@coze-arch/cli 0.0.36-alpha.0a210b → 0.0.36-alpha.102c95

package/lib/__templates__/vite/scripts/prepare.ps1

@@ -0,0 +1,18 @@
+$ErrorActionPreference = "Stop"
+
+$workspace = if ($env:COZE_WORKSPACE_PATH) { $env:COZE_WORKSPACE_PATH } else { (Get-Location).Path }
+Set-Location $workspace
+
+Write-Host "Installing dependencies..."
+& pnpm install --prefer-frozen-lockfile --prefer-offline --loglevel debug --reporter=append-only
+if ($LASTEXITCODE -ne 0) {
+  exit $LASTEXITCODE
+}
+
+if (Get-Command coze-dev -ErrorAction SilentlyContinue) {
+  & coze-dev check-bins --help *> $null
+  if ($LASTEXITCODE -eq 0) {
+    & coze-dev check-bins --fix
+    exit $LASTEXITCODE
+  }
+}

package/lib/__templates__/vite/scripts/start.ps1

@@ -0,0 +1,11 @@
+$ErrorActionPreference = "Stop"
+
+$workspace = if ($env:COZE_WORKSPACE_PATH) { $env:COZE_WORKSPACE_PATH } else { (Get-Location).Path }
+$defaultPort = <%= port %>
+$port = if ($env:DEPLOY_RUN_PORT) { $env:DEPLOY_RUN_PORT } elseif ($env:PORT) { $env:PORT } else { $defaultPort }
+Set-Location $workspace
+
+Write-Host "Starting express production server on port $port..."
+$env:PORT = "$port"
+& node dist-server/server.js
+exit $LASTEXITCODE

package/lib/__templates__/vite/scripts/validate.ps1

@@ -0,0 +1,8 @@
+$ErrorActionPreference = "Stop"
+
+$workspace = if ($env:COZE_WORKSPACE_PATH) { $env:COZE_WORKSPACE_PATH } else { (Get-Location).Path }
+Set-Location $workspace
+
+Write-Host "Running validate..."
+& pnpm validate
+exit $LASTEXITCODE

package/lib/cli.js

@@ -28,6 +28,7 @@ var node_os = require('node:os');
 var promises = require('node:fs/promises');
 var node_child_process = require('node:child_process');
 var node_util = require('node:util');
+var tar = require('tar');
 var node_stream = require('node:stream');
 
 /**
@@ -2113,7 +2114,7 @@ const EventBuilder = {
 };
 
 var name = "@coze-arch/cli";
-var version = "0.0.36-alpha.0a210b";
+var version = "0.0.36-alpha.102c95";
 var description = "coze coding devtools cli";
 var license = "MIT";
 var author = "fanwenjie.fe@bytedance.com";
@@ -5961,35 +5962,66 @@ const saveProjectPatchState = async (
   await saveTomlCozeConfig(config, projectPath);
 };
 
-/**
- * 获取指定命令的配置
- *
- * @param config - .coze 配置对象
- * @param commandName - 命令名称 (dev/build/start)
- * @returns 命令配置数组
- */
-const getCommandConfig = (
+
+
+const getDefaultCommandConfig = (
   config,
   commandName,
 ) => {
-  let commandConfig;
+  switch (commandName) {
+    case 'dev':
+      return _optionalChain$k([config, 'access', _ => _.dev, 'optionalAccess', _2 => _2.run]);
+    case 'build':
+      return _optionalChain$k([config, 'access', _3 => _3.deploy, 'optionalAccess', _4 => _4.build]);
+    case 'start':
+      return _optionalChain$k([config, 'access', _5 => _5.deploy, 'optionalAccess', _6 => _6.run]);
+    case 'validate':
+      return _optionalChain$k([config, 'access', _7 => _7.dev, 'optionalAccess', _8 => _8.validate]);
+    default:
+      throw new Error(`Unknown command: ${commandName}`);
+  }
+};
 
