@lark-apaas/miaoda-cli 0.1.4-alpha.9153b4c → 0.1.4-alpha.abaa17f

package/dist/api/deploy/index.js

@@ -1,6 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.NodeStatus = exports.nodeStatusFromText = exports.nodeStatusText = exports.errorJobSchema = exports.deployGetSchema = exports.deployHistorySchema = exports.LocalReleaseStatus = exports.getModernLastPublishedVersion = exports.getModernReleaseStatus = exports.createModernRelease = exports.updateLocalRelease = exports.createLocalRelease = exports.preRelease = exports.queryPipelineInstance = exports.getErrorLog = exports.listPipelineInstances = exports.createRelease = void 0;
+exports.NodeStatus = exports.nodeStatusFromText = exports.nodeStatusText = exports.errorJobSchema = exports.deployGetSchema = exports.deployHistorySchema = exports.batchSavePluginInstances = exports.LocalReleaseStatus = exports.getModernLastPublishedVersion = exports.getModernReleaseStatus = exports.createModernRelease = exports.updateLocalRelease = exports.createLocalRelease = exports.preRelease = exports.queryPipelineInstance = exports.getErrorLog = exports.listPipelineInstances = exports.createRelease = void 0;
 var api_1 = require("./api");
 Object.defineProperty(exports, "createRelease", { enumerable: true, get: function () { return api_1.createRelease; } });
 Object.defineProperty(exports, "listPipelineInstances", { enumerable: true, get: function () { return api_1.listPipelineInstances; } });
@@ -15,6 +15,8 @@ Object.defineProperty(exports, "getModernReleaseStatus", { enumerable: true, get
 Object.defineProperty(exports, "getModernLastPublishedVersion", { enumerable: true, get: function () { return modern_1.getLastPublishedVersion; } });
 var modern_types_1 = require("./modern-types");
 Object.defineProperty(exports, "LocalReleaseStatus", { enumerable: true, get: function () { return modern_types_1.LocalReleaseStatus; } });
+var plugin_instances_1 = require("./plugin-instances");
+Object.defineProperty(exports, "batchSavePluginInstances", { enumerable: true, get: function () { return plugin_instances_1.batchSavePluginInstances; } });
 var schemas_1 = require("./schemas");
 Object.defineProperty(exports, "deployHistorySchema", { enumerable: true, get: function () { return schemas_1.deployHistorySchema; } });
 Object.defineProperty(exports, "deployGetSchema", { enumerable: true, get: function () { return schemas_1.deployGetSchema; } });

package/dist/api/deploy/plugin-instances-types.js

@@ -0,0 +1,6 @@
+"use strict";
+// plugin_instances batch_save 接口的请求 / 响应类型。
+//
+// 与 modern deploy 其它接口走的 lark.apaas.devops PSM 不同，
+// 本接口走 lark.apaas.studio_server，响应信封形态也不一样（BaseResp 而非 status_code）。
+Object.defineProperty(exports, "__esModule", { value: true });

package/dist/api/deploy/plugin-instances.js

@@ -0,0 +1,30 @@
+"use strict";
+// studio_server 的 plugin_instances 批量保存接口。
+// 与 modern deploy 其余接口（走 devops PSM、InnerEnvelope）信封不同，
+// 这里走 studio_server PSM、BaseResp 信封，故自行解析。
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.batchSavePluginInstances = batchSavePluginInstances;
+const http_1 = require("../../utils/http");
+const error_1 = require("../../utils/error");
+const URL_PATH = '/api/v1/studio/innerapi/plugin_instances/batch_save';
+/**
+ * POST /api/v1/studio/innerapi/plugin_instances/batch_save
+ *
+ * 把发布版本的 capability 集合注册到 studio_server。
+ * 失败时抛 AppError("DEPLOY_PLUGIN_BATCH_SAVE_FAILED")，带 BaseResp 错误信息。
+ */
+async function batchSavePluginInstances(req) {
+    const response = await (0, http_1.getHttpClient)().post(URL_PATH, req);
+    if (!response.ok) {
+        throw new error_1.HttpError(response.status, URL_PATH, `Failed to save plugin instances: ${String(response.status)} ${response.statusText}`);
+    }
+    const body = (await response.json());
+    const baseResp = body.BaseResp;
+    if (baseResp?.StatusCode !== 0) {
+        const msg = baseResp?.StatusMessage ?? baseResp?.KStatusMessage ?? 'unknown error';
+        const code = baseResp?.KStatusCode !== undefined && baseResp.KStatusCode !== ''
+            ? baseResp.KStatusCode
+            : String(baseResp?.StatusCode ?? 'unknown');
+        throw new error_1.AppError('DEPLOY_PLUGIN_BATCH_SAVE_FAILED', `Failed to save plugin instances: status_code=${code} message=${msg}`);
+    }
+}

