@applift/core 0.3.0 → 0.5.0

package/dist/index.mjs

@@ -3,11 +3,14 @@ import fs from "node:fs";
 import path from "node:path";
 import os from "node:os";
 import { parse } from "smol-toml";
+import { fileURLToPath } from "node:url";
 import { loadConfig } from "c12";
 import { createJiti } from "jiti";
 import crypto, { X509Certificate, constants, createHash, createHmac, createSign, publicEncrypt } from "node:crypto";
 import { Readable } from "node:stream";
 import { spawnSync } from "node:child_process";
+import semver from "semver";
+import { CommitParser } from "conventional-commits-parser";
 //#region src/registry.ts
 var DefaultChannelRegistry = class {
 	channels = /* @__PURE__ */ new Map();
@@ -55,6 +58,8 @@ const StoresSchema = z.union([z.record(z.string(), z.union([StoreConfigSchema, z
 * - testflight: App Store Connect 上传（ipa 进 TestFlight）
 */
 const BetaConfigSchema = z.object({
+	/** 自动 version：true(走推断)| major/minor/patch/prerelease | <semver>；CLI --bump/--no-bump 覆盖 */
+	bump: z.union([z.boolean(), z.string()]).optional(),
 	pgyer: z.object({
 		platforms: z.array(z.enum([
 			"android",
@@ -73,6 +78,16 @@ const BetaConfigSchema = z.object({
 	}).optional(),
 	testflight: z.object({ note: z.string().optional() }).optional()
 });
+/** versionCode 策略："increment"(默认 +1) | 公式（可限定平台） */
+const VersionCodeConfigSchema = z.union([z.literal("increment"), z.object({
+	/** 白名单表达式：major/minor/patch 与 + - * ( )，如 "major*1000000+minor*1000+patch" */
+	formula: z.string(),
+	/** 仅限平台（缺省全部）；实际写入 = max(公式值, 现值+1) */
+	platforms: z.array(z.string()).optional()
+})]);
+const VersionConfigSchema = z.object({ versionCode: VersionCodeConfigSchema.default("increment") });
+/** 正式发版段的自动 version 开关（语义同 beta.bump） */
+const ReleaseConfigSchema = z.object({ bump: z.union([z.boolean(), z.string()]).optional() });
 const ProjectConfigSchema = z.object({
 	/** 项目显示名 */
 	name: z.string().optional(),
@@ -109,6 +124,10 @@ const ProjectConfigSchema = z.object({
 		macos: z.array(z.string()).optional(),
 		linux: z.array(z.string()).optional()
 	}).catchall(z.array(z.string()).optional()).optional(),
+	/** 版本管理（versionCode 策略等） */
+	version: VersionConfigSchema.optional(),
+	/** 正式发版自动 version 开关 */
+	release: ReleaseConfigSchema.optional(),
 	/** 内测分发（beta 无平台参数时的多渠道并行配置） */
 	beta: BetaConfigSchema.optional()
 });
@@ -211,11 +230,33 @@ function saveCredentials(data, filePath = CREDENTIALS_PATH) {
 * 项目配置装载：c12（社区主流）加载 applift.config.ts。
 * c12 负责：TS 配置文件执行、缺省值、多源合并 —— 非自研。
 */
+/**
+* 裸工程兼容：applift.config.ts 里的 `@applift/core` / `@applift/cli` 导入按目标工程解析会
+* 找不到包（工程未安装依赖）——jiti 别名统一指到 CLI 进程自带的那份 core 入口，
+* 使 `import { defineConfig } from "@applift/cli"`（或 @applift/core）在任何工程可用。
+*/
+function appliftAlias() {
+	try {
+		const distEntry = fileURLToPath(import.meta.resolve("@applift/core"));
+		const coreEntry = fs.existsSync(distEntry) ? distEntry : path.join(path.dirname(path.dirname(distEntry)), "src", "index.ts");
+		if (!fs.existsSync(coreEntry)) return {};
+		return {
+			"@applift/core": coreEntry,
+			"@applift/cli": coreEntry
+		};
+	} catch {
+		return {};
+	}
+}
 async function loadProjectConfig(cwd) {
 	const cfgPath = findUp(cwd, "applift.config.ts");
 	const cfgDir = cfgPath ? path.dirname(cfgPath) : cwd;
 	const bunRuntime = globalThis.Bun;
-	const jitiInstance = bunRuntime ? createJiti(import.meta.url, { transform: (opts) => ({ code: new bunRuntime.Transpiler({ loader: "ts" }).transformSync(opts.source) }) }) : void 0;
+	const alias = appliftAlias();
+	const jitiInstance = bunRuntime ? createJiti(import.meta.url, {
+		alias,
+		transform: (opts) => ({ code: new bunRuntime.Transpiler({ loader: "ts" }).transformSync(opts.source) })
+	}) : Object.keys(alias).length ? createJiti(import.meta.url, { alias }) : void 0;
 	const result = await loadConfig({
 		name: "applift",
 		cwd: cfgDir,
@@ -2335,7 +2376,8 @@ var AgcHarmonyChannel = class {
 		"204144660": "提交失败，包可能仍在解析（稍后重试或到控制台查看）",
 		"1003": "client_id/client_secret 无效（AGC → 项目设置 → 常规 → API Client 重新获取）",
 		"204144702": "签名/证书不匹配：检查签名证书指纹（SHA256）与 AGC 后台登记是否一致",
-		"204144677": "bundleName 与应用不匹配：确认 appId 对应的应用包名"
+		"204144677": "bundleName 与应用不匹配：确认 appId 对应的应用包名",
+		"204144692": "提审前置校验失败（按 msg 判断）：privacyPolicy → 控制台「更多服务→协议服务」登记隐私政策；count of harmony test in audit → 在审测试版本超限，先停止/删除在审的测试版本再提"
 	};
 	async authHeaders(ctx) {
 		const clientId = required$1(ctx, "AGC_CLIENT_ID");
@@ -2664,6 +2706,7 @@ var AgcHarmonyChannel = class {
 			const groupName = ctx.target.testGroup?.trim();
 			if (groupName) {
 				const groupId = await this.resolveTestGroupId(ctx, appId, groupName, headers);
+				const now = Date.now();
 				await agcJson(`${BASE}/publish/v2/test/app/version?appId=${encodeURIComponent(appId)}`, {
 					method: "PUT",
 					headers: {
@@ -2673,10 +2716,14 @@ var AgcHarmonyChannel = class {
 					body: JSON.stringify({
 						versionId,
 						pkgId,
-						openTestInfo: { testTaskInfo: { groupInfos: [{
-							groupId,
-							groupName
-						}] } }
+						openTestInfo: {
+							startTime: now,
+							endTime: now + 2592e6,
+							testTaskInfo: { groupInfos: [{
+								groupId,
+								groupName
+							}] }
+						}
 					})
 				}, "绑定测试群组");
 				ctx.emit({
@@ -3638,7 +3685,12 @@ const rnAdapter = {
 	artifactPatterns(platform) {
 		if (platform === "android") return ["android/app/build/outputs/apk/release/*-release.apk"];
