@lark-apaas/miaoda-cli 0.1.21 → 0.1.22-beta.ad5773e

package/dist/services/deploy/modern/atoms/design-upload.js

@@ -0,0 +1,74 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.uploadDesignArtifacts = uploadDesignArtifacts;
+const node_fs_1 = __importDefault(require("node:fs"));
+const node_path_1 = __importDefault(require("node:path"));
+const error_1 = require("../../../../utils/error");
+const logger_1 = require("../../../../utils/logger");
+const constants_1 = require("../constants");
+const protocol_1 = require("../protocol");
+const tosutil_1 = require("./tosutil");
+/** 递归收集 dir 下相对路径（posix 分隔），与 -flat 上传后远端 key 对齐。 */
+function listLocalRelKeys(dir) {
+    const out = new Set();
+    const walk = (cur, rel) => {
+        for (const entry of node_fs_1.default.readdirSync(cur, { withFileTypes: true })) {
+            const childRel = rel ? `${rel}/${entry.name}` : entry.name;
+            if (entry.isDirectory())
+                walk(node_path_1.default.join(cur, entry.name), childRel);
+            else
+                out.add(childRel);
+        }
+    };
+    walk(dir, '');
+    return out;
+}
+/**
+ * design 部署上传（省带宽）：
+ *   1. 本地 dist/output ──cp(local→tos)──▶ output_backup_path/    （唯一一次上传）
+ *   2. output_backup_path ──cp(tos→tos,同凭证同桶)──▶ output_latest_path  （服务端复制）
+ *   3. ls latest → 跟本地 diff → rm latest 里源端已无的对象          （精确镜像）
+ * design-html 只产 dist/output，无 output_resource / output_static / capability。
+ */
+async function uploadDesignArtifacts(opts) {
+    await Promise.resolve();
+    const tosutilPath = (0, tosutil_1.resolveTosutilPath)();
+    const outputDir = node_path_1.default.join(opts.projectDir, constants_1.DIST_DIR, constants_1.OUTPUT_DIR);
+    if (!node_fs_1.default.existsSync(outputDir)) {
+        throw new error_1.AppError('DEPLOY_NO_BUILD_OUTPUT', `Required directory missing: ${constants_1.DIST_DIR}/${constants_1.OUTPUT_DIR}`);
+    }
+    // 空产物防呆：本地一个文件都没有时，绝不继续（否则 latest 会被整体 prune 清空）。
+    const localKeys = listLocalRelKeys(outputDir);
+    if (localKeys.size === 0) {
+        throw new error_1.AppError('DEPLOY_UPLOAD_EMPTY', `No files under ${constants_1.DIST_DIR}/${constants_1.OUTPUT_DIR} to upload — check build output.`);
+    }
+    const cred = (0, protocol_1.parseTosUploadCredential)((0, protocol_1.requireDataKey)(opts.data, protocol_1.DataKey.OUTPUT_ALL_TOS_UPLOAD_CREDENTIAL), protocol_1.DataKey.OUTPUT_ALL_TOS_UPLOAD_CREDENTIAL);
+    const backupPath = (0, protocol_1.requireDataKey)(opts.data, protocol_1.DataKey.OUTPUT_BACKUP_PATH);
+    const latestPath = (0, protocol_1.requireDataKey)(opts.data, protocol_1.DataKey.OUTPUT_LATEST_PATH);
+    const base = (0, tosutil_1.tosutilUploadFromTos)(cred); // 鉴权 + bucket
+    // 1. 本地 → backup（version）：唯一一次本地上传。
+    //    -ddo（noDirObjects）：不上传文件夹占位对象，避免 latest 残留 `src/` 这类空目录。
+    (0, logger_1.log)('deploy', `Uploading ${constants_1.OUTPUT_DIR} → ${backupPath}...`);
+    (0, tosutil_1.uploadDirWithCredential)(tosutilPath, outputDir, { ...base, prefix: backupPath }, 'output_backup', true);
+    // 2. backup → latest：服务端 tos→tos cp（不占带宽）
+    (0, logger_1.log)('deploy', `Server-side copy ${backupPath} → ${latestPath}...`);
+    (0, tosutil_1.copyTosToTos)(tosutilPath, base, backupPath, latestPath);
+    // 3. latest 精确镜像：删源端已不存在的对象。
+    //    安全阀：远端有对象但跟本地零重合时，判定为 key 形态/ls 解析不匹配，跳过 prune——
+    //    宁可漏删（latest 残留旧文件）也绝不误删整目录（数据丢失）。design-html 的 build.sh
+    //    必产稳定名的 routes.json / *.html，正常重合不会为空，零重合即异常信号。
+    const remoteKeys = (0, tosutil_1.listRemoteKeys)(tosutilPath, { ...base, prefix: latestPath });
+    const overlap = remoteKeys.filter((k) => localKeys.has(k));
