npm - openxiangda - Versions diffs - 2.75.6 → 2.75.9 - Mend

openxiangda 2.75.6 → 2.75.9

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (64) hide show

package/releases/2.66.0.json DELETED Viewed

@@ -1,29 +0,0 @@
-{
-  "schemaVersion": "openxiangda.release-notes/v1",
-  "version": "2.66.0",
-  "status": "reviewed",
-  "title": "受限事件后台事务能力",
-  "summary": "复用平台事件投递租约及持久回执，支持定时消费者以显式资源与字段授权执行 Native 事务。",
-  "newFeatures": [
-    "事件消费者支持受限查询、冻结事务、原键提交与回执恢复；平台统一执行并验证事件租约。"
-  ],
-  "fixes": [
-    "迟到消费者只能释放自身租约，不能覆盖新消费者处理权。"
-  ],
-  "affectedUsers": [
-    "需要定时业务事务的 OpenXiangda V2 应用开发者与平台维护者。"
-  ],
-  "upgradeSteps": [
-    "配对升级 SDK、CLI、共享契约和平台服务；为事件订阅显式声明 worker-effect 资源、字段及容量。"
-  ],
-  "knownLimitations": [
-    "投递至少一次，业务事务依赖原幂等意图去重；不允许工作流拥有的资源写入或任意业务身份冒用。"
-  ],
-  "compatibility": {
-    "node": ">=24",
-    "pnpm": "10.15.1"
-  },
-  "issues": [],
-  "sha256": "48c557ed1f5420f31b352721b05fc769d2f728c84102da0705eca9553844532a",
-  "url": "https://github.com/1377385356/openxiangda/releases/tag/v2.66.0"
-}

package/releases/2.66.1.json DELETED Viewed

@@ -1,29 +0,0 @@
-{
-  "schemaVersion": "openxiangda.release-notes/v1",
-  "version": "2.66.1",
-  "status": "reviewed",
-  "title": "事件 worker-effect SDK 导出修复",
-  "summary": "保持 2.66.0 worker-effect 能力，并修复根包 Nest 入口导出缺失。",
-  "newFeatures": [
-    "事件消费者支持受限查询、冻结事务、原键提交与回执恢复；平台统一执行并验证事件租约。"
-  ],
-  "fixes": [
-    "公开 Nest 入口补充导出事件 worker-effect 服务。"
-  ],
-  "affectedUsers": [
-    "需要定时业务事务的 OpenXiangda V2 应用开发者与平台维护者。"
-  ],
-  "upgradeSteps": [
-    "配对升级 SDK、CLI、共享契约和平台服务；为事件订阅显式声明 worker-effect 资源、字段及容量。"
-  ],
-  "knownLimitations": [
-    "投递至少一次，业务事务依赖原幂等意图去重；不允许工作流拥有的资源写入或任意业务身份冒用。"
-  ],
-  "compatibility": {
-    "node": ">=24",
-    "pnpm": "10.15.1"
-  },
-  "issues": [],
-  "sha256": "bf5cc01bff98c34817ba998f822f74561f8d4d44da121229b5e585654cba13c0",
-  "url": "https://github.com/1377385356/openxiangda/releases/tag/v2.66.1"
-}

package/releases/2.66.2.json DELETED Viewed

@@ -1,29 +0,0 @@
-{
-  "schemaVersion": "openxiangda.release-notes/v1",
-  "version": "2.66.2",
-  "status": "reviewed",
-  "title": "工具链事实契约兼容修复",
-  "summary": "保持现有 worker-effect 能力，并修复工作区工具链事实的公开契约。",
-  "newFeatures": [
-    "事件消费者支持受限查询、冻结事务、原键提交与回执恢复；平台统一执行并验证事件租约。"
-  ],
-  "fixes": [
-    "允许工作区上下文返回已安装工具链事实。"
-  ],
-  "affectedUsers": [
-    "需要定时业务事务的 OpenXiangda V2 应用开发者与平台维护者。"
-  ],
-  "upgradeSteps": [
-    "配对升级 SDK、CLI、共享契约和平台服务；为事件订阅显式声明 worker-effect 资源、字段及容量。"
-  ],
-  "knownLimitations": [
-    "投递至少一次，业务事务依赖原幂等意图去重；不允许工作流拥有的资源写入或任意业务身份冒用。"
-  ],
-  "compatibility": {
-    "node": ">=24",
-    "pnpm": "10.15.1"
-  },
-  "issues": [],
-  "sha256": "f597de89ed6ca7b7270427f35e2d9078576f1ee3ec06f961cd09b65e5298ebb8",
-  "url": "https://github.com/1377385356/openxiangda/releases/tag/v2.66.2"
-}

