@adep/cli 0.4.5 → 0.4.6

package/dist/index.js

@@ -1001,6 +1001,9 @@ function depsKeyOf(dependencies) {
   const canonical = Object.entries(dependencies).map(([name, version2]) => `${name}@${version2}`).toSorted().join("\n");
   return createHash("sha256").update(canonical).digest("hex").slice(0, 16);
 }
+function parseNameList(value) {
+  return value.split(",").map((item) => item.trim()).filter((item) => item.length > 0);
+}
 var PACKAGE_NAME_PATTERN, COMPARATOR_PATTERN, MANIFEST_MAX_DEPS;
 var init_manifest = __esm({
   "packages/runtime/src/functions/deps/manifest.ts"() {
@@ -4247,6 +4250,32 @@ var init_env = __esm({
   }
 });
 
+// packages/cli/src/sim/fetch-config.ts
+function resolveLocalFetchConfig(simEnv) {
+  const rawAllowlist = simEnv.FUNCTIONS_FETCH_ALLOWLIST;
+  if (rawAllowlist === void 0) return void 0;
+  const rawTimeout = simEnv.FUNCTIONS_FETCH_TIMEOUT_MS;
+  let timeoutMs = LOCAL_FETCH_TIMEOUT_MS_DEFAULT;
+  if (rawTimeout !== void 0 && rawTimeout.trim() !== "") {
+    const parsed = Number(rawTimeout);
+    if (!Number.isInteger(parsed) || parsed <= 0) {
+      throw new Error(
+        `[adep] FUNCTIONS_FETCH_TIMEOUT_MS \u975E\u6CD5\uFF1A"${rawTimeout}"\uFF08\u987B\u4E3A\u6B63\u6574\u6570\u6BEB\u79D2\u6570\uFF1B\u4E0D\u914D\u5219\u7F3A\u7701 ${LOCAL_FETCH_TIMEOUT_MS_DEFAULT}\uFF09`
+      );
+    }
+    timeoutMs = parsed;
+  }
+  return { allowlist: parseNameList(rawAllowlist), timeoutMs };
+}
+var LOCAL_FETCH_TIMEOUT_MS_DEFAULT;
+var init_fetch_config = __esm({
+  "packages/cli/src/sim/fetch-config.ts"() {
+    "use strict";
+    init_manifest();
+    LOCAL_FETCH_TIMEOUT_MS_DEFAULT = 1e4;
+  }
+});
+
 // packages/cli/src/sim/invoke.ts
 function resolveFunctionEntry(files, fnName) {
   const flat = `${fnName}.ts`;
@@ -4376,6 +4405,11 @@ var init_boundary = __esm({
         kind: "diff",
         title: "\u4E0D\u8BA1\u91CF",
         detail: "\u672C\u6A21\u62DF\u8FD0\u884C\u65F6\u4E0D\u4EA7\u51FA\u8BA1\u91CF\u4E8B\u4EF6\uFF0C\u4E5F\u4E0D\u5199 billing\uFF1B\u79BB\u7EBF\u5F00\u53D1\u4E0D\u8BA1\u8D39\u3002"
+      },
+      {
+        kind: "diff",
+        title: "\u51FA\u7F51\u7531\u767D\u540D\u5355\u63A7\u5236",
+        detail: "cloud.fetch \u9ED8\u8BA4\u65E0\u7F51\u7EDC\uFF08\u672A\u914D\u7F6E\u65F6\u8C03\u7528\u629B FN_FETCH_DISABLED\uFF09\uFF1B.env \u914D FUNCTIONS_FETCH_ALLOWLIST\uFF08\u9017\u53F7\u5206\u9694\u4E3B\u673A\uFF0C*. \u901A\u914D\uFF1BFUNCTIONS_FETCH_TIMEOUT_MS \u7F3A\u7701 10s\uFF09\u540E\u91CD\u542F\u6CE8\u5165\u53D7\u63A7 fetch\u2014\u2014\u95E8\u7981\u4E0E\u7EBF\u4E0A\u4E00\u81F4\uFF08\u767D\u540D\u5355 / \u8D85\u65F6 / \u91CD\u5B9A\u5411\u9010\u8DF3\u590D\u68C0\uFF09\uFF0C\u4F46\u672C\u5730\u7531\u5F00\u53D1\u673A\u7F51\u7EDC\u6808\u76F4\u8FDE\uFF0C\u65E0\u5E73\u53F0\u51FA\u7F51\u4E2D\u7EE7\u4E0E\u5BA1\u8BA1\u3002"
       }
     ];
   }
@@ -6198,9 +6232,18 @@ async function startDevServer(options) {
     ...options.dbFile === void 0 ? {} : { dbFile: options.dbFile }
   });
   const bearerUser = bearerUserResolverFromEnv();
+  const simEnv = await loadSimEnv(cwd).catch(() => ({}));
+  const fetchConfig = resolveLocalFetchConfig(simEnv);
   const executor = new WorkerFunctionExecutor({
-    deps: { rootDir: cwd, builtin: LOCAL_BUILTIN_DEPS }
+    deps: { rootDir: cwd, builtin: LOCAL_BUILTIN_DEPS },
+    // GAME-007 本地接线：配置白名单才注入受控 fetch，语义与线上逐字一致。
+    ...fetchConfig === void 0 ? {} : { fetch: fetchConfig }
   });
+  if (fetchConfig !== void 0) {
+    log(
+      `[adep] \u53D7\u63A7 fetch \u5DF2\u6CE8\u5165\uFF08FUNCTIONS_FETCH_ALLOWLIST\uFF09\uFF1A\u767D\u540D\u5355 ${fetchConfig.allowlist.length} \u9879\uFF0C\u8D85\u65F6 ${fetchConfig.timeoutMs}ms`
+    );
+  }
   await mkdir6(functionsDir, { recursive: true });
   const db = await openLocalDbDriver(dbTarget, { cwd, tag: "adep", log });
   const runtime = await createSimRuntime({
@@ -6223,7 +6266,7 @@ async function startDevServer(options) {
   let files = mergeSharedIntoFunctions(await collectFunctions(functionsDir));
   let env = {
     ...config2.environment,
-    ...await loadSimEnv(cwd).catch(() => ({}))
+    ...simEnv
   };
   const dbBundle = runtime.bundle;
   const invokeHandler = createSimInvokeHandler({ executor, files });
@@ -6496,6 +6539,7 @@ var init_dev = __esm({
     init_runtime();
     init_db_mode();
     init_env();
+    init_fetch_config();
     init_invoke();
     init_builtin_deps2();
     init_boundary();
@@ -6549,6 +6593,75 @@ var init_prompt = __esm({
   }
 });
 
+// packages/cli/src/export/client.ts
+var client_exports2 = {};
+__export(client_exports2, {
+  createExportApiClient: () => createExportApiClient
+});
+import { writeFile as writeFile7 } from "node:fs/promises";
+function toExportJob(view) {
+  return {
+    id: view.id,
+    status: view.status,
+    progress: view.progress,
+    createdAt: view.createdAt,
+    ...view.stage === void 0 ? {} : { stage: view.stage },
+    ...view.error === void 0 ? {} : { error: view.error },
+    ...view.downloadUrl === void 0 ? {} : { downloadUrl: view.downloadUrl },
+    ...view.bundleSize === void 0 ? {} : { bundleSize: view.bundleSize },
+    ...view.completedAt === void 0 ? {} : { completedAt: view.completedAt }
+  };
+}
+async function createExportApiClient(paths) {
+  const client = await createClient(paths);
+  return {
+    async triggerExport(projectId, options) {
+      const view = await client.request(
+        `/api/v1/projects/${encodeURIComponent(projectId)}/export`,
+        {
+          method: "POST",
+          body: {
+            withData: options.withData,
+            withSource: options.withSource,
+            ...options.withoutSource === true ? { withoutSource: true } : {}
+          }
+        },
+        "EXPORT_TRIGGER_FAILED"
+      );
+      return toExportJob(view);
+    },
+    async getJobStatus(jobId) {
+      const view = await client.request(
+        `/api/v1/exports/${encodeURIComponent(jobId)}`,
+        {},
+        "EXPORT_STATUS_FAILED"
+      );
+      return toExportJob(view);
+    },
+    async downloadBundle(jobId, outputPath) {
+      const download = await client.request(
+        `/api/v1/exports/${encodeURIComponent(jobId)}/download`,
+        {},
+        "EXPORT_DOWNLOAD_FAILED"
+      );
+      if (download.downloadUrl.length === 0) {
+        throw new CliError("EXPORT_BUNDLE_UNAVAILABLE", "\u5BFC\u51FA\u4EA7\u7269\u4E0B\u8F7D URL \u4E3A\u7A7A\uFF0C\u4EA7\u7269\u53EF\u80FD\u5C1A\u4E0D\u53EF\u7528");
+      }
+      const response = await client.download(download.downloadUrl, "EXPORT_DOWNLOAD_FAILED");
+      const bytes = Buffer.from(await response.arrayBuffer());
+      await writeFile7(outputPath, bytes);
+      return { path: outputPath, size: bytes.length };
+    }
+  };
+}
+var init_client2 = __esm({
+  "packages/cli/src/export/client.ts"() {
+    "use strict";
+    init_auth();
+    init_client();
+  }
+});
+
 // shared/deploy-bundle/manifest.ts
 var CURRENT_SCHEMA_VERSION, BundleContentKind, ALLOWED_CONTENT_KINDS;
 var init_manifest2 = __esm({
@@ -6892,75 +7005,6 @@ var init_zip = __esm({
   }
 });
 
-// packages/cli/src/export/client.ts
-var client_exports2 = {};
-__export(client_exports2, {
-  createExportApiClient: () => createExportApiClient
-});
-import { writeFile as writeFile7 } from "node:fs/promises";
-function toExportJob(view) {
-  return {
-    id: view.id,
-    status: view.status,
-    progress: view.progress,
-    createdAt: view.createdAt,
-    ...view.stage === void 0 ? {} : { stage: view.stage },
-    ...view.error === void 0 ? {} : { error: view.error },
-    ...view.downloadUrl === void 0 ? {} : { downloadUrl: view.downloadUrl },
-    ...view.bundleSize === void 0 ? {} : { bundleSize: view.bundleSize },
-    ...view.completedAt === void 0 ? {} : { completedAt: view.completedAt }
-  };
-}
-async function createExportApiClient(paths) {
-  const client = await createClient(paths);
-  return {
-    async triggerExport(projectId, options) {
-      const view = await client.request(
-        `/api/v1/projects/${encodeURIComponent(projectId)}/export`,
-        {
-          method: "POST",
-          body: {
-            withData: options.withData,
-            withSource: options.withSource,
-            ...options.withoutSource === true ? { withoutSource: true } : {}
-          }
-        },
-        "EXPORT_TRIGGER_FAILED"
-      );
-      return toExportJob(view);
-    },
-    async getJobStatus(jobId) {
-      const view = await client.request(
-        `/api/v1/exports/${encodeURIComponent(jobId)}`,
-        {},
-        "EXPORT_STATUS_FAILED"
-      );
-      return toExportJob(view);
-    },
-    async downloadBundle(jobId, outputPath) {
-      const download = await client.request(
-        `/api/v1/exports/${encodeURIComponent(jobId)}/download`,
-        {},
-        "EXPORT_DOWNLOAD_FAILED"
-      );
-      if (download.downloadUrl.length === 0) {
-        throw new CliError("EXPORT_BUNDLE_UNAVAILABLE", "\u5BFC\u51FA\u4EA7\u7269\u4E0B\u8F7D URL \u4E3A\u7A7A\uFF0C\u4EA7\u7269\u53EF\u80FD\u5C1A\u4E0D\u53EF\u7528");
-      }
-      const response = await client.download(download.downloadUrl, "EXPORT_DOWNLOAD_FAILED");
-      const bytes = Buffer.from(await response.arrayBuffer());
-      await writeFile7(outputPath, bytes);
-      return { path: outputPath, size: bytes.length };
-    }
-  };
-}
-var init_client2 = __esm({
-  "packages/cli/src/export/client.ts"() {
-    "use strict";
-    init_auth();
-    init_client();
-  }
-});
-
 // packages/cli/src/serve/banner.ts
 function isLoopback(host) {
   return host === "127.0.0.1" || host === "localhost" || host === "::1" || host === "[::1]";
@@ -7155,8 +7199,8 @@ var init_template_params = __esm({
 });
 
