weapp-vite 7.1.4 → 7.2.1

package/dist/cli.mjs

@@ -1,5 +1,5 @@
-import { A as getDefaultIdeProjectRoot, C as collectPreloadPages, D as loadViteConfigFile, E as suggestPreloadRules, M as isPathInside, O as createCjsConfigLoadError, S as getProjectConfigFileName, T as resolvePreloadPackageIdentifier, _ as SHARED_CHUNK_VIRTUAL_PREFIX, a as createGlassEaselAnalyzeResult, b as resolveWeappConfigFile, f as getBackendForCapability, g as createSharedBuildConfig, h as syncManagedTsconfigBootstrapFiles, j as shouldPassPlatformArgToIdeOpen, k as parseCommentJson, m as syncProjectSupportFiles, o as formatBytes, p as resolveBackendExecution, t as createCompilerContext, v as resolveHmrProfileJsonPath, w as findPreloadRuleKey, x as checkRuntime } from "./createContext-CsYIo9DO.mjs";
-import { f as VERSION, i as findJsEntry, o as findTemplateEntry, s as findVueEntry } from "./file-CHisoC18.mjs";
+import { A as getDefaultIdeProjectRoot, C as collectPreloadPages, D as loadViteConfigFile, E as suggestPreloadRules, M as isPathInside, O as createCjsConfigLoadError, S as getProjectConfigFileName, T as resolvePreloadPackageIdentifier, _ as SHARED_CHUNK_VIRTUAL_PREFIX, a as createGlassEaselAnalyzeResult, b as resolveWeappConfigFile, f as getBackendForCapability, g as createSharedBuildConfig, h as syncManagedTsconfigBootstrapFiles, j as shouldPassPlatformArgToIdeOpen, k as parseCommentJson, m as syncProjectSupportFiles, o as formatBytes, p as resolveBackendExecution, t as createCompilerContext, v as resolveHmrProfileJsonPath, w as findPreloadRuleKey, x as checkRuntime } from "./createContext-403iJEyy.mjs";
+import { f as VERSION, i as findJsEntry, o as findTemplateEntry, s as findVueEntry } from "./file-CfgcKGLR.mjs";
 import { r as logger_default, t as colors } from "./logger-mt4mSTqV.mjs";
 import { c as startWeappViteMcpServer, l as detectAiDevelopmentEnvironment, s as resolveWeappMcpConfig } from "./mcp-BG6TliEg.mjs";
 import { createRequire } from "node:module";
@@ -12,14 +12,19 @@ import process from "node:process";
 import { parse } from "vue/compiler-sfc";
 import fs$2, { mkdir, writeFile } from "node:fs/promises";
 import { build, createServer } from "vite";
+import { createHash } from "node:crypto";
+import { promisify } from "node:util";
 import os from "node:os";
 import { execFile, spawn } from "node:child_process";
 import { Buffer } from "node:buffer";
 import { cac } from "cac";
 import { RETRY_CANCEL_KEYS, RETRY_CONFIRM_KEYS, bootstrapWechatDevtoolsSettings, buildWechatIdeNpm, clearWechatIdeCache, clearWechatIdeCacheByAutomator, closeSharedMiniProgram, closeWechatIdeProject, compileWechatIdeByAutomator, connectOpenedAutomator, createSharedInputSession, createWechatIdeLoginRequiredExitError, defaultCustomConfigFilePath, detectWechatDevtoolsServicePort, dispatchWechatCliCommand, formatAutomatorLoginError, getConfig, getWechatIdeTestAccounts, getWechatIdeTicket, getWechatIdeToolInfo, isAutomatorLoginError, isRetryableAutomatorLaunchError, isWeappIdeTopLevelCommand, isWechatIdeEngineBuildEndpointMissingError, isWechatIdeLoggedIn, isWechatIdeLoginRequiredError, isWechatIdeLoginRequiredExitError, launchAutomator, parse as parse$1, promptRetryKeypress, promptWechatIdeLoginRetry, quitWechatIde, refreshWechatIdeTicket, resetWechatIdeFileUtilsByHttp, resolveCliPath, resolveProjectAutomatorPort, runRetryableCommand, runWechatIdeEngineBuild, runWithSuspendedSharedInput, setWechatIdeTicket, startForwardConsole, takeScreenshot } from "weapp-ide-cli";
-import { promisify } from "node:util";
 import { brotliCompressSync, gzipSync } from "node:zlib";
+import { buildOtpAuthUrl, refreshTempAuthCode } from "devframe/node/auth";
 import { resolveCommand } from "package-manager-detector/commands";
+import { defineDevframe, defineRpcFunction } from "devframe";
+import { Server } from "node:http";
+import { initDevframe } from "devframe/initiate";
 import { generateJs, generateJson, generateWxml, generateWxss } from "@weapp-core/schematics";
 import { determineAgent } from "@vercel/detect-agent";
 import { initConfig } from "@weapp-core/init";
@@ -1468,7 +1473,9 @@ function resolveAnalyzeHistoryMetadata(configService) {
 }
 function createAnalyzeMetadata(configService, now = /* @__PURE__ */ new Date()) {
 	const history = resolveAnalyzeHistoryMetadata(configService);
+	const packageName = configService.packageJson?.name;
 	return {
+		projectName: typeof packageName === "string" && packageName.trim() ? packageName.trim() : path.basename(configService.cwd),
 		generatedAt: now.toISOString(),
 		budgets: resolveAnalyzeBudgets(configService),
 		history: {
@@ -1489,6 +1496,7 @@ function classifyModuleSourceKind(options) {
 }
 function resolvePluginAssetAbsolute(normalizedFileName, pluginRoot) {
 	if (!pluginRoot) return;
+	if (posix.isAbsolute(normalizedFileName)) return isPathInside(pluginRoot, normalizedFileName) ? normalizedFileName : void 0;
 	const pluginBase = posix.basename(pluginRoot);
 	if (normalizedFileName !== pluginBase && !normalizedFileName.startsWith(`${pluginBase}/`)) return;
 	const relative = normalizedFileName === pluginBase ? "" : normalizedFileName.slice(pluginBase.length + 1);
@@ -1546,7 +1554,7 @@ function resolveModuleSourceType(absoluteId, ctx) {
 function resolveAssetSource(fileName, ctx) {
 	const { configService } = ctx;
 	const normalized = posix.normalize(fileName);
-	const srcCandidate = posix.resolve(configService.absoluteSrcRoot, normalized);
+	const srcCandidate = posix.isAbsolute(normalized) ? normalized : posix.resolve(configService.absoluteSrcRoot, normalized);
 	if (isPathInside(configService.absoluteSrcRoot, srcCandidate)) return {
 		absolute: srcCandidate,
 		source: configService.relativeAbsoluteSrcRoot(srcCandidate),
@@ -1615,6 +1623,8 @@ function processChunk(chunk, origin, ctx, classifierContext, packages, modules)
 		isEntry: chunk.isEntry,
 		modules: []
 	};
+	if (chunk.imports.length > 0) chunkEntry.imports = [...chunk.imports].sort((a, b) => a.localeCompare(b));
+	if (chunk.dynamicImports.length > 0) chunkEntry.dynamicImports = [...chunk.dynamicImports].sort((a, b) => a.localeCompare(b));
 	const moduleEntries = Object.entries(chunk.modules ?? {});
 	for (const [rawModuleId, info] of moduleEntries) {
 		const absoluteId = normalizeModuleId(rawModuleId);
@@ -1644,17 +1654,27 @@ function processAsset(asset, origin, ctx, classifierContext, packages, modules)
