@axewo/fin-micro 0.0.0-stage → 2.0.0

package/dist/iframe.mjs

@@ -0,0 +1,146 @@
+const v = {
+  TIMEOUT: "请求超时",
+  CANCELLED: "请求已取消",
+  DISPOSED: "连接已释放",
+  LIMIT_EXCEEDED: "请求数量超过限制",
+  UNKNOWN_METHOD: "未开放此方法",
+  HANDLER_FAILED: "远端调用失败",
+  SERIALIZATION_FAILED: "消息无法发送或序列化"
+};
+class w extends Error {
+  constructor(a) {
+    super(v[a]), this.code = a, this.name = "IframeRpcError";
+  }
+}
+const x = (n) => typeof n == "object" && n !== null && !Array.isArray(n), p = (n) => typeof n == "string" && n.length > 0 && n.length <= 128, b = (n) => Number.isFinite(n) && n > 0 && n <= 2147483647;
+function U(n) {
+  let a;
+  try {
+    a = new URL(n.remoteOrigin);
+  } catch {
+    throw new TypeError("remoteOrigin 必须是精确 HTTP(S) origin");
+  }
+  if (!["https:", "http:"].includes(a.protocol) || a.origin !== n.remoteOrigin)
+    throw new TypeError("remoteOrigin 必须是精确 HTTP(S) origin");
+  if (!p(n.channel) || !p(n.sessionId)) throw new TypeError("channel/sessionId 必须为 1 至 128 字符");
+  const g = n.timeoutMs ?? 3e4, f = n.handlerTimeoutMs ?? g, o = n.maxPending ?? 100;
+  if (!b(f) || !b(g) || !Number.isSafeInteger(o) || o < 1) throw new TypeError("请求超时或数量限制非法");
+  const { localWindow: l, remoteWindow: A, remoteOrigin: M, channel: P, sessionId: _ } = n, E = /* @__PURE__ */ new Map(), m = /* @__PURE__ */ new Map(), D = (r, e) => {
+    const t = m.get(r);
+    t && (m.delete(r), clearTimeout(t.timer), e && t.controller.abort());
+  }, y = /* @__PURE__ */ new Map();
+  let C = 0, R = 0, i = !1;
+  const L = (r) => A.postMessage({ protocol: "fin-micro-rpc", version: 1, channel: P, sessionId: _, ...r }, M), O = (r) => {
+    try {
+      L(r);
+    } catch {
+    }
+  }, T = (r, e) => O({ type: "error", requestId: r, code: e }), h = (r, e, t) => {
+    const s = y.get(r);
+    s && (y.delete(r), s.cleanup(), e ? s.reject(new w(e)) : s.resolve(t));
+  }, j = (r) => {
+    if (i || r.source !== A || r.origin !== M) return;
+    const e = r.data;
+    if (!x(e) || e.protocol !== "fin-micro-rpc" || e.version !== 1 || e.channel !== P || e.sessionId !== _ || !p(e.requestId)) return;
+    const t = e.requestId;
+    if (e.type === "result") {
+      if (!Object.hasOwn(e, "result")) return;
+      h(t, void 0, e.result);
+    } else if (e.type === "error") {
+      if (typeof e.code != "string" || !Object.hasOwn(v, e.code)) return;
+      h(t, e.code);
+    } else if (e.type === "cancel")
+      D(t, !0);
+    else if (e.type === "request") {
+      if (!p(e.method) || !Array.isArray(e.args) || !/^[1-9]\d{0,15}$/.test(t)) return;
+      const s = Number(t);
+      if (!Number.isSafeInteger(s) || s <= C) return;
+      if (C = s, m.size >= o) {
+        T(t, "LIMIT_EXCEEDED");
+        return;
+      }
+      const u = E.get(e.method);
+      if (!u) {
+        T(t, "UNKNOWN_METHOD");
+        return;
+      }
+      const c = new AbortController(), N = setTimeout(() => {
+        D(t, !0), i || T(t, "TIMEOUT");
+      }, f);
+      m.set(t, { controller: c, timer: N }), Promise.resolve().then(() => {
+        if (!(i || c.signal.aborted))
+          return u(e.args, { signal: c.signal });
+      }).then((d) => {
+        if (!(i || c.signal.aborted))
+          try {
+            L({ type: "result", requestId: t, result: d });
+          } catch {
+            T(t, "SERIALIZATION_FAILED");
+          }
+      }, () => {
+        !i && !c.signal.aborted && T(t, "HANDLER_FAILED");
+      }).finally(() => {
+        var d;
+        ((d = m.get(t)) == null ? void 0 : d.controller) === c && D(t, !1);
+      });
+    }
+  };
+  return l.addEventListener("message", j), {
+    request(r, e, t = {}) {
+      var c;
+      if (i) return Promise.reject(new w("DISPOSED"));
+      if (!p(r) || !Array.isArray(e)) return Promise.reject(new TypeError("方法与参数非法"));
+      const s = t.timeoutMs ?? g;
+      if (!b(s)) return Promise.reject(new TypeError("timeoutMs 非法"));
+      if ((c = t.signal) != null && c.aborted) return Promise.reject(new w("CANCELLED"));
+      if (y.size >= o || R >= Number.MAX_SAFE_INTEGER) return Promise.reject(new w("LIMIT_EXCEEDED"));
+      const u = String(++R);
+      return new Promise((N, d) => {
+        const q = (S) => {
+          h(u, S), O({ type: "cancel", requestId: u });
+        }, H = () => q("CANCELLED"), F = setTimeout(() => q("TIMEOUT"), s), I = t.signal;
+        y.set(u, { resolve: (S) => N(S), reject: d, cleanup() {
+          clearTimeout(F), I == null || I.removeEventListener("abort", H);
+        } }), I == null || I.addEventListener("abort", H, { once: !0 });
+        try {
+          L({ type: "request", requestId: u, method: r, args: e });
+        } catch {
+          h(u, "SERIALIZATION_FAILED");
+        }
+      });
+    },
+    expose(r, e) {
+      if (i) throw new w("DISPOSED");
+      if (!p(r) || typeof e != "function" || E.has(r)) throw new TypeError("方法非法或已注册");
+      E.set(r, e);
+      let t = !0;
+      return () => {
+        t && (t = !1, E.get(r) === e && E.delete(r));
+      };
+    },
+    dispose() {
+      if (!i) {
+        i = !0, l.removeEventListener("message", j);
+        for (const r of y.keys())
+          h(r, "DISPOSED"), O({ type: "cancel", requestId: r });
+        for (const r of m.keys()) D(r, !0);
+        E.clear();
+      }
+    }
+  };
+}
+function W(n, a, g) {
+  const f = [];
+  try {
+    for (const o of new Set(g))
+      f.push(n.expose(o, (l, { signal: A }) => a.callHostWithOptions(o, { signal: A }, ...l)));
+  } catch (o) {
+    throw f.forEach((l) => l()), o;
+  }
+  return () => f.forEach((o) => o());
+}
+export {
+  w as IframeRpcError,
+  U as createIframeRpc,
+  W as exposeHostCapabilities
+};

