@heybox/hb-sdk 0.4.4 → 0.4.6

package/dist/cli-chunks/{deploy-BaLyuR1X.cjs → remote-zX17hOT4.cjs}

@@ -1,13 +1,12 @@
 'use strict';
 
+var promises = require('node:readline/promises');
+var session = require('./session-D7lF9mpd.cjs');
 var childProcess = require('node:child_process');
 var fs = require('node:fs');
 var fs$1 = require('node:fs/promises');
 var path = require('node:path');
-var promises = require('node:readline/promises');
-var session = require('./session-DiyDXvXu.cjs');
-var index = require('./index-Bboot1us.cjs');
-var node_crypto = require('node:crypto');
+var index = require('./index-DuwxUSkq.cjs');
 
 var re = {exports: {}};
 
@@ -2859,8 +2858,23 @@ function formatReason(error) {
 
 const MINIAPP_UPLOAD_SCOPE = 'activity';
 const ACTIVITY_UPLOAD_KEY_MAX_LENGTH = 64;
+const USER_MINIPROGRAM_ACCESS_STATUS_API_PATH = '/mall/developer/user_miniprogram/access_status';
+const DEVELOPER_ENTITY_LIST_API_PATH = '/mall/developer/entity/list';
+const DEVELOPER_ENTITY_SWITCH_API_PATH = '/mall/developer/entity/switch';
+const LIST_USER_MINIPROGRAM_API_PATH = '/mall/developer/user_miniprogram/list';
+const CREATE_USER_MINIPROGRAM_API_PATH = '/mall/developer/user_miniprogram/create';
+const UPDATE_USER_MINIPROGRAM_API_PATH = '/mall/developer/user_miniprogram/update';
+const DETAIL_USER_MINIPROGRAM_API_PATH = '/mall/developer/user_miniprogram/detail';
+const USER_MINIPROGRAM_PREVIEW_ALLOWLIST_API_PATH = '/mall/developer/user_miniprogram/preview_allowlist';
+const UPDATE_USER_MINIPROGRAM_PREVIEW_ALLOWLIST_API_PATH = '/mall/developer/user_miniprogram/preview_allowlist/update';
 const PRECHECK_USER_MINIPROGRAM_VERSION_API_PATH = '/mall/developer/user_miniprogram/version/precheck';
 const SUBMIT_USER_MINIPROGRAM_AUDIT_API_PATH = '/mall/developer/user_miniprogram/version/submit_audit';
+const USER_MINIPROGRAM_VERSION_PREVIEW_INFO_API_PATH = '/mall/developer/user_miniprogram/version/preview_info';
+const WITHDRAW_USER_MINIPROGRAM_VERSION_API_PATH = '/mall/developer/user_miniprogram/version/withdraw';
+const RELEASE_USER_MINIPROGRAM_VERSION_API_PATH = '/mall/developer/user_miniprogram/version/release';
+const TAKE_DOWN_USER_MINIPROGRAM_API_PATH = '/mall/developer/user_miniprogram/take_down';
+const REOPEN_USER_MINIPROGRAM_API_PATH = '/mall/developer/user_miniprogram/reopen';
+const LIST_USER_MINIPROGRAM_VERSION_API_PATH = '/mall/developer/user_miniprogram/version/list';
 const FNV_OFFSET = 0x811c9dc5;
 const FNV_PRIME = 0x01000193;
 function normalizeRelativePath(relativePath) {
@@ -2919,281 +2933,6 @@ function shouldUploadDistFile(relativePath) {
     return true;
 }
 
-const globalHeyboxCliRequestConfig = {};
-function readHeyboxCliRequestConfig() {
-    return normalizeHeyboxRylaiServiceTagConfig(globalHeyboxCliRequestConfig);
-}
-function resolveHeyboxRylaiServiceTag(pathWithQuery, config = readHeyboxCliRequestConfig()) {
-    const normalized = normalizeHeyboxRylaiServiceTagConfig(config);
-    const pathname = pathWithQuery ? getPathname(pathWithQuery) : '';
-    const specialTag = normalized.special_tag;
-    if (pathname && specialTag?.path_prefix_list.some((prefix) => pathname.startsWith(prefix))) {
-        return specialTag.tag_name;
-    }
-    return normalized.default_tag;
-}
-function normalizeHeyboxRylaiServiceTagConfig(config) {
-    const defaultTag = normalizeHeyboxRylaiServiceTag(config.default_tag);
-    const specialTagName = normalizeHeyboxRylaiServiceTag(config.special_tag?.tag_name);
-    const pathPrefixList = config.special_tag?.path_prefix_list?.filter(isValidPathPrefix) || [];
-    return {
-        ...(defaultTag ? { default_tag: defaultTag } : {}),
-        ...(specialTagName && pathPrefixList.length
-            ? {
-                special_tag: {
-                    tag_name: specialTagName,
-                    path_prefix_list: pathPrefixList,
-                },
-            }
-            : {}),
-    };
-}
-function normalizeHeyboxRylaiServiceTag(value) {
-    const tag = String(value ?? '').trim();
-    if (!tag) {
-        return undefined;
-    }
-    if (/[\r\n]/.test(tag)) {
-        throw new Error('x-rylai-service-tag 不允许包含换行符');
-    }
-    return tag;
-}
-function isValidPathPrefix(value) {
-    return typeof value === 'string' && value.startsWith('/') && !/[\r\n]/.test(value);
-}
-function getPathname(pathWithQuery) {
-    try {
-        return new URL(pathWithQuery, 'https://api.xiaoheihe.cn').pathname;
-    }
-    catch {
-        return '';
-    }
-}
-
-const SIGN_VERSION = '999.0.4';
-const SIGN_CHARSET = 'AB45STUVWZEFGJ6CH01D237IXYPQRKLMN89';
-function createHeyboxOpenPlatformSignParams(pathname, options = {}) {
-    const now = options.now ?? new Date();
-    const time = Math.trunc(now.getTime() / 1000);
-    const nonce = options.nonce ?? md5(`${time}${Date.now()}${node_crypto.randomBytes(16).toString('hex')}`).toUpperCase();
-    return {
-        version: SIGN_VERSION,
-        hkey: generateSignature(pathname, time + 1, nonce),
-        _time: time,
-        nonce,
-    };
-}
-function generateSignature(path, time, nonce) {
-    const normalizedPath = `/${path
-        .split('/')
-        .filter(Boolean)
-        .join('/')}/`;
-    const transformedTime = transformWithOffset(String(time), SIGN_CHARSET, -2);
-    const transformedPath = transform(normalizedPath, SIGN_CHARSET);
-    const transformedNonce = transform(nonce, SIGN_CHARSET);
-    const combined = interleave([transformedTime, transformedPath, transformedNonce]).slice(0, 20);
-    const hash = md5(combined);
-    let sign = `${mixColumns(hash.slice(-6).split('').map((char) => char.charCodeAt(0))).reduce((sum, value) => sum + value, 0) % 100}`;
-    sign = sign.length < 2 ? `0${sign}` : sign;
-    return `${transformWithOffset(hash.substring(0, 5), SIGN_CHARSET, -4)}${sign}`;
-}
-function transformWithOffset(str, charset, offset) {
-    return transform(str, charset.slice(0, offset));
-}
-function transform(str, charset) {
-    let output = '';
-    for (let index = 0; index < str.length; index += 1) {
-        output += charset[str.charCodeAt(index) % charset.length];
-    }
-    return output;
-}
-function interleave(strings) {
-    let output = '';
-    const maxLength = Math.max(...strings.map((str) => str.length));
-    for (let index = 0; index < maxLength; index += 1) {
-        for (const str of strings) {
-            if (index < str.length) {
-                output += str[index];
-            }
-        }
-    }
-    return output;
-}
-function mixColumns(column) {
-    const output = [...column];
-    output[0] = multiplyE(column[0]) ^ multiply4(column[1]) ^ multiply3(column[2]) ^ multiply2(column[3]);
-    output[1] = multiply2(column[0]) ^ multiplyE(column[1]) ^ multiply4(column[2]) ^ multiply3(column[3]);
-    output[2] = multiply3(column[0]) ^ multiply2(column[1]) ^ multiplyE(column[2]) ^ multiply4(column[3]);
-    output[3] = multiply4(column[0]) ^ multiply3(column[1]) ^ multiply2(column[2]) ^ multiplyE(column[3]);
-    return output;
-}
-function multiply1(value) {
-    if (value & 0x80) {
-        return ((value << 1) ^ 0x1b) & 0xff;
-    }
-    return value << 1;
-}
-function multiply2(value) {
-    return multiply1(value) ^ value;
-}
-function multiply3(value) {
-    return multiply2(multiply1(value));
-}
-function multiply4(value) {
-    return multiply3(multiply2(multiply1(value)));
-}
-function multiplyE(value) {
-    return multiply4(value) ^ multiply3(value) ^ multiply2(value);
-}
-function md5(input) {
-    return node_crypto.createHash('md5').update(input).digest('hex');
-}
-
-const DEFAULT_PLATFORM_PARAMS = {
-    os_type: 'web',
-    app: 'heybox',
-    x_client_type: 'web',
-    x_os_type: 'Mac',
-    x_app: 'heybox',
-    x_client_version: '999.999.999',
-};
-const HEYBOX_WEB_REFERER = 'https://www.xiaoheihe.cn/';
-function resolveHeyboxId(session) {
-    if (session.heyboxId.trim()) {
-        return session.heyboxId.trim();
-    }
-    return session.cookieHeader
-        .split(';')
-        .map((part) => part.trim())
-        .find((part) => part.startsWith('heybox_id='))
-        ?.slice('heybox_id='.length);
-}
