@nasl/cli 0.2.2 → 0.3.0

package/dist/bin/naslc.mjs

@@ -1,9 +1,8 @@
 #!/usr/bin/env node
-#!/usr/bin/env node
 import require$$0$1, { EventEmitter } from 'events';
 import require$$1 from 'child_process';
-import * as sysPath from 'path';
-import sysPath__default, { join } from 'path';
+import * as path$1 from 'path';
+import path__default, { join } from 'path';
 import require$$0$2, { promises } from 'fs';
 import require$$4 from 'process';
 import require$$0$5 from 'os';
@@ -1166,7 +1165,7 @@ function requireCommand () {
 	hasRequiredCommand = 1;
 	const EventEmitter = require$$0$1.EventEmitter;
 	const childProcess = require$$1;
-	const path = sysPath__default;
+	const path = path__default;
 	const fs = require$$0$2;
 	const process = require$$4;
 
@@ -4576,7 +4575,7 @@ var hasRequiredUtils$5;
 function requireUtils$5 () {
 	if (hasRequiredUtils$5) return utils$7;
 	hasRequiredUtils$5 = 1;
-	const path = sysPath__default;
+	const path = path__default;
 
 	// https://github.com/nodejs/node/issues/8987
 	// https://github.com/libuv/libuv/pull/1088
@@ -4722,7 +4721,7 @@ function requireStat () {
 	hasRequiredStat = 1;
 
 	const fs = /*@__PURE__*/ requireFs$4();
-	const path = sysPath__default;
+	const path = path__default;
 	const u = requireUniversalify().fromPromise;
 
 	function getStats (src, dest, opts) {
@@ -4926,7 +4925,7 @@ function requireCopy$1 () {
 	hasRequiredCopy$1 = 1;
 
 	const fs = /*@__PURE__*/ requireFs$4();
-	const path = sysPath__default;
+	const path = path__default;
 	const { mkdirs } = /*@__PURE__*/ requireMkdirs();
 	const { pathExists } = /*@__PURE__*/ requirePathExists();
 	const { utimesMillis } = /*@__PURE__*/ requireUtimes();
@@ -5109,7 +5108,7 @@ function requireCopySync () {
 	hasRequiredCopySync = 1;
 
 	const fs = requireGracefulFs();
-	const path = sysPath__default;
+	const path = path__default;
 	const mkdirsSync = /*@__PURE__*/ requireMkdirs().mkdirsSync;
 	const utimesMillisSync = /*@__PURE__*/ requireUtimes().utimesMillisSync;
 	const stat = /*@__PURE__*/ requireStat();
@@ -5329,7 +5328,7 @@ function requireEmpty () {
 
 	const u = requireUniversalify().fromPromise;
 	const fs = /*@__PURE__*/ requireFs$4();
-	const path = sysPath__default;
+	const path = path__default;
 	const mkdir = /*@__PURE__*/ requireMkdirs();
 	const remove = /*@__PURE__*/ requireRemove();
 
@@ -5375,7 +5374,7 @@ function requireFile () {
 	hasRequiredFile = 1;
 
 	const u = requireUniversalify().fromPromise;
-	const path = sysPath__default;
+	const path = path__default;
 	const fs = /*@__PURE__*/ requireFs$4();
 	const mkdir = /*@__PURE__*/ requireMkdirs();
 
@@ -5449,7 +5448,7 @@ function requireLink () {
 	hasRequiredLink = 1;
 
 	const u = requireUniversalify().fromPromise;
-	const path = sysPath__default;
+	const path = path__default;
 	const fs = /*@__PURE__*/ requireFs$4();
 	const mkdir = /*@__PURE__*/ requireMkdirs();
 	const { pathExists } = /*@__PURE__*/ requirePathExists();
@@ -5520,7 +5519,7 @@ function requireSymlinkPaths () {
 	if (hasRequiredSymlinkPaths) return symlinkPaths_1;
 	hasRequiredSymlinkPaths = 1;
 
-	const path = sysPath__default;
+	const path = path__default;
 	const fs = /*@__PURE__*/ requireFs$4();
 	const { pathExists } = /*@__PURE__*/ requirePathExists();
 
@@ -5672,7 +5671,7 @@ function requireSymlink () {
 	hasRequiredSymlink = 1;
 
 	const u = requireUniversalify().fromPromise;
-	const path = sysPath__default;
+	const path = path__default;
 	const fs = /*@__PURE__*/ requireFs$4();
 
 	const { mkdirs, mkdirsSync } = /*@__PURE__*/ requireMkdirs();
@@ -5918,7 +5917,7 @@ function requireOutputFile () {
 
 	const u = requireUniversalify().fromPromise;
 	const fs = /*@__PURE__*/ requireFs$4();
-	const path = sysPath__default;
+	const path = path__default;
 	const mkdir = /*@__PURE__*/ requireMkdirs();
 	const pathExists = /*@__PURE__*/ requirePathExists().pathExists;
 
