@applift/core 0.4.0 → 0.6.0

package/dist/index.mjs

@@ -9,6 +9,8 @@ import { createJiti } from "jiti";
 import crypto, { X509Certificate, constants, createHash, createHmac, createSign, publicEncrypt } from "node:crypto";
 import { Readable } from "node:stream";
 import { spawnSync } from "node:child_process";
+import semver from "semver";
+import { CommitParser } from "conventional-commits-parser";
 //#region src/registry.ts
 var DefaultChannelRegistry = class {
 	channels = /* @__PURE__ */ new Map();
@@ -39,15 +41,23 @@ profiles: z.record(z.string(), CredentialsProfileSchema) });
 /** 单渠道配置（appId、pkgName 等渠道侧键） */
 const StoreConfigSchema = z.record(z.string(), z.string());
 /**
-* stores 三种等价写法，统一规范化为 record：
+* stores 等价写法，统一规范化为 record：
 * ① 对象：{ huawei: { appId: 'x' } }（原有写法，原样保留）
 * ② 数组：['oppo', 'vivo'] → { oppo: {}, vivo: {} }（无配置渠道）
 * ③ 字符串值：{ huawei: '10xxx' } → { huawei: { appId: '10xxx' } }（appId 简写）
+* ④ 混排数组（README 首例）：['huawei', { yyb: 'appId值' }] → 元素对象须单键 { 渠道: 值 }，
+*    值走 ③ 同款 appId 简写归一
 */
-const StoresSchema = z.union([z.record(z.string(), z.union([StoreConfigSchema, z.string()])), z.array(z.string())]).transform((stores) => {
-	if (Array.isArray(stores)) return Object.fromEntries(stores.map((id) => [id, {}]));
+const storesNormalize = (stores) => {
+	if (Array.isArray(stores)) return Object.fromEntries(stores.map((el) => typeof el === "string" ? [el, {}] : (() => {
+		const entries = Object.entries(el);
+		if (entries.length !== 1) throw new Error(`stores 数组内的对象元素必须形如 { 渠道id: appId简写 }（单键），收到: ${JSON.stringify(el)}`);
+		const [id, cfg] = entries[0];
+		return [id, typeof cfg === "string" ? { appId: cfg } : cfg];
+	})()));
 	return Object.fromEntries(Object.entries(stores).map(([id, cfg]) => [id, typeof cfg === "string" ? { appId: cfg } : cfg]));
-}).default({});
+};
+const StoresSchema = z.union([z.record(z.string(), z.union([StoreConfigSchema, z.string()])), z.array(z.union([z.string(), StoreConfigSchema]))]).transform(storesNormalize).default({});
 /** 项目级配置（applift.config.ts 的形状）；beta 段见上方 BetaConfigSchema */
 /**
 * 内测分发配置（applift beta 无平台参数时并行发布的渠道开关）：
@@ -56,6 +66,8 @@ const StoresSchema = z.union([z.record(z.string(), z.union([StoreConfigSchema, z
 * - testflight: App Store Connect 上传（ipa 进 TestFlight）
 */
 const BetaConfigSchema = z.object({
+	/** 自动 version：true(走推断)| major/minor/patch/prerelease | <semver>；CLI --bump/--no-bump 覆盖 */
+	bump: z.union([z.boolean(), z.string()]).optional(),
 	pgyer: z.object({
 		platforms: z.array(z.enum([
 			"android",
@@ -74,22 +86,35 @@ const BetaConfigSchema = z.object({
 	}).optional(),
 	testflight: z.object({ note: z.string().optional() }).optional()
 });
+/** versionCode 策略："increment"(默认 +1) | 公式（可限定平台） */
+const VersionCodeConfigSchema = z.union([z.literal("increment"), z.object({
+	/** 白名单表达式：major/minor/patch 与 + - * ( )，如 "major*1000000+minor*1000+patch" */
+	formula: z.string(),
+	/** 仅限平台（缺省全部）；实际写入 = max(公式值, 现值+1) */
+	platforms: z.array(z.string()).optional()
+})]);
+const VersionConfigSchema = z.object({ versionCode: VersionCodeConfigSchema.default("increment") });
+/** 正式发版段的自动 version 开关（语义同 beta.bump） */
+const ReleaseConfigSchema = z.object({ bump: z.union([z.boolean(), z.string()]).optional() });
 const ProjectConfigSchema = z.object({
 	/** 项目显示名 */
 	name: z.string().optional(),
 	/** 团队默认凭据 profile（个人用 applift use / --profile 覆盖），缺省 default */
 	profile: z.string().default("default"),
 	android: z.object({
-		pkgName: z.string(),
+		/** 缺省经 detectBundleIds 从工程文件自动推导（README 首例即只有 stores 的最小配置） */
+		pkgName: z.string().optional(),
 		/** 渠道 → 渠道侧配置（appId 等）；stores 里列出的渠道才发 */
 		stores: StoresSchema
 	}).optional(),
 	harmony: z.object({
-		bundleName: z.string(),
+		/** 缺省自动推导（AppScope/app.json5） */
+		bundleName: z.string().optional(),
 		appId: z.string().optional()
 	}).optional(),
 	ios: z.object({
-		scheme: z.string(),
+		/** 缺省自动推导（工程 scheme 探测） */
+		scheme: z.string().optional(),
 		workspace: z.string().optional(),
 		/** App Store Connect 按 bundleId 定位 App（asc 渠道 submit 用） */
 		bundleId: z.string().optional()
@@ -110,6 +135,10 @@ const ProjectConfigSchema = z.object({
 		macos: z.array(z.string()).optional(),
 		linux: z.array(z.string()).optional()
 	}).catchall(z.array(z.string()).optional()).optional(),
+	/** 版本管理（versionCode 策略等） */
+	version: VersionConfigSchema.optional(),
+	/** 正式发版自动 version 开关 */
+	release: ReleaseConfigSchema.optional(),
 	/** 内测分发（beta 无平台参数时的多渠道并行配置） */
 	beta: BetaConfigSchema.optional()
 });
@@ -190,14 +219,16 @@ function resolveProfile(creds, profile, knownKeys) {
 	for (const [envName, value] of Object.entries(process.env)) if (envName.startsWith("APPLIFT_") && value) merged[envName.slice(8)] = value;
 	return merged;
 }
-/** 全局配置装载（缺失/损坏降级默认值并警告，不阻断） */
+/** 全局配置装载（缺失/损坏降级默认值；警告经返回值交给调用方，不阻断） */
 function loadGlobalConfig(filePath = GLOBAL_CONFIG_PATH) {
-	if (!fs.existsSync(filePath)) return GlobalConfigSchema.parse({});
+	if (!fs.existsSync(filePath)) return { config: GlobalConfigSchema.parse({}) };
 	try {
-		return GlobalConfigSchema.parse(parse(fs.readFileSync(filePath, "utf8")));
+		return { config: GlobalConfigSchema.parse(parse(fs.readFileSync(filePath, "utf8"))) };
 	} catch (e) {
-		process.stderr.write?.(`[applift] 全局配置解析失败，使用默认值: ${e.message}\n`);
-		return GlobalConfigSchema.parse({});
+		return {
+			config: GlobalConfigSchema.parse({}),
+			warning: `全局配置解析失败，使用默认值: ${e.message}`
+		};
 	}
 }
 /** 写凭据（目录自动创建，文件强制 0600） */
@@ -248,8 +279,13 @@ async function loadProjectConfig(cwd) {
 		packageJson: false,
 		defaults: ProjectConfigSchema.parse({})
 	});
+	const parsed = ProjectConfigSchema.safeParse(result.config ?? {});
+	if (!parsed.success) {
+		const details = parsed.error.issues.map((i) => `${i.path.join(".") || "(根)"}: ${i.message}`).join("；");
+		throw new Error(`applift.config.ts 字段校验失败 → ${details}`);
+	}
 	return {
-		config: ProjectConfigSchema.parse(result.config ?? {}),
+		config: parsed.data,
 		raw: result.config ?? {},
 		cwd: result.cwd ?? cwd
 	};
@@ -352,8 +388,19 @@ async function formPost(url, params, { timeout = 6e4 } = {}) {
 	}
 }
 //#endregion
+//#region src/channels/shared/file-blob.ts
+/**
+* 惰性文件 Blob：FormData multipart 上传的文件部件。
+* 优先 fs.openAsBlob（Node ≥19.8，按需分片读，零整读内存）；
+* 能力检测不存在时回退整读（旧运行时兜底）。
+*/
+async function fileBlob(p) {
+	if (typeof fs.openAsBlob === "function") return fs.openAsBlob(p);
+	return new Blob([await fs.promises.readFile(p)]);
+}
+//#endregion
 //#region src/util.ts
-/** core 内部共用小工具（不进公共 API） */
+/** core 内部共用小工具（sleep/formatSize 仅内部使用；sha256File 经 index 导出，CLI 历史指纹用） */
 const sleep = (ms) => new Promise((res) => setTimeout(res, ms));
 /** 分块计算文件 SHA256（产物可达上百 MB，8MB 分块避免整读内存，同 sign.ts md5File 先例） */
 function sha256File(filePath) {
@@ -395,7 +442,8 @@ async function pgyerPost(host, apiPath, form) {
 	const res = await fetch(`https://${host}${apiPath}`, {
 		method: "POST",
 		headers: { "Content-Type": "application/x-www-form-urlencoded" },
-		body
+		body,
+		signal: AbortSignal.timeout(3e4)
 	});
 	const text = await res.text();
 	try {
@@ -413,6 +461,8 @@ var PgyerChannel = class {
 		scheduled: false,
 		status: false
 	};
+	/** 平台错误码 → 人话（1247：源码注释已证 = buildKey 尚未就绪/COS 仍在入库） */
+	errorHints = { "1247": "buildKey 尚未就绪（COS 上传仍在入库），属处理中状态，稍候即可" };
 	async plan(ctx) {
 		return {
 			channel: this.id,
@@ -469,7 +519,7 @@ var PgyerChannel = class {
 		form.append("x-cos-security-token", params["x-cos-security-token"]);
 		form.append("key", params.key);
 		form.append("x-cos-meta-file-name", path.basename(ctx.artifactPath));
-		form.append("file", new Blob([fs.readFileSync(ctx.artifactPath)]), path.basename(ctx.artifactPath));
