@nextclaw/app-runtime 0.5.0 → 0.6.0

package/README.md

@@ -11,6 +11,7 @@
 - `napp run <app-dir|app-id>`：启动本地宿主，支持目录运行和已安装应用运行
 - `napp dev <app-dir>`：当前等价于 `run`
 - `napp pack <app-dir>`：把应用目录打成 `.napp` bundle
+- `napp validate-publish <app-dir>`：本地做发布前校验并输出体积/包内容 warning
 - `napp publish <app-dir>`：把应用目录发布到官方 apps registry
 - `napp install <app-dir|bundle.napp|app-id[@version]>`：从本地或 registry 安装应用
 - `napp update <app-id>`：更新已安装应用
@@ -43,8 +44,8 @@ napp --version
 manifest.json
 main/
   app.wasm
-  package.json     # ts-http 模板存在
-  src/             # ts-http 模板存在
+  package.json     # ts-http / ts-http-lite 模板存在
+  src/             # ts-http / ts-http-lite 模板存在
 ui/
   index.html
 assets/
@@ -74,11 +75,22 @@ napp doctor
 napp create ./my-first-napp --template ts-http
 napp build ./my-first-napp --install
 napp inspect ./my-first-napp
+napp validate-publish ./my-first-napp
 napp run ./my-first-napp --data ./my-first-napp/.napp/data
 napp pack ./my-first-napp
 napp publish ./my-first-napp
 ```
 
+体积优先工作流：
+
+```bash
+napp doctor
+napp create ./my-small-napp --template ts-http-lite
+napp build ./my-small-napp --install
+napp validate-publish ./my-small-napp
+napp run ./my-small-napp --data ./my-small-napp/.napp/data
+```
+
 本地安装工作流：
 
 ```bash
@@ -120,6 +132,11 @@ napp permissions nextclaw.my-first-napp
 napp run nextclaw.my-first-napp
 ```
 
+模板选择建议：
+
+- `ts-http`：默认推荐，开发体验优先，适合大多数普通前后端小应用
+- `ts-http-lite`：体积优先，继续走官方 WASI HTTP 路线，但不使用默认 Hono 路由层
+
 已有示例应用：
 
 ```bash

package/dist/bundle/app-bundle.service.js

@@ -10,7 +10,7 @@ var AppBundleService = class {
 	}
 	packAppDirectory = async (params) => {
 		const bundle = await this.manifestService.load(params.appDirectory);
-		const appFiles = await this.collectAppFiles(bundle.appDirectory);
+		const { appFiles, filePaths } = await this.collectAppFiles(bundle);
 		const metadata = this.buildMetadata(bundle.manifest.id, bundle.manifest.name, bundle.manifest.version);
 		const bundleJsonPath = ".napp/bundle.json";
 		const checksumsJsonPath = ".napp/checksums.json";
@@ -30,7 +30,9 @@ var AppBundleService = class {
 		await writeFile(outputPath, Buffer.from(archiveBytes));
 		return {
 			bundlePath: outputPath,
-			metadata
+			metadata,
+			sizeBytes: archiveBytes.byteLength,
+			filePaths
 		};
 	};
 	extractBundle = async (params) => {
@@ -59,15 +61,19 @@ var AppBundleService = class {
 			checksums
 		};
 	};
-	collectAppFiles = async (appDirectory) => {
-		const filePaths = new Set(["manifest.json"]);
-		await this.collectDirectoryPaths(path.join(appDirectory, "main"), appDirectory, filePaths);
-		await this.collectDirectoryPaths(path.join(appDirectory, "ui"), appDirectory, filePaths);
-		await this.collectDirectoryPaths(path.join(appDirectory, "assets"), appDirectory, filePaths);
+	collectAppFiles = async (bundle) => {
+		const appDirectory = bundle.appDirectory;
+		const filePaths = new Set([path.relative(appDirectory, bundle.manifestPath), path.relative(appDirectory, bundle.mainEntryPath)]);
+		await this.collectDirectoryPaths(bundle.uiDirectoryPath, appDirectory, filePaths);
+		await this.collectDirectoryPaths(bundle.assetsDirectoryPath, appDirectory, filePaths);
+		if (bundle.iconPath) filePaths.add(path.relative(appDirectory, bundle.iconPath));
 		const sortedPaths = Array.from(filePaths).sort((left, right) => left.localeCompare(right));
 		const appFiles = {};
 		for (const relativePath of sortedPaths) appFiles[relativePath] = new Uint8Array(await readFile(path.join(appDirectory, relativePath)));
-		return appFiles;
+		return {
+			appFiles,
+			filePaths: sortedPaths
+		};
 	};
 	collectDirectoryPaths = async (directoryPath, appDirectory, filePaths) => {
 		try {

package/dist/bundle/app-bundle.types.d.ts

@@ -14,6 +14,8 @@ type AppBundleChecksums = {
 type AppBundlePackResult = {
   bundlePath: string;
   metadata: AppBundleMetadata;
+  sizeBytes: number;
+  filePaths: string[];
 };
 type AppBundleExtractResult = {
   appDirectory: string;