@@ -6020,7 +6019,7 @@ function requireMove$1 () {
 	hasRequiredMove$1 = 1;
 
 	const fs = /*@__PURE__*/ requireFs$4();
-	const path = sysPath__default;
+	const path = path__default;
 	const { copy } = /*@__PURE__*/ requireCopy();
 	const { remove } = /*@__PURE__*/ requireRemove();
 	const { mkdirp } = /*@__PURE__*/ requireMkdirs();
@@ -6087,7 +6086,7 @@ function requireMoveSync () {
 	hasRequiredMoveSync = 1;
 
 	const fs = requireGracefulFs();
-	const path = sysPath__default;
+	const path = path__default;
 	const copySync = /*@__PURE__*/ requireCopy().copySync;
 	const removeSync = /*@__PURE__*/ requireRemove().removeSync;
 	const mkdirpSync = /*@__PURE__*/ requireMkdirs().mkdirpSync;
@@ -8204,16 +8203,16 @@ class BaseLogger {
     }
     debugToFile(topic, ...args) {
         if (process.env.DEBUG_TO_FILE) {
-            const baseDir = sysPath.join(process.cwd(), '.nasl');
+            const baseDir = path$1.join(process.cwd(), '.nasl');
             const currentHour = dayjs().format('YYYYMMDD_HH');
             const prevHour = dayjs().subtract(1, 'hour').format('YYYYMMDD_HH');
             let subdir = `${topic}_${currentHour}`;
             const prevSubdir = `${topic}_${prevHour}`;
             // 判断如果有上一个小时的 subdir，则自己汇聚到上一个小时的 subdir 中
-            if (libExports.existsSync(sysPath.join(baseDir, prevSubdir)))
+            if (libExports.existsSync(path$1.join(baseDir, prevSubdir)))
                 subdir = prevSubdir;
             const fileName = `${topic}_${dayjs().format('YYYYMMDD_HHmmss')}.log`;
-            const filePath = sysPath.join(baseDir, subdir, fileName);
+            const filePath = path$1.join(baseDir, subdir, fileName);
             libExports.outputFileSync(filePath, args.join(' '));
         }
     }
@@ -8278,11 +8277,11 @@ function findConfigDir(startDir = process.cwd()) {
     let currentDir = startDir;
     // eslint-disable-next-line no-constant-condition
     while (true) {
-        const configPath = sysPath.join(currentDir, CONFIG_FILE_NAME);
+        const configPath = path$1.join(currentDir, CONFIG_FILE_NAME);
         if (libExports.existsSync(configPath)) {
             return currentDir;
         }
-        const parentDir = sysPath.dirname(currentDir);
+        const parentDir = path$1.dirname(currentDir);
         // 已经到达根目录
         if (parentDir === currentDir) {
             return null;
@@ -8299,7 +8298,7 @@ function loadConfig(configDir) {
         defaultLogger.error(`未找到配置文件 ${CONFIG_FILE_NAME}，请先运行 nasl-init 初始化配置`);
         return defaultLogger.exit(1);
     }
-    const configPath = sysPath.join(dir, CONFIG_FILE_NAME);
+    const configPath = path$1.join(dir, CONFIG_FILE_NAME);
     try {
         const content = libExports.readFileSync(configPath, 'utf-8');
         const config = JSON.parse(content);
@@ -8330,6 +8329,8 @@ function loadConfig(configDir) {
             config.OPENAPI_AK = process.env.LCAP_OPENAPI_AK;
         if (process.env.LCAP_OPENAPI_SK)
             config.OPENAPI_SK = process.env.LCAP_OPENAPI_SK;
+        if (process.env.LCAP_TENANT_NAME)
+            config.tenantName = process.env.LCAP_TENANT_NAME;
         // 如果启用了 OpenAPI，验证必需的 AK 和 SK
         if (config.useOPENAPI) {
             if (!config.OPENAPI_AK || !config.OPENAPI_SK) {
@@ -8376,7 +8377,7 @@ function readFileWithLog(filePath, logger) {
  */
 function writeFileWithLog(filePath, content, logger) {
     try {
-        const dir = sysPath.dirname(filePath);
+        const dir = path$1.dirname(filePath);
         libExports.ensureDirSync(dir);
         libExports.writeFileSync(filePath, content, 'utf-8');
     }
@@ -20362,7 +20363,7 @@ function requireMimeTypes () {
 		 */
 
 		var db = requireMimeDb();
-		var extname = sysPath__default.extname;
+		var extname = path__default.extname;
 
