@heybox/hb-sdk 0.9.1-alpha.4 → 0.9.1-alpha.6

package/dist/cli-chunks/{index.esm-WYIrPjkF.cjs → index.esm-eNPTDv6W.cjs}

@@ -11,38 +11,37 @@ var require$$0$4 = require('url');
 var require$$0 = require('zlib');
 var require$$0$1 = require('buffer');
 var require$$1 = require('util');
-var index = require('./index-BGh-Izf8.cjs');
-var dev = require('./dev-X8_kbp78.cjs');
+var index = require('./index-J4uQvKT_.cjs');
+var dev = require('./dev-BMX6UXUe.cjs');
 require('node:module');
-require('node:fs');
 require('node:fs/promises');
 require('node:path');
 require('path');
 require('os');
-require('node:crypto');
-require('readline');
-require('tty');
-require('assert');
-require('./session-Dz1cGg0E.cjs');
 require('fs');
 require('constants');
-require('./context-YrzmEOau.cjs');
-require('./runtime-permission-env-eiq8vE62.cjs');
-require('./version-DYFkOykv.cjs');
+require('assert');
+require('readline');
+require('tty');
+require('node:crypto');
+require('node:process');
+require('node:buffer');
+require('node:url');
+require('node:util');
+require('node:child_process');
+require('node:os');
+require('node:fs');
+require('./context-Bo4L-Cx_.cjs');
+require('./runtime-permission-env-DWaPlchd.cjs');
+require('./version-tzrFwpkl.cjs');
 require('node:async_hooks');
 require('sharp');
-require('node:os');
 require('node:net');
 require('node:dns/promises');
 require('node:http');
 require('undici');
-require('./browser-RAy8e8cV.cjs');
-require('node:process');
-require('node:buffer');
-require('node:url');
-require('node:util');
-require('node:child_process');
-require('./project-vite-BVDIeoHB.cjs');
+require('./browser-DUdEZCyq.cjs');
+require('./project-vite-Du1m7Y_3.cjs');
 require('node:zlib');
 
 var bufferUtil = {exports: {}};

package/dist/cli-chunks/{login-DWmNuhWc.cjs → login-BL2OE6r9.cjs}

@@ -3,37 +3,36 @@
 var promises = require('node:readline/promises');
 var node_crypto = require('node:crypto');
 var node_http = require('node:http');
-var session = require('./session-Dz1cGg0E.cjs');
-var browser = require('./browser-RAy8e8cV.cjs');
-var index = require('./index-BGh-Izf8.cjs');
+var index = require('./index-J4uQvKT_.cjs');
+var browser = require('./browser-DUdEZCyq.cjs');
+require('node:module');
+require('node:fs/promises');
 require('node:path');
+require('path');
+require('os');
 require('fs');
 require('constants');
 require('stream');
 require('util');
 require('assert');
-require('path');
+require('readline');
+require('tty');
+require('events');
+require('buffer');
 require('node:process');
 require('node:buffer');
 require('node:url');
 require('node:util');
 require('node:child_process');
-require('node:fs/promises');
 require('node:os');
 require('node:fs');
-require('node:module');
-require('os');
-require('readline');
-require('tty');
-require('events');
-require('buffer');
 
