ai-project-manage-cli 3.0.4 → 3.0.5

package/dist/index.js

@@ -1,8 +1,8 @@
 #!/usr/bin/env node
 
 // src/index.ts
-import { readFileSync as readFileSync5 } from "fs";
-import { dirname as dirname2, join as join6 } from "path";
+import { readFileSync as readFileSync9 } from "fs";
+import { dirname as dirname2, join as join7 } from "path";
 import { fileURLToPath as fileURLToPath2 } from "url";
 import { Command } from "commander";
 
@@ -501,13 +501,13 @@ async function runPull(requirementId) {
   const data = await api.cliRequirements.pull({ requirementId });
   const WORKITEMS_DIR = join4(WORKSPACE_APM_DIR, "workitems", requirementId);
   await ensureDirExists(WORKITEMS_DIR);
-  const req = data.requirement;
+  const req2 = data.requirement;
   const statusYaml = yamlStringify(
     {
-      id: req.id,
-      status: req.status,
-      title: req.title,
-      env: req.envName || "",
+      id: req2.id,
+      status: req2.status,
+      title: req2.title,
+      env: req2.envName || "",
       tasks: tasksForStatusYaml(data.tasks ?? [])
     },
     { lineWidth: 0 }
@@ -518,7 +518,7 @@ async function runPull(requirementId) {
 `,
     "utf8"
   );
-  writeFileSync3(join4(WORKITEMS_DIR, "prd.md"), req.content || "", "utf8");
+  writeFileSync3(join4(WORKITEMS_DIR, "prd.md"), req2.content || "", "utf8");
   const reviews = data.reviews ?? [];
   const reviewsXml = [
     "<reviews>",
@@ -584,12 +584,1021 @@ async function runUpdateStatus(requirementId, status) {
   console.log(JSON.stringify(data, null, 2));
 }
 
+// src/commands/deploy/backend.ts
+import path5 from "node:path";
+
+// src/commands/deploy/lib/apm-config.ts
+import { existsSync as existsSync2, readFileSync as readFileSync5 } from "node:fs";
+import { resolve as resolve3 } from "node:path";
+function loadApmConfig(options) {
+  const p = resolve3(
+    process.cwd(),
+    options?.configPath ?? resolve3(WORKSPACE_APM_DIR, "apm.config.json")
+  );
+  if (!existsSync2(p)) {
+    console.error(`\u672A\u627E\u5230\u914D\u7F6E\u6587\u4EF6\uFF1A${p}`);
+    process.exit(1);
+  }
+  try {
+    const raw = readFileSync5(p, "utf8");
+    return JSON.parse(raw);
+  } catch (e) {
+    console.error(`\u65E0\u6CD5\u89E3\u6790 apm.config.json\uFF1A${p}`, e);
+    process.exit(1);
+  }
+}
+function req(v, field) {
+  if (v === void 0 || v === null || typeof v === "string" && !v.trim()) {
+    console.error(`apm.config.json \u4E2D backendDeploy.${field} \u4E0D\u80FD\u4E3A\u7A7A`);
+    process.exit(1);
+  }
+  return v;
+}
+function reqBackendPositiveInt(v, field) {
+  const n = Number(v);
+  if (!Number.isFinite(n) || !Number.isInteger(n) || n < 1) {
+    console.error(
+      `apm.config.json \u4E2D backendDeploy.${field} \u987B\u4E3A\u6B63\u6574\u6570`
+    );
+    process.exit(1);
+  }
+  return n;
+}
+function resolveBackendDeployFromApmConfig(cfg) {
+  const b = cfg.backendDeploy ?? {};
+  const protoRaw = req(b.remoteProtocol, "remoteProtocol").trim().toLowerCase();
+  if (protoRaw !== "http" && protoRaw !== "https") {
+    console.error(
+      "apm.config.json \u4E2D backendDeploy.remoteProtocol \u53EA\u80FD\u4E3A http \u6216 https"
+    );
+    process.exit(1);
+  }
+  const remoteProtocol = protoRaw;
+  if (!Array.isArray(b.containerPortsMappings)) {
+    console.error(
+      "apm.config.json \u4E2D backendDeploy.containerPortsMappings \u987B\u4E3A\u975E\u7A7A\u6570\u7EC4"
+    );
+    process.exit(1);
+  }
+  const mappings = b.containerPortsMappings.map((x) => String(x).trim()).filter(Boolean);
+  if (mappings.length === 0) {
+    console.error(
+      "apm.config.json \u4E2D backendDeploy.containerPortsMappings \u987B\u81F3\u5C11\u5305\u542B\u4E00\u9879\u7AEF\u53E3\u6620\u5C04"
+    );
+    process.exit(1);
+  }
+  return {
+    name: req(b.name, "name").trim(),
+    registryHost: req(b.registryHost, "registryHost").trim(),
+    registryNamespace: req(b.registryNamespace, "registryNamespace").trim(),
+    registryUser: req(b.registryUser, "registryUser").trim(),
+    registryPassword: req(b.registryPassword, "registryPassword").trim(),
+    remoteHost: req(b.remoteHost, "remoteHost").trim(),
+    remotePort: reqBackendPositiveInt(b.remotePort, "remotePort"),
+    remoteProtocol,
+    caPath: b.caPath?.trim(),
+    certPath: b.certPath?.trim(),
+    keyPath: b.keyPath?.trim(),
+    envFilePath: typeof b.envFilePath === "string" ? b.envFilePath.trim() : "",
+    containerPortsMappings: mappings,
+    dockerNetwork: b.dockerNetwork?.trim() || void 0
+  };
+}
+function reqFe(v, field) {
+  if (v === void 0 || v === null || typeof v === "string" && !v.trim()) {
+    console.error(`apm.config.json \u4E2D frontendDeploy.${field} \u4E0D\u80FD\u4E3A\u7A7A`);
