@cloudbase/cloudbase-mcp 2.17.0 → 2.18.0

package/dist/index.cjs

@@ -1769,7 +1769,6 @@ const auth_js_1 = __webpack_require__(77291);
 const cloudbase_manager_js_1 = __webpack_require__(3431);
 const logger_js_1 = __webpack_require__(13039);
 const tool_result_js_1 = __webpack_require__(9835);
-const rag_js_1 = __webpack_require__(64215);
 const env_setup_js_1 = __webpack_require__(6978);
 /**
  * Simplify environment list data by keeping only essential fields for AI assistant
@@ -1903,6 +1902,7 @@ function formatDeviceAuthHint(deviceAuthInfo) {
     if (!deviceAuthInfo) {
         return "";
     }
+    const verificationUriComplete = (0, auth_js_1.buildVerificationUriComplete)(deviceAuthInfo);
     const lines = [
         "",
         "### Device Flow 授权信息",
@@ -1911,8 +1911,11 @@ function formatDeviceAuthHint(deviceAuthInfo) {
     if (deviceAuthInfo.verification_uri) {
         lines.push(`- verification_uri: ${deviceAuthInfo.verification_uri}`);
     }
+    if (verificationUriComplete) {
+        lines.push(`- verification_uri_complete: ${verificationUriComplete}`);
+    }
     lines.push(`- expires_in: ${deviceAuthInfo.expires_in}s`);
-    lines.push("", "请在另一台可用浏览器设备打开 `verification_uri` 并输入 `user_code` 完成授权。");
+    lines.push("", "请优先向用户展示完整的 `verification_uri_complete`，不要截断或改写 URL。");
     return lines.join("\n");
 }
 function emitDeviceAuthNotice(server, deviceAuthInfo) {
@@ -2226,19 +2229,6 @@ async function enrichEnvInfoWithBilling(params) {
         return params.result;
     }
 }
-async function getGuidePrompt(server) {
-    if (getCurrentIde(server) === "CodeBuddy" ||
-        process.env.CLOUDBASE_GUIDE_PROMPT === "false") {
-        return "";
-    }
-    try {
-        return await (0, rag_js_1.getClaudePrompt)();
-    }
-    catch (promptError) {
-        (0, logger_js_1.debug)("Failed to get CLAUDE prompt", { error: promptError });
-        return "";
-    }
-}
 function normalizeOptionalToolString(value) {
     return typeof value === "string" && value.trim().length > 0
         ? value.trim()
@@ -2351,13 +2341,7 @@ function registerEnvTools(server) {
             (0, auth_js_1.setPendingAuthProgressState)(info, "device");
             // emitDeviceAuthNotice(server, info);
         };
-        const authChallenge = () => deviceAuthInfo
-            ? {
-                user_code: deviceAuthInfo.user_code,
-                verification_uri: deviceAuthInfo.verification_uri,
-                expires_in: deviceAuthInfo.expires_in,
-            }
-            : undefined;
+        const authChallenge = () => (0, auth_js_1.buildDeviceAuthChallengePayload)(deviceAuthInfo);
         try {
             if (!supportedAuthActions.includes(action)) {
                 return (0, tool_result_js_1.buildJsonToolResult)({
@@ -2404,12 +2388,8 @@ function registerEnvTools(server) {
                             current_env_id: null,
                             ...buildEnvCandidatePayload([]),
                         }),
-                    auth_challenge: authFlowState.status === "PENDING" && authFlowState.authChallenge
-                        ? {
-                            user_code: authFlowState.authChallenge.user_code,
-                            verification_uri: authFlowState.authChallenge.verification_uri,
-                            expires_in: authFlowState.authChallenge.expires_in,
-                        }
+                    auth_challenge: authFlowState.status === "PENDING"
+                        ? (0, auth_js_1.buildDeviceAuthChallengePayload)(authFlowState.authChallenge)
                         : undefined,
                     message,
                     next_step: authStatus === "REQUIRED"
@@ -2430,11 +2410,7 @@ function registerEnvTools(server) {
                         ok: true,
                         code: "AUTH_PENDING",
                         message: "设备码授权进行中，请在浏览器中打开 verification_uri 并输入 user_code 完成授权。",
-                        auth_challenge: {
-                            user_code: authFlowState.authChallenge.user_code,
-                            verification_uri: authFlowState.authChallenge.verification_uri,
-                            expires_in: authFlowState.authChallenge.expires_in,
-                        },
+                        auth_challenge: (0, auth_js_1.buildDeviceAuthChallengePayload)(authFlowState.authChallenge),
                         next_step: (0, tool_result_js_1.buildAuthNextStep)("status", {
                             suggestedArgs: { action: "status" },
                         }),
@@ -2897,23 +2873,7 @@ function registerEnvTools(server) {
                 default:
                     throw new Error(`不支持的查询类型: ${action}`);
             }
-            let responseText = JSON.stringify(result, null, 2);
-            // For info action, append CLAUDE.md prompt content (skip for CodeBuddy IDE)
-            const currentIde = server.ide || process.env.INTEGRATION_IDE;
-            if (action === "info" && currentIde !== "CodeBuddy" && process.env.CLOUDBASE_GUIDE_PROMPT !== "false") {
-                try {
-                    const promptContent = await (0, rag_js_1.getClaudePrompt)();
-                    if (promptContent) {
-                        responseText += `\n\n⚠️ 重要提示：后续所有云开发相关的开发工作必须严格遵循以下开发规范和最佳实践：\n\n${promptContent}`;
-                    }
-                }
-                catch (promptError) {
-                    (0, logger_js_1.debug)("Failed to get CLAUDE prompt in envQuery", {
-                        error: promptError,
-                    });
-                    // Continue without prompt if fetch fails
-                }
-            }
+            const responseText = JSON.stringify(result, null, 2);
             return {
                 content: [
                     {
@@ -24632,13 +24592,7 @@ async function throwPendingAuthError() {
         ok: false,
         code: "AUTH_PENDING",
         message: authState.lastError || "设备码授权进行中，请先完成登录后再重试当前工具。",
-        auth_challenge: authState.authChallenge
-            ? {
-                user_code: authState.authChallenge.user_code,
-                verification_uri: authState.authChallenge.verification_uri,
-                expires_in: authState.authChallenge.expires_in,
-            }
-            : undefined,
+        auth_challenge: (0, auth_js_1.buildDeviceAuthChallengePayload)(authState.authChallenge),
         next_step: (0, tool_result_js_1.buildAuthNextStep)("status", {
             suggestedArgs: {
                 action: "status",
@@ -88375,6 +88329,7 @@ var __importDefault = (this && this.__importDefault) || function (mod) {
 Object.defineProperty(exports, "__esModule", ({ value: true }));
 exports.MANAGE_FUNCTION_ACTIONS = exports.QUERY_FUNCTION_ACTIONS = exports.TRIGGER_CONFIG_EXAMPLES = exports.SUPPORTED_TRIGGER_TYPES = exports.DEFAULT_NODEJS_RUNTIME = exports.SUPPORTED_NODEJS_RUNTIMES = exports.RECOMMENDED_RUNTIMES = exports.DEFAULT_RUNTIME = exports.ALL_SUPPORTED_RUNTIMES = exports.SUPPORTED_RUNTIMES = void 0;
 exports.formatRuntimeList = formatRuntimeList;
+exports.validateTimerCron = validateTimerCron;
 exports.shouldInstallDependencyForFunction = shouldInstallDependencyForFunction;
 exports.resolveEventFunctionRuntime = resolveEventFunctionRuntime;
 exports.buildFunctionOperationErrorMessage = buildFunctionOperationErrorMessage;
@@ -88478,12 +88433,32 @@ const VPC_SCHEMA = zod_1.z.object({
     vpcId: zod_1.z.string(),
     subnetId: zod_1.z.string(),
 });
+const SEVEN_FIELD_CRON_REGEX = /^\s*\S+\s+\S+\s+\S+\s+\S+\s+\S+\s+\S+\s+\S+\s*$/;
+function validateTimerCron(config) {
+    const trimmed = config.trim();
+    const fields = trimmed.split(/\s+/);
+    if (fields.length === 5) {
+        throw new Error(`timer 触发器的 cron 表达式必须使用 7 段格式（秒 分 时 日 月 星期 年），不支持标准 5 段格式。` +
+            `\n收到 5 段: "${trimmed}"` +
+            `\n正确示例: "0 */5 * * * * *"（每 5 分钟执行），"0 0 2 1 * * *"（每月 1 号 2 点）`);
+    }
+    if (fields.length < 7) {
+        throw new Error(`timer 触发器的 cron 表达式必须使用 7 段格式（秒 分 时 日 月 星期 年），当前只有 ${fields.length} 段。` +
+            `\n正确示例: "0 */5 * * * * *"（每 5 分钟执行），"0 0 2 1 * * *"（每月 1 号 2 点）`);
+    }
+    return trimmed;
+}
 const TRIGGER_SCHEMA = zod_1.z.object({
