@adep/web-container 0.2.1 → 0.2.3

package/dist/web-container.esm.js

@@ -105,6 +105,27 @@ function withinPackage(pkgDirAbs, rel, context) {
   }
   return abs;
 }
+function pickConditionTarget(conditions, order, resolveRel, context) {
+  for (const key of order) {
+    const value = conditions[key];
+    if (value === void 0 || value === null) continue;
+    if (typeof value === "string") return resolveRel(value);
+    if (typeof value === "object" && !Array.isArray(value)) {
+      const nested = pickConditionTarget(
+        value,
+        order,
+        resolveRel,
+        context
+      );
+      if (nested !== null) return nested;
+      continue;
+    }
+    throw new ResolveError(
+      `${context}\uFF1Aexports["."]["${key}"] \u5F62\u6001\u4E0D\u652F\u6301\uFF08\u4EC5\u63A5\u53D7\u5B57\u7B26\u4E32 / null / \u6761\u4EF6\u5BF9\u8C61\uFF09`
+    );
+  }
+  return null;
+}
 function resolvePackageEntry(meta, pkgDirAbs, condition) {
   const context = `\u5305 ${meta.name ?? meta.version ?? pkgDirAbs} \u7684 exports/main \u58F0\u660E`;
   const exp = meta.exports;
@@ -125,20 +146,11 @@ function resolvePackageEntry(meta, pkgDirAbs, condition) {
     if (typeof dot !== "object" || Array.isArray(dot)) {
       throw new ResolveError(`${context}\uFF1Aexports["."] \u5F62\u6001\u4E0D\u652F\u6301\uFF08\u4EC5\u63A5\u53D7\u5B57\u7B26\u4E32\u6216\u6761\u4EF6\u5BF9\u8C61\uFF09`);
     }
-    const conditions = dot;
-    const order = condition === "import" ? ["import", "node", "default"] : ["require", "node", "default"];
-    for (const key of order) {
-      const value = conditions[key];
-      if (typeof value === "string") return withinPackage(pkgDirAbs, value, context);
-      if (value !== void 0 && (typeof value !== "object" || value === null)) {
-        throw new ResolveError(
-          `${context}\uFF1Aexports["."]["${key}"] \u5F62\u6001\u4E0D\u652F\u6301\uFF08\u4EC5\u63A5\u53D7\u5B57\u7B26\u4E32\u6216 null\uFF09`
-        );
-      }
-    }
-    throw new ResolveError(
-      `${context}\uFF1Aexports["."] \u6761\u4EF6\u5BF9\u8C61\u91CC\u6CA1\u6709 ${condition}/node/default \u5B57\u7B26\u4E32\u5165\u53E3\uFF08\u5B50\u8DEF\u5F84/\u5D4C\u5957\u6761\u4EF6\u4E0D\u652F\u6301\uFF09`
-    );
+    const order = condition === "import" ? IMPORT_CONDITION_ORDER : REQUIRE_CONDITION_ORDER;
+    const resolveRel = (rel) => withinPackage(pkgDirAbs, rel, context);
+    const hit = pickConditionTarget(dot, order, resolveRel, context);
+    if (hit !== null) return hit;
+    throw new ResolveError(`${context}\uFF1Aexports["."] \u6761\u4EF6\u5BF9\u8C61\u91CC\u6CA1\u6709 ${order.join("/")} \u5165\u53E3`);
   }
   if (meta.main !== void 0) {
     if (typeof meta.main !== "string") {
@@ -236,11 +248,13 @@ function resolveImport(fs, specifier, fromFileAbs, condition = "require") {
     `\u627E\u4E0D\u5230\u5305 "${specifier}"\uFF1A${dirname(fromFileAbs)} \u53CA\u5176\u5404\u7EA7\u7236\u76EE\u5F55\u4E0B\u90FD\u6CA1\u6709 node_modules/${name}\uFF08\u5148\u5728\u7EC8\u7AEF npm install ${name}\uFF09`
   );
 }
-var RESOLVE_EXTENSIONS, ResolveError;
+var IMPORT_CONDITION_ORDER, REQUIRE_CONDITION_ORDER, RESOLVE_EXTENSIONS, ResolveError;
 var init_node_resolve = __esm({
   "src/node-resolve.ts"() {
     "use strict";
     init_path();
+    IMPORT_CONDITION_ORDER = ["browser", "import", "module", "default"];
+    REQUIRE_CONDITION_ORDER = ["require", "node", "default"];
     RESOLVE_EXTENSIONS = [".js", ".mjs", ".cjs", ".json"];
     ResolveError = class extends Error {
       constructor(message) {
@@ -515,6 +529,7 @@ var init_strip_types = __esm({
             return;
           case "as":
           case "satisfies": {
+            if (this.frames[this.frames.length - 1]?.specifierList === true) return;
             if (this.tokenAt(2) === "*" || this.tokenAt(2) === "type") return;
             const nextChar = this.skipWhitespaceFrom(this.i);
             if (nextChar === null || "=,:]})".includes(this.src[nextChar])) return;
@@ -567,7 +582,8 @@ var init_strip_types = __esm({
           const frame = {
             kind: c === "(" ? "paren" : c === "{" ? "brace" : "bracket",
             declare: false,
-            classBody: false
+            classBody: false,
+            specifierList: c === "{" && this.isImportSpecifierBrace()
