@pandablessing/dsh-user-sync 0.0.0-stage → 1.0.0

package/LICENSE

@@ -0,0 +1,77 @@
+Copyright (c) 2026 gray-panda
+dsh-user-sync is licensed under Mulan PSL v2.
+You can use this software according to the terms and conditions of the Mulan PSL v2.
+You may obtain a copy of Mulan PSL v2 at:
+         http://license.coscl.org.cn/MulanPSL2
+THIS SOFTWARE IS PROVIDED ON AN "AS IS" BASIS, WITHOUT WARRANTIES OF ANY KIND,
+EITHER EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO NON-INFRINGEMENT,
+MERCHANTABILITY OR FIT FOR A PARTICULAR PURPOSE.
+See the Mulan PSL v2 for more details.
+
+木兰宽松许可证, 第2版
+Mulan Permissive Software License, Version 2
+
+2020年1月 http://license.coscl.org.cn/MulanPSL2
+
+您对“软件”的复制、使用、修改及分发受木兰宽松许可证，第2版（“本许可证”）的如下条款的约束：
+
+0. 定义
+“软件” 是指由“贡献”构成的许可在“本许可证”下的程序和相关文档的集合。
+“贡献” 是指由任一“贡献者”许可在“本许可证”下的受版权法保护的作品。
+“贡献者” 是指将受版权法保护的作品许可在“本许可证”下的自然人或“法人实体”。
+“法人实体” 是指提交贡献的机构及其“关联实体”。
+“关联实体” 是指，对“本许可证”下的行为方而言，控制、受控制或与其共同受控制的机构，此处的控制是指有受控方或共同受控方至少50%直接或间接的投票权、资金或其他有价证券。
+
+1. 授予版权许可
+每个“贡献者”根据“本许可证”授予您永久性的、全球性的、免费的、非独占的、不可撤销的版权许可，您可以复制、使用、修改、分发其“贡献”，不论修改与否。
+
+2. 授予专利许可
+每个“贡献者”根据“本许可证”授予您永久性的、全球性的、免费的、非独占的、不可撤销的（根据本条规定撤销除外）专利许可，供您制造、委托制造、使用、许诺销售、销售、进口其“贡献”或以其他方式转移其“贡献”。前述专利许可仅限于“贡献者”现在或将来拥有或控制的其“贡献”本身或其“贡献”与许可“贡献”时的“软件”结合而将必然会侵犯的专利权利要求，不包括对“贡献”的修改或包含“贡献”的其他结合。如果您或您的“关联实体”直接或间接地，就“软件”或其中的“贡献”对任何人发起专利侵权诉讼（包括反诉或交叉诉讼）或其他专利维权行动，指控其侵犯专利权，则“本许可证”授予您对“软件”的专利许可自您提起诉讼或发起维权行动之日终止。
+
+3. 无商标许可
+“本许可证”不提供对“贡献者”的商品名称、商标、服务标志或产品名称的商标许可，但您为满足第4条规定的声明义务而必须使用除外。
+
+4. 分发限制
+您可以在任何媒介中将“软件”以源程序形式或可执行形式重新分发，不论修改与否，但您必须向接收者提供“本许可证”的副本，并保留“软件”中的版权、商标、专利及免责声明。
+
+5. 免责声明与责任限制
+“软件”及其中的“贡献”在提供时不带任何明示或默示的担保。在任何情况下，“贡献者”或版权所有者不对任何人因使用“软件”或其中的“贡献”而引发的任何直接或间接损失承担责任，不论因何种原因导致或者基于何种法律理论，即使其曾被建议有此种损失的可能性。
+
+6. 语言
+“本许可证”以中英文双语表述，中英文版本具有同等法律效力。如果中英文版本存在任何冲突不一致，以中文版为准。
+
+条款结束
+
+Mulan Permissive Software License，Version 2
+Mulan Permissive Software License，Version 2 (Mulan PSL v2)
+
+January 2020 http://license.coscl.org.cn/MulanPSL2
+
+Your reproduction, use, modification and distribution of the Software shall be subject to Mulan PSL v2 (this License) with the following terms and conditions:
+
+0. Definition
+Software means the program and related documents which are licensed under this License and comprise all Contribution(s).
+Contribution means the copyrightable work licensed by a particular Contributor under this License.
+Contributor means the Individual or Legal Entity who licenses its copyrightable work under this License.
+Legal Entity means the entity making a Contribution and all its Affiliates.
+Affiliates means entities that control, are controlled by, or are under common control with the acting entity under this License, 'control' means direct or indirect ownership of at least fifty percent (50%) of the voting power, capital or other securities of controlled or commonly controlled entity.
