@coze-arch/cli 0.0.36-alpha.844e20 → 0.0.36-alpha.a7a716

package/docs/deploy.md

@@ -101,21 +101,17 @@ V2 接口的所有参数均通过 POST JSON body 发送，不会放入 URL。确
 `scripts/package-project.py` 仍随源码和 npm 包保留，仅作为 Python 参考备份与行为对照，
 生产打包链路不会调用 Python。
 
-服务和小程序部署会读取源码根目录的 `.env` 并加密上传；`COZE_` 前缀为平台保留，CLI
-会过滤这类变量，避免覆盖部署运行时由平台注入的配置。
+环境变量以当前线上成功版本的 Secret 快照为准，CLI 不再读取源码根目录的 `.env`。
+更新服务或小程序时，CLI 会读取线上快照中的用户变量并重新加密上传；首次部署没有线上
+快照，因此使用空的用户变量集合。平台系统变量由 Secret 服务管理，不作为用户变量上传。
 
-本地环境变量可通过以下命令管理，默认操作当前目录的 `.env`，也可通过
-`--source-root` 指定项目目录；这些命令不会请求部署服务：
+通过 `app_id` 查看当前线上版本的环境变量及快照状态：
 
 ```bash
 coze-dev deploy code env list
-coze-dev deploy code env set API_KEY "secret value"
-coze-dev deploy code env delete API_KEY
-coze-dev deploy code env list --source-root ./projects/example
+coze-dev deploy code env list --app-id 7672644451805691910
 ```
 
-`env set` 和 `env delete` 不允许操作 `COZE_` 前缀的保留变量。
-
 小程序部署可重复指定渠道：微信为 `10000127`，抖音为 `10000126`：
 
 ```bash

package/lib/__templates__/nextjs/template.config.js

@@ -3,6 +3,7 @@
 import { spawn } from 'child_process';
 import { resolve, join, basename } from 'path';
 import { appendFileSync, openSync, closeSync, mkdirSync } from 'fs';
+import { homedir } from 'os';
 
 
 
@@ -74,7 +75,8 @@ const config = {
       const projectRoot = resolve(outputPath);
 
       // Determine log directory
-      const logDir = process.env.COZE_LOG_DIR || resolve(__dirname, '../.log');
+      const cozeHome = process.env.COZE_HOME || join(homedir(), '.coze');
+      const logDir = process.env.COZE_LOG_DIR || join(cozeHome, 'logs');
       mkdirSync(logDir, { recursive: true });
 
       // Use project name in log file to avoid conflicts

package/lib/__templates__/phaser/_gitignore

@@ -8,6 +8,7 @@ coverage/
 
 *.log
 *.tsbuildinfo
+logs/
 .vite/
 .cache/
 node-compile-cache/

package/lib/__templates__/phaser/scripts/dev.sh

@@ -2,10 +2,81 @@
 set -Eeuo pipefail
 
 COZE_WORKSPACE_PATH="${COZE_WORKSPACE_PATH:-$(pwd)}"
-PORT="${DEPLOY_RUN_PORT:-${PORT:-<%= port %>}}"
+PORT="${PORT:-<%= port %>}"
+DEPLOY_RUN_PORT="${DEPLOY_RUN_PORT:-${PORT}}"
 cd "${COZE_WORKSPACE_PATH}"
 
-COZE_PHASER_GAME_ENV=DEV pnpm vite \
-  --port "${PORT}" \
+get_listening_pids() {
+  local port="$1"
+
+  if command -v lsof >/dev/null 2>&1; then
+    lsof -tiTCP:"${port}" -sTCP:LISTEN 2>/dev/null || true
+  elif command -v ss >/dev/null 2>&1; then
+    ss -H -lntp 2>/dev/null \
+      | awk -v port="${port}" '$4 ~ ":"port"$"' \
+      | grep -o 'pid=[0-9]*' \
+      | cut -d= -f2 \
+      | sort -u || true
+  else
+    echo "Warning: neither lsof nor ss found, cannot check port ${port}." >&2
+  fi
+}
+
+kill_port_if_listening() {
+  local port="$1"
+  local pids
+
+  pids="$(get_listening_pids "${port}")"
+  if [[ -z "${pids}" ]]; then
+    echo "Port ${port} is free."
+    return
+  fi
+
+  echo "Port ${port} is in use by PIDs: ${pids//$'\n'/ } (SIGKILL)"
+  echo "${pids}" | xargs kill -9 2>/dev/null || true
+  sleep 1
+
+  pids="$(get_listening_pids "${port}")"
+  if [[ -n "${pids}" ]]; then
+    echo "Failed to clear port ${port}; remaining PIDs: ${pids//$'\n'/ }." >&2
+    return 1
+  fi
+
+  echo "Port ${port} cleared."
+}
+
+echo "Clearing port ${DEPLOY_RUN_PORT} before start."
+kill_port_if_listening "${DEPLOY_RUN_PORT}"
+
+<% if (process.env.NODE_ENV === 'test') { %>
+# Keep the process attached in tests so the test runner can collect logs and stop it.
+exec env COZE_PHASER_GAME_ENV=DEV pnpm vite \
+  --port "${DEPLOY_RUN_PORT}" \
   --host 127.0.0.1 \
   --strictPort
+<% } else { %>
+LOG_DIR="${COZE_WORKSPACE_PATH}/logs"
+LOG_FILE="${LOG_DIR}/phaser-dev.log"
+PID_FILE="${LOG_DIR}/phaser-dev.pid"
+mkdir -p "${LOG_DIR}"
+
+echo "Starting Phaser dev server on port ${DEPLOY_RUN_PORT}..."
+server_pid="$(COZE_PHASER_GAME_ENV=DEV node scripts/spawn-detached.cjs \
+  "${LOG_FILE}" pnpm vite \
+  --port "${DEPLOY_RUN_PORT}" \
+  --host 127.0.0.1 \
+  --strictPort)"
+echo "${server_pid}" > "${PID_FILE}"
+
+sleep 1
+if ! kill -0 "${server_pid}" 2>/dev/null; then
+  echo "Phaser dev server failed to start. See ${LOG_FILE}." >&2
+  tail -n 20 "${LOG_FILE}" >&2 || true
+  rm -f "${PID_FILE}"
+  exit 1
+fi
+
+echo "Phaser dev server started (PID: ${server_pid})."
+echo "Log file: ${LOG_FILE}"
+echo "PID file: ${PID_FILE}"
+<% } %>

package/lib/__templates__/phaser/scripts/spawn-detached.cjs

@@ -0,0 +1,29 @@
+const fs = require('node:fs');
+const { spawn } = require('node:child_process');
+
+const [logFile, command, ...args] = process.argv.slice(2);
+
+if (!logFile || !command) {
+  process.stderr.write(
+    'Usage: node scripts/spawn-detached.cjs <log-file> <command> [...args]\n',
+  );
+  process.exit(1);
+}
+
+const logFd = fs.openSync(logFile, 'a');
+const child = spawn(command, args, {
+  cwd: process.cwd(),
+  detached: process.platform !== 'win32',
+  env: process.env,
+  stdio: ['ignore', logFd, logFd],
+});
+
+fs.closeSync(logFd);
+child.unref();
+
+if (!child.pid) {
+  process.stderr.write('Failed to start detached process.\n');
+  process.exit(1);
+}
+
+process.stdout.write(String(child.pid));

package/lib/__templates__/phaser/scripts/start.sh

@@ -2,10 +2,81 @@
 set -Eeuo pipefail
 
 COZE_WORKSPACE_PATH="${COZE_WORKSPACE_PATH:-$(pwd)}"
-PORT="${DEPLOY_RUN_PORT:-${PORT:-<%= port %>}}"
+PORT="${PORT:-<%= port %>}"
+DEPLOY_RUN_PORT="${DEPLOY_RUN_PORT:-${PORT}}"
 cd "${COZE_WORKSPACE_PATH}"
 
-COZE_PHASER_GAME_ENV=PROD pnpm vite preview \
-  --port "${PORT}" \
+get_listening_pids() {
+  local port="$1"
+
+  if command -v lsof >/dev/null 2>&1; then
+    lsof -tiTCP:"${port}" -sTCP:LISTEN 2>/dev/null || true
+  elif command -v ss >/dev/null 2>&1; then
+    ss -H -lntp 2>/dev/null \
+      | awk -v port="${port}" '$4 ~ ":"port"$"' \
+      | grep -o 'pid=[0-9]*' \
+      | cut -d= -f2 \
+      | sort -u || true
+  else
+    echo "Warning: neither lsof nor ss found, cannot check port ${port}." >&2
+  fi
+}
+
+kill_port_if_listening() {
+  local port="$1"
+  local pids
+
+  pids="$(get_listening_pids "${port}")"
+  if [[ -z "${pids}" ]]; then
+    echo "Port ${port} is free."
