@adep/cli 0.4.5 → 0.4.10

package/dist/index.js

@@ -12,7 +12,11 @@ var __export = (target, all) => {
 // packages/cli/src/config.ts
 function resolvePaths(env = process.env) {
   const home = env["ADEP_HOME"] ?? `${env["HOME"] ?? ""}/.adep`;
-  return { home, credentialsFile: `${home}/credentials` };
+  return {
+    home,
+    credentialsFile: `${home}/credentials`,
+    credentialsDir: `${home}/credentials.d`
+  };
 }
 function resolveServer(env = process.env) {
   return (env["ADEP_SERVER"] ?? "https://adep.top").replace(/\/+$/, "");
@@ -66,29 +70,13 @@ var init_browser = __esm({
 });
 
 // packages/cli/src/credentials.ts
-import { mkdir, open, readFile, rm, stat } from "node:fs/promises";
-import { dirname } from "node:path";
-async function saveCredentials(paths, credentials) {
-  await mkdir(dirname(paths.credentialsFile), { recursive: true });
-  const handle = await open(paths.credentialsFile, "w", 384);
-  try {
-    await handle.writeFile(JSON.stringify(credentials, null, 2));
-  } finally {
-    await handle.close();
-  }
-  await chmodStrict(paths.credentialsFile);
+import { chmod, mkdir, open, readFile, rm, stat, writeFile } from "node:fs/promises";
+import { join } from "node:path";
+function slotNameFor(server) {
+  return encodeURIComponent(new URL(server).host);
 }
-async function chmodStrict(file2) {
-  const info = await stat(file2);
-  const mode = info.mode & 511;
-  if (mode !== 384) {
-    const { chmod } = await import("node:fs/promises");
-    await chmod(file2, 384);
-  }
-}
-async function loadCredentials(paths) {
+function parseCredentials(raw) {
   try {
-    const raw = await readFile(paths.credentialsFile, "utf8");
     const parsed = JSON.parse(raw);
     if (typeof parsed["server"] !== "string" || typeof parsed["email"] !== "string" || typeof parsed["encodedToken"] !== "string") {
       return null;
@@ -104,7 +92,84 @@ async function loadCredentials(paths) {
     return null;
   }
 }
+async function chmodStrict(file2) {
+  const info = await stat(file2);
+  const mode = info.mode & 511;
+  if (mode !== 384) {
+    await chmod(file2, 384);
+  }
+}
+async function writeSlot(paths, credentials, slot) {
+  await mkdir(paths.credentialsDir, { recursive: true });
+  const file2 = slotFileOf(paths, slot);
+  const handle = await open(file2, "w", 384);
+  try {
+    await handle.writeFile(JSON.stringify(credentials, null, 2));
+  } finally {
+    await handle.close();
+  }
+  await chmodStrict(file2);
+}
+async function readSlot(paths, slot) {
+  try {
+    return parseCredentials(await readFile(slotFileOf(paths, slot), "utf8"));
+  } catch {
+    return null;
+  }
+}
+async function readCurrent(paths) {
+  try {
+    const raw = (await readFile(currentFileOf(paths), "utf8")).trim();
+    return raw === "" ? null : raw;
+  } catch {
+    return null;
+  }
+}
+async function writeCurrent(paths, slot) {
+  await mkdir(paths.credentialsDir, { recursive: true });
+  await writeFile(currentFileOf(paths), `${slot}
+`, "utf8");
+}
+async function migrateLegacyFile(paths) {
+  let raw;
+  try {
+    raw = await readFile(paths.credentialsFile, "utf8");
+  } catch {
+    return;
+  }
+  const parsed = parseCredentials(raw);
+  if (parsed === null) return;
+  try {
+    const slot = slotNameFor(parsed.server);
+    await writeSlot(paths, parsed, slot);
+    if (await readCurrent(paths) === null) {
+      await writeCurrent(paths, slot);
+    }
+  } catch {
+    return;
+  }
+  await rm(paths.credentialsFile, { force: true });
+}
+async function saveCredentials(paths, credentials) {
+  await migrateLegacyFile(paths);
+  const slot = slotNameFor(credentials.server);
+  const previous = await readSlot(paths, slot);
+  await writeSlot(paths, credentials, slot);
+  await writeCurrent(paths, slot);
+  return { previous };
+}
+async function loadCredentials(paths) {
+  await migrateLegacyFile(paths);
+  const current = await readCurrent(paths);
+  if (current === null) return null;
+  return readSlot(paths, current);
+}
 async function clearCredentials(paths) {
+  const current = await readCurrent(paths);
+  if (current !== null) {
+    await rm(slotFileOf(paths, current), { force: true });
+  }
+  await rm(currentFileOf(paths), { force: true });
   await rm(paths.credentialsFile, { force: true });
 }
 function encodeToken(token) {
@@ -123,9 +188,12 @@ function authHeaders(credentials) {
   }
   return { cookie: sessionCookieHeader(credentials) };
 }
+var slotFileOf, currentFileOf;
 var init_credentials = __esm({
   "packages/cli/src/credentials.ts"() {
     "use strict";
+    slotFileOf = (paths, slot) => join(paths.credentialsDir, `${slot}.json`);
+    currentFileOf = (paths) => join(paths.credentialsDir, "current");
   }
 });
 
@@ -246,14 +314,18 @@ async function login(paths, input2) {
   const eq = cookie.indexOf("=");
   const cookieName = cookie.slice(0, eq);
   const token = cookie.slice(eq + 1);
-  await saveCredentials(paths, {
+  const { previous } = await saveCredentials(paths, {
     server,
     email: input2.email,
     encodedToken: encodeToken(token),
     cookieName,
     authType: "cookie"
   });
-  return { email: input2.email };
+  return {
+    email: input2.email,
+    authType: "cookie",
+    ...previous !== null && previous.email !== input2.email ? { replacedEmail: previous.email } : {}
+  };
 }
 async function parseDeviceError(response) {
   let body = null;
@@ -394,13 +466,17 @@ async function loginWithDevice(paths, input2) {
     now: input2.now ?? Date.now
   });
   const email3 = await fetchIdentityWithToken(server, token);
-  await saveCredentials(paths, {
+  const { previous } = await saveCredentials(paths, {
     server,
     email: email3,
     encodedToken: encodeToken(token),
     authType: "bearer"
   });
-  return { email: email3, authType: "bearer" };
+  return {
+    email: email3,
+    authType: "bearer",
+    ...previous !== null && previous.email !== email3 ? { replacedEmail: previous.email } : {}
+  };
 }
 async function fetchIdentityWithToken(server, token) {
   let response;
@@ -1001,6 +1077,9 @@ function depsKeyOf(dependencies) {
   const canonical = Object.entries(dependencies).map(([name, version2]) => `${name}@${version2}`).toSorted().join("\n");
   return createHash("sha256").update(canonical).digest("hex").slice(0, 16);
 }
+function parseNameList(value) {
+  return value.split(",").map((item) => item.trim()).filter((item) => item.length > 0);
+}
 var PACKAGE_NAME_PATTERN, COMPARATOR_PATTERN, MANIFEST_MAX_DEPS;
 var init_manifest = __esm({
   "packages/runtime/src/functions/deps/manifest.ts"() {
@@ -1035,22 +1114,22 @@ var init_resolve = __esm({
 // packages/runtime/src/functions/runtime/worker-executor.ts
 import { readFileSync as readFileSync2 } from "node:fs";
 import { fileURLToPath as fileURLToPath2, pathToFileURL } from "node:url";
-import { dirname as dirname4, join as join3 } from "node:path";
+import { dirname as dirname3, join as join4 } from "node:path";
 import { Worker } from "node:worker_threads";
 function resolveWorkerEntry(baseDir = fileURLToPath2(new URL(".", import.meta.url))) {
   const candidates = [
-    join3(baseDir, "worker-entry.js"),
-    join3(baseDir, "worker-entry.ts"),
-    join3(baseDir, "domains/functions/runtime/worker-entry.js"),
-    join3(baseDir, "domains/functions/runtime/worker-entry.ts")
+    join4(baseDir, "worker-entry.js"),
+    join4(baseDir, "worker-entry.ts"),
+    join4(baseDir, "domains/functions/runtime/worker-entry.js"),
+    join4(baseDir, "domains/functions/runtime/worker-entry.ts")
   ];
   let current = baseDir;
   for (let depth = 0; depth < 8; depth += 1) {
     candidates.push(
-      join3(current, "packages/runtime/src/functions/runtime/worker-entry.js"),
-      join3(current, "packages/runtime/src/functions/runtime/worker-entry.ts")
+      join4(current, "packages/runtime/src/functions/runtime/worker-entry.js"),
+      join4(current, "packages/runtime/src/functions/runtime/worker-entry.ts")
     );
-    const parent = dirname4(current);
+    const parent = dirname3(current);
     if (parent === current) break;
     current = parent;
   }
@@ -1920,6 +1999,20 @@ var init_builder = __esm({
 
 // packages/runtime/src/database/sdk/cloud.ts
 function errorWithCode(error62) {
+  if (error62 instanceof Error) {
+    const sqlite = /no such table: (\S+)/.exec(error62.message);
+    if (sqlite !== null) {
+      return new Error(
+        `[DB_TABLE_MISSING] \u9879\u76EE\u5E93\u5DF2\u542F\u52A8\u4F46\u7F3A\u8868 "${sqlite[1]}"\uFF1A\u8BF7\u6267\u884C adep db migrate <schema.sql> \u5EFA\u8868\uFF08\u53D1\u5E03\u4E0D\u542B\u5EFA\u8868\uFF09\u3002\u539F\u59CB\u9519\u8BEF\uFF1A${error62.message}`
+      );
+    }
+    const pg = /relation "([^"]+)" does not exist/.exec(error62.message);
+    if (pg !== null) {
+      return new Error(
+        `[DB_TABLE_MISSING] \u9879\u76EE\u5E93\u5DF2\u542F\u52A8\u4F46\u7F3A\u8868\uFF08\u6216\u5173\u7CFB\uFF09"${pg[1]}"\uFF1A\u8BF7\u6267\u884C adep db migrate <schema.sql> \u5EFA\u8868\uFF08\u53D1\u5E03\u4E0D\u542B\u5EFA\u8868\uFF09\u3002\u539F\u59CB\u9519\u8BEF\uFF1A${error62.message}`
+      );
+    }
+  }
   const code = typeof error62 === "object" && error62 !== null && typeof error62.code === "string" ? error62.code : void 0;
   if (code !== void 0 && error62 instanceof Error) {
     return new Error(`[${code}] ${error62.message}`);
@@ -3257,13 +3350,13 @@ var init_cloud2 = __esm({
 });
 
 // packages/runtime/src/storage/driver/local.ts
-import { mkdir as mkdir3, readFile as readFile2, readdir, rm as rm2, stat as stat3, unlink, writeFile as writeFile2 } from "node:fs/promises";
-import { dirname as dirname5, join as join4 } from "node:path";
+import { mkdir as mkdir3, readFile as readFile2, readdir, rm as rm2, stat as stat3, unlink, writeFile as writeFile3 } from "node:fs/promises";
+import { dirname as dirname4, join as join5 } from "node:path";
 function createLocalStorageDriver(options) {
   const quotaBytes = options.quotaBytes ?? PROJECT_QUOTA_BYTES;
-  const bucketDir = (projectId) => join4(options.dir, projectId);
-  const objectPath = (projectId, path) => join4(bucketDir(projectId), path);
-  const metaPath = (projectId, path) => join4(dirname5(objectPath(projectId, path)), `${path.split("/").pop() ?? ""}${META_SUFFIX}`);
+  const bucketDir = (projectId) => join5(options.dir, projectId);
+  const objectPath = (projectId, path) => join5(bucketDir(projectId), path);
+  const metaPath = (projectId, path) => join5(dirname4(objectPath(projectId, path)), `${path.split("/").pop() ?? ""}${META_SUFFIX}`);
   const readStoredMeta = async (projectId, path) => {
     const raw = await readFile2(metaPath(projectId, path), "utf8");
     return JSON.parse(raw);
@@ -3275,7 +3368,7 @@ function createLocalStorageDriver(options) {
       updatedAt: (/* @__PURE__ */ new Date()).toISOString(),
       ...meta3.contentType === void 0 ? {} : { contentType: meta3.contentType }
     };
-    await writeFile2(metaPath(projectId, path), JSON.stringify(payload), "utf8");
+    await writeFile3(metaPath(projectId, path), JSON.stringify(payload), "utf8");
   };
   const totalSize = async (projectId) => {
     const root = bucketDir(projectId);
@@ -3289,7 +3382,7 @@ function createLocalStorageDriver(options) {
       }
       const tasks = [];
       for (const entry of entries) {
-        const full = join4(dir, entry.name);
+        const full = join5(dir, entry.name);
         if (entry.isDirectory()) {
           tasks.push(walk(full));
         } else if (entry.isFile() && !entry.name.endsWith(META_SUFFIX)) {
@@ -3333,8 +3426,8 @@ function createLocalStorageDriver(options) {
         );
       }
       const dest = objectPath(projectId, path);
-      await mkdir3(dirname5(dest), { recursive: true });
-      await writeFile2(dest, data);
+      await mkdir3(dirname4(dest), { recursive: true });
+      await writeFile3(dest, data);
       await writeStoredMeta(projectId, path, {
         visibility: putOptions.visibility,
         size: data.byteLength,
@@ -3412,7 +3505,7 @@ function createLocalStorageDriver(options) {
         const tasks = [];
         for (const entry of entries) {
           if (entry.name.endsWith(META_SUFFIX)) continue;
-          const full = join4(dir, entry.name);
+          const full = join5(dir, entry.name);
           const rel = relative10 === "" ? entry.name : `${relative10}/${entry.name}`;
           if (entry.isFile()) {
             if (prefix !== void 0 && !rel.startsWith(prefix)) continue;
@@ -3461,9 +3554,9 @@ var init_local = __esm({
 });
 
 // packages/cli/src/sim/storage.ts
-import { join as join5 } from "node:path";
+import { join as join6 } from "node:path";
 function createSimStorageCapability(options) {
-  const dir = join5(options.cwd, ".adep", "sim", "storage");
+  const dir = join6(options.cwd, ".adep", "sim", "storage");
   const driver = createLocalStorageDriver({ dir });
   const signer = {
     secret: options.secret ?? SIM_SIGN_SECRET,
@@ -3638,13 +3731,13 @@ var init_merge = __esm({
 });
 
 // packages/cli/src/sim/runtime.ts
-import { mkdir as mkdir4, readFile as readFile3, writeFile as writeFile3 } from "node:fs/promises";
-import { dirname as dirname6, join as join6 } from "node:path";
+import { mkdir as mkdir4, readFile as readFile3, writeFile as writeFile4 } from "node:fs/promises";
+import { dirname as dirname5, join as join7 } from "node:path";
 function simDir(cwd) {
-  return join6(cwd, ".adep", "sim");
+  return join7(cwd, ".adep", "sim");
 }
 function jsonStorage(cwd) {
-  const file2 = join6(simDir(cwd), "db.json");
+  const file2 = join7(simDir(cwd), "db.json");
   return {
     async load() {
       try {
@@ -3655,8 +3748,8 @@ function jsonStorage(cwd) {
       }
     },
     async save(tables) {
-      await mkdir4(dirname6(file2), { recursive: true });
-      await writeFile3(file2, JSON.stringify(tables), "utf8");
+      await mkdir4(dirname5(file2), { recursive: true });
+      await writeFile4(file2, JSON.stringify(tables), "utf8");
     }
   };
 }
@@ -3811,6 +3904,63 @@ var init_client = __esm({
   }
 });
 
+// packages/runtime/src/shared/sql-split.ts
+function splitSqlStatements(source) {
+  const statements = [];
+  let buffer = "";
+  let inQuote = false;
+  const lines = source.split("\n");
+  for (const rawLine of lines) {
+    const trimmed = rawLine.trim();
+    if (!inQuote && (trimmed.length === 0 || trimmed.startsWith("--"))) continue;
+    const scanLine = inQuote ? rawLine : trimmed;
+    for (let i = 0; i < scanLine.length; i++) {
+      const ch = scanLine[i];
+      if (inQuote) {
+        if (ch === "'") {
+          if (scanLine[i + 1] === "'") {
+            buffer += ch + scanLine[i + 1];
+            i++;
+            continue;
+          }
+          inQuote = false;
+        }
+        buffer += ch;
+        continue;
+      }
+      if (ch === "'") {
+        inQuote = true;
+        buffer += ch;
+        continue;
+      }
+      if (ch === "-" && scanLine[i + 1] === "-") break;
+      if (ch === ";") {
+        const statement = buffer.trim();
+        if (statement.length > 0) statements.push(statement);
+        buffer = "";
+        continue;
+      }
+      buffer += ch;
+    }
+    if (inQuote) {
+      buffer += "\n";
+    } else if (buffer.length > 0 && !/\s$/.test(buffer)) {
+      buffer += " ";
+    }
+  }
+  if (inQuote) {
+    throw new Error(`SQL \u811A\u672C\u5F15\u53F7\u672A\u95ED\u5408\uFF1A${buffer.trim().slice(0, 80)}\u2026`);
+  }
+  const tail = buffer.trim();
+  if (tail.length > 0) statements.push(tail);
+  return statements;
+}
+var init_sql_split = __esm({
+  "packages/runtime/src/shared/sql-split.ts"() {
+    "use strict";
+  }
+});
+
 // packages/cli/src/db.ts
 var db_exports = {};
 __export(db_exports, {
@@ -3912,61 +4062,20 @@ async function dbRollback(paths, options) {
     { method: "POST", body: { to: options.to } }
   );
 }
-function splitSqlStatements(source) {
-  const statements = [];
-  let buffer = "";
-  let inQuote = false;
-  const lines = source.split("\n");
-  for (const rawLine of lines) {
-    const trimmed = rawLine.trim();
-    if (!inQuote && (trimmed.length === 0 || trimmed.startsWith("--"))) continue;
-    for (let i = 0; i < rawLine.length; i++) {
-      const ch = rawLine[i];
-      if (inQuote) {
-        if (ch === "'") {
-          if (rawLine[i + 1] === "'") {
-            buffer += ch + rawLine[i + 1];
-            i++;
-            continue;
-          }
-          inQuote = false;
-        }
-        buffer += ch;
-        continue;
-      }
-      if (ch === "'") {
-        inQuote = true;
-        buffer += ch;
-        continue;
-      }
-      if (ch === "-" && rawLine[i + 1] === "-") break;
-      if (ch === ";") {
-        const statement = buffer.trim();
-        if (statement.length > 0) statements.push(statement);
-        buffer = "";
-        continue;
-      }
-      buffer += ch;
-    }
-    buffer += inQuote ? "\n" : " ";
-  }
-  if (inQuote) {
-    throw new Error(`SQL \u8FC1\u79FB\u6587\u4EF6\u5F15\u53F7\u672A\u95ED\u5408\uFF1A${buffer.trim().slice(0, 80)}\u2026`);
-  }
-  const tail = buffer.trim();
-  if (tail.length > 0) statements.push(tail);
-  return statements;
-}
 async function dbMigrate(paths, options) {
-  const source = await readFile4(resolve3(options.file), "utf8");
-  const statements = splitSqlStatements(source);
-  if (statements.length === 0) {
-    throw new Error(`\u8FC1\u79FB\u6587\u4EF6\u6CA1\u6709\u53EF\u6267\u884C\u8BED\u53E5\uFF1A${options.file}`);
+  const queue = [];
+  for (const file2 of options.files) {
+    const source = await readFile4(resolve3(file2), "utf8");
+    const statements = splitSqlStatements(source);
+    if (statements.length === 0) {
+      throw new Error(`\u8FC1\u79FB\u6587\u4EF6\u6CA1\u6709\u53EF\u6267\u884C\u8BED\u53E5\uFF1A${file2}`);
+    }
+    for (const statement of statements) queue.push({ file: file2, statement });
   }
   const { project: project2 } = await open2(paths, options);
   const applied = [];
   const changes = [];
-  for (const statement of statements) {
+  for (const { file: file2, statement } of queue) {
     try {
       const result = await dbExec(paths, {
         cwd: options.cwd,
@@ -3985,7 +4094,7 @@ async function dbMigrate(paths, options) {
         projectId: project2,
         applied,
         changes,
-        failed: { statement, code, message }
+        failed: { file: file2, statement, code, message }
       };
     }
   }
@@ -3996,12 +4105,14 @@ var init_db2 = __esm({
     "use strict";
     init_auth();
     init_client();
+    init_sql_split();
+    init_sql_split();
   }
 });
 
 // packages/cli/src/serve/sqlite-driver.ts
 import { mkdir as mkdir5 } from "node:fs/promises";
-import { dirname as dirname7, resolve as resolve4 } from "node:path";
+import { dirname as dirname6, resolve as resolve4 } from "node:path";
 function isBun(versions) {
   return versions["bun"] !== void 0 && versions["bun"] !== "";
 }
@@ -4051,7 +4162,7 @@ async function openSqliteProjectDriver(file2, options = {}) {
     throw new Error(`${moduleName} \u672A\u5BFC\u51FA ${ctorName}\uFF1A\u5F53\u524D\u8FD0\u884C\u65F6\u7684 SQLite \u5185\u5EFA\u6A21\u5757\u4E0D\u53EF\u7528`);
   }
   const target = file2 === ":memory:" ? file2 : resolve4(file2);
-  if (target !== ":memory:") await mkdir5(dirname7(target), { recursive: true });
+  if (target !== ":memory:") await mkdir5(dirname6(target), { recursive: true });
   const database = new Ctor(target);
   database.exec("PRAGMA journal_mode = WAL; PRAGMA foreign_keys = ON;");
   return {
@@ -4090,7 +4201,7 @@ var init_sqlite_driver = __esm({
 
 // packages/cli/src/serve/db-mode.ts
 import { readFile as readFile5 } from "node:fs/promises";
-import { join as join7, relative, resolve as resolve5 } from "node:path";
+import { join as join8, relative, resolve as resolve5 } from "node:path";
 function isServeDbMode(value) {
   return SERVE_DB_MODES.includes(value.trim().toLowerCase());
 }
@@ -4125,7 +4236,7 @@ function displayPath(cwd, target) {
   return rel.startsWith("..") ? target : rel.split(/[\\/]/u).join("/");
 }
 function simDbTarget(cwd) {
-  return displayPath(cwd, join7(simDir(cwd), "db.json"));
+  return displayPath(cwd, join8(simDir(cwd), "db.json"));
 }
 function resolveLocalDbTarget(cwd, options) {
   const mode = resolveServeDbMode(options.db);
@@ -4211,7 +4322,7 @@ var init_db_mode = __esm({
 
 // packages/cli/src/sim/env.ts
 import { readFile as readFile6 } from "node:fs/promises";
-import { join as join8 } from "node:path";
+import { join as join9 } from "node:path";
 function parseEnv(content) {
   const env = {};
   for (const raw of content.split(/\r?\n/)) {
@@ -4226,8 +4337,8 @@ function parseEnv(content) {
   return env;
 }
 async function loadSimEnv(cwd, config2 = {}) {
-  const envRoot = await readFile6(join8(cwd, ".env"), "utf8").catch(() => "");
-  const envLocal = await readFile6(join8(cwd, ".env.local"), "utf8").catch(() => "");
+  const envRoot = await readFile6(join9(cwd, ".env"), "utf8").catch(() => "");
+  const envLocal = await readFile6(join9(cwd, ".env.local"), "utf8").catch(() => "");
   const merged = { ...parseEnv(envRoot), ...parseEnv(envLocal) };
   for (const secret of config2.secrets ?? []) {
     if (merged[secret] !== void 0) continue;
@@ -4247,6 +4358,32 @@ var init_env = __esm({
   }
 });
 
