@heybox/hb-sdk 0.6.4-alpha.0 → 0.6.4

package/README.md

@@ -57,9 +57,9 @@ SDK 需要在黑盒小程序 iframe 容器内运行。父容器会为页面注
 npm run dev
 ```
 
-调试页会通过 iframe 加载本地页面并补齐小程序 bridge 环境。`hb-sdk dev` 的基础启动只依赖本地页面地址：即使项目未绑定、CLI 未登录或远端暂时不可用，浏览器 Mock、Mac 启动协议和手机二维码也会继续生成，真机 dev shell 以匿名本地沙箱加载 `mini_url`，不会把公开 `detail` 查询作为启动门禁。项目已绑定时会限时 3 秒读取远端 dev context；成功后 Mock Host 用真实 Runtime 权限快照初始化本地模拟，失败或超时则显示脱敏警告，并默认拒绝 `network.request` 等受管能力。
+调试页会通过 iframe 加载本地页面并补齐小程序 bridge 环境。`hb-sdk dev` 的基础启动只依赖本地页面地址：即使项目未绑定、CLI 未登录或远端暂时不可用，浏览器 Mock、Mac 启动协议和手机二维码也会继续生成，真机 dev shell 以匿名本地沙箱加载 `mini_url`，不会把公开 `detail` 查询作为启动门禁。项目已绑定时会限时 3 秒读取远端 dev context；成功后 Mock Host 用真实 Runtime 权限快照初始化本地模拟，失败或超时则显示脱敏警告，并默认拒绝 `network.request` 等受管能力。需要定位降级原因时可使用 `hb-sdk dev --verbose`；详细错误只写入本地调试日志，其中 URL 用户名、密码和敏感 query/hash 会被遮蔽，不会进入 LAN bootstrap。
 
-Mock Host 可以在内存中调整 devtools-only 权限模拟，不会重建 iframe，因此不影响 Vite HMR；本地设置不会修改线上权限。调试页会对比已读取的线上快照，提示本地放开但上线后会返回 `PERMISSION_DENIED` 的差异。权限快照只通过 mock host 的同源只读 bootstrap 接口传递，URL query 不能提供或覆盖权限。真实容器加载开发 `mini_url` 前会提示“即将打开未经验证的开发网页。该页面可能由本机或局域网服务提供，请确认来源可信后继续。”，用户确认后才继续加载。Codex、VSCode 等内嵌浏览器可能无法唤起系统 APP；遇到这种情况时，请在系统浏览器中打开同一个调试页后重试。
+Mock Host 可以在内存中切换 devtools-only 的 `network.request` 权限，不会重建 iframe，因此不影响 Vite HMR；官方域名权限只读取线上快照，本地设置不会修改线上权限。调试页会对比已读取的线上快照，提示本地放开但上线后会返回 `PERMISSION_DENIED` 的差异。权限快照只通过 mock host 的同源只读 bootstrap 接口传递，URL query 不能提供或覆盖权限。真实容器加载开发 `mini_url` 前会提示“即将打开未经验证的开发网页。该页面可能由本机或局域网服务提供，请确认来源可信后继续。”，用户确认后才继续加载。Codex、VSCode 等内嵌浏览器可能无法唤起系统 APP；遇到这种情况时，请在系统浏览器中打开同一个调试页后重试。
 
 在未使用脚手架的 Vite 项目中，可以把命令加到 `package.json`：
 
@@ -581,7 +581,7 @@ meta refresh、外部 anchor、`dns-prefetch`、`preconnect`、`prerender`、外
 - `HbMiniProgramSDKError`、`HbMiniProgramNetworkError`
 - 各模块公开类型，例如 `MiniProgramNetworkRequestConfig`、`MiniProgramNetworkResponse`、`MiniProgramUserInfoResult`
 
-协议常量、消息类型、能力目录、payload/result 映射和守卫只通过 `@heybox/hb-sdk/protocol` 子入口导出。iframe 小程序业务代码不应构造 raw bridge message，也不应直接处理 nonce 或 `postMessage` 信封；宿主运行时等非业务页面代码使用 `@heybox/hb-sdk/protocol`。
+协议常量、消息类型、能力目录、payload/result 映射、守卫和 Runtime 权限快照解析器只通过 `@heybox/hb-sdk/protocol` 子入口导出。`parseMiniProgramRuntimePermissions` 是正式 Runtime 与 Mock Host 共用的 fail-closed 解析 owner；`@heybox/hb-sdk-runtime` 保留同名兼容导出。iframe 小程序业务代码不应构造 raw bridge message、解析宿主权限快照，也不应直接处理 nonce 或 `postMessage` 信封；宿主运行时等非业务页面代码使用 `@heybox/hb-sdk/protocol`。
 
 构建时插件 `miniappManifest` 通过 `@heybox/hb-sdk/vite` 子入口导出，仅供 `vite.config.ts` 使用，不应在小程序业务代码里 import。
 

package/dist/cli-chunks/{context-BCwksd8H.cjs → context-BEgbP7mM.cjs}

@@ -1,6 +1,6 @@
 'use strict';
 
-var session = require('./session-CC3Oz3Xc.cjs');
+var session = require('./session-D7nmqMiy.cjs');
 var fs$1 = require('node:fs');
 var fs = require('node:fs/promises');
 var path = require('node:path');

package/dist/cli-chunks/{create-BO8GHVi0.cjs → create-BHsWWo3V.cjs}

@@ -5,7 +5,7 @@ var fs = require('node:fs/promises');
 var path = require('node:path');
 var require$$0 = require('fs');
 var require$$1 = require('path');
-var index = require('./index-Q0G1SsEs.cjs');
+var index = require('./index-B0zGksOA.cjs');
 require('node:module');
 require('os');
 require('readline');

package/dist/cli-chunks/{dev-DmgKnEC2.cjs → dev-CSjs2OYB.cjs}

@@ -9,8 +9,8 @@ var node_url = require('node:url');
 var net = require('node:net');
 var node_http = require('node:http');
 var browser = require('./browser-RAy8e8cV.cjs');
-var index = require('./index-Q0G1SsEs.cjs');
-var context = require('./context-BCwksd8H.cjs');
+var index = require('./index-B0zGksOA.cjs');
+var context = require('./context-BEgbP7mM.cjs');
 require('node:process');
 require('node:buffer');
 require('node:util');
@@ -24,7 +24,7 @@ require('events');
 require('stream');
 require('buffer');