     name: zod_1.z.string().describe("触发器名称"),
     type: zod_1.z.enum(exports.SUPPORTED_TRIGGER_TYPES).describe("触发器类型"),
     config: zod_1.z
         .string()
-        .describe("触发器配置，timer 使用 7 段 cron：second minute hour day month week year"),
+        .describe("触发器配置。timer 必须使用 CloudBase 7 段 cron 格式：秒 分 时 日 月 星期 年。" +
+        "⚠️ 不支持标准 5 段 cron（如 */5 * * * * 是错误的）。" +
+        "正确示例：0 */5 * * * * *（每5分钟）、0 0 2 1 * * *（每月1号2点）、0 30 9 * * * *（每天9:30）")
+        .refine((val) => SEVEN_FIELD_CRON_REGEX.test(val), {
+        message: "timer 触发器的 cron 表达式必须使用 7 段格式（秒 分 时 日 月 星期 年），不支持 5 段格式。正确示例：0 */5 * * * * *",
+    }),
 });
 const CREATE_FUNCTION_SCHEMA = zod_1.z.object({
     name: zod_1.z.string().describe("函数名称"),
@@ -89146,6 +89121,12 @@ function registerFunctionTools(server) {
                 if (!input.triggers?.length) {
                     throw new Error("createFunctionTrigger 操作时，triggers 参数是必需的");
                 }
+                // Validate timer cron format before sending to CloudBase
+                for (const trigger of input.triggers) {
+                    if (trigger.type === "timer") {
+                        validateTimerCron(trigger.config);
+                    }
+                }
                 const cloudbase = await getManager();
                 const result = await cloudbase.functions.createFunctionTriggers(input.functionName, input.triggers);
                 (0, cloudbase_manager_js_1.logCloudBaseResult)(server.logger, result);
@@ -89377,10 +89358,13 @@ function registerFunctionTools(server) {
                 .enum(exports.MANAGE_FUNCTION_ACTIONS)
                 .describe("写操作类型，例如 createFunction、invokeFunction、attachLayer"),
             func: CREATE_FUNCTION_SCHEMA.optional().describe("createFunction 操作的函数配置"),
-            functionRootPath: zod_1.z.string().optional().describe("函数根目录（父目录绝对路径）"),
+            functionRootPath: zod_1.z.string().optional().describe("创建或更新函数代码时默认推荐的本地目录方式。函数根目录（父目录绝对路径）。" +
+                "本地应按 cloudfunctions/<functionName>/index.js 布局，" +
+                "此参数传 cloudfunctions 目录的绝对路径（如 /abs/path/cloudfunctions），不要传到函数名子目录。" +
+                "SDK 会自动拼接函数名子目录，无需预先压缩 zip 或 base64 编码。"),
             force: zod_1.z.boolean().optional().describe("createFunction 时是否覆盖"),
             functionName: zod_1.z.string().optional().describe("函数名称。大多数 action 使用该字段作为统一目标"),
-            zipFile: zod_1.z.string().optional().describe("代码包的 base64 编码"),
+            zipFile: zod_1.z.string().optional().describe("仅兼容特殊场景：预先准备好的代码包 base64 编码。普通 createFunction/updateFunctionCode 默认不要先压缩 zip，优先使用 functionRootPath。"),
             handler: zod_1.z.string().optional().describe("函数入口"),
             timeout: zod_1.z.number().optional().describe("配置更新时的超时时间"),
             envVariables: zod_1.z.record(zod_1.z.string()).optional().describe("配置更新时要合并的环境变量"),
@@ -108450,10 +108434,10 @@ function registerDataModelTools(server) {
                 throw new Error(`不支持的操作类型: ${action}`);
         }
     });
-    // modifyDataModel - 数据模型修改工具（创建/更新）
+    // modifyDataModel - 数据模型写工具（兼容名称，当前仅支持创建）
     server.registerTool?.("modifyDataModel", {
-        title: "修改数据模型",
-        description: "基于Mermaid classDiagram创建或更新数据模型。支持创建新模型和更新现有模型结构。内置异步任务监控，自动轮询直至完成或超时。",
+        title: "修改数据模型（当前仅支持创建）",
+        description: "基于Mermaid classDiagram创建数据模型。为保持兼容性，工具名仍为 modifyDataModel；当前仅支持创建新模型，不支持更新现有模型结构。内置异步任务监控，自动轮询直至完成或超时。",
         inputSchema: {
             mermaidDiagram: zod_1.z.string()
                 .describe(`Mermaid classDiagram代码，描述数据模型结构。
@@ -108613,10 +108597,10 @@ classDiagram
                         status: status,
                         action: action,
                         message: status === "success"
-                            ? `数据模型${action === "create" ? "创建" : "更新"}成功，共处理${models.length}个模型`
+                            ? `数据模型创建成功，共处理${models.length}个模型`
                             : status === "init"
                                 ? `任务超时，任务ID: ${taskId}，请稍后手动查询状态`
-                                : `数据模型${action === "create" ? "创建" : "更新"}失败`,
+                                : `数据模型创建失败`,
                         taskResult: statusResult?.Data,
                     }, null, 2),
                 },
@@ -111843,14 +111827,15 @@ exports.CLOUDRUN_SERVICE_TYPES = ['function', 'container'];
 exports.CLOUDRUN_ACCESS_TYPES = ['OA', 'PUBLIC', 'MINIAPP', 'VPC'];
 // Input schema for queryCloudRun tool
 const queryCloudRunInputSchema = {
-    action: zod_1.z.enum(['list', 'detail', 'templates']).describe('查询操作类型：list=获取云托管服务列表（支持分页和筛选），detail=查询指定服务的详细信息（包括配置、版本、访问地址等），templates=获取可用的项目模板列表（用于初始化新项目）'),
+    action: zod_1.z.enum(['list', 'detail', 'templates', 'getDeployLog']).describe('查询操作类型：list=获取云托管服务列表（支持分页和筛选），detail=查询指定服务的详细信息（包含服务配置和最新部署状态），templates=获取可用的项目模板列表（用于初始化新项目），getDeployLog=获取指定服务最近一次或指定构建的部署日志'),
     // List operation parameters
     pageSize: zod_1.z.number().min(1).max(100).optional().default(10).describe('分页大小，控制每页返回的服务数量。取值范围：1-100，默认值：10。建议根据网络性能和显示需求调整'),
     pageNum: zod_1.z.number().min(1).optional().default(1).describe('页码，用于分页查询。从1开始，默认值：1。配合pageSize使用可实现分页浏览'),
     serverName: zod_1.z.string().optional().describe('服务名称筛选条件，支持模糊匹配。例如：输入"test"可匹配"test-service"、"my-test-app"等服务名称。留空则查询所有服务'),
     serverType: zod_1.z.enum(exports.CLOUDRUN_SERVICE_TYPES).optional().describe('服务类型筛选条件：function=函数型云托管（仅支持Node.js，有特殊的开发要求和限制，适合简单的API服务），container=容器型服务（推荐使用，支持任意语言和框架如Java/Go/Python/PHP/.NET等，适合大多数应用场景）'),
-    // Detail operation parameters
-    detailServerName: zod_1.z.string().optional().describe('要查询详细信息的服务名称。当action为detail时必需提供，必须是已存在的服务名称。可通过list操作获取可用的服务名称列表'),
+    // Detail and log operation parameters
+    detailServerName: zod_1.z.string().optional().describe('要查询详细信息或部署日志的服务名称。当action为detail或getDeployLog时建议提供，必须是已存在的服务名称。可通过list操作获取可用的服务名称列表'),
+    buildId: zod_1.z.number().optional().describe('构建ID，仅在action=getDeployLog时使用。不传时默认返回最近一次部署的构建日志'),
 };
 // Input schema for manageCloudRun tool
 const ManageCloudRunInputSchema = {
@@ -111958,6 +111943,28 @@ function buildManageCloudRunErrorMessage(action, serverName, error) {
     }
     return `[manageCloudRun/${action}] ${baseMessage}\n建议：${suggestions.join(" ")}`;
 }
+function getCloudRunQueryServerName(input) {
+    return input.detailServerName || input.serverName;
+}
+function normalizeProcessLogText(logs) {
+    return logs
+        .map((log) => {
+        if (typeof log === "string") {
+            return log;
+        }
+        if (log && typeof log === "object") {
+            if ("Log" in log && typeof log.Log === "string") {
+                return log.Log;
+            }
+            if ("Text" in log && typeof log.Text === "string") {
+                return log.Text;
+            }
+            return JSON.stringify(log);
+        }
+        return String(log);
+    })
+        .join("\n");
+}
 /**
  * Format CloudRun service info for display
  */
@@ -111972,7 +111979,7 @@ function registerCloudRunTools(server) {
     // Tool 1: Get CloudRun service information (read operations)
     server.registerTool("queryCloudRun", {
         title: "查询 CloudRun 服务信息",
-        description: "查询云托管服务信息，支持获取服务列表、查询服务详情和获取可用模板列表。返回的服务信息包括服务名称、状态、访问类型、配置详情等。",
+        description: "查询云托管服务信息，支持获取服务列表、查询服务详情、获取可用模板列表和部署日志。返回的服务信息包括服务名称、状态、访问类型、配置详情以及最近部署上下文。",
         inputSchema: queryCloudRunInputSchema,
         annotations: {
             readOnlyHint: true,
@@ -112021,7 +112028,21 @@ function registerCloudRunTools(server) {
                 };
             }
             case 'detail': {
-                const serverName = input.detailServerName || input.serverName;
+                const serverName = getCloudRunQueryServerName(input);
+                if (!serverName) {
+                    return {
+                        content: [
+                            {
+                                type: "text",
+                                text: JSON.stringify({
+                                    success: false,
+                                    error: "detailServerName or serverName is required for detail action",
+                                    message: "Please provide detailServerName or serverName."
