@lazycatcloud/lzc-cli 2.0.0-pre.5 → 2.0.0-pre.6

package/changelog.md

@@ -1,5 +1,12 @@
 # Changelog
 
+## [2.0.0-pre.6](https://gitee.com/linakesi/lzc-cli/compare/v2.0.0-pre.5...v2.0.0-pre.6) (2026-03-25)
+
+### Features
+
+- add manifest lint command and build-time warnings for deprecated fields, unknown fields, and app store requirements
+- reject appstore publish and pre-publish when the packaged LPK does not satisfy store requirements
+
 ## [2.0.0-pre.5](https://gitee.com/linakesi/lzc-cli/compare/v2.0.0-pre.4...v2.0.0-pre.5) (2026-03-19)
 
 ### Features

package/lib/app/index.js

@@ -181,6 +181,29 @@ export function lpkProjectCommand(program) {
 				await lpk.exec();
 			},
 		},
+		{
+			command: 'lint [context]',
+			desc: 'Lint manifest compatibility and App Store hints',
+			builder: (args) => {
+				args.option('f', {
+					alias: 'file',
+					describe: t('lzc_cli.lib.app.index.lpk_cmd_build_args_file_desc', '指定构建的lzc-build.yml文件'),
+					default: 'lzc-build.yml',
+					type: 'string',
+				});
+			},
+			handler: async ({ context, file }) => {
+				const cwd = context ? path.resolve(context) : process.cwd();
+				const lpk = await new LpkBuild(cwd, file).init();
+				logger.info(`Build config: ${lpk.optionsFilePath}`);
+				const warnings = await lpk.lint();
+				if (warnings.length === 0) {
+					logger.info('No manifest lint warnings found.');
+					return;
+				}
+				logger.warn(`Found ${warnings.length} manifest lint warning(s).`);
+			},
+		},
 		{
 			command: 'devshell [context]',
 			desc: false,

package/lib/app/lpk_build.js

@@ -2,10 +2,11 @@ import path from 'node:path';
 import fs from 'node:fs';
 import zlib from 'node:zlib';
 import logger from 'loglevel';
-import { isDirExist, isDirSync, isFileExist, dumpToYaml, envTemplateFile, isValidPackageName, tarContentDir, isPngWithFile, isMacOs, isWindows, isLinux } from '../utils.js';
+import { isDirExist, isDirSync, isFileExist, dumpToYaml, envTemplateFile, isValidPackageName, tarContentDir, isPngWithFile, isMacOs, isWindows, isLinux, REPRODUCIBLE_ARCHIVE_DATE } from '../utils.js';
 import spawn from 'cross-spawn';
 import { loadEffectiveManifest, splitManifestAndPackageInfo, findManifestStaticFields, PACKAGE_FILE_NAME } from '../package_info.js';
 import { buildVarsFromEnvEntries, normalizeBuildEnvEntries, preprocessManifestFile } from './manifest_build.js';
+import { collectManifestLintWarnings, logManifestLintWarnings } from './manifest_lint.js';
 import archiver from 'archiver';
 import yaml from 'js-yaml';
 import { buildConfiguredImagesToTempDir } from './lpk_build_images.js';
@@ -32,7 +33,10 @@ async function archiveFolderTo(appDir, out, format = 'zip') {
 		});
 		archive.pipe(output);
 
-		archive.directory(appDir, false);
+		archive.directory(appDir, false, (entryData) => ({
+			...entryData,
+			date: REPRODUCIBLE_ARCHIVE_DATE,
+		}));
 		archive.finalize();
 	});
 }
@@ -432,6 +436,7 @@ export class LpkBuild {
 		this.hasPackageMetadataOverrides = false;
 		this.buildVars = null;
 		this.preprocessedManifestText = '';
+		this.lintWarnings = [];
 
 		this.beforeBuildPackageFn = [];
 		this.beforeDumpYamlFn = [];
@@ -529,6 +534,27 @@ export class LpkBuild {
 		return this.manifest;
 	}
 
+	async collectLintWarnings() {
+		await this.getManifest();
+		this.lintWarnings = await collectManifestLintWarnings({
+			cwd: this.pwd,
+			options: this.options,
+			manifestPath: this.manifestFilePath,
+			sourceManifest: this.sourceManifest,
+			manifest: this.manifest,
+			packageInfo: this.packageInfo,
+		});
+		return this.lintWarnings;
+	}
+
+	async lint({ silent = false } = {}) {
+		const warnings = await this.collectLintWarnings();
+		if (!silent) {
+			logManifestLintWarnings(warnings, logger);
+		}
+		return warnings;
+	}
+
 	async exec() {
 		await this.getManifest();
 
