openxiangda-devkit-core 2.0.0-alpha.81 → 2.0.0-alpha.84

package/dist/compiler/config.js

@@ -7,6 +7,7 @@ import { physicalPlanForField } from './field-physical-plan.js';
 import { SEMANTIC_FIELD_PATH_PATTERN, semanticFieldPathRoot, validateAuthzSemanticBindings, } from './field-policy-path.js';
 import { compatibleWidgets, isCompatibleFieldWidget, resolveDataFieldSurfaceWidget, } from './field-surface.js';
 import { DATA_POLICY_EXPRESSION_MAX_DEPTH, DATA_POLICY_EXPRESSION_MAX_GROUP_ITEMS, DATA_POLICY_EXPRESSION_MAX_LEAVES, dataPolicyExpressionToCnf, } from './data-policy-expression.js';
+import { AUTHORIZATION_TRANSITION_CAPABILITY_CODE_PATTERN, AUTHORIZATION_TRANSITION_KEYS, AUTHORIZATION_TRANSITION_ROLE_CODE_PATTERN, exactKeys, isExactStringArray, isPlainRecord, } from './authorization-transition.js';
 // The compiler owns the application source contract. Devkit and every adapter
 // re-export this module instead of maintaining separate configuration models.
 import { validateWorkflowBinding, validateWorkflowDefinition, } from '../internal/workflow.js';
@@ -269,6 +270,43 @@ const relationshipGrantSourceInputSchema = {
         ...authorizationProjectionControlProperties,
     },
 };
+const authorizationTransitionInputSchema = {
+    type: 'object',
+    additionalProperties: false,
+    required: ['fromAuthzDigest', 'reason'],
+    properties: {
+        fromAuthzDigest: {
+            type: 'string',
+            pattern: '^[0-9a-f]{64}$',
+        },
+        removeRoleCodes: {
+            type: 'array',
+            maxItems: 2000,
+            uniqueItems: true,
+            items: {
+                type: 'string',
+                pattern: '^[a-z][a-z0-9]*(?:[-_.][a-z0-9]+)*$',
+                maxLength: 128,
+            },
+        },
+        removeCapabilityCodes: {
+            type: 'array',
+            maxItems: 2000,
+            uniqueItems: true,
+            items: {
+                type: 'string',
+                pattern: '^[A-Za-z*][A-Za-z0-9:._*-]{0,254}$',
+                maxLength: 255,
+            },
+        },
+        reason: {
+            type: 'string',
+            minLength: 1,
+            maxLength: 2000,
+            pattern: '\\S',
+        },
+    },
+};
 export const openXiangdaAppConfigSchema = {
     $id: 'openxiangda.app-config/v3',
     type: 'object',
@@ -443,7 +481,7 @@ export const openXiangdaAppConfigSchema = {
                 authorizationTransitions: {
                     type: 'array',
                     maxItems: 100,
-                    items: { type: 'object' },
+                    items: authorizationTransitionInputSchema,
                 },
             },
         },
@@ -1625,6 +1663,16 @@ export function validateAppConfig(value) {
                 referencedFields.forEach(field => captured.add(field));
                 captureFieldsByResource.set(resourceCode, captured);
             }
+            if (subscription.platformAccess !== undefined) {
+                const access = object(subscription.platformAccess);
+                const notification = object(access.notification);
+                if (Object.keys(access).some(key => key !== 'notification') ||
+                    access.notification === undefined ||
+                    notification.mode !== 'business-standard' ||
+                    Object.keys(notification).some(key => key !== 'mode')) {
+                    diagnostics.push(diagnostic('APP_CONFIG_EVENT_PLATFORM_ACCESS_INVALID', '事件订阅 platformAccess 只能显式声明标准业务通知依赖', `${path}.platformAccess`));
+                }
+            }
             const delivery = {
                 timeoutMs: 10_000,
                 maxAttempts: 8,
@@ -2724,23 +2772,35 @@ function validateAuthorizationTransitions(rawTransitions, _roleCodes, diagnostic
     }
     const digests = new Set();
     (Array.isArray(rawTransitions) ? rawTransitions : []).forEach((raw, index) => {
-        const transition = object(raw);
-        const digest = string(transition.fromAuthzDigest);
         const path = `authz.authorizationTransitions[${index}]`;
-        const removeRoles = Array.isArray(transition.removeRoleCodes)
-            ? transition.removeRoleCodes.map(string)
-            : [];
-        const removeCapabilities = Array.isArray(transition.removeCapabilityCodes)
-            ? transition.removeCapabilityCodes.map(string)
-            : [];
-        if (!/^[0-9a-f]{64}$/.test(digest) ||
+        if (!isPlainRecord(raw)) {
+            diagnostics.push(diagnostic('APP_CONFIG_AUTHZ_TRANSITION_INVALID', '授权 transition 必须是只含 canonical 字段的对象', path));
+            return;
+        }
+        if (!exactKeys(raw, AUTHORIZATION_TRANSITION_KEYS)) {
+            const unknownKey = Object.keys(raw).find(key => !AUTHORIZATION_TRANSITION_KEYS.includes(key));
+            diagnostics.push(diagnostic('APP_CONFIG_AUTHZ_TRANSITION_INVALID', '授权 transition 只允许 fromAuthzDigest、removeRoleCodes、removeCapabilityCodes、reason', unknownKey ? `${path}.${unknownKey}` : path));
+            return;
+        }
+        const transition = raw;
+        const digest = transition.fromAuthzDigest;
+        const removeRolesValid = transition.removeRoleCodes === undefined ||
+            isExactStringArray(transition.removeRoleCodes, AUTHORIZATION_TRANSITION_ROLE_CODE_PATTERN, 128);
+        const removeCapabilitiesValid = transition.removeCapabilityCodes === undefined ||
+            isExactStringArray(transition.removeCapabilityCodes, AUTHORIZATION_TRANSITION_CAPABILITY_CODE_PATTERN, 255);
+        if (typeof digest !== 'string' ||
+            !/^[0-9a-f]{64}$/.test(digest) ||
             digests.has(digest) ||
-            !string(transition.reason) ||
-            new Set(removeRoles).size !== removeRoles.length ||
-            new Set(removeCapabilities).size !== removeCapabilities.length) {
-            diagnostics.push(diagnostic('APP_CONFIG_AUTHZ_TRANSITION_INVALID', '授权 transition 必须按来源摘要唯一，并明确不重复的移除项和 reason', path));
+            typeof transition.reason !== 'string' ||
+            !transition.reason.trim() ||
+            transition.reason.length > 2000 ||
+            !removeRolesValid ||
+            !removeCapabilitiesValid) {
+            diagnostics.push(diagnostic('APP_CONFIG_AUTHZ_TRANSITION_INVALID', '授权 transition 必须按来源摘要唯一，并使用有界、不重复的 canonical 移除项和 reason', path));
+        }
+        if (typeof digest === 'string' && /^[0-9a-f]{64}$/.test(digest)) {
+            digests.add(digest);
         }
-        digests.add(digest);
     });
 }
 function validateCapabilityClosure(appCode, config, declarations, diagnostics) {