@heybox/hb-sdk 0.4.6 → 0.4.7

package/README.md

@@ -96,11 +96,14 @@ import { share } from '@heybox/hb-sdk';
 await share.showShareMenu({
   title: '我的小程序页面',
   desc: '来自黑盒小程序的分享',
-  url: window.location.href,
   imageUrl: 'https://imgheybox.max-c.com/demo.png',
 });
 ```
 
+用户小程序通常不要传 `url`；宿主 runtime 会按当前小程序生成
+`/tools/common_share?user_miniprogram_id=...` 分享落地页。只有确实要分享外部
+HTTP(S) 页面时才显式传 `url`。
+
 截图分享：
 
 ```ts
@@ -336,9 +339,10 @@ try {
 5. 解析 `dist/manifest.json`，校验 `version` 为 `x.y.z`，自动剥离 BOM；普通 remote deploy 要求该版本与 precheck 使用的 `package.json.version` 一致。
 6. `--skip-build` 会先读取已有 `dist/manifest.json.version`，再调用 precheck。
 7. 遍历 `dist/` 文件，跳过 `manifest.json`、`.DS_Store`、`.map`；遇到 symlink 或 `node_modules` 直接报错。
-8. 校验所有上传路径长度不超过 64。
-9. 4 并发上传到 COS。默认只展示上传阶段和文件总数；`--verbose` 会展示并发数、bucket / region 和逐文件结果，但不会输出 keys、签名、cookie 或 token。任一文件失败立刻 abort，不提交审核。
-10. 全部上传成功后调用 `/mall/developer/user_miniprogram/version/submit_audit`，输出提交审核成功、发布策略和可用的 preview URL；后端原始失败细节只在 `--verbose` 下展示。
+8. 校验所有上传路径长度不超过 64，并在任何上传请求发生前限制实际上传产物总大小不超过 100MiB。错误提示中使用 `100MB`，方便开发者理解。
+9. 上传信息、上传凭证和上传回调按批次执行，每批最多 50 个文件；批次串行，批内保持 4 并发上传到 COS。CLI 会校验 CDN 上传信息接口返回的 key 与本地期望 key 完全一致，异常时停止后续批次且不提交审核。
+10. 默认只展示上传阶段和文件总数，例如 `正在上传 137/244 个文件`；`--verbose` 会展示并发数、批次数、当前批次、bucket / region 和逐文件结果，但不会输出 keys、签名、cookie、pkey、token 或临时密钥。
+11. 全部上传成功后调用 `/mall/developer/user_miniprogram/version/submit_audit`，输出提交审核成功、发布策略和可用的 preview URL；后端原始失败细节只在 `--verbose` 下展示。
 
 默认 `auto_publish=false`，审核通过后使用 `hb-sdk remote versions` 查看版本状态，再用 `hb-sdk remote release <version>` 发布；使用 `--auto-publish` 时提交 `auto_publish=true`，审核通过后自动发布。未发布候选版本可通过 `hb-sdk remote allowlist add <heybox_id>` 加入预览白名单，让指定用户在广场看到；正式入口使用 `mini_program_id`，`mini_url` 仅用于本地调试。
 

package/dist/cli-chunks/{create-BahMMgJH.cjs → create-IOxksfE3.cjs}

@@ -5,7 +5,7 @@ var fs = require('node:fs/promises');
 var path = require('node:path');
 var require$$0 = require('fs');
 var require$$1 = require('path');
-var index = require('./index-DuwxUSkq.cjs');
+var index = require('./index-13_8m0Pw.cjs');
 require('node:module');
 require('os');
 require('readline');

package/dist/cli-chunks/{dev-CTuXVPpU.cjs → dev-zMT1BxGs.cjs}

@@ -9,7 +9,7 @@ var node_url = require('node:url');
 var net = require('node:net');
 var node_http = require('node:http');
 var browser = require('./browser-RAy8e8cV.cjs');
-var index = require('./index-DuwxUSkq.cjs');
+var index = require('./index-13_8m0Pw.cjs');
 require('node:process');
 require('node:buffer');
 require('node:util');

package/dist/cli-chunks/{doctor-9gg3ZIvt.cjs → doctor-ZOfNccof.cjs}

@@ -4,7 +4,7 @@ var fs$1 = require('node:fs');
 var fs = require('node:fs/promises');
 var os = require('node:os');
 var path = require('node:path');
-var index = require('./index-DuwxUSkq.cjs');
+var index = require('./index-13_8m0Pw.cjs');
 require('node:module');
 require('path');
 require('os');

package/dist/cli-chunks/{index-DuwxUSkq.cjs → index-13_8m0Pw.cjs}

@@ -234,19 +234,19 @@ function requireArgument () {
 
 var command = {};
 
-const require$5 = node_module.createRequire((typeof document === 'undefined' ? require('u' + 'rl').pathToFileURL(__filename).href : (_documentCurrentScript && _documentCurrentScript.tagName.toUpperCase() === 'SCRIPT' && _documentCurrentScript.src || new URL('cli-chunks/index-DuwxUSkq.cjs', document.baseURI).href)));
+const require$5 = node_module.createRequire((typeof document === 'undefined' ? require('u' + 'rl').pathToFileURL(__filename).href : (_documentCurrentScript && _documentCurrentScript.tagName.toUpperCase() === 'SCRIPT' && _documentCurrentScript.src || new URL('cli-chunks/index-13_8m0Pw.cjs', document.baseURI).href)));
 function __require$4() { return require$5("node:events"); }
 
-const require$4 = node_module.createRequire((typeof document === 'undefined' ? require('u' + 'rl').pathToFileURL(__filename).href : (_documentCurrentScript && _documentCurrentScript.tagName.toUpperCase() === 'SCRIPT' && _documentCurrentScript.src || new URL('cli-chunks/index-DuwxUSkq.cjs', document.baseURI).href)));
+const require$4 = node_module.createRequire((typeof document === 'undefined' ? require('u' + 'rl').pathToFileURL(__filename).href : (_documentCurrentScript && _documentCurrentScript.tagName.toUpperCase() === 'SCRIPT' && _documentCurrentScript.src || new URL('cli-chunks/index-13_8m0Pw.cjs', document.baseURI).href)));
 function __require$3() { return require$4("node:child_process"); }
 
-const require$3 = node_module.createRequire((typeof document === 'undefined' ? require('u' + 'rl').pathToFileURL(__filename).href : (_documentCurrentScript && _documentCurrentScript.tagName.toUpperCase() === 'SCRIPT' && _documentCurrentScript.src || new URL('cli-chunks/index-DuwxUSkq.cjs', document.baseURI).href)));
+const require$3 = node_module.createRequire((typeof document === 'undefined' ? require('u' + 'rl').pathToFileURL(__filename).href : (_documentCurrentScript && _documentCurrentScript.tagName.toUpperCase() === 'SCRIPT' && _documentCurrentScript.src || new URL('cli-chunks/index-13_8m0Pw.cjs', document.baseURI).href)));
 function __require$2() { return require$3("node:path"); }
 
-const require$2 = node_module.createRequire((typeof document === 'undefined' ? require('u' + 'rl').pathToFileURL(__filename).href : (_documentCurrentScript && _documentCurrentScript.tagName.toUpperCase() === 'SCRIPT' && _documentCurrentScript.src || new URL('cli-chunks/index-DuwxUSkq.cjs', document.baseURI).href)));
+const require$2 = node_module.createRequire((typeof document === 'undefined' ? require('u' + 'rl').pathToFileURL(__filename).href : (_documentCurrentScript && _documentCurrentScript.tagName.toUpperCase() === 'SCRIPT' && _documentCurrentScript.src || new URL('cli-chunks/index-13_8m0Pw.cjs', document.baseURI).href)));
 function __require$1() { return require$2("node:fs"); }
 
