@lark-apaas/miaoda-cli 0.1.4-alpha.abaa17f → 0.1.4-alpha.b2fdfff

package/README.md

@@ -54,7 +54,7 @@ miaoda file ls --output json
 ## 环境变量
 
 - `MIAODA_APP_ID`：默认应用 ID，等价于 `--app-id`。
-- `MIAODA_CANARY_HEADER`：设置后所有 HTTP 请求自动带上 `x-tt-env: <值>` 小流量头（例：`export MIAODA_CANARY_HEADER=boe_xxx`）。
+- `MIAODA_CANARY_HEADER`：HTTP 请求的 `x-tt-env` 小流量头取值。未设置时默认 `boe_miaoda_doubao`；设为空字符串则不带该头（例：`export MIAODA_CANARY_HEADER=boe_xxx`）。值形如 `ppe_xxx` 时额外带上 `x-use-ppe: 1`。
 
 ## 输出契约
 

package/dist/api/deploy/index.js

@@ -1,6 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.NodeStatus = exports.nodeStatusFromText = exports.nodeStatusText = exports.errorJobSchema = exports.deployGetSchema = exports.deployHistorySchema = exports.batchSavePluginInstances = exports.LocalReleaseStatus = exports.getModernLastPublishedVersion = exports.getModernReleaseStatus = exports.createModernRelease = exports.updateLocalRelease = exports.createLocalRelease = exports.preRelease = exports.queryPipelineInstance = exports.getErrorLog = exports.listPipelineInstances = exports.createRelease = void 0;
+exports.NodeStatus = exports.nodeStatusFromText = exports.nodeStatusText = exports.errorJobSchema = exports.deployGetSchema = exports.deployHistorySchema = exports.batchSavePluginInstances = exports.LocalReleaseStatus = exports.getModernLastPublishedVersion = exports.getModernReleaseStatus = exports.createModernRelease = exports.callbackStatic = exports.updateLocalRelease = exports.createLocalRelease = exports.preRelease = exports.queryPipelineInstance = exports.getErrorLog = exports.listPipelineInstances = exports.createRelease = void 0;
 var api_1 = require("./api");
 Object.defineProperty(exports, "createRelease", { enumerable: true, get: function () { return api_1.createRelease; } });
 Object.defineProperty(exports, "listPipelineInstances", { enumerable: true, get: function () { return api_1.listPipelineInstances; } });
@@ -10,6 +10,7 @@ var modern_1 = require("./modern");
 Object.defineProperty(exports, "preRelease", { enumerable: true, get: function () { return modern_1.preRelease; } });
 Object.defineProperty(exports, "createLocalRelease", { enumerable: true, get: function () { return modern_1.createLocalRelease; } });
 Object.defineProperty(exports, "updateLocalRelease", { enumerable: true, get: function () { return modern_1.updateLocalRelease; } });
+Object.defineProperty(exports, "callbackStatic", { enumerable: true, get: function () { return modern_1.callbackStatic; } });
 Object.defineProperty(exports, "createModernRelease", { enumerable: true, get: function () { return modern_1.createRelease; } });
 Object.defineProperty(exports, "getModernReleaseStatus", { enumerable: true, get: function () { return modern_1.getReleaseStatus; } });
 Object.defineProperty(exports, "getModernLastPublishedVersion", { enumerable: true, get: function () { return modern_1.getLastPublishedVersion; } });

package/dist/api/deploy/modern.js

@@ -13,6 +13,7 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.preRelease = preRelease;
 exports.createLocalRelease = createLocalRelease;
 exports.updateLocalRelease = updateLocalRelease;
+exports.callbackStatic = callbackStatic;
 exports.createRelease = createRelease;
 exports.getReleaseStatus = getReleaseStatus;
 exports.getLastPublishedVersion = getLastPublishedVersion;
@@ -48,6 +49,13 @@ async function updateLocalRelease(req) {
     const url = `/v1/devops/app/${encodeURIComponent(appID)}/local_publish/update_release`;
     await (0, http_1.postInnerApi)(url, body, envelopeOpts('Failed to update local release'));
 }
+// ── callbackStatic（PaaS Storage 静态资源上传完成回调） ──
+/** POST /v1/storage/app/:appID/bucket/:bucketID/object/callbackStatic */
+async function callbackStatic(req) {
+    const { appID, bucketID, uploadID } = req;
+    const url = `/v1/storage/app/${encodeURIComponent(appID)}/bucket/${encodeURIComponent(bucketID)}/object/callbackStatic`;
+    return (0, http_1.postInnerApi)(url, { uploadID }, envelopeOpts('Failed to callback static upload'));
+}
 // ── release（远端部署，B / C 链路；本期不导出，类型骨架已就绪） ──
 /** POST /v1/devops/app/:appID/remote_publish/release */
 async function createRelease(req) {

package/dist/api/deploy/plugin-instances-types.js

@@ -1,6 +1,6 @@
 "use strict";
 // plugin_instances batch_save 接口的请求 / 响应类型。
 //
-// 与 modern deploy 其它接口走的 lark.apaas.devops PSM 不同，
-// 本接口走 lark.apaas.studio_server，响应信封形态也不一样（BaseResp 而非 status_code）。
+// 后端已统一到 InnerEnvelope（`{data, status_code, message}`），与 modern deploy
+// 其它接口一致；旧的 BaseResp 形态已下线，类型也不再保留。
 Object.defineProperty(exports, "__esModule", { value: true });

package/dist/api/deploy/plugin-instances.js

@@ -1,30 +1,22 @@
 "use strict";
 // studio_server 的 plugin_instances 批量保存接口。
-// 与 modern deploy 其余接口（走 devops PSM、InnerEnvelope）信封不同，
-// 这里走 studio_server PSM、BaseResp 信封，故自行解析。
+//
+// 后端已统一到 InnerEnvelope（`{data, status_code, message}`）信封；不再手撸
+// 旧 BaseResp 解析，直接复用 utils/http.ts 的 postInnerApi，verbose 下也能拿到
+// `→ POST` / `body:` / `resp:` 的完整日志。
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.batchSavePluginInstances = batchSavePluginInstances;
 const http_1 = require("../../utils/http");
-const error_1 = require("../../utils/error");
 const URL_PATH = '/api/v1/studio/innerapi/plugin_instances/batch_save';
 /**
  * POST /api/v1/studio/innerapi/plugin_instances/batch_save
  *
  * 把发布版本的 capability 集合注册到 studio_server。
- * 失败时抛 AppError("DEPLOY_PLUGIN_BATCH_SAVE_FAILED")，带 BaseResp 错误信息。
+ * 失败时抛 AppError("DEPLOY_PLUGIN_BATCH_SAVE_FAILED")，错误信息来自 envelope.message。
  */
 async function batchSavePluginInstances(req) {
-    const response = await (0, http_1.getHttpClient)().post(URL_PATH, req);
-    if (!response.ok) {
-        throw new error_1.HttpError(response.status, URL_PATH, `Failed to save plugin instances: ${String(response.status)} ${response.statusText}`);
-    }
-    const body = (await response.json());
-    const baseResp = body.BaseResp;
-    if (baseResp?.StatusCode !== 0) {
-        const msg = baseResp?.StatusMessage ?? baseResp?.KStatusMessage ?? 'unknown error';
-        const code = baseResp?.KStatusCode !== undefined && baseResp.KStatusCode !== ''
-            ? baseResp.KStatusCode
-            : String(baseResp?.StatusCode ?? 'unknown');
-        throw new error_1.AppError('DEPLOY_PLUGIN_BATCH_SAVE_FAILED', `Failed to save plugin instances: status_code=${code} message=${msg}`);
-    }
+    await (0, http_1.postInnerApi)(URL_PATH, req, {
+        errPrefix: 'Failed to save plugin instances',
+        defaultErrCode: 'DEPLOY_PLUGIN_BATCH_SAVE_FAILED',
+    });
 }

