@heybox/hb-sdk 0.9.4-alpha.0 → 0.9.4-alpha.2

package/dist/cli-chunks/{index-Czupnh5A.cjs → index-CxelQqdy.cjs}

@@ -238,19 +238,19 @@ function requireArgument () {
 
 var command = {};
 
-const require$5 = node_module.createRequire((typeof document === 'undefined' ? require('u' + 'rl').pathToFileURL(__filename).href : (_documentCurrentScript && _documentCurrentScript.tagName.toUpperCase() === 'SCRIPT' && _documentCurrentScript.src || new URL('cli-chunks/index-Czupnh5A.cjs', document.baseURI).href)));
+const require$5 = node_module.createRequire((typeof document === 'undefined' ? require('u' + 'rl').pathToFileURL(__filename).href : (_documentCurrentScript && _documentCurrentScript.tagName.toUpperCase() === 'SCRIPT' && _documentCurrentScript.src || new URL('cli-chunks/index-CxelQqdy.cjs', document.baseURI).href)));
 function __require$4() { return require$5("node:events"); }
 
-const require$4 = node_module.createRequire((typeof document === 'undefined' ? require('u' + 'rl').pathToFileURL(__filename).href : (_documentCurrentScript && _documentCurrentScript.tagName.toUpperCase() === 'SCRIPT' && _documentCurrentScript.src || new URL('cli-chunks/index-Czupnh5A.cjs', document.baseURI).href)));
+const require$4 = node_module.createRequire((typeof document === 'undefined' ? require('u' + 'rl').pathToFileURL(__filename).href : (_documentCurrentScript && _documentCurrentScript.tagName.toUpperCase() === 'SCRIPT' && _documentCurrentScript.src || new URL('cli-chunks/index-CxelQqdy.cjs', document.baseURI).href)));
 function __require$3() { return require$4("node:child_process"); }
 
-const require$3 = node_module.createRequire((typeof document === 'undefined' ? require('u' + 'rl').pathToFileURL(__filename).href : (_documentCurrentScript && _documentCurrentScript.tagName.toUpperCase() === 'SCRIPT' && _documentCurrentScript.src || new URL('cli-chunks/index-Czupnh5A.cjs', document.baseURI).href)));
+const require$3 = node_module.createRequire((typeof document === 'undefined' ? require('u' + 'rl').pathToFileURL(__filename).href : (_documentCurrentScript && _documentCurrentScript.tagName.toUpperCase() === 'SCRIPT' && _documentCurrentScript.src || new URL('cli-chunks/index-CxelQqdy.cjs', document.baseURI).href)));
 function __require$2() { return require$3("node:path"); }
 
-const require$2 = node_module.createRequire((typeof document === 'undefined' ? require('u' + 'rl').pathToFileURL(__filename).href : (_documentCurrentScript && _documentCurrentScript.tagName.toUpperCase() === 'SCRIPT' && _documentCurrentScript.src || new URL('cli-chunks/index-Czupnh5A.cjs', document.baseURI).href)));
+const require$2 = node_module.createRequire((typeof document === 'undefined' ? require('u' + 'rl').pathToFileURL(__filename).href : (_documentCurrentScript && _documentCurrentScript.tagName.toUpperCase() === 'SCRIPT' && _documentCurrentScript.src || new URL('cli-chunks/index-CxelQqdy.cjs', document.baseURI).href)));
 function __require$1() { return require$2("node:fs"); }
 
-const require$1 = node_module.createRequire((typeof document === 'undefined' ? require('u' + 'rl').pathToFileURL(__filename).href : (_documentCurrentScript && _documentCurrentScript.tagName.toUpperCase() === 'SCRIPT' && _documentCurrentScript.src || new URL('cli-chunks/index-Czupnh5A.cjs', document.baseURI).href)));
+const require$1 = node_module.createRequire((typeof document === 'undefined' ? require('u' + 'rl').pathToFileURL(__filename).href : (_documentCurrentScript && _documentCurrentScript.tagName.toUpperCase() === 'SCRIPT' && _documentCurrentScript.src || new URL('cli-chunks/index-CxelQqdy.cjs', document.baseURI).href)));
 function __require() { return require$1("node:process"); }
 
 var help = {};
@@ -17249,7 +17249,7 @@ async function inspectFeedbackLog(file, size) {
     return { mimeType: 'text/plain', width: 0, height: 0 };
 }
 async function createFeedbackCosClient(getToken) {
-    const { default: COS } = await Promise.resolve().then(function () { return require('./index-COzyQErL.cjs'); }).then(function (n) { return n.index; });
+    const { default: COS } = await Promise.resolve().then(function () { return require('./index-DF8KQKoa.cjs'); }).then(function (n) { return n.index; });
     const cos = new COS({
         getAuthorization(_options, callback) {
             void getToken().then((token) => callback({
@@ -20900,7 +20900,7 @@ function readEnvNameArgFromArgv(argv) {
 }
 
