@heybox/hb-sdk 0.8.3-alpha.3 → 0.8.3-alpha.4

package/dist/devtools/browser-dev-host/index.html

@@ -5,9 +5,9 @@
     <meta name="viewport" content="width=device-width, initial-scale=1.0" />
     <meta name="theme-color" content="#f4f5f7" />
     <title>小程序工坊调试台</title>
-    <script type="module" crossorigin src="/assets/index-8YA6OLi7.js"></script>
-    <link rel="modulepreload" crossorigin href="/assets/desktop-app-launch-EnOYLhEx.js">
-    <link rel="stylesheet" crossorigin href="/assets/index-D-cRoNV5.css">
+    <script type="module" crossorigin src="/assets/index-CVARuXxw.js"></script>
+    <link rel="modulepreload" crossorigin href="/assets/desktop-app-launch-Cku9Fxud.js">
+    <link rel="stylesheet" crossorigin href="/assets/index-BrXEMo2-.css">
   </head>
   <body>
     <div id="app"></div>

package/dist/index.cjs.js

@@ -748,7 +748,7 @@ const COMPANION_SHOW_NOTIFICATION_METHOD = 'companion.showNotification';
  * @see [parseMiniProgramRuntimePermissions](/reference/symbols/protocol/functions/parseMiniProgramRuntimePermissions) Runtime 权限快照解析器。
  */
 function isMiniProgramBridgeMessage(value) {
-    if (!isRecord$2(value))
+    if (!isRecord$3(value))
         return false;
     if (value.namespace !== MINI_PROGRAM_MESSAGE_NAMESPACE || (value.version !== 1 && value.version !== 2) || !isNonEmptyString$1(value.nonce)) {
         return false;
@@ -898,7 +898,7 @@ function isMiniProgramRelativePath(value) {
  * @see [DirectoryHandle](/reference/symbols/root/interfaces/DirectoryHandle) 可作为 derived path root 的目录代理。
  */
 function isMiniProgramPathRootRef(value) {
-    if (!isRecord$2(value))
+    if (!isRecord$3(value))
         return false;
     if (value.kind === 'sandbox')
         return hasOnlyKeys(value, ['kind']);
@@ -964,7 +964,7 @@ function isMiniProgramPathRootRef(value) {
  * @see [FileHandle](/reference/symbols/root/interfaces/FileHandle) 使用文件引用的公开 I/O 代理。
  */
 function isMiniProgramFileRef(value) {
-    if (!isRecord$2(value) || value.kind !== 'file')
+    if (!isRecord$3(value) || value.kind !== 'file')
         return false;
     if (isNonEmptyString$1(value.handleId)) {
         return hasOnlyKeys(value, ['kind', 'handleId']);
@@ -1031,7 +1031,7 @@ function isMiniProgramFileRef(value) {
  * @see [DirectoryHandle](/reference/symbols/root/interfaces/DirectoryHandle) 使用目录引用的公开路径操作代理。
  */
 function isMiniProgramDirectoryRef(value) {
-    if (!isRecord$2(value) || value.kind !== 'directory')
+    if (!isRecord$3(value) || value.kind !== 'directory')
         return false;
     if (isNonEmptyString$1(value.handleId)) {
         return hasOnlyKeys(value, ['kind', 'handleId']);
@@ -1150,7 +1150,7 @@ function isMiniProgramByteArray(value) {
  * @see [FileHandle](/reference/symbols/root/interfaces/FileHandle) 提供 `stat()` 的当前 session 文件代理。
  */
 function isMiniProgramFileStat(value) {
-    return (isRecord$2(value) &&
+    return (isRecord$3(value) &&
         value.kind === 'file' &&
         isNonNegativeSafeInteger(value.size) &&
         (value.modifiedAt === undefined || isNonNegativeFiniteNumber(value.modifiedAt)) &&
@@ -1210,7 +1210,7 @@ function isMiniProgramFileStat(value) {
  * @see [isMiniProgramBridgeMessage](/reference/symbols/protocol/functions/isMiniProgramBridgeMessage) operation progress envelope 的最低校验。
  */
 function isMiniProgramDownloadProgressPayload(value) {
-    if (!isRecord$2(value) ||
+    if (!isRecord$3(value) ||
         !isNonNegativeSafeInteger(value.loaded) ||
         typeof value.lengthComputable !== 'boolean' ||
         !hasOnlyKeys(value, ['loaded', 'total', 'lengthComputable'])) {
@@ -1221,7 +1221,7 @@ function isMiniProgramDownloadProgressPayload(value) {
     return isNonNegativeSafeInteger(value.total) && value.loaded <= value.total;
 }
 function isMiniProgramCompanionPrepareProgress(value) {
-    if (!isRecord$2(value))
+    if (!isRecord$3(value))
         return false;
     if (value.phase === 'downloading') {
         return (isNonNegativeSafeInteger(value.loaded) &&
@@ -1239,10 +1239,10 @@ function isMiniProgramOperationProgressPayload(value) {
     return isMiniProgramDownloadProgressPayload(value) || isMiniProgramCompanionPrepareProgress(value);
 }
 function isSDKHandshakePayload(value) {
-    return isRecord$2(value) && isNonEmptyString$1(value.href) && typeof value.userAgent === 'string' && isNonEmptyString$1(value.sdkVersion);
+    return isRecord$3(value) && isNonEmptyString$1(value.href) && typeof value.userAgent === 'string' && isNonEmptyString$1(value.sdkVersion);
 }
 function isBridgeError(value) {
-    return isRecord$2(value) && isNonEmptyString$1(value.code) && typeof value.message === 'string';
+    return isRecord$3(value) && isNonEmptyString$1(value.code) && typeof value.message === 'string';
 }
 function isNonNegativeSafeInteger(value) {
     return typeof value === 'number' && Number.isSafeInteger(value) && value >= 0;
@@ -1257,15 +1257,10 @@ function hasOnlyKeys(value, allowedKeys) {
     const allowed = new Set(allowedKeys);
     return Object.keys(value).every((key) => allowed.has(key));
 }
-function isRecord$2(value) {
+function isRecord$3(value) {
     return typeof value === 'object' && value !== null && !Array.isArray(value);
 }
 