+// packages/cli/src/sim/fetch-config.ts
+function resolveLocalFetchConfig(simEnv) {
+  const rawAllowlist = simEnv.FUNCTIONS_FETCH_ALLOWLIST;
+  if (rawAllowlist === void 0) return void 0;
+  const rawTimeout = simEnv.FUNCTIONS_FETCH_TIMEOUT_MS;
+  let timeoutMs = LOCAL_FETCH_TIMEOUT_MS_DEFAULT;
+  if (rawTimeout !== void 0 && rawTimeout.trim() !== "") {
+    const parsed = Number(rawTimeout);
+    if (!Number.isInteger(parsed) || parsed <= 0) {
+      throw new Error(
+        `[adep] FUNCTIONS_FETCH_TIMEOUT_MS \u975E\u6CD5\uFF1A"${rawTimeout}"\uFF08\u987B\u4E3A\u6B63\u6574\u6570\u6BEB\u79D2\u6570\uFF1B\u4E0D\u914D\u5219\u7F3A\u7701 ${LOCAL_FETCH_TIMEOUT_MS_DEFAULT}\uFF09`
+      );
+    }
+    timeoutMs = parsed;
+  }
+  return { allowlist: parseNameList(rawAllowlist), timeoutMs };
+}
+var LOCAL_FETCH_TIMEOUT_MS_DEFAULT;
+var init_fetch_config = __esm({
+  "packages/cli/src/sim/fetch-config.ts"() {
+    "use strict";
+    init_manifest();
+    LOCAL_FETCH_TIMEOUT_MS_DEFAULT = 1e4;
+  }
+});
+
 // packages/cli/src/sim/invoke.ts
 function resolveFunctionEntry(files, fnName) {
   const flat = `${fnName}.ts`;
@@ -4376,6 +4513,11 @@ var init_boundary = __esm({
         kind: "diff",
         title: "\u4E0D\u8BA1\u91CF",
         detail: "\u672C\u6A21\u62DF\u8FD0\u884C\u65F6\u4E0D\u4EA7\u51FA\u8BA1\u91CF\u4E8B\u4EF6\uFF0C\u4E5F\u4E0D\u5199 billing\uFF1B\u79BB\u7EBF\u5F00\u53D1\u4E0D\u8BA1\u8D39\u3002"
+      },
+      {
+        kind: "diff",
+        title: "\u51FA\u7F51\u7531\u767D\u540D\u5355\u63A7\u5236",
+        detail: "cloud.fetch \u9ED8\u8BA4\u65E0\u7F51\u7EDC\uFF08\u672A\u914D\u7F6E\u65F6\u8C03\u7528\u629B FN_FETCH_DISABLED\uFF09\uFF1B.env \u914D FUNCTIONS_FETCH_ALLOWLIST\uFF08\u9017\u53F7\u5206\u9694\u4E3B\u673A\uFF0C*. \u901A\u914D\uFF1BFUNCTIONS_FETCH_TIMEOUT_MS \u7F3A\u7701 10s\uFF09\u540E\u91CD\u542F\u6CE8\u5165\u53D7\u63A7 fetch\u2014\u2014\u95E8\u7981\u4E0E\u7EBF\u4E0A\u4E00\u81F4\uFF08\u767D\u540D\u5355 / \u8D85\u65F6 / \u91CD\u5B9A\u5411\u9010\u8DF3\u590D\u68C0\uFF09\uFF0C\u4F46\u672C\u5730\u7531\u5F00\u53D1\u673A\u7F51\u7EDC\u6808\u76F4\u8FDE\uFF0C\u65E0\u5E73\u53F0\u51FA\u7F51\u4E2D\u7EE7\u4E0E\u5BA1\u8BA1\u3002"
       }
     ];
   }
@@ -4383,9 +4525,9 @@ var init_boundary = __esm({
 
 // packages/cli/src/ts-config.ts
 import { stat as stat4, readFile as readFile7 } from "node:fs/promises";
-import { join as join9 } from "node:path";
+import { join as join10 } from "node:path";
 async function loadAdepConfigModule(cwd) {
-  const configPath = join9(cwd, "adep.config.ts");
+  const configPath = join10(cwd, "adep.config.ts");
   try {
     await stat4(configPath);
   } catch {
@@ -5746,7 +5888,7 @@ var init_chain = __esm({
 // packages/runtime/src/functions/runtime/worker-entry.ts
 import { parentPort, workerData } from "node:worker_threads";
 import { createRequire } from "node:module";
-import { join as join10 } from "node:path";
+import { join as join11 } from "node:path";
 function errorMessageOf2(error62) {
   if (error62 instanceof Error) return error62.message;
   if (typeof error62 === "object" && error62 !== null && "message" in error62) {
@@ -5801,7 +5943,7 @@ function errorMessageWithLocation(error62, files) {
 }
 function createBareResolver(deps) {
   const platformRequire = createRequire(import.meta.url);
-  const depsRequire = deps.dir === null ? null : createRequire(join10(deps.dir, "__deps__.js"));
+  const depsRequire = deps.dir === null ? null : createRequire(join11(deps.dir, "__deps__.js"));
   return (request) => {
     if (deps.builtin.includes(request)) return platformRequire(request);
     const root = splitBareSpecifier(request);
@@ -5994,13 +6136,127 @@ var init_function_source = __esm({
   }
 });
 
+// packages/runtime/src/shared/multipart.ts
+function extractBoundary(contentType) {
+  const match = /boundary\s*=\s*(?:"([^"]+)"|([^;\s]+))/i.exec(contentType);
+  if (match === null) {
+    throw new MultipartParseError("Content-Type \u7F3A\u5C11 boundary \u53C2\u6570\uFF0C\u65E0\u6CD5\u89E3\u6790 multipart \u8BF7\u6C42\u4F53");
+  }
+  const boundary = match[1] ?? match[2];
+  if (boundary === void 0 || boundary.length === 0) {
+    throw new MultipartParseError("Content-Type \u7684 boundary \u4E3A\u7A7A");
+  }
+  return boundary;
+}
+function indexOfSequence(haystack, needle, from) {
+  outer: for (let i = from; i + needle.length <= haystack.length; i++) {
+    for (let j = 0; j < needle.length; j++) {
+      if (haystack[i + j] !== needle[j]) continue outer;
+    }
+    return i;
+  }
+  return -1;
+}
+function unquote(value) {
+  return value.replace(/\\(.)/g, "$1");
+}
+function parseMultipart(contentType, raw) {
+  const boundary = extractBoundary(contentType);
+  const delim = encoder2.encode(`--${boundary}`);
+  const positions = [];
+  scan: for (let i = 0; i + delim.length <= raw.length; i++) {
+    if (raw[i] !== delim[0]) continue;
+    for (let j = 1; j < delim.length; j++) {
+      if (raw[i + j] !== delim[j]) continue scan;
+    }
+    positions.push(i);
+  }
+  if (positions.length === 0) {
+    throw new MultipartParseError(
+      `\u8BF7\u6C42\u4F53\u91CC\u627E\u4E0D\u5230 boundary "${boundary}" \u7684\u5206\u9694\u7B26\u2014\u2014\u53EF\u80FD\u662F\u8BF7\u6C42\u88AB\u622A\u65AD\u6216 Content-Type \u4E0E\u8BF7\u6C42\u4F53\u4E0D\u5339\u914D`
+    );
+  }
+  const lastPos = positions[positions.length - 1];
+  if (raw[lastPos + delim.length] !== 45 || raw[lastPos + delim.length + 1] !== 45) {
+    throw new MultipartParseError("multipart \u6570\u636E\u88AB\u622A\u65AD\uFF1A\u7F3A\u5C11\u7EC8\u7ED3\u5206\u9694\u7B26 --boundary--");
+  }
+  const files = [];
+  const fields = {};
+  let fieldCount = 0;
+  for (let k = 0; k + 1 < positions.length; k++) {
+    const partStart = positions[k] + delim.length + 2;
+    const partEnd = positions[k + 1] - 2;
+    if (raw[partStart - 2] !== 13 || raw[partStart - 1] !== 10) {
+      throw new MultipartParseError("multipart \u5206\u9694\u7B26\u540E\u7F3A\u5C11 CRLF\uFF0C\u8BF7\u6C42\u4F53\u683C\u5F0F\u975E\u6CD5");
+    }
+    if (partEnd < partStart) {
+      throw new MultipartParseError("multipart part \u5185\u5BB9\u4E3A\u7A7A\uFF08header \u4E0E\u6B63\u6587\u90FD\u4E0D\u5B58\u5728\uFF09");
+    }
+    const part = raw.subarray(partStart, partEnd);
+    const headerSep = indexOfSequence(part, HEADER_BODY_SEP, 0);
+    if (headerSep < 0) {
+      throw new MultipartParseError("multipart part \u7F3A\u5C11 header \u4E0E\u6B63\u6587\u4E4B\u95F4\u7684\u7A7A\u884C\u5206\u9694");
+    }
+    const headerLines = decoder2.decode(part.subarray(0, headerSep)).split("\r\n");
+    const data = part.subarray(headerSep + HEADER_BODY_SEP.length);
+    const disposition = headerLines.find(
+      (line) => line.toLowerCase().startsWith("content-disposition:")
+    );
+    if (disposition === void 0) {
+      throw new MultipartParseError("multipart part \u7F3A\u5C11 Content-Disposition \u5934");
+    }
+    const nameMatch = /name="((?:[^"\\]|\\.)*)"/.exec(disposition);
+    if (nameMatch === null) {
+      throw new MultipartParseError("multipart part \u7684 Content-Disposition \u7F3A\u5C11 name \u53C2\u6570");
+    }
+    const fieldName = unquote(nameMatch[1]);
+    const filenameMatch = /filename="((?:[^"\\]|\\.)*)"/.exec(disposition);
+    if (filenameMatch !== null) {
+      const clientName = unquote(filenameMatch[1]);
+      if (clientName === "") continue;
+      const typeLine = headerLines.find((line) => line.toLowerCase().startsWith("content-type:"));
+      const type = typeLine === void 0 ? "application/octet-stream" : typeLine.slice(typeLine.indexOf(":") + 1).trim();
+      files.push({ name: clientName, type, size: data.length, data });
+    } else {
+      const value = decoder2.decode(data);
+      const prev = fields[fieldName];
+      if (prev === void 0) fields[fieldName] = value;
+      else if (typeof prev === "string") fields[fieldName] = [prev, value];
+      else fields[fieldName] = [...prev, value];
+      fieldCount++;
+    }
+  }
+  return { fields: fieldCount > 0 ? fields : void 0, files };
+}
+var MultipartParseError, HEADER_BODY_SEP, encoder2, decoder2;
+var init_multipart = __esm({
+  "packages/runtime/src/shared/multipart.ts"() {
+    "use strict";
+    MultipartParseError = class extends Error {
+      constructor(message) {
+        super(message);
+        this.name = "MultipartParseError";
+      }
+    };
+    HEADER_BODY_SEP = [13, 10, 13, 10];
+    encoder2 = new TextEncoder();
+    decoder2 = new TextDecoder();
+  }
+});
+
 // packages/cli/src/dev-shared.ts
 import { readdir as readdir2, readFile as readFile8 } from "node:fs/promises";
-import { join as join11 } from "node:path";
-function bearerUserResolverFromEnv() {
-  const raw = process.env.ADEP_AUTH_ISSUER;
-  if (raw === void 0 || raw.trim() === "") return void 0;
-  return createBearerUserResolver(raw.trim());
+import { join as join12 } from "node:path";
+function bearerUserResolverFromEnv(fileEnv = {}) {
+  const raw = firstNonEmpty(process.env.ADEP_AUTH_ISSUER, fileEnv.ADEP_AUTH_ISSUER);
+  return raw === void 0 ? void 0 : createBearerUserResolver(raw);
+}
+function firstNonEmpty(...values) {
+  for (const value of values) {
+    const trimmed = value?.trim();
+    if (trimmed !== void 0 && trimmed !== "") return trimmed;
+  }
+  return void 0;
 }
 function createBearerUserResolver(issuer) {
   const userinfoUrl = `${issuer.replace(/\/+$/, "")}/oauth/userinfo`;
@@ -6037,7 +6293,7 @@ async function collectFunctions(dir, readImpl = (path) => readFile8(path, "utf8"
     }
     for (const entry of entries) {
       const rel = prefix.length === 0 ? entry.name : `${prefix}/${entry.name}`;
-      const full = join11(sub, entry.name);
+      const full = join12(sub, entry.name);
       if (entry.isDirectory()) {
         await walk(full, rel);
       } else if (entry.isFile() && isRuntimeSource(entry.name)) {
@@ -6067,25 +6323,41 @@ function mergeSharedIntoFunctions(files) {
   }
   return out;
 }
-function bodyOf(req) {
-  return new Promise((resolveBody, rejectBody) => {
+function readRawBody(req) {
+  return new Promise((resolveRaw, rejectRaw) => {
     const chunks = [];
     req.on("data", (chunk) => chunks.push(chunk));
-    req.on("end", () => {
-      const raw = Buffer.concat(chunks).toString("utf8");
-      if (raw.length === 0) {
-        resolveBody(void 0);
-        return;
-      }
-      try {
-        resolveBody(JSON.parse(raw));
-      } catch {
-        resolveBody(raw);
-      }
-    });
-    req.on("error", rejectBody);
+    req.on("end", () => resolveRaw(Buffer.concat(chunks)));
+    req.on("error", rejectRaw);
   });
 }
+async function bodyOf(req) {
+  const raw = (await readRawBody(req)).toString("utf8");
+  if (raw.length === 0) return void 0;
+  try {
+    return JSON.parse(raw);
+  } catch {
+    return raw;
+  }
+}
+async function bodyWithFiles(req) {
+  const contentType = String(req.headers["content-type"] ?? "");
+  if (!contentType.toLowerCase().startsWith("multipart/form-data")) {
+    return { body: await bodyOf(req) };
+  }
+  const bytes = await readRawBody(req);
+  let parsed;
+  try {
+    parsed = parseMultipart(contentType, bytes);
+  } catch (error62) {
+    const message = error62 instanceof MultipartParseError ? error62.message : `multipart \u89E3\u6790\u5931\u8D25\uFF1A${error62 instanceof Error ? error62.message : String(error62)}`;
+    throw new ExecutorError(400, "FN_MULTIPART_INVALID", message);
+  }
+  return {
+    body: parsed.fields,
+    ...parsed.files.length > 0 ? { files: [...parsed.files] } : {}
+  };
+}
 function writeJson(res, status, payload) {
   res.writeHead(status, { "content-type": "application/json" });
   res.end(JSON.stringify(payload));
@@ -6100,13 +6372,14 @@ async function requestInput(url2, req, readBody) {
   for (const [key, value] of Object.entries(req.headers)) {
     if (typeof value === "string") headers[key] = value;
   }
-  const body = req.method === "GET" || req.method === "HEAD" ? void 0 : await readBody(req);
+  const parsed = req.method === "GET" || req.method === "HEAD" ? void 0 : await readBody(req);
   return {
     method: req.method ?? "GET",
     path: url2.pathname,
     query,
     headers,
-    ...body === void 0 ? {} : { body }
+    ...parsed?.body === void 0 ? {} : { body: parsed.body },
+    ...parsed?.files === void 0 ? {} : { files: parsed.files }
   };
 }
 var BEARER_TOKEN_RE;
@@ -6115,6 +6388,8 @@ var init_dev_shared = __esm({
     "use strict";
     init_function_source();
     init_shared_source();
+    init_multipart();
+    init_executor_runtime();
     init_invoke();
     BEARER_TOKEN_RE = /^Bearer\s+(.+)$/i;
   }
@@ -6130,8 +6405,8 @@ __export(dev_exports, {
 });
 import { createServer } from "node:http";
 import { watch } from "node:fs";
-import { mkdir as mkdir6, readFile as readFile9, writeFile as writeFile4 } from "node:fs/promises";
-import { basename, join as join12, resolve as resolve6 } from "node:path";
+import { mkdir as mkdir6, readFile as readFile9, writeFile as writeFile5 } from "node:fs/promises";
+import { basename, join as join13, resolve as resolve6 } from "node:path";
 async function loadConfig(cwd) {
   const name = basename(resolve6(cwd));
   const config2 = await loadAdepConfigModule(cwd);
@@ -6176,10 +6451,10 @@ function printBoundaries(log) {
   }
 }
 async function ensureGitignore(cwd) {
-  const gitignorePath = join12(cwd, ".gitignore");
+  const gitignorePath = join13(cwd, ".gitignore");
   const existing = await readFile9(gitignorePath, "utf8").catch(() => "");
   if (existing.split(/\r?\n/).includes(".adep/")) return;
-  await writeFile4(gitignorePath, `${existing.replace(/\n+$/, "")}
+  await writeFile5(gitignorePath, `${existing.replace(/\n+$/, "")}
 .adep/
 `, "utf8");
 }
@@ -6191,16 +6466,25 @@ async function startDevServer(options) {
   if (options.prefix !== void 0) {
     config2.functionsPrefix = options.prefix.replace(/^\/+|\/+$/g, "");
   }
-  const functionsDir = join12(cwd, config2.functionsDir);
+  const functionsDir = join13(cwd, config2.functionsDir);
   const coldStartAt = Date.now();
   const dbTarget = resolveLocalDbTarget(cwd, {
     ...options.db === void 0 ? {} : { db: options.db },
     ...options.dbFile === void 0 ? {} : { dbFile: options.dbFile }
   });
-  const bearerUser = bearerUserResolverFromEnv();
+  const simEnv = await loadSimEnv(cwd).catch(() => ({}));
+  let bearerUser = bearerUserResolverFromEnv(simEnv);
+  const fetchConfig = resolveLocalFetchConfig(simEnv);
   const executor = new WorkerFunctionExecutor({
-    deps: { rootDir: cwd, builtin: LOCAL_BUILTIN_DEPS }
+    deps: { rootDir: cwd, builtin: LOCAL_BUILTIN_DEPS },
+    // GAME-007 本地接线：配置白名单才注入受控 fetch，语义与线上逐字一致。
+    ...fetchConfig === void 0 ? {} : { fetch: fetchConfig }
   });
+  if (fetchConfig !== void 0) {
+    log(
+      `[adep] \u53D7\u63A7 fetch \u5DF2\u6CE8\u5165\uFF08FUNCTIONS_FETCH_ALLOWLIST\uFF09\uFF1A\u767D\u540D\u5355 ${fetchConfig.allowlist.length} \u9879\uFF0C\u8D85\u65F6 ${fetchConfig.timeoutMs}ms`
+    );
+  }
   await mkdir6(functionsDir, { recursive: true });
   const db = await openLocalDbDriver(dbTarget, { cwd, tag: "adep", log });
   const runtime = await createSimRuntime({
@@ -6223,7 +6507,7 @@ async function startDevServer(options) {
   let files = mergeSharedIntoFunctions(await collectFunctions(functionsDir));
   let env = {
     ...config2.environment,
-    ...await loadSimEnv(cwd).catch(() => ({}))
+    ...simEnv
   };
   const dbBundle = runtime.bundle;
   const invokeHandler = createSimInvokeHandler({ executor, files });
@@ -6299,12 +6583,13 @@ async function startDevServer(options) {
   const reload = async () => {
     const [nextFiles, envText2] = await Promise.all([
       collectFunctions(functionsDir).then(mergeSharedIntoFunctions),
-      readFile9(join12(cwd, ".env.local"), "utf8").catch(() => "")
+      readFile9(join13(cwd, ".env.local"), "utf8").catch(() => "")
     ]);
     files = nextFiles;
     env = { ...config2.environment, ...parseEnvFile(envText2) };
+    bearerUser = bearerUserResolverFromEnv(await loadSimEnv(cwd).catch(() => ({})));
   };
-  const envText = await readFile9(join12(cwd, ".env.local"), "utf8").catch(() => "");
+  const envText = await readFile9(join13(cwd, ".env.local"), "utf8").catch(() => "");
   env = { ...config2.environment, ...parseEnvFile(envText) };
   let debounceTimer;
   let watcher;
@@ -6320,7 +6605,7 @@ async function startDevServer(options) {
   }
   const buildInput = async (fnName, entry, url2, req) => {
     const hasEnv = Object.keys(env).length > 0;
-    const request = await requestInput(url2, req, bodyOf);
+    const request = await requestInput(url2, req, bodyWithFiles);
     if (bearerUser !== void 0) request.user = await bearerUser(request.headers);
     return {
       project: { id: "local", slug: config2.name },
@@ -6394,9 +6679,9 @@ async function startDevServer(options) {
       writeJson(res, 404, { error: { code: "FN_NOT_FOUND", message: `\u51FD\u6570 "${fnName}" \u4E0D\u5B58\u5728` } });
       return;
     }
-    const input2 = await buildInput(fnName, entry, url2, req);
     const startedAt = performance.now();
     try {
+      const input2 = await buildInput(fnName, entry, url2, req);
       const result = await executor.execute(input2);
       const durationMs = Math.round(performance.now() - startedAt);
       for (const line of result.logs) log(`[adep]   ${line}`);
@@ -6469,7 +6754,9 @@ async function startDevServer(options) {
   log(`[adep] curl \u793A\u4F8B\uFF1Acurl ${baseUrl}${curlPath}`);
   printBoundaries(log);
   if (bearerUser !== void 0) {
-    log(`[adep] \u767B\u5F55\u5373\u670D\u52A1\uFF1AADEP_AUTH_ISSUER \u5DF2\u914D\u7F6E\uFF0CBearer token \u5C06\u89E3\u6790\u4E3A\u7528\u6237\u8EAB\u4EFD\uFF08userinfo \u7AEF\u70B9\uFF09`);
+    log(
+      `[adep] \u767B\u5F55\u5373\u670D\u52A1\uFF1AADEP_AUTH_ISSUER \u5DF2\u914D\u7F6E\uFF0CBearer token \u5C06\u89E3\u6790\u4E3A\u7528\u6237\u8EAB\u4EFD\uFF08userinfo \u7AEF\u70B9\uFF09`
+    );
   }
   log(`[adep] \u6570\u636E\u5E93\uFF1A${dbLabel} \u2192 ${dbTargetText}`);
   startStateAlarmScheduler();
@@ -6496,6 +6783,7 @@ var init_dev = __esm({
     init_runtime();
     init_db_mode();
     init_env();
+    init_fetch_config();
     init_invoke();
     init_builtin_deps2();
     init_boundary();
@@ -6549,6 +6837,75 @@ var init_prompt = __esm({
   }
 });
 
