openxiangda-cli 2.0.0-alpha.125 → 2.0.0-alpha.127

package/README.md

@@ -1,6 +1,11 @@
 # openxiangda-cli
 
-OpenXiangda 2.0 installs one developer CLI with eight application lifecycle commands—`create`, `dev`, `check`, `deploy`, `status`, `logs`, `rollback`, and `login`—plus `skill install` for installing the exact AI guidance bundled with the same release.
+OpenXiangda 2.0 installs one developer CLI for application creation, connected development, checks, deployment status and logs, explicit retry/cancel, environment start/stop, rollback, login, AppSpec and Skill installation.
+
+Deployment recovery is server-authoritative. `status` exposes the root and
+latest failures, candidate identity/state, recovery decision and append-only
+attempt ledger; `logs` preserves those fields. The CLI follows only the
+published recovery command and never advertises cancel after activation.
 
 The CLI disables user, development and JIT plugin loading. A clean build removes orphaned command output before TypeScript compilation. `--json` emits one stable result envelope and never mixes progress logs into machine output.
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "openxiangda-cli",
-  "version": "2.0.0-alpha.125",
+  "version": "2.0.0-alpha.127",
   "description": "Thin application-level CLI for OpenXiangda 2.0.",
   "type": "module",
   "main": "./dist/index.js",
@@ -21,10 +21,10 @@
   ],
   "dependencies": {
     "@oclif/core": "4.13.3",
-    "openxiangda-contracts": "2.0.0-alpha.61",
-    "openxiangda-devkit-core": "2.0.0-alpha.79",
-    "openxiangda-mcp": "2.0.0-alpha.79",
-    "openxiangda-skill-kit": "2.0.0-alpha.100"
+    "openxiangda-contracts": "2.0.0-alpha.63",
+    "openxiangda-devkit-core": "2.0.0-alpha.81",
+    "openxiangda-mcp": "2.0.0-alpha.81",
+    "openxiangda-skill-kit": "2.0.0-alpha.102"
   },
   "devDependencies": {
     "tsx": "4.23.12",