@@ -538,6 +564,8 @@ export class LpkBuild {
 			}, this.options);
 		}
 
+		await this.lint();
+
 		if (this.options['buildscript']) {
 			const cmd = isWindows ? 'cmd' : 'sh';
 			const cmdArgs = isWindows ? '/c' : '-c';

package/lib/app/lpk_build_images.js

@@ -633,6 +633,7 @@ export async function buildConfiguredImagesToTempDir(rawConfig, manifest, cwd, t
 		}
 		bridge = new DebugBridge(cwd, buildRemote);
 		await bridge.init();
+		await bridge.ensureLpkV2Supported();
 	}
 	if (hasLocalBuilder) {
 		targetPlatform = bridge ? await bridge.platform() : DEFAULT_LOCAL_TARGET_PLATFORM;

package/lib/app/lpk_installer.js

@@ -1,7 +1,7 @@
 import logger from 'loglevel';
 import fs from 'node:fs';
 import path from 'node:path';
-import { Downloader, extractLpkSync } from '../utils.js';
+import { Downloader, detectLpkArchiveFormat, extractLpkSync } from '../utils.js';
 import { loadEffectiveManifestFromFiles } from '../package_info.js';
 import { DebugBridge } from '../debug_bridge.js';
 import shellapi from '../shellapi.js';
@@ -10,6 +10,11 @@ import { triggerApk } from './apkshell.js';
 import { resolveBuildRemoteFromFile } from '../build_remote.js';
 
 export const installConfig = { apk: true };
+
+function isLpkV2Package(pkgPath) {
+	return detectLpkArchiveFormat(pkgPath) === 'tar';
+}
+
 // 从一个目录中找出修改时间最新的包
 function findOnceLpkByDir(dir = process.cwd()) {
 	const pkg = fs
@@ -123,6 +128,9 @@ export class LpkInstaller {
 			}
 			const bridge = new DebugBridge(process.cwd(), buildRemote);
 			await bridge.init();
+			if (isLpkV2Package(pkgPath)) {
+				await bridge.ensureLpkV2Supported();
+			}
 			logger.info(t('lzc_cli.lib.app.lpk_installer.install_from_file_start_tips', '开始安装应用'));
 			await bridge.install(pkgPath, manifest ? manifest['package'] : '');
 			logger.info('\n');
@@ -144,3 +152,7 @@ export class LpkInstaller {
 		}
 	}
 }
+
+export const __test__ = {
+	isLpkV2Package,
+};

