openxiangda 1.0.172 → 1.0.174

package/lib/form-schema-loader.js

@@ -0,0 +1,166 @@
+const fs = require('fs');
+const path = require('path');
+const { builtinModules, createRequire } = require('module');
+const esbuild = require('esbuild');
+
+function resolveWorkspaceAlias(workspaceRoot, importPath) {
+  const raw = path.join(
+    workspaceRoot,
+    'src',
+    String(importPath || '').replace(/^@\//, '')
+  );
+  const candidates = [
+    raw,
+    `${raw}.ts`,
+    `${raw}.tsx`,
+    `${raw}.js`,
+    `${raw}.mjs`,
+    `${raw}.cjs`,
+    path.join(raw, 'index.ts'),
+    path.join(raw, 'index.tsx'),
+    path.join(raw, 'index.js'),
+  ];
+  return candidates.find(candidate => fs.existsSync(candidate)) || raw;
+}
+
+async function loadLocalFormSchema(workspaceRoot, formCode) {
+  const schemaPath = path.join(
+    workspaceRoot,
+    'src',
+    'forms',
+    formCode,
+    'schema.ts'
+  );
+  if (!fs.existsSync(schemaPath)) return null;
+  const external = Array.from(
+    new Set([...builtinModules, ...builtinModules.map(name => `node:${name}`)])
+  );
+  const built = await esbuild.build({
+    entryPoints: [schemaPath],
+    bundle: true,
+    format: 'cjs',
+    platform: 'node',
+    target: ['node20'],
+    write: false,
+    logLevel: 'silent',
+    external,
+    plugins: [
+      {
+        name: 'openxiangda-form-schema-workspace-alias',
+        setup(build) {
+          build.onResolve({ filter: /^@\// }, args => ({
+            path: resolveWorkspaceAlias(workspaceRoot, args.path),
+          }));
+        },
+      },
+    ],
+  });
+  const code = built.outputFiles?.[0]?.text;
+  if (!code) {
+    throw new Error(`FORM_SCHEMA_BUILD_FAILED: ${formCode} 未生成 schema bundle`);
+  }
+  const schemaModule = { exports: {} };
+  const localRequire = createRequire(schemaPath);
+  const evaluate = new Function(
+    'module',
+    'exports',
+    'require',
+    '__filename',
+    '__dirname',
+    code
+  );
+  evaluate(
+    schemaModule,
+    schemaModule.exports,
+    localRequire,
+    schemaPath,
+    path.dirname(schemaPath)
+  );
+  const exported = schemaModule.exports?.default || schemaModule.exports;
+  return normalizeLocalFormSchema(exported, formCode);
+}
+
+function normalizeLocalFormSchema(schema, formCode) {
+  if (!schema || typeof schema !== 'object' || Array.isArray(schema)) {
+    throw new Error(`FORM_SCHEMA_INVALID: ${formCode} 默认导出必须是对象`);
+  }
+  if (!schema.formMeta || typeof schema.formMeta !== 'object') {
+    throw new Error(`FORM_SCHEMA_INVALID: ${formCode}.formMeta 缺失`);
+  }
+  if (!Array.isArray(schema.fields) || schema.fields.length === 0) {
+    throw new Error(`FORM_SCHEMA_INVALID: ${formCode}.fields 不能为空`);
+  }
+  const seen = new Set();
+  const components = schema.fields.map((field, index) => {
+    const fieldId = String(field?.fieldId || '').trim();
+    const componentName = normalizeComponentName(field?.componentName);
+    if (!fieldId || !componentName) {
+      throw new Error(
+        `FORM_SCHEMA_INVALID: ${formCode}.fields[${index}] 缺少 fieldId/componentName`
+      );
+    }
+    if (seen.has(fieldId)) {
+      throw new Error(`FORM_SCHEMA_INVALID: ${formCode} fieldId 重复: ${fieldId}`);
+    }
+    seen.add(fieldId);
+    return {
+      componentName,
+      id: field.id || `${fieldId}_${index + 1}`,
+      title: field.label || fieldId,
+      hidden: false,
+      isLocked: false,
+      condition: true,
+      conditionGroup: '',
+      props: {
+        ...field,
+        componentName,
+        isFormComponent: true,
+        fieldId,
+        label: field.label || fieldId,
+        tips: field.tips || '',
+        value: field.value || '',
+        placeholder: field.placeholder || '',
+      },
+    };
+  });
+  const pageSchema = {
+    version: '2.0',
+    componentsTree: [
+      {
+        componentName: 'Page',
+        id: `${schema.formMeta.formUuid || formCode}_page`,
+        props: {},
+        children: components,
+      },
+    ],
+  };
+  return {
+    name: schema.formMeta.title || formCode,
+    schema: JSON.stringify(pageSchema),
+    packages: JSON.stringify({}),
+    formType: normalizeFormType(
+      schema.formMeta.formType || schema.template?.formType
+    ),
+    fieldCount: components.length,
+    sourcePath: `src/forms/${formCode}/schema.ts`,
+  };
+}
+
+function normalizeComponentName(value) {
+  const name = String(value || '').trim();
+  return name === 'TextAreaField' ? 'TextareaField' : name;
+}
+
+function normalizeFormType(value) {
+  const normalized = String(value || '').trim().toLowerCase();
+  return ['process', 'workflow', 'flow', 'flowform', 'processform'].includes(
+    normalized
+  )
+    ? 'process'
+    : 'receipt';
+}
+
+module.exports = {
+  loadLocalFormSchema,
+  normalizeLocalFormSchema,
+};