 require('util');
-require('./session-CC3Oz3Xc.cjs');
+require('./session-D7nmqMiy.cjs');
 require('node:crypto');
 require('fs');
 require('constants');
@@ -670,7 +670,7 @@ function createHeyboxProtocol(payload) {
 /** 构建时替换为当前发布包的实际版本。 */
 const HB_SDK_VERSION = typeof undefined === 'string'
     ? undefined
-    : '0.6.4-alpha.0';
+    : '0.6.4';
 
 const DEFAULT_APP_PORT = 5173;
 const DEFAULT_MOCK_PORT = 5174;
@@ -776,7 +776,7 @@ async function loadDevLaunchContext(options) {
     try {
         const { detail, miniProgramId: verifiedMiniProgramId } = await options.logger.task('正在读取远端小程序权限', () => loadRemoteDevContextWithTimeout({
             fetchImpl: options.fetchImpl,
-            load: fetchImpl => context.getBoundMiniProgram({
+            load: (fetchImpl) => context.getBoundMiniProgram({
                 cwd: options.projectRoot,
                 env: options.env,
                 fetchImpl,
@@ -790,10 +790,10 @@ async function loadDevLaunchContext(options) {
         };
     }
     catch (error) {
-        if (error instanceof context.MiniProgramProjectBindingError &&
-            error.code !== 'MINI_PROGRAM_UNBOUND') {
+        if (error instanceof context.MiniProgramProjectBindingError && error.code !== 'MINI_PROGRAM_UNBOUND') {
             throw error;
         }
+        options.logger.debug(`远端 dev context 失败详情：${index.readRedactedErrorMessage(error, { verbose: true })}`);
         options.logger.warn(`未读取到远端 Runtime 权限，Mock runtime 将默认拒绝受管能力：${DEV_CONTEXT_UNAVAILABLE_WARNING}`);
         return {
             source: 'anonymous',
@@ -1005,9 +1005,7 @@ async function closeAll(closers) {
     await Promise.allSettled(closers.map((close) => close()));
 }
 function createLanAddressCandidates(options) {
-    const viteNetworkUrlByHost = new Map(options.viteNetworkUrls
-        .map((url) => [readUrlHost(url), url])
-        .filter((entry) => Boolean(entry[0])));
+    const viteNetworkUrlByHost = new Map(options.viteNetworkUrls.map((url) => [readUrlHost(url), url]).filter((entry) => Boolean(entry[0])));
     const candidates = createLanInterfaceCandidates(options.interfaces)
         .filter(({ address }) => address === options.hmrHost)
         .map(({ address, id, name }) => {
@@ -1118,9 +1116,7 @@ function isPrivateIPv4(address) {
     if (parts.length !== 4 || parts.some((part) => !Number.isInteger(part) || part < 0 || part > 255)) {
         return false;
     }
-    return (parts[0] === 10 ||
-        (parts[0] === 172 && parts[1] >= 16 && parts[1] <= 31) ||
-        (parts[0] === 192 && parts[1] === 168));
+    return parts[0] === 10 || (parts[0] === 172 && parts[1] >= 16 && parts[1] <= 31) || (parts[0] === 192 && parts[1] === 168);
 }
 
 exports.runDevCommand = runDevCommand;

package/dist/cli-chunks/{doctor-BlKB4f78.cjs → doctor-B3AOQgyN.cjs}

@@ -4,7 +4,7 @@ var fs$1 = require('node:fs');
 var fs = require('node:fs/promises');
 var os = require('node:os');
 var path = require('node:path');
-var index = require('./index-Q0G1SsEs.cjs');
+var index = require('./index-B0zGksOA.cjs');
 require('node:module');
 require('path');
 require('os');

package/dist/cli-chunks/{index-Q0G1SsEs.cjs → index-B0zGksOA.cjs}

@@ -234,19 +234,19 @@ function requireArgument () {
 
 var command = {};
 
-const require$5 = node_module.createRequire((typeof document === 'undefined' ? require('u' + 'rl').pathToFileURL(__filename).href : (_documentCurrentScript && _documentCurrentScript.tagName.toUpperCase() === 'SCRIPT' && _documentCurrentScript.src || new URL('cli-chunks/index-Q0G1SsEs.cjs', document.baseURI).href)));
