@lark-apaas/miaoda-cli 0.1.17-beta.45b48d2 → 0.1.18-alpha.5fd4656

package/dist/cli/commands/index.js

@@ -14,6 +14,7 @@ const index_6 = require("../../cli/commands/skills/index");
 //   3 = AppType_APPLICATION(全栈应用,当前仅 nestjs-react-fullstack 一个 stack)
 //   4 = AppType_DESIGN(design-stack,SSR 渲染、无业务逻辑、无数据库)
 //   7 = miaoda-cli 自定义 modern 占位(后端枚举无 7,沙箱目前不传)
+//   8 = AppType_DESIGN_HTML(design-html,buildless 静态 HTML,命令集同 modern)
 //   其它(0/1/2/5/6 / 未设)→ default(命令全开,本地 dev / CI / 兼容回退)
 // stack 维度(nestjs-react-fullstack / vite-react / ...)是正交的,
 // skills sync 内部按 .spark/meta.json.stack 拉对应 coding-steering/steering/<stack>/ 子目录。
@@ -24,6 +25,8 @@ function resolveScene(appType, _archType) {
         return 'application';
     if (appType === '4')
         return 'design';
+    if (appType === '8')
+        return 'design-html';
     return 'default';
 }
 const SCENE_REGISTRARS = {
@@ -62,6 +65,13 @@ const SCENE_REGISTRARS = {
         (0, index_3.registerObservabilityCommands)(p);
         (0, index_6.registerSkillsCommands)(p);
     },
+    // design-html scene(AppType_DESIGN_HTML=8):buildless 静态 HTML,
+    // 命令集与 modern 一致(app init/sync + modern 拆分版 deploy + skills),不挂 db/file/observability。
+    'design-html': (p) => {
+        (0, index_4.registerAppCommands)(p, { includeInit: true });
+        (0, modern_1.registerDeployCommandsModern)(p);
+        (0, index_6.registerSkillsCommands)(p);
+    },
 };
 function readEnv(name) {
     const v = process.env[name]?.trim();

package/dist/config/sync-configs/design-html.js

@@ -0,0 +1,25 @@
+"use strict";
+/**
+ * design-html 的 sync 规则。
+ *
+ * design-html 是 buildless 静态 HTML stack（design-html scene，MIAODA_APP_TYPE=8），
+ * 无依赖、无 nest 后端、无数据库、无 dev 链路，只有一个打包脚本 scripts/build.sh
+ * （源码即产物：rsync 到 dist/output + 生成 routes.json）。
+ *
+ * 所以 sync 只做一件事：把 cli 自带的 scripts/build.sh 派生覆盖到 user app，
+ * 让 build 脚本可独立于模板版本更新。不同步 .githooks、不加 dev:local、
+ * 不动 .gitignore（卫生项直接在 coding 仓模板 _gitignore 里维护）。
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SYNC_CONFIG = void 0;
+exports.SYNC_CONFIG = {
+    sync: [
+        {
+            type: 'directory',
+            from: 'scripts',
+            to: 'scripts',
+            overwrite: true,
+        },
+    ],
+};
+exports.default = exports.SYNC_CONFIG;

package/dist/config/sync-configs/index.js

@@ -23,6 +23,7 @@ const node_fs_1 = __importDefault(require("node:fs"));
 const node_path_1 = __importDefault(require("node:path"));
 const nestjs_react_fullstack_1 = __importDefault(require("./nestjs-react-fullstack"));
 const design_stack_1 = __importDefault(require("./design-stack"));
+const design_html_1 = __importDefault(require("./design-html"));
 /**
  * 已纳入新 sync 机制的 stack 注册表。未在表里的 stack（如老 vite-react / html）走旧的
  * `upgrade/templates/<stack>/{files,patches}` 机制，由 sync handler 兜底。
@@ -30,6 +31,7 @@ const design_stack_1 = __importDefault(require("./design-stack"));
 const STACK_REGISTRY = {
     'nestjs-react-fullstack': nestjs_react_fullstack_1.default,
     'design-stack': design_stack_1.default,
+    'design-html': design_html_1.default,
 };
 /** 返回该 stack 的 SyncConfig；表里没有时返回 null。 */
 function getSyncConfig(stack) {

package/dist/services/app/init/template.js

@@ -15,6 +15,7 @@ exports.TEMPLATE_PACKAGE_BY_STACK = {
     'vite-react': '@lark-apaas/coding-template-vite-react',
     html: '@lark-apaas/coding-template-html',
     'nestjs-react-fullstack': '@lark-apaas/coding-template-nestjs-react-fullstack',
+    'design-html': '@lark-apaas/coding-template-design-html',
 };
 /**
  * 短名 → template 包钉版表。renderTemplate 默认按这张表取版本号，表外 stack 跟 npm latest。

package/dist/services/deploy/modern/atoms/design-build.js

@@ -0,0 +1,20 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.runDesignBuild = runDesignBuild;
+const node_child_process_1 = require("node:child_process");
+const error_1 = require("../../../../utils/error");
+const logger_1 = require("../../../../utils/logger");
+/**
+ * design-html 本地构建：跑 `npm run build`（模板里即 bash scripts/build.sh）。
+ * build.sh 读 process.env.CLIENT_BASE_PATH（平台预置），子进程继承 env 即透传，
+ * 不需要 CDN 凭证、不注入 MIAODA_*。
+ */
+function runDesignBuild(opts) {
+    (0, logger_1.log)('deploy', 'Building (design)...');
+    try {
+        (0, node_child_process_1.execSync)('npm run build', { cwd: opts.projectDir, stdio: 'inherit', env: process.env });
+    }
+    catch (err) {
+        throw new error_1.AppError('DEPLOY_BUILD_FAILED', `npm run build failed: ${err.message}`);
+    }
+}

