@lark-apaas/miaoda-cli 0.1.4 → 0.1.5-alpha.2f1e0ff

package/dist/services/deploy/modern/atoms/save-plugin-instances.js

@@ -0,0 +1,72 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.savePluginInstances = savePluginInstances;
+const node_fs_1 = __importDefault(require("node:fs"));
+const node_path_1 = __importDefault(require("node:path"));
+const index_1 = require("../../../../api/deploy/index");
+const logger_1 = require("../../../../utils/logger");
+const constants_1 = require("../constants");
+function isValidCapability(o) {
+    if (typeof o !== 'object' || o === null)
+        return false;
+    const id = o.id;
+    return typeof id === 'string' && id.length > 0;
+}
+/**
+ * 扫描 dist/output_capabilities/*.json，过滤出合法 capability，批量上报到 studio_server。
+ *
+ * 合法判定：能 JSON.parse + 顶层 id 是非空字符串。其它字段后端校验。
+ * 目录不存在 / 没有合法 capability → 直接返回 0，pipeline 当作 no-op。
+ * batchSave 调用失败 → 透传抛 AppError，pipeline 兜底 finalizeLocalRelease(Failed)。
+ */
+async function savePluginInstances(opts) {
+    const dir = node_path_1.default.join(opts.projectDir, constants_1.DIST_DIR, constants_1.OUTPUT_CAPABILITIES_DIR);
+    if (!node_fs_1.default.existsSync(dir)) {
+        (0, logger_1.debug)(`save-plugin-instances: ${dir} not present, skipping`);
+        return { saved: 0, skipped: 0 };
+    }
+    const files = node_fs_1.default.readdirSync(dir).filter((f) => f.endsWith('.json'));
+    const instances = [];
+    let skipped = 0;
+    for (const f of files) {
+        const full = node_path_1.default.join(dir, f);
+        let raw;
+        try {
+            raw = node_fs_1.default.readFileSync(full, 'utf-8');
+        }
+        catch (err) {
+            (0, logger_1.debug)(`save-plugin-instances: read ${f} failed: ${err.message}`);
+            skipped++;
+            continue;
+        }
+        let parsed;
+        try {
+            parsed = JSON.parse(raw);
+        }
+        catch {
+            (0, logger_1.debug)(`save-plugin-instances: ${f} is not valid JSON, skipping`);
+            skipped++;
+            continue;
+        }
+        if (!isValidCapability(parsed)) {
+            (0, logger_1.debug)(`save-plugin-instances: ${f} missing 'id' string, skipping`);
+            skipped++;
+            continue;
+        }
+        instances.push({ id: parsed.id, content: JSON.stringify(parsed) });
+    }
+    if (instances.length === 0) {
+        (0, logger_1.log)('deploy', `No capability to register (${String(files.length)} files scanned, all skipped)`);
+        return { saved: 0, skipped };
+    }
+    (0, logger_1.log)('deploy', `Registering ${String(instances.length)} capability instance(s)...`);
+    await (0, index_1.batchSavePluginInstances)({
+        appID: opts.appId,
+        appVersion: opts.version,
+        pluginInstances: instances,
+    });
+    return { saved: instances.length, skipped };
+}

