@adep/cli 0.2.2 → 0.3.1

package/LICENSE

@@ -0,0 +1,58 @@
+MIT License
+
+Copyright (c) 2026 yunke
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.
+
+---
+
+Commercial Modules Reservation
+
+The MIT license above applies to this repository EXCEPT the following
+directories, which are proprietary commercial modules and are NOT licensed
+under MIT (2026-10-05 decision, dual-track licensing):
+
+- server/domains/billing/
+- server/domains/appbuild/
+- server/domains/license/
+- server/domains/wallet/
+- server/domains/voucher/
+
+Each of these directories contains its own LICENSE.md stating the applicable
+terms. They are licensed exclusively under the AgentDeploy Commercial License
+and distributed under separate commercial agreements. All rights reserved.
+No part of these modules may be copied, modified, distributed, or used
+outside the terms of such commercial agreements.
+
+Everything else in this repository — including the platform core, all
+packages published to npm as `@adep/*`, the frontend application, and public
+documentation — is licensed under the MIT license stated above.
+
+---
+
+Trademark Notice
+
+This license grants rights to use, copy, modify and distribute the source code
+and software of this repository only. It does not grant any right, title or
+interest in the trademarks, service marks, logos or brand names of the project
+(including but not limited to "AgentDeploy", "云柯驿站" and related marks),
+which remain the exclusive property of the project owner. Use of project
+trademarks for purposes of identifying forked deployments must comply with
+fair-use principles and must not suggest endorsement by or affiliation with
+the project.

package/dist/index.js

@@ -497,7 +497,8 @@ var init_generated = __esm({
             "packageJson",
             "adepConfig",
             "adepEnv",
-            "gitignore"
+            "gitignore",
+            "dockerAssets"
           ]
         },
         "files": [
@@ -530,7 +531,8 @@ var init_generated = __esm({
             "readme",
             "helloFunction",
             "functionIndex",
-            "gitignore"
+            "gitignore",
+            "dockerAssets"
           ]
         },
         "files": []
@@ -562,7 +564,8 @@ var init_generated = __esm({
             "viteConfig",
             "indexHtml",
             "webSrc",
-            "gitignore"
+            "gitignore",
+            "dockerAssets"
           ]
         },
         "files": []
@@ -594,7 +597,8 @@ var init_generated = __esm({
             "adepEnv",
             "indexHtml",
             "viteConfig",
-            "gitignore"
+            "gitignore",
+            "dockerAssets"
           ],
           "source": "\u672C\u76EE\u5F55\u5373\u771F\u76F8\u6E90\uFF08\u539F apps/countdown \u5DF2\u79FB\u51FA\u4ED3\u5E93\uFF0C\u72EC\u7ACB\u7EF4\u62A4\u4E8E git.a.jajabjbj.top:6602/a/countdown-adep.git\uFF09"
         },
@@ -3676,7 +3680,7 @@ var init_web_project_template = __esm({
 });
 
