@heybox/hb-sdk 0.8.0-alpha.9 → 0.8.0

package/dist/cli-chunks/{index.esm-BYifBABc.cjs → index.esm-BiAaAUFC.cjs}

@@ -11,8 +11,8 @@ var require$$0$4 = require('url');
 var require$$0 = require('zlib');
 var require$$0$1 = require('buffer');
 var require$$1 = require('util');
-var index = require('./index-BwGBr1ZA.cjs');
-var dev = require('./dev-Dik2zr5R.cjs');
+var index = require('./index-MMW2ibQm.cjs');
+var dev = require('./dev-CyZuw7Yn.cjs');
 require('node:module');
 require('node:fs');
 require('node:fs/promises');
@@ -27,12 +27,13 @@ require('node:net');
 require('node:crypto');
 require('node:dns/promises');
 require('node:http');
-require('./context-CKzZxKbF.cjs');
-require('./session-B6Mo9eYW.cjs');
+require('./context-m2W2XbL0.cjs');
+require('./runtime-permission-env-CtL8rsjB.cjs');
+require('./version-yEn1E2Bg.cjs');
+require('node:async_hooks');
+require('./session-DjBkjaF8.cjs');
 require('fs');
 require('constants');
-require('./runtime-permission-env-CjsCe5bp.cjs');
-require('node:async_hooks');
 require('undici');
 require('./browser-RAy8e8cV.cjs');
 require('node:process');
@@ -40,8 +41,7 @@ require('node:buffer');
 require('node:url');
 require('node:util');
 require('node:child_process');
-require('./project-vite-BIPrOtRO.cjs');
-require('./version-DDB_btOG.cjs');
+require('./project-vite-BQj8YLI4.cjs');
 
 var bufferUtil = {exports: {}};
 

package/dist/cli-chunks/{login-Dr9lclu3.cjs → login-B3TThMss.cjs}

@@ -3,9 +3,9 @@
 var promises = require('node:readline/promises');
 var node_crypto = require('node:crypto');
 var node_http = require('node:http');
-var session = require('./session-B6Mo9eYW.cjs');
+var session = require('./session-DjBkjaF8.cjs');
 var browser = require('./browser-RAy8e8cV.cjs');
-var index = require('./index-BwGBr1ZA.cjs');
+var index = require('./index-MMW2ibQm.cjs');
 require('node:path');
 require('fs');
 require('constants');

package/dist/cli-chunks/{project-vite-BIPrOtRO.cjs → project-vite-BQj8YLI4.cjs}

@@ -5,7 +5,7 @@ var fs$1 = require('node:fs/promises');
 var node_module = require('node:module');
 var path = require('node:path');
 var node_url = require('node:url');
-var index = require('./index-BwGBr1ZA.cjs');
+var index = require('./index-MMW2ibQm.cjs');
 
 function findProjectRoot(startDir) {
     let current = path.resolve(startDir);

package/dist/cli-chunks/{remote-DXxyA14a.cjs → remote-DNvI7tHH.cjs}

@@ -1,16 +1,16 @@
 'use strict';
 
 var promises = require('node:readline/promises');
-var index = require('./index-BwGBr1ZA.cjs');
-var session = require('./session-B6Mo9eYW.cjs');
+var index = require('./index-MMW2ibQm.cjs');
+var session = require('./session-DjBkjaF8.cjs');
 var childProcess = require('node:child_process');
 var fs = require('node:fs');
 var fs$1 = require('node:fs/promises');
 var path = require('node:path');
-var runtimePermissionEnv = require('./runtime-permission-env-CjsCe5bp.cjs');
-var runtimeGate = require('./runtime-gate-DFjw66kF.cjs');
+var runtimePermissionEnv = require('./runtime-permission-env-CtL8rsjB.cjs');
+var runtimeGate = require('./runtime-gate-BEFp1w_s.cjs');
 var node_crypto = require('node:crypto');
-var context = require('./context-CKzZxKbF.cjs');
+var context = require('./context-m2W2XbL0.cjs');
 require('node:module');
 require('path');
 require('os');
@@ -23,6 +23,7 @@ require('buffer');
 require('util');
 require('fs');
 require('constants');
+require('./version-yEn1E2Bg.cjs');
 require('node:async_hooks');
 