+    return
+  fi
+
+  echo "Port ${port} is in use by PIDs: ${pids//$'\n'/ } (SIGKILL)"
+  echo "${pids}" | xargs kill -9 2>/dev/null || true
+  sleep 1
+
+  pids="$(get_listening_pids "${port}")"
+  if [[ -n "${pids}" ]]; then
+    echo "Failed to clear port ${port}; remaining PIDs: ${pids//$'\n'/ }." >&2
+    return 1
+  fi
+
+  echo "Port ${port} cleared."
+}
+
+echo "Clearing port ${DEPLOY_RUN_PORT} before start."
+kill_port_if_listening "${DEPLOY_RUN_PORT}"
+
+<% if (process.env.NODE_ENV === 'test') { %>
+# Keep the process attached in tests so the test runner can collect logs and stop it.
+exec env COZE_PHASER_GAME_ENV=PROD pnpm vite preview \
+  --port "${DEPLOY_RUN_PORT}" \
   --host 127.0.0.1 \
   --strictPort
+<% } else { %>
+LOG_DIR="${COZE_WORKSPACE_PATH}/logs"
+LOG_FILE="${LOG_DIR}/phaser-start.log"
+PID_FILE="${LOG_DIR}/phaser-start.pid"
+mkdir -p "${LOG_DIR}"
+
+echo "Starting Phaser production server on port ${DEPLOY_RUN_PORT}..."
+server_pid="$(COZE_PHASER_GAME_ENV=PROD node scripts/spawn-detached.cjs \
+  "${LOG_FILE}" pnpm vite preview \
+  --port "${DEPLOY_RUN_PORT}" \
+  --host 127.0.0.1 \
+  --strictPort)"
+echo "${server_pid}" > "${PID_FILE}"
+
+sleep 1
+if ! kill -0 "${server_pid}" 2>/dev/null; then
+  echo "Phaser production server failed to start. See ${LOG_FILE}." >&2
+  tail -n 20 "${LOG_FILE}" >&2 || true
+  rm -f "${PID_FILE}"
+  exit 1
+fi
+
+echo "Phaser production server started (PID: ${server_pid})."
+echo "Log file: ${LOG_FILE}"
+echo "PID file: ${PID_FILE}"
+<% } %>

package/lib/__templates__/vite/template.config.js

@@ -2,6 +2,7 @@
 import { spawn } from 'child_process';
 import { resolve, join, basename } from 'path';
 import { appendFileSync, openSync, closeSync, mkdirSync } from 'fs';
+import { homedir } from 'os';
 
 
 
@@ -81,7 +82,8 @@ const config = {
       const projectRoot = resolve(outputPath);
 
       // Determine log directory
-      const logDir = process.env.COZE_LOG_DIR || resolve(__dirname, '../.log');
+      const cozeHome = process.env.COZE_HOME || join(homedir(), '.coze');
+      const logDir = process.env.COZE_LOG_DIR || join(cozeHome, 'logs');
       mkdirSync(logDir, { recursive: true });
 
       // Use project name in log file to avoid conflicts

package/lib/cli.js

@@ -1634,7 +1634,7 @@ function createNodeTransport() {
   };
 }
 
-function _nullishCoalesce$d(lhs, rhsFn) { if (lhs != null) { return lhs; } else { return rhsFn(); } } function _optionalChain$E(ops) { let lastAccessLHS = undefined; let value = ops[0]; let i = 1; while (i < ops.length) { const op = ops[i]; const fn = ops[i + 1]; i += 2; if ((op === 'optionalAccess' || op === 'optionalCall') && value == null) { return undefined; } if (op === 'access' || op === 'optionalAccess') { lastAccessLHS = value; value = fn(value); } else if (op === 'call' || op === 'optionalCall') { value = fn((...args) => value.call(lastAccessLHS, ...args)); lastAccessLHS = undefined; } } return value; }/**
+function _nullishCoalesce$c(lhs, rhsFn) { if (lhs != null) { return lhs; } else { return rhsFn(); } } function _optionalChain$E(ops) { let lastAccessLHS = undefined; let value = ops[0]; let i = 1; while (i < ops.length) { const op = ops[i]; const fn = ops[i + 1]; i += 2; if ((op === 'optionalAccess' || op === 'optionalCall') && value == null) { return undefined; } if (op === 'access' || op === 'optionalAccess') { lastAccessLHS = value; value = fn(value); } else if (op === 'call' || op === 'optionalCall') { value = fn((...args) => value.call(lastAccessLHS, ...args)); lastAccessLHS = undefined; } } return value; }/**
  * Slardar CLI Reporter 主类
  * 封装 @slardar/base 的初始化和上报逻辑
  */
@@ -1691,7 +1691,7 @@ class SlardarCLIReporter {constructor() { SlardarCLIReporter.prototype.__init.ca
         release: config.release,
         env: config.env,
         name: config.name,
-        useLocalConfig: _nullishCoalesce$d(config.useLocalConfig, () => ( false)), // 默认使用服务端配置
+        useLocalConfig: _nullishCoalesce$c(config.useLocalConfig, () => ( false)), // 默认使用服务端配置
         domain: config.domain,
         // 设置本地采样率为 100%，确保事件不被过滤
         sample: {
@@ -2113,7 +2113,7 @@ const EventBuilder = {
 };
 
 var name = "@coze-arch/cli";
-var version = "0.0.36-alpha.844e20";
+var version = "0.0.36-alpha.a7a716";
 var description = "coze coding devtools cli";
 var license = "MIT";
 var author = "fanwenjie.fe@bytedance.com";
@@ -2389,7 +2389,7 @@ const flushSlardar = safeRun('flushSlardar', async () => {
   await reporter.flush();
 });
 
-function _nullishCoalesce$c(lhs, rhsFn) { if (lhs != null) { return lhs; } else { return rhsFn(); } } function _optionalChain$B(ops) { let lastAccessLHS = undefined; let value = ops[0]; let i = 1; while (i < ops.length) { const op = ops[i]; const fn = ops[i + 1]; i += 2; if ((op === 'optionalAccess' || op === 'optionalCall') && value == null) { return undefined; } if (op === 'access' || op === 'optionalAccess') { lastAccessLHS = value; value = fn(value); } else if (op === 'call' || op === 'optionalCall') { value = fn((...args) => value.call(lastAccessLHS, ...args)); lastAccessLHS = undefined; } } return value; }var LogLevel; (function (LogLevel) {
+function _nullishCoalesce$b(lhs, rhsFn) { if (lhs != null) { return lhs; } else { return rhsFn(); } } function _optionalChain$B(ops) { let lastAccessLHS = undefined; let value = ops[0]; let i = 1; while (i < ops.length) { const op = ops[i]; const fn = ops[i + 1]; i += 2; if ((op === 'optionalAccess' || op === 'optionalCall') && value == null) { return undefined; } if (op === 'access' || op === 'optionalAccess') { lastAccessLHS = value; value = fn(value); } else if (op === 'call' || op === 'optionalCall') { value = fn((...args) => value.call(lastAccessLHS, ...args)); lastAccessLHS = undefined; } } return value; }var LogLevel; (function (LogLevel) {
   const ERROR = 0; LogLevel[LogLevel["ERROR"] = ERROR] = "ERROR";
   const WARN = 1; LogLevel[LogLevel["WARN"] = WARN] = "WARN";
   const SUCCESS = 2; LogLevel[LogLevel["SUCCESS"] = SUCCESS] = "SUCCESS";
@@ -2427,7 +2427,7 @@ class Logger {
 
   constructor(options = {}) {
     this.level = this.parseLogLevel(options.level);
-    this.useColor = _nullishCoalesce$c(options.useColor, () => ( this.isColorSupported()));
+    this.useColor = _nullishCoalesce$b(options.useColor, () => ( this.isColorSupported()));
     this.prefix = options.prefix;
   }
 
@@ -2478,7 +2478,7 @@ class Logger {
 
     const icon = this.colorize(options.icon, options.color);
     const prefix = this.prefix ? `${icon} ${this.prefix}` : icon;
-    console.log(prefix, options.message, ...(_nullishCoalesce$c(options.args, () => ( []))));
+    console.log(prefix, options.message, ...(_nullishCoalesce$b(options.args, () => ( []))));
   }
 
   error(message, ...args) {
@@ -2846,9 +2846,9 @@ const COZE_HOME_DIR = '.coze';
 
 /**
  * Logs directory name
- * Default: .coze-logs
+ * Default: ~/.coze/logs
  */
-const LOGS_DIR = '.coze-logs';
+const LOGS_DIR = 'logs';
 
 /**
  * Get the Coze home directory path
@@ -2863,10 +2863,10 @@ const getCozeHome = () =>
  * Get the logs directory path
  * Can be customized via COZE_LOG_DIR environment variable
  *
- * @returns Absolute path to logs directory (default: ~/.coze-logs)
+ * @returns Absolute path to logs directory (default: ~/.coze/logs)
  */
 const getCozeLogsDir = () =>
-  process.env.COZE_LOG_DIR || path.join(os.homedir(), LOGS_DIR);
+  process.env.COZE_LOG_DIR || path.join(getCozeHome(), LOGS_DIR);
 
 /**
  * Get path for a specific file/directory within Coze home
@@ -2897,7 +2897,7 @@ const getCozeFilePath = (relativePath) =>
  * @example
  * ```ts
  * const devLog = getCozeLogPath('dev.log');
- * // Returns: ~/.coze-logs/dev.log
+ * // Returns: ~/.coze/logs/dev.log
  * ```
  */
 const getCozeLogPath = (filename) =>
