openxiangda 1.0.138 → 1.0.140

package/README.md

@@ -82,7 +82,7 @@ Domestic npm mirrors may lag and return an older OpenXiangda version. `openxiang
 
 Architecture-class requests are plan-gated by default. For new apps, complex pages, login/register, public/no-login access, role/data-scope design, workflow/automation, App Function, connector, notification, and external integration work, AI agents must plan first and implement only after the user confirms the design.
 
-High-risk implementation is also SDD-gated. New workspaces include `openspec/` by default. Before changing forms, pages, resources, functions, automations, workflows, JS_CODE nodes, runtime code, or `app-workspace.config.ts`, run `openxiangda sdd context --json`, create or continue a change with `openxiangda sdd propose <change>`, and wait for `openxiangda sdd approve <change>`. Release checks fail when high-risk targets are not covered by an approved active change; emergency releases can use `--sdd-bypass --reason "..."`, which writes `openspec/changes/bypass-log.md`.
+High-risk implementation is also SDD-gated. New workspaces include OpenXiangda SDD v2 records under `openspec/` by default. Before changing forms, pages, resources, functions, automations, workflows, JS_CODE nodes, runtime code, or `app-workspace.config.ts`, run `openxiangda sdd context --json`, create or continue a change with `openxiangda sdd propose <change>`, and wait for `openxiangda sdd approve <change>`. `approve` only opens the implementation gate; release checks also require `coverage.json`, `release.json`, `evidence.md`, `tasks.md`, and delta specs to pass `openxiangda sdd verify <change> --changed`. Emergency releases can use `--sdd-bypass --reason "..."`, which writes `openspec/changes/bypass-log.md` and appends bypass evidence to the active approved change when one exists.
 
 Before confirmation, agents may read, inspect, snapshot, dry-run, ask questions, and output/write the architecture document. They must not edit source files, mutate platform resources, publish, deploy, send notifications, or call live write/delete endpoints.
 

package/lib/cli.js

@@ -127,7 +127,7 @@ Usage:
   openxiangda doctor [--profile name] [--app-type APP_XXX] [--release] [--json]
   openxiangda contract list|explain <contract-name> [--json]
   openxiangda design gates|template|review [--topic code] [--json]
-  openxiangda sdd init|propose|approve|status|context|verify|sync|archive [change] [--json]
+  openxiangda sdd init|migrate|propose|approve|status|context|verify|sync|archive [change] [--json]
   openxiangda env [--profile name]
   openxiangda workspace init [dir] [--name package-name] [--runtime legacy|react-spa] [--install] [--profile name --app-type APP_XXX]
   openxiangda workspace init [dir] --profile <name> --app-name <app-name> [--runtime legacy|react-spa] [--install]
@@ -531,26 +531,28 @@ async function sdd(args) {
   const { flags, positional } = parseArgs(rest);
   if (wantsSubcommandHelp(subcommand, flags)) {
     print([
-      '用法: openxiangda sdd init|propose|approve|status|context|verify|sync|archive [change] [--json]',
+      '用法: openxiangda sdd init|migrate|propose|approve|status|context|verify|sync|archive [change] [--json]',
       '常用流程:',
-      '  openxiangda sdd init',
-      '  openxiangda sdd propose add-customer-list --title "客户列表" --forms customer --pages customer_list',
+      '  openxiangda sdd init --upgrade',
+      '  openxiangda sdd propose add-customer-list --title "客户列表" --forms customer --pages customer_list --resources',
       '  openxiangda sdd approve add-customer-list --summary "用户确认设计"',
       '  openxiangda sdd context --json',
       '  openxiangda sdd verify add-customer-list --changed --json',
       '  openxiangda sdd archive add-customer-list',
       '说明:',
       '  - SDD 记录保存在 openspec/，不依赖官方 OpenSpec CLI。',
-      '  - 高风险发布需要 approved change 覆盖本次 forms/pages/resources/runtime 目标。',
+      '  - 新工作区使用 openxiangda-sdd-v2：proposal/specs/design/tasks/evidence 给人读，coverage.json/release.json 给 CLI 校验。',
+      '  - 高风险发布需要 approved change 的 coverage 覆盖本次 forms/pages/resources/runtime 目标和高风险文件。',
     ].join('\n'));
     return;
   }
 
