openxiangda 2.0.0-alpha.2 → 2.0.0-alpha.21

package/dist/internal/web-build-verifier.js

@@ -0,0 +1,55 @@
+import { readFileSync, readdirSync, statSync } from 'node:fs';
+import { join, resolve } from 'node:path';
+import { fileURLToPath } from 'node:url';
+import { gzipSync } from 'node:zlib';
+const MAX_ASSET_FILES = 512;
+const MAX_HTML_BYTES = 100_000;
+const MAX_INITIAL_JAVASCRIPT_GZIP_BYTES = 2_000_000;
+export function verifyOpenXiangdaWebBuild(distInput) {
+    const dist = resolve(typeof distInput === 'string' ? distInput : fileURLToPath(distInput));
+    const assets = join(dist, 'assets');
+    const entries = readdirSync(assets, { withFileTypes: true });
+    if (entries.length > MAX_ASSET_FILES) {
+        throw new Error(`WEB_ASSET_FILE_COUNT_EXCEEDED:${entries.length}>${MAX_ASSET_FILES}`);
+    }
+    if (entries.some(entry => !entry.isFile())) {
+        throw new Error('WEB_ASSET_TREE_INVALID');
+    }
+    const names = entries.map(entry => entry.name);
+    const files = names.map(name => join(assets, name));
+    const sizes = files.map(file => statSync(file).size);
+    const totalBytes = sizes.reduce((total, size) => total + size, 0);
+    if (names.some(name => name.endsWith('.map'))) {
+        throw new Error('WEB_SOURCE_MAP_FORBIDDEN');
+    }
+    const javascript = files.filter(file => file.endsWith('.js'));
+    const totalJavaScriptGzipBytes = javascript.reduce((total, file) => total + gzipSync(readFileSync(file), { level: 9 }).byteLength, 0);
+    const htmlPath = join(dist, 'index.html');
+    const htmlBytes = statSync(htmlPath).size;
+    if (htmlBytes > MAX_HTML_BYTES) {
+        throw new Error(`WEB_HTML_BUDGET_EXCEEDED:${htmlBytes}>${MAX_HTML_BYTES}`);
+    }
+    const html = readFileSync(htmlPath, 'utf8');
+    if (!html.includes('<div id="root"></div>')) {
+        throw new Error('WEB_ROOT_MISSING');
+    }
+    const initialNames = [
+        ...html.matchAll(/(?:src|href)="\.\/assets\/([^"]+\.js)"/g),
+    ].map(match => match[1]);
+    const initialJavaScriptGzipBytes = [...new Set(initialNames)].reduce((total, name) => {
+        if (!names.includes(name))
+            throw new Error(`WEB_INITIAL_ASSET_MISSING:${name}`);
+        return (total +
+            gzipSync(readFileSync(join(assets, name)), { level: 9 }).byteLength);
+    }, 0);
+    if (initialJavaScriptGzipBytes > MAX_INITIAL_JAVASCRIPT_GZIP_BYTES) {
+        throw new Error(`WEB_INITIAL_JS_GZIP_BUDGET_EXCEEDED:${initialJavaScriptGzipBytes}>${MAX_INITIAL_JAVASCRIPT_GZIP_BYTES}`);
+    }
+    return {
+        assetFiles: entries.length,
+        totalBytes,
+        totalJavaScriptGzipBytes,
+        initialJavaScriptGzipBytes,
+    };
+}
+//# sourceMappingURL=web-build-verifier.js.map

package/dist/internal/web-build-verifier.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"web-build-verifier.js","sourceRoot":"","sources":["../../src/internal/web-build-verifier.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAC9D,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AAErC,MAAM,eAAe,GAAG,GAAG,CAAC;AAC5B,MAAM,cAAc,GAAG,OAAO,CAAC;AAC/B,MAAM,iCAAiC,GAAG,SAAS,CAAC;AASpD,MAAM,UAAU,yBAAyB,CACvC,SAAuB;IAEvB,MAAM,IAAI,GAAG,OAAO,CAClB,OAAO,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,aAAa,CAAC,SAAS,CAAC,CACrE,CAAC;IACF,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IACpC,MAAM,OAAO,GAAG,WAAW,CAAC,MAAM,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;IAC7D,IAAI,OAAO,CAAC,MAAM,GAAG,eAAe,EAAE,CAAC;QACrC,MAAM,IAAI,KAAK,CACb,iCAAiC,OAAO,CAAC,MAAM,IAAI,eAAe,EAAE,CACrE,CAAC;IACJ,CAAC;IACD,IAAI,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,CAAC;QAC3C,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC;IAC5C,CAAC;IAED,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC/C,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC;IACpD,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC;IACrD,MAAM,UAAU,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,KAAK,GAAG,IAAI,EAAE,CAAC,CAAC,CAAC;IAClE,IAAI,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC;QAC9C,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;IAC9C,CAAC;IAED,MAAM,UAAU,GAAG,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC;IAC9D,MAAM,wBAAwB,GAAG,UAAU,CAAC,MAAM,CAChD,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,CACd,KAAK,GAAG,QAAQ,CAAC,YAAY,CAAC,IAAI,CAAC,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC,UAAU,EAC/D,CAAC,CACF,CAAC;IAEF,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;IAC1C,MAAM,SAAS,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC;IAC1C,IAAI,SAAS,GAAG,cAAc,EAAE,CAAC;QAC/B,MAAM,IAAI,KAAK,CAAC,4BAA4B,SAAS,IAAI,cAAc,EAAE,CAAC,CAAC;IAC7E,CAAC;IACD,MAAM,IAAI,GAAG,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IAC5C,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,uBAAuB,CAAC,EAAE,CAAC;QAC5C,MAAM,IAAI,KAAK,CAAC,kBAAkB,CAAC,CAAC;IACtC,CAAC;IACD,MAAM,YAAY,GAAG;QACnB,GAAG,IAAI,CAAC,QAAQ,CAAC,yCAAyC,CAAC;KAC5D,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC,CAAC;IAC1B,MAAM,0BAA0B,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,MAAM,CAClE,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE;QACd,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,6BAA6B,IAAI,EAAE,CAAC,CAAC;QAChF,OAAO,CACL,KAAK;YACL,QAAQ,CAAC,YAAY,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC,UAAU,CACpE,CAAC;IACJ,CAAC,EACD,CAAC,CACF,CAAC;IACF,IAAI,0BAA0B,GAAG,iCAAiC,EAAE,CAAC;QACnE,MAAM,IAAI,KAAK,CACb,uCAAuC,0BAA0B,IAAI,iCAAiC,EAAE,CACzG,CAAC;IACJ,CAAC;IAED,OAAO;QACL,UAAU,EAAE,OAAO,CAAC,MAAM;QAC1B,UAAU;QACV,wBAAwB;QACxB,0BAA0B;KAC3B,CAAC;AACJ,CAAC"}

