@heybox/hb-sdk 0.6.6-alpha.2 → 0.6.6-alpha.4

package/skill/references/recipes.md

@@ -9,6 +9,7 @@
 - apps/docs/hb-sdk/guide/lifecycle.md
 - apps/docs/hb-sdk/guide/error-handling.md
 - apps/docs/hb-sdk/recipes/login-gate.md
+- apps/docs/hb-sdk/recipes/community-share.md
 - apps/docs/hb-sdk/recipes/custom-instance.md
 
 ## Contents
@@ -18,6 +19,7 @@
 - [Lifecycle events](#lifecycle-events)
 - [Error handling](#error-handling)
 - [Login gate recipe](#login-gate-recipe)
+- [Community share recipe](#community-share-recipe)
 - [Custom instance recipe](#custom-instance-recipe)
 ## Quick start
 
@@ -355,6 +357,57 @@ async function handleSubmit() {
 - 用户主动点击登录、提交、收藏等动作时，再调用 `login`。
 - 登录态变化后，父容器应派发 `authChange`，页面可据此刷新用户相关 UI。
 
+## Community share recipe
+
+
+# 社区分享预置
+
+`share.showShareMenu()` 和 `share.screenshot()` 可以给客户端的“转发到社区”流程预置分区与话题。预置内容进入发帖页后仍可由用户修改，SDK 不会直接发布内容。
+
+## 普通分享
+
+普通分享只支持一个默认分区，并且配置 `post` 时不要同时指定站外 `channel`。
+
+```ts
+import { ready, share } from '@heybox/hb-sdk'
+
+await ready()
+
+await share.showShareMenu({
+  title: '本局战绩',
+  desc: '查看我的完整战绩',
+  post: {
+    topicIds: [235709],
+    topics: ['无畏契约战绩'],
+  },
+})
+```
+
+## 截图分享
+
+截图分享可以预置多个分区，客户端发帖页负责最终选择与确认。
+
+```ts
+await share.screenshot({
+  delay: 100,
+  saveToAlbum: true,
+  post: {
+    topicIds: [235709, 66739],
+    topics: ['无畏契约战绩'],
+  },
+})
+```
+
+## 参数边界
+
+- `topicIds` 接受正整数或非空字符串，按首次出现顺序去重。
+- `topics` 只传话题内容，不要添加首尾 `#`；字符串会先 trim 再去重。
+- `post: null` 等同于不配置社区发帖预置，`post: {}` 是无效配置。
+- 本地 Mock、App Dev Shell 和开发 Runtime 会对无效配置返回 `INVALID_PARAMS`。
+- 生产 Runtime 会过滤无效项；普通分享只使用第一个有效分区，配置冲突时保留站外 `channel`，不会阻断原分享流程。
+
+调用方不能通过该 API 传客户端协议、回调、自定义按钮或发布指令。
+
 ## Custom instance recipe
 
 

package/skill/references/safety-boundaries.md

@@ -23,7 +23,7 @@
 
 - Do not instruct mini-program code to read, extract, forward, store, or depend on token, cookie, phone number, or private credentials.
 - Negative safety statements that explain the SDK does not expose token/cookie/private credentials are correct and should be preserved.
-- Do not use raw share protocol fields, JS callbacks, activity reporting, post publishing, custom buttons, or upload-only flows.
+- Do not use raw share protocol fields, JS callbacks, activity reporting, direct post publishing, custom buttons, or upload-only flows. Public `share.*({ post })` options only preset an editable client post flow.
 - Do not use storage delete, clear, info listing, V2, or global Heybox client storage access.
 - Do not pass host-only protocol fields through `network.request`.
 - Do not build raw `postMessage` bridge flows in iframe business code.

