@cloudbase/manager-node 5.6.7 → 5.7.0-beta.0

package/types/deploy/function/preflight.d.ts

@@ -0,0 +1,9 @@
+import { ICheckReport, INormalizedDeployConfig } from '../types';
+/**
+ * 执行部署前本地检查
+ *
+ * 目前仅 HTTP 代码包部署有文件系统前置条件；其它策略返回空报告，表示本阶段无需检查。
+ * base64Code 来源无本地目录，跳过文件检查。
+ * @returns 本地检查报告，聚合全部问题
+ */
+export declare function runLocalPreflight(config: INormalizedDeployConfig): ICheckReport;

package/types/deploy/types.d.ts

@@ -0,0 +1,429 @@
+import { ICloudFunctionTrigger, IFunctionImageConfig, IFunctionVPC } from '../interfaces';
+/**
+ * 镜像 HTTP 函数固定监听端口
+ * SCF HTTP 自定义镜像函数要求容器监听 9000
+ */
+export declare const IMAGE_FUNCTION_PORT = 9000;
+/**
+ * 镜像构建默认目标平台
+ * SCF 运行环境为 linux/amd64，Apple Silicon 也必须显式构建该平台
+ */
+export declare const DEFAULT_IMAGE_PLATFORM = "linux/amd64";
+/** 默认 Dockerfile 名称，相对于构建上下文 */
+export declare const DEFAULT_DOCKERFILE = "Dockerfile";
+/** HTTP 函数支持的构建策略 */
+export type HttpBuildStrategy = 'zip' | 'cloud' | 'local' | 'image';
+/** 函数运行模型 */
+export type FunctionRuntimeModel = 'Event' | 'HTTP';
+/** 自定义镜像运行时标识 */
+export declare const CUSTOM_IMAGE_RUNTIME = "CustomImage";
+/** 部署计划的粗粒度动作 */
+export type DeployActionKind = 'create' | 'update' | 'replace' | 'noop';
+/** 部署计划中的细粒度操作 */
+export type DeployOperation = 'create-function' | 'update-code' | 'update-config' | 'replace-function' | 'configure-access' | 'configure-gateway';
+/** 统一进度阶段 */
+export type DeployStage = 'validate' | 'preflight' | 'plan' | 'pack' | 'upload' | 'build' | 'push' | 'deploy-function' | 'wait-active' | 'configure-access' | 'configure-gateway' | 'done';
+/** 单项检查结论 */
+export type CheckStatus = 'pass' | 'warn' | 'fail';
+/**
+ * 单项检查结果
+ * 配置契约守卫与后续 Preflight 复用同一结构，便于上层统一展示
+ */
+export interface ICheckResult {
+    /** 稳定错误码，供上层做本地化和引导 */
+    id: string;
+    status: CheckStatus;
+    /** 简短结论 */
+    summary: string;
+    /** 详细信息，不得包含凭证 */
+    detail?: string;
+    /** 可执行的修复建议 */
+    remediation?: string;
+    docsUrl?: string;
+    /** 该问题是否可以通过切换到云端构建规避 */
+    canFallbackToCloud?: boolean;
+}
+/** 检查报告 */
+export interface ICheckReport {
+    /** config 表示纯配置契约校验；local/cloud 表示环境与云资源检查 */
+    scope: 'config' | 'local' | 'cloud';
+    strategy?: HttpBuildStrategy;
+    /** 是否没有 fail 项 */
+    ready: boolean;
+    checks: ICheckResult[];
+    /** 建议改用的策略 */
+    recommendedStrategy?: 'cloud';
+}
+/** 函数部署错误码 */
+export declare const FUNCTION_DEPLOY_ERROR: {
+    readonly CONFIG_INVALID: "CONFIG_INVALID";
+    readonly CONFIG_NAME_INVALID: "CONFIG_NAME_INVALID";
+    readonly CONFIG_TYPE_INVALID: "CONFIG_TYPE_INVALID";
+    readonly CONFIG_STRATEGY_INVALID: "CONFIG_STRATEGY_INVALID";
+    readonly CONFIG_TIMEOUT_INVALID: "CONFIG_TIMEOUT_INVALID";
+    readonly CONFIG_MEMORY_SIZE_INVALID: "CONFIG_MEMORY_SIZE_INVALID";
+    readonly CONFIG_ENV_VARIABLE_INVALID: "CONFIG_ENV_VARIABLE_INVALID";
+    readonly EVENT_IMAGE_NOT_SUPPORTED: "EVENT_IMAGE_NOT_SUPPORTED";
+    readonly EVENT_GATEWAY_NOT_SUPPORTED: "EVENT_GATEWAY_NOT_SUPPORTED";
+    readonly EVENT_HTTP_FIELD_NOT_SUPPORTED: "EVENT_HTTP_FIELD_NOT_SUPPORTED";
+    readonly HTTP_ZIP_RUNTIME_INVALID: "HTTP_ZIP_RUNTIME_INVALID";
+    readonly HTTP_ZIP_IMAGE_CONFIG_CONFLICT: "HTTP_ZIP_IMAGE_CONFIG_CONFLICT";
+    readonly HTTP_ZIP_INSTALL_DEPENDENCY_OVERRIDDEN: "HTTP_ZIP_INSTALL_DEPENDENCY_OVERRIDDEN";
