@lark-apaas/miaoda-cli 0.1.39-alpha.44e04b8 → 0.1.39-alpha.508c930

package/README.md

@@ -54,20 +54,13 @@ miaoda file ls --output json
 
 ## 全栈应用的 MCP UI 检查
 
-`miaoda app sync` 为 `nestjs-react-fullstack` 应用同步 `scripts/lint.js` 和独立 `scripts/check.cjs`，在
-`tsconfig.node.json` 中追加 `server/mcp/ui` 排除项，并保留现有配置及继承的排除路径。
-根 `eslint.config.js` / `.mjs` / `.cjs` 会增量追加 UI 全局忽略，直接 ESLint 调用和编辑器检查均生效。
-迁移不执行配置文件；无法静态识别的自定义导出保留并提示手动补齐。
-已知模板版本的 `type:check`、`eslint` 命令会迁移到独立检查入口；自定义命令保留并提示。
-类型检查及 UI 检查直接调用 `check.cjs`，不会回到 `lint.js`；旧版 sync 覆盖聚合脚本时独立入口仍保留，避免递归。
-
-- `npm run type:check`：检查服务端、客户端及 MCP UI。
-- `npm run type:check:mcp-ui` / `npm run eslint:mcp-ui`：单独检查 MCP UI。
-- `npm run lint -- --files <files...>`：按改动文件选择检查范围。
-
-同步不会生成 MCP UI 目录。开发 MCP UI 时，由 Agent 按 MCP 指南创建
-`server/mcp/ui/tsconfig.json` 和根目录 `eslint.mcp-ui.config.cjs`。
-没有 UI 源码时跳过独立检查；存在 UI 源码但缺少配置时明确报错。
+创建 MCP UI 时，Agent 在 `server/mcp/ui` 中同时生成 `tsconfig.json` 和 `eslint.config.cjs`，修改 UI 或其 shared 依赖后主动运行独立检查。模板和 CLI 不生成 UI 配置，也不将 UI 检查接入主工程 lint/type:check。
+
+主工程保留原 client/server 检查。Agent 从工程根执行 `npx --no-install tsc --noEmit --project server/mcp/ui/tsconfig.json`，再执行 `npx --no-install eslint --config server/mcp/ui/eslint.config.cjs "server/mcp/ui/**/*.{ts,tsx,js,jsx}" --max-warnings 0`；必须检查退出码并修复错误。无需辅助脚本或新增 npm 命令。
+
+CLI 不注入 MCP UI 检查命令；主工程保留原有 client/server 检查，UI 由 Agent 按独立配置执行标准 tsc/eslint。
+
+存量 sync 不改写 ESLint 源码；UI 全局排除项由平台 ESLint 预设提供。TS 仅向已有显式 `exclude` 数组追加目录，保留注释和原项；依赖继承且未显式声明 `exclude` 的自定义配置保持不变并提示人工调整。自定义检查命令保留。lint.js 和 build.sh 仍由平台脚本模板维护，不依赖预设包中的脚本执行入口。
 
 ## 打包可本地访问的静态产物
 

package/dist/config/sync-configs/nestjs-react-fullstack.js

@@ -159,56 +159,12 @@ exports.SYNC_CONFIG = {
             to: `npx -y ${fullstack_cli_pin_1.FULLSTACK_CLI_PIN_SPEC} sync --disable-gen-openapi`,
             ifStartsWith: 'npx -y @lark-apaas/fullstack-cli sync',
         },
-        { type: 'eslint-ignore', to: 'eslint.config.js', pattern: 'server/mcp/ui/**' },
-        { type: 'eslint-ignore', to: 'eslint.config.mjs', pattern: 'server/mcp/ui/**' },
-        { type: 'eslint-ignore', to: 'eslint.config.cjs', pattern: 'server/mcp/ui/**' },
-        // MCP UI 使用独立浏览器配置；仅迁移已知模板命令，不生成 UI 目录或配置。
+        // MCP UI 使用独立浏览器配置；只补服务端排除项，不生成 UI 目录和配置。
         {
             type: 'typescript-exclude',
             to: 'tsconfig.node.json',
             path: 'server/mcp/ui',
         },
-        {
-            type: 'add-script',
-            name: 'type:check:mcp-ui',
-            command: 'node ./scripts/check.cjs --typecheck-mcp-ui',
-            overwrite: false,
-        },
-        {
-            type: 'add-script',
-            name: 'eslint:mcp-ui',
-            command: 'node ./scripts/check.cjs --eslint-mcp-ui',
-            overwrite: false,
-        },
-        {
-            type: 'patch-script',
-            name: 'type:check:mcp-ui',
-            to: 'node ./scripts/check.cjs --typecheck-mcp-ui',
-            ifEquals: ['node ./scripts/lint.js --typecheck-mcp-ui'],
-        },
-        {
-            type: 'patch-script',
-            name: 'eslint:mcp-ui',
-            to: 'node ./scripts/check.cjs --eslint-mcp-ui',
-            ifEquals: ['node ./scripts/lint.js --eslint-mcp-ui'],
-        },
-        {
-            type: 'patch-script',
-            name: 'type:check',
-            to: 'node ./scripts/check.cjs --typecheck',
-            ifEquals: [
-                'node ./scripts/lint.js --typecheck',
-                'concurrently -n "server,client" -c "blue,green" "npm run type:check:server" "npm run type:check:client"',
-                'concurrently "npm run type:check:server" "npm run type:check:client"',
-                'concurrently "npm run type:check:client" "npm run type:check:server"',
-            ],
-        },
-        {
-            type: 'patch-script',
-            name: 'eslint',
-            to: 'eslint . --quiet --ignore-pattern "server/mcp/ui/**"',
-            ifEquals: ['eslint . --quiet', 'eslint .'],
-        },
         // ===== miaoda-cli 本地开发新增规则（fullstack-cli sync 不会执行） =====
         // M1. scripts.dev:local —— 本地用户绕过沙箱判定直接跑本地链路（npm run dev:local）。
         //     dev.sh 在 MIAODA_DEP_CACHE_DIR 非空时跑 dev.js（沙箱保活）、否则 exec dev-local.js；显式 dev:local

