openxiangda-devkit-core 2.48.2 → 2.51.1

package/dist/compiler/bundle.js

@@ -1,8 +1,9 @@
-import { compileNativeEventAction } from 'openxiangda-contracts/native-compiler';
+import { compileNativeEventAction, requiresExtendedDeclarationCapacity, requiresExtendedArtifactCapacity } from 'openxiangda-contracts/native-compiler';
+import { normalizeWorkflowOwnedSubjectCreate } from 'openxiangda-contracts/native-compiler';
 import { compileWorkflowBusinessStepHandlers, validateWorkflowBusinessStepSubscriptions, WORKFLOW_BUSINESS_STEP_EVENTS } from 'openxiangda-contracts/native-compiler';
 import { parseNativeUniqueKeys, parseDecimalReservationLifecycle } from 'openxiangda-contracts/native-compiler';
-import { DATA_AUDIT_METADATA_FIELDS, isDataAuditMetadataField, projectDataResourceView } from 'openxiangda-contracts';
-import { nativeFieldRequiresCreateInputV2 } from 'openxiangda-contracts/native-compiler';
+import { DATA_AUDIT_METADATA_FIELDS, isDataAuditMetadataField, projectDataResourceView, requiresExtendedOwnedSubtableCapacity } from 'openxiangda-contracts';
+import { nativeFieldRequiresCreateInputV2, requiresOwnedSubtableMinimumRows, requiresDateTimeMinutePrecision, requiresUserCandidateLaunchScope, requiresWorkflowRoleUnion } from 'openxiangda-contracts/native-compiler';
 import { createHash } from 'node:crypto';
 import { canonicalJson, applicationEventHandlerPathV2, DATA_EVENT_TYPES_V2, nativePlatformCapabilityCatalog, OPENXIANGDA_COMPILER_CONTRACT_VERSION, SCHEMA_VERSIONS, WORKFLOW_EVENT_TYPES_V2, sha256Digest, } from 'openxiangda-contracts';
 import { AppConfigValidationError, resourceCapabilityCodes, } from './config.js';
@@ -236,7 +237,7 @@ export function normalizeConfiguration(config) {
                     : {}),
                 failureMode: source.failureMode,
             })), item => item.code),
-            dataPolicies: sorted((config.authz?.dataPolicies || []).map(normalizeDataPolicyDeclaration), item => item.code),
+            dataPolicies: sorted((config.authz?.dataPolicies || []).map(policy => normalizeDataPolicyDeclaration(policy, config.authz?.authenticatedUserRoleCode || '')), item => item.code),
             authorizationTransitions: sorted((config.authz?.authorizationTransitions || []).map(normalizeAuthorizationTransition), item => item.fromAuthzDigest),
         },
         backend: {
@@ -259,13 +260,19 @@ export function normalizeConfiguration(config) {
                 ...(operation.platformAccess
                     ? {
                         platformAccess: {
+                            ...(operation.platformAccess.ownedSubject ? { ownedSubject: normalizeWorkflowOwnedSubjectCreate(operation.platformAccess.ownedSubject) } : {}),
                             ...(operation.platformAccess.dataCommands ? { dataCommands: { mode: operation.platformAccess.dataCommands.mode } } : {}),
+                            ...(operation.platformAccess.workflowStage ? { workflowStage: { ...operation.platformAccess.workflowStage,
+                                    runningNodeIds: uniqueSorted(operation.platformAccess.workflowStage.runningNodeIds),
+                                    allowedStatuses: uniqueSorted(operation.platformAccess.workflowStage.allowedStatuses),
+                                } } : {}),
                             ...(operation.platformAccess.recordEdit ? { recordEdit: {
                                     resourceCode: operation.platformAccess.recordEdit.resourceCode,
                                     fieldCodes: uniqueSorted(operation.platformAccess.recordEdit.fieldCodes),
                                 } } : {}),
                             ...(operation.platformAccess.roleAssertions ? {
-                                roleAssertions: { roleCodes: uniqueSorted(operation.platformAccess.roleAssertions.roleCodes) },
