openxiangda 2.0.0-alpha.5 → 2.0.0-alpha.8

package/dist/internal/web-build-verifier.d.ts

@@ -0,0 +1,8 @@
+export interface OpenXiangdaWebBuildVerification {
+    assetFiles: number;
+    totalBytes: number;
+    totalJavaScriptGzipBytes: number;
+    initialJavaScriptGzipBytes: number;
+}
+export declare function verifyOpenXiangdaWebBuild(distInput: string | URL): OpenXiangdaWebBuildVerification;
+//# sourceMappingURL=web-build-verifier.d.ts.map

package/dist/internal/web-build-verifier.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"web-build-verifier.d.ts","sourceRoot":"","sources":["../../src/internal/web-build-verifier.ts"],"names":[],"mappings":"AAWA,MAAM,WAAW,+BAA+B;IAC9C,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,wBAAwB,EAAE,MAAM,CAAC;IACjC,0BAA0B,EAAE,MAAM,CAAC;CACpC;AAED,wBAAgB,yBAAyB,CACvC,SAAS,EAAE,MAAM,GAAG,GAAG,GACtB,+BAA+B,CA0EjC"}

package/dist/internal/web-build-verifier.js

@@ -0,0 +1,63 @@
+import { readFileSync, readdirSync, statSync } from 'node:fs';
+import { join, resolve } from 'node:path';
+import { fileURLToPath } from 'node:url';
+import { gzipSync } from 'node:zlib';
+const MAX_ASSET_FILES = 512;
+const MAX_HTML_BYTES = 100_000;
+const MAX_TOTAL_BYTES = 2_650_000;
+const MAX_TOTAL_JAVASCRIPT_GZIP_BYTES = 800_000;
+const MAX_INITIAL_JAVASCRIPT_GZIP_BYTES = 600_000;
+export function verifyOpenXiangdaWebBuild(distInput) {
+    const dist = resolve(typeof distInput === 'string' ? distInput : fileURLToPath(distInput));
+    const assets = join(dist, 'assets');
+    const entries = readdirSync(assets, { withFileTypes: true });
+    if (entries.length > MAX_ASSET_FILES) {
+        throw new Error(`WEB_ASSET_FILE_COUNT_EXCEEDED:${entries.length}>${MAX_ASSET_FILES}`);
+    }
+    if (entries.some(entry => !entry.isFile())) {
+        throw new Error('WEB_ASSET_TREE_INVALID');
+    }
+    const names = entries.map(entry => entry.name);
+    const files = names.map(name => join(assets, name));
+    const sizes = files.map(file => statSync(file).size);
+    const totalBytes = sizes.reduce((total, size) => total + size, 0);
+    if (totalBytes > MAX_TOTAL_BYTES) {
+        throw new Error(`WEB_DIST_BUDGET_EXCEEDED:${totalBytes}>${MAX_TOTAL_BYTES}`);
+    }
+    if (names.some(name => name.endsWith('.map'))) {
+        throw new Error('WEB_SOURCE_MAP_FORBIDDEN');
+    }
+    const javascript = files.filter(file => file.endsWith('.js'));
+    const totalJavaScriptGzipBytes = javascript.reduce((total, file) => total + gzipSync(readFileSync(file), { level: 9 }).byteLength, 0);
+    if (totalJavaScriptGzipBytes > MAX_TOTAL_JAVASCRIPT_GZIP_BYTES) {
+        throw new Error(`WEB_JS_GZIP_BUDGET_EXCEEDED:${totalJavaScriptGzipBytes}>${MAX_TOTAL_JAVASCRIPT_GZIP_BYTES}`);
+    }
+    const htmlPath = join(dist, 'index.html');
+    const htmlBytes = statSync(htmlPath).size;
+    if (htmlBytes > MAX_HTML_BYTES) {
+        throw new Error(`WEB_HTML_BUDGET_EXCEEDED:${htmlBytes}>${MAX_HTML_BYTES}`);
+    }
+    const html = readFileSync(htmlPath, 'utf8');
+    if (!html.includes('<div id="root"></div>')) {
+        throw new Error('WEB_ROOT_MISSING');
+    }
+    const initialNames = [
+        ...html.matchAll(/(?:src|href)="\.\/assets\/([^"]+\.js)"/g),
+    ].map(match => match[1]);
+    const initialJavaScriptGzipBytes = [...new Set(initialNames)].reduce((total, name) => {
+        if (!names.includes(name))
+            throw new Error(`WEB_INITIAL_ASSET_MISSING:${name}`);
+        return (total +
+            gzipSync(readFileSync(join(assets, name)), { level: 9 }).byteLength);
+    }, 0);
+    if (initialJavaScriptGzipBytes > MAX_INITIAL_JAVASCRIPT_GZIP_BYTES) {
+        throw new Error(`WEB_INITIAL_JS_GZIP_BUDGET_EXCEEDED:${initialJavaScriptGzipBytes}>${MAX_INITIAL_JAVASCRIPT_GZIP_BYTES}`);
+    }
+    return {
+        assetFiles: entries.length,
+        totalBytes,
+        totalJavaScriptGzipBytes,
+        initialJavaScriptGzipBytes,
+    };
+}
+//# sourceMappingURL=web-build-verifier.js.map

