@uofx/cli 1.0.2 → 1.1.0

package/dist/infrastructure/deployment/services/k8s-job-runner.service.js

@@ -16,7 +16,8 @@ exports.K8sJobRunnerService = void 0;
 const tsyringe_1 = require("tsyringe");
 const tokens_1 = require("../../../di/tokens");
 const deployment_parameters_entity_1 = require("../../../domain/entities/deployment-parameters.entity");
-const sensitive_decorator_1 = require("../../../domain/decorators/sensitive.decorator");
+const sensitive_decorator_1 = require("../../interceptors/decorators/sensitive.decorator");
+const errors_1 = require("../../../domain/errors");
 /**
  * Kubernetes Job 執行服務
  *
@@ -35,6 +36,13 @@ let K8sJobRunnerService = class K8sJobRunnerService {
      */
     async createImagePullSecret(instanceName, params) {
         const { name: acrName, account: acrAccount, password: acrPassword } = params.acrCredentials;
+        // 防禦性驗證：確保 ACR 名稱與帳號僅包含安全字元
+        if (!/^[a-zA-Z0-9-]+$/.test(acrName)) {
+            throw new errors_1.AppError(`Invalid ACR name: "${acrName}"`, { exitCode: errors_1.EXIT_CODES.VALIDATION_ERROR });
+        }
+        if (!/^[a-zA-Z0-9-]+$/.test(acrAccount)) {
+            throw new errors_1.AppError(`Invalid ACR account: "${acrAccount}"`, { exitCode: errors_1.EXIT_CODES.VALIDATION_ERROR });
+        }
         const registry = `${acrName}.azurecr.io`;
         const env = this.envFactory.getForInstance(instanceName);
         const builder = env.kubectl('create secret docker-registry')
@@ -51,7 +59,10 @@ let K8sJobRunnerService = class K8sJobRunnerService {
         await deleteBuilder.exec();
         const result = await builder.exec();
         if (result.exitCode !== 0) {
-            throw new Error(`Failed to create image pull secret: ${result.stderr}`);
+            this.logger.debug('kubectl create secret failed', { stderr: result.stderr });
+            throw new errors_1.AppError('Failed to create image pull secret', {
+                exitCode: errors_1.EXIT_CODES.SYSTEM_ERROR,
+            });
         }
     }
     /**
@@ -121,7 +132,10 @@ let K8sJobRunnerService = class K8sJobRunnerService {
             .sensitiveStdin(JSON.stringify(jobYaml));
         const applyResult = await applyBuilder.exec();
         if (applyResult.exitCode !== 0) {
-            throw new Error(`Failed to start job ${jobName}: ${applyResult.stderr}`);
+            this.logger.debug(`kubectl apply job failed for ${jobName}`, { stderr: applyResult.stderr });
+            throw new errors_1.AppError(`Failed to start job ${jobName}`, {
+                exitCode: errors_1.EXIT_CODES.SYSTEM_ERROR,
+            });
         }
         // 等待完成
         const waitBuilder = env.kubectl('wait')
@@ -136,9 +150,13 @@ let K8sJobRunnerService = class K8sJobRunnerService {
                 .arg(`job/${jobName}`)
                 .arg('-n', 'mssql');
             const logs = await logsBuilder.exec();
-            this.logger.error(new Error(`Job ${jobName} logs:
-${logs.stdout}`));
-            throw new Error(`Job ${jobName} failed or timed out`);
+            this.logger.error(new Error(`Job ${jobName} failed`), {
+                jobName,
+                logs: logs.stdout,
+            });
+            throw new errors_1.AppError(`Job ${jobName} failed or timed out`, {
+                exitCode: errors_1.EXIT_CODES.SYSTEM_ERROR,
+            });
         }
         // 清理 Job
         const cleanupBuilder = env.kubectl('delete')

