@heybox/hb-sdk 0.8.0-alpha → 0.8.0-alpha.10

package/dist/cli-chunks/doctor-B-LF5-uj.cjs

@@ -0,0 +1,65 @@
+'use strict';
+
+var fs = require('node:fs/promises');
+var os = require('node:os');
+var path = require('node:path');
+var index = require('./index-BDaeBI_B.cjs');
+require('node:module');
+require('node:fs');
+require('path');
+require('os');
+require('readline');
+require('tty');
+require('assert');
+require('events');
+require('stream');
+require('buffer');
+require('util');
+
+const CANDIDATES = [path.resolve(__dirname, '..', 'package.json'), path.resolve(__dirname, '..', '..', 'package.json'), path.resolve(__dirname, '..', '..', '..', 'package.json')];
+const AGENTS = ['codex', 'claude', 'cursor'];
+async function runDoctorCommand(runtime = {}) {
+    const logger = runtime.logger ?? index.createCliLogger();
+    const result = await logger.task('正在检查本地 Agent Skill', () => getDoctorResult(runtime), { successText: 'Agent Skill 检查完成' });
+    if (runtime.json)
+        logger.raw(JSON.stringify(result));
+    else {
+        logger.section('Doctor');
+        logger.info(`SDK version: ${result.currentSdkVersion}`);
+        for (const a of result.agents)
+            logger.info(`${a.agent}: ${a.status}${a.skillVersion ? ` (${a.skillVersion})` : ''}`);
+        logger.info(`Status: ${result.status}`);
+        if (result.status !== 'OK')
+            logger.warn('请运行 hb-sdk skill install 安装或更新对应 Skill。');
+    }
+    return result;
+}
+async function getDoctorResult(runtime = {}) {
+    const version = await readVersion(runtime.packageJsonFiles);
+    const results = await Promise.all((runtime.agentNames ?? AGENTS).map(a => inspect(a, version, runtime)));
+    const status = results.every(a => a.status === 'OK') ? 'OK' : results.find(a => a.status !== 'OK').status;
+    return { currentSdkVersion: version, status, agents: results, localSkillJsonPath: results[0]?.path ?? '', localSkillVersion: results[0]?.skillVersion };
+}
+async function inspect(agent, version, runtime) {
+    const home = runtime.agentRoots?.[agent] ?? runtime.env?.[`${agent.toUpperCase()}_HOME`] ?? process.env[`${agent.toUpperCase()}_HOME`] ?? path.join(os.homedir(), `.${agent}`);
+    const file = path.join(home, 'skills', index.HB_SDK_SKILL_NAME, 'skill.json');
+    try {
+        const m = JSON.parse(await fs.readFile(file, 'utf8'));
+        const ok = m.name === index.HB_SDK_SKILL_NAME && m.sdk?.package === index.HB_SDK_PACKAGE_NAME && m.sdk?.version === version && m.distribution?.type === 'npm' && m.distribution?.package === index.HB_SDK_PACKAGE_NAME && m.distribution?.version === version && m.skillVersion?.startsWith(`${version}+skill.`);
+        return { agent, path: file, status: ok ? 'OK' : 'SKILL_OUTDATED', skillVersion: m.skillVersion };
+    }
+    catch {
+        return { agent, path: file, status: 'SKILL_MISSING' };
+    }
+}
+async function readVersion(files = CANDIDATES) { for (const file of files) {
+    try {
+        const m = JSON.parse(await fs.readFile(file, 'utf8'));
+        if (typeof m.version === 'string' && m.version)
+            return m.version;
+    }
+    catch { }
+} throw new Error(`未能读取 ${index.HB_SDK_PACKAGE_NAME} 当前版本号`); }
+
+exports.getDoctorResult = getDoctorResult;
+exports.runDoctorCommand = runDoctorCommand;

package/dist/cli-chunks/{index-D62ANeBv.cjs → index-BDaeBI_B.cjs}

@@ -234,19 +234,19 @@ function requireArgument () {
 
 var command = {};
 
-const require$5 = node_module.createRequire((typeof document === 'undefined' ? require('u' + 'rl').pathToFileURL(__filename).href : (_documentCurrentScript && _documentCurrentScript.tagName.toUpperCase() === 'SCRIPT' && _documentCurrentScript.src || new URL('cli-chunks/index-D62ANeBv.cjs', document.baseURI).href)));
+const require$5 = node_module.createRequire((typeof document === 'undefined' ? require('u' + 'rl').pathToFileURL(__filename).href : (_documentCurrentScript && _documentCurrentScript.tagName.toUpperCase() === 'SCRIPT' && _documentCurrentScript.src || new URL('cli-chunks/index-BDaeBI_B.cjs', document.baseURI).href)));
 function __require$4() { return require$5("node:events"); }
 
