@coze-arch/cli 0.1.4-alpha.e6e18e → 0.1.4-alpha.f69bb1

package/lib/__templates__/nextjs/scripts/build.ps1

@@ -8,7 +8,7 @@ Write-Host "Installing dependencies..."
 if ($LASTEXITCODE -ne 0) { exit $LASTEXITCODE }
 
 Write-Host "Building the Next.js project..."
-& pnpm next build
+& pnpm next build --webpack
 if ($LASTEXITCODE -ne 0) { exit $LASTEXITCODE }
 
 Write-Host "Bundling server with tsup..."

package/lib/__templates__/nextjs/scripts/build.sh

@@ -6,10 +6,11 @@ COZE_WORKSPACE_PATH="${COZE_WORKSPACE_PATH:-$(pwd)}"
 cd "${COZE_WORKSPACE_PATH}"
 
 echo "Installing dependencies..."
-pnpm install --prefer-frozen-lockfile --prefer-offline --loglevel debug --reporter=append-only
+bash "$COZE_WORKSPACE_PATH/scripts/prepare-node-modules.sh" --prefer-frozen-lockfile --prefer-offline --loglevel debug --reporter=append-only
+bash "$COZE_WORKSPACE_PATH/scripts/prepare-next-output.sh"
 
 echo "Building the Next.js project..."
-pnpm next build
+pnpm next build --webpack
 
 echo "Bundling server with tsup..."
 pnpm tsup src/server.ts --format cjs --platform node --target node20 --outDir dist --no-splitting --no-minify

package/lib/__templates__/nextjs/scripts/dev.ps1

@@ -28,7 +28,7 @@ Stop-ListeningProcess $port
 
 <% if (process.env.NODE_ENV === 'test') { %>
 $env:PORT = "$port"
-& pnpm tsx watch src/server.ts
+& pnpm tsx watch --ignore .next src/server.ts
 exit $LASTEXITCODE
 <% } else { %>
 $logDirectory = if ($env:COZE_LOG_DIR) { $env:COZE_LOG_DIR } else { Join-Path $workspace "logs" }
@@ -45,7 +45,7 @@ if (Test-Path $pidFile) {
 $previousPort = $env:PORT
 $env:PORT = "$port"
 try {
-  $process = Start-Process -FilePath $env:ComSpec -ArgumentList @("/d", "/s", "/c", "pnpm tsx watch src/server.ts") -WorkingDirectory $workspace -RedirectStandardOutput $logFile -RedirectStandardError $errorLogFile -PassThru
+  $process = Start-Process -FilePath $env:ComSpec -ArgumentList @("/d", "/s", "/c", "pnpm tsx watch --ignore .next src/server.ts") -WorkingDirectory $workspace -RedirectStandardOutput $logFile -RedirectStandardError $errorLogFile -PassThru
 } finally {
   if ($null -eq $previousPort) { Remove-Item Env:PORT -ErrorAction SilentlyContinue } else { $env:PORT = $previousPort }
 }

package/lib/__templates__/nextjs/scripts/dev.sh

@@ -55,10 +55,12 @@ kill_port_if_listening() {
 <% if (process.env.NODE_ENV === 'test') { %>
 echo "Clearing port ${DEPLOY_RUN_PORT} before start."
 kill_port_if_listening
+bash "${COZE_WORKSPACE_PATH}/scripts/prepare-node-modules.sh" --prefer-frozen-lockfile --prefer-offline --loglevel debug --reporter=append-only
+bash "${COZE_WORKSPACE_PATH}/scripts/prepare-next-output.sh"
 echo "Starting HTTP service on port ${DEPLOY_RUN_PORT} for dev..."
 
 # 测试环境保持服务为前台进程，便于 e2e 收集输出并停止进程。
-exec env PORT="${DEPLOY_RUN_PORT}" pnpm tsx watch src/server.ts
+exec env PORT="${DEPLOY_RUN_PORT}" pnpm tsx src/server.ts
 <% } else { %>
 LOG_DIR="${COZE_LOG_DIR:-${COZE_WORKSPACE_PATH}/logs}"
 LOG_FILE="${LOG_DIR}/app.log"
@@ -77,6 +79,7 @@ shift
 child_pid=$!
 