package/dist/cli/app-runtime-cli.service.d.ts

@@ -14,6 +14,7 @@ declare class AppRuntimeCliService {
   private handleDev;
   private handlePack;
   private handlePublish;
+  private handleValidatePublish;
   private handleInstall;
   private handleUpdate;
   private handleUninstall;

package/dist/cli/app-runtime-cli.service.js

@@ -14,6 +14,7 @@ import { RegistryCommand } from "../commands/registry.controller.js";
 import { RevokeCommand } from "../commands/revoke.controller.js";
 import { UninstallCommand } from "../commands/uninstall.controller.js";
 import { UpdateCommand } from "../commands/update.controller.js";
+import { ValidatePublishCommand } from "../commands/validate-publish.controller.js";
 import { AppRuntimeToolchainService } from "../runtime/app-runtime-toolchain.service.js";
 import { AppBuildService } from "../runtime/app-build.service.js";
 import { AppRuntimeOptionsService } from "./app-runtime-options.service.js";
@@ -64,6 +65,9 @@ var AppRuntimeCliService = class {
 			case "publish":
 				await this.handlePublish(restArgs);
 				return;
+			case "validate-publish":
+				await this.handleValidatePublish(restArgs);
+				return;
 			case "install":
 				await this.handleInstall(restArgs);
 				return;
@@ -203,6 +207,16 @@ var AppRuntimeCliService = class {
 			write: this.write
 		});
 	};
+	handleValidatePublish = async (restArgs) => {
+		const { target, optionArgs } = this.optionsService.readTarget("validate-publish", restArgs);
+		const options = this.optionsService.readPublishOptions(optionArgs);
+		await new ValidatePublishCommand().run({
+			appDirectory: target,
+			metadataPath: options.metadataPath,
+			json: options.json,
+			write: this.write
+		});
+	};
 	handleInstall = async (restArgs) => {
 		const { target, optionArgs } = this.optionsService.readTarget("install", restArgs);
 		const options = this.optionsService.readInstallOptions(optionArgs);
@@ -322,13 +336,14 @@ var AppRuntimeCliService = class {
 		});
 	};
 	writeUsage = () => {
-		this.write("Usage: napp create <app-dir> [--template starter|ts-http] [--json]\n");
+		this.write("Usage: napp create <app-dir> [--template starter|ts-http|ts-http-lite] [--json]\n");
 		this.write("       napp inspect <app-dir> [--json]\n");
 		this.write("       napp build <app-dir> [--install] [--json]\n");
 		this.write("       napp doctor [--json]\n");
 		this.write("       napp <run|dev> <app-dir|app-id> [--host 127.0.0.1] [--port 3100] [--data /path] [--json] [--document scope=/path]\n");
 		this.write("       napp pack <app-dir> [--out bundle.napp] [--json]\n");
 		this.write("       napp publish <app-dir> [--meta marketplace.json] [--api-base <url>] [--token <token>] [--json]\n");
+		this.write("       napp validate-publish <app-dir> [--meta marketplace.json] [--json]\n");
 		this.write("       napp install <app-dir|bundle.napp|app-id[@version]> [--registry <url>] [--json]\n");
 		this.write("       napp update <app-id> [--version <version>] [--registry <url>] [--json]\n");
 		this.write("       napp uninstall <app-id> [--purge-data] [--json]\n");

package/dist/cli/app-runtime-options.service.js

@@ -31,8 +31,8 @@ var AppRuntimeOptionsService = class {
 		return options;
 	};
 	readCreateTemplate = (rawTemplate) => {
-		if (rawTemplate === "starter" || rawTemplate === "ts-http") return rawTemplate;
-		throw new Error("--template 只支持 starter 或 ts-http。");
+		if (rawTemplate === "starter" || rawTemplate === "ts-http" || rawTemplate === "ts-http-lite") return rawTemplate;
+		throw new Error("--template 只支持 starter、ts-http 或 ts-http-lite。");
 	};
 	readPackOptions = (rawArgs) => {
 		const options = { json: false };

package/dist/commands/validate-publish.controller.d.ts

@@ -0,0 +1,15 @@
+import { AppPublishValidationService } from "../publish/app-publish-validation.service.js";
+
+//#region src/commands/validate-publish.controller.d.ts
+declare class ValidatePublishCommand {
+  private readonly validationService;
+  constructor(validationService?: AppPublishValidationService);
+  run: (params: {
+    appDirectory: string;
+    metadataPath?: string;
+    json: boolean;
+    write: (text: string) => void;
+  }) => Promise<void>;
+}
+//#endregion
+export { ValidatePublishCommand };

package/dist/commands/validate-publish.controller.js

@@ -0,0 +1,31 @@
+import { AppPublishValidationService } from "../publish/app-publish-validation.service.js";
+//#region src/commands/validate-publish.controller.ts
+var ValidatePublishCommand = class {
+	constructor(validationService = new AppPublishValidationService()) {
+		this.validationService = validationService;
+	}
+	run = async (params) => {
+		const { appDirectory, metadataPath, json, write } = params;
+		const result = await this.validationService.validate({
+			appDirectory,
+			metadataPath
+		});
+		if (json) {
+			write(`${JSON.stringify({
+				ok: true,
+				validation: result
+			}, null, 2)}\n`);
+			return;
+		}
+		write(`Publish validation ok for ${result.appId}@${result.version}\n`);
+		write(`Main kind: ${result.mainKind}\n`);
+		write(`Main: ${result.mainEntryPath}\n`);
+		write(`Metadata: ${result.metadataPath}\n`);
+		write(`Bundle size: ${result.bundleSizeBytes} bytes\n`);
+		write(`Main entry size: ${result.mainEntrySizeBytes} bytes\n`);
+		write(`Bundle files (${result.bundleFilePaths.length}): ${result.bundleFilePaths.join(", ")}\n`);
+		if (result.warnings.length > 0) for (const warning of result.warnings) write(`Warning [${warning.code}]: ${warning.message}\n`);
+	};
+};
+//#endregion
+export { ValidatePublishCommand };