+    process.exit(1);
+  }
+  return v;
+}
+function resolveFrontendDeployFromApmConfig(cfg) {
+  const f = cfg.frontendDeploy ?? {};
+  const port = Number(f.port);
+  return {
+    endpoint: reqFe(f.endpoint, "endpoint").trim(),
+    port: Number.isFinite(port) && port > 0 ? port : 9e3,
+    useSsl: Boolean(f.useSsl),
+    accessKey: reqFe(f.accessKey, "accessKey").trim(),
+    secretKey: reqFe(f.secretKey, "secretKey").trim(),
+    bucket: reqFe(f.bucket, "bucket").trim()
+  };
+}
+
+// src/commands/deploy/lib/backend-deploy/backend-deploy-workflow.ts
+import path4 from "node:path";
+
+// src/commands/deploy/lib/backend-deploy/dockerode-client/client.ts
+import Docker from "dockerode";
+
+// src/commands/deploy/lib/backend-deploy/dockerode-client/connection-options.ts
+import { existsSync as existsSync3, readFileSync as readFileSync6 } from "node:fs";
+import path from "node:path";
+function asOptionalTlsBuffer(value) {
+  if (typeof value !== "string") {
+    console.log("tls filepath not exist");
+    return void 0;
+  }
+  console.log("tls filepath", path.join(process.cwd(), value));
+  const normalized = value.trim();
+  if (normalized === "") {
+    return void 0;
+  }
+  if (existsSync3(normalized)) {
+    return readFileSync6(normalized);
+  }
+  const looksLikePath = /[\\/]/.test(normalized) || normalized.endsWith(".pem");
+  if (looksLikePath) {
+    throw new Error(`TLS \u8BC1\u4E66\u6587\u4EF6\u4E0D\u5B58\u5728\uFF1A${normalized}`);
+  }
+  return Buffer.from(normalized);
+}
+function toDockerConnectionOptions(config) {
+  const protocol = (config.protocol ?? "https").toLowerCase();
+  const isHttps = protocol === "https";
+  const options = {
+    host: config.host ?? "127.0.0.1",
+    port: config.port ?? 2376,
+    protocol
+  };
+  const socketPath = (config.socketPath ?? "").trim();
+  if (socketPath !== "") {
+    options.socketPath = socketPath;
+  }
+  if (isHttps) {
+    const tlsOptions = {
+      ca: asOptionalTlsBuffer(config.ca),
+      cert: asOptionalTlsBuffer(config.cert),
+      key: asOptionalTlsBuffer(config.key)
+    };
+    if (tlsOptions.ca) {
+      options.ca = tlsOptions.ca;
+    }
+    if (tlsOptions.cert) {
+      options.cert = tlsOptions.cert;
+    }
+    if (tlsOptions.key) {
+      options.key = tlsOptions.key;
+    }
+    options.checkServerIdentity = () => void 0;
+  }
+  return options;
+}
+
+// src/commands/deploy/lib/backend-deploy/dockerode-client/container-inspect-format.ts
+function formatPortMappings(inspectInfo) {
+  const ports = inspectInfo?.NetworkSettings?.Ports;
+  if (!ports || typeof ports !== "object") {
+    return void 0;
+  }
+  const mappings = [];
+  for (const [containerPort, hostBindings] of Object.entries(ports)) {
+    if (!hostBindings || hostBindings.length === 0) {
+      mappings.push(`${containerPort} -> <not-published>`);
+      continue;
+    }
+    for (const binding of hostBindings) {
+      const hostIp = binding.HostIp || "0.0.0.0";
+      const hostPort = binding.HostPort || "<unknown>";
+      mappings.push(`${containerPort} -> ${hostIp}:${hostPort}`);
+    }
+  }
+  return mappings.length > 0 ? mappings : void 0;
+}
+
+// src/commands/deploy/lib/backend-deploy/dockerode-client/container-options.ts
+function toContainerCreateOptions(input) {
+  const hostConfig = {};
+  let hasHostConfig = false;
+  if (input.portBindings) {
+    hostConfig.PortBindings = input.portBindings;
+    hasHostConfig = true;
+  }
+  if (input.binds) {
+    hostConfig.Binds = input.binds;
+    hasHostConfig = true;
+  }
+  if (typeof input.nanoCpus === "number") {
+    hostConfig.NanoCpus = input.nanoCpus;
+    hasHostConfig = true;
+  }
+  if (typeof input.memory === "number") {
+    hostConfig.Memory = Number(input.memory) * 1024 * 1024;
+    hasHostConfig = true;
+  }
+  const payload = {
+    name: input.name,
+    Image: input.image,
+    Env: input.env
+  };
+  if (input.exposedPorts) {
+    payload.ExposedPorts = input.exposedPorts;
+  }
+  if (hasHostConfig) {
+    payload.HostConfig = hostConfig;
+  }
+  const net = input.dockerNetwork?.trim();
+  if (net) {
+    payload.NetworkingConfig = {
+      EndpointsConfig: {
+        [net]: {}
+      }
+    };
+  }
+  return payload;
+}
+
+// src/commands/deploy/lib/backend-deploy/dockerode-client/client.ts
+var DockerodeClient = class {
+  client;
+  constructor(config) {
+    const options = toDockerConnectionOptions(config);
+    this.client = new Docker(options);
+  }
+  async ping() {
+    await this.client.ping();
+  }
+  async imageExists(image) {
+    try {
+      await this.client.getImage(image).inspect();
+      return true;
+    } catch {
+      return false;