package/template/AGENTS.md

@@ -14,6 +14,7 @@
 - Use the current logged-in user and the union of that user's application roles. An optional declared Perspective projects only read visibility (pages, rows and fields); create/update/delete, workflows and custom actions continue to authorize against the complete union. Standard Data API calls inherit `X-OpenXiangda-Perspective` automatically. Use `@CurrentPerspective()` only when custom Nest code reads outside the standard Data API, and apply an equivalent read projection explicitly. Business code must not persist a platform Token or authorization result and must not implement a second identity path.
 - Fields inherit the resource read/create/update capabilities. Use field `access` only to tighten them; arrays are all-of and `false` is explicit deny. There is no `write` fallback.
 - Field `type` is semantic, never a hand-authored database type. The supported catalog is exactly `text.short`, `text.long`, `text.rich`, `number.integer`, `number.decimal`, `boolean`, `date`, `time`, `datetime`, `date-range`, `datetime-range`, `option.single`, `option.multiple`, `cascade.single`, `cascade.multiple`, `user.single`, `user.multiple`, `department.single`, `department.multiple`, `resource-ref.single`, `resource-ref.multiple`, `file`, `image`, `signature`, `address`, `location`, `json`, `serial-number`, `uuid` and `subtable`. The compiler alone derives PostgreSQL columns, constraints and indexes.
+- Every `date-range` and `datetime-range` field explicitly declares `rangeBoundary: 'closed' | 'half-open'`. Values remain `{ start, end }`; callers never send or override the boundary. Closed ranges allow `start <= end` and use PostgreSQL `[]`; half-open ranges require `start < end` and use `[)`.
 - Declare every custom operation capability in `authz.capabilities` with `kind: 'backend'`, then reference that same code from the operation and its allowed roles. Generated resource CRUD capabilities do not go in this catalog.
 - Build App Operation request/response schemas with `resourceRecordSchema`, `schemaRef`, `composeJsonSchema` and `composeAppOperationSchemas` from `openxiangda/config`. They project the same Resource declaration and canonical field value protocols; never import a physical toolchain package or repeat user, department, resource-reference or managed-file schemas by hand.
 - Visitor duplicate protection uses `createVisitorReservation({ duplicateMatch: { fieldCode: submittedValue }, ... })`. `duplicateMatch` is a non-empty value map, never a field-name array, and no mutable pre-read is allowed.
@@ -21,6 +22,6 @@
 - `option.*`, `user.*`, `department.*` and `resource-ref.*` values never collapse to scalar IDs. Single values store one labeled object and multiple values store object arrays. `resource-ref.*` JSON is not a foreign key, trusted target snapshot or automatically refreshed copy; current target state is read by `resourceCode` plus `value`. A resource source `labelField` must be `text.short` or `text.long`; `serial-number` is allowed in source search, description and snapshot fields, but not as the label. `location` accepts only exact WGS84 coordinates captured by DingTalk or browser geolocation; it has no manual input or `manual` source. Roles that consume directory-backed fields explicitly include `app:<app-code>:directory:read`.
 - Derive role grants with `resourceCapabilityCodes(appCode, resourceCode)`. Declare current-user rows only with `currentUserDataPolicy(...)`; do not invent operators, values or alternate current-user spellings.
 - Do not add compatibility aliases, migration branches or silent fallbacks for an earlier 2.0 alpha contract. Replace an incorrect contract and regenerate the application.
-- Standard Workflow and Notification Hub are optional 2.0 modules. Enable them only through the canonical `openxiangda.config.ts` declarations and generated clients; declare each Workflow launch as `standalone`, `custom-page`, `hidden-handoff` or `work-center-only`, put only self-contained standalone launch pages in navigation, and bind durable save handlers with `defineWorkflowLaunchContributions` without repeating generated titles. Desktop and mobile standard launch pages load the same canonical Workflow launch Surface. To replace Workflow detail, declare both desktop and mobile `detailRouteCode` values whose routes contain exactly `:instanceId`; Work Center, the application todo center and notification channels consume the platform-resolved paths, while every Surface and command remains server-authorized. Add the standard current-user todo page only with `adminApplicationTodoCenterPage()`; never query Notification Hub management APIs from a user page. Never depend on temporary router location state or copy 1.x workflow/message code, tables, APIs, templates or callbacks into this workspace. Keep ordinary CRUD and application-specific state machines independent of them.
+- Standard Workflow and Notification Hub are optional 2.0 modules. Enable them only through canonical `openxiangda.config.ts` declarations and generated clients. `standalone`/`hidden-handoff` use the compiler-owned process operation and Durable Business Process Command; never add a browser save callback or call Workflow prepare/start directly. Custom pages launch only through a verified Named Action using `OpenXiangdaBusinessProcessService`. PC and mobile render the same `ProcessCommandSurface` independently and recover only by `commandId`. To replace Workflow detail, declare both desktop and mobile `detailRouteCode` values whose routes contain exactly `:instanceId`. Add the current-user todo page only with `adminApplicationTodoCenterPage()`; never query Notification Hub management APIs from a user page.
 - Run `pnpm openxiangda check --json` after contract changes and read `data.sealedArtifact`; check never seals, and an older `.openxiangda/build/app-package.json` is not the current check result. Use `pnpm openxiangda accept --plan <file>` only for optional real preproduction identity acceptance; it never blocks delivery. Deploy with `pnpm openxiangda deploy`, inspect with `pnpm openxiangda status` and `pnpm openxiangda logs`, and use the platform rollback command rather than mutating K3s directly.
 - AI-native clients start the workspace protocol through the same pinned binary: `pnpm exec openxiangda --mcp-stdio --cwd <workspace>`. Read `openxiangda://workspace/contracts` or call `contract_describe`; for first-time menu authoring, copy `data.adminNavigationAuthoring.suggestion.expression` once into `frontend.admin.navigation` with its listed `openxiangda/config` imports, then edit that application-owned declaration. Never treat the proposal as runtime discovery. When AppSpec is enabled, also read `openxiangda://workspace/appspec` or call `appspec_context`. Require `aiCatalog` and `aiCatalogDigest` to match the normal compiler output. This is a stdio transport mode, not another application-owned server. Never write an application MCP server, Catalog file, preview store or second authorization path.

