@cloudbase/cli 3.0.0-alpha.3 → 3.0.0-alpha.4

package/dist/standalone/cli.js

@@ -330606,7 +330606,7 @@ module.exports = function generate_pattern(it, $keyword, $ruleType) {
 /***/ ((module) => {
 
 "use strict";
-module.exports = /*#__PURE__*/JSON.parse('{"name":"@cloudbase/cli","version":"3.0.0-alpha.3","description":"cli tool for cloudbase","main":"lib/index.js","scripts":{"build":"rimraf lib types && tsc --resolveJsonModule && cpx \\"src/**/*.html\\" lib","watch":"rimraf lib types && tsc -w","dev":"rimraf lib types && cpx \\"src/**/*.html\\" lib && tsc -w","eslint":"eslint \\"./**/*.ts\\"","test":"node --experimental-vm-modules node_modules/jest/bin/jest.js --runInBand --forceExit --detectOpenHandles --verbose --testTimeout=120000","test:e2e":"node --experimental-vm-modules node_modules/jest/bin/jest.js --testPathPattern=\'test/e2e/\' --runInBand --forceExit --detectOpenHandles --verbose --testTimeout=120000","tsc":"tsc","pkg":"pkg ./bin/cloudbase.js --out-path ./pkg","postinstall":"node ./post-install.js || exit 0 && patch-package","prepublishOnly":"node ./scripts/check-publish-source.js","debug":"bin/tcb.js lowcode watch","build:bundle":"webpack --config build/webpack/cli.cjs && webpack --config build/webpack/ccr.cjs && node build/scripts/copy-figlet-fonts.js","package:darwin-arm64":"OS=darwin ARCH=arm64 VERSION= node -e \\"require(\'child_process\').execSync(\'bash build/scripts/package.sh\',{stdio:\'inherit\'})\\"","package:darwin-x64":"OS=darwin ARCH=x64 VERSION= node -e \\"require(\'child_process\').execSync(\'bash build/scripts/package.sh\',{stdio:\'inherit\'})\\"","package:linux-arm64":"OS=linux ARCH=arm64 VERSION= node -e \\"require(\'child_process\').execSync(\'bash build/scripts/package.sh\',{stdio:\'inherit\'})\\"","package:linux-x64":"OS=linux ARCH=x64 VERSION= node -e \\"require(\'child_process\').execSync(\'bash build/scripts/package.sh\',{stdio:\'inherit\'})\\"","package:all":"bash build/scripts/build-all.sh","node:fetch:one":"node -e \\"require(\'child_process\').execSync(\'bash build/scripts/fetch-node.sh\',{stdio:\'inherit\'})\\"","node:fetch:all":"NODE_VERSION=22.18.0 bash build/scripts/fetch-node.sh --all","node:fetch:win-x64":"OS=windows ARCH=x64 NODE_VERSION=22.18.0 bash build/scripts/fetch-node.sh","node:fetch:win-arm64":"OS=windows ARCH=arm64 NODE_VERSION=22.18.0 bash build/scripts/fetch-node.sh","package:windows-x64":"OS=windows ARCH=x64 VERSION= node -e \\"require(\'child_process\').execSync(\'bash build/scripts/package.sh\',{stdio:\'inherit\'})\\"","package:windows-arm64":"OS=windows ARCH=arm64 VERSION= node -e \\"require(\'child_process\').execSync(\'bash build/scripts/package.sh\',{stdio:\'inherit\'})\\"","package:windows-all":"npm run -s node:fetch:win-x64 && npm run -s node:fetch:win-arm64 && npm run -s package:windows-x64 && npm run -s package:windows-arm64","package:npm":"npm run build && npm run build:bundle && bash build/scripts/prepare-publish.sh","out:prune":"bash build/scripts/prune-out.sh","i18n:scan":"i18next-scanner --config locales/i18next-scanner.config.js && node locales/scripts/generate.js","i18n:sync":"node locales/scripts/sync.js sync","publish":"node ./scripts/publish.js"},"repository":{"type":"git","url":"https://github.com/TencentCloudBase/cloud-base-cli.git"},"bin":{"cloudbase":"bin/cloudbase.js","cloudbase-mcp":"bin/cloudbase-mcp.cjs","tcb":"bin/tcb.js"},"husky":{"hooks":{"pre-commit":"npm run build"}},"author":"cwuyiqing@gmail.com","license":"ISC","dependencies":{"@cloudbase/cloud-api":"^0.5.5","@cloudbase/cloudbase-mcp":"^2.7.3","@cloudbase/framework-core":"^1.9.7","@cloudbase/functions-framework":"1.16.0","@cloudbase/iac-core":"0.0.3-alpha.14","@cloudbase/lowcode-cli":"^0.23.0","@cloudbase/manager-node":"4.11.0-alpha.7","@cloudbase/toolbox":"0.7.17","@dotenvx/dotenvx":"^1.48.3","@musistudio/claude-code-router":"1.0.36","address":"^1.1.2","camelcase-keys":"^7.0.2","chalk":"^2.4.2","cli-table3":"^0.5.1","commander":"7","del":"^5.1.0","didyoumean":"^1.2.2","enquirer":"^2.3.6","execa":"^4.0.3","figlet":"^1.7.0","fs-extra":"^8.1.0","gradient-string":"^2.0.2","https-proxy-agent":"^5.0.1","i":"^0.3.7","inquirer":"^6.5.0","json-schema-to-typescript":"^14.0.5","lodash":"^4.17.21","log-symbols":"^3.0.0","lowdb":"^1.0.0","make-dir":"^3.0.0","node-fetch":"^2.6.0","nodemon":"^3.1.4","npm":"^11.5.2","open":"^7.0.0","ora":"^4.0.2","os-locale":"5.0.0","patch-package":"^8.0.0","portfinder":"^1.0.28","progress":"^2.0.3","query-string":"^6.8.1","reflect-metadata":"^0.1.13","semver":"^7.3.7","simple-git":"^3.28.0","tar-fs":"^2.0.1","terminal-link":"^2.1.1","toml":"^3.0.0","unzipper":"^0.10.10","update-notifier":"^4.0.0","xdg-basedir":"^4.0.0","yargs":"^16.2.0","yargs-parser":"^21.0.1","zod":"^4.0.13"},"devDependencies":{"@babel/parser":"^7.28.4","@babel/traverse":"^7.28.4","@babel/types":"^7.28.4","@types/fs-extra":"^11.0.4","@types/jest":"^27","@types/koa__router":"^8.0.11","@types/lodash":"^4.14.182","@types/node":"^12.12.38","@types/node-fetch":"^2.5.4","@types/react":"^17.0.37","@types/semver":"^7.3.9","@types/unzipper":"^0.10.11","@types/webpack-dev-server":"^3.11.1","@typescript-eslint/eslint-plugin":"^4.8.1","@typescript-eslint/parser":"^4.8.1","cpx":"^1.5.0","eslint":"^7.14.0","eslint-config-alloy":"^3.8.2","husky":"^3.0.9","i18next-scanner":"^4.6.0","jest":"^27","rimraf":"^3.0.2","ts-jest":"^27","typescript":"^4.7.2","webpack":"^5.92.0","webpack-cli":"^5.1.4"},"packageManager":"yarn@3.6.2+sha512.2c2f8b9615e6659773f65cdec7cf92ef773a98a99e611579601f61c7a91ec94c89c929aac86f1cee819421a9b0db7acfd53ec3ebb95af44f77f77634b08b9557","ai":{"skills":"./skills","skillsIndex":"./skills/index.json","compatible":["codebuddy","cursor","copilot","claude","windsurf"],"description":"CloudBase CLI - 腾讯云云开发命令行工具，支持云函数、云数据库、静态托管等全栈云开发能力"}}');
