@ones-open/cli 1.0.1-5596.1908 → 1.0.1-8888.1931

package/dist/index.cjs

@@ -14,10 +14,9 @@ const cosmiconfig = require("cosmiconfig");
 const fse = require("fs-extra");
 const envPaths = require("env-paths");
 const zod = require("zod");
-const _defineProperty = require("@babel/runtime-corejs3/helpers/defineProperty");
-const WebSocket = require("ws");
 const axios = require("axios");
 const _reduceInstanceProperty = require("@babel/runtime-corejs3/core-js-stable/instance/reduce");
+const WebSocket = require("ws");
 const http = require("node:http");
 const ora = require("ora");
 const open = require("open");
@@ -222,7 +221,11 @@ const build = async function() {
   if ((_appPackageJSON$scrip = appPackageJSON.scripts) !== null && _appPackageJSON$scrip !== void 0 && _appPackageJSON$scrip.build) {
     node_child_process.spawnSync("npm", ["run", "build"], {
       cwd: getAppWorkspacePath(),
-      stdio: "inherit"
+      stdio: "inherit",
+      env: {
+        ...process.env,
+        NODE_ENV: "production"
+      }
     });
   } else {
     return createOnesApp.throwError(ErrorCode.BUILD_SCRIPT_NOT_FOUND, i18n.t("error.build.scriptNotFound"));
@@ -272,109 +275,6 @@ const config = {
   }
 };
 const getConfig = () => config;
-var InstallOptions = /* @__PURE__ */ ((InstallOptions2) => {
-  InstallOptions2["AUTO"] = "auto";
-  InstallOptions2["TRUE"] = "true";
-  InstallOptions2["FALSE"] = "false";
-  return InstallOptions2;
-})(InstallOptions || {});
-const defaultInstall = InstallOptions.AUTO;
-const normalize$9 = async (options) => {
-  var _options$install;
-  let install2 = (_options$install = options.install) !== null && _options$install !== void 0 ? _options$install : defaultInstall;
-  switch (true) {
-    case install2 === InstallOptions.AUTO:
-      break;
-    case Boolean(install2):
-      install2 = InstallOptions.TRUE;
-      break;
-    default:
-      install2 = InstallOptions.FALSE;
-      break;
-  }
-  return {
-    install: install2
-  };
-};
-const dev = async function() {
-  var _appPackageJSON$scrip;
-  for (var _len = arguments.length, args = new Array(_len), _key = 0; _key < _len; _key++) {
-    args[_key] = arguments[_key];
-  }
-  const {
-    options
-  } = createOnesApp.getCommandOptions(args, devCommandArguments);
-  const normalizedOptions = await normalize$9(options);
-  const appPackageJSON = getAppPackageJSON();
-  const appManifestJSON = getAppManifestJSON();
-  const appRcJSON = getAppRcJSON();
-  lodashEs.noop(appManifestJSON);
-  lodashEs.noop(appRcJSON);
-  if (!((_appPackageJSON$scrip = appPackageJSON.scripts) !== null && _appPackageJSON$scrip !== void 0 && _appPackageJSON$scrip.dev)) {
-    return createOnesApp.throwError(ErrorCode.DEV_SCRIPT_NOT_FOUND, i18n.t("error.dev.scriptNotFound"));
-  }
-  const port = getConfig().defaultPort.tunnel;
-  const cwd = getAppWorkspacePath();
-  const env = {
-    ...process.env,
-    ONES_HOSTED_PORT: `${port}`
-  };
-  const tunnelChild = node_child_process.spawn("ones", ["tunnel", String(port)], {
-    cwd,
-    stdio: "inherit"
-  });
-  const devChild = node_child_process.spawn("npm", ["run", "dev"], {
-    cwd,
-    stdio: "inherit",
-    env
-  });
-  const cleanup = () => {
-    tunnelChild.kill();
-    devChild.kill();
-  };
-  const onSignal = () => {
-    cleanup();
-    process.exit(128 + 2);
-  };
-  process.on("SIGINT", onSignal);
-  process.on("SIGTERM", onSignal);
-  if (normalizedOptions.install) {
-    lodashEs.noop(normalizedOptions.install);
-  }
-  await new Promise((resolve) => {
-    devChild.on("exit", () => {
-      cleanup();
-      process.off("SIGINT", onSignal);
-      process.off("SIGTERM", onSignal);
-      resolve();
-    });
-  });
-};
-const isPortNumber = /^[1-9]\d{0,4}$/;
-const minPortNumber = 1;
-const maxPortNumber = 65535;
-const normalize$8 = async (options) => {
-  const portInput = options.port;
-  if (portInput)
-    ;
-  else {
-    return createOnesApp.throwError(ErrorCode.MISSING_PORT, i18n.t("error.tunnel.missingPort"));
-  }
-  const portString = String(portInput);
-  const portNumber = Number(portString);
-  if (isPortNumber.test(portString))
-    ;
-  else {
-    return createOnesApp.throwError(ErrorCode.INCORRECT_PORT, i18n.t("error.tunnel.incorrectPort"));
-  }
-  if (portNumber < minPortNumber || portNumber > maxPortNumber) {
-    return createOnesApp.throwError(ErrorCode.INCORRECT_PORT, i18n.t("error.tunnel.incorrectPort"));
-  }
-  const port = portString;
-  return {
-    port
-  };
-};
 const StoreJSONSchema = zod.z.object({
   version: zod.z.string().optional(),
   timestamp: zod.z.number().optional(),
@@ -476,61 +376,234 @@ const setONESToken = async (token) => {
     ones_token: token
   });
 };
-class TunnelClient {
-  constructor(localPort, baseUrl, appID, hostedToken) {
-    _defineProperty(this, "ws", null);