 		size: assetBuffer?.byteLength,
 		...getCompressedSizes$1(assetBuffer)
 	};
-	const assetSource = resolveAssetSource(asset.fileName, ctx);
+	let assetSource;
+	for (const sourceFile of [...asset.originalFileNames ?? [], asset.fileName]) {
+		assetSource = resolveAssetSource(sourceFile, ctx);
+		if (assetSource) break;
+	}
 	if (assetSource) {
 		entry.source = assetSource.source;
+		entry.sourceType = assetSource.sourceType;
 		registerModuleInPackage(modules, assetSource.absolute, assetSource.source, assetSource.sourceType, classification.id, asset.fileName);
 	}
 	packageEntry.files.set(asset.fileName, entry);
 }
-function processOutput(output, origin, ctx, classifierContext, packages, modules) {
+function processOutput(output, origin, ctx, classifierContext, packages, modules, onArtifact) {
 	if (!output) return;
-	for (const item of output.output ?? []) if (item.type === "chunk") processChunk(item, origin, ctx, classifierContext, packages, modules);
-	else if (item.type === "asset") processAsset(item, origin, ctx, classifierContext, packages, modules);
+	for (const item of output.output ?? []) if (item.type === "chunk") {
+		processChunk(item, origin, ctx, classifierContext, packages, modules);
+		onArtifact?.(item.fileName, item.code);
+	} else if (item.type === "asset") {
+		processAsset(item, origin, ctx, classifierContext, packages, modules);
+		onArtifact?.(item.fileName, item.source);
+	}
 }
 //#endregion
 //#region src/analyze/subpackages/summary.ts
@@ -1757,7 +1777,7 @@ function summarizeSubPackages(metas) {
 }
 //#endregion
 //#region src/analyze/subpackages/index.ts
-async function analyzeSubpackages(ctx) {
+async function analyzeSubpackages(ctx, options) {
 	const { configService, scanService, buildService } = ctx;
 	if (!configService || !scanService || !buildService) throw new Error("analyzeSubpackages 需要先初始化 configService、scanService 和 buildService。");
 	await scanService.loadAppEntry();
@@ -1785,12 +1805,12 @@ async function analyzeSubpackages(ctx) {
 	const modules = /* @__PURE__ */ new Map();
 	const componentJsonConfigs = [];
 	for (const output of mainOutputs) {
-		processOutput(output, "main", ctx, classifierContext, packages, modules);
+		processOutput(output, "main", ctx, classifierContext, packages, modules, options?.onArtifact);
 		componentJsonConfigs.push(...collectAnalyzeComponentJsonConfigs(output));
 	}
 	for (const root of independentRoots) {
 		const output = buildService.getIndependentOutput(root);
-		processOutput(output, "independent", ctx, classifierContext, packages, modules);
+		processOutput(output, "independent", ctx, classifierContext, packages, modules, options?.onArtifact);
 		componentJsonConfigs.push(...collectAnalyzeComponentJsonConfigs(output));
 	}
 	expandVirtualModulePlacements(modules, packages, classifierContext);
@@ -2239,15 +2259,515 @@ function createAnalyzeMarkdownReport(result, previousResult) {
 	].join("\n");
 }
 //#endregion
+//#region src/cli/analyze/dashboardDevframe/artifacts.ts
+const MAX_DASHBOARD_FILE_CONTENT_BYTES = 2097152;
+/** 保留同一次分析的产物内容，不读取或改写开发构建目录。 */
+function createDashboardArtifactSnapshot() {
+	const files = /* @__PURE__ */ new Map();
+	let retainedBytes = 0;
+	return {
+		files,
+		capture(fileName, source) {
+			const key = fileName.replaceAll("\\", "/");
+			const previous = files.get(key);
+			if (previous?.content !== void 0) retainedBytes -= previous.size;
+			const size = typeof source === "string" ? Buffer.byteLength(source, "utf8") : source.byteLength;
+			if (size > 2097152) {
+				files.set(key, {
+					size,
+					error: `文件超过 ${MAX_DASHBOARD_FILE_CONTENT_BYTES} 字节，已拒绝读取。`
+				});
+				return;
+			}
+			if (retainedBytes + size > 33554432) {
+				files.set(key, {
+					size,
+					error: "分析产物内容超过快照容量上限，已拒绝读取。"
+				});
+				return;
+			}
+			const content = typeof source === "string" ? source : Buffer.from(source.buffer, source.byteOffset, source.byteLength).toString("utf8");
+			files.set(key, {
+				content,
+				size
+			});
+			retainedBytes += size;
+		}
+	};
+}
+//#endregion
+//#region src/cli/analyze/dashboardDevframe/paths.ts
+function normalizeDashboardRelativePath(value) {
+	return value.replaceAll("\\", "/");
+}
+function stripDashboardFileQuery(value) {
+	const queryIndex = value.indexOf("?");
+	return queryIndex === -1 ? value : value.slice(0, queryIndex);
+}
+function addDashboardAllowedPath(paths, value) {
+	if (!value || value.includes("\0")) return;
+	const normalizedPath = normalizeDashboardRelativePath(stripDashboardFileQuery(value));
+	if (!normalizedPath || path.isAbsolute(normalizedPath)) return;
+	paths.add(normalizedPath);
+}
+function addDashboardAllowedSourcePath(paths, value, rootKind) {
+	if (!value || value.includes("\0")) return;
+	const normalizedPath = normalizeDashboardRelativePath(stripDashboardFileQuery(value));
+	if (!normalizedPath || path.isAbsolute(normalizedPath)) return;
+	const rootKinds = paths.get(normalizedPath) ?? /* @__PURE__ */ new Set();
+	rootKinds.add(rootKind);
+	paths.set(normalizedPath, rootKinds);
+}
+function resolveDashboardSourceRootKind(sourceType) {
+	if (sourceType === "plugin") return "plugin";
+	if (sourceType === "workspace" || sourceType === "node_modules") return "project";
+	return "src";
+}
+function createDashboardContentAllowlist(result) {
+	const artifactPaths = /* @__PURE__ */ new Set();
+	const sourcePaths = /* @__PURE__ */ new Map();
+	for (const packageReport of result.packages) for (const file of packageReport.files) {
+		addDashboardAllowedPath(artifactPaths, file.file);
+		const fileSourceType = file.sourceType ?? file.modules?.find((module) => module.source === file.source)?.sourceType;
+		addDashboardAllowedSourcePath(sourcePaths, file.source, resolveDashboardSourceRootKind(fileSourceType));
+		for (const module of file.modules ?? []) addDashboardAllowedSourcePath(sourcePaths, module.source, module.sourceType === "src" ? "src" : module.sourceType === "plugin" ? "plugin" : "project");
+	}
+	return {
+		artifactPaths,
+		sourcePaths
+	};
+}
+function resolveDashboardContentPath(root, requestPath, options) {
+	if (!root || !requestPath || requestPath.includes("\0")) return;
+	const normalizedRequestPath = normalizeDashboardRelativePath(stripDashboardFileQuery(requestPath));
+	if (path.isAbsolute(normalizedRequestPath) || !options.allowedPaths.has(normalizedRequestPath)) return;