+    }
+  }
+  async removeImage(image) {
+    await this.client.getImage(image).remove({ force: true });
+  }
+  async pullImage(image, auth) {
+    const stream = await new Promise((resolve4, reject) => {
+      const pullOptions = auth ? { authconfig: auth } : void 0;
+      this.client.pull(image, pullOptions, (err, output) => {
+        if (err || !output) {
+          reject(err ?? new Error("docker pull \u8FD4\u56DE\u7A7A\u8F93\u51FA"));
+          return;
+        }
+        resolve4(output);
+      });
+    });
+    await new Promise((resolve4, reject) => {
+      this.client.modem.followProgress(
+        stream,
+        (err) => {
+          if (err) {
+            reject(err);
+            return;
+          }
+          resolve4();
+        },
+        () => void 0
+      );
+    });
+  }
+  async findContainerIdByName(name) {
+    const containers = await this.client.listContainers({ all: true });
+    const matched = containers.find(
+      (item) => (item.Names ?? []).some((n) => n === `/${name}`)
+    );
+    return matched?.Id;
+  }
+  async stopContainer(id) {
+    const container = this.client.getContainer(id);
+    try {
+      await container.stop();
+    } catch {
+    }
+  }
+  async removeContainer(id) {
+    const container = this.client.getContainer(id);
+    await container.remove({ force: true });
+  }
+  async createContainer(input) {
+    const payload = toContainerCreateOptions(input);
+    const container = await this.client.createContainer(payload);
+    return container.id;
+  }
+  async startContainer(id) {
+    const container = this.client.getContainer(id);
+    await container.start();
+  }
+  async inspectContainer(id) {
+    const container = this.client.getContainer(id);
+    const inspectInfo = await container.inspect();
+    const state = inspectInfo?.State;
+    const portMappings = formatPortMappings(inspectInfo);
+    return {
+      running: state?.Running,
+      status: state?.Status,
+      exitCode: state?.ExitCode,
+      error: state?.Error,
+      startedAt: state?.StartedAt,
+      finishedAt: state?.FinishedAt,
+      health: state?.Health?.Status,
+      portMappings
+    };
+  }
+  async getContainerLogs(id, tail = 100) {
+    const container = this.client.getContainer(id);
+    const logs = await container.logs({
+      stdout: true,
+      stderr: true,
+      timestamps: true,
+      follow: false,
+      tail
+    });
+    if (typeof logs === "string") {
+      return logs;
+    }
+    return logs.toString("utf8");
+  }
+};
+var createDockerodeClient = (config) => new DockerodeClient(config);
+
+// src/commands/deploy/lib/backend-deploy/dockerode-client/env.ts
+import { existsSync as existsSync4, readFileSync as readFileSync7, statSync as statSync2 } from "node:fs";
+import path2 from "node:path";
+function loadEnvFromFile(envFilePath) {
+  if (!envFilePath) {
+    return {};
+  }
+  const targetPath = path2.resolve(envFilePath);
+  if (!existsSync4(targetPath) || !statSync2(targetPath).isFile()) {
+    return {};
+  }
+  const raw = readFileSync7(targetPath, "utf-8");
+  const result = {};
+  for (const line of raw.split(/\r?\n/)) {
+    const normalized = line.trim();
+    if (normalized === "" || normalized.startsWith("#")) {
+      continue;
+    }
+    const eqIndex = normalized.indexOf("=");
+    if (eqIndex <= 0) {
+      continue;
+    }
+    const key = normalized.slice(0, eqIndex).trim();
+    const value = normalized.slice(eqIndex + 1);
+    if (key !== "") {
+      result[key] = value;
+    }
+  }
+  return result;
+}
+function toEnvArray(env) {
+  return Object.entries(env).map(([key, value]) => `${key}=${value}`);
+}
+
+// src/commands/deploy/lib/backend-deploy/dockerode-client/ports.ts
+function parsePorts(ports) {
+  if (!ports || ports.length === 0) {
+    return {};
+  }
+  const exposedPorts = {};
+  const portBindings = {};
+  for (const rawPort of ports) {
+    const normalized = rawPort.trim();
+    if (normalized === "") {
+      continue;
+    }
+    const [hostAndContainer, protocolPart] = normalized.split("/");
+    const protocol = protocolPart?.trim() === "udp" ? "udp" : "tcp";
+    const segments = hostAndContainer.split(":").map((part) => part.trim());
+    if (segments.length !== 2 || !segments[0] || !segments[1]) {
+      throw new Error(`container.ports \u914D\u7F6E\u65E0\u6548: ${rawPort}`);
+    }
+    const hostPort = segments[0];
+    const containerPort = segments[1];
+    const key = `${containerPort}/${protocol}`;
+    exposedPorts[key] = {};
+    portBindings[key] = [{ HostPort: hostPort }];
+  }
+  return {
+    exposedPorts: Object.keys(exposedPorts).length > 0 ? exposedPorts : void 0,
