@coze-arch/cli 0.0.37 → 0.0.39-alpha.bdff32

package/lib/cli.js

@@ -14,7 +14,7 @@ var perf_hooks = require('perf_hooks');
 var fs$1 = require('fs/promises');
 var os = require('os');
 var jsYaml = require('js-yaml');
-var toml = require('@iarna/toml');
+var TOML = require('@iarna/toml');
 var crypto = require('crypto');
 var fastGlob = require('fast-glob');
 var child_process = require('child_process');
@@ -23,6 +23,13 @@ var Ajv = require('ajv');
 var minimist = require('minimist');
 var changeCase = require('change-case');
 var ejs = require('ejs');
+var node_os = require('node:os');
+var promises = require('node:fs/promises');
+var node_crypto = require('node:crypto');
+var node_child_process = require('node:child_process');
+var node_util = require('node:util');
+var tar = require('tar');
+var node_stream = require('node:stream');
 
 /**
  * 读取 templates.json 配置
@@ -1628,7 +1635,7 @@ function createNodeTransport() {
   };
 }
 
-function _nullishCoalesce$a(lhs, rhsFn) { if (lhs != null) { return lhs; } else { return rhsFn(); } } function _optionalChain$t(ops) { let lastAccessLHS = undefined; let value = ops[0]; let i = 1; while (i < ops.length) { const op = ops[i]; const fn = ops[i + 1]; i += 2; if ((op === 'optionalAccess' || op === 'optionalCall') && value == null) { return undefined; } if (op === 'access' || op === 'optionalAccess') { lastAccessLHS = value; value = fn(value); } else if (op === 'call' || op === 'optionalCall') { value = fn((...args) => value.call(lastAccessLHS, ...args)); lastAccessLHS = undefined; } } return value; }/**
+function _nullishCoalesce$c(lhs, rhsFn) { if (lhs != null) { return lhs; } else { return rhsFn(); } } function _optionalChain$G(ops) { let lastAccessLHS = undefined; let value = ops[0]; let i = 1; while (i < ops.length) { const op = ops[i]; const fn = ops[i + 1]; i += 2; if ((op === 'optionalAccess' || op === 'optionalCall') && value == null) { return undefined; } if (op === 'access' || op === 'optionalAccess') { lastAccessLHS = value; value = fn(value); } else if (op === 'call' || op === 'optionalCall') { value = fn((...args) => value.call(lastAccessLHS, ...args)); lastAccessLHS = undefined; } } return value; }/**
  * Slardar CLI Reporter 主类
  * 封装 @slardar/base 的初始化和上报逻辑
  */
@@ -1685,7 +1692,7 @@ class SlardarCLIReporter {constructor() { SlardarCLIReporter.prototype.__init.ca
         release: config.release,
         env: config.env,
         name: config.name,
-        useLocalConfig: _nullishCoalesce$a(config.useLocalConfig, () => ( false)), // 默认使用服务端配置
+        useLocalConfig: _nullishCoalesce$c(config.useLocalConfig, () => ( false)), // 默认使用服务端配置
         domain: config.domain,
         // 设置本地采样率为 100%，确保事件不被过滤
         sample: {
@@ -1700,7 +1707,7 @@ class SlardarCLIReporter {constructor() { SlardarCLIReporter.prototype.__init.ca
       this.client.on('send', (ev) => {
         log$6(
           'send hook called for event: %s',
-          (_optionalChain$t([ev, 'optionalAccess', _ => _.ev_type]) ) || 'unknown',
+          (_optionalChain$G([ev, 'optionalAccess', _ => _.ev_type]) ) || 'unknown',
         );
       });
 
@@ -1758,7 +1765,7 @@ class SlardarCLIReporter {constructor() { SlardarCLIReporter.prototype.__init.ca
           )
         : undefined;
 
-      _optionalChain$t([this, 'access', _2 => _2.client, 'access', _3 => _3.sendEvent, 'optionalCall', _4 => _4({
+      _optionalChain$G([this, 'access', _2 => _2.client, 'access', _3 => _3.sendEvent, 'optionalCall', _4 => _4({
         name,
         metrics: cleanMetrics ,
         categories: cleanCategories ,
@@ -1829,7 +1836,7 @@ class SlardarCLIReporter {constructor() { SlardarCLIReporter.prototype.__init.ca
       log$6('Reporting JS error:', {
         name: error.name,
         message: error.message.slice(0, 100),
-        stack: _optionalChain$t([error, 'access', _5 => _5.stack, 'optionalAccess', _6 => _6.slice, 'call', _7 => _7(0, 200)]),
+        stack: _optionalChain$G([error, 'access', _5 => _5.stack, 'optionalAccess', _6 => _6.slice, 'call', _7 => _7(0, 200)]),
         extra,
         source,
       });
@@ -1849,7 +1856,7 @@ class SlardarCLIReporter {constructor() { SlardarCLIReporter.prototype.__init.ca
     if (!this.ensureInitialized()) {
       return;
     }
-    _optionalChain$t([this, 'access', _8 => _8.client, 'access', _9 => _9.context, 'optionalAccess', _10 => _10.set, 'call', _11 => _11(key, value)]);
+    _optionalChain$G([this, 'access', _8 => _8.client, 'access', _9 => _9.context, 'optionalAccess', _10 => _10.set, 'call', _11 => _11(key, value)]);
   }
 
   /**
@@ -1860,7 +1867,7 @@ class SlardarCLIReporter {constructor() { SlardarCLIReporter.prototype.__init.ca
       return;
     }
     log$6('Merging context:', context);
-    _optionalChain$t([this, 'access', _12 => _12.client, 'access', _13 => _13.context, 'optionalAccess', _14 => _14.merge, 'call', _15 => _15(context)]);
+    _optionalChain$G([this, 'access', _12 => _12.client, 'access', _13 => _13.context, 'optionalAccess', _14 => _14.merge, 'call', _15 => _15(context)]);
   }
 
   /**
@@ -1870,7 +1877,7 @@ class SlardarCLIReporter {constructor() { SlardarCLIReporter.prototype.__init.ca
     if (!this.ensureInitialized()) {
       return;
     }
-    _optionalChain$t([this, 'access', _16 => _16.client, 'access', _17 => _17.context, 'optionalAccess', _18 => _18.delete, 'call', _19 => _19(key)]);
+    _optionalChain$G([this, 'access', _16 => _16.client, 'access', _17 => _17.context, 'optionalAccess', _18 => _18.delete, 'call', _19 => _19(key)]);
   }
 
   /**
@@ -1880,7 +1887,7 @@ class SlardarCLIReporter {constructor() { SlardarCLIReporter.prototype.__init.ca
     if (!this.ensureInitialized()) {
       return;
     }
-    _optionalChain$t([this, 'access', _20 => _20.client, 'access', _21 => _21.context, 'optionalAccess', _22 => _22.clear, 'call', _23 => _23()]);
+    _optionalChain$G([this, 'access', _20 => _20.client, 'access', _21 => _21.context, 'optionalAccess', _22 => _22.clear, 'call', _23 => _23()]);
   }
 
   /**
@@ -1917,7 +1924,7 @@ class SlardarCLIReporter {constructor() { SlardarCLIReporter.prototype.__init.ca
       return;
     }
     log$6('Flushing Slardar data...');
-    _optionalChain$t([this, 'access', _24 => _24.client, 'access', _25 => _25.getSender, 'optionalCall', _26 => _26(), 'optionalAccess', _27 => _27.flush, 'call', _28 => _28()]);
+    _optionalChain$G([this, 'access', _24 => _24.client, 'access', _25 => _25.getSender, 'optionalCall', _26 => _26(), 'optionalAccess', _27 => _27.flush, 'call', _28 => _28()]);
     log$6('Waiting %dms for events to be sent...', waitMs);
     await new Promise(resolve => setTimeout(resolve, waitMs));
     log$6('Slardar data flushed');
@@ -1936,7 +1943,7 @@ class SlardarCLIReporter {constructor() { SlardarCLIReporter.prototype.__init.ca
  */
 const reporter = new SlardarCLIReporter();
 
-function _optionalChain$s(ops) { let lastAccessLHS = undefined; let value = ops[0]; let i = 1; while (i < ops.length) { const op = ops[i]; const fn = ops[i + 1]; i += 2; if ((op === 'optionalAccess' || op === 'optionalCall') && value == null) { return undefined; } if (op === 'access' || op === 'optionalAccess') { lastAccessLHS = value; value = fn(value); } else if (op === 'call' || op === 'optionalCall') { value = fn((...args) => value.call(lastAccessLHS, ...args)); lastAccessLHS = undefined; } } return value; }
+function _optionalChain$F(ops) { let lastAccessLHS = undefined; let value = ops[0]; let i = 1; while (i < ops.length) { const op = ops[i]; const fn = ops[i + 1]; i += 2; if ((op === 'optionalAccess' || op === 'optionalCall') && value == null) { return undefined; } if (op === 'access' || op === 'optionalAccess') { lastAccessLHS = value; value = fn(value); } else if (op === 'call' || op === 'optionalCall') { value = fn((...args) => value.call(lastAccessLHS, ...args)); lastAccessLHS = undefined; } } return value; }
 
 
 
@@ -1996,11 +2003,11 @@ const EventBuilder = {
       name: CLI_EVENTS.CLI_COMMAND,
       categories: {
         command,
-        args: _optionalChain$s([options, 'optionalAccess', _ => _.args]),
+        args: _optionalChain$F([options, 'optionalAccess', _ => _.args]),
         status: 'running' ,
-        ..._optionalChain$s([options, 'optionalAccess', _2 => _2.categories]),
+        ..._optionalChain$F([options, 'optionalAccess', _2 => _2.categories]),
       },
-      metrics: _optionalChain$s([options, 'optionalAccess', _3 => _3.metrics]),
+      metrics: _optionalChain$F([options, 'optionalAccess', _3 => _3.metrics]),
     };
   },
 
@@ -2021,13 +2028,13 @@ const EventBuilder = {
       name: CLI_EVENTS.CLI_COMMAND_COMPLETE,
       categories: {
         command,
-        args: _optionalChain$s([options, 'optionalAccess', _4 => _4.args]),
+        args: _optionalChain$F([options, 'optionalAccess', _4 => _4.args]),
         status: success ? ('success' ) : ('fail' ),
-        ..._optionalChain$s([options, 'optionalAccess', _5 => _5.categories]),
+        ..._optionalChain$F([options, 'optionalAccess', _5 => _5.categories]),
       },
       metrics: {
         duration,
-        ...(_optionalChain$s([options, 'optionalAccess', _6 => _6.errorCode]) && { errorCode: options.errorCode }),
+        ...(_optionalChain$F([options, 'optionalAccess', _6 => _6.errorCode]) && { errorCode: options.errorCode }),
       },
     };
   },
@@ -2048,12 +2055,12 @@ const EventBuilder = {
       name: CLI_EVENTS.NETWORK_REQUEST,
       categories: {
         url,
-        method: _optionalChain$s([options, 'optionalAccess', _7 => _7.method]) || 'GET',
-        statusCode: _optionalChain$s([options, 'optionalAccess', _8 => _8.statusCode, 'optionalAccess', _9 => _9.toString, 'call', _10 => _10()]),
-        status: _optionalChain$s([options, 'optionalAccess', _11 => _11.success]) ? ('success' ) : ('fail' ),
+        method: _optionalChain$F([options, 'optionalAccess', _7 => _7.method]) || 'GET',
+        statusCode: _optionalChain$F([options, 'optionalAccess', _8 => _8.statusCode, 'optionalAccess', _9 => _9.toString, 'call', _10 => _10()]),
+        status: _optionalChain$F([options, 'optionalAccess', _11 => _11.success]) ? ('success' ) : ('fail' ),
       },
       metrics: {
-        duration: _optionalChain$s([options, 'optionalAccess', _12 => _12.duration]),
+        duration: _optionalChain$F([options, 'optionalAccess', _12 => _12.duration]),
       },
     };
   },
@@ -2075,11 +2082,11 @@ const EventBuilder = {
       categories: {
         operation,
         filePath,
-        status: _optionalChain$s([options, 'optionalAccess', _13 => _13.success]) ? ('success' ) : ('fail' ),
+        status: _optionalChain$F([options, 'optionalAccess', _13 => _13.success]) ? ('success' ) : ('fail' ),
       },
       metrics: {
-        duration: _optionalChain$s([options, 'optionalAccess', _14 => _14.duration]),
-        fileSize: _optionalChain$s([options, 'optionalAccess', _15 => _15.fileSize]),
+        duration: _optionalChain$F([options, 'optionalAccess', _14 => _14.duration]),
+        fileSize: _optionalChain$F([options, 'optionalAccess', _15 => _15.fileSize]),
       },
     };
   },
@@ -2107,7 +2114,7 @@ const EventBuilder = {
 };
 
 var name = "@coze-arch/cli";
-var version = "0.0.37";
+var version = "0.0.39-alpha.bdff32";
 var description = "coze coding devtools cli";
 var license = "MIT";
 var author = "fanwenjie.fe@bytedance.com";
@@ -2119,6 +2126,7 @@ var bin = {
 var files = [
 	"lib",
 	"bin",
+	"docs/deploy.md",
 	"lib/**/.npmrc",
 	"!**/*.tsbuildinfo",
 	"!**/*.map",
@@ -2155,7 +2163,9 @@ var dependencies = {
 	"fast-glob": "^3.3.3",
 	"js-yaml": "^4.2.0",
 	minimist: "^1.2.8",
-	shelljs: "^0.10.0"
+	pnpm: "9.0.0",
+	shelljs: "^0.10.0",
+	tar: "^7.5.22"
 };
 var devDependencies = {
 	"@coze-arch/cli-logger": "workspace:*",
@@ -2215,7 +2225,7 @@ var packageJson = {
 	cozePublishConfig: cozePublishConfig
 };
 
-function _optionalChain$r(ops) { let lastAccessLHS = undefined; let value = ops[0]; let i = 1; while (i < ops.length) { const op = ops[i]; const fn = ops[i + 1]; i += 2; if ((op === 'optionalAccess' || op === 'optionalCall') && value == null) { return undefined; } if (op === 'access' || op === 'optionalAccess') { lastAccessLHS = value; value = fn(value); } else if (op === 'call' || op === 'optionalCall') { value = fn((...args) => value.call(lastAccessLHS, ...args)); lastAccessLHS = undefined; } } return value; }/**
+function _optionalChain$E(ops) { let lastAccessLHS = undefined; let value = ops[0]; let i = 1; while (i < ops.length) { const op = ops[i]; const fn = ops[i + 1]; i += 2; if ((op === 'optionalAccess' || op === 'optionalCall') && value == null) { return undefined; } if (op === 'access' || op === 'optionalAccess') { lastAccessLHS = value; value = fn(value); } else if (op === 'call' || op === 'optionalCall') { value = fn((...args) => value.call(lastAccessLHS, ...args)); lastAccessLHS = undefined; } } return value; }/**
  * Slardar 监控初始化和上报
  */
 
@@ -2318,11 +2328,11 @@ const reportCommandComplete = safeRun(
 ,
   ) => {
     const event = EventBuilder.cliCommandComplete(command, success, duration, {
-      args: _optionalChain$r([options, 'optionalAccess', _ => _.args]),
-      errorCode: _optionalChain$r([options, 'optionalAccess', _2 => _2.errorCode]),
+      args: _optionalChain$E([options, 'optionalAccess', _ => _.args]),
+      errorCode: _optionalChain$E([options, 'optionalAccess', _2 => _2.errorCode]),
       categories: {
-        ...(_optionalChain$r([options, 'optionalAccess', _3 => _3.errorMessage]) && { errorMessage: options.errorMessage }),
-        ..._optionalChain$r([options, 'optionalAccess', _4 => _4.categories]),
+        ...(_optionalChain$E([options, 'optionalAccess', _3 => _3.errorMessage]) && { errorMessage: options.errorMessage }),
+        ..._optionalChain$E([options, 'optionalAccess', _4 => _4.categories]),
       },
     });
     reporter.sendEvent(event.name, event.metrics, event.categories);
@@ -2381,7 +2391,7 @@ const flushSlardar = safeRun('flushSlardar', async () => {
   await reporter.flush();
 });
 
-function _nullishCoalesce$9(lhs, rhsFn) { if (lhs != null) { return lhs; } else { return rhsFn(); } } function _optionalChain$q(ops) { let lastAccessLHS = undefined; let value = ops[0]; let i = 1; while (i < ops.length) { const op = ops[i]; const fn = ops[i + 1]; i += 2; if ((op === 'optionalAccess' || op === 'optionalCall') && value == null) { return undefined; } if (op === 'access' || op === 'optionalAccess') { lastAccessLHS = value; value = fn(value); } else if (op === 'call' || op === 'optionalCall') { value = fn((...args) => value.call(lastAccessLHS, ...args)); lastAccessLHS = undefined; } } return value; }var LogLevel; (function (LogLevel) {
+function _nullishCoalesce$b(lhs, rhsFn) { if (lhs != null) { return lhs; } else { return rhsFn(); } } function _optionalChain$D(ops) { let lastAccessLHS = undefined; let value = ops[0]; let i = 1; while (i < ops.length) { const op = ops[i]; const fn = ops[i + 1]; i += 2; if ((op === 'optionalAccess' || op === 'optionalCall') && value == null) { return undefined; } if (op === 'access' || op === 'optionalAccess') { lastAccessLHS = value; value = fn(value); } else if (op === 'call' || op === 'optionalCall') { value = fn((...args) => value.call(lastAccessLHS, ...args)); lastAccessLHS = undefined; } } return value; }var LogLevel; (function (LogLevel) {
   const ERROR = 0; LogLevel[LogLevel["ERROR"] = ERROR] = "ERROR";
   const WARN = 1; LogLevel[LogLevel["WARN"] = WARN] = "WARN";
   const SUCCESS = 2; LogLevel[LogLevel["SUCCESS"] = SUCCESS] = "SUCCESS";
@@ -2419,7 +2429,7 @@ class Logger {
 
   constructor(options = {}) {
     this.level = this.parseLogLevel(options.level);
-    this.useColor = _nullishCoalesce$9(options.useColor, () => ( this.isColorSupported()));
+    this.useColor = _nullishCoalesce$b(options.useColor, () => ( this.isColorSupported()));
     this.prefix = options.prefix;
   }
 
@@ -2428,7 +2438,7 @@ class Logger {
       return level;
     }
 
-    const envLevel = _optionalChain$q([process, 'access', _ => _.env, 'access', _2 => _2.LOG_LEVEL, 'optionalAccess', _3 => _3.toLowerCase, 'call', _4 => _4()]);
+    const envLevel = _optionalChain$D([process, 'access', _ => _.env, 'access', _2 => _2.LOG_LEVEL, 'optionalAccess', _3 => _3.toLowerCase, 'call', _4 => _4()]);
     if (envLevel && envLevel in LOG_LEVEL_MAP) {
       // envLevel 已通过 `in` 检查确认为 LOG_LEVEL_MAP 的键；
       // 显式判空以满足 noUncheckedIndexedAccess，运行时行为不变
@@ -2445,7 +2455,7 @@ class Logger {
     // 简单检测：Node.js 环境且支持 TTY
     return (
       typeof process !== 'undefined' &&
-      _optionalChain$q([process, 'access', _5 => _5.stdout, 'optionalAccess', _6 => _6.isTTY]) === true &&
+      _optionalChain$D([process, 'access', _5 => _5.stdout, 'optionalAccess', _6 => _6.isTTY]) === true &&
       process.env.NO_COLOR === undefined
     );
   }
@@ -2470,7 +2480,7 @@ class Logger {
 
     const icon = this.colorize(options.icon, options.color);
     const prefix = this.prefix ? `${icon} ${this.prefix}` : icon;
-    console.log(prefix, options.message, ...(_nullishCoalesce$9(options.args, () => ( []))));
+    console.log(prefix, options.message, ...(_nullishCoalesce$b(options.args, () => ( []))));
   }
 
   error(message, ...args) {
@@ -2815,7 +2825,7 @@ const executeWarmup = async (options) => {
 /**
  * 注册 warmup 命令到 program
  */
-const registerCommand$6 = program => {
+const registerCommand$7 = program => {
   program
     .command('warmup')
     .description('Pre-install dependencies for templates to speed up init')
@@ -2838,9 +2848,9 @@ const COZE_HOME_DIR = '.coze';
 
 /**
  * Logs directory name
- * Default: .coze-logs
+ * Default: ~/.coze/logs
  */
-const LOGS_DIR = '.coze-logs';
+const LOGS_DIR = 'logs';
 
 /**
  * Get the Coze home directory path
@@ -2855,10 +2865,10 @@ const getCozeHome = () =>
  * Get the logs directory path
  * Can be customized via COZE_LOG_DIR environment variable
  *
- * @returns Absolute path to logs directory (default: ~/.coze-logs)
+ * @returns Absolute path to logs directory (default: ~/.coze/logs)
  */
 const getCozeLogsDir = () =>
-  process.env.COZE_LOG_DIR || path.join(os.homedir(), LOGS_DIR);
+  process.env.COZE_LOG_DIR || path.join(getCozeHome(), LOGS_DIR);
 
 /**
  * Get path for a specific file/directory within Coze home
@@ -2889,7 +2899,7 @@ const getCozeFilePath = (relativePath) =>
  * @example
  * ```ts
  * const devLog = getCozeLogPath('dev.log');
- * // Returns: ~/.coze-logs/dev.log
+ * // Returns: ~/.coze/logs/dev.log
  * ```
  */
 const getCozeLogPath = (filename) =>
@@ -3227,7 +3237,7 @@ const executeUpdate = (
 /**
  * 注册 update 命令到 program
  */
-const registerCommand$5 = program => {
+const registerCommand$6 = program => {
   program
     .command('update <package>')
     .description('Update a package dependency')
@@ -3253,7 +3263,7 @@ const registerCommand$5 = program => {
     });
 };
 
-function _optionalChain$p(ops) { let lastAccessLHS = undefined; let value = ops[0]; let i = 1; while (i < ops.length) { const op = ops[i]; const fn = ops[i + 1]; i += 2; if ((op === 'optionalAccess' || op === 'optionalCall') && value == null) { return undefined; } if (op === 'access' || op === 'optionalAccess') { lastAccessLHS = value; value = fn(value); } else if (op === 'call' || op === 'optionalCall') { value = fn((...args) => value.call(lastAccessLHS, ...args)); lastAccessLHS = undefined; } } return value; }// Safe JSON parsing utilities with type safety and error handling
+function _optionalChain$C(ops) { let lastAccessLHS = undefined; let value = ops[0]; let i = 1; while (i < ops.length) { const op = ops[i]; const fn = ops[i + 1]; i += 2; if ((op === 'optionalAccess' || op === 'optionalCall') && value == null) { return undefined; } if (op === 'access' || op === 'optionalAccess') { lastAccessLHS = value; value = fn(value); } else if (op === 'call' || op === 'optionalCall') { value = fn((...args) => value.call(lastAccessLHS, ...args)); lastAccessLHS = undefined; } } return value; }// Safe JSON parsing utilities with type safety and error handling
 // Provides fallback values, validation, and error monitoring capabilities
 
 /**
@@ -3353,12 +3363,12 @@ function safeJsonParse(
     const parsed = JSON.parse(String(input));
 
     // Optional validation
-    if (_optionalChain$p([options, 'optionalAccess', _ => _.validate])) {
+    if (_optionalChain$C([options, 'optionalAccess', _ => _.validate])) {
       if (options.validate(parsed)) {
         return parsed;
       } else {
         const validationError = new Error('JSON validation failed');
-        _optionalChain$p([options, 'access', _2 => _2.onError, 'optionalCall', _3 => _3(validationError, input)]);
+        _optionalChain$C([options, 'access', _2 => _2.onError, 'optionalCall', _3 => _3(validationError, input)]);
 
         if (options.throwOnValidationError) {
           throw validationError;
@@ -3370,10 +3380,10 @@ function safeJsonParse(
     return parsed;
   } catch (error) {
     // Re-throw validation errors when throwOnValidationError is true
-    if (error instanceof Error && error.message === 'JSON validation failed' && _optionalChain$p([options, 'optionalAccess', _4 => _4.throwOnValidationError])) {
+    if (error instanceof Error && error.message === 'JSON validation failed' && _optionalChain$C([options, 'optionalAccess', _4 => _4.throwOnValidationError])) {
       throw error;
     }
-    _optionalChain$p([options, 'optionalAccess', _5 => _5.onError, 'optionalCall', _6 => _6(error , input)]);
+    _optionalChain$C([options, 'optionalAccess', _5 => _5.onError, 'optionalCall', _6 => _6(error , input)]);
     return defaultValue;
   }
 }
@@ -3413,7 +3423,7 @@ function isNode(node) {
 }
 const hasAnchor = (node) => (isScalar(node) || isCollection(node)) && !!node.anchor;
 
-function _optionalChain$o(ops) { let lastAccessLHS = undefined; let value = ops[0]; let i = 1; while (i < ops.length) { const op = ops[i]; const fn = ops[i + 1]; i += 2; if ((op === 'optionalAccess' || op === 'optionalCall') && value == null) { return undefined; } if (op === 'access' || op === 'optionalAccess') { lastAccessLHS = value; value = fn(value); } else if (op === 'call' || op === 'optionalCall') { value = fn((...args) => value.call(lastAccessLHS, ...args)); lastAccessLHS = undefined; } } return value; }
+function _optionalChain$B(ops) { let lastAccessLHS = undefined; let value = ops[0]; let i = 1; while (i < ops.length) { const op = ops[i]; const fn = ops[i + 1]; i += 2; if ((op === 'optionalAccess' || op === 'optionalCall') && value == null) { return undefined; } if (op === 'access' || op === 'optionalAccess') { lastAccessLHS = value; value = fn(value); } else if (op === 'call' || op === 'optionalCall') { value = fn((...args) => value.call(lastAccessLHS, ...args)); lastAccessLHS = undefined; } } return value; }
 const BREAK = Symbol('break visit');
 const SKIP = Symbol('skip children');
 const REMOVE = Symbol('remove node');
@@ -3526,15 +3536,15 @@ function callVisitor(key, node, visitor, path) {
     if (typeof visitor === 'function')
         return visitor(key, node, path);
     if (isMap(node))
-        return _optionalChain$o([visitor, 'access', _ => _.Map, 'optionalCall', _2 => _2(key, node, path)]);
+        return _optionalChain$B([visitor, 'access', _ => _.Map, 'optionalCall', _2 => _2(key, node, path)]);
     if (isSeq(node))
-        return _optionalChain$o([visitor, 'access', _3 => _3.Seq, 'optionalCall', _4 => _4(key, node, path)]);
+        return _optionalChain$B([visitor, 'access', _3 => _3.Seq, 'optionalCall', _4 => _4(key, node, path)]);
     if (isPair(node))
-        return _optionalChain$o([visitor, 'access', _5 => _5.Pair, 'optionalCall', _6 => _6(key, node, path)]);
+        return _optionalChain$B([visitor, 'access', _5 => _5.Pair, 'optionalCall', _6 => _6(key, node, path)]);
     if (isScalar(node))
-        return _optionalChain$o([visitor, 'access', _7 => _7.Scalar, 'optionalCall', _8 => _8(key, node, path)]);
+        return _optionalChain$B([visitor, 'access', _7 => _7.Scalar, 'optionalCall', _8 => _8(key, node, path)]);
     if (isAlias(node))
-        return _optionalChain$o([visitor, 'access', _9 => _9.Alias, 'optionalCall', _10 => _10(key, node, path)]);
+        return _optionalChain$B([visitor, 'access', _9 => _9.Alias, 'optionalCall', _10 => _10(key, node, path)]);
     return undefined;
 }
 function replaceNode(key, path, node) {
@@ -3625,7 +3635,7 @@ function applyReviver(reviver, obj, key, val) {
     return reviver.call(obj, key, val);
 }
 
-function _optionalChain$n(ops) { let lastAccessLHS = undefined; let value = ops[0]; let i = 1; while (i < ops.length) { const op = ops[i]; const fn = ops[i + 1]; i += 2; if ((op === 'optionalAccess' || op === 'optionalCall') && value == null) { return undefined; } if (op === 'access' || op === 'optionalAccess') { lastAccessLHS = value; value = fn(value); } else if (op === 'call' || op === 'optionalCall') { value = fn((...args) => value.call(lastAccessLHS, ...args)); lastAccessLHS = undefined; } } return value; }
+function _optionalChain$A(ops) { let lastAccessLHS = undefined; let value = ops[0]; let i = 1; while (i < ops.length) { const op = ops[i]; const fn = ops[i + 1]; i += 2; if ((op === 'optionalAccess' || op === 'optionalCall') && value == null) { return undefined; } if (op === 'access' || op === 'optionalAccess') { lastAccessLHS = value; value = fn(value); } else if (op === 'call' || op === 'optionalCall') { value = fn((...args) => value.call(lastAccessLHS, ...args)); lastAccessLHS = undefined; } } return value; }
 /**
  * Recursively convert any node or its contents to native JavaScript
  *
@@ -3655,7 +3665,7 @@ function toJS(value, arg, ctx) {
             ctx.onCreate(res);
         return res;
     }
-    if (typeof value === 'bigint' && !_optionalChain$n([ctx, 'optionalAccess', _ => _.keep]))
+    if (typeof value === 'bigint' && !_optionalChain$A([ctx, 'optionalAccess', _ => _.keep]))
         return Number(value);
     return value;
 }
@@ -3693,7 +3703,7 @@ class NodeBase {
     }
 }
 
