@heybox/hb-sdk 0.6.8 → 0.6.9-alpha.0

package/dist/cli-chunks/{runtime-gate-CgN_v4Te.cjs → runtime-gate-BWlU-R4h.cjs}

@@ -1,6 +1,6 @@
 'use strict';
 
-var runtimePermissionEnv = require('./runtime-permission-env-B0jK9Rt1.cjs');
+var runtimePermissionEnv = require('./runtime-permission-env-DKrhgVM3.cjs');
 
 function isValidMiniappManifestVersion(version) {
     return getMiniappManifestVersionError(version) === undefined;

package/dist/cli-chunks/{runtime-permission-env-B0jK9Rt1.cjs → runtime-permission-env-DKrhgVM3.cjs}

@@ -2814,6 +2814,10 @@ const UPDATE_SQUARE_DISPLAY_API_PATH = '/mall/developer/user_miniprogram/square_
 const LIST_USER_MINIPROGRAM_VERSION_API_PATH = '/mall/developer/user_miniprogram/version/list';
 const FNV_OFFSET = 0x811c9dc5;
 const FNV_PRIME = 0x01000193;
+const MINIAPP_UPLOAD_SESSION_REF_LENGTH = 10;
+const MINIAPP_ARTIFACT_SIGNATURE_MAGIC = 'heybox-user-miniprogram-artifact\0v1\0';
+const UNPAIRED_SURROGATE_PATTERN = /[\ud800-\udbff](?![\udc00-\udfff])|(^|[^\ud800-\udbff])[\udc00-\udfff]/;
+const textEncoder = new TextEncoder();
 function normalizeRelativePath(relativePath) {
     return String(relativePath || '')
         .replace(/\\/g, '/')
@@ -2834,52 +2838,6 @@ function getMiniProgramUploadAlias(miniProgramId) {
     }
     return hash.toString(36);
 }
-function getMiniappUploadKey(input) {
-    const alias = getMiniProgramUploadAlias(input.miniProgramId);
-    const normalized = normalizeRelativePath(input.relativePath);
-    return `/u/${alias}/${input.version}/${normalized}`;
-}
-function validateUploadPaths(items, options) {
-    const limit = options.maxLength;
-    const uploadKeys = new Set();
-    for (const item of items) {
-        const relativePath = String(item.relativePath ?? '');
-        const normalizedRelativePath = normalizeRelativePath(relativePath);
-        const invalidReason = getInvalidUploadPathReason(normalizedRelativePath);
-        if (invalidReason) {
-            return `构建产物文件路径不合法（${invalidReason}）：${JSON.stringify(relativePath)}`;
-        }
-        const key = getMiniappUploadKey({
-            miniProgramId: options.miniProgramId,
-            version: options.version,
-            relativePath: normalizedRelativePath,
-        });
-        if (uploadKeys.has(key)) {
-            return `构建产物文件路径重复，无法上传到同一位置：${JSON.stringify(relativePath)}`;
-        }
-        uploadKeys.add(key);
-        if (key.length > limit) {
-            return `文件路径过长，请缩短构建产物文件名或目录层级：${relativePath}`;
-        }
-    }
-    return undefined;
-}
-function getInvalidUploadPathReason(relativePath) {
-    const segments = relativePath.replace(/\\/g, '/').split('/');
-    if (segments.some((segment) => !segment)) {
-        return '包含空路径段';
-    }
-    if (segments.some((segment) => segment === '.')) {
-        return '包含当前目录';
-    }
-    if (segments.some((segment) => segment === '..')) {
-        return '包含上级目录';
-    }
-    if (/[\u0000-\u001F\u007F]/.test(relativePath)) {
-        return '包含控制字符';
-    }
-    return undefined;
-}
 function validateUploadTotalSize(items, options = {}) {
     const limit = options.limitBytes ?? MINIAPP_UPLOAD_TOTAL_SIZE_LIMIT_BYTES;
     const total = items.reduce((sum, item) => {
@@ -2907,6 +2865,202 @@ function shouldUploadDistFile(relativePath) {
     }
     return true;
 }
+/**
+ * 校验构建产物路径和大小，并按路径 UTF-8 字节序排序。
+ *
+ * @param files 待处理的构建产物文件。
+ * @returns 保留输入附加字段的有序文件列表。
+ * @throws 路径不规范、路径重复或文件大小非法时抛出错误。
+ */
+function prepareMiniappArtifactFiles(files) {
