@inf-monkeys-tech/monkeys-cli 0.10.0

package/dist/system-config/value.js

@@ -0,0 +1,198 @@
+import { readFile } from 'node:fs/promises';
+import { isDeepStrictEqual } from 'node:util';
+import { CliError, EXIT_CODES } from '../errors/cli-error.js';
+import { getConfigValue } from './context.js';
+import { findConfigDefinition, isMaskedValue } from './read.js';
+const COMPLEX_TYPES = new Set(['array', 'multi-select', 'i18n', 'json']);
+const MAX_PATCHES = 50;
+function inputError(code, message, safeDetails) {
+    return new CliError(message, { code, exitCode: EXIT_CODES.validation, ...(safeDetails === undefined ? {} : { safeDetails }) });
+}
+export function parseAssignment(value) {
+    const separator = value.indexOf('=');
+    if (separator < 0)
+        return { key: value };
+    return { key: value.slice(0, separator), value: value.slice(separator + 1) };
+}
+export async function parseJsonArgument(value, label) {
+    const source = value.startsWith('@')
+        ? await readFile(value.slice(1), 'utf8').catch((cause) => {
+            throw new CliError(`无法读取${label}文件。`, {
+                cause,
+                code: 'CONFIG_INPUT_FILE_UNREADABLE',
+                exitCode: EXIT_CODES.validation,
+                safeDetails: { path: value.slice(1) },
+            });
+        })
+        : value;
+    try {
+        return JSON.parse(source);
+    }
+    catch (cause) {
+        throw new CliError(`${label}不是有效 JSON。`, { cause, code: 'CONFIG_JSON_INVALID', exitCode: EXIT_CODES.validation });
+    }
+}
+export function parsePatchDocument(value) {
+    let patches;
+    if (Array.isArray(value)) {
+        patches = value;
+    }
+    else if (value && typeof value === 'object') {
+        const candidate = value.patches;
+        if (Array.isArray(candidate))
+            patches = candidate;
+    }
+    if (!patches)
+        throw inputError('CONFIG_PATCH_INVALID', 'Patch 输入必须是数组或包含 patches 数组的 Object。');
+    if (patches.length < 1 || patches.length > MAX_PATCHES) {
+        throw inputError('CONFIG_PATCH_LIMIT', `Patch 数量必须在 1-${MAX_PATCHES} 之间。`, { count: patches.length, max: MAX_PATCHES });
+    }
+    return patches.map((item, index) => {
+        if (!item || typeof item !== 'object' || Array.isArray(item)) {
+            throw inputError('CONFIG_PATCH_INVALID', '每个 Patch 必须是包含 key/value 的 Object。', { index });
+        }
+        const record = item;
+        if (typeof record.key !== 'string' || !('value' in record)) {
+            throw inputError('CONFIG_PATCH_INVALID', '每个 Patch 必须包含字符串 key 和 value。', { index });
+        }
+        return { key: record.key, source: 'json', value: record.value };
+    });
+}
+export function parseConfigValue(definition, input, source) {
+    if (definition.isSensitive && source !== 'stdin') {
+        throw inputError('CONFIG_SENSITIVE_INPUT_REQUIRED', `敏感配置 ${definition.key} 只能通过 --value-stdin 输入。`, {
+            key: definition.key,
+        });
+    }
+    if (isMaskedValue(input)) {
+        throw inputError('CONFIG_MASKED_VALUE_REJECTED', `拒绝把 Mask 占位符写入 ${definition.key}。`, { key: definition.key });
+    }
+    if (source === 'literal' && COMPLEX_TYPES.has(definition.valueType)) {
+        throw inputError('CONFIG_JSON_INPUT_REQUIRED', `${definition.key} 必须通过 --value-json 或 Patch JSON 输入。`, {
+            key: definition.key,
+            valueType: definition.valueType,
+        });
+    }
+    let value = input;
+    switch (definition.valueType) {
+        case 'boolean': {
+            if (value !== true && value !== false && value !== 'true' && value !== 'false') {
+                throw inputError('CONFIG_BOOLEAN_INVALID', `${definition.key} 只接受 true 或 false。`, { key: definition.key });
+            }
+            value = value === true || value === 'true';
+            break;
+        }
+        case 'number': {
+            if ((typeof value !== 'string' && typeof value !== 'number') || (typeof value === 'string' && value.trim() === '')) {
+                throw inputError('CONFIG_NUMBER_INVALID', `${definition.key} 必须是有限数值。`, { key: definition.key });
+            }
+            const parsed = Number(value);
+            if (!Number.isFinite(parsed))
+                throw inputError('CONFIG_NUMBER_INVALID', `${definition.key} 必须是有限数值。`, { key: definition.key });
+            value = parsed;
+            break;
+        }
+        case 'array':
+        case 'multi-select':
+            if (!Array.isArray(value))
+                throw inputError('CONFIG_ARRAY_INVALID', `${definition.key} 必须是 JSON Array。`, { key: definition.key });
+            break;
+        case 'i18n':
+            if (!value || typeof value !== 'object' || Array.isArray(value)) {
+                throw inputError('CONFIG_I18N_INVALID', `${definition.key} 必须是 JSON Object。`, { key: definition.key });
+            }
+            break;
+        case 'json':
+            break;
+        default:
+            if (typeof value !== 'string')
+                throw inputError('CONFIG_STRING_INVALID', `${definition.key} 必须是字符串。`, { key: definition.key });
+    }
+    if (definition.required && (value === undefined || value === null || value === '')) {
+        throw inputError('CONFIG_VALUE_REQUIRED', `${definition.key} 不能为空。`, { key: definition.key });
+    }
+    if (typeof value === 'number') {
+        if (definition.min !== undefined && value < definition.min) {
+            throw inputError('CONFIG_VALUE_TOO_SMALL', `${definition.key} 不能小于 ${definition.min}。`, {
+                key: definition.key,
+                min: definition.min,
+            });
+        }
+        if (definition.max !== undefined && value > definition.max) {
+            throw inputError('CONFIG_VALUE_TOO_LARGE', `${definition.key} 不能大于 ${definition.max}。`, {
+                key: definition.key,
+                max: definition.max,
+            });
+        }
+    }
+    if (Array.isArray(value) && definition.maxItems !== undefined && value.length > definition.maxItems) {
+        throw inputError('CONFIG_ARRAY_TOO_LARGE', `${definition.key} 最多允许 ${definition.maxItems} 项。`, {
+            count: value.length,
+            key: definition.key,
+            maxItems: definition.maxItems,
+        });
+    }
+    if (typeof value === 'string' && definition.pattern) {
+        let pattern;
+        try {
+            pattern = new RegExp(definition.pattern);
+        }
+        catch (cause) {
+            throw new CliError(`服务端为 ${definition.key} 提供了无效的校验 Pattern。`, {
+                cause,
+                code: 'CONFIG_SCHEMA_PATTERN_INVALID',
+                exitCode: EXIT_CODES.compatibility,
+                safeDetails: { key: definition.key },
+            });
+        }
+        if (!pattern.test(value))
+            throw inputError('CONFIG_PATTERN_MISMATCH', `${definition.key} 不符合 Schema Pattern。`, { key: definition.key });
+    }
+    if (definition.options?.length && !definition.options.some((option) => isDeepStrictEqual(option.value, value))) {
+        throw inputError('CONFIG_OPTION_INVALID', `${definition.key} 不是 Schema 允许的选项。`, {
+            allowed: definition.options.map((option) => option.value),
+            key: definition.key,
+        });
+    }
+    return value;
+}
+function presentedValue(value, sensitive) {
+    return sensitive ? '[REDACTED]' : value;
+}
+export function prepareConfigWrite(overview, specs) {
+    if (specs.length < 1 || specs.length > MAX_PATCHES) {
+        throw inputError('CONFIG_PATCH_LIMIT', `Patch 数量必须在 1-${MAX_PATCHES} 之间。`, { count: specs.length, max: MAX_PATCHES });
+    }
+    const seen = new Set();
+    const patches = [];
+    const preview = [];
+    for (const spec of specs) {
+        const definition = findConfigDefinition(overview.definitions, spec.key);
+        if (seen.has(definition.key)) {
+            throw inputError('CONFIG_PATCH_DUPLICATE_KEY', `Patch 中存在重复 Key：${definition.key}`, { key: definition.key });
+        }
+        seen.add(definition.key);
+        if (definition.readonly) {
+            throw inputError('CONFIG_KEY_READONLY', `System Config Key 为只读：${definition.key}`, { key: definition.key });
+        }
+        const value = parseConfigValue(definition, spec.value, spec.source);
+        const before = getConfigValue(overview.activeVersion?.config ?? {}, definition.key);
+        if (!isDeepStrictEqual(before, value))
+            patches.push({ key: definition.key, value });
+        preview.push({
+            after: presentedValue(value, definition.isSensitive),
+            before: presentedValue(before, definition.isSensitive),
+            key: definition.key,
+            restartRequired: definition.restartRequired,
+            sensitive: definition.isSensitive,
+            valueType: definition.valueType,
+        });
+    }
+    return {
+        activeVersion: overview.activeVersion ? { id: overview.activeVersion.id, versionNumber: overview.activeVersion.versionNumber } : null,
+        changed: patches.length > 0,
+        patches,
+        preview,
+    };
+}
+//# sourceMappingURL=value.js.map

