openxiangda-cli 2.0.0-alpha.91 → 2.0.0-alpha.96

package/bin/run.js

@@ -1,5 +1,6 @@
 #!/usr/bin/env node
 import { execute } from '@oclif/core';
+import { readFileSync } from 'node:fs';
 import { fileURLToPath } from 'node:url';
 
 const publicCommands = new Set([
@@ -58,10 +59,29 @@ if (args.includes('--mcp-stdio')) {
     process.exitCode = 2;
   } else {
     const root = fileURLToPath(new URL('../', import.meta.url));
+    const cliManifest = JSON.parse(
+      readFileSync(new URL('../package.json', import.meta.url), 'utf8')
+    );
+    const distributionManifest = process.env.OPENXIANGDA_DISTRIBUTION_NAME
+      ? {
+          ...cliManifest,
+          name: process.env.OPENXIANGDA_DISTRIBUTION_NAME,
+          version:
+            process.env.OPENXIANGDA_DISTRIBUTION_VERSION ||
+            cliManifest.version,
+        }
+      : undefined;
     await execute({
       args,
       loadOptions: {
         root,
+        ...(distributionManifest ? { pjson: distributionManifest } : {}),
+        ...(process.env.OPENXIANGDA_DISTRIBUTION_NAME
+          ? { name: process.env.OPENXIANGDA_DISTRIBUTION_NAME }
+          : {}),
+        ...(process.env.OPENXIANGDA_DISTRIBUTION_VERSION
+          ? { version: process.env.OPENXIANGDA_DISTRIBUTION_VERSION }
+          : {}),
         userPlugins: false,
         devPlugins: false,
         jitPlugins: false,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "openxiangda-cli",
-  "version": "2.0.0-alpha.91",
+  "version": "2.0.0-alpha.96",
   "description": "Thin application-level CLI for OpenXiangda 2.0.",
   "type": "module",
   "main": "./dist/index.js",
@@ -21,10 +21,10 @@
   ],
   "dependencies": {
     "@oclif/core": "4.13.3",
-    "openxiangda-contracts": "2.0.0-alpha.45",
-    "openxiangda-devkit-core": "2.0.0-alpha.58",
-    "openxiangda-mcp": "2.0.0-alpha.58",
-    "openxiangda-skill-kit": "2.0.0-alpha.76"
+    "openxiangda-contracts": "2.0.0-alpha.46",
+    "openxiangda-devkit-core": "2.0.0-alpha.59",
+    "openxiangda-mcp": "2.0.0-alpha.59",
+    "openxiangda-skill-kit": "2.0.0-alpha.77"
   },
   "devDependencies": {
     "tsx": "4.23.12",

package/template/apps/server/package.json

@@ -15,7 +15,7 @@
     "@nestjs/common": "11.1.29",
     "@nestjs/core": "11.1.29",
     "@nestjs/platform-fastify": "11.1.29",
-    "openxiangda": "2.0.0-alpha.3",
+    "openxiangda": "2.0.0-alpha.8",
     "reflect-metadata": "0.2.2",
     "rxjs": "7.8.2"
   },

package/template/apps/web/e2e/resources.spec.ts

@@ -96,6 +96,22 @@ async function mockPlatform(
         }),
       });
     }
+    const exportRequest = url.pathname.match(
+      /\/native\/data\/([^/]+)\/export$/
+    );
+    if (exportRequest) {
+      observed.push({ path: url.pathname, roleSessionId });
+      return route.fulfill({
+        status: 200,
+        contentType: 'text/csv; charset=utf-8',
+        headers: {
+          'content-disposition': `attachment; filename="${decodeURIComponent(
+            exportRequest[1]
+          )}.csv"`,
+        },
+        body: 'id,name\nacceptance-1,OpenXiangda\n',
+      });
+    }
     const query = url.pathname.match(/\/native\/data\/([^/]+)\/query$/);
     if (query) {
       observed.push({ path: url.pathname, roleSessionId });