package/dist/services/deploy/modern/atoms/upload.js

@@ -0,0 +1,246 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.uploadArtifacts = uploadArtifacts;
+const node_fs_1 = __importDefault(require("node:fs"));
+const node_os_1 = __importDefault(require("node:os"));
+const node_path_1 = __importDefault(require("node:path"));
+const node_child_process_1 = require("node:child_process");
+const index_1 = require("../../../../api/deploy/index");
+const error_1 = require("../../../../utils/error");
+const logger_1 = require("../../../../utils/logger");
+const constants_1 = require("../constants");
+const protocol_1 = require("../protocol");
+const UPLOAD_PLAN = [
+    {
+        kind: 'tos',
+        dir: constants_1.OUTPUT_DIR,
+        dataKey: protocol_1.DataKey.OUTPUT_TOS_UPLOAD_CREDENTIAL,
+        required: true,
+    },
+    {
+        kind: 'tos',
+        dir: constants_1.OUTPUT_RESOURCE_DIR,
+        dataKey: protocol_1.DataKey.OUTPUT_RESOURCE_TOS_UPLOAD_CREDENTIAL,
+        required: false,
+    },
+    {
+        kind: 'paas_storage',
+        dir: constants_1.OUTPUT_STATIC_DIR,
+        dataKey: protocol_1.DataKey.OUTPUT_STATIC_PAAS_STORAGE_CREDENTIAL,
+    },
+];
+function resolveTosutilPath() {
+    try {
+        const resolved = (0, node_child_process_1.execFileSync)('which', ['tosutil'], { encoding: 'utf-8' }).trim();
+        if (resolved)
+            return resolved;
+    }
+    catch {
+        /* fallthrough */
+    }
+    throw new error_1.AppError('DEPLOY_TOSUTIL_MISSING', 'tosutil is not installed or not in PATH. modern deploy requires sandbox preinstalled tosutil.');
+}
+function tosutilUploadFromTos(cred) {
+    return {
+        accessKeyID: cred.accessKeyID,
+        secretAccessKey: cred.secretAccessKey,
+        sessionToken: cred.sessionToken,
+        endpoint: cred.endpoint,
+        region: cred.region,
+        bucket: cred.bucket,
+        prefix: cred.prefix,
+    };
+}
+function tosutilUploadFromPaasStorage(cred, dataKey) {
+    const { bucket, prefix } = (0, protocol_1.parseTosUploadPrefix)(cred.uploadPrefix, dataKey);
+    return {
+        accessKeyID: cred.accessKeyID,
+        secretAccessKey: cred.secretAccessKey,
+        sessionToken: cred.sessionToken,
+        endpoint: cred.endpoint,
+        region: cred.region,
+        bucket,
+        prefix,
+    };
+}
+/**
+ * 写一个 tosutil 临时 config 文件，注入 STS 凭证 + endpoint + region。
+ * 返回 config 路径，调用方负责清理。
+ */
+function writeTosutilConfig(tosutilPath, cred, label) {
+    const confPath = node_path_1.default.join(node_os_1.default.tmpdir(), `.tosutilconfig-miaoda-${label}-${String(process.pid)}-${String(Date.now())}`);
+    node_fs_1.default.writeFileSync(confPath, '');
+    (0, node_child_process_1.execFileSync)(tosutilPath, [
+        'config',
+        '-conf',
+        confPath,
+        '-e',
+        cred.endpoint,
+        '-i',
+        cred.accessKeyID,
+        '-k',
+        cred.secretAccessKey,
+        '-t',
+        cred.sessionToken,
+        '-re',
+        cred.region,
+    ], { stdio: 'pipe' });
+    return confPath;
+}
+/** 把 tosutil 进程的输出按行回放到 stderr，便于线上排查（沙箱里无法 attach 进程）。 */
+function streamTosutilOutput(output) {
+    if (!output)
+        return;
+    for (const line of output.split('\n')) {
+        if (line.length === 0)
+            continue;
+        process.stderr.write(`[tosutil] ${line}\n`);
+    }
+}
+function normalizeTosDest(bucket, prefix) {
+    const bucketPart = bucket.startsWith('tos://') ? bucket : `tos://${bucket}`;
+    const normalized = prefix.replace(/^\/+/, '');
+    return `${bucketPart.replace(/\/+$/, '')}/${normalized}`;
+}
+/**
+ * 用 tosutil 把目录批量上传到 tos://bucket/prefix（STS 凭证从 config 文件读取）。
+ */
+function uploadDirWithCredential(tosutilPath, sourceDir, cred, label) {
+    const entries = node_fs_1.default.readdirSync(sourceDir);
+    if (entries.length === 0) {
+        (0, logger_1.debug)(`upload: skip empty dir ${sourceDir}`);
+        return;
+    }
+    const dest = normalizeTosDest(cred.bucket, cred.prefix);
+    (0, logger_1.debug)(`upload: ${sourceDir} -> ${dest} (${String(entries.length)} entries)`);
+    const confPath = writeTosutilConfig(tosutilPath, cred, label);
+    let output;
+    try {
+        output = (0, node_child_process_1.execFileSync)(tosutilPath, [
+            'cp',
+            sourceDir,
+            dest,
+            '-r',
+            '-flat',
+            '-j',
+            '5',
+            '-p',
+            '3',
+            '-ps',
+            '10485760',
+            '-f',
+            '-conf',
+            confPath,
+        ], { encoding: 'utf-8', stdio: ['pipe', 'pipe', 'pipe'] });
+        streamTosutilOutput(output);
+    }
+    catch (err) {
+        const e = err;
+        const stderr = (e.stderr ?? '').trim();
+        const stdout = (e.stdout ?? '').trim();
