@coralai/sps-cli 0.90.1 → 0.90.2

package/dist/providers/storage/syncRunner.js

@@ -1,119 +0,0 @@
-/**
- * @module        providers/storage/syncRunner
- * @description   对账循环:发现项目 → 新鲜度过滤 → 逐项目同步 → 汇总。
- *
- * @layer         providers
- *
- * 🔴 **它是对账循环,不是事件驱动**(照抄 coral 的判断,它是对的):
- *    文件事件会漏(worker 在别的用户下写 / 容器里写 / 进程崩在一半),
- *    而漏掉的表现是"桶里少了一个文件",**没有任何报错**。对账每轮都会自愈。
- *
- * 🔴 **跑在 daemon,不在 console 的请求路径。**
- *    sidecar 是独立进程,而 console 是**共享事件循环** —— 同一段代码换了宿主就会开始
- *    阻塞 `/api/health` 探针与 SSE 心跳。
- *    > 判据:**同步在移交件里是对的 —— 它本来跑在 CLI 里;换了宿主之后才变错。**
- *
- * 🔴 **每一类"没做"都要有自己的计数**,别合并成一个"跳过":
- *    超期跳过 / 范围内一个路径都不存在 / 权限读不到 / 超大 / 被下限拒 —— 五种原因,五个数。
- *    合并的代价今天实测过:coral 那个 `0` 同时表示"从没改过"和"目录不存在",吃掉了 36 个项目。
- */
-import { MinioBackend } from './MinioBackend.js';
-import { discoverProjects, scopeLastModified } from './scanWorkspace.js';
-import { activeStorageConfig } from './storageConfig.js';
-import { syncProject } from './syncProject.js';
-import { readSyncScope, scopeForProduct } from './syncScope.js';
-/** 默认缩略图实现:惰性加载 sharp(它带原生二进制,不该为启动而拉进内存)。 */
-async function defaultMakeThumb(input) {
-    const sharp = (await import('sharp')).default;
-    return sharp(input).resize(320, 320, { fit: 'inside', withoutEnlargement: true }).webp({ quality: 78 }).toBuffer();
-}
-export async function runSyncPass(opts) {
-    const log = opts.log ?? ((l) => console.log(l));
-    const cfg = activeStorageConfig();
-    // 🔴 未配置/关着 ⇒ **整条路径不存在**。不是错误,也不该打日志刷屏。
-    if (!cfg && !opts.storage)
-        return null;
-    const deps = {
-        storage: opts.storage ?? new MinioBackend(cfg),
-        makeThumb: opts.makeThumb ?? defaultMakeThumb,
-        maxBytes: opts.maxBytes,
-    };
-    const started = opts.now ?? Date.now();
-    const scope = readSyncScope();
-    let projects = await discoverProjects(opts.root);
-    if (opts.onlyProject)
-        projects = projects.filter((p) => p.rel === opts.onlyProject);
-    const sum = {
-        projects: 0, scanned: 0, uploaded: 0, thumbs: 0, skipped: 0, failed: 0,
-        unreadable: 0, missing: 0, skippedDot: 0, oversized: 0, rejected: 0, skippedOld: 0, skippedEmptyScope: 0,
-        defaultScope: 0, perProject: [],
-    };
-    for (const p of projects) {
-        const resolved = scopeForProduct(p.product, scope);
-        if (opts.sinceDays > 0 && !opts.onlyProject) {
-            const last = await scopeLastModified(p.abs, resolved.include);
-            if (last === null) {
-                sum.skippedEmptyScope++; // ← 不是"很旧",是范围内什么都没有
-                continue;
-            }
-            if (last < started - opts.sinceDays * 86_400_000) {
-                sum.skippedOld++;
-                continue;
-            }
-        }
-        if (resolved.usedDefault)
-            sum.defaultScope++;
-        try {
-            const s = await syncProject(deps, p, resolved.include, resolved.usedDefault);
-            sum.perProject.push(s);
-        }
-        catch (e) {