+    if (remoteKeys.length > 0 && overlap.length === 0) {
+        (0, logger_1.log)('deploy', `⚠ latest 远端 ${String(remoteKeys.length)} 个对象与本地零重合，疑似 key 形态不匹配，跳过 prune（避免误删）`);
+        return;
+    }
+    const staleKeys = remoteKeys.filter((k) => !localKeys.has(k));
+    if (staleKeys.length > 0) {
+        (0, logger_1.log)('deploy', `Pruning ${String(staleKeys.length)} stale object(s) from latest...`);
+        (0, tosutil_1.removeRemoteKeys)(tosutilPath, { ...base, prefix: latestPath }, staleKeys);
+    }
+}

package/dist/services/deploy/modern/atoms/index.js

@@ -1,12 +1,17 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.savePluginInstances = exports.LocalReleaseStatus = exports.finalizeLocalRelease = exports.createLocalRelease = exports.uploadArtifacts = exports.runBuild = exports.preRelease = exports.prepareDeployContext = void 0;
+exports.savePluginInstances = exports.LocalReleaseStatus = exports.finalizeLocalRelease = exports.createLocalRelease = exports.uploadArtifacts = exports.uploadDesignArtifacts = exports.cleanDesignDist = exports.buildDesignOutput = exports.runBuild = exports.preRelease = exports.prepareDeployContext = void 0;
 var context_1 = require("./context");
 Object.defineProperty(exports, "prepareDeployContext", { enumerable: true, get: function () { return context_1.prepareDeployContext; } });
 var pre_release_1 = require("./pre-release");
 Object.defineProperty(exports, "preRelease", { enumerable: true, get: function () { return pre_release_1.preRelease; } });
 var build_1 = require("./build");
 Object.defineProperty(exports, "runBuild", { enumerable: true, get: function () { return build_1.runBuild; } });
+var design_build_1 = require("./design-build");
+Object.defineProperty(exports, "buildDesignOutput", { enumerable: true, get: function () { return design_build_1.buildDesignOutput; } });
+Object.defineProperty(exports, "cleanDesignDist", { enumerable: true, get: function () { return design_build_1.cleanDesignDist; } });
+var design_upload_1 = require("./design-upload");
+Object.defineProperty(exports, "uploadDesignArtifacts", { enumerable: true, get: function () { return design_upload_1.uploadDesignArtifacts; } });
 var upload_1 = require("./upload");
 Object.defineProperty(exports, "uploadArtifacts", { enumerable: true, get: function () { return upload_1.uploadArtifacts; } });
 var local_release_1 = require("./local-release");

package/dist/services/deploy/modern/atoms/tosutil.js

@@ -0,0 +1,246 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.resolveTosutilPath = resolveTosutilPath;
+exports.tosutilUploadFromTos = tosutilUploadFromTos;
+exports.writeTosutilConfig = writeTosutilConfig;
+exports.streamTosutilOutput = streamTosutilOutput;
+exports.normalizeTosDest = normalizeTosDest;
+exports.uploadDirWithCredential = uploadDirWithCredential;
+exports.copyTosToTos = copyTosToTos;
+exports.listRemoteKeys = listRemoteKeys;
+exports.removeRemoteKeys = removeRemoteKeys;
+const node_fs_1 = __importDefault(require("node:fs"));
+const node_os_1 = __importDefault(require("node:os"));
+const node_path_1 = __importDefault(require("node:path"));
+const node_child_process_1 = require("node:child_process");
+const error_1 = require("../../../../utils/error");
+const logger_1 = require("../../../../utils/logger");
+function resolveTosutilPath() {
+    try {
+        const resolved = (0, node_child_process_1.execFileSync)('which', ['tosutil'], { encoding: 'utf-8' }).trim();
+        if (resolved)
+            return resolved;
+    }
+    catch {
+        /* fallthrough */
+    }
+    throw new error_1.AppError('DEPLOY_TOSUTIL_MISSING', 'tosutil is not installed or not in PATH. modern deploy requires sandbox preinstalled tosutil.');