package/dist/index.d.ts

@@ -11,6 +11,7 @@ import { WasmMainRunnerService } from "./runtime/wasm-main-runner.service.js";
 import { AppInstanceService, AppRunResult } from "./host/app-instance.service.js";
 import { HostBridgeServer } from "./bridge/host-bridge.service.js";
 import { AppScaffoldFile, AppTsHttpScaffoldTemplateService } from "./scaffold/app-ts-http-scaffold-template.service.js";
+import { AppTsHttpLiteScaffoldTemplateService } from "./scaffold/app-ts-http-lite-scaffold-template.service.js";
 import { AppScaffoldResult, AppScaffoldService, AppScaffoldTemplate } from "./scaffold/app-scaffold.service.js";
 import { AppRuntimeOptionsService, BuildCliOptions, CreateCliOptions, GrantCliOptions, InstallCliOptions, JsonOnlyCliOptions, PackCliOptions, PublishCliOptions, RevokeCliOptions, RuntimeCliOptions, UninstallCliOptions, UpdateCliOptions } from "./cli/app-runtime-options.service.js";
 import { AppRuntimeCliService } from "./cli/app-runtime-cli.service.js";
@@ -40,9 +41,11 @@ import { RegistryCommand } from "./commands/registry.controller.js";
 import { RevokeCommand } from "./commands/revoke.controller.js";
 import { UpdateCommand } from "./commands/update.controller.js";
 import { UninstallCommand } from "./commands/uninstall.controller.js";
+import { AppPublishValidationResult, AppPublishValidationService, AppPublishValidationWarning, AppPublishValidationWarningCode } from "./publish/app-publish-validation.service.js";
+import { ValidatePublishCommand } from "./commands/validate-publish.controller.js";
 import { WasmtimeWasiHttpComponentHandle, WasmtimeWasiHttpComponentService, WasmtimeWasiHttpComponentStartOptions } from "./runtime/wasmtime-wasi-http-component.service.js";
 import { AppHostHandle, AppHostService, AppHostStartOptions } from "./host/app-host.service.js";
 import { AppRuntimeCommandResult, AppRuntimeDoctorResult, AppRuntimeToolStatus, AppRuntimeToolchainService } from "./runtime/app-runtime-toolchain.service.js";
 import { AppBuildResult, AppBuildService } from "./runtime/app-build.service.js";
 import { UiServerService } from "./ui/ui-server.service.js";
-export { AppBuildResult, AppBuildService, AppBundleChecksums, AppBundleExtractResult, AppBundleMetadata, AppBundlePackResult, AppBundleService, AppCoreWasmMainManifest, AppDocumentAccessMode, AppDocumentAccessScope, AppDocumentGrantMap, AppDocumentGrantMutationResult, AppDocumentGrantState, AppGrantService, AppHomeService, AppHostHandle, AppHostService, AppHostStartOptions, AppInfoResult, AppInstallResult, AppInstallSourceKind, AppInstallationService, AppInstalledPermissionState, AppInstanceService, AppLaunchResolution, AppMainManifest, AppManifest, AppManifestBundle, AppManifestService, AppManifestSummary, AppMarketplaceClientService, AppMarketplaceMetadata, AppMarketplaceMetadataService, AppPermissionSummary, AppPermissions, AppPermissionsService, AppPublishFile, AppPublishPayload, AppPublishResult, AppPublishService, AppPublisher, AppRegistry, AppRegistryAppRecord, AppRegistryConfig, AppRegistryConfigService, AppRegistryConfigSnapshot, AppRegistryInstalledVersion, AppRegistryService, AppRemoteRegistryClientService, AppRemoteRegistryDocument, AppRemoteRegistryResolution, AppRemoteRegistryVersion, AppRunResult, AppRuntimeCliService, AppRuntimeCommandResult, AppRuntimeDoctorResult, AppRuntimeOptionsService, AppRuntimeToolStatus, AppRuntimeToolchainService, AppScaffoldFile, AppScaffoldResult, AppScaffoldService, AppScaffoldTemplate, AppTsHttpScaffoldTemplateService, AppUiManifest, AppUninstallResult, AppUpdateResult, AppWasiHttpComponentMainManifest, BuildCliOptions, CreateCliOptions, CreateCommand, DEFAULT_APP_MARKETPLACE_API_BASE, DEFAULT_APP_REGISTRY_URL, GrantCliOptions, GrantCommand, HostBridgeServer, InfoCommand, InstallCliOptions, InstallCommand, InstalledAppListItem, JsonOnlyCliOptions, ListCommand, MainRunRequest, MainRunResult, MainRunnerService, PackCliOptions, PackCommand, PermissionsCommand, PlatformAuthStateService, PlatformPublishAuthState, PublishCliOptions, PublishCommand, RegistryCommand, ResolvedDocumentGrant, ResolvedPermissions, RevokeCliOptions, RevokeCommand, RuntimeCliOptions, UiServerService, UninstallCliOptions, UninstallCommand, UpdateCliOptions, UpdateCommand, WasmDocumentSummaryInput, WasmMainRunnerService, WasmSidecarClientService, WasmtimeWasiHttpComponentHandle, WasmtimeWasiHttpComponentService, WasmtimeWasiHttpComponentStartOptions };
+export { AppBuildResult, AppBuildService, AppBundleChecksums, AppBundleExtractResult, AppBundleMetadata, AppBundlePackResult, AppBundleService, AppCoreWasmMainManifest, AppDocumentAccessMode, AppDocumentAccessScope, AppDocumentGrantMap, AppDocumentGrantMutationResult, AppDocumentGrantState, AppGrantService, AppHomeService, AppHostHandle, AppHostService, AppHostStartOptions, AppInfoResult, AppInstallResult, AppInstallSourceKind, AppInstallationService, AppInstalledPermissionState, AppInstanceService, AppLaunchResolution, AppMainManifest, AppManifest, AppManifestBundle, AppManifestService, AppManifestSummary, AppMarketplaceClientService, AppMarketplaceMetadata, AppMarketplaceMetadataService, AppPermissionSummary, AppPermissions, AppPermissionsService, AppPublishFile, AppPublishPayload, AppPublishResult, AppPublishService, AppPublishValidationResult, AppPublishValidationService, AppPublishValidationWarning, AppPublishValidationWarningCode, AppPublisher, AppRegistry, AppRegistryAppRecord, AppRegistryConfig, AppRegistryConfigService, AppRegistryConfigSnapshot, AppRegistryInstalledVersion, AppRegistryService, AppRemoteRegistryClientService, AppRemoteRegistryDocument, AppRemoteRegistryResolution, AppRemoteRegistryVersion, AppRunResult, AppRuntimeCliService, AppRuntimeCommandResult, AppRuntimeDoctorResult, AppRuntimeOptionsService, AppRuntimeToolStatus, AppRuntimeToolchainService, AppScaffoldFile, AppScaffoldResult, AppScaffoldService, AppScaffoldTemplate, AppTsHttpLiteScaffoldTemplateService, AppTsHttpScaffoldTemplateService, AppUiManifest, AppUninstallResult, AppUpdateResult, AppWasiHttpComponentMainManifest, BuildCliOptions, CreateCliOptions, CreateCommand, DEFAULT_APP_MARKETPLACE_API_BASE, DEFAULT_APP_REGISTRY_URL, GrantCliOptions, GrantCommand, HostBridgeServer, InfoCommand, InstallCliOptions, InstallCommand, InstalledAppListItem, JsonOnlyCliOptions, ListCommand, MainRunRequest, MainRunResult, MainRunnerService, PackCliOptions, PackCommand, PermissionsCommand, PlatformAuthStateService, PlatformPublishAuthState, PublishCliOptions, PublishCommand, RegistryCommand, ResolvedDocumentGrant, ResolvedPermissions, RevokeCliOptions, RevokeCommand, RuntimeCliOptions, UiServerService, UninstallCliOptions, UninstallCommand, UpdateCliOptions, UpdateCommand, ValidatePublishCommand, WasmDocumentSummaryInput, WasmMainRunnerService, WasmSidecarClientService, WasmtimeWasiHttpComponentHandle, WasmtimeWasiHttpComponentService, WasmtimeWasiHttpComponentStartOptions };

