@heybox/hb-sdk 0.6.3 → 0.6.4

package/README.md

@@ -57,7 +57,9 @@ SDK 需要在黑盒小程序 iframe 容器内运行。父容器会为页面注
 npm run dev
 ```
 
-调试页会通过 iframe 加载本地页面并补齐小程序 bridge 环境；浏览器 Mock 从 mock host 的同源只读 bootstrap 接口读取服务端保留的 Runtime 权限快照，URL query 不能提供或覆盖权限。项目已绑定 `heybox.miniProgramId` 时，可以点击调试页里的「在 Mac 版 APP 中启动」按钮，或在「Mobile App」区域选择局域网网卡后用手机小黑盒 APP 扫码；真机 dev shell 只携带绑定的小程序 ID 和本地页面地址，H5 宿主按 ID 从公开详情接口读取可信 Runtime 权限快照。项目未绑定时仍可使用默认拒绝受管能力的浏览器 Mock，但 Mac 和手机真机入口会明确提示先运行 `hb-sdk remote create` 或 `hb-sdk remote bind <mini-program-id>`，并保持不可用。真实容器加载开发 `mini_url` 前会提示“即将打开未经验证的开发网页。该页面可能由本机或局域网服务提供，请确认来源可信后继续。”，用户确认后才继续加载。Codex、VSCode 等内嵌浏览器可能无法唤起系统 APP；遇到这种情况时，请在系统浏览器中打开同一个调试页后重试。
+调试页会通过 iframe 加载本地页面并补齐小程序 bridge 环境。`hb-sdk dev` 的基础启动只依赖本地页面地址：即使项目未绑定、CLI 未登录或远端暂时不可用，浏览器 Mock、Mac 启动协议和手机二维码也会继续生成，真机 dev shell 以匿名本地沙箱加载 `mini_url`，不会把公开 `detail` 查询作为启动门禁。项目已绑定时会限时 3 秒读取远端 dev context；成功后 Mock Host 用真实 Runtime 权限快照初始化本地模拟，失败或超时则显示脱敏警告，并默认拒绝 `network.request` 等受管能力。需要定位降级原因时可使用 `hb-sdk dev --verbose`；详细错误只写入本地调试日志，其中 URL 用户名、密码和敏感 query/hash 会被遮蔽，不会进入 LAN bootstrap。
+
+Mock Host 可以在内存中切换 devtools-only 的 `network.request` 权限，不会重建 iframe，因此不影响 Vite HMR；官方域名权限只读取线上快照，本地设置不会修改线上权限。调试页会对比已读取的线上快照，提示本地放开但上线后会返回 `PERMISSION_DENIED` 的差异。权限快照只通过 mock host 的同源只读 bootstrap 接口传递，URL query 不能提供或覆盖权限。真实容器加载开发 `mini_url` 前会提示“即将打开未经验证的开发网页。该页面可能由本机或局域网服务提供，请确认来源可信后继续。”，用户确认后才继续加载。Codex、VSCode 等内嵌浏览器可能无法唤起系统 APP；遇到这种情况时，请在系统浏览器中打开同一个调试页后重试。
 
 在未使用脚手架的 Vite 项目中，可以把命令加到 `package.json`：
 
@@ -579,7 +581,7 @@ meta refresh、外部 anchor、`dns-prefetch`、`preconnect`、`prerender`、外
 - `HbMiniProgramSDKError`、`HbMiniProgramNetworkError`
 - 各模块公开类型，例如 `MiniProgramNetworkRequestConfig`、`MiniProgramNetworkResponse`、`MiniProgramUserInfoResult`
 
-协议常量、消息类型、能力目录、payload/result 映射和守卫只通过 `@heybox/hb-sdk/protocol` 子入口导出。iframe 小程序业务代码不应构造 raw bridge message，也不应直接处理 nonce 或 `postMessage` 信封；宿主运行时等非业务页面代码使用 `@heybox/hb-sdk/protocol`。
+协议常量、消息类型、能力目录、payload/result 映射、守卫和 Runtime 权限快照解析器只通过 `@heybox/hb-sdk/protocol` 子入口导出。`parseMiniProgramRuntimePermissions` 是正式 Runtime 与 Mock Host 共用的 fail-closed 解析 owner；`@heybox/hb-sdk-runtime` 保留同名兼容导出。iframe 小程序业务代码不应构造 raw bridge message、解析宿主权限快照，也不应直接处理 nonce 或 `postMessage` 信封；宿主运行时等非业务页面代码使用 `@heybox/hb-sdk/protocol`。
 
 构建时插件 `miniappManifest` 通过 `@heybox/hb-sdk/vite` 子入口导出，仅供 `vite.config.ts` 使用，不应在小程序业务代码里 import。
 

package/dist/cli-chunks/{context-Bu0Zusj_.cjs → context-BEgbP7mM.cjs}

