@heybox/hb-sdk 0.8.1-alpha.13 → 0.8.1-alpha.15

package/CHANGELOG.md

@@ -2,6 +2,20 @@
 
 本文件随 `@heybox/hb-sdk` npm 包公开分发，只记录外部小程序开发者可观察到的变化。内部集成、实现策略和审查证据不在此维护。
 
+## 0.8.1-alpha.15
+
+- 支持在 `package.json#heybox.bindAppIds` 中声明当前版本关联的小黑盒 PC 游戏 appid；构建产物写入规范化后的 Manifest 顶层 `bindAppIds`，最多 20 项。
+- `hb-sdk build` 保持离线校验；`hb-sdk remote deploy` 会在上传前校验游戏是否存在且可用，并在正式提审时由服务端再次校验。缺失或空数组表示清空绑定，`--from-version` 继承源版本快照。
+- `hb-sdk remote info` 只读展示本地、线上、新增和移除绑定；绑定不是 Runtime 权限，修改仍只能更新项目配置并重新发布版本。
+
+## 0.8.1-alpha.14
+
+- 新增 `package.json#heybox.window` 开发者声明：`defaultWidth` / `defaultHeight` / `minWidth` / `minHeight` / `resizable`，构建时写入 `dist/manifest.json`，所有平台都会写入，由各宿主自行消费。
+- 声明严格校验：空对象、未知字段、`width` / `height` 写法、非正整数、超过 `16384`、`min` 未与对应默认值配对或 `min > default` 全部构建期失败；`x` / `y` 显式报错，**位置不开放**。
+- `resizable` 只约束用户手动拖拽；用户拖拽位置不受该字段限制，窗口位置始终不对开发者开放。
+- `hb-sdk build` 与 `hb-sdk remote deploy` 校验 `dist/manifest.json.window` 与 `package.json#heybox.window` 一致，不一致时要求重新构建。
+- Host/Runtime 集成维护者：页面通道合同升级到 `1.6.0`，新增 `window.getGeometry` 请求与 `window.geometryChanged` 上报，只有用户拖拽来源才允许写入本地记忆。detail 页面与工坊插件须成对发布和回滚。
+
 ## 0.8.1-alpha.13
 
 - 审核前预览现在可以准备和启动当前候选版本声明的 Companion；旧版 PC Host 会返回 `COMPANION_PREVIEW_UNSUPPORTED`，需升级客户端后重试。

package/README.md

@@ -106,6 +106,19 @@ async function revokeAuthorizationFromUserAction() {
 }
 ```
 
+需要让已发布版本出现在新 PC 的游戏工作区时，在同一个 `heybox` 对象中按需声明精确的小黑盒 PC 游戏 appid：
+
+```json
+{
+  "heybox": {
+    "platforms": ["windows", "macos"],
+    "bindAppIds": ["730", "3513350"]
+  }
+}
+```
+
+`bindAppIds` 只接受规范十进制字符串，最多 20 项，并按数值升序写入 Manifest。它不是权限，构建不联网；游戏真实性在远端预检和提审时校验。字段缺失或 `[]` 都表示清空绑定，`remote deploy --from-version` 则继承源版本快照。PC 展示仍受 `platforms` 过滤。
+
 再启用构建插件：
 
 ```ts
@@ -138,6 +151,29 @@ console.log(info.sdk.version);
 
 环境信息无需权限，只用于界面适配、兼容降级、埋点和诊断，不能作为鉴权、权限控制或风控依据。完整字段和 Browser Mock 行为见[环境信息](https://docs.xiaoheihe.cn/hb_sdk/guide/environment)。
 
+## 窗口尺寸
+
+新 PC 工坊小程序支持在 `package.json#heybox.window` 声明开窗默认尺寸与可缩放性：
+
+```json
+{
+  "heybox": {
+    "platforms": ["android", "ios", "ohos", "windows", "macos"],
+    "window": {
+      "defaultWidth": 480,
+      "defaultHeight": 900,
+      "minWidth": 360,
+      "minHeight": 600,
+      "resizable": true
+    }
+  }
+}
+```
+
+`window` 整体可选，字段为 `defaultWidth` / `defaultHeight` / `minWidth` / `minHeight` / `resizable`；`{}`、未知字段、`width` / `height` 写法、非正整数、超过 `16384`、`min` 未与对应默认值配对或 `min > default` 都会在构建期明确失败。`minWidth` / `minHeight` 必须与 `defaultWidth` / `defaultHeight` 同时声明。
+
+`resizable` 只约束**用户手动拖拽**；**位置不开放**：开发者不能声明或设置窗口位置，位置由用户拖拽产生并由宿主按小程序身份本地记忆。完整语义见[窗口尺寸与可缩放性](https://docs.xiaoheihe.cn/hb_sdk/guide/window-size)。
+
 ## 文件与下载
 
 `files` 提供当前小程序私有 sandbox 和由用户选择授予的外部 File/Directory；
@@ -282,6 +318,8 @@ SDK 还提供 `getHandshakeState()` / `onHandshakeStateChange()` 管理持久握
 - Companion stdio 是原始 `Uint8Array` 且输出为 at-least-once 投递；业务自行定义 framing、去重、重放与恢复。
 - Browser Dev Host 的 Companion Fake 只用于状态和 UI 开发，不能作为桌面程序可执行、签名、权限或进程监管的真机证据。
 - 本地真 PC Companion 需要 `package.json#heybox.companions`、本地产物、已绑定项目和 COA `companion` 批准；未配置本地产物时使用 Browser Fake。配置或产物更新后校验并切换不可变快照；已有进程保留原产物，新产物须重新准备与启动。
+- `package.json#heybox.window` 只声明开窗初值与可缩放性；`resizable` 只约束用户拖拽。
+- 窗口位置不开放：开发者不能声明、也不能设置位置；位置由用户拖拽并由宿主按小程序身份本地记忆。
 