           };
           if (c === "{" && this.pendingClassBody) {
             frame.classBody = true;
@@ -654,8 +670,17 @@ var init_strip_types = __esm({
         return true;
       }
       /**
-       * `(` 是否为参数列表（声明位）：`function f(`、类体里的方法 `m(`、箭头 `=> (`，
-       * 以及出现在 `(` `,` `=` `>` `:` `[` `{` `}` `;` 之后（如 `map((v: T) => v)` 的内层括号）。
+       * `{` 是 import / export 的说明符列表吗——`{ a as b }` 覆盖 `import { … }`、
+       * `export { … }` 与 `import def, { … }` 三种写法（后者说明符花括号的前驱 token 是 `,`）。
+       */
+      isImportSpecifierBrace() {
+        const back1 = this.tokenAt(1);
+        if (back1 === "import" || back1 === "export") return true;
+        return back1 === "," && this.tokenAt(3) === "import";
+      }
+      /**
+       * `(` 是否为参数列表（声明位）：`function f(`、`async` 箭头 `async (`、类体里的方法 `m(`、
+       * 箭头 `=> (`，以及出现在 `(` `,` `=` `>` `:` `[` `{` `}` `;` 之后（如 `map((v: T) => v)` 的内层括号）。
        * 调用位 `foo(` 与控制流 `if (` `for (` 都不算。
        * 误判成声明位也不足以擦掉什么：`:` 还要过 `isAnnotationColon` 的「名字前驱必须是
        * `(` `,` `{` `;` 修饰符」这一关，而三元表达式的中间段前面必然是 `?`。
@@ -664,6 +689,8 @@ var init_strip_types = __esm({
         if (this.afterFunctionKeyword) return true;
         if (this.tokenAt(2) === "function" && IDENT_START.test(this.tokenAt(1))) return true;
         if (this.afterArrow) return true;
+        if (this.tokenAt(1) === "async") return true;
+        if (this.tokenAt(1) === "return") return true;
         if (this.inClassBody() && IDENT_PART.test(this.prevSignificantChar(at - 1))) return true;
         const prev = this.prevSignificantChar(at - 1);
         return prev === "" || "(,=>:[{};".includes(prev);
@@ -1172,11 +1199,15 @@ var init_function_fetch_proxy = __esm({
         "    }",
         "    var u;",
         "    try { u = new URL(urlStr, document.baseURI); }",
-        "    catch (e) { return ORIGINAL_FETCH(input, init); }",
+        "    catch (e0) {",
+        "      try { u = new URL(urlStr, window.location.origin); }",
+        "      catch (e1) { return ORIGINAL_FETCH(input, init); }",
+        "    }",
         '    if (u.pathname.indexOf("/api/") !== 0 && u.pathname !== "/api") {',
         "      return ORIGINAL_FETCH(input, init);",
         "    }",
-        "    if (window.parent === window) return ORIGINAL_FETCH(input, init);",
+        "    var bridgeWindow = window.parent !== window ? window.parent : window.opener;",
+        "    if (!bridgeWindow) return ORIGINAL_FETCH(input, init);",
         '    method = (method || "GET").toUpperCase();',
         "    var target = u.pathname + u.search;",
         "    return readBody(input, init).then(function (textBody) {",
@@ -1187,10 +1218,75 @@ var init_function_fetch_proxy = __esm({
         `          resolve(new Response('{"error":{"code":"FN_PROXY_TIMEOUT","message":"\\u4e91\\u51fd\\u6570\\u6267\\u884c\\u8d85\\u65f6"}}', { status: 504, headers: { "content-type": "application/json" } }));`,
         "        }, TIMEOUT_MS);",
         "        pending[id] = { resolve: resolve, timer: timer };",
-        '        window.parent.postMessage({ __adepFnRequest: true, id: id, method: method, url: target, headers: headers, body: textBody }, "*");',
+        '        bridgeWindow.postMessage({ __adepFnRequest: true, id: id, method: method, url: target, headers: headers, body: textBody }, "*");',
         "      });",
         "    });",
         "  };",
+        "",
+        "  /* \u2014\u2014 blob URL SPA \u8DEF\u7531\u652F\u6301 \u2014\u2014",
+        "     blob: \u662F\u4E0D\u53EF\u5206\u5C42 scheme\uFF0Chistory.pushState('/about') \u5185\u90E8\u89E3\u6790\u76F8\u5BF9\u8DEF\u5F84\u4F1A\u629B",
+        "     TypeError \u2192 SPA history \u6A21\u5F0F\u8DEF\u7531\u5D29\u6E83\u3002patch pushState/replaceState\uFF0C\u5BF9\u76F8\u5BF9",
+        "     \u8DEF\u5F84\u76F4\u63A5\u541E\u6389\uFF08\u4E0D\u5BFC\u822A\u3001\u4E0D\u629B\u9519\uFF09\uFF0C\u8DEF\u7531\u5E93\u5185\u90E8\u72B6\u6001\u81EA\u884C\u66F4\u65B0\uFF1Blocation.pathname",
+        "     \u8986\u76D6\u4E3A\u5F53\u524D\u8DEF\u7531\u8DEF\u5F84\uFF0C\u4F9B\u8DEF\u7531\u5E93\u521D\u59CB\u5316\u65F6\u8BFB\u53D6\u3002sessionStorage \u6301\u4E45\u5316\uFF0C\u5237\u65B0\u540E\u6062\u590D\u3002 */",
+        '  if (window.location.protocol === "blob:") {',
+        '    var SPA_KEY = "__adep_spa_path";',
