openxiangda-devkit-core 2.0.0-alpha.12 → 2.0.0-alpha.121

package/dist/compiler/permission-review.d.ts

@@ -0,0 +1,139 @@
+import { type ConfigurationBundleV3, type ContractBundleV3 } from 'openxiangda-contracts';
+export type PermissionReviewFieldRequirement = {
+    kind: 'inherit-resource-operation';
+} | {
+    kind: 'deny';
+} | {
+    kind: 'all-of';
+    capabilityCodes: string[];
+};
+/**
+ * A normalized review of sealed declarations, never an authorization engine.
+ * References join roles to capability requirements and pages to resources/views;
+ * no role × page × field cross product or new grant state is generated.
+ */
+export declare function buildPermissionReview(configuration: ConfigurationBundleV3, contracts: ContractBundleV3): {
+    digest: string;
+    schemaVersion: "openxiangda.permission-review/v2";
+    appCode: string;
+    configDigest: string;
+    contractDigest: string;
+    authority: "declaration-projection";
+    runtimeAuthorizationRequired: true;
+    semantics: {
+        roleCapabilities: "sealed-declared-grants; current-user application roles are unioned";
+        roleDeniedCapabilities: "removed from that role during compilation; not a global deny across roles";
+        capabilityMatch: "static prerequisite only; never runtime allow";
+        fieldPolicies: "resource operation is required; field rules can only narrow it; empty is deny";
+        hiddenFields: "presentation only; not an authorization rule";
+        rowPolicies: "raw declarations; evaluated by the platform with current identity, grants and record facts";
+        workflowTasks: "platform Task Surface and fresh command token decide current participant, state, field and operation access";
+        navigation: "page selection and visibility do not grant resource or operation access";
+        perspectives: "read projections only; never replace the actor or mutation/workflow authorization";
+    };
+    roles: {
+        capabilityCodes: string[];
+        description?: string;
+        code: string;
+        name: string;
+    }[];
+    capabilities: import("openxiangda-contracts").AppCapabilityContract[];
+    perspectives: import("openxiangda-contracts").AppPerspectiveContract[];
+    pages: {
+        adminAccess: import("openxiangda-contracts").AppFrontendRouteAccess | null;
+        admin: import("openxiangda-contracts").AppAdminPageContract[];
+        custom: import("openxiangda-contracts").AppFrontendRouteContract[];
+        standard: import("openxiangda-contracts").AppRouteManifestEntryV3[];
+    };
+    resources: {
+        code: string;
+        name: string;
+        operationCapabilities: {
+            read: string;
+            create: string;
+            update: string;
+            delete: string;
+        };
+        dataPolicyCode: string | null;
+        mutationOwner: "native" | "action" | "readonly" | "workflow" | null;
+        generated: {
+            list?: boolean;
+            detail?: boolean;
+            create?: boolean;
+            update?: boolean;
+            delete?: boolean;
+        } | null;
+        views: {
+            code: string;
+            name: string;
+            generated: Required<{
+                list?: boolean;
+                detail?: boolean;
+                create?: boolean;
+                update?: boolean;
+                delete?: boolean;
+            }>;
+            fieldOrder: {
+                list: string[];
+                form: string[];
+                detail: string[];
+            };
+            mobile: {
+                enabled: boolean;
+            };
+        }[];
+        defaultFieldOrder: {
+            list: string[] | null;
+            form: string[] | null;
+            detail: string[] | null;
+        } | null;
+        fields: {
+            code: string;
+            type: "boolean" | "date" | "file" | "subtable" | "text.short" | "text.long" | "text.rich" | "number.integer" | "number.decimal" | "time" | "datetime" | "date-range" | "datetime-range" | "option.single" | "option.multiple" | "cascade.single" | "cascade.multiple" | "user.single" | "user.multiple" | "department.single" | "department.multiple" | "resource-ref.single" | "resource-ref.multiple" | "image" | "signature" | "address" | "location" | "uuid" | "json" | "serial-number";
+            label: string;
+            hidden: boolean;
+            system: boolean;
+            read: PermissionReviewFieldRequirement;
+            create: PermissionReviewFieldRequirement;
+            update: PermissionReviewFieldRequirement;
+            mask: "null" | "omit" | null;
+        }[];
+    }[];
+    authorization: {
+        authenticatedUserRoleCode: string | null;
+        dataPolicies: import("openxiangda-contracts").AppDataPolicyDeclaration[];
+        scopeDimensions: import("openxiangda-contracts").AppScopeDimensionDeclaration[];
+        scopeSources: import("openxiangda-contracts").AppScopeSourceDeclaration[];
+        roleMembershipSources: import("openxiangda-contracts").AppRoleMembershipSourceDeclaration[];
+        relationshipGrantSources: import("openxiangda-contracts").AppRelationshipGrantSourceDeclaration[];
+        authorizationTransitions: import("openxiangda-contracts").AppAuthorizationTransitionDeclaration[];
+        publicAccess: import("openxiangda-contracts").AnonymousPublicAccessContractV2 | null;
+    };
+    operations: import("openxiangda-contracts").AppApiOperationContract[];
+    workflows: {
+        runtimeAuthorizationRequired: true;
+        contracts: import("openxiangda-contracts").AppWorkflowContract[];
+        definitions: {
+            workflowCode: string;
+            version: number;
+            subject: import("openxiangda-contracts").WorkflowSubjectDefinition;
+            organizationContext: {
+                department?: {
+                    source: "none" | "user_primary_department" | "choose_if_multiple" | "always_choose" | "fixed" | "from_input" | "from_role_scope";
+                    required?: boolean;
+                    value?: string;
+                    path?: string;
+                    dimension?: string;
+                };
+            } | null;
+            startAt: string;
+            nodes: Record<string, import("openxiangda-contracts").WorkflowNode>;
+        }[];
+        bindings: import("openxiangda-contracts").NativeWorkflowBindingDeclaration[];
+        activations: import("openxiangda-contracts").NativeWorkflowActivationDeclaration[];
+        providers: import("openxiangda-contracts").NativeWorkflowProviderDeclaration[];
+        editableParameters: import("openxiangda-contracts").NativeWorkflowEditableParameterDeclaration[];
+    };
+};
+export type PermissionReview = ReturnType<typeof buildPermissionReview>;
+//# sourceMappingURL=permission-review.d.ts.map

package/dist/compiler/permission-review.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"permission-review.d.ts","sourceRoot":"","sources":["../../src/compiler/permission-review.ts"],"names":[],"mappings":"AAAA,OAAO,EAGL,KAAK,qBAAqB,EAC1B,KAAK,gBAAgB,EAEtB,MAAM,uBAAuB,CAAC;AAE/B,MAAM,MAAM,gCAAgC,GACxC;IAAE,IAAI,EAAE,4BAA4B,CAAA;CAAE,GACtC;IAAE,IAAI,EAAE,MAAM,CAAA;CAAE,GAChB;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,eAAe,EAAE,MAAM,EAAE,CAAA;CAAE,CAAC;AAgBlD;;;;GAIG;AACH,wBAAgB,qBAAqB,CACnC,aAAa,EAAE,qBAAqB,EACpC,SAAS,EAAE,gBAAgB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;4BAmIo7mD,CAAC;yBAA4B,CAAC;wBAA0B,CAAC;6BAAqH,CAAC;;;;;;;;;;;EAH/nnD;AAED,MAAM,MAAM,gBAAgB,GAAG,UAAU,CAAC,OAAO,qBAAqB,CAAC,CAAC"}

