@dimina-kit/devtools 0.3.1-dev.20260517100756 → 0.3.1-dev.20260518054451

package/README.md

@@ -379,26 +379,37 @@ launch({ preloadPath: '/absolute/path/to/my-preload.js' })
 
 > ⚠️ 使用本功能要求模拟器 preload 调用 `installCustomApisBridge()`（详见上方 "Preload Instrumentation"）。内置 preload 已包含此调用；若你用了自定义 preload 又忘记调用，注册的 API 在小程序运行时**没有任何反应**，且不会报错。
 
+### 命名约定
+
+`name` 是 dimina service 层 `invokeAPI(name, opts)` 用的**裸名**，不带 `wx.` 前缀。注册之后小程序里通过 `wx.<name>(...)`（以及你在 `apiNamespaces` 配的其它命名空间）调用都会命中：
+
+| 小程序里写 | `registerSimulatorApi` 的 name |
+| --- | --- |
+| `wx.login(...)` | `'login'` |
+| `wx.request(...)` | `'request'` |
+| `wx.getStorage(...)` 覆盖内置 | `'getStorage'`（小心：这会**屏蔽** dimina 容器的实现） |
+
 ```typescript
 import { registerSimulatorApi } from '@dimina-kit/devtools/simulator-apis'
 
-const dispose = registerSimulatorApi('myCompany.login', async ({ username }) => {
+// 提供 wx.login 的实现（dimina 容器默认未实现，注册后才能用）
+const dispose = registerSimulatorApi('login', async ({ success }) => {
   // 主进程上下文：可调用内部 HTTP、读取凭证文件、访问原生模块
-  return await callInternalAuth(username)
+  const code = await callInternalAuth()
+  return { code }
 })
 
 // 不再需要时取消注册（不传也行，进程退出会一起清理）
 dispose()
 ```
 
-几点行为约定：
+### 行为约定
 
+- **命中顺序**：小程序运行时按 `apiRegistry[name] → MiniApp 实例方法 → 扩展模块兜底` 查找，所以 `registerSimulatorApi` 注册的 name **优先于内置实现**——既能给"未实现"的 wx.* 补功能（如 `wx.login`），也能覆盖默认的 wx.* 行为（如 `wx.request`，dimina-kit 本身就在用这条路把 `request` 接到主进程 fetch）。
 - 同名重复注册：后注册的覆盖前者，静默替换。
 - `dispose()` 只会移除自己创建的那次注册——如果之后被别人覆盖了，旧的 disposer 是 no-op。
-- 调用未注册的 name：小程序侧拿到 reject，错误信息里带 name。
-- Handler 可同步或异步返回；返回值需可 JSON 序列化（IPC 限制）。
-
-对小程序侧来说，这些 name 和内置 API（`wx.getStorage` 等）走同一个 `AppManager.apiRegistry`，没有区别。
+- 调用未注册且容器内也没有的 name：小程序侧拿到 reject，错误信息里带 name。
+- Handler 可同步或异步返回；**返回值需可 JSON 序列化**（IPC 限制）。函数、Symbol、Map/Set、循环引用都会丢失。
 
 ---
 

package/dist/main/index.bundle.js

@@ -73,9 +73,9 @@ function setupCdpPort() {
 }
 
 // src/main/app/app.ts
-import { app as app11, BrowserWindow as BrowserWindow3, nativeImage } from "electron";
-import fs5 from "fs";
-import path8 from "path";
+import { app as app12, BrowserWindow as BrowserWindow3, nativeImage } from "electron";
+import fs6 from "fs";
+import path9 from "path";
 
 // src/main/utils/paths.ts
 import fs2 from "fs";
@@ -441,7 +441,9 @@ var ProjectChannel = {
   GetPages: "project:getPages",
   GetCompileConfig: "project:getCompileConfig",
   SaveCompileConfig: "project:saveCompileConfig",
-  Status: "project:status"
+  Status: "project:status",
+  CaptureThumbnail: "project:captureThumbnail",
+  GetThumbnail: "project:getThumbnail"
 };
 var ProjectsChannel = {
   List: "projects:list",
@@ -867,6 +869,9 @@ function createWindowService(mainWindow) {
   };
 }
 
