openxiangda 1.0.139 → 1.0.140

package/README.md

@@ -82,7 +82,7 @@ Domestic npm mirrors may lag and return an older OpenXiangda version. `openxiang
 
 Architecture-class requests are plan-gated by default. For new apps, complex pages, login/register, public/no-login access, role/data-scope design, workflow/automation, App Function, connector, notification, and external integration work, AI agents must plan first and implement only after the user confirms the design.
 
-High-risk implementation is also SDD-gated. New workspaces include `openspec/` by default. Before changing forms, pages, resources, functions, automations, workflows, JS_CODE nodes, runtime code, or `app-workspace.config.ts`, run `openxiangda sdd context --json`, create or continue a change with `openxiangda sdd propose <change>`, and wait for `openxiangda sdd approve <change>`. Release checks fail when high-risk targets are not covered by an approved active change; emergency releases can use `--sdd-bypass --reason "..."`, which writes `openspec/changes/bypass-log.md`.
+High-risk implementation is also SDD-gated. New workspaces include OpenXiangda SDD v2 records under `openspec/` by default. Before changing forms, pages, resources, functions, automations, workflows, JS_CODE nodes, runtime code, or `app-workspace.config.ts`, run `openxiangda sdd context --json`, create or continue a change with `openxiangda sdd propose <change>`, and wait for `openxiangda sdd approve <change>`. `approve` only opens the implementation gate; release checks also require `coverage.json`, `release.json`, `evidence.md`, `tasks.md`, and delta specs to pass `openxiangda sdd verify <change> --changed`. Emergency releases can use `--sdd-bypass --reason "..."`, which writes `openspec/changes/bypass-log.md` and appends bypass evidence to the active approved change when one exists.
 
 Before confirmation, agents may read, inspect, snapshot, dry-run, ask questions, and output/write the architecture document. They must not edit source files, mutate platform resources, publish, deploy, send notifications, or call live write/delete endpoints.
 

package/lib/cli.js

@@ -127,7 +127,7 @@ Usage:
   openxiangda doctor [--profile name] [--app-type APP_XXX] [--release] [--json]
   openxiangda contract list|explain <contract-name> [--json]
   openxiangda design gates|template|review [--topic code] [--json]
-  openxiangda sdd init|propose|approve|status|context|verify|sync|archive [change] [--json]
+  openxiangda sdd init|migrate|propose|approve|status|context|verify|sync|archive [change] [--json]
   openxiangda env [--profile name]
   openxiangda workspace init [dir] [--name package-name] [--runtime legacy|react-spa] [--install] [--profile name --app-type APP_XXX]
   openxiangda workspace init [dir] --profile <name> --app-name <app-name> [--runtime legacy|react-spa] [--install]
@@ -531,26 +531,28 @@ async function sdd(args) {
   const { flags, positional } = parseArgs(rest);
   if (wantsSubcommandHelp(subcommand, flags)) {
     print([
-      '用法: openxiangda sdd init|propose|approve|status|context|verify|sync|archive [change] [--json]',
+      '用法: openxiangda sdd init|migrate|propose|approve|status|context|verify|sync|archive [change] [--json]',
       '常用流程:',
-      '  openxiangda sdd init',
-      '  openxiangda sdd propose add-customer-list --title "客户列表" --forms customer --pages customer_list',
+      '  openxiangda sdd init --upgrade',
+      '  openxiangda sdd propose add-customer-list --title "客户列表" --forms customer --pages customer_list --resources',
       '  openxiangda sdd approve add-customer-list --summary "用户确认设计"',
       '  openxiangda sdd context --json',
       '  openxiangda sdd verify add-customer-list --changed --json',
       '  openxiangda sdd archive add-customer-list',
       '说明:',
       '  - SDD 记录保存在 openspec/，不依赖官方 OpenSpec CLI。',
-      '  - 高风险发布需要 approved change 覆盖本次 forms/pages/resources/runtime 目标。',
+      '  - 新工作区使用 openxiangda-sdd-v2：proposal/specs/design/tasks/evidence 给人读，coverage.json/release.json 给 CLI 校验。',
+      '  - 高风险发布需要 approved change 的 coverage 覆盖本次 forms/pages/resources/runtime 目标和高风险文件。',
     ].join('\n'));
     return;
   }
 