-            // 单个项目炸掉不拖垮整轮 —— 但要出现在汇总里
-            sum.perProject.push({
-                project: p.rel, scanned: 0, uploaded: 0, thumbs: 0, skipped: 0, failed: 1,
-                unreadable: 0, missing: 0, skippedDot: 0, oversized: 0, rejected: [], usedDefaultScope: resolved.usedDefault,
-                errors: [e instanceof Error ? e.message : String(e)],
-            });
-        }
-    }
-    for (const s of sum.perProject) {
-        sum.projects++;
-        sum.scanned += s.scanned;
-        sum.uploaded += s.uploaded;
-        sum.thumbs += s.thumbs;
-        sum.skipped += s.skipped;
-        sum.failed += s.failed;
-        sum.unreadable += s.unreadable;
-        sum.missing += s.missing;
-        sum.skippedDot += s.skippedDot;
-        sum.oversized += s.oversized;
-        sum.rejected += s.rejected.length;
-    }
-    log(formatSummary(sum, started, opts));
-    // 只印有动静的项目;**失败必须每轮都印**(它不会自己消失)
-    for (const s of sum.perProject) {
-        if (s.uploaded || s.thumbs || s.failed || s.unreadable || s.oversized || s.rejected.length) {
-            log(`  ${s.project}: +${s.uploaded} 缩略图${s.thumbs} 失败${s.failed}${s.rejected.length ? ` 拒${s.rejected.length}` : ''}`);
-            for (const e of s.errors)
-                log(`    ! ${e}`);
-        }
-    }
-    return sum;
-}
-/** 汇总行。每一类"没做"都占一格 —— 一个悄悄缩小了范围的同步器,和一个坏掉的同步器,日志上一模一样。 */
-export function formatSummary(sum, started, opts) {
-    const ms = (opts.now ?? Date.now()) - started;
-    return (`[sps-sync] 项目 ${sum.projects} · 扫 ${sum.scanned} · 上传 ${sum.uploaded} · 缩略图 ${sum.thumbs} · ` +
-        `已在桶 ${sum.skipped} · 失败 ${sum.failed} · ${ms}ms` +
-        // 基线是 0 ⇒ 非 0 即变化,所以是告警不是趋势
-        (sum.unreadable ? ` · 🔴 因权限读不到而跳过 ${sum.unreadable} 个文件(基线应为 0 —— 立刻查是防线生效还是误伤)` : '') +
-        (sum.rejected ? ` · 🔴 被安全下限拒 ${sum.rejected} 个文件(**只跳过它们**,其余照传)` : '') +
-        (sum.oversized ? ` · 🔴 超单文件上限 ${sum.oversized} 个(未同步)` : '') +
-        (sum.skippedOld ? ` · 因超过 ${opts.sinceDays} 天没动而跳过 ${sum.skippedOld} 个项目` : '') +
-        // 🔴 只报**事实**,不猜原因:实测 195 个项目里有 48 个范围内确实什么都没有
-        //    (coralplatform 的 21 个里 14 个只有 AGENTS.md)—— 那是正常状态,不是"声明写错"。
-        //    一个每轮都在猜错原因的告警,会把人训练成忽略它。
-        (sum.skippedEmptyScope ? ` · 范围内无文件而跳过 ${sum.skippedEmptyScope} 个项目` : '') +
-        (sum.defaultScope ? ` · ⚠️ ${sum.defaultScope} 个项目没有产品声明,用了窄兜底(只 assets/)` : ''));
-}
-//# sourceMappingURL=syncRunner.js.map

package/dist/providers/storage/syncRunner.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"syncRunner.js","sourceRoot":"","sources":["../../../src/providers/storage/syncRunner.