openxiangda 1.0.127 → 1.0.129

package/README.md

@@ -44,7 +44,7 @@ openxiangda app snapshot APP_XXXX --profile dev --json
 
 User tokens are stored in `~/.openxiangda/profiles.json` with `0600` permissions. Shared workspace environment values, including `APP_OSS_*`, can live in `~/.openxiangda/.env` and are inherited by new workspaces. Project `.env` files still work and override the global defaults. Project state is stored in `.openxiangda/state.json` and contains only profile-specific resource IDs.
 
-React SPA workspaces publish their frontend with `openxiangda runtime deploy`. The default upload mode is staged multipart: each `dist/` file is uploaded separately, then the CLI submits a release manifest and activates it unless `--no-activate` is passed. Upload progress, timeout, and `traceId` are written to stderr; `--json` stdout remains the final JSON result. Use `--upload-timeout-ms <ms>` or `OPENXIANGDA_RUNTIME_UPLOAD_TIMEOUT_MS` to tune runtime upload/finalize timeouts. Use `--upload-mode legacy-json` only as a compatibility fallback for older platforms.
+React SPA workspaces publish their frontend with `openxiangda runtime deploy`. The default upload mode is `auto`: it tries staged multipart first, then falls back to built-in OSS direct upload if the staged file API returns HTTP 403. Use `--upload-mode oss-direct` to force built-in OSS direct upload, or `--upload-mode legacy-json` only as a compatibility fallback for older platforms. Upload progress, timeout, and `traceId` are written to stderr; `--json` stdout remains the final JSON result. Use `--upload-timeout-ms <ms>` or `OPENXIANGDA_RUNTIME_UPLOAD_TIMEOUT_MS` to tune runtime upload/finalize timeouts.
 
 React SPA templates include stable Vite manual chunk grouping for React, antd, ECharts, editor dependencies, and OpenXiangda runtime/component entrypoints. The SDK keeps large UI dependencies such as `antd-mobile` and `dayjs` external so the application bundler can split them by route. Applications should import from public package entrypoints such as `openxiangda`, `openxiangda/runtime`, and `openxiangda/runtime/react`; do not import `openxiangda/packages/sdk/dist/...` internals to chase bundle size.
 

