.description??"",ownedServices:o.ownedServices,integration:d,binding:{provider:p.provider,layer:p.layer},configEditable:o.writable,services:t}}function Ze(e){let n=zn(e.walk),r=e.walk.vocabulary.filter(s=>!n.has(s)).map(s=>{let i=U(e.walk,s);return{service:s,name:i.name,...i.description!==void 0?{description:i.description}:{},required:!1}}),t=e.integrations,o=null;if(t){let s={};for(let i of de)i in t&&(s[i]=t[i]);o=s}return{services:r,integration:o}}function qe(e,n){let r=e.integrations?.services??{},t=e.catalog.services[n];if(!ce(e.walk.vocabulary,Object.keys(r),n))throw new x("SERVICE_NOT_FOUND",404,`服务 ${n} 不在服务词汇（已装契约包 ∪ 已配置）`);let o=r[n]??null,s=U(e.walk,n);return{service:n,name:s.name,...s.description!==void 0?{description:s.description}:{},required:t?!t.optional:!1,defaults:t?t.defaults.map(i=>({...i})):[],integration:o,suppliedBy:Kn(e.catalog,n)}}import{existsSync as Hn,readFileSync as Zn,realpathSync as Gn}from"fs";import{isAbsolute as Zt,join as qt,relative as Qt,resolve as Yn,sep as Xt}from"path";function Qe(e){let n=[];for(let[r,t]of Object.entries(e.catalog.providers)){let o=Object.values(t);o.length!==0&&n.push({provider:r,local:o.every(s=>s.local===!0),owner:o[0].owner,...o[0].name?{name:o[0].name}:{},...o[0].description?{description:o[0].description}:{}})}return{providers:n.sort((r,t)=>r.provider.localeCompare(t.provider))}}function Xe(e,n,r){let t=e.catalog.providers[n];if(!t)throw new x("PROVIDER_NOT_FOUND",404,`厂商 ${n} 不 ∈ catalog（内联声明厂商无包级档案——身份与表单经组合端点暴露）`);let o={};for(let i of Object.values(t))for(let d of i.services)(o[d]??={implementations:[]}).implementations.push({implementation:i.implementation,credentialType:i.credentialType});for(let[i,d]of Object.entries(o)){let p=U(e.walk,i);d.name=p.name,p.description!==void 0&&(d.description=p.description)}if(r?.has("integrationSchemas"))for(let[i,d]of Object.entries(o))d.integrationSchemas={configSchema:H(e,n,i)};let s=Object.values(t);return{provider:n,local:s.every(i=>i.local===!0),owner:s[0].owner,...s[0].name?{name:s[0].name}:{},...s[0].description?{description:s[0].description}:{},services:o}}function en(e,n,r){let t=e.catalog.providers[n],o=e.integrations?.services??{},s=[];if(t)for(let l of Object.values(t))l.services.includes(r)&&s.push({implementation:l.implementation,credentialType:l.credentialType});let i=o[r]?.provider,d=i&&typeof i=="object"&&i.provider===n?i:void 0;if(s.length===0&&!d)throw t?new x("SUPPLY_NOT_FOUND",404,`厂商 ${n} 未供给服务 ${r}（AI 帮我实现流：PUT 显式绑定后实施）`):new x("PROVIDER_NOT_FOUND",404,`厂商 ${n} 完全未知（不 ∈ catalog 且无任何内联声明）`);s.length===0&&d&&s.push({implementation:o[r]?.implementation??`${n}-inline@1`,credentialType:d.credentialType});let p=H(e,n,r,d?i?.configSchema:void 0);return{provider:n,service:r,implementations:s,integrationSchemas:{configSchema:p}}}function H(e,n,r,t){let o=e.walk.serviceSchemas[`${n}\0${r}`];return o?nn(e.appDir,o.packageDir,o.configSchema):typeof t=="string"?er(e.appDir,t):null}function nn(e,n,r){if(!r)return null;let t=qt(n,r);if(!Hn(t))return null;try{return JSON.parse(Zn(t,"utf8"))}catch{return null}}function er(e,n){let r=Yn(e,"config","schemas"),t=Yn(e,n),o=Qt(r,t);if(o===""||o.startsWith("..")||Zt(o))throw new x("VALIDATION_FAILED",400,"configSchema 引用必须落在 config/schemas/ 内（禁路径逃逸）",["provider.configSchema"]);if(!Hn(t))return null;let s,i;try{s=Gn(r),i=Gn(t)}catch{return null}if(i!==s&&!i.startsWith(s+Xt))throw new x("VALIDATION_FAILED",400,"configSchema 引用经 symlink 逃逸出 config/schemas/（realpath 复核拒绝）",["provider.configSchema"]);try{return JSON.parse(Zn(t,"utf8"))}catch{return null}}function qn(e){return{version:e.version,evaluation:e.evaluation,strictValidation:e.strictValidation,notes:[...e.notes]}}function Qn(e,n,r){let t=e.integrations,o=t?.services?.[n],s=o?.instances?.[r]??o?.instances?.["*"];if(s&&s.provider!==void 0)return"instance";if(o?.provider!==void 0)return"service";let i=e.walk.ownership[n];return i!==void 0&&L(e.integrations,i).layer==="module"?"module":typeof t?.provider=="string"&&t.provider.length>0?"app":null}function Xn(e,n,r,t,o){let s=n.resolveEffectiveService(e.integrations,r,t,o);if(s.status==="ok"&&s.effective){let i=s.effective.provider,d=typeof i=="string"?i:String(i?.provider??"");return{status:"ok",provider:d,implementation:s.effective.implementation,effective:{provider:d,implementation:s.effective.implementation,...s.effective.config!==void 0?{config:{...s.effective.config}}:{},...s.effective.credentialRef!==void 0?{credentialRef:s.effective.credentialRef}:{},layer:Qn(e,r,t)??"app"}}}return s.status==="binding-unresolved"?{status:"binding-unresolved",statusMessage:s.message}:{status:s.status}}function tn(e){let n=e.contracts.module;if(!n.resolveEffectiveService||!n.normalizeInstances)throw new x("CONTRACTS_NOT_RESOLVED",503,"contracts 求值面缺席（契约包形态异常）——重新安装或升级应用 @tbox.cn/app-contracts 后重试");return n}function rn(e,n){let r=tn(n),{integrations:t,catalog:o}=n,s=r.buildSupplyLookup(o),i=t,p=r.normalizeInstances({instances:i?.instances,defaultInstanceId:i?.defaultInstanceId}).defaultInstanceId??"*",l=Xn(n,r,e,p,s),m=Qn(n,e,p),k=n.integrations?.services?.[e]?.provider,R=l.provider??(typeof k=="string"?k:typeof k=="object"&&k?String(k.provider):void 0),w=new Set(Object.keys(n.catalog.providers)),A=R!==void 0&&w.has(R)?nr(n.catalog,R,e):void 0,O=o.services[e],f=O!==void 0?!O.optional:void 0,a=O?.owners[0];return{status:l.status,...l.statusMessage?{statusMessage:l.statusMessage}:{},...R!==void 0?{provider:R}:{},...R!==void 0&&m!==null?{layer:m}:{},...A!==void 0?{supplied:A}:{},...a!==void 0?{module:a}:{},...f!==void 0?{required:f}:{}}}function nr(e,n,r){return Ee(e,n,r)}function pe(e,n,r){let t=new Set([...e.walk.vocabulary,...Object.keys(e.catalog.services)]),o=e.integrations?.services??{};for(let i of Object.keys(o))t.add(i);let s={};for(let i of[...t].sort())r&&!r.includes(i)||(s[i]=rn(i,e));return{contracts:qn(e.contracts),resolutions:s,issues:n}}function on(e,n,r){let t=tn(n),o=t.buildSupplyLookup(n.catalog),s=n.integrations,d=t.normalizeInstances({instances:s?.instances,defaultInstanceId:s?.defaultInstanceId}).instances.map(O=>O.id),p=n.integrations?.services?.[e],l=p?.instances?Object.keys(p.instances):void 0,m;d.length>0?(m=[...d],l?.includes("*")&&m.push("*")):l!==void 0&&l.length>0?m=l.includes("*")?["*"]:l:m=[];let k=m.map(O=>{let f=Xn(n,t,e,O,o);return{instanceId:O,status:f.status,...f.statusMessage?{statusMessage:f.statusMessage}:{},...f.effective?{effective:f.effective}:{}}}),R=tr(n,e),A={...rn(e,n),instances:k,inheritance:R};return{contracts:qn(n.contracts),resolution:A,issues:r.filter(O=>O.service===e)}}function tr(e,n){let r=e.integrations,t=r?.services?.[n],o=e.integrations,i=tn(e).normalizeInstances({instances:o?.instances,defaultInstanceId:o?.defaultInstanceId}).defaultInstanceId??"*",d=t?.instances?.[i]??t?.instances?.["*"],p=e.walk.ownership[n],l=p!==void 0?L(r,p):{provider:null,layer:null};return[{layer:"app",...r?.provider?{provider:r.provider}:{}},{layer:"module",...l.layer==="module"&&l.provider?{provider:l.provider}:{}},{layer:"service",...typeof t?.provider=="string"?{provider:t.provider}:{},...t?.implementation?{implementation:t.implementation}:{}},{layer:"instance",...d?.provider?{provider:d.provider}:{},...d?.implementation?{implementation:d.implementation}:{}}]}function sn(e,n,r){if(n===null)return null;let t={};for(let o of r)t[o]={configSchema:H(e,n,o)};return{provider:n,services:t}}function re(e){return e===null||typeof e!="object"?JSON.stringify(e??null):Array.isArray(e)?`[${e.map(re).join(",")}]`:`{${Object.keys(e).sort().map(r=>`${JSON.stringify(r)}:${re(e[r])}`).join(",")}}`}var rr="\0no-enum";function ir(e){let n=e.enum;return Array.isArray(n)?`[${[...new Set(n.map(re))].sort().join(",")}]`:rr}function or(e){if(!e||typeof e!="object"||Array.isArray(e))return null;let n=e.type;return n===void 0?null:re(n)}function sr(e){let n=e.map(t=>or(t.subschema));if(n.some(t=>t===null)||new Set(n).size>1)return null;if(n[0]==='"object"'){let t=re(e[0].subschema);return e.every(o=>re(o.subschema)===t)?e[0].subschema:null}return new Set(e.map(t=>ir(t.subschema))).size===1?e[0].subschema:null}function Oe(e,n){let r=[],t=!0,o=new Map;for(let[i,d]of Object.entries(e.services)){let p=d.configSchema;if(p===null){r.push(i);continue}if(!p||typeof p!="object"||Array.isArray(p))continue;let l=p;l.additionalProperties===!1&&(t=!1);let m=l.properties;if(!m||typeof m!="object"||Array.isArray(m))continue;let k=Array.isArray(l.required)?l.required:[];for(let R of Object.keys(m)){let w=o.get(R)??[];w.push({service:i,subschema:m[R],required:k.includes(R)}),o.set(R,w)}}let s=[];for(let[i,d]of o)s.push({key:i,schema:sr(d),sources:d.map(({service:p,required:l})=>({service:p,required:l})),global:d.some(p=>!!p.subschema&&typeof p.subschema=="object"&&p.subschema["x-tbox-global"]===!0)});return{provider:e.provider,schemaless:r,unsupplied:[...n?.unsupplied??[]],additionalPropertiesAllowed:t,fields:s}}function an(e,n,r,t){let o=typeof t=="string"&&t.length>0?t:void 0;if(e==="app"){if(o!==void 0)return o;let d=n.integrations?.provider;return typeof d=="string"&&d.length>0?d:null}let s=n.walk.modules.find(d=>d.id===r);return!s||!K(n.walk,s).writable?null:o!==void 0?o:L(n.integrations,s.id).provider}var et={integrationSchemas:null,integrationFieldRegistry:null};function nt(e){return{...e,fields:e.fields.filter(n=>n.global)}}function cn(e,n){let r=an("app",e,void 0,n);if(r===null)return et;let t=sn(e,r,_e(e.catalog,r));return{integrationSchemas:t,integrationFieldRegistry:nt(Oe(t))}}function ln(e,n,r){let t=an("module",e,n,r),o=e.walk.modules.find(p=>p.id===n);if(t===null||!o)return et;let s=(o.descriptor.declare.owns??[]).map(p=>p.service),i=p=>Ee(e.catalog,t,p),d=sn(e,t,s.filter(i));return{integrationSchemas:d,integrationFieldRegistry:nt(Oe(d,{unsupplied:[...new Set(s.filter(p=>!i(p)))]}))}}function ar(e){return cn(e).integrationSchemas}function cr(e,n){return ln(e,n).integrationSchemas}function lr(e,n){let r=e.walk.ownership[n];if(r!==void 0)return L(e.integrations,r).provider;let t=e.integrations?.provider;return typeof t=="string"&&t.length>0?t:null}function xe(e,n){let r=e.integrations?.services?.[n]?.provider;if(r===void 0||r===""){let t=lr(e,n);return t===null?null:{provider:t,configSchema:H(e,t,n)}}if(typeof r=="string")return{provider:r,configSchema:H(e,r,n)};if(J(r)){let t=r;return{provider:t.provider,configSchema:H(e,t.provider,n,t.configSchema)}}return null}function dn(e,n){let r=xe(e,n);if(r===null)return null;let t={provider:r.provider,services:{[n]:{configSchema:r.configSchema}}};return Oe(t)}function fe(e,n){if(n===void 0||!n.startsWith("secret://"))return;let r=n.slice(9),t=oe(e,r);if(t)return{type:t.type,ref:n,file:_(r),masked:ge(t.values)}}function un(e){let n=e.integrations,r={credential:fe(e.appDir,typeof n?.credentialRef=="string"?n.credentialRef:void 0)??null,byInstance:{}};for(let{id:o}of n?.instances??[]){let s=n?.credentialRefByInstance?.[o];s!==void 0&&(r.byInstance[o]=fe(e.appDir,s)??null)}let t={};for(let[o,s]of Object.entries(n?.services??{})){let i={credential:fe(e.appDir,s.credentialRef)??null,byInstance:{}};for(let[d,p]of Object.entries(s.instances??{}))i.byInstance[d]=fe(e.appDir,p.credentialRef)??null;t[o]=i}return{app:r,services:t}}function pn(e,n){return{types:(n===void 0?Object.keys(e.catalog.credentialTypes):[...new Set(Object.values(e.catalog.providers[n]??{}).map(t=>t.credentialType))]).sort().map(t=>{let o=e.catalog.credentialTypes[t];return{credentialType:t,owner:o?.owner??"",credentialSchema:o?nn(e.appDir,o.packageDir,o.credentialSchema):null}})}}import dr from"path";var ur={app:["serviceResolutions","integrationSchemas","integrationFieldRegistry"],module:["serviceResolutions","integrationSchemas","integrationFieldRegistry"],provider:["integrationSchemas"],service:["integrationSchemas","integrationFieldRegistry"]};function Me(e,n){if(!n||n.length===0)return new Set;let r=ur[e],t=[...new Set(n)].filter(o=>!r.includes(o));if(t.length>0)throw new x("VALIDATION_FAILED",400,`include 含未知或不适用于本端点的键：${t.join("、")}（白名单：${r.join("、")}）`,["include"]);return new Set(n)}var tt=["integrationSchemas","integrationFieldRegistry"];function rt(e,n,r){if(!