 // packages/cli/src/serve/template-params.ts
-import { readFile as readFile17 } from "node:fs/promises";
-import { join as join22 } from "node:path";
+import { readFile as readFile20 } from "node:fs/promises";
+import { join as join27 } from "node:path";
 import { parse as parse3 } from "yaml";
 function mergeTemplateEnvSource(source) {
   return { ...source.processEnv, ...source.dotenv, ...source.dotenvLocal };
@@ -7164,7 +7208,7 @@ function mergeTemplateEnvSource(source) {
 async function loadTemplateFields(cwd) {
   let text;
   try {
-    text = await readFile17(join22(cwd, TEMPLATE_PARAMS_FILE), "utf8");
+    text = await readFile20(join27(cwd, TEMPLATE_PARAMS_FILE), "utf8");
   } catch {
     return null;
   }
@@ -7180,7 +7224,7 @@ async function loadTemplateFields(cwd) {
   return extractTemplateFields(root);
 }
 async function readDotenvFile(cwd, name) {
-  const text = await readFile17(join22(cwd, name), "utf8").catch(() => "");
+  const text = await readFile20(join27(cwd, name), "utf8").catch(() => "");
   if (text === "") return {};
   return parseEnvFile(text);
 }
@@ -7235,8 +7279,8 @@ __export(server_exports, {
 });
 import { createServer as createServer2 } from "node:http";
 import { watch as watch2 } from "node:fs";
-import { mkdir as mkdir12, readFile as readFile18, stat as stat12 } from "node:fs/promises";
-import { extname, join as join23, relative as relative4, resolve as resolve12 } from "node:path";
+import { mkdir as mkdir14, readFile as readFile21, stat as stat12 } from "node:fs/promises";
+import { extname, join as join28, relative as relative4, resolve as resolve12 } from "node:path";
 function envNumber(name) {
   const raw = process.env[name];
   if (raw === void 0 || raw.trim() === "") return void 0;
@@ -7269,7 +7313,7 @@ async function startServeServer(options) {
     ...options.dbFile === void 0 ? {} : { dbFile: options.dbFile }
   });
   const config2 = await loadConfig(cwd);
-  const functionsDir = join23(cwd, config2.functionsDir);
+  const functionsDir = join28(cwd, config2.functionsDir);
   const bearerUser = bearerUserResolverFromEnv();
   let hasStatic = false;
   try {
@@ -7281,7 +7325,7 @@ async function startServeServer(options) {
   const loadFunctionFiles = async () => mergeSharedIntoFunctions(await collectFunctions(functionsDir));
   let files = await loadFunctionFiles();
   let functionNames = listFunctionNames(files);
-  const envText = await readFile18(join23(cwd, ".env.local"), "utf8").catch(() => "");
+  const envText = await readFile21(join28(cwd, ".env.local"), "utf8").catch(() => "");
   let env = parseEnvFile(envText);
   let simEnv = await loadSimEnv(cwd).catch(() => ({}));
   const dotenvFile = await readDotenvFile(cwd, ".env");
@@ -7322,9 +7366,16 @@ async function startServeServer(options) {
       log
     });
   }
+  const fetchConfig = resolveLocalFetchConfig(simEnv);
   const executor = new WorkerFunctionExecutor({
-    deps: { rootDir: cwd, builtin: LOCAL_BUILTIN_DEPS }
+    deps: { rootDir: cwd, builtin: LOCAL_BUILTIN_DEPS },
+    ...fetchConfig === void 0 ? {} : { fetch: fetchConfig }
   });
+  if (fetchConfig !== void 0) {
+    log(
+      `[adep] \u53D7\u63A7 fetch \u5DF2\u6CE8\u5165\uFF08FUNCTIONS_FETCH_ALLOWLIST\uFF09\uFF1A\u767D\u540D\u5355 ${fetchConfig.allowlist.length} \u9879\uFF0C\u8D85\u65F6 ${fetchConfig.timeoutMs}ms`
+    );
+  }
   const dbBundle = runtime.bundle;
   let invokeHandler = createSimInvokeHandler({ executor, files });
   let stopWatch;
@@ -7332,7 +7383,7 @@ async function startServeServer(options) {
     const reload = async () => {
       const [nextFiles, envLocalText] = await Promise.all([
         loadFunctionFiles(),
-        readFile18(join23(cwd, ".env.local"), "utf8").catch(() => "")
+        readFile21(join28(cwd, ".env.local"), "utf8").catch(() => "")
       ]);
       files = nextFiles;
       env = parseEnvFile(envLocalText);
@@ -7349,7 +7400,7 @@ async function startServeServer(options) {
         void reload();
       }, 120);
     };
-    await mkdir12(functionsDir, { recursive: true }).catch(() => void 0);
+    await mkdir14(functionsDir, { recursive: true }).catch(() => void 0);
     try {
       watchers.push(watch2(functionsDir, { recursive: true }, scheduleReload));
     } catch {
@@ -7404,31 +7455,31 @@ async function startServeServer(options) {
   const serveStatic = async (pathname, res) => {
     if (!hasStatic) return false;
     const safePath = pathname.replace(/\.\.\//g, "").replace(/^\//, "");
-    const filePath = join23(staticDir, safePath);
-    const resolvedPath = safePath === "" || safePath === "/" ? join23(filePath, "index.html") : filePath;
+    const filePath = join28(staticDir, safePath);
+    const resolvedPath = safePath === "" || safePath === "/" ? join28(filePath, "index.html") : filePath;
     try {
       const fileStat = await stat12(resolvedPath);
       if (fileStat.isDirectory()) {
-        const indexPath = join23(resolvedPath, "index.html");
+        const indexPath = join28(resolvedPath, "index.html");
         try {
           const indexStat = await stat12(indexPath);
           if (indexStat.isFile()) {
-            sendStaticFile(res, indexPath, await readFile18(indexPath));
+            sendStaticFile(res, indexPath, await readFile21(indexPath));
             return true;
           }
         } catch {
         }
         return false;
       }
-      sendStaticFile(res, resolvedPath, await readFile18(resolvedPath));
+      sendStaticFile(res, resolvedPath, await readFile21(resolvedPath));
       return true;
     } catch {
       if (options.spaFallback === true) {
         const ext = extname(pathname);
         if (ext === "" || ext === ".html") {
           try {
-            const indexContent = await readFile18(join23(staticDir, "index.html"));
-            sendStaticFile(res, join23(staticDir, "index.html"), indexContent);
+            const indexContent = await readFile21(join28(staticDir, "index.html"));
+            sendStaticFile(res, join28(staticDir, "index.html"), indexContent);
             return true;
           } catch {
           }
@@ -7656,6 +7707,7 @@ var init_server = __esm({
     init_runtime();
     init_storage();
     init_env();
+    init_fetch_config();
     init_invoke();
     init_dev();
     init_banner();
@@ -7697,8 +7749,8 @@ __export(deploy_exports, {
   deploy: () => deploy
 });
 import { createHash as createHash4 } from "node:crypto";
-import { readdir as readdir8, readFile as readFile19 } from "node:fs/promises";
-import { join as join24, resolve as resolve13, basename as basename4, relative as relative5, sep } from "node:path";
+import { readdir as readdir9, readFile as readFile22 } from "node:fs/promises";
+import { join as join29, resolve as resolve13, basename as basename4, relative as relative5, sep } from "node:path";
 function functionUrlBase(prefix) {
   const raw = (prefix ?? "/api").trim();
   const normalized = raw === "/" ? "/" : raw.replace(/\/+$/, "");
@@ -7710,7 +7762,7 @@ function isRuntimeSource2(name) {
 async function collectFunctionFiles(functionsDir) {
   let dirents;
   try {
-    dirents = await readdir8(functionsDir, { withFileTypes: true });
+    dirents = await readdir9(functionsDir, { withFileTypes: true });
   } catch {
     return {};
   }
@@ -7724,10 +7776,10 @@ async function collectFunctionFiles(functionsDir) {
   if (conflicting.length > 0) throw new AmbiguousFunctionError(functionsDir, conflicting);
   const out = {};
   for (const name of flatNames) {
-    out[name] = { [`${name}.ts`]: await readFile19(join24(functionsDir, `${name}.ts`), "utf8") };
+    out[name] = { [`${name}.ts`]: await readFile22(join29(functionsDir, `${name}.ts`), "utf8") };
   }
   for (const name of dirNames) {
-    const files = await collectFunctionDir(join24(functionsDir, name));
+    const files = await collectFunctionDir(join29(functionsDir, name));
     if (files["index.ts"] === void 0) continue;
     out[name] = files;
   }
@@ -7738,7 +7790,7 @@ async function collectFunctionDir(absDir) {
   const walk = async (dir, prefix) => {
     let entries;
     try {
-      entries = await readdir8(dir, { withFileTypes: true });
+      entries = await readdir9(dir, { withFileTypes: true });
     } catch {
       return;
     }
@@ -7746,11 +7798,11 @@ async function collectFunctionDir(absDir) {
       const rel = prefix === "" ? entry.name : `${prefix}/${entry.name}`;
       if (entry.isDirectory()) {
         if (entry.name === "__tests__" || IGNORED_DIRS.has(entry.name)) continue;
-        await walk(join24(dir, entry.name), rel);
+        await walk(join29(dir, entry.name), rel);
         continue;
       }
       if (!isRuntimeSource2(entry.name)) continue;
-      files[rel] = await readFile19(join24(dir, entry.name), "utf8");
+      files[rel] = await readFile22(join29(dir, entry.name), "utf8");
     }
   };
   await walk(absDir, "");
@@ -7760,25 +7812,25 @@ function sha256Hex(content) {
   return createHash4("sha256").update(content).digest("hex");
 }
 async function collectShared(functionsDir) {
-  const sharedDir = join24(functionsDir, FUNCTION_SHARED_DIR);
+  const sharedDir = join29(functionsDir, FUNCTION_SHARED_DIR);
   const files = {};
   const walk = async (dir) => {
     let entries;
     try {
-      entries = await readdir8(dir, { withFileTypes: true });
+      entries = await readdir9(dir, { withFileTypes: true });
     } catch {
       return;
     }
     for (const entry of entries) {
       if (entry.isDirectory()) {
         if (entry.name === "__tests__" || entry.name === "node_modules") continue;
-        await walk(join24(dir, entry.name));
+        await walk(join29(dir, entry.name));
         continue;
       }
       if (!isRuntimeSource2(entry.name)) continue;
-      const full = join24(dir, entry.name);
+      const full = join29(dir, entry.name);
       const rel = relative5(sharedDir, full).split(sep).join("/");
-      files[`${SHARED_SOURCE_ROOT}${rel}`] = await readFile19(full, "utf8");
+      files[`${SHARED_SOURCE_ROOT}${rel}`] = await readFile22(full, "utf8");
     }
   };
   await walk(sharedDir);
@@ -7790,7 +7842,7 @@ async function deploy(paths, options) {
   const cwd = resolve13(options.cwd);
   const config2 = await loadConfig(cwd);
   const slug = options.slug ?? config2.name;
-  const functionsDir = options.functionsDir === void 0 ? join24(cwd, config2.functionsDir) : resolve13(cwd, options.functionsDir);
+  const functionsDir = options.functionsDir === void 0 ? join29(cwd, config2.functionsDir) : resolve13(cwd, options.functionsDir);
   const local = await collectFunctionFiles(functionsDir);
   if (Object.keys(local).length === 0) {
     throw new CliError("NO_FUNCTIONS", `${functionsDir} \u4E0B\u6CA1\u6709\u51FD\u6570\u6587\u4EF6`);
@@ -7921,8 +7973,8 @@ __export(storage_exports, {
   storageRemove: () => storageRemove,
   storageUpload: () => storageUpload
 });
-import { mkdir as mkdir13, readFile as readFile20, stat as stat13, writeFile as writeFile11 } from "node:fs/promises";
-import { basename as basename5, dirname as dirname13, extname as extname2, join as join25, resolve as resolve14 } from "node:path";
+import { mkdir as mkdir15, readFile as readFile23, stat as stat13, writeFile as writeFile14 } from "node:fs/promises";
+import { basename as basename5, dirname as dirname13, extname as extname2, join as join30, resolve as resolve14 } from "node:path";
 function envQuery2(options) {
   return options.environment === void 0 ? "" : `?environment=${options.environment}`;
 }
@@ -7967,7 +8019,7 @@ async function storageUpload(paths, options) {
     throw new CliError("FILE_NOT_FOUND", `\u672C\u5730\u6587\u4EF6\u4E0D\u5B58\u5728\uFF1A${local}`);
   }
   const visibility = options.visibility ?? "private";
-  const bytes = await readFile20(local);
+  const bytes = await readFile23(local);
   const form = new FormData();
   form.set("path", options.path);
   form.set("visibility", visibility);
@@ -8014,9 +8066,9 @@ async function storageDownload(paths, options) {
   const url2 = await resolveDownloadUrl(client, project2, options.path, options.environment);
   const response = await client.download(url2, "STORAGE_DOWNLOAD_FAILED");
   const bytes = Buffer.from(await response.arrayBuffer());
-  const output2 = resolve14(options.output ?? join25(resolve14(options.cwd), basename5(options.path)));
-  await mkdir13(dirname13(output2), { recursive: true });
-  await writeFile11(output2, bytes);
+  const output2 = resolve14(options.output ?? join30(resolve14(options.cwd), basename5(options.path)));
+  await mkdir15(dirname13(output2), { recursive: true });
+  await writeFile14(output2, bytes);
   return { path: options.path, output: output2, size: bytes.length };
 }
 async function storageRemove(paths, options) {
@@ -8042,8 +8094,8 @@ __export(hosting_exports, {
   hostingInfo: () => hostingInfo,
   hostingPull: () => hostingPull
 });
-import { readdir as readdir9, readFile as readFile21, stat as stat14 } from "node:fs/promises";
-import { dirname as dirname14, join as join26, relative as relative6, resolve as resolve15, sep as sep2 } from "node:path";
+import { readdir as readdir10, readFile as readFile24, stat as stat14 } from "node:fs/promises";
+import { dirname as dirname14, join as join31, relative as relative6, resolve as resolve15, sep as sep2 } from "node:path";
 async function open5(paths, options) {
   const client = await createClient(paths);
   const project2 = await resolveSlug(resolve15(options.cwd), options.slug);
@@ -8064,12 +8116,12 @@ async function collectSiteFiles(dir) {
   const walk = async (sub) => {
     let entries;
     try {
-      entries = await readdir9(sub, { withFileTypes: true });
+      entries = await readdir10(sub, { withFileTypes: true });
     } catch {
       return;
     }
     for (const entry of entries) {
-      const full = join26(sub, entry.name);
+      const full = join31(sub, entry.name);
       if (entry.isDirectory()) {
         await walk(full);
       } else if (entry.isFile()) {
@@ -8093,7 +8145,7 @@ async function hostingDeploy(paths, options) {
   for (const [rel, full] of files) {
     log(`[adep] \u4E0A\u4F20 site/${rel}`);
     const info2 = await stat14(full);
-    const bytes = await readFile21(full);
+    const bytes = await readFile24(full);
     const form = new FormData();
     form.set("path", `site/${rel}`);
     form.set("visibility", "public");
@@ -8121,7 +8173,7 @@ async function hostingPull(paths, options) {
 `));
   const info = await hostingInfo(paths, options);
   const outputDir = resolve15(options.output ?? resolve15(options.cwd));
-  const { mkdir: mkdir15, writeFile: writeFile13 } = await import("node:fs/promises");
+  const { mkdir: mkdir17, writeFile: writeFile16 } = await import("node:fs/promises");
   const files = [];
   for (const entry of info.files) {
     if (entry.visibility !== "public" || entry.path === HOSTING_CONFIG_PATH) continue;
@@ -8131,9 +8183,9 @@ async function hostingPull(paths, options) {
     const response = await client.download(url2, "HOSTING_DOWNLOAD_FAILED");
     const bytes = Buffer.from(await response.arrayBuffer());
     const rel = entry.path.replace(/^site\//, "");
-    const target = join26(outputDir, ...rel.split("/"));
-    await mkdir15(dirname14(target), { recursive: true });
-    await writeFile13(target, bytes);
+    const target = join31(outputDir, ...rel.split("/"));
+    await mkdir17(dirname14(target), { recursive: true });
+    await writeFile16(target, bytes);
     files.push({ path: entry.path, size: bytes.length });
   }
   return { siteUrl: info.siteUrl, outputDir, files };
@@ -8187,22 +8239,22 @@ __export(frontend_exports, {
   frontendSync: () => frontendSync,
   isStaticFrontendDir: () => isStaticFrontendDir
 });
-import { readdir as readdir10, readFile as readFile22, stat as stat15 } from "node:fs/promises";
-import { join as join27, relative as relative7, sep as sep3 } from "node:path";
+import { readdir as readdir11, readFile as readFile25, stat as stat15 } from "node:fs/promises";
+import { join as join32, relative as relative7, sep as sep3 } from "node:path";
 async function collectFiles(root, dir) {
   const files = /* @__PURE__ */ new Map();
   const skipped = [];
-  const entries = await readdir10(dir, { withFileTypes: true });
+  const entries = await readdir11(dir, { withFileTypes: true });
   for (const entry of entries) {
     if (entry.isDirectory()) {
       if (IGNORED_DIRS2.has(entry.name)) continue;
-      const nested = await collectFiles(root, join27(dir, entry.name));
+      const nested = await collectFiles(root, join32(dir, entry.name));
       for (const [path, content] of nested.files) files.set(path, content);
       skipped.push(...nested.skipped);
       continue;
     }
     if (IGNORED_FILES.has(entry.name)) continue;
-    const full = join27(dir, entry.name);
+    const full = join32(dir, entry.name);
     const rel = relative7(root, full).split(sep3).join("/");
     const info = await stat15(full);
     if (info.size > 1024 * 1024) {
@@ -8210,7 +8262,7 @@ async function collectFiles(root, dir) {
       continue;
     }
     try {
-      const content = await readFile22(full, "utf8");
+      const content = await readFile25(full, "utf8");
       if (content.includes("\0")) {
         skipped.push(rel);
         continue;
@@ -8225,7 +8277,7 @@ async function collectFiles(root, dir) {
 async function frontendSync(paths, options) {
   const log = options.silent === true ? () => void 0 : options.log ?? ((line) => process.stdout.write(`${line}
 `));
-  const webDir = options.dir ?? join27(options.cwd, "web");
+  const webDir = options.dir ?? join32(options.cwd, "web");
   const rootStat = await stat15(webDir).catch(() => null);
   if (rootStat === null || !rootStat.isDirectory()) {
     throw new CliError(
@@ -8285,14 +8337,14 @@ function declaresBuildScript(pkgJson) {
   return typeof build === "string" && build.trim().length > 0;
 }
 async function isStaticFrontendDir(dir) {
-  const pkg = await readFile22(join27(dir, "package.json"), "utf8").catch(() => void 0);
+  const pkg = await readFile25(join32(dir, "package.json"), "utf8").catch(() => void 0);
   if (declaresBuildScript(pkg)) return false;
   const walk = async (sub) => {
-    const entries = await readdir10(sub, { withFileTypes: true });
+    const entries = await readdir11(sub, { withFileTypes: true });
     for (const entry of entries) {
       if (entry.isDirectory()) {
         if (IGNORED_DIRS2.has(entry.name)) continue;
-        if (!await walk(join27(sub, entry.name))) return false;
+        if (!await walk(join32(sub, entry.name))) return false;
         continue;
       }
       if (FRONTEND_TRANSFORM_EXTENSIONS.some((ext) => entry.name.endsWith(ext))) return false;
@@ -8328,12 +8380,12 @@ var fs_exports = {};
 __export(fs_exports, {
   createExportFileSystem: () => createExportFileSystem
 });
-import { mkdir as mkdir14, readFile as readFile24, rm as rm5, stat as stat17, writeFile as writeFile12 } from "node:fs/promises";
-import { dirname as dirname15, join as join30 } from "node:path";
+import { mkdir as mkdir16, readFile as readFile27, rm as rm5, stat as stat17, writeFile as writeFile15 } from "node:fs/promises";
+import { dirname as dirname15, join as join35 } from "node:path";
 function createExportFileSystem() {
   return {
-    readFile: (path) => readFile24(path),
-    writeFile: (path, content) => writeFile12(path, content),
+    readFile: (path) => readFile27(path),
+    writeFile: (path, content) => writeFile15(path, content),
     // 同时用于清理解压临时目录（${zip}.tmp 是个目录）——递归强制删除，缺失不报错。
     deleteFile: async (path) => {
       await rm5(path, { recursive: true, force: true });
@@ -8347,14 +8399,14 @@ function createExportFileSystem() {
       }
     },
     mkdir: async (path) => {
-      await mkdir14(path, { recursive: true });
+      await mkdir16(path, { recursive: true });
     },
     unzip: async (zipPath, targetDir) => {
-      const entries = zipRead(await readFile24(zipPath));
+      const entries = zipRead(await readFile27(zipPath));
       for (const [name, data] of entries) {
-        const dest = join30(targetDir, name);
-        await mkdir14(dirname15(dest), { recursive: true });
-        await writeFile12(dest, data);
+        const dest = join35(targetDir, name);
+        await mkdir16(dirname15(dest), { recursive: true });
+        await writeFile15(dest, data);
       }
     }
   };
@@ -8598,8 +8650,8 @@ ${detail}`);
 });
 