 // packages/cli/src/templates/shared-assets.ts
-var ADEP_CONFIG_HEADER, PACKAGE_JSON, COUNTDOWN_PACKAGE_JSON, README, FUNCTION_INDEX, SCHEMA_SQL, INDEX_HTML, VITE_CONFIG, GITIGNORE, SHARED_ASSETS;
+var ADEP_CONFIG_HEADER, PACKAGE_JSON, COUNTDOWN_PACKAGE_JSON, DOCKER_SERVE_PORT, DOCKERFILE, COMPOSE_YAML, DOCKERIGNORE, ENV_EXAMPLE, DOCKER_README_SECTION, DOCKER_ASSETS, README, FUNCTION_INDEX, SCHEMA_SQL, INDEX_HTML, VITE_CONFIG, GITIGNORE, SHARED_ASSETS;
 var init_shared_assets = __esm({
   "packages/cli/src/templates/shared-assets.ts"() {
     "use strict";
@@ -3704,6 +3708,10 @@ var init_shared_assets = __esm({
           build: "vite build",
           "site:deploy": "adep hosting deploy site --spa",
           serve: "adep serve",
+          // 容器内启动入口（Dockerfile 的 CMD 只有 `bun run start`）：静态目录 / 端口口径
+          // 只在这一个地方定档——Dockerfile 与 package.json 各写一套必然漂移（2026-10-08 收敛）。
+          // fullstack 的前端产物在 site/（vite build）；function / empty 无前端产物，故不指目录。
+          start: template === "fullstack" ? "adep serve --host 0.0.0.0 --static site" : "adep serve --host 0.0.0.0",
           deploy: "adep publish --only functions",
           doctor: "adep doctor"
         },
@@ -3767,6 +3775,121 @@ var init_shared_assets = __esm({
       return `${JSON.stringify(pkg, null, 2)}
 `;
     };
+    DOCKER_SERVE_PORT = 8787;
+    DOCKERFILE = `# \u672C\u5730\u4E00\u952E\u8FD0\u884C\u955C\u50CF\uFF08docker compose up --build\uFF09
+# \u8FD0\u884C\u65F6 = adep serve\uFF1A\u51FD\u6570 /api/{fn} + /healthz + \u9759\u6001\u6258\u7BA1 + SQLite\uFF08Bun \u539F\u751F\uFF0C\u7F3A\u7701\u964D\u7EA7 sim\uFF09
+# \u6A21\u677F\u53C2\u6570\uFF08\u9879\u76EE\u6839\u6709 data.yml \u65F6\uFF09\u7531 serve \u5728**\u54CD\u5E94\u671F**\u6CE8\u5165 window.__ADEP_ENV__\uFF0C
+# \u4E0E\u5E73\u53F0\u9759\u6001\u6258\u7BA1\u540C\u4E00\u673A\u5236 \u2014\u2014 \u955C\u50CF\u91CC\u4E0D\u9700\u8981\u53E6\u653E\u6CE8\u5165\u811A\u672C\uFF0C\u4E5F\u4E0D\u6539\u5199\u5DE5\u4F5C\u533A\u91CC\u7684 HTML\u3002
+FROM oven/bun:1
+
+WORKDIR /app
+
+# \u5B89\u88C5\u4F9D\u8D56\uFF08\u542B @adep/cli \u2014\u2014 serve \u7684\u540C\u6E90\u8FD0\u884C\u65F6\uFF09
+COPY package.json ./
+RUN bun install
+
+# \u5E94\u7528\u4EE3\u7801\uFF08.dockerignore \u5DF2\u6392\u9664 node_modules / .env / \u6784\u5EFA\u4EA7\u7269\uFF09
+COPY . .
+
+# \u524D\u7AEF\u6784\u5EFA\uFF1A\u4EC5\u5F53\u672C\u6A21\u677F\u58F0\u660E\u4E86 build \u811A\u672C\u65F6\u6267\u884C\uFF08\u7EAF\u4E91\u51FD\u6570\u6A21\u677F\u6CA1\u6709\u524D\u7AEF\u4EA7\u7269\uFF09\u3002
+# \u26A0\uFE0F \u523B\u610F\u300C\u5148\u5224\u811A\u672C\u5B58\u5728\u518D\u6267\u884C\u300D\uFF0C\u800C\u4E0D\u662F \`bun run build || true\` \u2014\u2014 \u540E\u8005\u4F1A\u628A**\u6784\u5EFA\u5931\u8D25**\u4E00\u8D77\u541E\u6389\uFF0C
+# \u4E8E\u662F\u955C\u50CF\u6784\u5EFA\u6210\u529F\u3001\u5BB9\u5668\u8D77\u6765\u540E\u524D\u7AEF\u5374\u662F\u7A7A\u7684\uFF08\u6700\u96BE\u67E5\u7684\u90A3\u7C7B\u5047\u7EFF\uFF09\u3002
+RUN if bun -e "process.exit(JSON.parse(require('fs').readFileSync('package.json','utf8')).scripts?.build ? 0 : 1)"; then bun run build; else echo "[docker] \u672C\u6A21\u677F\u65E0 build \u811A\u672C\uFF0C\u8DF3\u8FC7\u524D\u7AEF\u6784\u5EFA"; fi
+
+EXPOSE ${DOCKER_SERVE_PORT}
+
+# \u5BB9\u5668\u5185\u5FC5\u987B\u7ED1\u975E\u56DE\u73AF\u624D\u53EF\u8FBE\uFF08serve \u7684 HOST \u73AF\u5883\u53D8\u91CF\u8BED\u4E49\uFF09
+ENV HOST=0.0.0.0 PORT=${DOCKER_SERVE_PORT}
+
+# \u5065\u5EB7\u68C0\u67E5\uFF08\u4E0E compose healthcheck \u540C\u4E00\u4E2A /healthz\uFF09
+# \u63A2\u9488\u7528 bun \u81EA\u8EAB\uFF1Aoven/bun \u57FA\u7840\u955C\u50CF\u4E0D\u5E26\u4EFB\u4F55 HTTP \u5BA2\u6237\u7AEF\u5DE5\u5177\uFF08\u5B9E\u6D4B\u8E29\u8FC7\uFF09\uFF0Cbun \u81EA\u5E26 fetch \u96F6\u5916\u90E8\u4F9D\u8D56\u3002
+HEALTHCHECK --interval=30s --timeout=5s --start-period=5s --retries=3 \\
+  CMD bun -e "await fetch('http://localhost:' + (process.env.PORT ?? '${DOCKER_SERVE_PORT}') + '/healthz').then(r => { if (!r.ok) process.exit(1) })" || exit 1
+
+# \u542F\u52A8 = package.json \u7684 scripts.start\uFF1A\u9759\u6001\u76EE\u5F55\uFF08--static\uFF09/ --schema / --spa \u90FD\u5728\u90A3\u91CC\u5B9A\u6863\uFF0C
+# \u540C\u4E00\u4EF6\u4E8B\u53EA\u7559\u4E00\u4E2A\u771F\u76F8\u6E90\uFF08CMD \u91CC\u518D\u5199\u4E00\u904D\u5C31\u4F1A\u4E0E scripts.start \u6F02\u79FB\u2014\u20142026-10-08 \u6536\u655B\uFF09\u3002
+CMD ["bun", "run", "start"]
+`;
+    COMPOSE_YAML = `# \u4E00\u952E\u8FD0\u884C\uFF1Acp .env.example .env && docker compose up --build
+# \u670D\u52A1 = adep serve\uFF08\u5F00\u53D1\u6001\u5355\u8FDB\u7A0B\uFF1A\u51FD\u6570 + \u9759\u6001 + SQLite + \u6A21\u677F\u53C2\u6570\u6CE8\u5165\uFF09\uFF1B\u751F\u4EA7\u7EA7\u7F16\u6392\u7528 adep export \u81EA\u6258\u7BA1\u5305\u3002
+services:
+  app:
+    build: .
+    container_name: {{name}}-app
+    restart: unless-stopped
+    ports:
+      - "\${APP_PORT:-${DOCKER_SERVE_PORT}}:${DOCKER_SERVE_PORT}"
+    env_file:
+      - .env
+    volumes:
+      # SQLite \u5E93\u4E0E\u672C\u5730\u6001\uFF08.adep/ \u4E0B\uFF09\u6302\u5377\u2014\u2014\u6570\u636E\u6D3B\u5F97\u8FC7\u5BB9\u5668\u91CD\u5EFA
+      - app-data:/app/.adep
+    healthcheck:
+      # bun \u63A2\u9488\uFF08\u955C\u50CF\u5185\u65E0 HTTP \u5BA2\u6237\u7AEF\u5DE5\u5177\uFF1Boven/bun \u81EA\u5E26 fetch\uFF09
+      test: ["CMD", "bun", "-e", "await fetch('http://localhost:${DOCKER_SERVE_PORT}/healthz').then(r => { if (!r.ok) process.exit(1) })"]
+      interval: 30s
+      timeout: 5s
+      retries: 3
+      start_period: 10s
+
+volumes:
+  app-data:
+    driver: local
+`;
+    DOCKERIGNORE = `# \u955C\u50CF\u6784\u5EFA\u6392\u9664\uFF08\u4F9D\u8D56\u5BB9\u5668\u5185\u91CD\u88C5\uFF1B\u672C\u5730\u6001\u4E0E\u5BC6\u94A5\u7EDD\u4E0D\u70E4\u8FDB\u955C\u50CF\u5C42\uFF09
+# \u26A0\uFE0F web/\uFF08\u7AD9\u70B9\uFF09\u3001functions/\u3001database/\u3001data.yml \u662F\u5BB9\u5668\u8FD0\u884C\u65F6\u5FC5\u9700\uFF0C\u522B\u52A0\u8FDB\u672C\u6587\u4EF6
+node_modules/
+.adep/
+site/
+data/
+.env
+.env.local
+.env.*.local
+compose.yaml
+.env.example
+README.md
+preview.gif
+.git/
+.gitignore
+*.log
+.DS_Store
+`;
+    ENV_EXAMPLE = `# adep \u9879\u76EE\u73AF\u5883\u53D8\u91CF\uFF08docker compose \u7528\uFF09
+# \u590D\u5236\u4E3A .env \u540E\u6309\u9700\u4FEE\u6539\uFF1Acp .env.example .env
+
+# \u5BBF\u4E3B\u673A\u6620\u5C04\u7AEF\u53E3\uFF08\u5BB9\u5668\u5185\u56FA\u5B9A ${DOCKER_SERVE_PORT}\uFF09
+APP_PORT=${DOCKER_SERVE_PORT}
+
+# \u5E94\u7528\u81EA\u5B9A\u4E49\u53D8\u91CF\uFF1Aserve \u4F1A\u6CE8\u5165\u51FD\u6570\u8FD0\u884C\u65F6\uFF08ctx.env / process.env\uFF09\uFF0C\u5BB9\u5668\u5185\u53EF\u76F4\u63A5\u88AB\u4E91\u51FD\u6570\u8BFB\u5230\u3002
+# \u82E5\u9879\u76EE\u6839\u6709 data.yml\uFF0C\u5219\u5B83\u58F0\u660E\u7684\u6BCF\u4E2A envKey \u8FD8\u4F1A**\u6CE8\u5165\u9875\u9762**\uFF08window.__ADEP_ENV__.<KEY>\uFF09\u2014\u2014
+# \u952E\u540D\u5FC5\u987B\u4E0E data.yml \u5B8C\u5168\u4E00\u81F4\uFF0C\u672A\u8BBE\u7F6E\u7684\u952E\u4E0D\u6CE8\u5165\uFF08\u9875\u9762\u56DE\u843D\u5185\u7F6E\u9ED8\u8BA4\u503C\uFF09\u3002
+# MY_TITLE=\u6211\u7684\u5E94\u7528
+`;
+    DOCKER_README_SECTION = () => `## \u{1F433} Docker \u4E00\u952E\u8FD0\u884C
+
+\`\`\`bash
+cp .env.example .env      # \u6309\u9700\u6539\u7AEF\u53E3\u7B49
+docker compose up --build # http://localhost:8787
+\`\`\`
+
+\u5BB9\u5668\u5185\u8DD1\u7684\u662F \`adep serve\`\uFF08\u51FD\u6570 /api/{fn} + \u5065\u5EB7\u68C0\u67E5 /healthz + \u9759\u6001\u6258\u7BA1 + SQLite\uFF09\u3002
+\u542F\u52A8\u53C2\u6570\u5728 \`package.json\` \u7684 \`scripts.start\` \u91CC\u5B9A\u6863\uFF08Dockerfile \u7684 \`CMD\` \u53EA\u662F \`bun run start\`\uFF09\uFF0C
+\u8981\u52A0 \`--schema\` / \`--spa\` / \u6362\u9759\u6001\u76EE\u5F55\u6539\u90A3\u4E00\u5904\u5373\u53EF\u3002
+
+\u9879\u76EE\u6839\u6709 \`data.yml\` \u65F6\uFF0C**\u5B83\u58F0\u660E\u7684\u53C2\u6570\u952E\u4F1A\u81EA\u52A8\u6CE8\u5165\u9875\u9762**\uFF08\`window.__ADEP_ENV__\`\uFF09\uFF1Aserve \u8BFB\u540C\u540D
+\u73AF\u5883\u53D8\u91CF\uFF08\`.env\` / compose \u6CE8\u5165\uFF09\uFF0C\u5728\u54CD\u5E94\u671F\u6CE8\u5165 HTML\uFF0C\u4E0E\u5E73\u53F0\u6258\u7BA1\u540C\u4E00\u673A\u5236\u2014\u2014\u6539\u503C\u91CD\u542F\u5373\u751F\u6548\uFF0C
+\u4E14\u4E0D\u4F1A\u6539\u5199\u5DE5\u4F5C\u533A\u91CC\u7684 \`web/index.html\`\u3002\u672A\u8BBE\u7F6E\u7684\u952E\u4E0D\u6CE8\u5165\uFF0C\u9875\u9762\u56DE\u843D\u5185\u7F6E\u9ED8\u8BA4\u503C\uFF1B
+\`data.yml\` \u5B58\u5728\u4F46\u5199\u9519\u4F1A\u8BA9 serve **\u62D2\u7EDD\u542F\u52A8\u5E76\u6253\u5370\u9519\u8BEF\u7801**\uFF08\u4E0D\u9759\u9ED8\u5F53\u300C\u65E0\u53C2\u6570\u300D\uFF09\u3002
+
+\u6570\u636E\u843D\u5728 \`app-data\` \u5377\uFF08\`.adep/\` \u76EE\u5F55\uFF09\uFF0C\`docker compose down\` \u4E0D\u4E22\u3001\`down -v\` \u624D\u6E05\u7A7A\u3002
+\u751F\u4EA7\u7EA7\u81EA\u6258\u7BA1\uFF08\u7F51\u5173 / TLS / \u5355\u5B9E\u4F8B\u5B88\u62A4\uFF09\u7528 \`adep export\` \u5BFC\u51FA\u4E13\u7528\u90E8\u7F72\u5305\u3002
+`;
+    DOCKER_ASSETS = (name) => [
+      { path: "Dockerfile", content: DOCKERFILE },
+      { path: "compose.yaml", content: COMPOSE_YAML.replace("{{name}}", name) },
+      { path: ".dockerignore", content: DOCKERIGNORE },
+      { path: ".env.example", content: ENV_EXAMPLE }
+    ];
     README = (name, template) => `# ${name}
 