 私有 Page Channel 适配没有修改 `@heybox/hb-sdk` 公开 API 或 iframe wire；本次 files/download
 Runtime 能力随 `0.8.0-alpha.11` release family 发布，部署 detail 前必须保证

package/dist/cli-chunks/{build-CBPmqCVZ.cjs → build-6nkCiXV0.cjs}

@@ -3,13 +3,13 @@
 var fs$1 = require('node:fs');
 var fs = require('node:fs/promises');
 var path = require('node:path');
-var runtimePermissionEnv = require('./runtime-permission-env-Bn1ONUDU.cjs');
+var runtimePermissionEnv = require('./runtime-permission-env-B3wQZF2c.cjs');
 require('node:crypto');
 require('node:zlib');
 var runtimeGate = require('./runtime-gate-BWb8QIcX.cjs');
-var index = require('./index-E0qh3FUb.cjs');
-var projectVite = require('./project-vite-CRnpRhSb.cjs');
-require('./version-CJTEIaOQ.cjs');
+var index = require('./index-BTUkiKjC.cjs');
+var projectVite = require('./project-vite-87sg4Mnk.cjs');
+require('./version-DXjXtCXW.cjs');
 require('node:async_hooks');
 require('node:module');
 require('path');
@@ -23,6 +23,9 @@ require('buffer');
 require('util');
 require('node:url');
 
+function areStringArraysEqual(left, right) {
+    return left.length === right.length && left.every((value, index) => value === right[index]);
+}
 async function runBuildCommand(_options = {}, runtime = {}) {
     const logger = runtime.logger ?? index.createCliLogger();
     const projectRoot = projectVite.findProjectRoot(runtime.cwd ?? process.cwd());
@@ -31,6 +34,8 @@ async function runBuildCommand(_options = {}, runtime = {}) {
     const mode = env.HB_SDK_ENV?.trim() || undefined;
     const skipPlatformCsp = runtimePermissionEnv.shouldSkipMiniappPlatformCspFromEnv(env);
     const declaredPlatforms = runtimePermissionEnv.readMiniappPlatformsFromPackageJson(projectRoot);
+    const declaredWindow = runtimePermissionEnv.readMiniappWindowFromPackageJson(projectRoot);
+    const declaredBindAppIds = runtimePermissionEnv.readMiniappBindAppIdsFromPackageJson(projectRoot);
     runtimePermissionEnv.readMiniappPermissionsFromPackageJson(projectRoot, runtimePermissionEnv.resolveMiniappSdkVersion());
     await fs.rm(distDir, { force: true, recursive: true });
     try {
@@ -49,7 +54,7 @@ async function runBuildCommand(_options = {}, runtime = {}) {
                     write: true,
                 },
             }), { successText: 'Vite 构建完成' });
-            const result = await validateBuildOutput(projectRoot, logger, declaredPlatforms);
+            const result = await validateBuildOutput(projectRoot, logger, declaredPlatforms, declaredWindow, declaredBindAppIds);
             logger.success(`构建完成: dist/ | manifest version ${result.version} | sdkVersion ${result.sdkVersion} | 待上传文件 ${result.fileCount} 个 | ${formatSize(result.totalBytes)}`);
             return result;
         }, env);
@@ -78,7 +83,7 @@ function createFixedBuildOutputPlugin(projectRoot) {
         },
     };
 }
-async function validateBuildOutput(projectRoot, logger, declaredPlatforms) {
+async function validateBuildOutput(projectRoot, logger, declaredPlatforms, declaredWindow, declaredBindAppIds) {
     const distDir = path.join(projectRoot, 'dist');
     const entryHtmlPath = path.join(distDir, 'index.html');
     const manifestPath = path.join(distDir, 'manifest.json');
@@ -96,10 +101,18 @@ async function validateBuildOutput(projectRoot, logger, declaredPlatforms) {
     if (hadBom) {
         logger.warn('dist/manifest.json 包含 BOM，已自动剥离');
     }
-    const { platforms, sdkVersion, version, permissions } = runtimePermissionEnv.validateMiniappManifestForDeploy(manifest);
+    const validated = runtimePermissionEnv.validateMiniappManifestForDeploy(manifest);
+    const { platforms, sdkVersion, version, permissions, window } = validated;
+    const bindAppIds = validated.bindAppIds ?? [];
     if (!runtimePermissionEnv.areMiniappPlatformsEqual(platforms, declaredPlatforms)) {
         throw new Error('dist/manifest.json.platforms 与 package.json#heybox.platforms 不一致，请重新 build');
     }
+    if (!runtimePermissionEnv.areMiniappWindowsEqual(window, declaredWindow)) {
+        throw new Error('dist/manifest.json.window 与 package.json#heybox.window 不一致，请重新 build');
+    }
+    if (!areStringArraysEqual(bindAppIds, declaredBindAppIds)) {
+        throw new Error('dist/manifest.json.bindAppIds 与 package.json#heybox.bindAppIds 不一致，请重新 build');
+    }
     const allFiles = await walkDistFiles(distDir);
     const uploadFiles = allFiles.filter((file) => runtimePermissionEnv.shouldUploadDistFile(file.relativePath));
     const sizeError = runtimePermissionEnv.validateMiniappUploadSizeBudgets(uploadFiles);
@@ -108,6 +121,7 @@ async function validateBuildOutput(projectRoot, logger, declaredPlatforms) {
     }
     return {
         distDir,
+        bindAppIds,
         fileCount: uploadFiles.length,
         sdkVersion,
         platforms,

package/dist/cli-chunks/{context-CvuPJq1G.cjs → context-DyeSJSqE.cjs}

@@ -1,7 +1,7 @@
 'use strict';
 