-function createHeyboxAuthHeaders(session, options = {}) {
-    const serviceTag = resolveHeyboxRylaiServiceTag(options.pathWithQuery);
-    return {
-        Cookie: session.cookieHeader,
-        Referer: HEYBOX_WEB_REFERER,
-        ...(options.contentType ? { 'Content-Type': options.contentType } : {}),
-        ...(serviceTag ? { 'x-rylai-service-tag': serviceTag } : {}),
-    };
-}
-function createHeyboxRequestContext(session$1, options = {}) {
-    const heyboxId = resolveHeyboxId(session$1);
-    const serviceTag = resolveHeyboxRylaiServiceTag(options.pathWithQuery);
-    return {
-        baseUrl: session.HEYBOX_API_BASE_URL,
-        headers: createHeyboxAuthHeaders(session$1, options),
-        platformParams: {
-            ...DEFAULT_PLATFORM_PARAMS,
-            ...options.platformParams,
-            ...(heyboxId ? { heybox_id: heyboxId } : {}),
-            ...(serviceTag ? { special_tag: serviceTag } : {}),
-        },
-    };
-}
-function createHeyboxOpenPlatformRequestContext(session, pathWithQuery, options = {}) {
-    return createHeyboxRequestContext(session, {
-        ...options,
-        pathWithQuery,
-        platformParams: {
-            x_app: 'heybox_website',
-            ...createHeyboxOpenPlatformSignParams(getApiPathname(pathWithQuery)),
-            ...options.platformParams,
-        },
-    });
-}
-function createHeyboxApiUrl(baseUrl, pathWithQuery, params) {
-    const url = new URL(pathWithQuery, baseUrl);
-    for (const [key, value] of Object.entries(params)) {
-        if (value !== '') {
-            url.searchParams.set(key, String(value));
-        }
-    }
-    return url.toString();
-}
-function getApiPathname(pathWithQuery) {
-    return new URL(pathWithQuery, session.HEYBOX_API_BASE_URL).pathname;
-}
-const ENVELOPE_BODY_PREVIEW_LENGTH = 1000;
-async function readHeyboxApiEnvelope(response, options) {
-    const rawBody = await response.text();
-    let envelope = null;
-    let parseError = null;
-    if (rawBody) {
-        try {
-            envelope = JSON.parse(rawBody);
-        }
-        catch (error) {
-            parseError = error;
-        }
-    }
-    const envelopeOk = envelope?.status === 'ok' && (!options.requireResult || envelope?.result !== undefined);
-    if (response.ok && envelopeOk) {
-        return envelope.result;
-    }
-    const { message, verboseMessage } = formatHeyboxEnvelopeError({
-        response,
-        envelope,
-        parseError,
-        rawBody,
-        pathWithQuery: options.pathWithQuery,
-    });
-    throw new index.CliError(message, verboseMessage);
-}
-function formatHeyboxEnvelopeError(input) {
-    const parts = [`Heybox API ${input.pathWithQuery} failed`, `HTTP ${input.response.status}`];
-    if (input.envelope) {
-        const msg = typeof input.envelope.msg === 'string' ? input.envelope.msg.trim() : '';
-        const sbeUserMessage = readSbeUserMessage(input.envelope.result);
-        parts.push(`msg=${msg || '(empty)'}`);
-        if (typeof input.envelope.status === 'string') {
-            parts.push(`envelope.status=${input.envelope.status}`);
-        }
-        const { status: _s, msg: _m, result: _r, ...extras } = input.envelope;
-        if (Object.keys(extras).length > 0) {
-            parts.push(`extras=${truncate(safeJsonStringify(extras), ENVELOPE_BODY_PREVIEW_LENGTH)}`);
-        }
-        if (input.envelope.result !== undefined) {
-            parts.push(`result=${truncate(safeJsonStringify(input.envelope.result), ENVELOPE_BODY_PREVIEW_LENGTH)}`);
-        }
-        return {
-            message: sbeUserMessage || msg || `Heybox API ${input.pathWithQuery} 请求失败`,
-            verboseMessage: parts.join(' '),
-        };
-    }
-    if (input.parseError) {
-        const parseMsg = input.parseError instanceof Error ? input.parseError.message : String(input.parseError);
-        parts.push(`parseError=${parseMsg}`);
-    }
-    parts.push(input.rawBody ? `body=${truncate(input.rawBody, ENVELOPE_BODY_PREVIEW_LENGTH)}` : 'body=(empty)');
-    return {
-        message: `Heybox API ${input.pathWithQuery} 请求失败`,
-        verboseMessage: parts.join(' '),
-    };
-}
-function readSbeUserMessage(result) {
-    if (!result || typeof result !== 'object') {
-        return '';
-    }
-    const sbe = result.sbe;
-    if (!sbe || typeof sbe !== 'object') {
-        return '';
-    }
-    const userMessage = sbe.user_message;
-    return typeof userMessage === 'string' ? userMessage.trim() : '';
-}
-function truncate(value, max) {
-    return value.length > max ? `${value.slice(0, max)}...(+${value.length - max} chars)` : value;
-}
-function safeJsonStringify(value) {
-    try {
-        return JSON.stringify(value);
-    }
-    catch {
-        return String(value);
-    }
-}
-
 async function getCDNUploadInfo(options, runtime = {}) {
     const body = new URLSearchParams();
     body.set('file_infos', JSON.stringify(options.fileInfos));
@@ -3215,17 +2954,17 @@ async function postCDNUploadCallback(options, runtime = {}) {
     const query = options.isFinished ? '?is_finished=true' : '';
     return postHeyboxApi(`/bbs/app/api/qcloud/cos/upload/callback/v2${query}`, body, options.session, runtime);
 }
-async function postHeyboxApi(pathWithQuery, body, session, runtime) {
+async function postHeyboxApi(pathWithQuery, body, session$1, runtime) {
     const fetchImpl = runtime.fetchImpl ?? fetch;
-    const context = createHeyboxOpenPlatformRequestContext(session, pathWithQuery, {
+    const context = session.createHeyboxOpenPlatformRequestContext(session$1, pathWithQuery, {
         contentType: 'application/x-www-form-urlencoded',
     });
-    const response = await fetchImpl(createHeyboxApiUrl(runtime.baseUrl ?? context.baseUrl, pathWithQuery, context.platformParams), {
+    const response = await fetchImpl(session.createHeyboxApiUrl(runtime.baseUrl ?? context.baseUrl, pathWithQuery, context.platformParams), {
         method: 'POST',
         headers: context.headers,
         body: body.toString(),
     });
-    const result = await readHeyboxApiEnvelope(response, { pathWithQuery, requireResult: true });
+    const result = await session.readHeyboxApiEnvelope(response, { pathWithQuery, requireResult: true });
     return result;
 }
 
@@ -3328,7 +3067,7 @@ async function createDefaultCosClient(uploadToken) {
     };
 }
 async function loadCosConstructor() {
-    const cosModule = await Promise.resolve().then(function () { return require('./index-D7-awGYB.cjs'); }).then(function (n) { return n.index; });
+    const cosModule = await Promise.resolve().then(function () { return require('./index-CLne_LW7.cjs'); }).then(function (n) { return n.index; });
     return cosModule.default;
 }
 function formatSize(bytes) {
@@ -3371,14 +3110,14 @@ function isRecord(value) {
     return Object.prototype.toString.call(value) === '[object Object]';
 }
 
-async function precheckUserMiniprogramVersion(options, runtime = {}) {
+async function precheckUserMiniprogramVersion$1(options, runtime = {}) {
     return postUserMiniprogramVersionForm(PRECHECK_USER_MINIPROGRAM_VERSION_API_PATH, options, {
         version: options.version,
         release_note: options.releaseNote,
         auto_publish: String(options.autoPublish),
     }, runtime);
 }
-async function submitUserMiniprogramAudit(options, runtime = {}) {
+async function submitUserMiniprogramAudit$1(options, runtime = {}) {
     return postUserMiniprogramVersionForm(SUBMIT_USER_MINIPROGRAM_AUDIT_API_PATH, options, {
         manifest: JSON.stringify(options.manifest),
         release_note: options.releaseNote,
@@ -3387,7 +3126,7 @@ async function submitUserMiniprogramAudit(options, runtime = {}) {
 }
 async function postUserMiniprogramVersionForm(path, options, fields, runtime) {
     const fetchImpl = runtime.fetchImpl ?? fetch;
-    const context = createHeyboxOpenPlatformRequestContext(options.session, path, {
+    const context = session.createHeyboxOpenPlatformRequestContext(options.session, path, {
         contentType: 'application/x-www-form-urlencoded',
     });
     const body = new URLSearchParams();