package/template/README.md

@@ -26,6 +26,13 @@ BrowserRouter、RuntimeBoundary、Refine、generated routes 和后台 Shell
 在显式后台导航组中加入 `adminApplicationTodoCenterPage()`；平台生成
 `/admin/todos` 与 `/m/todos`，只读取当前用户的消息/待办投影并统一解析目标页面。
 
+自定义后台页使用 `OpenXiangdaAdminPage` 作为页面根；Ant Design 组件自动继承平台
+`ConfigProvider`，图表等 TypeScript 渲染值读取 `useOpenXiangdaTheme()`，自定义 CSS
+只使用公开的 `--oxa-color-*`、`--oxa-shadow-surface` 和
+`--oxa-radius-surface` 语义变量。不要为后台页新建主题 Provider，也不要把白色、黑色、
+浅灰色写死为页面、卡片、边框或文字颜色。品牌色只能用于品牌和有明确语义的数据分类，
+不能替代结构色。
+
 登录声明位于 `frontend.authentication`，只允许现有平台用户并拒绝注册。桌面 `/login`
 与移动 `/m/login` 是独立生成的 `authenticationSurfaces`，不计入受保护的
 `appRoutes`。用 `defineApplicationContributions({ routes: appRoutes,

package/template/apps/server/package.json

@@ -15,7 +15,7 @@
     "@nestjs/common": "11.1.29",
     "@nestjs/core": "11.1.29",
     "@nestjs/platform-fastify": "11.1.29",
-    "openxiangda": "2.0.0-alpha.39",
+    "openxiangda": "2.0.0-alpha.42",
     "reflect-metadata": "0.2.2",
     "rxjs": "7.8.2"
   },

package/template/apps/server/src/app.module.ts

@@ -11,27 +11,7 @@ import {
 
 @Module({
   imports: [
-    OpenXiangdaModule.forRoot({
-      appCode: process.env.OPENXIANGDA_APP_CODE || 'openxiangda-application',
-      platformBaseUrl:
-        process.env.OPENXIANGDA_PLATFORM_BASE_URL ||
-        'http://127.0.0.1:7001/service',
-      environmentKey:
-        process.env.OPENXIANGDA_ENVIRONMENT_KEY || 'preproduction',
-      environmentId:
-        process.env.OPENXIANGDA_ENVIRONMENT_ID || 'connected-development',
-      appVersionId:
-        process.env.OPENXIANGDA_APP_VERSION_ID || 'connected-development',
-      deploymentRunId:
-        process.env.OPENXIANGDA_DEPLOYMENT_RUN_ID || 'connected-development',
-      environmentHeadRevision: Number(
-        process.env.OPENXIANGDA_ENVIRONMENT_HEAD_REVISION || 1
-      ),
-      backendRevisionId:
-        process.env.OPENXIANGDA_BACKEND_REVISION_ID || 'connected-development',
-      version: process.env.OPENXIANGDA_APP_VERSION || '0.1.0-dev',
-      connectedDevelopment:
-        process.env.OPENXIANGDA_CONNECTED_DEV === 'true',
+    OpenXiangdaModule.forApplication({
       eventHandlerManifest,
       eventSchemas,
       eventSigningSecrets: eventSigningSecretsFromEnvironment(