 		/**
 		 * Module variables.
@@ -22103,7 +22104,7 @@ function requireForm_data () {
 
 	var CombinedStream = requireCombined_stream();
 	var util = require$$0$4;
-	var path = sysPath__default;
+	var path = path__default;
 	var http = require$$3;
 	var https = require$$4$1;
 	var parseUrl = require$$0$6.parse;
@@ -29047,6 +29048,20 @@ async function generateCompleteHeaders(options) {
     }
     return headers;
 }
+/**
+ * 构建请求 headers
+ * 如果 ServerOptions.useOPENAPI 为 true, 意味着接口内部是走的集群，反之则需要走 openapi 调用(本地或者server的场景，透传options相关配置)
+ */
+function buildNaslHeaders(options) {
+    return {
+        'Content-Type': 'text/plain',
+        'X-Server-Base-URL': options.serverBaseURL,
+        ...(options.OPENAPI_AK && { 'X-OPENAPI-AK': options.OPENAPI_AK }),
+        ...(options.OPENAPI_SK && { 'X-OPENAPI-SK': options.OPENAPI_SK }),
+        ...(options.tenantName && { 'X-Tenant-Name': options.tenantName }),
+        ...(options.useOPENAPI !== undefined && { 'X-Use-OPENAPI': String(!options.useOPENAPI) }),
+    };
+}
 
 /**
  * 创建 Axios 实例
@@ -29094,7 +29109,7 @@ async function compileApi(fullNaturalTS, options) {
     // 示例实现：
     const axios = await createAxios(options);
     const res = await axios.post(`/compile/tsx?ideVersion=${options.ideVersion}&needAnnotation=true`, fullNaturalTS, {
-        headers: { 'Content-Type': 'text/plain' },
+        headers: buildNaslHeaders(options),
     });
     const data = res.data;
     const { bundle } = data.result;
@@ -29198,7 +29213,10 @@ function validateNormalFile(file, nameFromPath, namespace, errors) {
 function composeToString(files) {
     files.sort((a, b) => sorter(a.path, b.path));
     const errors = [];
+    let currentLine = 1;
     const result = files.map((file) => {
+        // 记录这个文件的开始行号
+        file.startLine = currentLine;
         const arr = file.path.split('.');
         const ext = arr.pop();
         const nameFromPath = arr.pop();
@@ -29224,7 +29242,14 @@ function composeToString(files) {
         else if (isThemeCss) {
             content = `  $theme\`${content}\`;`;
         }
-        return `namespace ${namespace} {\n${content}\n}\n`;
+        const fileContent = `namespace ${namespace} {\n${content}\n}\n`;
+        // 计算这个文件占用的行数（末尾 \n 导致 split 多一个空元素，减 1 得到实际行数）
+        const lineCount = fileContent.split('\n').length - 1;
+        // 记录这个文件的结束行号
+        file.endLine = currentLine + lineCount - 1;
+        // +1 是 join('\n') 在文件之间插入的换行符
+        currentLine = file.endLine + 2;
+        return fileContent;
     })
         .join('\n');
     if (errors.length > 0) {
@@ -29232,6 +29257,25 @@ function composeToString(files) {
     }
     return result;
 }
+/**
+ * 将依赖信息拼接到 fullNaturalTS 顶部
+ * @param fullNaturalTS 组合后的 NASL 代码
+ * @param dependencies mergedDependencies 对象或 JSON 字符串
+ * @returns 拼接后的完整内容
+ */
+function prependDependencies(fullNaturalTS, dependencies) {
+    if (!dependencies)
+        return fullNaturalTS;
+    const jsonStr = JSON.stringify(dependencies, null, 2);
+    const header = `/*
+-----------app.dependencies.json7xdhjutehm.start
+${jsonStr}
+-----------app.dependencies.json7xdhjutehm.end
+*/
+
+`;
+    return header + fullNaturalTS;
+}
 
 var globby$1 = {exports: {}};
 
@@ -29489,7 +29533,7 @@ function requirePath () {
 	Object.defineProperty(path, "__esModule", { value: true });
 	path.convertPosixPathToPattern = path.convertWindowsPathToPattern = path.convertPathToPattern = path.escapePosixPath = path.escapeWindowsPath = path.escape = path.removeLeadingDotSegment = path.makeAbsolute = path.unixify = void 0;
 	const os = require$$0$5;
-	const path$1 = sysPath__default;
+	const path$1 = path__default;
 	const IS_WINDOWS_PLATFORM = os.platform() === 'win32';
 	const LEADING_DOT_SEGMENT_CHARACTERS_COUNT = 2; // ./ or .\\
 	/**
@@ -29754,7 +29798,7 @@ function requireGlobParent () {
 	hasRequiredGlobParent = 1;
 
 	var isGlob = requireIsGlob();
-	var pathPosixDirname = sysPath__default.posix.dirname;
+	var pathPosixDirname = path__default.posix.dirname;
 	var isWin32 = require$$0$5.platform() === 'win32';
 
 	var slash = '/';
@@ -31326,7 +31370,7 @@ function requireConstants$1 () {
 	if (hasRequiredConstants$1) return constants$1;
 	hasRequiredConstants$1 = 1;
 
