@heybox/hb-sdk 0.7.0-alpha.5 → 0.7.0

package/CHANGELOG.md

@@ -1,5 +1,19 @@
 # Changelog
 
+## 0.7.0
+
+- No user-facing hb-sdk package changes were detected from Conventional Commits.
+
+## 0.7.0-alpha.9
+
+### SDK
+
+- 移除旧的公开 readiness 方法；能力调用继续自动等待握手，并新增 `getHandshakeState()` 与 `onHandshakeStateChange()`，供业务查询、立即接收并订阅 `connecting | ready | failed` 持久状态。`ready` 生命周期事件仅保留为不可重放的边沿通知。
+
+### Runtime
+
+- 修复授权能力的可信手势归属：Runtime 与浏览器 Mock 复用同一套请求级判定，并按已验证的当前 bridge 请求生成手势快照，避免异步等待、规则漂移或其他窗口操作误用用户手势。
+
 ## 0.7.0-alpha.3
 
 ### SDK

package/README.md

@@ -23,13 +23,14 @@ npm run dev
 npm install @heybox/hb-sdk
 ```
 
-页面启动时先等待 SDK 就绪。未开通网络权限的小程序可以读取当前小程序内的隔离身份：
+SDK 会在导入时启动握手，能力调用会自动等待 SDK 就绪。未开通网络权限的小程序可以读取当前小程序内的隔离身份：
+
+需要可信用户手势的按钮不能在点击回调里等待握手。页面加载时先用 `getHandshakeState()` 读取当前状态，再用 `onHandshakeStateChange()` 订阅并立即接收当前状态；仅在 `status === 'ready'` 时启用按钮，并在组件或页面销毁时调用订阅返回的取消函数。`ready` 生命周期事件只是握手成功瞬间派发、不会重放的边沿通知，不能用来判断当前状态。
 
 ```ts
 import hbSDK from '@heybox/hb-sdk';
 
 async function getLocalIdentityFromUserAction() {
-  await hbSDK.ready();
   const { appUserId } = await hbSDK.user.getLocalIdentity();
   return appUserId;
 }
@@ -83,27 +84,25 @@ export default defineConfig({
 
 ## 错误处理
 
-初始化或能力调用失败时，SDK 会抛出公开错误：
+握手失败会保留在持久状态中，可在订阅回放时直接处理原始错误：
 
 ```ts
-import hbSDK, { HbMiniProgramSDKError } from '@heybox/hb-sdk';
-
-try {
-  await hbSDK.ready();
-} catch (error) {
-  if (error instanceof HbMiniProgramSDKError) {
-    console.error(error.code, error.message);
-  } else {
-    throw error;
+import hbSDK from '@heybox/hb-sdk';
+
+const stopHandshakeState = hbSDK.onHandshakeStateChange((state) => {
+  if (state.status === 'failed') {
+    console.error(state.error.code, state.error.message);
   }
-}
+});
+
+window.addEventListener('unload', stopHandshakeState, { once: true });
 ```
 
-网络状态码校验失败会抛出 `HbMiniProgramNetworkError`。错误字段和处理建议见 [API Reference](https://docs.xiaoheihe.cn/hb_sdk/reference/)。
+能力调用失败会抛出 `HbMiniProgramSDKError`，网络状态码校验失败会抛出 `HbMiniProgramNetworkError`。错误字段和处理建议见 [API Reference](https://docs.xiaoheihe.cn/hb_sdk/reference/)。
 
 ## 能力概览
 
-除 `ready()` 外，SDK 还提供 `on()` 和 `off()` 处理前后台、登录态等生命周期事件。
+SDK 还提供 `getHandshakeState()` / `onHandshakeStateChange()` 管理持久握手状态，并通过 `on()` / `off()` 处理前后台、登录态等生命周期事件。
 
 | 模块         | 用途                                                         |
 | ------------ | ------------------------------------------------------------ |
@@ -122,7 +121,9 @@ try {
 