 const CLI_VERSION_PLACEHOLDER = ['__HB', 'SDK', 'CLI', 'VERSION__'].join('_');
-const BUILT_CLI_VERSION = '0.9.4-alpha.0';
+const BUILT_CLI_VERSION = '0.9.4-alpha.2';
 const PACKAGE_JSON_CANDIDATES = [
     path.resolve(__dirname, '..', '..', 'package.json'),
     path.resolve(__dirname, '..', 'package.json'),
@@ -21284,39 +21284,39 @@ function createCommandLoggerResolver(options) {
     };
 }
 const defaultClearLoginStatus = async (...args) => {
-    const { clearLoginStatus } = await Promise.resolve().then(function () { return require('./login-Dy-um6Ka.cjs'); });
+    const { clearLoginStatus } = await Promise.resolve().then(function () { return require('./login-BPyX2p9v.cjs'); });
     return clearLoginStatus(...args);
 };
 const defaultLoginToHeybox = async (...args) => {
-    const { loginToHeybox } = await Promise.resolve().then(function () { return require('./login-Dy-um6Ka.cjs'); });
+    const { loginToHeybox } = await Promise.resolve().then(function () { return require('./login-BPyX2p9v.cjs'); });
     return loginToHeybox(...args);
 };
 const defaultPrintLoginStatus = async (...args) => {
-    const { printLoginStatus } = await Promise.resolve().then(function () { return require('./login-Dy-um6Ka.cjs'); });
+    const { printLoginStatus } = await Promise.resolve().then(function () { return require('./login-BPyX2p9v.cjs'); });
     return printLoginStatus(...args);
 };
 const defaultRunBuildCommand = async (...args) => {
-    const { runBuildCommand } = await Promise.resolve().then(function () { return require('./build-BHfbvke-.cjs'); });
+    const { runBuildCommand } = await Promise.resolve().then(function () { return require('./build-CScc5bgz.cjs'); });
     return runBuildCommand(...args);
 };
 const defaultRunCreateCommand = async (...args) => {
-    const { runCreateCommand } = await Promise.resolve().then(function () { return require('./create-B-KOcThY.cjs'); });
+    const { runCreateCommand } = await Promise.resolve().then(function () { return require('./create-BybyVKxB.cjs'); });
     return runCreateCommand(...args);
 };
 const defaultRunDevCommand = async (...args) => {
-    const { runDevCommand } = await Promise.resolve().then(function () { return require('./dev-BC_oKKzT.cjs'); }).then(function (n) { return n.dev; });
+    const { runDevCommand } = await Promise.resolve().then(function () { return require('./dev-BVZ9yV84.cjs'); }).then(function (n) { return n.dev; });
     return runDevCommand(...args);
 };
 const defaultRunDoctorCommand = async (...args) => {
-    const { runDoctorCommand } = await Promise.resolve().then(function () { return require('./doctor-l9Gd1Rhf.cjs'); });
+    const { runDoctorCommand } = await Promise.resolve().then(function () { return require('./doctor-CTEun30u.cjs'); });
     return runDoctorCommand(...args);
 };
 const defaultRunSkillInstallCommand = async (...args) => {
-    const { runSkillInstallCommand } = await Promise.resolve().then(function () { return require('./skill-WQPin-5N.cjs'); });
+    const { runSkillInstallCommand } = await Promise.resolve().then(function () { return require('./skill-C33zgdJF.cjs'); });
     return runSkillInstallCommand(...args);
 };
 const defaultRunRemoteCommand = async (...args) => {
-    const { runRemoteCommand } = await Promise.resolve().then(function () { return require('./remote-BKIgszJS.cjs'); });
+    const { runRemoteCommand } = await Promise.resolve().then(function () { return require('./remote-C1n11VWk.cjs'); });
     return runRemoteCommand(...args);
 };
 function resolveStandaloneLogger(options, verbose) {
@@ -21408,7 +21408,7 @@ function parseNonNegativeInteger(value) {
     return parsed;
 }
 const defaultRunGameSearchCommand = async (...args) => {
-    const { runGameSearchCommand } = await Promise.resolve().then(function () { return require('./games-DDoaQ_KF.cjs'); });
+    const { runGameSearchCommand } = await Promise.resolve().then(function () { return require('./games-Bp6gkkgb.cjs'); });
     return runGameSearchCommand(...args);
 };
 

package/dist/cli-chunks/{index-COzyQErL.cjs → index-DF8KQKoa.cjs}

@@ -1,6 +1,6 @@
 'use strict';
 