-  if (subcommand === 'init') {
+  if (subcommand === 'init' || subcommand === 'migrate' || subcommand === 'upgrade') {
     const result = initSddWorkspace({
       cwd: process.cwd(),
       path: flags.path,
       force: Boolean(flags.force),
+      upgrade: Boolean(flags.upgrade || subcommand === 'migrate' || subcommand === 'upgrade'),
     });
     if (flags.json) return writeJson(result);
     printSddInitReport(result);
@@ -586,13 +588,17 @@ async function sdd(args) {
   }
 
   if (subcommand === 'status' || subcommand === 'context') {
-    const status = buildSddStatus({ cwd: process.cwd(), configText: readWorkspaceConfigText() });
     const releasePlan = buildWorkspaceReleasePlan({
       changed: Boolean(flags.changed || flags['changed-only']),
       since: flags.since,
       profile: flags.profile || '<profile>',
       skipSdd: true,
     });
+    const status = buildSddStatus({
+      cwd: process.cwd(),
+      configText: readWorkspaceConfigText(),
+      releasePlan,
+    });
     const result = {
       ...status,
       releasePlan,
@@ -667,7 +673,7 @@ async function sdd(args) {
     return;
   }
 
-  fail('用法: openxiangda sdd init|propose|approve|status|context|verify|sync|archive [change] [--json]');
+  fail('用法: openxiangda sdd init|migrate|propose|approve|status|context|verify|sync|archive [change] [--json]');
 }
 
 function parseSddAffectedFlags(flags) {
@@ -681,6 +687,11 @@ function parseSddAffectedFlags(flags) {
   return {
     forms: split(flags.forms || flags.form),
     pages: split(flags.pages || flags.page),
+    functions: split(flags.functions || flags.function),
+    automations: split(flags.automations || flags.automation),
+    workflows: split(flags.workflows || flags.workflow),
+    jsCodeNodes: split(flags['js-code-nodes'] || flags.jsCodeNodes || flags['js-code']),
+    files: split(flags.files || flags.file),
     resources: Boolean(flags.resources),
     runtime: Boolean(flags.runtime),
     backend: Boolean(flags.backend),
@@ -689,7 +700,7 @@ function parseSddAffectedFlags(flags) {
 }
 