+                                roleAssertions: { roleCodes: uniqueSorted(operation.platformAccess.roleAssertions.roleCodes),
+                                    ...(operation.platformAccess.roleAssertions.actorAuthority ? { actorAuthority: true } : {}) },
                             } : {}),
                             ...(operation.platformAccess.directory
                                 ? {
@@ -1307,13 +1314,19 @@ function compileOperations(config) {
         ...(operation.platformAccess
             ? {
                 platformAccess: {
+                    ...(operation.platformAccess.ownedSubject ? { ownedSubject: normalizeWorkflowOwnedSubjectCreate(operation.platformAccess.ownedSubject) } : {}),
                     ...(operation.platformAccess.dataCommands ? { dataCommands: { mode: operation.platformAccess.dataCommands.mode } } : {}),
+                    ...(operation.platformAccess.workflowStage ? { workflowStage: { ...operation.platformAccess.workflowStage,
+                            runningNodeIds: uniqueSorted(operation.platformAccess.workflowStage.runningNodeIds),
+                            allowedStatuses: uniqueSorted(operation.platformAccess.workflowStage.allowedStatuses),
+                        } } : {}),
                     ...(operation.platformAccess.recordEdit ? { recordEdit: {
                             resourceCode: operation.platformAccess.recordEdit.resourceCode,
                             fieldCodes: uniqueSorted(operation.platformAccess.recordEdit.fieldCodes),
                         } } : {}),
                     ...(operation.platformAccess.roleAssertions ? {
-                        roleAssertions: { roleCodes: uniqueSorted(operation.platformAccess.roleAssertions.roleCodes) },
+                        roleAssertions: { roleCodes: uniqueSorted(operation.platformAccess.roleAssertions.roleCodes),
+                            ...(operation.platformAccess.roleAssertions.actorAuthority ? { actorAuthority: true } : {}) },
                     } : {}),
                     ...(operation.platformAccess.directory
                         ? {
@@ -1464,12 +1477,19 @@ function runtimeProtocolCapabilities(config) {
     const usesDirectory = config.data?.resources.some(resource => resource.schema.fields.some(field => field.type.startsWith('user.') || field.type.startsWith('department.'))) || operations.some(operation => operation.platformAccess?.directory);
     return uniqueSorted([
         'application-native-2',
+        ...(requiresExtendedDeclarationCapacity(config) ? ['application.extended-declaration-capacity'] : []),
+        ...(requiresExtendedArtifactCapacity(config) ? ['application.extended-artifact-capacity'] : []),
         'authz.batch-explain',
         'deployment.durable-runs',
         'deployment.platform-executor',
         ...(config.events?.capturePolicies?.length ? ['events.capture-policy'] : []),
         ...(config.events?.subscriptions?.some(item => item.execution) ? ['events.native-data-actions'] : []),
         ...(config.data?.resources.length ? ['data-api-v2'] : []),
+        ...(requiresExtendedOwnedSubtableCapacity(config.data?.resources || []) ? ['data.extended-owned-subtable-capacity'] : []),
+        ...(requiresWorkflowRoleUnion(config.workflows?.bindings || []) ? ['workflow.role-union'] : []),
+        ...(requiresUserCandidateLaunchScope(config.data?.resources || []) ? ['data.user-candidate-launch-scope'] : []),
+        ...(requiresDateTimeMinutePrecision(config.data?.resources || []) ? ['data.datetime-minute-precision'] : []),
+        ...(requiresOwnedSubtableMinimumRows(config.data?.resources || []) ? ['data.subtable-minimum-rows'] : []),
         ...(usesDirectory ? ['directory-v2'] : []),
         ...(operations.some(operation => operation.platformAccess?.directory?.mode === 'selected-user') ? ['directory.selected-user'] : []),
