@lark-apaas/miaoda-cli 0.1.5 → 0.1.6-alpha.388541c

package/dist/cli/handlers/app/init.js

@@ -0,0 +1,132 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.handleAppInit = handleAppInit;
+const node_fs_1 = __importDefault(require("node:fs"));
+const node_path_1 = __importDefault(require("node:path"));
+const index_1 = require("../../../services/app/init/index");
+const coding_steering_1 = require("../../../utils/coding-steering");
+const logger_1 = require("../../../utils/logger");
+const githooks_1 = require("../../../utils/githooks");
+const sync_1 = require("../../../cli/handlers/app/sync");
+const error_1 = require("../../../utils/error");
+const output_1 = require("../../../utils/output");
+/**
+ * miaoda app init
+ *
+ * 一站式本地脚手架：render template → upgrade/templates sync → skills sync → install deps，把
+ * {stack, version, archType, app_id?} 写入 .spark/meta.json。--app-id（或 MIAODA_APP_ID）提供时
+ * 持久化 app_id；运行端命令仍优先读 env，未设置时回退到 meta.json。
+ *
+ * 幂等：.spark/meta.json 存在即表示已完整成功一次，直接退出，不重跑任何子步骤。
+ * 半渲染状态（package.json 在但 meta.json 不在）会重新跑完整流程。
+ */
+async function handleAppInit(opts) {
+    await Promise.resolve();
+    const targetDir = opts.targetDir ?? process.cwd();
+    const metaPath = node_path_1.default.join(targetDir, '.spark', 'meta.json');
+    if (node_fs_1.default.existsSync(metaPath)) {
+        if (!(0, output_1.isJsonMode)()) {
+            process.stdout.write(`Already initialized: ${metaPath}\n`);
+        }
+        (0, output_1.emit)({
+            data: {
+                initialized: false,
+                reason: 'already_initialized',
+                targetDir,
+            },
+        });
+        return;
+    }
+    const stack = opts.template;
+    if (!stack) {
+        throw new error_1.AppError('ARGS_INVALID', '缺少 --template <stack>', {
+            next_actions: [`可用 stack：${index_1.SUPPORTED_STACKS.join(', ')}`],
+        });
+    }
+    if (!index_1.SUPPORTED_STACKS.includes(stack)) {
+        throw new error_1.AppError('ARGS_INVALID', `不支持的 template: ${stack}`, {
+            next_actions: [`可用 stack：${index_1.SUPPORTED_STACKS.join(', ')}`],
+        });
+    }
+    const version = opts.conf?.version;
+    const projectName = node_path_1.default.basename(targetDir);
+    const tplResult = (0, index_1.renderTemplate)({ stack, version, targetDir, projectName });
+    // sync 紧跟 template 渲染之后，赶在 install 之前：
+    // 这样 directory / merge-json / add-script 等 rule 都已落地，install 出来的 lockfile
+    // 与最终态对齐；patches 还能覆盖 template 提供的同名文件。
+    const syncRunResult = (0, sync_1.runStackSync)(stack, targetDir, 'init');
+    const syncSummary = (0, sync_1.summarizeSyncResults)(syncRunResult);
+    // template 渲染下来的 @lark-apaas/* 版本可能落后 PINNED 表，赶在 install 之前钉到表版本，
+    // 这样一次 npm install 就直接装最终版本，不需要 install 完再补一遍。
+    const upgradedPackages = (0, sync_1.upgradePlatformDeps)(targetDir, 'init');
+    // skills 同步软失败：拉不到 coding-steering 包不该阻断 writeSparkMeta /
+    // activateGitHooks（之前会让 .spark/meta.json 没写，下次 init 半渲染状态又得重跑全套）。
+    let steeringResult;
+    let steeringError;
+    try {
+        steeringResult = (0, coding_steering_1.syncCodingSteering)({
+            stack,
+            targetDir,
+            version: opts.conf?.steeringVersion,
+            logPrefix: 'init',
+        });
+    }
+    catch (err) {
+        steeringError = err instanceof Error ? err.message : String(err);
+        (0, logger_1.log)('init', `⚠ skills sync failed (continuing init): ${steeringError}`);
+        steeringResult = { version: 'unknown', syncedSkills: [], techSynced: false };
+    }
+    const installResult = (0, index_1.installDependencies)({
+        targetDir,
+        skip: opts.skipInstall,
+        quietStdout: (0, output_1.isJsonMode)(),
+    });
+    // template 自带 .githooks/pre-commit；如果用户项目已 git init,顺便设上 core.hooksPath。
+    const hookActivation = (0, githooks_1.activateGitHooks)(targetDir);
+    (0, index_1.writeSparkMeta)(targetDir, {
+        stack,
+        version: tplResult.version,
+        archType: tplResult.archType,
+        app_id: opts.appId,
+        steeringVersion: steeringResult.version,
+    });
+    const syncedSummary = syncRunResult.stackFound
+        ? syncRunResult.rulesApplied.length > 0
+            ? `${syncRunResult.rulesApplied.length.toString()} rule(s)`
+            : 'legacy'
+        : 'skipped';
+    if (!(0, output_1.isJsonMode)()) {
+        process.stdout.write(`✓ Initialized ${stack} (template ${tplResult.version}, steering ${steeringResult.version}, sync ${syncedSummary}, install ${installResult.source}) in ${targetDir}\n`);
+    }
+    (0, output_1.emit)({
+        data: {
+            initialized: true,
+            template: stack,
+            templatePackage: tplResult.packageName,
+            templateVersion: tplResult.version,
+            steeringVersion: steeringResult.version,
+            archType: tplResult.archType,
+            appId: opts.appId,
+            syncedSkills: steeringResult.syncedSkills,
+            techSynced: steeringResult.techSynced,
+            steeringError,
+            // sync 流程的产出：rule-driven 时 appliedRules + 一系列汇总字段；fallback 到旧 platform-sync
+            // 时只填 platformSyncedFiles / platformMergedJsonFiles；stack 不识别时全空且 platformStackFound=false。
+            platformStackFound: syncRunResult.stackFound,
+            appliedRules: syncSummary.appliedRules,
+            platformSyncedFiles: syncSummary.syncedFiles,
+            platformMergedJsonFiles: syncSummary.mergedJsonFiles,
+            patchedScripts: syncSummary.patchedScripts,
+            upgradedPackages,
+            gitHooks: hookActivation.action,
+            installed: installResult.installed,
+            installSource: installResult.source,
+            installHash: installResult.hash,
+            cacheZip: installResult.cacheZip,
+            installError: installResult.error,
+        },
+    });
+}