 AgentDeploy \u5168\u6808\u9879\u76EE\uFF08\u6A21\u677F\uFF1A${template}\uFF09\u3002
@@ -3783,6 +3906,8 @@ AgentDeploy \u5168\u6808\u9879\u76EE\uFF08\u6A21\u677F\uFF1A${template}\uFF09\u3
 - \`pnpm deploy\`\uFF08= \`adep publish --only functions\`\uFF09\uFF1A\u589E\u91CF\u90E8\u7F72\u4E91\u51FD\u6570\uFF08\u5BF9\u6BD4\u8FDC\u7AEF\u54C8\u5E0C \u2192 \u4EC5\u4E0A\u4F20\u53D8\u66F4 \u2192 \u53D1\u5E03 \u2192 \u8F93\u51FA\u8BBF\u95EE\u57DF\u540D\uFF09
 - \`pnpm doctor\`\uFF08= \`adep doctor\`\uFF09\uFF1A\u672C\u5730\u73AF\u5883\u79BB\u7EBF\u8BCA\u65AD
 
+${DOCKER_README_SECTION()}
+
 ## \u76EE\u5F55\u7ED3\u6784
 
 - \`package.json\`\uFF1A\u5E94\u7528\u5B9A\u4E49\uFF08@adep/cli + \u524D\u7AEF\u4F9D\u8D56\u540C\u6839\u58F0\u660E\uFF1Bvite \u5DE5\u7A0B\u6839\u5728\u9879\u76EE\u6839\u76EE\u5F55\uFF09
@@ -3940,7 +4065,8 @@ export default defineConfig({
       schemaPlaceholder: () => [{ path: "database/schema.sql", content: SCHEMA_SQL }],
       viteConfig: () => [{ path: "vite.config.ts", content: VITE_CONFIG }],
       indexHtml: () => [{ path: "index.html", content: INDEX_HTML }],
-      gitignore: () => [{ path: ".gitignore", content: GITIGNORE }]
+      gitignore: () => [{ path: ".gitignore", content: GITIGNORE }],
+      dockerAssets: (ctx) => DOCKER_ASSETS(ctx.name)
     };
   }
 });
@@ -21960,7 +22086,11 @@ function assertStoragePrefix(prefix) {
   }
   return prefix ?? "";
 }
-var PROJECT_QUOTA_BYTES, StorageError, STORAGE_CODES;
+function isDevSegmentHidden(relPath, prefix) {
+  if (prefix !== void 0 && prefix !== "" && prefix.startsWith(DEV_STORAGE_SEGMENT)) return false;
+  return relPath.startsWith(DEV_STORAGE_SEGMENT);
+}
+var PROJECT_QUOTA_BYTES, StorageError, STORAGE_CODES, DEV_STORAGE_SEGMENT;
 var init_driver = __esm({
   "packages/runtime/src/storage/driver.ts"() {
     "use strict";
@@ -21978,6 +22108,7 @@ var init_driver = __esm({
       notFound: "STORAGE_NOT_FOUND",
       quotaExceeded: "STORAGE_QUOTA_EXCEEDED"
     };
+    DEV_STORAGE_SEGMENT = ".env-dev/";
   }
 });
 
@@ -22453,8 +22584,7 @@ function createLocalStorageDriver(options) {
         await Promise.all(tasks);
       };
       await walk(root, "");
-      metas.sort((a, b) => a.path < b.path ? -1 : a.path > b.path ? 1 : 0);
-      return metas;
+      return metas.filter((meta3) => !isDevSegmentHidden(meta3.path, prefix)).toSorted((a, b) => a.path < b.path ? -1 : a.path > b.path ? 1 : 0);
     },
     async usage(projectId) {
       return totalSize(projectId);
@@ -23450,6 +23580,17 @@ var init_runtime2 = __esm({
       evictAll() {
         this.instances.clear();
       }
+      /**
+       * 先落盘再释放（CORE-079 惰性驱逐）：逐实例 `flush()` 持久化后清空内存驻留，
+       * 类型注册表保留（runtime 对象本身可复用；驱逐方通常直接丢弃整个 runtime）。
+       * 任一实例 flush 抛错则**整体上抛且不清空**——调用方据此放弃驱逐，绝不静默丢未落盘状态。
+       */
+      async dispose() {
+        for (const inst of this.instances.values()) {
+          await this.flush(inst);
+        }
+        this.instances.clear();
+      }
     };
   }
 });
@@ -24108,11 +24249,58 @@ var init_sandbox_fetch = __esm({
   }
 });
 
-// packages/runtime/src/functions/runtime/rpc-key.ts
-var init_rpc_key = __esm({
-  "packages/runtime/src/functions/runtime/rpc-key.ts"() {
+// packages/runtime/src/functions/runtime/flat-rpc-proxy.ts
+function isImplicitProtocolKey(key) {
+  return IMPLICIT_PROTOCOL_KEYS.has(key);
+}
+function createFlatRpcProxy(dispatch) {
+  return new Proxy(
+    {},
+    {
+      get(_target, method) {
+        if (typeof method !== "string") return void 0;
+        if (isImplicitProtocolKey(method)) return Reflect.get(Object.prototype, method);
+        return (...args) => dispatch(method, args);
+      }
+    }
+  );
+}
+var IMPLICIT_PROTOCOL_KEYS;
+var init_flat_rpc_proxy = __esm({
+  "packages/runtime/src/functions/runtime/flat-rpc-proxy.ts"() {
+    "use strict";
+    IMPLICIT_PROTOCOL_KEYS = /* @__PURE__ */ new Set([
+      "then",
+      "catch",
+      "finally",
+      "toJSON",
+      "toString",
+      "valueOf",
+      "constructor",
+      "__proto__",
+      "inspect"
+    ]);
+  }
+});
+
+// packages/runtime/src/functions/runtime/rpc-client.ts
+function isRpcCapability(value) {
+  return typeof value === "object" && value !== null && value[RPC_CAPABILITY_KEY] === true;
+}
+function createRpcClient(capability, port, pending, nextId) {
+  return createFlatRpcProxy((method, args) => {
+    const id = nextId();
+    return new Promise((resolve18, reject) => {
+      pending.set(id, { resolve: resolve18, reject });
+      port.postMessage({ type: "rpc", id, capability, method, args });
+    });
+  });
+}
+var init_rpc_client = __esm({
+  "packages/runtime/src/functions/runtime/rpc-client.ts"() {
     "use strict";
     init_capability_keys();
+    init_flat_rpc_proxy();
   }
 });
 