@@ -1,6 +1,6 @@
 'use strict';
 
-var session = require('./session-vlPGi1Z8.cjs');
+var session = require('./session-D7nmqMiy.cjs');
 var fs$1 = require('node:fs');
 var fs = require('node:fs/promises');
 var path = require('node:path');

package/dist/cli-chunks/{create-CgAGcRtZ.cjs → create-BHsWWo3V.cjs}

@@ -5,7 +5,7 @@ var fs = require('node:fs/promises');
 var path = require('node:path');
 var require$$0 = require('fs');
 var require$$1 = require('path');
-var index = require('./index--P321c8v.cjs');
+var index = require('./index-B0zGksOA.cjs');
 require('node:module');
 require('os');
 require('readline');

package/dist/cli-chunks/{dev-g35-QcIa.cjs → dev-CSjs2OYB.cjs}

@@ -9,8 +9,8 @@ var node_url = require('node:url');
 var net = require('node:net');
 var node_http = require('node:http');
 var browser = require('./browser-RAy8e8cV.cjs');
-var index = require('./index--P321c8v.cjs');
-var context = require('./context-Bu0Zusj_.cjs');
+var index = require('./index-B0zGksOA.cjs');
+var context = require('./context-BEgbP7mM.cjs');
 require('node:process');
 require('node:buffer');
 require('node:util');
@@ -24,7 +24,7 @@ require('events');
 require('stream');
 require('buffer');
 require('util');
-require('./session-vlPGi1Z8.cjs');
+require('./session-D7nmqMiy.cjs');
 require('node:crypto');
 require('fs');
 require('constants');
@@ -223,6 +223,7 @@ async function startMiniProgramMockHostServer(options) {
     assertCompleteMiniProgramMockHostRoot(root);
     const bootstrapJson = serializeMockHostBootstrap({
         defaultLanAddressId: options.defaultLanAddressId,
+        devContext: options.devContext,
         lanAddresses: options.lanAddresses ?? [],
         macAppProtocol: options.macAppProtocol,
         nativeAppLaunchUnavailableReason: options.nativeAppLaunchUnavailableReason,
@@ -669,12 +670,14 @@ function createHeyboxProtocol(payload) {
 /** 构建时替换为当前发布包的实际版本。 */
 const HB_SDK_VERSION = typeof undefined === 'string'
     ? undefined
-    : '0.6.3';
+    : '0.6.4';
 
 const DEFAULT_APP_PORT = 5173;
 const DEFAULT_MOCK_PORT = 5174;
+const DEFAULT_DEV_CONTEXT_TIMEOUT_MS = 3000;
 const DEV_LISTEN_HOST = '0.0.0.0';
 const LOCAL_DEV_URL_HOST = '127.0.0.1';
+const DEV_CONTEXT_UNAVAILABLE_WARNING = '远端 dev context 不可用，已继续匿名调试。';
 // Shared with Heybox H5 Vite plugins so hb-sdk can own the launch output.
