openxiangda 1.0.95 → 1.0.97

package/lib/cli.js

@@ -24,7 +24,9 @@ const { assertCanInitializeWorkspace, initWorkspace } = require('./workspace-ini
 const { bootstrapWorkspace } = require('./workspace-bootstrap');
 const {
   getDesignGates,
+  getDesignTopicCatalog,
   getResourceExplain,
+  renderDesignHelp,
   renderDesignGatesText,
   renderDesignTemplate,
   renderResourceExplain,
@@ -49,6 +51,9 @@ const RUNTIME_UPLOAD_CONCURRENCY = 3;
 
 async function main(argv) {
   const [command, ...rest] = argv;
+  if (command === 'version' || command === '--version' || command === '-v') {
+    return version(rest);
+  }
   if (!command || command === 'help' || command === '--help' || command === '-h') {
     printHelp();
     return;
@@ -91,6 +96,7 @@ function printHelp() {
   print(`OpenXiangda CLI
 
 Usage:
+  openxiangda version [--json]
   openxiangda login <platform-url> [--profile name]
   openxiangda update check|install [--json] [--registry https://registry.npmjs.org]
   openxiangda platform add <name> <platform-url>
@@ -153,6 +159,7 @@ Usage:
 
 OpenXiangda 使用普通用户登录 token，不需要 AK/SK。
 表单页、流程表单页和代码页的主链路是 sy-lowcode-app-workspace + openxiangda workspace publish。
+新 React SPA 公开访问使用 public-access 命令和 src/resources/public-access；settings public-access 仅用于旧表单公开设置兼容/修复。
 JS_CODE V2 使用 trusted_node；AI 源码必须写在 src/js-code-nodes/<scriptCode>/index.ts，代码自动化源码写在 src/automations/<resourceCode>/index.ts。definition-json 中的 sourceFile.localPath 会在 validate/create/publish 时先 TS 校验、再构建并上传为快照。`);
 }
 
@@ -233,6 +240,17 @@ function wantsSubcommandHelp(subcommand, flags) {
   );
 }
 
+async function version(args) {
+  const { flags } = parseArgs(args);
+  const result = {
+    name: NPM_PACKAGE_NAME,
+    version: CURRENT_VERSION,
+    updateCheckCommand: 'openxiangda update check --json',
+  };
+  if (flags.json) return writeJson(result);
+  print(CURRENT_VERSION);
+}
+
 async function update(args) {
   const requestedSubcommand = args[0] && !args[0].startsWith('--') ? args[0] : 'check';
   const parsedArgs = requestedSubcommand === args[0] ? args.slice(1) : args;
@@ -435,7 +453,8 @@ async function design(args) {
   const { flags, positional } = parseArgs(rest);
   const topic = flags.topic || positional[0];
   if (wantsSubcommandHelp(subcommand, flags)) {
-    print('用法: openxiangda design gates|template [--topic new-app,public-access] [--json]');
+    if (flags.json) return writeJson(getDesignTopicCatalog());
+    print(renderDesignHelp());
     return;
   }
 
@@ -4016,7 +4035,9 @@ async function commands(args) {
   const { flags } = parseArgs(args);
   const manifest = {
     name: 'openxiangda',
+    version: CURRENT_VERSION,
     commands: [
+      'version [--json]',
       'login <platform-url> [--profile name]',
       'update check|install',
       'platform add|list|use|remove',
@@ -4048,6 +4069,14 @@ async function commands(args) {
       'feedback preview|submit',
       'skill install|status|bootstrap',
     ],
+    designTopics: getDesignTopicCatalog(),
+    resourceNotes: [
+      'For formal multi-resource development, prefer src/resources/** + openxiangda resource validate|plan|publish.',
+      'Use first-class route/public-access/auth-config/function/connector/notification/data-view/menu/permission commands for discovery, diagnosis, dry-run, and small live fixes.',
+      'public-access is the new React SPA public policy resource for /view/:appType/public/* routes; page code should use PublicAccessGate, and Page SDK hooks must stay inside OpenXiangdaProvider + OpenXiangdaPageProvider.',
+      'settings public-access is legacy form public-access compatibility/repair and should not be used for new React SPA apps.',
+      'Direct live mutation commands should use --dry-run first and --write-manifest when the repository should remain source of truth.',
+    ],
   };
   if (flags.json) return writeJson(manifest);
   print(JSON.stringify(manifest, null, 2));