+    readonly HTTP_TRIGGER_NOT_SUPPORTED: "HTTP_TRIGGER_NOT_SUPPORTED";
+    readonly HTTP_CONCURRENCY_INVALID: "HTTP_CONCURRENCY_INVALID";
+    readonly HTTP_PROTOCOL_PARAMS_INVALID: "HTTP_PROTOCOL_PARAMS_INVALID";
+    readonly CODE_SOURCE_MISSING: "CODE_SOURCE_MISSING";
+    readonly CODE_SOURCE_CONFLICT: "CODE_SOURCE_CONFLICT";
+    readonly IMAGE_CONFIG_MISSING: "IMAGE_CONFIG_MISSING";
+    readonly IMAGE_CONFIG_NOT_ALLOWED: "IMAGE_CONFIG_NOT_ALLOWED";
+    readonly IMAGE_URI_INVALID: "IMAGE_URI_INVALID";
+    readonly IMAGE_TAG_MISSING: "IMAGE_TAG_MISSING";
+    readonly IMAGE_TAG_LATEST_FORBIDDEN: "IMAGE_TAG_LATEST_FORBIDDEN";
+    readonly IMAGE_TYPE_INVALID: "IMAGE_TYPE_INVALID";
+    readonly IMAGE_REGISTRY_ID_MISSING: "IMAGE_REGISTRY_ID_MISSING";
+    readonly IMAGE_PORT_INVALID: "IMAGE_PORT_INVALID";
+    readonly IMAGE_RUNTIME_INVALID: "IMAGE_RUNTIME_INVALID";
+    readonly IMAGE_HANDLER_NOT_ALLOWED: "IMAGE_HANDLER_NOT_ALLOWED";
+    readonly BUILD_CONFIG_MISSING: "BUILD_CONFIG_MISSING";
+    readonly BUILD_DOCKERFILE_INVALID: "BUILD_DOCKERFILE_INVALID";
+    readonly BUILD_CONTEXT_INVALID: "BUILD_CONTEXT_INVALID";
+    readonly BUILD_PLATFORM_INVALID: "BUILD_PLATFORM_INVALID";
+    readonly BUILD_TAG_INVALID: "BUILD_TAG_INVALID";
+    readonly BUILD_REPOSITORY_INVALID: "BUILD_REPOSITORY_INVALID";
+    readonly BUILD_ARG_INVALID: "BUILD_ARG_INVALID";
+    readonly CLOUD_REGISTRY_CREDENTIAL_MISSING: "CLOUD_REGISTRY_CREDENTIAL_MISSING";
+    readonly CLOUD_REGISTRY_CREDENTIAL_INVALID: "CLOUD_REGISTRY_CREDENTIAL_INVALID";
+    readonly GATEWAY_PATH_INVALID: "GATEWAY_PATH_INVALID";
+    readonly LOCAL_FALLBACK_INVALID: "LOCAL_FALLBACK_INVALID";
+    readonly PREFLIGHT_CODE_PATH_MISSING: "PREFLIGHT_CODE_PATH_MISSING";
+    readonly PREFLIGHT_CODE_PATH_NOT_DIRECTORY: "PREFLIGHT_CODE_PATH_NOT_DIRECTORY";
+    readonly PREFLIGHT_BOOTSTRAP_MISSING: "PREFLIGHT_BOOTSTRAP_MISSING";
+    readonly PREFLIGHT_BOOTSTRAP_NOT_FILE: "PREFLIGHT_BOOTSTRAP_NOT_FILE";
+    readonly PREFLIGHT_BOOTSTRAP_NOT_EXECUTABLE: "PREFLIGHT_BOOTSTRAP_NOT_EXECUTABLE";
+    readonly PREFLIGHT_PACKAGE_TOO_LARGE: "PREFLIGHT_PACKAGE_TOO_LARGE";
+    readonly PREFLIGHT_SYMLINK_ESCAPE: "PREFLIGHT_SYMLINK_ESCAPE";
+    readonly PREFLIGHT_DEPENDENCY_NOT_BUNDLED: "PREFLIGHT_DEPENDENCY_NOT_BUNDLED";
+    readonly PREFLIGHT_IO_ERROR: "PREFLIGHT_IO_ERROR";
+    readonly PREFLIGHT_DOCKER_CLI_MISSING: "PREFLIGHT_DOCKER_CLI_MISSING";
+    readonly PREFLIGHT_DOCKER_DAEMON_UNAVAILABLE: "PREFLIGHT_DOCKER_DAEMON_UNAVAILABLE";
+    readonly PREFLIGHT_DOCKER_BUILDX_MISSING: "PREFLIGHT_DOCKER_BUILDX_MISSING";
+    readonly LOCAL_BUILD_CONTEXT_MISSING: "LOCAL_BUILD_CONTEXT_MISSING";
+    readonly LOCAL_BUILD_DOCKERFILE_MISSING: "LOCAL_BUILD_DOCKERFILE_MISSING";
+    readonly LOCAL_BUILD_REPOSITORY_MISSING: "LOCAL_BUILD_REPOSITORY_MISSING";
+    readonly LOCAL_BUILD_FAILED: "LOCAL_BUILD_FAILED";
+    readonly LOCAL_PUSH_FAILED: "LOCAL_PUSH_FAILED";
+    readonly LOCAL_DIGEST_QUERY_FAILED: "LOCAL_DIGEST_QUERY_FAILED";
+    readonly CLOUD_UPLOAD_FAILED: "CLOUD_UPLOAD_FAILED";
+    readonly CLOUD_BUILD_TRIGGER_FAILED: "CLOUD_BUILD_TRIGGER_FAILED";
+    readonly CLOUD_BUILD_FAILED: "CLOUD_BUILD_FAILED";
+    readonly CLOUD_BUILD_CANCELED: "CLOUD_BUILD_CANCELED";
