openxiangda-cli 2.0.0-alpha.169 → 2.0.0-alpha.170

package/template/appspec/app.md

@@ -6,7 +6,7 @@ status: active
 ---
 # OpenXiangda 应用
 
-AppSpec 是可选的业务意图辅助层，不是发布门禁。资源、字段、权限和动作仍以
+本文件保留当前业务需求和已确认决定，帮助后续修改找回上下文；不作为额外发布门禁。资源、字段、权限和动作仍以
 `openxiangda.config.ts` 与实时编译合同为准。
 
 ## 业务目标
@@ -34,3 +34,29 @@ AppSpec 是可选的业务意图辅助层，不是发布门禁。资源、字段
 ## 未确认问题
 
 - 无。
+
+## 业务任务与页面
+
+| 用户要完成的任务 | 页面/入口 | PC/移动 | 消费的数据模型 | 标准 CRUD 或任务页 |
+| --- | --- | --- | --- | --- |
+
+<!-- 辅助表可以没有页面；多表共同完成一项业务时只规划需要的任务页。 -->
+
+## 权限矩阵与确认
+
+| 业务角色 | 任务/数据 | 可查看范围 | 新增 | 修改 | 删除 | 特殊动作/敏感字段 |
+| --- | --- | --- | --- | --- | --- | --- |
+
+- 已确认的业务权限：
+- 尚未确认的权限（不要擅自授予）：
+
+## 验收场景
+
+| 场景 | 操作角色 | 前置数据 | 页面操作 | 预期结果 | 验证记录 |
+| --- | --- | --- | --- | --- | --- |
+
+<!-- 简单应用保留核心录入/查询场景即可。多角色增加无权访问与范围场景；流程增加审批流转场景。 -->
+
+## 变更记录
+
+<!-- 简单变更记录日期、业务原因和验收结果；复杂能力链接其 CAP/ChangeSpec，不重复维护多份真相。 -->

package/template/openxiangda.config.ts

@@ -1,8 +1,7 @@
 import { defineAdminNavigation, defineOpenXiangdaApp } from 'openxiangda/config';
 
-/** Clean application scaffold: declare resources and fields, then generate CRUD. */
+/** Start with business modules; select standard CRUD only for the models that need it. */
 export default defineOpenXiangdaApp({
-  schemaVersion: 3,
   app: { code: 'openxiangda-application', name: 'OpenXiangda 应用' },
   frontend: {
     root: 'apps/web',
@@ -52,26 +51,5 @@ export default defineOpenXiangdaApp({
     },
     admin: { navigation: defineAdminNavigation([]) },
   },
-  backend: {
-    root: 'apps/server',
-    runtime: 'node',
-    framework: 'nestjs',
-    enabled: false,
-    isolation: 'shared',
-    resourceProfile: 'light',
-    secrets: [],
-    operations: [],
-  },
-  platform: { root: 'platform' },
-  authz: {
-    capabilities: [],
-    roles: [],
-    scopeDimensions: [],
-    scopeSources: [],
-    dataPolicies: [],
-    authorizationTransitions: [],
-  },
-  data: { resources: [] },
-  events: { schemas: [], subscriptions: [], timers: [], dateTriggers: [] },
-  workflows: { definitions: [], bindings: [], activations: [], providers: [], editableParameters: [] },
+  modules: [],
 });

package/template/package.json

@@ -12,18 +12,17 @@
     "prepare": "pnpm workspace:build",
     "workspace:build": "pnpm --filter @app/contracts build",
     "predev": "pnpm workspace:build",
-    "dev": "pnpm --parallel --filter './apps/*' dev",
+    "dev": "openxiangda dev",
     "dev:web": "pnpm --filter @app/web dev",
-    "dev:server": "pnpm --filter @app/server dev",
     "precheck": "pnpm workspace:build",
-    "check": "pnpm --recursive check && node scripts/verify-template-budget.mjs",
+    "check": "pnpm --recursive check",
     "pretest": "pnpm workspace:build",
     "test": "pnpm --recursive test",
     "test:e2e": "pnpm --filter @app/web test:e2e",
     "build": "pnpm --recursive build"
   },
   "devDependencies": {
-    "openxiangda": "2.0.0-alpha.95",
+    "openxiangda": "2.0.0-alpha.96",
     "typescript": "5.9.3"
   }
 }