package/lib/cli.js

@@ -155,7 +155,7 @@ Usage:
   openxiangda permission form-group-list|form-group-create|form-group-update|form-group-delete|form-group-bind
   openxiangda settings get|save|indexes|indexes-save|data-management|data-management-save|public-access
   openxiangda resource validate|plan|publish|pull|typegen|explain [--profile name] [--json] [--dry-run]
-  openxiangda runtime deploy [--profile name] [--dist dist] [--build-id id] [--upload-mode staged|legacy-json] [--upload-timeout-ms ms] [--no-build] [--no-activate] [--json]
+  openxiangda runtime deploy [--profile name] [--dist dist] [--build-id id] [--upload-mode auto|staged|oss-direct|legacy-json] [--upload-timeout-ms ms] [--no-build] [--no-activate] [--json]
   openxiangda runtime releases [--profile name] [--json]
   openxiangda runtime activate <releaseId> [--profile name] [--json]
   openxiangda inspect app|form|workflow|automation|permissions
@@ -3863,6 +3863,7 @@ async function runtime(args) {
       '  openxiangda runtime releases --profile <name>',
       '说明:',
       '  - deploy 上传当前工作区 dist/ 并激活 React SPA runtime release。',
+      '  - 默认 --upload-mode auto；multipart 上传遇到 403 时自动切换到阿里 OSS 直传。',
       '  - 如果平台服务较旧不支持分片上传，可临时使用 --upload-mode legacy-json。',
       '  - runtime 只发布前端产物；表单、流程、通知等资源仍走 resource publish。',
     ].join('\n'));
@@ -3901,10 +3902,42 @@ async function runtime(args) {
   if (subcommand === 'deploy') {
     const buildId = normalizeRuntimeBuildId(flags['build-id'] || createRuntimeBuildId());
     const distDir = path.resolve(process.cwd(), flags.dist || 'dist');
-    const assetBaseUrl = buildRuntimeAssetBaseUrl(target.appType, buildId);
     const uploadMode = normalizeRuntimeUploadMode(flags['upload-mode']);
     const uploadTimeoutMs = normalizeRuntimeUploadTimeoutMs(flags['upload-timeout-ms']);
     const traceId = createRuntimeTraceId();
+    const gatewayAssetBaseUrl = buildRuntimeAssetBaseUrl(target.appType, buildId);
+    let assetBaseUrl = gatewayAssetBaseUrl;
+    let effectiveUploadMode = uploadMode;
+    if (uploadMode === 'auto' || uploadMode === 'oss-direct') {
+      try {
+        const plan = await createRuntimeOssUploadBasePlan({
+          config,
+          profileName: target.profileName,
+          appType: target.appType,
+          buildId,
+          traceId,
+          timeoutMs: uploadTimeoutMs,
+        });
+        if (plan?.assetBaseUrl) {
+          assetBaseUrl = plan.assetBaseUrl;
+          if (uploadMode === 'auto') {
+            effectiveUploadMode = 'oss-direct';
+            printRuntimeProgress(
+              `runtime builtin OSS available; using OSS direct upload traceId=${traceId}`
+            );
+          }
+        }
+      } catch (error) {
+        if (uploadMode === 'oss-direct') {
+          throw error;
+        }
+        effectiveUploadMode = 'auto';
+        assetBaseUrl = gatewayAssetBaseUrl;
+        printRuntimeProgress(
+          `runtime builtin OSS preflight unavailable; using staged upload first traceId=${traceId}`
+        );
+      }
+    }
     if (!flags['no-build']) {
       runRuntimeBuild({
         buildId,
@@ -3919,26 +3952,58 @@ async function runtime(args) {
     });
     const totalBytes = files.reduce((sum, file) => sum + file.size, 0);
     printRuntimeProgress(
-      `runtime release upload: mode=${uploadMode} traceId=${traceId} files=${files.length} size=${formatBytes(totalBytes)} timeout=${uploadTimeoutMs}ms`
-    );
-    const releaseFiles =
-      uploadMode === 'legacy-json'
-        ? files.map(file => ({
-            path: file.path,
-            size: file.size,
-            sha256: file.sha256,
-            contentType: file.contentType,
-            contentBase64: file.buffer.toString('base64'),
-          }))
-        : await uploadRuntimeDistFilesStaged({
-            config,
-            profileName: target.profileName,
-            appType: target.appType,
-            buildId,
-            files,
-            traceId,
-            timeoutMs: uploadTimeoutMs,
-          });
+      `runtime release upload: mode=${effectiveUploadMode} traceId=${traceId} files=${files.length} size=${formatBytes(totalBytes)} timeout=${uploadTimeoutMs}ms`
+    );
+    let releaseFiles;
+    if (uploadMode === 'legacy-json') {
+      releaseFiles = files.map(file => ({
+        path: file.path,
+        size: file.size,
+        sha256: file.sha256,
+        contentType: file.contentType,
+        contentBase64: file.buffer.toString('base64'),
+      }));
+      effectiveUploadMode = 'legacy-json';
+    } else if (effectiveUploadMode === 'oss-direct') {
+      releaseFiles = await uploadRuntimeDistFilesOssDirect({
+        config,
+        profileName: target.profileName,
+        appType: target.appType,
+        buildId,
+        files,
+        traceId,
+        timeoutMs: uploadTimeoutMs,
+      });
+    } else {
+      try {
+        releaseFiles = await uploadRuntimeDistFilesStaged({
+          config,
+          profileName: target.profileName,
+          appType: target.appType,
+          buildId,
+          files,
+          traceId,
+          timeoutMs: uploadTimeoutMs,
+        });
+      } catch (error) {
+        if (uploadMode !== 'auto' || !isRuntimeStagedUploadBlocked(error)) {
+          throw error;
+        }
+        effectiveUploadMode = 'oss-direct';
+        printRuntimeProgress(
+          `runtime staged upload blocked by HTTP 403; fallback to OSS direct upload traceId=${traceId}`
+        );
+        releaseFiles = await uploadRuntimeDistFilesOssDirect({
+          config,
+          profileName: target.profileName,
+          appType: target.appType,
+          buildId,
+          files,
+          traceId,
+          timeoutMs: uploadTimeoutMs,
+        });
+      }
+    }
     const data = await requestWithAuth(
       config,
       target.profileName,
@@ -3957,6 +4022,7 @@ async function runtime(args) {
       }
     );
     saveRuntimeReleaseState(target, data);
+    const releaseAssetBaseUrl = data?.assetBaseUrl || assetBaseUrl;
     const result = {
       appType: target.appType,
       buildId,
@@ -3964,9 +4030,9 @@ async function runtime(args) {
       distDir,
       fileCount: files.length,
       totalBytes,
-      assetBaseUrl,
+      assetBaseUrl: releaseAssetBaseUrl,
       activated: !flags['no-activate'],
-      uploadMode,
+      uploadMode: effectiveUploadMode,
       traceId,
     };
     if (flags.json) return writeJson(result);
@@ -3975,9 +4041,9 @@ async function runtime(args) {
         `runtime release 已上传: ${target.appType}`,
         `build: ${buildId}`,
         `files: ${files.length} (${formatBytes(totalBytes)})`,
-        `upload: ${uploadMode}`,
+        `upload: ${effectiveUploadMode}`,
         `traceId: ${traceId}`,
-        `assetBase: ${assetBaseUrl}`,
+        `assetBase: ${releaseAssetBaseUrl}`,
         `active: ${result.activated ? 'yes' : 'no'}`,
       ].join('\n')
     );
@@ -3987,6 +4053,24 @@ async function runtime(args) {
   fail('用法: openxiangda runtime deploy|releases|activate [--profile name]');
 }
 