+        streamTosutilOutput(stdout);
+        streamTosutilOutput(stderr);
+        throw new error_1.AppError('DEPLOY_UPLOAD_FAILED', `tosutil cp exited with status ${String(e.status ?? -1)} for ${sourceDir}\n` +
+            `  stderr: ${stderr || '(empty)'}\n` +
+            `  stdout: ${stdout.slice(0, 500) || '(empty)'}`);
+    }
+    finally {
+        try {
+            node_fs_1.default.unlinkSync(confPath);
+        }
+        catch {
+            /* ignore */
+        }
+    }
+    const succeedMatch = /Succeed count is:\s*(\d+)/.exec(output);
+    const failedMatch = /Failed count is:\s*(\d+)/.exec(output);
+    const succeedCount = succeedMatch ? Number.parseInt(succeedMatch[1], 10) : 0;
+    const failedCount = failedMatch ? Number.parseInt(failedMatch[1], 10) : 0;
+    if (failedCount > 0) {
+        throw new error_1.AppError('DEPLOY_UPLOAD_FAILED', `Upload failed: ${String(failedCount)} files failed, ${String(succeedCount)} succeeded. source=${sourceDir}`);
+    }
+    if (succeedCount === 0) {
+        throw new error_1.AppError('DEPLOY_UPLOAD_EMPTY', `Upload failed: 0 files uploaded. source=${sourceDir}. Check tosutil credentials and bucket permissions.`);
+    }
+}
+function uploadTosTarget(tosutilPath, target, localPath, data) {
+    const credRaw = target.required
+        ? (0, protocol_1.requireDataKey)(data, target.dataKey)
+        : (0, protocol_1.optionalDataKey)(data, target.dataKey);
+    if (credRaw === undefined) {
+        (0, logger_1.debug)(`upload: ${target.dir} exists but no credential configured, skipping`);
+        return false;
+    }
+    const cred = (0, protocol_1.parseTosUploadCredential)(credRaw, target.dataKey);
+    (0, logger_1.log)('deploy', `Uploading ${target.dir}...`);
+    uploadDirWithCredential(tosutilPath, localPath, tosutilUploadFromTos(cred), target.dir);
+    return true;
+}
+function uploadPaasStorageTarget(tosutilPath, target, localPath, data) {
+    // 空目录：直接跳过；callbackStatic 也不能调，否则会让后端把"未发生的上传"
+    // 误以为已完成。凭证本身 build 阶段已经消费过 downloadURLPrefix，这里不重复要求。
+    if (node_fs_1.default.readdirSync(localPath).length === 0) {
+        (0, logger_1.debug)(`upload: ${target.dir} is empty, skipping`);
+        return undefined;
+    }
+    const cred = (0, protocol_1.parsePaasStorageCredential)((0, protocol_1.requireDataKey)(data, target.dataKey), target.dataKey);
+    (0, logger_1.log)('deploy', `Uploading ${target.dir}...`);
+    uploadDirWithCredential(tosutilPath, localPath, tosutilUploadFromPaasStorage(cred, target.dataKey), target.dir);
+    return cred;
+}
+/**
+ * 上传三类产物。output / output_resource 走 TOS STS 凭证；output_static 走 PaaS Storage
+ * 凭证（uploadPrefix 解出 tosutil cp 目的，上传完后再调 callbackStatic 把 uploadID
+ * 提交给后端核销）：
+ *   - dist/output            (必传) → OUTPUT_TOS_UPLOAD_CREDENTIAL
+ *   - dist/output_resource   (可选) → OUTPUT_RESOURCE_TOS_UPLOAD_CREDENTIAL
+ *   - dist/output_static     (可选) → OUTPUT_STATIC_PAAS_STORAGE_CREDENTIAL + callbackStatic
+ *
+ * 目录不存在的可选项跳过；output 不存在或凭证缺失抛错。
+ */
+async function uploadArtifacts(opts) {
+    const tosutilPath = resolveTosutilPath();
+    const distDir = node_path_1.default.join(opts.projectDir, constants_1.DIST_DIR);
+    const outcome = { uploaded: 0 };
+    for (const target of UPLOAD_PLAN) {
+        const localPath = node_path_1.default.join(distDir, target.dir);
+        const exists = node_fs_1.default.existsSync(localPath);
+        if (target.kind === 'tos') {
+            if (!exists) {
+                if (target.required) {
+                    throw new error_1.AppError('DEPLOY_NO_BUILD_OUTPUT', `Required directory missing: ${constants_1.DIST_DIR}/${target.dir}`);
+                }
+                (0, logger_1.debug)(`upload: dir not present, skipping ${target.dir}`);
+                continue;
+            }
+            if (uploadTosTarget(tosutilPath, target, localPath, opts.data)) {
+                outcome.uploaded++;
+            }
+            continue;
+        }
+        // PaaS Storage 分支
+        if (!exists) {
+            (0, logger_1.debug)(`upload: dir not present, skipping ${target.dir}`);
+            continue;
+        }
+        const cred = uploadPaasStorageTarget(tosutilPath, target, localPath, opts.data);
+        if (cred) {
+            outcome.staticUploaded = cred;
+            outcome.uploaded++;
+        }
+    }
+    if (outcome.uploaded === 0) {
+        throw new error_1.AppError('DEPLOY_UPLOAD_EMPTY', 'No artifacts uploaded — check build output.');
+    }
+    if (outcome.staticUploaded) {
+        (0, logger_1.log)('deploy', 'Callbacking static upload...');
+        await (0, index_1.callbackStatic)({
+            appID: opts.appId,
+            bucketID: outcome.staticUploaded.bucketID,
+            uploadID: outcome.staticUploaded.uploadID,
+        });
+    }
+}