 const MANAGED_DEV_OUTPUT_ENV = 'HEYBOX_DEV_SERVER_MANAGED_OUTPUT';
 const VITE_LOG_LEVEL = 'warn';
@@ -701,6 +704,7 @@ async function runDevCommand(options, runtime = {}) {
         fetchImpl,
         logger,
         projectRoot,
+        timeoutMs: runtime.devContextTimeoutMs ?? DEFAULT_DEV_CONTEXT_TIMEOUT_MS,
     });
     const vite = await logger.task('正在加载项目 Vite', () => loadProjectVite(projectRoot), { successText: '已加载项目 Vite' });
     const appServer = await logger.task('正在创建 Vite dev server', () => withManagedDevOutputEnv(() => vite.createServer(createViteServerOptions(projectRoot, resolvedOptions)), runtime.env), { successText: '已创建 Vite dev server' });
@@ -724,18 +728,16 @@ async function runDevCommand(options, runtime = {}) {
     try {
         mockHost = await logger.task('正在启动 Mock runtime host', () => startMiniProgramMockHostServer({
             appUrl,
+            devContext: devLaunchContext,
             fetchImpl,
             getPort: getPortImpl,
             defaultLanAddressId: lanAddresses[0]?.id,
             lanAddresses,
-            macAppProtocol: devLaunchContext.miniProgramId
-                ? createMacAppProtocol(appUrl, {
-                    miniProgramId: devLaunchContext.miniProgramId,
-                    runtimeUrl: options.runtimeUrl,
-                    sdkVersion: HB_SDK_VERSION,
-                })
-                : undefined,
-            nativeAppLaunchUnavailableReason: devLaunchContext.nativeAppLaunchUnavailableReason,
+            macAppProtocol: createMacAppProtocol(appUrl, {
+                miniProgramId: devLaunchContext.miniProgramId,
+                runtimeUrl: options.runtimeUrl,
+                sdkVersion: HB_SDK_VERSION,
+            }),
             port: options.mockPort ?? DEFAULT_MOCK_PORT,
             root: runtime.mockHostRoot,
             rootCandidates: runtime.mockHostRootCandidates,
@@ -750,12 +752,10 @@ async function runDevCommand(options, runtime = {}) {
     logger.success('Mock runtime host 已就绪');
     logger.info(`Mock runtime host: ${mockHost.url}`);
     logger.info(`Mini program URL: ${appUrl}`);
-    if (devLaunchContext.miniProgramId) {
-        logger.info('Mac APP: use the button in Mock runtime host');
-        logger.info('Mobile APP: scan the QR code in Mock runtime host');
-    }
-    else {
-        logger.warn(`Mac/Mobile APP 真机调试不可用：${devLaunchContext.nativeAppLaunchUnavailableReason}`);
+    logger.info('Mac APP: use the button in Mock runtime host');
+    logger.info('Mobile APP: scan the QR code in Mock runtime host');
+    if (devLaunchContext.source === 'anonymous') {
+        logger.warn('当前使用匿名本地沙箱；真机调试可用，但不会携带远端小程序身份或权限。');
     }
     if (options.open !== false) {
         logger.debug('正在打开浏览器调试页');
@@ -766,40 +766,61 @@ async function runDevCommand(options, runtime = {}) {
 async function loadDevLaunchContext(options) {
     const miniProgramId = await context.readBoundMiniProgramId(options.projectRoot);
     if (!miniProgramId) {
-        const nativeAppLaunchUnavailableReason = '当前项目未绑定小程序。请先运行 hb-sdk remote create 或 hb-sdk remote bind <mini-program-id>。';
-        options.logger.warn(`未读取到远端 Runtime 权限，Mock runtime 将默认拒绝受管能力：${nativeAppLaunchUnavailableReason}`);
-        return { nativeAppLaunchUnavailableReason };
+        const anonymousReason = '当前项目未绑定小程序。请先运行 hb-sdk remote create 或 hb-sdk remote bind <mini-program-id>。';
+        options.logger.warn(`未读取到远端 Runtime 权限，Mock runtime 将默认拒绝受管能力：${anonymousReason}`);
+        return {
+            source: 'anonymous',
+            warning: anonymousReason,
+        };
     }
     try {
-        const { detail, miniProgramId: verifiedMiniProgramId } = await options.logger.task('正在读取远端小程序权限', () => context.getBoundMiniProgram({
-            cwd: options.projectRoot,
-            env: options.env,
+        const { detail, miniProgramId: verifiedMiniProgramId } = await options.logger.task('正在读取远端小程序权限', () => loadRemoteDevContextWithTimeout({
             fetchImpl: options.fetchImpl,
+            load: (fetchImpl) => context.getBoundMiniProgram({
+                cwd: options.projectRoot,