-/** 当前用户信息与登录能力支持的完整 scope 目录（canonical 顺序）。 */
-const USER_INFO_AUTHORIZATION_SCOPES = ['identity', 'profile', 'steam_account'];
-/** Companion alias 的跨构建、Runtime 与 Host 规范。 */
-const COMPANION_ALIAS_PATTERN = /^[a-z][a-z0-9-]{0,31}$/;
-
 const MINI_PROGRAM_PERMISSION_KEYS = [
     'userInfo',
     'steamLibrary',
@@ -1281,6 +1276,11 @@ new Set(MINI_PROGRAM_PERMISSION_KEYS);
 
 new Set(MINI_PROGRAM_PERMISSION_KEYS);
 
+/** 当前用户信息与登录能力支持的完整 scope 目录（canonical 顺序）。 */
+const USER_INFO_AUTHORIZATION_SCOPES = ['identity', 'profile', 'steam_account'];
+/** Companion alias 的跨构建、Runtime 与 Host 规范。 */
+const COMPANION_ALIAS_PATTERN = /^[a-z][a-z0-9-]{0,31}$/;
+
 /** 获取浏览器全局 window。 */
 function getGlobalWindow() {
     return typeof window === 'undefined' ? undefined : window;
@@ -1342,7 +1342,7 @@ function createMessageId() {
 /** 构建时替换为当前发布包的实际版本。 */
 const HB_SDK_VERSION = typeof undefined === 'string'
     ? undefined
-    : '0.8.3-alpha.3';
+    : '0.8.3-alpha.4';
 
 const RUNTIME_MODES = new Set(['production', 'preview', 'development', 'unknown']);
 const OPERATING_SYSTEM_NAMES = new Set(['android', 'ios', 'ohos', 'windows', 'macos', 'linux', 'unknown']);

package/dist/index.esm.js

@@ -744,7 +744,7 @@ const COMPANION_SHOW_NOTIFICATION_METHOD = 'companion.showNotification';
  * @see [parseMiniProgramRuntimePermissions](/reference/symbols/protocol/functions/parseMiniProgramRuntimePermissions) Runtime 权限快照解析器。
  */
 function isMiniProgramBridgeMessage(value) {
-    if (!isRecord$2(value))
+    if (!isRecord$3(value))
         return false;
     if (value.namespace !== MINI_PROGRAM_MESSAGE_NAMESPACE || (value.version !== 1 && value.version !== 2) || !isNonEmptyString$1(value.nonce)) {
         return false;
@@ -894,7 +894,7 @@ function isMiniProgramRelativePath(value) {
  * @see [DirectoryHandle](/reference/symbols/root/interfaces/DirectoryHandle) 可作为 derived path root 的目录代理。
  */
 function isMiniProgramPathRootRef(value) {
-    if (!isRecord$2(value))
+    if (!isRecord$3(value))
         return false;
     if (value.kind === 'sandbox')
         return hasOnlyKeys(value, ['kind']);
@@ -960,7 +960,7 @@ function isMiniProgramPathRootRef(value) {
  * @see [FileHandle](/reference/symbols/root/interfaces/FileHandle) 使用文件引用的公开 I/O 代理。
  */
 function isMiniProgramFileRef(value) {
-    if (!isRecord$2(value) || value.kind !== 'file')
+    if (!isRecord$3(value) || value.kind !== 'file')
         return false;
     if (isNonEmptyString$1(value.handleId)) {
         return hasOnlyKeys(value, ['kind', 'handleId']);
@@ -1027,7 +1027,7 @@ function isMiniProgramFileRef(value) {
  * @see [DirectoryHandle](/reference/symbols/root/interfaces/DirectoryHandle) 使用目录引用的公开路径操作代理。
  */
 function isMiniProgramDirectoryRef(value) {
-    if (!isRecord$2(value) || value.kind !== 'directory')
+    if (!isRecord$3(value) || value.kind !== 'directory')
         return false;
     if (isNonEmptyString$1(value.handleId)) {
         return hasOnlyKeys(value, ['kind', 'handleId']);
@@ -1146,7 +1146,7 @@ function isMiniProgramByteArray(value) {
  * @see [FileHandle](/reference/symbols/root/interfaces/FileHandle) 提供 `stat()` 的当前 session 文件代理。
  */
 function isMiniProgramFileStat(value) {
-    return (isRecord$2(value) &&
+    return (isRecord$3(value) &&
         value.kind === 'file' &&
         isNonNegativeSafeInteger(value.size) &&
         (value.modifiedAt === undefined || isNonNegativeFiniteNumber(value.modifiedAt)) &&
@@ -1206,7 +1206,7 @@ function isMiniProgramFileStat(value) {
  * @see [isMiniProgramBridgeMessage](/reference/symbols/protocol/functions/isMiniProgramBridgeMessage) operation progress envelope 的最低校验。
  */
 function isMiniProgramDownloadProgressPayload(value) {
-    if (!isRecord$2(value) ||
+    if (!isRecord$3(value) ||
         !isNonNegativeSafeInteger(value.loaded) ||
         typeof value.lengthComputable !== 'boolean' ||
         !hasOnlyKeys(value, ['loaded', 'total', 'lengthComputable'])) {
@@ -1217,7 +1217,7 @@ function isMiniProgramDownloadProgressPayload(value) {
     return isNonNegativeSafeInteger(value.total) && value.loaded <= value.total;
 }
 function isMiniProgramCompanionPrepareProgress(value) {
-    if (!isRecord$2(value))
+    if (!isRecord$3(value))
         return false;
     if (value.phase === 'downloading') {
         return (isNonNegativeSafeInteger(value.loaded) &&
@@ -1235,10 +1235,10 @@ function isMiniProgramOperationProgressPayload(value) {
     return isMiniProgramDownloadProgressPayload(value) || isMiniProgramCompanionPrepareProgress(value);
 }
 function isSDKHandshakePayload(value) {
-    return isRecord$2(value) && isNonEmptyString$1(value.href) && typeof value.userAgent === 'string' && isNonEmptyString$1(value.sdkVersion);
+    return isRecord$3(value) && isNonEmptyString$1(value.href) && typeof value.userAgent === 'string' && isNonEmptyString$1(value.sdkVersion);
 }
 function isBridgeError(value) {
-    return isRecord$2(value) && isNonEmptyString$1(value.code) && typeof value.message === 'string';
+    return isRecord$3(value) && isNonEmptyString$1(value.code) && typeof value.message === 'string';
 }
 function isNonNegativeSafeInteger(value) {
     return typeof value === 'number' && Number.isSafeInteger(value) && value >= 0;
@@ -1253,15 +1253,10 @@ function hasOnlyKeys(value, allowedKeys) {
     const allowed = new Set(allowedKeys);
     return Object.keys(value).every((key) => allowed.has(key));
 }
-function isRecord$2(value) {
+function isRecord$3(value) {
     return typeof value === 'object' && value !== null && !Array.isArray(value);
 }
 