(typeof n!="string"||n.length===0)&&!tt.some(t=>r.has(t)))throw new x("VALIDATION_FAILED",400,`参数 ${e} 需与表单 include 键（${tt.join("、")}）同现——轴参仅重定向表单层双投影`,[e])}function pr(e,n={}){let r=je(),t=Promise.resolve(),o={appDir:e,cache:r};function s(f){if(!f.strictValidation)throw new x("CONTRACTS_NOT_RESOLVED",503,Pe(f));if(!f.ownershipBindingV6)throw new x("CONTRACTS_NOT_RESOLVED",503,`contracts ${f.version??"(版本未知)"} 不支持 v6 modules 绑定形状（OWNERSHIP_BINDING_V6 标记缺席）——升级应用 @tbox.cn/app-contracts 依赖后可用`)}function i(f){return Un(o,f)}function d(f){let a=f.integrations?.services;return a&&typeof a=="object"?Object.keys(a):[]}async function p(){let f=await T(e),a=i(f),g=a.integrations;if(g===null)return[];let h={resolveEffectiveService:l(f.module.resolveEffectiveService,"resolveEffectiveService"),buildSupplyLookup:l(f.module.buildSupplyLookup,"buildSupplyLookup"),normalizeInstances:l(f.module.normalizeInstances,"normalizeInstances"),RESOURCE_TYPE_IDS:f.module.RESOURCE_TYPE_IDS??[]},y=ae(e,a.walk,g,process.env);return ee({contracts:h,integrations:g,supplies:h.buildSupplyLookup(a.catalog),...y})}function l(f,a){if(typeof f!="function")throw new x("CONTRACTS_NOT_RESOLVED",503,`contracts 求值面 ${a} 缺席（形态异常）`);return f}function m(f){let a=t.then(f,f);return t=a.catch(()=>{}),a}let k={async loadModules(){let f=await T(e);return Ye(i(f))},async loadModule(f,a){let g=Me("module",a?.include);rt("moduleProvider",a?.moduleProvider,g);let h=await T(e),y=i(h),u=ke(y.walk,f),v=He(y,u.id);if(g.has("serviceResolutions")&&(v.serviceResolutions=h.evaluation&&h.strictValidation?await p().then(b=>pe(y,b,v.services.map(c=>c.service))):null),g.has("integrationSchemas")||g.has("integrationFieldRegistry")){let b=ln(y,u.id,a?.moduleProvider);g.has("integrationSchemas")&&(v.integrationSchemas=b.integrationSchemas),g.has("integrationFieldRegistry")&&(v.integrationFieldRegistry=b.integrationFieldRegistry)}return v},async loadApp(f){let a=Me("app",f?.include);rt("appProvider",f?.appProvider,a);let g=await T(e),h=i(g),y=Ze(h);if(a.has("serviceResolutions")&&(y.serviceResolutions=g.evaluation&&g.strictValidation?await p().then(u=>pe(h,u)):null),a.has("integrationSchemas")||a.has("integrationFieldRegistry")){let u=cn(h,f?.appProvider);a.has("integrationSchemas")&&(y.integrationSchemas=u.integrationSchemas),a.has("integrationFieldRegistry")&&(y.integrationFieldRegistry=u.integrationFieldRegistry)}return y},async loadService(f,a){let g=Me("service",a?.include),h=await T(e),y=i(h),u=G(y.walk,d(y),f),v=qe(y,u);return g.has("integrationSchemas")&&(v.integrationSchemas=xe(y,u)),g.has("integrationFieldRegistry")&&(v.integrationFieldRegistry=dn(y,u)),v},async loadServiceResolutions(f){let a=await T(e);s(a);let g=await p();return pe(i(a),g,f)},async loadServiceResolution(f){let a=await T(e);s(a);let g=i(a),h=G(g.walk,d(g),f),y=await p();return on(h,g,y)},async loadProviders(){let f=await T(e);return Qe(i(f))},async loadProvider(f,a){let g=Me("provider",a?.include),h=await T(e);return Xe(i(h),f,g)},async loadProviderService(f,a){let g=await T(e),h=i(g),y=G(h.walk,d(h),a);return en(h,f,y)},async loadCredentials(){let f=await T(e);return un(i(f))},async loadCredentialTypes(f){let a=await T(e);return pn(i(a),f)}},R=Je(e,{onApplied:n.onApplied,cache:r}),w={async writeAppIntegration(f,a){await R.warmup();let g=await T(e);return s(g),m(()=>R.applyApp(f,a))},async writeModuleIntegration(f,a,g){await R.warmup();let h=await T(e);return s(h),m(()=>{let y=ke(i(h).walk,f);return R.applyModule(y.id,a,g)})},async writeServiceIntegration(f,a,g){await R.warmup();let h=await T(e);return s(h),m(()=>{let y=i(h),u=G(y.walk,d(y),f);return R.applyService(u,a,g)})},async deleteServiceIntegration(f){await R.warmup();let a=await T(e);return s(a),m(()=>{let g=i(a),h=G(g.walk,d(g),f);return R.deleteService(h)})}},A={invalidate(){r.invalidate(),Te(e)},async resolveContracts(){return T(e)},walkManifests(){return O(e)},parseModuleDescriptor(f){return ie(f)},loadProviderCatalogRaw(){return We(e)},async readIntegrationsConfig(){return B(e,r)},async writeIntegrationsConfig(f){await R.warmup();let a=await T(e);return s(a),m(()=>fr(e,f,r))},async ensureMockBindings(){await R.warmup();let f=await T(e);return s(f),m(()=>Ge(e))},async evaluateIntegrationServices(f){await R.warmup();let a=await T(e);s(a);let g={resolveEffectiveService:l(a.module.resolveEffectiveService,"resolveEffectiveService"),buildSupplyLookup:l(a.module.buildSupplyLookup,"buildSupplyLookup"),normalizeInstances:l(a.module.normalizeInstances,"normalizeInstances"),RESOURCE_TYPE_IDS:a.module.RESOURCE_TYPE_IDS??[]};return ee({...f,contracts:g})}};function O(f){return V(f,r)}return{...k,...w,...A}}function fr(e,n,r){let t=dr.join(e,"config","integrations.json");$(t,`${JSON.stringify(n,null,2)}
-`),r.invalidate([t])}export{de as APP_INTEGRATION_NODE_KEYS,x as AppToolkitError,ue as MODULE_INTEGRATION_NODE_KEYS,z as SAFE_NAME_PATTERN,bt as assertValidModuleId,Oe as buildIntegrationFieldRegistry,Mt as buildOwnershipMap,ae as buildPredicateAssembly,$e as checkInstanceKeys,xt as collectDeclaredModules,Pe as contractsNotResolvedMessage,pr as createAppToolkit,je as createFileCache,Je as createWriteCore,$t as credentialArtifactExists,te as deepEqual,Q as deriveStem,fe as echoForRef,bn as ensureDir,Ge as ensureMockBindings,Be as evaluateAppIntegrationIssues,ee as evaluateIntegrationServices,Ne as expandEnvVars,jn as extractModuleIdFromSource,an as formProviderOf,Te as invalidateContractsResolver,J as isControlledInlineProvider,On as isValidModuleId,ar as loadAppIntegrationSchemas,Ze as loadAppView,pn as loadCredentialTypesView,un as loadCredentialsView,He as loadModuleDetailView,cr as loadModuleIntegrationSchemas,Ye as loadModulesView,we as loadProviderCatalog,We as loadProviderCatalogRaw,Xe as loadProviderDetailView,en as loadProviderServiceDetailView,Qe as loadProvidersView,qe as loadServiceDetailView,dn as loadServiceFieldRegistry,xe as loadServiceIntegrationSchemas,on as loadServiceResolutionDetail,pe as loadServiceResolutionsView,ve as manifestPath,ge as maskCredentialValues,mn as moduleDependencySchema,hn as moduleDescriptorSchema,K as moduleOwnershipWritable,fn as pageContribSchema,ie as parseModuleDescriptor,_e as providerFootprint,vn as providerSlotContribSchema,Ut as pruneIntegrationBindings,En as readAppManifest,De as readAppManifestFull,oe as readCredentialFile,B as readIntegrationsConfig,Dn as readIntegrationsStrict,le as reconcileOrphanCredentials,Pn as refToEnvKey,Rt as removeNpmModule,T as resolveContractsForApp,T as resolveContractsForAppExport,sn as resolveLayerIntegrationSchemas,L as resolveModuleBinding,ke as resolveModuleKey,G as resolveServiceKey,rn as resolveServiceSummary,wn as resourceNeedContribSchema,yn as serviceConsumeContribSchema,Sn as serviceOwnContribSchema,_ as stemToFilePath,ut as stemToRef,gn as tabContribSchema,kt as updateNpmModule,It as upsertMiniappContainer,ht as upsertNpmModule,V as walkManifests,wt as writeAppManifest,$ as writeAtomic,Ve as writeCredentialFile};
+import{a as Ve,b as T,c as De}from"./chunk-WUULQDOV.js";import{z as k}from"zod";var z=/^[a-zA-Z0-9][a-zA-Z0-9._-]*$/,ft=k.object({cardType:k.string(),schemaVersion:k.number().optional()}),vn=k.object({route:k.string(),component:k.string()}),yn=k.object({route:k.string(),label:k.string().optional(),icon:k.string().optional(),order:k.number().optional()}),Sn=k.object({id:k.string(),range:k.string().optional(),required:k.boolean().default(!0)}),wn=k.object({service:k.string(),provider:k.string().regex(z,"provider 名含非法字符（需 /^[a-zA-Z0-9][a-zA-Z0-9._-]*$/）"),implementation:k.string(),credentialType:k.string(),local:k.boolean().optional(),configSchema:k.string().optional(),credentialSchema:k.string().optional()}),hn=k.object({service:k.string(),optional:k.boolean().default(!0),defaults:k.array(k.object({provider:k.string().regex(z,"provider 名含非法字符（需 /^[a-zA-Z0-9][a-zA-Z0-9._-]*$/）"),implementation:k.string()})).default([]),name:k.string().optional(),description:k.string().optional()}),Rn=k.object({service:k.string()}).strict(),In=k.object({id:k.string(),type:k.string()}),kn=k.object({schemaVersion:k.number().default(1),id:k.string(),name:k.string().optional(),description:k.string().optional(),hidden:k.boolean().optional(),version:k.string().default("0.0.0"),kind:k.enum(["platform","business","third-party"]).default("business"),risk:k.object({level:k.enum(["high","medium","low"]).default("low"),writeBoundary:k.enum(["sdk-enforced","source"]).default("source")}).default({}),distribution:k.object({defaultMode:k.enum(["hybrid","sdk","codegen","local"]).default("codegen")}).default({}),declare:k.object({handlers:k.array(k.string()).default([]),tools:k.array(k.string()).default([]),cards:k.array(ft).default([]),routes:k.array(k.string()).default([]),pages:k.array(vn).default([]),tabs:k.array(yn).default([]),providers:k.object({slots:k.array(wn).default([])}).default({}),owns:k.array(Rn).default([]),consumes:k.array(hn).default([]),resources:k.array(In).default([])}).default({}),dependencies:k.object({modules:k.array(Sn).default([])}).default({}),env:k.array(k.string()).default([])}).strict();function gt(e){if(!e||typeof e!="object"||Array.isArray(e))return[];let n=[],r=e;"contributes"in r&&n.push("(root): manifest 旧键 `contributes` 已更名 `declare`（v6 声明面）——codegen 副本经 `module update --source` 重新生成 / sdk 模式升级模块包 / 手改两键");let t=r.declare;t&&typeof t=="object"&&!Array.isArray(t)&&"services"in t&&n.push("declare: manifest 旧键 `declare.services` 已更名 `declare.consumes`（消费关系定向化）——同上三路径升级"),!("id"in r)&&"name"in r&&n.push("(root): manifest 标识键 `name` 已更名 `id`（v7 词汇统一）——codegen 副本经 `module update --source` 重新生成 / sdk 模式升级模块包 / 手改两键");let i=t&&typeof t=="object"&&!Array.isArray(t)?t:void 0,o=Array.isArray(i?.consumes)&&i.consumes.some(s=>s!==null&&typeof s=="object"&&"title"in s);return("title"in r||o)&&n.push("(root): manifest 展示名键 `title` 已更名 `name`（v7 词汇统一；declare.consumes[].title 同步改 name）——同上三路径升级"),n}function se(e){let n=gt(e);if(n.length>0)return{ok:!1,errors:n,legacy:!0};let r=kn.safeParse(e);return r.success?{ok:!0,value:r.data}:{ok:!1,errors:r.error.issues.map(t=>`${t.path.join(".")||"(root)"}: ${t.message}`)}}var mt=/\$\$?\{([A-Z][A-Z0-9_]*)(?::-([^}]*))?\}/g;function bn(e){return JSON.stringify(e).slice(1,-1)}function Fe(e,n=process.env){let r=[],t=e.replace(mt,(i,o,s)=>{if(i.startsWith("$$"))return i.slice(1);let l=n[o];return l!==void 0?bn(l):s!==void 0?bn(s):(r.push(o),i)});return r.length>0?{missing:r}:{text:t,missing:[]}}import{mkdirSync as vt,existsSync as Cn,readFileSync as yt,writeFileSync as St}from"fs";import{dirname as wt,join as An}from"path";function ve(e){let n={};for(let[r,t]of Object.entries(e)){if(typeof t!="string"){n[r]=null;continue}n[r]=t.length<=4?"****":`${t.slice(0,2)}****`}return n}var x=class extends Error{code;httpStatus;fields;constructor(n,r,t,i){super(t),this.name="AppToolkitError",this.code=n,this.httpStatus=r,this.fields=i}};function J(e){return e.notes.length>0?e.notes[0]:e.version===null?"contracts 不可解析（未安装）——检查应用依赖安装后重试":e.strictValidation?e.ownershipBindingV6===!1?`contracts ${e.version??"(版本未知)"} 不支持 v6 modules 绑定形状（OWNERSHIP_BINDING_V6 标记缺席）——升级应用 @tbox.cn/app-contracts 依赖后可用`:"contracts workspace 源码态未构建——执行 pnpm --filter @tbox.cn/app-contracts build 后重试":`contracts ${e.version} 无严格校验面（需 ≥0.9.0）——升级应用 @tbox.cn/app-contracts 依赖后可用`}function ye(e,n){if(n!==void 0&&(n.includes("/")||n.includes("\\")||n.includes("..")))throw new x("VALIDATION_FAILED",400,`凭据 stem 派生输入含路径敌对字符（${e}）——拒绝派生`)}function X(e){if(ye("provider",e.provider),ye("service",e.service),ye("instanceId",e.instanceId),ye("domain",e.domain),e.instanceId!==void 0){let n=e.domain??e.service??"global";return`${e.provider}-${e.instanceId}-${n}`}return e.service!==void 0?`${e.provider}-${e.service}`:`${e.provider}-global`}function ht(e){return`secret://${e}`}function _(e){return`config/credentials/${e}.json`}function ae(e,n){let r=An(e,_(n));if(!Cn(r))return null;try{let t=JSON.parse(yt(r,"utf8"));if(typeof t.type!="string")return null;let{type:i,...o}=t,s={};for(let[l,p]of Object.entries(o))typeof p=="string"&&(s[l]=p);return{type:i,values:s}}catch{return null}}function _e(e,n,r){let t=An(e,_(n)),i=Cn(t);return vt(wt(t),{recursive:!0}),St(t,`${JSON.stringify({type:r.type,...r.values},null,2)}
