@ranger1/dx 0.1.79 → 0.1.81

package/README.md

@@ -181,6 +181,7 @@ dx 的命令由 `dx/config/commands.json` 驱动，并且内置了一些 interna
 
 - `internal: sdk-build`：SDK 生成/构建
 - `internal: backend-package`：后端打包
+- `internal: backend-artifact-deploy`：后端制品构建、上传与远端部署
 - `internal: start-dev`：开发环境一键启动
 - `internal: pm2-stack`：PM2 交互式服务栈（支持端口清理/缓存清理配置）
 
@@ -195,6 +196,7 @@ dx db generate
 dx db migrate --dev --name init
 dx db deploy --prod -Y
 dx deploy front --staging
+dx deploy backend --prod
 dx lint
 dx test e2e backend apps/backend/e2e/auth
 ```
@@ -284,6 +286,83 @@ dx test e2e backend apps/backend/e2e/auth
 - 需要的前置构建（例如 `shared`、`api-contracts`、OpenAPI 导出、后端构建等）应由项目自己的 Nx 依赖图（`dependsOn`/项目依赖）或 Vercel 的 `buildCommand` 负责。
 - 这样 dx deploy 不会强依赖 `apps/sdk` 等目录结构，更容易适配不同 monorepo。
 
+### backend 制品发布
+
+当 `dx/config/commands.json` 的 `deploy.backend.internal` 配置为 `backend-artifact-deploy` 时，`dx deploy backend` 走内置的后端制品发布流程，而不是 Vercel 部署。
+
+常用命令：
+
+```bash
+dx deploy backend --prod
+dx deploy backend --build-only
+dx deploy backend --prod --skip-migration
+```
+
+最小示例配置：
+
+```json
+{
+  "deploy": {
+    "backend": {
+      "internal": "backend-artifact-deploy",
+      "backendDeploy": {
+        "build": {
+          "app": "backend",
+          "distDir": "dist/backend",
+          "versionFile": "apps/backend/package.json",
+          "commands": {
+            "development": "npx nx build backend --configuration=development",
+            "staging": "npx nx build backend --configuration=production",
+            "production": "npx nx build backend --configuration=production"
+          }
+        },
+        "runtime": {
+          "appPackage": "apps/backend/package.json",
+          "rootPackage": "package.json",
+          "lockfile": "pnpm-lock.yaml",
+          "prismaSchemaDir": "apps/backend/prisma/schema",
+          "prismaConfig": "apps/backend/prisma.config.ts",
+          "ecosystemConfig": "ecosystem.config.cjs"
+        },
+        "artifact": {
+          "outputDir": "release/backend",
+          "bundleName": "backend-bundle"
+        },
+        "remote": {
+          "host": "deploy.example.com",
+          "port": 22,
+          "user": "deploy",
+          "baseDir": "/srv/example-app"
+        },
+        "startup": {
+          "mode": "pm2",
+          "serviceName": "backend"
+        },
+        "deploy": {
+          "keepReleases": 5,
+          "installCommand": "pnpm install --prod --no-frozen-lockfile --ignore-workspace",
+          "prismaGenerate": true,
+          "prismaMigrateDeploy": true
+        }
+      }
+    }
+  }
+}
+```
+
+固定远端目录协议：
+
+- `<baseDir>/releases/<version-name>`
+- `<baseDir>/current`
+- `<baseDir>/shared/.env.<environment>`
+- `<baseDir>/shared/.env.<environment>.local`
+- `<baseDir>/uploads/<bundle-file>`
+
+运行时制品约束：
+
+- 生成的 release `package.json` 默认只保留运行时依赖；如果应用把 `prisma` 放在 `devDependencies`，dx 会自动把它提升进 release 依赖，保证远端 `prisma generate` / `prisma migrate deploy` 可执行。
+- 打包前会递归扫描整个 staged payload；任意层级出现 `.env*` 文件都会直接失败，避免把环境文件误打进制品。
+
 ## 依赖关系约定
 
 dx 不负责管理「工程之间的构建依赖关系」。如果多个工程之间存在依赖（例如 `front/admin` 依赖 `shared` 或 `api-contracts`），必须由 Nx 的依赖图来表达并自动拉起：

package/codex/agents/fixer.toml

@@ -1,8 +1,7 @@