package/dist/cli/handlers/app/sync.js

@@ -0,0 +1,219 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.handleAppUpgrade = void 0;
+exports.handleAppSync = handleAppSync;
+exports.runStackSync = runStackSync;
+exports.summarizeSyncResults = summarizeSyncResults;
+exports.upgradePlatformDeps = upgradePlatformDeps;
+const node_child_process_1 = require("node:child_process");
+const node_fs_1 = __importDefault(require("node:fs"));
+const node_path_1 = __importDefault(require("node:path"));
+const sync_configs_1 = require("../../../config/sync-configs");
+const sync_rule_1 = require("../../../utils/sync-rule");
+const platform_sync_1 = require("../../../utils/platform-sync");
+const githooks_1 = require("../../../utils/githooks");
+const spark_meta_1 = require("../../../utils/spark-meta");
+const error_1 = require("../../../utils/error");
+const output_1 = require("../../../utils/output");
+const logger_1 = require("../../../utils/logger");
+/**
+ * 平台包钉死版本表 —— `miaoda app sync` 不查 npm dist-tags，直接按这张表把
+ * user app 已有的 @lark-apaas/* 依赖钉到对应版本。
+ *
+ * 为什么不跟 alpha dist-tag：alpha 通道被多个团队共享，外部 prerelease 时常打过去，
+ * 自动跟 alpha 会把回归版本（如 fullstack-vite-preset@1.0.24-alpha.5 退化没读 .env.local）
+ * 拉进 user app。维护这张白名单可控性更高，每次升基线时人工 review 一次再改这里。
+ *
+ * 表里没有的 @lark-apaas/* 包：sync 不动（既不升也不报错）；user app 没装的包也不引入。
+ * 改这张表请同步把 user app 端到端 smoke 跑一次（init → sync → npm run dev）。
+ */
+const PINNED_PLATFORM_VERSIONS = {
+    '@lark-apaas/auth-sdk': '0.1.5-alpha.4',
+    '@lark-apaas/client-toolkit': '1.2.47-alpha.0',
+    '@lark-apaas/client-toolkit-lite': '1.1.8-alpha.0',
+    '@lark-apaas/dataloom': '0.1.2-alpha.6',
+    '@lark-apaas/db-schema-sync': '0.1.6-alpha.2',
+    '@lark-apaas/express-core': '1.0.4-alpha.7',
+    '@lark-apaas/fullstack-cli': '1.1.49-alpha.0',
+    '@lark-apaas/fullstack-nestjs-core': '1.1.52-alpha.1',
+    '@lark-apaas/fullstack-rspack-preset': '1.0.56-alpha.8',
+    '@lark-apaas/fullstack-vite-preset': '1.0.24-alpha.9',
+    '@lark-apaas/http-client': '0.1.7-alpha.8',
+};
+/**
+ * miaoda app sync [--dir <path>]
+ *
+ * 一站式同步：把当前 stack 的 sync 规则全套 apply 到 user app，对齐沙箱里
+ * `npm run upgrade → npx fullstack-cli sync` 的行为，并补 miaoda-cli 本地开发独有规则。
+ *
+ * 执行流：
+ *   1. SyncRule[] 全量 apply —— 来自 src/config/sync-configs/<stack>.ts。每个 stack
+ *      自带模板资源在 upgrade/templates/<stack>/templates/。表里没有该 stack 时回退到
+ *      旧 platform-sync 兜底（兼容尚未迁移的 stack）。
+ *   2. PINNED 平台 deps 钉版本 —— user app 已装的 @lark-apaas/* 升到 PINNED 表。
+ *   3. activateGitHooks —— 设置 core.hooksPath（template 自带 .githooks/pre-commit）。
+ *   4. npm install --no-audit --no-fund --ignore-scripts —— 物化新版本，绕开
+ *      action-plugin postinstall 在缺平台 env 时的 ENOENT。
+ *
+ * 需要 .spark/meta.json 已含 stack（走过 `miaoda app init`）。
+ * 不动 .agent/skills/（那是 `miaoda skills sync` 的事）。
+ */
+async function handleAppSync(opts) {
+    await Promise.resolve();
+    const targetDir = node_path_1.default.resolve(opts.dir ?? process.cwd());
+    const meta = (0, spark_meta_1.readSparkMeta)(targetDir);
+    if (meta.stack === undefined || meta.stack === '') {
+        throw new error_1.AppError('SYNC_META_INCOMPLETE', '.spark/meta.json missing stack — run `miaoda app init` first');
+    }
+    // 1. apply SyncRule[]，stack 没注册时回退到旧 platform-sync 兜底；都不识别就报错
