@heybox/hb-sdk 0.8.3-alpha.5 → 0.8.3-alpha.9

package/dist/miniapp-publish.esm.js

@@ -3140,13 +3140,27 @@ const MINIAPP_PLATFORM_VALUES = ['android', 'ios', 'ohos', 'windows', 'macos', '
 /** 平台声明硬切点：产物 hb-sdk 版本达到该值时，必须显式声明非空 `platforms`。 */
 const MINIAPP_PLATFORM_HARD_CUT_SDK_VERSION = '0.9.0';
 /**
- * 历史移动端兼容平台集合。
+ * 历史兜底平台集合。
  *
  * @remarks
  * 仅在 `sdkVersion` 缺失或 SemVer precedence 低于 `MINIAPP_PLATFORM_HARD_CUT_SDK_VERSION`，
  * 且 Manifest 完全没有 `platforms` 字段时生效，不是任何非法声明的兜底。
+ *
+ * 不含 `linux`：客户端暂无 linux 基线，后端 `x_os_type` 也不映射该平台，声明了也进不了运行门禁。
+ */
+const MINIAPP_LEGACY_DEFAULT_PLATFORM_VALUES = [
+    'android',
+    'ios',
+    'ohos',
+    'windows',
+    'macos',
+];
+/**
+ * 历史兜底平台集合的旧名称。
+ *
+ * @deprecated Since 0.8.3. 请改用 {@link MINIAPP_LEGACY_DEFAULT_PLATFORM_VALUES}，本别名取值与之一致，仅为不破坏既有 import 保留。
  */
-const MINIAPP_LEGACY_MOBILE_PLATFORM_VALUES = ['android', 'ios', 'ohos'];
+const MINIAPP_LEGACY_MOBILE_PLATFORM_VALUES = MINIAPP_LEGACY_DEFAULT_PLATFORM_VALUES;
 /** 窗口尺寸字段的脏值兜底上限；真正的上限是宿主侧显示器 workArea。 */
 const MINIAPP_WINDOW_SIZE_MAX = 16_384;
 const MINIAPP_WINDOW_NUMBER_FIELDS = ['defaultWidth', 'defaultHeight', 'minWidth', 'minHeight'];
@@ -3312,7 +3326,7 @@ const NO_MINIAPP_PLATFORMS = Object.freeze([]);
  * @param manifest - 待解析的不可信 Manifest。必须是非 `null`、非数组的对象；函数只读取其
  * 自有 `platforms` 字段，其他字段不参与平台解析。
  * @returns 冻结的 {@link MiniappPlatformResolution}。显式声明返回规范排序后的 declared /
- * effective；历史兼容返回空 declared 与 Android/iOS/OHOS effective。
+ * effective；历史兼容返回空 declared 与历史兜底平台集合 effective。
  * @throws `manifest` 不是对象时抛出；非空 sdkVersion 不完整、含 `v` 前缀或 build metadata、
  * 不是 canonical SemVer 时抛出；sdkVersion precedence 达到 `0.9.0` 但缺少 platforms 时抛出；
  * 显式 platforms 不是非空数组、包含未知/非字符串/重复平台时抛出。
@@ -3360,11 +3374,11 @@ const NO_MINIAPP_PLATFORMS = Object.freeze([]);
  * // }
  *
  * const legacy = resolveMiniappManifestPlatforms('0.9.0-alpha.1', {})
- * console.log(legacy.effective) // ['android', 'ios', 'ohos']
+ * console.log(legacy.effective) // ['android', 'ios', 'ohos', 'windows', 'macos']
  * ```
  *
  * @see {@link MINIAPP_PLATFORM_HARD_CUT_SDK_VERSION}
- * @see {@link MINIAPP_LEGACY_MOBILE_PLATFORM_VALUES}
+ * @see {@link MINIAPP_LEGACY_DEFAULT_PLATFORM_VALUES}
  * @see {@link https://docs.xiaoheihe.cn/hb_sdk/reference/symbols/miniapp-publish/functions/isValidVersion | isValidVersion}
  * @see {@link https://docs.xiaoheihe.cn/hb_sdk/reference/symbols/vite/functions/miniappManifest | miniappManifest}
  */
@@ -3387,7 +3401,7 @@ function resolveMiniappManifestPlatforms(sdkVersion, manifest) {
     if (normalizedSdkVersion === undefined || semverExports.lt(normalizedSdkVersion, MINIAPP_PLATFORM_HARD_CUT_SDK_VERSION)) {
         return Object.freeze({
             declared: NO_MINIAPP_PLATFORMS,
-            effective: MINIAPP_LEGACY_MOBILE_PLATFORM_VALUES,
+            effective: MINIAPP_LEGACY_DEFAULT_PLATFORM_VALUES,