-    this.localPort = localPort;
-    this.baseUrl = baseUrl;
-    this.appID = appID;
-    this.hostedToken = hostedToken;
-  }
-  async connect() {
-    const proxyUrl = this.buildProxyUrl();
-    this.ws = new WebSocket(proxyUrl, {
-      headers: {
-        Authorization: `Bearer ${this.hostedToken}`
-      }
-    });
-    this.ws.on("message", async (data) => {
-      const message = this.parseMessage(data);
-      if (!message) {
-        return;
-      }
-      await this.handleMessage(message);
-    });
-    this.ws.on("ping", (data) => {
-      var _this$ws;
-      (_this$ws = this.ws) === null || _this$ws === void 0 || _this$ws.pong(data);
-    });
-    this.ws.on("error", (error) => {
-      console.error("WebSocket error:", error);
-    });
-    return new Promise((resolve, reject) => {
-      var _this$ws2, _this$ws3;
-      (_this$ws2 = this.ws) === null || _this$ws2 === void 0 || _this$ws2.on("open", () => resolve());
-      (_this$ws3 = this.ws) === null || _this$ws3 === void 0 || _this$ws3.on("error", reject);
-    });
+const getHostToken = async () => {
+  var _store$host_token;
+  const store = await getStore();
+  return (_store$host_token = store.host_token) !== null && _store$host_token !== void 0 ? _store$host_token : "";
+};
+const API = {
+  TOKEN_INFO: "/project/api/project/auth/token_info",
+  HOSTED_TOKEN: "/platform/runtime_manager/hosted_token",
+  APP_LIST: "/platform/api/app/list",
+  APP_INSTALL: "/platform/api/app/install",
+  APP_UPGRADE: "/platform/api/app/upgrade",
+  APP_UNINSTALL: "/platform/api/app/:installation_id/uninstall",
+  APP_ENABLE: "/platform/api/app/:installation_id/enable",
+  APP_DISABLE: "/platform/api/app/:installation_id/disable"
+};
+const getPath = (path, map2) => {
+  var _context;
+  return _reduceInstanceProperty(_context = path.split("/")).call(_context, (base, part) => {
+    if (/^:/.test(part)) {
+      return `${base}/${map2[part.slice(1)]}`;
+    }
+    return `${base}/${part}`;
+  }, "").slice(1);
+};
+const consoleUnauthorizedMessage = () => {
+  console.log("Not logged in");
+  console.log('Login with "ones login" command');
+};
+const getURL = async (path, pathMap, queryMap) => {
+  const base = await getRegionURL();
+  if (base) {
+    const query = new URLSearchParams(queryMap !== null && queryMap !== void 0 ? queryMap : {}).toString();
+    return `${base}${getPath(path, pathMap !== null && pathMap !== void 0 ? pathMap : {})}${query ? `?${query}` : ""}`;
   }
-  close() {
-    var _this$ws4;
-    (_this$ws4 = this.ws) === null || _this$ws4 === void 0 || _this$ws4.close();
+  consoleUnauthorizedMessage();
+  process$1.exit(1);
+};
+const getHeaders = async (value) => {
+  const token = await getONESToken();
+  if (token) {
+    return lodashEs.merge({
+      Authorization: `Bearer ${token}`
+    }, value);
   }
-  buildProxyUrl() {
-    const url = new URL("/platform/app/relay/", this.baseUrl);
-    url.protocol = url.protocol === "https:" ? "wss:" : "ws:";
-    url.searchParams.set("app_id", this.appID);
-    return url.toString();
+  consoleUnauthorizedMessage();
+  process$1.exit(1);
+};
+const handleError = (error) => {
+  var _error$response;
+  if (((_error$response = error.response) === null || _error$response === void 0 ? void 0 : _error$response.status) === 401) {
+    console.log(error.response.statusText);
+    consoleUnauthorizedMessage();
+  } else {
+    console.error(error);
   }
-  parseMessage(data) {
-    const buffer = this.toBuffer(data);
-    if (!buffer) {
-      return null;
+  return {};
+};
+const fetchAppBase = async (params) => {
+  var _params$url;
+  const url = await getURL((_params$url = params.url) !== null && _params$url !== void 0 ? _params$url : "", params.pathMap, params.queryMap);
+  const headers = await getHeaders(params.headers);
+  const response = await axios({
+    ...params,
+    url,
+    headers
+  });
+  return response.data;
+};
+const fetchAppList = async (appID) => {
+  return await fetchAppBase({
+    url: API.APP_LIST,
+    method: "GET",
+    queryMap: {
+      app_id: appID
     }
-    if (buffer.length >= 4) {
-      const binary = this.parseBinaryEnvelope(buffer);
-      if (binary) {
-        return binary;
-      }
+  }).catch(handleError);
+};
+const fetchTokenInfo = async () => {
+  return await fetchAppBase({
+    url: API.TOKEN_INFO,
+    method: "GET"
+  }).catch(handleError);
+};
+const fetchHostedToken = async (data) => {
+  return await fetchAppBase({
+    url: API.HOSTED_TOKEN,
+    method: "POST",
+    data
+  }).catch(handleError);
+};
+const fetchAppInstall = async (data) => {
+  var _appList$data$0$insta, _appList$data;
+  const appID = getAppManifestJSON().app.id;
+  const appList = await fetchAppList(appID);