-/** 当前用户信息与登录能力支持的完整 scope 目录（canonical 顺序）。 */
-const USER_INFO_AUTHORIZATION_SCOPES = ['identity', 'profile', 'steam_account'];
-/** Companion alias 的跨构建、Runtime 与 Host 规范。 */
-const COMPANION_ALIAS_PATTERN = /^[a-z][a-z0-9-]{0,31}$/;
-
 const MINI_PROGRAM_PERMISSION_KEYS = [
     'userInfo',
     'steamLibrary',
@@ -1277,6 +1272,11 @@ new Set(MINI_PROGRAM_PERMISSION_KEYS);
 
 new Set(MINI_PROGRAM_PERMISSION_KEYS);
 
+/** 当前用户信息与登录能力支持的完整 scope 目录（canonical 顺序）。 */
+const USER_INFO_AUTHORIZATION_SCOPES = ['identity', 'profile', 'steam_account'];
+/** Companion alias 的跨构建、Runtime 与 Host 规范。 */
+const COMPANION_ALIAS_PATTERN = /^[a-z][a-z0-9-]{0,31}$/;
+
 /** 获取浏览器全局 window。 */
 function getGlobalWindow() {
     return typeof window === 'undefined' ? undefined : window;
@@ -1338,7 +1338,7 @@ function createMessageId() {
 /** 构建时替换为当前发布包的实际版本。 */
 const HB_SDK_VERSION = typeof undefined === 'string'
     ? undefined
-    : '0.8.3-alpha.3';
+    : '0.8.3-alpha.4';
 
 const RUNTIME_MODES = new Set(['production', 'preview', 'development', 'unknown']);
 const OPERATING_SYSTEM_NAMES = new Set(['android', 'ios', 'ohos', 'windows', 'macos', 'linux', 'unknown']);