package/template/apps/server/Dockerfile

@@ -1,20 +0,0 @@
-FROM node:22-alpine AS build
-WORKDIR /workspace
-RUN corepack enable
-COPY package.json pnpm-lock.yaml pnpm-workspace.yaml tsconfig.base.json ./
-COPY apps/server/package.json apps/server/package.json
-COPY packages/contracts/package.json packages/contracts/package.json
-RUN node -e "const fs=require('node:fs'); const p=JSON.parse(fs.readFileSync('package.json','utf8')); delete p.devDependencies; fs.writeFileSync('package.json', JSON.stringify(p));"
-RUN pnpm --filter @app/server --filter @app/contracts install --no-frozen-lockfile --ignore-scripts
-COPY apps/server apps/server
-COPY packages/contracts packages/contracts
-RUN pnpm --filter @app/server... build
-RUN pnpm --filter @app/server deploy --prod --legacy --ignore-scripts /output
-
-FROM node:22-alpine AS runtime
-ENV NODE_ENV=production
-WORKDIR /app
-COPY --from=build --chown=1000:1000 /output /app
-USER 1000:1000
-EXPOSE 3000
-CMD ["node", "dist/main.js"]

package/template/apps/server/package.json

@@ -1,27 +0,0 @@
-{
-  "name": "@app/server",
-  "version": "0.1.0",
-  "private": true,
-  "type": "module",
-  "scripts": {
-    "dev": "tsx watch src/main.ts",
-    "check": "tsc -p tsconfig.json --noEmit",
-    "test": "tsx --test test/*.test.ts",
-    "build": "tsc -p tsconfig.json",
-    "start": "node dist/main.js"
-  },
-  "dependencies": {
-    "@app/contracts": "workspace:*",
-    "@nestjs/common": "11.1.29",
-    "@nestjs/core": "11.1.29",
-    "@nestjs/platform-fastify": "11.1.29",
-    "openxiangda": "2.0.0-alpha.95",
-    "reflect-metadata": "0.2.2",
-    "rxjs": "7.8.2"
-  },
-  "devDependencies": {
-    "@types/node": "24.13.3",
-    "tsx": "4.23.12",
-    "typescript": "5.9.3"
-  }
-}

package/template/apps/server/src/app.module.ts

@@ -1,23 +0,0 @@
-import { Module } from '@nestjs/common';
-import {
-  eventHandlerManifest,
-  eventSchemas,
-  eventSubscriptionCodes,
-} from '@app/contracts';
-import {
-  OpenXiangdaModule,
-  eventSigningSecretsFromEnvironment,
-} from 'openxiangda/nest';
-
-@Module({
-  imports: [
-    OpenXiangdaModule.forApplication({
-      eventHandlerManifest,
-      eventSchemas,
-      eventSigningSecrets: eventSigningSecretsFromEnvironment(
-        eventSubscriptionCodes
-      ),
-    }),
-  ],
-})
-export class AppModule {}

package/template/apps/server/src/main.ts

@@ -1,5 +0,0 @@
-import 'reflect-metadata';
-import { bootstrapOpenXiangdaApplication } from 'openxiangda/nest';
-import { AppModule } from './app.module.js';
-
-await bootstrapOpenXiangdaApplication(AppModule);

package/template/apps/server/test/smoke.test.ts

@@ -1,17 +0,0 @@
-import assert from 'node:assert/strict';
-import { readFileSync } from 'node:fs';
-import test from 'node:test';
-
-test('the clean server template only owns platform bootstrap', () => {
-  const source = readFileSync(new URL('../src/app.module.ts', import.meta.url), 'utf8');
-  const main = readFileSync(new URL('../src/main.ts', import.meta.url), 'utf8');
-  assert.match(source, /OpenXiangdaModule\.forApplication/);
-  assert.doesNotMatch(source, /OPENXIANGDA_(?:APP_CODE|ENVIRONMENT_ID|OAUTH_CLIENT_ID)/);
-  assert.match(source, /eventHandlerManifest/);
-  assert.match(source, /eventSigningSecretsFromEnvironment/);
-  assert.match(main, /bootstrapOpenXiangdaApplication\(AppModule\)/);
-  assert.doesNotMatch(main, /NestFactory|FastifyAdapter/);
-  const legacyMarkers = ['oauth' + 'Client', 'Workflow', 'instrument' + '-context'];
-  assert.doesNotMatch(source, new RegExp(legacyMarkers.join('|')));
-  assert.doesNotMatch(source, /createData|updateData|deleteData|queryData/);
-});