package/lib/app/manifest_lint.js

@@ -0,0 +1,464 @@
+import fs from 'node:fs';
+import path from 'node:path';
+import semver from 'semver';
+import { findManifestStaticFields } from '../package_info.js';
+
+export const STORE_ICON_MAX_BYTES = 200 * 1024;
+export const STORE_IMAGE_REGISTRY_PREFIX = 'registry.lazycat.cloud';
+
+function hasOwn(obj, key) {
+	return Object.prototype.hasOwnProperty.call(obj ?? {}, key);
+}
+
+function hasPath(obj, pathList) {
+	let current = obj;
+	for (const key of pathList) {
+		if (!current || typeof current !== 'object' || !hasOwn(current, key)) {
+			return false;
+		}
+		current = current[key];
+	}
+	return true;
+}
+
+function createWarning(code, message) {
+	return { code, message };
+}
+
+function quoteFieldList(fields) {
+	return fields.map((field) => `\`${field}\``).join(', ');
+}
+
+function normalizeString(value) {
+	return String(value ?? '').trim();
+}
+
+const ANY = Symbol('any');
+
+function arrayOf(value) {
+	return { kind: 'array', value };
+}
+
+function mapOf(value) {
+	return { kind: 'map', value };
+}
+
+const APP_HEALTHCHECK_SCHEMA = {
+	test_url: ANY,
+	disable: ANY,
+	start_period: ANY,
+	timeout: ANY,
+};
+
+const SERVICE_HEALTHCHECK_SCHEMA = {
+	test: ANY,
+	timeout: ANY,
+	interval: ANY,
+	retries: ANY,
+	start_period: ANY,
+	start_interval: ANY,
+	disable: ANY,
+	test_url: ANY,
+};
+
+const MANIFEST_SCHEMA = {
+	package: ANY,
+	version: ANY,
+	name: ANY,
+	description: ANY,
+	usage: ANY,
+	license: ANY,
+	homepage: ANY,
+	author: ANY,
+	min_os_version: ANY,
+	unsupported_platforms: ANY,
+	locales: ANY,
+	ext_config: {
+		permissions: ANY,
+		enable_document_access: ANY,
+		enable_media_access: ANY,
+		enable_clientfs_access: ANY,
+		disable_grpc_web_on_root: ANY,
+		default_prefix_domain: ANY,
+		enable_bind_mime_globs: ANY,
+		disable_url_raw_path: ANY,
+		remove_this_request_headers: ANY,
+		fix_websocket_header: ANY,
+	},
+	application: {
+		image: ANY,
+		background_task: ANY,
+		subdomain: ANY,
+		secondary_domains: ANY,
+		multi_instance: ANY,
+		usb_accel: ANY,
+		gpu_accel: ANY,
+		kvm_accel: ANY,
+		file_handler: {
+			mime: ANY,
+			actions: ANY,
+		},
+		entries: arrayOf({
+			id: ANY,
+			title: ANY,
+			path: ANY,
+			prefix_domain: ANY,
+		}),
+		routes: ANY,
+		upstreams: arrayOf({
+			location: ANY,
+			disable_trim_location: ANY,
+			domain_prefix: ANY,
+			backend: ANY,
+			use_backend_host: ANY,
+			backend_launch_command: ANY,
+			trim_url_suffix: ANY,
+			disable_backend_ssl_verify: ANY,
+			disable_auto_health_checking: ANY,
+			disable_url_raw_path: ANY,
+			remove_this_request_headers: ANY,
+			fix_websocket_header: ANY,
+			dump_http_headers_when_5xx: ANY,
+			dump_http_headers_when_paths: ANY,
+		}),
+		injects: arrayOf({
+			id: ANY,
+			on: ANY,
+			auth_required: ANY,
+			prefix_domain: ANY,
+			when: ANY,
+			unless: ANY,
+			do: arrayOf({
+				src: ANY,
+				params: ANY,
+			}),
+		}),
+		public_path: ANY,
+		workdir: ANY,
+		ingress: arrayOf({
+			protocol: ANY,
+			port: ANY,
+			service: ANY,
+			description: ANY,
+			publish_port: ANY,
+			send_port_info: ANY,
+			yes_i_want_80_443: ANY,
+		}),
+		environment: ANY,
+		health_check: APP_HEALTHCHECK_SCHEMA,
+		oidc_redirect_path: ANY,
+		handlers: {
+			acl_handler: ANY,
+			error_page_templates: ANY,
+		},
+		user_app: ANY,
+		depends_on: ANY,
+	},
+	services: mapOf({
+		init: ANY,
+		image: ANY,
+		environment: ANY,
+		entrypoint: ANY,
+		command: ANY,
+		tmpfs: ANY,
+		depends_on: ANY,
+		healthcheck: SERVICE_HEALTHCHECK_SCHEMA,
+		health_check: SERVICE_HEALTHCHECK_SCHEMA,
+		user: ANY,
+		cpu_shares: ANY,
+		cpus: ANY,
+		mem_limit: ANY,
+		shm_size: ANY,
+		network_mode: ANY,
+		netadmin: ANY,
+		setup_script: ANY,
+		binds: ANY,
+		runtime: ANY,
+	}),
+};
+
+function collectUnknownFieldPaths(value, schema, currentPath = '') {
+	if (schema === ANY || !value || typeof value !== 'object') {
+		return [];
+	}
+
+	if (Array.isArray(value)) {
+		if (!schema || schema.kind !== 'array') {
+			return [];
+		}
+		return value.flatMap((item, index) => collectUnknownFieldPaths(item, schema.value, `${currentPath}[${index}]`));
+	}
+
+	if (schema?.kind === 'map') {
+		return Object.entries(value).flatMap(([key, item]) => collectUnknownFieldPaths(item, schema.value, currentPath ? `${currentPath}.${key}` : key));
+	}
+
+	const unknownPaths = [];
+	for (const [key, item] of Object.entries(value)) {
+		const nextPath = currentPath ? `${currentPath}.${key}` : key;