package/dist/compiler/permission-review.js

@@ -0,0 +1,131 @@
+import { canonicalJson, sha256Digest, } from 'openxiangda-contracts';
+function fieldRequirement(policy, operation) {
+    const capabilities = policy[operation];
+    if (capabilities === undefined)
+        return { kind: 'inherit-resource-operation' };
+    if (capabilities.length === 0)
+        return { kind: 'deny' };
+    return { kind: 'all-of', capabilityCodes: [...capabilities].sort() };
+}
+function byCode(entries) {
+    return [...entries].sort((left, right) => left.code.localeCompare(right.code));
+}
+/**
+ * A normalized review of sealed declarations, never an authorization engine.
+ * References join roles to capability requirements and pages to resources/views;
+ * no role × page × field cross product or new grant state is generated.
+ */
+export function buildPermissionReview(configuration, contracts) {
+    if (configuration.appCode !== contracts.appCode ||
+        sha256Digest(configuration) !== contracts.configDigest) {
+        throw new Error('PERMISSION_REVIEW_CONFIG_MISMATCH: use configuration and contracts from the same compilation');
+    }
+    const adminRouteCodes = new Set(contracts.adminPages.flatMap(page => page.routeCode ? [page.routeCode] : []));
+    const standardRouteCodes = new Set(contracts.routeManifest.routes.flatMap(route => [
+        route.desktop.routeCode,
+        route.mobile.routeCode,
+    ]));
+    const review = {
+        schemaVersion: 'openxiangda.permission-review/v2',
+        appCode: configuration.appCode,
+        configDigest: contracts.configDigest,
+        contractDigest: sha256Digest(contracts),
+        authority: 'declaration-projection',
+        runtimeAuthorizationRequired: true,
+        semantics: {
+            roleCapabilities: 'sealed-declared-grants; current-user application roles are unioned',
+            roleDeniedCapabilities: 'removed from that role during compilation; not a global deny across roles',
+            capabilityMatch: 'static prerequisite only; never runtime allow',
+            fieldPolicies: 'resource operation is required; field rules can only narrow it; empty is deny',
+            hiddenFields: 'presentation only; not an authorization rule',
+            rowPolicies: 'raw declarations; evaluated by the platform with current identity, grants and record facts',
+            workflowTasks: 'platform Task Surface and fresh command token decide current participant, state, field and operation access',
+            navigation: 'page selection and visibility do not grant resource or operation access',
+            perspectives: 'read projections only; never replace the actor or mutation/workflow authorization',
+        },
+        roles: byCode(configuration.authz.roles).map(role => ({
+            code: role.code,
+            name: role.name,
+            ...(role.description ? { description: role.description } : {}),
+            capabilityCodes: [...role.capabilities].sort(),
+        })),
+        capabilities: byCode(contracts.capabilities),
+        perspectives: byCode(contracts.perspectives),
+        pages: {
+            adminAccess: contracts.adminAccess ?? null,
+            admin: byCode(contracts.adminPages),
+            custom: byCode(contracts.routes.filter(route => !adminRouteCodes.has(route.code) && !standardRouteCodes.has(route.code))),
+            standard: byCode(contracts.routeManifest.routes),
+        },
+        resources: byCode(configuration.data.resources).map(resource => ({
+            code: resource.code,
+            name: resource.name,
+            operationCapabilities: resource.capabilities,
+            dataPolicyCode: resource.dataPolicyCode ?? null,
+            mutationOwner: resource.surface?.mutationOwner ?? null,
+            generated: resource.surface?.generated ?? null,
+            views: byCode(resource.surface?.views ?? []).map(view => ({
+                code: view.code,
+                name: view.name,
+                generated: view.generated,
+                fieldOrder: {
+                    list: view.list.fieldOrder,
+                    form: view.form.fieldOrder,
+                    detail: view.detail.fieldOrder,
+                },
+                mobile: view.mobile,
+            })),
+            defaultFieldOrder: resource.surface ? {
+                list: resource.surface.list?.fieldOrder ?? null,
+                form: resource.surface.form?.fieldOrder ?? null,
+                detail: resource.surface.detail?.fieldOrder ?? null,
+            } : null,
+            fields: byCode(resource.schema.fields).map(field => {
+                const policy = resource.fieldPolicies[field.code] ?? {};
+                const surface = resource.surface?.fields[field.code];
+                return {
+                    code: field.code,
+                    type: field.type,
+                    label: surface?.label ?? field.code,
+                    hidden: surface?.hidden ?? false,
+                    system: surface?.system ?? false,
+                    read: fieldRequirement(policy, 'read'),
+                    create: fieldRequirement(policy, 'create'),
+                    update: fieldRequirement(policy, 'update'),
+                    mask: policy.mask ?? null,
+                };
+            }),
+        })),
+        authorization: {
+            authenticatedUserRoleCode: configuration.authz.authenticatedUserRoleCode ?? null,
+            dataPolicies: byCode(configuration.authz.dataPolicies),
+            scopeDimensions: byCode(configuration.authz.scopeDimensions),
+            scopeSources: byCode(configuration.authz.scopeSources),
+            roleMembershipSources: byCode(configuration.authz.roleMembershipSources),
+            relationshipGrantSources: byCode(configuration.authz.relationshipGrantSources),
+            authorizationTransitions: [...configuration.authz.authorizationTransitions].sort((left, right) => left.fromAuthzDigest.localeCompare(right.fromAuthzDigest)),
+            publicAccess: configuration.frontend.publicAccess ?? null,
+        },
+        operations: byCode(contracts.operations),
+        workflows: {
+            runtimeAuthorizationRequired: true,
+            contracts: byCode(contracts.workflows),
+            definitions: [...configuration.workflows.definitions].sort((left, right) => left.definition.code.localeCompare(right.definition.code) || left.version - right.version).map(({ version, definition }) => ({
+                workflowCode: definition.code,
+                version,
+                subject: definition.subject,
+                organizationContext: definition.organizationContext ?? null,
+                startAt: definition.startAt,
+                nodes: definition.nodes,
+            })),
+            bindings: [...configuration.workflows.bindings].sort((left, right) => left.binding.workflowCode.localeCompare(right.binding.workflowCode) || left.version - right.version),
+            activations: [...configuration.workflows.activations].sort((left, right) => left.workflowCode.localeCompare(right.workflowCode)),
+            providers: byCode(configuration.workflows.providers),
+            editableParameters: byCode(configuration.workflows.editableParameters),
+        },
+    };
+    // Do not share mutable arrays/objects with compiler output or change its digest.
+    const value = JSON.parse(canonicalJson(review));
+    return { ...value, digest: sha256Digest(value) };
+}
+//# sourceMappingURL=permission-review.js.map

