openxiangda 1.0.228 → 1.0.229

package/lib/application-environments.js

@@ -17,8 +17,21 @@ const SIDE_EFFECT_POLICY_FIELDS = new Set([
   'environmentBanner',
   'externalDingTalkDepartmentRootId',
 ]);
-const CANDIDATE_STATE_HASH_POLICY =
+const CANDIDATE_STATE_HASH_POLICY_V1 =
   'openxiangda-state-without-runtime-promotion-v1';
+const CANDIDATE_STATE_HASH_POLICY =
+  'openxiangda-state-stable-managed-bindings-v2';
+const CANDIDATE_STATE_HASH_POLICIES = new Set([
+  CANDIDATE_STATE_HASH_POLICY_V1,
+  CANDIDATE_STATE_HASH_POLICY,
+]);
+const CANDIDATE_RESOURCE_OBSERVATION_FIELDS = new Set([
+  'createdAt',
+  'updatedAt',
+  'syncedAt',
+  'schemaSyncedAt',
+  'bundlePublishedAt',
+]);
 
 function canonicalJson(value) {
   if (Array.isArray(value)) {
@@ -611,7 +624,7 @@ function hashCandidateWorkspaceFile(cwd, relativePath, options = {}) {
     ? options.hashPolicy
     : candidateFileHashPolicy(normalized);
   if (!hashPolicy) return hashWorkspaceFile(cwd, normalized);
-  if (hashPolicy !== CANDIDATE_STATE_HASH_POLICY) {
+  if (!CANDIDATE_STATE_HASH_POLICIES.has(hashPolicy)) {
     const error = new Error(
       `不支持的 candidate 文件哈希策略: ${hashPolicy}`
     );
@@ -636,7 +649,10 @@ function hashCandidateWorkspaceFile(cwd, relativePath, options = {}) {
     invalid.code = 'CANDIDATE_STATE_INPUT_INVALID';
     throw invalid;
   }
-  const normalizedState = normalizeCandidateProjectStateForHash(state);
+  const normalizedState = normalizeCandidateProjectStateForHash(
+    state,
+    hashPolicy
+  );
   const buffer = Buffer.from(canonicalJson(normalizedState), 'utf8');
   return {
     path: normalized,
@@ -647,7 +663,7 @@ function hashCandidateWorkspaceFile(cwd, relativePath, options = {}) {
   };
 }
 
-function normalizeCandidateProjectStateForHash(input) {
+function normalizeCandidateProjectStateForHash(input, hashPolicy) {
   const state = cloneJsonValue(input);
   if (!state || typeof state !== 'object' || Array.isArray(state)) {
     const error = new Error(
@@ -674,6 +690,18 @@ function normalizeCandidateProjectStateForHash(input) {
       // that caused the release, while all durable binding fields remain hashed.
       delete binding.promotion;
       delete binding.updatedAt;
+      if (
+        collectionName === 'targets' &&
+        hashPolicy === CANDIDATE_STATE_HASH_POLICY
+      ) {
+        // Managed release stages persist discovered/created resource IDs and
+        // the activated runtime head as their durable local execution result.
+        // The sealed environmentBindings manifest independently protects every
+        // resource identity that existed before sealing, while intentionally
+        // allowing additive bindings created by the candidate itself.
+        delete binding.resources;
+        delete binding.runtime;
+      }
     }
   }
   return state;
@@ -686,7 +714,7 @@ function normalizeCandidateResourceBindings(value) {
   if (!value || typeof value !== 'object') return value;
   return Object.fromEntries(
     Object.entries(value)
-      .filter(([key]) => !['createdAt', 'updatedAt', 'syncedAt'].includes(key))
+      .filter(([key]) => !CANDIDATE_RESOURCE_OBSERVATION_FIELDS.has(key))
       .sort(([left], [right]) => left.localeCompare(right))
       .map(([key, item]) => [
         key,
@@ -901,7 +929,7 @@ function inspectCandidateBundleFiles(candidate, cwd = process.cwd()) {
     }
     seen.add(file);
     const hashPolicy = expected.hashPolicy || null;
-    if (hashPolicy && hashPolicy !== CANDIDATE_STATE_HASH_POLICY) {
+    if (hashPolicy && !CANDIDATE_STATE_HASH_POLICIES.has(hashPolicy)) {
       mismatches.push({
         path: file,
         reason: 'unsupported-hash-policy',

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "openxiangda",
-  "version": "1.0.228",
+  "version": "1.0.229",
   "description": "OpenXiangda CLI, workspace build tools, runtime SDK, and form components.",
   "private": false,
   "bin": {