@applift/core 0.10.0 → 0.12.0

package/dist/{artifact-DFD8C7bE.mjs → artifact-DbTqPUbk.mjs}

@@ -50,11 +50,93 @@ function latestSemverTag(cwd) {
 	}
 	return best?.raw;
 }
+/**
+* 最新 `chore(release):` 声明提交（applyBump 的产物；squash-merge 会丢标记，见 AGENTS.md 已知边界）。
+* 只认 **subject**：git --grep 的 `^` 是行锚定、作用于整条 message 含 body——release-note 风格的
+* body 行（"chore(release): 4.1.0 included below"）会劫持锚点，把更早的原生改动挤出判定窗口
+* （对抗审查 P1 实证）。故取最近若干条提交的 subject 在本侧匹配。
+*/
+function latestBumpCommitCandidate(cwd) {
+	const r = git(cwd, [
+		"log",
+		"-n",
+		"200",
+		"--format=%H%x00%ct%x00%s"
+	]);
+	if (!r.ok || !r.stdout) return void 0;
+	for (const line of r.stdout.split("\n")) {
+		const [sha, time, subject] = line.split("\0");
+		if (!sha || !time || !subject || !/^\d+$/.test(time)) continue;
+		if (!subject.startsWith("chore(release): ")) continue;
+		return {
+			ref: sha,
+			kind: "bump",
+			version: looseSemver(subject),
+			sha,
+			time: Number(time)
+		};
+	}
+}
+/**
+* 版本声明锚点：最新 semver tag 的提交 vs 最新 `chore(release):` 提交，按 committer time 取新者。
+* - tag 新（已交付）→ kind=tag（判定 diff 从交付点起算）
+* - bump commit 新（声明后未交付）→ kind=bump（bump 写入的版本文件不计入判定 diff，
+*   否则去 tag 化后每次 beta 都会把自己写的版本文件误判为原生改动、连环烧版本号）
+* - 同一提交（旧形态 bump+tag 一步完成）→ 优先 tag（交付态是更强事实）
+* - committer time 同秒平局 → 拓扑序决胜（bump 是 tag 的后代则声明在交付后 → bump 胜）——
+*   秒级精度不足时不依赖时序运气
+* 无 tag 且无 bump commit / 非 git 仓库 → null。
+*/
+function latestVersionAnchor(cwd) {
+	if (!isGitRepo(cwd)) return null;
+	let tagC;
+	const tag = latestSemverTag(cwd);
+	if (tag) {
+		const r = git(cwd, [
+			"log",
+			"-1",
+			"--format=%H%x00%ct",
+			tag
+		]);
+		const [sha, time] = r.ok ? r.stdout.split("\0") : [];
+		if (sha && time && /^\d+$/.test(time)) tagC = {
+			ref: tag,
+			kind: "tag",
+			version: looseSemver(tag),
+			sha,
+			time: Number(time)
+		};
+	}
+	const bumpC = latestBumpCommitCandidate(cwd);
+	let winner;
+	if (!tagC) winner = bumpC;
+	else if (!bumpC) winner = tagC;
+	else if (bumpC.sha === tagC.sha) winner = tagC;
+	else if (bumpC.time !== tagC.time) winner = bumpC.time > tagC.time ? bumpC : tagC;
+	else winner = git(cwd, [
+		"merge-base",
+		"--is-ancestor",
+		tagC.sha,
+		bumpC.sha
+	]).ok ? bumpC : tagC;
+	if (!winner) return null;
+	return winner.kind === "tag" ? {
+		ref: winner.ref,
+		kind: "tag",
+		version: winner.version,
+		label: `v${winner.version}（已发布）`
+	} : {
+		ref: winner.ref,
+		kind: "bump",
+		version: winner.version,
+		label: winner.version ? `${winner.version}（已声明未发布）` : `bump ${winner.sha.slice(0, 8)}（已声明未发布）`
+	};
+}
 /** 锚点 tag..HEAD 的完整 commit messages（%B 含 footer，NUL 分隔——body 内建换行安全） */
 function commitsSince(cwd, ref) {
 	const r = git(cwd, [
 		"log",
-		ref ? `${ref}..HEAD` : "HEAD",
+		`${ref}..HEAD`,
 		"--format=%B%x00",
 		"--no-merges"
 	]);
@@ -73,8 +155,9 @@ function statusShort(cwd) {
 	return (r.stdout ?? "").split("\n").map((l) => l.trimEnd()).filter(Boolean);
 }
 /**
-* release 分发成功后补 tag（tag = 实际已发布的正式版本；beta 不打 tag，追溯走 history）。
-* - tag 已存在（多端发布，前一端已打）→ 跳过
+* release 分发成功后补 tag（tag = 交付封板标记；bump 只声明不打 tag，见 AGENTS.md 版本语义）。
+* - tag 已存在且指向 HEAD（多端发布，前一端已打）→ 跳过
+* - tag 已存在但指向不同 commit → conflict 告警（历史提前 tag / 驳回重提未移动 / 多端错峰发布）
 * - dryRun / 无版本 / 非 git 仓库 → 不动、不炸（tag 失败不阻断发布主流程）
 */
 function tagReleaseVersion(cwd, version, opts = {}) {
@@ -95,10 +178,19 @@ function tagReleaseVersion(cwd, version, opts = {}) {
 	], {
 		cwd,
 		encoding: "utf8"
-	}).status === 0) return {
-		tagged: false,
-		reason: `tag ${tag} 已存在（前一端已发布）`
-	};
+	}).status === 0) {
+		const tagCommit = git(cwd, ["rev-parse", `refs/tags/${tag}^{commit}`]).stdout;
+		const head = git(cwd, ["rev-parse", "HEAD"]).stdout;
+		if (tagCommit && tagCommit === head) return {
+			tagged: false,
+			reason: `tag ${tag} 已存在（前一端已发布）`
+		};
+		return {
+			tagged: false,
+			conflict: true,
+			reason: `tag ${tag} 已存在但指向 ${tagCommit.slice(0, 8) || "?"} ≠ 当前 HEAD ${head.slice(0, 8) || "?"}——可能原因：①历史提前 tag ②驳回重提后未移动（这两种且 tag 未 push 时可 git tag -d 后重打）③多端错峰发布（前一端已在较早提交交付，HEAD 已前进，属正常形态，勿动 tag）。请人工确认`
+		};
+	}
 	const r = spawnSync("git", ["tag", tag], {
 		cwd,
 		encoding: "utf8"
@@ -135,17 +227,19 @@ async function routeDelivery(providers, ctx, diff, platform) {
 	};
 }
 /**
-* 收集上个发版锚点（最新 semver tag）到工作区的变更文件列表。
+* 收集上个发版锚点到工作区的变更文件列表。锚点 = 最新 semver tag 或最新 `chore(release):`
+* bump commit 取新者（见 git.ts latestVersionAnchor）——bump 声明后未 release 的窗口内，
+* 判定不会把 bump 自己写入的版本文件误判为原生改动。
 * 含未提交改动与未跟踪文件（pushy bundle 打包的是工作区内容，判定口径必须一致）。
 * 无锚点 / 非 git 仓库 → null（调用方按 uncertain 处理，不猜）。
 */
 async function collectReleaseDiff(cwd) {
-	const anchor = latestSemverTag(cwd);
+	const anchor = latestVersionAnchor(cwd);
 	if (!anchor) return null;
 	const r = spawnSync("git", [
 		"diff",
 		"--name-only",
-		anchor
+		anchor.ref
 	], {
 		cwd,
 		encoding: "utf8"
@@ -1137,4 +1231,4 @@ function fromAapt(artifactPath) {
 	}
 }
 //#endregion
-export { resolveFramework as A, tagReleaseVersion as B, suggestFramework as C, detectBundleIds as D, deps as E, git as F, isGitRepo as I, latestSemverTag as L, collectReleaseDiff as M, routeDelivery as N, findArtifacts as O, commitsSince as P, looseSemver as R, rnFramework as S, tauriFramework as T, nativeHarmonyAdapter as _, betaVersionName as a, nativeIosFramework as b, writeProjectVersions as c, electronFramework as d, flutterAdapter as f, nativeAndroidFramework as g, nativeAndroidAdapter as h, assertBetaVersionSupported as i, subdirs as j, readJson as k, redactText as l, knownFrameworkAdapters as m, DEFAULT_BETA_VERSION_CONFIG as n, checkVersionNameShape as o, flutterFramework as p, PLATFORM_VERSION_CAPS as r, readProjectVersions as s, readArtifactVersion as t, electronAdapter as u, nativeHarmonyFramework as v, tauriAdapter as w, rnAdapter as x, nativeIosAdapter as y, statusShort as z };