-	const path = sysPath__default;
+	const path = path__default;
 	const WIN_SLASH = '\\\\/';
 	const WIN_NO_SLASH = `[^${WIN_SLASH}]`;
 
@@ -31513,7 +31557,7 @@ function requireUtils$2 () {
 	hasRequiredUtils$2 = 1;
 	(function (exports$1) {
 
-		const path = sysPath__default;
+		const path = path__default;
 		const win32 = process.platform === 'win32';
 		const {
 		  REGEX_BACKSLASH,
@@ -33084,7 +33128,7 @@ function requirePicomatch$1 () {
 	if (hasRequiredPicomatch$1) return picomatch_1;
 	hasRequiredPicomatch$1 = 1;
 
-	const path = sysPath__default;
+	const path = path__default;
 	const scan = requireScan();
 	const parse = requireParse();
 	const utils = requireUtils$2();
@@ -33927,7 +33971,7 @@ function requirePattern () {
 	hasRequiredPattern = 1;
 	Object.defineProperty(pattern, "__esModule", { value: true });
 	pattern.isAbsolute = pattern.partitionAbsoluteAndRelative = pattern.removeDuplicateSlashes = pattern.matchAny = pattern.convertPatternsToRe = pattern.makeRe = pattern.getPatternParts = pattern.expandBraceExpansion = pattern.expandPatternsWithBraceExpansion = pattern.isAffectDepthOfReadingPattern = pattern.endsWithSlashGlobStar = pattern.hasGlobStar = pattern.getBaseDirectory = pattern.isPatternRelatedToParentDirectory = pattern.getPatternsOutsideCurrentDirectory = pattern.getPatternsInsideCurrentDirectory = pattern.getPositivePatterns = pattern.getNegativePatterns = pattern.isPositivePattern = pattern.isNegativePattern = pattern.convertToNegativePattern = pattern.convertToPositivePattern = pattern.isDynamicPattern = pattern.isStaticPattern = void 0;
-	const path = sysPath__default;
+	const path = path__default;
 	const globParent = requireGlobParent();
 	const micromatch = requireMicromatch();
 	const GLOBSTAR = '**';
@@ -34881,7 +34925,7 @@ function requireSettings$2 () {
 	if (hasRequiredSettings$2) return settings$2;
 	hasRequiredSettings$2 = 1;
 	Object.defineProperty(settings$2, "__esModule", { value: true });
-	const path = sysPath__default;
+	const path = path__default;
 	const fsStat = requireOut$3();
 	const fs = requireFs();
 	class Settings {
@@ -35643,7 +35687,7 @@ function requireSettings$1 () {
 	if (hasRequiredSettings$1) return settings$1;
 	hasRequiredSettings$1 = 1;
 	Object.defineProperty(settings$1, "__esModule", { value: true });
-	const path = sysPath__default;
+	const path = path__default;
 	const fsScandir = requireOut$2();
 	class Settings {
 	    constructor(_options = {}) {
@@ -35719,7 +35763,7 @@ function requireReader () {
 	if (hasRequiredReader) return reader;
 	hasRequiredReader = 1;
 	Object.defineProperty(reader, "__esModule", { value: true });
-	const path = sysPath__default;
+	const path = path__default;
 	const fsStat = requireOut$3();
 	const utils = requireUtils$1();
 	class Reader {
@@ -36192,7 +36236,7 @@ function requireProvider () {
 	if (hasRequiredProvider) return provider;
 	hasRequiredProvider = 1;
 	Object.defineProperty(provider, "__esModule", { value: true });
-	const path = sysPath__default;
+	const path = path__default;
 	const deep_1 = requireDeep();
 	const entry_1 = requireEntry$1();
 	const error_1 = requireError();
@@ -36632,7 +36676,7 @@ var hasRequiredDirGlob;
 function requireDirGlob () {
 	if (hasRequiredDirGlob) return dirGlob.exports;
 	hasRequiredDirGlob = 1;
-	const path = sysPath__default;
+	const path = path__default;
 	const pathType = requirePathType();
 