+		if (!hasOwn(schema, key)) {
+			unknownPaths.push(nextPath);
+			continue;
+		}
+		unknownPaths.push(...collectUnknownFieldPaths(item, schema[key], nextPath));
+	}
+	return unknownPaths;
+}
+
+function collectUnknownFieldWarnings(sourceManifest) {
+	const unknownFields = collectUnknownFieldPaths(sourceManifest ?? {}, MANIFEST_SCHEMA);
+	if (unknownFields.length === 0) {
+		return [];
+	}
+	return [createWarning('unknown-manifest-fields', `Unknown manifest fields detected: ${quoteFieldList(unknownFields)}. Please confirm whether they take effect.`)];
+}
+
+function collectStaticFieldWarnings(sourceManifest) {
+	const staticFields = findManifestStaticFields(sourceManifest ?? {});
+	if (staticFields.length === 0) {
+		return [];
+	}
+	return [
+		createWarning(
+			'legacy-static-package-fields',
+			`Top-level static package fields in lzc-manifest.yml are a legacy LPK v1 layout. Move ${quoteFieldList(staticFields)} to package.yml for LPK v2.`,
+		),
+	];
+}
+
+function collectApplicationWarnings(sourceManifest) {
+	const warnings = [];
+	if (hasPath(sourceManifest, ['application', 'handlers'])) {
+		warnings.push(
+			createWarning(
+				'application-handlers-deprecated',
+				'`application.handlers` is deprecated and kept for compatibility only. Avoid introducing new projects that depend on it.',
+			),
+		);
+	}
+	if (hasPath(sourceManifest, ['application', 'user_app'])) {
+		warnings.push(
+			createWarning(
+				'application-user-app-deprecated',
+				'`application.user_app` is deprecated. Use `application.multi_instance` when you need multi-instance deployment semantics.',
+			),
+		);
+	}
+	if (hasPath(sourceManifest, ['application', 'depends_on'])) {
+		warnings.push(
+			createWarning(
+				'application-depends-on-deprecated',
+				'`application.depends_on` is deprecated. Use `services.<name>.depends_on`, or rely on automatic health checking from `application.routes` and `application.upstreams`.',
+			),
+		);
+	}
+	return warnings;
+}
+
+function collectServiceWarnings(sourceManifest) {
+	const deprecatedServices = Object.entries(sourceManifest?.services ?? {})
+		.filter(([, serviceConfig]) => hasOwn(serviceConfig, 'health_check'))
+		.map(([serviceName]) => `services.${serviceName}.health_check`);
+	if (deprecatedServices.length === 0) {
+		return [];
+	}
+	return [
+		createWarning(
+			'service-health-check-deprecated',
+			`Legacy service health check fields detected: ${quoteFieldList(deprecatedServices)}. Rename them to \`healthcheck\`.`,
+		),
+	];
+}
+
+function collectExtConfigWarnings(sourceManifest) {
+	const legacyFields = ['disable_url_raw_path', 'remove_this_request_headers', 'fix_websocket_header'].filter((field) =>
+		hasPath(sourceManifest, ['ext_config', field]),
+	);
+	if (legacyFields.length === 0) {
+		return [];
+	}
+	return [
+		createWarning(
+			'ext-config-http-routing-deprecated',
+			`Legacy HTTP routing fields in \`ext_config\` are deprecated: ${quoteFieldList(legacyFields)}. Move them to \`application.upstreams[*]\` with the same field names.`,
+		),
+	];
+}
+
+function hasLocales(manifest, sourceManifest, packageInfo) {
+	return hasOwn(packageInfo, 'locales') || hasOwn(manifest, 'locales') || hasOwn(sourceManifest, 'locales');
+}
+
+function resolvePackageVersion(manifest, sourceManifest, packageInfo) {
+	const candidates = [packageInfo?.version, manifest?.version, sourceManifest?.version];
+	for (const candidate of candidates) {
+		const value = normalizeString(candidate);
+		if (value) {
+			return value;
+		}
+	}
+	return '';
+}
+
+function parseEmbedAlias(imageRef) {
+	const value = normalizeString(imageRef);
+	if (!value.startsWith('embed:')) {
+		return '';
+	}
+	const rest = value.slice('embed:'.length).trim();
+	const at = rest.indexOf('@');
+	return normalizeString(at >= 0 ? rest.slice(0, at) : rest);
+}
+
+function collectImageRefs(sourceManifest) {
+	const refs = [];
+	const applicationImage = normalizeString(sourceManifest?.application?.image);
+	if (applicationImage) {
+		refs.push({
+			path: 'application.image',
+			value: applicationImage,
+		});
+	}
+	for (const [serviceName, serviceConfig] of Object.entries(sourceManifest?.services ?? {})) {
+		const imageValue = normalizeString(serviceConfig?.image);
+		if (!imageValue) {
+			continue;
+		}
+		refs.push({
+			path: `services.${serviceName}.image`,
+			value: imageValue,
+		});
+	}
+	return refs;
+}
+
+function collectStoreVersionWarnings(manifest, sourceManifest, packageInfo) {