+    readonly CLOUD_BUILD_TIMEOUT: "CLOUD_BUILD_TIMEOUT";
+    readonly PREFLIGHT_IMAGE_REMOTE_NOT_FOUND: "PREFLIGHT_IMAGE_REMOTE_NOT_FOUND";
+    readonly PREFLIGHT_IMAGE_REMOTE_UNVERIFIABLE: "PREFLIGHT_IMAGE_REMOTE_UNVERIFIABLE";
+    readonly PREFLIGHT_IMAGE_DIGEST_UNRESOLVED: "PREFLIGHT_IMAGE_DIGEST_UNRESOLVED";
+    readonly PREFLIGHT_IMAGE_REGION_MISMATCH: "PREFLIGHT_IMAGE_REGION_MISMATCH";
+    readonly PREFLIGHT_IMAGE_PULL_ROLE_MISSING: "PREFLIGHT_IMAGE_PULL_ROLE_MISSING";
+    readonly PREFLIGHT_IMAGE_PULL_POLICY_MISSING: "PREFLIGHT_IMAGE_PULL_POLICY_MISSING";
+    readonly PREFLIGHT_IMAGE_PULL_AUTH_GRANTED: "PREFLIGHT_IMAGE_PULL_AUTH_GRANTED";
+    readonly PREFLIGHT_IMAGE_PULL_AUTH_UNVERIFIABLE: "PREFLIGHT_IMAGE_PULL_AUTH_UNVERIFIABLE";
+    readonly PREFLIGHT_CAM_PERMISSION_DENIED: "PREFLIGHT_CAM_PERMISSION_DENIED";
+    readonly REPLACE_NOT_APPROVED: "REPLACE_NOT_APPROVED";
+    readonly NOT_IMPLEMENTED: "NOT_IMPLEMENTED";
+};
+export type FunctionDeployErrorCode = typeof FUNCTION_DEPLOY_ERROR[keyof typeof FUNCTION_DEPLOY_ERROR];
+/** 函数通用属性，Event 与 HTTP 共用 */
+export interface IFunctionDeployCommon {
+    name: string;
+    description?: string;
+    timeout?: number;
+    memorySize?: number;
+    envVariables?: Record<string, string | number | boolean>;
+    vpc?: IFunctionVPC;
+    layers?: {
+        name: string;
+        version: number;
+    }[];
+    role?: string;
+    codeSecret?: string;
+    /** 声明式配置中的函数代码目录，由 DeployOrchestrator 解析为绝对 functionPath */
+    dir?: string;
+    l5?: boolean | 'TRUE' | 'FALSE';
+}
+/** 本地代码来源，三者互斥 */
+export interface ILocalCodeSource {
+    /** 函数所在目录 */
+    functionRootPath?: string;
+    /** 单个函数目录 */
+    functionPath?: string;
+    /** ZIP 的 base64 内容 */
+    base64Code?: string;
+    ignore?: string | string[];
+}
+/** Event 函数部署配置 */
+export interface IEventFunctionDeployConfig extends IFunctionDeployCommon, ILocalCodeSource {
+    type?: 'Event';
+    /** Event 函数只支持代码包部署 */
+    buildStrategy?: 'zip';
+    runtime?: string;
+    handler?: string;
+    installDependency?: boolean | 'TRUE' | 'FALSE';
+    triggers?: ICloudFunctionTrigger[];
+}
+/** HTTP 函数公共配置 */
+export interface IHttpFunctionDeployCommon extends IFunctionDeployCommon {
+    type: 'HTTP';
+    /**
+     * 是否允许匿名访问
+     * 不传表示不由部署器管理访问规则
+     */
+    public?: boolean;
+    /** 云接入路径（兼容既有声明式部署配置） */
+    path?: string;
+    /** 网关路径，例如 /api */
+    gatewayPath?: string;
+    /** HTTP 为普通 HTTP，WS 为 WebSocket；不传等价于 HTTP */
+    protocolType?: 'HTTP' | 'WS';
+    protocolParams?: {
+        wsParams?: {
+            idleTimeOut?: number;
+        };
+    };
+    instanceConcurrencyConfig?: {
+        dynamicEnabled?: boolean | 'TRUE' | 'FALSE';
+        maxConcurrency?: number;
+        [key: string]: any;
+    };
+    /** 镜像地址兼容字段；image 策略会转换为 imageConfig.imageUri */
+    imageUri?: string;
+}
+/** HTTP 托管运行时代码包部署 */
+export interface IHttpZipDeployConfig extends IHttpFunctionDeployCommon, ILocalCodeSource {
+    buildStrategy?: 'zip';
+    runtime?: string;
+    /**
+     * HTTP 代码包部署要求依赖随包携带
+     * 该字段会被强制置为 false
+     */
+    installDependency?: boolean | 'TRUE' | 'FALSE';
+}
+/** 个人版 TCR 云端推送凭证，只能通过 CloudApp Secrets 传递密码。 */
+export interface IRegistryCredential {