+}
+function tosutilUploadFromTos(cred) {
+    return {
+        accessKeyID: cred.accessKeyID,
+        secretAccessKey: cred.secretAccessKey,
+        sessionToken: cred.sessionToken,
+        endpoint: cred.endpoint,
+        region: cred.region,
+        bucket: cred.bucket,
+        prefix: cred.prefix,
+    };
+}
+/**
+ * 写一个 tosutil 临时 config 文件，注入 STS 凭证 + endpoint + region。
+ * 返回 config 路径，调用方负责清理。
+ */
+function writeTosutilConfig(tosutilPath, cred, label) {
+    const confPath = node_path_1.default.join(node_os_1.default.tmpdir(), `.tosutilconfig-miaoda-${label}-${String(process.pid)}-${String(Date.now())}`);
+    node_fs_1.default.writeFileSync(confPath, '');
+    (0, node_child_process_1.execFileSync)(tosutilPath, [
+        'config',
+        '-conf',
+        confPath,
+        '-e',
+        cred.endpoint,
+        '-i',
+        cred.accessKeyID,
+        '-k',
+        cred.secretAccessKey,
+        '-t',
+        cred.sessionToken,
+        '-re',
+        cred.region,
+    ], { stdio: 'pipe' });
+    return confPath;
+}
+/** 把 tosutil 进程的输出按行回放到 stderr，便于线上排查（沙箱里无法 attach 进程）。 */
+function streamTosutilOutput(output) {
+    if (!output)
+        return;
+    for (const line of output.split('\n')) {
+        if (line.length === 0)
+            continue;
+        process.stderr.write(`[tosutil] ${line}\n`);
+    }
+}
+function normalizeTosDest(bucket, prefix) {
+    const bucketPart = bucket.startsWith('tos://') ? bucket : `tos://${bucket}`;
+    const normalized = prefix.replace(/^\/+/, '');
+    return `${bucketPart.replace(/\/+$/, '')}/${normalized}`;
+}
+/**
+ * 用 tosutil 把目录批量上传到 tos://bucket/prefix（STS 凭证从 config 文件读取）。
+ */
+function uploadDirWithCredential(tosutilPath, sourceDir, cred, label, 
+/**
+ * 传 true 时加 tosutil `-ddo`：上传时不把文件夹本身作为单独对象上传，
+ * 避免在 TOS 留下 `src/` 这类零字节目录占位对象（删空目录下最后一个文件后“文件夹”仍残留）。
+ * 仅 design 链路传 true；client/nrf 上传保持原行为（不传）。
+ */
+noDirObjects = false) {
+    const entries = node_fs_1.default.readdirSync(sourceDir);
+    if (entries.length === 0) {
+        (0, logger_1.debug)(`upload: skip empty dir ${sourceDir}`);
+        return;
+    }
+    const dest = normalizeTosDest(cred.bucket, cred.prefix);
+    (0, logger_1.debug)(`upload: ${sourceDir} -> ${dest} (${String(entries.length)} entries)`);
+    const confPath = writeTosutilConfig(tosutilPath, cred, label);
+    let output;
+    try {
+        output = (0, node_child_process_1.execFileSync)(tosutilPath, [
+            'cp',
+            sourceDir,
+            dest,
+            '-r',
+            '-flat',
+            '-j',
+            '5',
+            '-p',
+            '3',
+            '-ps',
+            '10485760',
+            '-f',
+            ...(noDirObjects ? ['-ddo'] : []),
+            '-conf',
+            confPath,
+        ], { encoding: 'utf-8', stdio: ['pipe', 'pipe', 'pipe'] });
+        streamTosutilOutput(output);
+    }
+    catch (err) {
+        const e = err;
+        const stderr = (e.stderr ?? '').trim();
+        const stdout = (e.stdout ?? '').trim();
+        streamTosutilOutput(stdout);
+        streamTosutilOutput(stderr);
+        throw new error_1.AppError('DEPLOY_UPLOAD_FAILED', `tosutil cp exited with status ${String(e.status ?? -1)} for ${sourceDir}\n` +
+            `  stderr: ${stderr || '(empty)'}\n` +
+            `  stdout: ${stdout.slice(0, 500) || '(empty)'}`);
+    }
+    finally {
+        try {
+            node_fs_1.default.unlinkSync(confPath);
+        }
+        catch {
+            /* ignore */
+        }
+    }
+    const succeedMatch = /Succeed count is:\s*(\d+)/.exec(output);
