@heybox/hb-sdk-protocol 0.8.0-alpha → 0.8.0-alpha.10

package/dist/index.esm.js

@@ -10,6 +10,22 @@ const VIEWPORT_SET_NAVIGATION_BAR_STYLE_METHOD = 'viewport.setNavigationBarStyle
 const STORAGE_GET_STORAGE_METHOD = 'storage.getStorage';
 const STORAGE_SET_STORAGE_METHOD = 'storage.setStorage';
 const NETWORK_REQUEST_METHOD = 'network.request';
+const NETWORK_DOWNLOAD_METHOD = 'network.download';
+const FILES_PICK_FILES_METHOD = 'files.pickFiles';
+const FILES_PICK_DIRECTORY_METHOD = 'files.pickDirectory';
+const FILES_SAVE_FILE_METHOD = 'files.saveFile';
+const FILE_CREATE_METHOD = 'file.create';
+const FILE_REMOVE_METHOD = 'file.remove';
+const FILE_EXISTS_METHOD = 'file.exists';
+const FILE_READ_TEXT_METHOD = 'file.readText';
+const FILE_WRITE_TEXT_METHOD = 'file.writeText';
+const FILE_READ_BYTES_METHOD = 'file.readBytes';
+const FILE_WRITE_BYTES_METHOD = 'file.writeBytes';
+const FILE_STAT_METHOD = 'file.stat';
+const DIRECTORY_CREATE_METHOD = 'directory.create';
+const DIRECTORY_REMOVE_METHOD = 'directory.remove';
+const DIRECTORY_EXISTS_METHOD = 'directory.exists';
+const DIRECTORY_LIST_METHOD = 'directory.list';
 const UI_SHOW_TOAST_METHOD = 'ui.showToast';
 const UI_SHOW_LOADING_METHOD = 'ui.showLoading';
 const UI_HIDE_LOADING_METHOD = 'ui.hideLoading';
@@ -24,95 +40,249 @@ const CLOUD_LEADERBOARD_GET_CURRENT_USER_ENTRY_METHOD = 'cloud.leaderboard.getCu
 const CLOUD_LEADERBOARD_DELETE_CURRENT_USER_ENTRY_METHOD = 'cloud.leaderboard.deleteCurrentUserEntry';
 const CLOUD_LEADERBOARD_GET_INFO_METHOD = 'cloud.leaderboard.getInfo';
 const MINI_PROGRAM_PROTOCOL_CAPABILITIES = [
-    { method: AUTH_LOGIN_METHOD, module: 'auth', capability: AUTH_LOGIN_METHOD, permission: 'auth.login', risk: 'medium' },
-    { method: USER_GET_INFO_METHOD, module: 'user', capability: USER_GET_INFO_METHOD, permission: 'user.getInfo', risk: 'medium' },
+    {
+        method: AUTH_LOGIN_METHOD,
+        module: 'auth',
+        capability: AUTH_LOGIN_METHOD,
+        requirement: { kind: 'all', permissions: ['userInfo'] },
+        risk: 'medium',
+    },
+    {
+        method: USER_GET_INFO_METHOD,
+        module: 'user',
+        capability: USER_GET_INFO_METHOD,
+        requirement: { kind: 'all', permissions: ['userInfo'] },
+        risk: 'medium',
+    },
     {
         method: USER_REVOKE_AUTHORIZATION_METHOD,
         module: 'user',
         capability: USER_REVOKE_AUTHORIZATION_METHOD,
-        permission: 'user.revokeAuthorization',
+        requirement: { kind: 'none' },
         risk: 'high',
     },
     {
         method: USER_GET_STEAM_GAME_LIST_METHOD,
         module: 'user',
         capability: USER_GET_STEAM_GAME_LIST_METHOD,
-        permission: 'user.platformAccount.steam',
+        requirement: { kind: 'all', permissions: ['steamLibrary'] },
         risk: 'high',
     },
-    { method: SHARE_COPY_LINK_METHOD, module: 'share', capability: SHARE_COPY_LINK_METHOD, permission: 'share.copyLink', risk: 'medium' },
-    { method: SHARE_SHOW_SHARE_MENU_METHOD, module: 'share', capability: SHARE_SHOW_SHARE_MENU_METHOD, permission: 'share.basic', risk: 'low' },
-    { method: SHARE_SCREENSHOT_METHOD, module: 'share', capability: SHARE_SCREENSHOT_METHOD, permission: 'share.screenshot', risk: 'medium' },
+    {
+        method: SHARE_COPY_LINK_METHOD,
+        module: 'share',
+        capability: SHARE_COPY_LINK_METHOD,
+        requirement: { kind: 'all', permissions: ['share'] },
+        risk: 'medium',
+    },
+    {
+        method: SHARE_SHOW_SHARE_MENU_METHOD,
+        module: 'share',
+        capability: SHARE_SHOW_SHARE_MENU_METHOD,
+        requirement: { kind: 'all', permissions: ['share'] },
+        risk: 'low',