+    /** 腾讯云账号 ID（UIN），作为个人版 CCR 登录用户名 */
+    username: string;
+    /** 个人版 CCR 固定密码 */
+    password: string;
+}
+/** 镜像构建目标配置 */
+export interface IImageBuildTarget {
+    /** 构建上下文目录，默认取部署调用方指定的函数目录 */
+    cwd?: string;
+    /** Dockerfile 相对构建上下文的路径，默认 Dockerfile */
+    dockerfile?: string;
+    /** 目标镜像仓库实例 ID */
+    registryId?: string;
+    /** 目标镜像命名空间；个人版 cloud 构建必填，推荐使用 {{env.TCB_TCR_NAMESPACE}} */
+    namespace?: string;
+    /**
+     * 目标镜像仓库路径。
+     * cloud 策略可提供 repository 名、namespace/repository 或完整
+     * registry/namespace/repository；省略时默认使用函数名。
+     */
+    repository?: string;
+    /** 目标镜像 tag，缺省时由构建器按构建上下文摘要生成 */
+    tag?: string;
+    /** 目标平台，默认 linux/amd64 */
+    platform?: string;
+    /** 构建参数，不得写入敏感值 */
+    buildArgs?: Record<string, string>;
+    /** 个人版 TCR 云端推送凭证；personal + cloud 必填，推荐使用 {{env.*}} */
+    registryCredential?: IRegistryCredential;
+    /** 忽略同摘要镜像复用，强制重新构建 */
+    forceBuild?: boolean;
+}
+/** HTTP 自定义镜像公共配置 */
+export interface IHttpImageRuntimeCommon extends IHttpFunctionDeployCommon {
+    runtime?: typeof CUSTOM_IMAGE_RUNTIME;
+    /** 容器监听端口，仅允许 9000 */
+    imagePort?: number;
+    /** 镜像类型，默认 enterprise */
+    imageType?: 'enterprise' | 'personal';
+    /** 企业版 TCR 实例 ID；个人版镜像不传 */
+    registryId?: string;
+    entryPoint?: string;
+    command?: string;
+    args?: string;
+    commandList?: string[];
+    argsList?: string[];
+    containerImageAccelerate?: boolean;
+}
+/** 云端构建镜像部署 */
+export interface IHttpCloudDeployConfig extends IHttpImageRuntimeCommon {
+    buildStrategy: 'cloud';
+    build: IImageBuildTarget;
+}
+/** 本地构建镜像部署 */
+export interface IHttpLocalDeployConfig extends IHttpImageRuntimeCommon {
+    buildStrategy: 'local';
+    build: IImageBuildTarget;
+    /**
+     * 本地构建环境不可用时的处理方式
+     * 默认 error，避免静默改变构建环境
+     */
+    localFallback?: 'cloud' | 'error';
+}
+/** 已有镜像直接部署 */
+export interface IHttpImageDeployConfig extends IHttpImageRuntimeCommon {
+    buildStrategy: 'image';
+    imageConfig: IFunctionImageConfig;
+}
+export type IHttpFunctionDeployConfig = IHttpZipDeployConfig | IHttpCloudDeployConfig | IHttpLocalDeployConfig | IHttpImageDeployConfig;
+export type IFunctionDeployConfig = IEventFunctionDeployConfig | IHttpFunctionDeployConfig;
+/** 规范化后的 Event 配置 */
+export type INormalizedEventConfig = IEventFunctionDeployConfig & {
+    type: 'Event';
+    buildStrategy: 'zip';
+};
+/** 规范化后的 HTTP 代码包配置 */
+export type INormalizedHttpZipConfig = IHttpZipDeployConfig & {
+    type: 'HTTP';
+    buildStrategy: 'zip';
+};
+/** 规范化后的 HTTP 云端构建配置 */
+export type INormalizedHttpCloudConfig = IHttpCloudDeployConfig & {
+    type: 'HTTP';
+    buildStrategy: 'cloud';
+    runtime: typeof CUSTOM_IMAGE_RUNTIME;
+    imagePort: number;
+};
+/** 规范化后的 HTTP 本地构建配置 */
+export type INormalizedHttpLocalConfig = IHttpLocalDeployConfig & {
+    type: 'HTTP';
+    buildStrategy: 'local';
+    runtime: typeof CUSTOM_IMAGE_RUNTIME;
+    imagePort: number;
+    localFallback: 'cloud' | 'error';
+};
+/** 规范化后的 HTTP 已有镜像配置 */
+export type INormalizedHttpImageConfig = IHttpImageDeployConfig & {
+    type: 'HTTP';
+    buildStrategy: 'image';
+    runtime: typeof CUSTOM_IMAGE_RUNTIME;
+    imagePort: number;
+};