package/dist/index.cjs

@@ -0,0 +1 @@
+"use strict";Object.defineProperty(exports,Symbol.toStringTag,{value:"Module"});const e=require("./sdk.cjs"),c=require("./core.cjs"),r=require("./runtime.cjs"),o=require("./vue.cjs"),i=require("./browser.cjs"),t=1;exports.HostCallError=e.HostCallError;exports.NavigationError=e.NavigationError;exports.TokenError=e.TokenError;exports.createAuthFailureCapabilities=e.createAuthFailureCapabilities;exports.createNotificationBus=e.createNotificationBus;exports.createTokenCapability=e.createTokenCapability;exports.getMicroBridge=e.getMicroBridge;exports.getToken=e.getToken;exports.hasAll=e.hasAll;exports.hasAny=e.hasAny;exports.hasPermission=e.hasPermission;exports.createMicroHost=c.createMicroHost;exports.createWujieRuntime=r.createWujieRuntime;exports.isMicroFrontend=r.isMicroFrontend;exports.setupWujieLifecycle=r.setupWujieLifecycle;exports.MicroAppContainer=o.MicroAppContainer;exports.MicroRouteView=o.MicroRouteView;exports.MicroTabCache=o.MicroTabCache;exports.connectMicroRouter=o.connectMicroRouter;exports.useMicroHost=o.useMicroHost;exports.useMicroPage=o.useMicroPage;exports.useMicroTab=o.useMicroTab;exports.usePermission=o.usePermission;exports.connectMicroBrowser=i.connectMicroBrowser;exports.decodeMicroLocation=i.decodeMicroLocation;exports.encodeMicroLocation=i.encodeMicroLocation;exports.hostRouterProtocol=t;

package/dist/index.mjs

@@ -0,0 +1,35 @@
+import { HostCallError as i, NavigationError as t, TokenError as c, createAuthFailureCapabilities as a, createNotificationBus as n, createTokenCapability as s, getMicroBridge as u, getToken as M, hasAll as p, hasAny as l, hasPermission as m } from "./sdk.mjs";
+import { createMicroHost as h } from "./core.mjs";
+import { createWujieRuntime as d, isMicroFrontend as g, setupWujieLifecycle as C } from "./runtime.mjs";
+import { MicroAppContainer as b, MicroRouteView as A, MicroTabCache as P, connectMicroRouter as R, useMicroHost as k, useMicroPage as y, useMicroTab as B, usePermission as E } from "./vue.mjs";
+import { connectMicroBrowser as L, decodeMicroLocation as j, encodeMicroLocation as w } from "./browser.mjs";
+const o = 1;
+export {
+  i as HostCallError,
+  b as MicroAppContainer,
+  A as MicroRouteView,
+  P as MicroTabCache,
+  t as NavigationError,
+  c as TokenError,
+  L as connectMicroBrowser,
+  R as connectMicroRouter,
+  a as createAuthFailureCapabilities,
+  h as createMicroHost,
+  n as createNotificationBus,
+  s as createTokenCapability,
+  d as createWujieRuntime,
+  j as decodeMicroLocation,
+  w as encodeMicroLocation,
+  u as getMicroBridge,
+  M as getToken,
+  p as hasAll,
+  l as hasAny,
+  m as hasPermission,
+  o as hostRouterProtocol,
+  g as isMicroFrontend,
+  C as setupWujieLifecycle,
+  k as useMicroHost,
+  y as useMicroPage,
+  B as useMicroTab,
+  E as usePermission
+};