package/dist/system-config/value.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"value.js","sourceRoot":"","sources":["../../src/system-config/value.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,iBAAiB,EAAE,MAAM,WAAW,CAAC;AAC9C,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AAE9D,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAC9C,OAAO,EAAE,oBAAoB,EAAE,aAAa,EAAE,MAAM,WAAW,CAAC;AAwBhE,MAAM,aAAa,GAAG,IAAI,GAAG,CAAgC,CAAC,OAAO,EAAE,cAAc,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;AACxG,MAAM,WAAW,GAAG,EAAE,CAAC;AAEvB,SAAS,UAAU,CAAC,IAAY,EAAE,OAAe,EAAE,WAAqB;IACtE,OAAO,IAAI,QAAQ,CAAC,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,CAAC,UAAU,EAAE,GAAG,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,EAAE,CAAC,CAAC;AACjI,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,KAAa;IAC3C,MAAM,SAAS,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACrC,IAAI,SAAS,GAAG,CAAC;QAAE,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC;IACzC,OAAO,EAAE,GAAG,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,SAAS,GAAG,CAAC,CAAC,EAAE,CAAC;AAC/E,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,KAAa,EAAE,KAAa;IAClE,MAAM,MAAM,GAAG,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC;QAClC,CAAC,CAAC,MAAM,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE;YAC9D,MAAM,IAAI,QAAQ,CAAC,OAAO,KAAK,KAAK,EAAE;gBACpC,KAAK;gBACL,IAAI,EAAE,8BAA8B;gBACpC,QAAQ,EAAE,UAAU,CAAC,UAAU;gBAC/B,WAAW,EAAE,EAAE,IAAI,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE;aACtC,CAAC,CAAC;QACL,CAAC,CAAC;QACJ,CAAC,CAAC,KAAK,CAAC;IACV,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAC5B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,QAAQ,CAAC,GAAG,KAAK,YAAY,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,qBAAqB,EAAE,QAAQ,EAAE,UAAU,CAAC,UAAU,EAAE,CAAC,CAAC;IACpH,CAAC;AACH,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,KAAc;IAC/C,IAAI,OAA8B,CAAC;IACnC,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,GAAG,KAAK,CAAC;IAClB,CAAC;SAAM,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9C,MAAM,SAAS,GAAI,KAAiC,CAAC,OAAO,CAAC;QAC7D,IAAI,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC;YAAE,OAAO,GAAG,SAAS,CAAC;IACpD,CAAC;IACD,IAAI,CAAC,OAAO;QAAE,MAAM,UAAU,CAAC,sBAAsB,EAAE,sCAAsC,CAAC,CAAC;IAC/F,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,OAAO,CAAC,MAAM,GAAG,WAAW,EAAE,CAAC;QACvD,MAAM,UAAU,CAAC,oBAAoB,EAAE,iBAAiB,WAAW,MAAM,EAAE,EAAE,KAAK,EAAE,OAAO,CAAC,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,CAAC,CAAC;IAC1H,CAAC;IACD,OAAO,OAAO,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE;QACjC,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;YAC7D,MAAM,UAAU,CAAC,sBAAsB,EAAE,oCAAoC,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;QAC5F,CAAC;QACD,MAAM,MAAM,GAAG,IAA+B,CAAC;QAC/C,IAAI,OAAO,MAAM,CAAC,GAAG,KAAK,QAAQ,IAAI,CAAC,CAAC,OAAO,IAAI,MAAM,CAAC,EAAE,CAAC;YAC3D,MAAM,UAAU,CAAC,sBAAsB,EAAE,+BAA+B,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;QACvF,CAAC;QACD,OAAO,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,MAAM,EAAE,MAAe,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC;IAC3E,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,UAA4B,EAAE,KAAc,EAAE,MAAyB;IACtG,IAAI,UAAU,CAAC,WAAW,IAAI,MAAM,KAAK,OAAO,EAAE,CAAC;QACjD,MAAM,UAAU,CAAC,iCAAiC,EAAE,QAAQ,UAAU,CAAC,GAAG,yBAAyB,EAAE;YACnG,GAAG,EAAE,UAAU,CAAC,GAAG;SACpB,CAAC,CAAC;IACL,CAAC;IACD,IAAI,aAAa,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,MAAM,UAAU,CAAC,8BAA8B,EAAE,kBAAkB,UAAU,CAAC,GAAG,GAAG,EAAE,EAAE,GAAG,EAAE,UAAU,CAAC,GAAG,EAAE,CAAC,CAAC;IACjH,CAAC;IACD,IAAI,MAAM,KAAK,SAAS,IAAI,aAAa,CAAC,GAAG,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QACpE,MAAM,UAAU,CAAC,4BAA4B,EAAE,GAAG,UAAU,CAAC,GAAG,qCAAqC,EAAE;YACrG,GAAG,EAAE,UAAU,CAAC,GAAG;YACnB,SAAS,EAAE,UAAU,CAAC,SAAS;SAChC,CAAC,CAAC;IACL,CAAC;IAED,IAAI,KAAK,GAAY,KAAK,CAAC;IAC3B,QAAQ,UAAU,CAAC,SAAS,EAAE,CAAC;QAC7B,KAAK,SAAS,EAAE,CAAC;YACf,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,KAAK,IAAI,KAAK,KAAK,MAAM,IAAI,KAAK,KAAK,OAAO,EAAE,CAAC;gBAC/E,MAAM,UAAU,CAAC,wBAAwB,EAAE,GAAG,UAAU,CAAC,GAAG,oBAAoB,EAAE,EAAE,GAAG,EAAE,UAAU,CAAC,GAAG,EAAE,CAAC,CAAC;YAC7G,CAAC;YACD,KAAK,GAAG,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,MAAM,CAAC;YAC3C,MAAM;QACR,CAAC;QACD,KAAK,QAAQ,EAAE,CAAC;YACd,IAAI,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,KAAK,KAAK,QAAQ,CAAC,IAAI,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;gBACnH,MAAM,UAAU,CAAC,uBAAuB,EAAE,GAAG,UAAU,CAAC,GAAG,WAAW,EAAE,EAAE,GAAG,EAAE,UAAU,CAAC,GAAG,EAAE,CAAC,CAAC;YACnG,CAAC;YACD,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;YAC7B,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC;gBAC1B,MAAM,UAAU,CAAC,uBAAuB,EAAE,GAAG,UAAU,CAAC,GAAG,WAAW,EAAE,EAAE,GAAG,EAAE,UAAU,CAAC,GAAG,EAAE,CAAC,CAAC;YACnG,KAAK,GAAG,MAAM,CAAC;YACf,MAAM