+	const rootPath = path.resolve(root);
+	const absolutePath = path.resolve(rootPath, normalizedRequestPath);
+	const relativePath = path.relative(rootPath, absolutePath);
+	const allowParent = options.allowParent === true;
+	if (!relativePath || !allowParent && (relativePath.startsWith("..") || path.isAbsolute(relativePath))) return;
+	return {
+		absolutePath,
+		allowParent,
+		relativePath: allowParent ? normalizedRequestPath : normalizeDashboardRelativePath(relativePath),
+		rootPath
+	};
+}
+function resolveDashboardSourceContentPaths(roots, requestPath, allowedPaths) {
+	const normalizedRequestPath = normalizeDashboardRelativePath(stripDashboardFileQuery(requestPath));
+	const rootKinds = allowedPaths.get(normalizedRequestPath);
+	if (!rootKinds || rootKinds.size !== 1) return [];
+	const [rootKind] = rootKinds;
+	if (rootKind === "project") {
+		const resolved = resolveDashboardContentPath(roots.projectRoot, normalizedRequestPath, {
+			allowParent: true,
+			allowedPaths: /* @__PURE__ */ new Set([normalizedRequestPath])
+		});
+		return resolved ? [resolved] : [];
+	}
+	if (rootKind === "plugin") {
+		if (!roots.pluginRoot) return [];
+		const pluginBase = path.basename(roots.pluginRoot);
+		if (normalizedRequestPath !== pluginBase && !normalizedRequestPath.startsWith(`${pluginBase}/`)) return [];
+		const pluginRelativePath = normalizedRequestPath === pluginBase ? "" : normalizedRequestPath.slice(pluginBase.length + 1);
+		const resolved = resolveDashboardContentPath(roots.pluginRoot, pluginRelativePath, { allowedPaths: /* @__PURE__ */ new Set([pluginRelativePath]) });
+		return resolved ? [{
+			...resolved,
+			relativePath: normalizedRequestPath
+		}] : [];
+	}
+	if (!roots.srcRoot) return [];
+	const candidates = (normalizedRequestPath.startsWith("src/") ? [normalizedRequestPath, normalizedRequestPath.slice(4)] : [normalizedRequestPath]).flatMap((relativePath) => {
+		const resolved = resolveDashboardContentPath(roots.srcRoot, relativePath, { allowedPaths: /* @__PURE__ */ new Set([relativePath]) });
+		return resolved ? [{
+			...resolved,
+			relativePath: normalizedRequestPath
+		}] : [];
+	});
+	return [...new Map(candidates.map((candidate) => [candidate.absolutePath, candidate])).values()];
+}
+function resolveDashboardArtifactPath(requestPath, allowedPaths) {
+	const normalizedPath = normalizeDashboardRelativePath(stripDashboardFileQuery(requestPath));
+	if (!normalizedPath || normalizedPath.includes("\0") || path.isAbsolute(normalizedPath) || path.posix.normalize(normalizedPath).startsWith("..") || !allowedPaths.has(normalizedPath)) return;
+	return normalizedPath;
+}
+//#endregion
+//#region src/cli/analyze/dashboardDevframe/content.ts
+function isPathWithin(rootPath, targetPath) {
+	const relativePath = path.relative(rootPath, targetPath);
+	return !relativePath || !relativePath.startsWith("..") && !path.isAbsolute(relativePath);
+}
+function resolveInspectionRoot(resolved) {
+	let inspectionRoot = resolved.rootPath;
+	if (!resolved.allowParent) return inspectionRoot;
+	while (!isPathWithin(inspectionRoot, resolved.absolutePath)) {
+		const parent = path.dirname(inspectionRoot);
+		if (parent === inspectionRoot) return;
+		inspectionRoot = parent;
+	}
+	return inspectionRoot;
+}
+async function assertDashboardPathHasNoSymlink(resolved) {
+	const inspectionRoot = resolveInspectionRoot(resolved);
+	if (!inspectionRoot) throw new Error("文件路径超出允许范围。");
+	const relativePath = path.relative(inspectionRoot, resolved.absolutePath);
+	let currentPath = inspectionRoot;
+	for (const segment of relativePath.split(path.sep).filter(Boolean)) {
+		currentPath = path.join(currentPath, segment);
+		if ((await fs.promises.lstat(currentPath)).isSymbolicLink()) throw new Error("文件路径包含不允许的符号链接。");
+	}
+}
+function isSameOpenedFile(pathStat, handleStat) {
+	if (pathStat.dev !== handleStat.dev) return false;
+	return pathStat.ino === 0 || handleStat.ino === 0 || pathStat.ino === handleStat.ino;
+}
+async function openDashboardFile(resolved) {
+	await assertDashboardPathHasNoSymlink(resolved);
+	const flags = process.platform === "win32" ? fs.constants.O_RDONLY : fs.constants.O_RDONLY | fs.constants.O_NOFOLLOW;
+	const handle = await fs.promises.open(resolved.absolutePath, flags);
+	try {
+		await assertDashboardPathHasNoSymlink(resolved);
+		const [pathStat, handleStat] = await Promise.all([fs.promises.stat(resolved.absolutePath), handle.stat()]);
+		if (!isSameOpenedFile(pathStat, handleStat)) throw new Error("文件路径在读取期间发生变化。");
+		return handle;
+	} catch (error) {
+		await handle.close();
+		throw error;
+	}
+}
+async function readDashboardFileHandle(handle) {
+	const stat = await handle.stat();
+	if (!stat.isFile()) throw new Error("目标路径不是文件。");
+	if (stat.size > 2097152) throw new Error(`文件超过 ${MAX_DASHBOARD_FILE_CONTENT_BYTES} 字节，已拒绝读取。`);
+	let content = Buffer.allocUnsafe(Math.min(Math.max(stat.size + 1, 1), 2097153));
+	let offset = 0;
+	while (true) {
+		if (offset === content.length) {
+			if (content.length === 2097153) throw new Error(`文件超过 ${MAX_DASHBOARD_FILE_CONTENT_BYTES} 字节，已拒绝读取。`);
+			const expanded = Buffer.allocUnsafe(Math.min(content.length * 2, 2097153));
+			content.copy(expanded, 0, 0, offset);
+			content = expanded;
+		}
+		const { bytesRead } = await handle.read(content, offset, content.length - offset, offset);
+		if (bytesRead === 0) break;
+		offset += bytesRead;
+		if (offset > 2097152) throw new Error(`文件超过 ${MAX_DASHBOARD_FILE_CONTENT_BYTES} 字节，已拒绝读取。`);
+	}
+	return {
+		content: content.subarray(0, offset).toString("utf8"),
+		size: offset
+	};
+}
+function resolveDashboardFileLanguage(filePath) {
+	const extension = path.extname(filePath).toLowerCase();
+	if ([
+		".js",
+		".mjs",
+		".cjs",
+		".wxs",
+		".sjs"
+	].includes(extension)) return "javascript";
+	if ([
+		".ts",
+		".mts",
+		".cts"
+	].includes(extension)) return "typescript";
+	if ([".json", ".map"].includes(extension)) return "json";
+	if ([
+		".css",
+		".wxss",
+		".scss",
+		".sass",
+		".less"
+	].includes(extension)) return "css";
+	if ([
+		".vue",
+		".wxml",
+		".html"
+	].includes(extension)) return "html";
+	return "plaintext";
+}
+function normalizeDashboardFileRequest(input) {
+	if (!input || typeof input !== "object" || !("kind" in input) || !("path" in input)) throw new Error("必须传入合法的 kind 和相对路径。");
+	const kind = input.kind;
+	const requestPath = input.path;