+        '    var spaPath = "/";',
+        "    try {",
+        "      var _saved = window.sessionStorage.getItem(SPA_KEY);",
+        "      if (_saved) spaPath = _saved;",
+        "    } catch (e) {}",
+        "    try {",
+        '      Object.defineProperty(window.location, "pathname", {',
+        "        get: function () { return spaPath; },",
+        "        configurable: true",
+        "      });",
+        "    } catch (e) {}",
+        "    var _origPush = window.history.pushState.bind(window.history);",
+        "    var _origReplace = window.history.replaceState.bind(window.history);",
+        "    function _isRelative(url) {",
+        '      if (!url || typeof url !== "string") return false;',
+        '      if (url.charAt(0) === "#") return false;',
+        "      if (/^[a-zA-Z][a-zA-Z0-9+.-]*:/.test(url)) return false;",
+        "      return true;",
+        "    }",
+        "    function _resolvePath(url) {",
+        '      var qi = url.indexOf("?");',
+        '      var hi = url.indexOf("#");',
+        "      var end = url.length;",
+        "      if (qi !== -1) end = qi;",
+        "      if (hi !== -1 && hi < end) end = hi;",
+        "      var p = url.slice(0, end);",
+        '      if (p.charAt(0) !== "/") {',
+        '        var base = spaPath.slice(0, spaPath.lastIndexOf("/") + 1);',
+        "        p = base + p;",
+        "      }",
+        '      var parts = p.split("/");',
+        "      var out = [];",
+        "      for (var i = 0; i < parts.length; i++) {",
+        "        var seg = parts[i];",
+        '        if (seg === "" || seg === ".") continue;',
+        '        if (seg === "..") { out.pop(); continue; }',
+        "        out.push(seg);",
+        "      }",
+        '      return "/" + out.join("/");',
+        "    }",
+        "    window.history.pushState = function (state, title, url) {",
+        "      if (_isRelative(url)) {",
+        "        spaPath = _resolvePath(url);",
+        "        try { window.sessionStorage.setItem(SPA_KEY, spaPath); } catch (e) {}",
+        "        return;",
+        "      }",
+        "      return _origPush(state, title, url);",
+        "    };",
+        "    window.history.replaceState = function (state, title, url) {",
+        "      if (_isRelative(url)) {",
+        "        spaPath = _resolvePath(url);",
+        "        try { window.sessionStorage.setItem(SPA_KEY, spaPath); } catch (e) {}",
+        "        return;",
+        "      }",
+        "      return _origReplace(state, title, url);",
+        "    };",
+        "  }",
         "})();"
       ].join("\n");
       return src;
@@ -1311,6 +1407,18 @@ function cssModule(css) {
     "export default css;"
   ].join("\n");
 }
+function inlineStyleBlock(css, key) {
+  return [
+    "{",
+    `const css = ${JSON.stringify(css)};`,
+    'const el = document.createElement("style");',
+    'el.setAttribute("data-adep-vite", "");',
+    `el.setAttribute("data-adep-style", ${JSON.stringify(key)});`,
+    "el.textContent = css;",
+    "document.head.appendChild(el);",
+    "}"
+  ].join("\n");
+}
 function jsonModule(source, abs) {
   try {
     JSON.parse(source);
@@ -1361,6 +1469,17 @@ function createViteServer(vfs, options = {}) {
     } catch {
     }
   };
+  const DEFINES = [
+    [/\bprocess\s*\.\s*env\s*\.\s*NODE_ENV\b/g, JSON.stringify("development")],
+    [/\b__VUE_OPTIONS_API__\b/g, "true"],
+    [/\b__VUE_PROD_DEVTOOLS__\b/g, "false"],
+    [/\b__VUE_PROD_HYDRATION_MISMATCH_DETAILS__\b/g, "false"]
+  ];
+  function applyDefines(code) {
+    let out = code;
+    for (const [pattern, value] of DEFINES) out = out.replace(pattern, value);
+    return out;
+  }
   function transformModule2(abs, source) {
     if (abs.endsWith(".css")) return cssModule(source);
     if (abs.endsWith(".json")) return jsonModule(source, abs);
@@ -1371,21 +1490,27 @@ function createViteServer(vfs, options = {}) {
           `${abs} \u662F Vue SFC\uFF0C\u4F46\u5F53\u524D\u73AF\u5883\u672A\u88C5\u914D SFC \u7F16\u8BD1\u5668\uFF08IDE \u4FA7\u9700\u6CE8\u5165 vue/compiler-sfc\uFF09`
         );
       const compiled = sfcCompiler(source, abs);
-      return [...compiled.styles.map((css) => cssModule(css)), compiled.script].join("\n");