-var runtimePermissionEnv = require('./runtime-permission-env-Bn1ONUDU.cjs');
-var session = require('./session-BvZgS7VI.cjs');
+var runtimePermissionEnv = require('./runtime-permission-env-B3wQZF2c.cjs');
+var session = require('./session-YWsulrKF.cjs');
 var fs$1 = require('node:fs');
 var fs = require('node:fs/promises');
 var path = require('node:path');

package/dist/cli-chunks/{create-CyMWFYrc.cjs → create-wXBzkgmP.cjs}

@@ -5,7 +5,7 @@ var fs = require('node:fs/promises');
 var path = require('node:path');
 var require$$0 = require('fs');
 var require$$1 = require('path');
-var index = require('./index-E0qh3FUb.cjs');
+var index = require('./index-BTUkiKjC.cjs');
 require('node:module');
 require('os');
 require('readline');

package/dist/cli-chunks/{dev-BcAPHk9L.cjs → dev-Caq_oO7n.cjs}

@@ -8,17 +8,17 @@ var net = require('node:net');
 var promises = require('node:dns/promises');
 var node_http = require('node:http');
 var node_module = require('node:module');
-var context = require('./context-CvuPJq1G.cjs');
-var runtimePermissionEnv = require('./runtime-permission-env-Bn1ONUDU.cjs');
+var context = require('./context-DyeSJSqE.cjs');
+var runtimePermissionEnv = require('./runtime-permission-env-B3wQZF2c.cjs');
 var undici = require('undici');
 var fs$1 = require('node:fs/promises');
-var index = require('./index-E0qh3FUb.cjs');
+var index = require('./index-BTUkiKjC.cjs');
 var require$$0$1 = require('crypto');
 var require$$0 = require('buffer');
-var session = require('./session-BvZgS7VI.cjs');
+var session = require('./session-YWsulrKF.cjs');
 var browser = require('./browser-RAy8e8cV.cjs');
-var projectVite = require('./project-vite-CRnpRhSb.cjs');
-var version = require('./version-CJTEIaOQ.cjs');
+var projectVite = require('./project-vite-87sg4Mnk.cjs');
+var version = require('./version-DXjXtCXW.cjs');
 require('node:zlib');
 