package/dist/services/deploy/modern/check.js

@@ -0,0 +1,53 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.runDeployChecks = runDeployChecks;
+const node_fs_1 = __importDefault(require("node:fs"));
+const node_path_1 = __importDefault(require("node:path"));
+const error_1 = require("../../../utils/error");
+/**
+ * 项目级 deploy 前置检查：node_modules / .spark/meta.json / package.json.scripts.build。
+ * 任一 error 级别失败抛 AppError，附错误码 DEPLOY_PROJECT_CHECK_FAILED。
+ */
+function runDeployChecks(projectDir) {
+    const issues = [];
+    const nodeModules = node_path_1.default.join(projectDir, 'node_modules');
+    if (!node_fs_1.default.existsSync(nodeModules)) {
+        issues.push('node_modules not found. Run `npm install` (or equivalent) first.');
+    }
+    const metaPath = node_path_1.default.join(projectDir, '.spark', 'meta.json');
+    if (!node_fs_1.default.existsSync(metaPath)) {
+        issues.push('.spark/meta.json not found. Run `miaoda app init` first.');
+    }
+    else {
+        try {
+            const meta = JSON.parse(node_fs_1.default.readFileSync(metaPath, 'utf-8'));
+            if (!meta.stack) {
+                issues.push('.spark/meta.json missing fields: stack');
+            }
+        }
+        catch {
+            issues.push('.spark/meta.json is not valid JSON.');
+        }
+    }
+    const pkgPath = node_path_1.default.join(projectDir, 'package.json');
+    if (!node_fs_1.default.existsSync(pkgPath)) {
+        issues.push('package.json not found.');
+    }
+    else {
+        try {
+            const pkg = JSON.parse(node_fs_1.default.readFileSync(pkgPath, 'utf-8'));
+            if (!pkg.scripts?.build) {
+                issues.push('package.json missing "build" script.');
+            }
+        }
+        catch {
+            issues.push('package.json is not valid JSON.');
+        }
+    }
+    if (issues.length > 0) {
+        throw new error_1.AppError('DEPLOY_PROJECT_CHECK_FAILED', `Project check failed:\n${issues.map((i) => `  - ${i}`).join('\n')}`);
+    }
+}