-const require$4 = node_module.createRequire((typeof document === 'undefined' ? require('u' + 'rl').pathToFileURL(__filename).href : (_documentCurrentScript && _documentCurrentScript.tagName.toUpperCase() === 'SCRIPT' && _documentCurrentScript.src || new URL('cli-chunks/index-D62ANeBv.cjs', document.baseURI).href)));
+const require$4 = node_module.createRequire((typeof document === 'undefined' ? require('u' + 'rl').pathToFileURL(__filename).href : (_documentCurrentScript && _documentCurrentScript.tagName.toUpperCase() === 'SCRIPT' && _documentCurrentScript.src || new URL('cli-chunks/index-BDaeBI_B.cjs', document.baseURI).href)));
 function __require$3() { return require$4("node:child_process"); }
 
-const require$3 = node_module.createRequire((typeof document === 'undefined' ? require('u' + 'rl').pathToFileURL(__filename).href : (_documentCurrentScript && _documentCurrentScript.tagName.toUpperCase() === 'SCRIPT' && _documentCurrentScript.src || new URL('cli-chunks/index-D62ANeBv.cjs', document.baseURI).href)));
+const require$3 = node_module.createRequire((typeof document === 'undefined' ? require('u' + 'rl').pathToFileURL(__filename).href : (_documentCurrentScript && _documentCurrentScript.tagName.toUpperCase() === 'SCRIPT' && _documentCurrentScript.src || new URL('cli-chunks/index-BDaeBI_B.cjs', document.baseURI).href)));
 function __require$2() { return require$3("node:path"); }
 
-const require$2 = node_module.createRequire((typeof document === 'undefined' ? require('u' + 'rl').pathToFileURL(__filename).href : (_documentCurrentScript && _documentCurrentScript.tagName.toUpperCase() === 'SCRIPT' && _documentCurrentScript.src || new URL('cli-chunks/index-D62ANeBv.cjs', document.baseURI).href)));
+const require$2 = node_module.createRequire((typeof document === 'undefined' ? require('u' + 'rl').pathToFileURL(__filename).href : (_documentCurrentScript && _documentCurrentScript.tagName.toUpperCase() === 'SCRIPT' && _documentCurrentScript.src || new URL('cli-chunks/index-BDaeBI_B.cjs', document.baseURI).href)));
 function __require$1() { return require$2("node:fs"); }
 
-const require$1 = node_module.createRequire((typeof document === 'undefined' ? require('u' + 'rl').pathToFileURL(__filename).href : (_documentCurrentScript && _documentCurrentScript.tagName.toUpperCase() === 'SCRIPT' && _documentCurrentScript.src || new URL('cli-chunks/index-D62ANeBv.cjs', document.baseURI).href)));
+const require$1 = node_module.createRequire((typeof document === 'undefined' ? require('u' + 'rl').pathToFileURL(__filename).href : (_documentCurrentScript && _documentCurrentScript.tagName.toUpperCase() === 'SCRIPT' && _documentCurrentScript.src || new URL('cli-chunks/index-BDaeBI_B.cjs', document.baseURI).href)));
 function __require() { return require$1("node:process"); }
 
 var help = {};
@@ -3883,10 +3883,6 @@ var envPaths = /*@__PURE__*/getDefaultExportFromCjs(envPathsExports);
 
 const HB_SDK_PACKAGE_NAME = '@heybox/hb-sdk';
 const HB_SDK_SKILL_NAME = 'hb-sdk';
-const HB_SDK_AGENT_SKILLS_BASE_URL = 'https://open.xiaoheihe.cn/agent-skills';
-const HB_SDK_SKILL_SOURCE = `${HB_SDK_AGENT_SKILLS_BASE_URL}/${HB_SDK_SKILL_NAME}`;
-const HB_SDK_SKILL_INDEX_URL = `${HB_SDK_AGENT_SKILLS_BASE_URL}/.well-known/agent-skills/index.json`;
-const HB_SDK_SKILL_INSTALL_COMMAND = `npx skills add ${HB_SDK_SKILL_SOURCE}`;
 
 var ora$1 = {exports: {}};
 
