@coze-arch/cli 0.0.38-alpha.da33e3 → 0.0.39-alpha.bdff32

package/lib/__templates__/nextjs/pnpm-lock.yaml

@@ -111,8 +111,8 @@ importers:
         specifier: ^1.1.1
         version: 1.1.1(@types/react-dom@19.2.3(@types/react@19.2.10))(@types/react@19.2.10)(react-dom@19.2.3(react@19.2.3))(react@19.2.3)
       coze-coding-dev-sdk:
-        specifier: ^0.7.16
-        version: 0.7.16(openai@6.16.0(ws@8.19.0)(zod@4.3.6))(ws@8.19.0)
+        specifier: ^0.7.25
+        version: 0.7.25(openai@6.16.0(ws@8.19.0)(zod@4.3.6))(ws@8.19.0)
       date-fns:
         specifier: ^4.1.0
         version: 4.1.0
@@ -138,8 +138,8 @@ importers:
         specifier: ^0.468.0
         version: 0.468.0(react@19.2.3)
       next:
-        specifier: 16.1.1
-        version: 16.1.1(@babel/core@7.28.6)(@types/node@20.19.30)(react-dom@19.2.3(react@19.2.3))(react@19.2.3)
+        specifier: 16.3.3
+        version: 16.3.3(@babel/core@7.28.6)(@types/node@20.19.30)(react-dom@19.2.3(react@19.2.3))(react@19.2.3)
       next-themes:
         specifier: ^0.4.6
         version: 0.4.6(react-dom@19.2.3(react@19.2.3))(react@19.2.3)
@@ -1434,60 +1434,60 @@ packages:
   '@napi-rs/wasm-runtime@0.2.12':
     resolution: {integrity: sha512-ZVWUcfwY4E/yPitQJl481FjFo3K22D6qF0DuFH6Y/nbnE11GY5uguDxZMGXPQ8WQ0128MXQD7TnfHyK4oWoIJQ==}
 
-  '@next/env@16.1.1':
-    resolution: {integrity: sha512-3oxyM97Sr2PqiVyMyrZUtrtM3jqqFxOQJVuKclDsgj/L728iZt/GyslkN4NwarledZATCenbk4Offjk1hQmaAA==}
+  '@next/env@16.3.3':
+    resolution: {integrity: sha512-U2eYQRwXj+dsqxV79zFqExDdatnNY/ZWc2nsJU1p/OgT7fd3dXwlF6OjYaFQCfMoeTA19PWq+wVmYgimVA+V+g==}
 
   '@next/eslint-plugin-next@16.3.3':
     resolution: {integrity: sha512-pbEh30vvjKpDoTAmo1v3q2uM4JUi8QaEBpbmjWvGfoec2jLghy/WNtvzAT0bk+Ik9oz6etjt4YjXEk4BQnicCw==}
 
-  '@next/swc-darwin-arm64@16.1.1':
-    resolution: {integrity: sha512-JS3m42ifsVSJjSTzh27nW+Igfha3NdBOFScr9C80hHGrWx55pTrVL23RJbqir7k7/15SKlrLHhh/MQzqBBYrQA==}
+  '@next/swc-darwin-arm64@16.3.3':
+    resolution: {integrity: sha512-8Hiv32QJPwdV6KYJ8meR9SBA061tQqnIKTJDocvOXlEQqib0xMFpzArosuffFUUc0sslbh7QQ8a3Yey1QV8EIw==}
     engines: {node: '>= 10'}
     cpu: [arm64]
     os: [darwin]
 
-  '@next/swc-darwin-x64@16.1.1':
-    resolution: {integrity: sha512-hbyKtrDGUkgkyQi1m1IyD3q4I/3m9ngr+V93z4oKHrPcmxwNL5iMWORvLSGAf2YujL+6HxgVvZuCYZfLfb4bGw==}
+  '@next/swc-darwin-x64@16.3.3':
+    resolution: {integrity: sha512-A1lgKgwVchRYmSe467zdwhxT9040dd8lH+o65sL5Jet8fjB4kegw/rDyPIpYVRb6jAqwXFOJpjIXJLxQKLiE3A==}
     engines: {node: '>= 10'}
     cpu: [x64]
     os: [darwin]
 
-  '@next/swc-linux-arm64-gnu@16.1.1':
-    resolution: {integrity: sha512-/fvHet+EYckFvRLQ0jPHJCUI5/B56+2DpI1xDSvi80r/3Ez+Eaa2Yq4tJcRTaB1kqj/HrYKn8Yplm9bNoMJpwQ==}
+  '@next/swc-linux-arm64-gnu@16.3.3':
+    resolution: {integrity: sha512-bf0FIssMFueU2dm7vQEWWxk0c8UjKTdW0yzuh0sQsD8pf1+KCLDdaqhYZNMYGmXwEOiHAUzgBKudovIlcvvBjg==}
     engines: {node: '>= 10'}
     cpu: [arm64]
     os: [linux]
     libc: [glibc]
 