+  const installationID = (_appList$data$0$insta = (_appList$data = appList.data) === null || _appList$data === void 0 || (_appList$data = _appList$data[0]) === null || _appList$data === void 0 ? void 0 : _appList$data.installation_id) !== null && _appList$data$0$insta !== void 0 ? _appList$data$0$insta : "";
+  const url = installationID ? API.APP_UPGRADE : API.APP_INSTALL;
+  return await fetchAppBase({
+    url,
+    method: "POST",
+    data
+  }).catch(handleError);
+};
+const fetchAppUninstall = async () => {
+  var _appList$data$0$insta2, _appList$data2;
+  const appID = getAppManifestJSON().app.id;
+  const appList = await fetchAppList(appID);
+  const installationID = (_appList$data$0$insta2 = (_appList$data2 = appList.data) === null || _appList$data2 === void 0 || (_appList$data2 = _appList$data2[0]) === null || _appList$data2 === void 0 ? void 0 : _appList$data2.installation_id) !== null && _appList$data$0$insta2 !== void 0 ? _appList$data$0$insta2 : "";
+  return await fetchAppBase({
+    url: API.APP_UNINSTALL,
+    method: "POST",
+    pathMap: {
+      installation_id: installationID
+    }
+  }).catch(handleError);
+};
+const fetchAppEnable = async () => {
+  var _appList$data$0$insta3, _appList$data3;
+  const appID = getAppManifestJSON().app.id;
+  const appList = await fetchAppList(appID);
+  const installationID = (_appList$data$0$insta3 = (_appList$data3 = appList.data) === null || _appList$data3 === void 0 || (_appList$data3 = _appList$data3[0]) === null || _appList$data3 === void 0 ? void 0 : _appList$data3.installation_id) !== null && _appList$data$0$insta3 !== void 0 ? _appList$data$0$insta3 : "";
+  return await fetchAppBase({
+    url: API.APP_ENABLE,
+    method: "POST",
+    pathMap: {
+      installation_id: installationID
+    }
+  }).catch(handleError);
+};
+const fetchAppDisable = async () => {
+  var _appList$data$0$insta4, _appList$data4;
+  const appID = getAppManifestJSON().app.id;
+  const appList = await fetchAppList(appID);
+  const installationID = (_appList$data$0$insta4 = (_appList$data4 = appList.data) === null || _appList$data4 === void 0 || (_appList$data4 = _appList$data4[0]) === null || _appList$data4 === void 0 ? void 0 : _appList$data4.installation_id) !== null && _appList$data$0$insta4 !== void 0 ? _appList$data$0$insta4 : "";
+  return await fetchAppBase({
+    url: API.APP_DISABLE,
+    method: "POST",
+    pathMap: {
+      installation_id: installationID
+    }
+  }).catch(handleError);
+};
+const isPortNumber = /^[1-9]\d{0,4}$/;
+const minPortNumber = 1;
+const maxPortNumber = 65535;
+const normalize$9 = async (options) => {
+  const portInput = options.port;
+  if (portInput)
+    ;
+  else {
+    return createOnesApp.throwError(ErrorCode.MISSING_PORT, i18n.t("error.tunnel.missingPort"));
+  }
+  const portString = String(portInput);
+  const portNumber = Number(portString);
+  if (isPortNumber.test(portString))
+    ;
+  else {
+    return createOnesApp.throwError(ErrorCode.INCORRECT_PORT, i18n.t("error.tunnel.incorrectPort"));
+  }
+  if (portNumber < minPortNumber || portNumber > maxPortNumber) {
+    return createOnesApp.throwError(ErrorCode.INCORRECT_PORT, i18n.t("error.tunnel.incorrectPort"));
+  }
+  const port = portString;
+  return {
+    port
+  };
+};
+const MAX_RELAY_BODY_BYTES = 64 * 1024 * 1024;
+class TunnelClient {
+  constructor(localPort, baseUrl, appID, hostedToken) {
+    let enableInternalManifestRoute = arguments.length > 4 && arguments[4] !== void 0 ? arguments[4] : true;
+    let replaceExisting = arguments.length > 5 && arguments[5] !== void 0 ? arguments[5] : true;
+    this.ws = null;
+    this.localPort = localPort;
+    this.baseUrl = baseUrl;
+    this.appID = appID;
+    this.hostedToken = hostedToken;
+    this.enableInternalManifestRoute = enableInternalManifestRoute;
+    this.replaceExisting = replaceExisting;
+  }
+  async connect() {
+    const proxyUrl = this.buildProxyUrl();
+    this.ws = new WebSocket(proxyUrl, {
+      headers: {
+        Authorization: `Bearer ${this.hostedToken}`
+      },
+      maxPayload: MAX_RELAY_BODY_BYTES
+    });
+    this.ws.on("message", async (data) => {
+      const message = this.parseMessage(data);
+      if (!message) {
+        return;
+      }
+      await this.handleMessage(message);
+    });
+    this.ws.on("ping", (data) => {
+      var _this$ws;
+      (_this$ws = this.ws) === null || _this$ws === void 0 || _this$ws.pong(data);
+    });
+    this.ws.on("error", (error) => {
+      console.error("WebSocket error:", error);
+    });
+    return new Promise((resolve, reject) => {
+      var _this$ws2, _this$ws3;
+      (_this$ws2 = this.ws) === null || _this$ws2 === void 0 || _this$ws2.on("open", () => resolve());
+      (_this$ws3 = this.ws) === null || _this$ws3 === void 0 || _this$ws3.on("error", reject);
+    });
+  }
+  close() {
+    var _this$ws4;