+async function createRuntimeOssUploadBasePlan(options) {
+  return await requestWithAuth(
+    options.config,
+    options.profileName,
+    `/openxiangda-api/v1/apps/${encodeURIComponent(options.appType)}/runtime/releases/oss-upload-plan`,
+    {
+      method: 'POST',
+      timeoutMs: options.timeoutMs,
+      headers: { 'x-openxiangda-trace-id': options.traceId },
+      body: {
+        buildId: options.buildId,
+        planOnly: true,
+        files: [],
+      },
+    }
+  );
+}
+
 function runRuntimeBuild(options) {
   const command = options.command || defaultRuntimeBuildCommand();
   if (options.jsonOutput) {
@@ -4082,6 +4166,95 @@ async function uploadRuntimeDistFilesStaged(options) {
   }));
 }
 
+async function uploadRuntimeDistFilesOssDirect(options) {
+  const files = options.files || [];
+  const plan = await requestWithAuth(
+    options.config,
+    options.profileName,
+    `/openxiangda-api/v1/apps/${encodeURIComponent(options.appType)}/runtime/releases/oss-upload-plan`,
+    {
+      method: 'POST',
+      timeoutMs: options.timeoutMs,
+      headers: { 'x-openxiangda-trace-id': options.traceId },
+      body: {
+        buildId: options.buildId,
+        files: files.map(file => ({
+          path: file.path,
+          size: file.size,
+          sha256: file.sha256,
+          contentType: file.contentType,
+        })),
+      },
+    }
+  );
+  const uploadFiles = Array.isArray(plan?.files) ? plan.files : [];
+  const uploadByPath = new Map(uploadFiles.map(file => [file.path, file]));
+  let completed = 0;
+  const results = await runWithConcurrency(
+    files,
+    RUNTIME_UPLOAD_CONCURRENCY,
+    async file => {
+      const uploadInfo = uploadByPath.get(file.path);
+      if (!uploadInfo?.uploadUrl) {
+        fail(`runtime OSS 上传计划缺少文件: ${file.path}`);
+      }
+      const uploaded = await uploadRuntimeDistFileToSignedUrl(options, file, uploadInfo);
+      completed += 1;
+      printRuntimeProgress(
+        `runtime OSS file uploaded [${completed}/${files.length}] ${file.path} ${formatBytes(file.size)} traceId=${options.traceId}`
+      );
+      return uploaded;
+    }
+  );
+  return results.map(file => ({
+    path: file.path,
+    size: file.size,
+    sha256: file.sha256,
+    contentType: file.contentType,
+    storageProvider: 'oss',
+    objectName: file.objectName,
+    bucketName: file.bucketName,
+  }));
+}
+
+async function uploadRuntimeDistFileToSignedUrl(options, file, uploadInfo) {
+  const timeoutMs = normalizeRuntimeUploadTimeoutMs(options.timeoutMs);
+  const controller = new AbortController();
+  const timer = setTimeout(() => controller.abort(), timeoutMs);
+  let response;
+  try {
+    response = await fetch(uploadInfo.uploadUrl, {
+      method: String(uploadInfo.uploadMethod || 'PUT').toUpperCase(),
+      headers: uploadInfo.headers || {},
+      body: file.buffer,
+      signal: controller.signal,
+    });
+  } catch (error) {
+    if (isAbortError(error)) {
+      throw new Error(`runtime OSS 文件上传超时: ${file.path}, timeout=${timeoutMs}ms`);
+    }
+    throw new Error(formatFetchError(error, `runtime OSS upload ${file.path}`));
+  } finally {
+    clearTimeout(timer);
+  }
+  if (!response.ok) {
+    const text = await response.text().catch(() => '');
+    throw new Error(
+      `runtime OSS 文件上传失败: ${file.path}, HTTP ${response.status}: ${
+        text || response.statusText || 'request failed'
+      }`
+    );
+  }
+  return {
+    path: file.path,
+    size: file.size,
+    sha256: file.sha256,
+    contentType: file.contentType,
+    objectName: uploadInfo.objectName,
+    bucketName: uploadInfo.bucketName,
+  };
+}
+
 async function uploadRuntimeDistFile(options, file) {
   const apiPath = apiPathWithQuery(
     `/openxiangda-api/v1/apps/${encodeURIComponent(options.appType)}/runtime/releases/files`,
@@ -4137,9 +4310,20 @@ async function runWithConcurrency(items, concurrency, worker) {
 }
 