+`,"utf8"),i}import{mkdirSync as Rt,renameSync as It,writeFileSync as kt}from"fs";import{dirname as bt}from"path";function $(e,n){En(bt(e));let r=`${e}.tmp-${process.pid}-${Date.now()}`;kt(r,n,"utf8"),It(r,e)}function En(e){Rt(e,{recursive:!0})}import{existsSync as F,readdirSync as Le,readFileSync as ee}from"fs";import{join as P}from"path";import{existsSync as Ct,readFileSync as On,mkdirSync as At,writeFileSync as Et}from"fs";import xn from"path";function Se(e){return xn.join(e,".tbox","app.json")}function Mn(e){let n=Se(e);if(!Ct(n))return null;try{let r=JSON.parse(On(n,"utf8")),t=r?.templateVersion;return typeof t!="string"||t.trim().length===0?null:{templateVersion:t.trim(),npmModules:Array.isArray(r?.npmModules)?r.npmModules:[]}}catch{return null}}function Ot(e,n){let r=Se(e);At(xn.dirname(r),{recursive:!0}),Et(r,`${JSON.stringify(n,null,2)}
+`,"utf8")}function $e(e){let n=Mn(e);if(n===null)return null;let r=Se(e);try{let t=JSON.parse(On(r,"utf8"));return{...n,miniappContainers:Array.isArray(t?.miniappContainers)?t.miniappContainers:[]}}catch{return{...n,miniappContainers:[]}}}function xt(e,n){let r=e.npmModules.filter(t=>t.id!==n.id);return{...e,npmModules:[...r,n]}}function Mt(e,n){return{...e,npmModules:e.npmModules.filter(r=>r.id!==n)}}function jt(e,n){let r=(e.miniappContainers??[]).filter(t=>t.id!==n.id);return{...e,miniappContainers:[...r,n]}}function Tt(e,n,r){return{...e,npmModules:e.npmModules.map(t=>t.id===n?{...t,...r}:t)}}function jn(e){return/^[a-z0-9]+(-[a-z0-9]+)*$/.test(e)&&!e.includes("..")}function Nt(e,n){if(!jn(e))throw new Error(`非法模块 id "${e}"（来自 ${n}）：仅允许小写字母/数字/中划线`)}function Tn(e){try{let n=JSON.parse(e);if(!Array.isArray(n.slots))return null;let r=n.slots.filter(i=>typeof i=="string"),t={};if(n.meta&&typeof n.meta=="object"&&!Array.isArray(n.meta))for(let[i,o]of Object.entries(n.meta)){if(!o||typeof o!="object"||Array.isArray(o))continue;let{name:s,description:l}=o,p={};typeof s=="string"&&s.length>0&&(p.name=s),typeof l=="string"&&l.length>0&&(p.description=l),(p.name!==void 0||p.description!==void 0)&&(t[i]=p)}return{slots:r,meta:t}}catch{return null}}function we(e,n){let r=t=>{try{let i=JSON.parse(t),o=se(i);if(o.ok)return{kind:"strict",id:o.value.id,version:o.value.version,descriptor:o.value,declare:o.value.declare};if(o.legacy)return{kind:"legacy",detail:o.errors.join("; ")};if(i&&typeof i=="object"&&"declare"in i){let s=i;return{kind:"loose",...typeof s.id=="string"?{id:s.id}:{},declare:{providers:s.declare?.providers,consumes:s.declare?.consumes}}}return null}catch{return null}};if(n)return n.read(e,r)??null;if(!F(e))return null;try{return r(ee(e,"utf8"))}catch{return null}}function Pt(e){let n=P(e,".tbox","app.json");if(!F(n))return[];try{let r=JSON.parse(ee(n,"utf8"));return Array.isArray(r.npmModules)?r.npmModules.filter(t=>!!t&&typeof t=="object"&&typeof t.id=="string"&&typeof t.package=="string"):[]}catch{return[]}}function Vt(e){let n=P(e,".tbox-dev.local"),r=P(n,"dev-manifest.json");if(!F(r))return[];try{let t=JSON.parse(ee(r,"utf8")),i=[];for(let[o,s]of Object.entries(t.redirects??{}))typeof s!="string"||!o.startsWith("@tbox.cn/app-")||i.push({pkg:o,dir:P(n,s)});return i}catch{return[]}}function Pn(e,n){let r=[],t=[e];for(let l of["apps","packages"]){let p=P(e,l);if(F(p))try{for(let c of Le(p,{withFileTypes:!0}))c.isDirectory()&&t.push(P(p,c.name))}catch{}}let i=new Set,o=(l,p,c)=>{let m=n?n.read(p,Tn):Tn(ee(p,"utf8"));m!=null&&r.push({dir:l,slots:m.slots,meta:m.meta,via:c})},s=P(e,"config","service-slots.json");F(s)&&o(e,s,"config-override");for(let l of t){let p=P(l,"node_modules","@tbox.cn");if(!F(p))continue;let c=[];try{c=Le(p)}catch{continue}for(let m of c){let I=P(p,m);if(i.has(I))continue;i.add(I);let h=P(I,"service-slots.json"),v=P(I,"src","service-slots.json");F(h)?o(I,h,"package"):F(v)&&o(I,v,"package")}}for(let l of t)for(let p of[P(l,"service-slots.json"),P(l,"src","service-slots.json")])F(p)&&o(l,p,"local");return r}function V(e,n){let r=[],t={providers:{},services:{},credentialTypes:{}},i={},o=[],s={},l=new Set,p=(a,g,w,S)=>{for(let u of a){let y=t.providers[u.provider]??={},b=y[u.implementation];b?b.services.includes(u.service)||b.services.push(u.service):(y[u.implementation]={provider:u.provider,implementation:u.implementation,credentialType:u.credentialType,owner:g,...S?.name?{name:S.name}:{},...S?.description?{description:S.description}:{},...u.local?{local:!0}:{},...u.configSchema?{configSchema:u.configSchema}:{},...u.credentialSchema?{credentialSchema:u.credentialSchema}:{},services:[u.service]},t.credentialTypes[u.credentialType]??={owner:g,packageDir:w,...u.credentialSchema?{credentialSchema:u.credentialSchema}:{}});let d=`${u.provider}\0${u.service}`;i[d]||(i[d]={...u.configSchema?{configSchema:u.configSchema}:{},...u.credentialSchema?{credentialSchema:u.credentialSchema}:{},packageDir:w})}},c=a=>a.kind==="strict"?{name:a.descriptor.name,description:a.descriptor.description}:void 0,m=(a,g)=>{for(let w of a){let S=s[w];S===void 0?s[w]=g:S!==g&&o.push({severity:"error",code:"OWNERSHIP_CONFLICT",module:g,message:`服务 ${w} 归属冲突：${S} 与 ${g} 均声明 owns（先声明 ${S} 胜出）——修正 manifest declare.owns 互斥`})}},I=(a,g)=>{a.kind==="legacy"&&o.push({severity:"error",code:"OLD_MANIFEST_KEY",module:g,message:`${g}：${a.detail}`})},h=a=>a.kind==="strict"||a.kind==="loose"?a.declare:null,v=(a,g)=>{let w=a.optional!==!1,S=a.defaults??[],u=t.services[a.service];if(u){u.optional=u.optional&&w;let y=new Set(u.defaults.map(b=>`${b.provider}\0${b.implementation}`));for(let b of S){let d=`${b.provider}\0${b.implementation}`;y.has(d)||(u.defaults.push(b),y.add(d))}u.owners.includes(g)||u.owners.push(g);return}t.services[a.service]={optional:w,defaults:[...S],...a.name?{name:a.name}:{},...a.description?{description:a.description}:{},owners:[g]}};for(let a of Pt(e)){if(l.has(a.id))continue;let g=P(e,"packages",a.id),w=P(e,"node_modules",...a.package.split("/")),S=we(P(g,"tbox.module.json"),n)??we(P(w,"tbox.module.json"),n);if(S?.kind==="legacy"){I(S,a.id),l.add(a.id);continue}if(!S)continue;l.add(a.id);let u=F(P(g,"tbox.module.json"))?g:w,y=h(S);S.kind==="strict"&&r.push({id:a.id,dir:u,pkg:a.mode==="sdk"?a.package:`@app/${a.id}`,descriptor:S.descriptor});let b=y?.providers?.slots??[];b.length&&p(b,a.package,u,c(S));let d=y?.consumes??[];for(let E of d)v(E,a.package);let R=S.kind==="strict"?S.descriptor.declare.owns:[];R.length&&m(R.map(E=>E.service),a.id)}for(let{pkg:a,dir:g}of Vt(e)){let w=we(P(g,"tbox.module.json"),n);if(w?.kind==="legacy"){I(w,a);continue}if(!w?.id||l.has(w.id))continue;l.add(w.id);let S=h(w),u=S?.providers?.slots??[];u.length&&p(u,a,g,c(w));let y=S?.consumes??[];for(let d of y)v(d,a);let b=w.kind==="strict"?w.descriptor.declare.owns:[];b.length&&m(b.map(d=>d.service),w.id)}let A=P(e,"packages");if(F(A)){let a=[];try{a=Le(A,{withFileTypes:!0}).filter(g=>g.isDirectory()).map(g=>g.name)}catch{}for(let g of a){if(l.has(g))continue;let w=P(A,g),S=we(P(w,"tbox.module.json"),n);if(S?.kind==="legacy"){I(S,g),l.add(g);continue}if(!S)continue;let u=S.id??g;if(l.has(u))continue;l.add(u);let y=h(S);S.kind==="strict"&&r.push({id:u,dir:w,pkg:`@app/${u}`,descriptor:S.descriptor});let b=y?.providers?.slots??[];b.length&&p(b,`@app/${u}`,w,c(S));let d=y?.consumes??[];for(let E of d)v(E,`@app/${u}`);let R=S.kind==="strict"?S.descriptor.declare.owns:[];R.length&&m(R.map(E=>E.service),u)}}let O=new Set,f={};for(let a of Pn(e,n)){for(let g of a.slots)O.add(g);for(let[g,w]of Object.entries(a.meta))f[g]===void 0&&(f[g]=w)}return{modules:r,catalog:t,serviceSchemas:i,vocabulary:[...O].sort(),slotMeta:f,ownership:s,declarationIssues:o}}function Nn(e,n,r){let t=P(e,"src",n,"index.ts");if(!F(t))return!1;try{let i=ee(t,"utf8");return new RegExp(`export\\s+const\\s+${r}\\b`).test(i)}catch{return!1}}function Dt(e){let n=P(e,"src","server","index.ts");if(!F(n))return"";try{return ee(n,"utf8")}catch{return""}}function Vn(e){return e.match(/declaration\s*:\s*\{[\s\S]*?moduleId\s*:\s*['"]([^'"]+)['"]/)?.[1]}function Ft(e){let n=[],r=V(e),t=$e(e),i=new Map;for(let o of t?.npmModules??[])i.set(o.id,o.mode);for(let o of r.modules){let s=i.get(o.id)??"local",l=Nn(o.dir,"server","serverModule"),p=o.descriptor.declare;n.push({id:o.id,pkg:s==="sdk"?o.pkg:`@app/${o.id}`,mode:s,hasServerEntry:l,hasClientEntry:Nn(o.dir,"client","clientModule"),hasCards:(p.cards?.length??0)>0,...l?{moduleId:Vn(Dt(o.dir))}:{}})}return n.sort((o,s)=>o.id.localeCompare(s.id))}function _t(e){return V(e).ownership}function L(e,n){let r=e?.modules?.[n]?.provider;if(typeof r=="string"&&r.length>0)return{provider:r,layer:"module"};let t=e?.provider;return typeof t=="string"&&t.length>0?{provider:t,layer:"app"}:{provider:null,layer:null}}function G(e,n){let r=(n.descriptor.declare.owns??[]).map(t=>t.service).sort();return r.length===0?{writable:!1,reason:"zero-ownership",ownedServices:[]}:{writable:!0,ownedServices:r}}function We(e,n){return[...new Set(Object.values(e.providers[n]??{}).flatMap(r=>r.services))].sort()}function H(e){if(!e||typeof e!="object")return!1;let n=Object.keys(e),r=new Set(["provider","credentialType","configSchema"]);if(!n.every(i=>r.has(i)))return!1;let t=e;return typeof t.provider=="string"&&t.provider.length>0&&typeof t.credentialType=="string"&&t.credentialType.length>0&&(t.configSchema===void 0||typeof t.configSchema=="string")}function Dn(e,n,r){return e==="*"||r.has(e)?null:{severity:"error",code:"INSTANCE_KEY_NOT_REGISTERED",instance:e,message:`integrations: ${n} 键 ${e} 不在 malls 白名单内（${[...r].join(", ")}）`}}function Be(e,n){let r=new Set(n),t=[],i=(o,s)=>{let l=Dn(o,s,r);l&&t.push(l)};for(let o of Object.keys(e.configByInstance??{}))i(o,"configByInstance");for(let o of Object.keys(e.credentialRefByInstance??{}))i(o,"credentialRefByInstance");for(let[o,s]of Object.entries(e.services??{}))for(let l of Object.keys(s.instances??{}))i(l,`services.${o}.instances`);return t}function ne(e){let n=[],r=e.contracts,{integrations:t,suppliedProviders:i,demandedServices:o,supplies:s,malls:l,credentialSchemaMissing:p,vendorConfigKeys:c,vendorGlobalConfigKeys:m,vendorConfigSchemaMissing:I,credentialFileMissing:h,credentialFileType:v,realmSwitchHints:A,moduleResourceNeeds:O,ownership:f,installedModuleIds:a}=e,g=l?new Set(l):void 0;for(let d of A??[])n.push({severity:"warning",code:"REALM_SWITCH_HINT",message:d});let w=new Set(Object.keys(i).map(d=>d.slice(0,d.indexOf("\0"))).filter(d=>d.length>0)),S=(d,R,E,C)=>{if(typeof E?.provider=="string"&&typeof E.implementation=="string"&&E.provider&&E.implementation)return i[ce(E.provider,E.implementation)]?.credentialType;if(typeof R.provider=="string"&&typeof R.implementation=="string")return i[ce(R.provider,R.implementation)]?.credentialType;let M=R.provider?.credentialType;if(typeof M=="string")return M;if(!s)return;let N=C??Object.keys(R.instances??{})[0]??"",j=r.resolveEffectiveService(t,d,N,s,f);if(!(j.status!=="ok"||typeof j.effective.provider!="string"))return i[ce(j.effective.provider,j.effective.implementation)]?.credentialType};if(h||v)for(let[d,R]of Object.entries(t.services))for(let[E,C]of Object.entries(R.instances??{})){if(C.enabled===!1)continue;let M=C.credentialRef??R.credentialRef??t.credentialRefByInstance?.[E]??t.credentialRef;if(typeof M!="string"||!M.startsWith("secret://"))continue;let N=M.slice(9);h?.[N]===!0&&n.push({severity:"error",code:"CREDENTIAL_FILE_MISSING",service:d,instance:E,message:`integrations: 凭据文件缺失 ${N}（${d}@${E} effective ref=${M}；档内 config/credentials/ 无此文件）`});let j=v?.[N];if(j){let D=S(d,R,C,E);D&&j!==D&&n.push({severity:"error",code:"CREDENTIAL_TYPE_MISMATCH",service:d,instance:E,message:`integrations: 凭据文件 ${N}.json type=${j} 与绑定 credentialType ${D} 不一致（${d}@${E}——transport 创建期将按 type 选策略）`})}}let u=(d,R)=>{if(!g)return;let E=Dn(d,R,g);E&&n.push(E)};for(let[d]of Object.entries(t.configByInstance??