 ## 关键约束
 
-- `ready()` 只表示 SDK 可调用，不表示已取得用户授权。
+- SDK 会自动等待与父容器完成握手；握手失败会在能力调用时抛出公开 SDK 错误。
+- 交互控件通过 `getHandshakeState()` 和 `onHandshakeStateChange()` 判断是否可用，只在 `status === 'ready'` 时启用；销毁时取消订阅。
+- `ready` 生命周期事件是不可重放的边沿通知，不代表可查询状态，也不能替代握手状态 API。
 - `auth.login({ scopes? })` 只返回 `{ code, expiresIn: 300, scopes }`；identity 隐式强制包含，code 只能提交给开发者服务端。
 - 需要授权 UI 时，`auth.login()` 必须来自可信用户手势，否则返回 `USER_GESTURE_REQUIRED`；用户取消或关闭时返回 `AUTHORIZATION_CANCELLED`。已授权时可以静默返回新 code。
 - `user.getSteamGameList()` 仅供未开通网络权限的小程序通过 Host 读取；已开通网络权限时返回 `SERVER_API_REQUIRED`，且授权码与 OpenAPI 不提供 Steam 游戏库 scope 或资源接口。

package/dist/cli-chunks/{build-35mI_IwM.cjs → build-CsXk21Yi.cjs}

@@ -5,8 +5,8 @@ var fs = require('node:fs/promises');
 var path = require('node:path');
 var runtimePermissionEnv = require('./runtime-permission-env-D-8_jPG3.cjs');
 var runtimeGate = require('./runtime-gate-CtV7rWyX.cjs');
-var index = require('./index-CgCp6jGG.cjs');
-var projectVite = require('./project-vite-TBMlJw8y.cjs');
+var index = require('./index-EYRMHb10.cjs');
+var projectVite = require('./project-vite-eJ89lO8_.cjs');
 require('node:async_hooks');
 require('node:module');
 require('path');

package/dist/cli-chunks/{context-DysC5qrh.cjs → context-ClUhQYbA.cjs}

@@ -1,6 +1,6 @@
 'use strict';
 
-var session = require('./session--DdaUkcq.cjs');
+var session = require('./session-DYEm6ALx.cjs');
 var runtimePermissionEnv = require('./runtime-permission-env-D-8_jPG3.cjs');
 var fs$1 = require('node:fs');
 var fs = require('node:fs/promises');

package/dist/cli-chunks/{create-BJSQzUeZ.cjs → create-vadbYtVj.cjs}

@@ -5,7 +5,7 @@ var fs = require('node:fs/promises');
 var path = require('node:path');
 var require$$0 = require('fs');
 var require$$1 = require('path');
-var index = require('./index-CgCp6jGG.cjs');
+var index = require('./index-EYRMHb10.cjs');
 require('node:module');
 require('os');
 require('readline');

package/dist/cli-chunks/{dev-DiGtxt4q.cjs → dev-Dkk4qHsv.cjs}

@@ -6,15 +6,15 @@ var path = require('node:path');
 var net = require('node:net');
 var promises = require('node:dns/promises');
 var node_http = require('node:http');
-var context = require('./context-DysC5qrh.cjs');
+var context = require('./context-ClUhQYbA.cjs');
 var node_crypto = require('node:crypto');
 var undici = require('undici');
 var browser = require('./browser-RAy8e8cV.cjs');
-var index = require('./index-CgCp6jGG.cjs');
-var projectVite = require('./project-vite-TBMlJw8y.cjs');
+var index = require('./index-EYRMHb10.cjs');
+var projectVite = require('./project-vite-eJ89lO8_.cjs');
 var fs$1 = require('node:fs/promises');
 var runtimePermissionEnv = require('./runtime-permission-env-D-8_jPG3.cjs');
-require('./session--DdaUkcq.cjs');
+require('./session-DYEm6ALx.cjs');
 require('fs');
 require('constants');
 require('stream');
@@ -1347,7 +1347,7 @@ function createHeyboxProtocol(payload) {
 /** 构建时替换为当前发布包的实际版本。 */
 const HB_SDK_VERSION = typeof undefined === 'string'
     ? undefined
-    : '0.7.0-alpha.5';
+    : '0.7.0';
 
 class DevPermissionOverrideStoreError extends Error {
     code;

package/dist/cli-chunks/{doctor-DWWVwcd7.cjs → doctor-DzgWYWKU.cjs}

@@ -4,7 +4,7 @@ var fs$1 = require('node:fs');
 var fs = require('node:fs/promises');
 var os = require('node:os');
 var path = require('node:path');
-var index = require('./index-CgCp6jGG.cjs');
+var index = require('./index-EYRMHb10.cjs');
 require('node:module');
 require('path');
 require('os');

package/dist/cli-chunks/{index-k5wJ6TMJ.cjs → index-BMddcNGi.cjs}

@@ -1,6 +1,6 @@
 'use strict';
 