;QACR,CAAC;QACD,KAAK,OAAO,CAAC;QACb,KAAK,cAAc;YACjB,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;gBAAE,MAAM,UAAU,CAAC,sBAAsB,EAAE,GAAG,UAAU,CAAC,GAAG,kBAAkB,EAAE,EAAE,GAAG,EAAE,UAAU,CAAC,GAAG,EAAE,CAAC,CAAC;YAClI,MAAM;QACR,KAAK,MAAM;YACT,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;gBAChE,MAAM,UAAU,CAAC,qBAAqB,EAAE,GAAG,UAAU,CAAC,GAAG,mBAAmB,EAAE,EAAE,GAAG,EAAE,UAAU,CAAC,GAAG,EAAE,CAAC,CAAC;YACzG,CAAC;YACD,MAAM;QACR,KAAK,MAAM;YACT,MAAM;QACR;YACE,IAAI,OAAO,KAAK,KAAK,QAAQ;gBAAE,MAAM,UAAU,CAAC,uBAAuB,EAAE,GAAG,UAAU,CAAC,GAAG,UAAU,EAAE,EAAE,GAAG,EAAE,UAAU,CAAC,GAAG,EAAE,CAAC,CAAC;IACnI,CAAC;IAED,IAAI,UAAU,CAAC,QAAQ,IAAI,CAAC,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,EAAE,CAAC,EAAE,CAAC;QACnF,MAAM,UAAU,CAAC,uBAAuB,EAAE,GAAG,UAAU,CAAC,GAAG,QAAQ,EAAE,EAAE,GAAG,EAAE,UAAU,CAAC,GAAG,EAAE,CAAC,CAAC;IAChG,CAAC;IACD,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,IAAI,UAAU,CAAC,GAAG,KAAK,SAAS,IAAI,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC;YAC3D,MAAM,UAAU,CAAC,wBAAwB,EAAE,GAAG,UAAU,CAAC,GAAG,SAAS,UAAU,CAAC,GAAG,GAAG,EAAE;gBACtF,GAAG,EAAE,UAAU,CAAC,GAAG;gBACnB,GAAG,EAAE,UAAU,CAAC,GAAG;aACpB,CAAC,CAAC;QACL,CAAC;QACD,IAAI,UAAU,CAAC,GAAG,KAAK,SAAS,IAAI,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC;YAC3D,MAAM,UAAU,CAAC,wBAAwB,EAAE,GAAG,UAAU,CAAC,GAAG,SAAS,UAAU,CAAC,GAAG,GAAG,EAAE;gBACtF,GAAG,EAAE,UAAU,CAAC,GAAG;gBACnB,GAAG,EAAE,UAAU,CAAC,GAAG;aACpB,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,UAAU,CAAC,QAAQ,KAAK,SAAS,IAAI,KAAK,CAAC,MAAM,GAAG,UAAU,CAAC,QAAQ,EAAE,CAAC;QACpG,MAAM,UAAU,CAAC,wBAAwB,EAAE,GAAG,UAAU,CAAC,GAAG,SAAS,UAAU,CAAC,QAAQ,KAAK,EAAE;YAC7F,KAAK,EAAE,KAAK,CAAC,MAAM;YACnB,GAAG,EAAE,UAAU,CAAC,GAAG;YACnB,QAAQ,EAAE,UAAU,CAAC,QAAQ;SAC9B,CAAC,CAAC;IACL,CAAC;IACD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,UAAU,CAAC,OAAO,EAAE,CAAC;QACpD,IAAI,OAAe,CAAC;QACpB,IAAI,CAAC;YACH,OAAO,GAAG,IAAI,MAAM,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;QAC3C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,QAAQ,CAAC,QAAQ,UAAU,CAAC,GAAG,oBAAoB,EAAE;gBAC7D,KAAK;gBACL,IAAI,EAAE,+BAA+B;gBACrC,QAAQ,EAAE,UAAU,CAAC,aAAa;gBAClC,WAAW,EAAE,EAAE,GAAG,EAAE,UAAU,CAAC,GAAG,EAAE;aACrC,CAAC,CAAC;QACL,CAAC;QACD,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC;YACtB,MAAM,UAAU,CAAC,yBAAyB,EAAE,GAAG,UAAU,CAAC,GAAG,sBAAsB,EAAE,EAAE,GAAG,EAAE,UAAU,CAAC,GAAG,EAAE,CAAC,CAAC;IAClH,CAAC;IACD,IAAI,UAAU,CAAC,OAAO,EAAE,MAAM,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,iBAAiB,CAAC,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,EAAE,CAAC;QAC/G,MAAM,UAAU,CAAC,uBAAuB,EAAE,GAAG,UAAU,CAAC,GAAG,mBAAmB,EAAE;YAC9E,OAAO,EAAE,UAAU,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC;YACzD,GAAG,EAAE,UAAU,CAAC,GAAG;SACpB,CAAC,CAAC;IACL,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,cAAc,CAAC,KAAc,EAAE,SAAkB;IACxD,OAAO,SAAS,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,KAAK,CAAC;AAC1C,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,QAAwB,EAAE,KAAwB;IACnF,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,KAAK,CAAC,MAAM,GAAG,WAAW,EAAE,CAAC;QACnD,MAAM,UAAU,CAAC,oBAAoB,EAAE,iBAAiB,WAAW,MAAM,EAAE,EAAE,KAAK,EAAE,KAAK,CAAC,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,CAAC,CAAC;IACxH,CAAC;IACD,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,MAAM,OAAO,GAA2C,EAAE,CAAC;IAC3D,MAAM,OAAO,GAAmC,EAAE,CAAC;IACnD,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,UAAU,GAAG,oBAAoB,CAAC,QAAQ,CAAC,WAAW,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;QACxE,IAAI,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YAC7B,MAAM,UAAU,CAAC,4BAA4B,EAAE,mBAAmB,UAAU,CAAC,GAAG,EAAE,EAAE,EAAE,GAAG,EAAE,UAAU,CAAC,GAAG,EAAE,CAAC,CAAC;QAC/G,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;QACzB,IAAI,UAAU,CAAC,QAAQ,EAAE,CAAC;YACxB,MAAM,UAAU,CAAC,qBAAqB,EAAE,yBAAyB,UAAU,CAAC,GAAG,EAAE,EAAE,EAAE,GAAG,EAAE,UAAU,CAAC,GAAG,EAAE,CAAC,CAAC;QAC9G,CAAC;QACD,MAAM,KAAK,GAAG,gBAAgB,CAAC,UAAU,EAAE,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;QACpE,MAAM,MAAM,GAAG,cAAc,CAAC,QAAQ,CAAC,aAAa,EAAE,MAAM,IAAI,EAAE,EAAE,UAAU,CAAC,GAAG,CAAC,CAAC;QACpF,IAAI,CAAC,iBAAiB,CAAC,MAAM,EAAE,KAAK,CAAC;YAAE,OAAO,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,UAAU,CAAC,GAAG,EAAE,KAAK,EAAE,CAAC,CAAC;QACpF,OAAO,CAAC,IAAI,CAAC;YACX,KAAK,EAAE,cAAc,CAAC,KAAK,EAAE,UAAU,CAAC,WAAW,CAAC;YACpD,MAAM,EAAE,cAAc,CAAC,MAAM,EAAE,UAAU,CAAC,WAAW,CAAC;YACtD,GAAG,EAAE,UAAU,CAAC,GAAG;YACnB,eAAe,EAAE,UAAU,CAAC,eAAe;YAC3C,SAAS,EAAE,UAAU,CAAC,WAAW;YACjC,SAAS,EAAE,UAAU,CAAC,SAAS;SAChC,CAAC,CAAC;IACL,CAAC;IACD,OAAO;QACL,aAAa,EAAE,QAAQ,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,QAAQ,CAAC,aAAa,CAAC,EAAE,EAAE,aAAa,EAAE,QAAQ,CAAC,aAAa,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,IAAI;QACrI,OAAO,EAAE,OAAO,CAAC,MAAM,GAAG,CAAC;QAC3B,OAAO;QACP,OAAO;KACR,CAAC;AACJ,CAAC"}