+                                }, null, 2)
+                            }
+                        ]
+                    };
+                }
                 const result = await cloudrunService.detail({ serverName });
                 if (!result) {
                     return {
@@ -112037,6 +112058,30 @@ function registerCloudRunTools(server) {
                         ]
                     };
                 }
+                let latestDeploy = null;
+                let deployRecordsWarning;
+                let message;
+                try {
+                    const deployRecords = await cloudrunService.getDeployRecords({ serverName });
+                    latestDeploy = deployRecords?.DeployRecords?.[0] ?? null;
+                    if (!latestDeploy) {
+                        message = `Retrieved details for service '${serverName}'. No deploy records found yet.`;
+                    }
+                    else if (typeof latestDeploy.Status === 'string' && latestDeploy.Status.includes('failed')) {
+                        message = `Service '${serverName}' latest deploy failed. Please use queryCloudRun(action="getDeployLog") for details.`;
+                    }
+                    else if (typeof latestDeploy.Status === 'string' && latestDeploy.Status.includes('creating')) {
+                        message = `Service '${serverName}' latest deploy is still running. Please check again later or query the deploy log for progress.`;
+                    }
+                    else {
+                        message = `Retrieved details for service '${serverName}'. Latest service status: ${result.BaseInfo?.Status || 'unknown'}, latest deploy status: ${latestDeploy.Status || 'unknown'}.`;
+                    }
+                }
+                catch (error) {
+                    const baseMessage = error instanceof Error ? error.message : String(error);
+                    deployRecordsWarning = `Failed to fetch deploy records: ${baseMessage}`;
+                    message = `Retrieved details for service '${serverName}', but deploy records are currently unavailable.`;
+                }
                 return {
                     content: [
                         {
@@ -112044,9 +112089,11 @@ function registerCloudRunTools(server) {
                             text: JSON.stringify({
                                 success: true,
                                 data: {
-                                    service: result
+                                    service: result,
+                                    latestDeploy,
+                                    ...(deployRecordsWarning ? { deployRecordsWarning } : {})
                                 },
-                                message: `Retrieved details for service '${serverName}'`
+                                message
                             }, null, 2)
                         }
                     ]
@@ -112069,6 +112116,79 @@ function registerCloudRunTools(server) {
                     ]
                 };
             }
+            case 'getDeployLog': {
+                const serverName = getCloudRunQueryServerName(input);
+                if (!serverName) {
+                    return {
+                        content: [
+                            {
+                                type: "text",
+                                text: JSON.stringify({
+                                    success: false,
+                                    error: "detailServerName or serverName is required for getDeployLog action",
+                                    message: "Please provide detailServerName or serverName."
+                                }, null, 2)
+                            }
+                        ]
+                    };
+                }
+                const deployRecords = await cloudrunService.getDeployRecords({ serverName });
+                const latestDeploy = deployRecords?.DeployRecords?.[0];
+                if (!latestDeploy) {
+                    return {
+                        content: [
+                            {
+                                type: "text",
+                                text: JSON.stringify({
+                                    success: false,
+                                    error: `Service '${serverName}' has no deploy records.`,
+                                    message: "Please deploy the service first, then query the deploy log again."
+                                }, null, 2)
+                            }
+                        ]
+                    };
+                }
+                const buildId = input.buildId ?? latestDeploy.BuildId;
+                const buildLogResult = await cloudrunService.getBuildLog({
+                    serverName,
+                    buildId,
+                });
+                let processLogs = [];
+                let processLogsWarning;
+                if (latestDeploy.RunId && typeof cloudrunService.getProcessLog === 'function') {
+                    try {
+                        const processLogResult = await cloudrunService.getProcessLog({
+                            RunId: latestDeploy.RunId,
+                        });
+                        processLogs = processLogResult?.Logs || [];
+                    }
+                    catch (error) {
+                        processLogsWarning = error instanceof Error ? error.message : String(error);
+                    }
+                }
+                const buildLogText = typeof buildLogResult?.Log?.Text === 'string' ? buildLogResult.Log.Text : '';
+                const processLogText = Array.isArray(processLogs) && processLogs.length > 0 ? normalizeProcessLogText(processLogs) : '';
+                const combinedLogText = [buildLogText, processLogText].filter(Boolean).join('\n');
+                return {
+                    content: [
+                        {
+                            type: "text",
+                            text: JSON.stringify({
+                                success: true,
+                                data: {
+                                    buildId,
+                                    deployRecord: latestDeploy,
+                                    buildLog: buildLogResult?.Log || null,
+                                    processLogs,
+                                    combinedLogText,
+                                    ...(processLogsWarning ? { processLogsWarning } : {})
+                                },
+                                message: `Retrieved deploy log for service '${serverName}'`
+                            }, null, 2)
+                        }
+                    ]
+                };
+            }
             default:
                 throw new Error(`Unsupported action: ${input.action}`);
         }
@@ -112336,6 +112456,7 @@ for await (let x of res.textStream) {
                         name: input.serverName
                     }
                 };
+                const consoleUrl = `https://tcb.cloud.tencent.com/dev?envId=${currentEnvId}#/platform-run/service/detail?serverName=${input.serverName}&tabId=overview&envId=${currentEnvId}`;
                 try {
                     fs_1.default.writeFileSync(cloudbasercPath, JSON.stringify(cloudbasercContent, null, 2));
                 }
@@ -112379,8 +112500,6 @@ for await (let x of res.textStream) {
                     }
                     // Extract project name from targetPath
                     const projectName = path_1.default.basename(targetPath);
-                    // Build console URL
-                    const consoleUrl = `https://tcb.cloud.tencent.com/dev?envId=${currentEnvId}#/platform-run/service/detail?serverName=${input.serverName}&tabId=overview&envId=${currentEnvId}`;
                     // Send notification
                     await (0, notification_js_1.sendDeployNotification)(server, {
                         deployType: 'cloudrun',
@@ -112402,12 +112521,13 @@ for await (let x of res.textStream) {
                                 success: true,
                                 data: {
                                     serviceName: input.serverName,
-                                    status: 'deployed',
+                                    status: 'deploying',
                                     deployPath: targetPath,
                                     serverType: serverType,
-                                    cloudbasercGenerated: true
+                                    cloudbasercGenerated: true,
+                                    consoleUrl
                                 },
-                                message: `Successfully deployed ${serverType} service '${input.serverName}' from ${targetPath}`
+                                message: `Triggered deployment for ${serverType} service '${input.serverName}' from ${targetPath}. You can follow the progress in ${consoleUrl}`
                             }, null, 2)
                         }
                     ]
@@ -133564,7 +133684,7 @@ class TelemetryReporter {
         const nodeVersion = process.version; // Node.js版本
         const arch = os_1.default.arch(); // 系统架构
         // 从构建时注入的版本号获取MCP版本信息
-        const mcpVersion = process.env.npm_package_version || "2.17.0" || 0;
+        const mcpVersion = process.env.npm_package_version || "2.18.0" || 0;
         return {
             userAgent: `${osType} ${osRelease} ${arch} ${nodeVersion} CloudBase-MCP/${mcpVersion}`,
             deviceId: this.deviceId,
@@ -177816,7 +177936,6 @@ var __importDefault = (this && this.__importDefault) || function (mod) {
 };
 Object.defineProperty(exports, "__esModule", ({ value: true }));
 exports.resolveSkillSearchRoots = resolveSkillSearchRoots;