+
+1. Grant of Copyright License
+Subject to the terms and conditions of this License, each Contributor hereby grants to you a perpetual, worldwide, royalty-free, non-exclusive, irrevocable copyright license to reproduce, use, modify, or distribute its Contribution, with modification or not.
+
+2. Grant of Patent License
+Subject to the terms and conditions of this License, each Contributor hereby grants to you a perpetual, worldwide, royalty-free, non-exclusive, irrevocable (except for revocation under this Section) patent license to make, have made, use, offer for sale, sell, import or otherwise transfer its Contribution, where such patent license is only limited to the patent claims owned or controlled by such Contributor now or in future which will be necessarily infringed by its Contribution alone, or by combination of the Contribution with the Software to which the Contribution was contributed. The patent license shall not apply to any modification of the Contribution, and any other combination which includes the Contribution. If you or your Affiliates directly or indirectly institute patent litigation (including a cross claim or counterclaim in a litigation) or other patent enforcement activities against any individual or entity by alleging that the Software or any Contribution in it infringes patents, then any patent license granted to you under this License for the Software shall terminate as of the date such litigation or activity is filed or taken.
+
+3. No Trademark License
+No trademark license is granted to use the trade names, trademarks, service marks, or product names of Contributor, except as required to fulfill notice requirements in section 4.
+
+4. Distribution Restriction
+You may distribute the Software in any medium with or without modification, whether in source or executable forms, provided that you provide recipients with a copy of this License and retain copyright, patent, trademark and disclaimer statements in the Software.
+
+5. Disclaimer of Warranty and Limitation of Liability
+THE SOFTWARE AND CONTRIBUTION IN IT ARE PROVIDED WITHOUT WARRANTIES OF ANY KIND, EITHER EXPRESS OR IMPLIED. IN NO EVENT SHALL ANY CONTRIBUTOR OR COPYRIGHT HOLDER BE LIABLE TO YOU FOR ANY DAMAGES, INCLUDING, BUT NOT LIMITED TO ANY DIRECT, OR INDIRECT, SPECIAL OR CONSEQUENTIAL DAMAGES ARISING FROM YOUR USE OR INABILITY TO USE THE SOFTWARE OR THE CONTRIBUTION IN IT, NO MATTER HOW IT'S CAUSED OR BASED ON WHICH LEGAL THEORY, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.
+
+6. Language
+THIS LICENSE IS WRITTEN IN BOTH CHINESE AND ENGLISH, AND THE CHINESE VERSION AND ENGLISH VERSION SHALL HAVE THE SAME LEGAL EFFECT. IN THE CASE OF DIVERGENCE BETWEEN THE CHINESE AND ENGLISH VERSIONS, THE CHINESE VERSION SHALL PREVAIL.
+
+END OF THE TERMS AND CONDITIONS