@@ -24226,26 +24414,6 @@ var init_regexp = __esm({
 import { parentPort, workerData } from "node:worker_threads";
 import { createRequire } from "node:module";
 import { join as join13 } from "node:path";
-function isRpcCapability(value) {
-  return typeof value === "object" && value !== null && value[RPC_CAPABILITY_KEY] === true;
-}
-function createRpcClient(capability, port, pending, nextId) {
-  return new Proxy(
-    {},
-    {
-      get(_target, method) {
-        if (typeof method !== "string") return void 0;
-        return (...args) => {
-          const id = nextId();
-          return new Promise((resolve18, reject) => {
-            pending.set(id, { resolve: resolve18, reject });
-            port.postMessage({ type: "rpc", id, capability, method, args });
-          });
-        };
-      }
-    }
-  );
-}
 function errorMessageOf2(error51) {
   if (error51 instanceof Error) return error51.message;
   if (typeof error51 === "object" && error51 !== null && "message" in error51) {
@@ -24413,7 +24581,7 @@ var init_worker_entry = __esm({
     init_cloud_container();
     init_sandbox();
     init_sandbox_fetch();
-    init_rpc_key();
+    init_rpc_client();
     init_rpc_wire();
     init_chain();
     init_sandbox();
@@ -25789,6 +25957,203 @@ var init_banner = __esm({
   }
 });
 