@@ -12837,6 +12833,7 @@ const UPDATE_CHECK_TTL_MS = 24 * 60 * 60 * 1000;
 const DEFAULT_TIMEOUT_MS = 1500;
 const UPDATE_CHECK_CACHE_FILE = 'update-check.json';
 const NPM_REGISTRY_URL = `https://registry.npmjs.org/${encodeURIComponent(HB_SDK_PACKAGE_NAME)}`;
+const PUBLIC_CHANGELOG_URL = 'https://docs.xiaoheihe.cn/hb_sdk/changelog/';
 const paths = envPaths('hb-sdk', { suffix: '' });
 const PACKAGE_JSON_CANDIDATES$1 = [
     path.resolve(__dirname, '..', 'package.json'),
@@ -12891,14 +12888,23 @@ async function getUpdateReminder(options = {}) {
     return createUpdateReminder(currentVersion, latestVersion);
 }
 function formatUpdateReminder(reminder) {
-    return `发现新版 ${HB_SDK_PACKAGE_NAME}: ${reminder.currentVersion} -> ${reminder.latestVersion}。升级命令: npm i -D ${HB_SDK_PACKAGE_NAME}@latest`;
+    const latestVersion = parseSemver(reminder.latestVersion);
+    const anchor = latestVersion
+        ? `v${latestVersion.major}-${latestVersion.minor}-${latestVersion.patch}`
+        : `v${reminder.latestVersion.replaceAll('.', '-')}`;
+    const changelogUrl = `${PUBLIC_CHANGELOG_URL}#${anchor}`;
+    return `发现新版 ${HB_SDK_PACKAGE_NAME}: ${reminder.currentVersion} -> ${reminder.latestVersion}。升级命令: npm i -D ${HB_SDK_PACKAGE_NAME}@latest；更新内容: ${changelogUrl}`;
 }
 function isVersionGreater(version, baseline) {
     const compared = compareSemver(version, baseline);
     return compared !== null && compared > 0;
 }
 function createUpdateReminder(currentVersion, latestVersion) {
-    if (!latestVersion || !isVersionGreater(latestVersion, currentVersion)) {
+    const parsedLatestVersion = latestVersion ? parseSemver(latestVersion) : null;
+    if (!latestVersion ||
+        !parsedLatestVersion ||
+        parsedLatestVersion.prerelease.length > 0 ||
+        !isVersionGreater(latestVersion, currentVersion)) {
         return null;
     }
     return {
@@ -13347,7 +13353,7 @@ function getPathname(pathWithQuery) {
 }
 