 	const getExtensions = extensions => extensions.length > 1 ? `{${extensions.join(',')}}` : extensions[0];
@@ -37382,7 +37426,7 @@ function requireGitignore () {
 	hasRequiredGitignore = 1;
 	const {promisify} = require$$0$4;
 	const fs = require$$0$2;
-	const path = sysPath__default;
+	const path = path__default;
 	const fastGlob = requireOut();
 	const gitIgnore = requireIgnore();
 	const slash = requireSlash();
@@ -37814,6 +37858,27 @@ const NASL_FILE_TYPES = [
         codeRefPattern: 'extensions\\.\\w+(?:\\.\\w+)*',
         extension: 'ts',
     },
+    {
+        name: 'apis',
+        description: 'API',
+        fileNamePattern: 'apis\\.\\w+\\.ts',
+        codeRefPattern: 'apis\\.\\w+(?:\\.\\w+)*',
+        extension: 'ts',
+    },
+    {
+        name: 'connectors',
+        description: '连接器',
+        fileNamePattern: 'connectors\\.\\w+\\.ts',
+        codeRefPattern: 'connectors\\.\\w+(?:\\.\\w+)*',
+        extension: 'ts',
+    },
+    {
+        name: 'uilibs',
+        description: 'UI 库',
+        fileNamePattern: 'uilibs\\.\\w+\\.ts',
+        codeRefPattern: 'uilibs\\.\\w+(?:\\.\\w+)*',
+        extension: 'ts',
+    },
 ];
 /**
  * 获取用于验证文件名的正则表达式数组
@@ -37846,10 +37911,15 @@ const codeRefPatterns = getCodeRefPatterns();
  */
 function isKnownFileType(filePath) {
     // 提取文件名
-    const fileName = sysPath.basename(filePath);
+    const fileName = path$1.basename(filePath);
     return fileNamePatterns.some((pattern) => pattern.test(fileName));
 }
 