+	const version = resolvePackageVersion(manifest, sourceManifest, packageInfo);
+	if (!version) {
+		return [];
+	}
+	if (semver.valid(version)) {
+		return [];
+	}
+	return [createWarning('store-version-invalid-semver', `App Store submission requires a valid semver version. Current version is \`${version}\`.`)];
+}
+
+function collectStoreImageWarnings(sourceManifest, options, embeddedImageUpstreams) {
+	const warnings = [];
+	const imageBuildOptions = options?.images ?? {};
+	for (const imageRef of collectImageRefs(sourceManifest)) {
+		const embedAlias = parseEmbedAlias(imageRef.value);
+		if (embedAlias) {
+			const actualUpstream = normalizeString(embeddedImageUpstreams?.[embedAlias]);
+			if (actualUpstream) {
+				if (!actualUpstream.startsWith(STORE_IMAGE_REGISTRY_PREFIX)) {
+					warnings.push(
+						createWarning(
+							'store-image-embed-upstream-invalid',
+							`App Store submission requires \`${imageRef.path}\` to use upstream images from ${STORE_IMAGE_REGISTRY_PREFIX}. Current upstream for \`${embedAlias}\` is \`${actualUpstream}\`.`,
+						),
+					);
+				}
+				continue;
+			}
+			const buildConfig = imageBuildOptions?.[embedAlias];
+			if (!buildConfig || typeof buildConfig !== 'object') {
+				warnings.push(
+					createWarning(
+						'store-image-embed-alias-missing',
+						`App Store submission requires \`${imageRef.path}\` to resolve to ${STORE_IMAGE_REGISTRY_PREFIX}. Embed alias \`${embedAlias}\` has no matching \`images.${embedAlias}\` config; please confirm whether it takes effect.`,
+					),
+				);
+				continue;
+			}
+			const upstreamMatch = normalizeString(buildConfig['upstream-match'] ?? STORE_IMAGE_REGISTRY_PREFIX);
+			if (!upstreamMatch.startsWith(STORE_IMAGE_REGISTRY_PREFIX)) {
+				warnings.push(
+					createWarning(
+						'store-image-embed-upstream-invalid',
+						`App Store submission requires \`${imageRef.path}\` to use upstream images from ${STORE_IMAGE_REGISTRY_PREFIX}. Current \`images.${embedAlias}.upstream-match\` is \`${upstreamMatch}\`.`,
+					),
+				);
+			}
+			continue;
+		}
+		if (!imageRef.value.startsWith(STORE_IMAGE_REGISTRY_PREFIX)) {
+			warnings.push(
+				createWarning(
+					'store-image-registry-invalid',
+					`App Store submission requires \`${imageRef.path}\` to start with ${STORE_IMAGE_REGISTRY_PREFIX}. Current value is \`${imageRef.value}\`.`,
+				),
+			);
+		}
+	}
+	return warnings;
+}
+
+function collectStoreWarnings({ cwd, options, manifest, sourceManifest, packageInfo, embeddedImageUpstreams }) {
+	const warnings = [];
+	warnings.push(...collectStoreVersionWarnings(manifest, sourceManifest, packageInfo));
+	if (!hasLocales(manifest, sourceManifest, packageInfo)) {
+		warnings.push(
+			createWarning(
+				'store-locales-required',
+				'App Store submission requires `locales`. For LPK v2, define it in package.yml.',
+			),
+		);
+	}
+	warnings.push(...collectStoreImageWarnings(sourceManifest, options, embeddedImageUpstreams));
+
+	const rawIconPath = String(options?.icon ?? '').trim();
+	if (!rawIconPath) {
+		return warnings;
+	}
+
+	const iconPath = path.isAbsolute(rawIconPath) ? rawIconPath : path.resolve(cwd || process.cwd(), rawIconPath);
+	if (!fs.existsSync(iconPath)) {
+		return warnings;
+	}
+
+	const stats = fs.statSync(iconPath);
+	if (!stats.isFile()) {
+		return warnings;
+	}
+
+	if (stats.size > STORE_ICON_MAX_BYTES) {
+		warnings.push(
+			createWarning(
+				'store-icon-too-large',
+				`App Store submission requires icon.png smaller than 200 KiB. Current icon source is ${stats.size} bytes: ${iconPath}`,
+			),
+		);
+	}
+
+	return warnings;
+}
+
+export async function collectManifestLintWarnings({ cwd, options, manifestPath, sourceManifest, manifest, packageInfo, embeddedImageUpstreams } = {}) {
+	return [
+		...collectUnknownFieldWarnings(sourceManifest),
+		...collectStaticFieldWarnings(sourceManifest),
+		...collectApplicationWarnings(sourceManifest),
+		...collectServiceWarnings(sourceManifest),
+		...collectExtConfigWarnings(sourceManifest),
+		...collectStoreWarnings({
+			cwd,
+			options,
+			manifestPath,
+			sourceManifest,
+			manifest,
+			packageInfo,
+			embeddedImageUpstreams,
+		}),
+	];
+}
+
+export function isStoreLintWarning(warning) {
+	return String(warning?.code ?? '').startsWith('store-');
+}
+
+export function logManifestLintWarnings(warnings, loggerLike) {
+	for (const warning of warnings ?? []) {
+		loggerLike.warn(`[lint] ${warning.message}`);
+	}
+}

