openxiangda-skill-kit 2.0.0-alpha.102 → 2.0.0-alpha.105
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "openxiangda-skill-kit",
|
|
3
|
-
"version": "2.0.0-alpha.
|
|
3
|
+
"version": "2.0.0-alpha.105",
|
|
4
4
|
"description": "Validation and deterministic packaging for OpenXiangda 2.0 AI skills.",
|
|
5
5
|
"type": "module",
|
|
6
6
|
"main": "./dist/index.js",
|
|
@@ -17,7 +17,7 @@
|
|
|
17
17
|
"README.md"
|
|
18
18
|
],
|
|
19
19
|
"dependencies": {
|
|
20
|
-
"openxiangda-devkit-core": "2.0.0-alpha.
|
|
20
|
+
"openxiangda-devkit-core": "2.0.0-alpha.84"
|
|
21
21
|
},
|
|
22
22
|
"devDependencies": {
|
|
23
23
|
"tsx": "4.23.12",
|
|
@@ -84,6 +84,22 @@ itself. The audit actor remains the application event consumer with eventId,
|
|
|
84
84
|
deliveryId and subscription code as initiating source. Missing or forged event
|
|
85
85
|
proof, arbitrary recipient values and user impersonation are rejected.
|
|
86
86
|
|
|
87
|
+
The owning subscription must also declare the dependency explicitly so the
|
|
88
|
+
immutable package capability closure cannot omit Notification Hub:
|
|
89
|
+
|
|
90
|
+
```ts
|
|
91
|
+
{
|
|
92
|
+
code: 'proposal-reminder-notification',
|
|
93
|
+
eventTypes: ['proposal.reminder.requested.v1'],
|
|
94
|
+
platformAccess: {
|
|
95
|
+
notification: { mode: 'business-standard' },
|
|
96
|
+
},
|
|
97
|
+
}
|
|
98
|
+
```
|
|
99
|
+
|
|
100
|
+
Do not add this declaration to subscriptions that do not call
|
|
101
|
+
`sendFromEvent()`. Unknown access kinds and notification modes fail closed.
|
|
102
|
+
|
|
87
103
|
## Detail navigation
|
|
88
104
|
|
|
89
105
|
Use a canonical navigation target with `PLATFORM_ROUTE`, `APP_ROUTE` or allowlisted `EXTERNAL_URL`, stable route code, path/query parameters and an authenticated access requirement. Do not place environment domains, bearer tokens, cookies, identity-switching credentials or secrets in template strings.
|