@heybox/hb-sdk 0.8.1-alpha.10 → 0.8.1-alpha.12

package/CHANGELOG.md

@@ -2,6 +2,23 @@
 
 本文件随 `@heybox/hb-sdk` npm 包公开分发，只记录外部小程序开发者可观察到的变化。内部集成、实现策略和审查证据不在此维护。
 
+## 0.8.1-alpha.12
+
+- 摘要：Android/iOS 移动端在 Native Host contract 下新增受控文件与流式下载能力，并修复 Files/Download 的释放、配额与访问边界。
+- 影响级别：常规
+- 开发者动作：将 SDK family 升级到 `0.8.1-alpha.12`；Android/iOS 客户端需升级到 `1.3.396`，能力按 `system.describe` 协商结果逐项启用。
+- 兼容范围：官方 `network.request` 继续由 Host 按目标域名决定凭据；下载与第三方 Native 请求不携带产品凭据，`withCredentials` 仍不被支持。
+- 新增能力
+  - Android/iOS 支持 `files.sandbox.file()`、`files.sandbox.directory()`、`files.pickFiles()` 与 `files.pickDirectory()`；`files.saveFile()` 仅 iOS 开放，Android 精确 SAF 文件保持只读。
+  - Mobile 支持带进度和取消的 `network.download()`，由 Native 网络直接写入文件目标。
+- 问题修复
+  - 新增 Native Host contract、payload 与 `system.describe` 协商；缺失 handler、握手超时或 operation 不完整时逐项 fail closed。
+  - 修复沙箱根路径、下载配额、写入释放、重定向与内网地址限制、取消终态等边界问题。
+
+## 0.8.1-alpha.11
+
+- `hb-sdk dev` 调试台右上角的桌面端入口只在项目声明了桌面平台时展示；`package.json#heybox.platforms` 未包含 `windows`、`macos` 或 `linux` 的小程序不再显示该入口，手机扫码调试不受影响。
+
 ## 0.8.1-alpha.10
 
 - `hb-sdk remote deploy` 现在将 Companion 归档总大小限制为 500 MiB；超限项目需先缩减桌面辅助应用产物再重新部署。

package/README.md

@@ -262,8 +262,8 @@ SDK 还提供 `getHandshakeState()` / `onHandshakeStateChange()` 管理持久握
 - 公开 `network.request()` 与 `network.download()` 均使用 no-follow redirect policy；3xx 不会在 Host 内静默跳转。
 - `network.request()` 不能访问平台保留的 runtime auth 与 OpenAPI 内部路径；页面不得持有或交换服务端应用凭据。
 - `network.request` 不支持 `multipart/form-data`；App Host 仅支持 form（`application/x-www-form-urlencoded`）与 JSON。表单请用 `URLSearchParams#toString()` 作为 `data`，文件上传请走专用上传能力。
-- 新 PC 开放持久 sandbox、单文件/目录 picker、精确 File 保存与公网 `network.download()`；多选和小黑盒域名流式下载暂不支持。Mobile、Web 与 Browser Dev Host 仍未开放这些 primitive。
-- `withCredentials` 不再是支持的配置字段，也不会进入新 SDK、协议或 Host contract；旧 SDK 构建产物的 wire 字段仅由 Runtime 兼容忽略。Mobile 对官方 HTTPS 默认端口目标自动启用 Native Cookie，第三方关闭；应用可显式提供 `Cookie`、`Authorization` 等请求头。`Origin`、`Referer`、`User-Agent` 由 Host 接管；`Host`、分帧及逐跳请求头由传输层管理，不能由小程序设置。Web Host 使用浏览器 Fetch，无法发送显式 `Cookie` 等浏览器禁止的头，会返回 `REQUEST_UNSUPPORTED`；需要第三方 Cookie 会话时请在支持原始请求头的 Mobile/PC Host 验收。
+- 新 PC 开放持久 sandbox、单文件/目录 picker、精确 File 保存与公网 `network.download()`；Android/iOS `1.3.396+` 通过独立 Native host contract 提供 Files/Download，并用 `system.describe` 的实际 operation 集逐项启用，缺失 handler、握手超时或 operation 不完整时对应能力 fail closed。多选和小黑盒域名流式下载暂不支持；Web 与 Browser Dev Host 仍未开放这些 primitive。
+- `withCredentials` 不再是支持的配置字段，也不会进入新 SDK、协议或 Host contract；旧 SDK 构建产物的 wire 字段仅由 Runtime 兼容忽略。Mobile 对官方 HTTPS 默认端口目标自动启用 Native Cookie，第三方关闭；应用可显式提供 `Cookie`、`Authorization` 等请求头。`Origin`、`Referer`、`User-Agent` 由 Host 接管；`Host`、分帧及逐跳请求头由传输层管理，不能由小程序设置。Web Host 使用浏览器 Fetch，无法发送显式 `Cookie` 等浏览器禁止的头，会返回 `REQUEST_UNSUPPORTED`；需要第三方 Cookie 会话时请在支持原始请求头的 Mobile/PC Host 验收。已启用的 Mobile 下载走无凭据 Native transfer；需要鉴权的下载请使用服务端签发的限时 URL。
 - 新 PC 不支持振动、分享菜单和截图分享；`navigation.openAppPage` 仅支持 `game_detail`，用户/帖子详情会明确失败。调用平台相关能力时应处理 `METHOD_FORBIDDEN` 或 `REQUEST_UNSUPPORTED`。
 - picker 必须来自可信用户手势；取消选择返回 `FILE_PICKER_CANCELLED`。`saveFile()` 只接受 `suggestedName`，不接受 `accept`。
 - `pickFiles()` / `pickDirectory()` 默认只读；`pickFiles()` 仅在显式传入 `multiple: true` 时允许 Host 返回多个文件。要写入或作为下载目标时显式请求 `mode: 'readwrite'`。
@@ -353,7 +353,7 @@ hb-sdk remote deploy --release-note "本次更新说明"
 