+		form.append("file", await fileBlob(ctx.artifactPath), path.basename(ctx.artifactPath));
 		const upRes = await fetch(endpoint, {
 			method: "POST",
 			body: form,
@@ -952,6 +1002,11 @@ var XiaomiChannel = class {
 		scheduled: false,
 		status: true
 	};
+	/** 平台错误码 → 人话（result 码：依据为本仓测试已固化的真实失败路径文案） */
+	errorHints = {
+		"401": "签名无效或账号无该包名权限（检查 MI_CLIENT_SECRET 与 /dev/query 权限）",
+		"1005": "push SIG 校验失败（检查证书公钥与密码是否匹配）"
+	};
 	async plan(_ctx) {
 		return {
 			channel: this.id,
@@ -1033,8 +1088,8 @@ var XiaomiChannel = class {
 		const form = new FormData();
 		form.append("RequestData", requestJson);
 		form.append("SIG", sig);
-		form.append("apk", new Blob([fs.readFileSync(ctx.artifactPath)]), fileName);
-		form.append("icon", new Blob([fs.readFileSync(iconPath)]), path.basename(iconPath));
+		form.append("apk", await fileBlob(ctx.artifactPath), fileName);
+		form.append("icon", await fileBlob(iconPath), path.basename(iconPath));
 		const res = await fetch(`${MI_API_BASE}/dev/push`, {
 			method: "POST",
 			body: form,
@@ -1357,7 +1412,7 @@ var OppoChannel = class {
 		const form = new FormData();
 		form.append("type", "apk");
 		form.append("sign", sign);
-		form.append("file", new Blob([fs.readFileSync(ctx.artifactPath)]), fileName);
+		form.append("file", await fileBlob(ctx.artifactPath), fileName);
 		const upRes = await fetch(uploadUrl, {
 			method: "POST",
 			body: form,
@@ -1652,7 +1707,7 @@ var VivoChannel = class {
 		params.sign = hmacSign(accessSecret, params);
 		const form = new FormData();
 		for (const [k, v] of Object.entries(params)) form.append(k, v);
-		form.append("file", new Blob([fs.readFileSync(ctx.artifactPath)]), fileName);
+		form.append("file", await fileBlob(ctx.artifactPath), fileName);
 		const upRes = await fetch(API_BASE$2, {
 			method: "POST",
 			body: form,
@@ -1907,7 +1962,7 @@ var HonorChannel = class {
 			message: `上传 ${fileName}（${formatSize(fileSize)}）`
 		});
 		const form = new FormData();
-		form.append("file", new Blob([fs.readFileSync(ctx.artifactPath)]), fileName);
+		form.append("file", await fileBlob(ctx.artifactPath), fileName);
 		const upRes = await fetch(uploadUrl, {
 			method: "POST",
 			headers: { Authorization: `Bearer ${token}` },
@@ -2099,6 +2154,8 @@ var YybChannel = class {
 		scheduled: true,
 		status: true
 	};
+	/** 平台错误码 → 人话（ret 码：依据为本仓测试已固化的真实失败路径） */
+	errorHints = { "10010": "应用不存在（检查 YYB_APP_ID 与 user_id 是否匹配该应用）" };
 	/** stage 产物暂存（serial_number + md5），submit 按 appId 取回 */
 	staged = /* @__PURE__ */ new Map();
 	required(ctx, key, where) {
@@ -2301,7 +2358,10 @@ const COMPILE_POLL_MS = 15e3;
 const APP_TEST_BASE = "https://connect-api.cloud.huawei.com/api/app-test/v1";
 /** AGC JSON API 封装：判 ret.code !== 0 抛错 —— v1 agc.mjs agcJson 原样 */
 async function agcJson(url, init, context) {
-	const res = await fetch(url, init);
+	const res = await fetch(url, {
+		...init,
+		signal: init.signal ?? AbortSignal.timeout(6e4)
+	});
 	let json;
 	try {
 		json = await res.json();
@@ -2359,7 +2419,7 @@ var AgcHarmonyChannel = class {
 		"1003": "client_id/client_secret 无效（AGC → 项目设置 → 常规 → API Client 重新获取）",
 		"204144702": "签名/证书不匹配：检查签名证书指纹（SHA256）与 AGC 后台登记是否一致",
 		"204144677": "bundleName 与应用不匹配：确认 appId 对应的应用包名",
-		"204144692": "应用未登记隐私政策协议：AGC 控制台「更多服务 → 协议服务」新建隐私政策并提交（一次性前置，API 无法代办）"
+		"204144692": "提审前置校验失败（按 msg 判断）：privacyPolicy → 控制台「更多服务→协议服务」登记隐私政策；count of harmony test in audit → 在审测试版本超限，先停止/删除在审的测试版本再提"
 	};
 	async authHeaders(ctx) {
 		const clientId = required$1(ctx, "AGC_CLIENT_ID");
@@ -2688,6 +2748,7 @@ var AgcHarmonyChannel = class {
 			const groupName = ctx.target.testGroup?.trim();
 			if (groupName) {
 				const groupId = await this.resolveTestGroupId(ctx, appId, groupName, headers);
+				const now = Date.now();
 				await agcJson(`${BASE}/publish/v2/test/app/version?appId=${encodeURIComponent(appId)}`, {
 					method: "PUT",
 					headers: {
@@ -2697,10 +2758,14 @@ var AgcHarmonyChannel = class {
 					body: JSON.stringify({
 						versionId,
 						pkgId,
-						openTestInfo: { testTaskInfo: { groupInfos: [{
-							groupId,
-							groupName
-						}] } }
+						openTestInfo: {
+							startTime: now,
+							endTime: now + 2592e6,
+							testTaskInfo: { groupInfos: [{
+								groupId,
+								groupName
+							}] }
+						}
 					})
 				}, "绑定测试群组");
 				ctx.emit({
@@ -2756,10 +2821,13 @@ var AgcHarmonyChannel = class {
 				current: String(current),
 				pageSize: "50"
 			});
-			const res = await fetch(`${APP_TEST_BASE}/test-group/list?${qs}`, { headers: {
-				...headers,
-				appId
-			} });
+			const res = await fetch(`${APP_TEST_BASE}/test-group/list?${qs}`, {
+				headers: {
+					...headers,
+					appId
+				},
+				signal: AbortSignal.timeout(6e4)
+			});
 			if (!res.ok) throw new Error(`AGC 查询测试群组失败 HTTP ${res.status}`);
 			const json = await res.json();
 			if (Number(json.rtnCode) !== 0) throw new Error(`AGC 查询测试群组失败: rtnCode=${json.rtnCode ?? "?"}${json.rtnDesc ? ` ${json.rtnDesc}` : ""}`);
@@ -3224,6 +3292,8 @@ var GooglePlayChannel = class {
 		scheduled: false,
 		status: true
 	};
+	/** 平台错误码 → 人话（HTTP 状态：依据为本仓测试已固化的失败路径） */
+	errorHints = { "403": "权限不足（检查 Service Account 是否已关联 Play Console 且有发布权限）" };
 	async plan(_ctx) {
 		return {
 			channel: this.id,
@@ -3240,12 +3310,40 @@ var GooglePlayChannel = class {
 			ref: await this.uploadAndAssign(ctx, "internal", void 0)
 		};
 	}
-	async submit(ctx) {
+	async submit(ctx, stagedRef) {
+		const reusedVc = stagedRef?.split(":")[1];
+		if (reusedVc !== void 0 && reusedVc !== "") return {
+			ok: true,
+			ref: await this.assignExisting(ctx, "production", Number(reusedVc))
+		};
 		return {
 			ok: true,
 			ref: await this.uploadAndAssign(ctx, "production", ctx.updateDescription)
 		};
 	}
+	/** 复用 stage 已上传的 versionCode：开新 edit（仍需 auth）→ 部署 production → commit，跳过上传 */
+	async assignExisting(ctx, track, versionCode) {
+		const pkgName = this.requirePkgName(ctx);
+		const token = await getAccessToken(ctx.credentials);
+		ctx.emit({
+			type: "phase",
+			phase: "auth",
+			message: "OAuth2 token 获取成功"
+		});
+		const edit = await apiFetch(`${API_BASE}/${pkgName}/edits`, token, {
+			method: "POST",
+			body: "{}"
+		}, "创建 edit");
+		if (!edit.id) throw new Error(`Google Play 创建 edit 响应缺少 id: ${JSON.stringify(edit).slice(0, 300)}`);
+		const editId = edit.id;
+		ctx.emit({
+			type: "phase",
+			phase: "upload",
+			message: `复用 stage 上传的 versionCode ${versionCode}（跳过重复上传）`
+		});
+		await this.deployAndCommit(ctx, pkgName, token, editId, track, versionCode, ctx.updateDescription);
+		return `${editId}:${versionCode}`;
+	}
 	/** 上传 + 部署到指定轨道 + commit，返回 `editId:versionCode` */
 	async uploadAndAssign(ctx, track, releaseNotes) {
 		const pkgName = this.requirePkgName(ctx);
@@ -3284,6 +3382,15 @@ var GooglePlayChannel = class {
 			type: "progress",
 			detail: `上传成功（versionCode: ${versionCode}）`
 		});
+		return this.deployAndCommit(ctx, pkgName, token, editId, track, versionCode, releaseNotes);
+	}
+	/**
+	* 部署 versionCode 到指定轨道并 commit：
+	* 先 GET 轨道现有 releases 再合并 PUT——目标 release（同 status=completed 配置）追加新 versionCode，
+	* 其余 releases 原样保留（status/userFraction 不变），避免整轨覆盖把旧版本从轨道剔除；
+	* :commit 冒号语法（对拍 apkgo googleplay.go 权威；对 production 含提交审核语义，internal 即生效）
+	*/
+	async deployAndCommit(ctx, pkgName, token, editId, track, versionCode, releaseNotes) {
 		const releases = [...(await apiFetch(`${API_BASE}/${pkgName}/edits/${editId}/tracks/${track}`, token, { method: "GET" }, `读取 ${track} 轨道现有 releases`)).releases ?? []];
 		const release = {
 			versionCodes: [versionCode],
@@ -3351,6 +3458,11 @@ var GooglePlayChannel = class {