package/lib/app/project_runtime.js

@@ -191,6 +191,7 @@ export async function resolveProjectRuntime(startDir = process.cwd(), selection
 
 	const bridge = new DebugBridge(projectCwd, buildRemote);
 	await bridge.init();
+	await bridge.ensureLpkV2Supported();
 
 	const userApp = isUserApp(manifest);
 	const composeProjectName = pkgId.replaceAll('.', '');

package/lib/appstore/prePublish.js

@@ -87,7 +87,7 @@ export class PrePublish {
 	 * @param {string} changelog
 	 */
 	async publish(pkgPath, changelog, gid) {
-		if (!Publish.preCheck(pkgPath)) return;
+		if (!(await Publish.preCheck(pkgPath))) return;
 
 		await autoLogin();
 

package/lib/appstore/publish.js

@@ -4,9 +4,12 @@ import FormData from 'form-data';
 import fs from 'node:fs';
 import inquirer from 'inquirer';
 import path from 'node:path';
-import { isFileExist, isPngWithFile, unzipSync, loadFromYaml, isValidPackageName, getLanguageForLocale } from '../utils.js';
+import yaml from 'js-yaml';
+import { isFileExist, isPngWithFile, extractLpkSync, isValidPackageName, getLanguageForLocale } from '../utils.js';
 import { t } from '../i18n/index.js';
 import { appStoreServerUrl } from './env.js';
+import { loadEffectiveManifestFromFiles } from '../package_info.js';
+import { collectManifestLintWarnings, isStoreLintWarning } from '../app/manifest_lint.js';
 
 async function askChangeLog(locale) {
 	const noEmpty = (value) => value != '';
@@ -199,10 +202,54 @@ export class Publish {
 		return raw[0] == '{' && raw[ml - 1] == '}';
 	}
 
-	static preCheck(pkgPath) {
+	static loadPackageForPublish(pkgPath, tempDir) {
+		extractLpkSync(pkgPath, tempDir);
+		const manifestPath = path.join(tempDir, 'manifest.yml');
+		const loaded = loadEffectiveManifestFromFiles(manifestPath);
+		const imagesLockPath = path.join(tempDir, 'images.lock');
+		let embeddedImageUpstreams = {};
+		if (isFileExist(imagesLockPath)) {
+			const imagesLock = yaml.load(fs.readFileSync(imagesLockPath, 'utf8')) ?? {};
+			const images = imagesLock?.images ?? {};
+			embeddedImageUpstreams = Object.fromEntries(
+				Object.entries(images).map(([alias, imageInfo]) => [alias, String(imageInfo?.upstream ?? '').trim()]),
+			);
+		}
+		return {
+			manifest: loaded.manifest,
+			sourceManifest: loaded.sourceManifest,
+			packageInfo: loaded.packageInfo,
+			manifestPath,
+			embeddedImageUpstreams,
+		};
+	}
+
+	static async collectStorePublishWarnings(pkgPath) {
 		const tempDir = fs.mkdtempSync('.lzc-cli-publish');
 		try {
-			unzipSync(pkgPath, tempDir, ['devshell', 'icon.png']);
+			extractLpkSync(pkgPath, tempDir, ['devshell', 'icon.png', 'manifest.yml', 'package.yml', 'images.lock']);
+			const { manifest, sourceManifest, packageInfo, manifestPath, embeddedImageUpstreams } = Publish.loadPackageForPublish(pkgPath, tempDir);
+			const warnings = await collectManifestLintWarnings({
+				cwd: tempDir,
+				manifestPath,
+				sourceManifest,
+				manifest,
+				packageInfo,
+				embeddedImageUpstreams,
+				options: {
+					icon: path.join(tempDir, 'icon.png'),
+				},
+			});
+			return warnings.filter(isStoreLintWarning);
+		} finally {
+			fs.rmSync(tempDir, { recursive: true, force: true });
+		}
+	}
+
+	static async preCheck(pkgPath) {
+		const tempDir = fs.mkdtempSync('.lzc-cli-publish');
+		try {
+			extractLpkSync(pkgPath, tempDir, ['devshell', 'icon.png']);
 			if (isFileExist(path.join(tempDir, 'devshell'))) {
 				logger.error(t('lzc_cli.lib.publish.pre_check_fail_tips', '不能发布一个devshell的版本，请重新使用 `lzc-cli project build` 构建'));
 				return false;
@@ -212,17 +259,25 @@ export class Publish {
 				logger.error(t('lzc_cli.lib.publish.pre_check_icon_not_exist_tips', 'icon 必须存在且要求是 png 格式'));
 				return false;
 			}
+			const storeWarnings = await Publish.collectStorePublishWarnings(pkgPath);
+			if (storeWarnings.length > 0) {
+				for (const warning of storeWarnings) {
+					logger.error(`[appstore] ${warning.message}`);
+				}
+				logger.error('当前 LPK 不满足商店发布要求，已拒绝发布');
+				return false;
+			}
 			return true;
 		} finally {
-			fs.rmSync(tempDir, { recursive: true });
+			fs.rmSync(tempDir, { recursive: true, force: true });
 		}
 	}
 