 model = "gpt-5.3-codex"
 model_reasoning_effort = "medium"
 approval_policy = "never"
-sandbox_mode = "workspace-write"
-network_access = true
+sandbox_mode = "danger-full-access"
 
 developer_instructions = '''
 你是 fix 代理。

package/codex/agents/orchestrator.toml

@@ -2,6 +2,8 @@ model = "gpt-5.3-codex"
 model_reasoning_effort = "low"
 approval_policy = "never"
 sandbox_mode = "workspace-write"
+
+[sandbox_workspace_write]
 network_access = true
 
 developer_instructions = '''

package/codex/agents/reviewer.toml

@@ -2,6 +2,8 @@ model = "gpt-5.3-codex"
 model_reasoning_effort = "medium"
 approval_policy = "never"
 sandbox_mode = "workspace-write"
+
+[sandbox_workspace_write]
 network_access = true
 
 developer_instructions = '''

package/codex/agents/spark.toml

@@ -1,8 +1,7 @@
 model = "gpt-5.3-codex"
 model_reasoning_effort = "medium"
 approval_policy = "never"
-sandbox_mode = "workspace-write"
-network_access = true
+sandbox_mode = "danger-full-access"
 
 developer_instructions = '''
 你是一个通用agent 根据输入的提示词，完整遵循他的要求执行任务
@@ -17,5 +16,3 @@ developer_instructions = '''
 prompt是一个文件路径并不存在时，必须返回结构化错误：{"error":"PROMPT_FILE_NOT_FOUND","detail":"<file_path>"}
 
 '''
-
-

package/codex/skills/doctor/SKILL.md

@@ -57,7 +57,7 @@ bash "$CODEX_HOME/skills/doctor/scripts/doctor.sh" --max-rounds 3
 - 自动修复：确保 `~/.codex/config.toml` 含以下目标值（缺失补齐、值不符覆盖）：
   - `[features] multi_agent = true`
   - `[agents] max_threads = 15`
-  - `[agents.fixer] description/model_reasoning_effort/config_file`
+  - `[agents.fixer] description/config_file`
   - `[agents.orchestrator] description/config_file`
   - `[agents.reviewer] description/config_file`
   - `[agents.spark] description/config_file`

package/codex/skills/doctor/scripts/doctor.sh

@@ -233,7 +233,7 @@ ensure_codex_config() {
     in_features=0; in_agents=0; in_fixer=0; in_orch=0; in_reviewer=0; in_spark=0;
     features_emitted=0; agents_emitted=0; fixer_emitted=0; orch_emitted=0; reviewer_emitted=0; spark_emitted=0;
     features_multi_written=0; agents_max_threads_written=0;
-    fixer_desc_written=0; fixer_reasoning_written=0; fixer_cfg_written=0;
+    fixer_desc_written=0; fixer_cfg_written=0;
     orch_desc_written=0; orch_cfg_written=0;
     reviewer_desc_written=0; reviewer_cfg_written=0;
     spark_desc_written=0; spark_cfg_written=0;
@@ -252,24 +252,23 @@ ensure_codex_config() {
   }
   function flush_fixer() {
     if (!fixer_emitted) return;
-    if (!fixer_desc_written) print "description = \"bug fixer\"";
-    if (!fixer_reasoning_written) print "model_reasoning_effort = \"medium\"";
-    if (!fixer_cfg_written) print "config_file = \"~/.codex/agents/fixer.toml\"";
+    if (!fixer_desc_written) print "description = \"bugfix 代理\"";
+    if (!fixer_cfg_written) print "config_file = \"agents/fixer.toml\"";
   }
   function flush_orch() {
     if (!orch_emitted) return;
-    if (!orch_desc_written) print "description = \"orchestrator\"";
-    if (!orch_cfg_written) print "config_file = \"~/.codex/agents/orchestrator.toml\"";
+    if (!orch_desc_written) print "description = \"pr 修复流程编排代理\"";
+    if (!orch_cfg_written) print "config_file = \"agents/orchestrator.toml\"";
   }
   function flush_reviewer() {