 // packages/cli/src/sandbox-scan.ts
-import { readdir as readdir12, readFile as readFile25 } from "node:fs/promises";
-import { join as join31, relative as relative9, sep as sep5 } from "node:path";
+import { readdir as readdir13, readFile as readFile28 } from "node:fs/promises";
+import { join as join36, relative as relative9, sep as sep5 } from "node:path";
 function extractSpecifiers(line) {
   const out = [];
   const patterns = [
@@ -8643,17 +8695,17 @@ function classify(specifier) {
   return null;
 }
 async function scanFunctionSources(rootDir, functionsDir) {
-  const base = join31(rootDir, functionsDir);
+  const base = join36(rootDir, functionsDir);
   const findings = [];
   async function walk(current) {
     let entries;
     try {
-      entries = await readdir12(current, { withFileTypes: true });
+      entries = await readdir13(current, { withFileTypes: true });
     } catch {
       return;
     }
     for (const entry of entries) {
-      const abs = join31(current, entry.name);
+      const abs = join36(current, entry.name);
       if (entry.isDirectory()) {
         if (SKIP_DIRS.has(entry.name)) continue;
         await walk(abs);
@@ -8664,7 +8716,7 @@ async function scanFunctionSources(rootDir, functionsDir) {
       if (entry.name.endsWith(".d.ts")) continue;
       let content;
       try {
-        content = await readFile25(abs, "utf8");
+        content = await readFile28(abs, "utf8");
       } catch {
         continue;
       }
@@ -13289,15 +13341,150 @@ function registerTemplates(program2, ctx) {
 import { resolve as resolve10 } from "node:path";
 
 // packages/cli/src/app-build.ts
-init_shared_source();
-init_validate();
-init_zip();
-import { spawn as spawn2 } from "node:child_process";
-import { createHash as createHash2 } from "node:crypto";
-import { closeSync, openSync } from "node:fs";
-import { copyFile, mkdir as mkdir9, mkdtemp, readFile as readFile12, readdir as readdir6, rm as rm3, stat as stat8, writeFile as writeFile8 } from "node:fs/promises";
-import { tmpdir } from "node:os";
-import { basename as basename2, dirname as dirname10, join as join16, posix, relative as relative2, resolve as resolve8 } from "node:path";
+import { mkdir as mkdir11, writeFile as writeFile11 } from "node:fs/promises";
+import { join as join21, resolve as resolve8 } from "node:path";
+
+// packages/cli/src/app-init.ts
+import { cp, mkdir as mkdir8, readdir as readdir5, stat as stat7, writeFile as writeFile6 } from "node:fs/promises";
+import { dirname as dirname9, join as join15, resolve as resolve7 } from "node:path";
+
+// packages/cli/src/app-template.ts
+import { readFileSync as readFileSync3 } from "node:fs";
+import { readdir as readdir4, readFile as readFile11, stat as stat6 } from "node:fs/promises";
+import { dirname as dirname8, join as join14 } from "node:path";
+import { fileURLToPath as fileURLToPath3 } from "node:url";
+var TEMPLATE_VAR_ALLOWLIST = {
+  "app-desktop": /* @__PURE__ */ new Set(["projectSlug", "appName", "appId", "platformUrl"]),
+  "app-mobile": /* @__PURE__ */ new Set([
+    "projectSlug",
+    "appName",
+    "platformUrl",
+    "iosBundleId",
+    "androidPackageId"
+  ]),
+  // xtool 只做 iOS ⇒ 没有 androidPackageId。少这一个变量是**刻意的**：
+  // 模板里若写了它，渲染期会 fail loud（而不是渲染出一个没有 Android 目标的空值）。
+  "app-mobile-xtool": /* @__PURE__ */ new Set(["projectSlug", "appName", "platformUrl", "iosBundleId"])
+};
+function shellTemplateForPlatform(platform) {
+  return platform === "mobile" ? "app-mobile" : "app-desktop";
+}
+function normalizeToolchain(input2) {
+  if (input2 === void 0 || input2.length === 0) return "capacitor";
+  if (input2 === "capacitor" || input2 === "xtool") return input2;
+  throw new InitError(
+    "INVALID_TOOLCHAIN",
+    `--toolchain \u987B\u4E3A capacitor | xtool\uFF0C\u6536\u5230 "${input2}"\uFF08\u7F3A\u7701 capacitor\uFF09`
+  );
+}
+function shellTemplateFor(platform, toolchain) {
+  if (toolchain === "xtool") {
+    if (platform !== "mobile") {
+      throw new InitError(
+        "INVALID_TOOLCHAIN",
+        `--toolchain xtool \u53EA\u652F\u6301 --platform mobile\uFF08xtool \u4EA7\u51FA iOS \u539F\u751F app\uFF09\uFF0C\u6536\u5230 --platform ${platform}`
+      );
+    }
+    return "app-mobile-xtool";
+  }
+  return shellTemplateForPlatform(platform);
+}
+var XTOOL_SHELL_REUSED_FROM_MOBILE = [
+  { from: "plugins/adep-bridge", to: "plugins/adep-bridge" },
+  { from: "web/adep-bridge.js", to: "web/adep-bridge.js" },
+  { from: "web/offline-runtime.js", to: "web/offline-runtime.js" }
+];
+var TEMPLATE_MANIFEST_FILES = /* @__PURE__ */ new Set(["template.json"]);
+async function collectRelPaths(dir, base) {
+  const entries = await readdir4(dir, { withFileTypes: true });
+  const nested = await Promise.all(
+    entries.filter((entry) => entry.name !== ".DS_Store" && !TEMPLATE_MANIFEST_FILES.has(entry.name)).toSorted((a, b) => a.name < b.name ? -1 : a.name > b.name ? 1 : 0).map((entry) => {
+      const abs = join14(dir, entry.name);
+      return entry.isDirectory() ? (
+        // 递归时 base 必须带上子目录前缀，否则深层文件相对路径会丢目录段
+        // （app-mobile 是嵌套目录结构：bridge/gate.mjs、plugins/adep-bridge/...）。
+        collectRelPaths(abs, join14(base, entry.name))
+      ) : Promise.resolve([join14(base, entry.name).split("\\").join("/")]);
+    })
+  );
+  return nested.flat();
+}
+async function findCliPackageRoot() {
+  let dir = dirname8(fileURLToPath3(import.meta.url));
+  for (; ; ) {
+    let raw;
+    try {
+      raw = readFileSync3(join14(dir, "package.json"), "utf8");
+    } catch {
+      raw = "";
+    }
+    try {
+      const pkg = JSON.parse(raw);
+      if (pkg.name === "@adep/cli") return dir;
+    } catch {
+    }
+    const parent = dirname8(dir);
+    if (parent === dir) {
+      throw new InitError(
+        "SHELL_TEMPLATE_MISSING",
+        "\u627E\u4E0D\u5230 @adep/cli \u7684 package.json\uFF08\u5DF2\u904D\u5386\u5230\u6587\u4EF6\u7CFB\u7EDF\u6839\uFF09"
+      );
+    }
+    dir = parent;
+  }
+}
+async function appShellTemplateDir(code = "app-desktop") {
+  const dir = join14(await findCliPackageRoot(), "templates", code);
+  try {
+    await stat6(dir);
+  } catch {
+    throw new InitError(
+      "SHELL_TEMPLATE_MISSING",
+      `\u58F3\u6A21\u677F\u76EE\u5F55\u7F3A\u5931\uFF1A${dir}\uFF08\u5B89\u88C5\u4EA7\u7269\u5E94\u5305\u542B templates/\uFF0C\u68C0\u67E5 package.json \u7684 files \u5B57\u6BB5\uFF09`
+    );
+  }
+  return dir;
+}
+async function renderAppShellTemplate(vars, code = "app-desktop") {
+  const templateDir = await appShellTemplateDir(code);
+  const rels = await collectRelPaths(templateDir, ".");
+  const allowed = TEMPLATE_VAR_ALLOWLIST[code];
+  const values = {
+    projectSlug: vars.projectSlug,
+    appName: vars.appName,
+    platformUrl: vars.platformUrl,
+    // ⚠️ 判据是「desktop 与 mobile 族」而不是「是不是 app-mobile」——`app-mobile-xtool`
+    // 同样要 iosBundleId。原来写成 `code === 'app-mobile' ? ... : { appId }` 时，
+    // 新 code 会落进 else 分支：`{{iosBundleId}}` 取到 `undefined → ''`，
+    // 渲染出一个 **bundle id 为空** 的工程（SwiftPM/xtool 都在更晚的环节才报错）。
+    ...code === "app-desktop" ? { appId: vars.appId ?? "" } : {
+      iosBundleId: vars.iosBundleId ?? "",
+      androidPackageId: vars.androidPackageId ?? ""
+    }
+  };
+  return Promise.all(
+    rels.map(async (rel) => {
+      const raw = await readFile11(join14(templateDir, rel), "utf8");
+      const content = raw.replace(/\{\{\s*([A-Za-z0-9_-]+)\s*\}\}/g, (whole, name) => {
+        if (!allowed.has(name)) {
+          throw new InitError(
+            "SHELL_TEMPLATE_INVALID",
+            `\u58F3\u6A21\u677F ${code} \u7684\u6587\u4EF6 ${rel} \u4F7F\u7528\u4E86\u672A\u652F\u6301\u53D8\u91CF "${whole}"\uFF1A\u5141\u8BB8 ${[...allowed].join(" | ")}`
+          );
+        }
+        return values[name] ?? "";
+      });
+      const leftover = /\{\{\s*[A-Za-z0-9_-]+\s*\}\}/.exec(content);
+      if (leftover !== null) {
+        throw new InitError(
+          "SHELL_TEMPLATE_INVALID",
+          `\u58F3\u6A21\u677F ${code} \u7684\u6587\u4EF6 ${rel} \u6E32\u67D3\u540E\u4ECD\u6709\u672A\u66FF\u6362\u5360\u4F4D\u7B26 "${leftover[0]}"`
+        );
+      }
+      return { path: rel, content };
+    })
+  );
+}
 
 // node_modules/.pnpm/zod@4.6.7/node_modules/zod/v4/classic/external.js
 var external_exports = {};
@@ -33050,148 +33237,6 @@ function parseAdepAppConfig(input2) {
   return parsed.data;
 }
 