+export { resolveFramework as A, statusShort as B, suggestFramework as C, detectBundleIds as D, deps as E, git as F, isGitRepo as I, latestSemverTag as L, collectReleaseDiff as M, routeDelivery as N, findArtifacts as O, commitsSince as P, latestVersionAnchor as R, rnFramework as S, tauriFramework as T, tagReleaseVersion as V, nativeHarmonyAdapter as _, betaVersionName as a, nativeIosFramework as b, writeProjectVersions as c, electronFramework as d, flutterAdapter as f, nativeAndroidFramework as g, nativeAndroidAdapter as h, assertBetaVersionSupported as i, subdirs as j, readJson as k, redactText as l, knownFrameworkAdapters as m, DEFAULT_BETA_VERSION_CONFIG as n, checkVersionNameShape as o, flutterFramework as p, PLATFORM_VERSION_CAPS as r, readProjectVersions as s, readArtifactVersion as t, electronAdapter as u, nativeHarmonyFramework as v, tauriAdapter as w, rnAdapter as x, nativeIosAdapter as y, looseSemver as z };

package/dist/{frameworks-B_GxUuWQ.d.mts → frameworks-B-t5Ywma.d.mts}

@@ -184,10 +184,14 @@ declare const BetaConfigSchema: z.ZodObject<{
     submit: z.ZodDefault<z.ZodBoolean>;
     group: z.ZodOptional<z.ZodString>;
     testType: z.ZodDefault<z.ZodUnion<readonly [z.ZodLiteral<3>, z.ZodLiteral<4>]>>;
+    privacyPolicy: z.ZodOptional<z.ZodString>;
+    appDesc: z.ZodOptional<z.ZodString>;
+    cleanup: z.ZodDefault<z.ZodBoolean>;
   }, z.core.$strip>>;
   testflight: z.ZodOptional<z.ZodObject<{
     note: z.ZodOptional<z.ZodString>;
   }, z.core.$strip>>;
+  autoBump: z.ZodDefault<z.ZodBoolean>;
 }, z.core.$strip>;
 /** versionCode 策略："increment"(默认 +1) | 公式（可限定平台） */
 declare const VersionCodeConfigSchema: z.ZodUnion<readonly [z.ZodLiteral<"increment">, z.ZodObject<{
@@ -295,10 +299,14 @@ declare const ProjectConfigSchema: z.ZodObject<{
       submit: z.ZodDefault<z.ZodBoolean>;
       group: z.ZodOptional<z.ZodString>;
       testType: z.ZodDefault<z.ZodUnion<readonly [z.ZodLiteral<3>, z.ZodLiteral<4>]>>;
+      privacyPolicy: z.ZodOptional<z.ZodString>;
+      appDesc: z.ZodOptional<z.ZodString>;
+      cleanup: z.ZodDefault<z.ZodBoolean>;
     }, z.core.$strip>>;
     testflight: z.ZodOptional<z.ZodObject<{
       note: z.ZodOptional<z.ZodString>;
     }, z.core.$strip>>;
+    autoBump: z.ZodDefault<z.ZodBoolean>;
   }, z.core.$strip>>;
 }, z.core.$strip>;
 type BetaConfig = z.infer<typeof BetaConfigSchema>;
@@ -445,7 +453,9 @@ interface PublishContext extends FrameworkContext {
  */
 declare function routeDelivery(providers: UpdateProvider[], ctx: FrameworkContext, diff: string[], platform?: string): Promise<DeliveryRoute | null>;
 /**
- * 收集上个发版锚点（最新 semver tag）到工作区的变更文件列表。
+ * 收集上个发版锚点到工作区的变更文件列表。锚点 = 最新 semver tag 或最新 `chore(release):`
+ * bump commit 取新者（见 git.ts latestVersionAnchor）——bump 声明后未 release 的窗口内，
+ * 判定不会把 bump 自己写入的版本文件误判为原生改动。
  * 含未提交改动与未跟踪文件（pushy bundle 打包的是工作区内容，判定口径必须一致）。
  * 无锚点 / 非 git 仓库 → null（调用方按 uncertain 处理，不猜）。
  */

package/dist/index.d.mts

@@ -1,4 +1,4 @@
-import { $ as ProjectConfigSchema, A as routeDelivery, B as appendEntry, C as resolvePlugins, Ct as readJson, D as PublishContext, E as FrameworkContext, F as runSubmit, G as BetaVersionConfigSchema, H as BetaConfig, I as HISTORY_PATH, J as CredentialsProfile, K as CredentialsFile, L as HistoryEntry, M as PipelineSummary, N as PipelineSummaryEntry, O as UpdateProvider, P as runStage, Q as ProjectConfig, R as HistoryEvent, S as defineConfig, St as findArtifacts, T as DeliveryRoute, Tt as subdirs, U as BetaConfigSchema, V as readEntries, W as BetaVersionConfig, X as GlobalConfig, Y as CredentialsProfileSchema, Z as GlobalConfigSchema, _ as AppliftPlugin, _t as BundleIds, a as knownFrameworkAdapters, at as VersionCodeConfigSchema, b as PluginHookName, bt as deps, c as nativeHarmonyAdapter, ct as Channel, d as nativeIosFramework, dt as ChannelEvent, et as StoreConfig, f as rnAdapter, ft as ChannelRegistry, g as tauriFramework, gt as SubmitResult, h as tauriAdapter, ht as StageResult, i as flutterFramework, it as VersionCodeConfig, j as PipelineInput, k as collectReleaseDiff, l as nativeHarmonyFramework, lt as ChannelCapabilities, m as suggestFramework, mt as ReviewStatus, n as electronFramework, nt as Stores, o as nativeAndroidAdapter, ot as VersionConfig, p as rnFramework, pt as ReleasePlanEntry, q as CredentialsFileSchema, r as flutterAdapter, rt as StoresSchema, s as nativeAndroidFramework, st as VersionConfigSchema, t as electronAdapter, tt as StoreConfigSchema, u as nativeIosAdapter, ut as ChannelContext, v as AppliftUserConfig, vt as FrameworkAdapter, w as DeliveryJudgement, wt as resolveFramework, x as PluginHost, xt as detectBundleIds, y as HookContext, yt as Platform, z as HistoryQuery } from "./frameworks-B_GxUuWQ.mjs";
