openxiangda-devkit-core 2.0.0-alpha.12

package/dist/control-plane-client.js

@@ -0,0 +1,651 @@
+import { OPENXIANGDA_CONTRACT_VERSION, SCHEMA_VERSIONS, } from "openxiangda-contracts/browser";
+export class ControlPlaneError extends Error {
+    status;
+    code;
+    data;
+    constructor(status, code, message, data) {
+        super(message);
+        this.status = status;
+        this.code = code;
+        this.data = data;
+        this.name = "ControlPlaneError";
+    }
+}
+export class OpenXiangdaControlPlaneClient {
+    options;
+    baseUrl;
+    fetch;
+    constructor(options) {
+        this.options = options;
+        this.baseUrl = options.baseUrl.replace(/\/+$/, "");
+        this.fetch = options.fetch || globalThis.fetch.bind(globalThis);
+    }
+    async capabilities() {
+        const capabilities = await this.json("/openxiangda-api/v2/capabilities");
+        if (capabilities.contractVersion !== OPENXIANGDA_CONTRACT_VERSION) {
+            throw new ControlPlaneError(409, "OPENXIANGDA_CONTRACT_VERSION_MISMATCH", `平台 contract ${capabilities.contractVersion} 与工具 ${OPENXIANGDA_CONTRACT_VERSION} 不兼容`, capabilities);
+        }
+        return capabilities;
+    }
+    async provisionApplication(input) {
+        return await this.json(`/openxiangda-api/v2/applications/${encodeURIComponent(input.appCode)}/provision`, {
+            method: "POST",
+            body: JSON.stringify({
+                name: input.name,
+                description: input.description,
+            }),
+        });
+    }
+    async oauthClients(appCode) {
+        return await this.json(`${this.oauthPath(appCode)}/clients`);
+    }
+    async runtimeOAuthCredentialStatus(appCode, environmentKey) {
+        return await this.json(`${this.oauthPath(appCode)}/runtime-credentials/${encodeURIComponent(environmentKey)}`);
+    }
+    async stageRuntimeOAuthCredentialRotation(appCode, environmentKey, input) {
+        return await this.json(`${this.oauthPath(appCode)}/runtime-credentials/${encodeURIComponent(environmentKey)}/rotate`, { method: "POST", body: JSON.stringify(input) });
+    }
+    async createOAuthClient(appCode, input) {
+        return await this.json(`${this.oauthPath(appCode)}/clients`, {
+            method: "POST",
+            body: JSON.stringify(input),
+        });
+    }
+    async updateOAuthClient(appCode, clientId, input) {
+        return await this.json(`${this.oauthPath(appCode)}/clients/${encodeURIComponent(clientId)}/update`, { method: "POST", body: JSON.stringify(input) });
+    }
+    async rotateOAuthClientSecret(appCode, clientId, gracePeriodSeconds = 600) {
+        return await this.json(`${this.oauthPath(appCode)}/clients/${encodeURIComponent(clientId)}/rotate-secret`, {
+            method: "POST",
+            body: JSON.stringify({ gracePeriodSeconds }),
+        });
+    }
+    async revokeOAuthClient(appCode, clientId) {
+        return await this.json(`${this.oauthPath(appCode)}/clients/${encodeURIComponent(clientId)}/revoke`, { method: "POST", body: "{}" });
+    }
+    async oauthAuditEvents(appCode, input = {}) {
+        const query = new URLSearchParams();
+        if (input.environmentKey)
+            query.set("environmentKey", input.environmentKey);
+        if (input.clientId)
+            query.set("clientId", input.clientId);
+        if (input.limit)
+            query.set("limit", String(input.limit));
+        const suffix = query.size ? `?${query}` : "";
+        return await this.json(`${this.oauthPath(appCode)}/audit-events${suffix}`);
+    }
+    async oauthApplicationPrincipal(appCode) {
+        return await this.json(`${this.oauthPath(appCode)}/principal`);
+    }
+    async exchangeOAuthClientCredentials(input) {
+        const response = await this.fetch(`${this.baseUrl}/openxiangda-api/v2/oauth2/token`, {
+            method: "POST",
+            headers: {
+                Accept: "application/json",
+                "Content-Type": "application/json",
+                Authorization: `Basic ${this.basicCredentials(input.clientId, input.clientSecret)}`,
+            },
+            body: JSON.stringify({
+                grant_type: "client_credentials",