package/README.en.md

@@ -0,0 +1,36 @@
+# dsh-user-sync
+
+#### Description
+dsh用户级配置同步
+
+#### Software Architecture
+Software architecture description
+
+#### Installation
+
+1.  xxxx
+2.  xxxx
+3.  xxxx
+
+#### Instructions
+
+1.  xxxx
+2.  xxxx
+3.  xxxx
+
+#### Contribution
+
+1.  Fork the repository
+2.  Create Feat_xxx branch
+3.  Commit your code
+4.  Create Pull Request
+
+
+#### Gitee Feature
+
+1.  You can use Readme\_XXX.md to support different languages, such as Readme\_en.md, Readme\_zh.md
+2.  Gitee blog [blog.gitee.com](https://blog.gitee.com)
+3.  Explore open source project [https://gitee.com/explore](https://gitee.com/explore)
+4.  The most valuable open source project [GVP](https://gitee.com/gvp)
+5.  The manual of Gitee [https://gitee.com/help](https://gitee.com/help)
+6.  The most popular members  [https://gitee.com/gitee-stars/](https://gitee.com/gitee-stars/)

package/README.md

@@ -1,3 +1,103 @@
-# Temporary Holding Version
+# dsh-user-sync
 
-This version is a temporary placeholder for this package. An operational version to replace this has been submitted for review and is awaiting a staged release.
+DeepSeek Harness（DSH）的**用户级配置同步插件**：把技能、插件清单、配置、记忆四类资产在设备间对齐。
+
+> 当前状态：**v0.1.0 开发版**。本机打包/应用、跨机上传/恢复、缺插件装回、自动检查均已实现并实测；服务端已部署（见 [部署文档](docs/deploy.md)）。
+> 设计依据：[docs/design.md](docs/design.md)；测试用例：[docs/test-cases.md](docs/test-cases.md)。
+
+## 功能
+
+- **四类用户级资产**：技能（`~/.agents/skills`）、插件清单（profile 声明）、配置（`cordis.patch.yml` + `AGENTS.md`）、用户记忆（`memories/` 根）；项目记忆与会话默认不选。
+- **新覆盖旧**：包级 `createdAt` 比较，不做合并；覆盖前必须确认，先快照再写盘，失败可整批还原。
+- **敏感数据硬拒绝**：文件名黑名单 + 内容模式，命中即拒绝打包并列出文件与行号。
+- **官方账号自动配对**：用 `deepseekAccount` 取账号 id 派生 `accountKey`，自动向服务端换 token，**没有运营方账号登录入口**。
+- **缺插件自动装回**：覆盖确认里列出缺失 bundle，一键 `installBundle`；`link:` 本地包列入手工清单。
+- **自动检查**：启动检查 + 每 6 小时（可配）只读远端元数据，发现更新只提醒、不自动应用。
+
+## 安装
+
+### 从 npm（发布后）
+
+```powershell
+cd ~/.dsh/profiles/desktop
+pnpm add @pandablessing/dsh-user-sync
+```
+
+安装后在 DSH 设置页启用「设置同步」。
+
+### 开发期（junction 到本仓库）
+
+```powershell