package/dist/compiler/permission-review.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"permission-review.js","sourceRoot":"","sources":["../../src/compiler/permission-review.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,aAAa,EACb,YAAY,GAIb,MAAM,uBAAuB,CAAC;AAO/B,SAAS,gBAAgB,CACvB,MAAuB,EACvB,SAAuC;IAEvC,MAAM,YAAY,GAAG,MAAM,CAAC,SAAS,CAAC,CAAC;IACvC,IAAI,YAAY,KAAK,SAAS;QAAE,OAAO,EAAE,IAAI,EAAE,4BAA4B,EAAE,CAAC;IAC9E,IAAI,YAAY,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;IACvD,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,eAAe,EAAE,CAAC,GAAG,YAAY,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;AACvE,CAAC;AAED,SAAS,MAAM,CAA6B,OAAqB;IAC/D,OAAO,CAAC,GAAG,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;AACjF,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,qBAAqB,CACnC,aAAoC,EACpC,SAA2B;IAE3B,IACE,aAAa,CAAC,OAAO,KAAK,SAAS,CAAC,OAAO;QAC3C,YAAY,CAAC,aAAa,CAAC,KAAK,SAAS,CAAC,YAAY,EACtD,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,8FAA8F,CAAC,CAAC;IAClH,CAAC;IAED,MAAM,eAAe,GAAG,IAAI,GAAG,CAC7B,SAAS,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAC7E,CAAC;IACF,MAAM,kBAAkB,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,aAAa,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACjF,KAAK,CAAC,OAAO,CAAC,SAAS;QACvB,KAAK,CAAC,MAAM,CAAC,SAAS;KACvB,CAAC,CAAC,CAAC;IACJ,MAAM,MAAM,GAAG;QACb,aAAa,EAAE,kCAA2C;QAC1D,OAAO,EAAE,aAAa,CAAC,OAAO;QAC9B,YAAY,EAAE,SAAS,CAAC,YAAY;QACpC,cAAc,EAAE,YAAY,CAAC,SAAS,CAAC;QACvC,SAAS,EAAE,wBAAiC;QAC5C,4BAA4B,EAAE,IAAa;QAC3C,SAAS,EAAE;YACT,gBAAgB,EAAE,oEAA6E;YAC/F,sBAAsB,EAAE,2EAAoF;YAC5G,eAAe,EAAE,+CAAwD;YACzE,aAAa,EAAE,+EAAwF;YACvG,YAAY,EAAE,8CAAuD;YACrE,WAAW,EAAE,4FAAqG;YAClH,aAAa,EAAE,6GAAsH;YACrI,UAAU,EAAE,yEAAkF;YAC9F,YAAY,EAAE,mFAA4F;SAC3G;QACD,KAAK,EAAE,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACpD,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC9D,eAAe,EAAE,CAAC,GAAG,IAAI,CAAC,YAAY,CAAC,CAAC,IAAI,EAAE;SAC/C,CAAC,CAAC;QACH,YAAY,EAAE,MAAM,CAAC,SAAS,CAAC,YAAY,CAAC;QAC5C,YAAY,EAAE,MAAM,CAAC,SAAS,CAAC,YAAY,CAAC;QAC5C,KAAK,EAAE;YACL,WAAW,EAAE,SAAS,CAAC,WAAW,IAAI,IAAI;YAC1C,KAAK,EAAE,MAAM,CAAC,SAAS,CAAC,UAAU,CAAC;YACnC,MAAM,EAAE,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAC7C,CAAC,eAAe,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CACxE,CAAC;YACF,QAAQ,EAAE,MAAM,CAAC,SAAS,CAAC,aAAa,CAAC,MAAM,CAAC;SACjD;QACD,SAAS,EAAE,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;YAC/D,IAAI,EAAE,QAAQ,CAAC,IAAI;YACnB,IAAI,EAAE,QAAQ,CAAC,IAAI;YACnB,qBAAqB,EAAE,QAAQ,CAAC,YAAY;YAC5C,cAAc,EAAE,QAAQ,CAAC,cAAc,IAAI,IAAI;YAC/C,aAAa,EAAE,QAAQ,CAAC,OAAO,EAAE,aAAa,IAAI,IAAI;YACtD,SAAS,EAAE,QAAQ,CAAC,OAAO,EAAE,SAAS,IAAI,IAAI;YAC9C,KAAK,EAAE,MAAM,CAAC,QAAQ,CAAC,OAAO,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;gBACxD,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,SAAS,EAAE,IAAI,CAAC,SAAS;gBACzB,UAAU,EAAE;oBACV,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,UAAU;oBAC1B,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,UAAU;oBAC1B,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,UAAU;iBAC/B;gBACD,MAAM,EAAE,IAAI,CAAC,MAAM;aACpB,CAAC,CAAC;YACH,iBAAiB,EAAE,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC;gBACpC,IAAI,EAAE,QAAQ,CAAC,OAAO,CAAC,IAAI,EAAE,UAAU,IAAI,IAAI;gBAC/C,IAAI,EAAE,QAAQ,CAAC,OAAO,CAAC,IAAI,EAAE,UAAU,IAAI,IAAI;gBAC/C,MAAM,EAAE,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE,UAAU,IAAI,IAAI;aACpD,CAAC,CAAC,CAAC,IAAI;YACR,MAAM,EAAE,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE;gBACjD,MAAM,MAAM,GAAG,QAAQ,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;gBACxD,MAAM,OAAO,GAAG,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;gBACrD,OAAO;oBACL,IAAI,EAAE,KAAK,CAAC,IAAI;oBAChB,IAAI,EAAE,KAAK,CAAC,IAAI;oBAChB,KAAK,EAAE,OAAO,EAAE,KAAK,IAAI,KAAK,CAAC,IAAI;oBACnC,MAAM,EAAE,OAAO,EAAE,MAAM,IAAI,KAAK;oBAChC,MAAM,EAAE,OAAO,EAAE,MAAM,IAAI,KAAK;oBAChC,IAAI,EAAE,gBAAgB,CAAC,MAAM,EAAE,MAAM,CAAC;oBACtC,MAAM,EAAE,gBAAgB,CAAC,MAAM,EAAE,QAAQ,CAAC;oBAC1C,MAAM,EAAE,gBAAgB,CAAC,MAAM,EAAE,QAAQ,CAAC;oBAC1C,IAAI,EAAE,MAAM,CAAC,IAAI,IAAI,IAAI;iBAC1B,CAAC;YACJ,CAAC,CAAC;SACH,CAAC,CAAC;QACH,aAAa,EAAE;YACb,yBAAyB,EAAE,aAAa,CAAC,KAAK,CAAC,yBAAyB,IAAI,IAAI;YAChF,YAAY,EAAE,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,YAAY,CAAC;YACtD,eAAe,EAAE,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,eAAe,CAAC;YAC5D,YAAY,EAAE,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,YAAY,CAAC;YACtD,qBAAqB,EAAE,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,qBAAqB,CAAC;YACxE,wBAAwB,EAAE,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,wBAAwB,CAAC;YAC9E,wBAAwB,EAAE,CAAC,GAAG,aAAa,CAAC,KAAK,CAAC,wBAAwB,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAC/F,IAAI,CAAC,eAAe,CAAC,aAAa,CAAC,KAAK,CAAC,eAAe,CAAC,CAC1D;YACD,YAAY,EAAE,aAAa,CAAC,QAAQ,CAAC,YAAY,IAAI,IAAI;SAC1D;QACD,UAAU,EAAE,MAAM,CAAC,SAAS,CAAC,UAAU,CAAC;QACxC,SAAS,EAAE;YACT,4BAA4B,EAAE,IAAa;YAC3C,SAAS,EAAE,MAAM,CAAC,SAAS,CAAC,SAAS,CAAC;YACtC,WAAW,EAAE,CAAC,GAAG,aAAa,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CACzE,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,OAAO,GAAG,KAAK,CAAC,OAAO,CAC1F,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC,CAAC;gBAClC,YAAY,EAAE,UAAU,CAAC,IAAI;gBAC7B,OAAO;gBACP,OAAO,EAAE,UAAU,CAAC,OAAO;gBAC3B,mBAAmB,EAAE,UAAU,CAAC,mBAAmB,IAAI,IAAI;gBAC3D,OAAO,EAAE,UAAU,CAAC,OAAO;gBAC3B,KAAK,EAAE,UAAU,CAAC,KAAK;aACxB,CAAC,CAAC;YACH,QAAQ,EAAE,CAAC,GAAG,aAAa,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CACnE,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,aAAa,CAAC,KAAK,CAAC,OAAO,CAAC,YAAY,CAAC,IAAI,IAAI,CAAC,OAAO,GAAG,KAAK,CAAC,OAAO,CACpG;YACD,WAAW,EAAE,CAAC,GAAG,aAAa,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CACzE,IAAI,CAAC,YAAY,CAAC,aAAa,CAAC,KAAK,CAAC,YAAY,CAAC,CACpD;YACD,SAAS,EAAE,MAAM,CAAC,aAAa,CAAC,SAAS,CAAC,SAAS,CAAC;YACpD,kBAAkB,EAAE,MAAM,CAAC,aAAa,CAAC,SAAS,CAAC,kBAAkB,CAAC;SACvE;KACF,CAAC;IACF,iFAAiF;IACjF,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,MAAM,CAAC,CAAkB,CAAC;IACjE,OAAO,EAAE,GAAG,KAAK,EAAE,MAAM,EAAE,YAAY,CAAC,KAAK,CAAC,EAAE,CAAC;AACnD,CAAC"}

