openxiangda 2.66.0 → 2.66.2

package/dist/nest.d.ts

@@ -4,7 +4,7 @@
  * Applications receive only current-user-union, Perspective read projection,
  * application-principal, Data API, runtime, event and bounded operation APIs.
  */
-export { bootstrapOpenXiangdaApplication, OpenXiangdaModule, OpenXiangdaAuthzGuard, RequireCapability, OpenXiangdaOperation, CurrentPrincipal, CurrentUser, CurrentPerspective, currentUserFromVerifiedContext, currentUserFromPrincipal, CurrentApplicationPrincipal, OpenXiangdaDataApiService, OpenXiangdaBusinessDataApiService, OpenXiangdaBusinessDirectoryService, OpenXiangdaBusinessProcessService, OpenXiangdaWorkflowService, WorkflowAssigneeProvider, OpenXiangdaBusinessNotificationService, OpenXiangdaNotificationService, OpenXiangdaTodoService, OpenXiangdaLoggerService, OpenXiangdaPlatformError, OpenXiangdaApplicationDataApiService, OpenXiangdaApplicationCredentials, OpenXiangdaRuntimeLeaseService, OpenXiangdaRuntimeSecrets, OpenXiangdaStandardOperations, OpenXiangdaEventContext, OpenXiangdaEventHandler, OpenXiangdaManagedCommandHandler, OpenXiangdaEventRegistry, OpenXiangdaEventRetryableError, OpenXiangdaEventDeterministicError, eventSigningSecretsFromEnvironment, assertValidTimeInterval, databaseNowAssertion, idempotentTransaction, createDataTransaction, diagnoseDataTransaction, DataTransactionBuildError, bindOpenXiangdaResources, } from 'openxiangda-nest';
+export { bootstrapOpenXiangdaApplication, OpenXiangdaModule, OpenXiangdaAuthzGuard, RequireCapability, OpenXiangdaOperation, CurrentPrincipal, CurrentUser, CurrentPerspective, currentUserFromVerifiedContext, currentUserFromPrincipal, CurrentApplicationPrincipal, OpenXiangdaDataApiService, OpenXiangdaBusinessDataApiService, OpenXiangdaBusinessDirectoryService, OpenXiangdaBusinessProcessService, OpenXiangdaWorkflowService, WorkflowAssigneeProvider, OpenXiangdaBusinessNotificationService, OpenXiangdaNotificationService, OpenXiangdaTodoService, OpenXiangdaLoggerService, OpenXiangdaPlatformError, OpenXiangdaApplicationDataApiService, OpenXiangdaApplicationCredentials, OpenXiangdaRuntimeLeaseService, OpenXiangdaRuntimeSecrets, OpenXiangdaStandardOperations, OpenXiangdaEventContext, OpenXiangdaEventHandler, OpenXiangdaManagedCommandHandler, OpenXiangdaEventRegistry, OpenXiangdaEventRetryableError, OpenXiangdaEventDeterministicError, eventSigningSecretsFromEnvironment, assertValidTimeInterval, databaseNowAssertion, idempotentTransaction, createDataTransaction, diagnoseDataTransaction, DataTransactionBuildError, bindOpenXiangdaResources, OpenXiangdaEventWorkerEffectService, } from 'openxiangda-nest';
 export type { AssignmentCandidatePage, AssignmentCandidateQuery, OpenXiangdaApplicationBootstrapOptions, OpenXiangdaModuleOptions, OpenXiangdaApplicationModuleOptions, OpenXiangdaOAuthClientOptions, OpenXiangdaFetch, OpenXiangdaLogFields, OpenXiangdaPlatformRequestDiagnostic, OpenXiangdaCurrentUser, OpenXiangdaServicePrincipal, OpenXiangdaConnectedDevelopmentStatus, OpenXiangdaDomainEventEmitInput, OpenXiangdaDomainEventEmitResult, OpenXiangdaBusinessActionContext, OpenXiangdaBusinessNotificationInput, OpenXiangdaBusinessProcessCommitInput, OpenXiangdaBusinessProcessCommandWithDataInput, WorkflowAssigneeProviderHandler, OpenXiangdaEventBusinessNotificationInput, OpenXiangdaRuntimeLeaseState, OpenXiangdaEventHandlerContext, OpenXiangdaManagedCommandContext, OpenXiangdaManagedCommandPlanner, OpenXiangdaEventHandlerDeclaration, OpenXiangdaEventConsumer, OpenXiangdaWorkflowEffectConsumer, TimeInterval, MeetingReservationOperationInput, CourseSelectionOperationInput, VisitorReservationOperationInput, OpenXiangdaResourceTypes, OpenXiangdaReadableRecord, OpenXiangdaResourceQuery, OpenXiangdaResourceRecord, OpenXiangdaBoundResource, } from 'openxiangda-nest';
 export { OPENXIANGDA_NOTIFICATION_BUSINESS_SEND_V2, OPENXIANGDA_NOTIFICATION_EVENT_SEND_V2, } from 'openxiangda-contracts';
 export { optionSnapshot, userSnapshot, departmentSnapshot, resourceSnapshot, isIdempotencyConflict, } from 'openxiangda-nest';