+    (_this$ws4 = this.ws) === null || _this$ws4 === void 0 || _this$ws4.close();
+  }
+  buildProxyUrl() {
+    const url = new URL("/platform/app/relay/", this.baseUrl);
+    url.protocol = url.protocol === "https:" ? "wss:" : "ws:";
+    url.searchParams.set("app_id", this.appID);
+    url.searchParams.set("replace_existing", String(this.replaceExisting));
+    return url.toString();
+  }
+  parseMessage(data) {
+    const buffer = this.toBuffer(data);
+    if (!buffer) {
+      return null;
+    }
+    if (buffer.length >= 4) {
+      const binary = this.parseBinaryEnvelope(buffer);
+      if (binary) {
+        return binary;
+      }
     }
     return this.parseJSONEnvelope(buffer.toString());
   }
@@ -539,7 +612,7 @@ class TunnelClient {
     if (!request) {
       return;
     }
-    if (request.path === ONES_CLI_MANIFEST_PATH) {
+    if (this.enableInternalManifestRoute && request.path === ONES_CLI_INTERNAL_MANIFEST_PATH) {
       const appManifest = getAppManifestJSON().app;
       const baseURL = await buildTunnelUrl();
       const reply = {
@@ -591,7 +664,13 @@ class TunnelClient {
     if (payload.query) {
       Object.entries(payload.query).forEach((_ref) => {
         let [key, value] = _ref;
-        url.searchParams.set(key, value);
+        if (Array.isArray(value)) {
+          value.forEach((item) => {
+            url.searchParams.append(key, item);
+          });
+          return;
+        }
+        url.searchParams.append(key, value);
       });
     }
     const response = await axios.request({
@@ -600,7 +679,9 @@ class TunnelClient {
       headers: payload.headers,
       data: payload.body,
       responseType: "arraybuffer",
-      validateStatus: () => true
+      validateStatus: () => true,
+      maxBodyLength: MAX_RELAY_BODY_BYTES,
+      maxContentLength: MAX_RELAY_BODY_BYTES
     });
     const responseBytes = Buffer.from(response.data);
     return {
@@ -632,6 +713,9 @@ class TunnelClient {
     var _envelope$payload;
     const payload = (_envelope$payload = envelope.payload) !== null && _envelope$payload !== void 0 ? _envelope$payload : {};
     const body = this.toBodyBuffer(payload.body);
+    if (body.length > MAX_RELAY_BODY_BYTES) {
+      throw new Error("relay body too large");
+    }
     const metaPayload = {
       ...payload
     };
@@ -674,7 +758,12 @@ class TunnelClient {
         return envelope;
       }
       const body = buffer.subarray(4 + metaLength);
-      envelope.payload.body = body;
+      if (body.length > MAX_RELAY_BODY_BYTES) {
+        console.error("Binary tunnel body exceeds size limit");
+        return null;
+      }
+      const payload = envelope.payload;
+      payload.body = body;
       return envelope;
     } catch (error) {
       console.error("Invalid binary tunnel message:", error);
@@ -706,60 +795,23 @@ class TunnelClient {
     return null;
   }
 }
-const getPath = (path, map2) => {
-  var _context;
-  return _reduceInstanceProperty(_context = path.split("/")).call(_context, (base, part) => {
-    if (/^:/.test(part)) {
-      return `${base}/${map2[part.slice(1)]}`;
-    }
-    return `${base}/${part}`;
-  }, "").slice(1);
-};
-const consoleUnauthorizedMessage = () => {
-  console.log("Not logged in");
-  console.log('Login with "ones login" command');
-};
-const getURL = async (path, pathMap, queryMap) => {
-  const base = await getRegionURL();
-  if (base) {
-    const query = new URLSearchParams(queryMap !== null && queryMap !== void 0 ? queryMap : {}).toString();
-    return `${base}${getPath(path, pathMap !== null && pathMap !== void 0 ? pathMap : {})}${query ? `?${query}` : ""}`;
-  }
-  consoleUnauthorizedMessage();
-  process$1.exit(1);
-};
-const getHeaders = async (value) => {
-  const token = await getONESToken();
-  if (token) {
-    return lodashEs.merge({
-      Authorization: `Bearer ${token}`
-    }, value);
+const ONES_CLI_INTERNAL_MANIFEST_PATH = "/__ones_cli_internal_manifest__";
+const buildTunnelContext = async () => {
+  var _appManifestJSON$app$, _appManifestJSON$app;
+  const appManifestJSON = getAppManifestJSON();
+  const appID = (_appManifestJSON$app$ = (_appManifestJSON$app = appManifestJSON.app) === null || _appManifestJSON$app === void 0 ? void 0 : _appManifestJSON$app.id) !== null && _appManifestJSON$app$ !== void 0 ? _appManifestJSON$app$ : "";
+  if (!appID) {
+    throw new Error("app id is empty");
   }
-  consoleUnauthorizedMessage();
-  process$1.exit(1);
-};
-const handleError = (error) => {
-  var _error$response;
-  if (((_error$response = error.response) === null || _error$response === void 0 ? void 0 : _error$response.status) === 401) {
-    console.log(error.response.statusText);
-    consoleUnauthorizedMessage();
-  } else {
-    console.error(error);
+  const regionURL = await getRegionURL();