package/dist/router-view-impl-B1NzCGKV.mjs

@@ -0,0 +1,76 @@
+import { defineComponent as w, shallowRef as v, provide as m, shallowReactive as R, onBeforeUnmount as O, h as f } from "vue";
+import { useRouter as E, START_LOCATION as h, routeLocationKey as g, viewDepthKey as L, RouterView as b, loadRouteLocation as D } from "vue-router";
+import { useMicroTab as I } from "./vue.mjs";
+class d extends Error {
+  constructor(o) {
+    super(o), this.code = o;
+  }
+}
+function T(c, o) {
+  let e = c.resolve(o, h);
+  const p = e, u = /* @__PURE__ */ new Set();
+  for (let n = 0; n < 30; n++) {
+    if (!e.matched.length) throw new d("NOT_FOUND");
+    const i = e.matched[e.matched.length - 1];
+    if (!i.redirect) return e === p ? e : { ...e, redirectedFrom: p };
+    if (u.has(e.fullPath)) throw new d("REDIRECT_LOOP");
+    u.add(e.fullPath);
+    const t = typeof i.redirect == "function" ? i.redirect(e) : i.redirect;
+    let a;
+    if (typeof t == "string")
+      if (t.includes("?") || t.includes("#")) {
+        const r = c.resolve(t, h);
+        a = { path: r.path, query: r.query, hash: r.hash };
+      } else a = { path: t };
+    else a = t;
+    const s = "path" in a && a.path != null;
+    if (!s && !("name" in a)) throw new d("RESOLVE_FAILED");
+    e = c.resolve({
+      query: e.query,
+      hash: e.hash,
+      params: s ? {} : e.params,
+      ...a
+    }, h);
+  }
+  throw new d("REDIRECT_LOOP");
+}
+const V = w({
+  name: "MicroRouteViewImpl",
+  props: { name: { type: String, default: "default" } },
+  slots: Object,
+  setup(c, { slots: o }) {
+    const e = I(), p = E(), u = v(), n = v(), i = v(!1);
+    let t = !1;
+    const a = {};
+    for (const r of Object.keys(h))
+      Object.defineProperty(a, r, { enumerable: !0, get: () => (u.value ?? h)[r] });
+    m(g, R(a)), m(L, 0);
+    async function s() {
+      if (t || i.value) return;
+      i.value = !0, n.value = void 0;
+      let r = "RESOLVE_FAILED";
+      try {
+        const l = T(p, e.route);
+        r = "LOAD_FAILED";
+        const y = await D(l);
+        t || (u.value = y);
+      } catch (l) {
+        t || (n.value = l instanceof d ? l.code : r);
+      } finally {
+        t || (i.value = !1);
+      }
+    }
+    return O(() => {
+      t = !0;
+    }), s(), () => {
+      var r, l;
+      return n.value ? ((r = o.error) == null ? void 0 : r.call(o, { tab: e, code: n.value, retry: s })) ?? f("div", { role: "alert", "data-micro-route-error": n.value }, [
+        f("p", `页面加载失败（${n.value}）`),
+        f("button", { type: "button", onClick: s }, "重新加载")
+      ]) : i.value || !u.value ? ((l = o.loading) == null ? void 0 : l.call(o, { tab: e })) ?? f("p", { role: "status" }, "页面加载中…") : f(b, { route: u.value, name: c.name, key: e.key });
+    };
+  }
+});
+export {
+  V as MicroRouteViewImpl
+};

package/dist/router-view-impl-BvOToV_Z.cjs

@@ -0,0 +1 @@
+"use strict";Object.defineProperty(exports,Symbol.toStringTag,{value:"Module"});const t=require("vue"),u=require("vue-router"),O=require("./vue.cjs");class f extends Error{constructor(a){super(a),this.code=a}}function R(h,a){let e=h.resolve(a,u.START_LOCATION);const p=e,c=new Set;for(let i=0;i<30;i++){if(!e.matched.length)throw new f("NOT_FOUND");const l=e.matched[e.matched.length-1];if(!l.redirect)return e===p?e:{...e,redirectedFrom:p};if(c.has(e.fullPath))throw new f("REDIRECT_LOOP");c.add(e.fullPath);const r=typeof l.redirect=="function"?l.redirect(e):l.redirect;let n;if(typeof r=="string")if(r.includes("?")||r.includes("#")){const o=h.resolve(r,u.START_LOCATION);n={path:o.path,query:o.query,hash:o.hash}}else n={path:r};else n=r;const d="path"in n&&n.path!=null;if(!d&&!("name"in n))throw new f("RESOLVE_FAILED");e=h.resolve({query:e.query,hash:e.hash,params:d?{}:e.params,...n},u.START_LOCATION)}throw new f("REDIRECT_LOOP")}const w=t.defineComponent({name:"MicroRouteViewImpl",props:{name:{type:String,default:"default"}},slots:Object,setup(h,{slots:a}){const e=O.useMicroTab(),p=u.useRouter(),c=t.shallowRef(),i=t.shallowRef(),l=t.shallowRef(!1);let r=!1;const n={};for(const o of Object.keys(u.START_LOCATION))Object.defineProperty(n,o,{enumerable:!0,get:()=>(c.value??u.START_LOCATION)[o]});t.provide(u.routeLocationKey,t.shallowReactive(n)),t.provide(u.viewDepthKey,0);async function d(){if(r||l.value)return;l.value=!0,i.value=void 0;let o="RESOLVE_FAILED";try{const s=R(p,e.route);o="LOAD_FAILED";const v=await u.loadRouteLocation(s);r||(c.value=v)}catch(s){r||(i.value=s instanceof f?s.code:o)}finally{r||(l.value=!1)}}return t.onBeforeUnmount(()=>{r=!0}),d(),()=>{var o,s;return i.value?((o=a.error)==null?void 0:o.call(a,{tab:e,code:i.value,retry:d}))??t.h("div",{role:"alert","data-micro-route-error":i.value},[t.h("p",`页面加载失败（${i.value}）`),t.h("button",{type:"button",onClick:d},"重新加载")]):l.value||!c.value?((s=a.loading)==null?void 0:s.call(a,{tab:e}))??t.h("p",{role:"status"},"页面加载中…"):t.h(u.RouterView,{route:c.value,name:h.name,key:e.key})}}});exports.MicroRouteViewImpl=w;