package/dist/utils/sync-rule.js

@@ -44,7 +44,6 @@ const file_ops_1 = require("./file-ops");
 const merge_json_1 = require("./merge-json");
 const logger_1 = require("./logger");
 const typescript_exclude_1 = require("./typescript-exclude");
-const eslint_ignore_1 = require("./eslint-ignore");
 /**
  * 顺序执行 SyncRule[]，逐条 apply。一条 rule 报错不影响后续 rule（catch + 记录），最终
  * 在 handler 层决定是否整体 fail。
@@ -108,19 +107,6 @@ function applyOne(rule, opts) {
         case 'patch-script': {
             return applyPatchScript(rule, targetDir, logPrefix);
         }
-        case 'eslint-ignore': {
-            const result = (0, eslint_ignore_1.addEslintGlobalIgnore)(node_path_1.default.join(targetDir, rule.to), rule.pattern);
-            if (result.warning)
-                (0, logger_1.log)(logPrefix, `  ⚠ ${result.warning}`);
-            if (result.changed)
-                (0, logger_1.log)(logPrefix, `  ✓ ${rule.to} (global ignore ${rule.pattern})`);
-            return {
-                rule,
-                action: result.changed ? 'patched' : result.warning ? 'skipped' : 'noop',
-                path: rule.to,
-                detail: result.warning,
-            };
-        }
         case 'typescript-exclude': {
             const changed = (0, typescript_exclude_1.excludeTypeScriptPath)(node_path_1.default.join(targetDir, rule.to), rule.path);
             (0, logger_1.log)(logPrefix, `  ${changed ? '✓' : '○'} ${rule.to} (exclude ${rule.path})`);
@@ -235,10 +221,7 @@ function applyPatchScript(rule, targetDir, logPrefix) {
         (0, logger_1.log)(logPrefix, `  ○ scripts.${rule.name} (already patched)`);
         return { rule, action: 'noop', path: 'package.json' };
     }
-    const matches = rule.ifEquals
-        ? rule.ifEquals.includes(current)
-        : rule.ifStartsWith !== undefined && current.startsWith(rule.ifStartsWith);
-    if (!matches) {
+    if (!current.startsWith(rule.ifStartsWith)) {
         (0, logger_1.log)(logPrefix, `  ⚠ scripts.${rule.name} customized, skip patch`);
         return { rule, action: 'skipped', path: 'package.json' };
     }