package/dist/cli/commands/deploy/modern.js

@@ -28,7 +28,8 @@ function registerDeployCommandsModern(program) {
 流程概览（stderr 进度提示）
   1. prepareContext  2. preRelease   3. build
   4. createLocalRelease              5. uploadArtifacts
-  6. finalizeLocalRelease(Success|Failed)
+  6. savePluginInstances（扫描 dist/output_capabilities/*.json 批量注册）
+  7. finalizeLocalRelease(Finished|Failed)
 
 JSON 输出（stdout）
   {"data": {"appId": "...", "version": <n>, "url": "...", "releaseID": "...", "preReleaseID": "..."}}

package/dist/services/deploy/modern/atoms/build.js

@@ -5,21 +5,40 @@ const node_child_process_1 = require("node:child_process");
 const error_1 = require("../../../../utils/error");
 const logger_1 = require("../../../../utils/logger");
 const protocol_1 = require("../protocol");
+/**
+ * 给 CDN 前缀补 https:// 协议头：
+ *   - 已带 http:// 或 https:// → 原样返回
+ *   - 以 / 开头（绝对路径）→ 原样返回
+ *   - 不含 dot（看起来不像域名，比如纯路径 app_xxx/2）→ 原样返回
+ *   - 其它（典型：lf-xxx.bytetos.com/...）→ 前缀 https://
+ *
+ * template 的 build script 直接拿来当 vite base / asset URL 用，必须是合法 URL。
+ */
+function ensureHttpsScheme(v) {
+    if (/^https?:\/\//i.test(v))
+        return v;
+    if (v.startsWith('/'))
+        return v;
+    if (!v.includes('.'))
+        return v;
+    return `https://${v}`;
+}
 /**
  * 跑 `npm run build`，把 preRelease 下发的动态配置注入 env：
- *   MCLAW_APP_ID / MCLAW_VERSION / MCLAW_STACK
- *   MCLAW_RESOURCE_CDN_PREFIX / MCLAW_STATIC_CDN_PREFIX
+ *   MIAODA_APP_ID / MIAODA_VERSION / MIAODA_STACK
+ *   MIAODA_RESOURCE_CDN_PREFIX / MIAODA_STATIC_CDN_PREFIX
  *
+ * CDN 前缀缺 scheme 时由 CLI 自动补 https://，template 不用关心。
  * build 失败抛 AppError（execSync 自身会 throw，捕获后包一层加错误码）。
  */
 function runBuild(opts) {
     const buildEnv = {
         ...process.env,
-        MCLAW_APP_ID: opts.appId,
-        MCLAW_VERSION: opts.version,
-        MCLAW_STACK: opts.templateKey,
-        MCLAW_RESOURCE_CDN_PREFIX: (0, protocol_1.requireDataKey)(opts.data, protocol_1.DataKey.RESOURCE_CDN_PREFIX),
-        MCLAW_STATIC_CDN_PREFIX: (0, protocol_1.requireDataKey)(opts.data, protocol_1.DataKey.STATIC_CDN_PREFIX),
+        MIAODA_APP_ID: opts.appId,
+        MIAODA_VERSION: opts.version,
+        MIAODA_STACK: opts.templateKey,
+        MIAODA_RESOURCE_CDN_PREFIX: ensureHttpsScheme((0, protocol_1.requireDataKey)(opts.data, protocol_1.DataKey.RESOURCE_CDN_PREFIX)),
+        MIAODA_STATIC_CDN_PREFIX: ensureHttpsScheme((0, protocol_1.requireDataKey)(opts.data, protocol_1.DataKey.STATIC_CDN_PREFIX)),
     };
     (0, logger_1.log)('deploy', 'Building...');
     try {