-const require$1 = node_module.createRequire((typeof document === 'undefined' ? require('u' + 'rl').pathToFileURL(__filename).href : (_documentCurrentScript && _documentCurrentScript.tagName.toUpperCase() === 'SCRIPT' && _documentCurrentScript.src || new URL('cli-chunks/index-DuwxUSkq.cjs', document.baseURI).href)));
+const require$1 = node_module.createRequire((typeof document === 'undefined' ? require('u' + 'rl').pathToFileURL(__filename).href : (_documentCurrentScript && _documentCurrentScript.tagName.toUpperCase() === 'SCRIPT' && _documentCurrentScript.src || new URL('cli-chunks/index-13_8m0Pw.cjs', document.baseURI).href)));
 function __require() { return require$1("node:process"); }
 
 var help = {};
@@ -13094,7 +13094,7 @@ function readErrorMessage(error, options = {}) {
 }
 
 const CLI_VERSION_PLACEHOLDER = ['__HB', 'SDK', 'CLI', 'VERSION__'].join('_');
-const BUILT_CLI_VERSION = '0.4.6';
+const BUILT_CLI_VERSION = '0.4.7';
 const PACKAGE_JSON_CANDIDATES = [
     path.resolve(__dirname, '..', '..', 'package.json'),
     path.resolve(__dirname, '..', 'package.json'),
@@ -13377,31 +13377,31 @@ function createCommandLoggerResolver(options) {
     };
 }
 const defaultClearLoginStatus = async (...args) => {
-    const { clearLoginStatus } = await Promise.resolve().then(function () { return require('./login-OqaEx-Wd.cjs'); });
+    const { clearLoginStatus } = await Promise.resolve().then(function () { return require('./login-CoBqr1Bm.cjs'); });
     return clearLoginStatus(...args);
 };
 const defaultLoginToHeybox = async (...args) => {
-    const { loginToHeybox } = await Promise.resolve().then(function () { return require('./login-OqaEx-Wd.cjs'); });
+    const { loginToHeybox } = await Promise.resolve().then(function () { return require('./login-CoBqr1Bm.cjs'); });
     return loginToHeybox(...args);
 };
 const defaultPrintLoginStatus = async (...args) => {
-    const { printLoginStatus } = await Promise.resolve().then(function () { return require('./login-OqaEx-Wd.cjs'); });
+    const { printLoginStatus } = await Promise.resolve().then(function () { return require('./login-CoBqr1Bm.cjs'); });
     return printLoginStatus(...args);
 };
 const defaultRunCreateCommand = async (...args) => {
-    const { runCreateCommand } = await Promise.resolve().then(function () { return require('./create-BahMMgJH.cjs'); });
+    const { runCreateCommand } = await Promise.resolve().then(function () { return require('./create-IOxksfE3.cjs'); });
     return runCreateCommand(...args);
 };
 const defaultRunDevCommand = async (...args) => {
-    const { runDevCommand } = await Promise.resolve().then(function () { return require('./dev-CTuXVPpU.cjs'); });
+    const { runDevCommand } = await Promise.resolve().then(function () { return require('./dev-zMT1BxGs.cjs'); });
     return runDevCommand(...args);
 };
 const defaultRunDoctorCommand = async (...args) => {
-    const { runDoctorCommand } = await Promise.resolve().then(function () { return require('./doctor-9gg3ZIvt.cjs'); });
+    const { runDoctorCommand } = await Promise.resolve().then(function () { return require('./doctor-ZOfNccof.cjs'); });
     return runDoctorCommand(...args);
 };
 const defaultRunRemoteCommand = async (...args) => {
-    const { runRemoteCommand } = await Promise.resolve().then(function () { return require('./remote-zX17hOT4.cjs'); }).then(function (n) { return n.remote; });
+    const { runRemoteCommand } = await Promise.resolve().then(function () { return require('./remote-Cc5j-m2I.cjs'); }).then(function (n) { return n.remote; });
     return runRemoteCommand(...args);
 };
 function resolveStandaloneLogger(options, verbose) {

package/dist/cli-chunks/{index-CLne_LW7.cjs → index-2nlBRew_.cjs}

@@ -1,13 +1,13 @@
 'use strict';
 
-var index$2 = require('./index-DuwxUSkq.cjs');
+var index$2 = require('./index-13_8m0Pw.cjs');
 var require$$0$2 = require('fs');
 var require$$2$1 = require('crypto');
 var require$$1$2 = require('path');
 var require$$0$3 = require('assert');
 var require$$4$2 = require('events');
 var require$$1$1 = require('util');
-var remote = require('./remote-zX17hOT4.cjs');
+var remote = require('./remote-Cc5j-m2I.cjs');
 var require$$0$5 = require('net');
 var require$$0$4 = require('url');
 var require$$2$2 = require('http');

package/dist/cli-chunks/{login-OqaEx-Wd.cjs → login-CoBqr1Bm.cjs}

@@ -3,9 +3,9 @@
 var promises = require('node:readline/promises');
 var node_crypto = require('node:crypto');
 var node_http = require('node:http');
-var session = require('./session-D7lF9mpd.cjs');
+var session = require('./session-BSi5YfqO.cjs');
 var browser = require('./browser-RAy8e8cV.cjs');
-var index = require('./index-DuwxUSkq.cjs');
+var index = require('./index-13_8m0Pw.cjs');
 require('node:path');
 require('fs');
 require('constants');

package/dist/cli-chunks/{remote-zX17hOT4.cjs → remote-Cc5j-m2I.cjs}

@@ -1,12 +1,12 @@
 'use strict';
 
 var promises = require('node:readline/promises');
-var session = require('./session-D7lF9mpd.cjs');
+var session = require('./session-BSi5YfqO.cjs');
 var childProcess = require('node:child_process');
 var fs = require('node:fs');
 var fs$1 = require('node:fs/promises');
 var path = require('node:path');
-var index = require('./index-DuwxUSkq.cjs');
+var index = require('./index-13_8m0Pw.cjs');
 
 var re = {exports: {}};
 