+    const syncResults = runStackSync(meta.stack, targetDir, 'sync');
+    if (!syncResults.stackFound) {
+        throw new error_1.AppError('SYNC_STACK_NOT_SUPPORTED', `stack '${meta.stack}' has no SyncConfig and no upgrade/templates/${meta.stack}/ — 该 stack 暂未纳入 sync 范围`, {
+            next_actions: [
+                `src/config/sync-configs/${meta.stack}.ts 加 SyncConfig 并在 STACK_REGISTRY 注册`,
+            ],
+        });
+    }
+    // 2. @lark-apaas/* dep pin（按 PINNED_PLATFORM_VERSIONS 表，user app 已装才钉）
+    const upgradedPackages = upgradePlatformDeps(targetDir, 'sync');
+    // 3. activate git hooks（template 自带 .githooks/pre-commit，core.hooksPath 一次性设置）
+    const hookActivation = (0, githooks_1.activateGitHooks)(targetDir);
+    // 4. npm install —— 跟 init 一样软失败，install 挂了不该阻断 emit / sync 总结输出
+    (0, logger_1.log)('sync', 'Running npm install --ignore-scripts...');
+    let installError;
+    try {
+        (0, node_child_process_1.execFileSync)('npm', ['install', '--no-audit', '--no-fund', '--ignore-scripts'], {
+            cwd: targetDir,
+            stdio: (0, output_1.isJsonMode)() ? ['ignore', 'ignore', 'inherit'] : 'inherit',
+        });
+    }
+    catch (err) {
+        installError = err instanceof Error ? err.message : String(err);
+        (0, logger_1.log)('sync', `⚠ npm install failed (continuing): ${installError}`);
+    }
+    (0, output_1.emit)({
+        data: {
+            stack: meta.stack,
+            ...summarizeSyncResults(syncResults),
+            upgradedPackages,
+            gitHooks: hookActivation.action,
+            installError,
+        },
+    });
+}
+/** 老命令 `miaoda app upgrade` 的 handler 名，保留为 sync handler 的 alias。 */
+exports.handleAppUpgrade = handleAppSync;
+/**
+ * 给 stack 应用 sync rules（sync handler + init handler 共用）。
+ * stack 在 STACK_REGISTRY 注册时走新 SyncRule 机制，否则回落到旧 platform-sync。
+ *
+ * stack 完全不识别（既不在 STACK_REGISTRY 也无 upgrade/templates/<stack>/ 目录）时返回
+ * `stackFound: false` 而非抛错 —— 让调用方按场景决定：sync handler 抛 AppError，init handler
+ * 允许（fresh init 时 stack 还在加注册的过渡期）。
+ */
+function runStackSync(stack, targetDir, logPrefix) {
+    const config = (0, sync_configs_1.getSyncConfig)(stack);
+    if (config !== null) {
+        const sourceRoot = (0, sync_configs_1.getStackTemplatesRoot)(stack);
+        if (!node_fs_1.default.existsSync(sourceRoot)) {
+            throw new error_1.AppError('SYNC_TEMPLATES_MISSING', `upgrade/templates/${stack}/templates/ not found at ${sourceRoot} — cli 安装异常?`);
+        }
+        (0, logger_1.log)(logPrefix, `Applying ${config.sync.length.toString()} sync rule(s) for stack '${stack}'`);
+        const rulesApplied = (0, sync_rule_1.applySyncRules)(config.sync, { sourceRoot, targetDir, logPrefix });
+        return { stackFound: true, rulesApplied };
+    }
+    // fallback：表外 stack 仍用旧 platform-sync 机制（files/ overlay + patches/ deep merge）
+    (0, logger_1.log)(logPrefix, `Stack '${stack}' not in new sync registry, falling back to legacy platform-sync`);
+    const legacy = (0, platform_sync_1.syncPlatformControlled)({ stack, targetDir, logPrefix });
+    return {
+        stackFound: legacy.stackFound,
+        rulesApplied: [],
+        legacy: { syncedFiles: legacy.syncedFiles, mergedJsonFiles: legacy.mergedJsonFiles },