+// src/main/services/workspace/workspace-service.ts
+import { webContents as webContents2 } from "electron";
+
 // src/main/services/projects/project-repository.ts
 import { app as app6 } from "electron";
 import path7 from "path";
@@ -1054,6 +1059,38 @@ function updateProjectSettings(projectPath, patch) {
   );
 }
 
+// src/main/services/projects/thumbnail.ts
+import { createHash } from "crypto";
+import fs4 from "fs";
+import path8 from "path";
+import { app as app7 } from "electron";
+function getThumbnailDir() {
+  return path8.join(app7.getPath("userData"), "thumbnails");
+}
+function hashProjectPath(projectPath) {
+  return createHash("sha256").update(projectPath).digest("hex").slice(0, 16);
+}
+function getThumbnailPath(projectPath) {
+  return path8.join(getThumbnailDir(), `${hashProjectPath(projectPath)}.png`);
+}
+function saveThumbnail(projectPath, image) {
+  const png = image.toPNG();
+  const dir = getThumbnailDir();
+  fs4.mkdirSync(dir, { recursive: true });
+  const filePath = getThumbnailPath(projectPath);
+  fs4.writeFileSync(filePath, png);
+  return `data:image/png;base64,${png.toString("base64")}`;
+}
+function loadThumbnail(projectPath) {
+  const filePath = getThumbnailPath(projectPath);
+  try {
+    const buf = fs4.readFileSync(filePath);
+    return `data:image/png;base64,${buf.toString("base64")}`;
+  } catch {
+    return null;
+  }
+}
+
 // src/main/services/workspace/workspace-service.ts
 function createWorkspaceService(ctx) {
   let currentSession = null;
@@ -1143,6 +1180,21 @@ function createWorkspaceService(ctx) {
     getSession: () => currentSession,
     getProjectPath: () => currentProjectPath,
     hasActiveSession: () => currentSession !== null,
+    async captureThumbnail(projectPath) {
+      const simWcId = ctx.views.getSimulatorWebContentsId();
+      if (!simWcId) return null;
+      const wc = webContents2.fromId(simWcId);
+      if (!wc || wc.isDestroyed()) return null;
+      try {
+        const image = await wc.capturePage();
+        return saveThumbnail(projectPath, image);
+      } catch {
+        return null;
+      }
+    },
+    getThumbnail(projectPath) {
+      return loadThumbnail(projectPath);
+    },
     getProjectPages: (projectPath) => getProjectPages(projectPath),
     getCompileConfig: (projectPath) => getCompileConfig(projectPath),
     saveCompileConfig: (projectPath, config) => saveCompileConfig(projectPath, config),
@@ -1208,6 +1260,17 @@ function installAppMenu(ctx) {
         { role: "quit" }
       ]
     },
+    {
+      label: "\u9879\u76EE",
+      submenu: [
+        {
+          label: "\u6253\u5F00\u9879\u76EE",
+          click: () => {
+            ctx.notify.windowNavigateBack();
+          }
+        }
+      ]
+    },
     {
       label: "\u7F16\u8F91",
       submenu: [
@@ -1249,7 +1312,7 @@ function installAppMenu(ctx) {
 }
 
 // src/main/ipc/app.ts
-import fs4 from "fs";
+import fs5 from "fs";
 
 // src/main/utils/ipc-registry.ts
 import { ipcMain } from "electron";
@@ -1355,7 +1418,7 @@ var IpcRegistry = class {
 // src/main/ipc/app.ts
 function registerAppIpc(ctx) {
   return new IpcRegistry(ctx.senderPolicy).handle(AppChannel.GetPreloadPath, () => {
-    return `file://${fs4.realpathSync(ctx.preloadPath)}`;
+    return `file://${fs5.realpathSync(ctx.preloadPath)}`;
   }).handle(AppChannel.GetBranding, async () => {
     if (ctx.brandingProvider) return ctx.brandingProvider();
     return { appName: ctx.appName };
@@ -1424,6 +1487,8 @@ var SettingsProjectSettingsChangedSchema = z.tuple([
   })
 ]);
 var PanelSelectSchema = z.tuple([z.string().min(1).max(200)]);
+var ProjectCaptureThumbnailSchema = z.tuple([AbsolutePath]);
+var ProjectGetThumbnailSchema = z.tuple([AbsolutePath]);
 