package/dist/nest.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"nest.d.ts","sourceRoot":"","sources":["../src/nest.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,EACL,+BAA+B,EAC/B,iBAAiB,EACjB,qBAAqB,EACrB,iBAAiB,EACjB,oBAAoB,EACpB,gBAAgB,EAChB,WAAW,EACX,kBAAkB,EAClB,8BAA8B,EAC9B,wBAAwB,EACxB,2BAA2B,EAC3B,yBAAyB,EACzB,iCAAiC,EACjC,mCAAmC,EACnC,iCAAiC,EACjC,0BAA0B,EAC1B,wBAAwB,EACxB,sCAAsC,EACtC,8BAA8B,EAC9B,sBAAsB,EACtB,wBAAwB,EACxB,wBAAwB,EACxB,oCAAoC,EACpC,iCAAiC,EACjC,8BAA8B,EAC9B,yBAAyB,EACzB,6BAA6B,EAC7B,uBAAuB,EACvB,uBAAuB,EACvB,gCAAgC,EAChC,wBAAwB,EACxB,8BAA8B,EAC9B,kCAAkC,EAClC,kCAAkC,EAClC,uBAAuB,EACvB,oBAAoB,EACpB,qBAAqB,EACrB,qBAAqB,EACrB,uBAAuB,EACvB,yBAAyB,EACzB,wBAAwB,GACzB,MAAM,kBAAkB,CAAC;AAE1B,YAAY,EACV,uBAAuB,EACvB,wBAAwB,EACxB,sCAAsC,EACtC,wBAAwB,EACxB,mCAAmC,EACnC,6BAA6B,EAC7B,gBAAgB,EAChB,oBAAoB,EACpB,oCAAoC,EACpC,sBAAsB,EACtB,2BAA2B,EAC3B,qCAAqC,EACrC,+BAA+B,EAC/B,gCAAgC,EAChC,gCAAgC,EAChC,oCAAoC,EACpC,qCAAqC,EACrC,8CAA8C,EAC9C,+BAA+B,EAC/B,yCAAyC,EACzC,4BAA4B,EAC5B,8BAA8B,EAC9B,gCAAgC,EAChC,gCAAgC,EAChC,kCAAkC,EAClC,wBAAwB,EACxB,iCAAiC,EACjC,YAAY,EACZ,gCAAgC,EAChC,6BAA6B,EAC7B,gCAAgC,EAChC,wBAAwB,EACxB,yBAAyB,EACzB,wBAAwB,EACxB,yBAAyB,EACzB,wBAAwB,GACzB,MAAM,kBAAkB,CAAC;AAE1B,OAAO,EACL,yCAAyC,EACzC,sCAAsC,GACvC,MAAM,uBAAuB,CAAC;AAE/B,OAAO,EACL,cAAc,EACd,YAAY,EACZ,kBAAkB,EAClB,gBAAgB,EAChB,qBAAqB,GACtB,MAAM,kBAAkB,CAAC;AAE1B,YAAY,EAAC,kBAAkB,EAAE,uBAAuB,EAAE,uBAAuB,EAAE,0BAA0B,EAAE,2BAA2B,EAAC,MAAM,uBAAuB,CAAC"}
+{"version":3,"file":"nest.d.ts","sourceRoot":"","sources":["../src/nest.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,EACL,+BAA+B,EAC/B,iBAAiB,EACjB,qBAAqB,EACrB,iBAAiB,EACjB,oBAAoB,EACpB,gBAAgB,EAChB,WAAW,EACX,kBAAkB,EAClB,8BAA8B,EAC9B,wBAAwB,EACxB,2BAA2B,EAC3B,yBAAyB,EACzB,iCAAiC,EACjC,mCAAmC,EACnC,iCAAiC,EACjC,0BAA0B,EAC1B,wBAAwB,EACxB,sCAAsC,EACtC,8BAA8B,EAC9B,sBAAsB,EACtB,wBAAwB,EACxB,wBAAwB,EACxB,oCAAoC,EACpC,iCAAiC,EACjC,8BAA8B,EAC9B,yBAAyB,EACzB,6BAA6B,EAC7B,uBAAuB,EACvB,uBAAuB,EACvB,gCAAgC,EAChC,wBAAwB,EACxB,8BAA8B,EAC9B,kCAAkC,EAClC,kCAAkC,EAClC,uBAAuB,EACvB,oBAAoB,EACpB,qBAAqB,EACrB,qBAAqB,EACrB,uBAAuB,EACvB,yBAAyB,EACzB,wBAAwB,EACxB,mCAAmC,GACpC,MAAM,kBAAkB,CAAC;AAE1B,YAAY,EACV,uBAAuB,EACvB,wBAAwB,EACxB,sCAAsC,EACtC,wBAAwB,EACxB,mCAAmC,EACnC,6BAA6B,EAC7B,gBAAgB,EAChB,oBAAoB,EACpB,oCAAoC,EACpC,sBAAsB,EACtB,2BAA2B,EAC3B,qCAAqC,EACrC,+BAA+B,EAC/B,gCAAgC,EAChC,gCAAgC,EAChC,oCAAoC,EACpC,qCAAqC,EACrC,8CAA8C,EAC9C,+BAA+B,EAC/B,yCAAyC,EACzC,4BAA4B,EAC5B,8BAA8B,EAC9B,gCAAgC,EAChC,gCAAgC,EAChC,kCAAkC,EAClC,wBAAwB,EACxB,iCAAiC,EACjC,YAAY,EACZ,gCAAgC,EAChC,6BAA6B,EAC7B,gCAAgC,EAChC,wBAAwB,EACxB,yBAAyB,EACzB,wBAAwB,EACxB,yBAAyB,EACzB,wBAAwB,GACzB,MAAM,kBAAkB,CAAC;AAE1B,OAAO,EACL,yCAAyC,EACzC,sCAAsC,GACvC,MAAM,uBAAuB,CAAC;AAE/B,OAAO,EACL,cAAc,EACd,YAAY,EACZ,kBAAkB,EAClB,gBAAgB,EAChB,qBAAqB,GACtB,MAAM,kBAAkB,CAAC;AAE1B,YAAY,EAAC,kBAAkB,EAAE,uBAAuB,EAAE,uBAAuB,EAAE,0BAA0B,EAAE,2BAA2B,EAAC,MAAM,uBAAuB,CAAC"}

