@heybox/hb-sdk 0.6.8-alpha.1 → 0.6.8

package/dist/cli-chunks/{remote-Cf4i1DSL.cjs → remote-CfpkkC9I.cjs}

@@ -1,15 +1,15 @@
 'use strict';
 
 var promises = require('node:readline/promises');
-var index = require('./index-e2GK8bAH.cjs');
-var session = require('./session-z1D8xVrB.cjs');
+var index = require('./index-CSjJrnkO.cjs');
+var session = require('./session-DB7ARwm4.cjs');
 var childProcess = require('node:child_process');
 var fs = require('node:fs');
 var fs$1 = require('node:fs/promises');
 var path = require('node:path');
-var index$1 = require('./index-v4-6fbXX.cjs');
-var runtimeGate = require('./runtime-gate-DfMJQGH9.cjs');
-var context = require('./context-CQ5481xZ.cjs');
+var runtimePermissionEnv = require('./runtime-permission-env-B0jK9Rt1.cjs');
+var runtimeGate = require('./runtime-gate-CgN_v4Te.cjs');
+var context = require('./context-fRWWSXDj.cjs');
 require('node:module');
 require('path');
 require('os');
@@ -23,6 +23,7 @@ require('util');
 require('node:crypto');
 require('fs');
 require('constants');
+require('node:async_hooks');
 
 async function getCDNUploadInfo(options, runtime = {}) {
     const body = new URLSearchParams();
@@ -69,7 +70,7 @@ async function runUpload(options, runtime = {}) {
     const postCDNUploadCallback$1 = runtime.postCDNUploadCallback ?? postCDNUploadCallback;
     const createReadStream = runtime.createReadStream ?? fs.createReadStream;
     const orderedFiles = [...options.files].sort((a, b) => a.relativePath.localeCompare(b.relativePath));
-    const batches = chunkUploadFiles(orderedFiles, index$1.MINIAPP_UPLOAD_BATCH_SIZE);
+    const batches = chunkUploadFiles(orderedFiles, runtimePermissionEnv.MINIAPP_UPLOAD_BATCH_SIZE);
     await logger.task(`正在上传 ${orderedFiles.length} 个文件`, async (taskContext) => {
         logger.debug(`上传并发数: ${concurrency}`);
         logger.debug(`上传批次数: ${batches.length}`);
@@ -79,7 +80,7 @@ async function runUpload(options, runtime = {}) {
             logger.debug(`正在处理上传批次 ${batchIndex + 1}/${batches.length}，文件数: ${batch.length}`);
             logger.debug('正在获取 CDN 上传信息');
             const fileInfos = createUploadFileInfos(batch, options);
-            const uploadInfo = await getCDNUploadInfo$1({ session: options.session, scope: index$1.MINIAPP_UPLOAD_SCOPE, fileInfos, needCache: false }, { baseUrl: runtime.baseUrl, fetchImpl });
+            const uploadInfo = await getCDNUploadInfo$1({ session: options.session, scope: runtimePermissionEnv.MINIAPP_UPLOAD_SCOPE, fileInfos, needCache: false }, { baseUrl: runtime.baseUrl, fetchImpl });
             logger.debug(`CDN bucket: ${uploadInfo.bucket}`);
             logger.debug(`CDN region: ${uploadInfo.region}`);
             validateUploadInfoKeys(batch, uploadInfo.keys, options);
@@ -140,7 +141,7 @@ function createUploadFileInfos(files, options) {
         name: file.relativePath.split('/').pop() ?? file.relativePath,
         mimetype: file.mimeType,
         fsize: file.size,
-        path: index$1.getMiniappUploadKey({
+        path: runtimePermissionEnv.getMiniappUploadKey({
             miniProgramId: options.miniProgramId,
             version: options.version,
             relativePath: file.relativePath,
@@ -151,15 +152,15 @@ function validateUploadInfoKeys(files, keys, options) {
     if (keys.length !== files.length) {
         throw new index.CliError(`CDN 上传接口返回 key 数量异常：期望 ${files.length}，实际 ${keys.length}`);
     }
-    for (let index$2 = 0; index$2 < files.length; index$2 += 1) {
-        const expectedKey = index$1.getMiniappUploadKey({
+    for (let index$1 = 0; index$1 < files.length; index$1 += 1) {
+        const expectedKey = runtimePermissionEnv.getMiniappUploadKey({
             miniProgramId: options.miniProgramId,
             version: options.version,
-            relativePath: files[index$2].relativePath,
+            relativePath: files[index$1].relativePath,
         });
-        const actualKey = keys[index$2];
+        const actualKey = keys[index$1];
         if (actualKey !== expectedKey) {
-            throw new index.CliError(`CDN 上传接口返回 key 异常：${files[index$2].relativePath}`, [`CDN 上传接口返回 key 异常：${files[index$2].relativePath}`, `expected: ${expectedKey}`, `actual: ${actualKey}`].join('\n'));
+            throw new index.CliError(`CDN 上传接口返回 key 异常：${files[index$1].relativePath}`, [`CDN 上传接口返回 key 异常：${files[index$1].relativePath}`, `expected: ${expectedKey}`, `actual: ${actualKey}`].join('\n'));
         }
     }
 }
@@ -191,7 +192,7 @@ async function createDefaultCosClient(uploadToken) {
     };
 }
 async function loadCosConstructor() {
-    const cosModule = await Promise.resolve().then(function () { return require('./index-BVNo9ygg.cjs'); }).then(function (n) { return n.index; });
+    const cosModule = await Promise.resolve().then(function () { return require('./index-DxH41nsb.cjs'); }).then(function (n) { return n.index; });
     return cosModule.default;
 }
 function formatSize(bytes) {
@@ -235,7 +236,7 @@ function isRecord(value) {
 }
 