 function normalizeRuntimeUploadMode(value) {
-  const normalized = String(value || 'staged').trim().toLowerCase();
-  if (normalized === 'staged' || normalized === 'legacy-json') return normalized;
-  fail(`--upload-mode 只支持 staged 或 legacy-json，当前: ${value}`);
+  const normalized = String(value || 'auto').trim().toLowerCase();
+  if (
+    normalized === 'auto' ||
+    normalized === 'staged' ||
+    normalized === 'oss-direct' ||
+    normalized === 'legacy-json'
+  ) {
+    return normalized;
+  }
+  fail(`--upload-mode 只支持 auto、staged、oss-direct 或 legacy-json，当前: ${value}`);
+}
+
+function isRuntimeStagedUploadBlocked(error) {
+  return /^HTTP 403\b/.test(String(error?.message || ''));
 }
 
 function normalizeRuntimeUploadTimeoutMs(value) {
@@ -5764,7 +5948,21 @@ function validateResourceItem(kind, item, errors, warnings) {
     return;
   }
 
-  if (kind === 'roles' && !item.name) errors.push(`${label}: 缺少 name`);
+  if (kind === 'roles') {
+    if (!item.name) errors.push(`${label}: 缺少 name`);
+    if (
+      item.apiPermissionCodes !== undefined &&
+      !Array.isArray(item.apiPermissionCodes)
+    ) {
+      errors.push(`${label}: apiPermissionCodes 必须是数组`);
+    }
+    if (
+      item.apiPermissionMode !== undefined &&
+      !['merge', 'replace'].includes(String(item.apiPermissionMode))
+    ) {
+      errors.push(`${label}: apiPermissionMode 只能是 merge 或 replace`);
+    }
+  }
   if (kind === 'menus' && !item.name) errors.push(`${label}: 缺少 name`);
   if (kind === 'workflows') {
     if (!item.formCode && !item.formUuid) errors.push(`${label}: 缺少 formCode 或 formUuid`);
@@ -6421,6 +6619,12 @@ async function fetchExistingResourceMaps(config, target, manifest) {
       })
     );
     indexByCode(maps.roles, normalizeItems(data), item => item.code);
+    await hydrateRoleApiPermissions(
+      config,
+      target,
+      maps.roles,
+      manifest.roles || []
+    );
   }
   if ((manifest.menus || []).length > 0) {
     const data = await requestWithAuth(
@@ -6640,6 +6844,118 @@ async function fetchExistingResourceMaps(config, target, manifest) {
   return maps;
 }
 