+      return [
+        ...compiled.styles.map((css, index) => inlineStyleBlock(css, `${abs}#${index}`)),
+        applyDefines(stripTypes(compiled.script))
+      ].join("\n");
     }
     if (abs.endsWith(".tsx") || abs.endsWith(".jsx"))
       throw new ViteDevError(
         "JSX_UNSUPPORTED",
         `${abs} \u4F7F\u7528 JSX\uFF1A\u6D4F\u89C8\u5668\u5185 vite \u53EA\u64E6\u9664 TS \u7C7B\u578B\u6807\u6CE8\uFF0C\u4E0D\u8F6C\u8BD1 JSX\uFF08\u8BF7\u7528 h() \u6E32\u67D3\u51FD\u6570\u6216 .vue SFC\uFF09`
       );
-    if (abs.endsWith(".ts") || abs.endsWith(".mts")) return stripTypes(source);
-    return source;
+    if (abs.endsWith(".ts") || abs.endsWith(".mts")) return applyDefines(stripTypes(source));
+    return applyDefines(source);
+  }
+  function absoluteFromRoot(spec) {
+    return join(root, spec.replace(/^\/+/, ""));
   }
   async function resolveSpecifier(spec, importerAbs) {
     if (EXTERNAL_SPECIFIER.test(spec) || DATA_OR_BLOB.test(spec)) return spec;
     let target;
     if (spec.startsWith("./") || spec.startsWith("../") || spec.startsWith("/")) {
-      const base = spec.startsWith("/") ? spec : join(dirname(importerAbs), spec);
+      const base = spec.startsWith("/") ? absoluteFromRoot(spec) : join(dirname(importerAbs), spec);
       target = resolveWithSuffixes(vfs, base);
       if (!vfs.exists(target) || vfs.isDirectory(target))
         throw new ViteDevError(
@@ -1474,7 +1599,7 @@ function createViteServer(vfs, options = {}) {
     html = html.replace(
       MODULE_SCRIPT_SRC_RE,
       (_whole, pre, _q1, mid, _q2, src, post) => {
-        const base = src.startsWith("/") ? normalize(src) : join(dirname(entryAbs), src);
+        const base = src.startsWith("/") ? absoluteFromRoot(src) : join(dirname(entryAbs), src);
         const abs = resolveWithSuffixes(vfs, base);
         if (!vfs.exists(abs) || vfs.isDirectory(abs))
           throw new ViteDevError(
@@ -1482,7 +1607,7 @@ function createViteServer(vfs, options = {}) {
             `\u5165\u53E3 module script \u627E\u4E0D\u5230 "${src}"\uFF08root: ${root}\uFF1B\u8BD5\u8FC7\u6269\u5C55\u540D ${VITE_RESOLVE_SUFFIXES.join("/")} \u4E0E\u76EE\u5F55 index\uFF09`
           );
         entryModuleUrls.push(loadModuleUrl(abs));
-        return `<script${pre}${mid}src="__adep_vite_entry_${entryModuleUrls.length - 1}__"${post}><\/script>`;
+        return `<script${pre}${mid}src="__adep_vite_entry_${entryModuleUrls.length - 1}__"${post} type="module"><\/script>`;
       }
     );
     html = html.replace(
@@ -1492,7 +1617,7 @@ function createViteServer(vfs, options = {}) {
         const abs = `${INLINE_PREFIX}${inlineSeq++}.mjs`;
         inlineSources.set(abs, body);
         entryModuleUrls.push(loadModuleUrl(abs));
-        return `<script${pre}${post}src="__adep_vite_entry_${entryModuleUrls.length - 1}__"><\/script>`;
+        return `<script${pre}${post}src="__adep_vite_entry_${entryModuleUrls.length - 1}__" type="module"><\/script>`;
       }
     );
     const urls = await Promise.all(entryModuleUrls);
@@ -1516,7 +1641,10 @@ function createViteServer(vfs, options = {}) {
     lastDoc = doc;
     if (currentUrl !== "") revokeObjectURL(currentUrl);
     currentUrl = createObjectURL(new Blob([doc], { type: "text/html" }));
-    if (changed) broadcast(currentUrl);
+    if (changed) {
+      broadcast(currentUrl);
+      options.onDocumentChange?.(currentUrl);
+    }
   }
   const server = {
     get url() {
@@ -3553,7 +3681,11 @@ function bootstrap(options) {
       const { createViteServer: createViteServer2 } = await Promise.resolve().then(() => (init_vite_dev(), vite_dev_exports));
       const server = createViteServer2(vfs, {
         root,
-        ...options.viteCompiler === void 0 ? {} : { sfcCompiler: options.viteCompiler }
+        ...options.viteCompiler === void 0 ? {} : { sfcCompiler: options.viteCompiler },
+        // PV-006：内容重建 → 以 `serverready`（update: true）事件上报新文档 URL，宿主导出预览产物。
+        onDocumentChange: (url) => {
+          emit("serverready", { port: server.port, url, kind: "vite", root: server.root, update: true });
+        }
       });
       await server.ready;
       viteServer = server;
@@ -3718,6 +3850,92 @@ init_node_resolve();
 init_vite_dev();
 init_path();
 
+// src/bundle-export.ts