package/template/apps/web/e2e/workflow.spec.ts

@@ -0,0 +1,329 @@
+import { expect, test, type Page } from '@playwright/test';
+import { appCode } from '../../../packages/contracts/src/generated.js';
+
+const runtimeBase = `/view/${appCode}`;
+const taskId = '11111111-1111-4111-8111-111111111111';
+const instanceId = '22222222-2222-4222-8222-222222222222';
+function envelope(data: unknown, code = 200) {
+  return { code, message: code === 200 ? 'success' : 'forbidden', data };
+}
+
+function task(completed = false) {
+  return {
+    schemaVersion: 'openxiangda.workflow-task/v2',
+    engineVersion: '2.0',
+    id: taskId,
+    instanceId,
+    workflowCode: 'purchase-approval',
+    businessKey: 'PO-2026-0825',
+    nodeId: 'manager-review',
+    title: '采购申请审批',
+    status: completed ? 'completed' : 'assigned',
+    approvalMode: 'single',
+    taskKind: 'normal',
+    assignedRoleSubjectKey: 'membership:manager',
+    activeParticipantId: 'participant-1',
+    participants: [],
+    originTaskId: null,
+    returnSessionId: null,
+    version: completed ? 2 : 1,
+    dataRef: { resourceCode: 'purchase-orders', recordId: 'purchase-1' },
+    createdAt: '2026-08-25T01:00:00.000Z',
+    updatedAt: '2026-08-25T01:10:00.000Z',
+  };
+}
+
+function surface(completed = false) {
+  return {
+    schemaVersion: 'openxiangda.workflow-surface/v2',
+    protocolVersion: 'workflow_surface_v2',
+    surfaceRevision: completed ? 'revision-2' : 'revision-1',
+    engineVersion: '2.0',
+    instanceSequence: completed ? 4 : 3,
+    navigationTarget: {
+      kind: 'resource_record',
+      appCode,
+      environmentKey: 'preproduction',
+      resourceCode: 'purchase-orders',
+      recordId: 'purchase-1',
+      desktopPath: '/purchase-orders/purchase-1',
+      mobilePath: '/m/purchase-orders/purchase-1',
+    },
+    instance: {
+      schemaVersion: 'openxiangda.workflow-instance/v2',
+      engineVersion: '2.0',
+      id: instanceId,
+      appCode,
+      environmentId: 'preproduction-id',
+      environmentKey: 'preproduction',
+      workflowCode: 'purchase-approval',
+      definitionVersion: 1,
+      bindingVersion: 1,
+      businessKey: 'PO-2026-0825',
+      generation: 1,
+      status: completed ? 'approved' : 'running',
+      initiatorUserId: 'applicant-user',
+      initiatorAuthorizationDigest: null,
+      dataRef: { resourceCode: 'purchase-orders', recordId: 'purchase-1' },
+      dataRevision: '8',
+      currentNodeId: completed ? null : 'manager-review',
+      outcome: completed ? 'approved' : null,
+      version: completed ? 3 : 2,
+      eventSequence: completed ? 4 : 3,
+      startedAt: '2026-08-25T01:00:00.000Z',
+      completedAt: completed ? '2026-08-25T01:12:00.000Z' : null,
+    },
+    task: completed ? null : task(false),
+    presentation: {
+      status: { label: completed ? '已同意' : '待审批', tone: 'warning' },
+      layout: 'approval_detail',
+      businessData: {
+        申请金额: '¥28,600',
+        采购类型: '办公设备',
+        期望到货: '2026-09-05',
+        申请人: '张三',
+      },
+    },
+    fieldPolicy: { default: 'readonly', fields: {} },
+    operations: completed
+      ? []
+      : [
+          {
+            key: 'approve',
+            kind: 'workflow_command',
+            label: '同意',
+            placement: 'primary',
+            tone: 'primary',
+            visible: true,
+            enabled: true,
+            inputSchema: {
+              type: 'object',
+              properties: {
+                comment: {
+                  type: 'string',
+                  title: '审批意见',
+                  format: 'textarea',
+                  maxLength: 500,
+                },
+              },
+            },
+            uiSchema: {
+              confirmText: '确认同意',
