@lark-apaas/miaoda-cli 0.1.7-alpha.3b4268d → 0.1.7-alpha.785a451

package/dist/api/deploy/schemas.js

@@ -19,6 +19,9 @@ function nodeStatusText(v) {
         return v;
     if (typeof v !== 'number')
         return undefined;
+    // `number` 不在 `NodeStatus` 枚举键集时,TS Partial<Record<NodeStatus,_>> 推断
+    // 出来类型不友好(eslint 报 unsafe-return);cast 到 Record<number,string|undefined>
+    // 等价安全访问。
     return NODE_STATUS_TEXT[v];
 }
 /** NodeStatus 文本（CLI flag 字符串）→ 枚举数值 */

package/dist/cli/commands/deploy/modern.js

@@ -16,6 +16,7 @@ function registerDeployCommandsModern(program) {
         .description('触发 modern 应用发布：本地构建 + 本地部署（preRelease + localPublish）')
         .option('--dir <path>', '项目目录', '.')
         .option('--skip-build', '跳过 build 步骤（已构建好时使用）', false)
+        .option('--conf <json>', '关联元信息 JSON，仅识别 checkPointVersion / commitID 两字段')
         .addHelpText('after', `
 不要用异步模式或后台模式调用 deploy，否则调用可能提前结束，Agent 会误判发布已完成。
 
@@ -32,6 +33,12 @@ function registerDeployCommandsModern(program) {
   6. savePluginInstances（扫描 dist/output_capabilities/*.json 批量注册）
   7. finalizeLocalRelease(Finished|Failed)
 
+--conf（关联元信息透传）
+  值为 JSON string，只识别两个字段，其余 key 忽略：
+    checkPointVersion  关联的 checkpoint 版本
+    commitID           关联的代码 commit ID
+  两字段均可选；非法 JSON / 非对象 / 字段值非字符串会报错。
+
 JSON 输出（stdout）
   {"data": {"appId": "...", "version": <n>, "url": "...", "releaseID": "...", "preReleaseID": "..."}}
 
@@ -39,12 +46,14 @@ JSON 输出（stdout）
   $ miaoda deploy
   $ miaoda deploy --dir ./my-app
   $ miaoda deploy --skip-build
+  $ miaoda deploy --conf '{"checkPointVersion":"v3","commitID":"a1b2c3d"}'
 `);
     deployCmd.action((0, shared_1.withHelp)(deployCmd, async (rawOpts) => {
         await (0, modern_1.handleDeployModern)({
             dir: rawOpts.dir ?? '.',
             appId: (0, shared_1.resolveAppId)({}),
             skipBuild: rawOpts.skipBuild,
+            conf: rawOpts.conf,
         });
     }));
 }

package/dist/cli/handlers/app/init.js

@@ -64,6 +64,12 @@ async function handleAppInit(opts) {
     const upgradedPackages = (0, sync_1.upgradePlatformDeps)(targetDir, 'init');
     // skills 同步软失败：拉不到 coding-steering 包不该阻断 writeSparkMeta /
     // activateGitHooks（之前会让 .spark/meta.json 没写，下次 init 半渲染状态又得重跑全套）。
+    // 按 stack 分流 outputLayout:
+    //   - nestjs-react-fullstack:本地主战场,用 flat 布局
+    //     (.agents/skills + .claude/skills 软链),不再创建 .agent/ 老目录
+    //   - 其他 stack:仍走默认 nested (.agent/skills/steering/<stack>/skills/),
+    //     跟沙箱端 update-skills.sh 老链路对齐,避免破坏
+    const outputLayout = stack === 'nestjs-react-fullstack' ? 'flat' : 'nested';
     let steeringResult;
     let steeringError;
     try {
@@ -72,6 +78,7 @@ async function handleAppInit(opts) {
             targetDir,
             version: opts.conf?.steeringVersion,
             logPrefix: 'init',
+            outputLayout,
         });
     }
     catch (err) {