package/dist/services/deploy/modern/constants.js

@@ -0,0 +1,13 @@
+"use strict";
+// modern deploy 流程使用的目录常量。
+// （旧版的 STACK_CONFIGS / archType / FaaS 相关常量在新接口契约下不再需要——
+//  发布模板差异完全由后端 preRelease.data 下发，CLI 不维护 stack 配置。）
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.OUTPUT_CAPABILITIES_DIR = exports.OUTPUT_STATIC_DIR = exports.OUTPUT_RESOURCE_DIR = exports.OUTPUT_DIR = exports.DIST_DIR = void 0;
+/** 构建产物固定目录约定 */
+exports.DIST_DIR = 'dist';
+exports.OUTPUT_DIR = 'output';
+exports.OUTPUT_RESOURCE_DIR = 'output_resource';
+exports.OUTPUT_STATIC_DIR = 'output_static';
+/** 发布插件能力声明目录：含若干 capability.json 文件，发布时批量注册到 plugin_instances */
+exports.OUTPUT_CAPABILITIES_DIR = 'output_capabilities';

package/dist/services/deploy/modern/index.js

@@ -0,0 +1,16 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.OUTPUT_STATIC_DIR = exports.OUTPUT_RESOURCE_DIR = exports.OUTPUT_DIR = exports.DIST_DIR = exports.optionalDataKey = exports.requireDataKey = exports.DataKey = exports.runDeployChecks = exports.runModernDeploy = void 0;
+var run_1 = require("./run");
+Object.defineProperty(exports, "runModernDeploy", { enumerable: true, get: function () { return run_1.runModernDeploy; } });
+var check_1 = require("./check");
+Object.defineProperty(exports, "runDeployChecks", { enumerable: true, get: function () { return check_1.runDeployChecks; } });
+var protocol_1 = require("./protocol");
+Object.defineProperty(exports, "DataKey", { enumerable: true, get: function () { return protocol_1.DataKey; } });
+Object.defineProperty(exports, "requireDataKey", { enumerable: true, get: function () { return protocol_1.requireDataKey; } });
+Object.defineProperty(exports, "optionalDataKey", { enumerable: true, get: function () { return protocol_1.optionalDataKey; } });
+var constants_1 = require("./constants");
+Object.defineProperty(exports, "DIST_DIR", { enumerable: true, get: function () { return constants_1.DIST_DIR; } });
+Object.defineProperty(exports, "OUTPUT_DIR", { enumerable: true, get: function () { return constants_1.OUTPUT_DIR; } });
+Object.defineProperty(exports, "OUTPUT_RESOURCE_DIR", { enumerable: true, get: function () { return constants_1.OUTPUT_RESOURCE_DIR; } });
+Object.defineProperty(exports, "OUTPUT_STATIC_DIR", { enumerable: true, get: function () { return constants_1.OUTPUT_STATIC_DIR; } });

package/dist/services/deploy/modern/pipelines/index.js

@@ -0,0 +1,5 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.localBuildLocalPublishPipeline = void 0;
+var local_1 = require("./local");
+Object.defineProperty(exports, "localBuildLocalPublishPipeline", { enumerable: true, get: function () { return local_1.localBuildLocalPublishPipeline; } });