package/dist/services/deploy/modern/atoms/index.js

@@ -1,6 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.LocalReleaseStatus = exports.finalizeLocalRelease = exports.createLocalRelease = exports.uploadArtifacts = exports.runBuild = exports.preRelease = exports.prepareDeployContext = void 0;
+exports.savePluginInstances = exports.LocalReleaseStatus = exports.finalizeLocalRelease = exports.createLocalRelease = exports.uploadArtifacts = exports.runBuild = exports.preRelease = exports.prepareDeployContext = void 0;
 var context_1 = require("./context");
 Object.defineProperty(exports, "prepareDeployContext", { enumerable: true, get: function () { return context_1.prepareDeployContext; } });
 var pre_release_1 = require("./pre-release");
@@ -13,3 +13,5 @@ var local_release_1 = require("./local-release");
 Object.defineProperty(exports, "createLocalRelease", { enumerable: true, get: function () { return local_release_1.createLocalRelease; } });
 Object.defineProperty(exports, "finalizeLocalRelease", { enumerable: true, get: function () { return local_release_1.finalizeLocalRelease; } });
 Object.defineProperty(exports, "LocalReleaseStatus", { enumerable: true, get: function () { return local_release_1.LocalReleaseStatus; } });
+var save_plugin_instances_1 = require("./save-plugin-instances");
+Object.defineProperty(exports, "savePluginInstances", { enumerable: true, get: function () { return save_plugin_instances_1.savePluginInstances; } });

package/dist/services/deploy/modern/atoms/local-release.js

@@ -15,13 +15,11 @@ async function createLocalRelease(appId, version) {
 }
 /**
  * 把本地发布单翻为终态。Finished / Failed 由 pipeline 视上下游结果决定。
- * 后端按 appID 找当前 active release，CLI 无需透传 releaseID。
- *
- * 失败不抛（避免覆盖上游真错误），但记一行 stderr 让排查可定位。releaseId 仅用于日志。
+ * 失败不抛（避免覆盖上游真错误），但记一行 stderr 让排查可定位。
  */
 async function finalizeLocalRelease(appId, releaseId, status) {
     try {
-        await (0, index_1.updateLocalRelease)({ appID: appId, status });
+        await (0, index_1.updateLocalRelease)({ appID: appId, releaseID: releaseId, status });
     }
     catch (err) {
         (0, logger_1.log)('deploy', `finalize release(${releaseId}, status=${String(status)}) failed: ${err.message}`);

package/dist/services/deploy/modern/atoms/save-plugin-instances.js

@@ -0,0 +1,72 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.savePluginInstances = savePluginInstances;
+const node_fs_1 = __importDefault(require("node:fs"));
+const node_path_1 = __importDefault(require("node:path"));
+const index_1 = require("../../../../api/deploy/index");
+const logger_1 = require("../../../../utils/logger");
+const constants_1 = require("../constants");
+function isValidCapability(o) {
+    if (typeof o !== 'object' || o === null)
+        return false;
+    const id = o.id;
+    return typeof id === 'string' && id.length > 0;
+}
+/**
+ * 扫描 dist/output_capabilities/*.json，过滤出合法 capability，批量上报到 studio_server。
+ *
+ * 合法判定：能 JSON.parse + 顶层 id 是非空字符串。其它字段后端校验。
+ * 目录不存在 / 没有合法 capability → 直接返回 0，pipeline 当作 no-op。
+ * batchSave 调用失败 → 透传抛 AppError，pipeline 兜底 finalizeLocalRelease(Failed)。
+ */
+async function savePluginInstances(opts) {
+    const dir = node_path_1.default.join(opts.projectDir, constants_1.DIST_DIR, constants_1.OUTPUT_CAPABILITIES_DIR);
+    if (!node_fs_1.default.existsSync(dir)) {
+        (0, logger_1.debug)(`save-plugin-instances: ${dir} not present, skipping`);
+        return { saved: 0, skipped: 0 };
+    }
+    const files = node_fs_1.default.readdirSync(dir).filter((f) => f.endsWith('.json'));
+    const instances = [];
+    let skipped = 0;
+    for (const f of files) {
+        const full = node_path_1.default.join(dir, f);
+        let raw;
+        try {
+            raw = node_fs_1.default.readFileSync(full, 'utf-8');
+        }
+        catch (err) {
+            (0, logger_1.debug)(`save-plugin-instances: read ${f} failed: ${err.message}`);
+            skipped++;
+            continue;
+        }
+        let parsed;
+        try {
+            parsed = JSON.parse(raw);
+        }
+        catch {
+            (0, logger_1.debug)(`save-plugin-instances: ${f} is not valid JSON, skipping`);
+            skipped++;
+            continue;
+        }
+        if (!isValidCapability(parsed)) {
+            (0, logger_1.debug)(`save-plugin-instances: ${f} missing 'id' string, skipping`);
+            skipped++;
+            continue;
+        }
+        instances.push({ id: parsed.id, content: JSON.stringify(parsed) });
+    }
+    if (instances.length === 0) {
+        (0, logger_1.log)('deploy', `No capability to register (${String(files.length)} files scanned, all skipped)`);
+        return { saved: 0, skipped };
+    }
+    (0, logger_1.log)('deploy', `Registering ${String(instances.length)} capability instance(s)...`);
+    await (0, index_1.batchSavePluginInstances)({
+        appID: opts.appId,
+        appVersion: opts.version,
+        pluginInstances: instances,
+    });
+    return { saved: instances.length, skipped };
+}