+module.exports = /*#__PURE__*/JSON.parse('{"name":"@cloudbase/cli","version":"3.0.0-alpha.4","description":"cli tool for cloudbase","main":"lib/index.js","scripts":{"build":"rimraf lib types && tsc --resolveJsonModule && cpx \\"src/**/*.html\\" lib","watch":"rimraf lib types && tsc -w","dev":"rimraf lib types && cpx \\"src/**/*.html\\" lib && tsc -w","eslint":"eslint \\"./**/*.ts\\"","test":"node --experimental-vm-modules node_modules/jest/bin/jest.js --runInBand --forceExit --detectOpenHandles --verbose --testTimeout=120000","test:e2e":"node --experimental-vm-modules node_modules/jest/bin/jest.js --testPathPattern=\'test/e2e/\' --runInBand --forceExit --detectOpenHandles --verbose --testTimeout=120000","tsc":"tsc","pkg":"pkg ./bin/cloudbase.js --out-path ./pkg","postinstall":"node ./post-install.js || exit 0 && patch-package","prepublishOnly":"node ./scripts/check-publish-source.js","debug":"bin/tcb.js lowcode watch","build:bundle":"webpack --config build/webpack/cli.cjs && webpack --config build/webpack/ccr.cjs && node build/scripts/copy-figlet-fonts.js","package:darwin-arm64":"OS=darwin ARCH=arm64 VERSION= node -e \\"require(\'child_process\').execSync(\'bash build/scripts/package.sh\',{stdio:\'inherit\'})\\"","package:darwin-x64":"OS=darwin ARCH=x64 VERSION= node -e \\"require(\'child_process\').execSync(\'bash build/scripts/package.sh\',{stdio:\'inherit\'})\\"","package:linux-arm64":"OS=linux ARCH=arm64 VERSION= node -e \\"require(\'child_process\').execSync(\'bash build/scripts/package.sh\',{stdio:\'inherit\'})\\"","package:linux-x64":"OS=linux ARCH=x64 VERSION= node -e \\"require(\'child_process\').execSync(\'bash build/scripts/package.sh\',{stdio:\'inherit\'})\\"","package:all":"bash build/scripts/build-all.sh","node:fetch:one":"node -e \\"require(\'child_process\').execSync(\'bash build/scripts/fetch-node.sh\',{stdio:\'inherit\'})\\"","node:fetch:all":"NODE_VERSION=22.18.0 bash build/scripts/fetch-node.sh --all","node:fetch:win-x64":"OS=windows ARCH=x64 NODE_VERSION=22.18.0 bash build/scripts/fetch-node.sh","node:fetch:win-arm64":"OS=windows ARCH=arm64 NODE_VERSION=22.18.0 bash build/scripts/fetch-node.sh","package:windows-x64":"OS=windows ARCH=x64 VERSION= node -e \\"require(\'child_process\').execSync(\'bash build/scripts/package.sh\',{stdio:\'inherit\'})\\"","package:windows-arm64":"OS=windows ARCH=arm64 VERSION= node -e \\"require(\'child_process\').execSync(\'bash build/scripts/package.sh\',{stdio:\'inherit\'})\\"","package:windows-all":"npm run -s node:fetch:win-x64 && npm run -s node:fetch:win-arm64 && npm run -s package:windows-x64 && npm run -s package:windows-arm64","package:npm":"npm run build && npm run build:bundle && bash build/scripts/prepare-publish.sh","out:prune":"bash build/scripts/prune-out.sh","i18n:scan":"i18next-scanner --config locales/i18next-scanner.config.js && node locales/scripts/generate.js","i18n:sync":"node locales/scripts/sync.js sync","publish":"node ./scripts/publish.js"},"repository":{"type":"git","url":"https://github.com/TencentCloudBase/cloud-base-cli.git"},"bin":{"cloudbase":"bin/cloudbase.js","cloudbase-mcp":"bin/cloudbase-mcp.cjs","tcb":"bin/tcb.js"},"husky":{"hooks":{"pre-commit":"npm run build"}},"author":"cwuyiqing@gmail.com","license":"ISC","dependencies":{"@cloudbase/cloud-api":"^0.5.5","@cloudbase/cloudbase-mcp":"^2.7.3","@cloudbase/framework-core":"^1.9.7","@cloudbase/functions-framework":"1.16.0","@cloudbase/iac-core":"0.0.3-alpha.14","@cloudbase/lowcode-cli":"^0.23.0","@cloudbase/manager-node":"4.11.0-alpha.8","@cloudbase/toolbox":"0.7.17","@dotenvx/dotenvx":"^1.48.3","@musistudio/claude-code-router":"1.0.36","address":"^1.1.2","camelcase-keys":"^7.0.2","chalk":"^2.4.2","cli-table3":"^0.5.1","commander":"7","del":"^5.1.0","didyoumean":"^1.2.2","enquirer":"^2.3.6","execa":"^4.0.3","figlet":"^1.7.0","fs-extra":"^8.1.0","gradient-string":"^2.0.2","https-proxy-agent":"^5.0.1","i":"^0.3.7","inquirer":"^6.5.0","json-schema-to-typescript":"^14.0.5","lodash":"^4.17.21","log-symbols":"^3.0.0","lowdb":"^1.0.0","make-dir":"^3.0.0","node-fetch":"^2.6.0","nodemon":"^3.1.4","npm":"^11.5.2","open":"^7.0.0","ora":"^4.0.2","os-locale":"5.0.0","patch-package":"^8.0.0","portfinder":"^1.0.28","progress":"^2.0.3","query-string":"^6.8.1","reflect-metadata":"^0.1.13","semver":"^7.3.7","simple-git":"^3.28.0","tar-fs":"^2.0.1","terminal-link":"^2.1.1","toml":"^3.0.0","unzipper":"^0.10.10","update-notifier":"^4.0.0","xdg-basedir":"^4.0.0","yargs":"^16.2.0","yargs-parser":"^21.0.1","zod":"^4.0.13"},"devDependencies":{"@babel/parser":"^7.28.4","@babel/traverse":"^7.28.4","@babel/types":"^7.28.4","@types/fs-extra":"^11.0.4","@types/jest":"^27","@types/koa__router":"^8.0.11","@types/lodash":"^4.14.182","@types/node":"^12.12.38","@types/node-fetch":"^2.5.4","@types/react":"^17.0.37","@types/semver":"^7.3.9","@types/unzipper":"^0.10.11","@types/webpack-dev-server":"^3.11.1","@typescript-eslint/eslint-plugin":"^4.8.1","@typescript-eslint/parser":"^4.8.1","cpx":"^1.5.0","eslint":"^7.14.0","eslint-config-alloy":"^3.8.2","husky":"^3.0.9","i18next-scanner":"^4.6.0","jest":"^27","rimraf":"^3.0.2","ts-jest":"^27","typescript":"^4.7.2","webpack":"^5.92.0","webpack-cli":"^5.1.4"},"packageManager":"yarn@3.6.2+sha512.2c2f8b9615e6659773f65cdec7cf92ef773a98a99e611579601f61c7a91ec94c89c929aac86f1cee819421a9b0db7acfd53ec3ebb95af44f77f77634b08b9557","ai":{"skills":"./skills","skillsIndex":"./skills/index.json","compatible":["codebuddy","cursor","copilot","claude","windsurf"],"description":"CloudBase CLI - 腾讯云云开发命令行工具，支持云函数、云数据库、静态托管等全栈云开发能力"}}');
 