@@ -3395,12 +3134,12 @@ async function postUserMiniprogramVersionForm(path, options, fields, runtime) {
     for (const [key, value] of Object.entries(fields)) {
         body.set(key, value);
     }
-    const response = await fetchImpl(createHeyboxApiUrl(runtime.baseUrl ?? context.baseUrl, path, context.platformParams), {
+    const response = await fetchImpl(session.createHeyboxApiUrl(runtime.baseUrl ?? context.baseUrl, path, context.platformParams), {
         method: 'POST',
         headers: context.headers,
         body: body.toString(),
     });
-    const result = await readHeyboxApiEnvelope(response, {
+    const result = await session.readHeyboxApiEnvelope(response, {
         pathWithQuery: path,
     });
     return result ?? {};
@@ -3460,7 +3199,10 @@ async function runDeployCommand(options, runtime = {}) {
         }, runtime, apiBaseUrl, projectRoot, logger);
         const pm = detectPackageManager(projectRoot);
         logger.info(`开始构建: ${pm} run build`);
-        await runBuildScript(pm, projectRoot, runtime.spawn ?? childProcess.spawn);
+        await runBuildScript(pm, projectRoot, runtime.spawn ?? childProcess.spawn, {
+            outputMode: options.buildOutputMode ?? 'inherit',
+            stderr: runtime.stderr,
+        });
         logger.success('构建完成');
     }
     else {
@@ -3502,15 +3244,36 @@ async function runDeployCommand(options, runtime = {}) {
         throw translateHeyboxDeployError(error, { projectRoot, stage: 'upload', version });
     }
     try {
-        submitAuditResult = await logger.task('正在提交审核', () => (runtime.submitUserMiniprogramAudit ?? submitUserMiniprogramAudit)({ session: session$1, miniProgramId, manifest, releaseNote, autoPublish }, { baseUrl: apiBaseUrl, fetchImpl: runtime.fetchImpl }), { successText: '审核提交完成' });
+        submitAuditResult = await logger.task('正在提交审核', () => (runtime.submitUserMiniprogramAudit ?? submitUserMiniprogramAudit$1)({ session: session$1, miniProgramId, manifest, releaseNote, autoPublish }, { baseUrl: apiBaseUrl, fetchImpl: runtime.fetchImpl }), { successText: '审核提交完成' });
     }
     catch (error) {
         throw translateHeyboxDeployError(error, { projectRoot, stage: 'submitAudit', version });
     }
-    logger.success(`提交审核成功：${miniProgramId} ${version}`);
-    logger.info(`发布策略：${autoPublish ? '审核通过后自动发布' : '审核通过后需在开放平台手动发布'}`);
-    if (submitAuditResult.preview_url) {
-        logger.info(`Preview URL: ${submitAuditResult.preview_url}`);
+    printDeploySuccess({ autoPublish, logger, miniProgramId, mode: options.successOutputMode ?? 'legacy', previewUrl: submitAuditResult.preview_url, version });
+    return {
+        autoPublish,
+        changed: true,
+        miniProgramId,
+        ...(submitAuditResult.preview_url ? { previewUrl: submitAuditResult.preview_url } : {}),
+        version,
+    };
+}
+function printDeploySuccess(options) {
+    options.logger.success(`提交审核成功：${options.miniProgramId} ${options.version}`);
+    if (options.mode === 'remote') {
+        options.logger.info(`发布策略：${options.autoPublish ? '审核通过后自动发布' : '审核通过后需手动发布'}`);
+        if (options.previewUrl) {
+            options.logger.info(`Preview URL: ${options.previewUrl}`);
+            options.logger.info('允许他人预览：hb-sdk remote allowlist add <heybox_id>');
+        }
+        options.logger.info(options.autoPublish
+            ? '下一步：hb-sdk remote versions'
+            : `下一步：hb-sdk remote versions；审核通过后运行 hb-sdk remote release ${options.version}`);
+        return;
+    }
+    options.logger.info(`发布策略：${options.autoPublish ? '审核通过后自动发布' : '审核通过后需在开放平台手动发布'}`);
+    if (options.previewUrl) {
+        options.logger.info(`Preview URL: ${options.previewUrl}`);
     }
 }
 function findProjectRoot(startDir) {
@@ -3574,7 +3337,7 @@ async function maybePromptReleaseNote(runtime) {
     }
     const isTTY = runtime.isTTY ?? Boolean(process.stdin.isTTY && process.stdout.isTTY);
     if (!isTTY) {
-        throw new Error('非交互环境执行 hb-sdk deploy 必须传 --release-note <text>');
+        throw new Error('非交互环境执行 hb-sdk remote deploy 必须传 --release-note <text>');
     }
     const input = runtime.stdin ?? process.stdin;
     const output = runtime.stdout ?? process.stdout;
@@ -3588,7 +3351,7 @@ async function maybePromptReleaseNote(runtime) {
 }
 async function runVersionPrecheck(options, runtime, apiBaseUrl, projectRoot, logger) {
     try {
-        await logger.task(`正在预检版本 ${options.version}`, () => (runtime.precheckUserMiniprogramVersion ?? precheckUserMiniprogramVersion)(options, {
+        await logger.task(`正在预检版本 ${options.version}`, () => (runtime.precheckUserMiniprogramVersion ?? precheckUserMiniprogramVersion$1)(options, {
             baseUrl: apiBaseUrl,
             fetchImpl: runtime.fetchImpl,
         }), { successText: `版本 ${options.version} 预检通过` });
@@ -3605,12 +3368,18 @@ function detectPackageManager(projectRoot) {
     }
     return 'npm';
 }
-async function runBuildScript(pm, cwd, spawnImpl) {
+async function runBuildScript(pm, cwd, spawnImpl, options) {
     await new Promise((resolve, reject) => {
+        const pipeStdoutToStderr = options.outputMode === 'stderr';
         const child = spawnImpl(pm, ['run', 'build'], {
             cwd,
-            stdio: 'inherit',
+            stdio: pipeStdoutToStderr ? ['inherit', 'pipe', 'inherit'] : 'inherit',
         });
+        if (pipeStdoutToStderr) {
+            child.stdout?.on('data', (chunk) => {
+                (options.stderr ?? process.stderr).write(chunk);
+            });
+        }
         child.on('error', reject);
         child.on('exit', (code) => {
             if (code === 0) {
@@ -3719,12 +3488,947 @@ function suggestNextPatchVersion(version) {
     return `${matched[1]}.${matched[2]}.${Number(matched[3]) + 1}`;
 }
 
-var deploy = /*#__PURE__*/Object.freeze({
+function createRemoteApiClient(options) {
+    return {
+        listDeveloperEntities: () => listDeveloperEntities(options),
+        switchDeveloperEntity: (requestOptions) => switchDeveloperEntity(requestOptions, options),
+        getDeveloperAccessStatus: () => getDeveloperAccessStatus(options),
+        listUserMiniprograms: (requestOptions = {}) => listUserMiniprograms(requestOptions, options),
+        createUserMiniprogram: (requestOptions) => createUserMiniprogram(requestOptions, options),
+        updateUserMiniprogram: (requestOptions) => updateUserMiniprogram(requestOptions, options),
+        getUserMiniprogramDetail: (requestOptions) => getUserMiniprogramDetail(requestOptions, options),
+        getPreviewAllowlist: (requestOptions) => getPreviewAllowlist(requestOptions, options),
+        updatePreviewAllowlist: (requestOptions) => updatePreviewAllowlist(requestOptions, options),
+        precheckUserMiniprogramVersion: (requestOptions) => precheckUserMiniprogramVersion(requestOptions, options),
+        submitUserMiniprogramAudit: (requestOptions) => submitUserMiniprogramAudit(requestOptions, options),
+        getVersionPreviewInfo: (requestOptions) => getVersionPreviewInfo(requestOptions, options),
+        withdrawUserMiniprogramVersion: (requestOptions) => withdrawUserMiniprogramVersion(requestOptions, options),
+        releaseUserMiniprogramVersion: (requestOptions) => releaseUserMiniprogramVersion(requestOptions, options),
+        takeDownUserMiniprogram: (requestOptions) => takeDownUserMiniprogram(requestOptions, options),
+        reopenUserMiniprogram: (requestOptions) => reopenUserMiniprogram(requestOptions, options),
+        listUserMiniprogramVersions: (requestOptions) => listUserMiniprogramVersions(requestOptions, options),
+    };
+}
+async function listDeveloperEntities(runtime) {
+    return remoteGet(DEVELOPER_ENTITY_LIST_API_PATH, {}, runtime);
+}
+async function switchDeveloperEntity(options, runtime) {
+    return (await remotePostForm(DEVELOPER_ENTITY_SWITCH_API_PATH, options, runtime, { requireResult: false })) ?? {};
+}
+async function getDeveloperAccessStatus(runtime) {
+    return remoteGet(USER_MINIPROGRAM_ACCESS_STATUS_API_PATH, {}, runtime);
+}
+async function listUserMiniprograms(options, runtime) {
+    return remoteGet(LIST_USER_MINIPROGRAM_API_PATH, options, runtime);