-  '@next/swc-linux-arm64-musl@16.1.1':
-    resolution: {integrity: sha512-MFHrgL4TXNQbBPzkKKur4Fb5ICEJa87HM7fczFs2+HWblM7mMLdco3dvyTI+QmLBU9xgns/EeeINSZD6Ar+oLg==}
+  '@next/swc-linux-arm64-musl@16.3.3':
+    resolution: {integrity: sha512-W7viwCk9JY/cAkdz/A273rd5bb3RgT/IHwR7Upv90tunjBWNtAAhGhoecHh+teRNRSinuAFmE+l7fwZ4YKkrXg==}
     engines: {node: '>= 10'}
     cpu: [arm64]
     os: [linux]
     libc: [musl]
 
-  '@next/swc-linux-x64-gnu@16.1.1':
-    resolution: {integrity: sha512-20bYDfgOQAPUkkKBnyP9PTuHiJGM7HzNBbuqmD0jiFVZ0aOldz+VnJhbxzjcSabYsnNjMPsE0cyzEudpYxsrUQ==}
+  '@next/swc-linux-x64-gnu@16.3.3':
+    resolution: {integrity: sha512-0W46zw1N3ODpI6n0GeivHvvob1pooozgZVqy65k0mh4/7vr+FbY9+WpHzNVXjHipJf/A3FDheBG19H1s5A25rA==}
     engines: {node: '>= 10'}
     cpu: [x64]
     os: [linux]
     libc: [glibc]
 
-  '@next/swc-linux-x64-musl@16.1.1':
-    resolution: {integrity: sha512-9pRbK3M4asAHQRkwaXwu601oPZHghuSC8IXNENgbBSyImHv/zY4K5udBusgdHkvJ/Tcr96jJwQYOll0qU8+fPA==}
+  '@next/swc-linux-x64-musl@16.3.3':
+    resolution: {integrity: sha512-H4mBso8ZTMBPtdT0PN0pBx2ayTvQuTuvS6qT13d77yVFJXAPCxkyIhLTmdMaGTJs0krQYI/qpzdHijCeihXhbg==}
     engines: {node: '>= 10'}
     cpu: [x64]
     os: [linux]
     libc: [musl]
 
-  '@next/swc-win32-arm64-msvc@16.1.1':
-    resolution: {integrity: sha512-bdfQkggaLgnmYrFkSQfsHfOhk/mCYmjnrbRCGgkMcoOBZ4n+TRRSLmT/CU5SATzlBJ9TpioUyBW/vWFXTqQRiA==}
+  '@next/swc-win32-arm64-msvc@16.3.3':
+    resolution: {integrity: sha512-cTMUJpcEGmeywofCUfhR+rSsoE33+rVPnPEYNTNdLNlsOeEg/vktOsKUSTb28vUGqD2jkm4Zaskcwn7OCI6FQg==}
     engines: {node: '>= 10'}
     cpu: [arm64]
     os: [win32]
 
-  '@next/swc-win32-x64-msvc@16.1.1':
-    resolution: {integrity: sha512-Ncwbw2WJ57Al5OX0k4chM68DKhEPlrXBaSXDCi2kPi5f4d8b3ejr3RRJGfKBLrn2YJL5ezNS7w2TZLHSti8CMw==}
+  '@next/swc-win32-x64-msvc@16.3.3':
+    resolution: {integrity: sha512-2VR4cTBzHXaBjnGsuH6GyJjENzQOmHeAh11uY1iUhjm3j5dEUrVJuUj+VL78jaGi/Dik8xS76zEj18BsFhlVZQ==}
     engines: {node: '>= 10'}
     cpu: [x64]
     os: [win32]
@@ -2583,8 +2583,8 @@ packages:
     resolution: {integrity: sha512-Fukw1cUTQ6xdLiHDJhKKPu6svEPaCEDvThqCne3OaQyZvuq2qjhJAd91kJu3PXLG18aooCgYBaB6qQz35hhABg==}
     engines: {node: '>=20.0.0'}
 