 async function precheckUserMiniprogramVersion(options, runtime = {}) {
-    return postUserMiniprogramVersionForm(index$1.PRECHECK_USER_MINIPROGRAM_VERSION_API_PATH, options, {
+    return postUserMiniprogramVersionForm(runtimePermissionEnv.PRECHECK_USER_MINIPROGRAM_VERSION_API_PATH, options, {
         // 展示资料由服务端沿用 last approved 或注入默认名/默认图；CLI 不传 name/icon/cover。
         ...(options.version ? { version: options.version } : {}),
         ...(options.source_version ? { source_version: options.source_version } : {}),
@@ -244,7 +245,7 @@ async function precheckUserMiniprogramVersion(options, runtime = {}) {
     }, runtime);
 }
 async function submitUserMiniprogramAudit(options, runtime = {}) {
-    return postUserMiniprogramVersionForm(index$1.SUBMIT_USER_MINIPROGRAM_AUDIT_API_PATH, options, {
+    return postUserMiniprogramVersionForm(runtimePermissionEnv.SUBMIT_USER_MINIPROGRAM_AUDIT_API_PATH, options, {
         // 展示资料由服务端沿用 last approved 或注入默认名/默认图；CLI 不传 name/icon/cover。
         ...(options.manifest ? { manifest: JSON.stringify(options.manifest) } : {}),
         ...(options.source_version ? { source_version: options.source_version } : {}),
@@ -341,12 +342,29 @@ async function runDeployCommand(options, runtime = {}) {
             releaseNote,
             autoPublish,
         }, runtime, apiBaseUrl, projectRoot, logger);
+        let skipPlatformCsp = false;
+        try {
+            const { detail } = await logger.task('正在读取远端小程序权限', () => (runtime.getBoundMiniProgram ?? context.getBoundMiniProgram)({
+                allowUnsafeApiBaseUrl: options.allowUnsafeApiBaseUrl,
+                apiBaseUrl,
+                cwd: projectRoot,
+                env,
+                fetchImpl: runtime.fetchImpl,
+                loginBaseUrl,
+                session: session$1,
+            }), { successText: '已读取远端小程序权限' });
+            skipPlatformCsp = context.shouldSkipMiniappPlatformCsp(detail.runtime_permissions);
+        }
+        catch (error) {
+            logger.warn('未读取到远端 Runtime 权限，构建将继续注入平台 CSP。');
+            logger.debug(`远端 Runtime 权限读取失败详情：${index.readRedactedErrorMessage(error, { verbose: true })}`);
+        }
         const pm = detectPackageManager(projectRoot);
         const platform = runtime.platform ?? process.platform;
         const buildMode = validateBuildMode(env.HB_SDK_ENV?.trim(), platform);
         logger.info(`开始构建: ${pm} ${createBuildArgs(pm, buildMode).join(' ')}`);
         await runBuildScript(pm, projectRoot, runtime.spawn ?? childProcess.spawn, {
-            env,
+            env: runtimePermissionEnv.createMiniappPlatformCspEnv(env, skipPlatformCsp),
             mode: buildMode,
             outputMode: options.buildOutputMode ?? 'inherit',
             platform,
@@ -366,16 +384,16 @@ async function runDeployCommand(options, runtime = {}) {
         }
         const uploadFiles = await logger.task('正在校验 dist 上传文件', async () => {
             const allFiles = await walkDistFiles(distDir);
-            const blocked = allFiles.find((entry) => index$1.relativePathContainsNodeModulesSegment(entry.relativePath));
+            const blocked = allFiles.find((entry) => runtimePermissionEnv.relativePathContainsNodeModulesSegment(entry.relativePath));
             if (blocked) {
                 throw new Error(`dist 目录含 node_modules：${blocked.relativePath}`);
             }
-            const files = allFiles.filter((entry) => index$1.shouldUploadDistFile(entry.relativePath));
-            const pathError = index$1.validateUploadPaths(files, { miniProgramId, version, maxLength: index$1.ACTIVITY_UPLOAD_KEY_MAX_LENGTH });
+            const files = allFiles.filter((entry) => runtimePermissionEnv.shouldUploadDistFile(entry.relativePath));
+            const pathError = runtimePermissionEnv.validateUploadPaths(files, { miniProgramId, version, maxLength: runtimePermissionEnv.ACTIVITY_UPLOAD_KEY_MAX_LENGTH });
             if (pathError) {
                 throw new Error(pathError);
             }
-            const sizeError = index$1.validateUploadTotalSize(files);
+            const sizeError = runtimePermissionEnv.validateUploadTotalSize(files);
             if (sizeError) {
                 throw new Error(sizeError);
             }
@@ -602,7 +620,7 @@ async function walkDistFiles(distDir) {
             }
             const fileStat = await fs$1.stat(absPath);
             results.push({
-                relativePath: index$1.normalizeRelativePath(relPath),
+                relativePath: runtimePermissionEnv.normalizeRelativePath(relPath),
                 absolutePath: absPath,
                 size: fileStat.size,
                 mimeType: inferMimeType(entry.name),