 var _documentCurrentScript = typeof document !== 'undefined' ? document.currentScript : null;
@@ -1950,8 +1950,8 @@ const DEFAULT_CHANNEL_TRANSPORT = {
 };
 const IPV4_LOOPBACK_ADDRESSES = new net.BlockList();
 IPV4_LOOPBACK_ADDRESSES.addSubnet('127.0.0.0', 8, 'ipv4');
-const { WebSocket, WebSocketServer } = node_module.createRequire((typeof document === 'undefined' ? require('u' + 'rl').pathToFileURL(__filename).href : (_documentCurrentScript && _documentCurrentScript.tagName.toUpperCase() === 'SCRIPT' && _documentCurrentScript.src || new URL('cli-chunks/dev-BcAPHk9L.cjs', document.baseURI).href)))('ws');
-const { parse: parseHtml } = node_module.createRequire((typeof document === 'undefined' ? require('u' + 'rl').pathToFileURL(__filename).href : (_documentCurrentScript && _documentCurrentScript.tagName.toUpperCase() === 'SCRIPT' && _documentCurrentScript.src || new URL('cli-chunks/dev-BcAPHk9L.cjs', document.baseURI).href)))('parse5');
+const { WebSocket, WebSocketServer } = node_module.createRequire((typeof document === 'undefined' ? require('u' + 'rl').pathToFileURL(__filename).href : (_documentCurrentScript && _documentCurrentScript.tagName.toUpperCase() === 'SCRIPT' && _documentCurrentScript.src || new URL('cli-chunks/dev-Caq_oO7n.cjs', document.baseURI).href)))('ws');
+const { parse: parseHtml } = node_module.createRequire((typeof document === 'undefined' ? require('u' + 'rl').pathToFileURL(__filename).href : (_documentCurrentScript && _documentCurrentScript.tagName.toUpperCase() === 'SCRIPT' && _documentCurrentScript.src || new URL('cli-chunks/dev-Caq_oO7n.cjs', document.baseURI).href)))('parse5');
 const BROWSER_DEV_HOST_ROOT_CANDIDATES = [
     path.resolve(__dirname, 'devtools/browser-dev-host'),
     path.resolve(__dirname, '../devtools/browser-dev-host'),
@@ -1985,6 +1985,7 @@ async function startBrowserDevHostServer(options) {
         miniProgramSupportsDesktop: options.miniProgramSupportsDesktop,
         mobileLaunchRedirect: initialMobileLaunchRedirect,
         nativeAppLaunchUnavailableReason: options.nativeAppLaunchUnavailableReason,
+        miniProgramManifestAccessToken: options.miniProgramManifestAccessToken,
         runtimePermissions: options.runtimePermissions,
         devReadiness: options.devReadiness,
     };
@@ -11048,7 +11049,7 @@ function assertNodeRuntimeCapabilities(ctx, settings) {
 function createNodeRealtimeDriverRegistry() {
     const registry = createRuntimeRealtimeDriverRegistry();
     registry.registerLazy('node-websocket', async () => {
-        const mod = await Promise.resolve().then(function () { return require('./index.esm-DTEOIvDp.cjs'); });
+        const mod = await Promise.resolve().then(function () { return require('./index.esm-DU-rsJ3-.cjs'); });
         return mod.createNodeWebSocketRuntimeDriver();
     });
     return registry;
@@ -15146,6 +15147,8 @@ const VITE_LOG_LEVEL = 'warn';
 const COMPANION_DEV_MANIFEST_PATH = '/__hb_sdk__/companion/manifest.json';
 const COMPANION_DEV_MANIFEST_MAX_BYTES = 1024 * 1024;
 const COMPANION_ARTIFACT_ACCESS_TOKEN_ENV = 'HB_SDK_COMPANION_ARTIFACT_ACCESS_TOKEN';
+// 本地 PC 调试 manifest 的专用令牌：开窗时扩展还没拿到 LocalDevelopmentBinding，只能靠启动 URI 带来。
+const MINI_PROGRAM_MANIFEST_ACCESS_TOKEN_ENV = 'HB_SDK_MINI_PROGRAM_MANIFEST_ACCESS_TOKEN';
 const COMPANION_ARTIFACT_ACCESS_TOKEN_HEADER = 'x-hb-sdk-companion-dev-token';
 async function runDevCommand(options, runtime = {}) {
     const logger = runtime.logger ?? index.createCliLogger();
@@ -15169,6 +15172,7 @@ async function runDevCommand(options, runtime = {}) {
     };
     const projectRoot = projectVite.findProjectRoot(runtime.cwd ?? process.cwd());
     const companionArtifactAccessToken = (runtime.randomBytes ?? node_crypto.randomBytes)(32).toString('base64url');
+    const miniProgramManifestAccessToken = (runtime.randomBytes ?? node_crypto.randomBytes)(32).toString('base64url');
     const devSessionId = node_crypto.randomBytes(16).toString('hex');
     const miniProgramPlatforms = runtimePermissionEnv.readMiniappPlatformsFromPackageJson(projectRoot);
     const { context: devLaunchContext, miniProgram } = await loadDevLaunchContext({
@@ -15230,7 +15234,7 @@ async function runDevCommand(options, runtime = {}) {
         return true;
     });
     const vite = await runDevStartupTask(logger, '正在加载项目 Vite', () => projectVite.loadProjectVite(projectRoot), '已加载项目 Vite');
-    const appServer = await runDevStartupTask(logger, '正在创建 Vite 开发服务器', () => runtimePermissionEnv.withMiniappPlatformCspEnv(context.shouldSkipMiniappPlatformCsp(devLaunchContext.runtimePermissions), () => withCompanionArtifactAccessTokenEnv(companionArtifactAccessToken, () => withManagedDevOutputEnv(() => vite.createServer(createViteServerOptions(projectRoot, resolvedOptions, launchPlugin)), runtime.env), runtime.env), runtime.env), '已创建 Vite 开发服务器');
+    const appServer = await runDevStartupTask(logger, '正在创建 Vite 开发服务器', () => runtimePermissionEnv.withMiniappPlatformCspEnv(context.shouldSkipMiniappPlatformCsp(devLaunchContext.runtimePermissions), () => withCompanionArtifactAccessTokenEnv(companionArtifactAccessToken, () => withMiniProgramManifestAccessTokenEnv(miniProgramManifestAccessToken, () => withManagedDevOutputEnv(() => vite.createServer(createViteServerOptions(projectRoot, resolvedOptions, launchPlugin)), runtime.env), runtime.env), runtime.env), runtime.env), '已创建 Vite 开发服务器');
     await runDevStartupTask(logger, '正在启动 Vite 开发服务器', () => appServer.listen(appPort), 'Vite 开发服务器已启动');
     const appUrl = await runDevStartupTask(logger, '正在探测小程序入口', () => resolveViteAppUrl(appServer, resolvedOptions, fetchImpl), '已确定小程序入口');
     const buildLanAddresses = () => createLanAddressCandidates({
@@ -15254,6 +15258,7 @@ async function runDevCommand(options, runtime = {}) {
             getPort: getPortImpl,
             defaultLanAddressId: lanAddresses[0]?.id,
             lanAddresses,
+            miniProgramManifestAccessToken,
             lookupHostname: runtime.lookupHostname,
             loginService: runtime.loginService,
             miniProgram,
@@ -15603,6 +15608,19 @@ async function withCompanionArtifactAccessTokenEnv(token, action, env = process.
             env[COMPANION_ARTIFACT_ACCESS_TOKEN_ENV] = previous;
     }
 }
+async function withMiniProgramManifestAccessTokenEnv(token, action, env = process.env) {
+    const previous = env[MINI_PROGRAM_MANIFEST_ACCESS_TOKEN_ENV];
+    env[MINI_PROGRAM_MANIFEST_ACCESS_TOKEN_ENV] = token;
+    try {
+        return await action();
+    }
+    finally {
+        if (previous === undefined)
+            delete env[MINI_PROGRAM_MANIFEST_ACCESS_TOKEN_ENV];
+        else
+            env[MINI_PROGRAM_MANIFEST_ACCESS_TOKEN_ENV] = previous;
+    }
+}
 function installShutdownHandlers(closers, processLike) {
     const shutdown = async () => {
         await closeAll(closers);

package/dist/cli-chunks/{doctor-CIwaVrM1.cjs → doctor-n4vISsD-.cjs}

@@ -3,7 +3,7 @@
 var fs = require('node:fs/promises');
 var os = require('node:os');
 var path = require('node:path');
-var index = require('./index-E0qh3FUb.cjs');
+var index = require('./index-BTUkiKjC.cjs');
 require('node:module');
 require('node:fs');
 require('path');

package/dist/cli-chunks/{index-E0qh3FUb.cjs → index-BTUkiKjC.cjs}

@@ -234,19 +234,19 @@ function requireArgument () {
 
 var command = {};
 