-var index$2 = require('./index-Czupnh5A.cjs');
+var index$2 = require('./index-CxelQqdy.cjs');
 var require$$0$3 = require('fs');
 var require$$0$2 = require('crypto');
 var require$$1$2 = require('path');

package/dist/cli-chunks/{index.esm-BX-KdUxn.cjs → index.esm-vr3yuZ2Q.cjs}

@@ -11,8 +11,8 @@ var require$$0$3 = require('url');
 var require$$5 = require('zlib');
 var require$$0 = require('buffer');
 var require$$1 = require('util');
-var index = require('./index-Czupnh5A.cjs');
-var dev = require('./dev-BC_oKKzT.cjs');
+var index = require('./index-CxelQqdy.cjs');
+var dev = require('./dev-BVZ9yV84.cjs');
 require('node:module');
 require('readline');
 require('os');
@@ -26,10 +26,10 @@ require('constants');
 require('node:fs');
 require('node:fs/promises');
 require('node:zlib');
-require('./context-DZldyzoT.cjs');
-require('./runtime-permission-env-DFFgIfoX.cjs');
-require('./version-BQVBVZPA.cjs');
+require('./runtime-permission-env-Beurz19O.cjs');
+require('./version-BKjLEHsb.cjs');
 require('node:async_hooks');
+require('./dev-context-BjwOy-fF.cjs');
 require('sharp');
 require('node:os');
 require('node:net');
@@ -42,7 +42,7 @@ require('node:buffer');
 require('node:url');
 require('node:util');
 require('node:child_process');
-require('./project-vite-CTWRejM4.cjs');
+require('./project-vite-DBId94T0.cjs');
 
 var bufferUtil = {exports: {}};
 

package/dist/cli-chunks/{login-Dy-um6Ka.cjs → login-BPyX2p9v.cjs}

@@ -3,7 +3,7 @@
 var promises = require('node:readline/promises');
 var node_crypto = require('node:crypto');
 var node_http = require('node:http');
-var index = require('./index-Czupnh5A.cjs');
+var index = require('./index-CxelQqdy.cjs');
 var browser = require('./browser-RAy8e8cV.cjs');
 require('node:module');
 require('readline');

package/dist/cli-chunks/{project-vite-CTWRejM4.cjs → project-vite-DBId94T0.cjs}

@@ -5,7 +5,7 @@ var fs$1 = require('node:fs/promises');
 var node_module = require('node:module');
 var path = require('node:path');
 var node_url = require('node:url');
-var index = require('./index-Czupnh5A.cjs');
+var index = require('./index-CxelQqdy.cjs');
 
 function findProjectRoot(startDir) {
     let current = path.resolve(startDir);

package/dist/cli-chunks/{remote-BKIgszJS.cjs → remote-C1n11VWk.cjs}

@@ -1,18 +1,18 @@
 'use strict';
 