-// packages/cli/src/app-init.ts
-import { cp, mkdir as mkdir8, readdir as readdir5, stat as stat7, writeFile as writeFile6 } from "node:fs/promises";
-import { dirname as dirname9, join as join15, resolve as resolve7 } from "node:path";
-
-// packages/cli/src/app-template.ts
-import { readFileSync as readFileSync3 } from "node:fs";
-import { readdir as readdir4, readFile as readFile11, stat as stat6 } from "node:fs/promises";
-import { dirname as dirname8, join as join14 } from "node:path";
-import { fileURLToPath as fileURLToPath3 } from "node:url";
-var TEMPLATE_VAR_ALLOWLIST = {
-  "app-desktop": /* @__PURE__ */ new Set(["projectSlug", "appName", "appId", "platformUrl"]),
-  "app-mobile": /* @__PURE__ */ new Set([
-    "projectSlug",
-    "appName",
-    "platformUrl",
-    "iosBundleId",
-    "androidPackageId"
-  ]),
-  // xtool 只做 iOS ⇒ 没有 androidPackageId。少这一个变量是**刻意的**：
-  // 模板里若写了它，渲染期会 fail loud（而不是渲染出一个没有 Android 目标的空值）。
-  "app-mobile-xtool": /* @__PURE__ */ new Set(["projectSlug", "appName", "platformUrl", "iosBundleId"])
-};
-function shellTemplateForPlatform(platform) {
-  return platform === "mobile" ? "app-mobile" : "app-desktop";
-}
-function normalizeToolchain(input2) {
-  if (input2 === void 0 || input2.length === 0) return "capacitor";
-  if (input2 === "capacitor" || input2 === "xtool") return input2;
-  throw new InitError(
-    "INVALID_TOOLCHAIN",
-    `--toolchain \u987B\u4E3A capacitor | xtool\uFF0C\u6536\u5230 "${input2}"\uFF08\u7F3A\u7701 capacitor\uFF09`
-  );
-}
-function shellTemplateFor(platform, toolchain) {
-  if (toolchain === "xtool") {
-    if (platform !== "mobile") {
-      throw new InitError(
-        "INVALID_TOOLCHAIN",
-        `--toolchain xtool \u53EA\u652F\u6301 --platform mobile\uFF08xtool \u4EA7\u51FA iOS \u539F\u751F app\uFF09\uFF0C\u6536\u5230 --platform ${platform}`
-      );
-    }
-    return "app-mobile-xtool";
-  }
-  return shellTemplateForPlatform(platform);
-}
-var XTOOL_SHELL_REUSED_FROM_MOBILE = [
-  { from: "plugins/adep-bridge", to: "plugins/adep-bridge" },
-  { from: "web/adep-bridge.js", to: "web/adep-bridge.js" },
-  { from: "web/offline-runtime.js", to: "web/offline-runtime.js" }
-];
-var TEMPLATE_MANIFEST_FILES = /* @__PURE__ */ new Set(["template.json"]);
-async function collectRelPaths(dir, base) {
-  const entries = await readdir4(dir, { withFileTypes: true });
-  const nested = await Promise.all(
-    entries.filter((entry) => entry.name !== ".DS_Store" && !TEMPLATE_MANIFEST_FILES.has(entry.name)).toSorted((a, b) => a.name < b.name ? -1 : a.name > b.name ? 1 : 0).map((entry) => {
-      const abs = join14(dir, entry.name);
-      return entry.isDirectory() ? (
-        // 递归时 base 必须带上子目录前缀，否则深层文件相对路径会丢目录段
-        // （app-mobile 是嵌套目录结构：bridge/gate.mjs、plugins/adep-bridge/...）。
-        collectRelPaths(abs, join14(base, entry.name))
-      ) : Promise.resolve([join14(base, entry.name).split("\\").join("/")]);
-    })
-  );
-  return nested.flat();
-}
-async function findCliPackageRoot() {
-  let dir = dirname8(fileURLToPath3(import.meta.url));
-  for (; ; ) {
-    let raw;
-    try {
-      raw = readFileSync3(join14(dir, "package.json"), "utf8");
-    } catch {
-      raw = "";
-    }
-    try {
-      const pkg = JSON.parse(raw);
-      if (pkg.name === "@adep/cli") return dir;
-    } catch {
-    }
-    const parent = dirname8(dir);
-    if (parent === dir) {
-      throw new InitError(
-        "SHELL_TEMPLATE_MISSING",
-        "\u627E\u4E0D\u5230 @adep/cli \u7684 package.json\uFF08\u5DF2\u904D\u5386\u5230\u6587\u4EF6\u7CFB\u7EDF\u6839\uFF09"
-      );
-    }
-    dir = parent;
-  }
-}
-async function appShellTemplateDir(code = "app-desktop") {
-  const dir = join14(await findCliPackageRoot(), "templates", code);
-  try {
-    await stat6(dir);
-  } catch {
-    throw new InitError(
-      "SHELL_TEMPLATE_MISSING",
-      `\u58F3\u6A21\u677F\u76EE\u5F55\u7F3A\u5931\uFF1A${dir}\uFF08\u5B89\u88C5\u4EA7\u7269\u5E94\u5305\u542B templates/\uFF0C\u68C0\u67E5 package.json \u7684 files \u5B57\u6BB5\uFF09`
-    );
-  }
-  return dir;
-}
-async function renderAppShellTemplate(vars, code = "app-desktop") {
-  const templateDir = await appShellTemplateDir(code);
-  const rels = await collectRelPaths(templateDir, ".");
-  const allowed = TEMPLATE_VAR_ALLOWLIST[code];
-  const values = {
-    projectSlug: vars.projectSlug,
-    appName: vars.appName,
-    platformUrl: vars.platformUrl,
-    // ⚠️ 判据是「desktop 与 mobile 族」而不是「是不是 app-mobile」——`app-mobile-xtool`
-    // 同样要 iosBundleId。原来写成 `code === 'app-mobile' ? ... : { appId }` 时，
-    // 新 code 会落进 else 分支：`{{iosBundleId}}` 取到 `undefined → ''`，
-    // 渲染出一个 **bundle id 为空** 的工程（SwiftPM/xtool 都在更晚的环节才报错）。
-    ...code === "app-desktop" ? { appId: vars.appId ?? "" } : {
-      iosBundleId: vars.iosBundleId ?? "",
-      androidPackageId: vars.androidPackageId ?? ""
-    }
-  };
-  return Promise.all(
-    rels.map(async (rel) => {
-      const raw = await readFile11(join14(templateDir, rel), "utf8");
-      const content = raw.replace(/\{\{\s*([A-Za-z0-9_-]+)\s*\}\}/g, (whole, name) => {
-        if (!allowed.has(name)) {
-          throw new InitError(
-            "SHELL_TEMPLATE_INVALID",
-            `\u58F3\u6A21\u677F ${code} \u7684\u6587\u4EF6 ${rel} \u4F7F\u7528\u4E86\u672A\u652F\u6301\u53D8\u91CF "${whole}"\uFF1A\u5141\u8BB8 ${[...allowed].join(" | ")}`
-          );
-        }
-        return values[name] ?? "";
-      });
-      const leftover = /\{\{\s*[A-Za-z0-9_-]+\s*\}\}/.exec(content);
-      if (leftover !== null) {
-        throw new InitError(
-          "SHELL_TEMPLATE_INVALID",
-          `\u58F3\u6A21\u677F ${code} \u7684\u6587\u4EF6 ${rel} \u6E32\u67D3\u540E\u4ECD\u6709\u672A\u66FF\u6362\u5360\u4F4D\u7B26 "${leftover[0]}"`
-        );
-      }
-      return { path: rel, content };
-    })
-  );
-}
-
 // packages/cli/src/app-init.ts
 function appIdForSlug(slug) {
   return `top.adep.${slug}`;
@@ -33312,8 +33357,10 @@ async function listFiles(path, base) {
 