 配置 `package.json#heybox.companions` 并启用 `miniappManifest({ platforms })` 后，dev server 只向 loopback 提供 canonical Companion Manifest 和固定 ZIP 路由。CLI 在每次签发或刷新本地启动票前绑定该 Manifest 摘要；普通 Web HMR 不改变 snapshot，Companion 配置或产物更新后会校验并切换到新快照，已有 Session 固定原有产物。调试台分别展示浏览器、手机和 PC Companion 就绪状态、本地 alias、target 与摘要短前缀。未配置 Companion 时启动票仍可用于本地 identity/detail，真实 PC Companion 会 fail closed，Browser Fake 可继续用于未上传状态联调。
 
-右上角的桌面图标与二维码按钮使用相同样式。点击桌面图标后选择小黑盒正式版或 Debug 版，选择会立即请求客户端打开当前本地页面并在本地记忆，不需要二次确认。桌面端只接受无凭据的 `http://127.0.0.1:<port>`，拒绝 `localhost`、IPv6 和 LAN 地址，不提供地址选择或手工 URL；手机二维码继续独立选择局域网地址。入口仅在项目已绑定且本地调试启动票有效时可用，统一 URI 只携带 `mini_program_id` 和 `mini_url`，启动票继续由 detail 从同源 `launch.json` 发现并交给后端验证。浏览器无法确认客户端是否真正打开，因此调试台只记录“已请求打开”，不会自动切换正式版或 Debug 版。
+右上角的桌面图标与二维码按钮使用相同样式。桌面图标只在该项目于 `package.json#heybox.platforms` 声明了桌面平台（`windows`、`macos` 或 `linux`）时展示，未声明桌面平台的项目不显示该入口。点击桌面图标后选择小黑盒正式版或 Debug 版，选择会立即请求客户端打开当前本地页面并在本地记忆，不需要二次确认。桌面端只接受无凭据的 `http://127.0.0.1:<port>`，拒绝 `localhost`、IPv6 和 LAN 地址，不提供地址选择或手工 URL；手机二维码继续独立选择局域网地址。入口在项目已绑定且本地调试启动票有效时可用，统一 URI 只携带 `mini_program_id` 和 `mini_url`，启动票继续由 detail 从同源 `launch.json` 发现并交给后端验证。浏览器无法确认客户端是否真正打开，因此调试台只记录“已请求打开”，不会自动切换正式版或 Debug 版。
 