+export type INormalizedDeployConfig = INormalizedEventConfig | INormalizedHttpZipConfig | INormalizedHttpCloudConfig | INormalizedHttpLocalConfig | INormalizedHttpImageConfig;
+/** 代码类部署物 */
+export interface ICodeArtifact {
+    kind: 'code';
+    /** 交给 SCF 的代码传输方式 */
+    deployMode: 'cos' | 'zip';
+    functionRootPath?: string;
+    functionPath?: string;
+    base64Code?: string;
+}
+/** 镜像类部署物 */
+export interface IImageArtifact {
+    kind: 'image';
+    deployMode: 'image';
+    imageUri: string;
+    imageDigest?: string;
+    imageType: 'enterprise' | 'personal';
+    registryId?: string;
+    imagePort: number;
+    /** 实际产出该镜像的策略 */
+    effectiveStrategy: HttpBuildStrategy;
+    buildId?: string;
+    logsUrl?: string;
+    entryPoint?: string;
+    command?: string;
+    args?: string;
+    commandList?: string[];
+    argsList?: string[];
+    containerImageAccelerate?: boolean;
+}
+export type IFunctionArtifact = ICodeArtifact | IImageArtifact;
+/** 线上函数当前状态摘要 */
+export interface IFunctionCurrentState {
+    functionName: string;
+    type: FunctionRuntimeModel;
+    runtime?: string;
+    status?: string;
+    protocolType?: string;
+    triggerNames: string[];
+    isCustomImage: boolean;
+    /** 以下字段用于 noop 差异比较，缺省表示线上未返回或不适用 */
+    imageUri?: string;
+    timeout?: number;
+    memorySize?: number;
+    description?: string;
+    /** 线上环境变量，键值对形式 */
+    envVariables?: Record<string, string>;
+}
+/** 部署计划 */
+export interface IFunctionDeployPlan {
+    functionName: string;
+    functionType: FunctionRuntimeModel;
+    buildStrategy: HttpBuildStrategy;
+    /** 线上是否已存在同名函数 */
+    exists: boolean;
+    action: DeployActionKind;
+    operations: DeployOperation[];
+    /** 计划说明，用于向用户解释将要发生什么 */
+    reasons: string[];
+    /** 需要删除重建的原因，非空表示存在不可原地修改的变更 */
+    replaceReasons: string[];
+    /** 是否需要调用方显式授权后才能执行 */
+    requiresReplaceApproval: boolean;
+    current?: IFunctionCurrentState;
+}
+/** 单步执行结果 */
+export interface IDeployStepResult {
+    stage: DeployStage;
+    status: 'success' | 'skipped' | 'failed';
+    /** 毫秒 */
+    elapsedTime: number;
+    detail?: string;
+}
+/** 进度事件 */
+export interface IDeployProgressEvent {
+    stage: DeployStage;
+    status: 'start' | 'success' | 'skipped' | 'failed';
+    message?: string;
+}
+/** 部署结果 */
+export interface IFunctionDeployResult {
+    functionName: string;
+    functionType: FunctionRuntimeModel;
+    /** 调用方请求的策略 */
+    requestedStrategy: HttpBuildStrategy;
+    /** 实际执行的策略，local 回退 cloud 时两者不同 */
+    effectiveStrategy: HttpBuildStrategy;
+    action: DeployActionKind;
+    operations: DeployOperation[];
+    /** 是否只生成计划未执行变更 */
+    dryRun: boolean;
+    imageUri?: string;
+    imageDigest?: string;
+    buildId?: string;
+    gatewayUrl?: string;
+    public?: boolean;
+    /** 毫秒 */
+    elapsedTime: number;
+    steps: IDeployStepResult[];
+    warnings: string[];
+    plan: IFunctionDeployPlan;
+}
+/** 部署选项 */
+export interface IFunctionDeployOptions {
+    /** 允许删除重建，缺省不允许 */
+    allowReplace?: boolean;
+    /** 只生成计划，不执行任何变更 */
+    dryRun?: boolean;
+    /**
+     * 是否允许自动补齐镜像拉取所需的 CAM 授权（默认 true）
+     *
+     * 仅在检测到 image 策略缺少拉镜像策略时，为固定角色绑定唯一白名单策略；
+     * 绝不放大到其它策略。设为 false 时只诊断并给出手动授权指引，不做任何 CAM 写操作。
+     */
+    autoGrant?: boolean;
+    onProgress?: (event: IDeployProgressEvent) => void;
+}