     if (!reviewer_emitted) return;
-    if (!reviewer_desc_written) print "description = \"reviewer\"";
-    if (!reviewer_cfg_written) print "config_file = \"~/.codex/agents/reviewer.toml\"";
+    if (!reviewer_desc_written) print "description = \"代码评审代理\"";
+    if (!reviewer_cfg_written) print "config_file = \"agents/reviewer.toml\"";
   }
   function flush_spark() {
     if (!spark_emitted) return;
-    if (!spark_desc_written) print "description = \"spark\"";
-    if (!spark_cfg_written) print "config_file = \"~/.codex/agents/spark.toml\"";
+    if (!spark_desc_written) print "description = \"通用执行代理\"";
+    if (!spark_cfg_written) print "config_file = \"agents/spark.toml\"";
   }
   function flush_active_section() {
     if (in_features) flush_features();
@@ -332,42 +331,38 @@ ensure_codex_config() {
     }
 
     if (in_fixer && match(t, /^description[[:space:]]*=/)) {
-      if (!fixer_desc_written) { print "description = \"bug fixer\""; fixer_desc_written=1; }
-      next;
-    }
-    if (in_fixer && match(t, /^model_reasoning_effort[[:space:]]*=/)) {
-      if (!fixer_reasoning_written) { print "model_reasoning_effort = \"medium\""; fixer_reasoning_written=1; }
+      if (!fixer_desc_written) { print "description = \"bugfix 代理\""; fixer_desc_written=1; }
       next;
     }
     if (in_fixer && match(t, /^config_file[[:space:]]*=/)) {
-      if (!fixer_cfg_written) { print "config_file = \"~/.codex/agents/fixer.toml\""; fixer_cfg_written=1; }
+      if (!fixer_cfg_written) { print "config_file = \"agents/fixer.toml\""; fixer_cfg_written=1; }
       next;
     }
 
     if (in_orch && match(t, /^description[[:space:]]*=/)) {
-      if (!orch_desc_written) { print "description = \"orchestrator\""; orch_desc_written=1; }
+      if (!orch_desc_written) { print "description = \"pr 修复流程编排代理\""; orch_desc_written=1; }
       next;
     }
     if (in_orch && match(t, /^config_file[[:space:]]*=/)) {
-      if (!orch_cfg_written) { print "config_file = \"~/.codex/agents/orchestrator.toml\""; orch_cfg_written=1; }
+      if (!orch_cfg_written) { print "config_file = \"agents/orchestrator.toml\""; orch_cfg_written=1; }
       next;
     }
 
     if (in_reviewer && match(t, /^description[[:space:]]*=/)) {
-      if (!reviewer_desc_written) { print "description = \"reviewer\""; reviewer_desc_written=1; }
+      if (!reviewer_desc_written) { print "description = \"代码评审代理\""; reviewer_desc_written=1; }
       next;
     }
     if (in_reviewer && match(t, /^config_file[[:space:]]*=/)) {
-      if (!reviewer_cfg_written) { print "config_file = \"~/.codex/agents/reviewer.toml\""; reviewer_cfg_written=1; }
+      if (!reviewer_cfg_written) { print "config_file = \"agents/reviewer.toml\""; reviewer_cfg_written=1; }
       next;
     }
 
     if (in_spark && match(t, /^description[[:space:]]*=/)) {
-      if (!spark_desc_written) { print "description = \"spark\""; spark_desc_written=1; }
+      if (!spark_desc_written) { print "description = \"通用执行代理\""; spark_desc_written=1; }
       next;
     }
     if (in_spark && match(t, /^config_file[[:space:]]*=/)) {
-      if (!spark_cfg_written) { print "config_file = \"~/.codex/agents/spark.toml\""; spark_cfg_written=1; }
