@cloudbase/manager-node 5.7.1-beta.1 → 5.8.0-beta.0

package/types/env/type.d.ts

@@ -14,169 +14,6 @@ export interface CalculatePackageModifyPriceParams {
     envId: string;
     currency?: 'CNY' | 'USD';
 }
-/** 获取 SSL 证书列表请求参数。 */
-export interface DescribeCertificatesParams {
-    /** 分页偏移量，从 0 开始。 */
-    Offset?: number;
-    /** 每页数量，范围为 1 至 1000。 */
-    Limit?: number;
-    /** 模糊匹配证书 ID、备注名称或证书域名。 */
-    SearchKey?: string;
-    /** 证书类型：CA 为客户端证书，SVR 为服务器证书。 */
-    CertificateType?: 'CA' | 'SVR';
-    /** 项目 ID。 */
-    ProjectId?: number;
-    /** 按证书到期时间排序。 */
-    ExpirationSort?: 'ASC' | 'DESC';
-    /** 证书状态筛选。 */
-    CertificateStatus?: number[];
-    /** 是否仅返回可部署证书：1 是，0 否。 */
-    Deployable?: 0 | 1;
-    /** 是否仅返回上传托管证书：1 是，0 否。 */
-    Upload?: 0 | 1;
-    /** 是否仅返回可续期证书：1 是，0 否。 */
-    Renew?: 0 | 1;
-    /** 来源筛选。 */
-    FilterSource?: 'upload' | 'buy';
-    /** 是否仅返回国密证书：1 是，0 否。 */
-    IsSM?: 0 | 1;
-    /** 是否仅返回即将过期证书：1 是，0 否。 */
-    FilterExpiring?: 0 | 1;
-    /** 是否仅返回可托管证书：1 是，0 否。 */
-    Hostable?: 0 | 1;
-    /** 标签筛选条件。 */
-    Tags?: Array<{
-        TagKey: string;
-        TagValue?: string;
-    }>;
-    /** 是否仅返回等待签发证书：1 是，0 否。 */
-    IsPendingIssue?: 0 | 1;
-    /** 指定证书 ID 列表。 */
-    CertIds?: string[];
-    /** 订阅服务 ID。 */
-    ServiceId?: string;
-}
-/** Certificates.CertificateExtra：证书扩展信息。 */
-export interface CertificateExtra {
-    DomainNumber: string;
-    OriginCertificateId: string | null;
-    ReplacedBy: string | null;
-    ReplacedFor: string | null;
-    RenewOrder: string | null;
-    SMCert: number;
-    CompanyType: number;
-    ServiceRenewCertificateId: string;
-    ServiceOriginCertificateId: string;
-}
-/** Certificates.ProjectInfo：项目信息。 */
-export interface ProjectInfo {
-    ProjectName: string;
-    ProjectCreatorUin: number;
-    ProjectCreateTime: string;
-    ProjectResume: string;
-    OwnerUin: number;
-    ProjectId: string;
-}
-/** Certificates.PreAuditInfo：证书预审核信息。 */
-export interface PreAuditInfo {
-    TotalPeriod: number;
-    NowPeriod: number;
-    ManagerId: string;
-}
-/** Certificates.HostingConfig：托管配置。 */
-export interface HostingConfig {
-    ReplaceTime?: number;
-    MessageTypes?: number[];
-    ReplaceStartTime?: string;
-    ReplaceEndTime?: string;
-}
-/** Certificates.SupportDownloadType：支持下载的服务器格式。 */
-export interface SupportDownloadType {
-    NGINX: boolean;
-    APACHE: boolean;
-    TOMCAT: boolean;
-    IIS: boolean;
-    JKS: boolean;
-    OTHER: boolean;
-    ROOT: boolean;
-}
-/** Certificates.Tags：标签信息。 */
-export interface CertificateTag {
-    TagKey: string;