+function roleDeclaresApiPermissions(role) {
+  if (!Array.isArray(role?.apiPermissionCodes)) return false;
+  if (normalizePermissionCodeArray(role.apiPermissionCodes).length > 0) {
+    return true;
+  }
+  return String(role?.apiPermissionMode || '').trim().toLowerCase() === 'replace';
+}
+
+function normalizeApiPermissionMode(role) {
+  const mode = String(role?.apiPermissionMode || 'merge').trim().toLowerCase();
+  if (mode === 'merge' || mode === 'replace') return mode;
+  fail(`${resourceLabel('role', role)}: apiPermissionMode 只能是 merge 或 replace`);
+}
+
+function sameStringSet(left, right) {
+  const a = normalizePermissionCodeArray(left);
+  const b = normalizePermissionCodeArray(right);
+  if (a.length !== b.length) return false;
+  const bSet = new Set(b);
+  return a.every(item => bSet.has(item));
+}
+
+function isSubsetStringSet(subset, source) {
+  const sourceSet = new Set(normalizePermissionCodeArray(source));
+  return normalizePermissionCodeArray(subset).every(item => sourceSet.has(item));
+}
+
+function normalizeApiPermissionRecords(data) {
+  return flattenItems(normalizeItems(data)).filter(item => item?.code);
+}
+
+async function fetchRoleApiPermissions(config, target, roleId) {
+  if (!roleId) return [];
+  const data = await requestWithAuth(
+    config,
+    target.profileName,
+    `/permission/api/role/${encodeURIComponent(roleId)}`
+  );
+  return normalizeApiPermissionRecords(data);
+}
+
+async function hydrateRoleApiPermissions(config, target, roleMap, desiredRoles) {
+  const roles = (desiredRoles || []).filter(roleDeclaresApiPermissions);
+  if (roles.length === 0) return;
+  for (const role of roles) {
+    const code = role.code || role.resourceCode;
+    const existing = roleMap.get(code);
+    if (!existing?.id) continue;
+    const permissions = await fetchRoleApiPermissions(config, target, existing.id);
+    roleMap.set(code, {
+      ...existing,
+      apiPermissionCodes: normalizePermissionCodeArray(
+        permissions.map(item => item.code)
+      ),
+    });
+  }
+}
+
+async function fetchAppApiPermissionMap(config, target) {
+  const data = await requestWithAuth(
+    config,
+    target.profileName,
+    apiPathWithQuery('/permission/api', {
+      scope: 'app',
+      appType: target.appType,
+      page: 1,
+      limit: 1000,
+    })
+  );
+  const map = new Map();
+  for (const item of normalizeApiPermissionRecords(data)) {
+    map.set(String(item.code), item);
+  }
+  return map;
+}
+
+async function syncRoleApiPermissions(config, target, role, roleId) {
+  if (!roleDeclaresApiPermissions(role) || !roleId) return null;
+  const desiredCodes = normalizePermissionCodeArray(role.apiPermissionCodes);
+  const mode = normalizeApiPermissionMode(role);
+  const currentPermissions = await fetchRoleApiPermissions(config, target, roleId);
+  const currentCodes = normalizePermissionCodeArray(
+    currentPermissions.map(item => item.code)
+  );
+  const nextCodes =
+    mode === 'replace' ? desiredCodes : unique([...currentCodes, ...desiredCodes]);
+  if (sameStringSet(currentCodes, nextCodes)) {
+    return { action: 'noop', mode, codes: desiredCodes };
+  }
+
+  const permissionMap = await fetchAppApiPermissionMap(config, target);
+  const currentByCode = new Map(
+    currentPermissions.map(item => [String(item.code), item])
+  );
+  const permissionIds = nextCodes.map(code => {
+    const permission = currentByCode.get(code) || permissionMap.get(code);
+    if (!permission?.id) {
+      fail(
+        `${resourceLabel('role', role)}: 未找到接口权限点 ${code}，请确认平台已 seed 该权限`
+      );
+    }
+    return permission.id;
+  });
+
+  await requestWithAuth(config, target.profileName, '/permission/api/assign', {
+    method: 'POST',
+    body: { roleId, permissionIds },
+  });
+
+  return { action: 'update', mode, codes: desiredCodes };
+}
+
 function addPlanActions(actions, kind, desiredItems = [], existingMap, equals) {
   for (const item of desiredItems) {
     const code = item.code || item.resourceCode || item.methodName;
@@ -6821,7 +7137,19 @@ async function publishRoleResources(config, target, roles, result, options = {})
         { method: 'POST', body: { userIds: role.userIds } }
       );
     }
-    result.published.push({ kind: 'role', code: role.code, action: existing ? 'update' : 'create', id: data?.id });
+    const apiPermissions = await syncRoleApiPermissions(
+      config,
+      target,
+      role,
+      data?.id
+    );
+    result.published.push({
+      kind: 'role',
+      code: role.code,
+      action: existing ? 'update' : 'create',
+      id: data?.id,
+      ...(apiPermissions ? { apiPermissions } : {}),
+    });
   }
 }
 