 const CLI_VERSION_PLACEHOLDER = ['__HB', 'SDK', 'CLI', 'VERSION__'].join('_');
-const BUILT_CLI_VERSION = '0.8.0-alpha';
+const BUILT_CLI_VERSION = '0.8.0-alpha.10';
 const PACKAGE_JSON_CANDIDATES = [
     path.resolve(__dirname, '..', '..', 'package.json'),
     path.resolve(__dirname, '..', 'package.json'),
@@ -13412,6 +13418,7 @@ function createCliProgram(overrides = {}) {
         runDevCommand: defaultRunDevCommand,
         runDoctorCommand: defaultRunDoctorCommand,
         runRemoteCommand: defaultRunRemoteCommand,
+        runSkillInstallCommand: defaultRunSkillInstallCommand,
         ...overrides,
     };
     const program = new Command();
@@ -13432,10 +13439,11 @@ function createCliProgram(overrides = {}) {
     }, handlers.printUpdateReminder, resolveLogger));
     addVerboseOption(program
         .command('dev')
-        .description('启动当前小程序项目的 Vite dev server 和 Browser Dev Host')
-        .option('--port <port>', 'App dev server 端口', parsePositivePort)
-        .option('--browser-dev-host-port <port>', 'Browser Dev Host 端口', parsePositivePort)
-        .option('--no-open', '不自动打开浏览器调试页')).action(withUpdateReminder(async (options, command) => {
+        .description('启动当前小程序项目的 Vite 开发服务器和浏览器调试页服务')
+        .option('--port <port>', '小程序开发服务器端口', parsePositivePort)
+        .option('--browser-dev-host-port <port>', '浏览器调试页服务端口', parsePositivePort)
+        .option('--no-open', '不自动打开浏览器调试页')
+        .helpOption('-h, --help', '显示命令帮助')).action(withUpdateReminder(async (options, command) => {
         const logger = resolveLogger(command);
         await handlers.runDevCommand(options, { logger });
     }, handlers.printUpdateReminder, resolveLogger));
@@ -13451,9 +13459,20 @@ function createCliProgram(overrides = {}) {
         await handlers.runBuildCommand({}, { logger });
     });
     installRemoteCommands(program, handlers, resolveLogger);
-    addVerboseOption(program.command('doctor').description('诊断 hb-sdk 本地环境和 Agent Skill 版本')).action(async (...args) => {
-        const logger = resolveLogger(readCommandFromActionArgs(args));
-        const result = await handlers.runDoctorCommand({ logger });
+    const skill = addVerboseOption(program.command('skill').description('管理 Agent Skill'));
+    skill.command('install')
+        .option('--global', '安装到用户级 Agent 目录')
+        .option('--agent <agents...>', '指定 Agent')
+        .option('--all-agents', '安装到所有检测到的 Agent')
+        .option('--force', '覆盖已存在且被修改的 Skill')
+        .action(async (options, command) => {
+        const logger = resolveLogger(command);
+        await handlers.runSkillInstallCommand({ ...options, logger });
+    });
+    addVerboseOption(program.command('doctor').description('诊断 hb-sdk 本地环境和 Agent Skill 版本').option('--json', '以 JSON 格式输出诊断结果')).action(async (...args) => {
+        const command = readCommandFromActionArgs(args);
+        const logger = resolveLogger(command);
+        const result = await handlers.runDoctorCommand({ logger, json: Boolean(command?.opts().json) });
         if (result.status !== 'SDK_MISMATCH') {
             await handlers.printUpdateReminder({ logger });
         }
@@ -13682,35 +13701,39 @@ function createCommandLoggerResolver(options) {
     };
 }
 const defaultClearLoginStatus = async (...args) => {
-    const { clearLoginStatus } = await Promise.resolve().then(function () { return require('./login-Cumknwdx.cjs'); });
+    const { clearLoginStatus } = await Promise.resolve().then(function () { return require('./login-DTY5GolC.cjs'); });
     return clearLoginStatus(...args);
 };
 const defaultLoginToHeybox = async (...args) => {
-    const { loginToHeybox } = await Promise.resolve().then(function () { return require('./login-Cumknwdx.cjs'); });
+    const { loginToHeybox } = await Promise.resolve().then(function () { return require('./login-DTY5GolC.cjs'); });
     return loginToHeybox(...args);
 };
 const defaultPrintLoginStatus = async (...args) => {
-    const { printLoginStatus } = await Promise.resolve().then(function () { return require('./login-Cumknwdx.cjs'); });
+    const { printLoginStatus } = await Promise.resolve().then(function () { return require('./login-DTY5GolC.cjs'); });
     return printLoginStatus(...args);
 };
 const defaultRunBuildCommand = async (...args) => {
-    const { runBuildCommand } = await Promise.resolve().then(function () { return require('./build-DJWFSM1B.cjs'); });
+    const { runBuildCommand } = await Promise.resolve().then(function () { return require('./build-aDJbiFqF.cjs'); });
     return runBuildCommand(...args);
 };
 const defaultRunCreateCommand = async (...args) => {
-    const { runCreateCommand } = await Promise.resolve().then(function () { return require('./create-2HfoB48V.cjs'); });
+    const { runCreateCommand } = await Promise.resolve().then(function () { return require('./create-P3g0ricz.cjs'); });
     return runCreateCommand(...args);
 };
 const defaultRunDevCommand = async (...args) => {
-    const { runDevCommand } = await Promise.resolve().then(function () { return require('./dev-Dgt2zS9k.cjs'); }).then(function (n) { return n.dev; });
+    const { runDevCommand } = await Promise.resolve().then(function () { return require('./dev-CisJkXuQ.cjs'); }).then(function (n) { return n.dev; });
     return runDevCommand(...args);
 };
 const defaultRunDoctorCommand = async (...args) => {
-    const { runDoctorCommand } = await Promise.resolve().then(function () { return require('./doctor-C95gIao_.cjs'); });
+    const { runDoctorCommand } = await Promise.resolve().then(function () { return require('./doctor-B-LF5-uj.cjs'); });
     return runDoctorCommand(...args);
 };
+const defaultRunSkillInstallCommand = async (...args) => {
+    const { runSkillInstallCommand } = await Promise.resolve().then(function () { return require('./skill-B0yAnPOJ.cjs'); });
+    return runSkillInstallCommand(...args);
+};
 const defaultRunRemoteCommand = async (...args) => {
-    const { runRemoteCommand } = await Promise.resolve().then(function () { return require('./remote-DDdP3xcE.cjs'); });
+    const { runRemoteCommand } = await Promise.resolve().then(function () { return require('./remote-BBMr7j8W.cjs'); });
     return runRemoteCommand(...args);
 };
 function resolveStandaloneLogger(options, verbose) {
@@ -13804,10 +13827,7 @@ function parseNonNegativeInteger(value) {
 
