@adep/cli 0.4.0 → 0.4.4

package/dist/vite.js

@@ -15,6 +15,8 @@ var DB_RPC = {
   query: "query",
   /** 写路径（CF-013）：`(method=writeQuery, args=[sql, params])` → `{ changes }`。 */
   writeQuery: "writeQuery",
+  /** 通用执行（BUG-4，2026-10-14）：`(method=execute, args=[sql, params?])` → `{ changes }`。 */
+  execute: "execute",
   /** 读取 owned 表变更流（DB-006）：`(method=changes, args=[table, query])`。 */
   changes: "changes",
   /** 开启事务：`begin → txId`。 */
@@ -62,6 +64,30 @@ function normalizeHttpStatus(status) {
 }
 
 // packages/runtime/src/shared/http-envelope.ts
+function coerceAdepHttpEnvelope(value) {
+  if (typeof value !== "object" || value === null || Array.isArray(value)) return null;
+  if (isAdepHttpEnvelope(value)) return value;
+  const keys = Object.keys(value);
+  if (keys.length === 0) return null;
+  if (!keys.every((key) => key === "status" || key === "body" || key === "headers")) return null;
+  const candidate = value;
+  const status = candidate.status;
+  if (typeof status !== "number" || !Number.isInteger(status) || status < 100 || status > 599) {
+    return null;
+  }
+  if ("headers" in candidate && candidate.headers !== void 0) {
+    const headers = candidate.headers;
+    if (typeof headers !== "object" || headers === null || Array.isArray(headers)) return null;
+    if (!Object.values(headers).every((headerValue2) => typeof headerValue2 === "string")) return null;
+  }
+  return {
+    __adepHttp: {
+      status,
+      ...candidate.headers === void 0 ? {} : { headers: candidate.headers },
+      body: candidate.body
+    }
+  };
+}
 function isAdepHttpEnvelope(value) {
   if (typeof value !== "object" || value === null) return false;
   const envelope = value.__adepHttp;
@@ -454,6 +480,14 @@ function assertWriteQuery(sql) {
     );
   }
 }
+function classifyStatement(sql) {
+  const head = sqlHead(stripLiterals(sql));
+  if (head.startsWith("SELECT") || head.startsWith("WITH")) return "read";
+  if (head.startsWith("INSERT") || head.startsWith("UPDATE") || head.startsWith("DELETE")) {
+    return "write";
+  }
+  return "ddl";
+}
 
 // packages/runtime/src/database/builder/owned.ts
 var OWNED_PK = "id";
@@ -1006,6 +1040,21 @@ function createCloudDb(driver, options = {}) {
         assertWriteQuery(sql);
         return driver.run(sql, params);
       },
+      async execute(sql, params = []) {
+        if (sql.trim() === "") {
+          throw unsafeOperation("execute \u7684 sql \u4E0D\u80FD\u4E3A\u7A7A");
+        }
+        if (!Array.isArray(params)) {
+          throw unsafeOperation("execute \u7684 params \u5FC5\u987B\u662F\u6570\u7EC4\uFF08\u65E0\u53C2\u53EF\u4E0D\u4F20\uFF09");
+        }
+        guardWrite();
+        const kind = classifyStatement(sql);
+        if (kind === "read") {
+          await driver.all(sql, params);
+          return { changes: 0 };
+        }
+        return driver.run(sql, params);
+      },
       async changes(table, query = {}) {
         return readChanges(driver, table, query);
       }
@@ -1081,6 +1130,10 @@ function createDbCapability(driver, options = {}) {
           const [sql, params] = args;
           return await db.writeQuery(sql, params);
         }
+        case DB_RPC.execute: {
+          const [sql, params] = args;
+          return await db.execute(sql, params ?? []);
+        }
         case DB_RPC.changes: {
           const [table, query] = args;
           return await db.changes(table, query);
@@ -3211,6 +3264,15 @@ function parseAdepConfig(raw) {
       data.environment = rec;
     }
   }