package/skill/scripts/sync-references.mjs

@@ -207,6 +207,7 @@ const authGuide = frontmatterless(read('apps/docs/hb-sdk/guide/auth.md'));
 const lifecycleGuide = frontmatterless(read('apps/docs/hb-sdk/guide/lifecycle.md'));
 const errorGuide = frontmatterless(read('apps/docs/hb-sdk/guide/error-handling.md'));
 const loginGate = frontmatterless(read('apps/docs/hb-sdk/recipes/login-gate.md'));
+const communityShare = frontmatterless(read('apps/docs/hb-sdk/recipes/community-share.md'));
 const customInstance = frontmatterless(read('apps/docs/hb-sdk/recipes/custom-instance.md'));
 const referenceHome = frontmatterless(read('apps/docs/hb-sdk/reference/index.md'));
 const quickStartSection = extractSection(readme, '## 快速开始');
@@ -220,6 +221,7 @@ const manifestSection = extractSection(readme, '## Manifest');
 const cliSummarySection = extractSection(readme, '## CLI');
 const cliCreateSection = extractSection(cliGuide, '## 创建工坊小程序');
 const cliDevSection = extractSection(cliGuide, '## 推荐调试流程');
+const cliBuildSection = extractSection(cliGuide, '## 生产构建');
 const cliDeploySection = extractSection(cliGuide, '## 部署发布');
 const cliRemoteSection = extractSection(cliGuide, '## 远端管理命令');
 const cliLoginSection = extractSection(cliGuide, '## CLI 登录态');
@@ -227,6 +229,7 @@ const cliDoctorSection = extractSection(cliGuide, '## Agent Skill doctor');
 const cliUpdateSection = extractSection(cliGuide, '## 版本提醒');
 const cliCommandSurface = `hb-sdk create <project-name>
 hb-sdk dev [--port <port>] [--mock-port <port>] [--no-open]
+hb-sdk build [--env <name>] [--verbose]
 hb-sdk login
 hb-sdk login status
 hb-sdk login clear
@@ -344,6 +347,7 @@ files.set('cli.md', `${header('CLI reference', [
   'packages/hb-sdk/src/cli/index.ts',
   'packages/hb-sdk/src/cli/commands/create.ts',
   'packages/hb-sdk/src/cli/commands/dev.ts',
+  'packages/hb-sdk/src/cli/commands/build.ts',
   'packages/hb-sdk/src/cli/commands/login.ts',
   'apps/docs/hb-sdk/guide/cli.md',
 ])}${contents([
@@ -351,6 +355,7 @@ files.set('cli.md', `${header('CLI reference', [
   ['Command surface', 'command-surface'],
   ['Create a mini-program template', 'create-a-mini-program-template'],
   ['Local debugging', 'local-debugging'],
+  ['Production build', 'production-build'],
   ['Deploy and publish', 'deploy-and-publish'],
   ['Developer account scope', 'developer-account-scope'],
   ['Remote management commands', 'remote-management-commands'],
@@ -386,6 +391,17 @@ ${cliDevSection}
 
 Use \`hb-sdk dev\` to open the local debugging page. The "在 Mac 版 APP 中启动" button opens the page in the Mac App; the "Mobile App" QR code opens it in the phone App after a LAN interface is selected. These entries remain available without CLI login or project binding, but managed capabilities are denied by default. The phone and computer must be on the same LAN. If an embedded browser cannot open the App, use the system browser.
 
+## Production build
+
+${cliBuildSection}
+
+Agent rules:
+
+- Use \`hb-sdk build [--env <name>] [--verbose]\` as the recommended production build entry.
+- Require explicit \`miniappManifest()\` configuration and keep typechecking in the project's \`scripts.build\`.
+- Do not claim \`hb-sdk build\` needs login, binding, or network access, and do not invent unsupported build flags.
+- Existing \`vite build\` projects remain compatible and must not be auto-migrated.
+
 ## Deploy and publish
 