-var index$2 = require('./index-CgCp6jGG.cjs');
+var index$2 = require('./index-EYRMHb10.cjs');
 var require$$0$2 = require('fs');
 var require$$2$1 = require('crypto');
 var require$$1$2 = require('path');

package/dist/cli-chunks/{index-CgCp6jGG.cjs → index-EYRMHb10.cjs}

@@ -234,19 +234,19 @@ function requireArgument () {
 
 var command = {};
 
-const require$5 = node_module.createRequire((typeof document === 'undefined' ? require('u' + 'rl').pathToFileURL(__filename).href : (_documentCurrentScript && _documentCurrentScript.tagName.toUpperCase() === 'SCRIPT' && _documentCurrentScript.src || new URL('cli-chunks/index-CgCp6jGG.cjs', document.baseURI).href)));
+const require$5 = node_module.createRequire((typeof document === 'undefined' ? require('u' + 'rl').pathToFileURL(__filename).href : (_documentCurrentScript && _documentCurrentScript.tagName.toUpperCase() === 'SCRIPT' && _documentCurrentScript.src || new URL('cli-chunks/index-EYRMHb10.cjs', document.baseURI).href)));
 function __require$4() { return require$5("node:events"); }
 
-const require$4 = node_module.createRequire((typeof document === 'undefined' ? require('u' + 'rl').pathToFileURL(__filename).href : (_documentCurrentScript && _documentCurrentScript.tagName.toUpperCase() === 'SCRIPT' && _documentCurrentScript.src || new URL('cli-chunks/index-CgCp6jGG.cjs', document.baseURI).href)));
+const require$4 = node_module.createRequire((typeof document === 'undefined' ? require('u' + 'rl').pathToFileURL(__filename).href : (_documentCurrentScript && _documentCurrentScript.tagName.toUpperCase() === 'SCRIPT' && _documentCurrentScript.src || new URL('cli-chunks/index-EYRMHb10.cjs', document.baseURI).href)));
 function __require$3() { return require$4("node:child_process"); }
 
-const require$3 = node_module.createRequire((typeof document === 'undefined' ? require('u' + 'rl').pathToFileURL(__filename).href : (_documentCurrentScript && _documentCurrentScript.tagName.toUpperCase() === 'SCRIPT' && _documentCurrentScript.src || new URL('cli-chunks/index-CgCp6jGG.cjs', document.baseURI).href)));
+const require$3 = node_module.createRequire((typeof document === 'undefined' ? require('u' + 'rl').pathToFileURL(__filename).href : (_documentCurrentScript && _documentCurrentScript.tagName.toUpperCase() === 'SCRIPT' && _documentCurrentScript.src || new URL('cli-chunks/index-EYRMHb10.cjs', document.baseURI).href)));
 function __require$2() { return require$3("node:path"); }
 
-const require$2 = node_module.createRequire((typeof document === 'undefined' ? require('u' + 'rl').pathToFileURL(__filename).href : (_documentCurrentScript && _documentCurrentScript.tagName.toUpperCase() === 'SCRIPT' && _documentCurrentScript.src || new URL('cli-chunks/index-CgCp6jGG.cjs', document.baseURI).href)));
+const require$2 = node_module.createRequire((typeof document === 'undefined' ? require('u' + 'rl').pathToFileURL(__filename).href : (_documentCurrentScript && _documentCurrentScript.tagName.toUpperCase() === 'SCRIPT' && _documentCurrentScript.src || new URL('cli-chunks/index-EYRMHb10.cjs', document.baseURI).href)));
 function __require$1() { return require$2("node:fs"); }
 
-const require$1 = node_module.createRequire((typeof document === 'undefined' ? require('u' + 'rl').pathToFileURL(__filename).href : (_documentCurrentScript && _documentCurrentScript.tagName.toUpperCase() === 'SCRIPT' && _documentCurrentScript.src || new URL('cli-chunks/index-CgCp6jGG.cjs', document.baseURI).href)));
+const require$1 = node_module.createRequire((typeof document === 'undefined' ? require('u' + 'rl').pathToFileURL(__filename).href : (_documentCurrentScript && _documentCurrentScript.tagName.toUpperCase() === 'SCRIPT' && _documentCurrentScript.src || new URL('cli-chunks/index-EYRMHb10.cjs', document.baseURI).href)));
 function __require() { return require$1("node:process"); }
 