-  if (subcommand === 'init') {
+  if (subcommand === 'init' || subcommand === 'migrate' || subcommand === 'upgrade') {
     const result = initSddWorkspace({
       cwd: process.cwd(),
       path: flags.path,
       force: Boolean(flags.force),
+      upgrade: Boolean(flags.upgrade || subcommand === 'migrate' || subcommand === 'upgrade'),
     });
     if (flags.json) return writeJson(result);
     printSddInitReport(result);
@@ -586,13 +588,17 @@ async function sdd(args) {
   }
 
   if (subcommand === 'status' || subcommand === 'context') {
-    const status = buildSddStatus({ cwd: process.cwd(), configText: readWorkspaceConfigText() });
     const releasePlan = buildWorkspaceReleasePlan({
       changed: Boolean(flags.changed || flags['changed-only']),
       since: flags.since,
       profile: flags.profile || '<profile>',
       skipSdd: true,
     });
+    const status = buildSddStatus({
+      cwd: process.cwd(),
+      configText: readWorkspaceConfigText(),
+      releasePlan,
+    });
     const result = {
       ...status,
       releasePlan,
@@ -667,7 +673,7 @@ async function sdd(args) {
     return;
   }
 
-  fail('用法: openxiangda sdd init|propose|approve|status|context|verify|sync|archive [change] [--json]');
+  fail('用法: openxiangda sdd init|migrate|propose|approve|status|context|verify|sync|archive [change] [--json]');
 }
 
 function parseSddAffectedFlags(flags) {
@@ -681,6 +687,11 @@ function parseSddAffectedFlags(flags) {
   return {
     forms: split(flags.forms || flags.form),
     pages: split(flags.pages || flags.page),
+    functions: split(flags.functions || flags.function),
+    automations: split(flags.automations || flags.automation),
+    workflows: split(flags.workflows || flags.workflow),
+    jsCodeNodes: split(flags['js-code-nodes'] || flags.jsCodeNodes || flags['js-code']),
+    files: split(flags.files || flags.file),
     resources: Boolean(flags.resources),
     runtime: Boolean(flags.runtime),
     backend: Boolean(flags.backend),
@@ -689,7 +700,7 @@ function parseSddAffectedFlags(flags) {
 }
 