package/dist/infrastructure/deployment/services/mssql-database-init.service.js

@@ -16,14 +16,17 @@ exports.MssqlDatabaseInitService = void 0;
 const tsyringe_1 = require("tsyringe");
 const tokens_1 = require("../../../di/tokens");
 const paths_1 = require("../../../constants/paths");
+const oci_artifacts_1 = require("../../../constants/oci-artifacts");
+const errors_1 = require("../../../domain/errors");
 /**
  * MSSQL 資料庫初始化服務
  *
  * 負責等待 MSSQL Pod 就緒和建立初始資料庫
  */
 let MssqlDatabaseInitService = class MssqlDatabaseInitService {
-    constructor(envFactory, logger) {
+    constructor(envFactory, ociArtifact, logger) {
         this.envFactory = envFactory;
+        this.ociArtifact = ociArtifact;
         this.logger = logger;
     }
     /**
@@ -40,7 +43,10 @@ let MssqlDatabaseInitService = class MssqlDatabaseInitService {
             .arg('--timeout=300s');
         const result = await builder.exec();
         if (result.exitCode !== 0) {
-            throw new Error(`MSSQL Pod not ready: ${result.stderr}`);
+            this.logger.debug('MSSQL Pod not ready', { stderr: result.stderr });
+            throw new errors_1.AppError('MSSQL Pod not ready', {
+                exitCode: errors_1.EXIT_CODES.SYSTEM_ERROR,
+            });
         }
     }
     /**
@@ -57,7 +63,10 @@ let MssqlDatabaseInitService = class MssqlDatabaseInitService {
             .arg('-o', "jsonpath='{.items[0].metadata.name}'");
         const result = await builder.exec();
         if (result.exitCode !== 0 || !result.stdout.trim()) {
-            throw new Error(`Failed to get MSSQL Pod name: ${result.stderr}`);
+            this.logger.debug('Failed to get MSSQL Pod name', { stderr: result.stderr });
+            throw new errors_1.AppError('Failed to get MSSQL Pod name', {
+                exitCode: errors_1.EXIT_CODES.SYSTEM_ERROR,
+            });
         }
         return result.stdout.trim();
     }
@@ -82,9 +91,9 @@ let MssqlDatabaseInitService = class MssqlDatabaseInitService {
                 .arg(paths_1.LINUX_PATHS.SQLCMD_BIN)
                 .arg('-S', 'localhost')
                 .arg('-U', 'sa')
-                .sensitiveArg('-P', `'${saPassword}'`)
+                .sensitiveArg('-P', saPassword)
                 .arg('-C')
-                .arg('-Q', '"SELECT 1"');
+                .arg('-Q', 'SELECT 1');
             const result = await builder.exec();
             if (result.exitCode === 0) {
                 this.logger.debug('[Mssql] SQL Server is ready');
@@ -95,7 +104,9 @@ let MssqlDatabaseInitService = class MssqlDatabaseInitService {
                 await new Promise(resolve => setTimeout(resolve, retryDelay));
             }
         }
-        throw new Error('SQL Server failed to start accepting connections after 60 seconds');
+        throw new errors_1.AppError('SQL Server failed to start accepting connections after 60 seconds', {
+            exitCode: errors_1.EXIT_CODES.SYSTEM_ERROR,
+        });
     }
     /**
      * 建立初始資料庫 (uofx_dev, uofx_search)
@@ -119,13 +130,65 @@ let MssqlDatabaseInitService = class MssqlDatabaseInitService {
             .arg(paths_1.LINUX_PATHS.SQLCMD_BIN)
             .arg('-S', 'localhost')
             .arg('-U', 'sa')
-            .sensitiveArg('-P', `'${saPassword}'`)
+            .sensitiveArg('-P', saPassword)
             .arg('-C')
-            .arg('-Q', '"CREATE DATABASE uofx_dev; CREATE DATABASE uofx_search;"');
+            .arg('-Q', 'CREATE DATABASE uofx_dev; CREATE DATABASE uofx_search;');
         this.logger.debug(`[Mssql] Creating databases uofx_dev, uofx_search...`);
         const result = await builder.exec();