 // packages/cli/src/app-build.ts
 init_client();
-init_config();
 init_client2();
+
+// packages/cli/src/app-build/shared.ts
+import { stat as stat8 } from "node:fs/promises";
 var SITE_PREFIX = "site/";
 var SHELL_SITE_DIR = "app/site";
 var MOBILE_SITE_ASSET_FILES = {
@@ -33370,30 +33417,15 @@ async function pathExists(path) {
     return false;
   }
 }
-async function readShellConfig(shellDir) {
-  const configPath = join16(shellDir, "adep.app.json");
-  let text;
-  try {
-    text = await readFile12(configPath, "utf8");
-  } catch {
-    throw new InitError(
-      "APP_CONFIG_NOT_FOUND",
-      `\u672A\u627E\u5230 ${configPath}\uFF1A\u8BE5\u76EE\u5F55\u4E0D\u662F\u684C\u9762\u58F3\u5DE5\u7A0B\uFF0C\u6216\u5C1A\u672A\u6267\u884C adep app init --dir ${shellDir}`
-    );
-  }
-  let parsed;
-  try {
-    parsed = JSON.parse(text);
-  } catch (error62) {
-    throw new InitError(
-      "APP_CONFIG_INVALID",
-      `adep.app.json \u4E0D\u662F\u5408\u6CD5 JSON\uFF1A${error62 instanceof Error ? error62.message : String(error62)}`
-    );
-  }
-  const config2 = parseAdepAppConfig(parsed);
-  const raw = parsed ?? {};
-  return { raw, config: config2 };
-}
+
+// packages/cli/src/app-build/bundle.ts
+init_shared_source();
+init_validate();
+init_zip();
+import { createHash as createHash2 } from "node:crypto";
+import { mkdir as mkdir9, mkdtemp, readFile as readFile12, rm as rm3, writeFile as writeFile8 } from "node:fs/promises";
+import { tmpdir } from "node:os";
+import { dirname as dirname10, join as join16, posix } from "node:path";
 function computeBundleVersion(manifest) {
   const siteEntries = manifest.contents.filter((content) => content.path.startsWith(SITE_PREFIX)).toSorted((left, right) => compareByCodeUnit(left.path, right.path));
   const fingerprint = createHash2("sha256").update(siteEntries.map((content) => `${content.path}:${content.sha256}`).join("\n")).digest("hex").slice(0, 12);
@@ -33495,11 +33527,6 @@ async function writeSiteTree(shellDir, site) {
   }
   return written;
 }
-async function bindVersion(shellDir, raw, binding) {
-  const next = { ...raw, build: binding };
-  await writeFile8(join16(shellDir, "adep.app.json"), `${JSON.stringify(next, null, 2)}
-`);
-}
 async function waitForExport(api, jobId, pollIntervalMs, maxPollAttempts) {
   let attempts = 0;
   for (; ; ) {
@@ -33515,6 +33542,113 @@ async function waitForExport(api, jobId, pollIntervalMs, maxPollAttempts) {
     await new Promise((resolvePromise) => setTimeout(resolvePromise, pollIntervalMs));
   }
 }
+async function fetchAndInjectSite(input2) {
+  const workDir = await mkdtemp(join16(tmpdir(), "adep-app-build-"));
+  try {
+    const zipPath = join16(workDir, "bundle.zip");
+    await input2.api.downloadBundle(input2.jobId, zipPath);
+    const entries = zipRead(await readFile12(zipPath));
+    const manifest = readManifest(entries);
+    verifySiteContents(manifest, entries);
+    const site = collectSiteEntries(entries);
+    if (site.size === 0) {
+      throw new InitError(
+        "APP_NO_PUBLISHED_FRONTEND",
+        `\u9879\u76EE "${input2.projectSlug}" \u6CA1\u6709\u5DF2\u53D1\u5E03\u7684\u9875\u9762\u4EA7\u7269\uFF08\u5BFC\u51FA\u5305\u5185\u6CA1\u6709 ${SITE_PREFIX}\uFF09\uFF1A\u8BF7\u5148\u6267\u884C adep publish --only frontend --project ${input2.projectSlug}`
+      );
+    }
+    return { manifest, written: await writeSiteTree(input2.shellDir, site) };
+  } finally {
+    await rm3(workDir, { recursive: true, force: true });
+  }
+}
+
+// packages/cli/src/app-build/shell.ts
+import { readFile as readFile13, writeFile as writeFile9 } from "node:fs/promises";
+import { join as join17 } from "node:path";
+async function readShellConfig(shellDir) {
+  const configPath = join17(shellDir, "adep.app.json");
+  let text;
+  try {
+    text = await readFile13(configPath, "utf8");
+  } catch {
+    throw new InitError(
+      "APP_CONFIG_NOT_FOUND",
+      `\u672A\u627E\u5230 ${configPath}\uFF1A\u8BE5\u76EE\u5F55\u4E0D\u662F\u684C\u9762\u58F3\u5DE5\u7A0B\uFF0C\u6216\u5C1A\u672A\u6267\u884C adep app init --dir ${shellDir}`
+    );
+  }
+  let parsed;
+  try {
+    parsed = JSON.parse(text);
+  } catch (error62) {
+    throw new InitError(
+      "APP_CONFIG_INVALID",
+      `adep.app.json \u4E0D\u662F\u5408\u6CD5 JSON\uFF1A${error62 instanceof Error ? error62.message : String(error62)}`
+    );
+  }
+  const config2 = parseAdepAppConfig(parsed);
+  const raw = parsed ?? {};
+  return { raw, config: config2 };
+}
+async function bindVersion(shellDir, raw, binding) {
+  const next = { ...raw, build: binding };
+  await writeFile9(join17(shellDir, "adep.app.json"), `${JSON.stringify(next, null, 2)}
+`);
+}
+
+// packages/cli/src/app-build/site.ts
+import { copyFile, readFile as readFile14, writeFile as writeFile10 } from "node:fs/promises";
+import { join as join18 } from "node:path";
+async function readEntryPage(indexPath) {
+  try {
+    return await readFile14(indexPath, "utf8");
+  } catch (error62) {
+    const code = typeof error62 === "object" && error62 !== null ? error62.code : void 0;
+    if (code === "ENOENT") {
+      throw new InitError(
+        "APP_SITE_MISSING",
+        `\u7AD9\u70B9\u4EA7\u7269\u7F3A\u5165\u53E3\u9875\uFF1A${indexPath} \u4E0D\u5B58\u5728\u3002\u79FB\u52A8\u58F3\u7684 WebView \u6052\u52A0\u8F7D index.html\uFF0C\u7F3A\u4E86\u88C5\u673A\u5C31\u662F\u767D\u5C4F\u2014\u2014\u8BF7\u786E\u8BA4\u7AD9\u70B9\u5DF2\u53D1\u5E03\u4E14\u5165\u53E3\u9875\u662F**\u6839\u7EA7** index.html\uFF08\`adep publish --only frontend\`\uFF09\uFF0C\u518D\u91CD\u8DD1 adep app build`
+      );
+    }
+    throw new InitError(
+      "APP_SITE_UNREADABLE",
+      `\u7AD9\u70B9\u5165\u53E3\u9875\u8BFB\u4E0D\u51FA\u6765\uFF1A${indexPath}\uFF08${error62 instanceof Error ? error62.message : String(error62)}\uFF09`
+    );
+  }
+}
+async function injectMobileShellAssets(input2) {
+  const siteRoot = join18(input2.shellDir, SHELL_SITE_DIR);
+  const indexPath = join18(siteRoot, "index.html");
+  const html = await readEntryPage(indexPath);
+  const permissionsJson = `${JSON.stringify(
+    { schemaVersion: 1, permissions: sortPermissions(input2.permissions) },
+    null,
+    2
+  )}
+`;
+  await writeFile10(join18(siteRoot, MOBILE_SITE_ASSET_FILES.permissions), permissionsJson);
+  await copyFile(
+    join18(input2.shellDir, "web", "adep-bridge.js"),
+    join18(siteRoot, MOBILE_SITE_ASSET_FILES.bridge)
+  );
+  await copyFile(
+    join18(input2.shellDir, "adep.app.json"),
+    join18(siteRoot, MOBILE_SITE_ASSET_FILES.config)
+  );
+  if (html.includes("adep-bridge.js")) return;
+  const tag = '<script src="/adep-bridge.js"></script>';
+  const next = html.includes("</head>") ? html.replace("</head>", `${tag}
+</head>`) : `${tag}
+${html}`;
+  await writeFile10(indexPath, next);
+}
+
+// packages/cli/src/app-build/toolchain.ts
+init_config();
+import { spawn as spawn2 } from "node:child_process";
+import { closeSync, openSync } from "node:fs";
+import { copyFile as copyFile2, mkdir as mkdir10, readdir as readdir6 } from "node:fs/promises";
+import { basename as basename2, join as join19 } from "node:path";
 function platformArgs(platform) {
   if (platform === "darwin") return ["--mac"];
   if (platform === "win32") return ["--win"];
@@ -33522,7 +33656,7 @@ function platformArgs(platform) {
 }
 function resolvePackagerBinary(shellDir) {
   const name = process.platform === "win32" ? "electron-builder.cmd" : "electron-builder";
-  return join16(shellDir, "node_modules", ".bin", name);
+  return join19(shellDir, "node_modules", ".bin", name);
 }
 function missingDepsError(shellDir) {
   return new InitError(
@@ -33534,17 +33668,17 @@ function missingMobileDepsError(shellDir, platform) {
   if (platform === "ios") {
     return new InitError(
       "APP_SHELL_DEPS_MISSING",
-      `\u672A\u627E\u5230 iOS \u539F\u751F\u5DE5\u7A0B\uFF08${join16(shellDir, "ios", "App")}\uFF09\uFF1A\u8BF7\u5148\u5728 ${shellDir} \u6267\u884C npx cap add ios && npx cap sync`
+      `\u672A\u627E\u5230 iOS \u539F\u751F\u5DE5\u7A0B\uFF08${join19(shellDir, "ios", "App")}\uFF09\uFF1A\u8BF7\u5148\u5728 ${shellDir} \u6267\u884C npx cap add ios && npx cap sync`
     );
   }
   return new InitError(
     "APP_SHELL_DEPS_MISSING",
-    `\u672A\u627E\u5230 Android \u539F\u751F\u5DE5\u7A0B\uFF08${join16(shellDir, "android", "gradlew")}\uFF09\uFF1A\u8BF7\u5148\u5728 ${shellDir} \u6267\u884C npx cap add android && npx cap sync`
+    `\u672A\u627E\u5230 Android \u539F\u751F\u5DE5\u7A0B\uFF08${join19(shellDir, "android", "gradlew")}\uFF09\uFF1A\u8BF7\u5148\u5728 ${shellDir} \u6267\u884C npx cap add android && npx cap sync`
   );
 }
 function resolveCapBinary(shellDir) {
   const name = process.platform === "win32" ? "cap.cmd" : "cap";
-  return join16(shellDir, "node_modules", ".bin", name);
+  return join19(shellDir, "node_modules", ".bin", name);
 }
 async function syncCapacitorAssets(input2) {
   const capBin = resolveCapBinary(input2.shellDir);
@@ -33567,11 +33701,11 @@ async function assertShellPackagerReady(shellDir, platform, prepareOnly, toolcha
     return;
   }
   if (platform === "ios") {
-    if (!await pathExists(join16(shellDir, "ios", "App"))) {
-      if (await pathExists(join16(shellDir, "xtool.yml"))) {
+    if (!await pathExists(join19(shellDir, "ios", "App"))) {
+      if (await pathExists(join19(shellDir, "xtool.yml"))) {
         throw new InitError(
           "APP_SHELL_DEPS_MISSING",
-          `\u672A\u627E\u5230 Capacitor \u7684 iOS \u539F\u751F\u5DE5\u7A0B\uFF08${join16(shellDir, "ios", "App")}\uFF09\uFF1B\u4F46\u68C0\u6D4B\u5230\u8BE5\u76EE\u5F55\u662F xtool \u58F3\u5DE5\u7A0B\uFF08\u6709 xtool.yml\uFF09\u2014\u2014\u672C\u6B21\u8BF7\u52A0 --toolchain xtool`
+          `\u672A\u627E\u5230 Capacitor \u7684 iOS \u539F\u751F\u5DE5\u7A0B\uFF08${join19(shellDir, "ios", "App")}\uFF09\uFF1B\u4F46\u68C0\u6D4B\u5230\u8BE5\u76EE\u5F55\u662F xtool \u58F3\u5DE5\u7A0B\uFF08\u6709 xtool.yml\uFF09\u2014\u2014\u672C\u6B21\u8BF7\u52A0 --toolchain xtool`
         );
       }
       throw missingMobileDepsError(shellDir, "ios");
@@ -33587,16 +33721,16 @@ async function assertShellPackagerReady(shellDir, platform, prepareOnly, toolcha
   if (!await pathExists(resolvePackagerBinary(shellDir))) throw missingDepsError(shellDir);
 }
 async function assertXtoolShellReady(shellDir) {
-  if (!await pathExists(join16(shellDir, "xtool.yml")) || !await pathExists(join16(shellDir, "Package.swift"))) {
+  if (!await pathExists(join19(shellDir, "xtool.yml")) || !await pathExists(join19(shellDir, "Package.swift"))) {
     throw new InitError(
       "APP_SHELL_DEPS_MISSING",
-      `\u672A\u627E\u5230 xtool \u58F3\u5DE5\u7A0B\uFF08\u9700\u8981 ${join16(shellDir, "xtool.yml")} \u4E0E ${join16(shellDir, "Package.swift")}\uFF09\uFF1A\u8BF7\u7528 adep app init --platform mobile --toolchain xtool \u751F\u6210`
+      `\u672A\u627E\u5230 xtool \u58F3\u5DE5\u7A0B\uFF08\u9700\u8981 ${join19(shellDir, "xtool.yml")} \u4E0E ${join19(shellDir, "Package.swift")}\uFF09\uFF1A\u8BF7\u7528 adep app init --platform mobile --toolchain xtool \u751F\u6210`
     );
   }
-  if (!await pathExists(join16(shellDir, "plugins", "adep-bridge", "Package.swift"))) {
+  if (!await pathExists(join19(shellDir, "plugins", "adep-bridge", "Package.swift"))) {
     throw new InitError(
       "APP_SHELL_DEPS_MISSING",
-      `xtool \u58F3\u7F3A\u5C11\u539F\u751F\u6865\u63D2\u4EF6\u6E90\u7801\uFF08${join16(shellDir, "plugins", "adep-bridge", "Package.swift")}\uFF09\uFF1A\u58F3\u7684 Package.swift \u4EE5 .package(path:) \u786C\u4F9D\u8D56\u5B83\uFF0C\u7F3A\u5931\u65F6**\u89E3\u6790\u6E05\u5355\u5373\u5931\u8D25**\uFF08\u4E0D\u662F\u8FD0\u884C\u671F\u5C11\u4E2A\u529F\u80FD\uFF09\u3002\u8BF7\u91CD\u65B0 adep app init --platform mobile --toolchain xtool\uFF0C\u6216\u624B\u5DE5\u8865\u8BE5\u76EE\u5F55`
+      `xtool \u58F3\u7F3A\u5C11\u539F\u751F\u6865\u63D2\u4EF6\u6E90\u7801\uFF08${join19(shellDir, "plugins", "adep-bridge", "Package.swift")}\uFF09\uFF1A\u58F3\u7684 Package.swift \u4EE5 .package(path:) \u786C\u4F9D\u8D56\u5B83\uFF0C\u7F3A\u5931\u65F6**\u89E3\u6790\u6E05\u5355\u5373\u5931\u8D25**\uFF08\u4E0D\u662F\u8FD0\u884C\u671F\u5C11\u4E2A\u529F\u80FD\uFF09\u3002\u8BF7\u91CD\u65B0 adep app init --platform mobile --toolchain xtool\uFF0C\u6216\u624B\u5DE5\u8865\u8BE5\u76EE\u5F55`
     );
   }
 }
@@ -33623,8 +33757,8 @@ function probeCommand(command, args) {
   });
 }
 function xcodebuildArgs(shellDir, outDir) {
-  const appDir = join16(shellDir, "ios", "App");
-  const project2 = join16(appDir, "App.xcodeproj");