@@ -3831,12 +3831,12 @@ Scalar.PLAIN = 'PLAIN';
 Scalar.QUOTE_DOUBLE = 'QUOTE_DOUBLE';
 Scalar.QUOTE_SINGLE = 'QUOTE_SINGLE';
 
-function _nullishCoalesce$b(lhs, rhsFn) { if (lhs != null) { return lhs; } else { return rhsFn(); } } function _optionalChain$v(ops) { let lastAccessLHS = undefined; let value = ops[0]; let i = 1; while (i < ops.length) { const op = ops[i]; const fn = ops[i + 1]; i += 2; if ((op === 'optionalAccess' || op === 'optionalCall') && value == null) { return undefined; } if (op === 'access' || op === 'optionalAccess') { lastAccessLHS = value; value = fn(value); } else if (op === 'call' || op === 'optionalCall') { value = fn((...args) => value.call(lastAccessLHS, ...args)); lastAccessLHS = undefined; } } return value; }
+function _nullishCoalesce$a(lhs, rhsFn) { if (lhs != null) { return lhs; } else { return rhsFn(); } } function _optionalChain$v(ops) { let lastAccessLHS = undefined; let value = ops[0]; let i = 1; while (i < ops.length) { const op = ops[i]; const fn = ops[i + 1]; i += 2; if ((op === 'optionalAccess' || op === 'optionalCall') && value == null) { return undefined; } if (op === 'access' || op === 'optionalAccess') { lastAccessLHS = value; value = fn(value); } else if (op === 'call' || op === 'optionalCall') { value = fn((...args) => value.call(lastAccessLHS, ...args)); lastAccessLHS = undefined; } } return value; }
 const defaultTagPrefix = 'tag:yaml.org,2002:';
 function findTagObject(value, tagName, tags) {
     if (tagName) {
         const match = tags.filter(t => t.tag === tagName);
-        const tagObj = _nullishCoalesce$b(match.find(t => !t.format), () => ( match[0]));
+        const tagObj = _nullishCoalesce$a(match.find(t => !t.format), () => ( match[0]));
         if (!tagObj)
             throw new Error(`Tag ${tagName} not found`);
         return tagObj;
@@ -3868,7 +3868,7 @@ function createNode(value, tagName, ctx) {
     if (aliasDuplicateObjects && value && typeof value === 'object') {
         ref = sourceObjects.get(value);
         if (ref) {
-            _nullishCoalesce$b(ref.anchor, () => ( (ref.anchor = onAnchor(value))));
+            _nullishCoalesce$a(ref.anchor, () => ( (ref.anchor = onAnchor(value))));
             return new Alias(ref.anchor);
         }
         else {
@@ -4554,7 +4554,7 @@ function stringifyString(item, ctx, onComment, onChompKeep) {
     return res;
 }
 
-function _nullishCoalesce$a(lhs, rhsFn) { if (lhs != null) { return lhs; } else { return rhsFn(); } } function _optionalChain$t(ops) { let lastAccessLHS = undefined; let value = ops[0]; let i = 1; while (i < ops.length) { const op = ops[i]; const fn = ops[i + 1]; i += 2; if ((op === 'optionalAccess' || op === 'optionalCall') && value == null) { return undefined; } if (op === 'access' || op === 'optionalAccess') { lastAccessLHS = value; value = fn(value); } else if (op === 'call' || op === 'optionalCall') { value = fn((...args) => value.call(lastAccessLHS, ...args)); lastAccessLHS = undefined; } } return value; }
+function _nullishCoalesce$9(lhs, rhsFn) { if (lhs != null) { return lhs; } else { return rhsFn(); } } function _optionalChain$t(ops) { let lastAccessLHS = undefined; let value = ops[0]; let i = 1; while (i < ops.length) { const op = ops[i]; const fn = ops[i + 1]; i += 2; if ((op === 'optionalAccess' || op === 'optionalCall') && value == null) { return undefined; } if (op === 'access' || op === 'optionalAccess') { lastAccessLHS = value; value = fn(value); } else if (op === 'call' || op === 'optionalCall') { value = fn((...args) => value.call(lastAccessLHS, ...args)); lastAccessLHS = undefined; } } return value; }
 function createStringifyContext(doc, options) {
     const opt = Object.assign({
         blockQuote: true,
@@ -4601,7 +4601,7 @@ function getTagObject(tags, item) {
     if (item.tag) {
         const match = tags.filter(t => t.tag === item.tag);
         if (match.length > 0)
-            return _nullishCoalesce$a(match.find(t => t.format === item.format), () => ( match[0]));
+            return _nullishCoalesce$9(match.find(t => t.format === item.format), () => ( match[0]));
     }
     let tagObj = undefined;
     let obj;
@@ -4614,14 +4614,14 @@ function getTagObject(tags, item) {
                 match = testMatch;
         }
         tagObj =
-            _nullishCoalesce$a(match.find(t => t.format === item.format), () => ( match.find(t => !t.format)));
+            _nullishCoalesce$9(match.find(t => t.format === item.format), () => ( match.find(t => !t.format)));
     }
     else {
         obj = item;
         tagObj = tags.find(t => t.nodeClass && obj instanceof t.nodeClass);
     }
     if (!tagObj) {
-        const name = _nullishCoalesce$a(_optionalChain$t([obj, 'optionalAccess', _3 => _3.constructor, 'optionalAccess', _4 => _4.name]), () => ( (obj === null ? 'null' : typeof obj)));
+        const name = _nullishCoalesce$9(_optionalChain$t([obj, 'optionalAccess', _3 => _3.constructor, 'optionalAccess', _4 => _4.name]), () => ( (obj === null ? 'null' : typeof obj)));
         throw new Error(`Tag not resolved for ${name} value`);
     }
     return tagObj;
@@ -4636,7 +4636,7 @@ function stringifyProps(node, tagObj, { anchors, doc }) {
         anchors.add(anchor);
         props.push(`&${anchor}`);
     }
-    const tag = _nullishCoalesce$a(node.tag, () => ( (tagObj.default ? null : tagObj.tag)));
+    const tag = _nullishCoalesce$9(node.tag, () => ( (tagObj.default ? null : tagObj.tag)));
     if (tag)
         props.push(doc.directives.tagString(tag));
     return props.join(' ');
@@ -4662,10 +4662,10 @@ function stringify(item, ctx, onComment, onChompKeep) {
     const node = isNode(item)
         ? item
         : ctx.doc.createNode(item, { onTagObj: o => (tagObj = o) });
-    _nullishCoalesce$a(tagObj, () => ( (tagObj = getTagObject(ctx.doc.schema.tags, node))));
+    _nullishCoalesce$9(tagObj, () => ( (tagObj = getTagObject(ctx.doc.schema.tags, node))));
     const props = stringifyProps(node, tagObj, ctx);
     if (props.length > 0)
-        ctx.indentAtStart = (_nullishCoalesce$a(ctx.indentAtStart, () => ( 0))) + props.length + 1;
+        ctx.indentAtStart = (_nullishCoalesce$9(ctx.indentAtStart, () => ( 0))) + props.length + 1;
     const str = typeof tagObj.stringify === 'function'
         ? tagObj.stringify(node, ctx, onComment, onChompKeep)
         : isScalar(node)
@@ -4678,7 +4678,7 @@ function stringify(item, ctx, onComment, onChompKeep) {
         : `${props}\n${ctx.indent}${str}`;
 }
 
-function _nullishCoalesce$9(lhs, rhsFn) { if (lhs != null) { return lhs; } else { return rhsFn(); } }
+function _nullishCoalesce$8(lhs, rhsFn) { if (lhs != null) { return lhs; } else { return rhsFn(); } }
 function stringifyPair({ key, value }, ctx, onComment, onChompKeep) {
     const { allNullValues, doc, indent, indentStep, options: { commentString, indentSeq, simpleKeys } } = ctx;
     let keyComment = (isNode(key) && key.comment) || null;
@@ -4788,7 +4788,7 @@ function stringifyPair({ key, value }, ctx, onComment, onChompKeep) {
         const vs0 = valueStr[0];
         const nl0 = valueStr.indexOf('\n');
         const hasNewline = nl0 !== -1;
-        const flow = _nullishCoalesce$9(_nullishCoalesce$9(ctx.inFlow, () => ( value.flow)), () => ( value.items.length === 0));
+        const flow = _nullishCoalesce$8(_nullishCoalesce$8(ctx.inFlow, () => ( value.flow)), () => ( value.items.length === 0));
         if (hasNewline || !flow) {
             let hasPropsLine = false;
             if (hasNewline && (vs0 === '&' || vs0 === '!')) {
@@ -4981,9 +4981,9 @@ class Pair {
     }
 }
 
