openxiangda-devkit-core 2.0.0-alpha.98 → 2.0.0

package/dist/delivery-cache.js

@@ -0,0 +1,186 @@
+import { createHash, randomUUID } from 'node:crypto';
+import { existsSync, lstatSync, mkdirSync, readFileSync, readdirSync, renameSync, rmSync, writeFileSync } from 'node:fs';
+import { dirname, join, relative, resolve } from 'node:path';
+import { canonicalJson, sha256Digest } from 'openxiangda-contracts';
+import { verifySealedAppPackage } from './deployment.js';
+const CACHE_SCHEMA = 'openxiangda.local-delivery-evidence/v1';
+const MAX_FILES = 20_000;
+const MAX_BYTES = 256 * 1024 * 1024;
+const MAX_TIME_MS = 10_000;
+const EXCLUDED = new Set(['.git', '.codegraph', '.openxiangda', 'node_modules', '.turbo', 'coverage', 'playwright-report', 'test-results']);
+/** 有界读取且不跟随符号链接。摘要只用于复核本地证据，不代表平台授权。 */
+function snapshot(root, excluded = () => false) {
+    const files = [];
+    const started = Date.now();
+    let bytes = 0;
+    let entries = 0;
+    function visit(directory) {
+        if (Date.now() - started > MAX_TIME_MS)
+            throw new Error('CACHE_SCAN_TIME_LIMIT');
+        for (const name of readdirSync(directory).sort()) {
+            if (++entries > MAX_FILES)
+                throw new Error('CACHE_SCAN_FILE_LIMIT');
+            const path = join(directory, name);
+            const local = relative(root, path).replaceAll('\\', '/');
+            if (excluded(local, name))
+                continue;
+            const stat = lstatSync(path);
+            if (stat.isSymbolicLink())
+                throw new Error('CACHE_SYMLINK_UNSUPPORTED');
+            if (stat.isDirectory())
+                visit(path);
+            else if (stat.isFile()) {
+                bytes += stat.size;
+                if (bytes > MAX_BYTES || Date.now() - started > MAX_TIME_MS)
+                    throw new Error('CACHE_SCAN_LIMIT');
+                const content = readFileSync(path);
+                if (content.length !== stat.size)
+                    throw new Error('CACHE_INPUT_CHANGED');
+                files.push({ path: local, digest: createHash('sha256').update(content).digest('hex'), bytes: content.length });
+            }
+            else
+                throw new Error('CACHE_SPECIAL_FILE_UNSUPPORTED');
+        }
+    }
+    visit(root);
+    return files;
+}
+function outputRoots(context) {
+    return [...new Set([context.frontendRoot, ...(context.backendRoot ? [context.backendRoot] : [])])].map(root => {
+        const path = relative(context.root, resolve(context.root, root, 'dist')).replaceAll('\\', '/');
+        if (!path || path.startsWith('../'))
+            throw new Error('CACHE_OUTPUT_OUTSIDE_WORKSPACE');
+        return path;
+    });
+}
+/** 锁文件、安装状态、源码（包含 .env）、工具链及进程环境共同决定输入；不落盘明文环境变量。 */
+export function deliveryInputDigest(context) {
+    try {
+        const outputs = outputRoots(context);
+        const files = snapshot(context.root, (path, name) => EXCLUDED.has(name) || outputs.some(root => path === root || path.startsWith(`${root}/`)));
+        const locks = files.filter(file => /(^|\/)(pnpm-lock.yaml|package-lock.json|yarn.lock)$/.test(file.path));
+        if (!locks.length)
+            return null;
+        // 未由当前工作区覆盖的本地依赖没有可靠输入闭包，直接执行正式检查。
+        for (const lock of locks) {
+            if (/(?:file|link):/.test(readFileSync(join(context.root, lock.path), 'utf8')))
+                return null;
+        }
+        const installation = ['node_modules/.modules.yaml', 'node_modules/.pnpm/lock.yaml', 'node_modules/.package-lock.json'].map(path => {
+            const file = join(context.root, path);
+            if (!existsSync(file))
+                return { path, digest: null };
+            const stat = lstatSync(file);
+            if (!stat.isFile() || stat.size > 16 * 1024 * 1024)
+                throw new Error('CACHE_DEPENDENCY_STATE_INVALID');
+            return { path, digest: createHash('sha256').update(readFileSync(file)).digest('hex') };
+        });
+        return sha256Digest({ files, installation, toolchain: context.toolchain, node: process.version,
+            platform: process.platform, arch: process.arch, environment: { ...(context.environment || process.env) } });
+    }
+    catch {
+        return null;
+    }
+}
+export function deliveryOutputDigest(context) {
+    try {
+        return sha256Digest(outputRoots(context).map(path => ({ path, files: snapshot(join(context.root, path)) })));
+    }
+    catch {
+        return null;
+    }
+}
+function cachePath(root, name) { return join(root, '.openxiangda', 'build', name); }
+function readJson(path, maxBytes = 1024 * 1024) {
+    const stat = lstatSync(path);
+    if (!stat.isFile() || stat.size > maxBytes)
+        throw new Error('CACHE_RECEIPT_INVALID');
+    return JSON.parse(readFileSync(path, 'utf8'));
+}
+function writeJson(path, value) {
+    mkdirSync(dirname(path), { recursive: true });
+    const temporary = `${path}.${randomUUID()}.tmp`;
+    try {
+        writeFileSync(temporary, `${canonicalJson(value)}\n`, { mode: 0o600 });
+        renameSync(temporary, path);
+    }
+    finally {
+        rmSync(temporary, { force: true });
+    }
+}
+export function reusableValidation(context, inputDigest = deliveryInputDigest(context)) {
+    try {
+        if (!inputDigest)
+            return null;
+        const evidence = readJson(cachePath(context.root, 'validation-evidence.json'));
+        if (evidence.schemaVersion !== CACHE_SCHEMA || evidence.inputDigest !== inputDigest || evidence.outputDigest !== deliveryOutputDigest(context))
+            return null;
+        return { schemaVersion: CACHE_SCHEMA, inputDigest, outputDigest: evidence.outputDigest };
+    }
+    catch {
+        return null;
+    }
+}
+export function recordValidation(context, before) {
+    const after = deliveryInputDigest(context);
+    if (before && after !== before) {
+        throw Object.assign(new Error('检查期间源码、依赖或构建环境发生变化，请在修改结束后重新检查'), { code: 'OPENXIANGDA_VALIDATION_INPUT_CHANGED' });
+    }
+    const outputDigest = deliveryOutputDigest(context);
+    if (!before || !outputDigest)
+        return null;
+    const evidence = { schemaVersion: CACHE_SCHEMA, inputDigest: before, outputDigest };
+    try {
+        writeJson(cachePath(context.root, 'validation-evidence.json'), evidence);
+    }
+    catch {
+        return null;
+    }
+    return evidence;
+}
+export function recordSealedCandidate(context, compiled) {
+    const evidence = reusableValidation(context);
+    if (evidence) {
+        try {
+            writeJson(cachePath(context.root, 'candidate-evidence.json'), { ...evidence, packageDigest: compiled.digest });
+        }
+        catch { /* 缓存不可写不改变正式部署结果。 */ }
+    }
+}
+export async function reusableSealedCandidate(context, source, backendImage) {
+    try {
+        const evidence = reusableValidation(context);
+        if (!evidence)
+            return null;
+        const candidate = readJson(cachePath(context.root, 'candidate-evidence.json'));
+        if (candidate.schemaVersion !== CACHE_SCHEMA || candidate.inputDigest !== evidence.inputDigest || candidate.outputDigest !== evidence.outputDigest)
+            return null;
+        const manifest = readJson(cachePath(context.root, 'app-package.json'), 5 * 1024 * 1024);
+        if (manifest.source?.repository !== source.repository || manifest.source?.commit !== source.commit || manifest.source?.dirty !== false || !Array.isArray(manifest.artifacts) || manifest.artifacts.length > 8)
+            return null;
+        const compiled = { manifest, digest: candidate.packageDigest };
+        if (sha256Digest(manifest) !== compiled.digest)
+            return null;
+        const backend = manifest.artifacts.find((artifact) => artifact.kind === 'backend');
+        if (backendImage && backend?.metadata?.imageDigest !== backendImage)
+            return null;
+        const artifactContent = {};
+        let bytes = 0;
+        for (const artifact of manifest.artifacts) {
+            if (!/^[a-f0-9]{64}$/.test(artifact.digest))
+                return null;
+            const path = cachePath(context.root, `artifacts/${artifact.digest}`);
+            const stat = lstatSync(path);
+            bytes += stat.size;
+            if (!stat.isFile() || bytes > MAX_BYTES)
+                return null;
+            artifactContent[artifact.digest] = readFileSync(path, 'utf8');
+        }
+        await verifySealedAppPackage(compiled, artifactContent);
+        return { package: compiled, artifactContent };
+    }
+    catch {
+        return null;
+    }
+}
+//# sourceMappingURL=delivery-cache.js.map

