{"schemaVersion":"developer.reits.tech/external-developer/v1","observedAt":"2026-08-13T12:00:00+09:00","organizationRepositories":42,"sources":[{"repository":"reits-auth","revision":"b321c417e347","responsibility":"OpenID Connect、统一账号、会话与浏览器 SSO"},{"repository":"reits-auth-web","revision":"17e23913740a","responsibility":"Hosted Auth、BFF 弹窗与 Passkey 交互"},{"repository":"reits-sso-config","revision":"122975dd9d17","responsibility":"已登记客户端、redirect URI、origin 与主题配置"},{"repository":"miniapp-open-platform","revision":"b8d2bbbf575f","responsibility":"应用、包、发布、审核与小程序运行时契约"},{"repository":"miniapp-web-sdk","revision":"868125818370","responsibility":"H5 宿主桥、能力协商、initData 与 Mock Host"},{"repository":"matrix-x-chat-ios","revision":"fde8cd10901f","responsibility":"iOS 宿主、可信包加载、桥接与账号体验"},{"repository":"im-core","revision":"4db6980534e1","responsibility":"Matrix X Chat 用户、企业、群与设备身份"}],"entryPoints":[{"id":"openid","number":"01","title":"Reits Open ID","summary":"让网站或后台使用同一套账号登录；Web 使用 Authorization Code + PKCE，服务端保管自己的会话。","status":"production","statusLabel":"生产能力 · 受控登记","action":"登记客户端"},{"id":"miniapp","number":"02","title":"Matrix Mini App","summary":"把 H5 应用作为 Matrix X Chat 内的小程序运行，获得主题、安全区、宿主按钮和经声明授权的设备能力。","status":"preview","statusLabel":"受控预览","action":"创建小程序"},{"id":"server","number":"03","title":"Server integration","summary":"后端以独立机器身份校验短期 init_data；平台签名密钥永远不进入第三方业务服务。","status":"platform","statusLabel":"批准后开通","action":"申请服务端权限"}],"currentCapabilities":[{"group":"宿主基础","items":"ready、主题、安全区、视口、生命周期、关闭与链接","state":"available"},{"group":"交互组件","items":"MainButton、BackButton、Popup、Haptic","state":"available"},{"group":"应用数据","items":"initData、Cloud Storage、Device Storage","state":"host"},{"group":"受控网络","items":"HTTPS request proxy、connect/navigation/download 域名白名单","state":"host"},{"group":"敏感设备能力","items":"Camera、Photo Library、Location、Clipboard Read、File Download","state":"preview"},{"group":"高风险业务能力","items":"Invoice、支付、分享、语音与实时媒体","state":"review"}],"publicReadiness":[{"id":"EXT-01","title":"第三方隔离 Open ID","detail":"把全局 public subject 升级为按应用/sector 的 pairwise subject；默认只返回 sub，邮箱需明确授权。","priority":"P0","state":"required"},{"id":"EXT-02","title":"开发者组织与成员","detail":"从单 owner 演进为组织、邀请、Owner/Admin/Developer/Viewer、应用转移和离职撤权。","priority":"P0","state":"required"},{"id":"EXT-03","title":"客户端自助生命周期","detail":"控制台申请 Sandbox/Production client，严格 redirect URI，支持密钥轮换、吊销、审计与配额。","priority":"P0","state":"required"},{"id":"EXT-04","title":"公开 SDK 供应链","detail":"发布 @reits/miniapp-sdk、许可证、SemVer、SRI、变更日志、兼容矩阵与可回滚 CDN；当前 README 中的 CDN DNS 不存在。","priority":"P0","state":"required"},{"id":"EXT-05","title":"外部服务端会话交换","detail":"把平台内部 introspection 包装为按 app grant 的公开服务合同，提供速率限制、错误码、审计与官方 verifier。","priority":"P0","state":"required"},{"id":"EXT-06","title":"Sandbox 与测试工具","detail":"提供 Mock Host、测试账号、fixture init_data、包校验 CLI、示例应用和端到端发布演练。","priority":"P1","state":"planned"},{"id":"EXT-07","title":"公开发布治理","detail":"补齐托管扫描/审核、隐私表、权限用途、灰度、回滚、状态页、支持与 SLA。","priority":"P1","state":"planned"}],"rollout":[{"phase":"A","title":"受控接入","detail":"人工登记 SSO client；批准 SDK 制品与精确 app grant。","state":"now"},{"phase":"B","title":"开发者 Sandbox","detail":"组织成员、pairwise subject、测试宿主、公开 SDK 与会话交换。","state":"next"},{"phase":"C","title":"自助生产发布","detail":"审核、配额、密钥轮换、灰度、回滚和使用量观测进入控制台。","state":"planned"},{"phase":"D","title":"生态规模化","detail":"多区域接入、账单/订阅、合作伙伴等级、Marketplace 与 SLA。","state":"future"}]}