-function _optionalChain$m(ops) { let lastAccessLHS = undefined; let value = ops[0]; let i = 1; while (i < ops.length) { const op = ops[i]; const fn = ops[i + 1]; i += 2; if ((op === 'optionalAccess' || op === 'optionalCall') && value == null) { return undefined; } if (op === 'access' || op === 'optionalAccess') { lastAccessLHS = value; value = fn(value); } else if (op === 'call' || op === 'optionalCall') { value = fn((...args) => value.call(lastAccessLHS, ...args)); lastAccessLHS = undefined; } } return value; }
+function _optionalChain$z(ops) { let lastAccessLHS = undefined; let value = ops[0]; let i = 1; while (i < ops.length) { const op = ops[i]; const fn = ops[i + 1]; i += 2; if ((op === 'optionalAccess' || op === 'optionalCall') && value == null) { return undefined; } if (op === 'access' || op === 'optionalAccess') { lastAccessLHS = value; value = fn(value); } else if (op === 'call' || op === 'optionalCall') { value = fn((...args) => value.call(lastAccessLHS, ...args)); lastAccessLHS = undefined; } } return value; }
 class Alias extends NodeBase {
     constructor(source) {
         super(ALIAS);
@@ -3709,10 +3719,10 @@ class Alias extends NodeBase {
      * instance of the `source` anchor before this node.
      */
     resolve(doc, ctx) {
-        if (_optionalChain$m([ctx, 'optionalAccess', _ => _.maxAliasCount]) === 0)
+        if (_optionalChain$z([ctx, 'optionalAccess', _ => _.maxAliasCount]) === 0)
             throw new ReferenceError('Alias resolution is disabled');
         let nodes;
-        if (_optionalChain$m([ctx, 'optionalAccess', _2 => _2.aliasResolveCache])) {
+        if (_optionalChain$z([ctx, 'optionalAccess', _2 => _2.aliasResolveCache])) {
             nodes = ctx.aliasResolveCache;
         }
         else {
@@ -3751,7 +3761,7 @@ class Alias extends NodeBase {
             data = anchors.get(source);
         }
         /* istanbul ignore if */
-        if (_optionalChain$m([data, 'optionalAccess', _3 => _3.res]) === undefined) {
+        if (_optionalChain$z([data, 'optionalAccess', _3 => _3.res]) === undefined) {
             const msg = 'This should not happen: Alias anchor was not resolved?';
             throw new ReferenceError(msg);
         }
@@ -3803,7 +3813,7 @@ function getAliasCount(doc, node, anchors) {
     return 1;
 }
 
-function _optionalChain$l(ops) { let lastAccessLHS = undefined; let value = ops[0]; let i = 1; while (i < ops.length) { const op = ops[i]; const fn = ops[i + 1]; i += 2; if ((op === 'optionalAccess' || op === 'optionalCall') && value == null) { return undefined; } if (op === 'access' || op === 'optionalAccess') { lastAccessLHS = value; value = fn(value); } else if (op === 'call' || op === 'optionalCall') { value = fn((...args) => value.call(lastAccessLHS, ...args)); lastAccessLHS = undefined; } } return value; }
+function _optionalChain$y(ops) { let lastAccessLHS = undefined; let value = ops[0]; let i = 1; while (i < ops.length) { const op = ops[i]; const fn = ops[i + 1]; i += 2; if ((op === 'optionalAccess' || op === 'optionalCall') && value == null) { return undefined; } if (op === 'access' || op === 'optionalAccess') { lastAccessLHS = value; value = fn(value); } else if (op === 'call' || op === 'optionalCall') { value = fn((...args) => value.call(lastAccessLHS, ...args)); lastAccessLHS = undefined; } } return value; }
 const isScalarValue = (value) => !value || (typeof value !== 'function' && typeof value !== 'object');
 class Scalar extends NodeBase {
     constructor(value) {
@@ -3811,7 +3821,7 @@ class Scalar extends NodeBase {
         this.value = value;
     }
     toJSON(arg, ctx) {
-        return _optionalChain$l([ctx, 'optionalAccess', _ => _.keep]) ? this.value : toJS(this.value, arg, ctx);
+        return _optionalChain$y([ctx, 'optionalAccess', _ => _.keep]) ? this.value : toJS(this.value, arg, ctx);
     }
     toString() {
         return String(this.value);
@@ -3823,17 +3833,17 @@ Scalar.PLAIN = 'PLAIN';
 Scalar.QUOTE_DOUBLE = 'QUOTE_DOUBLE';
 Scalar.QUOTE_SINGLE = 'QUOTE_SINGLE';
 
-function _nullishCoalesce$8(lhs, rhsFn) { if (lhs != null) { return lhs; } else { return rhsFn(); } } function _optionalChain$k(ops) { let lastAccessLHS = undefined; let value = ops[0]; let i = 1; while (i < ops.length) { const op = ops[i]; const fn = ops[i + 1]; i += 2; if ((op === 'optionalAccess' || op === 'optionalCall') && value == null) { return undefined; } if (op === 'access' || op === 'optionalAccess') { lastAccessLHS = value; value = fn(value); } else if (op === 'call' || op === 'optionalCall') { value = fn((...args) => value.call(lastAccessLHS, ...args)); lastAccessLHS = undefined; } } return value; }
+function _nullishCoalesce$a(lhs, rhsFn) { if (lhs != null) { return lhs; } else { return rhsFn(); } } function _optionalChain$x(ops) { let lastAccessLHS = undefined; let value = ops[0]; let i = 1; while (i < ops.length) { const op = ops[i]; const fn = ops[i + 1]; i += 2; if ((op === 'optionalAccess' || op === 'optionalCall') && value == null) { return undefined; } if (op === 'access' || op === 'optionalAccess') { lastAccessLHS = value; value = fn(value); } else if (op === 'call' || op === 'optionalCall') { value = fn((...args) => value.call(lastAccessLHS, ...args)); lastAccessLHS = undefined; } } return value; }
 const defaultTagPrefix = 'tag:yaml.org,2002:';
 function findTagObject(value, tagName, tags) {
     if (tagName) {
         const match = tags.filter(t => t.tag === tagName);
-        const tagObj = _nullishCoalesce$8(match.find(t => !t.format), () => ( match[0]));
+        const tagObj = _nullishCoalesce$a(match.find(t => !t.format), () => ( match[0]));
         if (!tagObj)
             throw new Error(`Tag ${tagName} not found`);
         return tagObj;
     }
-    return tags.find(t => _optionalChain$k([t, 'access', _ => _.identify, 'optionalCall', _2 => _2(value)]) && !t.format);
+    return tags.find(t => _optionalChain$x([t, 'access', _ => _.identify, 'optionalCall', _2 => _2(value)]) && !t.format);
 }
 function createNode(value, tagName, ctx) {
     if (isDocument(value))
@@ -3841,7 +3851,7 @@ function createNode(value, tagName, ctx) {
     if (isNode(value))
         return value;
     if (isPair(value)) {
-        const map = _optionalChain$k([ctx, 'access', _3 => _3.schema, 'access', _4 => _4[MAP], 'access', _5 => _5.createNode, 'optionalCall', _6 => _6(ctx.schema, null, ctx)]);
+        const map = _optionalChain$x([ctx, 'access', _3 => _3.schema, 'access', _4 => _4[MAP], 'access', _5 => _5.createNode, 'optionalCall', _6 => _6(ctx.schema, null, ctx)]);
         map.items.push(value);
         return map;
     }
@@ -3860,7 +3870,7 @@ function createNode(value, tagName, ctx) {
     if (aliasDuplicateObjects && value && typeof value === 'object') {
         ref = sourceObjects.get(value);
         if (ref) {
-            _nullishCoalesce$8(ref.anchor, () => ( (ref.anchor = onAnchor(value))));
+            _nullishCoalesce$a(ref.anchor, () => ( (ref.anchor = onAnchor(value))));
             return new Alias(ref.anchor);
         }
         else {
@@ -3868,7 +3878,7 @@ function createNode(value, tagName, ctx) {
             sourceObjects.set(value, ref);
         }
     }
-    if (_optionalChain$k([tagName, 'optionalAccess', _7 => _7.startsWith, 'call', _8 => _8('!!')]))
+    if (_optionalChain$x([tagName, 'optionalAccess', _7 => _7.startsWith, 'call', _8 => _8('!!')]))
         tagName = defaultTagPrefix + tagName.slice(2);
     let tagObj = findTagObject(value, tagName, schema.tags);
     if (!tagObj) {
@@ -3893,9 +3903,9 @@ function createNode(value, tagName, ctx) {
         onTagObj(tagObj);
         delete ctx.onTagObj;
     }
-    const node = _optionalChain$k([tagObj, 'optionalAccess', _9 => _9.createNode])
+    const node = _optionalChain$x([tagObj, 'optionalAccess', _9 => _9.createNode])
         ? tagObj.createNode(ctx.schema, value, ctx)
-        : typeof _optionalChain$k([tagObj, 'optionalAccess', _10 => _10.nodeClass, 'optionalAccess', _11 => _11.from]) === 'function'
+        : typeof _optionalChain$x([tagObj, 'optionalAccess', _10 => _10.nodeClass, 'optionalAccess', _11 => _11.from]) === 'function'
             ? tagObj.nodeClass.from(ctx.schema, value, ctx)
             : new Scalar(value);
     if (tagName)
@@ -4213,7 +4223,7 @@ function consumeMoreIndentedLines(text, i, indent) {
     return end;
 }
 
-function _optionalChain$j(ops) { let lastAccessLHS = undefined; let value = ops[0]; let i = 1; while (i < ops.length) { const op = ops[i]; const fn = ops[i + 1]; i += 2; if ((op === 'optionalAccess' || op === 'optionalCall') && value == null) { return undefined; } if (op === 'access' || op === 'optionalAccess') { lastAccessLHS = value; value = fn(value); } else if (op === 'call' || op === 'optionalCall') { value = fn((...args) => value.call(lastAccessLHS, ...args)); lastAccessLHS = undefined; } } return value; }
+function _optionalChain$w(ops) { let lastAccessLHS = undefined; let value = ops[0]; let i = 1; while (i < ops.length) { const op = ops[i]; const fn = ops[i + 1]; i += 2; if ((op === 'optionalAccess' || op === 'optionalCall') && value == null) { return undefined; } if (op === 'access' || op === 'optionalAccess') { lastAccessLHS = value; value = fn(value); } else if (op === 'call' || op === 'optionalCall') { value = fn((...args) => value.call(lastAccessLHS, ...args)); lastAccessLHS = undefined; } } return value; }
 const getFoldOptions = (ctx, isBlock) => ({
     indentAtStart: isBlock ? ctx.indent.length : ctx.indentAtStart,
     lineWidth: ctx.options.lineWidth,
@@ -4498,9 +4508,9 @@ function plainString(item, ctx, onComment, onChompKeep) {
     // booleans get parsed with those types in v1.2 (e.g. '42', 'true' & '0.9e-3'),
     // and others in v1.1.
     if (actualString) {
-        const test = (tag) => tag.default && tag.tag !== 'tag:yaml.org,2002:str' && _optionalChain$j([tag, 'access', _ => _.test, 'optionalAccess', _2 => _2.test, 'call', _3 => _3(str)]);
+        const test = (tag) => tag.default && tag.tag !== 'tag:yaml.org,2002:str' && _optionalChain$w([tag, 'access', _ => _.test, 'optionalAccess', _2 => _2.test, 'call', _3 => _3(str)]);
         const { compat, tags } = ctx.doc.schema;
-        if (tags.some(test) || _optionalChain$j([compat, 'optionalAccess', _4 => _4.some, 'call', _5 => _5(test)]))
+        if (tags.some(test) || _optionalChain$w([compat, 'optionalAccess', _4 => _4.some, 'call', _5 => _5(test)]))
             return quotedString(value, ctx);
     }
     return implicitKey
@@ -4546,7 +4556,7 @@ function stringifyString(item, ctx, onComment, onChompKeep) {
     return res;
 }
 
-function _nullishCoalesce$7(lhs, rhsFn) { if (lhs != null) { return lhs; } else { return rhsFn(); } } function _optionalChain$i(ops) { let lastAccessLHS = undefined; let value = ops[0]; let i = 1; while (i < ops.length) { const op = ops[i]; const fn = ops[i + 1]; i += 2; if ((op === 'optionalAccess' || op === 'optionalCall') && value == null) { return undefined; } if (op === 'access' || op === 'optionalAccess') { lastAccessLHS = value; value = fn(value); } else if (op === 'call' || op === 'optionalCall') { value = fn((...args) => value.call(lastAccessLHS, ...args)); lastAccessLHS = undefined; } } return value; }
+function _nullishCoalesce$9(lhs, rhsFn) { if (lhs != null) { return lhs; } else { return rhsFn(); } } function _optionalChain$v(ops) { let lastAccessLHS = undefined; let value = ops[0]; let i = 1; while (i < ops.length) { const op = ops[i]; const fn = ops[i + 1]; i += 2; if ((op === 'optionalAccess' || op === 'optionalCall') && value == null) { return undefined; } if (op === 'access' || op === 'optionalAccess') { lastAccessLHS = value; value = fn(value); } else if (op === 'call' || op === 'optionalCall') { value = fn((...args) => value.call(lastAccessLHS, ...args)); lastAccessLHS = undefined; } } return value; }
 function createStringifyContext(doc, options) {
     const opt = Object.assign({
         blockQuote: true,
@@ -4593,27 +4603,27 @@ function getTagObject(tags, item) {
     if (item.tag) {
         const match = tags.filter(t => t.tag === item.tag);
         if (match.length > 0)
-            return _nullishCoalesce$7(match.find(t => t.format === item.format), () => ( match[0]));
+            return _nullishCoalesce$9(match.find(t => t.format === item.format), () => ( match[0]));
     }
     let tagObj = undefined;
     let obj;
     if (isScalar(item)) {
         obj = item.value;
-        let match = tags.filter(t => _optionalChain$i([t, 'access', _ => _.identify, 'optionalCall', _2 => _2(obj)]));
+        let match = tags.filter(t => _optionalChain$v([t, 'access', _ => _.identify, 'optionalCall', _2 => _2(obj)]));
         if (match.length > 1) {
             const testMatch = match.filter(t => t.test);
             if (testMatch.length > 0)
                 match = testMatch;
         }
         tagObj =
-            _nullishCoalesce$7(match.find(t => t.format === item.format), () => ( match.find(t => !t.format)));
+            _nullishCoalesce$9(match.find(t => t.format === item.format), () => ( match.find(t => !t.format)));
     }
     else {
         obj = item;
         tagObj = tags.find(t => t.nodeClass && obj instanceof t.nodeClass);
     }
     if (!tagObj) {
-        const name = _nullishCoalesce$7(_optionalChain$i([obj, 'optionalAccess', _3 => _3.constructor, 'optionalAccess', _4 => _4.name]), () => ( (obj === null ? 'null' : typeof obj)));
+        const name = _nullishCoalesce$9(_optionalChain$v([obj, 'optionalAccess', _3 => _3.constructor, 'optionalAccess', _4 => _4.name]), () => ( (obj === null ? 'null' : typeof obj)));
         throw new Error(`Tag not resolved for ${name} value`);
     }
     return tagObj;
@@ -4628,7 +4638,7 @@ function stringifyProps(node, tagObj, { anchors, doc }) {
         anchors.add(anchor);
         props.push(`&${anchor}`);
     }
-    const tag = _nullishCoalesce$7(node.tag, () => ( (tagObj.default ? null : tagObj.tag)));
+    const tag = _nullishCoalesce$9(node.tag, () => ( (tagObj.default ? null : tagObj.tag)));
     if (tag)
         props.push(doc.directives.tagString(tag));
     return props.join(' ');
@@ -4639,7 +4649,7 @@ function stringify(item, ctx, onComment, onChompKeep) {
     if (isAlias(item)) {
         if (ctx.doc.directives)
             return item.toString(ctx);
-        if (_optionalChain$i([ctx, 'access', _5 => _5.resolvedAliases, 'optionalAccess', _6 => _6.has, 'call', _7 => _7(item)])) {
+        if (_optionalChain$v([ctx, 'access', _5 => _5.resolvedAliases, 'optionalAccess', _6 => _6.has, 'call', _7 => _7(item)])) {
             throw new TypeError(`Cannot stringify circular structure without alias nodes`);
         }
         else {
@@ -4654,10 +4664,10 @@ function stringify(item, ctx, onComment, onChompKeep) {
     const node = isNode(item)
         ? item
         : ctx.doc.createNode(item, { onTagObj: o => (tagObj = o) });
-    _nullishCoalesce$7(tagObj, () => ( (tagObj = getTagObject(ctx.doc.schema.tags, node))));
+    _nullishCoalesce$9(tagObj, () => ( (tagObj = getTagObject(ctx.doc.schema.tags, node))));
     const props = stringifyProps(node, tagObj, ctx);
     if (props.length > 0)
-        ctx.indentAtStart = (_nullishCoalesce$7(ctx.indentAtStart, () => ( 0))) + props.length + 1;
+        ctx.indentAtStart = (_nullishCoalesce$9(ctx.indentAtStart, () => ( 0))) + props.length + 1;
     const str = typeof tagObj.stringify === 'function'
         ? tagObj.stringify(node, ctx, onComment, onChompKeep)
         : isScalar(node)
@@ -4670,7 +4680,7 @@ function stringify(item, ctx, onComment, onChompKeep) {
         : `${props}\n${ctx.indent}${str}`;
 }
 
-function _nullishCoalesce$6(lhs, rhsFn) { if (lhs != null) { return lhs; } else { return rhsFn(); } }
+function _nullishCoalesce$8(lhs, rhsFn) { if (lhs != null) { return lhs; } else { return rhsFn(); } }
 function stringifyPair({ key, value }, ctx, onComment, onChompKeep) {
     const { allNullValues, doc, indent, indentStep, options: { commentString, indentSeq, simpleKeys } } = ctx;
     let keyComment = (isNode(key) && key.comment) || null;
@@ -4780,7 +4790,7 @@ function stringifyPair({ key, value }, ctx, onComment, onChompKeep) {
         const vs0 = valueStr[0];
         const nl0 = valueStr.indexOf('\n');
         const hasNewline = nl0 !== -1;
-        const flow = _nullishCoalesce$6(_nullishCoalesce$6(ctx.inFlow, () => ( value.flow)), () => ( value.items.length === 0));
+        const flow = _nullishCoalesce$8(_nullishCoalesce$8(ctx.inFlow, () => ( value.flow)), () => ( value.items.length === 0));
         if (hasNewline || !flow) {
             let hasPropsLine = false;
             if (hasNewline && (vs0 === '&' || vs0 === '!')) {
@@ -4821,7 +4831,7 @@ function warn(logLevel, warning) {
     }
 }
 
-function _optionalChain$h(ops) { let lastAccessLHS = undefined; let value = ops[0]; let i = 1; while (i < ops.length) { const op = ops[i]; const fn = ops[i + 1]; i += 2; if ((op === 'optionalAccess' || op === 'optionalCall') && value == null) { return undefined; } if (op === 'access' || op === 'optionalAccess') { lastAccessLHS = value; value = fn(value); } else if (op === 'call' || op === 'optionalCall') { value = fn((...args) => value.call(lastAccessLHS, ...args)); lastAccessLHS = undefined; } } return value; }
+function _optionalChain$u(ops) { let lastAccessLHS = undefined; let value = ops[0]; let i = 1; while (i < ops.length) { const op = ops[i]; const fn = ops[i + 1]; i += 2; if ((op === 'optionalAccess' || op === 'optionalCall') && value == null) { return undefined; } if (op === 'access' || op === 'optionalAccess') { lastAccessLHS = value; value = fn(value); } else if (op === 'call' || op === 'optionalCall') { value = fn((...args) => value.call(lastAccessLHS, ...args)); lastAccessLHS = undefined; } } return value; }
 // If the value associated with a merge key is a single mapping node, each of
 // its key/value pairs is inserted into the current mapping, unless the key
 // already exists in it. If the value associated with the merge key is a
@@ -4845,7 +4855,7 @@ const isMergeKey = (ctx, key) => (merge.identify(key) ||
     (isScalar(key) &&
         (!key.type || key.type === Scalar.PLAIN) &&
         merge.identify(key.value))) &&
-    _optionalChain$h([ctx, 'optionalAccess', _ => _.doc, 'access', _2 => _2.schema, 'access', _3 => _3.tags, 'access', _4 => _4.some, 'call', _5 => _5(tag => tag.tag === merge.tag && tag.default)]);
+    _optionalChain$u([ctx, 'optionalAccess', _ => _.doc, 'access', _2 => _2.schema, 'access', _3 => _3.tags, 'access', _4 => _4.some, 'call', _5 => _5(tag => tag.tag === merge.tag && tag.default)]);
 function addMergeToJSMap(ctx, map, value) {
     const source = resolveAliasValue(ctx, value);
     if (isSeq(source))
@@ -4885,7 +4895,7 @@ function resolveAliasValue(ctx, value) {
     return ctx && isAlias(value) ? value.resolve(ctx.doc, ctx) : value;
 }
 
-function _optionalChain$g(ops) { let lastAccessLHS = undefined; let value = ops[0]; let i = 1; while (i < ops.length) { const op = ops[i]; const fn = ops[i + 1]; i += 2; if ((op === 'optionalAccess' || op === 'optionalCall') && value == null) { return undefined; } if (op === 'access' || op === 'optionalAccess') { lastAccessLHS = value; value = fn(value); } else if (op === 'call' || op === 'optionalCall') { value = fn((...args) => value.call(lastAccessLHS, ...args)); lastAccessLHS = undefined; } } return value; }
+function _optionalChain$t(ops) { let lastAccessLHS = undefined; let value = ops[0]; let i = 1; while (i < ops.length) { const op = ops[i]; const fn = ops[i + 1]; i += 2; if ((op === 'optionalAccess' || op === 'optionalCall') && value == null) { return undefined; } if (op === 'access' || op === 'optionalAccess') { lastAccessLHS = value; value = fn(value); } else if (op === 'call' || op === 'optionalCall') { value = fn((...args) => value.call(lastAccessLHS, ...args)); lastAccessLHS = undefined; } } return value; }
 function addPairToJSMap(ctx, map, { key, value }) {
     if (isNode(key) && key.addToJSMap)
         key.addToJSMap(ctx, map, value);
@@ -4922,7 +4932,7 @@ function stringifyKey(key, jsKey, ctx) {
     // eslint-disable-next-line @typescript-eslint/no-base-to-string
     if (typeof jsKey !== 'object')
         return String(jsKey);
-    if (isNode(key) && _optionalChain$g([ctx, 'optionalAccess', _ => _.doc])) {
+    if (isNode(key) && _optionalChain$t([ctx, 'optionalAccess', _ => _.doc])) {
         const strCtx = createStringifyContext(ctx.doc, {});
         strCtx.anchors = new Set();
         for (const node of ctx.anchors.keys())
@@ -4942,7 +4952,7 @@ function stringifyKey(key, jsKey, ctx) {
     return JSON.stringify(jsKey);
 }
 
-function _optionalChain$f(ops) { let lastAccessLHS = undefined; let value = ops[0]; let i = 1; while (i < ops.length) { const op = ops[i]; const fn = ops[i + 1]; i += 2; if ((op === 'optionalAccess' || op === 'optionalCall') && value == null) { return undefined; } if (op === 'access' || op === 'optionalAccess') { lastAccessLHS = value; value = fn(value); } else if (op === 'call' || op === 'optionalCall') { value = fn((...args) => value.call(lastAccessLHS, ...args)); lastAccessLHS = undefined; } } return value; }
+function _optionalChain$s(ops) { let lastAccessLHS = undefined; let value = ops[0]; let i = 1; while (i < ops.length) { const op = ops[i]; const fn = ops[i + 1]; i += 2; if ((op === 'optionalAccess' || op === 'optionalCall') && value == null) { return undefined; } if (op === 'access' || op === 'optionalAccess') { lastAccessLHS = value; value = fn(value); } else if (op === 'call' || op === 'optionalCall') { value = fn((...args) => value.call(lastAccessLHS, ...args)); lastAccessLHS = undefined; } } return value; }
 function createPair(key, value, ctx) {
     const k = createNode(key, undefined, ctx);
     const v = createNode(value, undefined, ctx);
@@ -4963,19 +4973,19 @@ class Pair {
         return new Pair(key, value);
     }
     toJSON(_, ctx) {
-        const pair = _optionalChain$f([ctx, 'optionalAccess', _2 => _2.mapAsMap]) ? new Map() : {};
+        const pair = _optionalChain$s([ctx, 'optionalAccess', _2 => _2.mapAsMap]) ? new Map() : {};
         return addPairToJSMap(ctx, pair, this);
     }
     toString(ctx, onComment, onChompKeep) {
-        return _optionalChain$f([ctx, 'optionalAccess', _3 => _3.doc])
+        return _optionalChain$s([ctx, 'optionalAccess', _3 => _3.doc])
             ? stringifyPair(this, ctx, onComment, onChompKeep)
             : JSON.stringify(this);
     }
 }
 
-function _nullishCoalesce$5(lhs, rhsFn) { if (lhs != null) { return lhs; } else { return rhsFn(); } } function _optionalChain$e(ops) { let lastAccessLHS = undefined; let value = ops[0]; let i = 1; while (i < ops.length) { const op = ops[i]; const fn = ops[i + 1]; i += 2; if ((op === 'optionalAccess' || op === 'optionalCall') && value == null) { return undefined; } if (op === 'access' || op === 'optionalAccess') { lastAccessLHS = value; value = fn(value); } else if (op === 'call' || op === 'optionalCall') { value = fn((...args) => value.call(lastAccessLHS, ...args)); lastAccessLHS = undefined; } } return value; }
+function _nullishCoalesce$7(lhs, rhsFn) { if (lhs != null) { return lhs; } else { return rhsFn(); } } function _optionalChain$r(ops) { let lastAccessLHS = undefined; let value = ops[0]; let i = 1; while (i < ops.length) { const op = ops[i]; const fn = ops[i + 1]; i += 2; if ((op === 'optionalAccess' || op === 'optionalCall') && value == null) { return undefined; } if (op === 'access' || op === 'optionalAccess') { lastAccessLHS = value; value = fn(value); } else if (op === 'call' || op === 'optionalCall') { value = fn((...args) => value.call(lastAccessLHS, ...args)); lastAccessLHS = undefined; } } return value; }
 function stringifyCollection(collection, ctx, options) {
-    const flow = _nullishCoalesce$5(ctx.inFlow, () => ( collection.flow));
+    const flow = _nullishCoalesce$7(ctx.inFlow, () => ( collection.flow));
     const stringify = flow ? stringifyFlowCollection : stringifyBlockCollection;
     return stringify(collection, ctx, options);
 }
@@ -5067,7 +5077,7 @@ function stringifyFlowCollection({ items }, ctx, { flowChars, itemIndent }) {
                 if (iv.commentBefore)
                     reqNewline = true;
             }
-            else if (item.value == null && _optionalChain$e([ik, 'optionalAccess', _ => _.comment])) {
+            else if (item.value == null && _optionalChain$r([ik, 'optionalAccess', _ => _.comment])) {
                 comment = ik.comment;
             }
         }
@@ -5122,7 +5132,7 @@ function addCommentBefore({ indent, options: { commentString } }, lines, comment
     }
 }
 