package/dist/delivery-cache.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"delivery-cache.js","sourceRoot":"","sources":["../src/delivery-cache.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACrD,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,SAAS,EAAE,YAAY,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACzH,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC7D,OAAO,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AAEpE,OAAO,EAAE,sBAAsB,EAAE,MAAM,iBAAiB,CAAC;AAEzD,MAAM,YAAY,GAAG,wCAAwC,CAAC;AAC9D,MAAM,SAAS,GAAG,MAAM,CAAC;AACzB,MAAM,SAAS,GAAG,GAAG,GAAG,IAAI,GAAG,IAAI,CAAC;AACpC,MAAM,WAAW,GAAG,MAAM,CAAC;AAC3B,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,YAAY,EAAE,cAAc,EAAE,cAAc,EAAE,QAAQ,EAAE,UAAU,EAAE,mBAAmB,EAAE,cAAc,CAAC,CAAC,CAAC;AAgB5I,wCAAwC;AACxC,SAAS,QAAQ,CAAC,IAAY,EAAE,WAAoD,GAAG,EAAE,CAAC,KAAK;IAC7F,MAAM,KAAK,GAAmB,EAAE,CAAC;IACjC,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC3B,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,IAAI,OAAO,GAAG,CAAC,CAAC;IAChB,SAAS,KAAK,CAAC,SAAiB;QAC9B,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,GAAG,WAAW;YAAE,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC;QACjF,KAAK,MAAM,IAAI,IAAI,WAAW,CAAC,SAAS,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;YACjD,IAAI,EAAE,OAAO,GAAG,SAAS;gBAAE,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC;YACpE,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;YACnC,MAAM,KAAK,GAAG,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;YACzD,IAAI,QAAQ,CAAC,KAAK,EAAE,IAAI,CAAC;gBAAE,SAAS;YACpC,MAAM,IAAI,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;YAC7B,IAAI,IAAI,CAAC,cAAc,EAAE;gBAAE,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;YACxE,IAAI,IAAI,CAAC,WAAW,EAAE;gBAAE,KAAK,CAAC,IAAI,CAAC,CAAC;iBAC/B,IAAI,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC;gBACvB,KAAK,IAAI,IAAI,CAAC,IAAI,CAAC;gBACnB,IAAI,KAAK,GAAG,SAAS,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,GAAG,WAAW;oBAAE,MAAM,IAAI,KAAK,CAAC,kBAAkB,CAAC,CAAC;gBACjG,MAAM,OAAO,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;gBACnC,IAAI,OAAO,CAAC,MAAM,KAAK,IAAI,CAAC,IAAI;oBAAE,MAAM,IAAI,KAAK,CAAC,qBAAqB,CAAC,CAAC;gBACzE,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;YACjH,CAAC;;gBAAM,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;QAC3D,CAAC;IACH,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,CAAC;IACZ,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,WAAW,CAAC,OAA6B;IAChD,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,OAAO,CAAC,YAAY,EAAE,GAAG,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE;QAC5G,MAAM,IAAI,GAAG,QAAQ,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QAC/F,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;QACvF,OAAO,IAAI,CAAC;IACd,CAAC,CAAC,CAAC;AACL,CAAC;AAED,qDAAqD;AACrD,MAAM,UAAU,mBAAmB,CAAC,OAA6B;IAC/D,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,WAAW,CAAC,OAAO,CAAC,CAAC;QACrC,MAAM,KAAK,GAAG,QAAQ,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,KAAK,IAAI,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC;QAC/I,MAAM,KAAK,GAAG,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,qDAAqD,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;QAC1G,IAAI,CAAC,KAAK,CAAC,MAAM;YAAE,OAAO,IAAI,CAAC;QAC/B,mCAAmC;QACnC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,IAAI,gBAAgB,CAAC,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,CAAC;gBAAE,OAAO,IAAI,CAAC;QAC9F,CAAC;QACD,MAAM,YAAY,GAAG,CAAC,4BAA4B,EAAE,8BAA8B,EAAE,iCAAiC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE;YAChI,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;YACtC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;gBAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;YACrD,MAAM,IAAI,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;YAC7B,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,IAAI,CAAC,IAAI,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI;gBAAE,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;YACtG,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;QACzF,CAAC,CAAC,CAAC;QACH,OAAO,YAAY,CAAC,EAAE,KAAK,EAAE,YAAY,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,IAAI,EAAE,OAAO,CAAC,OAAO;YAC5F,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,WAAW,EAAE,EAAE,GAAG,CAAC,OAAO,CAAC,WAAW,IAAI,OAAO,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC;IAChH,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,IAAI,CAAC;IAAC,CAAC;AAC1B,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,OAA6B;IAChE,IAAI,CAAC;QACH,OAAO,YAAY,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IAC/G,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,IAAI,CAAC;IAAC,CAAC;AAC1B,CAAC;AAED,SAAS,SAAS,CAAC,IAAY,EAAE,IAAY,IAAI,OAAO,IAAI,CAAC,IAAI,EAAE,cAAc,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;AACpG,SAAS,QAAQ,CAAC,IAAY,EAAE,QAAQ,GAAG,IAAI,GAAG,IAAI;IACpD,MAAM,IAAI,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;IAC7B,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,IAAI,CAAC,IAAI,GAAG,QAAQ;QAAE,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC;IACrF,OAAO,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;AAChD,CAAC;AACD,SAAS,SAAS,CAAC,IAAY,EAAE,KAAc;IAC7C,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC9C,MAAM,SAAS,GAAG,GAAG,IAAI,IAAI,UAAU,EAAE,MAAM,CAAC;IAChD,IAAI,CAAC;QACH,aAAa,CAAC,SAAS,EAAE,GAAG,aAAa,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QACvE,UAAU,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;IAC9B,CAAC;YAAS,CAAC;QAAC,MAAM,CAAC,SAAS,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAAC,CAAC;AACnD,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,OAA6B,EAAE,WAAW,GAAG,mBAAmB,CAAC,OAAO,CAAC;IAC1G,IAAI,CAAC;QACH,IAAI,CAAC,WAAW;YAAE,OAAO,IAAI,CAAC;QAC9B,MAAM,QAAQ,GAAG,QAAQ,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,EAAE,0BAA0B,CAAC,CAAC,CAAC;QAC/E,IAAI,QAAQ,CAAC,aAAa,KAAK,YAAY,IAAI,QAAQ,CAAC,WAAW,KAAK,WAAW,IAAI,QAAQ,CAAC,YAAY,KAAK,oBAAoB,CAAC,OAAO,CAAC;YAAE,OAAO,IAAI,CAAC;QAC5J,OAAO,EAAE,aAAa,EAAE,YAAY,EAAE,WAAW,EAAE,YAAY,EAAE,QAAQ,CAAC,YAAY,EAAE,CAAC;IAC3F,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,IAAI,CAAC;IAAC,CAAC;AAC1B,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,OAA6B,EAAE,MAAqB;IACnF,MAAM,KAAK,GAAG,mBAAmB,CAAC,OAAO,CAAC,CAAC;IAC3C,IAAI,MAAM,IAAI,KAAK,KAAK,MAAM,EAAE,CAAC;QAC/B,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,gCAAgC,CAAC,EAAE,EAAE,IAAI,EAAE,sCAAsC,EAAE,CAAC,CAAC;IACrH,CAAC;IACD,MAAM,YAAY,GAAG,oBAAoB,CAAC,OAAO,CAAC,CAAC;IACnD,IAAI,CAAC,MAAM,IAAI,CAAC,YAAY;QAAE,OAAO,IAAI,CAAC;IAC1C,MAAM,QAAQ,GAAuB,EAAE,aAAa,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC;IACxG,IAAI,CAAC;QAAC,SAAS,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,EAAE,0BAA0B,CAAC,EAAE,QAAQ,CAAC,CAAC;IAAC,CAAC;IACjF,MAAM,CAAC;QAAC,OAAO,IAAI,CAAC;IAAC,CAAC;IACtB,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,OAA6B,EAAE,QAA4B;IAC/F,MAAM,QAAQ,GAAG,kBAAkB,CAAC,OAAO,CAAC,CAAC;IAC7C,IAAI,QAAQ,EAAE,CAAC;QACb,IAAI,CAAC;YAAC,SAAS,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,EAAE,yBAAyB,CAAC,EAAE,EAAE,GAAG,QAAQ,EAAE,aAAa,EAAE,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;QAAC,CAAC;QACvH,MAAM,CAAC,CAAC,qBAAqB,CAAC,CAAC;IACjC,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAAC,OAA6B,EAAE,MAA8C,EAAE,YAAqB;IAChJ,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,kBAAkB,CAAC,OAAO,CAAC,CAAC;QAC7C,IAAI,CAAC,QAAQ;YAAE,OAAO,IAAI,CAAC;QAC3B,MAAM,SAAS,GAAG,QAAQ,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,EAAE,yBAAyB,CAAC,CAAC,CAAC;QAC/E,IAAI,SAAS,CAAC,aAAa,KAAK,YAAY,IAAI,SAAS,CAAC,WAAW,KAAK,QAAQ,CAAC,WAAW,IAAI,SAAS,CAAC,YAAY,KAAK,QAAQ,CAAC,YAAY;YAAE,OAAO,IAAI,CAAC;QAChK,MAAM,QAAQ,GAAG,QAAQ,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,EAAE,kBAAkB,CAAC,EAAE,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC,CAAC;QACxF,IAAI,QAAQ,CAAC,MAAM,EAAE,UAAU,KAAK,MAAM,CAAC,UAAU,IAAI,QAAQ,CAAC,MAAM,EAAE,MAAM,KAAK,MAAM,CAAC,MAAM,IAAI,QAAQ,CAAC,MAAM,EAAE,KAAK,KAAK,KAAK,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,QAAQ,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC;YAAE,OAAO,IAAI,CAAC;QAC3N,MAAM,QAAQ,GAAuB,EAAE,QAAQ,EAAE,MAAM,EAAE,SAAS,CAAC,aAAa,EAAE,CAAC;QACnF,IAAI,YAAY,CAAC,QAAQ,CAAC,KAAK,QAAQ,CAAC,MAAM;YAAE,OAAO,IAAI,CAAC;QAC5D,MAAM,OAAO,GAAG,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,QAA0B,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC;QACrG,IAAI,YAAY,IAAI,OAAO,EAAE,QAAQ,EAAE,WAAW,KAAK,YAAY;YAAE,OAAO,IAAI,CAAC;QACjF,MAAM,eAAe,GAA2B,EAAE,CAAC;QACnD,IAAI,KAAK,GAAG,CAAC,CAAC;QACd,KAAK,MAAM,QAAQ,IAAI,QAAQ,CAAC,SAAS,EAAE,CAAC;YAC1C,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC;gBAAE,OAAO,IAAI,CAAC;YACzD,MAAM,IAAI,GAAG,SAAS,CAAC,OAAO,CAAC,IAAI,EAAE,aAAa,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;YACrE,MAAM,IAAI,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;YAC7B,KAAK,IAAI,IAAI,CAAC,IAAI,CAAC;YACnB,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,KAAK,GAAG,SAAS;gBAAE,OAAO,IAAI,CAAC;YACrD,eAAe,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QAChE,CAAC;QACD,MAAM,sBAAsB,CAAC,QAAQ,EAAE,eAAe,CAAC,CAAC;QACxD,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,eAAe,EAAE,CAAC;IAChD,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,IAAI,CAAC;IAAC,CAAC;AAC1B,CAAC"}