+  if (!regionURL) {
+    throw new Error("region url is empty");
   }
-  return {};
-};
-const API = {
-  TOKEN_INFO: "/project/api/project/auth/token_info",
-  HOSTED_TOKEN: "/platform/runtime_manager/hosted_token",
-  APP_LIST: "/platform/api/app/list",
-  APP_INSTALL: "/platform/api/app/install",
-  APP_UPGRADE: "/platform/api/app/upgrade",
-  APP_UNINSTALL: "/platform/api/app/:installation_id/uninstall",
-  APP_ENABLE: "/platform/api/app/:installation_id/enable",
-  APP_DISABLE: "/platform/api/app/:installation_id/disable"
-};
-const isRecord = (value) => {
-  return typeof value === "object" && value !== null;
+  return {
+    appManifestJSON,
+    appID,
+    regionURL
+  };
 };
 const getHostedTokenScopes = (ones2) => {
   const storage = ones2 === null || ones2 === void 0 ? void 0 : ones2.storage;
@@ -778,131 +830,6 @@ const getHostedTokenScopes = (ones2) => {
 const getRelayScope = () => {
   return createOnesApp.HostedTokenScope.RELAY;
 };
-const getHostToken = async (baseUrl, userToken, appID, scopes) => {
-  const url = `${baseUrl.replace(/\/$/, "")}${API.HOSTED_TOKEN}`;
-  return axios.post(url, {
-    app_id: appID,
-    scopes
-  }, {
-    headers: {
-      Authorization: `Bearer ${userToken}`
-    }
-  }).then((resp) => {
-    const data = resp === null || resp === void 0 ? void 0 : resp.data;
-    const tokenFromData = (value) => {
-      if (isRecord(value) && isRecord(value.data)) {
-        const hosted_token = value.data.hosted_token;
-        if (typeof hosted_token === "string" && hosted_token.length > 0) {
-          return hosted_token;
-        }
-      }
-      return null;
-    };
-    const token = tokenFromData(data);
-    if (token) {
-      return token;
-    }
-    return createOnesApp.throwError(ErrorCode.HOSTED_TOKEN_EMPTY, i18n.t("error.hostedToken.empty"));
-  }).catch((error) => {
-    handleError(error);
-    return createOnesApp.throwError(ErrorCode.HOSTED_TOKEN_REQUEST_FAILED, i18n.t("error.hostedToken.requestFailed"));
-  });
-};
-const fetchAppBase = async (params) => {
-  var _params$url;
-  const url = await getURL((_params$url = params.url) !== null && _params$url !== void 0 ? _params$url : "", params.pathMap, params.queryMap);
-  const headers = await getHeaders(params.headers);
-  const response = await axios({
-    ...params,
-    url,
-    headers
-  });
-  return response.data;
-};
-const fetchAppList = async (appID) => {
-  return await fetchAppBase({
-    url: API.APP_LIST,
-    method: "GET",
-    queryMap: {
-      app_id: appID
-    }
-  }).catch(handleError);
-};
-const fetchTokenInfo = async () => {
-  return await fetchAppBase({
-    url: API.TOKEN_INFO,
-    method: "GET"
-  }).catch(handleError);
-};
-const fetchAppInstall = async (data) => {
-  var _appList$data$0$insta, _appList$data;
-  const appID = getAppManifestJSON().app.id;
-  const appList = await fetchAppList(appID);
-  const installationID = (_appList$data$0$insta = (_appList$data = appList.data) === null || _appList$data === void 0 || (_appList$data = _appList$data[0]) === null || _appList$data === void 0 ? void 0 : _appList$data.installation_id) !== null && _appList$data$0$insta !== void 0 ? _appList$data$0$insta : "";
-  const url = installationID ? API.APP_UPGRADE : API.APP_INSTALL;
-  return await fetchAppBase({
-    url,
-    method: "POST",
-    data
-  }).catch(handleError);
-};
-const fetchAppUninstall = async () => {
-  var _appList$data$0$insta2, _appList$data2;
-  const appID = getAppManifestJSON().app.id;
-  const appList = await fetchAppList(appID);
-  const installationID = (_appList$data$0$insta2 = (_appList$data2 = appList.data) === null || _appList$data2 === void 0 || (_appList$data2 = _appList$data2[0]) === null || _appList$data2 === void 0 ? void 0 : _appList$data2.installation_id) !== null && _appList$data$0$insta2 !== void 0 ? _appList$data$0$insta2 : "";
-  return await fetchAppBase({
-    url: API.APP_UNINSTALL,
-    method: "POST",
-    pathMap: {
-      installation_id: installationID
-    }
-  }).catch(handleError);
-};
-const fetchAppEnable = async () => {
-  var _appList$data$0$insta3, _appList$data3;
-  const appID = getAppManifestJSON().app.id;
-  const appList = await fetchAppList(appID);
-  const installationID = (_appList$data$0$insta3 = (_appList$data3 = appList.data) === null || _appList$data3 === void 0 || (_appList$data3 = _appList$data3[0]) === null || _appList$data3 === void 0 ? void 0 : _appList$data3.installation_id) !== null && _appList$data$0$insta3 !== void 0 ? _appList$data$0$insta3 : "";
-  return await fetchAppBase({
-    url: API.APP_ENABLE,
-    method: "POST",
-    pathMap: {
-      installation_id: installationID
-    }
-  }).catch(handleError);
-};
-const fetchAppDisable = async () => {
-  var _appList$data$0$insta4, _appList$data4;
-  const appID = getAppManifestJSON().app.id;