@@ -8124,10 +8452,17 @@ async function pullResources(config, target) {
   );
   for (const role of normalizeItems(roles)) {
     const filePath = path.join(baseDir, 'roles', `${role.code}.json`);
+    const apiPermissions = role.id
+      ? await fetchRoleApiPermissions(config, target, role.id)
+      : [];
+    const apiPermissionCodes = normalizePermissionCodeArray(
+      apiPermissions.map(item => item.code)
+    );
     writeResourceJsonFile(filePath, {
       code: role.code,
       name: role.name,
       description: role.description || '',
+      ...(apiPermissionCodes.length > 0 ? { apiPermissionCodes } : {}),
     });
     written.push(path.relative(process.cwd(), filePath));
   }
@@ -9313,10 +9648,17 @@ function withoutResourceMeta(value) {
 }
 
 function roleEquals(desired, existing) {
-  return (
+  const metadataEquals =
     String(existing.name || '') === String(desired.name || desired.code || '') &&
-    String(existing.description || '') === String(desired.description || '')
-  );
+    String(existing.description || '') === String(desired.description || '');
+  if (!metadataEquals) return false;
+  if (!roleDeclaresApiPermissions(desired)) return true;
+
+  const desiredCodes = normalizePermissionCodeArray(desired.apiPermissionCodes);
+  const existingCodes = normalizePermissionCodeArray(existing.apiPermissionCodes);
+  return normalizeApiPermissionMode(desired) === 'replace'
+    ? sameStringSet(desiredCodes, existingCodes)
+    : isSubsetStringSet(desiredCodes, existingCodes);
 }
 
 function menuEquals(bound, desired, existing) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "openxiangda",
-  "version": "1.0.127",
+  "version": "1.0.129",
   "description": "OpenXiangda CLI, workspace build tools, runtime SDK, and form components.",
   "private": false,
   "bin": {

package/packages/sdk/dist/{ProcessPreview-Kexdosgu.d.mts → ProcessPreview-B2-umzSY.d.mts}

@@ -252,10 +252,13 @@ interface RuntimeRequestConfig {
     headers?: Record<string, string>;
     responseType?: 'json' | 'blob';
 }
+type RuntimeUploadProvider = 'platform' | 'oss' | 'builtin-oss';
 interface RuntimeUploadOptions {
-    uploadProvider?: 'platform' | 'oss';
+    uploadProvider?: RuntimeUploadProvider;
+    storageScope?: 'app' | 'platform';
     storageCode?: string;
     appType?: string;
+    uploadPurpose?: 'attachment' | 'image';
     imageCompression?: ImageCompressionConfig;
 }
 interface FormRuntimeApi {
@@ -297,6 +300,7 @@ interface FormEngineConfig {
     mode: FormEngineMode;
     formUuid: string;
     appType: string;
+    defaultUploadProvider?: RuntimeUploadProvider;
     formInstanceId?: string;
     submitBehavior?: FormSubmitBehavior;
     permissions?: {
@@ -592,6 +596,8 @@ interface AttachmentItem {
     uid?: string;
     status?: 'uploading' | 'done' | 'error';
     provider?: 'platform' | 'oss';
+    uploadProvider?: RuntimeUploadProvider;
+    storageScope?: 'app' | 'platform';
     storageCode?: string;
     appType?: string;
     objectName?: string;
@@ -642,8 +648,8 @@ interface AttachmentFieldProps extends BaseFieldProps {
     maxSize?: number;
     uploadAction?: string;
     bucketName?: string;
-    /** 自定义上传提供方；设置为 oss 时需同时配置 storageCode。 */
-    uploadProvider?: 'platform' | 'oss';
+    /** 自定义上传提供方；oss 需配置 storageCode，builtin-oss 使用平台内置 OSS。 */
+    uploadProvider?: RuntimeUploadProvider;
     /** src/resources/storage/<code>.json 中声明的存储 code。 */
     storageCode?: string;
     multiple?: boolean;
@@ -664,8 +670,8 @@ interface ImageFieldProps extends BaseFieldProps {
     accept?: string;
     uploadAction?: string;
     bucketName?: string;
-    /** 自定义上传提供方；设置为 oss 时需同时配置 storageCode。 */
-    uploadProvider?: 'platform' | 'oss';
+    /** 自定义上传提供方；oss 需配置 storageCode，builtin-oss 使用平台内置 OSS。 */
+    uploadProvider?: RuntimeUploadProvider;
     /** src/resources/storage/<code>.json 中声明的存储 code。 */
     storageCode?: string;
     multiple?: boolean;
@@ -1156,4 +1162,4 @@ interface ProcessPreviewProps {
 }
 declare const ProcessPreview: React__default.FC<ProcessPreviewProps>;
 