-  '@swc/helpers@0.5.15':
-    resolution: {integrity: sha512-JQ5TuMi45Owi4/BIMAJBoSQoOJu12oOk/gADqlcUL9JEdHB8vyjUSsxqeNXnmXHjYKMi2WcYtezGEEhqUI/E2g==}
+  '@swc/helpers@0.5.23':
+    resolution: {integrity: sha512-5lSsMOTXURePglDfvuAQUqkGek9Hg2kksOYay2m0+XR++b2NWYL/4sWyuvVBIs8oKnJaxkdi9whaL/sqN13afw==}
 
   '@tailwindcss/node@4.1.18':
     resolution: {integrity: sha512-DoR7U1P7iYhw16qJ49fgXUlry1t4CpXeErJHnQ44JgTSKMaZUdf17cfn5mHchfJ4KRBZRFA/Coo+MUF5+gOaCQ==}
@@ -3383,8 +3383,8 @@ packages:
       typescript:
         optional: true
 
-  coze-coding-dev-sdk@0.7.16:
-    resolution: {integrity: sha512-B7gRPBa+sfrZL8ur0+F/92SOgZgFaWD/fOnCN2DjthnHSdmCYhAJWCfqzG2oO2vwTiYCXkKUuTBZ3MJLMj886g==}
+  coze-coding-dev-sdk@0.7.25:
+    resolution: {integrity: sha512-5683ngikMdsRW0slGTE2OAZ1Fyj0lhkC4fGNOwsqKc35e68/gtg9KmmtK9CK9SZ+5/oIn/4wLoHXFB0gHJtO2A==}
     engines: {node: '>=18.0.0'}
     hasBin: true
 
@@ -4962,8 +4962,8 @@ packages:
       react: ^16.8 || ^17 || ^18 || ^19 || ^19.0.0-rc
       react-dom: ^16.8 || ^17 || ^18 || ^19 || ^19.0.0-rc
 
-  next@16.1.1:
-    resolution: {integrity: sha512-QI+T7xrxt1pF6SQ/JYFz95ro/mg/1Znk5vBebsWwbpejj1T0A23hO7GYEaVac9QUOT2BIMiuzm0L99ooq7k0/w==}
+  next@16.3.3:
+    resolution: {integrity: sha512-tuRTx1nQ/yVw83cwJBo9F+njGUgMn3UHQycreWHB8XsStvvAh1AthbI8/4IpKnFaF58F+iSiHejYOlMQ/eq83g==}
     engines: {node: '>=20.9.0'}
     hasBin: true
     peerDependencies:
@@ -5288,8 +5288,8 @@ packages:
   postcss-value-parser@4.2.0:
     resolution: {integrity: sha512-1NNCs6uurfkVbeXG4S8JFT9t19m45ICnif8zWLd5oPSZ50QnwMfK+H3jv408d4jw/7Bttv5axS5IiHoLaVNHeQ==}
 
-  postcss@8.4.31:
-    resolution: {integrity: sha512-PS08Iboia9mts/2ygV3eLpY5ghnUcfLV/EXTOW1E2qYxJKGGBUtNjN76FYHnMs36RmARn41bC0AZmn+rR0OVpQ==}
+  postcss@8.5.23:
+    resolution: {integrity: sha512-g50586zr4bZmwFiTlflMu8E0bDTb5I5gertgwAKmsdUlTQIhZtunzUlD1WSzwcVWPoAVpsrA6vlfCD7oXvRwgg==}
     engines: {node: ^10 || ^12 || >=14}
 
   postcss@8.5.6:
@@ -7633,7 +7633,7 @@ snapshots:
       '@tybys/wasm-util': 0.10.1
     optional: true
 
-  '@next/env@16.1.1': {}
+  '@next/env@16.3.3': {}
 
   '@next/eslint-plugin-next@16.3.3(eslint@9.39.2(jiti@2.6.1))':
     dependencies:
@@ -7642,28 +7642,28 @@ snapshots:
     transitivePeerDependencies:
       - eslint
 
-  '@next/swc-darwin-arm64@16.1.1':
+  '@next/swc-darwin-arm64@16.3.3':
     optional: true
 
-  '@next/swc-darwin-x64@16.1.1':
+  '@next/swc-darwin-x64@16.3.3':
     optional: true
 
-  '@next/swc-linux-arm64-gnu@16.1.1':
+  '@next/swc-linux-arm64-gnu@16.3.3':
     optional: true
 
-  '@next/swc-linux-arm64-musl@16.1.1':
+  '@next/swc-linux-arm64-musl@16.3.3':
     optional: true
 
-  '@next/swc-linux-x64-gnu@16.1.1':
+  '@next/swc-linux-x64-gnu@16.3.3':
     optional: true
 
-  '@next/swc-linux-x64-musl@16.1.1':
+  '@next/swc-linux-x64-musl@16.3.3':
     optional: true
 
