@heybox/hb-sdk 0.8.3-alpha.3 → 0.8.3-alpha.4

package/dist/cli-chunks/{index-B_HjHK3d.cjs → index-Ol4wxcob.cjs}

@@ -235,19 +235,19 @@ function requireArgument () {
 
 var command = {};
 
-const require$5 = node_module.createRequire((typeof document === 'undefined' ? require('u' + 'rl').pathToFileURL(__filename).href : (_documentCurrentScript && _documentCurrentScript.tagName.toUpperCase() === 'SCRIPT' && _documentCurrentScript.src || new URL('cli-chunks/index-B_HjHK3d.cjs', document.baseURI).href)));
+const require$5 = node_module.createRequire((typeof document === 'undefined' ? require('u' + 'rl').pathToFileURL(__filename).href : (_documentCurrentScript && _documentCurrentScript.tagName.toUpperCase() === 'SCRIPT' && _documentCurrentScript.src || new URL('cli-chunks/index-Ol4wxcob.cjs', document.baseURI).href)));
 function __require$4() { return require$5("node:events"); }
 
-const require$4 = node_module.createRequire((typeof document === 'undefined' ? require('u' + 'rl').pathToFileURL(__filename).href : (_documentCurrentScript && _documentCurrentScript.tagName.toUpperCase() === 'SCRIPT' && _documentCurrentScript.src || new URL('cli-chunks/index-B_HjHK3d.cjs', document.baseURI).href)));
+const require$4 = node_module.createRequire((typeof document === 'undefined' ? require('u' + 'rl').pathToFileURL(__filename).href : (_documentCurrentScript && _documentCurrentScript.tagName.toUpperCase() === 'SCRIPT' && _documentCurrentScript.src || new URL('cli-chunks/index-Ol4wxcob.cjs', document.baseURI).href)));
 function __require$3() { return require$4("node:child_process"); }
 
-const require$3 = node_module.createRequire((typeof document === 'undefined' ? require('u' + 'rl').pathToFileURL(__filename).href : (_documentCurrentScript && _documentCurrentScript.tagName.toUpperCase() === 'SCRIPT' && _documentCurrentScript.src || new URL('cli-chunks/index-B_HjHK3d.cjs', document.baseURI).href)));
+const require$3 = node_module.createRequire((typeof document === 'undefined' ? require('u' + 'rl').pathToFileURL(__filename).href : (_documentCurrentScript && _documentCurrentScript.tagName.toUpperCase() === 'SCRIPT' && _documentCurrentScript.src || new URL('cli-chunks/index-Ol4wxcob.cjs', document.baseURI).href)));
 function __require$2() { return require$3("node:path"); }
 
-const require$2 = node_module.createRequire((typeof document === 'undefined' ? require('u' + 'rl').pathToFileURL(__filename).href : (_documentCurrentScript && _documentCurrentScript.tagName.toUpperCase() === 'SCRIPT' && _documentCurrentScript.src || new URL('cli-chunks/index-B_HjHK3d.cjs', document.baseURI).href)));
+const require$2 = node_module.createRequire((typeof document === 'undefined' ? require('u' + 'rl').pathToFileURL(__filename).href : (_documentCurrentScript && _documentCurrentScript.tagName.toUpperCase() === 'SCRIPT' && _documentCurrentScript.src || new URL('cli-chunks/index-Ol4wxcob.cjs', document.baseURI).href)));
 function __require$1() { return require$2("node:fs"); }
 
-const require$1 = node_module.createRequire((typeof document === 'undefined' ? require('u' + 'rl').pathToFileURL(__filename).href : (_documentCurrentScript && _documentCurrentScript.tagName.toUpperCase() === 'SCRIPT' && _documentCurrentScript.src || new URL('cli-chunks/index-B_HjHK3d.cjs', document.baseURI).href)));
+const require$1 = node_module.createRequire((typeof document === 'undefined' ? require('u' + 'rl').pathToFileURL(__filename).href : (_documentCurrentScript && _documentCurrentScript.tagName.toUpperCase() === 'SCRIPT' && _documentCurrentScript.src || new URL('cli-chunks/index-Ol4wxcob.cjs', document.baseURI).href)));
 function __require() { return require$1("node:process"); }
 