 // src/main/services/simulator/custom-apis.ts
 function createSimulatorApiRegistry() {
@@ -1478,7 +1543,7 @@ function registerSimulatorIpc(ctx) {
 }
 
 // src/main/ipc/panels.ts
-import { webContents as webContents2 } from "electron";
+import { webContents as webContents3 } from "electron";
 var BUILTIN_PANELS = [
   { id: "wxml", label: "WXML" },
   { id: "appdata", label: "AppData" },
@@ -1491,7 +1556,7 @@ function registerPanelsIpc(ctx) {
     const [expression] = validate(PanelChannel.Eval, PanelEvalSchema, args);
     const simWcId = ctx.views.getSimulatorWebContentsId();
     if (!ctx.workspace.hasActiveSession() || simWcId == null) return void 0;
-    const sim = webContents2.fromId(simWcId);
+    const sim = webContents3.fromId(simWcId);
     if (!sim || sim.isDestroyed()) return void 0;
     try {
       return await sim.executeJavaScript(expression);
@@ -1596,6 +1661,20 @@ function registerSessionIpc(ctx) {
     return ctx.workspace.saveCompileConfig(projectPath, config);
   }).handle(ProjectChannel.Close, () => {
     return ctx.workspace.closeProject();
+  }).handle(ProjectChannel.CaptureThumbnail, (_, ...args) => {
+    const [projectPath] = validate(
+      ProjectChannel.CaptureThumbnail,
+      ProjectCaptureThumbnailSchema,
+      args
+    );
+    return ctx.workspace.captureThumbnail(projectPath);
+  }).handle(ProjectChannel.GetThumbnail, (_, ...args) => {
+    const [projectPath] = validate(
+      ProjectChannel.GetThumbnail,
+      ProjectGetThumbnailSchema,
+      args
+    );
+    return ctx.workspace.getThumbnail(projectPath);
   });
 }
 var sessionModule = {
@@ -1603,7 +1682,7 @@ var sessionModule = {
 };
 
 // src/main/ipc/settings.ts
-import { app as app7 } from "electron";
+import { app as app8 } from "electron";
 function registerSettingsIpc(ctx) {
   return new IpcRegistry(ctx.senderPolicy).handle(WorkbenchSettingsChannel.Get, () => {
     return loadWorkbenchSettings();
@@ -1625,8 +1704,8 @@ function registerSettingsIpc(ctx) {
     applyTheme(theme);
   }).handle(WorkbenchSettingsChannel.GetCdpStatus, () => {
     const settings = loadWorkbenchSettings();
-    const switchValue = app7.commandLine.getSwitchValue("remote-debugging-port");
-    const implicitDevDefault = !app7.isPackaged && !settings.cdp.enabled && switchValue === "9222";
+    const switchValue = app8.commandLine.getSwitchValue("remote-debugging-port");
+    const implicitDevDefault = !app8.isPackaged && !settings.cdp.enabled && switchValue === "9222";
     return {
       configured: settings.cdp.enabled,
       port: settings.cdp.port,
@@ -1710,11 +1789,11 @@ var simulatorModule = {
 import { WebSocketServer } from "ws";
 
 // src/main/services/automation/exec.ts
-import { webContents as webContents3 } from "electron";
+import { webContents as webContents4 } from "electron";
 function getSimulator(ctx) {
   const simWcId = ctx.views.getSimulatorWebContentsId();
   if (!ctx.workspace.hasActiveSession() || simWcId == null) return null;
-  const sim = webContents3.fromId(simWcId);
+  const sim = webContents4.fromId(simWcId);
   if (!sim || sim.isDestroyed()) return null;
   return sim;
 }
@@ -2880,7 +2959,7 @@ function startMcpServer(resolvedCdpPort, mcpPort) {
 }
 
 // src/main/services/simulator-storage/index.ts
-import { app as app8, webContents as wcStatic } from "electron";
+import { app as app9, webContents as wcStatic } from "electron";
 function isSimulatorWebview(wc) {
   if (wc.isDestroyed()) return false;
   if (wc.getType() !== "webview") return false;
@@ -3130,9 +3209,9 @@ function setupSimulatorStorage(host, options) {
       wcSubs.delete(wc);
     });
   };
-  app8.on("web-contents-created", onWcCreated);
+  app9.on("web-contents-created", onWcCreated);
   registry.add(() => {
-    app8.removeListener("web-contents-created", onWcCreated);
+    app9.removeListener("web-contents-created", onWcCreated);
   });
   registry.add(async () => {
     const subs = Array.from(wcSubs.values());
@@ -3193,7 +3272,7 @@ async function clearElementInspection() {
 }
 
