npm - @heybox/hb-sdk - Versions diffs - 0.6.6-alpha.3 → 0.6.6-alpha.4 - Mend

@heybox/hb-sdk 0.6.6-alpha.3 → 0.6.6-alpha.4

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (24) hide show

package/README.md CHANGED Viewed

@@ -598,7 +598,9 @@ export default defineConfig({
 工坊小程序构建产物只能在兼容的小黑盒 Runtime 中启动。普通浏览器直接打开时不会执行标准业务脚本，并会提示在小黑盒 APP 内打开。项目应使用标准 Vite module 入口。
-插件只接受单页应用：输出目录只能存在入口 `index.html`。build 会用结构化 HTML parser 校验入口，并把平台 CSP 插入 `<head>` 首位；已有 CSP 会原样保留，两份策略按浏览器交集生效。正式策略禁止 `fetch`、XHR、WebSocket、EventSource、Beacon、Worker、iframe、表单和对象加载等浏览器原生出口；业务网络请求应使用 `network.request()`。dev 使用相同策略，只额外放行当前 Vite 的精确 HMR WebSocket 地址。
+插件只接受单页应用：输出目录只能存在入口 `index.html`。`hb-sdk dev` 和 `hb-sdk remote deploy` 会读取绑定小程序的远端 Runtime 权限；仅当 `network.request` 已启用且 `useOfficialDomain=true` 时跳过平台 CSP，否则 build 会把平台 CSP 插入 `<head>` 首位。直接运行 `vite build`、匿名 dev、非法快照或远端权限读取失败时均继续注入。已有 CSP 始终原样保留；注入平台 CSP 时，两份策略按浏览器交集生效。
+平台 CSP 会禁止 `fetch`、XHR、WebSocket、EventSource、Beacon、Worker、iframe、表单和对象加载等浏览器原生出口；dev 只额外放行当前 Vite 的精确 HMR WebSocket 地址。跳过平台 CSP 时，这些能力不再由 SDK 构建产物统一限制，但需要宿主授权的业务网络请求仍应使用 `network.request()`。本地 Mock 权限覆盖不会改变构建 CSP，构建判定始终以远端权限快照为准。
 meta refresh、外部 anchor、`dns-prefetch`、`preconnect`、`prerender`、外部资源 URL 和额外 HTML 会使 build 失败。内联 script/style 允许，但 `unsafe-eval` 不允许。`dev`、`hb-sdk build` 和手动 Vite build 都不请求远端最低 SDK 版本；构建仍会把当前 `sdkVersion` 写入 Manifest，`hb-sdk remote deploy` 仍校验 Manifest 结构并经过服务端 precheck / submit-audit 策略。

package/dist/cli-chunks/{build-De-QADpA.cjs → build-C54stoRf.cjs} RENAMED Viewed

@@ -3,10 +3,11 @@
 var fs$1 = require('node:fs');
 var fs = require('node:fs/promises');
 var path = require('node:path');
-var index$1 = require('./index-BQm5XmMC.cjs');
-var runtimeGate = require('./runtime-gate-B2MQf1vc.cjs');
-var index = require('./index-QAkYgxPI.cjs');
-var projectVite = require('./project-vite-VcJMyz1l.cjs');
+var runtimePermissionEnv = require('./runtime-permission-env-BSs4uCNa.cjs');
+var runtimeGate = require('./runtime-gate--rPXjiG6.cjs');
+var index = require('./index-19i3Dr5H.cjs');
+var projectVite = require('./project-vite-Dl3OoQjL.cjs');
+require('node:async_hooks');
 require('node:module');
 require('path');
 require('os');
@@ -23,26 +24,30 @@ async function runBuildCommand(_options = {}, runtime = {}) {
     const logger = runtime.logger ?? index.createCliLogger();
     const projectRoot = projectVite.findProjectRoot(runtime.cwd ?? process.cwd());
     const distDir = path.join(projectRoot, 'dist');
-    const mode = (runtime.env ?? process.env).HB_SDK_ENV?.trim() || undefined;
+    const env = runtime.env ?? process.env;
+    const mode = env.HB_SDK_ENV?.trim() || undefined;
+    const skipPlatformCsp = runtimePermissionEnv.shouldSkipMiniappPlatformCspFromEnv(env);
     await fs.rm(distDir, { force: true, recursive: true });
     try {
-        const vite = await logger.task('正在加载项目 Vite', () => projectVite.loadProjectVite(projectRoot), {
-            successText: '已加载项目 Vite',
-        });
-        await logger.task('正在构建小程序', () => vite.build({
-            root: projectRoot,
-            ...(mode ? { mode } : {}),
-            plugins: [createFixedBuildOutputPlugin(projectRoot)],
-            build: {
-                outDir: 'dist',
-                emptyOutDir: true,
-                watch: null,
-                write: true,
-            },
-        }), { successText: 'Vite 构建完成' });
-        const result = await validateBuildOutput(projectRoot, logger);