package/dist/services/deploy/modern/atoms/upload.js

@@ -5,6 +5,7 @@ var __importDefault = (this && this.__importDefault) || function (mod) {
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.uploadArtifacts = uploadArtifacts;
 const node_fs_1 = __importDefault(require("node:fs"));
+const node_os_1 = __importDefault(require("node:os"));
 const node_path_1 = __importDefault(require("node:path"));
 const node_child_process_1 = require("node:child_process");
 const error_1 = require("../../../../utils/error");
@@ -12,9 +13,17 @@ const logger_1 = require("../../../../utils/logger");
 const constants_1 = require("../constants");
 const protocol_1 = require("../protocol");
 const UPLOAD_PLAN = [
-    { dir: constants_1.OUTPUT_DIR, dataKey: protocol_1.DataKey.OUTPUT_TOS_UPLOAD_URL, required: true },
-    { dir: constants_1.OUTPUT_RESOURCE_DIR, dataKey: protocol_1.DataKey.OUTPUT_RESOURCE_TOS_UPLOAD_URL, required: false },
-    { dir: constants_1.OUTPUT_STATIC_DIR, dataKey: protocol_1.DataKey.OUTPUT_STATIC_TOS_UPLOAD_URL, required: false },
+    { dir: constants_1.OUTPUT_DIR, dataKey: protocol_1.DataKey.OUTPUT_TOS_UPLOAD_CREDENTIAL, required: true },
+    {
+        dir: constants_1.OUTPUT_RESOURCE_DIR,
+        dataKey: protocol_1.DataKey.OUTPUT_RESOURCE_TOS_UPLOAD_CREDENTIAL,
+        required: false,
+    },
+    {
+        dir: constants_1.OUTPUT_STATIC_DIR,
+        dataKey: protocol_1.DataKey.OUTPUT_STATIC_TOS_UPLOAD_CREDENTIAL,
+        required: false,
+    },
 ];
 function resolveTosutilPath() {
     try {
@@ -27,18 +36,110 @@ function resolveTosutilPath() {
     }
     throw new error_1.AppError('DEPLOY_TOSUTIL_MISSING', 'tosutil is not installed or not in PATH. modern deploy requires sandbox preinstalled tosutil.');
 }
+/** 把 data 里的凭证字段 JSON.parse 出来；非法 JSON / 缺字段都抛 AppError */
+function parseCredential(raw, dataKey) {
+    let parsed;
+    try {
+        parsed = JSON.parse(raw);
+    }
+    catch (err) {
+        throw new error_1.AppError('DEPLOY_CRED_INVALID_JSON', `preRelease.data["${dataKey}"] is not valid JSON: ${err.message}`);
+    }
+    if (typeof parsed !== 'object' || parsed === null) {
+        throw new error_1.AppError('DEPLOY_CRED_INVALID_JSON', `preRelease.data["${dataKey}"] is not an object`);
+    }
+    const c = parsed;
+    const required = [
+        'accessKeyID',
+        'secretAccessKey',
+        'sessionToken',
+        'endpoint',
+        'region',
+        'bucket',
+        'prefix',
+    ];
+    const missing = required.filter((k) => typeof c[k] !== 'string' || c[k] === '');
+    if (missing.length > 0) {
+        throw new error_1.AppError('DEPLOY_CRED_INCOMPLETE', `preRelease.data["${dataKey}"] credential missing fields: ${missing.join(', ')}`);
+    }
+    return c;
+}
+/**
+ * 写一个 tosutil 临时 config 文件，注入 STS 凭证 + endpoint + region。
+ * 返回 config 路径，调用方负责清理。