+    },
+    {
+        method: SHARE_SCREENSHOT_METHOD,
+        module: 'share',
+        capability: SHARE_SCREENSHOT_METHOD,
+        requirement: { kind: 'all', permissions: ['share'] },
+        risk: 'medium',
+    },
     {
         method: VIEWPORT_GET_WINDOW_INFO_METHOD,
         module: 'viewport',
         capability: VIEWPORT_GET_WINDOW_INFO_METHOD,
-        permission: 'viewport.windowInfo',
+        requirement: { kind: 'none' },
         risk: 'low',
     },
     {
         method: VIEWPORT_SET_NAVIGATION_BAR_STYLE_METHOD,
         module: 'viewport',
         capability: VIEWPORT_SET_NAVIGATION_BAR_STYLE_METHOD,
-        permission: 'viewport.navigationBarStyle',
+        requirement: { kind: 'none' },
         risk: 'low',
     },
-    { method: STORAGE_GET_STORAGE_METHOD, module: 'storage', capability: STORAGE_GET_STORAGE_METHOD, permission: 'storage.read', risk: 'low' },
-    { method: STORAGE_SET_STORAGE_METHOD, module: 'storage', capability: STORAGE_SET_STORAGE_METHOD, permission: 'storage.write', risk: 'medium' },
-    { method: NETWORK_REQUEST_METHOD, module: 'network', capability: NETWORK_REQUEST_METHOD, permission: 'network.request', risk: 'high' },
-    { method: UI_SHOW_TOAST_METHOD, module: 'ui', capability: UI_SHOW_TOAST_METHOD, permission: 'ui.toast', risk: 'low' },
-    { method: UI_SHOW_LOADING_METHOD, module: 'ui', capability: UI_SHOW_LOADING_METHOD, permission: 'ui.loading', risk: 'low' },
-    { method: UI_HIDE_LOADING_METHOD, module: 'ui', capability: UI_HIDE_LOADING_METHOD, permission: 'ui.loading', risk: 'low' },
-    { method: DEVICE_VIBRATE_METHOD, module: 'device', capability: DEVICE_VIBRATE_METHOD, permission: 'device.vibrate', risk: 'low' },
+    {
+        method: STORAGE_GET_STORAGE_METHOD,
+        module: 'storage',
+        capability: STORAGE_GET_STORAGE_METHOD,
+        requirement: { kind: 'all', permissions: ['storage'] },
+        risk: 'low',
+    },
+    {
+        method: STORAGE_SET_STORAGE_METHOD,
+        module: 'storage',
+        capability: STORAGE_SET_STORAGE_METHOD,
+        requirement: { kind: 'all', permissions: ['storage'] },
+        risk: 'medium',
+    },
+    {
+        method: NETWORK_REQUEST_METHOD,
+        module: 'network',
+        capability: NETWORK_REQUEST_METHOD,
+        requirement: { kind: 'all', permissions: ['network'] },
+        risk: 'high',
+    },
+    {
+        method: NETWORK_DOWNLOAD_METHOD,
+        module: 'network',
+        capability: NETWORK_DOWNLOAD_METHOD,
+        requirement: { kind: 'all', permissions: ['network', 'filesystem'] },
+        risk: 'high',
+    },
+    {
+        method: FILES_PICK_FILES_METHOD,
+        module: 'files',
+        capability: FILES_PICK_FILES_METHOD,
+        requirement: { kind: 'all', permissions: ['filesystem'] },
+        risk: 'high',
+    },
+    {
+        method: FILES_PICK_DIRECTORY_METHOD,
+        module: 'files',
+        capability: FILES_PICK_DIRECTORY_METHOD,
+        requirement: { kind: 'all', permissions: ['filesystem'] },
+        risk: 'high',
+    },
+    {
+        method: FILES_SAVE_FILE_METHOD,
+        module: 'files',
+        capability: FILES_SAVE_FILE_METHOD,
+        requirement: { kind: 'all', permissions: ['filesystem'] },
+        risk: 'high',
+    },
+    {
+        method: FILE_CREATE_METHOD,
+        module: 'file',
+        capability: FILE_CREATE_METHOD,
+        requirement: { kind: 'all', permissions: ['filesystem'] },
+        risk: 'high',
+    },
+    {
+        method: FILE_REMOVE_METHOD,
+        module: 'file',
+        capability: FILE_REMOVE_METHOD,
+        requirement: { kind: 'all', permissions: ['filesystem'] },
+        risk: 'high',
