@heybox/hb-sdk 0.8.0-alpha.9 → 0.8.1-alpha.1

package/dist/cli-chunks/{index-Cl0XaX8e.cjs → index-RDcIrvwi.cjs}

@@ -1,13 +1,13 @@
 'use strict';
 
-var index$2 = require('./index-BwGBr1ZA.cjs');
+var index$2 = require('./index-Buner4kE.cjs');
 var require$$0$3 = require('fs');
 var require$$0$2 = require('crypto');
 var require$$1$2 = require('path');
 var require$$0$5 = require('assert');
 var require$$0$4 = require('events');
 var require$$1$1 = require('util');
-var runtimePermissionEnv = require('./runtime-permission-env-CjsCe5bp.cjs');
+var runtimePermissionEnv = require('./runtime-permission-env-DdQtxdut.cjs');
 var require$$0$7 = require('net');
 var require$$0$6 = require('url');
 var require$$2$1 = require('http');

package/dist/cli-chunks/{index.esm-BYifBABc.cjs → index.esm-qwrdRuy-.cjs}

@@ -11,8 +11,8 @@ var require$$0$4 = require('url');
 var require$$0 = require('zlib');
 var require$$0$1 = require('buffer');
 var require$$1 = require('util');
-var index = require('./index-BwGBr1ZA.cjs');
-var dev = require('./dev-Dik2zr5R.cjs');
+var index = require('./index-Buner4kE.cjs');
+var dev = require('./dev-CPBPdpyu.cjs');
 require('node:module');
 require('node:fs');
 require('node:fs/promises');
@@ -27,12 +27,13 @@ require('node:net');
 require('node:crypto');
 require('node:dns/promises');
 require('node:http');
-require('./context-CKzZxKbF.cjs');
-require('./session-B6Mo9eYW.cjs');
+require('./context-CzFFRcL4.cjs');
+require('./runtime-permission-env-DdQtxdut.cjs');
+require('./version-TXwWxKvv.cjs');
+require('node:async_hooks');
+require('./session-DHbw2Xgh.cjs');
 require('fs');
 require('constants');
-require('./runtime-permission-env-CjsCe5bp.cjs');
-require('node:async_hooks');
 require('undici');
 require('./browser-RAy8e8cV.cjs');
 require('node:process');
@@ -40,8 +41,7 @@ require('node:buffer');
 require('node:url');
 require('node:util');
 require('node:child_process');
-require('./project-vite-BIPrOtRO.cjs');
-require('./version-DDB_btOG.cjs');
+require('./project-vite-B-sK-qup.cjs');
 
 var bufferUtil = {exports: {}};
 

package/dist/cli-chunks/{login-Dr9lclu3.cjs → login-DoduAO_f.cjs}

@@ -3,9 +3,9 @@
 var promises = require('node:readline/promises');
 var node_crypto = require('node:crypto');
 var node_http = require('node:http');
-var session = require('./session-B6Mo9eYW.cjs');
+var session = require('./session-DHbw2Xgh.cjs');
 var browser = require('./browser-RAy8e8cV.cjs');
-var index = require('./index-BwGBr1ZA.cjs');
+var index = require('./index-Buner4kE.cjs');
 require('node:path');
 require('fs');
 require('constants');

package/dist/cli-chunks/{project-vite-BIPrOtRO.cjs → project-vite-B-sK-qup.cjs}

@@ -5,7 +5,7 @@ var fs$1 = require('node:fs/promises');
 var node_module = require('node:module');
 var path = require('node:path');
 var node_url = require('node:url');
-var index = require('./index-BwGBr1ZA.cjs');
+var index = require('./index-Buner4kE.cjs');
 
 function findProjectRoot(startDir) {
     let current = path.resolve(startDir);

package/dist/cli-chunks/{remote-DXxyA14a.cjs → remote-CF_SRmnj.cjs}

@@ -1,16 +1,16 @@
 'use strict';
 