+ */
+function writeTosutilConfig(tosutilPath, cred, label) {
+    const confPath = node_path_1.default.join(node_os_1.default.tmpdir(), `.tosutilconfig-miaoda-${label}-${String(process.pid)}-${String(Date.now())}`);
+    node_fs_1.default.writeFileSync(confPath, '');
+    (0, node_child_process_1.execFileSync)(tosutilPath, [
+        'config',
+        '-conf',
+        confPath,
+        '-e',
+        cred.endpoint,
+        '-i',
+        cred.accessKeyID,
+        '-k',
+        cred.secretAccessKey,
+        '-t',
+        cred.sessionToken,
+        '-re',
+        cred.region,
+    ], { stdio: 'pipe' });
+    return confPath;
+}
+function normalizeTosDest(bucket, prefix) {
+    const bucketPart = bucket.startsWith('tos://') ? bucket : `tos://${bucket}`;
+    const normalized = prefix.replace(/^\/+/, '');
+    return `${bucketPart.replace(/\/+$/, '')}/${normalized}`;
+}
 /**
- * 用 tosutil 把目录批量上传到 pre-signed URL。
- * 服务端返回的 URL 已带签名凭证，CLI 直接透传给 tosutil，不解析、不拆字段。
+ * 用 tosutil 把目录批量上传到 tos://bucket/prefix（STS 凭证从 config 文件读取）。
  */
-function uploadDirToSignedUrl(tosutilPath, sourceDir, signedUrl) {
+function uploadDirWithCredential(tosutilPath, sourceDir, cred, label) {
     const entries = node_fs_1.default.readdirSync(sourceDir);
     if (entries.length === 0) {
         (0, logger_1.debug)(`upload: skip empty dir ${sourceDir}`);
         return;
     }
-    (0, logger_1.debug)(`upload: ${sourceDir} -> ${signedUrl} (${String(entries.length)} entries)`);
-    const output = (0, node_child_process_1.execFileSync)(tosutilPath, ['cp', sourceDir, signedUrl, '-r', '-flat', '-j', '5', '-p', '3', '-ps', '10485760', '-f'], { encoding: 'utf-8', stdio: ['pipe', 'pipe', 'pipe'] });
+    const dest = normalizeTosDest(cred.bucket, cred.prefix);
+    (0, logger_1.debug)(`upload: ${sourceDir} -> ${dest} (${String(entries.length)} entries)`);
+    const confPath = writeTosutilConfig(tosutilPath, cred, label);
+    let output;
+    try {
+        output = (0, node_child_process_1.execFileSync)(tosutilPath, [
+            'cp',
+            sourceDir,
+            dest,
+            '-r',
+            '-flat',
+            '-j',
+            '5',
+            '-p',
+            '3',
+            '-ps',
+            '10485760',
+            '-f',
+            '-conf',
+            confPath,
+        ], { encoding: 'utf-8', stdio: ['pipe', 'pipe', 'pipe'] });
+    }
+    catch (err) {
+        const e = err;
+        const stderr = (e.stderr ?? '').trim();
+        const stdout = (e.stdout ?? '').trim();
+        throw new error_1.AppError('DEPLOY_UPLOAD_FAILED', `tosutil cp exited with status ${String(e.status ?? -1)} for ${sourceDir}\n` +
+            `  stderr: ${stderr || '(empty)'}\n` +
+            `  stdout: ${stdout.slice(0, 500) || '(empty)'}`);
+    }
+    finally {
+        try {