package/dist/services/deploy/modern/atoms/design-upload.js

@@ -0,0 +1,73 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.uploadDesignArtifacts = uploadDesignArtifacts;
+const node_fs_1 = __importDefault(require("node:fs"));
+const node_path_1 = __importDefault(require("node:path"));
+const error_1 = require("../../../../utils/error");
+const logger_1 = require("../../../../utils/logger");
+const constants_1 = require("../constants");
+const protocol_1 = require("../protocol");
+const tosutil_1 = require("./tosutil");
+/** 递归收集 dir 下相对路径（posix 分隔），与 -flat 上传后远端 key 对齐。 */
+function listLocalRelKeys(dir) {
+    const out = new Set();
+    const walk = (cur, rel) => {
+        for (const entry of node_fs_1.default.readdirSync(cur, { withFileTypes: true })) {
+            const childRel = rel ? `${rel}/${entry.name}` : entry.name;
+            if (entry.isDirectory())
+                walk(node_path_1.default.join(cur, entry.name), childRel);
+            else
+                out.add(childRel);
+        }
+    };
+    walk(dir, '');
+    return out;
+}
+/**
+ * design 部署上传（省带宽）：
+ *   1. 本地 dist/output ──cp(local→tos)──▶ output_backup_path/    （唯一一次上传）
+ *   2. output_backup_path ──cp(tos→tos,同凭证同桶)──▶ output_latest_path  （服务端复制）
+ *   3. ls latest → 跟本地 diff → rm latest 里源端已无的对象          （精确镜像）
+ * design-html 只产 dist/output，无 output_resource / output_static / capability。
+ */
+async function uploadDesignArtifacts(opts) {
+    await Promise.resolve();
+    const tosutilPath = (0, tosutil_1.resolveTosutilPath)();
+    const outputDir = node_path_1.default.join(opts.projectDir, constants_1.DIST_DIR, constants_1.OUTPUT_DIR);
+    if (!node_fs_1.default.existsSync(outputDir)) {
+        throw new error_1.AppError('DEPLOY_NO_BUILD_OUTPUT', `Required directory missing: ${constants_1.DIST_DIR}/${constants_1.OUTPUT_DIR}`);
+    }
+    // 空产物防呆：本地一个文件都没有时，绝不继续（否则 latest 会被整体 prune 清空）。
+    const localKeys = listLocalRelKeys(outputDir);
+    if (localKeys.size === 0) {
+        throw new error_1.AppError('DEPLOY_UPLOAD_EMPTY', `No files under ${constants_1.DIST_DIR}/${constants_1.OUTPUT_DIR} to upload — check build output.`);
+    }
+    const cred = (0, protocol_1.parseTosUploadCredential)((0, protocol_1.requireDataKey)(opts.data, protocol_1.DataKey.OUTPUT_ALL_TOS_UPLOAD_CREDENTIAL), protocol_1.DataKey.OUTPUT_ALL_TOS_UPLOAD_CREDENTIAL);
+    const backupPath = (0, protocol_1.requireDataKey)(opts.data, protocol_1.DataKey.OUTPUT_BACKUP_PATH);
+    const latestPath = (0, protocol_1.requireDataKey)(opts.data, protocol_1.DataKey.OUTPUT_LATEST_PATH);
+    const base = (0, tosutil_1.tosutilUploadFromTos)(cred); // 鉴权 + bucket
+    // 1. 本地 → backup（version）：唯一一次本地上传
+    (0, logger_1.log)('deploy', `Uploading ${constants_1.OUTPUT_DIR} → ${backupPath}...`);
+    (0, tosutil_1.uploadDirWithCredential)(tosutilPath, outputDir, { ...base, prefix: backupPath }, 'output_backup');
+    // 2. backup → latest：服务端 tos→tos cp（不占带宽）
+    (0, logger_1.log)('deploy', `Server-side copy ${backupPath} → ${latestPath}...`);
+    (0, tosutil_1.copyTosToTos)(tosutilPath, base, backupPath, latestPath);
+    // 3. latest 精确镜像：删源端已不存在的对象。
+    //    安全阀：远端有对象但跟本地零重合时，判定为 key 形态/ls 解析不匹配，跳过 prune——
+    //    宁可漏删（latest 残留旧文件）也绝不误删整目录（数据丢失）。design-html 的 build.sh
+    //    必产稳定名的 routes.json / *.html，正常重合不会为空，零重合即异常信号。
+    const remoteKeys = (0, tosutil_1.listRemoteKeys)(tosutilPath, { ...base, prefix: latestPath });
+    const overlap = remoteKeys.filter((k) => localKeys.has(k));
+    if (remoteKeys.length > 0 && overlap.length === 0) {
+        (0, logger_1.log)('deploy', `⚠ latest 远端 ${String(remoteKeys.length)} 个对象与本地零重合，疑似 key 形态不匹配，跳过 prune（避免误删）`);
+        return;
+    }
+    const staleKeys = remoteKeys.filter((k) => !localKeys.has(k));
+    if (staleKeys.length > 0) {
+        (0, logger_1.log)('deploy', `Pruning ${String(staleKeys.length)} stale object(s) from latest...`);
+        (0, tosutil_1.removeRemoteKeys)(tosutilPath, { ...base, prefix: latestPath }, staleKeys);
+    }
+}