package/dist/utils/typescript-exclude.js

@@ -5,58 +5,32 @@ var __importDefault = (this && this.__importDefault) || function (mod) {
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.excludeTypeScriptPath = excludeTypeScriptPath;
 const node_fs_1 = __importDefault(require("node:fs"));
-const node_path_1 = __importDefault(require("node:path"));
-const typescript_1 = __importDefault(require("typescript"));
 const jsonc_parser_1 = require("jsonc-parser");
 const error_1 = require("./error");
-/** 追加排除项，保留 JSONC 注释和继承的排除路径；不创建缺失的配置。 */
+/** Only append to explicit template excludes; never rewrite inherited user configuration. */
 function excludeTypeScriptPath(filename, excludedPath) {
     if (!node_fs_1.default.existsSync(filename))
         return false;
     const source = node_fs_1.default.readFileSync(filename, 'utf8');
     const errors = [];
     const raw = (0, jsonc_parser_1.parse)(source, errors, { allowTrailingComma: true });
-    if (errors.length || !raw || typeof raw !== 'object' || Array.isArray(raw)) {
-        throw new error_1.AppError('INVALID_CONFIG', `Invalid TypeScript configuration: ${filename}`);
-    }
-    const parsed = typescript_1.default.getParsedCommandLineOfConfigFile(filename, {}, {
-        ...typescript_1.default.sys,
-        onUnRecoverableConfigFileDiagnostic: (diagnostic) => {
-            throw new error_1.AppError('INVALID_CONFIG', typescript_1.default.flattenDiagnosticMessageText(diagnostic.messageText, '\n'));
-        },
-    });
-    // 初始化中的空工程允许迁移，其他错误不能被静默忽略。
-    const diagnostics = parsed?.errors.filter((d) => d.code !== 18003 && d.code !== 18002) ?? [];
-    if (!parsed || diagnostics.length) {
-        throw new error_1.AppError('INVALID_CONFIG', `Cannot migrate ${filename}: ${diagnostics.map((d) => typescript_1.default.flattenDiagnosticMessageText(d.messageText, '\n')).join('; ')}`);
-    }
-    const effective = parsed.raw;
-    const excludes = effective.exclude ?? [
-        'node_modules',
-        'bower_components',
-        'jspm_packages',
-        ...[parsed.options.outDir, parsed.options.declarationDir]
-            .filter((p) => Boolean(p))
-            .map((p) => node_path_1.default.relative(node_path_1.default.dirname(filename), p).split(node_path_1.default.sep).join('/')),
-    ];
-    if (!Array.isArray(excludes) || excludes.some((p) => typeof p !== 'string')) {
+    if (errors.length || !raw || typeof raw !== 'object')
         throw new error_1.AppError('INVALID_CONFIG', `Invalid exclude array: ${filename}`);
+    if (raw.exclude === undefined) {
+        console.warn(`Cannot safely update inherited excludes in ${filename}; add ${excludedPath} to the effective TypeScript exclude configuration.`);
+        return false;
     }
-    const paths = excludes;
-    if (paths.includes(excludedPath))
+    if (!Array.isArray(raw.exclude) || raw.exclude.some((p) => typeof p !== 'string'))
+        throw new error_1.AppError('INVALID_CONFIG', `Invalid exclude array: ${filename}`);
+    if (raw.exclude.includes(excludedPath))
         return false;
-    const ownExclude = raw.exclude;
-    const formattingOptions = {
-        insertSpaces: true,
-        tabSize: 2,
-        eol: source.includes('\r\n') ? '\r\n' : '\n',
-    };
-    const edits = Array.isArray(ownExclude)
-        ? (0, jsonc_parser_1.modify)(source, ['exclude', ownExclude.length], excludedPath, {
-            formattingOptions,
-            isArrayInsertion: true,
-        })
-        : (0, jsonc_parser_1.modify)(source, ['exclude'], [...paths, excludedPath], { formattingOptions });
-    node_fs_1.default.writeFileSync(filename, (0, jsonc_parser_1.applyEdits)(source, edits));
+    node_fs_1.default.writeFileSync(filename, (0, jsonc_parser_1.applyEdits)(source, (0, jsonc_parser_1.modify)(source, ['exclude', raw.exclude.length], excludedPath, {
+        isArrayInsertion: true,
+        formattingOptions: {
+            insertSpaces: true,
+            tabSize: 2,
+            eol: source.includes('\r\n') ? '\r\n' : '\n',
+        },
+    })));
     return true;
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lark-apaas/miaoda-cli",
-  "version": "0.1.39-alpha.44e04b8",
+  "version": "0.1.39-alpha.508c930",
   "description": "Miaoda 平台命令行工具，面向 Agent 调用",
   "type": "commonjs",
   "bin": {
@@ -33,8 +33,7 @@
     "jsonc-parser": "^3.3.1",
     "ora": "^5.4.1",
     "picocolors": "^1.1.1",
-    "which": "^7.0.0",
-    "typescript": "^5.8.3"
+    "which": "^7.0.0"
   },
   "devDependencies": {
     "@types/cross-spawn": "^6.0.6",
@@ -52,6 +51,7 @@
     "prettier": "^3.8.3",
     "tsc-alias": "^1.8.11",
     "tsx": "^4.19.4",
+    "typescript": "^5.8.3",
     "vitest": "^4.1.4",
     "xml2js": "^0.6.2"
   },

package/upgrade/templates/nestjs-react-fullstack/templates/scripts/build.sh

@@ -210,28 +210,3 @@ else
   echo "   node_modules: $NODE_MODULES_SIZE"
   echo ""
 fi
-
-# 仅成功的全构建生成 backendBuildID；必须在构建、产物准备和依赖裁剪之后。
-# UI/Skill 内容由 SDK 独立计入总 hash；纯前端发布不替换已部署的 backendBuildID。
-if [[ "${only_frontend_change:-false}" != "true" ]]; then
-  node - "$ROOT_DIR/dist" <<'NODE'
-const fs = require('node:fs');
-const path = require('node:path');
-const { randomUUID } = require('node:crypto');
-const dist = process.argv[2];
-// 防止 build:server 空跑成功、却没有可交付的服务端入口。
-if (!fs.statSync(path.join(dist, 'server/main.js')).isFile()) {
-  throw new Error('Missing server build output: dist/server/main.js');
-}
-// runtime cwd 分别为工程根、dist/（或整包解压到 dist-server/）、旧版 dist/server/。
-// 与 MCP UI/Skill 的交付布局一致：复制产物时保留同一个 UUID，不在启动时生成。
-const files = [
-  path.join(dist, 'mcp-build-id'),
-  path.join(dist, 'dist/mcp-build-id'),
-  path.join(dist, 'server/dist/mcp-build-id'),
-];
-for (const file of files) fs.mkdirSync(path.dirname(file), { recursive: true });
-const buildID = randomUUID();
-for (const file of files) fs.writeFileSync(file, buildID, 'utf8');
-NODE
-fi

package/upgrade/templates/nestjs-react-fullstack/templates/scripts/lint.js

@@ -1,17 +1,36 @@
 #!/usr/bin/env node
 
 const path = require('node:path');
+const { spawn } = require('node:child_process');
 const fs = require('node:fs');
 
 const cwd = process.cwd();
 