-function _nullishCoalesce$8(lhs, rhsFn) { if (lhs != null) { return lhs; } else { return rhsFn(); } } function _optionalChain$p(ops) { let lastAccessLHS = undefined; let value = ops[0]; let i = 1; while (i < ops.length) { const op = ops[i]; const fn = ops[i + 1]; i += 2; if ((op === 'optionalAccess' || op === 'optionalCall') && value == null) { return undefined; } if (op === 'access' || op === 'optionalAccess') { lastAccessLHS = value; value = fn(value); } else if (op === 'call' || op === 'optionalCall') { value = fn((...args) => value.call(lastAccessLHS, ...args)); lastAccessLHS = undefined; } } return value; }
+function _nullishCoalesce$7(lhs, rhsFn) { if (lhs != null) { return lhs; } else { return rhsFn(); } } function _optionalChain$p(ops) { let lastAccessLHS = undefined; let value = ops[0]; let i = 1; while (i < ops.length) { const op = ops[i]; const fn = ops[i + 1]; i += 2; if ((op === 'optionalAccess' || op === 'optionalCall') && value == null) { return undefined; } if (op === 'access' || op === 'optionalAccess') { lastAccessLHS = value; value = fn(value); } else if (op === 'call' || op === 'optionalCall') { value = fn((...args) => value.call(lastAccessLHS, ...args)); lastAccessLHS = undefined; } } return value; }
 function stringifyCollection(collection, ctx, options) {
-    const flow = _nullishCoalesce$8(ctx.inFlow, () => ( collection.flow));
+    const flow = _nullishCoalesce$7(ctx.inFlow, () => ( collection.flow));
     const stringify = flow ? stringifyFlowCollection : stringifyBlockCollection;
     return stringify(collection, ctx, options);
 }
@@ -5130,7 +5130,7 @@ function addCommentBefore({ indent, options: { commentString } }, lines, comment
     }
 }
 
-function _nullishCoalesce$7(lhs, rhsFn) { if (lhs != null) { return lhs; } else { return rhsFn(); } } function _optionalChain$o(ops) { let lastAccessLHS = undefined; let value = ops[0]; let i = 1; while (i < ops.length) { const op = ops[i]; const fn = ops[i + 1]; i += 2; if ((op === 'optionalAccess' || op === 'optionalCall') && value == null) { return undefined; } if (op === 'access' || op === 'optionalAccess') { lastAccessLHS = value; value = fn(value); } else if (op === 'call' || op === 'optionalCall') { value = fn((...args) => value.call(lastAccessLHS, ...args)); lastAccessLHS = undefined; } } return value; }
+function _nullishCoalesce$6(lhs, rhsFn) { if (lhs != null) { return lhs; } else { return rhsFn(); } } function _optionalChain$o(ops) { let lastAccessLHS = undefined; let value = ops[0]; let i = 1; while (i < ops.length) { const op = ops[i]; const fn = ops[i + 1]; i += 2; if ((op === 'optionalAccess' || op === 'optionalCall') && value == null) { return undefined; } if (op === 'access' || op === 'optionalAccess') { lastAccessLHS = value; value = fn(value); } else if (op === 'call' || op === 'optionalCall') { value = fn((...args) => value.call(lastAccessLHS, ...args)); lastAccessLHS = undefined; } } return value; }
 function findPair(items, key) {
     const k = isScalar(key) ? key.value : key;
     for (const it of items) {
@@ -5227,7 +5227,7 @@ class YAMLMap extends Collection {
     get(key, keepScalar) {
         const it = findPair(this.items, key);
         const node = _optionalChain$o([it, 'optionalAccess', _5 => _5.value]);
-        return _nullishCoalesce$7((!keepScalar && isScalar(node) ? node.value : node), () => ( undefined));
+        return _nullishCoalesce$6((!keepScalar && isScalar(node) ? node.value : node), () => ( undefined));
     }
     has(key) {
         return !!findPair(this.items, key);
@@ -7414,7 +7414,7 @@ const getTemplatePatches = (
 ) =>
   patches.filter(patch => patch.template === template);
 
-function _nullishCoalesce$6(lhs, rhsFn) { if (lhs != null) { return lhs; } else { return rhsFn(); } } function _optionalChain$d(ops) { let lastAccessLHS = undefined; let value = ops[0]; let i = 1; while (i < ops.length) { const op = ops[i]; const fn = ops[i + 1]; i += 2; if ((op === 'optionalAccess' || op === 'optionalCall') && value == null) { return undefined; } if (op === 'access' || op === 'optionalAccess') { lastAccessLHS = value; value = fn(value); } else if (op === 'call' || op === 'optionalCall') { value = fn((...args) => value.call(lastAccessLHS, ...args)); lastAccessLHS = undefined; } } return value; }
+function _nullishCoalesce$5(lhs, rhsFn) { if (lhs != null) { return lhs; } else { return rhsFn(); } } function _optionalChain$d(ops) { let lastAccessLHS = undefined; let value = ops[0]; let i = 1; while (i < ops.length) { const op = ops[i]; const fn = ops[i + 1]; i += 2; if ((op === 'optionalAccess' || op === 'optionalCall') && value == null) { return undefined; } if (op === 'access' || op === 'optionalAccess') { lastAccessLHS = value; value = fn(value); } else if (op === 'call' || op === 'optionalCall') { value = fn((...args) => value.call(lastAccessLHS, ...args)); lastAccessLHS = undefined; } } return value; }
 const DEFAULT_LEGACY_VERSION = 'legacy';
 
 const loadFlagsWithFallback = async () => {
@@ -7597,7 +7597,7 @@ const executePatch = async (
 
   if (options.dryRun) {
     logger.info(`Detected template: ${template}`);
-    logger.info(`Current version: ${_nullishCoalesce$6(projectVersion, () => ( DEFAULT_LEGACY_VERSION))}`);
+    logger.info(`Current version: ${_nullishCoalesce$5(projectVersion, () => ( DEFAULT_LEGACY_VERSION))}`);
     logger.info(`Applied patches: ${appliedPatches.join(', ') || '(none)'}`);
     logger.info('Matched patches:');
     matchedPatches.forEach(patch => {
@@ -7662,7 +7662,7 @@ const registerCommand$5 = program => {
     );
 };
 
-function _nullishCoalesce$5(lhs, rhsFn) { if (lhs != null) { return lhs; } else { return rhsFn(); } } function _optionalChain$c(ops) { let lastAccessLHS = undefined; let value = ops[0]; let i = 1; while (i < ops.length) { const op = ops[i]; const fn = ops[i + 1]; i += 2; if ((op === 'optionalAccess' || op === 'optionalCall') && value == null) { return undefined; } if (op === 'access' || op === 'optionalAccess') { lastAccessLHS = value; value = fn(value); } else if (op === 'call' || op === 'optionalCall') { value = fn((...args) => value.call(lastAccessLHS, ...args)); lastAccessLHS = undefined; } } return value; }
+function _nullishCoalesce$4(lhs, rhsFn) { if (lhs != null) { return lhs; } else { return rhsFn(); } } function _optionalChain$c(ops) { let lastAccessLHS = undefined; let value = ops[0]; let i = 1; while (i < ops.length) { const op = ops[i]; const fn = ops[i + 1]; i += 2; if ((op === 'optionalAccess' || op === 'optionalCall') && value == null) { return undefined; } if (op === 'access' || op === 'optionalAccess') { lastAccessLHS = value; value = fn(value); } else if (op === 'call' || op === 'optionalCall') { value = fn((...args) => value.call(lastAccessLHS, ...args)); lastAccessLHS = undefined; } } return value; }
 const d$1 = debug('coze-init-cli:run');
 
 /**
@@ -7811,7 +7811,7 @@ const executeRun = async (commandName, options = {}) => {
         const buildDuration = Date.now() - buildStartTime;
 
         if (code !== 0) {
-          const errorMessage = `Command exited with code ${_nullishCoalesce$5(code, () => ( 'unknown'))}${signal ? ` and signal ${signal}` : ''}`;
+          const errorMessage = `Command exited with code ${_nullishCoalesce$4(code, () => ( 'unknown'))}${signal ? ` and signal ${signal}` : ''}`;
           logger.error(errorMessage);
           logger.error(`Check log file for details: ${logFilePath}`);
 
@@ -7823,12 +7823,12 @@ const executeRun = async (commandName, options = {}) => {
             categories: {
               fixDuration: String(fixDuration),
               buildDuration: String(buildDuration),
-              exitCode: String(_nullishCoalesce$5(code, () => ( 'unknown'))),
+              exitCode: String(_nullishCoalesce$4(code, () => ( 'unknown'))),
               projectType,
             },
             errorContext: {
-              exitCode: String(_nullishCoalesce$5(code, () => ( 'unknown'))),