         ...(operations.some(operation => operation.platformAccess?.directory?.mode === 'current-initiator' && operation.platformAccess.directory.fields.includes('phone')) ||
@@ -1489,7 +1509,10 @@ function runtimeProtocolCapabilities(config) {
             ? ['business-process.durable-command']
             : []),
         ...(operations.some(operation => operation.platformAccess?.dataCommands) ? ['data.business-commands'] : []),
+        ...(operations.some(operation => operation.platformAccess?.workflowStage) ? ['workflow.native-stage-guard'] : []),
+        ...(operations.some(operation => operation.platformAccess?.roleAssertions?.actorAuthority) ? ['data.transaction-actor-authority'] : []),
         ...(operations.some(operation => operation.platformAccess?.recordEdit) ? ['data.record-edit'] : []),
+        ...(operations.some(operation => operation.platformAccess?.ownedSubject) ? ['workflow.named-owned-create'] : []),
         ...(operations.some(operation => operation.platformAccess?.decimalReservation) ||
             config.events?.subscriptions.some(subscription => subscription.platformAccess?.decimalReservation)
             ? ['data.decimal-reservations']
@@ -1509,6 +1532,8 @@ function runtimeProtocolCapabilities(config) {
             : []),
         ...((config.workflows?.definitions || []).some(item => item.definition.commandHandlers !== undefined) || operations.some(operation => operation.platformAccess?.workflow?.businessCommands)
             ? ['workflow.business-data-command'] : []),
+        ...((config.workflows?.definitions || []).some(item => item.definition.commandHandlers?.resubmit) || operations.some(operation => operation.platformAccess?.workflow?.businessCommands?.includes('resubmit'))
+            ? ['workflow.correction-business-command'] : []),
         ...((config.workflows?.definitions || []).some(item => item.definition.launchPreflight !== undefined)
             ? ['workflow.launch-preflight'] : []),
         ...((config.workflows?.definitions || []).some(item => item.definition.instanceCommands !== undefined)
@@ -1519,6 +1544,8 @@ function runtimeProtocolCapabilities(config) {
             : []),
         ...((config.workflows?.definitions || []).some(item => Object.values(item.definition.nodes).some(node => node.kind === 'approval' && (node.administration !== undefined || node.operationPolicy !== undefined)))
             ? ['workflow.node-administration'] : []),
+        ...((config.workflows?.definitions || []).some(item => Object.values(item.definition.nodes).some(node => node.kind === 'approval' && Object.values(node.operationPolicy || {}).some(policy => policy?.reasonRequired === false)))
+            ? ['workflow.optional-operation-reason'] : []),
         ...(config.frontend.authentication
             ? ['authentication.application-login-surface']
             : []),
@@ -1686,14 +1713,16 @@ function normalizeDataPolicyExpression(expression) {
     }
     return normalizeDataPolicyRule(expression);
 }
-function normalizeDataPolicyDeclaration(policy) {
+function normalizeDataPolicyDeclaration(policy, baselineRoleCode) {
     const common = {
         code: policy.code,
         name: policy.name,
         resourceCode: policy.resourceCode,
-        ...(policy.unrestrictedRoleCodes !== undefined
-            ? { unrestrictedRoleCodes: uniqueSorted(policy.unrestrictedRoleCodes) }
-            : {}),
+        ...(policy.publicRead !== undefined ? { publicRead: { fields: uniqueSorted(policy.publicRead.fields) } } : {}),
+        ...(policy.publicRead !== undefined ? { unrestrictedRoleCodes: uniqueSorted([...(policy.unrestrictedRoleCodes || []), baselineRoleCode]) } :
+            policy.unrestrictedRoleCodes !== undefined
+                ? { unrestrictedRoleCodes: uniqueSorted(policy.unrestrictedRoleCodes) }