package/dist/index.js

@@ -2,6 +2,7 @@ import { AppManifestService } from "./manifest/app-manifest.service.js";
 import { AppBundleService } from "./bundle/app-bundle.service.js";
 import { HostBridgeServer } from "./bridge/host-bridge.service.js";
 import { AppTsHttpScaffoldTemplateService } from "./scaffold/app-ts-http-scaffold-template.service.js";
+import { AppTsHttpLiteScaffoldTemplateService } from "./scaffold/app-ts-http-lite-scaffold-template.service.js";
 import { AppScaffoldService } from "./scaffold/app-scaffold.service.js";
 import { CreateCommand } from "./commands/create.controller.js";
 import { UiServerService } from "./ui/ui-server.service.js";
@@ -35,8 +36,10 @@ import { RegistryCommand } from "./commands/registry.controller.js";
 import { RevokeCommand } from "./commands/revoke.controller.js";
 import { UninstallCommand } from "./commands/uninstall.controller.js";
 import { UpdateCommand } from "./commands/update.controller.js";
+import { AppPublishValidationService } from "./publish/app-publish-validation.service.js";
+import { ValidatePublishCommand } from "./commands/validate-publish.controller.js";
 import { AppRuntimeToolchainService } from "./runtime/app-runtime-toolchain.service.js";
 import { AppBuildService } from "./runtime/app-build.service.js";
 import { AppRuntimeOptionsService } from "./cli/app-runtime-options.service.js";
 import { AppRuntimeCliService } from "./cli/app-runtime-cli.service.js";
-export { AppBuildService, AppBundleService, AppGrantService, AppHomeService, AppHostService, AppInstallationService, AppInstanceService, AppManifestService, AppMarketplaceClientService, AppMarketplaceMetadataService, AppPermissionsService, AppPublishService, AppRegistryConfigService, AppRegistryService, AppRemoteRegistryClientService, AppRuntimeCliService, AppRuntimeOptionsService, AppRuntimeToolchainService, AppScaffoldService, AppTsHttpScaffoldTemplateService, CreateCommand, DEFAULT_APP_MARKETPLACE_API_BASE, DEFAULT_APP_REGISTRY_URL, GrantCommand, HostBridgeServer, InfoCommand, InstallCommand, ListCommand, MainRunnerService, PackCommand, PermissionsCommand, PlatformAuthStateService, PublishCommand, RegistryCommand, RevokeCommand, UiServerService, UninstallCommand, UpdateCommand, WasmMainRunnerService, WasmSidecarClientService, WasmtimeWasiHttpComponentService };
+export { AppBuildService, AppBundleService, AppGrantService, AppHomeService, AppHostService, AppInstallationService, AppInstanceService, AppManifestService, AppMarketplaceClientService, AppMarketplaceMetadataService, AppPermissionsService, AppPublishService, AppPublishValidationService, AppRegistryConfigService, AppRegistryService, AppRemoteRegistryClientService, AppRuntimeCliService, AppRuntimeOptionsService, AppRuntimeToolchainService, AppScaffoldService, AppTsHttpLiteScaffoldTemplateService, AppTsHttpScaffoldTemplateService, CreateCommand, DEFAULT_APP_MARKETPLACE_API_BASE, DEFAULT_APP_REGISTRY_URL, GrantCommand, HostBridgeServer, InfoCommand, InstallCommand, ListCommand, MainRunnerService, PackCommand, PermissionsCommand, PlatformAuthStateService, PublishCommand, RegistryCommand, RevokeCommand, UiServerService, UninstallCommand, UpdateCommand, ValidatePublishCommand, WasmMainRunnerService, WasmSidecarClientService, WasmtimeWasiHttpComponentService };

package/dist/package.js

@@ -1,4 +1,4 @@
 //#region package.json
-var version = "0.5.0";
+var version = "0.6.0";
 //#endregion
 export { version };

package/dist/publish/app-publish-validation.service.d.ts

@@ -0,0 +1,37 @@
+import { AppManifestService } from "../manifest/app-manifest.service.js";
+import { AppBundleService } from "../bundle/app-bundle.service.js";
+import { AppMarketplaceMetadataService } from "./app-marketplace-metadata.service.js";
+
+//#region src/publish/app-publish-validation.service.d.ts
+type AppPublishValidationWarningCode = "main-entry-large" | "bundle-large";
+type AppPublishValidationWarning = {
+  code: AppPublishValidationWarningCode;
+  message: string;
+};
+type AppPublishValidationResult = {
+  ok: boolean;
+  appDirectory: string;
+  metadataPath: string;
+  appId: string;
+  version: string;
+  mainKind: string;
+  mainEntryPath: string;
+  mainEntrySizeBytes: number;
+  bundleSizeBytes: number;
+  bundleFilePaths: string[];
+  warnings: AppPublishValidationWarning[];
+};
+declare class AppPublishValidationService {
+  private readonly manifestService;
+  private readonly metadataService;
+  private readonly bundleService;
+  constructor(manifestService?: AppManifestService, metadataService?: AppMarketplaceMetadataService, bundleService?: AppBundleService);
+  validate: (params: {
+    appDirectory: string;
+    metadataPath?: string;
+  }) => Promise<AppPublishValidationResult>;
+  private buildWarnings;
+  private formatBytes;
+}
+//#endregion
+export { AppPublishValidationResult, AppPublishValidationService, AppPublishValidationWarning, AppPublishValidationWarningCode };