 	async checkAppIdExist(pkgPath) {
 		const tempDir = fs.mkdtempSync('.lzc-cli-publish');
 		try {
-			unzipSync(pkgPath, tempDir, ['manifest.yml']);
-			const manifest = loadFromYaml(path.join(tempDir, 'manifest.yml'));
+			extractLpkSync(pkgPath, tempDir, ['manifest.yml', 'package.yml']);
+			const { manifest } = Publish.loadPackageForPublish(pkgPath, tempDir);
 			const checkUrl = this.baseUrl + `/app/check/exist?package=${manifest['package']}`;
 			const res = await request(checkUrl, { method: 'GET' });
 			if (res.status >= 400) {
@@ -235,7 +290,7 @@ export class Publish {
 				return { manifest, appIdExisted: exist };
 			}
 		} finally {
-			fs.rmSync(tempDir, { recursive: true });
+			fs.rmSync(tempDir, { recursive: true, force: true });
 		}
 	}
 
@@ -245,7 +300,7 @@ export class Publish {
 	 * @param {string} currentLocale
 	 */
 	async publish(pkgPath, changelogs, currentLocale = 'zh') {
-		if (!Publish.preCheck(pkgPath)) return;
+		if (!(await Publish.preCheck(pkgPath))) return;
 
 		const { manifest, appIdExisted } = await this.checkAppIdExist(pkgPath);
 		if (!appIdExisted) {

package/lib/debug_bridge.js

@@ -13,6 +13,12 @@ const bannerfileContent = `˄=ᆽ=ᐟ \\`;
 const DEBUG_BRIDGE_CONTAINER = 'cloudlazycatdevelopertools-app-1';
 const DEBUG_BRIDGE_BINARY = '/lzcapp/pkg/content/debug.bridge';
 const DEBUG_BRIDGE_APP_ID = 'cloud.lazycat.developer.tools';
+export const MIN_LPK_V2_BACKEND_VERSION = '1.0.0';
+
+export function isBackendVersionAtLeast(minimumVersion, currentVersion = '0.0.0') {
+	const normalizedCurrentVersion = String(currentVersion ?? '').trim() || '0.0.0';
+	return compareVersions(minimumVersion, normalizedCurrentVersion) >= 0;
+}
 
 export function sshBinary() {
 	if (isWindows) {
@@ -1233,12 +1239,11 @@ export class DebugBridge {
 
 	async backendVersion020() {
 		const backendVersion = await this.version();
-		if (compareVersions('0.2.0', backendVersion) < 0) {
+		if (!isBackendVersionAtLeast('0.2.0', backendVersion)) {
 			logger.warn(
 				t(
 					'lzc_cli.lib.debug_bridge.backend_version_020_no_match_tips',
-					`
-检测到您当前的 lzc-cli 版本较新，而 '懒猫开发者工具' 比较旧，请先到微服的商店升级 '懒猫开发者工具'，点击下面的连接跳转:
+					`Detected that your current lzc-cli version is newer, but the installed Lazycat Developer Tools backend is relatively old. Please upgrade Lazycat Developer Tools from the app store first:
 
 -> https://appstore.{{boxname}}.heiyu.space/#/shop/detail/cloud.lazycat.developer.tools
 `,
@@ -1251,4 +1256,26 @@ export class DebugBridge {
 			return;
 		}
 	}
+
+	async ensureLpkV2Supported() {
+		const backendVersion = await this.version();
+		if (isBackendVersionAtLeast(MIN_LPK_V2_BACKEND_VERSION, backendVersion)) {
+			return;
+		}
+		logger.warn(
+			t(
+				'lzc_cli.lib.debug_bridge.backend_version_lpk_v2_no_match_tips',
+				`LPK v2 features require Lazycat Developer Tools backend >= {{ minimumVersion }}, but the current backend version is {{ backendVersion }}. Please upgrade Lazycat Developer Tools from the app store first:
+
+-> https://appstore.{{boxname}}.heiyu.space/#/shop/detail/cloud.lazycat.developer.tools
+`,
+				{
+					boxname: this.boxname,
+					minimumVersion: MIN_LPK_V2_BACKEND_VERSION,
+					backendVersion,
+				},
+			),
+		);
+		process.exit(1);
+	}
 }