@@ -2858,6 +2858,8 @@ function formatReason(error) {
 
 const MINIAPP_UPLOAD_SCOPE = 'activity';
 const ACTIVITY_UPLOAD_KEY_MAX_LENGTH = 64;
+const MINIAPP_UPLOAD_BATCH_SIZE = 50;
+const MINIAPP_UPLOAD_TOTAL_SIZE_LIMIT_BYTES = 100 * 1024 * 1024;
 const USER_MINIPROGRAM_ACCESS_STATUS_API_PATH = '/mall/developer/user_miniprogram/access_status';
 const DEVELOPER_ENTITY_LIST_API_PATH = '/mall/developer/entity/list';
 const DEVELOPER_ENTITY_SWITCH_API_PATH = '/mall/developer/entity/switch';
@@ -2916,6 +2918,17 @@ function validateUploadPaths(items, options) {
     }
     return undefined;
 }
+function validateUploadTotalSize(items, options = {}) {
+    const limit = options.limitBytes ?? MINIAPP_UPLOAD_TOTAL_SIZE_LIMIT_BYTES;
+    const total = items.reduce((sum, item) => {
+        const size = Number(item.size);
+        return sum + (Number.isFinite(size) && size > 0 ? size : 0);
+    }, 0);
+    if (total > limit) {
+        return '构建产物总大小超过 100MB，请删除未引用资源或压缩图片后重新 deploy';
+    }
+    return undefined;
+}
 function shouldUploadDistFile(relativePath) {
     const normalized = normalizeRelativePath(relativePath);
     if (!normalized) {
@@ -2978,7 +2991,74 @@ async function runUpload(options, runtime = {}) {
     const postCDNUploadCallback$1 = runtime.postCDNUploadCallback ?? postCDNUploadCallback;
     const createReadStream = runtime.createReadStream ?? fs.createReadStream;
     const orderedFiles = [...options.files].sort((a, b) => a.relativePath.localeCompare(b.relativePath));
-    const fileInfos = orderedFiles.map((file) => ({
+    const batches = chunkUploadFiles(orderedFiles, MINIAPP_UPLOAD_BATCH_SIZE);
+    await logger.task(`正在上传 ${orderedFiles.length} 个文件`, async (taskContext) => {
+        logger.debug(`上传并发数: ${concurrency}`);
+        logger.debug(`上传批次数: ${batches.length}`);
+        let completed = 0;
+        for (let batchIndex = 0; batchIndex < batches.length; batchIndex += 1) {
+            const batch = batches[batchIndex];
+            logger.debug(`正在处理上传批次 ${batchIndex + 1}/${batches.length}，文件数: ${batch.length}`);
+            logger.debug('正在获取 CDN 上传信息');
+            const fileInfos = createUploadFileInfos(batch, options);
+            const uploadInfo = await getCDNUploadInfo$1({ session: options.session, scope: MINIAPP_UPLOAD_SCOPE, fileInfos, needCache: false }, { baseUrl: runtime.baseUrl, fetchImpl });
+            logger.debug(`CDN bucket: ${uploadInfo.bucket}`);
+            logger.debug(`CDN region: ${uploadInfo.region}`);
+            validateUploadInfoKeys(batch, uploadInfo.keys, options);
+            const indexedFiles = batch.map((file, index) => ({ file, key: uploadInfo.keys[index] }));
+            const batchKeys = indexedFiles.map(({ key }) => key);
+            logger.debug('正在获取 CDN 上传凭证');
+            const uploadToken = await getCDNUploadToken$1({
+                session: options.session,
+                bucket: uploadInfo.bucket,
+                keys: batchKeys,
+                mimetypes: indexedFiles.map(({ file }) => file.mimeType),
+                isMultipartUpload: 0,
+            }, { baseUrl: runtime.baseUrl, fetchImpl });
+            const cos = runtime.createCosClient ? runtime.createCosClient({ session: options.session, uploadToken }) : await createDefaultCosClient(uploadToken);
+            const queue = indexedFiles.slice();
+            const workers = Array.from({ length: Math.min(concurrency, indexedFiles.length) }, async () => {
+                while (queue.length > 0) {
+                    const uploadTask = queue.shift();
+                    if (!uploadTask) {
+                        return;
+                    }
+                    try {
+                        await cos.putObject({
+                            Bucket: uploadInfo.bucket,
+                            Region: uploadInfo.region,
+                            Key: uploadTask.key,
+                            Body: createReadStream(uploadTask.file.absolutePath),
+                            ContentLength: uploadTask.file.size,
+                            ContentType: uploadTask.file.mimeType,
+                        });
+                        completed += 1;
+                        taskContext.update(`正在上传 ${completed}/${orderedFiles.length} 个文件`);
+                        logger.debug(`[${String(completed).padStart(2)}/${orderedFiles.length}] ok ${uploadTask.file.relativePath} (${formatSize(uploadTask.file.size)})`);
+                    }
+                    catch (error) {
+                        completed += 1;
+                        const message = readErrorMessage(error);
+                        logger.debug(`[${String(completed).padStart(2)}/${orderedFiles.length}] error ${uploadTask.file.relativePath} -> ${message}`);
+                        throw new index.CliError(`上传文件失败：${uploadTask.file.relativePath} -> ${message}`, readVerboseUploadError(uploadTask.file.relativePath, error));
+                    }
+                }
+            });
+            await Promise.all(workers);
+            logger.debug('正在确认 CDN 上传结果');
+            await postCDNUploadCallback$1({ session: options.session, keys: batchKeys, isFinished: true }, { baseUrl: runtime.baseUrl, fetchImpl });
+        }
+    }, { successText: `已上传 ${orderedFiles.length} 个文件` });
+}
+function chunkUploadFiles(files, batchSize) {
+    const batches = [];
+    for (let index = 0; index < files.length; index += batchSize) {
+        batches.push(files.slice(index, index + batchSize));
+    }
+    return batches;
+}
+function createUploadFileInfos(files, options) {
+    return files.map((file) => ({
         name: file.relativePath.split('/').pop() ?? file.relativePath,
         mimetype: file.mimeType,
         fsize: file.size,
@@ -2988,56 +3068,22 @@ async function runUpload(options, runtime = {}) {
             relativePath: file.relativePath,
         }),
     }));
-    await logger.task(`正在上传 ${orderedFiles.length} 个文件`, async (taskContext) => {
-        logger.debug(`上传并发数: ${concurrency}`);
-        logger.debug('正在获取 CDN 上传信息');
-        const uploadInfo = await getCDNUploadInfo$1({ session: options.session, scope: MINIAPP_UPLOAD_SCOPE, fileInfos, needCache: false }, { baseUrl: runtime.baseUrl, fetchImpl });
-        logger.debug(`CDN bucket: ${uploadInfo.bucket}`);
-        logger.debug(`CDN region: ${uploadInfo.region}`);
-        const indexedFiles = orderedFiles.map((file, index) => ({ file, key: uploadInfo.keys[index] }));
-        logger.debug('正在获取 CDN 上传凭证');
-        const cos = runtime.createCosClient
-            ? runtime.createCosClient({ session: options.session })
-            : await createDefaultCosClient(await getCDNUploadToken$1({
-                session: options.session,
-                bucket: uploadInfo.bucket,
-                keys: indexedFiles.map(({ key }) => key),
-                mimetypes: indexedFiles.map(({ file }) => file.mimeType),
-                isMultipartUpload: 0,
-            }, { baseUrl: runtime.baseUrl, fetchImpl }));
-        const queue = indexedFiles.slice();
-        let completed = 0;
-        const workers = Array.from({ length: Math.min(concurrency, indexedFiles.length) }, async () => {
-            while (queue.length > 0) {
-                const uploadTask = queue.shift();
-                if (!uploadTask) {
-                    return;
-                }
-                try {
-                    await cos.putObject({
-                        Bucket: uploadInfo.bucket,
-                        Region: uploadInfo.region,
-                        Key: uploadTask.key,
-                        Body: createReadStream(uploadTask.file.absolutePath),
-                        ContentLength: uploadTask.file.size,
-                        ContentType: uploadTask.file.mimeType,
-                    });
-                    completed += 1;
-                    taskContext.update(`正在上传 ${completed}/${indexedFiles.length} 个文件`);
-                    logger.debug(`[${String(completed).padStart(2)}/${indexedFiles.length}] ok ${uploadTask.file.relativePath} (${formatSize(uploadTask.file.size)})`);
-                }
-                catch (error) {
-                    completed += 1;
-                    const message = readErrorMessage(error);
-                    logger.debug(`[${String(completed).padStart(2)}/${indexedFiles.length}] error ${uploadTask.file.relativePath} -> ${message}`);
-                    throw new index.CliError(`上传文件失败：${uploadTask.file.relativePath} -> ${message}`, readVerboseUploadError(uploadTask.file.relativePath, error));
-                }
-            }
+}
+function validateUploadInfoKeys(files, keys, options) {
+    if (keys.length !== files.length) {