 /***/ }),
 
@@ -394907,11 +394907,22 @@ async function createSymlink (srcpath, dstpath, type) {
   } catch { }
 
   if (stats && stats.isSymbolicLink()) {
-    const [srcStat, dstStat] = await Promise.all([
-      fs.stat(srcpath),
-      fs.stat(dstpath)
-    ])
+    // When srcpath is relative, resolve it relative to dstpath's directory
+    // (standard symlink behavior) or fall back to cwd if that doesn't exist
+    let srcStat
+    if (path.isAbsolute(srcpath)) {
+      srcStat = await fs.stat(srcpath)
+    } else {
+      const dstdir = path.dirname(dstpath)
+      const relativeToDst = path.join(dstdir, srcpath)
+      try {
+        srcStat = await fs.stat(relativeToDst)
+      } catch {
+        srcStat = await fs.stat(srcpath)
+      }
+    }
 
+    const dstStat = await fs.stat(dstpath)
     if (areIdentical(srcStat, dstStat)) return
   }
 
@@ -394933,7 +394944,21 @@ function createSymlinkSync (srcpath, dstpath, type) {
     stats = fs.lstatSync(dstpath)
   } catch { }
   if (stats && stats.isSymbolicLink()) {
-    const srcStat = fs.statSync(srcpath)
+    // When srcpath is relative, resolve it relative to dstpath's directory
+    // (standard symlink behavior) or fall back to cwd if that doesn't exist
+    let srcStat
+    if (path.isAbsolute(srcpath)) {
+      srcStat = fs.statSync(srcpath)
+    } else {
+      const dstdir = path.dirname(dstpath)
+      const relativeToDst = path.join(dstdir, srcpath)
+      try {
+        srcStat = fs.statSync(relativeToDst)
+      } catch {
+        srcStat = fs.statSync(srcpath)
+      }
+    }
+
     const dstStat = fs.statSync(dstpath)
     if (areIdentical(srcStat, dstStat)) return
   }
@@ -436732,6 +436757,327 @@ function listCacheGet(key) {
 module.exports = listCacheGet;
 