package/lib/i18n/locales/en/translation.json

@@ -162,6 +162,7 @@
       },
       "debug_bridge": {
         "backend_version_020_no_match_tips": "It is detected that your current lzc-cli version is newer, and the 'Lazy Cat Developer Tools' is relatively old. Please go to the Microservice store to upgrade the 'Lazy Cat Developer Tools' first, and click the link below to jump:\n\n-> https://appstore.{{boxname}}.heiyu.space/#/shop/detail/cloud.lazycat.developer.tools",
+        "backend_version_lpk_v2_no_match_tips": "LPK v2 features require Lazycat Developer Tools backend >= {{minimumVersion}}, but the current backend version is {{backendVersion}}. Please upgrade Lazycat Developer Tools from the app store first:\n\n-> https://appstore.{{boxname}}.heiyu.space/#/shop/detail/cloud.lazycat.developer.tools",
         "build_image_fail": "Failed to build image in LCMD",
         "can_public_key_resolve_fail": "Domain name resolution failed, please check whether the proxy software intercepts *.heiyu.space",
         "check_dev_tools_fail_tips": "Failed to detect the Lazycat developer tools. Please check whether your current network or the Lazycat LCMD client is started normally.",

package/lib/i18n/locales/zh/translation.json

@@ -162,6 +162,7 @@
       },
       "debug_bridge": {
         "backend_version_020_no_match_tips": "\n检测到您当前的 lzc-cli 版本较新，而 '懒猫开发者工具' 比较旧，请先到微服的商店升级 '懒猫开发者工具'，点击下面的连接跳转:\n\n-> https://appstore.{{boxname}}.heiyu.space/#/shop/detail/cloud.lazycat.developer.tools\n",
+        "backend_version_lpk_v2_no_match_tips": "\nLPK v2 功能要求 '懒猫开发者工具' backend 版本至少为 {{ minimumVersion }}，当前 backend 版本为 {{ backendVersion }}，请先到微服的商店升级 '懒猫开发者工具'，点击下面的连接跳转:\n\n-> https://appstore.{{boxname}}.heiyu.space/#/shop/detail/cloud.lazycat.developer.tools\n",
         "build_image_fail": "在微服中构建 image 失败",
         "can_public_key_resolve_fail": "域名解析失败，请检查代理软件是否对 *.heiyu.space 拦截",
         "check_dev_tools_fail_tips": "检测懒猫开发者工具失败，请检测您当前的网络或者懒猫微服客户端是否正常启动。",

package/lib/utils.js

@@ -78,6 +78,7 @@ export async function getLatestVersion(controller, pkgName = pkgInfo.name) {
 export const isMacOs = process.platform == 'darwin';
 export const isLinux = process.platform == 'linux';
 export const isWindows = process.platform == 'win32';
+export const REPRODUCIBLE_ARCHIVE_DATE = new Date('1980-01-01T00:00:00.000Z');
 
 export const envsubstr = async (templateContents, args) => {
 	const parse = await importDefault('envsub/js/envsub-parser.js');
@@ -451,16 +452,13 @@ export async function tarContentDir(from, to, cwd = './', options = {}) {
 		tar.c(
 			{
 				cwd: cwd,
-				gzip: gzipEnabled,
+				gzip: gzipEnabled ? { mtime: 0 } : false,
 				filter: (filePath) => {
 					logger.debug(`tar gz ${filePath}`);
 					return true;
 				},
 				sync: true,
-				portable: {
-					uid: 0,
-					gid: 0,
-				},
+				portable: true,
 			},
 			from,
 		)
@@ -561,6 +559,10 @@ function detectLpkArchiveFormatSync(filePath) {
 	}
 }
 
+export function detectLpkArchiveFormat(filePath) {
+	return detectLpkArchiveFormatSync(filePath);
+}
+
 function normalizeArchiveEntryPath(entryPath) {
 	return String(entryPath ?? '').replace(/^\.\//, '').replace(/\\/g, '/');
 }
@@ -611,7 +613,7 @@ export function extractLpkSync(lpkPath, destPath, entries = []) {
 	}
 
 	fs.mkdirSync(destPath, { recursive: true });
-	const format = detectLpkArchiveFormatSync(lpkPath);
+	const format = detectLpkArchiveFormat(lpkPath);
 	if (format === 'zip') {
 		extractZipEntriesSync(lpkPath, destPath, entries);
 		return;

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@lazycatcloud/lzc-cli",
-	"version": "2.0.0-pre.5",
+	"version": "2.0.0-pre.6",
 	"description": "lazycat cloud developer kit",
 	"scripts": {
 		"release": "release-it patch",