+// packages/cli/src/export/client.ts
+var client_exports2 = {};
+__export(client_exports2, {
+  createExportApiClient: () => createExportApiClient
+});
+import { writeFile as writeFile8 } from "node:fs/promises";
+function toExportJob(view) {
+  return {
+    id: view.id,
+    status: view.status,
+    progress: view.progress,
+    createdAt: view.createdAt,
+    ...view.stage === void 0 ? {} : { stage: view.stage },
+    ...view.error === void 0 ? {} : { error: view.error },
+    ...view.downloadUrl === void 0 ? {} : { downloadUrl: view.downloadUrl },
+    ...view.bundleSize === void 0 ? {} : { bundleSize: view.bundleSize },
+    ...view.completedAt === void 0 ? {} : { completedAt: view.completedAt }
+  };
+}
+async function createExportApiClient(paths) {
+  const client = await createClient(paths);
+  return {
+    async triggerExport(projectId, options) {
+      const view = await client.request(
+        `/api/v1/projects/${encodeURIComponent(projectId)}/export`,
+        {
+          method: "POST",
+          body: {
+            withData: options.withData,
+            withSource: options.withSource,
+            ...options.withoutSource === true ? { withoutSource: true } : {}
+          }
+        },
+        "EXPORT_TRIGGER_FAILED"
+      );
+      return toExportJob(view);
+    },
+    async getJobStatus(jobId) {
+      const view = await client.request(
+        `/api/v1/exports/${encodeURIComponent(jobId)}`,
+        {},
+        "EXPORT_STATUS_FAILED"
+      );
+      return toExportJob(view);
+    },
+    async downloadBundle(jobId, outputPath) {
+      const download = await client.request(
+        `/api/v1/exports/${encodeURIComponent(jobId)}/download`,
+        {},
+        "EXPORT_DOWNLOAD_FAILED"
+      );
+      if (download.downloadUrl.length === 0) {
+        throw new CliError("EXPORT_BUNDLE_UNAVAILABLE", "\u5BFC\u51FA\u4EA7\u7269\u4E0B\u8F7D URL \u4E3A\u7A7A\uFF0C\u4EA7\u7269\u53EF\u80FD\u5C1A\u4E0D\u53EF\u7528");
+      }
+      const response = await client.download(download.downloadUrl, "EXPORT_DOWNLOAD_FAILED");
+      const bytes = Buffer.from(await response.arrayBuffer());
+      await writeFile8(outputPath, bytes);
+      return { path: outputPath, size: bytes.length };
+    }
+  };
+}
+var init_client2 = __esm({
+  "packages/cli/src/export/client.ts"() {
+    "use strict";
+    init_auth();
+    init_client();
+  }
+});
+
 // shared/deploy-bundle/manifest.ts
 var CURRENT_SCHEMA_VERSION, BundleContentKind, ALLOWED_CONTENT_KINDS;
 var init_manifest2 = __esm({
@@ -6820,7 +7177,7 @@ function zipRead(buf) {
   if (eocd < 0) throw new ZipFormatError("\u627E\u4E0D\u5230 EOCD \u7B7E\u540D");
   const total = r.u16(eocd + 10);
   const centralOffset = r.u32(eocd + 16);
-  const decoder2 = new TextDecoder();
+  const decoder3 = new TextDecoder();
   const out = /* @__PURE__ */ new Map();
   let cursor = centralOffset;
   for (let i = 0; i < total; i++) {
@@ -6834,7 +7191,7 @@ function zipRead(buf) {
     const commentLen = r.u16(cursor + 32);
     const localHeaderOffset = r.u32(cursor + 42);
     if (localHeaderOffset + 30 > buf.length) throw new ZipFormatError("\u672C\u5730\u5934\u504F\u79FB\u8D8A\u754C");
-    const name = decoder2.decode(r.slice(cursor + 46, nameLen));
+    const name = decoder3.decode(r.slice(cursor + 46, nameLen));
     const localNameLen = r.u16(localHeaderOffset + 26);
     const localExtraLen = r.u16(localHeaderOffset + 28);
     const dataStart = localHeaderOffset + 30 + localNameLen + localExtraLen;
@@ -6892,75 +7249,6 @@ var init_zip = __esm({
   }
 });
 
-// packages/cli/src/export/client.ts
-var client_exports2 = {};
-__export(client_exports2, {
-  createExportApiClient: () => createExportApiClient
-});
-import { writeFile as writeFile7 } from "node:fs/promises";
-function toExportJob(view) {
-  return {
-    id: view.id,
-    status: view.status,
-    progress: view.progress,
-    createdAt: view.createdAt,
-    ...view.stage === void 0 ? {} : { stage: view.stage },
-    ...view.error === void 0 ? {} : { error: view.error },
-    ...view.downloadUrl === void 0 ? {} : { downloadUrl: view.downloadUrl },
-    ...view.bundleSize === void 0 ? {} : { bundleSize: view.bundleSize },
-    ...view.completedAt === void 0 ? {} : { completedAt: view.completedAt }
-  };
-}
-async function createExportApiClient(paths) {
-  const client = await createClient(paths);
-  return {
-    async triggerExport(projectId, options) {
-      const view = await client.request(
-        `/api/v1/projects/${encodeURIComponent(projectId)}/export`,
-        {
-          method: "POST",
-          body: {
-            withData: options.withData,
-            withSource: options.withSource,
-            ...options.withoutSource === true ? { withoutSource: true } : {}
-          }
-        },
-        "EXPORT_TRIGGER_FAILED"
-      );
-      return toExportJob(view);
-    },
-    async getJobStatus(jobId) {
-      const view = await client.request(
-        `/api/v1/exports/${encodeURIComponent(jobId)}`,
-        {},
-        "EXPORT_STATUS_FAILED"
-      );
-      return toExportJob(view);
-    },
-    async downloadBundle(jobId, outputPath) {
-      const download = await client.request(
-        `/api/v1/exports/${encodeURIComponent(jobId)}/download`,
-        {},
-        "EXPORT_DOWNLOAD_FAILED"
-      );
-      if (download.downloadUrl.length === 0) {
-        throw new CliError("EXPORT_BUNDLE_UNAVAILABLE", "\u5BFC\u51FA\u4EA7\u7269\u4E0B\u8F7D URL \u4E3A\u7A7A\uFF0C\u4EA7\u7269\u53EF\u80FD\u5C1A\u4E0D\u53EF\u7528");
-      }
-      const response = await client.download(download.downloadUrl, "EXPORT_DOWNLOAD_FAILED");
-      const bytes = Buffer.from(await response.arrayBuffer());
-      await writeFile7(outputPath, bytes);
-      return { path: outputPath, size: bytes.length };
-    }
-  };
-}
-var init_client2 = __esm({
-  "packages/cli/src/export/client.ts"() {
-    "use strict";
-    init_auth();
-    init_client();
-  }
-});
-
 // packages/cli/src/serve/banner.ts
 function isLoopback(host) {
   return host === "127.0.0.1" || host === "localhost" || host === "::1" || host === "[::1]";
@@ -7029,6 +7317,58 @@ var init_banner = __esm({
   }
 });
 
+// packages/cli/src/serve/staleness.ts
+function diffFunctionFiles(snapshot, current) {
+  const changes = [];
+  for (const path of Object.keys(snapshot)) {
+    const before = snapshot[path];
+    const after = current[path];
+    if (after === void 0) changes.push(`\u5220\u9664 ${path}`);
+    else if (before !== after) changes.push(`\u4FEE\u6539 ${path}`);
+  }
+  for (const path of Object.keys(current)) {
+    if (snapshot[path] === void 0) changes.push(`\u65B0\u589E ${path}`);
+  }
+  return changes.toSorted();
+}
+function stalenessWarning(changes) {
+  const shown = changes.slice(0, 3).join("\u3001");
+  const more = changes.length > 3 ? ` \u7B49 ${changes.length} \u5904` : "";
+  return `[serve] \u26A0\uFE0F \u6E90\u7801\u5DF2\u53D8\u66F4\u4F46\u8FDB\u7A0B\u5185\u4ECD\u662F\u65E7\u4EE3\u7801\uFF08${shown}${more}\uFF09\u3002\u8BF7\u91CD\u542F serve \u6216\u6539\u7528 --watch \u70ED\u91CD\u8F7D\u3002`;
+}
+function createStalenessGuard(options) {
+  const { loadedFiles, loadFiles, log } = options;
+  const minIntervalMs = options.minIntervalMs ?? 2e3;
+  let lastScanAt = -Infinity;
+  let warned = false;
+  return {
+    check: async () => {
+      const now = Date.now();
+      if (now - lastScanAt < minIntervalMs) return;
+      lastScanAt = now;
+      let current;
+      try {
+        current = await loadFiles();
+      } catch {
+        return;
+      }
+      const changes = diffFunctionFiles(loadedFiles, current);
+      if (changes.length === 0) {
+        warned = false;
+        return;
+      }
+      if (warned) return;
+      warned = true;
+      log(stalenessWarning(changes));
+    }
+  };
+}
+var init_staleness = __esm({
+  "packages/cli/src/serve/staleness.ts"() {
+    "use strict";
+  }
+});
+
 // shared/sdk/template-params.ts
 function extractTemplateFields(root) {
   if (root === null || typeof root !== "object") {
@@ -7155,8 +7495,8 @@ var init_template_params = __esm({
 });
 
 // packages/cli/src/serve/template-params.ts
-import { readFile as readFile17 } from "node:fs/promises";
-import { join as join22 } from "node:path";
+import { readFile as readFile20 } from "node:fs/promises";
+import { join as join28 } from "node:path";
 import { parse as parse3 } from "yaml";
 function mergeTemplateEnvSource(source) {
   return { ...source.processEnv, ...source.dotenv, ...source.dotenvLocal };
@@ -7164,7 +7504,7 @@ function mergeTemplateEnvSource(source) {
 async function loadTemplateFields(cwd) {
   let text;
   try {
-    text = await readFile17(join22(cwd, TEMPLATE_PARAMS_FILE), "utf8");
+    text = await readFile20(join28(cwd, TEMPLATE_PARAMS_FILE), "utf8");
   } catch {
     return null;
   }
@@ -7180,7 +7520,7 @@ async function loadTemplateFields(cwd) {
   return extractTemplateFields(root);
 }
 async function readDotenvFile(cwd, name) {
-  const text = await readFile17(join22(cwd, name), "utf8").catch(() => "");
+  const text = await readFile20(join28(cwd, name), "utf8").catch(() => "");
   if (text === "") return {};
   return parseEnvFile(text);
 }
@@ -7235,8 +7575,8 @@ __export(server_exports, {
 });
 import { createServer as createServer2 } from "node:http";
 import { watch as watch2 } from "node:fs";
-import { mkdir as mkdir12, readFile as readFile18, stat as stat12 } from "node:fs/promises";
-import { extname, join as join23, relative as relative4, resolve as resolve12 } from "node:path";
+import { mkdir as mkdir14, readFile as readFile21, stat as stat12 } from "node:fs/promises";
+import { extname, join as join29, relative as relative4, resolve as resolve12 } from "node:path";
 function envNumber(name) {
   const raw = process.env[name];
   if (raw === void 0 || raw.trim() === "") return void 0;
@@ -7269,8 +7609,7 @@ async function startServeServer(options) {
     ...options.dbFile === void 0 ? {} : { dbFile: options.dbFile }
   });
   const config2 = await loadConfig(cwd);
-  const functionsDir = join23(cwd, config2.functionsDir);
-  const bearerUser = bearerUserResolverFromEnv();
+  const functionsDir = join29(cwd, config2.functionsDir);
   let hasStatic = false;
   try {
     const publicStat = await stat12(staticDir);
@@ -7281,9 +7620,10 @@ async function startServeServer(options) {
   const loadFunctionFiles = async () => mergeSharedIntoFunctions(await collectFunctions(functionsDir));
   let files = await loadFunctionFiles();
   let functionNames = listFunctionNames(files);
-  const envText = await readFile18(join23(cwd, ".env.local"), "utf8").catch(() => "");
+  const envText = await readFile21(join29(cwd, ".env.local"), "utf8").catch(() => "");
   let env = parseEnvFile(envText);
   let simEnv = await loadSimEnv(cwd).catch(() => ({}));
+  let bearerUser = bearerUserResolverFromEnv(simEnv);
   const dotenvFile = await readDotenvFile(cwd, ".env");
   let templateEnv;
   try {
@@ -7322,21 +7662,35 @@ async function startServeServer(options) {
       log
     });
   }
+  const fetchConfig = resolveLocalFetchConfig(simEnv);
   const executor = new WorkerFunctionExecutor({
-    deps: { rootDir: cwd, builtin: LOCAL_BUILTIN_DEPS }
+    deps: { rootDir: cwd, builtin: LOCAL_BUILTIN_DEPS },
+    ...fetchConfig === void 0 ? {} : { fetch: fetchConfig }
   });
+  if (fetchConfig !== void 0) {
+    log(
+      `[adep] \u53D7\u63A7 fetch \u5DF2\u6CE8\u5165\uFF08FUNCTIONS_FETCH_ALLOWLIST\uFF09\uFF1A\u767D\u540D\u5355 ${fetchConfig.allowlist.length} \u9879\uFF0C\u8D85\u65F6 ${fetchConfig.timeoutMs}ms`
+    );
+  }
   const dbBundle = runtime.bundle;
   let invokeHandler = createSimInvokeHandler({ executor, files });
+  const stalenessGuard = options.watch === true ? void 0 : createStalenessGuard({
+    loadedFiles: { ...files },
+    loadFiles: loadFunctionFiles,
+    log,
+    ...options.stalenessCheckIntervalMs === void 0 ? {} : { minIntervalMs: options.stalenessCheckIntervalMs }
+  });
   let stopWatch;
   if (options.watch === true) {
     const reload = async () => {
       const [nextFiles, envLocalText] = await Promise.all([
         loadFunctionFiles(),
-        readFile18(join23(cwd, ".env.local"), "utf8").catch(() => "")
+        readFile21(join29(cwd, ".env.local"), "utf8").catch(() => "")
       ]);
       files = nextFiles;
       env = parseEnvFile(envLocalText);
       simEnv = await loadSimEnv(cwd).catch(() => ({}));
+      bearerUser = bearerUserResolverFromEnv(simEnv);
       invokeHandler = createSimInvokeHandler({ executor, files });
       functionNames = listFunctionNames(files);
       log(`[serve] \u70ED\u91CD\u8F7D\uFF1A\u68C0\u6D4B\u5230\u53D8\u66F4\uFF0C\u5DF2\u91CD\u65B0\u52A0\u8F7D ${functionNames.length} \u4E2A\u51FD\u6570`);
@@ -7349,7 +7703,7 @@ async function startServeServer(options) {
         void reload();
       }, 120);
     };
-    await mkdir12(functionsDir, { recursive: true }).catch(() => void 0);
+    await mkdir14(functionsDir, { recursive: true }).catch(() => void 0);
     try {
       watchers.push(watch2(functionsDir, { recursive: true }, scheduleReload));
     } catch {
@@ -7367,7 +7721,7 @@ async function startServeServer(options) {
   const buildInput = async (fnName, entry, url2, req) => {
     const hasEnv = Object.keys(env).length > 0 || Object.keys(simEnv).length > 0 || Object.keys(config2.environment ?? {}).length > 0;
     const mergedEnv = { ...config2.environment, ...simEnv, ...env };
-    const request = await requestInput(url2, req, bodyOf);
+    const request = await requestInput(url2, req, bodyWithFiles);
     if (bearerUser !== void 0) request.user = await bearerUser(request.headers);
     return {
       project: { id: "local", slug: config2.name },
@@ -7404,31 +7758,31 @@ async function startServeServer(options) {
   const serveStatic = async (pathname, res) => {
     if (!hasStatic) return false;
     const safePath = pathname.replace(/\.\.\//g, "").replace(/^\//, "");
-    const filePath = join23(staticDir, safePath);
-    const resolvedPath = safePath === "" || safePath === "/" ? join23(filePath, "index.html") : filePath;
+    const filePath = join29(staticDir, safePath);
+    const resolvedPath = safePath === "" || safePath === "/" ? join29(filePath, "index.html") : filePath;
     try {
       const fileStat = await stat12(resolvedPath);
       if (fileStat.isDirectory()) {
-        const indexPath = join23(resolvedPath, "index.html");
+        const indexPath = join29(resolvedPath, "index.html");
         try {
           const indexStat = await stat12(indexPath);
           if (indexStat.isFile()) {
-            sendStaticFile(res, indexPath, await readFile18(indexPath));
+            sendStaticFile(res, indexPath, await readFile21(indexPath));
             return true;
           }
         } catch {
         }
         return false;
       }
-      sendStaticFile(res, resolvedPath, await readFile18(resolvedPath));
+      sendStaticFile(res, resolvedPath, await readFile21(resolvedPath));
       return true;
     } catch {
       if (options.spaFallback === true) {
         const ext = extname(pathname);
         if (ext === "" || ext === ".html") {
           try {
-            const indexContent = await readFile18(join23(staticDir, "index.html"));
-            sendStaticFile(res, join23(staticDir, "index.html"), indexContent);
+            const indexContent = await readFile21(join29(staticDir, "index.html"));
+            sendStaticFile(res, join29(staticDir, "index.html"), indexContent);
             return true;
           } catch {
           }
@@ -7511,15 +7865,16 @@ async function startServeServer(options) {
         });
         return;
       }
+      await stalenessGuard?.check();
       const entry = resolveFunctionEntry(files, fnName);
       if (entry === void 0) {
         log(`[serve] ${req.method ?? "GET"} ${pathname} -> 404\uFF08\u51FD\u6570\u4E0D\u5B58\u5728\uFF09`);
         writeJson(res, 404, { error: { code: "FN_NOT_FOUND", message: `\u51FD\u6570 "${fnName}" \u4E0D\u5B58\u5728` } });
         return;
       }
-      const input2 = await buildInput(fnName, entry, url2, req);
       const startedAt = performance.now();
       try {
+        const input2 = await buildInput(fnName, entry, url2, req);
         const result = await executor.execute(input2);
         const durationMs = Math.round(performance.now() - startedAt);
         if (options.watch === true) {
@@ -7656,9 +8011,11 @@ var init_server = __esm({
     init_runtime();
     init_storage();
     init_env();
+    init_fetch_config();
     init_invoke();
     init_dev();
     init_banner();
+    init_staleness();
     init_template_params2();
     init_adep_env_inject();
     init_template_params();
@@ -7688,6 +8045,20 @@ var init_server = __esm({
   }
 });
 