-function _nullishCoalesce$4(lhs, rhsFn) { if (lhs != null) { return lhs; } else { return rhsFn(); } } function _optionalChain$d(ops) { let lastAccessLHS = undefined; let value = ops[0]; let i = 1; while (i < ops.length) { const op = ops[i]; const fn = ops[i + 1]; i += 2; if ((op === 'optionalAccess' || op === 'optionalCall') && value == null) { return undefined; } if (op === 'access' || op === 'optionalAccess') { lastAccessLHS = value; value = fn(value); } else if (op === 'call' || op === 'optionalCall') { value = fn((...args) => value.call(lastAccessLHS, ...args)); lastAccessLHS = undefined; } } return value; }
+function _nullishCoalesce$6(lhs, rhsFn) { if (lhs != null) { return lhs; } else { return rhsFn(); } } function _optionalChain$q(ops) { let lastAccessLHS = undefined; let value = ops[0]; let i = 1; while (i < ops.length) { const op = ops[i]; const fn = ops[i + 1]; i += 2; if ((op === 'optionalAccess' || op === 'optionalCall') && value == null) { return undefined; } if (op === 'access' || op === 'optionalAccess') { lastAccessLHS = value; value = fn(value); } else if (op === 'call' || op === 'optionalCall') { value = fn((...args) => value.call(lastAccessLHS, ...args)); lastAccessLHS = undefined; } } return value; }
 function findPair(items, key) {
     const k = isScalar(key) ? key.value : key;
     for (const it of items) {
@@ -5183,12 +5193,12 @@ class YAMLMap extends Collection {
             _pair = pair;
         else if (!pair || typeof pair !== 'object' || !('key' in pair)) {
             // In TypeScript, this never happens.
-            _pair = new Pair(pair, _optionalChain$d([pair, 'optionalAccess', _2 => _2.value]));
+            _pair = new Pair(pair, _optionalChain$q([pair, 'optionalAccess', _2 => _2.value]));
         }
         else
             _pair = new Pair(pair.key, pair.value);
         const prev = findPair(this.items, _pair.key);
-        const sortEntries = _optionalChain$d([this, 'access', _3 => _3.schema, 'optionalAccess', _4 => _4.sortMapEntries]);
+        const sortEntries = _optionalChain$q([this, 'access', _3 => _3.schema, 'optionalAccess', _4 => _4.sortMapEntries]);
         if (prev) {
             if (!overwrite)
                 throw new Error(`Key ${_pair.key} already set`);
@@ -5218,8 +5228,8 @@ class YAMLMap extends Collection {
     }
     get(key, keepScalar) {
         const it = findPair(this.items, key);
-        const node = _optionalChain$d([it, 'optionalAccess', _5 => _5.value]);
-        return _nullishCoalesce$4((!keepScalar && isScalar(node) ? node.value : node), () => ( undefined));
+        const node = _optionalChain$q([it, 'optionalAccess', _5 => _5.value]);
+        return _nullishCoalesce$6((!keepScalar && isScalar(node) ? node.value : node), () => ( undefined));
     }
     has(key) {
         return !!findPair(this.items, key);
@@ -5233,8 +5243,8 @@ class YAMLMap extends Collection {
      * @returns Instance of Type, Map, or Object
      */
     toJSON(_, ctx, Type) {
-        const map = Type ? new Type() : _optionalChain$d([ctx, 'optionalAccess', _6 => _6.mapAsMap]) ? new Map() : {};
-        if (_optionalChain$d([ctx, 'optionalAccess', _7 => _7.onCreate]))
+        const map = Type ? new Type() : _optionalChain$q([ctx, 'optionalAccess', _6 => _6.mapAsMap]) ? new Map() : {};
+        if (_optionalChain$q([ctx, 'optionalAccess', _7 => _7.onCreate]))
             ctx.onCreate(map);
         for (const item of this.items)
             addPairToJSMap(ctx, map, item);
@@ -5259,7 +5269,7 @@ class YAMLMap extends Collection {
     }
 }
 
-function _optionalChain$c(ops) { let lastAccessLHS = undefined; let value = ops[0]; let i = 1; while (i < ops.length) { const op = ops[i]; const fn = ops[i + 1]; i += 2; if ((op === 'optionalAccess' || op === 'optionalCall') && value == null) { return undefined; } if (op === 'access' || op === 'optionalAccess') { lastAccessLHS = value; value = fn(value); } else if (op === 'call' || op === 'optionalCall') { value = fn((...args) => value.call(lastAccessLHS, ...args)); lastAccessLHS = undefined; } } return value; }
+function _optionalChain$p(ops) { let lastAccessLHS = undefined; let value = ops[0]; let i = 1; while (i < ops.length) { const op = ops[i]; const fn = ops[i + 1]; i += 2; if ((op === 'optionalAccess' || op === 'optionalCall') && value == null) { return undefined; } if (op === 'access' || op === 'optionalAccess') { lastAccessLHS = value; value = fn(value); } else if (op === 'call' || op === 'optionalCall') { value = fn((...args) => value.call(lastAccessLHS, ...args)); lastAccessLHS = undefined; } } return value; }
 class YAMLSeq extends Collection {
     static get tagName() {
         return 'tag:yaml.org,2002:seq';
@@ -5322,7 +5332,7 @@ class YAMLSeq extends Collection {
     }
     toJSON(_, ctx) {
         const seq = [];
-        if (_optionalChain$c([ctx, 'optionalAccess', _2 => _2.onCreate]))
+        if (_optionalChain$p([ctx, 'optionalAccess', _2 => _2.onCreate]))
             ctx.onCreate(seq);
         let i = 0;
         for (const item of this.items)
@@ -5401,7 +5411,7 @@ function createPairs(schema, iterable, ctx) {
     return pairs;
 }
 
-function _optionalChain$b(ops) { let lastAccessLHS = undefined; let value = ops[0]; let i = 1; while (i < ops.length) { const op = ops[i]; const fn = ops[i + 1]; i += 2; if ((op === 'optionalAccess' || op === 'optionalCall') && value == null) { return undefined; } if (op === 'access' || op === 'optionalAccess') { lastAccessLHS = value; value = fn(value); } else if (op === 'call' || op === 'optionalCall') { value = fn((...args) => value.call(lastAccessLHS, ...args)); lastAccessLHS = undefined; } } return value; }
+function _optionalChain$o(ops) { let lastAccessLHS = undefined; let value = ops[0]; let i = 1; while (i < ops.length) { const op = ops[i]; const fn = ops[i + 1]; i += 2; if ((op === 'optionalAccess' || op === 'optionalCall') && value == null) { return undefined; } if (op === 'access' || op === 'optionalAccess') { lastAccessLHS = value; value = fn(value); } else if (op === 'call' || op === 'optionalCall') { value = fn((...args) => value.call(lastAccessLHS, ...args)); lastAccessLHS = undefined; } } return value; }
 class YAMLOMap extends YAMLSeq {
     constructor() {
         super();
@@ -5420,7 +5430,7 @@ class YAMLOMap extends YAMLSeq {
         if (!ctx)
             return super.toJSON(_);
         const map = new Map();
-        if (_optionalChain$b([ctx, 'optionalAccess', _2 => _2.onCreate]))
+        if (_optionalChain$o([ctx, 'optionalAccess', _2 => _2.onCreate]))
             ctx.onCreate(map);
         for (const pair of this.items) {
             let key, value;
@@ -5538,7 +5548,7 @@ const isDirExists = async (file) => {
   }
 };
 
-function _optionalChain$a(ops) { let lastAccessLHS = undefined; let value = ops[0]; let i = 1; while (i < ops.length) { const op = ops[i]; const fn = ops[i + 1]; i += 2; if ((op === 'optionalAccess' || op === 'optionalCall') && value == null) { return undefined; } if (op === 'access' || op === 'optionalAccess') { lastAccessLHS = value; value = fn(value); } else if (op === 'call' || op === 'optionalCall') { value = fn((...args) => value.call(lastAccessLHS, ...args)); lastAccessLHS = undefined; } } return value; }// ABOUTME: Project type detection utility
+function _optionalChain$n(ops) { let lastAccessLHS = undefined; let value = ops[0]; let i = 1; while (i < ops.length) { const op = ops[i]; const fn = ops[i + 1]; i += 2; if ((op === 'optionalAccess' || op === 'optionalCall') && value == null) { return undefined; } if (op === 'access' || op === 'optionalAccess') { lastAccessLHS = value; value = fn(value); } else if (op === 'call' || op === 'optionalCall') { value = fn((...args) => value.call(lastAccessLHS, ...args)); lastAccessLHS = undefined; } } return value; }// ABOUTME: Project type detection utility
 
 /**
  * 支持的项目类型枚举
@@ -5640,7 +5650,7 @@ const collectProjectInfo = async (
   }
 
   const scripts = Object.entries(
-    (_optionalChain$a([packageJson, 'optionalAccess', _ => _.scripts]) ) || {},
+    (_optionalChain$n([packageJson, 'optionalAccess', _ => _.scripts]) ) || {},
   ).reduce((acc, [name, script]) => {
     if (typeof script === 'string') {
       acc[name] = script;
@@ -5794,7 +5804,7 @@ const detectProjectType = async (
   };
 };
 
-function _optionalChain$9(ops) { let lastAccessLHS = undefined; let value = ops[0]; let i = 1; while (i < ops.length) { const op = ops[i]; const fn = ops[i + 1]; i += 2; if ((op === 'optionalAccess' || op === 'optionalCall') && value == null) { return undefined; } if (op === 'access' || op === 'optionalAccess') { lastAccessLHS = value; value = fn(value); } else if (op === 'call' || op === 'optionalCall') { value = fn((...args) => value.call(lastAccessLHS, ...args)); lastAccessLHS = undefined; } } return value; }
+function _optionalChain$m(ops) { let lastAccessLHS = undefined; let value = ops[0]; let i = 1; while (i < ops.length) { const op = ops[i]; const fn = ops[i + 1]; i += 2; if ((op === 'optionalAccess' || op === 'optionalCall') && value == null) { return undefined; } if (op === 'access' || op === 'optionalAccess') { lastAccessLHS = value; value = fn(value); } else if (op === 'call' || op === 'optionalCall') { value = fn((...args) => value.call(lastAccessLHS, ...args)); lastAccessLHS = undefined; } } return value; }
 
 
 /**
@@ -5806,7 +5816,7 @@ function _optionalChain$9(ops) { let lastAccessLHS = undefined; let value = ops[
 const parseConfigContent = (content) => {
   // 1. 尝试 TOML 格式 (默认)
   try {
-    const config = toml.parse(content);
+    const config = TOML.parse(content);
     return config ;
   } catch (error) {
     // TOML 解析失败，继续尝试其他格式
@@ -5840,7 +5850,7 @@ const parseConfigContent = (content) => {
  */
 const parseTomlConfigContent = (content) => {
   try {
-    return toml.parse(content) ;
+    return TOML.parse(content) ;
   } catch (e) {
     return null;
   }
@@ -5921,7 +5931,7 @@ const saveTomlCozeConfig = async (
     projectPath,
     `.coze.tmp-${process.pid}-${Date.now()}`,
   );
-  const content = toml.stringify(config );
+  const content = TOML.stringify(config );
 
   try {
     await fs$1.writeFile(tempCozeConfigPath, content, 'utf-8');
@@ -5953,35 +5963,66 @@ const saveProjectPatchState = async (
   await saveTomlCozeConfig(config, projectPath);
 };
 
-/**
- * 获取指定命令的配置
- *
- * @param config - .coze 配置对象
- * @param commandName - 命令名称 (dev/build/start)
- * @returns 命令配置数组
- */
-const getCommandConfig = (
+
+
+const getDefaultCommandConfig = (
   config,
   commandName,
 ) => {
-  let commandConfig;
+  switch (commandName) {
+    case 'dev':
+      return _optionalChain$m([config, 'access', _ => _.dev, 'optionalAccess', _2 => _2.run]);
+    case 'build':
+      return _optionalChain$m([config, 'access', _3 => _3.deploy, 'optionalAccess', _4 => _4.build]);
+    case 'start':
+      return _optionalChain$m([config, 'access', _5 => _5.deploy, 'optionalAccess', _6 => _6.run]);
+    case 'validate':
+      return _optionalChain$m([config, 'access', _7 => _7.dev, 'optionalAccess', _8 => _8.validate]);
+    default:
+      throw new Error(`Unknown command: ${commandName}`);
+  }
+};
 
+const getWindowsCommandConfig = (
+  config,
+  commandName,
+) => {
   switch (commandName) {
     case 'dev':
-      commandConfig = _optionalChain$9([config, 'access', _ => _.dev, 'optionalAccess', _2 => _2.run]);
-      break;
+      return _optionalChain$m([config, 'access', _9 => _9.dev, 'optionalAccess', _10 => _10.run_win]);
     case 'build':
-      commandConfig = _optionalChain$9([config, 'access', _3 => _3.deploy, 'optionalAccess', _4 => _4.build]);
-      break;
+      return _optionalChain$m([config, 'access', _11 => _11.deploy, 'optionalAccess', _12 => _12.build_win]);
     case 'start':
-      commandConfig = _optionalChain$9([config, 'access', _5 => _5.deploy, 'optionalAccess', _6 => _6.run]);
-      break;
+      return _optionalChain$m([config, 'access', _13 => _13.deploy, 'optionalAccess', _14 => _14.run_win]);
     case 'validate':
-      commandConfig = _optionalChain$9([config, 'access', _7 => _7.dev, 'optionalAccess', _8 => _8.validate]);
-      break;
+      return _optionalChain$m([config, 'access', _15 => _15.dev, 'optionalAccess', _16 => _16.validate_win]);
     default:
       throw new Error(`Unknown command: ${commandName}`);
   }
+};
+
+/**
+ * 获取指定命令的配置
+ *
+ * Windows 优先使用非空的 *_win 配置；其他平台（包括 WSL）始终使用默认配置。
+ *
+ * @param config - .coze 配置对象
+ * @param commandName - 命令名称 (dev/build/start)
+ * @returns 命令配置数组
+ */
+const getCommandConfig = (
+  config,
+  commandName,
+  platform = process.platform,
+) => {
+  const defaultCommandConfig = getDefaultCommandConfig(config, commandName);
+  const windowsCommandConfig =
+    platform === 'win32'
+      ? getWindowsCommandConfig(config, commandName)
+      : undefined;
+  const commandConfig = _optionalChain$m([windowsCommandConfig, 'optionalAccess', _17 => _17.length])
+    ? windowsCommandConfig
+    : defaultCommandConfig;
 
   if (!commandConfig || commandConfig.length === 0) {
     throw new Error(
@@ -6128,7 +6169,7 @@ const byFlag = (flag) => {
   return predicate;
 };
 
-function _optionalChain$8(ops) { let lastAccessLHS = undefined; let value = ops[0]; let i = 1; while (i < ops.length) { const op = ops[i]; const fn = ops[i + 1]; i += 2; if ((op === 'optionalAccess' || op === 'optionalCall') && value == null) { return undefined; } if (op === 'access' || op === 'optionalAccess') { lastAccessLHS = value; value = fn(value); } else if (op === 'call' || op === 'optionalCall') { value = fn((...args) => value.call(lastAccessLHS, ...args)); lastAccessLHS = undefined; } } return value; }
+function _optionalChain$l(ops) { let lastAccessLHS = undefined; let value = ops[0]; let i = 1; while (i < ops.length) { const op = ops[i]; const fn = ops[i + 1]; i += 2; if ((op === 'optionalAccess' || op === 'optionalCall') && value == null) { return undefined; } if (op === 'access' || op === 'optionalAccess') { lastAccessLHS = value; value = fn(value); } else if (op === 'call' || op === 'optionalCall') { value = fn((...args) => value.call(lastAccessLHS, ...args)); lastAccessLHS = undefined; } } return value; }
 
 
 
@@ -6159,7 +6200,7 @@ echo "Validate passed!"
  * @returns
  */
 const isCozeValid$3 = (cozeConfig) => {
-  if (_optionalChain$8([cozeConfig, 'access', _ => _.dev, 'optionalAccess', _2 => _2.validate])) {
+  if (_optionalChain$l([cozeConfig, 'access', _ => _.dev, 'optionalAccess', _2 => _2.validate])) {
     logger.info('[patch-expo-validate] NOT APPLY: dev.validate exists');
     return false;
   }
@@ -6304,7 +6345,7 @@ const patchExpoValidate = {
   },
 };
 
-function _optionalChain$7(ops) { let lastAccessLHS = undefined; let value = ops[0]; let i = 1; while (i < ops.length) { const op = ops[i]; const fn = ops[i + 1]; i += 2; if ((op === 'optionalAccess' || op === 'optionalCall') && value == null) { return undefined; } if (op === 'access' || op === 'optionalAccess') { lastAccessLHS = value; value = fn(value); } else if (op === 'call' || op === 'optionalCall') { value = fn((...args) => value.call(lastAccessLHS, ...args)); lastAccessLHS = undefined; } } return value; }
+function _optionalChain$k(ops) { let lastAccessLHS = undefined; let value = ops[0]; let i = 1; while (i < ops.length) { const op = ops[i]; const fn = ops[i + 1]; i += 2; if ((op === 'optionalAccess' || op === 'optionalCall') && value == null) { return undefined; } if (op === 'access' || op === 'optionalAccess') { lastAccessLHS = value; value = fn(value); } else if (op === 'call' || op === 'optionalCall') { value = fn((...args) => value.call(lastAccessLHS, ...args)); lastAccessLHS = undefined; } } return value; }
 
 
 
@@ -6337,7 +6378,7 @@ echo "Validate passed!"
  * @returns
  */
 const isCozeValid$2 = (cozeConfig) => {
-  if (_optionalChain$7([cozeConfig, 'access', _ => _.dev, 'optionalAccess', _2 => _2.validate])) {
+  if (_optionalChain$k([cozeConfig, 'access', _ => _.dev, 'optionalAccess', _2 => _2.validate])) {
     logger.info('[patch-nextjs-validate] NOT APPLY: dev.validate exists');
     return false;
   }
@@ -6485,7 +6526,7 @@ const patchNextjsValidate = {
   },
 };
 
-function _optionalChain$6(ops) { let lastAccessLHS = undefined; let value = ops[0]; let i = 1; while (i < ops.length) { const op = ops[i]; const fn = ops[i + 1]; i += 2; if ((op === 'optionalAccess' || op === 'optionalCall') && value == null) { return undefined; } if (op === 'access' || op === 'optionalAccess') { lastAccessLHS = value; value = fn(value); } else if (op === 'call' || op === 'optionalCall') { value = fn((...args) => value.call(lastAccessLHS, ...args)); lastAccessLHS = undefined; } } return value; }
+function _optionalChain$j(ops) { let lastAccessLHS = undefined; let value = ops[0]; let i = 1; while (i < ops.length) { const op = ops[i]; const fn = ops[i + 1]; i += 2; if ((op === 'optionalAccess' || op === 'optionalCall') && value == null) { return undefined; } if (op === 'access' || op === 'optionalAccess') { lastAccessLHS = value; value = fn(value); } else if (op === 'call' || op === 'optionalCall') { value = fn((...args) => value.call(lastAccessLHS, ...args)); lastAccessLHS = undefined; } } return value; }
 
 const PATCH_ID$5 = 'nextjs/validate-concurrently@0.0.30';
 const PACKAGE_JSON_FILE$3 = 'package.json';
@@ -6518,7 +6559,7 @@ const readPackageJson = async (projectFolder) => {
 };
 
 const getTargetValidateScript = (packageJson) => {
-  const validateScript = _optionalChain$6([packageJson, 'access', _ => _.scripts, 'optionalAccess', _2 => _2.validate]);
+  const validateScript = _optionalChain$j([packageJson, 'access', _ => _.scripts, 'optionalAccess', _2 => _2.validate]);
   if (typeof validateScript !== 'string') {
     return null;
   }
@@ -6535,7 +6576,7 @@ const getTargetValidateScript = (packageJson) => {
 
 const canStackAfterNextjsValidatePatch = async (context, packageJson) => {
   const scripts = packageJson.scripts || {};
-  if (typeof scripts.validate !== 'undefined' || typeof scripts['ts-check'] !== 'string' || _optionalChain$6([context, 'access', _3 => _3.cozeConfig, 'access', _4 => _4.dev, 'optionalAccess', _5 => _5.validate])) {
+  if (typeof scripts.validate !== 'undefined' || typeof scripts['ts-check'] !== 'string' || _optionalChain$j([context, 'access', _3 => _3.cozeConfig, 'access', _4 => _4.dev, 'optionalAccess', _5 => _5.validate])) {
     return false;
   }
 
@@ -6604,7 +6645,7 @@ const patchNextjsValidateConcurrently = {
   apply: patchPackageJson$2,
 };
 
-function _optionalChain$5(ops) { let lastAccessLHS = undefined; let value = ops[0]; let i = 1; while (i < ops.length) { const op = ops[i]; const fn = ops[i + 1]; i += 2; if ((op === 'optionalAccess' || op === 'optionalCall') && value == null) { return undefined; } if (op === 'access' || op === 'optionalAccess') { lastAccessLHS = value; value = fn(value); } else if (op === 'call' || op === 'optionalCall') { value = fn((...args) => value.call(lastAccessLHS, ...args)); lastAccessLHS = undefined; } } return value; }
+function _optionalChain$i(ops) { let lastAccessLHS = undefined; let value = ops[0]; let i = 1; while (i < ops.length) { const op = ops[i]; const fn = ops[i + 1]; i += 2; if ((op === 'optionalAccess' || op === 'optionalCall') && value == null) { return undefined; } if (op === 'access' || op === 'optionalAccess') { lastAccessLHS = value; value = fn(value); } else if (op === 'call' || op === 'optionalCall') { value = fn((...args) => value.call(lastAccessLHS, ...args)); lastAccessLHS = undefined; } } return value; }
 
 
 
@@ -6637,7 +6678,7 @@ echo "Validate passed!"
  * @returns
  */
 const isCozeValid$1 = (cozeConfig) => {
-  if (_optionalChain$5([cozeConfig, 'access', _ => _.dev, 'optionalAccess', _2 => _2.validate])) {
+  if (_optionalChain$i([cozeConfig, 'access', _ => _.dev, 'optionalAccess', _2 => _2.validate])) {
     logger.info('[patch-vite-validate] NOT APPLY: dev.validate exists');
     return false;
   }
@@ -6782,7 +6823,7 @@ const patchViteValidate = {
   },
 };
 
-function _optionalChain$4(ops) { let lastAccessLHS = undefined; let value = ops[0]; let i = 1; while (i < ops.length) { const op = ops[i]; const fn = ops[i + 1]; i += 2; if ((op === 'optionalAccess' || op === 'optionalCall') && value == null) { return undefined; } if (op === 'access' || op === 'optionalAccess') { lastAccessLHS = value; value = fn(value); } else if (op === 'call' || op === 'optionalCall') { value = fn((...args) => value.call(lastAccessLHS, ...args)); lastAccessLHS = undefined; } } return value; }
+function _optionalChain$h(ops) { let lastAccessLHS = undefined; let value = ops[0]; let i = 1; while (i < ops.length) { const op = ops[i]; const fn = ops[i + 1]; i += 2; if ((op === 'optionalAccess' || op === 'optionalCall') && value == null) { return undefined; } if (op === 'access' || op === 'optionalAccess') { lastAccessLHS = value; value = fn(value); } else if (op === 'call' || op === 'optionalCall') { value = fn((...args) => value.call(lastAccessLHS, ...args)); lastAccessLHS = undefined; } } return value; }
 
 
 
@@ -6819,7 +6860,7 @@ echo "Validate passed!"
  * @returns
  */
 const isCozeValid = (cozeConfig) => {
-  if (_optionalChain$4([cozeConfig, 'access', _ => _.dev, 'optionalAccess', _2 => _2.validate])) {
+  if (_optionalChain$h([cozeConfig, 'access', _ => _.dev, 'optionalAccess', _2 => _2.validate])) {
     logger.info('[patch-taro-validate] NOT APPLY: dev.validate exists');
     return false;
   }
@@ -6968,7 +7009,7 @@ const patchTaroValidate = {
   },
 };
 
-function _optionalChain$3(ops) { let lastAccessLHS = undefined; let value = ops[0]; let i = 1; while (i < ops.length) { const op = ops[i]; const fn = ops[i + 1]; i += 2; if ((op === 'optionalAccess' || op === 'optionalCall') && value == null) { return undefined; } if (op === 'access' || op === 'optionalAccess') { lastAccessLHS = value; value = fn(value); } else if (op === 'call' || op === 'optionalCall') { value = fn((...args) => value.call(lastAccessLHS, ...args)); lastAccessLHS = undefined; } } return value; }
+function _optionalChain$g(ops) { let lastAccessLHS = undefined; let value = ops[0]; let i = 1; while (i < ops.length) { const op = ops[i]; const fn = ops[i + 1]; i += 2; if ((op === 'optionalAccess' || op === 'optionalCall') && value == null) { return undefined; } if (op === 'access' || op === 'optionalAccess') { lastAccessLHS = value; value = fn(value); } else if (op === 'call' || op === 'optionalCall') { value = fn((...args) => value.call(lastAccessLHS, ...args)); lastAccessLHS = undefined; } } return value; }
 const PATCH_ID$2 = 'taro/update-pack-script-for-tt-build@0.0.13';
 const PACKAGE_JSON_FILE = 'package.json';
 const PACK_SCRIPT_FILE = '.cozeproj/scripts/pack.sh';
@@ -7047,12 +7088,12 @@ const readPackageScripts = async (
   const packageJsonContent = await fs$1.readFile(packageJsonPath, 'utf-8');
   const packageJson = safeJsonParse(packageJsonContent, null);
 
-  return _optionalChain$3([packageJson, 'optionalAccess', _ => _.scripts]) || null;
+  return _optionalChain$g([packageJson, 'optionalAccess', _ => _.scripts]) || null;
 };
 
 const hasBuildTtScript = async (projectFolder) => {
   const scripts = await readPackageScripts(projectFolder);
-  return typeof _optionalChain$3([scripts, 'optionalAccess', _2 => _2['build:tt']]) === 'string';
+  return typeof _optionalChain$g([scripts, 'optionalAccess', _2 => _2['build:tt']]) === 'string';
 };
 
 const hasLegacyPackScript = async (projectFolder) => {
@@ -7406,7 +7447,7 @@ const getTemplatePatches = (
 ) =>
   patches.filter(patch => patch.template === template);
 
-function _nullishCoalesce$3(lhs, rhsFn) { if (lhs != null) { return lhs; } else { return rhsFn(); } } function _optionalChain$2(ops) { let lastAccessLHS = undefined; let value = ops[0]; let i = 1; while (i < ops.length) { const op = ops[i]; const fn = ops[i + 1]; i += 2; if ((op === 'optionalAccess' || op === 'optionalCall') && value == null) { return undefined; } if (op === 'access' || op === 'optionalAccess') { lastAccessLHS = value; value = fn(value); } else if (op === 'call' || op === 'optionalCall') { value = fn((...args) => value.call(lastAccessLHS, ...args)); lastAccessLHS = undefined; } } return value; }
+function _nullishCoalesce$5(lhs, rhsFn) { if (lhs != null) { return lhs; } else { return rhsFn(); } } function _optionalChain$f(ops) { let lastAccessLHS = undefined; let value = ops[0]; let i = 1; while (i < ops.length) { const op = ops[i]; const fn = ops[i + 1]; i += 2; if ((op === 'optionalAccess' || op === 'optionalCall') && value == null) { return undefined; } if (op === 'access' || op === 'optionalAccess') { lastAccessLHS = value; value = fn(value); } else if (op === 'call' || op === 'optionalCall') { value = fn((...args) => value.call(lastAccessLHS, ...args)); lastAccessLHS = undefined; } } return value; }
 const DEFAULT_LEGACY_VERSION = 'legacy';
 
 const loadFlagsWithFallback = async () => {
@@ -7512,7 +7553,7 @@ const getNextPatchState = (
 
 ) => ({
   template,
-  version: _optionalChain$2([config, 'access', _ => _.project, 'optionalAccess', _2 => _2.version]) || DEFAULT_LEGACY_VERSION,
+  version: _optionalChain$f([config, 'access', _ => _.project, 'optionalAccess', _2 => _2.version]) || DEFAULT_LEGACY_VERSION,
   appliedPatches: [...appliedPatches, patchId],
 });
 
@@ -7536,15 +7577,15 @@ const executePatch = async (
   }
 
   const template =
-    _optionalChain$2([config, 'access', _3 => _3.project, 'optionalAccess', _4 => _4.template]) || (await detectTemplateKey(projectFolder));
+    _optionalChain$f([config, 'access', _3 => _3.project, 'optionalAccess', _4 => _4.template]) || (await detectTemplateKey(projectFolder));
 
   if (!template) {
     logger.info('Patch skipped: template not detected');
     return;
   }
 
-  const appliedPatches = [...(_optionalChain$2([config, 'access', _5 => _5.project, 'optionalAccess', _6 => _6.appliedPatches]) || [])];
-  const projectVersion = _optionalChain$2([config, 'access', _7 => _7.project, 'optionalAccess', _8 => _8.version]);
+  const appliedPatches = [...(_optionalChain$f([config, 'access', _5 => _5.project, 'optionalAccess', _6 => _6.appliedPatches]) || [])];
+  const projectVersion = _optionalChain$f([config, 'access', _7 => _7.project, 'optionalAccess', _8 => _8.version]);
   const flags = await loadFlagsWithFallback();
 
   const context = {
@@ -7589,7 +7630,7 @@ const executePatch = async (
 
   if (options.dryRun) {
     logger.info(`Detected template: ${template}`);
-    logger.info(`Current version: ${_nullishCoalesce$3(projectVersion, () => ( DEFAULT_LEGACY_VERSION))}`);
+    logger.info(`Current version: ${_nullishCoalesce$5(projectVersion, () => ( DEFAULT_LEGACY_VERSION))}`);
     logger.info(`Applied patches: ${appliedPatches.join(', ') || '(none)'}`);
     logger.info('Matched patches:');
     matchedPatches.forEach(patch => {
@@ -7630,7 +7671,7 @@ const executePatch = async (
   }
 };
 
-const registerCommand$4 = program => {
+const registerCommand$5 = program => {
   program
     .command('patch')
     .description('Apply template patches for existing projects')
@@ -7647,14 +7688,14 @@ const registerCommand$4 = program => {
       ) => {
         await executePatch({
           directory,
-          dryRun: _optionalChain$2([command, 'optionalAccess', _9 => _9.dryRun]),
-          showFlags: _optionalChain$2([command, 'optionalAccess', _10 => _10.showFlags]),
+          dryRun: _optionalChain$f([command, 'optionalAccess', _9 => _9.dryRun]),
+          showFlags: _optionalChain$f([command, 'optionalAccess', _10 => _10.showFlags]),
         });
       },
     );
 };
 