+                ...(input.scope?.length ? { scope: input.scope.join(" ") } : {}),
+            }),
+        });
+        let data;
+        try {
+            data = (await response.json());
+        }
+        catch {
+            throw new ControlPlaneError(response.status, "OAUTH2_TOKEN_RESPONSE_INVALID", "OAuth2 token 端点返回的不是有效 JSON");
+        }
+        if (!response.ok || data.error) {
+            throw new ControlPlaneError(response.status, data.error || "OAUTH2_TOKEN_REQUEST_FAILED", data.error_description || `OAuth2 token 请求失败: ${response.status}`);
+        }
+        return data;
+    }
+    async applicationApiResponse(appCode, environmentKey, runtimePath, input) {
+        const path = this.applicationApiPath(appCode, environmentKey, runtimePath, input.query);
+        const { query: _query, roleSessionId: _roleSessionId, ...init } = input;
+        return await this.fetch(`${this.baseUrl}${path}`, {
+            ...init,
+            credentials: init.credentials || this.options.credentials || "include",
+            headers: {
+                Accept: "application/json",
+                ...(this.options.token
+                    ? { Authorization: `Bearer ${this.options.token}` }
+                    : {}),
+                ...this.optionalRoleSessionHeaders(input),
+                ...(init.headers || {}),
+            },
+        });
+    }
+    async applicationApiJson(appCode, environmentKey, runtimePath, input) {
+        const { body, ...request } = input;
+        const response = await this.applicationApiResponse(appCode, environmentKey, runtimePath, {
+            ...request,
+            headers: {
+                ...(body === undefined ? {} : { "Content-Type": "application/json" }),
+                ...(input.headers || {}),
+            },
+            ...(body === undefined ? {} : { body: JSON.stringify(body) }),
+        });
+        const text = await response.text();
+        let data = undefined;
+        if (text) {
+            try {
+                data = JSON.parse(text);
+            }
+            catch {
+                throw new ControlPlaneError(response.status, "APPLICATION_API_RESPONSE_INVALID", "应用后端返回的不是有效 JSON", text);
+            }
+        }
+        if (!response.ok) {
+            throw new ControlPlaneError(response.status, String(data?.errorCode || data?.code || "APPLICATION_API_REQUEST_FAILED"), String(data?.message || data?.error || `应用后端请求失败: ${response.status}`), data);
+        }
+        return data;
+    }
+    async uploadArtifact(input) {
+        const params = new URLSearchParams({
+            kind: input.kind,
+            contentType: input.contentType,
+            metadata: JSON.stringify(input.metadata || {}),
+        });
+        const form = new FormData();
+        form.append("file", new Blob([input.content], { type: input.contentType }), input.digest);
+        return await this.request(`/openxiangda-api/v2/applications/${encodeURIComponent(input.appCode)}/artifacts/${input.digest}?${params}`, { method: "POST", body: form });
+    }
+    async createDeployment(input) {
+        return await this.json(`/openxiangda-api/v2/applications/${encodeURIComponent(input.appCode)}/deployments`, {
+            method: "POST",
+            body: JSON.stringify({
+                environmentId: input.environmentId,
+                environmentKind: input.environmentKind,
+                kind: input.kind || "deploy",
+                packageDigest: input.packageDigest,
+                package: input.package,
+                idempotencyKey: input.idempotencyKey,
+                requestId: input.requestId,
+            }),
+        });
+    }
+    async deployment(appCode, deploymentId) {
+        return await this.json(`/openxiangda-api/v2/applications/${encodeURIComponent(appCode)}/deployments/${encodeURIComponent(deploymentId)}`);
+    }
+    async deployments(appCode, limit = 20) {
+        return await this.json(`/openxiangda-api/v2/applications/${encodeURIComponent(appCode)}/deployments?limit=${Math.min(Math.max(Number(limit) || 20, 1), 100)}`);
+    }
+    async retryDeployment(appCode, deploymentId) {