+}
+async function createUserMiniprogram(options, runtime) {
+    return remotePostForm(CREATE_USER_MINIPROGRAM_API_PATH, options, runtime);
+}
+async function updateUserMiniprogram(options, runtime) {
+    return remotePostForm(UPDATE_USER_MINIPROGRAM_API_PATH, options, runtime);
+}
+async function getUserMiniprogramDetail(options, runtime) {
+    return remoteGet(DETAIL_USER_MINIPROGRAM_API_PATH, options, runtime);
+}
+async function getPreviewAllowlist(options, runtime) {
+    return remoteGet(USER_MINIPROGRAM_PREVIEW_ALLOWLIST_API_PATH, options, runtime);
+}
+async function updatePreviewAllowlist(options, runtime) {
+    return remotePostForm(UPDATE_USER_MINIPROGRAM_PREVIEW_ALLOWLIST_API_PATH, options, runtime);
+}
+async function precheckUserMiniprogramVersion(options, runtime) {
+    return remotePostForm(PRECHECK_USER_MINIPROGRAM_VERSION_API_PATH, options, runtime);
+}
+async function submitUserMiniprogramAudit(options, runtime) {
+    return remotePostForm(SUBMIT_USER_MINIPROGRAM_AUDIT_API_PATH, {
+        ...options,
+        manifest: typeof options.manifest === 'string' ? options.manifest : JSON.stringify(options.manifest),
+    }, runtime);
+}
+async function getVersionPreviewInfo(options, runtime) {
+    return remoteGet(USER_MINIPROGRAM_VERSION_PREVIEW_INFO_API_PATH, options, runtime);
+}
+async function withdrawUserMiniprogramVersion(options, runtime) {
+    return remotePostForm(WITHDRAW_USER_MINIPROGRAM_VERSION_API_PATH, options, runtime);
+}
+async function releaseUserMiniprogramVersion(options, runtime) {
+    return remotePostForm(RELEASE_USER_MINIPROGRAM_VERSION_API_PATH, options, runtime);
+}
+async function takeDownUserMiniprogram(options, runtime) {
+    return remotePostForm(TAKE_DOWN_USER_MINIPROGRAM_API_PATH, options, runtime);
+}
+async function reopenUserMiniprogram(options, runtime) {
+    return remotePostForm(REOPEN_USER_MINIPROGRAM_API_PATH, options, runtime);
+}
+async function listUserMiniprogramVersions(options, runtime) {
+    return remoteGet(LIST_USER_MINIPROGRAM_VERSION_API_PATH, options, runtime);
+}
+async function remoteGet(path, query, runtime) {
+    const pathWithQuery = createPathWithQuery(path, query);
+    const context = session.createHeyboxOpenPlatformRequestContext(runtime.session, pathWithQuery);
+    const fetchImpl = runtime.fetchImpl ?? fetch;
+    const response = await fetchImpl(session.createHeyboxApiUrl(runtime.baseUrl ?? context.baseUrl, pathWithQuery, context.platformParams), {
+        method: 'GET',
+        headers: context.headers,
+    });
+    return readRequiredResult(response, pathWithQuery);
+}
+async function remotePostForm(path, fields, runtime, options = {}) {
+    const context = session.createHeyboxOpenPlatformRequestContext(runtime.session, path, {
+        contentType: 'application/x-www-form-urlencoded',
+    });
+    const fetchImpl = runtime.fetchImpl ?? fetch;
+    const response = await fetchImpl(session.createHeyboxApiUrl(runtime.baseUrl ?? context.baseUrl, path, context.platformParams), {
+        method: 'POST',
+        headers: context.headers,
+        body: createFormBody(fields),
+    });
+    if (options.requireResult === false) {
+        return readOptionalResult(response, path);
+    }
+    return readRequiredResult(response, path);
+}
+async function readRequiredResult(response, pathWithQuery) {
+    const result = await session.readHeyboxApiEnvelope(response, { pathWithQuery, requireResult: true });
+    return result;
+}
+async function readOptionalResult(response, pathWithQuery) {
+    return session.readHeyboxApiEnvelope(response, { pathWithQuery, requireResult: false });
+}
+function createPathWithQuery(path, query) {
+    const params = new URLSearchParams();
+    for (const [key, value] of Object.entries(query)) {
+        if (value !== undefined && value !== null && value !== '') {
+            params.set(key, String(value));
+        }
+    }
+    const queryString = params.toString();
+    return queryString ? `${path}?${queryString}` : path;
+}
+function createFormBody(fields) {
+    const body = new URLSearchParams();
+    for (const [key, value] of Object.entries(fields)) {
+        if (value === undefined || value === null) {
+            continue;
+        }
+        if (Array.isArray(value)) {
+            body.set(key, value.join(','));
+            continue;
+        }
+        if (typeof value === 'object') {
+            body.set(key, JSON.stringify(value));
+            continue;
+        }
+        body.set(key, String(value));
+    }
+    return body.toString();
+}
+
+class MiniProgramProjectBindingError extends Error {
+    code;
+    constructor(message, code) {
+        super(message);
+        this.code = code;
+        this.name = 'MiniProgramProjectBindingError';
+    }
+}
+function findMiniProgramProjectRoot(startDir) {
+    let current = path.resolve(startDir);
+    while (true) {
+        if (fs.existsSync(path.join(current, 'package.json'))) {
+            return current;
+        }
+        const parent = path.dirname(current);
+        if (parent === current) {
+            throw new MiniProgramProjectBindingError('当前目录或父目录未找到 package.json', 'PACKAGE_JSON_NOT_FOUND');
+        }
+        current = parent;
+    }
+}
+async function readMiniProgramProjectPackage(startDir) {
+    const projectRoot = findMiniProgramProjectRoot(startDir);
+    const packageJsonPath = path.join(projectRoot, 'package.json');
+    const raw = await fs$1.readFile(packageJsonPath, 'utf8');
+    let packageJson;
+    try {
+        packageJson = JSON.parse(raw);
+    }
+    catch (error) {
+        const message = error instanceof Error ? error.message : String(error);
+        throw new MiniProgramProjectBindingError(`package.json 不是合法 JSON：${packageJsonPath}\n${message}`, 'PACKAGE_JSON_INVALID');
+    }
+    return {
+        projectRoot,
+        packageJsonPath,
+        packageJson,
+        raw,
+        indent: detectJsonIndent(raw),
+        trailingNewline: raw.endsWith('\r\n') ? '\r\n' : raw.endsWith('\n') ? '\n' : '',
+    };
+}
+function readBoundMiniProgramIdFromPackageJson(packageJson) {
+    const value = packageJson.heybox?.miniProgramId;
+    return typeof value === 'string' && value.trim() ? value.trim() : undefined;
+}
+async function writeBoundMiniProgramId(startDir, miniProgramId, options = {}) {
+    const context = await readMiniProgramProjectPackage(startDir);
+    const normalizedMiniProgramId = String(miniProgramId).trim();
+    if (!normalizedMiniProgramId) {
+        throw new MiniProgramProjectBindingError('miniProgramId 不能为空', 'PACKAGE_JSON_INVALID');
+    }
+    const currentMiniProgramId = readBoundMiniProgramIdFromPackageJson(context.packageJson);
+    if (currentMiniProgramId && currentMiniProgramId !== normalizedMiniProgramId && !options.force) {
+        throw new MiniProgramProjectBindingError(`当前项目已绑定小程序 ${currentMiniProgramId}。如需覆盖本地绑定，请使用 --force。`, 'MINI_PROGRAM_BINDING_EXISTS');
+    }
+    if (currentMiniProgramId === normalizedMiniProgramId) {
+        return {
+            ...context,
+            changed: false,
+            miniProgramId: normalizedMiniProgramId,
+        };
+    }
+    if (context.packageJson.heybox !== undefined && !isPlainObject(context.packageJson.heybox)) {
+        throw new MiniProgramProjectBindingError('package.json heybox 字段必须是对象，不能写入 miniProgramId', 'PACKAGE_JSON_HEYBOX_INVALID');
+    }
+    context.packageJson.heybox = {
+        ...(context.packageJson.heybox ?? {}),
+        miniProgramId: normalizedMiniProgramId,
+    };
+    await fs$1.writeFile(context.packageJsonPath, `${JSON.stringify(context.packageJson, null, context.indent)}${context.trailingNewline || '\n'}`, 'utf8');
+    return {
+        ...context,
+        changed: true,
+        miniProgramId: normalizedMiniProgramId,
+    };
+}
+function detectJsonIndent(raw) {
+    const match = raw.match(/\n(\s+)"[^"]+":/);
+    return match?.[1] ?? 2;
+}
+function isPlainObject(value) {
+    return Object.prototype.toString.call(value) === '[object Object]';
+}
+
+async function resolveRemoteEnvironment(options = {}, runtime = {}) {