 var help = {};
@@ -13347,7 +13347,7 @@ function getPathname(pathWithQuery) {
 }
 
 const CLI_VERSION_PLACEHOLDER = ['__HB', 'SDK', 'CLI', 'VERSION__'].join('_');
-const BUILT_CLI_VERSION = '0.7.0-alpha.5';
+const BUILT_CLI_VERSION = '0.7.0';
 const PACKAGE_JSON_CANDIDATES = [
     path.resolve(__dirname, '..', '..', 'package.json'),
     path.resolve(__dirname, '..', 'package.json'),
@@ -13681,35 +13681,35 @@ function createCommandLoggerResolver(options) {
     };
 }
 const defaultClearLoginStatus = async (...args) => {
-    const { clearLoginStatus } = await Promise.resolve().then(function () { return require('./login-CzkMdcXM.cjs'); });
+    const { clearLoginStatus } = await Promise.resolve().then(function () { return require('./login-5TM5_o8q.cjs'); });
     return clearLoginStatus(...args);
 };
 const defaultLoginToHeybox = async (...args) => {
-    const { loginToHeybox } = await Promise.resolve().then(function () { return require('./login-CzkMdcXM.cjs'); });
+    const { loginToHeybox } = await Promise.resolve().then(function () { return require('./login-5TM5_o8q.cjs'); });
     return loginToHeybox(...args);
 };
 const defaultPrintLoginStatus = async (...args) => {
-    const { printLoginStatus } = await Promise.resolve().then(function () { return require('./login-CzkMdcXM.cjs'); });
+    const { printLoginStatus } = await Promise.resolve().then(function () { return require('./login-5TM5_o8q.cjs'); });
     return printLoginStatus(...args);
 };
 const defaultRunBuildCommand = async (...args) => {
-    const { runBuildCommand } = await Promise.resolve().then(function () { return require('./build-35mI_IwM.cjs'); });
+    const { runBuildCommand } = await Promise.resolve().then(function () { return require('./build-CsXk21Yi.cjs'); });
     return runBuildCommand(...args);
 };
 const defaultRunCreateCommand = async (...args) => {
-    const { runCreateCommand } = await Promise.resolve().then(function () { return require('./create-BJSQzUeZ.cjs'); });
+    const { runCreateCommand } = await Promise.resolve().then(function () { return require('./create-vadbYtVj.cjs'); });
     return runCreateCommand(...args);
 };
 const defaultRunDevCommand = async (...args) => {
-    const { runDevCommand } = await Promise.resolve().then(function () { return require('./dev-DiGtxt4q.cjs'); });
+    const { runDevCommand } = await Promise.resolve().then(function () { return require('./dev-Dkk4qHsv.cjs'); });
     return runDevCommand(...args);
 };
 const defaultRunDoctorCommand = async (...args) => {
-    const { runDoctorCommand } = await Promise.resolve().then(function () { return require('./doctor-DWWVwcd7.cjs'); });
+    const { runDoctorCommand } = await Promise.resolve().then(function () { return require('./doctor-DzgWYWKU.cjs'); });
     return runDoctorCommand(...args);
 };
 const defaultRunRemoteCommand = async (...args) => {
-    const { runRemoteCommand } = await Promise.resolve().then(function () { return require('./remote-DE9DIxqw.cjs'); });
+    const { runRemoteCommand } = await Promise.resolve().then(function () { return require('./remote-DxiHjrI9.cjs'); });
     return runRemoteCommand(...args);
 };
 function resolveStandaloneLogger(options, verbose) {

package/dist/cli-chunks/{login-CzkMdcXM.cjs → login-5TM5_o8q.cjs}

@@ -3,9 +3,9 @@
 var promises = require('node:readline/promises');
 var node_crypto = require('node:crypto');
 var node_http = require('node:http');
-var session = require('./session--DdaUkcq.cjs');
+var session = require('./session-DYEm6ALx.cjs');
 var browser = require('./browser-RAy8e8cV.cjs');
-var index = require('./index-CgCp6jGG.cjs');
+var index = require('./index-EYRMHb10.cjs');
 require('node:path');
 require('fs');
 require('constants');

package/dist/cli-chunks/{project-vite-TBMlJw8y.cjs → project-vite-eJ89lO8_.cjs}

@@ -5,7 +5,7 @@ var fs$1 = require('node:fs/promises');
 var node_module = require('node:module');
 var path = require('node:path');
 var node_url = require('node:url');
-var index = require('./index-CgCp6jGG.cjs');
+var index = require('./index-EYRMHb10.cjs');
 