+function getBinName(name) {
+  return process.platform === 'win32' ? `${name}.cmd` : name;
+}
+
+function runCommand(command, args) {
+  return new Promise((resolve) => {
+    const child = spawn(command, args, {
+      cwd,
+      stdio: 'inherit',
+      shell: false,
+    });
+
+    child.on('close', (code) => resolve(code || 0));
+    child.on('error', () => resolve(1));
+  });
+}
+
 function normalizeProjectFile(filePath) {
   const absolutePath = path.isAbsolute(filePath)
     ? filePath
     : path.resolve(cwd, filePath);
 
   if (!fs.existsSync(absolutePath)) {
-    console.log(`[lint] Deleted file: ${filePath}; checking affected projects`);
+    console.warn(`[lint] Skip missing file: ${filePath}`);
+    return null;
   }
 
   const relativePath = path.relative(cwd, absolutePath);
@@ -75,26 +94,17 @@ function canRunStylelint() {
   return STYLELINT_CONFIG_FILES.some(file => fs.existsSync(path.join(cwd, file)));
 }
 
-const { getBinName, runTasksSerially, uiTasks, packageScripts, main: runChecks } = require('./check.cjs');
-const UI_TYPECHECKS = ['node ./scripts/check.cjs --typecheck', 'node ./scripts/lint.js --typecheck'];
-function isUiFile(file) { return file.startsWith('server/mcp/ui/'); }
-
 async function runDefaultLint() {
-  const taskSpecs = [
-    [getBinName('npm'), ['run', 'eslint']],
-    [getBinName('npm'), ['run', 'type:check']],
-  ];
-
-  // Customized type:check remains untouched; ensure full lint still checks UI.
-  taskSpecs.push(...uiTasks({ types: !UI_TYPECHECKS.includes(packageScripts()['type:check']) }));
+  const commands = ['npm run eslint', 'npm run type:check'];
 
   if (canRunStylelint()) {
-    taskSpecs.push([getBinName('npm'), ['run', 'stylelint']]);
+    commands.push('npm run stylelint');
   } else {
     console.warn('[lint] Skip stylelint: missing scripts.stylelint or stylelint config');
   }
 
-  process.exit(await runTasksSerially(taskSpecs));
+  const code = await runCommand(getBinName('npx'), ['concurrently', ...commands]);
+  process.exit(code);
 }
 
 async function runSelectiveLint(inputFiles) {
@@ -107,20 +117,15 @@ async function runSelectiveLint(inputFiles) {
     process.exit(0);
   }
 
-  const eslintFiles = normalizedFiles.filter(file => fs.existsSync(path.join(cwd, file)) && isEslintTarget(file) && !isUiFile(file) && !file.startsWith('eslint.mcp-ui.config.'));
-  const stylelintFiles = normalizedFiles.filter(file => fs.existsSync(path.join(cwd, file)) && isStylelintTarget(file));
+  const eslintFiles = normalizedFiles.filter(isEslintTarget);
+  const stylelintFiles = normalizedFiles.filter(isStylelintTarget);
   const typeCheckFiles = normalizedFiles.filter(isTypeCheckTarget);
 
   const clientTypeFiles = [];
   const serverTypeFiles = [];
-  const rootConfigChanged = normalizedFiles.some(file => /^tsconfig(?:\.[^/]*)?\.json$/.test(file));
-  if (rootConfigChanged) { clientTypeFiles.push('config'); serverTypeFiles.push('config'); }
-  let checkUi = rootConfigChanged || normalizedFiles.some(file => isUiFile(file) || file.startsWith('shared/') || file.startsWith('eslint.mcp-ui.config.'));
 
   for (const filePath of typeCheckFiles) {
-    if (isUiFile(filePath)) {
-      checkUi = true;
-    } else if (filePath.startsWith('client/')) {
+    if (filePath.startsWith('client/')) {
       clientTypeFiles.push(filePath);
     } else if (filePath.startsWith('server/')) {
       serverTypeFiles.push(filePath);
@@ -130,45 +135,36 @@ async function runSelectiveLint(inputFiles) {
     }
   }
 
-  const taskSpecs = [];
+  const tasks = [];
 
   if (eslintFiles.length > 0) {
-    taskSpecs.push([getBinName('npx'), ['eslint', '--quiet', ...eslintFiles]]);
+    tasks.push(runCommand(getBinName('npx'), ['eslint', '--quiet', ...eslintFiles]));
   }
 
   if (stylelintFiles.length > 0 && !canRunStylelint()) {
     console.warn('[lint] Skip stylelint: missing scripts.stylelint or stylelint config');
   } else if (stylelintFiles.length > 0) {
-    taskSpecs.push([getBinName('npx'), ['stylelint', '--quiet', ...stylelintFiles]]);
+    tasks.push(runCommand(getBinName('npx'), ['stylelint', '--quiet', ...stylelintFiles]));
   }
 
   if (clientTypeFiles.length > 0) {
-    taskSpecs.push([getBinName('npm'), ['run', 'type:check:client']]);
+    tasks.push(runCommand(getBinName('npm'), ['run', 'type:check:client']));
   }
 
   if (serverTypeFiles.length > 0) {
-    taskSpecs.push([getBinName('npm'), ['run', 'type:check:server']]);
+    tasks.push(runCommand(getBinName('npm'), ['run', 'type:check:server']));
   }
 