-function _nullishCoalesce$2(lhs, rhsFn) { if (lhs != null) { return lhs; } else { return rhsFn(); } } function _optionalChain$1(ops) { let lastAccessLHS = undefined; let value = ops[0]; let i = 1; while (i < ops.length) { const op = ops[i]; const fn = ops[i + 1]; i += 2; if ((op === 'optionalAccess' || op === 'optionalCall') && value == null) { return undefined; } if (op === 'access' || op === 'optionalAccess') { lastAccessLHS = value; value = fn(value); } else if (op === 'call' || op === 'optionalCall') { value = fn((...args) => value.call(lastAccessLHS, ...args)); lastAccessLHS = undefined; } } return value; }
+function _nullishCoalesce$4(lhs, rhsFn) { if (lhs != null) { return lhs; } else { return rhsFn(); } } function _optionalChain$e(ops) { let lastAccessLHS = undefined; let value = ops[0]; let i = 1; while (i < ops.length) { const op = ops[i]; const fn = ops[i + 1]; i += 2; if ((op === 'optionalAccess' || op === 'optionalCall') && value == null) { return undefined; } if (op === 'access' || op === 'optionalAccess') { lastAccessLHS = value; value = fn(value); } else if (op === 'call' || op === 'optionalCall') { value = fn((...args) => value.call(lastAccessLHS, ...args)); lastAccessLHS = undefined; } } return value; }
 const d$1 = debug('coze-init-cli:run');
 
 /**
@@ -7785,12 +7826,12 @@ const executeRun = async (commandName, options = {}) => {
     }
 
     // 将输出同时写入控制台和日志文件
-    _optionalChain$1([childProcess, 'access', _ => _.stdout, 'optionalAccess', _2 => _2.on, 'call', _3 => _3('data', (data) => {
+    _optionalChain$e([childProcess, 'access', _ => _.stdout, 'optionalAccess', _2 => _2.on, 'call', _3 => _3('data', (data) => {
       process.stdout.write(data);
       logStream.write(data);
     })]);
 
-    _optionalChain$1([childProcess, 'access', _4 => _4.stderr, 'optionalAccess', _5 => _5.on, 'call', _6 => _6('data', (data) => {
+    _optionalChain$e([childProcess, 'access', _4 => _4.stderr, 'optionalAccess', _5 => _5.on, 'call', _6 => _6('data', (data) => {
       process.stderr.write(data);
       logStream.write(data);
     })]);
@@ -7803,7 +7844,7 @@ const executeRun = async (commandName, options = {}) => {
         const buildDuration = Date.now() - buildStartTime;
 
         if (code !== 0) {
-          const errorMessage = `Command exited with code ${_nullishCoalesce$2(code, () => ( 'unknown'))}${signal ? ` and signal ${signal}` : ''}`;
+          const errorMessage = `Command exited with code ${_nullishCoalesce$4(code, () => ( 'unknown'))}${signal ? ` and signal ${signal}` : ''}`;
           logger.error(errorMessage);
           logger.error(`Check log file for details: ${logFilePath}`);
 
@@ -7815,12 +7856,12 @@ const executeRun = async (commandName, options = {}) => {
             categories: {
               fixDuration: String(fixDuration),
               buildDuration: String(buildDuration),
-              exitCode: String(_nullishCoalesce$2(code, () => ( 'unknown'))),
+              exitCode: String(_nullishCoalesce$4(code, () => ( 'unknown'))),
               projectType,
             },
             errorContext: {
-              exitCode: String(_nullishCoalesce$2(code, () => ( 'unknown'))),
-              signal: _nullishCoalesce$2(signal, () => ( 'none')),
+              exitCode: String(_nullishCoalesce$4(code, () => ( 'unknown'))),
+              signal: _nullishCoalesce$4(signal, () => ( 'none')),
               logFile: logFilePath,
               projectType,
             },
@@ -7896,7 +7937,7 @@ const executeRun = async (commandName, options = {}) => {
 /**
  * 注册 dev/build/start 命令到 program
  */
-const registerCommand$3 = program => {
+const registerCommand$4 = program => {
   // dev 命令
   program
     .command('dev')
@@ -8734,7 +8775,7 @@ const scanRoutesOnce = async (
   }
 };
 
-function _optionalChain(ops) { let lastAccessLHS = undefined; let value = ops[0]; let i = 1; while (i < ops.length) { const op = ops[i]; const fn = ops[i + 1]; i += 2; if ((op === 'optionalAccess' || op === 'optionalCall') && value == null) { return undefined; } if (op === 'access' || op === 'optionalAccess') { lastAccessLHS = value; value = fn(value); } else if (op === 'call' || op === 'optionalCall') { value = fn((...args) => value.call(lastAccessLHS, ...args)); lastAccessLHS = undefined; } } return value; }// Route manifest generation command
+function _optionalChain$d(ops) { let lastAccessLHS = undefined; let value = ops[0]; let i = 1; while (i < ops.length) { const op = ops[i]; const fn = ops[i + 1]; i += 2; if ((op === 'optionalAccess' || op === 'optionalCall') && value == null) { return undefined; } if (op === 'access' || op === 'optionalAccess') { lastAccessLHS = value; value = fn(value); } else if (op === 'call' || op === 'optionalCall') { value = fn((...args) => value.call(lastAccessLHS, ...args)); lastAccessLHS = undefined; } } return value; }// Route manifest generation command
 
 
 const log = debug('coze:routes');
@@ -8822,7 +8863,7 @@ const executeRoutes = async (
 /**
  * Register routes command to program
  */
-const registerCommand$2 = program => {
+const registerCommand$3 = program => {
   program
     .command('routes')
     .description('Generate routes manifest for the current project')
@@ -8835,11 +8876,11 @@ const registerCommand$2 = program => {
       'Output file path (defaults to ~/.coze/routes.json)',
     )
     .action(async (directory, options) => {
-      await executeRoutes({ directory, output: _optionalChain([options, 'optionalAccess', _ => _.output]) });
+      await executeRoutes({ directory, output: _optionalChain$d([options, 'optionalAccess', _ => _.output]) });
     });
 };
 
-function _nullishCoalesce$1(lhs, rhsFn) { if (lhs != null) { return lhs; } else { return rhsFn(); } }
+function _nullishCoalesce$3(lhs, rhsFn) { if (lhs != null) { return lhs; } else { return rhsFn(); } }
 
 
 const d = debug('coze-init-cli:check-bins');
@@ -8896,7 +8937,7 @@ const checkBins = async (cwd, fix) => {
 
       const bins =
         typeof depPkg.bin === 'string'
-          ? { [_nullishCoalesce$1(depName.split('/').pop(), () => ( depName))]: depPkg.bin }
+          ? { [_nullishCoalesce$3(depName.split('/').pop(), () => ( depName))]: depPkg.bin }
           : depPkg.bin;
 
       d('%s declares bins: %o', depName, Object.keys(bins));
@@ -8946,7 +8987,7 @@ const checkBins = async (cwd, fix) => {
   d('pnpm i --force completed');
 };
 
-const registerCommand$1 = program => {
+const registerCommand$2 = program => {
   program
     .command('check-bins')
     .description(
@@ -9138,6 +9179,7 @@ const shouldRenderFile = (filePath) => {
     '.prettierrc',
     '.babelrc',
     '.sh',
+    '.ps1',
   ]);
 
   const ext = path.extname(filePath).toLowerCase();
@@ -9840,7 +9882,7 @@ const execute = async (
   };
 };
 
-function _nullishCoalesce(lhs, rhsFn) { if (lhs != null) { return lhs; } else { return rhsFn(); } }
+function _nullishCoalesce$2(lhs, rhsFn) { if (lhs != null) { return lhs; } else { return rhsFn(); } }
 /**
  * 运行 pnpm install
  */
@@ -9961,8 +10003,8 @@ const runDev = (projectPath) => {
   // 获取当前 CLI 的可执行文件路径
   // process.argv[0] 是 node，process.argv[1] 是 CLI 入口文件
   // 二者在 CLI 运行时必然存在，兜底空串仅为满足类型收窄，运行时不会命中
-  const nodeBin = _nullishCoalesce(process.argv[0], () => ( ''));
-  const cliPath = _nullishCoalesce(process.argv[1], () => ( ''));
+  const nodeBin = _nullishCoalesce$2(process.argv[0], () => ( ''));
+  const cliPath = _nullishCoalesce$2(process.argv[1], () => ( ''));
 
   try {
     // 使用通用的后台执行函数启动开发服务器
@@ -10032,7 +10074,7 @@ const executeTemplateEngineStep = async ctx => {
     templateName: ctx.templateName,
     outputPath: ctx.outputPath,
     command: ctx.command,
-    force: _nullishCoalesce(ctx.options.force, () => ( false)),
+    force: _nullishCoalesce$2(ctx.options.force, () => ( false)),
   });
 
   // 保存结果到上下文
@@ -10291,7 +10333,7 @@ const executeInit = async (
 /**
  * 注册 init 命令到 program
  */
-const registerCommand = program => {
+const registerCommand$1 = program => {
   program
     .command('init')
     .description('Initialize a new project from a template')
@@ -10306,67 +10348,3533 @@ const registerCommand = program => {
       false,
     )
     .option('--skip-dev', 'Skip automatic dev server start', false)
+    .addHelpText('after', generateTemplatesHelpText())
     .allowUnknownOption() // 允许透传参数
     .action(async (directory, options, command) => {
       // 位置参数优先级高于 --output 选项
-      const outputPath = _nullishCoalesce(directory, () => ( options.output));
+      const outputPath = _nullishCoalesce$2(directory, () => ( options.output));
       // Always use force mode - overwrite existing files without conflict check
       const force = true;
       await executeInit({ ...options, output: outputPath, force }, command);
     });
 };
 
-const commands = [
-  registerCommand,
-  registerCommand$3,
-  registerCommand$6,
-  registerCommand$4,
-  registerCommand$5,
-  registerCommand$2,
-  registerCommand$1,
+const deployCommands = new WeakSet();
+
+const markDeployCommand = (command) => {
+  deployCommands.add(command);
+  return command;
+};
+
+const findDeployCommand = (command) => {
+  let current = command;
+  while (current) {
+    if (deployCommands.has(current)) {
+      return current;
+    }
+    current = current.parent;
+  }
+  throw new Error('Unable to resolve the coze-dev deploy command context.');
+};
+
+class CliError extends Error {
+  constructor(
+    message,
+      code = 'DEPLOY_CLI_ERROR',
+      details,
+  ) {
+    super(message);this.code = code;this.details = details;    this.name = 'CliError';
+  }
+}
+
+const toErrorPayload = (error) => {
+  if (error instanceof CliError) {
+    return { code: error.code, message: error.message, details: error.details };
+  }
+  return {
+    code: 'INTERNAL_ERROR',
+    message: error instanceof Error ? error.message : String(error),
+  };
+};
+
+const APPLICATION_TYPES = new Set([
+  'service',
+  'pages',
+  'mini_program',
+]);
+
+const PAGES_SERVICE_TYPE = 3;
+
+const inferApplicationTypeFromProjectType = (
+  projectType,
+) => {
+  switch (projectType) {
+    case 'miniapp':
+    case 'miniprogram':
+      return 'mini_program';
+    case undefined:
+    case '':
+      return undefined;
+    default:
+      return 'service';
+  }
+};
+
+const parseApplicationType = (
+  value,
+) => {
+  if (!value) {
+    return undefined;
+  }
+  if (!APPLICATION_TYPES.has(value )) {
+    throw new CliError(
+      `Unsupported application type ${value}; expected service, pages, or mini_program.`,
+      'INVALID_APPLICATION_TYPE',
+    );
+  }
+  return value ;
+};
+
+const withRequestedApplicationType = (
+  config,
+  requestedType,
+  hasApplication = false,
+) => {
+  if (!requestedType) {
+    return config;
+  }
+  if (hasApplication && config.application_type !== requestedType) {
+    throw new CliError(
+      `Application type mismatch: the application is ${config.application_type}, but ${requestedType} was requested.`,
+      'APPLICATION_TYPE_MISMATCH',
+    );
+  }
+  if (requestedType !== 'pages') {
+    if (config.application_type !== requestedType) {
+      throw new CliError(
+        `Application type mismatch: server resolved ${config.application_type}, but ${requestedType} was requested.`,
+        'APPLICATION_TYPE_MISMATCH',
+      );
+    }
+    return config;
+  }
+  return {
+    ...config,
+    application_type: 'pages',
+    deploy_config: {
+      ...config.deploy_config,
+      service_type: PAGES_SERVICE_TYPE,
+      computer_id: undefined,
+    },
+  };
+};
+
+function _optionalChain$c(ops) { let lastAccessLHS = undefined; let value = ops[0]; let i = 1; while (i < ops.length) { const op = ops[i]; const fn = ops[i + 1]; i += 2; if ((op === 'optionalAccess' || op === 'optionalCall') && value == null) { return undefined; } if (op === 'access' || op === 'optionalAccess') { lastAccessLHS = value; value = fn(value); } else if (op === 'call' || op === 'optionalCall') { value = fn((...args) => value.call(lastAccessLHS, ...args)); lastAccessLHS = undefined; } } return value; }
+const DEFAULT_CONFIG = {
+  apiBaseUrl: 'https://code.coze.cn/',
+  openApiBaseUrl: 'https://api.coze.cn',
+  clientId: '95438868623436343239609434490626.app.coze',
+};
+
+const getSharedConfigPath = () =>
+  node_path.join(node_os.homedir(), '.coze', 'cli', 'config.json');
+
+const getLegacyConfigPath = () => node_path.join(node_os.homedir(), '.coze', 'config.json');
+
+const getDesktopRuntimePaths = (
+
+
+) => [
+  {
+    path: node_path.join(node_os.homedir(), '.coze', 'desktop', 'runtime.beta.json'),
+    source: 'desktop_beta',
+  },
+  {
+    path: node_path.join(node_os.homedir(), '.coze', 'desktop', 'runtime.json'),
+    source: 'desktop',
+  },
 ];
 
-const main = async () => {
-  // 初始化 Slardar 监控
-  initSlardar();
+const isRecord$3 = (value) =>
+  typeof value === 'object' && value !== null && !Array.isArray(value);
 
-  // 监听未捕获的异常
-  process.on('uncaughtException', async (error) => {
-    reportError(error, {
-      type: 'uncaughtException',
-      context: 'global',
+const readJson = async (path) => {
+  try {
+    const parsed = safeJsonParse(await promises.readFile(path, 'utf8'), undefined);
+    return isRecord$3(parsed) ? parsed : undefined;
+  } catch (error) {
+    if ((error ).code === 'ENOENT') {
+      return undefined;
+    }
+    throw new CliError(`Unable to read config ${path}: ${String(error)}`, 'CONFIG_INVALID');
+  }
+};
+
+const readDesktopAccessTokens = async () => {
+  const candidates = [];
+  for (const { path, source } of getDesktopRuntimePaths()) {
+    try {
+      const runtime = safeJsonParse(await promises.readFile(path, 'utf8'), undefined);
+      if (!isRecord$3(runtime) || !isRecord$3(runtime.patToken)) {
+        continue;
+      }
+      const {accessToken} = runtime.patToken;
+      if (typeof accessToken === 'string' && accessToken.trim()) {
+        candidates.push({ accessToken: accessToken.trim(), source });
+      }
+    } catch (error) {
+    }
+  }
+  return candidates;
+};
+
+const configuredPath = (options) =>
+  _optionalChain$c([options, 'optionalAccess', _ => _.config]) || process.env.COZE_CONFIG_FILE;
+
+const loadConfig = async (options = {}) => {
+  const customPath = configuredPath(options);
+  const globalConfig = customPath
+    ? await readJson(node_path.resolve(customPath))
+    : (await readJson(getSharedConfigPath())) || (await readJson(getLegacyConfigPath()));
+  const fixedAccessTokenCandidates = await readDesktopAccessTokens();
+  const environmentAccessToken = _optionalChain$c([process, 'access', _2 => _2.env, 'access', _3 => _3.COZE_API_TOKEN, 'optionalAccess', _4 => _4.trim, 'call', _5 => _5()]);
+  if (environmentAccessToken) {
+    fixedAccessTokenCandidates.push({
+      accessToken: environmentAccessToken,
+      source: 'environment',
     });
-    await flushSlardar();
-    process.exit(1);
-  });
+  }
+  const fixedAccessToken = _optionalChain$c([fixedAccessTokenCandidates, 'access', _6 => _6[0], 'optionalAccess', _7 => _7.accessToken]);
+  const config = {
+    ...DEFAULT_CONFIG,
+    ...globalConfig,
+    ...(fixedAccessToken
+      ? {
+          accessToken: fixedAccessToken,
+          // Desktop PAT and COZE_API_TOKEN are fixed runtime credentials. Never
+          // combine them with refresh metadata from an earlier OAuth login.
+          refreshToken: undefined,
+          tokenExpiresAt: undefined,
+        }
+      : {}),
+    fixedAccessTokenCandidates,
+    oauthAccessToken:
+      typeof _optionalChain$c([globalConfig, 'optionalAccess', _8 => _8.accessToken]) === 'string' ? globalConfig.accessToken : undefined,
+    oauthRefreshToken:
+      typeof _optionalChain$c([globalConfig, 'optionalAccess', _9 => _9.refreshToken]) === 'string' ? globalConfig.refreshToken : undefined,
+    oauthTokenExpiresAt:
+      typeof _optionalChain$c([globalConfig, 'optionalAccess', _10 => _10.tokenExpiresAt]) === 'number' ? globalConfig.tokenExpiresAt : undefined,
+    fixedAccessTokenResolved: fixedAccessTokenCandidates.length === 0,
+    ...(process.env.COZE_ORG_ID ? { organizationId: process.env.COZE_ORG_ID } : {}),
+    ...(process.env.COZE_ACCOUNT_ID ? { cozeAccountId: process.env.COZE_ACCOUNT_ID } : {}),
+    ...(process.env.COZE_SPACE_ID ? { spaceId: process.env.COZE_SPACE_ID } : {}),
+    ...(process.env.COZE_PROJECT_ID ? { projectId: process.env.COZE_PROJECT_ID } : {}),
+    ...(options.orgId ? { organizationId: options.orgId } : {}),
+    ...(options.spaceId ? { spaceId: options.spaceId } : {}),
+    ...(options.apiBaseUrl ? { apiBaseUrl: options.apiBaseUrl } : {}),
+    // Runtime-only trust decision: a value persisted in config.json must never enable
+    // project-secret injection for an OAuth access token.
+    injectApiToken: Boolean(fixedAccessToken),
+  };
+  return config;
+};
 
-  // 监听未处理的 Promise rejection
-  process.on('unhandledRejection', async (reason) => {
-    const error = reason instanceof Error ? reason : new Error(String(reason));
-    reportError(error, {
-      type: 'unhandledRejection',
-      context: 'global',
+const saveSharedConfig = async (
+  patch,
+  options = {},
+) => {
+  const target = node_path.resolve(configuredPath(options) || getSharedConfigPath());
+  const existing = (await readJson(target)) || {};
+  const temp = node_path.join(node_path.dirname(target), `.config-${node_crypto.randomUUID()}.tmp`);
+  await promises.mkdir(node_path.dirname(target), { recursive: true });
+  try {
+    await promises.writeFile(temp, `${JSON.stringify({ ...existing, ...patch }, null, 2)}\n`, {
+      encoding: 'utf8',
+      mode: 0o600,
     });
-    await flushSlardar();
-    process.exit(1);
+    await promises.rename(temp, target);
+  } finally {
+    await promises.rm(temp, { force: true });
+  }
+};
+
+function _optionalChain$b(ops) { let lastAccessLHS = undefined; let value = ops[0]; let i = 1; while (i < ops.length) { const op = ops[i]; const fn = ops[i + 1]; i += 2; if ((op === 'optionalAccess' || op === 'optionalCall') && value == null) { return undefined; } if (op === 'access' || op === 'optionalAccess') { lastAccessLHS = value; value = fn(value); } else if (op === 'call' || op === 'optionalCall') { value = fn((...args) => value.call(lastAccessLHS, ...args)); lastAccessLHS = undefined; } } return value; }
+
+const FIVE_MINUTES = 5 * 60 * 1000;
+const HTTP_UNAUTHORIZED = 401;
+
+
+
+
+
+
+
+const resolveExpiry = (expiresIn) =>
+  expiresIn > 946684800 ? expiresIn * 1000 : Date.now() + expiresIn * 1000;
+
+const parseJson = async (response) => {
+  const text = await response.text();
+  if (!text) {
+    return {};
+  }
+  const parsed = safeJsonParse(text, {});
+  return typeof parsed === 'object' && parsed !== null
+    ? (parsed )
+    : {};
+};
+
+const isRecord$2 = (value) =>
+  typeof value === 'object' && value !== null && !Array.isArray(value);
+
+const validateFixedAccessToken = async (
+  accessToken,
+  config,
+) => {
+  const response = await fetch(new URL('/v1/users/me', config.openApiBaseUrl), {
+    headers: { authorization: `Bearer ${accessToken}` },
   });
+  const payload = await parseJson(response);
+  if (response.ok) {
+    return true;
+  }
+  if (response.status === HTTP_UNAUTHORIZED) {
+    return false;
+  }
+  throw new CliError(
+    typeof payload.msg === 'string'
+      ? payload.msg
+      : 'Unable to validate the current login.',
+    'AUTH_STATUS_FAILED',
+    { status: response.status },
+  );
+};
 
-  const program = new commander.Command();
+const resolveFixedAccessToken = async (config) => {
+  if (
+    config.fixedAccessTokenResolved ||
+    !_optionalChain$b([config, 'access', _ => _.fixedAccessTokenCandidates, 'optionalAccess', _2 => _2.length])
+  ) {
+    config.fixedAccessTokenResolved = true;
+    return;
+  }
+  for (const candidate of config.fixedAccessTokenCandidates || []) {
+    if (await validateFixedAccessToken(candidate.accessToken, config)) {
+      config.accessToken = candidate.accessToken;
+      config.refreshToken = undefined;
+      config.tokenExpiresAt = undefined;
+      config.injectApiToken = true;
+      config.fixedAccessTokenResolved = true;
+      return;
+    }
+  }
+  config.accessToken = config.oauthAccessToken;
+  config.refreshToken = config.oauthRefreshToken;
+  config.tokenExpiresAt = config.oauthTokenExpiresAt;
+  config.injectApiToken = false;
+  config.fixedAccessTokenResolved = true;
+};
 
-  program
-    .name('coze-dev')
-    .description(
-      'Coze Coding CLI - Project template engine for frontend stacks',
-    )
-    .version(packageJson.version);
+const getCurrentUser = async (
+  config,
+  options,
+) => {
+  const token = await getAccessToken(config, options);
+  const response = await fetch(new URL('/v1/users/me', config.openApiBaseUrl), {
+    headers: { authorization: `Bearer ${token}` },
+  });
+  const payload = await parseJson(response);
+  if (!response.ok) {
+    throw new CliError(
+      typeof payload.msg === 'string'
+        ? payload.msg
+        : 'Unable to validate the current login. Run `coze-dev deploy auth login` again.',
+      response.status === HTTP_UNAUTHORIZED ? 'AUTH_REQUIRED' : 'AUTH_STATUS_FAILED',
+      { status: response.status },
+    );
+  }
+  return isRecord$2(payload.data) ? payload.data : payload;
+};
 
-  commands.forEach(initCmd => initCmd(program));
+const clearAuthPatch = {
+  accessToken: undefined,
+  refreshToken: undefined,
+  tokenExpiresAt: undefined,
+  organizationId: undefined,
+  enterpriseId: undefined,
+  spaceId: undefined,
+  projectId: undefined,
+};
 
-  // 在 help 输出中添加模板信息
-  program.addHelpText('after', generateTemplatesHelpText());
+const getAccessToken = async (
+  config,
+  options,
+) => {
+  await resolveFixedAccessToken(config);
+  if (!config.accessToken) {
+    throw new CliError(
+      'No shared login found. Run `coze-dev deploy auth login` first.',
+      'AUTH_REQUIRED',
+    );
+  }
+  if (!config.refreshToken || !config.tokenExpiresAt) {
+    return config.accessToken;
+  }
+  if (Date.now() < config.tokenExpiresAt - FIVE_MINUTES) {
+    return config.accessToken;
+  }
 