 // src/main/services/update/update-manager.ts
-import { app as app9, shell as shell3 } from "electron";
+import { app as app10, shell as shell3 } from "electron";
 var UpdateManager = class {
   checker;
   mainWindow;
@@ -3206,7 +3285,7 @@ var UpdateManager = class {
   constructor(opts) {
     this.checker = opts.checker;
     this.mainWindow = opts.mainWindow;
-    this.getCurrentVersion = opts.getCurrentVersion ?? (() => app9.getVersion());
+    this.getCurrentVersion = opts.getCurrentVersion ?? (() => app10.getVersion());
     this.ipc = new IpcRegistry(opts.senderPolicy);
     this.registerIpc();
     this.startPeriodicCheck(opts.checkInterval ?? 60 * 60 * 1e3, opts.initialDelay ?? 5e3);
@@ -3247,7 +3326,7 @@ var UpdateManager = class {
   install() {
     if (this.downloadedPath) {
       shell3.openPath(this.downloadedPath);
-      app9.quit();
+      app10.quit();
     }
   }
   /**
@@ -3280,7 +3359,7 @@ var UpdateManager = class {
 };
 
 // src/main/services/update/github-release-checker.ts
-import { app as app10 } from "electron";
+import { app as app11 } from "electron";
 
 // src/main/app/app.ts
 var DEFAULT_MODULES = {
@@ -3329,7 +3408,7 @@ async function disposeContext(ctx) {
 function createConfiguredMainWindow(config, rendererDir2) {
   const mainWindow = createMainWindow({
     title: config.appName ?? "Dimina DevTools",
-    indexHtml: path8.join(rendererDir2, "entries/main/index.html"),
+    indexHtml: path9.join(rendererDir2, "entries/main/index.html"),
     width: config.window?.width,
     height: config.window?.height,
     minWidth: config.window?.minWidth,
@@ -3384,7 +3463,7 @@ async function setupAutomation(instance) {
 function setupMcp() {
   const settings = loadWorkbenchSettings();
   if (!settings.mcp.enabled) return null;
-  const cdpPortSwitch = app11.commandLine.getSwitchValue("remote-debugging-port");
+  const cdpPortSwitch = app12.commandLine.getSwitchValue("remote-debugging-port");
   const cdpPort2 = cdpPortSwitch ? parseInt(cdpPortSwitch, 10) : settings.cdp.port;
   return startMcpServer(cdpPort2, settings.mcp.port);
 }
@@ -3405,12 +3484,12 @@ function wireAppWindowEvents(config, instance) {
   });
 }
 function enableDevRendererAutoReload(rendererDir2) {
-  if (app11.isPackaged) {
+  if (app12.isPackaged) {
     return toDisposable(() => {
     });
   }
   let reloadTimer = null;
-  const watcher = fs5.watch(rendererDir2, { recursive: true }, () => {
+  const watcher = fs6.watch(rendererDir2, { recursive: true }, () => {
     if (reloadTimer) clearTimeout(reloadTimer);
     reloadTimer = setTimeout(() => {
       for (const win of BrowserWindow3.getAllWindows()) {
@@ -3432,7 +3511,7 @@ function createWorkbenchApp(config = {}) {
   setupCdpPort();
   async function setup() {
     if (setupPromise) return setupPromise;
-    setupPromise = app11.whenReady().then(async () => {
+    setupPromise = app12.whenReady().then(async () => {
       applyTheme(loadWorkbenchSettings().theme);
       const rendererDir2 = config.rendererDir ?? rendererDir;
       const mainWindow = createConfiguredMainWindow(config, rendererDir2);
@@ -3496,7 +3575,7 @@ function createWorkbenchApp(config = {}) {
 