+    const env = options.env ?? process.env;
+    const apiBaseUrl = session.resolveHeyboxApiBaseUrl({ ...options, env });
+    const loginBaseUrl = session.resolveHeyboxLoginBaseUrl({ ...options, env });
+    const session$1 = options.session ?? (await (runtime.requireAuthSession ?? session.requireHeyboxAuthSession)({ loginBaseUrl }));
+    return {
+        apiBaseUrl,
+        loginBaseUrl,
+        allowUnsafeApiBaseUrl: options.allowUnsafeApiBaseUrl === true || isTruthyEnvFlag(env.HB_SDK_ALLOW_UNSAFE_API_BASE_URL),
+        env,
+        fetchImpl: runtime.fetchImpl ?? options.fetchImpl ?? fetch,
+        session: session$1,
+    };
+}
+function createRemoteApiClientForEnvironment(environment) {
+    return createRemoteApiClient({
+        baseUrl: environment.apiBaseUrl,
+        fetchImpl: environment.fetchImpl,
+        session: environment.session,
+    });
+}
+function isTruthyEnvFlag(value) {
+    return ['1', 'true', 'yes', 'on'].includes(String(value ?? '')
+        .trim()
+        .toLowerCase());
+}
+
+async function runRemoteCommand(options, runtime = {}) {
+    if (options.command === 'deploy') {
+        return runRemoteDeployCommand(options, runtime);
+    }
+    const context = await createRemoteCommandContext(options, runtime);
+    switch (options.command) {
+        case 'access':
+            return remoteAccess(options, context, runtime);
+        case 'entity:list':
+            return remoteEntityList(options, context, runtime);
+        case 'entity:current':
+            return remoteEntityCurrent(options, context, runtime);
+        case 'entity:switch':
+            return remoteEntitySwitch(options, context, runtime);
+        case 'list':
+            return remoteList(options, context, runtime);
+        case 'create':
+            return remoteCreate(options, context, runtime);
+        case 'bind':
+            return remoteBind(options, context, runtime);
+        case 'info':
+            return remoteInfo(options, context, runtime);
+        case 'update':
+            return remoteUpdate(options, context, runtime);
+        case 'allowlist:list':
+            return remoteAllowlistList(options, context, runtime);
+        case 'allowlist:add':
+        case 'allowlist:remove':
+        case 'allowlist:set':
+            return remoteAllowlistWrite(options, context, runtime);
+        case 'versions':
+            return remoteVersions(options, context, runtime);
+        case 'preview':
+            return remotePreview(options, context, runtime);
+        case 'release':
+        case 'withdraw':
+        case 'take-down':
+        case 'reopen':
+            return remoteDangerousWrite(options, context, runtime);
+        default:
+            throw new Error(`不支持的 remote 命令：${String(options.command)}`);
+    }
+}
+async function runRemoteDeployCommand(options, runtime) {
+    const logger = resolveRemoteLogger(options, runtime);
+    const context = await createRemoteCommandContext(options, runtime);
+    const miniProgramId = requireBinding(context);
+    await assertBoundMiniProgramEntityMatchesCurrent(context, miniProgramId);
+    const deployRuntime = {
+        cwd: runtime.cwd,
+        fetchImpl: runtime.fetchImpl,
+        isTTY: runtime.isTTY,
+        logger: options.json ? createJsonSafeLogger(runtime) : logger,
+        requireAuthSession: runtime.requireAuthSession,
+        stdin: runtime.stdin,
+        stdout: runtime.stdout,
+    };
+    const deployOptions = {
+        allowUnsafeApiBaseUrl: options.allowUnsafeApiBaseUrl,
+        apiBaseUrl: options.apiBaseUrl,
+        autoPublish: options.autoPublish,
+        env: options.env,
+        loginBaseUrl: options.loginBaseUrl,
+        releaseNote: options.releaseNote,
+        skipBuild: options.skipBuild,
+        buildOutputMode: options.json ? 'stderr' : 'inherit',
+        successOutputMode: 'remote',
+    };
+    const result = await (runtime.runDeployCommand ?? runDeployCommand)(deployOptions, deployRuntime);
+    const output = result ?? { changed: true };
+    return finishRemoteCommand(options, runtime, output);
+}
+async function createRemoteCommandContext(options, runtime) {
+    const logger = resolveRemoteLogger(options, runtime);
+    const environment = await resolveRemoteEnvironment({
+        allowUnsafeApiBaseUrl: options.allowUnsafeApiBaseUrl,
+        apiBaseUrl: options.apiBaseUrl,
+        env: options.env,
+        fetchImpl: runtime.fetchImpl,
+        loginBaseUrl: options.loginBaseUrl,
+    }, {
+        fetchImpl: runtime.fetchImpl,
+        requireAuthSession: runtime.requireAuthSession,
+    });
+    const packageJson = await readMiniProgramProjectPackage(runtime.cwd ?? process.cwd());
+    const binding = readBoundMiniProgramIdFromPackageJson(packageJson.packageJson);
+    const api = {
+        ...adaptRemoteApiClient(createRemoteApiClientForEnvironment(environment)),
+        ...runtime.api,
+    };
+    logger.debug(`Heybox API: ${environment.apiBaseUrl}`);
+    return {
+        api,
+        apiBaseUrl: environment.apiBaseUrl,
+        binding,
+        logger,
+        loginBaseUrl: environment.loginBaseUrl,
+        packageJson,
+        session: environment.session,
+    };
+}
+function adaptRemoteApiClient(api) {
+    return {
+        accessStatus: () => api.getDeveloperAccessStatus(),
+        listMiniPrograms: ({ keyword, status }) => api.listUserMiniprograms({ keyword, status, offset: 0, limit: 200 }),
+        createMiniProgram: ({ name, previewImageUrl }) => api.createUserMiniprogram({ name, ...(previewImageUrl ? { preview_image_url: previewImageUrl } : {}) }),
+        updateMiniProgram: ({ miniProgramId, name, previewImageUrl }) => api.updateUserMiniprogram({ mini_program_id: miniProgramId, name, preview_image_url: previewImageUrl }),
+        getMiniProgramDetail: (miniProgramId) => api.getUserMiniprogramDetail({ mini_program_id: miniProgramId }),
+        getAllowlist: (miniProgramId) => api.getPreviewAllowlist({ mini_program_id: miniProgramId }),
+        updateAllowlist: ({ miniProgramId, heyboxIds }) => api.updatePreviewAllowlist({ mini_program_id: miniProgramId, heybox_ids: heyboxIds }),
+        listVersions: (miniProgramId) => api.listUserMiniprogramVersions({ mini_program_id: miniProgramId, offset: 0, limit: 50 }),
+        getPreviewInfo: ({ miniProgramId, version }) => api.getVersionPreviewInfo({ mini_program_id: miniProgramId, preview_version: version }),
+        listDeveloperEntities: () => api.listDeveloperEntities(),
+        switchDeveloperEntity: ({ entityId }) => api.switchDeveloperEntity({ entity_id: entityId }),
+        releaseVersion: ({ miniProgramId, version }) => api.releaseUserMiniprogramVersion({ mini_program_id: miniProgramId, version }),
+        withdrawVersion: ({ miniProgramId, reason, version }) => api.withdrawUserMiniprogramVersion({ mini_program_id: miniProgramId, version, reason }),
+        takeDown: (miniProgramId) => api.takeDownUserMiniprogram({ mini_program_id: miniProgramId }),
+        reopen: (miniProgramId) => api.reopenUserMiniprogram({ mini_program_id: miniProgramId }),
+    };
+}
+async function remoteAccess(options, context, runtime) {
+    const result = await context.api.accessStatus();
+    const output = { changed: false, access: toCamelCaseDeep(result) };
+    if (!options.json) {
+        context.logger.info(`Access status: ${String(result.status ?? 'unknown')}`);
+        if (result.developer_name) {
+            context.logger.info(`Developer: ${String(result.developer_name)}`);
+        }
+        if (result.disabled_reason) {
+            context.logger.warn(`Disabled reason: ${String(result.disabled_reason)}`);
+        }
+    }
+    return finishRemoteCommand(options, runtime, output);
+}
+async function remoteEntityList(options, context, runtime) {
+    const result = await context.api.listDeveloperEntities();
+    const items = normalizeDeveloperEntities(result);
+    const output = { changed: false, items: toCamelCaseDeep(items), total: readNumber(result.total, items.length) };
+    if (!options.json) {
+        if (items.length === 0) {
+            context.logger.info('当前账号未绑定开发者主体');