-exports.getClaudePrompt = getClaudePrompt;
 exports.registerRagTools = registerRagTools;
 const adm_zip_1 = __importDefault(__webpack_require__(30283));
 const fs = __importStar(__webpack_require__(79748));
@@ -177825,7 +177944,6 @@ const os = __importStar(__webpack_require__(21820));
 const path = __importStar(__webpack_require__(39902));
 const zod_1 = __webpack_require__(21614);
 const cloudbase_manager_js_1 = __webpack_require__(3431);
-const claude_prompt_js_1 = __webpack_require__(68359);
 const json_content_js_1 = __webpack_require__(4365);
 const logger_js_1 = __webpack_require__(13039);
 // 1. 枚举定义
@@ -178191,34 +178309,6 @@ async function downloadResources() {
     });
     return resourceDownloadPromise;
 }
-// Get CLAUDE.md prompt content
-// Priority: 1. From downloaded template, 2. Fallback to embedded constant
-async function getClaudePrompt() {
-    try {
-        // Try to get from downloaded template
-        const extractDir = await downloadWebTemplate();
-        const claudePath = path.join(extractDir, "CLAUDE.md");
-        try {
-            const content = await fs.readFile(claudePath, "utf8");
-            return content;
-        }
-        catch (error) {
-            // CLAUDE.md not found in template, use fallback
-            (0, logger_js_1.warn)("[getClaudePrompt] CLAUDE.md not found in template, using fallback", {
-                error,
-                path: claudePath,
-            });
-            return claude_prompt_js_1.FALLBACK_CLAUDE_PROMPT;
-        }
-    }
-    catch (error) {
-        // Template download failed, use fallback
-        (0, logger_js_1.warn)("[getClaudePrompt] Template download failed, using fallback", {
-            error,
-        });
-        return claude_prompt_js_1.FALLBACK_CLAUDE_PROMPT;
-    }
-}
 async function registerRagTools(server) {
     // 联网搜索
     server.registerTool?.("searchWeb", {
@@ -187740,323 +187830,6 @@ const fallback = {
 module.exports = isUnicodeSupported() ? main : fallback;
 
 
-/***/ }),
-
-/***/ 68359:
-/***/ ((__unused_webpack_module, exports) => {
-
-"use strict";
-
-Object.defineProperty(exports, "__esModule", ({ value: true }));
-exports.FALLBACK_CLAUDE_PROMPT = void 0;
-// Fallback CLAUDE.md prompt content
-// This is used when template download fails or CLAUDE.md is not found in the template
-exports.FALLBACK_CLAUDE_PROMPT = `---
-description: CloudBase AI Development Rules Guide - Provides scenario-based best practices to ensure development quality
-globs: *
-alwaysApply: true
----
-
-# CloudBase AI Development Rules Guide
-
-## Quick Reference for AI
-
-**⚠️ CRITICAL: Read this section first based on your project type**
-
-### When Developing a Web Project:
-1. **Environment Check**: Query environment info only when the task actually needs environment metadata, deployment, or an env ID. For existing applications with active TODOs or unfinished handlers, do not spend turns on hosting or domain queries unless the user explicitly asks for deployment.
-1. **Execution Mode for Existing-Code Tasks**: If the task is to complete an existing application, wire TODO logic, or repair a broken flow, do **not** enter design-only, brainstorming-only, or spec-only flows first. Gather only the minimum context needed, then implement directly. Do not stop after “project exploration complete”.
-1. **Existing File Focus (MANDATORY)**: For an existing Web app with active pages or TODO-bearing files, do not broad-scan the whole repo before coding. First inspect only the task-critical files: \`src/lib/backend.*\`, \`src/lib/auth.*\`, \`src/lib/cms-service.*\`, \`src/lib/storage-service.*\`, and the page/components that already consume those APIs. Then implement those TODOs before doing any wide repo exploration.
-1. **Task Tool Discipline**: For targeted repair tasks, do not spend many turns in \`TaskCreate\`, \`TaskUpdate\`, or project-management loops. At most keep one short checklist. After that, write code. Do not let task-management consume the turn budget.
-1. **No README / UI-Design Detour For Existing Apps**: If the repo already contains the target pages and only backend TODOs are missing, skip README-driven discovery and skip UI-design workflows unless the task explicitly asks for a visual redesign. Backend wiring is the priority.
-1. **No Broad Grep / Glob Sweep**: In targeted repair tasks, do not recursively Grep / Glob the whole repo for long periods. Open the known TODO-bearing files directly and start editing.
-3. **⚠️ UI Design (CRITICAL)**: **MUST read \`rules/ui-design/rule.md\` FIRST before generating any page, interface, component, or style** - This is NOT optional. You MUST explicitly read this file and output the design specification before writing any UI code.
-4. **Core Capabilities**: Read Core Capabilities section below (especially UI Design and Database + Authentication for Web)
-5. **Platform Rules**: Read \`rules/web-development/rule.md\` for platform-specific rules (SDK integration, static hosting, build configuration)
-6. **Authentication**: Read \`rules/auth-web/rule.md\` - **MUST use Web SDK built-in authentication**
-   - \`accessKey\` can only be a real Publishable Key obtained from CloudBase auth/app config. Never use \`envId\`, a username, or any placeholder string as \`accessKey\`.
-   - If you do not have a real Publishable Key yet, do not fabricate one. First query or configure auth readiness, or initialize without \`accessKey\` if the login flow itself is what will establish end-user identity.
-7. **Cloud Storage (when files are uploaded from browser code)**: Read \`rules/cloud-storage-web/rule.md\` before implementing upload / preview / temp URL flows. For local dev origins (for example Vite on \`127.0.0.1\` / \`localhost\`), query current security domains first and compare against the returned whitelist entry format (usually \`host:port\`, such as \`127.0.0.1:4173\` or \`localhost:5173\`). If \`envQuery(action="domains")\` reports missing local entries or returns a \`next_step\`, execute that \`envDomainManagement\` step before relying on \`app.uploadFile()\`. After upload, do not handcraft a storage URL from \`envId\`, bucket domain, or \`cloudPath\`; resolve an actual browser-usable URL through \`app.getTempFileURL()\` using the returned \`fileID\`.
-7. **Database**: 
-   - NoSQL: \`rules/no-sql-web-sdk/rule.md\`
-   - MySQL: \`rules/relational-database-web/rule.md\` + \`rules/relational-database-mcp/rule.md\`
-
-### When Developing a Mini Program Project:
-1. **Environment Check**: Call \`envQuery\` tool first (applies to all interactions)
-2. **⚠️ UI Design (CRITICAL)**: **MUST read \`rules/ui-design/rule.md\` FIRST before generating any page, interface, component, or style** - This is NOT optional. You MUST explicitly read this file and output the design specification before writing any UI code.
-3. **Core Capabilities**: Read Core Capabilities section below (especially UI Design and Database + Authentication for Mini Program)
-4. **Platform Rules**: Read \`rules/miniprogram-development/rule.md\` for platform-specific rules (project structure, WeChat Developer Tools, wx.cloud usage)
-5. **Authentication**: Read \`rules/auth-wechat/rule.md\` - **Naturally login-free, get OPENID in cloud functions**
-6. **Database**: 
-   - NoSQL: \`rules/no-sql-wx-mp-sdk/rule.md\`
-   - MySQL: \`rules/relational-database-mcp/rule.md\` (via MCP tools)
-
----
-
-## Core Capabilities (Must Be Done Well)
-
-As the most important part of application development, the following four core capabilities must be done well, without needing to read different rules for different platforms:
-
-### 1. ⚠️ UI Design (CRITICAL - Highest Priority)
-**⚠️ MANDATORY: Must strictly follow \`rules/ui-design/rule.md\` rules for ALL design work**
-
-**🚨 CRITICAL ENFORCEMENT: You MUST explicitly read the file \`rules/ui-design/rule.md\` before generating ANY UI code. This is NOT a suggestion - it is a MANDATORY requirement.**
-
-**Before generating ANY page, interface, component, or style:**
-1. **MUST FIRST explicitly read \`rules/ui-design/rule.md\` file** - Use file reading tools to read this file, do NOT skip this step
-2. **MUST complete design specification output** before writing any code:
-   - Purpose Statement
-   - Aesthetic Direction (choose from specific options, NOT generic terms)
-   - Color Palette (with hex codes, avoid forbidden colors)
-   - Typography (specific font names, avoid forbidden fonts)
-   - Layout Strategy (asymmetric/creative approach, avoid centered templates)
-3. **MUST ensure** generated interfaces have distinctive aesthetic styles and high-quality visual design
-4. **MUST avoid** generic AI aesthetics (common fonts, clichéd color schemes, templated designs)
-
-**This applies to ALL tasks involving:**
-- Page generation
-- Interface creation
-- Component design
-- Style/visual effects
-- Any frontend visual elements
-
-**⚠️ VIOLATION DETECTION: If you find yourself writing UI code without first reading \`rules/ui-design/rule.md\`, STOP immediately and read the file first.**
-
-### 2. Database + Authentication
-**Strengthen database and authentication capabilities**
-
-**Authentication**:
-- **Web Projects**: 
-  - Must use CloudBase Web SDK built-in authentication, refer to \`rules/auth-web/rule.md\`
-  - For username-style accounts, use \`auth.signUp({ username, password })\` and \`auth.signInWithPassword({ username, password })\`
-  - Do not use email-only helpers or email-only input semantics when the account identifier is a plain username string
-  - When an existing schema or fixture already provides role/profile metadata in \`users\`, \`profiles\`, or \`user_roles\`, reuse that collection instead of inventing yet another one. In role-based content-management flows, a \`user_roles\` collection keyed by \`uid\` is an acceptable and validated pattern.