package/dist/nest.js

@@ -4,7 +4,7 @@
  * Applications receive only current-user-union, Perspective read projection,
  * application-principal, Data API, runtime, event and bounded operation APIs.
  */
-export { bootstrapOpenXiangdaApplication, OpenXiangdaModule, OpenXiangdaAuthzGuard, RequireCapability, OpenXiangdaOperation, CurrentPrincipal, CurrentUser, CurrentPerspective, currentUserFromVerifiedContext, currentUserFromPrincipal, CurrentApplicationPrincipal, OpenXiangdaDataApiService, OpenXiangdaBusinessDataApiService, OpenXiangdaBusinessDirectoryService, OpenXiangdaBusinessProcessService, OpenXiangdaWorkflowService, WorkflowAssigneeProvider, OpenXiangdaBusinessNotificationService, OpenXiangdaNotificationService, OpenXiangdaTodoService, OpenXiangdaLoggerService, OpenXiangdaPlatformError, OpenXiangdaApplicationDataApiService, OpenXiangdaApplicationCredentials, OpenXiangdaRuntimeLeaseService, OpenXiangdaRuntimeSecrets, OpenXiangdaStandardOperations, OpenXiangdaEventContext, OpenXiangdaEventHandler, OpenXiangdaManagedCommandHandler, OpenXiangdaEventRegistry, OpenXiangdaEventRetryableError, OpenXiangdaEventDeterministicError, eventSigningSecretsFromEnvironment, assertValidTimeInterval, databaseNowAssertion, idempotentTransaction, createDataTransaction, diagnoseDataTransaction, DataTransactionBuildError, bindOpenXiangdaResources, } from 'openxiangda-nest';
+export { bootstrapOpenXiangdaApplication, OpenXiangdaModule, OpenXiangdaAuthzGuard, RequireCapability, OpenXiangdaOperation, CurrentPrincipal, CurrentUser, CurrentPerspective, currentUserFromVerifiedContext, currentUserFromPrincipal, CurrentApplicationPrincipal, OpenXiangdaDataApiService, OpenXiangdaBusinessDataApiService, OpenXiangdaBusinessDirectoryService, OpenXiangdaBusinessProcessService, OpenXiangdaWorkflowService, WorkflowAssigneeProvider, OpenXiangdaBusinessNotificationService, OpenXiangdaNotificationService, OpenXiangdaTodoService, OpenXiangdaLoggerService, OpenXiangdaPlatformError, OpenXiangdaApplicationDataApiService, OpenXiangdaApplicationCredentials, OpenXiangdaRuntimeLeaseService, OpenXiangdaRuntimeSecrets, OpenXiangdaStandardOperations, OpenXiangdaEventContext, OpenXiangdaEventHandler, OpenXiangdaManagedCommandHandler, OpenXiangdaEventRegistry, OpenXiangdaEventRetryableError, OpenXiangdaEventDeterministicError, eventSigningSecretsFromEnvironment, assertValidTimeInterval, databaseNowAssertion, idempotentTransaction, createDataTransaction, diagnoseDataTransaction, DataTransactionBuildError, bindOpenXiangdaResources, OpenXiangdaEventWorkerEffectService, } from 'openxiangda-nest';
 export { OPENXIANGDA_NOTIFICATION_BUSINESS_SEND_V2, OPENXIANGDA_NOTIFICATION_EVENT_SEND_V2, } from 'openxiangda-contracts';
 export { optionSnapshot, userSnapshot, departmentSnapshot, resourceSnapshot, isIdempotencyConflict, } from 'openxiangda-nest';
 //# sourceMappingURL=nest.js.map

package/dist/nest.js.map

@@ -1 +1 @@
-{"version":3,"file":"nest.js","sourceRoot":"","sources":["../src/nest.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,EACL,+BAA+B,EAC/B,iBAAiB,EACjB,qBAAqB,EACrB,iBAAiB,EACjB,oBAAoB,EACpB,gBAAgB,EAChB,WAAW,EACX,kBAAkB,EAClB,8BAA8B,EAC9B,wBAAwB,EACxB,2BAA2B,EAC3B,yBAAyB,EACzB,iCAAiC,EACjC,mCAAmC,EACnC,iCAAiC,EACjC,0BAA0B,EAC1B,wBAAwB,EACxB,sCAAsC,EACtC,8BAA8B,EAC9B,sBAAsB,EACtB,wBAAwB,EACxB,wBAAwB,EACxB,oCAAoC,EACpC,iCAAiC,EACjC,8BAA8B,EAC9B,yBAAyB,EACzB,6BAA6B,EAC7B,uBAAuB,EACvB,uBAAuB,EACvB,gCAAgC,EAChC,wBAAwB,EACxB,8BAA8B,EAC9B,kCAAkC,EAClC,kCAAkC,EAClC,uBAAuB,EACvB,oBAAoB,EACpB,qBAAqB,EACrB,qBAAqB,EACrB,uBAAuB,EACvB,yBAAyB,EACzB,wBAAwB,GACzB,MAAM,kBAAkB,CAAC;AAyC1B,OAAO,EACL,yCAAyC,EACzC,sCAAsC,GACvC,MAAM,uBAAuB,CAAC;AAE/B,OAAO,EACL,cAAc,EACd,YAAY,EACZ,kBAAkB,EAClB,gBAAgB,EAChB,qBAAqB,GACtB,MAAM,kBAAkB,CAAC"}
+{"version":3,"file":"nest.js","sourceRoot":"","sources":["../src/nest.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,EACL,+BAA+B,EAC/B,iBAAiB,EACjB,qBAAqB,EACrB,iBAAiB,EACjB,oBAAoB,EACpB,gBAAgB,EAChB,WAAW,EACX,kBAAkB,EAClB,8BAA8B,EAC9B,wBAAwB,EACxB,2BAA2B,EAC3B,yBAAyB,EACzB,iCAAiC,EACjC,mCAAmC,EACnC,iCAAiC,EACjC,0BAA0B,EAC1B,wBAAwB,EACxB,sCAAsC,EACtC,8BAA8B,EAC9B,sBAAsB,EACtB,wBAAwB,EACxB,wBAAwB,EACxB,oCAAoC,EACpC,iCAAiC,EACjC,8BAA8B,EAC9B,yBAAyB,EACzB,6BAA6B,EAC7B,uBAAuB,EACvB,uBAAuB,EACvB,gCAAgC,EAChC,wBAAwB,EACxB,8BAA8B,EAC9B,kCAAkC,EAClC,kCAAkC,EAClC,uBAAuB,EACvB,oBAAoB,EACpB,qBAAqB,EACrB,qBAAqB,EACrB,uBAAuB,EACvB,yBAAyB,EACzB,wBAAwB,EACxB,mCAAmC,GACpC,MAAM,kBAAkB,CAAC;AAyC1B,OAAO,EACL,yCAAyC,EACzC,sCAAsC,GACvC,MAAM,uBAAuB,CAAC;AAE/B,OAAO,EACL,cAAc,EACd,YAAY,EACZ,kBAAkB,EAClB,gBAAgB,EAChB,qBAAqB,GACtB,MAAM,kBAAkB,CAAC"}