 ${rewriteBundledCliLinks(cliDeploySection)}
@@ -462,6 +478,7 @@ files.set('recipes.md', `${header('Recipes', [
   'apps/docs/hb-sdk/guide/lifecycle.md',
   'apps/docs/hb-sdk/guide/error-handling.md',
   'apps/docs/hb-sdk/recipes/login-gate.md',
+  'apps/docs/hb-sdk/recipes/community-share.md',
   'apps/docs/hb-sdk/recipes/custom-instance.md',
 ])}${contents([
   ['Quick start', 'quick-start'],
@@ -469,6 +486,7 @@ files.set('recipes.md', `${header('Recipes', [
   ['Lifecycle events', 'lifecycle-events'],
   ['Error handling', 'error-handling'],
   ['Login gate recipe', 'login-gate-recipe'],
+  ['Community share recipe', 'community-share-recipe'],
   ['Custom instance recipe', 'custom-instance-recipe'],
 ])}## Quick start
 
@@ -490,6 +508,10 @@ ${rewriteBundledRecipeLinks(errorGuide)}
 
 ${rewriteBundledRecipeLinks(loginGate)}
 
+## Community share recipe
+
+${rewriteBundledRecipeLinks(communityShare)}
+
 ## Custom instance recipe
 
 ${rewriteBundledRecipeLinks(customInstance)}
@@ -506,7 +528,7 @@ ${capabilityBoundaries}
 
 - Do not instruct mini-program code to read, extract, forward, store, or depend on token, cookie, phone number, or private credentials.
 - Negative safety statements that explain the SDK does not expose token/cookie/private credentials are correct and should be preserved.
-- Do not use raw share protocol fields, JS callbacks, activity reporting, post publishing, custom buttons, or upload-only flows.
+- Do not use raw share protocol fields, JS callbacks, activity reporting, direct post publishing, custom buttons, or upload-only flows. Public \`share.*({ post })\` options only preset an editable client post flow.
 - Do not use storage delete, clear, info listing, V2, or global Heybox client storage access.
 - Do not pass host-only protocol fields through \`network.request\`.
 - Do not build raw \`postMessage\` bridge flows in iframe business code.

package/skill/skill.json

@@ -1,11 +1,11 @@
 {
   "name": "hb-sdk",
-  "skillVersion": "0.6.6-alpha.2+skill.1b5ff79af27f",
+  "skillVersion": "0.6.6-alpha.4+skill.849ac4dd68e1",
   "sdk": {
     "package": "@heybox/hb-sdk",
-    "version": "0.6.6-alpha.2",
-    "compatibility": "0.6.6-alpha.2"
+    "version": "0.6.6-alpha.4",
+    "compatibility": "0.6.6-alpha.4"
   },
   "source": "https://open.xiaoheihe.cn/agent-skills/hb-sdk",
-  "integrity": "sha256-1b5ff79af27f9af02b914553b6e7324f66543861cce638c526c9158586ed5fb5"
+  "integrity": "sha256-849ac4dd68e1d39c13e686809d6a4e9c1bcfd90fbac899b45f43bd364db1fc68"
 }