+// packages/cli/src/hash.ts
+import { createHash as createHash4 } from "node:crypto";
+function sha256Hex(content) {
+  return createHash4("sha256").update(content).digest("hex");
+}
+function sha256HexOfBytes(bytes) {
+  return createHash4("sha256").update(bytes).digest("hex");
+}
+var init_hash = __esm({
+  "packages/cli/src/hash.ts"() {
+    "use strict";
+  }
+});
+
 // packages/cli/src/deploy.ts
 var deploy_exports = {};
 __export(deploy_exports, {
@@ -7696,9 +8067,8 @@ __export(deploy_exports, {
   collectShared: () => collectShared,
   deploy: () => deploy
 });
-import { createHash as createHash4 } from "node:crypto";
-import { readdir as readdir8, readFile as readFile19 } from "node:fs/promises";
-import { join as join24, resolve as resolve13, basename as basename4, relative as relative5, sep } from "node:path";
+import { readdir as readdir9, readFile as readFile22 } from "node:fs/promises";
+import { join as join30, resolve as resolve13, basename as basename4, relative as relative5, sep } from "node:path";
 function functionUrlBase(prefix) {
   const raw = (prefix ?? "/api").trim();
   const normalized = raw === "/" ? "/" : raw.replace(/\/+$/, "");
@@ -7710,7 +8080,7 @@ function isRuntimeSource2(name) {
 async function collectFunctionFiles(functionsDir) {
   let dirents;
   try {
-    dirents = await readdir8(functionsDir, { withFileTypes: true });
+    dirents = await readdir9(functionsDir, { withFileTypes: true });
   } catch {
     return {};
   }
@@ -7724,10 +8094,10 @@ async function collectFunctionFiles(functionsDir) {
   if (conflicting.length > 0) throw new AmbiguousFunctionError(functionsDir, conflicting);
   const out = {};
   for (const name of flatNames) {
-    out[name] = { [`${name}.ts`]: await readFile19(join24(functionsDir, `${name}.ts`), "utf8") };
+    out[name] = { [`${name}.ts`]: await readFile22(join30(functionsDir, `${name}.ts`), "utf8") };
   }
   for (const name of dirNames) {
-    const files = await collectFunctionDir(join24(functionsDir, name));
+    const files = await collectFunctionDir(join30(functionsDir, name));
     if (files["index.ts"] === void 0) continue;
     out[name] = files;
   }
@@ -7738,7 +8108,7 @@ async function collectFunctionDir(absDir) {
   const walk = async (dir, prefix) => {
     let entries;
     try {
-      entries = await readdir8(dir, { withFileTypes: true });
+      entries = await readdir9(dir, { withFileTypes: true });
     } catch {
       return;
     }
@@ -7746,39 +8116,36 @@ async function collectFunctionDir(absDir) {
       const rel = prefix === "" ? entry.name : `${prefix}/${entry.name}`;
       if (entry.isDirectory()) {
         if (entry.name === "__tests__" || IGNORED_DIRS.has(entry.name)) continue;
-        await walk(join24(dir, entry.name), rel);
+        await walk(join30(dir, entry.name), rel);
         continue;
       }
       if (!isRuntimeSource2(entry.name)) continue;
-      files[rel] = await readFile19(join24(dir, entry.name), "utf8");
+      files[rel] = await readFile22(join30(dir, entry.name), "utf8");
     }
   };
   await walk(absDir, "");
   return files;
 }
-function sha256Hex(content) {
-  return createHash4("sha256").update(content).digest("hex");
-}
 async function collectShared(functionsDir) {
-  const sharedDir = join24(functionsDir, FUNCTION_SHARED_DIR);
+  const sharedDir = join30(functionsDir, FUNCTION_SHARED_DIR);
   const files = {};
   const walk = async (dir) => {
     let entries;
     try {
-      entries = await readdir8(dir, { withFileTypes: true });
+      entries = await readdir9(dir, { withFileTypes: true });
     } catch {
       return;
     }
     for (const entry of entries) {
       if (entry.isDirectory()) {
         if (entry.name === "__tests__" || entry.name === "node_modules") continue;
-        await walk(join24(dir, entry.name));
+        await walk(join30(dir, entry.name));
         continue;
       }
       if (!isRuntimeSource2(entry.name)) continue;
-      const full = join24(dir, entry.name);
+      const full = join30(dir, entry.name);
       const rel = relative5(sharedDir, full).split(sep).join("/");
-      files[`${SHARED_SOURCE_ROOT}${rel}`] = await readFile19(full, "utf8");
+      files[`${SHARED_SOURCE_ROOT}${rel}`] = await readFile22(full, "utf8");
     }
   };
   await walk(sharedDir);
@@ -7790,7 +8157,7 @@ async function deploy(paths, options) {
   const cwd = resolve13(options.cwd);
   const config2 = await loadConfig(cwd);
   const slug = options.slug ?? config2.name;
-  const functionsDir = options.functionsDir === void 0 ? join24(cwd, config2.functionsDir) : resolve13(cwd, options.functionsDir);
+  const functionsDir = options.functionsDir === void 0 ? join30(cwd, config2.functionsDir) : resolve13(cwd, options.functionsDir);
   const local = await collectFunctionFiles(functionsDir);
   if (Object.keys(local).length === 0) {
     throw new CliError("NO_FUNCTIONS", `${functionsDir} \u4E0B\u6CA1\u6709\u51FD\u6570\u6587\u4EF6`);
@@ -7894,6 +8261,7 @@ var init_deploy = __esm({
     init_function_source();
     init_auth();
     init_client();
+    init_hash();
     init_dev();
     init_net();
     init_shared_source();
@@ -7921,8 +8289,8 @@ __export(storage_exports, {
   storageRemove: () => storageRemove,
   storageUpload: () => storageUpload
 });
-import { mkdir as mkdir13, readFile as readFile20, stat as stat13, writeFile as writeFile11 } from "node:fs/promises";
-import { basename as basename5, dirname as dirname13, extname as extname2, join as join25, resolve as resolve14 } from "node:path";
+import { mkdir as mkdir15, readFile as readFile23, stat as stat13, writeFile as writeFile15 } from "node:fs/promises";
+import { basename as basename5, dirname as dirname12, extname as extname2, join as join31, resolve as resolve14 } from "node:path";
 function envQuery2(options) {
   return options.environment === void 0 ? "" : `?environment=${options.environment}`;
 }
@@ -7967,7 +8335,7 @@ async function storageUpload(paths, options) {
     throw new CliError("FILE_NOT_FOUND", `\u672C\u5730\u6587\u4EF6\u4E0D\u5B58\u5728\uFF1A${local}`);
   }
   const visibility = options.visibility ?? "private";
-  const bytes = await readFile20(local);
+  const bytes = await readFile23(local);
   const form = new FormData();
   form.set("path", options.path);
   form.set("visibility", visibility);
@@ -8014,9 +8382,9 @@ async function storageDownload(paths, options) {
   const url2 = await resolveDownloadUrl(client, project2, options.path, options.environment);
   const response = await client.download(url2, "STORAGE_DOWNLOAD_FAILED");
   const bytes = Buffer.from(await response.arrayBuffer());
-  const output2 = resolve14(options.output ?? join25(resolve14(options.cwd), basename5(options.path)));
-  await mkdir13(dirname13(output2), { recursive: true });
-  await writeFile11(output2, bytes);
+  const output2 = resolve14(options.output ?? join31(resolve14(options.cwd), basename5(options.path)));
+  await mkdir15(dirname12(output2), { recursive: true });
+  await writeFile15(output2, bytes);
   return { path: options.path, output: output2, size: bytes.length };
 }
 async function storageRemove(paths, options) {
@@ -8042,8 +8410,9 @@ __export(hosting_exports, {
   hostingInfo: () => hostingInfo,
   hostingPull: () => hostingPull
 });
-import { readdir as readdir9, readFile as readFile21, stat as stat14 } from "node:fs/promises";
-import { dirname as dirname14, join as join26, relative as relative6, resolve as resolve15, sep as sep2 } from "node:path";
+import { readdir as readdir10, readFile as readFile24, stat as stat14 } from "node:fs/promises";
+import { spawnSync } from "node:child_process";
+import { dirname as dirname13, join as join32, relative as relative6, resolve as resolve15, sep as sep2 } from "node:path";
 async function open5(paths, options) {
   const client = await createClient(paths);
   const project2 = await resolveSlug(resolve15(options.cwd), options.slug);
@@ -8064,12 +8433,12 @@ async function collectSiteFiles(dir) {
   const walk = async (sub) => {
     let entries;
     try {
-      entries = await readdir9(sub, { withFileTypes: true });
+      entries = await readdir10(sub, { withFileTypes: true });
     } catch {
       return;
     }
     for (const entry of entries) {
-      const full = join26(sub, entry.name);
+      const full = join32(sub, entry.name);
       if (entry.isDirectory()) {
         await walk(full);
       } else if (entry.isFile()) {
@@ -8085,25 +8454,70 @@ async function hostingDeploy(paths, options) {
   const { client, project: project2 } = await open5(paths, options);
   const log = options.log ?? ((line) => process.stdout.write(`${line}
 `));
+  if (options.build !== void 0) {
+    log(`[adep] \u6267\u884C\u6784\u5EFA\uFF1A${options.build}`);
+    const runner = spawnSync(options.build, {
+      shell: true,
+      cwd: resolve15(options.cwd),
+      stdio: options.log ? "pipe" : "inherit"
+    });
+    if (runner.status !== 0) {
+      throw new CliError(
+        "BUILD_FAILED",
+        `\u6784\u5EFA\u547D\u4EE4\u5931\u8D25\uFF08exit ${runner.status ?? "\u672A\u77E5"}\uFF09\uFF1A${options.build}`
+      );
+    }
+  }
   const files = await collectSiteFiles(options.dir);
   if (files.size === 0) {
     throw new CliError("NO_SITE_FILES", `\u7AD9\u70B9\u76EE\u5F55\u4E3A\u7A7A\uFF1A${resolve15(options.dir)}`);
   }
-  const uploaded = [];
+  let newestMtimeMs = 0;
+  const localEntries = /* @__PURE__ */ new Map();
   for (const [rel, full] of files) {
+    const [info2, bytes] = await Promise.all([stat14(full), readFile24(full)]);
+    localEntries.set(rel, { bytes, size: info2.size, hash: sha256HexOfBytes(bytes) });
+    newestMtimeMs = Math.max(newestMtimeMs, info2.mtimeMs);
+  }
+  const builtAt = new Date(newestMtimeMs).toISOString();
+  log(`[adep] \u90E8\u7F72\u5185\u5BB9\u6784\u5EFA\u4E8E ${builtAt}\uFF08\u672C\u5730\u76EE\u5F55\u6700\u65B0\u6587\u4EF6\u4FEE\u6539\u65F6\u95F4\uFF09`);
+  const remote = await client.request(
+    `/api/v1/projects/${project2}/hosting`
+  );
+  const remotePublic = /* @__PURE__ */ new Map();
+  for (const entry of remote.files ?? []) {
+    if (entry.visibility === "public" && entry.path.startsWith("site/") && entry.path !== HOSTING_CONFIG_PATH) {
+      remotePublic.set(entry.path.slice("site/".length), entry);
+    }
+  }
+  const uploaded = [];
+  let reused = 0;
+  for (const [rel, local] of localEntries) {
+    const remoteEntry = remotePublic.get(rel);
+    if (remoteEntry !== void 0 && remoteEntry.size === local.size && remoteEntry.url) {
+      const response = await client.download(remoteEntry.url, "HOSTING_COMPARE_FAILED");
+      const remoteBytes = new Uint8Array(await response.arrayBuffer());
+      if (sha256HexOfBytes(remoteBytes) === local.hash) {
+        reused += 1;
+        continue;
+      }
+    }
     log(`[adep] \u4E0A\u4F20 site/${rel}`);
-    const info2 = await stat14(full);
-    const bytes = await readFile21(full);
     const form = new FormData();
     form.set("path", `site/${rel}`);
     form.set("visibility", "public");
     form.set(
       "file",
-      new Blob([bytes], { type: contentTypeOf(rel) }),
+      new Blob([local.bytes], { type: contentTypeOf(rel) }),
       rel.split("/").pop()
     );
     await client.upload(`/api/v1/projects/${project2}/files`, form, "HOSTING_UPLOAD_FAILED");
-    uploaded.push({ path: `site/${rel}`, size: info2.size });
+    uploaded.push({ path: `site/${rel}`, size: local.size });
+  }
+  const identical = uploaded.length === 0;
+  if (identical) {
+    log("\u26A0 \u672C\u6B21\u4E0A\u4F20\u5185\u5BB9\u4E0E\u7EBF\u4E0A\u73B0\u6709\u7248\u672C\u5B8C\u5168\u4E00\u81F4\u2014\u2014\u82E5\u521A\u4FEE\u6539\u8FC7\u6E90\u7801\uFF0C\u53EF\u80FD\u5FD8\u4E86\u5148\u6784\u5EFA\u3002");
+    log("  \u5982\u786E\u5C5E\u91CD\u590D\u90E8\u7F72\uFF08\u4F8B\u5982\u91CD\u8BD5\uFF09\uFF0C\u53EF\u5FFD\u7565\u672C\u8B66\u793A\u3002");
   }
   const config2 = await client.request(
     `/api/v1/projects/${project2}/hosting`,
@@ -8113,7 +8527,7 @@ async function hostingDeploy(paths, options) {
     }
   );
   const info = await hostingInfo(paths, options);
-  return { config: config2.config, siteUrl: info.siteUrl, uploaded };
+  return { config: config2.config, siteUrl: info.siteUrl, uploaded, reused, identical, builtAt };
 }
 async function hostingPull(paths, options) {
   const { client } = await open5(paths, options);
@@ -8121,7 +8535,7 @@ async function hostingPull(paths, options) {
 `));
   const info = await hostingInfo(paths, options);
   const outputDir = resolve15(options.output ?? resolve15(options.cwd));
-  const { mkdir: mkdir15, writeFile: writeFile13 } = await import("node:fs/promises");
+  const { mkdir: mkdir17, writeFile: writeFile17 } = await import("node:fs/promises");
   const files = [];
   for (const entry of info.files) {
     if (entry.visibility !== "public" || entry.path === HOSTING_CONFIG_PATH) continue;
@@ -8131,9 +8545,9 @@ async function hostingPull(paths, options) {
     const response = await client.download(url2, "HOSTING_DOWNLOAD_FAILED");
     const bytes = Buffer.from(await response.arrayBuffer());
     const rel = entry.path.replace(/^site\//, "");
-    const target = join26(outputDir, ...rel.split("/"));
-    await mkdir15(dirname14(target), { recursive: true });
-    await writeFile13(target, bytes);
+    const target = join32(outputDir, ...rel.split("/"));
+    await mkdir17(dirname13(target), { recursive: true });
+    await writeFile17(target, bytes);
     files.push({ path: entry.path, size: bytes.length });
   }
   return { siteUrl: info.siteUrl, outputDir, files };
@@ -8155,6 +8569,7 @@ var init_hosting = __esm({
     "use strict";
     init_client();
     init_auth();
+    init_hash();
     init_storage2();
     HOSTING_CONFIG_PATH = "site/.hosting.json";
   }
@@ -8187,22 +8602,22 @@ __export(frontend_exports, {
   frontendSync: () => frontendSync,
   isStaticFrontendDir: () => isStaticFrontendDir
 });
-import { readdir as readdir10, readFile as readFile22, stat as stat15 } from "node:fs/promises";
-import { join as join27, relative as relative7, sep as sep3 } from "node:path";
+import { readdir as readdir11, readFile as readFile25, stat as stat15 } from "node:fs/promises";
+import { join as join33, relative as relative7, sep as sep3 } from "node:path";
 async function collectFiles(root, dir) {
   const files = /* @__PURE__ */ new Map();
   const skipped = [];
-  const entries = await readdir10(dir, { withFileTypes: true });
+  const entries = await readdir11(dir, { withFileTypes: true });
   for (const entry of entries) {
     if (entry.isDirectory()) {
       if (IGNORED_DIRS2.has(entry.name)) continue;
-      const nested = await collectFiles(root, join27(dir, entry.name));
+      const nested = await collectFiles(root, join33(dir, entry.name));
       for (const [path, content] of nested.files) files.set(path, content);
       skipped.push(...nested.skipped);
       continue;
     }
     if (IGNORED_FILES.has(entry.name)) continue;
-    const full = join27(dir, entry.name);
+    const full = join33(dir, entry.name);
     const rel = relative7(root, full).split(sep3).join("/");
     const info = await stat15(full);
     if (info.size > 1024 * 1024) {
@@ -8210,7 +8625,7 @@ async function collectFiles(root, dir) {
       continue;
     }
     try {
-      const content = await readFile22(full, "utf8");
+      const content = await readFile25(full, "utf8");
       if (content.includes("\0")) {
         skipped.push(rel);
         continue;
@@ -8225,7 +8640,7 @@ async function collectFiles(root, dir) {
 async function frontendSync(paths, options) {
   const log = options.silent === true ? () => void 0 : options.log ?? ((line) => process.stdout.write(`${line}
 `));
-  const webDir = options.dir ?? join27(options.cwd, "web");
+  const webDir = options.dir ?? join33(options.cwd, "web");
   const rootStat = await stat15(webDir).catch(() => null);
   if (rootStat === null || !rootStat.isDirectory()) {
     throw new CliError(
@@ -8285,14 +8700,14 @@ function declaresBuildScript(pkgJson) {
   return typeof build === "string" && build.trim().length > 0;
 }
 async function isStaticFrontendDir(dir) {
-  const pkg = await readFile22(join27(dir, "package.json"), "utf8").catch(() => void 0);
+  const pkg = await readFile25(join33(dir, "package.json"), "utf8").catch(() => void 0);
   if (declaresBuildScript(pkg)) return false;
   const walk = async (sub) => {
-    const entries = await readdir10(sub, { withFileTypes: true });
+    const entries = await readdir11(sub, { withFileTypes: true });
     for (const entry of entries) {
       if (entry.isDirectory()) {
         if (IGNORED_DIRS2.has(entry.name)) continue;
-        if (!await walk(join27(sub, entry.name))) return false;
+        if (!await walk(join33(sub, entry.name))) return false;
         continue;
       }
       if (FRONTEND_TRANSFORM_EXTENSIONS.some((ext) => entry.name.endsWith(ext))) return false;
@@ -8328,12 +8743,12 @@ var fs_exports = {};
 __export(fs_exports, {
   createExportFileSystem: () => createExportFileSystem
 });
-import { mkdir as mkdir14, readFile as readFile24, rm as rm5, stat as stat17, writeFile as writeFile12 } from "node:fs/promises";
-import { dirname as dirname15, join as join30 } from "node:path";
+import { mkdir as mkdir16, readFile as readFile27, rm as rm5, stat as stat17, writeFile as writeFile16 } from "node:fs/promises";
+import { dirname as dirname14, join as join36 } from "node:path";
 function createExportFileSystem() {
   return {
-    readFile: (path) => readFile24(path),
-    writeFile: (path, content) => writeFile12(path, content),
+    readFile: (path) => readFile27(path),
+    writeFile: (path, content) => writeFile16(path, content),
     // 同时用于清理解压临时目录（${zip}.tmp 是个目录）——递归强制删除，缺失不报错。
     deleteFile: async (path) => {
       await rm5(path, { recursive: true, force: true });
@@ -8347,14 +8762,14 @@ function createExportFileSystem() {
       }
     },
     mkdir: async (path) => {
-      await mkdir14(path, { recursive: true });
+      await mkdir16(path, { recursive: true });
     },
     unzip: async (zipPath, targetDir) => {
-      const entries = zipRead(await readFile24(zipPath));
+      const entries = zipRead(await readFile27(zipPath));
       for (const [name, data] of entries) {
-        const dest = join30(targetDir, name);
-        await mkdir14(dirname15(dest), { recursive: true });
-        await writeFile12(dest, data);
+        const dest = join36(targetDir, name);
+        await mkdir16(dirname14(dest), { recursive: true });
+        await writeFile16(dest, data);
       }
     }
   };
@@ -8598,8 +9013,8 @@ ${detail}`);
 });
 
 // packages/cli/src/sandbox-scan.ts
-import { readdir as readdir12, readFile as readFile25 } from "node:fs/promises";
-import { join as join31, relative as relative9, sep as sep5 } from "node:path";
+import { readdir as readdir13, readFile as readFile28 } from "node:fs/promises";
+import { join as join37, relative as relative9, sep as sep5 } from "node:path";
 function extractSpecifiers(line) {
   const out = [];
   const patterns = [
@@ -8643,17 +9058,17 @@ function classify(specifier) {
   return null;
 }
 async function scanFunctionSources(rootDir, functionsDir) {
-  const base = join31(rootDir, functionsDir);
+  const base = join37(rootDir, functionsDir);
   const findings = [];
   async function walk(current) {
     let entries;
     try {
-      entries = await readdir12(current, { withFileTypes: true });
+      entries = await readdir13(current, { withFileTypes: true });
     } catch {
       return;
     }
     for (const entry of entries) {
-      const abs = join31(current, entry.name);
+      const abs = join37(current, entry.name);
       if (entry.isDirectory()) {
         if (SKIP_DIRS.has(entry.name)) continue;
         await walk(abs);
@@ -8664,7 +9079,7 @@ async function scanFunctionSources(rootDir, functionsDir) {
       if (entry.name.endsWith(".d.ts")) continue;
       let content;
       try {
-        content = await readFile25(abs, "utf8");
+        content = await readFile28(abs, "utf8");
       } catch {
         continue;
       }
@@ -8787,6 +9202,7 @@ __export(doctor_exports, {
   runDoctor: () => runDoctor
 });
 import { stat as stat18 } from "node:fs/promises";
+import { join as join38 } from "node:path";
 async function probeServer(server) {
   const controller = new AbortController();
   const timer = setTimeout(() => controller.abort(), SERVER_PROBE_TIMEOUT_MS);
@@ -8814,14 +9230,15 @@ async function credentialMode(file2) {
 async function runDoctor(paths, cwd = process.cwd()) {
   const credentials = await loadCredentials(paths);
   const server = credentials?.server ?? resolveServer();
-  const mode = await credentialMode(paths.credentialsFile);
+  const credentialsFile = credentials !== null ? join38(paths.credentialsDir, `${slotNameFor(credentials.server)}.json`) : paths.credentialsFile;
+  const mode = await credentialMode(credentialsFile);
   const offline = await isOffline();
   const health = await probeServer(server);
   const sandbox = await scanSandbox(cwd);
   const report = {
     server,
     credentials: {
-      file: paths.credentialsFile,
+      file: credentialsFile,
       present: credentials !== null,
       ...mode === void 0 ? {} : { mode }
     },
@@ -8833,7 +9250,7 @@ async function runDoctor(paths, cwd = process.cwd()) {
   };
   if (credentials !== null) report.credentials.email = credentials.email;
   if (mode !== void 0 && mode !== "600") {
-    report.credentials.warning = `\u6743\u9650 ${mode} \u5BBD\u4E8E 0600\uFF0C\u5EFA\u8BAE chmod 600 ${paths.credentialsFile}`;
+    report.credentials.warning = `\u6743\u9650 ${mode} \u5BBD\u4E8E 0600\uFF0C\u5EFA\u8BAE chmod 600 ${credentialsFile}`;
   }
   return report;
 }
@@ -9278,12 +9695,12 @@ import { createRequire as createRequire2 } from "node:module";
 init_auth();
 
 // packages/cli/src/init.ts
-import { mkdir as mkdir2, stat as stat2, writeFile } from "node:fs/promises";
-import { dirname as dirname3, join as join2, resolve } from "node:path";
+import { mkdir as mkdir2, stat as stat2, writeFile as writeFile2 } from "node:fs/promises";
+import { dirname as dirname2, join as join3, resolve } from "node:path";
 
 // packages/cli/src/templates/registry.ts
 import { readFileSync } from "node:fs";
-import { dirname as dirname2, join } from "node:path";
+import { dirname, join as join2 } from "node:path";
 import { fileURLToPath } from "node:url";
 
 // packages/cli/src/templates/generated.ts
@@ -12668,15 +13085,15 @@ var TEMPLATE_CODES = [
 ];
 var TEMPLATE_NAMES = TEMPLATE_CODES;
 function findCliPackageJson() {
-  let dir = dirname2(fileURLToPath(import.meta.url));
+  let dir = dirname(fileURLToPath(import.meta.url));
   for (; ; ) {
-    const candidate = join(dir, "package.json");
+    const candidate = join2(dir, "package.json");
     try {
       const pkg = JSON.parse(readFileSync(candidate, "utf8"));
       if (pkg.name === "@adep/cli") return candidate;
     } catch {
     }
-    const parent = dirname2(dir);
+    const parent = dirname(dir);
     if (parent === dir) {
       throw new Error("\u627E\u4E0D\u5230 @adep/cli \u7684 package.json\uFF08\u5DF2\u904D\u5386\u5230\u6587\u4EF6\u7CFB\u7EDF\u6839\uFF09");
     }
@@ -12688,10 +13105,10 @@ function cliVersionOf() {
   return pkg.version;
 }
 function cliPackageRoot() {
-  return dirname2(findCliPackageJson());
+  return dirname(findCliPackageJson());
 }
 function localTemplateDir(code) {
-  return join(cliPackageRoot(), "src", "templates", code);
+  return join2(cliPackageRoot(), "src", "templates", code);
 }
 function templateFiles(code, name) {
   const generated = GENERATED_TEMPLATES[code];
@@ -12752,9 +13169,9 @@ async function initProject(cwd, name, template, filesOverride) {
   await mkdir2(projectPath, { recursive: true });
   await Promise.all(
     files.map(async (file2) => {
-      const target = join2(projectPath, file2.path);
-      await mkdir2(dirname3(target), { recursive: true });
-      await writeFile(target, file2.content);
+      const target = join3(projectPath, file2.path);
+      await mkdir2(dirname2(target), { recursive: true });
+      await writeFile2(target, file2.content);
     })
   );
   return { projectPath, files: files.map((file2) => file2.path) };
@@ -12945,7 +13362,8 @@ function registerAuth(program2, ctx) {
           });
           command.ok(result2, (data) => {
             const d = data;
-            return `\u5DF2\u767B\u5F55\uFF1A${d.email}\uFF08\u51ED\u636E\u5DF2\u5199\u5165 ${ctx.paths.credentialsFile}\uFF0C\u6743\u9650 0600\uFF09`;
+            const replaced = d.replacedEmail !== void 0 ? `\uFF0C\u5DF2\u66FF\u6362\u539F ${d.replacedEmail} \u7684\u51ED\u636E` : "";
+            return `\u5DF2\u767B\u5F55\uFF1A${d.email}\uFF08\u51ED\u636E\u6309 server \u5206\u69FD\u4FDD\u5B58\u4E8E ${ctx.paths.credentialsDir}/\uFF0C\u6743\u9650 0600${replaced}\uFF09`;
           });
           return;
         }
@@ -12966,7 +13384,8 @@ function registerAuth(program2, ctx) {
         });
         command.ok(result, (data) => {
           const d = data;
-          return `\u5DF2\u767B\u5F55\uFF1A${d.email}\uFF08\u6D4F\u89C8\u5668\u7F51\u9875\u6388\u6743\uFF1B\u51ED\u636E\u5DF2\u5199\u5165 ${ctx.paths.credentialsFile}\uFF0C\u6743\u9650 0600\uFF09`;
+          const replaced = d.replacedEmail !== void 0 ? `\uFF0C\u5DF2\u66FF\u6362\u539F ${d.replacedEmail} \u7684\u51ED\u636E` : "";
+          return `\u5DF2\u767B\u5F55\uFF1A${d.email}\uFF08\u6D4F\u89C8\u5668\u7F51\u9875\u6388\u6743\uFF1B\u51ED\u636E\u6309 server \u5206\u69FD\u4FDD\u5B58\u4E8E ${ctx.paths.credentialsDir}/\uFF0C\u6743\u9650 0600${replaced}\uFF09`;
         });
       });
     }
@@ -13023,17 +13442,17 @@ async function fetchTemplates(server) {
 // packages/cli/src/template-package.ts
 init_auth();
 init_credentials();
-import { mkdir as mkdir7, readFile as readFile10, readdir as readdir3, stat as stat5, writeFile as writeFile5 } from "node:fs/promises";
-import { join as join13 } from "node:path";
+import { mkdir as mkdir7, readFile as readFile10, readdir as readdir3, stat as stat5, writeFile as writeFile6 } from "node:fs/promises";
+import { join as join14 } from "node:path";
 function cachedPackagePath(paths, code, version2) {
-  return join13(paths.home, "templates", `${code}-${version2}.json`);
+  return join14(paths.home, "templates", `${code}-${version2}.json`);
 }
 async function collectTemplateDir(dir) {
   const files = [];
   async function walk(current, prefix) {
     const entries = await readdir3(current, { withFileTypes: true });
     for (const entry of entries) {
-      const full = join13(current, entry.name);
+      const full = join14(current, entry.name);
       const rel = prefix === "" ? entry.name : `${prefix}/${entry.name}`;
       if (entry.isDirectory()) {
         await walk(full, rel);
@@ -13065,8 +13484,8 @@ async function loadCachedPackage(paths, code, version2) {
   return pkg;
 }
 async function saveCachedPackage(paths, pkg) {
-  await mkdir7(join13(paths.home, "templates"), { recursive: true });
-  await writeFile5(cachedPackagePath(paths, pkg.code, pkg.version), JSON.stringify(pkg), "utf8");
+  await mkdir7(join14(paths.home, "templates"), { recursive: true });
+  await writeFile6(cachedPackagePath(paths, pkg.code, pkg.version), JSON.stringify(pkg), "utf8");
 }
 async function downloadTemplatePackage(server, code) {
   let response;
@@ -13151,7 +13570,7 @@ function packageManifestEntry(pkg) {
 async function assertPublishableTemplate(dir, expectedCode) {
   let info;
   try {
-    info = await stat5(join13(dir, "template.json"));
+    info = await stat5(join14(dir, "template.json"));
   } catch {
     throw new CliError(
       "TEMPLATE_NOT_PUBLISHABLE",
@@ -13165,7 +13584,7 @@ async function assertPublishableTemplate(dir, expectedCode) {
     code: expectedCode,
     version: "",
     manifest: {},
-    files: [{ path: "template.json", content: await readFile10(join13(dir, "template.json"), "utf8") }]
+    files: [{ path: "template.json", content: await readFile10(join14(dir, "template.json"), "utf8") }]
   });
   if (manifest === null) {
     throw new CliError("TEMPLATE_NOT_PUBLISHABLE", `\u76EE\u5F55 ${dir}/template.json \u4E0D\u662F\u5408\u6CD5 JSON`);
@@ -13289,15 +13708,150 @@ function registerTemplates(program2, ctx) {
 import { resolve as resolve10 } from "node:path";
 