+  const appDir = join19(shellDir, "ios", "App");
+  const project2 = join19(appDir, "App.xcodeproj");
   const args = [
     // 有 workspace（pod install 后）用 workspace；否则退到 xcodeproj（无插件的最小工程）。
     "-project",
@@ -33635,7 +33769,7 @@ function xcodebuildArgs(shellDir, outDir) {
     "Release",
     "archive",
     "-archivePath",
-    join16(outDir, `${basename2(shellDir)}.xcarchive`),
+    join19(outDir, `${basename2(shellDir)}.xcarchive`),
     // unsigned：平台不出具任何签名（PRD §2.11.6「平台不出具签名」）。
     // 显式 CODE_SIGNING_ALLOWED=NO——不带任何签名身份（CODE_SIGN_IDENTITY / PROVISIONING_PROFILE）。
     "CODE_SIGNING_ALLOWED=NO",
@@ -33644,8 +33778,8 @@ function xcodebuildArgs(shellDir, outDir) {
   return args;
 }
 async function runXcodebuild(input2) {
-  const workspace = join16(input2.shellDir, "ios", "App", "App.xcworkspace");
-  const project2 = join16(input2.shellDir, "ios", "App", "App.xcodeproj");
+  const workspace = join19(input2.shellDir, "ios", "App", "App.xcworkspace");
+  const project2 = join19(input2.shellDir, "ios", "App", "App.xcodeproj");
   if (!await pathExists(workspace) && !await pathExists(project2)) {
     throw missingMobileDepsError(input2.shellDir, "ios");
   }
@@ -33662,7 +33796,7 @@ async function assertUnsignedIosArchive(archivePath) {
   if (!await pathExists(archivePath)) {
     throw new InitError("APP_ARCHIVE_INCOMPLETE", `iOS archive \u4E0D\u5B58\u5728\uFF1A${archivePath}`);
   }
-  const applicationsDir = join16(archivePath, "Products", "Applications");
+  const applicationsDir = join19(archivePath, "Products", "Applications");
   let hasAppBundle = false;
   try {
     const entries = await readdir6(applicationsDir, { withFileTypes: true });
@@ -33692,7 +33826,7 @@ async function assertUnsignedIosArchive(archivePath) {
         continue;
       }
       if (entry.isDirectory()) {
-        await walk(join16(dir, entry.name), childRel, depth + 1);
+        await walk(join19(dir, entry.name), childRel, depth + 1);
       }
     }
   };
@@ -33705,10 +33839,10 @@ async function assertUnsignedIosArchive(archivePath) {
   }
 }
 function resolveGradlew(shellDir) {
-  return process.platform === "win32" ? join16(shellDir, "android", "gradlew.bat") : join16(shellDir, "android", "gradlew");
+  return process.platform === "win32" ? join19(shellDir, "android", "gradlew.bat") : join19(shellDir, "android", "gradlew");
 }
 async function copyGradleApkToOutDir(shellDir, outDir) {
-  const outputsRoot = join16(shellDir, "android", "app", "build", "outputs", "apk");
+  const outputsRoot = join19(shellDir, "android", "app", "build", "outputs", "apk");
   const copied = [];
   const walk = async (dir, depth) => {
     if (depth > 2) return;
@@ -33719,9 +33853,9 @@ async function copyGradleApkToOutDir(shellDir, outDir) {
       return;
     }
     for (const entry of entries) {
-      const full = join16(dir, entry.name);
+      const full = join19(dir, entry.name);
       if (entry.isFile() && entry.name.endsWith(".apk")) {
-        await copyFile(full, join16(outDir, entry.name));
+        await copyFile2(full, join19(outDir, entry.name));
         copied.push(entry.name);
         continue;
       }
@@ -33737,7 +33871,7 @@ async function runGradle(input2) {
   const gradlew = resolveGradlew(input2.shellDir);
   if (!await pathExists(gradlew)) throw missingMobileDepsError(input2.shellDir, "android");
   if (process.platform === "win32") {
-    await spawnChild(join16(input2.shellDir, "android"), "cmd.exe", [
+    await spawnChild(join19(input2.shellDir, "android"), "cmd.exe", [
       "/d",
       "/s",
       "/c",
@@ -33745,14 +33879,14 @@ async function runGradle(input2) {
       "assembleRelease"
     ]);
   } else {
-    await spawnChild(join16(input2.shellDir, "android"), gradlew, ["assembleRelease"]);
+    await spawnChild(join19(input2.shellDir, "android"), gradlew, ["assembleRelease"]);
   }
-  await mkdir9(input2.outDir, { recursive: true });
+  await mkdir10(input2.outDir, { recursive: true });
   const copied = await copyGradleApkToOutDir(input2.shellDir, input2.outDir);
   if (copied.length === 0) {
     throw new InitError(
       "APP_ARTIFACT_MISSING",
-      `gradle \u5DF2\u6210\u529F\u4F46 ${join16(input2.shellDir, "android", "app", "build", "outputs", "apk")} \u4E0B\u6CA1\u6709 .apk\uFF1AassembleRelease \u53EF\u80FD\u88AB\u964D\u7EA7\u6210\u522B\u7684\u53D8\u4F53\uFF0C\u8BF7\u68C0\u67E5 android \u5DE5\u7A0B\u7684\u6784\u5EFA\u53D8\u4F53\u914D\u7F6E`
+      `gradle \u5DF2\u6210\u529F\u4F46 ${join19(input2.shellDir, "android", "app", "build", "outputs", "apk")} \u4E0B\u6CA1\u6709 .apk\uFF1AassembleRelease \u53EF\u80FD\u88AB\u964D\u7EA7\u6210\u522B\u7684\u53D8\u4F53\uFF0C\u8BF7\u68C0\u67E5 android \u5DE5\u7A0B\u7684\u6784\u5EFA\u53D8\u4F53\u914D\u7F6E`
     );
   }
 }
@@ -33818,6 +33952,10 @@ async function runElectronBuilder(input2) {
   }
   await spawnChild(input2.shellDir, binary, args, void 0, env);
 }
+
+// packages/cli/src/app-build/artifacts.ts
+import { readFile as readFile15, readdir as readdir7 } from "node:fs/promises";
+import { join as join20, relative as relative2 } from "node:path";
 function isArtifact(name, isDirectory, platform, toolchain) {
   if (toolchain === "xtool") return !isDirectory && name.endsWith(".ipa");
   if (platform === "ios") return isDirectory && name.endsWith(".xcarchive");
@@ -33830,17 +33968,17 @@ function isArtifact(name, isDirectory, platform, toolchain) {
 }
 async function findArtifacts(shellDir, outDir, platform, toolchain = "capacitor") {
   const found = [];
-  const scanRoot = toolchain === "xtool" ? join16(shellDir, XTOOL_ARTIFACT_DIR) : outDir;
+  const scanRoot = toolchain === "xtool" ? join20(shellDir, XTOOL_ARTIFACT_DIR) : outDir;
   const walk = async (dir, depth) => {
     if (depth > 3) return;
     let entries;
     try {
-      entries = await readdir6(dir, { withFileTypes: true });
+      entries = await readdir7(dir, { withFileTypes: true });
     } catch {
       return;
     }
     for (const entry of entries) {
-      const full = join16(dir, entry.name);
+      const full = join20(dir, entry.name);
       if (isArtifact(entry.name, entry.isDirectory(), platform, toolchain)) {
         found.push(relative2(shellDir, full).split(/[\\/]/u).join("/"));
         continue;
@@ -33891,7 +34029,7 @@ function linuxTargetSkips(declared, artifacts) {
 }
 async function readLinuxDeclaredTargets(shellDir) {
   try {
-    const raw = await readFile12(join16(shellDir, "package.json"), "utf8");
+    const raw = await readFile15(join20(shellDir, "package.json"), "utf8");
     const parsed = JSON.parse(raw);
     const target = parsed.build?.linux?.target;
     if (typeof target === "string") return [target];
@@ -33902,69 +34040,8 @@ async function readLinuxDeclaredTargets(shellDir) {
     return [];
   }
 }
-async function fetchAndInjectSite(input2) {
-  const workDir = await mkdtemp(join16(tmpdir(), "adep-app-build-"));
-  try {
-    const zipPath = join16(workDir, "bundle.zip");
-    await input2.api.downloadBundle(input2.jobId, zipPath);
-    const entries = zipRead(await readFile12(zipPath));
-    const manifest = readManifest(entries);
-    verifySiteContents(manifest, entries);
-    const site = collectSiteEntries(entries);
-    if (site.size === 0) {
-      throw new InitError(
-        "APP_NO_PUBLISHED_FRONTEND",
-        `\u9879\u76EE "${input2.projectSlug}" \u6CA1\u6709\u5DF2\u53D1\u5E03\u7684\u9875\u9762\u4EA7\u7269\uFF08\u5BFC\u51FA\u5305\u5185\u6CA1\u6709 ${SITE_PREFIX}\uFF09\uFF1A\u8BF7\u5148\u6267\u884C adep publish --only frontend --project ${input2.projectSlug}`
-      );
-    }
-    return { manifest, written: await writeSiteTree(input2.shellDir, site) };
-  } finally {
-    await rm3(workDir, { recursive: true, force: true });
-  }
-}
-async function readEntryPage(indexPath) {
-  try {
-    return await readFile12(indexPath, "utf8");
-  } catch (error62) {
-    const code = typeof error62 === "object" && error62 !== null ? error62.code : void 0;
-    if (code === "ENOENT") {
-      throw new InitError(
-        "APP_SITE_MISSING",
-        `\u7AD9\u70B9\u4EA7\u7269\u7F3A\u5165\u53E3\u9875\uFF1A${indexPath} \u4E0D\u5B58\u5728\u3002\u79FB\u52A8\u58F3\u7684 WebView \u6052\u52A0\u8F7D index.html\uFF0C\u7F3A\u4E86\u88C5\u673A\u5C31\u662F\u767D\u5C4F\u2014\u2014\u8BF7\u786E\u8BA4\u7AD9\u70B9\u5DF2\u53D1\u5E03\u4E14\u5165\u53E3\u9875\u662F**\u6839\u7EA7** index.html\uFF08\`adep publish --only frontend\`\uFF09\uFF0C\u518D\u91CD\u8DD1 adep app build`
-      );
-    }
-    throw new InitError(
-      "APP_SITE_UNREADABLE",
-      `\u7AD9\u70B9\u5165\u53E3\u9875\u8BFB\u4E0D\u51FA\u6765\uFF1A${indexPath}\uFF08${error62 instanceof Error ? error62.message : String(error62)}\uFF09`
-    );
-  }
-}
-async function injectMobileShellAssets(input2) {
-  const siteRoot = join16(input2.shellDir, SHELL_SITE_DIR);
-  const indexPath = join16(siteRoot, "index.html");
-  const html = await readEntryPage(indexPath);
-  const permissionsJson = `${JSON.stringify(
-    { schemaVersion: 1, permissions: sortPermissions(input2.permissions) },
-    null,
-    2
-  )}
-`;
-  await writeFile8(join16(siteRoot, MOBILE_SITE_ASSET_FILES.permissions), permissionsJson);
-  await copyFile(
-    join16(input2.shellDir, "web", "adep-bridge.js"),
-    join16(siteRoot, MOBILE_SITE_ASSET_FILES.bridge)
-  );
-  await copyFile(
-    join16(input2.shellDir, "adep.app.json"),
-    join16(siteRoot, MOBILE_SITE_ASSET_FILES.config)
-  );
-  if (html.includes("adep-bridge.js")) return;
-  const tag = '<script src="/adep-bridge.js"></script>';
-  const next = html.includes("</head>") ? html.replace("</head>", `${tag}
-</head>`) : `${tag}
-${html}`;
-  await writeFile8(indexPath, next);
-}
+
+// packages/cli/src/app-build.ts
 async function buildDesktopApp(options, deps) {
   const shellDir = resolve8(options.dir);
   const platform = normalizePlatform(options.platform);
@@ -33972,7 +34049,7 @@ async function buildDesktopApp(options, deps) {
   const toolchain = normalizeToolchain(options.toolchain);
   const prepareOnly = options.prepareOnly === true;
   const now = deps.now ?? (() => /* @__PURE__ */ new Date());
-  const outDir = join16(shellDir, SHELL_OUT_DIR);
+  const outDir = join21(shellDir, SHELL_OUT_DIR);
   if (isMobilePlatform(platform) && target === "dir") {
     throw new InitError(
       "INVALID_TARGET",
@@ -34033,7 +34110,7 @@ async function buildDesktopApp(options, deps) {
     if (toolchain === "capacitor" && (platform === "ios" || platform === "android")) {
       await (deps.runCapSync ?? syncCapacitorAssets)({ shellDir, platform });
     }
-    await mkdir9(outDir, { recursive: true });
+    await mkdir11(outDir, { recursive: true });
     await (deps.runPackager ?? runPlatformPackager)({
       shellDir,
       platform,
@@ -34044,7 +34121,7 @@ async function buildDesktopApp(options, deps) {
     });
     artifacts = await findArtifacts(shellDir, outDir, platform, toolchain);
     if (artifacts.length === 0) {
-      const scanned = toolchain === "xtool" ? join16(shellDir, XTOOL_ARTIFACT_DIR) : outDir;
+      const scanned = toolchain === "xtool" ? join21(shellDir, XTOOL_ARTIFACT_DIR) : outDir;
       const hint = toolchain === "xtool" ? "`xtool dev build --ipa` \u7684\u4EA7\u7269\u5E94\u5728 xtool/<product>.ipa\uFF08\u65E0\u8F93\u51FA\u4F4D\u53C2\u6570\uFF09\uFF1B\u8BF7\u68C0\u67E5 xtool \u662F\u5426\u771F\u7684\u8DD1\u5230\u4E86\u6253\u5305\uFF08\u800C\u4E0D\u662F\u5728\u7F16\u8BD1\u9636\u6BB5\u9000\u51FA\uFF09" : "\u8BF7\u68C0\u67E5\u58F3\u5DE5\u7A0B\u7684\u539F\u751F\u5DE5\u7A0B / build \u914D\u7F6E";
       throw new InitError(
         "APP_ARTIFACT_MISSING",
@@ -34053,7 +34130,7 @@ async function buildDesktopApp(options, deps) {
     }
     if (platform === "ios" && toolchain === "capacitor") {
       for (const artifact of artifacts) {
-        await assertUnsignedIosArchive(join16(shellDir, artifact));
+        await assertUnsignedIosArchive(join21(shellDir, artifact));
       }
     }
     if (platform === "linux" && target === "installer") {
@@ -34086,9 +34163,9 @@ async function buildDesktopApp(options, deps) {
     artifacts,
     warnings
   };
-  await mkdir9(outDir, { recursive: true });
-  const reportPath = join16(outDir, REPORT_FILE);
-  await writeFile8(reportPath, `${JSON.stringify(report, null, 2)}
+  await mkdir11(outDir, { recursive: true });
+  const reportPath = join21(outDir, REPORT_FILE);
+  await writeFile11(reportPath, `${JSON.stringify(report, null, 2)}
 `);
   return {
     appPath: shellDir,
@@ -34132,17 +34209,17 @@ async function createAppBuildApi(paths, cwd) {
 }
 
