openxiangda 2.0.0-alpha.3 → 2.0.0-alpha.8

package/dist/react.js.map

@@ -1 +1 @@
-{"version":3,"file":"react.js","sourceRoot":"","sources":["../src/react.ts"],"names":[],"mappings":"AAAA,cAAc,uBAAuB,CAAC;AACtC,cAAc,sBAAsB,CAAC;AACrC,cAAc,yBAAyB,CAAC;AACxC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,mBAAmB,CAAC;AAClC,cAAc,iBAAiB,CAAC;AAChC,cAAc,gCAAgC,CAAC;AAC/C,cAAc,qDAAqD,CAAC;AACpE,cAAc,oDAAoD,CAAC;AACnE,cAAc,qDAAqD,CAAC"}
+{"version":3,"file":"react.js","sourceRoot":"","sources":["../src/react.ts"],"names":[],"mappings":"AAAA,cAAc,uBAAuB,CAAC;AACtC,cAAc,sBAAsB,CAAC;AACrC,cAAc,yBAAyB,CAAC;AACxC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,mBAAmB,CAAC;AAClC,cAAc,iBAAiB,CAAC;AAChC,cAAc,gCAAgC,CAAC;AAC/C,cAAc,gCAAgC,CAAC;AAC/C,cAAc,qDAAqD,CAAC;AACpE,cAAc,oDAAoD,CAAC;AACnE,cAAc,qDAAqD,CAAC;AACpE,cAAc,qDAAqD,CAAC"}

package/dist/testing.d.ts

@@ -1,4 +1,5 @@
 export * from 'openxiangda-devkit-core/testing';
 export { OpenXiangdaApplicationServices, verifySealedAppPackage, } from 'openxiangda-devkit-core';
 export { sha256Digest } from 'openxiangda-contracts';
+export { verifyOpenXiangdaWebBuild, type OpenXiangdaWebBuildVerification, } from './internal/web-build-verifier.js';
 //# sourceMappingURL=testing.d.ts.map

package/dist/testing.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"testing.d.ts","sourceRoot":"","sources":["../src/testing.ts"],"names":[],"mappings":"AAAA,cAAc,iCAAiC,CAAC;AAChD,OAAO,EACL,8BAA8B,EAC9B,sBAAsB,GACvB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC"}
+{"version":3,"file":"testing.d.ts","sourceRoot":"","sources":["../src/testing.ts"],"names":[],"mappings":"AAAA,cAAc,iCAAiC,CAAC;AAChD,OAAO,EACL,8BAA8B,EAC9B,sBAAsB,GACvB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AACrD,OAAO,EACL,yBAAyB,EACzB,KAAK,+BAA+B,GACrC,MAAM,kCAAkC,CAAC"}

package/dist/testing.js

@@ -1,4 +1,5 @@
 export * from 'openxiangda-devkit-core/testing';
 export { OpenXiangdaApplicationServices, verifySealedAppPackage, } from 'openxiangda-devkit-core';
 export { sha256Digest } from 'openxiangda-contracts';
+export { verifyOpenXiangdaWebBuild, } from './internal/web-build-verifier.js';
 //# sourceMappingURL=testing.js.map

package/dist/testing.js.map

@@ -1 +1 @@
-{"version":3,"file":"testing.js","sourceRoot":"","sources":["../src/testing.ts"],"names":[],"mappings":"AAAA,cAAc,iCAAiC,CAAC;AAChD,OAAO,EACL,8BAA8B,EAC9B,sBAAsB,GACvB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC"}
+{"version":3,"file":"testing.js","sourceRoot":"","sources":["../src/testing.ts"],"names":[],"mappings":"AAAA,cAAc,iCAAiC,CAAC;AAChD,OAAO,EACL,8BAA8B,EAC9B,sBAAsB,GACvB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AACrD,OAAO,EACL,yBAAyB,GAE1B,MAAM,kCAAkC,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "openxiangda",
-  "version": "2.0.0-alpha.3",
+  "version": "2.0.0-alpha.8",
   "description": "Unified OpenXiangda 2.0 CLI, SDK, React runtime, NestJS integration and AI skill distribution.",
   "type": "module",
   "main": "./dist/index.js",
@@ -49,12 +49,12 @@
   "dependencies": {
     "dayjs": "1.11.18",
     "docx-preview": "0.3.7",
-    "openxiangda-cli": "2.0.0-alpha.91",
-    "openxiangda-contracts": "2.0.0-alpha.45",
-    "openxiangda-devkit-core": "2.0.0-alpha.58",
-    "openxiangda-mcp": "2.0.0-alpha.58",
-    "openxiangda-nest": "2.0.0-alpha.54",
-    "openxiangda-skill-kit": "2.0.0-alpha.76",
+    "openxiangda-cli": "2.0.0-alpha.96",
+    "openxiangda-contracts": "2.0.0-alpha.46",
+    "openxiangda-devkit-core": "2.0.0-alpha.59",
+    "openxiangda-mcp": "2.0.0-alpha.59",
+    "openxiangda-nest": "2.0.0-alpha.55",
+    "openxiangda-skill-kit": "2.0.0-alpha.77",
     "xlsx": "https://cdn.sheetjs.com/xlsx-0.20.3/xlsx-0.20.3.tgz"
   },
   "peerDependencies": {