package/dist/services/deploy/modern/atoms/index.js

@@ -1,12 +1,16 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.savePluginInstances = exports.LocalReleaseStatus = exports.finalizeLocalRelease = exports.createLocalRelease = exports.uploadArtifacts = exports.runBuild = exports.preRelease = exports.prepareDeployContext = void 0;
+exports.savePluginInstances = exports.LocalReleaseStatus = exports.finalizeLocalRelease = exports.createLocalRelease = exports.uploadArtifacts = exports.uploadDesignArtifacts = exports.runDesignBuild = exports.runBuild = exports.preRelease = exports.prepareDeployContext = void 0;
 var context_1 = require("./context");
 Object.defineProperty(exports, "prepareDeployContext", { enumerable: true, get: function () { return context_1.prepareDeployContext; } });
 var pre_release_1 = require("./pre-release");
 Object.defineProperty(exports, "preRelease", { enumerable: true, get: function () { return pre_release_1.preRelease; } });
 var build_1 = require("./build");
 Object.defineProperty(exports, "runBuild", { enumerable: true, get: function () { return build_1.runBuild; } });
+var design_build_1 = require("./design-build");
+Object.defineProperty(exports, "runDesignBuild", { enumerable: true, get: function () { return design_build_1.runDesignBuild; } });
+var design_upload_1 = require("./design-upload");
+Object.defineProperty(exports, "uploadDesignArtifacts", { enumerable: true, get: function () { return design_upload_1.uploadDesignArtifacts; } });
 var upload_1 = require("./upload");
 Object.defineProperty(exports, "uploadArtifacts", { enumerable: true, get: function () { return upload_1.uploadArtifacts; } });
 var local_release_1 = require("./local-release");