 async function getCDNUploadInfo(options, runtime = {}) {
@@ -271,7 +272,7 @@ function createDefaultCosClient(uploadToken, COS) {
     };
 }
 async function loadCosConstructor() {
-    const cosModule = await Promise.resolve().then(function () { return require('./index-Cl0XaX8e.cjs'); }).then(function (n) { return n.index; });
+    const cosModule = await Promise.resolve().then(function () { return require('./index-DATObqzK.cjs'); }).then(function (n) { return n.index; });
     return cosModule.default;
 }
 function formatSize(bytes) {
@@ -530,6 +531,7 @@ async function runDeployCommand(options, runtime = {}) {
             precheckVersion = precheck.version || precheck.version_normalized || fromVersion;
         }
         else {
+            const localPermissions = runtimePermissionEnv.readMiniappPermissionsFromPackageJson(projectRoot, runtimePermissionEnv.resolveMiniappSdkVersion());
             if (typeof packageJson.scripts?.build !== 'string') {
                 throw new Error('package.json scripts.build 未定义，请添加 build 脚本');
             }
@@ -552,7 +554,8 @@ async function runDeployCommand(options, runtime = {}) {
                     loginBaseUrl,
                     session: session$1,
                 }), { successText: '已读取远端小程序权限' });
-                skipPlatformCsp = context.shouldSkipMiniappPlatformCsp(detail.runtime_permissions);
+                const localNetworkEnabled = !localPermissions.declared || localPermissions.permissions?.network?.enabled === true;
+                skipPlatformCsp = localNetworkEnabled && context.shouldSkipMiniappPlatformCsp(detail.runtime_permissions);
             }
             catch (error) {
                 logger.warn('未读取到远端 Runtime 权限，构建将继续注入平台 CSP。');
@@ -561,7 +564,8 @@ async function runDeployCommand(options, runtime = {}) {
             const pm = detectPackageManager(projectRoot);
             const platform = runtime.platform ?? process.platform;
             const buildMode = validateBuildMode(env.HB_SDK_ENV?.trim(), platform);
-            logger.info(`开始构建: ${pm} ${createBuildArgs(pm, buildMode).join(' ')}`);
+            const buildScript = await readProjectBuildScript(projectRoot);
+            logger.info(`开始构建: ${pm} ${createBuildArgs(pm, buildMode, buildScript).join(' ')}`);
             await runBuildScript(pm, projectRoot, runtime.spawn ?? childProcess.spawn, {
                 env: runtimePermissionEnv.createMiniappPlatformCspEnv(env, skipPlatformCsp),
                 mode: buildMode,
@@ -801,9 +805,10 @@ function detectPackageManager(projectRoot) {
     return 'npm';
 }
 async function runBuildScript(pm, cwd, spawnImpl, options) {
+    const buildScript = await readProjectBuildScript(cwd);
     await new Promise((resolve, reject) => {
         const pipeStdoutToStderr = options.outputMode === 'stderr';
-        const buildArgs = createBuildArgs(pm, options.mode);
+        const buildArgs = createBuildArgs(pm, options.mode, buildScript);
         const isWindows = options.platform === 'win32';
         const [executable, args] = isWindows ? createWindowsBuildCommand(pm, buildArgs) : [pm, buildArgs];
         const child = spawnImpl(executable, args, {
@@ -841,8 +846,18 @@ function validateBuildMode(mode, platform) {
 function escapeWindowsCommandArgument(argument) {
     return `"${argument}"`;
 }
-function createBuildArgs(pm, mode) {
-    return ['run', 'build', ...(mode ? [...(pm === 'npm' ? ['--'] : []), '--mode', mode] : [])];
+async function readProjectBuildScript(projectRoot) {
+    try {
+        const packageJson = JSON.parse(await fs$1.readFile(path.join(projectRoot, 'package.json'), 'utf8'));
+        return typeof packageJson.scripts?.build === 'string' ? packageJson.scripts.build : '';
+    }
+    catch {
+        return '';
+    }
+}
+function createBuildArgs(pm, mode, buildScript) {
+    const modeOption = /\bhb-sdk\s+build\b/.test(buildScript) ? '--env' : '--mode';
+    return ['run', 'build', ...(mode ? [...(pm === 'npm' ? ['--'] : []), modeOption, mode] : [])];
 }
 async function walkDistFiles(distDir) {
     const results = [];
@@ -1171,7 +1186,10 @@ async function remoteEntitySwitch(options, context, runtime) {
 async function remoteList(options, context, runtime) {
     const result = await context.api.listMiniPrograms({ keyword: options.keyword, status: options.status });
     const items = Array.isArray(result.items) ? result.items : [];
-    const outputItems = items.map((item) => ({ ...toCamelCaseDeep(item), bound: item.mini_program_id === context.binding }));