 		if (platform === "ios") return ["build/ios/ipa/*.ipa"];
-		return ["harmony/entry/build/default/outputs/**/entry-*-signed.hap", "harmony/entry/build/default/outputs/**/entry-*.app"];
+		return [
+			"harmony/entry/build/default/outputs/**/entry-*-signed.hap",
+			"harmony/entry/build/default/outputs/**/entry-*.app",
+			"harmony/build/outputs/**/*.app",
+			"build/outputs/**/*.app"
+		];
 	},
 	buildCommand(platform) {
 		if (platform === "android") return [
@@ -3750,7 +3802,10 @@ const nativeHarmonyAdapter = {
 		return [
 			"entry/build/default/outputs/**/entry-*-signed.hap",
 			"entry/build/default/outputs/**/entry-*.app",
-			"harmony/entry/build/default/outputs/**/*-signed.hap"
+			"harmony/entry/build/default/outputs/**/*-signed.hap",
+			"build/outputs/**/*.app",
+			"harmony/build/outputs/**/*.app",
+			"ohos/build/outputs/**/*.app"
 		];
 	},
 	buildCommand() {
@@ -3870,7 +3925,7 @@ function findArtifacts(cwd, patterns) {
 	return [...byPath].sort((a, b) => b[1] - a[1]).map(([p]) => p);
 }
 /** 文本读取（容错：不存在/不可读返回 null，绝不抛；detectBundleIds 各源共用） */
-function readText(filePath) {
+function readText$1(filePath) {
 	try {
 		return fs.readFileSync(filePath, "utf8");
 	} catch {
@@ -3895,7 +3950,7 @@ function gradleApplicationId(cwd) {
 		path.join(cwd, "android", "app", "build.gradle.kts")
 	];
 	for (const file of candidates) {
-		const text = readText(file);
+		const text = readText$1(file);
 		if (!text) continue;
 		const m = /(?:^|\s)applicationId\s*[=:]?\s*["']([^"'\s]+)["']/.exec(text);
 		if (m?.[1]) return m[1];
@@ -3903,7 +3958,7 @@ function gradleApplicationId(cwd) {
 }
 /** 鸿蒙 AppScope/app.json5 的 bundleName（json5 允许注释/尾逗号，正则取值而非 JSON 解析） */
 function appJson5BundleName(file) {
-	const text = readText(file);
+	const text = readText$1(file);
 	return (text && /"bundleName"\s*:\s*"([^"]+)"/.exec(text))?.[1];
 }
 /** 两层子目录内找首个 *.xcodeproj：pbxproj 第一个非变量（含 $ 的 $(...) 与 ${...}）的 PRODUCT_BUNDLE_IDENTIFIER + 工程名（Pods 已被 subdirs 排除） */
@@ -3917,7 +3972,7 @@ function findPbxproj(cwd) {
 		}
 		const projects = entries.filter((e) => e.isDirectory() && e.name.endsWith(".xcodeproj")).map((e) => e.name).sort();
 		for (const name of projects) {
-			const pbx = readText(path.join(dir, name, "project.pbxproj"));
+			const pbx = readText$1(path.join(dir, name, "project.pbxproj"));
 			if (!pbx) continue;
 			for (const m of pbx.matchAll(/PRODUCT_BUNDLE_IDENTIFIER\s*=\s*([^;]+);/g)) {
 				const value = m[1].trim().replace(/^["']|["']$/g, "");
@@ -4025,7 +4080,890 @@ function humanizeError(hints, message) {
 	return message;
 }
 //#endregion
-//#region src/version.ts
+//#region src/version/project.ts
+/**
+* 工程文件版本读写（可接管模式：版本事实源永远是工程文件，applift 只代读代写）。
+* 只认标准模板形态（AGP/Xcode/DevEco/pubspec/package.json/tauri.conf）；行级改写、
+* 幂等（字段定位 + 写死目标值，不依赖旧值，跑 N 次 diff 不变——qy-driver sync-app-identity 同款模式）。
+* version catalog 引用形态（libs.versions.xxx.get()）读侧识别并标注 problem，不代写。
+*/
+function readText(p) {
+	try {
+		return fs.readFileSync(p, "utf8");
+	} catch {
+		return null;
+	}
+}
+function firstExisting(...paths) {
+	return paths.find((p) => fs.existsSync(p));
+}
+function locateIosProject(dir) {
+	const find = (d) => {
+		try {
+			return fs.readdirSync(d, { withFileTypes: true }).find((e) => e.isDirectory() && e.name.endsWith(".xcodeproj") && !e.name.startsWith(".") && e.name !== "Pods.xcodeproj");
+		} catch {
+			return;
+		}
+	};
+	let xcodeproj = find(dir);
+	let base = dir;
+	if (!xcodeproj) try {
+		const subs = fs.readdirSync(dir, { withFileTypes: true }).filter((e) => e.isDirectory() && !e.name.startsWith(".") && e.name !== "node_modules" && e.name !== "Pods");
+		for (const s of subs) {
+			xcodeproj = find(path.join(dir, s.name));
+			if (xcodeproj) {
+				base = path.join(dir, s.name);
+				break;
+			}
+		}
+	} catch {}
+	const pbxproj = xcodeproj ? path.join(base, xcodeproj.name, "project.pbxproj") : void 0;
+	const projDir = xcodeproj?.name.replace(/\.xcodeproj$/, "");
+	const plist = projDir && fs.existsSync(path.join(base, projDir, "Info.plist")) ? path.join(base, projDir, "Info.plist") : void 0;
+	return {
+		pbxproj: pbxproj && fs.existsSync(pbxproj) ? pbxproj : void 0,
+		plist
+	};
+}
+function locateVersionFiles(cwd, framework) {
+	const loc = {};
+	const id = framework?.id ?? "";
+	const tryAll = framework === null;
+	if (tryAll || id === "rn" || id === "native-android" || id === "flutter") loc.android = firstExisting(path.join(cwd, "android", "app", "build.gradle.kts"), path.join(cwd, "android", "app", "build.gradle"), path.join(cwd, "app", "build.gradle.kts"), path.join(cwd, "app", "build.gradle"));
+	if (tryAll || id === "rn" || id === "native-ios" || id === "flutter") {
+		const sub = locateIosProject(path.join(cwd, "ios"));
+		const root = sub.pbxproj ? sub : locateIosProject(cwd);
+		loc.ios = root.pbxproj;
+		loc.plist = root.plist;
+	}
+	if (tryAll || id === "rn" || id === "native-harmony" || id === "flutter") loc.harmony = firstExisting(path.join(cwd, "harmony", "AppScope", "app.json5"), path.join(cwd, "AppScope", "app.json5"));
+	if (tryAll || id === "flutter") loc.pubspec = fs.existsSync(path.join(cwd, "pubspec.yaml")) ? path.join(cwd, "pubspec.yaml") : void 0;
+	if (tryAll || id === "rn" || id === "electron") loc.packageJson = fs.existsSync(path.join(cwd, "package.json")) ? path.join(cwd, "package.json") : void 0;
+	if (tryAll || id === "tauri") {