+    const failedMatch = /Failed count is:\s*(\d+)/.exec(output);
+    const succeedCount = succeedMatch ? Number.parseInt(succeedMatch[1], 10) : 0;
+    const failedCount = failedMatch ? Number.parseInt(failedMatch[1], 10) : 0;
+    if (failedCount > 0) {
+        throw new error_1.AppError('DEPLOY_UPLOAD_FAILED', `Upload failed: ${String(failedCount)} files failed, ${String(succeedCount)} succeeded. source=${sourceDir}`);
+    }
+    if (succeedCount === 0) {
+        throw new error_1.AppError('DEPLOY_UPLOAD_EMPTY', `Upload failed: 0 files uploaded. source=${sourceDir}. Check tosutil credentials and bucket permissions.`);
+    }
+}
+/** version→latest 同桶同凭证服务端复制：tosutil cp tos://src tos://dst -r -flat -f */
+function copyTosToTos(tosutilPath, cred, srcPrefix, dstPrefix) {
+    const src = normalizeTosDest(cred.bucket, srcPrefix);
+    const dst = normalizeTosDest(cred.bucket, dstPrefix);
+    const confPath = writeTosutilConfig(tosutilPath, cred, 'tos2tos');
+    try {
+        const out = (0, node_child_process_1.execFileSync)(tosutilPath, ['cp', src, dst, '-r', '-flat', '-f', '-j', '5', '-conf', confPath], { encoding: 'utf-8', stdio: ['pipe', 'pipe', 'pipe'] });
+        streamTosutilOutput(out);
+    }
+    catch (err) {
+        const e = err;
+        streamTosutilOutput((e.stdout ?? '').trim());
+        streamTosutilOutput((e.stderr ?? '').trim());
+        throw new error_1.AppError('DEPLOY_UPLOAD_FAILED', `tosutil cp(tos→tos) exited status ${String(e.status ?? -1)}: ${src} → ${dst}`);
+    }
+    finally {
+        try {
+            node_fs_1.default.unlinkSync(confPath);
+        }
+        catch {
+            /* ignore */
+        }
+    }
+}
+/** 列 tos://bucket/prefix 下所有对象，返回相对 prefix 的 key 集合（用 ls -s 精简格式，ls 默认递归）。 */
+function listRemoteKeys(tosutilPath, cred) {
+    const base = normalizeTosDest(cred.bucket, cred.prefix); // tos://bucket/prefix
+    const confPath = writeTosutilConfig(tosutilPath, cred, 'ls');
+    let out;
+    try {
+        // 注意：tosutil ls 没有 -r（默认就递归，-d 才是只列一层），别套 cp/rm 的 -r。
+        out = (0, node_child_process_1.execFileSync)(tosutilPath, ['ls', base, '-s', '-conf', confPath], {
+            encoding: 'utf-8',
+            stdio: ['pipe', 'pipe', 'pipe'],
+        });
+    }
+    catch (err) {
+        const e = err;
+        // tosutil 把参数类错误打到 stdout，故 stderr/stdout 都带上，避免错误信息为空难排查。
+        const detail = [(e.stderr ?? '').trim(), (e.stdout ?? '').trim()].filter(Boolean).join(' | ');
+        throw new error_1.AppError('DEPLOY_UPLOAD_FAILED', `tosutil ls exited status ${String(e.status ?? -1)} for ${base}: ${detail || '(no output)'}`);
+    }
+    finally {
+        try {
+            node_fs_1.default.unlinkSync(confPath);
+        }
+        catch {
+            /* ignore */
+        }
+    }
+    const prefixUri = base.replace(/\/+$/, '') + '/';
+    const keys = [];
+    for (const line of out.split('\n')) {
+        const t = line.trim();
+        if (!t.startsWith(prefixUri))
+            continue;
+        const rel = t.slice(prefixUri.length);
+        // 含以 / 结尾的目录占位对象（如 `src/`）：本地文件集永远不含此类 key，
+        // 故它们必落入镜像 prune 的“stale”集合被删除——清掉历史 -ddo 之前留下的空目录残留。
+        if (rel.length > 0)
+            keys.push(rel);
+    }
+    return keys;
+}
+/** 删除 tos://bucket/prefix 下指定相对 key（逐个 rm -f）。 */
+function removeRemoteKeys(tosutilPath, cred, relKeys) {
+    if (relKeys.length === 0)
+        return;
+    const confPath = writeTosutilConfig(tosutilPath, cred, 'rm');
+    const prefix = cred.prefix.replace(/\/+$/, '');
+    const failed = [];
+    try {
+        for (const rel of relKeys) {
+            // 用与 cp/ls 同一份 normalizeTosDest 拼目标 URI，避免删除路径与其它操作漂移。