{}))u(d,"configByInstance");for(let[d]of Object.entries(t.credentialRefByInstance??{}))u(d,"credentialRefByInstance");let y=Object.entries(t.services).filter(([,d])=>d.instances==null||d.instances["*"]!=null).map(([d])=>d);if(y.length>0){let d=Object.entries(t.services).filter(([,R])=>R.instances!=null&&R.instances["*"]==null).map(([R])=>R);d.length>0&&n.push({severity:"warning",code:"WILDCARD_ALIGNMENT",message:`integrations: 激活形态不对称（通配：${y.join(", ")}；显式键集：${d.join(", ")}）——动态 mallId 将在显式键集槽上 INSTANCE_NOT_FOUND（provider 业务限制表达位），确认是否齐步`})}let b=r.normalizeInstances({instances:t.instances,defaultInstanceId:t.defaultInstanceId});b.instances.length>=2&&b.defaultInstanceId===null&&n.push({severity:"warning",code:"MULTI_INSTANCE_NO_DEFAULT",message:`integrations: ${b.instances.length} 个部署实例（${b.instances.map(d=>d.id).join(", ")}）均无 defaultInstanceId——无 scope 参数访问将落全局会话（默认商圈不注入）`});for(let[d,R]of Object.entries(t.services)){if(o[d]||n.push({severity:"warning",code:"SLOT_NOT_DECLARED",service:d,message:`integrations: 服务槽 ${d} 无消费方声明（拼写错误或需求方未安装）——若为拆分前旧槽位词汇（member.main/parking.main/promotion.read/shopping-guide.main），参照 cookbook·app-config 槽位迁移配方展开为新槽`}),typeof R.provider=="string"?typeof R.implementation=="string"&&!i[ce(R.provider,R.implementation)]&&n.push({severity:"error",code:"INSTANCE_SUPPLY_UNMATCHED",service:d,message:`integrations: provider ${R.provider}/${R.implementation} 未命中已装供给（${d} 槽级）——装对应 provider 包或改绑`}):R.provider!==void 0&&!H(R.provider)&&n.push({severity:"error",code:"INLINE_PROVIDER_INVALID",service:d,message:`integrations: 内联 provider 超受控形状（${d} 槽级；允许键 provider/credentialType/configSchema）`}),p){let C=S(d,R);C&&p[C]===!0&&n.push({severity:"error",code:"SCHEMA_FILE_MISSING",service:d,message:`integrations: credentialType ${C} 的 schema 引用不存在（${d}；manifest 声明指向缺失文件）`})}typeof R.provider=="object"&&typeof R.implementation!="string"&&n.push({severity:"error",code:"IMPL_WITHOUT_PROVIDER",service:d,message:`integrations: 内联厂商声明必须同时提供 implementation（${d} 槽级）`});for(let[C,M]of Object.entries(R.instances??{})){u(C,`services.${d}.instances`);let N=M.provider!==void 0,j=M.implementation!==void 0;if(j&&!N&&n.push({severity:"error",code:"IMPL_WITHOUT_PROVIDER",service:d,instance:C,message:`integrations: 实例级 implementation 需伴随 provider（${d}@${C}——impl-only 禁止，provider 是绑定组头）`}),N&&j){let D=M.provider,W=M.implementation;typeof D=="string"&&typeof W=="string"?i[ce(D,W)]||n.push({severity:"error",code:"INSTANCE_SUPPLY_UNMATCHED",service:d,instance:C,message:`integrations: 实例级 provider 覆盖 ${D}/${W} 未命中已装供给（${d}@${C}）`}):H(D)||n.push({severity:"error",code:"INLINE_PROVIDER_INVALID",service:d,instance:C,message:`integrations: 实例级内联 provider 超受控形状（${d}@${C}）`})}}}for(let[d,R]of[["root",t.provider],...Object.entries(t.modules??{}).map(([E,C])=>[`modules.${E}`,C?.provider])])typeof R!="string"||R.length===0||w.has(R)||n.push({severity:"error",code:"VENDOR_NOT_INSTALLED",module:d.startsWith("modules.")?d.slice(8):void 0,message:`integrations: ${d} provider ${R} 未命中已装供给——装对应 provider 包或 provider use 改绑`});if(s)for(let[d,R]of Object.entries(t.services)){let E=R.instances?Object.keys(R.instances):[""];for(let C of E){let M=r.resolveEffectiveService(t,d,C,s,f);M.status==="binding-unresolved"&&n.push({severity:"error",code:"BINDING_UNRESOLVED",service:d,instance:C||void 0,message:`integrations: ${M.message}`})}}for(let[d,R]of Object.entries(t.services))R.implementation!==void 0&&R.provider===void 0&&n.push({severity:"error",code:"IMPL_WITHOUT_PROVIDER",service:d,message:`integrations: 槽级 implementation 需伴随 provider（${d}——impl-only 禁止，provider 是绑定组头）`});for(let[d,R]of Object.entries(t.modules??{})){if(!(R?.provider!==void 0||R?.config!==void 0))continue;let C=a?!a.has(d):!1,M=0;if(f)for(let j of Object.values(f))j===d&&(M+=1);if(C||!(f===void 0)&&M===0){let j=C?"未安装（键 = install id）":"未声明任何 owns（无模块级配置位）";n.push({severity:"error",code:"MODULE_CONFIG_DEAD",module:d,message:`integrations: modules.${d} 携带 provider/config 但模块${j}（MODULE_CONFIG_DEAD——模块级集成位作用于 declare.owns 服务，改 declare.owns 或删除该节点）`})}}if(c){let d=new Set,R=!1,E=C=>{typeof C!="string"||C.length===0||(c[C]&&d.add(C),!c[C]&&!I?.[C]&&(R=!0),I?.[C]&&(R=!0))};E(t.provider);for(let C of Object.values(t.modules??{}))E(C?.provider);for(let C of Object.values(t.services)){let M=C.provider;E(typeof C.provider=="string"?C.provider:M?.provider)}if(d.size>0&&!R){let C=new Set;for(let j of d)for(let D of c[j]??[])C.add(D);let M=new Set;for(let j of d)for(let D of m?.[j]??[])M.add(D);let N=(j,D,W,Z)=>{for(let[Q]of Object.entries(j??{}))(W??C).has(Q)?Z&&Z.size>0&&!Z.has(Q)&&n.push({severity:"warning",code:"GLOBAL_FIELD_UNDECLARED",message:`integrations: ${D} 键 ${Q} 过 schema 校验但未声明 x-tbox-global（不进应用/模块全局表单；已配置值照常生效——如需全局编辑请在 provider schema 标记）`}):n.push({severity:"error",code:"DOMAIN_CONFIG_INVALID",message:`integrations: ${D} 键 ${Q} 不在引用厂商（${[...d].join("/")}）任何槽 schema properties 内（死配置）`})};N(t.config,"root.config",void 0,M);for(let[j,D]of Object.entries(t.configByInstance??{}))N(D,`root.configByInstance[${j}]`,void 0,M);for(let[j,D]of Object.entries(t.modules??{})){if(!D?.config)continue;let W=L(t,j).provider??void 0;if(W===void 0){N(D.config,`modules.${j}.config`,void 0,M);continue}let Z=c[W];if(!Z||I?.[W])continue;let Q=m?.[W];N(D.config,`modules.${j}.config`,new Set(Z),Q)}}}for(let[d,R]of Object.entries(o)){let E=t.services[d];if(!E){n.push({severity:"warning",code:"SLOT_NOT_CONFIGURED",service:d,message:`integrations: 服务槽 ${d}（需求方 ${R.owners.join(", ")}）未配置${R.optional?"（可选槽）":"（必需槽——模块将走降级链）"}`});continue}let C=Object.entries(E.instances??{}).filter(([,M])=>M.enabled===!1).map(([M])=>M);C.length>0&&n.push({severity:"warning",code:"INSTANCE_DISABLED",service:d,instance:C.join(", "),message:`integrations: ${d} 实例禁用（${C.join(", ")}）`})}for(let[d,R]of Object.entries(t.modules??{})){let E=O?.[d];O&&!(d in O)&&n.push({severity:"warning",code:"RESOURCE_NOT_DECLARED",module:d,message:`integrations: modules.${d} 未命中已装模块（键 = install id——检查 .tbox/app.json entry.id / packages/ 目录名）`});for(let[C,M]of Object.entries(R?.resources??{})){let N=M?.type;(typeof N!="string"||!r.RESOURCE_TYPE_IDS.includes(N))&&n.push({severity:"error",code:"RESOURCE_TYPE_UNKNOWN",module:d,message:`integrations: modules.${d}.resources.${C} type 非法（${String(N)}；词汇表 = ${r.RESOURCE_TYPE_IDS.join("/")}）`}),E&&E.size>0&&!E.has(C)&&n.push({severity:"warning",code:"RESOURCE_NOT_DECLARED",module:d,message:`integrations: modules.${d}.resources.${C} 未被模块 manifest declare.resources 声明`})}}return n}function ce(e,n){return`${e}\0${n}`}import{existsSync as Ue,readFileSync as $t,readdirSync as Lt}from"fs";import{join as he}from"path";function _n(e){return e.replaceAll("-","_").toUpperCase()}function Fn(e){if(!Ue(e))return null;try{let n=JSON.parse($t(e,"utf8"));return n&&typeof n=="object"?n:null}catch{return null}}function Wt(e){let n=new Set,r=e.properties;if(r&&typeof r=="object"&&!Array.isArray(r))for(let t of Object.keys(r))n.add(t);return n}function de(e,n,r,t=process.env){let i={};for(let[u,y]of Object.entries(n.catalog.providers))for(let[b,d]of Object.entries(y))i[`${u}\0${b}`]={services:[...d.services],owner:d.owner,credentialType:d.credentialType};let o={};for(let[u,y]of Object.entries(n.catalog.services))o[u]={optional:y.optional,owners:[...y.owners]};let s={},l={},p={},c={},m={};for(let u of n.modules){m[u.id]=new Set((u.descriptor.declare.resources??[]).map(y=>y.id));for(let y of u.descriptor.declare.providers?.slots??[]){if(y.configSchema){let b=Fn(he(u.dir,y.configSchema));if(b){let d=s[y.provider]??=new Set,R=l[y.provider]??=new Set;for(let C of Wt(b))d.add(C);let E=b.properties;if(E&&typeof E=="object"&&!Array.isArray(E))for(let[C,M]of Object.entries(E))M&&typeof M=="object"&&M["x-tbox-global"]===!0&&R.add(C)}else p[y.provider]=!0}y.credentialSchema&&!Ue(he(u.dir,y.credentialSchema))&&(c[y.credentialType]=!0)}}let I={},h=new Set,v=he(e,"config","credentials");if(Ue(v))for(let u of Lt(v)){if(!u.endsWith(".json"))continue;let y=u.slice(0,-5);h.add(y);let b=Fn(he(v,u));b&&typeof b.type=="string"&&(I[y]=b.type)}let A=r,O=[],f=u=>{typeof u=="string"&&u.startsWith("secret://")&&O.push(u)};for(let u of Object.values(A.services??{}))if(u&&typeof u=="object"){f(u.credentialRef);for(let y of Object.values(u.instances??{}))y&&typeof y=="object"&&f(y.credentialRef)}for(let u of Object.values(A.credentialRefByInstance??{}))f(u);f(A.credentialRef);let a={};for(let u of O){let y=u.slice(9);t[_n(y)]===void 0&&(h.has(y)||(a[y]=!0))}let g=[];for(let[u,y]of Object.entries(A.services??{})){let b=y&&typeof y=="object"&&typeof y.provider=="string"?y.provider:void 0;for(let[d,R]of Object.entries((y&&typeof y=="object"?y.instances:void 0)??{})){let E=R&&typeof R=="object"&&typeof R.provider=="string"?R.provider:void 0;b&&E&&E!==b&&g.push(`integrations: ${u}@${d} 实现覆盖跨厂商（${b} → ${E}）——凭据域切换，确认该 mall 对应凭据在场`)}}let S=((Array.isArray(A.instances)?A.instances:void 0)??[]).map(u=>u&&typeof u=="object"&&typeof u.id=="string"?u.id:void 0).filter(u=>typeof u=="string");return{suppliedProviders:i,demandedServices:o,credentialFileMissing:a,credentialFileType:I,credentialSchemaMissing:c,vendorConfigKeys:s,vendorGlobalConfigKeys:l,vendorConfigSchemaMissing:p,realmSwitchHints:g,moduleResourceNeeds:m,...S.length>0?{malls:S}:{},ownership:n.ownership,installedModuleIds:new Set([...n.modules.map(u=>u.id),...new Set(Object.values(n.ownership))])}}import{existsSync as ti,readFileSync as ri}from"fs";import{join as oi,resolve as si}from"path";function Ke(e){return V(e).catalog}function Re(e){let n=V(e).catalog,r={};for(let[o,s]of Object.entries(n.providers)){r[o]={};for(let[l,p]of Object.entries(s))r[o][l]={provider:p.provider,implementation:p.implementation,credentialType:p.credentialType,owner:p.owner,...p.local?{local:!0}:{},...p.configSchema?{configSchema:p.configSchema}:{},...p.credentialSchema?{credentialSchema:p.credentialSchema}:{},services:[...p.services]}}let t={};for(let[o,s]of Object.entries(n.services))t[o]={optional:s.optional,defaults:s.defaults.map(l=>({...l})),owners:[...s.owners]};let i={};for(let[o,s]of Object.entries(n.credentialTypes))i[o]={owner:s.owner,...s.credentialSchema?{credentialSchema:s.credentialSchema}:{}};return{providers:r,services:t,credentialTypes:i}}async function ze(e,n,r,t=process.env){let i=r.module,o=V(e),s=i.buildSupplyLookup(Re(e)),l=de(e,o,n,t);return ne({contracts:i,integrations:n,supplies:s,...l})}import{existsSync as Ht,rmSync as Yt}from"fs";import{join as qt}from"path";import{existsSync as Bt,readFileSync as Ut}from"fs";import{join as $n}from"path";var Kt=$n("config","integrations.json");function B(e,n){let r=$n(e,Kt),t=i=>JSON.parse(i);if(n)return n.read(r,t)??null;if(!Bt(r))return null;try{return t(Ut(r,"utf8"))}catch{return null}}async function Ln(e,n){let r=await T(e),t=B(e,n);if(t===null)return{config:null,strict:!1,contracts:r};if(r.strictValidation&&r.module.parseIntegrationsConfig)try{return{config:r.module.parseIntegrationsConfig(t),strict:!0,contracts:r}}catch(i){if(i instanceof Error&&Array.isArray(i.issues)){let o=i.issues.filter(s=>Array.isArray(s.path)).map(s=>s.path.map(String).join(".")).filter(s=>s.length>0);throw new x("VALIDATION_FAILED",400,"integrations.json 校验失败",o.length>0?o:void 0)}throw new x("VALIDATION_FAILED",400,i instanceof Error?i.message:String(i))}return{config:t,strict:!1,contracts:r}}function le(e,n,r){return e.includes(r)||n.includes(r)}import{readdirSync as zt,existsSync as Ie,readFileSync as Jt}from"fs";import{join as ke}from"path";function Wn(e,n,r){let t=[];if(n){let i=X({provider:e});t.push({stem:i,ref:`secret://${i}`,input:n})}for(let[i,o]of Object.entries(r??{})){let s=X({provider:e,instanceId:i});t.push({instanceId:i,stem:s,ref:`secret://${s}`,input:o})}return t}function Bn(e,n,r,t,i){let o=[];if(t){let s=X({provider:e,service:n});o.push({stem:s,ref:`secret://${s}`,input:t})}for(let[s,l]of Object.entries(i??