package/releases/2.67.0.json DELETED Viewed

@@ -1,33 +0,0 @@
-{
-  "schemaVersion": "openxiangda.release-notes/v1",
-  "version": "2.67.0",
-  "status": "reviewed",
-  "title": "应用Agent接口与事件worker声明修复",
-  "summary": "新增作用域内应用Agent客户端，并补齐事件worker编译上下文及节点条件配置契约。",
-  "newFeatures": [
-    "公开openxiangda/agent客户端与hooks，沿用平台当前身份和持久游标，未知写入不自动重放。"
-  ],
-  "fixes": [
-    "worker-effect编译传入显式emitEventTypes与实际工作流subject，避免合法声明被误拒绝。",
-    "配置类型公开worker-effect执行声明，避免应用使用类型绕过。",
-    "共享节点人员配置支持完整条件规则与权威来源边界。"
-  ],
-  "affectedUsers": [
-    "OpenXiangda V2应用开发者和平台维护者"
-  ],
-  "upgradeSteps": [
-    "按同批版本升级工具链，重新生成并检查应用契约。",
-    "配套升级平台共享契约后验证TEST，真实角色验收独立执行。"
-  ],
-  "knownLimitations": [
-    "事件至少一次投递，依赖原业务意图和平台回执去重。",
-    "工具链发布不代表学校平台部署或应用业务验收完成。"
-  ],
-  "compatibility": {
-    "node": ">=24",
-    "pnpm": "10.15.1"
-  },
-  "issues": [],
-  "sha256": "535f00f729995cc1f8ce0925c3ddbd5976e1ed6283ef60d2888955ae95393d02",
-  "url": "https://github.com/1377385356/openxiangda/releases/tag/v2.67.0"
-}

package/releases/2.67.1.json DELETED Viewed

@@ -1,35 +0,0 @@
-{
-  "schemaVersion": "openxiangda.release-notes/v1",
-  "version": "2.67.1",
-  "status": "reviewed",
-  "title": "应用Agent及worker声明与发行恢复修复",
-  "summary": "新增作用域内应用Agent客户端，并补齐事件worker编译上下文及节点条件配置契约。",
-  "newFeatures": [
-    "公开openxiangda/agent客户端与hooks，沿用平台当前身份和持久游标，未知写入不自动重放。"
-  ],
-  "fixes": [
-    "worker-effect编译传入显式emitEventTypes与实际工作流subject，避免合法声明被误拒绝。",
-    "配置类型公开worker-effect执行声明，避免应用使用类型绕过。",
-    "共享节点人员配置支持完整条件规则与权威来源边界。",
-    "声明warning保持警告，真正错误仍阻断，避免正确应用被误拒绝。",
-    "Git worktree发行计划、验证与发布共用冻结制品、回执和进程锁；发现旧私有回执时先恢复原状态。"
-  ],
-  "affectedUsers": [
-    "OpenXiangda V2应用开发者和平台维护者"
-  ],
-  "upgradeSteps": [
-    "按同批版本升级工具链，重新生成并检查应用契约。",
-    "配套升级平台共享契约后验证TEST，真实角色验收独立执行。"
-  ],
-  "knownLimitations": [
-    "事件至少一次投递，依赖原业务意图和平台回执去重。",
-    "工具链发布不代表学校平台部署或应用业务验收完成。"
-  ],
-  "compatibility": {
-    "node": ">=24",
-    "pnpm": "10.15.1"
-  },
-  "issues": [],
-  "sha256": "cab78d0c354ccfe6373966f884c475e4e50e0096a5cbe9763fce2a761ba99e99",
-  "url": "https://github.com/1377385356/openxiangda/releases/tag/v2.67.1"
-}