 # 先忽略 TERM，才能在向整组发 TERM（自己也在组里）之后存活下来补一发 KILL。
+if [[ -z "${COZE_EVAL:-}" && -z "${COZE_PROJECT_TYPE:-}" ]]; then
 ( trap "" TERM
   sleep "${timeout_seconds}"
   echo "[dev] 后台进程运行超过 ${timeout_seconds}s，回收进程组 $$。"
@@ -84,6 +87,7 @@ child_pid=$!
   sleep 5
   kill -KILL -- "-$$" 2>/dev/null || true
 ) &
+fi
 
 wait "${child_pid}"
 kill -KILL -- "-$$" 2>/dev/null || true
@@ -132,7 +136,7 @@ stop_detached() {
   kill -KILL -- "-${pid}" 2>/dev/null || true
 }
 
-READY_RETRIES=10
+READY_RETRIES=30
 READY_PROBE_HOSTS=("127.0.0.1" "::1")
 LOG_TAIL_LINES=40
 
@@ -224,6 +228,8 @@ fi
 
 echo "Clearing port ${DEPLOY_RUN_PORT} before start."
 kill_port_if_listening
+bash "${COZE_WORKSPACE_PATH}/scripts/prepare-node-modules.sh" --prefer-frozen-lockfile --prefer-offline --loglevel debug --reporter=append-only
+bash "${COZE_WORKSPACE_PATH}/scripts/prepare-next-output.sh"
 echo "Starting HTTP service on port ${DEPLOY_RUN_PORT} for dev..."
 
 mkdir -p "${LOG_DIR}"
@@ -231,7 +237,7 @@ mkdir -p "${LOG_DIR}"
 
 export PORT="${DEPLOY_RUN_PORT}"
 server_pid="$(spawn_detached "${COZE_WORKSPACE_PATH}" "${LOG_FILE}" \
-  "$(command -v pnpm)" tsx watch src/server.ts)"
+  "$(command -v pnpm)" tsx src/server.ts)"
 if [[ -z "${server_pid}" ]]; then
   echo "Dev server failed to start: 未获取到后台进程 PID。" >&2
   dump_log
@@ -247,8 +253,7 @@ fi
 
 if [[ "${ready_status}" -ne 0 ]]; then
   if [[ "${ready_status}" -eq 2 ]]; then
-    # 进程还活着但迟迟没监听端口：多半是编译/运行时报错后 tsx watch 驻留，日志里有真正原因。
-    echo "Dev server 在 ${READY_RETRIES} 次探测（每次 1s）内未就绪于端口 ${DEPLOY_RUN_PORT}（进程 ${server_pid} 仍在运行，已回收）。" >&2
+    echo "Dev server did not listen on port ${DEPLOY_RUN_PORT} after ${READY_RETRIES} attempts; stopping PID ${server_pid}." >&2
   else
     echo "Dev server failed to start. See ${LOG_FILE}." >&2
   fi