-    TagValue: string;
-}
-/** SSL 证书列表项，对应 DescribeCertificates 响应中的 Certificates 元素。 */
-export interface Certificates {
-    OwnerUin: string;
-    ProjectId: string;
-    From: string;
-    PackageType: string;
-    CertificateType: 'CA' | 'SVR';
-    ProductZhName: string;
-    Domain: string;
-    Alias: string;
-    Status: number;
-    CertificateExtra: CertificateExtra;
-    VulnerabilityStatus: 'INACTIVE' | 'ACTIVE';
-    StatusMsg: string;
-    VerifyType: 'DNS_AUTO' | 'DNS' | 'FILE' | 'DNS_PROXY' | 'FILE_PROXY';
-    CertBeginTime: string;
-    CertEndTime: string;
-    ValidityPeriod: string;
-    InsertTime: string;
-    CertificateId: string;
-    SubjectAltName: string[];
-    PackageTypeName: string;
-    StatusName: string;
-    IsVip: boolean;
-    IsDv: boolean;
-    IsWildcard: boolean;
-    IsVulnerability: boolean;
-    RenewAble: boolean;
-    ProjectInfo: ProjectInfo;
-    BoundResource: string[];
-    Deployable: boolean;
-    Tags: CertificateTag[];
-    IsIgnore: boolean;
-    IsSM: boolean;
-    EncryptAlgorithm: string;
-    CAEncryptAlgorithms: string[];
-    CAEndTimes: string[];
-    CACommonNames: string[];
-    PreAuditInfo: PreAuditInfo;
-    AutoRenewFlag: number;
-    HostingStatus: number;
-    HostingCompleteTime: string;
-    HostingRenewCertId: string;
-    HasRenewOrder: string;
-    ReplaceOriCertIsDelete: boolean;
-    IsExpiring: boolean;
-    DVAuthDeadline: string;
-    ValidationPassedTime: string;
-    CertSANs: string[];
-    AwaitingValidationMsg: string;
-    AllowDownload: boolean;
-    IsDNSPODResolve: boolean;
-    IsPackage: boolean;
-    KeyPasswordCustomFlag: boolean;
-    SupportDownloadType: SupportDownloadType;
-    CertRevokedTime: string;
-    HostingResourceTypes: string[];
-    HostingConfig: HostingConfig | null;
-    IsHostingUploadRenewCert: boolean;
-    ServiceId: string;
-    ServiceStatus: 'initing' | 'running' | 'expired' | 'refunded' | 'nearExpire';
-    CertServiceBeginTime: string;
-    CertServiceEndTime: string;
-    CertServiceShareEnabled: boolean;
-    CertServiceValidCertificateCount: number;
-}
-/** 获取 SSL 证书列表响应。 */
-export interface DescribeCertificatesRes {
-    TotalCount: number;
-    Certificates: Certificates[];
-    RequestId: string;
-}
 /**
  * 客户端限频配置
  */
@@ -198,43 +35,18 @@ export interface HTTPServicePathRewrite {
     StaticStorePrefix?: string;
     Prefix?: string;
 }
-/**
- * HTTP 访问服务路由添加 header 配置
- */
-export interface HTTPServiceHeaderToAdd {
-    Key?: string;
-    Value?: string;
-    Action?: 'APPEND_IF_EXISTS_OR_ADD' | 'ADD_IF_ABSENT' | 'OVERWRITE_IF_EXISTS_OR_ADD' | 'OVERWRITE_IF_EXISTS';