+                env: options.env,
+                fetchImpl,
+            }),
+            timeoutMs: options.timeoutMs,
         }), { successText: '已读取远端小程序权限' });
-        return { miniProgramId: verifiedMiniProgramId, runtimePermissions: detail.runtime_permissions };
+        return {
+            source: 'remote',
+            miniProgramId: verifiedMiniProgramId,
+            runtimePermissions: detail.runtime_permissions,
+        };
     }
     catch (error) {
-        if (!canFallbackToDefaultRuntimePermissions(error)) {
+        if (error instanceof context.MiniProgramProjectBindingError && error.code !== 'MINI_PROGRAM_UNBOUND') {
             throw error;
         }
-        options.logger.warn(`未读取到远端 Runtime 权限，Mock runtime 将默认拒绝受管能力：${index.readErrorMessage(error)}`);
+        options.logger.debug(`远端 dev context 失败详情：${index.readRedactedErrorMessage(error, { verbose: true })}`);
+        options.logger.warn(`未读取到远端 Runtime 权限，Mock runtime 将默认拒绝受管能力：${DEV_CONTEXT_UNAVAILABLE_WARNING}`);
         return {
-            nativeAppLaunchUnavailableReason: '当前绑定尚未通过开发者权限验证。请先运行 hb-sdk login，并确认网络可用后重试。',
+            source: 'anonymous',
+            warning: DEV_CONTEXT_UNAVAILABLE_WARNING,
         };
     }
 }
-function canFallbackToDefaultRuntimePermissions(error) {
-    if (error instanceof context.MiniProgramProjectBindingError) {
-        return error.code === 'MINI_PROGRAM_UNBOUND';
-    }
-    if (error instanceof TypeError && error.message === 'fetch failed') {
-        return true;
+async function loadRemoteDevContextWithTimeout(options) {
+    const controller = new AbortController();
+    const fetchImpl = ((input, init) => options.fetchImpl(input, { ...init, signal: controller.signal }));
+    let timeout;
+    try {
+        return await Promise.race([
+            options.load(fetchImpl),
+            new Promise((_resolve, reject) => {
+                timeout = setTimeout(() => {
+                    controller.abort();
+                    reject(new Error('dev context timeout'));
+                }, Math.max(1, options.timeoutMs));
+            }),
+        ]);
     }
-    if (error instanceof index.CliError) {
-        return (error.httpStatus === 429 ||
-            (error.httpStatus !== undefined && error.httpStatus >= 500 && error.httpStatus < 600));
+    finally {
+        if (timeout) {
+            clearTimeout(timeout);
+        }
     }
-    return error instanceof Error && 'code' in error && error.code === 'AUTH_SESSION_MISSING';
 }
 function findProjectRoot(startDir) {
     let current = path.resolve(startDir);
@@ -984,12 +1005,7 @@ async function closeAll(closers) {
     await Promise.allSettled(closers.map((close) => close()));
 }
 function createLanAddressCandidates(options) {
-    if (!options.miniProgramId) {
-        return [];
-    }
-    const viteNetworkUrlByHost = new Map(options.viteNetworkUrls
-        .map((url) => [readUrlHost(url), url])
-        .filter((entry) => Boolean(entry[0])));
+    const viteNetworkUrlByHost = new Map(options.viteNetworkUrls.map((url) => [readUrlHost(url), url]).filter((entry) => Boolean(entry[0])));
     const candidates = createLanInterfaceCandidates(options.interfaces)
         .filter(({ address }) => address === options.hmrHost)
         .map(({ address, id, name }) => {
@@ -1100,9 +1116,7 @@ function isPrivateIPv4(address) {
     if (parts.length !== 4 || parts.some((part) => !Number.isInteger(part) || part < 0 || part > 255)) {
         return false;
     }
-    return (parts[0] === 10 ||
-        (parts[0] === 172 && parts[1] >= 16 && parts[1] <= 31) ||
-        (parts[0] === 192 && parts[1] === 168));
+    return parts[0] === 10 || (parts[0] === 172 && parts[1] >= 16 && parts[1] <= 31) || (parts[0] === 192 && parts[1] === 168);
 }
 
 exports.runDevCommand = runDevCommand;

package/dist/cli-chunks/{doctor-klsQg82G.cjs → doctor-B3AOQgyN.cjs}

@@ -4,7 +4,7 @@ var fs$1 = require('node:fs');
 var fs = require('node:fs/promises');
 var os = require('node:os');
 var path = require('node:path');
-var index = require('./index--P321c8v.cjs');
+var index = require('./index-B0zGksOA.cjs');