 var help = {};
@@ -13467,7 +13467,7 @@ function getPathname(pathWithQuery) {
 }
 
 const CLI_VERSION_PLACEHOLDER = ['__HB', 'SDK', 'CLI', 'VERSION__'].join('_');
-const BUILT_CLI_VERSION = '0.8.3-alpha.3';
+const BUILT_CLI_VERSION = '0.8.3-alpha.4';
 const PACKAGE_JSON_CANDIDATES = [
     path.resolve(__dirname, '..', '..', 'package.json'),
     path.resolve(__dirname, '..', 'package.json'),
@@ -13826,39 +13826,39 @@ function createCommandLoggerResolver(options) {
     };
 }
 const defaultClearLoginStatus = async (...args) => {
-    const { clearLoginStatus } = await Promise.resolve().then(function () { return require('./login-D3MBcgNb.cjs'); });
+    const { clearLoginStatus } = await Promise.resolve().then(function () { return require('./login-CA5BhdXd.cjs'); });
     return clearLoginStatus(...args);
 };
 const defaultLoginToHeybox = async (...args) => {
-    const { loginToHeybox } = await Promise.resolve().then(function () { return require('./login-D3MBcgNb.cjs'); });
+    const { loginToHeybox } = await Promise.resolve().then(function () { return require('./login-CA5BhdXd.cjs'); });
     return loginToHeybox(...args);
 };
 const defaultPrintLoginStatus = async (...args) => {
-    const { printLoginStatus } = await Promise.resolve().then(function () { return require('./login-D3MBcgNb.cjs'); });
+    const { printLoginStatus } = await Promise.resolve().then(function () { return require('./login-CA5BhdXd.cjs'); });
     return printLoginStatus(...args);
 };
 const defaultRunBuildCommand = async (...args) => {
-    const { runBuildCommand } = await Promise.resolve().then(function () { return require('./build-Dydd4Rzd.cjs'); });
+    const { runBuildCommand } = await Promise.resolve().then(function () { return require('./build-CkPA6jAR.cjs'); });
     return runBuildCommand(...args);
 };
 const defaultRunCreateCommand = async (...args) => {
-    const { runCreateCommand } = await Promise.resolve().then(function () { return require('./create-DKVTlorM.cjs'); });
+    const { runCreateCommand } = await Promise.resolve().then(function () { return require('./create-vFF2Au_f.cjs'); });
     return runCreateCommand(...args);
 };
 const defaultRunDevCommand = async (...args) => {
-    const { runDevCommand } = await Promise.resolve().then(function () { return require('./dev-DbrUeTqi.cjs'); }).then(function (n) { return n.dev; });
+    const { runDevCommand } = await Promise.resolve().then(function () { return require('./dev-5lkHU1uv.cjs'); }).then(function (n) { return n.dev; });
     return runDevCommand(...args);
 };
 const defaultRunDoctorCommand = async (...args) => {
-    const { runDoctorCommand } = await Promise.resolve().then(function () { return require('./doctor-D184dg_h.cjs'); });
+    const { runDoctorCommand } = await Promise.resolve().then(function () { return require('./doctor-DFt0LWou.cjs'); });
     return runDoctorCommand(...args);
 };
 const defaultRunSkillInstallCommand = async (...args) => {
-    const { runSkillInstallCommand } = await Promise.resolve().then(function () { return require('./skill-oLEQS_U6.cjs'); });
+    const { runSkillInstallCommand } = await Promise.resolve().then(function () { return require('./skill-D5Pf0dxT.cjs'); });
     return runSkillInstallCommand(...args);
 };
 const defaultRunRemoteCommand = async (...args) => {
-    const { runRemoteCommand } = await Promise.resolve().then(function () { return require('./remote-EBGDOJL3.cjs'); });
+    const { runRemoteCommand } = await Promise.resolve().then(function () { return require('./remote-DU0f2mlK.cjs'); });
     return runRemoteCommand(...args);
 };
 function resolveStandaloneLogger(options, verbose) {