         if (result.exitCode !== 0) {
-            throw new Error(`Failed to create initial databases: ${result.stderr}`);
+            this.logger.debug('Failed to create initial databases', { stderr: result.stderr });
+            throw new errors_1.AppError('Failed to create initial databases', {
+                exitCode: errors_1.EXIT_CODES.SYSTEM_ERROR,
+            });
+        }
+    }
+    /**
+     * 安裝 Northwind 範例資料庫
+     * @param instanceName WSL 實例名稱
+     * @param saPassword SA 密碼
+     * @param acrCredentials ACR 憑證（用於下載 SQL 腳本）
+     */
+    async installNorthwindDatabase(instanceName, saPassword, acrCredentials) {
+        this.logger.debug('[Mssql] Installing Northwind sample database...');
+        const podName = await this.getMssqlPodName(instanceName);
+        const env = this.envFactory.getForInstance(instanceName);
+        const remoteScriptPath = '/tmp/instnwnd.sql';
+        // 1. 建立 Northwind 資料庫
+        const createDbBuilder = env.kubectl('exec')
+            .arg('-n', 'mssql')
+            .arg(podName)
+            .arg('--')
+            .arg(paths_1.LINUX_PATHS.SQLCMD_BIN)
+            .arg('-S', 'localhost')
+            .arg('-U', 'sa')
+            .sensitiveArg('-P', saPassword)
+            .arg('-C')
+            .arg('-Q', 'CREATE DATABASE Northwind;');
+        const createResult = await createDbBuilder.exec();
+        if (createResult.exitCode !== 0) {
+            this.logger.debug('Failed to create Northwind database', { stderr: createResult.stderr });
+            throw new errors_1.AppError('Failed to create Northwind database', {
+                exitCode: errors_1.EXIT_CODES.SYSTEM_ERROR,
+            });
+        }
+        // 2. 從 ACR 下載 SQL 腳本到 WSL /tmp/
+        await this.ociArtifact.downloadToInstance(instanceName, oci_artifacts_1.OCI_ARTIFACTS.NORTHWIND_SQL, oci_artifacts_1.OCI_ARTIFACT_TAGS.NORTHWIND_SQL, remoteScriptPath, acrCredentials);
+        // 3. 透過 shell pipeline 執行 SQL 腳本並清理暫存檔
+        const passB64 = Buffer.from(saPassword).toString('base64');
+        const kubectlPath = paths_1.LINUX_PATHS.MICROK8S_KUBECTL;
+        const sqlcmdPath = paths_1.LINUX_PATHS.SQLCMD_BIN;
+        const pipelineScript = [
+            'set -e',
+            `PASS=$(echo '${passB64}' | base64 -d)`,
+            `cat ${remoteScriptPath} | ${kubectlPath} exec -i -n mssql ${podName} -- ${sqlcmdPath} -S localhost -U sa -P "\${PASS}" -d Northwind -C`,
+            `rm -f ${remoteScriptPath}`,
+        ].join('\n');
+        const result = await env.shell('bash').sensitiveStdin(pipelineScript).exec();
+        if (result.exitCode !== 0) {
+            this.logger.debug('Failed to execute Northwind SQL script', { stderr: result.stderr });
+            throw new errors_1.AppError('Failed to install Northwind sample database', {
+                exitCode: errors_1.EXIT_CODES.SYSTEM_ERROR,
+            });
         }
     }
 };
@@ -133,7 +196,8 @@ exports.MssqlDatabaseInitService = MssqlDatabaseInitService;
 exports.MssqlDatabaseInitService = MssqlDatabaseInitService = __decorate([
     (0, tsyringe_1.injectable)(),
     __param(0, (0, tsyringe_1.inject)(tokens_1.TOKENS.Internal.IExecutionEnvironmentFactory)),
-    __param(1, (0, tsyringe_1.inject)(tokens_1.TOKENS.ILoggerPort)),
-    __metadata("design:paramtypes", [Object, Object])
+    __param(1, (0, tsyringe_1.inject)(tokens_1.TOKENS.Internal.IOciArtifactService)),
+    __param(2, (0, tsyringe_1.inject)(tokens_1.TOKENS.ILoggerPort)),
+    __metadata("design:paramtypes", [Object, Object, Object])
 ], MssqlDatabaseInitService);
 //# sourceMappingURL=mssql-database-init.service.js.map