+        throw new index.CliError(`CDN 上传接口返回 key 数量异常：期望 ${files.length}，实际 ${keys.length}`);
+    }
+    for (let index$1 = 0; index$1 < files.length; index$1 += 1) {
+        const expectedKey = getMiniappUploadKey({
+            miniProgramId: options.miniProgramId,
+            version: options.version,
+            relativePath: files[index$1].relativePath,
         });
-        await Promise.all(workers);
-        logger.debug('正在确认 CDN 上传结果');
-        await postCDNUploadCallback$1({ session: options.session, keys: uploadInfo.keys, isFinished: true }, { baseUrl: runtime.baseUrl, fetchImpl });
-    }, { successText: `已上传 ${orderedFiles.length} 个文件` });
+        const actualKey = keys[index$1];
+        if (actualKey !== expectedKey) {
+            throw new index.CliError(`CDN 上传接口返回 key 异常：${files[index$1].relativePath}`, [`CDN 上传接口返回 key 异常：${files[index$1].relativePath}`, `expected: ${expectedKey}`, `actual: ${actualKey}`].join('\n'));
+        }
+    }
 }
 async function createDefaultCosClient(uploadToken) {
     const COS = await loadCosConstructor();
@@ -3067,7 +3113,7 @@ async function createDefaultCosClient(uploadToken) {
     };
 }
 async function loadCosConstructor() {
-    const cosModule = await Promise.resolve().then(function () { return require('./index-CLne_LW7.cjs'); }).then(function (n) { return n.index; });
+    const cosModule = await Promise.resolve().then(function () { return require('./index-2nlBRew_.cjs'); }).then(function (n) { return n.index; });
     return cosModule.default;
 }
 function formatSize(bytes) {
@@ -3233,6 +3279,10 @@ async function runDeployCommand(options, runtime = {}) {
         if (pathError) {
             throw new Error(pathError);
         }
+        const sizeError = validateUploadTotalSize(files);
+        if (sizeError) {
+            throw new Error(sizeError);
+        }
         logger.debug(`待上传文件数: ${files.length}`);
         return files;
     }, { successText: 'dist 上传文件校验完成' });
@@ -3249,12 +3299,12 @@ async function runDeployCommand(options, runtime = {}) {
     catch (error) {
         throw translateHeyboxDeployError(error, { projectRoot, stage: 'submitAudit', version });
     }
-    printDeploySuccess({ autoPublish, logger, miniProgramId, mode: options.successOutputMode ?? 'legacy', previewUrl: submitAuditResult.preview_url, version });
+    printDeploySuccess({ autoPublish, logger, miniProgramId, mode: options.successOutputMode ?? 'legacy', protocolString: submitAuditResult.protocol_string, version });
     return {
         autoPublish,
         changed: true,
         miniProgramId,
-        ...(submitAuditResult.preview_url ? { previewUrl: submitAuditResult.preview_url } : {}),
+        ...(submitAuditResult.protocol_string ? { protocolString: submitAuditResult.protocol_string } : {}),
         version,
     };
 }
@@ -3262,8 +3312,8 @@ function printDeploySuccess(options) {
     options.logger.success(`提交审核成功：${options.miniProgramId} ${options.version}`);
     if (options.mode === 'remote') {
         options.logger.info(`发布策略：${options.autoPublish ? '审核通过后自动发布' : '审核通过后需手动发布'}`);
-        if (options.previewUrl) {
-            options.logger.info(`Preview URL: ${options.previewUrl}`);
+        if (options.protocolString) {
+            options.logger.info(`Protocol: ${options.protocolString}`);
             options.logger.info('允许他人预览：hb-sdk remote allowlist add <heybox_id>');
         }
         options.logger.info(options.autoPublish
@@ -3272,8 +3322,8 @@ function printDeploySuccess(options) {
         return;
     }
     options.logger.info(`发布策略：${options.autoPublish ? '审核通过后自动发布' : '审核通过后需在开放平台手动发布'}`);
-    if (options.previewUrl) {
-        options.logger.info(`Preview URL: ${options.previewUrl}`);
+    if (options.protocolString) {
+        options.logger.info(`Protocol: ${options.protocolString}`);
     }
 }
 function findProjectRoot(startDir) {
@@ -3840,14 +3890,14 @@ async function createRemoteCommandContext(options, runtime) {
 function adaptRemoteApiClient(api) {
     return {
         accessStatus: () => api.getDeveloperAccessStatus(),
-        listMiniPrograms: ({ keyword, status }) => api.listUserMiniprograms({ keyword, status, offset: 0, limit: 200 }),
+        listMiniPrograms: ({ keyword, limit = 200, offset = 0, status }) => api.listUserMiniprograms({ keyword, status, offset, limit }),
         createMiniProgram: ({ name, previewImageUrl }) => api.createUserMiniprogram({ name, ...(previewImageUrl ? { preview_image_url: previewImageUrl } : {}) }),
         updateMiniProgram: ({ miniProgramId, name, previewImageUrl }) => api.updateUserMiniprogram({ mini_program_id: miniProgramId, name, preview_image_url: previewImageUrl }),
         getMiniProgramDetail: (miniProgramId) => api.getUserMiniprogramDetail({ mini_program_id: miniProgramId }),
         getAllowlist: (miniProgramId) => api.getPreviewAllowlist({ mini_program_id: miniProgramId }),
         updateAllowlist: ({ miniProgramId, heyboxIds }) => api.updatePreviewAllowlist({ mini_program_id: miniProgramId, heybox_ids: heyboxIds }),
         listVersions: (miniProgramId) => api.listUserMiniprogramVersions({ mini_program_id: miniProgramId, offset: 0, limit: 50 }),
-        getPreviewInfo: ({ miniProgramId, version }) => api.getVersionPreviewInfo({ mini_program_id: miniProgramId, preview_version: version }),
+        getPreviewInfo: ({ miniProgramId, version }) => api.getVersionPreviewInfo({ mini_program_id: miniProgramId, version }),
         listDeveloperEntities: () => api.listDeveloperEntities(),
         switchDeveloperEntity: ({ entityId }) => api.switchDeveloperEntity({ entity_id: entityId }),
         releaseVersion: ({ miniProgramId, version }) => api.releaseUserMiniprogramVersion({ mini_program_id: miniProgramId, version }),
@@ -3871,9 +3921,9 @@ async function remoteAccess(options, context, runtime) {
     return finishRemoteCommand(options, runtime, output);
 }
 async function remoteEntityList(options, context, runtime) {
-    const result = await context.api.listDeveloperEntities();
-    const items = normalizeDeveloperEntities(result);
-    const output = { changed: false, items: toCamelCaseDeep(items), total: readNumber(result.total, items.length) };
+    const result = await listDeveloperEntitiesWithAccessFallback(context);
+    const items = result.items;
+    const output = { changed: false, items: toCamelCaseDeep(items), total: result.total };
     if (!options.json) {
         if (items.length === 0) {
             context.logger.info('当前账号未绑定开发者主体');
@@ -3899,18 +3949,24 @@ async function remoteEntityCurrent(options, context, runtime) {
 }
 async function remoteEntitySwitch(options, context, runtime) {
     const entityId = parseEntityId(options.entityId);
-    const entities = normalizeDeveloperEntities(await context.api.listDeveloperEntities());
+    const entityList = await listDeveloperEntitiesWithAccessFallback(context);
+    const entities = entityList.items;
     const target = entities.find((entity) => entity.entity_id === entityId);
     if (!target) {
         throw new Error(`当前账号不可切换到开发者主体 ${entityId}；请先运行 hb-sdk remote entity list 查看可用主体`);
     }
-    const result = await context.api.switchDeveloperEntity({ entityId });
+    const result = entityList.fromAccessFallback === true && target.is_current === true ? target : await context.api.switchDeveloperEntity({ entityId });
     const access = await context.api.accessStatus();
     const switched = normalizeDeveloperEntity(result) ?? { ...target, is_current: true };
+    const switchedEntityId = normalizeEntityId(switched.entity_id);
+    if (switchedEntityId === undefined) {
+        throw new Error('远端响应缺少 entity_id');
+    }
+    const switchedOwnerHeyboxId = normalizePositiveInteger(switched.owner_heybox_id);
     await session.setSelectedDeveloperEntitySnapshot({
-        entityId: switched.entity_id,
+        entityId: switchedEntityId,
         entityName: switched.entity_name || '--',
-        ...(switched.owner_heybox_id !== undefined ? { ownerHeyboxId: switched.owner_heybox_id } : {}),
+        ...(switchedOwnerHeyboxId !== undefined ? { ownerHeyboxId: switchedOwnerHeyboxId } : {}),
     }, {
         cacheFile: options.cacheFile,
         env: options.env,
@@ -4050,7 +4106,7 @@ async function remoteVersions(options, context, runtime) {
     const output = { changed: false, items: toCamelCaseDeep(items), miniProgramId, total: readNumber(result.total, items.length) };
     if (!options.json) {
         for (const item of items) {
-            context.logger.info(`${item.version ?? '--'}  status=${item.status ?? '--'}  preview=${item.preview_url ?? '--'}  publish=${item.publish_url ?? '--'}`);