package/dist/cli-chunks/{index.esm-42g2R7qD.cjs → index.esm-DUvvFi-Z.cjs}

@@ -11,8 +11,8 @@ var require$$0$4 = require('url');
 var require$$0 = require('zlib');
 var require$$0$1 = require('buffer');
 var require$$1 = require('util');
-var index = require('./index-B_HjHK3d.cjs');
-var dev = require('./dev-DbrUeTqi.cjs');
+var index = require('./index-Ol4wxcob.cjs');
+var dev = require('./dev-5lkHU1uv.cjs');
 require('node:module');
 require('node:fs');
 require('node:fs/promises');
@@ -23,12 +23,12 @@ require('node:crypto');
 require('readline');
 require('tty');
 require('assert');
-require('./context-DcuY0bGO.cjs');
-require('./runtime-permission-env-CVt4QPbX.cjs');
-require('./version-BNNxfn8M.cjs');
+require('./context-DoVGwJek.cjs');
+require('./runtime-permission-env-C0clU7_f.cjs');
+require('./version-CF6ilsAH.cjs');
 require('node:async_hooks');
 require('sharp');
-require('./session-CKuEz-ih.cjs');
+require('./session-2vOGqgeA.cjs');
 require('fs');
 require('constants');
 require('node:os');
@@ -42,7 +42,7 @@ require('node:buffer');
 require('node:url');
 require('node:util');
 require('node:child_process');
-require('./project-vite-CUh6Dsv5.cjs');
+require('./project-vite-P09pYZoU.cjs');
 require('node:zlib');
 
 var bufferUtil = {exports: {}};

package/dist/cli-chunks/{login-D3MBcgNb.cjs → login-CA5BhdXd.cjs}

@@ -3,9 +3,9 @@
 var promises = require('node:readline/promises');
 var node_crypto = require('node:crypto');
 var node_http = require('node:http');
-var session = require('./session-CKuEz-ih.cjs');
+var session = require('./session-2vOGqgeA.cjs');
 var browser = require('./browser-RAy8e8cV.cjs');
-var index = require('./index-B_HjHK3d.cjs');
+var index = require('./index-Ol4wxcob.cjs');
 require('node:path');
 require('fs');
 require('constants');

package/dist/cli-chunks/{project-vite-CUh6Dsv5.cjs → project-vite-P09pYZoU.cjs}

@@ -5,7 +5,7 @@ var fs$1 = require('node:fs/promises');
 var node_module = require('node:module');
 var path = require('node:path');
 var node_url = require('node:url');
-var index = require('./index-B_HjHK3d.cjs');
+var index = require('./index-Ol4wxcob.cjs');
 
 function findProjectRoot(startDir) {
     let current = path.resolve(startDir);

package/dist/cli-chunks/{remote-EBGDOJL3.cjs → remote-DU0f2mlK.cjs}

@@ -1,18 +1,18 @@
 'use strict';
 
-var runtimePermissionEnv = require('./runtime-permission-env-CVt4QPbX.cjs');
-var context = require('./context-DcuY0bGO.cjs');
+var runtimePermissionEnv = require('./runtime-permission-env-C0clU7_f.cjs');
+var context = require('./context-DoVGwJek.cjs');
 var promises = require('node:readline/promises');
-var index = require('./index-B_HjHK3d.cjs');
-var session = require('./session-CKuEz-ih.cjs');
+var index = require('./index-Ol4wxcob.cjs');
+var session = require('./session-2vOGqgeA.cjs');
 var childProcess = require('node:child_process');
 var fs = require('node:fs');
 var fs$1 = require('node:fs/promises');
 var path = require('node:path');
 var node_crypto = require('node:crypto');
 require('node:zlib');
-var runtimeGate = require('./runtime-gate-CE1ln9xc.cjs');
-require('./version-BNNxfn8M.cjs');
+var runtimeGate = require('./runtime-gate-Ay8_t7m0.cjs');
+require('./version-CF6ilsAH.cjs');
 require('node:async_hooks');
 require('sharp');
 require('node:module');
@@ -274,7 +274,7 @@ function createDefaultCosClient(uploadToken, COS) {
     };
 }
 async function loadCosConstructor() {
-    const cosModule = await Promise.resolve().then(function () { return require('./index-BG8JJ9pA.cjs'); }).then(function (n) { return n.index; });
+    const cosModule = await Promise.resolve().then(function () { return require('./index-CguXMrgP.cjs'); }).then(function (n) { return n.index; });
     return cosModule.default;
 }
 function formatSize(bytes) {
@@ -479,6 +479,24 @@ function isNodeError(error) {
     return error instanceof Error && 'code' in error;
 }
 