+// shared/sdk/template-params.ts
+function extractTemplateFields(root) {
+  if (root === null || typeof root !== "object") {
+    throw new TemplateParamsParseError("TPL_YAML_SHAPE", "data.yml \u6839\u8282\u70B9\u5FC5\u987B\u662F\u5BF9\u8C61");
+  }
+  const additional = root["additionalProperties"];
+  if (additional === null || typeof additional !== "object") {
+    throw new TemplateParamsParseError(
+      "TPL_YAML_SHAPE",
+      "data.yml \u7F3A\u5C11 additionalProperties \u8282\uFF08\u53C2\u8003 adep \u6A21\u677F\u89C4\u8303\uFF09"
+    );
+  }
+  const rawFields = additional["formFields"];
+  if (!Array.isArray(rawFields)) {
+    throw new TemplateParamsParseError(
+      "TPL_YAML_SHAPE",
+      "data.yml \u7684 additionalProperties.formFields \u5FC5\u987B\u662F\u6570\u7EC4"
+    );
+  }
+  if (rawFields.length === 0) {
+    throw new TemplateParamsParseError(
+      "TPL_YAML_SHAPE",
+      "formFields \u4E0D\u80FD\u4E3A\u7A7A\uFF08\u65E0\u53C2\u6570\u8BF7\u5220\u9664 data.yml\uFF09"
+    );
+  }
+  if (rawFields.length > TEMPLATE_MAX_FIELDS) {
+    throw new TemplateParamsParseError(
+      "TPL_YAML_SHAPE",
+      `\u8868\u5355\u5B57\u6BB5\u8FC7\u591A\uFF08>${TEMPLATE_MAX_FIELDS}\uFF09`
+    );
+  }
+  const seenKeys = /* @__PURE__ */ new Set();
+  const fields = [];
+  for (const rawItem of rawFields) {
+    if (rawItem === null || typeof rawItem !== "object") {
+      throw new TemplateParamsParseError("TPL_YAML_SHAPE", "formFields \u7684\u6BCF\u4E00\u9879\u5FC5\u987B\u662F\u5BF9\u8C61");
+    }
+    const envKey = typeof rawItem.envKey === "string" ? rawItem.envKey.trim() : "";
+    if (!TEMPLATE_ENV_KEY_RE.test(envKey) || envKey.length > TEMPLATE_ENV_KEY_MAX) {
+      throw new TemplateParamsParseError(
+        "TPL_YAML_ENVKEY",
+        `\u5B57\u6BB5 envKey \u975E\u6CD5\uFF08\u987B\u5B57\u6BCD/\u4E0B\u5212\u7EBF\u5F00\u5934\uFF0C\u2264128 \u5B57\u7B26\uFF09\uFF1A${JSON.stringify(rawItem.envKey)}`
+      );
+    }
+    if (seenKeys.has(envKey)) {
+      throw new TemplateParamsParseError("TPL_YAML_ENVKEY", `envKey \u91CD\u590D\uFF1A${envKey}`);
+    }
+    seenKeys.add(envKey);
+    const label = typeof rawItem.label === "string" && rawItem.label.trim() !== "" ? rawItem.label.trim() : envKey;
+    const type = typeof rawItem.type === "string" ? rawItem.type : "text";
+    if (!TEMPLATE_FIELD_TYPES.includes(type)) {
+      throw new TemplateParamsParseError(
+        "TPL_YAML_TYPE",
+        `\u5B57\u6BB5 ${envKey} \u7684 type \u975E\u6CD5\uFF1A${JSON.stringify(rawItem.type)}\uFF08\u53EF\u9009\uFF1A${TEMPLATE_FIELD_TYPES.join("/")}`
+      );
+    }
+    const required2 = rawItem.required === true;
+    let defaultValue = null;
+    if (rawItem.default !== void 0 && rawItem.default !== null) {
+      if (typeof rawItem.default === "string") defaultValue = rawItem.default;
+      else if (typeof rawItem.default === "number" || typeof rawItem.default === "boolean") {
+        defaultValue = String(rawItem.default);
+      } else {
+        throw new TemplateParamsParseError(
+          "TPL_YAML_DEFAULT",
+          `\u5B57\u6BB5 ${envKey} \u7684 default \u5FC5\u987B\u662F\u6807\u91CF`
+        );
+      }
+    }
+    let options = [];
+    if (type === "select") {
+      if (!Array.isArray(rawItem.options) || rawItem.options.length === 0) {
+        throw new TemplateParamsParseError(
+          "TPL_YAML_OPTIONS",
+          `\u5B57\u6BB5 ${envKey} \u662F select \u7C7B\u578B\uFF0C\u5FC5\u987B\u63D0\u4F9B\u975E\u7A7A options \u6570\u7EC4`
+        );
+      }
+      options = rawItem.options.map((o, i) => {
+        if (typeof o !== "string" || o.trim() === "") {
+          throw new TemplateParamsParseError(
+            "TPL_YAML_OPTIONS",
+            `\u5B57\u6BB5 ${envKey} \u7684 options[${i}] \u5FC5\u987B\u662F\u975E\u7A7A\u5B57\u7B26\u4E32`
+          );
+        }
+        return o.trim();
+      });
+      if (defaultValue !== null && !options.includes(defaultValue)) {
+        throw new TemplateParamsParseError(
+          "TPL_YAML_OPTIONS",
+          `\u5B57\u6BB5 ${envKey} \u7684 default \u4E0D\u5728 options \u91CC`
+        );
+      }
+    }
+    fields.push({ envKey, label, type, required: required2, defaultValue, options });
+  }
+  return fields;
+}
+function resolveTemplateEnvValues(fields, env) {
+  const out = {};
+  for (const field of fields) {
+    const value = env[field.envKey];
+    if (value === void 0 || value === "") continue;
+    out[field.envKey] = value;
+  }
+  return out;
+}
+var TEMPLATE_FIELD_TYPES, TEMPLATE_MAX_FIELDS, TEMPLATE_ENV_KEY_RE, TEMPLATE_ENV_KEY_MAX, TemplateParamsParseError;
+var init_template_params = __esm({
+  "shared/sdk/template-params.ts"() {
+    "use strict";
+    TEMPLATE_FIELD_TYPES = ["text", "password", "number", "select", "boolean"];
+    TEMPLATE_MAX_FIELDS = 50;
+    TEMPLATE_ENV_KEY_RE = /^[A-Za-z_][A-Za-z0-9_]*$/;
+    TEMPLATE_ENV_KEY_MAX = 128;
+    TemplateParamsParseError = class extends Error {
+      code;
+      constructor(code, message) {
+        super(message);
+        this.name = "TemplateParamsParseError";
+        this.code = code;
+      }
+    };
+  }
+});
+
+// packages/cli/src/serve/template-params.ts
+import { readFile as readFile15 } from "node:fs/promises";
+import { join as join19 } from "node:path";
+import { parse as parse3 } from "yaml";
+function mergeTemplateEnvSource(source) {
+  return { ...source.processEnv, ...source.dotenv, ...source.dotenvLocal };
+}
+async function loadTemplateFields(cwd) {
+  let text;
+  try {
+    text = await readFile15(join19(cwd, TEMPLATE_PARAMS_FILE), "utf8");
+  } catch {
+    return null;
+  }
+  let root;
+  try {
+    root = parse3(text);
+  } catch (error51) {
+    throw new TemplateParamsParseError(
+      "TPL_YAML_SYNTAX",
+      `${TEMPLATE_PARAMS_FILE} \u4E0D\u662F\u5408\u6CD5 YAML\uFF1A${error51 instanceof Error ? error51.message : "\u672A\u77E5\u9519\u8BEF"}`
+    );
+  }
+  return extractTemplateFields(root);
+}
+async function readDotenvFile(cwd, name) {
+  const text = await readFile15(join19(cwd, name), "utf8").catch(() => "");
+  if (text === "") return {};
+  return parseEnvFile(text);
+}
+async function resolveServeTemplateEnv(options) {
+  const fields = await loadTemplateFields(options.cwd);
+  if (fields === null) return null;
+  return {
+    envKeys: fields.map((f) => f.envKey),
+    // 每次调用重算：`.env` 改动（重启）与 `.env.local` 改动（`--watch` 重载）都能立刻反映，
+    // 与平台「改值刷新即生效」同一体验。字段数 ≤50，白名单过滤的开销可忽略。
+    values: () => resolveTemplateEnvValues(fields, mergeTemplateEnvSource(options.source()))
+  };
+}
+var TEMPLATE_PARAMS_FILE;
+var init_template_params2 = __esm({
+  "packages/cli/src/serve/template-params.ts"() {
+    "use strict";
+    init_dev();
+    init_template_params();
+    TEMPLATE_PARAMS_FILE = "data.yml";
+  }
+});
+
+// shared/sdk/adep-env-inject.ts
+function escapeJsonForScript(json2) {
+  return json2.replace(/</g, "\\u003c").replace(/>/g, "\\u003e").replace(/&/g, "\\u0026");
+}
+function injectAdepEnv(html, env) {
+  const payload = escapeJsonForScript(JSON.stringify(env));
+  const tag = `<script>window.__ADEP_ENV__=${payload};</script>`;
+  const idx = html.search(/<head[^>]*>/i);
+  if (idx === -1) return html;
+  const after = html.indexOf(">", idx);
+  if (after === -1) return html;
+  return `${html.slice(0, after + 1)}${tag}${html.slice(after + 1)}`;
+}
+function isHtmlContentType(contentType) {
+  return contentType.toLowerCase().startsWith("text/html");
+}
+var init_adep_env_inject = __esm({
+  "shared/sdk/adep-env-inject.ts"() {
+    "use strict";
+  }
+});
+
 // packages/cli/src/serve/server.ts
 var server_exports = {};
 __export(server_exports, {
@@ -25798,8 +26163,8 @@ __export(server_exports, {
 });
 import { createServer as createServer2 } from "node:http";
 import { watch as watch2 } from "node:fs";
-import { mkdir as mkdir12, readFile as readFile15, stat as stat11 } from "node:fs/promises";
-import { extname, join as join19, relative as relative4, resolve as resolve11 } from "node:path";
+import { mkdir as mkdir12, readFile as readFile16, stat as stat11 } from "node:fs/promises";
+import { extname, join as join20, relative as relative4, resolve as resolve11 } from "node:path";
 function envNumber(name) {
   const raw = process.env[name];
   if (raw === void 0 || raw.trim() === "") return void 0;
@@ -25832,7 +26197,7 @@ async function startServeServer(options) {
     ...options.dbFile === void 0 ? {} : { dbFile: options.dbFile }
   });
   const config2 = await loadConfig(cwd);
-  const functionsDir = join19(cwd, config2.functionsDir);
+  const functionsDir = join20(cwd, config2.functionsDir);
   const bearerUser = bearerUserResolverFromEnv();
   let hasStatic = false;
   try {
@@ -25844,9 +26209,27 @@ async function startServeServer(options) {
   const loadFunctionFiles = async () => mergeSharedIntoFunctions(await collectFunctions(functionsDir));
   let files = await loadFunctionFiles();
   let functionNames = listFunctionNames(files);
-  const envText = await readFile15(join19(cwd, ".env.local"), "utf8").catch(() => "");
+  const envText = await readFile16(join20(cwd, ".env.local"), "utf8").catch(() => "");
   let env = parseEnvFile(envText);
   let simEnv = await loadSimEnv(cwd).catch(() => ({}));
+  const dotenvFile = await readDotenvFile(cwd, ".env");
+  let templateEnv;
+  try {
+    templateEnv = await resolveServeTemplateEnv({
+      cwd,
+      // 传 getter 而非快照：`env` 在本作用域是 `let`（`--watch` 会重新赋值为新解析的
+      // .env.local），快照会让「改 .env.local 立即生效」落空。
+      source: () => ({ processEnv: process.env, dotenv: dotenvFile, dotenvLocal: env })
+    });
+  } catch (error51) {
+    if (error51 instanceof TemplateParamsParseError) {
+      throw new Error(
+        `[serve] ${TEMPLATE_PARAMS_FILE} \u89E3\u6790\u5931\u8D25\uFF08${error51.code}\uFF09\uFF1A${error51.message}`,
+        { cause: error51 }
+      );
+    }
+    throw error51;
+  }
   const db = await openLocalDbDriver(dbTarget, { cwd, tag: "serve", log });
   const dbMode = db.mode;
   const sqliteFile = db.file;
@@ -25877,7 +26260,7 @@ async function startServeServer(options) {
     const reload = async () => {
       const [nextFiles, envLocalText] = await Promise.all([
         loadFunctionFiles(),
-        readFile15(join19(cwd, ".env.local"), "utf8").catch(() => "")
+        readFile16(join20(cwd, ".env.local"), "utf8").catch(() => "")
       ]);
       files = nextFiles;
       env = parseEnvFile(envLocalText);
@@ -25929,39 +26312,51 @@ async function startServeServer(options) {
       ...hasEnv ? { env: mergedEnv } : {}
     };
   };
+  const sendStaticFile = (res, filePath, content) => {
+    const contentType = contentTypeFor(filePath);
+    if (templateEnv !== null && isHtmlContentType(contentType)) {
+      const values = templateEnv.values();
+      if (Object.keys(values).length > 0) {
+        const injected = injectAdepEnv(content.toString("utf8"), values);
+        res.writeHead(200, {
+          "content-type": contentType,
+          "content-length": String(Buffer.byteLength(injected, "utf8"))
+        });
+        res.end(injected);
+        return;
+      }
+    }
+    res.writeHead(200, { "content-type": contentType });
+    res.end(content);
+  };
   const serveStatic = async (pathname, res) => {
     if (!hasStatic) return false;
     const safePath = pathname.replace(/\.\.\//g, "").replace(/^\//, "");
-    const filePath = join19(staticDir, safePath);
-    const resolvedPath = safePath === "" || safePath === "/" ? join19(filePath, "index.html") : filePath;
+    const filePath = join20(staticDir, safePath);
+    const resolvedPath = safePath === "" || safePath === "/" ? join20(filePath, "index.html") : filePath;
     try {
       const fileStat = await stat11(resolvedPath);