 浏览器调试入口不要求 CLI 登录或项目绑定；需要账号或远端配置的能力会按当前可用上下文返回结果或明确失败。调试台不提供权限修改入口，远端权限快照始终是 Runtime 的规范输入。手机 Dev Session 只使用当前版本声明与平台批准结果求交后的有效权限；两者均允许 `useOfficialDomain: true` 时会保留官方域名权限，浏览器端不能本地覆盖。手机验收统一从右上角二维码入口进入，选择手机可达的局域网网卡后扫码；二维码使用 `open_inapp` 与 `heybox://` `openWindow` 包装的短链。完整操作见 [CLI 指南](https://docs.xiaoheihe.cn/hb_sdk/guide/cli)，实现与安全边界由 [Runtime Host 迁移](./docs/runtime-host-migration.md) 维护。
 

package/dist/cli-chunks/{build-CtqIXxDL.cjs → build-CZ5V15O8.cjs}

@@ -3,13 +3,13 @@
 var fs$1 = require('node:fs');
 var fs = require('node:fs/promises');
 var path = require('node:path');
-var runtimePermissionEnv = require('./runtime-permission-env-BtTDFqEL.cjs');
+var runtimePermissionEnv = require('./runtime-permission-env-B03m_ABy.cjs');
 require('node:crypto');
 require('node:zlib');
 var runtimeGate = require('./runtime-gate-BWb8QIcX.cjs');
-var index = require('./index-DDrytLTX.cjs');
-var projectVite = require('./project-vite-CFhz2THK.cjs');
-require('./version-C4nE66sX.cjs');
+var index = require('./index-Dbep6fgT.cjs');
+var projectVite = require('./project-vite-CSpSpfAR.cjs');
+require('./version-CNLhzVfO.cjs');
 require('node:async_hooks');
 require('node:module');
 require('path');

package/dist/cli-chunks/{context-t57bMfbr.cjs → context-Dtt13TVH.cjs}

@@ -1,7 +1,7 @@
 'use strict';
 
-var runtimePermissionEnv = require('./runtime-permission-env-BtTDFqEL.cjs');
-var session = require('./session-Dkhwjqhm.cjs');
+var runtimePermissionEnv = require('./runtime-permission-env-B03m_ABy.cjs');
+var session = require('./session-B596v9X3.cjs');
 var fs$1 = require('node:fs');
 var fs = require('node:fs/promises');
 var path = require('node:path');

package/dist/cli-chunks/{create-BDOPSacf.cjs → create-BH8rUeVn.cjs}

@@ -5,7 +5,7 @@ var fs = require('node:fs/promises');
 var path = require('node:path');
 var require$$0 = require('fs');
 var require$$1 = require('path');
-var index = require('./index-DDrytLTX.cjs');
+var index = require('./index-Dbep6fgT.cjs');
 require('node:module');
 require('os');
 require('readline');

package/dist/cli-chunks/{dev-VxjconYc.cjs → dev-DlwR0N4E.cjs}

@@ -8,17 +8,17 @@ var net = require('node:net');
 var promises = require('node:dns/promises');
 var node_http = require('node:http');
 var node_module = require('node:module');
-var context = require('./context-t57bMfbr.cjs');
-var runtimePermissionEnv = require('./runtime-permission-env-BtTDFqEL.cjs');
+var context = require('./context-Dtt13TVH.cjs');
+var runtimePermissionEnv = require('./runtime-permission-env-B03m_ABy.cjs');
 var undici = require('undici');
 var fs$1 = require('node:fs/promises');
-var index = require('./index-DDrytLTX.cjs');
+var index = require('./index-Dbep6fgT.cjs');
 var require$$0$1 = require('crypto');
 var require$$0 = require('buffer');
-var session = require('./session-Dkhwjqhm.cjs');
+var session = require('./session-B596v9X3.cjs');
 var browser = require('./browser-RAy8e8cV.cjs');
-var projectVite = require('./project-vite-CFhz2THK.cjs');
-var version = require('./version-C4nE66sX.cjs');
+var projectVite = require('./project-vite-CSpSpfAR.cjs');
+var version = require('./version-CNLhzVfO.cjs');
 require('node:zlib');
 