 function findProjectRoot(startDir) {
     let current = path.resolve(startDir);

package/dist/cli-chunks/{remote-DE9DIxqw.cjs → remote-DxiHjrI9.cjs}

@@ -1,8 +1,8 @@
 'use strict';
 
 var promises = require('node:readline/promises');
-var index = require('./index-CgCp6jGG.cjs');
-var session = require('./session--DdaUkcq.cjs');
+var index = require('./index-EYRMHb10.cjs');
+var session = require('./session-DYEm6ALx.cjs');
 var childProcess = require('node:child_process');
 var fs = require('node:fs');
 var fs$1 = require('node:fs/promises');
@@ -10,7 +10,7 @@ var path = require('node:path');
 var runtimePermissionEnv = require('./runtime-permission-env-D-8_jPG3.cjs');
 var runtimeGate = require('./runtime-gate-CtV7rWyX.cjs');
 var node_crypto = require('node:crypto');
-var context = require('./context-DysC5qrh.cjs');
+var context = require('./context-ClUhQYbA.cjs');
 require('node:module');
 require('path');
 require('os');
@@ -271,7 +271,7 @@ function createDefaultCosClient(uploadToken, COS) {
     };
 }
 async function loadCosConstructor() {
-    const cosModule = await Promise.resolve().then(function () { return require('./index-k5wJ6TMJ.cjs'); }).then(function (n) { return n.index; });
+    const cosModule = await Promise.resolve().then(function () { return require('./index-BMddcNGi.cjs'); }).then(function (n) { return n.index; });
     return cosModule.default;
 }
 function formatSize(bytes) {

package/dist/cli-chunks/{session--DdaUkcq.cjs → session-DYEm6ALx.cjs}

@@ -1,6 +1,6 @@
 'use strict';
 
-var index = require('./index-CgCp6jGG.cjs');
+var index = require('./index-EYRMHb10.cjs');
 var node_crypto = require('node:crypto');
 var path = require('node:path');
 var require$$0$2 = require('fs');

package/dist/cli.cjs

@@ -1,6 +1,6 @@
 'use strict';
 
-var index = require('./cli-chunks/index-CgCp6jGG.cjs');
+var index = require('./cli-chunks/index-EYRMHb10.cjs');
 require('node:module');
 require('node:fs');
 require('node:fs/promises');

package/dist/devtools/mock-host/main.js

@@ -7,6 +7,24 @@ const MINI_PROGRAM_BRIDGE_NONCE_PARAM = 'hb_mini_bridge_nonce';
 /** SDK 向 Runtime 报告 CSP 违规的内部方法名。 */
 const SDK_CSP_VIOLATION_METHOD = 'sdk.csp.violation';
 
+function readBrowserEnvironment() {
+    try {
+        return {
+            activeElement: globalThis.document?.activeElement ?? null,
+            userActivation: globalThis.navigator?.userActivation,
+        };
+    }
+    catch {
+        return { activeElement: null };
+    }
+}
+/** 按当前浏览器消息、用户激活和目标 iframe 焦点生成请求级可信手势快照。 */
+function computeTrustedIframeUserGesture(event, iframe, environment = readBrowserEnvironment()) {
+    return (event.isTrusted === true
+        && environment.userActivation?.isActive === true
+        && environment.activeElement === iframe);
+}
+
 const MANAGED_RUNTIME_PERMISSION_KEYS = new Set(['network.request']);
 /**
  * 判断 permission key 是否由 Runtime 权限快照管理。
@@ -4084,7 +4102,7 @@ function readLeaderboardCursor(value) {
 }
 
 const VALID_LOGIN_SCOPES = new Set(['identity', 'profile']);
-async function loginMiniProgramRuntime(payload, platformAdapter, identity) {
+async function loginMiniProgramRuntime(payload, platformAdapter, identity, trustedUserGesture) {
     const scopes = readLoginScopes(payload);
     const miniProgramId = identity?.miniProgramId?.trim();
     if (!miniProgramId) {
@@ -4093,7 +4111,7 @@ async function loginMiniProgramRuntime(payload, platformAdapter, identity) {
     const result = await platformAdapter.auth.login({
         miniProgramId,
         scopes,
-        trustedUserGesture: Boolean(await platformAdapter.auth.hasTrustedUserGesture?.()),
+        trustedUserGesture,
     });
     assertAuthLoginResult(result);
     return { code: result.code, expiresIn: result.expiresIn, scopes: [...result.scopes] };
@@ -5177,7 +5195,7 @@ async function getMiniProgramRuntimeUserInfo(platformAdapter, identity) {
         : platformAdapter.user.getUserInfo();
 }
 