package/dist/cli/commands/index.js

@@ -8,6 +8,7 @@ const index_3 = require("../../cli/commands/observability/index");
 const index_4 = require("../../cli/commands/app/index");
 const index_5 = require("../../cli/commands/deploy/index");
 const modern_1 = require("../../cli/commands/deploy/modern");
+const index_6 = require("../../cli/commands/skills/index");
 function resolveScene(appType, _archType) {
     if (appType === '7')
         return 'modern';
@@ -24,6 +25,7 @@ const SCENE_REGISTRARS = {
     modern: (p) => {
         (0, index_4.registerAppCommands)(p, { includeInit: true });
         (0, modern_1.registerDeployCommandsModern)(p);
+        (0, index_6.registerSkillsCommands)(p);
     },
 };
 function readEnv(name) {

package/dist/cli/commands/skills/index.js

@@ -0,0 +1,63 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.registerSkillsCommands = registerSkillsCommands;
+const shared_1 = require("../../../cli/commands/shared");
+const index_1 = require("../../../cli/handlers/skills/index");
+/**
+ * miaoda skills：本地 agent skills 维护。
+ *
+ * 当前仅 steering 一类子集（coding-steering 包内的 _common/skills + <stack>/skills + tech.md）；
+ * 后续如有更多 skill 类型再加 --type。`app init` 会一次性同步装上，独立 `skills sync` 用于
+ * 后续单独升级 / pin 版本，不必走完整 init。
+ */
+function registerSkillsCommands(program) {
+    const skillsCmd = program.command('skills').description('本地 agent skills（含 steering）维护');
+    skillsCmd.action(() => {
+        skillsCmd.outputHelp();
+    });
+    registerSkillsSync(skillsCmd);
+    registerSkillsStatus(skillsCmd);
+}
+function registerSkillsSync(parent) {
+    const cmd = parent
+        .command('sync')
+        .description('同步 coding-steering（latest 或指定版本）到 .agent/steering/')
+        .argument('[version]', 'coding-steering 包版本或 dist-tag，缺省 latest')
+        .option('--dir <path>', '项目目录，默认当前目录', '.')
+        .addHelpText('after', `
+前置要求
+  当前目录（或 --dir）已走过 'miaoda app init'（.spark/meta.json 含 stack）
+
+JSON 输出
+  {"data": {"stack": "...", "version": "...", "syncedSkills": [...], "techSynced": true|false}}
+
+示例
+  $ miaoda skills sync
+  $ miaoda skills sync 0.2.0
+  $ miaoda skills sync --dir ./my-app
+`);
+    cmd.action((0, shared_1.withHelp)(cmd, async (version, rawOpts) => {
+        await (0, index_1.handleSkillsSync)({
+            dir: rawOpts.dir,
+            version,
+        });
+    }));
+}
+function registerSkillsStatus(parent) {
+    const cmd = parent
+        .command('status')
+        .description('查看本地 .agent/steering/ 的当前状态（不联网）')
+        .option('--dir <path>', '项目目录，默认当前目录', '.')
+        .addHelpText('after', `
+JSON 输出
+  {"data": {"present": true|false, "skills": [...], "techSynced": true|false}}
+
+示例
+  $ miaoda skills status
+`);
+    cmd.action((0, shared_1.withHelp)(cmd, async (rawOpts) => {
+        await (0, index_1.handleSkillsStatus)({
+            dir: rawOpts.dir,
+        });
+    }));
+}

package/dist/cli/handlers/app/init.js

@@ -7,6 +7,7 @@ exports.handleAppInit = handleAppInit;
 const node_fs_1 = __importDefault(require("node:fs"));
 const node_path_1 = __importDefault(require("node:path"));
 const index_1 = require("../../../services/app/init/index");
+const coding_steering_1 = require("../../../utils/coding-steering");
 const error_1 = require("../../../utils/error");
 const output_1 = require("../../../utils/output");
 /** miaoda app init [--template <stack>] [--conf <json>] */
@@ -43,10 +44,11 @@ async function handleAppInit(opts) {
     const version = opts.conf?.version;
     const projectName = node_path_1.default.basename(targetDir);
     const tplResult = (0, index_1.renderTemplate)({ stack, version, targetDir, projectName });
-    const steeringResult = (0, index_1.syncSteering)({
+    const steeringResult = (0, coding_steering_1.syncCodingSteering)({
         stack,
         targetDir,
         version: opts.conf?.steeringVersion,
+        logPrefix: 'init',
     });
     const installResult = (0, index_1.installDependencies)({
         targetDir,
@@ -55,13 +57,9 @@ async function handleAppInit(opts) {
     });
     (0, index_1.writeSparkMeta)(targetDir, {
         appId: opts.appId,
-        template: stack,
-        templatePackage: tplResult.packageName,
-        templateVersion: tplResult.version,
-        steeringVersion: steeringResult.version,
+        stack,
+        version: tplResult.version,
         archType: tplResult.archType,
-        installSource: installResult.source,
-        installHash: installResult.hash,
     });
     if (!(0, output_1.isJsonMode)()) {
         process.stdout.write(`✓ Initialized ${stack} (template ${tplResult.version}, steering ${steeringResult.version}, install ${installResult.source}) in ${targetDir}\n`);

package/dist/cli/handlers/skills/index.js

@@ -0,0 +1,7 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.handleSkillsStatus = exports.handleSkillsSync = void 0;
+var sync_1 = require("./sync");
+Object.defineProperty(exports, "handleSkillsSync", { enumerable: true, get: function () { return sync_1.handleSkillsSync; } });
+var status_1 = require("./status");
+Object.defineProperty(exports, "handleSkillsStatus", { enumerable: true, get: function () { return status_1.handleSkillsStatus; } });

package/dist/cli/handlers/skills/status.js

@@ -0,0 +1,31 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.handleSkillsStatus = handleSkillsStatus;
+const node_path_1 = __importDefault(require("node:path"));
+const index_1 = require("../../../services/skills/index");
+const spark_meta_1 = require("../../../utils/spark-meta");
+const output_1 = require("../../../utils/output");
+/**
+ * miaoda skills status [--dir <path>]
+ *
+ * 从 .spark/meta.json 读 stack，扫描 <dir>/.agent/steering/<stack>/，
+ * 给出当前装了哪些 skills、tech.md 是否在。纯本地操作，不联网。
+ * meta 缺 stack 时返回 present=false（不抛错，方便和 init 的引导分开）。
+ */
+async function handleSkillsStatus(opts) {
+    await Promise.resolve();
+    const targetDir = node_path_1.default.resolve(opts.dir ?? process.cwd());
+    const meta = (0, spark_meta_1.readSparkMeta)(targetDir);
+    const status = (0, index_1.readSkillsStatus)({ targetDir, stack: meta.stack });
+    (0, output_1.emit)({
+        data: {
+            stack: meta.stack ?? null,
+            present: status.present,
+            skills: status.skills,
+            techSynced: status.techSynced,
+        },
+    });
+}