package/dist/system-config/write.d.ts

@@ -0,0 +1,56 @@
+import type { ConfigOverview } from './contracts.js';
+import type { PreparedConfigWrite } from './value.js';
+export declare function configWritePreview(prepared: PreparedConfigWrite, dryRun: boolean): {
+    activeVersion: {
+        id: string;
+        versionNumber: number;
+    } | null;
+    changed: boolean;
+    dryRun: boolean;
+    patches: {
+        after: unknown;
+        before: unknown;
+        key: string;
+        restartRequired: boolean;
+        sensitive: boolean;
+        valueType: import("./contracts.js").ConfigDefinition['valueType'];
+    }[];
+    restartRequiredKeys: string[];
+    risk: string;
+    serverValidated: boolean;
+};
+export declare function verifyConfigWrite(prepared: PreparedConfigWrite, overview: ConfigOverview): {
+    activeVersion: {
+        baseVersionId: string | null | undefined;
+        id: string;
+        versionNumber: number;
+    };
+    changed: boolean;
+    concurrentBase: boolean;
+    patches: {
+        after: unknown;
+        before: unknown;
+        key: string;
+        restartRequired: boolean;
+        sensitive: boolean;
+        valueType: import("./contracts.js").ConfigDefinition['valueType'];
+    }[];
+    restartRequiredKeys: string[];
+    validation: {
+        issueCount: number;
+        issues: {
+            [x: string]: unknown;
+            code?: string | undefined;
+            key: string;
+            message: string;
+            severity: "error" | "info" | "warning";
+            title?: string | undefined;
+        }[];
+        ok: boolean;
+        restartRequiredKeys: string[];
+        sensitiveKeyCount: number;
+        unknownKeys: string[];
+    };
+    warning: string | undefined;
+};
+//# sourceMappingURL=write.d.ts.map

package/dist/system-config/write.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"write.d.ts","sourceRoot":"","sources":["../../src/system-config/write.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAGrD,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAC;AAEtD,wBAAgB,kBAAkB,CAAC,QAAQ,EAAE,mBAAmB,EAAE,MAAM,EAAE,OAAO;;;;;;;;;;;;;;;;;;EAUhF;AAED,wBAAgB,iBAAiB,CAAC,QAAQ,EAAE,mBAAmB,EAAE,QAAQ,EAAE,cAAc;;QAyBnF,aAAa;QACb,EAAE;QACF,aAAa;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EASlB"}