 var promises = require('node:readline/promises');
-var index = require('./index-BwGBr1ZA.cjs');
-var session = require('./session-B6Mo9eYW.cjs');
+var index = require('./index-Buner4kE.cjs');
+var session = require('./session-DHbw2Xgh.cjs');
 var childProcess = require('node:child_process');
 var fs = require('node:fs');
 var fs$1 = require('node:fs/promises');
 var path = require('node:path');
-var runtimePermissionEnv = require('./runtime-permission-env-CjsCe5bp.cjs');
-var runtimeGate = require('./runtime-gate-DFjw66kF.cjs');
+var runtimePermissionEnv = require('./runtime-permission-env-DdQtxdut.cjs');
+var runtimeGate = require('./runtime-gate-FseEYZze.cjs');
 var node_crypto = require('node:crypto');
-var context = require('./context-CKzZxKbF.cjs');
+var context = require('./context-CzFFRcL4.cjs');
 require('node:module');
 require('path');
 require('os');
@@ -23,6 +23,7 @@ require('buffer');
 require('util');
 require('fs');
 require('constants');
+require('./version-TXwWxKvv.cjs');
 require('node:async_hooks');
 
 async function getCDNUploadInfo(options, runtime = {}) {
@@ -271,7 +272,7 @@ function createDefaultCosClient(uploadToken, COS) {
     };
 }
 async function loadCosConstructor() {
-    const cosModule = await Promise.resolve().then(function () { return require('./index-Cl0XaX8e.cjs'); }).then(function (n) { return n.index; });
+    const cosModule = await Promise.resolve().then(function () { return require('./index-RDcIrvwi.cjs'); }).then(function (n) { return n.index; });
     return cosModule.default;
 }
 function formatSize(bytes) {
@@ -530,6 +531,7 @@ async function runDeployCommand(options, runtime = {}) {
             precheckVersion = precheck.version || precheck.version_normalized || fromVersion;
         }
         else {
+            const localPermissions = runtimePermissionEnv.readMiniappPermissionsFromPackageJson(projectRoot, runtimePermissionEnv.resolveMiniappSdkVersion());
             if (typeof packageJson.scripts?.build !== 'string') {
                 throw new Error('package.json scripts.build 未定义，请添加 build 脚本');
             }
@@ -552,7 +554,8 @@ async function runDeployCommand(options, runtime = {}) {
                     loginBaseUrl,
                     session: session$1,
                 }), { successText: '已读取远端小程序权限' });
-                skipPlatformCsp = context.shouldSkipMiniappPlatformCsp(detail.runtime_permissions);
+                const localNetworkEnabled = !localPermissions.declared || localPermissions.permissions?.network?.enabled === true;
+                skipPlatformCsp = localNetworkEnabled && context.shouldSkipMiniappPlatformCsp(detail.runtime_permissions);
             }
             catch (error) {
                 logger.warn('未读取到远端 Runtime 权限，构建将继续注入平台 CSP。');
@@ -561,7 +564,8 @@ async function runDeployCommand(options, runtime = {}) {
             const pm = detectPackageManager(projectRoot);
             const platform = runtime.platform ?? process.platform;
             const buildMode = validateBuildMode(env.HB_SDK_ENV?.trim(), platform);
-            logger.info(`开始构建: ${pm} ${createBuildArgs(pm, buildMode).join(' ')}`);
+            const buildScript = await readProjectBuildScript(projectRoot);
+            logger.info(`开始构建: ${pm} ${createBuildArgs(pm, buildMode, buildScript).join(' ')}`);
             await runBuildScript(pm, projectRoot, runtime.spawn ?? childProcess.spawn, {
                 env: runtimePermissionEnv.createMiniappPlatformCspEnv(env, skipPlatformCsp),
                 mode: buildMode,
@@ -801,9 +805,10 @@ function detectPackageManager(projectRoot) {
     return 'npm';
 }
 async function runBuildScript(pm, cwd, spawnImpl, options) {
+    const buildScript = await readProjectBuildScript(cwd);
     await new Promise((resolve, reject) => {
         const pipeStdoutToStderr = options.outputMode === 'stderr';
-        const buildArgs = createBuildArgs(pm, options.mode);
+        const buildArgs = createBuildArgs(pm, options.mode, buildScript);
         const isWindows = options.platform === 'win32';
         const [executable, args] = isWindows ? createWindowsBuildCommand(pm, buildArgs) : [pm, buildArgs];
         const child = spawnImpl(executable, args, {
@@ -841,8 +846,18 @@ function validateBuildMode(mode, platform) {
 function escapeWindowsCommandArgument(argument) {
     return `"${argument}"`;
 }
-function createBuildArgs(pm, mode) {
-    return ['run', 'build', ...(mode ? [...(pm === 'npm' ? ['--'] : []), '--mode', mode] : [])];
+async function readProjectBuildScript(projectRoot) {
+    try {
+        const packageJson = JSON.parse(await fs$1.readFile(path.join(projectRoot, 'package.json'), 'utf8'));
+        return typeof packageJson.scripts?.build === 'string' ? packageJson.scripts.build : '';
+    }
+    catch {
+        return '';
+    }
+}
+function createBuildArgs(pm, mode, buildScript) {
+    const modeOption = /\bhb-sdk\s+build\b/.test(buildScript) ? '--env' : '--mode';
+    return ['run', 'build', ...(mode ? [...(pm === 'npm' ? ['--'] : []), modeOption, mode] : [])];