             platformsDeclared: false,
             policy: 'legacy_mobile_default',
         });
@@ -12598,4 +12612,4 @@ function compareBytes(left, right) {
     return left.length - right.length;
 }
 
-export { ACTIVITY_UPLOAD_KEY_MAX_LENGTH, CREATE_USER_MINIPROGRAM_API_PATH, CREATE_USER_MINIPROGRAM_LEADERBOARD_API_PATH, CREATE_USER_MINIPROGRAM_LOCAL_DEV_LAUNCH_TOKEN_API_PATH, DELETE_USER_MINIPROGRAM_LEADERBOARD_API_PATH, DETAIL_USER_MINIPROGRAM_API_PATH, DETAIL_USER_MINIPROGRAM_LEADERBOARD_API_PATH, DEVELOPER_ENTITY_LIST_API_PATH, DEVELOPER_ENTITY_SWITCH_API_PATH, LIST_USER_MINIPROGRAM_API_PATH, LIST_USER_MINIPROGRAM_LEADERBOARD_API_PATH, LIST_USER_MINIPROGRAM_VERSION_API_PATH, MINIAPP_COMPANION_UPLOAD_TEMPORARY_SIZE_LIMIT_BYTES, MINIAPP_LEGACY_MOBILE_PLATFORM_VALUES, MINIAPP_PLATFORM_HARD_CUT_SDK_VERSION, MINIAPP_UPLOAD_BATCH_SIZE, MINIAPP_UPLOAD_SCOPE, MINIAPP_UPLOAD_TOTAL_SIZE_LIMIT_BYTES, PRECHECK_USER_MINIPROGRAM_VERSION_API_PATH, RELEASE_USER_MINIPROGRAM_VERSION_API_PATH, REOPEN_USER_MINIPROGRAM_API_PATH, SUBMIT_USER_MINIPROGRAM_AUDIT_API_PATH, TAKE_DOWN_USER_MINIPROGRAM_API_PATH, UPDATE_SQUARE_DISPLAY_API_PATH, UPDATE_USER_MINIPROGRAM_PREVIEW_ALLOWLIST_API_PATH, USER_MINIPROGRAM_ACCESS_STATUS_API_PATH, USER_MINIPROGRAM_PREVIEW_ALLOWLIST_API_PATH, USER_MINIPROGRAM_VERSION_PREVIEW_INFO_API_PATH, WITHDRAW_USER_MINIPROGRAM_VERSION_API_PATH, createMiniappArtifactFileHeader, createMiniappArtifactSignatureHeader, getMiniProgramUploadAlias, getMiniappUploadKey, hasMiniappRuntimeGate, isValidMiniappManifestVersion as isValidVersion, normalizeBasicInfoName, normalizeRelativePath, parseMiniappBasicInfo, parseMiniappBindAppIds, parseMiniappCategory, prepareMiniappArtifactFiles, previewMiniappBasicInfo, relativePathContainsNodeModulesSegment, resolveMiniappManifestPlatforms, resolveMiniappUploadSessionFiles, shouldUploadDistFile, validateMiniappCompanionFileReceipts, validateMiniappManifestForDeploy, validateMiniappUploadPathLengths, validateMiniappUploadSizeBudgets, validateUploadPaths, validateUploadTotalSize };
+export { ACTIVITY_UPLOAD_KEY_MAX_LENGTH, CREATE_USER_MINIPROGRAM_API_PATH, CREATE_USER_MINIPROGRAM_LEADERBOARD_API_PATH, CREATE_USER_MINIPROGRAM_LOCAL_DEV_LAUNCH_TOKEN_API_PATH, DELETE_USER_MINIPROGRAM_LEADERBOARD_API_PATH, DETAIL_USER_MINIPROGRAM_API_PATH, DETAIL_USER_MINIPROGRAM_LEADERBOARD_API_PATH, DEVELOPER_ENTITY_LIST_API_PATH, DEVELOPER_ENTITY_SWITCH_API_PATH, LIST_USER_MINIPROGRAM_API_PATH, LIST_USER_MINIPROGRAM_LEADERBOARD_API_PATH, LIST_USER_MINIPROGRAM_VERSION_API_PATH, MINIAPP_COMPANION_UPLOAD_TEMPORARY_SIZE_LIMIT_BYTES, MINIAPP_LEGACY_DEFAULT_PLATFORM_VALUES, MINIAPP_LEGACY_MOBILE_PLATFORM_VALUES, MINIAPP_PLATFORM_HARD_CUT_SDK_VERSION, MINIAPP_UPLOAD_BATCH_SIZE, MINIAPP_UPLOAD_SCOPE, MINIAPP_UPLOAD_TOTAL_SIZE_LIMIT_BYTES, PRECHECK_USER_MINIPROGRAM_VERSION_