+      if (!spark_cfg_written) { print "config_file = \"agents/spark.toml\""; spark_cfg_written=1; }
       next;
     }
 
@@ -389,27 +384,26 @@ ensure_codex_config() {
     if (!fixer_emitted) {
       print "";
       print "[agents.fixer]";
-      print "description = \"bug fixer\"";
-      print "model_reasoning_effort = \"medium\"";
-      print "config_file = \"~/.codex/agents/fixer.toml\"";
+      print "description = \"bugfix 代理\"";
+      print "config_file = \"agents/fixer.toml\"";
     }
     if (!orch_emitted) {
       print "";
       print "[agents.orchestrator]";
-      print "description = \"orchestrator\"";
-      print "config_file = \"~/.codex/agents/orchestrator.toml\"";
+      print "description = \"pr 修复流程编排代理\"";
+      print "config_file = \"agents/orchestrator.toml\"";
     }
     if (!reviewer_emitted) {
       print "";
       print "[agents.reviewer]";
-      print "description = \"reviewer\"";
-      print "config_file = \"~/.codex/agents/reviewer.toml\"";
+      print "description = \"代码评审代理\"";
+      print "config_file = \"agents/reviewer.toml\"";
     }
     if (!spark_emitted) {
       print "";
       print "[agents.spark]";
-      print "description = \"spark\"";
-      print "config_file = \"~/.codex/agents/spark.toml\"";
+      print "description = \"通用执行代理\"";
+      print "config_file = \"agents/spark.toml\"";
     }
   }' "$cfg_file" >"$tmp_file"
 
@@ -424,7 +418,7 @@ check_codex_config() {
   awk '
   BEGIN {
     in_features=0; in_agents=0; in_fixer=0; in_orch=0; in_reviewer=0; in_spark=0;
-    ok_features=0; ok_threads=0; ok_fixer_desc=0; ok_fixer_reason=0; ok_fixer_cfg=0;
+    ok_features=0; ok_threads=0; ok_fixer_desc=0; ok_fixer_cfg=0;
     ok_orch_desc=0; ok_orch_cfg=0; ok_reviewer_desc=0; ok_reviewer_cfg=0; ok_spark_desc=0; ok_spark_cfg=0;
   }
   function trim(s) { gsub(/^[[:space:]]+|[[:space:]]+$/, "", s); return s }
@@ -442,19 +436,18 @@ check_codex_config() {
     }
     if (in_features && line ~ /^multi_agent[[:space:]]*=[[:space:]]*true$/) ok_features=1;
     if (in_agents && line ~ /^max_threads[[:space:]]*=[[:space:]]*15$/) ok_threads=1;
-    if (in_fixer && line ~ /^description[[:space:]]*=[[:space:]]*"bug fixer"$/) ok_fixer_desc=1;
-    if (in_fixer && line ~ /^model_reasoning_effort[[:space:]]*=[[:space:]]*"medium"$/) ok_fixer_reason=1;
-    if (in_fixer && line ~ /^config_file[[:space:]]*=[[:space:]]*"~\/\.codex\/agents\/fixer\.toml"$/) ok_fixer_cfg=1;
-    if (in_orch && line ~ /^description[[:space:]]*=[[:space:]]*"orchestrator"$/) ok_orch_desc=1;
-    if (in_orch && line ~ /^config_file[[:space:]]*=[[:space:]]*"~\/\.codex\/agents\/orchestrator\.toml"$/) ok_orch_cfg=1;
-    if (in_reviewer && line ~ /^description[[:space:]]*=[[:space:]]*"reviewer"$/) ok_reviewer_desc=1;
-    if (in_reviewer && line ~ /^config_file[[:space:]]*=[[:space:]]*"~\/\.codex\/agents\/reviewer\.toml"$/) ok_reviewer_cfg=1;
-    if (in_spark && line ~ /^description[[:space:]]*=[[:space:]]*"spark"$/) ok_spark_desc=1;
-    if (in_spark && line ~ /^config_file[[:space:]]*=[[:space:]]*"~\/\.codex\/agents\/spark\.toml"$/) ok_spark_cfg=1;
+    if (in_fixer && line ~ /^description[[:space:]]*=[[:space:]]*"bugfix 代理"$/) ok_fixer_desc=1;