-        logger.success(`构建完成: dist/ | manifest version ${result.version} | sdkVersion ${result.sdkVersion} | 待上传文件 ${result.fileCount} 个 | ${formatSize(result.totalBytes)}`);
-        return result;
+        return await runtimePermissionEnv.withMiniappPlatformCspEnv(skipPlatformCsp, async () => {
+            const vite = await logger.task('正在加载项目 Vite', () => projectVite.loadProjectVite(projectRoot), {
+                successText: '已加载项目 Vite',
+            });
+            await logger.task('正在构建小程序', () => vite.build({
+                root: projectRoot,
+                ...(mode ? { mode } : {}),
+                plugins: [createFixedBuildOutputPlugin(projectRoot)],
+                build: {
+                    outDir: 'dist',
+                    emptyOutDir: true,
+                    watch: null,
+                    write: true,
+                },
+            }), { successText: 'Vite 构建完成' });
+            const result = await validateBuildOutput(projectRoot, logger);
+            logger.success(`构建完成: dist/ | manifest version ${result.version} | sdkVersion ${result.sdkVersion} | 待上传文件 ${result.fileCount} 个 | ${formatSize(result.totalBytes)}`);
+            return result;
+        }, env);
     }
     catch (error) {
         await fs.rm(distDir, { force: true, recursive: true });
@@ -88,8 +93,8 @@ async function validateBuildOutput(projectRoot, logger) {
     }
     const { sdkVersion, version } = runtimeGate.validateMiniappManifestForDeploy(manifest);
     const allFiles = await walkDistFiles(distDir);
-    const uploadFiles = allFiles.filter((file) => index$1.shouldUploadDistFile(file.relativePath));
-    const sizeError = index$1.validateUploadTotalSize(uploadFiles);
+    const uploadFiles = allFiles.filter((file) => runtimePermissionEnv.shouldUploadDistFile(file.relativePath));
+    const sizeError = runtimePermissionEnv.validateUploadTotalSize(uploadFiles);
     if (sizeError) {
         throw new Error(sizeError.replace('重新 deploy', '重新 build'));
     }
@@ -109,12 +114,12 @@ async function walkDistFiles(distDir) {
         const entries = await fs.readdir(absDir, { withFileTypes: true });
         for (const entry of entries) {
             const absPath = path.join(absDir, entry.name);
-            const relPath = index$1.normalizeRelativePath(relDir ? `${relDir}/${entry.name}` : entry.name);
+            const relPath = runtimePermissionEnv.normalizeRelativePath(relDir ? `${relDir}/${entry.name}` : entry.name);
             const link = await fs.lstat(absPath);
             if (link.isSymbolicLink()) {
                 throw new Error(`dist 目录包含 symlink，拒绝处理：${relPath}`);
             }
-            if (index$1.relativePathContainsNodeModulesSegment(relPath)) {
+            if (runtimePermissionEnv.relativePathContainsNodeModulesSegment(relPath)) {
                 throw new Error(`dist 目录含 node_modules：${relPath}`);
             }
             if (entry.isDirectory()) {

package/dist/cli-chunks/{context-CvZs9ZBf.cjs → context-DvTynj3F.cjs} RENAMED Viewed

@@ -1,11 +1,106 @@
 'use strict';
-var session = require('./session-YJ8xNESM.cjs');
-var index = require('./index-BQm5XmMC.cjs');
+var session = require('./session-DJEuhrgq.cjs');
+var runtimePermissionEnv = require('./runtime-permission-env-BSs4uCNa.cjs');
 var fs$1 = require('node:fs');
 var fs = require('node:fs/promises');
 var path = require('node:path');
+const MANAGED_RUNTIME_PERMISSION_KEYS = new Set(['network.request']);
+/**
+ * 判断 permission key 是否由 Runtime 权限快照管理。
+ *
+ * @param key 待判断的 permission key。
