fix(page-data): require registered datasets before binding

page-data-workspace-bind.mjs

@@ -135,6 +135,84 @@ function buildWorkspacePublicUrl(userId, relativePath) {
   });
 }
 
+function assertRegisteredDatasetTables(userDataSpace, registryDatasets, usage) {
+  for (const dataset of registryDatasets) {
+    const requiredUsage = usage.get(dataset.name) ?? {};
+    if (requiredUsage.insert && !dataset.actions.includes('insert')) {
+      throw Object.assign(new Error(`dataset「${dataset.name}」未开放写入`), {
+        code: 'dataset_action_not_registered',
+        datasetName: dataset.name,
+        action: 'insert',
+      });
+    }
+    if (requiredUsage.read && !dataset.actions.includes('read')) {
+      throw Object.assign(new Error(`dataset「${dataset.name}」未开放读取`), {
+        code: 'dataset_action_not_registered',
+        datasetName: dataset.name,
+        action: 'read',
+      });
+    }
+    const actualColumns = userDataSpace.listTableColumns(dataset.table);
+    if (!actualColumns.length) {
+      throw Object.assign(new Error(`dataset 对应表不存在：${dataset.table}`), {
+        code: 'table_not_found',
+        datasetName: dataset.name,
+      });
+    }
+    const actualNames = new Set(actualColumns.map((column) => column.name));
+    const configuredColumns = Object.values(dataset.columns ?? {}).flat();
+    const missingColumns = [...new Set(configuredColumns)].filter((column) => !actualNames.has(column));
+    if (missingColumns.length) {
+      throw Object.assign(
+        new Error(`dataset「${dataset.name}」注册字段不存在：${missingColumns.join(', ')}`),
+        { code: 'dataset_schema_mismatch', datasetName: dataset.name, missingColumns },
+      );
+    }
+  }
+}
+
+/**
+ * Page Data policy must be derived from a registered SQLite dataset, never
+ * accepted solely from an Agent-supplied policy. This runs before page or
+ * publication creation so an incomplete data setup cannot leave a live page.
+ */
+export function resolveRegisteredPageDataPolicy({
+  html,
+  userId,
+  accessMode,
+  pageDataPolicy = null,
+  userDataSpace,
+} = {}) {
+  const usage = detectPageDataDatasetUsageFromHtml(html);
+  if (!usage.size) return null;
+  if (!userDataSpace) throw new Error('缺少 Page Data 数据空间');
+
+  if (pageDataPolicy?.datasets) {
+    assertPolicyMatchesHtmlDatasets(html, pageDataPolicy.datasets);
+  }
+
+  const registryDatasets = userDataSpace.listDatasets();
+  const datasets = buildPageDataPolicyDatasetsFromRegistry({
+    html,
+    registryDatasets,
+    usage,
+  });
+  assertRegisteredDatasetTables(
+    userDataSpace,
+    registryDatasets.filter((dataset) => datasets[dataset.name]),
+    usage,
+  );
+
+  return {
+    ...pageDataPolicy,
+    ownerUserId: String(pageDataPolicy?.ownerUserId ?? userId).trim(),
+    accessMode: pageDataPolicy?.accessMode ?? accessMode,
+    // The registry is authoritative for actions and allowed columns. Agent
+    // input can describe the page, but cannot manufacture a dataset policy.
+    datasets,
+  };
+}
+
 export async function bindWorkspaceHtmlForPageData({
   pool,
   h5Root,
@@ -158,6 +236,15 @@ export async function bindWorkspaceHtmlForPageData({
   const normalizedAccessMode = resolvePageDataBindAccess(accessMode);
   const resolvedPassword = resolvePageDataBindPassword(normalizedAccessMode, password);
 
+  const userDataSpace = createUserDataSpaceService({ workspaceRoot });
+  const resolvedPageDataPolicy = resolveRegisteredPageDataPolicy({
+    html: content,
+    userId,
+    accessMode: normalizedAccessMode,
+    pageDataPolicy,
+    userDataSpace,
+  });
+
   const mindSpacePages = createPageService(pool, { h5Root, storageRoot });
   const mindSpacePublications = createPublicationService(pool, {
     h5Root,
@@ -183,26 +270,6 @@ export async function bindWorkspaceHtmlForPageData({
   });
 
   let policy = null;
-  const htmlDatasetUsage = detectPageDataDatasetUsageFromHtml(content);
-  let resolvedPageDataPolicy = pageDataPolicy;
-
-  if (htmlDatasetUsage.size) {
-    if (pageDataPolicy?.datasets) {
-      assertPolicyMatchesHtmlDatasets(content, pageDataPolicy.datasets);
-    } else {
-      const userDataSpace = createUserDataSpaceService({ workspaceRoot });
-      const autoDatasets = buildPageDataPolicyDatasetsFromRegistry({
-        html: content,
-        registryDatasets: userDataSpace.listDatasets(),
-        usage: htmlDatasetUsage,
-      });
-      resolvedPageDataPolicy = {
-        ownerUserId: userId,
-        accessMode: normalizedAccessMode,
-        datasets: autoDatasets,
-      };
-    }
-  }
 
   if (resolvedPageDataPolicy) {
     const ownerUserId = String(resolvedPageDataPolicy.ownerUserId ?? userId).trim();