{})){let p=X({provider:e,instanceId:s,domain:r});o.push({instanceId:s,stem:p,ref:`secret://${p}`,input:l})}return o}function Ge(e,n,r){return n.map(t=>({stem:t.stem,ref:t.ref,overwrote:r?Ie(ke(e,_(t.stem))):_e(e,t.stem,t.input)}))}function Gt(e,n){return Ie(ke(e,_(n)))}function Je(e,n){if(typeof e=="string"){e.startsWith("secret://")&&n.add(e.slice(9));return}if(Array.isArray(e)){for(let r of e)Je(r,n);return}if(e&&typeof e=="object")for(let r of Object.values(e))Je(r,n)}function te(e){let n=ke(e,"config","credentials"),r=new Set,t=ke(e,"config","integrations.json");if(Ie(t))try{Je(JSON.parse(Jt(t,"utf8")),r)}catch{}let i=[];if(!Ie(n))return i;let o=[];try{o=zt(n).filter(s=>s.endsWith(".json")).map(s=>s.slice(0,-5))}catch{return i}for(let s of o.sort()){if(r.has(s))continue;let l=ae(e,s);i.push({severity:"warning",code:"ORPHANED_CREDENTIAL",message:`${_(s)} 不再被引用（凭据文件保留，可手动清理）`})}return i}function be(e){if(typeof e=="string")return e.length>0?e:void 0;if(e&&typeof e=="object"&&H(e)){let n=e.provider;return n.length>0?n:void 0}}async function Zt(e){let n=qt(e,"config","integrations.json"),r=B(e);if(r===null)return{removed:[],orphanCredentials:[],skipped:"not-configured"};let t=await T(e);if(!t.strictValidation)return{removed:[],orphanCredentials:[],skipped:"predicate-unavailable"};let i;try{let v=Fe(JSON.stringify(r),process.env);if(v.missing.length>0||v.text===void 0)return{removed:[],orphanCredentials:[],skipped:"predicate-unavailable"};i=JSON.parse(v.text)}catch{return{removed:[],orphanCredentials:[],skipped:"predicate-unavailable"}}let o;try{o=await ze(e,i,t,process.env)}catch{return{removed:[],orphanCredentials:[],skipped:"predicate-unavailable"}}let s=V(e),l=new Set(Object.keys(s.catalog.providers)),p=s.ownership,c=structuredClone(r);c.services??={};let m=[];for(let v of o)if(v.severity==="error"){if(v.code==="VENDOR_NOT_INSTALLED")if(v.module){let O=(c.modules??{})[v.module];O?.provider&&(m.push(`modules.${v.module}.provider=${String(O.provider)}`),delete O.provider,Object.keys(O).length===0&&delete c.modules[v.module])}else c.provider&&(m.push(`root.provider=${c.provider}`),delete c.provider);else if(v.code==="MODULE_CONFIG_DEAD"&&v.module){let A=c.modules??{};if(A[v.module]){let O=A[v.module],f=[O.provider!==void 0?"provider":void 0,O.config!==void 0?"config":void 0,O.resources!==void 0?"resources":void 0].filter(Boolean);m.push(`modules.${v.module}（${f.join("+")} 整节点）`),delete c.modules[v.module]}}else if(v.code==="BINDING_UNRESOLVED"&&v.service){let A=c.services[v.service];if(!A)continue;let O=p[v.service];if([v.instance?be(A.instances?.[v.instance]?.provider):void 0,be(A.provider),O!==void 0?be(c.modules?.[O]?.provider):void 0,be(c.provider)].filter(a=>typeof a=="string").some(a=>l.has(a)))continue;if(v.instance){let a=A.instances;if(!a||!(v.instance in a))continue;delete a[v.instance],m.push(`services.${v.service}.instances.${v.instance}`),Object.keys(a).length===0&&delete A.instances,Object.keys(A).length===0&&delete c.services[v.service]}else delete c.services[v.service],m.push(`services.${v.service}`)}}if(Object.keys(c.services).length===0&&delete c.services,m.length===0)return{removed:m,orphanCredentials:[]};let I=!c.provider&&Object.keys(c.services??{}).length===0&&Object.keys(c.config??{}).length===0&&Object.keys(c.configByInstance??{}).length===0&&!c.credentialRef&&Object.keys(c.credentialRefByInstance??{}).length===0&&(c.instances??[]).length===0&&c.defaultInstanceId==null&&Object.keys(c.modules??{}).length===0;if(!I&&(c.services??={},typeof t.module.parseIntegrationsConfig=="function"))try{t.module.parseIntegrationsConfig(c)}catch{return{removed:[],orphanCredentials:[],skipped:"validation-failed"}}let h=[];return I?Ht(n)&&Yt(n,{force:!0}):$(n,`${JSON.stringify(c,null,2)}
+`),h=te(e).map(v=>v.message),{removed:m,orphanCredentials:h}}function Ce(e,n){let r=e.modules.find(i=>i.id===n);if(r)return r;let t=e.modules.filter(i=>(i.descriptor.name??i.descriptor.id)===n);if(t.length===1)return t[0];throw t.length>1?new x("MODULE_NOT_FOUND",404,`模块展示名「${n}」命中多个模块：${t.map(i=>`${i.descriptor.name}(id=${i.id})`).join(" / ")}——请改用模块 id 寻址`):new x("MODULE_NOT_FOUND",404,`模块 ${n} 非已装模块（id / 展示名均未命中）`)}function Y(e,n,r){let t=new Set;for(let s of Object.values(e.catalog.providers))for(let l of Object.values(s))for(let p of l.services)t.add(p);if(e.vocabulary.includes(r)||Object.hasOwn(e.catalog.services,r)||t.has(r)||n.includes(r))return r;let i=[],o=s=>{i.includes(s)||i.push(s)};for(let s of e.vocabulary)(e.slotMeta[s]?.name??e.catalog.services[s]?.name)===r&&o(s);for(let[s,l]of Object.entries(e.catalog.services))l.name===r&&o(s);if(i.length===1)return i[0];throw i.length>1?new x("SERVICE_NOT_FOUND",404,`服务展示名「${r}」命中多个服务：${i.join(" / ")}——请改用服务 id 寻址`):new x("SERVICE_NOT_FOUND",404,`服务 ${r} 不在服务词汇（已装契约包 ∪ 已配置）`)}import{existsSync as zn,readFileSync as Jn}from"fs";import{join as re,resolve as Qt}from"path";import Xt from"ajv";var ue=["provider","config","configByInstance","credentialRef","credentialRefByInstance","instances","defaultInstanceId"],pe=["provider","config"];var q=re("config","integrations.json");function ie(e,n){if(e===n)return!0;if(Array.isArray(e)&&Array.isArray(n))return e.length!==n.length?!1:e.every((r,t)=>ie(r,n[t]));if(e&&n&&typeof e=="object"&&typeof n=="object"){let r=Object.keys(e),t=Object.keys(n);return r.length!==t.length?!1:r.every(i=>ie(e[i],n[i]))}return!1}function Oe(e,n){if(typeof e!="string"&&e&&typeof e=="object")for(let[r,t]of Object.entries(e)){if((r==="provider"||r==="instanceId")&&typeof t=="string"&&!z.test(t))throw new x("VALIDATION_FAILED",400,`${r} 名含非法字符（需 /^[a-zA-Z0-9][a-zA-Z0-9._-]*$/）`,[`${n}.${r}`]);Oe(t,`${n}.${r}`)}}function Ae(e,n,r){if(!(!e||typeof e!="object"||Array.isArray(e))){for(let t of Object.keys(e))if(!(r&&(t==="*"||t==="**"))&&!z.test(t))throw new x("VALIDATION_FAILED",400,`${n} 键 ${t} 含非法字符（需 /^[a-zA-Z0-9][a-zA-Z0-9._-]*$/）——进凭据 stem 派生，防路径逃逸`,[n])}}function Un(e,n,r){if(r==="root"){let t=e.instances;Array.isArray(t)&&t.forEach((i,o)=>{let s=i&&typeof i=="object"?i.id:void 0;if(typeof s=="string"&&!z.test(s))throw new x("VALIDATION_FAILED",400,`instances[${o}].id 含非法字符（需 /^[a-zA-Z0-9][a-zA-Z0-9._-]*$/）`,[`root.instances[${o}].id`])}),Ae(e.configByInstance,"root.configByInstance",!1),Ae(e.credentialRefByInstance,"root.credentialRefByInstance",!1)}else Ae(e.instances,"services.instances",!0);Ae(n.credentialsByInstance,"credentialsByInstance",!1)}function Ee(e,n){let r=re(e,q),t=i=>JSON.parse(i);if(n)return n.read(r,t)??null;if(!zn(r))return null;try{return t(Jn(r,"utf8"))}catch{return null}}function He(e){let n=(e.instances??[]).map(r=>r.id);return n.length===0?[]:Be(e,n)}function er(e,n,r,t){let{catalog:i}=V(e,t),o=i.providers[n];if(!o)return;let s=new Set;for(let l of Object.values(o))(r===void 0||l.services.includes(r))&&s.add(l.credentialType);return s.size===1?[...s][0]:void 0}function Kn(e,n,r,t,i,o){if(typeof t.type!="string"||t.type.length===0)throw new x("VALIDATION_FAILED",400,"凭据 type 缺失或为空字符串",["credentials.type"]);let s=i??er(e,n,r,o);if(s!==void 0&&s!=="-"&&t.type!==s)throw new x("VALIDATION_FAILED",400,`凭据 type=${t.type} 与绑定 credentialType ${s} 不一致`,["credentials.type"]);if(r===void 0)return;let{serviceSchemas:l}=V(e,o),p=l[`${n}\0${r}`];if(!p?.credentialSchema)return;let c=Qt(p.packageDir,p.credentialSchema);if(zn(c))try{let I=new Xt({allErrors:!0}).compile(JSON.parse(Jn(c,"utf8")));if(!I({type:t.type,...t.values})){let h=(I.errors??[]).map(v=>`credentials.values.${String(v.instancePath||v.params?.missingProperty||"").replace(/^\//,"")}`);throw new x("VALIDATION_FAILED",400,"凭据字段校验失败（ajv 字段级）",h)}}catch(m){if(m instanceof x)throw m}}function Ye(e,n={}){let{onApplied:r,cache:t}=n;function i(c,m,I,h){let v=c!==null,A=m.length>0,O=!h&&v,f=!h&&A;O&&($(re(e,q),`${JSON.stringify(c,null,2)}
+`),t?.invalidate([re(e,q)]));let a=O||f;a&&I.push(...te(e));let g=a&&r!==void 0;g&&r?.();let w=[];return v&&w.push(q),A&&w.push(...m.map(S=>_(S.stem))),{written:a,restartScheduled:g,files:w,credentials:m,issues:I}}let o;async function s(){o=await T(e)}function l(c,m){return c.filter(I=>Array.isArray(I.path)).map(I=>{let h=I.path.map(String).join(".");return m!==""&&h.startsWith(m)&&h.length>m.length?h.slice(m.length):h}).filter(I=>I.length>0)}function p(c,m,I){let h=o;if(!h||!h.strictValidation||!h.module.parseIntegrationsConfig)throw new x("CONTRACTS_NOT_RESOLVED",503,"contracts 严格校验面不可用（需 ≥0.9）——写路径门控失败（工厂边缘断言应先行拦截）");try{h.module.parseIntegrationsConfig(c)}catch(v){throw v instanceof Error&&Array.isArray(v.issues)?new x("VALIDATION_FAILED",400,"节点 schema 校验失败",l(v.issues,I)):new x("VALIDATION_FAILED",400,v instanceof Error?v.message:String(v))}}return{warmup:s,applyApp(c,m={}){Oe(c,"root"),Un(c,m,"root");let I=[],h=Ee(e,t),v=h??{services:{}};h===null&&I.push({severity:"warning",code:"SKELETON_MATERIALIZED",message:"config/integrations.json 缺席——已物化骨架（写时自动初始化；R13 语义翻转提示）"});let A={...v};for(let y of ue)y in c||delete A[y];for(let[y,b]of Object.entries(c))A[y]=b;let O=typeof A.provider=="string"?A.provider:"app",f=Wn(O,m.credentials,m.credentialsByInstance);for(let y of f)Kn(e,O,void 0,y.input,void 0,t);let a=f.find(y=>y.instanceId===void 0);if(m.credentials&&a&&(A.credentialRef=a.ref),m.credentialsByInstance){let y={...A.credentialRefByInstance??{}};for(let b of f)b.instanceId!==void 0&&(y[b.instanceId]=b.ref);A.credentialRefByInstance=y}let g=m.credentials!==void 0||m.credentialsByInstance!==void 0,w=ie(h,A);if(w&&!g)return{written:!1,restartScheduled:!1,files:[],credentials:[],issues:I};p(A,I,"");let S=m.dryRun===!0,u=Ge(e,f,S);return I.push(...He(A)),i(w?null:A,u,I,m.dryRun)},applyModule(c,m,I={}){Oe(m,"root");let{modules:h,catalog:v,ownership:A}=V(e,t),O=h.find(d=>d.id===c);if(!O)throw new x("MODULE_NOT_FOUND",404,`模块 ${c} 非已装模块`);if(!G({modules:h,catalog:v,ownership:A},O).writable)throw new x("VALIDATION_FAILED",400,`模块 ${c} 未声明任何 declare.owns——无模块级配置位（模块级 provider/config 作用于归属服务）`);let a=[],g=Ee(e,t);if(g===null&&Object.keys(m).length===0)return{written:!1,restartScheduled:!1,files:[],credentials:[],issues:a};g===null&&a.push({severity:"warning",code:"SKELETON_MATERIALIZED",message:"config/integrations.json 缺席——已物化骨架（写时自动初始化；R13 语义翻转提示）"});let w=g??{services:{}},S={...w.modules??{}},u={...S[c]??{}};for(let d of Object.keys(m))if(!pe.includes(d))throw new x("VALIDATION_FAILED",400,`模块集成位仅接受 ${pe.join("/")} 键（收到 ${d}）`,[d]);let y={...u};for(let d of pe){let R=m[d];R==null||R===""||typeof R=="object"&&!Array.isArray(R)&&Object.keys(R).length===0?delete y[d]:y[d]=R}Object.keys(y).length===0?delete S[c]:S[c]=y;let b={...w,modules:S};return ie(g,b)?{written:!1,restartScheduled:!1,files:[],credentials:[],issues:a}:(p(b,a,`modules.${c}.`),a.push(...He(b)),i(b,[],a,I.dryRun))},applyService(c,m,I={}){Oe(m,"root"),Un(m,I,"slot");let h=[],v=Ee(e,t);if(!le(V(e,t).vocabulary,Object.keys(v?.services??{}),c))throw new x("SERVICE_NOT_FOUND",404,`服务 ${c} 不在服务词汇（已装契约包 ∪ 已配置）`);v===null&&h.push({severity:"warning",code:"SKELETON_MATERIALIZED",message:"config/integrations.json 缺席——已物化骨架（写时自动初始化；R13 语义翻转提示）"});let A=v??{services:{}},O={...A.services??{}},f={...A,services:O};O[c]={...m};let a=m.provider,g=a!==null&&typeof a=="object"?a:void 0,w=typeof a=="string"?a:typeof g?.provider=="string"?g.provider:"app",S=c.includes(".")?c.slice(0,c.indexOf(".")):c,u=Bn(w,c,S,I.credentials,I.credentialsByInstance);for(let M of u)Kn(e,w,c,M.input,typeof g?.credentialType=="string"?g.credentialType:void 0,t);let y=O[c],b=u.find(M=>M.instanceId===void 0);if(I.credentials&&b&&(y.credentialRef=b.ref),I.credentialsByInstance){let M={...y.instances??{}};for(let N of u){if(N.instanceId===void 0)continue;let j={...M[N.instanceId]??{}};j.credentialRef=N.ref,M[N.instanceId]=j}y.instances=M}let d=I.credentials!==void 0||I.credentialsByInstance!==void 0,R=ie(v,f);if(R&&!d)return{written:!1,restartScheduled:!1,files:[],credentials:[],issues:h};p(f,h,`services.${c}.`);let E=I.dryRun===!0,C=Ge(e,u,E);return h.push(...He(f)),i(R?null:f,C,h,I.dryRun)},deleteService(c){let m=[],I=Ee(e,t);if(!le(V(e,t).vocabulary,Object.keys(I?.services??{}),c))throw new x("SERVICE_NOT_FOUND",404,`服务 ${c} 不在服务词汇（已装契约包 ∪ 已配置）`);let h={...I?.services??{}};if(!(c in h))return{written:!1,restartScheduled:!1,files:[],credentials:[],issues:m};delete h[c];let v={...I??{services:{}},services:h};$(re(e,q),`${JSON.stringify(v,null,2)}