package/dist/runtime.cjs

@@ -0,0 +1 @@
+"use strict";var J=Object.create;var W=Object.defineProperty;var O=Object.getOwnPropertyDescriptor;var L=Object.getOwnPropertyNames;var $=Object.getPrototypeOf,k=Object.prototype.hasOwnProperty;var A=(n,t,s,c)=>{if(t&&typeof t=="object"||typeof t=="function")for(let i of L(t))!k.call(n,i)&&i!==s&&W(n,i,{get:()=>t[i],enumerable:!(c=O(t,i))||c.enumerable});return n};var F=(n,t,s)=>(s=n!=null?J($(n)):{},A(t||!n||!n.__esModule?W(s,"default",{value:n,enumerable:!0}):s,n));Object.defineProperty(exports,Symbol.toStringTag,{value:"Module"});const v=new WeakMap;function T(){var n;return typeof window<"u"&&typeof((n=window.__WUJIE)==null?void 0:n.mount)=="function"}function R(n){var y;if(typeof window>"u"){const r=Promise.resolve();return()=>r}const t=window,s=(y=v.get(t))==null?void 0:y(),c=r=>{console.error("[fin-micro] 应用生命周期失败")};let i=(s==null?void 0:s.catch(()=>{}))??Promise.resolve(),f=!1,d,e;function o(){const r=e;if(!r||(e=void 0,!r.started))return i;try{i=Promise.resolve(n.unmount())}catch(u){i=Promise.reject(u)}return i.catch(c),i}function a(){if(f)return Promise.resolve();if(e)return e.ready;const r={started:!1,ready:Promise.resolve()};e=r;const u=async()=>{if(!(f||e!==r)){r.started=!0;try{await n.mount()}catch(h){throw e===r&&await o().catch(()=>{}),h}}};return r.ready=i.then(u,u),r.ready.catch(c),r.ready}function m(){return d||(f=!0,t.removeEventListener("pagehide",g),t.__WUJIE_MOUNT===a&&delete t.__WUJIE_MOUNT,t.__WUJIE_UNMOUNT===o&&delete t.__WUJIE_UNMOUNT,v.get(t)===m&&v.delete(t),d=o(),d)}function g(r){r.persisted||m()}if(v.set(t,m),t.__WUJIE_MOUNT=a,t.__WUJIE_UNMOUNT=o,t.addEventListener("pagehide",g),T())try{Promise.resolve(t.__WUJIE.mount()).catch(c)}catch{c()}else a();return m}let S=0;function C(n,t={}){const s=t.mountTimeoutMs??3e4;if(!Number.isFinite(s)||s<=0||s>2147483647)throw new Error("mountTimeoutMs 必须在 (0, 2147483647] 范围内");const c=new Map;let i=!1,f;const d={async mount(e,o){if(i)throw new Error("Runtime 已销毁");const a=c.get(e);if(a!=null&&a.closing)return await a.closing,d.mount(e,o);if(a){if(a.element!==o)throw new Error(`应用 ${e} 已存在共享容器`);return a.ready}const m=n.apps.find(w=>w.appId===e);if(!m)throw new Error(`未知子应用: ${e}`);if(m.kind==="local")throw new Error("本地应用不能通过 Wujie 挂载");const g=n.bridge(e),y=`${e}__fin_micro_${++S}`,r=o.ownerDocument.createElement("div");r.style.height="100%",o.appendChild(r);const u=new AbortController;let h=!1,P,_;const j=new Promise((w,E)=>{_=E}),p=setTimeout(()=>_(new Error(`子应用 ${e} 加载超时`)),s),l={element:o,ready:Promise.resolve(),close(){return l.closing||(l.closing=Promise.resolve().then(async()=>{try{h&&await P(y)}finally{c.get(e)===l&&c.delete(e)}}),r.remove(),clearTimeout(p),u.abort(),_(new Error(`子应用 ${e} 挂载已中断`))),l.closing}};c.set(e,l);const N=(async()=>{const{startApp:w,destroyApp:E}=await import("wujie");if(u.signal.aborted)return;P=E,h=!0;const M=await w({name:y,url:m.entry,el:r,alive:!1,sync:!1,props:{finMicro:g},plugins:[{htmlLoader:U=>U}],fetch:(U,b)=>fetch(U,{...b,signal:u.signal}),loadError(){_(new Error("子应用加载失败"))}});u.signal.aborted&&typeof M=="function"&&await M()})();return l.ready=(async()=>{try{await Promise.race([j,N])}catch(w){throw await l.close().catch(()=>{console.error("[fin-micro] 应用挂载失败后的清理失败")}),w}finally{clearTimeout(p)}})(),l.ready},unmount(e){var o;return((o=c.get(e))==null?void 0:o.close())??Promise.resolve()},dispose(){return f||(i=!0,f=Promise.allSettled([...c.keys()].map(e=>d.unmount(e))).then(e=>{const o=e.find(a=>a.status==="rejected");if((o==null?void 0:o.status)==="rejected")throw o.reason}),f)}};return d}exports.createWujieRuntime=C;exports.isMicroFrontend=T;exports.setupWujieLifecycle=R;