+  if (input.db_environment !== void 0) {
+    if (input.db_environment !== "dev" && input.db_environment !== "prod") {
+      errors.push(
+        `db_environment \u53EA\u63A5\u53D7 'dev' \u6216 'prod'\uFF0C\u6536\u5230 ${typeNameOf(input.db_environment)}\uFF08\u6CE8\u610F\u522B\u4E0E environment \u6DF7\u7528\uFF1A\u540E\u8005\u662F\u6CE8\u5165\u51FD\u6570\u8FD0\u884C\u65F6\u7684\u53D8\u91CF\u8868\uFF09`
+      );
+    } else {
+      data.db_environment = input.db_environment;
+    }
+  }
   if (input.runtime !== void 0) {
     const rec = asRecord(input.runtime);
     if (rec === null) {
@@ -3717,6 +3779,29 @@ function transformExports(code) {
   return transformModule(code);
 }
 var SANDBOX_BUILTIN_REJECTED = "FN_SANDBOX_BUILTIN_BLOCKED";
+var REALM_VALUE_KEY = "__adepRealmValue";
+function realmValue(value) {
+  return { [REALM_VALUE_KEY]: value };
+}
+function isRealmValue(value) {
+  return typeof value === "object" && value !== null && REALM_VALUE_KEY in value;
+}
+function createSandboxContext(sandboxGlobals) {
+  const direct = {};
+  const realmEntries = {};
+  for (const [key, value] of Object.entries(sandboxGlobals)) {
+    if (isRealmValue(value)) realmEntries[key] = value[REALM_VALUE_KEY];
+    else direct[key] = value;
+  }
+  const context = vm.createContext(direct, { codeGeneration: { strings: false, wasm: false } });
+  if (Object.keys(realmEntries).length > 0) {
+    const literal = JSON.stringify(JSON.stringify(realmEntries));
+    vm.runInContext(`Object.assign(globalThis, JSON.parse(${literal}))`, context, {
+      filename: "<sandbox-realm-globals>"
+    });
+  }
+  return context;
+}
 function resolveModulePath(fromDir, request, files) {
   if (!request.startsWith("./") && !request.startsWith("../")) return null;
   const base = joinPosix(fromDir, request);
@@ -3790,12 +3875,13 @@ function loadModule(path, files, sandboxGlobals, cache, resolveBare, bareCache)
   } catch (error) {
     throw syntaxErrorWithLocation(error, path);
   }
+  const context = createSandboxContext(sandboxGlobals);
   let wrapper;
   try {
-    wrapper = vm.runInNewContext(
+    wrapper = vm.runInContext(
       `(function (module, exports, require) { ${transformed} 
 })`,
-      vm.createContext({ ...sandboxGlobals }),
+      context,
       { filename: path }
     );
   } catch (error) {
@@ -3975,6 +4061,8 @@ var SandboxFetchError = class extends Error {
   }
 };
 var DEFAULT_MAX_RESPONSE_BYTES = 100 * 1024 * 1024;
+var DEFAULT_MAX_REDIRECTS = 5;
+var REDIRECT_STATUSES = /* @__PURE__ */ new Set([301, 302, 303, 307, 308]);
 var defaultFetch = (url, init) => (
   // 真实 Response 与内部 ResponseLike 结构性一致；getReader 的多态签名差异属纯类型问题，运行语义等价。
   globalThis.fetch(url, init)
@@ -4013,18 +4101,24 @@ function headersToRecord(headers) {
   }
   return out;
 }
-function contentLength(res) {
-  const headers = res.headers;
+function headerValue(headers, name) {
   if (headers === void 0 || headers === null) return null;
+  let raw;
   if (typeof headers.get === "function") {
-    const raw2 = headers.get?.("content-length");
-    if (raw2 === void 0 || raw2 === null || raw2.trim() === "") return null;
-    const n2 = Number(raw2);
-    return Number.isFinite(n2) && n2 >= 0 ? n2 : null;
-  }
-  const record = headers;
-  const raw = record["content-length"] ?? record["Content-Length"];
-  if (raw === void 0 || raw === null) return null;
+    raw = headers.get?.(name);
+  } else {
+    const record = headers;
+    raw = record[name.toLocaleLowerCase()] ?? record[name];
+  }