package/dist/protocol.cjs.js

@@ -444,7 +444,7 @@ const MINI_PROGRAM_PROTOCOL_CAPABILITIES = [
  * @see [parseMiniProgramRuntimePermissions](/reference/symbols/protocol/functions/parseMiniProgramRuntimePermissions) Runtime 权限快照解析器。
  */
 function isMiniProgramBridgeMessage(value) {
-    if (!isRecord$2(value))
+    if (!isRecord$3(value))
         return false;
     if (value.namespace !== MINI_PROGRAM_MESSAGE_NAMESPACE || (value.version !== 1 && value.version !== 2) || !isNonEmptyString$1(value.nonce)) {
         return false;
@@ -594,7 +594,7 @@ function isMiniProgramRelativePath(value) {
  * @see [DirectoryHandle](/reference/symbols/root/interfaces/DirectoryHandle) 可作为 derived path root 的目录代理。
  */
 function isMiniProgramPathRootRef(value) {
-    if (!isRecord$2(value))
+    if (!isRecord$3(value))
         return false;
     if (value.kind === 'sandbox')
         return hasOnlyKeys(value, ['kind']);
@@ -660,7 +660,7 @@ function isMiniProgramPathRootRef(value) {
  * @see [FileHandle](/reference/symbols/root/interfaces/FileHandle) 使用文件引用的公开 I/O 代理。
  */
 function isMiniProgramFileRef(value) {
-    if (!isRecord$2(value) || value.kind !== 'file')
+    if (!isRecord$3(value) || value.kind !== 'file')
         return false;
     if (isNonEmptyString$1(value.handleId)) {
         return hasOnlyKeys(value, ['kind', 'handleId']);
@@ -727,7 +727,7 @@ function isMiniProgramFileRef(value) {
  * @see [DirectoryHandle](/reference/symbols/root/interfaces/DirectoryHandle) 使用目录引用的公开路径操作代理。
  */
 function isMiniProgramDirectoryRef(value) {
-    if (!isRecord$2(value) || value.kind !== 'directory')
+    if (!isRecord$3(value) || value.kind !== 'directory')
         return false;
     if (isNonEmptyString$1(value.handleId)) {
         return hasOnlyKeys(value, ['kind', 'handleId']);
@@ -801,7 +801,7 @@ function isMiniProgramDirectoryRef(value) {
  * @see [SaveFileResult](/reference/symbols/protocol/types/SaveFileResult) save picker 的 direct-ref 文件结果。
  */
 function isMiniProgramFileDescriptor(value) {
-    return (isRecord$2(value) &&
+    return (isRecord$3(value) &&
         value.kind === 'file' &&
         isNonEmptyString$1(value.name) &&
         isFileMode(value.mode) &&
@@ -871,7 +871,7 @@ function isMiniProgramFileDescriptor(value) {
  * @see [PickDirectoryResult](/reference/symbols/protocol/types/PickDirectoryResult) picker 的 direct-ref 返回契约。
  */
 function isMiniProgramDirectoryDescriptor(value) {
-    return (isRecord$2(value) &&
+    return (isRecord$3(value) &&
         value.kind === 'directory' &&
         isNonEmptyString$1(value.name) &&
         isFileMode(value.mode) &&
@@ -1050,7 +1050,7 @@ function isMiniProgramByteArray(value) {
  * @see [FileHandle](/reference/symbols/root/interfaces/FileHandle) 提供 `stat()` 的当前 session 文件代理。
  */
 function isMiniProgramFileStat(value) {
-    return (isRecord$2(value) &&
+    return (isRecord$3(value) &&
         value.kind === 'file' &&
         isNonNegativeSafeInteger(value.size) &&
         (value.modifiedAt === undefined || isNonNegativeFiniteNumber(value.modifiedAt)) &&
@@ -1110,7 +1110,7 @@ function isMiniProgramFileStat(value) {
  * @see [isMiniProgramBridgeMessage](/reference/symbols/protocol/functions/isMiniProgramBridgeMessage) operation progress envelope 的最低校验。
  */
 function isMiniProgramDownloadProgressPayload(value) {
-    if (!isRecord$2(value) ||
+    if (!isRecord$3(value) ||
         !isNonNegativeSafeInteger(value.loaded) ||
         typeof value.lengthComputable !== 'boolean' ||
         !hasOnlyKeys(value, ['loaded', 'total', 'lengthComputable'])) {
@@ -1121,7 +1121,7 @@ function isMiniProgramDownloadProgressPayload(value) {
     return isNonNegativeSafeInteger(value.total) && value.loaded <= value.total;
 }
 function isMiniProgramCompanionPrepareProgress(value) {
-    if (!isRecord$2(value))
+    if (!isRecord$3(value))
         return false;
     if (value.phase === 'downloading') {
         return (isNonNegativeSafeInteger(value.loaded) &&
@@ -1139,10 +1139,10 @@ function isMiniProgramOperationProgressPayload(value) {
     return isMiniProgramDownloadProgressPayload(value) || isMiniProgramCompanionPrepareProgress(value);
 }
 function isSDKHandshakePayload(value) {
-    return isRecord$2(value) && isNonEmptyString$1(value.href) && typeof value.userAgent === 'string' && isNonEmptyString$1(value.sdkVersion);
+    return isRecord$3(value) && isNonEmptyString$1(value.href) && typeof value.userAgent === 'string' && isNonEmptyString$1(value.sdkVersion);
 }
 function isBridgeError(value) {
-    return isRecord$2(value) && isNonEmptyString$1(value.code) && typeof value.message === 'string';
+    return isRecord$3(value) && isNonEmptyString$1(value.code) && typeof value.message === 'string';
 }
 function isFileMode(value) {
     return value === 'read' || value === 'readwrite';
@@ -1160,13 +1160,10 @@ function hasOnlyKeys(value, allowedKeys) {
     const allowed = new Set(allowedKeys);
     return Object.keys(value).every((key) => allowed.has(key));
 }
-function isRecord$2(value) {
+function isRecord$3(value) {
     return typeof value === 'object' && value !== null && !Array.isArray(value);
 }
 
-/** 当前用户信息与登录能力支持的完整 scope 目录（canonical 顺序）。 */
-const USER_INFO_AUTHORIZATION_SCOPES = ['identity', 'profile', 'steam_account'];
-
 const MINI_PROGRAM_PERMISSION_KEYS = [
     'userInfo',
     'steamLibrary',
@@ -1310,7 +1307,7 @@ function isManagedMiniProgramRuntimePermissionKey(key) {
  * @see {@link https://docs.xiaoheihe.cn/hb_sdk/guide/permissions | 权限声明}
  */
 function parseMiniProgramRuntimePermissions(snapshot) {
-    if (!isRecord(snapshot) || snapshot.schema_version !== 1 || !Array.isArray(snapshot.entries)) {
+    if (!isRecord$2(snapshot) || snapshot.schema_version !== 1 || !Array.isArray(snapshot.entries)) {
         return { valid: false, permissions: {} };
     }
     if (snapshot.revision !== undefined && (typeof snapshot.revision !== 'number' || !Number.isInteger(snapshot.revision) || snapshot.revision < 0)) {
@@ -1319,7 +1316,7 @@ function parseMiniProgramRuntimePermissions(snapshot) {
     const seenKeys = new Set();
     const permissions = {};
     for (const rawEntry of snapshot.entries) {
-        if (!isRecord(rawEntry) || typeof rawEntry.key !== 'string' || !rawEntry.key.trim()) {
+        if (!isRecord$2(rawEntry) || typeof rawEntry.key !== 'string' || !rawEntry.key.trim()) {
             return { valid: false, permissions: {} };
         }
         const inputKey = rawEntry.key.trim();
@@ -1335,7 +1332,7 @@ function parseMiniProgramRuntimePermissions(snapshot) {
         }
         if (key === 'network') {
             const config = rawEntry.config;
-            if (!isRecord(config) || typeof config.useOfficialDomain !== 'boolean') {
+            if (!isRecord$2(config) || typeof config.useOfficialDomain !== 'boolean') {
                 return { valid: false, permissions: {} };
             }
             permissions[key] = {
@@ -1345,7 +1342,7 @@ function parseMiniProgramRuntimePermissions(snapshot) {
             };
             continue;
         }
-        if (rawEntry.config !== null && rawEntry.config !== undefined && (!isRecord(rawEntry.config) || Object.keys(rawEntry.config).length > 0)) {
+        if (rawEntry.config !== null && rawEntry.config !== undefined && (!isRecord$2(rawEntry.config) || Object.keys(rawEntry.config).length > 0)) {
             return { valid: false, permissions: {} };
         }
         permissions[key] = {
@@ -1356,10 +1353,13 @@ function parseMiniProgramRuntimePermissions(snapshot) {
     }
     return { valid: true, permissions };
 }
-function isRecord(value) {
+function isRecord$2(value) {
     return typeof value === 'object' && value !== null && !Array.isArray(value);
 }
 