package/dist/delivery-source.d.ts

@@ -0,0 +1,17 @@
+export interface PublishedDeliverySource {
+    repository: string;
+    branch: string;
+    commit: string;
+    mainlineCommit: string;
+}
+export declare class DeliverySourceError extends Error {
+    readonly code: string;
+    readonly retryable = false;
+    readonly data: Record<string, unknown>;
+    constructor(code: string, message: string, remediation: string, details?: Record<string, unknown>);
+}
+/** 权威主线来自 origin 的远端 HEAD，绝不使用任务分支的 upstream。 */
+export declare function publishedDeliverySource(root: string, sourceCommit?: string): Promise<PublishedDeliverySource>;
+/** 构建步骤不能改变被验证源码。平台切换并发仍由 DeploymentRun 管理。 */
+export declare function assertDeliverySourceUnchanged(root: string, source: PublishedDeliverySource): Promise<void>;
+//# sourceMappingURL=delivery-source.d.ts.map

package/dist/delivery-source.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"delivery-source.d.ts","sourceRoot":"","sources":["../src/delivery-source.ts"],"names":[],"mappings":"AAMA,MAAM,WAAW,uBAAuB;IACtC,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,cAAc,EAAE,MAAM,CAAC;CACxB;AAED,qBAAa,mBAAoB,SAAQ,KAAK;IAGhC,QAAQ,CAAC,IAAI,EAAE,MAAM;IAFjC,QAAQ,CAAC,SAAS,SAAS;IAC3B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;gBAClB,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,OAAO,GAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAM;CAI/G;AAsBD,iDAAiD;AACjD,wBAAsB,uBAAuB,CAAC,IAAI,EAAE,MAAM,EAAE,YAAY,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,uBAAuB,CAAC,CAiCnH;AAED,+CAA+C;AAC/C,wBAAsB,6BAA6B,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,uBAAuB,iBAMhG"}