+/** 这些前缀的依赖不再向下递归查找 */
+const EXTERNAL_DEP_PREFIXES = ['extensions.', 'connectors.', 'apis.', 'uilibs.'];
+function shouldSkipDependencyTraversal(depPath) {
+    return EXTERNAL_DEP_PREFIXES.some((prefix) => depPath.startsWith(prefix));
+}
 /**
  * 扫描目录下的所有 NASL 文件
  */
@@ -37915,6 +37985,15 @@ function extractDeps(content) {
             if (/^extensions\.\w+\./.test(dep)) {
                 dep = dep.replace(/^(extensions\.\w+)\..+$/, '$1');
             }
+            if (/^apis\.\w+\./.test(dep)) {
+                dep = dep.replace(/^(apis\.\w+)\..+$/, '$1');
+            }
+            if (/^connectors\.\w+\./.test(dep)) {
+                dep = dep.replace(/^(connectors\.\w+)\..+$/, '$1');
+            }
+            if (/^uilibs\.\w+\./.test(dep)) {
+                dep = dep.replace(/^(uilibs\.\w+)\..+$/, '$1');
+            }
             // 跳过不合法的实体引用（实体后还有字段的情况）
             if (/app\.dataSources\.\w+\.entities\.\w+\.\w+$/.test(dep)) {
                 continue;
@@ -37926,6 +38005,152 @@ function extractDeps(content) {
     }
     return Array.from(deps);
 }
+/**
+ * 从文件内容中提取外部依赖引用（extensions/connectors/apis/uilibs）
+ * 用于构建 externalDependencies
+ */
+function extractExternalRefs(content) {
+    const refs = {
+        extensions: new Set(),
+        connectors: new Set(),
+        uilibs: new Set(),
+        apis: new Map(),
+    };
+    const processedContent = content
+        .replace(/\/\/.*$/gm, '')
+        .replace(/\/\*[\s\S]*?\*\//g, '')
+        .replace(/'(?:[^'\\]|\\.)*'/g, '')
+        .replace(/"(?:[^"\\]|\\.)*"/g, '');
+    // extensions.xxx, connectors.xxx, uilibs.xxx
+    for (const m of processedContent.matchAll(/\b(extensions|connectors|uilibs)\.(\w+)/g)) {
+        const [, kind, name] = m;
+        if (kind === 'extensions')
+            refs.extensions.add(name);
+        else if (kind === 'connectors')
+            refs.connectors.add(name);
+        else
+            refs.uilibs.add(name);
+    }
+    // apis.xxx.interfaces.yyy
+    for (const m of processedContent.matchAll(/\bapis\.(\w+)\.interfaces\.(\w+)/g)) {
+        const [, apiName, ifaceName] = m;
+        if (!refs.apis.has(apiName))
+            refs.apis.set(apiName, new Set());
+        refs.apis.get(apiName).add(ifaceName);
+    }
+    return refs;
+}
+function mergeExternalRefs(into, from) {
+    from.extensions.forEach((x) => into.extensions.add(x));
+    from.connectors.forEach((x) => into.connectors.add(x));
+    from.uilibs.forEach((x) => into.uilibs.add(x));
+    from.apis.forEach((interfaces, apiName) => {
+        if (!into.apis.has(apiName))
+            into.apis.set(apiName, new Set());
+        interfaces.forEach((i) => into.apis.get(apiName).add(i));
+    });
+}
+/**
+ * 加载 app.dependencies.json（不存在则返回空对象）
+ */
+function loadAppDependencies(srcDir) {
+    const p = path$1.join(srcDir, 'app.dependencies.json');
+    if (!libExports.existsSync(p))
+        return {};
+    try {
+        return libExports.readJsonSync(p);
+    }
+    catch {
+        return {};
+    }
+}
+/**
+ * 加载并合并 app.dependencies.json 与 potential.dependencies.json
+ * 用于版本号查找：先查 app，再查 potential
+ */
+function loadMergedDependencies(srcDir) {
+    const load = (file) => {
+        const p = path$1.join(srcDir, file);
+        if (!libExports.existsSync(p))
+            return null;
+        try {
+            return libExports.readJsonSync(p);
+        }
+        catch {
+            return null;
+        }
+    };
+    const app = load('app.dependencies.json') ?? {};
+    const potential = load('potential.dependencies.json') ?? {};
+    const merged = {};
+    for (const key of ['extensions', 'uilibs', 'connectors', 'apis']) {
+        merged[key] = { ...(potential[key] ?? {}), ...(app[key] ?? {}) };
+    }
+    return merged;
+}
+/**
+ * 将 externalDependencies 补充到 app.dependencies.json（只增不减）
+ */
+function mergeDependenciesIntoApp(existing, incoming) {
+    const result = {};
+    for (const key of ['extensions', 'uilibs', 'connectors']) {
+        const existingRecord = existing[key] ?? {};
+        const incomingRecord = incoming[key] ?? {};
+        result[key] = { ...incomingRecord, ...existingRecord };
+    }
+    result.apis = {};
+    if (existing.apis || incoming.apis) {
+        const allApiNames = new Set([...Object.keys(existing.apis ?? {}), ...Object.keys(incoming.apis ?? {})]);
+        for (const apiName of allApiNames) {
+            const existingInterfaces = existing.apis?.[apiName] ?? [];
+            const incomingInterfaces = incoming.apis?.[apiName] ?? [];
+            result.apis[apiName] = [...new Set([...existingInterfaces, ...incomingInterfaces])].sort();
+        }
+    }
+    return result;
+}
+/**
+ * 根据收集的外部引用和版本配置，构建 DependenciesJSON
+ * extensions/connectors/uilibs 需要版本号，apis 只需 interfaces 数组
+ */
+function buildExternalDependencies(refs, mergedDeps, logger) {
+    const result = {};
+    const errors = [];
+    for (const name of refs.extensions) {
+        const ver = mergedDeps.extensions?.[name];
+        if (!ver) {
+            errors.push(`extensions.${name} 未在 app.dependencies.json 或 potential.dependencies.json 中找到版本号`);
+        }
+        else {
+            (result.extensions ?? (result.extensions = {}))[name] = ver;
+        }
+    }
+    for (const name of refs.connectors) {
+        const ver = mergedDeps.connectors?.[name];
+        if (!ver) {
+            errors.push(`connectors.${name} 未在 app.dependencies.json 或 potential.dependencies.json 中找到版本号`);
+        }
+        else {
+            (result.connectors ?? (result.connectors = {}))[name] = ver;
+        }
+    }
+    for (const name of refs.uilibs) {
+        const ver = mergedDeps.uilibs?.[name];
+        if (!ver) {
+            errors.push(`uilibs.${name} 未在 app.dependencies.json 或 potential.dependencies.json 中找到版本号`);
+        }
+        else {
+            (result.uilibs ?? (result.uilibs = {}))[name] = ver;
+        }
+    }
+    // result.uilibs = mergedDeps.uilibs; // 临时先都加上去
+    refs.apis.forEach((interfaces, apiName) => {
+        (result.apis ?? (result.apis = {}))[apiName] = Array.from(interfaces).sort();
+    });
+    if (errors.length > 0)
+        throw new Error(errors.join('\n'));
+    return result;
+}
 /**
  * 提取页面文件的签名，移除函数体
  * @param content 页面文件内容
@@ -37948,7 +38173,7 @@ function replaceViewAsSignature(content, hasSubViews = false) {
  * @returns 文件信息和新发现的依赖文件列表
  */
 function processFileDeps(pathRelativeToSrc, srcDir, matchedFileSet, processedFileMap, depNotFoundList, logger, verbose) {
-    const absoluteFilePath = sysPath.join(srcDir, pathRelativeToSrc);
+    const absoluteFilePath = path$1.join(srcDir, pathRelativeToSrc);
     const fileInfo = { path: pathRelativeToSrc, content: '' };
     try {
         fileInfo.content = readFileWithLog(absoluteFilePath, logger);
@@ -37978,7 +38203,9 @@ function processFileDeps(pathRelativeToSrc, srcDir, matchedFileSet, processedFil
     }
     processedFileMap.set(pathRelativeToSrc, fileInfo);
     // 提取依赖
-    const deps = extractDeps(fileInfo.content);
+    // extensions/connectors/apis/uilibs 作为叶子节点，不再向下递归查找依赖
+    const isExternalDep = shouldSkipDependencyTraversal(pathRelativeToSrc);
+    const deps = isExternalDep ? [] : extractDeps(fileInfo.content);