+    const outputItems = items.map((item) => ({
+        ...toCamelCaseDeep(item),
+        bound: item.mini_program_id === context.binding,
+    }));
     const output = { changed: false, items: outputItems, total: readNumber(result.total, items.length) };
     if (!options.json) {
         if (items.length === 0) {
@@ -1228,9 +1246,11 @@ async function remoteBind(options, context$1, runtime) {
 async function remoteInfo(options, context, runtime) {
     const miniProgramId = requireBinding(context);
     const detail = await context.api.getMiniProgramDetail(miniProgramId);
-    const output = { changed: false, miniProgramId, detail: toCamelCaseDeep(detail) };
+    const localPermissions = runtimePermissionEnv.readMiniappPermissionsFromPackageJson(context.packageJson.projectRoot, runtimePermissionEnv.resolveMiniappSdkVersion());
+    const permissionViews = runtimePermissionEnv.composeMiniappRuntimePermissions(localPermissions, detail.runtime_permissions).views;
+    const output = { changed: false, miniProgramId, detail: toCamelCaseDeep(detail), permissions: permissionViews };
     if (!options.json) {
-        printMiniProgramDetail(context.logger, detail);
+        printMiniProgramDetail(context.logger, detail, permissionViews);
     }
     return finishRemoteCommand(options, runtime, output);
 }
@@ -1356,7 +1376,9 @@ async function remotePreview(options, context, runtime) {
 }
 async function remoteDangerousWrite(options, context, runtime) {
     const miniProgramId = requireBinding(context);
-    const version = options.command === 'release' || options.command === 'withdraw' ? requireNonEmpty(options.version, `remote ${options.command} 必须传 <version>`) : undefined;
+    const version = options.command === 'release' || options.command === 'withdraw'
+        ? requireNonEmpty(options.version, `remote ${options.command} 必须传 <version>`)
+        : undefined;
     const detail = await context.api.getMiniProgramDetail(miniProgramId);
     await confirmDangerousRemoteChange(options, runtime, context.logger, {
         miniProgramId,
@@ -1545,7 +1567,18 @@ function parseEntityId(value) {
     return entityId;
 }
 async function listDeveloperEntitiesWithAccessFallback(context) {
-    const result = await context.api.listDeveloperEntities();
+    let result;
+    try {
+        result = await context.api.listDeveloperEntities();
+    }
+    catch (error) {
+        const fallback = createEntityFromAccessStatus(await context.api.accessStatus());
+        if (!fallback) {
+            throw error;
+        }
+        context.logger.debug('开发者主体列表不可用，已回退使用小程序工坊准入主体');
+        return { fromAccessFallback: true, items: [fallback], total: 1 };
+    }
     const items = normalizeDeveloperEntities(result);
     if (items.length > 0) {
         return { items, total: readNumber(result.total, items.length) };
@@ -1716,7 +1749,7 @@ async function promptConfirm(message, runtime) {
         rl.close();
     }
 }
-function printMiniProgramDetail(logger, detail) {
+function printMiniProgramDetail(logger, detail, permissionViews) {
     logger.info(`Mini-program: ${detail.mini_program_id ?? '--'}`);
     logger.info(`Name: ${detail.name ?? '--'}`);
     logger.info(`Status: ${detail.status ?? '--'}`);
@@ -1727,14 +1760,13 @@ function printMiniProgramDetail(logger, detail) {
     if (detail.protocol_string) {
         logger.info(`Protocol: ${detail.protocol_string}`);
     }
-    const runtimePermissions = detail.runtime_permissions;
-    if (runtimePermissions) {
-        logger.info(`Runtime 权限: schema=${String(runtimePermissions.schema_version ?? '--')} revision=${String(runtimePermissions.revision ?? '--')}`);
-        if (Array.isArray(runtimePermissions.entries)) {
-            runtimePermissions.entries.forEach((entry) => {
-                logger.info(`  ${JSON.stringify(entry)}`);
-            });
-        }
+    logger.info('权限:');
+    for (const view of permissionViews) {
+        const approval = view.access === 'platform-approval' ? ` 需申请=是 批准=${view.approved ? '是' : '否'}` : ' 需申请=否';
+        const configs = view.requestedConfig
+            ? ` requested=${JSON.stringify(view.requestedConfig)} approved=${JSON.stringify(view.approvedConfig)} effective=${JSON.stringify(view.effectiveConfig)}`
+            : '';
+        logger.info(`  ${view.key}: 声明=${view.declared ? '是' : '否'}${approval} 最终=${view.effective ? '可用' : '不可用'}${configs}`);
     }
 }
 function printDeveloperEntities(logger, entities) {