 // packages/cli/src/app-doctor.ts
-import { readFile as readFile14, stat as stat9 } from "node:fs/promises";
-import { join as join18 } from "node:path";
+import { readFile as readFile17, stat as stat9 } from "node:fs/promises";
+import { join as join23 } from "node:path";
 
 // packages/cli/src/app-offline-build.ts
 init_zip();
 init_auth();
 import { createHash as createHash3 } from "node:crypto";
-import { access, copyFile as copyFile2, mkdir as mkdir10, mkdtemp as mkdtemp2, readFile as readFile13, rm as rm4, writeFile as writeFile9 } from "node:fs/promises";
+import { access, copyFile as copyFile3, mkdir as mkdir12, mkdtemp as mkdtemp2, readFile as readFile16, rm as rm4, writeFile as writeFile12 } from "node:fs/promises";
 import { spawn as spawn3 } from "node:child_process";
 import { tmpdir as tmpdir2 } from "node:os";
-import { dirname as dirname11, join as join17, posix as posix2, resolve as resolve9 } from "node:path";
+import { dirname as dirname11, join as join22, posix as posix2, resolve as resolve9 } from "node:path";
 init_client();
 var SHELL_OFFLINE_DIR = "app/offline";
 var SHELL_SITE_OFFLINE_DIR = "app/site/offline";
@@ -34184,15 +34261,15 @@ function collectOfflineEntries(entries) {
   return collected;
 }
 async function writeOfflineTree(shellDir, collected, targetRel) {
-  const targetRoot = join17(shellDir, targetRel);
+  const targetRoot = join22(shellDir, targetRel);
   await rm4(targetRoot, { recursive: true, force: true });
-  await mkdir10(targetRoot, { recursive: true });
+  await mkdir12(targetRoot, { recursive: true });
   const written = [];
   for (const [rel, bytes] of collected) {
     if (rel.length === 0 || rel.endsWith("/")) continue;
-    const dest = join17(targetRoot, ...rel.split("/"));
-    await mkdir10(dirname11(dest), { recursive: true });
-    await writeFile9(dest, bytes);
+    const dest = join22(targetRoot, ...rel.split("/"));
+    await mkdir12(dirname11(dest), { recursive: true });
+    await writeFile12(dest, bytes);
     written.push({ path: `${targetRel}/${rel}`, size: bytes.length });
   }
   return written;
@@ -34286,14 +34363,14 @@ async function buildOfflineApp(options, deps) {
     );
   }
   if (mobileOffline) {
-    const entry = join17(shellDir, "app", "site", "index.html");
+    const entry = join22(shellDir, "app", "site", "index.html");
     if (!await fileExists(entry)) {
       throw new InitError(
         "APP_SITE_MISSING",
         `\u79BB\u7EBF\u5305\u7F3A\u9875\u9762\u4EA7\u7269\uFF1A${entry} \u4E0D\u5B58\u5728\u3002\u8BF7\u5148\u6267\u884C ` + (toolchain === "xtool" ? "`adep app build --platform ios --toolchain xtool`\uFF08\u62C9\u53D6\u9875\u9762\u4EA7\u7269\u5E76\u6CE8\u5165\u9875\u9762\u6865 / \u58F3\u914D\u7F6E\uFF09\uFF0C" : "`adep app build --platform android`\uFF08\u62C9\u53D6\u9875\u9762\u4EA7\u7269\u5E76\u6CE8\u5165\u9875\u9762\u6865 / \u58F3\u914D\u7F6E\uFF09\uFF0C") + "\u518D\u6267\u884C\u79BB\u7EBF\u6784\u5EFA\u2014\u2014\u79BB\u7EBF\u6784\u5EFA\u53EA\u8FFD\u52A0 site/offline/ \u5B50\u6811\uFF0C\u4E0D\u4EA7\u751F\u9875\u9762\u672C\u4F53"
       );
     }
-    const loaderSource = join17(shellDir, MOBILE_OFFLINE_LOADER.source);
+    const loaderSource = join22(shellDir, MOBILE_OFFLINE_LOADER.source);
     if (!await fileExists(loaderSource)) {
       throw new InitError(
         "OFFLINE_LOADER_MISSING",
@@ -34318,11 +34395,11 @@ ${finished.error ?? "\u670D\u52A1\u7AEF\u672A\u63D0\u4F9B\u539F\u56E0"}
 \uFF08\u8FD9\u4E9B\u51FD\u6570\u4E0D\u53EF\u79FB\u690D\u5230\u8BBE\u5907\u7AEF\uFF1B\u4ECE\u6253\u5305\u914D\u7F6E\u7684\u79BB\u7EBF\u767D\u540D\u5355\u79FB\u9664\u540E\u91CD\u65B0\u4FDD\u5B58\uFF0C\u5373\u53EF\u7EE7\u7EED\u6784\u5EFA\uFF09`
     );
   }
-  const workDir = await mkdtemp2(join17(tmpdir2(), "adep-app-offline-build-"));
+  const workDir = await mkdtemp2(join22(tmpdir2(), "adep-app-offline-build-"));
   try {
-    const bundlePath = join17(workDir, "bundle.adepack");
+    const bundlePath = join22(workDir, "bundle.adepack");
     await deps.api.downloadBundle(project2.id, finished.id, bundlePath);
-    const entries = zipRead(await readFile13(bundlePath));
+    const entries = zipRead(await readFile16(bundlePath));
     const manifest = readManifest(entries, { allowOfflinePortZero: true });
     const collected = collectOfflineEntries(entries);
     const functionEntries = readFunctionsIndex(collected);
@@ -34331,9 +34408,9 @@ ${finished.error ?? "\u670D\u52A1\u7AEF\u672A\u63D0\u4F9B\u539F\u56E0"}
     if (mobileOffline) {
       const permissions = sortPermissions(await deps.api.getPackagingPermissions(project2.id));
       await injectMobileShellAssets({ shellDir, permissions });
-      await copyFile2(
-        join17(shellDir, MOBILE_OFFLINE_LOADER.source),
-        join17(shellDir, MOBILE_OFFLINE_LOADER.dest)
+      await copyFile3(
+        join22(shellDir, MOBILE_OFFLINE_LOADER.source),
+        join22(shellDir, MOBILE_OFFLINE_LOADER.dest)
       );
     }
     const builtAt = now().toISOString();
@@ -34349,13 +34426,13 @@ ${finished.error ?? "\u670D\u52A1\u7AEF\u672A\u63D0\u4F9B\u539F\u56E0"}
           platform: "ios",
           target: "installer",
           toolchain: "xtool",
-          outDir: join17(shellDir, "dist")
+          outDir: join22(shellDir, "dist")
         });
-        artifacts = await findArtifacts(shellDir, join17(shellDir, "dist"), "ios", "xtool");
+        artifacts = await findArtifacts(shellDir, join22(shellDir, "dist"), "ios", "xtool");
       } else if (androidOffline) {
         await (deps.runCapSync ?? syncCapacitorAssets)({ shellDir, platform: "android" });
-        const outDir2 = join17(shellDir, "dist");
-        await mkdir10(outDir2, { recursive: true });
+        const outDir2 = join22(shellDir, "dist");
+        await mkdir12(outDir2, { recursive: true });
         await runner({
           shellDir,
           platform: "android",
@@ -34366,8 +34443,8 @@ ${finished.error ?? "\u670D\u52A1\u7AEF\u672A\u63D0\u4F9B\u539F\u56E0"}
         artifacts = await findArtifacts(shellDir, outDir2, "android");
       } else {
         const platform = resolveOfflinePlatform();
-        const outDir2 = join17(shellDir, "dist");
-        await mkdir10(outDir2, { recursive: true });
+        const outDir2 = join22(shellDir, "dist");
+        await mkdir12(outDir2, { recursive: true });
         await runner({
           shellDir,
           platform,
@@ -34380,7 +34457,7 @@ ${finished.error ?? "\u670D\u52A1\u7AEF\u672A\u63D0\u4F9B\u539F\u56E0"}
       if (artifacts.length === 0) {
         throw new InitError(
           "APP_ARTIFACT_MISSING",
-          toolchain === "xtool" ? `\u6253\u5305\u5668\u5DF2\u6267\u884C\u4F46 ${join17(shellDir, "xtool")} \u4E0B\u6CA1\u6709 ios \u4EA7\u7269\uFF1A\`xtool dev build --ipa\` \u7684\u4EA7\u7269\u5E94\u5728 xtool/<product>.ipa\uFF08\u65E0\u8F93\u51FA\u4F4D\u53C2\u6570\uFF09\uFF1B\u8BF7\u68C0\u67E5 xtool \u662F\u5426\u771F\u7684\u8DD1\u5230\u4E86\u6253\u5305\uFF08\u800C\u4E0D\u662F\u5728\u7F16\u8BD1\u9636\u6BB5\u9000\u51FA\uFF09` : androidOffline ? `\u6253\u5305\u5668\u5DF2\u6267\u884C\u4F46 ${join17(shellDir, "dist")} \u4E0B\u6CA1\u6709 android \u4EA7\u7269\uFF1Agradle assembleRelease \u7684 APK \u5E94\u5DF2\u88AB\u590D\u5236\u8FDB dist/\uFF08\u89C1 copyGradleApkToOutDir\uFF09\uFF1B\u8BF7\u68C0\u67E5 android \u5DE5\u7A0B\u7684\u6784\u5EFA\u53D8\u4F53\u914D\u7F6E` : `electron-builder \u5DF2\u6267\u884C\u4F46 ${join17(shellDir, "dist")} \u4E0B\u6CA1\u6709\u4EA7\u7269\uFF1A\u8BF7\u68C0\u67E5\u58F3\u5DE5\u7A0B build \u914D\u7F6E\u7684 target`
+          toolchain === "xtool" ? `\u6253\u5305\u5668\u5DF2\u6267\u884C\u4F46 ${join22(shellDir, "xtool")} \u4E0B\u6CA1\u6709 ios \u4EA7\u7269\uFF1A\`xtool dev build --ipa\` \u7684\u4EA7\u7269\u5E94\u5728 xtool/<product>.ipa\uFF08\u65E0\u8F93\u51FA\u4F4D\u53C2\u6570\uFF09\uFF1B\u8BF7\u68C0\u67E5 xtool \u662F\u5426\u771F\u7684\u8DD1\u5230\u4E86\u6253\u5305\uFF08\u800C\u4E0D\u662F\u5728\u7F16\u8BD1\u9636\u6BB5\u9000\u51FA\uFF09` : androidOffline ? `\u6253\u5305\u5668\u5DF2\u6267\u884C\u4F46 ${join22(shellDir, "dist")} \u4E0B\u6CA1\u6709 android \u4EA7\u7269\uFF1Agradle assembleRelease \u7684 APK \u5E94\u5DF2\u88AB\u590D\u5236\u8FDB dist/\uFF08\u89C1 copyGradleApkToOutDir\uFF09\uFF1B\u8BF7\u68C0\u67E5 android \u5DE5\u7A0B\u7684\u6784\u5EFA\u53D8\u4F53\u914D\u7F6E` : `electron-builder \u5DF2\u6267\u884C\u4F46 ${join22(shellDir, "dist")} \u4E0B\u6CA1\u6709\u4EA7\u7269\uFF1A\u8BF7\u68C0\u67E5\u58F3\u5DE5\u7A0B build \u914D\u7F6E\u7684 target`
         );
       }
     }
@@ -34408,10 +34485,10 @@ ${finished.error ?? "\u670D\u52A1\u7AEF\u672A\u63D0\u4F9B\u539F\u56E0"}
       },
       artifacts
     };
-    const outDir = join17(shellDir, "dist");
-    await mkdir10(outDir, { recursive: true });
-    const reportPath = join17(outDir, "build-report.json");
-    await writeFile9(reportPath, `${JSON.stringify(report, null, 2)}
+    const outDir = join22(shellDir, "dist");
+    await mkdir12(outDir, { recursive: true });
+    const reportPath = join22(outDir, "build-report.json");
+    await writeFile12(reportPath, `${JSON.stringify(report, null, 2)}
 `);
     return {
       appPath: shellDir,
@@ -34472,7 +34549,7 @@ async function createAppOfflineBuildApi(paths, cwd) {
       }
       const response = await client.download(downloadUrl, "APP_OFFLINE_BUILD_DOWNLOAD_FAILED");
       const bytes = Buffer.from(await response.arrayBuffer());
-      await writeFile9(outputPath, bytes);
+      await writeFile12(outputPath, bytes);
       return { path: outputPath, size: bytes.length };
     },
     // 与在线构建 `AppBuildDeps.getPackagingPermissions` 同一端点同一读法（app-build.ts 同款）。
@@ -34510,7 +34587,7 @@ async function pathExists2(path) {
 }
 async function missingEntries(root, rels) {
   const probed = await Promise.all(
-    rels.map(async (rel) => ({ rel, exists: await pathExists2(join18(root, ...rel.split("/"))) }))
+    rels.map(async (rel) => ({ rel, exists: await pathExists2(join23(root, ...rel.split("/"))) }))
   );
   return probed.filter((entry) => !entry.exists).map((entry) => entry.rel);
 }
@@ -34524,10 +34601,10 @@ async function resolveTargets(shellDir, template, platform) {
   if (template === "app-mobile-xtool") return [{ platform: "ios", toolchain: "xtool" }];
   if (template === "app-mobile") {
     const targets = [];
-    if (await pathExists2(join18(shellDir, "ios", "App"))) {
+    if (await pathExists2(join23(shellDir, "ios", "App"))) {
       targets.push({ platform: "ios", toolchain: "capacitor" });
     }
-    if (await pathExists2(join18(shellDir, "android", "gradlew"))) {
+    if (await pathExists2(join23(shellDir, "android", "gradlew"))) {
       targets.push({ platform: "android", toolchain: "capacitor" });
     }
     return targets;
@@ -34535,10 +34612,10 @@ async function resolveTargets(shellDir, template, platform) {
   return [];
 }
 async function checkConfigDrift(shellDir, config2) {
-  const siteConfigPath = join18(shellDir, SHELL_SITE_DIR, MOBILE_SITE_ASSET_FILES.config);
+  const siteConfigPath = join23(shellDir, SHELL_SITE_DIR, MOBILE_SITE_ASSET_FILES.config);
   let text;
   try {
-    text = await readFile14(siteConfigPath, "utf8");
+    text = await readFile17(siteConfigPath, "utf8");
   } catch {
     return {
       id: "configDrift",
@@ -34579,8 +34656,8 @@ async function checkConfigDrift(shellDir, config2) {
   };
 }
 async function checkOffline(shellDir) {
-  const desktopRoot = join18(shellDir, SHELL_OFFLINE_DIR);
-  const siteRoot = join18(shellDir, SHELL_SITE_OFFLINE_DIR);
+  const desktopRoot = join23(shellDir, SHELL_OFFLINE_DIR);
+  const siteRoot = join23(shellDir, SHELL_SITE_OFFLINE_DIR);
   const hasDesktop = await pathExists2(desktopRoot);
   const hasSite = await pathExists2(siteRoot);
   if (!hasDesktop && !hasSite) {
@@ -34613,7 +34690,7 @@ async function checkOffline(shellDir) {
   let functions = [];
   try {
     const index = JSON.parse(
-      await readFile14(join18(root, ...OFFLINE_BUNDLE_PATHS.functionsIndex.split("/")), "utf8")
+      await readFile17(join23(root, ...OFFLINE_BUNDLE_PATHS.functionsIndex.split("/")), "utf8")
     );
     functions = index.functions ?? [];
   } catch (error62) {
@@ -34626,7 +34703,7 @@ async function checkOffline(shellDir) {
     };
   }
   const missingSources = (await missingEntries(
-    join18(root, "functions"),
+    join23(root, "functions"),
     functions.map((entry) => typeof entry.name === "string" ? entry.name : "").filter((name) => name !== "").map((name) => `${name}.mjs`)
   )).map((rel) => rel.slice(0, -".mjs".length));
   if (missingSources.length > 0) {
@@ -34654,10 +34731,10 @@ async function checkIdentity(shellDir, desktopShaped) {
       detail: "\u79FB\u52A8\u58F3\u5F62\u6001\uFF1A\u8EAB\u4EFD\u5728 Keychain / Keystore\uFF08\u672C\u9879\u53EA\u8BFB\u684C\u9762\u58F3\u7684\u72B6\u6001\u6587\u4EF6\uFF09"
     };
   }
-  const file2 = join18(shellDir, IDENTITY_STATUS_REL);
+  const file2 = join23(shellDir, IDENTITY_STATUS_REL);
   let text;
   try {
-    text = await readFile14(file2, "utf8");
+    text = await readFile17(file2, "utf8");
   } catch {
     return {
       id: "identity",
@@ -34792,7 +34869,7 @@ async function runShellDoctor(shellDir, deps = {}) {
   }
   let html;
   try {
-    html = await readEntryPage(join18(shellDir, SHELL_SITE_DIR, "index.html"));
+    html = await readEntryPage(join23(shellDir, SHELL_SITE_DIR, "index.html"));
     checks.push({
       id: "siteEntry",
       status: "ok",
@@ -34810,7 +34887,7 @@ async function runShellDoctor(shellDir, deps = {}) {
   }
   const desktopShaped = config2.template === "app-desktop";
   if (desktopShaped) {
-    if (await pathExists2(join18(shellDir, "preload.cjs"))) {
+    if (await pathExists2(join23(shellDir, "preload.cjs"))) {
       checks.push({
         id: "bridgeTag",
         status: "ok",
@@ -34855,7 +34932,7 @@ async function runShellDoctor(shellDir, deps = {}) {
     });
   } else {
     const missingAssets = await missingEntries(
-      join18(shellDir, SHELL_SITE_DIR),
+      join23(shellDir, SHELL_SITE_DIR),
       Object.values(MOBILE_SITE_ASSET_FILES)
     );
     if (missingAssets.length === 0) {
@@ -34924,8 +35001,8 @@ function formatShellDoctorReport(report) {
 }
 
 // packages/cli/src/app-sync.ts
-import { readFile as readFile15 } from "node:fs/promises";
-import { join as join19 } from "node:path";
+import { readFile as readFile18 } from "node:fs/promises";
+import { join as join24 } from "node:path";
 