-              signal: _nullishCoalesce$5(signal, () => ( 'none')),
+              exitCode: String(_nullishCoalesce$4(code, () => ( 'unknown'))),
+              signal: _nullishCoalesce$4(signal, () => ( 'none')),
               logFile: logFilePath,
               projectType,
             },
@@ -8847,7 +8847,7 @@ const registerCommand$3 = program => {
     });
 };
 
-function _nullishCoalesce$4(lhs, rhsFn) { if (lhs != null) { return lhs; } else { return rhsFn(); } }
+function _nullishCoalesce$3(lhs, rhsFn) { if (lhs != null) { return lhs; } else { return rhsFn(); } }
 
 
 const d = debug('coze-init-cli:check-bins');
@@ -8904,7 +8904,7 @@ const checkBins = async (cwd, fix) => {
 
       const bins =
         typeof depPkg.bin === 'string'
-          ? { [_nullishCoalesce$4(depName.split('/').pop(), () => ( depName))]: depPkg.bin }
+          ? { [_nullishCoalesce$3(depName.split('/').pop(), () => ( depName))]: depPkg.bin }
           : depPkg.bin;
 
       d('%s declares bins: %o', depName, Object.keys(bins));
@@ -9848,7 +9848,7 @@ const execute = async (
   };
 };
 
-function _nullishCoalesce$3(lhs, rhsFn) { if (lhs != null) { return lhs; } else { return rhsFn(); } }
+function _nullishCoalesce$2(lhs, rhsFn) { if (lhs != null) { return lhs; } else { return rhsFn(); } }
 /**
  * 运行 pnpm install
  */
@@ -9969,8 +9969,8 @@ const runDev = (projectPath) => {
   // 获取当前 CLI 的可执行文件路径
   // process.argv[0] 是 node，process.argv[1] 是 CLI 入口文件
   // 二者在 CLI 运行时必然存在，兜底空串仅为满足类型收窄，运行时不会命中
-  const nodeBin = _nullishCoalesce$3(process.argv[0], () => ( ''));
-  const cliPath = _nullishCoalesce$3(process.argv[1], () => ( ''));
+  const nodeBin = _nullishCoalesce$2(process.argv[0], () => ( ''));
+  const cliPath = _nullishCoalesce$2(process.argv[1], () => ( ''));
 
   try {
     // 使用通用的后台执行函数启动开发服务器
@@ -10040,7 +10040,7 @@ const executeTemplateEngineStep = async ctx => {
     templateName: ctx.templateName,
     outputPath: ctx.outputPath,
     command: ctx.command,
-    force: _nullishCoalesce$3(ctx.options.force, () => ( false)),
+    force: _nullishCoalesce$2(ctx.options.force, () => ( false)),
   });
 
   // 保存结果到上下文
@@ -10317,7 +10317,7 @@ const registerCommand$1 = program => {
     .allowUnknownOption() // 允许透传参数
     .action(async (directory, options, command) => {
       // 位置参数优先级高于 --output 选项
-      const outputPath = _nullishCoalesce$3(directory, () => ( options.output));
+      const outputPath = _nullishCoalesce$2(directory, () => ( options.output));
       // Always use force mode - overwrite existing files without conflict check
       const force = true;
       await executeInit({ ...options, output: outputPath, force }, command);
@@ -10832,6 +10832,7 @@ function _optionalChain$9(ops) { let lastAccessLHS = undefined; let value = ops[
 
 
 
+
 const API_PREFIX = '/api/coding/deployment/v2';
 const CREATE_PROJECT_PATH = '/api/ideserver_api/project/create_vibe_project';
 const LIST_SPACES_PATH = '/api/playground_api/space/list';
@@ -11088,6 +11089,12 @@ class DeployApiClient {
     );
   }
 
+  getOnlineEnvironment(appId) {
+    return this.post(
+      '/environment/get_online', { app_id: appId }, 'app_id',
+    );
+  }
+
   checkRollbackDatabase(body) {
     return this.post(
       '/deploy_history/check_rollback_database', body, 'is_rollback_possible',
@@ -11509,6 +11516,7 @@ const resolveDeployHistoryId = (
 function _optionalChain$6(ops) { let lastAccessLHS = undefined; let value = ops[0]; let i = 1; while (i < ops.length) { const op = ops[i]; const fn = ops[i + 1]; i += 2; if ((op === 'optionalAccess' || op === 'optionalCall') && value == null) { return undefined; } if (op === 'access' || op === 'optionalAccess') { lastAccessLHS = value; value = fn(value); } else if (op === 'call' || op === 'optionalCall') { value = fn((...args) => value.call(lastAccessLHS, ...args)); lastAccessLHS = undefined; } } return value; }
 
 const SOURCE_SNAPSHOT_BYTES = 20;
+const PROJECT_METADATA_FILE_MODE = 0o644;
 
 const isId = (value) =>
   typeof value === 'string' && /^\d+$/u.test(value);
@@ -11629,7 +11637,11 @@ const writeProjectBinding = async (
   }
   const tempPath = node_path.join(node_path.dirname(path), `.coze-${node_crypto.randomUUID()}.tmp`);
   try {
-    await promises.writeFile(tempPath, content, { encoding: 'utf8', mode: 0o600 });
+    await promises.writeFile(tempPath, content, {
+      encoding: 'utf8',
+      mode: PROJECT_METADATA_FILE_MODE,
+    });
+    await promises.chmod(tempPath, PROJECT_METADATA_FILE_MODE);
     await promises.rename(tempPath, path);
   } finally {
     await promises.rm(tempPath, { force: true });
@@ -11653,8 +11665,9 @@ const ensureProjectMetadata = async (
   await promises.writeFile(
     node_path.join(sourceRoot, '.coze'),
     `[project]\nname = ${JSON.stringify(name)}\nproject_type = ${JSON.stringify(projectType)}\n`,
-    { encoding: 'utf8', mode: 0o600 },
+    { encoding: 'utf8', mode: PROJECT_METADATA_FILE_MODE },
   );
+  await promises.chmod(node_path.join(sourceRoot, '.coze'), PROJECT_METADATA_FILE_MODE);
   return readProjectMetadata(sourceRoot);
 };
 
@@ -11736,7 +11749,157 @@ const readDeployLocalContext = async (
   return { ...sourceSnapshot, metadata, isPagesDeployment };
 };
 
+// 服务端 deploy_app/list 的 page_size 上限，超了会被判参数错误。
+// 客户端先拦一道，是为了把错误说在本地（带上上限值），而不是回一句服务端的通用参数错误。
+const APP_LIST_MAX_PAGE_SIZE = 100;
+
+// page_token 是**页码的十进制字符串**（服务端口径，与 deploy_history/list 一致），不是不透明游标。
+// 所以这里能、也应该在本地校验：`--page-token abc` 早报错，比发出去再被拒强。
+const parsePositiveInt = (
+  raw,
+  option,
+  code,
+  max,
+) => {
+  const value = Number(raw);
+  if (!Number.isSafeInteger(value) || value <= 0) {
+    throw new CliError(`${option} must be a positive integer.`, code, { [option]: raw });
+  }
+  if (max !== undefined && value > max) {
+    throw new CliError(`${option} must not exceed ${String(max)}.`, code, { [option]: raw });
+  }
+  return value;
+};
+
+// ⛔ 别再用 `Number(options.pageSize || 20)`：`--page-size abc` 会算出 NaN，
+// JSON.stringify 把它写成 null 发给服务端，最后表现为「参数没生效」而不是「参数写错了」。
+const parsePageSize = (
+  raw,
+  fallback,
+  max,
+) => {
+  if (raw === undefined || raw === '') {
+    return fallback;
+  }
+  return parsePositiveInt(raw, '--page-size', 'INVALID_PAGE_SIZE', max);
+};
+
+const parsePageToken = (raw) => {
+  if (raw === undefined || raw === '') {
+    return undefined;
+  }
+  parsePositiveInt(raw, '--page-token', 'INVALID_PAGE_TOKEN');
+  return raw;
+};
+
+
+
+
+
+
+
+// collectAllPages 顺着 next_page_token 把所有页取回来。
+//
+// 服务端从「全量单页」改成真分页之后，`app list` 一次只回一页；想要「我的全部应用」就得翻页。
+// 与其让每个调用方各写一遍循环，不如给一个 --all。
+//
+// ⚠️ 不设页数上限截断：静默截断正是这次要修掉的毛病。只防死循环——服务端如果一直回同一个
+// token（或说 has_more 却不给 token），直接报错，而不是无限翻。
+const collectAllPages = async ( 
+  fetchPage,
+) => {
+  const items = [];
+  const seen = new Set();
+  let pageToken;
+  let pages = 0;
+  for (;;) {
+    const page = await fetchPage(pageToken);
+    items.push(...(page.items || []));
+    pages += 1;
+    if (!page.has_more) {
+      return { items, pages };
+    }
+    const next = page.next_page_token;
+    if (!next || seen.has(next)) {
+      throw new CliError(
+        'The server reported more pages but returned no usable next_page_token.',
+        'INVALID_PAGE_TOKEN',
+        { next_page_token: next, pages },
+      );
+    }
+    seen.add(next);
+    pageToken = next;
+  }
+};
+
+async function _asyncOptionalChain(ops) { let lastAccessLHS = undefined; let value = ops[0]; let i = 1; while (i < ops.length) { const op = ops[i]; const fn = ops[i + 1]; i += 2; if ((op === 'optionalAccess' || op === 'optionalCall') && value == null) { return undefined; } if (op === 'access' || op === 'optionalAccess') { lastAccessLHS = value; value = await fn(value); } else if (op === 'call' || op === 'optionalCall') { value = await fn((...args) => value.call(lastAccessLHS, ...args)); lastAccessLHS = undefined; } } return value; }