package/dist/nest.d.ts

@@ -1,10 +1,9 @@
 /**
  * Application-facing NestJS surface for OpenXiangda 2.0.
  *
- * This facade intentionally excludes the retired RoleSession decorators and
- * low-level transport clients. Applications receive only current-user-union,
+ * Applications receive only current-user-union, Perspective read projection,
  * application-principal, Data API, runtime, event and bounded operation APIs.
  */
-export { bootstrapOpenXiangdaApplication, OpenXiangdaModule, OpenXiangdaAuthzGuard, RequireCapability, OpenXiangdaOperation, CurrentPrincipal, CurrentUser, currentUserFromVerifiedContext, currentUserFromPrincipal, CurrentApplicationPrincipal, OpenXiangdaDataApiService, OpenXiangdaApplicationDataApiService, OpenXiangdaApplicationCredentials, OpenXiangdaRuntimeLeaseService, OpenXiangdaRuntimeSecrets, OpenXiangdaStandardOperations, OpenXiangdaEventContext, OpenXiangdaEventHandler, OpenXiangdaEventRegistry, OpenXiangdaEventRetryableError, OpenXiangdaEventDeterministicError, eventSigningSecretsFromEnvironment, assertValidTimeInterval, idempotentTransaction, } from 'openxiangda-nest';
-export type { OpenXiangdaApplicationBootstrapOptions, OpenXiangdaModuleOptions, OpenXiangdaOAuthClientOptions, OpenXiangdaFetch, OpenXiangdaCurrentUser, OpenXiangdaServicePrincipal, OpenXiangdaConnectedDevelopmentStatus, OpenXiangdaDomainEventEmitInput, OpenXiangdaDomainEventEmitResult, OpenXiangdaRuntimeLeaseState, OpenXiangdaEventHandlerContext, OpenXiangdaEventHandlerDeclaration, OpenXiangdaEventConsumer, TimeInterval, MeetingReservationOperationInput, CourseSelectionOperationInput, VisitorReservationOperationInput, } from 'openxiangda-nest';
+export { bootstrapOpenXiangdaApplication, OpenXiangdaModule, OpenXiangdaAuthzGuard, RequireCapability, OpenXiangdaOperation, CurrentPrincipal, CurrentUser, CurrentPerspective, currentUserFromVerifiedContext, currentUserFromPrincipal, CurrentApplicationPrincipal, OpenXiangdaDataApiService, OpenXiangdaBusinessDataApiService, OpenXiangdaApplicationDataApiService, OpenXiangdaApplicationCredentials, OpenXiangdaRuntimeLeaseService, OpenXiangdaRuntimeSecrets, OpenXiangdaStandardOperations, OpenXiangdaEventContext, OpenXiangdaEventHandler, OpenXiangdaEventRegistry, OpenXiangdaEventRetryableError, OpenXiangdaEventDeterministicError, eventSigningSecretsFromEnvironment, assertValidTimeInterval, idempotentTransaction, } from 'openxiangda-nest';
+export type { OpenXiangdaApplicationBootstrapOptions, OpenXiangdaModuleOptions, OpenXiangdaOAuthClientOptions, OpenXiangdaFetch, OpenXiangdaCurrentUser, OpenXiangdaServicePrincipal, OpenXiangdaConnectedDevelopmentStatus, OpenXiangdaDomainEventEmitInput, OpenXiangdaDomainEventEmitResult, OpenXiangdaBusinessActionContext, OpenXiangdaRuntimeLeaseState, OpenXiangdaEventHandlerContext, OpenXiangdaEventHandlerDeclaration, OpenXiangdaEventConsumer, TimeInterval, MeetingReservationOperationInput, CourseSelectionOperationInput, VisitorReservationOperationInput, } from 'openxiangda-nest';
 //# sourceMappingURL=nest.d.ts.map

package/dist/nest.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"nest.d.ts","sourceRoot":"","sources":["../src/nest.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,EACL,+BAA+B,EAC/B,iBAAiB,EACjB,qBAAqB,EACrB,iBAAiB,EACjB,oBAAoB,EACpB,gBAAgB,EAChB,WAAW,EACX,8BAA8B,EAC9B,wBAAwB,EACxB,2BAA2B,EAC3B,yBAAyB,EACzB,oCAAoC,EACpC,iCAAiC,EACjC,8BAA8B,EAC9B,yBAAyB,EACzB,6BAA6B,EAC7B,uBAAuB,EACvB,uBAAuB,EACvB,wBAAwB,EACxB,8BAA8B,EAC9B,kCAAkC,EAClC,kCAAkC,EAClC,uBAAuB,EACvB,qBAAqB,GACtB,MAAM,kBAAkB,CAAC;AAE1B,YAAY,EACV,sCAAsC,EACtC,wBAAwB,EACxB,6BAA6B,EAC7B,gBAAgB,EAChB,sBAAsB,EACtB,2BAA2B,EAC3B,qCAAqC,EACrC,+BAA+B,EAC/B,gCAAgC,EAChC,4BAA4B,EAC5B,8BAA8B,EAC9B,kCAAkC,EAClC,wBAAwB,EACxB,YAAY,EACZ,gCAAgC,EAChC,6BAA6B,EAC7B,gCAAgC,GACjC,MAAM,kBAAkB,CAAC"}
+{"version":3,"file":"nest.d.ts","sourceRoot":"","sources":["../src/nest.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,EACL,+BAA+B,EAC/B,iBAAiB,EACjB,qBAAqB,EACrB,iBAAiB,EACjB,oBAAoB,EACpB,gBAAgB,EAChB,WAAW,EACX,kBAAkB,EAClB,8BAA8B,EAC9B,wBAAwB,EACxB,2BAA2B,EAC3B,yBAAyB,EACzB,iCAAiC,EACjC,oCAAoC,EACpC,iCAAiC,EACjC,8BAA8B,EAC9B,yBAAyB,EACzB,6BAA6B,EAC7B,uBAAuB,EACvB,uBAAuB,EACvB,wBAAwB,EACxB,8BAA8B,EAC9B,kCAAkC,EAClC,kCAAkC,EAClC,uBAAuB,EACvB,qBAAqB,GACtB,MAAM,kBAAkB,CAAC;AAE1B,YAAY,EACV,sCAAsC,EACtC,wBAAwB,EACxB,6BAA6B,EAC7B,gBAAgB,EAChB,sBAAsB,EACtB,2BAA2B,EAC3B,qCAAqC,EACrC,+BAA+B,EAC/B,gCAAgC,EAChC,gCAAgC,EAChC,4BAA4B,EAC5B,8BAA8B,EAC9B,kCAAkC,EAClC,wBAAwB,EACxB,YAAY,EACZ,gCAAgC,EAChC,6BAA6B,EAC7B,gCAAgC,GACjC,MAAM,kBAAkB,CAAC"}