package/dist/cli-chunks/{runtime-gate-DFjw66kF.cjs → runtime-gate-BEFp1w_s.cjs}

@@ -1,6 +1,6 @@
 'use strict';
 
-var runtimePermissionEnv = require('./runtime-permission-env-CjsCe5bp.cjs');
+var runtimePermissionEnv = require('./runtime-permission-env-CtL8rsjB.cjs');
 
 const MINIAPP_PLATFORM_VALUES = ['android', 'ios', 'ohos', 'windows', 'macos', 'linux'];
 function isValidMiniappManifestVersion(version) {
@@ -32,10 +32,18 @@ function parseMiniappManifestJson(raw, sourceLabel = 'manifest.json') {
     };
 }
 function validateMiniappManifestForDeploy(manifest) {
+    const version = validateMiniappManifestVersion(manifest.version, 'manifest.version');
+    const sdkVersion = validateSdkVersion(manifest.sdkVersion, 'manifest.sdkVersion');
+    const permissions = runtimePermissionEnv.parseMiniappPermissions(manifest.permissions, {
+        present: Object.prototype.hasOwnProperty.call(manifest, 'permissions'),
+        sdkVersion,
+        sourceLabel: 'manifest.permissions',
+    });
     return {
-        version: validateMiniappManifestVersion(manifest.version, 'manifest.version'),
-        sdkVersion: validateSdkVersion(manifest.sdkVersion, 'manifest.sdkVersion'),
+        version,
+        sdkVersion,
         platforms: validateMiniappPlatforms(manifest.platforms, 'manifest.platforms'),
+        ...(permissions.permissions === undefined ? {} : { permissions: permissions.permissions }),
     };
 }
 function validateMiniappPlatforms(platforms, sourceLabel = 'platforms') {

package/dist/cli-chunks/{runtime-permission-env-CjsCe5bp.cjs → runtime-permission-env-CtL8rsjB.cjs}

@@ -1,5 +1,8 @@
 'use strict';
 
+var fs = require('node:fs');
+var path = require('node:path');
+var version = require('./version-yEn1E2Bg.cjs');
 var node_async_hooks = require('node:async_hooks');
 
 var re = {exports: {}};
@@ -2787,6 +2790,285 @@ function requireSemver () {
 
 var semverExports = requireSemver();
 