+
 const registerDeployReadCommands = (deploy) => {
+  deploy
+    .command('status')
+    .option('--app-id <appId>', 'Application ID')
+    .option('--deploy-id <deployId>', 'Deployment history ID')
+    .action(async (options, command) => {
+      const runtime = await getRuntime(command);
+      const appId = await requireAppId(runtime.cwd, getDeployAppIdOption(options, command));
+      let deployHistoryId = options.deployId;
+      if (!deployHistoryId) {
+        deployHistoryId = await _asyncOptionalChain([(
+          await runtime.client.listDeployHistory({ app_id: appId, page_size: 1 })
+        ), 'access', async _ => _.deploy_history_list, 'optionalAccess', async _2 => _2[0], 'optionalAccess', async _3 => _3.deploy_history_id]);
+      }
+      if (!deployHistoryId) {
+        throw new CliError('No deployment history found.', 'DEPLOYMENT_NOT_FOUND');
+      }
+      const history = await runtime.client.getDeployHistory({
+        app_id: appId,
+        deploy_history_id: deployHistoryId,
+      });
+      runtime.output.print({
+        app_id: appId,
+        deploy_history_id: deployHistoryId,
+        status: getDeployStatusText(history.status),
+        commit_hash: history.commit_hash,
+        domains: history.domain_list || [],
+        error_analysis: history.error_analysis,
+        deploy_detail: formatDeployDetails(history),
+        connector_data_list: history.connector_data_list || [],
+        mobile_artifact_list: history.mobile_artifact_list || [],
+      });
+    });
+
+  deploy
+    .command('list')
+    .option('--app-id <appId>', 'Application ID')
+    .option('--page-size <pageSize>', 'Page size', '10')
+    .option('--page-token <pageToken>', 'Page token (page number)')
+    .action(async (options, command) => {
+      // 先在本地校验：`--page-size abc` 以前算出 NaN 发出去，表现成「参数没生效」。
+      const pageSize = parsePageSize(options.pageSize, 10);
+      const pageToken = parsePageToken(options.pageToken);
+      const runtime = await getRuntime(command);
+      const appId = await requireAppId(runtime.cwd, getDeployAppIdOption(options, command));
+      const data = await runtime.client.listDeployHistory({
+        app_id: appId,
+        page_size: pageSize,
+        page_token: pageToken,
+      });
+      runtime.output.print({
+        items: (data.deploy_history_list || []).map(item => ({
+          deploy_history_id: item.deploy_history_id,
+          status: getDeployStatusText(item.status),
+          commit_hash: item.commit_hash_short || item.commit_hash,
+          created_at: item.created_at,
+          can_rollback: item.can_rollback,
+          deploy_detail: formatDeployDetails(item),
+          connector_data_list: item.connector_data_list || [],
+          mobile_artifact_list: item.mobile_artifact_list || [],
+        })),
+        next_page_token: data.next_page_token,
+        has_more: data.has_more,
+      });
+    });
+
   deploy
     .command('online')
     .description('Show the current online deployment')
@@ -11754,6 +11917,7 @@ const registerDeployReadCommands = (deploy) => {
           created_at: item.created_at,
           deploy_detail: formatDeployDetails(item),
           domains: item.domain_list || [],
+          mobile_artifact_list: item.mobile_artifact_list || [],
         })),
       });
     });
@@ -11796,223 +11960,23 @@ const registerDeployReadCommands = (deploy) => {
     });
 };
 
-function _nullishCoalesce$2(lhs, rhsFn) { if (lhs != null) { return lhs; } else { return rhsFn(); } }
-
-const ENV_KEY_PATTERN = /^[A-Za-z_][A-Za-z0-9_]*$/;
-const RESERVED_ENV_PREFIX = 'COZE_';
-
-const assertEnvKey = (key) => {
-  if (!ENV_KEY_PATTERN.test(key)) {
-    throw new CliError(
-      `Invalid environment variable name: ${key}`,
-      'ENV_KEY_INVALID',
-    );
-  }
-  if (key.startsWith(RESERVED_ENV_PREFIX)) {
-    throw new CliError(
-      `${RESERVED_ENV_PREFIX} is reserved for platform environment variables.`,
-      'ENV_KEY_RESERVED',
-    );
-  }
-};
-
-const readEnvFile = async (sourceRoot) => {
-  try {
-    return await promises.readFile(node_path.join(sourceRoot, '.env'), 'utf8');
-  } catch (error) {
-    if ((error ).code === 'ENOENT') {
-      return undefined;
-    }
-    throw new CliError('Unable to read the local .env file.', 'ENV_FILE_READ_FAILED');
-  }
-};
-
-const parseEnvFile = (content) => {
-  try {
-    const values = node_util.parseEnv(content);
-    if (Object.keys(values).some(key => !ENV_KEY_PATTERN.test(key))) {
-      throw new Error('invalid environment variable name');
-    }
-    return values;
-  } catch (e) {
-    throw new CliError('The local .env file is invalid.', 'ENV_FILE_INVALID');
-  }
-};
-
-const assignmentPattern = (key) =>
-  new RegExp(`^\\s*(?:export\\s+)?${key}\\s*=`, 'u');
-
-const formatEnvValue = (value) => {
-  if (value.includes('\n') || value.includes('\r')) {
-    throw new CliError(
-      'Environment variable values must be single-line.',
-      'ENV_VALUE_INVALID',
-    );
-  }
-  if (!value.includes("'")) {
-    return `'${value}'`;
-  }
-  if (!value.includes('"')) {
-    return `"${value}"`;
-  }
-  if (value === value.trim() && !value.includes('#')) {
-    return value;
-  }
-  throw new CliError(
-    'Environment variable values containing both quote types cannot also contain surrounding whitespace or #.',
-    'ENV_VALUE_INVALID',
-  );
-};
-
-const writeEnvFile = async (sourceRoot, content) => {
-  try {
-    await promises.writeFile(node_path.join(sourceRoot, '.env'), content, { encoding: 'utf8', mode: 0o600 });
-  } catch (e2) {
-    throw new CliError('Unable to write the local .env file.', 'ENV_FILE_WRITE_FAILED');
-  }
-};
-
-const listProjectEnv = async (
-  sourceRoot,
-) => {
-  const content = await readEnvFile(sourceRoot);
-  if (content === undefined) {
-    return {};
-  }
-  return Object.fromEntries(
-    Object.entries(parseEnvFile(content))
-      .filter(([key]) => !key.startsWith(RESERVED_ENV_PREFIX))
-      .map(([key, value]) => [key, _nullishCoalesce$2(value, () => ( ''))]),
-  );
-};
-
-const setProjectEnv = async (
-  sourceRoot,
-  key,
-  value,
-) => {
-  assertEnvKey(key);
-  const content = (await readEnvFile(sourceRoot)) || '';
-  if (content) {
-    parseEnvFile(content);
-  }
-  const lines = content.split(/\r?\n/u);
-  const pattern = assignmentPattern(key);
-  const replacement = `${key}=${formatEnvValue(value)}`;
-  const updatedLines = [];
-  let replaced = false;
-  for (const line of lines) {
-    if (pattern.test(line)) {
-      if (!replaced) {
-        updatedLines.push(replacement);
-        replaced = true;
-      }
-    } else {
-      updatedLines.push(line);
-    }
-  }
-  if (!replaced) {
-    while (updatedLines[updatedLines.length - 1] === '') {
-      updatedLines.pop();
-    }
-    updatedLines.push(replacement);
-  }
-  while (updatedLines[updatedLines.length - 1] === '') {
-    updatedLines.pop();
-  }
-  await writeEnvFile(sourceRoot, `${updatedLines.join('\n')}\n`);
-};
-
-const deleteProjectEnv = async (
-  sourceRoot,
-  key,
-) => {
-  assertEnvKey(key);
-  const content = await readEnvFile(sourceRoot);
-  if (content === undefined) {
-    return false;
-  }
-  parseEnvFile(content);
-  const pattern = assignmentPattern(key);
-  const lines = content.split(/\r?\n/u);
-  const filtered = lines.filter(line => !pattern.test(line));
-  if (filtered.length === lines.length) {
-    return false;
-  }
-  await writeEnvFile(sourceRoot, filtered.join('\n'));
-  return true;
-};
-
-const readProjectEnv = async (
-  sourceRoot,
-) => {
-  const content = await readEnvFile(sourceRoot);
-  if (content === undefined) {
-    return [];
-  }
-  const values = parseEnvFile(content);
-
-  return Object.entries(values)