package/dist/services/deploy/modern/atoms/tosutil.js

@@ -0,0 +1,234 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.resolveTosutilPath = resolveTosutilPath;
+exports.tosutilUploadFromTos = tosutilUploadFromTos;
+exports.writeTosutilConfig = writeTosutilConfig;
+exports.streamTosutilOutput = streamTosutilOutput;
+exports.normalizeTosDest = normalizeTosDest;
+exports.uploadDirWithCredential = uploadDirWithCredential;
+exports.copyTosToTos = copyTosToTos;
+exports.listRemoteKeys = listRemoteKeys;
+exports.removeRemoteKeys = removeRemoteKeys;
+const node_fs_1 = __importDefault(require("node:fs"));
+const node_os_1 = __importDefault(require("node:os"));
+const node_path_1 = __importDefault(require("node:path"));
+const node_child_process_1 = require("node:child_process");
+const error_1 = require("../../../../utils/error");
+const logger_1 = require("../../../../utils/logger");
+function resolveTosutilPath() {
+    try {
+        const resolved = (0, node_child_process_1.execFileSync)('which', ['tosutil'], { encoding: 'utf-8' }).trim();
+        if (resolved)
+            return resolved;
+    }
+    catch {
+        /* fallthrough */
+    }
+    throw new error_1.AppError('DEPLOY_TOSUTIL_MISSING', 'tosutil is not installed or not in PATH. modern deploy requires sandbox preinstalled tosutil.');
+}
+function tosutilUploadFromTos(cred) {
+    return {
+        accessKeyID: cred.accessKeyID,
+        secretAccessKey: cred.secretAccessKey,
+        sessionToken: cred.sessionToken,
+        endpoint: cred.endpoint,
+        region: cred.region,
+        bucket: cred.bucket,
+        prefix: cred.prefix,
+    };
+}
+/**
+ * 写一个 tosutil 临时 config 文件，注入 STS 凭证 + endpoint + region。
+ * 返回 config 路径，调用方负责清理。
+ */
+function writeTosutilConfig(tosutilPath, cred, label) {
+    const confPath = node_path_1.default.join(node_os_1.default.tmpdir(), `.tosutilconfig-miaoda-${label}-${String(process.pid)}-${String(Date.now())}`);
+    node_fs_1.default.writeFileSync(confPath, '');
+    (0, node_child_process_1.execFileSync)(tosutilPath, [
+        'config',
+        '-conf',
+        confPath,
+        '-e',
+        cred.endpoint,
+        '-i',
+        cred.accessKeyID,
+        '-k',
+        cred.secretAccessKey,
+        '-t',
+        cred.sessionToken,
+        '-re',
+        cred.region,
+    ], { stdio: 'pipe' });
+    return confPath;
+}
+/** 把 tosutil 进程的输出按行回放到 stderr，便于线上排查（沙箱里无法 attach 进程）。 */
+function streamTosutilOutput(output) {
+    if (!output)
+        return;
+    for (const line of output.split('\n')) {
+        if (line.length === 0)
+            continue;
+        process.stderr.write(`[tosutil] ${line}\n`);
+    }
+}
+function normalizeTosDest(bucket, prefix) {
+    const bucketPart = bucket.startsWith('tos://') ? bucket : `tos://${bucket}`;
+    const normalized = prefix.replace(/^\/+/, '');
+    return `${bucketPart.replace(/\/+$/, '')}/${normalized}`;
+}
+/**
+ * 用 tosutil 把目录批量上传到 tos://bucket/prefix（STS 凭证从 config 文件读取）。
+ */
+function uploadDirWithCredential(tosutilPath, sourceDir, cred, label) {
+    const entries = node_fs_1.default.readdirSync(sourceDir);
+    if (entries.length === 0) {
+        (0, logger_1.debug)(`upload: skip empty dir ${sourceDir}`);
+        return;
+    }
+    const dest = normalizeTosDest(cred.bucket, cred.prefix);
+    (0, logger_1.debug)(`upload: ${sourceDir} -> ${dest} (${String(entries.length)} entries)`);
+    const confPath = writeTosutilConfig(tosutilPath, cred, label);
+    let output;
+    try {
+        output = (0, node_child_process_1.execFileSync)(tosutilPath, [
+            'cp',
+            sourceDir,
+            dest,
+            '-r',
+            '-flat',
+            '-j',
+            '5',
+            '-p',
+            '3',
+            '-ps',
+            '10485760',
+            '-f',
+            '-conf',
+            confPath,
+        ], { encoding: 'utf-8', stdio: ['pipe', 'pipe', 'pipe'] });
+        streamTosutilOutput(output);
+    }
+    catch (err) {
+        const e = err;
+        const stderr = (e.stderr ?? '').trim();
+        const stdout = (e.stdout ?? '').trim();
+        streamTosutilOutput(stdout);
+        streamTosutilOutput(stderr);
+        throw new error_1.AppError('DEPLOY_UPLOAD_FAILED', `tosutil cp exited with status ${String(e.status ?? -1)} for ${sourceDir}\n` +