+const require$5 = node_module.createRequire((typeof document === 'undefined' ? require('u' + 'rl').pathToFileURL(__filename).href : (_documentCurrentScript && _documentCurrentScript.tagName.toUpperCase() === 'SCRIPT' && _documentCurrentScript.src || new URL('cli-chunks/index-B0zGksOA.cjs', document.baseURI).href)));
 function __require$4() { return require$5("node:events"); }
 
-const require$4 = node_module.createRequire((typeof document === 'undefined' ? require('u' + 'rl').pathToFileURL(__filename).href : (_documentCurrentScript && _documentCurrentScript.tagName.toUpperCase() === 'SCRIPT' && _documentCurrentScript.src || new URL('cli-chunks/index-Q0G1SsEs.cjs', document.baseURI).href)));
+const require$4 = node_module.createRequire((typeof document === 'undefined' ? require('u' + 'rl').pathToFileURL(__filename).href : (_documentCurrentScript && _documentCurrentScript.tagName.toUpperCase() === 'SCRIPT' && _documentCurrentScript.src || new URL('cli-chunks/index-B0zGksOA.cjs', document.baseURI).href)));
 function __require$3() { return require$4("node:child_process"); }
 
-const require$3 = node_module.createRequire((typeof document === 'undefined' ? require('u' + 'rl').pathToFileURL(__filename).href : (_documentCurrentScript && _documentCurrentScript.tagName.toUpperCase() === 'SCRIPT' && _documentCurrentScript.src || new URL('cli-chunks/index-Q0G1SsEs.cjs', document.baseURI).href)));
+const require$3 = node_module.createRequire((typeof document === 'undefined' ? require('u' + 'rl').pathToFileURL(__filename).href : (_documentCurrentScript && _documentCurrentScript.tagName.toUpperCase() === 'SCRIPT' && _documentCurrentScript.src || new URL('cli-chunks/index-B0zGksOA.cjs', document.baseURI).href)));
 function __require$2() { return require$3("node:path"); }
 
-const require$2 = node_module.createRequire((typeof document === 'undefined' ? require('u' + 'rl').pathToFileURL(__filename).href : (_documentCurrentScript && _documentCurrentScript.tagName.toUpperCase() === 'SCRIPT' && _documentCurrentScript.src || new URL('cli-chunks/index-Q0G1SsEs.cjs', document.baseURI).href)));
+const require$2 = node_module.createRequire((typeof document === 'undefined' ? require('u' + 'rl').pathToFileURL(__filename).href : (_documentCurrentScript && _documentCurrentScript.tagName.toUpperCase() === 'SCRIPT' && _documentCurrentScript.src || new URL('cli-chunks/index-B0zGksOA.cjs', document.baseURI).href)));
 function __require$1() { return require$2("node:fs"); }
 
-const require$1 = node_module.createRequire((typeof document === 'undefined' ? require('u' + 'rl').pathToFileURL(__filename).href : (_documentCurrentScript && _documentCurrentScript.tagName.toUpperCase() === 'SCRIPT' && _documentCurrentScript.src || new URL('cli-chunks/index-Q0G1SsEs.cjs', document.baseURI).href)));
+const require$1 = node_module.createRequire((typeof document === 'undefined' ? require('u' + 'rl').pathToFileURL(__filename).href : (_documentCurrentScript && _documentCurrentScript.tagName.toUpperCase() === 'SCRIPT' && _documentCurrentScript.src || new URL('cli-chunks/index-B0zGksOA.cjs', document.baseURI).href)));
 function __require() { return require$1("node:process"); }
 
 var help = {};
@@ -13094,6 +13094,30 @@ function readErrorMessage(error, options = {}) {
     }
     return String(error);
 }
+function readRedactedErrorMessage(error, options = {}) {
+    return redactSensitiveUrls(readErrorMessage(error, options));
+}
+function redactSensitiveUrls(message) {
+    return message.replace(/https?:\/\/[^\s<>"'`]+/gi, (rawUrl) => {
+        try {
+            const url = new URL(rawUrl);
+            url.username = '';
+            url.password = '';
+            for (const key of url.searchParams.keys()) {
+                if (/(?:authorization|cookie|password|passwd|pkey|secret|session|token)/i.test(key)) {