+import { $ as ProjectConfigSchema, A as routeDelivery, B as appendEntry, C as resolvePlugins, Ct as readJson, D as PublishContext, E as FrameworkContext, F as runSubmit, G as BetaVersionConfigSchema, H as BetaConfig, I as HISTORY_PATH, J as CredentialsProfile, K as CredentialsFile, L as HistoryEntry, M as PipelineSummary, N as PipelineSummaryEntry, O as UpdateProvider, P as runStage, Q as ProjectConfig, R as HistoryEvent, S as defineConfig, St as findArtifacts, T as DeliveryRoute, Tt as subdirs, U as BetaConfigSchema, V as readEntries, W as BetaVersionConfig, X as GlobalConfig, Y as CredentialsProfileSchema, Z as GlobalConfigSchema, _ as AppliftPlugin, _t as BundleIds, a as knownFrameworkAdapters, at as VersionCodeConfigSchema, b as PluginHookName, bt as deps, c as nativeHarmonyAdapter, ct as Channel, d as nativeIosFramework, dt as ChannelEvent, et as StoreConfig, f as rnAdapter, ft as ChannelRegistry, g as tauriFramework, gt as SubmitResult, h as tauriAdapter, ht as StageResult, i as flutterFramework, it as VersionCodeConfig, j as PipelineInput, k as collectReleaseDiff, l as nativeHarmonyFramework, lt as ChannelCapabilities, m as suggestFramework, mt as ReviewStatus, n as electronFramework, nt as Stores, o as nativeAndroidAdapter, ot as VersionConfig, p as rnFramework, pt as ReleasePlanEntry, q as CredentialsFileSchema, r as flutterAdapter, rt as StoresSchema, s as nativeAndroidFramework, st as VersionConfigSchema, t as electronAdapter, tt as StoreConfigSchema, u as nativeIosAdapter, ut as ChannelContext, v as AppliftUserConfig, vt as FrameworkAdapter, w as DeliveryJudgement, wt as resolveFramework, x as PluginHost, xt as detectBundleIds, y as HookContext, yt as Platform, z as HistoryQuery } from "./frameworks-B-t5Ywma.mjs";
 //#region src/registry.d.ts
 export declare class DefaultChannelRegistry implements ChannelRegistry {
   private readonly channels;
@@ -372,10 +372,23 @@ export declare class AgcHarmonyChannel implements Channel {
   /**
    * 测试发布（releaseType=6，2026-10 起走 Testing API——旧 app-package-info 直绑链路已被华为下线，
    * 其 releaseType 枚举仅剩 1=全网 / 7=企业非公开）：
-   * 上传 .app → 新建测试版本（testType 3=邀请测试 4=公开测试）→ 添加测试软件包 → 等云端编译 → 更新测试版本绑定；
+   * 上传 .app → 清理旧测试版本（cleanupOldTestVersions，默认开）→ 新建测试版本（testType 3=邀请测试
+   * 4=公开测试）→ 添加测试软件包 → 等云端编译 → 更新测试版本绑定；
    * target.submitTest='true' 时：（可选按 testGroup 绑测试群组）自动提交测试版本审核；否则由控制台人工完成。
    */
   private uploadBeta;
+  /**
+   * 发布前清理旧测试版本（target.cleanup === 'false' 关闭，默认开；config 键 beta.agc.cleanup）：
+   * AGC 测试版本数量约束——在审上限（提交报 204144692 "count of harmony test in audit"）、
+   * 在架上限（邀请测试 3 / 公开测试 1 / 总数 100）——旧版本不清理会阻塞新版本提审（AGC 不自动下架）。
+   * 发现：brief-info/list 反向过滤 testType 3/4（与 status() 的商用过滤互补）。故意不解读 state：
+   * 测试版本 state 枚举与商用 releaseState 表不一致且未经实机验证，清理全部旧版本无需依赖 state。
+   * 清理：stop（完全下架）→ delete（官方指南顺序）；best-effort——单个失败仅告警不阻断，
+   * 名额仍被占时提审步骤的 204144692 errorHint 兜底提示人工处理。
+   * 影响面：已装设备 App 本体与 pushy 热更均不受影响（只移除 AGC 在架记录）；
+   * 受影响的仅审核空窗期内想经 AGC 邀请链接新装的人（蒲公英通道不受影响）。
+   */
+  private cleanupOldTestVersions;
   /**
    * 按群组名查测试群组 groupId（AppTest API GET /test-group/list，appId 走 header，rtnCode 外壳）。
    * 分页遍历；匹配不到报错提示到控制台建组。
@@ -519,6 +532,64 @@ export declare function writeProjectVersions(cwd: string, framework: FrameworkAd
   }>;
 };
 //#endregion
+//#region src/version/git.d.ts
+export interface GitResult {
+  ok: boolean;
+  stdout: string;
+  stderr: string;
+}
+export declare function git(cwd: string, args: string[]): GitResult;
+export declare function isGitRepo(cwd: string): boolean;
+/** 宽松 semver 解析（可选 v/前缀，如 v4.1.0 / 4.1.0-beta.3 / release-4.1.0 里取 semver 部分） */
+export declare function looseSemver(tag: string): string | undefined;
+/**
+ * 最新 semver tag（按版本序取最大，非创建时间——修复补打旧版本 tag 的场景更稳）。
+ * 无 tag / 非 git 仓库返回 undefined。
+ */
+export declare function latestSemverTag(cwd: string): string | undefined;
+/** 版本声明锚点：tag（已交付）或 bump commit（已声明未交付），判定与推断共用 */
+export interface VersionAnchor {
+  /** 可直接传给 git diff / git log 的 ref（tag 名或 commit sha） */
+  ref: string;
+  /** tag = 已交付；bump = 已声明未交付（chore(release): commit） */
+  kind: "tag" | "bump";
+  /** 从 tag 名 / commit message 解析的 semver（解析失败缺省） */
+  version?: string;
+  /** 展示用："v4.0.0（已发布）" / "4.1.0（已声明未发布）" */
+  label: string;
+}
+/**
+ * 版本声明锚点：最新 semver tag 的提交 vs 最新 `chore(release):` 提交，按 committer time 取新者。
+ * - tag 新（已交付）→ kind=tag（判定 diff 从交付点起算）
+ * - bump commit 新（声明后未交付）→ kind=bump（bump 写入的版本文件不计入判定 diff，
+ *   否则去 tag 化后每次 beta 都会把自己写的版本文件误判为原生改动、连环烧版本号）
+ * - 同一提交（旧形态 bump+tag 一步完成）→ 优先 tag（交付态是更强事实）
+ * - committer time 同秒平局 → 拓扑序决胜（bump 是 tag 的后代则声明在交付后 → bump 胜）——
+ *   秒级精度不足时不依赖时序运气
+ * 无 tag 且无 bump commit / 非 git 仓库 → null。
+ */
+export declare function latestVersionAnchor(cwd: string): VersionAnchor | null;
+/** 锚点 tag..HEAD 的完整 commit messages（%B 含 footer，NUL 分隔——body 内建换行安全） */
+export declare function commitsSince(cwd: string, ref: string): string[];
+/** 工作区状态（--porcelain）。注意：不走通用 git()——其 stdout.trim() 会剥掉首行前导空格，
+ *  破坏 porcelain 的两列状态位（" M file" → "M file"），此处保留原始行仅去行尾。 */
+export declare function statusShort(cwd: string): string[];
+export interface TagResult {
+  tagged: boolean;
+  reason?: string;
+  /** tag 已存在但指向不同 commit（疑似历史提前 tag / 驳回重提后未移动）——调用方应告警而非静默跳过 */
+  conflict?: boolean;
+}
+/**
+ * release 分发成功后补 tag（tag = 交付封板标记；bump 只声明不打 tag，见 AGENTS.md 版本语义）。
+ * - tag 已存在且指向 HEAD（多端发布，前一端已打）→ 跳过
+ * - tag 已存在但指向不同 commit → conflict 告警（历史提前 tag / 驳回重提未移动 / 多端错峰发布）
+ * - dryRun / 无版本 / 非 git 仓库 → 不动、不炸（tag 失败不阻断发布主流程）
+ */
+export declare function tagReleaseVersion(cwd: string, version: string | undefined, opts?: {
+  dryRun?: boolean;
+}): TagResult;
+//#endregion
 //#region src/version/infer.d.ts
 export type BumpLevel = "major" | "minor" | "patch";
 export interface InferResult {
@@ -555,6 +626,16 @@ export interface DecideResult {
 export declare function decideNextVersion(current: string, opts: DecideOptions, infer?: InferResult): DecideResult;