package/types/env/type.d.ts

@@ -113,9 +113,9 @@ export interface HTTPServiceRouteParam {
  */
 export interface HTTPServiceDomainParam {
     Domain: string;
-    AccessType?: 'DIRECT' | 'CDN' | 'CUSTOM';
+    AccessType?: 'DIRECT' | 'CDN' | 'CUSTOM' | 'EO';
     CertId?: string;
-    Protocol?: 'HTTP_AND_HTTPS' | 'HTTP_TO_HTTPS' | 'HTTPS_TO_HTTP';
+    Protocol?: 'HTTP' | 'HTTPS' | 'HTTP_AND_HTTPS' | 'HTTP_TO_HTTPS' | 'HTTPS_TO_HTTP';
     CustomCname?: string;
     Enable?: boolean;
     Routes?: HTTPServiceRouteParam[];
@@ -167,8 +167,8 @@ export interface DeleteHttpServiceRouteRes {
 export interface BindCustomDomainDomainParam {
     Domain: string;
     CertId: string;
-    AccessType?: 'DIRECT' | 'CDN' | 'CUSTOM';
-    Protocol?: 'HTTP_AND_HTTPS' | 'HTTP_TO_HTTPS' | 'HTTPS_TO_HTTP';
+    AccessType?: 'DIRECT' | 'CDN' | 'CUSTOM' | 'EO';
+    Protocol?: 'HTTP' | 'HTTPS' | 'HTTP_AND_HTTPS' | 'HTTP_TO_HTTPS' | 'HTTPS_TO_HTTP';
     Enable?: boolean;
     CustomCname?: string;
 }