+		loc.tauri = firstExisting(path.join(cwd, "src-tauri", "tauri.conf.json"), path.join(cwd, "src-tauri", "tauri.conf.json5"));
+		loc.packageJson = fs.existsSync(path.join(cwd, "package.json")) ? path.join(cwd, "package.json") : void 0;
+	}
+	if (id === "rn") {
+		const appJson = readText(path.join(cwd, "app.json"));
+		if (appJson && /"expo"\s*:/.test(appJson)) loc.expoAppJson = path.join(cwd, "app.json");
+	}
+	return loc;
+}
+function readGradle(file) {
+	const text = readText(file);
+	if (!text) return {};
+	const out = {};
+	const codeM = /(versionCode(?!Suffix)\s*=?\s*)(\d+)/.exec(text);
+	const nameM = /(versionName(?!Suffix)\s*=?\s*)("[^"]*"|'[^']*'|[\w.+-]+)/.exec(text);
+	if (codeM) out.versionCode = codeM[2];
+	if (nameM) {
+		const nameVal = nameM[2].replace(/^["']|["']$/g, "");
+		if (nameVal.startsWith("libs.versions.")) out.problem = "versionName 走 version catalog 引用（libs.versions.*）：非标准形态，请把版本字段搬回 app/build.gradle(.kts) 字面量";
+		else out.versionName = nameVal;
+	}
+	if (/(versionCode|versionName)\s*=?\s*libs\.versions\./.test(text) && !out.problem) out.problem = "版本字段走 version catalog 引用（libs.versions.*）：非标准形态，请把版本字段搬回 app/build.gradle(.kts) 字面量";
+	return out;
+}
+function readPbxproj(file) {
+	const text = readText(file);
+	if (!text) return {};
+	const names = [...text.matchAll(/MARKETING_VERSION\s*=\s*([^;]+);/g)].map((m) => m[1].trim());
+	return {
+		versionName: names[0],
+		versionCode: /CURRENT_PROJECT_VERSION\s*=\s*([^;]+);/.exec(text)?.[1]?.trim(),
+		problem: new Set(names).size > 1 ? `多 target MARKETING_VERSION 不一致（${[...new Set(names)].join(" / ")}）：读第一个，bump 时将全部同步` : void 0
+	};
+}
+function readPlist(file) {
+	const text = readText(file);
+	if (!text) return {};
+	const name = /<key>CFBundleShortVersionString<\/key>\s*<string>([^<]+)<\/string>/.exec(text)?.[1];
+	const code = /<key>CFBundleVersion<\/key>\s*<string>([^<]+)<\/string>/.exec(text)?.[1];
+	if (name && !name.startsWith("$")) return {
+		versionName: name,
+		versionCode: code
+	};
+	return {};
+}
+function readAppJson5(file) {
+	const text = readText(file);
+	if (!text) return {};
+	return {
+		versionName: /"versionName"\s*:\s*"([^"]+)"/.exec(text)?.[1],
+		versionCode: /"versionCode"\s*:\s*(\d+)/.exec(text)?.[1]
+	};
+}
+function readPubspec(file) {
+	const text = readText(file);
+	if (!text) return {};
+	const m = /^version:\s*(\S+)(?:\s*#.*)?$/m.exec(text);
+	if (!m) return {};
+	const [name, code] = m[1].split("+");
+	return {
+		versionName: name,
+		versionCode: code
+	};
+}
+function readJsonVersionKey(file) {
+	const text = readText(file);
+	if (!text) return {};
+	let best;
+	for (const m of text.matchAll(/^(\s*)"version"\s*:\s*"([^"]+)"\s*,?\s*$/gm)) {
+		const indent = m[1].length;
+		if (!best || indent < best.indent) best = {
+			indent,
+			value: m[2]
+		};
+	}
+	if (best) return { versionName: best.value };
+	try {
+		const obj = JSON.parse(text);
+		if (typeof obj.version === "string") return { versionName: obj.version };
+	} catch {}
+	const flat = /"version"\s*:\s*"([^"]+)"/.exec(text)?.[1];
+	return flat ? { versionName: flat } : {};
+}
+function readExpoAppJson(file) {
+	const text = readText(file);
+	if (!text) return {};
+	return {
+		versionName: /"version"\s*:\s*"([^"]+)"/.exec(text)?.[1],
+		versionCode: /"versionCode"\s*:\s*(\d+)/.exec(text)?.[1] ?? /"buildNumber"\s*:\s*"([^"]+)"/.exec(text)?.[1]
+	};
+}
+/** 各端版本实况（按框架布局；未识别框架时尝试全部标准位置） */
+function readProjectVersions(cwd, framework) {
+	const loc = locateVersionFiles(cwd, framework);
+	const out = [];
+	if (loc.android) out.push({
+		platform: "android",
+		file: loc.android,
+		kind: "gradle",
+		...readGradle(loc.android)
+	});
+	if (loc.ios) out.push({
+		platform: "ios",
+		file: loc.ios,
+		kind: "pbxproj",
+		...readPbxproj(loc.ios)
+	});
+	else if (loc.plist) {
+		const plist = readPlist(loc.plist);
+		if (plist.versionName) out.push({
+			platform: "ios",
+			file: loc.plist,
+			kind: "pbxproj",
+			...plist,
+			problem: "未找到 pbxproj，读 Info.plist 字面量"
+		});
+	}
+	if (loc.harmony) out.push({
+		platform: "harmony",
+		file: loc.harmony,
+		kind: "app-json5",
+		...readAppJson5(loc.harmony)
+	});
+	if (loc.pubspec) out.push({
+		platform: "flutter",
+		file: loc.pubspec,
+		kind: "pubspec",
+		...readPubspec(loc.pubspec)
+	});
+	if (loc.packageJson) out.push({
+		platform: "js",
+		file: loc.packageJson,
+		kind: "package-json",
+		...readJsonVersionKey(loc.packageJson)
+	});
+	if (loc.tauri) out.push({
+		platform: "tauri",
+		file: loc.tauri,
+		kind: "tauri",
+		...readJsonVersionKey(loc.tauri)
+	});
+	if (loc.expoAppJson) out.push({
+		platform: "expo",
+		file: loc.expoAppJson,
+		kind: "expo-app-json",
+		...readExpoAppJson(loc.expoAppJson)
+	});
+	return out;
+}
+/** 指定捕获组替换为 value（其余组原样保留；约定各正则组外无字面量） */
+function replaceGroup(re, text, group, value) {
+	let count = 0;
+	return {
+		text: text.replace(re, (_m, ...groups) => {
+			count++;
+			const g = groups.slice(0, -2);
+			g[group - 1] = value;
+			return g.join("");
+		}),
+		count
+	};
+}
+function writeIfChanged(file, next) {
+	if (readText(file) === next) return false;
+	fs.writeFileSync(file, next, "utf8");
+	return true;
+}
+function writeGradle(file, w) {
+	const text = readText(file);
+	if (!text) throw new Error(`无法读取 ${file}`);
+	if (/version(Code|Name)\s*=?\s*libs\.versions\./.test(text)) throw new Error(`${file} 的版本字段是 version catalog 引用形态：请先改造为字面量（applift 只写标准形态）`);
+	let next = text;