-var runtimePermissionEnv = require('./runtime-permission-env-DFFgIfoX.cjs');
-var context = require('./context-DZldyzoT.cjs');
+var runtimePermissionEnv = require('./runtime-permission-env-Beurz19O.cjs');
+var devContext = require('./dev-context-BjwOy-fF.cjs');
 var promises = require('node:readline/promises');
-var index = require('./index-Czupnh5A.cjs');
-var runtimeGate = require('./runtime-gate-alLUP4_C.cjs');
+var index = require('./index-CxelQqdy.cjs');
 var childProcess = require('node:child_process');
 var fs = require('node:fs');
 var fs$1 = require('node:fs/promises');
 var path = require('node:path');
 var node_crypto = require('node:crypto');
 require('node:zlib');
-var deployLock = require('./deploy-lock-DY7E8TFw.cjs');
-require('./version-BQVBVZPA.cjs');
+var artifact = require('./artifact-BTi9i7N4.cjs');
+var deployLock = require('./deploy-lock-CtJXBtKK.cjs');
+require('./version-BKjLEHsb.cjs');
 require('node:async_hooks');
 require('sharp');
 require('node:module');
@@ -308,7 +308,7 @@ function createDefaultCosClient(uploadToken, COS) {
     };
 }
 async function loadCosConstructor() {
-    const cosModule = await Promise.resolve().then(function () { return require('./index-COzyQErL.cjs'); }).then(function (n) { return n.index; });
+    const cosModule = await Promise.resolve().then(function () { return require('./index-DF8KQKoa.cjs'); }).then(function (n) { return n.index; });
     return cosModule.default;
 }
 function formatSize(bytes) {
@@ -444,7 +444,7 @@ async function runDeployCommand(options, runtime = {}) {
         {
             const configuredProfile = runtimePermissionEnv.parseMiniappBasicInfo(packageJson.heybox ?? {}, '0.8.1');
             if (!configuredProfile) {
-                const bound = await (runtime.getBoundMiniProgram ?? context.getBoundMiniProgram)({
+                const bound = await (runtime.getBoundMiniProgram ?? devContext.getBoundMiniProgram)({
                     allowUnsafeApiBaseUrl: options.allowUnsafeApiBaseUrl,
                     apiBaseUrl,
                     cwd: projectRoot,
@@ -453,7 +453,7 @@ async function runDeployCommand(options, runtime = {}) {
                     loginBaseUrl,
                     session,
                 });
-                await context.migrateBasicInfo(projectRoot, bound.detail, miniProgramId, runtime.fetchImpl);
+                await devContext.migrateBasicInfo(projectRoot, bound.detail, miniProgramId, runtime.fetchImpl);
             }
             const localPermissions = runtimePermissionEnv.readMiniappPermissionsFromPackageJson(projectRoot, runtimePermissionEnv.resolveMiniappSdkVersion());
             if (typeof packageJson.scripts?.build !== 'string') {
@@ -469,7 +469,7 @@ async function runDeployCommand(options, runtime = {}) {
             }, runtime, apiBaseUrl, projectRoot, logger);
             let skipPlatformCsp = false;
             try {
-                const { detail } = await logger.task('正在读取远端小程序权限', () => (runtime.getBoundMiniProgram ?? context.getBoundMiniProgram)({
+                const { detail } = await logger.task('正在读取远端小程序权限', () => (runtime.getBoundMiniProgram ?? devContext.getBoundMiniProgram)({
                     allowUnsafeApiBaseUrl: options.allowUnsafeApiBaseUrl,
                     apiBaseUrl,
                     cwd: projectRoot,
@@ -479,7 +479,7 @@ async function runDeployCommand(options, runtime = {}) {
                     session,
                 }), { successText: '已读取远端小程序权限' });
                 const effectivePermissions = runtimePermissionEnv.composeMiniappRuntimePermissions(localPermissions, detail.runtime_permissions, detail.party_type).runtimePermissions;
-                skipPlatformCsp = context.shouldSkipMiniappPlatformCsp(effectivePermissions);
+                skipPlatformCsp = devContext.shouldSkipMiniappPlatformCsp(effectivePermissions);
                 const permissionWarning = getUnapprovedPermissionWarning(localPermissions, detail.runtime_permissions, detail.party_type);
                 if (permissionWarning)
                     logger.warn(permissionWarning);
@@ -509,26 +509,25 @@ async function runDeployCommand(options, runtime = {}) {
         let preflightToken = '';
         {
             const distDir = path.join(projectRoot, 'dist');
-            const parsedManifest = await readDeployManifest(projectRoot, logger);
-            ({ manifest, version } = parsedManifest);
+            const artifact$1 = await artifact.inspectVersionArtifact({
+                projectRoot,
+                declarations: {
+                    platforms: declaredPlatforms,
+                    window: declaredWindow,
+                    bindAppIds: declaredBindAppIds,