package/types/environment.d.ts

@@ -1,5 +1,6 @@
 import { DatabaseService } from './database';
 import { FunctionService } from './function';
+import { FunctionDeployer } from './deploy/FunctionDeployer';
 import { CloudRunService } from './cloudrun';
 import { AgentService } from './agent';
 import { StorageService } from './storage';
@@ -27,6 +28,7 @@ export declare class Environment {
     private envId;
     private envType?;
     private functionService;
+    private functionDeployer;
     private cloudRunService;
     private agentService;
     private databaseService;
@@ -52,6 +54,11 @@ export declare class Environment {
     getStorageService(): StorageService;
     getDatabaseService(): DatabaseService;
     getFunctionService(): FunctionService;
+    /**
+     * 获取函数部署编排器
+     * 采用懒初始化，避免模块循环引用导致的初始化顺序问题
+     */
+    getFunctionDeployer(): FunctionDeployer;
     getCloudRunService(): CloudRunService;
     getAgentService(): AgentService;
     getEnvService(): EnvService;

package/types/function/types.d.ts

@@ -105,6 +105,21 @@ export interface IFunctionInfo {
         Variables: IEnvVariable[];
     };
     Type: string;
+    /** HTTP 函数协议类型；SCF 缺省时表示普通 HTTP */
+    ProtocolType?: string;
+    /** 自定义镜像函数配置 */
+    ImageConfig?: {
+        ImageType?: string;
+        ImageUri?: string;
+        RegistryId?: string;
+        EntryPoint?: string;
+        Command?: string;
+        Args?: string;
+        ContainerImageAccelerate?: boolean;
+        ImagePort?: number;
+        CommandList?: string[];
+        ArgsList?: string[];
+    };
     EipConfig: {
         EipFixed: 'FALSE' | 'TRUE';
         Eips: string[];

package/types/hosting/index.d.ts

@@ -122,6 +122,12 @@ export interface IRoutingRules {
 export interface IBucketWebsiteOptiosn {
     indexDocument: string;
     errorDocument?: string;
+    /** 错误文档是否保留原始 HTTP 状态码：Enabled / Disabled（SPA 回退需 Disabled） */
+    originalHttpStatus?: string;
+    /** 404 是否展示腾讯云公益页面：Enabled / Disabled（SPA 回退需 Disabled） */
+    charity404?: string;
+    /** 忽略 HTML 扩展名：Enabled / Disabled */
+    autoAddressing?: string;
     routingRules?: Array<IRoutingRules>;
 }
 export interface IFindOptions {

package/types/index.d.ts

@@ -1,5 +1,6 @@
 import { EnvService } from './env';
 import { FunctionService } from './function';
+import { FunctionDeployer } from './deploy/FunctionDeployer';
 import { CloudRunService } from './cloudrun';
 import { AgentService } from './agent';
 import { StorageService } from './storage';
@@ -21,6 +22,8 @@ import { CloudAppService } from './cloudApp';
 import { AiModelService } from './aiModel';
 import { IntegrationService } from './integration';
 import { MonitorService } from './monitor';
+import { ProjectValidator } from './projectValidator';
+import { DeployOrchestrator } from './deploy/DeployOrchestrator';
 interface CloudBaseConfig {
     secretId?: string;
     secretKey?: string;
@@ -47,10 +50,17 @@ declare class CloudBase {
     private cloudBaseConfig;
     private environmentManager;
     private docsService;
+    private projectValidatorService;
+    private deployOrchestratorService;
     constructor(config?: CloudBaseConfig);
     addEnvironment(envId: string): void;
     currentEnvironment(): Environment;
     get functions(): FunctionService;
+    /**
+     * 函数部署编排器（FunctionDeployer）
+     * 在现有 FunctionService 之上，按 buildStrategy 编排 Event/HTTP 函数的创建、更新与访问收敛
+     */
+    get functionDeployer(): FunctionDeployer;
     get cloudrun(): CloudRunService;
     get agent(): AgentService;
     get storage(): StorageService;
@@ -101,6 +111,14 @@ declare class CloudBase {
      */
     get monitor(): MonitorService;
     get docs(): DocsService;
+    get projectValidator(): ProjectValidator;
+    getProjectValidator(): ProjectValidator;
+    /**
+     * 声明式部署编排器
+     * 顺序：database → functions → app → hosting → gateway；支持 dry-run / only / skip / 幂等重试
+     */
+    get deployOrchestrator(): DeployOrchestrator;
+    getDeployOrchestrator(): DeployOrchestrator;
     getEnvironmentManager(): EnvironmentManager;
     getManagerConfig(): CloudBaseConfig;
     get isInternalEndpoint(): Boolean;