+    };
+}
+/** 把 SyncRuleResult[] / legacy 输出汇总成 emit data 里的几组字段，便于诊断。 */
+function summarizeSyncResults(result) {
+    if (result.legacy !== undefined) {
+        return {
+            appliedRules: [],
+            syncedFiles: result.legacy.syncedFiles,
+            mergedJsonFiles: result.legacy.mergedJsonFiles,
+            patchedScripts: [],
+        };
+    }
+    const appliedRules = result.rulesApplied.map((r) => ({
+        type: r.rule.type,
+        action: r.action,
+        path: r.path,
+        detail: r.detail,
+    }));
+    const syncedFiles = [];
+    for (const r of result.rulesApplied) {
+        if ((r.action === 'synced' || r.action === 'created') && r.path !== undefined) {
+            syncedFiles.push(r.path);
+        }
+    }
+    const mergedJsonFiles = [];
+    for (const r of result.rulesApplied) {
+        if (r.rule.type !== 'merge-json')
+            continue;
+        if (r.action !== 'merged' && r.action !== 'created')
+            continue;
+        if (r.path === undefined)
+            continue;
+        mergedJsonFiles.push({
+            path: r.path,
+            keys: r.detail !== undefined ? r.detail.split(',').filter(Boolean) : [],
+        });
+    }
+    const patchedScripts = result.rulesApplied
+        .filter((r) => (r.rule.type === 'patch-script' || r.rule.type === 'add-script') &&
+        (r.action === 'patched' || r.action === 'created'))
+        .map((r) => r.rule.name);
+    return { appliedRules, syncedFiles, mergedJsonFiles, patchedScripts };
+}
+function readPackageJson(pkgJsonPath) {
+    if (!node_fs_1.default.existsSync(pkgJsonPath))
+        return null;
+    return JSON.parse(node_fs_1.default.readFileSync(pkgJsonPath, 'utf-8'));
+}
+/**
+ * 把 user app package.json 里已装的 @lark-apaas/* 包钉到 PINNED_PLATFORM_VERSIONS 表版本。
+ * 由 `miaoda app sync` 和 `miaoda app init`（template 渲染后、install 之前）共用。
+ *
+ * - user app 已装的 PINNED 包 → 钉到表版本
+ * - user app 未装的 PINNED 包 → 不引入（sync 的职责是对齐，不是塞依赖）
+ * - 装着但不在 PINNED 表的 @lark-apaas/* 包 → 完全不动
+ *
+ * @param logPrefix 用于 `[<prefix>]   deps.xxx: a → b` 日志前缀；sync 流程传 'sync'，init 流程传 'init'。
+ */
+function upgradePlatformDeps(targetDir, logPrefix = 'sync') {
+    const pkgJsonPath = node_path_1.default.join(targetDir, 'package.json');
+    const pkg = readPackageJson(pkgJsonPath);
+    if (!pkg)
+        return [];
+    const updated = [];
+    for (const section of ['dependencies', 'devDependencies']) {
+        const deps = pkg[section];
+        if (!deps || typeof deps !== 'object')
+            continue;
+        for (const name of Object.keys(deps)) {
+            if (!Object.prototype.hasOwnProperty.call(PINNED_PLATFORM_VERSIONS, name))
+                continue;
+            const target = PINNED_PLATFORM_VERSIONS[name];
+            const from = deps[name];
+            if (from === target)
+                continue;
+            deps[name] = target;
+            updated.push({ name, from, to: target, section });
+            (0, logger_1.log)(logPrefix, `  ${section}.${name}: ${from} → ${target}`);
+        }
+    }
+    if (updated.length > 0) {
+        node_fs_1.default.writeFileSync(pkgJsonPath, JSON.stringify(pkg, null, 2) + '\n', 'utf-8');
+    }
+    return updated;
+}