-}
-/**
- * HTTP 访问服务路由 headers 处理配置
- */
-export interface HTTPServiceHeadersHandler {
-    RequestHeadersToAdd?: HTTPServiceHeaderToAdd[];
-    RequestHeadersToRemove?: string[];
-    ResponseHeadersToAdd?: HTTPServiceHeaderToAdd[];
-    ResponseHeadersToRemove?: string[];
-}
-/**
- * HTTP访问服务路由扩展字段
- */
-export interface HTTPServiceExtension {
-    HeadersHandler?: HTTPServiceHeadersHandler;
-    [key: string]: unknown;
-}
 /**
  * HTTP访问服务路由信息
  */
 export interface HTTPServiceRoute {
     Path: string;
     PathRewrite?: HTTPServicePathRewrite;
-    UpstreamResourceType: 'SCF' | 'CBR' | 'STATIC_STORE' | 'WEB_SCF' | 'LH' | 'STORAGE';
+    UpstreamResourceType: 'SCF' | 'CBR' | 'STATIC_STORE' | 'WEB_SCF' | 'LH';
     UpstreamResourceName: string;
     EnableSafeDomain: boolean;
     EnableAuth: boolean;
     EnablePathTransmission: boolean;
     QPSPolicy?: HTTPServiceRouteQPSPolicy;
-    Extension?: HTTPServiceExtension;
     Enable: boolean;
     CreateTime: string;
     UpdateTime: string;
@@ -245,7 +57,7 @@ export interface HTTPServiceRoute {
 export interface HTTPServiceDomain {
     Domain: string;
     DomainType: 'HTTPSERVICE' | 'CBR' | 'ANYSERVICE' | 'AI_AGENT' | 'VM' | 'INTEGRATION_CALLBACK';
-    AccessType: 'DIRECT' | 'CDN' | 'CUSTOM' | 'EO';
+    AccessType: 'DIRECT' | 'CDN' | 'CUSTOM';
     CertId: string;
     Protocol: 'HTTP_AND_HTTPS' | 'HTTP_TO_HTTPS' | 'HTTPS_TO_HTTP';
     Cname: string;
@@ -254,7 +66,6 @@ export interface HTTPServiceDomain {
     Status: 'PROCESSING' | 'FAIL' | 'SUCCESS';
     DNSStatus: 'OK' | 'INVALID';
     Routes?: HTTPServiceRoute[];
-    Extension?: HTTPServiceExtension;
     CreateTime: string;
     UpdateTime: string;
 }
@@ -288,14 +99,13 @@ export interface DescribeHttpServiceRouteRes {
  */
 export interface HTTPServiceRouteParam {
     Path: string;
-    UpstreamResourceType?: 'SCF' | 'CBR' | 'STATIC_STORE' | 'WEB_SCF' | 'LH' | 'STORAGE';
+    UpstreamResourceType?: 'SCF' | 'CBR' | 'STATIC_STORE' | 'WEB_SCF' | 'LH';
     UpstreamResourceName?: string;
     PathRewrite?: HTTPServicePathRewrite;
     EnableSafeDomain?: boolean;
     EnableAuth?: boolean;
     EnablePathTransmission?: boolean;
     QPSPolicy?: HTTPServiceRouteQPSPolicy;
-    Extension?: HTTPServiceExtension;
     Enable?: boolean;
 }
 /**
@@ -305,74 +115,10 @@ export interface HTTPServiceDomainParam {
     Domain: string;
     AccessType?: 'DIRECT' | 'CDN' | 'CUSTOM' | 'EO';
     CertId?: string;
-    Protocol?: 'HTTP_AND_HTTPS' | 'HTTP_TO_HTTPS' | 'HTTPS_TO_HTTP';
+    Protocol?: 'HTTP' | 'HTTPS' | 'HTTP_AND_HTTPS' | 'HTTP_TO_HTTPS' | 'HTTPS_TO_HTTP';