+var BUNDLE_MODULE_PATH_PREFIX = "/_adep/m/";
+var BLOB_REF_RE = /blob:[^\s"'`<>()\\]+/g;
+function fnv1a(code) {
+  let hash = 2166136261;
+  for (let i = 0; i < code.length; i++) {
+    hash ^= code.charCodeAt(i);
+    hash = Math.imul(hash, 16777619) >>> 0;
+  }
+  return `${hash.toString(16).padStart(8, "0")}${code.length.toString(16)}`;
+}
+async function defaultModuleName(code) {
+  const subtle = globalThis.crypto?.subtle;
+  if (subtle === void 0) return fnv1a(code);
+  const digest = await subtle.digest("SHA-256", new TextEncoder().encode(code));
+  let hex = "";
+  for (const byte of new Uint8Array(digest).slice(0, 8)) {
+    hex += byte.toString(16).padStart(2, "0");
+  }
+  return hex;
+}
+function findBlobRefs(text) {
+  const found = text.match(BLOB_REF_RE);
+  return found === null ? [] : [...new Set(found)];
+}
+function rewriteRefs(text, urls) {
+  let out = text;
+  for (const [blobUrl, path] of urls) {
+    if (out.includes(blobUrl)) out = out.split(blobUrl).join(path);
+  }
+  return out;
+}
+function injectScript(html, script) {
+  return /<\/body>/i.test(html) ? html.replace(/<\/body>/i, `${script}</body>`) : html + script;
+}
+async function exportBundle(options) {
+  const readText = options.readText ?? ((url) => fetch(url).then((response) => response.text()));
+  const nameOf = options.moduleName ?? defaultModuleName;
+  const prefix = options.modulePathPrefix ?? BUNDLE_MODULE_PATH_PREFIX;
+  const uploaded = new Set(options.known === void 0 ? [] : [...options.known.values()]);
+  const urls = /* @__PURE__ */ new Map();
+  const sources = [];
+  const readOrThrow = async (url) => {
+    try {
+      return await readText(url);
+    } catch (error) {
+      throw new Error(
+        `\u9884\u89C8\u4EA7\u7269\u5BFC\u51FA\u5931\u8D25\uFF1A\u8BFB\u4E0D\u5230\u6A21\u5757 ${url}\uFF08${error instanceof Error ? error.message : String(error)}\uFF09`,
+        { cause: error }
+      );
+    }
+  };
+  const html = await readOrThrow(options.documentUrl);
+  const loadLayer = async (layer) => {
+    const batch = [...new Set(layer)].filter((url) => !urls.has(url));
+    if (batch.length === 0) return;
+    const loaded = await Promise.all(
+      batch.map(async (url) => {
+        const code = await readOrThrow(url);
+        return { url, code, path: `${prefix}${await nameOf(code)}.js` };
+      })
+    );
+    const next = [];
+    for (const item of loaded) {
+      urls.set(item.url, item.path);
+      sources.push({ url: item.url, code: item.code });
+      next.push(...findBlobRefs(item.code));
+    }
+    await loadLayer(next);
+  };
+  await loadLayer(findBlobRefs(html));
+  const modules = {};
+  for (const { url, code } of sources) {
+    const path = urls.get(url);
+    if (uploaded.has(path)) continue;
+    modules[path] = rewriteRefs(code, urls);
+  }
+  const rewrittenHtml = rewriteRefs(html, urls);
+  return {
+    html: options.appendScript === void 0 ? rewrittenHtml : injectScript(rewrittenHtml, options.appendScript),
+    modules,
+    paths: [...new Set(urls.values())].toSorted(),
+    urls
+  };
+}
+
 // src/persistence.ts
 function cloneEntries(entries) {
   return entries.map(
@@ -4459,6 +4677,8 @@ var CHAIN_CAPABILITY_KEY = "__adepChain";
 var DB_RPC = {
   /** 直通方法（如 query）：`(method=query, args=[sql, params])`。 */
   query: "query",
+  /** 写路径（CF-013）：`(method=writeQuery, args=[sql, params])` → `{ changes }`。 */
+  writeQuery: "writeQuery",
   /** 读取 owned 表变更流（DB-006）：`(method=changes, args=[table, query])`。 */
   changes: "changes",
   /** 开启事务：`begin → txId`。 */
@@ -4535,21 +4755,35 @@ function unsafeOperation(message) {
 function stripLiterals(sql) {
   return sql.replace(/'[^']*(?:''[^']*)*'/g, "").replace(/"[^"]*(?:""[^"]*)*"/g, "").replace(/--[^\n]*/g, "").replace(/\/\*[\s\S]*?\*\//g, "");
 }
-function assertReadOnlyQuery(sql) {
+function sqlHead(sql) {
+  return sql.trim().replace(/^\(+/, "").trim().toUpperCase();
+}
+function assertSafeStatement(sql) {
   const stripped = stripLiterals(sql);
   if (stripped.includes(";")) {
     throw unsafeOperation("\u4EC5\u5141\u8BB8\u5355\u6761\u8BED\u53E5\uFF0C\u7981\u6B62\u591A\u8BED\u53E5\u5806\u53E0");
   }
-  const head = stripped.trim().replace(/^\(+/, "").trim().toUpperCase();
-  if (!head.startsWith("SELECT") && !head.startsWith("WITH")) {