package/dist/cli/handlers/app/sync.js

@@ -7,6 +7,7 @@ exports.handleAppUpgrade = void 0;
 exports.handleAppSync = handleAppSync;
 exports.runStackSync = runStackSync;
 exports.summarizeSyncResults = summarizeSyncResults;
+exports.listManagedDeps = listManagedDeps;
 exports.upgradePlatformDeps = upgradePlatformDeps;
 const node_child_process_1 = require("node:child_process");
 const node_fs_1 = __importDefault(require("node:fs"));
@@ -15,6 +16,7 @@ const sync_configs_1 = require("../../../config/sync-configs");
 const sync_rule_1 = require("../../../utils/sync-rule");
 const platform_sync_1 = require("../../../utils/platform-sync");
 const githooks_1 = require("../../../utils/githooks");
+const install_1 = require("../../../services/app/init/install");
 const spark_meta_1 = require("../../../utils/spark-meta");
 const error_1 = require("../../../utils/error");
 const output_1 = require("../../../utils/output");
@@ -81,16 +83,27 @@ async function handleAppSync(opts) {
     const upgradedPackages = upgradePlatformDeps(targetDir, 'sync');
     // 3. activate git hooks（template 自带 .githooks/pre-commit，core.hooksPath 一次性设置）
     const hookActivation = (0, githooks_1.activateGitHooks)(targetDir);
-    // 4. npm install —— 跟 init 一样软失败，install 挂了不该阻断 emit / sync 总结输出。
-    // 把本次实际有 from→to 变化的管控包**显式**作为位置参数传给 npm install,强制 npm 重新
-    // resolve lockfile entry。原因:user app 老 lockfile 可能锁着 alpha 版本,纯 `npm install`
-    // 看 lockfile 锁定值跟 package.json spec ("latest" range) 兼容会保留 alpha,导致 sync 后
-    // package.json 写了 latest 但实际还是装 alpha。显式 `npm install foo@latest bar@latest`
-    // 会重新解析这些包,lockfile 跟着更新。没变化的包不动,避免 noisy lockfile diff。
+    // 4. npm install —— 跟 init 一样软失败,install 挂了不该阻断 emit / sync 总结输出。
+    // 把 user app 装着的**所有**管控包显式作为位置参数传给 npm install,强制 npm 重新
+    // resolve lockfile entry。原因:
+    //   - 即便 package.json spec 已经是 "latest"(没有 from→to 变化),user app 老 lockfile
+    //     可能锁着具体老版本 (如 fullstack-vite-preset@1.0.9),纯 `npm install` 会按 lockfile
+    //     拉老版,绕过 spec "latest" 的解析意图
+    //   - 显式 `npm install foo@latest bar@latest` 让 npm 重新解析,lockfile 跟着更新到当前 latest
+    //   - 没装的管控包不动 (sync 的职责是对齐,不是塞依赖)
     // --ignore-scripts 绕开 action-plugin postinstall 在缺平台 env 时的 ENOENT。
-    const installArgs = ['install', '--no-audit', '--no-fund', '--ignore-scripts'];
-    for (const bump of upgradedPackages) {
-        installArgs.push(`${bump.name}@${bump.to}`);
+    // --registry 跟 init 钉同一份 npmmirror,避免 user 全局 ~/.npmrc 把 sync 拉到另一个源
+    // (详见 services/app/init/install.ts 上的注释)。MIAODA_NPM_REGISTRY env 兜底。
+    const installArgs = [
+        'install',
+        '--no-audit',
+        '--no-fund',
+        '--ignore-scripts',
+        '--registry',
+        (0, install_1.resolveNpmInstallRegistry)(),
+    ];
+    for (const name of listManagedDeps(targetDir)) {
+        installArgs.push(`${name}@${MANAGED_PLATFORM_PACKAGES[name]}`);
     }
     (0, logger_1.log)('sync', `Running npm ${installArgs.join(' ')}...`);
     let installError;
@@ -190,6 +203,29 @@ function readPackageJson(pkgJsonPath) {
         return null;
     return JSON.parse(node_fs_1.default.readFileSync(pkgJsonPath, 'utf-8'));
 }
+/**
+ * 列出 user app 装着的 @lark-apaas/* 管控包 (在 MANAGED_PLATFORM_PACKAGES 白名单内的)。
+ * sync handler 用来给 `npm install` 显式列管控包名 + @latest,强制 npm 重新 resolve
+ * lockfile entry —— 即便 package.json spec 已经是 "latest" 没 from→to 变化,
+ * 老 lockfile 锁的具体老版本(如 fullstack-vite-preset@1.0.9)也会被刷掉。
+ */
+function listManagedDeps(targetDir) {
+    const pkg = readPackageJson(node_path_1.default.join(targetDir, 'package.json'));
+    if (!pkg)
+        return [];
+    const names = new Set();
+    for (const section of ['dependencies', 'devDependencies']) {
+        const deps = pkg[section];
+        if (!deps || typeof deps !== 'object')
+            continue;
+        for (const name of Object.keys(deps)) {
+            if (Object.prototype.hasOwnProperty.call(MANAGED_PLATFORM_PACKAGES, name)) {
+                names.add(name);
+            }
+        }
+    }
+    return [...names];
+}
 /**
  * 把 user app package.json 里已装的 @lark-apaas/* 平台包改写成 MANAGED_PLATFORM_PACKAGES
  * 表里的目标 spec（缺省 `"latest"`）。由 `miaoda app sync` 和 `miaoda app init`（template