+                    url.searchParams.set(key, '[REDACTED]');
+                }
+            }
+            if (url.hash) {
+                url.hash = '#[REDACTED]';
+            }
+            return url.toString();
+        }
+        catch {
+            return '[REDACTED_URL]';
+        }
+    });
+}
 
 /**
  * 极简 .env 文件解析器。
@@ -13323,7 +13347,7 @@ function getPathname(pathWithQuery) {
 }
 
 const CLI_VERSION_PLACEHOLDER = ['__HB', 'SDK', 'CLI', 'VERSION__'].join('_');
-const BUILT_CLI_VERSION = '0.6.4-alpha.0';
+const BUILT_CLI_VERSION = '0.6.4';
 const PACKAGE_JSON_CANDIDATES = [
     path.resolve(__dirname, '..', '..', 'package.json'),
     path.resolve(__dirname, '..', 'package.json'),
@@ -13644,31 +13668,31 @@ function createCommandLoggerResolver(options) {
     };
 }
 const defaultClearLoginStatus = async (...args) => {
-    const { clearLoginStatus } = await Promise.resolve().then(function () { return require('./login-Cxdo4B6Z.cjs'); });
+    const { clearLoginStatus } = await Promise.resolve().then(function () { return require('./login-ClQuL2r6.cjs'); });
     return clearLoginStatus(...args);
 };
 const defaultLoginToHeybox = async (...args) => {
-    const { loginToHeybox } = await Promise.resolve().then(function () { return require('./login-Cxdo4B6Z.cjs'); });
+    const { loginToHeybox } = await Promise.resolve().then(function () { return require('./login-ClQuL2r6.cjs'); });
     return loginToHeybox(...args);
 };
 const defaultPrintLoginStatus = async (...args) => {
-    const { printLoginStatus } = await Promise.resolve().then(function () { return require('./login-Cxdo4B6Z.cjs'); });
+    const { printLoginStatus } = await Promise.resolve().then(function () { return require('./login-ClQuL2r6.cjs'); });
     return printLoginStatus(...args);
 };
 const defaultRunCreateCommand = async (...args) => {
-    const { runCreateCommand } = await Promise.resolve().then(function () { return require('./create-BO8GHVi0.cjs'); });
+    const { runCreateCommand } = await Promise.resolve().then(function () { return require('./create-BHsWWo3V.cjs'); });
     return runCreateCommand(...args);
 };
 const defaultRunDevCommand = async (...args) => {
-    const { runDevCommand } = await Promise.resolve().then(function () { return require('./dev-DmgKnEC2.cjs'); });
+    const { runDevCommand } = await Promise.resolve().then(function () { return require('./dev-CSjs2OYB.cjs'); });
     return runDevCommand(...args);
 };
 const defaultRunDoctorCommand = async (...args) => {
-    const { runDoctorCommand } = await Promise.resolve().then(function () { return require('./doctor-BlKB4f78.cjs'); });
+    const { runDoctorCommand } = await Promise.resolve().then(function () { return require('./doctor-B3AOQgyN.cjs'); });
     return runDoctorCommand(...args);
 };
 const defaultRunRemoteCommand = async (...args) => {
-    const { runRemoteCommand } = await Promise.resolve().then(function () { return require('./remote-C1Rsb1dx.cjs'); });
+    const { runRemoteCommand } = await Promise.resolve().then(function () { return require('./remote-ib5THDbw.cjs'); });
     return runRemoteCommand(...args);
 };
 function resolveStandaloneLogger(options, verbose) {
@@ -13773,6 +13797,7 @@ exports.createCliProgram = createCliProgram;
 exports.envPaths = envPaths;
 exports.getDefaultExportFromCjs = getDefaultExportFromCjs;
 exports.readErrorMessage = readErrorMessage;
+exports.readRedactedErrorMessage = readRedactedErrorMessage;
 exports.requireEnvPaths = requireEnvPaths;
 exports.requireOnetime = requireOnetime;
 exports.requireSafeBuffer = requireSafeBuffer;

package/dist/cli-chunks/{index-PxkpQ5of.cjs → index-BGFf6g7V.cjs}

@@ -1,13 +1,13 @@
