@cosui/genui-toolkit 1.0.0

package/README.md

@@ -0,0 +1,43 @@
+# GenUI Toolkit
+
+GenUI 项目的本地预览、规则检查与发布工具。
+
+## 安装
+
+```bash
+npm i @cosui/genui-toolkit -g
+```
+
+## 使用
+
+```bash
+genui preview ./project.zip
+genui check ./project.zip
+genui login
+genui list
+genui publish -p ./project.zip -n "应用名称" -l ./logo.png -b "应用简介" --description "应用摘要"
+genui publish -a existing-appkey --description "新的应用摘要"
+genui publish -a existing-appkey --description "新的应用摘要" --dry-run
+genui logout
+```
+
+`publish` 会读取当前目录的 `app.json`，命令行显式参数优先于配置文件：
+
+```json
+{
+  "appkey": "existing-appkey",
+  "projectPath": "./project.zip",
+  "name": "应用名称",
+  "logo": "./logo.png",
+  "brief": "应用简介",
+  "description": "应用摘要"
+}
+```
+
+配置完成后可直接执行 `genui publish`。`--dry-run` 会完成检查、登录、权限和应用信息合并，展示最终信息后停止，不上传或提交；确认信息无误后可用相同参数追加 `--yes` 正式提交。`--dry-run` 和 `--yes` 仅接受命令行传入，不从 `app.json` 读取。
+
+`check` 只接受单个 HTML、ZIP：
+
+```bash
+genui check ./page.html --format json
+```

package/bin/genui

@@ -0,0 +1,2 @@
+#!/usr/bin/env node
+require('../dist/cli.js');

package/dist/auth.d.ts

@@ -0,0 +1,3 @@
+export declare function runLogin(argv: string[]): Promise<void>;
+export declare function runLogout(argv: string[]): Promise<void>;
+//# sourceMappingURL=auth.d.ts.map

package/dist/auth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../src/auth.ts"],"names":[],"mappings":"AAmCA,wBAAsB,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAsG5D;AAED,wBAAsB,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAO7D"}

package/dist/auth.js

@@ -0,0 +1,132 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.runLogin = runLogin;
+exports.runLogout = runLogout;
+const node_crypto_1 = require("node:crypto");
+const node_child_process_1 = require("node:child_process");
+const node_http_1 = __importDefault(require("node:http"));
+const config_js_1 = require("./config.js");
+const output_js_1 = require("./output.js");
+const LOGIN_URL = 'https://genui.baidu.com/pages/login.html';
+const LOGIN_ORIGIN = new URL(LOGIN_URL).origin;
+const TIMEOUT_MS = 120_000;
+function openBrowser(url) {
+    const command = process.platform === 'darwin'
+        ? 'open'
+        : process.platform === 'win32'
+            ? 'cmd'
+            : 'xdg-open';
+    const args = process.platform === 'win32'
+        ? ['/c', 'start', '', url]
+        : [url];
+    (0, node_child_process_1.spawn)(command, args, { detached: true, stdio: 'ignore' }).unref();
+}
+function sendJson(response, status, body) {
+    response.writeHead(status, {
+        'Access-Control-Allow-Origin': LOGIN_ORIGIN,
+        'Content-Type': 'application/json; charset=utf-8',
+    });
+    response.end(JSON.stringify(body));
+}
+async function runLogin(argv) {
+    if (argv.length) {
+        throw new Error('login 命令不接受参数');
+    }
+    if ((0, config_js_1.getToken)()) {
+        output_js_1.output.success('当前已登录');
+        return;
+    }
+    const state = (0, node_crypto_1.randomUUID)();
+    const token = await new Promise((resolve, reject) => {
+        let timer;
+        const server = node_http_1.default.createServer((request, response) => {
+            if (request.method === 'OPTIONS') {
+                response.writeHead(204, {
+                    'Access-Control-Allow-Origin': LOGIN_ORIGIN,
+                    'Access-Control-Allow-Headers': 'content-type',
+                    'Access-Control-Allow-Methods': 'POST, OPTIONS',
+                    'Access-Control-Allow-Private-Network': 'true',
+                });
+                response.end();
+                return;
+            }
+            const requestUrl = new URL(request.url || '/', 'http://127.0.0.1');
+            if (request.method !== 'POST' || requestUrl.pathname !== '/auth/postToken') {
+                sendJson(response, 404, { status: 404, errMsg: 'Not found' });
+                return;
+            }
+            let raw = '';
+            request.setEncoding('utf8');
+            request.on('data', chunk => {
+                raw += chunk;
+                if (raw.length > 64 * 1024) {
+                    request.destroy();
+                }
+            });
+            request.on('end', async () => {
+                try {
+                    const body = JSON.parse(raw);
+                    if (typeof body.token !== 'string'
+                        || !body.token
+                        || body.state !== state) {
+                        sendJson(response, 400, {
+                            status: 400,
+                            errMsg: 'Invalid token or state',
+                        });
+                        return;
+                    }
+                    if (!(0, config_js_1.isValidToken)(body.token)) {
+                        throw new Error('登录页未返回有效 JWT');
+                    }
+                    sendJson(response, 200, { status: 0, errMsg: '' });
+                    if (timer) {
+                        clearTimeout(timer);
+                    }
+                    setTimeout(() => {
+                        server.close();
+                    }, 400);
+                    resolve(body.token);
+                }
+                catch (error) {
+                    sendJson(response, 400, {
+                        status: 400,
+                        errMsg: error instanceof Error ? error.message : String(error),
+                    });
+                }
+            });
+        });
+        server.on('error', reject);
+        server.listen(0, '127.0.0.1', () => {
+            const address = server.address();
+            if (!address || typeof address === 'string') {
+                server.close();
+                reject(new Error('登录服务启动失败'));
+                return;
+            }
+            const url = new URL(LOGIN_URL);
+            url.searchParams.set('host', `http://127.0.0.1:${address.port}`);
+            url.searchParams.set('state', state);
+            url.searchParams.set('api-host', LOGIN_URL);
+            output_js_1.output.info('请在浏览器完成百度账号登录：');
+            output_js_1.output.info(`  ${url}`);
+            openBrowser(url.toString());
+            timer = setTimeout(() => {
+                server.close();
+                reject(new Error('登录超时，请重试'));
+            }, TIMEOUT_MS);
+        });
+    });
+    (0, config_js_1.saveToken)(token);
+    output_js_1.output.success('登录成功');
+}
+async function runLogout(argv) {
+    if (argv.length) {
+        throw new Error('logout 命令不接受参数');
+    }
+    (0, config_js_1.clearToken)();
+    output_js_1.output.success('登出成功');
+}
+//# sourceMappingURL=auth.js.map