package/dist/cli/handlers/skills/sync.js

@@ -0,0 +1,38 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.handleSkillsSync = handleSkillsSync;
+const node_path_1 = __importDefault(require("node:path"));
+const coding_steering_1 = require("../../../utils/coding-steering");
+const spark_meta_1 = require("../../../utils/spark-meta");
+const error_1 = require("../../../utils/error");
+const output_1 = require("../../../utils/output");
+/**
+ * miaoda skills sync [--dir <path>] [--version <ver>]
+ *
+ * 从 .spark/meta.json 读 stack，把 coding-steering 包内对应 stack 的 skills + tech.md
+ * 同步到 <dir>/.agent/steering/。需要先跑过 `miaoda app init`。
+ */
+async function handleSkillsSync(opts) {
+    await Promise.resolve();
+    const targetDir = node_path_1.default.resolve(opts.dir ?? process.cwd());
+    const meta = (0, spark_meta_1.readSparkMeta)(targetDir);
+    if (meta.stack === undefined || meta.stack === '') {
+        throw new error_1.AppError('SKILLS_META_INCOMPLETE', '.spark/meta.json missing stack — run `miaoda app init` first');
+    }
+    const result = (0, coding_steering_1.syncCodingSteering)({
+        stack: meta.stack,
+        targetDir,
+        version: opts.version,
+    });
+    (0, output_1.emit)({
+        data: {
+            stack: meta.stack,
+            version: result.version,
+            syncedSkills: result.syncedSkills,
+            techSynced: result.techSynced,
+        },
+    });
+}

package/dist/services/app/init/index.js

@@ -1,12 +1,10 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.installDependencies = exports.writeSparkMeta = exports.readSparkMeta = exports.syncSteering = exports.TEMPLATE_PACKAGE_BY_STACK = exports.SUPPORTED_STACKS = exports.renderTemplate = void 0;
+exports.installDependencies = exports.writeSparkMeta = exports.readSparkMeta = exports.TEMPLATE_PACKAGE_BY_STACK = exports.SUPPORTED_STACKS = exports.renderTemplate = void 0;
 var template_1 = require("./template");
 Object.defineProperty(exports, "renderTemplate", { enumerable: true, get: function () { return template_1.renderTemplate; } });
 Object.defineProperty(exports, "SUPPORTED_STACKS", { enumerable: true, get: function () { return template_1.SUPPORTED_STACKS; } });
 Object.defineProperty(exports, "TEMPLATE_PACKAGE_BY_STACK", { enumerable: true, get: function () { return template_1.TEMPLATE_PACKAGE_BY_STACK; } });
-var steering_1 = require("./steering");
-Object.defineProperty(exports, "syncSteering", { enumerable: true, get: function () { return steering_1.syncSteering; } });
 var spark_meta_1 = require("../../../utils/spark-meta");
 Object.defineProperty(exports, "readSparkMeta", { enumerable: true, get: function () { return spark_meta_1.readSparkMeta; } });
 Object.defineProperty(exports, "writeSparkMeta", { enumerable: true, get: function () { return spark_meta_1.writeSparkMeta; } });

package/dist/services/app/init/template.js

@@ -10,17 +10,18 @@ const node_path_1 = __importDefault(require("node:path"));
 const npm_pack_1 = require("../../../utils/npm-pack");
 const error_1 = require("../../../utils/error");
 const logger_1 = require("../../../utils/logger");
-/** 短名 → 包名映射。新增 stack 时改这里。 */
+/** 短名 → 包名映射。新增 stack 时改这里。archType 由 template 包自报，CLI 不维护。 */
 exports.TEMPLATE_PACKAGE_BY_STACK = {
     'vite-react': '@lark-apaas/coding-template-vite-react',
     html: '@lark-apaas/coding-template-html',
 };
 exports.SUPPORTED_STACKS = Object.keys(exports.TEMPLATE_PACKAGE_BY_STACK);
-// template/ 内以下划线开头的占位文件名在渲染时改名（npm publish 会把 .gitignore 吞掉，
-// 模板里用 _gitignore 提交，渲染时再改回）。
+// template/ 内以下划线开头的占位文件名在渲染时改名（npm publish 会把 .gitignore / .npmrc 吞掉，
+// 模板里用 _gitignore / _npmrc 提交，渲染时再改回）。
 const RENAME_FILES = {
     _gitignore: '.gitignore',
     '_env.local': '.env.local',
+    _npmrc: '.npmrc',
 };
 function renderTemplate(opts) {
     const packageName = exports.TEMPLATE_PACKAGE_BY_STACK[opts.stack];
@@ -37,12 +38,13 @@ function renderTemplate(opts) {
             throw new error_1.AppError('TEMPLATE_INVALID', `包 ${packageName}@${fetched.version} 缺少 template/ 目录`);
         }
         const pkgJsonPath = node_path_1.default.join(fetched.extractDir, 'package.json');
-        let archType = '';
+        let archType;
         if (node_fs_1.default.existsSync(pkgJsonPath)) {
             const pkgJson = JSON.parse(node_fs_1.default.readFileSync(pkgJsonPath, 'utf-8'));
-            archType = pkgJson.miaodaTemplate?.archType ?? '';
+            archType = pkgJson.miaodaTemplate?.archType;
         }
-        if (!archType) {
+        // 用显式 null/undefined/'' 判，避免把合法值 0 / false 当成"缺失"误抛
+        if (archType === undefined || archType === null || archType === '') {
             throw new error_1.AppError('TEMPLATE_INVALID', `包 ${packageName}@${fetched.version} 缺少 package.json.miaodaTemplate.archType`);
         }
         (0, logger_1.log)('init', `Rendering template to ${opts.targetDir}...`);