package/dist/publish/app-publish-validation.service.js

@@ -0,0 +1,76 @@
+import { AppManifestService } from "../manifest/app-manifest.service.js";
+import { AppBundleService } from "../bundle/app-bundle.service.js";
+import { AppMarketplaceMetadataService } from "./app-marketplace-metadata.service.js";
+import { mkdtemp, rm, stat } from "node:fs/promises";
+import path from "node:path";
+import { tmpdir } from "node:os";
+//#region src/publish/app-publish-validation.service.ts
+const MAIN_ENTRY_WARN_BYTES = 10 * 1024 * 1024;
+const BUNDLE_WARN_BYTES = 5 * 1024 * 1024;
+var AppPublishValidationService = class {
+	constructor(manifestService = new AppManifestService(), metadataService = new AppMarketplaceMetadataService(), bundleService = new AppBundleService()) {
+		this.manifestService = manifestService;
+		this.metadataService = metadataService;
+		this.bundleService = bundleService;
+	}
+	validate = async (params) => {
+		const appDirectory = path.resolve(params.appDirectory);
+		const bundle = await this.manifestService.load(appDirectory);
+		const metadataPath = params.metadataPath ? path.resolve(params.metadataPath) : path.join(appDirectory, "marketplace.json");
+		await this.metadataService.load({
+			appDirectory,
+			manifest: bundle.manifest,
+			metadataPath
+		});
+		const tempDirectory = await mkdtemp(path.join(tmpdir(), "napp-validate-publish-"));
+		try {
+			const packResult = await this.bundleService.packAppDirectory({
+				appDirectory,
+				outputPath: path.join(tempDirectory, `${bundle.manifest.id}-${bundle.manifest.version}.napp`)
+			});
+			const mainEntryStats = await stat(bundle.mainEntryPath);
+			const warnings = this.buildWarnings({
+				mainEntrySizeBytes: mainEntryStats.size,
+				bundleSizeBytes: packResult.sizeBytes
+			});
+			return {
+				ok: true,
+				appDirectory,
+				metadataPath,
+				appId: bundle.manifest.id,
+				version: bundle.manifest.version,
+				mainKind: bundle.manifest.main.kind,
+				mainEntryPath: bundle.mainEntryPath,
+				mainEntrySizeBytes: mainEntryStats.size,
+				bundleSizeBytes: packResult.sizeBytes,
+				bundleFilePaths: packResult.filePaths,
+				warnings
+			};
+		} finally {
+			await rm(tempDirectory, {
+				recursive: true,
+				force: true
+			});
+		}
+	};
+	buildWarnings = (params) => {
+		const { bundleSizeBytes, mainEntrySizeBytes } = params;
+		const warnings = [];
+		if (mainEntrySizeBytes > MAIN_ENTRY_WARN_BYTES) warnings.push({
+			code: "main-entry-large",
+			message: `main entry is ${this.formatBytes(mainEntrySizeBytes)}, which is larger than the ${this.formatBytes(MAIN_ENTRY_WARN_BYTES)} warning threshold.`
+		});
+		if (bundleSizeBytes > BUNDLE_WARN_BYTES) warnings.push({
+			code: "bundle-large",
+			message: `packed .napp is ${this.formatBytes(bundleSizeBytes)}, which is larger than the ${this.formatBytes(BUNDLE_WARN_BYTES)} warning threshold.`
+		});
+		return warnings;
+	};
+	formatBytes = (value) => {
+		if (value < 1024) return `${value} B`;
+		if (value < 1024 * 1024) return `${(value / 1024).toFixed(1)} KB`;
+		return `${(value / (1024 * 1024)).toFixed(1)} MB`;
+	};
+};
+//#endregion
+export { AppPublishValidationService };

package/dist/scaffold/app-scaffold.service.d.ts

@@ -1,7 +1,8 @@
 import { AppTsHttpScaffoldTemplateService } from "./app-ts-http-scaffold-template.service.js";
+import { AppTsHttpLiteScaffoldTemplateService } from "./app-ts-http-lite-scaffold-template.service.js";
 
 //#region src/scaffold/app-scaffold.service.d.ts
-type AppScaffoldTemplate = "starter" | "ts-http";
+type AppScaffoldTemplate = "starter" | "ts-http" | "ts-http-lite";
 type AppScaffoldResult = {
   appDirectory: string;
   manifestPath: string;
@@ -9,7 +10,8 @@ type AppScaffoldResult = {
 };
 declare class AppScaffoldService {
   private readonly tsHttpTemplateService;
-  constructor(tsHttpTemplateService?: AppTsHttpScaffoldTemplateService);
+  private readonly tsHttpLiteTemplateService;
+  constructor(tsHttpTemplateService?: AppTsHttpScaffoldTemplateService, tsHttpLiteTemplateService?: AppTsHttpLiteScaffoldTemplateService);
   scaffold: (targetDirectory: string, options?: {
     template?: AppScaffoldTemplate;
   }) => Promise<AppScaffoldResult>;

package/dist/scaffold/app-scaffold.service.js

@@ -1,10 +1,12 @@
 import { AppTsHttpScaffoldTemplateService } from "./app-ts-http-scaffold-template.service.js";
+import { AppTsHttpLiteScaffoldTemplateService } from "./app-ts-http-lite-scaffold-template.service.js";
 import { access, mkdir, writeFile } from "node:fs/promises";
 import path from "node:path";
 //#region src/scaffold/app-scaffold.service.ts
 var AppScaffoldService = class {
-	constructor(tsHttpTemplateService = new AppTsHttpScaffoldTemplateService()) {
+	constructor(tsHttpTemplateService = new AppTsHttpScaffoldTemplateService(), tsHttpLiteTemplateService = new AppTsHttpLiteScaffoldTemplateService()) {
 		this.tsHttpTemplateService = tsHttpTemplateService;
+		this.tsHttpLiteTemplateService = tsHttpLiteTemplateService;
 	}
 	scaffold = async (targetDirectory, options) => {
 		const appDirectory = path.resolve(targetDirectory);
@@ -27,6 +29,17 @@ var AppScaffoldService = class {
 				template
 			};
 		}
+		if (template === "ts-http-lite") {
+			await this.writeTemplateFiles(appDirectory, this.tsHttpLiteTemplateService.buildFiles({
+				appId,
+				appName
+			}));
+			return {
+				appDirectory,
+				manifestPath,
+				template
+			};
+		}
 		await Promise.all([
 			writeFile(manifestPath, `${JSON.stringify(this.buildManifest(appId, appName), null, 2)}\n`, "utf-8"),
 			writeFile(path.join(appDirectory, "marketplace.json"), `${JSON.stringify(this.buildMarketplaceMetadata(appName), null, 2)}\n`, "utf-8"),