API_PATH, RELEASE_USER_MINIPROGRAM_VERSION_API_PATH, REOPEN_USER_MINIPROGRAM_API_PATH, SUBMIT_USER_MINIPROGRAM_AUDIT_API_PATH, TAKE_DOWN_USER_MINIPROGRAM_API_PATH, UPDATE_SQUARE_DISPLAY_API_PATH, UPDATE_USER_MINIPROGRAM_PREVIEW_ALLOWLIST_API_PATH, USER_MINIPROGRAM_ACCESS_STATUS_API_PATH, USER_MINIPROGRAM_PREVIEW_ALLOWLIST_API_PATH, USER_MINIPROGRAM_VERSION_PREVIEW_INFO_API_PATH, WITHDRAW_USER_MINIPROGRAM_VERSION_API_PATH, createMiniappArtifactFileHeader, createMiniappArtifactSignatureHeader, getMiniProgramUploadAlias, getMiniappUploadKey, hasMiniappRuntimeGate, isValidMiniappManifestVersion as isValidVersion, normalizeBasicInfoName, normalizeRelativePath, parseMiniappBasicInfo, parseMiniappBindAppIds, parseMiniappCategory, prepareMiniappArtifactFiles, previewMiniappBasicInfo, relativePathContainsNodeModulesSegment, resolveMiniappManifestPlatforms, resolveMiniappUploadSessionFiles, shouldUploadDistFile, validateMiniappCompanionFileReceipts, validateMiniappManifestForDeploy, validateMiniappUploadPathLengths, validateMiniappUploadSizeBudgets, validateUploadPaths, validateUploadTotalSize };

package/dist/templates/vanilla-vite-js/README.md.ejs

@@ -14,6 +14,6 @@ npm run deploy -- --release-note "更新说明"
 
 `package.json#heybox.category` 初始声明为 `other`（其他）。发布前请按实际用途选择 `tool`（工具）、`game`（游戏）或 `other`（其他）；该字段为必填，修改后需重新构建。
 
-`package.json#heybox.platforms` 默认声明 `android`、`ios`、`ohos`。发布前请在每个声明的平台完成真机验收；需要支持桌面平台时，由项目自行加入并验收。
+`package.json#heybox.platforms` 默认声明全平台 `android`、`ios`、`ohos`、`windows`、`macos`，请按项目实际完成适配并验收的平台保留，未适配的平台务必删除。`linux` 目前没有客户端基线与 API 兼容声明，暂不建议声明。
 
 更多内容见 [CLI 指南](https://docs.xiaoheihe.cn/hb_sdk/guide/cli) 和 [SDK 文档](https://docs.xiaoheihe.cn/hb_sdk/)。

package/dist/templates/vanilla-vite-js/package.json.ejs

@@ -9,7 +9,7 @@
     "category": "other",
     "icon": "assets/heybox-placeholder.png",
     "coverImages": ["assets/heybox-placeholder.png"],
-    "platforms": ["android", "ios", "ohos"],
+    "platforms": ["android", "ios", "ohos", "windows", "macos"],
     "permissions": {}
   },
   "scripts": {

package/dist/vite.cjs.js

@@ -2948,7 +2948,7 @@ async function ensureBasicInfoDirectory(rootPath, relative) {
 /** 构建时替换为当前发布包的实际版本。 */
 const HB_SDK_VERSION = typeof undefined === 'string'
     ? undefined
-    : '0.8.3-alpha.5';
+    : '0.8.3-alpha.9';
 
 /**
  * iframe 与调试台页面的开发期 console 捕获转发。
@@ -3229,7 +3229,7 @@ function deviceLogBootstrap(token) {
     return `<script>(function(){if(window.__hb_sdk_device_logs_installed__)return;
 window.__hb_sdk_device_logs_installed__=true;
 window.__hb_sdk_mini_dev_console_installed__=true;
-var endpoint='${DEVICE_LOG_PATH}',credential='${token}',id='',queue=[],seq=0,busy=false,dropped=0;
+var endpoint='${DEVICE_LOG_PATH}',credential='${token}',id='',queue=[],seq=0,busy=false,dropped=0,retryDelay=1000;
