openxiangda 1.0.180 → 1.0.182

package/lib/application-environments.js

@@ -45,6 +45,76 @@ function cloneJsonValue(value) {
     : JSON.parse(JSON.stringify(value));
 }
 
+function normalizeIdentityList(values) {
+  return Array.from(
+    new Set(
+      values
+        .map(value => String(value || '').trim().toLowerCase())
+        .filter(value => /^sha256:[0-9a-f]{64}$/.test(value))
+    )
+  ).sort();
+}
+
+function normalizeManagedReleaseSourceRevision(
+  target,
+  sourceRevision,
+  options = {}
+) {
+  const logicalApp = target?.logicalApp || target?.state?.logicalApp;
+  const expectedRepositoryId = String(
+    logicalApp?.sourceRepositoryId || ''
+  )
+    .trim()
+    .toLowerCase();
+  if (!expectedRepositoryId) return cloneJsonValue(sourceRevision);
+  const revision =
+    sourceRevision &&
+    typeof sourceRevision === 'object' &&
+    !Array.isArray(sourceRevision)
+      ? cloneJsonValue(sourceRevision)
+      : {};
+  const repositoryAliases = normalizeIdentityList([
+    revision.repo,
+    revision.repositoryId,
+    ...(Array.isArray(revision.repoAliases) ? revision.repoAliases : []),
+  ]);
+  if (!repositoryAliases.includes(expectedRepositoryId)) {
+    const code =
+      String(options.errorCode || '').trim() ||
+      'MANAGED_SOURCE_REPOSITORY_MISMATCH';
+    const error = new Error(
+      `${code}: 当前 Git 仓库与 logical app 权威仓库不一致`
+    );
+    error.code = code;
+    error.details = {
+      expectedRepositoryId,
+      repositoryAliases,
+    };
+    throw error;
+  }
+  const {
+    capturedAt: _capturedAt,
+    worktreeRoot: _worktreeRoot,
+    ...stableRevision
+  } = revision;
+  return {
+    ...stableRevision,
+    repo: expectedRepositoryId,
+    repositoryId: expectedRepositoryId,
+    repoAliases: normalizeIdentityList([
+      expectedRepositoryId,
+      ...repositoryAliases,
+    ]),
+    ...(Array.isArray(revision.remoteUrlHashAliases)
+      ? {
+          remoteUrlHashAliases: normalizeIdentityList(
+            revision.remoteUrlHashAliases
+          ),
+        }
+      : {}),
+  };
+}
+
 function hasStateResourceMappings(value) {
   if (Array.isArray(value)) return value.length > 0;
   if (!value || typeof value !== 'object') {
@@ -269,6 +339,7 @@ module.exports = {
   buildCandidateBundle,
   canonicalJson,
   normalizeEnvironmentKind,
+  normalizeManagedReleaseSourceRevision,
   normalizeTargetName,
   hasStateResourceMappings,
   readCandidate,

package/lib/cli.js

@@ -131,6 +131,7 @@ const {
   bindEnvironmentTarget,
   buildCandidateBundle,
   normalizeEnvironmentKind,
+  normalizeManagedReleaseSourceRevision,
   readCandidate,
   readJsonInput,
   releaseExecutionPath,
@@ -1557,9 +1558,12 @@ async function publishWorkspaceRelease(config, target, flags = {}) {
       execution: null,
     };
   }
-  const plannedSourceRevision = prepareReleaseSourceRevision({
-    cwd: process.cwd(),
-  });
+  const plannedSourceRevision = normalizeManagedReleaseSourceRevision(
+    target,
+    prepareReleaseSourceRevision({
+      cwd: process.cwd(),
+    })
+  );
   const existing = readReleaseExecution(changeId, deploymentId);
   if (
     existing &&
@@ -2313,16 +2317,11 @@ async function createApplicationCandidate(config, target, flags, positional) {
   if (!changeId) {
     fail('用法: openxiangda release candidate --change <id>');
   }
-  prepareReleaseSourceRevision({ cwd: process.cwd() });
-  const sourceRevision = readGitSourceBase(process.cwd(), 'HEAD');
-  if (
-    logicalApp.sourceRepositoryId !==
-    (sourceRevision.repositoryId || sourceRevision.repo)
-  ) {
-    fail(
-      'CANDIDATE_REPOSITORY_MISMATCH: 当前 Git 仓库与 logical app 权威仓库不一致'
-    );
-  }
+  const sourceRevision = normalizeManagedReleaseSourceRevision(
+    target,
+    prepareReleaseSourceRevision({ cwd: process.cwd() }),
+    { errorCode: 'CANDIDATE_REPOSITORY_MISMATCH' }
+  );
   const plan = buildWorkspaceReleasePlan({
     changed: true,
     since: flags.since,
@@ -4917,9 +4916,13 @@ async function ensureChangeBaseline(
   }
   const activeLease = getUsableStoredPublishLease(target);
   const sourceBase = resolveChangeSourceBase(changeId, flags);
-  const releaseSourceRevision = prepareReleaseSourceRevision({
-    cwd: process.cwd(),
-  });
+  const releaseSourceRevision = normalizeManagedReleaseSourceRevision(
+    target,
+    prepareReleaseSourceRevision({
+      cwd: process.cwd(),
+    }),
+    { errorCode: 'RELEASE_SOURCE_REPOSITORY_MISMATCH' }
+  );
 
   const data = await requestWithAuth(
     config,
@@ -16614,7 +16617,11 @@ async function ensureOwnedImmutableReleasePublishContext(
       `${releaseKind} 只接受与本地冻结基线匹配的 stored lease；外部 opaque lease 不能用于原子发布`
     );
   }
-  const sourceRevision = clonePlainJson(baseline.sourceBase || {});
+  const sourceRevision = normalizeManagedReleaseSourceRevision(
+    target,
+    baseline.releaseSourceRevision || {},
+    { errorCode: 'RELEASE_SOURCE_REPOSITORY_MISMATCH' }
+  );
   const sourceRepositoryId = String(
     sourceRevision.repositoryId || sourceRevision.repo || ''
   ).trim();

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "openxiangda",
-  "version": "1.0.180",
+  "version": "1.0.182",
   "description": "OpenXiangda CLI, workspace build tools, runtime SDK, and form components.",
   "private": false,
   "bin": {
@@ -172,8 +172,7 @@
     "tsx": "^4.20.0",
     "typescript": "^5.7.0",
     "undici": "^6.27.0",
-    "vite": "^6.0.0",
-    "xlsx": "https://cdn.sheetjs.com/xlsx-0.20.3/xlsx-0.20.3.tgz"
+    "vite": "^6.0.0"
   },
   "peerDependencies": {
     "react": ">=18 <20",
@@ -190,7 +189,8 @@
     "react": "18.3.1",
     "react-dom": "18.3.1",
     "tsup": "^8.3.0",
-    "vitest": "^4.1.7"
+    "vitest": "^4.1.7",
+    "xlsx": "https://cdn.sheetjs.com/xlsx-0.20.3/xlsx-0.20.3.tgz"
   },
   "engines": {
     "node": ">=18"