package/releases/2.67.2.json DELETED Viewed

@@ -1,34 +0,0 @@
-{
-  "schemaVersion": "openxiangda.release-notes/v1",
-  "version": "2.67.2",
-  "status": "reviewed",
-  "title": "读取范围能力交集与开发诊断修复",
-  "summary": "所选读取范围严格收窄当前身份能力，并补充原执行健康、托管文件语义及设计资料预算诊断。",
-  "newFeatures": [
-    "应用自助操作提供原执行健康和托管文件语义观察，沿用当前身份与原请求。"
-  ],
-  "fixes": [
-    "Perspective读取能力与当前身份能力取交集，避免有限角色选择其他角色的完整管理投影。",
-    "AppSpec记录实际读取字节和省略原因，保留现有确认及部署门禁，不将超预算资料误判为不存在。",
-    "工作区加载及封包的声明warning不再误当error阻断，真实错误继续拒绝。",
-    "发行元数据读取保留有界并发和原渠道状态；CLI模板与根SDK版本配套。"
-  ],
-  "affectedUsers": [
-    "使用多角色读取范围的V2应用开发者及平台维护者"
-  ],
-  "upgradeSteps": [
-    "通过官方精确根包版本安装整组工具链，检查当前平台兼容性后重新部署TEST。",
-    "使用有限角色、兼任角色及撤销授权场景核对页面投影；实际业务验收独立于发包。"
-  ],
-  "knownLimitations": [
-    "源码回归不证明学校身份同步、通知通道、定时任务或完整迁移已验收。",
-    "读取范围不改变写入和业务动作授权，Native后端继续独立执行字段与行权限。"
-  ],
-  "compatibility": {
-    "node": ">=24",
-    "pnpm": "10.15.1"
-  },
-  "issues": [],
-  "sha256": "a6d7741c59762468ee23815832c0d707166bc60ca7913dabd4f945d6cf84ac20",
-  "url": "https://github.com/1377385356/openxiangda/releases/tag/v2.67.2"
-}

package/releases/2.68.2.json DELETED Viewed

@@ -1,33 +0,0 @@
-{
-  "schemaVersion": "openxiangda.release-notes/v1",
-  "version": "2.68.2",
-  "status": "reviewed",
-  "title": "固定公开单选过滤的编译一致性修复",
-  "summary": "允许对 option.single 单选字段声明固定公开 eq 条件，保持平台强制过滤和字段白名单。",
-  "newFeatures": [],
-  "fixes": [
-    "修复是否开放、发布状态等单选字段被应用与 Native 编译器错误拒绝的问题。",
-    "单选值只接受字符串或 null，拒绝数组、对象、数值和布尔；多选、附件、人员及资源引用仍不接受。"
-  ],
-  "affectedUsers": [
-    "通过 frontend.publicAccess 发布带开放/发布状态条件的公开目录应用。"
-  ],
-  "upgradeSteps": [
-    "应用升级精确 openxiangda 2.68.2 并重新 check；不修改已安装编译器或生成输出。",
-    "平台同步官方 openxiangda-contracts 2.88.1 编译器后再部署含此条件的应用；运行时过滤仍由平台负责。"
-  ],
-  "knownLimitations": [
-    "仍只允许固定 eq 条件；不开放匿名任意筛选、排序或普通 Native Data API。",
-    "包与平台发布不代表学校浏览器、真实角色或通知验收完成。"
-  ],
-  "compatibility": {
-    "node": "Node.js 24 or newer for maintained toolchain",
-    "generation": "OpenXiangda V2; V1 unchanged",
-    "platform": "Native compiler openxiangda-contracts 2.88.1; server option JSON equality already implemented"
-  },
-  "issues": [
-    "PLT-068"
-  ],
-  "sha256": "122b83c8aa1540c4e97ba7b4700618a03ff86585848f3f9f5626475ad13b7a8d",
-  "url": "https://github.com/1377385356/openxiangda/releases/tag/v2.68.2"
-}