-  if (checkUi) taskSpecs.push(...uiTasks());
-
-  if (taskSpecs.length === 0) {
+  if (tasks.length === 0) {
     console.log('[lint] No supported files matched for lint');
     process.exit(0);
   }
 
-  process.exit(await runTasksSerially(taskSpecs));
+  const results = await Promise.all(tasks);
+  process.exit(results.some(code => code !== 0) ? 1 : 0);
 }
 
 async function main() {
-  const args = process.argv.slice(2);
-  const modes = ['--typecheck', '--typecheck-mcp-ui', '--eslint-mcp-ui'];
-  if (args.length && !(args[0] === '--files' && args.length > 1) && !(args.length === 1 && modes.includes(args[0]))) {
-    throw new Error('用法: lint.js [--files <paths...> | --typecheck | --typecheck-mcp-ui | --eslint-mcp-ui]');
-  }
-  if (args[0] === '--files' && args.slice(1).some(arg => arg.startsWith('--'))) throw new Error('--files 不可与其他检查模式混用');
-  // 兼容旧入口，只向独立检查器转发；新的 npm scripts 不再指向 lint.js。
-  if (modes.includes(args[0])) return runChecks(args);
   const files = parseFilesArg(process.argv.slice(2));
   if (files === null) {
     await runDefaultLint();

package/upgrade/templates/nestjs-react-fullstack/templates/scripts/prune-smart.js

@@ -6,6 +6,13 @@ const fs = require('fs');
 const path = require('path');
 
 const ROOT_DIR = path.resolve(__dirname, '..');
+
+// 加载提交的 .env，供读取构建期配置（如 MIAODA_RUNTIME_ENTRIES）。dotenv 不一定安装 → 静默降级。
+try {
+  require('dotenv').config({ path: path.join(ROOT_DIR, '.env') });
+} catch {
+  // dotenv 未安装：跳过；MIAODA_RUNTIME_ENTRIES 仍可来自真实环境变量
+}
 const DIST_DIR = path.join(ROOT_DIR, 'dist');
 const DIST_SERVER_DIR = path.join(DIST_DIR, 'server');
 const ROOT_PACKAGE_JSON = path.join(ROOT_DIR, 'package.json');
@@ -16,6 +23,36 @@ const OUT_PACKAGE_JSON = path.join(DIST_DIR, 'package.json');
 // Server 入口文件
 const SERVER_ENTRY = path.join(DIST_SERVER_DIR, 'main.js');
 
+// nest sourceRoot（源码根，默认 server）：把 .env 里声明的源码路径映射到构建产物位置
+let SOURCE_ROOT = 'server';
+try {
+  const nestCli = JSON.parse(fs.readFileSync(path.join(ROOT_DIR, 'nest-cli.json'), 'utf8'));
+  if (nestCli.sourceRoot) SOURCE_ROOT = nestCli.sourceRoot;
+} catch {
+  // 读不到 nest-cli.json 则用默认 server
+}
+const SRC_TO_OUT_EXT = { '.mts': '.mjs', '.cts': '.cjs', '.ts': '.js' };
+
+// 额外 trace 入口：经 new Function/动态 import 加载、nft 无法从 main.js 静态发现的 ESM runtime。
+// 应用在提交的 .env 里用 MIAODA_RUNTIME_ENTRIES 声明【源码路径】（相对项目根，逗号分隔），例如：
+//   MIAODA_RUNTIME_ENTRIES=server/modules/ethics/runtime/review-run.mjs,server/modules/ethics/runtime/parse-core.mjs
+// 脚本按 nest sourceRoot 自动映射到 dist/server 下的构建产物（并重写 .mts→.mjs / .ts→.js）。
+const RUNTIME_ENTRIES = (process.env.MIAODA_RUNTIME_ENTRIES || '')
+  .split(',')
+  .map((s) => s.trim())
+  .filter(Boolean)
+  .map((srcRel) => {
+    const fromSrc = path.relative(SOURCE_ROOT, srcRel); // 去掉 sourceRoot 前缀
+    const ext = path.extname(fromSrc);
+    const outRel = SRC_TO_OUT_EXT[ext] ? fromSrc.slice(0, -ext.length) + SRC_TO_OUT_EXT[ext] : fromSrc;
+    return path.join(DIST_SERVER_DIR, outRel);
+  })
+  .filter((p) => {
+    if (fs.existsSync(p)) return true;
+    console.warn(`⚠️  MIAODA_RUNTIME_ENTRIES 入口在构建产物中不存在，已忽略: ${path.relative(ROOT_DIR, p)}`);
+    return false;
+  });
+
 // Node.js 内置模块列表
 const BUILTIN_MODULES = new Set([
   'assert', 'buffer', 'child_process', 'cluster', 'crypto', 'dgram', 'dns',
@@ -145,12 +182,15 @@ async function smartPrune() {
   }
 
   console.log(`📂 分析入口文件: ${path.relative(ROOT_DIR, SERVER_ENTRY)}`);
+  if (RUNTIME_ENTRIES.length) {
+    console.log(`📎 额外 trace 入口 (${RUNTIME_ENTRIES.length}): ${RUNTIME_ENTRIES.map((p) => path.relative(DIST_SERVER_DIR, p)).join(', ')}`);
+  }
 