+ * @returns 该 key 需要读取 Runtime 权限快照时返回 `true`。
+ */
+function isManagedMiniProgramRuntimePermissionKey(key) {
+    return MANAGED_RUNTIME_PERMISSION_KEYS.has(key);
+}
+/**
+ * 解析服务端权限快照；格式不完整时整份快照失效并 fail closed。
+ *
+ * @param snapshot 待校验的服务端权限快照。
+ * @returns 解析状态和通过校验的受管权限。
+ */
+function parseMiniProgramRuntimePermissions(snapshot) {
+    if (!isRecord(snapshot) || snapshot.schema_version !== 1 || !Array.isArray(snapshot.entries)) {
+        return { valid: false, permissions: {} };
+    }
+    if (snapshot.revision !== undefined && (typeof snapshot.revision !== 'number' || !Number.isInteger(snapshot.revision) || snapshot.revision < 0)) {
+        return { valid: false, permissions: {} };
+    }
+    const seenKeys = new Set();
+    const permissions = {};
+    for (const rawEntry of snapshot.entries) {
+        if (!isRecord(rawEntry) || typeof rawEntry.key !== 'string' || !rawEntry.key.trim()) {
+            return { valid: false, permissions: {} };
+        }
+        const key = rawEntry.key.trim();
+        if (seenKeys.has(key) || (rawEntry.status !== 'enabled' && rawEntry.status !== 'disabled') || !isRecord(rawEntry.config)) {
+            return { valid: false, permissions: {} };
+        }
+        seenKeys.add(key);
+        if (!isManagedMiniProgramRuntimePermissionKey(key)) {
+            continue;
+        }
+        if (key === 'network.request' && typeof rawEntry.config.useOfficialDomain !== 'boolean') {
+            return { valid: false, permissions: {} };
+        }
+        permissions[key] = {
+            key,
+            status: rawEntry.status,
+            config: { useOfficialDomain: rawEntry.config.useOfficialDomain },
+        };
+    }
+    return { valid: true, permissions };
+}
+function isRecord(value) {
+    return typeof value === 'object' && value !== null && !Array.isArray(value);
+}
+const DEFAULT_PERMISSION_STATE = {
+    networkRequest: {
+        status: 'disabled',
+        useOfficialDomain: false,
+    },
+};
+function createMiniProgramMockPermissionState(context) {
+    const parsed = parseMiniProgramRuntimePermissions(context.runtimePermissions);
+    const networkRequest = parsed.permissions['network.request'];
+    return parsed.valid && networkRequest
+        ? {
+            networkRequest: {
+                status: networkRequest.status,
+                useOfficialDomain: networkRequest.config.useOfficialDomain === true,
+            },
+        }
+        : cloneDefaultPermissionState();
+}
+function shouldSkipMiniappPlatformCsp(runtimePermissions) {
+    const parsed = parseMiniProgramRuntimePermissions(runtimePermissions);
+    const networkRequest = parsed.permissions['network.request'];
+    return parsed.valid && networkRequest?.status === 'enabled' && networkRequest.config.useOfficialDomain === true;
+}
+function createMiniProgramMockRuntimePermissions(state) {
+    return {
+        schema_version: 1,
+        entries: [
+            {
+                key: 'network.request',
+                status: state.networkRequest.status,
+                config: {
+                    useOfficialDomain: state.networkRequest.useOfficialDomain,
+                },
+            },
+        ],
+    };
+}
+function cloneDefaultPermissionState() {
+    return {
+        networkRequest: { ...DEFAULT_PERMISSION_STATE.networkRequest },
+    };
+}
 function createRemoteApiClient(options) {
     return {
         listDeveloperEntities: () => listDeveloperEntities(options),
