@heybox/hb-sdk 0.7.1 → 0.7.2

package/CHANGELOG.md

@@ -1,5 +1,13 @@
 # Changelog
 
+## 0.7.2
+
+### SDK / Runtime
+
+- 移除 `user.getLocalIdentity()`；未开通网络权限的小程序改用 `user.getInfo()` 静默获取 `userInfo.app_user_id`，不再展示身份授权弹窗。
+- 未开通网络权限且用户已登录时，`user.getInfo()` 会静默建立或读取当前小程序隔离身份，并在每次成功调用后广播 `identity: granted`；撤销授权后再次调用会建立新的隔离身份。
+- Runtime 不再兼容缺少 canonical `miniProgramId` 的无参 `getUserInfo()` adapter 路径；身份缺失时 `user.getInfo()` 返回 `INVALID_STATE`。
+
 ## 0.7.1
 
 ### Docs / Agent Skill

package/README.md

@@ -23,20 +23,20 @@ npm run dev
 npm install @heybox/hb-sdk
 ```
 
-SDK 会在导入时启动握手，能力调用会自动等待 SDK 就绪。未开通网络权限的小程序可以读取当前小程序内的隔离身份：
+SDK 会在导入时启动握手，能力调用会自动等待 SDK 就绪。未开通网络权限的小程序通过 `user.getInfo()` 静默读取当前小程序内的隔离身份：
 
 需要可信用户手势的按钮不能在点击回调里等待握手。页面加载时先用 `getHandshakeState()` 读取当前状态，再用 `onHandshakeStateChange()` 订阅并立即接收当前状态；仅在 `status === 'ready'` 时启用按钮，并在组件或页面销毁时调用订阅返回的取消函数。`ready` 生命周期事件只是握手成功瞬间派发、不会重放的边沿通知，不能用来判断当前状态。
 
 ```ts
 import hbSDK from '@heybox/hb-sdk';
 
-async function getLocalIdentityFromUserAction() {
-  const { appUserId } = await hbSDK.user.getLocalIdentity();
-  return appUserId;
+async function getCurrentUser() {
+  const result = await hbSDK.user.getInfo();
+  return result.userInfo?.app_user_id;
 }
 ```
 
-把 `getLocalIdentityFromUserAction` 绑定到按钮点击等可信用户操作。首次登录或 identity consent 需要 UI 而缺少可信手势时返回 `USER_GESTURE_REQUIRED`；用户取消或关闭时返回 `AUTHORIZATION_CANCELLED`，不会确认或改变授权状态。
+`user.getInfo()` 不展示授权弹窗，也不要求可信用户手势。未登录时返回 `isHeyboxAppLoggedIn: false`；已登录时默认返回当前小程序隔离的 `app_user_id`。
 
 已开通网络权限的小程序在按钮点击等明确的用户操作中调用 `auth.login()`：
 
@@ -52,7 +52,7 @@ async function loginFromUserAction() {
 }
 ```
 
-`auth.login()` 返回 `{ code, expiresIn: 300, scopes }`，其中 `identity` 隐式强制包含；它不返回 user、profile、`appUserId` 或 token。页面只能把 code 交给开发者服务端，再由服务端按后端 OpenAPI 文档换取 token。未开通网络权限的小程序使用 `user.getLocalIdentity()`，无法获取 code 或调用 OpenAPI。完整边界见[用户身份与登录](https://docs.xiaoheihe.cn/hb_sdk/guide/auth)。
+`auth.login()` 返回 `{ code, expiresIn: 300, scopes }`，其中 `identity` 隐式强制包含；它不返回 user、profile、`app_user_id` 或 token。页面只能把 code 交给开发者服务端，再由服务端按后端 OpenAPI 文档换取 token。未开通网络权限的小程序使用 `user.getInfo()`，无法获取 code 或调用 OpenAPI。完整边界见[用户身份与登录](https://docs.xiaoheihe.cn/hb_sdk/guide/auth)。
 
 用户可以在明确的按钮点击和二次确认后撤销当前小程序的授权：
 
@@ -62,7 +62,7 @@ async function revokeAuthorizationFromUserAction() {
   if (!confirmed) return;
 
   await hbSDK.user.revokeAuthorization();
-  // 同步清理业务保存的 appUserId、用户资料和服务端会话。
+  // 同步清理业务保存的 app_user_id、用户资料和服务端会话。
 }
 ```
 
@@ -107,7 +107,7 @@ SDK 还提供 `getHandshakeState()` / `onHandshakeStateChange()` 管理持久握
 | 模块         | 用途                                                         |
 | ------------ | ------------------------------------------------------------ |
 | `auth`       | 获取交给开发者服务端交换的短期授权码                         |
-| `user`       | 使用 Host current-user APIs 或读取无网络小程序的本地隔离身份 |
+| `user`       | 读取 Host 当前用户资料、隔离身份或撤销授权                   |
 | `share`      | 打开分享或截图分享流程                                       |
 | `ui`         | 展示 Toast 和 Loading                                        |
 | `device`     | 调用振动和剪贴板能力                                         |
@@ -127,14 +127,14 @@ SDK 还提供 `getHandshakeState()` / `onHandshakeStateChange()` 管理持久握
 - `auth.login({ scopes? })` 只返回 `{ code, expiresIn: 300, scopes }`；identity 隐式强制包含，code 只能提交给开发者服务端。
 - 需要授权 UI 时，`auth.login()` 必须来自可信用户手势，否则返回 `USER_GESTURE_REQUIRED`；用户取消或关闭时返回 `AUTHORIZATION_CANCELLED`。已授权时可以静默返回新 code。
 - `user.getSteamGameList()` 仅供未开通网络权限的小程序通过 Host 读取；已开通网络权限时返回 `SERVER_API_REQUIRED`，且授权码与 OpenAPI 不提供 Steam 游戏库 scope 或资源接口。
-- 已开通网络权限时，公开的 `user.getInfo()` 和 `user.getLocalIdentity()` 返回 `SERVER_API_REQUIRED`；对应身份和资料数据应由开发者服务端通过 OpenAPI 获取。
-- 未开通网络权限时，只用 `user.getLocalIdentity()` 获取 `{ appUserId }`，不能获取 code 或调用 OpenAPI。
+- 已开通网络权限时，公开的 `user.getInfo()` 返回 `SERVER_API_REQUIRED`；对应身份和资料数据应由开发者服务端通过 OpenAPI 获取。
+- 未开通网络权限时，使用 `user.getInfo()` 静默读取 `userInfo.app_user_id`，不能获取 code 或调用 OpenAPI。
 - `user.revokeAuthorization()` 在两种网络模式下都要求可信用户手势；成功后必须停止使用并清理业务缓存的旧身份、资料和服务端会话。