+                : {}),
     };
     if (policy.readExpression !== undefined) {
         const readExpression = normalizeDataPolicyExpression(policy.readExpression);
@@ -1733,9 +1762,9 @@ export function renderGeneratedContracts(config, contract = compileContractBundl
         item.code,
         normalizeResourceSurface(item.surface || defaultResourceSurface(item)),
     ]));
-    const resourceDefinitions = `{${resourceCodes.length
-        ? `\n${sorted(config.data?.resources || [], item => item.code)
-            .map(item => `  ${JSON.stringify(item.code)}: {\n` +
+    const resourceDefinitionEntries = sorted(config.data?.resources || [], item => item.code).map(item => [
+        item.code,
+        `{\n` +
             `    code: ${JSON.stringify(item.code)},\n` +
             `    name: ${JSON.stringify(item.name)},\n` +
             (item.detailRouteCode
@@ -1750,9 +1779,8 @@ export function renderGeneratedContracts(config, contract = compileContractBundl
             (item.recordComments !== undefined ? `    recordComments: ${JSON.stringify(item.recordComments)},\n` : '') +
             (item.recordDeletion !== undefined ? `    recordDeletion: ${JSON.stringify(item.recordDeletion)},\n` : '') +
             `    surface: resourceSurfaces[${JSON.stringify(item.code)}],\n` +
-            '  }')
-            .join(',\n')}\n`
-        : ''}}`;
+            '  }',
+    ]);
     const operationEntries = contract.operations.map(operation => [
         camel(operation.code),
         operation,
@@ -1795,8 +1823,8 @@ export function renderGeneratedContracts(config, contract = compileContractBundl
         `export const appName = ${JSON.stringify(config.app.name)} as const;`,
         `export const appPerspectives = ${JSON.stringify(contract.perspectives, null, 2)} as const;`,
         `export const resourceCodes = ${JSON.stringify(resourceCodes, null, 2)} as const;`,
-        `export const resourceSurfaces = ${JSON.stringify(resourceSurfaces, null, 2)} as const;`,
-        `export const resourceDefinitions = ${resourceDefinitions} as const;`,
+        renderTypedRecord('resourceSurfaces', Object.entries(resourceSurfaces).map(([key, value]) => [key, JSON.stringify(value, null, 2)])),
+        renderTypedRecord('resourceDefinitions', resourceDefinitionEntries),
         `export const capabilities = ${JSON.stringify(capabilities, null, 2)} as const;`,
         `export const appOperations = ${renderEntries(operationEntries)} as const;`,
         `export const appRoutes = ${renderEntries(routeEntries)} as const;`,
@@ -2135,6 +2163,7 @@ function normalizeDataFieldSource(source) {
             : {}),
         ...(source.pageSize !== undefined ? { pageSize: source.pageSize } : {}),
         ...(source.loadMode ? { loadMode: source.loadMode } : {}),
+        ...(source.clearOnBindingChange === undefined ? {} : { clearOnBindingChange: source.clearOnBindingChange }),
     };
 }
 export function sha256Bytes(content) {
@@ -2175,6 +2204,15 @@ function renderEntries(entries) {
         .join(',\n');
     return `{\n${body}\n}`;
 }
+function renderTypedRecord(name, entries) {
+    if (entries.length === 0)
+        return `export const ${name} = {} as const;`;
+    // Named entries keep declaration emit below TypeScript's aggregate inference limit.
+    const declarations = entries.map(([, value], index) => `const ${name}Item${index} = ${value} as const;`);
+    const types = entries.map(([key], index) => `  readonly ${JSON.stringify(key)}: typeof ${name}Item${index};`);
+    const values = entries.map(([key], index) => `  ${JSON.stringify(key)}: ${name}Item${index}`);
+    return [...declarations, `export const ${name}: {\n${types.join('\n')}\n} = {\n${values.join(',\n')}\n};`].join('\n');
+}
 function safeProperty(value) {
     return /^[A-Za-z_$][A-Za-z0-9_$]*$/.test(value)
         ? value