package/dist/compiler/schema-composition.d.ts

@@ -0,0 +1,21 @@
+import { type AppApiOperationDeclaration, type OpenXiangdaJsonSchema } from 'openxiangda-contracts';
+import type { AppDataResourceDeclaration } from './config.js';
+export type JsonSchemaDefinitions = Readonly<Record<string, OpenXiangdaJsonSchema>>;
+export interface ResourceRecordSchemaOptions {
+    /** Defaults to every declared field, in declaration order. */
+    fields?: readonly string[];
+    /** Defaults to fields declared with `required: true`. */
+    required?: 'declared' | 'none' | readonly string[];
+    /** Defaults to false so operation payloads cannot smuggle undeclared fields. */
+    additionalProperties?: boolean;
+}
+export interface AppOperationSchemasInput {
+    request: OpenXiangdaJsonSchema;
+    response: OpenXiangdaJsonSchema;
+    definitions?: JsonSchemaDefinitions;
+}
+export declare function schemaRef(definitionName: string): OpenXiangdaJsonSchema;
+export declare function composeJsonSchema(schema: OpenXiangdaJsonSchema, definitions?: JsonSchemaDefinitions): OpenXiangdaJsonSchema;
+export declare function composeAppOperationSchemas(input: AppOperationSchemasInput): Pick<AppApiOperationDeclaration, 'requestSchema' | 'responseSchema'>;
+export declare function resourceRecordSchema(resource: AppDataResourceDeclaration, options?: ResourceRecordSchemaOptions): OpenXiangdaJsonSchema;
+//# sourceMappingURL=schema-composition.d.ts.map

package/dist/compiler/schema-composition.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema-composition.d.ts","sourceRoot":"","sources":["../../src/compiler/schema-composition.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,KAAK,0BAA0B,EAC/B,KAAK,qBAAqB,EAC3B,MAAM,uBAAuB,CAAC;AAC/B,OAAO,KAAK,EAEV,0BAA0B,EAC3B,MAAM,aAAa,CAAC;AAQrB,MAAM,MAAM,qBAAqB,GAAG,QAAQ,CAC1C,MAAM,CAAC,MAAM,EAAE,qBAAqB,CAAC,CACtC,CAAC;AAEF,MAAM,WAAW,2BAA2B;IAC1C,8DAA8D;IAC9D,MAAM,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC3B,yDAAyD;IACzD,QAAQ,CAAC,EAAE,UAAU,GAAG,MAAM,GAAG,SAAS,MAAM,EAAE,CAAC;IACnD,gFAAgF;IAChF,oBAAoB,CAAC,EAAE,OAAO,CAAC;CAChC;AAED,MAAM,WAAW,wBAAwB;IACvC,OAAO,EAAE,qBAAqB,CAAC;IAC/B,QAAQ,EAAE,qBAAqB,CAAC;IAChC,WAAW,CAAC,EAAE,qBAAqB,CAAC;CACrC;AAED,wBAAgB,SAAS,CAAC,cAAc,EAAE,MAAM,GAAG,qBAAqB,CAGvE;AAED,wBAAgB,iBAAiB,CAC/B,MAAM,EAAE,qBAAqB,EAC7B,WAAW,GAAE,qBAA0B,GACtC,qBAAqB,CAiCvB;AAED,wBAAgB,0BAA0B,CACxC,KAAK,EAAE,wBAAwB,GAC9B,IAAI,CAAC,0BAA0B,EAAE,eAAe,GAAG,gBAAgB,CAAC,CAKtE;AAED,wBAAgB,oBAAoB,CAClC,QAAQ,EAAE,0BAA0B,EACpC,OAAO,GAAE,2BAAgC,GACxC,qBAAqB,CAyCvB"}