 const HEYBOX_CALLBACK_HOST = '127.0.0.1';
 const HEYBOX_CALLBACK_PATH = '/heybox/callback';
 const HEYBOX_CALLBACK_DONE_PATH = '/heybox/callback/done';
 const DEFAULT_HEYBOX_CALLBACK_TIMEOUT_MS = 5 * 60 * 1000;
 function createHeyboxLoginUrl(callbackUrl, state, options = {}) {
-    const url = new URL(session.resolveHeyboxLoginBaseUrl(options));
+    const url = new URL(index.resolveHeyboxLoginBaseUrl(options));
     url.searchParams.set('mode', 'cli');
     url.searchParams.set('redirect_url', callbackUrl);
     url.searchParams.set('state', state);
@@ -141,7 +140,7 @@ async function loginToHeybox(options = {}) {
     const logger = options.logger ?? index.createCliLogger();
     const waitForBrowserCallback = options.waitForBrowserCallback ?? waitForHeyboxBrowserCallback;
     const env = options.env ?? process.env;
-    const loginBaseUrl = session.resolveHeyboxLoginBaseUrl({ ...options, env });
+    const loginBaseUrl = index.resolveHeyboxLoginBaseUrl({ ...options, env });
     logger.section('Heybox 浏览器登录');
     logger.debug(`登录入口环境: ${loginBaseUrl}`);
     const payload = await logger.task('等待浏览器登录回调', () => waitForBrowserCallback({
@@ -162,16 +161,16 @@ async function loginToHeybox(options = {}) {
         },
         timeoutMs: options.timeoutMs,
     }), { successText: '已接收 Heybox 登录态' });
-    const session$1 = session.createHeyboxAuthSession(payload, { ...options, loginBaseUrl });
-    await session.writeHeyboxAuthSession(session$1, options);
-    logger.success(`Heybox 登录成功：${session$1.heyboxId}`);
-    await selectDeveloperEntityAfterLogin(session$1, options, logger);
-    logger.debug(`cache: ${session.getAuthCacheFilePath(options)}`);
+    const session = index.createHeyboxAuthSession(payload, { ...options, loginBaseUrl });
+    await index.writeHeyboxAuthSession(session, options);
+    logger.success(`Heybox 登录成功：${session.heyboxId}`);
+    await selectDeveloperEntityAfterLogin(session, options, logger);
+    logger.debug(`cache: ${index.getAuthCacheFilePath(options)}`);
     logger.info('验证命令: hb-sdk login status');
 }
 async function printLoginStatus(options = {}) {
     const logger = options.logger ?? index.createCliLogger();
-    const status = await session.readRedactedHeyboxAuthStatus(options);
+    const status = await index.readRedactedHeyboxAuthStatus(options);
     logger.section('Heybox 登录态');
     if (!status.loggedIn) {
         logger.warn('未登录');
@@ -190,16 +189,16 @@ async function printLoginStatus(options = {}) {
 }
 async function clearLoginStatus(options = {}) {
     const logger = options.logger ?? index.createCliLogger();
-    await session.clearHeyboxAuthSession(options);
+    await index.clearHeyboxAuthSession(options);
     logger.success('已清理 Heybox 登录态');
-    logger.debug(`cache: ${session.getAuthCacheFilePath(options)}`);
+    logger.debug(`cache: ${index.getAuthCacheFilePath(options)}`);
 }
-async function selectDeveloperEntityAfterLogin(session$1, options, logger) {
+async function selectDeveloperEntityAfterLogin(session, options, logger) {
     if (options.noSelectEntity) {
         logger.info('已跳过开发者主体选择。后续可运行: hb-sdk remote entity switch <entity-id>');
         return;
     }
-    const entities = await logger.task('读取开发者主体列表', () => listDeveloperEntities(session$1, options), {
+    const entities = await logger.task('读取开发者主体列表', () => listDeveloperEntities(session, options), {
         successText: '已读取开发者主体列表',
     });
     if (entities.length === 0) {
@@ -210,12 +209,12 @@ async function selectDeveloperEntityAfterLogin(session$1, options, logger) {
     if (entities.length === 1) {
         const [entity] = entities;
         if (!entity.isCurrent) {
-            await switchDeveloperEntity(session$1, entity, options);
-            await session.setSelectedDeveloperEntitySnapshot(entity, options);
+            await switchDeveloperEntity(session, entity, options);
+            await index.setSelectedDeveloperEntitySnapshot(entity, options);
             logger.success(`已切换开发者主体：${formatDeveloperEntity(entity)}`);
             return;
         }
-        await session.setSelectedDeveloperEntitySnapshot(entity, options);
+        await index.setSelectedDeveloperEntitySnapshot(entity, options);
         logger.info(`当前开发者主体：${formatDeveloperEntity(entity)}`);
         return;
     }
@@ -232,8 +231,8 @@ async function selectDeveloperEntityAfterLogin(session$1, options, logger) {
     if (!selected) {
         throw new Error('必须选择一个开发者主体；如需跳过，请显式传 --no-select-entity');
     }
-    await switchDeveloperEntity(session$1, selected, options);
-    await session.setSelectedDeveloperEntitySnapshot(selected, options);
+    await switchDeveloperEntity(session, selected, options);
+    await index.setSelectedDeveloperEntitySnapshot(selected, options);
     logger.success(`已切换开发者主体：${formatDeveloperEntity(selected)}`);
 }
 async function listDeveloperEntities(session, options) {
@@ -246,18 +245,18 @@ async function switchDeveloperEntity(session, entity, options) {
         entity_id: entity.entityId,
     });
 }
-async function requestDeveloperEntityApi(path, method, session$1, options, fields = {}) {
-    const apiBaseUrl = session.resolveHeyboxApiBaseUrl(options);
-    const context = session.createHeyboxOpenPlatformRequestContext(session$1, path, {
+async function requestDeveloperEntityApi(path, method, session, options, fields = {}) {
+    const apiBaseUrl = index.resolveHeyboxApiBaseUrl(options);
+    const context = index.createHeyboxOpenPlatformRequestContext(session, path, {
         ...(method === 'POST' ? { contentType: 'application/x-www-form-urlencoded' } : {}),
     });
     const fetchImpl = options.fetchImpl ?? fetch;
-    const response = await fetchImpl(session.createHeyboxApiUrl(apiBaseUrl, path, context.platformParams), {
+    const response = await fetchImpl(index.createHeyboxApiUrl(apiBaseUrl, path, context.platformParams), {
         method,
         headers: context.headers,
         ...(method === 'POST' ? { body: new URLSearchParams(stringifyFormFields(fields)).toString() } : {}),
     });
-    return session.readHeyboxApiEnvelope(response, { pathWithQuery: path, requireResult: method === 'GET' });
+    return index.readHeyboxApiEnvelope(response, { pathWithQuery: path, requireResult: method === 'GET' });
 }
 function stringifyFormFields(fields) {
     return Object.fromEntries(Object.entries(fields).map(([key, value]) => [key, String(value)]));