+const getWindowsCommandConfig = (
+  config,
+  commandName,
+) => {
   switch (commandName) {
     case 'dev':
-      commandConfig = _optionalChain$k([config, 'access', _ => _.dev, 'optionalAccess', _2 => _2.run]);
-      break;
+      return _optionalChain$k([config, 'access', _9 => _9.dev, 'optionalAccess', _10 => _10.run_win]);
     case 'build':
-      commandConfig = _optionalChain$k([config, 'access', _3 => _3.deploy, 'optionalAccess', _4 => _4.build]);
-      break;
+      return _optionalChain$k([config, 'access', _11 => _11.deploy, 'optionalAccess', _12 => _12.build_win]);
     case 'start':
-      commandConfig = _optionalChain$k([config, 'access', _5 => _5.deploy, 'optionalAccess', _6 => _6.run]);
-      break;
+      return _optionalChain$k([config, 'access', _13 => _13.deploy, 'optionalAccess', _14 => _14.run_win]);
     case 'validate':
-      commandConfig = _optionalChain$k([config, 'access', _7 => _7.dev, 'optionalAccess', _8 => _8.validate]);
-      break;
+      return _optionalChain$k([config, 'access', _15 => _15.dev, 'optionalAccess', _16 => _16.validate_win]);
     default:
       throw new Error(`Unknown command: ${commandName}`);
   }
+};
+
+/**
+ * 获取指定命令的配置
+ *
+ * Windows 优先使用非空的 *_win 配置；其他平台（包括 WSL）始终使用默认配置。
+ *
+ * @param config - .coze 配置对象
+ * @param commandName - 命令名称 (dev/build/start)
+ * @returns 命令配置数组
+ */
+const getCommandConfig = (
+  config,
+  commandName,
+  platform = process.platform,
+) => {
+  const defaultCommandConfig = getDefaultCommandConfig(config, commandName);
+  const windowsCommandConfig =
+    platform === 'win32'
+      ? getWindowsCommandConfig(config, commandName)
+      : undefined;
+  const commandConfig = _optionalChain$k([windowsCommandConfig, 'optionalAccess', _17 => _17.length])
+    ? windowsCommandConfig
+    : defaultCommandConfig;
 
   if (!commandConfig || commandConfig.length === 0) {
     throw new Error(
@@ -10489,6 +10521,9 @@ const loadConfig = async (options = {}) => {
     ...(options.orgId ? { organizationId: options.orgId } : {}),
     ...(options.spaceId ? { spaceId: options.spaceId } : {}),
     ...(options.apiBaseUrl ? { apiBaseUrl: options.apiBaseUrl } : {}),
+    // Runtime-only trust decision: a value persisted in config.json must never enable
+    // project-secret injection for an OAuth access token.
+    injectApiToken: Boolean(environmentAccessToken),
   };
   return config;
 };
@@ -10932,6 +10967,15 @@ class DeployApiClient {
       'agw-js-conv': 'str',
       'x-request-from-coze-cli': '1',
     };
+    // Only an explicit environment credential may become a project runtime secret.
+    // OAuth credentials loaded from config.json remain authentication-only.
+    if (
+      this.config.injectApiToken &&
+      path === '/deploy_history/create' &&
+      useApiPrefix
+    ) {
+      headers['x-coze-deploy-inject-api-token'] = 'true';
+    }
     if (this.config.organizationId) {
       headers['x-coze-account'] = this.config.organizationId;
     }
@@ -11171,6 +11215,35 @@ class DeployApiClient {
     );
   }
 
+  authorizeMiniProgram(body
+
+
+
+
+
+
+) {
+    return this.post
+
+
+
+('/mini_program/auth', body);
+  }
+
+  createMiniProgramPreview(body
+
+
+
+
+) {
+    return this.post
+
+
+
+
+('/mini_program/preview', body);
+  }
+
   listDomains(appId, unitType) {
     return this.post(
       '/domain/list', {
@@ -11979,12 +12052,107 @@ const registerEnv = (code) => {
     });
 };
 