package/template/apps/server/test/smoke.test.ts

@@ -5,7 +5,8 @@ import test from 'node:test';
 test('the clean server template only owns platform bootstrap', () => {
   const source = readFileSync(new URL('../src/app.module.ts', import.meta.url), 'utf8');
   const main = readFileSync(new URL('../src/main.ts', import.meta.url), 'utf8');
-  assert.match(source, /OpenXiangdaModule\.forRoot/);
+  assert.match(source, /OpenXiangdaModule\.forApplication/);
+  assert.doesNotMatch(source, /OPENXIANGDA_(?:APP_CODE|ENVIRONMENT_ID|OAUTH_CLIENT_ID)/);
   assert.match(source, /eventHandlerManifest/);
   assert.match(source, /eventSigningSecretsFromEnvironment/);
   assert.match(main, /bootstrapOpenXiangdaApplication\(AppModule\)/);

package/template/apps/web/e2e/field-protocol-fixture.tsx

@@ -42,6 +42,9 @@ const field = (
     readCapabilities: [],
     createCapabilities: [],
     updateCapabilities: [],
+    ...(type === 'date-range' || type === 'datetime-range'
+      ? { rangeBoundary: 'closed' as const }
+      : {}),
     ...extra,
   } as unknown as SurfaceField);
 

package/template/apps/web/e2e/resource-experience-fixture.tsx

@@ -3,10 +3,13 @@ import ReactDOM from 'react-dom/client';
 import { Button, Typography } from 'antd';
 import {
   defineApplicationContributions,
+  OpenXiangdaAdminPage,
   OpenXiangdaApplication,
+  useOpenXiangdaTheme,
 } from 'openxiangda/react';
 import type { DataFieldSurface, DataResourceSurface } from 'openxiangda/core';
 import 'openxiangda/react/styles.css';
+import './theme-contract-fixture.css';
 
 const field = (
   label: string,
@@ -177,7 +180,20 @@ const resourceDefinitions = Object.fromEntries(
 );
 
 function ContentOperationsPage() {
-  return <Typography.Title level={2}>内容业务操作</Typography.Title>;
+  const { effectiveAppearance, tokens } = useOpenXiangdaTheme();
+  return (
+    <OpenXiangdaAdminPage
+      className="theme-contract-page"
+      data-primary={tokens.primary}
+      data-theme={effectiveAppearance}
+      data-testid="custom-admin-page"
+    >
+      <Typography.Title level={2}>内容业务操作</Typography.Title>
+      <div className="theme-contract-panel">
+        自定义后台页语义主题面板
+      </div>
+    </OpenXiangdaAdminPage>
+  );
 }
 
 function ResourcePortalPage() {

package/template/apps/web/e2e/resources.spec.ts

@@ -71,7 +71,12 @@ function runtimeAuthorization(authorized: boolean, superAdmin = false) {
       type: 'user_union',
       userId: 'acceptance-user',
       roleCodes: ['college_admin', 'instrument_admin'],
-      capabilityCodes: authorized ? allCapabilities : [],
+      capabilityCodes: authorized
+        ? [
+            ...allCapabilities,
+            'app:openxiangda-application:operations:read',
+          ]
+        : [],
       isAppSuperAdmin: superAdmin,
       identityScope: 'user-union:preproduction-id:acceptance-user:authz-1',
     },
@@ -281,6 +286,32 @@ test('renders the compiled desktop resource contract and shared workbench', asyn
   await expect.poll(() => page.evaluate(() => localStorage.getItem('openxiangda.admin.appearance'))).toBe('dark');
 });
 