+            `  stderr: ${stderr || '(empty)'}\n` +
+            `  stdout: ${stdout.slice(0, 500) || '(empty)'}`);
+    }
+    finally {
+        try {
+            node_fs_1.default.unlinkSync(confPath);
+        }
+        catch {
+            /* ignore */
+        }
+    }
+    const succeedMatch = /Succeed count is:\s*(\d+)/.exec(output);
+    const failedMatch = /Failed count is:\s*(\d+)/.exec(output);
+    const succeedCount = succeedMatch ? Number.parseInt(succeedMatch[1], 10) : 0;
+    const failedCount = failedMatch ? Number.parseInt(failedMatch[1], 10) : 0;
+    if (failedCount > 0) {
+        throw new error_1.AppError('DEPLOY_UPLOAD_FAILED', `Upload failed: ${String(failedCount)} files failed, ${String(succeedCount)} succeeded. source=${sourceDir}`);
+    }
+    if (succeedCount === 0) {
+        throw new error_1.AppError('DEPLOY_UPLOAD_EMPTY', `Upload failed: 0 files uploaded. source=${sourceDir}. Check tosutil credentials and bucket permissions.`);
+    }
+}
+/** version→latest 同桶同凭证服务端复制：tosutil cp tos://src tos://dst -r -flat -f */
+function copyTosToTos(tosutilPath, cred, srcPrefix, dstPrefix) {
+    const src = normalizeTosDest(cred.bucket, srcPrefix);
+    const dst = normalizeTosDest(cred.bucket, dstPrefix);
+    const confPath = writeTosutilConfig(tosutilPath, cred, 'tos2tos');
+    try {
+        const out = (0, node_child_process_1.execFileSync)(tosutilPath, ['cp', src, dst, '-r', '-flat', '-f', '-j', '5', '-conf', confPath], { encoding: 'utf-8', stdio: ['pipe', 'pipe', 'pipe'] });
+        streamTosutilOutput(out);
+    }
+    catch (err) {
+        const e = err;
+        streamTosutilOutput((e.stdout ?? '').trim());
+        streamTosutilOutput((e.stderr ?? '').trim());
+        throw new error_1.AppError('DEPLOY_UPLOAD_FAILED', `tosutil cp(tos→tos) exited status ${String(e.status ?? -1)}: ${src} → ${dst}`);
+    }
+    finally {
+        try {
+            node_fs_1.default.unlinkSync(confPath);
+        }
+        catch {
+            /* ignore */
+        }
+    }
+}
+/** 列 tos://bucket/prefix 下所有对象，返回相对 prefix 的 key 集合（用 ls -r -s 精简格式）。 */
+function listRemoteKeys(tosutilPath, cred) {
+    const base = normalizeTosDest(cred.bucket, cred.prefix); // tos://bucket/prefix
+    const confPath = writeTosutilConfig(tosutilPath, cred, 'ls');
+    let out;
+    try {
+        out = (0, node_child_process_1.execFileSync)(tosutilPath, ['ls', base, '-r', '-s', '-conf', confPath], {
+            encoding: 'utf-8',
+            stdio: ['pipe', 'pipe', 'pipe'],
+        });
+    }
+    catch (err) {
+        const e = err;
+        throw new error_1.AppError('DEPLOY_UPLOAD_FAILED', `tosutil ls exited status ${String(e.status ?? -1)} for ${base}: ${(e.stderr ?? '').trim()}`);
+    }
+    finally {
+        try {
+            node_fs_1.default.unlinkSync(confPath);
+        }
+        catch {
+            /* ignore */
+        }
+    }
+    const prefixUri = base.replace(/\/+$/, '') + '/';
+    const keys = [];
+    for (const line of out.split('\n')) {
+        const t = line.trim();
+        if (!t.startsWith(prefixUri))
+            continue;
+        const rel = t.slice(prefixUri.length);
+        if (rel.length > 0 && !rel.endsWith('/'))
+            keys.push(rel);
+    }
+    return keys;
+}
+/** 删除 tos://bucket/prefix 下指定相对 key（逐个 rm -f）。 */
+function removeRemoteKeys(tosutilPath, cred, relKeys) {
+    if (relKeys.length === 0)
+        return;
+    const confPath = writeTosutilConfig(tosutilPath, cred, 'rm');
+    const prefix = cred.prefix.replace(/\/+$/, '');
+    const failed = [];
+    try {
+        for (const rel of relKeys) {
+            // 用与 cp/ls 同一份 normalizeTosDest 拼目标 URI，避免删除路径与其它操作漂移。
+            const dest = normalizeTosDest(cred.bucket, `${prefix}/${rel}`);
+            try {
+                (0, node_child_process_1.execFileSync)(tosutilPath, ['rm', dest, '-f', '-conf', confPath], {
+                    stdio: ['pipe', 'pipe', 'pipe'],
+                });
+            }
+            catch {
+                failed.push(rel);
+            }
+        }
+    }
+    finally {
+        try {
+            node_fs_1.default.unlinkSync(confPath);
+        }
+        catch {
+            /* ignore */
+        }
+    }
+    if (failed.length > 0) {
+        throw new error_1.AppError('DEPLOY_UPLOAD_FAILED', `prune latest failed for: ${failed.join(', ')}`);
+    }
+}