+            node_fs_1.default.unlinkSync(confPath);
+        }
+        catch {
+            /* ignore */
+        }
+    }
     const succeedMatch = /Succeed count is:\s*(\d+)/.exec(output);
     const failedMatch = /Failed count is:\s*(\d+)/.exec(output);
     const succeedCount = succeedMatch ? Number.parseInt(succeedMatch[1], 10) : 0;
@@ -47,16 +148,17 @@ function uploadDirToSignedUrl(tosutilPath, sourceDir, signedUrl) {
         throw new error_1.AppError('DEPLOY_UPLOAD_FAILED', `Upload failed: ${String(failedCount)} files failed, ${String(succeedCount)} succeeded. source=${sourceDir}`);
     }
     if (succeedCount === 0) {
-        throw new error_1.AppError('DEPLOY_UPLOAD_EMPTY', `Upload failed: 0 files uploaded. source=${sourceDir}. Check tosutil output and pre-signed URL validity.`);
+        throw new error_1.AppError('DEPLOY_UPLOAD_EMPTY', `Upload failed: 0 files uploaded. source=${sourceDir}. Check tosutil credentials and bucket permissions.`);
     }
 }
 /**
- * 上传三类产物到 preRelease 下发的对应 pre-signed URL。
- *   - dist/output            (必传) → DataKey.OUTPUT_TOS_UPLOAD_URL
- *   - dist/output_resource   (可选) → DataKey.OUTPUT_RESOURCE_TOS_UPLOAD_URL
- *   - dist/output_static     (可选) → DataKey.OUTPUT_STATIC_TOS_UPLOAD_URL
+ * 上传三类产物。每类的凭证来自 preRelease.data 中对应 *_tos_upload_credential 字段
+ * （JSON.stringify 的 TosUploadCredential 对象）：
+ *   - dist/output            (必传) → OUTPUT_TOS_UPLOAD_CREDENTIAL
+ *   - dist/output_resource   (可选) → OUTPUT_RESOURCE_TOS_UPLOAD_CREDENTIAL
+ *   - dist/output_static     (可选) → OUTPUT_STATIC_TOS_UPLOAD_CREDENTIAL
  *
- * 目录不存在的可选项跳过；output 不存在或 url 缺失抛错。
+ * 目录不存在的可选项跳过；output 不存在或凭证缺失抛错。
  */
 function uploadArtifacts(opts) {
     const tosutilPath = resolveTosutilPath();
@@ -72,16 +174,16 @@ function uploadArtifacts(opts) {
             (0, logger_1.debug)(`upload: dir not present, skipping ${target.dir}`);
             continue;
         }
-        const signedUrl = target.required
+        const credRaw = target.required
             ? (0, protocol_1.requireDataKey)(opts.data, target.dataKey)
             : (0, protocol_1.optionalDataKey)(opts.data, target.dataKey);
-        if (signedUrl === undefined) {
-            // 目录有但后端没下发 URL → 静默跳过（后端语义：这个产物不归该模板管）
-            (0, logger_1.debug)(`upload: ${target.dir} exists but no upload URL configured, skipping`);
+        if (credRaw === undefined) {
+            (0, logger_1.debug)(`upload: ${target.dir} exists but no credential configured, skipping`);
             continue;
         }
+        const cred = parseCredential(credRaw, target.dataKey);
         (0, logger_1.log)('deploy', `Uploading ${target.dir}...`);
-        uploadDirToSignedUrl(tosutilPath, localPath, signedUrl);
+        uploadDirWithCredential(tosutilPath, localPath, cred, target.dir);
         uploaded++;
     }
     if (uploaded === 0) {