+  if (raw === void 0 || raw === null || raw.trim() === "") return null;
+  return raw;
+}
+function contentLength(res) {
+  const raw = headerValue(
+    res.headers,
+    "content-length"
+  );
+  if (raw === null) return null;
   const n = Number(raw);
   return Number.isFinite(n) && n >= 0 ? n : null;
 }
@@ -4104,44 +4198,72 @@ function createSandboxFetch(options) {
   const fetchImpl = options.fetchImpl ?? defaultFetch;
   const { allowlist, timeoutMs } = options;
   const maxBytes = options.maxResponseBytes ?? DEFAULT_MAX_RESPONSE_BYTES;
-  return async (url, init) => {
+  const maxRedirects = Math.max(0, options.maxRedirects ?? DEFAULT_MAX_REDIRECTS);
+  const guard = (raw) => {
     let parsed;
     try {
-      parsed = new URL(url);
+      parsed = new URL(raw);
     } catch {
-      throw new SandboxFetchError("FN_FETCH_INVALID_URL", `cloud.fetch \u6536\u5230\u975E\u6CD5 URL"${url}"`);
+      throw new SandboxFetchError("FN_FETCH_INVALID_URL", `cloud.fetch \u6536\u5230\u975E\u6CD5 URL"${raw}"`);
     }
-    if (parsed.protocol !== "https:" && parsed.protocol !== "http:") throw FORBIDDEN(url);
-    if (!isHostAllowed(parsed.hostname, allowlist)) throw FORBIDDEN(url);
+    if (parsed.protocol !== "https:" && parsed.protocol !== "http:") throw FORBIDDEN(raw);
+    if (!isHostAllowed(parsed.hostname, allowlist)) throw FORBIDDEN(raw);
+    return parsed;
+  };
+  const fetchOnce = async (url, init) => {
     const controller = new AbortController();
     const timer = setTimeout(() => controller.abort(), timeoutMs);
     const signals = [controller.signal];
     if (init?.signal !== void 0) signals.push(init.signal);
     const signal = signals.length === 1 ? signals[0] : AbortSignal.any(signals);
+    const request = {
+      ...init,
+      signal,
+      redirect: "manual"
+    };
     try {
-      let res;
-      try {
-        res = await fetchImpl(url, { ...init, signal });
-      } catch (error) {
-        if (controller.signal.aborted) {
-          throw new SandboxFetchError(
-            "FN_FETCH_TIMEOUT",
-            `cloud.fetch \u8BF7\u6C42\u8D85\u65F6\uFF08\u8D85\u8FC7 ${timeoutMs}ms\uFF09`
-          );
-        }
-        if (init?.signal?.aborted === true) {
-          throw new SandboxFetchError("FN_FETCH_ABORTED", "cloud.fetch \u8BF7\u6C42\u88AB\u8C03\u7528\u65B9\u4E2D\u6B62");
-        }
-        throw new SandboxFetchError(
-          "FN_FETCH_FAILED",
-          `cloud.fetch \u8BF7\u6C42\u5931\u8D25\uFF1A${errorMessageOf(error)}`
-        );
+      return await fetchImpl(url, request);
+    } catch (error) {
+      if (controller.signal.aborted) {
+        throw new SandboxFetchError("FN_FETCH_TIMEOUT", `cloud.fetch \u8BF7\u6C42\u8D85\u65F6\uFF08\u8D85\u8FC7 ${timeoutMs}ms\uFF09`);
       }
-      return normalizeResponse(res, maxBytes);
+      if (init?.signal?.aborted === true) {
+        throw new SandboxFetchError("FN_FETCH_ABORTED", "cloud.fetch \u8BF7\u6C42\u88AB\u8C03\u7528\u65B9\u4E2D\u6B62");
+      }
+      throw new SandboxFetchError(
+        "FN_FETCH_FAILED",
+        `cloud.fetch \u8BF7\u6C42\u5931\u8D25\uFF1A${errorMessageOf(error)}`
+      );
     } finally {
       clearTimeout(timer);
     }
   };
+  return async (url, init) => {
+    let target = guard(url);
+    let currentInit = init === void 0 ? void 0 : { ...init };
+    let lastRes = null;
+    for (let hop = 0; hop <= maxRedirects; hop++) {
+      const res = await fetchOnce(target.href, currentInit);
+      const location = REDIRECT_STATUSES.has(res.status) ? headerValue(res.headers, "location") : null;