 'use strict';
 
-var index$2 = require('./index-Q0G1SsEs.cjs');
+var index$2 = require('./index-B0zGksOA.cjs');
 var require$$0$2 = require('fs');
 var require$$2$1 = require('crypto');
 var require$$1$2 = require('path');
 var require$$0$3 = require('assert');
 var require$$4$2 = require('events');
 var require$$1$1 = require('util');
-var context$1 = require('./context-BCwksd8H.cjs');
+var context$1 = require('./context-BEgbP7mM.cjs');
 var require$$0$5 = require('net');
 var require$$0$4 = require('url');
 var require$$2$2 = require('http');

package/dist/cli-chunks/{login-Cxdo4B6Z.cjs → login-ClQuL2r6.cjs}

@@ -3,9 +3,9 @@
 var promises = require('node:readline/promises');
 var node_crypto = require('node:crypto');
 var node_http = require('node:http');
-var session = require('./session-CC3Oz3Xc.cjs');
+var session = require('./session-D7nmqMiy.cjs');
 var browser = require('./browser-RAy8e8cV.cjs');
-var index = require('./index-Q0G1SsEs.cjs');
+var index = require('./index-B0zGksOA.cjs');
 require('node:path');
 require('fs');
 require('constants');

package/dist/cli-chunks/{remote-C1Rsb1dx.cjs → remote-ib5THDbw.cjs}

@@ -1,13 +1,13 @@
 'use strict';
 
 var promises = require('node:readline/promises');
-var index = require('./index-Q0G1SsEs.cjs');
-var session = require('./session-CC3Oz3Xc.cjs');
+var index = require('./index-B0zGksOA.cjs');
+var session = require('./session-D7nmqMiy.cjs');
 var childProcess = require('node:child_process');
 var fs = require('node:fs');
 var fs$1 = require('node:fs/promises');
 var path = require('node:path');
-var context = require('./context-BCwksd8H.cjs');
+var context = require('./context-BEgbP7mM.cjs');
 require('node:module');
 require('path');
 require('os');
@@ -264,7 +264,7 @@ async function createDefaultCosClient(uploadToken) {
     };
 }
 async function loadCosConstructor() {
-    const cosModule = await Promise.resolve().then(function () { return require('./index-PxkpQ5of.cjs'); }).then(function (n) { return n.index; });
+    const cosModule = await Promise.resolve().then(function () { return require('./index-BGFf6g7V.cjs'); }).then(function (n) { return n.index; });
     return cosModule.default;
 }
 function formatSize(bytes) {

package/dist/cli-chunks/{session-CC3Oz3Xc.cjs → session-D7nmqMiy.cjs}

@@ -1,6 +1,6 @@
 'use strict';
 
-var index = require('./index-Q0G1SsEs.cjs');
+var index = require('./index-B0zGksOA.cjs');
 var node_crypto = require('node:crypto');
 var path = require('node:path');
 var require$$0$2 = require('fs');

package/dist/cli.cjs

@@ -1,6 +1,6 @@
 'use strict';
 
-var index = require('./cli-chunks/index-Q0G1SsEs.cjs');
+var index = require('./cli-chunks/index-B0zGksOA.cjs');
 require('node:module');
 require('node:fs');
 require('node:fs/promises');

package/dist/devtools/mock-host/index.html

@@ -191,21 +191,6 @@
         background: #fff;
       }
 
-      .inline-field {
-        display: flex;
-        align-items: center;
-        gap: 8px;
-        margin-top: 10px;
-        color: #475569;
-        font-size: 13px;
-      }
-
-      .inline-field input {
-        width: 16px;
-        height: 16px;
-        margin: 0;
-      }
-
       .release-diagnostics {
         display: grid;
         gap: 6px;
@@ -396,10 +381,6 @@
               <option value="enabled">允许</option>
             </select>
           </label>
-          <label class="inline-field">
-            <input id="official-domain-checkbox" type="checkbox" />
-            <span>允许访问小黑盒官方域名</span>
-          </label>
           <div class="actions" style="margin-top: 10px">
             <button id="reset-permissions-button" type="button">恢复初始权限</button>
           </div>