package/dist/services/deploy/modern/atoms/build.js

@@ -6,13 +6,14 @@ const error_1 = require("../../../../utils/error");
 const logger_1 = require("../../../../utils/logger");
 const protocol_1 = require("../protocol");
 /**
- * 给 CDN 前缀补 https:// 协议头：
+ * 给 RESOURCE_CDN_PREFIX 补 https:// 协议头：
  *   - 已带 http:// 或 https:// → 原样返回
  *   - 以 / 开头（绝对路径）→ 原样返回
  *   - 不含 dot（看起来不像域名，比如纯路径 app_xxx/2）→ 原样返回
  *   - 其它（典型：lf-xxx.bytetos.com/...）→ 前缀 https://
  *
  * template 的 build script 直接拿来当 vite base / asset URL 用，必须是合法 URL。
+ * STATIC_CDN_PREFIX 由 runtime 同域提供（相对路径），不走这里。
  */
 function ensureHttpsScheme(v) {
     if (/^https?:\/\//i.test(v))
@@ -28,17 +29,21 @@ function ensureHttpsScheme(v) {
  *   MIAODA_APP_ID / MIAODA_VERSION / MIAODA_STACK
  *   MIAODA_RESOURCE_CDN_PREFIX / MIAODA_STATIC_CDN_PREFIX
  *
- * CDN 前缀缺 scheme 时由 CLI 自动补 https://，template 不用关心。
+ * MIAODA_STATIC_CDN_PREFIX 取自 output_static_paas_storage_credential.downloadURLPrefix，
+ * 是 runtime 同域相对路径（例如 /app/<appId>/runtime/api/v1/storage/object/<bucket>/），
+ * 不补 https scheme，原样注入。顶层 static_cdn_prefix 不再下发。
+ *
  * build 失败抛 AppError（execSync 自身会 throw，捕获后包一层加错误码）。
  */
 function runBuild(opts) {
+    const staticCred = (0, protocol_1.parsePaasStorageCredential)((0, protocol_1.requireDataKey)(opts.data, protocol_1.DataKey.OUTPUT_STATIC_PAAS_STORAGE_CREDENTIAL), protocol_1.DataKey.OUTPUT_STATIC_PAAS_STORAGE_CREDENTIAL);
     const buildEnv = {
         ...process.env,
         MIAODA_APP_ID: opts.appId,
         MIAODA_VERSION: opts.version,
         MIAODA_STACK: opts.templateKey,
         MIAODA_RESOURCE_CDN_PREFIX: ensureHttpsScheme((0, protocol_1.requireDataKey)(opts.data, protocol_1.DataKey.RESOURCE_CDN_PREFIX)),
-        MIAODA_STATIC_CDN_PREFIX: ensureHttpsScheme((0, protocol_1.requireDataKey)(opts.data, protocol_1.DataKey.STATIC_CDN_PREFIX)),
+        MIAODA_STATIC_CDN_PREFIX: staticCred.downloadURLPrefix,
     };
     (0, logger_1.log)('deploy', 'Building...');
     try {

package/dist/services/deploy/modern/atoms/context.js

@@ -6,7 +6,7 @@ const spark_meta_1 = require("../../../../utils/spark-meta");
 const check_1 = require("../check");
 const template_key_map_1 = require("../template-key-map");
 /**
- * 准备 deploy 上下文：跑前置检查、读 .spark/meta.json、抽出 appId / template，
+ * 准备 deploy 上下文：跑前置检查、读 .spark/meta.json、抽出 appId / stack，
  * 并把 stack 短名映射成后端 templateKey。
  *
  * 任何前置失败统一抛 AppError。返回值是后续 atom 唯一信任的入参源。
@@ -17,14 +17,14 @@ function prepareDeployContext(projectDir) {
     if (meta.appId === undefined || meta.appId === '') {
         throw new error_1.AppError('DEPLOY_META_INCOMPLETE', '.spark/meta.json missing appId — run `miaoda app init` first');
     }
-    if (meta.template === undefined || meta.template === '') {
-        throw new error_1.AppError('DEPLOY_META_INCOMPLETE', '.spark/meta.json missing template — run `miaoda app init` first');
+    if (meta.stack === undefined || meta.stack === '') {
+        throw new error_1.AppError('DEPLOY_META_INCOMPLETE', '.spark/meta.json missing stack — run `miaoda app init` first');
     }
     return {
         projectDir,
         appId: meta.appId,
-        template: meta.template,
-        templateKey: (0, template_key_map_1.resolveTemplateKey)(meta.template),
+        stack: meta.stack,
+        templateKey: (0, template_key_map_1.resolveTemplateKey)(meta.stack),
         meta,
     };
 }