-  // 使用 parseAsync 等待命令执行完成
-  await program.parseAsync(process.argv);
+  const response = await fetch(
+    new URL('/api/permission/oauth2/token', config.openApiBaseUrl),
+    {
+      method: 'POST',
+      headers: { 'content-type': 'application/json' },
+      body: JSON.stringify({
+        grant_type: 'refresh_token',
+        client_id: config.clientId,
+        refresh_token: config.refreshToken,
+      }),
+    },
+  );
+  const payload = await parseJson(response);
+  if (!response.ok || typeof payload.access_token !== 'string') {
+    throw new CliError(
+      typeof payload.error_description === 'string'
+        ? payload.error_description
+        : 'Shared login has expired. Run `coze-dev deploy auth login` again.',
+      'AUTH_REFRESH_FAILED',
+    );
+  }
+  const token = payload ;
+  const patch = {
+    accessToken: token.access_token,
+    refreshToken: token.refresh_token || config.refreshToken,
+    tokenExpiresAt: resolveExpiry(token.expires_in),
+  };
+  Object.assign(config, patch);
+  await saveSharedConfig(patch, options);
+  return token.access_token;
+};
+
+const saveOAuthToken = async (
+  config,
+  options,
+  token,
+) => {
+  const patch = {
+    accessToken: token.access_token,
+    refreshToken: token.refresh_token,
+    tokenExpiresAt: resolveExpiry(token.expires_in),
+    organizationId: undefined,
+    enterpriseId: undefined,
+    spaceId: undefined,
+    projectId: undefined,
+  };
+  Object.assign(config, patch);
+  await saveSharedConfig(patch, options);
+};
+
+const logout = async (
+  config,
+  options,
+) => {
+  Object.assign(config, clearAuthPatch);
+  await saveSharedConfig(clearAuthPatch, options);
+};
+
+const getAuthStatus = async (
+  config,
+  options,
+) => {
+  if (!config.accessToken) {
+    return { logged_in: false };
+  }
+  const user = await getCurrentUser(config, options);
+  return {
+    logged_in: true,
+    user,
+    token_expires_at: config.tokenExpiresAt
+      ? new Date(config.tokenExpiresAt).toISOString()
+      : 'Never (PAT)',
+  };
+};
+
+const DEFAULT_POLL_INTERVAL_MS = 5000;
+const SLOW_DOWN_INCREMENT_MS = 5000;
+
+const isRecord$1 = (value) =>
+  typeof value === 'object' && value !== null && !Array.isArray(value);
+
+const readPayload = async (response) => {
+  const text = await response.text();
+  const payload = safeJsonParse(text, {});
+  return isRecord$1(payload) ? payload : {};
+};
+
+const post = async (
+  baseUrl,
+  path,
+  body,
+) => {
+  const response = await fetch(new URL(path, baseUrl), {
+    method: 'POST',
+    headers: { 'content-type': 'application/json' },
+    body: JSON.stringify(body),
+  });
+  return { payload: await readPayload(response), response };
+};
+
+const requireString = (
+  payload,
+  key,
+) => {
+  const value = payload[key];
+  if (typeof value !== 'string' || !value) {
+    throw new CliError(`OAuth response returned no ${key}.`, 'INVALID_AUTH_RESPONSE');
+  }
+  return value;
+};
+
+const requireNumber = (
+  payload,
+  key,
+) => {
+  const value = Number(payload[key]);
+  if (!Number.isFinite(value) || value <= 0) {
+    throw new CliError(`OAuth response returned no ${key}.`, 'INVALID_AUTH_RESPONSE');
+  }
+  return value;
+};
+
+const requestDeviceCode = async (config) => {
+  const { payload, response } = await post(
+    config.openApiBaseUrl,
+    '/api/permission/oauth2/device/code',
+    { client_id: config.clientId },
+  );
+  if (!response.ok) {
+    throw new CliError(
+      typeof payload.error_description === 'string'
+        ? payload.error_description
+        : 'Unable to start OAuth login.',
+      'AUTH_LOGIN_FAILED',
+      { status: response.status },
+    );
+  }
+  return {
+    device_code: requireString(payload, 'device_code'),
+    user_code: requireString(payload, 'user_code'),
+    verification_uri: requireString(payload, 'verification_uri'),
+    expires_in: requireNumber(payload, 'expires_in'),
+    interval:
+      typeof payload.interval === 'number' && payload.interval > 0
+        ? payload.interval
+        : undefined,
+  };
+};
+
+const buildVerificationUrl = (deviceCode) => {
+  const url = new URL(deviceCode.verification_uri);
+  url.searchParams.set('user_code', deviceCode.user_code);
+  return url.toString();
+};
+
+const openBrowser = (url) => {
+  const command =
+    process.platform === 'darwin'
+      ? 'open'
+      : process.platform === 'win32'
+        ? 'cmd'
+        : 'xdg-open';
+  const args = process.platform === 'win32' ? ['/c', 'start', '""', url] : [url];
+  try {
+    const child = node_child_process.spawn(command, args, { detached: true, stdio: 'ignore' });
+    child.on('error', () => undefined);
+    child.unref();
+  } catch (error) {
+  }
+};
+
+const sleep = async (milliseconds) =>
+  new Promise(resolve => setTimeout(resolve, milliseconds));
+
+const pollToken = async (
+  config,
+  deviceCode,
+) => {
+  const expiresAt = Date.now() + deviceCode.expires_in * 1000;
+  let interval = (deviceCode.interval || DEFAULT_POLL_INTERVAL_MS / 1000) * 1000;
+  while (Date.now() < expiresAt) {
+    const { payload, response } = await post(
+      config.openApiBaseUrl,
+      '/api/permission/oauth2/token',
+      {
+        grant_type: 'urn:ietf:params:oauth:grant-type:device_code',
+        client_id: config.clientId,
+        device_code: deviceCode.device_code,
+      },
+    );
+    if (response.ok) {
+      return {
+        access_token: requireString(payload, 'access_token'),
+        refresh_token: requireString(payload, 'refresh_token'),
+        expires_in: requireNumber(payload, 'expires_in'),
+      };
+    }
+    if (payload.error === 'authorization_pending') {
+      await sleep(interval);
+      continue;
+    }
+    if (payload.error === 'slow_down') {
+      interval += SLOW_DOWN_INCREMENT_MS;
+      await sleep(interval);
+      continue;
+    }
+    throw new CliError(
+      typeof payload.error_description === 'string'
+        ? payload.error_description
+        : 'OAuth authorization failed.',
+      'AUTH_LOGIN_FAILED',
+      { oauth_error: payload.error, status: response.status },
+    );
+  }
+  throw new CliError('OAuth authorization expired. Please try again.', 'AUTH_LOGIN_EXPIRED');
+};
+
+const loginWithOAuth = async (
+  config,
+  options,
+  callbacks,
+) => {
+  const deviceCode = await requestDeviceCode(config);
+  const verificationUrl = buildVerificationUrl(deviceCode);
+  callbacks.onVerification(verificationUrl);
+  openBrowser(verificationUrl);
+  await saveOAuthToken(config, options, await pollToken(config, deviceCode));
+};
+
+function _optionalChain$a(ops) { let lastAccessLHS = undefined; let value = ops[0]; let i = 1; while (i < ops.length) { const op = ops[i]; const fn = ops[i + 1]; i += 2; if ((op === 'optionalAccess' || op === 'optionalCall') && value == null) { return undefined; } if (op === 'access' || op === 'optionalAccess') { lastAccessLHS = value; value = fn(value); } else if (op === 'call' || op === 'optionalCall') { value = fn((...args) => value.call(lastAccessLHS, ...args)); lastAccessLHS = undefined; } } return value; }
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+const API_PREFIX = '/api/coding/deployment/v2';
+const CREATE_PROJECT_PATH = '/api/ideserver_api/project/create_vibe_project';
+const LIST_SPACES_PATH = '/api/playground_api/space/list';
+const ENCRYPT_PROJECT_SECRET_PATH =
+  '/api/permission_api/project_secret/encrypt_project_secret';
+const MAX_MESSAGE_LENGTH = 512;
+
+const isRecord = (value) =>
+  typeof value === 'object' && value !== null && !Array.isArray(value);
+
+
+
+
+
+
+
+const parseResponse = async (response) => {
+  const text = await response.text();
+  if (!text) {
+    return { payload: {}, text, validJson: true };
+  }
+  const invalid = Symbol('invalid-json');
+  const parsed = safeJsonParse(text, invalid);
+  return parsed === invalid
+    ? { payload: undefined, text, validJson: false }
+    : { payload: parsed, text, validJson: true };
+};
+
+
+
+
+
+
+
+
+
+const responseExcerpt = (text) => {
+  const compact = text.replace(/\s+/gu, ' ').trim();
+  return compact ? compact.slice(0, MAX_MESSAGE_LENGTH) : undefined;
+};
+
+const unwrap = (
+  payload,
+  expectedKey,
+  responseMetadata,
+) => {
+  const root = isRecord(payload) ? payload : undefined;
+  const first = isRecord(_optionalChain$a([root, 'optionalAccess', _ => _.data])) ? root.data : undefined;
+  const second = isRecord(_optionalChain$a([first, 'optionalAccess', _2 => _2.data])) ? first.data : undefined;
+  const envelope = [root, first].find(candidate => candidate && 'code' in candidate);
+  if (_optionalChain$a([envelope, 'optionalAccess', _3 => _3.code]) !== undefined && Number(envelope.code) !== 0) {
+    throw new CliError(
+      typeof envelope.msg === 'string'
+        ? envelope.msg.slice(0, MAX_MESSAGE_LENGTH)
+        : 'The deployment request was rejected.',
+      'API_REJECTED',
+      { business_code: envelope.code, ...responseMetadata },
+    );
+  }
+  if (!expectedKey) {
+    return (second || first || root || {}) ;
+  }
+  const matched = [second, first, root].find(
+    candidate => candidate && expectedKey in candidate,
+  );
+  if (!matched) {
+    throw new CliError(
+      `Deployment API returned no ${expectedKey}.`,
+      'INVALID_RESPONSE',
+    );
+  }
+  return matched ;
+};
+
+class DeployApiClient {
+  constructor(
+      config,
+      globalOptions,
+  ) {this.config = config;this.globalOptions = globalOptions;}
+
+   debug(message) {
+    if (this.globalOptions.debug) {
+      process.stderr.write(`[debug] [api] ${message}\n`);
+    }
+  }
+
+   async post(
+    path,
+    body,
+    expectedKey,
+    useApiPrefix = true,
+  ) {
+    const token = await getAccessToken(this.config, this.globalOptions);
+    const headers = {
+      authorization: `Bearer ${token}`,
+      'content-type': 'application/json',
+      'agw-js-conv': 'str',
+      'x-request-from-coze-cli': '1',
+    };
+    // Only a fixed runtime credential (desktop PAT or COZE_API_TOKEN) may become
+    // a project runtime secret. OAuth credentials remain authentication-only.
+    if (
+      this.config.injectApiToken &&
+      path === '/deploy_history/create' &&
+      useApiPrefix
+    ) {
+      headers['x-coze-deploy-inject-api-token'] = 'true';
+    }
+    // Coze account id: an explicit COZE_ACCOUNT_ID (config.cozeAccountId) always wins;
+    // otherwise fall back to the organization id resolved from login/config.
+    const cozeAccount = this.config.cozeAccountId || this.config.organizationId;
+    if (cozeAccount) {
+      headers['x-coze-account'] = cozeAccount;
+    }
+    const lane = _optionalChain$a([this, 'access', _4 => _4.globalOptions, 'access', _5 => _5.lane, 'optionalAccess', _6 => _6.trim, 'call', _7 => _7()]) || _optionalChain$a([this, 'access', _8 => _8.config, 'access', _9 => _9.xTTEnv, 'optionalAccess', _10 => _10.trim, 'call', _11 => _11()]);
+    if (lane) {
+      headers['x-use-ppe'] = '1';
+      headers['x-tt-env'] = lane;
+    }
+    const requestUrl = new URL(
+      `${useApiPrefix ? API_PREFIX : ''}${path}`,
+      this.config.apiBaseUrl,
+    );
+    this.debug(
+      `POST ${requestUrl.toString()}${lane ? ` lane=${lane}` : ''}`,
+    );
+    const response = await fetch(
+      requestUrl,
+      { method: 'POST', headers, body: JSON.stringify(body) },
+    );
+    const responseMetadata = {
+      status: response.status,
+      status_text: response.statusText,
+      log_id: response.headers.get('x-tt-logid') || undefined,
+      request_path: requestUrl.pathname,
+      content_type: response.headers.get('content-type') || undefined,
+    };
+    this.debug(
+      `${response.status} ${response.statusText} ${requestUrl.pathname}` +
+      `${responseMetadata.log_id ? ` log_id=${responseMetadata.log_id}` : ' log_id=unavailable'}`,
+    );
+    const { payload, text, validJson } = await parseResponse(response);
+    if (!response.ok) {
+      const root = isRecord(payload) ? payload : undefined;
+      throw new CliError(
+        typeof _optionalChain$a([root, 'optionalAccess', _12 => _12.msg]) === 'string'
+          ? root.msg.slice(0, MAX_MESSAGE_LENGTH)
+          : `Deployment API failed: ${response.status} ${response.statusText}` +
+            `${validJson ? '' : '; response was not JSON'}`,
+        response.status === 401 ? 'AUTH_REQUIRED' : 'HTTP_ERROR',
+        {
+          ...responseMetadata,
+          response_excerpt: responseExcerpt(text),
+        },
+      );
+    }
+    if (!validJson) {
+      throw new CliError(
+        `Deployment API returned invalid JSON (${response.status}).`,
+        'INVALID_RESPONSE',
+        {
+          ...responseMetadata,
+          response_excerpt: responseExcerpt(text),
+        },
+      );
+    }
+    return unwrap(payload, expectedKey, responseMetadata);
+  }
+
+  createDeploymentProject(body) {
+    return this.post(
+      CREATE_PROJECT_PATH,
+      body,
+      'project_id',
+      false,
+    );
+  }
+
+  // 回读当前登录态对应的 Coze 账号 id。无入参：账号由服务端从登录态解析（X-Coze-Account →
+  // access token → 兜底登录用户），客户端传什么都只有「等于登录态」一种合法取值。
+  // 只在建 Project 前用一次，用来定这个 Project 下应用的账号归属。
+  getCozeAccount() {
+    return this.post(
+      '/account/get',
+      {},
+      'coze_account_id',
+    );
+  }
+
+  listSpaces(body
+
+
+
+
+) {
+    return this.post(
+      LIST_SPACES_PATH,
+      body,
+      'bot_space_list',
+      false,
+    );
+  }
+
+  encryptProjectSecret(projectId, secrets) {
+    return this.post(
+      ENCRYPT_PROJECT_SECRET_PATH,
+      {
+        project_id: projectId,
+        encrypt_secrets: {
+          secrets,
+          cred_providers: [],
+        },
+      },
+      'sealed_secrets',
+      false,
+    );
+  }
+
+  // 列当前登录用户名下的 Application，跨 Project。服务端从登录态取 user_id，
+  // 请求体里只有分页参数（deploy_app/list 已去掉 project_id / user_id 两个寻址入参）。
+  listApplications(body) {
+    return this.post(
+      '/deploy_app/list', body, 'items',
+    );
+  }
+
+  getApplication(appId) {
+    return this.post('/deploy_app/get', { app_id: appId }, 'app_id');
+  }
+
+  updateApplication(body) {
+    return this.post('/deploy_app/update', body, 'app_id');
+  }
+
+  // 删除 Application：服务端只接受 **Stopped** 状态，其余状态会带上当前状态报错（先 stop 再 delete）。
+  // 已删除的再删一次是幂等成功。
+  deleteApplication(appId) {
+    return this.post('/deploy_app/delete', { app_id: appId });
+  }
+
+  getDeployConfig(body
+
+
+
+
+
+) {
+    return this.post('/deploy_config/get', body, 'deploy_config');
+  }
+
+  createDeployHistory(body) {
+    return this.post('/deploy_history/create', body, 'app_id');
+  }
+
+  preDeployUpload(body
+
+
+) {
+    return this.post('/deploy_history/pre_upload', body, 'upload_url');
+  }
+
+  getDeployHistory(body) {
+    return this.post('/deploy_history/get', body, 'deploy_history_id');
+  }
+
+  listDeployHistory(body) {
+    return this.post
+
+
+
+('/deploy_history/list', body, 'deploy_history_list');
+  }
+
+  getOnlineDeployHistory(appId) {
+    return this.post(
+      '/deploy_history/get_online', { app_id: appId }, 'deploy_history_list',
+    );
+  }
+
+  getOnlineEnvironment(appId) {
+    return this.post(
+      '/environment/get_online', { app_id: appId }, 'app_id',
+    );
+  }
+
+  checkRollbackDatabase(body) {
+    return this.post(
+      '/deploy_history/check_rollback_database', body, 'is_rollback_possible',
+    );
+  }
+
+  cancelDeployHistory(body) {
+    return this.post('/deploy_history/cancel', body);
+  }
+
+  rollbackDeployHistory(body
+
+
+
+) {
+    return this.post(
+      '/deploy_history/rollback', body, 'new_deploy_history_id',
+    );
+  }
+
+  stopApplication(appId) {
+    return this.post('/application/stop', { app_id: appId });
+  }
+
+  resumeApplication(appId) {
+    return this.post('/application/resume', { app_id: appId });
+  }
+
+  // 暂停是可逆的：只把线上 Unit 从 Ready 改成 Paused，函数留着，可被 resume 推回 Ready。
+  // stop 会连函数一起删、落到 Stopped，只能靠重新部署恢复 —— resume 配对的是 pause，不是 stop。
+  pauseApplication(appId) {
+    return this.post('/application/pause', { app_id: appId });
+  }
+
+  // PV / UV。入参是 app_id，但服务端反查 project_id 后按 **Project** 聚合 —— 埋点链路只有
+  // project 维度，同一 Project 下多个 Application 拿到的是同一份数据。
+  getUserAnalyticsMetrics(body) {
+    return this.post(
+      '/metrics/user_analytics/get', body, 'charts',
+    );
+  }
+
+  getBuildLog(body) {
+    return this.post('/deploy_history/log', body, 'log');
+  }
+
+  searchRuntimeLog(body) {
+    return this.post(
+      '/runtime_log/search', body, 'logs',
+    );
+  }
+
+  getRuntimeLogCount(appId) {
+    return this.post(
+      '/runtime_log/count', { app_id: appId }, 'limit',
+    );
+  }
+
+  getDeployCount(appId) {
+    return this.post(
+      '/deploy_history/get_count', { app_id: appId }, 'success_count',
+    );
+  }
+
+  getApplicationMetrics(body) {
+    return this.post(
+      '/metrics/get', body, 'charts',
+    );
+  }
+
+  getHostedUsageMonthly(body) {
+    return this.post(
+      '/hosted_usage/monthly', body, 'summary',
+    );
+  }
+
+  authorizeMiniProgram(body
+
+
+
+
+
+
+) {
+    return this.post
+
+
+
+('/mini_program/auth', body);
+  }
+
+  createMiniProgramPreview(body
+
+
+
+
+
+) {
+    return this.post
+
+
+
+
+('/mini_program/preview', body);
+  }
+
+  listDomains(appId, unitType) {
+    return this.post(
+      '/domain/list', {
+        app_id: appId,
+        ...(unitType === undefined ? {} : { unit_type: unitType }),
+      }, 'items',
+    );
+  }
+
+  createDomain(body) {
+    return this.post('/domain/create', body, 'domain');
+  }
+
+  // 改的是系统分配的 <prefix>.coze.site 里的 prefix，不是 createDomain 加进来的自定义域名 ——
+  // 那类域名服务端只提供 create/delete，域名串本身不可改。
+  updateDefaultDomainPrefix(body) {
+    return this.post
+
+
+
+
+('/domain/update_default_prefix', body, 'new_domain_host_canonical');
+  }
+
+  getMiniProgramAuthStatus(body) {
+    return this.post
+
+
+
+
+('/api/coding/deployment/auth/status', body, 'is_authorized', false);
+  }
+
+  bindMiniProgramAuth(body
+
+
+
+
+
+) {
+    return this.post
+
+
+
+
+
+
+('/api/coding/deployment/auth/bind', body, 'bind_status', false);
+  }
+
+  submitMiniProgramAuthCode(body
+
+
+
+
+
+) {
+    return this.post(
+      '/api/coding/deployment/auth/submit_code', body, undefined, false,
+    );
+  }
+
+  unbindMiniProgramAuth(body) {
+    return this.post(
+      '/api/coding/deployment/auth/unbind', body, undefined, false,
+    );
+  }
+}
+
+const textValue = (value) => {
+  if (typeof value === 'string') {
+    return value;
+  }
+  return JSON.stringify(value, null, 2);
+};
+
+class Output {
+  constructor(
+      format,
+      debugEnabled = false,
+  ) {this.format = format;this.debugEnabled = debugEnabled;}
+
+  print(value) {
+    process.stdout.write(
+      this.format === 'json'
+        ? `${JSON.stringify(value, null, 2)}\n`
+        : `${textValue(value)}\n`,
+    );
+  }
+
+  info(message) {
+    if (this.format === 'text') {
+      process.stderr.write(`${message}\n`);
+    }
+  }
+
+  notice(message) {
+    process.stderr.write(`${message}\n`);
+  }
+
+  warn(message) {
+    process.stderr.write(`Warning: ${message}\n`);
+  }
+
+  debug(message) {
+    if (this.debugEnabled) {
+      process.stderr.write(`[debug] ${message}\n`);
+    }
+  }
+}
+
+const runtimes = new WeakMap();
+
+const getRuntime = async (command) => {
+  const deploy = findDeployCommand(command);
+  let runtime = runtimes.get(deploy);
+  if (!runtime) {
+    runtime = (async () => {
+      const options = deploy.opts();
+      const config = await loadConfig(options);
+      return {
+        client: new DeployApiClient(config, options),
+        config,
+        cwd: process.cwd(),
+        globalOptions: options,
+        output: new Output(options.format || 'json', options.debug),
+      };
+    })();
+    runtimes.set(deploy, runtime);
+  }
+  return runtime;
+};
+
+const PRIVACY_POLICY_URL = 'https://docs.coze.cn/guides/privacy';
+const TERMS_OF_SERVICE_URL = 'https://docs.coze.cn/guides/terms-of-service';
+
+const registerAuth = (program) => {
+  const auth = program.command('auth').description('Manage deployment CLI authentication');
+
+  auth
+    .command('login')
+    .description('Login with Coze OAuth and save shared credentials')
+    .action(async (_options, command) => {
+      const runtime = await getRuntime(command);
+      await loginWithOAuth(runtime.config, runtime.globalOptions, {
+        onVerification: url => {
+          runtime.output.notice(
+            [
+              'Open this URL to authorize coze-dev deploy:',
+              url,
+              `Privacy Policy: ${PRIVACY_POLICY_URL}`,
+              `Terms of Service: ${TERMS_OF_SERVICE_URL}`,
+            ].join('\n'),
+          );
+        },
+      });
+      runtime.output.print({ success: true, logged_in: true, method: 'OAuth' });
+    });
+
+  auth
+    .command('status')
+    .description('Check and refresh the current shared login')
+    .action(async (_options, command) => {
+      const runtime = await getRuntime(command);
+      runtime.output.print(await getAuthStatus(runtime.config, runtime.globalOptions));
+    });
+
+  auth
+    .command('logout')
+    .description('Clear shared credentials and account context')
+    .action(async (_options, command) => {
+      const runtime = await getRuntime(command);
+      await logout(runtime.config, runtime.globalOptions);
+      runtime.output.print({ success: true, logged_out: true });
+    });
+};
+
+const execFileAsync = node_util.promisify(node_child_process.execFile);
+
+const registerContext = (program) => {
+  const context = program.command('context').description('Show or update deployment context');
+  context.command('show').action(async (_options, command) => {
+    const runtime = await getRuntime(command);
+    runtime.output.print({
+      organization_id: runtime.config.organizationId,
+      space_id: runtime.config.spaceId,
+      project_id: runtime.config.projectId,
+      lane: runtime.globalOptions.lane || runtime.config.xTTEnv,
+      config_path: runtime.globalOptions.config || getSharedConfigPath(),
+    });
+  });
+  context
+    .command('use')
+    .option('--space-id <spaceId>', 'Default Space ID')
+    .option('--project-id <projectId>', 'Default Project ID')
+    .action(async (options, command) => {
+      const runtime = await getRuntime(command);
+      await saveSharedConfig(
+        {
+          ...(options.spaceId ? { spaceId: options.spaceId } : {}),
+          ...(options.projectId ? { projectId: options.projectId } : {}),
+        },
+        runtime.globalOptions,
+      );
+      runtime.output.print({
+        space_id: options.spaceId || runtime.config.spaceId,
+        project_id: options.projectId || runtime.config.projectId,
+      });
+    });
+};
+
+const registerDoctor = (program) => {
+  program
+    .command('doctor')
+    .description('Check deployment CLI prerequisites and shared login')
+    .action(async (_options, command) => {
+      const runtime = await getRuntime(command);
+      let gitAvailable = true;
+      try {
+        await execFileAsync('git', ['--version']);
+      } catch (e) {
+        gitAvailable = false;
+      }
+      runtime.output.print({
+        ok: gitAvailable && Boolean(runtime.config.accessToken),
+        git: gitAvailable ? 'ok' : 'missing',
+        login: runtime.config.accessToken ? 'reused' : 'missing',
+        login_config: runtime.globalOptions.config || getSharedConfigPath(),
+        project_id: runtime.config.projectId || 'not configured',
+      });
+    });
+};
+
+function _optionalChain$9(ops) { let lastAccessLHS = undefined; let value = ops[0]; let i = 1; while (i < ops.length) { const op = ops[i]; const fn = ops[i + 1]; i += 2; if ((op === 'optionalAccess' || op === 'optionalCall') && value == null) { return undefined; } if (op === 'access' || op === 'optionalAccess') { lastAccessLHS = value; value = fn(value); } else if (op === 'call' || op === 'optionalCall') { value = fn((...args) => value.call(lastAccessLHS, ...args)); lastAccessLHS = undefined; } } return value; }
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+const getDeployParentOptions = (command) =>
+  _optionalChain$9([command, 'access', _ => _.parent, 'optionalAccess', _2 => _2.opts, 'call', _3 => _3()]) || {};
+
+const getDeployAppIdOption = (
+  options,
+  command,
+) => options.appId || getDeployParentOptions(command).appId;
+
+function _optionalChain$8(ops) { let lastAccessLHS = undefined; let value = ops[0]; let i = 1; while (i < ops.length) { const op = ops[i]; const fn = ops[i + 1]; i += 2; if ((op === 'optionalAccess' || op === 'optionalCall') && value == null) { return undefined; } if (op === 'access' || op === 'optionalAccess') { lastAccessLHS = value; value = fn(value); } else if (op === 'call' || op === 'optionalCall') { value = fn((...args) => value.call(lastAccessLHS, ...args)); lastAccessLHS = undefined; } } return value; } async function _asyncOptionalChain$1(ops) { let lastAccessLHS = undefined; let value = ops[0]; let i = 1; while (i < ops.length) { const op = ops[i]; const fn = ops[i + 1]; i += 2; if ((op === 'optionalAccess' || op === 'optionalCall') && value == null) { return undefined; } if (op === 'access' || op === 'optionalAccess') { lastAccessLHS = value; value = await fn(value); } else if (op === 'call' || op === 'optionalCall') { value = await fn((...args) => value.call(lastAccessLHS, ...args)); lastAccessLHS = undefined; } } return value; }
+
+const isAccountId = (value) => /^[1-9]\d*$/u.test(value);
+
+/**
+ * 定出这个 Project 下的应用该归属哪个 Coze 账号，写进 project_settings.extra.coze_account_id。
+ *
+ * 优先级（与 api-client 里 x-coze-account 的取值顺序一致，不另立一套口径）：
+ *   1. COZE_ACCOUNT_ID（config.cozeAccountId）—— 用户显式指定
+ *   2. COZE_ORG_ID / --org-id（config.organizationId）—— 用户显式指定组织
+ *   3. 登录态回读（deploy v2 account/get）
+ *
+ * ⚠️ 1、2 命中时**不打接口**：本地已经知道账号了，再问一次服务端只是多一个 RTT 和一个失败点。
+ *
+ * 拿不到就返回 undefined（不写 extra），部署照常继续：服务端在 deploy_history/create 里仍会
+ * 按同一条阶梯解析账号，结果与不加这段逻辑时完全一致 —— 只是无登录态的预览初始化那条链路
+ * 少了 Project 上这份归属记录。这是一个辅助接口，不该成为首次部署的单点。
+ */
+const resolveCozeAccountId = async (
+  runtime,
+) => {
+  const configured =
+    _optionalChain$8([runtime, 'access', _ => _.config, 'access', _2 => _2.cozeAccountId, 'optionalAccess', _3 => _3.trim, 'call', _4 => _4()]) || _optionalChain$8([runtime, 'access', _5 => _5.config, 'access', _6 => _6.organizationId, 'optionalAccess', _7 => _7.trim, 'call', _8 => _8()]);
+  if (configured) {
+    if (!isAccountId(configured)) {
+      // 不把非法值写进 Project —— 它会被服务端当成「明确但损坏的归属」直接报错。
+      // 该值仍会作为 x-coze-account 发出去，由服务端给出明确的参数错误。
+      runtime.output.debug(
+        `[deploy] Ignoring malformed Coze account id for project settings: ${configured}`,
+      );
+      return undefined;
+    }
+    runtime.output.debug(`[deploy] Using configured Coze account ${configured}`);
+    return configured;
+  }
+  try {
+    const accountId = await _asyncOptionalChain$1([(await runtime.client.getCozeAccount()), 'access', async _9 => _9.coze_account_id, 'optionalAccess', async _10 => _10.trim, 'call', async _11 => _11()]);
+    if (!accountId || !isAccountId(accountId)) {
+      runtime.output.debug(
+        `[deploy] Deployment API returned no usable Coze account id: ${String(accountId)}`,
+      );
+      return undefined;
+    }
+    runtime.output.debug(`[deploy] Resolved Coze account ${accountId} from the current login`);
+    return accountId;
+  } catch (error) {
+    runtime.output.warn(
+      `Unable to resolve the Coze account from the current login; the project will be created without an explicit account: ${String(error)}`,
+    );
+    return undefined;
+  }
+};
+
+const getCreateDeployConfig = (config) => ({
+  deploy_config: {
+    cpu: config.deploy_config.cpu,
+    memory_mb: config.deploy_config.memory_mb,
+    max_instance: config.deploy_config.max_instance,
+    max_concurrency: config.deploy_config.max_concurrency,
+  },
+  service_type: config.deploy_config.service_type,
+  ...(config.deploy_config.computer_id
+    ? { computer_id: config.deploy_config.computer_id }
+    : {}),
+});
+
+const DEPLOY_STATUS = {
+  pending: 1,
+  running: 2,
+  succeeded: 3,
+  failed: 4,
+  canceled: 5,
+  interrupted: 6,