+    portBindings: Object.keys(portBindings).length > 0 ? portBindings : void 0
+  };
+}
+
+// src/commands/deploy/lib/backend-deploy/image-tag.ts
+var DEPLOY_IMAGE_TAG = /^(?!\.|-)[a-zA-Z0-9][a-zA-Z0-9._-]{0,127}$/;
+function assertDeployImageTag(tag) {
+  const t = tag.trim();
+  if (!DEPLOY_IMAGE_TAG.test(t)) {
+    throw new Error(
+      `${t} \u987B\u4E3A\u5408\u6CD5\u955C\u50CF tag\uFF08\u5B57\u6BCD\u6570\u5B57\u53CA ._-\uFF0C\u4E0D\u4EE5 . \u6216 - \u5F00\u5934\uFF0C\u6700\u957F 128 \u5B57\u7B26\uFF09\uFF0C\u5F53\u524D\uFF1A${JSON.stringify(tag)}`
+    );
+  }
+}
+
+// src/commands/deploy/lib/backend-deploy/local-docker-build.ts
+import { platform } from "node:os";
+
+// src/commands/deploy/lib/backend-deploy/command-runner.ts
+import { execSync } from "child_process";
+
+// src/commands/deploy/lib/backend-deploy/logger.ts
+var Logger = class {
+  static info(message) {
+    console.log(`\x1B[36m[INFO]\x1B[0m ${message}`);
+  }
+  static success(message) {
+    console.log(`\x1B[32m[SUCCESS]\x1B[0m ${message}`);
+  }
+  static warn(message) {
+    console.log(`\x1B[33m[WARN]\x1B[0m ${message}`);
+  }
+  static error(message) {
+    console.log(`\x1B[31m[ERROR]\x1B[0m ${message}`);
+  }
+};
+
+// src/commands/deploy/lib/backend-deploy/command-runner.ts
+var CommandRunner = class {
+  /**
+   * 执行命令
+   */
+  static exec(command, cwd) {
+    try {
+      Logger.info(`\u6267\u884C\u547D\u4EE4: ${command}`);
+      const result = execSync(command, {
+        cwd,
+        encoding: "utf8",
+        stdio: "pipe"
+      });
+      return result.toString().trim();
+    } catch (error) {
+      Logger.error(`\u547D\u4EE4\u6267\u884C\u5931\u8D25: ${command}`);
+      Logger.error(error.message);
+      throw error;
+    }
+  }
+  /**
+   * 执行命令并显示输出
+   */
+  static execWithOutput(command, cwd) {
+    try {
+      Logger.info(`\u6267\u884C\u547D\u4EE4: ${command}`);
+      execSync(command, {
+        cwd,
+        stdio: "inherit"
+      });
+    } catch (error) {
+      Logger.error(`\u547D\u4EE4\u6267\u884C\u5931\u8D25: ${command}`);
+      throw error;
+    }
+  }
+};
+
+// src/commands/deploy/lib/backend-deploy/local-docker-build.ts
+function dockerBuildPlatformFlags() {
+  return platform() === "darwin" ? ["--platform", "linux/amd64"] : [];
+}
+function buildDockerImageLocally(params, cwd) {
+  const platformFlags = dockerBuildPlatformFlags();
+  const command = `docker buildx build ${platformFlags.join(" ")} -t ${params.image}:${params.tag} .`;
+  Logger.info("\u5F00\u59CB\u6784\u5EFA Docker \u955C\u50CF...");
+  Logger.info(`\u955C\u50CF\u540D\u79F0: ${params.image}:${params.tag}`);
+  CommandRunner.exec(command, cwd);
+  Logger.info("\u2713 \u955C\u50CF\u6784\u5EFA\u6210\u529F");
+}
+
+// src/commands/deploy/lib/backend-deploy/registry-login-push.ts
+function dockerLoginPrivateRegistry(params, cwd) {
+  const { registryUser, registryPassword, registryHost } = params;
+  Logger.info("\u68C0\u67E5\u914D\u7F6E\u53C2\u6570...");
+  if (!registryUser || !registryPassword || !registryHost) {
+    Logger.error("Docker \u955C\u50CF\u4ED3\u5E93\u914D\u7F6E\u9519\u8BEF\uFF0C\u7F3A\u5C11\u53C2\u6570\uFF0C\u767B\u5F55\u5931\u8D25\uFF01");
+    process.exit(1);
+  }
+  Logger.info("\u767B\u5F55 Docker \u955C\u50CF\u4ED3\u5E93...");
+  CommandRunner.exec(
+    `docker login --username=${registryUser} --password=${registryPassword} ${registryHost}`,
+    cwd
+  );
+  Logger.info("\u2713 Docker \u767B\u5F55\u6210\u529F");
+}
+function dockerTagImage(params, cwd) {
+  const { image, tag, registryHost, registryNamespace } = params;
+  Logger.info("\u6807\u8BB0 Docker \u955C\u50CF...");
+  CommandRunner.exec(
+    `docker tag ${image}:${tag} ${registryHost}/${registryNamespace}/${image}:${tag}`,
+    cwd
+  );
+  Logger.info("\u2713 \u955C\u50CF\u6807\u8BB0\u6210\u529F");
+}
+function dockerPushImage(params, cwd) {
+  const { image, tag, registryHost, registryNamespace } = params;
+  Logger.info("\u5F00\u59CB\u63A8\u9001 Docker \u955C\u50CF...");
+  CommandRunner.exec(
+    `docker push ${registryHost}/${registryNamespace}/${image}:${tag}`,
+    cwd
+  );
+  Logger.info("\u2713 \u955C\u50CF\u63A8\u9001\u6210\u529F");
+}
+
+// src/commands/deploy/lib/backend-deploy/resolve-dockerfile.ts
+import { existsSync as existsSync5 } from "node:fs";
+import path3 from "node:path";
+function resolveDockerBuildPaths(cwd) {
+  const dockerfilePath = path3.join(cwd, "Dockerfile");
+  Logger.info(`\u67E5\u627EDockerfile\u6587\u4EF6\uFF0C\u8DEF\u5F84: ${dockerfilePath}`);
+  if (!existsSync5(dockerfilePath)) {
+    throw new Error(`Dockerfile \u4E0D\u5B58\u5728\uFF1A${dockerfilePath}`);
+  }
+  Logger.info("\u2713 Dockerfile \u5B58\u5728");