package/dist/infrastructure/deployment/services/mssql-helm-deployment.service.js

@@ -16,6 +16,7 @@ exports.MssqlHelmDeploymentService = void 0;
 const tsyringe_1 = require("tsyringe");
 const tokens_1 = require("../../../di/tokens");
 const base_helm_deployment_service_1 = require("./base-helm-deployment.service");
+const errors_1 = require("../../../domain/errors");
 /**
  * MSSQL Helm 部署服務
  *
@@ -66,9 +67,9 @@ let MssqlHelmDeploymentService = class MssqlHelmDeploymentService extends base_h
             .arg('--timeout', '10m')
             .arg('-n', 'mssql')
             .arg('database')
-            .arg(`"${chartPath}"`)
+            .arg(chartPath)
             .arg('--create-namespace')
-            .sensitiveArg('--set', `sa_password='${params.saPassword}'`);
+            .sensitiveArg('--set', `sa_password=${params.saPassword}`);
         this.logger.debug('[Mssql] Installing MSSQL chart', {
             chart: 'mssql-latest',
             chartPath: chartPath,
@@ -77,14 +78,25 @@ let MssqlHelmDeploymentService = class MssqlHelmDeploymentService extends base_h
         });
         const result = await builder.exec();
         if (result.exitCode !== 0) {
-            throw new Error(`Failed to deploy MSSQL: ${result.stderr}`);
+            this.logger.debug('Failed to deploy MSSQL', { stderr: result.stderr });
+            throw new errors_1.AppError('Failed to deploy MSSQL', {
+                exitCode: errors_1.EXIT_CODES.SYSTEM_ERROR,
+            });
         }
     }
     /**
-     * 安裝後處理：建立初始資料庫
+     * 安裝後處理：建立初始資料庫與 Northwind 範例資料庫
      */
-    async postInstall(instanceName, params, _output) {
+    async postInstall(instanceName, params, output) {
         await this.dbInitService.createInitialDatabases(instanceName, params.saPassword.toString());
+        if (params.skipNorthwind) {
+            output?.item('bullet', 'Skipping Northwind sample database (--no-northwind)').flush();
+        }
+        else {
+            output?.item('arrow', 'Installing Northwind sample database...').flush();
+            await this.dbInitService.installNorthwindDatabase(instanceName, params.saPassword.toString(), params.acrCredentials);
+            output?.item('check', 'Northwind database installed').flush();
+        }
     }
 };
 exports.MssqlHelmDeploymentService = MssqlHelmDeploymentService;

package/dist/infrastructure/deployment/services/mssql-storage.service.js

@@ -16,6 +16,7 @@ exports.MssqlStorageService = void 0;
 const tsyringe_1 = require("tsyringe");
 const tokens_1 = require("../../../di/tokens");
 const paths_1 = require("../../../constants/paths");
+const errors_1 = require("../../../domain/errors");
 /**
  * MSSQL 存儲服務
  *
@@ -39,7 +40,10 @@ let MssqlStorageService = class MssqlStorageService {
             .args(...directories);
         const result = await builder.exec();
         if (result.exitCode !== 0) {
-            throw new Error(`Failed to create MSSQL directories: ${result.stderr}`);
+            this.logger.debug('Failed to create MSSQL directories', { stderr: result.stderr });
+            throw new errors_1.AppError('Failed to create MSSQL directories', {
+                exitCode: errors_1.EXIT_CODES.SYSTEM_ERROR,
+            });
         }
         this.logger.debug('[Mssql] Directories created successfully');
     }

package/dist/infrastructure/deployment/services/mssql-user-manager.service.js

@@ -16,6 +16,7 @@ exports.MssqlUserManagerService = void 0;
 const tsyringe_1 = require("tsyringe");
 const tokens_1 = require("../../../di/tokens");
 const paths_1 = require("../../../constants/paths");
+const errors_1 = require("../../../domain/errors");
 /**
  * MSSQL 使用者管理服務
  *
@@ -45,13 +46,16 @@ let MssqlUserManagerService = class MssqlUserManagerService {
             .arg(paths_1.LINUX_PATHS.SQLCMD_BIN)
             .arg('-S', 'localhost')
             .arg('-U', 'sa')
-            .sensitiveArg('-P', `'${params.saPassword}'`)
+            .sensitiveArg('-P', params.saPassword.toString())
             .arg('-d', 'uofx_dev')
             .arg('-C')
-            .sensitiveArg('-Q', `"${query}"`);
+            .sensitiveArg('-Q', query);
         const result = await builder.exec();
         if (result.exitCode !== 0) {
-            throw new Error(`Failed to create admin user: ${result.stderr}`);
+            this.logger.debug('Failed to create admin user', { stderr: result.stderr });
+            throw new errors_1.AppError('Failed to create admin user', {
+                exitCode: errors_1.EXIT_CODES.SYSTEM_ERROR,
+            });
         }
     }
 };