-export { type FormRuntimeApiConfig as $, type AddressFieldProps as A, type BaseFieldProps as B, type CascadeDateFieldProps as C, type DataFilter as D, type DepartmentSelectFieldProps as E, type DepartmentTreeNode as F, type DigitalSignatureFieldProps as G, type DigitalSignatureValue as H, type EditorChoiceOption as I, type EditorFieldProps as J, type EditorToolbarAction as K, type FieldBehavior as L, type FieldDefinition as M, type FieldLayoutNode as N, type FieldValueSyncConfig as O, type FormAppearanceConfig as P, type FormDataDeleteParams as Q, type FormDataQueryParams as R, type FormEffect as S, type FormEffectAction as T, type FormEffectCondition as U, type FormEffectConditionOperator as V, type FormEngineConfig as W, type FormEngineMode as X, type FormInstanceData as Y, type FormLayoutNode as Z, type FormRuntimeApi as _, type AddressValue as a, type SubFormFieldProps as a$, type FormRuntimeConfig as a0, type FormSchema as a1, FormSection as a2, type FormSectionProps as a3, type FormSubmitBehavior as a4, type FormTemplateConfig as a5, type GridLayoutCell as a6, type GridLayoutNode as a7, type ImageCompressionConfig as a8, type ImageCompressionVariantConfig as a9, type ProcessNodeType as aA, ProcessPreview as aB, type ProcessPreviewProps as aC, type ProcessRoute as aD, type ProcessStatus as aE, type ProcessTask as aF, type RadioFieldProps as aG, type ResubmitParams as aH, type ReturnParams as aI, type ReturnPolicy as aJ, type ReturnableNode as aK, type ReturnableNodeResult as aL, type RuntimeDataQueryParams as aM, type RuntimeDataQueryResult as aN, type RuntimeRequestConfig as aO, type RuntimeResponse as aP, type RuntimeUploadOptions as aQ, type SaveTaskParams as aR, type SectionLayoutNode as aS, type SelectFieldProps as aT, type SerialNumberFieldProps as aU, type SignaturePoint as aV, type StandardFormPageMode as aW, type StatusMeta as aX, type StepLayoutItem as aY, type StepsLayoutNode as aZ, type SubFormColumn as a_, type ImageFieldProps as aa, type ImageVariant as ab, type InitiatorSelectCandidate as ac, type InitiatorSelectRequirement as ad, type InitiatorSelectScope as ae, type InitiatorSelectedApprovers as af, type JSONFieldProps as ag, type LayoutVisibleWhen as ah, type LinkedFormOptionConfig as ai, type LocationFieldProps as aj, type LocationValue as ak, type LowcodePageMeta as al, type LowcodePageNode as am, type LowcodePageNodeType as an, type LowcodePageSchema as ao, type MultiSelectFieldProps as ap, type NumberFieldProps as aq, type OptionItem as ar, type OptionSourceConfig as as, type OptionSourceType as at, type PeopleShortcutConfig as au, type PeopleShortcutType as av, type PreviewParams as aw, type ProcessAction as ax, type ProcessBasicInfo as ay, type ProcessDefinition as az, type ApprovalActionType as b, type TabLayoutItem as b0, type TabsLayoutNode as b1, type TaskStatus as b2, type TextAreaFieldProps as b3, type TextFieldProps as b4, type TextShortcutConfig as b5, type TextShortcutType as b6, type TransferParams as b7, type UserDisplayFormat as b8, type UserItem as b9, type UserSelectFieldProps as ba, type ValidationPreset as bb, type ValidationRule as bc, type ViewPermissionQueryParams as bd, type ViewPermissionSummary as be, type WithdrawParams as bf, type ApprovalPermission as c, ApprovalTimeline as d, type ApprovalTimelineProps as e, type ApproveParams as f, type AssociationFormConfig as g, type AssociationFormFieldProps as h, type AssociationValue as i, type AttachmentFieldProps as j, type AttachmentImageVariants as k, type AttachmentItem as l, type BaseLayoutNode as m, type CascadeSelectFieldProps as n, type ChangeRecord as o, type ChangeRecordListResponse as p, type ChangeRecordQueryParams as q, type CheckboxFieldProps as r, type DataLinkageCondition as s, type DataLinkageConfig as t, type DateFieldProps as u, type DateRangeRestriction as v, type DateRestrictionConfig as w, type DateShortcutConfig as x, type DateShortcutType as y, type DefaultValueLinkageConfig as z };