@@ -32,74 +127,74 @@ function createRemoteApiClient(options) {
     };
 }
 async function listDeveloperEntities(runtime) {
-    return remoteGet(index.DEVELOPER_ENTITY_LIST_API_PATH, {}, runtime);
+    return remoteGet(runtimePermissionEnv.DEVELOPER_ENTITY_LIST_API_PATH, {}, runtime);
 }
 async function switchDeveloperEntity(options, runtime) {
-    return (await remotePostForm(index.DEVELOPER_ENTITY_SWITCH_API_PATH, options, runtime, { requireResult: false })) ?? {};
+    return (await remotePostForm(runtimePermissionEnv.DEVELOPER_ENTITY_SWITCH_API_PATH, options, runtime, { requireResult: false })) ?? {};
 }
 async function getDeveloperAccessStatus(runtime) {
-    return remoteGet(index.USER_MINIPROGRAM_ACCESS_STATUS_API_PATH, {}, runtime);
+    return remoteGet(runtimePermissionEnv.USER_MINIPROGRAM_ACCESS_STATUS_API_PATH, {}, runtime);
 }
 async function listUserMiniprograms(options, runtime) {
-    return remoteGet(index.LIST_USER_MINIPROGRAM_API_PATH, options, runtime);
+    return remoteGet(runtimePermissionEnv.LIST_USER_MINIPROGRAM_API_PATH, options, runtime);
 }
 async function createUserMiniprogram(runtime) {
-    return remotePostForm(index.CREATE_USER_MINIPROGRAM_API_PATH, {}, runtime);
+    return remotePostForm(runtimePermissionEnv.CREATE_USER_MINIPROGRAM_API_PATH, {}, runtime);
 }
 async function getUserMiniprogramDetail(options, runtime) {
-    return remoteGet(index.DETAIL_USER_MINIPROGRAM_API_PATH, options, runtime);
+    return remoteGet(runtimePermissionEnv.DETAIL_USER_MINIPROGRAM_API_PATH, options, runtime);
 }
 async function getPreviewAllowlist(options, runtime) {
-    return remoteGet(index.USER_MINIPROGRAM_PREVIEW_ALLOWLIST_API_PATH, options, runtime);
+    return remoteGet(runtimePermissionEnv.USER_MINIPROGRAM_PREVIEW_ALLOWLIST_API_PATH, options, runtime);
 }
 async function updatePreviewAllowlist(options, runtime) {
-    return remotePostForm(index.UPDATE_USER_MINIPROGRAM_PREVIEW_ALLOWLIST_API_PATH, options, runtime);
+    return remotePostForm(runtimePermissionEnv.UPDATE_USER_MINIPROGRAM_PREVIEW_ALLOWLIST_API_PATH, options, runtime);
 }
 async function createUserMiniprogramLeaderboard(options, runtime) {
-    return remotePostForm(index.CREATE_USER_MINIPROGRAM_LEADERBOARD_API_PATH, options, runtime);
+    return remotePostForm(runtimePermissionEnv.CREATE_USER_MINIPROGRAM_LEADERBOARD_API_PATH, options, runtime);
 }
 async function getUserMiniprogramLeaderboard(options, runtime) {
-    return remoteGet(index.DETAIL_USER_MINIPROGRAM_LEADERBOARD_API_PATH, options, runtime);
+    return remoteGet(runtimePermissionEnv.DETAIL_USER_MINIPROGRAM_LEADERBOARD_API_PATH, options, runtime);
 }
 async function listUserMiniprogramLeaderboards(options, runtime) {
-    return remoteGet(index.LIST_USER_MINIPROGRAM_LEADERBOARD_API_PATH, options, runtime);
+    return remoteGet(runtimePermissionEnv.LIST_USER_MINIPROGRAM_LEADERBOARD_API_PATH, options, runtime);
 }
 async function deleteUserMiniprogramLeaderboard(options, runtime) {
-    return (await remotePostForm(index.DELETE_USER_MINIPROGRAM_LEADERBOARD_API_PATH, options, runtime, { requireResult: false })) ?? {};
+    return (await remotePostForm(runtimePermissionEnv.DELETE_USER_MINIPROGRAM_LEADERBOARD_API_PATH, options, runtime, { requireResult: false })) ?? {};
 }
 async function precheckUserMiniprogramVersion(options, runtime) {
-    return remotePostForm(index.PRECHECK_USER_MINIPROGRAM_VERSION_API_PATH, options, runtime);
+    return remotePostForm(runtimePermissionEnv.PRECHECK_USER_MINIPROGRAM_VERSION_API_PATH, options, runtime);