 // packages/cli/src/app-build.ts
-init_shared_source();
-init_validate();
-init_zip();
-import { spawn as spawn2 } from "node:child_process";
-import { createHash as createHash2 } from "node:crypto";
-import { closeSync, openSync } from "node:fs";
-import { copyFile, mkdir as mkdir9, mkdtemp, readFile as readFile12, readdir as readdir6, rm as rm3, stat as stat8, writeFile as writeFile8 } from "node:fs/promises";
-import { tmpdir } from "node:os";
-import { basename as basename2, dirname as dirname10, join as join16, posix, relative as relative2, resolve as resolve8 } from "node:path";
+import { mkdir as mkdir11, writeFile as writeFile12 } from "node:fs/promises";
+import { join as join22, resolve as resolve8 } from "node:path";
+
+// packages/cli/src/app-init.ts
+import { cp, mkdir as mkdir8, readdir as readdir5, stat as stat7, writeFile as writeFile7 } from "node:fs/promises";
+import { dirname as dirname8, join as join16, resolve as resolve7 } from "node:path";
+
+// packages/cli/src/app-template.ts
+import { readFileSync as readFileSync3 } from "node:fs";
+import { readdir as readdir4, readFile as readFile11, stat as stat6 } from "node:fs/promises";
+import { dirname as dirname7, join as join15 } from "node:path";
+import { fileURLToPath as fileURLToPath3 } from "node:url";
+var TEMPLATE_VAR_ALLOWLIST = {
+  "app-desktop": /* @__PURE__ */ new Set(["projectSlug", "appName", "appId", "platformUrl"]),
+  "app-mobile": /* @__PURE__ */ new Set([
+    "projectSlug",
+    "appName",
+    "platformUrl",
+    "iosBundleId",
+    "androidPackageId"
+  ]),
+  // xtool 只做 iOS ⇒ 没有 androidPackageId。少这一个变量是**刻意的**：
+  // 模板里若写了它，渲染期会 fail loud（而不是渲染出一个没有 Android 目标的空值）。
+  "app-mobile-xtool": /* @__PURE__ */ new Set(["projectSlug", "appName", "platformUrl", "iosBundleId"])
+};
+function shellTemplateForPlatform(platform) {
+  return platform === "mobile" ? "app-mobile" : "app-desktop";
+}
+function normalizeToolchain(input2) {
+  if (input2 === void 0 || input2.length === 0) return "capacitor";
+  if (input2 === "capacitor" || input2 === "xtool") return input2;
+  throw new InitError(
+    "INVALID_TOOLCHAIN",
+    `--toolchain \u987B\u4E3A capacitor | xtool\uFF0C\u6536\u5230 "${input2}"\uFF08\u7F3A\u7701 capacitor\uFF09`
+  );
+}
+function shellTemplateFor(platform, toolchain) {
+  if (toolchain === "xtool") {
+    if (platform !== "mobile") {
+      throw new InitError(
+        "INVALID_TOOLCHAIN",
+        `--toolchain xtool \u53EA\u652F\u6301 --platform mobile\uFF08xtool \u4EA7\u51FA iOS \u539F\u751F app\uFF09\uFF0C\u6536\u5230 --platform ${platform}`
+      );
+    }
+    return "app-mobile-xtool";
+  }
+  return shellTemplateForPlatform(platform);
+}
+var XTOOL_SHELL_REUSED_FROM_MOBILE = [
+  { from: "plugins/adep-bridge", to: "plugins/adep-bridge" },
+  { from: "web/adep-bridge.js", to: "web/adep-bridge.js" },
+  { from: "web/offline-runtime.js", to: "web/offline-runtime.js" }
+];
+var TEMPLATE_MANIFEST_FILES = /* @__PURE__ */ new Set(["template.json"]);
+async function collectRelPaths(dir, base) {
+  const entries = await readdir4(dir, { withFileTypes: true });
+  const nested = await Promise.all(
+    entries.filter((entry) => entry.name !== ".DS_Store" && !TEMPLATE_MANIFEST_FILES.has(entry.name)).toSorted((a, b) => a.name < b.name ? -1 : a.name > b.name ? 1 : 0).map((entry) => {
+      const abs = join15(dir, entry.name);
+      return entry.isDirectory() ? (
+        // 递归时 base 必须带上子目录前缀，否则深层文件相对路径会丢目录段
+        // （app-mobile 是嵌套目录结构：bridge/gate.mjs、plugins/adep-bridge/...）。
+        collectRelPaths(abs, join15(base, entry.name))
+      ) : Promise.resolve([join15(base, entry.name).split("\\").join("/")]);
+    })
+  );
+  return nested.flat();
+}
+async function findCliPackageRoot() {
+  let dir = dirname7(fileURLToPath3(import.meta.url));
+  for (; ; ) {
+    let raw;
+    try {
+      raw = readFileSync3(join15(dir, "package.json"), "utf8");
+    } catch {
+      raw = "";
+    }
+    try {
+      const pkg = JSON.parse(raw);
+      if (pkg.name === "@adep/cli") return dir;
+    } catch {
+    }
+    const parent = dirname7(dir);
+    if (parent === dir) {
+      throw new InitError(
+        "SHELL_TEMPLATE_MISSING",
+        "\u627E\u4E0D\u5230 @adep/cli \u7684 package.json\uFF08\u5DF2\u904D\u5386\u5230\u6587\u4EF6\u7CFB\u7EDF\u6839\uFF09"
+      );
+    }
+    dir = parent;
+  }
+}
+async function appShellTemplateDir(code = "app-desktop") {
+  const dir = join15(await findCliPackageRoot(), "templates", code);
+  try {
+    await stat6(dir);
+  } catch {
+    throw new InitError(
+      "SHELL_TEMPLATE_MISSING",
+      `\u58F3\u6A21\u677F\u76EE\u5F55\u7F3A\u5931\uFF1A${dir}\uFF08\u5B89\u88C5\u4EA7\u7269\u5E94\u5305\u542B templates/\uFF0C\u68C0\u67E5 package.json \u7684 files \u5B57\u6BB5\uFF09`
+    );
+  }
+  return dir;
+}
+async function renderAppShellTemplate(vars, code = "app-desktop") {
+  const templateDir = await appShellTemplateDir(code);
+  const rels = await collectRelPaths(templateDir, ".");
+  const allowed = TEMPLATE_VAR_ALLOWLIST[code];
+  const values = {
+    projectSlug: vars.projectSlug,
+    appName: vars.appName,
+    platformUrl: vars.platformUrl,
+    // ⚠️ 判据是「desktop 与 mobile 族」而不是「是不是 app-mobile」——`app-mobile-xtool`
+    // 同样要 iosBundleId。原来写成 `code === 'app-mobile' ? ... : { appId }` 时，
+    // 新 code 会落进 else 分支：`{{iosBundleId}}` 取到 `undefined → ''`，
+    // 渲染出一个 **bundle id 为空** 的工程（SwiftPM/xtool 都在更晚的环节才报错）。
+    ...code === "app-desktop" ? { appId: vars.appId ?? "" } : {
+      iosBundleId: vars.iosBundleId ?? "",
+      androidPackageId: vars.androidPackageId ?? ""
+    }
+  };
+  return Promise.all(
+    rels.map(async (rel) => {
+      const raw = await readFile11(join15(templateDir, rel), "utf8");
+      const content = raw.replace(/\{\{\s*([A-Za-z0-9_-]+)\s*\}\}/g, (whole, name) => {
+        if (!allowed.has(name)) {
+          throw new InitError(
+            "SHELL_TEMPLATE_INVALID",
+            `\u58F3\u6A21\u677F ${code} \u7684\u6587\u4EF6 ${rel} \u4F7F\u7528\u4E86\u672A\u652F\u6301\u53D8\u91CF "${whole}"\uFF1A\u5141\u8BB8 ${[...allowed].join(" | ")}`
+          );
+        }
+        return values[name] ?? "";
+      });
+      const leftover = /\{\{\s*[A-Za-z0-9_-]+\s*\}\}/.exec(content);
+      if (leftover !== null) {
+        throw new InitError(
+          "SHELL_TEMPLATE_INVALID",
+          `\u58F3\u6A21\u677F ${code} \u7684\u6587\u4EF6 ${rel} \u6E32\u67D3\u540E\u4ECD\u6709\u672A\u66FF\u6362\u5360\u4F4D\u7B26 "${leftover[0]}"`
+        );
+      }
+      return { path: rel, content };
+    })
+  );
+}
 
 // node_modules/.pnpm/zod@4.6.7/node_modules/zod/v4/classic/external.js
 var external_exports = {};
@@ -33050,148 +33604,6 @@ function parseAdepAppConfig(input2) {
   return parsed.data;
 }
 
-// packages/cli/src/app-init.ts
-import { cp, mkdir as mkdir8, readdir as readdir5, stat as stat7, writeFile as writeFile6 } from "node:fs/promises";
-import { dirname as dirname9, join as join15, resolve as resolve7 } from "node:path";
-
-// packages/cli/src/app-template.ts
-import { readFileSync as readFileSync3 } from "node:fs";
-import { readdir as readdir4, readFile as readFile11, stat as stat6 } from "node:fs/promises";
-import { dirname as dirname8, join as join14 } from "node:path";
-import { fileURLToPath as fileURLToPath3 } from "node:url";
-var TEMPLATE_VAR_ALLOWLIST = {
-  "app-desktop": /* @__PURE__ */ new Set(["projectSlug", "appName", "appId", "platformUrl"]),
-  "app-mobile": /* @__PURE__ */ new Set([
-    "projectSlug",
-    "appName",
-    "platformUrl",
-    "iosBundleId",
-    "androidPackageId"
-  ]),
-  // xtool 只做 iOS ⇒ 没有 androidPackageId。少这一个变量是**刻意的**：
-  // 模板里若写了它，渲染期会 fail loud（而不是渲染出一个没有 Android 目标的空值）。
-  "app-mobile-xtool": /* @__PURE__ */ new Set(["projectSlug", "appName", "platformUrl", "iosBundleId"])
-};
-function shellTemplateForPlatform(platform) {
-  return platform === "mobile" ? "app-mobile" : "app-desktop";
-}
-function normalizeToolchain(input2) {
-  if (input2 === void 0 || input2.length === 0) return "capacitor";
-  if (input2 === "capacitor" || input2 === "xtool") return input2;
-  throw new InitError(
-    "INVALID_TOOLCHAIN",
-    `--toolchain \u987B\u4E3A capacitor | xtool\uFF0C\u6536\u5230 "${input2}"\uFF08\u7F3A\u7701 capacitor\uFF09`
-  );
-}
-function shellTemplateFor(platform, toolchain) {
-  if (toolchain === "xtool") {
-    if (platform !== "mobile") {
-      throw new InitError(
-        "INVALID_TOOLCHAIN",
-        `--toolchain xtool \u53EA\u652F\u6301 --platform mobile\uFF08xtool \u4EA7\u51FA iOS \u539F\u751F app\uFF09\uFF0C\u6536\u5230 --platform ${platform}`
-      );
-    }
-    return "app-mobile-xtool";
-  }
-  return shellTemplateForPlatform(platform);
-}
-var XTOOL_SHELL_REUSED_FROM_MOBILE = [
-  { from: "plugins/adep-bridge", to: "plugins/adep-bridge" },
-  { from: "web/adep-bridge.js", to: "web/adep-bridge.js" },
-  { from: "web/offline-runtime.js", to: "web/offline-runtime.js" }
-];
-var TEMPLATE_MANIFEST_FILES = /* @__PURE__ */ new Set(["template.json"]);
-async function collectRelPaths(dir, base) {
-  const entries = await readdir4(dir, { withFileTypes: true });
-  const nested = await Promise.all(
-    entries.filter((entry) => entry.name !== ".DS_Store" && !TEMPLATE_MANIFEST_FILES.has(entry.name)).toSorted((a, b) => a.name < b.name ? -1 : a.name > b.name ? 1 : 0).map((entry) => {
-      const abs = join14(dir, entry.name);
-      return entry.isDirectory() ? (
-        // 递归时 base 必须带上子目录前缀，否则深层文件相对路径会丢目录段
-        // （app-mobile 是嵌套目录结构：bridge/gate.mjs、plugins/adep-bridge/...）。
-        collectRelPaths(abs, join14(base, entry.name))
-      ) : Promise.resolve([join14(base, entry.name).split("\\").join("/")]);
-    })
-  );
-  return nested.flat();
-}
-async function findCliPackageRoot() {
-  let dir = dirname8(fileURLToPath3(import.meta.url));
-  for (; ; ) {
-    let raw;
-    try {
-      raw = readFileSync3(join14(dir, "package.json"), "utf8");
-    } catch {
-      raw = "";
-    }
-    try {
-      const pkg = JSON.parse(raw);
-      if (pkg.name === "@adep/cli") return dir;
-    } catch {
-    }
-    const parent = dirname8(dir);
-    if (parent === dir) {
-      throw new InitError(
-        "SHELL_TEMPLATE_MISSING",
-        "\u627E\u4E0D\u5230 @adep/cli \u7684 package.json\uFF08\u5DF2\u904D\u5386\u5230\u6587\u4EF6\u7CFB\u7EDF\u6839\uFF09"
-      );
-    }
-    dir = parent;
-  }
-}
-async function appShellTemplateDir(code = "app-desktop") {
-  const dir = join14(await findCliPackageRoot(), "templates", code);
-  try {
-    await stat6(dir);
-  } catch {
-    throw new InitError(
-      "SHELL_TEMPLATE_MISSING",
-      `\u58F3\u6A21\u677F\u76EE\u5F55\u7F3A\u5931\uFF1A${dir}\uFF08\u5B89\u88C5\u4EA7\u7269\u5E94\u5305\u542B templates/\uFF0C\u68C0\u67E5 package.json \u7684 files \u5B57\u6BB5\uFF09`
-    );
-  }
-  return dir;
-}
-async function renderAppShellTemplate(vars, code = "app-desktop") {
-  const templateDir = await appShellTemplateDir(code);
-  const rels = await collectRelPaths(templateDir, ".");
-  const allowed = TEMPLATE_VAR_ALLOWLIST[code];
-  const values = {
-    projectSlug: vars.projectSlug,
-    appName: vars.appName,
-    platformUrl: vars.platformUrl,
-    // ⚠️ 判据是「desktop 与 mobile 族」而不是「是不是 app-mobile」——`app-mobile-xtool`
-    // 同样要 iosBundleId。原来写成 `code === 'app-mobile' ? ... : { appId }` 时，
-    // 新 code 会落进 else 分支：`{{iosBundleId}}` 取到 `undefined → ''`，
-    // 渲染出一个 **bundle id 为空** 的工程（SwiftPM/xtool 都在更晚的环节才报错）。
-    ...code === "app-desktop" ? { appId: vars.appId ?? "" } : {
-      iosBundleId: vars.iosBundleId ?? "",
-      androidPackageId: vars.androidPackageId ?? ""
-    }
-  };
-  return Promise.all(
-    rels.map(async (rel) => {
-      const raw = await readFile11(join14(templateDir, rel), "utf8");
-      const content = raw.replace(/\{\{\s*([A-Za-z0-9_-]+)\s*\}\}/g, (whole, name) => {
-        if (!allowed.has(name)) {
-          throw new InitError(
-            "SHELL_TEMPLATE_INVALID",
-            `\u58F3\u6A21\u677F ${code} \u7684\u6587\u4EF6 ${rel} \u4F7F\u7528\u4E86\u672A\u652F\u6301\u53D8\u91CF "${whole}"\uFF1A\u5141\u8BB8 ${[...allowed].join(" | ")}`
-          );
-        }
-        return values[name] ?? "";
-      });
-      const leftover = /\{\{\s*[A-Za-z0-9_-]+\s*\}\}/.exec(content);
-      if (leftover !== null) {
-        throw new InitError(
-          "SHELL_TEMPLATE_INVALID",
-          `\u58F3\u6A21\u677F ${code} \u7684\u6587\u4EF6 ${rel} \u6E32\u67D3\u540E\u4ECD\u6709\u672A\u66FF\u6362\u5360\u4F4D\u7B26 "${leftover[0]}"`
-        );
-      }
-      return { path: rel, content };
-    })
-  );
-}
-
 // packages/cli/src/app-init.ts
 function appIdForSlug(slug) {
   return `top.adep.${slug}`;
@@ -33264,16 +33676,16 @@ async function initAppShell(cwd, input2) {
   await Promise.all(
     files.map(async (file2) => {
       if (file2.path === "adep.app.json") return;
-      const target = join15(appPath, file2.path);
-      await mkdir8(dirname9(target), { recursive: true });
-      await writeFile6(target, file2.content);
+      const target = join16(appPath, file2.path);
+      await mkdir8(dirname8(target), { recursive: true });
+      await writeFile7(target, file2.content);
     })
   );
-  await writeFile6(join15(appPath, "adep.app.json"), configJson);
+  await writeFile7(join16(appPath, "adep.app.json"), configJson);
   for (const item of reused) {
-    await cp(item.from, join15(appPath, item.to), { recursive: true });
+    await cp(item.from, join16(appPath, item.to), { recursive: true });
   }
-  const reusedFiles = (await Promise.all(reused.map((item) => listFiles(join15(appPath, item.to), item.to)))).flat();
+  const reusedFiles = (await Promise.all(reused.map((item) => listFiles(join16(appPath, item.to), item.to)))).flat();
   const written = files.map((file2) => file2.path).filter((path) => path !== "adep.app.json");
   return {
     appPath,
@@ -33285,7 +33697,7 @@ async function resolveXtoolReusedSources() {
   const mobileDir = await appShellTemplateDir("app-mobile");
   const resolved = [];
   for (const item of XTOOL_SHELL_REUSED_FROM_MOBILE) {
-    const from = join15(mobileDir, item.from);
+    const from = join16(mobileDir, item.from);
     try {
       await stat7(from);
     } catch {
@@ -33304,7 +33716,7 @@ async function listFiles(path, base) {
   const nested = await Promise.all(
     entries.filter((entry) => entry.name !== ".DS_Store").map((entry) => {
       const rel = `${base}/${entry.name}`;
-      return entry.isDirectory() ? listFiles(join15(path, entry.name), rel) : Promise.resolve([rel]);
+      return entry.isDirectory() ? listFiles(join16(path, entry.name), rel) : Promise.resolve([rel]);
     })
   );
   return nested.flat().toSorted();
@@ -33312,8 +33724,10 @@ async function listFiles(path, base) {
 