package/documentation/AGENTS.md

@@ -15,7 +15,7 @@
 - 无账号表单或外部公开数据读取都读取 `docs public-access`：使用 `frontend.publicAccess` 和专用客户端；提交策略声明 `create` 时必须启用 `draft`，只读公开目录使用 `public.list`/`public.read` 与 `publicRecordFields`，附件/图片/富文本按平台托管 URL 读取，子表必须声明 `publicSubtableFields`，不创建 guest 角色、不传 draft id、不调用普通 Data API。标准审批、通知和后端均按需启用。
 - 日常使用 dev 和聚焦测试。只验证时使用 check；授权部署时直接 deploy，它已包含检查、测试和构建。生产必须指定成功测试运行并复用同一版本。
 - deploy 默认持续反馈并跟踪平台结果；观察中断用 status <运行ID> --watch 继续，保留原运行，不重新构建。平台部署成功后仍需真实角色业务验收。
-- 开发开始先同步远端默认主分支；同一工作区只有一个写者。发布前将本轮源码、生成契约与记录合入并推送主分支，从干净且同步的主分支冻结候选；任务分支已推送不等于已合入主线。不要覆盖其他会话改动或自动合并所有分支。
+- 开发开始按项目约定同步绑定仓库，同一工作区只有一个写者；完成后提交推送本轮源码、生成契约与记录。应用 TEST 发布使用当前工作区，允许任务分支和未提交修改，source push 或主线整合不作为 TEST 前置。生产晋级复用成功测试版本，并核对原源码主线包含和真实验收；按 docs delivery 执行。不要覆盖其他会话改动或自动合并所有分支。
 - 默认读取 AppSpec 当前规格、设计索引、活动变更和阶段缺口。新应用先用自然语言对话主动发现模块，完成本期 PRD、旅程、逐页交互、视觉/原型、权限与架构设计及实际确认，形成内容摘要绑定的评审基线后再制定实施计划和实现业务；参见 docs product-design 和 docs interaction-patterns。既有应用仅修订受影响设计，不把 AI 建议写成用户确认。总纲保存长期规则，本轮变更关联需求、任务、源码与 AC 验收；测试发布前完成设计与计划，生产晋级前保存绑定原测试运行及包摘要的实际验收报告。更新当前规则、验证与发布结果和交接后归档；不得编造确认或通过结果。
 - 根据变化风险记录业务意图。无行为变化引用已有记录；已有授权和已确认意图不重复向用户请求机械确认。真实角色和浏览器验收与本地测试分别记录。
 - 失败保留错误码、指针和原候选；查询平台状态后使用允许的恢复操作，不自动重放未知结果。