 }
 async function submitUserMiniprogramAudit(options, runtime) {
     const form = { ...options };
     if (form.manifest && typeof form.manifest !== 'string') {
         form.manifest = JSON.stringify(form.manifest);
     }
-    return remotePostForm(index.SUBMIT_USER_MINIPROGRAM_AUDIT_API_PATH, form, runtime);
+    return remotePostForm(runtimePermissionEnv.SUBMIT_USER_MINIPROGRAM_AUDIT_API_PATH, form, runtime);
 }
 async function getVersionPreviewInfo(options, runtime) {
-    return remoteGet(index.USER_MINIPROGRAM_VERSION_PREVIEW_INFO_API_PATH, {
+    return remoteGet(runtimePermissionEnv.USER_MINIPROGRAM_VERSION_PREVIEW_INFO_API_PATH, {
         mini_program_id: options.mini_program_id,
         preview_version: options.version,
     }, runtime);
 }
 async function withdrawUserMiniprogramVersion(options, runtime) {
-    return remotePostForm(index.WITHDRAW_USER_MINIPROGRAM_VERSION_API_PATH, options, runtime);
+    return remotePostForm(runtimePermissionEnv.WITHDRAW_USER_MINIPROGRAM_VERSION_API_PATH, options, runtime);
 }
 async function releaseUserMiniprogramVersion(options, runtime) {
-    return remotePostForm(index.RELEASE_USER_MINIPROGRAM_VERSION_API_PATH, options, runtime);
+    return remotePostForm(runtimePermissionEnv.RELEASE_USER_MINIPROGRAM_VERSION_API_PATH, options, runtime);
 }
 async function takeDownUserMiniprogram(options, runtime) {
-    return remotePostForm(index.TAKE_DOWN_USER_MINIPROGRAM_API_PATH, options, runtime);
+    return remotePostForm(runtimePermissionEnv.TAKE_DOWN_USER_MINIPROGRAM_API_PATH, options, runtime);
 }
 async function reopenUserMiniprogram(options, runtime) {
-    return remotePostForm(index.REOPEN_USER_MINIPROGRAM_API_PATH, options, runtime);
+    return remotePostForm(runtimePermissionEnv.REOPEN_USER_MINIPROGRAM_API_PATH, options, runtime);
 }
 async function updateSquareDisplay(options, runtime) {
-    return remotePostForm(index.UPDATE_SQUARE_DISPLAY_API_PATH, options, runtime);
+    return remotePostForm(runtimePermissionEnv.UPDATE_SQUARE_DISPLAY_API_PATH, options, runtime);
 }
 async function listUserMiniprogramVersions(options, runtime) {
-    return remoteGet(index.LIST_USER_MINIPROGRAM_VERSION_API_PATH, options, runtime);
+    return remoteGet(runtimePermissionEnv.LIST_USER_MINIPROGRAM_VERSION_API_PATH, options, runtime);
 }
 async function remoteGet(path, query, runtime) {
     const pathWithQuery = createPathWithQuery(path, query);
@@ -302,10 +397,14 @@ function isTruthyEnvFlag(value) {
 }
 exports.MiniProgramProjectBindingError = MiniProgramProjectBindingError;
+exports.createMiniProgramMockPermissionState = createMiniProgramMockPermissionState;
+exports.createMiniProgramMockRuntimePermissions = createMiniProgramMockRuntimePermissions;
 exports.createRemoteApiClientForEnvironment = createRemoteApiClientForEnvironment;
 exports.getBoundMiniProgram = getBoundMiniProgram;
+exports.parseMiniProgramRuntimePermissions = parseMiniProgramRuntimePermissions;
 exports.readBoundMiniProgramId = readBoundMiniProgramId;
 exports.readBoundMiniProgramIdFromPackageJson = readBoundMiniProgramIdFromPackageJson;
 exports.readMiniProgramProjectPackage = readMiniProgramProjectPackage;
 exports.resolveRemoteEnvironment = resolveRemoteEnvironment;
+exports.shouldSkipMiniappPlatformCsp = shouldSkipMiniappPlatformCsp;
 exports.writeBoundMiniProgramId = writeBoundMiniProgramId;

package/dist/cli-chunks/{create-B5gGBaSV.cjs → create-uQS30kS_.cjs} RENAMED Viewed