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAEjD,OAAO,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AACzE,OAAO,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AACzD,OAAO,EAAiC,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAC9E,OAAO,EAAE,aAAa,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AAsChE,8CAA8C;AAC9C,KAAK,UAAU,gBAAgB,CAAC,KAAa;IAC3C,MAAM,KAAK,GAAG,CAAC,MAAM,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC;IAC9C,OAAO,KAAK,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,GAAG,EAAE,QAAQ,EAAE,kBAAkB,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC;AACrH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,IAAqB;IACrD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC,CAAS,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IACxD,MAAM,GAAG,GAAG,mBAAmB,EAAE,CAAC;IAClC,yCAAyC;IACzC,IAAI,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC;IAEvC,MAAM,IAAI,GAAa;QACrB,OAAO,EAAE,IAAI,CAAC,OAAO,IAAI,IAAI,YAAY,CAAC,GAA8B,CAAC;QACzE,SAAS,EAAE,IAAI,CAAC,SAAS,IAAI,gBAAgB;QAC7C,QAAQ,EAAE,IAAI,CAAC,QAAQ;KACxB,CAAC;IAEF,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;IACvC,MAAM,KAAK,GAAG,aAAa,EAAE,CAAC;IAC9B,IAAI,QAAQ,GAAG,MAAM,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACjD,IAAI,IAAI,CAAC,WAAW;QAAE,QAAQ,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,KAAK,IAAI,CAAC,WAAW,CAAC,CAAC;IAEpF,MAAM,GAAG,GAAgB;QACvB,QAAQ,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC;QACtE,UAAU,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,UAAU,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,UAAU,EAAE,CAAC,EAAE,iBAAiB,EAAE,CAAC;QACxG,YAAY,EAAE,CAAC,EAAE,UAAU,EAAE,EAAE;KAChC,CAAC;IAEF,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;QACzB,MAAM,QAAQ,GAAG,eAAe,CAAC,CAAC,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QACnD,IAAI,IAAI,CAAC,SAAS,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;YAC5C,MAAM,IAAI,GAAG,MAAM,iBAAiB,CAAC,CAAC,CAAC,GAAG,EAAE,QAAQ,CAAC,OAAO,CAAC,CAAC;YAC9D,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;gBAClB,GAAG,CAAC,iBAAiB,EAAE,CAAC,CAAC,qBAAqB;gBAC9C,SAAS;YACX,CAAC;YACD,IAAI,IAAI,GAAG,OAAO,GAAG,IAAI,CAAC,SAAS,GAAG,UAAU,EAAE,CAAC;gBACjD,GAAG,CAAC,UAAU,EAAE,CAAC;gBACjB,SAAS;YACX,CAAC;QACH,CAAC;QACD,IAAI,QAAQ,CAAC,WAAW;YAAE,GAAG,CAAC,YAAY,EAAE,CAAC;QAC7C,IAAI,CAAC;YACH,MAAM,CAAC,GAAG,MAAM,WAAW,CAAC,IAAI,EAAE,CAAC,EAAE,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC,WAAW,CAAC,CAAC;YAC7E,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACzB,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,0BAA0B;YAC1B,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC;gBAClB,OAAO,EAAE,CAAC,CAAC,GAAG,EAAE,OAAO,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC;gBACzE,UAAU,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,UAAU,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,gBAAgB,EAAE,QAAQ,CAAC,WAAW;gBAC5G,MAAM,EAAE,CAAC,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;aACrD,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,KAAK,MAAM,CAAC,IAAI,GAAG,CAAC,UAAU,EAAE,CAAC;QAC/B,GAAG,CAAC,QAAQ,EAAE,CAAC;QACf,GAAG,CAAC,OAAO,IAAI,CAAC,CAAC,OAAO,CAAC;QACzB,GAAG,CAAC,QAAQ,IAAI,CAAC,CAAC,QAAQ,CAAC;QAC3B,GAAG,CAAC,MAAM,IAAI,CAAC,CAAC,MAAM,CAAC;QACvB,GAAG,CAAC,OAAO,IAAI,CAAC,CAAC,OAAO,CAAC;QACzB,GAAG,CAAC,MAAM,IAAI,CAAC,CAAC,MAAM,CAAC;QACvB,GAAG,CAAC,UAAU,IAAI,CAAC,CAAC,UAAU,CAAC;QAC/B