+/** 当前用户信息与登录能力支持的完整 scope 目录（canonical 顺序）。 */
+const USER_INFO_AUTHORIZATION_SCOPES = ['identity', 'profile', 'steam_account'];
+
 exports.AUTH_LOGIN_METHOD = AUTH_LOGIN_METHOD;
 exports.CLOUD_LEADERBOARD_DELETE_CURRENT_USER_ENTRY_METHOD = CLOUD_LEADERBOARD_DELETE_CURRENT_USER_ENTRY_METHOD;
 exports.CLOUD_LEADERBOARD_GET_CURRENT_USER_ENTRY_METHOD = CLOUD_LEADERBOARD_GET_CURRENT_USER_ENTRY_METHOD;

package/dist/protocol.esm.js

@@ -442,7 +442,7 @@ const MINI_PROGRAM_PROTOCOL_CAPABILITIES = [
  * @see [parseMiniProgramRuntimePermissions](/reference/symbols/protocol/functions/parseMiniProgramRuntimePermissions) Runtime 权限快照解析器。
  */
 function isMiniProgramBridgeMessage(value) {
-    if (!isRecord$2(value))
+    if (!isRecord$3(value))
         return false;
     if (value.namespace !== MINI_PROGRAM_MESSAGE_NAMESPACE || (value.version !== 1 && value.version !== 2) || !isNonEmptyString$1(value.nonce)) {
         return false;
@@ -592,7 +592,7 @@ function isMiniProgramRelativePath(value) {
  * @see [DirectoryHandle](/reference/symbols/root/interfaces/DirectoryHandle) 可作为 derived path root 的目录代理。
  */
 function isMiniProgramPathRootRef(value) {
-    if (!isRecord$2(value))
+    if (!isRecord$3(value))
         return false;
     if (value.kind === 'sandbox')
         return hasOnlyKeys(value, ['kind']);
@@ -658,7 +658,7 @@ function isMiniProgramPathRootRef(value) {
  * @see [FileHandle](/reference/symbols/root/interfaces/FileHandle) 使用文件引用的公开 I/O 代理。
  */
 function isMiniProgramFileRef(value) {
-    if (!isRecord$2(value) || value.kind !== 'file')
+    if (!isRecord$3(value) || value.kind !== 'file')
         return false;
     if (isNonEmptyString$1(value.handleId)) {
         return hasOnlyKeys(value, ['kind', 'handleId']);
@@ -725,7 +725,7 @@ function isMiniProgramFileRef(value) {
  * @see [DirectoryHandle](/reference/symbols/root/interfaces/DirectoryHandle) 使用目录引用的公开路径操作代理。
  */
 function isMiniProgramDirectoryRef(value) {
-    if (!isRecord$2(value) || value.kind !== 'directory')
+    if (!isRecord$3(value) || value.kind !== 'directory')
         return false;
     if (isNonEmptyString$1(value.handleId)) {
         return hasOnlyKeys(value, ['kind', 'handleId']);
@@ -799,7 +799,7 @@ function isMiniProgramDirectoryRef(value) {
  * @see [SaveFileResult](/reference/symbols/protocol/types/SaveFileResult) save picker 的 direct-ref 文件结果。
  */
 function isMiniProgramFileDescriptor(value) {
-    return (isRecord$2(value) &&
+    return (isRecord$3(value) &&
         value.kind === 'file' &&
         isNonEmptyString$1(value.name) &&
         isFileMode(value.mode) &&
@@ -869,7 +869,7 @@ function isMiniProgramFileDescriptor(value) {
  * @see [PickDirectoryResult](/reference/symbols/protocol/types/PickDirectoryResult) picker 的 direct-ref 返回契约。
  */
 function isMiniProgramDirectoryDescriptor(value) {
-    return (isRecord$2(value) &&
+    return (isRecord$3(value) &&
         value.kind === 'directory' &&
         isNonEmptyString$1(value.name) &&
         isFileMode(value.mode) &&
@@ -1048,7 +1048,7 @@ function isMiniProgramByteArray(value) {
  * @see [FileHandle](/reference/symbols/root/interfaces/FileHandle) 提供 `stat()` 的当前 session 文件代理。
  */
 function isMiniProgramFileStat(value) {
-    return (isRecord$2(value) &&
+    return (isRecord$3(value) &&
         value.kind === 'file' &&
         isNonNegativeSafeInteger(value.size) &&
         (value.modifiedAt === undefined || isNonNegativeFiniteNumber(value.modifiedAt)) &&
@@ -1108,7 +1108,7 @@ function isMiniProgramFileStat(value) {
  * @see [isMiniProgramBridgeMessage](/reference/symbols/protocol/functions/isMiniProgramBridgeMessage) operation progress envelope 的最低校验。
  */
 function isMiniProgramDownloadProgressPayload(value) {
-    if (!isRecord$2(value) ||
+    if (!isRecord$3(value) ||
         !isNonNegativeSafeInteger(value.loaded) ||
         typeof value.lengthComputable !== 'boolean' ||
         !hasOnlyKeys(value, ['loaded', 'total', 'lengthComputable'])) {
@@ -1119,7 +1119,7 @@ function isMiniProgramDownloadProgressPayload(value) {
     return isNonNegativeSafeInteger(value.total) && value.loaded <= value.total;
 }
 function isMiniProgramCompanionPrepareProgress(value) {
-    if (!isRecord$2(value))
+    if (!isRecord$3(value))
         return false;
     if (value.phase === 'downloading') {
         return (isNonNegativeSafeInteger(value.loaded) &&
@@ -1137,10 +1137,10 @@ function isMiniProgramOperationProgressPayload(value) {
     return isMiniProgramDownloadProgressPayload(value) || isMiniProgramCompanionPrepareProgress(value);
 }
 function isSDKHandshakePayload(value) {
-    return isRecord$2(value) && isNonEmptyString$1(value.href) && typeof value.userAgent === 'string' && isNonEmptyString$1(value.sdkVersion);
+    return isRecord$3(value) && isNonEmptyString$1(value.href) && typeof value.userAgent === 'string' && isNonEmptyString$1(value.sdkVersion);
 }
 function isBridgeError(value) {
-    return isRecord$2(value) && isNonEmptyString$1(value.code) && typeof value.message === 'string';
+    return isRecord$3(value) && isNonEmptyString$1(value.code) && typeof value.message === 'string';
 }
 function isFileMode(value) {
     return value === 'read' || value === 'readwrite';
@@ -1158,13 +1158,10 @@ function hasOnlyKeys(value, allowedKeys) {
     const allowed = new Set(allowedKeys);
     return Object.keys(value).every((key) => allowed.has(key));
 }
-function isRecord$2(value) {
+function isRecord$3(value) {
     return typeof value === 'object' && value !== null && !Array.isArray(value);
 }
 