+# 以 junction 把仓库装进 desktop profile，改 package.json 前自动备份，失败自动回滚
+powershell -NoProfile -ExecutionPolicy Bypass -File scripts\install-dev.ps1
+
+# 回滚
+scripts\uninstall-dev.cmd   # 双击即可
+```
+
+安装后**重启 DSH**，设置页出现「设置同步」。
+
+## 使用
+
+1. 设置 → 用户同步 → 首次点「同意并启用上传」（说明上传范围与存储位置）；
+2. 勾选同步范围（默认四类用户级）；
+3. 「上传用户配置」→ 打包并上传；
+4. 「从远端同步」→ 检查远端，覆盖前确认。
+
+服务端地址在「传输与自动检查」里配置（默认内置；开发环境填 `https://dsh-user-sync-test.wenzhi.info`）。
+
+## 服务端
+
+纯 `node:http`、无第三方依赖，支持坚果云 WebDAV（凭据缺失回退本地磁盘）。部署步骤见 [docs/deploy.md](docs/deploy.md)。
+
+## 架构
+
+```text
+插件（HTTP 客户端） ──HTTPS──▶ 运营方 API ──WebDAV──▶ 坚果云
+      │                          │
+      └─ 本地 state.json          └─ 鉴权 / 配额 / 隔离 / 审计
+```
+
+- 插件侧只实现 `api` 传输；`folder` 仅用于本机调试。
+- 存储凭据只在服务端，插件包内不含任何存储口令。
+- 身份：官方账号 id → `accountKey`（sha256 前 16 位）→ 服务端分区。
+
+## 构建与测试
+
+源码是 TypeScript，构建产物 `lib/` 与 `server/dist/` 已提交（junction 安装与部署直接可用）。
+
+```powershell
+pnpm install          # 仅开发：安装 typescript 与 @types/node
+pnpm run build        # 插件：src/*.ts → lib/*.js
+pnpm run build:server # 服务端：server/src/*.ts → server/dist/*.js
+
+node --test test/*.test.js          # 137 条：单元 / 组件 / 时序（直接跑源码）
+node scripts/audit-cases.mjs        # 用例清单与结果记录一致性审计（129/129）
+node scripts/e2e-clone.mjs          # 替代换机演练（默认本地模式，临时起服务端，不写真实 WebDAV）
+# node scripts/e2e-clone.mjs --remote https://dsh-user-sync-test.wenzhi.info  # 真实服务端（会留测试目录）
+powershell -File scripts/smoke.ps1  # 真实 DSH 路由冒烟
+```
+
+## 仓库结构
+
+```text
+docs/design.md          完整设计（数据面 / 同步 / 安全 / UI / 契约 / 多用户）
+docs/test-cases.md      测试用例清单（结果单独放 docs/test-results/）
+docs/deploy.md          服务端部署与验证
+lib/                    插件（宿主 + client + 传输 + 同步编排）
+server/                 运营方 API（纯 node:http）
+scripts/                开发安装 / 卸载 / 冒烟 / 替代换机
+test/                   单元、组件、时序测试与 fixtures
+legacy/                 需求反馈稿与原型脚本
+```
+
+## 已知限制
+
+- 未在 macOS/Linux 实机验证；跨平台哈希由单测（HASH-01/06）覆盖。
+- 服务端单节点，未做限流与多副本；坚果云单账号有流量配额限制。
+- `link:` 本地依赖需要手工放回目标机。
+- 远端只保留 1 份包，上传即覆盖（回滚靠本地 `pre-restore` 快照）。
+
+## License
+
+[Mulan PSL v2](LICENSE)

