openxiangda-contracts 2.13.0 → 2.14.1

package/dist/native-compiler/compiler.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"compiler.d.ts","sourceRoot":"","sources":["../../src/native-compiler/compiler.ts"],"names":[],"mappings":"AAUA,OAAO,EAEL,KAAK,kCAAkC,IAAI,uCAAuC,EACnF,MAAM,aAAa,CAAC;AAwBrB,QAAA,MAAM,iBAAiB,mDAAmD,CAAC;AAC3E,QAAA,MAAM,yBAAyB,YAA2C,CAAC;AAgF3E,eAAO,MAAM,2BAA2B;;;;;;;;;;;;;;EAc7B,CAAC;AACZ,eAAO,MAAM,mBAAmB,6HAItB,CAAC;AACX,eAAO,MAAM,uBAAuB,u/CAkC1B,CAAC;AAGX,KAAK,UAAU,GAAG,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;AAEtC,MAAM,WAAW,gCAAgC;IAC/C,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,GAAG,MAAM,GAAG,UAAU,CAAC;IAC1C,aAAa,EAAE,MAAM,GAAG,MAAM,GAAG,UAAU,CAAC;IAC5C,oBAAoB,EAAE,MAAM,CAAC;IAC7B,sBAAsB,EAAE,MAAM,CAAC;CAChC;AAED,MAAM,WAAW,6BAA6B,CAAC,CAAC,GAAG,UAAU;IAC3D,KAAK,EAAE,CAAC,CAAC;IACT,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,iCAAiC;IAChD,aAAa,EAAE,OAAO,iBAAiB,CAAC;IACxC,uBAAuB,EAAE,OAAO,yBAAyB,CAAC;IAC1D,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE;QACN,YAAY,EAAE,MAAM,CAAC;QACrB,cAAc,EAAE,MAAM,CAAC;QACvB,gBAAgB,EAAE,MAAM,CAAC;KAC1B,CAAC;IACF,WAAW,EAAE;QACX,KAAK,EAAE,6BAA6B,CAAC;QACrC,IAAI,EAAE,6BAA6B,CAAC;QACpC,MAAM,EAAE,6BAA6B,CAAC;QACtC,SAAS,EAAE,6BAA6B,CAAC;QACzC,OAAO,EAAE,6BAA6B,CAAC;QACvC,SAAS,EAAE,6BAA6B,CAAC;KAC1C,CAAC;IACF,4BAA4B,EAAE,uCAAuC,EAAE,CAAC;IACxE,eAAe,EAAE,MAAM,CAAC;CACzB;AAED,qBAAa,gCAAiC,SAAQ,KAAK;IACzD,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;gBAG3C,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,MAAM,EACf,WAAW,GAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAM;CAY5C;AAED,wBAAgB,qCAAqC,CACnD,KAAK,EAAE,gCAAgC,GACtC,iCAAiC,CA8InC;AAED;;;GAGG;AACH,wBAAgB,qCAAqC,CACnD,MAAM,EAAE,UAAU,GACjB,uCAAuC,EAAE,CA2R3C;AAED,MAAM,WAAW,wBAAwB;IACvC,YAAY,EAAE,MAAM,CAAC;IACrB,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,gBAAgB,EAAE,MAAM,EAAE,CAAC;IAC3B,mBAAmB,EAAE,MAAM,EAAE,CAAC;IAC9B,aAAa,EAAE,MAAM,EAAE,CAAC;IACxB,MAAM,EAAE,MAAM,CAAC;IACf,kBAAkB,CAAC,EAAE,MAAM,EAAE,CAAC;CAC/B;AAED;;;;GAIG;AACH,wBAAgB,gCAAgC,CAAC,KAAK,EAAE;IACtD,SAAS,EAAE,UAAU,EAAE,CAAC;IACxB,YAAY,EAAE,UAAU,EAAE,CAAC;IAC3B,aAAa,EAAE,UAAU,EAAE,CAAC;IAC5B,eAAe,CAAC,EAAE,UAAU,EAAE,CAAC;CAChC,GAAG,wBAAwB,EAAE,CA4J7B"}
+{"version":3,"file":"compiler.d.ts","sourceRoot":"","sources":["../../src/native-compiler/compiler.ts"],"names":[],"mappings":"AAUA,OAAO,EAEL,KAAK,kCAAkC,IAAI,uCAAuC,EACnF,MAAM,aAAa,CAAC;AAwBrB,QAAA,MAAM,iBAAiB,mDAAmD,CAAC;AAC3E,QAAA,MAAM,yBAAyB,YAA2C,CAAC;AAgF3E,eAAO,MAAM,2BAA2B;;;;;;;;;;;;;;EAc7B,CAAC;AACZ,eAAO,MAAM,mBAAmB,6HAItB,CAAC;AACX,eAAO,MAAM,uBAAuB,u/CAkC1B,CAAC;AAGX,KAAK,UAAU,GAAG,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;AAEtC,MAAM,WAAW,gCAAgC;IAC/C,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,GAAG,MAAM,GAAG,UAAU,CAAC;IAC1C,aAAa,EAAE,MAAM,GAAG,MAAM,GAAG,UAAU,CAAC;IAC5C,oBAAoB,EAAE,MAAM,CAAC;IAC7B,sBAAsB,EAAE,MAAM,CAAC;CAChC;AAED,MAAM,WAAW,6BAA6B,CAAC,CAAC,GAAG,UAAU;IAC3D,KAAK,EAAE,CAAC,CAAC;IACT,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,iCAAiC;IAChD,aAAa,EAAE,