package/dist/cli-chunks/{project-vite-BVDIeoHB.cjs → project-vite-Du1m7Y_3.cjs}

@@ -5,7 +5,7 @@ var fs$1 = require('node:fs/promises');
 var node_module = require('node:module');
 var path = require('node:path');
 var node_url = require('node:url');
-var index = require('./index-BGh-Izf8.cjs');
+var index = require('./index-J4uQvKT_.cjs');
 
 function findProjectRoot(startDir) {
     let current = path.resolve(startDir);

package/dist/cli-chunks/{remote-BHJFxXyc.cjs → remote-ZHJUtx6l.cjs}

@@ -1,32 +1,37 @@
 'use strict';
 
-var runtimePermissionEnv = require('./runtime-permission-env-eiq8vE62.cjs');
-var context = require('./context-YrzmEOau.cjs');
+var runtimePermissionEnv = require('./runtime-permission-env-DWaPlchd.cjs');
+var context = require('./context-Bo4L-Cx_.cjs');
 var promises = require('node:readline/promises');
-var index = require('./index-BGh-Izf8.cjs');
-var session = require('./session-Dz1cGg0E.cjs');
+var index = require('./index-J4uQvKT_.cjs');
+var runtimeGate = require('./runtime-gate-DedD3ynE.cjs');
 var childProcess = require('node:child_process');
 var fs = require('node:fs');
 var fs$1 = require('node:fs/promises');
 var path = require('node:path');
 var node_crypto = require('node:crypto');
 require('node:zlib');
-var runtimeGate = require('./runtime-gate-CR0dRMpQ.cjs');
-require('./version-DYFkOykv.cjs');
+require('./version-tzrFwpkl.cjs');
 require('node:async_hooks');
 require('sharp');
 require('node:module');
 require('path');
 require('os');
+require('fs');
+require('constants');
+require('stream');
+require('util');
+require('assert');
 require('readline');
 require('tty');
-require('assert');
 require('events');
-require('stream');
 require('buffer');
-require('util');
-require('fs');
-require('constants');
+require('node:process');
+require('node:buffer');
+require('node:url');
+require('node:util');
+require('node:os');
+require('inspector');
 