package/releases/2.70.0.json DELETED Viewed

@@ -1,35 +0,0 @@
-{
-  "schemaVersion": "openxiangda.release-notes/v1",
-  "version": "2.70.0",
-  "status": "reviewed",
-  "title": "组织角色与业务记录归属边界",
-  "summary": "应用可声明平台目录角色映射、self/subtree 组织范围及 Native 记录组织归属，由配套平台统一执行身份与数据授权。",
-  "newFeatures": [
-    "角色显式声明 organizationReach；directoryRoleSources 将可信平台目录事实映射为当前组织内的应用角色和班级等字符串范围。",
-    "Native 资源声明 none、owned 或 inherited-down 组织策略；组织归属元数据可用于有界读取和统计，业务输入不能更改归属。",
-    "编译器共同校验组织角色、来源范围和资源策略，自动协商 authz.organizations、authz.directory-roles 与 data.organizations 能力。"
-  ],
-  "fixes": [
-    "隔离 CLI 候选构建保留固定 Corepack 缓存，嵌套源码构建并发上限为两个任务；保留真实依赖安装和端到端检查。"
-  ],
-  "affectedUsers": [
-    "使用多组织、教育局与独立学校或平台家校目录的 OpenXiangda V2 应用；已有未声明组织策略的应用保持原授权语义。"
-  ],
-  "upgradeSteps": [
-    "安装精确 openxiangda 2.70.0 官方组合并刷新项目资料，检查生成契约及能力要求。",
-    "平台配套正式 contracts、组织角色投影服务与新增 SQL 后再启用组织资源；在目标站点验证真实来源、活动成员、安装及角色正反路径。"
-  ],
-  "knownLimitations": [
-    "npm 包发布不代表平台部署、真实组织同步或业务验收；源码和独立 PostgreSQL 测试不能代替现场登录与权限验证。",
-    "普通后台或应用凭据不自动取得组织权限；未声明明确系统动作边界的后台任务不能访问组织资源。",
-    "已有无组织记录不自动推断或回填归属，启用组织策略后不能降级移除边界。"
-  ],
-  "compatibility": {
-    "node": "Node.js 24 or newer for maintained toolchain",
-    "generation": "OpenXiangda V2; V1 unchanged",
-    "platform": "须部署同源 contracts 及组织授权 SQL/后端；组织来源角色限定 self，subtree 授权由合法应用管理员显式管理"
-  },
-  "issues": [],
-  "sha256": "7291b56c3a9c02615075ea5bb9bcf22669b3d19540f5f95173f54589d31a24f8",
-  "url": "https://github.com/1377385356/openxiangda/releases/tag/v2.70.0"
-}

package/releases/2.70.1.json DELETED Viewed

@@ -1,34 +0,0 @@
-{
-  "schemaVersion": "openxiangda.release-notes/v1",
-  "version": "2.70.1",
-  "status": "reviewed",
-  "title": "业务待办通知与旧审批当前节点接续",
-  "summary": "应用事务可通过签名事件创建和结束真实待办；管理员可使用正式迁移回执将旧审批接续到原当前节点，保留原申请人与审批轮次。",
-  "newFeatures": [
-    "事件订阅显式声明 business-task 与任务代码清单，Nest sendTaskFromEvent 投影原事件并复用平台任务中心、通知发件箱及结束状态。",
-    "CLI 与 MCP 共享 workflows.legacy-prepare、workflows.legacy-apply、workflows.legacy-receipt 有界管理操作；旧审批历史作为来源事实保留。"
-  ],
-  "fixes": [
-    "声明检查器与打包器完整保留待办任务代码清单，应用与平台编译器共同协商 notification-hub-v2.event-tasks。"
-  ],
-  "affectedUsers": [
-    "需要预约审批、排队分配、结算确认等业务待办，或需接入有可靠来源证明的在途旧审批的 V2 应用。"
-  ],
-  "upgradeSteps": [
-    "安装精确 openxiangda 2.70.1 组合并重新生成契约；先部署同源平台 contracts、后端及旧审批接续 SQL。",
-    "业务状态与不可变待办事件同事务；旧审批先正式导入原业务单，再准备和执行原节点接续，未知结果查询原回执。"
-  ],
-  "knownLimitations": [
-    "本次 SDK 发行不代表目标平台或应用已部署，也不证明真实角色办理或外部供应方送达。",
-    "旧审批接续仅支持可靠身份、完整线性历史、手动审批和内部当前分派；不重放旧通知，不创建替代账号或伪造原申请人登录。",
-    "真实消息通道须沿既有发送授权启用；新增任务能力不授权批量补发历史通知。"
-  ],
-  "compatibility": {
-    "node": "Node.js 24 or newer for maintained toolchain",
-    "generation": "OpenXiangda V2; V1 unchanged",
-    "platform": "须配套正式 contracts、notification-hub-v2.event-tasks 后端及 AddWorkflowLegacyAdoptionsV2 SQL"
-  },
-  "issues": [],
-  "sha256": "d44db59da451ea6bc39a953cb5cefcdfc88241e0129bcdfb6a2d539424b166db",
-  "url": "https://github.com/1377385356/openxiangda/releases/tag/v2.70.1"
-}