package/dist/cli/handlers/deploy/modern.js

@@ -3,10 +3,46 @@ var __importDefault = (this && this.__importDefault) || function (mod) {
     return (mod && mod.__esModule) ? mod : { "default": mod };
 };
 Object.defineProperty(exports, "__esModule", { value: true });
+exports.parseDeployConf = parseDeployConf;
 exports.handleDeployModern = handleDeployModern;
 const node_path_1 = __importDefault(require("node:path"));
 const output_1 = require("../../../utils/output");
+const error_1 = require("../../../utils/error");
 const index_1 = require("../../../services/deploy/modern/index");
+const CONF_EXPECTED = '期望形如 {"checkPointVersion":"...","commitID":"..."} 的 JSON 对象';
+/**
+ * 解析 `--conf` JSON string，只取 checkPointVersion / commitID 两个白名单字段。
+ * - 未传 → 返回 {}（行为不变）。
+ * - 非法 JSON / 非 object / 字段值非 string → 抛 DEPLOY_CONF_INVALID。
+ * - 空串字段视为未提供（不进 body，保持可选语义）；未知 key 忽略。
+ */
+function parseDeployConf(raw) {
+    if (raw === undefined || raw === '')
+        return {};
+    let parsed;
+    try {
+        parsed = JSON.parse(raw);
+    }
+    catch {
+        throw new error_1.AppError('DEPLOY_CONF_INVALID', `--conf 不是合法 JSON，${CONF_EXPECTED}`);
+    }
+    if (typeof parsed !== 'object' || parsed === null || Array.isArray(parsed)) {
+        throw new error_1.AppError('DEPLOY_CONF_INVALID', `--conf 必须是 JSON 对象，${CONF_EXPECTED}`);
+    }
+    const source = parsed;
+    const conf = {};
+    for (const key of ['checkPointVersion', 'commitID']) {
+        const value = source[key];
+        if (value === undefined)
+            continue;
+        if (typeof value !== 'string') {
+            throw new error_1.AppError('DEPLOY_CONF_INVALID', `--conf.${key} 必须是字符串，${CONF_EXPECTED}`);
+        }
+        if (value !== '')
+            conf[key] = value;
+    }
+    return conf;
+}
 /**
  * miaoda deploy（modern scene 专用，CLI 表面对齐 openclaw-cli）
  *
@@ -14,10 +50,13 @@ const index_1 = require("../../../services/deploy/modern/index");
  */
 async function handleDeployModern(opts) {
     const projectDir = node_path_1.default.resolve(opts.dir);
+    const conf = parseDeployConf(opts.conf);
     const result = await (0, index_1.runModernDeploy)({
         projectDir,
         appId: opts.appId,
         skipBuild: opts.skipBuild ?? false,
+        checkPointVersion: conf.checkPointVersion,
+        commitID: conf.commitID,
     });
     (0, output_1.emit)({
         data: {

package/dist/cli/handlers/plugin/plugin-local.js

@@ -76,7 +76,7 @@ function parsePluginName(input) {
     if (!match) {
         throw new error_1.AppError('INVALID_PLUGIN_NAME', `Invalid plugin name format: ${input}. Expected: @scope/name or @scope/name@version`, { next_actions: ['示例：@demo/example-plugin 或 @demo/example-plugin@1.2.3'] });
     }
-    return { name: match[1], version: match[2] ?? 'latest' };
+    return { name: match[1], version: match[2] || 'latest' };
 }
 // ── package.json actionPlugins CRUD ──
 function readPackageJson() {