+  preDeploy: 7,
+} ;
+
+const STATUS_NAMES = {
+  [DEPLOY_STATUS.pending]: 'Pending',
+  [DEPLOY_STATUS.running]: 'Running',
+  [DEPLOY_STATUS.succeeded]: 'Succeeded',
+  [DEPLOY_STATUS.failed]: 'Failed',
+  [DEPLOY_STATUS.canceled]: 'Canceled',
+  [DEPLOY_STATUS.interrupted]: 'Interrupted',
+  [DEPLOY_STATUS.preDeploy]: 'WaitingForUpload',
+};
+
+/**
+ * 终态 = 不会再变了。
+ *
+ * ⚠️ `interrupted(6)` **不是**终态，别再往这里加。它是过程态：服务端某条流水线自身轮询超时时，
+ * 会把整次部署标成 Interrupted 并安排稍后重新触发（`base_pipe.NewInterruptedResult`），之后仍
+ * 会推进到 Succeeded。安卓构建 10 分钟起步，几乎必然经过至少一次 Interrupted —— 把它当终态会
+ * 让 `deploy --wait` 在构建中途就收工返回，此时 APK 还没产出，`mobile_artifact_list` 是空的。
+ */
+const TERMINAL_STATUSES = new Set([
+  DEPLOY_STATUS.succeeded,
+  DEPLOY_STATUS.failed,
+  DEPLOY_STATUS.canceled,
+]);
+
+const getDeployStatusText = (status) =>
+  status ? STATUS_NAMES[status] || 'Unknown' : 'Unknown';
+
+/** 这次部署的结果是否已经定下来了（到了终态就不会再变）。 */
+const isDeploymentSettled = (status) =>
+  status !== undefined && TERMINAL_STATUSES.has(status);
+
+function _optionalChain$7(ops) { let lastAccessLHS = undefined; let value = ops[0]; let i = 1; while (i < ops.length) { const op = ops[i]; const fn = ops[i + 1]; i += 2; if ((op === 'optionalAccess' || op === 'optionalCall') && value == null) { return undefined; } if (op === 'access' || op === 'optionalAccess') { lastAccessLHS = value; value = fn(value); } else if (op === 'call' || op === 'optionalCall') { value = fn((...args) => value.call(lastAccessLHS, ...args)); lastAccessLHS = undefined; } } return value; }
+
+const formatDeployDetails = (history) =>
+  (_optionalChain$7([history, 'optionalAccess', _ => _.deploy_detail]) || []).map(detail => ({
+    target: detail.target,
+    status: getDeployStatusText(detail.status),
+    deploy_log_key: detail.deploy_log_key,
+    deploy_log_url: detail.deploy_log_url,
+  }));
+
+const getDeployLogKeys = (history) =>
+  [...new Set(
+    (history.deploy_detail || [])
+      .map(detail => _optionalChain$7([detail, 'access', _2 => _2.deploy_log_key, 'optionalAccess', _3 => _3.trim, 'call', _4 => _4()]))
+      .filter((key) => Boolean(key)),
+  )];
+
+const normalizePositiveId = (value) => {
+  const normalized = value === undefined ? '' : String(value).trim();
+  return /^[1-9]\d*$/.test(normalized) ? normalized : undefined;
+};
+
+const resolveDeployHistoryId = (
+  deployHistoryId,
+  previousDeployHistoryId,
+) =>
+  normalizePositiveId(deployHistoryId) || normalizePositiveId(previousDeployHistoryId);
+
+function _optionalChain$6(ops) { let lastAccessLHS = undefined; let value = ops[0]; let i = 1; while (i < ops.length) { const op = ops[i]; const fn = ops[i + 1]; i += 2; if ((op === 'optionalAccess' || op === 'optionalCall') && value == null) { return undefined; } if (op === 'access' || op === 'optionalAccess') { lastAccessLHS = value; value = fn(value); } else if (op === 'call' || op === 'optionalCall') { value = fn((...args) => value.call(lastAccessLHS, ...args)); lastAccessLHS = undefined; } } return value; }
+
+const SOURCE_SNAPSHOT_BYTES = 20;
+const PROJECT_METADATA_FILE_MODE = 0o644;
+
+const isId = (value) =>
+  typeof value === 'string' && /^\d+$/u.test(value);
+
+
+const resolveAppId = async (cwd, appId) => {
+  const explicit = _optionalChain$6([appId, 'optionalAccess', _ => _.trim, 'call', _2 => _2()]);
+  if (explicit) {
+    return explicit;
+  }
+  try {
+    return (await readProjectMetadata(node_path.resolve(cwd))).appId;
+  } catch (error) {
+    if ((error ).code === 'COZE_FILE_NOT_FOUND') {
+      return undefined;
+    }
+    throw error;
+  }
+};
+
+const requireAppId = async (cwd, appId) => {
+  const resolved = await resolveAppId(cwd, appId);
+  if (!resolved) {
+    throw new CliError(
+      'Application ID is required. Pass --app-id or use a directory whose .coze [project] contains app_id.',
+      'APP_ID_REQUIRED',
+    );
+  }
+  return resolved;
+};
+
+const resolveSourceSnapshot = (sourceRootInput) => {
+  const sourceRoot = node_path.resolve(sourceRootInput);
+  const commitHash = node_crypto.randomBytes(SOURCE_SNAPSHOT_BYTES).toString('hex');
+  return { commitHash, sourceRoot };
+};
+
+const readProjectMetadata = async (
+  sourceRoot,
+) => {
+  let cozeFileContent = '';
+  try {
+    cozeFileContent = await promises.readFile(node_path.join(sourceRoot, '.coze'), 'utf8');
+  } catch (error) {
+    if ((error ).code === 'ENOENT') {
+      throw new CliError(
+        `No .coze file found in ${sourceRoot}.`,
+        'COZE_FILE_NOT_FOUND',
+      );
+    }
+    throw error;
+  }
+  const projectSection = _optionalChain$6([cozeFileContent, 'access', _3 => _3.match, 'call', _4 => _4(
+    /^\s*\[project\]\s*(?:#.*)?$([\s\S]*?)(?=^\s*\[[^\]]+\]\s*(?:#.*)?$|(?![\s\S]))/mu,
+  ), 'optionalAccess', _5 => _5[1]]);
+  const readProjectString = (key) =>
+    _optionalChain$6([projectSection
+, 'optionalAccess', _6 => _6.match, 'call', _7 => _7(new RegExp(`^\\s*${key}\\s*=\\s*["']([^"']+)["']`, 'mu')), 'optionalAccess', _8 => _8[1]
+, 'optionalAccess', _9 => _9.trim, 'call', _10 => _10()]);
+  const name = readProjectString('name');
+  const projectType = readProjectString('project_type');
+  const projectId = readProjectString('project_id');
+  const appId = readProjectString('app_id');
+  const hasUnquotedId = (key) =>
+    Boolean(_optionalChain$6([projectSection, 'optionalAccess', _11 => _11.match, 'call', _12 => _12(new RegExp(`^\\s*${key}\\s*=\\s*(?!["'])\\S+`, 'mu'))]));
+  if (hasUnquotedId('project_id') || hasUnquotedId('app_id')) {
+    throw new CliError(
+      '.coze [project].project_id and app_id must be quoted decimal strings.',
+      'INVALID_COZE_FILE',
+    );
+  }
+  if (projectId && !isId(projectId)) {
+    throw new CliError('.coze [project].project_id must be a quoted decimal string.', 'INVALID_COZE_FILE');
+  }
+  if (appId && !isId(appId)) {
+    throw new CliError('.coze [project].app_id must be a quoted decimal string.', 'INVALID_COZE_FILE');
+  }
+  return { name, projectType, projectId, appId, cozeFileContent };
+};
+
+const updateProjectValue = (content, key, value) => {
+  const sectionMatch = /^\s*\[project\]\s*(?:#.*)?$/mu.exec(content);
+  if (!sectionMatch || sectionMatch.index === undefined) {
+    const prefix = `[project]\n${key} = ${JSON.stringify(value)}\n\n`;
+    return `${prefix}${content}`;
+  }
+  const sectionStart = sectionMatch.index + sectionMatch[0].length;
+  const following = content.slice(sectionStart);
+  const nextSection = /^\s*\[[^\]]+\]\s*(?:#.*)?$/mu.exec(following);
+  const sectionEnd = _optionalChain$6([nextSection, 'optionalAccess', _13 => _13.index]) === undefined
+    ? content.length
+    : sectionStart + nextSection.index;
+  const before = content.slice(0, sectionStart);
+  let body = content.slice(sectionStart, sectionEnd);
+  const keyPattern = new RegExp(`^(\\s*)${key}\\s*=.*$`, 'mu');
+  if (keyPattern.test(body)) {
+    body = body.replace(keyPattern, `$1${key} = ${JSON.stringify(value)}`);
+  } else {
+    const separator = body.startsWith('\n') || body.startsWith('\r\n') ? '' : '\n';
+    body = `${separator}${body}`;
+    const trailingNewline = body.endsWith('\n') ? '' : '\n';
+    body = `${body}${trailingNewline}${key} = ${JSON.stringify(value)}\n`;
+  }
+  return `${before}${body}${content.slice(sectionEnd)}`;
+};
+
+const writeProjectBinding = async (
+  sourceRoot,
+  binding,
+) => {
+  const path = node_path.join(sourceRoot, '.coze');
+  let content = await promises.readFile(path, 'utf8');
+  if (binding.projectId) {
+    content = updateProjectValue(content, 'project_id', binding.projectId);
+  }
+  if (binding.appId) {
+    content = updateProjectValue(content, 'app_id', binding.appId);
+  }
+  const tempPath = node_path.join(node_path.dirname(path), `.coze-${node_crypto.randomUUID()}.tmp`);
+  try {
+    await promises.writeFile(tempPath, content, {
+      encoding: 'utf8',
+      mode: PROJECT_METADATA_FILE_MODE,
+    });
+    await promises.chmod(tempPath, PROJECT_METADATA_FILE_MODE);
+    await promises.rename(tempPath, path);
+  } finally {
+    await promises.rm(tempPath, { force: true });
+  }
+  return readProjectMetadata(sourceRoot);
+};
+
+const ensureProjectMetadata = async (
+  sourceRoot,
+  options,
+) => {
+  try {
+    return await readProjectMetadata(sourceRoot);
+  } catch (error) {
+    if ((error ).code !== 'COZE_FILE_NOT_FOUND' || !options.allowCreate) {
+      throw error;
+    }
+  }
+  const name = _optionalChain$6([options, 'access', _14 => _14.name, 'optionalAccess', _15 => _15.trim, 'call', _16 => _16()]) || 'Pages application';
+  const projectType = _optionalChain$6([options, 'access', _17 => _17.projectType, 'optionalAccess', _18 => _18.trim, 'call', _19 => _19()]) || 'web';
+  await promises.writeFile(
+    node_path.join(sourceRoot, '.coze'),
+    `[project]\nname = ${JSON.stringify(name)}\nproject_type = ${JSON.stringify(projectType)}\n`,
+    { encoding: 'utf8', mode: PROJECT_METADATA_FILE_MODE },
+  );
+  await promises.chmod(node_path.join(sourceRoot, '.coze'), PROJECT_METADATA_FILE_MODE);
+  return readProjectMetadata(sourceRoot);
+};
+
+function _optionalChain$5(ops) { let lastAccessLHS = undefined; let value = ops[0]; let i = 1; while (i < ops.length) { const op = ops[i]; const fn = ops[i + 1]; i += 2; if ((op === 'optionalAccess' || op === 'optionalCall') && value == null) { return undefined; } if (op === 'access' || op === 'optionalAccess') { lastAccessLHS = value; value = fn(value); } else if (op === 'call' || op === 'optionalCall') { value = fn((...args) => value.call(lastAccessLHS, ...args)); lastAccessLHS = undefined; } } return value; }
+const isFile = async (path) => {
+  try {
+    return (await promises.stat(path)).isFile();
+  } catch (error) {
+    if ((error ).code === 'ENOENT') {
+      return false;
+    }
+    throw error;
+  }
+};
+
+const validatePagesSource = async (
+  sourceRoot,
+  cozeFileContent,
+) => {
+  if (await isFile(node_path.join(sourceRoot, 'index.html'))) {
+    return;
+  }
+
+  let config;
+  try {
+    config = TOML.parse(cozeFileContent);
+  } catch (error) {
+    throw new CliError(
+      `Unable to parse .coze: ${error instanceof Error ? error.message : String(error)}`,
+      'INVALID_COZE_FILE',
+    );
+  }
+  const project = config.project ;
+  if (typeof _optionalChain$5([project, 'optionalAccess', _ => _.template]) !== 'string' || project.template.trim().toLowerCase() !== 'nextjs') {
+    throw new CliError(
+      'Pages source contains no index.html; .coze project.template must be "nextjs".',
+      'PAGES_BUILD_CONFIG_REQUIRED',
+    );
+  }
+  const deploy = config.deploy ;
+  const build = _optionalChain$5([deploy, 'optionalAccess', _2 => _2.build]);
+  if (!Array.isArray(build) || build.length === 0 || !build.every(part => typeof part === 'string' && part.length > 0)) {
+    throw new CliError(
+      'Pages source contains no index.html; .coze deploy.build must be a non-empty string array.',
+      'PAGES_BUILD_CONFIG_REQUIRED',
+    );
+  }
+};
+
+const readDeployLocalContext = async (
+  sourceRoot,
+  requestedApplicationType,
+  appId,
+  client,
+) => {
+  const sourceSnapshot = resolveSourceSnapshot(sourceRoot);
+  let applicationTypeHint = requestedApplicationType;
+  let effectiveAppId = appId;
+  if (!effectiveAppId) {
+    try {
+      effectiveAppId = (await ensureProjectMetadata(sourceRoot, { allowCreate: false })).appId;
+    } catch (error) {
+      if ((error ).code !== 'COZE_FILE_NOT_FOUND') {
+        throw error;
+      }
+    }
+  }
+  if (!applicationTypeHint && effectiveAppId) {
+    applicationTypeHint = (await client.getApplication(effectiveAppId)).application_type;
+  }
+  const isPagesDeployment = applicationTypeHint === 'pages';
+  const metadata = await ensureProjectMetadata(sourceRoot, {
+    allowCreate: isPagesDeployment,
+    projectType: isPagesDeployment ? 'web' : undefined,
+  });
+  if (isPagesDeployment) {
+    await validatePagesSource(sourceRoot, metadata.cozeFileContent);
+  }
+  return { ...sourceSnapshot, metadata, isPagesDeployment };
+};
+
+function _optionalChain$4(ops) { let lastAccessLHS = undefined; let value = ops[0]; let i = 1; while (i < ops.length) { const op = ops[i]; const fn = ops[i + 1]; i += 2; if ((op === 'optionalAccess' || op === 'optionalCall') && value == null) { return undefined; } if (op === 'access' || op === 'optionalAccess') { lastAccessLHS = value; value = fn(value); } else if (op === 'call' || op === 'optionalCall') { value = fn((...args) => value.call(lastAccessLHS, ...args)); lastAccessLHS = undefined; } } return value; }
+
+/**
+ * 把 `mobile_artifact_list` 连同「这个空数组到底什么意思」一起输出。
+ *
+ * 产物是部署过程中逐步落库的：APK 要等安卓构建跑完才写进去，比部署记录本身晚好几分钟。部署没到
+ * 终态时，空的 `mobile_artifact_list` 只代表「还没产出来」，不代表「没有产物」—— 可这两种情况在
+ * 输出里长得一模一样，调用方（尤其是 agent）会把前者读成后者，然后得出「部署成功但系统没返回
+ * APK 下载地址」这种错误结论。线上真发生过。
+ *
+ * 所以未定终态时额外带一个 `artifacts_pending: true`；这个字段不出现，就表示这份列表已经是最终
+ * 结果。`mobile_artifact_list` 本身保持恒存在，避免破坏已有脚本的读法。
+ */
+const mobileArtifactsOutput = (
+  history,
+  status = _optionalChain$4([history, 'optionalAccess', _ => _.status]),
+) => ({
+  mobile_artifact_list: _optionalChain$4([history, 'optionalAccess', _2 => _2.mobile_artifact_list]) || [],
+  ...(isDeploymentSettled(status) ? {} : { artifacts_pending: true }),
+});
+
+// 服务端 deploy_app/list 的 page_size 上限，超了会被判参数错误。
+// 客户端先拦一道，是为了把错误说在本地（带上上限值），而不是回一句服务端的通用参数错误。
+const APP_LIST_MAX_PAGE_SIZE = 100;
+
+// page_token 是**页码的十进制字符串**（服务端口径，与 deploy_history/list 一致），不是不透明游标。
+// 所以这里能、也应该在本地校验：`--page-token abc` 早报错，比发出去再被拒强。
+const parsePositiveInt = (
+  raw,
+  option,
+  code,
+  max,
+) => {
+  const value = Number(raw);
+  if (!Number.isSafeInteger(value) || value <= 0) {
+    throw new CliError(`${option} must be a positive integer.`, code, { [option]: raw });
+  }
+  if (max !== undefined && value > max) {
+    throw new CliError(`${option} must not exceed ${String(max)}.`, code, { [option]: raw });
+  }
+  return value;
+};
+
+// ⛔ 别再用 `Number(options.pageSize || 20)`：`--page-size abc` 会算出 NaN，
+// JSON.stringify 把它写成 null 发给服务端，最后表现为「参数没生效」而不是「参数写错了」。
+const parsePageSize = (
+  raw,
+  fallback,
+  max,
+) => {
+  if (raw === undefined || raw === '') {
+    return fallback;
+  }
+  return parsePositiveInt(raw, '--page-size', 'INVALID_PAGE_SIZE', max);
+};
+
+const parsePageToken = (raw) => {
+  if (raw === undefined || raw === '') {
+    return undefined;
+  }
+  parsePositiveInt(raw, '--page-token', 'INVALID_PAGE_TOKEN');
+  return raw;
+};
+
+
+
+
+
+
+
+// collectAllPages 顺着 next_page_token 把所有页取回来。
+//
+// 服务端从「全量单页」改成真分页之后，`app list` 一次只回一页；想要「我的全部应用」就得翻页。
+// 与其让每个调用方各写一遍循环，不如给一个 --all。
+//
+// ⚠️ 不设页数上限截断：静默截断正是这次要修掉的毛病。只防死循环——服务端如果一直回同一个
+// token（或说 has_more 却不给 token），直接报错，而不是无限翻。
+const collectAllPages = async ( 
+  fetchPage,
+) => {
+  const items = [];
+  const seen = new Set();
+  let pageToken;
+  let pages = 0;
+  for (;;) {
+    const page = await fetchPage(pageToken);
+    items.push(...(page.items || []));
+    pages += 1;
+    if (!page.has_more) {
+      return { items, pages };
+    }
+    const next = page.next_page_token;
+    if (!next || seen.has(next)) {
+      throw new CliError(
+        'The server reported more pages but returned no usable next_page_token.',
+        'INVALID_PAGE_TOKEN',
+        { next_page_token: next, pages },
+      );
+    }
+    seen.add(next);
+    pageToken = next;
+  }
+};
+
+async function _asyncOptionalChain(ops) { let lastAccessLHS = undefined; let value = ops[0]; let i = 1; while (i < ops.length) { const op = ops[i]; const fn = ops[i + 1]; i += 2; if ((op === 'optionalAccess' || op === 'optionalCall') && value == null) { return undefined; } if (op === 'access' || op === 'optionalAccess') { lastAccessLHS = value; value = await fn(value); } else if (op === 'call' || op === 'optionalCall') { value = await fn((...args) => value.call(lastAccessLHS, ...args)); lastAccessLHS = undefined; } } return value; }
+
+const registerDeployReadCommands = (deploy) => {
+  deploy
+    .command('status')
+    .option('--app-id <appId>', 'Application ID')
+    .option('--deploy-id <deployId>', 'Deployment history ID')
+    .action(async (options, command) => {
+      const runtime = await getRuntime(command);
+      const appId = await requireAppId(runtime.cwd, getDeployAppIdOption(options, command));
+      let deployHistoryId = options.deployId;
+      if (!deployHistoryId) {
+        deployHistoryId = await _asyncOptionalChain([(
+          await runtime.client.listDeployHistory({ app_id: appId, page_size: 1 })
+        ), 'access', async _ => _.deploy_history_list, 'optionalAccess', async _2 => _2[0], 'optionalAccess', async _3 => _3.deploy_history_id]);
+      }
+      if (!deployHistoryId) {
+        throw new CliError('No deployment history found.', 'DEPLOYMENT_NOT_FOUND');
+      }
+      const history = await runtime.client.getDeployHistory({
+        app_id: appId,
+        deploy_history_id: deployHistoryId,
+      });
+      runtime.output.print({
+        app_id: appId,
+        deploy_history_id: deployHistoryId,
+        status: getDeployStatusText(history.status),
+        commit_hash: history.commit_hash,
+        commit_message: history.commit_message,
+        domains: history.domain_list || [],
+        error_analysis: history.error_analysis,
+        deploy_detail: formatDeployDetails(history),
+        connector_data_list: history.connector_data_list || [],
+        ...mobileArtifactsOutput(history),
+      });
+    });
+
+  deploy
+    .command('list')
+    .option('--app-id <appId>', 'Application ID')
+    .option('--page-size <pageSize>', 'Page size', '10')
+    .option('--page-token <pageToken>', 'Page token (page number)')
+    .action(async (options, command) => {
+      // 先在本地校验：`--page-size abc` 以前算出 NaN 发出去，表现成「参数没生效」。
+      const pageSize = parsePageSize(options.pageSize, 10);
+      const pageToken = parsePageToken(options.pageToken);
+      const runtime = await getRuntime(command);
+      const appId = await requireAppId(runtime.cwd, getDeployAppIdOption(options, command));
+      const data = await runtime.client.listDeployHistory({
+        app_id: appId,
+        page_size: pageSize,
+        page_token: pageToken,
+      });
+      runtime.output.print({
+        items: (data.deploy_history_list || []).map(item => ({
+          deploy_history_id: item.deploy_history_id,
+          status: getDeployStatusText(item.status),
+          commit_hash: item.commit_hash_short || item.commit_hash,
+          commit_message: item.commit_message,
+          created_at: item.created_at,
+          can_rollback: item.can_rollback,
+          deploy_detail: formatDeployDetails(item),
+          connector_data_list: item.connector_data_list || [],
+          ...mobileArtifactsOutput(item),
+        })),
+        next_page_token: data.next_page_token,
+        has_more: data.has_more,
+      });
+    });
+
+  deploy
+    .command('online')
+    .description('Show the current online deployment')
+    .option('--app-id <appId>', 'Application ID')
+    .action(async (options, command) => {
+      const runtime = await getRuntime(command);
+      const appId = await requireAppId(runtime.cwd, getDeployAppIdOption(options, command));
+      const data = await runtime.client.getOnlineDeployHistory(appId);
+      runtime.output.print({
+        app_id: appId,
+        items: (data.deploy_history_list || []).map(item => ({
+          deploy_history_id: item.deploy_history_id,
+          status: getDeployStatusText(item.status),
+          commit_hash: item.commit_hash_short || item.commit_hash,
+          commit_message: item.commit_message,
+          created_at: item.created_at,
+          deploy_detail: formatDeployDetails(item),
+          domains: item.domain_list || [],
+          ...mobileArtifactsOutput(item),
+        })),
+      });
+    });
+
+  deploy
+    .command('rollback-check')
+    .description('Check whether a deployment supports database rollback')
+    .requiredOption('--deploy-id <deployId>', 'Target deployment history ID')
+    .option('--app-id <appId>', 'Application ID')
+    .action(async (options, command) => {
+      const runtime = await getRuntime(command);
+      const appId = await requireAppId(runtime.cwd, getDeployAppIdOption(options, command));
+      const data = await runtime.client.checkRollbackDatabase({
+        app_id: appId,
+        deploy_history_id: options.deployId || '',
+      });
+      runtime.output.print({ app_id: appId, deploy_history_id: options.deployId, ...data });
+    });
+
+  deploy
+    .command('log-count')
+    .description('Show runtime log count and limit')
+    .option('--app-id <appId>', 'Application ID')
+    .action(async (options, command) => {
+      const runtime = await getRuntime(command);
+      const appId = await requireAppId(runtime.cwd, getDeployAppIdOption(options, command));
+      const data = await runtime.client.getRuntimeLogCount(appId);
+      runtime.output.print({ app_id: appId, ...data });
+    });
+
+  deploy
+    .command('count')
+    .description('Show successful deployment count')
+    .option('--app-id <appId>', 'Application ID')
+    .action(async (options, command) => {
+      const runtime = await getRuntime(command);
+      const appId = await requireAppId(runtime.cwd, getDeployAppIdOption(options, command));
+      const data = await runtime.client.getDeployCount(appId);
+      runtime.output.print({ app_id: appId, ...data });
+    });
+};
+
+const registerEnv = (code) => {
+  const env = code
+    .command('env')
+    .description('Inspect the current online environment snapshot');
+
+  env
+    .command('list')
+    .description('List environment variables of the current online deployment')
+    .option('--app-id <appId>', 'Application ID')
+    .action(async (options, command) => {
+      const runtime = await getRuntime(command);
+      const appId = await requireAppId(
+        runtime.cwd,
+        getDeployAppIdOption(options, command),
+      );
+      runtime.output.print(await runtime.client.getOnlineEnvironment(appId));
+    });
+};
+
+/* eslint-disable security/detect-non-literal-fs-filename -- validated project-local build output paths */
+
+const BUILD_OUTPUT_DIRS = new Set(['dist', 'dist-tt']);
+const EXCLUDED_PARTS = new Set([
+  '.git',
+  '.env',
+  'node_modules',
+]);
+const REPRODUCIBLE_ARCHIVE_MTIME = new Date(0);
+
+const validateBuildOutput = async (
+  sourceRoot,
+  buildOutputDir,
+) => {
+  if (!BUILD_OUTPUT_DIRS.has(buildOutputDir)) {
+    throw new CliError(
+      `Unsupported Mini-program build output directory: ${buildOutputDir}.`,
+      'SOURCE_PACKAGE_FAILED',
+    );
+  }
+  const buildOutputRoot = node_path.resolve(sourceRoot, buildOutputDir);
+  try {
+    const info = await promises.lstat(buildOutputRoot);
+    if (info.isSymbolicLink() || !info.isDirectory()) {
+      throw new Error('build output must be a regular directory');
+    }
+    const realSourceRoot = await promises.realpath(sourceRoot);
+    const realBuildOutputRoot = await promises.realpath(buildOutputRoot);
+    const relativeOutput = node_path.relative(realSourceRoot, realBuildOutputRoot);
+    if (!relativeOutput || relativeOutput.startsWith('..')) {
+      throw new Error('build output must be inside the source root');
+    }
+  } catch (error) {
+    throw new CliError(
+      `Invalid Mini-program build output ${buildOutputRoot}: ${error instanceof Error ? error.message : String(error)}`,
+      'SOURCE_PACKAGE_FAILED',
+    );
+  }
+};
+
+const shouldInclude = (
+  archivePath,
+  entry,
+) => {
+  if ('isSymbolicLink' in entry && entry.isSymbolicLink()) {
+    return false;
+  }
+  return !archivePath.split(/[\\/]/u).some(part =>
+    EXCLUDED_PARTS.has(part) || part.startsWith('.git'),
+  );
+};
+
+const createMiniProgramPackage = async (
+  sourceRoot,
+  buildOutputDir,
+) => {
+  const resolvedSourceRoot = node_path.resolve(sourceRoot);
+  await validateBuildOutput(resolvedSourceRoot, buildOutputDir);
+  const tempDirectory = await promises.mkdtemp(node_path.join(node_os.tmpdir(), 'coze-mini-program-source-'));
+  const outputPath = node_path.join(tempDirectory, 'source.tar.gz');
+  try {
+    await tar.create(
+      {
+        cwd: resolvedSourceRoot,
+        file: outputPath,
+        filter: shouldInclude,
+        gzip: true,
+        mtime: REPRODUCIBLE_ARCHIVE_MTIME,
+        portable: true,
+      },
+      [buildOutputDir],
+    );
+    const info = await promises.stat(outputPath);
+    if (info.size === 0) {
+      throw new Error('source archive is empty');
+    }
+    return {
+      path: outputPath,
+      sizeBytes: info.size,
+      cleanup: () => promises.rm(tempDirectory, { recursive: true, force: true }),
+    };
+  } catch (error) {
+    await promises.rm(tempDirectory, { recursive: true, force: true });
+    throw new CliError(
+      `Unable to package Mini-program build output: ${error instanceof Error ? error.message : String(error)}`,
+      'SOURCE_PACKAGE_FAILED',
+    );
+  }
+};
+
+function _nullishCoalesce$1(lhs, rhsFn) { if (lhs != null) { return lhs; } else { return rhsFn(); } } function _optionalChain$3(ops) { let lastAccessLHS = undefined; let value = ops[0]; let i = 1; while (i < ops.length) { const op = ops[i]; const fn = ops[i + 1]; i += 2; if ((op === 'optionalAccess' || op === 'optionalCall') && value == null) { return undefined; } if (op === 'access' || op === 'optionalAccess') { lastAccessLHS = value; value = fn(value); } else if (op === 'call' || op === 'optionalCall') { value = fn((...args) => value.call(lastAccessLHS, ...args)); lastAccessLHS = undefined; } } return value; }
+const CONNECTOR_IDS = {
+  wechat: '10000127',
+  douyin: '10000126',
+} ;
+
+const MINI_PROGRAM_BUILD_OUTPUT_DIRS = {
+  wechat: 'dist',
+  douyin: 'dist-tt',
+} ;
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+const resolveConnectorId = (platform) => {
+  const connectorId = CONNECTOR_IDS[platform ];
+  if (!connectorId) {
+    throw new CliError(
+      `Unsupported Mini-program platform ${String(platform)}; expected wechat or douyin.`,
+      'INVALID_MINIPROGRAM_PLATFORM',
+    );
+  }
+  return connectorId;
+};
+
+const resolveBuildOutputDir = (platform) => {
+  const outputDir =
+    MINI_PROGRAM_BUILD_OUTPUT_DIRS[platform ];
+  if (!outputDir) {
+    throw new CliError(
+      `Unsupported Mini-program platform ${String(platform)}; expected wechat or douyin.`,
+      'INVALID_MINIPROGRAM_PLATFORM',
+    );
+  }
+  return outputDir;
+};
+
+const resolveProjectId = async (
+  command,
+  options,
+) => {
+  if (_optionalChain$3([options, 'access', _ => _.projectId, 'optionalAccess', _2 => _2.trim, 'call', _3 => _3()])) {
+    return options.projectId.trim();
+  }
+  const runtime = await getRuntime(command);
+  const sourceRoot = node_path.resolve(runtime.cwd, options.sourceRoot || '.');
+  const metadata = await readProjectMetadata(sourceRoot);
+  if (!metadata.projectId) {
+    throw new CliError(
+      'Project ID is required. Pass --project-id or use a source directory whose .coze [project] contains project_id.',
+      'PROJECT_ID_REQUIRED',
+    );
+  }
+  return metadata.projectId;
+};
+
+const MINI_PROGRAM_AUTH_STATUS = {
+  authorized: 1,
+  needAuthorize: 2,
+  boundToOtherUser: 3,
+} ;
+
+const getBoundToOtherUserMessage = (platform) => {
+  const platformName = platform === 'wechat' ? 'WeChat' : 'Douyin';
+  const platformConsole =
+    platform === 'wechat' ? 'WeChat Public Platform' : 'Douyin Open Platform';
+  return [
+    `This ${platformName} Mini-program AppID is authorized by another Coze user.`,
+    `If this is an AppID you manage, revoke Coze's previous third-party platform authorization in the ${platformConsole}, then rerun this auth command. The CLI will recheck the AppID and authorize it for your current Coze account.`,
+    'If this is not your AppID, change --mini-app-id to an AppID for which you have administrator permission, then rerun this auth command.',
+  ].join(' ');
+};
+
+const getAuthRequiredMessage = () =>
+  'This Mini-program AppID is not authorized for the current Coze user. Run `coze-dev deploy mini-program auth` first.';
+