+        }
+        else {
+            printDeveloperEntities(context.logger, items);
+        }
+    }
+    return finishRemoteCommand(options, runtime, output);
+}
+async function remoteEntityCurrent(options, context, runtime) {
+    const current = await requireCurrentDeveloperEntity(context);
+    const access = await context.api.accessStatus();
+    const output = { changed: false, current: toCamelCaseDeep(current), access: toCamelCaseDeep(access) };
+    if (!options.json) {
+        printDeveloperEntity(context.logger, current, '* ');
+        context.logger.info(`Access status: ${String(access.status ?? 'unknown')}`);
+        if (access.disabled_reason) {
+            context.logger.warn(`Disabled reason: ${String(access.disabled_reason)}`);
+        }
+    }
+    return finishRemoteCommand(options, runtime, output);
+}
+async function remoteEntitySwitch(options, context, runtime) {
+    const entityId = parseEntityId(options.entityId);
+    const entities = normalizeDeveloperEntities(await context.api.listDeveloperEntities());
+    const target = entities.find((entity) => entity.entity_id === entityId);
+    if (!target) {
+        throw new Error(`当前账号不可切换到开发者主体 ${entityId}；请先运行 hb-sdk remote entity list 查看可用主体`);
+    }
+    const result = await context.api.switchDeveloperEntity({ entityId });
+    const access = await context.api.accessStatus();
+    const switched = normalizeDeveloperEntity(result) ?? { ...target, is_current: true };
+    await session.setSelectedDeveloperEntitySnapshot({
+        entityId: switched.entity_id,
+        entityName: switched.entity_name || '--',
+        ...(switched.owner_heybox_id !== undefined ? { ownerHeyboxId: switched.owner_heybox_id } : {}),
+    }, {
+        cacheFile: options.cacheFile,
+        env: options.env,
+        loginBaseUrl: options.loginBaseUrl,
+        now: options.now,
+    });
+    const output = { changed: true, current: toCamelCaseDeep(switched), access: toCamelCaseDeep(access) };
+    if (!options.json) {
+        context.logger.success(`已切换开发者主体：${formatDeveloperEntity(switched)}`);
+        context.logger.info(`Access status: ${String(access.status ?? 'unknown')}`);
+    }
+    return finishRemoteCommand(options, runtime, output);
+}
+async function remoteList(options, context, runtime) {
+    const result = await context.api.listMiniPrograms({ keyword: options.keyword, status: options.status });
+    const items = Array.isArray(result.items) ? result.items : [];
+    const outputItems = items.map((item) => ({ ...toCamelCaseDeep(item), bound: item.mini_program_id === context.binding }));
+    const output = { changed: false, items: outputItems, total: readNumber(result.total, items.length) };
+    if (!options.json) {
+        if (items.length === 0) {
+            context.logger.info('未找到远端小程序');
+        }
+        else {
+            for (const item of items) {
+                const marker = item.mini_program_id === context.binding ? '* ' : '  ';
+                context.logger.info(`${marker}${item.mini_program_id ?? '--'}  ${item.name ?? '--'}  status=${item.status ?? '--'}  version=${item.version || item.latest_version_status || '--'}`);
+            }
+        }
+        if (!context.binding) {
+            context.logger.info('当前项目尚未绑定远端小程序。绑定已有小程序：hb-sdk remote bind <mini-program-id>');
+        }
+    }
+    return finishRemoteCommand(options, runtime, output);
+}
+async function remoteCreate(options, context, runtime) {
+    if (context.binding && !options.forceBind) {
+        throw new Error(`当前项目已绑定 ${context.binding}；如需覆盖，请使用 --force-bind`);
+    }
+    const name = requireNonEmpty(options.name, 'remote create 必须传 --name <name>');
+    const previewImageUrl = validateOptionalHttpsUrl(options.previewImageUrl, '--preview-image-url');
+    const access = await context.api.accessStatus();
+    if (access.status !== 'approved') {
+        throw new Error(`当前 CLI 用户没有创建开发者用户小程序权限：${String(access.status ?? 'unknown')}`);
+    }
+    await confirmCreateWithCurrentEntity(options, context, runtime);
+    const result = await context.api.createMiniProgram({ name, previewImageUrl });
+    const miniProgramId = requireMiniProgramId(result);
+    await writeBoundMiniProgramId(context.packageJson.projectRoot, miniProgramId, { force: options.forceBind });
+    const output = { changed: true, miniProgramId, remote: toCamelCaseDeep(result) };
+    if (!options.json) {
+        context.logger.success(`创建并绑定成功：${miniProgramId}`);
+    }
+    return finishRemoteCommand(options, runtime, output);
+}
+async function remoteBind(options, context, runtime) {
+    const miniProgramId = requireNonEmpty(options.miniProgramId, 'remote bind 必须传 <mini-program-id>');
+    if (context.binding && context.binding !== miniProgramId && !options.force) {
+        throw new Error(`当前项目已绑定 ${context.binding}；如需覆盖本地绑定，请使用 --force`);
+    }
+    const detail = await context.api.getMiniProgramDetail(miniProgramId);
+    const verifiedId = requireMiniProgramId(detail);
+    await assertMiniProgramEntityMatchesCurrent(context, detail);
+    const changed = context.binding !== verifiedId;
+    if (changed) {
+        await writeBoundMiniProgramId(context.packageJson.projectRoot, verifiedId, { force: options.force });
+    }
+    const output = { changed, miniProgramId: verifiedId, remote: toCamelCaseDeep(detail) };
+    if (!options.json) {
+        context.logger.success(changed ? `绑定成功：${verifiedId}` : `已绑定：${verifiedId}`);
+    }
+    return finishRemoteCommand(options, runtime, output);
+}
+async function remoteInfo(options, context, runtime) {
+    const miniProgramId = requireBinding(context);
+    const detail = await context.api.getMiniProgramDetail(miniProgramId);
+    const output = { changed: false, miniProgramId, detail: toCamelCaseDeep(detail) };
+    if (!options.json) {
+        printMiniProgramDetail(context.logger, detail);
+    }
+    return finishRemoteCommand(options, runtime, output);
+}
+async function remoteUpdate(options, context, runtime) {
+    const miniProgramId = requireBinding(context);
+    const hasName = options.name !== undefined;
+    const hasPreviewImageUrl = options.previewImageUrl !== undefined;
+    if (!hasName && !hasPreviewImageUrl) {
+        throw new Error('remote update 至少需要传 --name 或 --preview-image-url');
+    }
+    const detail = await context.api.getMiniProgramDetail(miniProgramId);
+    const nextName = hasName ? requireNonEmpty(options.name, '--name 不能为空') : requireNonEmpty(detail.name, '远端详情缺少 name，无法补全 update 请求');
+    const nextPreviewImageUrl = hasPreviewImageUrl
+        ? validateOptionalHttpsUrl(options.previewImageUrl, '--preview-image-url') ?? ''
+        : String(detail.preview_image_url ?? '');
+    const result = await context.api.updateMiniProgram({ miniProgramId, name: nextName, previewImageUrl: nextPreviewImageUrl });
+    const output = { changed: true, miniProgramId, remote: toCamelCaseDeep(result) };
+    if (!options.json) {
+        context.logger.success(`更新成功：${miniProgramId}`);
+    }
+    return finishRemoteCommand(options, runtime, output);
+}
+async function remoteAllowlistList(options, context, runtime) {
+    const miniProgramId = requireBinding(context);
+    const result = await context.api.getAllowlist(miniProgramId);
+    const output = {
+        changed: false,
+        items: toCamelCaseDeep(Array.isArray(result.items) ? result.items : []),
+        limit: readNumber(result.limit, 0),
+        miniProgramId,
+    };
+    if (!options.json) {
+        printAllowlist(context.logger, result);
+    }
+    return finishRemoteCommand(options, runtime, output);
+}
+async function remoteAllowlistWrite(options, context, runtime) {
+    const miniProgramId = requireBinding(context);
+    const inputIds = parseHeyboxIds(options.heyboxIds ?? []);
+    const current = await context.api.getAllowlist(miniProgramId);
+    const nextIds = mergeAllowlistIds(options.command, current, inputIds);
+    assertAllowlistLimit(nextIds, current.limit);
+    const result = await context.api.updateAllowlist({ miniProgramId, heyboxIds: nextIds });
+    const output = {