package/documentation/getting-started.md

@@ -68,10 +68,10 @@ MCP 服务随项目根包一起安装，AI 客户端的 stdio 连接仍需配置
 以下命令的版本占位符由随包资料替换为该根包的精确版本。网站源码阅读者应先确认要使用的发行版本。
 
 ```bash
-pnpm dlx openxiangda@2.66.0 skill install --force
-pnpm dlx openxiangda@2.66.0 auth status --base-url <平台地址> --json
-pnpm dlx openxiangda@2.66.0 login --cwd my-app --base-url https://platform.example.com
-pnpm dlx openxiangda@2.66.0 create my-app --base-url https://platform.example.com
+pnpm dlx openxiangda@2.66.2 skill install --force
+pnpm dlx openxiangda@2.66.2 auth status --base-url <平台地址> --json
+pnpm dlx openxiangda@2.66.2 login --cwd my-app --base-url https://platform.example.com
+pnpm dlx openxiangda@2.66.2 create my-app --base-url https://platform.example.com
 cd my-app
 pnpm openxiangda context --json
 pnpm openxiangda dev
@@ -180,7 +180,8 @@ pnpm openxiangda source push -m "完成本轮应用开发"
 | 换电脑或初始化中断 | 在应用目录执行 `pnpm openxiangda source setup`；已有提交及未提交修改会保留 |
 | 从个人远端迁入 | 明确迁入后运行 `source setup --import`，原远端保留为 `external-source` |
 | 本轮修改完成 | 检查差异后运行 `source push -m "AppSpec: <本轮变更ID> 变更说明"`；多个任务共享目录时先精确提交本轮文件，再不带 `-m` 推送 |
-| 准备部署 | 先把本轮提交合入并推送远端默认分支，再从干净且同步的主分支执行 `deploy` |
+| 测试部署 | 当前工作区直接执行 `deploy`，允许分支及未提交修改；提交推送不作为 TEST 前置 |
+| 生产晋级 | 按 `docs delivery` 复用成功测试运行；核对原源码主线包含和绑定原版本的实际验收 |
 
 新仓库默认使用 `main`；导入时，尚无默认分支的空仓库会采用当前分支（例如 `master`）。
 已有远端默认分支不会因在任务分支运行 setup 而改变。源码操作使用 CLI/终端；
@@ -194,7 +195,7 @@ MCP 的 `docs_read` 可以读取本说明，当前没有独立的源码操作 MC
 | 403 / 应用管理权限不足 | 核对当前平台账号及应用管理员资格；由已有应用管理员添加权限 |
 | `APPLICATION_SOURCE_PROVIDER_UNAVAILABLE` / `APPLICATION_SOURCE_PROVIDER_FAILED` | 保留原应用和目录，待 Git 服务恢复后重试同一操作 |
 | 推送被拒绝或主线已前进 | 先 fetch 并查看差异，按项目规则合并解决冲突后重试，不强推覆盖 |
-| `APPLICATION_SOURCE_COMMIT_NOT_PUSHED` | 在绑定仓库推送原提交，核对 source status 和远端 SHA 后重试部署 |
+| `APPLICATION_SOURCE_COMMIT_NOT_PUSHED` | 核对操作和平台版本；当前 TEST 发布不要求先推送。生产晋级核对绑定原测试版本的源码主线事实，保留原版本并按交付说明处理 |
 
 应用创建人和新增应用管理员拥有对应仓库管理权限，不需要另行维护 Git 角色。
 本期不自动同步权限撤销或删除。不要向应用开发者索要 Forgejo 平台管理员 Token；
@@ -205,9 +206,9 @@ MCP 的 `docs_read` 可以读取本说明，当前没有独立的源码操作 MC
 无需本地工作区，使用本 Skill 随包精确版本或已安装的对应 CLI：
 
 ```bash
-pnpm dlx openxiangda@2.66.0 auth status --base-url <平台> --json
-pnpm dlx openxiangda@2.66.0 source resolve <仓库URL> --base-url <平台> --json
-pnpm dlx openxiangda@2.66.0 source clone <仓库URL> <新目录> --base-url <平台> --json
+pnpm dlx openxiangda@2.66.2 auth status --base-url <平台> --json
+pnpm dlx openxiangda@2.66.2 source resolve <仓库URL> --base-url <平台> --json
+pnpm dlx openxiangda@2.66.2 source clone <仓库URL> <新目录> --base-url <平台> --json
 ```
 
 登录缺失或站点不匹配时，先按该平台执行 login。resolve 根据平台已经登记的绑定返回

package/documentation/manifest.json

@@ -1,12 +1,12 @@
 {
   "schemaVersion": "openxiangda.documentation/v1",
-  "version": "2.66.0",
+  "version": "2.66.2",
   "topics": [
     {
       "id": "getting-started",
       "title": "安装与开始开发",
       "file": "getting-started.md",
-      "sha256": "01a83324fbd3e7aed970244f3df70e73c721d52df927b4a948562dfad7ea5fd7"
+      "sha256": "bbdfdd1435d655230451a63c5fcfed10d1937e53d7f87c0ff02cc92d748d754a"
     },
     {
       "id": "product-design",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "openxiangda",
-  "version": "2.66.0",
+  "version": "2.66.2",
   "description": "OpenXiangda 2.0 的统一命令、应用 SDK、MCP 与中文 AI 技能资料。",
   "type": "module",
   "main": "./dist/index.js",
@@ -91,13 +91,13 @@
     "dayjs": "1.11.18",
     "docx-preview": "0.3.7",
     "elkjs": "0.12.0",
-    "openxiangda-cli": "2.10.0",
-    "openxiangda-contracts": "2.83.0",
-    "openxiangda-devkit-core": "2.63.0",
+    "openxiangda-cli": "2.10.2",
+    "openxiangda-contracts": "2.84.0",
+    "openxiangda-devkit-core": "2.63.1",
     "openxiangda-legacy": "npm:openxiangda@1.0.269",
-    "openxiangda-mcp": "2.2.5",
-    "openxiangda-nest": "2.19.0",
-    "openxiangda-skill-kit": "2.3.106",
+    "openxiangda-mcp": "2.2.6",
+    "openxiangda-nest": "2.19.1",
+    "openxiangda-skill-kit": "2.3.108",
     "xlsx": "https://github.com/1377385356/openxiangda/releases/download/vendor-mirror/xlsx-0.20.3.tgz"
   },
   "peerDependencies": {
@@ -163,15 +163,15 @@
   },
   "openxiangdaRelease": {
     "schemaVersion": "openxiangda.release-notes/v1",
-    "version": "2.66.0",
+    "version": "2.66.2",
     "status": "reviewed",
-    "title": "受限事件后台事务能力",
-    "summary": "复用平台事件投递租约及持久回执，支持定时消费者以显式资源与字段授权执行 Native 事务。",
+    "title": "工具链事实契约兼容修复",
+    "summary": "保持现有 worker-effect 能力，并修复工作区工具链事实的公开契约。",
     "newFeatures": [
       "事件消费者支持受限查询、冻结事务、原键提交与回执恢复；平台统一执行并验证事件租约。"
     ],
     "fixes": [
-      "迟到消费者只能释放自身租约，不能覆盖新消费者处理权。"
+      "允许工作区上下文返回已安装工具链事实。"
     ],
     "affectedUsers": [
       "需要定时业务事务的 OpenXiangda V2 应用开发者与平台维护者。"
@@ -187,8 +187,8 @@
       "pnpm": "10.15.1"
     },
     "issues": [],
-    "sha256": "48c557ed1f5420f31b352721b05fc769d2f728c84102da0705eca9553844532a",
-    "url": "https://github.com/1377385356/openxiangda/releases/tag/v2.66.0"
+    "sha256": "f597de89ed6ca7b7270427f35e2d9078576f1ee3ec06f961cd09b65e5298ebb8",
+    "url": "https://github.com/1377385356/openxiangda/releases/tag/v2.66.2"
   },
   "scripts": {
     "build": "node ../../scripts/prune-package-dist.mjs && tsc -p tsconfig.json && node scripts/copy-assets.mjs",

package/releases/{2.66.0.json → 2.66.2.json}

@@ -1,14 +1,14 @@
 {
   "schemaVersion": "openxiangda.release-notes/v1",
-  "version": "2.66.0",
+  "version": "2.66.2",
   "status": "reviewed",
-  "title": "受限事件后台事务能力",
-  "summary": "复用平台事件投递租约及持久回执，支持定时消费者以显式资源与字段授权执行 Native 事务。",
+  "title": "工具链事实契约兼容修复",
+  "summary": "保持现有 worker-effect 能力，并修复工作区工具链事实的公开契约。",
   "newFeatures": [
     "事件消费者支持受限查询、冻结事务、原键提交与回执恢复；平台统一执行并验证事件租约。"
   ],
   "fixes": [
-    "迟到消费者只能释放自身租约，不能覆盖新消费者处理权。"
+    "允许工作区上下文返回已安装工具链事实。"
   ],
   "affectedUsers": [
     "需要定时业务事务的 OpenXiangda V2 应用开发者与平台维护者。"
@@ -24,6 +24,6 @@
     "pnpm": "10.15.1"
   },
   "issues": [],
-  "sha256": "48c557ed1f5420f31b352721b05fc769d2f728c84102da0705eca9553844532a",
-  "url": "https://github.com/1377385356/openxiangda/releases/tag/v2.66.0"
+  "sha256": "f597de89ed6ca7b7270427f35e2d9078576f1ee3ec06f961cd09b65e5298ebb8",
+  "url": "https://github.com/1377385356/openxiangda/releases/tag/v2.66.2"
 }

package/skills/manifest.json

@@ -4,7 +4,7 @@
     {
       "name": "openxiangda-v2",
       "description": "使用 OpenXiangda 2.0 从模糊业务想法、已有资料或具体变更出发，通过对话发现模块、完成详细产品设计，由当前 AI Agent 按需用 Image 2.5 等图片能力形成视觉参考，直接实现真实页面并在浏览器修正，再检查和交付应用；维护 1.x 应用时使用对应的 1.x 技能。",
-      "sha256": "6cc2714e0e6636736da5b2fc822613d1c41b98e7609f9f449a92d3dafe2afd30"
+      "sha256": "bcb6d93ae6a05e79cd9c5ff2bcdd05784b6a919a6dc2c9ec4103d3323d2daf7f"
     }
   ]
 }

package/skills/openxiangda-v2/SKILL.md

@@ -40,10 +40,10 @@ AI 接到新应用、页面或改版任务时，在同一个 OpenXiangda 工作
 未创建工作区时使用本 Skill 随根包发布的精确版本：
 