@@ -5,7 +5,7 @@ var fs = require('node:fs/promises');
 var path = require('node:path');
 var require$$0 = require('fs');
 var require$$1 = require('path');
-var index = require('./index-QAkYgxPI.cjs');
+var index = require('./index-19i3Dr5H.cjs');
 require('node:module');
 require('os');
 require('readline');

package/dist/cli-chunks/{dev-BcCWCeac.cjs → dev-1wE8dNiL.cjs} RENAMED Viewed

@@ -6,32 +6,33 @@ var path = require('node:path');
 var net = require('node:net');
 var promises = require('node:dns/promises');
 var node_http = require('node:http');
+var context = require('./context-DvTynj3F.cjs');
 var node_crypto = require('node:crypto');
 var undici = require('undici');
 var browser = require('./browser-RAy8e8cV.cjs');
-var index = require('./index-QAkYgxPI.cjs');
-var projectVite = require('./project-vite-VcJMyz1l.cjs');
-var context = require('./context-CvZs9ZBf.cjs');
+var index = require('./index-19i3Dr5H.cjs');
+var projectVite = require('./project-vite-Dl3OoQjL.cjs');
 var fs$1 = require('node:fs/promises');
+var runtimePermissionEnv = require('./runtime-permission-env-BSs4uCNa.cjs');
+require('./session-DJEuhrgq.cjs');
+require('fs');
+require('constants');
+require('stream');
+require('util');
+require('assert');
+require('path');
 require('node:process');
 require('node:buffer');
 require('node:url');
 require('node:util');
 require('node:child_process');
 require('node:module');
-require('path');
 require('os');
 require('readline');
 require('tty');
-require('assert');
 require('events');
-require('stream');
 require('buffer');
-require('util');
-require('./session-YJ8xNESM.cjs');
-require('fs');
-require('constants');
-require('./index-BQm5XmMC.cjs');
+require('node:async_hooks');
 class Locked extends Error {
 	constructor(port) {
@@ -195,58 +196,6 @@ async function getPorts(options) {
 	throw new Error('No available ports found');
 }
-const MANAGED_RUNTIME_PERMISSION_KEYS = new Set(['network.request']);
-/**
- * 判断 permission key 是否由 Runtime 权限快照管理。
- *
- * @param key 待判断的 permission key。
- * @returns 该 key 需要读取 Runtime 权限快照时返回 `true`。
- */
-function isManagedMiniProgramRuntimePermissionKey(key) {
-    return MANAGED_RUNTIME_PERMISSION_KEYS.has(key);
-}
-/**
- * 解析服务端权限快照；格式不完整时整份快照失效并 fail closed。
- *
- * @param snapshot 待校验的服务端权限快照。
- * @returns 解析状态和通过校验的受管权限。
- */
-function parseMiniProgramRuntimePermissions(snapshot) {
-    if (!isRecord$2(snapshot) || snapshot.schema_version !== 1 || !Array.isArray(snapshot.entries)) {
-        return { valid: false, permissions: {} };
-    }
-    if (snapshot.revision !== undefined && (typeof snapshot.revision !== 'number' || !Number.isInteger(snapshot.revision) || snapshot.revision < 0)) {
-        return { valid: false, permissions: {} };
-    }
-    const seenKeys = new Set();
-    const permissions = {};
-    for (const rawEntry of snapshot.entries) {
-        if (!isRecord$2(rawEntry) || typeof rawEntry.key !== 'string' || !rawEntry.key.trim()) {
-            return { valid: false, permissions: {} };
-        }
-        const key = rawEntry.key.trim();
-        if (seenKeys.has(key) || (rawEntry.status !== 'enabled' && rawEntry.status !== 'disabled') || !isRecord$2(rawEntry.config)) {
-            return { valid: false, permissions: {} };
-        }
-        seenKeys.add(key);
-        if (!isManagedMiniProgramRuntimePermissionKey(key)) {
-            continue;
-        }
-        if (key === 'network.request' && typeof rawEntry.config.useOfficialDomain !== 'boolean') {