+	const code = replaceGroup(/(versionCode(?!Suffix)\s*=?\s*)(\d+)/g, next, 2, String(w.versionCode));
+	next = code.text;
+	const name = replaceGroup(/(versionName(?!Suffix)\s*=?\s*)("[^"]*"|'[^']*'|[\w.+-]+)/g, next, 2, `"${w.versionName}"`);
+	next = name.text;
+	if (code.count === 0 && name.count === 0) throw new Error(`${file} 未找到 versionCode/versionName 字面量`);
+	return writeIfChanged(file, next);
+}
+function writePbxproj(file, w) {
+	const text = readText(file);
+	if (!text) throw new Error(`无法读取 ${file}`);
+	let next = text;
+	const name = replaceGroup(/(MARKETING_VERSION\s*=\s*)([^;]+)(;)/g, next, 2, w.versionName);
+	next = name.text;
+	const code = replaceGroup(/(CURRENT_PROJECT_VERSION\s*=\s*)([^;]+)(;)/g, next, 2, String(w.versionCode));
+	next = code.text;
+	if (name.count === 0 && code.count === 0) throw new Error(`${file} 未找到 MARKETING_VERSION/CURRENT_PROJECT_VERSION`);
+	return writeIfChanged(file, next);
+}
+function writeAppJson5(file, w) {
+	const text = readText(file);
+	if (!text) throw new Error(`无法读取 ${file}`);
+	let next = text;
+	const name = replaceGroup(/("versionName"\s*:\s*")([^"]+)(")/g, next, 2, w.versionName);
+	next = name.text;
+	const code = replaceGroup(/("versionCode"\s*:\s*)(\d+)/g, next, 2, String(w.versionCode));
+	next = code.text;
+	if (name.count === 0 && code.count === 0) throw new Error(`${file} 未找到 versionName/versionCode`);
+	return writeIfChanged(file, next);
+}
+function writePubspec(file, w) {
+	const text = readText(file);
+	if (!text) throw new Error(`无法读取 ${file}`);
+	if (!/^version:\s*\S+/m.test(text)) throw new Error(`${file} 未找到 version: 行`);
+	return writeIfChanged(file, text.replace(/^version:[^\n#]*?(\s*)(#.*)?$/m, (_m, gap, comment) => `version: ${w.versionName}+${w.versionCode}${comment ? gap ?? " " : ""}${comment ?? ""}`));
+}
+/** JSON 顶层 version 键改写（两遍：先定位最小缩进行，再只改该行——单遍回调在嵌套键
+*  先出现时会把它一并改写，篡改依赖声明）。单行 JSON 回退首个匹配。 */
+function writeJsonVersionKey(file, versionName) {
+	const text = readText(file);
+	if (!text) throw new Error(`无法读取 ${file}`);
+	const lines = text.split("\n");
+	const re = /^(\s*)"version"\s*:\s*"([^"]+)"(\s*,?\s*)$/;
+	let target = -1;
+	let bestIndent = Number.POSITIVE_INFINITY;
+	for (let i = 0; i < lines.length; i++) {
+		const m = re.exec(lines[i]);
+		if (!m) continue;
+		const ind = m[1].length;
+		if (ind < bestIndent) {
+			bestIndent = ind;
+			target = i;
+		}
+	}
+	let next;
+	if (target >= 0) {
+		const m = re.exec(lines[target]);
+		lines[target] = `${m[1]}"version": "${versionName}"${m[3]}`;
+		next = lines.join("\n");
+	} else {
+		let topVersion;
+		try {
+			const obj = JSON.parse(text);
+			if (typeof obj.version === "string") topVersion = obj.version;
+		} catch {}
+		const esc = (topVersion ?? "").replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
+		const re1 = topVersion ? new RegExp(`"version"\\s*:\\s*"${esc}"`) : /"version"\s*:\s*"([^"]+)"/;
+		if (!re1.test(text)) throw new Error(`${file} 未找到 "version" 键`);
+		next = text.replace(re1, `"version": "${versionName}"`);
+	}
+	return writeIfChanged(file, next);
+}
+function writeExpoAppJson(file, w) {
+	const text = readText(file);
+	if (!text) throw new Error(`无法读取 ${file}`);
+	const v = replaceGroup(/("version"\s*:\s*")([^"]+)(")/g, text, 2, w.versionName);
+	if (v.count === 0) throw new Error(`${file} 未找到 expo "version" 键`);
+	let next = v.text;
+	next = replaceGroup(/("versionCode"\s*:\s*)(\d+)/g, next, 2, String(w.versionCode)).text;
+	next = replaceGroup(/("buildNumber"\s*:\s*")([^"]+)(")/g, next, 2, String(w.versionCode)).text;
+	return writeIfChanged(file, next);
+}
+/**
+* 写回各端版本（多端 versionName 同步、versionCode 各端独立）。
+* 返回实际改动的文件列表（commit 范围）。problem 端跳过并在返回中列出（不阻断其他端）。
+*/
+function writeProjectVersions(cwd, framework, writes) {
+	const loc = locateVersionFiles(cwd, framework);
+	const changed = [];
+	const skipped = [];
+	const plat = new Map(writes.map((w) => [w.platform, w]));
+	const apply = (file, fn, key) => {
+		if (!file) {
+			const w = plat.get(key);
+			if (w) skipped.push({
+				platform: w.platform,
+				reason: `未找到版本文件（${key}）`
+			});
+			return;
+		}
+		try {
+			if (fn(file)) changed.push(file);
+		} catch (e) {
+			const code = e.code;
+			if (code === "EACCES" || code === "EPERM") throw e;
+			skipped.push({
+				platform: key,
+				reason: e.message
+			});
+		}
+	};
+	if (plat.has("android")) apply(loc.android, (f) => writeGradle(f, plat.get("android")), "android");
+	if (plat.has("ios")) apply(loc.ios, (f) => writePbxproj(f, plat.get("ios")), "ios");
+	if (plat.has("harmony")) apply(loc.harmony, (f) => writeAppJson5(f, plat.get("harmony")), "harmony");
+	if (plat.has("flutter")) apply(loc.pubspec, (f) => writePubspec(f, plat.get("flutter")), "flutter");
+	if (plat.has("js")) apply(loc.packageJson, (f) => writeJsonVersionKey(f, plat.get("js").versionName), "js");
+	if (plat.has("tauri")) apply(loc.tauri, (f) => writeJsonVersionKey(f, plat.get("tauri").versionName), "tauri");
+	if (plat.has("expo")) apply(loc.expoAppJson, (f) => writeExpoAppJson(f, plat.get("expo")), "expo");
+	return {
+		changed: [...new Set(changed)],
+		skipped
+	};
+}
+//#endregion
+//#region src/version/git.ts
+/**
+* git 只读/写小助手（bump 编排与推断共用）。
+* spawnSync + 超时；失败返回 ok:false 由调用方决定语义，不在此抛。
+*/
+function git(cwd, args) {
+	const r = spawnSync("git", args, {
+		cwd,
+		encoding: "utf8",
+		timeout: 6e4
+	});
+	return {
+		ok: !r.error && r.status === 0,