   // 2. 使用 @vercel/nft 追踪依赖
   console.log('🔎 追踪实际依赖...');
   const analyzeStart = Date.now();
 
-  const { fileList } = await nodeFileTrace([SERVER_ENTRY], {
+  const { fileList } = await nodeFileTrace([SERVER_ENTRY, ...RUNTIME_ENTRIES], {
     base: ROOT_DIR,
     processCwd: ROOT_DIR,
     ts: false, // 禁用 TS 解析

package/dist/utils/eslint-ignore.js

@@ -1,169 +0,0 @@
-"use strict";
-var __importDefault = (this && this.__importDefault) || function (mod) {
-    return (mod && mod.__esModule) ? mod : { "default": mod };
-};
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.addEslintGlobalIgnore = addEslintGlobalIgnore;
-const node_fs_1 = __importDefault(require("node:fs"));
-const typescript_1 = __importDefault(require("typescript"));
-const error_1 = require("./error");
-/** 只解析源码，不加载用户配置；用局部插入保留自定义规则和注释。 */
-function addEslintGlobalIgnore(filename, pattern) {
-    if (!node_fs_1.default.existsSync(filename))
-        return { changed: false };
-    const source = node_fs_1.default.readFileSync(filename, 'utf8');
-    const file = typescript_1.default.createSourceFile(filename, source, typescript_1.default.ScriptTarget.Latest, true, typescript_1.default.ScriptKind.JS);
-    const diagnostics = file
-        .parseDiagnostics;
-    if (diagnostics.length)
-        throw new error_1.AppError('INVALID_CONFIG', `Invalid ESLint configuration: ${filename}`);
-    const variables = new Map();
-    const declarations = new Map();
-    const aliasReferences = new Set();
-    const resolvedAliases = new Set();
-    const exportTargets = new Set();
-    const helpers = new Set();
-    const namespaces = new Set();
-    const exports = [];
-    const moduleName = (node) => {
-        if (!typescript_1.default.isCallExpression(node) ||
-            !typescript_1.default.isIdentifier(node.expression) ||
-            node.expression.text !== 'require')
-            return;
-        const arg = node.arguments.at(0);
-        return arg && typescript_1.default.isStringLiteral(arg) ? arg.text : undefined;
-    };
-    for (const statement of file.statements) {
-        if (typescript_1.default.isImportDeclaration(statement) && typescript_1.default.isStringLiteral(statement.moduleSpecifier)) {
-            const module = statement.moduleSpecifier.text;
-            const clause = statement.importClause;
-            if (module === 'typescript-eslint' && clause?.name)
-                namespaces.add(clause.name.text);
-            const bindings = clause?.namedBindings;
-            if (bindings && typescript_1.default.isNamespaceImport(bindings) && module === 'typescript-eslint')
-                namespaces.add(bindings.name.text);
-            if (bindings && typescript_1.default.isNamedImports(bindings)) {
-                for (const element of bindings.elements) {
-                    const name = element.propertyName?.text ?? element.name.text;
-                    if ((module === 'eslint/config' && name === 'defineConfig') ||
-                        (module === 'typescript-eslint' && name === 'config'))
-                        helpers.add(element.name.text);
-                }
-            }
-        }
-        if (typescript_1.default.isVariableStatement(statement) && statement.declarationList.flags & typescript_1.default.NodeFlags.Const) {
-            for (const declaration of statement.declarationList.declarations) {
-                if (!declaration.initializer)
-                    continue;
-                const module = moduleName(declaration.initializer);
-                if (typescript_1.default.isIdentifier(declaration.name)) {
-                    variables.set(declaration.name.text, declaration.initializer);
-                    declarations.set(declaration.name.text, declaration.name);
-                    if (module === 'typescript-eslint')
-                        namespaces.add(declaration.name.text);
-                }
-                else if (typescript_1.default.isObjectBindingPattern(declaration.name)) {
-                    for (const element of declaration.name.elements) {
-                        const name = element.propertyName ?? element.name;
-                        if (!typescript_1.default.isIdentifier(name) || !typescript_1.default.isIdentifier(element.name))
-                            continue;
-                        if ((module === 'eslint/config' && name.text === 'defineConfig') ||
-                            (module === 'typescript-eslint' && name.text === 'config'))
-                            helpers.add(element.name.text);
-                    }
-                }
-            }
-        }
-        if (typescript_1.default.isExportAssignment(statement) && !statement.isExportEquals)