package/dist/devtools/mock-host/main.js

@@ -7,6 +7,58 @@ const MINI_PROGRAM_BRIDGE_NONCE_PARAM = 'hb_mini_bridge_nonce';
 /** SDK 向 Runtime 报告 CSP 违规的内部方法名。 */
 const SDK_CSP_VIOLATION_METHOD = 'sdk.csp.violation';
 
+const MANAGED_RUNTIME_PERMISSION_KEYS = new Set(['network.request']);
+/**
+ * 判断 permission key 是否由 Runtime 权限快照管理。
+ *
+ * @param key 待判断的 permission key。
+ * @returns 该 key 需要读取 Runtime 权限快照时返回 `true`。
+ */
+function isManagedMiniProgramRuntimePermissionKey(key) {
+    return MANAGED_RUNTIME_PERMISSION_KEYS.has(key);
+}
+/**
+ * 解析服务端权限快照；格式不完整时整份快照失效并 fail closed。
+ *
+ * @param snapshot 待校验的服务端权限快照。
+ * @returns 解析状态和通过校验的受管权限。
+ */
+function parseMiniProgramRuntimePermissions(snapshot) {
+    if (!isRecord$2(snapshot) || snapshot.schema_version !== 1 || !Array.isArray(snapshot.entries)) {
+        return { valid: false, permissions: {} };
+    }
+    if (snapshot.revision !== undefined && (typeof snapshot.revision !== 'number' || !Number.isInteger(snapshot.revision) || snapshot.revision < 0)) {
+        return { valid: false, permissions: {} };
+    }
+    const seenKeys = new Set();
+    const permissions = {};
+    for (const rawEntry of snapshot.entries) {
+        if (!isRecord$2(rawEntry) || typeof rawEntry.key !== 'string' || !rawEntry.key.trim()) {
+            return { valid: false, permissions: {} };
+        }
+        const key = rawEntry.key.trim();
+        if (seenKeys.has(key) || (rawEntry.status !== 'enabled' && rawEntry.status !== 'disabled') || !isRecord$2(rawEntry.config)) {
+            return { valid: false, permissions: {} };
+        }
+        seenKeys.add(key);
+        if (!isManagedMiniProgramRuntimePermissionKey(key)) {
+            continue;
+        }
+        if (key === 'network.request' && typeof rawEntry.config.useOfficialDomain !== 'boolean') {
+            return { valid: false, permissions: {} };
+        }
+        permissions[key] = {
+            key,
+            status: rawEntry.status,
+            config: { useOfficialDomain: rawEntry.config.useOfficialDomain },
+        };
+    }
+    return { valid: true, permissions };
+}
+function isRecord$2(value) {
+    return typeof value === 'object' && value !== null && !Array.isArray(value);
+}
+
 /**
  * 登录授权能力方法名。
  *
@@ -3452,9 +3504,15 @@ const DEFAULT_PERMISSION_STATE = {
     },
 };
 function createMiniProgramMockPermissionState(context) {
-    const parsed = parseRuntimePermissions(context.runtimePermissions);
-    return parsed.valid && parsed.networkRequest
-        ? { networkRequest: { ...parsed.networkRequest } }
+    const parsed = parseMiniProgramRuntimePermissions(context.runtimePermissions);
+    const networkRequest = parsed.permissions['network.request'];
+    return parsed.valid && networkRequest
+        ? {
+            networkRequest: {
+                status: networkRequest.status,
+                useOfficialDomain: networkRequest.config.useOfficialDomain === true,
+            },
+        }
         : cloneDefaultPermissionState();
 }
 function createMiniProgramMockRuntimePermissions(state) {
@@ -3481,7 +3539,7 @@ function createMiniProgramDevReleaseDiagnostics(context, localState) {
             },
         ];
     }
-    const parsedRemote = parseRuntimePermissions(context.runtimePermissions);
+    const parsedRemote = parseMiniProgramRuntimePermissions(context.runtimePermissions);
     if (!parsedRemote.valid) {
         return [
             {
@@ -3491,9 +3549,14 @@ function createMiniProgramDevReleaseDiagnostics(context, localState) {
             },
         ];
     }
-    const remoteState = parsedRemote.networkRequest ?? DEFAULT_PERMISSION_STATE.networkRequest;
-    if (localState.networkRequest.status === 'enabled' &&