package/dist/services/deploy/modern/constants.js

@@ -3,9 +3,11 @@
 // （旧版的 STACK_CONFIGS / archType / FaaS 相关常量在新接口契约下不再需要——
 //  发布模板差异完全由后端 preRelease.data 下发，CLI 不维护 stack 配置。）
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.OUTPUT_STATIC_DIR = exports.OUTPUT_RESOURCE_DIR = exports.OUTPUT_DIR = exports.DIST_DIR = void 0;
+exports.OUTPUT_CAPABILITIES_DIR = exports.OUTPUT_STATIC_DIR = exports.OUTPUT_RESOURCE_DIR = exports.OUTPUT_DIR = exports.DIST_DIR = void 0;
 /** 构建产物固定目录约定 */
 exports.DIST_DIR = 'dist';
 exports.OUTPUT_DIR = 'output';
 exports.OUTPUT_RESOURCE_DIR = 'output_resource';
 exports.OUTPUT_STATIC_DIR = 'output_static';
+/** 发布插件能力声明目录：含若干 capability.json 文件，发布时批量注册到 plugin_instances */
+exports.OUTPUT_CAPABILITIES_DIR = 'output_capabilities';

package/dist/services/deploy/modern/pipelines/local.js

@@ -9,16 +9,17 @@ const index_1 = require("../atoms/index");
  * 本地构建 + 本地部署 pipeline。
  *
  * 步骤顺序：
- *   1. prepareDeployContext   — 校验项目 + 读 meta
- *   2. preRelease             — 签发 pre_release_id / version / 动态配置 data
- *   3. runBuild               — 本地 npm run build（注入 data 中的 CDN 前缀）
- *   4. createLocalRelease     — 创建发布单（加锁、拿 releaseID）
- *   5. uploadArtifacts        — 把产物推到 preRelease 下发的 pre-signed URL
- *   6. finalizeLocalRelease   — Success / Failed 翻终态
+ *   1. prepareDeployContext    — 校验项目 + 读 meta
+ *   2. preRelease              — 签发 pre_release_id / version / 动态配置 data
+ *   3. runBuild                — 本地 npm run build（注入 data 中的 CDN 前缀）
+ *   4. createLocalRelease      — 创建发布单（加锁、拿 releaseID）
+ *   5. uploadArtifacts         — 把产物推到 preRelease 下发的 pre-signed URL
+ *   6. savePluginInstances     — 扫描 dist/output_capabilities/*.json，批量注册插件能力
+ *   7. finalizeLocalRelease    — Finished / Failed 翻终态
  *
  * createLocalRelease 提前到 upload 之前：发布单先建出来，
- * upload 在已知 releaseID 的前提下进行；upload 失败时也能精准把
- * 该发布单标记为 Failed，避免遗留挂态。
+ * upload / savePluginInstances 在已知 releaseID 的前提下进行；
+ * 任一步失败都会精准把该发布单标记为 Failed，避免遗留挂态。
  */
 async function localBuildLocalPublishPipeline(opts) {
     const ctx = (0, index_1.prepareDeployContext)(opts.projectDir);
@@ -46,6 +47,14 @@ async function localBuildLocalPublishPipeline(opts) {
     try {
         (0, logger_1.log)('deploy', 'Uploading artifacts...');
         (0, index_1.uploadArtifacts)({ projectDir: ctx.projectDir, data });
+        const saveResult = await (0, index_1.savePluginInstances)({
+            projectDir: ctx.projectDir,
+            appId: ctx.appId,
+            version: pre.version,
+        });
+        if (saveResult.saved > 0) {
+            (0, logger_1.log)('deploy', `${String(saveResult.saved)} capability instance(s) registered`);
+        }
         await (0, index_1.finalizeLocalRelease)(ctx.appId, release.releaseID, index_1.LocalReleaseStatus.Finished);
     }
     catch (err) {

package/dist/services/deploy/modern/protocol.js

@@ -17,13 +17,16 @@ exports.DataKey = {
     RESOURCE_CDN_PREFIX: 'resource_cdn_prefix',
     /** dist/output_static 对应的 CDN 域名前缀 */
     STATIC_CDN_PREFIX: 'static_cdn_prefix',
-    // ── TOS 上传 URL（与三个产物目录一一对应） ──
-    /** dist/output 上传地址（必传） */
-    OUTPUT_TOS_UPLOAD_URL: 'output_tos_upload_url',
-    /** dist/output_resource 上传地址（仅当目录存在时使用） */
-    OUTPUT_RESOURCE_TOS_UPLOAD_URL: 'output_resource_tos_upload_url',
-    /** dist/output_static 上传地址（仅当目录存在时使用） */
-    OUTPUT_STATIC_TOS_UPLOAD_URL: 'output_static_tos_upload_url',
+    // ── TOS 上传凭证（与三个产物目录一一对应，value 为 JSON.stringify 的凭证对象） ──
+    // 凭证对象形态（camelCase）：
+    //   { accessKeyID, secretAccessKey, sessionToken, endpoint, region, bucket, prefix }
+    // CLI 端 JSON.parse 后写 tosutil 临时 config，cp 到 tos://bucket/prefix。
+    /** dist/output 上传凭证（必传） */
+    OUTPUT_TOS_UPLOAD_CREDENTIAL: 'output_tos_upload_credential',
+    /** dist/output_resource 上传凭证（仅当目录存在时使用） */
+    OUTPUT_RESOURCE_TOS_UPLOAD_CREDENTIAL: 'output_resource_tos_upload_credential',
+    /** dist/output_static 上传凭证（仅当目录存在时使用） */
+    OUTPUT_STATIC_TOS_UPLOAD_CREDENTIAL: 'output_static_tos_upload_credential',
 };
 /** 取必传 key，缺失抛 AppError（带 key 名，便于后端 tcc 配置排查） */
 function requireDataKey(data, key) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lark-apaas/miaoda-cli",
-  "version": "0.1.4-alpha.9153b4c",
+  "version": "0.1.4-alpha.abaa17f",
   "description": "Miaoda 平台命令行工具，面向 Agent 调用",
   "type": "commonjs",
   "bin": {