package/dist/delivery-source.js

@@ -0,0 +1,85 @@
+import { execFile } from 'node:child_process';
+import { promisify } from 'node:util';
+const execute = promisify(execFile);
+const SHA = /^[a-f0-9]{40,64}$/;
+export class DeliverySourceError extends Error {
+    code;
+    retryable = false;
+    data;
+    constructor(code, message, remediation, details = {}) {
+        super(`${code}: ${message}`);
+        this.code = code;
+        this.data = { pointer: 'git', remediation, ...details };
+    }
+}
+async function git(root, args) {
+    return (await execute('git', ['-C', root, ...args], {
+        encoding: 'utf8', timeout: 30_000, maxBuffer: 1024 * 1024,
+        env: { ...process.env, GIT_TERMINAL_PROMPT: '0' },
+    })).stdout.trim();
+}
+async function cleanCommit(root) {
+    let commit;
+    try {
+        commit = await git(root, ['rev-parse', '--verify', 'HEAD']);
+    }
+    catch {
+        throw new DeliverySourceError('DELIVERY_GIT_COMMIT_REQUIRED', '发布需要已提交的 Git 源码', '先建立应用仓库，提交并推送主分支；日常开发仍可使用 dev/check');
+    }
+    if (!SHA.test(commit))
+        throw new DeliverySourceError('DELIVERY_GIT_COMMIT_REQUIRED', '无法识别源码提交', '检查应用 Git 仓库');
+    if (await git(root, ['status', '--porcelain', '--untracked-files=normal'])) {
+        throw new DeliverySourceError('DELIVERY_SOURCE_DIRTY', '工作区有未提交内容，尚不能冻结发布候选', '保留其他任务的改动，完成本轮整合并提交、推送主分支后发布');
+    }
+    return commit;
+}
+/** 权威主线来自 origin 的远端 HEAD，绝不使用任务分支的 upstream。 */
+export async function publishedDeliverySource(root, sourceCommit) {
+    const currentCommit = await cleanCommit(root);
+    let repository;
+    let remoteHead;
+    try {
+        repository = await git(root, ['remote', 'get-url', 'origin']);
+        remoteHead = await git(root, ['ls-remote', '--symref', 'origin', 'HEAD']);
+    }
+    catch {
+        throw new DeliverySourceError('DELIVERY_MAINLINE_UNAVAILABLE', '无法读取绑定远端 origin 的主分支', '检查 origin 与远端访问；恢复后重试，不使用过期的本地远端引用');
+    }
+    const branch = remoteHead.match(/^ref: refs\/heads\/(.+)\s+HEAD$/m)?.[1];
+    if (!branch)
+        throw new DeliverySourceError('DELIVERY_MAINLINE_UNKNOWN', '远端尚未指定可用的默认分支', '在远端仓库设置并推送默认主分支后重试');
+    try {
+        await git(root, ['check-ref-format', `refs/heads/${branch}`]);
+        await git(root, ['fetch', '--quiet', '--no-tags', 'origin', `+refs/heads/${branch}:refs/remotes/origin/${branch}`]);
+    }
+    catch {
+        throw new DeliverySourceError('DELIVERY_MAINLINE_UNAVAILABLE', '无法刷新远端主分支', '恢复 origin 访问后重试', { branch });
+    }
+    const mainlineCommit = await git(root, ['rev-parse', `refs/remotes/origin/${branch}`]);
+    const currentBranch = await git(root, ['branch', '--show-current']);
+    if (currentBranch !== branch) {
+        throw new DeliverySourceError('DELIVERY_MAINLINE_CHECKOUT_REQUIRED', `请从远端默认主分支 ${branch} 发布`, '将本轮任务分支合入并推送主分支，然后在干净的主分支工作区发布；不要切换其他任务正在编辑的目录', { branch, currentBranch });
+    }
+    const commit = sourceCommit || currentCommit;
+    if (!SHA.test(commit))
+        throw new DeliverySourceError('DELIVERY_SOURCE_COMMIT_INVALID', '发布来源不是合法的 Git 提交', '重新读取原测试部署引用的版本');
+    try {
+        await git(root, ['merge-base', '--is-ancestor', commit, `refs/remotes/origin/${branch}`]);
+    }
+    catch {
+        throw new DeliverySourceError('DELIVERY_SOURCE_NOT_IN_MAINLINE', '发布来源尚未进入远端主分支', '先将源码合入并推送远端主分支；若已 squash/rebase，使用最终主线提交重新验证和冻结', { commit, branch });
+    }
+    if (!sourceCommit && currentCommit !== mainlineCommit) {
+        throw new DeliverySourceError('DELIVERY_MAINLINE_BEHIND', '本地源码尚未包含远端主分支的最新改动', '在保留现有工作前提下同步主分支，并验证最终候选', { commit, mainlineCommit, branch });
+    }
+    return { repository, branch, commit, mainlineCommit };
+}
+/** 构建步骤不能改变被验证源码。平台切换并发仍由 DeploymentRun 管理。 */
+export async function assertDeliverySourceUnchanged(root, source) {
+    const commit = await cleanCommit(root);
+    const branch = await git(root, ['branch', '--show-current']);
+    if (commit !== source.commit || branch !== source.branch) {
+        throw new DeliverySourceError('DELIVERY_SOURCE_CHANGED', '准备发布期间源码或分支发生变化', '保留已有制品与日志，重新核对本轮候选；不要把旧验证用于新源码', { expectedCommit: source.commit, commit });
+    }
+}
+//# sourceMappingURL=delivery-source.js.map

package/dist/delivery-source.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"delivery-source.js","sourceRoot":"","sources":["../src/delivery-source.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAEtC,MAAM,OAAO,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;AACpC,MAAM,GAAG,GAAG,mBAAmB,CAAC;AAShC,MAAM,OAAO,mBAAoB,SAAQ,KAAK;IAGvB;IAFZ,SAAS,GAAG,KAAK,CAAC;IAClB,IAAI,CAA0B;IACvC,YAAqB,IAAY,EAAE,OAAe,EAAE,WAAmB,EAAE,UAAmC,EAAE;QAC5G,KAAK,CAAC,GAAG,IAAI,KAAK,OAAO,EAAE,CAAC,CAAC;QADV,SAAI,GAAJ,IAAI,CAAQ;QAE/B,IAAI,CAAC,IAAI,GAAG,EAAE,OAAO,EAAE,KAAK,EAAE,WAAW,EAAE,GAAG,OAAO,EAAE,CAAC;IAC1D,CAAC;CACF;AAED,KAAK,UAAU,GAAG,CAAC,IAAY,EAAE,IAAc;IAC7C,OAAO,CAAC,MAAM,OAAO,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC,EAAE;QAClD,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,GAAG,IAAI;QACzD,GAAG,EAAE,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,mBAAmB,EAAE,GAAG,EAAE;KAClD,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;AACpB,CAAC;AAED,KAAK,UAAU,WAAW,CAAC,IAAY;IACrC,IAAI,MAAc,CAAC;IACnB,IAAI,CAAC;QAAC,MAAM,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,UAAU,EAAE,MAAM,CAAC,CAAC,CAAC;IAAC,CAAC;IACpE,MAAM,CAAC;QACL,MAAM,IAAI,mBAAmB,CAAC,8BAA8B,EAAE,iBAAiB,EAAE,qCAAqC,CAAC,CAAC;IAC1H,CAAC;IACD,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC;QAAE,MAAM,IAAI,mBAAmB,CAAC,8BAA8B,EAAE,UAAU,EAAE,aAAa,CAAC,CAAC;IAChH,IAAI,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE,aAAa,EAAE,0BAA0B,CAAC,CAAC,EAAE,CAAC;QAC3E,MAAM,IAAI,mBAAmB,CAAC,uBAAuB,EAAE,qBAAqB,EAAE,8BAA8B,CAAC,CAAC;IAChH,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,iDAAiD;AACjD,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAAC,IAAY,EAAE,YAAqB;IAC/E,MAAM,aAAa,GAAG,MAAM,WAAW,CAAC,IAAI,CAAC,CAAC;IAC9C,IAAI,UAAkB,CAAC;IACvB,IAAI,UAAkB,CAAC;IACvB,IAAI,CAAC;QACH,UAAU,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC,CAAC;QAC9D,UAAU,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC;IAC5E,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,mBAAmB,CAAC,+BAA+B,EAAE,sBAAsB,EAAE,oCAAoC,CAAC,CAAC;IAC/H,CAAC;IACD,MAAM,MAAM,GAAG,UAAU,CAAC,KAAK,CAAC,kCAAkC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IACzE,IAAI,CAAC,MAAM;QAAE,MAAM,IAAI,mBAAmB,CAAC,2BAA2B,EAAE,eAAe,EAAE,oBAAoB,CAAC,CAAC;IAC/G,IAAI,CAAC;QACH,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,kBAAkB,EAAE,cAAc,MAAM,EAAE,CAAC,CAAC,CAAC;QAC9D,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,QAAQ,EAAE,eAAe,MAAM,wBAAwB,MAAM,EAAE,CAAC,CAAC,CAAC;IACtH,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,mBAAmB,CAAC,+BAA+B,EAAE,WAAW,EAAE,iBAAiB,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;IAC7G,CAAC;IACD,MAAM,cAAc,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,uBAAuB,MAAM,EAAE,CAAC,CAAC,CAAC;IACvF,MAAM,aAAa,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE,gBAAgB,CAAC,CAAC,CAAC;IACpE,IAAI,aAAa,KAAK,MAAM,EAAE,CAAC;QAC7B,MAAM,IAAI,mBAAmB,CAAC,qCAAqC,EAAE,aAAa,MAAM,KAAK,EAAE,gDAAgD,EAAE,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC,CAAC;IAC9K,CAAC;IACD,MAAM,MAAM,GAAG,YAAY,IAAI,aAAa,CAAC;IAC7C,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC;QAAE,MAAM,IAAI,mBAAmB,CAAC,gCAAgC,EAAE,kBAAkB,EAAE,gBAAgB,CAAC,CAAC;IAC7H,IAAI,CAAC;QAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,YAAY,EAAE,eAAe,EAAE,MAAM,EAAE,uBAAuB,MAAM,EAAE,CAAC,CAAC,CAAC;IAAC,CAAC;IAClG,MAAM,CAAC;QACL,MAAM,IAAI,mBAAmB,CAAC,iCAAiC,EAAE,eAAe,EAAE,iDAAiD,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;IAC3J,CAAC;IACD,IAAI,CAAC,YAAY,IAAI,aAAa,KAAK,cAAc,EAAE,CAAC;QACtD,MAAM,IAAI,mBAAmB,CAAC,0BAA0B,EAAE,oBAAoB,EAAE,yBAAyB,EAAE,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,EAAE,CAAC,CAAC;IACjJ,CAAC;IACD,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC;AACxD,CAAC;AAED,+CAA+C;AAC/C,MAAM,CAAC,KAAK,UAAU,6BAA6B,CAAC,IAAY,EAAE,MAA+B;IAC/F,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,IAAI,CAAC,CAAC;IACvC,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE,gBAAgB,CAAC,CAAC,CAAC;IAC7D,IAAI,MAAM,KAAK,MAAM,CAAC,MAAM,IAAI,MAAM,KAAK,MAAM,CAAC,MAAM,EAAE,CAAC;QACzD,MAAM,IAAI,mBAAmB,CAAC,yBAAyB,EAAE,iBAAiB,EAAE,gCAAgC,EAAE,EAAE,cAAc,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;IAC3J,CAAC;AACH,CAAC"}