 - `on()` 返回取消监听函数，组件卸载或页面销毁时需要调用。
 - 业务网络请求使用 `network.request()`，不要依赖浏览器原生网络出口。
 - `network.request()` 不能访问平台保留的 runtime auth 与 OpenAPI 内部路径；页面不得持有或交换服务端应用凭据。
 - `network.request` 不支持 `multipart/form-data`；App Host 仅支持 form（`application/x-www-form-urlencoded`）与 JSON。表单请用 `URLSearchParams#toString()` 作为 `data`，文件上传请走专用上传能力。
-- 仅当远端已启用 `network.request` 且 `useOfficialDomain=true` 时，`hb-sdk dev` 与 `hb-sdk remote deploy` 构建才会跳过平台 CSP；其他构建继续注入平台 CSP。
+- 仅当远端已启用 `network.request` 时，`hb-sdk dev` 与 `hb-sdk remote deploy` 构建才会跳过平台 CSP；其他构建继续注入平台 CSP。`useOfficialDomain` 不参与 CSP 跳过判定。
 - 构建必须启用 `miniappManifest()`，推荐统一使用 `hb-sdk build`。
 
 ## 云端排行榜

package/dist/cli-chunks/{build-i36rHC8w.cjs → build-DvPd8Z03.cjs}

@@ -5,8 +5,8 @@ var fs = require('node:fs/promises');
 var path = require('node:path');
 var runtimePermissionEnv = require('./runtime-permission-env-D-8_jPG3.cjs');
 var runtimeGate = require('./runtime-gate-CtV7rWyX.cjs');
-var index = require('./index-BYXJJ0O2.cjs');
-var projectVite = require('./project-vite-DgIxZGf7.cjs');
+var index = require('./index-D2DLvveO.cjs');
+var projectVite = require('./project-vite-CoApr_-L.cjs');
 require('node:async_hooks');
 require('node:module');
 require('path');

package/dist/cli-chunks/{context-DmtAhQC7.cjs → context-B8RhXSIn.cjs}

@@ -1,6 +1,6 @@
 'use strict';
 
-var session = require('./session-Y0Eur0YE.cjs');
+var session = require('./session-CFd3REzM.cjs');
 var runtimePermissionEnv = require('./runtime-permission-env-D-8_jPG3.cjs');
 var fs$1 = require('node:fs');
 var fs = require('node:fs/promises');
@@ -61,7 +61,7 @@ function isRecord(value) {
 function shouldSkipMiniappPlatformCsp(runtimePermissions) {
     const parsed = parseMiniProgramRuntimePermissions(runtimePermissions);
     const networkRequest = parsed.permissions['network.request'];
-    return parsed.valid && networkRequest?.status === 'enabled' && networkRequest.config.useOfficialDomain === true;
+    return parsed.valid && networkRequest?.status === 'enabled';
 }
 const DEFAULT_PERMISSION_STATE = {
     networkRequest: {

package/dist/cli-chunks/{create-D5bC0jY_.cjs → create-BnoTI3uE.cjs}

@@ -5,7 +5,7 @@ var fs = require('node:fs/promises');
 var path = require('node:path');
 var require$$0 = require('fs');
 var require$$1 = require('path');
-var index = require('./index-BYXJJ0O2.cjs');
+var index = require('./index-D2DLvveO.cjs');
 require('node:module');
 require('os');
 require('readline');

package/dist/cli-chunks/{dev-CKPzEVZs.cjs → dev-cujCrkqz.cjs}

@@ -6,15 +6,15 @@ var path = require('node:path');
 var net = require('node:net');
 var promises = require('node:dns/promises');
 var node_http = require('node:http');
-var context = require('./context-DmtAhQC7.cjs');
+var context = require('./context-B8RhXSIn.cjs');
 var node_crypto = require('node:crypto');
 var undici = require('undici');
 var browser = require('./browser-RAy8e8cV.cjs');
-var index = require('./index-BYXJJ0O2.cjs');
-var projectVite = require('./project-vite-DgIxZGf7.cjs');
+var index = require('./index-D2DLvveO.cjs');
+var projectVite = require('./project-vite-CoApr_-L.cjs');
 var fs$1 = require('node:fs/promises');
 var runtimePermissionEnv = require('./runtime-permission-env-D-8_jPG3.cjs');
-require('./session-Y0Eur0YE.cjs');
+require('./session-CFd3REzM.cjs');
 require('fs');
 require('constants');
 require('stream');
@@ -1347,7 +1347,7 @@ function createHeyboxProtocol(payload) {
 /** 构建时替换为当前发布包的实际版本。 */
 const HB_SDK_VERSION = typeof undefined === 'string'
     ? undefined
-    : '0.7.1';
+    : '0.7.2';
 
 class DevPermissionOverrideStoreError extends Error {
     code;

package/dist/cli-chunks/{doctor-CPdodzWY.cjs → doctor-bgqFvpfQ.cjs}

@@ -4,7 +4,7 @@ var fs$1 = require('node:fs');
 var fs = require('node:fs/promises');
 var os = require('node:os');
 var path = require('node:path');
-var index = require('./index-BYXJJ0O2.cjs');