     // 查找依赖文件
     if (isView) {
         const pathArr = pathRelativeToSrc.split('.');
@@ -37993,24 +38220,30 @@ function processFileDeps(pathRelativeToSrc, srcDir, matchedFileSet, processedFil
         } while (true);
     }
     if (verbose || process.env.DEBUG) {
-        console.log(`${isEntryFile ? chalk.magenta('[Entry]') : chalk.green('[ Dep ]')} ${pathRelativeToSrc}${deps.map((dep) => `\n├── ${dep}`).join('')}`);
+        console.log(`${isEntryFile ? chalk.magenta('[Entry]') : isExternalDep ? chalk.blue('[ External Dep ]') : chalk.green('[ Dep ]')} ${pathRelativeToSrc}${deps.map((dep) => `\n├── ${dep}`).join('')}`);
     }
     return {
         fileInfo,
         newDeps: deps.filter((dep) => !processedFileMap.has(dep)),
+        isExternalDep,
     };
 }
 /**
  * 收集入口文件及其依赖
  * @param patterns 入口文件的 glob 模式数组
  * @param srcDir 源代码目录绝对路径
- * @param representation NASL 表示形式
- * @returns 文件信息列表
+ * @returns 文件信息列表和外部依赖引用
  */
 async function collectDeps(patterns, projectRoot, srcDir, logger, verbose) {
     const processedFileMap = new Map(); // 已处理的文件（相对路径）
     const filesToProcess = []; // 待处理的文件队列
     const result = [];
+    const externalRefs = {
+        extensions: new Set(),
+        connectors: new Set(),
+        uilibs: new Set(),
+        apis: new Map(),
+    };
     // 1. 使用 glob 匹配入口文件
     logger.newLine();
     logger.info(`匹配入口文件: ${patterns.join(', ')}`);
@@ -38020,15 +38253,15 @@ async function collectDeps(patterns, projectRoot, srcDir, logger, verbose) {
         throw new Error('未找到匹配的入口文件');
     }
     logger.info(`找到 ${matchedFiles.length} 个入口文件`);
-    const absoluteSrcDir = sysPath.resolve(srcDir);
+    const absoluteSrcDir = path$1.resolve(srcDir);
     const matchedFileSet = new Set();
     matchedFiles.forEach((pathRelativeToRoot) => {
         // 统一使用相对于 src 的路径
-        const absoluteFilePath = sysPath.resolve(projectRoot, pathRelativeToRoot);
+        const absoluteFilePath = path$1.resolve(projectRoot, pathRelativeToRoot);
         // 判断 file 是否超出 srcDir 目录（支持相对路径和绝对路径）
         if (!absoluteFilePath.startsWith(absoluteSrcDir))
             throw new Error(`入口文件 ${absoluteFilePath} 超出了源代码目录 ${srcDir}`);
-        const pathRelativeToSrc = sysPath.relative(srcDir, absoluteFilePath);
+        const pathRelativeToSrc = path$1.relative(srcDir, absoluteFilePath);
         filesToProcess.push(pathRelativeToSrc);
         matchedFileSet.add(pathRelativeToSrc);
     });
@@ -38046,8 +38279,9 @@ async function collectDeps(patterns, projectRoot, srcDir, logger, verbose) {
             continue;
         }
         try {
-            const { fileInfo, newDeps } = processFileDeps(pathRelativeToSrc, srcDir, matchedFileSet, processedFileMap, depNotFoundList, logger, verbose);
-            result.push(fileInfo);
+            const { fileInfo, newDeps, isExternalDep } = processFileDeps(pathRelativeToSrc, srcDir, matchedFileSet, processedFileMap, depNotFoundList, logger, verbose);
+            !isExternalDep && result.push(fileInfo);
+            mergeExternalRefs(externalRefs, extractExternalRefs(fileInfo.content));
             filesToProcess.push(...newDeps);
         }
         catch (error) {
@@ -38069,7 +38303,7 @@ ${depNotFoundList.map((dep) => `- ${dep}\n`).join('')}
     }
     if (errorMessage)
         throw new Error(errorMessage);
-    return result;
+    return { files: result, externalRefs };
 }
 /**
  * 解析需要处理的文件（包含配置加载和目录设置）
@@ -38077,12 +38311,13 @@ ${depNotFoundList.map((dep) => `- ${dep}\n`).join('')}
  * @returns 文件信息、配置和目录信息
  */
 async function resolveNASLFiles(entry, logger, depMode, verbose) {
+    depMode = true; // !!ensure depMode is true
     // 加载配置
     const config = loadConfig();
     const projectRoot = getProjectRoot();
     logger.info(`项目根目录: ${projectRoot}`);
     logger.info(`源代码目录: ${config.srcDir}`);
-    const srcDir = sysPath.join(projectRoot, config.srcDir);
+    const srcDir = path$1.join(projectRoot, config.srcDir);
     // 收集需要处理的文件
     let collectedFiles = [];
     if (Array.isArray(entry) && !entry.length) {
@@ -38091,8 +38326,12 @@ async function resolveNASLFiles(entry, logger, depMode, verbose) {
             config,
             projectRoot,
             srcDir,
+            externalDependencies: undefined,
         };
     }
+    let externalRefs = null;
+    if (!entry && depMode)
+        entry = 'src/**/app.*.{ts,tsx,css}';
     if (entry) {
         // 检查入口路径是否在源代码目录外面
         // if (entry.startsWith('..')) throw new Error('入口路径不能在源代码目录外面');
@@ -38100,7 +38339,9 @@ async function resolveNASLFiles(entry, logger, depMode, verbose) {
         // 具体路径也转换为 glob 模式统一处理
         // 使用依赖分析收集文件
         try {
-            collectedFiles = await collectDeps(Array.isArray(entry) ? entry : [entry], projectRoot, srcDir, logger, depMode || verbose);
+            const { files, externalRefs: refs } = await collectDeps(Array.isArray(entry) ? entry : [entry], projectRoot, srcDir, logger, depMode || verbose);
+            collectedFiles = files;
+            externalRefs = refs;
         }
         catch (error) {
             logger.error(`依赖分析失败:\n${error.message}`);
@@ -38114,13 +38355,21 @@ async function resolveNASLFiles(entry, logger, depMode, verbose) {
         filePaths.sort(sorter);
         collectedFiles = filePaths.map((filePath) => ({
             path: filePath,
-            content: readFileWithLog(sysPath.join(srcDir, filePath), logger),
+            content: readFileWithLog(path$1.join(srcDir, filePath), logger),
         }));
         if (collectedFiles.length === 0) {
             logger.warn('未找到 NASL 文件');
             logger.exit(1);
         }
         logger.info(`找到 ${collectedFiles.length} 个 NASL 文件`);
+        // 全量扫描时也从文件中提取外部依赖引用
+        externalRefs = {
+            extensions: new Set(),
+            connectors: new Set(),
+            uilibs: new Set(),
+            apis: new Map(),
+        };
+        collectedFiles.forEach((f) => mergeExternalRefs(externalRefs, extractExternalRefs(f.content)));
     }
     // 统一过滤掉不支持的文件类型
     const filteredFiles = [];
@@ -38132,11 +38381,24 @@ async function resolveNASLFiles(entry, logger, depMode, verbose) {
             logger.warn(`跳过不支持的文件类型: ${file.path}`);
         }
     });
+    // 从分析中构建 externalDependencies（版本号从 app.dependencies.json / potential.dependencies.json 获取）
+    let externalDependencies;
+    let mergedDependencies;
+    if (externalRefs && (externalRefs.extensions.size > 0 || externalRefs.connectors.size > 0 || externalRefs.uilibs.size > 0 || externalRefs.apis.size > 0)) {
+        const mergedDeps = loadMergedDependencies(srcDir);
+        externalDependencies = buildExternalDependencies(externalRefs, mergedDeps);
+        const appDeps = loadAppDependencies(srcDir);
+        mergedDependencies = mergeDependenciesIntoApp(appDeps, externalDependencies);
+        logger.debug('已从分析构建 externalDependencies', externalDependencies);
+        logger.debug('已从分析构建 mergedDependencies', mergedDependencies);
+    }
     return {
         collectedFiles: filteredFiles,
         config,
         projectRoot,
         srcDir,
+        externalDependencies,
+        mergedDependencies,
     };
 }
 