 
+/***/ }),
+
+/***/ 24786:
+/***/ (function(__unused_webpack_module, exports, __webpack_require__) {
+
+"use strict";
+
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+Object.defineProperty(exports, "__esModule", ({ value: true }));
+exports.PermissionService = void 0;
+const utils_1 = __webpack_require__(62358);
+const PERMISSION_BY_RESOURCE = {
+    function: ['CUSTOM'],
+    storage: ['READONLY', 'PRIVATE', 'ADMINWRITE', 'ADMINONLY', 'CUSTOM'],
+    table: ['READONLY', 'PRIVATE', 'ADMINWRITE', 'ADMINONLY'],
+    collection: ['READONLY', 'PRIVATE', 'ADMINWRITE', 'ADMINONLY', 'CUSTOM']
+};
+class PermissionService {
+    constructor(environment) {
+        this.environment = environment;
+        this.tcbService = new utils_1.CloudService(environment.cloudBaseContext, 'tcb', '2018-06-08');
+    }
+    async modifyResourcePermission(options) {
+        const { EnvId } = this.environment.lazyEnvironmentConfig;
+        const { resourceType, resource, permission, securityRule } = options;
+        if (!resourceType || !PERMISSION_BY_RESOURCE[resourceType]) {
+            throw new Error('Invalid resourceType');
+        }
+        if (typeof resource !== 'string' || resource.trim().length === 0) {
+            throw new Error('Invalid resource');
+        }
+        const allowed = PERMISSION_BY_RESOURCE[resourceType];
+        if (!allowed.includes(permission)) {
+            throw new Error(`Permission ${permission} is not allowed for resourceType ${resourceType}`);
+        }
+        if (permission === 'CUSTOM') {
+            if (typeof securityRule !== 'string' || securityRule.trim().length === 0) {
+                throw new Error('securityRule is required when permission is CUSTOM');
+            }
+            // // 校验 JSON 字符串合法性
+            // try {
+            //     JSON.parse(securityRule)
+            // } catch {
+            //     throw new Error('securityRule must be a valid JSON string')
+            // }
+        }
+        const reqData = {
+            EnvId,
+            ResourceType: resourceType,
+            Resource: resource,
+            Permission: permission
+        };
+        if (permission === 'CUSTOM') {
+            reqData.SecurityRule = securityRule;
+        }
+        return this.tcbService.request('ModifyResourcePermission', reqData);
+    }
+    async describeResourcePermission(options) {
+        const { EnvId } = this.environment.lazyEnvironmentConfig;
+        const { resourceType, resources } = options;
+        if (!resourceType || !PERMISSION_BY_RESOURCE[resourceType]) {
+            throw new Error('Invalid resourceType');
+        }
+        if (resources !== undefined) {
+            if (!Array.isArray(resources)) {
+                throw new Error('Invalid resources');
+            }
+            if (resources.length > 100) {
+                throw new Error('resources length must be <= 100');
+            }
+            const invalid = resources.find(item => typeof item !== 'string' || item.trim().length === 0);
+            if (invalid !== undefined) {
+                throw new Error('resources contains invalid item');
+            }
+        }
+        return this.tcbService.request('DescribeResourcePermission', Object.assign({ EnvId, ResourceType: resourceType }, (resources !== undefined ? { Resources: resources } : {})));
+    }
+    async createRole(options) {
+        const { EnvId } = this.environment.lazyEnvironmentConfig;
+        const { roleName, roleIdentity, description, memberUids, policies } = options;
+        // RoleName 校验：非空，2-32字符，中文/字母/数字/_-:@.，必须以字母或中文开头
+        if (typeof roleName !== 'string' || roleName.trim().length === 0) {
+            throw new Error('roleName is required');
+        }
+        if (roleName.length < 2 || roleName.length > 32) {
+            throw new Error('roleName length must be between 2 and 32');
+        }
+        if (!/^[\u4e00-\u9fa5a-zA-Z]/.test(roleName)) {
+            throw new Error('roleName must start with a letter or Chinese character');
+        }
+        if (!/^[\u4e00-\u9fa5a-zA-Z0-9\-_:@.]+$/.test(roleName)) {
+            throw new Error('roleName can only contain Chinese, letters, digits, and -_:@.');
+        }
+        // RoleIdentity 校验：非空，字母/数字/_-:@.，不能与默认角色标识重复
+        if (typeof roleIdentity !== 'string' || roleIdentity.trim().length === 0) {
+            throw new Error('roleIdentity is required');
+        }
+        if (!/^[a-zA-Z0-9\-_:@.]+$/.test(roleIdentity)) {
+            throw new Error('roleIdentity can only contain letters, digits, and -_:@.');
+        }
+        // Description 校验
+        if (description !== undefined && description.length > 255) {
+            throw new Error('description length must be <= 255');
+        }
+        // MemberUids 校验
+        if (memberUids !== undefined) {
+            if (!Array.isArray(memberUids)) {
+                throw new Error('memberUids must be an array');
+            }
+            if (memberUids.length > 100) {
+                throw new Error('memberUids length must be <= 100');
+            }
+            const invalidUid = memberUids.find(uid => typeof uid !== 'string' || uid.trim().length === 0);
+            if (invalidUid !== undefined) {
+                throw new Error('memberUids contains invalid item');
+            }
+        }
+        // Policies 校验
+        if (policies !== undefined) {
+            if (!Array.isArray(policies)) {
+                throw new Error('policies must be an array');
+            }
+            if (policies.length > 50) {
+                throw new Error('policies length must be <= 50');
+            }
+            const invalidPolicy = policies.find(policy => !policy.ResourceType || !policy.Resource);
+            if (invalidPolicy !== undefined) {
+                throw new Error('each policy must have ResourceType and Resource');
+            }
+        }
+        const reqData = {
+            EnvId,
+            RoleName: roleName,
+            RoleIdentity: roleIdentity
+        };
+        if (description !== undefined) {
+            reqData.Description = description;
+        }
+        if (memberUids !== undefined && memberUids.length > 0) {
+            reqData.MemberUids = memberUids;
+        }
+        if (policies !== undefined && policies.length > 0) {
+            reqData.Policies = policies;
+        }
+        return this.tcbService.request('CreateRole', reqData);
+    }
+    async describeRoleList(options = {}) {
+        const { EnvId } = this.environment.lazyEnvironmentConfig;
+        const { pageNumber, pageSize, roleId, roleIdentity, roleName, loadDetails } = options;
+        // PageNumber 校验：从1开始
+        if (pageNumber !== undefined && (pageNumber < 1 || !Number.isInteger(pageNumber))) {
+            throw new Error('pageNumber must be a positive integer');