 require('node:module');
 require('path');
 require('os');

package/dist/cli-chunks/{index--P321c8v.cjs → index-B0zGksOA.cjs}

@@ -234,19 +234,19 @@ function requireArgument () {
 
 var command = {};
 
-const require$5 = node_module.createRequire((typeof document === 'undefined' ? require('u' + 'rl').pathToFileURL(__filename).href : (_documentCurrentScript && _documentCurrentScript.tagName.toUpperCase() === 'SCRIPT' && _documentCurrentScript.src || new URL('cli-chunks/index--P321c8v.cjs', document.baseURI).href)));
+const require$5 = node_module.createRequire((typeof document === 'undefined' ? require('u' + 'rl').pathToFileURL(__filename).href : (_documentCurrentScript && _documentCurrentScript.tagName.toUpperCase() === 'SCRIPT' && _documentCurrentScript.src || new URL('cli-chunks/index-B0zGksOA.cjs', document.baseURI).href)));
 function __require$4() { return require$5("node:events"); }
 
-const require$4 = node_module.createRequire((typeof document === 'undefined' ? require('u' + 'rl').pathToFileURL(__filename).href : (_documentCurrentScript && _documentCurrentScript.tagName.toUpperCase() === 'SCRIPT' && _documentCurrentScript.src || new URL('cli-chunks/index--P321c8v.cjs', document.baseURI).href)));
+const require$4 = node_module.createRequire((typeof document === 'undefined' ? require('u' + 'rl').pathToFileURL(__filename).href : (_documentCurrentScript && _documentCurrentScript.tagName.toUpperCase() === 'SCRIPT' && _documentCurrentScript.src || new URL('cli-chunks/index-B0zGksOA.cjs', document.baseURI).href)));
 function __require$3() { return require$4("node:child_process"); }
 
-const require$3 = node_module.createRequire((typeof document === 'undefined' ? require('u' + 'rl').pathToFileURL(__filename).href : (_documentCurrentScript && _documentCurrentScript.tagName.toUpperCase() === 'SCRIPT' && _documentCurrentScript.src || new URL('cli-chunks/index--P321c8v.cjs', document.baseURI).href)));
+const require$3 = node_module.createRequire((typeof document === 'undefined' ? require('u' + 'rl').pathToFileURL(__filename).href : (_documentCurrentScript && _documentCurrentScript.tagName.toUpperCase() === 'SCRIPT' && _documentCurrentScript.src || new URL('cli-chunks/index-B0zGksOA.cjs', document.baseURI).href)));
 function __require$2() { return require$3("node:path"); }
 
-const require$2 = node_module.createRequire((typeof document === 'undefined' ? require('u' + 'rl').pathToFileURL(__filename).href : (_documentCurrentScript && _documentCurrentScript.tagName.toUpperCase() === 'SCRIPT' && _documentCurrentScript.src || new URL('cli-chunks/index--P321c8v.cjs', document.baseURI).href)));
+const require$2 = node_module.createRequire((typeof document === 'undefined' ? require('u' + 'rl').pathToFileURL(__filename).href : (_documentCurrentScript && _documentCurrentScript.tagName.toUpperCase() === 'SCRIPT' && _documentCurrentScript.src || new URL('cli-chunks/index-B0zGksOA.cjs', document.baseURI).href)));
 function __require$1() { return require$2("node:fs"); }
 
-const require$1 = node_module.createRequire((typeof document === 'undefined' ? require('u' + 'rl').pathToFileURL(__filename).href : (_documentCurrentScript && _documentCurrentScript.tagName.toUpperCase() === 'SCRIPT' && _documentCurrentScript.src || new URL('cli-chunks/index--P321c8v.cjs', document.baseURI).href)));
+const require$1 = node_module.createRequire((typeof document === 'undefined' ? require('u' + 'rl').pathToFileURL(__filename).href : (_documentCurrentScript && _documentCurrentScript.tagName.toUpperCase() === 'SCRIPT' && _documentCurrentScript.src || new URL('cli-chunks/index-B0zGksOA.cjs', document.baseURI).href)));
 function __require() { return require$1("node:process"); }
 
 var help = {};
@@ -13094,6 +13094,30 @@ function readErrorMessage(error, options = {}) {
     }
     return String(error);
 }
+function readRedactedErrorMessage(error, options = {}) {
+    return redactSensitiveUrls(readErrorMessage(error, options));
+}
+function redactSensitiveUrls(message) {
+    return message.replace(/https?:\/\/[^\s<>"'`]+/gi, (rawUrl) => {
+        try {
+            const url = new URL(rawUrl);