,GAAG,CAAC,OAAO,IAAI,CAAC,CAAC,OAAO,CAAC;QACzB,GAAG,CAAC,UAAU,IAAI,CAAC,CAAC,UAAU,CAAC;QAC/B,GAAG,CAAC,SAAS,IAAI,CAAC,CAAC,SAAS,CAAC;QAC7B,GAAG,CAAC,QAAQ,IAAI,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC;IACpC,CAAC;IAED,GAAG,CAAC,aAAa,CAAC,GAAG,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC;IACvC,iCAAiC;IACjC,KAAK,MAAM,CAAC,IAAI,GAAG,CAAC,UAAU,EAAE,CAAC;QAC/B,IAAI,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,UAAU,IAAI,CAAC,CAAC,SAAS,IAAI,CAAC,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC;YAC3F,GAAG,CAAC,KAAK,CAAC,CAAC,OAAO,MAAM,CAAC,CAAC,QAAQ,OAAO,CAAC,CAAC,MAAM,MAAM,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YACvH,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM;gBAAE,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;QAC9C,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,0DAA0D;AAC1D,MAAM,UAAU,aAAa,CAAC,GAAgB,EAAE,OAAe,EAAE,IAAqB;IACpF,MAAM,EAAE,GAAG,CAAC,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC,GAAG,OAAO,CAAC;IAC9C,OAAO,CACL,iBAAiB,GAAG,CAAC,QAAQ,QAAQ,GAAG,CAAC,OAAO,SAAS,GAAG,CAAC,QAAQ,UAAU,GAAG,CAAC,MAAM,KAAK;QAC9F,OAAO,GAAG,CAAC,OAAO,SAAS,GAAG,CAAC,MAAM,MAAM,EAAE,IAAI;QACjD,4BAA4B;QAC5B,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,mBAAmB,GAAG,CAAC,UAAU,8BAA8B,CAAC,CAAC,CAAC,EAAE,CAAC;QACvF,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,gBAAgB,GAAG,CAAC,QAAQ,sBAAsB,CAAC,CAAC,CAAC,EAAE,CAAC;QACxE,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,gBAAgB,GAAG,CAAC,SAAS,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7D,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,UAAU,IAAI,CAAC,SAAS,WAAW,GAAG,CAAC,UAAU,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/E,+CAA+C;QAC/C,iEAAiE;QACjE,8BAA8B;QAC9B,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC,CAAC,gBAAgB,GAAG,CAAC,iBAAiB,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;QAC1E,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,GAAG,CAAC,YAAY,6BAA6B,CAAC,CAAC,CAAC,EAAE,CAAC,CACjF,CAAC;AACJ,CAAC"}

package/dist/providers/storage/syncable.d.ts

@@ -1,47 +0,0 @@
-export type SyncRejection = {
-    code: 'ABSOLUTE';
-    rel: string;
-} | {
-    code: 'DOT_SEGMENT';
-    rel: string;
-} | {
-    code: 'PARENT_SEGMENT';
-    rel: string;
-} | {
-    code: 'EMPTY_SEGMENT';
-    rel: string;
-} | {
-    code: 'ESCAPES_PROJECT';
-    rel: string;
-};
-/**
- * 纯字符串这一半(**不含**软链检查 —— 那半必须走 `isRealUnderRoot`)。
- *
- * 单独抽出来不是为了复用,是为了让**两半都必须被调用**这件事在类型上看得见:
- * 只调这一半的实现会"看起来对",而它恰恰漏掉了唯一挡得住 agent 自造软链的那道。
- */
-export declare function syncableShape(rel: string): SyncRejection | null;
-/**
- * 完整判据 = 形状 + **realpath 围栏**。
- *
- * @param rel      相对项目根的路径(声明枚举出来的)
- * @param absPath  它在盘上的绝对路径
- * @param projectDir 项目根
- */
-export declare function syncable(rel: string, absPath: string, projectDir: string): Promise<SyncRejection | null>;
-/**
- * 对一整批做下限判定。
- *
- * 🔴 **返回全部拒绝项,不是第一个** —— coral 的取舍 3:清单会过期,配套的是
- * **拒绝时把名字报出去**,而不是"尽量列全"。列不全没关系,漏的会被看见。
- *