+`),t?.invalidate([re(e,q)]),m.push(...te(e));let A=r!==void 0;return A&&r?.(),{written:!0,restartScheduled:A,files:[q],credentials:[],issues:m}}}}import{existsSync as nr}from"fs";import{join as tr}from"path";function qe(e){let n=tr(e,"config","integrations.json");if(nr(n))return{generated:!1,reason:"in-place",services:[]};let r=[];for(let o of V(e).modules)for(let s of o.descriptor.declare.providers?.slots??[])s.local===!0&&r.push({service:s.service,provider:s.provider,implementation:s.implementation});if(r.length===0)return{generated:!1,reason:"no-local-slots",services:[]};let t={},i=new Set(r.map(o=>o.provider));if(i.size===1){let[o]=i;for(let s of r)t[s.service]={};$(n,`${JSON.stringify({provider:o,services:t},null,2)}
+`)}else{for(let o of r)t[o.service]={provider:o.provider,implementation:o.implementation};$(n,`${JSON.stringify({services:t},null,2)}
+`)}return{generated:!0,reason:"generated",services:r.map(o=>o.service).sort()}}import{existsSync as rr,readFileSync as ir}from"fs";import{join as Zn}from"path";function Gn(e,n){let r=V(e.appDir,e.cache),t=B(e.appDir,e.cache);return{appDir:e.appDir,walk:r,catalog:r.catalog,integrations:t,contracts:n,...e.cache?{cache:e.cache}:{}}}function Hn(e){let n=new Set;for(let r of e.modules){for(let t of r.descriptor.declare.owns??[])n.add(t.service);for(let t of r.descriptor.declare.consumes??[])n.add(t.service);for(let t of r.descriptor.declare.providers?.slots??[])n.add(t.service)}return n}function xe(e,n,r){let t=e.providers[n];return t?Object.values(t).some(i=>i.services.includes(r)):!1}function Yn(e,n){let r=[];for(let[t,i]of Object.entries(e.providers))Object.values(i).some(o=>o.services.includes(n))&&r.push(t);return r.sort()}function U(e,n){let r=e.slotMeta[n],t=e.catalog.services[n],i=r?.name??t?.name??n,o=r?.description??t?.description;return{name:i,...o!==void 0?{description:o}:{}}}var or=Zn("config","knowledge.json");function sr(e,n,r){let i=r[n]?.resources;if(!i||typeof i!="object"||Array.isArray(i))return null;let o=Zn(e.appDir,or),s={};if(rr(o))try{s=(e.cache?.read(o,c=>JSON.parse(c))??JSON.parse(ir(o,"utf8"))).knowledge_bases??{}}catch{s={}}let l={};for(let[p,c]of Object.entries(i)){if(!c||typeof c!="object"||Array.isArray(c))continue;let m=c,I=m.type==="knowledge"?"knowledge":String(m.type??"knowledge"),h=typeof m.datasetId=="string"&&m.datasetId!==""?m.datasetId:void 0,v=typeof m.ref=="string"&&m.ref!==""?m.ref:void 0,A=h??(v!==void 0&&typeof s[v]?.datasetId=="string"?s[v].datasetId:null),O={type:I,...h!==void 0?{datasetId:h}:{},...v!==void 0?{ref:v}:{},resolvedDatasetId:A,...typeof m.topK=="number"?{topK:m.topK}:{},...typeof m.scoreThreshold=="number"?{scoreThreshold:m.scoreThreshold}:{}};l[p]=O}return Object.keys(l).length>0?l:null}function qn(e){return e.replace(/^@tbox\.cn\/app-/,"").replace(/^@[^/]+\//,"")}function ar(e){return qn(e.id).startsWith("provider-")||qn(e.pkg).startsWith("provider-")}function Ze(e,n={}){return{modules:e.walk.modules.filter(t=>!ar(t)).filter(t=>n.includeHidden===!0||t.descriptor.hidden!==!0).map(t=>({id:t.id,name:t.descriptor.name??t.descriptor.id,description:t.descriptor.description??"",...t.descriptor.hidden===!0?{hidden:!0}:{}})).sort((t,i)=>t.id.localeCompare(i.id))}}function Qe(e,n){let r=e.walk.modules.find(c=>c.id===n);if(!r)throw new x("MODULE_NOT_FOUND",404,`模块 ${n} 非已装模块`);let t=(r.descriptor.declare.consumes??[]).map(c=>{let m=U(e.walk,c.service);return{service:c.service,name:m.name,...m.description!==void 0?{description:m.description}:{},required:c.optional===!1}}),i=G(e.walk,r),o=e.integrations?.modules??{},s=o[n],l=s?{...typeof s.provider=="string"?{provider:s.provider}:{},...s.config&&typeof s.config=="object"&&!Array.isArray(s.config)?{config:s.config}:{}}:null,p=L(e.integrations,n);return{name:r.descriptor.name??r.descriptor.id,description:r.descriptor.description??"",...r.descriptor.hidden===!0?{hidden:!0}:{},ownedServices:i.ownedServices,integration:l,resources:sr(e,n,o),binding:{provider:p.provider,layer:p.layer},configEditable:i.writable,services:t}}function Xe(e){let n=Hn(e.walk),r=e.walk.vocabulary.filter(o=>!n.has(o)).map(o=>{let s=U(e.walk,o);return{service:o,name:s.name,...s.description!==void 0?{description:s.description}:{},required:!1}}),t=e.integrations,i=null;if(t){let o={};for(let s of ue)s in t&&(o[s]=t[s]);i=o}return{services:r,integration:i}}function en(e,n){let r=e.integrations?.services??{},t=e.catalog.services[n];if(!le(e.walk.vocabulary,Object.keys(r),n))throw new x("SERVICE_NOT_FOUND",404,`服务 ${n} 不在服务词汇（已装契约包 ∪ 已配置）`);let i=r[n]??null,o=U(e.walk,n);return{service:n,name:o.name,...o.description!==void 0?{description:o.description}:{},required:t?!t.optional:!1,defaults:t?t.defaults.map(s=>({...s})):[],integration:i,suppliedBy:Yn(e.catalog,n)}}import{existsSync as et,readFileSync as nt,realpathSync as Qn}from"fs";import{isAbsolute as cr,join as dr,relative as lr,resolve as Xn,sep as ur}from"path";function nn(e){let n=[];for(let[r,t]of Object.entries(e.catalog.providers)){let i=Object.values(t);i.length!==0&&n.push({provider:r,local:i.every(o=>o.local===!0),owner:i[0].owner,...i[0].name?{name:i[0].name}:{},...i[0].description?{description:i[0].description}:{}})}return{providers:n.sort((r,t)=>r.provider.localeCompare(t.provider))}}function tn(e,n,r){let t=e.catalog.providers[n];if(!t)throw new x("PROVIDER_NOT_FOUND",404,`厂商 ${n} 不 ∈ catalog（内联声明厂商无包级档案——身份与表单经组合端点暴露）`);let i={};for(let s of Object.values(t))for(let l of s.services)(i[l]??={implementations:[]}).implementations.push({implementation:s.implementation,credentialType:s.credentialType});for(let[s,l]of Object.entries(i)){let p=U(e.walk,s);l.name=p.name,p.description!==void 0&&(l.description=p.description)}if(r?.has("integrationSchemas"))for(let[s,l]of Object.entries(i))l.integrationSchemas={configSchema:K(e,n,s)};let o=Object.values(t);return{provider:n,local:o.every(s=>s.local===!0),owner:o[0].owner,...o[0].name?{name:o[0].name}:{},...o[0].description?{description:o[0].description}:{},services:i}}function rn(e,n,r){let t=e.catalog.providers[n],i=e.integrations?.services??{},o=[];if(t)for(let c of Object.values(t))c.services.includes(r)&&o.push({implementation:c.implementation,credentialType:c.credentialType});let s=i[r]?.provider,l=s&&typeof s=="object"&&s.provider===n?s:void 0;if(o.length===0&&!l)throw t?new x("SUPPLY_NOT_FOUND",404,`厂商 ${n} 未供给服务 ${r}（AI 帮我实现流：PUT 显式绑定后实施）`):new x("PROVIDER_NOT_FOUND",404,`厂商 ${n} 完全未知（不 ∈ catalog 且无任何内联声明）`);o.length===0&&l&&o.push({implementation:i[r]?.implementation??`${n}-inline@1`,credentialType:l.credentialType});let p=K(e,n,r,l?s?.configSchema:void 0);return{provider:n,service:r,implementations:o,integrationSchemas:{configSchema:p}}}function K(e,n,r,t){let i=e.walk.serviceSchemas[`${n}\0${r}`];return i?on(e.appDir,i.packageDir,i.configSchema):typeof t=="string"?pr(e.appDir,t):null}function on(e,n,r){if(!r)return null;let t=dr(n,r);if(!et(t))return null;try{return JSON.parse(nt(t,"utf8"))}catch{return null}}function pr(e,n){let r=Xn(e,"config","schemas"),t=Xn(e,n),i=lr(r,t);if(i===""||i.startsWith("..")||cr(i))throw new x("VALIDATION_FAILED",400,"configSchema 引用必须落在 config/schemas/ 内（禁路径逃逸）",["provider.configSchema"]);if(!et(t))return null;let o,s;try{o=Qn(r),s=Qn(t)}catch{return null}if(s!==o&&!s.startsWith(o+ur))throw new x("VALIDATION_FAILED",400,"configSchema 引用经 symlink 逃逸出 config/schemas/（realpath 复核拒绝）",["provider.configSchema"]);try{return JSON.parse(nt(t,"utf8"))}catch{return null}}function Me(e){return{version:e.version,evaluation:e.evaluation,strictValidation:e.strictValidation,notes:[...e.notes]}}function tt(e,n,r){let t=e.integrations,i=t?.services?.[n],o=i?.instances?.[r]??i?.instances?.["*"];if(o&&o.provider!==void 0)return"instance";if(i?.provider!==void 0)return"service";let s=e.walk.ownership[n];return s!==void 0&&L(e.integrations,s).layer==="module"?"module":typeof t?.provider=="string"&&t.provider.length>0?"app":null}function rt(e,n,r,t,i){let o=n.resolveEffectiveService(e.integrations,r,t,i,e.walk.ownership);if(o.status==="ok"&&o.effective){let s=o.effective.provider,l=typeof s=="string"?s:String(s?.provider??"");return{status:"ok",provider:l,implementation:o.effective.implementation,effective:{provider:l,implementation:o.effective.implementation,...o.effective.config!==void 0?{config:{...o.effective.config}}:{},...o.effective.credentialRef!==void 0?{credentialRef:o.effective.credentialRef}:{},layer:tt(e,r,t)??"app"}}}return o.status==="binding-unresolved"?{status:"binding-unresolved",statusMessage:o.message}:{status:o.status}}function it(e){let n=e.contracts.module;if(!n.resolveEffectiveService||!n.normalizeInstances)throw new x("CONTRACTS_NOT_RESOLVED",503,"contracts 求值面缺席（契约包形态异常）——重新安装或升级应用 @tbox.cn/app-contracts 后重试");return n}function sn(e,n){let r=it(n),{integrations:t,catalog:i}=n,o=r.buildSupplyLookup(i),s=t,p=r.normalizeInstances({instances:s?.instances,defaultInstanceId:s?.defaultInstanceId}).defaultInstanceId??"*",c=rt(n,r,e,p,o),m=tt(n,e,p),I=n.integrations?.services?.[e]?.provider,h=c.provider??(typeof I=="string"?I:typeof I=="object"&&I?String(I.provider):void 0),v=new Set(Object.keys(n.catalog.providers)),A=h!==void 0&&v.has(h)?fr(n.catalog,h,e):void 0,O=i.services[e],f=O!==void 0?!O.optional:void 0,a=O?.owners[0];return{status:c.status,...c.statusMessage?{statusMessage:c.statusMessage}:{},...h!==void 0?{provider:h}:{},...h!==void 0&&m!==null?{layer:m}:{},...A!==void 0?{supplied:A}:{},...a!==void 0?{module:a}:{},...f!==void 0?{required:f}:{}}}function fr(e,n,r){return xe(e,n,r)}function ot(e){let n=new Set([...e.walk.vocabulary,...Object.keys(e.catalog.services)]),r=e.integrations?.services??{};for(let t of Object.keys(r))n.add(t);return[...n].sort()}function fe(e,n,r){let t={};for(let i of ot(e))r&&!r.includes(i)||(t[i]=sn(i,e));return{contracts:Me(e.contracts),resolutions:t,issues:n}}function an(e,n,r){let t=it(n),i=t.buildSupplyLookup(n.catalog),o=n.integrations,s=t.normalizeInstances({instances:o?.instances,defaultInstanceId:o?.defaultInstanceId}),l=s.instances.map(O=>O.id),p=n.integrations?.services?.[e],c=p?.instances?Object.keys(p.instances):void 0,I=st(c,l).map(O=>{let f=rt(n,t,e,O,i);return{instanceId:O,status:f.status,...f.statusMessage?{statusMessage:f.statusMessage}:{},...f.effective?{effective:f.effective}:{}}}),h=at(n,e,s.defaultInstanceId??"*"),A={...sn(e,n),instances:I,inheritance:h};return{contracts:Me(n.contracts),resolution:A,issues:r.filter(O=>O.service===e)}}function st(e,n){if(n.length>0){let r=[...n];return e?.includes("*")&&r.push("*"),r}return e!==void 0&&e.length>0?e.includes("*")?["*"]:e:[]}function at(e,n,r){let t=e.integrations,i=t?.services?.[n],o=i?.instances?.[r]??i?.instances?.["*"],s=e.walk.ownership[n],l=s!==void 0?L(t,s):{provider:null,layer:null};return[{layer:"app",...t?.provider?{provider:t.provider}:{}},{layer:"module",...l.layer==="module"&&l.provider?{provider:l.provider}:{}},{layer:"service",...typeof i?.provider=="string"?{provider:i.provider}:{},...i?.implementation?{implementation:i.implementation}:{}},{layer:"instance",...o?.provider?{provider:o.provider}:{},...o?.implementation?{implementation:o.implementation}:{}}]}function ge(e){return e.evaluation&&e.strictValidation&&e.ownershipBindingV6}function ct(e,n,r){let t=e.catalog.services[n];return{status:"evaluation-unavailable",statusMessage:r,...t?.owners[0]!==void 0?{module:t.owners[0]}:{},...t!==void 0?{required:!t.optional}:{}}}function je(e,n,r){let t=J(n),i={};for(let o of ot(e))r&&!r.includes(o)||(i[o]=ct(e,o,t));return{contracts:Me(n),resolutions:i,issues:[]}}function dt(e,n,r){let t=J(r),i={...ct(n,e,t),instances:gr(n,e),inheritance:at(n,e,mr(n))};return{contracts:Me(r),resolution:i,issues:[]}}function gr(e,n){let r=e.integrations?.services?.[n],t=e.integrations,i=Array.isArray(t?.instances)?t.instances.map(s=>s&&typeof s=="object"?s.id:void 0).filter(s=>typeof s=="string"):[],o=r?.instances?Object.keys(r.instances):void 0;return st(o,i).map(s=>({instanceId:s,status:"evaluation-unavailable"}))}function mr(e){let n=e.integrations;return typeof n?.defaultInstanceId=="string"&&n.defaultInstanceId.length>0?n.defaultInstanceId:"*"}function cn(e,n,r){if(n===null)return null;let t={};for(let i of r)t[i]={configSchema:K(e,n,i)};return{provider:n,services:t}}function oe(e){return e===null||typeof e!