+/** 发布提示只比较显式声明与线上批准，不消费本地调试授权。 */
+function getUnapprovedPermissionWarning(local, approvals) {
+    if (!local.declared)
+        return undefined;
+    const { views } = runtimePermissionEnv.composeMiniappRuntimePermissions(local, approvals);
+    const missing = [];
+    for (const view of views) {
+        if (!view.declared || view.access !== 'platform-approval')
+            continue;
+        if (!view.approved)
+            missing.push(view.key);
+        if (view.key === 'network' && view.requestedConfig?.useOfficialDomain && !view.approvedConfig?.useOfficialDomain) {
+            missing.push('network.useOfficialDomain');
+        }
+    }
+    return missing.length ? `以下本地声明权限线上未批准，发布后不可用：${missing.join('、')}。本地调试可用不代表线上已批准。` : undefined;
+}
+
 const SUPPORTED_PACKAGE_MANAGERS = [
     { name: 'pnpm', lockfile: 'pnpm-lock.yaml' },
     { name: 'yarn', lockfile: 'yarn.lock' },
@@ -563,6 +581,9 @@ async function runDeployCommand(options, runtime = {}) {
                 }), { successText: '已读取远端小程序权限' });
                 const localNetworkEnabled = !localPermissions.declared || localPermissions.permissions?.network?.enabled === true;
                 skipPlatformCsp = localNetworkEnabled && context.shouldSkipMiniappPlatformCsp(detail.runtime_permissions);
+                const permissionWarning = getUnapprovedPermissionWarning(localPermissions, detail.runtime_permissions);
+                if (permissionWarning)
+                    logger.warn(permissionWarning);
             }
             catch (error) {
                 logger.warn('未读取到远端 Runtime 权限，构建将继续注入平台 CSP。');
@@ -1459,6 +1480,9 @@ async function remoteDangerousWrite(options, context, runtime) {
         operation: options.command,
         status: detail.status,
         version,
+        permissionWarning: options.command === 'release'
+            ? getUnapprovedPermissionWarning(runtimePermissionEnv.readMiniappPermissionsFromPackageJson(context.packageJson.projectRoot, runtimePermissionEnv.resolveMiniappSdkVersion()), detail.runtime_permissions)
+            : undefined,
     });
     if (options.command === 'release') {
         const result = await context.api.releaseVersion({ miniProgramId, version: version });
@@ -1786,6 +1810,8 @@ async function confirmDangerousRemoteChange(options, runtime, logger, context) {
         `当前状态：${context.status || '--'}`,
         ...(context.version ? [`目标版本：${context.version}`] : []),
     ];
+    if (context.permissionWarning)
+        logger.warn(context.permissionWarning);
     if (!options.json) {
         for (const line of lines) {
             logger.info(line);
@@ -1803,9 +1829,10 @@ async function confirmDangerousRemoteChange(options, runtime, logger, context) {
     if (!isTTY) {
         throw new Error(`非交互环境执行 hb-sdk remote ${context.operation} 必须传 --yes`);
     }
+    const confirmation = `${context.permissionWarning ? `${context.permissionWarning}\n` : ''}确认执行 ${context.operation}？`;
     const accepted = runtime.promptConfirm
-        ? await runtime.promptConfirm(`确认执行 ${context.operation}？`)
-        : await promptConfirm(`确认执行 ${context.operation}？输入 yes 继续: `, runtime);
+        ? await runtime.promptConfirm(confirmation)
+        : await promptConfirm(`${confirmation}输入 yes 继续: `, runtime);
     if (!accepted) {
         throw new Error('已取消操作');
     }

package/dist/cli-chunks/{runtime-gate-CE1ln9xc.cjs → runtime-gate-Ay8_t7m0.cjs}

@@ -1,6 +1,6 @@
 'use strict';
 
-var runtimePermissionEnv = require('./runtime-permission-env-CVt4QPbX.cjs');
+var runtimePermissionEnv = require('./runtime-permission-env-C0clU7_f.cjs');
 