package/dist/cli-chunks/{runtime-gate-DfMJQGH9.cjs → runtime-gate-CgN_v4Te.cjs}

@@ -1,6 +1,6 @@
 'use strict';
 
-var index = require('./index-v4-6fbXX.cjs');
+var runtimePermissionEnv = require('./runtime-permission-env-B0jK9Rt1.cjs');
 
 function isValidMiniappManifestVersion(version) {
     return getMiniappManifestVersionError(version) === undefined;
@@ -41,7 +41,7 @@ function validateSdkVersion(version, sourceLabel = 'sdkVersion') {
         throw new Error(`${sourceLabel} 必须是合法 SemVer：${String(version)}`);
     }
     const normalized = version.trim();
-    const parsed = index.semverExports.parse(normalized);
+    const parsed = runtimePermissionEnv.semverExports.parse(normalized);
     if (!parsed || parsed.version !== normalized || parsed.build.length > 0) {
         throw new Error(`${sourceLabel} 必须是合法 SemVer：${normalized}`);
     }
@@ -55,7 +55,7 @@ function getMiniappManifestVersionError(version) {
         return `必须是合法 SemVer：${String(version)}`;
     }
     const normalized = version.trim();
-    const parsed = index.semverExports.parse(normalized);
+    const parsed = runtimePermissionEnv.semverExports.parse(normalized);
     if (!parsed) {
         return `必须是合法 SemVer：${normalized}`;
     }

package/dist/cli-chunks/{index-v4-6fbXX.cjs → runtime-permission-env-B0jK9Rt1.cjs}

@@ -1,5 +1,7 @@
 'use strict';
 
+var node_async_hooks = require('node:async_hooks');
+
 var re = {exports: {}};
 
 var constants;
@@ -2906,6 +2908,72 @@ function shouldUploadDistFile(relativePath) {
     return true;
 }
 