+                    category: declaredCategory,
+                },
+            });
+            if (artifact$1.hadBom)
+                logger.warn('dist/manifest.json 包含 BOM，已自动剥离');
+            manifest = artifact$1.manifest;
+            version = artifact$1.summary.version;
             for (const warning of getMiniappMetadataWarnings(manifest)) {
                 logger.warn(`[${warning.code}] ${warning.message}`, { stream: 'stderr' });
             }
-            if (manifest.category !== declaredCategory) {
-                throw new Error('dist/manifest.json.category 与 package.json#heybox.category 不一致，请重新 build 后再 deploy');
-            }
-            if (!declaredPlatforms || !runtimePermissionEnv.areMiniappPlatformsEqual(parsedManifest.platforms, declaredPlatforms)) {
-                throw new Error('dist/manifest.json.platforms 与 package.json#heybox.platforms 不一致，请重新 build 后再 deploy');
-            }
-            if (!runtimePermissionEnv.areMiniappWindowsEqual(parsedManifest.window, declaredWindow)) {
-                throw new Error('dist/manifest.json.window 与 package.json#heybox.window 不一致，请重新 build 后再 deploy');
-            }
             if (version !== precheckVersion) {
                 throw new Error(`dist/manifest.json.version (${version}) 与预检版本 (${precheckVersion}) 不一致，请重新 build 后再 deploy`);
             }
-            if (declaredBindAppIds && !areStringArraysEqual(parsedManifest.bindAppIds, declaredBindAppIds)) {
-                throw new Error('dist/manifest.json.bindAppIds 与 package.json#heybox.bindAppIds 不一致，请重新 build 后再 deploy');
-            }
             await runVersionPrecheck({
                 session,
                 miniProgramId,
@@ -538,20 +537,12 @@ async function runDeployCommand(options, runtime = {}) {
                 autoPublish,
             }, runtime, apiBaseUrl, projectRoot, logger);
             const uploadFiles = await logger.task('正在校验 dist 上传文件', async () => {
-                const allFiles = await walkDistFiles(distDir);
-                const blocked = allFiles.find((entry) => runtimePermissionEnv.relativePathContainsNodeModulesSegment(entry.relativePath));
-                if (blocked) {
-                    throw new Error(`dist 目录含 node_modules：${blocked.relativePath}`);
-                }
-                const files = runtimePermissionEnv.prepareMiniappArtifactFiles(allFiles.filter((entry) => runtimePermissionEnv.shouldUploadDistFile(entry.relativePath)));
+                const inventory = await artifact.inspectVersionArtifactFiles(distDir);
+                const files = inventory.files.map((file) => ({ ...file, mimeType: inferMimeType(file.relativePath) }));
                 const pathError = runtimePermissionEnv.validateMiniappUploadPathLengths(files, { miniProgramId });
                 if (pathError) {
                     throw new Error(pathError);
                 }
-                const sizeError = runtimePermissionEnv.validateMiniappUploadSizeBudgets(files);
-                if (sizeError) {
-                    throw new Error(sizeError);
-                }
                 logger.debug(`待上传文件数: ${files.length}`);
                 return files;
             }, { successText: 'dist 上传文件校验完成' });
@@ -567,8 +558,8 @@ async function runDeployCommand(options, runtime = {}) {
                 const sources = [localProfile.icon, ...localProfile.coverImages];
                 const refs = [{ path: profile.icon, kind: 'icon' }, ...profile.coverImages.map((path) => ({ path, kind: 'cover' }))];
                 for (const [index, ref] of refs.entries()) {
-                    const image = await context.readBasicInfoSource(distDir, ref.path, ref.kind);
-                    const source = await context.readBasicInfoSource(projectRoot, sources[index], ref.kind);
+                    const image = await devContext.readBasicInfoSource(distDir, ref.path, ref.kind);
+                    const source = await devContext.readBasicInfoSource(projectRoot, sources[index], ref.kind);
                     if (source.sha256 !== image.sha256)
                         throw new Error('构建图片与项目声明不一致，请重新构建');
                     if (image.sha256 === BASIC_INFO_PLACEHOLDER_SHA256)
@@ -622,12 +613,16 @@ async function runDeployCommand(options, runtime = {}) {
             const uploadBytes = createdUploadSession.missingFiles.reduce((sum, { file }) => sum + file.size, 0);
             logger.info(`Companion Blob 复用: ${createdUploadSession.reusedCompanionFiles.length} 个，免上传 ${formatDeployBytes(reusedBytes)}；实际待上传 ${formatDeployBytes(uploadBytes)}`);
             try {
-                const missingKeys = new Set(createdUploadSession.missingFiles.map(item => item.key));