package/dist/services/deploy/modern/atoms/upload.js

@@ -8,21 +8,28 @@ const node_fs_1 = __importDefault(require("node:fs"));
 const node_os_1 = __importDefault(require("node:os"));
 const node_path_1 = __importDefault(require("node:path"));
 const node_child_process_1 = require("node:child_process");
+const index_1 = require("../../../../api/deploy/index");
 const error_1 = require("../../../../utils/error");
 const logger_1 = require("../../../../utils/logger");
 const constants_1 = require("../constants");
 const protocol_1 = require("../protocol");
 const UPLOAD_PLAN = [
-    { dir: constants_1.OUTPUT_DIR, dataKey: protocol_1.DataKey.OUTPUT_TOS_UPLOAD_CREDENTIAL, required: true },
     {
+        kind: 'tos',
+        dir: constants_1.OUTPUT_DIR,
+        dataKey: protocol_1.DataKey.OUTPUT_TOS_UPLOAD_CREDENTIAL,
+        required: true,
+    },
+    {
+        kind: 'tos',
         dir: constants_1.OUTPUT_RESOURCE_DIR,
         dataKey: protocol_1.DataKey.OUTPUT_RESOURCE_TOS_UPLOAD_CREDENTIAL,
         required: false,
     },
     {
+        kind: 'paas_storage',
         dir: constants_1.OUTPUT_STATIC_DIR,
-        dataKey: protocol_1.DataKey.OUTPUT_STATIC_TOS_UPLOAD_CREDENTIAL,
-        required: false,
+        dataKey: protocol_1.DataKey.OUTPUT_STATIC_PAAS_STORAGE_CREDENTIAL,
     },
 ];
 function resolveTosutilPath() {
@@ -36,33 +43,28 @@ function resolveTosutilPath() {
     }
     throw new error_1.AppError('DEPLOY_TOSUTIL_MISSING', 'tosutil is not installed or not in PATH. modern deploy requires sandbox preinstalled tosutil.');
 }
-/** 把 data 里的凭证字段 JSON.parse 出来；非法 JSON / 缺字段都抛 AppError */
-function parseCredential(raw, dataKey) {
-    let parsed;
-    try {
-        parsed = JSON.parse(raw);
-    }
-    catch (err) {
-        throw new error_1.AppError('DEPLOY_CRED_INVALID_JSON', `preRelease.data["${dataKey}"] is not valid JSON: ${err.message}`);
-    }
-    if (typeof parsed !== 'object' || parsed === null) {
-        throw new error_1.AppError('DEPLOY_CRED_INVALID_JSON', `preRelease.data["${dataKey}"] is not an object`);
-    }
-    const c = parsed;
-    const required = [
-        'accessKeyID',
-        'secretAccessKey',
-        'sessionToken',
-        'endpoint',
-        'region',
-        'bucket',
-        'prefix',
-    ];
-    const missing = required.filter((k) => typeof c[k] !== 'string' || c[k] === '');
-    if (missing.length > 0) {
-        throw new error_1.AppError('DEPLOY_CRED_INCOMPLETE', `preRelease.data["${dataKey}"] credential missing fields: ${missing.join(', ')}`);
-    }
-    return c;
+function tosutilUploadFromTos(cred) {
+    return {
+        accessKeyID: cred.accessKeyID,
+        secretAccessKey: cred.secretAccessKey,
+        sessionToken: cred.sessionToken,
+        endpoint: cred.endpoint,
+        region: cred.region,
+        bucket: cred.bucket,
+        prefix: cred.prefix,
+    };
+}
+function tosutilUploadFromPaasStorage(cred, dataKey) {
+    const { bucket, prefix } = (0, protocol_1.parseTosUploadPrefix)(cred.uploadPrefix, dataKey);
+    return {
+        accessKeyID: cred.accessKeyID,
+        secretAccessKey: cred.secretAccessKey,
+        sessionToken: cred.sessionToken,
+        endpoint: cred.endpoint,
+        region: cred.region,
+        bucket,
+        prefix,
+    };
 }
 /**
  * 写一个 tosutil 临时 config 文件，注入 STS 凭证 + endpoint + region。
@@ -88,6 +90,16 @@ function writeTosutilConfig(tosutilPath, cred, label) {
     ], { stdio: 'pipe' });
     return confPath;
 }
+/** 把 tosutil 进程的输出按行回放到 stderr，便于线上排查（沙箱里无法 attach 进程）。 */
+function streamTosutilOutput(output) {
+    if (!output)
+        return;
+    for (const line of output.split('\n')) {
+        if (line.length === 0)
+            continue;
+        process.stderr.write(`[tosutil] ${line}\n`);
+    }
+}
 function normalizeTosDest(bucket, prefix) {
     const bucketPart = bucket.startsWith('tos://') ? bucket : `tos://${bucket}`;
     const normalized = prefix.replace(/^\/+/, '');
@@ -123,11 +135,14 @@ function uploadDirWithCredential(tosutilPath, sourceDir, cred, label) {
             '-conf',
             confPath,
         ], { encoding: 'utf-8', stdio: ['pipe', 'pipe', 'pipe'] });
+        streamTosutilOutput(output);
     }
     catch (err) {
         const e = err;
         const stderr = (e.stderr ?? '').trim();
         const stdout = (e.stdout ?? '').trim();
+        streamTosutilOutput(stdout);
+        streamTosutilOutput(stderr);
         throw new error_1.AppError('DEPLOY_UPLOAD_FAILED', `tosutil cp exited with status ${String(e.status ?? -1)} for ${sourceDir}\n` +
             `  stderr: ${stderr || '(empty)'}\n` +
             `  stdout: ${stdout.slice(0, 500) || '(empty)'}`);
@@ -151,42 +166,81 @@ function uploadDirWithCredential(tosutilPath, sourceDir, cred, label) {
         throw new error_1.AppError('DEPLOY_UPLOAD_EMPTY', `Upload failed: 0 files uploaded. source=${sourceDir}. Check tosutil credentials and bucket permissions.`);
     }
 }
+function uploadTosTarget(tosutilPath, target, localPath, data) {
+    const credRaw = target.required
+        ? (0, protocol_1.requireDataKey)(data, target.dataKey)
+        : (0, protocol_1.optionalDataKey)(data, target.dataKey);
+    if (credRaw === undefined) {
+        (0, logger_1.debug)(`upload: ${target.dir} exists but no credential configured, skipping`);
+        return false;
+    }
+    const cred = (0, protocol_1.parseTosUploadCredential)(credRaw, target.dataKey);
+    (0, logger_1.log)('deploy', `Uploading ${target.dir}...`);
+    uploadDirWithCredential(tosutilPath, localPath, tosutilUploadFromTos(cred), target.dir);
+    return true;
+}
+function uploadPaasStorageTarget(tosutilPath, target, localPath, data) {
+    // 空目录：直接跳过；callbackStatic 也不能调，否则会让后端把"未发生的上传"
+    // 误以为已完成。凭证本身 build 阶段已经消费过 downloadURLPrefix，这里不重复要求。
+    if (node_fs_1.default.readdirSync(localPath).length === 0) {
+        (0, logger_1.debug)(`upload: ${target.dir} is empty, skipping`);
+        return undefined;
+    }
+    const cred = (0, protocol_1.parsePaasStorageCredential)((0, protocol_1.requireDataKey)(data, target.dataKey), target.dataKey);
+    (0, logger_1.log)('deploy', `Uploading ${target.dir}...`);
+    uploadDirWithCredential(tosutilPath, localPath, tosutilUploadFromPaasStorage(cred, target.dataKey), target.dir);
+    return cred;
+}
 /**
- * 上传三类产物。每类的凭证来自 preRelease.data 中对应 *_tos_upload_credential 字段
- * （JSON.stringify 的 TosUploadCredential 对象）：
+ * 上传三类产物。output / output_resource 走 TOS STS 凭证；output_static 走 PaaS Storage
+ * 凭证（uploadPrefix 解出 tosutil cp 目的，上传完后再调 callbackStatic 把 uploadID
+ * 提交给后端核销）：
  *   - dist/output            (必传) → OUTPUT_TOS_UPLOAD_CREDENTIAL
  *   - dist/output_resource   (可选) → OUTPUT_RESOURCE_TOS_UPLOAD_CREDENTIAL
- *   - dist/output_static     (可选) → OUTPUT_STATIC_TOS_UPLOAD_CREDENTIAL
+ *   - dist/output_static     (可选) → OUTPUT_STATIC_PAAS_STORAGE_CREDENTIAL + callbackStatic
  *
  * 目录不存在的可选项跳过；output 不存在或凭证缺失抛错。
  */
-function uploadArtifacts(opts) {
+async function uploadArtifacts(opts) {
     const tosutilPath = resolveTosutilPath();
     const distDir = node_path_1.default.join(opts.projectDir, constants_1.DIST_DIR);
-    let uploaded = 0;
+    const outcome = { uploaded: 0 };
     for (const target of UPLOAD_PLAN) {
         const localPath = node_path_1.default.join(distDir, target.dir);
         const exists = node_fs_1.default.existsSync(localPath);
-        if (!exists) {
-            if (target.required) {
-                throw new error_1.AppError('DEPLOY_NO_BUILD_OUTPUT', `Required directory missing: ${constants_1.DIST_DIR}/${target.dir}`);
+        if (target.kind === 'tos') {
+            if (!exists) {
+                if (target.required) {
+                    throw new error_1.AppError('DEPLOY_NO_BUILD_OUTPUT', `Required directory missing: ${constants_1.DIST_DIR}/${target.dir}`);
+                }
+                (0, logger_1.debug)(`upload: dir not present, skipping ${target.dir}`);
+                continue;
+            }
+            if (uploadTosTarget(tosutilPath, target, localPath, opts.data)) {
+                outcome.uploaded++;
             }
-            (0, logger_1.debug)(`upload: dir not present, skipping ${target.dir}`);
             continue;
         }
-        const credRaw = target.required
-            ? (0, protocol_1.requireDataKey)(opts.data, target.dataKey)
-            : (0, protocol_1.optionalDataKey)(opts.data, target.dataKey);
-        if (credRaw === undefined) {
-            (0, logger_1.debug)(`upload: ${target.dir} exists but no credential configured, skipping`);
+        // PaaS Storage 分支
+        if (!exists) {
+            (0, logger_1.debug)(`upload: dir not present, skipping ${target.dir}`);
             continue;
         }
-        const cred = parseCredential(credRaw, target.dataKey);
-        (0, logger_1.log)('deploy', `Uploading ${target.dir}...`);
-        uploadDirWithCredential(tosutilPath, localPath, cred, target.dir);
-        uploaded++;
+        const cred = uploadPaasStorageTarget(tosutilPath, target, localPath, opts.data);
+        if (cred) {
+            outcome.staticUploaded = cred;
+            outcome.uploaded++;
+        }
     }
-    if (uploaded === 0) {
+    if (outcome.uploaded === 0) {
         throw new error_1.AppError('DEPLOY_UPLOAD_EMPTY', 'No artifacts uploaded — check build output.');
     }
+    if (outcome.staticUploaded) {
+        (0, logger_1.log)('deploy', 'Callbacking static upload...');
+        await (0, index_1.callbackStatic)({
+            appID: opts.appId,
+            bucketID: outcome.staticUploaded.bucketID,
+            uploadID: outcome.staticUploaded.uploadID,
+        });
+    }
 }