package/dist/scaffold/app-ts-http-lite-scaffold-template.service.d.ts

@@ -0,0 +1,18 @@
+import { AppScaffoldFile, AppTsHttpScaffoldTemplateService } from "./app-ts-http-scaffold-template.service.js";
+
+//#region src/scaffold/app-ts-http-lite-scaffold-template.service.d.ts
+declare class AppTsHttpLiteScaffoldTemplateService {
+  private readonly standardTemplateService;
+  constructor(standardTemplateService?: AppTsHttpScaffoldTemplateService);
+  buildFiles: (params: {
+    appId: string;
+    appName: string;
+  }) => AppScaffoldFile[];
+  private buildMainPackageJson;
+  private buildMarketplaceMetadata;
+  private buildReadme;
+  private buildComponentSource;
+  private normalizeSlug;
+}
+//#endregion
+export { AppTsHttpLiteScaffoldTemplateService };

package/dist/scaffold/app-ts-http-lite-scaffold-template.service.js

@@ -0,0 +1,267 @@
+import { AppTsHttpScaffoldTemplateService } from "./app-ts-http-scaffold-template.service.js";
+//#region src/scaffold/app-ts-http-lite-scaffold-template.service.ts
+var AppTsHttpLiteScaffoldTemplateService = class {
+	constructor(standardTemplateService = new AppTsHttpScaffoldTemplateService()) {
+		this.standardTemplateService = standardTemplateService;
+	}
+	buildFiles = (params) => {
+		return this.standardTemplateService.buildFiles(params).map((file) => {
+			switch (file.relativePath) {
+				case "marketplace.json": return {
+					relativePath: file.relativePath,
+					content: `${JSON.stringify(this.buildMarketplaceMetadata(params.appName), null, 2)}\n`
+				};
+				case "README.md": return {
+					relativePath: file.relativePath,
+					content: this.buildReadme(params.appName, params.appId)
+				};
+				case "main/package.json": return {
+					relativePath: file.relativePath,
+					content: `${JSON.stringify(this.buildMainPackageJson(params.appId), null, 2)}\n`
+				};
+				case "main/src/component.ts": return {
+					relativePath: file.relativePath,
+					content: this.buildComponentSource()
+				};
+				default: return file;
+			}
+		});
+	};
+	buildMainPackageJson = (appId) => {
+		return {
+			name: `${appId.replace(/\./g, "-")}-main`,
+			version: "0.1.0",
+			private: true,
+			type: "module",
+			scripts: {
+				build: "npm run prepare-wit && npm run guest-types && npm run typecheck && npm run bundle && npm run componentize",
+				"prepare-wit": "wkg wit fetch",
+				"guest-types": "jco guest-types wit --world-name napp-http --out-dir generated/types",
+				typecheck: "tsc --noEmit",
+				bundle: "rolldown -c",
+				componentize: "jco componentize -w wit -n napp-http -o app.wasm dist/component.js"
+			},
+			dependencies: { "@bytecodealliance/jco-std": "^0.1.3" },
+			devDependencies: {
+				"@bytecodealliance/componentize-js": "^0.20.0",
+				"@bytecodealliance/jco": "^1.19.0",
+				rolldown: "^1.0.0-rc.17",
+				typescript: "^5.6.3"
+			}
+		};
+	};
+	buildMarketplaceMetadata = (appName) => {
+		return {
+			slug: this.normalizeSlug(appName),
+			summary: `A lightweight TypeScript WASI HTTP ${appName} scaffold created by napp.`,
+			summaryI18n: {
+				en: `A lightweight TypeScript WASI HTTP ${appName} scaffold created by napp.`,
+				zh: `一个由 napp 创建的轻量 TypeScript WASI HTTP ${appName} 应用骨架。`
+			},
+			description: `A lightweight TypeScript NApp scaffold for ${appName}, designed to keep the WASI HTTP backend smaller than the default Hono-based template.`,
+			descriptionI18n: {
+				en: `A lightweight TypeScript NApp scaffold for ${appName}, designed to keep the WASI HTTP backend smaller than the default Hono-based template.`,
+				zh: `一个面向 ${appName} 的轻量 TypeScript NApp 应用骨架，用更薄的 WASI HTTP handler 替代默认的 Hono 模板，优先追求更小包体。`
+			},
+			author: "NextClaw",
+			tags: [
+				"starter",
+				"typescript",
+				"wasi-http",
+				"official",
+				"lite"
+			],
+			sourceRepo: "https://github.com/Peiiii/nextclaw",
+			homepage: "https://nextclaw.io",
+			featured: false
+		};
+	};
+	buildReadme = (appName, appId) => {
+		return `# ${appName}
+
+This app was created by \`napp create --template ts-http-lite\`.
+
+It keeps the existing NApp directory contract, while making \`main/app.wasm\` a lighter WASI HTTP component without the default Hono routing layer.
+
+## App ID
+
+\`${appId}\`
+
+## Build the TypeScript backend
+
+Recommended:
+
+\`\`\`bash
+napp build . --install
+\`\`\`
+
+Manual equivalent:
+
+\`\`\`bash
+cd main
+npm install
+npm run build
+\`\`\`
+