+var index = require('./index-D2DLvveO.cjs');
 require('node:module');
 require('path');
 require('os');

package/dist/cli-chunks/{index-Dyim0XNM.cjs → index-CxDUgJ7Y.cjs}

@@ -1,6 +1,6 @@
 'use strict';
 
-var index$2 = require('./index-BYXJJ0O2.cjs');
+var index$2 = require('./index-D2DLvveO.cjs');
 var require$$0$2 = require('fs');
 var require$$2$1 = require('crypto');
 var require$$1$2 = require('path');

package/dist/cli-chunks/{index-BYXJJ0O2.cjs → index-D2DLvveO.cjs}

@@ -234,19 +234,19 @@ function requireArgument () {
 
 var command = {};
 
-const require$5 = node_module.createRequire((typeof document === 'undefined' ? require('u' + 'rl').pathToFileURL(__filename).href : (_documentCurrentScript && _documentCurrentScript.tagName.toUpperCase() === 'SCRIPT' && _documentCurrentScript.src || new URL('cli-chunks/index-BYXJJ0O2.cjs', document.baseURI).href)));
+const require$5 = node_module.createRequire((typeof document === 'undefined' ? require('u' + 'rl').pathToFileURL(__filename).href : (_documentCurrentScript && _documentCurrentScript.tagName.toUpperCase() === 'SCRIPT' && _documentCurrentScript.src || new URL('cli-chunks/index-D2DLvveO.cjs', document.baseURI).href)));
 function __require$4() { return require$5("node:events"); }
 
-const require$4 = node_module.createRequire((typeof document === 'undefined' ? require('u' + 'rl').pathToFileURL(__filename).href : (_documentCurrentScript && _documentCurrentScript.tagName.toUpperCase() === 'SCRIPT' && _documentCurrentScript.src || new URL('cli-chunks/index-BYXJJ0O2.cjs', document.baseURI).href)));
+const require$4 = node_module.createRequire((typeof document === 'undefined' ? require('u' + 'rl').pathToFileURL(__filename).href : (_documentCurrentScript && _documentCurrentScript.tagName.toUpperCase() === 'SCRIPT' && _documentCurrentScript.src || new URL('cli-chunks/index-D2DLvveO.cjs', document.baseURI).href)));
 function __require$3() { return require$4("node:child_process"); }
 
-const require$3 = node_module.createRequire((typeof document === 'undefined' ? require('u' + 'rl').pathToFileURL(__filename).href : (_documentCurrentScript && _documentCurrentScript.tagName.toUpperCase() === 'SCRIPT' && _documentCurrentScript.src || new URL('cli-chunks/index-BYXJJ0O2.cjs', document.baseURI).href)));
+const require$3 = node_module.createRequire((typeof document === 'undefined' ? require('u' + 'rl').pathToFileURL(__filename).href : (_documentCurrentScript && _documentCurrentScript.tagName.toUpperCase() === 'SCRIPT' && _documentCurrentScript.src || new URL('cli-chunks/index-D2DLvveO.cjs', document.baseURI).href)));
 function __require$2() { return require$3("node:path"); }
 
-const require$2 = node_module.createRequire((typeof document === 'undefined' ? require('u' + 'rl').pathToFileURL(__filename).href : (_documentCurrentScript && _documentCurrentScript.tagName.toUpperCase() === 'SCRIPT' && _documentCurrentScript.src || new URL('cli-chunks/index-BYXJJ0O2.cjs', document.baseURI).href)));
+const require$2 = node_module.createRequire((typeof document === 'undefined' ? require('u' + 'rl').pathToFileURL(__filename).href : (_documentCurrentScript && _documentCurrentScript.tagName.toUpperCase() === 'SCRIPT' && _documentCurrentScript.src || new URL('cli-chunks/index-D2DLvveO.cjs', document.baseURI).href)));
 function __require$1() { return require$2("node:fs"); }
 
-const require$1 = node_module.createRequire((typeof document === 'undefined' ? require('u' + 'rl').pathToFileURL(__filename).href : (_documentCurrentScript && _documentCurrentScript.tagName.toUpperCase() === 'SCRIPT' && _documentCurrentScript.src || new URL('cli-chunks/index-BYXJJ0O2.cjs', document.baseURI).href)));
+const require$1 = node_module.createRequire((typeof document === 'undefined' ? require('u' + 'rl').pathToFileURL(__filename).href : (_documentCurrentScript && _documentCurrentScript.tagName.toUpperCase() === 'SCRIPT' && _documentCurrentScript.src || new URL('cli-chunks/index-D2DLvveO.cjs', document.baseURI).href)));