-            exports.push(statement.expression);
-        if (typescript_1.default.isExpressionStatement(statement) && typescript_1.default.isBinaryExpression(statement.expression)) {
-            const { left, right, operatorToken } = statement.expression;
-            if (operatorToken.kind === typescript_1.default.SyntaxKind.EqualsToken &&
-                typescript_1.default.isPropertyAccessExpression(left) &&
-                typescript_1.default.isIdentifier(left.expression) &&
-                left.expression.text === 'module' &&
-                left.name.text === 'exports') {
-                exports.push(right);
-                exportTargets.add(left);
-            }
-        }
-    }
-    function unwrap(node, seen = new Set()) {
-        if (typescript_1.default.isParenthesizedExpression(node))
-            return unwrap(node.expression, seen);
-        if (typescript_1.default.isIdentifier(node) && !seen.has(node.text)) {
-            const value = variables.get(node.text);
-            if (value) {
-                resolvedAliases.add(node.text);
-                aliasReferences.add(node);
-                seen.add(node.text);
-                return unwrap(value, seen);
-            }
-        }
-        return node;
-    }
-    const root = exports.length === 1 ? unwrap(exports[0]) : undefined;
-    // const 只固定变量绑定，不能保证数组不被 pop/push 或传给其他函数修改。
-    // 有额外引用时保留原配置，避免改变初始化数组影响用户后续操作。
-    function checkReferences(node) {
-        if (typescript_1.default.isIdentifier(node) &&
-            resolvedAliases.has(node.text) &&
-            declarations.get(node.text) !== node &&
-            !aliasReferences.has(node))
-            return true;
-        // module["exports"]、(module).exports、module 别名也可能修改导出数组。
-        if (typescript_1.default.isIdentifier(node) &&
-            node.text === 'module' &&
-            !(typescript_1.default.isPropertyAccessExpression(node.parent) &&
-                node.parent.expression === node &&
-                exportTargets.has(node.parent)))
-            return true;
-        return typescript_1.default.forEachChild(node, (child) => checkReferences(child) || undefined) ?? false;
-    }
-    const unsafeReference = checkReferences(file);
-    const isHelper = (node) => {
-        const callee = node.expression;
-        return typescript_1.default.isIdentifier(callee)
-            ? helpers.has(callee.text)
-            : typescript_1.default.isPropertyAccessExpression(callee) &&
-                typescript_1.default.isIdentifier(callee.expression) &&
-                namespaces.has(callee.expression.text) &&
-                callee.name.text === 'config';
-    };
-    const entries = root && typescript_1.default.isArrayLiteralExpression(root)
-        ? root.elements
-        : root && typescript_1.default.isCallExpression(root) && isHelper(root)
-            ? root.arguments
-            : undefined;
-    if (!entries || unsafeReference) {
-        return {
-            changed: false,
-            warning: `Cannot safely migrate ${filename}; add ${JSON.stringify(pattern)} to its global ignores manually.`,
-        };
-    }
-    // 只认真正的全局 ignores；带 files/rules 的局部忽略不能阻止服务端配置匹配 UI。
-    // 仅检查最后一个配置，确保此前的否定规则或动态配置无法撤销新增忽略。
-    const last = entries.at(-1);
-    if (last && typescript_1.default.isObjectLiteralExpression(last)) {
-        const props = last.properties;
-        const nameOf = (p) => p.name && (typescript_1.default.isIdentifier(p.name) || typescript_1.default.isStringLiteral(p.name)) ? p.name.text : undefined;
-        if (new Set(props.map(nameOf)).size === props.length &&
-            props.every((p) => typescript_1.default.isPropertyAssignment(p) && ['ignores', 'name'].includes(nameOf(p) ?? ''))) {
-            const ignores = props.find((p) => nameOf(p) === 'ignores');
-            if (ignores &&
-                typescript_1.default.isPropertyAssignment(ignores) &&
-                typescript_1.default.isArrayLiteralExpression(ignores.initializer)) {
-                const patterns = ignores.initializer.elements;
-                if (patterns.length &&
-                    patterns.every(typescript_1.default.isStringLiteral) &&
-                    patterns[patterns.length - 1].text === pattern)
-                    return { changed: false };
-            }
-        }
-    }
-    const eol = source.includes('\r\n') ? '\r\n' : '\n';
-    const position = last ? last.end : entries.pos;
-    const addition = `${last ? ',' : ''}${eol}  { ignores: [${JSON.stringify(pattern)}] }`;
-    node_fs_1.default.writeFileSync(filename, source.slice(0, position) + addition + source.slice(position));
-    return { changed: true };
-}