package/dist/compiler/schema-composition.js

@@ -0,0 +1,193 @@
+import { fieldValueSchemaForDefinition, } from 'openxiangda-contracts';
+const DEFINITION_NAME = /^[A-Za-z][A-Za-z0-9_-]{0,63}$/;
+const MAX_DEFINITIONS = 64;
+const MAX_RESOURCE_FIELDS = 200;
+const MAX_SCHEMA_NODES = 10_000;
+const MAX_SCHEMA_DEPTH = 32;
+export function schemaRef(definitionName) {
+    assertDefinitionName(definitionName);
+    return { $ref: `#/$defs/${definitionName}` };
+}
+export function composeJsonSchema(schema, definitions = {}) {
+    const root = cloneSchema(schema);
+    const authoredDefinitions = root.$defs;
+    if (authoredDefinitions !== undefined &&
+        (!isRecord(authoredDefinitions) || Array.isArray(authoredDefinitions))) {
+        throw schemaCompositionError('$defs 必须是 JSON Schema 对象字典');
+    }
+    delete root.$defs;
+    const combined = new Map();
+    for (const [name, value] of Object.entries((authoredDefinitions || {}))) {
+        addDefinition(combined, name, value);
+    }
+    for (const [name, value] of Object.entries(definitions)) {
+        addDefinition(combined, name, value);
+    }
+    if (combined.size > MAX_DEFINITIONS) {
+        throw schemaCompositionError(`JSON Schema definitions 不能超过 ${MAX_DEFINITIONS} 个`);
+    }
+    const sortedDefinitions = Object.fromEntries([...combined.entries()].sort(([left], [right]) => left.localeCompare(right)));
+    const composed = combined.size > 0 ? { ...root, $defs: sortedDefinitions } : root;
+    validateLocalReferences(composed, new Set(combined.keys()));
+    return composed;
+}
+export function composeAppOperationSchemas(input) {
+    return {
+        requestSchema: composeJsonSchema(input.request, input.definitions),
+        responseSchema: composeJsonSchema(input.response, input.definitions),
+    };
+}
+export function resourceRecordSchema(resource, options = {}) {
+    const fieldsByCode = new Map(resource.fields.map(field => [field.code, field]));
+    if (fieldsByCode.size !== resource.fields.length) {
+        throw schemaCompositionError(`资源 ${resource.code} 包含重复字段 code`);
+    }
+    const selectedCodes = options.fields
+        ? [...options.fields]
+        : resource.fields.map(field => field.code);
+    if (selectedCodes.length > MAX_RESOURCE_FIELDS) {
+        throw schemaCompositionError(`Resource schema fields 不能超过 ${MAX_RESOURCE_FIELDS} 个`);
+    }
+    assertUniqueSelectedFields(selectedCodes);
+    const selectedFields = selectedCodes.map(code => {
+        const field = fieldsByCode.get(code);
+        if (!field) {
+            throw schemaCompositionError(`资源 ${resource.code} 未声明字段 ${code}`);
+        }
+        return field;
+    });
+    const required = resolveRequiredFields(options.required, selectedFields);
+    const schema = {
+        type: 'object',
+        title: resource.name,
+        additionalProperties: options.additionalProperties === true,
+        properties: Object.fromEntries(selectedFields.map(field => [
+            field.code,
+            projectFieldValueSchema(field),
+        ])),
+        ...(required.length > 0 ? { required } : {}),
+    };
+    return schema;
+}
+function projectFieldValueSchema(field) {
+    const schema = fieldValueSchemaForDefinition(field);
+    schema.title = field.label;
+    if (field.min !== undefined &&
+        (field.type === 'number.integer' || field.type === 'number.decimal')) {
+        schema.minimum = field.min;
+    }
+    if (field.max !== undefined &&
+        (field.type === 'number.integer' || field.type === 'number.decimal')) {
+        schema.maximum = field.max;
+    }
+    if (field.maxLength !== undefined &&
+        (field.type === 'text.short' ||
+            field.type === 'text.long' ||
+            field.type === 'text.rich')) {
+        schema.maxLength = Math.min(typeof schema.maxLength === 'number'
+            ? schema.maxLength
+            : field.maxLength, field.maxLength);
+    }
+    if (field.file?.maxCount !== undefined && isArraySchema(schema)) {
+        schema.maxItems = Math.min(typeof schema.maxItems === 'number' ? schema.maxItems : field.file.maxCount, field.file.maxCount);
+    }
+    if (field.subtable?.maxRows !== undefined &&
+        field.type === 'subtable' &&
+        isArraySchema(schema)) {
+        schema.maxItems = Math.min(typeof schema.maxItems === 'number'
+            ? schema.maxItems
+            : field.subtable.maxRows, field.subtable.maxRows);
+    }
+    if (field.type === 'resource-ref.single' && field.source) {
+        constrainResourceCode(schema, field.source.resourceCode);
+    }
+    if (field.type === 'resource-ref.multiple' && field.source) {
+        const items = isRecord(schema.items) ? schema.items : undefined;
+        if (items)
+            constrainResourceCode(items, field.source.resourceCode);
+    }
+    return schema;
+}
+function constrainResourceCode(schema, resourceCode) {
+    const properties = isRecord(schema.properties)
+        ? schema.properties
+        : undefined;
+    if (properties) {
+        properties.resourceCode = { const: resourceCode };
+    }
+}
+function resolveRequiredFields(required, selectedFields) {
+    if (required === 'none')
+        return [];
+    if (required === undefined || required === 'declared') {
+        return selectedFields
+            .filter(field => field.required === true)
+            .map(field => field.code);
+    }
+    const selected = new Set(selectedFields.map(field => field.code));
+    assertUniqueSelectedFields(required);
+    for (const code of required) {
+        if (!selected.has(code)) {
+            throw schemaCompositionError(`required 引用了未选择字段 ${code}`);
+        }
+    }
+    return [...required];
+}
+function assertUniqueSelectedFields(fields) {
+    if (new Set(fields).size !== fields.length) {
+        throw schemaCompositionError('Resource schema fields 不能重复');
+    }
+}
+function addDefinition(definitions, name, value) {
+    assertDefinitionName(name);
+    if (!isRecord(value) || Array.isArray(value)) {
+        throw schemaCompositionError(`definition ${name} 必须是 JSON Schema 对象`);
+    }
+    if (definitions.has(name)) {
+        throw schemaCompositionError(`definition ${name} 重复`);
+    }
+    definitions.set(name, cloneSchema(value));
+}
+function assertDefinitionName(name) {
+    if (!DEFINITION_NAME.test(name)) {
+        throw schemaCompositionError(`非法 JSON Schema definition 名称: ${name}`);
+    }
+}
+function validateLocalReferences(root, definitions) {
+    let nodes = 0;
+    const visit = (value, depth) => {
+        nodes += 1;
+        if (nodes > MAX_SCHEMA_NODES || depth > MAX_SCHEMA_DEPTH) {
+            throw schemaCompositionError('JSON Schema 超出组合深度或节点上限');
+        }
+        if (Array.isArray(value)) {
+            for (const item of value)
+                visit(item, depth + 1);
+            return;
+        }
+        if (!isRecord(value))
+            return;
+        if ('$ref' in value) {
+            const match = /^#\/\$defs\/([A-Za-z][A-Za-z0-9_-]{0,63})$/.exec(String(value.$ref));
+            if (!match || !definitions.has(match[1])) {
+                throw schemaCompositionError(`只允许引用已声明的本地 $defs: ${value.$ref}`);
+            }
+        }
+        for (const child of Object.values(value))
+            visit(child, depth + 1);
+    };
+    visit(root, 0);
+}
+function cloneSchema(schema) {
+    return structuredClone(schema);
+}
+function isRecord(value) {
+    return typeof value === 'object' && value !== null;
+}
+function schemaCompositionError(message) {
+    return new Error(`OPENXIANGDA_SCHEMA_COMPOSITION_INVALID: ${message}`);
+}
+function isArraySchema(schema) {
+    return schema.type === 'array';
+}
+//# sourceMappingURL=schema-composition.js.map