 /** 工程文件写入用的三段数字 versionName（prerelease 只留在 tag，不进商店） */
 export declare function storeVersionName(full: string): string;
+/** compareDeclared 结果：ahead=已声明未发布（只需重建）；not-ahead=未声明/持平（需 bump）；unknown=无法比较 */
+export type DeclaredComparison = "ahead" | "not-ahead" | "unknown";
+/**
+ * 三态判定核心比较（beta 原生路径用）：工程 versionName 是否领先于最近发布 tag。
+ * - ahead：版本已声明（bump 过未 release）→ 引导重建 + --delivery native，不再 bump
+ * - not-ahead：未声明或持平 → 引导/自动 bump
+ * - unknown：工程版本非 semver（历史非规范值）→ 调用方按需 bump 分支并告警，不猜
+ * releasedTag 缺省（从未发布过）→ 任何合法工程版本都算已声明。
+ */
+export declare function compareDeclared(project: string | undefined, releasedTag: string | undefined): DeclaredComparison;
 //#endregion
 //#region src/version/bump.d.ts
 export interface BumpOptions {
@@ -569,7 +650,8 @@ export interface BumpOptions {
   platforms?: string[];
 }
 export interface BumpPlan {
-  anchorTag?: string;
+  /** 版本声明锚点（tag=已交付 / bump commit=已声明未交付，取新者）；首次无锚点 */
+  anchor?: VersionAnchor;
   /** 疑似失败重跑（HEAD 是 release commit 且锚点后无新业务提交）——CLI 在 --yes 且无显式 level 时拒绝 */
   suspectRerun?: boolean;
   /** 基线版本（多端中最大 semver） */
@@ -587,9 +669,9 @@ export interface BumpPlan {
 }
 export declare function planBump(opts: BumpOptions): BumpPlan;
 export interface ApplyOptions {
-  /** 代 commit（默认 true；--no-commit 跳过） */
+  /** 代 commit（CLI 默认开；--no-commit 跳过） */
   commit: boolean;
-  /** 代打 tag（默认 true；--no-tag 跳过） */
+  /** 代打 tag（CLI 默认不打——tag 是交付标记，归 release 提审成功后补；--tag 显式开） */
   tag: boolean;
 }
 export interface ApplyResult {
@@ -676,39 +758,6 @@ export declare function renderChangelogSection(version: string, date: string, en
  */
 export declare function upsertChangelog(cwd: string, version: string, section: string): string;
 //#endregion
-//#region src/version/git.d.ts
-export interface GitResult {
-  ok: boolean;
-  stdout: string;
-  stderr: string;
-}
-export declare function git(cwd: string, args: string[]): GitResult;
-export declare function isGitRepo(cwd: string): boolean;
-/** 宽松 semver 解析（可选 v/前缀，如 v4.1.0 / 4.1.0-beta.3 / release-4.1.0 里取 semver 部分） */
-export declare function looseSemver(tag: string): string | undefined;
-/**
- * 最新 semver tag（按版本序取最大，非创建时间——修复补打旧版本 tag 的场景更稳）。
- * 无 tag / 非 git 仓库返回 undefined。
- */
-export declare function latestSemverTag(cwd: string): string | undefined;
-/** 锚点 tag..HEAD 的完整 commit messages（%B 含 footer，NUL 分隔——body 内建换行安全） */
-export declare function commitsSince(cwd: string, ref?: string): string[];
-/** 工作区状态（--porcelain）。注意：不走通用 git()——其 stdout.trim() 会剥掉首行前导空格，
- *  破坏 porcelain 的两列状态位（" M file" → "M file"），此处保留原始行仅去行尾。 */
-export declare function statusShort(cwd: string): string[];
-export interface TagResult {
-  tagged: boolean;
-  reason?: string;
-}
-/**
- * release 分发成功后补 tag（tag = 实际已发布的正式版本；beta 不打 tag，追溯走 history）。
- * - tag 已存在（多端发布，前一端已打）→ 跳过
- * - dryRun / 无版本 / 非 git 仓库 → 不动、不炸（tag 失败不阻断发布主流程）
- */
-export declare function tagReleaseVersion(cwd: string, version: string | undefined, opts?: {
-  dryRun?: boolean;
-}): TagResult;
-//#endregion
 //#region src/version/artifact.d.ts
 export interface ArtifactVersion {
   versionName?: string;

package/dist/index.mjs

@@ -1,4 +1,4 @@
-import { A as resolveFramework, B as tagReleaseVersion, C as suggestFramework, D as detectBundleIds, E as deps, F as git, I as isGitRepo, L as latestSemverTag, M as collectReleaseDiff, N as routeDelivery, O as findArtifacts, P as commitsSince, R as looseSemver, S as rnFramework, T as tauriFramework, _ as nativeHarmonyAdapter, a as betaVersionName, b as nativeIosFramework, c as writeProjectVersions, d as electronFramework, f as flutterAdapter, g as nativeAndroidFramework, h as nativeAndroidAdapter, i as assertBetaVersionSupported, j as subdirs, k as readJson, l as redactText, m as knownFrameworkAdapters, n as DEFAULT_BETA_VERSION_CONFIG, o as checkVersionNameShape, p as flutterFramework, r as PLATFORM_VERSION_CAPS, s as readProjectVersions, t as readArtifactVersion, u as electronAdapter, v as nativeHarmonyFramework, w as tauriAdapter, x as rnAdapter, y as nativeIosAdapter, z as statusShort } from "./artifact-DFD8C7bE.mjs";
+import { A as resolveFramework, B as statusShort, C as suggestFramework, D as detectBundleIds, E as deps, F as git, I as isGitRepo, L as latestSemverTag, M as collectReleaseDiff, N as routeDelivery, O as findArtifacts, P as commitsSince, R as latestVersionAnchor, S as rnFramework, T as tauriFramework, V as tagReleaseVersion, _ as nativeHarmonyAdapter, a as betaVersionName, b as nativeIosFramework, c as writeProjectVersions, d as electronFramework, f as flutterAdapter, g as nativeAndroidFramework, h as nativeAndroidAdapter, i as assertBetaVersionSupported, j as subdirs, k as readJson, l as redactText, m as knownFrameworkAdapters, n as DEFAULT_BETA_VERSION_CONFIG, o as checkVersionNameShape, p as flutterFramework, r as PLATFORM_VERSION_CAPS, s as readProjectVersions, t as readArtifactVersion, u as electronAdapter, v as nativeHarmonyFramework, w as tauriAdapter, x as rnAdapter, y as nativeIosAdapter, z as looseSemver } from "./artifact-DbTqPUbk.mjs";
 import { z } from "zod";
 import fs from "node:fs";
 import path from "node:path";
@@ -90,9 +90,31 @@ const BetaConfigSchema = z.object({
 		/** 测试群组名（submit 时按名查 groupId 绑定；匹配不到报错提示到控制台建组） */
 		group: z.string().optional(),
 		/** 3=邀请测试（默认）4=公开测试 */
-		testType: z.union([z.literal(3), z.literal(4)]).default(3)
+		testType: z.union([z.literal(3), z.literal(4)]).default(3),
+		/**
+		* 隐私政策 URL（提审必填：AGC Testing API 校验 extInfo.privacyPolicy，