+        return await this.json(`/openxiangda-api/v2/applications/${encodeURIComponent(appCode)}/deployments/${encodeURIComponent(deploymentId)}/retry`, { method: "POST", body: "{}" });
+    }
+    async cancelDeployment(appCode, deploymentId) {
+        return await this.json(`/openxiangda-api/v2/applications/${encodeURIComponent(appCode)}/deployments/${encodeURIComponent(deploymentId)}/cancel`, { method: "POST", body: "{}" });
+    }
+    async promote(input) {
+        return await this.deployExistingVersion(input, "promotions");
+    }
+    async rollback(input) {
+        return await this.deployExistingVersion(input, "rollbacks");
+    }
+    async appVersions(appCode, limit = 30) {
+        return await this.json(`/openxiangda-api/v2/applications/${encodeURIComponent(appCode)}/versions?limit=${Math.min(Math.max(Number(limit) || 30, 1), 100)}`);
+    }
+    async environmentHead(appCode, environmentKey) {
+        return await this.json(`/openxiangda-api/v2/applications/${encodeURIComponent(appCode)}/environment-heads/${encodeURIComponent(environmentKey)}`);
+    }
+    async applicationSecrets(appCode, environmentKey) {
+        return await this.json(this.applicationSecretsPath(appCode, environmentKey));
+    }
+    async applicationSecret(appCode, environmentKey, name) {
+        return await this.json(`${this.applicationSecretsPath(appCode, environmentKey)}/${encodeURIComponent(name)}`);
+    }
+    async createApplicationSecret(appCode, environmentKey, input) {
+        return await this.json(this.applicationSecretsPath(appCode, environmentKey), { method: "POST", body: JSON.stringify({ expectedRevision: 0, ...input }) });
+    }
+    async updateApplicationSecret(appCode, environmentKey, name, input) {
+        return await this.json(`${this.applicationSecretsPath(appCode, environmentKey)}/${encodeURIComponent(name)}`, { method: "PATCH", body: JSON.stringify(input) });
+    }
+    async rotateApplicationSecret(appCode, environmentKey, name, input) {
+        return await this.json(`${this.applicationSecretsPath(appCode, environmentKey)}/${encodeURIComponent(name)}/rotate`, { method: "POST", body: JSON.stringify(input) });
+    }
+    async deleteApplicationSecret(appCode, environmentKey, name, input) {
+        return await this.json(`${this.applicationSecretsPath(appCode, environmentKey)}/${encodeURIComponent(name)}`, { method: "DELETE", body: JSON.stringify(input) });
+    }
+    async applicationSecretAuditEvents(appCode, environmentKey, name, limit = 100) {
+        return await this.json(`${this.applicationSecretsPath(appCode, environmentKey)}/${encodeURIComponent(name)}/audit?limit=${Math.min(Math.max(Number(limit) || 100, 1), 500)}`);
+    }
+    async createEventSubscription(input) {
+        const { appCode, ...body } = input;
+        return await this.json(`${this.eventsPath(appCode)}/subscriptions`, { method: "POST", body: JSON.stringify(body) });
+    }
+    async eventSubscriptions(appCode) {
+        return await this.json(`${this.eventsPath(appCode)}/subscriptions`);
+    }
+    async setEventSubscriptionStatus(appCode, subscriptionId, input) {
+        return await this.json(`${this.eventsPath(appCode)}/subscriptions/${encodeURIComponent(subscriptionId)}/status`, { method: "POST", body: JSON.stringify(input) });
+    }
+    async rotateEventSubscriptionSecret(appCode, subscriptionId, input) {
+        return await this.json(`${this.eventsPath(appCode)}/subscriptions/${encodeURIComponent(subscriptionId)}/rotate-secret`, { method: "POST", body: JSON.stringify(input) });
+    }
+    async eventDeliveries(appCode, limit = 100) {
+        return await this.json(`${this.eventsPath(appCode)}/deliveries?limit=${Math.min(Math.max(Number(limit) || 100, 1), 500)}`);
+    }
+    async replayEventDelivery(appCode, deliveryId, idempotencyKey) {
+        return await this.json(`${this.eventsPath(appCode)}/deliveries/${encodeURIComponent(deliveryId)}/replay`, {
+            method: "POST",
+            body: JSON.stringify(idempotencyKey ? { idempotencyKey } : {}),
+        });
+    }
+    async createTimerSubscription(input) {
+        const { appCode, ...body } = input;