 exports.CliError = CliError;
 exports.HB_SDK_PACKAGE_NAME = HB_SDK_PACKAGE_NAME;
-exports.HB_SDK_SKILL_INDEX_URL = HB_SDK_SKILL_INDEX_URL;
-exports.HB_SDK_SKILL_INSTALL_COMMAND = HB_SDK_SKILL_INSTALL_COMMAND;
 exports.HB_SDK_SKILL_NAME = HB_SDK_SKILL_NAME;
-exports.HB_SDK_SKILL_SOURCE = HB_SDK_SKILL_SOURCE;
 exports.applyServiceTagIfNeeded = applyServiceTagIfNeeded;
 exports.commonjsGlobal = commonjsGlobal;
 exports.createCliLogger = createCliLogger;

package/dist/cli-chunks/{index-BjoSXl8C.cjs → index-CZGkk7fQ.cjs}

@@ -1,13 +1,13 @@
 'use strict';
 
-var index$2 = require('./index-D62ANeBv.cjs');
+var index$2 = require('./index-BDaeBI_B.cjs');
 var require$$0$3 = require('fs');
 var require$$0$2 = require('crypto');
 var require$$1$2 = require('path');
 var require$$0$5 = require('assert');
 var require$$0$4 = require('events');
 var require$$1$1 = require('util');
-var runtimePermissionEnv = require('./runtime-permission-env-CjsCe5bp.cjs');
+var runtimePermissionEnv = require('./runtime-permission-env-CqsTHeas.cjs');
 var require$$0$7 = require('net');
 var require$$0$6 = require('url');
 var require$$2$1 = require('http');

package/dist/cli-chunks/{index.esm-CigcxJ2B.cjs → index.esm-NNLG29Tt.cjs}

@@ -11,8 +11,8 @@ var require$$0$4 = require('url');
 var require$$0 = require('zlib');
 var require$$0$1 = require('buffer');
 var require$$1 = require('util');
-var index = require('./index-D62ANeBv.cjs');
-var dev = require('./dev-Dgt2zS9k.cjs');
+var index = require('./index-BDaeBI_B.cjs');
+var dev = require('./dev-CisJkXuQ.cjs');
 require('node:module');
 require('node:fs');
 require('node:fs/promises');
@@ -27,12 +27,13 @@ require('node:net');
 require('node:crypto');
 require('node:dns/promises');
 require('node:http');
-require('./context-DV2UK1Nz.cjs');
-require('./session-BDi_AZSv.cjs');
+require('./context-Dp36pZ9a.cjs');
+require('./runtime-permission-env-CqsTHeas.cjs');
+require('./version-DN5jrixS.cjs');
+require('node:async_hooks');
+require('./session-CnGeZCRZ.cjs');
 require('fs');
 require('constants');
-require('./runtime-permission-env-CjsCe5bp.cjs');
-require('node:async_hooks');
 require('undici');
 require('./browser-RAy8e8cV.cjs');
 require('node:process');
@@ -40,7 +41,7 @@ require('node:buffer');
 require('node:url');
 require('node:util');
 require('node:child_process');
-require('./project-vite-CcE-HMmd.cjs');
+require('./project-vite-DlCjHlu_.cjs');
 
 var bufferUtil = {exports: {}};
 

package/dist/cli-chunks/{login-Cumknwdx.cjs → login-DTY5GolC.cjs}

@@ -3,9 +3,9 @@
 var promises = require('node:readline/promises');
 var node_crypto = require('node:crypto');
 var node_http = require('node:http');
-var session = require('./session-BDi_AZSv.cjs');
+var session = require('./session-CnGeZCRZ.cjs');
 var browser = require('./browser-RAy8e8cV.cjs');
-var index = require('./index-D62ANeBv.cjs');
+var index = require('./index-BDaeBI_B.cjs');
 require('node:path');
 require('fs');
 require('constants');