+    },
+    {
+        method: FILE_EXISTS_METHOD,
+        module: 'file',
+        capability: FILE_EXISTS_METHOD,
+        requirement: { kind: 'all', permissions: ['filesystem'] },
+        risk: 'high',
+    },
+    {
+        method: FILE_READ_TEXT_METHOD,
+        module: 'file',
+        capability: FILE_READ_TEXT_METHOD,
+        requirement: { kind: 'all', permissions: ['filesystem'] },
+        risk: 'high',
+    },
+    {
+        method: FILE_WRITE_TEXT_METHOD,
+        module: 'file',
+        capability: FILE_WRITE_TEXT_METHOD,
+        requirement: { kind: 'all', permissions: ['filesystem'] },
+        risk: 'high',
+    },
+    {
+        method: FILE_READ_BYTES_METHOD,
+        module: 'file',
+        capability: FILE_READ_BYTES_METHOD,
+        requirement: { kind: 'all', permissions: ['filesystem'] },
+        risk: 'high',
+    },
+    {
+        method: FILE_WRITE_BYTES_METHOD,
+        module: 'file',
+        capability: FILE_WRITE_BYTES_METHOD,
+        requirement: { kind: 'all', permissions: ['filesystem'] },
+        risk: 'high',
+    },
+    { method: FILE_STAT_METHOD, module: 'file', capability: FILE_STAT_METHOD, requirement: { kind: 'all', permissions: ['filesystem'] }, risk: 'high' },
+    {
+        method: DIRECTORY_CREATE_METHOD,
+        module: 'directory',
+        capability: DIRECTORY_CREATE_METHOD,
+        requirement: { kind: 'all', permissions: ['filesystem'] },
+        risk: 'high',
+    },
+    {
+        method: DIRECTORY_REMOVE_METHOD,
+        module: 'directory',
+        capability: DIRECTORY_REMOVE_METHOD,
+        requirement: { kind: 'all', permissions: ['filesystem'] },
+        risk: 'high',
+    },
+    {
+        method: DIRECTORY_EXISTS_METHOD,
+        module: 'directory',
+        capability: DIRECTORY_EXISTS_METHOD,
+        requirement: { kind: 'all', permissions: ['filesystem'] },
+        risk: 'high',
+    },
+    {
+        method: DIRECTORY_LIST_METHOD,
+        module: 'directory',
+        capability: DIRECTORY_LIST_METHOD,
+        requirement: { kind: 'all', permissions: ['filesystem'] },
+        risk: 'high',
+    },
+    { method: UI_SHOW_TOAST_METHOD, module: 'ui', capability: UI_SHOW_TOAST_METHOD, requirement: { kind: 'none' }, risk: 'low' },
+    { method: UI_SHOW_LOADING_METHOD, module: 'ui', capability: UI_SHOW_LOADING_METHOD, requirement: { kind: 'none' }, risk: 'low' },
+    { method: UI_HIDE_LOADING_METHOD, module: 'ui', capability: UI_HIDE_LOADING_METHOD, requirement: { kind: 'none' }, risk: 'low' },
+    { method: DEVICE_VIBRATE_METHOD, module: 'device', capability: DEVICE_VIBRATE_METHOD, requirement: { kind: 'none' }, risk: 'low' },
     {
         method: DEVICE_SET_CLIPBOARD_METHOD,
         module: 'device',
         capability: DEVICE_SET_CLIPBOARD_METHOD,
-        permission: 'device.clipboard.write',
+        requirement: { kind: 'all', permissions: ['clipboard'] },
         risk: 'medium',
     },
-    { method: NAVIGATION_CLOSE_METHOD, module: 'navigation', capability: NAVIGATION_CLOSE_METHOD, permission: 'navigation.close', risk: 'medium' },
-    { method: NAVIGATION_RELOAD_METHOD, module: 'navigation', capability: NAVIGATION_RELOAD_METHOD, permission: 'navigation.reload', risk: 'medium' },
+    { method: NAVIGATION_CLOSE_METHOD, module: 'navigation', capability: NAVIGATION_CLOSE_METHOD, requirement: { kind: 'none' }, risk: 'medium' },
+    { method: NAVIGATION_RELOAD_METHOD, module: 'navigation', capability: NAVIGATION_RELOAD_METHOD, requirement: { kind: 'none' }, risk: 'medium' },
     {
         method: NAVIGATION_OPEN_APP_PAGE_METHOD,
         module: 'navigation',
         capability: NAVIGATION_OPEN_APP_PAGE_METHOD,