 var registrationId=Array.from(crypto.getRandomValues(new Uint8Array(16)),function(n){return n.toString(16).padStart(2,'0')}).join('');
 var send=window.fetch.bind(window);
 var sandboxResult;
@@ -3251,19 +3251,21 @@ window.addEventListener('error',function(e){add('error',[e.message])});
 window.addEventListener('unhandledrejection',function(e){add('error',[e.reason])});
 async function flush(){if(busy)return;
 busy=true;
+var success=false;
 try{if(!id){var ua=navigator.userAgent;
 var platform=window.name==='__hb_sdk_mini_dev__'?'Browser':/Android/i.test(ua)?'Android':/iPhone|iPad/i.test(ua)?'iOS':/Windows/i.test(ua)?'Windows':/Mac/i.test(ua)?'macOS':'Browser';
 var r=await send(endpoint,{method:'POST',headers:{'content-type':'application/json','x-hb-log-token':credential},body:JSON.stringify({register:true,platform:platform,registrationId:registrationId}),signal:AbortSignal.timeout(5000)});
-if(!r.ok)return;
+if(!r.ok)throw 0;
 var d=await r.json();
 id=d.id;
 credential=d.token}if(dropped){add('warn',['日志缓冲已丢弃 '+dropped+' 条']);
 dropped=0}var batch=queue.slice(0,50);
 while(batch.length>1&&new TextEncoder().encode(JSON.stringify(batch)).length>48000)batch.pop();
 var result=await send(endpoint,{method:'POST',headers:{'content-type':'application/json','x-hb-log-token':credential},body:JSON.stringify({id:id,logs:batch,sandboxResult:sandboxResult}),signal:AbortSignal.timeout(5000)});
-if(result.ok){var ack=await result.json();sandboxResult=undefined;
+if(!result.ok)throw 0;
+var ack=await result.json();sandboxResult=undefined;
 if(ack.sandboxRequest){try{var entries=await window.__hbSdkSandboxList(ack.sandboxRequest.path);sandboxResult={requestId:ack.sandboxRequest.requestId,entries:entries.slice(0,200),truncated:entries.length>200}}catch(e){sandboxResult={requestId:ack.sandboxRequest.requestId,error:true}}}
-queue=queue.filter(function(l){return l.sequence>ack.sequence})}}catch(e){}finally{busy=false}}setInterval(flush,1000);
+queue=queue.filter(function(l){return l.sequence>ack.sequence});success=true}catch(e){}finally{retryDelay=success?1000:Math.min(retryDelay*2,30000);busy=false;setTimeout(flush,retryDelay)}}
 flush()})();
 </script>`;
 }
@@ -3601,6 +3603,34 @@ const MINIAPP_PLATFORM_VALUES = ['android', 'ios', 'ohos', 'windows', 'macos', '
 const MINIAPP_WINDOW_SIZE_MAX = 16_384;
 const MINIAPP_WINDOW_NUMBER_FIELDS = ['defaultWidth', 'defaultHeight', 'minWidth', 'minHeight'];
 const MINIAPP_WINDOW_ALLOWED_FIELDS = [...MINIAPP_WINDOW_NUMBER_FIELDS, 'resizable'];
+/**
+ * 旧版模板的移动端默认声明。
+ *
+ * @remarks
+ * 这不是平台词表的子集定义，也不参与平台解析；它只用于识别「从旧模板创建后从未调整过
+ * `platforms`」的项目，以便在其构建/调试时给出非阻断提醒。刻意只做移动端的项目只要不恰好
+ * 等于这组声明就不会被提醒。
+ */
+const MINIAPP_LEGACY_MOBILE_TEMPLATE_PLATFORM_VALUES = ['android', 'ios', 'ohos'];
+/**
+ * 判断平台声明是否仍是旧版模板的移动端默认值。
+ *
+ * @param platforms - 待判断的平台数组；不要求预先规范化顺序，重复项会被长度校验挡下。
+ * @returns 恰好包含 `android`、`ios`、`ohos` 三个平台时返回 `true`，其余组合返回 `false`。