 };
 //#endregion
 //#region src/pipeline.ts
+/**
+* 发布编排引擎：构建计划 → 确认协议 → 并发执行 → 汇总。
+* headless：确认通过注入的 confirm 回调完成（CLI 用 clack/弹窗），core 不碰终端。
+* 插件：可选 PluginHost，在 plan/stage/submit 生命周期触发钩子（可拦截可修改）。
+*/
 async function runLimited(items, limit, fn) {
 	const queue = [...items];
 	const workers = Array.from({ length: Math.min(limit, items.length) }, async () => {
@@ -3474,12 +3586,13 @@ async function runSubmit(input, options) {
 						label: channel.label,
 						ok: false,
 						submitError: "被插件跳过",
-						plan: planFor(plans, basePlans, channel.id)
+						plan: planFor(plans, basePlans, channel.id, ctx.artifactPath)
 					});
 					return;
 				}
 				effectiveCtx = r.value;
 			}
+			let stagedRef;
 			if (!options.skipStage && channel.capabilities.stage) {
 				const stageResult = await channel.stage(effectiveCtx);
 				if (!stageResult.ok) {
@@ -3488,7 +3601,7 @@ async function runSubmit(input, options) {
 						label: channel.label,
 						ok: false,
 						stageError: stageResult.error,
-						plan: planFor(plans, basePlans, channel.id)
+						plan: planFor(plans, basePlans, channel.id, ctx.artifactPath)
 					});
 					input.historySink?.({
 						channel: channel.id,
@@ -3498,6 +3611,7 @@ async function runSubmit(input, options) {
 					});
 					return;
 				}
+				stagedRef = stageResult.ref;
 				input.historySink?.({
 					channel: channel.id,
 					action: "stage",
@@ -3506,13 +3620,13 @@ async function runSubmit(input, options) {
 					artifactVersion: plans.find((p) => p.channel === channel.id)?.artifactVersion || void 0
 				});
 			}
-			const r = await channel.submit(effectiveCtx);
+			const r = await channel.submit(effectiveCtx, stagedRef);
 			summary.push({
 				channel: channel.id,
 				label: channel.label,
 				ok: r.ok,
 				submitError: r.error,
-				plan: planFor(plans, basePlans, channel.id)
+				plan: planFor(plans, basePlans, channel.id, ctx.artifactPath)
 			});
 			input.historySink?.({
 				channel: channel.id,
@@ -3527,7 +3641,7 @@ async function runSubmit(input, options) {
 				label: channel.label,
 				ok: false,
 				submitError: e.message,
-				plan: planFor(plans, basePlans, channel.id)
+				plan: planFor(plans, basePlans, channel.id, ctx.artifactPath)
 			});
 			input.historySink?.({
 				channel: channel.id,
@@ -3550,22 +3664,29 @@ async function safePlan(channel, ctx) {
 	try {
 		return await channel.plan(ctx);
 	} catch {
-		return fallbackPlan(channel.id);
+		return fallbackPlan(channel.id, ctx.artifactPath);
 	}
 }
-/** plan 失败/被插件删除时的兜底条目（保 summary.plan 非可选契约） */
-function fallbackPlan(channelId) {
+/** 按产物扩展名推断平台（兜底条目用）：.ipa→ios，.hap→harmony，.apk/.aab 及其余→android */
+function platformOfArtifact(artifactPath) {
+	const ext = path.extname(artifactPath).toLowerCase();
+	if (ext === ".ipa") return "ios";
+	if (ext === ".hap") return "harmony";
+	return "android";
+}
+/** plan 失败/被插件删除时的兜底条目（保 summary.plan 非可选契约；平台按产物推断不再硬编码 android） */
+function fallbackPlan(channelId, artifactPath) {
 	return {
 		channel: channelId,
-		platform: "android",
+		platform: platformOfArtifact(artifactPath),
 		artifactVersion: "",
 		action: "stage+submit",
 		afterApproval: "auto-publish"
 	};
 }
 /** 汇总条目取计划：plan:before 改写后的 plans 优先，被插件删除时回退改写前快照，永不返回 undefined */
-function planFor(plans, base, id) {
-	return plans.find((p) => p.channel === id) ?? base.get(id) ?? fallbackPlan(id);
+function planFor(plans, base, id, artifactPath) {
+	return plans.find((p) => p.channel === id) ?? base.get(id) ?? fallbackPlan(id, artifactPath);
 }
 //#endregion
 //#region src/plugin.ts
@@ -3576,6 +3697,8 @@ var PluginHost = class {
 	}
 	/**
 	* 顺序执行某钩子；支持「链式替换」（返回对象则替换后继续传给下一插件）与「拦截」（返回 false 立即中止）。
+	* 信任边界：返回值按 T 强转、不做形状校验（vite 同款取舍）——插件作者自负其责，
+	* 坏形状会在后续消费点显式抛错，宿主不代为静默兜底。
 	* @returns {[被拦截?, 最终值]} false 表示被某插件拦截
 	*/
 	async apply(hook, value, ctx) {
@@ -3662,7 +3785,12 @@ const rnAdapter = {
 	artifactPatterns(platform) {
 		if (platform === "android") return ["android/app/build/outputs/apk/release/*-release.apk"];
 		if (platform === "ios") return ["build/ios/ipa/*.ipa"];
-		return ["harmony/entry/build/default/outputs/**/entry-*-signed.hap", "harmony/entry/build/default/outputs/**/entry-*.app"];
+		return [
+			"harmony/entry/build/default/outputs/**/entry-*-signed.hap",
+			"harmony/entry/build/default/outputs/**/entry-*.app",
+			"harmony/build/outputs/**/*.app",
+			"build/outputs/**/*.app"
+		];
 	},
 	buildCommand(platform) {
 		if (platform === "android") return [
@@ -3897,7 +4025,7 @@ function findArtifacts(cwd, patterns) {
 	return [...byPath].sort((a, b) => b[1] - a[1]).map(([p]) => p);
 }
 /** 文本读取（容错：不存在/不可读返回 null，绝不抛；detectBundleIds 各源共用） */
-function readText(filePath) {
+function readText$1(filePath) {
 	try {
 		return fs.readFileSync(filePath, "utf8");
 	} catch {
@@ -3922,7 +4050,7 @@ function gradleApplicationId(cwd) {
 		path.join(cwd, "android", "app", "build.gradle.kts")
 	];
 	for (const file of candidates) {
-		const text = readText(file);
+		const text = readText$1(file);
 		if (!text) continue;
 		const m = /(?:^|\s)applicationId\s*[=:]?\s*["']([^"'\s]+)["']/.exec(text);
 		if (m?.[1]) return m[1];
@@ -3930,7 +4058,7 @@ function gradleApplicationId(cwd) {
 }
 /** 鸿蒙 AppScope/app.json5 的 bundleName（json5 允许注释/尾逗号，正则取值而非 JSON 解析） */
 function appJson5BundleName(file) {
-	const text = readText(file);
+	const text = readText$1(file);
 	return (text && /"bundleName"\s*:\s*"([^"]+)"/.exec(text))?.[1];
 }
 /** 两层子目录内找首个 *.xcodeproj：pbxproj 第一个非变量（含 $ 的 $(...) 与 ${...}）的 PRODUCT_BUNDLE_IDENTIFIER + 工程名（Pods 已被 subdirs 排除） */
@@ -3944,7 +4072,7 @@ function findPbxproj(cwd) {
 		}
 		const projects = entries.filter((e) => e.isDirectory() && e.name.endsWith(".xcodeproj")).map((e) => e.name).sort();
 		for (const name of projects) {
-			const pbx = readText(path.join(dir, name, "project.pbxproj"));
+			const pbx = readText$1(path.join(dir, name, "project.pbxproj"));
 			if (!pbx) continue;
 			for (const m of pbx.matchAll(/PRODUCT_BUNDLE_IDENTIFIER\s*=\s*([^;]+);/g)) {
 				const value = m[1].trim().replace(/^["']|["']$/g, "");
@@ -4045,14 +4173,1000 @@ function readEntries(query = {}, filePath = HISTORY_PATH) {
 //#region src/channels/shared/error-codes.ts
 /**
 * 错误码人话化：消费各渠道自带 errorHints（平台内聚——表与渠道实现同文件）。
+* 网络类故障（AbortSignal 超时/断连/DNS）渠道层不转译，统一在此兜底提示。
 */
+/** 网络故障特征 → 人话提示（命中即返回，优先于渠道码表） */
+const NETWORK_HINTS = [[/aborted due to timeout|TimeoutError/i, "请求超时（服务端无响应或网络不稳）：可重跑；大包上传建议在稳定网络环境执行"], [/\b(?:ECONNRESET|ECONNREFUSED|ENOTFOUND|EAI_AGAIN|EPIPE)\b|socket hang up|fetch failed/i, "网络故障（连接被重置/DNS 解析失败等）：检查网络或代理后重跑"]];
+/** 码匹配：纯数字码加数字边界（防 1003 误中 11003/10031）；其余按包含匹配 */
+function matchesCode(message, code) {
+	if (/^\d+$/.test(code)) return new RegExp(`(?<!\\d)${code}(?!\\d)`).test(message);
+	return message.includes(code);
+}
 function humanizeError(hints, message) {
+	for (const [re, hint] of NETWORK_HINTS) if (re.test(message)) return `${message}\n  提示: ${hint}`;
 	if (!hints) return message;
-	for (const [code, hint] of Object.entries(hints)) if (message.includes(code)) return `${message}\n  提示: ${hint}`;
+	for (const [code, hint] of Object.entries(hints)) if (matchesCode(message, code)) return `${message}\n  提示: ${hint}`;
 	return message;
 }
 //#endregion
-//#region src/version.ts
+//#region src/channels/shared/redact.ts
+/**
+* 凭据脱敏（对拍 apkgo pkg/httptrace/redact.go 权威）。
+* 判定依据是“名字”：JSON 键 / 表单字段 / query 参数 / header 名携带凭据语义即整值掩码为
+* [REDACTED <len>]（保留长度线索），空串保持空串——“签名为空”本身就是排查线索。
+* 非敏感名下的值仍递归扫内容（signed URL / 内嵌 JSON / name=value 自由文本）。
+* 故意分歧：掩码不做 percent-encode（日志可读性优先）；JSON 再序列化保持原键序（Go map 序随机）。
+* 挂接点：CLI / 错误消息层接入（core 先提供能力）。
+*/