package/dist/runtime.mjs

@@ -0,0 +1,149 @@
+const v = /* @__PURE__ */ new WeakMap();
+function J() {
+  var u;
+  return typeof window < "u" && typeof ((u = window.__WUJIE) == null ? void 0 : u.mount) == "function";
+}
+function j(u) {
+  var y;
+  if (typeof window > "u") {
+    const t = Promise.resolve();
+    return () => t;
+  }
+  const n = window, l = (y = v.get(n)) == null ? void 0 : y(), i = (t) => {
+    console.error("[fin-micro] 应用生命周期失败");
+  };
+  let s = (l == null ? void 0 : l.catch(() => {
+  })) ?? Promise.resolve(), f = !1, d, e;
+  function r() {
+    const t = e;
+    if (!t || (e = void 0, !t.started)) return s;
+    try {
+      s = Promise.resolve(u.unmount());
+    } catch (c) {
+      s = Promise.reject(c);
+    }
+    return s.catch(i), s;
+  }
+  function o() {
+    if (f) return Promise.resolve();
+    if (e) return e.ready;
+    const t = { started: !1, ready: Promise.resolve() };
+    e = t;
+    const c = async () => {
+      if (!(f || e !== t)) {
+        t.started = !0;
+        try {
+          await u.mount();
+        } catch (_) {
+          throw e === t && await r().catch(() => {
+          }), _;
+        }
+      }
+    };
+    return t.ready = s.then(c, c), t.ready.catch(i), t.ready;
+  }
+  function m() {
+    return d || (f = !0, n.removeEventListener("pagehide", h), n.__WUJIE_MOUNT === o && delete n.__WUJIE_MOUNT, n.__WUJIE_UNMOUNT === r && delete n.__WUJIE_UNMOUNT, v.get(n) === m && v.delete(n), d = r(), d);
+  }
+  function h(t) {
+    t.persisted || m();
+  }
+  if (v.set(n, m), n.__WUJIE_MOUNT = o, n.__WUJIE_UNMOUNT = r, n.addEventListener("pagehide", h), J())
+    try {
+      Promise.resolve(n.__WUJIE.mount()).catch(i);
+    } catch {
+      i();
+    }
+  else o();
+  return m;
+}
+let b = 0;
+function O(u, n = {}) {
+  const l = n.mountTimeoutMs ?? 3e4;
+  if (!Number.isFinite(l) || l <= 0 || l > 2147483647) throw new Error("mountTimeoutMs 必须在 (0, 2147483647] 范围内");
+  const i = /* @__PURE__ */ new Map();
+  let s = !1, f;
+  const d = {
+    async mount(e, r) {
+      if (s) throw new Error("Runtime 已销毁");
+      const o = i.get(e);
+      if (o != null && o.closing)
+        return await o.closing, d.mount(e, r);
+      if (o) {
+        if (o.element !== r) throw new Error(`应用 ${e} 已存在共享容器`);
+        return o.ready;
+      }
+      const m = u.apps.find((w) => w.appId === e);
+      if (!m) throw new Error(`未知子应用: ${e}`);
+      if (m.kind === "local") throw new Error("本地应用不能通过 Wujie 挂载");
+      const h = u.bridge(e), y = `${e}__fin_micro_${++b}`, t = r.ownerDocument.createElement("div");
+      t.style.height = "100%", r.appendChild(t);
+      const c = new AbortController();
+      let _ = !1, P, g;
+      const W = new Promise((w, E) => {
+        g = E;
+      }), p = setTimeout(() => g(new Error(`子应用 ${e} 加载超时`)), l), a = {
+        element: r,
+        ready: Promise.resolve(),
+        close() {
+          return a.closing || (a.closing = Promise.resolve().then(async () => {
+            try {
+              _ && await P(y);
+            } finally {
+              i.get(e) === a && i.delete(e);
+            }
+          }), t.remove(), clearTimeout(p), c.abort(), g(new Error(`子应用 ${e} 挂载已中断`))), a.closing;
+        }
+      };
+      i.set(e, a);
+      const T = (async () => {
+        const { startApp: w, destroyApp: E } = await import("wujie");
+        if (c.signal.aborted) return;
+        P = E, _ = !0;
+        const M = await w({
+          name: y,
+          url: m.entry,
+          el: t,
+          alive: !1,
+          sync: !1,
+          props: { finMicro: h },
+          // HTML 缓存会捕获旧 fetch/loadError；禁用这层缓存，避免重试沿用已中断的信号。
+          plugins: [{ htmlLoader: (U) => U }],
+          // 只中断资源读取；不触碰业务 bridge，更不自动重试业务写调用。
+          fetch: (U, N) => fetch(U, { ...N, signal: c.signal }),
+          loadError() {
+            g(new Error("子应用加载失败"));
+          }
+        });
+        c.signal.aborted && typeof M == "function" && await M();
+      })();
+      return a.ready = (async () => {
+        try {
+          await Promise.race([W, T]);
+        } catch (w) {
+          throw await a.close().catch(() => {
+            console.error("[fin-micro] 应用挂载失败后的清理失败");
+          }), w;
+        } finally {
+          clearTimeout(p);
+        }
+      })(), a.ready;
+    },
+    unmount(e) {
+      var r;
+      return ((r = i.get(e)) == null ? void 0 : r.close()) ?? Promise.resolve();
+    },
+    dispose() {
+      return f || (s = !0, f = Promise.allSettled([...i.keys()].map((e) => d.unmount(e))).then((e) => {
+        const r = e.find((o) => o.status === "rejected");
+        if ((r == null ? void 0 : r.status) === "rejected") throw r.reason;
+      }), f);
+    }
+  };
+  return d;
+}
+export {
+  O as createWujieRuntime,
+  J as isMicroFrontend,
+  j as setupWujieLifecycle
+};