package/dist/system-config/write.js

@@ -0,0 +1,54 @@
+import { isDeepStrictEqual } from 'node:util';
+import { CliError, EXIT_CODES } from '../errors/cli-error.js';
+import { getConfigValue } from './context.js';
+import { validationSummary } from './read.js';
+export function configWritePreview(prepared, dryRun) {
+    return {
+        activeVersion: prepared.activeVersion,
+        changed: prepared.changed,
+        dryRun,
+        patches: prepared.preview,
+        restartRequiredKeys: prepared.preview.filter((item) => item.restartRequired).map((item) => item.key),
+        risk: 'privileged',
+        serverValidated: false,
+    };
+}
+export function verifyConfigWrite(prepared, overview) {
+    const activeVersion = overview.activeVersion;
+    if (!activeVersion) {
+        throw new CliError('System Config 写入响应缺少 Active Version，结果需要人工核查。', {
+            code: 'MUTATION_OUTCOME_UNKNOWN',
+            exitCode: EXIT_CODES.compatibility,
+            recovery: ['运行 config get 和 config history 检查结果。'],
+            safeDetails: { requestState: 'sent' },
+        });
+    }
+    for (const item of prepared.preview) {
+        if (item.sensitive)
+            continue;
+        const actual = getConfigValue(activeVersion.config, item.key);
+        if (!isDeepStrictEqual(actual, item.after)) {
+            throw new CliError(`System Config 写入后回读不一致：${item.key}`, {
+                code: 'CONFIG_WRITE_VERIFICATION_FAILED',
+                exitCode: EXIT_CODES.api,
+                recovery: ['运行 config get 检查该 Key，禁止自动重试。'],
+                safeDetails: { actual, expected: item.after, key: item.key, versionId: activeVersion.id },
+            });
+        }
+    }
+    const concurrentBase = Boolean(prepared.activeVersion && activeVersion.baseVersionId !== prepared.activeVersion.id);
+    return {
+        activeVersion: {
+            baseVersionId: activeVersion.baseVersionId,
+            id: activeVersion.id,
+            versionNumber: activeVersion.versionNumber,
+        },
+        changed: true,
+        concurrentBase,
+        patches: prepared.preview,
+        restartRequiredKeys: prepared.preview.filter((item) => item.restartRequired).map((item) => item.key),
+        validation: validationSummary(overview.validation),
+        warning: concurrentBase ? '写入基于比预检更新的版本；无关键已由窄 Patch 保留，同 Key 并发覆盖需人工核查。' : undefined,
+    };
+}
+//# sourceMappingURL=write.js.map

package/dist/system-config/write.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"write.js","sourceRoot":"","sources":["../../src/system-config/write.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,WAAW,CAAC;AAC9C,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AAE9D,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAC9C,OAAO,EAAE,iBAAiB,EAAE,MAAM,WAAW,CAAC;AAG9C,MAAM,UAAU,kBAAkB,CAAC,QAA6B,EAAE,MAAe;IAC/E,OAAO;QACL,aAAa,EAAE,QAAQ,CAAC,aAAa;QACrC,OAAO,EAAE,QAAQ,CAAC,OAAO;QACzB,MAAM;QACN,OAAO,EAAE,QAAQ,CAAC,OAAO;QACzB,mBAAmB,EAAE,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC;QACpG,IAAI,EAAE,YAAY;QAClB,eAAe,EAAE,KAAK;KACvB,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,QAA6B,EAAE,QAAwB;IACvF,MAAM,aAAa,GAAG,QAAQ,CAAC,aAAa,CAAC;IAC7C,IAAI,CAAC,aAAa,EAAE,CAAC;QACnB,MAAM,IAAI,QAAQ,CAAC,+CAA+C,EAAE;YAClE,IAAI,EAAE,0BAA0B;YAChC,QAAQ,EAAE,UAAU,CAAC,aAAa;YAClC,QAAQ,EAAE,CAAC,sCAAsC,CAAC;YAClD,WAAW,EAAE,EAAE,YAAY,EAAE,MAAM,EAAE;SACtC,CAAC,CAAC;IACL,CAAC;IACD,KAAK,MAAM,IAAI,IAAI,QAAQ,CAAC,OAAO,EAAE,CAAC;QACpC,IAAI,IAAI,CAAC,SAAS;YAAE,SAAS;QAC7B,MAAM,MAAM,GAAG,cAAc,CAAC,aAAa,CAAC,MAAM,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;QAC9D,IAAI,CAAC,iBAAiB,CAAC,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;YAC3C,MAAM,IAAI,QAAQ,CAAC,0BAA0B,IAAI,CAAC,GAAG,EAAE,EAAE;gBACvD,IAAI,EAAE,kCAAkC;gBACxC,QAAQ,EAAE,UAAU,CAAC,GAAG;gBACxB,QAAQ,EAAE,CAAC,+BAA+B,CAAC;gBAC3C,WAAW,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,CAAC,KAAK,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,SAAS,EAAE,aAAa,CAAC,EAAE,EAAE;aAC1F,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IACD,MAAM,cAAc,GAAG,OAAO,CAAC,QAAQ,CAAC,aAAa,IAAI,aAAa,CAAC,aAAa,KAAK,QAAQ,CAAC,aAAa,CAAC,EAAE,CAAC,CAAC;IACpH,OAAO;QACL,aAAa,EAAE;YACb,aAAa,EAAE,aAAa,CAAC,aAAa;YAC1C,EAAE,EAAE,aAAa,CAAC,EAAE;YACpB,aAAa,EAAE,aAAa,CAAC,aAAa;SAC3C;QACD,OAAO,EAAE,IAAI;QACb,cAAc;QACd,OAAO,EAAE,QAAQ,CAAC,OAAO;QACzB,mBAAmB,EAAE,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC;QACpG,UAAU,EAAE,iBAAiB,CAAC,QAAQ,CAAC,UAAU,CAAC;QAClD,OAAO,EAAE,cAAc,CAAC,CAAC,CAAC,+CAA+C,CAAC,CAAC,CAAC,SAAS;KACtF,CAAC;AACJ,CAAC"}

package/dist/transport/file-transfer.d.ts

@@ -0,0 +1,28 @@
+import type { HttpClient } from './http-client.js';
+import type { HttpRequest } from './types.js';
+export declare function postMultipartFile(client: HttpClient, path: string, request: {
+    contentType?: string;
+    fieldName?: string;
+    path: string;
+    query?: HttpRequest['query'];
+}): Promise<{
+    data: unknown;
+    path: string;
+    requestId?: string;
+    size: number;
+}>;
+export declare function uploadFile(client: HttpClient, path: string, key: string): Promise<{
+    size: number;
+    storedKey?: string;
+    url: unknown;
+}>;
+export declare function downloadFile(client: HttpClient, key: string, outputPath: string, options?: {
+    maxBytes?: number;
+    overwrite?: boolean;
+}): Promise<{
+    bytes: number;
+    path: string;
+    requestId?: string;
+    sha256: string;
+}>;
+//# sourceMappingURL=file-transfer.d.ts.map

package/dist/transport/file-transfer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"file-transfer.d.ts","sourceRoot":"","sources":["../../src/transport/file-transfer.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AACnD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AA6C9C,wBAAsB,iBAAiB,CACrC,MAAM,EAAE,UAAU,EAClB,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE;IACP,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,CAAC,EAAE,WAAW,CAAC,OAAO,CAAC,CAAC;CAC9B,GACA,OAAO,CAAC;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC,CAwB5E;AAaD,wBAAsB,UAAU,CAC9B,MAAM,EAAE,UAAU,EAClB,IAAI,EAAE,MAAM,EACZ,GAAG,EAAE,MAAM,GACV,OAAO,CAAC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,OAAO,CAAA;CAAE,CAAC,CAwB7D;AAED,wBAAsB,YAAY,CAChC,MAAM,EAAE,UAAU,EAClB,GAAG,EAAE,MAAM,EACX,UAAU,EAAE,MAAM,EAClB,OAAO,GAAE;IAAE,QAAQ,CAAC,EAAE,MAAM,CAAC;IAAC,SAAS,CAAC,EAAE,OAAO,CAAA;CAAO,GACvD,OAAO,CAAC;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC,CA2C9E"}