-    .filter(([key]) => !key.startsWith(RESERVED_ENV_PREFIX))
-    .map(([key, value]) => ({
-      secret_id: '',
-      secret_key: key,
-      secret_val: _nullishCoalesce$2(value, () => ( '')),
-      secret_type: 'user_custom',
-    }));
-};
-
-const resolveSourceRoot = (cwd, options) =>
-  node_path.resolve(cwd, options.sourceRoot || '.');
-
-const addSourceRootOption = (command) =>
-  command.option('--source-root <sourceRoot>', 'Local project root', '.');
-
 const registerEnv = (code) => {
   const env = code
     .command('env')
-    .description('Manage the local project .env file');
+    .description('Inspect the current online environment snapshot');
 
-  addSourceRootOption(env.command('list').description('List local environment variables')).action(
-    async (options, command) => {
-      const runtime = await getRuntime(command);
-      const sourceRoot = resolveSourceRoot(runtime.cwd, options);
-      runtime.output.print({
-        source_root: sourceRoot,
-        variables: await listProjectEnv(sourceRoot),
-      });
-    },
-  );
-
-  addSourceRootOption(
-    env
-      .command('set <key> <value>')
-      .description('Set a local environment variable'),
-  ).action(
-    async (
-      key,
-      value,
-      options,
-      command,
-    ) => {
+  env
+    .command('list')
+    .description('List environment variables of the current online deployment')
+    .option('--app-id <appId>', 'Application ID')
+    .action(async (options, command) => {
       const runtime = await getRuntime(command);
-      const sourceRoot = resolveSourceRoot(runtime.cwd, options);
-      await setProjectEnv(sourceRoot, key, value);
-      runtime.output.print({ source_root: sourceRoot, key, updated: true });
-    },
-  );
-
-  addSourceRootOption(
-    env.command('delete <key>').description('Delete a local environment variable'),
-  ).action(async (key, options, command) => {
-    const runtime = await getRuntime(command);
-    const sourceRoot = resolveSourceRoot(runtime.cwd, options);
-    runtime.output.print({
-      source_root: sourceRoot,
-      key,
-      deleted: await deleteProjectEnv(sourceRoot, key),
+      const appId = await requireAppId(
+        runtime.cwd,
+        getDeployAppIdOption(options, command),
+      );
+      runtime.output.print(await runtime.client.getOnlineEnvironment(appId));
     });
-  });
 };
 
 function _nullishCoalesce$1(lhs, rhsFn) { if (lhs != null) { return lhs; } else { return rhsFn(); } } function _optionalChain$4(ops) { let lastAccessLHS = undefined; let value = ops[0]; let i = 1; while (i < ops.length) { const op = ops[i]; const fn = ops[i + 1]; i += 2; if ((op === 'optionalAccess' || op === 'optionalCall') && value == null) { return undefined; } if (op === 'access' || op === 'optionalAccess') { lastAccessLHS = value; value = fn(value); } else if (op === 'call' || op === 'optionalCall') { value = fn((...args) => value.call(lastAccessLHS, ...args)); lastAccessLHS = undefined; } } return value; }
@@ -12150,89 +12114,6 @@ const registerMiniProgram = (code) => {
     });
 };
 
-// 服务端 deploy_app/list 的 page_size 上限，超了会被判参数错误。
-// 客户端先拦一道，是为了把错误说在本地（带上上限值），而不是回一句服务端的通用参数错误。
-const APP_LIST_MAX_PAGE_SIZE = 100;
-
-// page_token 是**页码的十进制字符串**（服务端口径，与 deploy_history/list 一致），不是不透明游标。
-// 所以这里能、也应该在本地校验：`--page-token abc` 早报错，比发出去再被拒强。
-const parsePositiveInt = (
-  raw,
-  option,
-  code,
-  max,
-) => {
-  const value = Number(raw);
-  if (!Number.isSafeInteger(value) || value <= 0) {
-    throw new CliError(`${option} must be a positive integer.`, code, { [option]: raw });
-  }
-  if (max !== undefined && value > max) {
-    throw new CliError(`${option} must not exceed ${String(max)}.`, code, { [option]: raw });
-  }
-  return value;
-};
-
-// ⛔ 别再用 `Number(options.pageSize || 20)`：`--page-size abc` 会算出 NaN，
-// JSON.stringify 把它写成 null 发给服务端，最后表现为「参数没生效」而不是「参数写错了」。
-const parsePageSize = (
-  raw,
-  fallback,
-  max,
-) => {
-  if (raw === undefined || raw === '') {
-    return fallback;
-  }
-  return parsePositiveInt(raw, '--page-size', 'INVALID_PAGE_SIZE', max);
-};
-
-const parsePageToken = (raw) => {
-  if (raw === undefined || raw === '') {
-    return undefined;
-  }
-  parsePositiveInt(raw, '--page-token', 'INVALID_PAGE_TOKEN');
-  return raw;
-};
-
-
-
-
-
-
-
-// collectAllPages 顺着 next_page_token 把所有页取回来。
-//
-// 服务端从「全量单页」改成真分页之后，`app list` 一次只回一页；想要「我的全部应用」就得翻页。
-// 与其让每个调用方各写一遍循环，不如给一个 --all。
-//
-// ⚠️ 不设页数上限截断：静默截断正是这次要修掉的毛病。只防死循环——服务端如果一直回同一个
-// token（或说 has_more 却不给 token），直接报错，而不是无限翻。
-const collectAllPages = async ( 
-  fetchPage,
-) => {
-  const items = [];
-  const seen = new Set();
-  let pageToken;
-  let pages = 0;
-  for (;;) {
-    const page = await fetchPage(pageToken);
-    items.push(...(page.items || []));
-    pages += 1;
-    if (!page.has_more) {
-      return { items, pages };
-    }
-    const next = page.next_page_token;
-    if (!next || seen.has(next)) {
-      throw new CliError(
-        'The server reported more pages but returned no usable next_page_token.',
-        'INVALID_PAGE_TOKEN',
-        { next_page_token: next, pages },
-      );
-    }
-    seen.add(next);
-    pageToken = next;
-  }
-};
-
 function _optionalChain$3(ops) { let lastAccessLHS = undefined; let value = ops[0]; let i = 1; while (i < ops.length) { const op = ops[i]; const fn = ops[i + 1]; i += 2; if ((op === 'optionalAccess' || op === 'optionalCall') && value == null) { return undefined; } if (op === 'access' || op === 'optionalAccess') { lastAccessLHS = value; value = fn(value); } else if (op === 'call' || op === 'optionalCall') { value = fn((...args) => value.call(lastAccessLHS, ...args)); lastAccessLHS = undefined; } } return value; }
 
 const POLL_INTERVAL_MS = 3000;
@@ -12946,7 +12827,7 @@ const createDeploymentWithSourcePackage = async (
   return { uploadMode: 'direct' , result };
 };
 
-function _nullishCoalesce(lhs, rhsFn) { if (lhs != null) { return lhs; } else { return rhsFn(); } } function _optionalChain(ops) { let lastAccessLHS = undefined; let value = ops[0]; let i = 1; while (i < ops.length) { const op = ops[i]; const fn = ops[i + 1]; i += 2; if ((op === 'optionalAccess' || op === 'optionalCall') && value == null) { return undefined; } if (op === 'access' || op === 'optionalAccess') { lastAccessLHS = value; value = fn(value); } else if (op === 'call' || op === 'optionalCall') { value = fn((...args) => value.call(lastAccessLHS, ...args)); lastAccessLHS = undefined; } } return value; } async function _asyncOptionalChain(ops) { let lastAccessLHS = undefined; let value = ops[0]; let i = 1; while (i < ops.length) { const op = ops[i]; const fn = ops[i + 1]; i += 2; if ((op === 'optionalAccess' || op === 'optionalCall') && value == null) { return undefined; } if (op === 'access' || op === 'optionalAccess') { lastAccessLHS = value; value = await fn(value); } else if (op === 'call' || op === 'optionalCall') { value = await fn((...args) => value.call(lastAccessLHS, ...args)); lastAccessLHS = undefined; } } return value; }
+function _nullishCoalesce(lhs, rhsFn) { if (lhs != null) { return lhs; } else { return rhsFn(); } } function _optionalChain(ops) { let lastAccessLHS = undefined; let value = ops[0]; let i = 1; while (i < ops.length) { const op = ops[i]; const fn = ops[i + 1]; i += 2; if ((op === 'optionalAccess' || op === 'optionalCall') && value == null) { return undefined; } if (op === 'access' || op === 'optionalAccess') { lastAccessLHS = value; value = fn(value); } else if (op === 'call' || op === 'optionalCall') { value = fn((...args) => value.call(lastAccessLHS, ...args)); lastAccessLHS = undefined; } } return value; }
 const SUPPORTED_MINIPROGRAM_CONNECTOR_IDS = new Set(['10000127', '10000126']);
 const collectConnectorId = (value, previous) => [
   ...previous,