package/lib/__templates__/nextjs/scripts/prepare-next-output.sh

@@ -0,0 +1,62 @@
+#!/usr/bin/env bash
+# Keep Next.js compiler output off Coze Drive while leaving source files in place.
+set -euo pipefail
+
+SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd -P)"
+PROJECT_ROOT="$(cd "$SCRIPT_DIR/.." && pwd -P)"
+
+DRIVE_ROOT="${COZE_DRIVE_ROOT:-/Coze/Drive}"
+if [ -d "$DRIVE_ROOT" ]; then
+  DRIVE_ROOT="$(cd "$DRIVE_ROOT" && pwd -P)"
+else
+  DRIVE_ROOT="${DRIVE_ROOT%/}"
+fi
+case "$PROJECT_ROOT" in
+  "$DRIVE_ROOT"|"$DRIVE_ROOT"/*) ;;
+  *) exit 0 ;;
+esac
+
+NM_ROOT="/tmp/nm"
+PROJECT_ID="$(basename "$PROJECT_ROOT")-$(printf '%s' "$PROJECT_ROOT" | cksum | awk '{print $1}')"
+NEXT_DIR="$NM_ROOT/$PROJECT_ID/.next"
+LEGACY_NEXT_DIR="$NM_ROOT/next/$PROJECT_ID"
+
+if [ -L "$NEXT_DIR" ]; then
+  current="$(readlink "$NEXT_DIR")"
+  if [ "$current" = "$PROJECT_ROOT/.next" ]; then
+    rm "$NEXT_DIR"
+  else
+    echo "[next] refusing to replace unmanaged local output symlink: $NEXT_DIR" >&2
+    exit 1
+  fi
+elif [ -e "$NEXT_DIR" ] && [ ! -d "$NEXT_DIR" ]; then
+  echo "[next] local output path is not a directory: $NEXT_DIR" >&2
+  exit 1
+fi
+mkdir -p "$NEXT_DIR"
+
+if [ -L "$PROJECT_ROOT/.next" ]; then
+  current="$(readlink "$PROJECT_ROOT/.next")"
+  if [ "$current" = "$NEXT_DIR" ]; then
+    exit 0
+  fi
+  if [ "$current" = "$LEGACY_NEXT_DIR" ]; then
+    rm "$PROJECT_ROOT/.next"
+  else
+    echo "[next] refusing to replace unmanaged symlink: $PROJECT_ROOT/.next" >&2
+    exit 1
+  fi
+fi
+
+if [ -e "$PROJECT_ROOT/.next" ]; then
+  rm -rf "$PROJECT_ROOT/.next"
+fi
+
+if ! ln -s "$NEXT_DIR" "$PROJECT_ROOT/.next"; then
+  if [ ! -L "$PROJECT_ROOT/.next" ] || [ "$(readlink "$PROJECT_ROOT/.next")" != "$NEXT_DIR" ]; then
+    echo "[next] failed to link $PROJECT_ROOT/.next to $NEXT_DIR" >&2
+    exit 1
+  fi
+fi
+
+echo "[next] Compiler output ready at $NEXT_DIR"

package/lib/__templates__/nextjs/scripts/prepare-node-modules.sh

@@ -0,0 +1,114 @@
+#!/usr/bin/env bash
+# Install dependencies on local disk and expose them to the source tree by symlink.
+set -euo pipefail
+
+SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd -P)"
+if [ "$(basename "$(dirname "$SCRIPT_DIR")")" = ".cozeproj" ]; then
+  PROJECT_ROOT="$(cd "$SCRIPT_DIR/../.." && pwd -P)"
+else
+  PROJECT_ROOT="$(cd "$SCRIPT_DIR/.." && pwd -P)"
+fi
+
+command -v pnpm >/dev/null 2>&1 || {
+  echo "[node_modules] pnpm is required" >&2
+  exit 1
+}
+
+DRIVE_ROOT="${COZE_DRIVE_ROOT:-/Coze/Drive}"
+if [ -d "$DRIVE_ROOT" ]; then
+  DRIVE_ROOT="$(cd "$DRIVE_ROOT" && pwd -P)"
+else
+  DRIVE_ROOT="${DRIVE_ROOT%/}"
+fi
+case "$PROJECT_ROOT" in
+  "$DRIVE_ROOT"|"$DRIVE_ROOT"/*) ;;
+  *)
+    (cd "$PROJECT_ROOT" && pnpm install "$@")
+    exit 0
+    ;;
+esac
+
+NM_ROOT="/tmp/nm"
+PROJECT_ID="$(basename "$PROJECT_ROOT")-$(printf '%s' "$PROJECT_ROOT" | cksum | awk '{print $1}')"
+mkdir -p "$NM_ROOT"
+WORK_DIR="$NM_ROOT/$PROJECT_ID"
+case "$WORK_DIR" in
+  "$DRIVE_ROOT"|"$DRIVE_ROOT"/*)
+    echo "[node_modules] local dependency directory must not be on Coze Drive: $WORK_DIR" >&2
+    exit 1
+    ;;
+esac
+
+LOCK_DIR="$NM_ROOT/$PROJECT_ID.lock"
+while ! mkdir "$LOCK_DIR" 2>/dev/null; do
+  echo "[node_modules] Waiting for another dependency preparation for this project..."
+  sleep 1
+done
+trap 'rmdir "$LOCK_DIR" 2>/dev/null || true' EXIT
+
+mkdir -p "$WORK_DIR"
+
+# Previous versions mirrored the whole project into WORK_DIR. That gives pnpm
+# and framework dev servers two paths for the same source tree, which breaks
+# file watching and on-demand compilation. Keep only managed local outputs.
+cleanup_legacy_workspace() {
+  local workspace_dir="$1" entry name
+  if [ -L "$workspace_dir" ] || { [ -e "$workspace_dir" ] && [ ! -d "$workspace_dir" ]; }; then
+    rm -rf "$workspace_dir"
+    return
+  fi
+  [ -d "$workspace_dir" ] || return
+
+  while IFS= read -r -d '' entry; do
+    name="$(basename "$entry")"
+    [ "$name" = "node_modules" ] || rm -rf "$entry"
+  done < <(find "$workspace_dir" -mindepth 1 -maxdepth 1 -print0)
+}
+
+cleanup_legacy_shadow_project() {
+  local entry name
+  while IFS= read -r -d '' entry; do
+    name="$(basename "$entry")"
+    case "$name" in
+      node_modules|.next|client|server) continue ;;
+    esac
+    rm -rf "$entry"
+  done < <(find "$WORK_DIR" -mindepth 1 -maxdepth 1 -print0)
+
+  for workspace in client server; do
+    cleanup_legacy_workspace "$WORK_DIR/$workspace"
+  done
+}
+
+link_node_modules() {
+  local source_dir="$1" target_dir="$2"
+  local current=""
+  mkdir -p "$target_dir"
+  if [ -L "$source_dir/node_modules" ]; then
+    current="$(readlink "$source_dir/node_modules")"
+    case "$current" in
+      "$NM_ROOT"/*/node_modules|"$NM_ROOT"/*/*/node_modules) ;;
+      *)
+        echo "[node_modules] refusing to replace unmanaged symlink: $source_dir/node_modules" >&2
+        exit 1
+        ;;
+    esac
+    rm "$source_dir/node_modules"
+  elif [ -e "$source_dir/node_modules" ]; then
+    rm -rf "$source_dir/node_modules"
+  fi
+  ln -s "$target_dir" "$source_dir/node_modules"
+}
+
+cleanup_legacy_shadow_project
+link_node_modules "$PROJECT_ROOT" "$WORK_DIR/node_modules"
+for workspace in client server; do
+  if [ -f "$PROJECT_ROOT/$workspace/package.json" ]; then
+    link_node_modules "$PROJECT_ROOT/$workspace" "$WORK_DIR/$workspace/node_modules"
+  fi
+done
+
+echo "[node_modules] Installing dependencies for $PROJECT_ROOT with node_modules at $WORK_DIR"
+(cd "$PROJECT_ROOT" && pnpm install "$@")
+
+echo "[node_modules] Dependencies ready"

package/lib/__templates__/nextjs/scripts/prepare.sh

@@ -6,7 +6,4 @@ COZE_WORKSPACE_PATH="${COZE_WORKSPACE_PATH:-$(pwd)}"
 cd "${COZE_WORKSPACE_PATH}"
 
 echo "Installing dependencies..."
-pnpm install --prefer-frozen-lockfile --prefer-offline --loglevel debug --reporter=append-only
-if command -v coze-dev > /dev/null 2>&1 && coze-dev check-bins --help > /dev/null 2>&1; then
-  coze-dev check-bins --fix
-fi
+bash "$COZE_WORKSPACE_PATH/scripts/prepare-node-modules.sh" --prefer-frozen-lockfile --prefer-offline --loglevel debug --reporter=append-only

package/lib/__templates__/nextjs/src/app/layout.tsx

@@ -1,5 +1,4 @@
 import type { Metadata } from 'next';
-import { Inspector } from 'react-dev-inspector';
 import './globals.css';
 
 export const metadata: Metadata = {
@@ -61,12 +60,9 @@ export default function RootLayout({
 }: Readonly<{
   children: React.ReactNode;
 }>) {
-  const isDev = process.env.COZE_PROJECT_ENV === 'DEV';
-
   return (
     <html lang="en">
       <body className={`antialiased`}>
-        {isDev && <Inspector />}
         {children}
       </body>
     </html>

package/lib/__templates__/nextjs/src/server.ts

@@ -7,7 +7,7 @@ const hostname = process.env.HOSTNAME || 'localhost';
 const port = parseInt(process.env.PORT || '<%= port %>', 10);
 
 // Create Next.js app
-const app = next({ dev, hostname, port });
+const app = next({ dev, hostname, port, webpack: true });
 const handle = app.getRequestHandler();
 
 app.prepare().then(() => {

package/lib/__templates__/nextjs/template.config.js

@@ -1,9 +1,5 @@
 
 
-import { spawn } from 'child_process';
-import { resolve, join, basename } from 'path';
-import { appendFileSync, openSync, closeSync, mkdirSync } from 'fs';
-import { homedir } from 'os';
 
 
 
@@ -57,61 +53,6 @@ const config = {
   onAfterRender: async (_context, _outputPath) => {
     // 输出由 init 命令统一处理
   },
-
-  onComplete: async (_context, outputPath) => {
-    // Skip pnpm update in test environment to avoid monorepo workspace issues
-    if (process.env.NODE_ENV === 'test') {
-      console.log('⊘ Skipping dependency update in test environment');
-      return;
-    }
-
-    const cmd = 'pnpm';
-    const args = ['update', 'coze-coding-dev-sdk@^0.7.25'];
-    console.log(
-      `\nTriggering: ${cmd} ${args.join(' ')} (running in background)`,
-    );
-
-    try {
-      const projectRoot = resolve(outputPath);
-
-      // Determine log directory
-      const cozeHome = process.env.COZE_HOME || join(homedir(), '.coze');
-      const logDir = process.env.COZE_LOG_DIR || join(cozeHome, 'logs');
-      mkdirSync(logDir, { recursive: true });
-
-      // Use project name in log file to avoid conflicts
-      const projectName = basename(projectRoot);
-      const logFile = join(logDir, `${projectName}-init.log`);
-
-      // Write log header
-      const timestamp = new Date().toISOString();
-      appendFileSync(
-        logFile,
-        `\n=== [${timestamp}] ${cmd} ${args.join(' ')} ===\n`,
-      );
-
-      // Open log file for appending
-      const logFd = openSync(logFile, 'a');
-
-      // Spawn in detached mode
-      const child = spawn(cmd, args, {
-        cwd: projectRoot,
-        detached: true,
-        stdio: ['ignore', logFd, logFd],
-      });
-
-      child.unref();
-      closeSync(logFd);
-
-      console.log(
-        '✓ coze-coding-dev-sdk update triggered (running in background)',
-      );
-      console.log(`  Log file: ${logFile}`);
-    } catch (error) {
-      console.error('✗ Failed to trigger coze-coding-dev-sdk update:', error);
-      console.log('  You can manually run: pnpm update coze-coding-dev-sdk');
-    }
-  },
 };
 
 export default config;

package/lib/__templates__/nuxt-vue/package.json

@@ -27,7 +27,7 @@
     "@nuxtjs/tailwindcss": "^6.14.0",
     "@types/node": "^20",
     "autoprefixer": "^10.4.20",
-    "coze-coding-dev-sdk": "^0.7.25",
+    "coze-coding-dev-sdk": "^0.7.28",
     "eslint": "^9",
     "eslint-plugin-import": "^2.32.0",
     "eslint-plugin-vue": "^10",

package/lib/__templates__/nuxt-vue/pnpm-lock.yaml

@@ -34,8 +34,8 @@ importers:
         specifier: ^10.4.20
         version: 10.4.27(postcss@8.5.8)
       coze-coding-dev-sdk:
-        specifier: ^0.7.25
-        version: 0.7.25(openai@6.27.0(ws@8.21.3)(zod@4.3.6))(ws@8.21.3)
+        specifier: ^0.7.28
+        version: 0.7.28(openai@6.27.0(ws@8.21.3)(zod@4.3.6))(ws@8.21.3)
       eslint:
         specifier: ^9
         version: 9.39.4(jiti@2.7.0)
@@ -2498,8 +2498,8 @@ packages:
       typescript:
         optional: true
 
-  coze-coding-dev-sdk@0.7.25:
-    resolution: {integrity: sha512-5683ngikMdsRW0slGTE2OAZ1Fyj0lhkC4fGNOwsqKc35e68/gtg9KmmtK9CK9SZ+5/oIn/4wLoHXFB0gHJtO2A==}
+  coze-coding-dev-sdk@0.7.28:
+    resolution: {integrity: sha512-ku7AiVWUmgCrUuMT1m2iTmHIwG39EfmcAhPASd8M7XyKxIC6A1cjIIe/3YpStRsj8pMF9LU+pxHWxisf+F44oQ==}
     engines: {node: '>=18.0.0'}
     hasBin: true
 
@@ -8526,7 +8526,7 @@ snapshots:
     optionalDependencies:
       typescript: 5.9.3
 
-  coze-coding-dev-sdk@0.7.25(openai@6.27.0(ws@8.21.3)(zod@4.3.6))(ws@8.21.3):
+  coze-coding-dev-sdk@0.7.28(openai@6.27.0(ws@8.21.3)(zod@4.3.6))(ws@8.21.3):
     dependencies:
       '@langchain/core': 1.1.31(openai@6.27.0(ws@8.21.3)(zod@4.3.6))
       '@langchain/openai': 1.2.12(@langchain/core@1.1.31(openai@6.27.0(ws@8.21.3)(zod@4.3.6)))(ws@8.21.3)

package/lib/__templates__/nuxt-vue/scripts/build.sh

@@ -6,7 +6,7 @@ COZE_WORKSPACE_PATH="${COZE_WORKSPACE_PATH:-$(pwd)}"
 cd "${COZE_WORKSPACE_PATH}"
 
 echo "Installing dependencies..."
-pnpm install --prefer-frozen-lockfile --prefer-offline --loglevel debug --reporter=append-only
+bash "$COZE_WORKSPACE_PATH/scripts/prepare-node-modules.sh" --prefer-frozen-lockfile --prefer-offline --loglevel debug --reporter=append-only
 
 echo "Building the Nuxt.js project..."
 pnpm nuxt build

package/lib/__templates__/nuxt-vue/scripts/dev.sh

@@ -77,6 +77,7 @@ shift
 child_pid=$!
 
 # 先忽略 TERM，才能在向整组发 TERM（自己也在组里）之后存活下来补一发 KILL。
+if [[ -z "${COZE_EVAL:-}" && -z "${COZE_PROJECT_TYPE:-}" ]]; then
 ( trap "" TERM
   sleep "${timeout_seconds}"
   echo "[dev] 后台进程运行超过 ${timeout_seconds}s，回收进程组 $$。"
@@ -84,6 +85,7 @@ child_pid=$!
   sleep 5
   kill -KILL -- "-$$" 2>/dev/null || true
 ) &
+fi
 
 wait "${child_pid}"
 kill -KILL -- "-$$" 2>/dev/null || true

package/lib/__templates__/nuxt-vue/scripts/prepare-node-modules.sh

@@ -0,0 +1,114 @@
+#!/usr/bin/env bash
+# Install dependencies on local disk and expose them to the source tree by symlink.
+set -euo pipefail
+
+SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd -P)"
+if [ "$(basename "$(dirname "$SCRIPT_DIR")")" = ".cozeproj" ]; then
+  PROJECT_ROOT="$(cd "$SCRIPT_DIR/../.." && pwd -P)"
+else
+  PROJECT_ROOT="$(cd "$SCRIPT_DIR/.." && pwd -P)"
+fi
+
+command -v pnpm >/dev/null 2>&1 || {
+  echo "[node_modules] pnpm is required" >&2
+  exit 1
+}
+
+DRIVE_ROOT="${COZE_DRIVE_ROOT:-/Coze/Drive}"
+if [ -d "$DRIVE_ROOT" ]; then
+  DRIVE_ROOT="$(cd "$DRIVE_ROOT" && pwd -P)"
+else
+  DRIVE_ROOT="${DRIVE_ROOT%/}"
+fi
+case "$PROJECT_ROOT" in
+  "$DRIVE_ROOT"|"$DRIVE_ROOT"/*) ;;
+  *)
+    (cd "$PROJECT_ROOT" && pnpm install "$@")
+    exit 0
+    ;;
+esac
+
+NM_ROOT="/tmp/nm"
+PROJECT_ID="$(basename "$PROJECT_ROOT")-$(printf '%s' "$PROJECT_ROOT" | cksum | awk '{print $1}')"
+mkdir -p "$NM_ROOT"
+WORK_DIR="$NM_ROOT/$PROJECT_ID"
+case "$WORK_DIR" in
+  "$DRIVE_ROOT"|"$DRIVE_ROOT"/*)
+    echo "[node_modules] local dependency directory must not be on Coze Drive: $WORK_DIR" >&2
+    exit 1
+    ;;
+esac
+
+LOCK_DIR="$NM_ROOT/$PROJECT_ID.lock"
+while ! mkdir "$LOCK_DIR" 2>/dev/null; do
+  echo "[node_modules] Waiting for another dependency preparation for this project..."
+  sleep 1
+done
+trap 'rmdir "$LOCK_DIR" 2>/dev/null || true' EXIT
+
+mkdir -p "$WORK_DIR"
+
+# Previous versions mirrored the whole project into WORK_DIR. That gives pnpm
+# and framework dev servers two paths for the same source tree, which breaks
+# file watching and on-demand compilation. Keep only managed local outputs.
+cleanup_legacy_workspace() {
+  local workspace_dir="$1" entry name
+  if [ -L "$workspace_dir" ] || { [ -e "$workspace_dir" ] && [ ! -d "$workspace_dir" ]; }; then
+    rm -rf "$workspace_dir"
+    return
+  fi
+  [ -d "$workspace_dir" ] || return
+
+  while IFS= read -r -d '' entry; do
+    name="$(basename "$entry")"
+    [ "$name" = "node_modules" ] || rm -rf "$entry"
+  done < <(find "$workspace_dir" -mindepth 1 -maxdepth 1 -print0)
+}
+
+cleanup_legacy_shadow_project() {
+  local entry name
+  while IFS= read -r -d '' entry; do
+    name="$(basename "$entry")"
+    case "$name" in
+      node_modules|.next|client|server) continue ;;
+    esac
+    rm -rf "$entry"
+  done < <(find "$WORK_DIR" -mindepth 1 -maxdepth 1 -print0)
+
+  for workspace in client server; do
+    cleanup_legacy_workspace "$WORK_DIR/$workspace"
+  done
+}
+
+link_node_modules() {
+  local source_dir="$1" target_dir="$2"
+  local current=""
+  mkdir -p "$target_dir"
+  if [ -L "$source_dir/node_modules" ]; then
+    current="$(readlink "$source_dir/node_modules")"
+    case "$current" in
+      "$NM_ROOT"/*/node_modules|"$NM_ROOT"/*/*/node_modules) ;;
+      *)
+        echo "[node_modules] refusing to replace unmanaged symlink: $source_dir/node_modules" >&2
+        exit 1
+        ;;
+    esac
+    rm "$source_dir/node_modules"
+  elif [ -e "$source_dir/node_modules" ]; then
+    rm -rf "$source_dir/node_modules"
+  fi
+  ln -s "$target_dir" "$source_dir/node_modules"
+}
+
+cleanup_legacy_shadow_project
+link_node_modules "$PROJECT_ROOT" "$WORK_DIR/node_modules"
+for workspace in client server; do
+  if [ -f "$PROJECT_ROOT/$workspace/package.json" ]; then
+    link_node_modules "$PROJECT_ROOT/$workspace" "$WORK_DIR/$workspace/node_modules"
+  fi
+done
+
+echo "[node_modules] Installing dependencies for $PROJECT_ROOT with node_modules at $WORK_DIR"
+(cd "$PROJECT_ROOT" && pnpm install "$@")
+
+echo "[node_modules] Dependencies ready"

package/lib/__templates__/nuxt-vue/scripts/prepare.sh

@@ -6,10 +6,7 @@ COZE_WORKSPACE_PATH="${COZE_WORKSPACE_PATH:-$(pwd)}"
 cd "${COZE_WORKSPACE_PATH}"
 
 echo "Installing dependencies..."
-pnpm install --prefer-frozen-lockfile --prefer-offline
-if command -v coze-dev > /dev/null 2>&1 && coze-dev check-bins --help > /dev/null 2>&1; then
-  coze-dev check-bins --fix
-fi
+bash "$COZE_WORKSPACE_PATH/scripts/prepare-node-modules.sh" --prefer-frozen-lockfile --prefer-offline
 
