核心开发者开放平台
miniapp-open-platform
小程序开发者侧的应用创建、包上传、版本发布、客户端网关与开放平台控制台。
GoReact 19Vitereits-mediaNginx
33目标前端路由
44提取 API 契约
4已实现控制台页
1自动工作流
CAPABILITIES
负责的能力
- 01
开发者登录与应用列表/创建
- 02
小程序包 presign、直传、校验与资产绑定
- 03
版本创建、发布和网关同步
- 04
客户端推荐、详情、代码票据与登录
- 05
K19 per-request Auth active/client/read-write scope 与 app owner 判定
- 06
K20 loopback exact-code revocation witness
- 07
旧 xt-op-web 路由契约迁移
UI & ROUTES
页面与接口面
/login、/apps、/apps/new、/apps/:id/publishK08 目标：应用配置、版本、接口与能力、能力申请K09 目标：企业验证、治理概览、开发者、成员、角色、服务账号、审计K09B 目标：机器人、命令、Token、事件订阅与交付中心K09C 目标：支付订单、用户数据、支付能力与财务结算K09D 目标：公共首页、Mini App、企业、机器人、商业合作与公告K09E 目标：个人主体、会话设备、组织授权、通知、安全活动与账号边界/api/apps/*、/api/file/*、/openapi/client/miniapp/*IMPLEMENTATION CONTRACT
运行、数据与跨项目契约
这部分给开发者和 AI 明确真实入口、状态 owner、稳定接口和可观测证据。
Entrypoints
- openapi.reits.tech
- /login
- /apps
- /apps/new
- /apps/:id/publish
Owned data
- developer accounts/apps with single owner
- versions and upload sessions
- local package bytes; media asset/checksum/S3 version references target
- gateway active catalog
- K09 target: organization/membership/grant/approval/audit
- K09B target: bot/installation/command/credential/subscription/delivery
- K09C target: payment/refund/dispute/ledger/settlement/data-category/consent/DSR
- K09D target: public capability claims/announcement/subscription/partnership intent
- K09E target: AuthSubject/DeveloperSession/DeviceSession/relationship/consent/notification/security-activity aggregate
Contracts
- Apps list/create
- Package presign/complete
- Version create/live
- GatewayCatalog
- K19 ConsumerPolicy
- K20 loopback revocation witness
- K09 target authorization decision
- K09B target event delivery decision
- K09C target payment and data-governance decisions
- K09D target public claim and developer content decisions
- K09E target personal security summary, revoke commands and federated receipts
Telemetry
- auth 401/403/503
- upload/checksum
- gateway sync
- MySQL + Auth readiness
- K09 target security audit
- K09B target delivery SLO/retry/dedupe
- K09C target payment/reconciliation/DSR SLO
- K09D target claim freshness/public CTA outcomes
- K09E target source health/session revoke/consent revoke/partial-success receipts
SCREEN DEFINITIONS
4 张已绑定 UI 蓝图
每张蓝图都绑定路由、状态、动作、契约和源码证据。
/loginWebFORMAL MAIN · fa9283dPROD · fb1a1b4 · ACTIVE SPLITUX bc62595 / RUNTIME 5e51842 · CANDIDATE ONLY
开发者登录
生产已连接 reits-auth；本蓝图未发送验证码、未读取 token。
/appsWeb开放平台/我的应用
FORMAL MAIN · fa9283dPROD · fb1a1b4 · ACTIVE SPLITUX bc62595 / RUNTIME 5e51842 · CANDIDATE ONLY
授权应用清单
公开 shell 可达，但未经授权的生产清单返回 401。
!生产数据未展示
session_inactiveUNKNOWNAUTH REQUIRED/apps/newWeb我的应用/创建应用
FORMAL MAIN · fa9283dPROD · fb1a1b4 · ACTIVE SPLITUX bc62595 / RUNTIME 5e51842 · CANDIDATE ONLY
建立应用身份草稿
formal main 只接受 name / description；App ID 由服务端创建。
/apps/:id/publishWeb未选择应用/发布新版本
FORMAL MAIN · fa9283dPROD · fb1a1b4 · ACTIVE SPLITUX bc62595 / RUNTIME 5e51842 · CANDIDATE ONLY
六阶段发布合同
先证明 artifact identity，再分别完成版本、上线与 catalog 投影。
—尚无 package artifactZIP、signed URL、object key 与 checksum 均为空
- SHA-256
- NULL
- Storage
- local · configured ≠ uploaded
- Gateway
- ready 200 · track 6/7