package/dist/transport/file-transfer.js

@@ -0,0 +1,144 @@
+import { createHash, randomBytes } from 'node:crypto';
+import { createReadStream, createWriteStream } from 'node:fs';
+import { mkdir, rename, rm, stat } from 'node:fs/promises';
+import { basename, dirname, resolve } from 'node:path';
+import { Readable, Transform } from 'node:stream';
+import { pipeline } from 'node:stream/promises';
+import { CliError, EXIT_CODES } from '../errors/cli-error.js';
+import { unwrapServerData } from '../semantic/runtime.js';
+function quote(value) {
+    return value.replace(/["\r\n]/g, '_');
+}
+function multipartBody(path, key, boundary) {
+    const name = quote(basename(path));
+    const prefix = Buffer.from(`--${boundary}\r\nContent-Disposition: form-data; name="key"\r\n\r\n${key}\r\n` +
+        `--${boundary}\r\nContent-Disposition: form-data; name="file"; filename="${name}"\r\nContent-Type: application/octet-stream\r\n\r\n`);
+    const suffix = Buffer.from(`\r\n--${boundary}--\r\n`);
+    const stream = Readable.from((async function* () {
+        yield prefix;
+        for await (const chunk of createReadStream(path))
+            yield Buffer.isBuffer(chunk) ? chunk : Buffer.from(chunk);
+        yield suffix;
+    })());
+    return { contentLength: prefix.length + suffix.length, stream };
+}
+function multipartFileBody(path, boundary, options = {}) {
+    const name = quote(basename(path));
+    const fieldName = quote(options.fieldName ?? 'file');
+    const contentType = options.contentType ?? 'application/octet-stream';
+    const prefix = Buffer.from(`--${boundary}\r\nContent-Disposition: form-data; name="${fieldName}"; filename="${name}"\r\nContent-Type: ${contentType}\r\n\r\n`);
+    const suffix = Buffer.from(`\r\n--${boundary}--\r\n`);
+    const stream = Readable.from((async function* () {
+        yield prefix;
+        for await (const chunk of createReadStream(path))
+            yield Buffer.isBuffer(chunk) ? chunk : Buffer.from(chunk);
+        yield suffix;
+    })());
+    return { contentLength: prefix.length + suffix.length, stream };
+}
+export async function postMultipartFile(client, path, request) {
+    const absolute = resolve(path);
+    const source = await stat(absolute).catch((cause) => {
+        throw new CliError(`无法读取上传文件：${absolute}`, { cause, code: 'UPLOAD_FILE_UNREADABLE', exitCode: EXIT_CODES.validation });
+    });
+    if (!source.isFile())
+        throw new CliError('上传来源必须是普通文件。', { code: 'UPLOAD_SOURCE_INVALID', exitCode: EXIT_CODES.validation });
+    const boundary = `monkeys-${randomBytes(16).toString('hex')}`;
+    const multipart = multipartFileBody(absolute, boundary, request);
+    const response = await client.request({
+        headers: {
+            'content-length': String(multipart.contentLength + source.size),
+            'content-type': `multipart/form-data; boundary=${boundary}`,
+        },
+        method: 'POST',
+        path: request.path,
+        ...(request.query ? { query: request.query } : {}),
+        rawBody: multipart.stream,
+    });
+    return {
+        data: unwrapServerData(response.data),
+        path: absolute,
+        ...(response.requestId ? { requestId: response.requestId } : {}),
+        size: source.size,
+    };
+}
+function storedKeyFromUploadResponse(value) {
+    if (typeof value !== 'string')
+        return undefined;
+    try {
+        const pathname = new URL(value).pathname;
+        const key = decodeURIComponent(basename(pathname)).trim();
+        return key || undefined;
+    }
+    catch {
+        return undefined;
+    }
+}
+export async function uploadFile(client, path, key) {
+    const absolute = resolve(path);
+    const source = await stat(absolute).catch((cause) => {
+        throw new CliError(`无法读取上传文件：${absolute}`, { cause, code: 'UPLOAD_FILE_UNREADABLE', exitCode: EXIT_CODES.validation });
+    });
+    if (!source.isFile())
+        throw new CliError('上传来源必须是普通文件。', { code: 'UPLOAD_SOURCE_INVALID', exitCode: EXIT_CODES.validation });
+    const normalizedKey = key.trim();
+    if (!normalizedKey || normalizedKey.includes('..') || /^[\\/]/.test(normalizedKey) || /[\u0000-\u001f\u007f\\]/.test(normalizedKey)) {
+        throw new CliError('上传 Key 无效。', { code: 'UPLOAD_KEY_INVALID', exitCode: EXIT_CODES.validation });
+    }
+    const boundary = `monkeys-${randomBytes(16).toString('hex')}`;
+    const multipart = multipartBody(absolute, normalizedKey, boundary);
+    const response = await client.request({
+        headers: {
+            'content-length': String(multipart.contentLength + source.size),
+            'content-type': `multipart/form-data; boundary=${boundary}`,
+        },
+        method: 'POST',
+        path: '/api/medias/s3/file',
+        rawBody: multipart.stream,
+    });
+    const url = unwrapServerData(response.data);
+    const storedKey = storedKeyFromUploadResponse(url);
+    return { size: source.size, ...(storedKey ? { storedKey } : {}), url };
+}
+export async function downloadFile(client, key, outputPath, options = {}) {
+    const target = resolve(outputPath);
+    const existing = await stat(target).catch((error) => error.code === 'ENOENT' ? undefined : Promise.reject(error));
+    if (existing && !options.overwrite) {
+        throw new CliError(`目标文件已存在：${target}`, { code: 'DOWNLOAD_TARGET_EXISTS', exitCode: EXIT_CODES.confirmation });
+    }
+    await mkdir(dirname(target), { recursive: true });
+    const temporary = `${target}.${process.pid}.${Date.now()}.part`;
+    let bytes = 0;
+    const digest = createHash('sha256');
+    try {
+        const response = await client.openStream({ method: 'GET', path: '/api/medias/s3/sign-proxy', query: { key } });
+        const meter = new Transform({
+            transform(chunk, _encoding, callback) {
+                bytes += chunk.length;
+                if (options.maxBytes !== undefined && bytes > options.maxBytes) {
+                    callback(new CliError('下载内容超过允许上限。', {
+                        code: 'DOWNLOAD_TOO_LARGE',
+                        exitCode: EXIT_CODES.api,
+                        safeDetails: { maxBytes: options.maxBytes },
+                    }));
+                    return;
+                }
+                digest.update(chunk);
+                callback(null, chunk);
+            },
+        });
+        await pipeline(Readable.from(response.body), meter, createWriteStream(temporary, { flags: 'wx', mode: 0o600 }));
+        await rename(temporary, target);
+        return {
+            bytes,
+            path: target,
+            ...(response.requestId ? { requestId: response.requestId } : {}),
+            sha256: digest.digest('hex'),
+        };
+    }
+    catch (error) {
+        await rm(temporary, { force: true }).catch(() => undefined);
+        throw error;
+    }
+}
+//# sourceMappingURL=file-transfer.js.map