 // src/main/windows/settings-window/create.ts
 import { BrowserWindow as BrowserWindow4 } from "electron";
-import path9 from "path";
+import path10 from "path";
 async function createSettingsWindow(parent, rendererDir2) {
   const win = new BrowserWindow4({
     width: 420,
@@ -3514,7 +3593,7 @@ async function createSettingsWindow(parent, rendererDir2) {
     }
   });
   applyNavigationHardening(win.webContents, rendererDir2);
-  await win.loadFile(path9.join(rendererDir2, "entries/workbench-settings/index.html"));
+  await win.loadFile(path10.join(rendererDir2, "entries/workbench-settings/index.html"));
   return win;
 }
 

package/dist/main/ipc/session.js

@@ -1,5 +1,5 @@
 import { ProjectChannel } from '../../shared/ipc-channels.js';
-import { ProjectGetCompileConfigSchema, ProjectGetPagesSchema, ProjectOpenSchema, ProjectSaveCompileConfigSchema, } from '../../shared/ipc-schemas.js';
+import { ProjectCaptureThumbnailSchema, ProjectGetCompileConfigSchema, ProjectGetPagesSchema, ProjectGetThumbnailSchema, ProjectOpenSchema, ProjectSaveCompileConfigSchema, } from '../../shared/ipc-schemas.js';
 import { validate } from '../utils/ipc-schema.js';
 import { IpcRegistry } from '../utils/ipc-registry.js';
 export function registerSessionIpc(ctx) {
@@ -22,6 +22,14 @@ export function registerSessionIpc(ctx) {
     })
         .handle(ProjectChannel.Close, () => {
         return ctx.workspace.closeProject();
+    })
+        .handle(ProjectChannel.CaptureThumbnail, (_, ...args) => {
+        const [projectPath] = validate(ProjectChannel.CaptureThumbnail, ProjectCaptureThumbnailSchema, args);
+        return ctx.workspace.captureThumbnail(projectPath);
+    })
+        .handle(ProjectChannel.GetThumbnail, (_, ...args) => {
+        const [projectPath] = validate(ProjectChannel.GetThumbnail, ProjectGetThumbnailSchema, args);
+        return ctx.workspace.getThumbnail(projectPath);
     });
 }
 export const sessionModule = {

package/dist/main/menu/index.js

@@ -23,6 +23,17 @@ export function installAppMenu(ctx) {
                 { role: 'quit' },
             ],
         },
+        {
+            label: '项目',
+            submenu: [
+                {
+                    label: '打开项目',
+                    click: () => {
+                        ctx.notify.windowNavigateBack();
+                    },
+                },
+            ],
+        },
         {
             label: '编辑',
             submenu: [

package/dist/main/services/projects/thumbnail.d.ts

@@ -0,0 +1,4 @@
+import { type NativeImage } from 'electron';
+export declare function saveThumbnail(projectPath: string, image: NativeImage): string | null;
+export declare function loadThumbnail(projectPath: string): string | null;
+//# sourceMappingURL=thumbnail.d.ts.map

package/dist/main/services/projects/thumbnail.js

@@ -0,0 +1,32 @@
+import { createHash } from 'crypto';
+import fs from 'fs';
+import path from 'path';
+import { app } from 'electron';
+function getThumbnailDir() {
+    return path.join(app.getPath('userData'), 'thumbnails');
+}
+function hashProjectPath(projectPath) {
+    return createHash('sha256').update(projectPath).digest('hex').slice(0, 16);
+}
+function getThumbnailPath(projectPath) {
+    return path.join(getThumbnailDir(), `${hashProjectPath(projectPath)}.png`);
+}
+export function saveThumbnail(projectPath, image) {
+    const png = image.toPNG();
+    const dir = getThumbnailDir();
+    fs.mkdirSync(dir, { recursive: true });
+    const filePath = getThumbnailPath(projectPath);
+    fs.writeFileSync(filePath, png);
+    return `data:image/png;base64,${png.toString('base64')}`;
+}
+export function loadThumbnail(projectPath) {
+    const filePath = getThumbnailPath(projectPath);
+    try {
+        const buf = fs.readFileSync(filePath);
+        return `data:image/png;base64,${buf.toString('base64')}`;
+    }
+    catch {
+        return null;
+    }
+}
+//# sourceMappingURL=thumbnail.js.map