package/dist/services/deploy/modern/check.js

@@ -27,8 +27,8 @@ function runDeployChecks(projectDir) {
             const missing = [];
             if (!meta.appId)
                 missing.push('appId');
-            if (!meta.template)
-                missing.push('template');
+            if (!meta.stack)
+                missing.push('stack');
             if (missing.length > 0) {
                 issues.push(`.spark/meta.json missing fields: ${missing.join(', ')}`);
             }

package/dist/services/deploy/modern/pipelines/local.js

@@ -46,7 +46,7 @@ async function localBuildLocalPublishPipeline(opts) {
     const release = await (0, index_1.createLocalRelease)(ctx.appId, pre.version);
     try {
         (0, logger_1.log)('deploy', 'Uploading artifacts...');
-        (0, index_1.uploadArtifacts)({ projectDir: ctx.projectDir, data });
+        await (0, index_1.uploadArtifacts)({ projectDir: ctx.projectDir, appId: ctx.appId, data });
         const saveResult = await (0, index_1.savePluginInstances)({
             projectDir: ctx.projectDir,
             appId: ctx.appId,
@@ -61,14 +61,14 @@ async function localBuildLocalPublishPipeline(opts) {
         await (0, index_1.finalizeLocalRelease)(ctx.appId, release.releaseID, index_1.LocalReleaseStatus.Failed);
         throw err;
     }
-    if (release.onlineURL !== undefined && release.onlineURL !== '') {
-        (0, spark_meta_1.writeSparkMeta)(ctx.projectDir, { ...ctx.meta, appUrl: release.onlineURL });
+    if (release.onlineUrl !== undefined && release.onlineUrl !== '') {
+        (0, spark_meta_1.writeSparkMeta)(ctx.projectDir, { ...ctx.meta, appUrl: release.onlineUrl });
     }
     (0, logger_1.log)('deploy', 'Deployed successfully');
     return {
         appId: ctx.appId,
         version: pre.version,
-        url: release.onlineURL ?? '',
+        url: release.onlineUrl ?? '',
         releaseID: release.releaseID,
         preReleaseID: pre.preReleaseID,
     };

package/dist/services/deploy/modern/protocol.js

@@ -3,6 +3,9 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.DataKey = void 0;
 exports.requireDataKey = requireDataKey;
 exports.optionalDataKey = optionalDataKey;
+exports.parseTosUploadCredential = parseTosUploadCredential;
+exports.parsePaasStorageCredential = parsePaasStorageCredential;
+exports.parseTosUploadPrefix = parseTosUploadPrefix;
 const error_1 = require("../../../utils/error");
 /**
  * modern deploy 对外协议常量集中地（SSOT）。
@@ -15,9 +18,7 @@ exports.DataKey = {
     // ── CDN 前缀（构建期注入到 build env，用于客户端资源访问） ──
     /** dist/output_resource 对应的 CDN 域名前缀 */
     RESOURCE_CDN_PREFIX: 'resource_cdn_prefix',
-    /** dist/output_static 对应的 CDN 域名前缀 */
-    STATIC_CDN_PREFIX: 'static_cdn_prefix',
-    // ── TOS 上传凭证（与三个产物目录一一对应，value 为 JSON.stringify 的凭证对象） ──
+    // ── TOS 上传凭证（output / output_resource 两条线，value 为 JSON.stringify 的凭证对象） ──
     // 凭证对象形态（camelCase）：
     //   { accessKeyID, secretAccessKey, sessionToken, endpoint, region, bucket, prefix }
     // CLI 端 JSON.parse 后写 tosutil 临时 config，cp 到 tos://bucket/prefix。
@@ -25,8 +26,13 @@ exports.DataKey = {
     OUTPUT_TOS_UPLOAD_CREDENTIAL: 'output_tos_upload_credential',
     /** dist/output_resource 上传凭证（仅当目录存在时使用） */
     OUTPUT_RESOURCE_TOS_UPLOAD_CREDENTIAL: 'output_resource_tos_upload_credential',
+    // ── PaaS Storage 静态资源凭证（dist/output_static 专用） ──
+    // 形态：JSON.stringify 后的 PaasStorageCredential（见下方 interface）。
+    // 上传走 tosutil（从 uploadPrefix 解析出 bucket/prefix）；上传完成后再调
+    // callbackStatic(appID, bucketID, uploadID) 把本次上传核销给后端；
+    // downloadURLPrefix 替代原 static_cdn_prefix 注入 build env。
     /** dist/output_static 上传凭证（仅当目录存在时使用） */
-    OUTPUT_STATIC_TOS_UPLOAD_CREDENTIAL: 'output_static_tos_upload_credential',
+    OUTPUT_STATIC_PAAS_STORAGE_CREDENTIAL: 'output_static_paas_storage_credential',
 };
 /** 取必传 key，缺失抛 AppError（带 key 名，便于后端 tcc 配置排查） */
 function requireDataKey(data, key) {
@@ -41,3 +47,76 @@ function optionalDataKey(data, key) {
     const v = data[key];
     return v === undefined || v === '' ? undefined : v;
 }
+const TOS_CREDENTIAL_REQUIRED_FIELDS = [
+    'accessKeyID',
+    'secretAccessKey',
+    'sessionToken',
+    'endpoint',
+    'region',
+    'bucket',
+    'prefix',
+];
+const PAAS_STORAGE_CREDENTIAL_REQUIRED_FIELDS = [
+    'accessKeyID',
+    'secretAccessKey',
+    'sessionToken',
+    'endpoint',
+    'region',
+    'uploadPrefix',
+    'downloadURLPrefix',
+    'uploadID',
+    'bucketID',
+];
+function parseCredentialObject(raw, dataKey) {
+    let parsed;
+    try {
+        parsed = JSON.parse(raw);
+    }
+    catch (err) {
+        throw new error_1.AppError('DEPLOY_CRED_INVALID_JSON', `preRelease.data["${dataKey}"] is not valid JSON: ${err.message}`);
+    }
+    if (typeof parsed !== 'object' || parsed === null) {
+        throw new error_1.AppError('DEPLOY_CRED_INVALID_JSON', `preRelease.data["${dataKey}"] is not an object`);
+    }
+    return parsed;
+}
+function assertStringFields(obj, required, dataKey) {
+    const missing = required.filter((k) => {
+        const v = obj[k];
+        return typeof v !== 'string' || v === '';
+    });
+    if (missing.length > 0) {
+        throw new error_1.AppError('DEPLOY_CRED_INCOMPLETE', `preRelease.data["${dataKey}"] credential missing fields: ${missing.join(', ')}`);
+    }
+    return obj;
+}
+/** JSON.parse + 字段完整性校验：output / output_resource 凭证 */
+function parseTosUploadCredential(raw, dataKey) {
+    const obj = parseCredentialObject(raw, dataKey);
+    return assertStringFields(obj, TOS_CREDENTIAL_REQUIRED_FIELDS, dataKey);
+}
+/** JSON.parse + 字段完整性校验：output_static PaaS Storage 凭证 */
+function parsePaasStorageCredential(raw, dataKey) {
+    const obj = parseCredentialObject(raw, dataKey);
+    return assertStringFields(obj, PAAS_STORAGE_CREDENTIAL_REQUIRED_FIELDS, dataKey);
+}
+/**
+ * 解析 `tos://<storage-bucket>/<segments...>/` 形态的 uploadPrefix。
+ * 返回的 bucket 是 tosutil cp 视角的 TOS 物理 bucket（uploadPrefix 第一段），
+ * prefix 是其余路径（不含开头斜杠，保留可能存在的尾部斜杠以贴合 tosutil 习惯）。
+ *
+ * 注意：这里返回的 bucket 与 PaasStorageCredential.bucketID 不是同一个概念
+ * （bucketID 是 PaaS Storage 逻辑 bucket，给 callbackStatic 用）。
+ */
+function parseTosUploadPrefix(uploadPrefix, dataKey) {
+    const match = /^tos:\/\/([^/]+)\/(.*)$/.exec(uploadPrefix);
+    if (!match) {
+        throw new error_1.AppError('DEPLOY_CRED_INCOMPLETE', `preRelease.data["${dataKey}"].uploadPrefix must look like "tos://<bucket>/<prefix>/", got: ${uploadPrefix}`);
+    }
+    const bucket = match[1];
+    const prefix = match[2];
+    if (bucket === '' || prefix === '') {
+        throw new error_1.AppError('DEPLOY_CRED_INCOMPLETE', `preRelease.data["${dataKey}"].uploadPrefix missing bucket or prefix segment: ${uploadPrefix}`);
+    }
+    return { bucket, prefix };
+}