- * 🔴 **调用方必须"枚举完再推第一个字节"**:围栏若写在上传循环里,
- * 状态码确实会回错,但**排在拒绝项前面的文件已经进桶了** ——
- * 「整体失败」是关于**副作用**的断言,不是关于返回码的(coral 实测,用
- * `assert(uploaded.length === 0)` 才照出来)。
- */
-export declare function screenAll(files: {
-    rel: string;
-    abs: string;
-}[], projectDir: string): Promise<SyncRejection[]>;
-//# sourceMappingURL=syncable.d.ts.map

package/dist/providers/storage/syncable.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"syncable.d.ts","sourceRoot":"","sources":["../../../src/providers/storage/syncable.ts"],"names":[],"mappings":"AA0BA,MAAM,MAAM,aAAa,GACrB;IAAE,IAAI,EAAE,UAAU,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,GACjC;IAAE,IAAI,EAAE,aAAa,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,GACpC;IAAE,IAAI,EAAE,gBAAgB,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,GACvC;IAAE,IAAI,EAAE,eAAe,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,GACtC;IAAE,IAAI,EAAE,iBAAiB,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,CAAC;AAE7C;;;;;GAKG;AACH,wBAAgB,aAAa,CAAC,GAAG,EAAE,MAAM,GAAG,aAAa,GAAG,IAAI,CAU/D;AAED;;;;;;GAMG;AACH,wBAAsB,QAAQ,CAC5B,GAAG,EAAE,MAAM,EACX,OAAO,EAAE,MAAM,EACf,UAAU,EAAE,MAAM,GACjB,OAAO,CAAC,aAAa,GAAG,IAAI,CAAC,CAM/B;AAED;;;;;;;;;;GAUG;AACH,wBAAsB,SAAS,CAC7B,KAAK,EAAE;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,EAAE,EACrC,UAAU,EAAE,MAAM,GACjB,OAAO,CAAC,aAAa,EAAE,CAAC,CAO1B"}

package/dist/providers/storage/syncable.js

@@ -1,84 +0,0 @@
-/**
- * @module        providers/storage/syncable
- * @description   **同步**这条路的安全下限。设计见 `object-storage-and-workspace-sync.md` §2.1 第五条。
- *
- * @layer         providers
- *
- * 🔴🔴 **它与发布的下限方向相反,别互相抄。**
- * ```
- * 发布 publishable()  怕**多发** —— 树里会长出什么由 agent 决定,黑名单追不上 ⇒ **后缀白名单**
- * 同步 syncable()     怕**少发** —— 用户会放 .blend / .psd / .aseprite ⇒ **不能用后缀白名单**
- * ```
- * 抄错方向的表现是:**用户的源文件不见了,而且不报错**。
- * (「照搬一份现成的安全规则」恰恰是最容易顺手抄整份的时候。)
- *
- * 🔴 **声明决定"要什么",本模块决定"绝不给什么"** —— 后者不是产品知识,是主体安全,
- * 且**不可被声明或配置放宽**。它防的是一件具体的事:项目树里有带活 token 的
- * `.claude/settings.local.json`(实测:coral 那侧 `publishable('src/main.js')` 放行,
- * 而 `readFile` 实际拿到 `ANTHROPIC_AUTH_TOKEN=sk-live-…`,落点还是公开可取的前缀)。
- *
- * 🔴 **真正拦住凭据的是"任一路径段以 `.` 开头"这一条**,不是别的:
- * `settings.local.json` 本身后缀无害,是 `.claude/` 这个点开头段拦住的。
- * ⇒ 将来谁"为了支持 `.well-known/` 放宽点开头",会在不知情的情况下把底线整个打开。
- * > 判据:**守卫要标注它靠哪一条在生效** —— 否则放宽的人以为自己在动一条无关的规则。
- */
-import { isRealUnderRoot } from '../../core/pathFence.js';
-/**
- * 纯字符串这一半(**不含**软链检查 —— 那半必须走 `isRealUnderRoot`)。
- *
- * 单独抽出来不是为了复用,是为了让**两半都必须被调用**这件事在类型上看得见:
- * 只调这一半的实现会"看起来对",而它恰恰漏掉了唯一挡得住 agent 自造软链的那道。
- */
-export function syncableShape(rel) {
-    if (!rel)
-        return { code: 'EMPTY_SEGMENT', rel };
-    if (rel.startsWith('/'))
-        return { code: 'ABSOLUTE', rel };
-    for (const seg of rel.split('/')) {
-        if (!seg)
-            return { code: 'EMPTY_SEGMENT', rel };
-        if (seg === '..')
-            return { code: 'PARENT_SEGMENT', rel };
-        // ← 承重的是这条:`.claude/`、`.git/`、`.sps/` 全靠它
-        if (seg.startsWith('.'))