     CustomCname?: string;
     Enable?: boolean;
     Routes?: HTTPServiceRouteParam[];
-    Extension?: HTTPServiceExtension;
-}
-/**
- * 前置校验检查状态
- */
-export type VerifyHttpServiceRouteCheckStatus = 'PASS' | 'SKIPPED' | 'FAIL';
-/**
- * 前置校验失败原因
- */
-export type VerifyHttpServiceRouteCheckCode = 'INTERNAL_CHECK_ERROR' | 'OWNERSHIP_DNS_LOOKUP_FAILED' | 'OWNERSHIP_VERIFY_FAILED' | 'CERT_VERIFY_FAILED' | 'QUOTA_EXCEEDED' | 'ROUTE_CONFLICT' | 'DOMAIN_IN_USE' | 'NON_INTERNAL_ACCOUNT' | 'DOMAIN_IN_BLACKLIST' | 'CDN_RESOURCE_PROCESSING' | 'CDN_RESOURCE_OFFLINE' | 'EO_OWNERSHIP_VERIFY_FAILED' | 'EO_DOMAIN_NOT_ICP' | 'EO_DOMAIN_IN_USE';
-/**
- * 域名归属权 DNS 验证指引
- */
-export interface OwnershipVerificationDnsInfo {
-    Subdomain?: string;
-    RecordType?: string;
-    RecordValue?: string;
-}
-/**
- * 域名归属权文件验证指引
- */
-export interface OwnershipVerificationFileInfo {
-    Path?: string;
-    Content?: string;
-}
-/**
- * 域名归属权验证指引
- */
-export interface OwnershipVerificationInfo {
-    Domain?: string;
-    DnsVerification?: OwnershipVerificationDnsInfo[];
-    FileVerification?: OwnershipVerificationFileInfo[];
-}
-/**
- * VerifyHTTPServiceRoute 单项前置校验结果
- */
-export interface VerifyHttpServiceRouteCheckItem {
-    Status: VerifyHttpServiceRouteCheckStatus;
-    Code?: VerifyHttpServiceRouteCheckCode;
-    Message?: string;
-    OwnershipVerification?: OwnershipVerificationInfo;
-}
-/**
- * VerifyHTTPServiceRoute 请求参数
- */
-export interface VerifyHttpServiceRouteParams {
-    EnvId: string;
-    Domain: HTTPServiceDomainParam;
-}
-/**
- * VerifyHTTPServiceRoute 返回结果
- */
-export interface VerifyHttpServiceRouteRes {
-    Passed: boolean;
-    Ownership: VerifyHttpServiceRouteCheckItem;
-    Cert: VerifyHttpServiceRouteCheckItem;
-    Quota: VerifyHttpServiceRouteCheckItem;
-    RouteConflict: VerifyHttpServiceRouteCheckItem;
-    DomainConflict: VerifyHttpServiceRouteCheckItem;
-    InternalAccount: VerifyHttpServiceRouteCheckItem;
-    Blacklist: VerifyHttpServiceRouteCheckItem;
-    CDNResource: VerifyHttpServiceRouteCheckItem;
-    EO: VerifyHttpServiceRouteCheckItem;
-    RequestId: string;
 }
 /**
  * CreateHTTPServiceRoute 请求参数
@@ -421,8 +167,8 @@ export interface DeleteHttpServiceRouteRes {
 export interface BindCustomDomainDomainParam {
     Domain: string;
     CertId: string;
-    AccessType?: 'DIRECT' | 'CDN' | 'CUSTOM';
-    Protocol?: 'HTTP_AND_HTTPS' | 'HTTP_TO_HTTPS' | 'HTTPS_TO_HTTP';
+    AccessType?: 'DIRECT' | 'CDN' | 'CUSTOM' | 'EO';
+    Protocol?: 'HTTP' | 'HTTPS' | 'HTTP_AND_HTTPS' | 'HTTP_TO_HTTPS' | 'HTTPS_TO_HTTP';
     Enable?: boolean;
     CustomCname?: string;
 }