-        permission: 'navigation.openAppPage',
+        requirement: { kind: 'none' },
         risk: 'medium',
     },
     {
         method: CLOUD_LEADERBOARD_SUBMIT_METHOD,
         module: 'cloud',
         capability: CLOUD_LEADERBOARD_SUBMIT_METHOD,
-        permission: 'cloud.leaderboard.write',
+        requirement: { kind: 'all', permissions: ['leaderboard'] },
         risk: 'medium',
     },
     {
         method: CLOUD_LEADERBOARD_GET_LIST_METHOD,
         module: 'cloud',
         capability: CLOUD_LEADERBOARD_GET_LIST_METHOD,
-        permission: 'cloud.leaderboard.read',
+        requirement: { kind: 'all', permissions: ['leaderboard'] },
         risk: 'low',
     },
     {
         method: CLOUD_LEADERBOARD_GET_CURRENT_USER_ENTRY_METHOD,
         module: 'cloud',
         capability: CLOUD_LEADERBOARD_GET_CURRENT_USER_ENTRY_METHOD,
-        permission: 'cloud.leaderboard.currentUserEntry.read',
+        requirement: { kind: 'all', permissions: ['leaderboard'] },
         risk: 'medium',
     },
     {
         method: CLOUD_LEADERBOARD_DELETE_CURRENT_USER_ENTRY_METHOD,
         module: 'cloud',
         capability: CLOUD_LEADERBOARD_DELETE_CURRENT_USER_ENTRY_METHOD,
-        permission: 'cloud.leaderboard.currentUserEntry.delete',
+        requirement: { kind: 'all', permissions: ['leaderboard'] },
         risk: 'medium',
     },
     {
         method: CLOUD_LEADERBOARD_GET_INFO_METHOD,
         module: 'cloud',
         capability: CLOUD_LEADERBOARD_GET_INFO_METHOD,
-        permission: 'cloud.leaderboard.info.read',
+        requirement: { kind: 'all', permissions: ['leaderboard'] },
         risk: 'low',
     },
 ];
@@ -124,21 +294,279 @@ const SDK_HANDSHAKE_METHOD = 'sdk.handshake';
 const RUNTIME_LOCATION_PROBE_METHOD = 'runtime.location.probe';
 const SDK_LOCATION_REPORT_METHOD = 'sdk.location.report';
 const SDK_CSP_VIOLATION_METHOD = 'sdk.csp.violation';
+const MINI_PROGRAM_OPERATION_PROGRESS_METHOD = 'operation.progress';
 
 function isMiniProgramBridgeMessage(value) {
-    if (!value || typeof value !== 'object')
+    if (!isRecord$1(value))
         return false;
-    const message = value;
-    return (message.namespace === MINI_PROGRAM_MESSAGE_NAMESPACE &&
-        (message.version === 1 || message.version === 2) &&
-        typeof message.nonce === 'string' &&
-        typeof message.type === 'string');
+    if (value.namespace !== MINI_PROGRAM_MESSAGE_NAMESPACE || (value.version !== 1 && value.version !== 2) || !isNonEmptyString(value.nonce)) {
+        return false;
+    }
+    if (value.type === 'handshake') {
+        return isNonEmptyString(value.id) && value.method === SDK_HANDSHAKE_METHOD && value.error === undefined && isSDKHandshakePayload(value.payload);
+    }
+    if (value.type === 'request') {
+        return isNonEmptyString(value.id) && isNonEmptyString(value.method) && value.error === undefined;
+    }
+    if (value.type === 'response') {
+        return (isNonEmptyString(value.id) &&
+            (value.method === undefined || isNonEmptyString(value.method)) &&
+            (value.error === undefined || isBridgeError(value.error)));
+    }
+    if (value.type === 'event') {
+        if (!isNonEmptyString(value.method) || value.error !== undefined)
+            return false;
+        if (value.method === MINI_PROGRAM_OPERATION_PROGRESS_METHOD) {
+            return value.version === 2 && isNonEmptyString(value.id) && isMiniProgramDownloadProgressPayload(value.payload);
+        }
+        return value.id === undefined || isNonEmptyString(value.id);
+    }
+    if (value.type === 'cancel') {
+        return (value.version === 2 && isNonEmptyString(value.id) && value.method === undefined && value.payload === undefined && value.error === undefined);