package/dist/cli/handlers/deploy/modern.js

@@ -0,0 +1,33 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.handleDeployModern = handleDeployModern;
+const node_path_1 = __importDefault(require("node:path"));
+const output_1 = require("../../../utils/output");
+const index_1 = require("../../../services/deploy/modern/index");
+/**
+ * miaoda deploy（modern scene 专用，CLI 表面对齐 openclaw-cli）
+ *
+ * 进程信息走 stderr（log_id / step），最终结果通过 emit 输出 envelope 到 stdout。
+ */
+async function handleDeployModern(opts) {
+    const projectDir = node_path_1.default.resolve(opts.dir);
+    const result = await (0, index_1.runModernDeploy)({
+        projectDir,
+        appId: opts.appId,
+        skipBuild: opts.skipBuild ?? false,
+    });
+    (0, output_1.emit)({
+        data: {
+            appId: result.appId,
+            version: result.version,
+            url: result.url,
+            releaseID: result.releaseID,
+            preReleaseID: result.preReleaseID,
+        },
+        next_cursor: null,
+        has_more: false,
+    });
+}

package/dist/cli/handlers/skills/index.js

@@ -0,0 +1,7 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.handleSkillsStatus = exports.handleSkillsSync = void 0;
+var sync_1 = require("./sync");
+Object.defineProperty(exports, "handleSkillsSync", { enumerable: true, get: function () { return sync_1.handleSkillsSync; } });
+var status_1 = require("./status");
+Object.defineProperty(exports, "handleSkillsStatus", { enumerable: true, get: function () { return status_1.handleSkillsStatus; } });