+            context.logger.info(`${item.version ?? '--'}  status=${item.status ?? '--'}  auto_publish=${item.auto_publish === true ? 'yes' : 'no'}`);
         }
         if (items.length === 0) {
             context.logger.info('暂无远端版本');
@@ -4062,10 +4118,13 @@ async function remotePreview(options, context, runtime) {
     const miniProgramId = requireBinding(context);
     const version = requireNonEmpty(options.version, 'remote preview 必须传 <version>');
     const result = await context.api.getPreviewInfo({ miniProgramId, version });
-    const previewUrl = String(result.preview_url || result.publish_url || result.page_url || '');
-    const output = { changed: false, miniProgramId, previewUrl, version, preview: toCamelCaseDeep(result) };
+    const protocolString = String(result.protocol_string || '');
+    if (!protocolString) {
+        throw new Error(`版本 ${version} 暂无 protocol_string，无法打开预览`);
+    }
+    const output = { changed: false, miniProgramId, protocolString, version, preview: toCamelCaseDeep(result) };
     if (!options.json) {
-        context.logger.info(previewUrl ? `Preview URL: ${previewUrl}` : `版本 ${version} 暂无 preview URL`);
+        context.logger.info(`Protocol: ${protocolString}`);
     }
     return finishRemoteCommand(options, runtime, output);
 }
@@ -4140,7 +4199,7 @@ function requireBinding(context) {
     return context.binding;
 }
 async function requireCurrentDeveloperEntity(context) {
-    const entities = normalizeDeveloperEntities(await context.api.listDeveloperEntities());
+    const entities = (await listDeveloperEntitiesWithAccessFallback(context)).items;
     const current = entities.find((entity) => entity.is_current === true);
     if (!current) {
         throw new Error('当前账号没有服务端 current 开发者主体；请先运行 hb-sdk remote entity list 查看可用主体，并用 hb-sdk remote entity switch <entity-id> 切换');
@@ -4148,7 +4207,7 @@ async function requireCurrentDeveloperEntity(context) {
     return current;
 }
 async function confirmCreateWithCurrentEntity(options, context, runtime) {
-    const entities = normalizeDeveloperEntities(await context.api.listDeveloperEntities());
+    const entities = (await listDeveloperEntitiesWithAccessFallback(context)).items;
     if (entities.length <= 1) {
         return;
     }
@@ -4175,24 +4234,43 @@ async function confirmCreateWithCurrentEntity(options, context, runtime) {
     }
 }
 async function assertMiniProgramEntityMatchesCurrent(context, detail) {
-    if (!isValidEntityId(detail.entity_id)) {
+    const detailEntityId = normalizeEntityId(detail.entity_id);
+    if (detailEntityId === undefined) {
         return;
     }
     const current = await requireCurrentDeveloperEntity(context);
-    if (current.entity_id === detail.entity_id) {
+    if (current.entity_id === detailEntityId) {
         return;
     }
-    throw new Error(createEntityMismatchMessage({ current, target: createEntityFromMiniProgramDetail(detail) }));
+    throw new Error(createEntityMismatchMessage({ current, target: createEntityFromMiniProgramDetail({ ...detail, entity_id: detailEntityId }) }));
 }
 async function assertBoundMiniProgramEntityMatchesCurrent(context, miniProgramId) {
     const current = await requireCurrentDeveloperEntity(context);
     const detail = await context.api.getMiniProgramDetail(miniProgramId);
     requireMiniProgramId(detail);
-    if (!isValidEntityId(detail.entity_id)) {
-        throw new Error(`远端小程序 ${miniProgramId} 详情缺少 entity_id，无法校验当前主体一致性，已停止 deploy`);
+    const detailEntityId = normalizeEntityId(detail.entity_id);
+    if (detailEntityId === undefined) {
+        const listed = await findMiniProgramInCurrentEntityList(context, miniProgramId);
+        if (listed) {
+            return;
+        }
+        throw new Error(`远端小程序 ${miniProgramId} 详情缺少 entity_id，且当前主体列表中找不到该小程序，无法校验当前主体一致性，已停止 deploy`);
+    }
+    if (current.entity_id !== detailEntityId) {
+        throw new Error(createEntityMismatchMessage({ current, target: createEntityFromMiniProgramDetail({ ...detail, entity_id: detailEntityId }) }));
     }
-    if (current.entity_id !== detail.entity_id) {
-        throw new Error(createEntityMismatchMessage({ current, target: createEntityFromMiniProgramDetail(detail) }));
+}
+async function findMiniProgramInCurrentEntityList(context, miniProgramId) {
+    const pageSize = 200;
+    for (let offset = 0;; offset += pageSize) {
+        const result = await context.api.listMiniPrograms({ limit: pageSize, offset });
+        const items = Array.isArray(result.items) ? result.items : [];
+        if (items.some((item) => item.mini_program_id === miniProgramId)) {
+            return true;
+        }
+        if (items.length < pageSize || offset + items.length >= readNumber(result.total, Number.POSITIVE_INFINITY)) {
+            return false;
+        }
     }
 }
 function createEntityMismatchMessage(options) {
@@ -4221,6 +4299,18 @@ function parseEntityId(value) {
     }
     return entityId;
 }
+async function listDeveloperEntitiesWithAccessFallback(context) {
+    const result = await context.api.listDeveloperEntities();
+    const items = normalizeDeveloperEntities(result);
+    if (items.length > 0) {
+        return { items, total: readNumber(result.total, items.length) };
+    }
+    const fallback = createEntityFromAccessStatus(await context.api.accessStatus());
+    if (!fallback) {
+        return { items, total: readNumber(result.total, items.length) };
+    }
+    return { fromAccessFallback: true, items: [fallback], total: 1 };
+}
 function normalizeDeveloperEntities(result) {
     const rawItems = Array.isArray(result.items) ? result.items : [];
     return rawItems.map((item) => normalizeDeveloperEntity(item)).filter((item) => item !== undefined);
@@ -4229,31 +4319,57 @@ function normalizeDeveloperEntity(value) {
     if (!value || typeof value !== 'object') {
         return undefined;
     }
-    const rawEntityId = value.entity_id;
-    if (!isValidEntityId(rawEntityId)) {
+    const entityId = normalizeEntityId(value.entity_id);
+    if (entityId === undefined) {
         return undefined;
     }
+    const ownerHeyboxId = normalizePositiveInteger(value.owner_heybox_id);
     return {
         ...value,
-        entity_id: rawEntityId,
+        entity_id: entityId,
         entity_name: typeof value.entity_name === 'string' ? value.entity_name : undefined,
-        owner_heybox_id: isValidHeyboxIdNumber(value.owner_heybox_id)
-            ? value.owner_heybox_id
-            : undefined,
+        owner_heybox_id: ownerHeyboxId,
         is_current: value.is_current === true,
     };
 }
 function createEntityFromMiniProgramDetail(detail) {
+    const entityId = normalizeEntityId(detail.entity_id);
     return {
-        entity_id: detail.entity_id,
+        ...(entityId !== undefined ? { entity_id: entityId } : {}),
         entity_name: typeof detail.developer_name === 'string' ? detail.developer_name : undefined,
-        owner_heybox_id: detail.owner_heybox_id,
+        owner_heybox_id: normalizePositiveInteger(detail.owner_heybox_id),
         is_current: false,
     };
 }
+function createEntityFromAccessStatus(access) {
+    const entity = normalizeDeveloperEntity({
+        entity_id: access.entity_id,
+        entity_name: access.developer_name,
+        owner_heybox_id: access.owner_heybox_id,
+        is_current: true,
+    });
+    return entity;
+}
 function isValidEntityId(value) {
     return Number.isSafeInteger(value) && Number(value) > 0;
 }
+function normalizeEntityId(value) {
+    return normalizePositiveInteger(value);
+}
+function normalizePositiveInteger(value) {
+    if (typeof value === 'number') {
+        return isValidEntityId(value) ? value : undefined;
+    }
+    if (typeof value !== 'string') {
+        return undefined;
+    }
+    const normalized = value.trim();
+    if (!/^[1-9]\d*$/.test(normalized)) {
+        return undefined;
+    }
+    const parsed = Number(normalized);
+    return isValidEntityId(parsed) ? parsed : undefined;
+}
 function requireNonEmpty(value, message) {
     const normalized = typeof value === 'string' ? value.trim() : '';
     if (!normalized) {
@@ -4377,8 +4493,11 @@ function printMiniProgramDetail(logger, detail) {
     logger.info(`Name: ${detail.name ?? '--'}`);
     logger.info(`Status: ${detail.status ?? '--'}`);
     logger.info(`Version: ${detail.version || detail.latest_version_status || '--'}`);
-    if (detail.publish_url) {
-        logger.info(`Publish URL: ${detail.publish_url}`);
+    if (detail.page_url) {
+        logger.info(`Page URL: ${detail.page_url}`);
+    }
+    if (detail.protocol_string) {
+        logger.info(`Protocol: ${detail.protocol_string}`);
     }
 }
 function printDeveloperEntities(logger, entities) {