+    if (in_fixer && line ~ /^config_file[[:space:]]*=[[:space:]]*"agents\/fixer\.toml"$/) ok_fixer_cfg=1;
+    if (in_orch && line ~ /^description[[:space:]]*=[[:space:]]*"pr 修复流程编排代理"$/) ok_orch_desc=1;
+    if (in_orch && line ~ /^config_file[[:space:]]*=[[:space:]]*"agents\/orchestrator\.toml"$/) ok_orch_cfg=1;
+    if (in_reviewer && line ~ /^description[[:space:]]*=[[:space:]]*"代码评审代理"$/) ok_reviewer_desc=1;
+    if (in_reviewer && line ~ /^config_file[[:space:]]*=[[:space:]]*"agents\/reviewer\.toml"$/) ok_reviewer_cfg=1;
+    if (in_spark && line ~ /^description[[:space:]]*=[[:space:]]*"通用执行代理"$/) ok_spark_desc=1;
+    if (in_spark && line ~ /^config_file[[:space:]]*=[[:space:]]*"agents\/spark\.toml"$/) ok_spark_cfg=1;
   }
   END {
     ok = ok_features && ok_threads &&
-         ok_fixer_desc && ok_fixer_reason && ok_fixer_cfg &&
+         ok_fixer_desc && ok_fixer_cfg &&
          ok_orch_desc && ok_orch_cfg &&
          ok_reviewer_desc && ok_reviewer_cfg &&
          ok_spark_desc && ok_spark_cfg;

package/lib/backend-artifact-deploy/artifact-builder.js

@@ -0,0 +1,240 @@
+import { execFile } from 'node:child_process'
+import { existsSync } from 'node:fs'
+import { cp, mkdir, readdir, readFile, rm, writeFile } from 'node:fs/promises'
+import { basename, dirname, join, relative } from 'node:path'
+import { promisify } from 'node:util'
+import { execManager } from '../exec.js'
+import { basenameOrThrow, resolveWithinBase } from './path-utils.js'
+import { createRuntimePackage } from './runtime-package.js'
+
+const execFileAsync = promisify(execFile)
+
+function assertSafeNamePart(value, label) {
+  const text = String(value || '').trim()
+  if (!text || text.includes('/') || text.includes('\\') || text.includes('..')) {
+    throw new Error(`${label} 越界，已拒绝: ${text}`)
+  }
+  return text
+}
+
+function defaultNowTag() {
+  const now = new Date()
+  const pad = value => String(value).padStart(2, '0')
+  return [
+    now.getFullYear(),
+    pad(now.getMonth() + 1),
+    pad(now.getDate()),
+  ].join('') + `-${pad(now.getHours())}${pad(now.getMinutes())}${pad(now.getSeconds())}`
+}
+
+async function defaultReadVersion(versionFile) {
+  const pkg = JSON.parse(await readFile(versionFile, 'utf8'))
+  return String(pkg.version || '').trim()
+}
+
+async function defaultRunBuild(build) {
+  if (!build?.command) {
+    throw new Error('缺少构建命令: build.command')
+  }
+  await execManager.executeCommand(build.command, {
+    app: build.app || undefined,
+  })
+}
+
+async function defaultPrepareOutputDir(outputDir) {
+  await mkdir(outputDir, { recursive: true })
+}
+
+async function copyIntoDir(source, destinationDir) {
+  if (!existsSync(source)) {
+    throw new Error(`缺少必需文件或目录: ${source}`)
+  }
+  await cp(source, destinationDir, { recursive: true })
+}
+
+async function defaultStageFiles({ config, stageDir, stagePlan }) {
+  await rm(stageDir, { recursive: true, force: true })
+  await mkdir(stageDir, { recursive: true })
+
+  for (const entry of await readdir(stagePlan.dist.source)) {
+    await copyIntoDir(join(stagePlan.dist.source, entry), join(stageDir, entry))
+  }
+
+  const appPackage = JSON.parse(await readFile(stagePlan.appPackage.source, 'utf8'))