+ */
+function isLegacyMobileTemplatePlatforms(platforms) {
+    return (platforms.length === MINIAPP_LEGACY_MOBILE_TEMPLATE_PLATFORM_VALUES.length &&
+        MINIAPP_LEGACY_MOBILE_TEMPLATE_PLATFORM_VALUES.every((platform) => platforms.includes(platform)));
+}
+/**
+ * 生成「平台声明仍是旧模板移动端默认」的非阻断提示。
+ *
+ * @param sourceLabel - 提示前缀，默认指向开发者声明路径。
+ * @returns 面向开发者的单行提示；调用方负责经 Vite 插件 `warn` 或等价日志通道输出，不得据此阻断构建。
+ */
+function getLegacyMobileTemplatePlatformsNotice(sourceLabel = 'package.json#heybox.platforms') {
+    return `${sourceLabel} 仍是旧模板的移动端默认声明（android / ios / ohos）。hb-sdk 现已支持桌面端 windows / macos，如项目已完成适配请补充声明；只做移动端可忽略本提示。`;
+}
 function validateMiniappPackageVersionForBuild(version) {
     return validateMiniappManifestVersion(version, 'package.json.version');
 }
@@ -13073,7 +13103,13 @@ function enforceMiniappHtmlPolicy(html, options = {}) {
     if (options.skipPlatformCsp) {
         return serialize(document);
     }
-    const content = options.hmrWebSocketUrl ? PRODUCTION_CSP.replace("connect-src 'none'", `connect-src ${options.hmrWebSocketUrl}`) : PRODUCTION_CSP;
+    const connectSources = Array.from(new Set([
+        options.hmrWebSocketUrl,
+        ...(options.deviceLogUploadUrls ?? []),
+    ].filter((source) => Boolean(source))));
+    const content = connectSources.length > 0
+        ? PRODUCTION_CSP.replace("connect-src 'none'", `connect-src ${connectSources.join(' ')}`)
+        : PRODUCTION_CSP;
     head.childNodes.unshift({
         nodeName: 'meta',
         tagName: 'meta',
@@ -13313,7 +13349,9 @@ const devSnapshotStores = devSnapshotRegistry[devSnapshotStoreKey];
  *
  * - `version`：发布版本；trim 后必须是完整 SemVer，可含 prerelease，不允许 build metadata 或模板值
  *   `0.0.0`；
- * - `heybox.platforms`：项目实际承诺适配的非空、无重复平台 allowlist；输出按平台词表规范排序；
+ * - `heybox.platforms`：项目实际承诺适配的非空、无重复平台 allowlist；输出按平台词表规范排序。
+ *   声明仍停留在旧模板移动端默认（`android`、`ios`、`ohos`）时，`serve` 与 `build` 都只输出
+ *   一条非阻断提示，不影响构建结果；
  * - `heybox.permissions`：严格权限对象；未知权限/字段或错误类型会失败，`enabled: false` 项不写入
  *   Manifest。旧版本缺失声明时可能警告，新硬切版本会失败；
  * - `heybox.window`：可选的新 PC 开窗初值、最小尺寸和 `resizable` 声明；省略时不写该字段；
@@ -13398,6 +13436,8 @@ function miniappManifest() {
     let outDir = 'dist';
     let command = 'build';
     let hmrWebSocketUrl;
+    let configuredDeviceLogUploadUrls = [];
+    let devServer;
     /** 构建链路中更早的失败原因；closeBundle 不得再用产物校验覆盖它。 */
     let priorBuildError;
     return {
@@ -13427,8 +13467,22 @@ function miniappManifest() {
             outDir = resolved.build.outDir;
             command = resolved.command;
             hmrWebSocketUrl = resolveHmrWebSocketUrl(resolved);
+            configuredDeviceLogUploadUrls = resolveConfiguredDeviceLogUploadUrls(resolved);
         },
         configureServer(server) {
+            devServer = server;
+            // 开发期只对「仍是旧模板移动端默认」的声明做非阻断提示。声明缺失或非法一律交由