+		* 控制台对应版本创建时的「自定义协议」步骤；缺失提审报 204144692
+		* privacyPolicy is necessary——2026-10-25 qy-driver 实测）。透传 target.privacyPolicy。
+		*/
+		privacyPolicy: z.string().optional(),
+		/**
+		* 测试版本描述（languages[].appDesc）：AGC 校验 appDesc/newFeatures/线上 briefInfo
+		* 三者不得相同（2026-10-25 实测），appDesc 与 newFeatures（--note）来源必须互异。
+		* 未配置时用通用基线文案；透传 target.appDesc。
+		*/
+		appDesc: z.string().optional(),
+		/**
+		* 发布前自动清理旧测试版本（stop+delete，默认 true）：
+		* AGC 测试版本在审/在架数量有上限（在审超限提交报 204144692、在架邀请测试 3 个），
+		* 旧版本不清理会阻塞新版本提审。清理只移除 AGC 在架记录——已装设备与热更均不受影响，
+		* 受影响的仅审核空窗期内想新装的人（期间 AGC 邀请链接装不了）。
+		*/
+		cleanup: z.boolean().default(true)
 	}).optional(),
-	testflight: z.object({ note: z.string().optional() }).optional()
+	testflight: z.object({ note: z.string().optional() }).optional(),
+	/** 判定为「原生·需 bump」时自动升版（等价于永远带 --bump；非交互环境须配合 --yes）。
+	*  热更（ota）与「已声明」态不受影响——热更不动版本号，已声明只引导重建 */
+	autoBump: z.boolean().default(false)
 });
 /** versionCode 策略："increment"(默认 +1) | 公式（可限定平台） */
 const VersionCodeConfigSchema = z.union([z.literal("increment"), z.object({
@@ -2464,6 +2486,8 @@ var YybChannel = class {
 *
 * 测试发布（ctx.target.releaseType === '6'，2026-10 起走 Testing API；旧 releaseType=6 直绑 app-package-info 链路已下线，枚举仅剩 1/7）:
 *   0. GET  /api/publish/v2/upload-url/for-obs?releaseType=6   .hap 上传地址 → PUT OBS
+*   0.5 （cleanup !== 'false'，默认开）清理旧测试版本：brief-info/list 发现 testType 3/4 →
+*       POST /api/publish/v2/test/version/stop（完全下架）→ DELETE /api/publish/v2/test/app/version
 *   1. POST /api/publish/v2/test/app/version                   新建测试版本（testType 3=邀请测试）→ versionId
 *   2. POST /api/publish/v2/test/version/pkg                   添加测试软件包（distributeMode=1）→ pkgId
 *   3. GET  /api/publish/v3/package/compile/status             轮询云端编译
@@ -2538,7 +2562,7 @@ var AgcHarmonyChannel = class {
 		"1003": "client_id/client_secret 无效（AGC → 项目设置 → 常规 → API Client 重新获取）",
 		"204144702": "签名/证书不匹配：检查签名证书指纹（SHA256）与 AGC 后台登记是否一致",
 		"204144677": "bundleName 与应用不匹配：确认 appId 对应的应用包名",
-		"204144692": "提审前置校验失败（按 msg 判断）：privacyPolicy → 控制台「更多服务→协议服务」登记隐私政策；count of harmony test in audit → 在审测试版本超限，先停止/删除在审的测试版本再提"
+		"204144692": "提审前置校验失败（按 msg 对症，2026-10-25 实测）：privacyPolicy → 配置 beta.agc.privacyPolicy（Testing API extInfo.privacyPolicy，控制台对应版本创建的「自定义协议」）；displayArea → 邀请测试必填测试专区（CLI 已默认携带，仍报则到控制台核对版本）；count of harmony test in audit → 在审测试版本超限（beta.agc.cleanup 默认已自动清理，仍出现请到控制台核对是否有删不掉的旧测试版本）"
 	};
 	async authHeaders(ctx) {
 		const clientId = required$1(ctx, "AGC_CLIENT_ID");
@@ -2837,7 +2861,8 @@ var AgcHarmonyChannel = class {
 	/**
 	* 测试发布（releaseType=6，2026-10 起走 Testing API——旧 app-package-info 直绑链路已被华为下线，
 	* 其 releaseType 枚举仅剩 1=全网 / 7=企业非公开）：
-	* 上传 .app → 新建测试版本（testType 3=邀请测试 4=公开测试）→ 添加测试软件包 → 等云端编译 → 更新测试版本绑定；
+	* 上传 .app → 清理旧测试版本（cleanupOldTestVersions，默认开）→ 新建测试版本（testType 3=邀请测试
+	* 4=公开测试）→ 添加测试软件包 → 等云端编译 → 更新测试版本绑定；
 	* target.submitTest='true' 时：（可选按 testGroup 绑测试群组）自动提交测试版本审核；否则由控制台人工完成。
 	*/
 	async uploadBeta(ctx, appId, headers) {
@@ -2885,6 +2910,7 @@ var AgcHarmonyChannel = class {
 			type: "progress",
 			detail: "文件上传完成"
 		});
+		await this.cleanupOldTestVersions(ctx, appId, headers);
 		const testType = ctx.target.testType === "4" ? 4 : 3;
 		const versionId = (await agcJson(`${BASE}/publish/v2/test/app/version?appId=${encodeURIComponent(appId)}`, {
 			method: "POST",
@@ -2920,6 +2946,10 @@ var AgcHarmonyChannel = class {
 		}, "添加测试软件包")).pkgVersion?.[0] ?? "";
 		if (!pkgId) throw new Error("AGC 添加测试软件包未返回 pkgVersion");
 		await this.awaitCompile(ctx, appId, pkgId, headers);
+		const privacyPolicy = ctx.target.privacyPolicy?.trim();
+		const note = ctx.updateDescription ?? "applift 测试发布";
+		const appDesc = (ctx.target.appDesc?.trim() || "内测验证版本（internal test build），更新内容以新特性说明为准。").slice(0, 100);
+		const newFeatures = note.slice(0, 100);
 		await agcJson(`${BASE}/publish/v2/test/app/version?appId=${encodeURIComponent(appId)}`, {
 			method: "PUT",
 			headers: {
@@ -2928,7 +2958,13 @@ var AgcHarmonyChannel = class {
 			},
 			body: JSON.stringify({
 				versionId,
-				pkgId
+				pkgId,
+				...privacyPolicy ? { extInfo: { privacyPolicy } } : {},
+				languages: [{
+					language: "zh-CN",
+					appDesc,
+					newFeatures
+				}]
 			})
 		}, "绑定测试软件包");
 		if (ctx.target.submitTest === "true") {
@@ -2948,10 +2984,13 @@ var AgcHarmonyChannel = class {
 						openTestInfo: {
 							startTime: now,
 							endTime: now + 2592e6,
-							testTaskInfo: { groupInfos: [{
-								groupId,
-								groupName
-							}] }
+							testTaskInfo: {
+								groupInfos: [{
+									groupId,
+									groupName
+								}],
+								displayArea: "1"
+							}
 						}
 					})
 				}, "绑定测试群组");
@@ -2994,6 +3033,92 @@ var AgcHarmonyChannel = class {
 		};
 	}
 	/**
+	* 发布前清理旧测试版本（target.cleanup === 'false' 关闭，默认开；config 键 beta.agc.cleanup）：
+	* AGC 测试版本数量约束——在审上限（提交报 204144692 "count of harmony test in audit"）、
+	* 在架上限（邀请测试 3 / 公开测试 1 / 总数 100）——旧版本不清理会阻塞新版本提审（AGC 不自动下架）。
+	* 发现：brief-info/list 反向过滤 testType 3/4（与 status() 的商用过滤互补）。故意不解读 state：
+	* 测试版本 state 枚举与商用 releaseState 表不一致且未经实机验证，清理全部旧版本无需依赖 state。
+	* 清理：stop（完全下架）→ delete（官方指南顺序）；best-effort——单个失败仅告警不阻断，
+	* 名额仍被占时提审步骤的 204144692 errorHint 兜底提示人工处理。
+	* 影响面：已装设备 App 本体与 pushy 热更均不受影响（只移除 AGC 在架记录）；
+	* 受影响的仅审核空窗期内想经 AGC 邀请链接新装的人（蒲公英通道不受影响）。
+	*/
+	async cleanupOldTestVersions(ctx, appId, headers) {
+		if (ctx.target.cleanup === "false") return;
+		const packageName = ctx.target.bundleName;
+		let json;
+		try {