 // 脚手架开发占位图；构建可用，提审前必须替换。
 const BASIC_INFO_PLACEHOLDER_SHA256 = 'd14e54b30f5e6d1bcbf51267bc82b06a0af7c333f2945bcc16b4e1adc3b123dd';
@@ -52,20 +57,20 @@ async function postCDNUploadCallback(options, runtime = {}) {
     const query = options.isFinished ? '?is_finished=true' : '';
     return postHeyboxApi(`/bbs/app/api/qcloud/cos/upload/callback/v2${query}`, body, options.session, runtime);
 }
-async function postHeyboxApi(pathWithQuery, body, session$1, runtime) {
+async function postHeyboxApi(pathWithQuery, body, session, runtime) {
     const fetchImpl = runtime.fetchImpl ?? fetch;
-    const context = session.createHeyboxOpenPlatformRequestContext(session$1, pathWithQuery, {
+    const context = index.createHeyboxOpenPlatformRequestContext(session, pathWithQuery, {
         contentType: 'application/x-www-form-urlencoded',
     });
     // CDN 使用共用上传服务，不随小程序服务的个人测试 tag 切换。
     delete context.headers['x-rylai-service-tag'];
     delete context.platformParams.special_tag;
-    const response = await fetchImpl(session.createHeyboxApiUrl(runtime.baseUrl ?? context.baseUrl, pathWithQuery, context.platformParams), {
+    const response = await fetchImpl(index.createHeyboxApiUrl(runtime.baseUrl ?? context.baseUrl, pathWithQuery, context.platformParams), {
         method: 'POST',
         headers: context.headers,
         body: body.toString(),
     });
-    const result = await session.readHeyboxApiEnvelope(response, { pathWithQuery, requireResult: true });
+    const result = await index.readHeyboxApiEnvelope(response, { pathWithQuery, requireResult: true });
     return result;
 }
 