 function __require() { return require$1("node:process"); }
 
 var help = {};
@@ -13347,7 +13347,7 @@ function getPathname(pathWithQuery) {
 }
 
 const CLI_VERSION_PLACEHOLDER = ['__HB', 'SDK', 'CLI', 'VERSION__'].join('_');
-const BUILT_CLI_VERSION = '0.7.1';
+const BUILT_CLI_VERSION = '0.7.2';
 const PACKAGE_JSON_CANDIDATES = [
     path.resolve(__dirname, '..', '..', 'package.json'),
     path.resolve(__dirname, '..', 'package.json'),
@@ -13681,35 +13681,35 @@ function createCommandLoggerResolver(options) {
     };
 }
 const defaultClearLoginStatus = async (...args) => {
-    const { clearLoginStatus } = await Promise.resolve().then(function () { return require('./login-Da9gejmw.cjs'); });
+    const { clearLoginStatus } = await Promise.resolve().then(function () { return require('./login-CPEIFPSg.cjs'); });
     return clearLoginStatus(...args);
 };
 const defaultLoginToHeybox = async (...args) => {
-    const { loginToHeybox } = await Promise.resolve().then(function () { return require('./login-Da9gejmw.cjs'); });
+    const { loginToHeybox } = await Promise.resolve().then(function () { return require('./login-CPEIFPSg.cjs'); });
     return loginToHeybox(...args);
 };
 const defaultPrintLoginStatus = async (...args) => {
-    const { printLoginStatus } = await Promise.resolve().then(function () { return require('./login-Da9gejmw.cjs'); });
+    const { printLoginStatus } = await Promise.resolve().then(function () { return require('./login-CPEIFPSg.cjs'); });
     return printLoginStatus(...args);
 };
 const defaultRunBuildCommand = async (...args) => {
-    const { runBuildCommand } = await Promise.resolve().then(function () { return require('./build-i36rHC8w.cjs'); });
+    const { runBuildCommand } = await Promise.resolve().then(function () { return require('./build-DvPd8Z03.cjs'); });
     return runBuildCommand(...args);
 };
 const defaultRunCreateCommand = async (...args) => {
-    const { runCreateCommand } = await Promise.resolve().then(function () { return require('./create-D5bC0jY_.cjs'); });
+    const { runCreateCommand } = await Promise.resolve().then(function () { return require('./create-BnoTI3uE.cjs'); });
     return runCreateCommand(...args);
 };
 const defaultRunDevCommand = async (...args) => {
-    const { runDevCommand } = await Promise.resolve().then(function () { return require('./dev-CKPzEVZs.cjs'); });
+    const { runDevCommand } = await Promise.resolve().then(function () { return require('./dev-cujCrkqz.cjs'); });
     return runDevCommand(...args);
 };
 const defaultRunDoctorCommand = async (...args) => {
-    const { runDoctorCommand } = await Promise.resolve().then(function () { return require('./doctor-CPdodzWY.cjs'); });
+    const { runDoctorCommand } = await Promise.resolve().then(function () { return require('./doctor-bgqFvpfQ.cjs'); });
     return runDoctorCommand(...args);
 };
 const defaultRunRemoteCommand = async (...args) => {
-    const { runRemoteCommand } = await Promise.resolve().then(function () { return require('./remote-iftAjHWt.cjs'); });
+    const { runRemoteCommand } = await Promise.resolve().then(function () { return require('./remote-BfbWxVM8.cjs'); });
     return runRemoteCommand(...args);
 };
 function resolveStandaloneLogger(options, verbose) {

package/dist/cli-chunks/{login-Da9gejmw.cjs → login-CPEIFPSg.cjs}

@@ -3,9 +3,9 @@
 var promises = require('node:readline/promises');
 var node_crypto = require('node:crypto');
 var node_http = require('node:http');
-var session = require('./session-Y0Eur0YE.cjs');
+var session = require('./session-CFd3REzM.cjs');
 var browser = require('./browser-RAy8e8cV.cjs');
-var index = require('./index-BYXJJ0O2.cjs');
+var index = require('./index-D2DLvveO.cjs');
 require('node:path');
 require('fs');
 require('constants');

package/dist/cli-chunks/{project-vite-DgIxZGf7.cjs → project-vite-CoApr_-L.cjs}

@@ -5,7 +5,7 @@ var fs$1 = require('node:fs/promises');