package/dist/deployment-observer.d.ts

@@ -0,0 +1,14 @@
+import { type DevkitResult } from 'openxiangda-contracts';
+import type { OpenXiangdaApplicationServices } from './application-services.js';
+import { type OperationProgressListener } from './operation-progress.js';
+export interface DeploymentObservationOptions {
+    root?: string;
+    deploymentId?: string;
+    onProgress?: OperationProgressListener;
+    timeoutMs?: number;
+    pollIntervalMs?: number;
+}
+/** 只观察原运行；观察失败绝不重新提交、取消或修改平台状态。 */
+export declare function observeDeployment(services: Pick<OpenXiangdaApplicationServices, 'deploymentStatus'>, initial: DevkitResult<unknown>, options?: DeploymentObservationOptions): Promise<DevkitResult<unknown>>;
+export declare function watchDeployment(services: Pick<OpenXiangdaApplicationServices, 'deploymentStatus'>, options?: DeploymentObservationOptions): Promise<DevkitResult<unknown>>;
+//# sourceMappingURL=deployment-observer.d.ts.map

package/dist/deployment-observer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"deployment-observer.d.ts","sourceRoot":"","sources":["../src/deployment-observer.ts"],"names":[],"mappings":"AACA,OAAO,EAAuC,KAAK,YAAY,EAAE,MAAM,uBAAuB,CAAC;AAC/F,OAAO,KAAK,EAAE,8BAA8B,EAAE,MAAM,2BAA2B,CAAC;AAChF,OAAO,EAA+D,KAAK,yBAAyB,EAAE,MAAM,yBAAyB,CAAC;AAEtI,MAAM,WAAW,4BAA4B;IAC3C,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,UAAU,CAAC,EAAE,yBAAyB,CAAC;IACvC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAOD,mCAAmC;AACnC,wBAAsB,iBAAiB,CACrC,QAAQ,EAAE,IAAI,CAAC,8BAA8B,EAAE,kBAAkB,CAAC,EAClE,OAAO,EAAE,YAAY,CAAC,OAAO,CAAC,EAC9B,OAAO,GAAE,4BAAiC,GACzC,OAAO,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,CAiDhC;AAED,wBAAgB,eAAe,CAAC,QAAQ,EAAE,IAAI,CAAC,8BAA8B,EAAE,kBAAkB,CAAC,EAAE,OAAO,GAAE,4BAAiC,kCAI7I"}

package/dist/deployment-observer.js

@@ -0,0 +1,68 @@
+import { setTimeout as delay } from 'node:timers/promises';
+import { SCHEMA_VERSIONS } from 'openxiangda-contracts';
+import { operationStage, updateOperationStage, withOperationProgress } from './operation-progress.js';
+const labels = {
+    queued: '平台部署排队', preparing: '平台准备配置与运行环境', deploying: '平台部署应用',
+    activating: '平台切换应用版本', verifying: '平台检查运行健康',
+    succeeded: '平台部署完成', failed: '平台部署失败', cancelled: '平台部署已取消',
+};
+/** 只观察原运行；观察失败绝不重新提交、取消或修改平台状态。 */
+export async function observeDeployment(services, initial, options = {}) {
+    if (!initial.ok || !isRun(initial.data))
+        return initial;
+    let latest = initial;
+    const started = Date.now();
+    return operationStage('platform', '跟踪平台部署运行', async () => {
+        let previous = '';
+        for (;;) {
+            const run = latest.data;
+            const fingerprint = `${run.status}:${run.stage}:${run.attempt}`;
+            if (fingerprint !== previous) {
+                updateOperationStage('platform', labels[run.status] || '跟踪平台部署运行', {
+                    deploymentId: run.id, status: run.status, serverStage: run.stage, attempt: run.attempt,
+                });
+                previous = fingerprint;
+            }
+            if (run.status === 'succeeded')
+                return { ...latest, operation: initial.operation };
+            if (run.status === 'failed' || run.status === 'cancelled') {
+                const failure = run.latestFailure || run.failure || run.rootFailure;
+                return incomplete(failure?.code || 'DEPLOYMENT_CANCELLED', failure?.message || '部署运行已取消', failure?.retryable || false);
+            }
+            if (Date.now() - started >= (options.timeoutMs ?? 15 * 60_000)) {
+                return incomplete('DEPLOYMENT_OBSERVATION_TIMEOUT', '观察达到时限；平台运行仍保留，请继续查询原部署 ID', true);
+            }
+            await delay(Math.min(options.pollIntervalMs ?? 3_000, Math.max(0, (options.timeoutMs ?? 15 * 60_000) - (Date.now() - started))));
+            try {
+                const result = await services.deploymentStatus(options.root, run.id);
+                if (!result.ok || !isRun(result.data) || result.data.id !== run.id) {
+                    return incomplete('DEPLOYMENT_OBSERVATION_UNAVAILABLE', '本次未能读取原部署状态；请继续查询原部署 ID', true);
+                }
+                latest = result;
+            }
+            catch {
+                return incomplete('DEPLOYMENT_OBSERVATION_UNAVAILABLE', '部署状态连接中断；平台运行可能仍在继续，请查询原部署 ID', true);
+            }
+        }
+    });
+    function incomplete(code, message, retryable) {
+        const command = `openxiangda status ${latest.data.id} --watch`;
+        const terminal = ['failed', 'cancelled'].includes(latest.data.status);
+        return {
+            ...latest, ok: false, operation: initial.operation,
+            diagnostics: [...(latest.diagnostics || []), {
+                    schemaVersion: SCHEMA_VERSIONS.diagnostic, code, severity: 'error', message, retryable,
+                    remediation: terminal ? '查看本次运行的日志与平台恢复建议后处理' : `运行 ${command}，不需要重新构建或提交`,
+                    details: { deploymentId: latest.data.id, status: latest.data.status, recovery: latest.data.recovery },
+                }],
+            nextActions: terminal ? latest.nextActions : [{ code: 'status', label: '继续跟踪原部署运行', command }],
+        };
+    }
+}
+export function watchDeployment(services, options = {}) {
+    return withOperationProgress('status', options.onProgress, async () => observeDeployment(services, await services.deploymentStatus(options.root, options.deploymentId), options));
+}
+function isRun(value) {
+    return Boolean(value && typeof value === 'object' && 'id' in value && typeof value.id === 'string' && 'status' in value && typeof value.status === 'string');
+}
+//# sourceMappingURL=deployment-observer.js.map