package/lib/design-gates.js

@@ -95,7 +95,7 @@ const DESIGN_GATE_TOPICS = [
       '是否需要限流、过期时间、审计字段和回收策略',
     ],
     recommendedDefaults: [
-      '新 React SPA 仅使用 /view/:appType/public/* + routes + public-access policy',
+      '新 React SPA 仅使用 /view/:appType/public/* + routes + public-access policy + PublicAccessGate',
       '普通公开页用 scoped public session；敏感页用 ticket 模式',
       '未显式 grant 的 form/dataView/function/connector 一律拒绝',
     ],
@@ -294,6 +294,37 @@ function getDesignGates(topicCode) {
   };
 }
 
+function getDesignTopicCatalog() {
+  return {
+    hardRule: DESIGN_GATE_HARD_RULE,
+    topics: DESIGN_GATE_TOPICS.map(topic => ({
+      code: topic.code,
+      title: topic.title,
+      triggers: topic.triggers,
+    })),
+    aliases: DESIGN_GATE_TOPIC_ALIASES,
+  };
+}
+
+function renderDesignHelp() {
+  const catalog = getDesignTopicCatalog();
+  const lines = [
+    '用法: openxiangda design gates|template [--topic code[,code...]] [--json]',
+    '',
+    catalog.hardRule,
+    '',
+    'Topics:',
+  ];
+  for (const topic of catalog.topics) {
+    lines.push(`- ${topic.code}: ${topic.title} (${topic.triggers.join('、')})`);
+  }
+  lines.push('', 'Aliases:');
+  for (const [alias, code] of Object.entries(catalog.aliases).sort()) {
+    lines.push(`- ${alias} -> ${code}`);
+  }
+  return lines.join('\n');
+}
+
 function renderDesignGatesText(topicCode) {
   const gates = getDesignGates(topicCode);
   const lines = [gates.hardRule, ''];
@@ -326,7 +357,7 @@ function renderDesignTemplate(topicCode) {
     '## 2. 推荐方案',
     '- Runtime：React SPA',
     '- 资源发布：src/resources/** + openxiangda resource plan/publish',
-    '- 公开访问：仅使用 /view/:appType/public/* + routes + public-access policy',
+    '- 公开访问：仅使用 /view/:appType/public/* + routes + public-access policy + PublicAccessGate',
     '',
     '## 3. 待确认问题',
   ];
@@ -391,6 +422,7 @@ const RESOURCE_EXPLAINS = {
       'openxiangda public-access upsert --json-file src/resources/public-access/public_register.json',
       'openxiangda public-access session-test public_register --path /view/APP_XXX/public/register',
       'openxiangda public-access grant-check public_register --form-code customer',
+      'React 页面侧使用 PublicAccessGate；如果使用 Page SDK hooks，放在 OpenXiangdaProvider + OpenXiangdaPageProvider 内',
     ],
   },
   'auth-config': {
@@ -503,8 +535,11 @@ function renderResourceExplain(type) {
 module.exports = {
   DESIGN_GATE_HARD_RULE,
   DESIGN_GATE_TOPICS,
+  DESIGN_GATE_TOPIC_ALIASES,
   getDesignGates,
+  getDesignTopicCatalog,
   getResourceExplain,
+  renderDesignHelp,
   renderDesignGatesText,
   renderDesignTemplate,
   renderResourceExplain,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "openxiangda",
-  "version": "1.0.95",
+  "version": "1.0.97",
   "description": "OpenXiangda CLI, workspace build tools, runtime SDK, and form components.",
   "private": false,
   "bin": {