+/** 归一化后「包含即敏感」的词（对拍 redact.go sensitiveWords） */
+const SENSITIVE_WORDS = [
+	"secret",
+	"token",
+	"password",
+	"passwd",
+	"authorization",
+	"credential",
+	"cookie",
+	"privatekey",
+	"apikey",
+	"assertion",
+	"jwt",
+	"signature"
+];
+/** 归一化后全等即敏感的名字（对拍 redact.go sensitiveNames） */
+const SENSITIVE_NAMES = {
+	sig: true,
+	sign: true,
+	pwd: true,
+	auth: true
+};
+/** 名字是否携带凭据语义（JSON 键 / 表单字段 / query 参数 / header 名通用；归一化 = 小写去非字母数字） */
+function isSensitiveName(name) {
+	const n = name.toLowerCase().replace(/[^a-z0-9]/g, "");
+	if (n in SENSITIVE_NAMES) return true;
+	if (n === "tokentype" || n.startsWith("accesscontrol")) return false;
+	if (n.endsWith("sign") && n !== "design") return true;
+	return SENSITIVE_WORDS.some((w) => n.includes(w));
+}
+/** 整值掩码：保留长度；空串保持（“签名为空”是有效诊断信息）。3 处调用点需锁步一致 */
+function mask(v) {
+	return v === "" ? "" : `[REDACTED ${v.length}]`;
+}
+/**
+* 按名字脱敏单个值：敏感名 → 整值掩码；Authorization 保留 scheme（"Bearer [REDACTED 812]"，
+* 对拍 redact.go redactHeaders）；非敏感名 → 递归 redactText 扫值内凭据。
+*/
+function redactValue(name, v) {
+	if (/^authorization$/i.test(name) && v.includes(" ")) {
+		const schemeEnd = v.indexOf(" ");
+		return `${v.slice(0, schemeEnd)} ${mask(v.slice(schemeEnd + 1))}`;
+	}
+	return isSensitiveName(name) ? mask(v) : redactText(v);
+}
+/** redactURL：剥离 userinfo + query 参数按名脱敏，路径/fragment 原样保留 */
+function redactUrlString(v) {
+	let out = v.replace(/^(https?:\/\/)[^/?#]*@/, "$1");
+	const hashIdx = out.indexOf("#");
+	const hash = hashIdx >= 0 ? out.slice(hashIdx) : "";
+	if (hashIdx >= 0) out = out.slice(0, hashIdx);
+	const qIdx = out.indexOf("?");
+	if (qIdx < 0) return out + hash;
+	const query = new URLSearchParams(out.slice(qIdx + 1));
+	const pairs = [];
+	for (const [k, val] of query) pairs.push(`${k}=${isSensitiveName(k) ? mask(val) : val}`);
+	return `${out.slice(0, qIdx)}?${pairs.join("&")}${hash}`;
+}
+/** free 文本中的 name=value / "name":"value" 凭据对（对拍 redact.go scrubRe；掩码无长度） */
+const SCRUB_RE = /([\w.-]*(?:secret|token|password|passwd|signature|credential|authorization|api_?key|assertion)[\w.-]*"?\s*[=:]\s*"?)([^"&\s,;<}]+)/gi;
+/** JSON 树递归：敏感名下字符串掩码、数字/布尔置 [REDACTED]，数组元素继承外层键名 */
+function redactTree(name, v) {
+	if (v === null || typeof v !== "object") {
+		if (typeof v === "string") return redactValue(name, v);
+		return isSensitiveName(name) ? "[REDACTED]" : v;
+	}
+	if (Array.isArray(v)) return v.map((x) => redactTree(name, x));
+	const out = {};
+	for (const [k, val] of Object.entries(v)) out[k] = redactTree(k, val);
+	return out;
+}
+/**
+* 文本脱敏（三层层叠，逐层尝试）：
+*   1) http(s) URL 带 query/userinfo → query 按名脱敏 + 剥 userinfo
+*   2) { / [ 开头且整串为合法 JSON → 递归按键名脱敏
+*   3) 其余 → name=value 正则扫（错误消息等无结构文本）
+*/
+function redactText(v) {
+	if (/^https?:\/\//i.test(v) && (v.includes("?") || /^https?:\/\/[^/?#]*@/i.test(v))) return redactUrlString(v);
+	if (v.length > 1 && (v.startsWith("{") || v.startsWith("["))) try {
+		return JSON.stringify(redactTree("", JSON.parse(v)));
+	} catch {}
+	return v.replace(SCRUB_RE, "$1[REDACTED]");
+}
+//#endregion
+//#region src/version/project.ts
+/**
+* 工程文件版本读写（可接管模式：版本事实源永远是工程文件，applift 只代读代写）。
+* 只认标准模板形态（AGP/Xcode/DevEco/pubspec/package.json/tauri.conf）；行级改写、
+* 幂等（字段定位 + 写死目标值，不依赖旧值，跑 N 次 diff 不变——qy-driver sync-app-identity 同款模式）。
+* version catalog 引用形态（libs.versions.xxx.get()）读侧识别并标注 problem，不代写。
+*/
+function readText(p) {
+	try {
+		return fs.readFileSync(p, "utf8");
+	} catch {
+		return null;
+	}
+}
+function firstExisting(...paths) {
+	return paths.find((p) => fs.existsSync(p));
+}
+function locateIosProject(dir) {
+	const find = (d) => {
+		try {
+			return fs.readdirSync(d, { withFileTypes: true }).find((e) => e.isDirectory() && e.name.endsWith(".xcodeproj") && !e.name.startsWith(".") && e.name !== "Pods.xcodeproj");
+		} catch {
+			return;
+		}
+	};
+	let xcodeproj = find(dir);
+	let base = dir;
+	if (!xcodeproj) try {
+		const subs = fs.readdirSync(dir, { withFileTypes: true }).filter((e) => e.isDirectory() && !e.name.startsWith(".") && e.name !== "node_modules" && e.name !== "Pods");
+		for (const s of subs) {
+			xcodeproj = find(path.join(dir, s.name));
+			if (xcodeproj) {
+				base = path.join(dir, s.name);
+				break;
+			}
+		}
+	} catch {}
+	const pbxproj = xcodeproj ? path.join(base, xcodeproj.name, "project.pbxproj") : void 0;
+	const projDir = xcodeproj?.name.replace(/\.xcodeproj$/, "");
+	const plist = projDir && fs.existsSync(path.join(base, projDir, "Info.plist")) ? path.join(base, projDir, "Info.plist") : void 0;
+	return {
+		pbxproj: pbxproj && fs.existsSync(pbxproj) ? pbxproj : void 0,
+		plist
+	};
+}
+function locateVersionFiles(cwd, framework) {
+	const loc = {};
+	const id = framework?.id ?? "";
+	const tryAll = framework === null;
+	if (tryAll || id === "rn" || id === "native-android" || id === "flutter") loc.android = firstExisting(path.join(cwd, "android", "app", "build.gradle.kts"), path.join(cwd, "android", "app", "build.gradle"), path.join(cwd, "app", "build.gradle.kts"), path.join(cwd, "app", "build.gradle"));
+	if (tryAll || id === "rn" || id === "native-ios" || id === "flutter") {
+		const sub = locateIosProject(path.join(cwd, "ios"));
+		const root = sub.pbxproj ? sub : locateIosProject(cwd);
+		loc.ios = root.pbxproj;
+		loc.plist = root.plist;
+	}
+	if (tryAll || id === "rn" || id === "native-harmony" || id === "flutter") loc.harmony = firstExisting(path.join(cwd, "harmony", "AppScope", "app.json5"), path.join(cwd, "AppScope", "app.json5"));
+	if (tryAll || id === "flutter") loc.pubspec = fs.existsSync(path.join(cwd, "pubspec.yaml")) ? path.join(cwd, "pubspec.yaml") : void 0;
+	if (tryAll || id === "rn" || id === "electron") loc.packageJson = fs.existsSync(path.join(cwd, "package.json")) ? path.join(cwd, "package.json") : void 0;
+	if (tryAll || id === "tauri") {
+		loc.tauri = firstExisting(path.join(cwd, "src-tauri", "tauri.conf.json"), path.join(cwd, "src-tauri", "tauri.conf.json5"));
+		loc.packageJson = fs.existsSync(path.join(cwd, "package.json")) ? path.join(cwd, "package.json") : void 0;
+	}
+	if (id === "rn") {
+		const appJson = readText(path.join(cwd, "app.json"));
+		if (appJson && /"expo"\s*:/.test(appJson)) loc.expoAppJson = path.join(cwd, "app.json");
+	}
+	return loc;
+}
+function readGradle(file) {
+	const text = readText(file);
+	if (!text) return {};
+	const out = {};
+	const codeM = /(versionCode(?!Suffix)\s*=?\s*)(\d+)/.exec(text);
+	const nameM = /(versionName(?!Suffix)\s*=?\s*)("[^"]*"|'[^']*'|[\w.+-]+)/.exec(text);
+	if (codeM) out.versionCode = codeM[2];
+	if (nameM) {
+		const nameVal = nameM[2].replace(/^["']|["']$/g, "");
+		if (nameVal.startsWith("libs.versions.")) out.problem = "versionName 走 version catalog 引用（libs.versions.*）：非标准形态，请把版本字段搬回 app/build.gradle(.kts) 字面量";
+		else out.versionName = nameVal;
+	}
+	if (/(versionCode|versionName)\s*=?\s*libs\.versions\./.test(text) && !out.problem) out.problem = "版本字段走 version catalog 引用（libs.versions.*）：非标准形态，请把版本字段搬回 app/build.gradle(.kts) 字面量";
+	return out;
+}
+function readPbxproj(file) {
+	const text = readText(file);
+	if (!text) return {};
+	const names = [...text.matchAll(/MARKETING_VERSION\s*=\s*([^;]+);/g)].map((m) => m[1].trim());
+	return {
+		versionName: names[0],
+		versionCode: /CURRENT_PROJECT_VERSION\s*=\s*([^;]+);/.exec(text)?.[1]?.trim(),
+		problem: new Set(names).size > 1 ? `多 target MARKETING_VERSION 不一致（${[...new Set(names)].join(" / ")}）：读第一个，bump 时将全部同步` : void 0
+	};
+}
+function readPlist(file) {
+	const text = readText(file);
+	if (!text) return {};
+	const name = /<key>CFBundleShortVersionString<\/key>\s*<string>([^<]+)<\/string>/.exec(text)?.[1];