-  - For browser-side file upload / preview flows, read \`rules/cloud-storage-web/rule.md\`; on local dev origins, verify the required local host entries (for example \`127.0.0.1:4173\`, \`localhost:5173\`) are already in the environment security-domain whitelist before depending on \`app.uploadFile()\`. If \`envQuery(action="domains")\` returns missing local entries or a \`next_step\`, execute that \`envDomainManagement\` action first. After upload, use \`app.getTempFileURL()\` to resolve the preview/download URL instead of constructing a URL string manually.
-  - Platform development rules: Refer to \`rules/web-development/rule.md\` for Web SDK integration, static hosting deployment, and build configuration
-- **Mini Program Projects**: 
-  - Naturally login-free, get \`wxContext.OPENID\` in cloud functions, refer to \`rules/auth-wechat/rule.md\`
-  - Platform development rules: Refer to \`rules/miniprogram-development/rule.md\` for mini program project structure, WeChat Developer Tools integration, and CloudBase capabilities
-- **Node.js Backend**: Refer to \`rules/auth-nodejs/rule.md\`
-
-**Database Operations**:
-- **Web Projects**:
-  - NoSQL Database: Refer to \`rules/no-sql-web-sdk/rule.md\`
-  - For content collections that only need owner-only writes, simple permissions such as \`READONLY\` can be a good fit. But for CMS-style collections that require **app-level admin users** to edit/delete any record while editors can only edit/delete their own records, a \`CUSTOM\` rule is expected.
-  - A validated CMS article rule shape is: \`{"read":"auth.uid != null","create":"auth.uid != null","update":"auth.uid != null && (get('database.user_roles.' + auth.uid).role == 'admin' || doc.authorId == auth.uid)","delete":"auth.uid != null && (get('database.user_roles.' + auth.uid).role == 'admin' || doc.authorId == auth.uid)"}\`.
-  - For that CMS pattern, frontend writes can stay on \`.doc(id).update()\` / \`.doc(id).remove()\`. Do not force a \`where(...)\` rewrite unless the task explicitly requires a different rule design.
-  - MySQL Relational Database: Refer to \`rules/relational-database-web/rule.md\` (Web application development) and \`rules/relational-database-mcp/rule.md\` (Management via MCP tools)
-  - Platform development rules: Refer to \`rules/web-development/rule.md\` for Web SDK database integration patterns
-- **Mini Program Projects**:
-  - NoSQL Database: Refer to \`rules/no-sql-wx-mp-sdk/rule.md\`
-  - MySQL Relational Database: Refer to \`rules/relational-database-mcp/rule.md\` (via MCP tools)
-  - Platform development rules: Refer to \`rules/miniprogram-development/rule.md\` for mini program database integration and wx.cloud usage
-- **Data Model Creation** (Universal): Refer to \`rules/data-model-creation/rule.md\`
-
-### 3. Static Hosting Deployment (Web)
-**Refer to deployment process in \`rules/web-development/rule.md\`**
-- Use CloudBase static hosting after build completion
-- Deploy using \`uploadFiles\` tool
-- \`uploadFiles\` is only for static hosting deployment; do not use it for COS / cloud storage uploads. For storage objects, use \`manageStorage(action="upload")\`
-- If the task is local verification or an unfinished application repair with a dev server workflow, skip static hosting deployment unless the user explicitly asks for a deployed URL
-- Remind users that CDN has a few minutes of cache after deployment
-- Generate markdown format access links with random queryString
-
-### 4. Backend Deployment (Cloud Functions or CloudRun)
-**Refer to \`rules/cloudrun-development/rule.md\`**
-- **Cloud Function Deployment**: Prefer \`queryFunctions\` to inspect current state, then use \`manageFunctions\` with \`action="createFunction"\` or \`action="updateFunctionCode"\`.
-- In agent / non-interactive runs, treat \`manageFunctions\` as the default deployment path for both Event and HTTP functions; do not fall back to CLI login flows unless MCP tools are unavailable.
-- For HTTP functions, create or update them through \`manageFunctions\` with \`func.type="HTTP"\` instead of relying on \`tcb fn deploy\` as the primary path.
-- **CloudRun Deployment**: Use \`manageCloudRun\` tool for containerized deployment
-- Ensure backend code supports CORS, prepare Dockerfile (for container type)
-
-## Development Process Standards
-
-**Important: To ensure development quality, AI must complete the following steps before starting work:**
-
-### 0. Environment Check (First Step)
-After user inputs any content, first check CloudBase environment status:
-- Ensure current CloudBase environment ID is known
-- If not present in conversation history and the task needs env metadata or deployment, call \`envQuery\` tool with parameter \`action=info\` to query current environment information and environment ID
-- **Important**: When environment ID configuration is involved in code later, automatically use the queried environment ID, no need for manual user input
-
-### 1. Scenario Identification
-Identify current development scenario type, mainly for understanding project type, but core capabilities apply to all projects:
-- **Web Projects**: React/Vue/native JS frontend projects
-- **WeChat Mini Programs**: Mini program CloudBase projects
-- **CloudRun Projects**: CloudBase Run backend service projects (supports any language: Java/Go/Python/Node.js/PHP/.NET, etc.)
-- **Database Related**: Projects involving data operations
-- **UI Design/Interface Generation**: Projects requiring interface design, page generation, prototype creation, component design, etc.
-
-### 2. Platform-Specific Quick Guide
-
-**Web Projects - Required Rule Files:**
-- \`rules/web-development/rule.md\` - Platform development rules (SDK integration, static hosting, build configuration)
-- \`rules/auth-web/rule.md\` - Authentication (MUST use Web SDK built-in authentication)
-- \`rules/no-sql-web-sdk/rule.md\` - NoSQL database operations
-- \`rules/relational-database-web/rule.md\` - MySQL database operations (Web)
-- \`rules/relational-database-mcp/rule.md\` - MySQL database management (MCP tools)
-- \`rules/cloudbase-platform/rule.md\` - Universal CloudBase platform knowledge
-
-**Mini Program Projects - Required Rule Files:**
-- \`rules/miniprogram-development/rule.md\` - Platform development rules (project structure, WeChat Developer Tools, wx.cloud)
-- \`rules/auth-wechat/rule.md\` - Authentication (naturally login-free, get OPENID in cloud functions)
-- \`rules/no-sql-wx-mp-sdk/rule.md\` - NoSQL database operations
-- \`rules/relational-database-mcp/rule.md\` - MySQL database operations (via MCP tools)
-- \`rules/cloudbase-platform/rule.md\` - Universal CloudBase platform knowledge
-
-**Universal Rule Files (All Projects):**
-- **⚠️ \`rules/ui-design/rule.md\`** - **MANDATORY - HIGHEST PRIORITY** - Must read FIRST before any UI/page/component/style generation
-- \`rules/data-model-creation/rule.md\` - Data model creation and MySQL modeling
-- \`rules/spec-workflow/rule.md\` - Standard software engineering process (if needed)
-
-### 3. Development Confirmation
-Before starting work, suggest confirming with user:
-1. "I identify this as a [scenario type] project"
-2. "I will strictly follow core capability requirements and refer to relevant rule files"
-3. "Please confirm if my understanding is correct"
-
-## Core Behavior Rules
-0. **Existing-Code Completion Bias**: For existing applications with TODOs or broken flows, implementation is the goal. Do not hand off to a design-only phase, do not stop at exploration, and do not treat a summary of findings as task completion. After minimal context gathering, write code and wire the real backend flow.
-0. **No Broad Exploration For TODO Apps**: When the repo already exposes TODO markers in backend integration files, do not keep globbing, summarizing, or reading unrelated files. Open the TODO-bearing files and implement them.
-0. **No Task-Loop Derailment**: In targeted repair tasks, avoid repeated \`TaskCreate\` / \`TaskUpdate\` cycles. One minimal checklist is enough; the rest of the budget should go to file edits, tool calls, and verification.
-0. **Do Not Delegate Or Defer**: In targeted repair tasks, do not invoke design copilots, brainstorming helpers, or delegated agent flows before the core TODO files are implemented. Finish the direct file edits first.