-const require$5 = node_module.createRequire((typeof document === 'undefined' ? require('u' + 'rl').pathToFileURL(__filename).href : (_documentCurrentScript && _documentCurrentScript.tagName.toUpperCase() === 'SCRIPT' && _documentCurrentScript.src || new URL('cli-chunks/index-E0qh3FUb.cjs', document.baseURI).href)));
+const require$5 = node_module.createRequire((typeof document === 'undefined' ? require('u' + 'rl').pathToFileURL(__filename).href : (_documentCurrentScript && _documentCurrentScript.tagName.toUpperCase() === 'SCRIPT' && _documentCurrentScript.src || new URL('cli-chunks/index-BTUkiKjC.cjs', document.baseURI).href)));
 function __require$4() { return require$5("node:events"); }
 
-const require$4 = node_module.createRequire((typeof document === 'undefined' ? require('u' + 'rl').pathToFileURL(__filename).href : (_documentCurrentScript && _documentCurrentScript.tagName.toUpperCase() === 'SCRIPT' && _documentCurrentScript.src || new URL('cli-chunks/index-E0qh3FUb.cjs', document.baseURI).href)));
+const require$4 = node_module.createRequire((typeof document === 'undefined' ? require('u' + 'rl').pathToFileURL(__filename).href : (_documentCurrentScript && _documentCurrentScript.tagName.toUpperCase() === 'SCRIPT' && _documentCurrentScript.src || new URL('cli-chunks/index-BTUkiKjC.cjs', document.baseURI).href)));
 function __require$3() { return require$4("node:child_process"); }
 
-const require$3 = node_module.createRequire((typeof document === 'undefined' ? require('u' + 'rl').pathToFileURL(__filename).href : (_documentCurrentScript && _documentCurrentScript.tagName.toUpperCase() === 'SCRIPT' && _documentCurrentScript.src || new URL('cli-chunks/index-E0qh3FUb.cjs', document.baseURI).href)));
+const require$3 = node_module.createRequire((typeof document === 'undefined' ? require('u' + 'rl').pathToFileURL(__filename).href : (_documentCurrentScript && _documentCurrentScript.tagName.toUpperCase() === 'SCRIPT' && _documentCurrentScript.src || new URL('cli-chunks/index-BTUkiKjC.cjs', document.baseURI).href)));
 function __require$2() { return require$3("node:path"); }
 
-const require$2 = node_module.createRequire((typeof document === 'undefined' ? require('u' + 'rl').pathToFileURL(__filename).href : (_documentCurrentScript && _documentCurrentScript.tagName.toUpperCase() === 'SCRIPT' && _documentCurrentScript.src || new URL('cli-chunks/index-E0qh3FUb.cjs', document.baseURI).href)));
+const require$2 = node_module.createRequire((typeof document === 'undefined' ? require('u' + 'rl').pathToFileURL(__filename).href : (_documentCurrentScript && _documentCurrentScript.tagName.toUpperCase() === 'SCRIPT' && _documentCurrentScript.src || new URL('cli-chunks/index-BTUkiKjC.cjs', document.baseURI).href)));
 function __require$1() { return require$2("node:fs"); }
 
-const require$1 = node_module.createRequire((typeof document === 'undefined' ? require('u' + 'rl').pathToFileURL(__filename).href : (_documentCurrentScript && _documentCurrentScript.tagName.toUpperCase() === 'SCRIPT' && _documentCurrentScript.src || new URL('cli-chunks/index-E0qh3FUb.cjs', document.baseURI).href)));
+const require$1 = node_module.createRequire((typeof document === 'undefined' ? require('u' + 'rl').pathToFileURL(__filename).href : (_documentCurrentScript && _documentCurrentScript.tagName.toUpperCase() === 'SCRIPT' && _documentCurrentScript.src || new URL('cli-chunks/index-BTUkiKjC.cjs', document.baseURI).href)));
 function __require() { return require$1("node:process"); }
 