package/dist/services/deploy/modern/atoms/upload.js

@@ -5,14 +5,13 @@ var __importDefault = (this && this.__importDefault) || function (mod) {
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.uploadArtifacts = uploadArtifacts;
 const node_fs_1 = __importDefault(require("node:fs"));
-const node_os_1 = __importDefault(require("node:os"));
 const node_path_1 = __importDefault(require("node:path"));
-const node_child_process_1 = require("node:child_process");
 const index_1 = require("../../../../api/deploy/index");
 const error_1 = require("../../../../utils/error");
 const logger_1 = require("../../../../utils/logger");
 const constants_1 = require("../constants");
 const protocol_1 = require("../protocol");
+const tosutil_1 = require("./tosutil");
 const UPLOAD_PLAN = [
     {
         kind: 'tos',
@@ -32,28 +31,6 @@ const UPLOAD_PLAN = [
         dataKey: protocol_1.DataKey.OUTPUT_STATIC_PAAS_STORAGE_CREDENTIAL,
     },
 ];
-function resolveTosutilPath() {
-    try {
-        const resolved = (0, node_child_process_1.execFileSync)('which', ['tosutil'], { encoding: 'utf-8' }).trim();
-        if (resolved)
-            return resolved;
-    }
-    catch {
-        /* fallthrough */
-    }
-    throw new error_1.AppError('DEPLOY_TOSUTIL_MISSING', 'tosutil is not installed or not in PATH. modern deploy requires sandbox preinstalled tosutil.');
-}
-function tosutilUploadFromTos(cred) {
-    return {
-        accessKeyID: cred.accessKeyID,
-        secretAccessKey: cred.secretAccessKey,
-        sessionToken: cred.sessionToken,
-        endpoint: cred.endpoint,
-        region: cred.region,
-        bucket: cred.bucket,
-        prefix: cred.prefix,
-    };
-}
 function tosutilUploadFromPaasStorage(cred, dataKey) {
     const { bucket, prefix } = (0, protocol_1.parseTosUploadPrefix)(cred.uploadPrefix, dataKey);
     return {
@@ -66,106 +43,6 @@ function tosutilUploadFromPaasStorage(cred, dataKey) {
         prefix,
     };
 }
-/**
- * 写一个 tosutil 临时 config 文件，注入 STS 凭证 + endpoint + region。
- * 返回 config 路径，调用方负责清理。
- */
-function writeTosutilConfig(tosutilPath, cred, label) {
-    const confPath = node_path_1.default.join(node_os_1.default.tmpdir(), `.tosutilconfig-miaoda-${label}-${String(process.pid)}-${String(Date.now())}`);
-    node_fs_1.default.writeFileSync(confPath, '');
-    (0, node_child_process_1.execFileSync)(tosutilPath, [
-        'config',
-        '-conf',
-        confPath,
-        '-e',
-        cred.endpoint,
-        '-i',
-        cred.accessKeyID,
-        '-k',
-        cred.secretAccessKey,
-        '-t',
-        cred.sessionToken,
-        '-re',
-        cred.region,
-    ], { stdio: 'pipe' });
-    return confPath;
-}
-/** 把 tosutil 进程的输出按行回放到 stderr，便于线上排查（沙箱里无法 attach 进程）。 */
-function streamTosutilOutput(output) {
-    if (!output)
-        return;
-    for (const line of output.split('\n')) {
-        if (line.length === 0)
-            continue;
-        process.stderr.write(`[tosutil] ${line}\n`);
-    }
-}
-function normalizeTosDest(bucket, prefix) {
-    const bucketPart = bucket.startsWith('tos://') ? bucket : `tos://${bucket}`;
-    const normalized = prefix.replace(/^\/+/, '');
-    return `${bucketPart.replace(/\/+$/, '')}/${normalized}`;
-}
-/**
- * 用 tosutil 把目录批量上传到 tos://bucket/prefix（STS 凭证从 config 文件读取）。
- */
-function uploadDirWithCredential(tosutilPath, sourceDir, cred, label) {
-    const entries = node_fs_1.default.readdirSync(sourceDir);
-    if (entries.length === 0) {
-        (0, logger_1.debug)(`upload: skip empty dir ${sourceDir}`);
-        return;
-    }
-    const dest = normalizeTosDest(cred.bucket, cred.prefix);
-    (0, logger_1.debug)(`upload: ${sourceDir} -> ${dest} (${String(entries.length)} entries)`);
-    const confPath = writeTosutilConfig(tosutilPath, cred, label);
-    let output;
-    try {
-        output = (0, node_child_process_1.execFileSync)(tosutilPath, [
-            'cp',
-            sourceDir,
-            dest,
-            '-r',
-            '-flat',
-            '-j',
-            '5',
-            '-p',
-            '3',
-            '-ps',
-            '10485760',
-            '-f',
-            '-conf',
-            confPath,
-        ], { encoding: 'utf-8', stdio: ['pipe', 'pipe', 'pipe'] });
-        streamTosutilOutput(output);
-    }
-    catch (err) {
-        const e = err;
-        const stderr = (e.stderr ?? '').trim();
-        const stdout = (e.stdout ?? '').trim();
-        streamTosutilOutput(stdout);
-        streamTosutilOutput(stderr);
-        throw new error_1.AppError('DEPLOY_UPLOAD_FAILED', `tosutil cp exited with status ${String(e.status ?? -1)} for ${sourceDir}\n` +
-            `  stderr: ${stderr || '(empty)'}\n` +
-            `  stdout: ${stdout.slice(0, 500) || '(empty)'}`);
-    }
-    finally {
-        try {
-            node_fs_1.default.unlinkSync(confPath);
-        }
-        catch {
-            /* ignore */
-        }
-    }
-    const succeedMatch = /Succeed count is:\s*(\d+)/.exec(output);
-    const failedMatch = /Failed count is:\s*(\d+)/.exec(output);
-    const succeedCount = succeedMatch ? Number.parseInt(succeedMatch[1], 10) : 0;
-    const failedCount = failedMatch ? Number.parseInt(failedMatch[1], 10) : 0;
-    if (failedCount > 0) {
-        throw new error_1.AppError('DEPLOY_UPLOAD_FAILED', `Upload failed: ${String(failedCount)} files failed, ${String(succeedCount)} succeeded. source=${sourceDir}`);
-    }
-    if (succeedCount === 0) {
-        throw new error_1.AppError('DEPLOY_UPLOAD_EMPTY', `Upload failed: 0 files uploaded. source=${sourceDir}. Check tosutil credentials and bucket permissions.`);
-    }
-}
 function uploadTosTarget(tosutilPath, target, localPath, data) {
     const credRaw = target.required
         ? (0, protocol_1.requireDataKey)(data, target.dataKey)
@@ -176,7 +53,7 @@ function uploadTosTarget(tosutilPath, target, localPath, data) {
     }
     const cred = (0, protocol_1.parseTosUploadCredential)(credRaw, target.dataKey);
     (0, logger_1.log)('deploy', `Uploading ${target.dir}...`);
-    uploadDirWithCredential(tosutilPath, localPath, tosutilUploadFromTos(cred), target.dir);
+    (0, tosutil_1.uploadDirWithCredential)(tosutilPath, localPath, (0, tosutil_1.tosutilUploadFromTos)(cred), target.dir);
     return true;
 }
 function uploadPaasStorageTarget(tosutilPath, target, localPath, data) {
@@ -188,7 +65,7 @@ function uploadPaasStorageTarget(tosutilPath, target, localPath, data) {
     }
     const cred = (0, protocol_1.parsePaasStorageCredential)((0, protocol_1.requireDataKey)(data, target.dataKey), target.dataKey);
     (0, logger_1.log)('deploy', `Uploading ${target.dir}...`);
-    uploadDirWithCredential(tosutilPath, localPath, tosutilUploadFromPaasStorage(cred, target.dataKey), target.dir);
+    (0, tosutil_1.uploadDirWithCredential)(tosutilPath, localPath, tosutilUploadFromPaasStorage(cred, target.dataKey), target.dir);
     return cred;
 }
 /**
@@ -202,7 +79,7 @@ function uploadPaasStorageTarget(tosutilPath, target, localPath, data) {
  * 目录不存在的可选项跳过；output 不存在或凭证缺失抛错。
  */
 async function uploadArtifacts(opts) {
-    const tosutilPath = resolveTosutilPath();
+    const tosutilPath = (0, tosutil_1.resolveTosutilPath)();
     const distDir = node_path_1.default.join(opts.projectDir, constants_1.DIST_DIR);
     const outcome = { uploaded: 0 };
     for (const target of UPLOAD_PLAN) {