+test('custom admin pages inherit tokens and follow live system appearance', async ({ page }) => {
+  await page.emulateMedia({ colorScheme: 'dark' });
+  await mockPlatform(page);
+  await page.goto('/resource-experience.e2e.html');
+  await page
+    .locator('.oxa-sider')
+    .getByText('内容业务操作', { exact: true })
+    .click();
+
+  const customPage = page.getByTestId('custom-admin-page');
+  const customPanel = customPage.locator('.theme-contract-panel');
+  await expect(page.locator('html')).toHaveAttribute('data-oxa-theme', 'dark');
+  await expect(customPage).toHaveAttribute('data-theme', 'dark');
+  await expect(customPage).toHaveAttribute('data-primary', '#447bdc');
+  await expect(customPage).toHaveCSS('background-color', 'rgb(11, 21, 36)');
+  await expect(customPanel).toHaveCSS('background-color', 'rgb(17, 29, 46)');
+  await expect(customPanel).toHaveCSS('color', 'rgb(215, 224, 236)');
+  await expect(customPanel).toHaveCSS('border-color', 'rgb(38, 55, 79)');
+
+  await page.emulateMedia({ colorScheme: 'light' });
+  await expect(page.locator('html')).toHaveAttribute('data-oxa-theme', 'light');
+  await expect(customPage).toHaveAttribute('data-theme', 'light');
+  await expect(customPage).toHaveCSS('background-color', 'rgb(245, 245, 245)');
+  await expect(customPanel).toHaveCSS('background-color', 'rgb(255, 255, 255)');
+});
+
 test('opens the stable admin entry under the preproduction gateway mount', async ({ page }) => {
   test.skip(!codes.length, 'No resource route exists in an empty application.');
   const devRuntimeBase = `/dev/${appCode}`;

package/template/apps/web/e2e/theme-contract-fixture.css

@@ -0,0 +1,15 @@
+.theme-contract-page {
+  display: grid;
+  align-content: start;
+  gap: 16px;
+  padding: 24px;
+}
+
+.theme-contract-panel {
+  border: 1px solid var(--oxa-color-border);
+  border-radius: var(--oxa-radius-surface);
+  background: var(--oxa-color-surface);
+  padding: 24px;
+  color: var(--oxa-color-text);
+  box-shadow: var(--oxa-shadow-surface);
+}

package/template/apps/web/e2e/workflow-experience-fixture.tsx

@@ -2,7 +2,6 @@ import React from 'react';
 import ReactDOM from 'react-dom/client';
 import {
   defineApplicationContributions,
-  defineWorkflowLaunchContributions,
   OpenXiangdaApplication,
   type AdminNavigationInput,
   type AdminPagesInput,
@@ -16,9 +15,44 @@ const workflowDefinitions = [
     code: 'purchase-approval',
     title: '采购审批',
     launch: { mode: 'standalone' },
+    subject: {
+      resourceCode: 'purchase-orders',
+      factProjection: { amount: 'amount' },
+    },
+    processOperationCode: 'openxiangda.workflow.purchase-approval.submit',
   },
 ] as const;
 
+const resourceDefinitions = {
+  'purchase-orders': {
+    code: 'purchase-orders',
+    name: '采购申请',
+    capabilities: {
+      read: `app:${appCode}:data:purchase-orders:read`,
+      create: `app:${appCode}:data:purchase-orders:create`,
+      update: `app:${appCode}:data:purchase-orders:update`,
+      delete: `app:${appCode}:data:purchase-orders:delete`,
+    },
+    surface: {
+      mutationOwner: 'native',
+      generated: { list: true, detail: true, create: true, update: true, delete: true },
+      fields: {
+        amount: {
+          label: '申请金额',
+          type: 'number.decimal',
+          widget: 'money',
+          requiredHint: true,
+          readCapabilities: [`app:${appCode}:data:purchase-orders:read`],
+          createCapabilities: [`app:${appCode}:data:purchase-orders:create`],
+          updateCapabilities: [`app:${appCode}:data:purchase-orders:update`],
+        },
+      },
+      form: { layout: 'flat', fieldOrder: ['amount'] },
+      mobile: { enabled: true },
+    },
+  },
+} as const;
+
 const detailRoutes = {
   desktop: {
     code: 'purchase-detail',
@@ -127,18 +161,8 @@ ReactDOM.createRoot(document.getElementById('root')!).render(
       adminNavigation={adminNavigation}
       adminPages={adminPages}
       contributions={applicationContributions}
-      resourceDefinitions={{}}
-      workflows={defineWorkflowLaunchContributions(workflowDefinitions, {
-        'purchase-approval': async () => ({
-          businessKey: 'PO-2026-0825',
-          dataRef: {
-            resourceCode: 'purchase-orders',
-            recordId: 'purchase-1',
-            dataRevision: '8',
-          },
-          facts: { amount: 28600, applicant: '张三' },
-        }),
-      })}
+      resourceDefinitions={resourceDefinitions}
+      workflows={workflowDefinitions}
     />
   </React.StrictMode>
 );