package/dist/services/deploy/modern/pipelines/local.js

@@ -0,0 +1,75 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.localBuildLocalPublishPipeline = localBuildLocalPublishPipeline;
+const spark_meta_1 = require("../../../../utils/spark-meta");
+const error_1 = require("../../../../utils/error");
+const logger_1 = require("../../../../utils/logger");
+const index_1 = require("../atoms/index");
+/**
+ * 本地构建 + 本地部署 pipeline。
+ *
+ * 步骤顺序：
+ *   1. prepareDeployContext    — 校验项目 + 读 meta
+ *   2. preRelease              — 签发 pre_release_id / version / 动态配置 data
+ *   3. runBuild                — 本地 npm run build（注入 data 中的 CDN 前缀）
+ *   4. createLocalRelease      — 创建发布单（加锁、拿 releaseID）
+ *   5. uploadArtifacts         — 把产物推到 preRelease 下发的 pre-signed URL
+ *   6. savePluginInstances     — 扫描 dist/output_capabilities/*.json，批量注册插件能力
+ *   7. finalizeLocalRelease    — Finished / Failed 翻终态
+ *
+ * createLocalRelease 提前到 upload 之前：发布单先建出来，
+ * upload / savePluginInstances 在已知 releaseID 的前提下进行；
+ * 任一步失败都会精准把该发布单标记为 Failed，避免遗留挂态。
+ */
+async function localBuildLocalPublishPipeline(opts) {
+    const ctx = (0, index_1.prepareDeployContext)(opts.projectDir, opts.appId);
+    (0, logger_1.log)('deploy', 'Pre-releasing...');
+    const pre = await (0, index_1.preRelease)(ctx.appId, ctx.templateKey);
+    (0, logger_1.log)('deploy', `pre_release_id=${pre.preReleaseID} version=${pre.version}`);
+    // data 文档标注为选填，但本地构建链路所有 atom 都需要其中的 key；
+    // 此处早期检查，把"data 缺失"翻为明确错误码，比让 requireDataKey 在
+    // 各 atom 里散落抛错好排查。
+    if (pre.data === undefined) {
+        throw new error_1.AppError('DEPLOY_PRE_RELEASE_DATA_MISSING', 'preRelease did not return a `data` map — backend tcc may not be configured for current template_key');
+    }
+    const data = pre.data;
+    if (!opts.skipBuild) {
+        (0, index_1.runBuild)({
+            projectDir: ctx.projectDir,
+            appId: ctx.appId,
+            version: pre.version,
+            templateKey: ctx.templateKey,
+            data,
+        });
+    }
+    (0, logger_1.log)('deploy', 'Creating local release...');
+    const release = await (0, index_1.createLocalRelease)(ctx.appId, pre.version);
+    try {
+        (0, logger_1.log)('deploy', 'Uploading artifacts...');
+        await (0, index_1.uploadArtifacts)({ projectDir: ctx.projectDir, appId: ctx.appId, data });
+        const saveResult = await (0, index_1.savePluginInstances)({
+            projectDir: ctx.projectDir,
+            appId: ctx.appId,
+            version: pre.version,
+        });
+        if (saveResult.saved > 0) {
+            (0, logger_1.log)('deploy', `${String(saveResult.saved)} capability instance(s) registered`);
+        }
+        await (0, index_1.finalizeLocalRelease)(ctx.appId, release.releaseID, index_1.LocalReleaseStatus.Finished);
+    }
+    catch (err) {
+        await (0, index_1.finalizeLocalRelease)(ctx.appId, release.releaseID, index_1.LocalReleaseStatus.Failed);
+        throw err;
+    }
+    if (release.onlineUrl !== undefined && release.onlineUrl !== '') {
+        (0, spark_meta_1.writeSparkMeta)(ctx.projectDir, { appUrl: release.onlineUrl });
+    }
+    (0, logger_1.log)('deploy', 'Deployed successfully');
+    return {
+        appId: ctx.appId,
+        version: pre.version,
+        url: release.onlineUrl ?? '',
+        releaseID: release.releaseID,
+        preReleaseID: pre.preReleaseID,
+    };
+}