package/releases/2.75.2.json DELETED Viewed

@@ -1,34 +0,0 @@
-{
-  "schemaVersion": "openxiangda.release-notes/v1",
-  "version": "2.75.2",
-  "status": "reviewed",
-  "title": "流程条件在画布、列表和AI预览中保持中文可读",
-  "summary": "统一使用已验证的中文选项展示条件，并保留显式通向拒绝结果的业务分支。原始值、表达式、审批人和授权不变。",
-  "newFeatures": [],
-  "fixes": [
-    "画布连线、提示、可访问节点列表及AI方案预览共用已验证的选项标签，不再在已有中文选项时重复显示英文编码。",
-    "只读图按实际入边区分普通拒绝操作与显式业务条件，不再仅因结束结果为拒绝就隐藏业务分支。",
-    "保留管理员自定义分支名、未知历史原值、原始标量类型、定义摘要和可执行图；根包与CLI模板版本成对更新。",
-    "同步中文管理专题及Skill资料，说明WorkflowDiagram的可选展示选项与其不改变业务语义的边界。"
-  ],
-  "affectedUsers": [
-    "使用2.0流程设计器、只读流程图、节点列表和AI改图预览的应用。"
-  ],
-  "upgradeSteps": [
-    "应用使用本轮精确根包版本及其锁定依赖组合，不手工混装物理包；目标平台先消费同源正式SDK并通过兼容预检。",
-    "发布前保留未保存草稿，部署后核对原流程节点和绑定，再按真实管理员、审批人和发起人验收。"
-  ],
-  "knownLimitations": [
-    "没有合法中文标签或类型不兼容的历史值继续显示原始值，不会猜测或改写业务编码。",
-    "AI预览显示修复不代表模型可用；真实推理仍需单独配置平台执行服务、工作器及模型连接。",
-    "本地纯测试和受控浏览器图不替代实际站点、角色、物理鼠标或真实模型验收。"
-  ],
-  "compatibility": {
-    "node": "Node.js 24 or newer for maintained toolchain",
-    "generation": "OpenXiangda V2; V1 unchanged",
-    "platform": "Requires anonymous-public/public/query-batch; each item reuses existing public policy and Native authorization"
-  },
-  "issues": [],
-  "sha256": "57283ba53d110aac43c3084bac70b23f29fecdaa4c7cdfd670840c238e80ee38",
-  "url": "https://github.com/1377385356/openxiangda/releases/tag/v2.75.2"
-}