+        return await this.json(`${this.eventsPath(appCode)}/timers`, { method: "POST", body: JSON.stringify(body) });
+    }
+    async timerSubscriptions(appCode) {
+        return await this.json(`${this.eventsPath(appCode)}/timers`);
+    }
+    async setTimerSubscriptionStatus(appCode, timerId, input) {
+        return await this.json(`${this.eventsPath(appCode)}/timers/${encodeURIComponent(timerId)}/status`, { method: "POST", body: JSON.stringify(input) });
+    }
+    async registerWorkflowDefinition(appCode, version, definition) {
+        return await this.json(`${this.workflowPath(appCode)}/definitions`, {
+            method: "POST",
+            body: JSON.stringify({ version, definition }),
+        });
+    }
+    async registerWorkflowBinding(appCode, version, binding) {
+        return await this.json(`${this.workflowPath(appCode)}/bindings`, {
+            method: "POST",
+            body: JSON.stringify({ version, binding }),
+        });
+    }
+    async applyWorkflowAssigneeProvider(appCode, input) {
+        return await this.json(`${this.workflowPath(appCode)}/assignee-providers`, { method: "POST", body: JSON.stringify(input) });
+    }
+    async workflowAssigneeProviders(appCode, environmentKey = "production") {
+        return await this.json(`${this.workflowPath(appCode)}/assignee-providers?environmentKey=${encodeURIComponent(environmentKey)}`);
+    }
+    async rotateWorkflowAssigneeProviderSecret(appCode, providerCode, input) {
+        return await this.json(`${this.workflowPath(appCode)}/assignee-providers/${encodeURIComponent(providerCode)}/rotate-secret`, { method: "POST", body: JSON.stringify(input) });
+    }
+    async activateWorkflow(appCode, workflowCode, input) {
+        return await this.json(`${this.workflowPath(appCode)}/definitions/${encodeURIComponent(workflowCode)}/activate`, { method: "POST", body: JSON.stringify(input) });
+    }
+    async prepareWorkflowStart(input) {
+        const { appCode, workflowCode, roleSessionId, ...body } = input;
+        return await this.json(`${this.workflowPath(appCode)}/definitions/${encodeURIComponent(workflowCode)}/prepare-start`, {
+            method: "POST",
+            body: JSON.stringify(body),
+            headers: this.roleSessionHeaders({ roleSessionId }),
+        });
+    }
+    async startWorkflow(appCode, input) {
+        const { roleSessionId, ...body } = input;
+        return await this.json(`${this.workflowPath(appCode)}/instances`, {
+            method: "POST",
+            body: JSON.stringify(body),
+            headers: this.roleSessionHeaders({ roleSessionId }),
+        });
+    }
+    async createWorkflowDelegation(appCode, input, request) {
+        return await this.json(`${this.workflowPath(appCode)}/delegations`, {
+            method: "POST",
+            body: JSON.stringify(input),
+            headers: this.roleSessionHeaders(request),
+        });
+    }
+    async workflowDelegationTargets(appCode, userId, request) {
+        return await this.json(`${this.workflowPath(appCode)}/delegations/targets?userId=${encodeURIComponent(userId)}`, { headers: this.roleSessionHeaders(request) });
+    }
+    async workflowDelegations(appCode, request, input = {}) {
+        return await this.json(`${this.workflowPath(appCode)}/delegations?all=${input.all === true}`, { headers: this.roleSessionHeaders(request) });
+    }
+    async revokeWorkflowDelegation(appCode, delegationId, request) {
+        return await this.json(`${this.workflowPath(appCode)}/delegations/${encodeURIComponent(delegationId)}/revoke`, {
+            method: "POST",
+            headers: this.roleSessionHeaders(request),
+        });
+    }
+    async workflowTaskSurface(appCode, taskId, request) {
+        return await this.json(`${this.workflowPath(appCode)}/tasks/${encodeURIComponent(taskId)}/surface`, { headers: this.roleSessionHeaders(request) });
+    }
+    async workflowInstanceSurface(appCode, instanceId, request) {
+        return await this.json(`${this.workflowPath(appCode)}/instances/${encodeURIComponent(instanceId)}/surface`, { headers: this.roleSessionHeaders(request) });
+    }