 var _documentCurrentScript = typeof document !== 'undefined' ? document.currentScript : null;
@@ -1950,8 +1950,8 @@ const DEFAULT_CHANNEL_TRANSPORT = {
 };
 const IPV4_LOOPBACK_ADDRESSES = new net.BlockList();
 IPV4_LOOPBACK_ADDRESSES.addSubnet('127.0.0.0', 8, 'ipv4');
-const { WebSocket, WebSocketServer } = node_module.createRequire((typeof document === 'undefined' ? require('u' + 'rl').pathToFileURL(__filename).href : (_documentCurrentScript && _documentCurrentScript.tagName.toUpperCase() === 'SCRIPT' && _documentCurrentScript.src || new URL('cli-chunks/dev-VxjconYc.cjs', document.baseURI).href)))('ws');
-const { parse: parseHtml } = node_module.createRequire((typeof document === 'undefined' ? require('u' + 'rl').pathToFileURL(__filename).href : (_documentCurrentScript && _documentCurrentScript.tagName.toUpperCase() === 'SCRIPT' && _documentCurrentScript.src || new URL('cli-chunks/dev-VxjconYc.cjs', document.baseURI).href)))('parse5');
+const { WebSocket, WebSocketServer } = node_module.createRequire((typeof document === 'undefined' ? require('u' + 'rl').pathToFileURL(__filename).href : (_documentCurrentScript && _documentCurrentScript.tagName.toUpperCase() === 'SCRIPT' && _documentCurrentScript.src || new URL('cli-chunks/dev-DlwR0N4E.cjs', document.baseURI).href)))('ws');
+const { parse: parseHtml } = node_module.createRequire((typeof document === 'undefined' ? require('u' + 'rl').pathToFileURL(__filename).href : (_documentCurrentScript && _documentCurrentScript.tagName.toUpperCase() === 'SCRIPT' && _documentCurrentScript.src || new URL('cli-chunks/dev-DlwR0N4E.cjs', document.baseURI).href)))('parse5');
 const BROWSER_DEV_HOST_ROOT_CANDIDATES = [
     path.resolve(__dirname, 'devtools/browser-dev-host'),
     path.resolve(__dirname, '../devtools/browser-dev-host'),
@@ -1982,6 +1982,7 @@ async function startBrowserDevHostServer(options) {
         lanAddresses: options.lanAddresses ?? [],
         loginAvailable: options.loginService !== undefined,
         miniProgram: options.miniProgram,
+        miniProgramSupportsDesktop: options.miniProgramSupportsDesktop,
         mobileLaunchRedirect: initialMobileLaunchRedirect,
         nativeAppLaunchUnavailableReason: options.nativeAppLaunchUnavailableReason,
         runtimePermissions: options.runtimePermissions,
@@ -2070,6 +2071,8 @@ async function startBrowserDevHostServer(options) {
             }
             if (next.miniProgram !== undefined)
                 bootstrap.miniProgram = next.miniProgram;
+            if (next.miniProgramSupportsDesktop !== undefined)
+                bootstrap.miniProgramSupportsDesktop = next.miniProgramSupportsDesktop;
             bootstrapJson = serializeBrowserDevHostBootstrap(bootstrap);
         },
         networkUrls: createBrowserDevHostNetworkUrls({
@@ -11045,7 +11048,7 @@ function assertNodeRuntimeCapabilities(ctx, settings) {
 function createNodeRealtimeDriverRegistry() {
     const registry = createRuntimeRealtimeDriverRegistry();
     registry.registerLazy('node-websocket', async () => {
-        const mod = await Promise.resolve().then(function () { return require('./index.esm-Dy4qRhuo.cjs'); });
+        const mod = await Promise.resolve().then(function () { return require('./index.esm-BRKWKNSB.cjs'); });
         return mod.createNodeWebSocketRuntimeDriver();
     });
     return registry;
@@ -15167,7 +15170,7 @@ async function runDevCommand(options, runtime = {}) {
     const projectRoot = projectVite.findProjectRoot(runtime.cwd ?? process.cwd());
     const companionArtifactAccessToken = (runtime.randomBytes ?? node_crypto.randomBytes)(32).toString('base64url');
     const devSessionId = node_crypto.randomBytes(16).toString('hex');
-    runtimePermissionEnv.readMiniappPlatformsFromPackageJson(projectRoot);
+    const miniProgramPlatforms = runtimePermissionEnv.readMiniappPlatformsFromPackageJson(projectRoot);
     const { context: devLaunchContext, miniProgram } = await loadDevLaunchContext({
         env: runtime.env,
         fetchImpl,
@@ -15254,6 +15257,8 @@ async function runDevCommand(options, runtime = {}) {
             lookupHostname: runtime.lookupHostname,
             loginService: runtime.loginService,
             miniProgram,
+            // 只在项目声明了桌面平台时向调试台暴露「在桌面端打开」入口。
+            miniProgramSupportsDesktop: runtimePermissionEnv.hasMiniappDesktopPlatform(miniProgramPlatforms),
             cliAuth: runtime.cliAuth ?? createBrowserDevHostCliAuth({ env: runtime.env, fetchImpl }),
             onMobileDevSessionCreated: ({ devContextUrl, miniUrlOrigin }) => {
                 mobileDevContextUrlsByOrigin.set(miniUrlOrigin, devContextUrl);

package/dist/cli-chunks/{doctor-BkfYdlnZ.cjs → doctor-BYj8lz7p.cjs}

@@ -3,7 +3,7 @@
 var fs = require('node:fs/promises');
 var os = require('node:os');
 var path = require('node:path');
-var index = require('./index-DDrytLTX.cjs');
+var index = require('./index-Dbep6fgT.cjs');
 require('node:module');
 require('node:fs');
 require('path');

package/dist/cli-chunks/{index-DDrytLTX.cjs → index-Dbep6fgT.cjs}

@@ -234,19 +234,19 @@ function requireArgument () {
 
 var command = {};
 