package/dist/internal/web-build-verifier.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"web-build-verifier.js","sourceRoot":"","sources":["../../src/internal/web-build-verifier.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAC9D,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AAErC,MAAM,eAAe,GAAG,GAAG,CAAC;AAC5B,MAAM,cAAc,GAAG,OAAO,CAAC;AAC/B,MAAM,eAAe,GAAG,SAAS,CAAC;AAClC,MAAM,+BAA+B,GAAG,OAAO,CAAC;AAChD,MAAM,iCAAiC,GAAG,OAAO,CAAC;AASlD,MAAM,UAAU,yBAAyB,CACvC,SAAuB;IAEvB,MAAM,IAAI,GAAG,OAAO,CAClB,OAAO,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,aAAa,CAAC,SAAS,CAAC,CACrE,CAAC;IACF,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IACpC,MAAM,OAAO,GAAG,WAAW,CAAC,MAAM,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;IAC7D,IAAI,OAAO,CAAC,MAAM,GAAG,eAAe,EAAE,CAAC;QACrC,MAAM,IAAI,KAAK,CACb,iCAAiC,OAAO,CAAC,MAAM,IAAI,eAAe,EAAE,CACrE,CAAC;IACJ,CAAC;IACD,IAAI,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,CAAC;QAC3C,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC;IAC5C,CAAC;IAED,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC/C,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC;IACpD,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC;IACrD,MAAM,UAAU,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,KAAK,GAAG,IAAI,EAAE,CAAC,CAAC,CAAC;IAClE,IAAI,UAAU,GAAG,eAAe,EAAE,CAAC;QACjC,MAAM,IAAI,KAAK,CACb,4BAA4B,UAAU,IAAI,eAAe,EAAE,CAC5D,CAAC;IACJ,CAAC;IACD,IAAI,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC;QAC9C,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;IAC9C,CAAC;IAED,MAAM,UAAU,GAAG,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC;IAC9D,MAAM,wBAAwB,GAAG,UAAU,CAAC,MAAM,CAChD,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,CACd,KAAK,GAAG,QAAQ,CAAC,YAAY,CAAC,IAAI,CAAC,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC,UAAU,EAC/D,CAAC,CACF,CAAC;IACF,IAAI,wBAAwB,GAAG,+BAA+B,EAAE,CAAC;QAC/D,MAAM,IAAI,KAAK,CACb,+BAA+B,wBAAwB,IAAI,+BAA+B,EAAE,CAC7F,CAAC;IACJ,CAAC;IAED,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;IAC1C,MAAM,SAAS,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC;IAC1C,IAAI,SAAS,GAAG,cAAc,EAAE,CAAC;QAC/B,MAAM,IAAI,KAAK,CAAC,4BAA4B,SAAS,IAAI,cAAc,EAAE,CAAC,CAAC;IAC7E,CAAC;IACD,MAAM,IAAI,GAAG,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IAC5C,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,uBAAuB,CAAC,EAAE,CAAC;QAC5C,MAAM,IAAI,KAAK,CAAC,kBAAkB,CAAC,CAAC;IACtC,CAAC;IACD,MAAM,YAAY,GAAG;QACnB,GAAG,IAAI,CAAC,QAAQ,CAAC,yCAAyC,CAAC;KAC5D,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC,CAAC;IAC1B,MAAM,0BAA0B,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,MAAM,CAClE,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE;QACd,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,6BAA6B,IAAI,EAAE,CAAC,CAAC;QAChF,OAAO,CACL,KAAK;YACL,QAAQ,CAAC,YAAY,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC,UAAU,CACpE,CAAC;IACJ,CAAC,EACD,CAAC,CACF,CAAC;IACF,IAAI,0BAA0B,GAAG,iCAAiC,EAAE,CAAC;QACnE,MAAM,IAAI,KAAK,CACb,uCAAuC,0BAA0B,IAAI,iCAAiC,EAAE,CACzG,CAAC;IACJ,CAAC;IAED,OAAO;QACL,UAAU,EAAE,OAAO,CAAC,MAAM;QAC1B,UAAU;QACV,wBAAwB;QACxB,0BAA0B;KAC3B,CAAC;AACJ,CAAC"}