+    async executeWorkflowTaskCommand(appCode, taskId, command, input, request) {
+        return await this.json(`${this.workflowPath(appCode)}/tasks/${encodeURIComponent(taskId)}/commands/${encodeURIComponent(command)}`, {
+            method: "POST",
+            body: JSON.stringify(input),
+            headers: this.roleSessionHeaders(request),
+        });
+    }
+    async executeWorkflowInstanceCommand(appCode, instanceId, command, input, request) {
+        return await this.json(`${this.workflowPath(appCode)}/instances/${encodeURIComponent(instanceId)}/commands/${command}`, {
+            method: "POST",
+            body: JSON.stringify(input),
+            headers: this.roleSessionHeaders(request),
+        });
+    }
+    async workflowAssignmentExplain(appCode, taskId, request) {
+        return await this.json(`${this.workflowPath(appCode)}/tasks/${encodeURIComponent(taskId)}/assignment-explain`, { headers: this.roleSessionHeaders(request) });
+    }
+    async workflowTimeline(appCode, instanceId, request) {
+        return await this.json(`${this.workflowPath(appCode)}/instances/${encodeURIComponent(instanceId)}/timeline`, { headers: this.roleSessionHeaders(request) });
+    }
+    async workflowWorkCenter(appCode, request, input = {}) {
+        const query = new URLSearchParams({
+            status: input.status || "pending",
+            limit: String(Math.min(Math.max(Number(input.limit) || 50, 1), 200)),
+        });
+        return await this.json(`${this.workflowPath(appCode)}/work-center/items?${query}`, { headers: this.roleSessionHeaders(request) });
+    }
+    async workflowKernelInstance(appCode, instanceId, request) {
+        return await this.json(`${this.workflowPath(appCode)}/kernel/instances/${encodeURIComponent(instanceId)}`, { headers: this.roleSessionHeaders(request) });
+    }
+    async workflowKernelWorkCenter(appCode, request, input = {}) {
+        const query = new URLSearchParams({
+            category: input.category || "pending",
+            limit: String(Math.min(Math.max(Number(input.limit) || 50, 1), 200)),
+        });
+        return await this.json(`${this.workflowPath(appCode)}/kernel/work-center?${query}`, { headers: this.roleSessionHeaders(request) });
+    }
+    async workflowDiagnostics(appCode, limit = 100) {
+        return await this.json(`${this.workflowPath(appCode)}/diagnostics?limit=${Math.min(Math.max(Number(limit) || 100, 1), 500)}`);
+    }
+    async bootstrapRoleSession(appCode) {
+        return await this.json(`${this.authzPath(appCode)}/role-session`);
+    }
+    async switchRoleSession(appCode, roleAssignmentId) {
+        return await this.json(`${this.authzPath(appCode)}/role-session/switch`, {
+            method: "POST",
+            body: JSON.stringify({ roleAssignmentId }),
+        });
+    }
+    async currentPrincipal(appCode, request) {
+        return await this.json(`${this.authzPath(appCode)}/principal`, { headers: this.roleSessionHeaders(request) });
+    }
+    async myRoleAssignments(appCode) {
+        return await this.json(`${this.authzPath(appCode)}/assignments/me`);
+    }
+    async applicationRoles(appCode) {
+        return await this.json(`${this.authzPath(appCode)}/roles`);
+    }
+    async createRoleAssignment(appCode, input) {
+        return await this.json(`${this.authzPath(appCode)}/assignments`, { method: "POST", body: JSON.stringify(input) });
+    }
+    async updateRoleAssignment(appCode, assignmentId, input) {
+        return await this.json(`${this.authzPath(appCode)}/assignments/${encodeURIComponent(assignmentId)}/update`, { method: "POST", body: JSON.stringify(input) });
+    }
+    async revokeRoleAssignment(appCode, assignmentId, expectedRevision) {
+        return await this.json(`${this.authzPath(appCode)}/assignments/${encodeURIComponent(assignmentId)}/revoke`, { method: "POST", body: JSON.stringify({ expectedRevision }) });
+    }
+    async explainAuthorization(appCode, input) {
+        const { roleSessionId, ...body } = input;
+        return await this.json(`${this.authzPath(appCode)}/explain`, {
+            method: "POST",
+            body: JSON.stringify(body),