+  return dockerfilePath;
+}
+
+// src/commands/deploy/lib/backend-deploy/backend-deploy-workflow.ts
+var BackendDeployWorkflow = class {
+  constructor(params) {
+    this.params = params;
+  }
+  params;
+  /**
+   * @param cwd - 解析相对路径时的基准目录（Dockerfile）
+   */
+  async run(cwd) {
+    resolveDockerBuildPaths(cwd);
+    assertDeployImageTag(this.params.tag);
+    buildDockerImageLocally(this.params, cwd);
+    dockerLoginPrivateRegistry(this.params, cwd);
+    dockerTagImage(this.params, cwd);
+    dockerPushImage(this.params, cwd);
+    await this.deployRemoteContainer(cwd);
+  }
+  async deployRemoteContainer(cwd) {
+    const remoteClient = createDockerodeClient({
+      host: this.params.remoteHost,
+      port: this.params.remotePort,
+      protocol: this.params.remoteProtocol,
+      ca: this.params.remoteCaPath,
+      cert: this.params.remoteCertPath,
+      key: this.params.remoteKeyPath
+    });
+    const serveraddress = `https://${this.params.registryHost}`;
+    const image = `${this.params.registryHost}/${this.params.registryNamespace}/${this.params.image}:${this.params.tag}`;
+    const containerName = `${this.params.image}.${this.params.tag}`;
+    const existingContainerId = await remoteClient.findContainerIdByName(
+      containerName
+    );
+    if (existingContainerId) {
+      Logger.info(`\u8FDC\u7A0B\u5BB9\u5668\u300C${containerName}\u300D\u5DF2\u5B58\u5728\uFF0C\u6B63\u5728\u505C\u6B62\u5E76\u5220\u9664\u5BB9\u5668...`);
+      await remoteClient.stopContainer(existingContainerId);
+      await remoteClient.removeContainer(existingContainerId);
+    }
+    if (await remoteClient.imageExists(image)) {
+      Logger.info("\u8FDC\u7A0B\u5DF2\u5B58\u5728\u540C\u540D\u955C\u50CF\uFF0C\u6B63\u5728\u5220\u9664\u4EE5\u4FBF\u91CD\u65B0\u62C9\u53D6...");
+      await remoteClient.removeImage(image);
+    }
+    await remoteClient.pullImage(image, {
+      username: this.params.registryUser,
+      password: this.params.registryPassword,
+      serveraddress
+    });
+    Logger.success("\u8FDC\u7A0B\u62C9\u53D6\u955C\u50CF\u5B8C\u6210");
+    const envFilePath = path4.resolve(cwd, this.params.envFilePath || ".env");
+    const envObj = loadEnvFromFile(envFilePath);
+    if (this.params.dockerNetwork?.trim()) {
+      Logger.info(`\u8FDC\u7A0B\u5BB9\u5668\u5C06\u52A0\u5165 Docker \u7F51\u7EDC\uFF1A${this.params.dockerNetwork.trim()}`);
+    }
+    const containerId = await remoteClient.createContainer({
+      name: containerName,
+      image,
+      env: toEnvArray(envObj),
+      ...parsePorts(this.params.containerPortsMappings),
+      dockerNetwork: this.params.dockerNetwork
+    });
+    await remoteClient.startContainer(containerId);
+    Logger.success("\u8FDC\u7A0B\u5BB9\u5668\u521B\u5EFA\u5E76\u542F\u52A8\u5B8C\u6210");
+  }
+};
+
+// src/commands/deploy/backend.ts
+function registerDeployBackendCommands(program) {
+  program.command("deploy-backend").description(
+    "\u4F7F\u7528\u672C\u5730 Docker \u6784\u5EFA\u540E\u7AEF\u955C\u50CF\u3001\u63A8\u9001\u5230\u79C1\u6709 Registry\uFF0C\u5E76\u5728\u8FDC\u7A0B Docker \u4E3B\u673A\u4E0A\u62C9\u53D6\u5E76\u8FD0\u884C\u5BB9\u5668\uFF08\u8FDE\u63A5\u4FE1\u606F\u89C1 .apm/apm.config.json \u7684 backendDeploy\uFF09"
+  ).argument("[name]", "\u955C\u50CF tag\uFF08\u53EF\u7528\u5206\u652F\u540D\u6216\u8DEF\u5F84\u672B\u6BB5\uFF09", "online").option(
+    "--dir <path>",
+    "\u6784\u5EFA\u4E0A\u4E0B\u6587\u76EE\u5F55\uFF08\u5185\u542B Dockerfile\uFF09\uFF1B\u5355\u4ED3\u9ED8\u8BA4 servers/api",
+    "servers/api"
+  ).option(
+    "--config <path>",
+    "apm.config.json \u8DEF\u5F84\uFF08\u9ED8\u8BA4 .apm/apm.config.json\uFF09"
+  ).option(
+    "-q, --quick",
+    "\u4EC5\u8FDC\u7AEF\u62C9\u53D6\u5E76\u91CD\u542F\u5BB9\u5668\uFF0C\u8DF3\u8FC7\u672C\u5730\u6784\u5EFA\u4E0E\u63A8\u9001\uFF08\u955C\u50CF\u987B\u5DF2\u5728\u4ED3\u5E93\u4E2D\uFF09"
+  ).action(
+    async (tag, opts) => {
+      if (!tag) {
+        console.error("\u8BF7\u4F20\u5165\u6709\u6548\u7684\u540D\u79F0\uFF08\u7B2C\u4E00\u4E2A\u4F4D\u7F6E\u53C2\u6570 <name>\uFF09");
+        process.exit(1);
+      }
+      assertDeployImageTag(tag);
+      const cfg = loadApmConfig({ configPath: opts.config });
+      const fromApm = resolveBackendDeployFromApmConfig(cfg);
+      const dirAbs = path5.resolve(process.cwd(), opts.dir || "servers/api");
+      const params = {
+        image: fromApm.name,
+        tag,
+        registryHost: fromApm.registryHost,
+        registryNamespace: fromApm.registryNamespace,
+        registryUser: fromApm.registryUser,
+        registryPassword: fromApm.registryPassword,
+        remoteHost: fromApm.remoteHost,