package/dist/sdk.cjs

@@ -0,0 +1 @@
+"use strict";Object.defineProperty(exports,Symbol.toStringTag,{value:"Module"});function f(){const e=new Map;return{on(t,r){let n=e.get(t);return n||e.set(t,n=new Set),n.add(r),()=>{n.delete(r),!n.size&&e.get(t)===n&&e.delete(t)}},emit(t,r){const n=e.get(t);if(n)for(const i of[...n]){if(e.get(t)!==n)break;n.has(i)&&i(r)}},clear(){e.clear()}}}class d extends Error{constructor(t,r){super(r),this.code=t,this.name="HostCallError"}}class h extends Error{constructor(t,r){super(r),this.code=t,this.name="NavigationError"}}class o extends Error{constructor(t){super(`Token 获取失败: ${t}`),this.code=t,this.name="TokenError"}}function c(e){return e===null||typeof e=="string"&&e.length>0&&e.length<=16384&&!/[\s\u0000-\u001f\u007f]/.test(e)}async function g(e={}){const t=e.bridge??l();if(!t)throw new o("NO_BRIDGE");const r=await t.callHostWithOptions("getToken",{signal:e.signal,timeoutMs:e.timeoutMs});if(!r||typeof r!="object")throw new o("INVALID_RESULT");const n=r;if(n.status==="unauthenticated")throw new o("UNAUTHENTICATED");if(n.status==="session-changed")throw new o("SESSION_CHANGED");if(n.status!=="authenticated"||!c(n.token))throw new o("INVALID_RESULT");return n.token}function p(e){const t=Object.freeze([...e.apps]);return{apps:t,async handler(r){if(!t.includes(r.appId))throw new Error("Token 能力未授权");const n=e.getSession();if(!n.authenticated)return{status:"unauthenticated"};const i=await e.provider(r),a=e.getSession();if(!r.isActive()||r.signal.aborted||!a.authenticated||a.revision!==n.revision)return{status:"session-changed"};if(!c(i))throw new Error("Token 格式无效");return{status:"authenticated",token:i}}}}function w(e){const t=Object.freeze([...e.apps]),r=new WeakMap,n=i=>{if(!t.includes(i.appId)||!i.isActive()||i.signal.aborted)throw new Error("失效协调能力未授权或已释放")};return{beginAuthRequest:{apps:t,handler(i){n(i);const a=Object.freeze({request:"auth-request"});return r.set(a,{appId:i.appId,revision:e.getRevision()}),a}},reportAuthFailure:{apps:t,handler(i,a){if(n(i),!a||typeof a!="object")return!1;const s=r.get(a);return!s||s.appId!==i.appId||(r.delete(a),s.revision!==e.getRevision())?!1:(e.invalidate(),!0)}}}}function u(e,t){return!!(e!=null&&e.authenticated&&typeof t=="string"&&t.trim()&&e.permissions.includes(t))}function E(e,t){return Array.isArray(t)&&t.length>0&&t.some(r=>u(e,r))}function b(e,t){return Array.isArray(t)&&t.length>0&&t.every(r=>u(e,r))}function l(e){var r,n;const t=e??(typeof window>"u"?void 0:window);return(n=(r=t==null?void 0:t.$wujie)==null?void 0:r.props)==null?void 0:n.finMicro}exports.HostCallError=d;exports.NavigationError=h;exports.TokenError=o;exports.createAuthFailureCapabilities=w;exports.createNotificationBus=f;exports.createTokenCapability=p;exports.getMicroBridge=l;exports.getToken=g;exports.hasAll=b;exports.hasAny=E;exports.hasPermission=u;

package/dist/sdk.mjs

@@ -0,0 +1,118 @@
+function d() {
+  const e = /* @__PURE__ */ new Map();
+  return {
+    on(t, r) {
+      let n = e.get(t);
+      return n || e.set(t, n = /* @__PURE__ */ new Set()), n.add(r), () => {
+        n.delete(r), !n.size && e.get(t) === n && e.delete(t);
+      };
+    },
+    emit(t, r) {
+      const n = e.get(t);
+      if (n)
+        for (const a of [...n]) {
+          if (e.get(t) !== n) break;
+          n.has(a) && a(r);
+        }
+    },
+    clear() {
+      e.clear();
+    }
+  };
+}
+class l extends Error {
+  /** 使用稳定 code 与对外 message 创建错误。 */
+  constructor(t, r) {
+    super(r), this.code = t, this.name = "HostCallError";
+  }
+}
+class h extends Error {
+  /** 创建公开错误。message 只包含稳定描述，不传递守卫原始 cause。 */
+  constructor(t, r) {
+    super(r), this.code = t, this.name = "NavigationError";
+  }
+}
+class s extends Error {
+  constructor(t) {
+    super(`Token 获取失败: ${t}`), this.code = t, this.name = "TokenError";
+  }
+}
+function u(e) {
+  return e === null || typeof e == "string" && e.length > 0 && e.length <= 16384 && !/[\s\u0000-\u001f\u007f]/.test(e);
+}
+async function g(e = {}) {
+  const t = e.bridge ?? f();
+  if (!t) throw new s("NO_BRIDGE");
+  const r = await t.callHostWithOptions("getToken", { signal: e.signal, timeoutMs: e.timeoutMs });
+  if (!r || typeof r != "object") throw new s("INVALID_RESULT");
+  const n = r;
+  if (n.status === "unauthenticated") throw new s("UNAUTHENTICATED");
+  if (n.status === "session-changed") throw new s("SESSION_CHANGED");
+  if (n.status !== "authenticated" || !u(n.token)) throw new s("INVALID_RESULT");
+  return n.token;
+}
+function w(e) {
+  const t = Object.freeze([...e.apps]);
+  return {
+    apps: t,
+    async handler(r) {
+      if (!t.includes(r.appId)) throw new Error("Token 能力未授权");
+      const n = e.getSession();
+      if (!n.authenticated) return { status: "unauthenticated" };
+      const a = await e.provider(r), i = e.getSession();
+      if (!r.isActive() || r.signal.aborted || !i.authenticated || i.revision !== n.revision) return { status: "session-changed" };
+      if (!u(a)) throw new Error("Token 格式无效");
+      return { status: "authenticated", token: a };
+    }
+  };
+}
+function p(e) {
+  const t = Object.freeze([...e.apps]), r = /* @__PURE__ */ new WeakMap(), n = (a) => {
+    if (!t.includes(a.appId) || !a.isActive() || a.signal.aborted) throw new Error("失效协调能力未授权或已释放");
+  };
+  return {
+    beginAuthRequest: {
+      apps: t,
+      handler(a) {
+        n(a);
+        const i = Object.freeze({ request: "auth-request" });
+        return r.set(i, { appId: a.appId, revision: e.getRevision() }), i;
+      }
+    },
+    reportAuthFailure: {
+      apps: t,
+      handler(a, i) {
+        if (n(a), !i || typeof i != "object") return !1;
+        const o = r.get(i);
+        return !o || o.appId !== a.appId || (r.delete(i), o.revision !== e.getRevision()) ? !1 : (e.invalidate(), !0);
+      }
+    }
+  };
+}
+function c(e, t) {
+  return !!(e != null && e.authenticated && typeof t == "string" && t.trim() && e.permissions.includes(t));
+}
+function E(e, t) {
+  return Array.isArray(t) && t.length > 0 && t.some((r) => c(e, r));
+}
+function A(e, t) {
+  return Array.isArray(t) && t.length > 0 && t.every((r) => c(e, r));
+}
+function f(e) {
+  var r, n;
+  const t = e ?? (typeof window > "u" ? void 0 : window);
+  return (n = (r = t == null ? void 0 : t.$wujie) == null ? void 0 : r.props) == null ? void 0 : n.finMicro;
+}
+export {
+  l as HostCallError,
+  h as NavigationError,
+  s as TokenError,
+  p as createAuthFailureCapabilities,
+  d as createNotificationBus,
+  w as createTokenCapability,
+  f as getMicroBridge,
+  g as getToken,
+  A as hasAll,
+  E as hasAny,
+  c as hasPermission
+};