+            headers: this.roleSessionHeaders({ roleSessionId }),
+        });
+    }
+    async explainAuthorizations(appCode, input) {
+        return await this.json(`${this.authzPath(appCode)}/explain-batch`, {
+            method: "POST",
+            body: JSON.stringify({
+                schemaVersion: SCHEMA_VERSIONS.authorizationBatchRequest,
+                requests: input.requests,
+            }),
+            headers: this.roleSessionHeaders({
+                roleSessionId: input.roleSessionId,
+            }),
+        });
+    }
+    async searchDirectoryEntries(appCode, kind, input, request) {
+        const query = new URLSearchParams({
+            keyword: input.keyword.trim(),
+            limit: String(Math.min(Math.max(Number(input.limit) || 20, 1), 50)),
+        });
+        return await this.json(`${this.directoryPath(appCode)}/${kind}s?${query}`, { headers: this.roleSessionHeaders(request) });
+    }
+    async resolveDirectoryEntries(appCode, input, request) {
+        return await this.json(`${this.directoryPath(appCode)}/resolve`, {
+            method: "POST",
+            body: JSON.stringify(input),
+            headers: this.roleSessionHeaders(request),
+        });
+    }
+    async applyDataResource(resource, input = {}) {
+        return await this.json(`/openxiangda-api/v2/applications/${encodeURIComponent(resource.appCode)}/data-resources/${encodeURIComponent(resource.code)}/apply`, {
+            method: "POST",
+            body: JSON.stringify({
+                name: resource.name,
+                schema: resource.schema,
+                capabilities: resource.capabilities,
+                dataPolicyCode: resource.dataPolicyCode,
+                fieldPolicies: resource.fieldPolicies,
+                expectedRevision: input.expectedRevision,
+            }),
+        });
+    }
+    async relationshipGrants(appCode, filter = {}) {
+        const query = new URLSearchParams();
+        for (const [key, value] of Object.entries(filter)) {
+            if (value !== undefined && value !== "")
+                query.set(key, value);
+        }
+        const suffix = query.size ? `?${query.toString()}` : "";
+        return await this.json(`${this.authzPath(appCode)}/relationship-grants${suffix}`);
+    }
+    async createRelationshipGrant(appCode, input) {
+        return await this.json(`${this.authzPath(appCode)}/relationship-grants`, { method: "POST", body: JSON.stringify(input) });
+    }
+    async updateRelationshipGrant(appCode, grantId, input) {
+        return await this.json(`${this.authzPath(appCode)}/relationship-grants/${encodeURIComponent(grantId)}/update`, { method: "POST", body: JSON.stringify(input) });
+    }
+    async revokeRelationshipGrant(appCode, grantId, expectedRevision) {
+        return await this.json(`${this.authzPath(appCode)}/relationship-grants/${encodeURIComponent(grantId)}/revoke`, { method: "POST", body: JSON.stringify({ expectedRevision }) });
+    }
+    async queryData(appCode, resourceCode, query, request = {}) {
+        return await this.json(this.dataPath(appCode, resourceCode, "query"), {
+            method: "POST",
+            body: JSON.stringify(query),
+            headers: this.optionalRoleSessionHeaders(request),
+        });
+    }
+    async getData(appCode, resourceCode, id, request = {}) {
+        return await this.json(this.dataPath(appCode, resourceCode, `records/${encodeURIComponent(id)}`), { headers: this.optionalRoleSessionHeaders(request) });
+    }
+    async aggregateData(appCode, resourceCode, query, request = {}) {
+        return await this.json(this.dataPath(appCode, resourceCode, "aggregate"), {
+            method: "POST",
+            body: JSON.stringify(query),
+            headers: this.optionalRoleSessionHeaders(request),
+        });
+    }
+    async dataAudit(appCode, resourceCode, id, input = {}, request = {}) {
+        const query = new URLSearchParams();
+        if (input.limit !== undefined)
+            query.set("limit", String(input.limit));
+        if (input.offset !== undefined)
+            query.set("offset", String(input.offset));
+        const suffix = query.size ? `?${query}` : "";