+		stdout: (r.stdout ?? "").trim(),
+		stderr: (r.stderr ?? "").trim()
+	};
+}
+function isGitRepo(cwd) {
+	return git(cwd, ["rev-parse", "--is-inside-work-tree"]).stdout === "true";
+}
+/** 宽松 semver 解析（可选 v/前缀，如 v4.1.0 / 4.1.0-beta.3 / release-4.1.0 里取 semver 部分） */
+function looseSemver(tag) {
+	const direct = semver.valid(tag);
+	if (direct) return direct;
+	const m = /(\d+\.\d+\.\d+(?:[-+][\w.-]+)?)/.exec(tag);
+	return m ? semver.valid(m[1]) ?? void 0 : void 0;
+}
+/**
+* 最新 semver tag（按版本序取最大，非创建时间——修复补打旧版本 tag 的场景更稳）。
+* 无 tag / 非 git 仓库返回 undefined。
+*/
+function latestSemverTag(cwd) {
+	const r = git(cwd, ["tag", "-l"]);
+	if (!r.ok) return void 0;
+	let best;
+	for (const raw of r.stdout.split("\n")) {
+		const t = raw.trim();
+		if (!t) continue;
+		const v = looseSemver(t);
+		if (!v) continue;
+		if (!best || semver.gt(v, best.v)) best = {
+			raw: t,
+			v
+		};
+	}
+	return best?.raw;
+}
+/** 锚点 tag..HEAD 的完整 commit messages（%B 含 footer，NUL 分隔——body 内建换行安全） */
+function commitsSince(cwd, ref) {
+	const r = git(cwd, [
+		"log",
+		ref ? `${ref}..HEAD` : "HEAD",
+		"--format=%B%x00",
+		"--no-merges"
+	]);
+	if (!r.ok) return [];
+	return r.stdout.split("\0").map((m) => m.trim()).filter(Boolean);
+}
+/** 工作区状态（--porcelain）。注意：不走通用 git()——其 stdout.trim() 会剥掉首行前导空格，
+*  破坏 porcelain 的两列状态位（" M file" → "M file"），此处保留原始行仅去行尾。 */
+function statusShort(cwd) {
+	const r = spawnSync("git", ["status", "--porcelain"], {
+		cwd,
+		encoding: "utf8",
+		timeout: 3e4
+	});
+	if (r.error || r.status !== 0) return [];
+	return (r.stdout ?? "").split("\n").map((l) => l.trimEnd()).filter(Boolean);
+}
+//#endregion
+//#region src/version/infer.ts
+/**
+* 版本推断与决定：锚点 tag..HEAD 的 conventional commits → bump level（纯函数），
+* 版本演进全用 semver（inc / prerelease 剥离），不自写版本数学。
+* 纯函数输入 git log 文本，便于契约测试；git 交互在 git.ts。
+*/
+/** conventional commits → bump level：BREAKING > feat(minor) > fix(patch)；无可识别提交 → patch */
+function inferBumpLevel(messages) {
+	let breaking = 0;
+	let feat = 0;
+	let fix = 0;
+	const parser = new CommitParser();
+	for (const raw of messages) {
+		let c = null;
+		try {
+			c = parser.parse(raw);
+		} catch {
+			continue;
+		}
+		if (!c) continue;
+		const type = (c.type ?? "").toLowerCase();
+		if ((c.notes ?? []).some((n) => /breaking/i.test(n.title ?? ""))) breaking++;
+		else if (type === "feat") feat++;
+		else if (type === "fix") fix++;
+	}
+	const total = messages.length;
+	let level;
+	let reason;
+	if (breaking > 0) {
+		level = "major";
+		reason = `git 推断：${breaking} 个 BREAKING CHANGE → major`;
+	} else if (feat > 0) {
+		level = "minor";
+		reason = `git 推断：feat ${feat} 个（fix ${fix} 个）→ minor`;
+	} else if (fix > 0) {
+		level = "patch";
+		reason = `git 推断：fix ${fix} 个，无 feat/BREAKING → patch`;
+	} else {
+		level = "patch";
+		reason = total === 0 ? "锚点 tag..HEAD 无提交 → patch 兜底" : `git 推断：${total} 个提交无 feat/fix/BREAKING（chore/docs 等）→ patch 兜底`;
+	}
+	return {
+		level,
+		reason,
+		total,
+		breaking,
+		feat,
+		fix
+	};
+}
+/**
+* 从当前版本决定下一版本（纯函数）。
+* - 显式 level：semver.inc；当前是 prerelease 且不带 --pre → 剥离转正式（4.0.0-beta.3 + patch → 4.0.0）
+* - 无 level：用 infer 结果
+* - prerelease level：当前有 pre → 同基线递进（beta.3 → beta.4）；无 pre → 报错（应使用 --pre 进入）
+* - --pre：从 level 出发挂 prerelease（4.0.0 + minor + beta → 4.1.0-beta.1）
+* current 非 semver 时抛错（调用方要求显式指定或先手动规范化）。
+*/
+function decideNextVersion(current, opts, infer) {
+	const base = semver.valid(current);
+	if (!base) throw new Error(`当前版本 "${current}" 不是合法 semver（如前导零 3.0.08）：显式指定目标版本（bump 4.0.0）或先手动规范化`);
+	const level = opts.level;
+	if (level && ![
+		"major",
+		"minor",
+		"patch",
+		"prerelease"
+	].includes(level)) {
+		const explicit = semver.valid(level);
+		if (!explicit) throw new Error(`无法识别的版本/级别 "${level}"`);
+		if (!semver.gt(explicit, base)) throw new Error(`目标版本 ${explicit} 必须大于当前 ${base}`);
+		return {
+			next: explicit,
+			reason: "显式指定"
+		};
+	}
+	const hasPre = semver.prerelease(base) !== null;
+	const preId = opts.pre ?? semver.prerelease(base)?.[0];
+	if (level === "prerelease") {
+		if (hasPre) {
+			const next = preId ? semver.inc(base, "prerelease", preId) : semver.inc(base, "prerelease");
+			if (!next) throw new Error(`prerelease 递进失败：${base}`);
+			return {
+				next,
+				reason: `prerelease 递进（${base} → ${next}）`
+			};
+		}
+		throw new Error(`当前 ${base} 不是 prerelease：用 --pre beta（进入 beta.1）或显式版本（bump 4.1.0-beta.1）`);
+	}
+	const effectiveLevel = level ?? infer?.level ?? "patch";
+	const reasonPrefix = level ? `显式 ${level}` : infer ? infer.reason : "无依据 → patch 兜底";
+	if (opts.pre) {
+		const next = semver.inc(base, `pre${effectiveLevel}`, opts.pre);
+		if (!next) throw new Error(`pre${effectiveLevel} 计算失败：${base}`);
+		return {
+			next,
+			reason: `${reasonPrefix} + prerelease(${opts.pre})`
+		};
+	}
+	const next = semver.inc(base, effectiveLevel);
+	if (!next) throw new Error(`${effectiveLevel} 递进失败：${base}`);
+	return {
+		next,
+		reason: reasonPrefix
+	};
+}
+/** 工程文件写入用的三段数字 versionName（prerelease 只留在 tag，不进商店） */
+function storeVersionName(full) {
+	const v = new semver.SemVer(full);
+	return `${v.major}.${v.minor}.${v.patch}`;
+}
+//#endregion
+//#region src/version/changelog.ts
+/**
+* CHANGELOG 生成：conventional commits 归类渲染（conventional-changelog 风格），
+* 倒序插入项目根 CHANGELOG.md（同版本 section 幂等替换）。
+* 渲染自研（conventional-changelog-core 依赖链对 CLI 太重），解析复用 parser。
+*/