+      if (location === null || hop === maxRedirects) {
+        lastRes = res;
+        break;
+      }
+      let next;
+      try {
+        next = new URL(location, target.href);
+      } catch {
+        lastRes = res;
+        break;
+      }
+      if (res.status !== 307 && res.status !== 308 && currentInit !== void 0) {
+        currentInit.method = "GET";
+        delete currentInit.body;
+      }
+      target = guard(next.href);
+    }
+    return normalizeResponse(lastRes, maxBytes);
+  };
 }
 
 // packages/runtime/src/functions/runtime/flat-rpc-proxy.ts
@@ -4280,7 +4402,9 @@ function errorMessageOf2(error) {
   return String(error);
 }
 async function normalizeResultBody(value) {
-  if (!(value instanceof Response)) return value;
+  if (!(value instanceof Response)) {
+    return coerceAdepHttpEnvelope(value) ?? value;
+  }
   const contentType = value.headers.get("content-type") ?? "";
   const text = await value.text();
   let payload = text;
@@ -4292,8 +4416,8 @@ async function normalizeResultBody(value) {
     }
   }
   const headers = {};
-  value.headers.forEach((headerValue, key) => {
-    headers[key] = headerValue;
+  value.headers.forEach((headerValue2, key) => {
+    headers[key] = headerValue2;
   });
   return { __adepHttp: { status: value.status, body: payload, headers } };
 }
@@ -4400,7 +4524,7 @@ function runWorker(input, port) {
     structuredClone
   };
   if (input.env !== void 0) {
-    sandboxGlobals["process"] = { env: input.env };
+    sandboxGlobals["process"] = realmValue({ env: input.env });
   }
   if (input.fetch !== void 0) {
     const sandboxFetch = createSandboxFetch({
@@ -4528,7 +4652,7 @@ function createBearerUserResolver(issuer) {
 function isRuntimeSource(name) {
   return (name.endsWith(".ts") || name.endsWith(".js")) && !name.endsWith(".d.ts") && !name.endsWith(".test.ts");
 }
-async function collectFunctions(dir) {
+async function collectFunctions(dir, readImpl = (path) => readFile6(path, "utf8")) {
   const files = {};
   const walk = async (sub, prefix) => {
     let entries;
@@ -4543,7 +4667,8 @@ async function collectFunctions(dir) {
       if (entry.isDirectory()) {
         await walk(full, rel);
       } else if (entry.isFile() && isRuntimeSource(entry.name)) {
-        files[rel] = await readFile6(full, "utf8");
+        const content = await readImpl(full).catch(() => null);
+        if (content !== null) files[rel] = content;
       }
     }
   };
@@ -4619,7 +4744,8 @@ async function loadConfig(cwd) {
     name: config?.name ?? name,
     functionsDir: config?.functionsDir ?? "functions",
     functionsPrefix: config?.functions_prefix ?? "",
-    ...config?.environment === void 0 ? {} : { environment: config.environment }
+    ...config?.environment === void 0 ? {} : { environment: config.environment },
+    ...config?.db_environment === void 0 ? {} : { dbEnvironment: config.db_environment }
   };
 }
 var parseEnvFile = parseEnv;

package/dist/worker-entry.js

@@ -246,6 +246,29 @@ function transformExports(code) {
   return transformModule(code);
 }
 var SANDBOX_BUILTIN_REJECTED = "FN_SANDBOX_BUILTIN_BLOCKED";
+var REALM_VALUE_KEY = "__adepRealmValue";
+function realmValue(value) {
+  return { [REALM_VALUE_KEY]: value };
+}
+function isRealmValue(value) {
+  return typeof value === "object" && value !== null && REALM_VALUE_KEY in value;
+}
+function createSandboxContext(sandboxGlobals) {
+  const direct = {};
+  const realmEntries = {};
+  for (const [key, value] of Object.entries(sandboxGlobals)) {