-1. **Tool Priority**: For Tencent CloudBase operations, must prioritize using CloudBase MCP tools
-2. **Project Understanding**: First read current project's README.md, follow project instructions for development. Exception: for existing applications where the missing work is clearly in known backend integration files, skip README-first and go straight to those files.
-4. **Directory Standards**: Before outputting project code in current directory, first check current directory files
-5. **Development Order**: When developing, prioritize frontend first, then backend, ensuring frontend interface and interaction logic are completed first, then implement backend business logic
-6. **⚠️ UI Design Rules Mandatory Application**: When tasks involve generating pages, interfaces, components, styles, or any frontend visual elements, **MUST FIRST explicitly read the file \`rules/ui-design/rule.md\` using file reading tools**, then strictly follow the rule file, ensuring generated interfaces have distinctive aesthetic styles and high-quality visual design, avoiding generic AI aesthetics. **You MUST output the design specification before writing any UI code.** Exception: for existing applications where page structure is already fixed and only backend integration is missing, do not trigger the UI-design workflow.
-7. **Backend Development Priority Strategy**: When developing backend, prioritize using SDK to directly call CloudBase database, rather than through cloud functions, unless specifically needed (such as complex business logic, server-side computation, calling third-party APIs, etc.)
-8. **Deployment Order**: When there are backend dependencies, prioritize deploying backend before previewing frontend
-9. **Interactive Confirmation**: Clarify requirements when needed, and confirm before executing high-risk operations
-10. **Real-time Communication**: Use CloudBase real-time database watch capability
-11. **⚠️ Authentication Rules**: When users develop projects, if user login authentication is needed, must use built-in authentication functions, must strictly distinguish authentication methods by platform
-   - **Web Projects**: **MUST use CloudBase Web SDK built-in authentication** (e.g., \`auth.toDefaultLoginPage()\`), refer to \`rules/auth-web/rule.md\`
-   - **Username-style Web accounts**: Use \`auth.signUp({ username, password })\` for registration and \`auth.signInWithPassword({ username, password })\` for login. Do not use \`signInWithEmailAndPassword\` / \`signUpWithEmailAndPassword\` when the identifier is not an email address.
-   - **Web initialization**: Only set \`accessKey\` when you have a real Publishable Key. Never set \`accessKey: envId\` or any made-up string.
-   - **Mini Program Projects**: **Naturally login-free**, get \`wxContext.OPENID\` in cloud functions, refer to \`rules/auth-wechat/rule.md\`
-
-## Development Workflow
-
-### Development
-
-1. **Project Bootstrap Discipline**: 
-   - Prefer the existing project structure and scripts when they already exist
-   - For new projects, keep the initial structure consistent and avoid mixing unrelated frameworks in one workspace
-   - If you bootstrap or copy an existing starter manually, hidden files and project config must be carried over as well
-
-2. **⚠️ UI Design Document Reading (MANDATORY)**: 
-   - **Before generating ANY page, interface, component, or style, MUST FIRST explicitly read the file \`rules/ui-design/rule.md\` using file reading tools**
-   - **MUST output the design specification** (Purpose Statement, Aesthetic Direction, Color Palette, Typography, Layout Strategy) before writing any UI code
-   - This is NOT optional - you MUST read the file and follow the design thinking framework and frontend aesthetics guidelines
-   - Avoid generating generic AI aesthetic style interfaces
-
-3. **Mini Program TabBar Material Download - Download Remote Material Links**: Mini program Tabbar and other material images must use **png** format, must use downloadRemoteFile tool to download files locally. Can select from Unsplash, wikimedia (generally choose 500 size), Pexels, Apple official UI and other resources
-
-If remote links are needed in the application, can continue to call uploadFile to upload and obtain temporary access links and cloud storage cloudId
-
-3. **Query Professional Knowledge from Knowledge Base**: If uncertain about any CloudBase knowledge, can use searchKnowledgeBase tool to intelligently search CloudBase knowledge base (supports CloudBase and cloud functions, mini program frontend knowledge, etc.), quickly obtain professional documents and answers through vector search
-
-4. **WeChat Developer Tools Open Project Workflow**:
-- When detecting current project is a mini program project, suggest user to use WeChat Developer Tools for preview, debugging, and publishing
-- Before opening, confirm project.config.json has appid field configured. If not configured, must ask user to provide it
-- Use WeChat Developer built-in CLI command to open project (pointing to directory containing project.config.json):
-  - Windows: \`"C:\\Program Files (x86)\\Tencent\\微信web开发者工具\\cli.bat" open --project "项目根目录路径"\`
-  - macOS: \`/Applications/wechatwebdevtools.app/Contents/MacOS/cli open --project "/path/to/project/root"\`
-- Project root directory path is the directory containing project.config.json file
-
-### Deployment Process
-
-1. **Cloud Function Deployment Process**: Prefer \`queryFunctions\` to query current functions, then call \`manageFunctions\` with \`action="createFunction"\` or \`action="updateFunctionCode"\` to deploy cloud function code. In agent / non-interactive runs, keep deployment on MCP tools instead of CLI login flows. For HTTP functions, set \`func.type="HTTP"\` when creating them. Only need to point \`functionRootPath\` to the parent directory of the cloud function directory (for example, the absolute path of the \`cloudfunctions\` directory). No need for code compression or other preprocessing.
-
-2. **CloudRun Deployment Process**: For non-cloud function backend services (Java, Go, PHP, Python, Node.js, etc.), use manageCloudRun tool for deployment. Ensure backend code supports CORS, prepare Dockerfile, then call manageCloudRun for containerized deployment. For details, refer to \`rules/cloudrun-development/rule.md\`
-
-3. **Static Hosting Deployment Process**: Deploy using uploadFiles tool for static hosting only. If the task needs a COS object that must be queried or polled with the storage SDK, use \`manageStorage\` / \`queryStorage\` instead. For local verification or unfinished application repairs, do not deploy hosting unless the user explicitly asks for deployment. After deployment, remind users that CDN has a few minutes of cache. Can generate markdown format access links with random queryString. For details, refer to \`rules/web-development/rule.md\`
-
-### Documentation Generation Rules
-
-1. You will generate a README.md file after generating the project, containing basic project information, such as project name, project description. Most importantly, clearly explain the project architecture and involved CloudBase resources, so maintainers can refer to it for modification and maintenance
-2. After deployment, if it's a web project, can write the official deployment access address in the documentation
-
-### Configuration File Rules
-
-1. To help others who don't use AI understand what resources are available, can generate a cloudbaserc.json file after generation
-
-### MCP Interface Call Rules
-When calling MCP services, you need to fully understand the data types of all interfaces to be called, as well as return value types. If you're not sure which interface to call, first check the documentation and tool descriptions, then determine which interface and parameters to call based on the documentation and tool descriptions. Do not have incorrect method parameters or parameter type errors.
-
-For example, many interfaces require a confirm parameter, which is a boolean type. If you don't provide this parameter, or provide incorrect data type, the interface will return an error.
-
-### Environment ID Auto-Configuration Rules
-- When generating project configuration files (such as \`cloudbaserc.json\`, \`project.config.json\`, etc.), automatically use the environment ID queried by \`envQuery\`
-- In code examples involving environment ID, automatically fill in current environment ID, no need for manual user replacement
-- In deployment and preview related operations, prioritize using already queried environment information
-
-## Professional Rule File Reference
-
-**Note**: For detailed information, refer to the specific skill files. This section provides quick reference only.
-
-### Platform Development Skills
-- **Web**: \`rules/web-development/rule.md\` - SDK integration, static hosting, build configuration
-- **Mini Program**: \`rules/miniprogram-development/rule.md\` - Project structure, WeChat Developer Tools, wx.cloud
-- **CloudRun**: \`rules/cloudrun-development/rule.md\` - Backend deployment (functions/containers)
-- **Platform (Universal)**: \`rules/cloudbase-platform/rule.md\` - Environment, authentication, services
-
-### Authentication Skills
-- **Web**: \`rules/auth-web/rule.md\` - **MUST use Web SDK built-in authentication**
-- **Mini Program**: \`rules/auth-wechat/rule.md\` - **Naturally login-free, get OPENID in cloud functions**
-- **Node.js**: \`rules/auth-nodejs/rule.md\`
-- **HTTP API**: \`rules/auth-http-api/rule.md\`
-
-### Database Skills
-- **NoSQL (Web)**: \`rules/no-sql-web-sdk/rule.md\`
-- **NoSQL (Mini Program)**: \`rules/no-sql-wx-mp-sdk/rule.md\`
-- **MySQL (Web)**: \`rules/relational-database-web/rule.md\`
-- **MySQL (MCP)**: \`rules/relational-database-mcp/rule.md\`
-- **Data Model Creation**: \`rules/data-model-creation/rule.md\`
-
-### 🎨 ⚠️ UI Design Skill (CRITICAL - Read FIRST)
-- **\`rules/ui-design/rule.md\`** - **MANDATORY - HIGHEST PRIORITY**
-  - **MUST read FIRST before generating ANY interface/page/component/style**
-  - Design thinking framework, complete design process, frontend aesthetics guidelines
-  - **NO EXCEPTIONS**: All UI work requires reading this file first
-
-### Workflow Skills
-- **Spec Workflow**: \`rules/spec-workflow/rule.md\` - Standard software engineering process (requirements, design, tasks)
-
-## Development Quality Checklist
-
-To ensure development quality, recommend completing the following checks before starting tasks:
-
-### Recommended Steps
-0. **[ ] Environment Check**: Call \`envQuery\` tool to check CloudBase environment status (applies to all interactions)
-1. **[ ] Scenario Identification**: Clearly identify what type of project this is (Web/Mini Program/Database/UI)
-3. **[ ] Core Capability Confirmation**: Confirm all four core capabilities have been considered
-   - UI Design: Have you explicitly read the file \`rules/ui-design/rule.md\` using file reading tools?