+/** raw commit messages → 结构化条目（feat/fix/BREAKING 之外的 type 也保留，渲染时归类） */
+function toChangelogEntries(messages) {
+	const parser = new CommitParser();
+	const out = [];
+	for (const raw of messages) {
+		let c = null;
+		try {
+			c = parser.parse(raw);
+		} catch {
+			continue;
+		}
+		if (!c || !c.header) continue;
+		const headerType = /^(\w+)(\([^)]*\))?!?:\s/.exec(c.header)?.[1]?.toLowerCase();
+		const type = (c.type ?? headerType)?.toLowerCase();
+		if (!type) continue;
+		const breaking = (c.notes ?? []).some((n) => /breaking/i.test(n.title ?? ""));
+		out.push({
+			type,
+			scope: c.scope || void 0,
+			subject: (c.subject || c.header || "").trim(),
+			breaking,
+			hash: c.hash || void 0
+		});
+	}
+	return out;
+}
+function line(e) {
+	const scope = e.scope ? `(${e.scope})` : "";
+	const hash = e.hash ? ` (${e.hash.slice(0, 7)})` : "";
+	return `- ${e.type}${scope}: ${e.subject}${hash}`;
+}
+/** 渲染单个版本段落（## [4.1.0] - 2026-10-17） */
+function renderChangelogSection(version, date, entries) {
+	const body = [
+		["⚠ BREAKING CHANGES", entries.filter((e) => e.breaking)],
+		["Features", entries.filter((e) => !e.breaking && e.type === "feat")],
+		["Bug Fixes", entries.filter((e) => !e.breaking && e.type === "fix")],
+		["Others", entries.filter((e) => !e.breaking && e.type !== "feat" && e.type !== "fix")]
+	].filter(([, list]) => list.length > 0).map(([title, list]) => `### ${title}\n\n${list.map(line).join("\n")}`).join("\n\n");
+	const heading = `## [${version}] - ${date}`;
+	return body ? `${heading}\n\n${body}` : heading;
+}
+const HEADER_RE = /^#\s*changelog\b/i;
+/**
+* 插入/替换 CHANGELOG.md 的版本段落（幂等）：
+* - 已有 `## [version]` → 整段替换为最新渲染
+* - 否则插到首个 # Changelog 标题之后；无标题/无文件 → 新建带标题
+* 返回写入路径；entries 为空也写入 heading（bump 闭环保持 tag ↔ changelog 对齐）。
+*/
+function upsertChangelog(cwd, version, section) {
+	const filePath = `${cwd}/CHANGELOG.md`;
+	let content = "";
+	if (fs.existsSync(filePath)) content = fs.readFileSync(filePath, "utf8");
+	const lines = content.split("\n");
+	const start = lines.findIndex((l) => l.startsWith(`## [${version}]`));
+	if (start >= 0) {
+		let end = lines.length;
+		for (let i = start + 1; i < lines.length; i++) if (lines[i].startsWith("## ")) {
+			end = i;
+			break;
+		}
+		content = [
+			...lines.slice(0, start),
+			...section.split("\n"),
+			"",
+			...lines.slice(end)
+		].join("\n");
+	} else if (HEADER_RE.test(content)) content = content.replace(/(^#\s*changelog\b[^\n]*\n+)/im, `$1\n${section}\n`);
+	else content = `# Changelog\n\n${section}\n${content ? `\n${content}` : ""}`;
+	fs.writeFileSync(filePath, content.endsWith("\n") ? content : `${content}\n`, "utf8");
+	return filePath;
+}
+//#endregion
+//#region src/version/version-code.ts
+/**
+* versionCode 计算：默认递增 +1；可配公式（如 major*1000000+minor*1000+patch）。
+* 实际写入 = max(公式值, 现值+1)——公式在同 versionName 重发时算出同值，
+* +1 兜底保证单调（AGC 同版本不能重复提交 / Google Play 单调 / App Store 单调）。
+*/
+/** 公式白名单求值（仅支持 + - * ( ) 数字 与 major/minor/patch 变量；不 eval） */
+function evalVersionCodeFormula(formula, v) {
+	const tokens = [];
+	let i = 0;
+	const src = formula.replace(/\s+/g, "");
+	while (i < src.length) {
+		const c = src.charAt(i);
+		if (c === "+" || c === "-" || c === "*" || c === "(" || c === ")") {
+			tokens.push({ op: c });
+			i++;
+		} else if (/\d/.test(c)) {
+			let j = i;
+			while (j < src.length && /\d/.test(src.charAt(j))) j++;
+			tokens.push({ n: Number(src.slice(i, j)) });
+			i = j;
+		} else {
+			const word = /^(major|minor|patch)/.exec(src.slice(i));
+			if (!word) return void 0;
+			const name = word[1];
+			tokens.push({ n: v[name] });
+			i += name.length;
+		}
+	}
+	if (tokens.length === 0) return void 0;
+	let pos = 0;
+	const peek = () => tokens[pos];
+	function factor() {
+		const t = peek();
+		if (!t) return void 0;
+		if ("n" in t) {
+			pos++;
+			return t.n;
+		}
+		if (t.op === "(") {
+			pos++;
+			const inner = expr();
+			const close = peek();
+			if (inner === void 0 || !close || !("op" in close) || close.op !== ")") return void 0;
+			pos++;
+			return inner;
+		}
+		if (t.op === "-") {
+			pos++;
+			const f = factor();
+			return f === void 0 ? void 0 : -f;
+		}
+	}
+	function term() {
+		let left = factor();
+		for (;;) {
+			const t = peek();
+			if (left === void 0 || !t || !("op" in t) || t.op !== "*") return left;
+			pos++;
+			const right = factor();
+			if (right === void 0) return void 0;
+			left = left * right;
+		}
+	}
+	function expr() {
+		let left = term();
+		for (;;) {
+			const t = peek();
+			if (left === void 0 || !t || !("op" in t) || t.op !== "+" && t.op !== "-") return left;
+			pos++;
+			const right = term();
+			if (right === void 0) return void 0;
+			left = t.op === "+" ? left + right : left - right;
+		}
+	}
+	const result = expr();
+	if (result === void 0 || pos !== tokens.length) return void 0;
+	return Number.isFinite(result) && Number.isInteger(result) && result > 0 ? result : void 0;
+}
+/**
+* 下一 versionCode：max(公式值, 现值+1)。
+* - 无现值（首接工程无该字段）：公式值，否则 1
+* - 有现值：至少现值+1（吞 3052/4000000 等任意历史值，首次 bump 即归一）
+*/
+function nextVersionCode(current, formulaValue) {
+	if (current === void 0) return formulaValue ?? 1;
+	return Math.max(formulaValue ?? Number.NEGATIVE_INFINITY, current + 1);
+}
+//#endregion
+//#region src/version/bump.ts
+/** 多端 versionName 的基线：取 semver 合法值中最大；全部非法 → null（需显式指定） */
+function baselineVersion(currents) {
+	let best = null;
+	for (const c of currents) {