 var help = {};
@@ -13424,7 +13424,7 @@ function getPathname(pathWithQuery) {
 }
 
 const CLI_VERSION_PLACEHOLDER = ['__HB', 'SDK', 'CLI', 'VERSION__'].join('_');
-const BUILT_CLI_VERSION = '0.8.1-alpha.13';
+const BUILT_CLI_VERSION = '0.8.1-alpha.15';
 const PACKAGE_JSON_CANDIDATES = [
     path.resolve(__dirname, '..', '..', 'package.json'),
     path.resolve(__dirname, '..', 'package.json'),
@@ -13773,39 +13773,39 @@ function createCommandLoggerResolver(options) {
     };
 }
 const defaultClearLoginStatus = async (...args) => {
-    const { clearLoginStatus } = await Promise.resolve().then(function () { return require('./login-DGvHzH9j.cjs'); });
+    const { clearLoginStatus } = await Promise.resolve().then(function () { return require('./login-CsXZXtCS.cjs'); });
     return clearLoginStatus(...args);
 };
 const defaultLoginToHeybox = async (...args) => {
-    const { loginToHeybox } = await Promise.resolve().then(function () { return require('./login-DGvHzH9j.cjs'); });
+    const { loginToHeybox } = await Promise.resolve().then(function () { return require('./login-CsXZXtCS.cjs'); });
     return loginToHeybox(...args);
 };
 const defaultPrintLoginStatus = async (...args) => {
-    const { printLoginStatus } = await Promise.resolve().then(function () { return require('./login-DGvHzH9j.cjs'); });
+    const { printLoginStatus } = await Promise.resolve().then(function () { return require('./login-CsXZXtCS.cjs'); });
     return printLoginStatus(...args);
 };
 const defaultRunBuildCommand = async (...args) => {
-    const { runBuildCommand } = await Promise.resolve().then(function () { return require('./build-CBPmqCVZ.cjs'); });
+    const { runBuildCommand } = await Promise.resolve().then(function () { return require('./build-6nkCiXV0.cjs'); });
     return runBuildCommand(...args);
 };
 const defaultRunCreateCommand = async (...args) => {
-    const { runCreateCommand } = await Promise.resolve().then(function () { return require('./create-CyMWFYrc.cjs'); });
+    const { runCreateCommand } = await Promise.resolve().then(function () { return require('./create-wXBzkgmP.cjs'); });
     return runCreateCommand(...args);
 };
 const defaultRunDevCommand = async (...args) => {
-    const { runDevCommand } = await Promise.resolve().then(function () { return require('./dev-BcAPHk9L.cjs'); }).then(function (n) { return n.dev; });
+    const { runDevCommand } = await Promise.resolve().then(function () { return require('./dev-Caq_oO7n.cjs'); }).then(function (n) { return n.dev; });
     return runDevCommand(...args);
 };
 const defaultRunDoctorCommand = async (...args) => {
-    const { runDoctorCommand } = await Promise.resolve().then(function () { return require('./doctor-CIwaVrM1.cjs'); });
+    const { runDoctorCommand } = await Promise.resolve().then(function () { return require('./doctor-n4vISsD-.cjs'); });
     return runDoctorCommand(...args);
 };
 const defaultRunSkillInstallCommand = async (...args) => {
-    const { runSkillInstallCommand } = await Promise.resolve().then(function () { return require('./skill-BVT6fBpQ.cjs'); });
+    const { runSkillInstallCommand } = await Promise.resolve().then(function () { return require('./skill-CS2JoOL8.cjs'); });
     return runSkillInstallCommand(...args);
 };
 const defaultRunRemoteCommand = async (...args) => {
-    const { runRemoteCommand } = await Promise.resolve().then(function () { return require('./remote-C1_Hs11w.cjs'); });
+    const { runRemoteCommand } = await Promise.resolve().then(function () { return require('./remote-Cfr3wcGq.cjs'); });
     return runRemoteCommand(...args);
 };
 function resolveStandaloneLogger(options, verbose) {

package/dist/cli-chunks/{index-B0KCGR9H.cjs → index-hyB5_A_G.cjs}

@@ -1,13 +1,13 @@
 'use strict';
 
-var index$2 = require('./index-E0qh3FUb.cjs');
+var index$2 = require('./index-BTUkiKjC.cjs');
 var require$$0$3 = require('fs');
 var require$$0$2 = require('crypto');
 var require$$1$2 = require('path');
 var require$$0$5 = require('assert');
 var require$$0$4 = require('events');
 var require$$1$1 = require('util');
-var runtimePermissionEnv = require('./runtime-permission-env-Bn1ONUDU.cjs');
+var runtimePermissionEnv = require('./runtime-permission-env-B3wQZF2c.cjs');
 var require$$0$7 = require('net');
 var require$$0$6 = require('url');
 var require$$2$1 = require('http');

package/dist/cli-chunks/{index.esm-DTEOIvDp.cjs → index.esm-DU-rsJ3-.cjs}

@@ -11,8 +11,8 @@ var require$$0$4 = require('url');
 var require$$0 = require('zlib');
 var require$$0$1 = require('buffer');
 var require$$1 = require('util');
-var index = require('./index-E0qh3FUb.cjs');
-var dev = require('./dev-BcAPHk9L.cjs');
+var index = require('./index-BTUkiKjC.cjs');
+var dev = require('./dev-Caq_oO7n.cjs');
 require('node:module');
 require('node:fs');
 require('node:fs/promises');
@@ -27,11 +27,11 @@ require('node:os');
 require('node:net');
 require('node:dns/promises');
 require('node:http');
-require('./context-CvuPJq1G.cjs');
-require('./runtime-permission-env-Bn1ONUDU.cjs');
-require('./version-CJTEIaOQ.cjs');
+require('./context-DyeSJSqE.cjs');
+require('./runtime-permission-env-B3wQZF2c.cjs');
+require('./version-DXjXtCXW.cjs');
 require('node:async_hooks');
-require('./session-BvZgS7VI.cjs');
+require('./session-YWsulrKF.cjs');
 require('fs');
 require('constants');
 require('undici');
@@ -41,7 +41,7 @@ require('node:buffer');
 require('node:url');
 require('node:util');
 require('node:child_process');
-require('./project-vite-CRnpRhSb.cjs');
+require('./project-vite-87sg4Mnk.cjs');
 require('node:zlib');
 
 var bufferUtil = {exports: {}};