+              confirmation: { description: '提交后流程继续流转。' },
+            },
+            execute: {
+              method: 'POST',
+              href: '/workflow/approve',
+              idempotencyRequired: true,
+            },
+            refresh: ['surface', 'timeline', 'work_center'],
+          },
+          ...['reject', 'return', 'transfer', 'add_assignee'].map((key) => ({
+            key,
+            kind: 'workflow_command',
+            label: {
+              reject: '拒绝',
+              return: '退回',
+              transfer: '转交',
+              add_assignee: '加签',
+            }[key],
+            placement: 'secondary',
+            tone: key === 'reject' ? 'danger' : 'neutral',
+            visible: true,
+            enabled: true,
+            inputSchema: { type: 'object', properties: {} },
+            uiSchema: { confirmText: `确认${key}` },
+            execute: {
+              method: 'POST',
+              href: `/workflow/${key}`,
+              idempotencyRequired: true,
+            },
+            refresh: ['surface', 'timeline', 'work_center'],
+          })),
+        ],
+    extensions: {},
+  };
+}
+
+function timeline(completed = false) {
+  return {
+    engineVersion: '2.0',
+    instanceId,
+    flow: [
+      {
+        key: 'start',
+        nodeId: null,
+        kind: 'start',
+        title: '张三',
+        status: 'completed',
+        startedAt: '2026-08-25T01:00:00.000Z',
+        completedAt: '2026-08-25T01:00:00.000Z',
+        assignees: [],
+      },
+      {
+        key: 'manager',
+        nodeId: 'manager-review',
+        kind: 'approval',
+        title: '部门负责人',
+        status: completed ? 'completed' : 'active',
+        startedAt: '2026-08-25T01:01:00.000Z',
+        completedAt: completed ? '2026-08-25T01:12:00.000Z' : null,
+        assignees: [{ userId: 'acceptance-user', displayName: '李明' }],
+      },
+      {
+        key: 'finance',
+        nodeId: 'finance-review',
+        kind: 'approval',
+        title: '财务负责人',
+        status: completed ? 'completed' : 'waiting',
+        startedAt: null,
+        completedAt: null,
+        assignees: [{ userId: 'finance-user', displayName: '财务负责人' }],
+      },
+    ],
+    items: [],
+  };
+}
+
+async function mockWorkflow(page: Page, options: { forbidden?: boolean } = {}) {
+  let completed = false;
+  await page.route(`**${runtimeBase}/**`, async (route) => {
+    if (route.request().resourceType() !== 'document') return route.continue();
+    const response = await route.fetch();
+    const body = (await response.text()).replace(
+      '<head>',
+      `<head><meta name="openxiangda-runtime-base" content="${runtimeBase}/" />` +
+        `<meta name="openxiangda-app-code" content="${appCode}" />` +
+        '<meta name="openxiangda-environment" content="preproduction" />',
+    );
+    await route.fulfill({ response, body });
+  });
+  await page.route('**/service/**', async (route) => {
+    const url = new URL(route.request().url());
+    const path = url.pathname;
+    if (path.endsWith('/native/authz/current')) {
+      return route.fulfill({
+        contentType: 'application/json',
+        body: JSON.stringify(
+          envelope({
+            schemaVersion: 'openxiangda.runtime-authorization/v2',
+            state: 'active',
+            environment: {
+              id: 'preproduction-id',
+              key: 'preproduction',
+              activeAppVersionId: 'version-1',
+              headRevision: 1,
+              authzRevisionId: 'authz-1',
+              authzVersion: 1,
+              scopeDataVersion: 'scope-1',
+            },
+            principal: {
+              type: 'user_union',
+              userId: 'acceptance-user',
+              roleCodes: ['department_manager'],