package/dist/cli-chunks/{project-vite-CcE-HMmd.cjs → project-vite-DlCjHlu_.cjs}

@@ -5,7 +5,7 @@ var fs$1 = require('node:fs/promises');
 var node_module = require('node:module');
 var path = require('node:path');
 var node_url = require('node:url');
-var index = require('./index-D62ANeBv.cjs');
+var index = require('./index-BDaeBI_B.cjs');
 
 function findProjectRoot(startDir) {
     let current = path.resolve(startDir);

package/dist/cli-chunks/{remote-DDdP3xcE.cjs → remote-BBMr7j8W.cjs}

@@ -1,16 +1,16 @@
 'use strict';
 
 var promises = require('node:readline/promises');
-var index = require('./index-D62ANeBv.cjs');
-var session = require('./session-BDi_AZSv.cjs');
+var index = require('./index-BDaeBI_B.cjs');
+var session = require('./session-CnGeZCRZ.cjs');
 var childProcess = require('node:child_process');
 var fs = require('node:fs');
 var fs$1 = require('node:fs/promises');
 var path = require('node:path');
-var runtimePermissionEnv = require('./runtime-permission-env-CjsCe5bp.cjs');
-var runtimeGate = require('./runtime-gate-DFjw66kF.cjs');
+var runtimePermissionEnv = require('./runtime-permission-env-CqsTHeas.cjs');
+var runtimeGate = require('./runtime-gate-BppCl1r3.cjs');
 var node_crypto = require('node:crypto');
-var context = require('./context-DV2UK1Nz.cjs');
+var context = require('./context-Dp36pZ9a.cjs');
 require('node:module');
 require('path');
 require('os');
@@ -23,6 +23,7 @@ require('buffer');
 require('util');
 require('fs');
 require('constants');
+require('./version-DN5jrixS.cjs');
 require('node:async_hooks');
 