package/lib/git-remote-identity.js

@@ -0,0 +1,89 @@
+const crypto = require('crypto');
+
+function legacyRemoteIdentity(value) {
+  const remote = String(value || '').trim();
+  try {
+    const url = new URL(remote);
+    url.username = '';
+    url.password = '';
+    url.search = '';
+    url.hash = '';
+    return url.toString();
+  } catch {
+    return remote
+      .replace(/^[^@/]+@([^:]+):/, '$1:')
+      .replace(/[?#].*$/, '');
+  }
+}
+
+function toggleDotGit(value) {
+  const normalized = String(value || '').replace(/\/+$/, '');
+  return /\.git$/i.test(normalized)
+    ? normalized.replace(/\.git$/i, '')
+    : `${normalized}.git`;
+}
+
+function canonicalRemoteIdentity(value) {
+  const legacy = legacyRemoteIdentity(value).replace(/\/+$/, '');
+  try {
+    const url = new URL(legacy);
+    const host = url.hostname.toLowerCase();
+    const port = url.port ? `:${url.port}` : '';
+    const pathname = url.pathname
+      .replace(/^\/+|\/+$/g, '')
+      .replace(/\.git$/i, '');
+    return `${host}${port}/${pathname}`.replace(/\/+$/, '');
+  } catch {
+    return legacy
+      .replace(/^([^:]+):/, '$1/')
+      .replace(/\.git$/i, '')
+      .replace(/\/+$/, '');
+  }
+}
+
+function remoteIdentityVariants(value) {
+  const legacy = legacyRemoteIdentity(value).replace(/\/+$/, '');
+  return Array.from(
+    new Set(
+      [
+        legacy,
+        toggleDotGit(legacy),
+        canonicalRemoteIdentity(legacy),
+      ].filter(Boolean)
+    )
+  );
+}
+
+function sha256(value) {
+  return `sha256:${crypto
+    .createHash('sha256')
+    .update(String(value))
+    .digest('hex')}`;
+}
+
+function remoteRepositoryHashes(value) {
+  return remoteIdentityVariants(value).map(identity =>
+    sha256(`remote:${identity}`)
+  );
+}
+
+function remoteUrlHashes(value) {
+  return remoteIdentityVariants(value).map(sha256);
+}
+
+function identitiesIntersect(left, right) {
+  const leftSet = new Set(
+    (Array.isArray(left) ? left : [left]).filter(Boolean)
+  );
+  return (Array.isArray(right) ? right : [right]).some(value =>
+    leftSet.has(value)
+  );
+}
+
+module.exports = {
+  identitiesIntersect,
+  legacyRemoteIdentity,
+  remoteIdentityVariants,
+  remoteRepositoryHashes,
+  remoteUrlHashes,
+};