+            // build / remote deploy 链路拒绝，因此这里只容忍读取阶段的异常，保持 hb-sdk dev
+            // 既有的启动语义；warn 调用留在 try 之外，避免把插件上下文错误一起吞掉。
+            let legacyMobileTemplate = false;
+            try {
+                legacyMobileTemplate = isLegacyMobileTemplatePlatforms(readMiniappPlatformsFromPackageJson(root));
+            }
+            catch {
+                /* package.json#heybox.platforms 缺失或非法时不提示。 */
+            }
+            if (legacyMobileTemplate)
+                this.warn(getLegacyMobileTemplatePlatformsNotice());
             let unregisterLogs;
             const registerLogs = () => {
                 const address = server.httpServer?.address();
@@ -13664,7 +13718,15 @@ function miniappManifest() {
         },
         transformIndexHtml(html) {
             const enforced = enforceMiniappHtmlPolicy(html, {
-                ...(command === 'serve' ? { hmrWebSocketUrl } : {}),
+                ...(command === 'serve'
+                    ? {
+                        deviceLogUploadUrls: Array.from(new Set([
+                            ...configuredDeviceLogUploadUrls,
+                            ...resolveViteDeviceLogUploadUrls(devServer?.resolvedUrls),
+                        ])),
+                        hmrWebSocketUrl,
+                    }
+                    : {}),
                 skipPlatformCsp,
             });
             return command === 'serve'
@@ -13683,6 +13745,8 @@ function miniappManifest() {
             const version = validateMiniappPackageVersionForBuild(readMiniappVersionFromPackageJson(root));
             const sdkVersion = resolveSdkVersion();
             const platforms = readMiniappPlatformsFromPackageJson(root);
+            if (isLegacyMobileTemplatePlatforms(platforms))
+                this.warn(getLegacyMobileTemplatePlatformsNotice());
             const parsedPermissions = readMiniappPermissionsFromPackageJson(root, sdkVersion);
             const windowDeclaration = readMiniappWindowFromPackageJson(root);
             const companionConfig = readMiniappCompanionsFromPackageJson(root);
@@ -13857,6 +13921,48 @@ function resolveHmrWebSocketUrl(resolved) {
     const port = options.clientPort ?? options.port ?? resolved.server.port;
     return `${protocol}://${host}${port ? `:${port}` : ''}`;
 }
+function resolveConfiguredDeviceLogUploadUrls(resolved) {
+    if (resolved.command !== 'serve')
+        return [];
+    const protocol = resolved.server.https ? 'https' : 'http';
+    const configuredHost = resolved.server.host;
+    const hosts = new Set();
+    if (typeof configuredHost === 'string' && configuredHost !== '0.0.0.0' && configuredHost !== '::') {
+        hosts.add(configuredHost);
+    }
+    else {
+        hosts.add('127.0.0.1');
+    }
+    return Array.from(hosts, host => createDeviceLogUploadUrl(protocol, host, resolved.server.port)).filter((url) => Boolean(url));