package/dist/deployment-observer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"deployment-observer.js","sourceRoot":"","sources":["../src/deployment-observer.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,IAAI,KAAK,EAAE,MAAM,sBAAsB,CAAC;AAC3D,OAAO,EAAE,eAAe,EAAyC,MAAM,uBAAuB,CAAC;AAE/F,OAAO,EAAE,cAAc,EAAE,oBAAoB,EAAE,qBAAqB,EAAkC,MAAM,yBAAyB,CAAC;AAStI,MAAM,MAAM,GAA4C;IACtD,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,aAAa,EAAE,SAAS,EAAE,QAAQ;IAC/D,UAAU,EAAE,UAAU,EAAE,SAAS,EAAE,UAAU;IAC7C,SAAS,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,SAAS;CAC5D,CAAC;AAEF,mCAAmC;AACnC,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,QAAkE,EAClE,OAA8B,EAC9B,UAAwC,EAAE;IAE1C,IAAI,CAAC,OAAO,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;QAAE,OAAO,OAAO,CAAC;IACxD,IAAI,MAAM,GAAG,OAAsC,CAAC;IACpD,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC3B,OAAO,cAAc,CAAC,UAAU,EAAE,UAAU,EAAE,KAAK,IAAI,EAAE;QACvD,IAAI,QAAQ,GAAG,EAAE,CAAC;QAClB,SAAS,CAAC;YACR,MAAM,GAAG,GAAG,MAAM,CAAC,IAAK,CAAC;YACzB,MAAM,WAAW,GAAG,GAAG,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,KAAK,IAAI,GAAG,CAAC,OAAO,EAAE,CAAC;YAChE,IAAI,WAAW,KAAK,QAAQ,EAAE,CAAC;gBAC7B,oBAAoB,CAAC,UAAU,EAAE,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,UAAU,EAAE;oBACjE,YAAY,EAAE,GAAG,CAAC,EAAE,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,WAAW,EAAE,GAAG,CAAC,KAAK,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO;iBACvF,CAAC,CAAC;gBACH,QAAQ,GAAG,WAAW,CAAC;YACzB,CAAC;YACD,IAAI,GAAG,CAAC,MAAM,KAAK,WAAW;gBAAE,OAAO,EAAE,GAAG,MAAM,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,CAAC;YACnF,IAAI,GAAG,CAAC,MAAM,KAAK,QAAQ,IAAI,GAAG,CAAC,MAAM,KAAK,WAAW,EAAE,CAAC;gBAC1D,MAAM,OAAO,GAAG,GAAG,CAAC,aAAa,IAAI,GAAG,CAAC,OAAO,IAAI,GAAG,CAAC,WAAW,CAAC;gBACpE,OAAO,UAAU,CAAC,OAAO,EAAE,IAAI,IAAI,sBAAsB,EAAE,OAAO,EAAE,OAAO,IAAI,SAAS,EAAE,OAAO,EAAE,SAAS,IAAI,KAAK,CAAC,CAAC;YACzH,CAAC;YACD,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,IAAI,CAAC,OAAO,CAAC,SAAS,IAAI,EAAE,GAAG,MAAM,CAAC,EAAE,CAAC;gBAC/D,OAAO,UAAU,CAAC,gCAAgC,EAAE,4BAA4B,EAAE,IAAI,CAAC,CAAC;YAC1F,CAAC;YACD,MAAM,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,cAAc,IAAI,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,OAAO,CAAC,SAAS,IAAI,EAAE,GAAG,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;YACjI,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,gBAAgB,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;gBACrE,IAAI,CAAC,MAAM,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,EAAE,KAAK,GAAG,CAAC,EAAE,EAAE,CAAC;oBACnE,OAAO,UAAU,CAAC,oCAAoC,EAAE,yBAAyB,EAAE,IAAI,CAAC,CAAC;gBAC3F,CAAC;gBACD,MAAM,GAAG,MAAqC,CAAC;YACjD,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,UAAU,CAAC,oCAAoC,EAAE,+BAA+B,EAAE,IAAI,CAAC,CAAC;YACjG,CAAC;QACH,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,SAAS,UAAU,CAAC,IAAY,EAAE,OAAe,EAAE,SAAkB;QACnE,MAAM,OAAO,GAAG,sBAAsB,MAAM,CAAC,IAAK,CAAC,EAAE,UAAU,CAAC;QAChE,MAAM,QAAQ,GAAG,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAK,CAAC,MAAM,CAAC,CAAC;QACvE,OAAO;YACL,GAAG,MAAM,EAAE,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS;YAClD,WAAW,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,WAAW,IAAI,EAAE,CAAC,EAAE;oBAC3C,aAAa,EAAE,eAAe,CAAC,UAAU,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,SAAS;oBACtF,WAAW,EAAE,QAAQ,CAAC,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,MAAM,OAAO,aAAa;oBAC1E,OAAO,EAAE,EAAE,YAAY,EAAE,MAAM,CAAC,IAAK,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,IAAK,CAAC,MAAM,EAAE,QAAQ,EAAE,MAAM,CAAC,IAAK,CAAC,QAAQ,EAAE;iBACzG,CAAC;YACF,WAAW,EAAE,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,WAAW,EAAE,OAAO,EAAE,CAAC;SAC/F,CAAC;IACJ,CAAC;AACH,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,QAAkE,EAAE,UAAwC,EAAE;IAC5I,OAAO,qBAAqB,CAAC,QAAQ,EAAE,OAAO,CAAC,UAAU,EAAE,KAAK,IAAI,EAAE,CAAC,iBAAiB,CACtF,QAAQ,EAAE,MAAM,QAAQ,CAAC,gBAAgB,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,YAAY,CAAC,EAAE,OAAO,CACvF,CAAC,CAAC;AACL,CAAC;AACD,SAAS,KAAK,CAAC,KAAc;IAC3B,OAAO,OAAO,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,IAAI,IAAI,KAAK,IAAI,OAAO,KAAK,CAAC,EAAE,KAAK,QAAQ,IAAI,QAAQ,IAAI,KAAK,IAAI,OAAO,KAAK,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC;AAC/J,CAAC"}

package/dist/deployment.d.ts

@@ -1,12 +1,21 @@
-import { CONFIGURATION_COMPATIBILITY_CAPABILITY, type ApplicationContractCompatibility, type ConfigurationValidationResult, type DeploymentEnvironment, type DeploymentRun, type PlatformCapabilities, type RequiredPlatformCapabilityContract } from 'openxiangda-contracts';
+import type { DeploymentStrategy } from 'openxiangda-contracts';
+import { CONFIGURATION_COMPATIBILITY_CAPABILITY, type ApplicationContractCompatibility, type ConfigurationValidationResult, type DeploymentEnvironment, type DeploymentRun, type PlatformCapabilities, type RequiredPlatformCapabilityContract, type RuntimeCapacityPreflight } from 'openxiangda-contracts';
 import { type CreateDeploymentInput, type UploadArtifactInput } from './control-plane-client.js';
 import { type CompiledAppPackage } from './package-compiler.js';
+import { type ProductionPromotionPreflight } from 'openxiangda-contracts';
 export interface DeploymentControlPlane {
     capabilities(): Promise<PlatformCapabilities>;
+    artifactStatus?(appCode: string, digest: string): Promise<{
+        digest: string;
+        kind: string;
+        contentType: string;
+        sizeBytes: number;
+    } | null>;
     uploadArtifact(input: UploadArtifactInput): Promise<Record<string, unknown>>;
     createDeployment(input: CreateDeploymentInput): Promise<DeploymentRun>;
 }
 export interface SubmitAppPackageInput {
+    deploymentStrategy?: DeploymentStrategy;
     client: DeploymentControlPlane;
     capabilities?: PlatformCapabilities;
     compiledPackage: CompiledAppPackage;
@@ -17,6 +26,13 @@ export interface SubmitAppPackageInput {
     requestId?: string;
 }
 export declare function submitAppPackage(input: SubmitAppPackageInput): Promise<DeploymentRun>;
+export declare function assertRuntimeCapacityPreflight(value: RuntimeCapacityPreflight, environmentId?: string, strategy?: DeploymentStrategy): void;
+export declare function assertProductionPromotionPreflight(value: ProductionPromotionPreflight, expected: {
+    appCode: string;
+    sourceDeploymentId: string;
+    appVersionId: string;
+    packageDigest: string;
+}): void;
 export declare function assertApplicationContractCompatible(capabilities: PlatformCapabilities, required: ApplicationContractCompatibility): void;
 export declare function assertConfigurationValidationResult(capabilities: PlatformCapabilities, required: ApplicationContractCompatibility, result: ConfigurationValidationResult, source: {
     configurationDigest: string;