package/dist/nest.js

@@ -1,9 +1,8 @@
 /**
  * Application-facing NestJS surface for OpenXiangda 2.0.
  *
- * This facade intentionally excludes the retired RoleSession decorators and
- * low-level transport clients. Applications receive only current-user-union,
+ * Applications receive only current-user-union, Perspective read projection,
  * application-principal, Data API, runtime, event and bounded operation APIs.
  */
-export { bootstrapOpenXiangdaApplication, OpenXiangdaModule, OpenXiangdaAuthzGuard, RequireCapability, OpenXiangdaOperation, CurrentPrincipal, CurrentUser, currentUserFromVerifiedContext, currentUserFromPrincipal, CurrentApplicationPrincipal, OpenXiangdaDataApiService, OpenXiangdaApplicationDataApiService, OpenXiangdaApplicationCredentials, OpenXiangdaRuntimeLeaseService, OpenXiangdaRuntimeSecrets, OpenXiangdaStandardOperations, OpenXiangdaEventContext, OpenXiangdaEventHandler, OpenXiangdaEventRegistry, OpenXiangdaEventRetryableError, OpenXiangdaEventDeterministicError, eventSigningSecretsFromEnvironment, assertValidTimeInterval, idempotentTransaction, } from 'openxiangda-nest';
+export { bootstrapOpenXiangdaApplication, OpenXiangdaModule, OpenXiangdaAuthzGuard, RequireCapability, OpenXiangdaOperation, CurrentPrincipal, CurrentUser, CurrentPerspective, currentUserFromVerifiedContext, currentUserFromPrincipal, CurrentApplicationPrincipal, OpenXiangdaDataApiService, OpenXiangdaBusinessDataApiService, OpenXiangdaApplicationDataApiService, OpenXiangdaApplicationCredentials, OpenXiangdaRuntimeLeaseService, OpenXiangdaRuntimeSecrets, OpenXiangdaStandardOperations, OpenXiangdaEventContext, OpenXiangdaEventHandler, OpenXiangdaEventRegistry, OpenXiangdaEventRetryableError, OpenXiangdaEventDeterministicError, eventSigningSecretsFromEnvironment, assertValidTimeInterval, idempotentTransaction, } from 'openxiangda-nest';
 //# sourceMappingURL=nest.js.map

package/dist/nest.js.map

@@ -1 +1 @@
-{"version":3,"file":"nest.js","sourceRoot":"","sources":["../src/nest.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,EACL,+BAA+B,EAC/B,iBAAiB,EACjB,qBAAqB,EACrB,iBAAiB,EACjB,oBAAoB,EACpB,gBAAgB,EAChB,WAAW,EACX,8BAA8B,EAC9B,wBAAwB,EACxB,2BAA2B,EAC3B,yBAAyB,EACzB,oCAAoC,EACpC,iCAAiC,EACjC,8BAA8B,EAC9B,yBAAyB,EACzB,6BAA6B,EAC7B,uBAAuB,EACvB,uBAAuB,EACvB,wBAAwB,EACxB,8BAA8B,EAC9B,kCAAkC,EAClC,kCAAkC,EAClC,uBAAuB,EACvB,qBAAqB,GACtB,MAAM,kBAAkB,CAAC"}
+{"version":3,"file":"nest.js","sourceRoot":"","sources":["../src/nest.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,EACL,+BAA+B,EAC/B,iBAAiB,EACjB,qBAAqB,EACrB,iBAAiB,EACjB,oBAAoB,EACpB,gBAAgB,EAChB,WAAW,EACX,kBAAkB,EAClB,8BAA8B,EAC9B,wBAAwB,EACxB,2BAA2B,EAC3B,yBAAyB,EACzB,iCAAiC,EACjC,oCAAoC,EACpC,iCAAiC,EACjC,8BAA8B,EAC9B,yBAAyB,EACzB,6BAA6B,EAC7B,uBAAuB,EACvB,uBAAuB,EACvB,wBAAwB,EACxB,8BAA8B,EAC9B,kCAAkC,EAClC,kCAAkC,EAClC,uBAAuB,EACvB,qBAAqB,GACtB,MAAM,kBAAkB,CAAC"}

package/dist/react.d.ts

@@ -1,12 +1,15 @@
 export * from './browser/application';
+export * from './browser/admin-contributions';
 export * from './browser/appearance';
 export * from './browser/data-provider';
 export * from './browser/FilePreviewPage';
 export * from './browser/runtime';
 export * from './browser/Shell';
 export * from './browser/resource-definitions';
+export * from './browser/workflow-definitions';
 export * from './browser/components/resource/GeneratedResourceCrud';
 export * from './browser/components/resource/ResourceBatchActions';
 export * from './browser/components/resource/StandardResourcePages';
+export * from './browser/components/workflow/StandardWorkflowPages';
 export type * from './browser/components/resource/generated-resource-definition';
 //# sourceMappingURL=react.d.ts.map