package/dist/cli-chunks/{session-D7lF9mpd.cjs → session-BSi5YfqO.cjs}

@@ -1,6 +1,6 @@
 'use strict';
 
-var index = require('./index-DuwxUSkq.cjs');
+var index = require('./index-13_8m0Pw.cjs');
 var node_crypto = require('node:crypto');
 var path = require('node:path');
 var require$$0$2 = require('fs');

package/dist/cli.cjs

@@ -1,6 +1,6 @@
 'use strict';
 
-var index = require('./cli-chunks/index-DuwxUSkq.cjs');
+var index = require('./cli-chunks/index-13_8m0Pw.cjs');
 require('node:module');
 require('node:fs');
 require('node:fs/promises');

package/dist/devtools/mock-host/main.js

@@ -3686,14 +3686,14 @@ function readScreenshotRect(value) {
 }
 
 /** 展示基础分享面板。 */
-function showMiniProgramRuntimeShareMenu(payload, platformAdapter) {
-    return platformAdapter.share.showShareMenu(readMiniProgramShareMenuOptions(payload));
+function showMiniProgramRuntimeShareMenu(payload, platformAdapter, context = {}) {
+    return platformAdapter.share.showShareMenu(readMiniProgramShareMenuOptions(payload, platformAdapter, context));
 }
-function readMiniProgramShareMenuOptions(payload) {
+function readMiniProgramShareMenuOptions(payload, platformAdapter, context) {
     assertMiniProgramRuntimeRecord(payload, 'share.showShareMenu 参数必须是对象');
     const title = readMiniProgramRuntimeRequiredString(payload.title, 'share.showShareMenu title 必须是非空字符串');
     const desc = readMiniProgramRuntimeRequiredString(payload.desc, 'share.showShareMenu desc 必须是非空字符串');
-    const url = readMiniProgramRuntimeHttpUrl(payload.url, 'share.showShareMenu url 必须是 HTTP(S) URL');
+    const url = readMiniProgramShareUrl(payload.url, platformAdapter, context);
     const imageUrl = payload.imageUrl === undefined
         ? undefined
         : readMiniProgramRuntimeHttpUrl(payload.imageUrl, 'share.showShareMenu imageUrl 必须是 HTTP(S) URL');
@@ -3709,6 +3709,33 @@ function readMiniProgramShareMenuOptions(payload) {
         channel,
     };
 }
+function readMiniProgramShareUrl(value, platformAdapter, context) {
+    if (typeof value === 'string' && value.trim()) {
+        return readMiniProgramRuntimeHttpUrl(value, 'share.showShareMenu url 必须是 HTTP(S) URL');
+    }
+    if (value !== undefined && value !== null && value !== '') {
+        throw createMiniProgramRuntimeBridgeError('INVALID_PARAMS', 'share.showShareMenu url 必须是 HTTP(S) URL');
+    }
+    return createUserMiniprogramShareUrl(platformAdapter, context);
+}
+function createUserMiniprogramShareUrl(platformAdapter, context) {
+    const miniProgramId = context.miniProgramId?.trim();
+    if (!miniProgramId) {
+        throw createMiniProgramRuntimeBridgeError('INVALID_PARAMS', 'share.showShareMenu url 必须是 HTTP(S) URL');
+    }
+    try {
+        const shareUrl = new URL('/tools/common_share', platformAdapter.app.getCurrentHref());
+        shareUrl.searchParams.set('user_miniprogram_id', miniProgramId);
+        const miniProgramVersion = context.miniProgramVersion?.trim();
+        if (miniProgramVersion) {
+            shareUrl.searchParams.set('preview_version', miniProgramVersion);
+        }
+        return shareUrl.href;
+    }
+    catch {
+        throw createMiniProgramRuntimeBridgeError('INVALID_PARAMS', 'share.showShareMenu url 必须是 HTTP(S) URL');
+    }
+}
 function isShareChannel(value) {
     return (value === 'wechatSession' ||
         value === 'wechatTimeline' ||

package/dist/miniapp-publish.cjs.js

@@ -2811,6 +2811,8 @@ function getMiniappManifestVersionError(version) {
 
 const MINIAPP_UPLOAD_SCOPE = 'activity';
 const ACTIVITY_UPLOAD_KEY_MAX_LENGTH = 64;
+const MINIAPP_UPLOAD_BATCH_SIZE = 50;
+const MINIAPP_UPLOAD_TOTAL_SIZE_LIMIT_BYTES = 100 * 1024 * 1024;
 const USER_MINIPROGRAM_ACCESS_STATUS_API_PATH = '/mall/developer/user_miniprogram/access_status';
 const DEVELOPER_ENTITY_LIST_API_PATH = '/mall/developer/entity/list';
 const DEVELOPER_ENTITY_SWITCH_API_PATH = '/mall/developer/entity/switch';
@@ -2869,6 +2871,17 @@ function validateUploadPaths(items, options) {
     }
     return undefined;
 }
+function validateUploadTotalSize(items, options = {}) {
+    const limit = options.limitBytes ?? MINIAPP_UPLOAD_TOTAL_SIZE_LIMIT_BYTES;
+    const total = items.reduce((sum, item) => {
+        const size = Number(item.size);
+        return sum + (Number.isFinite(size) && size > 0 ? size : 0);
+    }, 0);
+    if (total > limit) {
+        return '构建产物总大小超过 100MB，请删除未引用资源或压缩图片后重新 deploy';
+    }
+    return undefined;
+}
 function shouldUploadDistFile(relativePath) {
     const normalized = normalizeRelativePath(relativePath);
     if (!normalized) {
@@ -2893,7 +2906,9 @@ exports.DEVELOPER_ENTITY_LIST_API_PATH = DEVELOPER_ENTITY_LIST_API_PATH;
 exports.DEVELOPER_ENTITY_SWITCH_API_PATH = DEVELOPER_ENTITY_SWITCH_API_PATH;
 exports.LIST_USER_MINIPROGRAM_API_PATH = LIST_USER_MINIPROGRAM_API_PATH;
 exports.LIST_USER_MINIPROGRAM_VERSION_API_PATH = LIST_USER_MINIPROGRAM_VERSION_API_PATH;
+exports.MINIAPP_UPLOAD_BATCH_SIZE = MINIAPP_UPLOAD_BATCH_SIZE;
 exports.MINIAPP_UPLOAD_SCOPE = MINIAPP_UPLOAD_SCOPE;
+exports.MINIAPP_UPLOAD_TOTAL_SIZE_LIMIT_BYTES = MINIAPP_UPLOAD_TOTAL_SIZE_LIMIT_BYTES;
 exports.PRECHECK_USER_MINIPROGRAM_VERSION_API_PATH = PRECHECK_USER_MINIPROGRAM_VERSION_API_PATH;
 exports.RELEASE_USER_MINIPROGRAM_VERSION_API_PATH = RELEASE_USER_MINIPROGRAM_VERSION_API_PATH;
 exports.REOPEN_USER_MINIPROGRAM_API_PATH = REOPEN_USER_MINIPROGRAM_API_PATH;
@@ -2912,3 +2927,4 @@ exports.normalizeRelativePath = normalizeRelativePath;
 exports.relativePathContainsNodeModulesSegment = relativePathContainsNodeModulesSegment;
 exports.shouldUploadDistFile = shouldUploadDistFile;
 exports.validateUploadPaths = validateUploadPaths;
+exports.validateUploadTotalSize = validateUploadTotalSize;