+const getPreviewFailureMessage = (data
+
+
+) =>
+  _optionalChain$3([data, 'access', _4 => _4.stderr, 'optionalAccess', _5 => _5.trim, 'call', _6 => _6()]) || _optionalChain$3([data, 'access', _7 => _7.stdout, 'optionalAccess', _8 => _8.trim, 'call', _9 => _9()]) || 'Mini-program preview failed.';
+
+const registerAuthorizationCommand = (miniProgram) => {
+  miniProgram
+    .command('auth')
+    .description('Authorize a Mini-program AppID for the current Coze user')
+    .requiredOption('--platform <platform>', 'wechat or douyin')
+    .requiredOption('--mini-app-id <miniAppId>', 'Mini-program AppID')
+    .option('--project-id <projectId>', 'Deployment Project ID')
+    .option('--source-root <sourceRoot>', 'Directory containing .coze', '.')
+    .action(async (options, command) => {
+      const runtime = await getRuntime(command);
+      const projectId = await resolveProjectId(command, options);
+      const authorization = await runtime.client.authorizeMiniProgram({
+        project_id: projectId,
+        app_id: options.miniAppId || '',
+        connector_id: resolveConnectorId(options.platform),
+        redirect_url: 'https://code.coze.cn/coding/auth/callback/miniprogram',
+      });
+      if (authorization.status === MINI_PROGRAM_AUTH_STATUS.needAuthorize) {
+        runtime.output.print({
+          project_id: projectId,
+          mini_app_id: options.miniAppId,
+          platform: options.platform,
+          authorization_required: true,
+          auth_url: authorization.auth_url,
+        });
+        return;
+      }
+      if (authorization.status === MINI_PROGRAM_AUTH_STATUS.boundToOtherUser) {
+        throw new CliError(
+          getBoundToOtherUserMessage(options.platform),
+          'MINIPROGRAM_AUTHORIZED_BY_OTHER_USER',
+        );
+      }
+      if (authorization.status !== MINI_PROGRAM_AUTH_STATUS.authorized) {
+        throw new CliError(
+          `Unexpected Mini-program authorization status: ${String(authorization.status)}.`,
+          'INVALID_RESPONSE',
+        );
+      }
+      runtime.output.print({
+        project_id: projectId,
+        mini_app_id: options.miniAppId,
+        platform: options.platform,
+        authorized: true,
+      });
+    });
+};
+
+const registerPreviewCommand = (miniProgram) => {
+  miniProgram
+    .command('preview')
+    .description('Create a Mini-program preview QR code from the local build artifact')
+    .requiredOption('--platform <platform>', 'wechat or douyin')
+    .requiredOption('--mini-app-id <miniAppId>', 'Mini-program AppID')
+    .option('--project-id <projectId>', 'Deployment Project ID')
+    .option('--source-root <sourceRoot>', 'Directory containing dist or dist-tt', '.')
+    .option('--server-url <serverUrl>', 'Public HTTPS server URL to whitelist for this preview')
+    .action(async (options, command) => {
+      const runtime = await getRuntime(command);
+      const projectId = await resolveProjectId(command, options);
+      const authorization = await runtime.client.getMiniProgramAuthStatus({
+        project_id: projectId,
+        connector_id: resolveConnectorId(options.platform),
+      });
+      if (
+        !authorization.is_authorized ||
+        authorization.bound_related_id !== options.miniAppId
+      ) {
+        throw new CliError(
+          getAuthRequiredMessage(),
+          'MINIPROGRAM_AUTH_REQUIRED',
+        );
+      }
+      const sourceRoot = node_path.resolve(runtime.cwd, options.sourceRoot || '.');
+      const buildOutputDir = resolveBuildOutputDir(options.platform);
+      const sourcePackage = await createMiniProgramPackage(
+        sourceRoot,
+        buildOutputDir,
+      );
+      try {
+        const content = await promises.readFile(sourcePackage.path);
+        const data = await runtime.client.createMiniProgramPreview({
+          project_id: projectId,
+          app_id: options.miniAppId || '',
+          connector_id: resolveConnectorId(options.platform),
+          source_package_base64: content.toString('base64'),
+          ...(options.serverUrl ? { server_url: options.serverUrl } : {}),
+        });
+        if (data.failed) {
+          throw new CliError(
+            getPreviewFailureMessage(data),
+            'MINIPROGRAM_PREVIEW_FAILED',
+          );
+        }
+        runtime.output.print({
+          project_id: projectId,
+          mini_app_id: options.miniAppId,
+          platform: options.platform,
+          source_package_size_bytes: sourcePackage.sizeBytes,
+          ...data,
+        });
+      } finally {
+        await sourcePackage.cleanup();
+      }
+    });
+};
+
+const registerMiniProgram = (code) => {
+  const miniProgram = code
+    .command('mini-program')
+    .alias('miniprogram')
+    .description('Manage WeChat or Douyin Mini-program authorization');
+
+  miniProgram
+    .command('status')
+    .requiredOption('--platform <platform>', 'wechat or douyin')
+    .option('--project-id <projectId>', 'Deployment Project ID')
+    .option('--source-root <sourceRoot>', 'Directory containing .coze', '.')
+    .action(async (options, command) => {
+      const runtime = await getRuntime(command);
+      const projectId = await resolveProjectId(command, options);
+      const connectorId = resolveConnectorId(options.platform);
+      const data = await runtime.client.getMiniProgramAuthStatus({
+        project_id: projectId,
+        connector_id: connectorId,
+      });
+      runtime.output.print({ project_id: projectId, platform: options.platform, ...data });
+    });
+
+  miniProgram
+    .command('bind')
+    .requiredOption('--platform <platform>', 'wechat or douyin')
+    .requiredOption('--mini-app-id <miniAppId>', 'Mini-program AppID')
+    .requiredOption('--redirect-url <redirectUrl>', 'OAuth callback URL')
+    .option('--project-id <projectId>', 'Deployment Project ID')
+    .option('--source-root <sourceRoot>', 'Directory containing .coze', '.')
+    .option('--override', 'Move an AppID already bound to another project owned by you')
+    .action(async (options, command) => {
+      const runtime = await getRuntime(command);
+      const projectId = await resolveProjectId(command, options);
+      const connectorId = resolveConnectorId(options.platform);
+      const data = await runtime.client.bindMiniProgramAuth({
+        project_id: projectId,
+        connector_id: connectorId,
+        redirect_url: options.redirectUrl || '',
+        auth_params: { app_id: options.miniAppId || '' },
+        override: _nullishCoalesce$1(options.override, () => ( false)),
+      });
+      runtime.output.print({
+        project_id: projectId,
+        platform: options.platform,
+        mini_app_id: options.miniAppId,
+        ...data,
+      });
+    });
+
+  miniProgram
+    .command('submit-code')
+    .requiredOption('--platform <platform>', 'wechat or douyin')
+    .requiredOption('--mini-app-id <miniAppId>', 'Mini-program AppID')
+    .requiredOption('--code <code>', 'OAuth authorization code')
+    .requiredOption('--verify-state <verifyState>', 'State returned by bind')
+    .option('--project-id <projectId>', 'Deployment Project ID')
+    .option('--source-root <sourceRoot>', 'Directory containing .coze', '.')
+    .action(async (options, command) => {
+      const runtime = await getRuntime(command);
+      const projectId = await resolveProjectId(command, options);
+      await runtime.client.submitMiniProgramAuthCode({
+        project_id: projectId,
+        connector_id: resolveConnectorId(options.platform),
+        code: options.code || '',
+        verify_state: options.verifyState || '',
+        auth_params: { app_id: options.miniAppId || '' },
+      });
+      runtime.output.print({ project_id: projectId, platform: options.platform, bound: true });
+    });
+
+  miniProgram
+    .command('unbind')
+    .requiredOption('--platform <platform>', 'wechat or douyin')
+    .option('--project-id <projectId>', 'Deployment Project ID')
+    .option('--source-root <sourceRoot>', 'Directory containing .coze', '.')
+    .action(async (options, command) => {
+      const runtime = await getRuntime(command);
+      const projectId = await resolveProjectId(command, options);
+      await runtime.client.unbindMiniProgramAuth({
+        project_id: projectId,
+        connector_id: resolveConnectorId(options.platform),
+      });
+      runtime.output.print({ project_id: projectId, platform: options.platform, unbound: true });
+    });
+
+  registerAuthorizationCommand(miniProgram);
+  registerPreviewCommand(miniProgram);
+};
+
+function _optionalChain$2(ops) { let lastAccessLHS = undefined; let value = ops[0]; let i = 1; while (i < ops.length) { const op = ops[i]; const fn = ops[i + 1]; i += 2; if ((op === 'optionalAccess' || op === 'optionalCall') && value == null) { return undefined; } if (op === 'access' || op === 'optionalAccess') { lastAccessLHS = value; value = fn(value); } else if (op === 'call' || op === 'optionalCall') { value = fn((...args) => value.call(lastAccessLHS, ...args)); lastAccessLHS = undefined; } } return value; }
+
+const POLL_INTERVAL_MS = 3000;
+const MAX_CONSECUTIVE_RETRIES = 5;
+const TRANSIENT_RPC_ERROR_CODE = 230000001;
+/**
+ * `--wait` 的总时长上限。
+ *
+ * Interrupted 不再算终态（见 status.ts），轮询只能靠这个兜底，否则一次卡住的部署会把 CLI
+ * 永远挂在这里。取 60min 是照安卓构建定的：实测 10 分钟起步，中途还会经历若干次
+ * Interrupted → 重新触发。
+ */
+const POLL_TIMEOUT_MS = 3600000; // 60min
+/** 心跳间隔：text 模式下每隔这么久报一次「还在跑」，免得长构建看起来像挂死。 */
+const HEARTBEAT_MS = 30000;
+
+const wait = async () =>
+  new Promise(resolve => setTimeout(resolve, POLL_INTERVAL_MS));
+
+const isRetryablePollError = (error) =>
+  error instanceof CliError &&
+  error.code === 'API_REJECTED' &&
+  Number(_optionalChain$2([error, 'access', _ => _.details, 'optionalAccess', _2 => _2.business_code])) === TRANSIENT_RPC_ERROR_CODE;
+
+const pollHistory = async (
+  command,
+  appId,
+  deployHistoryId,
+  timeoutMs = POLL_TIMEOUT_MS,
+) => {
+  const runtime = await getRuntime(command);
+  const startedAt = Date.now();
+  let consecutiveFailures = 0;
+  let lastStatus;
+  let lastBeatAt = startedAt;
+  while (true) {
+    const elapsed = () => Math.floor((Date.now() - startedAt) / 1000);
+    try {
+      const history = await runtime.client.getDeployHistory({
+        app_id: appId,
+        deploy_history_id: deployHistoryId,
+      });
+      consecutiveFailures = 0;
+      const status = getDeployStatusText(history.status);
+      runtime.output.debug(
+        `[deploy] History ${deployHistoryId}: ${status} (${String(elapsed())}s elapsed)`,
+      );
+      if (history.status && TERMINAL_STATUSES.has(history.status)) {
+        return history;
+      }
+      // 长构建（安卓十几分钟）期间给点动静：状态一变就报，否则每 30s 报一次还活着。
+      // output.info 只在 text 模式写 stderr，json 模式是 no-op，不会污染机器可读输出。
+      if (history.status !== lastStatus) {
+        lastStatus = history.status;
+        lastBeatAt = Date.now();
+        runtime.output.info(`[deploy] ${status} (${String(elapsed())}s)`);
+      } else if (Date.now() - lastBeatAt >= HEARTBEAT_MS) {
+        lastBeatAt = Date.now();
+        runtime.output.info(`[deploy] still ${status} (${String(elapsed())}s)`);
+      }
+    } catch (error) {
+      if (!isRetryablePollError(error) || consecutiveFailures >= MAX_CONSECUTIVE_RETRIES) {
+        throw error;
+      }
+      consecutiveFailures += 1;
+      runtime.output.debug(
+        `[deploy] Status check failed transiently; retrying (${String(consecutiveFailures)}/${String(MAX_CONSECUTIVE_RETRIES)}).`,
+      );
+    }
+    if (Date.now() - startedAt >= timeoutMs) {
+      throw new CliError(
+        `Timed out after ${String(elapsed())}s waiting for deployment ${deployHistoryId}; ` +
+          `last status: ${getDeployStatusText(lastStatus)}. The deployment may still be running — ` +
+          'check it with `coze-dev deploy status`.',
+        'DEPLOY_WAIT_TIMEOUT',
+        { app_id: appId, deploy_history_id: deployHistoryId, last_status: lastStatus },
+      );
+    }
+    await wait();
+  }
+};
+
+const GENERAL_PROJECT_TYPE = 9;
+
+/**
+ * Map `.coze` `[project].project_type` to the VibeProjectType used when creating the
+ * deployment project.
+ *
+ * The values on the left are the ones the deploy server understands (see `cozefileutil`
+ * `ResolveDeployKindByProjectType` / `GeneralProjectTypeByCozeProjectType` in coze-coding);
+ * the numbers on the right are `VibeProjectType` (idl/coze.coding.ide/project.thrift).
+ *
+ * Keeping the two in sync matters beyond project metadata: the created project type decides
+ * the project-scoped `COZE_PROJECT_TYPE` secret injected into the runtime, whether a Postgres
+ * database is provisioned for the project, and whether the traffic gateway enforces inbound
+ * auth. Creating an `agent` project as General(9) therefore deploys successfully but leaves a
+ * dead service: the agent template reads `COZE_PROJECT_TYPE` to pick its graph and needs
+ * `PGDATABASE_URL` on startup.
+ *
+ * VibeProjectType WebApp(3) and AssistantAgent(8) are intentionally absent: no `.coze`
+ * project_type maps to them.
+ */
+const resolveCreationProjectType = (
+  projectType,
+) => {
+  switch (projectType) {
+    case 'agent':
+      return 1;
+    case 'workflow':
+    case 'automation':
+      return 2;
+    case 'app':
+      return 4;
+    case 'skill':
+      return 5;
+    case 'web':
+    case 'backend':
+      return 6;
+    case 'miniapp':
+    case 'miniprogram':
+      return 7;
+    default:
+      return GENERAL_PROJECT_TYPE;
+  }
+};
+
+const formatDeployment = (deployment) =>
+  typeof deployment === 'object' && deployment
+    ? {
+        ...(deployment ),
+        status: getDeployStatusText(
+          Number((deployment ).status),
+        ),
+      }
+    : undefined;
+
+const formatApplication = (application) => ({
+  ...application,
+  online_deployment: formatDeployment(application.online_deployment),
+  latest_deployment: formatDeployment(application.latest_deployment),
+});
+
+// 对应 IDL 的 MetricTimeRange，数值与 V1 保持一致。
+const TIME_RANGES = {
+  day: 1,
+  week: 2,
+  month: 3,
+  yesterday: 4,
+  'three-days': 5,
+};
+
+const resolveTimeRange = (value) => {
+  const timeRange = TIME_RANGES[value || 'day'];
+  if (!timeRange) {
+    throw new CliError(
+      `Invalid time range; expected one of ${Object.keys(TIME_RANGES).join(', ')}.`,
+      'INVALID_TIME_RANGE',
+      { time_range: value },
+    );
+  }
+  return timeRange;
+};
+
+const UNIT_TYPES = { dev: 1, prod: 2 };
+
+// 改 Application 本身的两条写操作，都要显式 --yes 才生效。
+// 单独拎出来是因为它们和 registerApp 里其余只读命令性质不同（会改线上资产），
+// 顺带让 registerApp 保持在 max-line-per-function 之内。
+const registerAppMutations = (app) => {
+  app
+    .command('rename <name>')
+    .description('Rename an application')
+    .option('--app-id <appId>', 'Application ID')
+    .option('--yes', 'Confirm rename')
+    .action(async (name, options, command) => {
+      if (!options.yes) {
+        throw new CliError('Pass --yes to rename the application.', 'CONFIRMATION_REQUIRED');
+      }
+      const normalizedName = name.trim();
+      if (!normalizedName || normalizedName.length > 255) {
+        throw new CliError(
+          'Application name must contain 1 to 255 characters.',
+          'INVALID_APPLICATION_NAME',
+        );
+      }
+      const runtime = await getRuntime(command);
+      const appId = await requireAppId(runtime.cwd, options.appId);
+      const application = await runtime.client.updateApplication({
+        app_id: appId,
+        name: normalizedName,
+      });
+      runtime.output.print(
+        formatApplication(application ),
+      );
+    });
+  app
+    // 删除是终态、不可撤销，所以和 rename 一样必须显式 --yes。
+    //
+    // 服务端只接受 **Stopped** 的应用：还在服务的先 `code deploy stop --yes`，否则会拿到一条
+    // 带当前状态的报错。这里刻意不替用户先停 —— 停服会真的把线上服务摘掉，那得是用户自己按的。
+    .command('delete')
+    .description('Delete a stopped application (irreversible)')
+    .option('--app-id <appId>', 'Application ID')
+    .option('--yes', 'Confirm delete')
+    .action(async (options, command) => {
+      if (!options.yes) {
+        throw new CliError('Pass --yes to delete the application.', 'CONFIRMATION_REQUIRED');
+      }
+      const runtime = await getRuntime(command);
+      const appId = await requireAppId(runtime.cwd, options.appId);
+      await runtime.client.deleteApplication(appId);
+      // 本地 .coze 里的 app_id 不动（这条命令可能是在别的目录带 --app-id 跑的），但要说清楚：
+      // 不清掉它，同目录下一次 deploy 会打到一个已删除的应用上、被服务端拒。
+      runtime.output.print({
+        app_id: appId,
+        deleted: true,
+        note: 'Remove app_id from .coze [project] before deploying this directory again.',
+      });
+    });
+};
+
+const registerApp = (code) => {
+  const app = code.command('app').description('Manage deployment applications');
+  registerAppMutations(app);
+  app
+    .command('list')
+    // 列的是当前登录用户名下**跨 Project** 的全部 Application。没有 --project-id：
+    // V2 的资产归属是 Owner 而不是 Project，同一个 Project 下的应用可以分属不同用户。
+    // 也不传 user_id：服务端直接从登录态取，客户端传了也只能传自己。
+    //
+    // ⚠️ 服务端是真分页（一页最多 100 条），一次调用只回一页。要「我的全部应用」用 --all，
+    // 它顺着 next_page_token 翻到底 —— 别再默认第一页就是全部。
+    .option('--page-token <pageToken>', 'Pagination token (page number)')
+    .option('--page-size <pageSize>', 'Page size', '20')
+    .option('--all', 'Fetch every page by following next_page_token')
+    .action(async (options, command) => {
+      const pageSize = parsePageSize(options.pageSize, 20, APP_LIST_MAX_PAGE_SIZE);
+      const pageToken = parsePageToken(options.pageToken);
+      if (options.all && pageToken) {
+        throw new CliError(
+          '--all fetches every page and cannot be combined with --page-token.',
+          'INVALID_PAGE_TOKEN',
+          { page_token: options.pageToken },
+        );
+      }
+      const runtime = await getRuntime(command);
+      const format = (items) =>
+        items.map(item => formatApplication(item ));
+      if (options.all) {
+        const { items, pages } = await collectAllPages(next =>
+          runtime.client.listApplications({ page_token: next, page_size: pageSize }),
+        );
+        runtime.output.print({ items: format(items), pages, has_more: false });
+        return;
+      }
+      const data = await runtime.client.listApplications({
+        page_token: pageToken,
+        page_size: pageSize,
+      });
+      runtime.output.print({
+        items: format(data.items),
+        next_page_token: data.next_page_token,
+        has_more: data.has_more,
+      });
+    });
+  app
+    .command('show')
+    .requiredOption('--app-id <appId>', 'Application ID')
+    .action(async (options, command) => {
+      const runtime = await getRuntime(command);
+      runtime.output.print(
+        formatApplication(
+          (await runtime.client.getApplication(options.appId)) 
+
+
+,
+        ),
+      );
+    });
+  app
+    .command('analytics')
+    .description('Show PV / UV charts')
+    .option('--app-id <appId>', 'Application ID')
+    .option(
+      '--time-range <timeRange>',
+      `Time range: ${Object.keys(TIME_RANGES).join(', ')}`,
+      'day',
+    )
+    .action(async (options, command) => {
+      const timeRange = resolveTimeRange(options.timeRange);
+      const runtime = await getRuntime(command);
+      const appId = await requireAppId(runtime.cwd, options.appId);
+      const data = await runtime.client.getUserAnalyticsMetrics({
+        app_id: appId,
+        time_range: timeRange,
+      });
+      runtime.output.print({ app_id: appId, charts: data.charts || [] });
+    });
+  app
+    .command('metrics')
+    .description('Show application runtime metrics')
+    .option('--app-id <appId>', 'Application ID')
+    .option(
+      '--time-range <timeRange>',
+      `Time range: ${Object.keys(TIME_RANGES).join(', ')}`,
+      'day',
+    )
+    .action(async (options, command) => {
+      const timeRange = resolveTimeRange(options.timeRange);
+      const runtime = await getRuntime(command);
+      const appId = await requireAppId(runtime.cwd, options.appId);
+      const data = await runtime.client.getApplicationMetrics({
+        app_id: appId,
+        time_range: timeRange,
+      });
+      runtime.output.print({
+        app_id: appId,
+        charts: data.charts || [],
+        stats: data.stats || [],
+      });
+    });
+  app
+    .command('usage')
+    .description('Show monthly hosted usage')
+    .option('--app-id <appId>', 'Application ID')
+    .requiredOption('--bill-month <billMonth>', 'Billing month in YYYY-MM format')
+    .action(async (options, command) => {
+      const billMonth = options.billMonth || '';
+      if (!/^\d{4}-(?:0[1-9]|1[0-2])$/u.test(billMonth)) {
+        throw new CliError(
+          'Invalid billing month; expected YYYY-MM.',
+          'INVALID_BILL_MONTH',
+          { bill_month: billMonth },
+        );
+      }
+      const runtime = await getRuntime(command);
+      const appId = await requireAppId(runtime.cwd, options.appId);
+      const data = await runtime.client.getHostedUsageMonthly({
+        app_id: appId,
+        bill_month: billMonth,
+      });
+      runtime.output.print({ app_id: appId, summary: data.summary });
+    });
+};
+
+const registerDomain = (code) => {
+  const domain = code.command('domain').description('Manage application domains');
+  domain
+    .command('list')
+    .option('--app-id <appId>', 'Application ID')
+    .option('--unit-type <unitType>', 'Unit type: dev or prod', 'prod')
+    .action(async (options, command) => {
+      const unitType = UNIT_TYPES[options.unitType || 'prod'];
+      if (!unitType) {
+        throw new CliError(
+          'Invalid unit type; expected dev or prod.',
+          'INVALID_UNIT_TYPE',
+          { unit_type: options.unitType },
+        );
+      }
+      const runtime = await getRuntime(command);
+      const appId = await requireAppId(runtime.cwd, options.appId);
+      const data = await runtime.client.listDomains(appId, unitType);
+      runtime.output.print({
+        app_id: appId,
+        unit_type: options.unitType || 'prod',
+        items: (data.items || []).map(item => ({
+          id: item.id,
+          domain_host: item.domain_host,
+        })),
+      });
+    });
+  domain
+    // 改的是系统分配的 <prefix>.coze.site 的 prefix，不是 `domain add` 加进来的自定义域名 ——
+    // 那类域名服务端只有 create/delete，域名串本身改不了。
+    //
+    // 和 rename 一样要 --yes：旧默认域名会立刻停止指向本应用，已经发出去的链接会失效。
+    .command('set-prefix <prefix>')
+    .description('Change the default domain prefix (<prefix>.coze.site)')
+    .option('--app-id <appId>', 'Application ID')
+    .option('--yes', 'Confirm prefix change')
+    .action(async (prefix, options, command) => {
+      if (!options.yes) {
+        throw new CliError(
+          'Pass --yes to change the default domain prefix.',
+          'CONFIRMATION_REQUIRED',
+        );
+      }
+      const normalizedPrefix = prefix.trim();
+      // 只做形态校验：长度、保留词、占用与权益都由服务端判，客户端不复制第二套规则。
+      if (!/^[a-z0-9](?:[a-z0-9-]*[a-z0-9])?$/u.test(normalizedPrefix)) {
+        throw new CliError(
+          'Invalid prefix; use lowercase letters, digits and hyphens, not starting or ending with a hyphen.',
+          'INVALID_DOMAIN_PREFIX',
+          { prefix },
+        );
+      }
+      const runtime = await getRuntime(command);
+      const appId = await requireAppId(runtime.cwd, options.appId);
+      const data = await runtime.client.updateDefaultDomainPrefix({
+        app_id: appId,
+        prefix: normalizedPrefix,
+      });
+      runtime.output.print({
+        app_id: appId,
+        prefix: normalizedPrefix,
+        old_domain_host: data.old_domain_host_canonical,
+        new_domain_host: data.new_domain_host_canonical,
+      });
+    });
+  domain
+    .command('add <domain>')
+    .option('--app-id <appId>', 'Application ID')
+    .action(async (domainHost, options, command) => {
+      if (!/^[a-zA-Z0-9](?:[a-zA-Z0-9-]*\.)+[a-zA-Z0-9-]+$/u.test(domainHost)) {
+        throw new CliError('Invalid domain.', 'INVALID_DOMAIN', { domain: domainHost });
+      }
+      const runtime = await getRuntime(command);
+      const appId = await requireAppId(runtime.cwd, options.appId);
+      await runtime.client.createDomain({ app_id: appId, domain: domainHost });
+      runtime.output.print({ app_id: appId, domain: domainHost });
+    });
+};
+
+const PACKAGE_SCRIPT_CANDIDATES = [
+  node_path.resolve(__dirname, 'deploy/package-project.js'),
+  node_path.resolve(__dirname, '../../../scripts/deploy/package-project.js'),
+];
+
+const packageCommand = (args) => {
+  const packageScript = PACKAGE_SCRIPT_CANDIDATES.find(candidate =>
+    node_fs.existsSync(candidate),
+  );
+  if (!packageScript) {
+    throw new CliError(
+      'The deployment packaging script is missing from this coze-dev installation.',
+      'SOURCE_PACKAGE_FAILED',
+    );
+  }
+  return [packageScript, ...args];
+};
+
+const runPackageScript = async (args, debug = false) =>
+  new Promise((resolvePromise, reject) => {
+    const child = node_child_process.spawn(process.execPath, packageCommand(args), {
+      stdio: ['ignore', 'pipe', 'pipe'],
+    });
+    let errorOutput = '';
+    const forward = (chunk) => {
+      const text = chunk.toString();
+      if (debug) {
+        process.stderr.write(text);
+      }
+      errorOutput = `${errorOutput}${text}`.slice(-65536);
+    };
+    child.stdout.on('data', forward);
+    child.stderr.on('data', forward);
+    child.once('error', reject);
+    child.once('close', code => {
+      if (code === 0) {
+        resolvePromise();
+        return;
+      }
+      reject(new Error(
+        `Packaging process exited with code ${String(code)}${errorOutput ? `\n${errorOutput.trim()}` : ''}`,
+      ));
+    });
+  });
+
+
+
+
+
+
+
+
+
+
+
+
+const createSourcePackageArchive = async (
+  sourceRoot,
+  applicationType = 'service',
+  debug = false,
+) => {
+  const tempDirectory = await promises.mkdtemp(node_path.join(node_os.tmpdir(), 'coze-deploy-source-'));
+  const outputPath = node_path.join(tempDirectory, 'source.tar.gz');
+  try {
+    await runPackageScript(
+      [sourceRoot, outputPath, ...(applicationType === 'pages' ? ['--pages'] : [])],
+      debug,
+    );
+    const info = await promises.stat(outputPath);
+    if (info.size === 0) {
+      throw new CliError('Source package is empty.', 'SOURCE_PACKAGE_FAILED');
+    }
+    return {
+      path: outputPath,
+      sizeBytes: info.size,
+      cleanup: () => promises.rm(tempDirectory, { recursive: true, force: true }),
+    };
+  } catch (error) {
+    await promises.rm(tempDirectory, { recursive: true, force: true });
+    if (error instanceof CliError) {
+      throw error;
+    }
+    throw new CliError(
+      `Unable to package local source: ${error instanceof Error ? error.message : String(error)}`,
+      'SOURCE_PACKAGE_FAILED',
+    );
+  }
+};
+
+const UPLOAD_SESSION_FILENAME = '.coze-deploy-upload.json';
+
+
+
+
+
+
+
+
+
+
+
+const isUploadSession = (value) => {
+  if (!value || typeof value !== 'object') {
+    return false;
+  }
+  const session = value ;
+  return typeof session.idempotencyKey === 'string' &&
+    typeof session.createdAt === 'number' &&
+    typeof session.sourcePackageSizeBytes === 'number' &&
+    Boolean(session.request && typeof session.request === 'object');
+};
+
+const readUploadSession = async (sourceRoot) => {
+  try {
+    const parsed = safeJsonParse(
+      await promises.readFile(node_path.join(sourceRoot, UPLOAD_SESSION_FILENAME), 'utf8'),
+      undefined,
+    );
+    return isUploadSession(parsed) ? parsed : undefined;
+  } catch (error) {
+    if ((error ).code === 'ENOENT') {
+      return undefined;
+    }
+    throw error;
+  }
+};
+
+const writeUploadSession = async (sourceRoot, session) => {
+  const path = node_path.join(sourceRoot, UPLOAD_SESSION_FILENAME);
+  const tempPath = node_path.join(node_path.dirname(path), `.coze-deploy-upload-${node_crypto.randomUUID()}.tmp`);
+  await promises.mkdir(node_path.dirname(path), { recursive: true });
+  try {
+    await promises.writeFile(tempPath, `${JSON.stringify(session, null, 2)}\n`, { encoding: 'utf8', mode: 0o600 });
+    await promises.rename(tempPath, path);