package/dist/infrastructure/deployment/services/oci-artifact.service.js

@@ -15,7 +15,8 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.OciArtifactService = void 0;
 const tsyringe_1 = require("tsyringe");
 const tokens_1 = require("../../../di/tokens");
-const sensitive_decorator_1 = require("../../../domain/decorators/sensitive.decorator");
+const sensitive_decorator_1 = require("../../interceptors/decorators/sensitive.decorator");
+const errors_1 = require("../../../domain/errors");
 /**
  * OCI Artifact 下載服務
  *
@@ -49,7 +50,9 @@ let OciArtifactService = class OciArtifactService {
         // 3. 取得 Blob Digest
         const digest = this.extractDigest(manifestResponse);
         if (!digest) {
-            throw new Error(`Could not find digest in manifest for ${repo}:${tag}`);
+            throw new errors_1.AppError(`Could not find digest in manifest for ${repo}:${tag}`, {
+                exitCode: errors_1.EXIT_CODES.NETWORK_ERROR,
+            });
         }
         // 4. 下載 Blob
         const blobUrl = `https://${registry}/v2/${repo}/blobs/${digest}`;
@@ -84,7 +87,9 @@ let OciArtifactService = class OciArtifactService {
                 repo,
                 tag
             });
-            throw new Error(`Failed to download OCI artifact: ${errorDetail}`);
+            throw new errors_1.AppError(`Failed to download OCI artifact: ${errorDetail}`, {
+                exitCode: errors_1.EXIT_CODES.NETWORK_ERROR,
+            });
         }
         this.logger.debug(`Successfully downloaded OCI artifact to instance: ${targetPath}`);
     }

package/dist/infrastructure/deployment/services/secret-manager.service.js

@@ -15,7 +15,8 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.SecretManagerService = void 0;
 const tsyringe_1 = require("tsyringe");
 const tokens_1 = require("../../../di/tokens");
-const sensitive_decorator_1 = require("../../../domain/decorators/sensitive.decorator");
+const sensitive_decorator_1 = require("../../interceptors/decorators/sensitive.decorator");
+const errors_1 = require("../../../domain/errors");
 /**
  * Secret 管理服務
  *
@@ -53,7 +54,10 @@ let SecretManagerService = class SecretManagerService {
             .arg(namespace);
         const result = await builder.exec();
         if (result.exitCode !== 0) {
-            throw new Error(`Failed to create namespace: ${result.stderr}`);
+            this.logger.debug('kubectl create namespace failed', { stderr: result.stderr });
+            throw new errors_1.AppError('Failed to create Kubernetes namespace', {
+                exitCode: errors_1.EXIT_CODES.SYSTEM_ERROR,
+            });
         }
     }
     /**
@@ -100,7 +104,10 @@ let SecretManagerService = class SecretManagerService {
             .sensitiveStdin(JSON.stringify(secretManifest));
         const result = await builder.exec();
         if (result.exitCode !== 0) {
-            throw new Error(`Failed to create global config secret: ${result.stderr}`);
+            this.logger.debug('kubectl apply secret failed', { stderr: result.stderr });
+            throw new errors_1.AppError('Failed to create global config secret', {
+                exitCode: errors_1.EXIT_CODES.SYSTEM_ERROR,
+            });
         }
         output?.success(`Global config secret created in ${namespace}`).flush();
     }
@@ -120,8 +127,10 @@ let SecretManagerService = class SecretManagerService {
                 .arg('-o', 'json');
             const result = await builder.exec();
             if (result.exitCode !== 0) {
-                this.logger.error(new Error(`kubectl exited with code ${result.exitCode}`));
-                this.logger.error(new Error(`Stderr: ${result.stderr}`));
+                this.logger.error(new Error('kubectl get secret failed'), {
+                    exitCode: result.exitCode,
+                    stderr: result.stderr,
+                });
                 return null;
             }
             const secret = JSON.parse(result.stdout);

package/dist/infrastructure/deployment/services/service-manager.service.js

@@ -16,7 +16,7 @@ exports.ServiceManagerService = void 0;
 const tsyringe_1 = require("tsyringe");
 const tokens_1 = require("../../../di/tokens");
 const deployment_parameters_entity_1 = require("../../../domain/entities/deployment-parameters.entity");
-const sensitive_decorator_1 = require("../../../domain/decorators/sensitive.decorator");
+const sensitive_decorator_1 = require("../../interceptors/decorators/sensitive.decorator");
 const base_helm_deployment_service_1 = require("./base-helm-deployment.service");
 /**
  * Service Manager Service