+	if (kind !== "source" && kind !== "artifact" || typeof requestPath !== "string") throw new Error("必须传入合法的 kind 和相对路径。");
+	return {
+		kind,
+		path: requestPath
+	};
+}
+async function readAllowedDashboardFile(input, roots, allowlist, artifacts) {
+	const request = normalizeDashboardFileRequest(input);
+	if (request.kind === "artifact") {
+		const filePath = resolveDashboardArtifactPath(request.path, allowlist.artifactPaths);
+		if (!filePath) throw new Error("必须传入合法的 kind 和相对路径。");
+		const file = artifacts.get(filePath);
+		if (!file) throw new Error("分析快照中没有此产物内容。");
+		if (file.error || file.content === void 0) throw new Error(file.error ?? "分析快照中没有此产物内容。");
+		return {
+			kind: request.kind,
+			path: filePath,
+			language: resolveDashboardFileLanguage(filePath),
+			size: file.size,
+			content: file.content
+		};
+	}
+	const resolvedCandidates = resolveDashboardSourceContentPaths(roots, request.path, allowlist.sourcePaths);
+	if (resolvedCandidates.length === 0) throw new Error("必须传入合法的 kind 和相对路径。");
+	const openedCandidates = [];
+	try {
+		for (const resolved of resolvedCandidates) try {
+			openedCandidates.push({
+				handle: await openDashboardFile(resolved),
+				resolved
+			});
+		} catch (error) {
+			if ((typeof error === "object" && error && "code" in error ? String(error.code) : "") !== "ENOENT") throw error;
+		}
+		if (openedCandidates.length === 0) throw new Error("文件不存在。");
+		if (openedCandidates.length > 1) throw new Error("源码路径存在多个候选文件，已拒绝读取。");
+		const [{ handle, resolved }] = openedCandidates;
+		const file = await readDashboardFileHandle(handle);
+		return {
+			kind: request.kind,
+			path: resolved.relativePath,
+			language: resolveDashboardFileLanguage(resolved.relativePath),
+			size: file.size,
+			content: file.content
+		};
+	} catch (error) {
+		if (error instanceof Error && (error.message === "文件不存在。" || error.message === "源码路径存在多个候选文件，已拒绝读取。" || error.message === "目标路径不是文件。" || error.message.startsWith("文件超过 ") || error.message.startsWith("文件路径"))) throw error;
+		throw new Error("读取文件失败。");
+	} finally {
+		await Promise.allSettled(openedCandidates.map((candidate) => candidate.handle.close()));
+	}
+}
+function createDashboardFileReader(roots, result, artifacts) {
+	let allowlist = createDashboardContentAllowlist(result);
+	let currentArtifacts = artifacts;
+	let disposed = false;
+	return {
+		read: async (input) => {
+			if (disposed) throw new Error("Dashboard 文件读取会话已关闭。");
+			return await readAllowedDashboardFile(input, roots, allowlist, currentArtifacts);
+		},
+		update(nextResult, nextArtifacts) {
+			allowlist = createDashboardContentAllowlist(nextResult);
+			currentArtifacts = nextArtifacts;
+		},
+		dispose() {
+			disposed = true;
+			currentArtifacts = /* @__PURE__ */ new Map();
+			allowlist.artifactPaths.clear();
+			allowlist.sourcePaths.clear();
+		}
+	};
+}
+//#endregion
+//#region src/cli/analyze/dashboardDevframe/index.ts
+const DEVFRAME_ID = "weapp-vite";
+const MAX_DASHBOARD_ANALYZE_PAGE_CHARACTERS = 65536;
+const STALE_DASHBOARD_ANALYZE_REVISION_MESSAGE = "Analyze revision 已变化，请重新获取 Dashboard 状态。";
+const rejectDashboardSharedStateSet = defineRpcFunction({
+	name: "devframe:rpc:server-state:set",
+	type: "action",
+	handler: () => {
+		throw new Error("Dashboard Devframe shared state 只允许服务端修改。");
+	}
+});
+const rejectDashboardSharedStatePatch = defineRpcFunction({
+	name: "devframe:rpc:server-state:patch",
+	type: "action",
+	handler: () => {
+		throw new Error("Dashboard Devframe shared state 只允许服务端修改。");
+	}
+});
+function serializeDashboardAnalyzePayload(result) {
+	const value = JSON.stringify(result);
+	return {
+		descriptor: {
+			characters: value.length,
+			hash: createHash("sha256").update(value).digest("hex"),
+			pages: Math.max(1, Math.ceil(value.length / MAX_DASHBOARD_ANALYZE_PAGE_CHARACTERS))
+		},
+		source: result,
+		value
+	};
+}
+function serializeDashboardAnalyzeSnapshot(snapshot, cached) {
+	const previous = snapshot.previous ? cached?.current.source === snapshot.previous ? cached.current : cached?.previous?.source === snapshot.previous ? cached.previous : serializeDashboardAnalyzePayload(snapshot.previous) : null;
+	return {
+		current: cached?.current.source === snapshot.current ? cached.current : serializeDashboardAnalyzePayload(snapshot.current),
+		previous
+	};
+}
+function createDashboardState(revision, snapshot, runtimeEvents) {
+	return {
+		analyze: {
+			current: snapshot.current.descriptor,
+			previous: snapshot.previous?.descriptor ?? null
+		},
+		revision,
+		runtimeEvents: [...runtimeEvents]
+	};
+}
+function normalizeAnalyzePageRequest(input) {
+	if (!input || typeof input !== "object") throw new Error("必须传入合法的 Analyze 分页请求。");
+	if (!("revision" in input) || !("target" in input) || !("index" in input)) throw new Error("必须传入合法的 Analyze 分页请求。");
+	const revision = input.revision;
+	const target = input.target;
+	const index = input.index;
+	if (typeof revision !== "number" || !Number.isSafeInteger(revision) || revision < 0 || target !== "current" && target !== "previous" || typeof index !== "number" || !Number.isSafeInteger(index) || index < 0) throw new Error("必须传入合法的 Analyze 分页请求。");
+	return {
+		revision,
+		target,
+		index
+	};
+}
+function readDashboardAnalyzePage(input, revision, snapshot) {
+	const request = normalizeAnalyzePageRequest(input);
+	if (request.revision !== revision) throw new Error(STALE_DASHBOARD_ANALYZE_REVISION_MESSAGE);
+	const payload = request.target === "current" ? snapshot.current : snapshot.previous;
+	if (!payload || request.index >= payload.descriptor.pages) throw new Error("Analyze 分页不存在。");
+	const start = request.index * MAX_DASHBOARD_ANALYZE_PAGE_CHARACTERS;
+	return {
+		content: payload.value.slice(start, start + MAX_DASHBOARD_ANALYZE_PAGE_CHARACTERS),
+		descriptor: payload.descriptor,
+		index: request.index,
+		revision,
+		target: request.target
+	};
+}
+function createAnalyzeDashboardDevframe(options) {
+	let revision = 0;
+	let disposed = false;
+	let serializedSnapshot = serializeDashboardAnalyzeSnapshot(options.getAnalyzeSnapshot());
+	let broadcastDashboardState;
+	const initialSnapshot = options.getAnalyzeSnapshot();
+	const fileReader = createDashboardFileReader(options.roots, initialSnapshot.current, initialSnapshot.artifacts);
+	const getDashboardState = defineRpcFunction({
+		name: "get-dashboard-state",