 function printSddInitReport(result) {
-  const lines = [`OpenXiangda SDD initialized: ${result.path}`];
+  const lines = [`OpenXiangda SDD initialized: ${result.path}`, `schemaVersion: ${result.schemaVersion || 'unknown'}`];
   for (const op of result.operations) {
     lines.push(`- ${op.action}: ${op.path}`);
   }
@@ -700,12 +711,18 @@ function printSddStatusReport(result) {
   const lines = [
     `OpenXiangda SDD status: ${result.governance.initialized ? 'initialized' : 'not initialized'}`,
     `path: ${result.governance.path}`,
+    `schemaVersion: ${result.schemaVersion || result.governance.schemaVersion || 'unknown'}`,
     `strictHighRisk: ${result.governance.strictHighRisk ? 'true' : 'false'}`,
     `active changes: ${result.activeChanges.length}`,
   ];
   for (const change of result.activeChanges) {
     lines.push(`- ${change.id}: ${change.status}${change.approvedAt ? ` approvedAt=${change.approvedAt}` : ''}`);
   }
+  if (result.activeChange) lines.push(`activeChange: ${result.activeChange.id}`);
+  if (result.blockingErrors?.length) {
+    lines.push('blockingErrors:');
+    for (const error of result.blockingErrors) lines.push(`- ${error.name}: ${error.message}`);
+  }
   if (result.bypassLog) lines.push(`bypass log: ${result.bypassLog}`);
   print(lines.join('\n'));
 }
@@ -714,6 +731,7 @@ function printSddVerifyReport(result) {
   const lines = [
     `OpenXiangda SDD verify: ${result.passed ? 'passed' : 'failed'}`,
     `change: ${result.change.id}`,
+    `schemaVersion: ${result.schemaVersion || result.change.schemaVersion || 'unknown'}`,
   ];
   if (result.errors.length > 0) {
     lines.push('Errors:');
@@ -4629,7 +4647,10 @@ async function resource(args) {
     assertSddReleaseGate(
       buildExplicitSddReleasePlan(
         { forms: [], pages: [], resources: true, runtime: false, other: [] },
-        { files: getWorkspaceChangedFiles() }
+        {
+          files: getWorkspaceChangedFiles(),
+          commands: [`openxiangda resource publish --profile ${profileName}`],
+        }
       ),
       flags,
       'openxiangda resource publish'
@@ -4696,7 +4717,10 @@ async function runtime(args) {
     assertSddReleaseGate(
       buildExplicitSddReleasePlan(
         { forms: [], pages: [], resources: false, runtime: true, other: [] },
-        { files: getWorkspaceChangedFiles() }
+        {
+          files: getWorkspaceChangedFiles(),
+          commands: [`openxiangda runtime deploy --profile ${target.profileName}`],
+        }
       ),
       flags,
       'openxiangda runtime deploy'
@@ -5313,7 +5337,7 @@ async function commands(args) {
       'doctor [--profile name] [--app-type APP_XXX] [--release]',
       'contract list|explain <contract-name>',
       'design gates|template|review [--topic code]',
-      'sdd init|propose|approve|status|context|verify|sync|archive',
+      'sdd init|migrate|propose|approve|status|context|verify|sync|archive',
       'env',
       'workspace init|bind|plan|check|publish [--app-name] [--changed|--since|--form|--page|--only|--dry-run|--force|--resources|--skip-resources|--prune]',
       'app list|create|snapshot',
@@ -5347,7 +5371,7 @@ async function commands(args) {
       'public-access is the new React SPA public policy resource for /view/:appType/public/* routes; page code should use PublicAccessGate, and Page SDK hooks must stay inside OpenXiangdaProvider + OpenXiangdaPageProvider.',
       'settings public-access is legacy form public-access compatibility/repair and should not be used for new React SPA apps.',
       'Direct live mutation commands should use --dry-run first and --write-manifest when the repository should remain source of truth.',
-      'OpenXiangda native SDD uses openspec/ records; high-risk publishes require an approved change unless --sdd-bypass --reason is used.',
+      'OpenXiangda native SDD uses openspec/ records; high-risk publishes require an approved change with coverage.json/release.json verification unless --sdd-bypass --reason is used.',
     ],
   };
   if (flags.json) return writeJson(manifest);
@@ -7079,6 +7103,12 @@ function validateResourceItem(kind, item, errors, warnings) {
   if (kind === 'scopeGrantSources') {
     if (!item.name) warnings.push(`${label}: 未声明 name，将使用 code`);
     if (!item.sourceFormUuid && !item.formUuid) errors.push(`${label}: 缺少 sourceFormUuid`);
+    if (
+      item.syncMode !== undefined &&
+      !['on_write', 'manual'].includes(String(item.syncMode))
+    ) {
+      errors.push(`${label}: syncMode 只能是 on_write 或 manual`);
+    }
     const subjectMappings = item.subjectMappings || item.subjects;
     const dimensionMappings = item.dimensionMappings || item.dimensions;
     if (!Array.isArray(subjectMappings) || subjectMappings.length === 0) {
@@ -7159,6 +7189,11 @@ function validateScopePermissionResources(manifest, errors, warnings) {
       .map(String)
   );
   const scopePolicyRefs = [];
+  for (const source of manifest.scopeGrantSources || []) {
+    if (String(source.syncMode || '').trim() === 'manual') {
+      warnings.push(`${resourceLabel('scopeGrantSources', source)}: syncMode=manual，运行时来源表单变更不会自动物化；请确认有显式 scope sync 作业`);
+    }
+  }
   const inspectPermissionGroup = (kind, item) => {
     const groups = kind === 'dataViews'
       ? (Array.isArray(item.permissionGroups) ? item.permissionGroups : [])
@@ -10610,10 +10645,20 @@ function normalizeScopeGrantSourceManifest(source, bound) {
     effectiveFromField: source.effectiveFromField,
     effectiveToField: source.effectiveToField,
     filterJson: source.filterJson || source.filter,
+    syncMode: normalizeScopeGrantSourceSyncMode(source.syncMode, source.sync),
     enabled: source.enabled !== false,
   });
 }
 