+	const code = /<key>CFBundleVersion<\/key>\s*<string>([^<]+)<\/string>/.exec(text)?.[1];
+	if (name && !name.startsWith("$")) return {
+		versionName: name,
+		versionCode: code
+	};
+	return {};
+}
+function readAppJson5(file) {
+	const text = readText(file);
+	if (!text) return {};
+	return {
+		versionName: /"versionName"\s*:\s*"([^"]+)"/.exec(text)?.[1],
+		versionCode: /"versionCode"\s*:\s*(\d+)/.exec(text)?.[1]
+	};
+}
+function readPubspec(file) {
+	const text = readText(file);
+	if (!text) return {};
+	const m = /^version:\s*(\S+)(?:\s*#.*)?$/m.exec(text);
+	if (!m) return {};
+	const [name, code] = m[1].split("+");
+	return {
+		versionName: name,
+		versionCode: code
+	};
+}
+function readJsonVersionKey(file) {
+	const text = readText(file);
+	if (!text) return {};
+	let best;
+	for (const m of text.matchAll(/^(\s*)"version"\s*:\s*"([^"]+)"\s*,?\s*$/gm)) {
+		const indent = m[1].length;
+		if (!best || indent < best.indent) best = {
+			indent,
+			value: m[2]
+		};
+	}
+	if (best) return { versionName: best.value };
+	try {
+		const obj = JSON.parse(text);
+		if (typeof obj.version === "string") return { versionName: obj.version };
+	} catch {}
+	const flat = /"version"\s*:\s*"([^"]+)"/.exec(text)?.[1];
+	return flat ? { versionName: flat } : {};
+}
+function readExpoAppJson(file) {
+	const text = readText(file);
+	if (!text) return {};
+	return {
+		versionName: /"version"\s*:\s*"([^"]+)"/.exec(text)?.[1],
+		versionCode: /"versionCode"\s*:\s*(\d+)/.exec(text)?.[1] ?? /"buildNumber"\s*:\s*"([^"]+)"/.exec(text)?.[1]
+	};
+}
+/** 各端版本实况（按框架布局；未识别框架时尝试全部标准位置） */
+function readProjectVersions(cwd, framework) {
+	const loc = locateVersionFiles(cwd, framework);
+	const out = [];
+	if (loc.android) out.push({
+		platform: "android",
+		file: loc.android,
+		kind: "gradle",
+		...readGradle(loc.android)
+	});
+	if (loc.ios) out.push({
+		platform: "ios",
+		file: loc.ios,
+		kind: "pbxproj",
+		...readPbxproj(loc.ios)
+	});
+	else if (loc.plist) {
+		const plist = readPlist(loc.plist);
+		if (plist.versionName) out.push({
+			platform: "ios",
+			file: loc.plist,
+			kind: "pbxproj",
+			...plist,
+			problem: "未找到 pbxproj，读 Info.plist 字面量"
+		});
+	}
+	if (loc.harmony) out.push({
+		platform: "harmony",
+		file: loc.harmony,
+		kind: "app-json5",
+		...readAppJson5(loc.harmony)
+	});
+	if (loc.pubspec) out.push({
+		platform: "flutter",
+		file: loc.pubspec,
+		kind: "pubspec",
+		...readPubspec(loc.pubspec)
+	});
+	if (loc.packageJson) out.push({
+		platform: "js",
+		file: loc.packageJson,
+		kind: "package-json",
+		...readJsonVersionKey(loc.packageJson)
+	});
+	if (loc.tauri) out.push({
+		platform: "tauri",
+		file: loc.tauri,
+		kind: "tauri",
+		...readJsonVersionKey(loc.tauri)
+	});
+	if (loc.expoAppJson) out.push({
+		platform: "expo",
+		file: loc.expoAppJson,
+		kind: "expo-app-json",
+		...readExpoAppJson(loc.expoAppJson)
+	});
+	return out;
+}
+/** 指定捕获组替换为 value（其余组原样保留；约定各正则组外无字面量） */
+function replaceGroup(re, text, group, value) {
+	let count = 0;
+	return {
+		text: text.replace(re, (_m, ...groups) => {
+			count++;
+			const g = groups.slice(0, -2);
+			g[group - 1] = value;
+			return g.join("");
+		}),
+		count
+	};
+}
+function writeIfChanged(file, next) {
+	if (readText(file) === next) return false;
+	fs.writeFileSync(file, next, "utf8");
+	return true;
+}
+function writeGradle(file, w) {
+	const text = readText(file);
+	if (!text) throw new Error(`无法读取 ${file}`);
+	if (/version(Code|Name)\s*=?\s*libs\.versions\./.test(text)) throw new Error(`${file} 的版本字段是 version catalog 引用形态：请先改造为字面量（applift 只写标准形态）`);
+	let next = text;
+	const code = replaceGroup(/(versionCode(?!Suffix)\s*=?\s*)(\d+)/g, next, 2, String(w.versionCode));
+	next = code.text;
+	const name = replaceGroup(/(versionName(?!Suffix)\s*=?\s*)("[^"]*"|'[^']*'|[\w.+-]+)/g, next, 2, `"${w.versionName}"`);
+	next = name.text;
+	if (code.count === 0 && name.count === 0) throw new Error(`${file} 未找到 versionCode/versionName 字面量`);
+	return writeIfChanged(file, next);
+}
+function writePbxproj(file, w) {
+	const text = readText(file);
+	if (!text) throw new Error(`无法读取 ${file}`);
+	let next = text;
+	const name = replaceGroup(/(MARKETING_VERSION\s*=\s*)([^;]+)(;)/g, next, 2, w.versionName);
+	next = name.text;
+	const code = replaceGroup(/(CURRENT_PROJECT_VERSION\s*=\s*)([^;]+)(;)/g, next, 2, String(w.versionCode));
+	next = code.text;
+	if (name.count === 0 && code.count === 0) throw new Error(`${file} 未找到 MARKETING_VERSION/CURRENT_PROJECT_VERSION`);
+	return writeIfChanged(file, next);
+}
+function writeAppJson5(file, w) {
+	const text = readText(file);
+	if (!text) throw new Error(`无法读取 ${file}`);
+	let next = text;
+	const name = replaceGroup(/("versionName"\s*:\s*")([^"]+)(")/g, next, 2, w.versionName);
+	next = name.text;
+	const code = replaceGroup(/("versionCode"\s*:\s*)(\d+)/g, next, 2, String(w.versionCode));
+	next = code.text;
+	if (name.count === 0 && code.count === 0) throw new Error(`${file} 未找到 versionName/versionCode`);
+	return writeIfChanged(file, next);
+}
+function writePubspec(file, w) {
+	const text = readText(file);
+	if (!text) throw new Error(`无法读取 ${file}`);
+	if (!/^version:\s*\S+/m.test(text)) throw new Error(`${file} 未找到 version: 行`);
+	return writeIfChanged(file, text.replace(/^version:[^\n#]*?(\s*)(#.*)?$/m, (_m, gap, comment) => `version: ${w.versionName}+${w.versionCode}${comment ? gap ?? " " : ""}${comment ?? ""}`));
+}
+/** JSON 顶层 version 键改写（两遍：先定位最小缩进行，再只改该行——单遍回调在嵌套键
+*  先出现时会把它一并改写，篡改依赖声明）。单行 JSON 回退首个匹配。 */
+function writeJsonVersionKey(file, versionName) {
+	const text = readText(file);
+	if (!text) throw new Error(`无法读取 ${file}`);
+	const lines = text.split("\n");
+	const re = /^(\s*)"version"\s*:\s*"([^"]+)"(\s*,?\s*)$/;
+	let target = -1;
+	let bestIndent = Number.POSITIVE_INFINITY;
+	for (let i = 0; i < lines.length; i++) {
+		const m = re.exec(lines[i]);
+		if (!m) continue;
+		const ind = m[1].length;
+		if (ind < bestIndent) {
+			bestIndent = ind;
+			target = i;
+		}
+	}
+	let next;
+	if (target >= 0) {
+		const m = re.exec(lines[target]);
+		lines[target] = `${m[1]}"version": "${versionName}"${m[3]}`;
+		next = lines.join("\n");
+	} else {
+		let topVersion;
+		try {
+			const obj = JSON.parse(text);
+			if (typeof obj.version === "string") topVersion = obj.version;
+		} catch {}
+		const esc = (topVersion ?? "").replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
+		const re1 = topVersion ? new RegExp(`"version"\\s*:\\s*"${esc}"`) : /"version"\s*:\s*"([^"]+)"/;
+		if (!re1.test(text)) throw new Error(`${file} 未找到 "version" 键`);
+		next = text.replace(re1, `"version": "${versionName}"`);
+	}
+	return writeIfChanged(file, next);
+}
+function writeExpoAppJson(file, w) {
+	const text = readText(file);
+	if (!text) throw new Error(`无法读取 ${file}`);
+	const v = replaceGroup(/("version"\s*:\s*")([^"]+)(")/g, text, 2, w.versionName);
+	if (v.count === 0) throw new Error(`${file} 未找到 expo "version" 键`);
+	let next = v.text;
+	next = replaceGroup(/("versionCode"\s*:\s*)(\d+)/g, next, 2, String(w.versionCode)).text;
+	next = replaceGroup(/("buildNumber"\s*:\s*")([^"]+)(")/g, next, 2, String(w.versionCode)).text;
+	return writeIfChanged(file, next);
+}
+/**
+* 写回各端版本（多端 versionName 同步、versionCode 各端独立）。
+* 返回实际改动的文件列表（commit 范围）。problem 端跳过并在返回中列出（不阻断其他端）。
+*/
+function writeProjectVersions(cwd, framework, writes) {
+	const loc = locateVersionFiles(cwd, framework);
+	const changed = [];
+	const skipped = [];
+	const plat = new Map(writes.map((w) => [w.platform, w]));
+	const apply = (file, fn, key) => {
+		if (!file) {
+			const w = plat.get(key);
+			if (w) skipped.push({
+				platform: w.platform,