+			json = await agcJson(`${BASE}/publish/v3/version/brief-info/list`, {
+				method: "POST",
+				headers: {
+					...headers,
+					appId,
+					"Content-Type": "application/json"
+				},
+				body: JSON.stringify(packageName ? { packageName } : {})
+			}, "查询旧测试版本");
+		} catch (e) {
+			ctx.emit({
+				type: "warn",
+				message: `旧测试版本查询失败（跳过清理，不阻断）: ${e.message}`
+			});
+			return;
+		}
+		const seen = /* @__PURE__ */ new Set();
+		const stale = (json.versionList ?? []).filter((v) => {
+			if (v.testType !== 3 && v.testType !== 4 || !v.versionId || seen.has(v.versionId)) return false;
+			seen.add(v.versionId);
+			return true;
+		});
+		if (stale.length === 0) {
+			ctx.emit({
+				type: "progress",
+				detail: "旧测试版本清理：无残留"
+			});
+			return;
+		}
+		ctx.emit({
+			type: "progress",
+			detail: `发现 ${stale.length} 个旧测试版本，自动停止并删除（beta.agc.cleanup 默认开；已装设备与热更不受影响）`
+		});
+		for (const v of stale) {
+			const vid = v.versionId;
+			const label = `${v.packageList?.[0]?.versionName ?? "?"}（versionId ${vid}）`;
+			try {
+				await agcJson(`${BASE}/publish/v2/test/version/stop?appId=${encodeURIComponent(appId)}`, {
+					method: "POST",
+					headers: {
+						...headers,
+						"Content-Type": "application/json"
+					},
+					body: JSON.stringify({ versionId: vid })
+				}, "停止测试版本");
+			} catch (e) {
+				const msg = e.message;
+				const hint = msg.includes("state is 9998") ? "——该版本在审中，AGC 不允许停/删：到控制台撤回该审核或等审毕后下次发版自动清理" : "";
+				ctx.emit({
+					type: "warn",
+					message: `停止测试版本 ${label}失败（继续尝试删除）: ${msg}${hint}`
+				});
+			}
+			try {
+				await agcJson(`${BASE}/publish/v2/test/app/version?versionId=${encodeURIComponent(vid)}&appId=${encodeURIComponent(appId)}`, {
+					method: "DELETE",
+					headers
+				}, "删除测试版本");
+				ctx.emit({
+					type: "progress",
+					detail: `旧测试版本已清理: ${label}`
+				});
+			} catch (e) {
+				ctx.emit({
+					type: "warn",
+					message: `删除测试版本 ${label}失败: ${e.message}`
+				});
+			}
+		}
+	}
+	/**
 	* 按群组名查测试群组 groupId（AppTest API GET /test-group/list，appId 走 header，rtnCode 外壳）。
 	* 分页遍历；匹配不到报错提示到控制台建组。
 	* 文档: agc-help-test-api-get-test-grouplist-0000002271000717
@@ -4291,6 +4416,20 @@ function storeVersionName(full) {
 	const v = new semver.SemVer(full);
 	return `${v.major}.${v.minor}.${v.patch}`;
 }
+/**
+* 三态判定核心比较（beta 原生路径用）：工程 versionName 是否领先于最近发布 tag。
+* - ahead：版本已声明（bump 过未 release）→ 引导重建 + --delivery native，不再 bump
+* - not-ahead：未声明或持平 → 引导/自动 bump
+* - unknown：工程版本非 semver（历史非规范值）→ 调用方按需 bump 分支并告警，不猜
+* releasedTag 缺省（从未发布过）→ 任何合法工程版本都算已声明。
+*/
+function compareDeclared(project, releasedTag) {
+	const p = project ? semver.valid(project) ?? void 0 : void 0;
+	if (!p) return "unknown";
+	const r = releasedTag ? looseSemver(releasedTag) ?? void 0 : void 0;
+	if (!r) return "ahead";
+	return semver.gt(p, r) ? "ahead" : "not-ahead";
+}
 //#endregion
 //#region src/version/changelog.ts
 /**
@@ -4500,18 +4639,18 @@ function lastCommitIsRelease(cwd) {
 	]).stdout.startsWith("chore(release): ");
 }
 function planBump(opts) {
-	let anchorTag;
+	let anchor;
 	let commits = [];
 	let infer;
 	if (isGitRepo(opts.cwd)) {
-		anchorTag = latestSemverTag(opts.cwd);
-		if (anchorTag) {
-			commits = commitsSince(opts.cwd, anchorTag);
+		anchor = latestVersionAnchor(opts.cwd) ?? void 0;
+		if (anchor) {
+			commits = commitsSince(opts.cwd, anchor.ref);
 			if (commits.length > 0) infer = inferBumpLevel(commits);
 		}
 	}
 	const currents = readProjectVersions(opts.cwd, opts.framework).filter((c) => (c.versionName || c.versionCode) && !opts.platforms || opts.platforms?.includes(c.platform));
-	const anchorVersion = anchorTag ? looseSemver(anchorTag) ?? void 0 : void 0;
+	const anchorVersion = anchor?.version;
 	const base = (anchorVersion ? semver.prerelease(anchorVersion) !== null : false) ? anchorVersion : baselineVersion([...currents, ...anchorVersion ? [{
 		platform: "__tag__",
 		versionName: anchorVersion
@@ -4523,9 +4662,9 @@ function planBump(opts) {
 		level: opts.level,
 		pre: opts.pre
 	}, infer);
-	if (!anchorTag && !opts.level) decided.reason = "无发版锚点 tag（首次 bump）→ patch 兜底；打第一个 tag 后激活 git 推断";
-	const suspectRerun = !!anchorTag && lastCommitIsRelease(opts.cwd) && commits.every((c) => c.startsWith("chore(release): "));
-	if (suspectRerun) decided.reason += "；⚠ 锚点后无新业务提交且 HEAD 已是 release commit——疑似失败重跑，建议 --no-bump 复用已 bump 版本";
+	if (!anchor && !opts.level) decided.reason = "无发版锚点（首次 bump）→ patch 兜底；首个 bump commit 或 tag 后激活 git 推断";
+	const suspectRerun = !!anchor && lastCommitIsRelease(opts.cwd) && commits.every((c) => c.startsWith("chore(release): "));
+	if (suspectRerun) decided.reason += "；⚠ 锚点后无新业务提交且 HEAD 已是 release commit——疑似失败重跑，建议不带 --bump 重跑复用已 bump 版本";
 	const formulaCfg = opts.versionCode && opts.versionCode !== "increment" ? opts.versionCode : void 0;
 	if (opts.platforms && opts.platforms.length > 0) {
 		const known = new Set(currents.map((c) => c.platform));
@@ -4563,7 +4702,7 @@ function planBump(opts) {
 	if (formulaCfg && !formulaApplied && writes.length > 0) formulaNote += `；⚠ 公式 ${formulaCfg.formula} 未命中任何端${formulaCfg.platforms ? `（platforms: ${formulaCfg.platforms.join("/")}，可用端: ${writes.map((w) => w.platform).join("/")})` : ""}——全部端走 +1 兜底`;
 	if (resetCodes.length > 0) formulaNote += `；⚠ 非数字 versionCode 已从 1 重新起号（${resetCodes.join(", ")}）——商店单调性可能拒绝，建议配置 version.versionCode 公式或手动规范化`;
 	return {
-		anchorTag,
+		anchor,
 		currentVersions: currents,
 		writes,
 		base: base ?? decided.next,