package/dist/auth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.js","sourceRoot":"","sources":["../src/auth.ts"],"names":[],"mappings":";;;;;AAmCA,4BAsGC;AAED,8BAOC;AAlJD,6CAAuC;AACvC,2DAAyC;AACzC,0DAA6B;AAC7B,2CAA0E;AAC1E,2CAAmC;AAEnC,MAAM,SAAS,GAAG,0CAA0C,CAAC;AAC7D,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC;AAC/C,MAAM,UAAU,GAAG,OAAO,CAAC;AAO3B,SAAS,WAAW,CAAC,GAAW;IAC5B,MAAM,OAAO,GAAG,OAAO,CAAC,QAAQ,KAAK,QAAQ;QACzC,CAAC,CAAC,MAAM;QACR,CAAC,CAAC,OAAO,CAAC,QAAQ,KAAK,OAAO;YAC1B,CAAC,CAAC,KAAK;YACP,CAAC,CAAC,UAAU,CAAC;IACrB,MAAM,IAAI,GAAG,OAAO,CAAC,QAAQ,KAAK,OAAO;QACrC,CAAC,CAAC,CAAC,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,GAAG,CAAC;QAC1B,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IACZ,IAAA,0BAAK,EAAC,OAAO,EAAE,IAAI,EAAE,EAAC,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAC,CAAC,CAAC,KAAK,EAAE,CAAC;AACpE,CAAC;AAED,SAAS,QAAQ,CAAC,QAA6B,EAAE,MAAc,EAAE,IAAY;IACzE,QAAQ,CAAC,SAAS,CAAC,MAAM,EAAE;QACvB,6BAA6B,EAAE,YAAY;QAC3C,cAAc,EAAE,iCAAiC;KACpD,CAAC,CAAC;IACH,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;AACvC,CAAC;AAEM,KAAK,UAAU,QAAQ,CAAC,IAAc;IACzC,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;QACd,MAAM,IAAI,KAAK,CAAC,eAAe,CAAC,CAAC;IACrC,CAAC;IAED,IAAI,IAAA,oBAAQ,GAAE,EAAE,CAAC;QACb,kBAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QACxB,OAAO;IACX,CAAC;IAED,MAAM,KAAK,GAAG,IAAA,wBAAU,GAAE,CAAC;IAE3B,MAAM,KAAK,GAAG,MAAM,IAAI,OAAO,CAAS,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACxD,IAAI,KAAiC,CAAC;QACtC,MAAM,MAAM,GAAG,mBAAI,CAAC,YAAY,CAAC,CAAC,OAAO,EAAE,QAAQ,EAAE,EAAE;YACnD,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;gBAC/B,QAAQ,CAAC,SAAS,CAAC,GAAG,EAAE;oBACpB,6BAA6B,EAAE,YAAY;oBAC3C,8BAA8B,EAAE,cAAc;oBAC9C,8BAA8B,EAAE,eAAe;oBAC/C,sCAAsC,EAAE,MAAM;iBACjD,CAAC,CAAC;gBACH,QAAQ,CAAC,GAAG,EAAE,CAAC;gBACf,OAAO;YACX,CAAC;YAED,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,IAAI,GAAG,EAAE,kBAAkB,CAAC,CAAC;YACnE,IAAI,OAAO,CAAC,MAAM,KAAK,MAAM,IAAI,UAAU,CAAC,QAAQ,KAAK,iBAAiB,EAAE,CAAC;gBACzE,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAC,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,WAAW,EAAC,CAAC,CAAC;gBAC5D,OAAO;YACX,CAAC;YAED,IAAI,GAAG,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;YAC5B,OAAO,CAAC,EAAE,CAAC,MAAM,EAAE,KAAK,CAAC,EAAE;gBACvB,GAAG,IAAI,KAAK,CAAC;gBACb,IAAI,GAAG,CAAC,MAAM,GAAG,EAAE,GAAG,IAAI,EAAE,CAAC;oBACzB,OAAO,CAAC,OAAO,EAAE,CAAC;gBACtB,CAAC;YACL,CAAC,CAAC,CAAC;YACH,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,KAAK,IAAI,EAAE;gBACzB,IAAI,CAAC;oBACD,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAsB,CAAC;oBAClD,IACI,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ;2BAC3B,CAAC,IAAI,CAAC,KAAK;2BACX,IAAI,CAAC,KAAK,KAAK,KAAK,EACzB,CAAC;wBACC,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE;4BACpB,MAAM,EAAE,GAAG;4BACX,MAAM,EAAE,wBAAwB;yBACnC,CAAC,CAAC;wBACH,OAAO;oBACX,CAAC;oBAED,IAAI,CAAC,IAAA,wBAAY,EAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;wBAC5B,MAAM,IAAI,KAAK,CAAC,cAAc,CAAC,CAAC;oBACpC,CAAC;oBAED,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAC,MAAM,EAAE,CAAC,EAAE,MAAM,EAAE,EAAE,EAAC,CAAC,CAAC;oBACjD,IAAI,KAAK,EAAE,CAAC;wBACR,YAAY,CAAC,KAAK,CAAC,CAAC;oBACxB,CAAC;oBACD,UAAU,CAAC,GAAG,EAAE;wBACZ,MAAM,CAAC,KAAK,EAAE,CAAC;oBACnB,CAAC,EAAE,GAAG,CAAC,CAAC;oBACR,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;gBACxB,CAAC;gBACD,OAAO,KAAK,EAAE,CAAC;oBACX,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE;wBACpB,MAAM,EAAE,GAAG;wBACX,MAAM,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;qBACjE,CAAC,CAAC;gBACP,CAAC;YACL,CAAC,CAAC,CAAC;QACP,CAAC,CAAC,CAAC;QAEH,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAC3B,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,WAAW,EAAE,GAAG,EAAE;YAC/B,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,EAAE,CAAC;YACjC,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;gBAC1C,MAAM,CAAC,KAAK,EAAE,CAAC;gBACf,MAAM,CAAC,IAAI,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC;gBAC9B,OAAO;YACX,CAAC;YAED,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,CAAC;YAC/B,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,EAAE,oBAAoB,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;YACjE,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;YACrC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC;YAC5C,kBAAM,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;YAC9B,kBAAM,CAAC,IAAI,CAAC,KAAK,GAAG,EAAE,CAAC,CAAC;YACxB,WAAW,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC;YAC5B,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;gBACpB,MAAM,CAAC,KAAK,EAAE,CAAC;gBACf,MAAM,CAAC,IAAI,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC;YAClC,CAAC,EAAE,UAAU,CAAC,CAAC;QACnB,CAAC,CAAC,CAAC;IACP,CAAC,CAAC,CAAC;IAEH,IAAA,qBAAS,EAAC,KAAK,CAAC,CAAC;IACjB,kBAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;AAC3B,CAAC;AAEM,KAAK,UAAU,SAAS,CAAC,IAAc;IAC1C,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;QACd,MAAM,IAAI,KAAK,CAAC,gBAAgB,CAAC,CAAC;IACtC,CAAC;IAED,IAAA,sBAAU,GAAE,CAAC;IACb,kBAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;AAC3B,CAAC"}