+				reason: `未找到版本文件（${key}）`
+			});
+			return;
+		}
+		try {
+			if (fn(file)) changed.push(file);
+		} catch (e) {
+			const code = e.code;
+			if (code === "EACCES" || code === "EPERM") throw e;
+			skipped.push({
+				platform: key,
+				reason: e.message
+			});
+		}
+	};
+	if (plat.has("android")) apply(loc.android, (f) => writeGradle(f, plat.get("android")), "android");
+	if (plat.has("ios")) apply(loc.ios, (f) => writePbxproj(f, plat.get("ios")), "ios");
+	if (plat.has("harmony")) apply(loc.harmony, (f) => writeAppJson5(f, plat.get("harmony")), "harmony");
+	if (plat.has("flutter")) apply(loc.pubspec, (f) => writePubspec(f, plat.get("flutter")), "flutter");
+	if (plat.has("js")) apply(loc.packageJson, (f) => writeJsonVersionKey(f, plat.get("js").versionName), "js");
+	if (plat.has("tauri")) apply(loc.tauri, (f) => writeJsonVersionKey(f, plat.get("tauri").versionName), "tauri");
+	if (plat.has("expo")) apply(loc.expoAppJson, (f) => writeExpoAppJson(f, plat.get("expo")), "expo");
+	return {
+		changed: [...new Set(changed)],
+		skipped
+	};
+}
+//#endregion
+//#region src/version/git.ts
+/**
+* git 只读/写小助手（bump 编排与推断共用）。
+* spawnSync + 超时；失败返回 ok:false 由调用方决定语义，不在此抛。
+*/
+function git(cwd, args) {
+	const r = spawnSync("git", args, {
+		cwd,
+		encoding: "utf8",
+		timeout: 6e4
+	});
+	return {
+		ok: !r.error && r.status === 0,
+		stdout: (r.stdout ?? "").trim(),
+		stderr: (r.stderr ?? "").trim()
+	};
+}
+function isGitRepo(cwd) {
+	return git(cwd, ["rev-parse", "--is-inside-work-tree"]).stdout === "true";
+}
+/** 宽松 semver 解析（可选 v/前缀，如 v4.1.0 / 4.1.0-beta.3 / release-4.1.0 里取 semver 部分） */
+function looseSemver(tag) {
+	const direct = semver.valid(tag);
+	if (direct) return direct;
+	const m = /(\d+\.\d+\.\d+(?:[-+][\w.-]+)?)/.exec(tag);
+	return m ? semver.valid(m[1]) ?? void 0 : void 0;
+}
+/**
+* 最新 semver tag（按版本序取最大，非创建时间——修复补打旧版本 tag 的场景更稳）。
+* 无 tag / 非 git 仓库返回 undefined。
+*/
+function latestSemverTag(cwd) {
+	const r = git(cwd, ["tag", "-l"]);
+	if (!r.ok) return void 0;
+	let best;
+	for (const raw of r.stdout.split("\n")) {
+		const t = raw.trim();
+		if (!t) continue;
+		const v = looseSemver(t);
+		if (!v) continue;
+		if (!best || semver.gt(v, best.v)) best = {
+			raw: t,
+			v
+		};
+	}
+	return best?.raw;
+}
+/** 锚点 tag..HEAD 的完整 commit messages（%B 含 footer，NUL 分隔——body 内建换行安全） */
+function commitsSince(cwd, ref) {
+	const r = git(cwd, [
+		"log",
+		ref ? `${ref}..HEAD` : "HEAD",
+		"--format=%B%x00",
+		"--no-merges"
+	]);
+	if (!r.ok) return [];
+	return r.stdout.split("\0").map((m) => m.trim()).filter(Boolean);
+}
+/** 工作区状态（--porcelain）。注意：不走通用 git()——其 stdout.trim() 会剥掉首行前导空格，
+*  破坏 porcelain 的两列状态位（" M file" → "M file"），此处保留原始行仅去行尾。 */
+function statusShort(cwd) {
+	const r = spawnSync("git", ["status", "--porcelain"], {
+		cwd,
+		encoding: "utf8",
+		timeout: 3e4
+	});
+	if (r.error || r.status !== 0) return [];
+	return (r.stdout ?? "").split("\n").map((l) => l.trimEnd()).filter(Boolean);
+}
+//#endregion
+//#region src/version/infer.ts
+/**
+* 版本推断与决定：锚点 tag..HEAD 的 conventional commits → bump level（纯函数），
+* 版本演进全用 semver（inc / prerelease 剥离），不自写版本数学。
+* 纯函数输入 git log 文本，便于契约测试；git 交互在 git.ts。
+*/
+/** conventional commits → bump level：BREAKING > feat(minor) > fix(patch)；无可识别提交 → patch */
+function inferBumpLevel(messages) {
+	let breaking = 0;
+	let feat = 0;
+	let fix = 0;
+	const parser = new CommitParser();
+	for (const raw of messages) {
+		let c = null;
+		try {
+			c = parser.parse(raw);
+		} catch {
+			continue;
+		}
+		if (!c) continue;
+		const type = (c.type ?? "").toLowerCase();
+		if ((c.notes ?? []).some((n) => /breaking/i.test(n.title ?? ""))) breaking++;
+		else if (type === "feat") feat++;
+		else if (type === "fix") fix++;
+	}
+	const total = messages.length;
+	let level;
+	let reason;
+	if (breaking > 0) {
+		level = "major";
+		reason = `git 推断：${breaking} 个 BREAKING CHANGE → major`;
+	} else if (feat > 0) {
+		level = "minor";
+		reason = `git 推断：feat ${feat} 个（fix ${fix} 个）→ minor`;
+	} else if (fix > 0) {
+		level = "patch";
+		reason = `git 推断：fix ${fix} 个，无 feat/BREAKING → patch`;
+	} else {
+		level = "patch";
+		reason = total === 0 ? "锚点 tag..HEAD 无提交 → patch 兜底" : `git 推断：${total} 个提交无 feat/fix/BREAKING（chore/docs 等）→ patch 兜底`;
+	}
+	return {
+		level,
+		reason,
+		total,
+		breaking,
+		feat,
+		fix
+	};
+}
+/**
+* 从当前版本决定下一版本（纯函数）。
+* - 显式 level：semver.inc；当前是 prerelease 且不带 --pre → 剥离转正式（4.0.0-beta.3 + patch → 4.0.0）
+* - 无 level：用 infer 结果
+* - prerelease level：当前有 pre → 同基线递进（beta.3 → beta.4）；无 pre → 报错（应使用 --pre 进入）
+* - --pre：从 level 出发挂 prerelease（4.0.0 + minor + beta → 4.1.0-beta.1）
+* current 非 semver 时抛错（调用方要求显式指定或先手动规范化）。
+*/
+function decideNextVersion(current, opts, infer) {
+	const base = semver.valid(current);
+	if (!base) throw new Error(`当前版本 "${current}" 不是合法 semver（如前导零 3.0.08）：显式指定目标版本（bump 4.0.0）或先手动规范化`);
+	const level = opts.level;
+	if (level && ![
+		"major",
+		"minor",
+		"patch",
+		"prerelease"
+	].includes(level)) {
+		const explicit = semver.valid(level);
+		if (!explicit) throw new Error(`无法识别的版本/级别 "${level}"`);
+		if (!semver.gt(explicit, base)) throw new Error(`目标版本 ${explicit} 必须大于当前 ${base}`);
+		return {
+			next: explicit,
+			reason: "显式指定"
+		};
+	}
+	const hasPre = semver.prerelease(base) !== null;
+	const preId = opts.pre ?? semver.prerelease(base)?.[0];
+	if (level === "prerelease") {
+		if (hasPre) {
+			const next = preId ? semver.inc(base, "prerelease", preId) : semver.inc(base, "prerelease");
+			if (!next) throw new Error(`prerelease 递进失败：${base}`);
+			return {
+				next,
+				reason: `prerelease 递进（${base} → ${next}）`
+			};
+		}
+		throw new Error(`当前 ${base} 不是 prerelease：用 --pre beta（进入 beta.1）或显式版本（bump 4.1.0-beta.1）`);
+	}
+	const effectiveLevel = level ?? infer?.level ?? "patch";
+	const reasonPrefix = level ? `显式 ${level}` : infer ? infer.reason : "无依据 → patch 兜底";
+	if (opts.pre) {
+		const next = semver.inc(base, `pre${effectiveLevel}`, opts.pre);
+		if (!next) throw new Error(`pre${effectiveLevel} 计算失败：${base}`);
+		return {
+			next,
+			reason: `${reasonPrefix} + prerelease(${opts.pre})`
+		};
+	}
+	const next = semver.inc(base, effectiveLevel);
+	if (!next) throw new Error(`${effectiveLevel} 递进失败：${base}`);
+	return {
+		next,
+		reason: reasonPrefix
+	};
+}
+/** 工程文件写入用的三段数字 versionName（prerelease 只留在 tag，不进商店） */
+function storeVersionName(full) {
+	const v = new semver.SemVer(full);
+	return `${v.major}.${v.minor}.${v.patch}`;
+}
+//#endregion
+//#region src/version/changelog.ts
+/**
+* CHANGELOG 生成：conventional commits 归类渲染（conventional-changelog 风格），
+* 倒序插入项目根 CHANGELOG.md（同版本 section 幂等替换）。
+* 渲染自研（conventional-changelog-core 依赖链对 CLI 太重），解析复用 parser。
+*/
+/** raw commit messages → 结构化条目（feat/fix/BREAKING 之外的 type 也保留，渲染时归类） */
+function toChangelogEntries(messages) {
+	const parser = new CommitParser();
+	const out = [];
+	for (const raw of messages) {
+		let c = null;
+		try {
+			c = parser.parse(raw);
+		} catch {
+			continue;
+		}
+		if (!c || !c.header) continue;
+		const headerType = /^(\w+)(\([^)]*\))?!?:\s/.exec(c.header)?.[1]?.toLowerCase();
+		const type = (c.type ?? headerType)?.toLowerCase();
+		if (!type) continue;
+		const breaking = (c.notes ?? []).some((n) => /breaking/i.test(n.title ?? ""));
+		out.push({
+			type,
+			scope: c.scope || void 0,
+			subject: (c.subject || c.header || "").trim(),
+			breaking,
+			hash: c.hash || void 0
+		});
+	}
+	return out;
+}
+function line(e) {
+	const scope = e.scope ? `(${e.scope})` : "";
+	const hash = e.hash ? ` (${e.hash.slice(0, 7)})` : "";
+	return `- ${e.type}${scope}: ${e.subject}${hash}`;
+}
+/** 渲染单个版本段落（## [4.1.0] - 2026-10-17） */