-const require$5 = node_module.createRequire((typeof document === 'undefined' ? require('u' + 'rl').pathToFileURL(__filename).href : (_documentCurrentScript && _documentCurrentScript.tagName.toUpperCase() === 'SCRIPT' && _documentCurrentScript.src || new URL('cli-chunks/index-DDrytLTX.cjs', document.baseURI).href)));
+const require$5 = node_module.createRequire((typeof document === 'undefined' ? require('u' + 'rl').pathToFileURL(__filename).href : (_documentCurrentScript && _documentCurrentScript.tagName.toUpperCase() === 'SCRIPT' && _documentCurrentScript.src || new URL('cli-chunks/index-Dbep6fgT.cjs', document.baseURI).href)));
 function __require$4() { return require$5("node:events"); }
 
-const require$4 = node_module.createRequire((typeof document === 'undefined' ? require('u' + 'rl').pathToFileURL(__filename).href : (_documentCurrentScript && _documentCurrentScript.tagName.toUpperCase() === 'SCRIPT' && _documentCurrentScript.src || new URL('cli-chunks/index-DDrytLTX.cjs', document.baseURI).href)));
+const require$4 = node_module.createRequire((typeof document === 'undefined' ? require('u' + 'rl').pathToFileURL(__filename).href : (_documentCurrentScript && _documentCurrentScript.tagName.toUpperCase() === 'SCRIPT' && _documentCurrentScript.src || new URL('cli-chunks/index-Dbep6fgT.cjs', document.baseURI).href)));
 function __require$3() { return require$4("node:child_process"); }
 
-const require$3 = node_module.createRequire((typeof document === 'undefined' ? require('u' + 'rl').pathToFileURL(__filename).href : (_documentCurrentScript && _documentCurrentScript.tagName.toUpperCase() === 'SCRIPT' && _documentCurrentScript.src || new URL('cli-chunks/index-DDrytLTX.cjs', document.baseURI).href)));
+const require$3 = node_module.createRequire((typeof document === 'undefined' ? require('u' + 'rl').pathToFileURL(__filename).href : (_documentCurrentScript && _documentCurrentScript.tagName.toUpperCase() === 'SCRIPT' && _documentCurrentScript.src || new URL('cli-chunks/index-Dbep6fgT.cjs', document.baseURI).href)));
 function __require$2() { return require$3("node:path"); }
 
-const require$2 = node_module.createRequire((typeof document === 'undefined' ? require('u' + 'rl').pathToFileURL(__filename).href : (_documentCurrentScript && _documentCurrentScript.tagName.toUpperCase() === 'SCRIPT' && _documentCurrentScript.src || new URL('cli-chunks/index-DDrytLTX.cjs', document.baseURI).href)));
+const require$2 = node_module.createRequire((typeof document === 'undefined' ? require('u' + 'rl').pathToFileURL(__filename).href : (_documentCurrentScript && _documentCurrentScript.tagName.toUpperCase() === 'SCRIPT' && _documentCurrentScript.src || new URL('cli-chunks/index-Dbep6fgT.cjs', document.baseURI).href)));
 function __require$1() { return require$2("node:fs"); }
 
-const require$1 = node_module.createRequire((typeof document === 'undefined' ? require('u' + 'rl').pathToFileURL(__filename).href : (_documentCurrentScript && _documentCurrentScript.tagName.toUpperCase() === 'SCRIPT' && _documentCurrentScript.src || new URL('cli-chunks/index-DDrytLTX.cjs', document.baseURI).href)));
+const require$1 = node_module.createRequire((typeof document === 'undefined' ? require('u' + 'rl').pathToFileURL(__filename).href : (_documentCurrentScript && _documentCurrentScript.tagName.toUpperCase() === 'SCRIPT' && _documentCurrentScript.src || new URL('cli-chunks/index-Dbep6fgT.cjs', document.baseURI).href)));
 function __require() { return require$1("node:process"); }
 