 // Shorthands
 /**

package/dist/cli-chunks/{runtime-permission-env-CVt4QPbX.cjs → runtime-permission-env-C0clU7_f.cjs}

@@ -2,7 +2,7 @@
 
 var fs = require('node:fs');
 var path = require('node:path');
-var version = require('./version-BNNxfn8M.cjs');
+var version = require('./version-CF6ilsAH.cjs');
 require('node:crypto');
 var node_async_hooks = require('node:async_hooks');
 
@@ -3209,7 +3209,7 @@ function isManagedMiniProgramRuntimePermissionKey(key) {
  * @see {@link https://docs.xiaoheihe.cn/hb_sdk/guide/permissions | 权限声明}
  */
 function parseMiniProgramRuntimePermissions(snapshot) {
-    if (!isRecord$4(snapshot) || snapshot.schema_version !== 1 || !Array.isArray(snapshot.entries)) {
+    if (!isRecord$2$1(snapshot) || snapshot.schema_version !== 1 || !Array.isArray(snapshot.entries)) {
         return { valid: false, permissions: {} };
     }
     if (snapshot.revision !== undefined && (typeof snapshot.revision !== 'number' || !Number.isInteger(snapshot.revision) || snapshot.revision < 0)) {
@@ -3218,7 +3218,7 @@ function parseMiniProgramRuntimePermissions(snapshot) {
     const seenKeys = new Set();
     const permissions = {};
     for (const rawEntry of snapshot.entries) {
-        if (!isRecord$4(rawEntry) || typeof rawEntry.key !== 'string' || !rawEntry.key.trim()) {
+        if (!isRecord$2$1(rawEntry) || typeof rawEntry.key !== 'string' || !rawEntry.key.trim()) {
             return { valid: false, permissions: {} };
         }
         const inputKey = rawEntry.key.trim();
@@ -3234,7 +3234,7 @@ function parseMiniProgramRuntimePermissions(snapshot) {
         }
         if (key === 'network') {
             const config = rawEntry.config;
-            if (!isRecord$4(config) || typeof config.useOfficialDomain !== 'boolean') {
+            if (!isRecord$2$1(config) || typeof config.useOfficialDomain !== 'boolean') {
                 return { valid: false, permissions: {} };
             }
             permissions[key] = {
@@ -3244,7 +3244,7 @@ function parseMiniProgramRuntimePermissions(snapshot) {
             };
             continue;
         }
-        if (rawEntry.config !== null && rawEntry.config !== undefined && (!isRecord$4(rawEntry.config) || Object.keys(rawEntry.config).length > 0)) {
+        if (rawEntry.config !== null && rawEntry.config !== undefined && (!isRecord$2$1(rawEntry.config) || Object.keys(rawEntry.config).length > 0)) {
             return { valid: false, permissions: {} };
         }
         permissions[key] = {
@@ -3255,10 +3255,120 @@ function parseMiniProgramRuntimePermissions(snapshot) {
     }
     return { valid: true, permissions };
 }
-function isRecord$4(value) {
+function isRecord$2$1(value) {
     return typeof value === 'object' && value !== null && !Array.isArray(value);
 }
 