 // packages/cli/src/app-build.ts
 init_client();
-init_config();
 init_client2();
+
+// packages/cli/src/app-build/shared.ts
+import { stat as stat8 } from "node:fs/promises";
 var SITE_PREFIX = "site/";
 var SHELL_SITE_DIR = "app/site";
 var MOBILE_SITE_ASSET_FILES = {
@@ -33370,30 +33784,15 @@ async function pathExists(path) {
     return false;
   }
 }
-async function readShellConfig(shellDir) {
-  const configPath = join16(shellDir, "adep.app.json");
-  let text;
-  try {
-    text = await readFile12(configPath, "utf8");
-  } catch {
-    throw new InitError(
-      "APP_CONFIG_NOT_FOUND",
-      `\u672A\u627E\u5230 ${configPath}\uFF1A\u8BE5\u76EE\u5F55\u4E0D\u662F\u684C\u9762\u58F3\u5DE5\u7A0B\uFF0C\u6216\u5C1A\u672A\u6267\u884C adep app init --dir ${shellDir}`
-    );
-  }
-  let parsed;
-  try {
-    parsed = JSON.parse(text);
-  } catch (error62) {
-    throw new InitError(
-      "APP_CONFIG_INVALID",
-      `adep.app.json \u4E0D\u662F\u5408\u6CD5 JSON\uFF1A${error62 instanceof Error ? error62.message : String(error62)}`
-    );
-  }
-  const config2 = parseAdepAppConfig(parsed);
-  const raw = parsed ?? {};
-  return { raw, config: config2 };
-}
+
+// packages/cli/src/app-build/bundle.ts
+init_shared_source();
+init_validate();
+init_zip();
+import { createHash as createHash2 } from "node:crypto";
+import { mkdir as mkdir9, mkdtemp, readFile as readFile12, rm as rm3, writeFile as writeFile9 } from "node:fs/promises";
+import { tmpdir } from "node:os";
+import { dirname as dirname9, join as join17, posix } from "node:path";
 function computeBundleVersion(manifest) {
   const siteEntries = manifest.contents.filter((content) => content.path.startsWith(SITE_PREFIX)).toSorted((left, right) => compareByCodeUnit(left.path, right.path));
   const fingerprint = createHash2("sha256").update(siteEntries.map((content) => `${content.path}:${content.sha256}`).join("\n")).digest("hex").slice(0, 12);
@@ -33483,23 +33882,18 @@ function verifySiteContents(manifest, entries) {
   }
 }
 async function writeSiteTree(shellDir, site) {
-  const targetRoot = join16(shellDir, SHELL_SITE_DIR);
+  const targetRoot = join17(shellDir, SHELL_SITE_DIR);
   await rm3(targetRoot, { recursive: true, force: true });
   await mkdir9(targetRoot, { recursive: true });
   const written = [];
   for (const [rel, bytes] of site) {
-    const dest = join16(targetRoot, ...rel.split("/"));
-    await mkdir9(dirname10(dest), { recursive: true });
-    await writeFile8(dest, bytes);
+    const dest = join17(targetRoot, ...rel.split("/"));
+    await mkdir9(dirname9(dest), { recursive: true });
+    await writeFile9(dest, bytes);
     written.push({ path: `${SHELL_SITE_DIR}/${rel}`, size: bytes.length });
   }
   return written;
 }
-async function bindVersion(shellDir, raw, binding) {
-  const next = { ...raw, build: binding };
-  await writeFile8(join16(shellDir, "adep.app.json"), `${JSON.stringify(next, null, 2)}
-`);
-}
 async function waitForExport(api, jobId, pollIntervalMs, maxPollAttempts) {
   let attempts = 0;
   for (; ; ) {
@@ -33515,6 +33909,113 @@ async function waitForExport(api, jobId, pollIntervalMs, maxPollAttempts) {
     await new Promise((resolvePromise) => setTimeout(resolvePromise, pollIntervalMs));
   }
 }
+async function fetchAndInjectSite(input2) {
+  const workDir = await mkdtemp(join17(tmpdir(), "adep-app-build-"));
+  try {
+    const zipPath = join17(workDir, "bundle.zip");
+    await input2.api.downloadBundle(input2.jobId, zipPath);
+    const entries = zipRead(await readFile12(zipPath));
+    const manifest = readManifest(entries);
+    verifySiteContents(manifest, entries);
+    const site = collectSiteEntries(entries);
+    if (site.size === 0) {
+      throw new InitError(
+        "APP_NO_PUBLISHED_FRONTEND",
+        `\u9879\u76EE "${input2.projectSlug}" \u6CA1\u6709\u5DF2\u53D1\u5E03\u7684\u9875\u9762\u4EA7\u7269\uFF08\u5BFC\u51FA\u5305\u5185\u6CA1\u6709 ${SITE_PREFIX}\uFF09\uFF1A\u8BF7\u5148\u6267\u884C adep publish --only frontend --project ${input2.projectSlug}`
+      );
+    }
+    return { manifest, written: await writeSiteTree(input2.shellDir, site) };
+  } finally {
+    await rm3(workDir, { recursive: true, force: true });
+  }
+}
+
+// packages/cli/src/app-build/shell.ts
+import { readFile as readFile13, writeFile as writeFile10 } from "node:fs/promises";
+import { join as join18 } from "node:path";
+async function readShellConfig(shellDir) {
+  const configPath = join18(shellDir, "adep.app.json");
+  let text;
+  try {
+    text = await readFile13(configPath, "utf8");
+  } catch {
+    throw new InitError(
+      "APP_CONFIG_NOT_FOUND",
+      `\u672A\u627E\u5230 ${configPath}\uFF1A\u8BE5\u76EE\u5F55\u4E0D\u662F\u684C\u9762\u58F3\u5DE5\u7A0B\uFF0C\u6216\u5C1A\u672A\u6267\u884C adep app init --dir ${shellDir}`
+    );
+  }
+  let parsed;
+  try {
+    parsed = JSON.parse(text);
+  } catch (error62) {
+    throw new InitError(
+      "APP_CONFIG_INVALID",
+      `adep.app.json \u4E0D\u662F\u5408\u6CD5 JSON\uFF1A${error62 instanceof Error ? error62.message : String(error62)}`
+    );
+  }
+  const config2 = parseAdepAppConfig(parsed);
+  const raw = parsed ?? {};
+  return { raw, config: config2 };
+}
+async function bindVersion(shellDir, raw, binding) {
+  const next = { ...raw, build: binding };
+  await writeFile10(join18(shellDir, "adep.app.json"), `${JSON.stringify(next, null, 2)}
+`);
+}
+
+// packages/cli/src/app-build/site.ts
+import { copyFile, readFile as readFile14, writeFile as writeFile11 } from "node:fs/promises";
+import { join as join19 } from "node:path";
+async function readEntryPage(indexPath) {
+  try {
+    return await readFile14(indexPath, "utf8");
+  } catch (error62) {
+    const code = typeof error62 === "object" && error62 !== null ? error62.code : void 0;
+    if (code === "ENOENT") {
+      throw new InitError(
+        "APP_SITE_MISSING",
+        `\u7AD9\u70B9\u4EA7\u7269\u7F3A\u5165\u53E3\u9875\uFF1A${indexPath} \u4E0D\u5B58\u5728\u3002\u79FB\u52A8\u58F3\u7684 WebView \u6052\u52A0\u8F7D index.html\uFF0C\u7F3A\u4E86\u88C5\u673A\u5C31\u662F\u767D\u5C4F\u2014\u2014\u8BF7\u786E\u8BA4\u7AD9\u70B9\u5DF2\u53D1\u5E03\u4E14\u5165\u53E3\u9875\u662F**\u6839\u7EA7** index.html\uFF08\`adep publish --only frontend\`\uFF09\uFF0C\u518D\u91CD\u8DD1 adep app build`
+      );
+    }
+    throw new InitError(
+      "APP_SITE_UNREADABLE",
+      `\u7AD9\u70B9\u5165\u53E3\u9875\u8BFB\u4E0D\u51FA\u6765\uFF1A${indexPath}\uFF08${error62 instanceof Error ? error62.message : String(error62)}\uFF09`
+    );
+  }
+}
+async function injectMobileShellAssets(input2) {
+  const siteRoot = join19(input2.shellDir, SHELL_SITE_DIR);
+  const indexPath = join19(siteRoot, "index.html");
+  const html = await readEntryPage(indexPath);
+  const permissionsJson = `${JSON.stringify(
+    { schemaVersion: 1, permissions: sortPermissions(input2.permissions) },
+    null,
+    2
+  )}
+`;
+  await writeFile11(join19(siteRoot, MOBILE_SITE_ASSET_FILES.permissions), permissionsJson);
+  await copyFile(
+    join19(input2.shellDir, "web", "adep-bridge.js"),
+    join19(siteRoot, MOBILE_SITE_ASSET_FILES.bridge)
+  );
+  await copyFile(
+    join19(input2.shellDir, "adep.app.json"),
+    join19(siteRoot, MOBILE_SITE_ASSET_FILES.config)
+  );
+  if (html.includes("adep-bridge.js")) return;
+  const tag = '<script src="/adep-bridge.js"></script>';
+  const next = html.includes("</head>") ? html.replace("</head>", `${tag}
+</head>`) : `${tag}
+${html}`;
+  await writeFile11(indexPath, next);
+}
+
+// packages/cli/src/app-build/toolchain.ts
+init_config();
+import { spawn as spawn2 } from "node:child_process";
+import { closeSync, openSync } from "node:fs";
+import { copyFile as copyFile2, mkdir as mkdir10, readdir as readdir6 } from "node:fs/promises";
+import { basename as basename2, join as join20 } from "node:path";
 function platformArgs(platform) {
   if (platform === "darwin") return ["--mac"];
   if (platform === "win32") return ["--win"];
@@ -33522,7 +34023,7 @@ function platformArgs(platform) {
 }
 function resolvePackagerBinary(shellDir) {
   const name = process.platform === "win32" ? "electron-builder.cmd" : "electron-builder";
-  return join16(shellDir, "node_modules", ".bin", name);
+  return join20(shellDir, "node_modules", ".bin", name);
 }
 function missingDepsError(shellDir) {
   return new InitError(
@@ -33534,17 +34035,17 @@ function missingMobileDepsError(shellDir, platform) {
   if (platform === "ios") {
     return new InitError(
       "APP_SHELL_DEPS_MISSING",
-      `\u672A\u627E\u5230 iOS \u539F\u751F\u5DE5\u7A0B\uFF08${join16(shellDir, "ios", "App")}\uFF09\uFF1A\u8BF7\u5148\u5728 ${shellDir} \u6267\u884C npx cap add ios && npx cap sync`
+      `\u672A\u627E\u5230 iOS \u539F\u751F\u5DE5\u7A0B\uFF08${join20(shellDir, "ios", "App")}\uFF09\uFF1A\u8BF7\u5148\u5728 ${shellDir} \u6267\u884C npx cap add ios && npx cap sync`
     );
   }
   return new InitError(
     "APP_SHELL_DEPS_MISSING",
-    `\u672A\u627E\u5230 Android \u539F\u751F\u5DE5\u7A0B\uFF08${join16(shellDir, "android", "gradlew")}\uFF09\uFF1A\u8BF7\u5148\u5728 ${shellDir} \u6267\u884C npx cap add android && npx cap sync`
+    `\u672A\u627E\u5230 Android \u539F\u751F\u5DE5\u7A0B\uFF08${join20(shellDir, "android", "gradlew")}\uFF09\uFF1A\u8BF7\u5148\u5728 ${shellDir} \u6267\u884C npx cap add android && npx cap sync`
   );
 }
 function resolveCapBinary(shellDir) {
   const name = process.platform === "win32" ? "cap.cmd" : "cap";
-  return join16(shellDir, "node_modules", ".bin", name);
+  return join20(shellDir, "node_modules", ".bin", name);
 }
 async function syncCapacitorAssets(input2) {
   const capBin = resolveCapBinary(input2.shellDir);
@@ -33567,11 +34068,11 @@ async function assertShellPackagerReady(shellDir, platform, prepareOnly, toolcha
     return;
   }
   if (platform === "ios") {
-    if (!await pathExists(join16(shellDir, "ios", "App"))) {
-      if (await pathExists(join16(shellDir, "xtool.yml"))) {
+    if (!await pathExists(join20(shellDir, "ios", "App"))) {
+      if (await pathExists(join20(shellDir, "xtool.yml"))) {
         throw new InitError(
           "APP_SHELL_DEPS_MISSING",
-          `\u672A\u627E\u5230 Capacitor \u7684 iOS \u539F\u751F\u5DE5\u7A0B\uFF08${join16(shellDir, "ios", "App")}\uFF09\uFF1B\u4F46\u68C0\u6D4B\u5230\u8BE5\u76EE\u5F55\u662F xtool \u58F3\u5DE5\u7A0B\uFF08\u6709 xtool.yml\uFF09\u2014\u2014\u672C\u6B21\u8BF7\u52A0 --toolchain xtool`
+          `\u672A\u627E\u5230 Capacitor \u7684 iOS \u539F\u751F\u5DE5\u7A0B\uFF08${join20(shellDir, "ios", "App")}\uFF09\uFF1B\u4F46\u68C0\u6D4B\u5230\u8BE5\u76EE\u5F55\u662F xtool \u58F3\u5DE5\u7A0B\uFF08\u6709 xtool.yml\uFF09\u2014\u2014\u672C\u6B21\u8BF7\u52A0 --toolchain xtool`
         );
       }
       throw missingMobileDepsError(shellDir, "ios");
@@ -33587,16 +34088,16 @@ async function assertShellPackagerReady(shellDir, platform, prepareOnly, toolcha
   if (!await pathExists(resolvePackagerBinary(shellDir))) throw missingDepsError(shellDir);
 }
 async function assertXtoolShellReady(shellDir) {
-  if (!await pathExists(join16(shellDir, "xtool.yml")) || !await pathExists(join16(shellDir, "Package.swift"))) {
+  if (!await pathExists(join20(shellDir, "xtool.yml")) || !await pathExists(join20(shellDir, "Package.swift"))) {
     throw new InitError(
       "APP_SHELL_DEPS_MISSING",
-      `\u672A\u627E\u5230 xtool \u58F3\u5DE5\u7A0B\uFF08\u9700\u8981 ${join16(shellDir, "xtool.yml")} \u4E0E ${join16(shellDir, "Package.swift")}\uFF09\uFF1A\u8BF7\u7528 adep app init --platform mobile --toolchain xtool \u751F\u6210`
+      `\u672A\u627E\u5230 xtool \u58F3\u5DE5\u7A0B\uFF08\u9700\u8981 ${join20(shellDir, "xtool.yml")} \u4E0E ${join20(shellDir, "Package.swift")}\uFF09\uFF1A\u8BF7\u7528 adep app init --platform mobile --toolchain xtool \u751F\u6210`
     );
   }
-  if (!await pathExists(join16(shellDir, "plugins", "adep-bridge", "Package.swift"))) {
+  if (!await pathExists(join20(shellDir, "plugins", "adep-bridge", "Package.swift"))) {
     throw new InitError(
       "APP_SHELL_DEPS_MISSING",
-      `xtool \u58F3\u7F3A\u5C11\u539F\u751F\u6865\u63D2\u4EF6\u6E90\u7801\uFF08${join16(shellDir, "plugins", "adep-bridge", "Package.swift")}\uFF09\uFF1A\u58F3\u7684 Package.swift \u4EE5 .package(path:) \u786C\u4F9D\u8D56\u5B83\uFF0C\u7F3A\u5931\u65F6**\u89E3\u6790\u6E05\u5355\u5373\u5931\u8D25**\uFF08\u4E0D\u662F\u8FD0\u884C\u671F\u5C11\u4E2A\u529F\u80FD\uFF09\u3002\u8BF7\u91CD\u65B0 adep app init --platform mobile --toolchain xtool\uFF0C\u6216\u624B\u5DE5\u8865\u8BE5\u76EE\u5F55`
+      `xtool \u58F3\u7F3A\u5C11\u539F\u751F\u6865\u63D2\u4EF6\u6E90\u7801\uFF08${join20(shellDir, "plugins", "adep-bridge", "Package.swift")}\uFF09\uFF1A\u58F3\u7684 Package.swift \u4EE5 .package(path:) \u786C\u4F9D\u8D56\u5B83\uFF0C\u7F3A\u5931\u65F6**\u89E3\u6790\u6E05\u5355\u5373\u5931\u8D25**\uFF08\u4E0D\u662F\u8FD0\u884C\u671F\u5C11\u4E2A\u529F\u80FD\uFF09\u3002\u8BF7\u91CD\u65B0 adep app init --platform mobile --toolchain xtool\uFF0C\u6216\u624B\u5DE5\u8865\u8BE5\u76EE\u5F55`
     );
   }
 }
@@ -33623,8 +34124,8 @@ function probeCommand(command, args) {
   });
 }
 function xcodebuildArgs(shellDir, outDir) {
-  const appDir = join16(shellDir, "ios", "App");
-  const project2 = join16(appDir, "App.xcodeproj");
+  const appDir = join20(shellDir, "ios", "App");
+  const project2 = join20(appDir, "App.xcodeproj");
   const args = [
     // 有 workspace（pod install 后）用 workspace；否则退到 xcodeproj（无插件的最小工程）。
     "-project",
@@ -33635,7 +34136,7 @@ function xcodebuildArgs(shellDir, outDir) {
     "Release",
     "archive",
     "-archivePath",
-    join16(outDir, `${basename2(shellDir)}.xcarchive`),
+    join20(outDir, `${basename2(shellDir)}.xcarchive`),
     // unsigned：平台不出具任何签名（PRD §2.11.6「平台不出具签名」）。
     // 显式 CODE_SIGNING_ALLOWED=NO——不带任何签名身份（CODE_SIGN_IDENTITY / PROVISIONING_PROFILE）。
     "CODE_SIGNING_ALLOWED=NO",
@@ -33644,8 +34145,8 @@ function xcodebuildArgs(shellDir, outDir) {
   return args;
 }
 async function runXcodebuild(input2) {
-  const workspace = join16(input2.shellDir, "ios", "App", "App.xcworkspace");
-  const project2 = join16(input2.shellDir, "ios", "App", "App.xcodeproj");
+  const workspace = join20(input2.shellDir, "ios", "App", "App.xcworkspace");
+  const project2 = join20(input2.shellDir, "ios", "App", "App.xcodeproj");
   if (!await pathExists(workspace) && !await pathExists(project2)) {
     throw missingMobileDepsError(input2.shellDir, "ios");
   }
@@ -33662,7 +34163,7 @@ async function assertUnsignedIosArchive(archivePath) {
   if (!await pathExists(archivePath)) {
     throw new InitError("APP_ARCHIVE_INCOMPLETE", `iOS archive \u4E0D\u5B58\u5728\uFF1A${archivePath}`);
   }
-  const applicationsDir = join16(archivePath, "Products", "Applications");
+  const applicationsDir = join20(archivePath, "Products", "Applications");
   let hasAppBundle = false;
   try {
     const entries = await readdir6(applicationsDir, { withFileTypes: true });
@@ -33692,7 +34193,7 @@ async function assertUnsignedIosArchive(archivePath) {
         continue;
       }
       if (entry.isDirectory()) {
-        await walk(join16(dir, entry.name), childRel, depth + 1);
+        await walk(join20(dir, entry.name), childRel, depth + 1);
       }
     }
   };
@@ -33705,10 +34206,10 @@ async function assertUnsignedIosArchive(archivePath) {
   }
 }
 function resolveGradlew(shellDir) {
-  return process.platform === "win32" ? join16(shellDir, "android", "gradlew.bat") : join16(shellDir, "android", "gradlew");
+  return process.platform === "win32" ? join20(shellDir, "android", "gradlew.bat") : join20(shellDir, "android", "gradlew");
 }
 async function copyGradleApkToOutDir(shellDir, outDir) {
-  const outputsRoot = join16(shellDir, "android", "app", "build", "outputs", "apk");
+  const outputsRoot = join20(shellDir, "android", "app", "build", "outputs", "apk");
   const copied = [];
   const walk = async (dir, depth) => {
     if (depth > 2) return;
@@ -33719,9 +34220,9 @@ async function copyGradleApkToOutDir(shellDir, outDir) {
       return;
     }
     for (const entry of entries) {
-      const full = join16(dir, entry.name);
+      const full = join20(dir, entry.name);
       if (entry.isFile() && entry.name.endsWith(".apk")) {
-        await copyFile(full, join16(outDir, entry.name));
+        await copyFile2(full, join20(outDir, entry.name));
         copied.push(entry.name);
         continue;
       }
@@ -33737,7 +34238,7 @@ async function runGradle(input2) {
   const gradlew = resolveGradlew(input2.shellDir);
   if (!await pathExists(gradlew)) throw missingMobileDepsError(input2.shellDir, "android");
   if (process.platform === "win32") {
-    await spawnChild(join16(input2.shellDir, "android"), "cmd.exe", [
+    await spawnChild(join20(input2.shellDir, "android"), "cmd.exe", [
       "/d",
       "/s",
       "/c",
@@ -33745,14 +34246,14 @@ async function runGradle(input2) {
       "assembleRelease"
     ]);
   } else {
-    await spawnChild(join16(input2.shellDir, "android"), gradlew, ["assembleRelease"]);
+    await spawnChild(join20(input2.shellDir, "android"), gradlew, ["assembleRelease"]);
   }
-  await mkdir9(input2.outDir, { recursive: true });
+  await mkdir10(input2.outDir, { recursive: true });
   const copied = await copyGradleApkToOutDir(input2.shellDir, input2.outDir);
   if (copied.length === 0) {
     throw new InitError(
       "APP_ARTIFACT_MISSING",
-      `gradle \u5DF2\u6210\u529F\u4F46 ${join16(input2.shellDir, "android", "app", "build", "outputs", "apk")} \u4E0B\u6CA1\u6709 .apk\uFF1AassembleRelease \u53EF\u80FD\u88AB\u964D\u7EA7\u6210\u522B\u7684\u53D8\u4F53\uFF0C\u8BF7\u68C0\u67E5 android \u5DE5\u7A0B\u7684\u6784\u5EFA\u53D8\u4F53\u914D\u7F6E`
+      `gradle \u5DF2\u6210\u529F\u4F46 ${join20(input2.shellDir, "android", "app", "build", "outputs", "apk")} \u4E0B\u6CA1\u6709 .apk\uFF1AassembleRelease \u53EF\u80FD\u88AB\u964D\u7EA7\u6210\u522B\u7684\u53D8\u4F53\uFF0C\u8BF7\u68C0\u67E5 android \u5DE5\u7A0B\u7684\u6784\u5EFA\u53D8\u4F53\u914D\u7F6E`
     );
   }
 }
@@ -33818,6 +34319,10 @@ async function runElectronBuilder(input2) {
   }
   await spawnChild(input2.shellDir, binary, args, void 0, env);
 }
+
+// packages/cli/src/app-build/artifacts.ts
+import { readFile as readFile15, readdir as readdir7 } from "node:fs/promises";
+import { join as join21, relative as relative2 } from "node:path";
 function isArtifact(name, isDirectory, platform, toolchain) {
   if (toolchain === "xtool") return !isDirectory && name.endsWith(".ipa");
   if (platform === "ios") return isDirectory && name.endsWith(".xcarchive");
@@ -33830,17 +34335,17 @@ function isArtifact(name, isDirectory, platform, toolchain) {
 }
 async function findArtifacts(shellDir, outDir, platform, toolchain = "capacitor") {
   const found = [];
-  const scanRoot = toolchain === "xtool" ? join16(shellDir, XTOOL_ARTIFACT_DIR) : outDir;
+  const scanRoot = toolchain === "xtool" ? join21(shellDir, XTOOL_ARTIFACT_DIR) : outDir;
   const walk = async (dir, depth) => {
     if (depth > 3) return;
     let entries;
     try {
-      entries = await readdir6(dir, { withFileTypes: true });
+      entries = await readdir7(dir, { withFileTypes: true });
     } catch {
       return;
     }
     for (const entry of entries) {
-      const full = join16(dir, entry.name);
+      const full = join21(dir, entry.name);
       if (isArtifact(entry.name, entry.isDirectory(), platform, toolchain)) {
         found.push(relative2(shellDir, full).split(/[\\/]/u).join("/"));
         continue;
@@ -33891,7 +34396,7 @@ function linuxTargetSkips(declared, artifacts) {
 }
 async function readLinuxDeclaredTargets(shellDir) {
   try {
-    const raw = await readFile12(join16(shellDir, "package.json"), "utf8");
+    const raw = await readFile15(join21(shellDir, "package.json"), "utf8");
     const parsed = JSON.parse(raw);
     const target = parsed.build?.linux?.target;
     if (typeof target === "string") return [target];
@@ -33902,69 +34407,8 @@ async function readLinuxDeclaredTargets(shellDir) {
     return [];
   }
 }
-async function fetchAndInjectSite(input2) {
-  const workDir = await mkdtemp(join16(tmpdir(), "adep-app-build-"));
-  try {
-    const zipPath = join16(workDir, "bundle.zip");
-    await input2.api.downloadBundle(input2.jobId, zipPath);
-    const entries = zipRead(await readFile12(zipPath));
-    const manifest = readManifest(entries);
-    verifySiteContents(manifest, entries);
-    const site = collectSiteEntries(entries);
-    if (site.size === 0) {
-      throw new InitError(
-        "APP_NO_PUBLISHED_FRONTEND",
-        `\u9879\u76EE "${input2.projectSlug}" \u6CA1\u6709\u5DF2\u53D1\u5E03\u7684\u9875\u9762\u4EA7\u7269\uFF08\u5BFC\u51FA\u5305\u5185\u6CA1\u6709 ${SITE_PREFIX}\uFF09\uFF1A\u8BF7\u5148\u6267\u884C adep publish --only frontend --project ${input2.projectSlug}`
-      );
-    }
-    return { manifest, written: await writeSiteTree(input2.shellDir, site) };
-  } finally {
-    await rm3(workDir, { recursive: true, force: true });
-  }
-}
-async function readEntryPage(indexPath) {
-  try {
-    return await readFile12(indexPath, "utf8");
-  } catch (error62) {
-    const code = typeof error62 === "object" && error62 !== null ? error62.code : void 0;
-    if (code === "ENOENT") {
-      throw new InitError(
-        "APP_SITE_MISSING",
-        `\u7AD9\u70B9\u4EA7\u7269\u7F3A\u5165\u53E3\u9875\uFF1A${indexPath} \u4E0D\u5B58\u5728\u3002\u79FB\u52A8\u58F3\u7684 WebView \u6052\u52A0\u8F7D index.html\uFF0C\u7F3A\u4E86\u88C5\u673A\u5C31\u662F\u767D\u5C4F\u2014\u2014\u8BF7\u786E\u8BA4\u7AD9\u70B9\u5DF2\u53D1\u5E03\u4E14\u5165\u53E3\u9875\u662F**\u6839\u7EA7** index.html\uFF08\`adep publish --only frontend\`\uFF09\uFF0C\u518D\u91CD\u8DD1 adep app build`
-      );
-    }
-    throw new InitError(
-      "APP_SITE_UNREADABLE",
-      `\u7AD9\u70B9\u5165\u53E3\u9875\u8BFB\u4E0D\u51FA\u6765\uFF1A${indexPath}\uFF08${error62 instanceof Error ? error62.message : String(error62)}\uFF09`
-    );
-  }
-}
-async function injectMobileShellAssets(input2) {
-  const siteRoot = join16(input2.shellDir, SHELL_SITE_DIR);
-  const indexPath = join16(siteRoot, "index.html");
-  const html = await readEntryPage(indexPath);
-  const permissionsJson = `${JSON.stringify(
-    { schemaVersion: 1, permissions: sortPermissions(input2.permissions) },
-    null,
-    2
-  )}
-`;
-  await writeFile8(join16(siteRoot, MOBILE_SITE_ASSET_FILES.permissions), permissionsJson);
-  await copyFile(
-    join16(input2.shellDir, "web", "adep-bridge.js"),
-    join16(siteRoot, MOBILE_SITE_ASSET_FILES.bridge)
-  );
-  await copyFile(
-    join16(input2.shellDir, "adep.app.json"),
-    join16(siteRoot, MOBILE_SITE_ASSET_FILES.config)
-  );
-  if (html.includes("adep-bridge.js")) return;
-  const tag = '<script src="/adep-bridge.js"></script>';
-  const next = html.includes("</head>") ? html.replace("</head>", `${tag}
-</head>`) : `${tag}
-${html}`;
-  await writeFile8(indexPath, next);
-}
+
+// packages/cli/src/app-build.ts
 async function buildDesktopApp(options, deps) {
   const shellDir = resolve8(options.dir);
   const platform = normalizePlatform(options.platform);
@@ -33972,7 +34416,7 @@ async function buildDesktopApp(options, deps) {
   const toolchain = normalizeToolchain(options.toolchain);
   const prepareOnly = options.prepareOnly === true;
   const now = deps.now ?? (() => /* @__PURE__ */ new Date());
-  const outDir = join16(shellDir, SHELL_OUT_DIR);
+  const outDir = join22(shellDir, SHELL_OUT_DIR);
   if (isMobilePlatform(platform) && target === "dir") {
     throw new InitError(
       "INVALID_TARGET",
@@ -34033,7 +34477,7 @@ async function buildDesktopApp(options, deps) {
     if (toolchain === "capacitor" && (platform === "ios" || platform === "android")) {
       await (deps.runCapSync ?? syncCapacitorAssets)({ shellDir, platform });
     }
-    await mkdir9(outDir, { recursive: true });
+    await mkdir11(outDir, { recursive: true });
     await (deps.runPackager ?? runPlatformPackager)({
       shellDir,
       platform,
@@ -34044,7 +34488,7 @@ async function buildDesktopApp(options, deps) {
     });
     artifacts = await findArtifacts(shellDir, outDir, platform, toolchain);
     if (artifacts.length === 0) {
-      const scanned = toolchain === "xtool" ? join16(shellDir, XTOOL_ARTIFACT_DIR) : outDir;
+      const scanned = toolchain === "xtool" ? join22(shellDir, XTOOL_ARTIFACT_DIR) : outDir;
       const hint = toolchain === "xtool" ? "`xtool dev build --ipa` \u7684\u4EA7\u7269\u5E94\u5728 xtool/<product>.ipa\uFF08\u65E0\u8F93\u51FA\u4F4D\u53C2\u6570\uFF09\uFF1B\u8BF7\u68C0\u67E5 xtool \u662F\u5426\u771F\u7684\u8DD1\u5230\u4E86\u6253\u5305\uFF08\u800C\u4E0D\u662F\u5728\u7F16\u8BD1\u9636\u6BB5\u9000\u51FA\uFF09" : "\u8BF7\u68C0\u67E5\u58F3\u5DE5\u7A0B\u7684\u539F\u751F\u5DE5\u7A0B / build \u914D\u7F6E";
       throw new InitError(
         "APP_ARTIFACT_MISSING",
@@ -34053,7 +34497,7 @@ async function buildDesktopApp(options, deps) {
     }
     if (platform === "ios" && toolchain === "capacitor") {
       for (const artifact of artifacts) {
-        await assertUnsignedIosArchive(join16(shellDir, artifact));
+        await assertUnsignedIosArchive(join22(shellDir, artifact));
       }
     }
     if (platform === "linux" && target === "installer") {
@@ -34086,9 +34530,9 @@ async function buildDesktopApp(options, deps) {
     artifacts,
     warnings
   };
-  await mkdir9(outDir, { recursive: true });
-  const reportPath = join16(outDir, REPORT_FILE);
-  await writeFile8(reportPath, `${JSON.stringify(report, null, 2)}
+  await mkdir11(outDir, { recursive: true });
+  const reportPath = join22(outDir, REPORT_FILE);
+  await writeFile12(reportPath, `${JSON.stringify(report, null, 2)}
 `);
   return {
     appPath: shellDir,
@@ -34132,17 +34576,17 @@ async function createAppBuildApi(paths, cwd) {
 }
 