+    if (files.length > 0xffffffff) {
+        throw new Error('构建产物文件数量超出签名协议上限');
+    }
+    const usedPaths = new Set();
+    const prepared = files.map(file => {
+        const relativePath = normalizeMiniappArtifactRelativePath(file.relativePath);
+        if (usedPaths.has(relativePath)) {
+            throw new Error(`构建产物包含重复文件路径：${relativePath}`);
+        }
+        usedPaths.add(relativePath);
+        validateArtifactFileSize(file.size, relativePath);
+        return { ...file, relativePath };
+    });
+    return prepared.sort((left, right) => compareBytes(textEncoder.encode(left.relativePath), textEncoder.encode(right.relativePath)));
+}
+/**
+ * 按服务端 session key 前缀校验最终上传路径的 UTF-8 字节长度。
+ *
+ * @param files 待上传的构建产物文件。
+ * @param options 小程序和长度限制配置。
+ * @returns 第一个超长路径的错误提示；全部合法时返回 `undefined`。
+ */
+function validateMiniappUploadPathLengths(files, options) {
+    const maxLength = options.maxLength ?? ACTIVITY_UPLOAD_KEY_MAX_LENGTH;
+    const prefix = `/u/${getMiniProgramUploadAlias(options.miniProgramId)}/${'x'.repeat(MINIAPP_UPLOAD_SESSION_REF_LENGTH)}/`;
+    const prefixLength = textEncoder.encode(prefix).length;
+    const tooLongFile = files.find(file => {
+        const relativePath = normalizeMiniappArtifactRelativePath(file.relativePath);
+        return prefixLength + textEncoder.encode(relativePath).length > maxLength;
+    });
+    return tooLongFile ? `文件路径过长，请缩短构建产物文件名或目录层级：${tooLongFile.relativePath}` : undefined;
+}
+/**
+ * 创建 v1 整包签名头。
+ *
+ * @param fileCount 参与签名的文件数量。
+ * @returns 包含协议标识和文件数量的字节数组。
+ * @throws 文件数量超出协议范围时抛出错误。
+ */
+function createMiniappArtifactSignatureHeader(fileCount) {
+    if (!Number.isInteger(fileCount) || fileCount < 0 || fileCount > 0xffffffff) {
+        throw new Error('构建产物文件数量超出签名协议上限');
+    }
+    return concatBytes(textEncoder.encode(MINIAPP_ARTIFACT_SIGNATURE_MAGIC), encodeUint32BE(fileCount));
+}
+/**
+ * 创建单个文件的 v1 framing header。
+ *
+ * @param file 已规范化或待校验的构建产物文件。
+ * @returns 包含路径长度、路径和文件大小的字节数组。
+ * @throws 文件路径或大小非法时抛出错误。
+ */
+function createMiniappArtifactFileHeader(file) {
+    const relativePath = normalizeMiniappArtifactRelativePath(file.relativePath);
+    validateArtifactFileSize(file.size, relativePath);
+    const pathBytes = textEncoder.encode(relativePath);
+    return concatBytes(encodeUint32BE(pathBytes.length), pathBytes, encodeUint64BE(file.size));
+}
+/**
+ * 校验服务端 session 文件映射，并计算仍需上传的文件。
+ *
+ * @param localFiles 本地构建产物文件。
+ * @param serverFiles 服务端签发的文件映射。
+ * @param uploadedKeys 服务端已确认上传成功的 key。
+ * @returns 完整映射、待上传文件和已确认 key。
+ * @throws 服务端映射与本地产物不一致时抛出错误。
+ */
+function resolveMiniappUploadSessionFiles(localFiles, serverFiles, uploadedKeys) {
+    const preparedFiles = prepareMiniappArtifactFiles(localFiles);
+    if (serverFiles.length !== preparedFiles.length) {
+        throw new Error(`上传会话文件数量异常：期望 ${preparedFiles.length}，实际 ${serverFiles.length}`);
+    }
+    const mappings = new Map();
+    const serverSizes = new Map();
+    const knownKeys = new Set();
+    for (const serverFile of serverFiles) {
+        const relativePath = normalizeMiniappArtifactRelativePath(serverFile.relative_path);
+        if (mappings.has(relativePath)) {
+            throw new Error(`上传会话返回重复文件路径：${relativePath}`);
+        }
+        const key = String(serverFile.key || '');
+        if (!key) {
+            throw new Error(`上传会话未返回文件 key：${relativePath}`);
+        }
+        if (knownKeys.has(key)) {
+            throw new Error(`上传会话返回重复文件 key：${relativePath}`);