+/** 仅供开发工具和 Host 使用；新增权限必须单独评估，不能从平台审批目录自动推导。 */
+const LOCAL_DEV_GRANT_PERMISSION_KEYS = ['network', 'companion'];
+/**
+ * 严格解析本地 grant。任何未知字段、重复权限或非法配置都拒绝整份输入。
+ * 只校验数据合同；票据、身份、摘要、过期时间和 CLI lease 必须由 Host 另行验证。
+ */
+function parseMiniProgramLocalDevGrant(value) {
+    if (!hasExactFields(value, ['schema_version', 'revision', 'entries']) ||
+        value.schema_version !== 1 ||
+        typeof value.revision !== 'number' ||
+        !Number.isSafeInteger(value.revision) ||
+        value.revision < 0 ||
+        !Array.isArray(value.entries) ||
+        value.entries.length > LOCAL_DEV_GRANT_PERMISSION_KEYS.length)
+        return { valid: false };
+    const entries = [];
+    const seen = new Set();
+    for (const entry of value.entries) {
+        if (!hasExactFields(entry, ['key', 'status', 'config']) || entry.status !== 'enabled')
+            return { valid: false };
+        if (typeof entry.key !== 'string' || seen.has(entry.key))
+            return { valid: false };
+        seen.add(entry.key);
+        if (entry.key === 'network') {
+            if (!hasExactFields(entry.config, ['useOfficialDomain']) || entry.config.useOfficialDomain !== false)
+                return { valid: false };
+            entries.push({ key: 'network', status: 'enabled', config: { useOfficialDomain: false } });
+        }
+        else if (entry.key === 'companion') {
+            if (!hasExactFields(entry.config, []))
+                return { valid: false };
+            entries.push({ key: 'companion', status: 'enabled', config: {} });
+        }
+        else {
+            return { valid: false };
+        }
+    }
+    entries.sort((a, b) => LOCAL_DEV_GRANT_PERMISSION_KEYS.indexOf(a.key) - LOCAL_DEV_GRANT_PERMISSION_KEYS.indexOf(b.key));
+    return { valid: true, grant: { schema_version: 1, revision: value.revision, entries } };
+}
+/**
+ * 从已校验声明生成批准缺口。Companion 默认不符合资格，由 CLI 确认平台、产物与摘要后显式加入。
+ * 空 entries 可保留 revision，不能作为存在临时权限的判断依据。
+ */
+function createMiniProgramLocalDevGrant(options) {
+    if (!Number.isSafeInteger(options.revision) || options.revision < 0)
+        throw new Error('本地调试权限 revision 必须是非负安全整数');
+    const approvals = parseMiniProgramRuntimePermissions(options.runtimePermissions);
+    const eligible = new Set(options.eligiblePermissionKeys ?? ['network']);
+    const entries = [];
+    for (const key of LOCAL_DEV_GRANT_PERMISSION_KEYS) {
+        if (!eligible.has(key) || options.declaredPermissions[key]?.enabled !== true)
+            continue;
+        if (approvals.valid && approvals.permissions[key]?.status === 'enabled')
+            continue;
+        entries.push(key === 'network'
+            ? { key, status: 'enabled', config: { useOfficialDomain: false } }
+            : { key, status: 'enabled', config: {} });
+    }
+    return { schema_version: 1, revision: options.revision, entries };
+}
+/**
+ * 线上基线先与本地声明求交，再补齐临时权限，返回与输入脱离的普通 Runtime 快照。
+ * 调用方只可在当前 Dev Session 已验证且用户接受后传入 grant；本函数不证明其可信来源。
+ * 非法 grant 整体降权到基线，已批准配置不会被临时配置覆盖。
+ */
+function composeLocalDevRuntimePermissions(options) {
+    const baseline = parseMiniProgramRuntimePermissions(options.runtimePermissions);
+    const parsed = parseMiniProgramLocalDevGrant(options.localDevGrant);
+    const permissions = baseline.valid ? baseline.permissions : {};
+    for (const key of MINI_PROGRAM_PERMISSION_KEYS) {
+        if (options.declaredPermissions[key]?.enabled !== true) {
+            delete permissions[key];
+        }
+        else if (key === 'network' && permissions.network) {
+            permissions.network.config.useOfficialDomain = permissions.network.status === 'enabled'
+                && permissions.network.config.useOfficialDomain === true
+                && options.declaredPermissions.network?.useOfficialDomain === true;
+        }
+    }
+    const temporaryPermissionKeys = [];
+    if (parsed.valid) {
+        for (const entry of parsed.grant.entries) {
+            if (options.declaredPermissions[entry.key]?.enabled !== true || permissions[entry.key]?.status === 'enabled')
+                continue;
+            permissions[entry.key] = entry;
+            temporaryPermissionKeys.push(entry.key);
+        }
+    }
+    const revision = isRecord$1$1(options.runtimePermissions) && typeof options.runtimePermissions.revision === 'number'
+        && Number.isSafeInteger(options.runtimePermissions.revision) && options.runtimePermissions.revision >= 0
+        ? options.runtimePermissions.revision : undefined;
+    return {
+        runtimePermissions: {
+            schema_version: 1,
+            ...(revision === undefined ? {} : { revision }),
+            entries: MINI_PROGRAM_PERMISSION_KEYS.flatMap((key) => permissions[key] ? [permissions[key]] : []),
+        },
+        temporaryPermissionKeys,
+        grantValid: parsed.valid,
+    };
+}
+function isRecord$1$1(value) {
+    return typeof value === 'object' && value !== null && !Array.isArray(value);
+}
+function hasExactFields(value, fields) {
+    return isRecord$1$1(value) && Object.keys(value).length === fields.length
+        && fields.every((field) => Object.prototype.hasOwnProperty.call(value, field));
+}
+
 const MINIAPP_PERMISSION_KEYS = MINI_PROGRAM_PERMISSION_KEYS;
 function parseMiniappPermissions(value, options) {
     const sourceLabel = options.sourceLabel ?? 'package.json#heybox.permissions';
@@ -12768,7 +12878,9 @@ exports.USER_MINIPROGRAM_VERSION_PREVIEW_INFO_API_PATH = USER_MINIPROGRAM_VERSIO
 exports.WITHDRAW_USER_MINIPROGRAM_VERSION_API_PATH = WITHDRAW_USER_MINIPROGRAM_VERSION_API_PATH;
 exports.areMiniappPlatformsEqual = areMiniappPlatformsEqual;
 exports.areMiniappWindowsEqual = areMiniappWindowsEqual;
+exports.composeLocalDevRuntimePermissions = composeLocalDevRuntimePermissions;
 exports.composeMiniappRuntimePermissions = composeMiniappRuntimePermissions;
+exports.createMiniProgramLocalDevGrant = createMiniProgramLocalDevGrant;
 exports.createMiniappArtifactFileHeader = createMiniappArtifactFileHeader;
 exports.createMiniappArtifactSignatureHeader = createMiniappArtifactSignatureHeader;
 exports.createMiniappPlatformCspEnv = createMiniappPlatformCspEnv;
@@ -12777,6 +12889,7 @@ exports.hasMiniappDesktopPlatform = hasMiniappDesktopPlatform;
 exports.isValidMiniappManifestVersion = isValidMiniappManifestVersion;
 exports.normalizeBasicInfoName = normalizeBasicInfoName;
 exports.normalizeRelativePath = normalizeRelativePath;
+exports.parseMiniProgramLocalDevGrant = parseMiniProgramLocalDevGrant;
 exports.parseMiniProgramRuntimePermissions = parseMiniProgramRuntimePermissions;
 exports.parseMiniappBasicInfo = parseMiniappBasicInfo;
 exports.parseMiniappManifestJson = parseMiniappManifestJson;