+            const dest = normalizeTosDest(cred.bucket, `${prefix}/${rel}`);
+            try {
+                (0, node_child_process_1.execFileSync)(tosutilPath, ['rm', dest, '-f', '-conf', confPath], {
+                    stdio: ['pipe', 'pipe', 'pipe'],
+                });
+            }
+            catch {
+                failed.push(rel);
+            }
+        }
+    }
+    finally {
+        try {
+            node_fs_1.default.unlinkSync(confPath);
+        }
+        catch {
+            /* ignore */
+        }
+    }
+    if (failed.length > 0) {
+        throw new error_1.AppError('DEPLOY_UPLOAD_FAILED', `prune latest failed for: ${failed.join(', ')}`);
+    }
+}

package/dist/services/deploy/modern/atoms/upload.js

@@ -5,14 +5,13 @@ var __importDefault = (this && this.__importDefault) || function (mod) {
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.uploadArtifacts = uploadArtifacts;
 const node_fs_1 = __importDefault(require("node:fs"));
-const node_os_1 = __importDefault(require("node:os"));
 const node_path_1 = __importDefault(require("node:path"));
-const node_child_process_1 = require("node:child_process");
 const index_1 = require("../../../../api/deploy/index");
 const error_1 = require("../../../../utils/error");
 const logger_1 = require("../../../../utils/logger");
 const constants_1 = require("../constants");
 const protocol_1 = require("../protocol");
+const tosutil_1 = require("./tosutil");
 const UPLOAD_PLAN = [
     {
         kind: 'tos',
@@ -32,28 +31,6 @@ const UPLOAD_PLAN = [
         dataKey: protocol_1.DataKey.OUTPUT_STATIC_PAAS_STORAGE_CREDENTIAL,
     },
 ];
-function resolveTosutilPath() {
-    try {
-        const resolved = (0, node_child_process_1.execFileSync)('which', ['tosutil'], { encoding: 'utf-8' }).trim();
-        if (resolved)
-            return resolved;
-    }
-    catch {
-        /* fallthrough */
-    }
-    throw new error_1.AppError('DEPLOY_TOSUTIL_MISSING', 'tosutil is not installed or not in PATH. modern deploy requires sandbox preinstalled tosutil.');
-}
-function tosutilUploadFromTos(cred) {
-    return {
-        accessKeyID: cred.accessKeyID,
-        secretAccessKey: cred.secretAccessKey,
-        sessionToken: cred.sessionToken,
-        endpoint: cred.endpoint,
-        region: cred.region,
-        bucket: cred.bucket,
-        prefix: cred.prefix,
-    };
-}
 function tosutilUploadFromPaasStorage(cred, dataKey) {
     const { bucket, prefix } = (0, protocol_1.parseTosUploadPrefix)(cred.uploadPrefix, dataKey);
     return {
@@ -66,106 +43,6 @@ function tosutilUploadFromPaasStorage(cred, dataKey) {
         prefix,
     };
 }
-/**
- * 写一个 tosutil 临时 config 文件，注入 STS 凭证 + endpoint + region。
- * 返回 config 路径，调用方负责清理。
- */
-function writeTosutilConfig(tosutilPath, cred, label) {
-    const confPath = node_path_1.default.join(node_os_1.default.tmpdir(), `.tosutilconfig-miaoda-${label}-${String(process.pid)}-${String(Date.now())}`);
-    node_fs_1.default.writeFileSync(confPath, '');
-    (0, node_child_process_1.execFileSync)(tosutilPath, [
-        'config',
-        '-conf',
-        confPath,
-        '-e',
-        cred.endpoint,
-        '-i',
-        cred.accessKeyID,
-        '-k',
-        cred.secretAccessKey,
-        '-t',
-        cred.sessionToken,
-        '-re',
-        cred.region,
-    ], { stdio: 'pipe' });
-    return confPath;
-}
-/** 把 tosutil 进程的输出按行回放到 stderr，便于线上排查（沙箱里无法 attach 进程）。 */
-function streamTosutilOutput(output) {
-    if (!output)
-        return;
-    for (const line of output.split('\n')) {
-        if (line.length === 0)
-            continue;