+  const rootPackage = JSON.parse(await readFile(stagePlan.rootPackage.source, 'utf8'))
+  const runtimePackage = createRuntimePackage({ appPackage, rootPackage })
+  await writeFile(join(stageDir, stagePlan.runtimePackage.destination), `${JSON.stringify(runtimePackage, null, 2)}\n`)
+
+  await copyIntoDir(stagePlan.lockfile.source, join(stageDir, stagePlan.lockfile.destination))
+
+  if (stagePlan.prismaSchema) {
+    await mkdir(join(stageDir, dirname(stagePlan.prismaSchema.destination)), { recursive: true })
+    await copyIntoDir(stagePlan.prismaSchema.source, join(stageDir, stagePlan.prismaSchema.destination))
+  }
+  if (stagePlan.prismaConfig) {
+    await mkdir(join(stageDir, dirname(stagePlan.prismaConfig.destination)), { recursive: true })
+    await copyIntoDir(stagePlan.prismaConfig.source, join(stageDir, stagePlan.prismaConfig.destination))
+  }
+  if (stagePlan.ecosystemConfig) {
+    await copyIntoDir(stagePlan.ecosystemConfig.source, join(stageDir, stagePlan.ecosystemConfig.destination))
+  }
+}
+
+async function defaultAssertNoEnvFiles(stageDir) {
+  const envFiles = []
+  const queue = ['.']
+
+  while (queue.length > 0) {
+    const currentRelativeDir = queue.shift()
+    const currentDir = currentRelativeDir === '.' ? stageDir : join(stageDir, currentRelativeDir)
+    const entries = await readdir(currentDir, { withFileTypes: true })
+
+    for (const entry of entries) {
+      const entryRelativePath =
+        currentRelativeDir === '.' ? entry.name : join(currentRelativeDir, entry.name)
+
+      if (entry.name.startsWith('.env')) {
+        envFiles.push(entryRelativePath.replace(/\\/g, '/'))
+      }
+
+      if (entry.isDirectory()) {
+        queue.push(entryRelativePath)
+      }
+    }
+  }
+
+  if (envFiles.length > 0) {
+    throw new Error(`制品目录包含 .env* 文件: ${envFiles.join(', ')}`)
+  }
+}
+
+async function defaultCreateInnerArchive({ stageDir, innerArchivePath }) {
+  await mkdir(dirname(innerArchivePath), { recursive: true })
+  await execFileAsync('tar', ['-czf', innerArchivePath, '.'], {
+    cwd: stageDir,
+  })
+}
+
+async function defaultWriteChecksum({ archivePath, checksumPath }) {
+  try {
+    const { stdout } = await execFileAsync('sha256sum', [archivePath])
+    await writeFile(checksumPath, stdout)
+  } catch {
+    const { stdout } = await execFileAsync('shasum', ['-a', '256', archivePath])
+    await writeFile(checksumPath, stdout)
+  }
+}
+
+async function defaultCreateBundle({ outputDir, bundlePath, innerArchivePath, checksumPath }) {
+  await execFileAsync(
+    'tar',
+    ['-czf', bundlePath, basename(innerArchivePath), basename(checksumPath)],
+    { cwd: outputDir },
+  )
+}
+
+export function createArtifactNames({ version, timeTag, bundleName }) {
+  const safeVersion = assertSafeNamePart(version, 'version')
+  const safeTimeTag = assertSafeNamePart(timeTag, 'timeTag')
+  const safeBundleName = assertSafeNamePart(bundleName, 'bundleName')
+  const versionName = `backend-v${safeVersion}-${safeTimeTag}`
+  const innerArchiveName = `${versionName}.tgz`
+  return {
+    versionName,
+    innerArchiveName,
+    checksumName: `${innerArchiveName}.sha256`,