 async function getCDNUploadInfo(options, runtime = {}) {
@@ -271,7 +272,7 @@ function createDefaultCosClient(uploadToken, COS) {
     };
 }
 async function loadCosConstructor() {
-    const cosModule = await Promise.resolve().then(function () { return require('./index-BjoSXl8C.cjs'); }).then(function (n) { return n.index; });
+    const cosModule = await Promise.resolve().then(function () { return require('./index-CZGkk7fQ.cjs'); }).then(function (n) { return n.index; });
     return cosModule.default;
 }
 function formatSize(bytes) {
@@ -530,6 +531,7 @@ async function runDeployCommand(options, runtime = {}) {
             precheckVersion = precheck.version || precheck.version_normalized || fromVersion;
         }
         else {
+            const localPermissions = runtimePermissionEnv.readMiniappPermissionsFromPackageJson(projectRoot, runtimePermissionEnv.resolveMiniappSdkVersion());
             if (typeof packageJson.scripts?.build !== 'string') {
                 throw new Error('package.json scripts.build 未定义，请添加 build 脚本');
             }
@@ -552,7 +554,8 @@ async function runDeployCommand(options, runtime = {}) {
                     loginBaseUrl,
                     session: session$1,
                 }), { successText: '已读取远端小程序权限' });
-                skipPlatformCsp = context.shouldSkipMiniappPlatformCsp(detail.runtime_permissions);
+                const localNetworkEnabled = !localPermissions.declared || localPermissions.permissions?.network?.enabled === true;
+                skipPlatformCsp = localNetworkEnabled && context.shouldSkipMiniappPlatformCsp(detail.runtime_permissions);
             }
             catch (error) {
                 logger.warn('未读取到远端 Runtime 权限，构建将继续注入平台 CSP。');
@@ -561,7 +564,8 @@ async function runDeployCommand(options, runtime = {}) {
             const pm = detectPackageManager(projectRoot);
             const platform = runtime.platform ?? process.platform;
             const buildMode = validateBuildMode(env.HB_SDK_ENV?.trim(), platform);
-            logger.info(`开始构建: ${pm} ${createBuildArgs(pm, buildMode).join(' ')}`);
+            const buildScript = await readProjectBuildScript(projectRoot);
+            logger.info(`开始构建: ${pm} ${createBuildArgs(pm, buildMode, buildScript).join(' ')}`);
             await runBuildScript(pm, projectRoot, runtime.spawn ?? childProcess.spawn, {
                 env: runtimePermissionEnv.createMiniappPlatformCspEnv(env, skipPlatformCsp),
                 mode: buildMode,
@@ -801,9 +805,10 @@ function detectPackageManager(projectRoot) {
     return 'npm';
 }
 async function runBuildScript(pm, cwd, spawnImpl, options) {
+    const buildScript = await readProjectBuildScript(cwd);
     await new Promise((resolve, reject) => {
         const pipeStdoutToStderr = options.outputMode === 'stderr';
-        const buildArgs = createBuildArgs(pm, options.mode);
+        const buildArgs = createBuildArgs(pm, options.mode, buildScript);
         const isWindows = options.platform === 'win32';
         const [executable, args] = isWindows ? createWindowsBuildCommand(pm, buildArgs) : [pm, buildArgs];
         const child = spawnImpl(executable, args, {
@@ -841,8 +846,18 @@ function validateBuildMode(mode, platform) {
 function escapeWindowsCommandArgument(argument) {
     return `"${argument}"`;
 }
-function createBuildArgs(pm, mode) {
-    return ['run', 'build', ...(mode ? [...(pm === 'npm' ? ['--'] : []), '--mode', mode] : [])];
+async function readProjectBuildScript(projectRoot) {
+    try {
+        const packageJson = JSON.parse(await fs$1.readFile(path.join(projectRoot, 'package.json'), 'utf8'));
+        return typeof packageJson.scripts?.build === 'string' ? packageJson.scripts.build : '';
+    }
+    catch {
+        return '';
+    }
+}
+function createBuildArgs(pm, mode, buildScript) {
+    const modeOption = /\bhb-sdk\s+build\b/.test(buildScript) ? '--env' : '--mode';
+    return ['run', 'build', ...(mode ? [...(pm === 'npm' ? ['--'] : []), modeOption, mode] : [])];
 }
 async function walkDistFiles(distDir) {
     const results = [];
@@ -1171,7 +1186,10 @@ async function remoteEntitySwitch(options, context, runtime) {
 async function remoteList(options, context, runtime) {
     const result = await context.api.listMiniPrograms({ keyword: options.keyword, status: options.status });
     const items = Array.isArray(result.items) ? result.items : [];
-    const outputItems = items.map((item) => ({ ...toCamelCaseDeep(item), bound: item.mini_program_id === context.binding }));
+    const outputItems = items.map((item) => ({
+        ...toCamelCaseDeep(item),
+        bound: item.mini_program_id === context.binding,
+    }));
     const output = { changed: false, items: outputItems, total: readNumber(result.total, items.length) };
     if (!options.json) {
         if (items.length === 0) {
@@ -1228,9 +1246,11 @@ async function remoteBind(options, context$1, runtime) {
 async function remoteInfo(options, context, runtime) {
     const miniProgramId = requireBinding(context);
     const detail = await context.api.getMiniProgramDetail(miniProgramId);
-    const output = { changed: false, miniProgramId, detail: toCamelCaseDeep(detail) };
+    const localPermissions = runtimePermissionEnv.readMiniappPermissionsFromPackageJson(context.packageJson.projectRoot, runtimePermissionEnv.resolveMiniappSdkVersion());
+    const permissionViews = runtimePermissionEnv.composeMiniappRuntimePermissions(localPermissions, detail.runtime_permissions).views;
+    const output = { changed: false, miniProgramId, detail: toCamelCaseDeep(detail), permissions: permissionViews };
     if (!options.json) {
-        printMiniProgramDetail(context.logger, detail);
+        printMiniProgramDetail(context.logger, detail, permissionViews);
     }
     return finishRemoteCommand(options, runtime, output);
 }
@@ -1356,7 +1376,9 @@ async function remotePreview(options, context, runtime) {
 }
 async function remoteDangerousWrite(options, context, runtime) {
     const miniProgramId = requireBinding(context);
-    const version = options.command === 'release' || options.command === 'withdraw' ? requireNonEmpty(options.version, `remote ${options.command} 必须传 <version>`) : undefined;
+    const version = options.command === 'release' || options.command === 'withdraw'
+        ? requireNonEmpty(options.version, `remote ${options.command} 必须传 <version>`)
+        : undefined;
     const detail = await context.api.getMiniProgramDetail(miniProgramId);
     await confirmDangerousRemoteChange(options, runtime, context.logger, {
         miniProgramId,
@@ -1545,7 +1567,18 @@ function parseEntityId(value) {
     return entityId;
 }
 async function listDeveloperEntitiesWithAccessFallback(context) {
-    const result = await context.api.listDeveloperEntities();
+    let result;
+    try {
+        result = await context.api.listDeveloperEntities();
+    }
+    catch (error) {
+        const fallback = createEntityFromAccessStatus(await context.api.accessStatus());
+        if (!fallback) {
+            throw error;
+        }
+        context.logger.debug('开发者主体列表不可用，已回退使用小程序工坊准入主体');
+        return { fromAccessFallback: true, items: [fallback], total: 1 };
+    }
     const items = normalizeDeveloperEntities(result);
     if (items.length > 0) {
         return { items, total: readNumber(result.total, items.length) };
@@ -1716,7 +1749,7 @@ async function promptConfirm(message, runtime) {
         rl.close();
     }
 }
-function printMiniProgramDetail(logger, detail) {
+function printMiniProgramDetail(logger, detail, permissionViews) {
     logger.info(`Mini-program: ${detail.mini_program_id ?? '--'}`);
     logger.info(`Name: ${detail.name ?? '--'}`);
     logger.info(`Status: ${detail.status ?? '--'}`);
@@ -1727,14 +1760,13 @@ function printMiniProgramDetail(logger, detail) {
     if (detail.protocol_string) {
         logger.info(`Protocol: ${detail.protocol_string}`);
     }
-    const runtimePermissions = detail.runtime_permissions;
-    if (runtimePermissions) {
-        logger.info(`Runtime 权限: schema=${String(runtimePermissions.schema_version ?? '--')} revision=${String(runtimePermissions.revision ?? '--')}`);
-        if (Array.isArray(runtimePermissions.entries)) {
-            runtimePermissions.entries.forEach((entry) => {
-                logger.info(`  ${JSON.stringify(entry)}`);
-            });
-        }
+    logger.info('权限:');
+    for (const view of permissionViews) {
+        const approval = view.access === 'platform-approval' ? ` 需申请=是 批准=${view.approved ? '是' : '否'}` : ' 需申请=否';
+        const configs = view.requestedConfig
+            ? ` requested=${JSON.stringify(view.requestedConfig)} approved=${JSON.stringify(view.approvedConfig)} effective=${JSON.stringify(view.effectiveConfig)}`
+            : '';
+        logger.info(`  ${view.key}: 声明=${view.declared ? '是' : '否'}${approval} 最终=${view.effective ? '可用' : '不可用'}${configs}`);
     }
 }
 function printDeveloperEntities(logger, entities) {