+            url.username = '';
+            url.password = '';
+            for (const key of url.searchParams.keys()) {
+                if (/(?:authorization|cookie|password|passwd|pkey|secret|session|token)/i.test(key)) {
+                    url.searchParams.set(key, '[REDACTED]');
+                }
+            }
+            if (url.hash) {
+                url.hash = '#[REDACTED]';
+            }
+            return url.toString();
+        }
+        catch {
+            return '[REDACTED_URL]';
+        }
+    });
+}
 
 /**
  * 极简 .env 文件解析器。
@@ -13323,7 +13347,7 @@ function getPathname(pathWithQuery) {
 }
 
 const CLI_VERSION_PLACEHOLDER = ['__HB', 'SDK', 'CLI', 'VERSION__'].join('_');
-const BUILT_CLI_VERSION = '0.6.3';
+const BUILT_CLI_VERSION = '0.6.4';
 const PACKAGE_JSON_CANDIDATES = [
     path.resolve(__dirname, '..', '..', 'package.json'),
     path.resolve(__dirname, '..', 'package.json'),
@@ -13644,31 +13668,31 @@ function createCommandLoggerResolver(options) {
     };
 }
 const defaultClearLoginStatus = async (...args) => {
-    const { clearLoginStatus } = await Promise.resolve().then(function () { return require('./login-DEoReXOe.cjs'); });
+    const { clearLoginStatus } = await Promise.resolve().then(function () { return require('./login-ClQuL2r6.cjs'); });
     return clearLoginStatus(...args);
 };
 const defaultLoginToHeybox = async (...args) => {
-    const { loginToHeybox } = await Promise.resolve().then(function () { return require('./login-DEoReXOe.cjs'); });
+    const { loginToHeybox } = await Promise.resolve().then(function () { return require('./login-ClQuL2r6.cjs'); });
     return loginToHeybox(...args);
 };
 const defaultPrintLoginStatus = async (...args) => {
-    const { printLoginStatus } = await Promise.resolve().then(function () { return require('./login-DEoReXOe.cjs'); });
+    const { printLoginStatus } = await Promise.resolve().then(function () { return require('./login-ClQuL2r6.cjs'); });
     return printLoginStatus(...args);
 };
 const defaultRunCreateCommand = async (...args) => {
-    const { runCreateCommand } = await Promise.resolve().then(function () { return require('./create-CgAGcRtZ.cjs'); });
+    const { runCreateCommand } = await Promise.resolve().then(function () { return require('./create-BHsWWo3V.cjs'); });
     return runCreateCommand(...args);
 };
 const defaultRunDevCommand = async (...args) => {
-    const { runDevCommand } = await Promise.resolve().then(function () { return require('./dev-g35-QcIa.cjs'); });
+    const { runDevCommand } = await Promise.resolve().then(function () { return require('./dev-CSjs2OYB.cjs'); });
     return runDevCommand(...args);
 };
 const defaultRunDoctorCommand = async (...args) => {
-    const { runDoctorCommand } = await Promise.resolve().then(function () { return require('./doctor-klsQg82G.cjs'); });
+    const { runDoctorCommand } = await Promise.resolve().then(function () { return require('./doctor-B3AOQgyN.cjs'); });
     return runDoctorCommand(...args);
 };
 const defaultRunRemoteCommand = async (...args) => {
-    const { runRemoteCommand } = await Promise.resolve().then(function () { return require('./remote-CZ-G3RSH.cjs'); });
+    const { runRemoteCommand } = await Promise.resolve().then(function () { return require('./remote-ib5THDbw.cjs'); });
     return runRemoteCommand(...args);
 };
 function resolveStandaloneLogger(options, verbose) {
@@ -13773,6 +13797,7 @@ exports.createCliProgram = createCliProgram;
 exports.envPaths = envPaths;
 exports.getDefaultExportFromCjs = getDefaultExportFromCjs;
 exports.readErrorMessage = readErrorMessage;
+exports.readRedactedErrorMessage = readRedactedErrorMessage;
 exports.requireEnvPaths = requireEnvPaths;
 exports.requireOnetime = requireOnetime;
 exports.requireSafeBuffer = requireSafeBuffer;

package/dist/cli-chunks/{index-CbsbCgtf.cjs → index-BGFf6g7V.cjs}

@@ -1,13 +1,13 @@
 'use strict';
 
-var index$2 = require('./index--P321c8v.cjs');
+var index$2 = require('./index-B0zGksOA.cjs');
 var require$$0$2 = require('fs');
 var require$$2$1 = require('crypto');
 var require$$1$2 = require('path');