-        process.stderr.write(`[tosutil] ${line}\n`);
-    }
-}
-function normalizeTosDest(bucket, prefix) {
-    const bucketPart = bucket.startsWith('tos://') ? bucket : `tos://${bucket}`;
-    const normalized = prefix.replace(/^\/+/, '');
-    return `${bucketPart.replace(/\/+$/, '')}/${normalized}`;
-}
-/**
- * 用 tosutil 把目录批量上传到 tos://bucket/prefix（STS 凭证从 config 文件读取）。
- */
-function uploadDirWithCredential(tosutilPath, sourceDir, cred, label) {
-    const entries = node_fs_1.default.readdirSync(sourceDir);
-    if (entries.length === 0) {
-        (0, logger_1.debug)(`upload: skip empty dir ${sourceDir}`);
-        return;
-    }
-    const dest = normalizeTosDest(cred.bucket, cred.prefix);
-    (0, logger_1.debug)(`upload: ${sourceDir} -> ${dest} (${String(entries.length)} entries)`);
-    const confPath = writeTosutilConfig(tosutilPath, cred, label);
-    let output;
-    try {
-        output = (0, node_child_process_1.execFileSync)(tosutilPath, [
-            'cp',
-            sourceDir,
-            dest,
-            '-r',
-            '-flat',
-            '-j',
-            '5',
-            '-p',
-            '3',
-            '-ps',
-            '10485760',
-            '-f',
-            '-conf',
-            confPath,
-        ], { encoding: 'utf-8', stdio: ['pipe', 'pipe', 'pipe'] });
-        streamTosutilOutput(output);
-    }
-    catch (err) {
-        const e = err;
-        const stderr = (e.stderr ?? '').trim();
-        const stdout = (e.stdout ?? '').trim();
-        streamTosutilOutput(stdout);
-        streamTosutilOutput(stderr);
-        throw new error_1.AppError('DEPLOY_UPLOAD_FAILED', `tosutil cp exited with status ${String(e.status ?? -1)} for ${sourceDir}\n` +
-            `  stderr: ${stderr || '(empty)'}\n` +
-            `  stdout: ${stdout.slice(0, 500) || '(empty)'}`);
-    }
-    finally {
-        try {
-            node_fs_1.default.unlinkSync(confPath);
-        }
-        catch {
-            /* ignore */
-        }
-    }
-    const succeedMatch = /Succeed count is:\s*(\d+)/.exec(output);
-    const failedMatch = /Failed count is:\s*(\d+)/.exec(output);
-    const succeedCount = succeedMatch ? Number.parseInt(succeedMatch[1], 10) : 0;
-    const failedCount = failedMatch ? Number.parseInt(failedMatch[1], 10) : 0;
-    if (failedCount > 0) {
-        throw new error_1.AppError('DEPLOY_UPLOAD_FAILED', `Upload failed: ${String(failedCount)} files failed, ${String(succeedCount)} succeeded. source=${sourceDir}`);
-    }
-    if (succeedCount === 0) {
-        throw new error_1.AppError('DEPLOY_UPLOAD_EMPTY', `Upload failed: 0 files uploaded. source=${sourceDir}. Check tosutil credentials and bucket permissions.`);
-    }
-}
 function uploadTosTarget(tosutilPath, target, localPath, data) {
     const credRaw = target.required
         ? (0, protocol_1.requireDataKey)(data, target.dataKey)
@@ -176,7 +53,7 @@ function uploadTosTarget(tosutilPath, target, localPath, data) {
     }
     const cred = (0, protocol_1.parseTosUploadCredential)(credRaw, target.dataKey);
     (0, logger_1.log)('deploy', `Uploading ${target.dir}...`);
-    uploadDirWithCredential(tosutilPath, localPath, tosutilUploadFromTos(cred), target.dir);
+    (0, tosutil_1.uploadDirWithCredential)(tosutilPath, localPath, (0, tosutil_1.tosutilUploadFromTos)(cred), target.dir);
     return true;
 }
 function uploadPaasStorageTarget(tosutilPath, target, localPath, data) {
@@ -188,7 +65,7 @@ function uploadPaasStorageTarget(tosutilPath, target, localPath, data) {
     }
     const cred = (0, protocol_1.parsePaasStorageCredential)((0, protocol_1.requireDataKey)(data, target.dataKey), target.dataKey);