package/dist/cli-chunks/{login-DGvHzH9j.cjs → login-CsXZXtCS.cjs}

@@ -3,9 +3,9 @@
 var promises = require('node:readline/promises');
 var node_crypto = require('node:crypto');
 var node_http = require('node:http');
-var session = require('./session-BvZgS7VI.cjs');
+var session = require('./session-YWsulrKF.cjs');
 var browser = require('./browser-RAy8e8cV.cjs');
-var index = require('./index-E0qh3FUb.cjs');
+var index = require('./index-BTUkiKjC.cjs');
 require('node:path');
 require('fs');
 require('constants');

package/dist/cli-chunks/{project-vite-CRnpRhSb.cjs → project-vite-87sg4Mnk.cjs}

@@ -5,7 +5,7 @@ var fs$1 = require('node:fs/promises');
 var node_module = require('node:module');
 var path = require('node:path');
 var node_url = require('node:url');
-var index = require('./index-E0qh3FUb.cjs');
+var index = require('./index-BTUkiKjC.cjs');
 
 function findProjectRoot(startDir) {
     let current = path.resolve(startDir);

package/dist/cli-chunks/{remote-C1_Hs11w.cjs → remote-Cfr3wcGq.cjs}

@@ -1,17 +1,17 @@
 'use strict';
 
 var promises = require('node:readline/promises');
-var index = require('./index-E0qh3FUb.cjs');
-var session = require('./session-BvZgS7VI.cjs');
+var index = require('./index-BTUkiKjC.cjs');
+var session = require('./session-YWsulrKF.cjs');
 var childProcess = require('node:child_process');
 var fs = require('node:fs');
 var fs$1 = require('node:fs/promises');
 var path = require('node:path');
-var runtimePermissionEnv = require('./runtime-permission-env-Bn1ONUDU.cjs');
+var runtimePermissionEnv = require('./runtime-permission-env-B3wQZF2c.cjs');
 var node_crypto = require('node:crypto');
 require('node:zlib');
 var runtimeGate = require('./runtime-gate-BWb8QIcX.cjs');
-var context = require('./context-CvuPJq1G.cjs');
+var context = require('./context-DyeSJSqE.cjs');
 require('node:module');
 require('path');
 require('os');
@@ -24,7 +24,7 @@ require('buffer');
 require('util');
 require('fs');
 require('constants');
-require('./version-CJTEIaOQ.cjs');
+require('./version-DXjXtCXW.cjs');
 require('node:async_hooks');
 