+const HB_SDK_RUNTIME_USE_OFFICIAL_DOMAIN_ENV = 'HB_SDK_RUNTIME_USE_OFFICIAL_DOMAIN';
+const HB_SDK_RUNTIME_PERMISSION_CONTEXT_ENV = 'HB_SDK_RUNTIME_PERMISSION_CONTEXT';
+const VERIFIED_RUNTIME_PERMISSION_CONTEXT = 'verified';
+const environmentScopeStorage = new node_async_hooks.AsyncLocalStorage();
+let environmentScopeTail = Promise.resolve();
+function shouldSkipMiniappPlatformCspFromEnv(env = process.env) {
+    return env[HB_SDK_RUNTIME_PERMISSION_CONTEXT_ENV] === VERIFIED_RUNTIME_PERMISSION_CONTEXT && env[HB_SDK_RUNTIME_USE_OFFICIAL_DOMAIN_ENV] === '1';
+}
+function createMiniappPlatformCspEnv(env, skipPlatformCsp) {
+    return {
+        ...env,
+        [HB_SDK_RUNTIME_PERMISSION_CONTEXT_ENV]: VERIFIED_RUNTIME_PERMISSION_CONTEXT,
+        [HB_SDK_RUNTIME_USE_OFFICIAL_DOMAIN_ENV]: skipPlatformCsp ? '1' : '0',
+    };
+}
+async function withMiniappPlatformCspEnv(skipPlatformCsp, action, env = process.env) {
+    if (environmentScopeStorage.getStore()?.active) {
+        return runMiniappPlatformCspEnvScope(skipPlatformCsp, action, env);
+    }
+    let releaseScope = () => undefined;
+    const previousScope = environmentScopeTail;
+    environmentScopeTail = new Promise((resolve) => {
+        releaseScope = resolve;
+    });
+    await previousScope;
+    const scope = { active: true };
+    try {
+        return await environmentScopeStorage.run(scope, () => runMiniappPlatformCspEnvScope(skipPlatformCsp, action, env));
+    }
+    finally {
+        scope.active = false;
+        releaseScope();
+    }
+}
+async function runMiniappPlatformCspEnvScope(skipPlatformCsp, action, env) {
+    const targets = env === process.env ? [env] : [env, process.env];
+    const previousValues = targets.map((target) => ({
+        context: target[HB_SDK_RUNTIME_PERMISSION_CONTEXT_ENV],
+        officialDomain: target[HB_SDK_RUNTIME_USE_OFFICIAL_DOMAIN_ENV],
+    }));
+    for (const target of targets) {
+        target[HB_SDK_RUNTIME_PERMISSION_CONTEXT_ENV] = VERIFIED_RUNTIME_PERMISSION_CONTEXT;
+        target[HB_SDK_RUNTIME_USE_OFFICIAL_DOMAIN_ENV] = skipPlatformCsp ? '1' : '0';
+    }
+    try {
+        return await action();
+    }
+    finally {
+        targets.forEach((target, index) => {
+            const previousValue = previousValues[index];
+            if (previousValue?.context === undefined) {
+                delete target[HB_SDK_RUNTIME_PERMISSION_CONTEXT_ENV];
+            }
+            else {
+                target[HB_SDK_RUNTIME_PERMISSION_CONTEXT_ENV] = previousValue.context;
+            }
+            if (previousValue?.officialDomain === undefined) {
+                delete target[HB_SDK_RUNTIME_USE_OFFICIAL_DOMAIN_ENV];
+            }
+            else {
+                target[HB_SDK_RUNTIME_USE_OFFICIAL_DOMAIN_ENV] = previousValue.officialDomain;
+            }
+        });
+    }
+}
+
 exports.ACTIVITY_UPLOAD_KEY_MAX_LENGTH = ACTIVITY_UPLOAD_KEY_MAX_LENGTH;
 exports.CREATE_USER_MINIPROGRAM_API_PATH = CREATE_USER_MINIPROGRAM_API_PATH;
 exports.CREATE_USER_MINIPROGRAM_LEADERBOARD_API_PATH = CREATE_USER_MINIPROGRAM_LEADERBOARD_API_PATH;
@@ -2930,11 +2998,14 @@ exports.USER_MINIPROGRAM_ACCESS_STATUS_API_PATH = USER_MINIPROGRAM_ACCESS_STATUS
 exports.USER_MINIPROGRAM_PREVIEW_ALLOWLIST_API_PATH = USER_MINIPROGRAM_PREVIEW_ALLOWLIST_API_PATH;
 exports.USER_MINIPROGRAM_VERSION_PREVIEW_INFO_API_PATH = USER_MINIPROGRAM_VERSION_PREVIEW_INFO_API_PATH;
 exports.WITHDRAW_USER_MINIPROGRAM_VERSION_API_PATH = WITHDRAW_USER_MINIPROGRAM_VERSION_API_PATH;
+exports.createMiniappPlatformCspEnv = createMiniappPlatformCspEnv;
 exports.getMiniappUploadKey = getMiniappUploadKey;
 exports.normalizeRelativePath = normalizeRelativePath;
 exports.relativePathContainsNodeModulesSegment = relativePathContainsNodeModulesSegment;
 exports.requireSemver = requireSemver;
 exports.semverExports = semverExports;
+exports.shouldSkipMiniappPlatformCspFromEnv = shouldSkipMiniappPlatformCspFromEnv;
 exports.shouldUploadDistFile = shouldUploadDistFile;
 exports.validateUploadPaths = validateUploadPaths;
 exports.validateUploadTotalSize = validateUploadTotalSize;
+exports.withMiniappPlatformCspEnv = withMiniappPlatformCspEnv;

package/dist/cli-chunks/{session-z1D8xVrB.cjs → session-DB7ARwm4.cjs}

@@ -1,6 +1,6 @@
 'use strict';
 
-var index = require('./index-e2GK8bAH.cjs');
+var index = require('./index-CSjJrnkO.cjs');
 var node_crypto = require('node:crypto');
 var path = require('node:path');
 var require$$0$2 = require('fs');

package/dist/cli.cjs

@@ -1,6 +1,6 @@
 'use strict';
 
-var index = require('./cli-chunks/index-e2GK8bAH.cjs');
+var index = require('./cli-chunks/index-CSjJrnkO.cjs');
 require('node:module');
 require('node:fs');
 require('node:fs/promises');