package/dist/types/browser/index.d.ts

@@ -0,0 +1,46 @@
+import { MicroHost } from '../core';
+import { OpenTab } from '../sdk';
+/** 浏览器同步配置；仅用于宿主端，不注入子应用，也不需要 Vue。 */
+export interface MicroBrowserOptions {
+    /** 浏览器对象，缺省为 window；Node 测试必须显式传入适配对象。 */
+    window?: Pick<Window, 'location' | 'history' | 'sessionStorage' | 'addEventListener' | 'removeEventListener'>;
+    /** sessionStorage 键，默认 fin-micro:tabs:v1；同源多个工作台应分别设置。 */
+    storageKey?: string;
+    /** false 时仅恢复/持久化页签，不读写 URL 或监听历史；地址栏交由宿主路由适配层。 */
+    url?: boolean;
+    /** 宿主路由已校验的首次深链；恢复时优先于存储，仍须通过 core 授权。 */
+    initialLocation?: (Pick<OpenTab, 'appId' | 'tabId' | 'route'> & Partial<Pick<OpenTab, 'title' | 'activeMenuId'>>) | null;
+    /** 存储、URL 编解码或 history 写入错误回调；保留有效页签，编码失败保留原 URL，回调异常被隔离。 */
+    onError?: (error: Error) => void;
+}
+/**
+ * 将 tab 的应用、页签和路由编码为 hash；route 整段编码，保留子路由 query/hash 边界。
+ * @param tab 公开导航元信息，不编码标题或私有状态；应用和路由的业务合法性由宿主校验。
+ * @returns 可赋给 location.hash 的完整 hash 字符串。
+ * @throws 字段包含未配对 UTF-16 代理项时，由 encodeURIComponent 抛 URIError。
+ */
+export declare function encodeMicroLocation(tab: Pick<OpenTab, 'appId' | 'tabId' | 'route'>): string;
+/**
+ * 解码 hash 导航元信息；仅解码一次，保留子路由原有的百分号编码。
+ * @param hash encodeMicroLocation 生成的完整 hash；空字符串、# 和 #/ 表示空工作台。
+ * @returns 导航元信息或 null；应用存在性和路由合法性仍需由连接器及宿主校验。
+ * @throws 格式错误抛 Error；百分号编码错误由 decodeURIComponent 抛 URIError。
+ */
+export declare function decodeMicroLocation(hash: string): Pick<OpenTab, 'appId' | 'tabId' | 'route'> | null;
+/**
+ * 将 host 页签与 URL/sessionStorage 双向同步，应在基座渲染和 runtime 挂载前连接。
+ * @param host 浏览器导航所需的宿主控制器；标题更新通过状态订阅自动持久化。
+ * @param options 浏览器对象、存储键及容错回调；Node 环境需提供 window 适配。
+ * @returns 带 dispose 的连接器；必须在 host.dispose 前释放，以移除两个浏览器监听和宿主订阅。
+ * @remarks 仅保存 appId/tabId/title/route 等公开导航元信息，不保存令牌、实例、表单、缓存或业务数据。
+ * 必须在认证 ready 完成后才创建并连接 host。深链优先于存储；历史仅激活本次连接会话仍存活的 key。
+ * 整页刷新恢复公开元信息并产生新 key；旧页面会话 history 不复活页签，而是 replace 回落当前页。
+ * #/ 在已有页签时回落当前页，不隐式关闭；关闭全部后 URL 为 #/、存储 tabs 为空。
+ * 历史拒绝或失败只 replace 当前历史位置为有效地址，不保证恢复遍历之前的 history 索引。
+ * 整页刷新无法 await 异步离页守卫；业务可选 beforeunload 通用同步确认，但浏览器不保证触发。
+ * @throws 缺少浏览器环境或宿主已销毁；存储和非法 URL 的运行错误交给 onError，适配器安全回落。
+ */
+export declare function connectMicroBrowser(host: Pick<MicroHost, 'apps' | 'getState' | 'subscribe' | 'openTab' | 'activateTab' | 'operate'>, options?: MicroBrowserOptions): {
+    /** 幂等移除本连接器的宿主订阅和浏览器事件；不清空存储、不关闭页签、不销毁宿主。 */
+    dispose(): void;
+};