+              capabilityCodes: [],
+              isAppSuperAdmin: false,
+              identityScope:
+                'user-union:preproduction-id:acceptance-user:authz-1',
+            },
+          }),
+        ),
+      });
+    }
+    if (path.includes('/directory/')) {
+      return route.fulfill({
+        contentType: 'application/json',
+        body: JSON.stringify(envelope({ items: [], nextCursor: null })),
+      });
+    }
+    if (options.forbidden && path.includes('/workflow/')) {
+      return route.fulfill({
+        status: 403,
+        contentType: 'application/json',
+        body: JSON.stringify(envelope(null, 403)),
+      });
+    }
+    if (path.endsWith('/workflow/work-center/items')) {
+      return route.fulfill({
+        contentType: 'application/json',
+        body: JSON.stringify(
+          envelope({
+            engineVersion: '2.0',
+            authorizationMode: 'current_user_role_union',
+            authorizationDigest: 'digest-1',
+            status: 'pending',
+            total: 1,
+            limit: 20,
+            offset: 0,
+            items: [task(completed)],
+          }),
+        ),
+      });
+    }
+    if (path.endsWith(`/workflow/tasks/${taskId}/surface`)) {
+      return route.fulfill({
+        contentType: 'application/json',
+        body: JSON.stringify(envelope(surface(completed))),
+      });
+    }
+    if (path.endsWith(`/workflow/instances/${instanceId}/timeline`)) {
+      return route.fulfill({
+        contentType: 'application/json',
+        body: JSON.stringify(envelope(timeline(completed))),
+      });
+    }
+    if (path.endsWith(`/workflow/tasks/${taskId}/commands/approve`)) {
+      completed = true;
+      return route.fulfill({
+        contentType: 'application/json',
+        body: JSON.stringify(envelope({ status: 'completed' })),
+      });
+    }
+    return route.fulfill({
+      status: 404,
+      contentType: 'application/json',
+      body: JSON.stringify(envelope(null, 404)),
+    });
+  });
+}
+
+test('renders a paged desktop work center from the current-user role union', async ({
+  page,
+}) => {
+  await mockWorkflow(page);
+  await page.goto(`${runtimeBase}/admin/work-center`);
+  await expect(page.getByRole('heading', { name: '审批工作台' })).toBeVisible();
+  await expect(page.getByRole('link', { name: '采购申请审批' })).toBeVisible();
+  await expect(page.getByText('PO-2026-0825')).toBeVisible();
+});
+
+test('renders the independent mobile task and executes only a Surface operation', async ({
+  page,
+}) => {
+  await mockWorkflow(page);
+  await page.setViewportSize({ width: 390, height: 844 });
+  await page.goto(`${runtimeBase}/m/tasks/${taskId}`);
+  await expect(page.locator('.oxa-workflow-mobile-page')).toBeVisible();
+  await expect(page.getByText('¥28,600')).toBeVisible();
+  await expect(page.getByText('财务负责人').first()).toBeVisible();
+  await expect(page.getByRole('button', { name: /同\s*意/ })).toBeVisible();
+  await page.getByRole('button', { name: /同\s*意/ }).click();
+  await page.getByLabel('审批意见').fill('同意采购');
+  await page.getByRole('button', { name: '确认同意' }).click();
+  await expect(page.getByText('同意已提交')).toBeVisible();
+  await expect(page.getByRole('button', { name: /同\s*意/ })).toHaveCount(0);
+});
+
+test('shows an explicit authorization error instead of an empty work center', async ({
+  page,
+}) => {
+  test.setTimeout(45_000);
+  await mockWorkflow(page, { forbidden: true });
+  await page.goto(`${runtimeBase}/admin/work-center`, {
+    waitUntil: 'domcontentloaded',
+  });
+  await expect(page.getByRole('alert')).toContainText('HTTP_403: forbidden', {
+    timeout: 30_000,
+  });
+  await expect(page.getByRole('link', { name: '采购申请审批' })).toHaveCount(0);
+});

