openxiangda 2.0.0-alpha.42 → 2.0.0-alpha.45
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "openxiangda",
|
|
3
|
-
"version": "2.0.0-alpha.
|
|
3
|
+
"version": "2.0.0-alpha.45",
|
|
4
4
|
"description": "Unified OpenXiangda 2.0 CLI, SDK, React runtime, NestJS integration and AI skill distribution.",
|
|
5
5
|
"type": "module",
|
|
6
6
|
"main": "./dist/index.js",
|
|
@@ -49,12 +49,12 @@
|
|
|
49
49
|
"dependencies": {
|
|
50
50
|
"dayjs": "1.11.18",
|
|
51
51
|
"docx-preview": "0.3.7",
|
|
52
|
-
"openxiangda-cli": "2.0.0-alpha.
|
|
53
|
-
"openxiangda-contracts": "2.0.0-alpha.
|
|
54
|
-
"openxiangda-devkit-core": "2.0.0-alpha.
|
|
55
|
-
"openxiangda-mcp": "2.0.0-alpha.
|
|
56
|
-
"openxiangda-nest": "2.0.0-alpha.
|
|
57
|
-
"openxiangda-skill-kit": "2.0.0-alpha.
|
|
52
|
+
"openxiangda-cli": "2.0.0-alpha.130",
|
|
53
|
+
"openxiangda-contracts": "2.0.0-alpha.65",
|
|
54
|
+
"openxiangda-devkit-core": "2.0.0-alpha.84",
|
|
55
|
+
"openxiangda-mcp": "2.0.0-alpha.84",
|
|
56
|
+
"openxiangda-nest": "2.0.0-alpha.76",
|
|
57
|
+
"openxiangda-skill-kit": "2.0.0-alpha.105",
|
|
58
58
|
"xlsx": "https://cdn.sheetjs.com/xlsx-0.20.3/xlsx-0.20.3.tgz"
|
|
59
59
|
},
|
|
60
60
|
"peerDependencies": {
|
|
@@ -10,14 +10,14 @@ Treat requirement discovery, architecture, authorization, development, testing a
|
|
|
10
10
|
Before a workspace exists, use this Skill's exact npm version:
|
|
11
11
|
|
|
12
12
|
```bash
|
|
13
|
-
pnpm dlx openxiangda@2.0.0-alpha.
|
|
14
|
-
pnpm dlx openxiangda@2.0.0-alpha.
|
|
13
|
+
pnpm dlx openxiangda@2.0.0-alpha.45 login --base-url <platform>
|
|
14
|
+
pnpm dlx openxiangda@2.0.0-alpha.45 create <directory>
|
|
15
15
|
```
|
|
16
16
|
|
|
17
17
|
Inside an application, use only its locked executable through `pnpm openxiangda`. Never invoke a bare global `openxiangda`, because that executable may belong to stable 1.x. Moving tags such as `latest` and `alpha` are forbidden. To install or refresh this same Skill from the package, run:
|
|
18
18
|
|
|
19
19
|
```bash
|
|
20
|
-
pnpm dlx openxiangda@2.0.0-alpha.
|
|
20
|
+
pnpm dlx openxiangda@2.0.0-alpha.45 skill install --force
|
|
21
21
|
```
|
|
22
22
|
|
|
23
23
|
Use this order:
|
|
@@ -84,6 +84,22 @@ itself. The audit actor remains the application event consumer with eventId,
|
|
|
84
84
|
deliveryId and subscription code as initiating source. Missing or forged event
|
|
85
85
|
proof, arbitrary recipient values and user impersonation are rejected.
|
|
86
86
|
|
|
87
|
+
The owning subscription must also declare the dependency explicitly so the
|
|
88
|
+
immutable package capability closure cannot omit Notification Hub:
|
|
89
|
+
|
|
90
|
+
```ts
|
|
91
|
+
{
|
|
92
|
+
code: 'proposal-reminder-notification',
|
|
93
|
+
eventTypes: ['proposal.reminder.requested.v1'],
|
|
94
|
+
platformAccess: {
|
|
95
|
+
notification: { mode: 'business-standard' },
|
|
96
|
+
},
|
|
97
|
+
}
|
|
98
|
+
```
|
|
99
|
+
|
|
100
|
+
Do not add this declaration to subscriptions that do not call
|
|
101
|
+
`sendFromEvent()`. Unknown access kinds and notification modes fail closed.
|
|
102
|
+
|
|
87
103
|
## Detail navigation
|
|
88
104
|
|
|
89
105
|
Use a canonical navigation target with `PLATFORM_ROUTE`, `APP_ROUTE` or allowlisted `EXTERNAL_URL`, stable route code, path/query parameters and an authenticated access requirement. Do not place environment domains, bearer tokens, cookies, identity-switching credentials or secrets in template strings.
|