+const MINI_PROGRAM_PERMISSION_KEYS = [
+    'userInfo',
+    'steamLibrary',
+    'share',
+    'storage',
+    'filesystem',
+    'clipboard',
+    'leaderboard',
+    'network',
+];
+const MINI_PROGRAM_PERMISSION_CATALOG = [
+    {
+        key: 'userInfo',
+        name: '用户信息',
+        description: '登录小程序并读取当前用户的授权信息。',
+        access: 'declaration',
+        risk: 'medium',
+        config: {},
+        methods: ['auth.login', 'user.getInfo'],
+        conditions: ['继续执行黑盒登录、用户授权和可信手势规则。'],
+    },
+    {
+        key: 'steamLibrary',
+        name: 'Steam 游戏库',
+        description: '读取当前用户授权的 Steam 游戏库。',
+        access: 'declaration',
+        risk: 'high',
+        config: {},
+        methods: ['user.getSteamGameList'],
+        conditions: ['继续执行账号绑定和数据可用性规则。'],
+    },
+    {
+        key: 'share',
+        name: '分享',
+        description: '使用小程序分享、分享菜单和截图能力。',
+        access: 'declaration',
+        risk: 'medium',
+        config: {},
+        methods: ['share.copyLink', 'share.showShareMenu', 'share.screenshot'],
+        conditions: ['继续执行分享参数校验和 Host 支持检查。'],
+    },
+    {
+        key: 'storage',
+        name: '键值存储',
+        description: '读写按小程序隔离的简单键值数据。',
+        access: 'declaration',
+        risk: 'medium',
+        config: {},
+        methods: ['storage.getStorage', 'storage.setStorage'],
+        conditions: ['仅用于简单键值存储，不包含文件系统。'],
+    },
+    {
+        key: 'filesystem',
+        name: '文件系统',
+        description: '访问小程序沙盒文件和用户选择的外部文件。',
+        access: 'declaration',
+        risk: 'high',
+        config: {},
+        methods: [
+            'network.download',
+            'files.pickFiles',
+            'files.pickDirectory',
+            'files.saveFile',
+            'file.create',
+            'file.remove',
+            'file.exists',
+            'file.readText',
+            'file.writeText',
+            'file.readBytes',
+            'file.writeBytes',
+            'file.stat',
+            'directory.create',
+            'directory.remove',
+            'directory.exists',
+            'directory.list',
+        ],
+        conditions: ['外部文件继续要求有效的用户选择、会话句柄和匹配的读写模式。'],
+    },
+    {
+        key: 'clipboard',
+        name: '剪贴板',
+        description: '向系统剪贴板写入文本。',
+        access: 'declaration',
+        risk: 'medium',
+        config: {},
+        methods: ['device.setClipboard'],
+        conditions: ['继续执行文本长度和 Host 支持限制。'],
+    },
+    {
+        key: 'leaderboard',
+        name: '排行榜',
+        description: '读写小程序云排行榜。',
+        access: 'declaration',
+        risk: 'medium',
+        config: {},
+        methods: [
+            'cloud.leaderboard.submit',
+            'cloud.leaderboard.getList',
+            'cloud.leaderboard.getCurrentUserEntry',
+            'cloud.leaderboard.deleteCurrentUserEntry',
+            'cloud.leaderboard.getInfo',
+        ],
+        conditions: ['排行榜必须已创建，用户和资源规则保持不变。'],
+    },
+    {
+        key: 'network',
+        name: '网络',
+        description: '通过 network 模块请求或下载外部资源。',
+        access: 'platform-approval',
+        risk: 'high',
+        config: {
+            useOfficialDomain: {
+                type: 'boolean',
+                required: false,
+                default: false,
+                description: '是否申请访问小黑盒官方域名。',
+            },
+        },
+        methods: ['network.request', 'network.download'],
+        conditions: ['声明后仍需平台批准，并继续执行网络安全策略。'],
+    },
+];
+new Set(MINI_PROGRAM_PERMISSION_KEYS);
+
+const MANAGED_RUNTIME_PERMISSION_KEYS = new Set(MINI_PROGRAM_PERMISSION_KEYS);
+function isManagedMiniProgramRuntimePermissionKey(key) {
+    return MANAGED_RUNTIME_PERMISSION_KEYS.has(key);
+}