+        }
+        // PageSize 校验：默认10，最大100
+        if (pageSize !== undefined && (pageSize < 1 || pageSize > 100 || !Number.isInteger(pageSize))) {
+            throw new Error('pageSize must be an integer between 1 and 100');
+        }
+        // RoleId 校验
+        if (roleId !== undefined && (typeof roleId !== 'string' || roleId.trim().length === 0)) {
+            throw new Error('Invalid roleId');
+        }
+        // RoleIdentity 校验
+        if (roleIdentity !== undefined && (typeof roleIdentity !== 'string' || roleIdentity.trim().length === 0)) {
+            throw new Error('Invalid roleIdentity');
+        }
+        // RoleName 校验
+        if (roleName !== undefined && (typeof roleName !== 'string' || roleName.trim().length === 0)) {
+            throw new Error('Invalid roleName');
+        }
+        const reqData = { EnvId };
+        if (pageNumber !== undefined) {
+            reqData.PageNumber = pageNumber;
+        }
+        if (pageSize !== undefined) {
+            reqData.PageSize = pageSize;
+        }
+        if (roleId !== undefined) {
+            reqData.RoleId = roleId;
+        }
+        if (roleIdentity !== undefined) {
+            reqData.RoleIdentity = roleIdentity;
+        }
+        if (roleName !== undefined) {
+            reqData.RoleName = roleName;
+        }
+        if (loadDetails !== undefined) {
+            reqData.LoadDetails = loadDetails;
+        }
+        return this.tcbService.request('DescribeRoleList', reqData);
+    }
+    async modifyRole(options) {
+        const { EnvId } = this.environment.lazyEnvironmentConfig;
+        const { roleId, roleName, description, addMemberUids, removeMemberUids, addPolicies, removePolicies } = options;
+        // RoleId 校验：必填
+        if (typeof roleId !== 'string' || roleId.trim().length === 0) {
+            throw new Error('roleId is required');
+        }
+        // RoleName 校验：不传或传空 => 不修改；非空时校验规则
+        if (roleName !== undefined && roleName !== '') {
+            if (roleName.length < 2 || roleName.length > 32) {
+                throw new Error('roleName length must be between 2 and 32');
+            }
+            if (!/^[\u4e00-\u9fa5a-zA-Z]/.test(roleName)) {
+                throw new Error('roleName must start with a letter or Chinese character');
+            }
+            if (!/^[\u4e00-\u9fa5a-zA-Z0-9\-_:@.]+$/.test(roleName)) {
+                throw new Error('roleName can only contain Chinese, letters, digits, and -_:@.');
+            }
+        }
+        // Description 校验
+        if (description !== undefined && description.length > 255) {
+            throw new Error('description length must be <= 255');
+        }
+        // AddMemberUids 校验
+        if (addMemberUids !== undefined) {
+            if (!Array.isArray(addMemberUids)) {
+                throw new Error('addMemberUids must be an array');
+            }
+            const invalidUid = addMemberUids.find(uid => typeof uid !== 'string' || uid.trim().length === 0);
+            if (invalidUid !== undefined) {
+                throw new Error('addMemberUids contains invalid item');
+            }
+        }
+        // RemoveMemberUids 校验
+        if (removeMemberUids !== undefined) {
+            if (!Array.isArray(removeMemberUids)) {
+                throw new Error('removeMemberUids must be an array');
+            }
+            const invalidUid = removeMemberUids.find(uid => typeof uid !== 'string' || uid.trim().length === 0);
+            if (invalidUid !== undefined) {
+                throw new Error('removeMemberUids contains invalid item');
+            }
+        }
+        // AddPolicies 校验
+        if (addPolicies !== undefined) {
+            if (!Array.isArray(addPolicies)) {
+                throw new Error('addPolicies must be an array');
+            }
+            const invalidPolicy = addPolicies.find(policy => !policy.ResourceType || !policy.Resource);
+            if (invalidPolicy !== undefined) {
+                throw new Error('each addPolicy must have ResourceType and Resource');
+            }
+        }
+        // RemovePolicies 校验
+        if (removePolicies !== undefined) {
+            if (!Array.isArray(removePolicies)) {
+                throw new Error('removePolicies must be an array');
+            }
+            const invalidPolicy = removePolicies.find(policy => !policy.ResourceType || !policy.Resource);
+            if (invalidPolicy !== undefined) {
+                throw new Error('each removePolicy must have ResourceType and Resource');
+            }
+        }
+        const reqData = { EnvId, RoleId: roleId };
+        // RoleName：不传或传空 => 不修改（不下发）
+        if (roleName !== undefined && roleName !== '') {
+            reqData.RoleName = roleName;
+        }
+        if (description !== undefined) {
+            reqData.Description = description;
+        }
+        if (addMemberUids !== undefined) {
+            reqData.AddMemberUids = addMemberUids;
+        }
+        if (removeMemberUids !== undefined) {
+            reqData.RemoveMemberUids = removeMemberUids;
+        }
+        if (addPolicies !== undefined) {
+            reqData.AddPolicies = addPolicies;
+        }
+        if (removePolicies !== undefined) {
+            reqData.RemovePolicies = removePolicies;
+        }
+        return this.tcbService.request('ModifyRole', reqData);
+    }
+    async deleteRoles(options) {
+        const { EnvId } = this.environment.lazyEnvironmentConfig;
+        const { roleIds } = options;
+        // RoleIds 校验：必填数组，最多100个
+        if (!Array.isArray(roleIds) || roleIds.length === 0) {
+            throw new Error('roleIds is required and must be a non-empty array');
+        }
+        if (roleIds.length > 100) {
+            throw new Error('roleIds length must be <= 100');
+        }
+        const invalidId = roleIds.find(id => typeof id !== 'string' || id.trim().length === 0);
+        if (invalidId !== undefined) {
+            throw new Error('roleIds contains invalid item');
+        }
+        return this.tcbService.request('DeleteRoles', {
+            EnvId,
+            RoleIds: roleIds
+        });
+    }
+}
+exports.PermissionService = PermissionService;
+__decorate([
+    (0, utils_1.preLazy)()
+], PermissionService.prototype, "modifyResourcePermission", null);
+__decorate([
+    (0, utils_1.preLazy)()
+], PermissionService.prototype, "describeResourcePermission", null);
+__decorate([
+    (0, utils_1.preLazy)()
+], PermissionService.prototype, "createRole", null);
+__decorate([
+    (0, utils_1.preLazy)()
+], PermissionService.prototype, "describeRoleList", null);
+__decorate([
+    (0, utils_1.preLazy)()
+], PermissionService.prototype, "modifyRole", null);
+__decorate([
+    (0, utils_1.preLazy)()
+], PermissionService.prototype, "deleteRoles", null);
+
+
 /***/ }),
 