 // packages/cli/src/app-doctor.ts
-import { readFile as readFile14, stat as stat9 } from "node:fs/promises";
-import { join as join18 } from "node:path";
+import { readFile as readFile17, stat as stat9 } from "node:fs/promises";
+import { join as join24 } from "node:path";
 
 // packages/cli/src/app-offline-build.ts
 init_zip();
 init_auth();
 import { createHash as createHash3 } from "node:crypto";
-import { access, copyFile as copyFile2, mkdir as mkdir10, mkdtemp as mkdtemp2, readFile as readFile13, rm as rm4, writeFile as writeFile9 } from "node:fs/promises";
+import { access, copyFile as copyFile3, mkdir as mkdir12, mkdtemp as mkdtemp2, readFile as readFile16, rm as rm4, writeFile as writeFile13 } from "node:fs/promises";
 import { spawn as spawn3 } from "node:child_process";
 import { tmpdir as tmpdir2 } from "node:os";
-import { dirname as dirname11, join as join17, posix as posix2, resolve as resolve9 } from "node:path";
+import { dirname as dirname10, join as join23, posix as posix2, resolve as resolve9 } from "node:path";
 init_client();
 var SHELL_OFFLINE_DIR = "app/offline";
 var SHELL_SITE_OFFLINE_DIR = "app/site/offline";
@@ -34184,15 +34628,15 @@ function collectOfflineEntries(entries) {
   return collected;
 }
 async function writeOfflineTree(shellDir, collected, targetRel) {
-  const targetRoot = join17(shellDir, targetRel);
+  const targetRoot = join23(shellDir, targetRel);
   await rm4(targetRoot, { recursive: true, force: true });
-  await mkdir10(targetRoot, { recursive: true });
+  await mkdir12(targetRoot, { recursive: true });
   const written = [];
   for (const [rel, bytes] of collected) {
     if (rel.length === 0 || rel.endsWith("/")) continue;
-    const dest = join17(targetRoot, ...rel.split("/"));
-    await mkdir10(dirname11(dest), { recursive: true });
-    await writeFile9(dest, bytes);
+    const dest = join23(targetRoot, ...rel.split("/"));
+    await mkdir12(dirname10(dest), { recursive: true });
+    await writeFile13(dest, bytes);
     written.push({ path: `${targetRel}/${rel}`, size: bytes.length });
   }
   return written;
@@ -34286,14 +34730,14 @@ async function buildOfflineApp(options, deps) {
     );
   }
   if (mobileOffline) {
-    const entry = join17(shellDir, "app", "site", "index.html");
+    const entry = join23(shellDir, "app", "site", "index.html");
     if (!await fileExists(entry)) {
       throw new InitError(
         "APP_SITE_MISSING",
         `\u79BB\u7EBF\u5305\u7F3A\u9875\u9762\u4EA7\u7269\uFF1A${entry} \u4E0D\u5B58\u5728\u3002\u8BF7\u5148\u6267\u884C ` + (toolchain === "xtool" ? "`adep app build --platform ios --toolchain xtool`\uFF08\u62C9\u53D6\u9875\u9762\u4EA7\u7269\u5E76\u6CE8\u5165\u9875\u9762\u6865 / \u58F3\u914D\u7F6E\uFF09\uFF0C" : "`adep app build --platform android`\uFF08\u62C9\u53D6\u9875\u9762\u4EA7\u7269\u5E76\u6CE8\u5165\u9875\u9762\u6865 / \u58F3\u914D\u7F6E\uFF09\uFF0C") + "\u518D\u6267\u884C\u79BB\u7EBF\u6784\u5EFA\u2014\u2014\u79BB\u7EBF\u6784\u5EFA\u53EA\u8FFD\u52A0 site/offline/ \u5B50\u6811\uFF0C\u4E0D\u4EA7\u751F\u9875\u9762\u672C\u4F53"
       );
     }
-    const loaderSource = join17(shellDir, MOBILE_OFFLINE_LOADER.source);
+    const loaderSource = join23(shellDir, MOBILE_OFFLINE_LOADER.source);
     if (!await fileExists(loaderSource)) {
       throw new InitError(
         "OFFLINE_LOADER_MISSING",
@@ -34318,11 +34762,11 @@ ${finished.error ?? "\u670D\u52A1\u7AEF\u672A\u63D0\u4F9B\u539F\u56E0"}
 \uFF08\u8FD9\u4E9B\u51FD\u6570\u4E0D\u53EF\u79FB\u690D\u5230\u8BBE\u5907\u7AEF\uFF1B\u4ECE\u6253\u5305\u914D\u7F6E\u7684\u79BB\u7EBF\u767D\u540D\u5355\u79FB\u9664\u540E\u91CD\u65B0\u4FDD\u5B58\uFF0C\u5373\u53EF\u7EE7\u7EED\u6784\u5EFA\uFF09`
     );
   }
-  const workDir = await mkdtemp2(join17(tmpdir2(), "adep-app-offline-build-"));
+  const workDir = await mkdtemp2(join23(tmpdir2(), "adep-app-offline-build-"));
   try {
-    const bundlePath = join17(workDir, "bundle.adepack");
+    const bundlePath = join23(workDir, "bundle.adepack");
     await deps.api.downloadBundle(project2.id, finished.id, bundlePath);
-    const entries = zipRead(await readFile13(bundlePath));
+    const entries = zipRead(await readFile16(bundlePath));
     const manifest = readManifest(entries, { allowOfflinePortZero: true });
     const collected = collectOfflineEntries(entries);
     const functionEntries = readFunctionsIndex(collected);
@@ -34331,9 +34775,9 @@ ${finished.error ?? "\u670D\u52A1\u7AEF\u672A\u63D0\u4F9B\u539F\u56E0"}
     if (mobileOffline) {
       const permissions = sortPermissions(await deps.api.getPackagingPermissions(project2.id));
       await injectMobileShellAssets({ shellDir, permissions });
-      await copyFile2(
-        join17(shellDir, MOBILE_OFFLINE_LOADER.source),
-        join17(shellDir, MOBILE_OFFLINE_LOADER.dest)
+      await copyFile3(
+        join23(shellDir, MOBILE_OFFLINE_LOADER.source),
+        join23(shellDir, MOBILE_OFFLINE_LOADER.dest)
       );
     }
     const builtAt = now().toISOString();
@@ -34349,13 +34793,13 @@ ${finished.error ?? "\u670D\u52A1\u7AEF\u672A\u63D0\u4F9B\u539F\u56E0"}
           platform: "ios",
           target: "installer",
           toolchain: "xtool",
-          outDir: join17(shellDir, "dist")
+          outDir: join23(shellDir, "dist")
         });
-        artifacts = await findArtifacts(shellDir, join17(shellDir, "dist"), "ios", "xtool");
+        artifacts = await findArtifacts(shellDir, join23(shellDir, "dist"), "ios", "xtool");
       } else if (androidOffline) {
         await (deps.runCapSync ?? syncCapacitorAssets)({ shellDir, platform: "android" });
-        const outDir2 = join17(shellDir, "dist");
-        await mkdir10(outDir2, { recursive: true });
+        const outDir2 = join23(shellDir, "dist");
+        await mkdir12(outDir2, { recursive: true });
         await runner({
           shellDir,
           platform: "android",
@@ -34366,8 +34810,8 @@ ${finished.error ?? "\u670D\u52A1\u7AEF\u672A\u63D0\u4F9B\u539F\u56E0"}
         artifacts = await findArtifacts(shellDir, outDir2, "android");
       } else {
         const platform = resolveOfflinePlatform();
-        const outDir2 = join17(shellDir, "dist");
-        await mkdir10(outDir2, { recursive: true });
+        const outDir2 = join23(shellDir, "dist");
+        await mkdir12(outDir2, { recursive: true });
         await runner({
           shellDir,
           platform,
@@ -34380,7 +34824,7 @@ ${finished.error ?? "\u670D\u52A1\u7AEF\u672A\u63D0\u4F9B\u539F\u56E0"}
       if (artifacts.length === 0) {
         throw new InitError(
           "APP_ARTIFACT_MISSING",
-          toolchain === "xtool" ? `\u6253\u5305\u5668\u5DF2\u6267\u884C\u4F46 ${join17(shellDir, "xtool")} \u4E0B\u6CA1\u6709 ios \u4EA7\u7269\uFF1A\`xtool dev build --ipa\` \u7684\u4EA7\u7269\u5E94\u5728 xtool/<product>.ipa\uFF08\u65E0\u8F93\u51FA\u4F4D\u53C2\u6570\uFF09\uFF1B\u8BF7\u68C0\u67E5 xtool \u662F\u5426\u771F\u7684\u8DD1\u5230\u4E86\u6253\u5305\uFF08\u800C\u4E0D\u662F\u5728\u7F16\u8BD1\u9636\u6BB5\u9000\u51FA\uFF09` : androidOffline ? `\u6253\u5305\u5668\u5DF2\u6267\u884C\u4F46 ${join17(shellDir, "dist")} \u4E0B\u6CA1\u6709 android \u4EA7\u7269\uFF1Agradle assembleRelease \u7684 APK \u5E94\u5DF2\u88AB\u590D\u5236\u8FDB dist/\uFF08\u89C1 copyGradleApkToOutDir\uFF09\uFF1B\u8BF7\u68C0\u67E5 android \u5DE5\u7A0B\u7684\u6784\u5EFA\u53D8\u4F53\u914D\u7F6E` : `electron-builder \u5DF2\u6267\u884C\u4F46 ${join17(shellDir, "dist")} \u4E0B\u6CA1\u6709\u4EA7\u7269\uFF1A\u8BF7\u68C0\u67E5\u58F3\u5DE5\u7A0B build \u914D\u7F6E\u7684 target`
+          toolchain === "xtool" ? `\u6253\u5305\u5668\u5DF2\u6267\u884C\u4F46 ${join23(shellDir, "xtool")} \u4E0B\u6CA1\u6709 ios \u4EA7\u7269\uFF1A\`xtool dev build --ipa\` \u7684\u4EA7\u7269\u5E94\u5728 xtool/<product>.ipa\uFF08\u65E0\u8F93\u51FA\u4F4D\u53C2\u6570\uFF09\uFF1B\u8BF7\u68C0\u67E5 xtool \u662F\u5426\u771F\u7684\u8DD1\u5230\u4E86\u6253\u5305\uFF08\u800C\u4E0D\u662F\u5728\u7F16\u8BD1\u9636\u6BB5\u9000\u51FA\uFF09` : androidOffline ? `\u6253\u5305\u5668\u5DF2\u6267\u884C\u4F46 ${join23(shellDir, "dist")} \u4E0B\u6CA1\u6709 android \u4EA7\u7269\uFF1Agradle assembleRelease \u7684 APK \u5E94\u5DF2\u88AB\u590D\u5236\u8FDB dist/\uFF08\u89C1 copyGradleApkToOutDir\uFF09\uFF1B\u8BF7\u68C0\u67E5 android \u5DE5\u7A0B\u7684\u6784\u5EFA\u53D8\u4F53\u914D\u7F6E` : `electron-builder \u5DF2\u6267\u884C\u4F46 ${join23(shellDir, "dist")} \u4E0B\u6CA1\u6709\u4EA7\u7269\uFF1A\u8BF7\u68C0\u67E5\u58F3\u5DE5\u7A0B build \u914D\u7F6E\u7684 target`
         );
       }
     }
@@ -34408,10 +34852,10 @@ ${finished.error ?? "\u670D\u52A1\u7AEF\u672A\u63D0\u4F9B\u539F\u56E0"}
       },
       artifacts
     };
-    const outDir = join17(shellDir, "dist");
-    await mkdir10(outDir, { recursive: true });
-    const reportPath = join17(outDir, "build-report.json");
-    await writeFile9(reportPath, `${JSON.stringify(report, null, 2)}
+    const outDir = join23(shellDir, "dist");
+    await mkdir12(outDir, { recursive: true });
+    const reportPath = join23(outDir, "build-report.json");
+    await writeFile13(reportPath, `${JSON.stringify(report, null, 2)}
 `);
     return {
       appPath: shellDir,
@@ -34472,7 +34916,7 @@ async function createAppOfflineBuildApi(paths, cwd) {
       }
       const response = await client.download(downloadUrl, "APP_OFFLINE_BUILD_DOWNLOAD_FAILED");
       const bytes = Buffer.from(await response.arrayBuffer());
-      await writeFile9(outputPath, bytes);
+      await writeFile13(outputPath, bytes);
       return { path: outputPath, size: bytes.length };
     },
     // 与在线构建 `AppBuildDeps.getPackagingPermissions` 同一端点同一读法（app-build.ts 同款）。
@@ -34510,7 +34954,7 @@ async function pathExists2(path) {
 }
 async function missingEntries(root, rels) {
   const probed = await Promise.all(
-    rels.map(async (rel) => ({ rel, exists: await pathExists2(join18(root, ...rel.split("/"))) }))
+    rels.map(async (rel) => ({ rel, exists: await pathExists2(join24(root, ...rel.split("/"))) }))
   );
   return probed.filter((entry) => !entry.exists).map((entry) => entry.rel);
 }
@@ -34524,10 +34968,10 @@ async function resolveTargets(shellDir, template, platform) {
   if (template === "app-mobile-xtool") return [{ platform: "ios", toolchain: "xtool" }];
   if (template === "app-mobile") {
     const targets = [];
-    if (await pathExists2(join18(shellDir, "ios", "App"))) {
+    if (await pathExists2(join24(shellDir, "ios", "App"))) {
       targets.push({ platform: "ios", toolchain: "capacitor" });
     }
-    if (await pathExists2(join18(shellDir, "android", "gradlew"))) {
+    if (await pathExists2(join24(shellDir, "android", "gradlew"))) {
       targets.push({ platform: "android", toolchain: "capacitor" });
     }
     return targets;
@@ -34535,10 +34979,10 @@ async function resolveTargets(shellDir, template, platform) {
   return [];
 }
 async function checkConfigDrift(shellDir, config2) {
-  const siteConfigPath = join18(shellDir, SHELL_SITE_DIR, MOBILE_SITE_ASSET_FILES.config);
+  const siteConfigPath = join24(shellDir, SHELL_SITE_DIR, MOBILE_SITE_ASSET_FILES.config);
   let text;
   try {
-    text = await readFile14(siteConfigPath, "utf8");
+    text = await readFile17(siteConfigPath, "utf8");
   } catch {
     return {
       id: "configDrift",
@@ -34579,8 +35023,8 @@ async function checkConfigDrift(shellDir, config2) {
   };
 }
 async function checkOffline(shellDir) {
-  const desktopRoot = join18(shellDir, SHELL_OFFLINE_DIR);
-  const siteRoot = join18(shellDir, SHELL_SITE_OFFLINE_DIR);
+  const desktopRoot = join24(shellDir, SHELL_OFFLINE_DIR);
+  const siteRoot = join24(shellDir, SHELL_SITE_OFFLINE_DIR);
   const hasDesktop = await pathExists2(desktopRoot);
   const hasSite = await pathExists2(siteRoot);
   if (!hasDesktop && !hasSite) {
@@ -34613,7 +35057,7 @@ async function checkOffline(shellDir) {
   let functions = [];
   try {
     const index = JSON.parse(
-      await readFile14(join18(root, ...OFFLINE_BUNDLE_PATHS.functionsIndex.split("/")), "utf8")
+      await readFile17(join24(root, ...OFFLINE_BUNDLE_PATHS.functionsIndex.split("/")), "utf8")
     );
     functions = index.functions ?? [];
   } catch (error62) {
@@ -34626,7 +35070,7 @@ async function checkOffline(shellDir) {
     };
   }
   const missingSources = (await missingEntries(
-    join18(root, "functions"),
+    join24(root, "functions"),
     functions.map((entry) => typeof entry.name === "string" ? entry.name : "").filter((name) => name !== "").map((name) => `${name}.mjs`)
   )).map((rel) => rel.slice(0, -".mjs".length));
   if (missingSources.length > 0) {
@@ -34654,10 +35098,10 @@ async function checkIdentity(shellDir, desktopShaped) {
       detail: "\u79FB\u52A8\u58F3\u5F62\u6001\uFF1A\u8EAB\u4EFD\u5728 Keychain / Keystore\uFF08\u672C\u9879\u53EA\u8BFB\u684C\u9762\u58F3\u7684\u72B6\u6001\u6587\u4EF6\uFF09"
     };
   }
-  const file2 = join18(shellDir, IDENTITY_STATUS_REL);
+  const file2 = join24(shellDir, IDENTITY_STATUS_REL);
   let text;
   try {
-    text = await readFile14(file2, "utf8");
+    text = await readFile17(file2, "utf8");
   } catch {
     return {
       id: "identity",
@@ -34792,7 +35236,7 @@ async function runShellDoctor(shellDir, deps = {}) {
   }
   let html;
   try {
-    html = await readEntryPage(join18(shellDir, SHELL_SITE_DIR, "index.html"));
+    html = await readEntryPage(join24(shellDir, SHELL_SITE_DIR, "index.html"));
     checks.push({
       id: "siteEntry",
       status: "ok",
@@ -34810,7 +35254,7 @@ async function runShellDoctor(shellDir, deps = {}) {
   }
   const desktopShaped = config2.template === "app-desktop";
   if (desktopShaped) {
-    if (await pathExists2(join18(shellDir, "preload.cjs"))) {
+    if (await pathExists2(join24(shellDir, "preload.cjs"))) {
       checks.push({
         id: "bridgeTag",
         status: "ok",
@@ -34855,7 +35299,7 @@ async function runShellDoctor(shellDir, deps = {}) {
     });
   } else {
     const missingAssets = await missingEntries(
-      join18(shellDir, SHELL_SITE_DIR),
+      join24(shellDir, SHELL_SITE_DIR),
       Object.values(MOBILE_SITE_ASSET_FILES)
     );
     if (missingAssets.length === 0) {
@@ -34924,8 +35368,8 @@ function formatShellDoctorReport(report) {
 }
 
 // packages/cli/src/app-sync.ts
-import { readFile as readFile15 } from "node:fs/promises";
-import { join as join19 } from "node:path";
+import { readFile as readFile18 } from "node:fs/promises";
+import { join as join25 } from "node:path";
 