package/dist/services/deploy/modern/protocol.js

@@ -0,0 +1,122 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.DataKey = void 0;
+exports.requireDataKey = requireDataKey;
+exports.optionalDataKey = optionalDataKey;
+exports.parseTosUploadCredential = parseTosUploadCredential;
+exports.parsePaasStorageCredential = parsePaasStorageCredential;
+exports.parseTosUploadPrefix = parseTosUploadPrefix;
+const error_1 = require("../../../utils/error");
+/**
+ * modern deploy 对外协议常量集中地（SSOT）。
+ *
+ * preRelease 接口返回 `data` 动态配置 map，其 key 由后端按 template_key 在 tcc
+ * 中下发。CLI 端通过本文件枚举的 DataKey 访问 `data`，避免拼写错误散布，
+ * 同时让协议演进（新增 key / 重命名）只需要改这一个文件。
+ */
+exports.DataKey = {
+    // ── CDN 前缀（构建期注入到 build env，用于客户端资源访问） ──
+    /** dist/output_resource 对应的 CDN 域名前缀 */
+    RESOURCE_CDN_PREFIX: 'resource_cdn_prefix',
+    // ── TOS 上传凭证（output / output_resource 两条线，value 为 JSON.stringify 的凭证对象） ──
+    // 凭证对象形态（camelCase）：
+    //   { accessKeyID, secretAccessKey, sessionToken, endpoint, region, bucket, prefix }
+    // CLI 端 JSON.parse 后写 tosutil 临时 config，cp 到 tos://bucket/prefix。
+    /** dist/output 上传凭证（必传） */
+    OUTPUT_TOS_UPLOAD_CREDENTIAL: 'output_tos_upload_credential',
+    /** dist/output_resource 上传凭证（仅当目录存在时使用） */
+    OUTPUT_RESOURCE_TOS_UPLOAD_CREDENTIAL: 'output_resource_tos_upload_credential',
+    // ── PaaS Storage 静态资源凭证（dist/output_static 专用） ──
+    // 形态：JSON.stringify 后的 PaasStorageCredential（见下方 interface）。
+    // 上传走 tosutil（从 uploadPrefix 解析出 bucket/prefix）；上传完成后再调
+    // callbackStatic(appID, bucketID, uploadID) 把本次上传核销给后端；
+    // downloadURLPrefix 替代原 static_cdn_prefix 注入 build env。
+    /** dist/output_static 上传凭证（仅当目录存在时使用） */
+    OUTPUT_STATIC_PAAS_STORAGE_CREDENTIAL: 'output_static_paas_storage_credential',
+};
+/** 取必传 key，缺失抛 AppError（带 key 名，便于后端 tcc 配置排查） */
+function requireDataKey(data, key) {
+    const v = data[key];
+    if (v === undefined || v === '') {
+        throw new error_1.AppError('DEPLOY_DATA_KEY_MISSING', `preRelease.data missing required key "${key}" — backend tcc may not be configured for the current template_key`);
+    }
+    return v;
+}
+/** 取可选 key，缺失返回 undefined（不抛错） */
+function optionalDataKey(data, key) {
+    const v = data[key];
+    return v === undefined || v === '' ? undefined : v;
+}
+const TOS_CREDENTIAL_REQUIRED_FIELDS = [
+    'accessKeyID',
+    'secretAccessKey',
+    'sessionToken',
+    'endpoint',
+    'region',
+    'bucket',
+    'prefix',
+];
+const PAAS_STORAGE_CREDENTIAL_REQUIRED_FIELDS = [
+    'accessKeyID',
+    'secretAccessKey',
+    'sessionToken',
+    'endpoint',
+    'region',
+    'uploadPrefix',
+    'downloadURLPrefix',
+    'uploadID',
+    'bucketID',
+];
+function parseCredentialObject(raw, dataKey) {
+    let parsed;
+    try {
+        parsed = JSON.parse(raw);
+    }
+    catch (err) {
+        throw new error_1.AppError('DEPLOY_CRED_INVALID_JSON', `preRelease.data["${dataKey}"] is not valid JSON: ${err.message}`);
+    }
+    if (typeof parsed !== 'object' || parsed === null) {
+        throw new error_1.AppError('DEPLOY_CRED_INVALID_JSON', `preRelease.data["${dataKey}"] is not an object`);
+    }
+    return parsed;
+}
+function assertStringFields(obj, required, dataKey) {
+    const missing = required.filter((k) => {
+        const v = obj[k];
+        return typeof v !== 'string' || v === '';
+    });
+    if (missing.length > 0) {
+        throw new error_1.AppError('DEPLOY_CRED_INCOMPLETE', `preRelease.data["${dataKey}"] credential missing fields: ${missing.join(', ')}`);
+    }
+    return obj;
+}
+/** JSON.parse + 字段完整性校验：output / output_resource 凭证 */
+function parseTosUploadCredential(raw, dataKey) {
+    const obj = parseCredentialObject(raw, dataKey);
+    return assertStringFields(obj, TOS_CREDENTIAL_REQUIRED_FIELDS, dataKey);
+}
+/** JSON.parse + 字段完整性校验：output_static PaaS Storage 凭证 */
+function parsePaasStorageCredential(raw, dataKey) {
+    const obj = parseCredentialObject(raw, dataKey);
+    return assertStringFields(obj, PAAS_STORAGE_CREDENTIAL_REQUIRED_FIELDS, dataKey);
+}
+/**
+ * 解析 `tos://<storage-bucket>/<segments...>/` 形态的 uploadPrefix。
+ * 返回的 bucket 是 tosutil cp 视角的 TOS 物理 bucket（uploadPrefix 第一段），
+ * prefix 是其余路径（不含开头斜杠，保留可能存在的尾部斜杠以贴合 tosutil 习惯）。
+ *
+ * 注意：这里返回的 bucket 与 PaasStorageCredential.bucketID 不是同一个概念
+ * （bucketID 是 PaaS Storage 逻辑 bucket，给 callbackStatic 用）。
+ */
+function parseTosUploadPrefix(uploadPrefix, dataKey) {
+    const match = /^tos:\/\/([^/]+)\/(.*)$/.exec(uploadPrefix);
+    if (!match) {
+        throw new error_1.AppError('DEPLOY_CRED_INCOMPLETE', `preRelease.data["${dataKey}"].uploadPrefix must look like "tos://<bucket>/<prefix>/", got: ${uploadPrefix}`);
+    }
+    const bucket = match[1];
+    const prefix = match[2];
+    if (bucket === '' || prefix === '') {
+        throw new error_1.AppError('DEPLOY_CRED_INCOMPLETE', `preRelease.data["${dataKey}"].uploadPrefix missing bucket or prefix segment: ${uploadPrefix}`);
+    }
+    return { bucket, prefix };
+}