package/dist/check/artifact.d.ts

@@ -0,0 +1,16 @@
+import type { Artifact, CheckOptions } from './types';
+export declare const DEFAULT_MAX_ARTIFACT_BYTES: number;
+export declare const DEFAULT_MAX_ZIP_ENTRIES = 1000;
+export declare const ALLOWED_ARTIFACT_EXTENSIONS: Set<string>;
+export declare function isMacOsMetadata(entryPath: string): boolean;
+export declare function formatMegabytes(bytes: number): string;
+export declare class ArtifactCheckError extends Error {
+    readonly ruleId: string;
+    readonly file: string;
+    constructor(ruleId: string, file: string, message: string);
+}
+/**
+ * 将本地产物完整读入内存，供后续规则共享同一份只读内容
+ */
+export declare function readArtifact(inputPath: string, options?: CheckOptions): Promise<Artifact>;
+//# sourceMappingURL=artifact.d.ts.map

package/dist/check/artifact.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"artifact.d.ts","sourceRoot":"","sources":["../../src/check/artifact.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EACR,QAAQ,EAIR,YAAY,EACf,MAAM,SAAS,CAAC;AAEjB,eAAO,MAAM,0BAA0B,QAAkB,CAAC;AAC1D,eAAO,MAAM,uBAAuB,OAAO,CAAC;AAC5C,eAAO,MAAM,2BAA2B,aAatC,CAAC;AAEH,wBAAgB,eAAe,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAI1D;AAED,wBAAgB,eAAe,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAGrD;AAcD,qBAAa,kBAAmB,SAAQ,KAAK;IAErC,QAAQ,CAAC,MAAM,EAAE,MAAM;IACvB,QAAQ,CAAC,IAAI,EAAE,MAAM;gBADZ,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,MAAM,EACrB,OAAO,EAAE,MAAM;CAItB;AAuHD;;GAEG;AACH,wBAAsB,YAAY,CAC9B,SAAS,EAAE,MAAM,EACjB,OAAO,GAAE,YAAiB,GAC3B,OAAO,CAAC,QAAQ,CAAC,CAsGnB"}