package/dist/services/app/init/install.js

@@ -4,6 +4,7 @@ var __importDefault = (this && this.__importDefault) || function (mod) {
 };
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.installDependencies = installDependencies;
+exports.resolveNpmInstallRegistry = resolveNpmInstallRegistry;
 const node_child_process_1 = require("node:child_process");
 const node_crypto_1 = __importDefault(require("node:crypto"));
 const node_fs_1 = __importDefault(require("node:fs"));
@@ -111,12 +112,20 @@ function extractZip(zipPath, targetDir, stdio) {
  *   - 字节内网 DNS 会把 npmmirror 域名透明指向公司镜像，外网就是公网阿里源；同一行配置
  *     在两套环境都拉得到 @lark-apaas/* 私包（内网经公司镜像，外网经阿里同步过去的副本）。
  *   - 留 `MIAODA_NPM_REGISTRY` env 应急覆盖。
+ *
+ * `miaoda app sync` 也用同款规则,通过 resolveNpmInstallRegistry() 共享。
  */
 const NPM_INSTALL_REGISTRY_DEFAULT = 'https://registry.npmmirror.com/';
+/**
+ * 解析 miaoda 内部 npm install 命令使用的 registry。init / sync 共用。
+ * 优先级:`MIAODA_NPM_REGISTRY` env > `NPM_INSTALL_REGISTRY_DEFAULT`。
+ */
+function resolveNpmInstallRegistry() {
+    return process.env.MIAODA_NPM_REGISTRY ?? NPM_INSTALL_REGISTRY_DEFAULT;
+}
 function runNpmInstall(targetDir, stdio) {
     (0, logger_1.log)('init', `npm install in ${targetDir}...`);
-    const registry = process.env.MIAODA_NPM_REGISTRY ?? NPM_INSTALL_REGISTRY_DEFAULT;
-    (0, node_child_process_1.execFileSync)('npm', ['install', '--no-audit', '--no-fund', '--registry', registry], {
+    (0, node_child_process_1.execFileSync)('npm', ['install', '--no-audit', '--no-fund', '--registry', resolveNpmInstallRegistry()], {
         cwd: targetDir,
         stdio,
     });

package/dist/services/deploy/modern/atoms/local-release.js

@@ -10,8 +10,13 @@ const logger_1 = require("../../../../utils/logger");
  * 创建本地发布单（加锁；不挂 pipeline）。
  * 返回的 releaseId 必须由 finalizeLocalRelease 翻为终态，否则发布单一直挂着。
  */
-async function createLocalRelease(appId, version) {
-    return (0, index_1.createLocalRelease)({ appID: appId, version });
+async function createLocalRelease(appId, version, extra) {
+    return (0, index_1.createLocalRelease)({
+        appID: appId,
+        version,
+        checkPointVersion: extra?.checkPointVersion,
+        commitID: extra?.commitID,
+    });
 }
 /**
  * 把本地发布单翻为终态。Finished / Failed 由 pipeline 视上下游结果决定。

package/dist/services/deploy/modern/pipelines/local.js

@@ -43,7 +43,10 @@ async function localBuildLocalPublishPipeline(opts) {
         });
     }
     (0, logger_1.log)('deploy', 'Creating local release...');
-    const release = await (0, index_1.createLocalRelease)(ctx.appId, pre.version);
+    const release = await (0, index_1.createLocalRelease)(ctx.appId, pre.version, {
+        checkPointVersion: opts.checkPointVersion,
+        commitID: opts.commitID,
+    });
     try {
         (0, logger_1.log)('deploy', 'Uploading artifacts...');
         await (0, index_1.uploadArtifacts)({ projectDir: ctx.projectDir, appId: ctx.appId, data });

package/package.json

@@ -1,13 +1,14 @@
 {
   "name": "@lark-apaas/miaoda-cli",
-  "version": "0.1.7-alpha.3b4268d",
+  "version": "0.1.7-alpha.785a451",
   "description": "Miaoda 平台命令行工具，面向 Agent 调用",
   "type": "commonjs",
   "bin": {
     "miaoda": "bin/miaoda.js"
   },
   "publishConfig": {
-    "access": "public"
+    "access": "public",
+    "registry": "https://registry.npmjs.org/"
   },
   "files": [
     "LICENSE",