-  '@next/swc-win32-arm64-msvc@16.1.1':
+  '@next/swc-win32-arm64-msvc@16.3.3':
     optional: true
 
-  '@next/swc-win32-x64-msvc@16.1.1':
+  '@next/swc-win32-x64-msvc@16.3.3':
     optional: true
 
   '@noble/ciphers@1.3.0': {}
@@ -8883,7 +8883,7 @@ snapshots:
       - bufferutil
       - utf-8-validate
 
-  '@swc/helpers@0.5.15':
+  '@swc/helpers@0.5.23':
     dependencies:
       tslib: 2.8.1
 
@@ -9676,7 +9676,7 @@ snapshots:
     optionalDependencies:
       typescript: 5.9.3
 
-  coze-coding-dev-sdk@0.7.16(openai@6.16.0(ws@8.19.0)(zod@4.3.6))(ws@8.19.0):
+  coze-coding-dev-sdk@0.7.25(openai@6.16.0(ws@8.19.0)(zod@4.3.6))(ws@8.19.0):
     dependencies:
       '@langchain/core': 1.1.17(openai@6.16.0(ws@8.19.0)(zod@4.3.6))
       '@langchain/openai': 1.2.3(@langchain/core@1.1.17(openai@6.16.0(ws@8.19.0)(zod@4.3.6)))(ws@8.19.0)
@@ -11288,25 +11288,25 @@ snapshots:
       react: 19.2.3
       react-dom: 19.2.3(react@19.2.3)
 
-  next@16.1.1(@babel/core@7.28.6)(@types/node@20.19.30)(react-dom@19.2.3(react@19.2.3))(react@19.2.3):
+  next@16.3.3(@babel/core@7.28.6)(@types/node@20.19.30)(react-dom@19.2.3(react@19.2.3))(react@19.2.3):
     dependencies:
-      '@next/env': 16.1.1
-      '@swc/helpers': 0.5.15
+      '@next/env': 16.3.3
+      '@swc/helpers': 0.5.23
       baseline-browser-mapping: 2.11.19
       caniuse-lite: 1.0.30001766
-      postcss: 8.4.31
+      postcss: 8.5.23
       react: 19.2.3
       react-dom: 19.2.3(react@19.2.3)
       styled-jsx: 5.1.6(@babel/core@7.28.6)(react@19.2.3)
     optionalDependencies:
-      '@next/swc-darwin-arm64': 16.1.1
-      '@next/swc-darwin-x64': 16.1.1
-      '@next/swc-linux-arm64-gnu': 16.1.1
-      '@next/swc-linux-arm64-musl': 16.1.1
-      '@next/swc-linux-x64-gnu': 16.1.1
-      '@next/swc-linux-x64-musl': 16.1.1
-      '@next/swc-win32-arm64-msvc': 16.1.1
-      '@next/swc-win32-x64-msvc': 16.1.1
+      '@next/swc-darwin-arm64': 16.3.3
+      '@next/swc-darwin-x64': 16.3.3
+      '@next/swc-linux-arm64-gnu': 16.3.3
+      '@next/swc-linux-arm64-musl': 16.3.3
+      '@next/swc-linux-x64-gnu': 16.3.3
+      '@next/swc-linux-x64-musl': 16.3.3
+      '@next/swc-win32-arm64-msvc': 16.3.3
+      '@next/swc-win32-x64-msvc': 16.3.3
       sharp: 0.35.3(@types/node@20.19.30)
     transitivePeerDependencies:
       - '@babel/core'
@@ -11596,7 +11596,7 @@ snapshots:
 
   postcss-value-parser@4.2.0: {}
 
-  postcss@8.4.31:
+  postcss@8.5.23:
     dependencies:
       nanoid: 3.3.18
       picocolors: 1.1.1

package/lib/__templates__/nextjs/scripts/build.ps1

@@ -0,0 +1,16 @@
+$ErrorActionPreference = "Stop"
+
+$workspace = if ($env:COZE_WORKSPACE_PATH) { $env:COZE_WORKSPACE_PATH } else { (Get-Location).Path }
+Set-Location $workspace
+
+Write-Host "Installing dependencies..."
+& pnpm install --prefer-frozen-lockfile --prefer-offline --loglevel debug --reporter=append-only
+if ($LASTEXITCODE -ne 0) { exit $LASTEXITCODE }
+
+Write-Host "Building the Next.js project..."
+& pnpm next build
+if ($LASTEXITCODE -ne 0) { exit $LASTEXITCODE }
+
+Write-Host "Bundling server with tsup..."
+& pnpm tsup src/server.ts --format cjs --platform node --target node20 --outDir dist --no-splitting --no-minify
+exit $LASTEXITCODE