package/lib/release-mainline.js

@@ -1,8 +1,11 @@
-const crypto = require('crypto');
 const path = require('path');
 const { spawnSync } = require('child_process');
 
 const { readGitSourceBase } = require('./change-baseline');
+const {
+  identitiesIntersect,
+  remoteUrlHashes,
+} = require('./git-remote-identity');
 const { listRuntimeBuildInputChanges } = require('./runtime-lineage');
 
 const GIT_OUTPUT_LIMIT = 16 * 1024 * 1024;
@@ -68,6 +71,7 @@ function prepareReleaseSourceRevision(options = {}) {
     worktreeRoot: readGit(cwd, ['rev-parse', '--show-toplevel']).stdout,
     remoteName: mainline.remoteName,
     remoteUrlHash: mainline.remoteUrlHash,
+    remoteUrlHashAliases: mainline.remoteUrlHashAliases,
     mainBranch: mainline.branchName,
     mainTipCommit: mainline.tipCommit,
     mainlineSource: mainline.source,
@@ -82,7 +86,10 @@ function assertReleaseSourceRevisionStable(sourceRevision, options = {}) {
   const current = readGitSourceBase(cwd, 'HEAD');
   const dirtyPaths = listRuntimeBuildInputChanges(cwd);
   if (
-    expected.repo !== current.repo ||
+    !identitiesIntersect(
+      [expected.repo, ...(expected.repoAliases || [])],
+      [current.repo, ...(current.repoAliases || [])]
+    ) ||
     expected.baseCommit !== current.baseCommit ||
     expected.treeHash !== current.treeHash ||
     dirtyPaths.length > 0
@@ -109,7 +116,12 @@ function inspectReleaseSourceIntegration(sourceRevision, options = {}) {
   const cwd = path.resolve(options.cwd || process.cwd());
   const source = normalizeSourceRevision(sourceRevision);
   const currentRepository = readGitSourceBase(cwd, 'HEAD');
-  if (source.repo !== currentRepository.repo) {
+  if (
+    !identitiesIntersect(
+      [source.repo, ...(source.repoAliases || [])],
+      [currentRepository.repo, ...(currentRepository.repoAliases || [])]
+    )
+  ) {
     throw releaseMainlineError(
       'RELEASE_SOURCE_REPOSITORY_MISMATCH',
       '冻结的发布提交与当前 Git 仓库不一致，不能验证主分支回合状态'
@@ -120,7 +132,10 @@ function inspectReleaseSourceIntegration(sourceRevision, options = {}) {
   if (
     source.remoteName !== mainline.remoteName ||
     source.mainBranch !== mainline.branchName ||
-    source.remoteUrlHash !== mainline.remoteUrlHash
+    !identitiesIntersect(
+      [source.remoteUrlHash, ...(source.remoteUrlHashAliases || [])],
+      [mainline.remoteUrlHash, ...(mainline.remoteUrlHashAliases || [])]
+    )
   ) {
     throw releaseMainlineError(
       'RELEASE_MAINLINE_TARGET_CHANGED',
@@ -204,7 +219,8 @@ function resolveAuthoritativeMainline(options = {}) {
 }
 
 function resolveRemoteMainline({ cwd, remoteName }) {
-  const remoteUrlHash = readRemoteUrlHash(cwd, remoteName);
+  const remoteUrlHashAliases = readRemoteUrlHashes(cwd, remoteName);
+  const remoteUrlHash = remoteUrlHashAliases[0];
   const remoteHead = readGit(
     cwd,
     ['ls-remote', '--symref', remoteName, 'HEAD'],
@@ -217,6 +233,7 @@ function resolveRemoteMainline({ cwd, remoteName }) {
       return {
         remoteName,
         remoteUrlHash,
+        remoteUrlHashAliases,
         branchName: parsed.branchName,
         tipCommit: parsed.tipCommit,
         source: 'remote-head',
@@ -236,6 +253,7 @@ function resolveRemoteMainline({ cwd, remoteName }) {
     return {
       remoteName,
       remoteUrlHash,
+      remoteUrlHashAliases,
       ...candidates[0],
       source: 'remote-main-master-fallback',
     };
@@ -246,6 +264,12 @@ function resolveRemoteMainline({ cwd, remoteName }) {
       `远端 ${remoteName} 同时存在 main 与 master 且无法读取 remote HEAD；请先修复远端默认分支 HEAD`
     );
   }
+  if (isGitAuthenticationError(remoteHead.stderr)) {
+    throw releaseMainlineError(
+      'RELEASE_GIT_AUTH_REQUIRED',
+      `无法认证权威远端 ${remoteName}。请先解锁系统钥匙串或配置可用的 Git credential helper，并确认 \`git ls-remote --symref ${remoteName} HEAD\` 可成功执行；发布会在获取平台租约前停止，不会留下远端发布状态`
+    );
+  }
   const detail = remoteHead.stderr
     ? `: ${sanitizeGitError(remoteHead.stderr)}`
     : '';
@@ -255,6 +279,12 @@ function resolveRemoteMainline({ cwd, remoteName }) {
   );
 }
 