package/dist/testing.d.ts

@@ -1,4 +1,5 @@
 export * from 'openxiangda-devkit-core/testing';
 export { OpenXiangdaApplicationServices, verifySealedAppPackage, } from 'openxiangda-devkit-core';
 export { sha256Digest } from 'openxiangda-contracts';
+export { verifyOpenXiangdaWebBuild, type OpenXiangdaWebBuildVerification, } from './internal/web-build-verifier.js';
 //# sourceMappingURL=testing.d.ts.map

package/dist/testing.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"testing.d.ts","sourceRoot":"","sources":["../src/testing.ts"],"names":[],"mappings":"AAAA,cAAc,iCAAiC,CAAC;AAChD,OAAO,EACL,8BAA8B,EAC9B,sBAAsB,GACvB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC"}
+{"version":3,"file":"testing.d.ts","sourceRoot":"","sources":["../src/testing.ts"],"names":[],"mappings":"AAAA,cAAc,iCAAiC,CAAC;AAChD,OAAO,EACL,8BAA8B,EAC9B,sBAAsB,GACvB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AACrD,OAAO,EACL,yBAAyB,EACzB,KAAK,+BAA+B,GACrC,MAAM,kCAAkC,CAAC"}

package/dist/testing.js

@@ -1,4 +1,5 @@
 export * from 'openxiangda-devkit-core/testing';
 export { OpenXiangdaApplicationServices, verifySealedAppPackage, } from 'openxiangda-devkit-core';
 export { sha256Digest } from 'openxiangda-contracts';
+export { verifyOpenXiangdaWebBuild, } from './internal/web-build-verifier.js';
 //# sourceMappingURL=testing.js.map

package/dist/testing.js.map

@@ -1 +1 @@
-{"version":3,"file":"testing.js","sourceRoot":"","sources":["../src/testing.ts"],"names":[],"mappings":"AAAA,cAAc,iCAAiC,CAAC;AAChD,OAAO,EACL,8BAA8B,EAC9B,sBAAsB,GACvB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC"}
+{"version":3,"file":"testing.js","sourceRoot":"","sources":["../src/testing.ts"],"names":[],"mappings":"AAAA,cAAc,iCAAiC,CAAC;AAChD,OAAO,EACL,8BAA8B,EAC9B,sBAAsB,GACvB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AACrD,OAAO,EACL,yBAAyB,GAE1B,MAAM,kCAAkC,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "openxiangda",
-  "version": "2.0.0-alpha.5",
+  "version": "2.0.0-alpha.8",
   "description": "Unified OpenXiangda 2.0 CLI, SDK, React runtime, NestJS integration and AI skill distribution.",
   "type": "module",
   "main": "./dist/index.js",
@@ -49,7 +49,7 @@
   "dependencies": {
     "dayjs": "1.11.18",
     "docx-preview": "0.3.7",
-    "openxiangda-cli": "2.0.0-alpha.93",
+    "openxiangda-cli": "2.0.0-alpha.96",
     "openxiangda-contracts": "2.0.0-alpha.46",
     "openxiangda-devkit-core": "2.0.0-alpha.59",
     "openxiangda-mcp": "2.0.0-alpha.59",

package/skills/openxiangda-v2/SKILL.md

@@ -10,14 +10,14 @@ Treat requirement discovery, architecture, authorization, development, testing a
 Before a workspace exists, use this Skill's exact npm version:
 
 ```bash
-pnpm dlx openxiangda@2.0.0-alpha.5 login --base-url <platform>
-pnpm dlx openxiangda@2.0.0-alpha.5 create <directory>
+pnpm dlx openxiangda@2.0.0-alpha.8 login --base-url <platform>
+pnpm dlx openxiangda@2.0.0-alpha.8 create <directory>
 ```
 
 Inside an application, use only its locked executable through `pnpm openxiangda`. Never invoke a bare global `openxiangda`, because that executable may belong to stable 1.x. Moving tags such as `latest` and `alpha` are forbidden. To install or refresh this same Skill from the package, run:
 
 ```bash
-pnpm dlx openxiangda@2.0.0-alpha.5 skill install --force
+pnpm dlx openxiangda@2.0.0-alpha.8 skill install --force
 ```
 
 Use this order: