@lark-apaas/miaoda-cli 0.1.0-alpha.097a394 → 0.1.0-alpha.0d863af

package/dist/api/db/api.js

@@ -6,35 +6,63 @@ exports.importData = importData;
 exports.exportData = exportData;
 const http_1 = require("../../utils/http");
 const error_1 = require("../../utils/error");
+const http_client_1 = require("@lark-apaas/http-client");
 const client_1 = require("./client");
-/** dataloom 默认 dbBranch —— 单环境应用均传 main */
-const DEFAULT_DB_BRANCH = "main";
-// ── db sql → InnerExecuteSQL ──
 /**
- * 执行 SQL。
- * 后端：POST /v1/app/{appId}/dataloom/sql?dbBranch=main
+ * 把 SDK 抛出的 HttpError 统一映射成 CLI 层错误：
+ *   1. 先尝试从 response body 解 envelope，命中 dataloom 业务 code → AppError
+ *   2. 兜底返 HttpError，保留真实 status 码与上下文
+ *
+ * 配合调用点的 try/catch + traceHttp，让 --verbose 在错误路径上也能拿到
+ * x-tt-logid 与 status，方便定位线上问题。
+ */
+async function mapDbHttpError(err, url, ctx) {
+    if (err instanceof error_1.AppError)
+        throw err;
+    if (err instanceof http_client_1.HttpError) {
+        const status = err.response?.status ?? 0;
+        const statusText = err.response?.statusText ?? "";
+        try {
+            const body = (await err.response?.json());
+            if (body)
+                (0, client_1.extractData)(body); // 业务 code 命中 → 抛 AppError；不命中走兜底
+        }
+        catch (innerErr) {
+            if (innerErr instanceof error_1.AppError)
+                throw innerErr;
+            // body 解析失败 → 当成无 envelope 的纯 HTTP 错误处理
+        }
+        throw new error_1.HttpError(status, url, `${ctx}: ${String(status)} ${statusText}`.trim());
+    }
+    throw err;
+}
+// CLI 不再为 dbBranch 设默认值：
+// 用户没传 --env 就完全不携带 dbBranch query 参数，由后端 admin-inner 中间件
+// 按 workspace 多环境状态决定（多环境 → dev / 单环境 → main）。
+// 这样可以避免单环境应用被强行打到 main 之外、或多环境应用被默认打到 main 上线库。
+// ── db sql → InnerAdminExecuteSQL ──
+/**
+ * 执行 SQL（admin-inner）。
+ * 后端：POST /v1/dataloom/app/{appId}/db/sql?dbBranch=main
  *
  * 返回所有 results[]（多条语句时每条一项）；CLI 侧按 PRD 仅取最后一条展示，
  * 但 API 层保留完整列表以便测试和高级用法。
  */
 async function execSql(opts) {
     const client = (0, http_1.getHttpClient)();
-    const url = (0, client_1.buildInnerUrl)(opts.appId, "/sql", {
-        dbBranch: opts.dbBranch ?? DEFAULT_DB_BRANCH,
+    const url = (0, client_1.buildInnerUrl)(opts.appId, "/db/sql", {
+        dbBranch: opts.dbBranch,
     });
-    const response = await client.post(url, { sql: opts.sql });
-    if (!response.ok) {
-        // 4xx / 5xx：尝试解析 body 取 status_code 映射业务错误
-        let body = null;
-        try {
-            body = (await response.json());
-        }
-        catch {
-            // ignore
-        }
-        if (body)
-            (0, client_1.extractData)(body);
-        throw new error_1.HttpError(response.status, url, `Failed to execute SQL: ${String(response.status)} ${response.statusText}`);
+    const start = Date.now();
+    let response;
+    try {
+        response = await client.post(url, { sql: opts.sql });
+        (0, client_1.traceHttp)("POST", url, start, response);
+    }
+    catch (err) {
+        (0, client_1.traceHttp)("POST", url, start, err instanceof http_client_1.HttpError ? err.response : undefined, err);
+        await mapDbHttpError(err, url, "Failed to execute SQL");
+        throw err; // 不可达
     }
     const body = (await response.json());
     const data = (0, client_1.extractData)(body);
@@ -42,108 +70,108 @@ async function execSql(opts) {
 }
 // ── db schema → InnerGetSchema ──
 /**
- * 查询 schema。
- * 后端：GET /v1/app/{appId}/dataloom/schema?format=schema|ddl&tableNames=...&includeStats=...&dbBranch=main
+ * 查询 schema（admin-inner）。
+ * 后端：GET /v1/dataloom/app/{appId}/db/schema?format=schema|ddl&tableNames=...&includeStats=...&dbBranch=main
  *
  * 返回 body.data（含 `schema` 或 `ddl`）供 handler 使用。
  */
 async function getSchema(opts) {
     const client = (0, http_1.getHttpClient)();
-    const url = (0, client_1.buildInnerUrl)(opts.appId, "/schema", {
+    const url = (0, client_1.buildInnerUrl)(opts.appId, "/db/schema", {
         format: opts.format ?? "schema",
         tableNames: opts.tableNames,
         includeStats: opts.includeStats ? "true" : undefined,
-        dbBranch: opts.dbBranch ?? DEFAULT_DB_BRANCH,
+        dbBranch: opts.dbBranch,
     });
-    const response = await client.get(url);
-    if (!response.ok) {
-        let body = null;
-        try {
-            body = (await response.json());
-        }
-        catch {
-            // ignore
-        }
-        if (body)
-            (0, client_1.extractData)(body);
-        throw new error_1.HttpError(response.status, url, `Failed to get schema: ${String(response.status)} ${response.statusText}`);
+    const start = Date.now();
+    let response;
+    try {
+        response = await client.get(url);
+        (0, client_1.traceHttp)("GET", url, start, response);
+    }
+    catch (err) {
+        (0, client_1.traceHttp)("GET", url, start, err instanceof http_client_1.HttpError ? err.response : undefined, err);
+        await mapDbHttpError(err, url, "Failed to get schema");
+        throw err; // 不可达
     }
     const body = (await response.json());
     return (0, client_1.extractData)(body);
 }
-// ── db data import → InnerImportData ──
+// ── db data import → InnerAdminImportData ──
 /**
  * 导入文件。
- * 后端：POST /v1/app/{appId}/dataloom/data/import?tableName=...&format=csv|json&dbBranch=main
+ * 后端：POST /v1/dataloom/app/{appId}/data/import
+ *
+ * 全字段走 JSON body envelope（idl-larkgw 36125a2f）：
+ *   {tableName, format, records, dbBranch?}
  *
- * Body 为原始文件字节（不走 JSON envelope）。
+ * `records` 字段携带 CSV / JSON 文本内容（utf8 字符串），与 dataloom 上
+ * Import/ExportAdminRecords 命名风格对齐。CLI 端把 Buffer 解码成 utf8
+ * 字符串后塞进 envelope 即可。
  */
 async function importData(opts) {
     const client = (0, http_1.getHttpClient)();
-    const url = (0, client_1.buildInnerUrl)(opts.appId, "/data/import", {
+    const url = (0, client_1.buildInnerUrl)(opts.appId, "/data/import");
+    const reqBody = {
         tableName: opts.tableName,
         format: opts.format,
-        dbBranch: opts.dbBranch ?? DEFAULT_DB_BRANCH,
-    });
-    const contentType = opts.format === "csv" ? "text/csv" : "application/json";
-    const ab = opts.body.buffer.slice(opts.body.byteOffset, opts.body.byteOffset + opts.body.byteLength);
-    const response = await client.request({
-        method: "POST",
-        url,
-        headers: { "Content-Type": contentType },
-        body: ab,
-    });
-    if (!response.ok) {
-        let body = null;
-        try {
-            body = (await response.json());
-        }
-        catch {
-            // ignore
-        }
-        if (body)
-            (0, client_1.extractData)(body);
-        throw new error_1.HttpError(response.status, url, `Failed to import data: ${String(response.status)} ${response.statusText}`);
+        records: opts.body.toString("utf8"),
+    };
+    if (opts.dbBranch !== undefined && opts.dbBranch !== "") {
+        reqBody.dbBranch = opts.dbBranch;
+    }
+    const start = Date.now();
+    let response;
+    try {
+        response = await client.post(url, reqBody);
+        (0, client_1.traceHttp)("POST", url, start, response);
+    }
+    catch (err) {
+        (0, client_1.traceHttp)("POST", url, start, err instanceof http_client_1.HttpError ? err.response : undefined, err);
+        await mapDbHttpError(err, url, "Failed to import data");
+        throw err; // 不可达
     }
-    // 后端 InnerImportData 响应里 data 直接返 {tableName, rows, durationMs}
+    // 后端 InnerAdminImportData 响应里 data 直接返 {tableName, recordCount, durationMs}
     const body = (await response.json());
     const data = (0, client_1.extractData)(body);
     return {
         tableName: data.tableName ?? opts.tableName,
-        rows: data.rows ?? 0,
+        recordCount: data.recordCount ?? 0,
         durationMs: data.durationMs ?? 0,
     };
 }
-// ── db data export → InnerExportData ──
+// ── db data export → InnerAdminExportData ──
 /**
  * 导出数据。
- * 后端：POST /v1/app/{appId}/dataloom/data/export?tableName=...&format=csv|json&dbBranch=main
+ * 后端：POST /v1/dataloom/app/{appId}/data/export?tableName=...&format=csv|json&limit=5000&dbBranch=main
  *
- * 响应 body 为原始 CSV/JSON 字节（不走 envelope）。错误仍通过 HTTP 4xx/5xx + BaseResp 传达。
+ * 所有参数（含 limit）均按 IDL `api.query` 走 query string；HTTP 方法是 POST（对齐
+ * inner_api 网关插件路由约定，与 InnerAdminExecuteSQL 同 method）。请求体为空。
+ * 响应 body 为原始 CSV/JSON 字节，RecordCount 通过响应头 `X-Miaoda-Record-Count`
+ * 回传，错误仍走 HTTP 4xx/5xx + envelope。
  */
 async function exportData(opts) {
     const client = (0, http_1.getHttpClient)();
     const url = (0, client_1.buildInnerUrl)(opts.appId, "/data/export", {
         tableName: opts.tableName,
         format: opts.format,
-        dbBranch: opts.dbBranch ?? DEFAULT_DB_BRANCH,
+        limit: String(opts.limit ?? 5000),
+        dbBranch: opts.dbBranch,
     });
-    const reqBody = { limit: opts.limit ?? 5000 };
-    const response = await client.post(url, reqBody);
-    if (!response.ok) {
-        // 错误路径：body 是 JSON envelope
-        let body = null;
-        try {
-            body = (await response.json());
-        }
-        catch {
-            // ignore
-        }
-        if (body)
-            (0, client_1.extractData)(body);
-        throw new error_1.HttpError(response.status, url, `Failed to export data: ${String(response.status)} ${response.statusText}`);
+    // POST + 空 body：所有业务参数都在 query 里
+    const start = Date.now();
+    let response;
+    try {
+        response = await client.request({ method: "POST", url });
+        (0, client_1.traceHttp)("POST", url, start, response);
+    }
+    catch (err) {
+        (0, client_1.traceHttp)("POST", url, start, err instanceof http_client_1.HttpError ? err.response : undefined, err);
+        await mapDbHttpError(err, url, "Failed to export data");
+        throw err; // 不可达
     }
-    // 成功路径：响应 body 是原始 CSV/JSON 字节
+    // 成功路径：响应 body 通常是原始 CSV/JSON 字节，但部分错误场景下网关会返
+    // HTTP 200 + JSON envelope（status_code != "0"），需要在这里嗅探兜底。
     const contentType = response.headers.get("Content-Type") ??
         (opts.format === "csv" ? "text/csv" : "application/json");
     const ab = await response.arrayBuffer();
@@ -151,10 +179,33 @@ async function exportData(opts) {
     if (buf.length === 0) {
         throw new error_1.AppError("INTERNAL_DB_ERROR", "Empty export response body");
     }
+    // Envelope sniff：HTTP 200 + Content-Type 为 application/json + body 解析得到
+    // InnerEnvelope 且 status_code 非 "0" 时，按业务错误抛出。
+    // 仅 CSV 格式做 sniff —— JSON 格式正常成功响应也是 application/json，会误判。
+    if (opts.format === "csv" && /application\/json/i.test(contentType)) {
+        try {
+            const parsed = JSON.parse(buf.toString("utf8"));
+            if (parsed.status_code != null && parsed.status_code !== "0") {
+                // 复用 extractData 的错误映射逻辑（throw AppError）
+                (0, client_1.extractData)(parsed);
+            }
+        }
+        catch (err) {
+            // 已经被 extractData 抛成 AppError → 透传；否则 JSON.parse 失败说明 body
+            // 真的是 CSV 文本，继续按成功流程走
+            if (err instanceof error_1.AppError)
+                throw err;
+        }
+    }
+    // 后端通过响应头回传记录数（避免污染 body）；header 缺失或解析失败 → undefined
+    const recordCountHeader = response.headers.get("X-Miaoda-Record-Count");
+    const parsedCount = recordCountHeader != null ? Number(recordCountHeader) : NaN;
+    const recordCount = Number.isFinite(parsedCount) && parsedCount >= 0 ? parsedCount : undefined;
     return {
         tableName: opts.tableName,
         format: opts.format,
         contentType,
         body: buf,
+        recordCount,
     };
 }

package/dist/api/db/client.js

@@ -1,10 +1,45 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.SQLSTATE_MAP = void 0;
+exports.traceHttp = traceHttp;
 exports.ensureInnerSuccess = ensureInnerSuccess;
 exports.extractData = extractData;
 exports.buildInnerUrl = buildInnerUrl;
 const error_1 = require("../../utils/error");
+const logger_1 = require("../../utils/logger");
+/**
+ * 输出一条 HTTP 调试日志（仅 --verbose 模式生效）。
+ *
+ * 主要用于把后端返回的 `x-tt-logid` 透出给用户，方便拿这个 id 去 server / 网关日志里
+ * 直接定位本次请求的 `[MiaodaCLI.metric]` 行与上下游 trace。
+ *
+ * 使用约定：
+ *   const start = Date.now();
+ *   const response = await client.post(url, body);
+ *   traceHttp("POST", url, start, response);
+ *   // 或错误路径：traceHttp("POST", url, start, err.response, err)
+ */
+function traceHttp(method, url, start, response, err) {
+    // debug() 内部已判断 verbose 开关，这里不重复判断；保持调用点轻量
+    try {
+        const cost = Date.now() - start;
+        const status = response?.status ?? 0;
+        const logid = response?.headers?.get?.("x-tt-logid") ?? "-";
+        if (err !== undefined) {
+            const errMsg = err instanceof Error
+                ? err.message
+                : typeof err === "string"
+                    ? err
+                    : JSON.stringify(err);
+            (0, logger_1.debug)(`http ${method} ${url} ${String(status)} cost=${String(cost)}ms x-tt-logid=${logid} err=${errMsg}`);
+            return;
+        }
+        (0, logger_1.debug)(`http ${method} ${url} ${String(status)} cost=${String(cost)}ms x-tt-logid=${logid}`);
+    }
+    catch {
+        // debug 失败不应影响业务，吞掉
+    }
+}
 /**
  * 校验 dataloom InnerAPI 响应的 envelope。
  *
@@ -19,21 +54,27 @@ function ensureInnerSuccess(body) {
     const code = body.status_code ?? body.ErrorCode ?? "0";
     if (code === "0" || code === "")
         return;
-    const message = body.error_msg ?? body.ErrorMessage ?? `dataloom API error [${code}]`;
+    const message = stripPgPrefix(body.error_msg ?? body.ErrorMessage ?? `dataloom API error [${code}]`);
+    // PRD 多语句失败：后端在 envelope 顶层透出 errorStatementIndex（从 0 起计），
+    // 单语句 / 单元执行不会带这个字段。下面的 AppError 都把它带上，让最终
+    // CLI JSON envelope 写到 error.statement_index。
+    const stmtIdx = typeof body.errorStatementIndex === "number" ? body.errorStatementIndex : undefined;
     // k_dl_1300002 是 PG 执行透传错误；error_msg 里常带 SQLSTATE，优先按 SQLSTATE 映射
     if (code === "k_dl_1300002") {
         const sqlstate = extractSqlstate(message);
         if (sqlstate && exports.SQLSTATE_MAP[sqlstate]) {
-            throw new error_1.AppError(exports.SQLSTATE_MAP[sqlstate], message);
+            throw new error_1.AppError(exports.SQLSTATE_MAP[sqlstate], message, { statement_index: stmtIdx });
         }
     }
     // k_dl_1600000 是 dataloom 通用参数错误，不能整体映射；
-    // 只有 message 以 "Invalid DB Branch" 开头的情况对应"用户传了 --env 但 dbBranch 不存在 / 多环境未初始化"，
-    // 按技术方案固定映射为 MULTI_ENV_NOT_INITIALIZED（含固定 message 与 hint）。
+    // message 以 "Invalid DB Branch" 开头的两种触发场景：
+    //   1) 单环境应用使用 --env（多环境未初始化）
+    //   2) 多环境应用传入了不存在的 env 名（如 --env staging）
+    // 两者外部表象一致：dbBranch 在 db_branch 表里查不到，固定映射为 MULTI_ENV_NOT_INITIALIZED。
     if (code === "k_dl_1600000" && message.startsWith("Invalid DB Branch")) {
         throw new error_1.AppError("MULTI_ENV_NOT_INITIALIZED", "--env is not available (multi-env not initialized)", {
             next_actions: [
-                "Current app uses a single database for dev and production. Run `miaoda db migration init` to set up multi-env.",
+                "Verify the --env value matches an existing dbBranch.",
             ],
         });
     }
@@ -42,10 +83,19 @@ function ensureInnerSuccess(body) {
     if (mapped) {
         throw new error_1.AppError(mapped.code, mapped.message ?? message, {
             next_actions: mapped.hint ? [mapped.hint] : undefined,
+            statement_index: stmtIdx,
         });
     }
     // 兜底：dataloom 未映射的 code 原样透传
-    throw new error_1.AppError(`DB_API_${code}`, message);
+    throw new error_1.AppError(`DB_API_${code}`, message, { statement_index: stmtIdx });
+}
+/**
+ * 剥掉 PG 透传错误的 "ERROR:" 前缀：CLI 输出本身就会前缀 "Error:"，
+ * 不去掉就会变成 `Error: ERROR: relation ...` 双重前缀，PRD 不要这种冗余。
+ * 大小写敏感，只匹配 PG 标准格式。
+ */
+function stripPgPrefix(msg) {
+    return msg.replace(/^ERROR:\s*/, "");
 }
 /** 从 PG 执行错误消息里提取 "(SQLSTATE XXXXX)"。 */
 function extractSqlstate(msg) {
@@ -89,11 +139,19 @@ function extractData(body) {
     return body.data;
 }
 /**
- * 组装 `/v1/app/{appId}/dataloom/...` URL。
+ * 组装 `/v1/dataloom/app/{appId}/...` URL（admin-inner 链路）。
+ *
+ * 后端 IDL 已把 dataloom 的 4 个 inner 接口切到管理态（ForceAdminKctx），
+ * 路径前缀也统一改为 `/v1/dataloom/app/:appID/...`：
+ *   - sql:    POST /v1/dataloom/app/{appId}/db/sql
+ *   - schema: GET  /v1/dataloom/app/{appId}/db/schema
+ *   - import: POST /v1/dataloom/app/{appId}/data/import
+ *   - export: POST /v1/dataloom/app/{appId}/data/export
+ * 调用方传入的 path 已包含 `/db` / `/data` 中段，这里只负责拼前缀和 query。
  */
 function buildInnerUrl(appId, path, query) {
     const normalized = path.startsWith("/") ? path : `/${path}`;
-    let url = `/v1/app/${encodeURIComponent(appId)}/dataloom${normalized}`;
+    let url = `/v1/dataloom/app/${encodeURIComponent(appId)}${normalized}`;
     if (query) {
         const usp = new URLSearchParams();
         for (const [k, v] of Object.entries(query)) {

package/dist/api/db/parsers.js

@@ -27,16 +27,23 @@ function parseSqlResult(r) {
             recordCount: r.recordCount ?? rows.length,
         };
     }
-    if (r.sqlType === "INSERT" || r.sqlType === "UPDATE" || r.sqlType === "DELETE") {
+    if (r.sqlType === "INSERT" ||
+        r.sqlType === "UPDATE" ||
+        r.sqlType === "DELETE" ||
+        r.sqlType === "MERGE" ||
+        r.sqlType === "DML") {
         const affected = r.affectedRows ?? extractRowCount(r.data);
         return {
             kind: "dml",
+            // 上面已 narrow，这里 cast 是为了 SqlType 联合里的 (string & {}) 让 TS 无法
+            // 自动收窄到字面量集合，不影响运行时安全
             sqlType: r.sqlType,
             affectedRows: affected,
         };
     }
-    // DDL or unknown
-    return { kind: "ddl" };
+    // DDL or unknown — sqlType 透传后端给的细粒度（CREATE_TABLE / DROP_TABLE / ...
+    //  / 笼统 "DDL"），CLI JSON 输出直接当 command 用
+    return { kind: "ddl", sqlType: r.sqlType };
 }
 /** DML 的 data 通常是 `[{"rowCount": N}]`；兜底从这里读影响行数。 */
 function extractRowCount(data) {
@@ -82,7 +89,6 @@ function toSummary(t, stats) {
         columns: (t.fields ?? []).length,
         estimated_row_count: typeof stats?.estimatedRowCount === "number" ? stats.estimatedRowCount : null,
         size_bytes: typeof stats?.sizeBytes === "number" ? stats.sizeBytes : null,
-        updated_at: t.updatedAt,
     };
 }
 /**
@@ -118,8 +124,6 @@ function toDetail(t, stats) {
         indexes: rawIndexes.map(toIndex),
         estimated_row_count: typeof stats?.estimatedRowCount === "number" ? stats.estimatedRowCount : null,
         size_bytes: typeof stats?.sizeBytes === "number" ? stats.sizeBytes : null,
-        created_at: t.createdAt,
-        updated_at: t.updatedAt,
     };
 }
 function toColumn(f) {

package/dist/api/file/api.js

@@ -36,7 +36,7 @@ function extractEnvelope(body) {
 // ── list ──
 /** 底层单次 list 调用（一页）。支持 filterExpr / sortBy 下推。 */
 async function listOnce(appId, bucketId, opts) {
-    const url = `/api/v1/storage/inner/app/${encodeURIComponent(appId)}/bucket/${encodeURIComponent(bucketId)}/list`;
+    const url = `/v1/storage/app/${encodeURIComponent(appId)}/bucket/${encodeURIComponent(bucketId)}/list`;
     const reqBody = {
         bucketID: bucketId,
         maxKeys: opts.limit,
@@ -94,7 +94,7 @@ function buildFilterExpr(opts) {
 /**
  * 列出文件：所有过滤下推到后端 FilterExpression，纯精确匹配，无 glob。
  *
- * 后端：POST /api/v1/storage/inner/app/{appId}/bucket/{bucketId}/list
+ * 后端：POST /v1/storage/app/{appId}/bucket/{bucketId}/list
  */
 async function listFiles(opts) {
     const bucketId = await (0, client_1.getDefaultBucketId)(opts.appId);
@@ -214,7 +214,7 @@ async function resolveByName(appId, input) {
             error: {
                 code: "FILE_NOT_FOUND",
                 message: `File '${input}' does not exist`,
-                hint: "Run `miaoda file ls` to verify file_name.",
+                hint: "Run `miaoda file ls` to see available files.",
             },
         };
     }
@@ -225,7 +225,7 @@ async function resolveByName(appId, input) {
             error: {
                 code: "AMBIGUOUS_FILE_NAME",
                 message: `Multiple files match name '${input}' (${String(matches.length)} found)`,
-                hint: `Use absolute /path instead. Run \`miaoda file ls --name ${input}\` to see candidates.`,
+                hint: `Use path instead. Run \`miaoda file ls --name ${input}\` to see candidates.`,
             },
         };
     }
@@ -234,12 +234,12 @@ async function resolveByName(appId, input) {
 // ── stat ──
 /**
  * 查看文件元数据。
- * 后端：GET /api/v1/storage/inner/app/{appId}/object/{bucketId}/{filePath}/head
+ * 后端：GET /v1/storage/app/{appId}/object/{bucketId}/{filePath}/head
  */
 async function statFile(opts) {
     const bucketId = await (0, client_1.getDefaultBucketId)(opts.appId);
     // 对齐 file-storage-skill Py 版：URL 顺序是 .../object/{bucket}/head/{path}
-    const url = `/api/v1/storage/inner/app/${encodeURIComponent(opts.appId)}/object/${encodeURIComponent(bucketId)}/head/${encodePath(opts.filePath)}`;
+    const url = `/v1/storage/app/${encodeURIComponent(opts.appId)}/object/${encodeURIComponent(bucketId)}/head/${encodePath(opts.filePath)}`;
     const body = await (0, client_1.doGet)(url, {
         notFoundCode: "FILE_NOT_FOUND",
         notFoundMessage: `File '${opts.filePath}' does not exist`,
@@ -251,12 +251,12 @@ async function statFile(opts) {
 // ── 预签上传 URL ──
 async function preUpload(appId, req) {
     const bucketId = await (0, client_1.getDefaultBucketId)(appId);
-    const url = `/api/v1/storage/inner/app/${encodeURIComponent(appId)}/bucket/${encodeURIComponent(bucketId)}/preUpload`;
+    const url = `/v1/storage/app/${encodeURIComponent(appId)}/bucket/${encodeURIComponent(bucketId)}/preUpload`;
     const body = await (0, client_1.doPost)(url, { bucketID: bucketId, appID: appId, ...req }, { errorContext: "pre-upload" });
     return extractEnvelope(body);
 }
 async function uploadCallback(appId, req) {
-    const url = `/api/v1/storage/inner/app/${encodeURIComponent(appId)}/object/callback`;
+    const url = `/v1/storage/app/${encodeURIComponent(appId)}/object/callback`;
     const body = await (0, client_1.doPost)(url, req, { errorContext: "upload callback" });
     (0, client_1.ensureSuccess)(body);
 }
@@ -280,6 +280,7 @@ async function uploadFile(opts) {
         // Node 20+ 内置 fetch 运行时接受 Buffer，但 TS 的 BodyInit 要求更严格的类型；
         // 这里复制到独立 ArrayBuffer 以满足 lib.dom.d.ts 的 BodyInit 约束
         const ab = body.buffer.slice(body.byteOffset, body.byteOffset + body.byteLength);
+        const uploadStart = Date.now();
         const res = await fetch(pre.uploadURL, {
             method: "PUT",
             headers: {
@@ -288,6 +289,7 @@ async function uploadFile(opts) {
             },
             body: ab,
         });
+        (0, logger_1.debug)(`http PUT <upload-cdn> ${String(res.status)} cost=${String(Date.now() - uploadStart)}ms size=${String(opts.fileSize)}`);
         if (!res.ok) {
             throw new error_1.AppError("FILE_UPLOAD_FAILED", `Upload PUT failed with status ${String(res.status)}`);
         }
@@ -332,11 +334,11 @@ async function uploadFile(opts) {
 // ── 预签下载 URL ──
 /**
  * 获取预签下载 URL。
- * 后端：POST /api/v1/storage/inner/app/{appId}/object/sign/{bucketId}/{filePath}
+ * 后端：POST /v1/storage/app/{appId}/object/sign/{bucketId}/{filePath}
  */
 async function signDownload(opts) {
     const bucketId = await (0, client_1.getDefaultBucketId)(opts.appId);
-    const url = `/api/v1/storage/inner/app/${encodeURIComponent(opts.appId)}/object/sign/${encodeURIComponent(bucketId)}/${encodePath(opts.filePath)}`;
+    const url = `/v1/storage/app/${encodeURIComponent(opts.appId)}/object/sign/${encodeURIComponent(bucketId)}/${encodePath(opts.filePath)}`;
     const reqBody = {
         bucketID: bucketId,
         filePath: toApiPath(opts.filePath),
@@ -364,12 +366,15 @@ async function signDownload(opts) {
  */
 async function downloadFile(opts) {
     let res;
+    const downloadStart = Date.now();
     try {
         res = await fetch(opts.signedURL);
     }
     catch (err) {
+        (0, logger_1.debug)(`http GET <download-cdn> 0 cost=${String(Date.now() - downloadStart)}ms err=${err instanceof Error ? err.message : String(err)}`);
         throw new error_1.AppError("FILE_DOWNLOAD_FAILED", `Download GET failed: ${err instanceof Error ? err.message : String(err)}`);
     }
+    (0, logger_1.debug)(`http GET <download-cdn> ${String(res.status)} cost=${String(Date.now() - downloadStart)}ms`);
     if (!res.ok) {
         throw new error_1.AppError("FILE_DOWNLOAD_FAILED", `Download failed with status ${String(res.status)}`);
     }
@@ -381,11 +386,11 @@ async function downloadFile(opts) {
 // ── 批量删除（best-effort） ──
 /**
  * 批量删除文件。
- * 后端：DELETE /api/v1/storage/inner/app/{appId}/bucket/{bucketId}/delete
+ * 后端：DELETE /v1/storage/app/{appId}/bucket/{bucketId}/delete
  */
 async function deleteFiles(opts) {
     const bucketId = await (0, client_1.getDefaultBucketId)(opts.appId);
-    const url = `/api/v1/storage/inner/app/${encodeURIComponent(opts.appId)}/bucket/${encodeURIComponent(bucketId)}/delete`;
+    const url = `/v1/storage/app/${encodeURIComponent(opts.appId)}/bucket/${encodeURIComponent(bucketId)}/delete`;
     const reqBody = {
         bucketID: bucketId,
         filePaths: opts.filePaths.map(toApiPath),