OAAO,iBAAiB,CAAC;IACxC,uBAAuB,EAAE,OAAO,yBAAyB,CAAC;IAC1D,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE;QACN,YAAY,EAAE,MAAM,CAAC;QACrB,cAAc,EAAE,MAAM,CAAC;QACvB,gBAAgB,EAAE,MAAM,CAAC;KAC1B,CAAC;IACF,WAAW,EAAE;QACX,KAAK,EAAE,6BAA6B,CAAC;QACrC,IAAI,EAAE,6BAA6B,CAAC;QACpC,MAAM,EAAE,6BAA6B,CAAC;QACtC,SAAS,EAAE,6BAA6B,CAAC;QACzC,OAAO,EAAE,6BAA6B,CAAC;QACvC,SAAS,EAAE,6BAA6B,CAAC;KAC1C,CAAC;IACF,4BAA4B,EAAE,uCAAuC,EAAE,CAAC;IACxE,eAAe,EAAE,MAAM,CAAC;CACzB;AAED,qBAAa,gCAAiC,SAAQ,KAAK;IACzD,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;gBAG3C,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,MAAM,EACf,WAAW,GAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAM;CAY5C;AAED,wBAAgB,qCAAqC,CACnD,KAAK,EAAE,gCAAgC,GACtC,iCAAiC,CA+InC;AAED;;;GAGG;AACH,wBAAgB,qCAAqC,CACnD,MAAM,EAAE,UAAU,GACjB,uCAAuC,EAAE,CA2R3C;AAED,MAAM,WAAW,wBAAwB;IACvC,YAAY,EAAE,MAAM,CAAC;IACrB,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,gBAAgB,EAAE,MAAM,EAAE,CAAC;IAC3B,mBAAmB,EAAE,MAAM,EAAE,CAAC;IAC9B,aAAa,EAAE,MAAM,EAAE,CAAC;IACxB,MAAM,EAAE,MAAM,CAAC;IACf,kBAAkB,CAAC,EAAE,MAAM,EAAE,CAAC;CAC/B;AAED;;;;GAIG;AACH,wBAAgB,gCAAgC,CAAC,KAAK,EAAE;IACtD,SAAS,EAAE,UAAU,EAAE,CAAC;IACxB,YAAY,EAAE,UAAU,EAAE,CAAC;IAC3B,aAAa,EAAE,UAAU,EAAE,CAAC;IAC5B,eAAe,CAAC,EAAE,UAAU,EAAE,CAAC;CAChC,GAAG,wBAAwB,EAAE,CA4J7B"}

package/dist/native-compiler/compiler.js

@@ -181,6 +181,7 @@ export function compileNativeApplicationConfiguration(input) {
     validateConfigurationEnvelope(config, appCode);
     validateContractEnvelope(contract, appCode, expectedConfigDigest);
     const expectedContract = compileExpectedContract(config, expectedConfigDigest, contract.generatorVersion);
+    mergeUserSurfaceRoutes(expectedContract, contract, config);
     if (canonicalJson(expectedContract) !== canonicalJson(contract)) {
         fail('NATIVE_CONTRACT_CLOSURE_MISMATCH', firstDifferencePointer(expectedContract, contract, '/contracts'));
     }
@@ -1531,6 +1532,11 @@ function validateApplicationAuthentication(value, routeDeclarations, config, poi
         const route = object(rawRoute, `/config/frontend/routes/${index}`);
         routesByCode.set(String(route.code || ''), route);
     }
+    // 生成式用户标准面路由码：user.<resource>.(records|submit)。路由事实
+    // 由 routeManifest 携带；这里按同应用已声明资源判定有效性。
+    const userSurfaceResourceCodes = new Set((Array.isArray(config.data?.resources) ? config.data.resources : [])
+        .map(resource => String(resource.code || ''))
+        .filter(code => /^[a-z][a-z0-9-]{0,62}$/.test(code)));
     for (const [device, surface] of [
         ['desktop', desktop],
         ['mobile', mobile],
@@ -1538,8 +1544,16 @@ function validateApplicationAuthentication(value, routeDeclarations, config, poi
         if (routesByCode.has(surface.routeCode)) {
             fail('NATIVE_APPLICATION_AUTH_SURFACE_CODE_CONFLICT', `${pointer}/surfaces/${device}/routeCode`);
         }
-        const defaultRoute = routesByCode.get(surface.defaultRouteCode);
-        const defaultPath = String(defaultRoute?.path || '');