-            return { valid: false, permissions: {} };
-        }
-        permissions[key] = {
-            key,
-            status: rawEntry.status,
-            config: { useOfficialDomain: rawEntry.config.useOfficialDomain },
-        };
-    }
-    return { valid: true, permissions };
-}
-function isRecord$2(value) {
-    return typeof value === 'object' && value !== null && !Array.isArray(value);
-}
 /** Dev Shell 读取局域网 Dev Session endpoint 的 query 参数。 */
 /** Mock Host 创建和读取 Dev Session 的固定路径。 */
 const MINI_PROGRAM_DEV_CONTEXT_PATH = '/__hb_sdk__/dev-context';
@@ -692,7 +641,7 @@ function validateDevSessionCreatePayload(payload, allowedMiniUrlOrigins) {
         !allowedMiniUrlOrigins.has(miniUrlOrigin.origin)) {
         throw new TypeError('mini_url_origin must be an allowed LAN origin');
     }
-    const parsedPermissions = parseMiniProgramRuntimePermissions(payload.runtime_permissions);
+    const parsedPermissions = context.parseMiniProgramRuntimePermissions(payload.runtime_permissions);
     if (!parsedPermissions.valid) {
         throw new TypeError('runtime_permissions is invalid');
     }
@@ -1035,7 +984,7 @@ async function handleDevPermissionMutation(request, response, controller) {
         if (!isRecord$1(payload) || Object.keys(payload).length !== 1 || !Object.hasOwn(payload, 'runtime_permissions')) {
             throw createMockHostError(400, 'INVALID_DEV_PERMISSIONS', 'Dev permissions update body is invalid');
         }
-        const parsed = parseMiniProgramRuntimePermissions(payload.runtime_permissions);
+        const parsed = context.parseMiniProgramRuntimePermissions(payload.runtime_permissions);
         if (!parsed.valid) {
             throw createMockHostError(400, 'INVALID_DEV_PERMISSIONS', 'runtime_permissions is invalid');
         }
@@ -1218,48 +1167,10 @@ function createHeyboxProtocol(payload) {
     return `heybox://${encodeURIComponent(JSON.stringify(payload))}`;
 }
-const DEFAULT_PERMISSION_STATE = {
-    networkRequest: {
-        status: 'disabled',
-        useOfficialDomain: false,
-    },
-};
-function createMiniProgramMockPermissionState(context) {
-    const parsed = parseMiniProgramRuntimePermissions(context.runtimePermissions);
-    const networkRequest = parsed.permissions['network.request'];
-    return parsed.valid && networkRequest
-        ? {
-            networkRequest: {
-                status: networkRequest.status,
-                useOfficialDomain: networkRequest.config.useOfficialDomain === true,
-            },
-        }
-        : cloneDefaultPermissionState();
-}
-function createMiniProgramMockRuntimePermissions(state) {
-    return {
-        schema_version: 1,
-        entries: [
-            {
-                key: 'network.request',
-                status: state.networkRequest.status,
-                config: {
-                    useOfficialDomain: state.networkRequest.useOfficialDomain,
-                },
-            },
-        ],
-    };
-}
-function cloneDefaultPermissionState() {
-    return {
-        networkRequest: { ...DEFAULT_PERMISSION_STATE.networkRequest },
-    };
-}
 /** 构建时替换为当前发布包的实际版本。 */
 const HB_SDK_VERSION = typeof undefined === 'string'
     ? undefined
-    : '0.6.6-alpha.3';
+    : '0.6.6-alpha.4';
 class DevPermissionOverrideStoreError extends Error {
     code;
@@ -1430,7 +1341,7 @@ async function runDevCommand(options, runtime = {}) {
         projectRoot,
     });
     const vite = await logger.task('正在加载项目 Vite', () => projectVite.loadProjectVite(projectRoot), { successText: '已加载项目 Vite' });