@@ -127,7 +132,7 @@ async function recordUserMiniprogramUploadResult(options, runtime = {}) {
 }
 async function postUserMiniprogramVersionForm(path, options, fields, runtime) {
     const fetchImpl = runtime.fetchImpl ?? fetch;
-    const context = session.createHeyboxOpenPlatformRequestContext(options.session, path, {
+    const context = index.createHeyboxOpenPlatformRequestContext(options.session, path, {
         contentType: 'application/x-www-form-urlencoded',
     });
     const body = new URLSearchParams();
@@ -135,12 +140,12 @@ async function postUserMiniprogramVersionForm(path, options, fields, runtime) {
     for (const [key, value] of Object.entries(fields)) {
         body.set(key, value);
     }
-    const response = await fetchImpl(session.createHeyboxApiUrl(runtime.baseUrl ?? context.baseUrl, path, context.platformParams), {
+    const response = await fetchImpl(index.createHeyboxApiUrl(runtime.baseUrl ?? context.baseUrl, path, context.platformParams), {
         method: 'POST',
         headers: context.headers,
         body: body.toString(),
     });
-    const result = await session.readHeyboxApiEnvelope(response, {
+    const result = await index.readHeyboxApiEnvelope(response, {
         pathWithQuery: path,
     });
     return result ?? {};
@@ -156,6 +161,7 @@ async function runUpload(options, runtime = {}) {
     const postCDNUploadCallback$1 = runtime.postCDNUploadCallback ?? postCDNUploadCallback;
     const recordUserMiniprogramUploadResult$1 = runtime.recordUserMiniprogramUploadResult ?? recordUserMiniprogramUploadResult;
     const createReadStream = runtime.createReadStream ?? fs.createReadStream;
+    const cdnBaseUrl = runtime.cdnBaseUrl ?? runtime.baseUrl;
     let createCosClient = runtime.createCosClient;
     if (!createCosClient) {
         const COS = await loadCosConstructor();
@@ -181,7 +187,7 @@ async function runUpload(options, runtime = {}) {
                 scope: runtimePermissionEnv.MINIAPP_UPLOAD_SCOPE,
                 fileInfos,
                 needCache: false,
-            }, { baseUrl: runtime.baseUrl, fetchImpl });
+            }, { baseUrl: cdnBaseUrl, fetchImpl });
             logger.debug(`CDN bucket: ${uploadInfo.bucket}`);
             logger.debug(`CDN region: ${uploadInfo.region}`);
             validateUploadInfoKeys(batch, uploadInfo.keys);
@@ -195,10 +201,10 @@ async function runUpload(options, runtime = {}) {
                 } : await getCDNUploadToken$1({
                     session: options.session,
                     bucket: uploadInfo.bucket,
-                    keys: indexedFiles.map(item => item.key),
-                    mimetypes: indexedFiles.map(item => item.file.mimeType),
+                    keys: indexedFiles.map((item) => item.key),
+                    mimetypes: indexedFiles.map((item) => item.file.mimeType),
                     isMultipartUpload: 0,
-                }, { baseUrl: runtime.baseUrl, fetchImpl });
+                }, { baseUrl: cdnBaseUrl, fetchImpl });
             }
             catch (error) {
                 throw new index.CliError(`获取 CDN 上传凭证失败：${readErrorMessage(error)}`);
@@ -244,7 +250,7 @@ async function runUpload(options, runtime = {}) {
             if (successfulKeys.length > 0) {
                 logger.debug('正在确认 CDN 上传结果');
                 if (!companion)
-                    await postCDNUploadCallback$1({ session: options.session, keys: successfulKeys, isFinished: true }, { baseUrl: runtime.baseUrl, fetchImpl });
+                    await postCDNUploadCallback$1({ session: options.session, keys: successfulKeys, isFinished: true }, { baseUrl: cdnBaseUrl, fetchImpl });
                 await recordUserMiniprogramUploadResult$1({
                     session: options.session,
                     miniProgramId: options.miniProgramId,
@@ -321,7 +327,7 @@ function createDefaultCosClient(uploadToken, COS) {
     };
 }
 async function loadCosConstructor() {
-    const cosModule = await Promise.resolve().then(function () { return require('./index-BdbwsefW.cjs'); }).then(function (n) { return n.index; });
+    const cosModule = await Promise.resolve().then(function () { return require('./index-DmCWB_hF.cjs'); }).then(function (n) { return n.index; });
     return cosModule.default;
 }
 function formatSize(bytes) {