 var node_module = require('node:module');
 var path = require('node:path');
 var node_url = require('node:url');
-var index = require('./index-BYXJJ0O2.cjs');
+var index = require('./index-D2DLvveO.cjs');
 
 function findProjectRoot(startDir) {
     let current = path.resolve(startDir);

package/dist/cli-chunks/{remote-iftAjHWt.cjs → remote-BfbWxVM8.cjs}

@@ -1,8 +1,8 @@
 'use strict';
 
 var promises = require('node:readline/promises');
-var index = require('./index-BYXJJ0O2.cjs');
-var session = require('./session-Y0Eur0YE.cjs');
+var index = require('./index-D2DLvveO.cjs');
+var session = require('./session-CFd3REzM.cjs');
 var childProcess = require('node:child_process');
 var fs = require('node:fs');
 var fs$1 = require('node:fs/promises');
@@ -10,7 +10,7 @@ var path = require('node:path');
 var runtimePermissionEnv = require('./runtime-permission-env-D-8_jPG3.cjs');
 var runtimeGate = require('./runtime-gate-CtV7rWyX.cjs');
 var node_crypto = require('node:crypto');
-var context = require('./context-DmtAhQC7.cjs');
+var context = require('./context-B8RhXSIn.cjs');
 require('node:module');
 require('path');
 require('os');
@@ -271,7 +271,7 @@ function createDefaultCosClient(uploadToken, COS) {
     };
 }
 async function loadCosConstructor() {
-    const cosModule = await Promise.resolve().then(function () { return require('./index-Dyim0XNM.cjs'); }).then(function (n) { return n.index; });
+    const cosModule = await Promise.resolve().then(function () { return require('./index-CxDUgJ7Y.cjs'); }).then(function (n) { return n.index; });
     return cosModule.default;
 }
 function formatSize(bytes) {

package/dist/cli-chunks/{session-Y0Eur0YE.cjs → session-CFd3REzM.cjs}

@@ -1,6 +1,6 @@
 'use strict';
 
-var index = require('./index-BYXJJ0O2.cjs');
+var index = require('./index-D2DLvveO.cjs');
 var node_crypto = require('node:crypto');
 var path = require('node:path');
 var require$$0$2 = require('fs');

package/dist/cli.cjs

@@ -1,6 +1,6 @@
 'use strict';
 
-var index = require('./cli-chunks/index-BYXJJ0O2.cjs');
+var index = require('./cli-chunks/index-D2DLvveO.cjs');
 require('node:module');
 require('node:fs');
 require('node:fs/promises');

package/dist/devtools/mock-host/main.js

@@ -163,8 +163,6 @@ function normalizeDecodedNetworkPathname(decoded) {
 const AUTH_LOGIN_METHOD = 'auth.login';
 /** 读取当前登录态、授权状态和已获准披露资料的 bridge method 标识。 */
 const USER_GET_INFO_METHOD = 'user.getInfo';
-/** 读取当前用户小程序隔离身份的 bridge method 标识。 */
-const USER_GET_LOCAL_IDENTITY_METHOD = 'user.getLocalIdentity';
 /** 撤销当前用户授予本小程序授权的 bridge method 标识。 */
 const USER_REVOKE_AUTHORIZATION_METHOD = 'user.revokeAuthorization';
 /** 读取当前已登录用户 Steam 游戏库的 bridge method 标识。 */
@@ -265,13 +263,6 @@ const MINI_PROGRAM_PROTOCOL_CAPABILITIES = [
         permission: 'user.getInfo',
         risk: 'medium',
     },
-    {
-        method: USER_GET_LOCAL_IDENTITY_METHOD,
-        module: 'user',
-        capability: USER_GET_LOCAL_IDENTITY_METHOD,
-        permission: 'user.getLocalIdentity',
-        risk: 'medium',
-    },
     {
         method: USER_REVOKE_AUTHORIZATION_METHOD,
         module: 'user',
@@ -5189,34 +5180,15 @@ function hashString(value) {
 }
 
 async function getMiniProgramRuntimeUserInfo(platformAdapter, identity) {
-    const miniProgramId = identity?.miniProgramId?.trim();
-    return miniProgramId
-        ? platformAdapter.user.getUserInfo({ miniProgramId })
-        : platformAdapter.user.getUserInfo();
-}
-
-async function getMiniProgramRuntimeLocalIdentity(payload, platformAdapter, identity, trustedUserGesture) {
-    if (payload !== undefined) {
-        throw createMiniProgramRuntimeBridgeError('INVALID_PARAMS', 'user.getLocalIdentity 不接收入参');
-    }
     const miniProgramId = identity?.miniProgramId?.trim();
     if (!miniProgramId) {
-        throw createMiniProgramRuntimeBridgeError('INVALID_STATE', 'user.getLocalIdentity 缺少可信小程序身份');