+/* eslint-disable security/detect-non-literal-fs-filename -- validated project-local build output paths */
+
+const BUILD_OUTPUT_DIRS = new Set(['dist', 'dist-tt']);
+const EXCLUDED_PARTS = new Set([
+  '.git',
+  '.env',
+  'node_modules',
+]);
+const REPRODUCIBLE_ARCHIVE_MTIME = new Date(0);
+
+const validateBuildOutput = async (
+  sourceRoot,
+  buildOutputDir,
+) => {
+  if (!BUILD_OUTPUT_DIRS.has(buildOutputDir)) {
+    throw new CliError(
+      `Unsupported Mini-program build output directory: ${buildOutputDir}.`,
+      'SOURCE_PACKAGE_FAILED',
+    );
+  }
+  const buildOutputRoot = node_path.resolve(sourceRoot, buildOutputDir);
+  try {
+    const info = await promises.lstat(buildOutputRoot);
+    if (info.isSymbolicLink() || !info.isDirectory()) {
+      throw new Error('build output must be a regular directory');
+    }
+    const realSourceRoot = await promises.realpath(sourceRoot);
+    const realBuildOutputRoot = await promises.realpath(buildOutputRoot);
+    const relativeOutput = node_path.relative(realSourceRoot, realBuildOutputRoot);
+    if (!relativeOutput || relativeOutput.startsWith('..')) {
+      throw new Error('build output must be inside the source root');
+    }
+  } catch (error) {
+    throw new CliError(
+      `Invalid Mini-program build output ${buildOutputRoot}: ${error instanceof Error ? error.message : String(error)}`,
+      'SOURCE_PACKAGE_FAILED',
+    );
+  }
+};
+
+const shouldInclude = (
+  archivePath,
+  entry,
+) => {
+  if ('isSymbolicLink' in entry && entry.isSymbolicLink()) {
+    return false;
+  }
+  return !archivePath.split(/[\\/]/u).some(part =>
+    EXCLUDED_PARTS.has(part) || part.startsWith('.git'),
+  );
+};
+
+const createMiniProgramPackage = async (
+  sourceRoot,
+  buildOutputDir,
+) => {
+  const resolvedSourceRoot = node_path.resolve(sourceRoot);
+  await validateBuildOutput(resolvedSourceRoot, buildOutputDir);
+  const tempDirectory = await promises.mkdtemp(node_path.join(node_os.tmpdir(), 'coze-mini-program-source-'));
+  const outputPath = node_path.join(tempDirectory, 'source.tar.gz');
+  try {
+    await tar.create(
+      {
+        cwd: resolvedSourceRoot,
+        file: outputPath,
+        filter: shouldInclude,
+        gzip: true,
+        mtime: REPRODUCIBLE_ARCHIVE_MTIME,
+        portable: true,
+      },
+      [buildOutputDir],
+    );
+    const info = await promises.stat(outputPath);
+    if (info.size === 0) {
+      throw new Error('source archive is empty');
+    }
+    return {
+      path: outputPath,
+      sizeBytes: info.size,
+      cleanup: () => promises.rm(tempDirectory, { recursive: true, force: true }),
+    };
+  } catch (error) {
+    await promises.rm(tempDirectory, { recursive: true, force: true });
+    throw new CliError(
+      `Unable to package Mini-program build output: ${error instanceof Error ? error.message : String(error)}`,
+      'SOURCE_PACKAGE_FAILED',
+    );
+  }
+};
+
 function _nullishCoalesce$1(lhs, rhsFn) { if (lhs != null) { return lhs; } else { return rhsFn(); } } function _optionalChain$4(ops) { let lastAccessLHS = undefined; let value = ops[0]; let i = 1; while (i < ops.length) { const op = ops[i]; const fn = ops[i + 1]; i += 2; if ((op === 'optionalAccess' || op === 'optionalCall') && value == null) { return undefined; } if (op === 'access' || op === 'optionalAccess') { lastAccessLHS = value; value = fn(value); } else if (op === 'call' || op === 'optionalCall') { value = fn((...args) => value.call(lastAccessLHS, ...args)); lastAccessLHS = undefined; } } return value; }
 const CONNECTOR_IDS = {
   wechat: '10000127',
   douyin: '10000126',
 } ;
 
+const MINI_PROGRAM_BUILD_OUTPUT_DIRS = {
+  wechat: 'dist',
+  douyin: 'dist-tt',
+} ;
+
 
 
 
@@ -12009,6 +12177,18 @@ const resolveConnectorId = (platform) => {
   return connectorId;
 };
 
+const resolveBuildOutputDir = (platform) => {
+  const outputDir =
+    MINI_PROGRAM_BUILD_OUTPUT_DIRS[platform ];
+  if (!outputDir) {
+    throw new CliError(
+      `Unsupported Mini-program platform ${String(platform)}; expected wechat or douyin.`,
+      'INVALID_MINIPROGRAM_PLATFORM',
+    );
+  }
+  return outputDir;
+};
+
 const resolveProjectId = async (
   command,
   options,
@@ -12028,6 +12208,137 @@ const resolveProjectId = async (
   return metadata.projectId;
 };
 