@@ -577,8 +583,8 @@ async function runDeployCommand(options, runtime = {}) {
     const miniProgramId = packageJson.heybox?.miniProgramId;
     const autoPublish = Boolean(options.autoPublish);
     const env = options.env ?? process.env;
-    const apiBaseUrl = session.resolveHeyboxApiBaseUrl({ ...options, env });
-    const loginBaseUrl = session.resolveHeyboxLoginBaseUrl({ ...options, env });
+    const apiBaseUrl = index.resolveHeyboxApiBaseUrl({ ...options, env });
+    const loginBaseUrl = index.resolveHeyboxLoginBaseUrl({ ...options, env });
     if (typeof miniProgramId !== 'string' || !miniProgramId.trim()) {
         throw new Error('未在 package.json 中找到 heybox.miniProgramId，请先配置 mini program id');
     }
@@ -587,7 +593,7 @@ async function runDeployCommand(options, runtime = {}) {
     const declaredBindAppIds = runtimePermissionEnv.readMiniappBindAppIdsFromPackageJson(projectRoot);
     const declaredCategory = runtimePermissionEnv.readMiniappCategoryFromPackageJson(projectRoot);
     const releaseNote = await resolveDeployReleaseNote(options, runtime);
-    const session$1 = await logger.task('正在校验 Heybox 登录态', () => (runtime.requireAuthSession ?? session.requireHeyboxAuthSession)({ loginBaseUrl }), { successText: 'Heybox 登录态有效' });
+    const session = await logger.task('正在校验 Heybox 登录态', () => (runtime.requireAuthSession ?? index.requireHeyboxAuthSession)({ loginBaseUrl }), { successText: 'Heybox 登录态有效' });
     logger.debug(`Heybox API: ${apiBaseUrl}`);
     const uploadVersion = validateVersionForDeploy(packageJson.version, 'package.json.version');
     const deploy = async () => {
@@ -602,7 +608,7 @@ async function runDeployCommand(options, runtime = {}) {
                     env,
                     fetchImpl: runtime.fetchImpl,
                     loginBaseUrl,
-                    session: session$1,
+                    session,
                 });
                 await context.migrateBasicInfo(projectRoot, bound.detail, miniProgramId, runtime.fetchImpl);
             }
@@ -612,7 +618,7 @@ async function runDeployCommand(options, runtime = {}) {
             }
             precheckVersion = uploadVersion;
             await runVersionPrecheck({
-                session: session$1,
+                session,
                 miniProgramId,
                 version: precheckVersion,
                 releaseNote,
@@ -627,7 +633,7 @@ async function runDeployCommand(options, runtime = {}) {
                     env,
                     fetchImpl: runtime.fetchImpl,
                     loginBaseUrl,
-                    session: session$1,
+                    session,
                 }), { successText: '已读取远端小程序权限' });
                 const localNetworkEnabled = !localPermissions.declared || localPermissions.permissions?.network?.enabled === true;
                 skipPlatformCsp = localNetworkEnabled && context.shouldSkipMiniappPlatformCsp(detail.runtime_permissions);
@@ -678,7 +684,7 @@ async function runDeployCommand(options, runtime = {}) {
                 throw new Error('dist/manifest.json.bindAppIds 与 package.json#heybox.bindAppIds 不一致，请重新 build 后再 deploy');
             }
             await runVersionPrecheck({
-                session: session$1,
+                session,
                 miniProgramId,
                 version,
                 manifest,
@@ -706,6 +712,7 @@ async function runDeployCommand(options, runtime = {}) {
             // deploy 期间 dist 视为稳定构建输出；为避免持有大量文件描述符，签名和上传不会共享打开的文件句柄。
             const artifactReceipt = await logger.task('正在计算构建产物签名', () => (runtime.computeMiniappArtifactReceipt ?? computeMiniappArtifactReceipt)(uploadFiles), { successText: '构建产物签名计算完成' });
             runtimePermissionEnv.validateMiniappCompanionFileReceipts(manifest?.companions, artifactReceipt.files);
+            runtimePermissionEnv.validateMiniappWorkspaceCardFileReceipts(manifest?.workspaceCards, artifactReceipt.files);
             const profile = runtimePermissionEnv.parseMiniappBasicInfo(manifest, String(manifest.sdkVersion));
             if (profile) {
                 const localProfile = runtimePermissionEnv.parseMiniappBasicInfo((await readPackageJson(projectRoot)).heybox ?? {});
@@ -727,7 +734,7 @@ async function runDeployCommand(options, runtime = {}) {
             }