+		type: "query",
+		jsonSerializable: true,
+		handler: () => createDashboardState(revision, serializedSnapshot, options.getRuntimeEvents())
+	});
+	const getAnalyzePage = defineRpcFunction({
+		name: "get-analyze-page",
+		type: "query",
+		jsonSerializable: true,
+		handler: (input) => readDashboardAnalyzePage(input, revision, serializedSnapshot)
+	});
+	const readDashboardFile = defineRpcFunction({
+		name: "read-dashboard-file",
+		type: "query",
+		jsonSerializable: true,
+		handler: async (input) => {
+			if (!input || typeof input !== "object" || !("revision" in input) || typeof input.revision !== "number" || !Number.isSafeInteger(input.revision) || input.revision < 0) throw new Error("必须传入合法的文件读取 revision。");
+			const requestedRevision = input.revision;
+			if (disposed || requestedRevision !== revision) throw new Error(STALE_DASHBOARD_ANALYZE_REVISION_MESSAGE);
+			const content = await fileReader.read(input);
+			if (disposed || requestedRevision !== revision) throw new Error(STALE_DASHBOARD_ANALYZE_REVISION_MESSAGE);
+			return content;
+		}
+	});
+	return {
+		definition: defineDevframe({
+			id: DEVFRAME_ID,
+			name: "weapp-vite",
+			version: VERSION,
+			packageName: "weapp-vite",
+			importMetaUrl: import.meta.url,
+			homepage: "https://vite.weapp.dev/",
+			description: "weapp-vite 构建分析与小程序开发工具。",
+			icon: "ph:rocket-launch-duotone",
+			async setup(ctx) {
+				ctx.rpc.register(rejectDashboardSharedStateSet, true);
+				ctx.rpc.register(rejectDashboardSharedStatePatch, true);
+				const dashboard = ctx.scope(DEVFRAME_ID);
+				dashboard.rpc.register(getDashboardState);
+				dashboard.rpc.register(getAnalyzePage);
+				dashboard.rpc.register(readDashboardFile);
+				broadcastDashboardState = async () => {
+					await dashboard.rpc.broadcast({
+						method: "dashboard-state-updated",
+						args: [createDashboardState(revision, serializedSnapshot, options.getRuntimeEvents())],
+						event: true
+					});
+				};
+			}
+		}),
+		notifyAnalyzeUpdate() {
+			if (disposed) return;
+			revision += 1;
+			const snapshot = options.getAnalyzeSnapshot();
+			serializedSnapshot = serializeDashboardAnalyzeSnapshot(snapshot, serializedSnapshot);
+			fileReader.update(snapshot.current, snapshot.artifacts);
+			broadcastDashboardState?.();
+		},
+		syncRuntimeEvents() {
+			broadcastDashboardState?.();
+		},
+		dispose() {
+			disposed = true;
+			fileReader.dispose();
+			broadcastDashboardState = void 0;
+		}
+	};
+}
+//#endregion
+//#region src/cli/analyze/dashboardViteBridge.ts
+const ANALYZE_DASHBOARD_DEVFRAME_BASE = "/__weapp-vite/";
+function createAnalyzeDashboardViteBridge(definition) {
+	let instance;
+	let closing;
+	const closeInstance = async () => {
+		if (closing) return await closing;
+		const current = instance;
+		instance = void 0;
+		if (!current) return;
+		closing = current.close().finally(() => {
+			closing = void 0;
+		});
+		await closing;
+	};
+	return {
+		name: "weapp-vite:dashboard-devframe",
+		apply: "serve",
+		async configureServer(server) {
+			await closeInstance();
+			const httpServer = server.httpServer instanceof Server ? server.httpServer : void 0;
+			const created = initDevframe(definition, {
+				base: ANALYZE_DASHBOARD_DEVFRAME_BASE,
+				distDir: false,
+				...httpServer ? { server: httpServer } : {
+					host: "127.0.0.1",
+					ws: { sidecar: true }
+				},
+				allowedOrigins: [],
+				auth: true,
+				mcp: false
+			});
+			server.middlewares.use(created.nodeMiddleware);
+			try {
+				await created.ready;
+				instance = created;
+			} catch (error) {
+				await created.close();
+				throw error;
+			}
+			server.httpServer?.once("close", () => {
+				closeInstance();
+			});
+		},
+		async closeBundle() {
+			await closeInstance();
+		}
+	};
+}
+//#endregion
 //#region src/cli/analyze/dashboard.ts
-const ANALYZE_GLOBAL_KEY = "__WEAPP_VITE_ANALYZE_RESULT__";
-const PREVIOUS_ANALYZE_GLOBAL_KEY = "__WEAPP_VITE_PREVIOUS_ANALYZE_RESULT__";
-const DASHBOARD_EVENTS_GLOBAL_KEY = "__WEAPP_VITE_DASHBOARD_EVENTS__";
 const ANALYZE_DASHBOARD_PACKAGE_NAME = "@weapp-vite/dashboard";
-const ANALYZE_SSE_PATH = "/__weapp_vite_analyze";
-const FILE_CONTENT_PATH = "/__weapp_vite_file_content";
-const DASHBOARD_EVENT_NAME = "weapp-dashboard:event";
-const MAX_FILE_CONTENT_BYTES = 2097152;
 const require = createRequire(import.meta.url);
 function createInstallCommand(agent) {
 	const resolved = resolveCommand(agent ?? "npm", "install", [ANALYZE_DASHBOARD_PACKAGE_NAME]);
@@ -2310,217 +2830,13 @@ function resolveDashboardRoot(options) {
 	}
 	if (dashboardPackageRoot) {
 		const devResolved = resolveDashboardDevRoot(dashboardPackageRoot, dashboardManifest);
-		if (devResolved) return devResolved;
 		const distResolved = resolveDashboardDistRoot(dashboardPackageRoot, dashboardManifest);
-		if (distResolved) return distResolved;
+		const resolved = options?.watch ? devResolved ?? distResolved : distResolved ?? devResolved;
+		if (resolved) return resolved;
 	}
 	logger_default.warn(`[weapp-vite ui] 未安装可选仪表盘包 ${colors.bold(colors.green(ANALYZE_DASHBOARD_PACKAGE_NAME))}，已自动降级关闭 dashboard 能力。`);
 	logger_default.info(`如需启用，请执行 ${colors.bold(colors.green(createInstallCommand(options?.packageManagerAgent)))}`);
 }
-function normalizeDashboardRelativePath(value) {
-	return value.replaceAll("\\", "/");
-}
-function stripDashboardFileQuery(value) {
-	const queryIndex = value.indexOf("?");
-	return queryIndex === -1 ? value : value.slice(0, queryIndex);
-}
-function addDashboardAllowedPath(paths, value) {
-	if (!value || value.includes("\0")) return;
-	const normalizedPath = normalizeDashboardRelativePath(stripDashboardFileQuery(value));
-	if (!normalizedPath || path.isAbsolute(normalizedPath)) return;
-	paths.add(normalizedPath);
-}
-function createDashboardContentAllowlist(result) {
-	const artifactPaths = /* @__PURE__ */ new Set();
-	const sourcePaths = /* @__PURE__ */ new Set();
-	for (const packageReport of result.packages) for (const file of packageReport.files) {
-		addDashboardAllowedPath(artifactPaths, file.file);
-		addDashboardAllowedPath(sourcePaths, file.source);
-		for (const module of file.modules ?? []) addDashboardAllowedPath(sourcePaths, module.source);
-	}
-	return {
-		artifactPaths,
-		sourcePaths
-	};
-}
-function resolveDashboardContentPath(root, requestPath, options) {
-	if (!root || !requestPath || requestPath.includes("\0")) return;