-/** 当前用户信息与登录能力支持的完整 scope 目录（canonical 顺序）。 */
-const USER_INFO_AUTHORIZATION_SCOPES = ['identity', 'profile', 'steam_account'];
-
 const MINI_PROGRAM_PERMISSION_KEYS = [
     'userInfo',
     'steamLibrary',
@@ -1308,7 +1305,7 @@ function isManagedMiniProgramRuntimePermissionKey(key) {
  * @see {@link https://docs.xiaoheihe.cn/hb_sdk/guide/permissions | 权限声明}
  */
 function parseMiniProgramRuntimePermissions(snapshot) {
-    if (!isRecord(snapshot) || snapshot.schema_version !== 1 || !Array.isArray(snapshot.entries)) {
+    if (!isRecord$2(snapshot) || snapshot.schema_version !== 1 || !Array.isArray(snapshot.entries)) {
         return { valid: false, permissions: {} };
     }
     if (snapshot.revision !== undefined && (typeof snapshot.revision !== 'number' || !Number.isInteger(snapshot.revision) || snapshot.revision < 0)) {
@@ -1317,7 +1314,7 @@ function parseMiniProgramRuntimePermissions(snapshot) {
     const seenKeys = new Set();
     const permissions = {};
     for (const rawEntry of snapshot.entries) {
-        if (!isRecord(rawEntry) || typeof rawEntry.key !== 'string' || !rawEntry.key.trim()) {
+        if (!isRecord$2(rawEntry) || typeof rawEntry.key !== 'string' || !rawEntry.key.trim()) {
             return { valid: false, permissions: {} };
         }
         const inputKey = rawEntry.key.trim();
@@ -1333,7 +1330,7 @@ function parseMiniProgramRuntimePermissions(snapshot) {
         }
         if (key === 'network') {
             const config = rawEntry.config;
-            if (!isRecord(config) || typeof config.useOfficialDomain !== 'boolean') {
+            if (!isRecord$2(config) || typeof config.useOfficialDomain !== 'boolean') {
                 return { valid: false, permissions: {} };
             }
             permissions[key] = {
@@ -1343,7 +1340,7 @@ function parseMiniProgramRuntimePermissions(snapshot) {
             };
             continue;
         }
-        if (rawEntry.config !== null && rawEntry.config !== undefined && (!isRecord(rawEntry.config) || Object.keys(rawEntry.config).length > 0)) {
+        if (rawEntry.config !== null && rawEntry.config !== undefined && (!isRecord$2(rawEntry.config) || Object.keys(rawEntry.config).length > 0)) {
             return { valid: false, permissions: {} };
         }
         permissions[key] = {
@@ -1354,8 +1351,11 @@ function parseMiniProgramRuntimePermissions(snapshot) {
     }
     return { valid: true, permissions };
 }
-function isRecord(value) {
+function isRecord$2(value) {
     return typeof value === 'object' && value !== null && !Array.isArray(value);
 }
 