+        }
+        const size = Number(serverFile.size);
+        if (!Number.isSafeInteger(size) || size < 0) {
+            throw new Error(`上传会话返回文件大小异常：${relativePath}`);
+        }
+        mappings.set(relativePath, key);
+        serverSizes.set(relativePath, size);
+        knownKeys.add(key);
+    }
+    const files = preparedFiles.map(file => {
+        const key = mappings.get(file.relativePath);
+        if (!key) {
+            throw new Error(`上传会话缺少文件映射：${file.relativePath}`);
+        }
+        if (serverSizes.get(file.relativePath) !== file.size) {
+            throw new Error(`上传会话文件大小与本地构建不一致：${file.relativePath}`);
+        }
+        return { file, key };
+    });
+    const completed = new Set();
+    for (const rawKey of uploadedKeys) {
+        const key = String(rawKey || '');
+        if (!knownKeys.has(key)) {
+            throw new Error('上传会话返回了不属于当前产物的已上传文件');
+        }
+        completed.add(key);
+    }
+    return {
+        files,
+        missingFiles: files.filter(file => !completed.has(file.key)),
+        uploadedKeys: [...completed],
+    };
+}
+function normalizeMiniappArtifactRelativePath(relativePath) {
+    const value = String(relativePath || '');
+    if (!value) {
+        throw new Error('构建产物包含空文件路径');
+    }
+    if (value.includes('\\')) {
+        throw new Error(`构建产物路径不能包含反斜杠：${value}`);
+    }
+    if (value.startsWith('/') || value.endsWith('/') || /^[a-zA-Z]:\//.test(value)) {
+        throw new Error(`构建产物必须使用相对文件路径：${value}`);
+    }
+    if (containsControlCharacter(value) || UNPAIRED_SURROGATE_PATTERN.test(value)) {
+        throw new Error(`构建产物路径包含非法字符：${value}`);
+    }
+    if (value.split('/').some(segment => !segment || segment === '.' || segment === '..')) {
+        throw new Error(`构建产物路径包含非法目录段：${value}`);
+    }
+    if (value.includes(',')) {
+        throw new Error(`构建产物路径不能包含逗号：${value}`);
+    }
+    if (value.includes('*') || value.includes('?')) {
+        throw new Error(`构建产物路径不能包含通配符：${value}`);
+    }
+    return value;
+}
+function containsControlCharacter(value) {
+    for (const character of value) {
+        const code = character.charCodeAt(0);
+        if (code <= 0x1f || (code >= 0x7f && code <= 0x9f)) {
+            return true;
+        }
+    }
+    return false;
+}
+function validateArtifactFileSize(size, relativePath) {
+    if (!Number.isSafeInteger(size) || size < 0) {
+        throw new Error(`构建产物文件大小无效：${relativePath}`);
+    }
+}
+function encodeUint32BE(value) {
+    const bytes = new Uint8Array(4);
+    new DataView(bytes.buffer).setUint32(0, value, false);
+    return bytes;
+}
+function encodeUint64BE(value) {
+    const bytes = new Uint8Array(8);
+    const view = new DataView(bytes.buffer);
+    view.setUint32(0, Math.floor(value / 0x100000000), false);
+    view.setUint32(4, value % 0x100000000, false);
+    return bytes;
+}
+function concatBytes(...parts) {
+    const result = new Uint8Array(parts.reduce((total, part) => total + part.length, 0));
+    let offset = 0;
+    for (const part of parts) {
+        result.set(part, offset);
+        offset += part.length;
+    }
+    return result;
+}
+function compareBytes(left, right) {
+    const length = Math.min(left.length, right.length);
+    for (let index = 0; index < length; index += 1) {
+        if (left[index] !== right[index]) {
+            return left[index] - right[index];
+        }
+    }
+    return left.length - right.length;
+}
 