package/dist/services/deploy/modern/run-types.js

@@ -0,0 +1,4 @@
+"use strict";
+// modern deploy 主入口与 pipeline 共享的输入 / 输出类型。
+// 抽出来避免 run.ts <-> pipelines/* 之间的循环依赖。
+Object.defineProperty(exports, "__esModule", { value: true });

package/dist/services/deploy/modern/run.js

@@ -0,0 +1,13 @@
+"use strict";
+// modern deploy 主入口（dispatch 层）。
+//
+// 当前阶段（Scope A）只接入"本地构建 + 本地部署"一条 pipeline；
+// 后续接入"本地构建 + 远端部署 / 远端构建 + 远端部署"时，在此处按 template_key
+// 或显式 flag 选不同 pipeline。pipeline 之间彼此独立、不共享中间状态。
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.runModernDeploy = runModernDeploy;
+const index_1 = require("./pipelines/index");
+async function runModernDeploy(opts) {
+    // 暂只支持本地构建 + 本地部署
+    return (0, index_1.localBuildLocalPublishPipeline)(opts);
+}

package/dist/services/deploy/modern/template-key-map.js

@@ -0,0 +1,22 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.resolveTemplateKey = resolveTemplateKey;
+/**
+ * 本地 stack 短名 → 后端发布模板 key 的映射。
+ *
+ * .spark/meta.json.stack 存的是脚手架模板短名（vite-react / html ...），
+ * 而服务端 preRelease 接受的 templateKey 是"部署类别"维度，由后端 tcc 注册。
+ * 当前所有支持的 stack 都属于纯前端类别，默认映射到 client_local_deploy；
+ * 未来出现需要走别的 templateKey 的 stack，再在表里加一行覆盖默认。
+ */
+const DEFAULT_TEMPLATE_KEY = 'client_local_deploy';
+const TEMPLATE_KEY_MAP = {
+    'vite-react': DEFAULT_TEMPLATE_KEY,
+    html: DEFAULT_TEMPLATE_KEY,
+};
+/**
+ * 把本地 stack 短名映射到后端 templateKey；未配置的 stack 走默认 client_local_deploy。
+ */
+function resolveTemplateKey(template) {
+    return TEMPLATE_KEY_MAP[template] ?? DEFAULT_TEMPLATE_KEY;
+}

package/dist/services/skills/index.js

@@ -0,0 +1,5 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.readSkillsStatus = void 0;
+var status_1 = require("./status");
+Object.defineProperty(exports, "readSkillsStatus", { enumerable: true, get: function () { return status_1.readSkillsStatus; } });