package/lib/__templates__/nextjs/scripts/dev.ps1

@@ -0,0 +1,63 @@
+$ErrorActionPreference = "Stop"
+
+function Get-WorkspacePath {
+  if ($env:COZE_WORKSPACE_PATH) {
+    return $env:COZE_WORKSPACE_PATH
+  }
+  return (Get-Location).Path
+}
+
+function Stop-ProcessTree([int] $processId) {
+  if ($processId -gt 0 -and (Get-Process -Id $processId -ErrorAction SilentlyContinue)) {
+    & taskkill.exe /PID $processId /T /F *> $null
+  }
+}
+
+function Stop-ListeningProcess([int] $port) {
+  $connections = Get-NetTCPConnection -LocalPort $port -State Listen -ErrorAction SilentlyContinue
+  $connections | Select-Object -ExpandProperty OwningProcess -Unique | ForEach-Object {
+    Stop-ProcessTree $_
+  }
+}
+
+$workspace = Get-WorkspacePath
+$defaultPort = <%= port %>
+$port = if ($env:DEPLOY_RUN_PORT) { [int] $env:DEPLOY_RUN_PORT } elseif ($env:PORT) { [int] $env:PORT } else { $defaultPort }
+Set-Location $workspace
+Stop-ListeningProcess $port
+
+<% if (process.env.NODE_ENV === 'test') { %>
+$env:PORT = "$port"
+& pnpm tsx watch src/server.ts
+exit $LASTEXITCODE
+<% } else { %>
+$logDirectory = if ($env:COZE_LOG_DIR) { $env:COZE_LOG_DIR } else { Join-Path $workspace "logs" }
+$logFile = Join-Path $logDirectory "server.log"
+$errorLogFile = Join-Path $logDirectory "server-error.log"
+$pidFile = Join-Path $logDirectory "server.pid"
+New-Item -ItemType Directory -Force -Path $logDirectory | Out-Null
+
+if (Test-Path $pidFile) {
+  Stop-ProcessTree ([int] (Get-Content $pidFile -Raw))
+  Remove-Item $pidFile -Force
+}
+
+$previousPort = $env:PORT
+$env:PORT = "$port"
+try {
+  $process = Start-Process -FilePath $env:ComSpec -ArgumentList @("/d", "/s", "/c", "pnpm tsx watch src/server.ts") -WorkingDirectory $workspace -RedirectStandardOutput $logFile -RedirectStandardError $errorLogFile -PassThru
+} finally {
+  if ($null -eq $previousPort) { Remove-Item Env:PORT -ErrorAction SilentlyContinue } else { $env:PORT = $previousPort }
+}
+
+$process.Id | Set-Content $pidFile
+Start-Sleep -Seconds 1
+if ($process.HasExited) {
+  Get-Content $errorLogFile -Tail 20 -ErrorAction SilentlyContinue
+  Remove-Item $pidFile -Force -ErrorAction SilentlyContinue
+  exit 1
+}
+
+Write-Host "Dev server started (PID: $($process.Id))."
+Write-Host "Log file: $logFile"
+<% } %>

package/lib/__templates__/nextjs/scripts/dev.sh

@@ -7,33 +7,260 @@ PORT="${PORT:-<%= port %>}"
 COZE_WORKSPACE_PATH="${COZE_WORKSPACE_PATH:-$(pwd)}"
 DEPLOY_RUN_PORT="${DEPLOY_RUN_PORT:-${PORT}}"
 <% } else { %>
-PORT=<%= port %>
+PORT="${DEPLOY_RUN_PORT:-${PORT:-<%= port %>}}"
 COZE_WORKSPACE_PATH="${COZE_WORKSPACE_PATH:-$(pwd)}"
 DEPLOY_RUN_PORT="${DEPLOY_RUN_PORT:-${PORT}}"
 <% } %>
 
 cd "${COZE_WORKSPACE_PATH}"
 