-  const appList = await fetchAppList(appID);
-  const installationID = (_appList$data$0$insta4 = (_appList$data4 = appList.data) === null || _appList$data4 === void 0 || (_appList$data4 = _appList$data4[0]) === null || _appList$data4 === void 0 ? void 0 : _appList$data4.installation_id) !== null && _appList$data$0$insta4 !== void 0 ? _appList$data$0$insta4 : "";
-  return await fetchAppBase({
-    url: API.APP_DISABLE,
-    method: "POST",
-    pathMap: {
-      installation_id: installationID
-    }
-  }).catch(handleError);
-};
-const ONES_CLI_MANIFEST_PATH = "/__ones_cli_manifest__";
-const buildTunnelContext = async () => {
-  var _appManifestJSON$app$, _appManifestJSON$app;
-  const appManifestJSON = getAppManifestJSON();
-  const appID = (_appManifestJSON$app$ = (_appManifestJSON$app = appManifestJSON.app) === null || _appManifestJSON$app === void 0 ? void 0 : _appManifestJSON$app.id) !== null && _appManifestJSON$app$ !== void 0 ? _appManifestJSON$app$ : "";
-  if (!appID) {
-    throw new Error("app id is empty");
-  }
-  const regionURL = await getRegionURL();
-  if (!regionURL) {
-    throw new Error("region url is empty");
-  }
-  return {
-    appManifestJSON,
-    appID,
-    regionURL
-  };
-};
 const buildTunnelUrl = async () => {
   const {
     appID,
@@ -911,12 +838,16 @@ const buildTunnelUrl = async () => {
   const url = new URL(regionURL);
   return `${url.protocol}//${url.host}/platform/app/relay/dispatch/${appID}`;
 };
-const invokeTunnel = async (port) => {
+const invokeTunnel = async function(port) {
+  var _options$rebuildWhenE, _hostedTokenResponse$, _options$enableIntern;
+  let options = arguments.length > 1 && arguments[1] !== void 0 ? arguments[1] : {};
   const {
     appManifestJSON,
     appID,
     regionURL
   } = await buildTunnelContext();
+  const runnelUrl = await buildTunnelUrl();
+  const rebuildWhenExists = (_options$rebuildWhenE = options.rebuildWhenExists) !== null && _options$rebuildWhenE !== void 0 ? _options$rebuildWhenE : true;
   const onesToken = await getONESToken();
   if (!onesToken) {
     consoleUnauthorizedMessage();
@@ -924,11 +855,17 @@ const invokeTunnel = async (port) => {
   }
   const storageScopes = getHostedTokenScopes(appManifestJSON.ones);
   const scopes = Array.from(/* @__PURE__ */ new Set([...storageScopes, getRelayScope()]));
-  const hostedToken = await getHostToken(regionURL, onesToken, appID, scopes);
+  const hostedTokenResponse = await fetchHostedToken({
+    app_id: appID,
+    scopes
+  });
+  const hostedToken = hostedTokenResponse === null || hostedTokenResponse === void 0 || (_hostedTokenResponse$ = hostedTokenResponse.data) === null || _hostedTokenResponse$ === void 0 ? void 0 : _hostedTokenResponse$.hosted_token;
+  if (!hostedToken) {
+    return createOnesApp.throwError(ErrorCode.HOSTED_TOKEN_EMPTY, i18n.t("error.hostedToken.empty"));
+  }
   process.env.ONES_HOSTED_TOKEN = hostedToken;
-  const client = new TunnelClient(port, regionURL, appID, hostedToken);
+  const client = new TunnelClient(port, regionURL, appID, hostedToken, (_options$enableIntern = options.enableInternalManifestRoute) !== null && _options$enableIntern !== void 0 ? _options$enableIntern : true, rebuildWhenExists);
   await client.connect();
-  const runnelUrl = await buildTunnelUrl();
   console.log(`Relay endpoint: ${runnelUrl}`);
 };
 const tunnel = async function() {
@@ -938,9 +875,143 @@ const tunnel = async function() {
   const {
     options
   } = createOnesApp.getCommandOptions(args, tunnelCommandArguments);
-  const normalizedOptions = await normalize$8(options);
+  const normalizedOptions = await normalize$9(options);
   await invokeTunnel(Number(normalizedOptions.port));
 };
+const normalize$8 = async (options) => {
+  lodashEs.noop(options);
+  return {};
+};
+const invokeInstall = async () => {
+  const runnelUrl = await buildTunnelUrl();
+  const result = await fetchAppInstall({
+    manifest_url: `${runnelUrl}${ONES_CLI_INTERNAL_MANIFEST_PATH}`
+  });
+  return result;
+};
+const install = async function() {
+  for (var _len = arguments.length, args = new Array(_len), _key = 0; _key < _len; _key++) {
+    args[_key] = arguments[_key];
+  }
+  const {
+    options
+  } = createOnesApp.getCommandOptions(args, installCommandArguments);
+  const normalizedOptions = await normalize$8(options);
+  lodashEs.noop(normalizedOptions);
+  await invokeTunnel(getConfig().defaultPort.tunnel);
+  const result = await invokeInstall();
+  if (result.code === "OK") {
+    var _appList$data$0$insta, _appList$data;
+    console.log("App installed successfully!");
+    const appID = getAppManifestJSON().app.id;
+    const appList = await fetchAppList(appID);