package/dist/infrastructure/deployment/services/version-compatibility.service.js

@@ -49,8 +49,8 @@ exports.VersionCompatibilityService = void 0;
 const tsyringe_1 = require("tsyringe");
 const semver = __importStar(require("semver"));
 const tokens_1 = require("../../../di/tokens");
-const sensitive_decorator_1 = require("../../../domain/decorators/sensitive.decorator");
-const errors_1 = require("../../errors");
+const sensitive_decorator_1 = require("../../interceptors/decorators/sensitive.decorator");
+const errors_1 = require("../../../domain/errors");
 const index_1 = require("../../../constants/index");
 /**
  * 版本相容性檢查服務
@@ -189,7 +189,9 @@ let VersionCompatibilityService = class VersionCompatibilityService {
         }
         const creds = this.acrCreds.getDefaultCredentials();
         if (!creds) {
-            throw new Error('ACR credentials not found');
+            throw new errors_1.AppError('ACR credentials not found', {
+                exitCode: errors_1.EXIT_CODES.VALIDATION_ERROR,
+            });
         }
         const registry = `${creds.name}.azurecr.io`;
         const scope = `repository:${repo}:pull`;
@@ -217,7 +219,9 @@ let VersionCompatibilityService = class VersionCompatibilityService {
             digest = manifestResponse.config.digest;
         }
         if (!digest) {
-            throw new Error('Could not find digest in manifest');
+            throw new errors_1.AppError('Could not find digest in manifest', {
+                exitCode: errors_1.EXIT_CODES.NETWORK_ERROR,
+            });
         }
         const blobUrl = `https://${registry}/v2/${repo}/blobs/${digest}`;
         const blob = await this.httpClient.getJson(blobUrl, {
@@ -283,7 +287,7 @@ __decorate([
 exports.VersionCompatibilityService = VersionCompatibilityService = __decorate([
     (0, tsyringe_1.injectable)(),
     __param(0, (0, tsyringe_1.inject)(tokens_1.TOKENS.Internal.IHttpClient)),
-    __param(1, (0, tsyringe_1.inject)(tokens_1.TOKENS.IAppConfig)),
+    __param(1, (0, tsyringe_1.inject)(tokens_1.TOKENS.IAppConfigPort)),
     __param(2, (0, tsyringe_1.inject)(tokens_1.TOKENS.Internal.IAcrCredentialManager)),
     __param(3, (0, tsyringe_1.inject)(tokens_1.TOKENS.ILoggerPort)),
     __metadata("design:paramtypes", [Object, Object, Object, Object])