package/dist/deployment.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"deployment.d.ts","sourceRoot":"","sources":["../src/deployment.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,sCAAsC,EAItC,KAAK,gCAAgC,EACrC,KAAK,6BAA6B,EAClC,KAAK,qBAAqB,EAC1B,KAAK,aAAa,EAClB,KAAK,oBAAoB,EACzB,KAAK,kCAAkC,EACxC,MAAM,uBAAuB,CAAC;AAG/B,OAAO,EAEL,KAAK,qBAAqB,EAC1B,KAAK,mBAAmB,EACzB,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAAE,KAAK,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AAEhE,MAAM,WAAW,sBAAsB;IACrC,YAAY,IAAI,OAAO,CAAC,oBAAoB,CAAC,CAAC;IAC9C,cAAc,CACZ,KAAK,EAAE,mBAAmB,GACzB,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IACpC,gBAAgB,CAAC,KAAK,EAAE,qBAAqB,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC;CACxE;AAED,MAAM,WAAW,qBAAqB;IACpC,MAAM,EAAE,sBAAsB,CAAC;IAC/B,YAAY,CAAC,EAAE,oBAAoB,CAAC;IACpC,eAAe,EAAE,kBAAkB,CAAC;IACpC,eAAe,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;IAC3C,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,eAAe,CAAC,EAAE,qBAAqB,CAAC;IACxC,cAAc,EAAE,MAAM,CAAC;IACvB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,wBAAsB,gBAAgB,CACpC,KAAK,EAAE,qBAAqB,GAC3B,OAAO,CAAC,aAAa,CAAC,CA0DxB;AAcD,wBAAgB,mCAAmC,CACjD,YAAY,EAAE,oBAAoB,EAClC,QAAQ,EAAE,gCAAgC,GACzC,IAAI,CAiDN;AAED,wBAAgB,mCAAmC,CACjD,YAAY,EAAE,oBAAoB,EAClC,QAAQ,EAAE,gCAAgC,EAC1C,MAAM,EAAE,6BAA6B,EACrC,MAAM,EAAE;IAAE,mBAAmB,EAAE,MAAM,CAAC;IAAC,cAAc,EAAE,MAAM,CAAA;CAAE,EAC/D,4BAA4B,EAAE,kCAAkC,EAAE,GACjE,IAAI,CAyCN;AAED,wBAAgB,oBAAoB,CAClC,YAAY,EAAE,OAAO,CAAC,oBAAoB,CAAC,GAAG,SAAS,EACvD,QAAQ,EAAE,gCAAgC,EAC1C,OAAO,SAAM,EACb,KAAK,GAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAM;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAwBpC;AAgBD,wBAAgB,mCAAmC,CACjD,YAAY,EAAE,oBAAoB,EAClC,QAAQ,EAAE,kCAAkC,EAAE,GAC7C,IAAI,CAgCN;AAED;;;;GAIG;AACH,wBAAsB,sBAAsB,CAC1C,eAAe,EAAE,kBAAkB,EACnC,eAAe,EAAE,MAAM,CAAC,MAAM,EAAE,QAAQ,CAAC;;;GA6E1C"}
+{"version":3,"file":"deployment.d.ts","sourceRoot":"","sources":["../src/deployment.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AAChE,OAAO,EAEL,sCAAsC,EAItC,KAAK,gCAAgC,EACrC,KAAK,6BAA6B,EAClC,KAAK,qBAAqB,EAC1B,KAAK,aAAa,EAClB,KAAK,oBAAoB,EACzB,KAAK,kCAAkC,EACvC,KAAK,wBAAwB,EAC9B,MAAM,uBAAuB,CAAC;AAG/B,OAAO,EAEL,KAAK,qBAAqB,EAC1B,KAAK,mBAAmB,EACzB,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAAE,KAAK,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AAGhE,OAAO,EAAE,KAAK,4BAA4B,EAAE,MAAM,uBAAuB,CAAC;AAE1E,MAAM,WAAW,sBAAsB;IACrC,YAAY,IAAI,OAAO,CAAC,oBAAoB,CAAC,CAAC;IAC9C,cAAc,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC,CAAC;IAC3I,cAAc,CACZ,KAAK,EAAE,mBAAmB,GACzB,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IACpC,gBAAgB,CAAC,KAAK,EAAE,qBAAqB,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC;CACxE;AAaD,MAAM,WAAW,qBAAqB;IACpC,kBAAkB,CAAC,EAAE,kBAAkB,CAAC;IACxC,MAAM,EAAE,sBAAsB,CAAC;IAC/B,YAAY,CAAC,EAAE,oBAAoB,CAAC;IACpC,eAAe,EAAE,kBAAkB,CAAC;IACpC,eAAe,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;IAC3C,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,eAAe,CAAC,EAAE,qBAAqB,CAAC;IACxC,cAAc,EAAE,MAAM,CAAC;IACvB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,wBAAsB,gBAAgB,CACpC,KAAK,EAAE,qBAAqB,GAC3B,OAAO,CAAC,aAAa,CAAC,CA2DxB;AAUD,wBAAgB,8BAA8B,CAAC,KAAK,EAAE,wBAAwB,EAAE,aAAa,CAAC,EAAE,MAAM,EAAE,QAAQ,GAAE,kBAA8B,QAU/I;AACD,wBAAgB,kCAAkC,CAAC,KAAK,EAAE,4BAA4B,EAAE,QAAQ,EAAE;IAChG,OAAO,EAAE,MAAM,CAAC;IAAC,kBAAkB,EAAE,MAAM,CAAC;IAAC,YAAY,EAAE,MAAM,CAAC;IAAC,aAAa,EAAE,MAAM,CAAC;CAC1F,QAOA;AAQD,wBAAgB,mCAAmC,CACjD,YAAY,EAAE,oBAAoB,EAClC,QAAQ,EAAE,gCAAgC,GACzC,IAAI,CAyDN;AAED,wBAAgB,mCAAmC,CACjD,YAAY,EAAE,oBAAoB,EAClC,QAAQ,EAAE,gCAAgC,EAC1C,MAAM,EAAE,6BAA6B,EACrC,MAAM,EAAE;IAAE,mBAAmB,EAAE,MAAM,CAAC;IAAC,cAAc,EAAE,MAAM,CAAA;CAAE,EAC/D,4BAA4B,EAAE,kCAAkC,EAAE,GACjE,IAAI,CAyCN;AAED,wBAAgB,oBAAoB,CAClC,YAAY,EAAE,OAAO,CAAC,oBAAoB,CAAC,GAAG,SAAS,EACvD,QAAQ,EAAE,gCAAgC,EAC1C,OAAO,SAAM,EACb,KAAK,GAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAM;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAwBpC;AAgBD,wBAAgB,mCAAmC,CACjD,YAAY,EAAE,oBAAoB,EAClC,QAAQ,EAAE,kCAAkC,EAAE,GAC7C,IAAI,CAgCN;AAED;;;;GAIG;AACH,wBAAsB,sBAAsB,CAC1C,eAAe,EAAE,kBAAkB,EACnC,eAAe,EAAE,MAAM,CAAC,MAAM,EAAE,QAAQ,CAAC;;;GA6E1C"}