-            return { code: 'DOT_SEGMENT', rel };
-    }
-    return null;
-}
-/**
- * 完整判据 = 形状 + **realpath 围栏**。
- *
- * @param rel      相对项目根的路径(声明枚举出来的)
- * @param absPath  它在盘上的绝对路径
- * @param projectDir 项目根
- */
-export async function syncable(rel, absPath, projectDir) {
-    const shape = syncableShape(rel);
-    if (shape)
-        return shape;
-    // 软链:声明可以指到一个含软链的目录,软链再指向 ~/.coral。字符串判据一条都挡不住。
-    if (!(await isRealUnderRoot(absPath, projectDir)))
-        return { code: 'ESCAPES_PROJECT', rel };
-    return null;
-}
-/**
- * 对一整批做下限判定。
- *
- * 🔴 **返回全部拒绝项,不是第一个** —— coral 的取舍 3:清单会过期,配套的是
- * **拒绝时把名字报出去**,而不是"尽量列全"。列不全没关系,漏的会被看见。
- *
- * 🔴 **调用方必须"枚举完再推第一个字节"**:围栏若写在上传循环里,
- * 状态码确实会回错,但**排在拒绝项前面的文件已经进桶了** ——
- * 「整体失败」是关于**副作用**的断言,不是关于返回码的(coral 实测,用
- * `assert(uploaded.length === 0)` 才照出来)。
- */
-export async function screenAll(files, projectDir) {
-    const out = [];
-    for (const f of files) {
-        const r = await syncable(f.rel, f.abs, projectDir);
-        if (r)
-            out.push(r);
-    }
-    return out;
-}
-//# sourceMappingURL=syncable.js.map

package/dist/providers/storage/syncable.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"syncable.js","sourceRoot":"","sources":["../../../src/providers/storage/syncable.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,OAAO,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAS1D;;;;;GAKG;AACH,MAAM,UAAU,aAAa,CAAC,GAAW;IACvC,IAAI,CAAC,GAAG;QAAE,OAAO,EAAE,IAAI,EAAE,eAAe,EAAE,GAAG,EAAE,CAAC;IAChD,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC;IAC1D,KAAK,MAAM,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;QACjC,IAAI,CAAC,GAAG;YAAE,OAAO,EAAE,IAAI,EAAE,eAAe,EAAE,GAAG,EAAE,CAAC;QAChD,IAAI,GAAG,KAAK,IAAI;YAAE,OAAO,EAAE,IAAI,EAAE,gBAAgB,EAAE,GAAG,EAAE,CAAC;QACzD,0CAA0C;QAC1C,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,GAAG,EAAE,CAAC;IAC/D,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,QAAQ,CAC5B,GAAW,EACX,OAAe,EACf,UAAkB;IAElB,MAAM,KAAK,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC;IACjC,IAAI,KAAK;QAAE,OAAO,KAAK,CAAC;IACxB,gDAAgD;IAChD,IAAI,CAAC,CAAC,MAAM,eAAe,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,iBAAiB,EAAE,GAAG,EAAE,CAAC;IAC3F,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,CAAC,KAAK,UAAU,SAAS,CAC7B,KAAqC,EACrC,UAAkB;IAElB,MAAM,GAAG,GAAoB,EAAE,CAAC;IAChC,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;QACtB,MAAM,CAAC,GAAG,MAAM,QAAQ,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC;QACnD,IAAI,CAAC;YAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACrB,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/seams/storage/index.d.ts

@@ -1,53 +0,0 @@
-/**
- * @module        seams/storage
- * @description   **对象存储 seam** —— 插件读写桶,不必自带 S3 客户端和一套凭据。
- *
- * @layer         seam
- *
- * 类型:**甲 · 工厂型**(进程里一个实现)。
- *
- * 🔴 **"sps 不认识桶"这条前提在 2026-08-19 已被推翻**
- *    (`object-storage-and-workspace-sync.md` §2.1:对象存储改为 sps 的一项能力,sidecar 退役)。
- *    理由是多节点下 studio / coral 都不在工作区那台机器上,唯一共享面就是桶;
- *    而"studio 点发布 → 请 sps 产出发布包并落桶"本身就已经要求 sps 往桶里写字节。