@@ -4638,4 +4777,4 @@ function applyBump(cwd, plan, framework, opts) {
 	}
 }
 //#endregion
-export { APPLIFT_HOME, AgcHarmonyChannel, AscChannel, BetaConfigSchema, BetaVersionConfigSchema, CREDENTIALS_PATH, CredentialsFileSchema, CredentialsProfileSchema, DEFAULT_BETA_VERSION_CONFIG, DefaultChannelRegistry, GLOBAL_CONFIG_PATH, GlobalConfigSchema, GooglePlayChannel, HISTORY_PATH, HonorChannel, HuaweiAndroidChannel, OppoChannel, PLATFORM_VERSION_CAPS, PROJECTS_MAP_PATH, PgyerChannel, PluginHost, ProjectConfigSchema, StoreConfigSchema, StoresSchema, VersionCodeConfigSchema, VersionConfigSchema, VivoChannel, WAIT_BEFORE_SUBMIT_MS, XiaomiChannel, YybChannel, appendEntry, applyBump, assertBetaVersionSupported, assertListingFiles, betaVersionName, checkVersionNameShape, collectReleaseDiff, commitsSince, decideNextVersion, defineConfig, deps, detectBundleIds, electronAdapter, electronFramework, evalVersionCodeFormula, findArtifacts, findUp, flutterAdapter, flutterFramework, formPost, getAgcToken, getHarmonyAppId, git, hmacSign, humanizeError, inferBumpLevel, isGitRepo, knownFrameworkAdapters, latestSemverTag, loadCredentials, loadCredentialsLayered, loadGlobalConfig, loadListingFile, loadProjectConfig, loadProjectProfileMap, looseSemver, md5File, md5String, nativeAndroidAdapter, nativeAndroidFramework, nativeHarmonyAdapter, nativeHarmonyFramework, nativeIosAdapter, nativeIosFramework, nextVersionCode, planBump, projectCredentialsPath, readArtifactVersion, readEntries, readJson, readProjectVersions, redactText, registry, renderChangelogSection, resolveFramework, resolveListing, resolvePlugins, resolveProfile, resolveProfileFor, resolveProfileSource, rnAdapter, rnFramework, routeDelivery, runStage, runSubmit, saveCredentials, saveProjectProfileMap, setProjectProfile, sha256File, sortedQueryString, statusShort, storeVersionName, subdirs, suggestFramework, tagReleaseVersion, tauriAdapter, tauriFramework, toChangelogEntries, tsMillis, tsSeconds, upsertChangelog, writeProjectVersions };
+export { APPLIFT_HOME, AgcHarmonyChannel, AscChannel, BetaConfigSchema, BetaVersionConfigSchema, CREDENTIALS_PATH, CredentialsFileSchema, CredentialsProfileSchema, DEFAULT_BETA_VERSION_CONFIG, DefaultChannelRegistry, GLOBAL_CONFIG_PATH, GlobalConfigSchema, GooglePlayChannel, HISTORY_PATH, HonorChannel, HuaweiAndroidChannel, OppoChannel, PLATFORM_VERSION_CAPS, PROJECTS_MAP_PATH, PgyerChannel, PluginHost, ProjectConfigSchema, StoreConfigSchema, StoresSchema, VersionCodeConfigSchema, VersionConfigSchema, VivoChannel, WAIT_BEFORE_SUBMIT_MS, XiaomiChannel, YybChannel, appendEntry, applyBump, assertBetaVersionSupported, assertListingFiles, betaVersionName, checkVersionNameShape, collectReleaseDiff, commitsSince, compareDeclared, decideNextVersion, defineConfig, deps, detectBundleIds, electronAdapter, electronFramework, evalVersionCodeFormula, findArtifacts, findUp, flutterAdapter, flutterFramework, formPost, getAgcToken, getHarmonyAppId, git, hmacSign, humanizeError, inferBumpLevel, isGitRepo, knownFrameworkAdapters, latestSemverTag, latestVersionAnchor, loadCredentials, loadCredentialsLayered, loadGlobalConfig, loadListingFile, loadProjectConfig, loadProjectProfileMap, looseSemver, md5File, md5String, nativeAndroidAdapter, nativeAndroidFramework, nativeHarmonyAdapter, nativeHarmonyFramework, nativeIosAdapter, nativeIosFramework, nextVersionCode, planBump, projectCredentialsPath, readArtifactVersion, readEntries, readJson, readProjectVersions, redactText, registry, renderChangelogSection, resolveFramework, resolveListing, resolvePlugins, resolveProfile, resolveProfileFor, resolveProfileSource, rnAdapter, rnFramework, routeDelivery, runStage, runSubmit, saveCredentials, saveProjectProfileMap, setProjectProfile, sha256File, sortedQueryString, statusShort, storeVersionName, subdirs, suggestFramework, tagReleaseVersion, tauriAdapter, tauriFramework, toChangelogEntries, tsMillis, tsSeconds, upsertChangelog, writeProjectVersions };

package/dist/plugins/index.d.mts

@@ -1,4 +1,4 @@
-import { E as FrameworkContext, O as UpdateProvider, W as BetaVersionConfig, _ as AppliftPlugin, a as knownFrameworkAdapters, c as nativeHarmonyAdapter, d as nativeIosFramework, f as rnAdapter, g as tauriFramework, h as tauriAdapter, i as flutterFramework, l as nativeHarmonyFramework, m as suggestFramework, n as electronFramework, o as nativeAndroidAdapter, p as rnFramework, r as flutterAdapter, s as nativeAndroidFramework, t as electronAdapter, u as nativeIosAdapter, w as DeliveryJudgement } from "../frameworks-B_GxUuWQ.mjs";
+import { E as FrameworkContext, O as UpdateProvider, W as BetaVersionConfig, _ as AppliftPlugin, a as knownFrameworkAdapters, c as nativeHarmonyAdapter, d as nativeIosFramework, f as rnAdapter, g as tauriFramework, h as tauriAdapter, i as flutterFramework, l as nativeHarmonyFramework, m as suggestFramework, n as electronFramework, o as nativeAndroidAdapter, p as rnFramework, r as flutterAdapter, s as nativeAndroidFramework, t as electronAdapter, u as nativeIosAdapter, w as DeliveryJudgement } from "../frameworks-B-t5Ywma.mjs";
 //#region src/plugins/dingtalk-notify.d.ts
 interface DingtalkNotifyOptions {
   webhook: string;
@@ -44,12 +44,24 @@ interface PushyCli {
     packageVersion: string;
     rollout?: number;
   }): Promise<void>;
-  /** 版本列表（取号与状态展示用） */
+  /** 版本列表（取号与状态展示用）。packageVersion：该热更绑定的原生基线版本名
+   *  （基线自动替换的安全判据；服务端未回显时字段缺省，调用方按无法确认处理） */
   versions(appId: number): Promise<Array<{