-   - Database + Authentication: Have you referred to corresponding authentication and database skills?
-   - Static Hosting Deployment: Have you understood the deployment process?
-   - Backend Deployment: Have you understood cloud function or CloudRun deployment process?
-4. **[ ] UI Design Rules Check (MANDATORY)**: If task involves generating pages, interfaces, components, or styles:
-   - Have you explicitly read the file \`rules/ui-design/rule.md\` using file reading tools? (Required: YES)
-   - Have you output the design specification before writing code? (Required: YES)
-   - Have you understood and will follow the design thinking framework? (Required: YES)
-5. **[ ] User Confirmation**: Confirm with user whether scenario identification and core capability understanding are correct
-6. **[ ] Rule Execution**: Strictly follow core capability requirements and relevant rule files for development
-
-### ⚠️ Common Issues to Avoid
-- **❌ DO NOT skip reading UI design document** - Must explicitly read \`rules/ui-design/rule.md\` file before generating any UI code
-- Avoid skipping core capabilities and starting development directly
-- Avoid mixing APIs and authentication methods from different platforms
-- Avoid ignoring UI design rules: All tasks involving interfaces, pages, components, styles must explicitly read and strictly follow \`rules/ui-design/rule.md\`
-- Avoid ignoring database and authentication standards: Must use correct authentication methods and database operation methods
-- Important technical solutions should be confirmed with users
-
-### Quality Assurance
-If development is found to not comply with standards, can:
-- Point out specific issues
-- Require re-execution of rule check process
-- Clearly specify rule files that need to be followed`;
-
-
 /***/ }),
 
 /***/ 68385:
@@ -191778,7 +191551,7 @@ ${envIdSection}
 ## 环境信息
 - 操作系统: ${os_1.default.type()} ${os_1.default.release()}
 - Node.js版本: ${process.version}
-- MCP 版本：${process.env.npm_package_version || "2.17.0" || 0}
+- MCP 版本：${process.env.npm_package_version || "2.18.0" || 0}
 - 系统架构: ${os_1.default.arch()}
 - 时间: ${new Date().toISOString()}
 - 请求ID: ${requestId}
@@ -200363,7 +200136,7 @@ deleteCollection: 删除集合`),
     // writeNoSqlDatabaseContent
     server.registerTool?.("writeNoSqlDatabaseContent", {
         title: "修改 NoSQL 数据库数据记录",
-        description: "修改 NoSQL 数据库数据记录。可按 MongoDB updateOne/updateMany 的心智模型理解：部分更新必须使用 $set/$inc/$push 等更新操作符；如果直接传 { field: value } 这类普通对象，底层会把它当作替换内容，存在覆盖整条文档的风险。更新嵌套对象中的某个字段时必须使用点号路径（如 { \"$set\": { \"address.city\": \"shenzhen\" } }），若写成 { \"$set\": { \"address\": { \"city\": \"shenzhen\" } } } 则整个 address 对象会被替换，同级其他字段将丢失。若集合中的角色/档案文档会在前端通过 `db.collection(...).doc(uid)` 读取，请确保文档 `_id` 就是该 `uid`；不要用 `query={\"uid\":\"...\"}` + `upsert=true` 去更新 `users` / `profiles`，否则经常会生成一个不同的 `_id`，导致后续 `doc(uid)` 读取命中不到。",
+        description: "修改 NoSQL 数据库数据记录。可按 MongoDB updateOne/updateMany 的心智模型理解：部分更新必须使用 `$set`、`$inc`、`$push` 等更新操作符；如果直接传“字段到值的普通对象”这类内容，底层会把它当作替换内容，存在覆盖整条文档的风险。更新嵌套对象中的某个字段时必须使用点号路径，例如把 `address.city` 设为 `shenzhen`；如果把整个 `address` 对象作为 `$set` 的值传入，则整个 `address` 对象会被替换，同级其他字段将丢失。若集合中的角色/档案文档会在前端通过 `db.collection(...).doc(uid)` 读取，请确保文档 `_id` 就是该 `uid`；不要用按 `uid` 条件查询再配合 `upsert=true` 的方式去更新 `users` / `profiles`，否则经常会生成一个不同的 `_id`，导致后续 `doc(uid)` 读取命中不到。",
         inputSchema: {
             action: zod_1.z
                 .enum(["insert", "update", "delete"])
@@ -200384,7 +200157,7 @@ deleteCollection: 删除集合`),
             update: zod_1.z
                 .union([zod_1.z.object({}).passthrough(), zod_1.z.string()])
                 .optional()
-                .describe("更新内容(对象或字符串,推荐对象)(update 操作必填)。按 MongoDB 更新语义传入 MgoUpdate：部分更新请使用 $set/$inc/$unset/$push 等操作符，例如 { \"$set\": { \"status\": \"pending\" } }；不要直接传 { \"status\": \"pending\" }，否则可能替换整条文档。更新嵌套字段时必须用点号路径，如 { \"$set\": { \"address.city\": \"shenzhen\" } }，不要写成 { \"$set\": { \"address\": { \"city\": \"shenzhen\" } } }（会替换整个 address 对象）。"),
+                .describe("更新内容(对象或字符串,推荐对象)(update 操作必填)。按 MongoDB 更新语义传入 MgoUpdate：部分更新请使用 `$set`、`$inc`、`$unset`、`$push` 等操作符，例如使用 `$set` 更新 `status`；不要直接传“字段到值的普通对象”，否则可能替换整条文档。更新嵌套字段时必须使用点号路径，例如通过 `$set` 更新 `address.city`；不要把整个 `address` 对象作为 `$set` 的值传入，否则会替换整个 `address` 对象。"),
             isMulti: zod_1.z
                 .boolean()
                 .optional()
@@ -206320,7 +206093,7 @@ function registerSetupTools(server) {
         title: "下载项目模板",
         description: `自动下载并部署CloudBase项目模板。⚠️ **MANDATORY FOR NEW PROJECTS** ⚠️
 
-**CRITICAL**: This tool MUST be called FIRST when starting a new project.\n\n支持的模板:\n- react: React + CloudBase 全栈应用模板\n- vue: Vue + CloudBase 全栈应用模板\n- miniprogram: 微信小程序 + 云开发模板  \n- uniapp: UniApp + CloudBase 跨端应用模板\n- rules: 只包含AI编辑器配置文件（包含Cursor、WindSurf、CodeBuddy等所有主流编辑器配置），适合在已有项目中补充AI编辑器配置\n\n支持的IDE类型:\n- all: 下载所有IDE配置\n- cursor: Cursor AI编辑器\n- 其他IDE类型见下方列表\n\n注意：如果未传入 ide 参数且无法从环境变量检测到 IDE，将提示错误并要求传入 ide 参数\n- windsurf: WindSurf AI编辑器\n- codebuddy: CodeBuddy AI编辑器\n- claude-code: Claude Code AI编辑器\n- cline: Cline AI编辑器\n- gemini-cli: Gemini CLI\n- opencode: OpenCode AI编辑器\n- qwen-code: 通义灵码\n- baidu-comate: 百度Comate\n- openai-codex-cli: OpenAI Codex CLI\n- augment-code: Augment Code\n- github-copilot: GitHub Copilot\n- roocode: RooCode AI编辑器\n- tongyi-lingma: 通义灵码\n- trae: Trae AI编辑器\n- qoder: Qoder AI编辑器\n- antigravity: Google Antigravity AI编辑器\n- vscode: Visual Studio Code\n- kiro: Kiro AI编辑器\n- aider: Aider AI编辑器\n\n特别说明：\n- rules 模板会自动包含当前 mcp 版本号信息（版本号：${ true ? "2.17.0" : 0}），便于后续维护和版本追踪\n- 下载 rules 模板时，如果项目中已存在 README.md 文件，系统会自动保护该文件不被覆盖（除非设置 overwrite=true）`,
+**CRITICAL**: This tool MUST be called FIRST when starting a new project.\n\n支持的模板:\n- react: React + CloudBase 全栈应用模板\n- vue: Vue + CloudBase 全栈应用模板\n- miniprogram: 微信小程序 + 云开发模板  \n- uniapp: UniApp + CloudBase 跨端应用模板\n- rules: 只包含AI编辑器配置文件（包含Cursor、WindSurf、CodeBuddy等所有主流编辑器配置），适合在已有项目中补充AI编辑器配置\n\n支持的IDE类型:\n- all: 下载所有IDE配置\n- cursor: Cursor AI编辑器\n- 其他IDE类型见下方列表\n\n注意：如果未传入 ide 参数且无法从环境变量检测到 IDE，将提示错误并要求传入 ide 参数\n- windsurf: WindSurf AI编辑器\n- codebuddy: CodeBuddy AI编辑器\n- claude-code: Claude Code AI编辑器\n- cline: Cline AI编辑器\n- gemini-cli: Gemini CLI\n- opencode: OpenCode AI编辑器\n- qwen-code: 通义灵码\n- baidu-comate: 百度Comate\n- openai-codex-cli: OpenAI Codex CLI\n- augment-code: Augment Code\n- github-copilot: GitHub Copilot\n- roocode: RooCode AI编辑器\n- tongyi-lingma: 通义灵码\n- trae: Trae AI编辑器\n- qoder: Qoder AI编辑器\n- antigravity: Google Antigravity AI编辑器\n- vscode: Visual Studio Code\n- kiro: Kiro AI编辑器\n- aider: Aider AI编辑器\n\n特别说明：\n- rules 模板会自动包含当前 mcp 版本号信息（版本号：${ true ? "2.18.0" : 0}），便于后续维护和版本追踪\n- 下载 rules 模板时，如果项目中已存在 README.md 文件，系统会自动保护该文件不被覆盖（除非设置 overwrite=true）`,