package/dist/types/core/index.d.ts

@@ -0,0 +1,63 @@
+import { AppBridge, MicroApp, MicroState, MicroTab, OpenTab, Unsubscribe, HostCapabilities, HostCallContext, CapabilityArgs, CapabilityContract, NavigationOperation, NavigationResult, SessionInput, SessionSnapshot, BusinessEventBus } from '../sdk';
+/** 显式公开的宿主业务函数；未注册键一律拒绝，不会按对象路径访问任意宿主成员。 */
+export type HostCapabilityRegistry<C extends CapabilityContract<C>> = {
+    [K in keyof C]?: {
+        /** 接收可信 context 与业务参数，返回值或 Promise；必须自行校验外部参数，异常统一转 HANDLER_FAILED。 */
+        handler: (context: HostCallContext, ...args: CapabilityArgs<C, K>) => ReturnType<C[K]> | Promise<Awaited<ReturnType<C[K]>>>;
+        /** 允许调用的应用白名单；省略表示所有已注册应用，空数组表示全部拒绝。创建时复制，不是安全沙箱。 */
+        apps?: readonly string[];
+    };
+};
+/** 宿主创建配置；能力只在创建时注册，不注入整个宿主或业务服务对象。 */
+export interface MicroHostOptions<C extends CapabilityContract<C>> {
+    /** 公开业务能力映射；缺省或未登记的方法默认拒绝。 */
+    capabilities?: HostCapabilityRegistry<C>;
+    /** 能力调用默认超时，单位毫秒，默认30000；必须为不超过2147483647的正有限数，避免计时器溢出。 */
+    callTimeoutMs?: number;
+    /** 初始公开会话；仅白名单字段会被复制。Token 必须由宿主私有保存。 */
+    session?: SessionInput;
+    /** 同步前端页面准入门禁，仅严格返回 true 放行；不支持异步 ACL，不代替服务端鉴权。
+     * 打开、激活、返回目标及刷新均检查，异步事务提交前复核；关闭不受阻止。
+     * 参数为仅含导航字段的冻结副本；异常、Promise 或非 boolean 返回均按权限拒绝处理。
+     */
+    canOpen?: (input: Readonly<OpenTab>) => boolean;
+    /**
+     * 页面 navigateTo 的跨应用授权；默认拒绝，仅同步严格返回 true 放行，不替代 canOpen 目标准入。
+     * 来源身份由宿主捕获，context、来源页快照及目标均冻结；执行及异步守卫通过后提交前各复核一次。
+     * 异常、Promise 及其他返回值统一拒绝，不泄漏策略内部错误；不授权其他跨应用导航命令。
+     */
+    canNavigate?: (context: {
+        readonly appId: string;
+        readonly tab: MicroTab;
+    }, target: Readonly<OpenTab>) => boolean;
+    /** 接收状态监听器或清理函数异常。异常不会中断已提交导航及其他监听；该回调自身抛错也被隔离。守卫异常由 operate 拒绝返回。 */
+    onError?: (error: unknown) => void;
+}
+/**
+ * 创建无框架的页签宿主。
+ * @param apps 应用注册表，appId 不可重复；远端 entry 必须为 HTTP(S)，local 不配置执行地址。
+ * @param options 显式能力与应用白名单；泛型 C 仅提供编译检查，不代替运行时业务校验。
+ * @returns 宿主控制器；使用结束先释放 browser/runtime，再 dispose 宿主。
+ * @throws 应用重复、URL 非法；同步导航错误由各方法抛出，callHost 则始终 Promise 拒绝。
+ * @remarks 函数桥仅支持同窗口；支持超时与协作取消，不提供 postMessage、副作用回滚或恶意代码隔离。
+ */
+export declare function createMicroHost<C extends CapabilityContract<C> = HostCapabilities>(apps: readonly MicroApp[], options?: MicroHostOptions<C>): {
+    /** 注册应用的冻结元信息；不暴露 capabilities 注册表。 */
+    apps: Readonly<MicroApp>[];
+    getState: () => MicroState;
+    subscribe: (handler: (state: MicroState) => void) => Unsubscribe;
+    openTab: (input: OpenTab) => MicroTab;
+    activateTab: (tabId: string) => boolean;
+    closeTab: (tabId: string, expectedKey?: string) => boolean;
+    updateTab: (tabId: string, patch: {
+        title: string;
+    }, expectedKey?: string) => MicroTab | undefined;
+    updateSession: (input: SessionInput) => SessionSnapshot;
+    operate: (operation: NavigationOperation) => Promise<NavigationResult>;
+    bridge: (appId: string) => AppBridge<C>;
+    /** 宿主侧业务事件总线；无响应广播，来源元信息由宿主生成，异常通过 onError 隔离。 */
+    bus: BusinessEventBus;
+    dispose: () => void;
+};
+/** 宿主控制器结构；框架适配器只依赖此结构，业务能力由 bridge<C> 在创建点保留类型。 */
+export type MicroHost = ReturnType<typeof createMicroHost>;