 async function getCDNUploadInfo(options, runtime = {}) {
@@ -69,6 +69,7 @@ async function precheckUserMiniprogramVersion(options, runtime = {}) {
         // 展示资料由服务端沿用 last approved 或注入默认名/默认图；CLI 不传 name/icon/cover。
         ...(options.version ? { version: options.version } : {}),
         ...(options.source_version ? { source_version: options.source_version } : {}),
+        ...(options.manifest ? { manifest: JSON.stringify(options.manifest) } : {}),
         release_note: options.releaseNote,
         auto_publish: String(options.autoPublish),
     }, runtime);
@@ -274,7 +275,7 @@ function createDefaultCosClient(uploadToken, COS) {
     };
 }
 async function loadCosConstructor() {
-    const cosModule = await Promise.resolve().then(function () { return require('./index-B0KCGR9H.cjs'); }).then(function (n) { return n.index; });
+    const cosModule = await Promise.resolve().then(function () { return require('./index-hyB5_A_G.cjs'); }).then(function (n) { return n.index; });
     return cosModule.default;
 }
 function formatSize(bytes) {
@@ -516,6 +517,8 @@ async function runDeployCommand(options, runtime = {}) {
     }
     const fromVersion = options.fromVersion?.trim();
     const declaredPlatforms = fromVersion ? undefined : runtimePermissionEnv.readMiniappPlatformsFromPackageJson(projectRoot);
+    const declaredWindow = fromVersion ? undefined : runtimePermissionEnv.readMiniappWindowFromPackageJson(projectRoot);
+    const declaredBindAppIds = fromVersion ? undefined : runtimePermissionEnv.readMiniappBindAppIdsFromPackageJson(projectRoot);
     const releaseNote = await resolveDeployReleaseNote(options, runtime);
     const session$1 = await logger.task('正在校验 Heybox 登录态', () => (runtime.requireAuthSession ?? session.requireHeyboxAuthSession)({ loginBaseUrl }), { successText: 'Heybox 登录态有效' });
     logger.debug(`Heybox API: ${apiBaseUrl}`);
@@ -593,9 +596,23 @@ async function runDeployCommand(options, runtime = {}) {
             if (!declaredPlatforms || !runtimePermissionEnv.areMiniappPlatformsEqual(parsedManifest.platforms, declaredPlatforms)) {
                 throw new Error('dist/manifest.json.platforms 与 package.json#heybox.platforms 不一致，请重新 build 后再 deploy');
             }
+            if (!runtimePermissionEnv.areMiniappWindowsEqual(parsedManifest.window, declaredWindow)) {
+                throw new Error('dist/manifest.json.window 与 package.json#heybox.window 不一致，请重新 build 后再 deploy');
+            }
             if (version !== precheckVersion) {
                 throw new Error(`dist/manifest.json.version (${version}) 与预检版本 (${precheckVersion}) 不一致，请重新 build 后再 deploy`);
             }
+            if (declaredBindAppIds && !areStringArraysEqual(parsedManifest.bindAppIds, declaredBindAppIds)) {
+                throw new Error('dist/manifest.json.bindAppIds 与 package.json#heybox.bindAppIds 不一致，请重新 build 后再 deploy');
+            }
+            await runVersionPrecheck({
+                session: session$1,
+                miniProgramId,
+                version,
+                manifest,
+                releaseNote,
+                autoPublish,
+            }, runtime, apiBaseUrl, projectRoot, logger);
             const uploadFiles = await logger.task('正在校验 dist 上传文件', async () => {
                 const allFiles = await walkDistFiles(distDir);
                 const blocked = allFiles.find((entry) => runtimePermissionEnv.relativePathContainsNodeModulesSegment(entry.relativePath));
@@ -733,6 +750,9 @@ function findProjectRoot(startDir) {
 async function readPackageJson(projectRoot) {
     return JSON.parse(await fs$1.readFile(path.join(projectRoot, 'package.json'), 'utf8'));
 }
+function areStringArraysEqual(left, right) {
+    return left.length === right.length && left.every((value, index) => value === right[index]);
+}
 async function readDeployManifest(projectRoot, logger) {
     const distDir = path.join(projectRoot, 'dist');
     const manifestPath = path.join(distDir, 'manifest.json');
@@ -752,11 +772,18 @@ async function readDeployManifest(projectRoot, logger) {
         logger.warn('dist/manifest.json 包含 BOM，已自动剥离');
     }
     const validated = runtimePermissionEnv.validateMiniappManifestForDeploy(manifest);
+    const bindAppIds = validated.bindAppIds ?? [];
     return {
-        manifest: { ...manifest, platforms: validated.platforms },
+        manifest: {
+            ...manifest,
+            platforms: validated.platforms,
+            ...(bindAppIds.length === 0 ? {} : { bindAppIds }),
+        },
+        bindAppIds,
         sdkVersion: validated.sdkVersion,
         version: validated.version,
         platforms: validated.platforms,
+        ...(validated.window === undefined ? {} : { window: validated.window }),
     };
 }
 function validateVersionForDeploy(version, sourceLabel) {
@@ -1261,9 +1288,18 @@ async function remoteInfo(options, context, runtime) {
     const detail = await context.api.getMiniProgramDetail(miniProgramId);
     const localPermissions = runtimePermissionEnv.readMiniappPermissionsFromPackageJson(context.packageJson.projectRoot, runtimePermissionEnv.resolveMiniappSdkVersion());
     const permissionViews = runtimePermissionEnv.composeMiniappRuntimePermissions(localPermissions, detail.runtime_permissions).views;
-    const output = { changed: false, miniProgramId, detail: toCamelCaseDeep(detail), permissions: permissionViews };
+    const localBindAppIds = runtimePermissionEnv.readMiniappBindAppIdsFromPackageJson(context.packageJson.projectRoot);
+    const currentBindApps = normalizeRemoteBoundApps(detail.bind_apps);
+    const currentByID = new Map(currentBindApps.map((item) => [item.appid, item]));
+    const local = localBindAppIds.map((appid) => currentByID.get(appid) ?? { appid });
+    const currentIDs = new Set(currentBindApps.map((item) => item.appid));
+    const added = local.filter((item) => !currentIDs.has(item.appid));
+    const localIDs = new Set(localBindAppIds);
+    const removed = currentBindApps.filter((item) => !localIDs.has(item.appid));
+    const bindings = { local, current: currentBindApps, added, removed };
+    const output = { changed: false, miniProgramId, detail: toCamelCaseDeep(detail), permissions: permissionViews, bindings };
     if (!options.json) {
-        printMiniProgramDetail(context.logger, detail, permissionViews);
+        printMiniProgramDetail(context.logger, detail, permissionViews, bindings);
     }
     return finishRemoteCommand(options, runtime, output);
 }
@@ -1762,7 +1798,7 @@ async function promptConfirm(message, runtime) {
         rl.close();
     }
 }
-function printMiniProgramDetail(logger, detail, permissionViews) {
+function printMiniProgramDetail(logger, detail, permissionViews, bindings) {
     logger.info(`Mini-program: ${detail.mini_program_id ?? '--'}`);
     logger.info(`Name: ${detail.name ?? '--'}`);
     logger.info(`Status: ${detail.status ?? '--'}`);
@@ -1781,6 +1817,34 @@ function printMiniProgramDetail(logger, detail, permissionViews) {
             : '';
         logger.info(`  ${view.key}: 声明=${view.declared ? '是' : '否'}${approval} 最终=${view.effective ? '可用' : '不可用'}${configs}`);
     }
+    if (bindings) {
+        logger.info('关联游戏（本地/线上/新增/移除）:');
+        logger.info(`  local=${formatBoundApps(bindings.local)}`);
+        logger.info(`  current=${formatBoundApps(bindings.current)}`);
+        logger.info(`  added=${formatBoundApps(bindings.added)}`);
+        logger.info(`  removed=${formatBoundApps(bindings.removed)}`);
+    }
+}
+function normalizeRemoteBoundApps(value) {
+    if (!Array.isArray(value))
+        return [];
+    return value.flatMap((item) => {
+        if (!item || typeof item !== 'object')
+            return [];
+        const source = item;
+        if (typeof source.appid !== 'string' || !/^[1-9]\d*$/.test(source.appid))
+            return [];
+        return [
+            {
+                appid: source.appid,
+                ...(typeof source.name === 'string' && source.name.trim() ? { name: source.name.trim() } : {}),
+                ...(typeof source.icon_url === 'string' && source.icon_url.trim() ? { icon_url: source.icon_url.trim() } : {}),
+            },
+        ];
+    });
+}
+function formatBoundApps(items) {
+    return items.length === 0 ? '--' : items.map((item) => (item.name ? `${item.appid}(${item.name})` : item.appid)).join(', ');
 }
 function printDeveloperEntities(logger, entities) {
     for (const entity of entities) {