+function normalizeScopeGrantSourceSyncMode(value, legacySync) {
+  const raw = String(value || '').trim().toLowerCase();
+  if (['manual', 'off', 'none', 'disabled', 'false'].includes(raw)) {
+    return 'manual';
+  }
+  if (legacySync === false) return 'manual';
+  return 'on_write';
+}
+
 function normalizeDataScopePolicyManifest(policy) {
   const code = policy.code || policy.resourceCode;
   return stripUndefinedValues({
@@ -12346,6 +12391,7 @@ function buildWorkspaceReleasePlan(options = {}) {
     ? getWorkspaceChangedFiles({ since: options.since })
     : getAllWorkspaceSourceFiles();
   const targets = classifyWorkspaceFiles(files, runtimeMode);
+  if (options.includeResources) targets.resources = true;
   const issues = scanWorkspaceReliabilityIssues(files);
   const errors = issues
     .filter(issue => issue.severity === 'error')
@@ -12361,6 +12407,7 @@ function buildWorkspaceReleasePlan(options = {}) {
         configText,
         targets,
         files,
+        commands,
       });
   const sddErrors = sdd ? sdd.errors.map(error => ({ name: error.name, message: error.message })) : [];
   const checks = [
@@ -12450,14 +12497,17 @@ function printWorkspaceReleasePlan(plan) {
 
 function buildExplicitSddReleasePlan(targets, options = {}) {
   const configText = readWorkspaceConfigText();
+  const commands = options.commands || [];
   const sdd = buildSddGovernanceReport({
     cwd: process.cwd(),
     configText,
     targets,
     files: options.files || [],
+    commands,
   });
   return {
     targets,
+    commands,
     sdd,
     errors: sdd.errors.map(error => ({ name: error.name, message: error.message })),
   };
@@ -12482,15 +12532,12 @@ function assertSddReleaseGate(plan, flags, command) {
 
 function buildWorkspacePublishSddPlan(publishOptions, runtimeMode, profile) {
   if (publishOptions.changed || (!publishOptions.targetForm && !publishOptions.targetPage && !publishOptions.only)) {
-    const plan = buildWorkspaceReleasePlan({
+    return buildWorkspaceReleasePlan({
       changed: publishOptions.changed,
       since: publishOptions.since,
       profile,
+      includeResources: publishOptions.includeResources,
     });
-    if (publishOptions.includeResources) {
-      plan.targets.resources = true;
-    }
-    return plan;
   }
   const targets = {
     forms: [],
@@ -12515,7 +12562,7 @@ function buildWorkspacePublishSddPlan(publishOptions, runtimeMode, profile) {
   targets.forms = unique(targets.forms).sort();
   targets.pages = unique(targets.pages).sort();
   const commands = buildWorkspaceReleaseCommands(targets, runtimeMode, profile);
-  const sddPlan = buildExplicitSddReleasePlan(targets, { files: [] });
+  const sddPlan = buildExplicitSddReleasePlan(targets, { files: [], commands });
   return {
     workspace: {
       cwd: process.cwd(),

package/lib/design-gates.js

@@ -135,7 +135,7 @@ const DESIGN_GATE_TOPICS = [
       '正式后台优先选择 managed-platform-account；如果平台账号已存在，选择 existing-platform-user-assignment；固定内部门户选择 static-role-permission',
       'query-param-context 仅用于低风险页面上下文、筛选条件或公开 ticket 输入，不作为敏感数据授权依据',
       '角色写 src/resources/roles，页面组写 permissions/page-groups，表单组写 permissions/form-groups，显式声明 actions/dataPermission/fieldAccessPolicy；平台内部仍兼容存储为 operations',
-      '复杂业务范围优先写 permissions/scope-dimensions、permissions/scope-grant-sources、permissions/data-scope-policies，并在表单权限组或 data-view 权限组使用 dataPermission.type=scope_policy',
+      '复杂业务范围优先写 permissions/scope-dimensions、permissions/scope-grant-sources、permissions/data-scope-policies，并在表单权限组或 data-view 权限组使用 dataPermission.type=scope_policy；授权来源默认 syncMode=on_write，由平台在来源表单写入后自动物化',
       'scope_policy 只表达数据范围，actions 表达操作能力；按钮隐藏只是 UX，后端 action check 才是权威',
       'scope_policy 默认语义是个人授权 + 当前应用角色授权；多维 rules 显式 AND；空授权集合拒绝；管理员绕过但可审计',
       '能管理角色或给别人分配角色的应用角色必须在 roles manifest 声明 apiPermissionCodes；至少包含 app:role:manage，按需加入 app:page-permission-group:manage、app:form-permission-group:manage、app:organization:manage',