 const HB_SDK_RUNTIME_USE_OFFICIAL_DOMAIN_ENV = 'HB_SDK_RUNTIME_USE_OFFICIAL_DOMAIN';
 const HB_SDK_RUNTIME_PERMISSION_CONTEXT_ENV = 'HB_SDK_RUNTIME_PERMISSION_CONTEXT';
@@ -2974,7 +3128,6 @@ async function runMiniappPlatformCspEnvScope(skipPlatformCsp, action, env) {
     }
 }
 
-exports.ACTIVITY_UPLOAD_KEY_MAX_LENGTH = ACTIVITY_UPLOAD_KEY_MAX_LENGTH;
 exports.CREATE_USER_MINIPROGRAM_API_PATH = CREATE_USER_MINIPROGRAM_API_PATH;
 exports.CREATE_USER_MINIPROGRAM_LEADERBOARD_API_PATH = CREATE_USER_MINIPROGRAM_LEADERBOARD_API_PATH;
 exports.DELETE_USER_MINIPROGRAM_LEADERBOARD_API_PATH = DELETE_USER_MINIPROGRAM_LEADERBOARD_API_PATH;
@@ -2998,14 +3151,17 @@ exports.USER_MINIPROGRAM_ACCESS_STATUS_API_PATH = USER_MINIPROGRAM_ACCESS_STATUS
 exports.USER_MINIPROGRAM_PREVIEW_ALLOWLIST_API_PATH = USER_MINIPROGRAM_PREVIEW_ALLOWLIST_API_PATH;
 exports.USER_MINIPROGRAM_VERSION_PREVIEW_INFO_API_PATH = USER_MINIPROGRAM_VERSION_PREVIEW_INFO_API_PATH;
 exports.WITHDRAW_USER_MINIPROGRAM_VERSION_API_PATH = WITHDRAW_USER_MINIPROGRAM_VERSION_API_PATH;
+exports.createMiniappArtifactFileHeader = createMiniappArtifactFileHeader;
+exports.createMiniappArtifactSignatureHeader = createMiniappArtifactSignatureHeader;
 exports.createMiniappPlatformCspEnv = createMiniappPlatformCspEnv;
-exports.getMiniappUploadKey = getMiniappUploadKey;
 exports.normalizeRelativePath = normalizeRelativePath;
+exports.prepareMiniappArtifactFiles = prepareMiniappArtifactFiles;
 exports.relativePathContainsNodeModulesSegment = relativePathContainsNodeModulesSegment;
 exports.requireSemver = requireSemver;
+exports.resolveMiniappUploadSessionFiles = resolveMiniappUploadSessionFiles;
 exports.semverExports = semverExports;
 exports.shouldSkipMiniappPlatformCspFromEnv = shouldSkipMiniappPlatformCspFromEnv;
 exports.shouldUploadDistFile = shouldUploadDistFile;
-exports.validateUploadPaths = validateUploadPaths;
+exports.validateMiniappUploadPathLengths = validateMiniappUploadPathLengths;
 exports.validateUploadTotalSize = validateUploadTotalSize;
 exports.withMiniappPlatformCspEnv = withMiniappPlatformCspEnv;

package/dist/cli-chunks/{session-DB7ARwm4.cjs → session-D5u3XzHN.cjs}

@@ -1,6 +1,6 @@
 'use strict';
 
-var index = require('./index-CSjJrnkO.cjs');
+var index = require('./index-DofTxdoX.cjs');
 var node_crypto = require('node:crypto');
 var path = require('node:path');
 var require$$0$2 = require('fs');

package/dist/cli.cjs

@@ -1,6 +1,6 @@
 'use strict';
 
-var index = require('./cli-chunks/index-CSjJrnkO.cjs');
+var index = require('./cli-chunks/index-DofTxdoX.cjs');
 require('node:module');
 require('node:fs');
 require('node:fs/promises');

package/dist/index.cjs.js

@@ -603,7 +603,7 @@ function createMessageId() {
 /** 构建时替换为当前发布包的实际版本。 */
 const HB_SDK_VERSION = typeof undefined === 'string'
     ? undefined
-    : '0.6.8';
+    : '0.6.9-alpha.0';
 