+        changed: true,
+        items: toCamelCaseDeep(Array.isArray(result.items) ? result.items : []),
+        limit: readNumber(result.limit, readNumber(current.limit, 0)),
+        miniProgramId,
+    };
+    if (!options.json) {
+        context.logger.success(`白名单已更新：${nextIds.join(',') || '(empty)'}`);
+    }
+    return finishRemoteCommand(options, runtime, output);
+}
+async function remoteVersions(options, context, runtime) {
+    const miniProgramId = requireBinding(context);
+    const result = await context.api.listVersions(miniProgramId);
+    const items = Array.isArray(result.items) ? result.items : [];
+    const output = { changed: false, items: toCamelCaseDeep(items), miniProgramId, total: readNumber(result.total, items.length) };
+    if (!options.json) {
+        for (const item of items) {
+            context.logger.info(`${item.version ?? '--'}  status=${item.status ?? '--'}  preview=${item.preview_url ?? '--'}  publish=${item.publish_url ?? '--'}`);
+        }
+        if (items.length === 0) {
+            context.logger.info('暂无远端版本');
+        }
+    }
+    return finishRemoteCommand(options, runtime, output);
+}
+async function remotePreview(options, context, runtime) {
+    const miniProgramId = requireBinding(context);
+    const version = requireNonEmpty(options.version, 'remote preview 必须传 <version>');
+    const result = await context.api.getPreviewInfo({ miniProgramId, version });
+    const previewUrl = String(result.preview_url || result.publish_url || result.page_url || '');
+    const output = { changed: false, miniProgramId, previewUrl, version, preview: toCamelCaseDeep(result) };
+    if (!options.json) {
+        context.logger.info(previewUrl ? `Preview URL: ${previewUrl}` : `版本 ${version} 暂无 preview URL`);
+    }
+    return finishRemoteCommand(options, runtime, output);
+}
+async function remoteDangerousWrite(options, context, runtime) {
+    const miniProgramId = requireBinding(context);
+    const version = options.command === 'release' || options.command === 'withdraw' ? requireNonEmpty(options.version, `remote ${options.command} 必须传 <version>`) : undefined;
+    const detail = await context.api.getMiniProgramDetail(miniProgramId);
+    await confirmDangerousRemoteChange(options, runtime, context.logger, {
+        miniProgramId,
+        name: detail.name,
+        operation: options.command,
+        status: detail.status,
+        version,
+    });
+    if (options.command === 'release') {
+        const result = await context.api.releaseVersion({ miniProgramId, version: version });
+        return finishDangerousWrite(options, runtime, context.logger, miniProgramId, result, { status: result.status, version });
+    }
+    if (options.command === 'withdraw') {
+        const result = await context.api.withdrawVersion({ miniProgramId, reason: options.reason, version: version });
+        return finishDangerousWrite(options, runtime, context.logger, miniProgramId, result, { status: result.status, version });
+    }
+    if (options.command === 'take-down') {
+        const result = await context.api.takeDown(miniProgramId);
+        return finishDangerousWrite(options, runtime, context.logger, miniProgramId, result, { status: result.status });
+    }
+    const result = await context.api.reopen(miniProgramId);
+    return finishDangerousWrite(options, runtime, context.logger, miniProgramId, result, { status: result.status });
+}
+function finishDangerousWrite(options, runtime, logger, miniProgramId, result, extras) {
+    const output = { changed: true, miniProgramId, ...extras, remote: toCamelCaseDeep(result) };
+    if (!options.json) {
+        logger.success(`操作成功：${options.command} ${miniProgramId}`);
+    }
+    return finishRemoteCommand(options, runtime, output);
+}
+function finishRemoteCommand(options, runtime, output) {
+    const normalized = toCamelCaseDeep(output);
+    if (options.json) {
+        writeStdout(runtime, `${JSON.stringify(normalized)}\n`);
+    }
+    return normalized;
+}
+function resolveRemoteLogger(options, runtime) {
+    if (options.json) {
+        return createJsonSafeLogger(runtime);
+    }
+    if (runtime.logger) {
+        return runtime.logger;
+    }
+    return index.createCliLogger({
+        isTTY: runtime.isTTY,
+        stderr: runtime.stderr,
+        stdout: runtime.stdout,
+    });
+}
+function createJsonSafeLogger(runtime) {
+    const stderr = runtime.stderr ?? process.stderr;
+    return index.createCliLogger({
+        isTTY: runtime.isTTY,
+        stderr,
+        stdout: stderr,
+    });
+}
+function writeStdout(runtime, message) {
+    (runtime.stdout ?? process.stdout).write(message);
+}
+function requireBinding(context) {
+    if (!context.binding) {
+        throw new Error('当前项目尚未绑定远端小程序，请先运行 hb-sdk remote create 或 hb-sdk remote bind <mini-program-id>');
+    }
+    return context.binding;
+}
+async function requireCurrentDeveloperEntity(context) {
+    const entities = normalizeDeveloperEntities(await context.api.listDeveloperEntities());
+    const current = entities.find((entity) => entity.is_current === true);
+    if (!current) {
+        throw new Error('当前账号没有服务端 current 开发者主体；请先运行 hb-sdk remote entity list 查看可用主体，并用 hb-sdk remote entity switch <entity-id> 切换');
+    }
+    return current;
+}
+async function confirmCreateWithCurrentEntity(options, context, runtime) {
+    const entities = normalizeDeveloperEntities(await context.api.listDeveloperEntities());
+    if (entities.length <= 1) {
+        return;
+    }
+    const current = entities.find((entity) => entity.is_current === true);
+    if (!current) {
+        throw new Error('当前账号存在多个开发者主体，但没有服务端 current 主体；请先运行 hb-sdk remote entity switch <entity-id>');
+    }
+    if (!options.json) {
+        context.logger.info(`当前创建将归属开发者主体：${formatDeveloperEntity(current)}`);
+        context.logger.info(`如需切换主体，请先运行：hb-sdk remote entity switch <entity-id>`);
+    }
+    if (options.yes) {
+        return;
+    }
+    const isTTY = runtime.isTTY ?? Boolean(process.stdin.isTTY && process.stderr.isTTY);
+    if (!isTTY) {
+        throw new Error(`当前账号存在多个开发者主体，非交互环境执行 hb-sdk remote create 必须传 --yes 确认使用当前主体：${formatDeveloperEntity(current)}。如需切换，请先运行 hb-sdk remote entity switch <entity-id>`);
+    }
+    const accepted = runtime.promptConfirm
+        ? await runtime.promptConfirm(`确认使用当前开发者主体 ${formatDeveloperEntity(current)} 创建小程序？`)
+        : await promptConfirm(`确认使用当前开发者主体 ${formatDeveloperEntity(current)} 创建小程序？输入 yes 继续: `, runtime);
+    if (!accepted) {
+        throw new Error('已取消操作');
+    }
+}
+async function assertMiniProgramEntityMatchesCurrent(context, detail) {
+    if (!isValidEntityId(detail.entity_id)) {
+        return;
+    }
+    const current = await requireCurrentDeveloperEntity(context);
+    if (current.entity_id === detail.entity_id) {
+        return;
+    }
+    throw new Error(createEntityMismatchMessage({ current, target: createEntityFromMiniProgramDetail(detail) }));
+}
+async function assertBoundMiniProgramEntityMatchesCurrent(context, miniProgramId) {
+    const current = await requireCurrentDeveloperEntity(context);
+    const detail = await context.api.getMiniProgramDetail(miniProgramId);
+    requireMiniProgramId(detail);
+    if (!isValidEntityId(detail.entity_id)) {
+        throw new Error(`远端小程序 ${miniProgramId} 详情缺少 entity_id，无法校验当前主体一致性，已停止 deploy`);
+    }
+    if (current.entity_id !== detail.entity_id) {
+        throw new Error(createEntityMismatchMessage({ current, target: createEntityFromMiniProgramDetail(detail) }));
+    }
+}
+function createEntityMismatchMessage(options) {
+    return [
+        '当前开发者主体与远端小程序所属主体不一致，已停止操作。',
+        `当前主体：${formatDeveloperEntity(options.current)}`,
+        `小程序所属主体：${formatDeveloperEntity(options.target)}`,
+        `请先运行：hb-sdk remote entity switch ${options.target.entity_id}`,
+    ].join('\n');
+}
+function requireMiniProgramId(result) {
+    const miniProgramId = result.mini_program_id;
+    if (typeof miniProgramId !== 'string' || !miniProgramId.trim()) {
+        throw new Error('远端响应缺少 mini_program_id');
+    }
+    return miniProgramId.trim();