+        throw createMiniProgramRuntimeBridgeError('INVALID_STATE', 'user.getInfo 缺少可信小程序身份');
     }
-    const result = await platformAdapter.user.getLocalIdentity({
-        miniProgramId,
-        trustedUserGesture,
-    });
-    if (!isMiniProgramRuntimeRecord(result)
-        || typeof result.appUserId !== 'string'
-        || !result.appUserId.trim()) {
-        throw createMiniProgramRuntimeBridgeError('INVALID_RESPONSE', 'Host user.getLocalIdentity 返回无效');
+    const result = await platformAdapter.user.getUserInfo({ miniProgramId });
+    if (result.isHeyboxAppLoggedIn) {
+        platformAdapter.auth.emitAuthEvent?.('user_info_authorization_change', result.authorization);
     }
-    platformAdapter.auth.emitAuthEvent?.('user_info_authorization_change', {
-        identity: 'granted',
-        profile: 'not_requested',
-    });
-    return { appUserId: result.appUserId };
+    return result;
 }
 
 async function revokeMiniProgramRuntimeAuthorization(payload, platformAdapter, identity, trustedUserGesture) {
@@ -5568,7 +5540,6 @@ const MINI_PROGRAM_MOCK_RUNTIME_METHODS = MINI_PROGRAM_PROTOCOL_CAPABILITIES.map
 const MINI_PROGRAM_MOCK_RUNTIME_METHOD_HANDLER_MAP = {
     [AUTH_LOGIN_METHOD]: (runtime, payload, context) => runtime.login(payload, context),
     [USER_GET_INFO_METHOD]: (runtime) => runtime.getUserInfo(),
-    [USER_GET_LOCAL_IDENTITY_METHOD]: (runtime, payload, context) => runtime.getLocalIdentity(payload, context),
     [USER_REVOKE_AUTHORIZATION_METHOD]: (runtime, payload, context) => runtime.revokeAuthorization(payload, context),
     [USER_GET_STEAM_GAME_LIST_METHOD]: (runtime, payload) => runtime.getSteamGameList(payload),
     [SHARE_SHOW_SHARE_MENU_METHOD]: (runtime, payload) => runtime.showShareMenu(payload),
@@ -5610,6 +5581,9 @@ function createBrowserMockRuntimePlatformAdapter(options) {
             },
         },
         auth: {
+            emitAuthEvent(name, payload) {
+                options.onAuthEvent?.(name, payload);
+            },
             async getCurrentUserId() {
                 const user = options.getCurrentUser();
                 return user?.app_user_id;
@@ -5629,27 +5603,21 @@ function createBrowserMockRuntimePlatformAdapter(options) {
             },
         },
         user: {
-            async getUserInfo() {
+            async getUserInfo(identity) {
                 const currentUser = options.getCurrentUser();
                 const appUserId = currentUser?.app_user_id;
-                return appUserId
+                const miniProgramId = identity?.miniProgramId;
+                return appUserId && miniProgramId
                     ? {
                         isHeyboxAppLoggedIn: true,
                         authorization: { identity: 'granted', profile: 'not_requested' },
                         userInfo: {
-                            app_user_id: appUserId,
+                            app_user_id: `${appUserId}:${miniProgramId}`,
                             profile: { nickname: currentUser?.nickname || '', avatar: currentUser?.avatar || '' },
                         },
                     }
                     : { isHeyboxAppLoggedIn: false, authorization: null, userInfo: null };
             },
-            async getLocalIdentity() {
-                const appUserId = options.getCurrentUser()?.app_user_id;
-                if (!appUserId) {
-                    throw createMockBridgeError('NOT_LOGGED_IN', '当前 Mock 用户未登录');
-                }
-                return { appUserId };
-            },
             async revokeAuthorization(request) {
                 if (!request.trustedUserGesture) {
                     throw createMockBridgeError('USER_GESTURE_REQUIRED', 'Mock 撤销授权需要可信用户手势');
@@ -5838,10 +5806,6 @@ class MiniProgramMockRuntime {
         this.assertMockHostUserApiEnabled();
         return getMiniProgramRuntimeUserInfo(this.adapter, this.options.identity);
     }
-    getLocalIdentity(payload, context) {