+function renderChangelogSection(version, date, entries) {
+	const body = [
+		["⚠ BREAKING CHANGES", entries.filter((e) => e.breaking)],
+		["Features", entries.filter((e) => !e.breaking && e.type === "feat")],
+		["Bug Fixes", entries.filter((e) => !e.breaking && e.type === "fix")],
+		["Others", entries.filter((e) => !e.breaking && e.type !== "feat" && e.type !== "fix")]
+	].filter(([, list]) => list.length > 0).map(([title, list]) => `### ${title}\n\n${list.map(line).join("\n")}`).join("\n\n");
+	const heading = `## [${version}] - ${date}`;
+	return body ? `${heading}\n\n${body}` : heading;
+}
+const HEADER_RE = /^#\s*changelog\b/i;
+/**
+* 插入/替换 CHANGELOG.md 的版本段落（幂等）：
+* - 已有 `## [version]` → 整段替换为最新渲染
+* - 否则插到首个 # Changelog 标题之后；无标题/无文件 → 新建带标题
+* 返回写入路径；entries 为空也写入 heading（bump 闭环保持 tag ↔ changelog 对齐）。
+*/
+function upsertChangelog(cwd, version, section) {
+	const filePath = `${cwd}/CHANGELOG.md`;
+	let content = "";
+	if (fs.existsSync(filePath)) content = fs.readFileSync(filePath, "utf8");
+	const lines = content.split("\n");
+	const start = lines.findIndex((l) => l.startsWith(`## [${version}]`));
+	if (start >= 0) {
+		let end = lines.length;
+		for (let i = start + 1; i < lines.length; i++) if (lines[i].startsWith("## ")) {
+			end = i;
+			break;
+		}
+		content = [
+			...lines.slice(0, start),
+			...section.split("\n"),
+			"",
+			...lines.slice(end)
+		].join("\n");
+	} else if (HEADER_RE.test(content)) content = content.replace(/(^#\s*changelog\b[^\n]*\n+)/im, `$1\n${section}\n`);
+	else content = `# Changelog\n\n${section}\n${content ? `\n${content}` : ""}`;
+	fs.writeFileSync(filePath, content.endsWith("\n") ? content : `${content}\n`, "utf8");
+	return filePath;
+}
+//#endregion
+//#region src/version/version-code.ts
+/**
+* versionCode 计算：默认递增 +1；可配公式（如 major*1000000+minor*1000+patch）。
+* 实际写入 = max(公式值, 现值+1)——公式在同 versionName 重发时算出同值，
+* +1 兜底保证单调（AGC 同版本不能重复提交 / Google Play 单调 / App Store 单调）。
+*/
+/** 公式白名单求值（仅支持 + - * ( ) 数字 与 major/minor/patch 变量；不 eval） */
+function evalVersionCodeFormula(formula, v) {
+	const tokens = [];
+	let i = 0;
+	const src = formula.replace(/\s+/g, "");
+	while (i < src.length) {
+		const c = src.charAt(i);
+		if (c === "+" || c === "-" || c === "*" || c === "(" || c === ")") {
+			tokens.push({ op: c });
+			i++;
+		} else if (/\d/.test(c)) {
+			let j = i;
+			while (j < src.length && /\d/.test(src.charAt(j))) j++;
+			tokens.push({ n: Number(src.slice(i, j)) });
+			i = j;
+		} else {
+			const word = /^(major|minor|patch)/.exec(src.slice(i));
+			if (!word) return void 0;
+			const name = word[1];
+			tokens.push({ n: v[name] });
+			i += name.length;
+		}
+	}
+	if (tokens.length === 0) return void 0;
+	let pos = 0;
+	const peek = () => tokens[pos];
+	function factor() {
+		const t = peek();
+		if (!t) return void 0;
+		if ("n" in t) {
+			pos++;
+			return t.n;
+		}
+		if (t.op === "(") {
+			pos++;
+			const inner = expr();
+			const close = peek();
+			if (inner === void 0 || !close || !("op" in close) || close.op !== ")") return void 0;
+			pos++;
+			return inner;
+		}
+		if (t.op === "-") {
+			pos++;
+			const f = factor();
+			return f === void 0 ? void 0 : -f;
+		}
+	}
+	function term() {
+		let left = factor();
+		for (;;) {
+			const t = peek();
+			if (left === void 0 || !t || !("op" in t) || t.op !== "*") return left;
+			pos++;
+			const right = factor();
+			if (right === void 0) return void 0;
+			left = left * right;
+		}
+	}
+	function expr() {
+		let left = term();
+		for (;;) {
+			const t = peek();
+			if (left === void 0 || !t || !("op" in t) || t.op !== "+" && t.op !== "-") return left;
+			pos++;
+			const right = term();
+			if (right === void 0) return void 0;
+			left = t.op === "+" ? left + right : left - right;
+		}
+	}
+	const result = expr();
+	if (result === void 0 || pos !== tokens.length) return void 0;
+	return Number.isFinite(result) && Number.isInteger(result) && result > 0 ? result : void 0;
+}
+/**
+* 下一 versionCode：max(公式值, 现值+1)。
+* - 无现值（首接工程无该字段）：公式值，否则 1
+* - 有现值：至少现值+1（吞 3052/4000000 等任意历史值，首次 bump 即归一）
+*/
+function nextVersionCode(current, formulaValue) {
+	if (current === void 0) return formulaValue ?? 1;
+	return Math.max(formulaValue ?? Number.NEGATIVE_INFINITY, current + 1);
+}
+//#endregion
+//#region src/version/bump.ts
+/** 多端 versionName 的基线：取 semver 合法值中最大；全部非法 → null（需显式指定） */
+function baselineVersion(currents) {
+	let best = null;
+	for (const c of currents) {
+		const v = semver.valid(c.versionName ?? "");
+		if (v && (!best || semver.gt(v, best))) best = v;
+	}
+	return best;
+}
+/** 并发 bump 互斥锁（O_EXCL 原子创建；>10 分钟视为陈旧自动接管） */
+function acquireBumpLock(cwd) {
+	const lockPath = path.join(cwd, ".git", "applift-bump.lock");
+	try {
+		const fd = fs.openSync(lockPath, "wx");
+		fs.closeSync(fd);
+	} catch (e) {
+		if (e.code !== "EEXIST") throw e;
+		try {
+			if (Date.now() - fs.statSync(lockPath).mtimeMs > 6e5) fs.writeFileSync(lockPath, String(process.pid));
+			else return /* @__PURE__ */ new Error(`另一 bump 进程正在运行（${lockPath}）——并发 bump 会产出内容错位的提交，稍后重试或确认无并发后删除锁文件`);
+		} catch {
+			return /* @__PURE__ */ new Error(`无法获取 bump 锁（${lockPath}）`);
+		}
+	}
+	return () => {
+		try {
+			fs.unlinkSync(lockPath);
+		} catch {}
+	};
+}
+/** HEAD 提交是否是我们打的 release commit（失败重跑识别用） */
+function lastCommitIsRelease(cwd) {
+	return git(cwd, [
+		"log",
+		"-1",
+		"--format=%s"
+	]).stdout.startsWith("chore(release): ");
+}
+function planBump(opts) {
+	let anchorTag;
+	let commits = [];
+	let infer;
+	if (isGitRepo(opts.cwd)) {
+		anchorTag = latestSemverTag(opts.cwd);
+		if (anchorTag) {
+			commits = commitsSince(opts.cwd, anchorTag);
+			if (commits.length > 0) infer = inferBumpLevel(commits);
+		}
+	}
+	const currents = readProjectVersions(opts.cwd, opts.framework).filter((c) => (c.versionName || c.versionCode) && !opts.platforms || opts.platforms?.includes(c.platform));
+	const anchorVersion = anchorTag ? looseSemver(anchorTag) ?? void 0 : void 0;
+	const base = (anchorVersion ? semver.prerelease(anchorVersion) !== null : false) ? anchorVersion : baselineVersion([...currents, ...anchorVersion ? [{
+		platform: "__tag__",
+		versionName: anchorVersion
+	}] : []]);
+	if (!base) {
+		if (!opts.level || !semver.valid(opts.level)) throw new Error(`各端均无可解析的 semver versionName（${currents.map((c) => `${c.platform}=${c.versionName ?? "?"}`).join(" ")}）：显式指定目标版本，如 applift version bump 4.0.0`);
+	}
+	const decided = decideNextVersion(base ?? "0.0.0", {
+		level: opts.level,
+		pre: opts.pre
+	}, infer);
+	if (!anchorTag && !opts.level) decided.reason = "无发版锚点 tag（首次 bump）→ patch 兜底；打第一个 tag 后激活 git 推断";
+	const suspectRerun = !!anchorTag && lastCommitIsRelease(opts.cwd) && commits.every((c) => c.startsWith("chore(release): "));
+	if (suspectRerun) decided.reason += "；⚠ 锚点后无新业务提交且 HEAD 已是 release commit——疑似失败重跑，建议 --no-bump 复用已 bump 版本";
+	const formulaCfg = opts.versionCode && opts.versionCode !== "increment" ? opts.versionCode : void 0;
+	if (opts.platforms && opts.platforms.length > 0) {
+		const known = new Set(currents.map((c) => c.platform));
+		const unknown = opts.platforms.filter((p) => !known.has(p));
+		if (unknown.length > 0) throw new Error(`未知平台: ${unknown.join(", ")}（可用: ${[...known].join("/") || "无"}）`);
+	}
+	const writes = [];
+	let formulaNote = "递增 +1";
+	let formulaApplied = false;
+	const resetCodes = [];
+	for (const c of currents) {
+		if (opts.platforms && !opts.platforms.includes(c.platform)) continue;
+		const cur = c.versionCode !== void 0 && /^\d+$/.test(c.versionCode) ? Number(c.versionCode) : void 0;
+		if (c.versionCode !== void 0 && cur === void 0) resetCodes.push(`${c.platform}=${c.versionCode}`);