-async function getMiniProgramRuntimeLocalIdentity(payload, platformAdapter, identity) {
+async function getMiniProgramRuntimeLocalIdentity(payload, platformAdapter, identity, trustedUserGesture) {
     if (payload !== undefined) {
         throw createMiniProgramRuntimeBridgeError('INVALID_PARAMS', 'user.getLocalIdentity 不接收入参');
     }
@@ -5187,7 +5205,7 @@ async function getMiniProgramRuntimeLocalIdentity(payload, platformAdapter, iden
     }
     const result = await platformAdapter.user.getLocalIdentity({
         miniProgramId,
-        trustedUserGesture: Boolean(await platformAdapter.auth.hasTrustedUserGesture?.()),
+        trustedUserGesture,
     });
     if (!isMiniProgramRuntimeRecord(result)
         || typeof result.appUserId !== 'string'
@@ -5201,7 +5219,7 @@ async function getMiniProgramRuntimeLocalIdentity(payload, platformAdapter, iden
     return { appUserId: result.appUserId };
 }
 
-async function revokeMiniProgramRuntimeAuthorization(payload, platformAdapter, identity) {
+async function revokeMiniProgramRuntimeAuthorization(payload, platformAdapter, identity, trustedUserGesture) {
     if (payload !== undefined) {
         throw createMiniProgramRuntimeBridgeError('INVALID_PARAMS', 'user.revokeAuthorization 不接收入参');
     }
@@ -5211,7 +5229,7 @@ async function revokeMiniProgramRuntimeAuthorization(payload, platformAdapter, i
     }
     await platformAdapter.user.revokeAuthorization({
         miniProgramId,
-        trustedUserGesture: Boolean(await platformAdapter.auth.hasTrustedUserGesture?.()),
+        trustedUserGesture,
     });
     platformAdapter.auth.emitAuthEvent?.('user_info_authorization_change', {
         identity: 'denied',
@@ -5542,15 +5560,16 @@ function isRecord$1(value) {
     return typeof value === 'object' && value !== null && !Array.isArray(value);
 }
 