+const MINI_PROGRAM_AUTH_STATUS = {
+  authorized: 1,
+  needAuthorize: 2,
+  boundToOtherUser: 3,
+} ;
+
+const getBoundToOtherUserMessage = (platform) => {
+  const platformName = platform === 'wechat' ? 'WeChat' : 'Douyin';
+  const platformConsole =
+    platform === 'wechat' ? 'WeChat Public Platform' : 'Douyin Open Platform';
+  return [
+    `This ${platformName} Mini-program AppID is authorized by another Coze user.`,
+    `If this is an AppID you manage, revoke Coze's previous third-party platform authorization in the ${platformConsole}, then rerun this auth command. The CLI will recheck the AppID and authorize it for your current Coze account.`,
+    'If this is not your AppID, change --mini-app-id to an AppID for which you have administrator permission, then rerun this auth command.',
+  ].join(' ');
+};
+
+const getAuthRequiredMessage = () =>
+  'This Mini-program AppID is not authorized for the current Coze user. Run `coze-dev deploy code mini-program auth` first.';
+
+const getPreviewFailureMessage = (data
+
+
+) =>
+  _optionalChain$4([data, 'access', _4 => _4.stderr, 'optionalAccess', _5 => _5.trim, 'call', _6 => _6()]) || _optionalChain$4([data, 'access', _7 => _7.stdout, 'optionalAccess', _8 => _8.trim, 'call', _9 => _9()]) || 'Mini-program preview failed.';
+
+const registerAuthorizationCommand = (miniProgram) => {
+  miniProgram
+    .command('auth')
+    .description('Authorize a Mini-program AppID for the current Coze user')
+    .requiredOption('--platform <platform>', 'wechat or douyin')
+    .requiredOption('--mini-app-id <miniAppId>', 'Mini-program AppID')
+    .option('--project-id <projectId>', 'Deployment Project ID')
+    .option('--source-root <sourceRoot>', 'Directory containing .coze', '.')
+    .action(async (options, command) => {
+      const runtime = await getRuntime(command);
+      const projectId = await resolveProjectId(command, options);
+      const authorization = await runtime.client.authorizeMiniProgram({
+        project_id: projectId,
+        app_id: options.miniAppId || '',
+        connector_id: resolveConnectorId(options.platform),
+        redirect_url: 'https://code.coze.cn/coding/auth/callback/miniprogram',
+      });
+      if (authorization.status === MINI_PROGRAM_AUTH_STATUS.needAuthorize) {
+        runtime.output.print({
+          project_id: projectId,
+          mini_app_id: options.miniAppId,
+          platform: options.platform,
+          authorization_required: true,
+          auth_url: authorization.auth_url,
+        });
+        return;
+      }
+      if (authorization.status === MINI_PROGRAM_AUTH_STATUS.boundToOtherUser) {
+        throw new CliError(
+          getBoundToOtherUserMessage(options.platform),
+          'MINIPROGRAM_AUTHORIZED_BY_OTHER_USER',
+        );
+      }
+      if (authorization.status !== MINI_PROGRAM_AUTH_STATUS.authorized) {
+        throw new CliError(
+          `Unexpected Mini-program authorization status: ${String(authorization.status)}.`,
+          'INVALID_RESPONSE',
+        );
+      }
+      runtime.output.print({
+        project_id: projectId,
+        mini_app_id: options.miniAppId,
+        platform: options.platform,
+        authorized: true,
+      });
+    });
+};
+
+const registerPreviewCommand = (miniProgram) => {
+  miniProgram
+    .command('preview')
+    .description('Create a Mini-program preview QR code from the local build artifact')
+    .requiredOption('--platform <platform>', 'wechat or douyin')
+    .requiredOption('--mini-app-id <miniAppId>', 'Mini-program AppID')
+    .option('--project-id <projectId>', 'Deployment Project ID')
+    .option('--source-root <sourceRoot>', 'Directory containing dist or dist-tt', '.')
+    .action(async (options, command) => {
+      const runtime = await getRuntime(command);
+      const projectId = await resolveProjectId(command, options);
+      const authorization = await runtime.client.getMiniProgramAuthStatus({
+        project_id: projectId,
+        connector_id: resolveConnectorId(options.platform),
+      });
+      if (
+        !authorization.is_authorized ||
+        authorization.bound_related_id !== options.miniAppId
+      ) {
+        throw new CliError(
+          getAuthRequiredMessage(),
+          'MINIPROGRAM_AUTH_REQUIRED',
+        );
+      }
+      const sourceRoot = node_path.resolve(runtime.cwd, options.sourceRoot || '.');
+      const buildOutputDir = resolveBuildOutputDir(options.platform);
+      const sourcePackage = await createMiniProgramPackage(
+        sourceRoot,
+        buildOutputDir,
+      );
+      try {
+        const content = await promises.readFile(sourcePackage.path);
+        const data = await runtime.client.createMiniProgramPreview({
+          project_id: projectId,
+          app_id: options.miniAppId || '',
+          connector_id: resolveConnectorId(options.platform),
+          source_package_base64: content.toString('base64'),
+        });
+        if (data.failed) {
+          throw new CliError(
+            getPreviewFailureMessage(data),
+            'MINIPROGRAM_PREVIEW_FAILED',
+          );
+        }
+        runtime.output.print({
+          project_id: projectId,
+          mini_app_id: options.miniAppId,
+          platform: options.platform,
+          source_package_size_bytes: sourcePackage.sizeBytes,
+          ...data,
+        });
+      } finally {
+        await sourcePackage.cleanup();
+      }
+    });
+};
+
 const registerMiniProgram = (code) => {
   const miniProgram = code
     .command('mini-program')
@@ -12112,6 +12423,9 @@ const registerMiniProgram = (code) => {
       });
       runtime.output.print({ project_id: projectId, platform: options.platform, unbound: true });
     });
+
+  registerAuthorizationCommand(miniProgram);
+  registerPreviewCommand(miniProgram);
 };
 