-                const uploadedCompanions = createdUploadSession.files.filter(item => item.file.relativePath.startsWith('companions/') && !missingKeys.has(item.key));
+                const missingKeys = new Set(createdUploadSession.missingFiles.map((item) => item.key));
+                const uploadedCompanions = createdUploadSession.files.filter((item) => item.file.relativePath.startsWith('companions/') && !missingKeys.has(item.key));
                 for (let index = 0; index < uploadedCompanions.length; index += runtimePermissionEnv.MINIAPP_UPLOAD_BATCH_SIZE) {
                     await (runtime.recordUserMiniprogramUploadResult ?? recordUserMiniprogramUploadResult)({
-                        session, miniProgramId, version, sessionId: uploadSessionId,
-                        files: uploadedCompanions.slice(index, index + runtimePermissionEnv.MINIAPP_UPLOAD_BATCH_SIZE)
+                        session,
+                        miniProgramId,
+                        version,
+                        sessionId: uploadSessionId,
+                        files: uploadedCompanions
+                            .slice(index, index + runtimePermissionEnv.MINIAPP_UPLOAD_BATCH_SIZE)
                             .map(({ file }) => ({ path: file.relativePath, size: file.size, sha256: file.sha256 })),
                     }, { baseUrl: apiBaseUrl, fetchImpl: runtime.fetchImpl });
                 }
@@ -715,46 +710,6 @@ function findProjectRoot(startDir) {
 async function readPackageJson(projectRoot) {
     return JSON.parse(await fs$1.readFile(path.join(projectRoot, 'package.json'), 'utf8'));
 }
-function areStringArraysEqual(left, right) {
-    return left.length === right.length && left.every((value, index) => value === right[index]);
-}
-async function readDeployManifest(projectRoot, logger) {
-    const distDir = path.join(projectRoot, 'dist');
-    const manifestPath = path.join(distDir, 'manifest.json');
-    const entryHtmlPath = path.join(distDir, 'index.html');
-    if (!fs.existsSync(manifestPath)) {
-        throw new Error('未找到 dist/manifest.json，可能需要先跑 build 或检查 vite miniappManifest 插件');
-    }
-    if (!fs.existsSync(entryHtmlPath)) {
-        throw new Error('未找到 dist/index.html，dist 目录残缺，请重新 build');
-    }
-    const entryHtml = await fs$1.readFile(entryHtmlPath, 'utf8');
-    if (!runtimeGate.hasMiniappRuntimeGate(entryHtml)) {
-        throw new Error('dist/index.html 缺少平台 Runtime 启动门禁，请在 Vite 配置中启用 miniappManifest() 后重新 build');
-    }
-    const { manifest, hadBom } = runtimePermissionEnv.parseMiniappManifestJson(await fs$1.readFile(manifestPath, 'utf8'), 'dist/manifest.json');
-    if (hadBom) {
-        logger.warn('dist/manifest.json 包含 BOM，已自动剥离');
-    }
-    const validated = runtimePermissionEnv.validateMiniappManifestForDeploy(manifest);
-    if (validated.workspaceCards) {
-        runtimeGate.verifyWorkspaceCardsSnapshot({ ...validated, bindAppIds: validated.bindAppIds ?? [], workspaceCards: validated.workspaceCards });
-        runtimeGate.verifyWorkspaceCardArtifacts(distDir, validated.workspaceCards);
-    }
-    const bindAppIds = validated.bindAppIds ?? [];
-    return {
-        manifest: {
-            ...manifest,
-            platforms: validated.platforms,
-            ...(bindAppIds.length === 0 ? {} : { bindAppIds }),
-        },
-        bindAppIds,
-        sdkVersion: validated.sdkVersion,
-        version: validated.version,
-        platforms: validated.platforms,
-        ...(validated.window === undefined ? {} : { window: validated.window }),
-    };
-}
 function validateVersionForDeploy(version, sourceLabel) {
     if (typeof version !== 'string' || !runtimePermissionEnv.isValidMiniappManifestVersion(version)) {
         throw new Error(`${sourceLabel} 必须是合法 SemVer，允许 prerelease，不允许 build metadata 和 0.0.0：${String(version)}`);
@@ -868,41 +823,12 @@ function createBuildArgs(pm, mode, buildScript) {
     const modeOption = /\bhb-sdk\s+build\b/.test(buildScript) ? '--env' : '--mode';
     return ['run', 'build', ...(mode ? [...(pm === 'npm' ? ['--'] : []), modeOption, mode] : [])];
 }
-async function walkDistFiles(distDir) {
-    const results = [];
-    await walk(distDir, '');
-    return results;
-    async function walk(absDir, relDir) {
-        const entries = await fs$1.readdir(absDir, { withFileTypes: true });
-        for (const entry of entries) {
-            const absPath = path.join(absDir, entry.name);
-            const relPath = relDir ? `${relDir}/${entry.name}` : entry.name;
-            const link = await fs$1.lstat(absPath);
-            if (link.isSymbolicLink()) {
-                throw new Error(`dist 目录包含 symlink，拒绝处理：${relPath}`);
-            }