       if (fileStat.isDirectory()) {
-        const indexPath = join19(resolvedPath, "index.html");
+        const indexPath = join20(resolvedPath, "index.html");
         try {
           const indexStat = await stat11(indexPath);
           if (indexStat.isFile()) {
-            const content2 = await readFile15(indexPath);
-            res.writeHead(200, { "content-type": contentTypeFor(indexPath) });
-            res.end(content2);
+            sendStaticFile(res, indexPath, await readFile16(indexPath));
             return true;
           }
         } catch {
         }
         return false;
       }
-      const content = await readFile15(resolvedPath);
-      res.writeHead(200, { "content-type": contentTypeFor(resolvedPath) });
-      res.end(content);
+      sendStaticFile(res, resolvedPath, await readFile16(resolvedPath));
       return true;
     } catch {
       if (options.spaFallback === true) {
         const ext = extname(pathname);
         if (ext === "" || ext === ".html") {
           try {
-            const indexContent = await readFile15(join19(staticDir, "index.html"));
-            res.writeHead(200, { "content-type": "text/html; charset=utf-8" });
-            res.end(indexContent);
+            const indexContent = await readFile16(join20(staticDir, "index.html"));
+            sendStaticFile(res, join20(staticDir, "index.html"), indexContent);
             return true;
           } catch {
           }
@@ -26149,6 +26544,12 @@ async function startServeServer(options) {
     ...sqliteModule === null ? {} : { dbDriver: sqliteModule }
   });
   log(banner);
+  if (templateEnv !== null) {
+    const currentKeys = Object.keys(templateEnv.values());
+    log(
+      `[serve] \u6A21\u677F\u53C2\u6570\u6CE8\u5165\u5DF2\u542F\u7528\uFF08${TEMPLATE_PARAMS_FILE} \u58F0\u660E ${templateEnv.envKeys.join(", ")}\uFF09\uFF1B\u5F53\u524D\u6709\u503C\u7684\u952E\uFF1A${currentKeys.length > 0 ? currentKeys.join(", ") : "\uFF08\u65E0\u2014\u2014\u9875\u9762\u5C06\u56DE\u843D\u5185\u7F6E\u9ED8\u8BA4\u503C\uFF09"}`
+    );
+  }
   if (options.watch === true) {
     log(`[serve] \u70ED\u91CD\u8F7D\u5DF2\u5F00\u542F\uFF1A\u6539 functions/ \u4E0E .env* \u5373\u751F\u6548\uFF0C\u51FD\u6570 console \u8F93\u51FA\u76F4\u8FBE\u7EC8\u7AEF\uFF08--watch\uFF09`);
   }
@@ -26186,6 +26587,9 @@ var init_server = __esm({
     init_invoke();
     init_dev();
     init_banner();
+    init_template_params2();
+    init_adep_env_inject();
+    init_template_params();
     init_db_mode();
     init_dev_shared();
     MIME_TYPES = {
@@ -26221,8 +26625,8 @@ __export(deploy_exports, {
   deploy: () => deploy
 });
 import { createHash as createHash4 } from "node:crypto";
-import { readdir as readdir7, readFile as readFile16 } from "node:fs/promises";
-import { join as join20, resolve as resolve12, basename as basename4, relative as relative5, sep } from "node:path";
+import { readdir as readdir7, readFile as readFile17 } from "node:fs/promises";
+import { join as join21, resolve as resolve12, basename as basename4, relative as relative5, sep } from "node:path";
 function functionUrlBase(prefix) {
   const raw = (prefix ?? "/api").trim();
   const normalized = raw === "/" ? "/" : raw.replace(/\/+$/, "");
@@ -26248,10 +26652,10 @@ async function collectFunctionFiles(functionsDir) {
   if (conflicting.length > 0) throw new AmbiguousFunctionError(functionsDir, conflicting);
   const out = {};
   for (const name of flatNames) {
-    out[name] = { [`${name}.ts`]: await readFile16(join20(functionsDir, `${name}.ts`), "utf8") };
+    out[name] = { [`${name}.ts`]: await readFile17(join21(functionsDir, `${name}.ts`), "utf8") };
   }
   for (const name of dirNames) {
-    const files = await collectFunctionDir(join20(functionsDir, name));
+    const files = await collectFunctionDir(join21(functionsDir, name));
     if (files["index.ts"] === void 0) continue;
     out[name] = files;
   }
@@ -26270,11 +26674,11 @@ async function collectFunctionDir(absDir) {
       const rel = prefix === "" ? entry.name : `${prefix}/${entry.name}`;
       if (entry.isDirectory()) {
         if (entry.name === "__tests__" || IGNORED_DIRS.has(entry.name)) continue;
-        await walk(join20(dir, entry.name), rel);
+        await walk(join21(dir, entry.name), rel);
         continue;
       }
       if (!isRuntimeSource2(entry.name)) continue;
-      files[rel] = await readFile16(join20(dir, entry.name), "utf8");
+      files[rel] = await readFile17(join21(dir, entry.name), "utf8");
     }
   };
   await walk(absDir, "");
@@ -26284,7 +26688,7 @@ function sha256Hex(content) {
   return createHash4("sha256").update(content).digest("hex");
 }
 async function collectShared(functionsDir) {
-  const sharedDir = join20(functionsDir, FUNCTION_SHARED_DIR);
+  const sharedDir = join21(functionsDir, FUNCTION_SHARED_DIR);
   const files = {};
   const walk = async (dir) => {
     let entries;
@@ -26296,13 +26700,13 @@ async function collectShared(functionsDir) {
     for (const entry of entries) {
       if (entry.isDirectory()) {
         if (entry.name === "__tests__" || entry.name === "node_modules") continue;
-        await walk(join20(dir, entry.name));
+        await walk(join21(dir, entry.name));
         continue;
       }
       if (!isRuntimeSource2(entry.name)) continue;
-      const full = join20(dir, entry.name);
+      const full = join21(dir, entry.name);
       const rel = relative5(sharedDir, full).split(sep).join("/");
-      files[`${SHARED_SOURCE_ROOT}${rel}`] = await readFile16(full, "utf8");
+      files[`${SHARED_SOURCE_ROOT}${rel}`] = await readFile17(full, "utf8");
     }
   };
   await walk(sharedDir);
@@ -26314,7 +26718,7 @@ async function deploy(paths, options) {
   const cwd = resolve12(options.cwd);
   const config2 = await loadConfig(cwd);
   const slug = options.slug ?? config2.name;
-  const functionsDir = options.functionsDir === void 0 ? join20(cwd, config2.functionsDir) : resolve12(cwd, options.functionsDir);
+  const functionsDir = options.functionsDir === void 0 ? join21(cwd, config2.functionsDir) : resolve12(cwd, options.functionsDir);
   const local = await collectFunctionFiles(functionsDir);
   if (Object.keys(local).length === 0) {
     throw new CliError("NO_FUNCTIONS", `${functionsDir} \u4E0B\u6CA1\u6709\u51FD\u6570\u6587\u4EF6`);
@@ -26452,8 +26856,8 @@ var frontend_exports = {};
 __export(frontend_exports, {
   frontendSync: () => frontendSync
 });
-import { readdir as readdir8, readFile as readFile17, stat as stat12 } from "node:fs/promises";
-import { join as join21, relative as relative6, sep as sep2 } from "node:path";
+import { readdir as readdir8, readFile as readFile18, stat as stat12 } from "node:fs/promises";
+import { join as join22, relative as relative6, sep as sep2 } from "node:path";
 async function collectFiles(root, dir) {
   const files = /* @__PURE__ */ new Map();
   const skipped = [];
@@ -26461,13 +26865,13 @@ async function collectFiles(root, dir) {
   for (const entry of entries) {
     if (entry.isDirectory()) {
       if (IGNORED_DIRS2.has(entry.name)) continue;
-      const nested = await collectFiles(root, join21(dir, entry.name));
+      const nested = await collectFiles(root, join22(dir, entry.name));
       for (const [path, content] of nested.files) files.set(path, content);
       skipped.push(...nested.skipped);
       continue;
     }
     if (IGNORED_FILES.has(entry.name)) continue;
-    const full = join21(dir, entry.name);
+    const full = join22(dir, entry.name);
     const rel = relative6(root, full).split(sep2).join("/");
     const info = await stat12(full);
     if (info.size > 1024 * 1024) {
@@ -26475,7 +26879,7 @@ async function collectFiles(root, dir) {
       continue;
     }
     try {
-      const content = await readFile17(full, "utf8");
+      const content = await readFile18(full, "utf8");
       if (content.includes("\0")) {
         skipped.push(rel);
         continue;
@@ -26490,7 +26894,7 @@ async function collectFiles(root, dir) {
 async function frontendSync(paths, options) {
   const log = options.silent === true ? () => void 0 : options.log ?? ((line) => process.stdout.write(`${line}
 `));
-  const webDir = options.dir ?? join21(options.cwd, "web");
+  const webDir = options.dir ?? join22(options.cwd, "web");
   const rootStat = await stat12(webDir).catch(() => null);
   if (rootStat === null || !rootStat.isDirectory()) {
     throw new CliError(
@@ -26564,11 +26968,11 @@ var fs_exports = {};
 __export(fs_exports, {
   createExportFileSystem: () => createExportFileSystem
 });
-import { mkdir as mkdir13, readFile as readFile18, rm as rm5, stat as stat14, writeFile as writeFile11 } from "node:fs/promises";
-import { dirname as dirname13, join as join23 } from "node:path";
+import { mkdir as mkdir13, readFile as readFile19, rm as rm5, stat as stat14, writeFile as writeFile11 } from "node:fs/promises";
+import { dirname as dirname13, join as join24 } from "node:path";
 function createExportFileSystem() {
   return {
-    readFile: (path) => readFile18(path),
+    readFile: (path) => readFile19(path),
     writeFile: (path, content) => writeFile11(path, content),
     // 同时用于清理解压临时目录（${zip}.tmp 是个目录）——递归强制删除，缺失不报错。
     deleteFile: async (path) => {
@@ -26586,9 +26990,9 @@ function createExportFileSystem() {
       await mkdir13(path, { recursive: true });
     },
     unzip: async (zipPath, targetDir) => {
-      const entries = zipRead(await readFile18(zipPath));
+      const entries = zipRead(await readFile19(zipPath));
       for (const [name, data] of entries) {
-        const dest = join23(targetDir, name);
+        const dest = join24(targetDir, name);
         await mkdir13(dirname13(dest), { recursive: true });
         await writeFile11(dest, data);
       }
@@ -26842,8 +27246,8 @@ __export(storage_exports, {
   storageRemove: () => storageRemove,
   storageUpload: () => storageUpload
 });
-import { mkdir as mkdir14, readFile as readFile19, stat as stat15, writeFile as writeFile12 } from "node:fs/promises";
-import { basename as basename5, dirname as dirname14, extname as extname2, join as join24, resolve as resolve14 } from "node:path";
+import { mkdir as mkdir14, readFile as readFile20, stat as stat15, writeFile as writeFile12 } from "node:fs/promises";
+import { basename as basename5, dirname as dirname14, extname as extname2, join as join25, resolve as resolve14 } from "node:path";
 async function open3(paths, options) {
   const client = await createClient(paths);
   const project2 = await resolveSlug(resolve14(options.cwd), options.slug);
@@ -26885,7 +27289,7 @@ async function storageUpload(paths, options) {
     throw new CliError("FILE_NOT_FOUND", `\u672C\u5730\u6587\u4EF6\u4E0D\u5B58\u5728\uFF1A${local}`);
   }
   const visibility = options.visibility ?? "private";
-  const bytes = await readFile19(local);
+  const bytes = await readFile20(local);
   const form = new FormData();
   form.set("path", options.path);
   form.set("visibility", visibility);
@@ -26926,7 +27330,7 @@ async function storageDownload(paths, options) {
   const url2 = await resolveDownloadUrl(client, project2, options.path);
   const response = await client.download(url2, "STORAGE_DOWNLOAD_FAILED");
   const bytes = Buffer.from(await response.arrayBuffer());
-  const output = resolve14(options.output ?? join24(resolve14(options.cwd), basename5(options.path)));
+  const output = resolve14(options.output ?? join25(resolve14(options.cwd), basename5(options.path)));
   await mkdir14(dirname14(output), { recursive: true });
   await writeFile12(output, bytes);
   return { path: options.path, output, size: bytes.length };
@@ -26947,8 +27351,8 @@ var init_storage2 = __esm({
 });
 