package/template/apps/web/e2e/workflow.spec.ts

@@ -3,6 +3,7 @@ import { appCode } from '../../../packages/contracts/src/generated.js';
 
 const taskId = '11111111-1111-4111-8111-111111111111';
 const instanceId = '22222222-2222-4222-8222-222222222222';
+const commandId = '55555555-5555-4555-8555-555555555555';
 function envelope(data: unknown, code = 200) {
   return { code, message: code === 200 ? 'success' : 'forbidden', data };
 }
@@ -53,6 +54,8 @@ function surface(completed = false, customDetail = false) {
     protocolVersion: 'workflow_surface_v2',
     surfaceRevision: completed ? 'revision-2' : 'revision-1',
     engineVersion: '2.0',
+    commandToken: 'A'.repeat(43),
+    commandTokenExpiresAt: '2099-08-29T09:05:00.000Z',
     instanceSequence: completed ? 4 : 3,
     detailNavigation: detailNavigation(customDetail),
     navigationTarget: {
@@ -212,6 +215,11 @@ function launchSurface() {
     workflowCode: 'purchase-approval',
     title: '采购审批',
     launchMode: 'standalone',
+    processOperationCode: 'openxiangda.workflow.purchase-approval.submit',
+    subject: {
+      resourceCode: 'purchase-orders',
+      factProjection: { amount: 'amount' },
+    },
     inputSchema: { type: 'object', properties: {} },
     head: {
       workflowRevision: 4,
@@ -224,18 +232,85 @@ function launchSurface() {
       desktop: '/admin/workflows/purchase-approval/new',
       mobile: '/m/workflows/purchase-approval/start',
     },
-    prepare: {
-      method: 'POST',
-      href: '/workflow/definitions/purchase-approval/prepare-start',
-    },
-    start: {
+    commit: {
       method: 'POST',
-      href: '/workflow/instances',
+      href: `/openxiangda-api/v2/applications/${appCode}/business-process/standard-commands`,
       idempotencyRequired: true,
     },
   };
 }
 