package/dist/check/artifact.js

@@ -0,0 +1,209 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ArtifactCheckError = exports.ALLOWED_ARTIFACT_EXTENSIONS = exports.DEFAULT_MAX_ZIP_ENTRIES = exports.DEFAULT_MAX_ARTIFACT_BYTES = void 0;
+exports.isMacOsMetadata = isMacOsMetadata;
+exports.formatMegabytes = formatMegabytes;
+exports.readArtifact = readArtifact;
+const promises_1 = __importDefault(require("node:fs/promises"));
+const node_path_1 = __importDefault(require("node:path"));
+const yauzl_1 = require("yauzl");
+const node_stream_1 = require("node:stream");
+exports.DEFAULT_MAX_ARTIFACT_BYTES = 8 * 1024 * 1024;
+exports.DEFAULT_MAX_ZIP_ENTRIES = 1000;
+exports.ALLOWED_ARTIFACT_EXTENSIONS = new Set([
+    '.html',
+    '.css',
+    '.js',
+    '.png',
+    '.jpg',
+    '.jpeg',
+    '.gif',
+    '.webp',
+    '.svg',
+    '.woff',
+    '.woff2',
+    '.json',
+]);
+function isMacOsMetadata(entryPath) {
+    const segments = entryPath.split('/');
+    const name = segments[segments.length - 1];
+    return segments[0] === '__MACOSX' || name === '.DS_Store' || name.startsWith('._');
+}
+function formatMegabytes(bytes) {
+    const megabytes = bytes / 1024 / 1024;
+    return `${Number(megabytes.toFixed(megabytes >= 1 ? 2 : 6))} MB`;
+}
+function isHttpUrl(value) {
+    return /^https?:\/\//i.test(value);
+}
+function getArtifactName(inputPath) {
+    if (!isHttpUrl(inputPath)) {
+        return node_path_1.default.basename(inputPath);
+    }
+    const name = node_path_1.default.posix.basename(new URL(inputPath).pathname);
+    return /\.(html?|zip)$/i.test(name) ? name : 'index.html';
+}
+class ArtifactCheckError extends Error {
+    ruleId;
+    file;
+    constructor(ruleId, file, message) {
+        super(message);
+        this.ruleId = ruleId;
+        this.file = file;
+    }
+}
+exports.ArtifactCheckError = ArtifactCheckError;
+/**
+ * 根据文件头识别产物类型
+ * 非 ZIP 内容交给后续文件格式解析规则判断
+ */
+function identifyArtifact(bytes) {
+    const isZip = bytes[0] === 0x50 && bytes[1] === 0x4b && (bytes[2] === 0x03 && bytes[3] === 0x04
+        || bytes[2] === 0x05 && bytes[3] === 0x06
+        || bytes[2] === 0x07 && bytes[3] === 0x08);
+    return isZip ? 'zip' : 'html';
+}
+async function readStream(stream, maxBytes, file = '', sizeName = '产物解压后大小') {
+    const chunks = [];
+    let size = 0;
+    for await (const chunk of stream) {
+        const bytes = Buffer.isBuffer(chunk) ? chunk : Buffer.from(chunk);
+        size += bytes.length;
+        if (size > maxBytes) {
+            stream.destroy();
+            throw new ArtifactCheckError('artifact', file, `${sizeName}超过 ${formatMegabytes(maxBytes)}，请压缩或删除不必要资源后重新提交`);
+        }
+        chunks.push(bytes);
+    }
+    return Buffer.concat(chunks, size);
+}
+/**
+ * 逐条解压到内存文件表
+ */
+async function readZipFiles(bytes, maxArtifactBytes, maxZipEntries) {
+    const zip = await (0, yauzl_1.fromBufferPromise)(bytes, {
+        strictFileNames: true,
+        validateEntrySizes: true,
+    });
+    const files = new Map();
+    const entries = [];
+    let entryCount = 0;
+    let totalUncompressedBytes = 0;
+    for await (const entry of zip.eachEntry()) {
+        entryCount += 1;
+        if (entryCount > maxZipEntries) {
+            throw new ArtifactCheckError('artifact', '', `ZIP 内文件数量超过 ${maxZipEntries} 个，请删除不必要的文件后重新打包`);
+        }
+        if (isMacOsMetadata(entry.fileName)) {
+            continue;
+        }
+        entries.push({
+            fileName: entry.fileName,
+            externalFileAttributes: entry.externalFileAttributes,
+            versionMadeBy: entry.versionMadeBy,
+            generalPurposeBitFlag: entry.generalPurposeBitFlag,
+        });
+        if (entry.fileName.endsWith('/')) {
+            continue;
+        }
+        if ((entry.generalPurposeBitFlag & 0x1) !== 0) {
+            files.set(entry.fileName, { path: entry.fileName, bytes: new Uint8Array() });
+            continue;
+        }
+        totalUncompressedBytes += entry.uncompressedSize;
+        if (totalUncompressedBytes > maxArtifactBytes) {
+            throw new ArtifactCheckError('artifact', '', `代码包解压后大小超过 ${formatMegabytes(maxArtifactBytes)}，请压缩或删除不必要资源后重新提交`);
+        }
+        if (!exports.ALLOWED_ARTIFACT_EXTENSIONS.has(node_path_1.default.posix.extname(entry.fileName).toLowerCase())) {
+            continue;
+        }
+        const fileBytes = await readStream(await zip.openReadStreamPromise(entry), maxArtifactBytes - (totalUncompressedBytes - entry.uncompressedSize));
+        if (!files.has(entry.fileName)) {
+            files.set(entry.fileName, {
+                path: entry.fileName,
+                bytes: fileBytes,
+            });
+        }
+    }
+    return { files, entries };
+}
+/**
+ * 将本地产物完整读入内存，供后续规则共享同一份只读内容
+ */
+async function readArtifact(inputPath, options = {}) {
+    const remote = isHttpUrl(inputPath);
+    const artifactPath = remote ? inputPath : node_path_1.default.resolve(inputPath);
+    const artifactName = getArtifactName(inputPath);
+    const maxArtifactBytes = options.maxArtifactBytes ?? exports.DEFAULT_MAX_ARTIFACT_BYTES;
+    const maxZipEntries = options.maxZipEntries ?? exports.DEFAULT_MAX_ZIP_ENTRIES;
+    let bytes = Buffer.alloc(0);
+    try {
+        if (remote) {
+            const response = await fetch(inputPath);
+            if (!response.ok) {
+                throw new Error(`远程文件下载失败: ${response.status} ${response.statusText}`);
+            }
+            const contentLength = Number(response.headers.get('content-length'));
+            if (Number.isFinite(contentLength) && contentLength > maxArtifactBytes) {
+                throw new ArtifactCheckError('artifact', artifactName, `文件大小超过 ${formatMegabytes(maxArtifactBytes)}，请压缩或删除不必要资源后重新提交`);
+            }
+            bytes = response.body
+                ? Buffer.from(await readStream(node_stream_1.Readable.fromWeb(response.body), maxArtifactBytes, artifactName, '文件大小'))
+                : Buffer.alloc(0);
+        }
+        else {
+            const stats = await promises_1.default.stat(artifactPath);
+            if (stats.size > maxArtifactBytes) {
+                throw new ArtifactCheckError('artifact', artifactName, `文件大小超过 ${formatMegabytes(maxArtifactBytes)}，请压缩或删除不必要资源后重新提交`);
+            }
+            bytes = await promises_1.default.readFile(artifactPath);
+        }
+    }
+    catch (error) {
+        if (error instanceof ArtifactCheckError) {
+            throw error;
+        }
+        if (remote && error instanceof Error) {
+            throw error;
+        }
+        throw new Error('文件无法读取，请确认文件存在且当前用户有读取权限');
+    }
+    const type = identifyArtifact(bytes);
+    let files = new Map();
+    let zipEntries = [];
+    if (type === 'zip') {
+        try {
+            const zip = await readZipFiles(bytes, maxArtifactBytes, maxZipEntries);
+            files = zip.files;
+            zipEntries = zip.entries;
+        }
+        catch (error) {
+            if (error instanceof ArtifactCheckError) {
+                throw new ArtifactCheckError(error.ruleId, error.file || artifactName, error.message);
+            }
+            const message = error instanceof Error ? error.message : String(error);
+            if (['absolute path:', 'invalid relative path:', 'invalid characters in fileName:']
+                .some(prefix => message.startsWith(prefix))) {
+                throw new ArtifactCheckError('file', artifactName, 'ZIP 文件路径不符合要求，请将所有文件放在项目根目录下并使用相对路径，然后重新打包上传');
+            }
+            throw new ArtifactCheckError('artifact', artifactName, 'ZIP 文件损坏或无法解析，请检查文件是否完整后重新打包');
+        }
+    }
+    else {
+        files = new Map([[
+                artifactName,
+                { path: artifactName, bytes },
+            ]]);
+    }
+    return {
+        path: artifactPath,
+        type,
+        bytes,
+        files,
+        zipEntries,
+    };
+}
+//# sourceMappingURL=artifact.js.map