 /***/ 24808:
@@ -464861,6 +465207,7 @@ const { mkdirs } = __webpack_require__(23585)
 const { pathExists } = __webpack_require__(65057)
 const { utimesMillis } = __webpack_require__(53430)
 const stat = __webpack_require__(62039)
+const { asyncIteratorConcurrentProcess } = __webpack_require__(64129)
 
 async function copy (src, dest, opts = {}) {
   if (typeof opts === 'function') {
@@ -464968,28 +465315,20 @@ async function onDir (srcStat, destStat, src, dest, opts) {
     await fs.mkdir(dest)
   }
 
-  const promises = []
-
-  // loop through the files in the current directory to copy everything
-  for await (const item of await fs.opendir(src)) {
+  // iterate through the files in the current directory to copy everything
+  await asyncIteratorConcurrentProcess(await fs.opendir(src), async (item) => {
     const srcItem = path.join(src, item.name)
     const destItem = path.join(dest, item.name)
 
-    promises.push(
-      runFilter(srcItem, destItem, opts).then(include => {
-        if (include) {
-          // only copy the item if it matches the filter function
-          return stat.checkPaths(srcItem, destItem, 'copy', opts).then(({ destStat }) => {
-            // If the item is a copyable file, `getStatsAndPerformCopy` will copy it
-            // If the item is a directory, `getStatsAndPerformCopy` will call `onDir` recursively
-            return getStatsAndPerformCopy(destStat, srcItem, destItem, opts)
-          })
-        }
-      })
-    )
-  }
-
-  await Promise.all(promises)
+    const include = await runFilter(srcItem, destItem, opts)
+    // only copy the item if it matches the filter function
+    if (include) {
+      const { destStat } = await stat.checkPaths(srcItem, destItem, 'copy', opts)
+      // If the item is a copyable file, `getStatsAndPerformCopy` will copy it
+      // If the item is a directory, `getStatsAndPerformCopy` will call `onDir` recursively
+      await getStatsAndPerformCopy(destStat, srcItem, destItem, opts)
+    }
+  })
 
   if (!destStat) {
     await fs.chmod(dest, srcStat.mode)
@@ -465018,15 +465357,20 @@ async function onLink (destStat, src, dest, opts) {
   if (opts.dereference) {
     resolvedDest = path.resolve(process.cwd(), resolvedDest)
   }
-  if (stat.isSrcSubdir(resolvedSrc, resolvedDest)) {
-    throw new Error(`Cannot copy '${resolvedSrc}' to a subdirectory of itself, '${resolvedDest}'.`)
-  }
+  // If both symlinks resolve to the same target, they are still distinct symlinks
+  // that can be copied/overwritten. Only check subdirectory constraints when
+  // the resolved paths are different.
+  if (resolvedSrc !== resolvedDest) {
+    if (stat.isSrcSubdir(resolvedSrc, resolvedDest)) {
+      throw new Error(`Cannot copy '${resolvedSrc}' to a subdirectory of itself, '${resolvedDest}'.`)
+    }
 
-  // do not copy if src is a subdir of dest since unlinking
-  // dest in this case would result in removing src contents
-  // and therefore a broken symlink would be created.
-  if (stat.isSrcSubdir(resolvedDest, resolvedSrc)) {
-    throw new Error(`Cannot overwrite '${resolvedDest}' with '${resolvedSrc}'.`)
+    // do not copy if src is a subdir of dest since unlinking
+    // dest in this case would result in removing src contents
+    // and therefore a broken symlink would be created.
+    if (stat.isSrcSubdir(resolvedDest, resolvedSrc)) {
+      throw new Error(`Cannot overwrite '${resolvedDest}' with '${resolvedSrc}'.`)
+    }
   }
 