-            if (entry.isDirectory()) {
-                await walk(absPath, relPath);
-                continue;
-            }
-            if (!entry.isFile()) {
-                continue;
-            }
-            const fileStat = await fs$1.stat(absPath);
-            results.push({
-                relativePath: relPath,
-                absolutePath: absPath,
-                size: fileStat.size,
-                mimeType: inferMimeType(entry.name),
-            });
-        }
-    }
-}
 function inferMimeType(fileName) {
     return MIME_BY_EXT[path.extname(fileName).toLowerCase()] || 'application/octet-stream';
 }
 async function assertDeployUploadFilesStillMatchSignature(options) {
-    const currentFiles = runtimePermissionEnv.prepareMiniappArtifactFiles((await walkDistFiles(options.distDir)).filter((entry) => runtimePermissionEnv.shouldUploadDistFile(entry.relativePath)));
+    const inventory = await artifact.inspectVersionArtifactFiles(options.distDir);
+    const currentFiles = inventory.files.map((file) => ({ ...file, mimeType: inferMimeType(file.relativePath) }));
     const currentByPath = new Map(currentFiles.map((file) => [file.relativePath, file]));
     if (currentFiles.length !== options.expectedFiles.length) {
         throw new Error('dist 构建产物在签名后发生变化，请重新执行 deploy');
@@ -917,10 +843,6 @@ async function assertDeployUploadFilesStillMatchSignature(options) {
     if (pathError) {
         throw new Error(pathError);
     }
-    const sizeError = runtimePermissionEnv.validateMiniappUploadSizeBudgets(currentFiles);
-    if (sizeError) {
-        throw new Error(sizeError);
-    }
     const currentReceipt = await options.computeMiniappArtifactReceipt(currentFiles);
     if (currentReceipt.artifactSignature !== options.expectedSignature) {
         throw new Error('dist 构建产物在签名后发生变化，请重新 build 后再 deploy');
@@ -1062,7 +984,7 @@ async function runRemoteDeployCommand(options, runtime) {
 async function createRemoteCommandContext(options, runtime) {
     index.applyMiniProgramServiceTagIfNeeded(options.serviceTag);
     const logger = resolveRemoteLogger(options, runtime);
-    const environment = await context.resolveRemoteEnvironment({
+    const environment = await devContext.resolveRemoteEnvironment({
         allowUnsafeApiBaseUrl: options.allowUnsafeApiBaseUrl,
         apiBaseUrl: options.apiBaseUrl,
         env: options.env,
@@ -1072,10 +994,10 @@ async function createRemoteCommandContext(options, runtime) {
         fetchImpl: runtime.fetchImpl,
         requireAuthSession: runtime.requireAuthSession,
     });
-    const packageJson = await context.readMiniProgramProjectPackage(runtime.cwd ?? process.cwd());
-    const binding = context.readBoundMiniProgramIdFromPackageJson(packageJson.packageJson);
+    const packageJson = await devContext.readMiniProgramProjectPackage(runtime.cwd ?? process.cwd());
+    const binding = devContext.readBoundMiniProgramIdFromPackageJson(packageJson.packageJson);
     const api = {
-        ...adaptRemoteApiClient(context.createRemoteApiClientForEnvironment(environment)),
+        ...adaptRemoteApiClient(devContext.createRemoteApiClientForEnvironment(environment)),
         ...runtime.api,
     };
     logger.debug(`Heybox API: ${environment.apiBaseUrl}`);
@@ -1221,48 +1143,48 @@ async function remoteList(options, context, runtime) {
     }
     return finishRemoteCommand(options, runtime, output);
 }
-async function remoteCreate(options, context$1, runtime) {
-    if (context$1.binding && !options.forceBind) {
-        throw new Error(`当前项目已绑定 ${context$1.binding}；如需覆盖，请使用 --force-bind`);
+async function remoteCreate(options, context, runtime) {
+    if (context.binding && !options.forceBind) {
+        throw new Error(`当前项目已绑定 ${context.binding}；如需覆盖，请使用 --force-bind`);
     }
-    const access = await context$1.api.accessStatus();
+    const access = await context.api.accessStatus();
     if (access.status !== 'approved') {
         throw new Error(`当前 CLI 用户没有创建工坊小程序权限：${String(access.status ?? 'unknown')}`);
     }
-    await confirmCreateWithCurrentEntity(options, context$1, runtime);
-    runtimePermissionEnv.parseMiniappBasicInfo(context$1.packageJson.packageJson.heybox ?? {});
-    const result = await context$1.api.createMiniProgram();
+    await confirmCreateWithCurrentEntity(options, context, runtime);
+    runtimePermissionEnv.parseMiniappBasicInfo(context.packageJson.packageJson.heybox ?? {});
+    const result = await context.api.createMiniProgram();
     const miniProgramId = requireMiniProgramId(result);
-    await context.writeBoundMiniProgramId(context$1.packageJson.projectRoot, miniProgramId, { force: options.forceBind });