 /**
  * 判断未知数据是否符合小程序 bridge 消息信封。

package/dist/index.esm.js

@@ -599,7 +599,7 @@ function createMessageId() {
 /** 构建时替换为当前发布包的实际版本。 */
 const HB_SDK_VERSION = typeof undefined === 'string'
     ? undefined
-    : '0.6.8';
+    : '0.6.9-alpha.0';
 
 /**
  * 判断未知数据是否符合小程序 bridge 消息信封。

package/dist/miniapp-publish.cjs.js

@@ -2836,6 +2836,10 @@ const UPDATE_SQUARE_DISPLAY_API_PATH = '/mall/developer/user_miniprogram/square_
 const LIST_USER_MINIPROGRAM_VERSION_API_PATH = '/mall/developer/user_miniprogram/version/list';
 const FNV_OFFSET = 0x811c9dc5;
 const FNV_PRIME = 0x01000193;
+const MINIAPP_UPLOAD_SESSION_REF_LENGTH = 10;
+const MINIAPP_ARTIFACT_SIGNATURE_MAGIC = 'heybox-user-miniprogram-artifact\0v1\0';
+const UNPAIRED_SURROGATE_PATTERN = /[\ud800-\udbff](?![\udc00-\udfff])|(^|[^\ud800-\udbff])[\udc00-\udfff]/;
+const textEncoder = new TextEncoder();
 function normalizeRelativePath(relativePath) {
     return String(relativePath || '')
         .replace(/\\/g, '/')
@@ -2929,6 +2933,202 @@ function shouldUploadDistFile(relativePath) {
     }
     return true;
 }
+/**
+ * 校验构建产物路径和大小，并按路径 UTF-8 字节序排序。
+ *
+ * @param files 待处理的构建产物文件。
+ * @returns 保留输入附加字段的有序文件列表。
+ * @throws 路径不规范、路径重复或文件大小非法时抛出错误。
+ */
+function prepareMiniappArtifactFiles(files) {
+    if (files.length > 0xffffffff) {
+        throw new Error('构建产物文件数量超出签名协议上限');
+    }
+    const usedPaths = new Set();
+    const prepared = files.map(file => {
+        const relativePath = normalizeMiniappArtifactRelativePath(file.relativePath);
+        if (usedPaths.has(relativePath)) {
+            throw new Error(`构建产物包含重复文件路径：${relativePath}`);
+        }
+        usedPaths.add(relativePath);
+        validateArtifactFileSize(file.size, relativePath);
+        return { ...file, relativePath };
+    });
+    return prepared.sort((left, right) => compareBytes(textEncoder.encode(left.relativePath), textEncoder.encode(right.relativePath)));
+}
+/**
+ * 按服务端 session key 前缀校验最终上传路径的 UTF-8 字节长度。
+ *
+ * @param files 待上传的构建产物文件。
+ * @param options 小程序和长度限制配置。
+ * @returns 第一个超长路径的错误提示；全部合法时返回 `undefined`。
+ */
+function validateMiniappUploadPathLengths(files, options) {
+    const maxLength = options.maxLength ?? ACTIVITY_UPLOAD_KEY_MAX_LENGTH;
+    const prefix = `/u/${getMiniProgramUploadAlias(options.miniProgramId)}/${'x'.repeat(MINIAPP_UPLOAD_SESSION_REF_LENGTH)}/`;
+    const prefixLength = textEncoder.encode(prefix).length;
+    const tooLongFile = files.find(file => {
+        const relativePath = normalizeMiniappArtifactRelativePath(file.relativePath);
+        return prefixLength + textEncoder.encode(relativePath).length > maxLength;
+    });
+    return tooLongFile ? `文件路径过长，请缩短构建产物文件名或目录层级：${tooLongFile.relativePath}` : undefined;
+}
+/**
+ * 创建 v1 整包签名头。
+ *
+ * @param fileCount 参与签名的文件数量。
+ * @returns 包含协议标识和文件数量的字节数组。
+ * @throws 文件数量超出协议范围时抛出错误。
+ */
+function createMiniappArtifactSignatureHeader(fileCount) {
+    if (!Number.isInteger(fileCount) || fileCount < 0 || fileCount > 0xffffffff) {
+        throw new Error('构建产物文件数量超出签名协议上限');
+    }
+    return concatBytes(textEncoder.encode(MINIAPP_ARTIFACT_SIGNATURE_MAGIC), encodeUint32BE(fileCount));
+}
+/**
+ * 创建单个文件的 v1 framing header。
+ *
+ * @param file 已规范化或待校验的构建产物文件。
+ * @returns 包含路径长度、路径和文件大小的字节数组。
+ * @throws 文件路径或大小非法时抛出错误。
+ */
+function createMiniappArtifactFileHeader(file) {
+    const relativePath = normalizeMiniappArtifactRelativePath(file.relativePath);
+    validateArtifactFileSize(file.size, relativePath);
+    const pathBytes = textEncoder.encode(relativePath);
+    return concatBytes(encodeUint32BE(pathBytes.length), pathBytes, encodeUint64BE(file.size));
+}
+/**
+ * 校验服务端 session 文件映射，并计算仍需上传的文件。
+ *
+ * @param localFiles 本地构建产物文件。
+ * @param serverFiles 服务端签发的文件映射。
+ * @param uploadedKeys 服务端已确认上传成功的 key。
+ * @returns 完整映射、待上传文件和已确认 key。
+ * @throws 服务端映射与本地产物不一致时抛出错误。
+ */
+function resolveMiniappUploadSessionFiles(localFiles, serverFiles, uploadedKeys) {
+    const preparedFiles = prepareMiniappArtifactFiles(localFiles);
+    if (serverFiles.length !== preparedFiles.length) {