 ```bash
-pnpm dlx openxiangda@2.66.0 auth status --cwd <应用目录> --base-url <平台地址> --json
-pnpm dlx openxiangda@2.66.0 login --cwd <应用目录> --base-url <平台地址>
-pnpm dlx openxiangda@2.66.0 create <应用目录> --base-url <同一平台地址>
-pnpm dlx openxiangda@2.66.0 skill install --force
+pnpm dlx openxiangda@2.66.2 auth status --cwd <应用目录> --base-url <平台地址> --json
+pnpm dlx openxiangda@2.66.2 login --cwd <应用目录> --base-url <平台地址>
+pnpm dlx openxiangda@2.66.2 create <应用目录> --base-url <同一平台地址>
+pnpm dlx openxiangda@2.66.2 skill install --force
 ```
 
 创建前把产品要求的目标平台明确带入命令，不从旧登录态推断站点。已有工作区从原绑定恢复，平台不一致时先解决登录与目标，不改 link 文件跨站创建。
@@ -110,7 +110,7 @@ pnpm exec openxiangda --mcp-stdio --cwd <workspace>
 
 ## 完成与失败
 
-开发开始先同步绑定仓库的远端默认主分支。开发完成包括源码、生成契约与必要记录的提交、推送和主线整合；发布从干净且同步的主分支冻结候选。任务分支已推送不代表进入主线。同一工作区保持一个写者，不覆盖其他会话未提交内容。日常 dev/check 可验证未提交源码。
+开发开始按项目约定同步绑定仓库，完成后提交推送源码、生成契约与必要记录。同一工作区保持一个写者，不覆盖其他会话未提交内容。应用 TEST 发布使用当前工作区，允许任务分支和未提交修改，source push 或主线整合不作为 TEST 前置；生产晋级复用成功测试版本，并核对原源码的权威主线包含及真实验收。详见[交付](references/delivery.md)。
 
 平台启用源码托管时，create 自动建仓并首次推送。后续每轮开发完成使用 `pnpm openxiangda source push -m "变更说明"` 提交并推送；已有提交可省略 `-m`。新电脑或初始化中断使用 `source setup`，迁入外部仓库使用 `source setup --import` 并保留原远端。凭据只存入系统凭据管理器，不手写进 URL 或项目文件；冲突按正常 Git 合并处理，不强推覆盖。
 

package/skills/openxiangda-v2/references/getting-started.md

@@ -68,10 +68,10 @@ MCP 服务随项目根包一起安装，AI 客户端的 stdio 连接仍需配置
 以下命令的版本占位符由随包资料替换为该根包的精确版本。网站源码阅读者应先确认要使用的发行版本。
 