package/types/environment.d.ts

@@ -1,5 +1,6 @@
 import { DatabaseService } from './database';
 import { FunctionService } from './function';
+import { FunctionDeployer } from './deploy/FunctionDeployer';
 import { CloudRunService } from './cloudrun';
 import { AgentService } from './agent';
 import { StorageService } from './storage';
@@ -27,6 +28,7 @@ export declare class Environment {
     private envId;
     private envType?;
     private functionService;
+    private functionDeployer;
     private cloudRunService;
     private agentService;
     private databaseService;
@@ -52,6 +54,11 @@ export declare class Environment {
     getStorageService(): StorageService;
     getDatabaseService(): DatabaseService;
     getFunctionService(): FunctionService;
+    /**
+     * 获取函数部署编排器
+     * 采用懒初始化，避免模块循环引用导致的初始化顺序问题
+     */
+    getFunctionDeployer(): FunctionDeployer;
     getCloudRunService(): CloudRunService;
     getAgentService(): AgentService;
     getEnvService(): EnvService;

package/types/function/types.d.ts

@@ -105,6 +105,21 @@ export interface IFunctionInfo {
         Variables: IEnvVariable[];
     };
     Type: string;
+    /** HTTP 函数协议类型；SCF 缺省时表示普通 HTTP */
+    ProtocolType?: string;
+    /** 自定义镜像函数配置 */
+    ImageConfig?: {
+        ImageType?: string;
+        ImageUri?: string;
+        RegistryId?: string;
+        EntryPoint?: string;
+        Command?: string;
+        Args?: string;
+        ContainerImageAccelerate?: boolean;
+        ImagePort?: number;
+        CommandList?: string[];
+        ArgsList?: string[];
+    };
     EipConfig: {
         EipFixed: 'FALSE' | 'TRUE';
         Eips: string[];

package/types/hosting/index.d.ts

@@ -122,6 +122,12 @@ export interface IRoutingRules {
 export interface IBucketWebsiteOptiosn {
     indexDocument: string;
     errorDocument?: string;
+    /** 错误文档是否保留原始 HTTP 状态码：Enabled / Disabled（SPA 回退需 Disabled） */
+    originalHttpStatus?: string;
+    /** 404 是否展示腾讯云公益页面：Enabled / Disabled（SPA 回退需 Disabled） */
+    charity404?: string;
+    /** 忽略 HTML 扩展名：Enabled / Disabled */
+    autoAddressing?: string;
     routingRules?: Array<IRoutingRules>;
 }
 export interface IFindOptions {

package/types/index.d.ts

@@ -1,5 +1,6 @@
 import { EnvService } from './env';
 import { FunctionService } from './function';
+import { FunctionDeployer } from './deploy/FunctionDeployer';
 import { CloudRunService } from './cloudrun';
 import { AgentService } from './agent';
 import { StorageService } from './storage';
@@ -21,6 +22,8 @@ import { CloudAppService } from './cloudApp';
 import { AiModelService } from './aiModel';
 import { IntegrationService } from './integration';
 import { MonitorService } from './monitor';
+import { ProjectValidator } from './projectValidator';
+import { DeployOrchestrator } from './deploy/DeployOrchestrator';
 interface CloudBaseConfig {
     secretId?: string;
     secretKey?: string;
@@ -47,10 +50,17 @@ declare class CloudBase {
     private cloudBaseConfig;
     private environmentManager;
     private docsService;
+    private projectValidatorService;
+    private deployOrchestratorService;
     constructor(config?: CloudBaseConfig);
     addEnvironment(envId: string): void;
     currentEnvironment(): Environment;
     get functions(): FunctionService;
+    /**
+     * 函数部署编排器（FunctionDeployer）
+     * 在现有 FunctionService 之上，按 buildStrategy 编排 Event/HTTP 函数的创建、更新与访问收敛
+     */
+    get functionDeployer(): FunctionDeployer;
     get cloudrun(): CloudRunService;
     get agent(): AgentService;
     get storage(): StorageService;
@@ -101,6 +111,14 @@ declare class CloudBase {
      */
     get monitor(): MonitorService;
     get docs(): DocsService;
+    get projectValidator(): ProjectValidator;
+    getProjectValidator(): ProjectValidator;
+    /**
+     * 声明式部署编排器
+     * 顺序：database → functions → app → hosting → gateway；支持 dry-run / only / skip / 幂等重试
+     */
+    get deployOrchestrator(): DeployOrchestrator;
+    getDeployOrchestrator(): DeployOrchestrator;
     getEnvironmentManager(): EnvironmentManager;
     getManagerConfig(): CloudBaseConfig;
     get isInternalEndpoint(): Boolean;

package/types/interfaces/function.interface.d.ts

@@ -44,7 +44,7 @@ export interface ICloudFunction extends ICloudFunctionConfig {
     name: string;
     description?: string;
     type?: 'Event' | 'HTTP';
-    protocolType?: 'WS';
+    protocolType?: 'HTTP' | 'WS';
     protocolParams?: {
         wsParams?: {
             idleTimeOut?: number;