+    }
+    return false;
+}
+function isMiniProgramRelativePath(value) {
+    if (typeof value !== 'string' || !value || value.startsWith('/') || value.endsWith('/')) {
+        return false;
+    }
+    if (/[\\\u0000-\u001f\u007f]/.test(value))
+        return false;
+    return value.split('/').every((segment) => Boolean(segment) && segment !== '.' && segment !== '..');
+}
+function isMiniProgramPathRootRef(value) {
+    if (!isRecord$1(value))
+        return false;
+    if (value.kind === 'sandbox')
+        return hasOnlyKeys(value, ['kind']);
+    return value.kind === 'directory' && isNonEmptyString(value.handleId) && hasOnlyKeys(value, ['kind', 'handleId']);
+}
+function isMiniProgramFileRef(value) {
+    if (!isRecord$1(value) || value.kind !== 'file')
+        return false;
+    if (isNonEmptyString(value.handleId)) {
+        return hasOnlyKeys(value, ['kind', 'handleId']);
+    }
+    return (isMiniProgramPathRootRef(value.root) && isMiniProgramRelativePath(value.relativePath) && hasOnlyKeys(value, ['kind', 'root', 'relativePath']));
+}
+function isMiniProgramDirectoryRef(value) {
+    if (!isRecord$1(value) || value.kind !== 'directory')
+        return false;
+    if (isNonEmptyString(value.handleId)) {
+        return hasOnlyKeys(value, ['kind', 'handleId']);
+    }
+    return (isMiniProgramPathRootRef(value.root) && isMiniProgramRelativePath(value.relativePath) && hasOnlyKeys(value, ['kind', 'root', 'relativePath']));
+}
+function isMiniProgramFileDescriptor(value) {
+    return (isRecord$1(value) &&
+        value.kind === 'file' &&
+        isNonEmptyString(value.name) &&
+        isFileMode(value.mode) &&
+        isMiniProgramFileRef(value.ref) &&
+        hasOnlyKeys(value, ['kind', 'name', 'mode', 'ref']));
+}
+function isMiniProgramDirectoryDescriptor(value) {
+    return (isRecord$1(value) &&
+        value.kind === 'directory' &&
+        isNonEmptyString(value.name) &&
+        isFileMode(value.mode) &&
+        isMiniProgramDirectoryRef(value.ref) &&
+        hasOnlyKeys(value, ['kind', 'name', 'mode', 'ref']));
+}
+function isMiniProgramFileSystemEntityDescriptor(value) {
+    return isMiniProgramFileDescriptor(value) || isMiniProgramDirectoryDescriptor(value);
+}
+function isMiniProgramByteArray(value) {
+    return value instanceof Uint8Array && value.buffer instanceof ArrayBuffer;
+}
+function isMiniProgramFileStat(value) {
+    return (isRecord$1(value) &&
+        value.kind === 'file' &&
+        isNonNegativeSafeInteger(value.size) &&
+        (value.modifiedAt === undefined || isNonNegativeFiniteNumber(value.modifiedAt)) &&
+        (value.createdAt === undefined || isNonNegativeFiniteNumber(value.createdAt)) &&
+        hasOnlyKeys(value, ['kind', 'size', 'modifiedAt', 'createdAt']));
+}
+function isMiniProgramDownloadProgressPayload(value) {
+    if (!isRecord$1(value) ||
+        !isNonNegativeSafeInteger(value.loaded) ||
+        typeof value.lengthComputable !== 'boolean' ||
+        !hasOnlyKeys(value, ['loaded', 'total', 'lengthComputable'])) {
+        return false;
+    }
+    if (!value.lengthComputable)
+        return value.total === undefined;
+    return isNonNegativeSafeInteger(value.total) && value.loaded <= value.total;
+}
+function isSDKHandshakePayload(value) {
+    return isRecord$1(value) && isNonEmptyString(value.href) && typeof value.userAgent === 'string' && isNonEmptyString(value.sdkVersion);
+}
+function isBridgeError(value) {
+    return isRecord$1(value) && isNonEmptyString(value.code) && typeof value.message === 'string';
+}
+function isFileMode(value) {