+function parseMiniProgramRuntimePermissions(snapshot) {
+    if (!isRecord$2(snapshot) || snapshot.schema_version !== 1 || !Array.isArray(snapshot.entries)) {
+        return { valid: false, permissions: {} };
+    }
+    if (snapshot.revision !== undefined && (typeof snapshot.revision !== 'number' || !Number.isInteger(snapshot.revision) || snapshot.revision < 0)) {
+        return { valid: false, permissions: {} };
+    }
+    const seenKeys = new Set();
+    const permissions = {};
+    for (const rawEntry of snapshot.entries) {
+        if (!isRecord$2(rawEntry) || typeof rawEntry.key !== 'string' || !rawEntry.key.trim()) {
+            return { valid: false, permissions: {} };
+        }
+        const inputKey = rawEntry.key.trim();
+        const key = inputKey === 'network.request' ? 'network' : inputKey;
+        if (seenKeys.has(key) || (rawEntry.status !== 'enabled' && rawEntry.status !== 'disabled')) {
+            return { valid: false, permissions: {} };
+        }
+        seenKeys.add(key);
+        if (!isManagedMiniProgramRuntimePermissionKey(key)) {
+            if (!isRecord$2(rawEntry.config))
+                return { valid: false, permissions: {} };
+            continue;
+        }
+        if (key === 'network') {
+            const config = rawEntry.config;
+            if (!isRecord$2(config) || typeof config.useOfficialDomain !== 'boolean') {
+                return { valid: false, permissions: {} };
+            }
+            permissions[key] = {
+                key,
+                status: rawEntry.status,
+                config: { useOfficialDomain: config.useOfficialDomain },
+            };
+            continue;
+        }
+        if (rawEntry.config !== null && rawEntry.config !== undefined && (!isRecord$2(rawEntry.config) || Object.keys(rawEntry.config).length > 0)) {
+            return { valid: false, permissions: {} };
+        }
+        permissions[key] = {
+            key,
+            status: rawEntry.status,
+            config: {},
+        };
+    }
+    return { valid: true, permissions };
+}
+function isRecord$2(value) {
+    return typeof value === 'object' && value !== null && !Array.isArray(value);
+}
+
+const MINIAPP_PERMISSION_KEYS = MINI_PROGRAM_PERMISSION_KEYS;
+function parseMiniappPermissions(value, options) {
+    const sourceLabel = options.sourceLabel ?? 'package.json#heybox.permissions';
+    if (!options.present) {
+        if (requiresExplicitPermissions(options.sdkVersion)) {
+            throw new Error(`${sourceLabel} 在 @heybox/hb-sdk ${options.sdkVersion} 中必须声明；无权限需求时请配置空对象 {}`);
+        }
+        return { declared: false };
+    }
+    if (!isRecord$1(value)) {
+        throw new Error(`${sourceLabel} 必须是 JSON 对象`);
+    }
+    const knownKeys = new Set(MINIAPP_PERMISSION_KEYS);
+    for (const key of Object.keys(value)) {
+        if (!knownKeys.has(key))
+            throw new Error(`${sourceLabel} 包含未知权限：${key}`);
+    }
+    const permissions = {};
+    for (const key of MINIAPP_PERMISSION_KEYS) {
+        if (!Object.prototype.hasOwnProperty.call(value, key))
+            continue;
+        const declaration = value[key];
+        const itemLabel = `${sourceLabel}.${key}`;
+        if (!isRecord$1(declaration))
+            throw new Error(`${itemLabel} 必须是 JSON 对象`);
+        const definition = MINI_PROGRAM_PERMISSION_CATALOG.find((item) => item.key === key);
+        if (!definition)
+            throw new Error(`权限目录缺少定义：${key}`);
+        const allowedFields = new Set(['enabled', ...Object.keys(definition.config)]);
+        for (const field of Object.keys(declaration)) {
+            if (!allowedFields.has(field))
+                throw new Error(`${itemLabel} 包含未知字段：${field}`);