+    const installationID = (_appList$data$0$insta = (_appList$data = appList.data) === null || _appList$data === void 0 || (_appList$data = _appList$data[0]) === null || _appList$data === void 0 ? void 0 : _appList$data.installation_id) !== null && _appList$data$0$insta !== void 0 ? _appList$data$0$insta : "";
+    if (installationID) {
+      var _tokenInfo$org$uuid, _tokenInfo$org, _tokenInfo$teams$0$uu, _tokenInfo$teams, _tokenInfo$org$visibi, _tokenInfo$org2;
+      const tokenInfo = await fetchTokenInfo();
+      const orgUUID = (_tokenInfo$org$uuid = (_tokenInfo$org = tokenInfo.org) === null || _tokenInfo$org === void 0 ? void 0 : _tokenInfo$org.uuid) !== null && _tokenInfo$org$uuid !== void 0 ? _tokenInfo$org$uuid : "";
+      const teamUUID = (_tokenInfo$teams$0$uu = (_tokenInfo$teams = tokenInfo.teams) === null || _tokenInfo$teams === void 0 || (_tokenInfo$teams = _tokenInfo$teams[0]) === null || _tokenInfo$teams === void 0 ? void 0 : _tokenInfo$teams.uuid) !== null && _tokenInfo$teams$0$uu !== void 0 ? _tokenInfo$teams$0$uu : "";
+      const isOrgVisible = (_tokenInfo$org$visibi = (_tokenInfo$org2 = tokenInfo.org) === null || _tokenInfo$org2 === void 0 ? void 0 : _tokenInfo$org2.visibility) !== null && _tokenInfo$org$visibi !== void 0 ? _tokenInfo$org$visibi : false;
+      const baseURL = await getBaseURL();
+      if (isOrgVisible && orgUUID) {
+        const url = `${baseURL}/project/#/org/${orgUUID}/setting/app_manager/platform_app/${installationID}`;
+        console.log(`See App detail: ${url}`);
+      }
+      if (!isOrgVisible && teamUUID) {
+        const url = `${baseURL}/project/#/team/${teamUUID}/team_setting/app_manager/platform_app/${installationID}`;
+        console.log(`See App detail: ${url}`);
+      }
+    }
+  } else {
+    console.error(result);
+  }
+};
+var InstallOptions = /* @__PURE__ */ ((InstallOptions2) => {
+  InstallOptions2["AUTO"] = "auto";
+  InstallOptions2["TRUE"] = "true";
+  InstallOptions2["FALSE"] = "false";
+  return InstallOptions2;
+})(InstallOptions || {});
+const defaultInstall = InstallOptions.AUTO;
+const normalize$7 = async (options) => {
+  var _options$install;
+  let install2 = (_options$install = options.install) !== null && _options$install !== void 0 ? _options$install : defaultInstall;
+  switch (true) {
+    case install2 === InstallOptions.AUTO:
+      break;
+    case Boolean(install2):
+      install2 = InstallOptions.TRUE;
+      break;
+    default:
+      install2 = InstallOptions.FALSE;
+      break;
+  }
+  return {
+    install: install2
+  };
+};
+const dev = async function() {
+  var _appPackageJSON$scrip;
+  for (var _len = arguments.length, args = new Array(_len), _key = 0; _key < _len; _key++) {
+    args[_key] = arguments[_key];
+  }
+  const {
+    options
+  } = createOnesApp.getCommandOptions(args, devCommandArguments);
+  const normalizedOptions = await normalize$7(options);
+  const appPackageJSON = getAppPackageJSON();
+  const appManifestJSON = getAppManifestJSON();
+  const appRcJSON = getAppRcJSON();
+  lodashEs.noop(appManifestJSON);
+  lodashEs.noop(appRcJSON);
+  if (!((_appPackageJSON$scrip = appPackageJSON.scripts) !== null && _appPackageJSON$scrip !== void 0 && _appPackageJSON$scrip.dev)) {
+    return createOnesApp.throwError(ErrorCode.DEV_SCRIPT_NOT_FOUND, i18n.t("error.dev.scriptNotFound"));
+  }
+  const ONES_HOSTED_TOKEN = await getHostToken();
+  const port = getConfig().defaultPort.tunnel;
+  const cwd = getAppWorkspacePath();
+  const env = {
+    ...process.env,
+    NODE_ENV: "development",
+    ONES_HOSTED_PORT: `${port}`,
+    ONES_HOSTED_TOKEN
+  };
+  const tunnelChild = node_child_process.spawn("ones", ["tunnel", String(port)], {
+    cwd,
+    stdio: "inherit"
+  });
+  const devChild = node_child_process.spawn("npm", ["run", "dev"], {
+    cwd,
+    stdio: "inherit",
+    env
+  });
+  const cleanup = () => {
+    tunnelChild.kill();
+    devChild.kill();
+  };
+  const onSignal = () => {
+    cleanup();
+    process.exit(128 + 2);
+  };
+  process.on("SIGINT", onSignal);
+  process.on("SIGTERM", onSignal);
+  console.log(`Local: http://localhost:${port}`);
+  if (normalizedOptions.install === InstallOptions.TRUE) {
+    setTimeout(() => {
+      invokeInstall().catch((error) => {
+        console.error(error);
+      });
+    }, 2e3);
+  }
+  await new Promise((resolve) => {
+    devChild.on("exit", () => {
+      cleanup();
+      process.off("SIGINT", onSignal);
+      process.off("SIGTERM", onSignal);
+      resolve();
+    });
+  });
+};
 function createPromise() {
   let resolve;
   let reject;
@@ -961,7 +1032,7 @@ const sleep = (number) => {
 };
 const isURL = /^https?:\/\//;
 const HostBlackList = ["ones.cn", "www.ones.cn", "ones.com", "www.ones.com"];
-const normalize$7 = async (options) => {
+const normalize$6 = async (options) => {
   const baseURLInput = options.baseURL;
   if (baseURLInput)
     ;