@@ -38147,19 +38409,20 @@ async function compile(entry, options) {
     const logger = options?.logger || defaultLogger;
     logger.info('开始编译 NASL 代码...');
     // 收集需要编译的文件
-    const { collectedFiles, config, projectRoot } = await resolveNASLFiles(entry, logger, false, options?.verbose);
+    const { collectedFiles, config, projectRoot, mergedDependencies } = await resolveNASLFiles(entry, logger, false, options?.verbose);
     logger.info(`输出目录: ${config.outDir}`);
-    const outDir = sysPath.join(projectRoot, config.outDir);
+    const outDir = path$1.join(projectRoot, config.outDir);
     // 调用编译 API
     logger.newLine();
     logger.info('正在调用编译服务...');
     try {
-        const fullNaturalTS = composeToString(collectedFiles);
+        let fullNaturalTS = composeToString(collectedFiles);
+        fullNaturalTS = prependDependencies(fullNaturalTS, mergedDependencies);
         const outputFiles = await compileApi(fullNaturalTS, config);
         logger.success('编译成功！');
         // 写入输出文件
         for (const file of outputFiles) {
-            const outputPath = sysPath.join(outDir, file.path);
+            const outputPath = path$1.join(outDir, file.path);
             writeFileWithLog(outputPath, file.content, logger);
         }
         logger.info(`输出 ${outputFiles.length} 个文件`);
@@ -38182,7 +38445,7 @@ async function tryCompile(entry, options) {
     }
 }
 
-var version = "0.2.2";
+var version = "0.3.0";
 var pkg = {
 	version: version};