+		let formulaValue;
+		if (formulaCfg && (!formulaCfg.platforms || formulaCfg.platforms.includes(c.platform))) {
+			const v = new semver.SemVer(decided.next);
+			formulaValue = evalVersionCodeFormula(formulaCfg.formula, {
+				major: v.major,
+				minor: v.minor,
+				patch: v.patch
+			});
+			if (formulaValue === void 0) throw new Error(`versionCode 公式无法求值：${formulaCfg.formula}（仅支持 + - * ( ) 与 major/minor/patch）`);
+			formulaNote = `max(公式 ${formulaCfg.formula}, 现值+1)`;
+			formulaApplied = true;
+		}
+		const code = nextVersionCode(cur, formulaValue);
+		if (code > 21e8) throw new Error(`versionCode ${code} 超过商店上限 2100000000（${c.platform}）：检查公式或手动规范化`);
+		writes.push({
+			platform: c.platform,
+			versionName: storeVersionName(decided.next),
+			versionCode: code
+		});
+	}
+	if (formulaCfg && !formulaApplied && writes.length > 0) formulaNote += `；⚠ 公式 ${formulaCfg.formula} 未命中任何端${formulaCfg.platforms ? `（platforms: ${formulaCfg.platforms.join("/")}，可用端: ${writes.map((w) => w.platform).join("/")})` : ""}——全部端走 +1 兜底`;
+	if (resetCodes.length > 0) formulaNote += `；⚠ 非数字 versionCode 已从 1 重新起号（${resetCodes.join(", ")}）——商店单调性可能拒绝，建议配置 version.versionCode 公式或手动规范化`;
+	return {
+		anchorTag,
+		currentVersions: currents,
+		writes,
+		base: base ?? decided.next,
+		nextVersion: decided.next,
+		storeName: storeVersionName(decided.next),
+		reason: decided.reason,
+		infer,
+		commits,
+		suspectRerun,
+		versionCodeNote: formulaNote
+	};
+}
+function applyBump(cwd, plan, framework, opts) {
+	const lock = isGitRepo(cwd) ? acquireBumpLock(cwd) : void 0;
+	if (lock instanceof Error) throw lock;
+	try {
+		const { changed, skipped } = writeProjectVersions(cwd, framework, plan.writes);
+		if (plan.writes.length === 0) throw new Error(`没有可写入的端（读取期被丢弃或 --platform 过滤为空）——不生成 release commit/tag；catalog 引用形态需先改造为字面量`);
+		if (plan.writes.length > 0 && changed.length === 0 && skipped.length > 0) throw new Error(`所有端的版本写入均被跳过：${skipped.map((s) => `${s.platform}(${s.reason})`).join("；")}——不生成 release commit/tag`);
+		if (plan.writes.length > 0 && changed.length === 0 && skipped.length === 0) {}
+		const warnings = [];
+		if (opts.commit && isGitRepo(cwd)) {
+			const staging = new Set([...changed, `${cwd}/CHANGELOG.md`].map((f) => path.relative(cwd, f) || f));
+			const dirty = statusShort(cwd).filter((line) => {
+				const f = line.slice(3).split(" -> ").pop().trim().replace(/\/$/, "");
+				return ![...staging].some((s) => s === f || s.startsWith(`${f}/`));
+			});
+			if (dirty.length > 0) throw new Error(`工作区有计划外未提交变更，拒绝代 commit（防混入 release 提交）：\n${dirty.join("\n")}\n先提交它们或移出工作区（.gitignore），或用 --no-commit`);
+		}
+		const entries = toChangelogEntries(plan.commits);
+		const changelogFile = upsertChangelog(cwd, plan.nextVersion, renderChangelogSection(plan.nextVersion, (/* @__PURE__ */ new Date()).toISOString().slice(0, 10), entries));
+		const changedFiles = [.../* @__PURE__ */ new Set([...changed, changelogFile])];
+		let committed = false;
+		let tagged = false;
+		if (opts.commit || opts.tag) {
+			if (!isGitRepo(cwd)) warnings.push("非 git 仓库：跳过 commit/tag");
+			else {
+				const files = changedFiles.map((f) => path.relative(cwd, f) || f);
+				if (opts.commit) {
+					const add = git(cwd, [
+						"add",
+						"--",
+						...files
+					]);
+					const commit = add.ok ? git(cwd, [
+						"commit",
+						"-m",
+						`chore(release): ${plan.nextVersion}`,
+						"--",
+						...files
+					]) : add;
+					if (commit.ok) committed = true;
+					else warnings.push(`git commit 失败：${commit.stderr || commit.stdout || "未知错误"}`);
+				}
+				if (opts.tag && (!opts.commit || committed)) {
+					const tag = git(cwd, ["tag", `v${plan.nextVersion}`]);
+					if (tag.ok) tagged = true;
+					else warnings.push(`git tag 失败：${tag.stderr || tag.stdout || "未知错误"}`);
+				}
+			}
+		}
+		return {
+			changedFiles,
+			skipped,
+			changelogFile,
+			committed,
+			tagged,
+			warnings
+		};
+	} finally {
+		lock?.();
+	}
+}
+//#endregion
+//#region src/version/artifact.ts
 /**
 * 产物版本读取（只读不写——版本号变更属开发提交，发版工具只负责读版本防回退）。
 * .hap/.app：pack.info 是纯 JSON，零依赖直接读；
@@ -4084,12 +5198,17 @@ function fromPackInfo(artifactPath) {
 		if (v) return v;
 	} catch {}
 }
+/** 真实鸿蒙 pack.info schema（qy-driver 实测样本）：summary.app.version.{name,code,build}；
+*  顶层 versionName/versionCode 为历史兼容形态。 */
 function parsePackInfo(text, source) {
 	try {
 		const info = JSON.parse(text);
-		if (info.versionName || info.versionCode !== void 0) return {
-			versionName: info.versionName,
-			versionCode: String(info.versionCode ?? ""),
+		const nested = info.summary?.app?.version;
+		const versionName = nested?.name ?? info.versionName;
+		const versionCode = nested?.code ?? info.versionCode;
+		if (versionName || versionCode !== void 0) return {
+			versionName,
+			versionCode: String(versionCode ?? ""),
 			source
 		};
 	} catch {}
@@ -4123,4 +5242,4 @@ function fromAapt(artifactPath) {
 	}
 }
 //#endregion
-export { APPLIFT_HOME, AgcHarmonyChannel, AscChannel, BetaConfigSchema, CREDENTIALS_PATH, CredentialsFileSchema, CredentialsProfileSchema, DefaultChannelRegistry, GLOBAL_CONFIG_PATH, GlobalConfigSchema, GooglePlayChannel, HISTORY_PATH, HonorChannel, HuaweiAndroidChannel, OppoChannel, PROJECTS_MAP_PATH, PgyerChannel, PluginHost, ProjectConfigSchema, StoreConfigSchema, StoresSchema, VivoChannel, WAIT_BEFORE_SUBMIT_MS, XiaomiChannel, YybChannel, appendEntry, assertListingFiles, defineConfig, detectBundleIds, detectFramework, electronAdapter, findArtifacts, findUp, flutterAdapter, formPost, getAgcToken, getHarmonyAppId, hmacSign, humanizeError, loadCredentials, loadCredentialsLayered, loadGlobalConfig, loadListingFile, loadProjectConfig, loadProjectProfileMap, md5File, md5String, nativeAndroidAdapter, nativeHarmonyAdapter, nativeIosAdapter, projectCredentialsPath, readArtifactVersion, readEntries, registry, resolveListing, resolvePlugins, resolveProfile, resolveProfileFor, rnAdapter, runStage, runSubmit, saveCredentials, saveProjectProfileMap, setProjectProfile, sha256File, sortedQueryString, tauriAdapter, tsMillis, tsSeconds };
+export { APPLIFT_HOME, AgcHarmonyChannel, AscChannel, BetaConfigSchema, CREDENTIALS_PATH, CredentialsFileSchema, CredentialsProfileSchema, DefaultChannelRegistry, GLOBAL_CONFIG_PATH, GlobalConfigSchema, GooglePlayChannel, HISTORY_PATH, HonorChannel, HuaweiAndroidChannel, OppoChannel, PROJECTS_MAP_PATH, PgyerChannel, PluginHost, ProjectConfigSchema, ReleaseConfigSchema, StoreConfigSchema, StoresSchema, VersionCodeConfigSchema, VersionConfigSchema, VivoChannel, WAIT_BEFORE_SUBMIT_MS, XiaomiChannel, YybChannel, appendEntry, applyBump, assertListingFiles, commitsSince, decideNextVersion, defineConfig, detectBundleIds, detectFramework, electronAdapter, evalVersionCodeFormula, findArtifacts, findUp, flutterAdapter, formPost, getAgcToken, getHarmonyAppId, git, hmacSign, humanizeError, inferBumpLevel, isGitRepo, latestSemverTag, loadCredentials, loadCredentialsLayered, loadGlobalConfig, loadListingFile, loadProjectConfig, loadProjectProfileMap, looseSemver, md5File, md5String, nativeAndroidAdapter, nativeHarmonyAdapter, nativeIosAdapter, nextVersionCode, planBump, projectCredentialsPath, readArtifactVersion, readEntries, readProjectVersions, redactText, registry, renderChangelogSection, resolveListing, resolvePlugins, resolveProfile, resolveProfileFor, rnAdapter, runStage, runSubmit, saveCredentials, saveProjectProfileMap, setProjectProfile, sha256File, sortedQueryString, statusShort, storeVersionName, tauriAdapter, toChangelogEntries, tsMillis, tsSeconds, upsertChangelog, writeProjectVersions };