package/dist/compiler/schema-composition.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema-composition.js","sourceRoot":"","sources":["../../src/compiler/schema-composition.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,6BAA6B,GAG9B,MAAM,uBAAuB,CAAC;AAM/B,MAAM,eAAe,GAAG,+BAA+B,CAAC;AACxD,MAAM,eAAe,GAAG,EAAE,CAAC;AAC3B,MAAM,mBAAmB,GAAG,GAAG,CAAC;AAChC,MAAM,gBAAgB,GAAG,MAAM,CAAC;AAChC,MAAM,gBAAgB,GAAG,EAAE,CAAC;AAqB5B,MAAM,UAAU,SAAS,CAAC,cAAsB;IAC9C,oBAAoB,CAAC,cAAc,CAAC,CAAC;IACrC,OAAO,EAAE,IAAI,EAAE,WAAW,cAAc,EAAE,EAAE,CAAC;AAC/C,CAAC;AAED,MAAM,UAAU,iBAAiB,CAC/B,MAA6B,EAC7B,cAAqC,EAAE;IAEvC,MAAM,IAAI,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC;IACjC,MAAM,mBAAmB,GAAG,IAAI,CAAC,KAAK,CAAC;IACvC,IACE,mBAAmB,KAAK,SAAS;QACjC,CAAC,CAAC,QAAQ,CAAC,mBAAmB,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,mBAAmB,CAAC,CAAC,EACtE,CAAC;QACD,MAAM,sBAAsB,CAAC,4BAA4B,CAAC,CAAC;IAC7D,CAAC;IACD,OAAO,IAAI,CAAC,KAAK,CAAC;IAClB,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAiC,CAAC;IAC1D,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CACxC,CAAC,mBAAmB,IAAI,EAAE,CAA4B,CACvD,EAAE,CAAC;QACF,aAAa,CAAC,QAAQ,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;IACvC,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,CAAC;QACxD,aAAa,CAAC,QAAQ,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;IACvC,CAAC;IACD,IAAI,QAAQ,CAAC,IAAI,GAAG,eAAe,EAAE,CAAC;QACpC,MAAM,sBAAsB,CAC1B,gCAAgC,eAAe,IAAI,CACpD,CAAC;IACJ,CAAC;IACD,MAAM,iBAAiB,GAAG,MAAM,CAAC,WAAW,CAC1C,CAAC,GAAG,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE,EAAE,CAC/C,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAC1B,CACF,CAAC;IACF,MAAM,QAAQ,GACZ,QAAQ,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,IAAI,EAAE,KAAK,EAAE,iBAAiB,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;IACnE,uBAAuB,CAAC,QAAQ,EAAE,IAAI,GAAG,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;IAC5D,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,MAAM,UAAU,0BAA0B,CACxC,KAA+B;IAE/B,OAAO;QACL,aAAa,EAAE,iBAAiB,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,WAAW,CAAC;QAClE,cAAc,EAAE,iBAAiB,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,WAAW,CAAC;KACrE,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,oBAAoB,CAClC,QAAoC,EACpC,UAAuC,EAAE;IAEzC,MAAM,YAAY,GAAG,IAAI,GAAG,CAC1B,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAU,CAAC,CAC3D,CAAC;IACF,IAAI,YAAY,CAAC,IAAI,KAAK,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;QACjD,MAAM,sBAAsB,CAC1B,MAAM,QAAQ,CAAC,IAAI,cAAc,CAClC,CAAC;IACJ,CAAC;IACD,MAAM,aAAa,GAAG,OAAO,CAAC,MAAM;QAClC,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC;QACrB,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC7C,IAAI,aAAa,CAAC,MAAM,GAAG,mBAAmB,EAAE,CAAC;QAC/C,MAAM,sBAAsB,CAC1B,+BAA+B,mBAAmB,IAAI,CACvD,CAAC;IACJ,CAAC;IACD,0BAA0B,CAAC,aAAa,CAAC,CAAC;IAC1C,MAAM,cAAc,GAAG,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE;QAC9C,MAAM,KAAK,GAAG,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACrC,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,MAAM,sBAAsB,CAC1B,MAAM,QAAQ,CAAC,IAAI,UAAU,IAAI,EAAE,CACpC,CAAC;QACJ,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC,CAAC,CAAC;IACH,MAAM,QAAQ,GAAG,qBAAqB,CAAC,OAAO,CAAC,QAAQ,EAAE,cAAc,CAAC,CAAC;IACzE,MAAM,MAAM,GAA0B;QACpC,IAAI,EAAE,QAAQ;QACd,KAAK,EAAE,QAAQ,CAAC,IAAI;QACpB,oBAAoB,EAAE,OAAO,CAAC,oBAAoB,KAAK,IAAI;QAC3D,UAAU,EAAE,MAAM,CAAC,WAAW,CAC5B,cAAc,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;YAC1B,KAAK,CAAC,IAAI;YACV,uBAAuB,CAAC,KAAK,CAAC;SAC/B,CAAC,CACH;QACD,GAAG,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC7C,CAAC;IACF,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,uBAAuB,CAC9B,KAA8B;IAE9B,MAAM,MAAM,GAAG,6BAA6B,CAAC,KAAK,CAA0B,CAAC;IAC7E,MAAM,CAAC,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC;IAC3B,IACE,KAAK,CAAC,GAAG,KAAK,SAAS;QACvB,CAAC,KAAK,CAAC,IAAI,KAAK,gBAAgB,IAAI,KAAK,CAAC,IAAI,KAAK,gBAAgB,CAAC,EACpE,CAAC;QACD,MAAM,CAAC,OAAO,GAAG,KAAK,CAAC,GAAG,CAAC;IAC7B,CAAC;IACD,IACE,KAAK,CAAC,GAAG,KAAK,SAAS;QACvB,CAAC,KAAK,CAAC,IAAI,KAAK,gBAAgB,IAAI,KAAK,CAAC,IAAI,KAAK,gBAAgB,CAAC,EACpE,CAAC;QACD,MAAM,CAAC,OAAO,GAAG,KAAK,CAAC,GAAG,CAAC;IAC7B,CAAC;IACD,IACE,KAAK,CAAC,SAAS,KAAK,SAAS;QAC7B,CAAC,KAAK,CAAC,IAAI,KAAK,YAAY;YAC1B,KAAK,CAAC,IAAI,KAAK,WAAW;YAC1B,KAAK,CAAC,IAAI,KAAK,WAAW,CAAC,EAC7B,CAAC;QACD,MAAM,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,CACzB,OAAO,MAAM,CAAC,SAAS,KAAK,QAAQ;YAClC,CAAC,CAAC,MAAM,CAAC,SAAS;YAClB,CAAC,CAAC,KAAK,CAAC,SAAS,EACnB,KAAK,CAAC,SAAS,CAChB,CAAC;IACJ,CAAC;IACD,IAAI,KAAK,CAAC,IAAI,EAAE,QAAQ,KAAK,SAAS,IAAI,aAAa,CAAC,MAAM,CAAC,EAAE,CAAC;QAChE,MAAM,CAAC,QAAQ,GAAG,IAAI,CAAC,GAAG,CACxB,OAAO,MAAM,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,EAC3E,KAAK,CAAC,IAAI,CAAC,QAAQ,CACpB,CAAC;IACJ,CAAC;IACD,IACE,KAAK,CAAC,QAAQ,EAAE,OAAO,KAAK,SAAS;QACrC,KAAK,CAAC,IAAI,KAAK,UAAU;QACzB,aAAa,CAAC,MAAM,CAAC,EACrB,CAAC;QACD,MAAM,CAAC,QAAQ,GAAG,IAAI,CAAC,GAAG,CACxB,OAAO,MAAM,CAAC,QAAQ,KAAK,QAAQ;YACjC,CAAC,CAAC,MAAM,CAAC,QAAQ;YACjB,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,OAAO,EAC1B,KAAK,CAAC,QAAQ,CAAC,OAAO,CACvB,CAAC;IACJ,CAAC;IACD,IAAI,KAAK,CAAC,IAAI,KAAK,qBAAqB,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;QACzD,qBAAqB,CAAC,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;IAC3D,CAAC;IACD,IAAI,KAAK,CAAC,IAAI,KAAK,uBAAuB,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;QAC3D,MAAM,KAAK,GAAG,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;QAChE,IAAI,KAAK;YAAE,qBAAqB,CAAC,KAAK,EAAE,KAAK,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;IACrE,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,qBAAqB,CAC5B,MAA6B,EAC7B,YAAoB;IAEpB,MAAM,UAAU,GAAG,QAAQ,CAAC,MAAM,CAAC,UAAU,CAAC;QAC5C,CAAC,CAAC,MAAM,CAAC,UAAU;QACnB,CAAC,CAAC,SAAS,CAAC;IACd,IAAI,UAAU,EAAE,CAAC;QACf,UAAU,CAAC,YAAY,GAAG,EAAE,KAAK,EAAE,YAAY,EAAE,CAAC;IACpD,CAAC;AACH,CAAC;AAED,SAAS,qBAAqB,CAC5B,QAAiD,EACjD,cAAyC;IAEzC,IAAI,QAAQ,KAAK,MAAM;QAAE,OAAO,EAAE,CAAC;IACnC,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,KAAK,UAAU,EAAE,CAAC;QACtD,OAAO,cAAc;aAClB,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,QAAQ,KAAK,IAAI,CAAC;aACxC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC9B,CAAC;IACD,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,cAAc,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;IAClE,0BAA0B,CAAC,QAAQ,CAAC,CAAC;IACrC,KAAK,MAAM,IAAI,IAAI,QAAQ,EAAE,CAAC;QAC5B,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YACxB,MAAM,sBAAsB,CAAC,qBAAqB,IAAI,EAAE,CAAC,CAAC;QAC5D,CAAC;IACH,CAAC;IACD,OAAO,CAAC,GAAG,QAAQ,CAAC,CAAC;AACvB,CAAC;AAED,SAAS,0BAA0B,CAAC,MAAyB;IAC3D,IAAI,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,MAAM,EAAE,CAAC;QAC3C,MAAM,sBAAsB,CAAC,6BAA6B,CAAC,CAAC;IAC9D,CAAC;AACH,CAAC;AAED,SAAS,aAAa,CACpB,WAA+C,EAC/C,IAAY,EACZ,KAAc;IAEd,oBAAoB,CAAC,IAAI,CAAC,CAAC;IAC3B,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAC7C,MAAM,sBAAsB,CAAC,cAAc,IAAI,qBAAqB,CAAC,CAAC;IACxE,CAAC;IACD,IAAI,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;QAC1B,MAAM,sBAAsB,CAAC,cAAc,IAAI,KAAK,CAAC,CAAC;IACxD,CAAC;IACD,WAAW,CAAC,GAAG,CAAC,IAAI,EAAE,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC;AAC5C,CAAC;AAED,SAAS,oBAAoB,CAAC,IAAY;IACxC,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QAChC,MAAM,sBAAsB,CAAC,iCAAiC,IAAI,EAAE,CAAC,CAAC;IACxE,CAAC;AACH,CAAC;AAED,SAAS,uBAAuB,CAC9B,IAA2B,EAC3B,WAAwB;IAExB,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,MAAM,KAAK,GAAG,CAAC,KAAc,EAAE,KAAa,EAAQ,EAAE;QACpD,KAAK,IAAI,CAAC,CAAC;QACX,IAAI,KAAK,GAAG,gBAAgB,IAAI,KAAK,GAAG,gBAAgB,EAAE,CAAC;YACzD,MAAM,sBAAsB,CAAC,yBAAyB,CAAC,CAAC;QAC1D,CAAC;QACD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YACzB,KAAK,MAAM,IAAI,IAAI,KAAK;gBAAE,KAAK,CAAC,IAAI,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;YACjD,OAAO;QACT,CAAC;QACD,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;YAAE,OAAO;QAC7B,IAAI,MAAM,IAAI,KAAK,EAAE,CAAC;YACpB,MAAM,KAAK,GAAG,4CAA4C,CAAC,IAAI,CAC7D,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CACnB,CAAC;YACF,IAAI,CAAC,KAAK,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC,EAAE,CAAC;gBAC1C,MAAM,sBAAsB,CAAC,sBAAsB,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;YACnE,CAAC;QACH,CAAC;QACD,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC;YAAE,KAAK,CAAC,KAAK,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;IACpE,CAAC,CAAC;IACF,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;AACjB,CAAC;AAED,SAAS,WAAW,CAAkC,MAAS;IAC7D,OAAO,eAAe,CAAC,MAAM,CAAC,CAAC;AACjC,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,CAAC;AACrD,CAAC;AAED,SAAS,sBAAsB,CAAC,OAAe;IAC7C,OAAO,IAAI,KAAK,CAAC,2CAA2C,OAAO,EAAE,CAAC,CAAC;AACzE,CAAC;AAED,SAAS,aAAa,CAAC,MAA6B;IAClD,OAAO,MAAM,CAAC,IAAI,KAAK,OAAO,CAAC;AACjC,CAAC"}