package/types/interfaces/function.interface.d.ts

@@ -44,7 +44,7 @@ export interface ICloudFunction extends ICloudFunctionConfig {
     name: string;
     description?: string;
     type?: 'Event' | 'HTTP';
-    protocolType?: 'WS';
+    protocolType?: 'HTTP' | 'WS';
     protocolParams?: {
         wsParams?: {
             idleTimeOut?: number;

package/types/projectValidator/index.d.ts

@@ -0,0 +1,24 @@
+import { ProjectValidationResult, ProjectValidatorValidateOptions } from './types';
+export declare class ProjectValidator {
+    validate(options?: ProjectValidatorValidateOptions): Promise<ProjectValidationResult>;
+    private loadProjectConfig;
+    private validateSchema;
+    private validateEnvId;
+    /**
+     * 个人版 TCR 的 username/password/namespace 必须在 cloudbaserc 中显式声明。
+     * ConfigParser 已先解析 {{env.*}}，因此这里同时承担缺失 env 值的前置校验。
+     */
+    private validatePersonalRegistryConfig;
+    private hasPersonalCloudFunction;
+    private isPersonalCloudFunction;
+    private validateResources;
+    private validateConsistency;
+    private validateUniqueNames;
+    private validateUniqueField;
+    private validateGatewayTargets;
+    private getSummary;
+    private getLinkedEnvId;
+    private normalizeSchemaPath;
+    private getErrorMessage;
+}
+export * from './types';

package/types/projectValidator/types.d.ts

@@ -0,0 +1,26 @@
+export type ProjectValidationIssueLevel = 'error' | 'warning';
+export interface ProjectValidationIssue {
+    level: ProjectValidationIssueLevel;
+    resource?: string;
+    field?: string;
+    message: string;
+    fix?: string;
+}
+export interface ProjectValidationSummary {
+    functions: number;
+    hosting: number;
+    databases: number;
+    gateways: number;
+}
+export interface ProjectValidationResult {
+    valid: boolean;
+    version: string;
+    errors: ProjectValidationIssue[];
+    warnings: ProjectValidationIssue[];
+    summary: ProjectValidationSummary;
+}
+export interface ProjectValidatorValidateOptions {
+    cwd?: string;
+    configPath?: string;
+    mode?: string;
+}

package/types/storage/index.d.ts

@@ -49,6 +49,12 @@ export interface IRoutingRules {
 export interface IBucketWebsiteOptions {
     indexDocument: string;
     errorDocument?: string;
+    /** 错误文档是否保留原始 HTTP 状态码：Enabled / Disabled（SPA 回退需 Disabled，否则 404 状态码使前端路由失效） */
+    originalHttpStatus?: string;
+    /** 404 是否展示腾讯云公益页面：Enabled / Disabled（SPA 回退需 Disabled，否则覆盖错误文档） */
+    charity404?: string;
+    /** 忽略 HTML 扩展名：Enabled / Disabled（未传则保持默认 Disabled） */
+    autoAddressing?: string;
     routingRules?: Array<IRoutingRules>;
     region: string;
     bucket: string;

package/types/utils/index.d.ts

@@ -6,11 +6,24 @@ export * from './envLazy';
 export * from './fs';
 export * from './http-request';
 export { guid6 } from './uuid';
+interface IZipExtraEntry {
+    /** zip 包内的相对路径 */
+    zipPath: string;
+    /** 文件文本内容 */
+    content: string | Buffer;
+    /** unix 权限位（八进制），如 0o755 */
+    mode?: number;
+}
 interface IZipOption {
     dirPath: string;
     outputPath: string;
     ignore?: string | string[];
     pattern?: string;
+    /**
+     * 额外注入 zip 的文件条目（不来自 dirPath），用于把 SDK 生成的辅助文件
+     * （如构建推送脚本）打进包内，而不污染用户源码目录。
+     */
+    extraEntries?: IZipExtraEntry[];
 }
 export declare function compressToZip(option: IZipOption): Promise<unknown>;
 /**