+list_port_pids() {
+    local port=$1
+    local pids=""
+    local has_tool=0
+
+    if command -v ss >/dev/null 2>&1; then
+      has_tool=1
+      pids=$(ss -H -lntp 2>/dev/null | awk -v port="${port}" '$4 ~ ":"port"$"' | grep -o 'pid=[0-9]*' | cut -d= -f2 | sort -u | paste -sd' ' - || true)
+    fi
+    if [[ -z "${pids}" ]] && command -v lsof >/dev/null 2>&1; then
+      has_tool=1
+      pids=$(lsof -t -iTCP:"${port}" -sTCP:LISTEN 2>/dev/null | sort -u | paste -sd' ' - || true)
+    fi
+    if [[ "${has_tool}" -eq 0 ]]; then
+      echo "Warning: neither ss nor lsof available, cannot inspect port ${port}." >&2
+    fi
+
+    echo "${pids}"
+}
+
 kill_port_if_listening() {
     local pids
-    pids=$(ss -H -lntp 2>/dev/null | awk -v port="${DEPLOY_RUN_PORT}" '$4 ~ ":"port"$"' | grep -o 'pid=[0-9]*' | cut -d= -f2 | paste -sd' ' - || true)
+    pids=$(list_port_pids "${DEPLOY_RUN_PORT}")
     if [[ -z "${pids}" ]]; then
       echo "Port ${DEPLOY_RUN_PORT} is free."
       return
     fi
     echo "Port ${DEPLOY_RUN_PORT} in use by PIDs: ${pids} (SIGKILL)"
-    echo "${pids}" | xargs -I {} kill -9 {}
+    echo "${pids}" | xargs -I {} kill -9 {} || true
     sleep 1
-    pids=$(ss -H -lntp 2>/dev/null | awk -v port="${DEPLOY_RUN_PORT}" '$4 ~ ":"port"$"' | grep -o 'pid=[0-9]*' | cut -d= -f2 | paste -sd' ' - || true)
+    pids=$(list_port_pids "${DEPLOY_RUN_PORT}")
     if [[ -n "${pids}" ]]; then
-      echo "Warning: port ${DEPLOY_RUN_PORT} still busy after SIGKILL, PIDs: ${pids}"
+      echo "端口 ${DEPLOY_RUN_PORT} 被 PID ${pids} 占用且无法清理（SIGKILL 后仍在监听），dev server 无法启动。" >&2
+      exit 1
+    fi
+    echo "Port ${DEPLOY_RUN_PORT} cleared."
+}
+
+<% if (process.env.NODE_ENV === 'test') { %>
+echo "Clearing port ${DEPLOY_RUN_PORT} before start."
+kill_port_if_listening
+echo "Starting HTTP service on port ${DEPLOY_RUN_PORT} for dev..."
+
+# 测试环境保持服务为前台进程，便于 e2e 收集输出并停止进程。
+exec env PORT="${DEPLOY_RUN_PORT}" pnpm tsx watch src/server.ts
+<% } else { %>
+LOG_DIR="${COZE_LOG_DIR:-${COZE_WORKSPACE_PATH}/logs}"
+LOG_FILE="${LOG_DIR}/app.log"
+PID_FILE="${LOG_DIR}/server.pid"
+
+# detached 出去的进程没人负责回收，超过这个时长就自己退出，避免端口与内存长期泄露。
+MAX_RUNTIME_SECONDS=1200
+
+# 真正被 detach 的是这层 bash wrapper：它是进程组 leader，组内 watchdog 到点回收整组
+# （wrapper -> pnpm -> tsx -> node）；被包的进程自己先退出时也顺手清空进程组，不留残余。
+RUN_WITH_TIMEOUT='
+timeout_seconds=$1
+shift
+
+"$@" &
+child_pid=$!
+
+# 先忽略 TERM，才能在向整组发 TERM（自己也在组里）之后存活下来补一发 KILL。
+( trap "" TERM
+  sleep "${timeout_seconds}"
+  echo "[dev] 后台进程运行超过 ${timeout_seconds}s，回收进程组 $$。"
+  kill -TERM -- "-$$" 2>/dev/null || true
+  sleep 5
+  kill -KILL -- "-$$" 2>/dev/null || true
+) &
+
+wait "${child_pid}"
+kill -KILL -- "-$$" 2>/dev/null || true
+'
+
+# 返回的 PID 是 wrapper 的，同时也是整个进程组的 PGID，后续按组回收。
+spawn_detached() {
+  local cwd="$1"
+  local log_file="$2"
+  shift 2
+
+  node - "$cwd" "$log_file" \