@@ -998,7 +1069,7 @@ const login = async function() {
   const {
     options
   } = createOnesApp.getCommandOptions(args, loginCommandArguments);
-  const normalizedOptions = await normalize$7(options);
+  const normalizedOptions = await normalize$6(options);
   const base = normalizedOptions.baseURL;
   const path = "project/oauth2.html";
   const config2 = getConfig();
@@ -1082,7 +1153,7 @@ const login = async function() {
   ora("Waiting for authorization...").start();
   await open(url);
 };
-const normalize$6 = async (options) => {
+const normalize$5 = async (options) => {
   lodashEs.noop(options);
   return {};
 };
@@ -1093,12 +1164,12 @@ const logout = async function() {
   const {
     options
   } = createOnesApp.getCommandOptions(args, logoutCommandArguments);
-  const normalizedOptions = await normalize$6(options);
+  const normalizedOptions = await normalize$5(options);
   lodashEs.noop(normalizedOptions);
   await setStore({});
   console.log("Logged out successfully!");
 };
-const normalize$5 = async (options) => {
+const normalize$4 = async (options) => {
   lodashEs.noop(options);
   return {};
 };
@@ -1110,7 +1181,7 @@ const whoami = async function() {
   const {
     options
   } = createOnesApp.getCommandOptions(args, whoamiCommandArguments);
-  const normalizedOptions = await normalize$5(options);
+  const normalizedOptions = await normalize$4(options);
   lodashEs.noop(normalizedOptions);
   const baseURL = await getBaseURL();
   const tokenInfo = await fetchTokenInfo();
@@ -1123,54 +1194,6 @@ const whoami = async function() {
     consoleUnauthorizedMessage();
   }
 };
-const normalize$4 = async (options) => {
-  lodashEs.noop(options);
-  return {};
-};
-const invokeInstall = async () => {
-  const runnelUrl = await buildTunnelUrl();
-  const result = await fetchAppInstall({
-    manifest_url: `${runnelUrl}${ONES_CLI_MANIFEST_PATH}`
-  });
-  return result;
-};
-const install = async function() {
-  for (var _len = arguments.length, args = new Array(_len), _key = 0; _key < _len; _key++) {
-    args[_key] = arguments[_key];
-  }
-  const {
-    options
-  } = createOnesApp.getCommandOptions(args, installCommandArguments);
-  const normalizedOptions = await normalize$4(options);
-  lodashEs.noop(normalizedOptions);
-  await invokeTunnel(getConfig().defaultPort.tunnel);
-  const result = await invokeInstall();
-  if (result.code === "OK") {
-    var _appList$data$0$insta, _appList$data;
-    console.log("App installed successfully!");
-    const appID = getAppManifestJSON().app.id;
-    const appList = await fetchAppList(appID);
-    const installationID = (_appList$data$0$insta = (_appList$data = appList.data) === null || _appList$data === void 0 || (_appList$data = _appList$data[0]) === null || _appList$data === void 0 ? void 0 : _appList$data.installation_id) !== null && _appList$data$0$insta !== void 0 ? _appList$data$0$insta : "";
-    if (installationID) {
-      var _tokenInfo$org$uuid, _tokenInfo$org, _tokenInfo$teams$0$uu, _tokenInfo$teams, _tokenInfo$org$visibi, _tokenInfo$org2;
-      const tokenInfo = await fetchTokenInfo();
-      const orgUUID = (_tokenInfo$org$uuid = (_tokenInfo$org = tokenInfo.org) === null || _tokenInfo$org === void 0 ? void 0 : _tokenInfo$org.uuid) !== null && _tokenInfo$org$uuid !== void 0 ? _tokenInfo$org$uuid : "";
-      const teamUUID = (_tokenInfo$teams$0$uu = (_tokenInfo$teams = tokenInfo.teams) === null || _tokenInfo$teams === void 0 || (_tokenInfo$teams = _tokenInfo$teams[0]) === null || _tokenInfo$teams === void 0 ? void 0 : _tokenInfo$teams.uuid) !== null && _tokenInfo$teams$0$uu !== void 0 ? _tokenInfo$teams$0$uu : "";
-      const isOrgVisible = (_tokenInfo$org$visibi = (_tokenInfo$org2 = tokenInfo.org) === null || _tokenInfo$org2 === void 0 ? void 0 : _tokenInfo$org2.visibility) !== null && _tokenInfo$org$visibi !== void 0 ? _tokenInfo$org$visibi : false;
-      const baseURL = await getBaseURL();
-      if (isOrgVisible && orgUUID) {
-        const url = `${baseURL}/project/#/org/${orgUUID}/setting/app_manager/platform_app/${installationID}`;
-        console.log(`See App detail: ${url}`);
-      }
-      if (!isOrgVisible && teamUUID) {
-        const url = `${baseURL}/project/#/team/${teamUUID}/team_setting/app_manager/platform_app/${installationID}`;
-        console.log(`See App detail: ${url}`);
-      }
-    }
-  } else {
-    console.error(result);
-  }
-};
 const normalize$3 = async (options) => {
   lodashEs.noop(options);
   return {};
@@ -1308,7 +1331,7 @@ const runCommandONES = async () => {
   const command = ones;
   createOnesApp.setContext("command", command);
   const version = `${getPackageJSON().version}`;
-  command.version(version);
+  command.version(version, "-v, --version");
   await command.parse();
 };
 exports.runCommandONES = runCommandONES;