+export { type FormRuntimeApiConfig as $, type AddressFieldProps as A, type BaseFieldProps as B, type CascadeDateFieldProps as C, type DataFilter as D, type DepartmentSelectFieldProps as E, type DepartmentTreeNode as F, type DigitalSignatureFieldProps as G, type DigitalSignatureValue as H, type EditorChoiceOption as I, type EditorFieldProps as J, type EditorToolbarAction as K, type FieldBehavior as L, type FieldDefinition as M, type FieldLayoutNode as N, type FieldValueSyncConfig as O, type FormAppearanceConfig as P, type FormDataDeleteParams as Q, type FormDataQueryParams as R, type FormEffect as S, type FormEffectAction as T, type FormEffectCondition as U, type FormEffectConditionOperator as V, type FormEngineConfig as W, type FormEngineMode as X, type FormInstanceData as Y, type FormLayoutNode as Z, type FormRuntimeApi as _, type AddressValue as a, type SubFormColumn as a$, type FormRuntimeConfig as a0, type FormSchema as a1, FormSection as a2, type FormSectionProps as a3, type FormSubmitBehavior as a4, type FormTemplateConfig as a5, type GridLayoutCell as a6, type GridLayoutNode as a7, type ImageCompressionConfig as a8, type ImageCompressionVariantConfig as a9, type ProcessNodeType as aA, ProcessPreview as aB, type ProcessPreviewProps as aC, type ProcessRoute as aD, type ProcessStatus as aE, type ProcessTask as aF, type RadioFieldProps as aG, type ResubmitParams as aH, type ReturnParams as aI, type ReturnPolicy as aJ, type ReturnableNode as aK, type ReturnableNodeResult as aL, type RuntimeDataQueryParams as aM, type RuntimeDataQueryResult as aN, type RuntimeRequestConfig as aO, type RuntimeResponse as aP, type RuntimeUploadOptions as aQ, type RuntimeUploadProvider as aR, type SaveTaskParams as aS, type SectionLayoutNode as aT, type SelectFieldProps as aU, type SerialNumberFieldProps as aV, type SignaturePoint as aW, type StandardFormPageMode as aX, type StatusMeta as aY, type StepLayoutItem as aZ, type StepsLayoutNode as a_, type ImageFieldProps as aa, type ImageVariant as ab, type InitiatorSelectCandidate as ac, type InitiatorSelectRequirement as ad, type InitiatorSelectScope as ae, type InitiatorSelectedApprovers as af, type JSONFieldProps as ag, type LayoutVisibleWhen as ah, type LinkedFormOptionConfig as ai, type LocationFieldProps as aj, type LocationValue as ak, type LowcodePageMeta as al, type LowcodePageNode as am, type LowcodePageNodeType as an, type LowcodePageSchema as ao, type MultiSelectFieldProps as ap, type NumberFieldProps as aq, type OptionItem as ar, type OptionSourceConfig as as, type OptionSourceType as at, type PeopleShortcutConfig as au, type PeopleShortcutType as av, type PreviewParams as aw, type ProcessAction as ax, type ProcessBasicInfo as ay, type ProcessDefinition as az, type ApprovalActionType as b, type SubFormFieldProps as b0, type TabLayoutItem as b1, type TabsLayoutNode as b2, type TaskStatus as b3, type TextAreaFieldProps as b4, type TextFieldProps as b5, type TextShortcutConfig as b6, type TextShortcutType as b7, type TransferParams as b8, type UserDisplayFormat as b9, type UserItem as ba, type UserSelectFieldProps as bb, type ValidationPreset as bc, type ValidationRule as bd, type ViewPermissionQueryParams as be, type ViewPermissionSummary as bf, type WithdrawParams as bg, type ApprovalPermission as c, ApprovalTimeline as d, type ApprovalTimelineProps as e, type ApproveParams as f, type AssociationFormConfig as g, type AssociationFormFieldProps as h, type AssociationValue as i, type AttachmentFieldProps as j, type AttachmentImageVariants as k, type AttachmentItem as l, type BaseLayoutNode as m, type CascadeSelectFieldProps as n, type ChangeRecord as o, type ChangeRecordListResponse as p, type ChangeRecordQueryParams as q, type CheckboxFieldProps as r, type DataLinkageCondition as s, type DataLinkageConfig as t, type DateFieldProps as u, type DateRangeRestriction as v, type DateRestrictionConfig as w, type DateShortcutConfig as x, type DateShortcutType as y, type DefaultValueLinkageConfig as z };