 }
 async function walkDistFiles(distDir) {
     const results = [];
@@ -1171,7 +1186,10 @@ async function remoteEntitySwitch(options, context, runtime) {
 async function remoteList(options, context, runtime) {
     const result = await context.api.listMiniPrograms({ keyword: options.keyword, status: options.status });
     const items = Array.isArray(result.items) ? result.items : [];
-    const outputItems = items.map((item) => ({ ...toCamelCaseDeep(item), bound: item.mini_program_id === context.binding }));
+    const outputItems = items.map((item) => ({
+        ...toCamelCaseDeep(item),
+        bound: item.mini_program_id === context.binding,
+    }));
     const output = { changed: false, items: outputItems, total: readNumber(result.total, items.length) };
     if (!options.json) {
         if (items.length === 0) {
@@ -1228,9 +1246,11 @@ async function remoteBind(options, context$1, runtime) {
 async function remoteInfo(options, context, runtime) {
     const miniProgramId = requireBinding(context);
     const detail = await context.api.getMiniProgramDetail(miniProgramId);
-    const output = { changed: false, miniProgramId, detail: toCamelCaseDeep(detail) };
+    const localPermissions = runtimePermissionEnv.readMiniappPermissionsFromPackageJson(context.packageJson.projectRoot, runtimePermissionEnv.resolveMiniappSdkVersion());
+    const permissionViews = runtimePermissionEnv.composeMiniappRuntimePermissions(localPermissions, detail.runtime_permissions).views;
+    const output = { changed: false, miniProgramId, detail: toCamelCaseDeep(detail), permissions: permissionViews };
     if (!options.json) {
-        printMiniProgramDetail(context.logger, detail);
+        printMiniProgramDetail(context.logger, detail, permissionViews);
     }
     return finishRemoteCommand(options, runtime, output);
 }
@@ -1356,7 +1376,9 @@ async function remotePreview(options, context, runtime) {
 }
 async function remoteDangerousWrite(options, context, runtime) {
     const miniProgramId = requireBinding(context);
-    const version = options.command === 'release' || options.command === 'withdraw' ? requireNonEmpty(options.version, `remote ${options.command} 必须传 <version>`) : undefined;
+    const version = options.command === 'release' || options.command === 'withdraw'
+        ? requireNonEmpty(options.version, `remote ${options.command} 必须传 <version>`)
+        : undefined;
     const detail = await context.api.getMiniProgramDetail(miniProgramId);
     await confirmDangerousRemoteChange(options, runtime, context.logger, {
         miniProgramId,
@@ -1545,7 +1567,18 @@ function parseEntityId(value) {
     return entityId;
 }
 async function listDeveloperEntitiesWithAccessFallback(context) {
-    const result = await context.api.listDeveloperEntities();
+    let result;
+    try {
+        result = await context.api.listDeveloperEntities();
+    }
+    catch (error) {
+        const fallback = createEntityFromAccessStatus(await context.api.accessStatus());
+        if (!fallback) {
+            throw error;
+        }
+        context.logger.debug('开发者主体列表不可用，已回退使用小程序工坊准入主体');
+        return { fromAccessFallback: true, items: [fallback], total: 1 };
+    }
     const items = normalizeDeveloperEntities(result);
     if (items.length > 0) {
         return { items, total: readNumber(result.total, items.length) };
@@ -1716,7 +1749,7 @@ async function promptConfirm(message, runtime) {
         rl.close();
     }
 }
-function printMiniProgramDetail(logger, detail) {
+function printMiniProgramDetail(logger, detail, permissionViews) {
     logger.info(`Mini-program: ${detail.mini_program_id ?? '--'}`);
     logger.info(`Name: ${detail.name ?? '--'}`);
     logger.info(`Status: ${detail.status ?? '--'}`);
@@ -1727,14 +1760,13 @@ function printMiniProgramDetail(logger, detail) {
     if (detail.protocol_string) {
         logger.info(`Protocol: ${detail.protocol_string}`);
     }
-    const runtimePermissions = detail.runtime_permissions;
-    if (runtimePermissions) {
-        logger.info(`Runtime 权限: schema=${String(runtimePermissions.schema_version ?? '--')} revision=${String(runtimePermissions.revision ?? '--')}`);
-        if (Array.isArray(runtimePermissions.entries)) {
-            runtimePermissions.entries.forEach((entry) => {
-                logger.info(`  ${JSON.stringify(entry)}`);
-            });
-        }
+    logger.info('权限:');
+    for (const view of permissionViews) {
+        const approval = view.access === 'platform-approval' ? ` 需申请=是 批准=${view.approved ? '是' : '否'}` : ' 需申请=否';
+        const configs = view.requestedConfig
+            ? ` requested=${JSON.stringify(view.requestedConfig)} approved=${JSON.stringify(view.approvedConfig)} effective=${JSON.stringify(view.effectiveConfig)}`
+            : '';
+        logger.info(`  ${view.key}: 声明=${view.declared ? '是' : '否'}${approval} 最终=${view.effective ? '可用' : '不可用'}${configs}`);
     }
 }
 function printDeveloperEntities(logger, entities) {