+        throw new Error(`上传会话文件数量异常：期望 ${preparedFiles.length}，实际 ${serverFiles.length}`);
+    }
+    const mappings = new Map();
+    const serverSizes = new Map();
+    const knownKeys = new Set();
+    for (const serverFile of serverFiles) {
+        const relativePath = normalizeMiniappArtifactRelativePath(serverFile.relative_path);
+        if (mappings.has(relativePath)) {
+            throw new Error(`上传会话返回重复文件路径：${relativePath}`);
+        }
+        const key = String(serverFile.key || '');
+        if (!key) {
+            throw new Error(`上传会话未返回文件 key：${relativePath}`);
+        }
+        if (knownKeys.has(key)) {
+            throw new Error(`上传会话返回重复文件 key：${relativePath}`);
+        }
+        const size = Number(serverFile.size);
+        if (!Number.isSafeInteger(size) || size < 0) {
+            throw new Error(`上传会话返回文件大小异常：${relativePath}`);
+        }
+        mappings.set(relativePath, key);
+        serverSizes.set(relativePath, size);
+        knownKeys.add(key);
+    }
+    const files = preparedFiles.map(file => {
+        const key = mappings.get(file.relativePath);
+        if (!key) {
+            throw new Error(`上传会话缺少文件映射：${file.relativePath}`);
+        }
+        if (serverSizes.get(file.relativePath) !== file.size) {
+            throw new Error(`上传会话文件大小与本地构建不一致：${file.relativePath}`);
+        }
+        return { file, key };
+    });
+    const completed = new Set();
+    for (const rawKey of uploadedKeys) {
+        const key = String(rawKey || '');
+        if (!knownKeys.has(key)) {
+            throw new Error('上传会话返回了不属于当前产物的已上传文件');
+        }
+        completed.add(key);
+    }
+    return {
+        files,
+        missingFiles: files.filter(file => !completed.has(file.key)),
+        uploadedKeys: [...completed],
+    };
+}
+function normalizeMiniappArtifactRelativePath(relativePath) {
+    const value = String(relativePath || '');
+    if (!value) {
+        throw new Error('构建产物包含空文件路径');
+    }
+    if (value.includes('\\')) {
+        throw new Error(`构建产物路径不能包含反斜杠：${value}`);
+    }
+    if (value.startsWith('/') || value.endsWith('/') || /^[a-zA-Z]:\//.test(value)) {
+        throw new Error(`构建产物必须使用相对文件路径：${value}`);
+    }
+    if (containsControlCharacter(value) || UNPAIRED_SURROGATE_PATTERN.test(value)) {
+        throw new Error(`构建产物路径包含非法字符：${value}`);
+    }
+    if (value.split('/').some(segment => !segment || segment === '.' || segment === '..')) {
+        throw new Error(`构建产物路径包含非法目录段：${value}`);
+    }
+    if (value.includes(',')) {
+        throw new Error(`构建产物路径不能包含逗号：${value}`);
+    }
+    if (value.includes('*') || value.includes('?')) {
+        throw new Error(`构建产物路径不能包含通配符：${value}`);
+    }
+    return value;
+}
+function containsControlCharacter(value) {
+    for (const character of value) {
+        const code = character.charCodeAt(0);
+        if (code <= 0x1f || (code >= 0x7f && code <= 0x9f)) {
+            return true;
+        }
+    }
+    return false;
+}
+function validateArtifactFileSize(size, relativePath) {
+    if (!Number.isSafeInteger(size) || size < 0) {
+        throw new Error(`构建产物文件大小无效：${relativePath}`);
+    }
+}
+function encodeUint32BE(value) {
+    const bytes = new Uint8Array(4);
+    new DataView(bytes.buffer).setUint32(0, value, false);
+    return bytes;
+}
+function encodeUint64BE(value) {
+    const bytes = new Uint8Array(8);
+    const view = new DataView(bytes.buffer);
+    view.setUint32(0, Math.floor(value / 0x100000000), false);
+    view.setUint32(4, value % 0x100000000, false);
+    return bytes;
+}
+function concatBytes(...parts) {
+    const result = new Uint8Array(parts.reduce((total, part) => total + part.length, 0));
+    let offset = 0;
+    for (const part of parts) {
+        result.set(part, offset);
+        offset += part.length;
+    }
+    return result;
+}
+function compareBytes(left, right) {
+    const length = Math.min(left.length, right.length);
+    for (let index = 0; index < length; index += 1) {
+        if (left[index] !== right[index]) {
+            return left[index] - right[index];
+        }
+    }
+    return left.length - right.length;
+}
 