 ```bash
-pnpm dlx openxiangda@2.66.0 skill install --force
-pnpm dlx openxiangda@2.66.0 auth status --base-url <平台地址> --json
-pnpm dlx openxiangda@2.66.0 login --cwd my-app --base-url https://platform.example.com
-pnpm dlx openxiangda@2.66.0 create my-app --base-url https://platform.example.com
+pnpm dlx openxiangda@2.66.2 skill install --force
+pnpm dlx openxiangda@2.66.2 auth status --base-url <平台地址> --json
+pnpm dlx openxiangda@2.66.2 login --cwd my-app --base-url https://platform.example.com
+pnpm dlx openxiangda@2.66.2 create my-app --base-url https://platform.example.com
 cd my-app
 pnpm openxiangda context --json
 pnpm openxiangda dev
@@ -180,7 +180,8 @@ pnpm openxiangda source push -m "完成本轮应用开发"
 | 换电脑或初始化中断 | 在应用目录执行 `pnpm openxiangda source setup`；已有提交及未提交修改会保留 |
 | 从个人远端迁入 | 明确迁入后运行 `source setup --import`，原远端保留为 `external-source` |
 | 本轮修改完成 | 检查差异后运行 `source push -m "AppSpec: <本轮变更ID> 变更说明"`；多个任务共享目录时先精确提交本轮文件，再不带 `-m` 推送 |
-| 准备部署 | 先把本轮提交合入并推送远端默认分支，再从干净且同步的主分支执行 `deploy` |
+| 测试部署 | 当前工作区直接执行 `deploy`，允许分支及未提交修改；提交推送不作为 TEST 前置 |
+| 生产晋级 | 按 `docs delivery` 复用成功测试运行；核对原源码主线包含和绑定原版本的实际验收 |
 
 新仓库默认使用 `main`；导入时，尚无默认分支的空仓库会采用当前分支（例如 `master`）。
 已有远端默认分支不会因在任务分支运行 setup 而改变。源码操作使用 CLI/终端；
@@ -194,7 +195,7 @@ MCP 的 `docs_read` 可以读取本说明，当前没有独立的源码操作 MC
 | 403 / 应用管理权限不足 | 核对当前平台账号及应用管理员资格；由已有应用管理员添加权限 |
 | `APPLICATION_SOURCE_PROVIDER_UNAVAILABLE` / `APPLICATION_SOURCE_PROVIDER_FAILED` | 保留原应用和目录，待 Git 服务恢复后重试同一操作 |
 | 推送被拒绝或主线已前进 | 先 fetch 并查看差异，按项目规则合并解决冲突后重试，不强推覆盖 |
-| `APPLICATION_SOURCE_COMMIT_NOT_PUSHED` | 在绑定仓库推送原提交，核对 source status 和远端 SHA 后重试部署 |
+| `APPLICATION_SOURCE_COMMIT_NOT_PUSHED` | 核对操作和平台版本；当前 TEST 发布不要求先推送。生产晋级核对绑定原测试版本的源码主线事实，保留原版本并按交付说明处理 |
 
 应用创建人和新增应用管理员拥有对应仓库管理权限，不需要另行维护 Git 角色。
 本期不自动同步权限撤销或删除。不要向应用开发者索要 Forgejo 平台管理员 Token；
@@ -205,9 +206,9 @@ MCP 的 `docs_read` 可以读取本说明，当前没有独立的源码操作 MC
 无需本地工作区，使用本 Skill 随包精确版本或已安装的对应 CLI：
 
 ```bash
-pnpm dlx openxiangda@2.66.0 auth status --base-url <平台> --json
-pnpm dlx openxiangda@2.66.0 source resolve <仓库URL> --base-url <平台> --json
-pnpm dlx openxiangda@2.66.0 source clone <仓库URL> <新目录> --base-url <平台> --json
+pnpm dlx openxiangda@2.66.2 auth status --base-url <平台> --json
+pnpm dlx openxiangda@2.66.2 source resolve <仓库URL> --base-url <平台> --json
+pnpm dlx openxiangda@2.66.2 source clone <仓库URL> <新目录> --base-url <平台> --json
 ```
 