package/cordis.patch.yml

@@ -0,0 +1,5 @@
+# dsh-user-sync 的组合包层：把插件挂进 profile。
+# 用户层的 cordis.patch.yml 可覆盖此条目的 config（设置面板写入的位置）。
+- insert:
+    - id: user-sync
+      name: dsh-user-sync

package/lib/apply.js

@@ -0,0 +1,111 @@
+import { copyFileSync, existsSync, mkdirSync, readFileSync, renameSync, rmSync, symlinkSync, writeFileSync } from 'node:fs';
+import { dirname, join } from 'node:path';
+import { randomUUID } from 'node:crypto';
+import { hashBytes } from './hash.js';
+import { MANIFEST_PATH } from './archive.js';
+import { isUnsafeRelPath, resolveInside } from './paths.js';
+/**
+ * 应用计划：把包内文件分成「新增 / 覆盖 / 跳过」三态。
+ * 大小写冲突直接拒绝（§5.5）。
+ */
+export function planApply({ manifestFiles, localFiles, }) {
+    const added = [];
+    const overwritten = [];
+    const skipped = [];
+    const seen = new Map();
+    for (const file of manifestFiles) {
+        if (isUnsafeRelPath(file.path))
+            throw new Error(`非法包内路径: ${file.path}`);
+        const lower = file.path.toLowerCase();
+        if (seen.has(lower) && seen.get(lower) !== file.path) {
+            throw new Error(`大小写冲突: ${seen.get(lower)} / ${file.path}`);
+        }
+        seen.set(lower, file.path);
+        const localSha = localFiles?.get(file.path);
+        if (localSha === undefined)
+            added.push(file);
+        else if (localSha !== file.sha256)
+            overwritten.push(file);
+        else
+            skipped.push(file);
+    }
+    return { added, overwritten, skipped };
+}
+function ensureDir(p) {
+    mkdirSync(p, { recursive: true });
+}
+function snapshotFile(abs, rel, preRestoreRoot) {
+    const backup = join(preRestoreRoot, rel);
+    ensureDir(dirname(backup));
+    copyFileSync(abs, backup);
+    return backup;
+}
+/**
+ * 应用 tar 条目到目标根。
+ * 先快照将被覆盖的文件，再逐文件原子写（tmp → rename）；失败时整批还原。
+ */
+export function applyEntries({ entries, targetRoot, resolveTarget, preRestoreRoot, dryRun = false, }) {
+    const toAbs = resolveTarget ?? ((rel) => resolveInside(targetRoot, rel));
+    const plan = entries.filter((entry) => entry.type !== 'dir' && entry.path !== MANIFEST_PATH);
+    const written = [];
+    const skipped = [];
+    const seen = new Map();
+    for (const entry of plan) {
+        if (isUnsafeRelPath(entry.path))
+            throw new Error(`非法包内路径: ${entry.path}`);
+        const lower = entry.path.toLowerCase();
+        if (seen.has(lower) && seen.get(lower) !== entry.path) {
+            throw new Error(`大小写冲突: ${seen.get(lower)} / ${entry.path}`);
+        }
+        seen.set(lower, entry.path);
+    }
+    if (dryRun)
+        return { written, skipped: plan.map((entry) => entry.path), snapshotPath: null };
+    const snapshots = [];
+    try {
+        for (const entry of plan) {
+            const abs = toAbs(entry.path);
+            ensureDir(dirname(abs));
+            if (entry.type === 'symlink') {
+                if (existsSync(abs)) {
+                    snapshotFile(abs, entry.path, preRestoreRoot);
+                    snapshots.push(entry.path);
+                    rmSync(abs, { force: true });
+                }
+                symlinkSync(entry.linkTarget ?? '', abs);
+                written.push(entry.path);
+                continue;
+            }
+            const existing = existsSync(abs) ? readFileSync(abs) : null;
+            if (existing !== null && hashBytes(existing) === hashBytes(entry.data)) {
+                skipped.push(entry.path); // 内容等价：不写盘、不改 mtime
+                continue;
+            }
+            if (existing !== null) {
+                snapshotFile(abs, entry.path, preRestoreRoot);
+                snapshots.push(entry.path);
+            }
+            const tmp = join(dirname(abs), `.${entry.path.split('/').pop()}.tmp-${randomUUID().slice(0, 8)}`);
+            writeFileSync(tmp, entry.data);
+            renameSync(tmp, abs);
+            written.push(entry.path);
+        }
+    }
+    catch (error) {
+        for (const rel of snapshots) {
+            const backup = join(preRestoreRoot, rel);
+            if (existsSync(backup))
+                copyFileSync(backup, toAbs(rel));
+        }
+        for (const rel of written) {
+            if (!snapshots.includes(rel))
+                rmSync(toAbs(rel), { force: true });
+        }
+        throw error;
+    }
+    return {
+        written,
+        skipped,
+        snapshotPath: snapshots.length > 0 ? preRestoreRoot : null,
+    };
+}