+    await devContext.writeBoundMiniProgramId(context.packageJson.projectRoot, miniProgramId, { force: options.forceBind });
     const output = { changed: true, miniProgramId, remote: toCamelCaseDeep(result) };
     if (!options.json) {
-        context$1.logger.success(`创建并绑定成功：${miniProgramId}`);
+        context.logger.success(`创建并绑定成功：${miniProgramId}`);
     }
     return finishRemoteCommand(options, runtime, output);
 }
-async function remoteBind(options, context$1, runtime) {
+async function remoteBind(options, context, runtime) {
     const miniProgramId = requireNonEmpty(options.miniProgramId, 'remote bind 必须传 <mini-program-id>');
-    if (context$1.binding && context$1.binding !== miniProgramId && !options.force) {
-        throw new Error(`当前项目已绑定 ${context$1.binding}；如需覆盖本地绑定，请使用 --force`);
+    if (context.binding && context.binding !== miniProgramId && !options.force) {
+        throw new Error(`当前项目已绑定 ${context.binding}；如需覆盖本地绑定，请使用 --force`);
     }
-    const detail = await context$1.api.getMiniProgramDetail(miniProgramId);
+    const detail = await context.api.getMiniProgramDetail(miniProgramId);
     const verifiedId = requireMiniProgramId(detail);
     if (verifiedId !== miniProgramId)
         throw new Error('远端返回的小程序 ID 与绑定目标不一致');
-    await assertMiniProgramEntityMatchesCurrent(context$1, detail);
-    const { changed } = await context.migrateBasicInfo(context$1.packageJson.projectRoot, detail, verifiedId, runtime.fetchImpl, options.force);
+    await assertMiniProgramEntityMatchesCurrent(context, detail);
+    const { changed } = await devContext.migrateBasicInfo(context.packageJson.projectRoot, detail, verifiedId, runtime.fetchImpl, options.force);
     const output = { changed, miniProgramId: verifiedId, remote: toCamelCaseDeep(detail) };
     if (!options.json) {
-        context$1.logger.success(changed ? `绑定成功：${verifiedId}` : `已绑定：${verifiedId}`);
+        context.logger.success(changed ? `绑定成功：${verifiedId}` : `已绑定：${verifiedId}`);
     }
     return finishRemoteCommand(options, runtime, output);
 }
-async function remoteInfo(options, context$1, runtime) {
-    const miniProgramId = requireBinding(context$1);
-    const detail = await context$1.api.getMiniProgramDetail(miniProgramId);
-    const localPermissions = runtimePermissionEnv.readMiniappPermissionsFromPackageJson(context$1.packageJson.projectRoot, runtimePermissionEnv.resolveMiniappSdkVersion());
+async function remoteInfo(options, context, runtime) {
+    const miniProgramId = requireBinding(context);
+    const detail = await context.api.getMiniProgramDetail(miniProgramId);
+    const localPermissions = runtimePermissionEnv.readMiniappPermissionsFromPackageJson(context.packageJson.projectRoot, runtimePermissionEnv.resolveMiniappSdkVersion());
     const permissionViews = runtimePermissionEnv.composeMiniappRuntimePermissions(localPermissions, detail.runtime_permissions, detail.party_type).views;
-    const localBindAppIds = runtimePermissionEnv.readMiniappBindAppIdsFromPackageJson(context$1.packageJson.projectRoot);
+    const localBindAppIds = runtimePermissionEnv.readMiniappBindAppIdsFromPackageJson(context.packageJson.projectRoot);
     const currentBindApps = normalizeRemoteBoundApps(detail.bind_apps);
     const currentByID = new Map(currentBindApps.map((item) => [item.appid, item]));
     const local = localBindAppIds.map((appid) => currentByID.get(appid) ?? { appid });
@@ -1271,12 +1193,12 @@ async function remoteInfo(options, context$1, runtime) {
     const localIDs = new Set(localBindAppIds);
     const removed = currentBindApps.filter((item) => !localIDs.has(item.appid));
     const bindings = { local, current: currentBindApps, added, removed };
-    const basicInfo = await context.compareBasicInfo(context$1.packageJson.projectRoot, detail, runtime.fetchImpl);
+    const basicInfo = await devContext.compareBasicInfo(context.packageJson.projectRoot, detail, runtime.fetchImpl);
     const output = { changed: false, miniProgramId, detail: toCamelCaseDeep(detail), permissions: permissionViews, permissionSources: { localDeclaration: localPermissions.permissions ?? null, onlineManifest: detail.manifest ?? null, onlineRuntimeSnapshot: detail.effective_runtime_permissions ?? null, platformApprovals: detail.runtime_permissions ?? null }, bindings, basicInfo };
     if (!options.json)
-        context$1.logger.info(`版本资料：${basicInfo.status}`);
+        context.logger.info(`版本资料：${basicInfo.status}`);
     if (!options.json) {
-        printMiniProgramDetail(context$1.logger, detail, permissionViews, bindings);
+        printMiniProgramDetail(context.logger, detail, permissionViews, bindings);
     }
     return finishRemoteCommand(options, runtime, output);
 }