package/dist/services/deploy/modern/template-key-map.js

@@ -1,29 +1,22 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.resolveTemplateKey = resolveTemplateKey;
-const error_1 = require("../../../utils/error");
 /**
  * 本地 stack 短名 → 后端发布模板 key 的映射。
  *
- * .spark/meta.json.template 存的是脚手架模板短名（vite-react / vue-react / html ...），
+ * .spark/meta.json.stack 存的是脚手架模板短名（vite-react / html ...），
  * 而服务端 preRelease 接受的 templateKey 是"部署类别"维度，由后端 tcc 注册。
- * 同一类别的多个脚手架共享一个部署 key（典型：所有纯前端 stack → client_local_deploy）。
- *
- * 加新 stack：在表里加一行；新增类别同步跟后端 tcc 配置对齐。
+ * 当前所有支持的 stack 都属于纯前端类别，默认映射到 client_local_deploy；
+ * 未来出现需要走别的 templateKey 的 stack，再在表里加一行覆盖默认。
  */
+const DEFAULT_TEMPLATE_KEY = 'client_local_deploy';
 const TEMPLATE_KEY_MAP = {
-    'vite-react': 'client_local_deploy',
-    'vue-react': 'client_local_deploy',
+    'vite-react': DEFAULT_TEMPLATE_KEY,
+    html: DEFAULT_TEMPLATE_KEY,
 };
 /**
- * 把本地 stack 短名映射到后端 templateKey。未配置的 stack 抛 AppError，
- * 避免拿原始短名直接打过去导致后端报"empty"或"出错了"等含糊错误。
+ * 把本地 stack 短名映射到后端 templateKey；未配置的 stack 走默认 client_local_deploy。
  */
 function resolveTemplateKey(template) {
-    const key = TEMPLATE_KEY_MAP[template];
-    if (key === undefined) {
-        throw new error_1.AppError('DEPLOY_TEMPLATE_KEY_UNMAPPED', `Template "${template}" has no mapping to backend templateKey. ` +
-            `Known: ${Object.keys(TEMPLATE_KEY_MAP).join(', ')}`);
-    }
-    return key;
+    return TEMPLATE_KEY_MAP[template] ?? DEFAULT_TEMPLATE_KEY;
 }

package/dist/services/skills/index.js

@@ -0,0 +1,5 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.readSkillsStatus = void 0;
+var status_1 = require("./status");
+Object.defineProperty(exports, "readSkillsStatus", { enumerable: true, get: function () { return status_1.readSkillsStatus; } });

package/dist/services/skills/status.js

@@ -0,0 +1,37 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.readSkillsStatus = readSkillsStatus;
+const node_fs_1 = __importDefault(require("node:fs"));
+const node_path_1 = __importDefault(require("node:path"));
+/**
+ * 扫描 <targetDir>/.agent/skills/steering/<stack>/，给出"当前装了什么"的快照。
+ * 不联网、不解析任何 SKILL.md 内容；只列目录名 + tech.md 是否在。
+ *
+ * stack 缺省（meta.json 缺 stack）时直接返回 present=false，
+ * 让 handler 把"先 init"的引导留给用户。
+ */
+function readSkillsStatus(opts) {
+    if (opts.stack === undefined || opts.stack === '') {
+        return { present: false, skills: [], techSynced: false };
+    }
+    const root = node_path_1.default.join(opts.targetDir, '.agent', 'skills', 'steering', opts.stack);
+    if (!node_fs_1.default.existsSync(root)) {
+        return { present: false, skills: [], techSynced: false };
+    }
+    const skillsDir = node_path_1.default.join(root, 'skills');
+    const skills = node_fs_1.default.existsSync(skillsDir)
+        ? node_fs_1.default
+            .readdirSync(skillsDir, { withFileTypes: true })
+            .filter((e) => e.isDirectory())
+            .map((e) => e.name)
+            .sort()
+        : [];
+    return {
+        present: true,
+        skills,
+        techSynced: node_fs_1.default.existsSync(node_path_1.default.join(root, 'tech.md')),
+    };
+}