package/dist/check/artifact.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"artifact.js","sourceRoot":"","sources":["../../src/check/artifact.ts"],"names":[],"mappings":";;;;;;AA8BA,0CAIC;AAED,0CAGC;AAgJD,oCAyGC;AAhSD,gEAAkC;AAClC,0DAA6B;AAC7B,iCAAwC;AACxC,6CAAqC;AAUxB,QAAA,0BAA0B,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC;AAC7C,QAAA,uBAAuB,GAAG,IAAI,CAAC;AAC/B,QAAA,2BAA2B,GAAG,IAAI,GAAG,CAAC;IAC/C,OAAO;IACP,MAAM;IACN,KAAK;IACL,MAAM;IACN,MAAM;IACN,OAAO;IACP,MAAM;IACN,OAAO;IACP,MAAM;IACN,OAAO;IACP,QAAQ;IACR,OAAO;CACV,CAAC,CAAC;AAEH,SAAgB,eAAe,CAAC,SAAiB;IAC7C,MAAM,QAAQ,GAAG,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACtC,MAAM,IAAI,GAAG,QAAQ,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IAC3C,OAAO,QAAQ,CAAC,CAAC,CAAC,KAAK,UAAU,IAAI,IAAI,KAAK,WAAW,IAAI,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;AACvF,CAAC;AAED,SAAgB,eAAe,CAAC,KAAa;IACzC,MAAM,SAAS,GAAG,KAAK,GAAG,IAAI,GAAG,IAAI,CAAC;IACtC,OAAO,GAAG,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,SAAS,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;AACrE,CAAC;AAED,SAAS,SAAS,CAAC,KAAa;IAC5B,OAAO,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AACvC,CAAC;AAED,SAAS,eAAe,CAAC,SAAiB;IACtC,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,EAAE,CAAC;QACxB,OAAO,mBAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;IACpC,CAAC;IACD,MAAM,IAAI,GAAG,mBAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,GAAG,CAAC,SAAS,CAAC,CAAC,QAAQ,CAAC,CAAC;IAC9D,OAAO,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,YAAY,CAAC;AAC9D,CAAC;AAED,MAAa,kBAAmB,SAAQ,KAAK;IAE5B;IACA;IAFb,YACa,MAAc,EACd,IAAY,EACrB,OAAe;QAEf,KAAK,CAAC,OAAO,CAAC,CAAC;QAJN,WAAM,GAAN,MAAM,CAAQ;QACd,SAAI,GAAJ,IAAI,CAAQ;IAIzB,CAAC;CACJ;AARD,gDAQC;AAED;;;GAGG;AACH,SAAS,gBAAgB,CAAC,KAAiB;IACvC,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,IAAI;WACxF,KAAK,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,IAAI;WACtC,KAAK,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,IAAI,CAC5C,CAAC;IACF,OAAO,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC;AAClC,CAAC;AAED,KAAK,UAAU,UAAU,CACrB,MAAgB,EAChB,QAAgB,EAChB,IAAI,GAAG,EAAE,EACT,QAAQ,GAAG,SAAS;IAEpB,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,IAAI,IAAI,GAAG,CAAC,CAAC;IAEb,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC/B,MAAM,KAAK,GAAG,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAClE,IAAI,IAAI,KAAK,CAAC,MAAM,CAAC;QAErB,IAAI,IAAI,GAAG,QAAQ,EAAE,CAAC;YAClB,MAAM,CAAC,OAAO,EAAE,CAAC;YACjB,MAAM,IAAI,kBAAkB,CACxB,UAAU,EACV,IAAI,EACJ,GAAG,QAAQ,MAAM,eAAe,CAAC,QAAQ,CAAC,mBAAmB,CAChE,CAAC;QACN,CAAC;QAED,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACvB,CAAC;IAED,OAAO,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;AACvC,CAAC;AAED;;GAEG;AACH,KAAK,UAAU,YAAY,CACvB,KAAa,EACb,gBAAwB,EACxB,aAAqB;IAKrB,MAAM,GAAG,GAAG,MAAM,IAAA,yBAAiB,EAAC,KAAK,EAAE;QACvC,eAAe,EAAE,IAAI;QACrB,kBAAkB,EAAE,IAAI;KAC3B,CAAC,CAAC;IAEH,MAAM,KAAK,GAAG,IAAI,GAAG,EAAwB,CAAC;IAC9C,MAAM,OAAO,GAAuB,EAAE,CAAC;IACvC,IAAI,UAAU,GAAG,CAAC,CAAC;IACnB,IAAI,sBAAsB,GAAG,CAAC,CAAC;IAE/B,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,GAAG,CAAC,SAAS,EAAE,EAAE,CAAC;QACxC,UAAU,IAAI,CAAC,CAAC;QAChB,IAAI,UAAU,GAAG,aAAa,EAAE,CAAC;YAC7B,MAAM,IAAI,kBAAkB,CACxB,UAAU,EACV,EAAE,EACF,eAAe,aAAa,mBAAmB,CAClD,CAAC;QACN,CAAC;QACD,IAAI,eAAe,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC;YAClC,SAAS;QACb,CAAC;QACD,OAAO,CAAC,IAAI,CAAC;YACT,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,sBAAsB,EAAE,KAAK,CAAC,sBAAsB;YACpD,aAAa,EAAE,KAAK,CAAC,aAAa;YAClC,qBAAqB,EAAE,KAAK,CAAC,qBAAqB;SACrD,CAAC,CAAC;QAEH,IAAI,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;YAC/B,SAAS;QACb,CAAC;QAED,IAAI,CAAC,KAAK,CAAC,qBAAqB,GAAG,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;YAC5C,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,EAAE,EAAC,IAAI