package/dist/react.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"react.d.ts","sourceRoot":"","sources":["../src/react.ts"],"names":[],"mappings":"AAAA,cAAc,uBAAuB,CAAC;AACtC,cAAc,sBAAsB,CAAC;AACrC,cAAc,yBAAyB,CAAC;AACxC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,mBAAmB,CAAC;AAClC,cAAc,iBAAiB,CAAC;AAChC,cAAc,gCAAgC,CAAC;AAC/C,cAAc,qDAAqD,CAAC;AACpE,cAAc,oDAAoD,CAAC;AACnE,cAAc,qDAAqD,CAAC;AACpE,mBAAmB,6DAA6D,CAAC"}
+{"version":3,"file":"react.d.ts","sourceRoot":"","sources":["../src/react.ts"],"names":[],"mappings":"AAAA,cAAc,uBAAuB,CAAC;AACtC,cAAc,+BAA+B,CAAC;AAC9C,cAAc,sBAAsB,CAAC;AACrC,cAAc,yBAAyB,CAAC;AACxC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,mBAAmB,CAAC;AAClC,cAAc,iBAAiB,CAAC;AAChC,cAAc,gCAAgC,CAAC;AAC/C,cAAc,gCAAgC,CAAC;AAC/C,cAAc,qDAAqD,CAAC;AACpE,cAAc,oDAAoD,CAAC;AACnE,cAAc,qDAAqD,CAAC;AACpE,cAAc,qDAAqD,CAAC;AACpE,mBAAmB,6DAA6D,CAAC"}

package/dist/react.js

@@ -1,11 +1,14 @@
 export * from './browser/application';
+export * from './browser/admin-contributions';
 export * from './browser/appearance';
 export * from './browser/data-provider';
 export * from './browser/FilePreviewPage';
 export * from './browser/runtime';
 export * from './browser/Shell';
 export * from './browser/resource-definitions';
+export * from './browser/workflow-definitions';
 export * from './browser/components/resource/GeneratedResourceCrud';
 export * from './browser/components/resource/ResourceBatchActions';
 export * from './browser/components/resource/StandardResourcePages';
+export * from './browser/components/workflow/StandardWorkflowPages';
 //# sourceMappingURL=react.js.map

package/dist/react.js.map

@@ -1 +1 @@
-{"version":3,"file":"react.js","sourceRoot":"","sources":["../src/react.ts"],"names":[],"mappings":"AAAA,cAAc,uBAAuB,CAAC;AACtC,cAAc,sBAAsB,CAAC;AACrC,cAAc,yBAAyB,CAAC;AACxC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,mBAAmB,CAAC;AAClC,cAAc,iBAAiB,CAAC;AAChC,cAAc,gCAAgC,CAAC;AAC/C,cAAc,qDAAqD,CAAC;AACpE,cAAc,oDAAoD,CAAC;AACnE,cAAc,qDAAqD,CAAC"}
+{"version":3,"file":"react.js","sourceRoot":"","sources":["../src/react.ts"],"names":[],"mappings":"AAAA,cAAc,uBAAuB,CAAC;AACtC,cAAc,+BAA+B,CAAC;AAC9C,cAAc,sBAAsB,CAAC;AACrC,cAAc,yBAAyB,CAAC;AACxC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,mBAAmB,CAAC;AAClC,cAAc,iBAAiB,CAAC;AAChC,cAAc,gCAAgC,CAAC;AAC/C,cAAc,gCAAgC,CAAC;AAC/C,cAAc,qDAAqD,CAAC;AACpE,cAAc,oDAAoD,CAAC;AACnE,cAAc,qDAAqD,CAAC;AACpE,cAAc,qDAAqD,CAAC"}

package/dist/testing.d.ts

@@ -1,4 +1,5 @@
 export * from 'openxiangda-devkit-core/testing';
 export { OpenXiangdaApplicationServices, verifySealedAppPackage, } from 'openxiangda-devkit-core';
 export { sha256Digest } from 'openxiangda-contracts';
+export { verifyOpenXiangdaWebBuild, type OpenXiangdaWebBuildVerification, } from './internal/web-build-verifier.js';
 //# sourceMappingURL=testing.d.ts.map

package/dist/testing.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"testing.d.ts","sourceRoot":"","sources":["../src/testing.ts"],"names":[],"mappings":"AAAA,cAAc,iCAAiC,CAAC;AAChD,OAAO,EACL,8BAA8B,EAC9B,sBAAsB,GACvB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC"}
+{"version":3,"file":"testing.d.ts","sourceRoot":"","sources":["../src/testing.ts"],"names":[],"mappings":"AAAA,cAAc,iCAAiC,CAAC;AAChD,OAAO,EACL,8BAA8B,EAC9B,sBAAsB,GACvB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AACrD,OAAO,EACL,yBAAyB,EACzB,KAAK,+BAA+B,GACrC,MAAM,kCAAkC,CAAC"}

package/dist/testing.js

@@ -1,4 +1,5 @@
 export * from 'openxiangda-devkit-core/testing';
 export { OpenXiangdaApplicationServices, verifySealedAppPackage, } from 'openxiangda-devkit-core';
 export { sha256Digest } from 'openxiangda-contracts';
+export { verifyOpenXiangdaWebBuild, } from './internal/web-build-verifier.js';
 //# sourceMappingURL=testing.js.map

package/dist/testing.js.map

@@ -1 +1 @@
-{"version":3,"file":"testing.js","sourceRoot":"","sources":["../src/testing.ts"],"names":[],"mappings":"AAAA,cAAc,iCAAiC,CAAC;AAChD,OAAO,EACL,8BAA8B,EAC9B,sBAAsB,GACvB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC"}
+{"version":3,"file":"testing.js","sourceRoot":"","sources":["../src/testing.ts"],"names":[],"mappings":"AAAA,cAAc,iCAAiC,CAAC;AAChD,OAAO,EACL,8BAA8B,EAC9B,sBAAsB,GACvB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AACrD,OAAO,EACL,yBAAyB,GAE1B,MAAM,kCAAkC,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "openxiangda",
-  "version": "2.0.0-alpha.2",
+  "version": "2.0.0-alpha.21",
   "description": "Unified OpenXiangda 2.0 CLI, SDK, React runtime, NestJS integration and AI skill distribution.",
   "type": "module",
   "main": "./dist/index.js",
@@ -49,12 +49,12 @@
   "dependencies": {
     "dayjs": "1.11.18",
     "docx-preview": "0.3.7",
-    "openxiangda-cli": "2.0.0-alpha.90",
-    "openxiangda-contracts": "2.0.0-alpha.44",
-    "openxiangda-devkit-core": "2.0.0-alpha.57",
-    "openxiangda-mcp": "2.0.0-alpha.57",
-    "openxiangda-nest": "2.0.0-alpha.53",
-    "openxiangda-skill-kit": "2.0.0-alpha.75",
+    "openxiangda-cli": "2.0.0-alpha.108",
+    "openxiangda-contracts": "2.0.0-alpha.50",
+    "openxiangda-devkit-core": "2.0.0-alpha.67",
+    "openxiangda-mcp": "2.0.0-alpha.67",
+    "openxiangda-nest": "2.0.0-alpha.61",
+    "openxiangda-skill-kit": "2.0.0-alpha.85",
     "xlsx": "https://cdn.sheetjs.com/xlsx-0.20.3/xlsx-0.20.3.tgz"
   },
   "peerDependencies": {