="object"?JSON.stringify(e??null):Array.isArray(e)?`[${e.map(oe).join(",")}]`:`{${Object.keys(e).sort().map(r=>`${JSON.stringify(r)}:${oe(e[r])}`).join(",")}}`}var vr="\0no-enum";function yr(e){let n=e.enum;return Array.isArray(n)?`[${[...new Set(n.map(oe))].sort().join(",")}]`:vr}function Sr(e){if(!e||typeof e!="object"||Array.isArray(e))return null;let n=e.type;return n===void 0?null:oe(n)}function wr(e){let n=e.map(t=>Sr(t.subschema));if(n.some(t=>t===null)||new Set(n).size>1)return null;if(n[0]==='"object"'){let t=oe(e[0].subschema);return e.every(i=>oe(i.subschema)===t)?e[0].subschema:null}return new Set(e.map(t=>yr(t.subschema))).size===1?e[0].subschema:null}function Te(e,n){let r=[],t=!0,i=new Map;for(let[s,l]of Object.entries(e.services)){let p=l.configSchema;if(p===null){r.push(s);continue}if(!p||typeof p!="object"||Array.isArray(p))continue;let c=p;c.additionalProperties===!1&&(t=!1);let m=c.properties;if(!m||typeof m!="object"||Array.isArray(m))continue;let I=Array.isArray(c.required)?c.required:[];for(let h of Object.keys(m)){let v=i.get(h)??[];v.push({service:s,subschema:m[h],required:I.includes(h)}),i.set(h,v)}}let o=[];for(let[s,l]of i)o.push({key:s,schema:wr(l),sources:l.map(({service:p,required:c})=>({service:p,required:c})),global:l.some(p=>!!p.subschema&&typeof p.subschema=="object"&&p.subschema["x-tbox-global"]===!0)});return{provider:e.provider,schemaless:r,unsupplied:[...n?.unsupplied??[]],additionalPropertiesAllowed:t,fields:o}}function dn(e,n,r,t){let i=typeof t=="string"&&t.length>0?t:void 0;if(e==="app"){if(i!==void 0)return i;let l=n.integrations?.provider;return typeof l=="string"&&l.length>0?l:null}let o=n.walk.modules.find(l=>l.id===r);return!o||!G(n.walk,o).writable?null:i!==void 0?i:L(n.integrations,o.id).provider}var lt={integrationSchemas:null,integrationFieldRegistry:null};function ut(e){return{...e,fields:e.fields.filter(n=>n.global)}}function ln(e,n){let r=dn("app",e,void 0,n);if(r===null)return lt;let t=cn(e,r,We(e.catalog,r));return{integrationSchemas:t,integrationFieldRegistry:ut(Te(t))}}function un(e,n,r){let t=dn("module",e,n,r),i=e.walk.modules.find(p=>p.id===n);if(t===null||!i)return lt;let o=(i.descriptor.declare.owns??[]).map(p=>p.service),s=p=>xe(e.catalog,t,p),l=cn(e,t,o.filter(s));return{integrationSchemas:l,integrationFieldRegistry:ut(Te(l,{unsupplied:[...new Set(o.filter(p=>!s(p)))]}))}}function hr(e){return ln(e).integrationSchemas}function Rr(e,n){return un(e,n).integrationSchemas}function Ir(e,n){let r=e.walk.ownership[n];if(r!==void 0)return L(e.integrations,r).provider;let t=e.integrations?.provider;return typeof t=="string"&&t.length>0?t:null}function Ne(e,n,r){let t=typeof r=="string"&&r.length>0?r:void 0;if(t!==void 0)return{provider:t,configSchema:K(e,t,n)};let i=e.integrations?.services?.[n]?.provider;if(i===void 0||i===""){let o=Ir(e,n);return o===null?null:{provider:o,configSchema:K(e,o,n)}}if(typeof i=="string")return{provider:i,configSchema:K(e,i,n)};if(H(i)){let o=i;return{provider:o.provider,configSchema:K(e,o.provider,n,o.configSchema)}}return null}function pn(e,n,r){let t=Ne(e,n,r);if(t===null)return null;let i={provider:t.provider,services:{[n]:{configSchema:t.configSchema}}};return Te(i)}function me(e,n){if(n===void 0||!n.startsWith("secret://"))return;let r=n.slice(9),t=ae(e,r);if(t)return{type:t.type,ref:n,file:_(r),masked:ve(t.values)}}function fn(e){let n=e.integrations,r={credential:me(e.appDir,typeof n?.credentialRef=="string"?n.credentialRef:void 0)??null,byInstance:{}};for(let{id:i}of n?.instances??[]){let o=n?.credentialRefByInstance?.[i];o!==void 0&&(r.byInstance[i]=me(e.appDir,o)??null)}let t={};for(let[i,o]of Object.entries(n?.services??{})){let s={credential:me(e.appDir,o.credentialRef)??null,byInstance:{}};for(let[l,p]of Object.entries(o.instances??{}))s.byInstance[l]=me(e.appDir,p.credentialRef)??null;t[i]=s}return{app:r,services:t}}function gn(e,n){return{types:(n===void 0?Object.keys(e.catalog.credentialTypes):[...new Set(Object.values(e.catalog.providers[n]??{}).map(t=>t.credentialType))]).sort().map(t=>{let i=e.catalog.credentialTypes[t];return{credentialType:t,owner:i?.owner??"",credentialSchema:i?on(e.appDir,i.packageDir,i.credentialSchema):null}})}}import kr from"path";var br={app:["serviceResolutions","integrationSchemas","integrationFieldRegistry"],module:["serviceResolutions","integrationSchemas","integrationFieldRegistry"],provider:["integrationSchemas"],service:["integrationSchemas","integrationFieldRegistry"]};function Pe(e,n){if(!n||n.length===0)return new Set;let r=br[e],t=[...new Set(n)].filter(i=>!r.includes(i));if(t.length>0)throw new x("VALIDATION_FAILED",400,`include 含未知或不适用于本端点的键：${t.join("、")}（白名单：${r.join("、")}）`,["include"]);return new Set(n)}var pt=["integrationSchemas","integrationFieldRegistry"];function mn(e,n,r){if(!(typeof n!="string"||n.length===0)&&!pt.some(t=>r.has(t)))throw new x("VALIDATION_FAILED",400,`参数 ${e} 需与表单 include 键（${pt.join("、")}）同现——轴参仅重定向表单层双投影`,[e])}function Cr(e,n={}){let r=Ve(),t=Promise.resolve(),i={appDir:e,cache:r};function o(f){if(!f.strictValidation)throw new x("CONTRACTS_NOT_RESOLVED",503,J(f));if(!f.ownershipBindingV6)throw new x("CONTRACTS_NOT_RESOLVED",503,J(f))}function s(f){return Gn(i,f)}function l(f){let a=f.integrations?.services;return a&&typeof a=="object"?Object.keys(a):[]}async function p(){let f=await T(e),a=s(f),g=a.integrations;if(g===null)return[];let w={resolveEffectiveService:c(f.module.resolveEffectiveService,"resolveEffectiveService"),buildSupplyLookup:c(f.module.buildSupplyLookup,"buildSupplyLookup"),normalizeInstances:c(f.module.normalizeInstances,"normalizeInstances"),RESOURCE_TYPE_IDS:f.module.RESOURCE_TYPE_IDS??[]},S=de(e,a.walk,g,process.env);return ne({contracts:w,integrations:g,supplies:w.buildSupplyLookup(a.catalog),...S})}function c(f,a){if(typeof f!="function")throw new x("CONTRACTS_NOT_RESOLVED",503,`contracts 求值面 ${a} 缺席（形态异常）`);return f}function m(f){let a=t.then(f,f);return t=a.catch(()=>{}),a}let I={async loadModules(f){let a=await T(e);return Ze(s(a),f)},async loadModule(f,a){let g=Pe("module",a?.include);mn("moduleProvider",a?.moduleProvider,g);let w=await T(e),S=s(w),u=Ce(S.walk,f),y=Qe(S,u.id);if(g.has("serviceResolutions")&&(y.serviceResolutions=ge(w)?await p().then(b=>fe(S,b,y.services.map(d=>d.service))):je(S,w,y.services.map(b=>b.service))),g.has("integrationSchemas")||g.has("integrationFieldRegistry")){let b=un(S,u.id,a?.moduleProvider);g.has("integrationSchemas")&&(y.integrationSchemas=b.integrationSchemas),g.has("integrationFieldRegistry")&&(y.integrationFieldRegistry=b.integrationFieldRegistry)}return y},async loadApp(f){let a=Pe("app",f?.include);mn("appProvider",f?.appProvider,a);let g=await T(e),w=s(g),S=Xe(w);if(a.has("serviceResolutions")&&(S.serviceResolutions=ge(g)?await p().then(u=>fe(w,u)):je(w,g)),a.has("integrationSchemas")||a.has("integrationFieldRegistry")){let u=ln(w,f?.appProvider);a.has("integrationSchemas")&&(S.integrationSchemas=u.integrationSchemas),a.has("integrationFieldRegistry")&&(S.integrationFieldRegistry=u.integrationFieldRegistry)}return S},async loadService(f,a){let g=Pe("service",a?.include);mn("serviceProvider",a?.serviceProvider,g);let w=await T(e),S=s(w),u=Y(S.walk,l(S),f),y=en(S,u);return g.has("integrationSchemas")&&(y.integrationSchemas=Ne(S,u,a?.serviceProvider)),g.has("integrationFieldRegistry")&&(y.integrationFieldRegistry=pn(S,u,a?.serviceProvider)),y},async loadServiceResolutions(f){let a=await T(e),g=s(a);if(!ge(a))return je(g,a,f);let w=await p();return fe(g,w,f)},async loadServiceResolution(f){let a=await T(e),g=s(a),w=Y(g.walk,l(g),f);if(!ge(a))return dt(w,g,a);let S=await p();return an(w,g,S)},async loadProviders(){let f=await T(e);return nn(s(f))},async loadProvider(f,a){let g=Pe("provider",a?.include),w=await T(e);return tn(s(w),f,g)},async loadProviderService(f,a){let g=await T(e),w=s(g),S=Y(w.walk,l(w),a);return rn(w,f,S)},async loadCredentials(){let f=await T(e);return fn(s(f))},async loadCredentialTypes(f){let a=await T(e);return gn(s(a),f)}},h=Ye(e,{onApplied:n.onApplied,cache:r}),v={async writeAppIntegration(f,a){await h.warmup();let g=await T(e);return o(g),m(()=>h.applyApp(f,a))},async writeModuleIntegration(f,a,g){await h.warmup();let w=await T(e);return o(w),m(()=>{let S=Ce(s(w).walk,f);return h.applyModule(S.id,a,g)})},async writeServiceIntegration(f,a,g){await h.warmup();let w=await T(e);return o(w),m(()=>{let S=s(w),u=Y(S.walk,l(S),f);return h.applyService(u,a,g)})},async deleteServiceIntegration(f){await h.warmup();let a=await T(e);return o(a),m(()=>{let g=s(a),w=Y(g.walk,l(g),f);return h.deleteService(w)})}},A={invalidate(){r.invalidate(),De(e)},async resolveContracts(){return T(e)},walkManifests(){return O(e)},parseModuleDescriptor(f){return se(f)},loadProviderCatalogRaw(){return Ke(e)},async readIntegrationsConfig(){return B(e,r)},async writeIntegrationsConfig(f){await h.warmup();let a=await T(e);return o(a),m(()=>Ar(e,f,r))},async ensureMockBindings(){await h.warmup();let f=await T(e);return o(f),m(()=>qe(e))},async evaluateIntegrationServices(f){await h.warmup();let a=await T(e);o(a);let g={resolveEffectiveService:c(a.module.resolveEffectiveService,"resolveEffectiveService"),buildSupplyLookup:c(a.module.buildSupplyLookup,"buildSupplyLookup"),normalizeInstances:c(a.module.normalizeInstances,"normalizeInstances"),RESOURCE_TYPE_IDS:a.module.RESOURCE_TYPE_IDS??[]};return ne({...f,contracts:g})}};function O(f){return V(f,r)}return{...I,...v,...A}}function Ar(e,n,r){let t=kr.join(e,"config","integrations.json");$(t,`${JSON.stringify(n,null,2)}
+`),r.invalidate([t])}export{ue as APP_INTEGRATION_NODE_KEYS,x as AppToolkitError,pe as MODULE_INTEGRATION_NODE_KEYS,z as SAFE_NAME_PATTERN,Nt as assertValidModuleId,Te as buildIntegrationFieldRegistry,_t as buildOwnershipMap,de as buildPredicateAssembly,Be as checkInstanceKeys,Ft as collectDeclaredModules,J as contractsNotResolvedMessage,Cr as createAppToolkit,Ve as createFileCache,Ye as createWriteCore,Gt as credentialArtifactExists,ie as deepEqual,X as deriveStem,Pn as discoverContractPackages,me as echoForRef,En as ensureDir,qe as ensureMockBindings,ze as evaluateAppIntegrationIssues,ne as evaluateIntegrationServices,Fe as expandEnvVars,Vn as extractModuleIdFromSource,dn as formProviderOf,De as invalidateContractsResolver,H as isControlledInlineProvider,jn as isValidModuleId,hr as loadAppIntegrationSchemas,Xe as loadAppView,gn as loadCredentialTypesView,fn as loadCredentialsView,Qe as loadModuleDetailView,Rr as loadModuleIntegrationSchemas,Ze as loadModulesView,Re as loadProviderCatalog,Ke as loadProviderCatalogRaw,tn as loadProviderDetailView,rn as loadProviderServiceDetailView,nn as loadProvidersView,en as loadServiceDetailView,pn as loadServiceFieldRegistry,Ne as loadServiceIntegrationSchemas,an as loadServiceResolutionDetail,fe as loadServiceResolutionsView,Se as manifestPath,ve as maskCredentialValues,Sn as moduleDependencySchema,kn as moduleDescriptorSchema,G as moduleOwnershipWritable,vn as pageContribSchema,se as parseModuleDescriptor,We as providerFootprint,wn as providerSlotContribSchema,Zt as pruneIntegrationBindings,Mn as readAppManifest,$e as readAppManifestFull,ae as readCredentialFile,B as readIntegrationsConfig,Ln as readIntegrationsStrict,te as reconcileOrphanCredentials,_n as refToEnvKey,Mt as removeNpmModule,T as resolveContractsForApp,T as resolveContractsForAppExport,cn as resolveLayerIntegrationSchemas,L as resolveModuleBinding,Ce as resolveModuleKey,Y as resolveServiceKey,sn as resolveServiceSummary,In as resourceNeedContribSchema,hn as serviceConsumeContribSchema,Rn as serviceOwnContribSchema,_ as stemToFilePath,ht as stemToRef,yn as tabContribSchema,Tt as updateNpmModule,jt as upsertMiniappContainer,xt as upsertNpmModule,V as walkManifests,Ot as writeAppManifest,$ as writeAtomic,_e as writeCredentialFile};