-    throw unsafeOperation("cloud.db.query \u4EC5\u5141\u8BB8\u53EA\u8BFB\u67E5\u8BE2\uFF08SELECT / WITH\uFF09");
-  }
   if (/ATTACH|DETACH/.test(stripped.toUpperCase())) {
     throw unsafeOperation("\u7981\u6B62\u8DE8\u5E93\u64CD\u4F5C\uFF08ATTACH / DETACH\uFF09");
   }
   if (/SQLITE_\w+/i.test(stripped)) {
     throw unsafeOperation("\u7981\u6B62\u8BBF\u95EE\u7CFB\u7EDF\u8868\uFF08sqlite_*\uFF09");
   }
+  return sqlHead(stripped);
+}
+function assertReadOnlyQuery(sql) {
+  const head = assertSafeStatement(sql);
+  if (!head.startsWith("SELECT") && !head.startsWith("WITH")) {
+    throw unsafeOperation("cloud.db.query \u4EC5\u5141\u8BB8\u53EA\u8BFB\u67E5\u8BE2\uFF08SELECT / WITH\uFF09");
+  }
+}
+function assertWriteQuery(sql) {
+  const head = assertSafeStatement(sql);
+  if (!head.startsWith("INSERT") && !head.startsWith("UPDATE") && !head.startsWith("DELETE")) {
+    throw unsafeOperation(
+      "cloud.db.writeQuery \u4EC5\u5141\u8BB8 DML\uFF08INSERT / UPDATE / DELETE\uFF09\uFF0CDDL \u8BF7\u8D70\u63A7\u5236\u53F0"
+    );
+  }
 }
 
 // ../runtime/src/database/builder/owned.ts
@@ -5095,6 +5329,14 @@ function createCloudDb(driver, options = {}) {
         assertReadOnlyQuery(sql);
         return driver.all(sql, params);
       },
+      async writeQuery(sql, params) {
+        if (!Array.isArray(params)) {
+          throw unsafeOperation("writeQuery \u7684 params \u5FC5\u987B\u63D0\u4F9B\uFF08\u65E0\u53C2\u4F20 []\uFF09");
+        }
+        guardWrite();
+        assertWriteQuery(sql);
+        return driver.run(sql, params);
+      },
       async changes(table, query = {}) {
         return readChanges(driver, table, query);
       }
@@ -5110,7 +5352,8 @@ var CLOUD_DB_SPEC = {
   rootMethod: "table",
   stepMethods: ["select", "where", "orderBy", "limit", "offset"],
   terminalMethods: ["get", "first", "count", "insert", "insertMany", "update", "delete"],
-  directMethods: ["query", "changes"],
+  // CF-013：writeQuery 是 D1 shim 的写路径（INSERT/UPDATE/DELETE），与 query 并列直通方法。
+  directMethods: ["query", "writeQuery", "changes"],
   transactionMethod: "transaction"
 };
 var WRITE_TERMINALS = /* @__PURE__ */ new Set(["insert", "insertMany", "update", "delete"]);
@@ -5165,6 +5408,10 @@ function createDbCapability(driver, options = {}) {
           const [sql, params] = args;
           return await db.query(sql, params);
         }
+        case DB_RPC.writeQuery: {
+          const [sql, params] = args;
+          return await db.writeQuery(sql, params);
+        }
         case DB_RPC.changes: {
           const [table, query] = args;
           return await db.changes(table, query);
@@ -5450,6 +5697,17 @@ var SimSqlEngine = class {
       }
       return { changes: 0 };
     }
+    if (/^CREATE\s+(?:UNIQUE\s+)?INDEX\s+(?:IF\s+NOT\s+EXISTS\s+)?/i.test(stmt)) {
+      const idx = /^CREATE\s+(?:UNIQUE\s+)?INDEX\s+(?:IF\s+NOT\s+EXISTS\s+)?((?:"[^"]+")|([A-Za-z_][A-Za-z0-9_]*))\s+ON\s+((?:"[^"]+")|([A-Za-z_][A-Za-z0-9_]*))/i.exec(
+        stmt
+      );
+      if (idx === null) throw new SimDbError("DB_UNSAFE_OP", `\u65E0\u6CD5\u89E3\u6790 CREATE INDEX \u8BED\u53E5`);
+      const tableName = ident(idx[3]);
+      if (this.tables[tableName] === void 0) {
+        throw new SimDbError("DB_UNSAFE_OP", `CREATE INDEX \u76EE\u6807\u8868\u4E0D\u5B58\u5728\uFF1A${tableName}`);
+      }
+      return { changes: 0 };
+    }
     if (/^INSERT\s+INTO/i.test(stmt)) return this.execInsert(stmt, params);
     if (/^UPDATE\s+/i.test(stmt)) return this.execUpdate(stmt, params);
     if (/^DELETE\s+FROM/i.test(stmt)) return this.execDelete(stmt, params);
@@ -5694,6 +5952,19 @@ function assertSafeStoragePath(path) {
   }
   return path;
 }
+function assertStoragePrefix(prefix) {
+  if (prefix !== void 0 && prefix !== "") {
+    const segments = prefix.split("/");
+    if (prefix.startsWith("/") || /[\\]/.test(prefix) || segments.some((segment) => segment === "..")) {
+      throw new StorageError(
+        400,
+        STORAGE_CODES.invalidPath,
+        `\u975E\u6CD5\u524D\u7F00 "${prefix}"\uFF08\u7981\u6B62 / \u5F00\u5934\u3001\u53CD\u659C\u6760\u6216 .. \u7A7F\u8D8A\uFF09`
+      );
+    }
+  }
+  return prefix ?? "";
+}
 
 // ../runtime/src/storage/hmac-sha256.ts
 var K = new Uint32Array([