package/types/index.d.ts

@@ -4,7 +4,7 @@ export type { MiniProgramEventHandler, MiniProgramEventName, MiniProgramEventPay
 export type { LoginPayload, LoginResult, MiniProgramAuthModule } from './modules/auth';
 export type { DeleteCurrentUserLeaderboardEntryPayload, DeleteCurrentUserLeaderboardEntryResult, GetCurrentUserLeaderboardEntryPayload, GetCurrentUserLeaderboardEntryResult, GetLeaderboardInfoPayload, GetLeaderboardInfoResult, GetLeaderboardListPayload, GetLeaderboardListResult, LeaderboardEntry, LeaderboardOrder, MiniProgramCloudLeaderboardModule, MiniProgramCloudModule, SubmitLeaderboardEntryPayload, SubmitLeaderboardEntryResult, } from './modules/cloud';
 export type { BasePlatformAccountInfo, CurrentUserAvatarConfig, CurrentUserAvatarDecoration, CurrentUserBbsInfo, CurrentUserDetail, CurrentUserLevelInfo, CurrentUserMedal, CurrentUserProfile, EpicPlatformAccountInfo, GetCurrentUserDetailPayload, GetCurrentUserDetailResult, GetCurrentUserProfilePayload, GetCurrentUserProfileResult, GetPlatformAccountInfoPayload, GetPlatformAccountInfoResult, GetPlatformAccountOverviewPayload, GetPlatformAccountOverviewResult, GetSteamGameListOptions, GetSteamGameListPayload, GetSteamGameListResult, GetUserInfoPayload, GetUserInfoResult, MiniProgramUserInfo, MiniProgramUserInfoResult, MiniProgramUserModule, MobilePlatformAccountInfo, PcHardwareAccountInfo, PlatformAccountInfoMap, PlatformAccountOverview, PlatformAccountResult, PlatformAccountType, PlatformStatItem, PsnPlatformAccountInfo, SteamGameListData, SteamGameListItem, SteamGameListSort, SteamGamePrice, SteamPlatformAccountInfo, SwitchPlatformAccountInfo, UserScopedResult, XboxPlatformAccountInfo, } from './modules/user';
-export type { MiniProgramScreenshotOptions, MiniProgramScreenshotRect, MiniProgramShareChannel, MiniProgramShareModule, MiniProgramShowShareMenuOptions, ScreenshotPayload, ScreenshotResult, ShowShareMenuPayload, ShowShareMenuResult, } from './modules/share';
+export type { MiniProgramScreenshotOptions, MiniProgramScreenshotRect, MiniProgramShareChannel, MiniProgramShareModule, MiniProgramSharePostOptions, MiniProgramShowShareMenuOptions, ScreenshotPayload, ScreenshotResult, ShowShareMenuPayload, ShowShareMenuResult, } from './modules/share';
 export type { GetWindowInfoPayload, GetWindowInfoResult, MiniProgramNavigationBarForegroundStyle, MiniProgramSafeArea, MiniProgramSetNavigationBarStyleOptions, MiniProgramViewportModule, MiniProgramWindowInfoResult, SetNavigationBarStylePayload, SetNavigationBarStyleResult, } from './modules/viewport';
 export type { GetStoragePayload, GetStorageResult, MiniProgramStorageModule, SetStoragePayload, } from './modules/storage';
 export type { MiniProgramNetworkHeaders, MiniProgramNetworkModule, MiniProgramNetworkParams, MiniProgramNetworkRequestConfig, MiniProgramNetworkRequestMethod, MiniProgramNetworkResponse, MiniProgramNetworkValidateStatus, NetworkRequestPayload, NetworkResponsePayload, } from './modules/network';

package/types/modules/share/types.d.ts

@@ -5,6 +5,13 @@
  * 不同宿主环境可支持的渠道集合可能不同；未传 `channel` 时由客户端自行展示默认分享面板。
  */
 export type MiniProgramShareChannel = 'wechatSession' | 'wechatTimeline' | 'qqFriend' | 'qzone' | 'weibo';
+/** 社区发帖预置配置。 */
+export interface MiniProgramSharePostOptions {
+    /** 默认发布分区 ID；普通分享只使用第一项，截图分享支持多项。 */
+    topicIds?: (string | number)[];
+    /** 预置话题内容，不包含首尾 `#`。 */
+    topics?: string[];
+}
 /**
  * 展示基础分享面板的配置。
  *
@@ -22,6 +29,8 @@ export interface MiniProgramShowShareMenuOptions {
     imageUrl?: string;
     /** 指定分享渠道；不传则由客户端展示默认分享面板。 */
     channel?: MiniProgramShareChannel;
+    /** 转发到社区时使用的分区与话题预置；`null` 等同于不配置。 */
+    post?: MiniProgramSharePostOptions | null;
 }
 /**
  * 截图区域。
@@ -52,4 +61,6 @@ export interface MiniProgramScreenshotOptions {
     delay?: number;
     /** 是否展示保存到相册能力。 */
     saveToAlbum?: boolean;
+    /** 转发到社区时使用的分区与话题预置；`null` 等同于不配置。 */
+    post?: MiniProgramSharePostOptions | null;
 }