 function _optionalChain$3(ops) { let lastAccessLHS = undefined; let value = ops[0]; let i = 1; while (i < ops.length) { const op = ops[i]; const fn = ops[i + 1]; i += 2; if ((op === 'optionalAccess' || op === 'optionalCall') && value == null) { return undefined; } if (op === 'access' || op === 'optionalAccess') { lastAccessLHS = value; value = fn(value); } else if (op === 'call' || op === 'optionalCall') { value = fn((...args) => value.call(lastAccessLHS, ...args)); lastAccessLHS = undefined; } } return value; }

package/lib/deploy/package-project.js

@@ -93,6 +93,18 @@ const readCommand = (config, section, key) => {
   return command;
 };
 
+const readPlatformCommand = (config, section, key) => {
+  const defaultCommand = readCommand(config, section, key);
+  const windowsCommand = process.platform === 'win32'
+    ? readCommand(config, section, `${key}_win`)
+    : undefined;
+
+  if (windowsCommand?.length) {
+    return { command: windowsCommand, key: `${key}_win` };
+  }
+  return defaultCommand?.length ? { command: defaultCommand, key } : undefined;
+};
+
 const runCommand = (command, sourceDir, env) => {
   const result = spawnSync(command[0], command.slice(1), {
     cwd: sourceDir,
@@ -110,10 +122,16 @@ const runCommand = (command, sourceDir, env) => {
 };
 
 const runPackCommand = sourceDir => {
-  const command = readCommand(readCozeConfig(sourceDir), 'dev', 'pack');
-  if (command) {
-    process.stderr.write(`[package] Running dev.pack: ${command.join(' ')}\n`);
-    runCommand(command, sourceDir, buildCommandEnv());
+  const configuredCommand = readPlatformCommand(
+    readCozeConfig(sourceDir),
+    'dev',
+    'pack',
+  );
+  if (configuredCommand) {
+    process.stderr.write(
+      `[package] Running dev.${configuredCommand.key}: ${configuredCommand.command.join(' ')}\n`,
+    );
+    runCommand(configuredCommand.command, sourceDir, buildCommandEnv());
   }
 };
 

package/lib/deploy/package-project.py

@@ -60,10 +60,25 @@ def read_command(config, section: str, key: str):
     return command
 
 
+def read_platform_command(config, section: str, key: str, platform=sys.platform):
+    default_command = read_command(config, section, key)
+    windows_command = (
+        read_command(config, section, f"{key}_win")
+        if platform.startswith("win")
+        else None
+    )
+    if windows_command:
+        return f"{key}_win", windows_command
+    return (key, default_command) if default_command else None
+
+
 def run_pack_command(source_dir: Path):
-    command = read_command(read_coze_config(source_dir), "dev", "pack")
-    if command:
-        print(f"[package] Running dev.pack: {' '.join(command)}", file=sys.stderr)
+    configured_command = read_platform_command(
+        read_coze_config(source_dir), "dev", "pack"
+    )
+    if configured_command:
+        key, command = configured_command
+        print(f"[package] Running dev.{key}: {' '.join(command)}", file=sys.stderr)
         subprocess.run(command, cwd=source_dir, env=build_command_env(), check=True)
 
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@coze-arch/cli",
-  "version": "0.0.36-alpha.0a210b",
+  "version": "0.0.36-alpha.102c95",
   "private": false,
   "description": "coze coding devtools cli",
   "license": "MIT",