 var require$$0$3 = require('assert');
 var require$$4$2 = require('events');
 var require$$1$1 = require('util');
-var context$1 = require('./context-Bu0Zusj_.cjs');
+var context$1 = require('./context-BEgbP7mM.cjs');
 var require$$0$5 = require('net');
 var require$$0$4 = require('url');
 var require$$2$2 = require('http');

package/dist/cli-chunks/{login-DEoReXOe.cjs → login-ClQuL2r6.cjs}

@@ -3,9 +3,9 @@
 var promises = require('node:readline/promises');
 var node_crypto = require('node:crypto');
 var node_http = require('node:http');
-var session = require('./session-vlPGi1Z8.cjs');
+var session = require('./session-D7nmqMiy.cjs');
 var browser = require('./browser-RAy8e8cV.cjs');
-var index = require('./index--P321c8v.cjs');
+var index = require('./index-B0zGksOA.cjs');
 require('node:path');
 require('fs');
 require('constants');

package/dist/cli-chunks/{remote-CZ-G3RSH.cjs → remote-ib5THDbw.cjs}

@@ -1,13 +1,13 @@
 'use strict';
 
 var promises = require('node:readline/promises');
-var index = require('./index--P321c8v.cjs');
-var session = require('./session-vlPGi1Z8.cjs');
+var index = require('./index-B0zGksOA.cjs');
+var session = require('./session-D7nmqMiy.cjs');
 var childProcess = require('node:child_process');
 var fs = require('node:fs');
 var fs$1 = require('node:fs/promises');
 var path = require('node:path');
-var context = require('./context-Bu0Zusj_.cjs');
+var context = require('./context-BEgbP7mM.cjs');
 require('node:module');
 require('path');
 require('os');
@@ -264,7 +264,7 @@ async function createDefaultCosClient(uploadToken) {
     };
 }
 async function loadCosConstructor() {
-    const cosModule = await Promise.resolve().then(function () { return require('./index-CbsbCgtf.cjs'); }).then(function (n) { return n.index; });
+    const cosModule = await Promise.resolve().then(function () { return require('./index-BGFf6g7V.cjs'); }).then(function (n) { return n.index; });
     return cosModule.default;
 }
 function formatSize(bytes) {

package/dist/cli-chunks/{session-vlPGi1Z8.cjs → session-D7nmqMiy.cjs}

@@ -1,6 +1,6 @@
 'use strict';
 
-var index = require('./index--P321c8v.cjs');
+var index = require('./index-B0zGksOA.cjs');
 var node_crypto = require('node:crypto');
 var path = require('node:path');
 var require$$0$2 = require('fs');

package/dist/cli.cjs

@@ -1,6 +1,6 @@
 'use strict';
 
-var index = require('./cli-chunks/index--P321c8v.cjs');
+var index = require('./cli-chunks/index-B0zGksOA.cjs');
 require('node:module');
 require('node:fs');
 require('node:fs/promises');

package/dist/devtools/mock-host/index.html

@@ -20,7 +20,8 @@
       }
 
       button,
-      input {
+      input,
+      select {
         font: inherit;
       }
 
@@ -190,6 +191,23 @@
         background: #fff;
       }
 
+      .release-diagnostics {
+        display: grid;
+        gap: 6px;
+        margin: 10px 0 0;
+        padding: 0;
+        list-style: none;
+      }
+
+      .release-diagnostics li {
+        border-left: 3px solid #d97706;
+        padding: 7px 8px;
+        color: #92400e;
+        background: #fffbeb;
+        font-size: 12px;
+        line-height: 1.5;
+      }
+
       .mobile-qr {
         display: grid;
         justify-items: center;
@@ -353,6 +371,22 @@
           <strong id="mini-url"></strong>
         </section>
 
+        <section class="block">
+          <span>Dev Context</span>
+          <strong id="dev-context-status"></strong>
+          <label class="field" style="margin-top: 10px">
+            <span>network.request</span>
+            <select id="network-permission-select">
+              <option value="disabled">拒绝</option>
+              <option value="enabled">允许</option>
+            </select>
+          </label>
+          <div class="actions" style="margin-top: 10px">
+            <button id="reset-permissions-button" type="button">恢复初始权限</button>
+          </div>
+          <ul class="release-diagnostics" id="release-diagnostics"></ul>
+        </section>
+
         <section class="csp-violations" id="csp-violations" hidden>
           <strong>网络或资源请求已被 CSP 阻止</strong>
         </section>