package/types/projectValidator/index.d.ts

@@ -0,0 +1,38 @@
+import { ProjectValidationResult, ProjectValidatorValidateOptions } from './types';
+export declare class ProjectValidator {
+    validate(options?: ProjectValidatorValidateOptions): Promise<ProjectValidationResult>;
+    private loadProjectConfig;
+    private validateSchema;
+    private validateEnvId;
+    /**
+     * 个人版 TCR 的 username/password/namespace 必须在 cloudbaserc 中显式声明。
+     * ConfigParser 已先解析 {{env.*}}，因此这里同时承担缺失 env 值的前置校验。
+     */
+    private validatePersonalRegistryConfig;
+    private hasPersonalCloudFunction;
+    private isPersonalCloudFunction;
+    private validateResources;
+    private validateConsistency;
+    /**
+     * 检测 hosting 路由中 enablePathTransmission=true 与自动生成 pathRewrite 的冲突
+     *
+     * hosting 目标未显式配置 pathRewrite 时，部署会自动生成 PathRewrite.Prefix = hosting.deployPath。
+     * 若同时显式开启 enablePathTransmission=true，路径透传会覆盖路径重写，导致请求打到错误的托管路径（404）。
+     */
+    private validateGatewayPathRewriteConflicts;
+    /**
+     * 子路径部署（deployPath !== '/'）下，前端构建产物若仍使用根路径 base（如 Vite 默认 '/'），
+     * 会导致资源请求落到 /assets/* 而非 /{deployPath}/assets/*，出现 404/白屏。
+     *
+     * 这里在“可能存在构建步骤”的 hosting 配置上给出防坑告警。
+     */
+    private validateHostingSubPathBaseRisks;
+    private validateUniqueNames;
+    private validateUniqueField;
+    private validateGatewayTargets;
+    private getSummary;
+    private getLinkedEnvId;
+    private normalizeSchemaPath;
+    private getErrorMessage;
+}
+export * from './types';

package/types/projectValidator/types.d.ts

@@ -0,0 +1,26 @@
+export type ProjectValidationIssueLevel = 'error' | 'warning';
+export interface ProjectValidationIssue {
+    level: ProjectValidationIssueLevel;
+    resource?: string;
+    field?: string;
+    message: string;
+    fix?: string;
+}
+export interface ProjectValidationSummary {
+    functions: number;
+    hosting: number;
+    databases: number;
+    gateways: number;
+}
+export interface ProjectValidationResult {
+    valid: boolean;
+    version: string;
+    errors: ProjectValidationIssue[];
+    warnings: ProjectValidationIssue[];
+    summary: ProjectValidationSummary;
+}
+export interface ProjectValidatorValidateOptions {
+    cwd?: string;
+    configPath?: string;
+    mode?: string;
+}

package/types/storage/index.d.ts

@@ -49,6 +49,12 @@ export interface IRoutingRules {
 export interface IBucketWebsiteOptions {
     indexDocument: string;
     errorDocument?: string;
+    /** 错误文档是否保留原始 HTTP 状态码：Enabled / Disabled（SPA 回退需 Disabled，否则 404 状态码使前端路由失效） */
+    originalHttpStatus?: string;
+    /** 404 是否展示腾讯云公益页面：Enabled / Disabled（SPA 回退需 Disabled，否则覆盖错误文档） */
+    charity404?: string;
+    /** 忽略 HTML 扩展名：Enabled / Disabled（未传则保持默认 Disabled） */
+    autoAddressing?: string;
     routingRules?: Array<IRoutingRules>;
     region: string;
     bucket: string;

package/types/utils/index.d.ts

@@ -6,11 +6,24 @@ export * from './envLazy';
 export * from './fs';
 export * from './http-request';
 export { guid6 } from './uuid';
+interface IZipExtraEntry {
+    /** zip 包内的相对路径 */
+    zipPath: string;
+    /** 文件文本内容 */
+    content: string | Buffer;
+    /** unix 权限位（八进制），如 0o755 */
+    mode?: number;
+}
 interface IZipOption {
     dirPath: string;
     outputPath: string;
     ignore?: string | string[];
     pattern?: string;
+    /**
+     * 额外注入 zip 的文件条目（不来自 dirPath），用于把 SDK 生成的辅助文件
+     * （如构建推送脚本）打进包内，而不污染用户源码目录。
+     */
+    extraEntries?: IZipExtraEntry[];
 }
 export declare function compressToZip(option: IZipOption): Promise<unknown>;
 /**