@@ -13093,8 +12974,25 @@ const registerDeploy = (code) => {
       }
       let encryptEnvVariable;
       if (applicationType !== 'pages') {
-        runtime.output.debug('[deploy] Reading and encrypting local environment variables...');
-        const envSecrets = await readProjectEnv(sourceRoot);
+        runtime.output.debug('[deploy] Loading and encrypting online environment variables...');
+        const onlineEnvironment = appId
+          ? await runtime.client.getOnlineEnvironment(appId)
+          : undefined;
+        if (onlineEnvironment && onlineEnvironment.snapshot_status >= 3) {
+          throw new CliError(
+            onlineEnvironment.status_message ||
+              'The current online environment snapshot is unavailable.',
+            'ONLINE_ENVIRONMENT_UNAVAILABLE',
+          );
+        }
+        const envSecrets = (_optionalChain([onlineEnvironment, 'optionalAccess', _ => _.variables]) || [])
+          .filter(variable => variable.source === 'user')
+          .map(variable => ({
+            secret_id: '',
+            secret_key: variable.key,
+            secret_val: variable.value,
+            secret_type: 'user_custom' ,
+          }));
         const encrypted = await runtime.client.encryptProjectSecret(projectId, envSecrets);
         encryptEnvVariable = encrypted.sealed_secrets;
         if (!encryptEnvVariable) {
@@ -13168,73 +13066,11 @@ const registerDeploy = (code) => {
         deploy_history_id: deployHistoryId,
         version: result.version,
         commit_hash: commitHash,
-        status: getDeployStatusText(_nullishCoalesce(_optionalChain([history, 'optionalAccess', _ => _.status]), () => ( result.status))),
+        status: getDeployStatusText(_nullishCoalesce(_optionalChain([history, 'optionalAccess', _2 => _2.status]), () => ( result.status))),
         source_package_size_bytes: sourcePackage.sizeBytes,
         upload_mode: deployment.uploadMode,
         local_link: appId && !projectCreated ? 'unchanged' : 'written',
-      });
-    });
-
-  deploy
-    .command('status')
-    .option('--app-id <appId>', 'Application ID')
-    .option('--deploy-id <deployId>', 'Deployment history ID')
-    .action(async (options, command) => {
-      const runtime = await getRuntime(command);
-      const appId = await requireAppId(runtime.cwd, getDeployAppIdOption(options, command));
-      let deployHistoryId = options.deployId;
-      if (!deployHistoryId) {
-        deployHistoryId = await _asyncOptionalChain([(
-          await runtime.client.listDeployHistory({ app_id: appId, page_size: 1 })
-        ), 'access', async _2 => _2.deploy_history_list, 'optionalAccess', async _3 => _3[0], 'optionalAccess', async _4 => _4.deploy_history_id]);
-      }
-      if (!deployHistoryId) {
-        throw new CliError('No deployment history found.', 'DEPLOYMENT_NOT_FOUND');
-      }
-      const history = await runtime.client.getDeployHistory({
-        app_id: appId,
-        deploy_history_id: deployHistoryId,
-      });
-      runtime.output.print({
-        app_id: appId,
-        deploy_history_id: deployHistoryId,
-        status: getDeployStatusText(history.status),
-        commit_hash: history.commit_hash,
-        domains: history.domain_list || [],
-        error_analysis: history.error_analysis,
-        deploy_detail: formatDeployDetails(history),
-        connector_data_list: history.connector_data_list || [],
-      });
-    });
-
-  deploy
-    .command('list')
-    .option('--app-id <appId>', 'Application ID')
-    .option('--page-size <pageSize>', 'Page size', '10')
-    .option('--page-token <pageToken>', 'Page token (page number)')
-    .action(async (options, command) => {
-      // 先在本地校验：`--page-size abc` 以前算出 NaN 发出去，表现成「参数没生效」。
-      const pageSize = parsePageSize(options.pageSize, 10);
-      const pageToken = parsePageToken(options.pageToken);
-      const runtime = await getRuntime(command);
-      const appId = await requireAppId(runtime.cwd, getDeployAppIdOption(options, command));
-      const data = await runtime.client.listDeployHistory({
-        app_id: appId,
-        page_size: pageSize,
-        page_token: pageToken,
-      });
-      runtime.output.print({
-        items: (data.deploy_history_list || []).map(item => ({
-          deploy_history_id: item.deploy_history_id,
-          status: getDeployStatusText(item.status),
-          commit_hash: item.commit_hash_short || item.commit_hash,
-          created_at: item.created_at,
-          can_rollback: item.can_rollback,
-          deploy_detail: formatDeployDetails(item),
-          connector_data_list: item.connector_data_list || [],
-        })),
-        next_page_token: data.next_page_token,
-        has_more: data.has_more,
+        mobile_artifact_list: _optionalChain([history, 'optionalAccess', _3 => _3.mobile_artifact_list]) || [],
       });
     });
 
@@ -13337,7 +13173,7 @@ const registerDeploy = (code) => {
     .action(async (options, command) => {
       const runtime = await getRuntime(command);
       const appId = await requireAppId(runtime.cwd, getDeployAppIdOption(options, command));
-      let key = _optionalChain([options, 'access', _5 => _5.key, 'optionalAccess', _6 => _6.trim, 'call', _7 => _7()]);
+      let key = _optionalChain([options, 'access', _4 => _4.key, 'optionalAccess', _5 => _5.trim, 'call', _6 => _6()]);
       if (!key) {
         const history = await runtime.client.getDeployHistory({
           app_id: appId,
@@ -13379,7 +13215,7 @@ const registerDeploy = (code) => {
       const runtime = await getRuntime(command);
       const appId = await requireAppId(runtime.cwd, getDeployAppIdOption(options, command));
       const application = await runtime.client.getApplication(appId);
-      const commitHash = options.commitId || _optionalChain([application, 'access', _8 => _8.latest_deployment, 'optionalAccess', _9 => _9.commit_hash]);
+      const commitHash = options.commitId || _optionalChain([application, 'access', _7 => _7.latest_deployment, 'optionalAccess', _8 => _8.commit_hash]);
       if (!commitHash) {
         throw new CliError('No deployment commit is available.', 'DEPLOYMENT_NOT_FOUND');
       }

package/lib/deploy/package-project.js

@@ -36,6 +36,7 @@ const LOCAL_METADATA_FILES = new Set([
 ]);
 const UPLOAD_SESSION_TEMP_PREFIX = '.coze-deploy-upload-';
 const REPRODUCIBLE_ARCHIVE_MTIME = new Date(0);
+const PROJECT_METADATA_FILE_MODE = 0o644;
 
 const parseArguments = argv => {
   const positional = [];
@@ -193,6 +194,11 @@ const createTarGzWithoutRoot = async (sourceDir, outputPath, excludeCozeFile = f
       filter: archivePath => shouldInclude(archivePath, excludeCozeFile),
       gzip: true,
       mtime: REPRODUCIBLE_ARCHIVE_MTIME,
+      onWriteEntry: entry => {
+        if (entry.path === '.coze' && entry.stat?.isFile()) {
+          entry.stat.mode = PROJECT_METADATA_FILE_MODE;
+        }
+      },
       portable: true,
     },
     entries,

package/lib/deploy/package-project.py

@@ -30,6 +30,7 @@ EXCLUDED_PARTS = {
 UPLOAD_SESSION_FILENAME = ".coze-deploy-upload.json"
 UPLOAD_SESSION_TEMP_PREFIX = ".coze-deploy-upload-"
 HOST_LINK_FILENAME = ".host.json"
+PROJECT_METADATA_FILE_MODE = 0o644
 
 
 def build_command_env():
@@ -116,6 +117,8 @@ def should_exclude(tar_info: tarfile.TarInfo, exclude_coze_file=False):
         return None
     if any(part in EXCLUDED_PARTS for part in parts):
         return None
+    if parts == (".coze",) and tar_info.isfile():
+        tar_info.mode = PROJECT_METADATA_FILE_MODE
     return tar_info
 
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@coze-arch/cli",
-  "version": "0.0.36-alpha.844e20",
+  "version": "0.0.36-alpha.a7a716",
   "private": false,
   "description": "coze coding devtools cli",
   "license": "MIT",