-        remoteState.status !== 'enabled') {
+    const remoteNetworkRequest = parsedRemote.permissions['network.request'];
+    const remoteState = remoteNetworkRequest
+        ? {
+            status: remoteNetworkRequest.status,
+            useOfficialDomain: remoteNetworkRequest.config.useOfficialDomain === true,
+        }
+        : DEFAULT_PERMISSION_STATE.networkRequest;
+    if (localState.networkRequest.status === 'enabled' && remoteState.status !== 'enabled') {
         return [
             {
                 code: 'NETWORK_REQUEST_DISABLED_ONLINE',
@@ -3502,9 +3565,7 @@ function createMiniProgramDevReleaseDiagnostics(context, localState) {
             },
         ];
     }
-    if (localState.networkRequest.status === 'enabled' &&
-        localState.networkRequest.useOfficialDomain &&
-        !remoteState.useOfficialDomain) {
+    if (localState.networkRequest.status === 'enabled' && localState.networkRequest.useOfficialDomain && !remoteState.useOfficialDomain) {
         return [
             {
                 code: 'OFFICIAL_DOMAIN_DISABLED_ONLINE',
@@ -3515,49 +3576,11 @@ function createMiniProgramDevReleaseDiagnostics(context, localState) {
     }
     return [];
 }
-function parseRuntimePermissions(snapshot) {
-    if (!isRecord$2(snapshot) || snapshot.schema_version !== 1 || !Array.isArray(snapshot.entries)) {
-        return { valid: false };
-    }
-    if (snapshot.revision !== undefined &&
-        (typeof snapshot.revision !== 'number' ||
-            !Number.isInteger(snapshot.revision) ||
-            snapshot.revision < 0)) {
-        return { valid: false };
-    }
-    const seenKeys = new Set();
-    let networkRequest;
-    for (const entry of snapshot.entries) {
-        if (!isRecord$2(entry) || typeof entry.key !== 'string' || !entry.key.trim()) {
-            return { valid: false };
-        }
-        const key = entry.key.trim();
-        if (seenKeys.has(key) ||
-            (entry.status !== 'enabled' && entry.status !== 'disabled') ||
-            !isRecord$2(entry.config)) {
-            return { valid: false };
-        }
-        seenKeys.add(key);
-        if (key === 'network.request') {
-            if (typeof entry.config.useOfficialDomain !== 'boolean') {
-                return { valid: false };
-            }
-            networkRequest = {
-                status: entry.status,
-                useOfficialDomain: entry.config.useOfficialDomain,
-            };
-        }
-    }
-    return { valid: true, networkRequest };
-}
 function cloneDefaultPermissionState() {
     return {
         networkRequest: { ...DEFAULT_PERMISSION_STATE.networkRequest },
     };
 }
-function isRecord$2(value) {
-    return typeof value === 'object' && value !== null && !Array.isArray(value);
-}
 
 async function getMiniProgramRuntimeUserInfo(platformAdapter) {
     const userId = await resolveCurrentUserId(platformAdapter);
@@ -5145,46 +5168,11 @@ function isOfficialMiniProgramNetworkUrl(value) {
     }
 }
 
-const MANAGED_RUNTIME_PERMISSION_KEYS = new Set(['network.request']);
-/** 解析服务端权限快照；格式不完整时整份快照失效并 fail closed。 */
-function parseMiniProgramRuntimePermissions(snapshot) {
-    if (!isRecord$1(snapshot) || snapshot.schema_version !== 1 || !Array.isArray(snapshot.entries)) {
-        return { valid: false, permissions: {} };
-    }
-    if (snapshot.revision !== undefined &&
-        (typeof snapshot.revision !== 'number' || !Number.isInteger(snapshot.revision) || snapshot.revision < 0)) {
-        return { valid: false, permissions: {} };
-    }
-    const seenKeys = new Set();
-    const permissions = {};
-    for (const rawEntry of snapshot.entries) {