 var help = {};
@@ -13424,7 +13424,7 @@ function getPathname(pathWithQuery) {
 }
 
 const CLI_VERSION_PLACEHOLDER = ['__HB', 'SDK', 'CLI', 'VERSION__'].join('_');
-const BUILT_CLI_VERSION = '0.8.1-alpha.10';
+const BUILT_CLI_VERSION = '0.8.1-alpha.12';
 const PACKAGE_JSON_CANDIDATES = [
     path.resolve(__dirname, '..', '..', 'package.json'),
     path.resolve(__dirname, '..', 'package.json'),
@@ -13773,39 +13773,39 @@ function createCommandLoggerResolver(options) {
     };
 }
 const defaultClearLoginStatus = async (...args) => {
-    const { clearLoginStatus } = await Promise.resolve().then(function () { return require('./login-D2EX4R5_.cjs'); });
+    const { clearLoginStatus } = await Promise.resolve().then(function () { return require('./login-CLVmbKuy.cjs'); });
     return clearLoginStatus(...args);
 };
 const defaultLoginToHeybox = async (...args) => {
-    const { loginToHeybox } = await Promise.resolve().then(function () { return require('./login-D2EX4R5_.cjs'); });
+    const { loginToHeybox } = await Promise.resolve().then(function () { return require('./login-CLVmbKuy.cjs'); });
     return loginToHeybox(...args);
 };
 const defaultPrintLoginStatus = async (...args) => {
-    const { printLoginStatus } = await Promise.resolve().then(function () { return require('./login-D2EX4R5_.cjs'); });
+    const { printLoginStatus } = await Promise.resolve().then(function () { return require('./login-CLVmbKuy.cjs'); });
     return printLoginStatus(...args);
 };
 const defaultRunBuildCommand = async (...args) => {
-    const { runBuildCommand } = await Promise.resolve().then(function () { return require('./build-CtqIXxDL.cjs'); });
+    const { runBuildCommand } = await Promise.resolve().then(function () { return require('./build-CZ5V15O8.cjs'); });
     return runBuildCommand(...args);
 };
 const defaultRunCreateCommand = async (...args) => {
-    const { runCreateCommand } = await Promise.resolve().then(function () { return require('./create-BDOPSacf.cjs'); });
+    const { runCreateCommand } = await Promise.resolve().then(function () { return require('./create-BH8rUeVn.cjs'); });
     return runCreateCommand(...args);
 };
 const defaultRunDevCommand = async (...args) => {
-    const { runDevCommand } = await Promise.resolve().then(function () { return require('./dev-VxjconYc.cjs'); }).then(function (n) { return n.dev; });
+    const { runDevCommand } = await Promise.resolve().then(function () { return require('./dev-DlwR0N4E.cjs'); }).then(function (n) { return n.dev; });
     return runDevCommand(...args);
 };
 const defaultRunDoctorCommand = async (...args) => {
-    const { runDoctorCommand } = await Promise.resolve().then(function () { return require('./doctor-BkfYdlnZ.cjs'); });
+    const { runDoctorCommand } = await Promise.resolve().then(function () { return require('./doctor-BYj8lz7p.cjs'); });
     return runDoctorCommand(...args);
 };
 const defaultRunSkillInstallCommand = async (...args) => {
-    const { runSkillInstallCommand } = await Promise.resolve().then(function () { return require('./skill-DOveC5jt.cjs'); });
+    const { runSkillInstallCommand } = await Promise.resolve().then(function () { return require('./skill-B-QW6Z7A.cjs'); });
     return runSkillInstallCommand(...args);
 };
 const defaultRunRemoteCommand = async (...args) => {
-    const { runRemoteCommand } = await Promise.resolve().then(function () { return require('./remote-CfESZxO2.cjs'); });
+    const { runRemoteCommand } = await Promise.resolve().then(function () { return require('./remote-BWAdpu4q.cjs'); });
     return runRemoteCommand(...args);
 };
 function resolveStandaloneLogger(options, verbose) {

package/dist/cli-chunks/{index-lLaHzwfT.cjs → index-vPfFOCOM.cjs}

@@ -1,13 +1,13 @@
 'use strict';
 