 echo "Preparing Nuxt project..."
 pnpm exec nuxt prepare

package/lib/__templates__/pi-agent/package.json

@@ -22,7 +22,7 @@
     "@mariozechner/pi-ai": "^0.63.2",
     "@mariozechner/pi-coding-agent": "^0.63.2",
     "@sinclair/typebox": "^0.34.48",
-    "coze-coding-dev-sdk": "^0.7.25",
+    "coze-coding-dev-sdk": "^0.7.28",
     "@radix-ui/react-select": "^2.2.6",
     "@radix-ui/react-slot": "^1.2.4",
     "@streamdown/code": "^1.1.1",

package/lib/__templates__/pi-agent/pnpm-lock.yaml

@@ -36,8 +36,8 @@ importers:
         specifier: ^2.1.1
         version: 2.1.1
       coze-coding-dev-sdk:
-        specifier: ^0.7.25
-        version: 0.7.25(openai@6.34.0(ws@8.20.0)(zod@4.3.6))(ws@8.20.0)
+        specifier: ^0.7.28
+        version: 0.7.28(openai@6.34.0(ws@8.20.0)(zod@4.3.6))(ws@8.20.0)
       express:
         specifier: ^4.21.2
         version: 4.22.1
@@ -2085,8 +2085,8 @@ packages:
   cose-base@2.2.0:
     resolution: {integrity: sha512-AzlgcsCbUMymkADOJtQm3wO9S3ltPfYOFD5033keQn9NJzIbtnZj+UdBJe7DYml/8TdbtHJW3j58SOnKhWY/5g==}
 
-  coze-coding-dev-sdk@0.7.25:
-    resolution: {integrity: sha512-5683ngikMdsRW0slGTE2OAZ1Fyj0lhkC4fGNOwsqKc35e68/gtg9KmmtK9CK9SZ+5/oIn/4wLoHXFB0gHJtO2A==}
+  coze-coding-dev-sdk@0.7.28:
+    resolution: {integrity: sha512-ku7AiVWUmgCrUuMT1m2iTmHIwG39EfmcAhPASd8M7XyKxIC6A1cjIIe/3YpStRsj8pMF9LU+pxHWxisf+F44oQ==}
     engines: {node: '>=18.0.0'}
     hasBin: true
 
@@ -6120,7 +6120,7 @@ snapshots:
     dependencies:
       layout-base: 2.0.1
 
-  coze-coding-dev-sdk@0.7.25(openai@6.34.0(ws@8.20.0)(zod@4.3.6))(ws@8.20.0):
+  coze-coding-dev-sdk@0.7.28(openai@6.34.0(ws@8.20.0)(zod@4.3.6))(ws@8.20.0):
     dependencies:
       '@langchain/core': 1.1.40(openai@6.34.0(ws@8.20.0)(zod@4.3.6))(ws@8.20.0)
       '@langchain/openai': 1.4.3(@langchain/core@1.1.40(openai@6.34.0(ws@8.20.0)(zod@4.3.6))(ws@8.20.0))(ws@8.20.0)

package/lib/__templates__/taro/.cozeproj/scripts/deploy_build.sh

@@ -1,7 +1,8 @@
 #!/bin/bash
 set -Eeuo pipefail
 
-cd "${COZE_WORKSPACE_PATH}"
+ROOT_DIR="$(cd "$(dirname "$0")/../.." && pwd)"
+cd "$ROOT_DIR"
 if [ -f "./.cozeproj/scripts/init_env.sh" ]; then
     echo "⚙️ Initializing environment..."
     # 使用 bash 执行，确保即使没有 x 权限也能跑
@@ -11,7 +12,7 @@ else
 fi
 echo "Installing dependencies..."
 # 安装所有依赖（包含 Taro 核心和 React）
-pnpm install
+bash "$ROOT_DIR/.cozeproj/scripts/prepare-node-modules.sh" --prefer-frozen-lockfile --prefer-offline
 
 echo "Building the Taro project..."
 pnpm build

package/lib/__templates__/taro/.cozeproj/scripts/dev_build.sh

@@ -1,2 +1,5 @@
 #!/bin/bash
 set -Eeuo pipefail
+
+ROOT_DIR="$(cd "$(dirname "$0")/../.." && pwd)"
+bash "$ROOT_DIR/.cozeproj/scripts/prepare-node-modules.sh" --prefer-frozen-lockfile --prefer-offline