             const createdUploadSession = await logger.task('正在创建或恢复上传会话', async () => {
                 const result = await (runtime.createUserMiniprogramUploadSession ?? createUserMiniprogramUploadSession)({
-                    session: session$1,
+                    session,
                     miniProgramId,
                     version,
                     manifest,
@@ -773,7 +780,7 @@ async function runDeployCommand(options, runtime = {}) {
                 const uploadedCompanions = createdUploadSession.files.filter(item => item.file.relativePath.startsWith('companions/') && !missingKeys.has(item.key));
                 for (let index = 0; index < uploadedCompanions.length; index += runtimePermissionEnv.MINIAPP_UPLOAD_BATCH_SIZE) {
                     await (runtime.recordUserMiniprogramUploadResult ?? recordUserMiniprogramUploadResult)({
-                        session: session$1, miniProgramId, version, sessionId: uploadSessionId,
+                        session, miniProgramId, version, sessionId: uploadSessionId,
                         files: uploadedCompanions.slice(index, index + runtimePermissionEnv.MINIAPP_UPLOAD_BATCH_SIZE)
                             .map(({ file }) => ({ path: file.relativePath, size: file.size, sha256: file.sha256 })),
                     }, { baseUrl: apiBaseUrl, fetchImpl: runtime.fetchImpl });
@@ -787,12 +794,12 @@ async function runDeployCommand(options, runtime = {}) {
                         miniProgramId,
                     });
                     await (runtime.runUpload ?? runUpload)({
-                        session: session$1,
+                        session,
                         files: createdUploadSession.missingFiles.map(({ file, key }) => ({ ...file, key })),
                         miniProgramId,
                         version,
                         uploadSessionId,
-                    }, { baseUrl: apiBaseUrl, fetchImpl: runtime.fetchImpl, logger });
+                    }, { baseUrl: apiBaseUrl, cdnBaseUrl: index.HEYBOX_API_BASE_URL, fetchImpl: runtime.fetchImpl, logger });
                 }
             }
             catch (error) {
@@ -800,7 +807,7 @@ async function runDeployCommand(options, runtime = {}) {
             }
         }
         try {
-            const submitOptions = { session: session$1, miniProgramId, sessionId: uploadSessionId, preflightToken };
+            const submitOptions = { session, miniProgramId, sessionId: uploadSessionId, preflightToken };
             submitAuditResult = await logger.task('正在提交审核', () => (runtime.submitUserMiniprogramAudit ?? submitUserMiniprogramAudit)(submitOptions, {
                 baseUrl: apiBaseUrl,
                 fetchImpl: runtime.fetchImpl,
@@ -884,6 +891,10 @@ async function readDeployManifest(projectRoot, logger) {
         logger.warn('dist/manifest.json 包含 BOM，已自动剥离');
     }
     const validated = runtimePermissionEnv.validateMiniappManifestForDeploy(manifest);
+    if (validated.workspaceCards) {
+        runtimeGate.verifyWorkspaceCardsSnapshot({ ...validated, bindAppIds: validated.bindAppIds ?? [], workspaceCards: validated.workspaceCards });
+        runtimeGate.verifyWorkspaceCardArtifacts(distDir, validated.workspaceCards);
+    }
     const bindAppIds = validated.bindAppIds ?? [];
     return {
         manifest: {
@@ -1203,7 +1214,7 @@ async function runRemoteDeployCommand(options, runtime) {
     return finishRemoteCommand(options, runtime, output);
 }
 async function createRemoteCommandContext(options, runtime) {
-    index.applyServiceTagIfNeeded(options.serviceTag);
+    index.applyMiniProgramServiceTagIfNeeded(options.serviceTag);
     const logger = resolveRemoteLogger(options, runtime);
     const environment = await context.resolveRemoteEnvironment({
         allowUnsafeApiBaseUrl: options.allowUnsafeApiBaseUrl,
@@ -1323,7 +1334,7 @@ async function remoteEntitySwitch(options, context, runtime) {
         throw new Error('远端响应缺少 entity_id');
     }
     const switchedOwnerHeyboxId = normalizePositiveInteger(switched.owner_heybox_id);
-    await session.setSelectedDeveloperEntitySnapshot({
+    await index.setSelectedDeveloperEntitySnapshot({
         entityId: switchedEntityId,
         entityName: switched.entity_name || '--',
         ...(switchedOwnerHeyboxId !== undefined ? { ownerHeyboxId: switchedOwnerHeyboxId } : {}),