,EAAE,KAAK,CAAC,QAAQ,EAAE,KAAK,EAAE,IAAI,UAAU,EAAE,EAAC,CAAC,CAAC;YAC3E,SAAS;QACb,CAAC;QAED,sBAAsB,IAAI,KAAK,CAAC,gBAAgB,CAAC;QACjD,IAAI,sBAAsB,GAAG,gBAAgB,EAAE,CAAC;YAC5C,MAAM,IAAI,kBAAkB,CACxB,UAAU,EACV,EAAE,EACF,cAAc,eAAe,CAAC,gBAAgB,CAAC,mBAAmB,CACrE,CAAC;QACN,CAAC;QAED,IAAI,CAAC,mCAA2B,CAAC,GAAG,CAAC,mBAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,WAAW,EAAE,CAAC,EAAE,CAAC;YACrF,SAAS;QACb,CAAC;QACD,MAAM,SAAS,GAAG,MAAM,UAAU,CAC9B,MAAM,GAAG,CAAC,qBAAqB,CAAC,KAAK,CAAC,EACtC,gBAAgB,GAAG,CAAC,sBAAsB,GAAG,KAAK,CAAC,gBAAgB,CAAC,CACvE,CAAC;QAEF,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC7B,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,EAAE;gBACtB,IAAI,EAAE,KAAK,CAAC,QAAQ;gBACpB,KAAK,EAAE,SAAS;aACnB,CAAC,CAAC;QACP,CAAC;IACL,CAAC;IAED,OAAO,EAAC,KAAK,EAAE,OAAO,EAAC,CAAC;AAC5B,CAAC;AAED;;GAEG;AACI,KAAK,UAAU,YAAY,CAC9B,SAAiB,EACjB,UAAwB,EAAE;IAE1B,MAAM,MAAM,GAAG,SAAS,CAAC,SAAS,CAAC,CAAC;IACpC,MAAM,YAAY,GAAG,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,mBAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IAClE,MAAM,YAAY,GAAG,eAAe,CAAC,SAAS,CAAC,CAAC;IAChD,MAAM,gBAAgB,GAAG,OAAO,CAAC,gBAAgB,IAAI,kCAA0B,CAAC;IAChF,MAAM,aAAa,GAAG,OAAO,CAAC,aAAa,IAAI,+BAAuB,CAAC;IACvE,IAAI,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAE5B,IAAI,CAAC;QACD,IAAI,MAAM,EAAE,CAAC;YACT,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,SAAS,CAAC,CAAC;YACxC,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;gBACf,MAAM,IAAI,KAAK,CAAC,aAAa,QAAQ,CAAC,MAAM,IAAI,QAAQ,CAAC,UAAU,EAAE,CAAC,CAAC;YAC3E,CAAC;YACD,MAAM,aAAa,GAAG,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC,CAAC;YACrE,IAAI,MAAM,CAAC,QAAQ,CAAC,aAAa,CAAC,IAAI,aAAa,GAAG,gBAAgB,EAAE,CAAC;gBACrE,MAAM,IAAI,kBAAkB,CACxB,UAAU,EACV,YAAY,EACZ,UAAU,eAAe,CAAC,gBAAgB,CAAC,mBAAmB,CACjE,CAAC;YACN,CAAC;YACD,KAAK,GAAG,QAAQ,CAAC,IAAI;gBACjB,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,UAAU,CAC1B,sBAAQ,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAqC,CAAC,EAChE,gBAAgB,EAChB,YAAY,EACZ,MAAM,CACT,CAAC;gBACF,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAC1B,CAAC;aACI,CAAC;YACF,MAAM,KAAK,GAAG,MAAM,kBAAE,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;YAC1C,IAAI,KAAK,CAAC,IAAI,GAAG,gBAAgB,EAAE,CAAC;gBAChC,MAAM,IAAI,kBAAkB,CACxB,UAAU,EACV,YAAY,EACZ,UAAU,eAAe,CAAC,gBAAgB,CAAC,mBAAmB,CACjE,CAAC;YACN,CAAC;YACD,KAAK,GAAG,MAAM,kBAAE,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC;QAC5C,CAAC;IACL,CAAC;IACD,OAAO,KAAK,EAAE,CAAC;QACX,IAAI,KAAK,YAAY,kBAAkB,EAAE,CAAC;YACtC,MAAM,KAAK,CAAC;QAChB,CAAC;QACD,IAAI,MAAM,IAAI,KAAK,YAAY,KAAK,EAAE,CAAC;YACnC,MAAM,KAAK,CAAC;QAChB,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;IAChD,CAAC;IAED,MAAM,IAAI,GAAG,gBAAgB,CAAC,KAAK,CAAC,CAAC;IACrC,IAAI,KAAK,GAAsC,IAAI,GAAG,EAAE,CAAC;IACzD,IAAI,UAAU,GAAgC,EAAE,CAAC;IAEjD,IAAI,IAAI,KAAK,KAAK,EAAE,CAAC;QACjB,IAAI,CAAC;YACD,MAAM,GAAG,GAAG,MAAM,YAAY,CAAC,KAAK,EAAE,gBAAgB,EAAE,aAAa,CAAC,CAAC;YACvE,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC;YAClB,UAAU,GAAG,GAAG,CAAC,OAAO,CAAC;QAC7B,CAAC;QACD,OAAO,KAAK,EAAE,CAAC;YACX,IAAI,KAAK,YAAY,kBAAkB,EAAE,CAAC;gBACtC,MAAM,IAAI,kBAAkB,CACxB,KAAK,CAAC,MAAM,EACZ,KAAK,CAAC,IAAI,IAAI,YAAY,EAC1B,KAAK,CAAC,OAAO,CAChB,CAAC;YACN,CAAC;YACD,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACvE,IAAI,CAAC,gBAAgB,EAAE,wBAAwB,EAAE,iCAAiC,CAAC;iBAC9E,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,OAAO,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,EAC7C,CAAC;gBACC,MAAM,IAAI,kBAAkB,CACxB,MAAM,EACN,YAAY,EACZ,8CAA8C,CACjD,CAAC;YACN,CAAC;YACD,MAAM,IAAI,kBAAkB,CACxB,UAAU,EACV,YAAY,EACZ,8BAA8B,CACjC,CAAC;QACN,CAAC;IACL,CAAC;SACI,CAAC;QACF,KAAK,GAAG,IAAI,GAAG,CAAC,CAAC;gBACb,YAAY;gBACZ,EAAC,IAAI,EAAE,YAAY,EAAE,KAAK,EAAC;aAC9B,CAAC,CAAC,CAAC;IACR,CAAC;IAED,OAAO;QACH,IAAI,EAAE,YAAY;QAClB,IAAI;QACJ,KAAK;QACL,KAAK;QACL,UAAU;KACb,CAAC;AACN,CAAC"}