package/dist/{services/app/init/steering.js → utils/coding-steering.js}

@@ -3,14 +3,22 @@ var __importDefault = (this && this.__importDefault) || function (mod) {
     return (mod && mod.__esModule) ? mod : { "default": mod };
 };
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.syncSteering = syncSteering;
+exports.syncCodingSteering = syncCodingSteering;
 const node_fs_1 = __importDefault(require("node:fs"));
 const node_path_1 = __importDefault(require("node:path"));
-const npm_pack_1 = require("../../../utils/npm-pack");
-const logger_1 = require("../../../utils/logger");
+const npm_pack_1 = require("../utils/npm-pack");
+const logger_1 = require("../utils/logger");
 const STEERING_PACKAGE = '@lark-apaas/coding-steering';
-function syncSteering(opts) {
-    (0, logger_1.log)('init', `Fetching ${STEERING_PACKAGE}@${opts.version ?? 'latest'}...`);
+/**
+ * 把 coding-steering 包内 _common/skills + <stack>/skills 同步到 <targetDir>/.agent/steering/skills/，
+ * 同名 stack 子目录覆盖 _common。tech.md 存在时也同步到 .agent/steering/tech.md。
+ *
+ * 纯本地 atom（pull npm package + 拷贝文件），不属于任何 cli 域；放在 utils 让
+ * app init handler 与独立 skills sync handler 都能复用。
+ */
+function syncCodingSteering(opts) {
+    const logPrefix = opts.logPrefix ?? 'skills';
+    (0, logger_1.log)(logPrefix, `Fetching ${STEERING_PACKAGE}@${opts.version ?? 'latest'}...`);
     const fetched = (0, npm_pack_1.fetchNpmPackage)({
         packageName: STEERING_PACKAGE,
         version: opts.version,
@@ -19,7 +27,10 @@ function syncSteering(opts) {
         const steeringRoot = node_path_1.default.join(fetched.extractDir, 'steering');
         const stackDir = node_path_1.default.join(steeringRoot, opts.stack);
         const commonSkillsDir = node_path_1.default.join(steeringRoot, '_common', 'skills');
-        const dstRoot = node_path_1.default.join(opts.targetDir, '.agent', 'steering');
+        // steering 落到 .agent/skills/steering/<stack>/。.agent/skills/ 是 agent skills 的
+        // 公共容器，steering 是其中一个 producer，<stack> 再做命名空间隔离。内部仍保留
+        // 包内 steering/<stack>/skills/ 的结构，便于按"包内子目录 → 本地子目录"一一对应排查。
+        const dstRoot = node_path_1.default.join(opts.targetDir, '.agent', 'skills', 'steering', opts.stack);
         const dstSkillsDir = node_path_1.default.join(dstRoot, 'skills');
         node_fs_1.default.mkdirSync(dstSkillsDir, { recursive: true });
         let techSynced = false;
@@ -29,7 +40,7 @@ function syncSteering(opts) {
             techSynced = true;
         }
         const synced = [];
-        // 先拷 _common/skills/，再拷 <stack>/skills/。stack 同名覆盖 common（设计 §8.4）
+        // 先拷 _common/skills/，再拷 <stack>/skills/。stack 同名覆盖 common
         if (node_fs_1.default.existsSync(commonSkillsDir)) {
             for (const name of node_fs_1.default.readdirSync(commonSkillsDir)) {
                 const src = node_path_1.default.join(commonSkillsDir, name);
@@ -52,7 +63,7 @@ function syncSteering(opts) {
                 synced.push(`${opts.stack}/skills/${name}`);
             }
         }
-        (0, logger_1.log)('init', `Steering synced: ${String(synced.length)} skill(s), tech.md ${techSynced ? 'yes' : 'no'}`);
+        (0, logger_1.log)(logPrefix, `Synced ${String(synced.length)} skill(s), tech.md ${techSynced ? 'yes' : 'no'}`);
         return { version: fetched.version, syncedSkills: synced, techSynced };
     }
     finally {

package/dist/utils/http.js

@@ -65,7 +65,12 @@ function createClient(opts) {
  * 缺省走这个。MIAODA_CANARY_HEADER 可显式覆盖；设为空字符串则去掉头。
  */
 const DEFAULT_CANARY_HEADER = 'boe_miaoda_doubao';
-/** 注入 x-tt-env 小流量头：env 显式设值 > DEFAULT_CANARY_HEADER */
+/**
+ * 注入 x-tt-env 小流量头：env 显式设值 > DEFAULT_CANARY_HEADER。
+ *
+ * 当泳道形如 `ppe_xxx`（PPE 预发环境）时，额外加 `x-use-ppe: 1`；
+ * BOE 泳道（`boe_xxx`）只带 x-tt-env，不加该头。
+ */
 function applyCanaryHeader(reqConfig) {
     // env 显式设为空字符串视为"去掉灰度头"；未设置时用 DEFAULT_CANARY_HEADER
     const canary = process.env.MIAODA_CANARY_HEADER ?? DEFAULT_CANARY_HEADER;
@@ -73,6 +78,9 @@ function applyCanaryHeader(reqConfig) {
         return reqConfig;
     const headers = new Headers(reqConfig.headers);
     headers.set('x-tt-env', canary);
+    if (canary.startsWith('ppe_')) {
+        headers.set('x-use-ppe', '1');
+    }
     reqConfig.headers = headers;
     return reqConfig;
 }
@@ -109,14 +117,14 @@ async function handleInnerEnvelope(response, url, opts) {
         throw new error_1.HttpError(response.status, url, `${opts.errPrefix}: ${String(response.status)} ${response.statusText}`);
     }
     const result = await response.json();
+    // verbose: 把完整响应体打到 stderr，便于排查（业务错误 / 字段缺失等）
+    if ((0, config_1.getConfig)().verbose) {
+        (0, logger_1.debug)(`  resp: ${truncateForLog(safeStringify(result), 2000)}`);
+    }
     if (typeof result === 'object' && result !== null && 'status_code' in result) {
         const env = result;
         if (env.status_code !== undefined && env.status_code !== '0') {
             const msg = env.message ?? env.error_msg ?? 'unknown error';
-            // verbose: 把完整业务错误信封打到 stderr，便于追溯
-            if ((0, config_1.getConfig)().verbose) {
-                (0, logger_1.debug)(`  envelope: ${truncateForLog(safeStringify(env), 1000)}`);
-            }
             const mapped = opts.mapErr?.(env.status_code, msg);
             if (mapped)
                 throw mapped;
@@ -169,12 +177,8 @@ function logResponseFailure(method, url, err, startMs) {
     const msgPart = e.message ? ` (${e.message})` : '';
     (0, logger_1.debug)(`✗ ${method} ${url} ${statusPart} ${String(elapsedMs)}ms${logidPart}${msgPart}`);
 }
-/** BAM gateway 在不同 PSM/版本上 logid 落在不同 header；按命中顺序取第一个非空。 */
 function pickLogid(headers) {
-    return (headers.get('x-tt-logid') ??
-        headers.get('x-logid') ??
-        headers.get('logid') ??
-        headers.get('x-tt-trace-tag'));
+    return headers.get('x-tt-logid');
 }
 function safeStringify(v) {
     try {

package/dist/utils/spark-meta.js

@@ -21,7 +21,7 @@ function readSparkMeta(appDir) {
     }
 }
 /**
- * merge 写入：保留已有 createdAt，刷新 updatedAt；undefined 字段不覆盖已有值。
+ * merge 写入：已有字段保留，undefined 不覆盖；不再维护时间戳。
  */
 function writeSparkMeta(appDir, meta) {
     const sparkDir = node_path_1.default.join(appDir, SPARK_DIR);
@@ -37,12 +37,6 @@ function writeSparkMeta(appDir, meta) {
         }
     }
     const defined = Object.fromEntries(Object.entries(meta).filter(([, v]) => v !== undefined));
-    const now = new Date().toISOString();
-    const merged = {
-        ...existing,
-        ...defined,
-        createdAt: existing.createdAt ?? now,
-        updatedAt: now,
-    };
+    const merged = { ...existing, ...defined };
     node_fs_1.default.writeFileSync(metaPath, JSON.stringify(merged, null, 2) + '\n', 'utf-8');
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lark-apaas/miaoda-cli",
-  "version": "0.1.4-alpha.abaa17f",
+  "version": "0.1.4-alpha.b2fdfff",
   "description": "Miaoda 平台命令行工具，面向 Agent 调用",
   "type": "commonjs",
   "bin": {