+        return await this.json(`${this.dataPath(appCode, resourceCode, `records/${encodeURIComponent(id)}/audit`)}${suffix}`, { headers: this.optionalRoleSessionHeaders(request) });
+    }
+    async initiateDataFileUpload(appCode, resourceCode, input, request = {}) {
+        return await this.json(this.dataPath(appCode, resourceCode, "files/uploads/initiate"), {
+            method: "POST",
+            body: JSON.stringify(input),
+            headers: this.optionalRoleSessionHeaders(request),
+        });
+    }
+    async completeDataFileUpload(appCode, resourceCode, fileId, request = {}) {
+        return await this.json(this.dataPath(appCode, resourceCode, `files/${encodeURIComponent(fileId)}/complete`), {
+            method: "POST",
+            body: "{}",
+            headers: this.optionalRoleSessionHeaders(request),
+        });
+    }
+    async deleteUnboundDataFile(appCode, resourceCode, fileId, request = {}) {
+        return await this.json(this.dataPath(appCode, resourceCode, `files/${encodeURIComponent(fileId)}/delete`), {
+            method: "POST",
+            body: "{}",
+            headers: this.optionalRoleSessionHeaders(request),
+        });
+    }
+    async dataFileContent(appCode, resourceCode, fileId, request = {}) {
+        const path = this.dataPath(appCode, resourceCode, `files/${encodeURIComponent(fileId)}/content`);
+        const response = await this.fetch(`${this.baseUrl}${path}`, {
+            credentials: this.options.credentials || "same-origin",
+            headers: {
+                ...(this.options.token
+                    ? { Authorization: `Bearer ${this.options.token}` }
+                    : {}),
+                ...this.optionalRoleSessionHeaders(request),
+            },
+        });
+        if (!response.ok) {
+            let data = null;
+            try {
+                data = await response.json();
+            }
+            catch {
+                // Binary endpoints may fail before the platform writes a JSON body.
+            }
+            throw new ControlPlaneError(response.status, data?.errorCode || "DATA_FILE_DOWNLOAD_FAILED", data?.message || `文件下载失败: ${response.status}`, data);
+        }
+        return response;
+    }
+    async createData(appCode, resourceCode, data, request = {}) {
+        return await this.json(this.dataPath(appCode, resourceCode, "records"), {
+            method: "POST",
+            body: JSON.stringify({ data }),
+            headers: this.optionalRoleSessionHeaders(request),
+        });
+    }
+    async updateData(appCode, resourceCode, id, input, request = {}) {
+        return await this.json(this.dataPath(appCode, resourceCode, `records/${encodeURIComponent(id)}/update`), {
+            method: "POST",
+            body: JSON.stringify(input),
+            headers: this.optionalRoleSessionHeaders(request),
+        });
+    }
+    async deleteData(appCode, resourceCode, id, expectedRevision, request = {}) {
+        return await this.json(this.dataPath(appCode, resourceCode, `records/${encodeURIComponent(id)}/delete`), {
+            method: "POST",
+            body: JSON.stringify({ expectedRevision }),
+            headers: this.optionalRoleSessionHeaders(request),
+        });
+    }
+    async transactData(appCode, transaction, request = {}) {
+        return await this.json(`/openxiangda-api/v2/applications/${encodeURIComponent(appCode)}/data/transactions`, {
+            method: "POST",
+            body: JSON.stringify(transaction),
+            headers: this.optionalRoleSessionHeaders(request),
+        });
+    }
+    dataPath(appCode, resourceCode, suffix) {
+        return `/openxiangda-api/v2/applications/${encodeURIComponent(appCode)}/data/${encodeURIComponent(resourceCode)}/${suffix}`;
+    }
+    applicationApiPath(appCode, environmentKey, runtimePath, query = {}) {
+        const normalized = String(runtimePath || "")
+            .replace(/^\/+/, "")
+            .replace(/\/+$/, "");
+        if (!normalized ||
+            normalized.includes("\0") ||
+            normalized
+                .split("/")
+                .some((part) => !part || part === "." || part === "..")) {