- *    ⚠️ 我的记忆一度停在推翻之前 —— 读到那条旧结论时要先核文档。
- *
- * 🔴 **它只做搬字节,不做账。** id / 索引 / 缩略图 / 分类 / 配额 / 计费 / undo 都在 studio ——
- *    一进 sps,这个公共 npm 包就认识"用户"和"配额"了。
- *
- * ⚠️ **权限是按前缀分的,而且很紧**(单写方规则):
- *    sps 今天的 key 只够 `assets/`;`library/**` 实测 Access Denied。
- *    所以这一层**不承诺你能读任何前缀** —— 读不了会抛,而不是回空。
- *    "库是空的"和"我没权限"混成一个,人会去补素材而不是去补策略。
- */
-import { type Context, Service } from '@deepseek-ai/cordis';
-import type { StorageObject } from '../../providers/storage/StorageBackend.js';
-export declare const STORAGE = "sps.storage";
-export declare const category = "\u5B58\u50A8";
-export declare const description = "\u5BF9\u8C61\u5B58\u50A8(\u8BFB/\u5217/\u5199):\u63D2\u4EF6\u8BFB\u5199\u6876,\u4E0D\u5FC5\u81EA\u5E26 S3 \u5BA2\u6237\u7AEF\u3002";
-export default class StorageSeam extends Service {
-    constructor(ctx: Context);
-    /**
-     * 桶配没配。**没配时 `get`/`list`/`put` 会抛** —— 插件应当先问这一句,
-     * 而不是拿异常当分支(那样"没配"和"读不了"在日志里长得一样)。
-     */
-    configured(): boolean;
-    /** 读一个对象。不存在 ⇒ `null`;连不上/没权限 ⇒ **抛**。 */
-    get(key: string): Promise<Buffer | null>;
-    /** 列一个前缀。 */
-    list(prefix: string): Promise<StorageObject[]>;
-    /**
-     * 写一个对象。
-     * ⚠️ `contentType` 拿不准时**自己决定**,别指望后端猜 ——
-     *    桶是直连的,缺省的 octet-stream 会让预览变成一次下载。
-     */
-    put(key: string, bytes: Buffer, contentType?: string): Promise<void>;
-    private backend;
-    private must;
-}
-declare module '@deepseek-ai/cordis' {
-    interface Context {
-        'sps.storage': StorageSeam;
-    }
-}
-//# sourceMappingURL=index.d.ts.map

package/dist/seams/storage/index.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/seams/storage/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,OAAO,EAAE,KAAK,OAAO,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAC;AAE5D,OAAO,KAAK,EAAkB,aAAa,EAAE,MAAM,2CAA2C,CAAC;AAG/F,eAAO,MAAM,OAAO,gBAAgB,CAAC;AAErC,eAAO,MAAM,QAAQ,iBAAO,CAAC;AAC7B,eAAO,MAAM,WAAW,uIAAmC,CAAC;AAE5D,MAAM,CAAC,OAAO,OAAO,WAAY,SAAQ,OAAO;gBAClC,GAAG,EAAE,OAAO;IAIxB;;;OAGG;IACH,UAAU,IAAI,OAAO;IAIrB,0CAA0C;IACpC,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;IAI9C,aAAa;IACP,IAAI,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,EAAE,CAAC;IAIpD;;;;OAIG;IACG,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,WAAW,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAI1E,OAAO,CAAC,OAAO;IAMf,OAAO,CAAC,IAAI;CAOb;AAGD,OAAO,QAAQ,qBAAqB,CAAC;IACnC,UAAU,OAAO;QACf,aAAa,EAAE,WAAW,CAAC;KAC5B;CACF"}

package/dist/seams/storage/index.js

@@ -1,69 +0,0 @@
-/**
- * @module        seams/storage
- * @description   **对象存储 seam** —— 插件读写桶,不必自带 S3 客户端和一套凭据。
- *
- * @layer         seam
- *
- * 类型:**甲 · 工厂型**(进程里一个实现)。
- *
- * 🔴 **"sps 不认识桶"这条前提在 2026-08-19 已被推翻**
- *    (`object-storage-and-workspace-sync.md` §2.1:对象存储改为 sps 的一项能力,sidecar 退役)。
- *    理由是多节点下 studio / coral 都不在工作区那台机器上,唯一共享面就是桶;
- *    而"studio 点发布 → 请 sps 产出发布包并落桶"本身就已经要求 sps 往桶里写字节。
- *    ⚠️ 我的记忆一度停在推翻之前 —— 读到那条旧结论时要先核文档。
- *
- * 🔴 **它只做搬字节,不做账。** id / 索引 / 缩略图 / 分类 / 配额 / 计费 / undo 都在 studio ——
- *    一进 sps,这个公共 npm 包就认识"用户"和"配额"了。
- *