package/dist/cli-chunks/{runtime-gate-DFjw66kF.cjs → runtime-gate-FseEYZze.cjs}

@@ -1,6 +1,6 @@
 'use strict';
 
-var runtimePermissionEnv = require('./runtime-permission-env-CjsCe5bp.cjs');
+var runtimePermissionEnv = require('./runtime-permission-env-DdQtxdut.cjs');
 
 const MINIAPP_PLATFORM_VALUES = ['android', 'ios', 'ohos', 'windows', 'macos', 'linux'];
 function isValidMiniappManifestVersion(version) {
@@ -32,10 +32,18 @@ function parseMiniappManifestJson(raw, sourceLabel = 'manifest.json') {
     };
 }
 function validateMiniappManifestForDeploy(manifest) {
+    const version = validateMiniappManifestVersion(manifest.version, 'manifest.version');
+    const sdkVersion = validateSdkVersion(manifest.sdkVersion, 'manifest.sdkVersion');
+    const permissions = runtimePermissionEnv.parseMiniappPermissions(manifest.permissions, {
+        present: Object.prototype.hasOwnProperty.call(manifest, 'permissions'),
+        sdkVersion,
+        sourceLabel: 'manifest.permissions',
+    });
     return {
-        version: validateMiniappManifestVersion(manifest.version, 'manifest.version'),
-        sdkVersion: validateSdkVersion(manifest.sdkVersion, 'manifest.sdkVersion'),
+        version,
+        sdkVersion,
         platforms: validateMiniappPlatforms(manifest.platforms, 'manifest.platforms'),
+        ...(permissions.permissions === undefined ? {} : { permissions: permissions.permissions }),
     };
 }
 function validateMiniappPlatforms(platforms, sourceLabel = 'platforms') {