+		const v = semver.valid(c.versionName ?? "");
+		if (v && (!best || semver.gt(v, best))) best = v;
+	}
+	return best;
+}
+/** 并发 bump 互斥锁（O_EXCL 原子创建；>10 分钟视为陈旧自动接管） */
+function acquireBumpLock(cwd) {
+	const lockPath = path.join(cwd, ".git", "applift-bump.lock");
+	try {
+		const fd = fs.openSync(lockPath, "wx");
+		fs.closeSync(fd);
+	} catch (e) {
+		if (e.code !== "EEXIST") throw e;
+		try {
+			if (Date.now() - fs.statSync(lockPath).mtimeMs > 6e5) fs.writeFileSync(lockPath, String(process.pid));
+			else return /* @__PURE__ */ new Error(`另一 bump 进程正在运行（${lockPath}）——并发 bump 会产出内容错位的提交，稍后重试或确认无并发后删除锁文件`);
+		} catch {
+			return /* @__PURE__ */ new Error(`无法获取 bump 锁（${lockPath}）`);
+		}
+	}
+	return () => {
+		try {
+			fs.unlinkSync(lockPath);
+		} catch {}
+	};
+}
+/** HEAD 提交是否是我们打的 release commit（失败重跑识别用） */
+function lastCommitIsRelease(cwd) {
+	return git(cwd, [
+		"log",
+		"-1",
+		"--format=%s"
+	]).stdout.startsWith("chore(release): ");
+}
+function planBump(opts) {
+	let anchorTag;
+	let commits = [];
+	let infer;
+	if (isGitRepo(opts.cwd)) {
+		anchorTag = latestSemverTag(opts.cwd);
+		if (anchorTag) {
+			commits = commitsSince(opts.cwd, anchorTag);
+			if (commits.length > 0) infer = inferBumpLevel(commits);
+		}
+	}
+	const currents = readProjectVersions(opts.cwd, opts.framework).filter((c) => (c.versionName || c.versionCode) && !opts.platforms || opts.platforms?.includes(c.platform));
+	const anchorVersion = anchorTag ? looseSemver(anchorTag) ?? void 0 : void 0;
+	const base = (anchorVersion ? semver.prerelease(anchorVersion) !== null : false) ? anchorVersion : baselineVersion([...currents, ...anchorVersion ? [{
+		platform: "__tag__",
+		versionName: anchorVersion
+	}] : []]);
+	if (!base) {
+		if (!opts.level || !semver.valid(opts.level)) throw new Error(`各端均无可解析的 semver versionName（${currents.map((c) => `${c.platform}=${c.versionName ?? "?"}`).join(" ")}）：显式指定目标版本，如 applift version bump 4.0.0`);
+	}
+	const decided = decideNextVersion(base ?? "0.0.0", {
+		level: opts.level,
+		pre: opts.pre
+	}, infer);
+	if (!anchorTag && !opts.level) decided.reason = "无发版锚点 tag（首次 bump）→ patch 兜底；打第一个 tag 后激活 git 推断";
+	const suspectRerun = !!anchorTag && lastCommitIsRelease(opts.cwd) && commits.every((c) => c.startsWith("chore(release): "));
+	if (suspectRerun) decided.reason += "；⚠ 锚点后无新业务提交且 HEAD 已是 release commit——疑似失败重跑，建议 --no-bump 复用已 bump 版本";
+	const formulaCfg = opts.versionCode && opts.versionCode !== "increment" ? opts.versionCode : void 0;
+	if (opts.platforms && opts.platforms.length > 0) {
+		const known = new Set(currents.map((c) => c.platform));
+		const unknown = opts.platforms.filter((p) => !known.has(p));
+		if (unknown.length > 0) throw new Error(`未知平台: ${unknown.join(", ")}（可用: ${[...known].join("/") || "无"}）`);
+	}
+	const writes = [];
+	let formulaNote = "递增 +1";
+	let formulaApplied = false;
+	const resetCodes = [];
+	for (const c of currents) {
+		if (opts.platforms && !opts.platforms.includes(c.platform)) continue;
+		const cur = c.versionCode !== void 0 && /^\d+$/.test(c.versionCode) ? Number(c.versionCode) : void 0;
+		if (c.versionCode !== void 0 && cur === void 0) resetCodes.push(`${c.platform}=${c.versionCode}`);
+		let formulaValue;
+		if (formulaCfg && (!formulaCfg.platforms || formulaCfg.platforms.includes(c.platform))) {
+			const v = new semver.SemVer(decided.next);
+			formulaValue = evalVersionCodeFormula(formulaCfg.formula, {
+				major: v.major,
+				minor: v.minor,
+				patch: v.patch
+			});
+			if (formulaValue === void 0) throw new Error(`versionCode 公式无法求值：${formulaCfg.formula}（仅支持 + - * ( ) 与 major/minor/patch）`);
+			formulaNote = `max(公式 ${formulaCfg.formula}, 现值+1)`;
+			formulaApplied = true;
+		}
+		const code = nextVersionCode(cur, formulaValue);
+		if (code > 21e8) throw new Error(`versionCode ${code} 超过商店上限 2100000000（${c.platform}）：检查公式或手动规范化`);
+		writes.push({
+			platform: c.platform,
+			versionName: storeVersionName(decided.next),
+			versionCode: code
+		});
+	}
+	if (formulaCfg && !formulaApplied && writes.length > 0) formulaNote += `；⚠ 公式 ${formulaCfg.formula} 未命中任何端${formulaCfg.platforms ? `（platforms: ${formulaCfg.platforms.join("/")}，可用端: ${writes.map((w) => w.platform).join("/")})` : ""}——全部端走 +1 兜底`;
+	if (resetCodes.length > 0) formulaNote += `；⚠ 非数字 versionCode 已从 1 重新起号（${resetCodes.join(", ")}）——商店单调性可能拒绝，建议配置 version.versionCode 公式或手动规范化`;
+	return {
+		anchorTag,
+		currentVersions: currents,
+		writes,
+		base: base ?? decided.next,
+		nextVersion: decided.next,
+		storeName: storeVersionName(decided.next),
+		reason: decided.reason,
+		infer,
+		commits,
+		suspectRerun,
+		versionCodeNote: formulaNote
+	};
+}
+function applyBump(cwd, plan, framework, opts) {
+	const lock = isGitRepo(cwd) ? acquireBumpLock(cwd) : void 0;
+	if (lock instanceof Error) throw lock;
+	try {
+		const { changed, skipped } = writeProjectVersions(cwd, framework, plan.writes);
+		if (plan.writes.length === 0) throw new Error(`没有可写入的端（读取期被丢弃或 --platform 过滤为空）——不生成 release commit/tag；catalog 引用形态需先改造为字面量`);
+		if (plan.writes.length > 0 && changed.length === 0 && skipped.length > 0) throw new Error(`所有端的版本写入均被跳过：${skipped.map((s) => `${s.platform}(${s.reason})`).join("；")}——不生成 release commit/tag`);
+		if (plan.writes.length > 0 && changed.length === 0 && skipped.length === 0) {}
+		const warnings = [];
+		if (opts.commit && isGitRepo(cwd)) {