+        remotePort: fromApm.remotePort,
+        remoteProtocol: fromApm.remoteProtocol,
+        remoteCaPath: fromApm.caPath ?? "",
+        remoteCertPath: fromApm.certPath ?? "",
+        remoteKeyPath: fromApm.keyPath ?? "",
+        envFilePath: fromApm.envFilePath,
+        containerPortsMappings: fromApm.containerPortsMappings,
+        dockerNetwork: fromApm.dockerNetwork
+      };
+      const workflow = new BackendDeployWorkflow(params);
+      if (opts.quick) {
+        await workflow.deployRemoteContainer(dirAbs);
+      } else {
+        await workflow.run(dirAbs);
+      }
+      console.log("\u540E\u7AEF\u90E8\u7F72\u6210\u529F");
+    }
+  );
+}
+
+// src/commands/deploy/frontend.ts
+import { copyFile, readdir as readdir2, stat } from "node:fs/promises";
+import path7 from "node:path";
+
+// src/commands/deploy/lib/load-apm-dotenv.ts
+import { existsSync as existsSync6, readFileSync as readFileSync8 } from "node:fs";
+import { join as join6 } from "node:path";
+function loadApmDotEnvIfPresent() {
+  const p = join6(WORKSPACE_APM_DIR, ".env");
+  if (!existsSync6(p)) {
+    return;
+  }
+  let text;
+  try {
+    text = readFileSync8(p, "utf8");
+  } catch {
+    return;
+  }
+  for (const line of text.split("\n")) {
+    const t = line.trim();
+    if (!t || t.startsWith("#")) {
+      continue;
+    }
+    const eq = t.indexOf("=");
+    if (eq <= 0) {
+      continue;
+    }
+    const key = t.slice(0, eq).trim();
+    let val = t.slice(eq + 1).trim();
+    if (val.startsWith('"') && val.endsWith('"') || val.startsWith("'") && val.endsWith("'")) {
+      val = val.slice(1, -1);
+    }
+    if (process.env[key] === void 0) {
+      process.env[key] = val;
+    }
+  }
+}
+
+// src/commands/deploy/lib/minio.ts
+import { statSync as statSync3 } from "node:fs";
+import { readdir } from "node:fs/promises";
+import path6 from "node:path";
+import * as Minio from "minio";
+var DEFAULT_MAX_FILE_SIZE_MB = 50;
+async function isDirectoryPath(dir) {
+  try {
+    const st = statSync3(dir);
+    return st.isDirectory();
+  } catch {
+    return false;
+  }
+}
+function sanitizeRelativePath(rel) {
+  const norm = rel.replace(/\\/g, "/").replace(/^\/+/, "");
+  const segments = norm.split("/").filter(Boolean);
+  for (const s of segments) {
+    if (s === "." || s === "..") {
+      throw new Error(`\u975E\u6CD5\u76F8\u5BF9\u8DEF\u5F84\u7247\u6BB5\uFF1A${s}`);
+    }
+  }
+  return segments.join("/");
+}
+async function collectFiles(root) {
+  const out = [];
+  async function walk(dir, prefix) {
+    const entries = await readdir(dir, { withFileTypes: true });
+    for (const e of entries) {
+      const name = e.name;
+      if (name === "." || name === "..") {
+        continue;
+      }
+      const abs = path6.join(dir, name);
+      const rel = prefix ? `${prefix}/${name}` : name;
+      if (e.isDirectory()) {
+        await walk(abs, rel);
+      } else if (e.isFile()) {
+        const st = statSync3(abs);
+        out.push({
+          absPath: abs,
+          relativePath: rel.replace(/\\/g, "/"),
+          size: st.size
+        });
+      }
+    }
+  }
+  await walk(root, "");
+  out.sort((a, b) => a.relativePath.localeCompare(b.relativePath));
+  return out;
+}
+async function readArtifactFile(absPath) {
+  const { readFile } = await import("node:fs/promises");
+  return readFile(absPath);
+}
+function toMB(bytes) {
+  return Math.round(bytes / (1024 * 1024) * 1e3) / 1e3;
+}
+var MIME = {
+  ".html": "text/html; charset=utf-8",
+  ".css": "text/css; charset=utf-8",
+  ".js": "application/javascript; charset=utf-8",
+  ".json": "application/json; charset=utf-8",
+  ".svg": "image/svg+xml",
+  ".png": "image/png",
+  ".jpg": "image/jpeg",
+  ".jpeg": "image/jpeg",
+  ".gif": "image/gif",
+  ".webp": "image/webp",
+  ".woff": "font/woff",
+  ".woff2": "font/woff2",
+  ".ttf": "font/ttf",
+  ".ico": "image/x-icon",
+  ".txt": "text/plain; charset=utf-8",
+  ".map": "application/json"
+};
+function detectMimeType(filePath) {
+  const ext = path6.extname(filePath).toLowerCase();
+  return MIME[ext] ?? "";
+}
+var MinioClient = class {
+  inner;
+  constructor(opts) {
+    const endPoint = opts.endPoint.replace(/^https?:\/\//i, "").split("/")[0] ?? opts.endPoint;
+    this.inner = new Minio.Client({
+      endPoint,
+      port: opts.port,
+      useSSL: opts.useSSL,
+      accessKey: opts.accessKey,
+      secretKey: opts.secretKey
+    });
+  }
+  async ensureBucket(bucket) {
+    const exists = await this.inner.bucketExists(bucket);
+    if (!exists) {
+      await this.inner.makeBucket(bucket);
+    }
+  }
+  async deleteObjectsByPrefix(bucket, prefix) {