+function isGitAuthenticationError(value) {
+  return /(?:authentication failed|could not read (?:username|password)|terminal prompts? disabled|credential|keychain|access denied|http basic: access denied|response:\s*(?:401|403)|returned error:\s*(?:401|403))/i.test(
+    String(value || '')
+  );
+}
+
 function readRemoteBranchTip(cwd, remoteName, branchName, options = {}) {
   const result = readGit(
     cwd,
@@ -422,6 +452,25 @@ function normalizeSourceRevision(value) {
   const remoteName = normalizeOptionalName(value.remoteName, 'remote');
   const mainBranch = String(value.mainBranch || '').trim();
   const remoteUrlHash = String(value.remoteUrlHash || '').trim().toLowerCase();
+  const remoteUrlHashAliases = Array.from(
+    new Set(
+      [
+        remoteUrlHash,
+        ...(Array.isArray(value.remoteUrlHashAliases)
+          ? value.remoteUrlHashAliases
+          : []),
+      ]
+        .map(item => String(item || '').trim().toLowerCase())
+        .filter(item => /^sha256:[0-9a-f]{64}$/.test(item))
+    )
+  );
+  const repoAliases = Array.from(
+    new Set(
+      [repo, ...(Array.isArray(value.repoAliases) ? value.repoAliases : [])]
+        .map(item => String(item || '').trim().toLowerCase())
+        .filter(item => /^sha256:[0-9a-f]{64}$/.test(item))
+    )
+  );
   if (
     !/^sha256:[0-9a-f]{64}$/i.test(repo) ||
     !isObjectId(baseCommit) ||
@@ -439,15 +488,17 @@ function normalizeSourceRevision(value) {
     ...value,
     repo,
     repositoryId: repo,
+    repoAliases,
     baseCommit,
     treeHash,
     remoteName,
     remoteUrlHash,
+    remoteUrlHashAliases,
     mainBranch,
   };
 }
 
-function readRemoteUrlHash(cwd, remoteName) {
+function readRemoteUrlHashes(cwd, remoteName) {
   const result = readGit(cwd, ['remote', 'get-url', remoteName]);
   if (!result.stdout) {
     throw releaseMainlineError(
@@ -455,24 +506,7 @@ function readRemoteUrlHash(cwd, remoteName) {
       `无法读取权威远端地址: ${remoteName}`
     );
   }
-  const identity = normalizeRemoteUrlIdentity(result.stdout);
-  return `sha256:${crypto.createHash('sha256').update(identity).digest('hex')}`;
-}
-
-function normalizeRemoteUrlIdentity(value) {
-  const remote = String(value || '').trim();
-  try {
-    const url = new URL(remote);
-    url.username = '';
-    url.password = '';
-    url.search = '';
-    url.hash = '';
-    return url.toString();
-  } catch {
-    return remote
-      .replace(/^[^@/]+@([^:]+):/, '$1:')
-      .replace(/[?#].*$/, '');
-  }
+  return remoteUrlHashes(result.stdout);
 }
 
 function assertSafeDefaultBranch(remoteName, branchName) {
@@ -555,6 +589,7 @@ module.exports = {
   assertReleaseSourceIntegrated,
   assertReleaseSourceRevisionStable,
   inspectReleaseSourceIntegration,
+  isGitAuthenticationError,
   prepareReleaseSourceRevision,
   resolveAuthoritativeMainline,
 };