+    if (isRealmValue(value)) realmEntries[key] = value[REALM_VALUE_KEY];
+    else direct[key] = value;
+  }
+  const context = vm.createContext(direct, { codeGeneration: { strings: false, wasm: false } });
+  if (Object.keys(realmEntries).length > 0) {
+    const literal = JSON.stringify(JSON.stringify(realmEntries));
+    vm.runInContext(`Object.assign(globalThis, JSON.parse(${literal}))`, context, {
+      filename: "<sandbox-realm-globals>"
+    });
+  }
+  return context;
+}
 function resolveModulePath(fromDir, request, files) {
   if (!request.startsWith("./") && !request.startsWith("../")) return null;
   const base = joinPosix(fromDir, request);
@@ -319,12 +342,13 @@ function loadModule(path, files, sandboxGlobals, cache, resolveBare, bareCache)
   } catch (error) {
     throw syntaxErrorWithLocation(error, path);
   }
+  const context = createSandboxContext(sandboxGlobals);
   let wrapper;
   try {
-    wrapper = vm.runInNewContext(
+    wrapper = vm.runInContext(
       `(function (module, exports, require) { ${transformed} 
 })`,
-      vm.createContext({ ...sandboxGlobals }),
+      context,
       { filename: path }
     );
   } catch (error) {
@@ -357,6 +381,8 @@ var SandboxFetchError = class extends Error {
   }
 };
 var DEFAULT_MAX_RESPONSE_BYTES = 100 * 1024 * 1024;
+var DEFAULT_MAX_REDIRECTS = 5;
+var REDIRECT_STATUSES = /* @__PURE__ */ new Set([301, 302, 303, 307, 308]);
 var defaultFetch = (url, init) => (
   // 真实 Response 与内部 ResponseLike 结构性一致；getReader 的多态签名差异属纯类型问题，运行语义等价。
   globalThis.fetch(url, init)
@@ -395,18 +421,24 @@ function headersToRecord(headers) {
   }
   return out;
 }
-function contentLength(res) {
-  const headers = res.headers;
+function headerValue(headers, name) {
   if (headers === void 0 || headers === null) return null;
+  let raw;
   if (typeof headers.get === "function") {
-    const raw2 = headers.get?.("content-length");
-    if (raw2 === void 0 || raw2 === null || raw2.trim() === "") return null;
-    const n2 = Number(raw2);
-    return Number.isFinite(n2) && n2 >= 0 ? n2 : null;
-  }
-  const record = headers;
-  const raw = record["content-length"] ?? record["Content-Length"];
-  if (raw === void 0 || raw === null) return null;
+    raw = headers.get?.(name);
+  } else {
+    const record = headers;
+    raw = record[name.toLocaleLowerCase()] ?? record[name];
+  }
+  if (raw === void 0 || raw === null || raw.trim() === "") return null;
+  return raw;
+}
+function contentLength(res) {
+  const raw = headerValue(
+    res.headers,
+    "content-length"
+  );
+  if (raw === null) return null;
   const n = Number(raw);
   return Number.isFinite(n) && n >= 0 ? n : null;
 }
@@ -486,44 +518,72 @@ function createSandboxFetch(options) {
   const fetchImpl = options.fetchImpl ?? defaultFetch;
   const { allowlist, timeoutMs } = options;
   const maxBytes = options.maxResponseBytes ?? DEFAULT_MAX_RESPONSE_BYTES;
-  return async (url, init) => {
+  const maxRedirects = Math.max(0, options.maxRedirects ?? DEFAULT_MAX_REDIRECTS);
+  const guard = (raw) => {
     let parsed;
     try {
-      parsed = new URL(url);
+      parsed = new URL(raw);
     } catch {
-      throw new SandboxFetchError("FN_FETCH_INVALID_URL", `cloud.fetch \u6536\u5230\u975E\u6CD5 URL"${url}"`);
+      throw new SandboxFetchError("FN_FETCH_INVALID_URL", `cloud.fetch \u6536\u5230\u975E\u6CD5 URL"${raw}"`);
     }
-    if (parsed.protocol !== "https:" && parsed.protocol !== "http:") throw FORBIDDEN(url);
-    if (!isHostAllowed(parsed.hostname, allowlist)) throw FORBIDDEN(url);