+    return value === 'read' || value === 'readwrite';
+}
+function isNonNegativeSafeInteger(value) {
+    return typeof value === 'number' && Number.isSafeInteger(value) && value >= 0;
+}
+function isNonNegativeFiniteNumber(value) {
+    return typeof value === 'number' && Number.isFinite(value) && value >= 0;
+}
+function isNonEmptyString(value) {
+    return typeof value === 'string' && value.length > 0;
+}
+function hasOnlyKeys(value, allowedKeys) {
+    const allowed = new Set(allowedKeys);
+    return Object.keys(value).every((key) => allowed.has(key));
+}
+function isRecord$1(value) {
+    return typeof value === 'object' && value !== null && !Array.isArray(value);
 }
 
 /** 当前用户信息与登录能力支持的完整 scope 目录。 */
 const USER_INFO_AUTHORIZATION_SCOPES = ['identity', 'profile'];
 
-const MANAGED_RUNTIME_PERMISSION_KEYS = new Set(['network.request']);
+const MINI_PROGRAM_PERMISSION_KEYS = [
+    'userInfo',
+    'steamLibrary',
+    'share',
+    'storage',
+    'filesystem',
+    'clipboard',
+    'leaderboard',
+    'network',
+];
+const MINI_PROGRAM_PERMISSION_CATALOG = [
+    {
+        key: 'userInfo',
+        name: '用户信息',
+        description: '登录小程序并读取当前用户的授权信息。',
+        access: 'declaration',
+        risk: 'medium',
+        config: {},
+        methods: ['auth.login', 'user.getInfo'],
+        conditions: ['继续执行黑盒登录、用户授权和可信手势规则。'],
+    },
+    {
+        key: 'steamLibrary',
+        name: 'Steam 游戏库',
+        description: '读取当前用户授权的 Steam 游戏库。',
+        access: 'declaration',
+        risk: 'high',
+        config: {},
+        methods: ['user.getSteamGameList'],
+        conditions: ['继续执行账号绑定和数据可用性规则。'],
+    },
+    {
+        key: 'share',
+        name: '分享',
+        description: '使用小程序分享、分享菜单和截图能力。',
+        access: 'declaration',
+        risk: 'medium',
+        config: {},
+        methods: ['share.copyLink', 'share.showShareMenu', 'share.screenshot'],
+        conditions: ['继续执行分享参数校验和 Host 支持检查。'],
+    },
+    {
+        key: 'storage',
+        name: '键值存储',
+        description: '读写按小程序隔离的简单键值数据。',
+        access: 'declaration',
+        risk: 'medium',
+        config: {},
+        methods: ['storage.getStorage', 'storage.setStorage'],
+        conditions: ['仅用于简单键值存储，不包含文件系统。'],
+    },
+    {
+        key: 'filesystem',
+        name: '文件系统',
+        description: '访问小程序沙盒文件和用户选择的外部文件。',
+        access: 'declaration',
+        risk: 'high',
+        config: {},
+        methods: [
+            'network.download',
+            'files.pickFiles',
+            'files.pickDirectory',
+            'files.saveFile',
+            'file.create',
+            'file.remove',
+            'file.exists',
+            'file.readText',
+            'file.writeText',
+            'file.readBytes',
+            'file.writeBytes',
+            'file.stat',
+            'directory.create',
+            'directory.remove',
+            'directory.exists',
+            'directory.list',
+        ],
+        conditions: ['外部文件继续要求有效的用户选择、会话句柄和匹配的读写模式。'],
+    },
+    {
+        key: 'clipboard',
+        name: '剪贴板',
+        description: '向系统剪贴板写入文本。',
+        access: 'declaration',
+        risk: 'medium',
+        config: {},
+        methods: ['device.setClipboard'],
+        conditions: ['继续执行文本长度和 Host 支持限制。'],
+    },
+    {
+        key: 'leaderboard',
+        name: '排行榜',
+        description: '读写小程序云排行榜。',
+        access: 'declaration',
+        risk: 'medium',
+        config: {},
+        methods: [
+            'cloud.leaderboard.submit',
+            'cloud.leaderboard.getList',
+            'cloud.leaderboard.getCurrentUserEntry',
+            'cloud.leaderboard.deleteCurrentUserEntry',
+            'cloud.leaderboard.getInfo',