-var index$2 = require('./index-DDrytLTX.cjs');
+var index$2 = require('./index-Dbep6fgT.cjs');
 var require$$0$3 = require('fs');
 var require$$0$2 = require('crypto');
 var require$$1$2 = require('path');
 var require$$0$5 = require('assert');
 var require$$0$4 = require('events');
 var require$$1$1 = require('util');
-var runtimePermissionEnv = require('./runtime-permission-env-BtTDFqEL.cjs');
+var runtimePermissionEnv = require('./runtime-permission-env-B03m_ABy.cjs');
 var require$$0$7 = require('net');
 var require$$0$6 = require('url');
 var require$$2$1 = require('http');

package/dist/cli-chunks/{index.esm-Dy4qRhuo.cjs → index.esm-BRKWKNSB.cjs}

@@ -11,8 +11,8 @@ var require$$0$4 = require('url');
 var require$$0 = require('zlib');
 var require$$0$1 = require('buffer');
 var require$$1 = require('util');
-var index = require('./index-DDrytLTX.cjs');
-var dev = require('./dev-VxjconYc.cjs');
+var index = require('./index-Dbep6fgT.cjs');
+var dev = require('./dev-DlwR0N4E.cjs');
 require('node:module');
 require('node:fs');
 require('node:fs/promises');
@@ -27,11 +27,11 @@ require('node:os');
 require('node:net');
 require('node:dns/promises');
 require('node:http');
-require('./context-t57bMfbr.cjs');
-require('./runtime-permission-env-BtTDFqEL.cjs');
-require('./version-C4nE66sX.cjs');
+require('./context-Dtt13TVH.cjs');
+require('./runtime-permission-env-B03m_ABy.cjs');
+require('./version-CNLhzVfO.cjs');
 require('node:async_hooks');
-require('./session-Dkhwjqhm.cjs');
+require('./session-B596v9X3.cjs');
 require('fs');
 require('constants');
 require('undici');
@@ -41,7 +41,7 @@ require('node:buffer');
 require('node:url');
 require('node:util');
 require('node:child_process');
-require('./project-vite-CFhz2THK.cjs');
+require('./project-vite-CSpSpfAR.cjs');
 require('node:zlib');
 
 var bufferUtil = {exports: {}};

package/dist/cli-chunks/{login-D2EX4R5_.cjs → login-CLVmbKuy.cjs}

@@ -3,9 +3,9 @@
 var promises = require('node:readline/promises');
 var node_crypto = require('node:crypto');
 var node_http = require('node:http');
-var session = require('./session-Dkhwjqhm.cjs');
+var session = require('./session-B596v9X3.cjs');
 var browser = require('./browser-RAy8e8cV.cjs');
-var index = require('./index-DDrytLTX.cjs');
+var index = require('./index-Dbep6fgT.cjs');
 require('node:path');
 require('fs');
 require('constants');

package/dist/cli-chunks/{project-vite-CFhz2THK.cjs → project-vite-CSpSpfAR.cjs}

@@ -5,7 +5,7 @@ var fs$1 = require('node:fs/promises');
 var node_module = require('node:module');
 var path = require('node:path');
 var node_url = require('node:url');
-var index = require('./index-DDrytLTX.cjs');
+var index = require('./index-Dbep6fgT.cjs');
 
 function findProjectRoot(startDir) {
     let current = path.resolve(startDir);

package/dist/cli-chunks/{remote-CfESZxO2.cjs → remote-BWAdpu4q.cjs}

@@ -1,17 +1,17 @@
 'use strict';
 
 var promises = require('node:readline/promises');
-var index = require('./index-DDrytLTX.cjs');
-var session = require('./session-Dkhwjqhm.cjs');
+var index = require('./index-Dbep6fgT.cjs');
+var session = require('./session-B596v9X3.cjs');
 var childProcess = require('node:child_process');
 var fs = require('node:fs');
 var fs$1 = require('node:fs/promises');
 var path = require('node:path');
-var runtimePermissionEnv = require('./runtime-permission-env-BtTDFqEL.cjs');
+var runtimePermissionEnv = require('./runtime-permission-env-B03m_ABy.cjs');
 var node_crypto = require('node:crypto');
 require('node:zlib');
 var runtimeGate = require('./runtime-gate-BWb8QIcX.cjs');
-var context = require('./context-t57bMfbr.cjs');
+var context = require('./context-Dtt13TVH.cjs');
 require('node:module');
 require('path');
 require('os');
@@ -24,7 +24,7 @@ require('buffer');
 require('util');
 require('fs');
 require('constants');
-require('./version-C4nE66sX.cjs');
+require('./version-CNLhzVfO.cjs');
 require('node:async_hooks');
 
 async function getCDNUploadInfo(options, runtime = {}) {
@@ -274,7 +274,7 @@ function createDefaultCosClient(uploadToken, COS) {
     };
 }
 async function loadCosConstructor() {
-    const cosModule = await Promise.resolve().then(function () { return require('./index-lLaHzwfT.cjs'); }).then(function (n) { return n.index; });
+    const cosModule = await Promise.resolve().then(function () { return require('./index-vPfFOCOM.cjs'); }).then(function (n) { return n.index; });
     return cosModule.default;
 }
 function formatSize(bytes) {

package/dist/cli-chunks/{runtime-permission-env-BtTDFqEL.cjs → runtime-permission-env-B03m_ABy.cjs}