 // packages/app-runtime/src/device-sqlite.ts
 function createDeviceSqliteDriver(sqlite) {
@@ -35361,7 +35805,7 @@ var APP_SYNC_CODES = {
   /** 当前运行时无 SQLite 内建模块（需要 Bun 或 Node ≥ 22.5）。 */
   runtimeUnsupported: "APP_SYNC_RUNTIME_UNSUPPORTED"
 };
-var LOCAL_DB_REL = join19("data", "offline.sqlite");
+var LOCAL_DB_REL = join25("data", "offline.sqlite");
 function resolveOwnerKey(explicit) {
   const fromEnv = process.env["ADEP_OWNER_KEY"];
   const value = (explicit ?? fromEnv ?? "").trim();
@@ -35436,9 +35880,9 @@ async function runAppSync(options) {
     );
   }
   const ownerKey = resolveOwnerKey(options.ownerKey);
-  const localDb = join19(shellDir, LOCAL_DB_REL);
+  const localDb = join25(shellDir, LOCAL_DB_REL);
   try {
-    await readFile15(localDb);
+    await readFile18(localDb);
   } catch (error62) {
     const code = error62.code;
     if (code === "ENOENT" || code === "EISDIR") {
@@ -35499,14 +35943,14 @@ function formatAppSyncReport(report) {
 // packages/cli/src/app-open.ts
 import { spawn as spawn4 } from "node:child_process";
 import { stat as stat10 } from "node:fs/promises";
-import { join as join20 } from "node:path";
+import { join as join26 } from "node:path";
 var OPEN_UNSUPPORTED_HINT = {
   "app-mobile": "\u79FB\u52A8\u58F3\u6CA1\u6709\u5F00\u53D1\u9884\u89C8\u8DEF\u5F84\uFF1A\u4E0B\u4E00\u6B65\u662F npm install && npx cap add ios / android\uFF08\u539F\u751F\u5DE5\u7A0B\u7531 Capacitor \u751F\u6210\uFF09\uFF0C\u968F\u540E\u5728 Xcode / Android Studio \u91CC\u8FD0\u884C",
   "app-mobile-xtool": "xtool \u79FB\u52A8\u58F3\u6CA1\u6709\u5F00\u53D1\u9884\u89C8\u8DEF\u5F84\uFF1A\u5728\u8BE5\u76EE\u5F55\u6267\u884C xtool dev\uFF08\u9009\u8BBE\u5907\uFF09\u2014\u2014\u4E0D\u9700\u8981 npm start"
 };
 function resolveDevBinary(shellDir) {
   const name = process.platform === "win32" ? "electron.cmd" : "electron";
-  return join20(shellDir, "node_modules", ".bin", name);
+  return join26(shellDir, "node_modules", ".bin", name);
 }
 function defaultSpawnDev(command, args, options) {
   return spawn4(command, args, { cwd: options.cwd, stdio: "inherit" });
@@ -35792,8 +36236,8 @@ function registerApp(program2, ctx) {
 // packages/cli/src/import-cf.ts
 init_adep_config();
 init_regexp();
-import { copyFile as copyFile3, mkdir as mkdir11, readFile as readFile16, readdir as readdir7, stat as stat11, writeFile as writeFile10 } from "node:fs/promises";
-import { basename as basename3, dirname as dirname12, join as join21, relative as relative3, resolve as resolve11 } from "node:path";
+import { copyFile as copyFile4, mkdir as mkdir13, readFile as readFile19, readdir as readdir8, stat as stat11, writeFile as writeFile14 } from "node:fs/promises";
+import { basename as basename3, dirname as dirname11, join as join27, relative as relative3, resolve as resolve11 } from "node:path";
 var TomlSyntaxError = class extends Error {
   constructor(message) {
     super(message);
@@ -36047,13 +36491,13 @@ var SKIP_COPY_NAMES = /* @__PURE__ */ new Set([
 async function copyWorkerDir(sourceDir, targetDir, mainFile) {
   const copied = [];
   const renamedIndex = [];
-  const entries = await readdir7(sourceDir, { withFileTypes: true });
+  const entries = await readdir8(sourceDir, { withFileTypes: true });
   for (const entry of entries) {
-    const from = join21(sourceDir, entry.name);
-    const to = join21(targetDir, entry.name);
+    const from = join27(sourceDir, entry.name);
+    const to = join27(targetDir, entry.name);
     if (SKIP_COPY_NAMES.has(entry.name)) continue;
     if (entry.isDirectory()) {
-      await mkdir11(to, { recursive: true });
+      await mkdir13(to, { recursive: true });
       const sub = await copyWorkerDir(from, to, "");
       copied.push(...sub.copied);
       renamedIndex.push(...sub.renamedIndex);
@@ -36061,18 +36505,18 @@ async function copyWorkerDir(sourceDir, targetDir, mainFile) {
     }
     if (from === mainFile) continue;
     if (entry.name === "index.ts") {
-      await copyFile3(from, join21(targetDir, "_index.ts"));
+      await copyFile4(from, join27(targetDir, "_index.ts"));
       renamedIndex.push("_index.ts");
       continue;
     }
-    await copyFile3(from, to);
+    await copyFile4(from, to);
     copied.push(relative3(targetDir, to));
   }
   return { copied, renamedIndex };
 }
 async function readDevVars(sourceDir) {
   try {
-    const text = await readFile16(join21(sourceDir, ".dev.vars"), "utf8");
+    const text = await readFile19(join27(sourceDir, ".dev.vars"), "utf8");
     const vars = {};
     for (const line of text.split(/\r?\n/)) {
       const trimmed = line.trim();
@@ -36090,19 +36534,19 @@ async function readDevVars(sourceDir) {
 async function copyAssetsToWeb(sourceDir, assetsDir, outDir) {
   const files = [];
   const from = resolve11(sourceDir, assetsDir);
-  const target = join21(outDir, "web");
-  await mkdir11(target, { recursive: true });
-  const entries = await readdir7(from, { withFileTypes: true });
+  const target = join27(outDir, "web");
+  await mkdir13(target, { recursive: true });
+  const entries = await readdir8(from, { withFileTypes: true });
   for (const entry of entries) {
-    const src = join21(from, entry.name);
-    const dst = join21(target, entry.name);
+    const src = join27(from, entry.name);
+    const dst = join27(target, entry.name);
     if (entry.isDirectory()) {
-      await mkdir11(dst, { recursive: true });
+      await mkdir13(dst, { recursive: true });
       const sub = await copyAssetsToWeb(src, ".", outDir);
       files.push(...sub);
       continue;
     }
-    await copyFile3(src, dst);
+    await copyFile4(src, dst);
     files.push(relative3(outDir, dst));
   }
   return files;
@@ -36351,11 +36795,11 @@ function renderImportPackageJson(name) {
 async function importCfProject(cwd, sourceDir, options = {}) {
   let tomlText;
   try {
-    tomlText = await readFile16(join21(sourceDir, "wrangler.toml"), "utf8");
+    tomlText = await readFile19(join27(sourceDir, "wrangler.toml"), "utf8");
   } catch {
     throw new ImportCfError(
       "NO_WRANGLER",
-      `\u627E\u4E0D\u5230 ${join21(sourceDir, "wrangler.toml")}\uFF1A\u9700\u5728 Cloudflare \u9879\u76EE\u6839\u6267\u884C\u5BFC\u5165`
+      `\u627E\u4E0D\u5230 ${join27(sourceDir, "wrangler.toml")}\uFF1A\u9700\u5728 Cloudflare \u9879\u76EE\u6839\u6267\u884C\u5BFC\u5165`
     );
   }
   let config2;
@@ -36390,10 +36834,10 @@ async function importCfProject(cwd, sourceDir, options = {}) {
   const configText = renderAdepConfig(adepConfig, {
     header: "// \u7531 adep import cf \u751F\u6210\uFF08CF-015\uFF09\uFF1A\u7ED1\u5B9A\u58F0\u660E\u4E0E wrangler.toml \u5BF9\u5E94"
   });
-  await mkdir11(outDir, { recursive: true });
-  await writeFile10(join21(outDir, "adep.config.ts"), configText, "utf8");
+  await mkdir13(outDir, { recursive: true });
+  await writeFile14(join27(outDir, "adep.config.ts"), configText, "utf8");
   files.push("adep.config.ts");
-  await writeFile10(join21(outDir, "package.json"), renderImportPackageJson(workerName), "utf8");
+  await writeFile14(join27(outDir, "package.json"), renderImportPackageJson(workerName), "utf8");
   files.push("package.json");
   let mainCopied = false;
   if (config2.main !== void 0) {
@@ -36407,12 +36851,12 @@ async function importCfProject(cwd, sourceDir, options = {}) {
     if (!mainStat.isFile()) {
       throw new ImportCfError("MAIN_NOT_FILE", `main \u4E0D\u662F\u6587\u4EF6\uFF1A${config2.main}`);
     }
-    const fnDir = join21(outDir, "functions", workerName);
-    await mkdir11(fnDir, { recursive: true });
-    await copyFile3(mainAbs, join21(fnDir, "worker.ts"));
+    const fnDir = join27(outDir, "functions", workerName);
+    await mkdir13(fnDir, { recursive: true });
+    await copyFile4(mainAbs, join27(fnDir, "worker.ts"));
     files.push(`functions/${workerName}/worker.ts`);
     mainCopied = true;
-    const mainDir = dirname12(mainAbs);
+    const mainDir = dirname11(mainAbs);
     const { copied, renamedIndex } = await copyWorkerDir(mainDir, fnDir, mainAbs);
     if (renamedIndex.length > 0) {
       warnings.push(
@@ -36423,7 +36867,7 @@ async function importCfProject(cwd, sourceDir, options = {}) {
     if (copied.length > 0) {
       warnings.push(`\u5DF2\u590D\u5236\u540C\u76EE\u5F55\u4F9D\u8D56\u6A21\u5757 ${copied.length} \u4E2A\uFF08\u4FDD\u6301\u76F8\u5BF9 import\uFF09`);
     }
-    await writeFile10(join21(fnDir, "index.ts"), renderFunctionEntry("worker", cfBindings), "utf8");
+    await writeFile14(join27(fnDir, "index.ts"), renderFunctionEntry("worker", cfBindings), "utf8");
     files.push(`functions/${workerName}/index.ts`);
   }
   let dosMigrated = 0;
@@ -36438,20 +36882,20 @@ async function importCfProject(cwd, sourceDir, options = {}) {
       );
     }
     if (doBindings.length > 0) {
-      const fnDir = join21(outDir, "functions", workerName);
-      const workerPath = join21(fnDir, "worker.ts");
-      const workerText = await readFile16(workerPath, "utf8");
+      const fnDir = join27(outDir, "functions", workerName);
+      const workerPath = join27(fnDir, "worker.ts");
+      const workerText = await readFile19(workerPath, "utf8");
       const { text: stripped, removed } = stripDurableObjectClasses(
         workerText,
         doBindings.map((b) => b.className)
       );
-      await writeFile10(workerPath, stripped, "utf8");
+      await writeFile14(workerPath, stripped, "utf8");
       if (removed.length > 0) {
-        await mkdir11(join21(fnDir, "durable-objects"), { recursive: true });
+        await mkdir13(join27(fnDir, "durable-objects"), { recursive: true });
         await Promise.all(
           removed.map(async (r) => {
-            await writeFile10(
-              join21(fnDir, "durable-objects", `${r.className}.ts`),
+            await writeFile14(
+              join27(fnDir, "durable-objects", `${r.className}.ts`),
               `${r.source}
 `,
               "utf8"
@@ -36461,8 +36905,8 @@ async function importCfProject(cwd, sourceDir, options = {}) {
         );
       }
       if (removed.length > 0) {
-        await writeFile10(
-          join21(fnDir, "state-objects.ts"),
+        await writeFile14(
+          join27(fnDir, "state-objects.ts"),
           renderStateObjectDeclaration(doBindings, removed),
           "utf8"
         );
@@ -36507,7 +36951,7 @@ async function importCfProject(cwd, sourceDir, options = {}) {
     unsupported,
     warnings
   });
-  await writeFile10(join21(outDir, "MIGRATION.md"), migration, "utf8");
+  await writeFile14(join27(outDir, "MIGRATION.md"), migration, "utf8");
   files.push("MIGRATION.md");
   if (!mainCopied) {
     warnings.push("wrangler.toml \u672A\u58F0\u660E main\uFF1A\u672A\u751F\u6210\u51FD\u6570\uFF0C\u4EC5\u751F\u6210\u914D\u7F6E\u4E0E\u62A5\u544A");
@@ -36628,7 +37072,7 @@ init_auth();
 init_client();
 init_deploy();
 import { stat as stat16 } from "node:fs/promises";
-import { join as join28, resolve as resolve16 } from "node:path";
+import { join as join34, resolve as resolve16 } from "node:path";
 async function resolveProjectId2(client, cwd, slug) {
   const resolvedSlug = await resolveSlug(resolve16(cwd), slug);
   const listed = await client.request("/api/v1/projects", {}, "PROJECT_LIST_FAILED");
@@ -36675,8 +37119,8 @@ async function publishStaticFrontend(paths, options) {
       "\u7EAF\u9759\u6001\u7AD9\u6682\u4E0D\u652F\u6301\u53D1\u5230\u5F00\u53D1\u7AD9\u70B9\uFF1A\u8BE5\u901A\u9053\u76F4\u63A5\u4E0A\u4F20 site/\uFF0C\u4F1A\u8986\u76D6\u7EBF\u4E0A\u7AD9\u70B9\u3002\u8BF7\u6539\u7528\u5E73\u53F0\u6784\u5EFA\u901A\u9053\uFF08\u5728 web/ \u58F0\u660E scripts.build\uFF09\uFF0C\u6216\u7528 --only functions \u4E4B\u5916\u7684\u5176\u5B83\u65B9\u5F0F\u9A8C\u8BC1\u3002"
     );
   }
-  const webDir = join28(options.cwd, "web");
-  const indexStat = await stat16(join28(webDir, "index.html")).catch(() => null);
+  const webDir = join34(options.cwd, "web");
+  const indexStat = await stat16(join34(webDir, "index.html")).catch(() => null);
   if (indexStat === null || !indexStat.isFile()) {
     throw new CliError(
       "FRONTEND_NO_PAGE",
@@ -36729,7 +37173,7 @@ async function runPublish(paths, io, cwd, flags) {
     });
   }
   if (wantFrontend) {
-    const webDir = join28(cwd, "web");
+    const webDir = join34(cwd, "web");
     const webStat = await stat16(webDir).catch(() => null);
     if (webStat !== null && webStat.isDirectory()) {
       const { isStaticFrontendDir: isStaticFrontendDir2 } = await Promise.resolve().then(() => (init_frontend(), frontend_exports));
@@ -36797,6 +37241,13 @@ function renderPublish(data) {
       lines.push(`\u2713 frontend built ${status} \xB7 ${fe.siteUrl}`);
     }
   }
+  if (result.functions !== void 0) {
+    lines.push("");
+    lines.push("\u53D1\u5E03\u540E\u4E09\u6B65\uFF08\u9996\u6B21\u53D1\u5E03\u5FC5\u505A\uFF09\uFF1A");
+    lines.push("  1. adep db start                # \u542F\u52A8\u9879\u76EE\u6570\u636E\u5E93\uFF08\u82E5\u5DF2\u542F\u52A8\u8DF3\u8FC7\uFF09");
+    lines.push("  2. adep db migrate <schema.sql> # \u5EFA\u8868\uFF08\u53D1\u5E03\u4E0D\u542B\u5EFA\u8868\uFF09");
+    lines.push("  3. adep db migrate <seed.sql>   # \u79CD\u5B50\u6570\u636E\uFF08\u53EF\u9009\uFF09");
+  }
   return lines;
 }
 function registerPublish(program2, ctx) {
@@ -36830,8 +37281,8 @@ init_auth();
 // packages/cli/src/deploy-worker.ts
 init_auth();
 init_client();
-import { readdir as readdir11, readFile as readFile23 } from "node:fs/promises";
-import { join as join29, relative as relative8, resolve as resolve17, sep as sep4 } from "node:path";
+import { readdir as readdir12, readFile as readFile26 } from "node:fs/promises";
+import { join as join35, relative as relative8, resolve as resolve17, sep as sep4 } from "node:path";
 async function collectWranglerFiles(dir) {
   const root = resolve17(dir);
   const out = {};
@@ -36839,7 +37290,7 @@ async function collectWranglerFiles(dir) {
   const walk = async (sub) => {
     let entries;
     try {
-      entries = await readdir11(sub, { withFileTypes: true });
+      entries = await readdir12(sub, { withFileTypes: true });
     } catch (error62) {
       throw new CliError(
         "WORKER_DIR_UNREADABLE",
@@ -36848,11 +37299,11 @@ async function collectWranglerFiles(dir) {
     }
     for (const entry of entries) {
       if (entry.isDirectory() && skip.has(entry.name)) continue;
-      const full = join29(sub, entry.name);
+      const full = join35(sub, entry.name);
       if (entry.isDirectory()) {
         await walk(full);
       } else if (entry.isFile()) {
-        const buf = await readFile23(full).catch(() => null);
+        const buf = await readFile26(full).catch(() => null);
         if (buf === null) continue;
         if (buf.includes(0)) continue;
         out[relative8(root, full).split(sep4).join("/")] = buf.toString("utf8");
@@ -37164,20 +37615,21 @@ function registerDb(program2, ctx) {
     });
   });
   db.command("migrate").description(
-    "\u6267\u884C SQL \u8FC1\u79FB\u6587\u4EF6\uFF08`;` \u5206\u9694\u9010\u6761\u6267\u884C\uFF0C`--` \u6CE8\u91CA\u5FFD\u7565\uFF1BCREATE \u7B49\u975E\u7834\u574F\u6027\u8BED\u53E5\u514D\u786E\u8BA4\uFF09"
-  ).argument("<file>", "\u8FC1\u79FB SQL \u6587\u4EF6\u8DEF\u5F84\uFF08\u76F8\u5BF9\u5F53\u524D\u76EE\u5F55\u6216\u7EDD\u5BF9\u8DEF\u5F84\uFF09").option("-p, --project <slug>", "\u76EE\u6807\u5E73\u53F0\u9879\u76EE slug\uFF08\u7F3A\u7701\u53D6 adep.config.ts \u7684 name\uFF09").action(async (file2, flags) => {
+    "\u6267\u884C SQL \u8FC1\u79FB\u6587\u4EF6\uFF08\u53EF\u591A\u4E2A\uFF0C\u6309\u58F0\u660E\u987A\u5E8F\u6267\u884C\u2014\u2014a.sql \u5EFA\u8868\u3001b.sql \u63D2\u6570\u636E\u7684\u4F9D\u8D56\u987A\u5E8F\u5C31\u662F\u58F0\u660E\u987A\u5E8F\uFF1B\u5931\u8D25\u5373\u505C\u5E76\u6307\u5411\u5931\u8D25\u6587\u4EF6\uFF09"
+  ).argument("<files...>", "\u8FC1\u79FB SQL \u6587\u4EF6\u8DEF\u5F84\uFF08\u76F8\u5BF9\u5F53\u524D\u76EE\u5F55\u6216\u7EDD\u5BF9\u8DEF\u5F84\uFF0C\u6309\u58F0\u660E\u987A\u5E8F\u6267\u884C\uFF09").option("-p, --project <slug>", "\u76EE\u6807\u5E73\u53F0\u9879\u76EE slug\uFF08\u7F3A\u7701\u53D6 adep.config.ts \u7684 name\uFF09").action(async (files, flags) => {
     const command = ctx.io("db migrate");
     await command.run(async () => {
       const { environment, source } = await ctx.env();
       const { dbMigrate: dbMigrate2 } = await Promise.resolve().then(() => (init_db2(), db_exports));
       const result = await dbMigrate2(ctx.paths, {
         cwd: ctx.cwd,
-        file: file2,
+        files,
         environment,
         ...flags.project === void 0 ? {} : { slug: flags.project }
       });
       if (result.failed !== void 0) {
-        command.fail(result.failed.code, result.failed.message);
+        const f = result.failed;
+        command.fail(f.code, `\u6587\u4EF6 ${f.file} \u4E2D\u7684\u8BED\u53E5\u6267\u884C\u5931\u8D25\uFF1A${f.message}`);
         return;
       }
       command.line(
@@ -37655,28 +38107,40 @@ function registerHosting(program2, ctx) {
     });
   });
   hosting.command("deploy").description(
-    "[deprecated] \u63A8\u8350\u4F7F\u7528 adep publish --only frontend\u3002\u90E8\u7F72\u672C\u5730\u76EE\u5F55\u4E3A\u9759\u6001\u7AD9\u70B9\uFF1A\u9012\u5F52\u4E0A\u4F20\u5230 site/ \u5E76\u6253\u5F00\u6258\u7BA1"
-  ).argument("<dir>", "\u672C\u5730\u7AD9\u70B9\u76EE\u5F55").option("--spa", "\u6253\u5F00\u6258\u7BA1\u5E76\u542F\u7528 SPA \u56DE\u9000\uFF08\u7F3A\u7701\u4EC5\u6253\u5F00\u6258\u7BA1\uFF09", false).option("-p, --project <slug>", "\u76EE\u6807\u5E73\u53F0\u9879\u76EE slug\uFF08\u7F3A\u7701\u53D6 adep.config.ts \u7684 name\uFF09").action(async (dir, flags) => {
-    const command = ctx.io("hosting deploy");
-    if (!command.json) {
-      process.stderr.write(
-        "\u63D0\u793A\uFF1Aadep hosting deploy \u5DF2\u5E9F\u5F03\uFF0C\u63A8\u8350\u4F7F\u7528 adep publish --only frontend\uFF08\u5E73\u53F0\u4FA7\u6784\u5EFA web/ \u8349\u7A3F\uFF09\uFF1B\u5982\u786E\u9700\u4E0A\u4F20\u9884\u6784\u5EFA\u76EE\u5F55\uFF0C\u4ECD\u53EF\u7EE7\u7EED\u4F7F\u7528\u672C\u547D\u4EE4\n"
-      );
-    }
-    await command.run(async () => {
-      const { hostingDeploy: hostingDeploy2 } = await Promise.resolve().then(() => (init_hosting(), hosting_exports));
-      const result = await hostingDeploy2(ctx.paths, {
-        cwd: ctx.cwd,
-        dir,
-        ...flags.spa === true ? { spa: true } : {},
-        ...flags.project === void 0 ? {} : { slug: flags.project }
-      });
-      command.ok(result, (data) => {
-        const r = data;
-        return `\u7AD9\u70B9\u5DF2\u4E0A\u7EBF\uFF1A${r.siteUrl}\uFF08${r.uploaded.length} \u4E2A\u6587\u4EF6\uFF0CSPA \u56DE\u9000 ${r.config.spaMode ? "\u5F00" : "\u5173"}\uFF09`;
+    "[deprecated] \u63A8\u8350\u4F7F\u7528 adep publish --only frontend\u3002\u90E8\u7F72\u672C\u5730\u76EE\u5F55\u4E3A\u9759\u6001\u7AD9\u70B9\uFF1A\u589E\u91CF\u6BD4\u5BF9\u53EA\u4F20\u53D8\u66F4\u5E76\u6253\u5F00\u6258\u7BA1"
+  ).argument("<dir>", "\u672C\u5730\u7AD9\u70B9\u76EE\u5F55").option("--spa", "\u6253\u5F00\u6258\u7BA1\u5E76\u542F\u7528 SPA \u56DE\u9000\uFF08\u7F3A\u7701\u4EC5\u6253\u5F00\u6258\u7BA1\uFF09", false).option("--build <cmd>", "\u90E8\u7F72\u524D\u6267\u884C\u7684\u6784\u5EFA\u547D\u4EE4\uFF08\u9879\u76EE\u6839\u76EE\u5F55\u8FD0\u884C\uFF0C\u975E\u96F6\u9000\u51FA\u5373\u4E2D\u6B62\u90E8\u7F72\uFF09").option("-p, --project <slug>", "\u76EE\u6807\u5E73\u53F0\u9879\u76EE slug\uFF08\u7F3A\u7701\u53D6 adep.config.ts \u7684 name\uFF09").action(
+    async (dir, flags) => {
+      const command = ctx.io("hosting deploy");
+      if (!command.json) {
+        process.stderr.write(
+          "\u63D0\u793A\uFF1Aadep hosting deploy \u5DF2\u5E9F\u5F03\uFF0C\u63A8\u8350\u4F7F\u7528 adep publish --only frontend\uFF08\u5E73\u53F0\u4FA7\u6784\u5EFA web/ \u8349\u7A3F\uFF09\uFF1B\u5982\u786E\u9700\u4E0A\u4F20\u9884\u6784\u5EFA\u76EE\u5F55\uFF0C\u4ECD\u53EF\u7EE7\u7EED\u4F7F\u7528\u672C\u547D\u4EE4\n"
+        );
+      }
+      await command.run(async () => {
+        const { hostingDeploy: hostingDeploy2 } = await Promise.resolve().then(() => (init_hosting(), hosting_exports));
+        const result = await hostingDeploy2(ctx.paths, {
+          cwd: ctx.cwd,
+          dir,
+          ...flags.spa === true ? { spa: true } : {},
+          ...flags.build === void 0 ? {} : { build: flags.build },
+          ...flags.project === void 0 ? {} : { slug: flags.project },
+          // 人读模式逐行输出进度；JSON 模式丢弃（stdout 必须恰好一个 JSON 对象）。
+          log: (line) => command.line(line)
+        });
+        command.ok(result, (data) => {
+          const r = data;
+          const lines = [];
+          if (r.identical) {
+            lines.push("\u26A0 \u672C\u6B21\u4E0A\u4F20\u5185\u5BB9\u4E0E\u7EBF\u4E0A\u73B0\u6709\u7248\u672C\u5B8C\u5168\u4E00\u81F4\u2014\u2014\u82E5\u521A\u4FEE\u6539\u8FC7\u6E90\u7801\uFF0C\u53EF\u80FD\u5FD8\u4E86\u5148\u6784\u5EFA\u3002");
+          }
+          lines.push(
+            `\u7AD9\u70B9\u5DF2\u4E0A\u7EBF\uFF1A${r.siteUrl}\uFF08${r.uploaded.length} \u53D8\u66F4 / ${r.reused} \u590D\u7528\uFF0C\u6784\u5EFA\u4E8E ${r.builtAt}\uFF0CSPA \u56DE\u9000 ${r.config.spaMode ? "\u5F00" : "\u5173"}\uFF09`
+          );
+          return lines;
+        });
       });
-    });
-  });
+    }
+  );
   hosting.command("pull").description("\u62C9\u53D6\u7AD9\u70B9\u516C\u5F00\u6587\u4EF6\u5230\u672C\u5730\u76EE\u5F55\uFF08\u8DF3\u8FC7\u6258\u7BA1\u914D\u7F6E\uFF09").option("-o, --output <dir>", "\u672C\u5730\u8F93\u51FA\u76EE\u5F55\uFF08\u7F3A\u7701\u5199\u5230 cwd\uFF09").option("-p, --project <slug>", "\u76EE\u6807\u5E73\u53F0\u9879\u76EE slug\uFF08\u7F3A\u7701\u53D6 adep.config.ts \u7684 name\uFF09").action(async (flags) => {
     const command = ctx.io("hosting pull");
     await command.run(async () => {