package/skills/manifest.json

@@ -4,7 +4,7 @@
     {
       "name": "openxiangda-v2",
       "description": "Use when researching, designing, building, testing, or delivering a complete OpenXiangda 2.0 application.",
-      "sha256": "9b26c564ae1fe3dcf1c194d8a64ea43951b0f06dea4dc2da4ffefb5eb0a14e81"
+      "sha256": "4e79de2626b4fe8ec1049cba8354db8447b2d93160957237df8ba6a3d547bc93"
     }
   ]
 }

package/skills/openxiangda-v2/SKILL.md

@@ -5,30 +5,32 @@ description: Use when researching, designing, building, testing, or delivering a
 
 # OpenXiangda 2.0
 
-Treat requirement discovery, architecture, authorization, development, testing and delivery as one evidence-backed application lifecycle. OpenXiangda 2.0 has no compatibility surface: replace an incorrect alpha contract directly and never add aliases, migration branches, 1.x SDD, Umi, ProComponents, Function CRUD, application RoleSession state or another identity path.
+Treat requirement discovery, architecture, authorization, development, testing and delivery as one evidence-backed application lifecycle. OpenXiangda 2.0 has no compatibility surface: replace an incorrect alpha contract directly and never add aliases, migration branches, 1.x SDD, Umi, ProComponents, Function CRUD, application-owned identity switching or another identity path.
 
 Before a workspace exists, use this Skill's exact npm version:
 
 ```bash
-pnpm dlx openxiangda@2.0.0-alpha.2 login --base-url <platform>
-pnpm dlx openxiangda@2.0.0-alpha.2 create <directory>
+pnpm dlx openxiangda@2.0.0-alpha.21 login --base-url <platform>
+pnpm dlx openxiangda@2.0.0-alpha.21 create <directory>
 ```
 
 Inside an application, use only its locked executable through `pnpm openxiangda`. Never invoke a bare global `openxiangda`, because that executable may belong to stable 1.x. Moving tags such as `latest` and `alpha` are forbidden. To install or refresh this same Skill from the package, run:
 
 ```bash
-pnpm dlx openxiangda@2.0.0-alpha.2 skill install --force
+pnpm dlx openxiangda@2.0.0-alpha.21 skill install --force
 ```
 
 Use this order:
 
-1. Read [Discovery](references/discovery.md), turn the request into actors, scenarios, data, permissions, constraints and acceptance evidence, and identify every unresolved choice.
-2. Read [Architecture](references/architecture.md), assign one owner to each capability and keep ordinary CRUD on platform Data API.
-3. For every resource or permission change, read [Data and authorization](references/data-authz.md) before editing `openxiangda.config.ts`.
-4. Read [Frontend](references/frontend.md) for pages or fields and [Backend actions](references/backend.md) only for a real business action.
-5. When the application explicitly enables standard approval or notifications, read [Workflow and Notification Hub](references/workflow-notification.md). Keep them optional and out of ordinary CRUD.
-6. Run the connected loop with `pnpm openxiangda dev`, then follow [Testing](references/testing.md) and `pnpm openxiangda check`.
-7. Follow [Delivery](references/delivery.md): deploy preproduction first, inspect status/logs, then promote the exact successful version to production.
+1. Read [Commands](references/commands.md) when selecting a CLI operation. It is generated from the executable registry. `create` owns application binding and initialization, while `check`, `deploy` and `status` expose the current workspace and deployment facts.
+2. Read [Discovery](references/discovery.md), turn the request into actors, scenarios, data, permissions, constraints and acceptance evidence, and identify every unresolved choice.
+3. If the workspace contains `appspec/`, the user asks to maintain requirements, or the task changes observable behavior, read [AppSpec](references/appspec.md), load the bounded index with `pnpm openxiangda spec context --json`, then select only the relevant stable ID. AppSpec is optional and never a release gate; L0 changes create no record.
+4. Read [Architecture](references/architecture.md), assign one owner to each capability and keep ordinary CRUD on platform Data API.
+5. For every resource or permission change, read [Data and authorization](references/data-authz.md) before editing `openxiangda.config.ts`.
+6. Read [Frontend](references/frontend.md) for pages or fields and [Backend actions](references/backend.md) only for a real business action.
+7. When the application explicitly enables standard approval, application events or notifications, read [Workflow, Events and Notification Hub](references/workflow-events.md). Keep them optional and out of ordinary CRUD.
+8. Run the connected loop with `pnpm openxiangda dev`, then follow [Testing](references/testing.md) and `pnpm openxiangda check`.
+9. Follow [Delivery](references/delivery.md): deploy preproduction first, inspect status/logs, then promote the exact successful version to production.
 
 For an AI-native client, start the workspace protocol through the same pinned executable:
 
@@ -36,19 +38,21 @@ For an AI-native client, start the workspace protocol through the same pinned ex
 pnpm exec openxiangda --mcp-stdio --cwd <workspace>
 ```
 
-Read `openxiangda://workspace/contracts` or call `contract_describe`. Require `aiCatalog` and `aiCatalogDigest` to match the normal compiler output. Never create an application MCP server, Catalog file, preview store or AI authorization path.
+Read `openxiangda://workspace/contracts` or call `contract_describe`. When AppSpec is enabled, read `openxiangda://workspace/appspec` or call `appspec_context`; treat it as advisory context, never as deployment authority. Require `aiCatalog` and `aiCatalogDigest` to match the normal compiler output. Never create an application MCP server, Catalog file, preview store or AI authorization path.
 
-The browser uses the current logged-in user's complete application-role union. The platform is authoritative for capabilities, fields, rows and RLS. Application code does not select or transmit a RoleSession, persist a platform token, construct an authorization result or keep a second permission state.
+The browser uses the current logged-in user's complete application-role union. The platform is authoritative for capabilities, fields, rows and RLS. A declared Perspective is only a read projection over that union: it may narrow pages, rows and readable fields, but never create/update/delete, workflow or custom-action authorization. Omitted Perspective means the complete union. Application code does not replace the authenticated identity, persist a platform token, construct an authorization result or keep a second permission state.
 
 Read only the references needed for the current change, except the mandatory discovery and Data/authorization rules above:
 
 - [Discovery](references/discovery.md)
+- [AppSpec](references/appspec.md)
+- [Commands](references/commands.md)
 - [Architecture](references/architecture.md)
 - [Workspace agent contract](references/workspace.md)
 - [Backend actions](references/backend.md)
 - [Data and authorization](references/data-authz.md)
 - [Frontend](references/frontend.md)
-- [Workflow and Notification Hub](references/workflow-notification.md)
+- [Workflow, Events and Notification Hub](references/workflow-events.md)
 - [Testing](references/testing.md)
 - [Delivery](references/delivery.md)
 

package/skills/openxiangda-v2/references/appspec.md

@@ -0,0 +1,67 @@
+# AppSpec
+
+AppSpec 是 OpenXiangda 2.0 应用仓库中的可选业务意图层。它帮助 AI 理解“为什么做、应当表现成
+什么、这次改变什么”，但不复制 `openxiangda.config.ts`、编译合同、代码、测试或部署状态，也
+不是发布门禁。
+
+AppSpec 只使用 2.0 的 `appspec/`、文档 schema v1 与 context v2。绝不读取、识别、导入或迁移
+1.x 的 `openspec/`、SDD、表单、页面、函数和发布材料。
+
+## 何时读取
+
+- 工作区存在 `appspec/` 时，在分析需求或修改行为前运行 `pnpm openxiangda spec context --json`，先读取
+  有界索引。
+- 从索引选择相关变更、能力、ADR 或历史变更 ID，再运行例如
+  `pnpm openxiangda spec context booking-window --json` 读取正文。
+- AI-native 客户端可读取 `openxiangda://workspace/appspec` 或调用 `appspec_context`。
+- 默认不加载全部正文；历史变更只在追查原因时用稳定 ID 按需读取。
+
+## 何时维护
+
+| 风险 | 典型变化 | 最小维护量 |
+| --- | --- | --- |
+| L0 | 重构、格式、无行为变化 | 不创建 ChangeSpec |
+| L1 | 文案、单字段、局部规则 | 一份短 ChangeSpec |
+| L2 | 跨资源、权限、状态变化 | 加正反验收、数据与回滚 |
+| L3 | 身份、迁移、并发、外部副作用 | 加失败/幂等、资源边界和 ADR |
+
+用户没有要求且变更是 L0 时，不要为了“流程完整”创建文档。小应用可以长期只维护 `app.md`。
+
+## 标准操作
+
+```bash
+pnpm openxiangda spec init
+pnpm openxiangda spec add-capability CAP-BOOKING --title "预约管理" --resources bookings
+pnpm openxiangda spec new booking-window --title "限制可预约时段" --risk L1 \
+  --capabilities CAP-BOOKING --resources bookings
+pnpm openxiangda spec context booking-window --json
+pnpm openxiangda spec check
+pnpm openxiangda spec close booking-window --current-spec merged \
+  --summary "已通过真实角色验收"
+```
+
+`spec check` 是用户主动选择的严格检查；普通 `check/dev/deploy` 只给 advisory，不因 AppSpec
+缺失或不完整而失败。
+
+新 ChangeSpec 的 `currentSpec` 固定从 `pending` 开始。关闭前先把长期有效结果合入 `app.md` 或相关
+CapabilitySpec，再由用户确认 `merged`；不改变长期规格时由用户确认 `not-applicable`。AI 可以列出
+未合入差异，但不能自行选择这两个值。稳定 REQ/AC 未进入当前规格、L2/L3 必需章节为空或保留默认
+占位内容时，`spec close` 不移动文件。
+
+## 写作边界
+
+- `app.md` 记录长期目标、角色、范围、术语和跨能力约束。
+- `capabilities/CAP-*.md` 记录当前有效需求，使用稳定 `REQ-*` 和可证伪 `AC-*`。
+- `changes/active/*.md` 只记录本次 delta、风险、影响范围与验收；关闭前把仍有效的结论合入能力规格，
+  并由用户确认 `currentSpec`。
+- `decisions/ADR-*.md` 只用于架构显著决定，不为普通小改创建。
+- 引用真实 2.0 resource/action code，不抄字段定义和权限矩阵的机器事实。
+- AI 可以创建 `draft`、指出未确认问题和建议更新，不能自行把需求标记为 `confirmed`。
+- 不因 AppSpec 与实现冲突就静默修改其中一方；明确指出冲突，由用户决定业务意图，技术事实以实时
+  编译合同为准。
+
+## 可迁移程度
+
+完整 AppSpec 能显著提高另一个新项目复现业务逻辑的概率，但最终文档本身不等于可执行应用。
+需要接近原应用时，应同时提供 AppSpec、`openxiangda.config.ts`、必要自定义动作、测试和外部接口
+合同；历史 ChangeSpec 不是必需输入。

package/skills/openxiangda-v2/references/backend.md

@@ -1,6 +1,31 @@
 # OpenXiangda 2.0 Backend
 
-Keep normal record CRUD in the platform Data API. Use `apps/server` only for typed business actions that need server-side logic. For an interactive request, the platform gateway supplies the verified current user, complete application-role union and capabilities from the same platform authorization snapshot used by Data API. Controllers bind operations and capabilities through `openxiangda/nest`; workers continue to use their explicit application identity.
+Read [Architecture](architecture.md) and [Data and authorization](data-authz.md)
+before adding a backend. Finish with [Testing](testing.md).
+
+Keep normal record CRUD in the platform Data API. Use `apps/server` only for typed business actions that need server-side logic. For an interactive request, the platform gateway supplies the verified current user, complete application-role union and capabilities. Controllers bind operations and capabilities through `openxiangda/nest`; workers continue to use their explicit application identity.
+
+Every interactive business action uses `@OpenXiangdaOperation(operation)`. The
+guard checks `operation.requiredCapability` once at App API ingress. Inside that
+declared action, inject `OpenXiangdaBusinessDataApiService` or use
+`OpenXiangdaStandardOperations`: Native Data then runs as the trusted backend
+for this exact application, environment, version and operation. Do not forward
+the caller's resource, row or field permissions into that internal Data call,
+and do not author an `authorizationJSON` permission mirror. The platform still
+records the initiating user and action code in records, files, events and audit.
+
+`OpenXiangdaDataApiService` deliberately retains ordinary current-user Data
+authorization and automatically inherits the request Perspective for reads.
+Its writes still authorize against the complete role union. Do not use it to
+implement a declared business action. The
+business facade also rejects routes without immutable `OpenXiangdaOperation`
+metadata, so a controller cannot silently gain trusted Data access.
+
+If a custom controller bypasses the standard Data API and reads Nest-owned SQL,
+an external service or another datastore, inject `@CurrentPerspective()` and
+apply the declared role-based read projection explicitly. Perspective is not a
+credential and must never change mutation authorization. Prefer moving ordinary
+reads back to `OpenXiangdaDataApiService`, where the platform owns the contract.
 
 Do not duplicate resource persistence in controllers. Keep actions bounded and side-effect behavior explicit. Run `pnpm openxiangda dev` for the connected loop and `pnpm openxiangda check` before delivery.
 
@@ -16,15 +41,25 @@ Every constructor dependency in a `@Controller` or `@Injectable` class uses an
 explicit token:
 
 ```ts
-import { Controller, Inject } from '@nestjs/common';
-import { OpenXiangdaStandardOperations } from 'openxiangda/nest';
-
-@Controller('/api/visitor-reservations')
+import { Controller, Inject, Post } from '@nestjs/common';
+import { appOperations } from '@app/contracts';
+import {
+  OpenXiangdaBusinessDataApiService,
+  OpenXiangdaOperation,
+} from 'openxiangda/nest';
+
+@Controller()
 export class VisitorReservationsController {
   constructor(
-    @Inject(OpenXiangdaStandardOperations)
-    private readonly operations: OpenXiangdaStandardOperations,
+    @Inject(OpenXiangdaBusinessDataApiService)
+    private readonly data: OpenXiangdaBusinessDataApiService,
   ) {}
+
+  @Post('/api/reservations/enroll')
+  @OpenXiangdaOperation(appOperations.reservationEnroll)
+  async enroll() {
+    return await this.data.create('visitor-reservations', { status: 'pending' });
+  }
 }
 ```
 
@@ -33,14 +68,28 @@ Do not silence that diagnostic or replace the connected-development compiler.
 
 Backend routes are private to the application unless their operation declaration contains an explicit `ai` block. Never infer AI exposure or risk from the HTTP method. A write action declares its touched resources and non-empty side effects, for example:
 
+Build operation request and response schemas through
+`resourceRecordSchema`, `schemaRef` and `composeAppOperationSchemas` from
+`openxiangda/config`. These helpers project canonical field value protocols
+from the same Resource declaration and prevent repeated user, department,
+resource-reference or managed-file shapes. Do not import a physical toolchain
+package or copy the JSON protocol by hand.
+
 ```ts
 {
   code: 'reservation.enroll',
   method: 'POST',
   path: '/api/reservations/enroll',
   capability: 'app:visitor-app:reservation:enroll',
-  requestSchema: { type: 'object', properties: { visitorName: { type: 'string' } } },
-  responseSchema: { type: 'object' },
+  ...composeAppOperationSchemas({
+    request: resourceRecordSchema(visitorReservations, {
+      fields: ['visitorName', 'visitDate', 'startTime'],
+    }),
+    response: schemaRef('ReservationRecord'),
+    definitions: {
+      ReservationRecord: resourceRecordSchema(visitorReservations),
+    },
+  }),
   ai: {
     name: '预约访客',
     description: '校验预约规则并创建访客预约',

package/skills/openxiangda-v2/references/commands.md

@@ -0,0 +1,21 @@
+# OpenXiangda 2.0 Commands
+
+> Generated from `DEVKIT_COMMANDS`. Do not edit manually.
+
+| Command | Risk | Purpose |
+| --- | --- | --- |
+| `pnpm openxiangda create` | deploy | 创建、绑定并初始化应用 |
+| `pnpm openxiangda dev` | write-local | 连接平台测试数据启动本地 Web 与 Nest |
+| `pnpm openxiangda check` | write-local | 生成契约并执行检查、测试和构建 |
+| `pnpm openxiangda accept` | deploy | 按计划准备可选的真实预发验收身份 |
+| `pnpm openxiangda deploy` | deploy | 部署测试环境或显式复用测试版本部署生产 |
+| `pnpm openxiangda status` | read | 查询最近或指定部署状态 |
+| `pnpm openxiangda logs` | read | 查询最近或指定部署日志 |
+| `pnpm openxiangda cancel` | deploy | 幂等取消尚未提交激活的部署 |
+| `pnpm openxiangda retry` | deploy | 显式重试可恢复的失败部署 |
+| `pnpm openxiangda start` | deploy | 从当前不可变版本启动应用环境 |
+| `pnpm openxiangda stop` | deploy | 将应用环境缩容为零并保留数据 |
+| `pnpm openxiangda rollback` | deploy | 回滚测试或生产环境 |
+| `pnpm openxiangda login` | write-local | 通过平台浏览器授权登录 |
+| `pnpm openxiangda skill` | write-local | 安装当前版本的 AI Skill |
+| `pnpm openxiangda spec` | write-local | 维护可选的 AppSpec 需求与变更辅助 |

package/skills/openxiangda-v2/references/data-authz.md

@@ -39,7 +39,7 @@ const visitorReservations = {
     },
     {
       code: 'attachments', type: 'file', label: '附件',
-      file: { multiple: true, maxCount: 5, maxSizeMb: 20, accept: ['image/*', '.pdf'] },
+      file: { maxCount: 5, maxSizeMb: 20, accept: ['image/*', '.pdf'] },
     },
     {
       code: 'internalNote', type: 'text.long', label: '内部备注',
@@ -56,14 +56,46 @@ Put it in `data: { resources: [visitorReservations] }`. Resource CRUD
 capabilities are derived by `resourceCapabilityCodes`; grant the needed values
 to roles. Directory-backed roles also require
 `app:<app-code>:directory:read`. Explicit field `access` capability codes are
-also granted only to the intended roles.
+also granted only to the intended roles. They are owned and exported by the
+generated field policy, so do not repeat them in `authz.capabilities`.
+`authz.capabilities` contains only explicit `backend` or `ui` capabilities.
+
+Declare optional work Perspectives once at the application root. A Perspective
+references existing role codes; the compiler derives its readable capability
+projection, so never hand-author `capabilityCodes` or duplicate row filters:
+
+```ts
+export default defineOpenXiangdaApp({
+  // ...identity, authz and data...
+  perspectives: [
+    {
+      code: 'reception-desk',
+      name: '接待人员视角',
+      roleCodes: ['reception_staff'],
+      default: true,
+    },
+    {
+      code: 'visitor-admin',
+      name: '访客管理员视角',
+      roleCodes: ['visitor_admin'],
+    },
+  ],
+});
+```
+
+The runtime offers only Perspectives whose `roleCodes` intersect the current
+user's actual application-role union. Selecting one sends
+`X-OpenXiangda-Perspective` on standard reads. Native Data intersects the
+normal authorized role union with that Perspective before capability, field,
+row-policy and RLS evaluation. Omit the header for the complete union. Never
+use Perspective to guard writes, workflows or custom actions.
 
 `required: true` owns both storage nullability and form validation. A field
 without `access` inherits the resource read/create/update capability. Each
 access array is all-of; `false` is explicit deny. The same arrays drive the
 generated UI and platform field policies.
 
-Field types are semantic, not PostgreSQL storage aliases. Use the catalog in the generated `AGENTS.md`: for example `text.short`, `number.integer`, `user.single`, `department.multiple`, `resource-ref.single`, `file`, `address` and `subtable`. The compiler alone chooses storage columns and constraints. Reference fields store complete labeled snapshots; resource references additionally declare their source and snapshot fields. File limits exist only under `file` and use `maxSizeMb`.
+Field types are semantic, not PostgreSQL storage aliases. Use the catalog in the generated `AGENTS.md`: for example `text.short`, `number.integer`, `user.single`, `department.multiple`, `resource-ref.single`, `file`, `address` and `subtable`. The compiler alone chooses storage columns and constraints. Reference fields store JSON display values. For `resource-ref.*`, `resourceCode`, `value`, `label`, optional `description` and optional `snapshot` are convenient historical display data only: the target resource remains authoritative, the platform does not create a foreign key or refresh/check the stored JSON, and business actions that need current target state must query it by `resourceCode` plus `value`. A resource source `labelField` must point to `text.short` or `text.long`; a `serial-number` field can be listed in `searchFields`, `descriptionFields` or `snapshotFields`, but it is not a display label. File limits exist only under `file`; `maxCount` owns the single/multiple bound and `maxSizeMb` owns the per-file size bound. There is no `file.multiple` key.
 
 Do not author raw schema or storage words as field types. `string`, `text`,
 `integer`, `decimal`, `boolean`, `date`, `datetime`, `uuid`, `json` and `file`
@@ -80,7 +112,7 @@ currentUserDataPolicy({
   code: 'reservation-host',
   name: '接待人员仅查看本人预约',
   resourceCode: 'visitor-reservations',
-  field: 'hostUserId.value',
+  field: 'hostUserId',
   roleCodes: ['reception_staff'],
   unrestrictedRoleCodes: ['visitor_admin'],
 })
@@ -88,6 +120,8 @@ currentUserDataPolicy({
 
 Put that value in `authz.dataPolicies`, declare both roles, and set the
 resource `dataPolicyCode` to the same code. Do not invent `operator`, `value`,
-`current_user: true`, lowercase match modes, or policy-level `roleCodes`.
+`current_user: true`, lowercase match modes, a dotted value path, or
+policy-level `roleCodes`. The compiler and platform know that `user.*` fields
+compare their stable `value`; `field` remains the declared field root code.
 
 Run `pnpm openxiangda check` after every declaration or permission change.

package/skills/openxiangda-v2/references/delivery.md

@@ -1,6 +1,22 @@
 # OpenXiangda 2.0 Delivery
 
-Run `pnpm openxiangda check`; it owns generation, static checks, tests and production builds. Deploy to test with `pnpm openxiangda deploy`. The CLI uses the official application Dockerfile and the platform-provided repository target to build and push the Nest image, then seals only its immutable digest. Never ask the developer for an image tag, digest, registry password, Docker configuration, or another public build command. If Docker, Buildx, repository configuration, or registry login is missing, preserve the stable machine error and retry with the same `pnpm openxiangda deploy` command after fixing that prerequisite.
+Run `pnpm openxiangda check --json`; it owns generation, static checks, tests
+and production builds but deliberately does not seal an AppPackage. Its
+`data.sealedArtifact` object and `.openxiangda/build/seal-status.json` make that
+state explicit even when an older `app-package.json` remains on disk. Deploy to
+test with the returned `openxiangda deploy` next command. Deploy owns the
+official application Dockerfile and platform-provided repository target,
+builds and pushes the Nest image, then writes a `sealed` status tied to the new
+immutable package digest. Never ask the developer for an image tag, digest,
+registry password, Docker configuration, or another public build command. If
+Docker, Buildx, repository configuration, or registry login is missing,
+preserve the stable machine error and retry with the same
+`pnpm openxiangda deploy` command after fixing that prerequisite.
+
+`pnpm openxiangda accept --plan <file>` is an optional manual preproduction
+test helper. It prepares expiring real identities but does not deploy, seal,
+promote or satisfy any release gate. Use it only when the requested acceptance
+needs real role membership and browser login.
 
 Use `pnpm openxiangda status` and `pnpm openxiangda logs` without an ID for the most recent run, or pass an explicit run ID.