+            throw new ControlPlaneError(400, "APPLICATION_API_PATH_INVALID", "应用后端路径不能为空或包含路径穿越片段");
+        }
+        const params = new URLSearchParams();
+        for (const [key, value] of Object.entries(query)) {
+            if (value !== undefined && value !== null)
+                params.set(key, String(value));
+        }
+        const suffix = params.size ? `?${params}` : "";
+        return `/openxiangda-app-api/v2/${encodeURIComponent(appCode)}/${encodeURIComponent(environmentKey)}/${normalized
+            .split("/")
+            .map((part) => encodeURIComponent(part))
+            .join("/")}${suffix}`;
+    }
+    async deployExistingVersion(input, action) {
+        return await this.json(`/openxiangda-api/v2/applications/${encodeURIComponent(input.appCode)}/${action}`, {
+            method: "POST",
+            body: JSON.stringify({
+                appVersionId: input.appVersionId,
+                environmentId: input.environmentId,
+                environmentKind: input.environmentKind,
+                idempotencyKey: input.idempotencyKey,
+                requestId: input.requestId,
+            }),
+        });
+    }
+    authzPath(appCode) {
+        return `/openxiangda-api/v2/applications/${encodeURIComponent(appCode)}/authz`;
+    }
+    directoryPath(appCode) {
+        return `/openxiangda-api/v2/applications/${encodeURIComponent(appCode)}/directory`;
+    }
+    oauthPath(appCode) {
+        return `/openxiangda-api/v2/applications/${encodeURIComponent(appCode)}/oauth2`;
+    }
+    applicationSecretsPath(appCode, environmentKey) {
+        return `/openxiangda-api/v2/applications/${encodeURIComponent(appCode)}/environments/${encodeURIComponent(environmentKey)}/secrets`;
+    }
+    eventsPath(appCode) {
+        return `/openxiangda-api/v2/applications/${encodeURIComponent(appCode)}/events`;
+    }
+    workflowPath(appCode) {
+        return `/openxiangda-api/v2/applications/${encodeURIComponent(appCode)}/workflow`;
+    }
+    roleSessionHeaders(request) {
+        if (!request?.roleSessionId?.trim()) {
+            throw new ControlPlaneError(400, "ROLE_SESSION_REQUIRED", "OpenXiangda v2 用户作用域请求必须显式携带 roleSessionId");
+        }
+        return {
+            "X-OpenXiangda-Role-Session-Id": request.roleSessionId,
+        };
+    }
+    optionalRoleSessionHeaders(request) {
+        const roleSessionId = String(request?.roleSessionId || "").trim();
+        return roleSessionId
+            ? { "X-OpenXiangda-Role-Session-Id": roleSessionId }
+            : {};
+    }
+    basicCredentials(clientId, clientSecret) {
+        const value = `${clientId}:${clientSecret}`;
+        if (typeof Buffer !== "undefined")
+            return Buffer.from(value).toString("base64");
+        return globalThis.btoa(value);
+    }
+    async json(path, init = {}) {
+        return await this.request(path, {
+            ...init,
+            headers: {
+                "Content-Type": "application/json",
+                ...(init.headers || {}),
+            },
+        });
+    }
+    async request(path, init = {}) {
+        const response = await this.fetch(`${this.baseUrl}${path}`, {
+            ...init,
+            credentials: init.credentials || this.options.credentials || "same-origin",
+            headers: {
+                Accept: "application/json",
+                ...(this.options.token
+                    ? { Authorization: `Bearer ${this.options.token}` }
+                    : {}),
+                ...(init.headers || {}),
+            },
+        });
+        let envelope;
+        try {
+            envelope = (await response.json());
+        }
+        catch {
+            throw new ControlPlaneError(response.status, "CONTROL_PLANE_RESPONSE_INVALID", "平台返回的不是有效 JSON");
+        }
+        if (!response.ok || Number(envelope.code) >= 400) {
+            throw new ControlPlaneError(response.status, envelope.errorCode || "CONTROL_PLANE_REQUEST_FAILED", envelope.message || `平台请求失败: ${response.status}`, envelope.data);
+        }
+        return envelope.data;
+    }
+}
+//# sourceMappingURL=control-plane-client.js.map