@@ -5894,9 +6165,12 @@ function createStorageCapability(driver, signer, projectId) {
   const handler = async (method, args) => {
     switch (method) {
       case "upload": {
-        const [path, data] = args;
+        const [path, data, options] = args;
         return toStoredFile(
-          await driver.put(projectId, path, asBytes(data), { visibility: DEFAULT_VISIBILITY })
+          await driver.put(projectId, path, asBytes(data), {
+            visibility: DEFAULT_VISIBILITY,
+            ...options?.contentType === void 0 ? {} : { contentType: options.contentType }
+          })
         );
       }
       case "get": {
@@ -6010,16 +6284,7 @@ function createBrowserStorageDriver(options) {
       await saveBucket(bucket);
     },
     async list(_projectId, prefix) {
-      if (prefix !== void 0 && prefix !== "") {
-        const segments = prefix.split("/");
-        if (prefix.startsWith("/") || /[\\]/.test(prefix) || segments.some((segment) => segment === "..")) {
-          throw new StorageError(
-            400,
-            STORAGE_CODES.invalidPath,
-            `\u975E\u6CD5\u524D\u7F00 "${prefix}"\uFF08\u7981\u6B62 / \u5F00\u5934\u3001\u53CD\u659C\u6760\u6216 .. \u7A7F\u8D8A\uFF09`
-          );
-        }
-      }
+      assertStoragePrefix(prefix);
       const bucket = await loadBucket();
       return Object.values(bucket).filter((object) => prefix === void 0 || object.path.startsWith(prefix)).map(toMeta).toSorted((a, b) => a.path < b.path ? -1 : a.path > b.path ? 1 : 0);
     },
@@ -6343,6 +6608,10 @@ var KNOWN_CAPABILITY_HINTS = {
   realtime: {
     code: "REALTIME_NOT_AVAILABLE",
     message: "\u5B9E\u65F6\u901A\u9053\u672A\u88C5\u914D\uFF1Arealtime \u57DF\u672A\u88C5\u8F7D\uFF08\u68C0\u67E5\u90E8\u7F72\u5F62\u6001\u4E0E Redis \u914D\u7F6E\uFF09\uFF08REALTIME_NOT_AVAILABLE\uFF09"
+  },
+  kv: {
+    code: "KV_NOT_PROVISIONED",
+    message: "\u9879\u76EE KV \u5B58\u50A8\u672A\u53EF\u7528\uFF1Akv \u968F\u9879\u76EE\u6570\u636E\u5E93\u63D0\u4F9B\uFF0C\u8BF7\u5148\u542F\u52A8\u6570\u636E\u5E93\uFF08KV_NOT_PROVISIONED\uFF09"
   }
 };
 var CapabilityNotRegisteredError = class extends Error {
@@ -6402,6 +6671,19 @@ function createCloudContainer() {
   };
 }
 
+// ../runtime/src/functions/runtime/rpc-wire.ts
+function wireRpcResponses(port, pending) {
+  port.on?.((message) => {
+    const reply = message;
+    if (reply?.type !== "rpc-response" || typeof reply.id !== "number") return;
+    const entry = pending.get(reply.id);
+    if (entry === void 0) return;
+    pending.delete(reply.id);
+    if (reply.ok === true) entry.resolve(reply.result);
+    else entry.reject(new Error(reply.error ?? "RPC \u80FD\u529B\u8C03\u7528\u5931\u8D25"));
+  });
+}
+
 // src/sim/ctx.ts
 function createLocalPort(handler) {
   const listeners = [];
@@ -6431,17 +6713,6 @@ function createLocalPort(handler) {
     }
   };
 }
-function wireRpcResponses(port, pending) {
-  port.on((message) => {
-    const reply = message;
-    if (reply?.type !== "rpc-response" || typeof reply.id !== "number") return;
-    const entry = pending.get(reply.id);
-    if (entry === void 0) return;
-    pending.delete(reply.id);
-    if (reply.ok === true) entry.resolve(reply.result);
-    else entry.reject(new Error(reply.error ?? "RPC \u80FD\u529B\u8C03\u7528\u5931\u8D25"));
-  });
-}
 function createFlatRpcClient(handler) {
   return new Proxy(
     {},
@@ -6655,7 +6926,7 @@ function createOfflineFunctionRunner(options = {}) {
   return { run };
 }
 
-// src/sim/runtime.ts
+// ../runtime/src/sim/merge.ts
 function mergeBundles(bundles) {
   const capabilities = [];
   const byName = /* @__PURE__ */ new Map();
@@ -6675,6 +6946,108 @@ function mergeBundles(bundles) {
   }
   return { capabilities, rpcHandlers };
 }
+
+// ../runtime/src/database/sdk/kv.ts
+var KV_TABLE = "_adep_kv";
+var KV_RPC = {
+  get: "get",
+  put: "put",
+  delete: "delete",
+  list: "list"
+};
+var KV_CAPABILITY_CODES = {
+  invalidMethod: "KV_INVALID_METHOD"
+};
+var KV_LIST_DEFAULT_LIMIT = 100;
+function nowSeconds() {
+  return Math.floor(Date.now() / 1e3);
+}
+function errorWithCode2(error) {
+  const code = typeof error === "object" && error !== null && typeof error.code === "string" ? error.code : void 0;
+  if (code !== void 0 && error instanceof Error) {