package/dist/miniapp-publish.esm.js

@@ -2809,6 +2809,8 @@ function getMiniappManifestVersionError(version) {
 
 const MINIAPP_UPLOAD_SCOPE = 'activity';
 const ACTIVITY_UPLOAD_KEY_MAX_LENGTH = 64;
+const MINIAPP_UPLOAD_BATCH_SIZE = 50;
+const MINIAPP_UPLOAD_TOTAL_SIZE_LIMIT_BYTES = 100 * 1024 * 1024;
 const USER_MINIPROGRAM_ACCESS_STATUS_API_PATH = '/mall/developer/user_miniprogram/access_status';
 const DEVELOPER_ENTITY_LIST_API_PATH = '/mall/developer/entity/list';
 const DEVELOPER_ENTITY_SWITCH_API_PATH = '/mall/developer/entity/switch';
@@ -2867,6 +2869,17 @@ function validateUploadPaths(items, options) {
     }
     return undefined;
 }
+function validateUploadTotalSize(items, options = {}) {
+    const limit = options.limitBytes ?? MINIAPP_UPLOAD_TOTAL_SIZE_LIMIT_BYTES;
+    const total = items.reduce((sum, item) => {
+        const size = Number(item.size);
+        return sum + (Number.isFinite(size) && size > 0 ? size : 0);
+    }, 0);
+    if (total > limit) {
+        return '构建产物总大小超过 100MB，请删除未引用资源或压缩图片后重新 deploy';
+    }
+    return undefined;
+}
 function shouldUploadDistFile(relativePath) {
     const normalized = normalizeRelativePath(relativePath);
     if (!normalized) {
@@ -2884,4 +2897,4 @@ function shouldUploadDistFile(relativePath) {
     return true;
 }
 
-export { ACTIVITY_UPLOAD_KEY_MAX_LENGTH, CREATE_USER_MINIPROGRAM_API_PATH, DETAIL_USER_MINIPROGRAM_API_PATH, DEVELOPER_ENTITY_LIST_API_PATH, DEVELOPER_ENTITY_SWITCH_API_PATH, LIST_USER_MINIPROGRAM_API_PATH, LIST_USER_MINIPROGRAM_VERSION_API_PATH, MINIAPP_UPLOAD_SCOPE, PRECHECK_USER_MINIPROGRAM_VERSION_API_PATH, RELEASE_USER_MINIPROGRAM_VERSION_API_PATH, REOPEN_USER_MINIPROGRAM_API_PATH, SUBMIT_USER_MINIPROGRAM_AUDIT_API_PATH, TAKE_DOWN_USER_MINIPROGRAM_API_PATH, UPDATE_USER_MINIPROGRAM_API_PATH, UPDATE_USER_MINIPROGRAM_PREVIEW_ALLOWLIST_API_PATH, USER_MINIPROGRAM_ACCESS_STATUS_API_PATH, USER_MINIPROGRAM_PREVIEW_ALLOWLIST_API_PATH, USER_MINIPROGRAM_VERSION_PREVIEW_INFO_API_PATH, WITHDRAW_USER_MINIPROGRAM_VERSION_API_PATH, getMiniProgramUploadAlias, getMiniappUploadKey, isValidMiniappManifestVersion as isValidVersion, normalizeRelativePath, relativePathContainsNodeModulesSegment, shouldUploadDistFile, validateUploadPaths };
+export { ACTIVITY_UPLOAD_KEY_MAX_LENGTH, CREATE_USER_MINIPROGRAM_API_PATH, DETAIL_USER_MINIPROGRAM_API_PATH, DEVELOPER_ENTITY_LIST_API_PATH, DEVELOPER_ENTITY_SWITCH_API_PATH, LIST_USER_MINIPROGRAM_API_PATH, LIST_USER_MINIPROGRAM_VERSION_API_PATH, MINIAPP_UPLOAD_BATCH_SIZE, MINIAPP_UPLOAD_SCOPE, MINIAPP_UPLOAD_TOTAL_SIZE_LIMIT_BYTES, PRECHECK_USER_MINIPROGRAM_VERSION_API_PATH, RELEASE_USER_MINIPROGRAM_VERSION_API_PATH, REOPEN_USER_MINIPROGRAM_API_PATH, SUBMIT_USER_MINIPROGRAM_AUDIT_API_PATH, TAKE_DOWN_USER_MINIPROGRAM_API_PATH, UPDATE_USER_MINIPROGRAM_API_PATH, UPDATE_USER_MINIPROGRAM_PREVIEW_ALLOWLIST_API_PATH, USER_MINIPROGRAM_ACCESS_STATUS_API_PATH, USER_MINIPROGRAM_PREVIEW_ALLOWLIST_API_PATH, USER_MINIPROGRAM_VERSION_PREVIEW_INFO_API_PATH, WITHDRAW_USER_MINIPROGRAM_VERSION_API_PATH, getMiniProgramUploadAlias, getMiniappUploadKey, isValidMiniappManifestVersion as isValidVersion, normalizeRelativePath, relativePathContainsNodeModulesSegment, shouldUploadDistFile, validateUploadPaths, validateUploadTotalSize };

package/dist/templates/vue3-vite-ts/README.md.ejs

@@ -33,7 +33,6 @@ import hbSDK from '@heybox/hb-sdk';
 await hbSDK.share.showShareMenu({
   title: '<%= projectName %>',
   desc: '分享描述',
-  url: window.location.href,
 });
 