+    const objectsStream = this.inner.listObjectsV2(bucket, prefix, true);
+    const keys = [];
+    await new Promise((resolve4, reject) => {
+      objectsStream.on("data", (obj) => {
+        if (obj.name) {
+          keys.push(obj.name);
+        }
+      });
+      objectsStream.on("error", reject);
+      objectsStream.on("end", resolve4);
+    });
+    const chunkSize = 500;
+    for (let i = 0; i < keys.length; i += chunkSize) {
+      const chunk = keys.slice(i, i + chunkSize);
+      await this.inner.removeObjects(
+        bucket,
+        chunk.map((name) => name)
+      );
+    }
+  }
+  async putObject(bucket, objectKey, body, meta) {
+    await this.inner.putObject(bucket, objectKey, body, body.length, meta);
+  }
+  /** 匿名可读当前桶全部对象（便于静态站点直链） */
+  async setBucketPublicRead(bucket) {
+    const policy = {
+      Version: "2012-10-17",
+      Statement: [
+        {
+          Effect: "Allow",
+          Principal: { AWS: ["*"] },
+          Action: ["s3:GetObject"],
+          Resource: [`arn:aws:s3:::${bucket}/*`]
+        }
+      ]
+    };
+    await this.inner.setBucketPolicy(bucket, JSON.stringify(policy));
+  }
+};
+
+// src/commands/deploy/frontend.ts
+function resolveArtifactNamePrefix(cfg) {
+  const nameRaw = (cfg.name ?? "").trim();
+  if (!nameRaw) {
+    console.error(
+      "\u8BF7\u5728 .apm/apm.config.json \u9876\u5C42\u914D\u7F6E name\uFF08\u4F5C\u4E3A MinIO \u5BF9\u8C61\u952E\u524D\u7F00\uFF09"
+    );
+    process.exit(1);
+  }
+  if (nameRaw.includes(":")) {
+    console.error("apm.config.json \u7684 name \u4E0D\u80FD\u5305\u542B ':'");
+    process.exit(1);
+  }
+  try {
+    return sanitizeRelativePath(nameRaw.replace(/\\/g, "/"));
+  } catch {
+    console.error("apm.config.json \u7684 name \u975E\u6CD5\uFF08\u8DEF\u5F84\u7247\u6BB5\u4E0D\u80FD\u4E3A . \u6216 ..\uFF09");
+    process.exit(1);
+  }
+}
+function artifactObjectKey(namePrefix, branchSegment, relativePath) {
+  const base = sanitizeRelativePath(namePrefix);
+  const rel = sanitizeRelativePath(relativePath);
+  return `${base}/${branchSegment}/dist/${rel}`;
+}
+function mergeMinioFromEnv(settings) {
+  const ep = process.env.MINIO_ENDPOINT?.trim();
+  const portRaw = process.env.MINIO_PORT?.trim();
+  const sslRaw = process.env.MINIO_USE_SSL?.trim().toLowerCase();
+  const ak = process.env.MINIO_ACCESS_KEY?.trim();
+  const sk = process.env.MINIO_SECRET_KEY?.trim();
+  const bucket = process.env.MINIO_BUCKET?.trim();
+  const port = portRaw ? Number.parseInt(portRaw, 10) : void 0;
+  let useSsl = settings.useSsl;
+  if (sslRaw === "true" || sslRaw === "1") {
+    useSsl = true;
+  }
+  if (sslRaw === "false" || sslRaw === "0") {
+    useSsl = false;
+  }
+  return {
+    ...settings,
+    endpoint: ep || settings.endpoint,
+    port: port !== void 0 && Number.isFinite(port) && port > 0 ? port : settings.port,
+    useSsl,
+    accessKey: ak || settings.accessKey,
+    secretKey: sk || settings.secretKey,
+    bucket: bucket || settings.bucket
+  };
+}
+async function ensureArtifactRootIndexHtml(root) {
+  const indexHtmlPath = path7.join(root, "index.html");
+  try {
+    const st = await stat(indexHtmlPath);
+    if (st.isFile()) {
+      return;
+    }
+  } catch {
+  }
+  let entries;
+  try {
+    entries = await readdir2(root, { withFileTypes: true });
+  } catch (e) {
+    console.error(`\u65E0\u6CD5\u8BFB\u53D6\u4EA7\u7269\u76EE\u5F55\uFF1A${root}`, e);
+    process.exit(1);
+  }
+  const dirNames = entries.filter((e) => e.isDirectory()).map((e) => String(e.name)).sort();
+  for (const name of dirNames) {
+    const candidate = path7.join(root, name, "index.html");
+    try {
+      const st = await stat(candidate);
+      if (!st.isFile()) {
+        continue;
+      }
+    } catch {
+      continue;
+    }
+    await copyFile(candidate, indexHtmlPath);
+    console.error(
+      `\u4EA7\u7269\u534F\u8BAE\uFF1A\u5DF2\u5C06 ${path7.join(name, "index.html")} \u590D\u5236\u4E3A\u6839\u76EE\u5F55 index.html`
+    );
+    return;
+  }
+  console.error(
+    `\u4EA7\u7269\u534F\u8BAE\uFF1A\u9700\u5728\u4EA7\u7269\u6839\u76EE\u5F55\u5B58\u5728 index.html\uFF0C\u6216\u5728\u5176\u4E00\u7EA7\u5B50\u76EE\u5F55\u4E2D\u5B58\u5728\u53EF\u590D\u5236\u7684 index.html\uFF08\u672A\u5728 ${root} \u4E0B\u627E\u5230\uFF09`
+  );
+  process.exit(1);
+}
+function registerDeployFrontendCommands(program) {
+  program.command("deploy-frontend").description(
+    "\u9012\u5F52\u4E0A\u4F20\u524D\u7AEF\u4EA7\u7269\u76EE\u5F55\u5230 MinIO\uFF0C\u5E76\u5728\u6210\u529F\u540E\u4E3A\u8BE5\u6876\u8BBE\u7F6E\u533F\u540D\u53EF\u8BFB\u7B56\u7565\uFF08\u53EF\u5148\u914D\u7F6E .apm/.env \u7684 MINIO_*\uFF0C\u5DF2\u6709\u73AF\u5883\u53D8\u91CF\u4F18\u5148\uFF09"