+    return new Error(`[${code}] ${error.message}`);
+  }
+  return error;
+}
+function createKvCapability(driver) {
+  let ensurePromise = null;
+  const ensureTable = () => {
+    if (ensurePromise === null) {
+      ensurePromise = driver.run(
+        `CREATE TABLE IF NOT EXISTS ${KV_TABLE} (key TEXT PRIMARY KEY, value TEXT, expires_at INTEGER)`
+      ).then(() => void 0);
+    }
+    return ensurePromise;
+  };
+  const handler = async (method, args) => {
+    try {
+      await ensureTable();
+      switch (method) {
+        case KV_RPC.get: {
+          const [key] = args;
+          const row = await driver.get(`SELECT value, expires_at FROM ${KV_TABLE} WHERE key = ?`, [
+            key
+          ]);
+          if (row === null || row === void 0) return null;
+          const expiresAt = row.expires_at;
+          if (expiresAt !== null && expiresAt !== void 0 && Number(expiresAt) <= nowSeconds()) {
+            return null;
+          }
+          return row.value;
+        }
+        case KV_RPC.put: {
+          const [key, value, options] = args;
+          const ttl = options?.expirationTtlSeconds;
+          const expiresAt = typeof ttl === "number" && ttl > 0 ? nowSeconds() + Math.floor(ttl) : null;
+          await driver.run(`DELETE FROM ${KV_TABLE} WHERE key = ?`, [key]);
+          await driver.run(`INSERT INTO ${KV_TABLE} (key, value, expires_at) VALUES (?, ?, ?)`, [
+            key,
+            value,
+            expiresAt
+          ]);
+          return void 0;
+        }
+        case KV_RPC.delete: {
+          const [key] = args;
+          await driver.run(`DELETE FROM ${KV_TABLE} WHERE key = ?`, [key]);
+          return void 0;
+        }
+        case KV_RPC.list: {
+          const [options] = args;
+          const prefix = options?.prefix ?? "";
+          const limit = options?.limit ?? KV_LIST_DEFAULT_LIMIT;
+          const rows = prefix === "" ? await driver.all(`SELECT key, expires_at FROM ${KV_TABLE}`) : await driver.all(`SELECT key, expires_at FROM ${KV_TABLE} WHERE key LIKE ?`, [
+            `${prefix}%`
+          ]);
+          const now = nowSeconds();
+          const entries = [];
+          for (const row of rows) {
+            const expiresAt = row.expires_at;
+            if (expiresAt !== null && expiresAt !== void 0 && Number(expiresAt) <= now) continue;
+            entries.push({
+              name: String(row.key),
+              expiration: expiresAt === null || expiresAt === void 0 ? null : Number(expiresAt)
+            });
+            if (entries.length >= limit) break;
+          }
+          return entries;
+        }
+        default:
+          throw new Error(
+            `\u672A\u77E5\u7684 cloud.kv \u65B9\u6CD5 "${String(method)}"\uFF08${KV_CAPABILITY_CODES.invalidMethod}\uFF09`
+          );
+      }
+    } catch (error) {
+      throw errorWithCode2(error);
+    }
+  };
+  return {
+    capabilities: [{ name: "kv", value: { [RPC_CAPABILITY_KEY]: true } }],
+    rpcHandlers: { kv: handler }
+  };
+}
+
+// src/sim/runtime.ts
 async function createBrowserSimRuntime(options) {
   const kv = options.kv ?? pickDefaultSimKv();
   const db = createBrowserSimDb({ projectId: options.projectId, kv });
@@ -6689,7 +7062,8 @@ async function createBrowserSimRuntime(options) {
     projectId: options.projectId,
     ...options.realtime === void 0 ? {} : options.realtime
   });
-  const bundle = mergeBundles([db.bundle, storage.bundle, realtime.bundle]);
+  const kvBundle = createKvCapability(db.driver);
+  const bundle = mergeBundles([db.bundle, storage.bundle, kvBundle, realtime.bundle]);
   await db.engine.load();
   const runner = createOfflineFunctionRunner(options.runner ?? {});
   return {
@@ -6705,6 +7079,7 @@ async function createBrowserSimRuntime(options) {
 // src/index.ts
 init_function_fetch_proxy();
 export {
+  BUNDLE_MODULE_PATH_PREFIX,
   COMPLETABLE_COMMANDS,
   DEFAULT_MAX_INSTALL_DEPTH,
   EXTRA_COMMANDS,
@@ -6750,12 +7125,15 @@ export {
   createViteServer,
   createWorkerRuntime,
   deepEqual,
+  defaultModuleName,
   displayPath,
   entriesToTree,
   evaluateModuleSource,
   evaluateSource,
   exampleTestSource,
   expect as expectAssertion,
+  exportBundle,
+  findBlobRefs,
   formatTestReport,
   formatValue,
   fullName,