+    /bin/bash -c "${RUN_WITH_TIMEOUT}" detached-runner "${MAX_RUNTIME_SECONDS}" "$@" <<'NODE'
+const fs = require('node:fs');
+const { spawn } = require('node:child_process');
+
+const [cwd, logFile, command, ...args] = process.argv.slice(2);
+if (!cwd || !logFile || !command) {
+  throw new Error('spawn_detached 缺少 cwd、log_file 或 command');
+}
+
+const logFd = fs.openSync(logFile, 'a');
+try {
+  const child = spawn(command, args, {
+    cwd,
+    detached: true,
+    env: process.env,
+    stdio: ['ignore', logFd, logFd],
+  });
+  child.unref();
+  process.stdout.write(String(child.pid));
+} finally {
+  fs.closeSync(logFd);
+}
+NODE
+}
+
+stop_detached() {
+  local pid="${1:-}"
+  if [[ -z "${pid}" ]]; then
+    return
+  fi
+
+  kill -TERM -- "-${pid}" 2>/dev/null || kill -TERM "${pid}" 2>/dev/null || true
+  sleep 1
+  kill -KILL -- "-${pid}" 2>/dev/null || true
+}
+
+READY_RETRIES=10
+READY_PROBE_HOSTS=("127.0.0.1" "::1")
+LOG_TAIL_LINES=40
+
+dump_log() {
+  echo "---- tail -n ${LOG_TAIL_LINES} ${LOG_FILE} ----" >&2
+  tail -n "${LOG_TAIL_LINES}" "${LOG_FILE}" >&2 || true
+  echo "---- end of ${LOG_FILE} ----" >&2
+}
+
+# 仅用于无 ss/lsof 时的兜底探测。服务可能只 bind IPv4 loopback、只 bind IPv6 loopback
+# （server.listen(port, 'localhost') 会变成 ::1 独占），或 bind 双栈通配地址，
+port_connectable() {
+  local port=$1
+  local host
+  for host in "${READY_PROBE_HOSTS[@]}"; do
+    if command -v nc >/dev/null 2>&1; then
+      if nc -z -w 1 "${host}" "${port}" >/dev/null 2>&1; then
+        return 0
+      fi
+    elif (exec 3<>"/dev/tcp/${host}/${port}") >/dev/null 2>&1; then
+      return 0
+    fi
+  done
+  return 1
+}
+
+port_probe_available() {
+  command -v ss >/dev/null 2>&1 || command -v lsof >/dev/null 2>&1
+}
+
+# 端口监听者是否属于本进程组：spawn detached 后 PID == PGID，子孙进程继承该 PGID。
+#   0 = 是；1 = 不是（无人监听，或监听者不属于本进程组）；2 = 无探测工具，无法判断
+port_listened_by_pgid() {
+  local port=$1 pgid=$2
+  local listener owner
+
+  if ! port_probe_available; then
+    return 2
+  fi
+
+  for listener in $(list_port_pids "${port}" 2>/dev/null); do
+    owner=$(ps -o pgid= -p "${listener}" 2>/dev/null | tr -d ' ')
+    if [[ "${owner}" == "${pgid}" ]]; then
+      return 0
+    fi
+  done
+  return 1
+}
+
+wait_for_ready() {
+  local pid=$1 port=$2
+  local attempt=0 owned
+
+  if ! port_probe_available; then
+    echo "Warning: 缺少 ss 与 lsof，无法确认端口监听者归属，仅按 loopback 可连接性判断就绪。" >&2
+  fi
+
+  while [[ "${attempt}" -lt "${READY_RETRIES}" ]]; do
+    if ! kill -0 "${pid}" 2>/dev/null; then
+      echo "Dev server 进程在启动过程中退出。" >&2
+      return 1
+    fi
+
+    if port_listened_by_pgid "${port}" "${pid}"; then
+      owned=0
     else
-      echo "Port ${DEPLOY_RUN_PORT} cleared."
+      owned=$?
     fi
+    if [[ "${owned}" -eq 0 ]]; then
+      return 0
+    fi
+    if [[ "${owned}" -eq 2 ]] && port_connectable "${port}"; then
+      return 0
+    fi
+
+    sleep 1
+    attempt=$((attempt + 1))
+  done
+
+  return 2
 }
 