package/dist/cli-chunks/{session-CKuEz-ih.cjs → session-2vOGqgeA.cjs}

@@ -1,6 +1,6 @@
 'use strict';
 
-var index = require('./index-B_HjHK3d.cjs');
+var index = require('./index-Ol4wxcob.cjs');
 var node_crypto = require('node:crypto');
 var path = require('node:path');
 var require$$0$2 = require('fs');

package/dist/cli-chunks/{skill-oLEQS_U6.cjs → skill-D5Pf0dxT.cjs}

@@ -1,10 +1,10 @@
 'use strict';
 
-var version = require('./version-BNNxfn8M.cjs');
+var version = require('./version-CF6ilsAH.cjs');
 var fs = require('node:fs/promises');
 var path = require('node:path');
 var childProcess = require('node:child_process');
-var index = require('./index-B_HjHK3d.cjs');
+var index = require('./index-Ol4wxcob.cjs');
 require('node:module');
 require('node:fs');
 require('path');

package/dist/cli-chunks/{version-BNNxfn8M.cjs → version-CF6ilsAH.cjs}

@@ -3,6 +3,6 @@
 /** 构建时替换为当前发布包的实际版本。 */
 const HB_SDK_VERSION = typeof undefined === 'string'
     ? undefined
-    : '0.8.3-alpha.3';
+    : '0.8.3-alpha.4';
 
 exports.HB_SDK_VERSION = HB_SDK_VERSION;

package/dist/cli.cjs

@@ -1,6 +1,6 @@
 'use strict';
 
-var index = require('./cli-chunks/index-B_HjHK3d.cjs');
+var index = require('./cli-chunks/index-Ol4wxcob.cjs');
 require('node:module');
 require('node:fs');
 require('node:fs/promises');