+        const generatedUserRoute = /^user\.([a-z][a-z0-9-]{0,62})\.(records|submit)$/.exec(String(surface.defaultRouteCode || ''));
+        let defaultRoute = routesByCode.get(surface.defaultRouteCode);
+        let defaultPath = String(defaultRoute?.path || '');
+        if (generatedUserRoute && userSurfaceResourceCodes.has(generatedUserRoute[1])) {
+            const base = generatedUserRoute[2] === 'records'
+                ? `/my/${generatedUserRoute[1]}`
+                : `/my/${generatedUserRoute[1]}/submit`;
+            defaultRoute = { surface: 'user', path: device === 'mobile' ? `/m${base}` : base };
+            defaultPath = String(defaultRoute.path);
+        }
         const deviceMismatch = device === 'desktop'
             ? defaultPath === '/m' || defaultPath.startsWith('/m/')
             : !(defaultPath === '/m' || defaultPath.startsWith('/m/'));
@@ -2441,6 +2455,8 @@ const ROUTE_MANIFEST_KINDS = new Set([
     'workflow-launch',
     'workflow-task',
     'workflow-instance',
+    'resource-records',
+    'resource-submit',
 ]);
 function validateRouteManifest(value, pointer, appCode) {
     const manifest = object(value, pointer);
@@ -2464,8 +2480,10 @@ function validateRouteManifest(value, pointer, appCode) {
     routes.forEach((rawEntry, index) => {
         const entryPointer = `${pointer}/routes/${index}`;
         const entry = object(rawEntry, entryPointer);
+        const resourceKinds = entry.kind === 'resource-records' || entry.kind === 'resource-submit';
         exactKeys(entry, ['code', 'kind', 'desktop', 'mobile'], entryPointer, [
             'workflowCode',
+            ...(resourceKinds ? ['resourceCode'] : []),
         ]);
         const code = requiredString(entry.code, `${entryPointer}/code`, 255);
         if (codes.has(code))
@@ -2478,6 +2496,13 @@ function validateRouteManifest(value, pointer, appCode) {
         if (entry.workflowCode !== undefined) {
             stableCode(entry.workflowCode, `${entryPointer}/workflowCode`);
         }
+        if (resourceKinds) {
+            const resourceCodeValue = resourceCode(entry.resourceCode, `${entryPointer}/resourceCode`);
+            equal(code, `user.${resourceCodeValue}.${entry.kind === 'resource-records' ? 'records' : 'submit'}`, `${entryPointer}/code`);
+        }
+        else if (entry.resourceCode !== undefined) {
+            fail('NATIVE_PROPERTY_UNKNOWN', `${entryPointer}/resourceCode`);
+        }
         const desktop = validateRouteManifestRoute(entry.desktop, `${entryPointer}/desktop`, appCode);
         const mobile = validateRouteManifestRoute(entry.mobile, `${entryPointer}/mobile`, appCode);
         if (desktop.surface !== 'user') {
@@ -2593,25 +2618,41 @@ function compileRouteManifestRoute(routeCode, path, surface, page) {
         requiresAuthentication: true,
     };
 }
-function standardRouteCode(kind, device, workflowCode) {
+function standardRouteCode(kind, device, workflowCode, resourceCode) {
     if (kind === 'workflow-launch') {
         return `workflow.${workflowCode}.launch.${device}`;