package/dist/check/checker.d.ts

@@ -0,0 +1,6 @@
+import type { CheckOptions, CheckResult, Rule } from './types';
+/**
+ * 读取产物、执行已注册规则、输出结果
+  */
+export declare function checkArtifact(inputPath: string, rules: Rule[], options?: CheckOptions): Promise<CheckResult>;
+//# sourceMappingURL=checker.d.ts.map

package/dist/check/checker.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"checker.d.ts","sourceRoot":"","sources":["../../src/check/checker.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EACR,YAAY,EACZ,WAAW,EAEX,IAAI,EACP,MAAM,SAAS,CAAC;AAiDjB;;IAEI;AACJ,wBAAsB,aAAa,CAC/B,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE,IAAI,EAAE,EACb,OAAO,GAAE,YAAiB,GAC3B,OAAO,CAAC,WAAW,CAAC,CAgCtB"}

package/dist/check/checker.js

@@ -0,0 +1,79 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.checkArtifact = checkArtifact;
+const artifact_1 = require("./artifact");
+/**
+ * 按文件位置和规则 ID 生成稳定的诊断输出顺序
+ */
+function compareDiagnostics(left, right) {
+    return (left.file ?? '').localeCompare(right.file ?? '')
+        || (left.line ?? 0) - (right.line ?? 0)
+        || (left.column ?? 0) - (right.column ?? 0)
+        || left.ruleId.localeCompare(right.ruleId);
+}
+function createSummary(passed, warnings, diagnostics) {
+    if (diagnostics.length === 0) {
+        return '代码包已通过安全检测。';
+    }
+    const isPackageError = !passed
+        && diagnostics.every(diagnostic => ['artifact', 'file'].includes(diagnostic.ruleId));
+    const summary = isPackageError
+        ? `代码包检查未通过。发现 ${diagnostics.length} 项问题：`
+        : passed
+            ? `代码包已通过安全检测，但存在安全风险。发现 ${warnings} 项风险提示：`
+            : `代码包未通过安全检测，存在安全风险。发现 ${diagnostics.length} 项风险：`;
+    const details = diagnostics.map((diagnostic, index) => {
+        const position = diagnostic.line
+            ? `:${diagnostic.line}${diagnostic.column ? `:${diagnostic.column}` : ''}`
+            : '';
+        const location = diagnostic.file ? `${diagnostic.file}${position}：` : '';
+        return `[${index + 1}] ${location}${diagnostic.message}`;
+    });
+    return `${summary}${details.join('；')}`;
+}
+function createResult(startedAt, diagnostics) {
+    diagnostics.sort(compareDiagnostics);
+    const errors = diagnostics.filter(item => item.severity === 'error').length;
+    const passed = errors === 0;
+    return {
+        schemaVersion: 1,
+        passed,
+        errors,
+        warnings: diagnostics.length - errors,
+        durationMs: Math.round(performance.now() - startedAt),
+        summary: createSummary(passed, diagnostics.length - errors, diagnostics),
+        diagnostics,
+    };
+}
+/**
+ * 读取产物、执行已注册规则、输出结果
+  */
+async function checkArtifact(inputPath, rules, options = {}) {
+    const startedAt = performance.now();
+    const artifact = await (0, artifact_1.readArtifact)(inputPath, options).catch(error => {
+        if (!(error instanceof artifact_1.ArtifactCheckError)) {
+            throw error;
+        }
+        return error;
+    });
+    if (artifact instanceof artifact_1.ArtifactCheckError) {
+        return createResult(startedAt, [{
+                ruleId: artifact.ruleId,
+                severity: 'error',
+                file: artifact.file,
+                message: artifact.message,
+            }]);
+    }
+    const diagnostics = [];
+    const gateRuleIds = new Set(['artifact', 'file']);
+    for (const rule of rules.filter(item => gateRuleIds.has(item.id))) {
+        diagnostics.push(...await rule.check({ artifact, options }));
+        if (diagnostics.some(item => item.severity === 'error')) {
+            return createResult(startedAt, diagnostics);
+        }
+    }
+    diagnostics.push(...(await Promise.all(rules.filter(rule => !gateRuleIds.has(rule.id))
+        .map(rule => rule.check({ artifact, options })))).flat());
+    return createResult(startedAt, diagnostics);
+}
+//# sourceMappingURL=checker.js.map

package/dist/check/checker.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"checker.js","sourceRoot":"","sources":["../../src/check/checker.ts"],"names":[],"mappings":";;AA0DA,sCAoCC;AA9FD,yCAA4D;AAQ5D;;GAEG;AACH,SAAS,kBAAkB,CAAC,IAAgB,EAAE,KAAiB;IAC3D,OAAO,CAAC,IAAI,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,IAAI,EAAE,CAAC;WACjD,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,CAAC;WACpC,CAAC,IAAI,CAAC,MAAM,IAAI,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,IAAI,CAAC,CAAC;WACxC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;AACnD,CAAC;AAED,SAAS,aAAa,CAAC,MAAe,EAAE,QAAgB,EAAE,WAAyB;IAC/E,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC3B,OAAO,aAAa,CAAC;IACzB,CAAC;IACD,MAAM,cAAc,GAAG,CAAC,MAAM;WACvB,WAAW,CAAC,KAAK,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC;IACzF,MAAM,OAAO,GAAG,cAAc;QAC1B,CAAC,CAAC,eAAe,WAAW,CAAC,MAAM,OAAO;QAC1C,CAAC,CAAC,MAAM;YACJ,CAAC,CAAC,yBAAyB,QAAQ,SAAS;YAC5C,CAAC,CAAC,wBAAwB,WAAW,CAAC,MAAM,OAAO,CAAC;IAC5D,MAAM,OAAO,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC,UAAU,EAAE,KAAK,EAAE,EAAE;QAClD,MAAM,QAAQ,GAAG,UAAU,CAAC,IAAI;YAC5B,CAAC,CAAC,IAAI,UAAU,CAAC,IAAI,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,UAAU,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE;YAC1E,CAAC,CAAC,EAAE,CAAC;QACT,MAAM,QAAQ,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,UAAU,CAAC,IAAI,GAAG,QAAQ,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;QACzE,OAAO,IAAI,KAAK,GAAG,CAAC,KAAK,QAAQ,GAAG,UAAU,CAAC,OAAO,EAAE,CAAC;IAC7D,CAAC,CAAC,CAAC;IACH,OAAO,GAAG,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;AAC5C,CAAC;AAED,SAAS,YAAY,CAAC,SAAiB,EAAE,WAAyB;IAC9D,WAAW,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;IACrC,MAAM,MAAM,GAAG,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,MAAM,CAAC;IAC5E,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,CAAC;IAE5B,OAAO;QACH,aAAa,EAAE,CAAC;QAChB,MAAM;QACN,MAAM;QACN,QAAQ,EAAE,WAAW,CAAC,MAAM,GAAG,MAAM;QACrC,UAAU,EAAE,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;QACrD,OAAO,EAAE,aAAa,CAAC,MAAM,EAAE,WAAW,CAAC,MAAM,GAAG,MAAM,EAAE,WAAW,CAAC;QACxE,WAAW;KACd,CAAC;AACN,CAAC;AAED;;IAEI;AACG,KAAK,UAAU,aAAa,CAC/B,SAAiB,EACjB,KAAa,EACb,UAAwB,EAAE;IAE1B,MAAM,SAAS,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC;IACpC,MAAM,QAAQ,GAAG,MAAM,IAAA,uBAAY,EAAC,SAAS,EAAE,OAAO,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE;QAClE,IAAI,CAAC,CAAC,KAAK,YAAY,6BAAkB,CAAC,EAAE,CAAC;YACzC,MAAM,KAAK,CAAC;QAChB,CAAC;QACD,OAAO,KAAK,CAAC;IACjB,CAAC,CAAC,CAAC;IACH,IAAI,QAAQ,YAAY,6BAAkB,EAAE,CAAC;QACzC,OAAO,YAAY,CAAC,SAAS,EAAE,CAAC;gBAC5B,MAAM,EAAE,QAAQ,CAAC,MAAM;gBACvB,QAAQ,EAAE,OAAO;gBACjB,IAAI,EAAE,QAAQ,CAAC,IAAI;gBACnB,OAAO,EAAE,QAAQ,CAAC,OAAO;aAC5B,CAAC,CAAC,CAAC;IACR,CAAC;IAED,MAAM,WAAW,GAAiB,EAAE,CAAC;IACrC,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC,CAAC;IAElD,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;QAChE,WAAW,CAAC,IAAI,CAAC,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,EAAC,QAAQ,EAAE,OAAO,EAAC,CAAC,CAAC,CAAC;QAC3D,IAAI,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,QAAQ,KAAK,OAAO,CAAC,EAAE,CAAC;YACtD,OAAO,YAAY,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;QAChD,CAAC;IACL,CAAC;IAED,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;SACjF,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,EAAC,QAAQ,EAAE,OAAO,EAAC,CAAC,CAAC,CAChD,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;IAEX,OAAO,YAAY,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;AAChD,CAAC"}