+        ],
+        conditions: ['排行榜必须已创建，用户和资源规则保持不变。'],
+    },
+    {
+        key: 'network',
+        name: '网络',
+        description: '通过 network 模块请求或下载外部资源。',
+        access: 'platform-approval',
+        risk: 'high',
+        config: {
+            useOfficialDomain: {
+                type: 'boolean',
+                required: false,
+                default: false,
+                description: '是否申请访问小黑盒官方域名。',
+            },
+        },
+        methods: ['network.request', 'network.download'],
+        conditions: ['声明后仍需平台批准，并继续执行网络安全策略。'],
+    },
+];
+const MINI_PROGRAM_NO_DECLARATION_METHODS = [
+    'user.revokeAuthorization',
+    'ui.showToast',
+    'ui.showLoading',
+    'ui.hideLoading',
+    'viewport.getWindowInfo',
+    'viewport.setNavigationBarStyle',
+    'device.vibrate',
+    'navigation.close',
+    'navigation.reload',
+    'navigation.openAppPage',
+];
+const PERMISSION_KEY_SET = new Set(MINI_PROGRAM_PERMISSION_KEYS);
+function isMiniProgramPermissionKey(key) {
+    return PERMISSION_KEY_SET.has(key);
+}
+
+const MANAGED_RUNTIME_PERMISSION_KEYS = new Set(MINI_PROGRAM_PERMISSION_KEYS);
 function isManagedMiniProgramRuntimePermissionKey(key) {
     return MANAGED_RUNTIME_PERMISSION_KEYS.has(key);
 }
@@ -155,20 +583,36 @@ function parseMiniProgramRuntimePermissions(snapshot) {
         if (!isRecord(rawEntry) || typeof rawEntry.key !== 'string' || !rawEntry.key.trim()) {
             return { valid: false, permissions: {} };
         }
-        const key = rawEntry.key.trim();
-        if (seenKeys.has(key) || (rawEntry.status !== 'enabled' && rawEntry.status !== 'disabled') || !isRecord(rawEntry.config)) {
+        const inputKey = rawEntry.key.trim();
+        const key = inputKey === 'network.request' ? 'network' : inputKey;
+        if (seenKeys.has(key) || (rawEntry.status !== 'enabled' && rawEntry.status !== 'disabled')) {
             return { valid: false, permissions: {} };
         }
         seenKeys.add(key);
-        if (!isManagedMiniProgramRuntimePermissionKey(key))
+        if (!isManagedMiniProgramRuntimePermissionKey(key)) {
+            if (!isRecord(rawEntry.config))
+                return { valid: false, permissions: {} };
+            continue;
+        }
+        if (key === 'network') {
+            const config = rawEntry.config;
+            if (!isRecord(config) || typeof config.useOfficialDomain !== 'boolean') {
+                return { valid: false, permissions: {} };
+            }
+            permissions[key] = {
+                key,
+                status: rawEntry.status,
+                config: { useOfficialDomain: config.useOfficialDomain },
+            };
             continue;
-        if (key === 'network.request' && typeof rawEntry.config.useOfficialDomain !== 'boolean') {
+        }
+        if (rawEntry.config !== null && rawEntry.config !== undefined && (!isRecord(rawEntry.config) || Object.keys(rawEntry.config).length > 0)) {
             return { valid: false, permissions: {} };
         }
         permissions[key] = {
             key,
             status: rawEntry.status,
-            config: { useOfficialDomain: rawEntry.config.useOfficialDomain },
+            config: {},
         };
     }
     return { valid: true, permissions };
@@ -177,4 +621,4 @@ function isRecord(value) {
     return typeof value === 'object' && value !== null && !Array.isArray(value);
 }
 