- * ⚠️ **权限是按前缀分的,而且很紧**(单写方规则):
- *    sps 今天的 key 只够 `assets/`;`library/**` 实测 Access Denied。
- *    所以这一层**不承诺你能读任何前缀** —— 读不了会抛,而不是回空。
- *    "库是空的"和"我没权限"混成一个,人会去补素材而不是去补策略。
- */
-import { Service } from '@deepseek-ai/cordis';
-import { MinioBackend } from '../../providers/storage/MinioBackend.js';
-import { activeStorageConfig } from '../../providers/storage/storageConfig.js';
-export const STORAGE = 'sps.storage';
-export const category = '存储';
-export const description = '对象存储(读/列/写):插件读写桶,不必自带 S3 客户端。';
-export default class StorageSeam extends Service {
-    constructor(ctx) {
-        super(ctx, STORAGE);
-    }
-    /**
-     * 桶配没配。**没配时 `get`/`list`/`put` 会抛** —— 插件应当先问这一句,
-     * 而不是拿异常当分支(那样"没配"和"读不了"在日志里长得一样)。
-     */
-    configured() {
-        return this.backend() !== null;
-    }
-    /** 读一个对象。不存在 ⇒ `null`;连不上/没权限 ⇒ **抛**。 */
-    async get(key) {
-        return this.must().get(key);
-    }
-    /** 列一个前缀。 */
-    async list(prefix) {
-        return this.must().list(prefix);
-    }
-    /**
-     * 写一个对象。
-     * ⚠️ `contentType` 拿不准时**自己决定**,别指望后端猜 ——
-     *    桶是直连的,缺省的 octet-stream 会让预览变成一次下载。
-     */
-    async put(key, bytes, contentType) {
-        return this.must().put(key, bytes, contentType);
-    }
-    backend() {
-        // 每次现取:改了配置不用重挂插件(同 credentials 那条理由)
-        const cfg = activeStorageConfig();
-        return cfg ? new MinioBackend(cfg) : null;
-    }
-    must() {
-        const b = this.backend();
-        if (!b) {
-            throw new Error('对象存储没配(~/.coral/storage.json)—— 先用 configured() 问一句');
-        }
-        return b;
-    }
-}
-//# sourceMappingURL=index.js.map

package/dist/seams/storage/index.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/seams/storage/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,OAAO,EAAgB,OAAO,EAAE,MAAM,qBAAqB,CAAC;AAC5D,OAAO,EAAE,YAAY,EAAE,MAAM,yCAAyC,CAAC;AAEvE,OAAO,EAAE,mBAAmB,EAAE,MAAM,0CAA0C,CAAC;AAE/E,MAAM,CAAC,MAAM,OAAO,GAAG,aAAa,CAAC;AAErC,MAAM,CAAC,MAAM,QAAQ,GAAG,IAAI,CAAC;AAC7B,MAAM,CAAC,MAAM,WAAW,GAAG,gCAAgC,CAAC;AAE5D,MAAM,CAAC,OAAO,OAAO,WAAY,SAAQ,OAAO;IAC9C,YAAY,GAAY;QACtB,KAAK,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;IACtB,CAAC;IAED;;;OAGG;IACH,UAAU;QACR,OAAO,IAAI,CAAC,OAAO,EAAE,KAAK,IAAI,CAAC;IACjC,CAAC;IAED,0CAA0C;IAC1C,KAAK,CAAC,GAAG,CAAC,GAAW;QACnB,OAAO,IAAI,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAC9B,CAAC;IAED,aAAa;IACb,KAAK,CAAC,IAAI,CAAC,MAAc;QACvB,OAAO,IAAI,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAClC,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,GAAG,CAAC,GAAW,EAAE,KAAa,EAAE,WAAoB;QACxD,OAAO,IAAI,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,EAAE,WAAW,CAAC,CAAC;IAClD,CAAC;IAEO,OAAO;QACb,sCAAsC;QACtC,MAAM,GAAG,GAAG,mBAAmB,EAAE,CAAC;QAClC,OAAO,GAAG,CAAC,CAAC,CAAC,IAAI,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAC5C,CAAC;IAEO,IAAI;QACV,MAAM,CAAC,GAAG,IAAI,CAAC,OAAO,EAAE,CAAC;QACzB,IAAI,CAAC,CAAC,EAAE,CAAC;YACP,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAC;QACzE,CAAC;QACD,OAAO,CAAC,CAAC;IACX,CAAC;CACF"}