-	const normalizedRequestPath = normalizeDashboardRelativePath(stripDashboardFileQuery(requestPath));
-	if (path.isAbsolute(normalizedRequestPath)) return;
-	if (!options.allowedPaths.has(normalizedRequestPath)) return;
-	const resolvedRoot = path.resolve(root);
-	const absolutePath = path.resolve(resolvedRoot, normalizedRequestPath);
-	const relativePath = path.relative(resolvedRoot, absolutePath);
-	if (!relativePath) return;
-	if (!options.allowParent && (relativePath.startsWith("..") || path.isAbsolute(relativePath))) return;
-	return {
-		absolutePath,
-		relativePath: options.allowParent ? normalizedRequestPath : normalizeDashboardRelativePath(relativePath)
-	};
-}
-function resolveDashboardFileLanguage(filePath) {
-	const extension = path.extname(filePath).toLowerCase();
-	if (extension === ".js" || extension === ".mjs" || extension === ".cjs" || extension === ".wxs" || extension === ".sjs") return "javascript";
-	if (extension === ".ts" || extension === ".mts" || extension === ".cts") return "typescript";
-	if (extension === ".json" || extension === ".map") return "json";
-	if (extension === ".css" || extension === ".wxss" || extension === ".scss" || extension === ".sass" || extension === ".less") return "css";
-	if (extension === ".vue" || extension === ".wxml" || extension === ".html") return "html";
-	return "plaintext";
-}
-function sendDashboardJson(res, statusCode, payload) {
-	res.statusCode = statusCode;
-	res.setHeader("Content-Type", "application/json; charset=utf-8");
-	res.end(JSON.stringify(payload));
-}
-async function sendDashboardFileContent(res, roots, allowlist, kind, requestPath) {
-	const resolved = resolveDashboardContentPath(kind === "artifact" ? roots.artifactRoot : kind === "source" ? roots.sourceRoot : void 0, requestPath, {
-		allowParent: kind === "source",
-		allowedPaths: kind === "artifact" ? allowlist.artifactPaths : allowlist.sourcePaths
-	});
-	if (!resolved || kind !== "source" && kind !== "artifact") {
-		sendDashboardJson(res, 400, {
-			error: "invalid_request",
-			message: "必须传入合法的 kind 和相对路径。"
-		});
-		return;
-	}
-	try {
-		const stat = await fs.promises.stat(resolved.absolutePath);
-		if (!stat.isFile()) {
-			sendDashboardJson(res, 400, {
-				error: "not_file",
-				message: "目标路径不是文件。"
-			});
-			return;
-		}
-		if (stat.size > MAX_FILE_CONTENT_BYTES) {
-			sendDashboardJson(res, 413, {
-				error: "file_too_large",
-				message: `文件超过 ${MAX_FILE_CONTENT_BYTES} 字节，已拒绝读取。`
-			});
-			return;
-		}
-		sendDashboardJson(res, 200, {
-			kind,
-			path: resolved.relativePath,
-			language: resolveDashboardFileLanguage(resolved.relativePath),
-			size: stat.size,
-			content: await fs.promises.readFile(resolved.absolutePath, "utf8")
-		});
-	} catch (error) {
-		const code = typeof error === "object" && error && "code" in error ? String(error.code) : "";
-		sendDashboardJson(res, code === "ENOENT" ? 404 : 500, {
-			error: code === "ENOENT" ? "not_found" : "read_failed",
-			message: code === "ENOENT" ? "文件不存在。" : "读取文件失败。"
-		});
-	}
-}
-function createAnalyzeHtmlPlugin(state, runtimeEvents, contentRoots, contentAllowlist, onServerInstance, onBroadcastReady) {
-	const sseClients = /* @__PURE__ */ new Set();
-	const hotBridgeScript = `
-    const applyAnalyzePayload = (payload) => {
-      const current = payload?.current ?? payload
-      const previous = payload?.previous ?? window.${PREVIOUS_ANALYZE_GLOBAL_KEY} ?? null
-      window.${ANALYZE_GLOBAL_KEY} = current
-      window.${PREVIOUS_ANALYZE_GLOBAL_KEY} = previous
-      window.dispatchEvent(new CustomEvent('weapp-analyze:update', { detail: { current, previous } }))
-    }
-    const applyDashboardEvents = (payload) => {
-      const events = Array.isArray(payload) ? payload : [payload]
-      const nextEvents = events.filter(Boolean)
-      if (nextEvents.length === 0) {
-        return
-      }
-      window.${DASHBOARD_EVENTS_GLOBAL_KEY} = [
-        ...(window.${DASHBOARD_EVENTS_GLOBAL_KEY} ?? []),
-        ...nextEvents,
-      ]
-      window.dispatchEvent(new CustomEvent('${DASHBOARD_EVENT_NAME}', { detail: nextEvents }))
-    }
-    const source = new EventSource('${ANALYZE_SSE_PATH}')
-    source.onmessage = (event) => {
-      try {
-        applyAnalyzePayload(JSON.parse(event.data))
-      }
-      catch {}
-    }
-    if (import.meta.hot) {
-      import.meta.hot.on('weapp-analyze:update', (payload) => {
-        applyAnalyzePayload(payload)
-      })
-      import.meta.hot.on('${DASHBOARD_EVENT_NAME}', (payload) => {
-        applyDashboardEvents(payload)
-      })
-    }
-  `.trim();
-	const broadcast = (payload) => {
-		const serialized = `data: ${JSON.stringify(payload)}\n\n`;
-		for (const client of sseClients) client.write(serialized);
-	};
-	onBroadcastReady(broadcast);
-	return {
-		name: "weapp-vite-analyze-html",
-		transformIndexHtml(html) {
-			return {
-				html,
-				tags: [
-					{
-						tag: "script",
-						children: `window.${ANALYZE_GLOBAL_KEY} = ${JSON.stringify(state.current)}`,
-						injectTo: "head-prepend"
-					},
-					{
-						tag: "script",
-						children: `window.${PREVIOUS_ANALYZE_GLOBAL_KEY} = ${JSON.stringify(state.previous)}`,
-						injectTo: "head-prepend"
-					},
-					{
-						tag: "script",
-						children: `window.${DASHBOARD_EVENTS_GLOBAL_KEY} = ${JSON.stringify(runtimeEvents.current)}`,
-						injectTo: "head-prepend"
-					},
-					{
-						tag: "script",
-						attrs: {
-							type: "module",
-							src: "/@vite/client"
-						},
-						injectTo: "head"
-					},
-					{
-						tag: "script",
-						attrs: { type: "module" },
-						children: hotBridgeScript,
-						injectTo: "body"
-					}
-				]
-			};
-		},
-		configureServer(server) {
-			onServerInstance(server);
-			server.middlewares.use((req, res, next) => {
-				const url = new URL(req.url ?? "/", "http://127.0.0.1");
-				if (url.pathname === FILE_CONTENT_PATH) {
-					sendDashboardFileContent(res, contentRoots, contentAllowlist.current, url.searchParams.get("kind"), url.searchParams.get("path"));
-					return;
-				}
-				if (url.pathname !== ANALYZE_SSE_PATH) {
-					next();
-					return;
-				}
-				res.statusCode = 200;
-				res.setHeader("Content-Type", "text/event-stream");
-				res.setHeader("Cache-Control", "no-cache, no-transform");
-				res.setHeader("Connection", "keep-alive");
-				res.write(`data: ${JSON.stringify(state)}\n\n`);