package/dist/deployment.js

@@ -2,10 +2,22 @@ import { canonicalJson, CONFIGURATION_COMPATIBILITY_CAPABILITY, contractSchemas,
 import { createHash } from 'node:crypto';
 import { Ajv2020 } from 'ajv/dist/2020.js';
 import { ControlPlaneError, } from './control-plane-client.js';
+import { operationStage, updateOperationStage } from './operation-progress.js';
+import { NATIVE_CONFIGURATION_VALIDATOR_DIGEST } from 'openxiangda-contracts/native-compiler';
+async function uploadOrReuse(client, input, stage, label) {
+    return operationStage(stage, label, async () => {
+        const stored = await client.artifactStatus?.(input.appCode, input.digest);
+        if (stored?.digest === input.digest && stored.kind === input.kind && stored.contentType === input.contentType && stored.sizeBytes === new Blob([input.content]).size) {
+            updateOperationStage(stage, `${label}（复用已有内容）`, { reused: true, digest: input.digest, bytes: stored.sizeBytes });
+            return stored;
+        }
+        return client.uploadArtifact(input);
+    });
+}
 export async function submitAppPackage(input) {
     const capabilities = input.capabilities || (await input.client.capabilities());
     assertApplicationContractCompatible(capabilities, input.compiledPackage.manifest.compatibility.applicationContract);
-    await verifySealedAppPackage(input.compiledPackage, input.artifactContent || {});
+    await operationStage('artifacts-verify', '上传前校验制品完整性', () => verifySealedAppPackage(input.compiledPackage, input.artifactContent || {}));
     const required = input.compiledPackage.manifest.compatibility
         .requiredPlatformCapabilities;
     assertRequiredCapabilitiesAvailable(capabilities, required);
@@ -15,7 +27,7 @@ export async function submitAppPackage(input) {
         if (content === undefined) {
             throw new ControlPlaneError(400, 'OPENXIANGDA_ARTIFACT_CONTENT_MISSING', `缺少制品内容: ${artifact.digest}`, { digest: artifact.digest, kind: artifact.kind });
         }
-        await input.client.uploadArtifact({
+        await uploadOrReuse(input.client, {
             appCode: input.compiledPackage.manifest.appCode,
             digest: artifact.digest,
             kind: artifact.kind,
@@ -25,9 +37,9 @@ export async function submitAppPackage(input) {
                 appVersion: input.compiledPackage.manifest.version,
                 sourceCommit: input.compiledPackage.manifest.source.commit,
             },
-        });
+        }, `upload-${artifact.kind}`, `上传${{ frontend: '前端', backend: '后端', config: '配置', contracts: '数据契约' }[artifact.kind] || artifact.kind}制品`);
     }
-    await input.client.uploadArtifact({
+    await uploadOrReuse(input.client, {
         appCode: input.compiledPackage.manifest.appCode,
         digest: input.compiledPackage.digest,
         kind: 'manifest',
@@ -37,24 +49,46 @@ export async function submitAppPackage(input) {
             appVersion: input.compiledPackage.manifest.version,
             sourceCommit: input.compiledPackage.manifest.source.commit,
         },
-    });
-    return await input.client.createDeployment({
+    }, 'upload-manifest', '上传版本清单');
+    return await operationStage('submit', '提交平台部署运行', () => input.client.createDeployment({
         appCode: input.compiledPackage.manifest.appCode,
         ...(input.environmentId ? { environmentId: input.environmentId } : {}),
         ...(input.environmentKind
             ? { environmentKind: input.environmentKind }
             : {}),
+        ...(input.deploymentStrategy ? { deploymentStrategy: input.deploymentStrategy } : {}),
         packageDigest: input.compiledPackage.digest,
         package: input.compiledPackage.manifest,
         idempotencyKey: input.idempotencyKey,
         ...(input.requestId ? { requestId: input.requestId } : {}),
-    });
+    }));
 }
 const validatePlatformCapabilities = new Ajv2020({
     allErrors: true,
     strict: false,
     validateFormats: false,
 }).compile(contractSchemas.platformCapabilities);
+const validatePromotionPreflight = new Ajv2020({ allErrors: true, strict: false }).compile(contractSchemas.promotionPreflight);
+const validateRuntimeCapacityPreflight = new Ajv2020({ allErrors: true, strict: false }).compile(contractSchemas.runtimeCapacityPreflight);
+export function assertRuntimeCapacityPreflight(value, environmentId, strategy = 'rolling') {
+    if ((value.deploymentStrategy || 'rolling') !== strategy ||
+        (strategy === 'maintenance-replace' && value.basis !== 'existing-run' && (!value.maintenance || value.basis !== 'new-candidate')) ||
+        (strategy === 'rolling' && value.maintenance != null) || !validateRuntimeCapacityPreflight(value) || (environmentId && value.environmentId !== environmentId) ||
+        !Number.isFinite(Date.parse(value.observedAt)) ||
+        (value.capacity && (value.capacity.checked ? typeof value.sufficient !== 'boolean' : value.sufficient !== null)) ||
+        (value.sufficient === false && !value.capacity?.shortages.length) ||
+        (value.sufficient === true && value.capacity?.shortages.length)) {
+        throw new ControlPlaneError(409, 'OPENXIANGDA_RUNTIME_CAPACITY_PREFLIGHT_RESULT_INVALID', '平台运行配额预检结果无效或不属于指定环境', { pointer: '/runtime-capacity-preflight' });
+    }
+}
+export function assertProductionPromotionPreflight(value, expected) {
+    if (!validatePromotionPreflight(value) || value.validatorDigest !== NATIVE_CONFIGURATION_VALIDATOR_DIGEST ||
+        Object.entries(expected).some(([key, expectedValue]) => value[key] !== expectedValue)) {
+        throw new ControlPlaneError(409, 'PRODUCTION_PREFLIGHT_RESULT_INVALID', '生产预检结果无法绑定指定测试版本或当前共享校验规则', {
+            pointer: '/promotion-preflight', expected, actual: value,
+        });
+    }
+}
 const validateConfigurationValidationResult = new Ajv2020({
     allErrors: true,
     strict: false,
@@ -68,20 +102,26 @@ export function assertApplicationContractCompatible(capabilities, required) {
             .filter((path, index, values) => values.indexOf(path) === index);
         throw new ControlPlaneError(409, 'OPENXIANGDA_PLATFORM_CAPABILITIES_INVALID', '平台 capabilities 未提供有效的应用契约兼容信息', compatibilityDetails(capabilities, required, paths[0] || '/', {
             paths,
-            remediation: '先升级平台再重试 openxiangda check',
-        }), { remediation: '先升级平台再重试 openxiangda deploy' });
+            remediation: '核对项目工具与目标平台的配套发布版本和能力启用状态，升级不匹配的一端后重试 openxiangda check',
+        }), { remediation: '核对项目工具与目标平台的配套发布版本和能力启用状态，升级不匹配的一端后重试 openxiangda deploy' });
     }
     const descriptor = capabilities.configurationCompatibility;
+    if (descriptor.validatorDigest !== NATIVE_CONFIGURATION_VALIDATOR_DIGEST) {
+        throw new ControlPlaneError(409, 'OPENXIANGDA_CONFIGURATION_VALIDATOR_MISMATCH', '本地与目标平台的完整校验规则版本不一致，尚未开始构建或上传', compatibilityDetails(capabilities, required, '/configurationCompatibility/validatorDigest', {
+            expectedValidatorDigest: NATIVE_CONFIGURATION_VALIDATOR_DIGEST,
+            actualValidatorDigest: descriptor.validatorDigest,
+        }), { remediation: '升级工具链与目标平台到配套发布版本后重试，保留当前源码与候选' });
+    }
     if (descriptor.capability.code !== CONFIGURATION_COMPATIBILITY_CAPABILITY ||
         descriptor.capability.status !== 'available') {
-        throw new ControlPlaneError(409, 'OPENXIANGDA_CONFIGURATION_COMPATIBILITY_UNAVAILABLE', '目标平台未提供可用的配置兼容性预检能力', compatibilityDetails(capabilities, required, '/configurationCompatibility/capability'), { remediation: '先升级平台再重试 openxiangda check' });
+        throw new ControlPlaneError(409, 'OPENXIANGDA_CONFIGURATION_COMPATIBILITY_UNAVAILABLE', '目标平台未提供可用的配置兼容性预检能力', compatibilityDetails(capabilities, required, '/configurationCompatibility/capability'), { remediation: '核对项目工具与目标平台的配套发布版本和能力启用状态，升级不匹配的一端后重试 openxiangda check' });
     }
     const accepted = descriptor.supportedApplicationContracts;
     const matched = accepted.some(candidate => applicationContractsEqual(candidate, required));
     if (!matched) {
         throw new ControlPlaneError(409, 'OPENXIANGDA_APPLICATION_CONTRACT_UNSUPPORTED', '平台不接受当前工具链生成的应用契约', compatibilityDetails(capabilities, required, '/', {
-            remediation: '先升级平台再重试 openxiangda deploy',
-        }), { remediation: '先升级平台再重试 openxiangda deploy' });
+            remediation: '核对项目工具与目标平台的配套发布版本和能力启用状态，升级不匹配的一端后重试 openxiangda deploy',
+        }), { remediation: '核对项目工具与目标平台的配套发布版本和能力启用状态，升级不匹配的一端后重试 openxiangda deploy' });
     }
 }
 export function assertConfigurationValidationResult(capabilities, required, result, source, requiredPlatformCapabilities) {
@@ -111,7 +151,7 @@ export function assertConfigurationValidationResult(capabilities, required, resu
             actualSource: result?.source,
             expectedRequiredPlatformCapabilities: requiredPlatformCapabilities,
             actualRequiredPlatformCapabilities: result?.requiredPlatformCapabilities,
-        }), { remediation: '先升级平台再重试 openxiangda check' });
+        }), { remediation: '核对项目工具与目标平台的配套发布版本和能力启用状态，升级不匹配的一端后重试 openxiangda check' });
     }
 }
 export function compatibilityDetails(capabilities, required, pointer = '/', extra = {}) {
@@ -168,8 +208,8 @@ export function assertRequiredCapabilitiesAvailable(capabilities, required) {
             .map(item => item.code)
             .join(',')}`, {
             unavailable,
-            remediation: '先升级平台再重试 openxiangda deploy',
-        }, { remediation: '先升级平台再重试 openxiangda deploy' });
+            remediation: '核对项目工具与目标平台的配套发布版本和能力启用状态，升级不匹配的一端后重试 openxiangda deploy',
+        }, { remediation: '核对项目工具与目标平台的配套发布版本和能力启用状态，升级不匹配的一端后重试 openxiangda deploy' });
     }
 }
 /**