package/dist/cli-chunks/{runtime-gate-DFjw66kF.cjs → runtime-gate-BppCl1r3.cjs}

@@ -1,6 +1,6 @@
 'use strict';
 
-var runtimePermissionEnv = require('./runtime-permission-env-CjsCe5bp.cjs');
+var runtimePermissionEnv = require('./runtime-permission-env-CqsTHeas.cjs');
 
 const MINIAPP_PLATFORM_VALUES = ['android', 'ios', 'ohos', 'windows', 'macos', 'linux'];
 function isValidMiniappManifestVersion(version) {
@@ -32,10 +32,18 @@ function parseMiniappManifestJson(raw, sourceLabel = 'manifest.json') {
     };
 }
 function validateMiniappManifestForDeploy(manifest) {
+    const version = validateMiniappManifestVersion(manifest.version, 'manifest.version');
+    const sdkVersion = validateSdkVersion(manifest.sdkVersion, 'manifest.sdkVersion');
+    const permissions = runtimePermissionEnv.parseMiniappPermissions(manifest.permissions, {
+        present: Object.prototype.hasOwnProperty.call(manifest, 'permissions'),
+        sdkVersion,
+        sourceLabel: 'manifest.permissions',
+    });
     return {
-        version: validateMiniappManifestVersion(manifest.version, 'manifest.version'),
-        sdkVersion: validateSdkVersion(manifest.sdkVersion, 'manifest.sdkVersion'),
+        version,
+        sdkVersion,
         platforms: validateMiniappPlatforms(manifest.platforms, 'manifest.platforms'),
+        ...(permissions.permissions === undefined ? {} : { permissions: permissions.permissions }),
     };
 }
 function validateMiniappPlatforms(platforms, sourceLabel = 'platforms') {