 // packages/cli/src/sandbox-scan.ts
-import { readdir as readdir9, readFile as readFile20 } from "node:fs/promises";
-import { join as join25, relative as relative7, sep as sep3 } from "node:path";
+import { readdir as readdir9, readFile as readFile21 } from "node:fs/promises";
+import { join as join26, relative as relative7, sep as sep3 } from "node:path";
 function extractSpecifiers(line) {
   const out = [];
   const patterns = [
@@ -26992,7 +27396,7 @@ function classify(specifier) {
   return null;
 }
 async function scanFunctionSources(rootDir, functionsDir) {
-  const base = join25(rootDir, functionsDir);
+  const base = join26(rootDir, functionsDir);
   const findings = [];
   async function walk(current) {
     let entries;
@@ -27002,7 +27406,7 @@ async function scanFunctionSources(rootDir, functionsDir) {
       return;
     }
     for (const entry of entries) {
-      const abs = join25(current, entry.name);
+      const abs = join26(current, entry.name);
       if (entry.isDirectory()) {
         if (SKIP_DIRS.has(entry.name)) continue;
         await walk(abs);
@@ -27013,7 +27417,7 @@ async function scanFunctionSources(rootDir, functionsDir) {
       if (entry.name.endsWith(".d.ts")) continue;
       let content;
       try {
-        content = await readFile20(abs, "utf8");
+        content = await readFile21(abs, "utf8");
       } catch {
         continue;
       }
@@ -27623,8 +28027,8 @@ __export(hosting_exports, {
   hostingInfo: () => hostingInfo,
   hostingPull: () => hostingPull
 });
-import { readdir as readdir10, readFile as readFile21, stat as stat17 } from "node:fs/promises";
-import { dirname as dirname15, join as join26, relative as relative8, resolve as resolve17, sep as sep4 } from "node:path";
+import { readdir as readdir10, readFile as readFile22, stat as stat17 } from "node:fs/promises";
+import { dirname as dirname15, join as join27, relative as relative8, resolve as resolve17, sep as sep4 } from "node:path";
 async function open4(paths, options) {
   const client = await createClient(paths);
   const project2 = await resolveSlug(resolve17(options.cwd), options.slug);
@@ -27650,7 +28054,7 @@ async function collectSiteFiles(dir) {
       return;
     }
     for (const entry of entries) {
-      const full = join26(sub, entry.name);
+      const full = join27(sub, entry.name);
       if (entry.isDirectory()) {
         await walk(full);
       } else if (entry.isFile()) {
@@ -27674,7 +28078,7 @@ async function hostingDeploy(paths, options) {
   for (const [rel, full] of files) {
     log(`[adep] \u4E0A\u4F20 site/${rel}`);
     const info2 = await stat17(full);
-    const bytes = await readFile21(full);
+    const bytes = await readFile22(full);
     const form = new FormData();
     form.set("path", `site/${rel}`);
     form.set("visibility", "public");
@@ -27712,7 +28116,7 @@ async function hostingPull(paths, options) {
     const response = await client.download(url2, "HOSTING_DOWNLOAD_FAILED");
     const bytes = Buffer.from(await response.arrayBuffer());
     const rel = entry.path.replace(/^site\//, "");
-    const target = join26(outputDir, ...rel.split("/"));
+    const target = join27(outputDir, ...rel.split("/"));
     await mkdir15(dirname15(target), { recursive: true });
     await writeFile13(target, bytes);
     files.push({ path: entry.path, size: bytes.length });
@@ -29427,7 +29831,7 @@ init_auth();
 init_client();
 init_deploy();
 import { stat as stat13 } from "node:fs/promises";
-import { join as join22, resolve as resolve13 } from "node:path";
+import { join as join23, resolve as resolve13 } from "node:path";
 async function resolveProjectId2(client, cwd, slug) {
   const resolvedSlug = await resolveSlug(resolve13(cwd), slug);
   const listed = await client.request("/api/v1/projects", {}, "PROJECT_LIST_FAILED");
@@ -29495,7 +29899,7 @@ async function runPublish(paths, io, cwd, flags) {
     });
   }
   if (wantFrontend) {
-    const webDir = join22(cwd, "web");
+    const webDir = join23(cwd, "web");
     const webStat = await stat13(webDir).catch(() => null);
     if (webStat !== null && webStat.isDirectory()) {
       const { frontendSync: frontendSync2 } = await Promise.resolve().then(() => (init_frontend(), frontend_exports));