 exports.ACTIVITY_UPLOAD_KEY_MAX_LENGTH = ACTIVITY_UPLOAD_KEY_MAX_LENGTH;
 exports.CREATE_USER_MINIPROGRAM_API_PATH = CREATE_USER_MINIPROGRAM_API_PATH;
@@ -2955,11 +3155,16 @@ exports.USER_MINIPROGRAM_ACCESS_STATUS_API_PATH = USER_MINIPROGRAM_ACCESS_STATUS
 exports.USER_MINIPROGRAM_PREVIEW_ALLOWLIST_API_PATH = USER_MINIPROGRAM_PREVIEW_ALLOWLIST_API_PATH;
 exports.USER_MINIPROGRAM_VERSION_PREVIEW_INFO_API_PATH = USER_MINIPROGRAM_VERSION_PREVIEW_INFO_API_PATH;
 exports.WITHDRAW_USER_MINIPROGRAM_VERSION_API_PATH = WITHDRAW_USER_MINIPROGRAM_VERSION_API_PATH;
+exports.createMiniappArtifactFileHeader = createMiniappArtifactFileHeader;
+exports.createMiniappArtifactSignatureHeader = createMiniappArtifactSignatureHeader;
 exports.getMiniProgramUploadAlias = getMiniProgramUploadAlias;
 exports.getMiniappUploadKey = getMiniappUploadKey;
 exports.isValidVersion = isValidMiniappManifestVersion;
 exports.normalizeRelativePath = normalizeRelativePath;
+exports.prepareMiniappArtifactFiles = prepareMiniappArtifactFiles;
 exports.relativePathContainsNodeModulesSegment = relativePathContainsNodeModulesSegment;
+exports.resolveMiniappUploadSessionFiles = resolveMiniappUploadSessionFiles;
 exports.shouldUploadDistFile = shouldUploadDistFile;
+exports.validateMiniappUploadPathLengths = validateMiniappUploadPathLengths;
 exports.validateUploadPaths = validateUploadPaths;
 exports.validateUploadTotalSize = validateUploadTotalSize;