package/dist/cli/handlers/skills/status.js

@@ -0,0 +1,31 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.handleSkillsStatus = handleSkillsStatus;
+const node_path_1 = __importDefault(require("node:path"));
+const index_1 = require("../../../services/skills/index");
+const spark_meta_1 = require("../../../utils/spark-meta");
+const output_1 = require("../../../utils/output");
+/**
+ * miaoda skills status [--dir <path>]
+ *
+ * 从 .spark/meta.json 读 stack，扫描 <dir>/.agent/steering/<stack>/，
+ * 给出当前装了哪些 skills、tech.md 是否在。纯本地操作，不联网。
+ * meta 缺 stack 时返回 present=false（不抛错，方便和 init 的引导分开）。
+ */
+async function handleSkillsStatus(opts) {
+    await Promise.resolve();
+    const targetDir = node_path_1.default.resolve(opts.dir ?? process.cwd());
+    const meta = (0, spark_meta_1.readSparkMeta)(targetDir);
+    const status = (0, index_1.readSkillsStatus)({ targetDir, stack: meta.stack });
+    (0, output_1.emit)({
+        data: {
+            stack: meta.stack ?? null,
+            present: status.present,
+            skills: status.skills,
+            techSynced: status.techSynced,
+        },
+    });
+}

package/dist/cli/handlers/skills/sync.js

@@ -0,0 +1,49 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.handleSkillsSync = handleSkillsSync;
+const node_path_1 = __importDefault(require("node:path"));
+const coding_steering_1 = require("../../../utils/coding-steering");
+const spark_meta_1 = require("../../../utils/spark-meta");
+const error_1 = require("../../../utils/error");
+const output_1 = require("../../../utils/output");
+/**
+ * miaoda skills sync [version] [--dir <path>]
+ *
+ * 从 .spark/meta.json 读 stack（+ 默认 steeringVersion），把 coding-steering 包内对应 stack
+ * 的 skills + tech.md 同步到 <dir>/.agent/steering/。需要先跑过 `miaoda app init`。
+ */
+async function handleSkillsSync(opts) {
+    await Promise.resolve();
+    const targetDir = node_path_1.default.resolve(opts.dir ?? process.cwd());
+    const meta = (0, spark_meta_1.readSparkMeta)(targetDir);
+    if (meta.stack === undefined || meta.stack === '') {
+        throw new error_1.AppError('SKILLS_META_INCOMPLETE', '.spark/meta.json missing stack — run `miaoda app init` first');
+    }
+    const version = opts.version ?? meta.steeringVersion;
+    const versionSource = opts.version
+        ? 'cli-arg'
+        : meta.steeringVersion
+            ? 'meta.json'
+            : 'default-latest';
+    const result = (0, coding_steering_1.syncCodingSteering)({
+        stack: meta.stack,
+        targetDir,
+        version,
+        outputLayout: opts.local === true ? 'flat' : 'nested',
+    });
+    (0, output_1.emit)({
+        data: {
+            stack: meta.stack,
+            version: result.version,
+            versionSource,
+            syncedSkills: result.syncedSkills,
+            techSynced: result.techSynced,
+            ...(result.claudeSkillsLink !== undefined
+                ? { claudeSkillsLink: result.claudeSkillsLink }
+                : {}),
+        },
+    });
+}