+The build writes the backend component to:
+
+\`\`\`text
+main/app.wasm
+\`\`\`
+
+## Local workflow
+
+\`\`\`bash
+napp inspect .
+napp validate-publish .
+napp run . --data ./data
+\`\`\`
+
+The runtime mounts the host data directory to guest \`/data\`. This example stores todos in:
+
+\`\`\`text
+./data/todos.json
+\`\`\`
+
+The frontend still uses ordinary same-origin HTTP:
+
+\`\`\`js
+await fetch("/api/todos");
+\`\`\`
+`;
+	};
+	buildComponentSource = () => {
+		return `import { fire, incomingHandler } from "@bytecodealliance/jco-std/wasi/0.2.6/http/adapters/hono/server";
+import { getDirectories } from "wasi:filesystem/preopens@0.2.2";
+
+type Todo = {
+  id: string;
+  title: string;
+  completed: boolean;
+};
+
+type TodoInput = {
+  title?: string;
+};
+
+const TODOS_FILE = "todos.json";
+const encoder = new TextEncoder();
+const decoder = new TextDecoder();
+const app = {
+  fetch: (request: Request): Promise<Response> => routeRequest(request),
+};
+
+fire(app as never);
+
+export { incomingHandler };
+
+async function routeRequest(request: Request): Promise<Response> {
+  const url = new URL(request.url);
+  const pathname = url.pathname;
+
+  if (request.method === "GET" && pathname === "/api/todos") {
+    return json(loadTodos());
+  }
+
+  if (request.method === "POST" && pathname === "/api/todos") {
+    const input = await request.json() as TodoInput;
+    if (!input.title?.trim()) {
+      return json({ error: "title is required" }, 400);
+    }
+    const todos = loadTodos();
+    todos.push({
+      id: crypto.randomUUID(),
+      title: input.title.trim(),
+      completed: false,
+    });
+    saveTodos(todos);
+    return json(todos);
+  }
+
+  if (request.method === "PATCH" && pathname.startsWith("/api/todos/")) {
+    const todoId = pathname.slice("/api/todos/".length);
+    const input = await request.json() as Partial<Todo>;
+    const todos = loadTodos();
+    const todo = todos.find((entry) => entry.id === todoId);
+    if (!todo) {
+      return json({ error: "todo not found" }, 404);
+    }
+    if (typeof input.title === "string") {
+      todo.title = input.title;
+    }
+    if (typeof input.completed === "boolean") {
+      todo.completed = input.completed;
+    }
+    saveTodos(todos);
+    return json(todos);
+  }
+
+  if (request.method === "DELETE" && pathname.startsWith("/api/todos/")) {
+    const todoId = pathname.slice("/api/todos/".length);
+    const nextTodos = loadTodos().filter((entry) => entry.id !== todoId);
+    saveTodos(nextTodos);
+    return json(nextTodos);
+  }
+
+  return text("Not found", 404);
+}
+
+function json(value: unknown, status = 200): Response {
+  return new Response(JSON.stringify(value), {
+    status,
+    headers: {
+      "content-type": "application/json; charset=utf-8",
+    },
+  });
+}
+
+function text(value: string, status = 200): Response {
+  return new Response(value, { status });
+}
+
+function loadTodos(): Todo[] {
+  const file = openTodosFile({ read: true });
+  if (!file) {
+    return [];
+  }
+  const [bytes] = file.read(BigInt(1024 * 1024), BigInt(0));
+  if (bytes.length === 0) {
+    return [];
+  }
+  return JSON.parse(decoder.decode(bytes)) as Todo[];
+}
+
+function saveTodos(todos: Todo[]): void {
+  const file = getDataDirectory().openAt(
+    { symlinkFollow: true },
+    TODOS_FILE,
+    { create: true, truncate: true },
+    { write: true },
+  );
+  file.write(encoder.encode(JSON.stringify(todos, null, 2)), BigInt(0));
+}
+
+function openTodosFile(flags: { read?: boolean; write?: boolean }) {
+  try {
+    return getDataDirectory().openAt({ symlinkFollow: true }, TODOS_FILE, {}, flags);
+  } catch {
+    return undefined;
+  }
+}
+
+function getDataDirectory() {
+  for (const [descriptor, guestPath] of getDirectories()) {
+    if (guestPath === "/data") {
+      return descriptor;
+    }
+  }
+  throw new Error("Missing /data preopen. NApp runtime must mount the app data directory at /data.");
+}
+`;
+	};
+	normalizeSlug = (value) => {
+		return value.trim().toLowerCase().replace(/[^a-z0-9]+/g, "-").replace(/^-+|-+$/g, "");
+	};
+};
+//#endregion
+export { AppTsHttpLiteScaffoldTemplateService };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@nextclaw/app-runtime",
-  "version": "0.5.0",
+  "version": "0.6.0",
   "private": false,
   "description": "Standalone micro app runtime and CLI for NextClaw apps.",
   "type": "module",