package/dist/config.d.ts

@@ -1,2 +1,2 @@
-export * from 'openxiangda-compiler';
+export * from './compiler/config.js';
 //# sourceMappingURL=config.d.ts.map

package/dist/config.js

@@ -1,2 +1,2 @@
-export * from 'openxiangda-compiler';
+export * from './compiler/config.js';
 //# sourceMappingURL=config.js.map

package/dist/configuration-preflight.d.ts

@@ -0,0 +1,7 @@
+import type { OpenXiangdaAppConfig } from './compiler/config.js';
+/** 本地完整纯编译不创建客户端，不读取账号、环境、数据库或网络。 */
+export declare function compileLocalConfiguration(config: OpenXiangdaAppConfig, toolchainVersion: string): {
+    sources: import("./compiler/bundle.js").CompiledApplicationSources;
+    compiled: import("openxiangda-contracts/native-compiler").NativeConfigurationCompilerResult;
+};
+//# sourceMappingURL=configuration-preflight.d.ts.map

package/dist/configuration-preflight.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"configuration-preflight.d.ts","sourceRoot":"","sources":["../src/configuration-preflight.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAC;AAEjE,qCAAqC;AACrC,wBAAgB,yBAAyB,CAAC,MAAM,EAAE,oBAAoB,EAAE,gBAAgB,EAAE,MAAM;;;EAQ/F"}