+    bundleName: `${safeBundleName}-v${safeVersion}-${safeTimeTag}.tgz`,
+  }
+}
+
+export function createStagePlan(config) {
+  const projectRoot = config.projectRoot || '/'
+  const relativeToProject = targetPath =>
+    relative(projectRoot, targetPath).replace(/\\/g, '/').replace(/^repo\//, '')
+  const plan = {
+    dist: {
+      source: config.build.distDir,
+      destination: '.',
+    },
+    runtimePackage: {
+      destination: 'package.json',
+    },
+    lockfile: {
+      source: config.runtime.lockfile,
+      destination: 'pnpm-lock.yaml',
+    },
+    appPackage: {
+      source: config.runtime.appPackage,
+    },
+    rootPackage: {
+      source: config.runtime.rootPackage,
+    },
+  }
+
+  if (config.runtime.prismaSchemaDir) {
+    plan.prismaSchema = {
+      source: config.runtime.prismaSchemaDir,
+      destination: relativeToProject(config.runtime.prismaSchemaDir),
+    }
+  }
+  if (config.runtime.prismaConfig) {
+    plan.prismaConfig = {
+      source: config.runtime.prismaConfig,
+      destination: relativeToProject(config.runtime.prismaConfig),
+    }
+  }
+  if (config.runtime.ecosystemConfig) {
+    plan.ecosystemConfig = {
+      source: config.runtime.ecosystemConfig,
+      destination: basenameOrThrow(config.runtime.ecosystemConfig, 'runtime.ecosystemConfig'),
+    }
+  }
+
+  return plan
+}
+
+export async function buildBackendArtifact(config, deps = {}) {
+  const nowTag = deps.nowTag || defaultNowTag
+  const readVersion = deps.readVersion || defaultReadVersion
+  const runBuild = deps.runBuild || defaultRunBuild
+  const prepareOutputDir = deps.prepareOutputDir || defaultPrepareOutputDir
+  const stageFiles = deps.stageFiles || defaultStageFiles
+  const assertNoEnvFiles = deps.assertNoEnvFiles || defaultAssertNoEnvFiles
+  const createInnerArchive = deps.createInnerArchive || defaultCreateInnerArchive
+  const writeChecksum = deps.writeChecksum || defaultWriteChecksum
+  const createBundle = deps.createBundle || defaultCreateBundle
+  const version = await readVersion(config.build.versionFile)
+  const timeTag = nowTag()
+  const names = createArtifactNames({
+    version,
+    timeTag,
+    bundleName: config.artifact.bundleName,
+  })
+
+  const outputDir = resolveWithinBase(config.artifact.outputDir, '.', 'artifact.outputDir')
+  const stageDir = resolveWithinBase(outputDir, names.versionName, 'stageDir')
+  const innerArchivePath = resolveWithinBase(outputDir, names.innerArchiveName, 'innerArchivePath')
+  const checksumPath = resolveWithinBase(outputDir, names.checksumName, 'checksumPath')
+  const bundlePath = resolveWithinBase(outputDir, names.bundleName, 'bundlePath')
+
+  await runBuild(config.build)
+  await prepareOutputDir(outputDir)
+  await stageFiles({
+    config,
+    stageDir,
+    stagePlan: createStagePlan(config),
+  })
+  await assertNoEnvFiles(stageDir)
+  await createInnerArchive({ stageDir, innerArchivePath })
+  await writeChecksum({ archivePath: innerArchivePath, checksumPath })
+  await createBundle({ outputDir, bundlePath, innerArchivePath, checksumPath })
+
+  return {
+    version,
+    timeTag,
+    versionName: names.versionName,
+    bundlePath,
+    innerArchivePath,
+    checksumPath,
+  }
+}