package/upgrade/templates/nestjs-react-fullstack/templates/scripts/check.cjs

@@ -1,123 +0,0 @@
-#!/usr/bin/env node
-
-// 叶子检查入口：不得调用 lint 或聚合 type:check npm script。
-const path = require('node:path');
-const { spawn } = require('node:child_process');
-const fs = require('node:fs');
-const cwd = process.cwd();
-
-function getBinName(name) {
-  return process.platform === 'win32' ? `${name}.cmd` : name;
-}
-
-function runCommand(command, args) {
-  return new Promise((resolve) => {
-    const child = spawn(command, args, {
-      cwd,
-      stdio: 'inherit',
-      shell: false,
-    });
-
-    child.on('close', (code) => resolve(code ?? 1));
-    child.on('error', () => resolve(1));
-  });
-}
-
-// 串行依次执行每个任务，全部跑完后再聚合退出码：
-// 降低并发资源占用、让各任务输出按顺序清晰可读，同时保留“一次暴露所有 lint 问题”的行为。
-async function runTasksSerially(taskSpecs) {
-  let exitCode = 0;
-  for (const [command, args] of taskSpecs) {
-    const code = await runCommand(command, args);
-    if (code !== 0) {
-      exitCode = 1;
-    }
-  }
-  return exitCode;
-}
-
-function isEslintTarget(filePath) { return /\.(c|m)?(j|t)sx?$/.test(filePath); }
-
-const UI_DIR = 'server/mcp/ui';
-
-function uiSourceFiles() {
-  const files = [];
-  function visit(relative) {
-    const absolute = path.join(cwd, relative);
-    if (!fs.existsSync(absolute)) return;
-    if (fs.lstatSync(absolute).isSymbolicLink()) {
-      throw new Error(`MCP UI 检查不支持符号链接: ${relative}`);
-    }
-    for (const entry of fs.readdirSync(absolute, { withFileTypes: true })) {
-      if (['node_modules', 'dist', '.git'].includes(entry.name)) continue;
-      const file = `${relative}/${entry.name}`;
-      if (entry.isSymbolicLink()) throw new Error(`MCP UI 检查不支持符号链接: ${file}`);
-      if (entry.isDirectory()) visit(file);
-      else if (isEslintTarget(file) && !/\.d\.(?:ts|mts|cts)$/.test(file)) files.push(file);
-    }
-  }
-  visit(UI_DIR);
-  return files.sort();
-}
-
-function uiTasks({ types = true, eslint = true } = {}) {
-  const sources = uiSourceFiles();
-  if (!sources.length) return [];
-  const tasks = [];
-  if (types) {
-    const config = `${UI_DIR}/tsconfig.json`;
-    if (!fs.existsSync(path.join(cwd, config))) {
-      throw new Error(`MCP UI 缺少 ${config}，请按 mcp-guide 补齐独立浏览器 TypeScript 配置。`);
-    }
-    const ts = require('typescript');
-    const parsed = ts.getParsedCommandLineOfConfigFile(path.join(cwd, config), {}, {
-      ...ts.sys,
-      onUnRecoverableConfigFileDiagnostic: d => { throw new Error(ts.flattenDiagnosticMessageText(d.messageText, '\n')); },
-    });
-    if (!parsed || parsed.errors.length) throw new Error(`MCP UI TypeScript 配置无效: ${config}`);
-    const included = new Set(parsed.fileNames.map(file => path.resolve(file)));
-    const missing = sources.filter(file => !included.has(path.resolve(cwd, file)));
-    if (missing.length) throw new Error(`MCP UI TypeScript 配置未覆盖源码: ${missing.join(', ')}；请检查 include/exclude，JS 源码需开启 allowJs。`);
-    tasks.push([getBinName('npx'), ['--no-install', 'tsc', '--noEmit', '-p', config]]);
-  }
-  if (eslint) {
-    const config = ['eslint.mcp-ui.config.js', 'eslint.mcp-ui.config.cjs', 'eslint.mcp-ui.config.mjs']
-      .find(file => fs.existsSync(path.join(cwd, file)));
-    if (!config) throw new Error('MCP UI 缺少独立 ESLint 配置，请按 mcp-guide 创建 eslint.mcp-ui.config.cjs。');
-    tasks.push([getBinName('npx'), ['--no-install', 'eslint', '--config', config, '--quiet', '--max-warnings', '0', ...sources]]);
-  }
-  return tasks;
-}
-
-function packageScripts() {
-  return JSON.parse(fs.readFileSync(path.join(cwd, 'package.json'), 'utf8')).scripts || {};
-}
-
-async function runTypeCheck() {
-  const scripts = packageScripts();
-  const tasks = ['type:check:server', 'type:check:client'].map(name => {
-    if (!scripts[name]) throw new Error(`缺少 scripts.${name}，请保留应用原有类型检查命令。`);
-    return [getBinName('npm'), ['run', name]];
-  });
-  tasks.push(...uiTasks({ eslint: false }));
-  process.exit(await runTasksSerially(tasks));
-}
-
-async function main(args = process.argv.slice(2)) {
-  const modes = ['--typecheck', '--typecheck-mcp-ui', '--eslint-mcp-ui'];
-  if (args.length !== 1 || !modes.includes(args[0])) {
-    throw new Error('用法: check.cjs --typecheck | --typecheck-mcp-ui | --eslint-mcp-ui');
-  }
-  // 自定义 leaf script 意外回到聚合入口时立即失败，避免生成递归进程树。
-  if (process.env.MIAODA_TYPECHECK_ACTIVE === '1') {
-    throw new Error('检测到检查命令递归，请检查 type:check:server/client，不能回调 lint 或 type:check。');
-  }
-  process.env.MIAODA_TYPECHECK_ACTIVE = '1';
-  if (args[0] === '--typecheck') return runTypeCheck();
-  process.exit(await runTasksSerially(uiTasks(args[0] === '--typecheck-mcp-ui' ? { eslint: false } : { types: false })));
-}
-
-module.exports = { getBinName, runTasksSerially, uiTasks, packageScripts, main };
-if (require.main === module) {
-  main().catch(error => { console.error(`[check] ${error.message}`); process.exit(1); });
-}