     id: number;
     hash: string;
     name: string;
+    packageVersion?: string;
   }>>;
+  /** 基线包列表（GET /app/:id/package/list；409 自动替换的发现手段） */
+  packages(appId: number): Promise<Array<{
+    id: number;
+    hash: string;
+    name: string;
+    status: string;
+  }>>;
+  /** 删除基线包（DELETE /app/:id/package/:packageId，2026-10-25 实测端点存在）。
+   *  调用方必须先确认该基线无热更版本绑定（删除被绑定的基线会孤儿化热更）。 */
+  deletePackage(appId: number, packageId: number): Promise<void>;
 }
 /** credentials.json 中的 pushy token 键名 */
 export declare const PUSHY_TOKEN_KEY = "PUSHY_API_TOKEN";

package/dist/plugins/index.mjs

@@ -1,4 +1,4 @@
-import { C as suggestFramework, M as collectReleaseDiff, O as findArtifacts, S as rnFramework, T as tauriFramework, _ as nativeHarmonyAdapter, a as betaVersionName, b as nativeIosFramework, d as electronFramework, f as flutterAdapter, g as nativeAndroidFramework, h as nativeAndroidAdapter, i as assertBetaVersionSupported, l as redactText, m as knownFrameworkAdapters, n as DEFAULT_BETA_VERSION_CONFIG, p as flutterFramework, s as readProjectVersions, t as readArtifactVersion, u as electronAdapter, v as nativeHarmonyFramework, w as tauriAdapter, x as rnAdapter, y as nativeIosAdapter } from "../artifact-DFD8C7bE.mjs";
+import { C as suggestFramework, M as collectReleaseDiff, O as findArtifacts, S as rnFramework, T as tauriFramework, _ as nativeHarmonyAdapter, a as betaVersionName, b as nativeIosFramework, d as electronFramework, f as flutterAdapter, g as nativeAndroidFramework, h as nativeAndroidAdapter, i as assertBetaVersionSupported, l as redactText, m as knownFrameworkAdapters, n as DEFAULT_BETA_VERSION_CONFIG, p as flutterFramework, s as readProjectVersions, t as readArtifactVersion, u as electronAdapter, v as nativeHarmonyFramework, w as tauriAdapter, x as rnAdapter, y as nativeIosAdapter } from "../artifact-DbTqPUbk.mjs";
 import fs from "node:fs";
 import path from "node:path";
 import { createHmac } from "node:crypto";
@@ -94,7 +94,9 @@ async function query(f, baseUrl, token, api, init) {
 	}
 	if (!res.ok) {
 		const msg = json?.message || res.statusText || `HTTP ${res.status}`;
-		throw new Error(res.status === 401 ? `pushy API 鉴权失败（token 无效或过期）：请更新 credentials.json 的 ${PUSHY_TOKEN_KEY}` : `pushy API ${api} 失败（HTTP ${res.status}）：${msg}`);
+		const err = /* @__PURE__ */ new Error(res.status === 401 ? `pushy API 鉴权失败（token 无效或过期）：请更新 credentials.json 的 ${PUSHY_TOKEN_KEY}` : `pushy API ${api} 失败（HTTP ${res.status}）：${msg}`);
+		err.status = res.status;
+		throw err;
 	}
 	return json ?? {};
 }
@@ -271,11 +273,31 @@ function createPushyApi(opts) {
 				for (const v of data) out.push({
 					id: v.id,
 					hash: v.hash ?? "",
-					name: v.name
+					name: v.name,
+					...v.packageVersion !== void 0 ? { packageVersion: v.packageVersion } : {}
 				});
 				if (data.length < limit) break;
 			}
 			return out;
+		},
+		async packages(appId) {
+			const out = [];
+			const limit = 100;
+			for (let offset = 0; offset < 1e4; offset += limit) {
+				const { data } = await q(`/app/${appId}/package/list?offset=${offset}&limit=${limit}`);
+				if (!data?.length) break;
+				for (const p of data) out.push({
+					id: p.id,
+					hash: p.hash ?? "",
+					name: p.name,
+					status: p.status ?? ""
+				});
+				if (data.length < limit) break;
+			}
+			return out;
+		},
+		async deletePackage(appId, packageId) {
+			await q(`/app/${appId}/package/${packageId}`, { method: "DELETE" });
 		}
 	};
 }
@@ -725,7 +747,21 @@ function rnUpdate(opts = {}, cli) {
 				const key = `${platform}:${versionName}`;
 				if (uploadedBaselines.has(key)) return;
 				uploadedBaselines.add(key);
-				await resolvePushyClient(opts, cli, hookCtx.credentials).uploadApp(appId, result.artifactPath, versionName, readDepVersions(hookCtx.cwd));
+				const pushy = resolvePushyClient(opts, cli, hookCtx.credentials);
+				try {
+					await pushy.uploadApp(appId, result.artifactPath, versionName, readDepVersions(hookCtx.cwd));
+				} catch (e) {
+					if (e.status !== 409) throw e;
+					const sameName = (await pushy.packages(appId)).filter((p) => p.name === versionName);
+					if (sameName.length === 0) throw new Error(`基线 409 但未发现同名基线（hash 重复？）：${versionName}——请人工核对 pushy 后台`);
+					const vers = await pushy.versions(appId);
+					const bound = vers.filter((v) => v.packageVersion === versionName || v.packageVersion === void 0 && sameName.some((p) => v.hash === p.hash && v.name === versionName));
+					if (vers.length > 0 && bound.length > 0) throw new Error(`基线 ${versionName} 已绑定 ${bound.length} 个热更版本，自动替换会使热更孤儿化——请人工处理（pushy 后台迁移热更或删除后重发）`);
+					if (vers.length > 0 && vers.every((v) => v.packageVersion === void 0)) throw new Error(`服务端未回显热更绑定关系，无法确认 ${versionName} 基线可安全替换——请人工核对后删除重传`);
+					for (const p of sameName) await pushy.deletePackage(appId, p.id);
+					process.stderr.write(`⚠ pushy 基线 ${versionName} 内容已变（同版本名重建），自动删除旧基线 ${sameName.map((p) => `#${p.id}(${p.hash})`).join(",")} 并重传\n`);
+					await pushy.uploadApp(appId, result.artifactPath, versionName, readDepVersions(hookCtx.cwd));
+				}
 			} catch (e) {
 				uploadedBaselines.delete(`${platform}:${readArtifactVersion(result.artifactPath)?.versionName ?? ""}`);
 				process.stderr.write(`⚠ pushy 基线上传失败（请人工补传）：${e.message}\n`);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@applift/core",
-  "version": "0.10.0",
+  "version": "0.12.0",
   "repository": {
     "type": "git",
     "url": "https://github.com/hcg1023/applift.git",