-        if (!isRecord$1(rawEntry) || typeof rawEntry.key !== 'string' || !rawEntry.key.trim()) {
-            return { valid: false, permissions: {} };
-        }
-        const key = rawEntry.key.trim();
-        if (seenKeys.has(key) || (rawEntry.status !== 'enabled' && rawEntry.status !== 'disabled') || !isRecord$1(rawEntry.config)) {
-            return { valid: false, permissions: {} };
-        }
-        seenKeys.add(key);
-        if (!MANAGED_RUNTIME_PERMISSION_KEYS.has(key)) {
-            continue;
-        }
-        if (key === 'network.request' && typeof rawEntry.config.useOfficialDomain !== 'boolean') {
-            return { valid: false, permissions: {} };
-        }
-        permissions[key] = {
-            key,
-            status: rawEntry.status,
-            config: { useOfficialDomain: rawEntry.config.useOfficialDomain },
-        };
-    }
-    return { valid: true, permissions };
-}
 /** 创建只依赖启动快照的纯权限 evaluator，供正式 Runtime 与 Mock Host 共用。 */
 function createMiniProgramRuntimePermissionEvaluator(snapshot) {
     const parsed = parseMiniProgramRuntimePermissions(snapshot);
     return (permissionKey, payload) => {
-        if (!MANAGED_RUNTIME_PERMISSION_KEYS.has(permissionKey)) {
+        if (!isManagedMiniProgramRuntimePermissionKey(permissionKey)) {
             return { allowed: true };
         }
         const entry = parsed.valid ? parsed.permissions[permissionKey] : undefined;
@@ -6431,7 +6419,6 @@ const elements = {
     mobileQrStatus: queryElement('#mobile-qr-status'),
     nicknameInput: queryElement('#nickname-input'),
     networkPermissionSelect: queryElement('#network-permission-select'),
-    officialDomainCheckbox: queryElement('#official-domain-checkbox'),
     releaseDiagnostics: queryElement('#release-diagnostics'),
     resetPermissionsButton: queryElement('#reset-permissions-button'),
     storageSnapshot: queryElement('#storage-snapshot'),
@@ -6511,10 +6498,6 @@ elements.networkPermissionSelect.addEventListener('change', () => {
         elements.networkPermissionSelect.value === 'enabled' ? 'enabled' : 'disabled';
     rebuildRuntimeWithPermissions();
 });
-elements.officialDomainCheckbox.addEventListener('change', () => {
-    permissionState.networkRequest.useOfficialDomain = elements.officialDomainCheckbox.checked;
-    rebuildRuntimeWithPermissions();
-});
 elements.resetPermissionsButton.addEventListener('click', () => {
     permissionState = clonePermissionState(initialPermissionState);
     rebuildRuntimeWithPermissions();
@@ -6536,8 +6519,6 @@ function updatePermissionControls() {
             ? `已连接线上配置${devContext.miniProgramId ? ` · ${devContext.miniProgramId}` : ''}`
             : '匿名本地沙箱';
     elements.networkPermissionSelect.value = permissionState.networkRequest.status;
-    elements.officialDomainCheckbox.checked = permissionState.networkRequest.useOfficialDomain;
-    elements.officialDomainCheckbox.disabled = permissionState.networkRequest.status !== 'enabled';
     const diagnostics = createMiniProgramDevReleaseDiagnostics(devContext, permissionState);
     elements.releaseDiagnostics.innerHTML = diagnostics
         .map((diagnostic) => `<li>${escapeHtml(diagnostic.message)}</li>`)

package/dist/index.cjs.js

@@ -325,7 +325,7 @@ function createMessageId() {
 /** 构建时替换为当前发布包的实际版本。 */
 const HB_SDK_VERSION = typeof undefined === 'string'
     ? undefined
-    : '0.6.4-alpha.0';
+    : '0.6.4';
 
 /**
  * 判断未知数据是否符合小程序 bridge 消息信封。

package/dist/index.esm.js

@@ -321,7 +321,7 @@ function createMessageId() {
 /** 构建时替换为当前发布包的实际版本。 */
 const HB_SDK_VERSION = typeof undefined === 'string'
     ? undefined
-    : '0.6.4-alpha.0';
+    : '0.6.4';
 
 /**
  * 判断未知数据是否符合小程序 bridge 消息信封。