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tbox.cn/app-toolkit",
-  "version": "0.5.0",
+  "version": "0.7.0",
   "type": "module",
   "description": "tbox 应用工具面（运行面/工具面对仗：app-sdk 给运行的应用用，app-toolkit 给操作应用的工具用）——模块解析、集成配置求值/校验/写入内核，contracts 经应用侧动态解析（沙箱与目标应用版本解耦）。",
   "exports": {

package/src/assembly/walk-manifests.ts

@@ -238,15 +238,28 @@ function readDevManifestRedirects(appDir: string): DevManifestRedirect[] {
   }
 }
 
-/** 契约包发现链（探测三跳——词汇源真实布局全覆盖，B0）：候选集（appDir、apps/*、packages/*）×
- *  ① node_modules/@tbox.cn/<pkg>/service-slots.json（包根——夹具/旧布局）
- *  ② 同包 src/service-slots.json（发布包 src 随 files 附带 / 模板 shim 链接到仓库源 src/）
- *  ③ 候选自身 {service-slots.json, src/service-slots.json}（local/codegen 全量副本——mall 生成应用
- *     主形态，stage rewriteExportsToSrc 展开后永驻 packages/*，不依赖 install）
+/** 词汇源条目（via 标记供 doctor 幻影槽判定——config 快照 vs 真源；walkManifests 消费忽略此字段） */
+export interface DiscoveredSlotSource {
+  dir: string;
+  slots: string[];
+  meta: Record<string, SlotMeta>;
+  /** ⓪ config-override（应用级快照/override）｜①② package（node_modules 真源）｜③ local（候选自身副本） */
+  via: 'config-override' | 'package' | 'local';
+}
+
+/** 契约包发现链（探测四跳——词汇源真实布局全覆盖，B0；跳⓪ v7 新增）：
+ *  ⓪ <appDir>/config/service-slots.json（应用级 override 层——meta 首声明胜出 = 用户改名
+ *     per-service 覆盖；slots 并集 = 无依赖词汇引导快照。CLI seed-once 生成：仅 slots +
+ *     $comment 指纹，meta 恒空——真源 meta 恒可穿透，用户手写才生效）；
+ *  ① <候选>/node_modules/@tbox.cn/<pkg>/service-slots.json（包根）
+ *  ② 同包 src/service-slots.json（发布包 src 附带 / 模板 shim 链接）
+ *  ③ 候选自身 {service-slots.json, src/service-slots.json}（local/codegen 全量副本——
+ *     mall 生成应用主形态，stage rewriteExportsToSrc 展开后永驻 packages/*，不依赖 install）
+ *  词汇覆盖 = Set 并集（跳⓪ 不遮蔽真源新增）；meta = 发现序首声明胜出（跳⓪ 最前 = 覆盖权）。
  *  同包双在场（异常态）root 优先。slots 与 meta 单次解析同产（目录枚举零缓存，F8；
  *  FX-3：文件**内容**经 file-cache）。 */
-function discoverContractPackages(appDir: string, cache?: FileCache): Array<{ dir: string; slots: string[]; meta: Record<string, SlotMeta> }> {
-  const found: Array<{ dir: string; slots: string[]; meta: Record<string, SlotMeta> }> = [];
+export function discoverContractPackages(appDir: string, cache?: FileCache): DiscoveredSlotSource[] {
+  const found: DiscoveredSlotSource[] = [];
   const candidates: Array<string> = [appDir];
   for (const sub of ['apps', 'packages']) {
     const parent = join(appDir, sub);
@@ -260,10 +273,13 @@ function discoverContractPackages(appDir: string, cache?: FileCache): Array<{ di
     }
   }
   const seenRoots = new Set<string>();
-  const addDiscovered = (dir: string, file: string): void => {
+  const addDiscovered = (dir: string, file: string, via: DiscoveredSlotSource['via']): void => {
     const parsed = cache ? cache.read(file, parseSlotsFile) : parseSlotsFile(readFileSync(file, 'utf8'));
-    if (parsed !== null && parsed !== undefined) found.push({ dir, slots: parsed.slots, meta: parsed.meta });
+    if (parsed !== null && parsed !== undefined) found.push({ dir, slots: parsed.slots, meta: parsed.meta, via });
   };
+  // 跳⓪：应用级 override/引导快照（发现序最前——meta 覆盖权，词汇并集不遮蔽）
+  const overrideFile = join(appDir, 'config', 'service-slots.json');
+  if (existsSync(overrideFile)) addDiscovered(appDir, overrideFile, 'config-override');
   for (const dir of candidates) {
     // 跳 1/2：node_modules 位（包根 → src——显式安装真源优先）
     const scopeDir = join(dir, 'node_modules', '@tbox.cn');
@@ -280,14 +296,14 @@ function discoverContractPackages(appDir: string, cache?: FileCache): Array<{ di
       seenRoots.add(pkgDir);
       const rootFile = join(pkgDir, 'service-slots.json');
       const srcFile = join(pkgDir, 'src', 'service-slots.json');
-      if (existsSync(rootFile)) addDiscovered(pkgDir, rootFile);
-      else if (existsSync(srcFile)) addDiscovered(pkgDir, srcFile);
+      if (existsSync(rootFile)) addDiscovered(pkgDir, rootFile, 'package');
+      else if (existsSync(srcFile)) addDiscovered(pkgDir, srcFile, 'package');
     }
   }
   // 跳 3：候选自身（local/codegen 全量副本形态——后置于 nm 位：真源 > 副本，meta 首声明序随此）
   for (const dir of candidates) {
     for (const file of [join(dir, 'service-slots.json'), join(dir, 'src', 'service-slots.json')]) {
-      if (existsSync(file)) addDiscovered(dir, file);
+      if (existsSync(file)) addDiscovered(dir, file, 'local');
     }
   }
   return found;

package/src/core/errors.ts

@@ -36,8 +36,15 @@ export class AppToolkitError extends Error {
 /** CONTRACTS_NOT_RESOLVED message（N1 构建指引——api.md 错误信封示例）。
  *  P-4：notes 优先——resolver 在全部不可解析路径均已 push 携带操作指引的 notes（导入失败/
  *  产物缺失/未安装/<0.9 升级）；现行 version===null 分支会把 notes 内细分指引吞成通用文案。
- *  三分支保留为兜底（防御性——正常路径 notes 恒非空）。 */
-export function contractsNotResolvedMessage(contracts: { version: string | null; strictValidation: boolean; notes: readonly string[] }): string {
+ *  分支保留为兜底（防御性——正常路径 notes 恒非空）。
+ *  v7：+= ownershipBindingV6 分支（标记门第四分支单源化——写门控 assertContractsUsable 与
+ *  读求值轴降级 statusMessage 共用同一文案；可选参向后兼容）。 */
+export function contractsNotResolvedMessage(contracts: {
+  version: string | null;
+  strictValidation: boolean;
+  notes: readonly string[];
+  ownershipBindingV6?: boolean;
+}): string {
   if (contracts.notes.length > 0) {
     return contracts.notes[0];
   }
@@ -47,6 +54,9 @@ export function contractsNotResolvedMessage(contracts: { version: string | null;
   if (!contracts.strictValidation) {
     return `contracts ${contracts.version} 无严格校验面（需 ≥0.9.0）——升级应用 @tbox.cn/app-contracts 依赖后可用`;
   }
+  if (contracts.ownershipBindingV6 === false) {
+    return `contracts ${contracts.version ?? '(版本未知)'} 不支持 v6 modules 绑定形状（OWNERSHIP_BINDING_V6 标记缺席）——升级应用 @tbox.cn/app-contracts 依赖后可用`;
+  }
   // 版本达标但解析态异常（notes 携带细分——导入拒绝/产物缺失）
   return 'contracts workspace 源码态未构建——执行 pnpm --filter @tbox.cn/app-contracts build 后重试';
 }

package/src/core/module-schema.ts

@@ -104,6 +104,9 @@ export const moduleDescriptorSchema = z
     id: z.string(),
     name: z.string().optional(),
     description: z.string().optional(),
+    // 隐藏模块（展示元数据轴，与 name/description 同层）：仅影响 toolkit GET /modules 清单默认过滤
+    // （?includeHidden=true 可见）；detail 端点/装配/doctor/predicate 零影响
+    hidden: z.boolean().optional(),
     version: z.string().default('0.0.0'),
     kind: z.enum(['platform', 'business', 'third-party']).default('business'),
     risk: z

package/src/dto.ts

@@ -12,13 +12,17 @@
 
 // ===== 词汇基线 =====
 
-/** contracts 求值五态原样（EffectiveServiceResolution.status） */
+/** contracts 求值五态原样（EffectiveServiceResolution.status）+ 视图轴降级态
+ *  （evaluation-unavailable——toolkit 视图独有，非 contracts 求值产物：contracts 不可用
+ *  （未安装/无严格面/v6 标记缺席）时读求值轴不再 503，改投静态骨架 + 本态标记；
+ *  消费方按非 ok 态渲染，statusMessage 携带 N1 分支指引） */
 export type ServiceStatus =
   | 'ok'
   | 'service-not-configured'
   | 'instance-not-found'
   | 'instance-disabled'
-  | 'binding-unresolved';
+  | 'binding-unresolved'
+  | 'evaluation-unavailable';
 
 /** 四配置层（instance 为 map 字段层） */
 export type BindingLayer = 'app' | 'module' | 'service' | 'instance';
@@ -38,6 +42,9 @@ export interface ModuleDeclaration {
   /** 展示名（v7 词汇统一：manifest name ?? id——恒有值） */
   name: string;
   description: string;
+  /** 隐藏模块（additive——manifest hidden === true 时携带；默认清单已过滤，本字段仅供
+   *  ?includeHidden=true 可见时徽标呈现） */
+  hidden?: boolean;
 }
 
 /** 服务需求声明（模块 demand 单元 / 平台服务条目——v4.4 D29 双端点同型；defaults 唯一落位 ServiceDetail） */
@@ -58,11 +65,17 @@ export interface ModuleDetailView {
   name: string;
   /** B1 additive：模块 meta 描述（manifest description；兜底 ''） */
   description: string;
+  /** 隐藏模块（additive——manifest hidden === true 时携带；详情恒 200 不受清单过滤影响，
+   *  本字段仅供面板徽标呈现） */
+  hidden?: boolean;
   /** v6 所有权模型：模块归属服务（declare.owns 展平，排序；零归属 = []）——
    *  v5 domainKeys 退役（破坏性更名；面板 presence-detection 双读义务见 api.md §3） */
   ownedServices: string[];
-  /** modules[install id] 集成位原值（provider/config；resources 不投影）；未配置 = null */
+  /** modules[install id] 集成位原值（provider/config；resources 不投影——见 resources 字段）；未配置 = null */
   integration: ModuleIntegrationNode | null;
+  /** 模块资源只读镜像（N2 读半边——写侧 resources 恒保全；含 ref 台账展开态 resolvedDatasetId）；
+   *  无模块键/无资源节 = null */
+  resources?: ModuleResourcesEcho | null;
   /** v6 单数化（v5 providerBindings[] 退役）：模块级厂商绑定解析（resolveModuleBinding 单源；
    *  单值作用于全部 ownedServices） */
   binding: ModuleBinding | null;
@@ -147,14 +160,17 @@ export interface ServiceDetail extends ServiceDemand {
    *  绑定无可计算 schema / 含 schema；malformed 节点 → null——不放行域级联） */
   integrationSchemas?: ServiceIntegrationSchemas | null;
   /** G 批：include=integrationFieldRegistry 服务轴注册表（loadServiceFieldRegistry——
-   *  四分支链推导复用 D38；fields = 该 schema 全部字段带 global 旗标；null 语义镜像 D38） */
+   *  四分支链推导复用 D38；fields = 该 schema 全部字段带 global 旗标；null 语义镜像 D38。
+   *  v5.1 D39：serviceProvider 轴参 = 假想重定向——仅表单投影按 X 计算，带非空轴参时
+   *  registry 恒非 null（豁免链③不镜像实际态 null）；同构 ≡ PUT 改写 provider 后实读） */
   integrationFieldRegistry?: IntegrationFieldRegistryView | null;
 }
 
 /** 服务级生效绑定 schema（v4.7 D38 静态轴富化——零 contracts，永不 503；实例层无条件排除：
  *  node 级口径 ≠ resolution 默认实例口径，api.md §4.4 注） */
 export interface ServiceIntegrationSchemas {
-  /** 生效厂商：显式（含内联声明名）?? modules[ownerOf].provider ?? root.provider */
+  /** 生效厂商：显式（含内联声明名）?? modules[ownerOf].provider ?? root.provider；
+   *  v5.1 D39：serviceProvider 轴参在场时 = 假想短路值（非链解析产物） */
   provider: string;
   /** catalog 复合键（多 impl 声明序首个）> 内联 ref；miss（未知厂商/未供给/内联缺 ref）→ null（富化非门控） */
   configSchema: object | null;
@@ -244,6 +260,26 @@ export interface ModuleIntegrationNode {
  *  （键集外 400；resources 恒随既有节点保全）+ views/modules 投影（GET ≡ PUT，三同构）） */
 export const MODULE_INTEGRATION_NODE_KEYS = ['provider', 'config'] as const;
 
+/** 模块资源回显（只读投影——N2 读半边：写侧仍仅 provider/config，resources 恒保全）。
+ *  原值文件镜像（L1）+ ref 台账展开态：`ref` 在场且同目录 knowledge.json 命中时
+ *  `resolvedDatasetId` = 台账 datasetId（镜像 SDK resolveKnowledge 展开语义），未命中/台账缺失 = null。
+ *  路径锚定边界：视图恒读 `<appDir>/config/`（与 toolkit readIntegrationsConfig 同源——
+ *  `TBOX_INTEGRATIONS_FILE` 为 SDK 运行时逃生舱，视图不跟随，既有分叉）。 */
+export interface ModuleResourceEcho {
+  type: 'knowledge';
+  /** 文件原值直填 datasetId（与 ref 互斥使用——并存时 SDK 侧 datasetId 优先） */
+  datasetId?: string;
+  /** 文件原值 ref（台账引用——knowledge.json knowledge_bases 键） */
+  ref?: string;
+  /** 展开态：datasetId 直填时 = 该值；ref 命中台账 = 台账 datasetId；ref 未命中/台账缺失 = null */
+  resolvedDatasetId: string | null;
+  topK?: number;
+  scoreThreshold?: number;
+}
+
+/** modules[install id].resources 只读镜像（键 = 资源 id；无模块键/无资源 = null） */
+export type ModuleResourcesEcho = Record<string, ModuleResourceEcho>;
+
 /** services[s] 整节点 */
 export interface ServiceIntegrationNode {
   /** 对象 = 自定义 API（仅槽级，P2） */