package/dist/infrastructure/dotnet/dotnet-publisher.adapter.js

@@ -0,0 +1,143 @@
+"use strict";
+/**
+ * Dotnet Publisher Adapter
+ *
+ * 實作 IDotnetPublisherPort 介面
+ * 透過 dotnet publish 建置 .NET 專案
+ */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.DotnetPublisherAdapter = void 0;
+const tsyringe_1 = require("tsyringe");
+const fs = __importStar(require("fs"));
+const os = __importStar(require("os"));
+const path = __importStar(require("path"));
+const tokens_1 = require("../../di/tokens");
+let DotnetPublisherAdapter = class DotnetPublisherAdapter {
+    constructor(logger, commandExecutor) {
+        this.logger = logger;
+        this.commandExecutor = commandExecutor;
+    }
+    /**
+     * 執行 dotnet publish 建置 .NET 專案
+     *
+     * 使用暫存目錄作為 dotnet publish 的輸出目標，避免 Microsoft.NET.Sdk.Web
+     * 將專案目錄內已存在的其他目錄當作 Content 複製進輸出。
+     *
+     * @param options - 發布選項
+     * @param output - 輸出端口，用於回報進度
+     * @returns 發布結果
+     */
+    async publish(options, output) {
+        const configuration = options.configuration || 'Release';
+        const tempDir = fs.mkdtempSync(path.join(os.tmpdir(), 'uofx-publish-'));
+        try {
+            const args = [
+                'publish',
+                '-c', configuration,
+                '-o', tempDir,
+            ];
+            this.logger.debug(`Executing: dotnet ${args.join(' ')}`, {
+                cwd: options.projectPath,
+            });
+            output
+                ?.item('arrow', `Running: dotnet publish -c ${configuration}`)
+                .flush();
+            output?.divider().flush();
+            const result = await this.commandExecutor.spawnProcess('dotnet', args, undefined, { cwd: options.projectPath, inheritStdio: true });
+            output?.divider().flush();
+            if (result.exitCode === 0) {
+                // cpSync 支援跨磁碟，避免 renameSync 的 EXDEV 錯誤
+                fs.mkdirSync(options.outputPath, { recursive: true });
+                fs.cpSync(tempDir, options.outputPath, { recursive: true });
+                return {
+                    success: true,
+                    message: 'Dotnet publish completed successfully.',
+                    outputPath: options.outputPath,
+                };
+            }
+            else {
+                const errorMsg = `dotnet publish exited with code ${result.exitCode}`;
+                output?.error(errorMsg).flush();
+                return {
+                    success: false,
+                    message: errorMsg,
+                    outputPath: options.outputPath,
+                };
+            }
+        }
+        catch (err) {
+            const errorMsg = `Failed to execute dotnet publish: ${err instanceof Error ? err.message : String(err)}`;
+            this.logger.error(new Error(errorMsg));
+            output?.error(errorMsg).flush();
+            return {
+                success: false,
+                message: errorMsg,
+                outputPath: options.outputPath,
+            };
+        }
+        finally {
+            fs.rmSync(tempDir, { recursive: true, force: true });
+        }
+    }
+    /**
+     * 從 ClientApp 路徑推算專案根目錄
+     * @param clientAppPath - ClientApp 目錄路徑
+     * @returns 專案根目錄路徑（ClientApp 的上層目錄）
+     */
+    findProjectDir(clientAppPath) {
+        return path.dirname(clientAppPath);
+    }
+};
+exports.DotnetPublisherAdapter = DotnetPublisherAdapter;
+exports.DotnetPublisherAdapter = DotnetPublisherAdapter = __decorate([
+    (0, tsyringe_1.injectable)(),
+    __param(0, (0, tsyringe_1.inject)(tokens_1.TOKENS.ILoggerPort)),
+    __param(1, (0, tsyringe_1.inject)(tokens_1.TOKENS.Internal.ICommandExecutor)),
+    __metadata("design:paramtypes", [Object, Object])
+], DotnetPublisherAdapter);
+//# sourceMappingURL=dotnet-publisher.adapter.js.map

package/dist/infrastructure/dotnet/index.js

@@ -0,0 +1,9 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.DotnetPublisherAdapter = void 0;
+/**
+ * Infrastructure Dotnet 模組匯出
+ */
+var dotnet_publisher_adapter_1 = require("./dotnet-publisher.adapter");
+Object.defineProperty(exports, "DotnetPublisherAdapter", { enumerable: true, get: function () { return dotnet_publisher_adapter_1.DotnetPublisherAdapter; } });
+//# sourceMappingURL=index.js.map

package/dist/infrastructure/environment/index.js

@@ -0,0 +1,11 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.detectPlatform = exports.WindowsEnvironmentAdapter = void 0;
+/**
+ * Infrastructure Environment 模組匯出
+ */
+var windows_environment_adapter_1 = require("./windows-environment.adapter");
+Object.defineProperty(exports, "WindowsEnvironmentAdapter", { enumerable: true, get: function () { return windows_environment_adapter_1.WindowsEnvironmentAdapter; } });
+var platform_detector_util_1 = require("./platform-detector.util");
+Object.defineProperty(exports, "detectPlatform", { enumerable: true, get: function () { return platform_detector_util_1.detectPlatform; } });
+//# sourceMappingURL=index.js.map

package/dist/infrastructure/environment/interfaces/index.js

@@ -0,0 +1,3 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=index.js.map

package/dist/infrastructure/{platform-detector.js → environment/platform-detector.util.js}

@@ -68,4 +68,4 @@ function isWindows() {
 function isLinux() {
     return detectPlatform() === 'linux';
 }
-//# sourceMappingURL=platform-detector.js.map
+//# sourceMappingURL=platform-detector.util.js.map