+/** 当前用户信息与登录能力支持的完整 scope 目录（canonical 顺序）。 */
+const USER_INFO_AUTHORIZATION_SCOPES = ['identity', 'profile', 'steam_account'];
+
 export { AUTH_LOGIN_METHOD, CLOUD_LEADERBOARD_DELETE_CURRENT_USER_ENTRY_METHOD, CLOUD_LEADERBOARD_GET_CURRENT_USER_ENTRY_METHOD, CLOUD_LEADERBOARD_GET_INFO_METHOD, CLOUD_LEADERBOARD_GET_LIST_METHOD, CLOUD_LEADERBOARD_SUBMIT_METHOD, DEVICE_SET_CLIPBOARD_METHOD, DEVICE_VIBRATE_METHOD, DIRECTORY_CREATE_METHOD, DIRECTORY_EXISTS_METHOD, DIRECTORY_LIST_METHOD, DIRECTORY_REMOVE_METHOD, FILES_PICK_DIRECTORY_METHOD, FILES_PICK_FILES_METHOD, FILES_SAVE_FILE_METHOD, FILE_CREATE_METHOD, FILE_EXISTS_METHOD, FILE_READ_BYTES_METHOD, FILE_READ_TEXT_METHOD, FILE_REMOVE_METHOD, FILE_STAT_METHOD, FILE_WRITE_BYTES_METHOD, FILE_WRITE_TEXT_METHOD, MINI_PROGRAM_BRIDGE_NONCE_PARAM, MINI_PROGRAM_MESSAGE_NAMESPACE, MINI_PROGRAM_MESSAGE_VERSION, MINI_PROGRAM_OPERATION_PROGRESS_METHOD, MINI_PROGRAM_PROTOCOL_CAPABILITIES, NAVIGATION_CLOSE_METHOD, NAVIGATION_OPEN_APP_PAGE_METHOD, NAVIGATION_RELOAD_METHOD, NETWORK_DOWNLOAD_METHOD, NETWORK_REQUEST_METHOD, RUNTIME_LOCATION_PROBE_METHOD, SDK_CSP_VIOLATION_METHOD, SDK_HANDSHAKE_METHOD, SDK_LOCATION_REPORT_METHOD, SHARE_COPY_LINK_METHOD, SHARE_SCREENSHOT_METHOD, SHARE_SHOW_SHARE_MENU_METHOD, STORAGE_GET_STORAGE_METHOD, STORAGE_SET_STORAGE_METHOD, UI_HIDE_LOADING_METHOD, UI_SHOW_LOADING_METHOD, UI_SHOW_TOAST_METHOD, USER_GET_INFO_METHOD, USER_GET_STEAM_GAME_LIST_METHOD, USER_INFO_AUTHORIZATION_SCOPES, USER_REVOKE_AUTHORIZATION_METHOD, VIEWPORT_GET_WINDOW_INFO_METHOD, VIEWPORT_SET_DISPLAY_METHOD, VIEWPORT_SET_NAVIGATION_BAR_STYLE_METHOD, isManagedMiniProgramRuntimePermissionKey, isMiniProgramBridgeMessage, isMiniProgramByteArray, isMiniProgramDirectoryDescriptor, isMiniProgramDirectoryRef, isMiniProgramDownloadProgressPayload, isMiniProgramFileDescriptor, isMiniProgramFileRef, isMiniProgramFileStat, isMiniProgramFileSystemEntityDescriptor, isMiniProgramPathRootRef, isMiniProgramRelativePath, parseMiniProgramRuntimePermissions };

package/dist/vite.cjs.js

@@ -2948,7 +2948,7 @@ async function ensureBasicInfoDirectory(rootPath, relative) {
 /** 构建时替换为当前发布包的实际版本。 */
 const HB_SDK_VERSION = typeof undefined === 'string'
     ? undefined
-    : '0.8.3-alpha.3';
+    : '0.8.3-alpha.4';
 
 /**
  * iframe 与调试台页面的开发期 console 捕获转发。
@@ -3377,8 +3377,6 @@ const MINI_PROGRAM_MESSAGE_VERSION = 2;
  * 并在 origin 可以固定且协议模式要求时校验 origin。
  */
 const MINI_PROGRAM_BRIDGE_NONCE_PARAM = 'hb_mini_bridge_nonce';
-/** Companion alias 的跨构建、Runtime 与 Host 规范。 */
-const COMPANION_ALIAS_PATTERN = /^[a-z][a-z0-9-]{0,31}$/;
 
 const MINI_PROGRAM_PERMISSION_KEYS = [
     'userInfo',
@@ -3529,6 +3527,8 @@ const MINI_PROGRAM_PERMISSION_CATALOG = [
 new Set(MINI_PROGRAM_PERMISSION_KEYS);
 
 new Set(MINI_PROGRAM_PERMISSION_KEYS);
+/** Companion alias 的跨构建、Runtime 与 Host 规范。 */
+const COMPANION_ALIAS_PATTERN = /^[a-z][a-z0-9-]{0,31}$/;
 
 const MINIAPP_PERMISSION_KEYS = MINI_PROGRAM_PERMISSION_KEYS;
 function parseMiniappPermissions(value, options) {

package/dist/vite.esm.js

@@ -2945,7 +2945,7 @@ async function ensureBasicInfoDirectory(rootPath, relative) {
 /** 构建时替换为当前发布包的实际版本。 */
 const HB_SDK_VERSION = typeof undefined === 'string'
     ? undefined
-    : '0.8.3-alpha.3';
+    : '0.8.3-alpha.4';
 
 /**
  * iframe 与调试台页面的开发期 console 捕获转发。
@@ -3374,8 +3374,6 @@ const MINI_PROGRAM_MESSAGE_VERSION = 2;
  * 并在 origin 可以固定且协议模式要求时校验 origin。
  */
 const MINI_PROGRAM_BRIDGE_NONCE_PARAM = 'hb_mini_bridge_nonce';
-/** Companion alias 的跨构建、Runtime 与 Host 规范。 */
-const COMPANION_ALIAS_PATTERN = /^[a-z][a-z0-9-]{0,31}$/;
 
 const MINI_PROGRAM_PERMISSION_KEYS = [
     'userInfo',
@@ -3526,6 +3524,8 @@ const MINI_PROGRAM_PERMISSION_CATALOG = [
 new Set(MINI_PROGRAM_PERMISSION_KEYS);
 
 new Set(MINI_PROGRAM_PERMISSION_KEYS);
+/** Companion alias 的跨构建、Runtime 与 Host 规范。 */
+const COMPANION_ALIAS_PATTERN = /^[a-z][a-z0-9-]{0,31}$/;
 
 const MINIAPP_PERMISSION_KEYS = MINI_PROGRAM_PERMISSION_KEYS;
 function parseMiniappPermissions(value, options) {

package/docs/runtime-host-migration.md

@@ -49,7 +49,7 @@ Browser Dev Host 由 SDK CLI 提供 Vue 3 调试台并注入 `@heybox/hb-sdk-run
 
 调试台的 iframe 在整个会话中保持同一个 DOM 节点。iPhone 16 Pro Max（`440 x 956`）和 Pixel 9 Pro（`410 x 914`）预设只投影设备 metrics、外框、状态栏和安全区，切换时不得触发 iframe navigation 或 Runtime 重启。授权与操作弹窗、Toast、Loading 和振动反馈由 Host presentation controller 渲染在设备预览的 overlay layer 内。
 