package/dist/transport/file-transfer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"file-transfer.js","sourceRoot":"","sources":["../../src/transport/file-transfer.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AACtD,OAAO,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,MAAM,SAAS,CAAC;AAC9D,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AAC3D,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACvD,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAClD,OAAO,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AAChD,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AAC9D,OAAO,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAI1D,SAAS,KAAK,CAAC,KAAa;IAC1B,OAAO,KAAK,CAAC,OAAO,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC;AACxC,CAAC;AAED,SAAS,aAAa,CAAC,IAAY,EAAE,GAAW,EAAE,QAAgB;IAChE,MAAM,IAAI,GAAG,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;IACnC,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CACxB,KAAK,QAAQ,yDAAyD,GAAG,MAAM;QAC7E,KAAK,QAAQ,8DAA8D,IAAI,qDAAqD,CACvI,CAAC;IACF,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,SAAS,QAAQ,QAAQ,CAAC,CAAC;IACtD,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,CAC1B,CAAC,KAAK,SAAS,CAAC;QACd,MAAM,MAAM,CAAC;QACb,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,gBAAgB,CAAC,IAAI,CAAC;YAAE,MAAM,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC5G,MAAM,MAAM,CAAC;IACf,CAAC,CAAC,EAAE,CACL,CAAC;IACF,OAAO,EAAE,aAAa,EAAE,MAAM,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC;AAClE,CAAC;AAED,SAAS,iBAAiB,CACxB,IAAY,EACZ,QAAgB,EAChB,OAAO,GAAiD,EAAE;IAE1D,MAAM,IAAI,GAAG,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;IACnC,MAAM,SAAS,GAAG,KAAK,CAAC,OAAO,CAAC,SAAS,IAAI,MAAM,CAAC,CAAC;IACrD,MAAM,WAAW,GAAG,OAAO,CAAC,WAAW,IAAI,0BAA0B,CAAC;IACtE,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CACxB,KAAK,QAAQ,6CAA6C,SAAS,gBAAgB,IAAI,sBAAsB,WAAW,UAAU,CACnI,CAAC;IACF,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,SAAS,QAAQ,QAAQ,CAAC,CAAC;IACtD,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,CAC1B,CAAC,KAAK,SAAS,CAAC;QACd,MAAM,MAAM,CAAC;QACb,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,gBAAgB,CAAC,IAAI,CAAC;YAAE,MAAM,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC5G,MAAM,MAAM,CAAC;IACf,CAAC,CAAC,EAAE,CACL,CAAC;IACF,OAAO,EAAE,aAAa,EAAE,MAAM,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC;AAClE,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,MAAkB,EAClB,IAAY,EACZ,OAKC;IAED,MAAM,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC/B,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,CAAC,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE;QAC3D,MAAM,IAAI,QAAQ,CAAC,YAAY,QAAQ,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,wBAAwB,EAAE,QAAQ,EAAE,UAAU,CAAC,UAAU,EAAE,CAAC,CAAC;IACzH,CAAC,CAAC,CAAC;IACH,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE;QAAE,MAAM,IAAI,QAAQ,CAAC,cAAc,EAAE,EAAE,IAAI,EAAE,uBAAuB,EAAE,QAAQ,EAAE,UAAU,CAAC,UAAU,EAAE,CAAC,CAAC;IAC7H,MAAM,QAAQ,GAAG,WAAW,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;IAC9D,MAAM,SAAS,GAAG,iBAAiB,CAAC,QAAQ,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;IACjE,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC;QACpC,OAAO,EAAE;YACP,gBAAgB,EAAE,MAAM,CAAC,SAAS,CAAC,aAAa,GAAG,MAAM,CAAC,IAAI,CAAC;YAC/D,cAAc,EAAE,iCAAiC,QAAQ,EAAE;SAC5D;QACD,MAAM,EAAE,MAAM;QACd,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAClD,OAAO,EAAE,SAAS,CAAC,MAAM;KAC1B,CAAC,CAAC;IACH,OAAO;QACL,IAAI,EAAE,gBAAgB,CAAC,QAAQ,CAAC,IAAI,CAAC;QACrC,IAAI,EAAE,QAAQ;QACd,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,QAAQ,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAChE,IAAI,EAAE,MAAM,CAAC,IAAI;KAClB,CAAC;AACJ,CAAC;AAED,SAAS,2BAA2B,CAAC,KAAc;IACjD,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC;IAChD,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC;QACzC,MAAM,GAAG,GAAG,kBAAkB,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAC1D,OAAO,GAAG,IAAI,SAAS,CAAC;IAC1B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,UAAU,CAC9B,MAAkB,EAClB,IAAY,EACZ,GAAW;IAEX,MAAM,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC/B,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,CAAC,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE;QAC3D,MAAM,IAAI,QAAQ,CAAC,YAAY,QAAQ,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,wBAAwB,EAAE,QAAQ,EAAE,UAAU,CAAC,UAAU,EAAE,CAAC,CAAC;IACzH,CAAC,CAAC,CAAC;IACH,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE;QAAE,MAAM,IAAI,QAAQ,CAAC,cAAc,EAAE,EAAE,IAAI,EAAE,uBAAuB,EAAE,QAAQ,EAAE,UAAU,CAAC,UAAU,EAAE,CAAC,CAAC;IAC7H,MAAM,aAAa,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;IACjC,IAAI,CAAC,aAAa,IAAI,aAAa,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,QAAQ,CAAC,IAAI,CAAC,aAAa,CAAC,IAAI,yBAAyB,CAAC,IAAI,CAAC,aAAa,CAAC,EAAE,CAAC;QACpI,MAAM,IAAI,QAAQ,CAAC,YAAY,EAAE,EAAE,IAAI,EAAE,oBAAoB,EAAE,QAAQ,EAAE,UAAU,CAAC,UAAU,EAAE,CAAC,CAAC;IACpG,CAAC;IACD,MAAM,QAAQ,GAAG,WAAW,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;IAC9D,MAAM,SAAS,GAAG,aAAa,CAAC,QAAQ,EAAE,aAAa,EAAE,QAAQ,CAAC,CAAC;IACnE,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC;QACpC,OAAO,EAAE;YACP,gBAAgB,EAAE,MAAM,CAAC,SAAS,CAAC,aAAa,GAAG,MAAM,CAAC,IAAI,CAAC;YAC/D,cAAc,EAAE,iCAAiC,QAAQ,EAAE;SAC5D;QACD,MAAM,EAAE,MAAM;QACd,IAAI,EAAE,qBAAqB;QAC3B,OAAO,EAAE,SAAS,CAAC,MAAM;KAC1B,CAAC,CAAC;IACH,MAAM,GAAG,GAAG,gBAAgB,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IAC5C,MAAM,SAAS,GAAG,2BAA2B,CAAC,GAAG,CAAC,CAAC;IACnD,OAAO,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,EAAE,CAAC;AACzE,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,MAAkB,EAClB,GAAW,EACX,UAAkB,EAClB,OAAO,GAA+C,EAAE;IAExD,MAAM,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;IACnC,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC,KAA4B,EAAE,EAAE,CACzE,KAAK,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAC5D,CAAC;IACF,IAAI,QAAQ,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC;QACnC,MAAM,IAAI,QAAQ,CAAC,WAAW,MAAM,EAAE,EAAE,EAAE,IAAI,EAAE,wBAAwB,EAAE,QAAQ,EAAE,UAAU,CAAC,YAAY,EAAE,CAAC,CAAC;IACjH,CAAC;IACD,MAAM,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAClD,MAAM,SAAS,GAAG,GAAG,MAAM,IAAI,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE,OAAO,CAAC;IAChE,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,MAAM,MAAM,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC;IACpC,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,UAAU,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,2BAA2B,EAAE,KAAK,EAAE,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC;QAC/G,MAAM,KAAK,GAAG,IAAI,SAAS,CAAC;YAC1B,SAAS,CAAC,KAAa,EAAE,SAAS,EAAE,QAAQ;gBAC1C,KAAK,IAAI,KAAK,CAAC,MAAM,CAAC;gBACtB,IAAI,OAAO,CAAC,QAAQ,KAAK,SAAS,IAAI,KAAK,GAAG,OAAO,CAAC,QAAQ,EAAE,CAAC;oBAC/D,QAAQ,CACN,IAAI,QAAQ,CAAC,aAAa,EAAE;wBAC1B,IAAI,EAAE,oBAAoB;wBAC1B,QAAQ,EAAE,UAAU,CAAC,GAAG;wBACxB,WAAW,EAAE,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE;qBAC5C,CAAC,CACH,CAAC;oBACF,OAAO;gBACT,CAAC;gBACD,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;gBACrB,QAAQ,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;YACxB,CAAC;SACF,CAAC,CAAC;QACH,MAAM,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,iBAAiB,CAAC,SAAS,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;QAChH,MAAM,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;QAChC,OAAO;YACL,KAAK;YACL,IAAI,EAAE,MAAM;YACZ,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,QAAQ,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAChE,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC;SAC7B,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,EAAE,CAAC,SAAS,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QAC5D,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC"}