-export { AUTH_LOGIN_METHOD, CLOUD_LEADERBOARD_DELETE_CURRENT_USER_ENTRY_METHOD, CLOUD_LEADERBOARD_GET_CURRENT_USER_ENTRY_METHOD, CLOUD_LEADERBOARD_GET_INFO_METHOD, CLOUD_LEADERBOARD_GET_LIST_METHOD, CLOUD_LEADERBOARD_SUBMIT_METHOD, DEVICE_SET_CLIPBOARD_METHOD, DEVICE_VIBRATE_METHOD, MINI_PROGRAM_BRIDGE_NONCE_PARAM, MINI_PROGRAM_MESSAGE_NAMESPACE, MINI_PROGRAM_MESSAGE_VERSION, MINI_PROGRAM_PROTOCOL_CAPABILITIES, NAVIGATION_CLOSE_METHOD, NAVIGATION_OPEN_APP_PAGE_METHOD, NAVIGATION_RELOAD_METHOD, NETWORK_REQUEST_METHOD, RUNTIME_LOCATION_PROBE_METHOD, SDK_CSP_VIOLATION_METHOD, SDK_HANDSHAKE_METHOD, SDK_LOCATION_REPORT_METHOD, SHARE_COPY_LINK_METHOD, SHARE_SCREENSHOT_METHOD, SHARE_SHOW_SHARE_MENU_METHOD, STORAGE_GET_STORAGE_METHOD, STORAGE_SET_STORAGE_METHOD, UI_HIDE_LOADING_METHOD, UI_SHOW_LOADING_METHOD, UI_SHOW_TOAST_METHOD, USER_GET_INFO_METHOD, USER_GET_STEAM_GAME_LIST_METHOD, USER_INFO_AUTHORIZATION_SCOPES, USER_REVOKE_AUTHORIZATION_METHOD, VIEWPORT_GET_WINDOW_INFO_METHOD, VIEWPORT_SET_NAVIGATION_BAR_STYLE_METHOD, isManagedMiniProgramRuntimePermissionKey, isMiniProgramBridgeMessage, parseMiniProgramRuntimePermissions };
+export { AUTH_LOGIN_METHOD, CLOUD_LEADERBOARD_DELETE_CURRENT_USER_ENTRY_METHOD, CLOUD_LEADERBOARD_GET_CURRENT_USER_ENTRY_METHOD, CLOUD_LEADERBOARD_GET_INFO_METHOD, CLOUD_LEADERBOARD_GET_LIST_METHOD, CLOUD_LEADERBOARD_SUBMIT_METHOD, DEVICE_SET_CLIPBOARD_METHOD, DEVICE_VIBRATE_METHOD, DIRECTORY_CREATE_METHOD, DIRECTORY_EXISTS_METHOD, DIRECTORY_LIST_METHOD, DIRECTORY_REMOVE_METHOD, FILES_PICK_DIRECTORY_METHOD, FILES_PICK_FILES_METHOD, FILES_SAVE_FILE_METHOD, FILE_CREATE_METHOD, FILE_EXISTS_METHOD, FILE_READ_BYTES_METHOD, FILE_READ_TEXT_METHOD, FILE_REMOVE_METHOD, FILE_STAT_METHOD, FILE_WRITE_BYTES_METHOD, FILE_WRITE_TEXT_METHOD, MINI_PROGRAM_BRIDGE_NONCE_PARAM, MINI_PROGRAM_MESSAGE_NAMESPACE, MINI_PROGRAM_MESSAGE_VERSION, MINI_PROGRAM_NO_DECLARATION_METHODS, MINI_PROGRAM_OPERATION_PROGRESS_METHOD, MINI_PROGRAM_PERMISSION_CATALOG, MINI_PROGRAM_PERMISSION_KEYS, MINI_PROGRAM_PROTOCOL_CAPABILITIES, NAVIGATION_CLOSE_METHOD, NAVIGATION_OPEN_APP_PAGE_METHOD, NAVIGATION_RELOAD_METHOD, NETWORK_DOWNLOAD_METHOD, NETWORK_REQUEST_METHOD, RUNTIME_LOCATION_PROBE_METHOD, SDK_CSP_VIOLATION_METHOD, SDK_HANDSHAKE_METHOD, SDK_LOCATION_REPORT_METHOD, SHARE_COPY_LINK_METHOD, SHARE_SCREENSHOT_METHOD, SHARE_SHOW_SHARE_MENU_METHOD, STORAGE_GET_STORAGE_METHOD, STORAGE_SET_STORAGE_METHOD, UI_HIDE_LOADING_METHOD, UI_SHOW_LOADING_METHOD, UI_SHOW_TOAST_METHOD, USER_GET_INFO_METHOD, USER_GET_STEAM_GAME_LIST_METHOD, USER_INFO_AUTHORIZATION_SCOPES, USER_REVOKE_AUTHORIZATION_METHOD, VIEWPORT_GET_WINDOW_INFO_METHOD, VIEWPORT_SET_NAVIGATION_BAR_STYLE_METHOD, isManagedMiniProgramRuntimePermissionKey, isMiniProgramBridgeMessage, isMiniProgramByteArray, isMiniProgramDirectoryDescriptor, isMiniProgramDirectoryRef, isMiniProgramDownloadProgressPayload, isMiniProgramFileDescriptor, isMiniProgramFileRef, isMiniProgramFileStat, isMiniProgramFileSystemEntityDescriptor, isMiniProgramPathRootRef, isMiniProgramPermissionKey, isMiniProgramRelativePath, parseMiniProgramRuntimePermissions };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@heybox/hb-sdk-protocol",
-  "version": "0.8.0-alpha",
+  "version": "0.8.0-alpha.10",
   "description": "Heybox mini-program iframe bridge wire contracts.",
   "sideEffects": false,
   "exports": {
@@ -40,6 +40,9 @@
     "test:types": "tsc -p tsconfig.dts.json --noEmit --pretty false",
     "clean": "rimraf ./dist && rimraf ./types",
     "check:boundary": "node scripts/check-boundary.cjs",
+    "gen:permission-catalog": "pnpm run build:lib && node scripts/generate-permission-catalog.mjs",
+    "check:permission-catalog": "pnpm run build:lib && node scripts/generate-permission-catalog.mjs --check",
+    "pretest:unit": "pnpm run build:types",
     "test:unit": "NODE_OPTIONS='--conditions=heybox' vitest run",
     "test:watch": "NODE_OPTIONS='--conditions=heybox' vitest"
   }