+  } finally {
+    await promises.rm(tempPath, { force: true });
+  }
+};
+
+const removeUploadSession = async (sourceRoot) => {
+  await promises.rm(node_path.join(sourceRoot, UPLOAD_SESSION_FILENAME), { force: true });
+};
+
+function _optionalChain$1(ops) { let lastAccessLHS = undefined; let value = ops[0]; let i = 1; while (i < ops.length) { const op = ops[i]; const fn = ops[i + 1]; i += 2; if ((op === 'optionalAccess' || op === 'optionalCall') && value == null) { return undefined; } if (op === 'access' || op === 'optionalAccess') { lastAccessLHS = value; value = fn(value); } else if (op === 'call' || op === 'optionalCall') { value = fn((...args) => value.call(lastAccessLHS, ...args)); lastAccessLHS = undefined; } } return value; }
+const INLINE_SOURCE_PACKAGE_MAX_BYTES = 1024 * 1024;
+const PRE_DEPLOY_SESSION_TTL_MS = 2 * 60 * 60 * 1000;
+
+const uploadFile = async (
+  uploadUrl,
+  requiredHeaders,
+  archive,
+) => {
+  const uploadRequest = {
+    method: 'PUT',
+    headers: requiredHeaders,
+    body: node_stream.Readable.toWeb(node_fs.createReadStream(archive.path)) ,
+    duplex: 'half',
+  };
+  const response = await fetch(uploadUrl, uploadRequest);
+  if (!response.ok) {
+    throw new CliError(`Direct artifact upload failed: ${response.status} ${response.statusText}`, 'ARTIFACT_UPLOAD_FAILED');
+  }
+};
+
+const createDeploymentWithSourcePackage = async (
+  client,
+  request,
+  archive,
+  sourceRoot,
+) => {
+  if (archive.sizeBytes <= INLINE_SOURCE_PACKAGE_MAX_BYTES) {
+    const content = await promises.readFile(archive.path);
+    return {
+      uploadMode: 'inline' ,
+      result: await client.createDeployHistory({ ...request, source_package_base64: content.toString('base64') }),
+    };
+  }
+
+  const savedSession = await readUploadSession(sourceRoot);
+  let retryRequest = request;
+  let reconciledSession = savedSession;
+  if (_optionalChain$1([savedSession, 'optionalAccess', _ => _.appId]) && savedSession.deployHistoryId) {
+    const history = await client.getDeployHistory({
+      app_id: savedSession.appId,
+      deploy_history_id: savedSession.deployHistoryId,
+    });
+    switch (history.status) {
+      case DEPLOY_STATUS.preDeploy:
+        // The server is authoritative for the session lifetime. Reuse the
+        // original key even if the local two-hour clock is close to expiry;
+        // pre_upload will either refresh the URL or release an expired slot.
+        break;
+      case DEPLOY_STATUS.pending:
+      case DEPLOY_STATUS.running:
+      case DEPLOY_STATUS.interrupted:
+      case DEPLOY_STATUS.succeeded:
+        // The previous create request was accepted but its response may have
+        // been lost. Do not upload or create another deployment.
+        await removeUploadSession(sourceRoot);
+        return {
+          uploadMode: 'direct' ,
+          result: {
+            app_id: savedSession.appId,
+            deploy_history_id: savedSession.deployHistoryId,
+            status: history.status,
+            version: typeof history.version === 'number' ? history.version : undefined,
+          },
+        };
+      case DEPLOY_STATUS.failed:
+      case DEPLOY_STATUS.canceled:
+        // The reserved history can no longer be claimed. Start a new upload
+        // against the Application that pre_upload already created.
+        await removeUploadSession(sourceRoot);
+        reconciledSession = undefined;
+        retryRequest = {
+          ...request,
+          project_id: undefined,
+          app_id: savedSession.appId,
+        };
+        break;
+      default:
+        throw new CliError(
+          `Unable to reconcile pre-deploy history ${savedSession.deployHistoryId}: unknown status ${String(history.status)}.`,
+          'INVALID_RESPONSE',
+        );
+    }
+  }
+  const liveSavedSession = reconciledSession && (
+    reconciledSession.appId && reconciledSession.deployHistoryId ||
+    Date.now() - reconciledSession.createdAt < PRE_DEPLOY_SESSION_TTL_MS
+  )
+    ? reconciledSession
+    : undefined;
+  if (liveSavedSession && liveSavedSession.sourcePackageSizeBytes !== archive.sizeBytes) {
+    throw new CliError(
+      'A different source package is waiting for upload. Cancel that deployment or wait for its two-hour session to expire.',
+      'PRE_DEPLOY_SOURCE_CHANGED',
+    );
+  }
+  if (reconciledSession && !liveSavedSession) {
+    await removeUploadSession(sourceRoot);
+  }
+  const resumableSession = liveSavedSession;
+  const session = resumableSession || {
+    idempotencyKey: node_crypto.randomUUID(),
+    createdAt: Date.now(),
+    sourcePackageSizeBytes: archive.sizeBytes,
+    request: retryRequest,
+  };
+  // Persist before preDeployUpload: if the server creates PreDeploy but the response is lost,
+  // the next CLI run must reuse the same idempotency key.
+  await writeUploadSession(sourceRoot, session);
+  const preDeploy = await client.preDeployUpload({
+    ...session.request,
+    source_package_size_bytes: String(archive.sizeBytes),
+    idempotency_key: session.idempotencyKey,
+  });
+  await writeUploadSession(sourceRoot, {
+    ...session,
+    appId: preDeploy.app_id,
+    deployHistoryId: preDeploy.deploy_history_id,
+    uploadReceipt: preDeploy.upload_receipt,
+  });
+  await uploadFile(preDeploy.upload_url, preDeploy.required_headers || {}, archive);
+  const result = await client.createDeployHistory({
+    ...session.request,
+    project_id: undefined,
+    app_id: preDeploy.app_id,
+    pre_deploy_history_id: preDeploy.deploy_history_id,
+    upload_receipt: preDeploy.upload_receipt,
+    source_package_size_bytes: String(archive.sizeBytes),
+  });
+  await removeUploadSession(sourceRoot);
+  return { uploadMode: 'direct' , result };
+};
+
+function _nullishCoalesce(lhs, rhsFn) { if (lhs != null) { return lhs; } else { return rhsFn(); } } function _optionalChain(ops) { let lastAccessLHS = undefined; let value = ops[0]; let i = 1; while (i < ops.length) { const op = ops[i]; const fn = ops[i + 1]; i += 2; if ((op === 'optionalAccess' || op === 'optionalCall') && value == null) { return undefined; } if (op === 'access' || op === 'optionalAccess') { lastAccessLHS = value; value = fn(value); } else if (op === 'call' || op === 'optionalCall') { value = fn((...args) => value.call(lastAccessLHS, ...args)); lastAccessLHS = undefined; } } return value; }
+const SUPPORTED_MINIPROGRAM_CONNECTOR_IDS = new Set(['10000127', '10000126']);
+const collectConnectorId = (value, previous) => [
+  ...previous,
+  value,
+];
+
+const getConnectorConfigs = (connectorIds) =>
+  (connectorIds || []).map(connectorId => {
+    if (!SUPPORTED_MINIPROGRAM_CONNECTOR_IDS.has(connectorId)) {
+      throw new CliError(
+        `Unsupported connector ID ${connectorId}; expected 10000127 (WeChat) or 10000126 (Douyin).`,
+        'INVALID_CONNECTOR_ID',
+      );
+    }
+    return { connector_id: connectorId };
+  });
+
+// Keep deployment option and output contracts together for auditing against the V2 IDL.
+// eslint-disable-next-line @coze-arch/max-line-per-function -- keep V2 deployment contracts together
+const registerDeploy = (deploy) => {
+  deploy
+    .description('Deploy an application using deployment V2')
+    .option('--source-root <sourceRoot>', 'Local source root', '.')
+    .option('--project-id <projectId>', 'Project ID for the first deployment')
+    .option('--app-id <appId>', 'Application ID')
+    .option(
+      '--application-type <type>',
+      'Deployment application type: service, pages, or mini_program',
+    )
+    .option('-n, --name <name>', 'Application name for the first deployment')
+    .option('--message <message>', 'Deployment message')
+    .option(
+      '--connector-id <connectorId>',
+      'Mini-program channel: 10000127 (WeChat) or 10000126 (Douyin); repeatable',
+      collectConnectorId,
+      [],
+    )
+    .option('--wait', 'Wait for deployment completion')
+    .option('--yes', 'Confirm deployment')
+    // eslint-disable-next-line @coze-arch/max-line-per-function -- deployment orchestration is one auditable flow
+    .action(async (options, command) => {
+      const runtime = await getRuntime(command);
+      const sourceRoot = node_path.resolve(runtime.cwd, options.sourceRoot || '.');
+      const requestedApplicationType = parseApplicationType(options.applicationType);
+      runtime.output.debug(`[deploy] Reading local project: ${sourceRoot}`);
+      const localContext =
+        await readDeployLocalContext(
+          sourceRoot,
+          requestedApplicationType,
+          options.appId,
+          runtime.client,
+        );
+      const { commitHash, isPagesDeployment } = localContext;
+      let { metadata } = localContext;
+      const deploymentName = _nullishCoalesce(options.name, () => ( metadata.name));
+      let projectId = options.projectId || metadata.projectId;
+      let appId = options.appId || metadata.appId;
+      const appIdFromCoze = Boolean(metadata.appId && !options.appId);
+      let projectCreated = false;
+      let linkedApplicationType;
+      if (appId) {
+        const linkedApplication = await runtime.client.getApplication(appId);
+        linkedApplicationType = linkedApplication.application_type;
+        const linkedProjectId = linkedApplication.project_id;
+        if (!options.appId && projectId && linkedProjectId && projectId !== linkedProjectId) {
+          throw new CliError(
+            `Project ${projectId} does not own application ${appId}; it belongs to project ${linkedProjectId}.`,
+            'PROJECT_ID_CONFLICT',
+          );
+        }
+        if (options.appId && linkedProjectId) {
+          projectId = linkedProjectId;
+        } else {
+          projectId ||= linkedProjectId;
+        }
+        if (!projectId) {
+          throw new CliError(
+            `Application ${appId} did not return its associated project_id.`,
+            'INVALID_RESPONSE',
+          );
+        }
+        const inferredApplicationType = linkedApplicationType === 'pages'
+          ? 'pages'
+          : inferApplicationTypeFromProjectType(metadata.projectType);
+        const targetApplicationType = requestedApplicationType || inferredApplicationType;
+        if (appIdFromCoze && targetApplicationType && linkedApplicationType !== targetApplicationType) {
+          runtime.output.warn(
+            `The linked application ${appId} is ${linkedApplicationType}, but ${targetApplicationType} is required. A new application will be created and written to .coze.`,
+          );
+          appId = undefined;
+        }
+      }
+      if (!projectId) {
+        runtime.output.debug(
+          '[deploy] Creating a dedicated deployment project in personal space...',
+        );
+        // 账号归属只在建 Project 这一次定死：写进 project_settings.extra 之后，有登录态的首次
+        // 部署和无登录态的预览初始化读到的是同一个账号。本地已经知道账号就不打这次接口。
+        const cozeAccountId = await resolveCozeAccountId(runtime);
+        const project = await runtime.client.createDeploymentProject({
+          space_id: '0',
+          user_query: deploymentName || 'CLI deployment project',
+          project_type: resolveCreationProjectType(metadata.projectType),
+          create_source: 'cli',
+          project_settings: {
+            project_symbol: 'v3.5',
+            ...(cozeAccountId ? { extra: { coze_account_id: cozeAccountId } } : {}),
+          },
+        });
+        projectId = project.project_id;
+        projectCreated = true;
+      }
+      if (metadata.projectId !== projectId) {
+        metadata = await writeProjectBinding(sourceRoot, { projectId });
+      }
+      runtime.output.debug(`[deploy] Using project ${projectId} from ${projectCreated ? 'new project' : options.projectId ? '--project-id' : appId ? 'application binding' : '.coze'}`);
+      const cozeFileContent = metadata.cozeFileContent;
+      runtime.output.debug('[deploy] Loading deployment configuration...');
+      const serverConfig = await runtime.client.getDeployConfig({
+        ...(appId ? { app_id: appId } : { project_id: projectId }),
+        commit_hash: commitHash,
+        ...(isPagesDeployment ? { application_type: 'pages'  } : {}),
+        ...(cozeFileContent ? { coze_file_content: cozeFileContent } : {}),
+      });
+      const config = withRequestedApplicationType(
+        serverConfig,
+        requestedApplicationType,
+        Boolean(appId),
+      );
+      const applicationType = config.application_type;
+      const connectorConfigs = getConnectorConfigs(options.connectorId);
+      if (!options.yes) {
+        runtime.output.debug('[deploy] Preflight complete; confirmation is required.');
+        runtime.output.print({
+          confirmation_required: true,
+          app_id: appId,
+          project_id: projectId,
+          application_type: applicationType,
+          commit_hash: commitHash,
+          source_root: sourceRoot,
+          deploy_config: config.deploy_config,
+          current_version: config.current_version,
+          next_version: config.next_version,
+          risks: config.risk_list || [],
+          ...(!appId && deploymentName ? { name: deploymentName } : {}),
+          message: options.message,
+          lane: runtime.globalOptions.lane || runtime.config.xTTEnv,
+        });
+        return;
+      }
+      let encryptEnvVariable;
+      if (applicationType !== 'pages') {
+        runtime.output.debug('[deploy] Loading and encrypting online environment variables...');
+        const onlineEnvironment = appId
+          ? await runtime.client.getOnlineEnvironment(appId)
+          : undefined;
+        if (onlineEnvironment && onlineEnvironment.snapshot_status >= 3) {
+          throw new CliError(
+            onlineEnvironment.status_message ||
+              'The current online environment snapshot is unavailable.',
+            'ONLINE_ENVIRONMENT_UNAVAILABLE',
+          );
+        }
+        const envSecrets = (_optionalChain([onlineEnvironment, 'optionalAccess', _ => _.variables]) || [])
+          .filter(variable => variable.source === 'user')
+          .map(variable => ({
+            secret_id: '',
+            secret_key: variable.key,
+            secret_val: variable.value,
+            secret_type: 'user_custom' ,
+          }));
+        const encrypted = await runtime.client.encryptProjectSecret(projectId, envSecrets);
+        encryptEnvVariable = encrypted.sealed_secrets;
+        if (!encryptEnvVariable) {
+          throw new CliError(
+            'The project secret encryption API returned no sealed_secrets.',
+            'INVALID_RESPONSE',
+          );
+        }
+      }
+      runtime.output.debug(
+        `[deploy] Building and packaging ${applicationType} artifact...`,
+      );
+      const sourcePackage = await createSourcePackageArchive(
+        sourceRoot,
+        applicationType,
+        runtime.globalOptions.debug,
+      );
+      runtime.output.debug(
+        `[deploy] Package ready: ${String(sourcePackage.sizeBytes)} bytes`,
+      );
+      runtime.output.debug('[deploy] Uploading package and creating deployment...');
+      const deploymentRequest = {
+          ...(appId ? { app_id: appId } : { project_id: projectId }),
+          application_type: applicationType,
+          commit_hash: commitHash,
+          ...(options.message ? { commit_message: options.message } : {}),
+          ...(!appId
+            ? { name: deploymentName, source_root: sourceRoot }
+            : {}),
+          is_sync_db_to_prod: false,
+          table_sync_configs: [],
+          connector_configs: connectorConfigs,
+          ...(cozeFileContent ? { coze_file_content: cozeFileContent } : {}),
+          ...(encryptEnvVariable
+            ? { encrypt_env_variable: encryptEnvVariable }
+            : {}),
+          ...getCreateDeployConfig(config),
+      };
+      let deployment;
+      try {
+        deployment = await createDeploymentWithSourcePackage(runtime.client, deploymentRequest, sourcePackage, sourceRoot);
+      } finally {
+        await sourcePackage.cleanup();
+      }
+      const { result } = deployment;
+      const deployHistoryId = resolveDeployHistoryId(
+        result.deploy_history_id,
+        result.prev_deploy_history_id,
+      );
+      if (!deployHistoryId) {
+        throw new CliError('Deployment response returned no deploy_history_id.', 'INVALID_RESPONSE');
+      }
+      if (metadata.appId !== result.app_id || metadata.projectId !== projectId) {
+        await writeProjectBinding(sourceRoot, {
+          projectId,
+          appId: result.app_id,
+        });
+        if (!appId) {
+          runtime.output.warn(`Created application ${result.app_id} and saved it to .coze.`);
+        }
+      }
+      if (options.wait) {
+        runtime.output.debug('[deploy] Deployment accepted; waiting for completion...');
+      } else {
+        runtime.output.debug('[deploy] Deployment accepted.');
+      }
+      const history = options.wait
+        ? await pollHistory(command, result.app_id, deployHistoryId)
+        : undefined;
+      // 不带 --wait 时 history 是 undefined，产物必然还没落库：这里一定会带上
+      // artifacts_pending，而不是甩一个看起来像「查过了，没有」的空数组出去。
+      const effectiveStatus = _nullishCoalesce(_optionalChain([history, 'optionalAccess', _2 => _2.status]), () => ( result.status));
+      runtime.output.print({
+        app_id: result.app_id,
+        deploy_history_id: deployHistoryId,
+        version: result.version,
+        commit_hash: commitHash,
+        status: getDeployStatusText(effectiveStatus),
+        source_package_size_bytes: sourcePackage.sizeBytes,
+        upload_mode: deployment.uploadMode,
+        local_link: appId && !projectCreated ? 'unchanged' : 'written',
+        ...mobileArtifactsOutput(history, effectiveStatus),
+      });
+    });
+
+  registerDeployReadCommands(deploy);
+
+  deploy
+    .command('cancel')
+    .requiredOption('--deploy-id <deployId>', 'Deployment history ID')
+    .option('--app-id <appId>', 'Application ID')
+    .option('--yes', 'Confirm cancellation')
+    .action(async (options, command) => {
+      const parentOptions = getDeployParentOptions(command);
+      if (!options.yes && !parentOptions.yes) {
+        throw new CliError('Pass --yes to cancel deployment.', 'CONFIRMATION_REQUIRED');
+      }
+      const runtime = await getRuntime(command);
+      const appId = await requireAppId(runtime.cwd, getDeployAppIdOption(options, command));
+      await runtime.client.cancelDeployHistory({
+        app_id: appId,
+        deploy_history_id: options.deployId || '',
+      });
+      runtime.output.print({ app_id: appId, canceled: true });
+    });
+
+  deploy
+    .command('rollback')
+    .requiredOption('--deploy-id <deployId>', 'Target deployment history ID')
+    .option('--app-id <appId>', 'Application ID')
+    .option('--rollback-database', 'Rollback database')
+    .option('--yes', 'Confirm rollback')
+    .action(async (options, command) => {
+      const parentOptions = getDeployParentOptions(command);
+      if (!options.yes && !parentOptions.yes) {
+        throw new CliError('Pass --yes to rollback.', 'CONFIRMATION_REQUIRED');
+      }
+      const runtime = await getRuntime(command);
+      const appId = await requireAppId(runtime.cwd, getDeployAppIdOption(options, command));
+      const data = await runtime.client.rollbackDeployHistory({
+        app_id: appId,
+        target_deploy_history_id: options.deployId || '',
+        rollback_database: _nullishCoalesce(options.rollbackDatabase, () => ( false)),
+      });
+      runtime.output.print({ app_id: appId, ...data });
+    });
+
+  // stop 不可逆（删函数 → Stopped，只能重新部署），pause 可逆（→ Paused，resume 能推回 Ready）。
+  const applicationActions = {
+    stop: (client, appId) => client.stopApplication(appId),
+    resume: (client, appId) => client.resumeApplication(appId),
+    pause: (client, appId) => client.pauseApplication(appId),
+  } ;
+
+  for (const action of Object.keys(applicationActions) ) {
+    deploy
+      .command(action)
+      .option('--app-id <appId>', 'Application ID')
+      .option('--yes', `Confirm ${action}`)
+      .action(async (options, command) => {
+        const parentOptions = getDeployParentOptions(command);
+        if (!options.yes && !parentOptions.yes) {
+          throw new CliError(`Pass --yes to ${action}.`, 'CONFIRMATION_REQUIRED');
+        }
+        const runtime = await getRuntime(command);
+        const appId = await requireAppId(runtime.cwd, getDeployAppIdOption(options, command));
+        await applicationActions[action](runtime.client, appId);
+        runtime.output.print({ app_id: appId, action, success: true });
+      });
+  }
+
+  deploy
+    .command('logs')
+    .option('--app-id <appId>', 'Application ID')
+    .option('--start-time <startTime>', 'Start time in milliseconds')
+    .option('--end-time <endTime>', 'End time in milliseconds')
+    .option('--limit <limit>', 'Page size')
+    .option('--cursor <cursor>', 'Pagination cursor')
+    .option('--query <query>', 'Log keyword')
+    .option('--level <level>', 'all, info, warn, or error')
+    .action(async (options, command) => {
+      const runtime = await getRuntime(command);
+      const appId = await requireAppId(runtime.cwd, getDeployAppIdOption(options, command));
+      runtime.output.print(
+        await runtime.client.searchRuntimeLog({
+          app_id: appId,
+          start_time: options.startTime,
+          end_time: options.endTime,
+          limit: options.limit,
+          cursor: options.cursor,
+          query: options.query,
+          level: options.level,
+        }),
+      );
+    });
+
+  deploy
+    .command('build-log')
+    .requiredOption('--deploy-id <deployId>', 'Deployment history ID')
+    .option('--key <key>', 'Deployment log key; inferred when the deployment has one log')
+    .option('--app-id <appId>', 'Application ID')
+    .action(async (options, command) => {
+      const runtime = await getRuntime(command);
+      const appId = await requireAppId(runtime.cwd, getDeployAppIdOption(options, command));
+      let key = _optionalChain([options, 'access', _3 => _3.key, 'optionalAccess', _4 => _4.trim, 'call', _5 => _5()]);
+      if (!key) {
+        const history = await runtime.client.getDeployHistory({
+          app_id: appId,
+          deploy_history_id: options.deployId || '',
+        });
+        const keys = getDeployLogKeys(history);
+        if (keys.length === 0) {
+          throw new CliError(
+            'The deployment has no build log key yet. Retry after deployment stages start.',
+            'BUILD_LOG_NOT_READY',
+          );
+        }
+        if (keys.length > 1) {
+          throw new CliError(
+            'The deployment has multiple build logs. Pass --key using deploy status output.',
+            'BUILD_LOG_KEY_REQUIRED',
+            { available_keys: keys },
+          );
+        }
+        key = keys[0];
+      }
+      if (!key) {
+        throw new CliError('Deployment log key is empty.', 'BUILD_LOG_NOT_READY');
+      }
+      runtime.output.print(
+        await runtime.client.getBuildLog({
+          app_id: appId,
+          deploy_history_id: options.deployId || '',
+          key,
+        }),
+      );
+    });
+
+  deploy
+    .command('config')
+    .option('--app-id <appId>', 'Application ID')
+    .option('--commit-id <commitId>', 'Commit hash')
+    .action(async (options, command) => {
+      const runtime = await getRuntime(command);
+      const appId = await requireAppId(runtime.cwd, getDeployAppIdOption(options, command));
+      const application = await runtime.client.getApplication(appId);
+      const commitHash = options.commitId || _optionalChain([application, 'access', _6 => _6.latest_deployment, 'optionalAccess', _7 => _7.commit_hash]);
+      if (!commitHash) {
+        throw new CliError('No deployment commit is available.', 'DEPLOYMENT_NOT_FOUND');
+      }
+      const applicationType = application.application_type;
+      const cozeFileContent = applicationType === 'pages'
+        ? undefined
+        : (await readProjectMetadata(node_path.resolve(runtime.cwd))).cozeFileContent;
+      runtime.output.print(
+        await runtime.client.getDeployConfig({
+          app_id: appId,
+          commit_hash: commitHash,
+          ...(applicationType === 'pages' ? { application_type: 'pages'  } : {}),
+          ...(cozeFileContent ? { coze_file_content: cozeFileContent } : {}),
+        }),
+      );
+    });
+};
+
+const registerCommands = (program) => {
+  registerAuth(program);
+  registerContext(program);
+  registerDoctor(program);
+
+  // Keep deployment operations directly under `coze-dev deploy` so the common
+  // path is concise: `coze-dev deploy`, `coze-dev deploy status`, etc.
+  registerDeploy(program);
+  registerApp(program);
+  registerDomain(program);
+  registerEnv(program);
+  registerMiniProgram(program);
+
+  // Preserve the original `coze-dev deploy code ...` hierarchy for scripts and
+  // older plugin versions that still rely on it.
+  const code = program.command('code', { hidden: true }).description('Legacy deployment operations');
+  registerApp(code);
+  registerDeploy(code.command('deploy'));
+  registerDomain(code);
+  registerEnv(code);
+  registerMiniProgram(code);
+};
+
+const configureDeployCommand = (command) => {
+  markDeployCommand(command)
+    .description('Deploy and manage Coze applications')
+    .enablePositionalOptions()
+    .option('--format <format>', 'Output format: json or text', 'json')
+    .option('--config <path>', 'Shared Coze CLI config path')
+    .option('--org-id <id>', 'Override organization ID')
+    .option('--space-id <id>', 'Override space ID')
+    .option('--lane <name>', 'Route API requests to the specified PPE lane')
+    .option('--api-base-url <url>', 'Override API base URL')
+    .option('--debug', 'Print debug diagnostics')
+    .showHelpAfterError()
+    .exitOverride();
+  registerCommands(command);
+  return command;
+};
+
+const registerCommand = (program) => {
+  configureDeployCommand(program.command('deploy'));
+};
+
+const readFormat = (argv) => {
+  const index = argv.indexOf('--format');
+  return index >= 0 && argv[index + 1] === 'text' ? 'text' : 'json';
+};
+
+const handleDeployError = (error, argv = process.argv) => {
+  if (
+    error instanceof commander.CommanderError &&
+    ['commander.helpDisplayed', 'commander.version'].includes(error.code)
+  ) {
+    return;
+  }
+  const output = new Output(readFormat(argv), argv.includes('--debug'));
+  output.print({ error: toErrorPayload(error) });
+  process.exitCode = error instanceof commander.CommanderError ? 4 : 1;
+};
+
+const commands = [
+  registerCommand$1,
+  registerCommand$4,
+  registerCommand$7,
+  registerCommand$5,
+  registerCommand$6,
+  registerCommand$3,
+  registerCommand$2,
+  registerCommand,
+];
+
+const main = async () => {
+  // 初始化 Slardar 监控
+  initSlardar();
+
+  // 监听未捕获的异常
+  process.on('uncaughtException', async (error) => {
+    reportError(error, {
+      type: 'uncaughtException',
+      context: 'global',
+    });
+    await flushSlardar();
+    process.exit(1);
+  });
+
+  // 监听未处理的 Promise rejection
+  process.on('unhandledRejection', async (reason) => {
+    const error = reason instanceof Error ? reason : new Error(String(reason));
+    reportError(error, {
+      type: 'unhandledRejection',
+      context: 'global',
+    });
+    await flushSlardar();
+    process.exit(1);
+  });
+
+  const program = new commander.Command();
+
+  program
+    .name('coze-dev')
+    .description(
+      'Coze Coding CLI - Project template engine for frontend stacks',
+    )
+    .version(packageJson.version);
+
+  commands.forEach(initCmd => initCmd(program));
+
+  // 在 help 输出中添加模板信息
+  program.addHelpText('after', generateTemplatesHelpText());
+
+  // 使用 parseAsync 等待命令执行完成
+  try {
+    await program.parseAsync(process.argv);
+  } catch (error) {
+    if (process.argv[2] === 'deploy') {
+      handleDeployError(error);
+    } else {
+      throw error;
+    }
+  }
 
   // 统一在命令执行完成后 flush
   // 注意：如果命令中调用了 process.exit()，不会执行到这里