package/dist/main/services/workspace/workspace-service.d.ts

@@ -39,6 +39,8 @@ export interface WorkspaceService {
     } | null;
     getProjectPath(): string;
     hasActiveSession(): boolean;
+    captureThumbnail(projectPath: string): Promise<string | null>;
+    getThumbnail(projectPath: string): string | null;
     getProjectPages(projectPath: string): ProjectPages;
     getCompileConfig(projectPath: string): CompileConfig;
     saveCompileConfig(projectPath: string, config: CompileConfig): void;

package/dist/main/services/workspace/workspace-service.js

@@ -1,6 +1,8 @@
+import { webContents } from 'electron';
 import * as repo from '../projects/project-repository.js';
 import { clearSimulatorServicewechatReferer, setSimulatorServicewechatReferer, } from '../simulator/referer.js';
 import { loadWorkbenchSettings } from '../settings/index.js';
+import { saveThumbnail, loadThumbnail } from '../projects/thumbnail.js';
 /** Build a workspace service bound to the given workbench context. */
 export function createWorkspaceService(ctx) {
     let currentSession = null;
@@ -96,6 +98,24 @@ export function createWorkspaceService(ctx) {
         getSession: () => currentSession,
         getProjectPath: () => currentProjectPath,
         hasActiveSession: () => currentSession !== null,
+        async captureThumbnail(projectPath) {
+            const simWcId = ctx.views.getSimulatorWebContentsId();
+            if (!simWcId)
+                return null;
+            const wc = webContents.fromId(simWcId);
+            if (!wc || wc.isDestroyed())
+                return null;
+            try {
+                const image = await wc.capturePage();
+                return saveThumbnail(projectPath, image);
+            }
+            catch {
+                return null;
+            }
+        },
+        getThumbnail(projectPath) {
+            return loadThumbnail(projectPath);
+        },
         getProjectPages: (projectPath) => repo.getProjectPages(projectPath),
         getCompileConfig: (projectPath) => repo.getCompileConfig(projectPath),
         saveCompileConfig: (projectPath, config) => repo.saveCompileConfig(projectPath, config),

package/dist/main/utils/sender-policy.d.ts

@@ -10,11 +10,13 @@ import type { SenderPolicy } from './ipc-registry.js';
  * - the settings overlay view (when open)
  * - the popover overlay view (when open)
  *
- * The simulator webview is intentionally NOT on this list: its preload
- * (`src/preload/windows/simulator.ts`) uses `ipcRenderer.sendToHost`
- * exclusively, never `invoke`/`send`, so it can't legitimately reach an
- * ipcMain handler. Including it would only widen the attack surface if
- * the guest were ever compromised.
+ * The simulator webview is intentionally NOT on this list. Anything it
+ * needs from main (currently just the custom-apis bridge — see
+ * `installCustomApisBridge` in `src/preload/runtime/custom-apis.ts` and the
+ * matching `useCustomApiProxy` host hook) proxies through the trusted
+ * main-window renderer via `ipcRenderer.sendToHost` + `<webview>.send`.
+ * Keeping the guest off this list contains the blast radius if the
+ * simulator content is ever compromised.
  *
  * Any other sender — including a stale/destroyed sender or an unknown
  * iframe — is rejected.

package/dist/main/utils/sender-policy.js

@@ -8,11 +8,13 @@
  * - the settings overlay view (when open)
  * - the popover overlay view (when open)
  *
- * The simulator webview is intentionally NOT on this list: its preload
- * (`src/preload/windows/simulator.ts`) uses `ipcRenderer.sendToHost`
- * exclusively, never `invoke`/`send`, so it can't legitimately reach an
- * ipcMain handler. Including it would only widen the attack surface if
- * the guest were ever compromised.
+ * The simulator webview is intentionally NOT on this list. Anything it
+ * needs from main (currently just the custom-apis bridge — see
+ * `installCustomApisBridge` in `src/preload/runtime/custom-apis.ts` and the
+ * matching `useCustomApiProxy` host hook) proxies through the trusted
+ * main-window renderer via `ipcRenderer.sendToHost` + `<webview>.send`.
+ * Keeping the guest off this list contains the blast radius if the
+ * simulator content is ever compromised.
  *
  * Any other sender — including a stale/destroyed sender or an unknown
  * iframe — is rejected.
@@ -35,7 +37,7 @@ export function createWorkbenchSenderPolicy(ctx) {
         const popoverViewId = ctx.views.getPopoverWebContentsId();
         if (popoverViewId != null && sender.id === popoverViewId)
             return true;
-        // simulator preload uses sendToHost only; never reaches ipcMain handlers.
+        // simulator <webview> proxies through main-window renderer (see file header).
         return false;
     };
 }