     }
     if (kind === 'application-todo-center') {
         return `application.todo-center.${device}`;
     }
+    if (kind === 'resource-records') {
+        return `user.${resourceCode}.records.${device}`;
+    }
+    if (kind === 'resource-submit') {
+        return `user.${resourceCode}.submit.${device}`;
+    }
     return `${kind.replace(/-/g, '.')}.${device}`;
 }
+function resourceCapabilitiesOf(appCode, resourceCodeValue) {
+    const prefix = `app:${appCode}:data:${resourceCodeValue}`;
+    return {
+        read: `${prefix}:read`,
+        create: `${prefix}:create`,
+        update: `${prefix}:update`,
+        delete: `${prefix}:delete`,
+    };
+}
 function compileRouteManifest(config) {
     const appCode = config.appCode;
     const routes = [];
-    const addRoute = (code, kind, desktopPath, mobilePath, workflowCode, access) => {
+    const addRoute = (code, kind, desktopPath, mobilePath, workflowCode, access, resourceCodeValue) => {
         routes.push({
             code,
             kind,
             ...(workflowCode ? { workflowCode } : {}),
-            desktop: compileRouteManifestRoute(standardRouteCode(kind, 'desktop', workflowCode), desktopPath, 'user', access),
-            mobile: compileRouteManifestRoute(standardRouteCode(kind, 'mobile', workflowCode), mobilePath, 'user', access),
+            ...(resourceCodeValue ? { resourceCode: resourceCodeValue } : {}),
+            desktop: compileRouteManifestRoute(standardRouteCode(kind, 'desktop', workflowCode, resourceCodeValue), desktopPath, 'user', access),
+            mobile: compileRouteManifestRoute(standardRouteCode(kind, 'mobile', workflowCode, resourceCodeValue), mobilePath, 'user', access),
         });
     };
     if (config.frontend.user.applicationTodoCenter === true) {
@@ -4131,6 +4172,75 @@ function validateWorkflowDefinitionBinding(definition, binding, pointer) {
         }
     }
 }
+/**
+ * 生成式用户标准面的路由事实由工具链编译器产出；配置 bundle 不携带
+ * userSurface。闭合时按配置事实校验这些路由（资源存在、能力等于该资源
+ * read/create、路径与码形状稳定），通过后并入期望契约并重算清单摘要。
+ * 路由本身仍受能力门禁约束，注入不产生任何额外授权。
+ */
+function mergeUserSurfaceRoutes(expectedContract, contract, config) {
+    const manifest = object(contract.routeManifest, '/contracts/routeManifest');
+    const expectedManifest = object(expectedContract.routeManifest, '/contracts/routeManifest');
+    const resources = new Map();
+    for (const raw of boundedArray(config.data?.resources, '/config/data/resources', 100)) {
+        const resource = object(raw, '/config/data/resources');
+        resources.set(String(resource.code || ''), resource);
+    }
+    const existingCodes = new Set(boundedArray(expectedManifest.routes, '/contracts/routeManifest/routes', 1000).map(entry => String(object(entry, '/contracts/routeManifest/routes').code || '')));
+    const accepted = [];
+    for (const rawEntry of boundedArray(manifest.routes, '/contracts/routeManifest/routes', 1000)) {
+        const entry = object(rawEntry, '/contracts/routeManifest/routes');
+        const kind = String(entry.kind || '');