package/template/apps/server/tsconfig.json

@@ -1,9 +0,0 @@
-{
-  "extends": "../../tsconfig.base.json",
-  "compilerOptions": {
-    "outDir": "dist",
-    "rootDir": "src",
-    "sourceMap": true
-  },
-  "include": ["src/**/*.ts"]
-}

package/template/apps/web/e2e/theme-contract-fixture.css

@@ -1,15 +0,0 @@
-.theme-contract-page {
-  display: grid;
-  align-content: start;
-  gap: 16px;
-  padding: 24px;
-}
-
-.theme-contract-panel {
-  border: 1px solid var(--oxa-antd-color-border-secondary);
-  border-radius: var(--oxa-antd-border-radius);
-  background: var(--oxa-antd-color-bg-container);
-  padding: 24px;
-  color: var(--oxa-antd-color-text);
-  box-shadow: var(--oxa-antd-box-shadow-tertiary);
-}

package/template/scripts/verify-template-budget.mjs

@@ -1,49 +0,0 @@
-import { readFileSync, readdirSync, statSync } from 'node:fs';
-import { join, relative, resolve } from 'node:path';
-
-const root = resolve(import.meta.dirname, '..');
-const generated = /(?:^|\/)(?:node_modules|dist|coverage|playwright-report|test-results|\.openxiangda|\.turbo|\.turbopack|\.umi|\.umi-production)(?:\/|$)/;
-const sourceExtensions = /\.(?:[cm]?[jt]sx?|css|html|json|md|ya?ml)$/;
-const files = [];
-function visit(directory) {
-  for (const entry of readdirSync(directory, { withFileTypes: true })) {
-    const path = join(directory, entry.name);
-    const name = relative(root, path).replaceAll('\\', '/');
-    if (
-      generated.test(name) ||
-      name === 'pnpm-lock.yaml' ||
-      name === 'packages/contracts/src/generated.ts'
-    ) continue;
-    if (entry.isDirectory()) visit(path);
-    else if (entry.isFile() && sourceExtensions.test(name)) files.push(path);
-  }
-}
-visit(root);
-const bytes = files.reduce((total, file) => total + statSync(file).size, 0);
-if (files.length > 50) throw new Error(`TEMPLATE_SOURCE_FILE_BUDGET_EXCEEDED:${files.length}>50`);
-if (bytes > 500_000) throw new Error(`TEMPLATE_SOURCE_BYTE_BUDGET_EXCEEDED:${bytes}>500000`);
-const productionFiles = files.filter(file => {
-  const name = relative(root, file).replaceAll('\\', '/');
-  return (
-    name === 'package.json' ||
-    name === 'openxiangda.config.ts' ||
-    name.startsWith('platform/') ||
-    (name.startsWith('apps/') &&
-      !name.includes('/test/') &&
-      !name.includes('/e2e/') &&
-      !name.includes('/scripts/'))
-  );
-});
-const source = productionFiles.map(file => readFileSync(file, 'utf8')).join('\n');
-const agents = readFileSync(resolve(root, 'AGENTS.md'), 'utf8');
-if (!agents.includes('pnpm openxiangda')) throw new Error('TEMPLATE_AGENT_PINNED_CLI_MISSING');
-if (
-  !agents.includes("union of that user's application roles") ||
-  !agents.includes('Perspective projects only read visibility')
-) {
-  throw new Error('TEMPLATE_AGENT_ROLE_UNION_BOUNDARY_MISSING');
-}
-for (const marker of ['@umijs/', 'openxiangda-' + 'admin', 'openxiangda-' + 'user', 'instrument_query', 'instrument_save', 'function.invoke', 'departmentScopeKey', 'instrumentScopeKey', 'adminUserIds', 'college-' + 'am', 'user-' + 'wang', 'dept-' + 'am-test']) {
-  if (source.includes(marker)) throw new Error(`TEMPLATE_FORBIDDEN_MARKER:${marker}`);
-}
-process.stdout.write(`Verified compact template: ${files.length} source files, ${bytes} bytes.\n`);