     (0, logger_1.log)('deploy', `Uploading ${target.dir}...`);
-    uploadDirWithCredential(tosutilPath, localPath, tosutilUploadFromPaasStorage(cred, target.dataKey), target.dir);
+    (0, tosutil_1.uploadDirWithCredential)(tosutilPath, localPath, tosutilUploadFromPaasStorage(cred, target.dataKey), target.dir);
     return cred;
 }
 /**
@@ -202,7 +79,7 @@ function uploadPaasStorageTarget(tosutilPath, target, localPath, data) {
  * 目录不存在的可选项跳过；output 不存在或凭证缺失抛错。
  */
 async function uploadArtifacts(opts) {
-    const tosutilPath = resolveTosutilPath();
+    const tosutilPath = (0, tosutil_1.resolveTosutilPath)();
     const distDir = node_path_1.default.join(opts.projectDir, constants_1.DIST_DIR);
     const outcome = { uploaded: 0 };
     for (const target of UPLOAD_PLAN) {

package/dist/services/deploy/modern/check.js

@@ -7,16 +7,20 @@ exports.runDeployChecks = runDeployChecks;
 const node_fs_1 = __importDefault(require("node:fs"));
 const node_path_1 = __importDefault(require("node:path"));
 const error_1 = require("../../../utils/error");
+const template_key_map_1 = require("./template-key-map");
 /**
  * 项目级 deploy 前置检查：node_modules / .spark/meta.json / package.json.scripts.build。
  * 任一 error 级别失败抛 AppError，附错误码 DEPLOY_PROJECT_CHECK_FAILED。
+ *
+ * design buildless 链路（design_local_deploy，如 design-html）的 build 直接拷源码 + 生成
+ * routes.json（见 atoms/design-build.ts），不跑 `npm run build`、不读 package.json、不依赖
+ * node_modules，因此对其跳过 node_modules / package.json / build 脚本三项检查，只保留
+ * meta.json + stack 校验。
  */
 function runDeployChecks(projectDir) {
     const issues = [];
-    const nodeModules = node_path_1.default.join(projectDir, 'node_modules');
-    if (!node_fs_1.default.existsSync(nodeModules)) {
-        issues.push('node_modules not found. Run `npm install` (or equivalent) first.');
-    }
+    // 先读 stack 判断是否 design buildless 链路，决定后续是否豁免 node_modules / build 检查。
+    let stack;
     const metaPath = node_path_1.default.join(projectDir, '.spark', 'meta.json');
     if (!node_fs_1.default.existsSync(metaPath)) {
         issues.push('.spark/meta.json not found. Run `miaoda app init` first.');
@@ -24,6 +28,7 @@ function runDeployChecks(projectDir) {
     else {
         try {
             const meta = JSON.parse(node_fs_1.default.readFileSync(metaPath, 'utf-8'));
+            stack = meta.stack;
             if (!meta.stack) {
                 issues.push('.spark/meta.json missing fields: stack');
             }
@@ -32,19 +37,26 @@ function runDeployChecks(projectDir) {
             issues.push('.spark/meta.json is not valid JSON.');
         }
     }
-    const pkgPath = node_path_1.default.join(projectDir, 'package.json');
-    if (!node_fs_1.default.existsSync(pkgPath)) {
-        issues.push('package.json not found.');
-    }
-    else {
-        try {
-            const pkg = JSON.parse(node_fs_1.default.readFileSync(pkgPath, 'utf-8'));
-            if (!pkg.scripts?.build) {
-                issues.push('package.json missing "build" script.');
-            }
+    const isDesign = stack !== undefined && (0, template_key_map_1.resolveTemplateKey)(stack) === template_key_map_1.DESIGN_LOCAL_DEPLOY;
+    if (!isDesign) {
+        const nodeModules = node_path_1.default.join(projectDir, 'node_modules');
+        if (!node_fs_1.default.existsSync(nodeModules)) {
+            issues.push('node_modules not found. Run `npm install` (or equivalent) first.');
         }
-        catch {
-            issues.push('package.json is not valid JSON.');
+        const pkgPath = node_path_1.default.join(projectDir, 'package.json');
+        if (!node_fs_1.default.existsSync(pkgPath)) {
+            issues.push('package.json not found.');