+function processCommand(status: 'accepted' | 'started' = 'started') {
+  return {
+    schemaVersion: 'openxiangda.business-process.command/v2',
+    id: commandId,
+    appCode,
+    environmentKey: 'preproduction',
+    operationCode: 'openxiangda.workflow.purchase-approval.submit',
+    idempotencyKey: 'process:purchase-approval:test',
+    workflowCode: 'purchase-approval',
+    status,
+    revision: status === 'started' ? 4 : 1,
+    subject: {
+      resourceCode: 'purchase-orders',
+      id: '66666666-6666-4666-8666-666666666666',
+      dataRevision: 1,
+      factDigest: 'a'.repeat(64),
+    },
+    definitionVersion: 1,
+    bindingVersion: 1,
+    requirements: [],
+    answers: {},
+    preview: {},
+    workflowInstanceId: status === 'started' ? instanceId : null,
+    attemptCount: 1,
+    lastError: null,
+    replayed: false,
+    createdAt: '2026-08-29T01:00:00.000Z',
+    updatedAt: '2026-08-29T01:00:01.000Z',
+  };
+}
+
+function processCommandSurface() {
+  const command = processCommand('started');
+  const base = `/openxiangda-api/v2/applications/${appCode}/business-process/commands/${commandId}`;
+  return {
+    schemaVersion: 'openxiangda.process-command-surface/v2',
+    surfaceRevision: 'b'.repeat(64),
+    command,
+    subject: {
+      resourceCode: 'purchase-orders',
+      recordId: command.subject.id,
+      dataRevision: 1,
+      form: {
+        kind: 'native-resource-form',
+        resourceCode: 'purchase-orders',
+        recordId: command.subject.id,
+      },
+    },
+    requirements: [],
+    resume: {
+      status: { method: 'GET', href: base },
+      surface: { method: 'GET', href: `${base}/surface` },
+      answer: null,
+      retry: null,
+      navigationTarget: {
+        kind: 'PLATFORM_ROUTE',
+        routeCode: 'resource.record',
+        appCode,
+        pathParams: {
+          resourceCode: 'purchase-orders',
+          recordId: command.subject.id,
+        },
+        query: { processCommandId: commandId },
+        access: 'AUTHENTICATED',
+      },
+      desktop: `/purchase-orders/${command.subject.id}?processCommandId=${commandId}`,
+      mobile: `/m/purchase-orders/${command.subject.id}?processCommandId=${commandId}`,
+    },
+  };
+}
+
 function todoPage() {
   return {
     schemaVersion: 'openxiangda.application-todo-center/v2',
@@ -283,6 +358,12 @@ async function mockWorkflow(
   await page.route('**/service/**', async route => {
     const url = new URL(route.request().url());
     const path = url.pathname;
+    if (path.endsWith('/auth/surface')) {
+      return route.fulfill({
+        contentType: 'application/json',
+        body: JSON.stringify(envelope({ csrfToken: 'workflow-csrf-1' })),
+      });
+    }
     if (path.endsWith('/native/authz/current')) {
       return route.fulfill({
         contentType: 'application/json',
@@ -319,7 +400,7 @@ async function mockWorkflow(
               userId: 'acceptance-user',
               roleCodes: ['department_manager'],
               capabilityCodes: [],
-              isAppSuperAdmin: false,
+              isAppSuperAdmin: true,
               identityScope:
                 'user-union:preproduction-id:acceptance-user:authz-1',
             },
@@ -369,40 +450,36 @@ async function mockWorkflow(
       });
     }
     if (
-      path.endsWith(
-        '/workflow/definitions/purchase-approval/prepare-start'
-      )
+      path.endsWith('/business-process/standard-commands') &&
+      route.request().method() === 'POST'
     ) {
+      const body = route.request().postDataJSON();
+      expect(body).toMatchObject({
+        schemaVersion: 'openxiangda.standard-process.commit/v2',
+        environmentKey: 'preproduction',
+        workflowCode: 'purchase-approval',
+        mutation: { kind: 'create', data: { amount: '28600' } },
+      });
+      for (const forbidden of [
+        'facts',
+        'dataRef',
+        'preparationToken',
+        'processOperationCode',
+      ]) {
+        expect(body).not.toHaveProperty(forbidden);
+      }
       return route.fulfill({
         contentType: 'application/json',
-        body: JSON.stringify(
-          envelope({
-            schemaVersion: 'openxiangda.workflow-preparation/v2',
-            preparationId: 'preparation-1',
-            status: 'ready',
-            requirements: [],
-            preparationToken: 'preparation-token-1',
-            preview: { nodes: [] },
-            expiresAt: '2026-08-28T02:00:00.000Z',
-            definitionVersion: 1,
-            bindingVersion: 1,
-            inputHash: 'input-hash-1',
-          })
-        ),
+        body: JSON.stringify(envelope(processCommand('accepted'))),
       });
     }
     if (
-      path.endsWith('/workflow/instances') &&
-      route.request().method() === 'POST'
+      path.endsWith(`/business-process/commands/${commandId}/surface`) &&
+      route.request().method() === 'GET'
     ) {
       return route.fulfill({
         contentType: 'application/json',
-        body: JSON.stringify(
-          envelope({
-            ...surface(false, options.customDetail).instance,
-            id: instanceId,
-          })
-        ),
+        body: JSON.stringify(envelope(processCommandSurface())),
       });
     }
     if (path.endsWith('/workflow/work-center/items')) {
@@ -445,6 +522,19 @@ async function mockWorkflow(
       });
     }
     if (path.endsWith(`/workflow/tasks/${taskId}/commands/approve`)) {
+      expect(route.request().headers()['x-openxiangda-csrf-token']).toBe(
+        'workflow-csrf-1'
+      );
+      expect(route.request().postDataJSON()).toMatchObject({
+        commandToken: 'A'.repeat(43),
+        input: { comment: '同意采购' },
+      });
+      expect(route.request().postDataJSON()).not.toHaveProperty(
+        'expectedTaskVersion'
+      );
+      expect(route.request().postDataJSON()).not.toHaveProperty(
+        'expectedInstanceVersion'
+      );
       completed = true;
       return route.fulfill({
         contentType: 'application/json',
@@ -507,8 +597,7 @@ test('launches the same workflow from the canonical mobile Surface and follows c
   );
   await expect(page.locator('.oxa-workflow-submission-mobile')).toBeVisible();
   await expect(page.getByRole('heading', { name: '采购审批' })).toBeVisible();
-  await page.getByRole('button', { name: '保存业务数据并预检' }).click();
-  await expect(page.getByRole('button', { name: '提交审批' })).toBeVisible();
+  await page.getByRole('spinbutton', { name: '请输入申请金额' }).fill('28600');
   await page.getByRole('button', { name: '提交审批' }).click();
   await expect(page.getByTestId('custom-workflow-detail')).toContainText(
     `${instanceId} / ${taskId}`