+			const staging = new Set([...changed, `${cwd}/CHANGELOG.md`].map((f) => path.relative(cwd, f) || f));
+			const dirty = statusShort(cwd).filter((line) => {
+				const f = line.slice(3).split(" -> ").pop().trim().replace(/\/$/, "");
+				return ![...staging].some((s) => s === f || s.startsWith(`${f}/`));
+			});
+			if (dirty.length > 0) throw new Error(`工作区有计划外未提交变更，拒绝代 commit（防混入 release 提交）：\n${dirty.join("\n")}\n先提交它们或移出工作区（.gitignore），或用 --no-commit`);
+		}
+		const entries = toChangelogEntries(plan.commits);
+		const changelogFile = upsertChangelog(cwd, plan.nextVersion, renderChangelogSection(plan.nextVersion, (/* @__PURE__ */ new Date()).toISOString().slice(0, 10), entries));
+		const changedFiles = [.../* @__PURE__ */ new Set([...changed, changelogFile])];
+		let committed = false;
+		let tagged = false;
+		if (opts.commit || opts.tag) {
+			if (!isGitRepo(cwd)) warnings.push("非 git 仓库：跳过 commit/tag");
+			else {
+				const files = changedFiles.map((f) => path.relative(cwd, f) || f);
+				if (opts.commit) {
+					const add = git(cwd, [
+						"add",
+						"--",
+						...files
+					]);
+					const commit = add.ok ? git(cwd, [
+						"commit",
+						"-m",
+						`chore(release): ${plan.nextVersion}`,
+						"--",
+						...files
+					]) : add;
+					if (commit.ok) committed = true;
+					else warnings.push(`git commit 失败：${commit.stderr || commit.stdout || "未知错误"}`);
+				}
+				if (opts.tag && (!opts.commit || committed)) {
+					const tag = git(cwd, ["tag", `v${plan.nextVersion}`]);
+					if (tag.ok) tagged = true;
+					else warnings.push(`git tag 失败：${tag.stderr || tag.stdout || "未知错误"}`);
+				}
+			}
+		}
+		return {
+			changedFiles,
+			skipped,
+			changelogFile,
+			committed,
+			tagged,
+			warnings
+		};
+	} finally {
+		lock?.();
+	}
+}
+//#endregion
+//#region src/version/artifact.ts
 /**
 * 产物版本读取（只读不写——版本号变更属开发提交，发版工具只负责读版本防回退）。
 * .hap/.app：pack.info 是纯 JSON，零依赖直接读；
@@ -4057,12 +4995,17 @@ function fromPackInfo(artifactPath) {
 		if (v) return v;
 	} catch {}
 }
+/** 真实鸿蒙 pack.info schema（qy-driver 实测样本）：summary.app.version.{name,code,build}；
+*  顶层 versionName/versionCode 为历史兼容形态。 */
 function parsePackInfo(text, source) {
 	try {
 		const info = JSON.parse(text);
-		if (info.versionName || info.versionCode !== void 0) return {
-			versionName: info.versionName,
-			versionCode: String(info.versionCode ?? ""),
+		const nested = info.summary?.app?.version;
+		const versionName = nested?.name ?? info.versionName;
+		const versionCode = nested?.code ?? info.versionCode;
+		if (versionName || versionCode !== void 0) return {
+			versionName,
+			versionCode: String(versionCode ?? ""),
 			source
 		};
 	} catch {}
@@ -4096,4 +5039,4 @@ function fromAapt(artifactPath) {
 	}
 }
 //#endregion
-export { APPLIFT_HOME, AgcHarmonyChannel, AscChannel, BetaConfigSchema, CREDENTIALS_PATH, CredentialsFileSchema, CredentialsProfileSchema, DefaultChannelRegistry, GLOBAL_CONFIG_PATH, GlobalConfigSchema, GooglePlayChannel, HISTORY_PATH, HonorChannel, HuaweiAndroidChannel, OppoChannel, PROJECTS_MAP_PATH, PgyerChannel, PluginHost, ProjectConfigSchema, StoreConfigSchema, StoresSchema, VivoChannel, WAIT_BEFORE_SUBMIT_MS, XiaomiChannel, YybChannel, appendEntry, assertListingFiles, defineConfig, detectBundleIds, detectFramework, electronAdapter, findArtifacts, findUp, flutterAdapter, formPost, getAgcToken, getHarmonyAppId, hmacSign, humanizeError, loadCredentials, loadCredentialsLayered, loadGlobalConfig, loadListingFile, loadProjectConfig, loadProjectProfileMap, md5File, md5String, nativeAndroidAdapter, nativeHarmonyAdapter, nativeIosAdapter, projectCredentialsPath, readArtifactVersion, readEntries, registry, resolveListing, resolvePlugins, resolveProfile, resolveProfileFor, rnAdapter, runStage, runSubmit, saveCredentials, saveProjectProfileMap, setProjectProfile, sha256File, sortedQueryString, tauriAdapter, tsMillis, tsSeconds };
+export { APPLIFT_HOME, AgcHarmonyChannel, AscChannel, BetaConfigSchema, CREDENTIALS_PATH, CredentialsFileSchema, CredentialsProfileSchema, DefaultChannelRegistry, GLOBAL_CONFIG_PATH, GlobalConfigSchema, GooglePlayChannel, HISTORY_PATH, HonorChannel, HuaweiAndroidChannel, OppoChannel, PROJECTS_MAP_PATH, PgyerChannel, PluginHost, ProjectConfigSchema, ReleaseConfigSchema, StoreConfigSchema, StoresSchema, VersionCodeConfigSchema, VersionConfigSchema, VivoChannel, WAIT_BEFORE_SUBMIT_MS, XiaomiChannel, YybChannel, appendEntry, applyBump, assertListingFiles, commitsSince, decideNextVersion, defineConfig, detectBundleIds, detectFramework, electronAdapter, evalVersionCodeFormula, findArtifacts, findUp, flutterAdapter, formPost, getAgcToken, getHarmonyAppId, git, hmacSign, humanizeError, inferBumpLevel, isGitRepo, latestSemverTag, loadCredentials, loadCredentialsLayered, loadGlobalConfig, loadListingFile, loadProjectConfig, loadProjectProfileMap, looseSemver, md5File, md5String, nativeAndroidAdapter, nativeHarmonyAdapter, nativeIosAdapter, nextVersionCode, planBump, projectCredentialsPath, readArtifactVersion, readEntries, readProjectVersions, registry, renderChangelogSection, resolveListing, resolvePlugins, resolveProfile, resolveProfileFor, rnAdapter, runStage, runSubmit, saveCredentials, saveProjectProfileMap, setProjectProfile, sha256File, sortedQueryString, statusShort, storeVersionName, tauriAdapter, toChangelogEntries, tsMillis, tsSeconds, upsertChangelog, writeProjectVersions };