+        if (kind !== 'resource-records' && kind !== 'resource-submit')
+            continue;
+        const resourceCodeValue = String(entry.resourceCode || '');
+        const resource = resources.get(resourceCodeValue);
+        if (!resource) {
+            fail('NATIVE_ROUTE_MANIFEST_RESOURCE_UNKNOWN', `/contracts/routeManifest/routes`);
+        }
+        const suffix = kind === 'resource-records' ? 'records' : 'submit';
+        const code = `user.${resourceCodeValue}.${suffix}`;
+        equal(String(entry.code || ''), code, '/contracts/routeManifest/routes/code');
+        const operation = kind === 'resource-records' ? 'read' : 'create';
+        const capability = String(object(resource.capabilities, '/config/data/resources/capabilities')[operation] || '');
+        for (const device of ['desktop', 'mobile']) {
+            const route = object(entry[device], `/contracts/routeManifest/routes/${device}`);
+            const prefix = device === 'mobile' ? '/m/my/' : '/my/';
+            const suffixPath = kind === 'resource-records'
+                ? `${prefix}${resourceCodeValue}`
+                : `${prefix}${resourceCodeValue}/submit`;
+            equal(String(route.path || ''), suffixPath, `/contracts/routeManifest/routes/${device}/path`);
+            equal(String(route.capability || ''), capability, `/contracts/routeManifest/routes/${device}/capability`);
+            equal(String(route.routeCode || ''), `${code}.${device}`, `/contracts/routeManifest/routes/${device}/routeCode`);
+        }
+        if (existingCodes.has(code) || accepted.some(item => String(item.code) === code)) {
+            fail('NATIVE_ROUTE_MANIFEST_DUPLICATE', '/contracts/routeManifest/routes/code');
+        }
+        accepted.push(entry);
+    }
+    if (!accepted.length)
+        return;
+    expectedManifest.routes = boundedArray([...expectedManifest.routes, ...accepted], '/contracts/routeManifest/routes', 1000).sort((left, right) => compareText(String(object(left, 'x').code || ''), String(object(right, 'x').code || '')));
+    // rootEntry 指向已接受的 records 路由时同样并入。
+    const rootCode = String(object(manifest.rootEntry, 'x').code || '');
+    const homeEntry = accepted.find(entry => String(entry.code) === rootCode && entry.kind === 'resource-records');
+    if (homeEntry) {
+        const root = object(manifest.rootEntry, 'x');
+        expectedManifest.rootEntry = {
+            code: rootCode,
+            desktop: String(root.desktop || ''),
+            mobile: String(root.mobile || ''),
+        };
+    }
+    expectedManifest.digest = sha256Canonical({
+        schemaVersion: expectedManifest.schemaVersion,
+        appCode: expectedManifest.appCode,
+        devicePolicy: expectedManifest.devicePolicy,
+        rootEntry: expectedManifest.rootEntry,
+        authentication: expectedManifest.authentication,
+        routes: expectedManifest.routes,
+    });
+}
 function validateResource(raw, pointer, appCode) {
     const resource = object(raw, pointer);
     exactKeys(resource, [