package/template/apps/web/package.json

@@ -14,7 +14,7 @@
     "@ant-design/icons": "6.2.3",
     "@refinedev/core": "5.0.12",
     "antd": "6.4.3",
-    "openxiangda": "2.0.0-alpha.3",
+    "openxiangda": "2.0.0-alpha.8",
     "react": "19.2.8",
     "react-dom": "19.2.8",
     "react-router-dom": "7.8.2"

package/template/apps/web/playwright.config.ts

@@ -6,6 +6,7 @@ const baseURL =
 
 export default defineConfig({
   testDir: './e2e',
+  workers: 2,
   use: { baseURL, trace: 'retain-on-failure' },
   webServer: process.env.OPENXIANGDA_E2E_BASE_URL
     ? undefined

package/template/apps/web/scripts/verify-build.mjs

@@ -1,32 +1,6 @@
-import { readFileSync, readdirSync, statSync } from 'node:fs';
-import { gzipSync } from 'node:zlib';
-import { join, resolve } from 'node:path';
+import { verifyOpenXiangdaWebBuild } from 'openxiangda/testing';
 
-const dist = resolve(import.meta.dirname, '../dist');
-const assets = join(dist, 'assets');
-const names = readdirSync(assets);
-const files = names.map(name => join(assets, name));
-const total = files.reduce((bytes, file) => bytes + statSync(file).size, 0);
-if (total > 2_500_000) throw new Error(`WEB_DIST_BUDGET_EXCEEDED:${total}>2500000`);
-const javascript = files.filter(file => file.endsWith('.js'));
-const gzip = javascript.reduce(
-  (bytes, file) => bytes + gzipSync(readFileSync(file), { level: 9 }).byteLength,
-  0
-);
-if (gzip > 800_000) throw new Error(`WEB_JS_GZIP_BUDGET_EXCEEDED:${gzip}>800000`);
-if (names.some(name => name.endsWith('.map'))) throw new Error('WEB_SOURCE_MAP_FORBIDDEN');
-const html = readFileSync(join(dist, 'index.html'), 'utf8');
-if (!html.includes('<div id="root"></div>')) throw new Error('WEB_ROOT_MISSING');
-const initialNames = [
-  ...html.matchAll(/(?:src|href)="\.\/assets\/([^"]+\.js)"/g),
-].map(match => match[1]);
-const initialGzip = [...new Set(initialNames)].reduce((bytes, name) => {
-  const file = join(assets, name);
-  return bytes + gzipSync(readFileSync(file), { level: 9 }).byteLength;
-}, 0);
-if (initialGzip > 600_000) {
-  throw new Error(`WEB_INITIAL_JS_GZIP_BUDGET_EXCEEDED:${initialGzip}>600000`);
-}
+const result = verifyOpenXiangdaWebBuild(new URL('../dist', import.meta.url));
 process.stdout.write(
-  `Verified Vite build: ${total} bytes, ${gzip} total gzip bytes, ${initialGzip} initial gzip bytes.\n`
+  `Verified Vite build: ${result.totalBytes} bytes, ${result.totalJavaScriptGzipBytes} total gzip bytes, ${result.initialJavaScriptGzipBytes} initial gzip bytes.\n`
 );

package/template/apps/web/src/main.tsx

@@ -5,6 +5,7 @@ import {
   appCode,
   appName,
   resourceDefinitions,
+  workflowCodes,
 } from '../../../packages/contracts/src/generated.js';
 import 'openxiangda/react/styles.css';
 
@@ -14,6 +15,7 @@ ReactDOM.createRoot(document.getElementById('root')!).render(
       appCode={appCode}
       appName={appName}
       resourceDefinitions={resourceDefinitions}
+      workflows={workflowCodes}
     />
   </React.StrictMode>,
 );

package/template/apps/web/test/contracts.test.ts

@@ -70,3 +70,30 @@ test('runtime metadata stays mount-scoped', () => {
   );
   assert.equal(resolveApplicationBasename(mount), '/view/example-app');
 });
+
+test('resource E2E harness owns the standard export download response', () => {
+  const source = readFileSync(
+    new URL('../e2e/resources.spec.ts', import.meta.url),
+    'utf8'
+  );
+  assert.match(source, /\/native\\\/data\\\/\(\[\^\/\]\+\)\\\/export\$/);
+  assert.match(source, /content-disposition/);
+  assert.match(source, /text\/csv/);
+});
+
+test('published E2E harnesses do not write evidence into the platform source repository', () => {
+  const workflowSource = readFileSync(
+    new URL('../e2e/workflow.spec.ts', import.meta.url),
+    'utf8'
+  );
+  assert.doesNotMatch(workflowSource, /docs\/architecture|evidenceDirectory/);
+});
+
+test('the platform package owns Web build verification policy', () => {
+  const verifier = readFileSync(
+    new URL('../scripts/verify-build.mjs', import.meta.url),
+    'utf8'
+  );
+  assert.match(verifier, /verifyOpenXiangdaWebBuild/);
+  assert.doesNotMatch(verifier, /2_650_000|800_000|600_000/);
+});

package/template/package.json

@@ -22,7 +22,7 @@
     "build": "pnpm --recursive build"
   },
   "devDependencies": {
-    "openxiangda": "2.0.0-alpha.3",
+    "openxiangda": "2.0.0-alpha.8",
     "typescript": "5.9.3"
   }
 }