-				sseClients.add(res);
-				req.on("close", () => {
-					sseClients.delete(res);
-				});
-			});
-		}
-	};
-}
 async function waitForServerExit(server) {
 	let resolved = false;
 	const cleanup = async () => {
@@ -2553,9 +2869,9 @@ async function startAnalyzeDashboard(result, options) {
 	const { root, configFile } = resolved;
 	const state = {
 		current: result,
-		previous: options?.previousResult ?? null
+		previous: options.previousResult ?? null,
+		artifacts: options.artifacts
 	};
-	const contentAllowlist = { current: createDashboardContentAllowlist(result) };
 	const runtimeEvents = { current: [createDashboardRuntimeEvent({
 		kind: "command",
 		level: "success",
@@ -2563,16 +2879,16 @@ async function startAnalyzeDashboard(result, options) {
 		detail: options?.watch ? "weapp-vite UI 已进入实时分析模式，后续 analyze 结果会继续推送到 dashboard。" : "weapp-vite UI 已进入静态分析模式，当前页面展示的是一次性分析结果。",
 		tags: options?.watch ? ["watch", "analyze"] : ["static", "analyze"]
 	}), ...(options?.initialEvents ?? []).map((event) => createDashboardRuntimeEvent(event))] };
-	let serverRef;
-	let broadcastAnalyzeResult;
-	const plugins = [createAnalyzeHtmlPlugin(state, runtimeEvents, {
-		artifactRoot: options?.artifactRoot ?? (options?.cwd ? path.resolve(options.cwd, "dist") : void 0),
-		sourceRoot: options?.cwd
-	}, contentAllowlist, (server) => {
-		serverRef = server;
-	}, (broadcast) => {
-		broadcastAnalyzeResult = broadcast;
-	})];
+	const devframe = createAnalyzeDashboardDevframe({
+		getAnalyzeSnapshot: () => state,
+		getRuntimeEvents: () => runtimeEvents.current,
+		roots: {
+			pluginRoot: options?.pluginRoot,
+			projectRoot: options?.cwd,
+			srcRoot: options?.srcRoot ?? (options?.cwd ? path.resolve(options.cwd, "src") : void 0)
+		}
+	});
+	const plugins = [createAnalyzeDashboardViteBridge(devframe.definition)];
 	const serverOptions = {
 		root,
 		configFile: configFile ?? false,
@@ -2590,42 +2906,31 @@ async function startAnalyzeDashboard(result, options) {
 	const server = await createServer(serverOptions);
 	const requestedPort = typeof serverOptions.server?.port === "number" ? serverOptions.server.port : void 0;
 	await server.listen(requestedPort);
-	serverRef ??= server;
-	server.printUrls();
 	const urls = (() => {
 		const resolved = server.resolvedUrls;
 		if (!resolved) return [];
 		return [...resolved.local ?? [], ...resolved.network ?? []];
 	})();
-	const waitPromise = waitForServerExit(server);
-	if (serverRef?.ws) {
-		serverRef.ws.send({
-			type: "custom",
-			event: "weapp-analyze:update",
-			data: state
-		});
-		serverRef.ws.send({
-			type: "custom",
-			event: DASHBOARD_EVENT_NAME,
-			data: runtimeEvents.current
-		});
-	}
-	broadcastAnalyzeResult?.(state);
+	const authCode = refreshTempAuthCode();
+	const authenticatedUrls = urls.map((url) => buildOtpAuthUrl(url, authCode));
+	let closed = false;
+	const waitPromise = waitForServerExit(server).then(() => {
+		closed = true;
+		state.artifacts = /* @__PURE__ */ new Map();
+		devframe.dispose();
+	});
 	const emitRuntimeEvents = (events) => {
 		if (events.length === 0) return;
 		const nextEvents = events.map((event) => createDashboardRuntimeEvent(event));
 		runtimeEvents.current = [...nextEvents, ...runtimeEvents.current].slice(0, 24);
-		if (serverRef) serverRef.ws.send({
-			type: "custom",
-			event: DASHBOARD_EVENT_NAME,
-			data: nextEvents
-		});
+		devframe.syncRuntimeEvents();
 	};
 	const handle = {
-		async update(nextResult, previousResult) {
+		async update(nextResult, artifacts, previousResult) {
+			if (closed) return;
 			state.previous = previousResult ?? state.current;
 			state.current = nextResult;
-			contentAllowlist.current = createDashboardContentAllowlist(nextResult);
+			state.artifacts = artifacts;
 			emitRuntimeEvents([{
 				kind: "build",
 				level: "info",
@@ -2633,19 +2938,15 @@ async function startAnalyzeDashboard(result, options) {
 				detail: `已推送新的 analyze 结果，当前包含 ${nextResult.packages.length} 个包与 ${nextResult.modules.length} 个模块。`,
 				tags: ["analyze", "refresh"]
 			}]);
-			if (serverRef) serverRef.ws.send({
-				type: "custom",
-				event: "weapp-analyze:update",
-				data: state
-			});
-			broadcastAnalyzeResult?.(state);
+			devframe.notifyAnalyzeUpdate();
 		},
 		emitRuntimeEvents,
 		waitForExit: () => waitPromise,
 		close: async () => {
+			closed = true;
 			await server.close();
 		},
-		urls
+		urls: authenticatedUrls
 	};
 	if (options?.watch) {
 		if (!options.silentStartupLog) {
@@ -2962,6 +3263,7 @@ function registerAnalyzeCommand(cli) {
 		if (reportType && !outputPrReport) throw new Error(`不支持的 analyze report 类型：${reportType}`);
 		const budgetCheck = coerceBooleanOption(options.budgetCheck);
 		const glassEaselCheck = coerceBooleanOption(options.glassEaselCheck);
+		const launchDashboard = !outputJson && !outputMarkdown && !outputPrReport && !budgetCheck && !glassEaselCheck;
 		const targets = resolveRuntimeTargets(options);
 		const inlineConfig = createInlineConfig(targets);
 		let ctx;
@@ -3017,7 +3319,8 @@ function registerAnalyzeCommand(cli) {
 			}
 			const previousResult = await readLatestAnalyzeHistorySnapshot(ctx.configService);
 			ctx.runtimeState.glassEasel.silent = Boolean(outputJson || outputMarkdown || outputPrReport || glassEaselCheck);
-			const result = await analyzeSubpackages(ctx);
+			const artifactSnapshot = launchDashboard ? createDashboardArtifactSnapshot() : void 0;
+			const result = artifactSnapshot ? await analyzeSubpackages(ctx, { onArtifact: artifactSnapshot.capture }) : await analyzeSubpackages(ctx);
 			await writeAnalyzeHistorySnapshot(result, ctx.configService);
 			const writtenPath = await writeAnalyzeResult(result, outputOption, ctx.configService, outputPrReport ? "pr" : outputMarkdown ? "markdown" : "json", previousResult);
 			if (outputPrReport) {
@@ -3031,12 +3334,14 @@ function registerAnalyzeCommand(cli) {
 			const glassEaselFailed = glassEaselCheck && !outputJson ? printGlassEaselCheckSummary(result) : glassEaselCheck && result.glassEasel.summary.errors > 0;
 			if (budgetFailed || glassEaselFailed) process.exitCode = 1;
 			if (budgetCheck || glassEaselCheck) return;
-			if (!outputPrReport && !outputMarkdown && !outputJson) {
+			if (artifactSnapshot) {
 				printAnalysisSummary(result);
 				await startAnalyzeDashboard(result, {
-					artifactRoot: ctx.configService.outDir,