   // copy the link
@@ -586104,14 +586448,62 @@ var __exportStar = (this && this.__exportStar) || function(m, exports) {
 };
 Object.defineProperty(exports, "__esModule", ({ value: true }));
 exports.LogService = void 0;
+exports.isLogServiceEnabled = isLogServiceEnabled;
 const utils_1 = __webpack_require__(62358);
 __exportStar(__webpack_require__(83700), exports);
+/**
+ * 纯函数：根据 DescribeEnvs 返回的 LogServices 列表判断日志服务是否已开通。
+ * 已开通条件：至少一个条目有有效的 TopicId。
+ */
+function isLogServiceEnabled(logServices) {
+    if (!logServices || logServices.length === 0)
+        return false;
+    return logServices.some(svc => !!svc.TopicId);
+}
 class LogService {
     constructor(environment) {
         this.envId = environment.getEnvId();
         this.cloudService = new utils_1.CloudService(environment.cloudBaseContext, 'tcb', '2018-06-08');
         this.tcbrService = new utils_1.CloudService(environment.cloudBaseContext, 'tcbr', '2022-02-17');
     }
+    /**
+     * 检查当前环境的日志服务是否已开通
+     *
+     * 通过 DescribeEnvs 接口获取环境信息，判断 LogServices 字段中是否包含有效的
+     * 日志主题（TopicId 不为空）。
+     *
+     * @returns true 表示已开通，false 表示未开通或开通中
+     */
+    async checkLogServiceEnabled() {
+        var _a;
+        const res = await this.cloudService.request('DescribeEnvs', {
+            EnvId: this.envId
+        });
+        const envInfo = (_a = res === null || res === void 0 ? void 0 : res.EnvList) === null || _a === void 0 ? void 0 : _a[0];
+        if (!envInfo) {
+            return false;
+        }
+        const logServices = envInfo.LogServices;
+        if (!logServices || logServices.length === 0) {
+            return false;
+        }
+        // 已开通：LogServiceInfo 中存在有效的日志主题 ID
+        return isLogServiceEnabled(logServices);
+    }
+    /**
+     * 开通环境日志服务（异步操作）
+     *
+     * 调用 CreateEnvResource 接口开通日志资源。
+     * 注意：接口调用成功不代表日志资源立即可用，需通过 checkLogServiceEnabled() 轮询确认。
+     *
+     * @returns 请求 ID
+     */
+    async createLogService() {
+        return this.cloudService.request('CreateEnvResource', {
+            EnvId: this.envId,
+            Resources: ['log']
+        });
+    }
     /**
      * 搜索 CLS 日志
      *
@@ -648299,6 +648691,13 @@ let LogSearchCommand = class LogSearchCommand extends common_1.Command {
             }
             try {
                 const logService = yield (0, utils_3.getLogService)(selectedEnvId);
+                if (!jsonOutput) {
+                    loading.stop();
+                }
+                yield (0, utils_3.ensureLogServiceEnabled)(logService, log, { jsonOutput });
+                if (!jsonOutput) {
+                    loading.start((0, i18n_1.t)('正在检索日志...'));
+                }
                 const result = yield logService.searchClsLog({
                     queryString,
                     StartTime: startTime,
@@ -648357,6 +648756,9 @@ let LogSearchCommand = class LogSearchCommand extends common_1.Command {
                 if (!jsonOutput) {
                     loading.fail((0, i18n_1.t)('日志检索失败'));
                 }
+                if (e instanceof error_1.CloudBaseError) {
+                    throw e;
+                }
                 throw new error_1.CloudBaseError({
                     message: (0, i18n_1.t)('日志检索失败：{{msg}}', {
                         msg: e instanceof Error ? e.message : String(e)
@@ -664886,6 +665288,7 @@ const access_1 = __webpack_require__(70427);
 const user_1 = __webpack_require__(71858);
 const cloudBaseRun_1 = __webpack_require__(24344);
 const mysql_1 = __webpack_require__(61697);
+const permission_1 = __webpack_require__(24786);
 class Environment {
     constructor(context, envId) {
         this.inited = false;
@@ -664907,6 +665310,7 @@ class Environment {
         this.userService = new user_1.UserService(this);
         this.cloudBaseRunService = new cloudBaseRun_1.CloudBaseRunService(this);
         this.mysqlService = new mysql_1.MysqlService(this);
+        this.permissionService = new permission_1.PermissionService(this);
     }
     async lazyInit() {
         if (!this.inited) {
@@ -664969,6 +665373,9 @@ class Environment {
     getMysqlService() {
         return this.mysqlService;
     }
+    getPermissionService() {
+        return this.permissionService;
+    }
     getCommonService(serviceType = 'tcb', serviceVersion) {
         return new common_1.CommonService(this, serviceType, serviceVersion);
     }
@@ -684684,7 +685091,8 @@ function checkParentPathsSync (src, srcStat, dest, funcName) {
 }
 
 function areIdentical (srcStat, destStat) {
-  return destStat.ino && destStat.dev && destStat.ino === srcStat.ino && destStat.dev === srcStat.dev
+  // stat.dev can be 0n on windows when node version >= 22.x.x
+  return destStat.ino !== undefined && destStat.dev !== undefined && destStat.ino === srcStat.ino && destStat.dev === srcStat.dev
 }
 
 // return true if dest is a subdir of src, otherwise false.
@@ -700723,6 +701131,43 @@ class CloudBaseError extends Error {
 exports.CloudBaseError = CloudBaseError;
 
 
+/***/ }),
+
+/***/ 64129:
+/***/ ((module) => {
+
+"use strict";
+
+
+// https://github.com/jprichardson/node-fs-extra/issues/1056
+// Performing parallel operations on each item of an async iterator is
+// surprisingly hard; you need to have handlers in place to avoid getting an
+// UnhandledPromiseRejectionWarning.
+// NOTE: This function does not presently handle return values, only errors
+async function asyncIteratorConcurrentProcess (iterator, fn) {
+  const promises = []
+  for await (const item of iterator) {
+    promises.push(
+      fn(item).then(
+        () => null,
+        (err) => err ?? new Error('unknown error')
+      )
+    )
+  }
+  await Promise.all(
+    promises.map((promise) =>
+      promise.then((possibleErr) => {
+        if (possibleErr !== null) throw possibleErr
+      })
+    )
+  )
+}
+
+module.exports = {
+  asyncIteratorConcurrentProcess
+}
+
+
 /***/ }),
 
 /***/ 64179:
@@ -833283,15 +833728,20 @@ function onLink (destStat, src, dest, opts) {
     if (opts.dereference) {
       resolvedDest = path.resolve(process.cwd(), resolvedDest)
     }
-    if (stat.isSrcSubdir(resolvedSrc, resolvedDest)) {
-      throw new Error(`Cannot copy '${resolvedSrc}' to a subdirectory of itself, '${resolvedDest}'.`)
-    }
+    // If both symlinks resolve to the same target, they are still distinct symlinks
+    // that can be copied/overwritten. Only check subdirectory constraints when
+    // the resolved paths are different.
+    if (resolvedSrc !== resolvedDest) {
+      if (stat.isSrcSubdir(resolvedSrc, resolvedDest)) {
+        throw new Error(`Cannot copy '${resolvedSrc}' to a subdirectory of itself, '${resolvedDest}'.`)
+      }
 