package/dist/config/fullstack-cli-pin.js

@@ -0,0 +1,17 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.FULLSTACK_CLI_PIN_SPEC = void 0;
+/**
+ * 临时钉死 `@lark-apaas/fullstack-cli` 的 npx 调用版本。
+ *
+ * 用于 user app `package.json` 里所有 `npx -y @lark-apaas/fullstack-cli ...` 调用 ——
+ * sync 规则会按本常量生成 `npx -y <FULLSTACK_CLI_PIN_SPEC> ...`，确保 user app 每次
+ * postinstall / gen-db-schema / sync 都拉到验证过能装插件的版本（避免 npx 拉 latest
+ * 时碰到外部 prerelease 回归版本）。
+ *
+ * 维护：
+ *   - 跟 src/cli/handlers/app/sync.ts 里 PINNED_PLATFORM_VERSIONS['@lark-apaas/fullstack-cli']
+ *     **保持一致**（前者用于 user app dependencies dep bump，后者用于 npm script 里 npx 调用）
+ *   - 一旦 latest fullstack-cli 稳定且 token 鉴权回归 OK，可以去掉版本钉，让 npx 走 latest
+ */
+exports.FULLSTACK_CLI_PIN_SPEC = '@lark-apaas/fullstack-cli@1.1.49-alpha.0';

package/dist/config/sync-configs/design-stack.js

@@ -0,0 +1,98 @@
+"use strict";
+/**
+ * design-stack 的 sync 规则。
+ *
+ * design-stack 是 SSR-only 全栈 stack（design scene，MIAODA_APP_TYPE=4），无 nest 后端、
+ * 无数据库、无 nestjs-cli。所以规则集是 nestjs-react-fullstack 的子集：只保留
+ * scripts/.githooks/ 派生 + 基础 npm scripts，不动 nest-cli.json / drizzle / tsconfig.node.json。
+ *
+ * dev-local.sh 跟 nestjs-react-fullstack 不同（单进程 npm run dev，MIAODA_APP_TYPE=4），
+ * 单独维护在 upgrade/templates/design-stack/templates/scripts/dev-local.sh。
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SYNC_CONFIG = void 0;
+const fullstack_cli_pin_1 = require("../../config/fullstack-cli-pin");
+exports.SYNC_CONFIG = {
+    sync: [
+        // 1. 派生 scripts/（含 design 专属 dev-local.sh + 通用 dev.sh / hooks/run-precommit.js）
+        {
+            type: 'directory',
+            from: 'scripts',
+            to: 'scripts',
+            overwrite: true,
+        },
+        // 1a. 同步 .githooks/（hook 入口，可执行 sh）
+        {
+            type: 'directory',
+            from: '.githooks',
+            to: '.githooks',
+            overwrite: true,
+        },
+        // 1b. scripts.prepare：npm install 后激活 git hooks
+        {
+            type: 'add-script',
+            name: 'prepare',
+            command: 'chmod +x .githooks/pre-commit 2>/dev/null; git config core.hooksPath .githooks 2>/dev/null || true',
+            overwrite: false,
+        },
+        // 1c. scripts.precommit
+        {
+            type: 'add-script',
+            name: 'precommit',
+            command: 'node scripts/hooks/run-precommit.js',
+            overwrite: false,
+        },
+        // 2. .gitignore 卫生：移除 package-lock.json + 加 .agent/
+        {
+            type: 'remove-line',
+            to: '.gitignore',
+            pattern: 'package-lock.json',
+        },
+        {
+            type: 'add-line',
+            to: '.gitignore',
+            line: '.agent/',
+        },
+        // 3. 老 npm scripts 迁移（裸 fullstack-cli → 钉版 npx）。两条 ifStartsWith 分别覆盖
+        //    "裸 fullstack-cli"（最老形态）和 "npx 未钉版" 形态，统一升到 FULLSTACK_CLI_PIN_SPEC。
+        {
+            type: 'patch-script',
+            name: 'postinstall',
+            to: `npx -y ${fullstack_cli_pin_1.FULLSTACK_CLI_PIN_SPEC} action-plugin init`,
+            ifStartsWith: 'fullstack-cli action-plugin init',
+        },
+        {
+            type: 'patch-script',
+            name: 'postinstall',
+            to: `npx -y ${fullstack_cli_pin_1.FULLSTACK_CLI_PIN_SPEC} action-plugin init`,
+            ifStartsWith: 'npx -y @lark-apaas/fullstack-cli action-plugin init',
+        },
+        {
+            type: 'patch-script',
+            name: 'upgrade',
+            to: `npx -y ${fullstack_cli_pin_1.FULLSTACK_CLI_PIN_SPEC} sync --disable-gen-openapi`,
+            ifStartsWith: 'fullstack-cli sync',
+        },
+        {
+            type: 'patch-script',
+            name: 'upgrade',
+            to: `npx -y ${fullstack_cli_pin_1.FULLSTACK_CLI_PIN_SPEC} sync --disable-gen-openapi`,
+            ifStartsWith: 'npx -y @lark-apaas/fullstack-cli sync',
+        },
+        {
+            type: 'patch-script',
+            name: 'dev',
+            to: './scripts/dev.sh',
+            ifStartsWith: 'npm run upgrade && ',
+        },
+        // ===== miaoda-cli 本地开发新增规则 =====
+        // M1. scripts.dev:local —— 本地用户绕过 SANDBOX_ID 分发直接跑本地链路（npm run dev:local）。
+        {
+            type: 'add-script',
+            name: 'dev:local',
+            command: './scripts/dev-local.sh',
+            overwrite: false,
+        },
+    ],
+};
+exports.default = exports.SYNC_CONFIG;