 await hbSDK.storage.setStorage({
@@ -46,3 +45,5 @@ const response = await hbSDK.network.request({
   url: 'https://jsonplaceholder.typicode.com/todos/1',
 });
 ```
+
+用户小程序通常不要传 `url`；宿主 runtime 会自动生成当前小程序的通用分享页。只有确实要分享外部 HTTP(S) 页面时才显式传 `url`。

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@heybox/hb-sdk",
-  "version": "0.4.6",
+  "version": "0.4.7",
   "description": "",
   "exports": {
     ".": {

package/skill/SKILL.md

@@ -52,7 +52,7 @@ Apply these instructions when writing, reviewing, or debugging code that consume
 4. Use `hb-sdk remote entity list`, `hb-sdk remote entity current`, and `hb-sdk remote entity switch <entity-id>` to inspect or change the developer platform server-side current entity before remote management commands.
 5. Use `hb-sdk remote create --name <name>` to create a remote mini-program under the server-side current entity and bind the returned id into `package.json.heybox.miniProgramId`; use `hb-sdk remote bind <mini-program-id>` to bind an existing remote mini-program after current-entity manageability is verified.
 6. Use `hb-sdk remote info`, `hb-sdk remote update`, `hb-sdk remote list`, `hb-sdk remote access`, `hb-sdk remote versions`, `hb-sdk remote preview <version>`, and `hb-sdk remote allowlist ...` for read/basic/preview management workflows. Discovery commands show the server-side current entity scope; write commands target the current project binding rather than arbitrary ids.
-7. Use `hb-sdk remote deploy --release-note <text>` to build, upload, and submit the current project for audit. It reads `package.json.heybox.miniProgramId`, validates that the bound mini-program belongs to the server-side current entity before precheck/build/upload, prechecks `package.json.version` before build, runs the project's `build` script via the package manager auto-detected by lockfile, uploads `dist/` to CDN (skipping `manifest.json`, `.DS_Store`, `.map`), then calls the submit-audit API.
+7. Use `hb-sdk remote deploy --release-note <text>` to build, upload, and submit the current project for audit. It reads `package.json.heybox.miniProgramId`, validates that the bound mini-program belongs to the server-side current entity before precheck/build/upload, prechecks `package.json.version` before build, runs the project's `build` script via the package manager auto-detected by lockfile, uploads `dist/` to CDN (skipping `manifest.json`, `.DS_Store`, `.map`), then calls the submit-audit API. The deploy upload pipeline rejects actual upload artifacts over 100MiB before any upload request, processes CDN upload metadata and callback confirmation at 50 files per batch, keeps 4-way upload concurrency within each batch, and validates CDN-returned keys exactly against the local expected upload keys.
 8. Use `hb-sdk remote deploy --skip-build --release-note <text>` only when the `dist/` directory is already prepared by an upstream CI stage. In this mode the CLI reads `dist/manifest.json.version` before precheck. Missing `dist/manifest.json` or `dist/index.html` aborts the run.
 9. Always provide a concise release note before deploy. Non-interactive environments must pass `--release-note`; interactive terminals may prompt for it. The default is manual release after approval with `hb-sdk remote release <version>`; use `--auto-publish` when the audited version should automatically release after approval.
 10. Use `hb-sdk remote release <version>`, `hb-sdk remote withdraw <version>`, `hb-sdk remote take-down`, and `hb-sdk remote reopen` for dangerous remote changes. Interactive terminals should confirm after showing enough context; non-interactive environments must pass `--yes`.

package/skill/references/api-root.md

@@ -19,7 +19,7 @@
 ## Package metadata
 
 - Package: `@heybox/hb-sdk`
-- Version at generation time: `0.4.6`
+- Version at generation time: `0.4.7`
 - Public root export: `@heybox/hb-sdk`
 - Protocol export: `@heybox/hb-sdk/protocol`
 - Vite plugin export: `@heybox/hb-sdk/vite`
@@ -341,11 +341,14 @@ import { share } from '@heybox/hb-sdk';
 await share.showShareMenu({
   title: '我的小程序页面',
   desc: '来自黑盒小程序的分享',
-  url: window.location.href,
   imageUrl: 'https://imgheybox.max-c.com/demo.png',
 });
 ```
 
+用户小程序通常不要传 `url`；宿主 runtime 会按当前小程序生成
+`/tools/common_share?user_miniprogram_id=...` 分享落地页。只有确实要分享外部
+HTTP(S) 页面时才显式传 `url`。
+
 截图分享：
 
 ```ts

package/skill/references/cli.md

@@ -147,8 +147,10 @@ HB_SDK_ALLOW_UNSAFE_API_BASE_URL=1 hb-sdk remote deploy --api-base-url http://12
 7. 解析 `dist/manifest.json`，自动剥离 BOM，并校验 `version` 是合法 SemVer：允许 prerelease，例如 `1.2.3-rc.1`；拒绝 build metadata，例如 `1.2.3+build.1`；拒绝 `0.0.0`。
 8. 普通 remote deploy 的 `dist/manifest.json.version` 必须与预检使用的 `package.json.version` 一致，否则失败且不上传。
 9. 遍历 `dist/` 文件，过滤掉 `manifest.json`、`.DS_Store`、`*.map`；遇到 symbolic link 或 `node_modules` 路径直接报错。
-10. 4 并发把文件上传到 CDN，默认只展示上传阶段和文件总数；`--verbose` 会展示并发数、bucket / region 和逐文件结果，但不会输出 keys、签名、cookie 或 token。
-11. 全部上传成功后调用提交审核接口，CLI 输出提交审核成功、发布策略和可用的 preview URL。
+10. 校验上传路径长度不超过 64，并在任何上传请求发生前限制实际上传产物总大小不超过 100MiB。错误提示中使用 `100MB`，方便开发者理解。
+11. 上传信息、上传凭证和上传回调按批次执行，每批最多 50 个文件；批次串行，批内保持 4 并发上传到 CDN。CLI 会校验 CDN 上传信息接口返回的 key 与本地期望 key 完全一致，异常时停止后续批次且不提交审核。
+12. 默认只展示上传阶段和文件总数，例如 `正在上传 137/244 个文件`；`--verbose` 会展示并发数、批次数、当前批次、bucket / region 和逐文件结果，但不会输出 keys、签名、cookie、pkey、token 或临时密钥。
+13. 全部上传成功后调用提交审核接口，CLI 输出提交审核成功、发布策略和可用的 preview URL。
 
 `mini_program_id` 没有 CLI flag，必须落在 `package.json` 里：
 
@@ -367,7 +369,6 @@ import hbSDK from '@heybox/hb-sdk';
 await hbSDK.share.showShareMenu({
   title: '<%= projectName %>',
   desc: '分享描述',
-  url: window.location.href,
 });
 
 await hbSDK.storage.setStorage({
@@ -380,4 +381,6 @@ const response = await hbSDK.network.request({
   url: 'https://jsonplaceholder.typicode.com/todos/1',
 });
 ```
+
+用户小程序通常不要传 `url`；宿主 runtime 会自动生成当前小程序的通用分享页。只有确实要分享外部 HTTP(S) 页面时才显式传 `url`。
 ````

package/skill/skill.json

@@ -1,11 +1,11 @@
 {
   "name": "hb-sdk",
-  "skillVersion": "0.4.6+skill.1c7149a95a0b",
+  "skillVersion": "0.4.7+skill.c42e9bccd99b",
   "sdk": {
     "package": "@heybox/hb-sdk",
-    "version": "0.4.6",
-    "compatibility": "0.4.6"
+    "version": "0.4.7",
+    "compatibility": "0.4.7"
   },
   "source": "https://open.xiaoheihe.cn/agent-skills/hb-sdk",
-  "integrity": "sha256-1c7149a95a0b5d0ffeaa479456186dab5f3bc06865fd5c28a975682381267811"
+  "integrity": "sha256-c42e9bccd99b7a9f6119a18ad0bd8bd9040176bdcc99134b0c6f29aa19e9aa59"
 }

package/types/miniapp-publish/index.d.ts

@@ -1,5 +1,7 @@
 export declare const MINIAPP_UPLOAD_SCOPE = "activity";
 export declare const ACTIVITY_UPLOAD_KEY_MAX_LENGTH = 64;
+export declare const MINIAPP_UPLOAD_BATCH_SIZE = 50;
+export declare const MINIAPP_UPLOAD_TOTAL_SIZE_LIMIT_BYTES: number;
 export declare const USER_MINIPROGRAM_ACCESS_STATUS_API_PATH = "/mall/developer/user_miniprogram/access_status";
 export declare const DEVELOPER_ENTITY_LIST_API_PATH = "/mall/developer/entity/list";
 export declare const DEVELOPER_ENTITY_SWITCH_API_PATH = "/mall/developer/entity/switch";
@@ -36,4 +38,12 @@ export interface ValidateUploadPathsOptions {
     maxLength?: number;
 }
 export declare function validateUploadPaths(items: UploadPathItem[], options: ValidateUploadPathsOptions): string | undefined;
+export interface UploadSizeItem {
+    relativePath: string;
+    size: number;
+}
+export interface ValidateUploadTotalSizeOptions {
+    limitBytes?: number;
+}
+export declare function validateUploadTotalSize(items: UploadSizeItem[], options?: ValidateUploadTotalSizeOptions): "构建产物总大小超过 100MB，请删除未引用资源或压缩图片后重新 deploy" | undefined;
 export declare function shouldUploadDistFile(relativePath: string): boolean;

package/types/modules/share/types.d.ts

@@ -16,8 +16,8 @@ export interface MiniProgramShowShareMenuOptions {
     title: string;
     /** 分享描述。 */
     desc: string;
-    /** 分享落地页 URL。 */
-    url: string;
+    /** 分享落地页 URL；不传时由宿主 runtime 生成当前小程序的通用分享页。 */
+    url?: string;
     /** 分享缩略图 URL。 */
     imageUrl?: string;
     /** 指定分享渠道；不传则由客户端展示默认分享面板。 */