-        this.assertMockHostUserApiEnabled();
-        return getMiniProgramRuntimeLocalIdentity(payload, this.adapter, this.options.identity, context.trustedUserGesture);
-    }
     revokeAuthorization(payload, context) {
         if (!this.authorizationMutationEnabled) {
             throw createMockBridgeError('SERVER_API_REQUIRED', '当前模式缺少有效的小程序权限快照');
@@ -6852,8 +6816,10 @@ const storage = new Map();
 const logs = [];
 let handshaken = false;
 let navigationBarStyle = 'dark';
+let mockHostDisposed = false;
 let mobileQrGeneration = 0;
 let mobileQrRefreshTimer;
+let nativeLaunchConfigRefreshTimer;
 let mobileDevSessionCreation = Promise.resolve();
 let currentUser = {
     app_user_id: 'au_debug_user',
@@ -6913,6 +6879,7 @@ const platformAdapter = createBrowserMockRuntimePlatformAdapter({
         currentUser = createUserFromForm();
         updateUserStatus();
     },
+    onAuthEvent: (name, payload) => postEvent(name, payload),
     requestNetwork,
     setDocumentTitle(title) {
         document.title = title;
@@ -6931,10 +6898,7 @@ updateUserStatus();
 updateStorageSnapshot();
 updatePermissionControls();
 window.addEventListener('message', handleMessage);
-window.addEventListener('beforeunload', () => {
-    clearMobileQrRefreshTimer();
-    postEvent('unload', { timestamp: Date.now() });
-});
+window.addEventListener('beforeunload', disposeMockHost);
 queryElement('#login-button').addEventListener('click', () => {
     void runtime.login();
 });
@@ -6967,13 +6931,13 @@ elements.resetPermissionsButton.addEventListener('click', () => {
 const mobileAppQrReady = setupMobileAppQr();
 if (bootstrap.devContext.source === 'remote') {
     void mobileAppQrReady.then(() => {
-        window.setInterval(() => void refreshNativeLaunchConfig(), NATIVE_LAUNCH_CONFIG_REFRESH_MS);
+        if (mockHostDisposed)
+            return;
+        nativeLaunchConfigRefreshTimer = window.setInterval(() => void refreshNativeLaunchConfig(), NATIVE_LAUNCH_CONFIG_REFRESH_MS);
     });
 }
 function createRuntime() {
     return new MiniProgramMockRuntime(platformAdapter, {
-        onHeyboxAppLoginChange: payload => postEvent('heybox_app_login_change', payload),
-        onUserInfoAuthorizationChange: authorization => postEvent('user_info_authorization_change', authorization),
         runtimePermissions: createMiniProgramMockRuntimePermissions(permissionState),
     });
 }
@@ -7475,6 +7439,8 @@ function setupMobileLanSelect() {
     elements.mobileLanSelect.disabled = !hasLanAddress;
 }
 async function updateMobileQrCode() {
+    if (mockHostDisposed)
+        return;
     const generation = ++mobileQrGeneration;
     clearMobileQrRefreshTimer();
     if (nativeAppLaunchUnavailableReason) {
@@ -7586,6 +7552,19 @@ function clearMobileQrRefreshTimer() {
     window.clearTimeout(mobileQrRefreshTimer);
     mobileQrRefreshTimer = undefined;
 }
+function disposeMockHost() {
+    if (mockHostDisposed)
+        return;
+    mockHostDisposed = true;
+    mobileQrGeneration += 1;
+    clearMobileQrRefreshTimer();
+    if (nativeLaunchConfigRefreshTimer !== undefined) {
+        window.clearInterval(nativeLaunchConfigRefreshTimer);
+        nativeLaunchConfigRefreshTimer = undefined;
+    }
+    window.removeEventListener('message', handleMessage);
+    postEvent('unload', { timestamp: Date.now() });
+}
 function applyDevContextToMobileQrPayload(payload, devContextUrl) {
     const protocolMarker = payload.includes('#heybox://') ? '#heybox://' : 'heybox://';
     const protocolIndex = payload.indexOf(protocolMarker);

package/dist/index.cjs.js

@@ -640,7 +640,7 @@ function createMessageId() {
 /** 构建时替换为当前发布包的实际版本。 */
 const HB_SDK_VERSION = typeof undefined === 'string'
     ? undefined
-    : '0.7.1';
+    : '0.7.2';
 
 /**
  * 判断未知数据是否符合小程序 bridge 消息信封。
@@ -1019,8 +1019,6 @@ class MiniProgramBridgeClient {
 const AUTH_LOGIN_METHOD = 'auth.login';
 /** 读取当前登录态、授权状态和已获准披露资料的 bridge method 标识。 */
 const USER_GET_INFO_METHOD = 'user.getInfo';