package/types/protocol.d.ts

@@ -10,7 +10,7 @@ export type { DeleteCurrentUserLeaderboardEntryPayload, DeleteCurrentUserLeaderb
 export type { GetCurrentUserDetailPayload, GetCurrentUserDetailResult, GetCurrentUserProfilePayload, GetCurrentUserProfileResult, GetPlatformAccountInfoPayload, GetPlatformAccountInfoResult, GetPlatformAccountOverviewPayload, GetPlatformAccountOverviewResult, GetSteamGameListOptions, GetSteamGameListPayload, GetSteamGameListResult, GetUserInfoPayload, GetUserInfoResult, MiniProgramUserInfo, MiniProgramUserInfoResult, SteamGameListData, SteamGameListItem, SteamGameListSort, SteamGamePrice, } from './modules/user';
 export type { ScreenshotPayload, ScreenshotResult } from './modules/share/screenshot';
 export type { ShowShareMenuPayload, ShowShareMenuResult } from './modules/share/show-share-menu';
-export type { MiniProgramScreenshotOptions, MiniProgramScreenshotRect, MiniProgramShareChannel, MiniProgramShowShareMenuOptions, } from './modules/share';
+export type { MiniProgramScreenshotOptions, MiniProgramScreenshotRect, MiniProgramShareChannel, MiniProgramSharePostOptions, MiniProgramShowShareMenuOptions, } from './modules/share';
 export type { GetStoragePayload, GetStorageResult, SetStoragePayload } from './modules/storage';
 export type { GetWindowInfoPayload, GetWindowInfoResult, MiniProgramNavigationBarForegroundStyle, MiniProgramSafeArea, MiniProgramSetNavigationBarStyleOptions, MiniProgramWindowInfoResult, SetNavigationBarStylePayload, SetNavigationBarStyleResult, } from './modules/viewport';
 export type { MiniProgramNetworkHeaders, MiniProgramNetworkParams, MiniProgramNetworkRequestConfig, MiniProgramNetworkRequestMethod, MiniProgramNetworkResponse, MiniProgramNetworkValidateStatus, NetworkRequestPayload, NetworkResponsePayload, } from './modules/network';

package/types/vite/html-policy.d.ts

@@ -1 +1,5 @@
-export declare function enforceMiniappHtmlPolicy(html: string): string;
+export declare const PRODUCTION_CSP: string;
+export declare function enforceMiniappHtmlPolicy(html: string, options?: {
+    hmrWebSocketUrl?: string;
+    skipPlatformCsp?: boolean;
+}): string;

package/types/vite/index.d.ts

@@ -20,7 +20,16 @@ interface MiniappManifestResolvedConfig {
     build: {
         outDir: string;
     };
-    server: Record<string, unknown>;
+    server: {
+        host?: string | boolean;
+        port?: number;
+        hmr?: boolean | {
+            clientPort?: number;
+            host?: string;
+            port?: number;
+            protocol?: 'ws' | 'wss';
+        };
+    };
 }
 export declare function miniappManifest(): MiniappManifestPlugin;
 export {};

package/types/vite/runtime-permission-env.d.ts

@@ -0,0 +1,9 @@
+export declare const HB_SDK_RUNTIME_USE_OFFICIAL_DOMAIN_ENV = "HB_SDK_RUNTIME_USE_OFFICIAL_DOMAIN";
+export declare const HB_SDK_RUNTIME_PERMISSION_CONTEXT_ENV = "HB_SDK_RUNTIME_PERMISSION_CONTEXT";
+export declare function shouldSkipMiniappPlatformCspFromEnv(env?: NodeJS.ProcessEnv): boolean;
+export declare function createMiniappPlatformCspEnv(env: NodeJS.ProcessEnv, skipPlatformCsp: boolean): {
+    HB_SDK_RUNTIME_PERMISSION_CONTEXT: string;
+    HB_SDK_RUNTIME_USE_OFFICIAL_DOMAIN: string;
+    TZ?: string | undefined;
+};
+export declare function withMiniappPlatformCspEnv<T>(skipPlatformCsp: boolean, action: () => Promise<T>, env?: NodeJS.ProcessEnv): Promise<T>;