-    const appServer = await logger.task('正在创建 Vite dev server', () => withManagedDevOutputEnv(() => vite.createServer(createViteServerOptions(projectRoot, resolvedOptions)), runtime.env), { successText: '已创建 Vite dev server' });
+    const appServer = await logger.task('正在创建 Vite dev server', () => withManagedDevOutputEnv(() => vite.createServer(createViteServerOptions(projectRoot, resolvedOptions)), runtime.env, devLaunchContext.runtimePermissions), { successText: '已创建 Vite dev server' });
     await logger.task('正在启动 Vite dev server', () => appServer.listen(appPort), {
         successText: 'Vite dev server 已启动',
     });
@@ -1547,7 +1458,7 @@ function createDevPermissionController(options) {
             source: devContext.source,
             ...(miniProgramId ? { mini_program_id: miniProgramId } : {}),
             ...(isRuntimePermissionsSnapshot(devContext.runtimePermissions) ? { remote_permissions: devContext.runtimePermissions } : {}),
-            ...(overrides ? { override_permissions: createMiniProgramMockRuntimePermissions(overrides) } : {}),
+            ...(overrides ? { override_permissions: context.createMiniProgramMockRuntimePermissions(overrides) } : {}),
             ...(error ? { persistence_error: error } : {}),
         };
     };
@@ -1584,7 +1495,7 @@ function createDevPermissionController(options) {
             return createConfiguration(undefined);
         },
         async save(runtimePermissions) {
-            const overrides = createMiniProgramMockPermissionState({
+            const overrides = context.createMiniProgramMockPermissionState({
                 runtimePermissions,
             });
             try {
@@ -1602,7 +1513,7 @@ function createDevPermissionController(options) {
     };
 }
 function isRuntimePermissionsSnapshot(value) {
-    return parseMiniProgramRuntimePermissions(value).valid;
+    return context.parseMiniProgramRuntimePermissions(value).valid;
 }
 async function loadRemoteDevContextWithTimeout(options) {
     const controller = new AbortController();
@@ -1744,18 +1655,18 @@ function rewriteLocalhostUrl(input) {
 function isLocalhostHost(hostname) {
     return hostname === 'localhost' || hostname === '::1' || hostname === '[::1]';
 }
-async function withManagedDevOutputEnv(action, env = process.env) {
-    const previous = env[MANAGED_DEV_OUTPUT_ENV];
+async function withManagedDevOutputEnv(action, env = process.env, runtimePermissions) {
+    const previousManagedOutput = env[MANAGED_DEV_OUTPUT_ENV];
     env[MANAGED_DEV_OUTPUT_ENV] = '1';
     try {
-        return await action();
+        return await runtimePermissionEnv.withMiniappPlatformCspEnv(context.shouldSkipMiniappPlatformCsp(runtimePermissions), action, env);
     }
     finally {
-        if (previous === undefined) {
+        if (previousManagedOutput === undefined) {
             delete env[MANAGED_DEV_OUTPUT_ENV];
         }
         else {
-            env[MANAGED_DEV_OUTPUT_ENV] = previous;
+            env[MANAGED_DEV_OUTPUT_ENV] = previousManagedOutput;
         }
     }
 }

package/dist/cli-chunks/{doctor-BhBM4cWH.cjs → doctor-B2aCUOQ7.cjs} RENAMED Viewed

@@ -4,7 +4,7 @@ var fs$1 = require('node:fs');
 var fs = require('node:fs/promises');
 var os = require('node:os');
 var path = require('node:path');
-var index = require('./index-QAkYgxPI.cjs');
+var index = require('./index-19i3Dr5H.cjs');
 require('node:module');
 require('path');
 require('os');