package/dist/vite.js

@@ -2006,6 +2006,11 @@ function assertStoragePrefix(prefix) {
   }
   return prefix ?? "";
 }
+var DEV_STORAGE_SEGMENT = ".env-dev/";
+function isDevSegmentHidden(relPath, prefix) {
+  if (prefix !== void 0 && prefix !== "" && prefix.startsWith(DEV_STORAGE_SEGMENT)) return false;
+  return relPath.startsWith(DEV_STORAGE_SEGMENT);
+}
 
 // packages/runtime/src/storage/hmac-sha256.ts
 var K = new Uint32Array([
@@ -2434,8 +2439,7 @@ function createLocalStorageDriver(options) {
         await Promise.all(tasks);
       };
       await walk(root, "");
-      metas.sort((a, b) => a.path < b.path ? -1 : a.path > b.path ? 1 : 0);
-      return metas;
+      return metas.filter((meta) => !isDevSegmentHidden(meta.path, prefix)).toSorted((a, b) => a.path < b.path ? -1 : a.path > b.path ? 1 : 0);
     },
     async usage(projectId) {
       return totalSize(projectId);
@@ -3416,6 +3420,17 @@ var StateObjectRuntime = class {
   evictAll() {
     this.instances.clear();
   }
+  /**
+   * 先落盘再释放（CORE-079 惰性驱逐）：逐实例 `flush()` 持久化后清空内存驻留，
+   * 类型注册表保留（runtime 对象本身可复用；驱逐方通常直接丢弃整个 runtime）。
+   * 任一实例 flush 抛错则**整体上抛且不清空**——调用方据此放弃驱逐，绝不静默丢未落盘状态。
+   */
+  async dispose() {
+    for (const inst of this.instances.values()) {
+      await this.flush(inst);
+    }
+    this.instances.clear();
+  }
 };
 
 // packages/runtime/src/state-objects/backend.ts
@@ -4017,6 +4032,48 @@ function createSandboxFetch(options) {
   };
 }
 
+// packages/runtime/src/functions/runtime/flat-rpc-proxy.ts
+var IMPLICIT_PROTOCOL_KEYS = /* @__PURE__ */ new Set([
+  "then",
+  "catch",
+  "finally",
+  "toJSON",
+  "toString",
+  "valueOf",
+  "constructor",
+  "__proto__",
+  "inspect"
+]);
+function isImplicitProtocolKey(key) {
+  return IMPLICIT_PROTOCOL_KEYS.has(key);
+}
+function createFlatRpcProxy(dispatch) {
+  return new Proxy(
+    {},
+    {
+      get(_target, method) {
+        if (typeof method !== "string") return void 0;
+        if (isImplicitProtocolKey(method)) return Reflect.get(Object.prototype, method);
+        return (...args) => dispatch(method, args);
+      }
+    }
+  );
+}
+
+// packages/runtime/src/functions/runtime/rpc-client.ts
+function isRpcCapability(value) {
+  return typeof value === "object" && value !== null && value[RPC_CAPABILITY_KEY] === true;
+}
+function createRpcClient(capability, port, pending, nextId) {
+  return createFlatRpcProxy((method, args) => {
+    const id = nextId();
+    return new Promise((resolve5, reject) => {
+      pending.set(id, { resolve: resolve5, reject });
+      port.postMessage({ type: "rpc", id, capability, method, args });
+    });
+  });
+}
+
 // packages/runtime/src/functions/runtime/rpc-wire.ts
 function wireRpcResponses(port, pending) {
   port.on?.((message) => {
@@ -4107,26 +4164,6 @@ function escapeRegExp(text) {
 }
 
 // packages/runtime/src/functions/runtime/worker-entry.ts
-function isRpcCapability(value) {
-  return typeof value === "object" && value !== null && value[RPC_CAPABILITY_KEY] === true;
-}
-function createRpcClient(capability, port, pending, nextId) {
-  return new Proxy(
-    {},
-    {
-      get(_target, method) {
-        if (typeof method !== "string") return void 0;
-        return (...args) => {
-          const id = nextId();
-          return new Promise((resolve5, reject) => {
-            pending.set(id, { resolve: resolve5, reject });
-            port.postMessage({ type: "rpc", id, capability, method, args });
-          });
-        };
-      }
-    }
-  );
-}
 function errorMessageOf2(error) {
   if (error instanceof Error) return error.message;
   if (typeof error === "object" && error !== null && "message" in error) {

package/dist/worker-entry.js

@@ -434,6 +434,48 @@ var DB_RPC = {
   chain: "chain"
 };
 
+// packages/runtime/src/functions/runtime/flat-rpc-proxy.ts
+var IMPLICIT_PROTOCOL_KEYS = /* @__PURE__ */ new Set([
+  "then",
+  "catch",
+  "finally",
+  "toJSON",
+  "toString",
+  "valueOf",
+  "constructor",
+  "__proto__",
+  "inspect"
+]);
+function isImplicitProtocolKey(key) {
+  return IMPLICIT_PROTOCOL_KEYS.has(key);
+}
+function createFlatRpcProxy(dispatch) {
+  return new Proxy(
+    {},
+    {
+      get(_target, method) {
+        if (typeof method !== "string") return void 0;
+        if (isImplicitProtocolKey(method)) return Reflect.get(Object.prototype, method);
+        return (...args) => dispatch(method, args);
+      }
+    }
+  );
+}
+
+// packages/runtime/src/functions/runtime/rpc-client.ts
+function isRpcCapability(value) {
+  return typeof value === "object" && value !== null && value[RPC_CAPABILITY_KEY] === true;
+}
+function createRpcClient(capability, port, pending, nextId) {
+  return createFlatRpcProxy((method, args) => {
+    const id = nextId();
+    return new Promise((resolve, reject) => {
+      pending.set(id, { resolve, reject });
+      port.postMessage({ type: "rpc", id, capability, method, args });
+    });
+  });
+}
+
 // packages/runtime/src/functions/runtime/rpc-wire.ts
 function wireRpcResponses(port, pending) {
   port.on?.((message) => {
@@ -533,26 +575,6 @@ function escapeRegExp(text) {
 }
 
 // packages/runtime/src/functions/runtime/worker-entry.ts
-function isRpcCapability(value) {
-  return typeof value === "object" && value !== null && value[RPC_CAPABILITY_KEY] === true;
-}
-function createRpcClient(capability, port, pending, nextId) {
-  return new Proxy(
-    {},
-    {
-      get(_target, method) {
-        if (typeof method !== "string") return void 0;
-        return (...args) => {
-          const id = nextId();
-          return new Promise((resolve, reject) => {
-            pending.set(id, { resolve, reject });
-            port.postMessage({ type: "rpc", id, capability, method, args });
-          });
-        };
-      }
-    }
-  );
-}
 function errorMessageOf2(error) {
   if (error instanceof Error) return error.message;
   if (typeof error === "object" && error !== null && "message" in error) {

package/package.json

@@ -1,6 +1,13 @@
 {
   "name": "@adep/cli",
-  "version": "0.2.2",
+  "license": "MIT",
+  "repository": {
+    "type": "git",
+    "url": "git+https://gitcode.com/yunqiang_wu/ai-yunke.git"
+  },
+  "homepage": "https://adep.jajabjbj.top",
+  "bugs": "https://gitcode.com/yunqiang_wu/ai-yunke/issues",
+  "version": "0.3.1",
   "type": "module",
   "description": "`adep` 命令行工具包位：登录 / 初始化 / 本地调试 / 部署 / 数据库维护 / 云存储 / 静态托管 / 微前端组件（widget），实现见任务单 CLI-001 ~ CLI-003 与 FE-002；子路径 `@adep/cli/vite` 提供云函数 vite 插件（CLI-014）",
   "bin": {
@@ -21,11 +28,12 @@
   "dependencies": {
     "commander": "14.0.2",
     "esbuild": "0.25.12",
+    "yaml": "2.9.1",
     "zod": "^4.4.3",
     "@adep/cf-compat": "0.1.1",
     "@adep/runtime": "0.3.2",
-    "@adep/crypto": "0.1.0",
-    "@adep/vite-plugin": "0.1.8"
+    "@adep/vite-plugin": "0.1.8",
+    "@adep/crypto": "0.1.0"
   },
   "devDependencies": {
     "@adep/types": "0.3.0"

package/templates/app-mobile/README.md

@@ -6,7 +6,7 @@
 
 移动端与桌面端能力对齐（§2.11.1），差异只在打包壳与分发口径：iOS / Android 有应用商店
 审核约束，签名与上架由开发者自行完成（见下方「签名与上架」，完整指引
-[`docs/mobile-shell-signing.md`](../../docs/mobile-shell-signing.md)）。
+[`docs/mobile-shell-signing.md`](../../../../docs/mobile-shell-signing.md)）。
 
 ## 目录结构