+}
+function parseEntityId(value) {
+    const raw = requireNonEmpty(value, 'remote entity switch 必须传 <entity-id>');
+    if (!/^(0|[1-9]\d*)$/.test(raw)) {
+        throw new Error(`entity-id 只接受十进制数字：${raw}`);
+    }
+    const entityId = Number(raw);
+    if (!isValidEntityId(entityId)) {
+        throw new Error(`entity-id 超出有效范围：${raw}`);
+    }
+    return entityId;
+}
+function normalizeDeveloperEntities(result) {
+    const rawItems = Array.isArray(result.items) ? result.items : [];
+    return rawItems.map((item) => normalizeDeveloperEntity(item)).filter((item) => item !== undefined);
+}
+function normalizeDeveloperEntity(value) {
+    if (!value || typeof value !== 'object') {
+        return undefined;
+    }
+    const rawEntityId = value.entity_id;
+    if (!isValidEntityId(rawEntityId)) {
+        return undefined;
+    }
+    return {
+        ...value,
+        entity_id: rawEntityId,
+        entity_name: typeof value.entity_name === 'string' ? value.entity_name : undefined,
+        owner_heybox_id: isValidHeyboxIdNumber(value.owner_heybox_id)
+            ? value.owner_heybox_id
+            : undefined,
+        is_current: value.is_current === true,
+    };
+}
+function createEntityFromMiniProgramDetail(detail) {
+    return {
+        entity_id: detail.entity_id,
+        entity_name: typeof detail.developer_name === 'string' ? detail.developer_name : undefined,
+        owner_heybox_id: detail.owner_heybox_id,
+        is_current: false,
+    };
+}
+function isValidEntityId(value) {
+    return Number.isSafeInteger(value) && Number(value) > 0;
+}
+function requireNonEmpty(value, message) {
+    const normalized = typeof value === 'string' ? value.trim() : '';
+    if (!normalized) {
+        throw new Error(message);
+    }
+    return normalized;
+}
+function validateOptionalHttpsUrl(value, label) {
+    if (value === undefined) {
+        return undefined;
+    }
+    const raw = requireNonEmpty(value, `${label} 不能为空`);
+    let url;
+    try {
+        url = new URL(raw);
+    }
+    catch {
+        throw new Error(`${label} 必须是合法 HTTPS URL`);
+    }
+    if (url.protocol !== 'https:') {
+        throw new Error(`${label} 只接受 HTTPS URL`);
+    }
+    return raw;
+}
+function parseHeyboxIds(values) {
+    if (values.length === 0) {
+        throw new Error('请传入至少一个十进制 heybox_id');
+    }
+    const ids = [];
+    for (const value of values) {
+        const raw = String(value).trim();
+        if (!/^(0|[1-9]\d*)$/.test(raw)) {
+            throw new Error(`heybox_id 只接受十进制数字：${value}`);
+        }
+        const id = Number(raw);
+        if (!Number.isSafeInteger(id) || id <= 0) {
+            throw new Error(`heybox_id 超出有效范围：${value}`);
+        }
+        if (!ids.includes(id)) {
+            ids.push(id);
+        }
+    }
+    return ids;
+}
+function mergeAllowlistIds(command, current, inputIds) {
+    const items = Array.isArray(current.items) ? current.items : [];
+    const ownerIds = items.filter((item) => item.is_owner === true && isValidHeyboxIdNumber(item.heybox_id)).map((item) => item.heybox_id);
+    const currentIds = items.filter((item) => isValidHeyboxIdNumber(item.heybox_id)).map((item) => item.heybox_id);
+    if (command === 'allowlist:add') {
+        return uniqueNumbers([...currentIds, ...inputIds]);
+    }
+    if (command === 'allowlist:remove') {
+        return uniqueNumbers(currentIds.filter((id) => ownerIds.includes(id) || !inputIds.includes(id)));
+    }
+    return uniqueNumbers([...ownerIds, ...inputIds.filter((id) => !ownerIds.includes(id))]);
+}
+function assertAllowlistLimit(ids, limit) {
+    const parsedLimit = typeof limit === 'number' && Number.isFinite(limit) ? limit : undefined;
+    if (parsedLimit !== undefined && ids.length > parsedLimit) {
+        throw new Error(`内测白名单最多 ${parsedLimit} 人，当前操作会变为 ${ids.length} 人`);
+    }
+}
+function uniqueNumbers(values) {
+    const result = [];
+    for (const value of values) {
+        if (!result.includes(value)) {
+            result.push(value);
+        }
+    }
+    return result;
+}
+function isValidHeyboxIdNumber(value) {
+    return typeof value === 'number' && Number.isSafeInteger(value) && value > 0;
+}
+async function confirmDangerousRemoteChange(options, runtime, logger, context) {
+    const lines = [
+        `操作：${context.operation}`,
+        `Mini-program: ${context.miniProgramId}`,
+        `名称：${context.name || '--'}`,
+        `当前状态：${context.status || '--'}`,
+        ...(context.version ? [`目标版本：${context.version}`] : []),
+    ];
+    if (!options.json) {
+        for (const line of lines) {
+            logger.info(line);
+        }
+    }
+    else if (!options.yes) {
+        for (const line of lines) {
+            logger.info(line, { stream: 'stderr' });
+        }
+    }
+    if (options.yes) {
+        return;
+    }
+    const isTTY = runtime.isTTY ?? Boolean(process.stdin.isTTY && process.stderr.isTTY);
+    if (!isTTY) {
+        throw new Error(`非交互环境执行 hb-sdk remote ${context.operation} 必须传 --yes`);
+    }
+    const accepted = runtime.promptConfirm
+        ? await runtime.promptConfirm(`确认执行 ${context.operation}？`)
+        : await promptConfirm(`确认执行 ${context.operation}？输入 yes 继续: `, runtime);
+    if (!accepted) {
+        throw new Error('已取消操作');
+    }
+}
+async function promptConfirm(message, runtime) {
+    const input = runtime.stdin ?? process.stdin;
+    const output = runtime.stderr ?? process.stderr;
+    const rl = promises.createInterface({ input, output: output });
+    try {
+        const answer = await rl.question(message);
+        return answer.trim().toLowerCase() === 'yes';
+    }
+    finally {
+        rl.close();
+    }
+}
+function printMiniProgramDetail(logger, detail) {
+    logger.info(`Mini-program: ${detail.mini_program_id ?? '--'}`);
+    logger.info(`Name: ${detail.name ?? '--'}`);
+    logger.info(`Status: ${detail.status ?? '--'}`);
+    logger.info(`Version: ${detail.version || detail.latest_version_status || '--'}`);
+    if (detail.publish_url) {
+        logger.info(`Publish URL: ${detail.publish_url}`);
+    }
+}
+function printDeveloperEntities(logger, entities) {
+    for (const entity of entities) {
+        printDeveloperEntity(logger, entity, entity.is_current ? '* ' : '  ');
+    }
+}
+function printDeveloperEntity(logger, entity, marker = '') {
+    logger.info(`${marker}${formatDeveloperEntity(entity)}${entity.is_current ? '  current' : ''}`);
+}
+function formatDeveloperEntity(entity) {
+    const name = entity.entity_name || '--';
+    const owner = entity.owner_heybox_id ? `  owner=${entity.owner_heybox_id}` : '';
+    return `${entity.entity_id ?? '--'}  ${name}${owner}`;
+}
+function printAllowlist(logger, result) {
+    const items = Array.isArray(result.items) ? result.items : [];
+    logger.info(`Limit: ${readNumber(result.limit, 0)}`);
+    if (items.length === 0) {
+        logger.info('内测白名单为空');
+        return;
+    }
+    for (const item of items) {
+        logger.info(`${item.heybox_id ?? '--'}${item.is_owner ? ' (owner)' : ''}${item.nickname ? ` ${item.nickname}` : ''}`);
+    }
+}
+function readNumber(value, fallback) {
+    return typeof value === 'number' && Number.isFinite(value) ? value : fallback;
+}
+function toCamelCaseDeep(value) {
+    if (Array.isArray(value)) {
+        return value.map((item) => toCamelCaseDeep(item));
+    }
+    if (!value || Object.prototype.toString.call(value) !== '[object Object]') {
+        return value;
+    }
+    const result = {};
+    for (const [key, item] of Object.entries(value)) {
+        result[toCamelKey(key)] = toCamelCaseDeep(item);
+    }
+    return result;
+}
+function toCamelKey(key) {
+    return key.replace(/_([a-z0-9])/g, (_, char) => char.toUpperCase());
+}
+
+var remote = /*#__PURE__*/Object.freeze({
   __proto__: null,
-  resolveDeployReleaseNote: resolveDeployReleaseNote,
-  runDeployCommand: runDeployCommand,
-  validateDeployReleaseNote: validateDeployReleaseNote
+  runRemoteCommand: runRemoteCommand
 });
 
-exports.deploy = deploy;
+exports.remote = remote;
 exports.requireSemver = requireSemver;