-/** 读取当前用户小程序隔离身份的 bridge method 标识。 */
-const USER_GET_LOCAL_IDENTITY_METHOD = 'user.getLocalIdentity';
 /** 撤销当前用户授予本小程序授权的 bridge method 标识。 */
 const USER_REVOKE_AUTHORIZATION_METHOD = 'user.revokeAuthorization';
 /** 读取当前已登录用户 Steam 游戏库的 bridge method 标识。 */
@@ -1450,8 +1448,8 @@ function createViewportModule(requester) {
  *
  * @returns 当前用户的登录态与公开基础资料。
  *
- * 该能力仅在身份授权后返回按小程序隔离的 `app_user_id`，仅在 profile
- * 授权后返回昵称与头像。未登录时返回
+ * 未开通网络权限且当前黑盒 APP 用户已登录时，该能力会静默建立或读取按小程序隔离的
+ * `app_user_id`，不展示授权 UI；仅在 profile 授权后返回昵称与头像。未登录时返回
  * `{ isHeyboxAppLoggedIn: false, authorization: null, userInfo: null }`。
  *
  * @throws {HbMiniProgramSDKError} 当 SDK 调用失败时抛出。
@@ -1460,10 +1458,6 @@ function getInfo(requester) {
     return requester.request(USER_GET_INFO_METHOD);
 }
 
-function getLocalIdentity(requester) {
-    return requester.request(USER_GET_LOCAL_IDENTITY_METHOD);
-}
-
 function revokeAuthorization(requester) {
     return requester.request(USER_REVOKE_AUTHORIZATION_METHOD);
 }
@@ -1482,7 +1476,6 @@ function getSteamGameList(requester, options) {
 function createUserModule(requester) {
     return {
         getInfo: () => getInfo(requester),
-        getLocalIdentity: () => getLocalIdentity(requester),
         revokeAuthorization: () => revokeAuthorization(requester),
         getSteamGameList: (options) => getSteamGameList(requester, options),
     };
@@ -1785,7 +1778,6 @@ const auth = {
 /** 默认 SDK 实例的用户资料模块。 */
 const user = {
     getInfo: () => getDefaultSDK().user.getInfo(),
-    getLocalIdentity: () => getDefaultSDK().user.getLocalIdentity(),
     revokeAuthorization: () => getDefaultSDK().user.revokeAuthorization(),
     getSteamGameList: (options) => getDefaultSDK().user.getSteamGameList(options),
 };

package/dist/index.esm.js

@@ -636,7 +636,7 @@ function createMessageId() {
 /** 构建时替换为当前发布包的实际版本。 */
 const HB_SDK_VERSION = typeof undefined === 'string'
     ? undefined
-    : '0.7.1';
+    : '0.7.2';
 
 /**
  * 判断未知数据是否符合小程序 bridge 消息信封。
@@ -1015,8 +1015,6 @@ class MiniProgramBridgeClient {
 const AUTH_LOGIN_METHOD = 'auth.login';
 /** 读取当前登录态、授权状态和已获准披露资料的 bridge method 标识。 */
 const USER_GET_INFO_METHOD = 'user.getInfo';
-/** 读取当前用户小程序隔离身份的 bridge method 标识。 */
-const USER_GET_LOCAL_IDENTITY_METHOD = 'user.getLocalIdentity';
 /** 撤销当前用户授予本小程序授权的 bridge method 标识。 */
 const USER_REVOKE_AUTHORIZATION_METHOD = 'user.revokeAuthorization';
 /** 读取当前已登录用户 Steam 游戏库的 bridge method 标识。 */
@@ -1446,8 +1444,8 @@ function createViewportModule(requester) {
  *
  * @returns 当前用户的登录态与公开基础资料。
  *
- * 该能力仅在身份授权后返回按小程序隔离的 `app_user_id`，仅在 profile
- * 授权后返回昵称与头像。未登录时返回
+ * 未开通网络权限且当前黑盒 APP 用户已登录时，该能力会静默建立或读取按小程序隔离的
+ * `app_user_id`，不展示授权 UI；仅在 profile 授权后返回昵称与头像。未登录时返回
  * `{ isHeyboxAppLoggedIn: false, authorization: null, userInfo: null }`。
  *
  * @throws {HbMiniProgramSDKError} 当 SDK 调用失败时抛出。
@@ -1456,10 +1454,6 @@ function getInfo(requester) {
     return requester.request(USER_GET_INFO_METHOD);
 }
 
-function getLocalIdentity(requester) {
-    return requester.request(USER_GET_LOCAL_IDENTITY_METHOD);
-}
-
 function revokeAuthorization(requester) {
     return requester.request(USER_REVOKE_AUTHORIZATION_METHOD);
 }
@@ -1478,7 +1472,6 @@ function getSteamGameList(requester, options) {
 function createUserModule(requester) {
     return {
         getInfo: () => getInfo(requester),
-        getLocalIdentity: () => getLocalIdentity(requester),
         revokeAuthorization: () => revokeAuthorization(requester),
         getSteamGameList: (options) => getSteamGameList(requester, options),
     };
@@ -1781,7 +1774,6 @@ const auth = {
 /** 默认 SDK 实例的用户资料模块。 */
 const user = {
     getInfo: () => getDefaultSDK().user.getInfo(),
-    getLocalIdentity: () => getDefaultSDK().user.getLocalIdentity(),
     revokeAuthorization: () => getDefaultSDK().user.revokeAuthorization(),
     getSteamGameList: (options) => getDefaultSDK().user.getSteamGameList(options),
 };