-调试台不提供权限修改、Mac 启动、Browser/Mobile 页签或重复二维码入口。远端权限快照是 Runtime 的规范输入；唯一的 Mobile 二维码入口位于调试台右上角，并继续复用既有 LAN 网卡与 Dev Session 生命周期。
+调试台不提供权限修改、Browser/Mobile 页签或重复二维码入口。线上批准基线与 CLI 根据声明生成的本地 grant 分开传输，Browser Fake 允许白名单内临时权限并保留线上未批准提示；唯一的 Mobile 二维码入口位于调试台右上角，并复用既有 LAN 网卡与 Dev Session 生命周期。
 
 ## 新 PC 页面通道合同与窗口几何
 
@@ -89,13 +89,15 @@ Storage 面板只通过 `runtime.diagnostics.storage?.getSnapshot()` 读取 Runt
 | Mobile Release         | 当前稳定客户端继续把原生 `mini_url` launch 交给详情 H5/Native Host；二维码保持 HTTPS `open_inapp` 与 `heybox://` `openWindow`，但短链这一跳是普通 H5。跳转页打开完整 sandbox query（`mini_url`、身份、启动票和 LAN Dev Context）后延迟 `closeWindow`。真机 WebView 基址是 `http://127.0.0.1` 详情页且 HTML 来自线上缓存。 | 生成真机二维码前仍需 CLI 登录、项目绑定和有效 Dev Context；这些条件不阻断 Browser 调试台启动。     |
 | Mobile Debug/Ad-Hoc H5 | `dev_context_url` 是可选的 Dev Session 输入；Runtime 权限和本地 network proxy 仅在读取成功时采用。                                                                                                                                                                                                                        | Dev Context 缺失、过期、不可达或校验失败时记录脱敏诊断，继续使用原生 Host 的账号、网络与远端权限。 |
 
-`DevSession` 继续存在，但调试台不再创建或修改权限覆盖。Mobile Dev Session 使用远端规范权限快照，不会反向修改线上配置。Node 进程负责 CLI 的 loopback server、短跳转 registry 和 Dev Session 生命周期，但不是 Mobile Host 状态的替代 owner。
+`DevSession` 同时携带本地声明、独立的 `local_dev_grant` 与 context revision，不会反向修改线上配置。真实 H5 必须先以启动票取得 canonical identity，再将可信线上基线与声明及严格解析的 grant 合成普通 Runtime 快照；没有有效票据或非法 grant 时不临时放权。临时授权仅允许 `network` / `companion`，不包含 `useOfficialDomain`，且每次启动由用户确认。
+
+Node 负责 CLI-owned stable context endpoint、短跳转 registry 和 Launch Reference 生命周期；H5 负责持续验证 CLI lease，不能用 iframe heartbeat 代替。连续失联约 30 秒、到期、session/revision 或 Companion 摘要变化时销毁旧 Runtime；重连重新确认和创建实例。票据字符串轮换不改变授权指纹。线上权限快照在 Runtime 内不可变，临时权限来源不传给 iframe。Android、iOS 与新 PC 原生 adapter 沿用既有 operation；真实 PC Companion 还必须有私有 local-dev lease capability，缺能力继续 fail closed。
 
 多网卡环境中，CLI 从可用私有 IPv4 网卡派生候选 `mini_url`，并优先展示与 HMR 默认地址匹配的候选。用户切换网卡后，`mini_url` 和 Dev Context URL 都投影到同一选中地址。`dev_context_url` 必须嵌套在 `heybox-mini-dev://sandbox` 的 query 中，不能误放到最外层 `openWindow` payload。
 
 ## Mobile 短跳转安全边界
 
-默认 Mobile 二维码编码现有 `https://api.xiaoheihe.cn/open_inapp/#heybox://...` 启动契约，但短链这一跳是普通 H5 `openWindow`（不带 `mini_program`），`webview.url` 只放局域网短链 `http://<lan-ip>:<port>/l/<token>`。短链返回 HTML 跳转页：先 `location.href` 打开完整 `heybox-mini-dev://sandbox` 协议，约 500ms 后再发 `closeWindow` 关掉中间页。不要对自定义协议做 HTTP 302，WebView 会把它当成相对路径。真机 WebView 基址是 `http://127.0.0.1/tools/user_miniprogram/detail`，HTML 来自线上详情页缓存，因此最终协议必须带上 `mini_url`、`mini_program_id`、`local_dev_launch_token`、`sdk_version` 和 LAN `dev_context_url`；不能只编码 `mini_url` 再指望线上 Host 去拉 `launch.json`。`launch.json` 仍可作为同分支详情 Host 的补充发现。Dev Context 过期或校验失败时记录脱敏诊断，继续使用原生网络与已发现的权限。
+默认 Mobile 二维码编码现有 `https://api.xiaoheihe.cn/open_inapp/#heybox://...` 启动契约，但短链这一跳是普通 H5 `openWindow`（不带 `mini_program`），`webview.url` 只放局域网短链 `http://<lan-ip>:<port>/l/<token>`。短链返回 HTML 跳转页：先 `location.href` 打开完整 `heybox-mini-dev://sandbox` 协议，约 500ms 后再发 `closeWindow` 关掉中间页。不要对自定义协议做 HTTP 302，WebView 会把它当成相对路径。真机 WebView 基址是 `http://127.0.0.1/tools/user_miniprogram/detail`，HTML 来自线上详情页缓存，因此最终协议携带 `mini_url`、`mini_program_id`、`local_dev_launch_token`、`sdk_version` 和稳定 CLI-owned `dev_context_url`；二维码短期 token 轮换不会让已打开页面失效。`launch.json` 仍可作为同分支详情 Host 的补充发现。Dev Context 过期或校验失败时记录脱敏诊断，继续使用原生网络与已发现的权限。
 
 `launch.json` 和短链都只减少二维码编码长度，不是认证、加密、签名或 HMAC：