+					artifacts: artifactSnapshot.files,
 					cwd: ctx.configService.cwd,
 					packageManagerAgent: ctx.configService.packageManager.agent,
+					pluginRoot: ctx.configService.absolutePluginRoot,
+					srcRoot: ctx.configService.absoluteSrcRoot,
 					previousResult
 				});
 			}
@@ -3227,14 +3532,17 @@ function registerBuildCommand(cli) {
 					if (enableAnalyze) {
 						const analyzeStartedAt = Date.now();
 						const previousAnalyzeResult = await readLatestAnalyzeHistorySnapshot(configService);
-						const analyzeResult = await analyzeSubpackages(ctx);
+						const artifactSnapshot = createDashboardArtifactSnapshot();
+						const analyzeResult = await analyzeSubpackages(ctx, { onArtifact: artifactSnapshot.capture });
 						await writeAnalyzeHistorySnapshot(analyzeResult, configService);
 						const analyzeDurationMs = Date.now() - analyzeStartedAt;
 						analyzeHandle = await startAnalyzeDashboard(analyzeResult, {
 							watch: true,
-							artifactRoot: configService.outDir,
+							artifacts: artifactSnapshot.files,
 							cwd: configService.cwd,
 							packageManagerAgent: configService.packageManager.agent,
+							pluginRoot: configService.absolutePluginRoot,
+							srcRoot: configService.absoluteSrcRoot,
 							previousResult: previousAnalyzeResult,
 							initialEvents: [{
 								kind: "build",
@@ -5062,7 +5370,7 @@ function resolveRunnableHotkeyDefinition(input) {
 }
 //#endregion
 //#region package.json
-var version = "7.1.4";
+var version = "7.2.1";
 //#endregion
 //#region src/cli/devHotkeys/format.ts
 const FULLWIDTH_ASCII_START = 65281;
@@ -5465,7 +5773,7 @@ function getCompressedSizes(content) {
 		brotliSize: brotliCompressSync(content).byteLength
 	};
 }
-async function analyzeUiFallback(ctx) {
+async function analyzeUiFallback(ctx, options) {
 	const { configService, scanService } = ctx;
 	await scanService.loadAppEntry();
 	const subPackageMetas = scanService.loadSubPackages();
@@ -5501,17 +5809,17 @@ async function analyzeUiFallback(ctx) {
 	for (const absoluteFile of absoluteFiles) {
 		const relativeFile = path.relative(distRoot, absoluteFile).replace(REG_DIST_POSIX_SEP, "/");
 		const packageInfo = classifyPackage(relativeFile);
-		const stat = await fs$2.stat(absoluteFile);
 		const content = await fs$2.readFile(absoluteFile);
 		ensurePackage(packageInfo.id, packageInfo.type).files.push({
 			file: relativeFile,
 			type: relativeFile.endsWith(".js") ? "chunk" : "asset",
 			from: packageInfo.type === "independent" ? "independent" : "main",
-			size: stat.size,
+			size: content.byteLength,
 			...getCompressedSizes(content),
 			isEntry: relativeFile === "app.js" || REG_DIST_PAGE_ENTRY.test(relativeFile),
 			source: relativeFile.endsWith(".js") ? void 0 : relativeFile
 		});
+		options?.onArtifact?.(relativeFile, content);
 	}
 	return {
 		metadata: createAnalyzeMetadata(configService),
@@ -5537,8 +5845,21 @@ function createAnalyzeController(options) {
 	const runAnalyze = async () => {
 		const startedAt = Date.now();
 		const previousResult = await readLatestAnalyzeHistorySnapshot(configService);
+		const runFallback = async (fallbackReason) => {
+			const artifactSnapshot = createDashboardArtifactSnapshot();
+			const result = await analyzeUiFallback(ctx, { onArtifact: artifactSnapshot.capture });
+			await writeAnalyzeHistorySnapshot(result, configService);
+			return {
+				result,
+				artifacts: artifactSnapshot.files,
+				previousResult,
+				durationMs: Date.now() - startedAt,
+				mode: "fallback",
+				fallbackReason
+			};
+		};
 		try {
-			const result = await analyzeSubpackages(await createCompilerContext({
+			const analyzeCtx = await createCompilerContext({
 				key: `serve-ui-analyze:${process.pid}:${++analyzeRunId}`,
 				cwd: configService.cwd,
 				mode: configService.mode,
@@ -5548,11 +5869,14 @@ function createAnalyzeController(options) {
 				cliPlatform: targets.rawPlatform,
 				projectConfigPath: cliOptions.projectConfig,
 				syncSupportFiles: false
-			}));
+			});
+			const artifactSnapshot = createDashboardArtifactSnapshot();
+			const result = await analyzeSubpackages(analyzeCtx, { onArtifact: artifactSnapshot.capture });
 			if (hasAnalyzeData(result)) {
 				await writeAnalyzeHistorySnapshot(result, configService);
 				return {
 					result,
+					artifacts: artifactSnapshot.files,
 					previousResult,
 					durationMs: Date.now() - startedAt,
 					mode: "full"
@@ -5561,25 +5885,9 @@ function createAnalyzeController(options) {
 		} catch (error) {
 			const message = error instanceof Error ? error.message : String(error);
 			logger_default.warn(`[ui] 完整分析失败，已回退到 dist 文件扫描：${message}`);
-			const result = await analyzeUiFallback(ctx);
-			await writeAnalyzeHistorySnapshot(result, configService);
-			return {
-				result,
-				previousResult,
-				durationMs: Date.now() - startedAt,
-				mode: "fallback",
-				fallbackReason: message
-			};
+			return runFallback(message);
 		}
-		const result = await analyzeUiFallback(ctx);
-		await writeAnalyzeHistorySnapshot(result, configService);
-		return {
-			result,
-			previousResult,
-			durationMs: Date.now() - startedAt,
-			mode: "fallback",
-			fallbackReason: "完整分析结果为空，已回退到 dist 文件扫描。"
-		};
+		return runFallback("完整分析结果为空，已回退到 dist 文件扫描。");
 	};
 	const triggerAnalyzeUpdate = async (reason = "watch") => {
 		if (!analyzeHandle) return;
@@ -5599,7 +5907,7 @@ function createAnalyzeController(options) {
 			durationMs: next.durationMs,
 			tags: ["analyze", "fallback"]
 		}]);
-		await analyzeHandle.update(next.result, next.previousResult);
+		await analyzeHandle.update(next.result, next.artifacts, next.previousResult);
 		emitDashboardEvents(analyzeHandle, [{
 			kind: next.mode === "fallback" ? "diagnostic" : "build",
 			level: next.mode === "fallback" ? "warning" : "success",
@@ -5635,9 +5943,11 @@ function createAnalyzeController(options) {
 			const initialAnalyze = await runAnalyze();
 			analyzeHandle = await startDashboard(initialAnalyze.result, {
 				watch: true,
-				artifactRoot: configService.outDir,
+				artifacts: initialAnalyze.artifacts,
 				cwd: configService.cwd,
 				packageManagerAgent: configService.packageManager.agent,
+				pluginRoot: configService.absolutePluginRoot,
+				srcRoot: configService.absoluteSrcRoot,
 				silentStartupLog: true,
 				previousResult: initialAnalyze.previousResult,
 				initialEvents: [{