package/dist/preload/runtime/custom-apis.js

@@ -1,9 +1,38 @@
 import { contextBridge, ipcRenderer } from 'electron';
-import { SimulatorCustomApiChannel } from '../../shared/ipc-channels.js';
+import { SimulatorCustomApiBridgeChannel } from '../../shared/ipc-channels.js';
+// The simulator <webview> is intentionally kept off the workbench sender-policy
+// white-list, so it cannot reach `ipcMain.handle` directly. Instead the bridge
+// asks the trusted main-window renderer to proxy the call: webview sends via
+// `ipcRenderer.sendToHost`, host does the `ipcInvoke`, and posts the result
+// back through `<webview>.send`. Requests and responses are correlated by id
+// so concurrent invokes do not tangle.
 function buildBridge() {
+    let nextId = 1;
+    const pending = new Map();
+    ipcRenderer.on(SimulatorCustomApiBridgeChannel.Response, (_event, payload) => {
+        const entry = pending.get(payload.id);
+        if (!entry)
+            return;
+        pending.delete(payload.id);
+        if ('error' in payload) {
+            entry.reject(new Error(payload.error));
+        }
+        else {
+            entry.resolve(payload.result);
+        }
+    });
+    const send = (req) => {
+        return new Promise((resolve, reject) => {
+            pending.set(req.id, {
+                resolve: (value) => resolve(value),
+                reject,
+            });
+            ipcRenderer.sendToHost(SimulatorCustomApiBridgeChannel.Request, req);
+        });
+    };
     return {
-        list: () => ipcRenderer.invoke(SimulatorCustomApiChannel.List),
-        invoke: (name, params) => ipcRenderer.invoke(SimulatorCustomApiChannel.Invoke, name, params),
+        list: () => send({ id: nextId++, op: 'list' }),
+        invoke: (name, params) => send({ id: nextId++, op: 'invoke', name, params }),
     };
 }
 export function installCustomApisBridge() {

package/dist/preload/windows/simulator.js

@@ -187,9 +187,9 @@ var SimulatorChannel = {
   AppData: "simulator:appdata",
   AppDataAll: "simulator:appdata-all"
 };
-var SimulatorCustomApiChannel = {
-  List: "simulator:custom-apis:list",
-  Invoke: "simulator:custom-apis:invoke"
+var SimulatorCustomApiBridgeChannel = {
+  Request: "simulator:custom-apis:bridge-request",
+  Response: "simulator:custom-apis:bridge-response"
 };
 var BridgeChannel = {
   WxmlRefreshRequest: "wxml:refresh:request",
@@ -199,9 +199,30 @@ var BridgeChannel = {
 
 // src/preload/runtime/custom-apis.ts
 function buildBridge() {
+  let nextId = 1;
+  const pending = /* @__PURE__ */ new Map();
+  import_electron2.ipcRenderer.on(SimulatorCustomApiBridgeChannel.Response, (_event, payload) => {
+    const entry = pending.get(payload.id);
+    if (!entry) return;
+    pending.delete(payload.id);
+    if ("error" in payload) {
+      entry.reject(new Error(payload.error));
+    } else {
+      entry.resolve(payload.result);
+    }
+  });
+  const send = (req) => {
+    return new Promise((resolve, reject) => {
+      pending.set(req.id, {
+        resolve: (value) => resolve(value),
+        reject
+      });
+      import_electron2.ipcRenderer.sendToHost(SimulatorCustomApiBridgeChannel.Request, req);
+    });
+  };
   return {
-    list: () => import_electron2.ipcRenderer.invoke(SimulatorCustomApiChannel.List),
-    invoke: (name, params) => import_electron2.ipcRenderer.invoke(SimulatorCustomApiChannel.Invoke, name, params)
+    list: () => send({ id: nextId++, op: "list" }),
+    invoke: (name, params) => send({ id: nextId++, op: "invoke", name, params })
   };
 }
 function installCustomApisBridge() {