package/lib/archive.js

@@ -0,0 +1,160 @@
+import { gzipSync, gunzipSync } from 'node:zlib';
+const BLOCK = 512;
+export const MANIFEST_PATH = '.dsh-user-sync/manifest.json';
+/** 包名必须匹配；不匹配的一律在发请求前拒绝（§6.4）。 */
+export const PACKAGE_ID_RE = /^dsh-user-sync-\d{8}-\d{4}-[a-z0-9]{6,16}\.tar\.gz$/;
+export function isPackageId(name) {
+    return PACKAGE_ID_RE.test(name);
+}
+function writeString(buf, offset, value, length = 100) {
+    const bytes = Buffer.from(value, 'utf8');
+    if (bytes.length > length)
+        throw new Error(`tar 字段超长: ${value}`);
+    bytes.copy(buf, offset);
+}
+function writeOctal(buf, offset, value, length) {
+    const text = value.toString(8).padStart(length - 1, '0');
+    buf.write(`${text}\0`, offset, length, 'ascii');
+}
+function readString(buf, offset, length) {
+    const slice = buf.subarray(offset, offset + length);
+    const end = slice.indexOf(0);
+    return slice.subarray(0, end === -1 ? slice.length : end).toString('utf8');
+}
+function splitUstarPath(path) {
+    const bytes = Buffer.byteLength(path, 'utf8');
+    if (bytes <= 100)
+        return { name: path, prefix: '' };
+    const parts = path.split('/');
+    for (let i = parts.length - 1; i > 0; i--) {
+        const name = parts.slice(i).join('/');
+        const prefix = parts.slice(0, i).join('/');
+        if (Buffer.byteLength(name) <= 100 && Buffer.byteLength(prefix) <= 155)
+            return { name, prefix };
+    }
+    throw new Error(`tar 路径过长（不支持 PAX）: ${path}`);
+}
+function headerFor({ path, mode = 0o644, size = 0, type = 'file', linkTarget = '', mtime = 0 }) {
+    const header = Buffer.alloc(BLOCK);
+    const { name, prefix } = splitUstarPath(path);
+    writeString(header, 0, name);
+    writeOctal(header, 100, mode, 8);
+    writeOctal(header, 108, 0, 8);
+    writeOctal(header, 116, 0, 8);
+    writeOctal(header, 124, type === 'file' ? size : 0, 12);
+    writeOctal(header, 136, mtime, 12);
+    header.write('        ', 148, 'ascii');
+    header.write(type === 'file' ? '0' : type === 'symlink' ? '2' : '5', 156, 'ascii');
+    writeString(header, 157, linkTarget, 100);
+    writeString(header, 257, 'ustar', 6);
+    writeString(header, 263, '00', 2);
+    if (prefix)
+        writeString(header, 345, prefix, 155);
+    let sum = 0;
+    for (const byte of header)
+        sum += byte;
+    header.write(`${sum.toString(8).padStart(6, '0')}\0 `, 148, 'ascii');
+    return header;
+}
+function padToBlock(buf) {
+    const remainder = buf.length % BLOCK;
+    return remainder === 0 ? buf : Buffer.concat([buf, Buffer.alloc(BLOCK - remainder)]);
+}
+/**
+ * 生成 tar 与 tar.gz。
+ * mode 接受 '100644' | '100755' | '120000'（与 manifest 一致）或数字。
+ */
+export function buildTar(entries) {
+    const chunks = [];
+    for (const entry of entries) {
+        const type = entry.type ?? (entry.mode === '120000' ? 'symlink' : 'file');
+        const mode = typeof entry.mode === 'string' ? parseInt(entry.mode, 8) & 0o777 : (entry.mode ?? 0o644);
+        const data = type === 'file' ? (entry.data ?? Buffer.alloc(0)) : Buffer.alloc(0);
+        chunks.push(headerFor({ path: entry.path, mode, size: data.length, type, linkTarget: entry.linkTarget ?? '' }));
+        if (type === 'file')
+            chunks.push(padToBlock(data));
+    }
+    chunks.push(Buffer.alloc(BLOCK * 2));
+    return Buffer.concat(chunks);
+}
+export function buildTarGz(entries) {