+        }
+        if (typeof declaration.enabled !== 'boolean')
+            throw new Error(`${itemLabel}.enabled 必须是 boolean`);
+        let useOfficialDomain = false;
+        if (key === 'network') {
+            if (declaration.useOfficialDomain !== undefined && typeof declaration.useOfficialDomain !== 'boolean') {
+                throw new Error(`${itemLabel}.useOfficialDomain 必须是 boolean`);
+            }
+            useOfficialDomain = declaration.useOfficialDomain === true;
+        }
+        if (!declaration.enabled)
+            continue;
+        permissions[key] = key === 'network' ? { enabled: true, useOfficialDomain } : { enabled: true };
+    }
+    return { declared: true, permissions: permissions };
+}
+function requiresExplicitPermissions(sdkVersion) {
+    const parsed = semverExports.parse(sdkVersion);
+    if (!parsed)
+        throw new Error(`sdkVersion 必须是合法 SemVer：${sdkVersion}`);
+    return parsed.major > 0 || parsed.minor >= 9;
+}
+function getMissingPermissionsWarning(sourceLabel = 'package.json#heybox.permissions') {
+    return `${sourceLabel} 尚未声明。当前按 0.8 兼容行为构建；0.9.0 起将拒绝构建，请尽快补充权限声明（无权限需求时配置 {}）。`;
+}
+function composeMiniappRuntimePermissions(local, approvals) {
+    const parsedApprovals = parseMiniProgramRuntimePermissions(approvals);
+    const approvalRevision = isRecord$1(approvals) && Number.isInteger(approvals.revision) ? approvals.revision : undefined;
+    const views = [];
+    const entries = [];
+    for (const definition of MINI_PROGRAM_PERMISSION_CATALOG) {
+        const declaration = local.permissions?.[definition.key];
+        const declared = !local.declared || declaration?.enabled === true;
+        if (definition.access === 'declaration') {
+            views.push({ key: definition.key, access: definition.access, declared, approved: null, effective: declared });
+            if (declared)
+                entries.push({ key: definition.key, status: 'enabled', config: {} });
+            continue;
+        }
+        const approval = parsedApprovals.valid ? parsedApprovals.permissions[definition.key] : undefined;
+        const approved = approval?.status === 'enabled';
+        const requestedOfficialDomain = declaration?.enabled === true && 'useOfficialDomain' in declaration && declaration.useOfficialDomain;
+        const approvedOfficialDomain = approval?.config.useOfficialDomain === true;
+        const effective = declared && approved;
+        const effectiveOfficialDomain = effective && (local.declared ? requestedOfficialDomain : true) && approvedOfficialDomain;
+        views.push({
+            key: definition.key,
+            access: definition.access,
+            declared,
+            approved,
+            requestedConfig: { useOfficialDomain: requestedOfficialDomain },
+            approvedConfig: { useOfficialDomain: approvedOfficialDomain },
+            effective,
+            effectiveConfig: { useOfficialDomain: effectiveOfficialDomain },
+        });
+        if (declared) {
+            entries.push({ key: definition.key, status: effective ? 'enabled' : 'disabled', config: { useOfficialDomain: effectiveOfficialDomain } });
+        }
+    }
+    return {
+        runtimePermissions: { schema_version: 1, ...(approvalRevision === undefined ? {} : { revision: approvalRevision }), entries },
+        views,
+    };
+}
+function isRecord$1(value) {
+    return typeof value === 'object' && value !== null && !Array.isArray(value);
+}
+
 const MINIAPP_UPLOAD_SCOPE = 'activity';
 const ACTIVITY_UPLOAD_KEY_MAX_LENGTH = 64;
 const MINIAPP_UPLOAD_BATCH_SIZE = 50;
@@ -3063,6 +3345,68 @@ function compareBytes(left, right) {
     return left.length - right.length;
 }
 