+  ).argument("[name]", "\u73AF\u5883\u540D", "online").option(
+    "--dir <path>",
+    "\u4EA7\u7269\u76EE\u5F55\uFF1B\u5355\u4ED3\u9ED8\u8BA4 apps/web/dist\uFF08\u9700\u5148 rush build / vite build\uFF09",
+    "apps/web/dist"
+  ).option(
+    "--config <path>",
+    "apm.config.json \u8DEF\u5F84\uFF08\u9ED8\u8BA4 .apm/apm.config.json\uFF09"
+  ).option(
+    "--max-file-size-mb <mb>",
+    `\u5355\u6587\u4EF6\u5927\u5C0F\u4E0A\u9650\uFF0C\u9ED8\u8BA4 ${DEFAULT_MAX_FILE_SIZE_MB}`,
+    (v) => Number.parseInt(String(v), 10)
+  ).action(
+    async (name, opts) => {
+      loadApmDotEnvIfPresent();
+      const cfg = loadApmConfig({ configPath: opts.config });
+      const namePrefix = resolveArtifactNamePrefix(cfg);
+      const settings = mergeMinioFromEnv(
+        resolveFrontendDeployFromApmConfig(cfg)
+      );
+      const minio = new MinioClient({
+        endPoint: settings.endpoint,
+        port: settings.port,
+        useSSL: settings.useSsl,
+        accessKey: settings.accessKey,
+        secretKey: settings.secretKey
+      });
+      const bucket = settings.bucket;
+      const root = path7.resolve(process.cwd(), opts.dir || "apps/web/dist");
+      if (!await isDirectoryPath(root)) {
+        console.error(`\u4EA7\u7269\u76EE\u5F55\u4E0D\u5B58\u5728\uFF1A${root}`);
+        process.exit(1);
+      }
+      await ensureArtifactRootIndexHtml(root);
+      const maxBytes = Math.max(
+        1,
+        Number.isFinite(opts.maxFileSizeMb) ? Math.floor(
+          (opts.maxFileSizeMb ?? DEFAULT_MAX_FILE_SIZE_MB) * 1024 * 1024
+        ) : DEFAULT_MAX_FILE_SIZE_MB * 1024 * 1024
+      );
+      const files = await collectFiles(root);
+      if (files.length === 0) {
+        console.error(`\u76EE\u5F55\u4E3A\u7A7A\uFF1A${root}`);
+        process.exit(1);
+      }
+      let uploaded = 0;
+      let totalBytes = 0;
+      console.error(`\u5F00\u59CB\u76F4\u8FDE MinIO \u4E0A\u4F20\uFF0C\u5171 ${files.length} \u4E2A\u6587\u4EF6\u2026`);
+      await minio.ensureBucket(bucket);
+      await minio.deleteObjectsByPrefix(
+        bucket,
+        `${namePrefix}/${name}/dist/`
+      );
+      for (const f of files) {
+        if (f.size > maxBytes) {
+          console.error(
+            `\u6587\u4EF6\u8FC7\u5927\uFF0C\u5DF2\u62D2\u7EDD\uFF1A${f.relativePath}\uFF08${toMB(f.size)}MB > ${toMB(
+              maxBytes
+            )}MB\uFF09`
+          );
+          process.exit(1);
+        }
+        const buf = await readArtifactFile(f.absPath);
+        const cleanRel = sanitizeRelativePath(f.relativePath);
+        const objectKey = artifactObjectKey(namePrefix, name, cleanRel);
+        const mimeType = detectMimeType(f.relativePath).trim().toLowerCase() || "application/octet-stream";
+        await minio.putObject(bucket, objectKey, buf, {
+          "Content-Type": mimeType
+        });
+        uploaded += 1;
+        totalBytes += buf.length;
+        console.error(
+          `[${uploaded}/${files.length}] ${f.relativePath} -> ${objectKey}`
+        );
+      }
+      console.error("\u6B63\u5728\u8BBE\u7F6E\u6876\u7B56\u7565\uFF08\u533F\u540D\u53EF\u8BFB\u5BF9\u8C61\uFF0C\u4FBF\u4E8E HTTP \u76F4\u94FE\uFF09\u2026");
+      await minio.setBucketPublicRead(bucket);
+      console.log(
+        JSON.stringify(
+          {
+            ok: true,
+            namePrefix,
+            envName: name,
+            bucket,
+            fileCount: uploaded,
+            totalBytes,
+            bucketPublicRead: true
+          },
+          null,
+          2
+        )
+      );
+    }
+  );
+}
+
+// src/commands/deploy/index.ts
+function registerDeployCommands(program) {
+  registerDeployBackendCommands(program);
+  registerDeployFrontendCommands(program);
+}
+
 // src/index.ts
 function readCliVersion() {
   try {
     const dir = dirname2(fileURLToPath2(import.meta.url));
-    const pkgPath = join6(dir, "..", "package.json");
-    const pkg = JSON.parse(readFileSync5(pkgPath, "utf8"));
+    const pkgPath = join7(dir, "..", "package.json");
+    const pkg = JSON.parse(readFileSync9(pkgPath, "utf8"));
     return pkg.version ?? "0.0.0";
   } catch {
     return "0.0.0";
@@ -641,6 +1650,7 @@ function buildProgram() {
   program.command("update-dev-status").description("POST /api/cli/requirements/update-dev-status").argument("<requirementId>", "\u9700\u6C42 ID").requiredOption("--status <status>", "\u6210\u5458\u5F00\u53D1\u72B6\u6001\uFF08\u81EA\u7531\u6587\u672C\uFF09").action(async (requirementId, options) => {
     await runUpdateDevStatus(requirementId, options.status);
   });
+  registerDeployCommands(program);
   return program;
 }
 async function main() {