+}
+function resolveViteDeviceLogUploadUrls(resolvedUrls) {
+    if (!resolvedUrls)
+        return [];
+    return Array.from(new Set([...resolvedUrls.local, ...resolvedUrls.network].map(url => {
+        try {
+            const endpoint = new URL(DEVICE_LOG_PATH, url);
+            if (endpoint.protocol !== 'http:' && endpoint.protocol !== 'https:')
+                return undefined;
+            endpoint.username = '';
+            endpoint.password = '';
+            endpoint.search = '';
+            endpoint.hash = '';
+            return endpoint.toString();
+        }
+        catch {
+            return undefined;
+        }
+    }).filter((url) => Boolean(url))));
+}
+function createDeviceLogUploadUrl(protocol, host, port) {
+    try {
+        const normalizedHost = host.startsWith('[') || !host.includes(':') ? host : `[${host}]`;
+        return new URL(DEVICE_LOG_PATH, `${protocol}://${normalizedHost}${port === undefined ? '' : `:${port}`}`).toString();
+    }
+    catch {
+        return undefined;
+    }
+}
 
 exports.HB_SDK_COMPANION_ARTIFACT_ACCESS_TOKEN_ENV = HB_SDK_COMPANION_ARTIFACT_ACCESS_TOKEN_ENV;
 exports.HB_SDK_MINI_PROGRAM_MANIFEST_ACCESS_TOKEN_ENV = HB_SDK_MINI_PROGRAM_MANIFEST_ACCESS_TOKEN_ENV;

package/dist/vite.esm.js

@@ -2945,7 +2945,7 @@ async function ensureBasicInfoDirectory(rootPath, relative) {
 /** 构建时替换为当前发布包的实际版本。 */
 const HB_SDK_VERSION = typeof undefined === 'string'
     ? undefined
-    : '0.8.3-alpha.5';
+    : '0.8.3-alpha.9';
 
 /**
  * iframe 与调试台页面的开发期 console 捕获转发。
@@ -3226,7 +3226,7 @@ function deviceLogBootstrap(token) {
     return `<script>(function(){if(window.__hb_sdk_device_logs_installed__)return;
 window.__hb_sdk_device_logs_installed__=true;
 window.__hb_sdk_mini_dev_console_installed__=true;
-var endpoint='${DEVICE_LOG_PATH}',credential='${token}',id='',queue=[],seq=0,busy=false,dropped=0;
+var endpoint='${DEVICE_LOG_PATH}',credential='${token}',id='',queue=[],seq=0,busy=false,dropped=0,retryDelay=1000;
 var registrationId=Array.from(crypto.getRandomValues(new Uint8Array(16)),function(n){return n.toString(16).padStart(2,'0')}).join('');
 var send=window.fetch.bind(window);
 var sandboxResult;
@@ -3248,19 +3248,21 @@ window.addEventListener('error',function(e){add('error',[e.message])});
 window.addEventListener('unhandledrejection',function(e){add('error',[e.reason])});
 async function flush(){if(busy)return;
 busy=true;
+var success=false;
 try{if(!id){var ua=navigator.userAgent;
 var platform=window.name==='__hb_sdk_mini_dev__'?'Browser':/Android/i.test(ua)?'Android':/iPhone|iPad/i.test(ua)?'iOS':/Windows/i.test(ua)?'Windows':/Mac/i.test(ua)?'macOS':'Browser';
 var r=await send(endpoint,{method:'POST',headers:{'content-type':'application/json','x-hb-log-token':credential},body:JSON.stringify({register:true,platform:platform,registrationId:registrationId}),signal:AbortSignal.timeout(5000)});