+function findNearestPackageJsonPath(startDir) {
+    let current = path.resolve(startDir);
+    while (true) {
+        const packageJsonPath = path.join(current, 'package.json');
+        if (fs.existsSync(packageJsonPath)) {
+            return packageJsonPath;
+        }
+        const parent = path.dirname(current);
+        if (parent === current) {
+            return path.join(path.resolve(startDir), 'package.json');
+        }
+        current = parent;
+    }
+}
+function readMiniappPermissionsFromPackageJson(root, sdkVersion) {
+    const { packageJson } = readMiniappPackageJson(root);
+    const heybox = packageJson.heybox;
+    if (heybox !== undefined && !isRecord(heybox)) {
+        throw new Error('@heybox/hb-sdk 提示：package.json#heybox 必须是 JSON 对象');
+    }
+    const present = isRecord(heybox) && Object.prototype.hasOwnProperty.call(heybox, 'permissions');
+    return parseMiniappPermissions(isRecord(heybox) ? heybox.permissions : undefined, {
+        present,
+        sdkVersion,
+    });
+}
+function resolveMiniappSdkVersion() {
+    if (!version.HB_SDK_VERSION.startsWith('__HB_SDK_'))
+        return version.HB_SDK_VERSION;
+    const packageJson = JSON.parse(fs.readFileSync(path.resolve(__dirname, '..', '..', 'package.json'), 'utf8'));
+    if (typeof packageJson.version !== 'string' || !packageJson.version)
+        throw new Error('未能读取 @heybox/hb-sdk 当前版本号');
+    return packageJson.version;
+}
+function readMiniappPackageJson(root, requireVersion) {
+    const packageJsonPath = findNearestPackageJsonPath(root);
+    let content;
+    try {
+        content = fs.readFileSync(packageJsonPath, 'utf8');
+    }
+    catch (error) {
+        throw new Error(`@heybox/hb-sdk 读取 package.json 失败：${formatReason(error)}`);
+    }
+    let packageJson;
+    try {
+        packageJson = JSON.parse(content);
+    }
+    catch (error) {
+        throw new Error(`@heybox/hb-sdk 解析 package.json 失败：${formatReason(error)}`);
+    }
+    return { packageJson, version: typeof packageJson.version === 'string' ? packageJson.version.trim() : '' };
+}
+function isRecord(value) {
+    return typeof value === 'object' && value !== null && !Array.isArray(value);
+}
+function formatReason(error) {
+    if (error instanceof Error && error.message) {
+        return error.message;
+    }
+    return String(error);
+}
+
 const HB_SDK_RUNTIME_USE_OFFICIAL_DOMAIN_ENV = 'HB_SDK_RUNTIME_USE_OFFICIAL_DOMAIN';
 const HB_SDK_RUNTIME_PERMISSION_CONTEXT_ENV = 'HB_SDK_RUNTIME_PERMISSION_CONTEXT';
 const VERIFIED_RUNTIME_PERMISSION_CONTEXT = 'verified';
@@ -3142,6 +3486,7 @@ exports.LIST_USER_MINIPROGRAM_LEADERBOARD_API_PATH = LIST_USER_MINIPROGRAM_LEADE
 exports.LIST_USER_MINIPROGRAM_VERSION_API_PATH = LIST_USER_MINIPROGRAM_VERSION_API_PATH;
 exports.MINIAPP_UPLOAD_BATCH_SIZE = MINIAPP_UPLOAD_BATCH_SIZE;
 exports.MINIAPP_UPLOAD_SCOPE = MINIAPP_UPLOAD_SCOPE;
+exports.MINI_PROGRAM_PERMISSION_KEYS = MINI_PROGRAM_PERMISSION_KEYS;
 exports.PRECHECK_USER_MINIPROGRAM_VERSION_API_PATH = PRECHECK_USER_MINIPROGRAM_VERSION_API_PATH;
 exports.RELEASE_USER_MINIPROGRAM_VERSION_API_PATH = RELEASE_USER_MINIPROGRAM_VERSION_API_PATH;
 exports.REOPEN_USER_MINIPROGRAM_API_PATH = REOPEN_USER_MINIPROGRAM_API_PATH;
@@ -3153,13 +3498,19 @@ exports.USER_MINIPROGRAM_ACCESS_STATUS_API_PATH = USER_MINIPROGRAM_ACCESS_STATUS
 exports.USER_MINIPROGRAM_PREVIEW_ALLOWLIST_API_PATH = USER_MINIPROGRAM_PREVIEW_ALLOWLIST_API_PATH;
 exports.USER_MINIPROGRAM_VERSION_PREVIEW_INFO_API_PATH = USER_MINIPROGRAM_VERSION_PREVIEW_INFO_API_PATH;
 exports.WITHDRAW_USER_MINIPROGRAM_VERSION_API_PATH = WITHDRAW_USER_MINIPROGRAM_VERSION_API_PATH;
+exports.composeMiniappRuntimePermissions = composeMiniappRuntimePermissions;
 exports.createMiniappArtifactFileHeader = createMiniappArtifactFileHeader;
 exports.createMiniappArtifactSignatureHeader = createMiniappArtifactSignatureHeader;
 exports.createMiniappPlatformCspEnv = createMiniappPlatformCspEnv;
+exports.getMissingPermissionsWarning = getMissingPermissionsWarning;
 exports.normalizeRelativePath = normalizeRelativePath;
+exports.parseMiniProgramRuntimePermissions = parseMiniProgramRuntimePermissions;
+exports.parseMiniappPermissions = parseMiniappPermissions;
 exports.prepareMiniappArtifactFiles = prepareMiniappArtifactFiles;
+exports.readMiniappPermissionsFromPackageJson = readMiniappPermissionsFromPackageJson;
 exports.relativePathContainsNodeModulesSegment = relativePathContainsNodeModulesSegment;
 exports.requireSemver = requireSemver;
+exports.resolveMiniappSdkVersion = resolveMiniappSdkVersion;
 exports.resolveMiniappUploadSessionFiles = resolveMiniappUploadSessionFiles;
 exports.semverExports = semverExports;
 exports.shouldSkipMiniappPlatformCspFromEnv = shouldSkipMiniappPlatformCspFromEnv;