 登录缺失或站点不匹配时，先按该平台执行 login。resolve 根据平台已经登记的绑定返回

package/releases/2.63.0.json

@@ -1,45 +0,0 @@
-{
-  "schemaVersion": "openxiangda.release-notes/v1",
-  "version": "2.63.0",
-  "status": "reviewed",
-  "title": "Workflow design, handling nodes and editable application templates",
-  "summary": "Publish the reviewed mainline workflow designer and handling capabilities, shared-record Save, structured parallel branches and guarded workflow source synchronisation. Add editable templates, resource reference read/update contexts and read-only AI command reconciliation. The platform must use the same public contracts 2.79.0 pure compiler as the SDK.",
-  "newFeatures": [
-    "Canonical workflow designer definitions, target/variable catalogs, administration, proposals and instance adoption share the same pure validation rules.",
-    "Independent handling and correction nodes support explicit completion actions, opinion requirements, shared-record Save, return policies, durable reminders, platform notifications and supervisor-chain assignments.",
-    "Paired parallel/join nodes have bounded disjoint branches, branch-scoped position proofs and publication validation while retaining immutable task-entry authority.",
-    "Workflow source export/import, read-only version registration plans and environment synchronisation use digest and target-head guards and preserve prepared version history.",
-    "Editable application templates cover administration, PC, mobile and login frames, with shared resource-page controllers, source digests and composition validation.",
-    "Resource reference filtering has an independent read intent; ordinary edits supply saved-record id/revision and actual edits for authoritative server-side merge.",
-    "AI reconciliation binds a read-only GET/read operation to the original command receipt instead of replaying a business mutation."
-  ],
-  "fixes": [
-    "Give the new workflow pure-rule APIs a fresh public contracts version so platforms need not privately add exports under an already published semver.",
-    "Correct canvas branch selection, outline hierarchy and approval action presentation while retaining permissions, CAS, idempotency and unknown-result recovery.",
-    "Export standard resource query, cascade and address helpers from shared contracts so browser and platform consumers use the same query semantics."
-  ],
-  "affectedUsers": [
-    "OpenXiangda V2 platforms and applications using workflow design, independent handling, shared Save, reminders, notifications or instance adoption.",
-    "V2 workspaces using editable template composition, resource reference fields or read-only AI result reconciliation."
-  ],
-  "upgradeSteps": [
-    "Deploy a platform matching the actual contracts 2.79.0 native validator first. Server contracts must come from the official published tarball with verified SRI.",
-    "Upgrade the complete workspace distribution to public openxiangda 2.63.0, install the lockfile and refresh project documentation and MCP sessions.",
-    "Preserve application, record, task, workflow-version and idempotency identities. Run normal check/deploy preflight against the actual platform capabilities and validator digest.",
-    "Verify workflow design, shared Save, handling completion, return paths, notification recipients and reference reads/updates with real roles before environment promotion."
-  ],
-  "knownLimitations": [
-    "New reference contexts and workflow contracts require the matching platform to be deployed first; declaring a different digest does not establish compatibility.",
-    "Template appearance and package regressions do not replace real-role, notification, instance-adoption and business-data acceptance.",
-    "The separate event-receipt lease-ownership and worker-effect candidates are not included in this public release."
-  ],
-  "compatibility": {
-    "generation": "v2",
-    "node": ">=24",
-    "platform": "contracts 2.79.0 exact native validator and matching workflow/resource contexts",
-    "v1": "Independent 1.x maintenance distribution is unchanged"
-  },
-  "issues": [],
-  "sha256": "ef4279a6f846a604d68dbd1adc2473203ffef4287e2dc74b51aa17727a7397b5",
-  "url": "https://github.com/1377385356/openxiangda/releases/tag/v2.63.0"
-}

package/releases/2.63.1.json

@@ -1,46 +0,0 @@
-{
-  "schemaVersion": "openxiangda.release-notes/v1",
-  "version": "2.63.1",
-  "status": "reviewed",
-  "title": "流程设计、独立办理与公开契约配套发行",
-  "summary": "正式发行已评审的流程设计、办理节点、共享数据保存、结构化并行、提醒通知和流程源码同步能力，提供可编辑应用模板、资源引用读取上下文及只读 AI 回执核对，同时修复首次导入前的源基线比较和配置写入边界。公开 SDK 与 contracts 2.79.1 使用同一冻结分发。",
-  "newFeatures": [
-    "流程设计、变量和目标目录、管理员配置、设计提案及历史实例接管共用规范定义与纯校验规则。",
-    "独立办理与补正节点支持明确完成动作、意见要求、共享数据保存、退回策略、持久提醒、平台通知和主管链规则。",
-    "结构化 parallel/join 节点支持有界独立分支、分支位置证明及发布校验，保留任务进入时的权威事实。",
-    "流程源码导出、导入、版本注册和环境同步使用源摘要及目标版本守卫，保留准备版本历史。",
-    "可编辑模板覆盖后台、PC、移动端和登录外观，资源页控制器、来源摘要及组合校验共用标准边界。",
-    "资源引用筛选使用独立读取意图；普通关联编辑提供记录 id/revision 和实际编辑上下文，由平台合并权威绑定。",
-    "AI 核对通过只读 GET/read 查询原幂等键的提交回执，不重新执行业务命令。"
-  ],
-  "fixes": [
-    "首次导入前按目标应用声明比较流程源状态，忽略其他环境观察，复用规范摘要、校验源锁并将写入限定于应用导出的配置。",
-    "并行分支卡片居中且条件开关保持单行，审批布局继续保留权限、CAS、幂等和未知结果恢复。",
-    "新增流程规则使用正式公开 contracts 新版本，不在已公开旧版本号下私有添加 API。",
-    "封包清单正确检查 template/list 命令，参考候选仓库支持显式任务代理访问官方上游。"
-  ],
-  "affectedUsers": [
-    "使用流程设计、独立办理、共享保存、提醒通知、流程源同步或历史实例接管的 OpenXiangda 2.0 平台和应用。",
-    "使用可编辑模板、资源引用字段或只读 AI 结果核对的 2.0 工作区。"
-  ],
-  "upgradeSteps": [
-    "先部署与 contracts 2.79.1 实际纯规则摘要一致的平台；服务器使用官方公开 tarball 并核对 SRI。",
-    "完整工作区分发升级到 openxiangda 2.63.1，按锁文件安装并刷新资料及 MCP 连接。",
-    "保留原应用、数据、任务、流程版本和幂等标识，正常 check/deploy 核对实际能力与 validatorDigest。",
-    "按真实角色验证设计、保存、办理完成、退回、通知收件人及关联字段读写，再执行原晋级流程。"
-  ],
-  "knownLimitations": [
-    "新增读取上下文和流程契约需要配套平台先升级，修改摘要不能代替真实兼容性。",
-    "包测试和模板外观不代替真实角色、通知、实例接管及业务数据读回验收。",
-    "事件回执租约对象归属和 Worker 原子效果仍为独立 PLT-040 候选，本次不包含未整合改动。"
-  ],
-  "compatibility": {
-    "generation": "v2",
-    "node": ">=24",
-    "platform": "contracts 2.79.1 exact native validator and matching workflow/resource contexts",
-    "v1": "独立 1.x 维护分发不变"
-  },
-  "issues": [],
-  "sha256": "364565fc1ab2b4a1db89328b684ca7f5d1b261ad882e00e5da7c1687e5be7861",
-  "url": "https://github.com/1377385356/openxiangda/releases/tag/v2.63.1"
-}