package/skills/openxiangda-v2/SKILL.md

@@ -10,14 +10,14 @@ Treat requirement discovery, architecture, authorization, development, testing a
 Before a workspace exists, use this Skill's exact npm version:
 
 ```bash
-pnpm dlx openxiangda@2.0.0-alpha.3 login --base-url <platform>
-pnpm dlx openxiangda@2.0.0-alpha.3 create <directory>
+pnpm dlx openxiangda@2.0.0-alpha.8 login --base-url <platform>
+pnpm dlx openxiangda@2.0.0-alpha.8 create <directory>
 ```
 
 Inside an application, use only its locked executable through `pnpm openxiangda`. Never invoke a bare global `openxiangda`, because that executable may belong to stable 1.x. Moving tags such as `latest` and `alpha` are forbidden. To install or refresh this same Skill from the package, run:
 
 ```bash
-pnpm dlx openxiangda@2.0.0-alpha.3 skill install --force
+pnpm dlx openxiangda@2.0.0-alpha.8 skill install --force
 ```
 
 Use this order:

package/skills/openxiangda-v2/references/data-authz.md

@@ -39,7 +39,7 @@ const visitorReservations = {
     },
     {
       code: 'attachments', type: 'file', label: '附件',
-      file: { multiple: true, maxCount: 5, maxSizeMb: 20, accept: ['image/*', '.pdf'] },
+      file: { maxCount: 5, maxSizeMb: 20, accept: ['image/*', '.pdf'] },
     },
     {
       code: 'internalNote', type: 'text.long', label: '内部备注',
@@ -56,14 +56,16 @@ Put it in `data: { resources: [visitorReservations] }`. Resource CRUD
 capabilities are derived by `resourceCapabilityCodes`; grant the needed values
 to roles. Directory-backed roles also require
 `app:<app-code>:directory:read`. Explicit field `access` capability codes are
-also granted only to the intended roles.
+also granted only to the intended roles. They are owned and exported by the
+generated field policy, so do not repeat them in `authz.capabilities`.
+`authz.capabilities` contains only explicit `backend` or `ui` capabilities.
 
 `required: true` owns both storage nullability and form validation. A field
 without `access` inherits the resource read/create/update capability. Each
 access array is all-of; `false` is explicit deny. The same arrays drive the
 generated UI and platform field policies.
 
-Field types are semantic, not PostgreSQL storage aliases. Use the catalog in the generated `AGENTS.md`: for example `text.short`, `number.integer`, `user.single`, `department.multiple`, `resource-ref.single`, `file`, `address` and `subtable`. The compiler alone chooses storage columns and constraints. Reference fields store complete labeled snapshots; resource references additionally declare their source and snapshot fields. File limits exist only under `file` and use `maxSizeMb`.
+Field types are semantic, not PostgreSQL storage aliases. Use the catalog in the generated `AGENTS.md`: for example `text.short`, `number.integer`, `user.single`, `department.multiple`, `resource-ref.single`, `file`, `address` and `subtable`. The compiler alone chooses storage columns and constraints. Reference fields store complete labeled snapshots; resource references additionally declare their source and snapshot fields. File limits exist only under `file`; `maxCount` owns the single/multiple bound and `maxSizeMb` owns the per-file size bound. There is no `file.multiple` key.
 
 Do not author raw schema or storage words as field types. `string`, `text`,
 `integer`, `decimal`, `boolean`, `date`, `datetime`, `uuid`, `json` and `file`
@@ -80,7 +82,7 @@ currentUserDataPolicy({
   code: 'reservation-host',
   name: '接待人员仅查看本人预约',
   resourceCode: 'visitor-reservations',
-  field: 'hostUserId.value',
+  field: 'hostUserId',
   roleCodes: ['reception_staff'],
   unrestrictedRoleCodes: ['visitor_admin'],
 })
@@ -88,6 +90,8 @@ currentUserDataPolicy({
 
 Put that value in `authz.dataPolicies`, declare both roles, and set the
 resource `dataPolicyCode` to the same code. Do not invent `operator`, `value`,
-`current_user: true`, lowercase match modes, or policy-level `roleCodes`.
+`current_user: true`, lowercase match modes, a dotted value path, or
+policy-level `roleCodes`. The compiler and platform know that `user.*` fields
+compare their stable `value`; `field` remains the declared field root code.
 
 Run `pnpm openxiangda check` after every declaration or permission change.