package/dist/config/sync-configs/index.js

@@ -0,0 +1,62 @@
+"use strict";
+/**
+ * 按 stack 短名拿到对应的 SyncConfig + 模板源根目录。
+ *
+ * - 类型化的 SyncConfig 放在 src/config/sync-configs/<stack>.ts（被 tsc 编进 dist 一起发）。
+ * - 模板资源文件放在 upgrade/templates/<stack>/templates/（cli 发布时整个目录原样 ship）。
+ *
+ * handler 拿到 stack 后，先 getSyncConfig 拿 rule 列表，再 getStackTemplatesRoot 拿模板根，
+ * 一起喂给 applySyncRules。
+ *
+ * 新加 stack：
+ *   1. src/config/sync-configs/<stack>.ts 里 export default SYNC_CONFIG
+ *   2. upgrade/templates/<stack>/templates/ 下放对应资源文件
+ *   3. 在 STACK_REGISTRY 里加一条
+ */
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.getSyncConfig = getSyncConfig;
+exports.getStackTemplatesRoot = getStackTemplatesRoot;
+const node_fs_1 = __importDefault(require("node:fs"));
+const node_path_1 = __importDefault(require("node:path"));
+const nestjs_react_fullstack_1 = __importDefault(require("./nestjs-react-fullstack"));
+const design_stack_1 = __importDefault(require("./design-stack"));
+/**
+ * 已纳入新 sync 机制的 stack 注册表。未在表里的 stack（如老 vite-react / html）走旧的
+ * `upgrade/templates/<stack>/{files,patches}` 机制，由 sync handler 兜底。
+ */
+const STACK_REGISTRY = {
+    'nestjs-react-fullstack': nestjs_react_fullstack_1.default,
+    'design-stack': design_stack_1.default,
+};
+/** 返回该 stack 的 SyncConfig；表里没有时返回 null。 */
+function getSyncConfig(stack) {
+    return STACK_REGISTRY[stack] ?? null;
+}
+/**
+ * 计算 stack 模板资源根目录（绝对路径）。
+ *
+ * cli 发布时 upgrade/ 目录整个 ship，编译产物在 dist/ 下若干层。从当前模块向上回溯找含
+ * upgrade/ + package.json 的目录就是 cli 根。
+ *
+ * 跟 utils/platform-sync.ts 同款 pattern；保持对齐避免两边漂移。
+ */
+function getStackTemplatesRoot(stack) {
+    return node_path_1.default.join(findCliRoot(), 'upgrade', 'templates', stack, 'templates');
+}
+let cliRootCache = null;
+function findCliRoot() {
+    if (cliRootCache !== null)
+        return cliRootCache;
+    let dir = __dirname;
+    while (dir !== node_path_1.default.dirname(dir)) {
+        if (node_fs_1.default.existsSync(node_path_1.default.join(dir, 'upgrade')) && node_fs_1.default.existsSync(node_path_1.default.join(dir, 'package.json'))) {
+            cliRootCache = dir;
+            return dir;
+        }
+        dir = node_path_1.default.dirname(dir);
+    }
+    throw new Error(`miaoda-cli root (containing upgrade/) not found from ${__dirname}`);
+}