package/dist/services/deploy/modern/pipelines/design-local.js

@@ -0,0 +1,47 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.designLocalPublishPipeline = designLocalPublishPipeline;
+const spark_meta_1 = require("../../../../utils/spark-meta");
+const error_1 = require("../../../../utils/error");
+const logger_1 = require("../../../../utils/logger");
+const index_1 = require("../atoms/index");
+/**
+ * design（design_local_deploy）本地构建 + 本地部署 pipeline。
+ *
+ * 与 client 版差异：build 走 runDesignBuild、upload 走 uploadDesignArtifacts（version+latest
+ * 双写、latest 精确镜像）、不注册插件能力（design-html 无 capability）。其余复用同一套 atom。
+ */
+async function designLocalPublishPipeline(opts) {
+    const ctx = (0, index_1.prepareDeployContext)(opts.projectDir, opts.appId);
+    (0, logger_1.log)('deploy', 'Pre-releasing...');
+    const pre = await (0, index_1.preRelease)(ctx.appId, ctx.templateKey);
+    (0, logger_1.log)('deploy', `pre_release_id=${pre.preReleaseID} version=${pre.version}`);
+    if (pre.data === undefined) {
+        throw new error_1.AppError('DEPLOY_PRE_RELEASE_DATA_MISSING', 'preRelease did not return a `data` map — backend tcc may not be configured for current template_key');
+    }
+    const data = pre.data;
+    if (!opts.skipBuild) {
+        (0, index_1.runDesignBuild)({ projectDir: ctx.projectDir });
+    }
+    (0, logger_1.log)('deploy', 'Creating local release...');
+    const release = await (0, index_1.createLocalRelease)(ctx.appId, pre.version);
+    try {
+        await (0, index_1.uploadDesignArtifacts)({ projectDir: ctx.projectDir, data });
+        await (0, index_1.finalizeLocalRelease)(ctx.appId, release.releaseID, index_1.LocalReleaseStatus.Finished);
+    }
+    catch (err) {
+        await (0, index_1.finalizeLocalRelease)(ctx.appId, release.releaseID, index_1.LocalReleaseStatus.Failed);
+        throw err;
+    }
+    if (release.onlineUrl !== undefined && release.onlineUrl !== '') {
+        (0, spark_meta_1.writeSparkMeta)(ctx.projectDir, { appUrl: release.onlineUrl });
+    }
+    (0, logger_1.log)('deploy', 'Deployed successfully');
+    return {
+        appId: ctx.appId,
+        version: pre.version,
+        url: release.onlineUrl ?? '',
+        releaseID: release.releaseID,
+        preReleaseID: pre.preReleaseID,
+    };
+}

package/dist/services/deploy/modern/pipelines/index.js

@@ -1,5 +1,7 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.localBuildLocalPublishPipeline = void 0;
+exports.designLocalPublishPipeline = exports.localBuildLocalPublishPipeline = void 0;
 var local_1 = require("./local");
 Object.defineProperty(exports, "localBuildLocalPublishPipeline", { enumerable: true, get: function () { return local_1.localBuildLocalPublishPipeline; } });
+var design_local_1 = require("./design-local");
+Object.defineProperty(exports, "designLocalPublishPipeline", { enumerable: true, get: function () { return design_local_1.designLocalPublishPipeline; } });

package/dist/services/deploy/modern/protocol.js

@@ -33,6 +33,13 @@ exports.DataKey = {
     // downloadURLPrefix 替代原 static_cdn_prefix 注入 build env。
     /** dist/output_static 上传凭证（仅当目录存在时使用） */
     OUTPUT_STATIC_PAAS_STORAGE_CREDENTIAL: 'output_static_paas_storage_credential',
+    // ── design 部署专用（design_local_deploy） ──
+    /** 覆盖整个 {app_id} 文件夹的上传凭证（形态同 TosUploadCredential） */
+    OUTPUT_ALL_TOS_UPLOAD_CREDENTIAL: 'output_all_tos_upload_credential',
+    /** version/备份份真实路径（后端已替换 {app_id}/{version}） */
+    OUTPUT_BACKUP_PATH: 'output_backup_path',
+    /** latest 份真实路径（后端已替换 {app_id}/latest） */
+    OUTPUT_LATEST_PATH: 'output_latest_path',
 };
 /** 取必传 key，缺失抛 AppError（带 key 名，便于后端 tcc 配置排查） */
 function requireDataKey(data, key) {

package/dist/services/deploy/modern/run.js

@@ -1,13 +1,19 @@
 "use strict";
 // modern deploy 主入口（dispatch 层）。
 //
-// 当前阶段（Scope A）只接入"本地构建 + 本地部署"一条 pipeline；
-// 后续接入"本地构建 + 远端部署 / 远端构建 + 远端部署"时，在此处按 template_key
-// 或显式 flag 选不同 pipeline。pipeline 之间彼此独立、不共享中间状态。
+// 按 templateKey 选 pipeline：design_local_deploy → design pipeline，其余 → client pipeline。
+// 仅为路由轻量解析 templateKey（读 meta.stack + 映射），不跑前置检查——前置检查在各
+// pipeline 内部的 prepareDeployContext 里做。client 分支与原行为完全一致。
+// pipeline 之间彼此独立、不共享中间状态。
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.runModernDeploy = runModernDeploy;
+const spark_meta_1 = require("../../../utils/spark-meta");
+const template_key_map_1 = require("./template-key-map");
 const index_1 = require("./pipelines/index");
 async function runModernDeploy(opts) {
-    // 暂只支持本地构建 + 本地部署
+    const stack = (0, spark_meta_1.readSparkMeta)(opts.projectDir).stack ?? '';
+    if ((0, template_key_map_1.resolveTemplateKey)(stack) === template_key_map_1.DESIGN_LOCAL_DEPLOY) {
+        return (0, index_1.designLocalPublishPipeline)(opts);
+    }
     return (0, index_1.localBuildLocalPublishPipeline)(opts);
 }