+    if (parsed.protocol !== "https:" && parsed.protocol !== "http:") throw FORBIDDEN(raw);
+    if (!isHostAllowed(parsed.hostname, allowlist)) throw FORBIDDEN(raw);
+    return parsed;
+  };
+  const fetchOnce = async (url, init) => {
     const controller = new AbortController();
     const timer = setTimeout(() => controller.abort(), timeoutMs);
     const signals = [controller.signal];
     if (init?.signal !== void 0) signals.push(init.signal);
     const signal = signals.length === 1 ? signals[0] : AbortSignal.any(signals);
+    const request = {
+      ...init,
+      signal,
+      redirect: "manual"
+    };
     try {
-      let res;
-      try {
-        res = await fetchImpl(url, { ...init, signal });
-      } catch (error) {
-        if (controller.signal.aborted) {
-          throw new SandboxFetchError(
-            "FN_FETCH_TIMEOUT",
-            `cloud.fetch \u8BF7\u6C42\u8D85\u65F6\uFF08\u8D85\u8FC7 ${timeoutMs}ms\uFF09`
-          );
-        }
-        if (init?.signal?.aborted === true) {
-          throw new SandboxFetchError("FN_FETCH_ABORTED", "cloud.fetch \u8BF7\u6C42\u88AB\u8C03\u7528\u65B9\u4E2D\u6B62");
-        }
-        throw new SandboxFetchError(
-          "FN_FETCH_FAILED",
-          `cloud.fetch \u8BF7\u6C42\u5931\u8D25\uFF1A${errorMessageOf(error)}`
-        );
+      return await fetchImpl(url, request);
+    } catch (error) {
+      if (controller.signal.aborted) {
+        throw new SandboxFetchError("FN_FETCH_TIMEOUT", `cloud.fetch \u8BF7\u6C42\u8D85\u65F6\uFF08\u8D85\u8FC7 ${timeoutMs}ms\uFF09`);
       }
-      return normalizeResponse(res, maxBytes);
+      if (init?.signal?.aborted === true) {
+        throw new SandboxFetchError("FN_FETCH_ABORTED", "cloud.fetch \u8BF7\u6C42\u88AB\u8C03\u7528\u65B9\u4E2D\u6B62");
+      }
+      throw new SandboxFetchError(
+        "FN_FETCH_FAILED",
+        `cloud.fetch \u8BF7\u6C42\u5931\u8D25\uFF1A${errorMessageOf(error)}`
+      );
     } finally {
       clearTimeout(timer);
     }
   };
+  return async (url, init) => {
+    let target = guard(url);
+    let currentInit = init === void 0 ? void 0 : { ...init };
+    let lastRes = null;
+    for (let hop = 0; hop <= maxRedirects; hop++) {
+      const res = await fetchOnce(target.href, currentInit);
+      const location = REDIRECT_STATUSES.has(res.status) ? headerValue(res.headers, "location") : null;
+      if (location === null || hop === maxRedirects) {
+        lastRes = res;
+        break;
+      }
+      let next;
+      try {
+        next = new URL(location, target.href);
+      } catch {
+        lastRes = res;
+        break;
+      }
+      if (res.status !== 307 && res.status !== 308 && currentInit !== void 0) {
+        currentInit.method = "GET";
+        delete currentInit.body;
+      }
+      target = guard(next.href);
+    }
+    return normalizeResponse(lastRes, maxBytes);
+  };
 }
 
 // packages/runtime/src/shared/capability-keys.ts
@@ -534,6 +594,8 @@ var DB_RPC = {
   query: "query",
   /** 写路径（CF-013）：`(method=writeQuery, args=[sql, params])` → `{ changes }`。 */
   writeQuery: "writeQuery",
+  /** 通用执行（BUG-4，2026-10-14）：`(method=execute, args=[sql, params?])` → `{ changes }`。 */
+  execute: "execute",
   /** 读取 owned 表变更流（DB-006）：`(method=changes, args=[table, query])`。 */
   changes: "changes",
   /** 开启事务：`begin → txId`。 */
@@ -672,6 +734,39 @@ function createChainClient(capability, port, pending, nextId, spec) {
   return makeRoot(void 0);
 }
 
+// packages/runtime/src/shared/http-envelope.ts