+        }
+        else {
+            try {
+                const pkg = JSON.parse(node_fs_1.default.readFileSync(pkgPath, 'utf-8'));
+                if (!pkg.scripts?.build) {
+                    issues.push('package.json missing "build" script.');
+                }
+            }
+            catch {
+                issues.push('package.json is not valid JSON.');
+            }
         }
     }
     if (issues.length > 0) {

package/dist/services/deploy/modern/patch/actions.js

@@ -0,0 +1,61 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.buildTosActions = buildTosActions;
+const node_fs_1 = __importDefault(require("node:fs"));
+const node_path_1 = __importDefault(require("node:path"));
+const error_1 = require("../../../../utils/error");
+const index_1 = require("../../../../api/deploy/index");
+const content_1 = require("./content");
+const routes_1 = require("./routes");
+/** 校验相对路径：禁绝对路径、禁含 ".." 段；normalize 成 posix 相对。 */
+function normalizeRel(rel) {
+    if (node_path_1.default.isAbsolute(rel) || rel.startsWith('/')) {
+        throw new error_1.AppError('ARGS_INVALID', `文件路径不能是绝对路径：${rel}`);
+    }
+    const posix = rel.split(node_path_1.default.sep).join('/').replace(/^\.\//, '');
+    if (posix.split('/').includes('..')) {
+        throw new error_1.AppError('ARGS_INVALID', `文件路径不能包含 "..":${rel}`);
+    }
+    return posix;
+}
+function readAction(projectDir, rel, actionType) {
+    const filePath = normalizeRel(rel);
+    const abs = node_path_1.default.join(projectDir, filePath);
+    if (!node_fs_1.default.existsSync(abs) || !node_fs_1.default.statSync(abs).isFile()) {
+        throw new error_1.AppError('ARGS_INVALID', `文件不存在：${filePath}`);
+    }
+    const { content, base64Content } = (0, content_1.encodeContent)(node_fs_1.default.readFileSync(abs));
+    return { actionType, filePath, content, base64Content };
+}
+function isHtml(rel) {
+    return rel.toLowerCase().endsWith('.html');
+}
+/**
+ * 把 changeset 组成 TosFileAction[]：
+ *   - create/update 读本地文件、自动编码；delete 仅 FilePath。
+ *   - .html 被 create / delete（路由集合变化）时，追加重算 routes.json 的 UPDATE action；
+ *     纯 update 现有 .html 只改内容、不改路由集合，不重算 routes.json。
+ */
+function buildTosActions(projectDir, cs) {
+    const actions = [];
+    for (const rel of cs.creates)
+        actions.push(readAction(projectDir, rel, index_1.TosActionType.CREATE));
+    for (const rel of cs.updates)
+        actions.push(readAction(projectDir, rel, index_1.TosActionType.UPDATE));
+    for (const rel of cs.deletes) {
+        actions.push({ actionType: index_1.TosActionType.DELETE, filePath: normalizeRel(rel) });
+    }
+    const routeSetChanged = [...cs.creates, ...cs.deletes].some(isHtml);
+    if (routeSetChanged) {
+        actions.push({
+            actionType: index_1.TosActionType.UPDATE,
+            filePath: 'routes.json',
+            content: (0, routes_1.generateRoutes)(projectDir),
+            base64Content: false,
+        });
+    }
+    return actions;
+}

package/dist/services/deploy/modern/patch/content.js

@@ -0,0 +1,18 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.encodeContent = encodeContent;
+/**
+ * 自动判别文件内容编码：
+ *   - 含 0x00 字节 → 二进制 → base64
+ *   - 否则 round-trip 校验 UTF-8：能无损 decode→encode → 文本直传；否则 base64
+ */
+function encodeContent(buf) {
+    if (buf.includes(0x00)) {
+        return { content: buf.toString('base64'), base64Content: true };
+    }
+    const text = buf.toString('utf8');
+    if (Buffer.from(text, 'utf8').equals(buf)) {
+        return { content: text, base64Content: false };
+    }
+    return { content: buf.toString('base64'), base64Content: true };
+}