package/dist/check/cli.d.ts

@@ -0,0 +1,5 @@
+/**
+ * 解析 check 命令参数，运行检查
+ */
+export declare function runCheck(argv: string[]): Promise<void>;
+//# sourceMappingURL=cli.d.ts.map

package/dist/check/cli.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli.d.ts","sourceRoot":"","sources":["../../src/check/cli.ts"],"names":[],"mappings":"AAgHA;;GAEG;AACH,wBAAsB,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAe5D"}

package/dist/check/cli.js

@@ -0,0 +1,110 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.runCheck = runCheck;
+const minimist_1 = __importDefault(require("minimist"));
+const artifact_1 = require("./artifact");
+const rules_1 = require("./rules");
+const checker_1 = require("./checker");
+const USAGE = `Usage:
+  genui check <artifact> [options]
+
+Arguments:
+  <artifact>           待诊断的单 HTML 或 ZIP 文件路径
+
+Options:
+  --format text|json   输出格式，默认 text
+  --max-artifact-bytes N
+                       产物文件及 ZIP 解压后最大大小，默认 ${artifact_1.DEFAULT_MAX_ARTIFACT_BYTES / 1024 / 1024} MB
+  --max-zip-entries N  ZIP 最大条目数，默认 ${artifact_1.DEFAULT_MAX_ZIP_ENTRIES}
+  --help               显示帮助`;
+/**
+ * 将检查结果渲染为适合终端阅读的文本
+ */
+function printText(result) {
+    console.log(result.summary
+        .replace(/：(?=\[1\] )/, '：\n\n')
+        .replace(/；(?=\[\d+\] )/g, '\n\n'));
+}
+/**
+ * 校验并归一化 check 命令参数
+ *
+ * @param args minimist 解析后的原始参数
+ * @returns 参数合法时返回归一化后的选项，非法时返回 undefined
+ */
+function resolveCheckOptions(args) {
+    const [artifact, ...extra] = args._;
+    const format = args.format ?? 'text';
+    const maxArtifactBytes = args['max-artifact-bytes'];
+    const maxZipEntries = args['max-zip-entries'];
+    const knownArgs = new Set([
+        '_',
+        'format',
+        'max-artifact-bytes',
+        'max-zip-entries',
+        'help',
+    ]);
+    const validLimit = (value) => value === undefined || (Number.isInteger(value) && value > 0);
+    if (!artifact
+        || extra.length > 0
+        || Object.keys(args).some(key => !knownArgs.has(key))
+        || !['text', 'json'].includes(format)
+        || !validLimit(maxArtifactBytes)
+        || !validLimit(maxZipEntries)) {
+        return undefined;
+    }
+    return { artifact, format, maxArtifactBytes, maxZipEntries };
+}
+/**
+ * 按指定格式输出检查结果
+ *
+ * @param result 检查结果
+ * @param format 输出格式，text 或 json
+ */
+function printResult(result, format) {
+    if (format === 'json') {
+        console.log(JSON.stringify(result, null, 2));
+    }
+    else {
+        printText(result);
+    }
+}
+/**
+ * 执行产物检查并设置进程退出码
+ *
+ * @param options 归一化后的检查选项
+ */
+async function checkAndReport(options) {
+    try {
+        const result = await (0, checker_1.checkArtifact)(options.artifact, rules_1.rules, {
+            maxArtifactBytes: options.maxArtifactBytes,
+            maxZipEntries: options.maxZipEntries,
+        });
+        printResult(result, options.format);
+        process.exitCode = result.passed ? 0 : 1;
+    }
+    catch (error) {
+        console.error(error instanceof Error ? error.message : String(error));
+        process.exitCode = 2;
+    }
+}
+/**
+ * 解析 check 命令参数，运行检查
+ */
+async function runCheck(argv) {
+    const args = (0, minimist_1.default)(argv);
+    if (args.help) {
+        console.log(USAGE);
+        return;
+    }
+    const options = resolveCheckOptions(args);
+    if (!options) {
+        console.error(USAGE);
+        process.exitCode = 2;
+        return;
+    }
+    await checkAndReport(options);
+}
+//# sourceMappingURL=cli.js.map