@@ -2,7 +2,7 @@
 
 var fs = require('node:fs');
 var path = require('node:path');
-var version = require('./version-C4nE66sX.cjs');
+var version = require('./version-CNLhzVfO.cjs');
 require('node:crypto');
 var node_async_hooks = require('node:async_hooks');
 
@@ -3108,6 +3108,19 @@ function isRecord$3(value) {
 }
 
 const MINIAPP_PLATFORM_VALUES = ['android', 'ios', 'ohos', 'windows', 'macos', 'linux'];
+/**
+ * 桌面平台子集：从唯一平台词表 `MINIAPP_PLATFORM_VALUES` 派生，`satisfies` 阻止它漂移出词表。
+ * 小程序声明其中任一平台，即视为该项目承诺适配 PC / 桌面端；调试台据此取舍桌面调试入口。
+ *
+ * 注意：子集只表达「声明为桌面」，不保证已有可用的客户端基线——例如 `linux` 目前既没有 `@hbPlatform` 声明，
+ * 也没有 Companion target，仅声明 `linux` 的项目会展示入口但未必能真正打开。
+ */
+const MINIAPP_DESKTOP_PLATFORM_VALUES = ['windows', 'macos', 'linux'];
+function hasMiniappDesktopPlatform(platforms) {
+    if (!platforms)
+        return false;
+    return MINIAPP_DESKTOP_PLATFORM_VALUES.some((platform) => platforms.includes(platform));
+}
 function isValidMiniappManifestVersion(version) {
     return getMiniappManifestVersionError(version) === undefined;
 }
@@ -3781,6 +3794,7 @@ exports.createMiniappArtifactFileHeader = createMiniappArtifactFileHeader;
 exports.createMiniappArtifactSignatureHeader = createMiniappArtifactSignatureHeader;
 exports.createMiniappPlatformCspEnv = createMiniappPlatformCspEnv;
 exports.getMissingPermissionsWarning = getMissingPermissionsWarning;
+exports.hasMiniappDesktopPlatform = hasMiniappDesktopPlatform;
 exports.isValidMiniappManifestVersion = isValidMiniappManifestVersion;
 exports.normalizeRelativePath = normalizeRelativePath;
 exports.parseMiniProgramRuntimePermissions = parseMiniProgramRuntimePermissions;

package/dist/cli-chunks/{session-Dkhwjqhm.cjs → session-B596v9X3.cjs}

@@ -1,6 +1,6 @@
 'use strict';
 
-var index = require('./index-DDrytLTX.cjs');
+var index = require('./index-Dbep6fgT.cjs');
 var node_crypto = require('node:crypto');
 var path = require('node:path');
 var require$$0$2 = require('fs');

package/dist/cli-chunks/{skill-DOveC5jt.cjs → skill-B-QW6Z7A.cjs}

@@ -1,10 +1,10 @@
 'use strict';
 
-var version = require('./version-C4nE66sX.cjs');
+var version = require('./version-CNLhzVfO.cjs');
 var fs = require('node:fs/promises');
 var path = require('node:path');
 var childProcess = require('node:child_process');
-var index = require('./index-DDrytLTX.cjs');
+var index = require('./index-Dbep6fgT.cjs');
 require('node:module');
 require('node:fs');
 require('path');

package/dist/cli-chunks/{version-C4nE66sX.cjs → version-CNLhzVfO.cjs}

@@ -3,6 +3,6 @@
 /** 构建时替换为当前发布包的实际版本。 */
 const HB_SDK_VERSION = typeof undefined === 'string'
     ? undefined
-    : '0.8.1-alpha.10';
+    : '0.8.1-alpha.12';
 
 exports.HB_SDK_VERSION = HB_SDK_VERSION;

package/dist/cli.cjs

@@ -1,6 +1,6 @@
 'use strict';
 
-var index = require('./cli-chunks/index-DDrytLTX.cjs');
+var index = require('./cli-chunks/index-Dbep6fgT.cjs');
 require('node:module');
 require('node:fs');
 require('node:fs/promises');