+# 监听端口的是孙进程（pnpm -> tsx -> node），只清端口会漏掉上层 pnpm/tsx，
+# 所以先按上次记录的 PID 把整个进程组回收掉。
+if [[ -f "${PID_FILE}" ]]; then
+  stop_detached "$(cat "${PID_FILE}" 2>/dev/null || true)"
+  rm -f "${PID_FILE}"
+fi
+
 echo "Clearing port ${DEPLOY_RUN_PORT} before start."
 kill_port_if_listening
 echo "Starting HTTP service on port ${DEPLOY_RUN_PORT} for dev..."
 
-PORT=${DEPLOY_RUN_PORT} pnpm tsx watch src/server.ts
+mkdir -p "${LOG_DIR}"
+: > "${LOG_FILE}"
+
+export PORT="${DEPLOY_RUN_PORT}"
+server_pid="$(spawn_detached "${COZE_WORKSPACE_PATH}" "${LOG_FILE}" \
+  "$(command -v pnpm)" tsx watch src/server.ts)"
+if [[ -z "${server_pid}" ]]; then
+  echo "Dev server failed to start: 未获取到后台进程 PID。" >&2
+  dump_log
+  exit 1
+fi
+echo "${server_pid}" > "${PID_FILE}"
+
+if wait_for_ready "${server_pid}" "${DEPLOY_RUN_PORT}"; then
+  ready_status=0
+else
+  ready_status=$?
+fi
+
+if [[ "${ready_status}" -ne 0 ]]; then
+  if [[ "${ready_status}" -eq 2 ]]; then
+    # 进程还活着但迟迟没监听端口：多半是编译/运行时报错后 tsx watch 驻留，日志里有真正原因。
+    echo "Dev server 在 ${READY_RETRIES} 次探测（每次 1s）内未就绪于端口 ${DEPLOY_RUN_PORT}（进程 ${server_pid} 仍在运行，已回收）。" >&2
+  else
+    echo "Dev server failed to start. See ${LOG_FILE}." >&2
+  fi
+  # 先 dump 再回收，避免 kill 的输出混进日志尾部；exit 1 意味着不留下任何后台进程。
+  dump_log
+  stop_detached "${server_pid}"
+  rm -f "${PID_FILE}"
+  exit 1
+fi
+
+echo "Dev server started (PID: ${server_pid}), listening on port ${DEPLOY_RUN_PORT}."
+echo "Auto stop after ${MAX_RUNTIME_SECONDS}s."
+echo "Log file: ${LOG_FILE}"
+echo "PID file: ${PID_FILE}"
+<% } %>

package/lib/__templates__/nextjs/scripts/prepare.ps1

@@ -0,0 +1,18 @@
+$ErrorActionPreference = "Stop"
+
+$workspace = if ($env:COZE_WORKSPACE_PATH) { $env:COZE_WORKSPACE_PATH } else { (Get-Location).Path }
+Set-Location $workspace
+
+Write-Host "Installing dependencies..."
+& pnpm install --prefer-frozen-lockfile --prefer-offline --loglevel debug --reporter=append-only
+if ($LASTEXITCODE -ne 0) {
+  exit $LASTEXITCODE
+}
+
+if (Get-Command coze-dev -ErrorAction SilentlyContinue) {
+  & coze-dev check-bins --help *> $null
+  if ($LASTEXITCODE -eq 0) {
+    & coze-dev check-bins --fix
+    exit $LASTEXITCODE
+  }
+}

package/lib/__templates__/nextjs/scripts/start.ps1

@@ -0,0 +1,11 @@
+$ErrorActionPreference = "Stop"
+
+$workspace = if ($env:COZE_WORKSPACE_PATH) { $env:COZE_WORKSPACE_PATH } else { (Get-Location).Path }
+$defaultPort = <%= port %>
+$port = if ($env:DEPLOY_RUN_PORT) { $env:DEPLOY_RUN_PORT } elseif ($env:PORT) { $env:PORT } else { $defaultPort }
+Set-Location $workspace
+
+Write-Host "Starting HTTP service on port $port for deploy..."
+$env:PORT = "$port"
+& node dist/server.js
+exit $LASTEXITCODE

package/lib/__templates__/nextjs/scripts/validate.ps1

@@ -0,0 +1,8 @@
+$ErrorActionPreference = "Stop"
+
+$workspace = if ($env:COZE_WORKSPACE_PATH) { $env:COZE_WORKSPACE_PATH } else { (Get-Location).Path }
+Set-Location $workspace
+
+Write-Host "Running validate..."
+& pnpm validate
+exit $LASTEXITCODE

package/lib/__templates__/nextjs/template.config.js

@@ -3,6 +3,7 @@
 import { spawn } from 'child_process';
 import { resolve, join, basename } from 'path';
 import { appendFileSync, openSync, closeSync, mkdirSync } from 'fs';
+import { homedir } from 'os';
 
 
 
@@ -65,7 +66,7 @@ const config = {
     }
 
     const cmd = 'pnpm';
-    const args = ['update', 'coze-coding-dev-sdk@^0.7.0'];
+    const args = ['update', 'coze-coding-dev-sdk@^0.7.25'];
     console.log(
       `\nTriggering: ${cmd} ${args.join(' ')} (running in background)`,
     );
@@ -74,7 +75,8 @@ const config = {
       const projectRoot = resolve(outputPath);
 
       // Determine log directory
-      const logDir = process.env.COZE_LOG_DIR || resolve(__dirname, '../.log');
+      const cozeHome = process.env.COZE_HOME || join(homedir(), '.coze');
+      const logDir = process.env.COZE_LOG_DIR || join(cozeHome, 'logs');
       mkdirSync(logDir, { recursive: true });
 
       // Use project name in log file to avoid conflicts