+function coerceAdepHttpEnvelope(value) {
+  if (typeof value !== "object" || value === null || Array.isArray(value)) return null;
+  if (isAdepHttpEnvelope(value)) return value;
+  const keys = Object.keys(value);
+  if (keys.length === 0) return null;
+  if (!keys.every((key) => key === "status" || key === "body" || key === "headers")) return null;
+  const candidate = value;
+  const status = candidate.status;
+  if (typeof status !== "number" || !Number.isInteger(status) || status < 100 || status > 599) {
+    return null;
+  }
+  if ("headers" in candidate && candidate.headers !== void 0) {
+    const headers = candidate.headers;
+    if (typeof headers !== "object" || headers === null || Array.isArray(headers)) return null;
+    if (!Object.values(headers).every((headerValue2) => typeof headerValue2 === "string")) return null;
+  }
+  return {
+    __adepHttp: {
+      status,
+      ...candidate.headers === void 0 ? {} : { headers: candidate.headers },
+      body: candidate.body
+    }
+  };
+}
+function isAdepHttpEnvelope(value) {
+  if (typeof value !== "object" || value === null) return false;
+  const envelope = value.__adepHttp;
+  if (typeof envelope !== "object" || envelope === null) return false;
+  const status = envelope.status;
+  return typeof status === "number" && Number.isInteger(status) && status >= 100 && status <= 599;
+}
+
 // packages/runtime/src/functions/deps/manifest.ts
 function splitBareSpecifier(request) {
   if (request.startsWith("@")) {
@@ -691,7 +786,9 @@ function errorMessageOf2(error) {
   return String(error);
 }
 async function normalizeResultBody(value) {
-  if (!(value instanceof Response)) return value;
+  if (!(value instanceof Response)) {
+    return coerceAdepHttpEnvelope(value) ?? value;
+  }
   const contentType = value.headers.get("content-type") ?? "";
   const text = await value.text();
   let payload = text;
@@ -703,8 +800,8 @@ async function normalizeResultBody(value) {
     }
   }
   const headers = {};
-  value.headers.forEach((headerValue, key) => {
-    headers[key] = headerValue;
+  value.headers.forEach((headerValue2, key) => {
+    headers[key] = headerValue2;
   });
   return { __adepHttp: { status: value.status, body: payload, headers } };
 }
@@ -811,7 +908,7 @@ function runWorker(input, port) {
     structuredClone
   };
   if (input.env !== void 0) {
-    sandboxGlobals["process"] = { env: input.env };
+    sandboxGlobals["process"] = realmValue({ env: input.env });
   }
   if (input.fetch !== void 0) {
     const sandboxFetch = createSandboxFetch({

package/package.json

@@ -5,9 +5,9 @@
     "type": "git",
     "url": "git+https://gitcode.com/yunqiang_wu/ai-yunke.git"
   },
-  "homepage": "https://adep.jajabjbj.top",
+  "homepage": "https://adep.top",
   "bugs": "https://gitcode.com/yunqiang_wu/ai-yunke/issues",
-  "version": "0.4.0",
+  "version": "0.4.4",
   "type": "module",
   "description": "`adep` 命令行工具包位：登录 / 初始化 / 本地调试 / 部署 / 数据库维护 / 云存储 / 静态托管 / 微前端组件（widget），实现见任务单 CLI-001 ~ CLI-003 与 FE-002；子路径 `@adep/cli/vite` 提供云函数 vite 插件（CLI-014）",
   "bin": {
@@ -30,13 +30,13 @@
     "esbuild": "0.25.12",
     "yaml": "2.9.1",
     "zod": "^4.4.3",
-    "@adep/crypto": "0.1.0",
-    "@adep/cf-compat": "0.1.1",
-    "@adep/runtime": "0.3.2",
-    "@adep/vite-plugin": "0.1.8"
+    "@adep/cf-compat": "0.1.3",
+    "@adep/runtime": "0.3.4",
+    "@adep/crypto": "0.1.1",
+    "@adep/vite-plugin": "0.1.9"
   },
   "devDependencies": {
-    "@adep/types": "0.3.0"
+    "@adep/types": "0.3.2"
   },
   "scripts": {
     "test": "vitest run",