package/dist/transport/headers.d.ts

@@ -0,0 +1,3 @@
+export declare function assertSafeCustomHeaders(headers: Record<string, string> | undefined): void;
+export declare function isProtectedHeader(name: string): boolean;
+//# sourceMappingURL=headers.d.ts.map

package/dist/transport/headers.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"headers.d.ts","sourceRoot":"","sources":["../../src/transport/headers.ts"],"names":[],"mappings":"AAaA,wBAAgB,uBAAuB,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,SAAS,GAAG,IAAI,CAUzF;AAED,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAEvD"}

package/dist/transport/headers.js

@@ -0,0 +1,26 @@
+import { CliError, EXIT_CODES } from '../errors/cli-error.js';
+const PROTECTED_HEADERS = new Set([
+    'authorization',
+    'cookie',
+    'host',
+    'proxy-authorization',
+    'x-forwarded-host',
+    'x-monkeys-data-perspective',
+    'x-monkeys-teamid',
+    'x-monkeys-userid',
+]);
+export function assertSafeCustomHeaders(headers) {
+    for (const name of Object.keys(headers ?? {})) {
+        if (PROTECTED_HEADERS.has(name.toLowerCase())) {
+            throw new CliError(`不允许覆盖受保护 Header：${name}`, {
+                code: 'PROTECTED_HEADER_OVERRIDE',
+                exitCode: EXIT_CODES.validation,
+                safeDetails: { header: name },
+            });
+        }
+    }
+}
+export function isProtectedHeader(name) {
+    return PROTECTED_HEADERS.has(name.toLowerCase());
+}
+//# sourceMappingURL=headers.js.map

package/dist/transport/headers.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"headers.js","sourceRoot":"","sources":["../../src/transport/headers.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AAE9D,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAAC;IAChC,eAAe;IACf,QAAQ;IACR,MAAM;IACN,qBAAqB;IACrB,kBAAkB;IAClB,4BAA4B;IAC5B,kBAAkB;IAClB,kBAAkB;CACnB,CAAC,CAAC;AAEH,MAAM,UAAU,uBAAuB,CAAC,OAA2C;IACjF,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,IAAI,EAAE,CAAC,EAAE,CAAC;QAC9C,IAAI,iBAAiB,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,EAAE,CAAC;YAC9C,MAAM,IAAI,QAAQ,CAAC,mBAAmB,IAAI,EAAE,EAAE;gBAC5C,IAAI,EAAE,2BAA2B;gBACjC,QAAQ,EAAE,UAAU,CAAC,UAAU;gBAC/B,WAAW,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE;aAC9B,CAAC,CAAC;QACL,CAAC;IACH,CAAC;AACH,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,IAAY;IAC5C,OAAO,iBAAiB,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC;AACnD,CAAC"}

package/dist/transport/http-client.d.ts

@@ -0,0 +1,10 @@
+import type { HttpRequest, HttpResponse, HttpStreamResponse, TransportContext, TransportOptions } from './types.js';
+export declare class HttpClient {
+    #private;
+    private constructor();
+    static create(context: TransportContext, options?: TransportOptions): Promise<HttpClient>;
+    request<T = unknown>(input: HttpRequest): Promise<HttpResponse<T>>;
+    openStream(input: HttpRequest): Promise<HttpStreamResponse>;
+    openAnonymousExternalStream(value: string | URL): Promise<HttpStreamResponse>;
+}
+//# sourceMappingURL=http-client.d.ts.map

package/dist/transport/http-client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"http-client.d.ts","sourceRoot":"","sources":["../../src/transport/http-client.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,WAAW,EAAE,YAAY,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AA8HpH,qBAAa,UAAU;;IAKrB,OAAO,eAIN;IAED,OAAa,MAAM,CAAC,OAAO,EAAE,gBAAgB,EAAE,OAAO,GAAE,gBAAqB,GAAG,OAAO,CAAC,UAAU,CAAC,CAmClG;IAEK,OAAO,CAAC,CAAC,GAAG,OAAO,EAAE,KAAK,EAAE,WAAW,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAwEvE;IAEK,UAAU,CAAC,KAAK,EAAE,WAAW,GAAG,OAAO,CAAC,kBAAkB,CAAC,CA6ChE;IAEK,2BAA2B,CAAC,KAAK,EAAE,MAAM,GAAG,GAAG,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAiDlF;CACF"}