openxiangda-devkit-core 2.4.2 → 2.5.1

package/dist/compiler/config.js

@@ -1,6 +1,6 @@
 import { materializeApplicationModules } from './application-model.js';
 import { nativeFieldRequiresCreateInputV2 } from 'openxiangda-contracts/native-compiler';
-import { SCHEMA_VERSIONS, DATA_FIELD_TYPES, PLATFORM_EVENT_TYPES_V2, nativePlatformCapabilityCatalog, validateDataResource, validateWorkflowInstanceCommandPolicies, WORKFLOW_SUMMARY_MAX_FIELDS, WORKFLOW_SUMMARY_TEXT_LONG_MAX_BYTES, isWorkflowSummaryFieldType, } from 'openxiangda-contracts';
+import { SCHEMA_VERSIONS, DATA_AUDIT_METADATA_FIELDS, isDataAuditMetadataField, DATA_FIELD_TYPES, PLATFORM_EVENT_TYPES_V2, nativePlatformCapabilityCatalog, validateDataResource, validateWorkflowInstanceCommandPolicies, WORKFLOW_SUMMARY_MAX_FIELDS, WORKFLOW_SUMMARY_TEXT_LONG_MAX_BYTES, isWorkflowSummaryFieldType, } from 'openxiangda-contracts';
 import { Ajv2020 } from 'ajv/dist/2020.js';
 import { CronExpressionParser } from 'cron-parser';
 import { fieldNullable, supportsGeneratedMutation, } from './field-codec.js';
@@ -3427,12 +3427,13 @@ function validateCapabilityClosure(appCode, config, declarations, diagnostics) {
         catalog.add(string(object(raw).code));
     const data = object(config.data);
     const catalogOwners = new Map();
+    const references = [];
     for (const raw of declarations) {
         const code = string(object(raw).code);
         if (code)
             catalogOwners.set(code, 'authz.capabilities');
     }
-    for (const rawResource of Array.isArray(data.resources) ? data.resources : []) {
+    for (const [resourceIndex, rawResource] of (Array.isArray(data.resources) ? data.resources : []).entries()) {
         const resource = object(rawResource);
         const resourceOwner = `data.resources.${string(resource.code)}`;
         Object.values(object(resource.capabilities)).forEach(value => {
@@ -3440,18 +3441,24 @@ function validateCapabilityClosure(appCode, config, declarations, diagnostics) {
             registerCapabilityOwner(code, resourceOwner, catalogOwners, diagnostics);
             catalog.add(code);
         });
-        Object.values(object(resource.fieldPolicies)).forEach(rawPolicy => {
+        Object.entries(object(resource.fieldPolicies)).forEach(([fieldCode, rawPolicy]) => {
             const policy = object(rawPolicy);
             for (const key of ['read', 'create', 'update']) {
                 for (const value of Array.isArray(policy[key]) ? policy[key] : []) {
                     const code = string(value);
+                    if (isDataAuditMetadataField(fieldCode)) {
+                        references.push({
+                            capability: code,
+                            path: `data.resources[${resourceIndex}].fieldPolicies.${fieldCode}.${key}`,
+                        });
+                        continue;
+                    }
                     registerCapabilityOwner(code, resourceOwner, catalogOwners, diagnostics);
                     catalog.add(code);
                 }
             }
         });
     }
-    const references = [];
     const authz = object(config.authz);
     (Array.isArray(authz.roles) ? authz.roles : []).forEach((rawRole, index) => {
         const role = object(rawRole);
@@ -3765,15 +3772,20 @@ export function materializeDataResource(appCode, declaration) {
         ...(declaration.detailRouteCode
             ? { detailRouteCode: { ...declaration.detailRouteCode } }
             : {}),
-        fieldPolicies: Object.fromEntries(declaration.fields.map(field => [
-            field.code,
-            {
-                read: access(field, 'read'),
-                create: access(field, 'create'),
-                update: access(field, 'update'),
-                ...(field.access?.mask ? { mask: field.access.mask } : {}),
-            },
-        ])),
+        fieldPolicies: {
+            ...Object.fromEntries(declaration.fields.map(field => [
+                field.code,
+                {
+                    read: access(field, 'read'),
+                    create: access(field, 'create'),
+                    update: access(field, 'update'),
+                    ...(field.access?.mask ? { mask: field.access.mask } : {}),
+                },
+            ])),
+            ...(declaration.audit === undefined ? {} : Object.fromEntries(DATA_AUDIT_METADATA_FIELDS.map(code => [code, {
+                    read: declaration.audit.read === false ? [] : [...declaration.audit.read],
+                }]))),
+        },
     };
 }
 export function validateAppDeclaration(value) {
@@ -3796,6 +3808,7 @@ export function validateAppDeclaration(value) {
         'mobile',
         'dataPolicyCode',
         'detailRouteCode',
+        'audit',
     ]);
     const fieldKeys = new Set([
         'code',
@@ -3834,6 +3847,18 @@ export function validateAppDeclaration(value) {
             }
         }
         const fields = Array.isArray(resource.fields) ? resource.fields : [];
+        let auditValid = true;
+        if (resource.audit !== undefined) {
+            const audit = object(resource.audit);
+            const read = audit.read;
+            if (!resource.audit || typeof resource.audit !== 'object' || Array.isArray(resource.audit) ||
+                Object.keys(audit).some(key => key !== 'read') ||
+                (read !== false && (!Array.isArray(read) || read.length < 1 || read.length > 20 ||
+                    read.some(value => typeof value !== 'string' || !value.trim()) || new Set(read).size !== read.length))) {
+                auditValid = false;
+                diagnostics.push(diagnostic('APP_CONFIG_DATA_AUDIT_READ_INVALID', 'audit.read 必须为 false 或不重复的非空 capability 数组（最多 20 项）', `${resourcePath}.audit`));
+            }
+        }
         const mutationOwner = string(resource.mutationOwner) || 'native';
         const generated = object(resource.generated);
         if (!['native', 'action', 'readonly', 'workflow'].includes(mutationOwner)) {
@@ -3859,7 +3884,7 @@ export function validateAppDeclaration(value) {
             return;
         }
         const declaredCodes = new Set();
-        let materializable = true;
+        let materializable = auditValid;
         fields.forEach((rawField, fieldIndex) => {
             const field = object(rawField);
             const fieldPath = `${resourcePath}.fields[${fieldIndex}]`;