+    return gzipSync(buildTar(entries));
+}
+/** 解析 tar（不校验内容哈希，哈希由调用方逐文件算）。 */
+export function parseTar(buf) {
+    const entries = [];
+    let offset = 0;
+    while (offset + BLOCK <= buf.length) {
+        const header = buf.subarray(offset, offset + BLOCK);
+        if (header.every((byte) => byte === 0))
+            break;
+        const stored = parseInt(readString(header, 148, 8).trim(), 8);
+        let sum = 0;
+        for (let i = 0; i < BLOCK; i++)
+            sum += i >= 148 && i < 156 ? 32 : header[i];
+        if (stored !== sum)
+            throw new Error(`tar 头校验失败 @${offset}`);
+        const type = String.fromCharCode(header[156]);
+        const size = parseInt(readString(header, 124, 12).trim() || '0', 8) || 0;
+        const prefix = readString(header, 345, 155);
+        const name = readString(header, 0, 100);
+        const path = prefix ? `${prefix}/${name}` : name;
+        const rawMode = parseInt(readString(header, 100, 8).trim() || '644', 8) || 0o644;
+        const mode = type === '2' ? '120000' : (rawMode & 0o111) !== 0 ? '100755' : '100644';
+        const dataStart = offset + BLOCK;
+        const data = type === '0' ? buf.subarray(dataStart, dataStart + size) : Buffer.alloc(0);
+        entries.push({
+            path,
+            type: type === '2' ? 'symlink' : type === '5' ? 'dir' : 'file',
+            mode,
+            size,
+            data,
+            linkTarget: readString(header, 157, 100),
+        });
+        offset = dataStart + Math.ceil(size / BLOCK) * BLOCK;
+    }
+    return entries;
+}
+export function parseTarGz(buf) {
+    return parseTar(gunzipSync(buf));
+}
+/** 组装 manifest（首条目）。 */
+export function buildManifest(files, meta) {
+    return {
+        schemaVersion: 3,
+        format: 'dsh-user-sync/1',
+        hashMode: 'lf',
+        packageId: meta.packageId,
+        createdAt: meta.createdAt,
+        deviceId: meta.deviceId,
+        platform: meta.platform,
+        arch: meta.arch,
+        dshVersion: meta.dshVersion ?? null,
+        profile: meta.profile,
+        modules: meta.modules,
+        bundles: meta.bundles,
+        dependencies: meta.dependencies,
+        files: files.map(({ path, sha256, size, mode }) => ({ path, sha256, size, mode })),
+    };
+}
+/** 解析 manifest；v2 的 files[].name 映射为 path，exportedAt 作为 createdAt。 */
+export function normalizeManifest(raw) {
+    const schemaVersion = raw.schemaVersion ?? 2;
+    const files = (raw.files ?? []).map((file) => ({
+        path: file.path ?? file.name,
+        sha256: file.sha256,
+        size: file.size,
+        mode: file.mode ?? '100644',
+    }));
+    return {
+        schemaVersion,
+        format: raw.format ?? 'dsh-user-sync/1',
+        hashMode: raw.hashMode ?? 'lf',
+        packageId: raw.packageId ?? '',
+        createdAt: raw.createdAt ?? raw.exportedAt ?? null,
+        deviceId: raw.deviceId ?? '',
+        modules: raw.modules ?? ['plugins', 'config'],
+        ...raw,
+        files,
+    };
+}

package/lib/auth.js

@@ -0,0 +1,10 @@
+import { createHash } from 'node:crypto';
+/**
+ * 官方账号 id → accountKey（sha256 前 16 个十六进制字符）。
+ * 与 profile 名、设备无关：同账号所有环境得到同一个值（G5）。
+ */
+export function deriveAccountKey(accountId) {
+    if (!accountId)
+        return null;
+    return createHash('sha256').update(String(accountId), 'utf8').digest('hex').slice(0, 16);
+}