 // packages/app-runtime/src/device-sqlite.ts
 function createDeviceSqliteDriver(sqlite) {
@@ -35361,7 +35438,7 @@ var APP_SYNC_CODES = {
   /** 当前运行时无 SQLite 内建模块（需要 Bun 或 Node ≥ 22.5）。 */
   runtimeUnsupported: "APP_SYNC_RUNTIME_UNSUPPORTED"
 };
-var LOCAL_DB_REL = join19("data", "offline.sqlite");
+var LOCAL_DB_REL = join24("data", "offline.sqlite");
 function resolveOwnerKey(explicit) {
   const fromEnv = process.env["ADEP_OWNER_KEY"];
   const value = (explicit ?? fromEnv ?? "").trim();
@@ -35436,9 +35513,9 @@ async function runAppSync(options) {
     );
   }
   const ownerKey = resolveOwnerKey(options.ownerKey);
-  const localDb = join19(shellDir, LOCAL_DB_REL);
+  const localDb = join24(shellDir, LOCAL_DB_REL);
   try {
-    await readFile15(localDb);
+    await readFile18(localDb);
   } catch (error62) {
     const code = error62.code;
     if (code === "ENOENT" || code === "EISDIR") {
@@ -35499,14 +35576,14 @@ function formatAppSyncReport(report) {
 // packages/cli/src/app-open.ts
 import { spawn as spawn4 } from "node:child_process";
 import { stat as stat10 } from "node:fs/promises";
-import { join as join20 } from "node:path";
+import { join as join25 } from "node:path";
 var OPEN_UNSUPPORTED_HINT = {
   "app-mobile": "\u79FB\u52A8\u58F3\u6CA1\u6709\u5F00\u53D1\u9884\u89C8\u8DEF\u5F84\uFF1A\u4E0B\u4E00\u6B65\u662F npm install && npx cap add ios / android\uFF08\u539F\u751F\u5DE5\u7A0B\u7531 Capacitor \u751F\u6210\uFF09\uFF0C\u968F\u540E\u5728 Xcode / Android Studio \u91CC\u8FD0\u884C",
   "app-mobile-xtool": "xtool \u79FB\u52A8\u58F3\u6CA1\u6709\u5F00\u53D1\u9884\u89C8\u8DEF\u5F84\uFF1A\u5728\u8BE5\u76EE\u5F55\u6267\u884C xtool dev\uFF08\u9009\u8BBE\u5907\uFF09\u2014\u2014\u4E0D\u9700\u8981 npm start"
 };
 function resolveDevBinary(shellDir) {
   const name = process.platform === "win32" ? "electron.cmd" : "electron";
-  return join20(shellDir, "node_modules", ".bin", name);
+  return join25(shellDir, "node_modules", ".bin", name);
 }
 function defaultSpawnDev(command, args, options) {
   return spawn4(command, args, { cwd: options.cwd, stdio: "inherit" });
@@ -35792,8 +35869,8 @@ function registerApp(program2, ctx) {
 // packages/cli/src/import-cf.ts
 init_adep_config();
 init_regexp();
-import { copyFile as copyFile3, mkdir as mkdir11, readFile as readFile16, readdir as readdir7, stat as stat11, writeFile as writeFile10 } from "node:fs/promises";
-import { basename as basename3, dirname as dirname12, join as join21, relative as relative3, resolve as resolve11 } from "node:path";
+import { copyFile as copyFile4, mkdir as mkdir13, readFile as readFile19, readdir as readdir8, stat as stat11, writeFile as writeFile13 } from "node:fs/promises";
+import { basename as basename3, dirname as dirname12, join as join26, relative as relative3, resolve as resolve11 } from "node:path";
 var TomlSyntaxError = class extends Error {
   constructor(message) {
     super(message);
@@ -36047,13 +36124,13 @@ var SKIP_COPY_NAMES = /* @__PURE__ */ new Set([
 async function copyWorkerDir(sourceDir, targetDir, mainFile) {
   const copied = [];
   const renamedIndex = [];
-  const entries = await readdir7(sourceDir, { withFileTypes: true });
+  const entries = await readdir8(sourceDir, { withFileTypes: true });
   for (const entry of entries) {
-    const from = join21(sourceDir, entry.name);
-    const to = join21(targetDir, entry.name);
+    const from = join26(sourceDir, entry.name);
+    const to = join26(targetDir, entry.name);
     if (SKIP_COPY_NAMES.has(entry.name)) continue;
     if (entry.isDirectory()) {
-      await mkdir11(to, { recursive: true });
+      await mkdir13(to, { recursive: true });
       const sub = await copyWorkerDir(from, to, "");
       copied.push(...sub.copied);
       renamedIndex.push(...sub.renamedIndex);
@@ -36061,18 +36138,18 @@ async function copyWorkerDir(sourceDir, targetDir, mainFile) {
     }
     if (from === mainFile) continue;
     if (entry.name === "index.ts") {
-      await copyFile3(from, join21(targetDir, "_index.ts"));
+      await copyFile4(from, join26(targetDir, "_index.ts"));
       renamedIndex.push("_index.ts");
       continue;
     }
-    await copyFile3(from, to);
+    await copyFile4(from, to);
     copied.push(relative3(targetDir, to));
   }
   return { copied, renamedIndex };
 }
 async function readDevVars(sourceDir) {
   try {
-    const text = await readFile16(join21(sourceDir, ".dev.vars"), "utf8");
+    const text = await readFile19(join26(sourceDir, ".dev.vars"), "utf8");
     const vars = {};
     for (const line of text.split(/\r?\n/)) {
       const trimmed = line.trim();
@@ -36090,19 +36167,19 @@ async function readDevVars(sourceDir) {
 async function copyAssetsToWeb(sourceDir, assetsDir, outDir) {
   const files = [];
   const from = resolve11(sourceDir, assetsDir);
-  const target = join21(outDir, "web");
-  await mkdir11(target, { recursive: true });
-  const entries = await readdir7(from, { withFileTypes: true });
+  const target = join26(outDir, "web");
+  await mkdir13(target, { recursive: true });
+  const entries = await readdir8(from, { withFileTypes: true });
   for (const entry of entries) {
-    const src = join21(from, entry.name);
-    const dst = join21(target, entry.name);
+    const src = join26(from, entry.name);
+    const dst = join26(target, entry.name);
     if (entry.isDirectory()) {
-      await mkdir11(dst, { recursive: true });
+      await mkdir13(dst, { recursive: true });
       const sub = await copyAssetsToWeb(src, ".", outDir);
       files.push(...sub);
       continue;
     }
-    await copyFile3(src, dst);
+    await copyFile4(src, dst);
     files.push(relative3(outDir, dst));
   }
   return files;
@@ -36351,11 +36428,11 @@ function renderImportPackageJson(name) {
 async function importCfProject(cwd, sourceDir, options = {}) {
   let tomlText;
   try {
-    tomlText = await readFile16(join21(sourceDir, "wrangler.toml"), "utf8");
+    tomlText = await readFile19(join26(sourceDir, "wrangler.toml"), "utf8");
   } catch {
     throw new ImportCfError(
       "NO_WRANGLER",
-      `\u627E\u4E0D\u5230 ${join21(sourceDir, "wrangler.toml")}\uFF1A\u9700\u5728 Cloudflare \u9879\u76EE\u6839\u6267\u884C\u5BFC\u5165`
+      `\u627E\u4E0D\u5230 ${join26(sourceDir, "wrangler.toml")}\uFF1A\u9700\u5728 Cloudflare \u9879\u76EE\u6839\u6267\u884C\u5BFC\u5165`
     );
   }
   let config2;
@@ -36390,10 +36467,10 @@ async function importCfProject(cwd, sourceDir, options = {}) {
   const configText = renderAdepConfig(adepConfig, {
     header: "// \u7531 adep import cf \u751F\u6210\uFF08CF-015\uFF09\uFF1A\u7ED1\u5B9A\u58F0\u660E\u4E0E wrangler.toml \u5BF9\u5E94"
   });
-  await mkdir11(outDir, { recursive: true });
-  await writeFile10(join21(outDir, "adep.config.ts"), configText, "utf8");
+  await mkdir13(outDir, { recursive: true });
+  await writeFile13(join26(outDir, "adep.config.ts"), configText, "utf8");
   files.push("adep.config.ts");
-  await writeFile10(join21(outDir, "package.json"), renderImportPackageJson(workerName), "utf8");
+  await writeFile13(join26(outDir, "package.json"), renderImportPackageJson(workerName), "utf8");
   files.push("package.json");
   let mainCopied = false;
   if (config2.main !== void 0) {
@@ -36407,9 +36484,9 @@ async function importCfProject(cwd, sourceDir, options = {}) {
     if (!mainStat.isFile()) {
       throw new ImportCfError("MAIN_NOT_FILE", `main \u4E0D\u662F\u6587\u4EF6\uFF1A${config2.main}`);
     }
-    const fnDir = join21(outDir, "functions", workerName);
-    await mkdir11(fnDir, { recursive: true });
-    await copyFile3(mainAbs, join21(fnDir, "worker.ts"));
+    const fnDir = join26(outDir, "functions", workerName);
+    await mkdir13(fnDir, { recursive: true });
+    await copyFile4(mainAbs, join26(fnDir, "worker.ts"));
     files.push(`functions/${workerName}/worker.ts`);
     mainCopied = true;
     const mainDir = dirname12(mainAbs);
@@ -36423,7 +36500,7 @@ async function importCfProject(cwd, sourceDir, options = {}) {
     if (copied.length > 0) {
       warnings.push(`\u5DF2\u590D\u5236\u540C\u76EE\u5F55\u4F9D\u8D56\u6A21\u5757 ${copied.length} \u4E2A\uFF08\u4FDD\u6301\u76F8\u5BF9 import\uFF09`);
     }
-    await writeFile10(join21(fnDir, "index.ts"), renderFunctionEntry("worker", cfBindings), "utf8");
+    await writeFile13(join26(fnDir, "index.ts"), renderFunctionEntry("worker", cfBindings), "utf8");
     files.push(`functions/${workerName}/index.ts`);
   }
   let dosMigrated = 0;
@@ -36438,20 +36515,20 @@ async function importCfProject(cwd, sourceDir, options = {}) {
       );
     }
     if (doBindings.length > 0) {
-      const fnDir = join21(outDir, "functions", workerName);
-      const workerPath = join21(fnDir, "worker.ts");
-      const workerText = await readFile16(workerPath, "utf8");
+      const fnDir = join26(outDir, "functions", workerName);
+      const workerPath = join26(fnDir, "worker.ts");
+      const workerText = await readFile19(workerPath, "utf8");
       const { text: stripped, removed } = stripDurableObjectClasses(
         workerText,
         doBindings.map((b) => b.className)
       );
-      await writeFile10(workerPath, stripped, "utf8");
+      await writeFile13(workerPath, stripped, "utf8");
       if (removed.length > 0) {
-        await mkdir11(join21(fnDir, "durable-objects"), { recursive: true });
+        await mkdir13(join26(fnDir, "durable-objects"), { recursive: true });
         await Promise.all(
           removed.map(async (r) => {
-            await writeFile10(
-              join21(fnDir, "durable-objects", `${r.className}.ts`),
+            await writeFile13(
+              join26(fnDir, "durable-objects", `${r.className}.ts`),
               `${r.source}
 `,
               "utf8"
@@ -36461,8 +36538,8 @@ async function importCfProject(cwd, sourceDir, options = {}) {
         );
       }
       if (removed.length > 0) {
-        await writeFile10(
-          join21(fnDir, "state-objects.ts"),
+        await writeFile13(
+          join26(fnDir, "state-objects.ts"),
           renderStateObjectDeclaration(doBindings, removed),
           "utf8"
         );
@@ -36507,7 +36584,7 @@ async function importCfProject(cwd, sourceDir, options = {}) {
     unsupported,
     warnings
   });
-  await writeFile10(join21(outDir, "MIGRATION.md"), migration, "utf8");
+  await writeFile13(join26(outDir, "MIGRATION.md"), migration, "utf8");
   files.push("MIGRATION.md");
   if (!mainCopied) {
     warnings.push("wrangler.toml \u672A\u58F0\u660E main\uFF1A\u672A\u751F\u6210\u51FD\u6570\uFF0C\u4EC5\u751F\u6210\u914D\u7F6E\u4E0E\u62A5\u544A");
@@ -36628,7 +36705,7 @@ init_auth();
 init_client();
 init_deploy();
 import { stat as stat16 } from "node:fs/promises";
-import { join as join28, resolve as resolve16 } from "node:path";
+import { join as join33, resolve as resolve16 } from "node:path";
 async function resolveProjectId2(client, cwd, slug) {
   const resolvedSlug = await resolveSlug(resolve16(cwd), slug);
   const listed = await client.request("/api/v1/projects", {}, "PROJECT_LIST_FAILED");
@@ -36675,8 +36752,8 @@ async function publishStaticFrontend(paths, options) {
       "\u7EAF\u9759\u6001\u7AD9\u6682\u4E0D\u652F\u6301\u53D1\u5230\u5F00\u53D1\u7AD9\u70B9\uFF1A\u8BE5\u901A\u9053\u76F4\u63A5\u4E0A\u4F20 site/\uFF0C\u4F1A\u8986\u76D6\u7EBF\u4E0A\u7AD9\u70B9\u3002\u8BF7\u6539\u7528\u5E73\u53F0\u6784\u5EFA\u901A\u9053\uFF08\u5728 web/ \u58F0\u660E scripts.build\uFF09\uFF0C\u6216\u7528 --only functions \u4E4B\u5916\u7684\u5176\u5B83\u65B9\u5F0F\u9A8C\u8BC1\u3002"
     );
   }
-  const webDir = join28(options.cwd, "web");
-  const indexStat = await stat16(join28(webDir, "index.html")).catch(() => null);
+  const webDir = join33(options.cwd, "web");
+  const indexStat = await stat16(join33(webDir, "index.html")).catch(() => null);
   if (indexStat === null || !indexStat.isFile()) {
     throw new CliError(
       "FRONTEND_NO_PAGE",
@@ -36729,7 +36806,7 @@ async function runPublish(paths, io, cwd, flags) {
     });
   }
   if (wantFrontend) {
-    const webDir = join28(cwd, "web");
+    const webDir = join33(cwd, "web");
     const webStat = await stat16(webDir).catch(() => null);
     if (webStat !== null && webStat.isDirectory()) {
       const { isStaticFrontendDir: isStaticFrontendDir2 } = await Promise.resolve().then(() => (init_frontend(), frontend_exports));
@@ -36830,8 +36907,8 @@ init_auth();
 // packages/cli/src/deploy-worker.ts
 init_auth();
 init_client();
-import { readdir as readdir11, readFile as readFile23 } from "node:fs/promises";
-import { join as join29, relative as relative8, resolve as resolve17, sep as sep4 } from "node:path";
+import { readdir as readdir12, readFile as readFile26 } from "node:fs/promises";
+import { join as join34, relative as relative8, resolve as resolve17, sep as sep4 } from "node:path";
 async function collectWranglerFiles(dir) {
   const root = resolve17(dir);
   const out = {};
@@ -36839,7 +36916,7 @@ async function collectWranglerFiles(dir) {
   const walk = async (sub) => {
     let entries;
     try {
-      entries = await readdir11(sub, { withFileTypes: true });
+      entries = await readdir12(sub, { withFileTypes: true });
     } catch (error62) {
       throw new CliError(
         "WORKER_DIR_UNREADABLE",
@@ -36848,11 +36925,11 @@ async function collectWranglerFiles(dir) {
     }
     for (const entry of entries) {
       if (entry.isDirectory() && skip.has(entry.name)) continue;
-      const full = join29(sub, entry.name);
+      const full = join34(sub, entry.name);
       if (entry.isDirectory()) {
         await walk(full);
       } else if (entry.isFile()) {
-        const buf = await readFile23(full).catch(() => null);
+        const buf = await readFile26(full).catch(() => null);
         if (buf === null) continue;
         if (buf.includes(0)) continue;
         out[relative8(root, full).split(sep4).join("/")] = buf.toString("utf8");