         inputSchema: {
             template: zod_1.z
                 .enum(["react", "vue", "miniprogram", "uniapp", "rules"])
@@ -207612,6 +207385,8 @@ module.exports.sync = path => {
 "use strict";
 
 Object.defineProperty(exports, "__esModule", ({ value: true }));
+exports.buildVerificationUriComplete = buildVerificationUriComplete;
+exports.buildDeviceAuthChallengePayload = buildDeviceAuthChallengePayload;
 exports.getAuthProgressStateSync = getAuthProgressStateSync;
 exports.getAuthProgressState = getAuthProgressState;
 exports.resolveAuthOptions = resolveAuthOptions;
@@ -207640,6 +207415,54 @@ function normalizeOptionalString(value) {
     const trimmed = value.trim();
     return trimmed.length > 0 ? trimmed : undefined;
 }
+function buildVerificationUriComplete(deviceAuthInfo) {
+    const explicitComplete = normalizeOptionalString(deviceAuthInfo?.verification_uri_complete);
+    if (explicitComplete) {
+        return explicitComplete;
+    }
+    const verificationUri = normalizeOptionalString(deviceAuthInfo?.verification_uri);
+    const userCode = normalizeOptionalString(deviceAuthInfo?.user_code);
+    if (!verificationUri || !userCode) {
+        return undefined;
+    }
+    try {
+        const url = new URL(verificationUri);
+        const hash = url.hash.startsWith("#") ? url.hash.slice(1) : url.hash;
+        if (hash) {
+            const [hashPath, hashQuery = ""] = hash.split("?");
+            const hashParams = new URLSearchParams(hashQuery);
+            if (!hashParams.has("user_code")) {
+                hashParams.set("user_code", userCode);
+            }
+            url.hash = hashParams.toString()
+                ? `#${hashPath}?${hashParams.toString()}`
+                : `#${hashPath}`;
+            return url.toString();
+        }
+        if (!url.searchParams.has("user_code")) {
+            url.searchParams.set("user_code", userCode);
+        }
+        return url.toString();
+    }
+    catch {
+        if (verificationUri.includes("user_code=")) {
+            return verificationUri;
+        }
+        const separator = verificationUri.includes("?") ? "&" : "?";
+        return `${verificationUri}${separator}user_code=${encodeURIComponent(userCode)}`;
+    }
+}
+function buildDeviceAuthChallengePayload(deviceAuthInfo) {
+    if (!deviceAuthInfo) {
+        return undefined;
+    }
+    return {
+        user_code: deviceAuthInfo.user_code,
+        verification_uri: deviceAuthInfo.verification_uri,
+        verification_uri_complete: buildVerificationUriComplete(deviceAuthInfo),
+        expires_in: deviceAuthInfo.expires_in,
+    };
+}
 function normalizeAuthMode(value) {
     return value === "web" || value === "device" ? value : undefined;
 }
@@ -208784,7 +208607,7 @@ module.exports = toComparators
 "use strict";
 
 Object.defineProperty(exports, "__esModule", ({ value: true }));
-exports.DEFAULT_NODEJS_RUNTIME = exports.SUPPORTED_NODEJS_RUNTIMES = exports.formatRuntimeList = exports.RECOMMENDED_RUNTIMES = exports.DEFAULT_RUNTIME = exports.ALL_SUPPORTED_RUNTIMES = exports.SUPPORTED_RUNTIMES = exports.RAW_IDE_FILE_MAPPINGS = exports.simplifyEnvList = exports.envManager = exports.createCloudBaseManagerWithOptions = exports.resetCloudBaseManagerCache = exports.getEnvId = exports.getCloudBaseManager = exports.shouldRegisterTool = exports.getCloudModeStatus = exports.enableCloudMode = exports.isCloudMode = exports.logout = exports.getLoginState = exports.warn = exports.error = exports.info = exports.reportToolCall = exports.reportToolkitLifecycle = exports.telemetryReporter = exports.StdioServerTransport = exports.getDefaultServer = exports.createCloudBaseMcpServer = void 0;
+exports.validateTimerCron = exports.DEFAULT_NODEJS_RUNTIME = exports.SUPPORTED_NODEJS_RUNTIMES = exports.formatRuntimeList = exports.RECOMMENDED_RUNTIMES = exports.DEFAULT_RUNTIME = exports.ALL_SUPPORTED_RUNTIMES = exports.SUPPORTED_RUNTIMES = exports.RAW_IDE_FILE_MAPPINGS = exports.simplifyEnvList = exports.envManager = exports.createCloudBaseManagerWithOptions = exports.resetCloudBaseManagerCache = exports.getEnvId = exports.getCloudBaseManager = exports.shouldRegisterTool = exports.getCloudModeStatus = exports.enableCloudMode = exports.isCloudMode = exports.logout = exports.getLoginState = exports.warn = exports.error = exports.info = exports.reportToolCall = exports.reportToolkitLifecycle = exports.telemetryReporter = exports.StdioServerTransport = exports.getDefaultServer = exports.createCloudBaseMcpServer = void 0;
 exports.getInteractiveServerAsync = getInteractiveServerAsync;
 // CloudBase MCP Server Library
 var server_js_1 = __webpack_require__(31422);
@@ -208824,6 +208647,7 @@ Object.defineProperty(exports, "RECOMMENDED_RUNTIMES", ({ enumerable: true, get:
 Object.defineProperty(exports, "formatRuntimeList", ({ enumerable: true, get: function () { return functions_js_1.formatRuntimeList; } }));
 Object.defineProperty(exports, "SUPPORTED_NODEJS_RUNTIMES", ({ enumerable: true, get: function () { return functions_js_1.SUPPORTED_NODEJS_RUNTIMES; } }));
 Object.defineProperty(exports, "DEFAULT_NODEJS_RUNTIME", ({ enumerable: true, get: function () { return functions_js_1.DEFAULT_NODEJS_RUNTIME; } }));
+Object.defineProperty(exports, "validateTimerCron", ({ enumerable: true, get: function () { return functions_js_1.validateTimerCron; } }));
 /**
  * Get interactive server instance (CommonJS compatible)
  */
@@ -256291,7 +256115,8 @@ Object.defineProperty(exports, "__esModule", ({ value: true }));
 exports.resolveWebCredential = exports.resolveCredential = exports.checkAuth = void 0;
 const cloud_api_1 = __webpack_require__(2090);
 const config_1 = __webpack_require__(88472);
-// 调用 env:list 接口，检查密钥是否有效
+// 调用 CheckTcbService 接口，检查密钥是否有效
+// 相比 DescribeEnvs，该接口不会返回环境列表，仅验证登录态，性能更好
 function checkAuth(credential, options = {}) {
     return __awaiter(this, void 0, void 0, function* () {
         // 兼容原临时秘钥
@@ -256310,7 +256135,7 @@ function checkAuth(credential, options = {}) {
         });
         return tcbService.request({
             region,
-            action: 'DescribeEnvs'
+            action: 'CheckTcbService'
         });
     });
 }