 function printSddInitReport(result) {
-  const lines = [`OpenXiangda SDD initialized: ${result.path}`];
+  const lines = [`OpenXiangda SDD initialized: ${result.path}`, `schemaVersion: ${result.schemaVersion || 'unknown'}`];
   for (const op of result.operations) {
     lines.push(`- ${op.action}: ${op.path}`);
   }
@@ -700,12 +711,18 @@ function printSddStatusReport(result) {
   const lines = [
     `OpenXiangda SDD status: ${result.governance.initialized ? 'initialized' : 'not initialized'}`,
     `path: ${result.governance.path}`,
+    `schemaVersion: ${result.schemaVersion || result.governance.schemaVersion || 'unknown'}`,
     `strictHighRisk: ${result.governance.strictHighRisk ? 'true' : 'false'}`,
     `active changes: ${result.activeChanges.length}`,
   ];
   for (const change of result.activeChanges) {
     lines.push(`- ${change.id}: ${change.status}${change.approvedAt ? ` approvedAt=${change.approvedAt}` : ''}`);
   }
+  if (result.activeChange) lines.push(`activeChange: ${result.activeChange.id}`);
+  if (result.blockingErrors?.length) {
+    lines.push('blockingErrors:');
+    for (const error of result.blockingErrors) lines.push(`- ${error.name}: ${error.message}`);
+  }
   if (result.bypassLog) lines.push(`bypass log: ${result.bypassLog}`);
   print(lines.join('\n'));
 }
@@ -714,6 +731,7 @@ function printSddVerifyReport(result) {
   const lines = [
     `OpenXiangda SDD verify: ${result.passed ? 'passed' : 'failed'}`,
     `change: ${result.change.id}`,
+    `schemaVersion: ${result.schemaVersion || result.change.schemaVersion || 'unknown'}`,
   ];
   if (result.errors.length > 0) {
     lines.push('Errors:');
@@ -4629,7 +4647,10 @@ async function resource(args) {
     assertSddReleaseGate(
       buildExplicitSddReleasePlan(
         { forms: [], pages: [], resources: true, runtime: false, other: [] },
-        { files: getWorkspaceChangedFiles() }
+        {
+          files: getWorkspaceChangedFiles(),
+          commands: [`openxiangda resource publish --profile ${profileName}`],
+        }
       ),
       flags,
       'openxiangda resource publish'
@@ -4696,7 +4717,10 @@ async function runtime(args) {
     assertSddReleaseGate(
       buildExplicitSddReleasePlan(
         { forms: [], pages: [], resources: false, runtime: true, other: [] },
-        { files: getWorkspaceChangedFiles() }
+        {
+          files: getWorkspaceChangedFiles(),
+          commands: [`openxiangda runtime deploy --profile ${target.profileName}`],
+        }
       ),
       flags,
       'openxiangda runtime deploy'
@@ -5313,7 +5337,7 @@ async function commands(args) {
       'doctor [--profile name] [--app-type APP_XXX] [--release]',
       'contract list|explain <contract-name>',
       'design gates|template|review [--topic code]',
-      'sdd init|propose|approve|status|context|verify|sync|archive',
+      'sdd init|migrate|propose|approve|status|context|verify|sync|archive',
       'env',
       'workspace init|bind|plan|check|publish [--app-name] [--changed|--since|--form|--page|--only|--dry-run|--force|--resources|--skip-resources|--prune]',
       'app list|create|snapshot',
@@ -5347,7 +5371,7 @@ async function commands(args) {
       'public-access is the new React SPA public policy resource for /view/:appType/public/* routes; page code should use PublicAccessGate, and Page SDK hooks must stay inside OpenXiangdaProvider + OpenXiangdaPageProvider.',
       'settings public-access is legacy form public-access compatibility/repair and should not be used for new React SPA apps.',
       'Direct live mutation commands should use --dry-run first and --write-manifest when the repository should remain source of truth.',
-      'OpenXiangda native SDD uses openspec/ records; high-risk publishes require an approved change unless --sdd-bypass --reason is used.',
+      'OpenXiangda native SDD uses openspec/ records; high-risk publishes require an approved change with coverage.json/release.json verification unless --sdd-bypass --reason is used.',
     ],
   };
   if (flags.json) return writeJson(manifest);
@@ -12367,6 +12391,7 @@ function buildWorkspaceReleasePlan(options = {}) {
     ? getWorkspaceChangedFiles({ since: options.since })
     : getAllWorkspaceSourceFiles();
   const targets = classifyWorkspaceFiles(files, runtimeMode);
+  if (options.includeResources) targets.resources = true;
   const issues = scanWorkspaceReliabilityIssues(files);
   const errors = issues
     .filter(issue => issue.severity === 'error')
@@ -12382,6 +12407,7 @@ function buildWorkspaceReleasePlan(options = {}) {
         configText,
         targets,
         files,
+        commands,
       });
   const sddErrors = sdd ? sdd.errors.map(error => ({ name: error.name, message: error.message })) : [];
   const checks = [
@@ -12471,14 +12497,17 @@ function printWorkspaceReleasePlan(plan) {
 
 function buildExplicitSddReleasePlan(targets, options = {}) {
   const configText = readWorkspaceConfigText();
+  const commands = options.commands || [];
   const sdd = buildSddGovernanceReport({
     cwd: process.cwd(),
     configText,
     targets,
     files: options.files || [],
+    commands,
   });
   return {
     targets,
+    commands,
     sdd,
     errors: sdd.errors.map(error => ({ name: error.name, message: error.message })),
   };
@@ -12503,15 +12532,12 @@ function assertSddReleaseGate(plan, flags, command) {
 
 function buildWorkspacePublishSddPlan(publishOptions, runtimeMode, profile) {
   if (publishOptions.changed || (!publishOptions.targetForm && !publishOptions.targetPage && !publishOptions.only)) {
-    const plan = buildWorkspaceReleasePlan({
+    return buildWorkspaceReleasePlan({
       changed: publishOptions.changed,
       since: publishOptions.since,
       profile,
+      includeResources: publishOptions.includeResources,
     });
-    if (publishOptions.includeResources) {
-      plan.targets.resources = true;
-    }
-    return plan;
   }
   const targets = {
     forms: [],
@@ -12536,7 +12562,7 @@ function buildWorkspacePublishSddPlan(publishOptions, runtimeMode, profile) {
   targets.forms = unique(targets.forms).sort();
   targets.pages = unique(targets.pages).sort();
   const commands = buildWorkspaceReleaseCommands(targets, runtimeMode, profile);
-  const sddPlan = buildExplicitSddReleasePlan(targets, { files: [] });
+  const sddPlan = buildExplicitSddReleasePlan(targets, { files: [], commands });
   return {
     workspace: {
       cwd: process.cwd(),