-    // prevent copy if src is a subdir of dest since unlinking
-    // dest in this case would result in removing src contents
-    // and therefore a broken symlink would be created.
-    if (stat.isSrcSubdir(resolvedDest, resolvedSrc)) {
-      throw new Error(`Cannot overwrite '${resolvedDest}' with '${resolvedSrc}'.`)
+      // prevent copy if src is a subdir of dest since unlinking
+      // dest in this case would result in removing src contents
+      // and therefore a broken symlink would be created.
+      if (stat.isSrcSubdir(resolvedDest, resolvedSrc)) {
+        throw new Error(`Cannot overwrite '${resolvedDest}' with '${resolvedSrc}'.`)
+      }
     }
     return copyLink(resolvedSrc, dest)
   }
@@ -944381,6 +944831,9 @@ class CloudBase {
     get user() {
         return this.currentEnvironment().getUserService();
     }
+    get permission() {
+        return this.currentEnvironment().getPermissionService();
+    }
     get docs() {
         if (!this.docsService) {
             this.docsService = new docs_1.DocsService();
@@ -955227,12 +955680,96 @@ var __importDefault = (this && this.__importDefault) || function (mod) {
     return (mod && mod.__esModule) ? mod : { "default": mod };
 };
 Object.defineProperty(exports, "__esModule", ({ value: true }));
-exports.safeParseJSON = exports.resolveTimeRange = exports.getLogService = void 0;
+exports.safeParseJSON = exports.resolveTimeRange = exports.getLogService = exports.ensureLogServiceEnabled = void 0;
 const manager_node_1 = __importDefault(__webpack_require__(95492));
 const toolbox_1 = __webpack_require__(25901);
 const utils_1 = __webpack_require__(82079);
 const error_1 = __webpack_require__(66759);
 const i18n_1 = __webpack_require__(69258);
+function ensureLogServiceEnabled(logService, log, opts = {}) {
+    return __awaiter(this, void 0, void 0, function* () {
+        const { jsonOutput = false } = opts;
+        let enabled;
+        try {
+            enabled = yield logService.checkLogServiceEnabled();
+        }
+        catch (e) {
+            throw new error_1.CloudBaseError({
+                message: (0, i18n_1.t)('检查日志服务状态失败：{{message}}', { message: e.message || String(e) }),
+                original: e
+            });
+        }
+        if (enabled) {
+            return;
+        }
+        const notEnabledError = new error_1.CloudBaseError({
+            message: (0, i18n_1.t)('日志服务未开通，无法执行日志查询。请开通日志服务后重试。'),
+            code: 'LOG_SERVICE_NOT_ENABLED',
+            solution: [
+                (0, i18n_1.t)('运行 tcb logs search --yes 可自动开通日志服务'),
+                (0, i18n_1.t)('或前往云开发控制台手动开通')
+            ]
+        });
+        if (jsonOutput) {
+            throw notEnabledError;
+        }
+        log.warn((0, i18n_1.t)('您的环境尚未开通日志服务，开通后不额外计费，日志将按照您购买的套餐提供不同时长保存，' +
+            '详情可参考文档：https://cloud.tencent.com/document/product/876/75213'));
+        const confirm = yield (0, utils_1.autoConfirm)((0, i18n_1.t)('是否现在开通日志服务？'), true);
+        if (!confirm) {
+            throw notEnabledError;
+        }
+        if (!jsonOutput) {
+            log.info((0, i18n_1.t)('正在开通日志服务（异步操作，最长等待 5 分钟）...'));
+        }
+        try {
+            yield logService.createLogService();
+        }
+        catch (e) {
+            const code = (e === null || e === void 0 ? void 0 : e.code) || (e === null || e === void 0 ? void 0 : e.Code) || '';
+            if (code !== 'ResourceInUse.LogExist') {
+                throw new error_1.CloudBaseError({
+                    message: (0, i18n_1.t)('开通日志服务失败：{{message}}', { message: e.message || String(e) }),
+                    original: e
+                });
+            }
+        }
+        const MAX_POLL = 60;
+        const POLL_INTERVAL_MS = 2000;
+        let pollCount = 0;
+        yield new Promise((resolve, reject) => {
+            const timer = setInterval(() => __awaiter(this, void 0, void 0, function* () {
+                pollCount++;
+                try {
+                    const ready = yield logService.checkLogServiceEnabled();
+                    if (ready) {
+                        clearInterval(timer);
+                        if (!jsonOutput) {
+                            log.info((0, i18n_1.t)('日志服务开通成功！'));
+                        }
+                        resolve();
+                        return;
+                    }
+                }
+                catch (e) {
+                    clearInterval(timer);
+                    reject(new error_1.CloudBaseError({
+                        message: (0, i18n_1.t)('轮询日志服务状态失败：{{message}}', {
+                            message: e.message || String(e)
+                        }),
+                        original: e
+                    }));
+                    return;
+                }
+                if (pollCount >= MAX_POLL) {
+                    clearInterval(timer);
+                    reject(new error_1.CloudBaseError((0, i18n_1.t)('日志服务开通超时（已等待 5 分钟），请稍后重试或前往控制台确认开通状态。')));
+                }
+            }), POLL_INTERVAL_MS);
+        });
+    });
+}
+exports.ensureLogServiceEnabled = ensureLogServiceEnabled;
 function getLogService(envId) {
     return __awaiter(this, void 0, void 0, function* () {
         const region = yield (0, toolbox_1.getRegion)();

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cloudbase/cli",
-  "version": "3.0.0-alpha.3",
+  "version": "3.0.0-alpha.4",
   "description": "CLI for Tencent CloudBase (standalone bundle)",
   "bin": {
     "tcb": "bin/tcb",