package/dist/services/deploy/modern/template-key-map.js

@@ -1,5 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
+exports.DESIGN_LOCAL_DEPLOY = void 0;
 exports.resolveTemplateKey = resolveTemplateKey;
 /**
  * 本地 stack 短名 → 后端发布模板 key 的映射。
@@ -10,9 +11,12 @@ exports.resolveTemplateKey = resolveTemplateKey;
  * 未来出现需要走别的 templateKey 的 stack，再在表里加一行覆盖默认。
  */
 const DEFAULT_TEMPLATE_KEY = 'client_local_deploy';
+/** design 部署 templateKey（run.ts 据此分流到 design pipeline） */
+exports.DESIGN_LOCAL_DEPLOY = 'design_local_deploy';
 const TEMPLATE_KEY_MAP = {
     'vite-react': DEFAULT_TEMPLATE_KEY,
     html: DEFAULT_TEMPLATE_KEY,
+    'design-html': exports.DESIGN_LOCAL_DEPLOY,
 };
 /**
  * 把本地 stack 短名映射到后端 templateKey；未配置的 stack 走默认 client_local_deploy。

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lark-apaas/miaoda-cli",
-  "version": "0.1.17-beta.45b48d2",
+  "version": "0.1.18-alpha.5fd4656",
   "description": "Miaoda 平台命令行工具，面向 Agent 调用",
   "type": "commonjs",
   "bin": {

package/upgrade/templates/design-html/templates/scripts/build.sh

@@ -0,0 +1,70 @@
+#!/bin/bash
+set -e
+
+# design-html 的「构建」= 打包，不是编译。
+# 1. 把源文件原样拷进 dist/output/（保留目录层级），排除工具/公共文件；
+# 2. 扫描 .html 生成 dist/output/routes.json（schema 与 vite-react 对齐：[{ path }]）。
+# 无 bundler、无 transpile —— 源码即产物。
+
+ROOT="$(cd "$(dirname "$0")/.." && pwd)"
+OUTPUT="$ROOT/dist/output"
+
+# basePath：平台注入 CLIENT_BASE_PATH 作为路由前缀（如 /app/<id>）；
+# 本地裸跑不设则为空（routes 退到 '/'）。
+BASE_PATH="${CLIENT_BASE_PATH:-}"
+
+# 不进产物的公共 / 工具文件（rsync 模式，相对 ROOT）
+EXCLUDES=(
+  ".git" "node_modules" "dist" "scripts"
+  "package.json" "package-lock.json" "pnpm-lock.yaml" "yarn.lock"
+  ".gitignore" ".npmrc" ".agent" ".env" ".env.local"
+  "README.md" ".DS_Store" ".spark"
+)
+
+# 清理 & 拷贝
+rm -rf "$ROOT/dist"
+mkdir -p "$OUTPUT"
+
+rsync_args=(-a)
+for e in "${EXCLUDES[@]}"; do rsync_args+=(--exclude "$e"); done
+rsync "${rsync_args[@]}" "$ROOT/" "$OUTPUT/"
+
+# 生成 routes.json
+OUTPUT="$OUTPUT" BASE_PATH="$BASE_PATH" node --input-type=module <<'NODE'
+import { readdirSync, statSync, writeFileSync } from 'node:fs';
+import { join, relative, sep } from 'node:path';
+
+const out = process.env.OUTPUT;
+const base = (process.env.BASE_PATH || '').replace(/\/+$/, '');
+
+const htmls = [];
+(function walk(dir) {
+  for (const name of readdirSync(dir)) {
+    const p = join(dir, name);
+    if (statSync(p).isDirectory()) walk(p);
+    else if (name.toLowerCase().endsWith('.html')) htmls.push(relative(out, p));
+  }
+})(out);
+
+function toRoute(rel) {
+  let r = '/' + rel.split(sep).join('/'); // '/about.html' | '/blog/index.html'
+  r = r.replace(/\.html$/i, '');          // '/about'      | '/blog/index'
+  r = r.replace(/(^|\/)index$/, '$1');    // '/about'      | '/blog/'
+  if (r.length > 1) r = r.replace(/\/$/, ''); // 去掉非根的尾斜杠 → '/blog'
+  const full = base + r;
+  return full === '' ? '/' : full;
+}
+
+const routes = [...new Set(htmls.map(toRoute))]
+  .sort()
+  .map((path) => ({ path }));
+
+// 空白画布或无 html 时给一个默认根路由，保证 routes.json 始终可用
+if (routes.length === 0) routes.push({ path: base ? `${base}/` : '/' });
+
+writeFileSync(join(out, 'routes.json'), JSON.stringify(routes, null, 2) + '\n');
+console.log(`Generated routes.json (${routes.length} routes)`);
+NODE
+
+echo "Build complete"
+echo "  Output → dist/output/ (+ routes.json)"