package/template/apps/web/package.json

@@ -14,7 +14,7 @@
     "@ant-design/icons": "6.2.3",
     "@refinedev/core": "5.0.12",
     "antd": "6.4.3",
-    "openxiangda": "2.0.0-alpha.39",
+    "openxiangda": "2.0.0-alpha.42",
     "react": "19.2.8",
     "react-dom": "19.2.8",
     "react-router-dom": "7.8.2"

package/template/apps/web/src/main.tsx

@@ -2,7 +2,6 @@ import React from 'react';
 import ReactDOM from 'react-dom/client';
 import {
   defineApplicationContributions,
-  defineWorkflowLaunchContributions,
   DefaultDesktopApplicationLoginSurface,
   DefaultMobileApplicationLoginSurface,
   OpenXiangdaApplication,
@@ -43,11 +42,6 @@ const applicationContributions = defineApplicationContributions(
     },
   },
 );
-const workflowContributions = defineWorkflowLaunchContributions(
-  workflowDefinitions,
-  {},
-);
-
 ReactDOM.createRoot(document.getElementById('root')!).render(
   <React.StrictMode>
     <OpenXiangdaApplication
@@ -58,7 +52,7 @@ ReactDOM.createRoot(document.getElementById('root')!).render(
       contributions={applicationContributions}
       perspectives={appPerspectives}
       resourceDefinitions={resourceDefinitions}
-      workflows={workflowContributions}
+      workflows={workflowDefinitions}
     />
   </React.StrictMode>,
 );

package/template/package.json

@@ -23,7 +23,7 @@
     "build": "pnpm --recursive build"
   },
   "devDependencies": {
-    "openxiangda": "2.0.0-alpha.39",
+    "openxiangda": "2.0.0-alpha.42",
     "typescript": "5.9.3"
   }
 }

package/template/packages/contracts/src/generated.ts

@@ -1,5 +1,5 @@
 // Generated by OpenXiangda 2.0 Native compiler. Do not edit by hand.
-export const compilerContractVersion = "native-2" as const;
+export const compilerContractVersion = "native-3" as const;
 export const appCode = "openxiangda-application" as const;
 export const appName = "OpenXiangda 应用" as const;
 export const appPerspectives = [] as const;