package/releases/2.75.4.json DELETED Viewed

@@ -1,31 +0,0 @@
-{
-  "schemaVersion": "openxiangda.release-notes/v1",
-  "version": "2.75.4",
-  "status": "reviewed",
-  "title": "对齐 AppSpec 正式发布资料预算",
-  "summary": "将正式发布生命周期的 AppSpec 当前资料文件上限与公开文档中的 512 文件预算对齐，支持完整记录的大型应用通过生产晋级预检。",
-  "newFeatures": [],
-  "fixes": [
-    "生产生命周期校验使用 512 个当前 AppSpec 非资产文件上限，不再以过期的 128 文件硬编码阻断大型应用。",
-    "保留单文件、总字节、资产和上下文预算，继续拒绝超预算、非法类型和符号链接输入。"
-  ],
-  "affectedUsers": [
-    "当前 AppSpec 资料超过旧 128 文件上限、但仍符合 512 文件和字节预算的 OpenXiangda V2 应用。"
-  ],
-  "upgradeSteps": [
-    "使用本轮七包精确版本组合，并先执行 openxiangda check 与生产 promotion preflight。",
-    "继续完整记录应用目标、变更、设计、评审和验收，不要通过删除或隐藏活动资料规避生命周期校验。"
-  ],
-  "knownLimitations": [
-    "本次修正只扩大与文档一致的当前资料文件预算，不放宽单文件、总字节、原型资产、上下文或真实验收门禁。",
-    "本地检查通过不代表目标站点的生产身份、通知、密钥和业务验收已经完成。"
-  ],
-  "compatibility": {
-    "node": "Node.js 24 or newer for maintained toolchain",
-    "generation": "OpenXiangda V2; V1 unchanged",
-    "platform": "Requires the matching OpenXiangda V2 configuration compiler and compatibility preflight"
-  },
-  "issues": [],
-  "sha256": "474b635fec9ee5f30910d587fc9d293b042d67adae4666c85e6770bb0b8155de",
-  "url": "https://github.com/1377385356/openxiangda/releases/tag/v2.75.4"
-}

package/releases/2.75.6.json DELETED Viewed

@@ -1,35 +0,0 @@
-{
-  "schemaVersion": "openxiangda.release-notes/v1",
-  "version": "2.75.6",
-  "status": "reviewed",
-  "title": "OpenXiangda 2.75.6：同域名独立租户的浏览器会话协调",
-  "summary": "平台显式按应用路径绑定独立租户时，SDK 使用平台提供的范围隔离跨标签页会话通知，并为共享接口续期传递应用路由上下文。未绑定应用沿用原有平台会话。",
-  "newFeatures": [],
-  "fixes": [
-    "隔离路径绑定租户的 BroadcastChannel 与 localStorage 退出、组织切换通知，避免新旧租户页面互相失效。",
-    "共享平台接口请求和续期携带应用路由提示；身份与租户校验继续由服务端完成。",
-    "CLI 模板及官方 contracts 制品随同一源提交配对发布；编译器授权和业务语义未改变。"
-  ],
-  "affectedUsers": [
-    "在同一域名不同应用路径部署独立租户的站点维护者及应用用户。"
-  ],
-  "compatibility": {
-    "node": "Node.js 24 or newer for maintained toolchain",
-    "generation": "OpenXiangda V2; unbound and V1 session coordination unchanged",
-    "platform": "需要支持应用入口绑定、独立平台 Cookie 与 openxiangda-platform-session-scope 元数据的配套平台。平台消费同源 openxiangda-contracts 2.95.6 制品。",
-    "releaseChannels": "latest / stable-v2"
-  },
-  "upgradeSteps": [
-    "部署兼容 SDK 的应用前端并保留成功 TEST 运行；正式复用该不可变版本。",
-    "随后在配套平台显式配置精确 host、应用编码与租户编码绑定；不修改旧域名归属，不合并账号或目录。",
-    "分别验证新旧登录、续期、退出、跨标签页及真实钉钉回调；包发布不代表现场业务验收。"
-  ],
-  "knownLimitations": [
-    "路径隔离保留独立登录态，但不同路径仍属于同一浏览器 origin，并非跨来源脚本安全隔离。",
-    "旧 SDK 会忽略新增范围元数据；必须先更新相关前端再启用独立租户入口。",
-    "免登仍要求对应租户的真实钉钉配置与用户身份，不会继承其他租户账号。"
-  ],
-  "issues": [],
-  "sha256": "4af73277009cb3b1fbaef52ba5c5a6d626b3712ca95784fae852594f356867d8",
-  "url": "https://github.com/1377385356/openxiangda/releases/tag/v2.75.6"
-}