package/dist/configuration-preflight.js

@@ -0,0 +1,13 @@
+import { compileNativeApplicationConfiguration } from 'openxiangda-contracts/native-compiler';
+import { compileApplicationSources } from './compiler/bundle.js';
+/** 本地完整纯编译不创建客户端，不读取账号、环境、数据库或网络。 */
+export function compileLocalConfiguration(config, toolchainVersion) {
+    const sources = compileApplicationSources(config, toolchainVersion);
+    const compiled = compileNativeApplicationConfiguration({
+        appCode: config.app.code,
+        configBytes: sources.config.content, contractBytes: sources.contracts.content,
+        expectedConfigDigest: sources.config.digest, expectedContractDigest: sources.contracts.digest,
+    });
+    return { sources, compiled };
+}
+//# sourceMappingURL=configuration-preflight.js.map

package/dist/configuration-preflight.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"configuration-preflight.js","sourceRoot":"","sources":["../src/configuration-preflight.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,qCAAqC,EAAE,MAAM,uCAAuC,CAAC;AAC9F,OAAO,EAAE,yBAAyB,EAAE,MAAM,sBAAsB,CAAC;AAGjE,qCAAqC;AACrC,MAAM,UAAU,yBAAyB,CAAC,MAA4B,EAAE,gBAAwB;IAC9F,MAAM,OAAO,GAAG,yBAAyB,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC;IACpE,MAAM,QAAQ,GAAG,qCAAqC,CAAC;QACrD,OAAO,EAAE,MAAM,CAAC,GAAG,CAAC,IAAI;QACxB,WAAW,EAAE,OAAO,CAAC,MAAM,CAAC,OAAO,EAAE,aAAa,EAAE,OAAO,CAAC,SAAS,CAAC,OAAO;QAC7E,oBAAoB,EAAE,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,sBAAsB,EAAE,OAAO,CAAC,SAAS,CAAC,MAAM;KAC9F,CAAC,CAAC;IACH,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC;AAC/B,CAAC"}

package/dist/connected-development.d.ts

@@ -0,0 +1,62 @@
+import type { ApplicationEnvironment, DeploymentEnvironment } from "openxiangda-contracts";
+import type { OpenXiangdaDeveloperSession } from "./session.js";
+export interface ConnectedDevelopmentGrant {
+    id: string;
+    token: string;
+    expiresAt: string;
+    mode: "published-resources" | "manifest-overlay";
+    manifestOverlay: boolean;
+    manifestDigest: string | null;
+}
+export interface ConnectedDevelopmentSessionApi {
+    create(): Promise<ConnectedDevelopmentGrant>;
+    current(token: string): Promise<Omit<ConnectedDevelopmentGrant, "token">>;
+    refresh(token: string): Promise<Omit<ConnectedDevelopmentGrant, "token">>;
+    revoke(token: string): Promise<void>;
+}
+export interface ConnectedDevelopmentOptions {
+    root: string;
+    appCode: string;
+    platformBaseUrl: string;
+    environment: ApplicationEnvironment;
+    developerSession: OpenXiangdaDeveloperSession;
+    remoteSession: ConnectedDevelopmentSessionApi;
+    noOpen?: boolean;
+    webPort?: number;
+    onStatus?: (message: string) => void;
+    readinessTimeoutMs?: number;
+    /** @internal deterministic proxy port for verification. */
+    proxyPort?: number;
+    /** @internal observes a ready session without exposing credentials. */
+    onReady?: (session: ConnectedDevelopmentSession) => void | Promise<void>;
+}
+export interface ConnectedDevelopmentSession {
+    mode: "connected";
+    appCode: string;
+    environment: {
+        key: DeploymentEnvironment;
+        label: "test" | "production";
+        id: string;
+        productionData: boolean;
+    };
+    urls: {
+        web: string;
+        app: string;
+        proxy: string;
+        platform: string;
+    };
+    ports: {
+        web: number;
+        app: number;
+        proxy: number;
+    };
+    publishedResourcesOnly: boolean;
+    manifestOverlay: boolean;
+}
+export interface ConnectedDevelopmentResult {
+    exitCode: number;
+    session: ConnectedDevelopmentSession;
+}
+export declare function selectConnectedDevelopmentEnvironment(environments: ApplicationEnvironment[]): ApplicationEnvironment | undefined;
+export declare function runConnectedDevelopment(input: ConnectedDevelopmentOptions): Promise<ConnectedDevelopmentResult>;
+//# sourceMappingURL=connected-development.d.ts.map

package/dist/connected-development.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"connected-development.d.ts","sourceRoot":"","sources":["../src/connected-development.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,sBAAsB,EAAE,qBAAqB,EAAE,MAAM,uBAAuB,CAAC;AAC3F,OAAO,KAAK,EAAE,2BAA2B,EAAE,MAAM,cAAc,CAAC;AAOhE,MAAM,WAAW,yBAAyB;IACxC,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,qBAAqB,GAAG,kBAAkB,CAAC;IACjD,eAAe,EAAE,OAAO,CAAC;IACzB,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;CAC/B;AAED,MAAM,WAAW,8BAA8B;IAC7C,MAAM,IAAI,OAAO,CAAC,yBAAyB,CAAC,CAAC;IAC7C,OAAO,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,yBAAyB,EAAE,OAAO,CAAC,CAAC,CAAC;IAC1E,OAAO,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,yBAAyB,EAAE,OAAO,CAAC,CAAC,CAAC;IAC1E,MAAM,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACtC;AAED,MAAM,WAAW,2BAA2B;IAC1C,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,eAAe,EAAE,MAAM,CAAC;IACxB,WAAW,EAAE,sBAAsB,CAAC;IACpC,gBAAgB,EAAE,2BAA2B,CAAC;IAC9C,aAAa,EAAE,8BAA8B,CAAC;IAC9C,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;IACrC,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,2DAA2D;IAC3D,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,uEAAuE;IACvE,OAAO,CAAC,EAAE,CAAC,OAAO,EAAE,2BAA2B,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAC1E;AAED,MAAM,WAAW,2BAA2B;IAC1C,IAAI,EAAE,WAAW,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE;QACX,GAAG,EAAE,qBAAqB,CAAC;QAC3B,KAAK,EAAE,MAAM,GAAG,YAAY,CAAC;QAC7B,EAAE,EAAE,MAAM,CAAC;QACX,cAAc,EAAE,OAAO,CAAC;KACzB,CAAC;IACF,IAAI,EAAE;QACJ,GAAG,EAAE,MAAM,CAAC;QACZ,GAAG,EAAE,MAAM,CAAC;QACZ,KAAK,EAAE,MAAM,CAAC;QACd,QAAQ,EAAE,MAAM,CAAC;KAClB,CAAC;IACF,KAAK,EAAE;QACL,GAAG,EAAE,MAAM,CAAC;QACZ,GAAG,EAAE,MAAM,CAAC;QACZ,KAAK,EAAE,MAAM,CAAC;KACf,CAAC;IACF,sBAAsB,EAAE,OAAO,CAAC;IAChC,eAAe,EAAE,OAAO,CAAC;CAC1B;AAED,MAAM,WAAW,0BAA0B;IACzC,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,2BAA2B,CAAC;CACtC;AAED,wBAAgB,qCAAqC,CACnD,YAAY,EAAE,sBAAsB,EAAE,sCASvC;AAED,wBAAsB,uBAAuB,CAC3C,KAAK,EAAE,2BAA2B,GACjC,OAAO,CAAC,0BAA0B,CAAC,CAgKrC"}