+const DEFAULT_MOCK_RUNTIME_REQUEST_CONTEXT = { trustedUserGesture: false };
 const MOCK_DEFAULT_LEADERBOARD_KEY = 'default';
 const MOCK_LEADERBOARD_CACHE_MAX_ENTRIES = 500;
 const MOCK_LEADERBOARD_CURRENT_ENTRY_RANK_COUNT_LIMIT = 5000;
 const MINI_PROGRAM_MOCK_RUNTIME_METHODS = MINI_PROGRAM_PROTOCOL_CAPABILITIES.map((capability) => capability.method);
 const MINI_PROGRAM_MOCK_RUNTIME_METHOD_HANDLER_MAP = {
-    [AUTH_LOGIN_METHOD]: (runtime, payload) => runtime.login(payload),
+    [AUTH_LOGIN_METHOD]: (runtime, payload, context) => runtime.login(payload, context),
     [USER_GET_INFO_METHOD]: (runtime) => runtime.getUserInfo(),
-    [USER_GET_LOCAL_IDENTITY_METHOD]: (runtime, payload) => runtime.getLocalIdentity(payload),
-    [USER_REVOKE_AUTHORIZATION_METHOD]: (runtime, payload) => runtime.revokeAuthorization(payload),
+    [USER_GET_LOCAL_IDENTITY_METHOD]: (runtime, payload, context) => runtime.getLocalIdentity(payload, context),
+    [USER_REVOKE_AUTHORIZATION_METHOD]: (runtime, payload, context) => runtime.revokeAuthorization(payload, context),
     [USER_GET_STEAM_GAME_LIST_METHOD]: (runtime, payload) => runtime.getSteamGameList(payload),
     [SHARE_SHOW_SHARE_MENU_METHOD]: (runtime, payload) => runtime.showShareMenu(payload),
     [SHARE_SCREENSHOT_METHOD]: (runtime, payload) => runtime.shareScreenshot(payload),
@@ -5595,7 +5614,6 @@ function createBrowserMockRuntimePlatformAdapter(options) {
                 const user = options.getCurrentUser();
                 return user?.app_user_id;
             },
-            hasTrustedUserGesture: options.hasTrustedUserGesture,
             async login(request) {
                 if (!options.getCurrentUser()) {
                     if (!request.trustedUserGesture) {
@@ -5782,7 +5800,7 @@ class MiniProgramMockRuntime {
             platformAdapter: adapter,
         });
     }
-    async runMethod(method, payload) {
+    async runMethod(method, payload, context = DEFAULT_MOCK_RUNTIME_REQUEST_CONTEXT) {
         if (!isMiniProgramMockRuntimeMethod(method)) {
             throw createMockBridgeError('METHOD_NOT_FOUND', `未开放小程序能力: ${method}`);
         }
@@ -5797,7 +5815,7 @@ class MiniProgramMockRuntime {
             }
         }
         const handler = MINI_PROGRAM_MOCK_RUNTIME_METHOD_HANDLERS[method];
-        return handler(this, payload);
+        return handler(this, payload, context);
     }
     getState() {
         return {
@@ -5810,25 +5828,25 @@ class MiniProgramMockRuntime {
             vibrates: [...this.vibrates],
         };
     }
-    login(payload) {
+    login(payload, context) {
         if (!this.authLoginEnabled) {
             throw createMockBridgeError('SERVER_API_REQUIRED', '当前模式要求由小程序服务端完成 auth.login');
         }
-        return loginMiniProgramRuntime(payload, this.adapter, this.options.identity);
+        return loginMiniProgramRuntime(payload, this.adapter, this.options.identity, context.trustedUserGesture);
     }
     getUserInfo() {
         this.assertMockHostUserApiEnabled();
         return getMiniProgramRuntimeUserInfo(this.adapter, this.options.identity);
     }
-    getLocalIdentity(payload) {
+    getLocalIdentity(payload, context) {
         this.assertMockHostUserApiEnabled();
-        return getMiniProgramRuntimeLocalIdentity(payload, this.adapter, this.options.identity);
+        return getMiniProgramRuntimeLocalIdentity(payload, this.adapter, this.options.identity, context.trustedUserGesture);
     }
-    revokeAuthorization(payload) {
+    revokeAuthorization(payload, context) {
         if (!this.authorizationMutationEnabled) {
             throw createMockBridgeError('SERVER_API_REQUIRED', '当前模式缺少有效的小程序权限快照');
         }
-        return revokeMiniProgramRuntimeAuthorization(payload, this.adapter, this.options.identity);
+        return revokeMiniProgramRuntimeAuthorization(payload, this.adapter, this.options.identity, context.trustedUserGesture);
     }
     async getSteamGameList(payload) {
         this.assertMockHostUserApiEnabled();
@@ -5840,8 +5858,8 @@ class MiniProgramMockRuntime {
             throw createMockBridgeError('SERVER_API_REQUIRED', '当前模式要求由小程序服务端调用用户 API');
         }
     }
-    invoke(method, payload) {
-        return this.runMethod(method, payload);
+    invoke(method, payload, context = DEFAULT_MOCK_RUNTIME_REQUEST_CONTEXT) {
+        return this.runMethod(method, payload, context);
     }
     showShareMenu(payload) {
         return showMiniProgramRuntimeShareMenu(payload, this.adapter, this.getShareContext());
@@ -7124,7 +7142,9 @@ function handleMessage(event) {
         return;
     }
     if (message.type === 'request') {
-        void handleRequest(message);
+        void handleRequest(message, {
+            trustedUserGesture: computeTrustedIframeUserGesture(event, iframe),
+        });
         return;
     }
     if (message.type === 'event' && message.method === SDK_CSP_VIOLATION_METHOD) {
@@ -7148,7 +7168,7 @@ function handleHandshake() {
     });
     pushLog('sdk.handshake', { firstHandshake });
 }
-async function handleRequest(message) {
+async function handleRequest(message, context) {
     if (!message.id || !message.method) {
         return;
     }
@@ -7157,7 +7177,7 @@ async function handleRequest(message) {
         return;
     }
     try {
-        const payload = await runtime.runMethod(message.method, message.payload);
+        const payload = await runtime.runMethod(message.method, message.payload, context);
         postResponse(message, payload);
         pushLog(message.method, createRequestLogDetail(message.method, message.payload, payload));
     }