-if(!r.ok)return;
+if(!r.ok)throw 0;
 var d=await r.json();
 id=d.id;
 credential=d.token}if(dropped){add('warn',['日志缓冲已丢弃 '+dropped+' 条']);
 dropped=0}var batch=queue.slice(0,50);
 while(batch.length>1&&new TextEncoder().encode(JSON.stringify(batch)).length>48000)batch.pop();
 var result=await send(endpoint,{method:'POST',headers:{'content-type':'application/json','x-hb-log-token':credential},body:JSON.stringify({id:id,logs:batch,sandboxResult:sandboxResult}),signal:AbortSignal.timeout(5000)});
-if(result.ok){var ack=await result.json();sandboxResult=undefined;
+if(!result.ok)throw 0;
+var ack=await result.json();sandboxResult=undefined;
 if(ack.sandboxRequest){try{var entries=await window.__hbSdkSandboxList(ack.sandboxRequest.path);sandboxResult={requestId:ack.sandboxRequest.requestId,entries:entries.slice(0,200),truncated:entries.length>200}}catch(e){sandboxResult={requestId:ack.sandboxRequest.requestId,error:true}}}
-queue=queue.filter(function(l){return l.sequence>ack.sequence})}}catch(e){}finally{busy=false}}setInterval(flush,1000);
+queue=queue.filter(function(l){return l.sequence>ack.sequence});success=true}catch(e){}finally{retryDelay=success?1000:Math.min(retryDelay*2,30000);busy=false;setTimeout(flush,retryDelay)}}
 flush()})();
 </script>`;
 }
@@ -3598,6 +3600,34 @@ const MINIAPP_PLATFORM_VALUES = ['android', 'ios', 'ohos', 'windows', 'macos', '
 const MINIAPP_WINDOW_SIZE_MAX = 16_384;
 const MINIAPP_WINDOW_NUMBER_FIELDS = ['defaultWidth', 'defaultHeight', 'minWidth', 'minHeight'];
 const MINIAPP_WINDOW_ALLOWED_FIELDS = [...MINIAPP_WINDOW_NUMBER_FIELDS, 'resizable'];
+/**
+ * 旧版模板的移动端默认声明。
+ *
+ * @remarks
+ * 这不是平台词表的子集定义，也不参与平台解析；它只用于识别「从旧模板创建后从未调整过
+ * `platforms`」的项目，以便在其构建/调试时给出非阻断提醒。刻意只做移动端的项目只要不恰好
+ * 等于这组声明就不会被提醒。
+ */
+const MINIAPP_LEGACY_MOBILE_TEMPLATE_PLATFORM_VALUES = ['android', 'ios', 'ohos'];
+/**
+ * 判断平台声明是否仍是旧版模板的移动端默认值。
+ *
+ * @param platforms - 待判断的平台数组；不要求预先规范化顺序，重复项会被长度校验挡下。
+ * @returns 恰好包含 `android`、`ios`、`ohos` 三个平台时返回 `true`，其余组合返回 `false`。
+ */
+function isLegacyMobileTemplatePlatforms(platforms) {
+    return (platforms.length === MINIAPP_LEGACY_MOBILE_TEMPLATE_PLATFORM_VALUES.length &&
+        MINIAPP_LEGACY_MOBILE_TEMPLATE_PLATFORM_VALUES.every((platform) => platforms.includes(platform)));
+}
+/**
+ * 生成「平台声明仍是旧模板移动端默认」的非阻断提示。
+ *
+ * @param sourceLabel - 提示前缀，默认指向开发者声明路径。
+ * @returns 面向开发者的单行提示；调用方负责经 Vite 插件 `warn` 或等价日志通道输出，不得据此阻断构建。
+ */
+function getLegacyMobileTemplatePlatformsNotice(sourceLabel = 'package.json#heybox.platforms') {
+    return `${sourceLabel} 仍是旧模板的移动端默认声明（android / ios / ohos）。hb-sdk 现已支持桌面端 windows / macos，如项目已完成适配请补充声明；只做移动端可忽略本提示。`;
+}
 function validateMiniappPackageVersionForBuild(version) {
     return validateMiniappManifestVersion(version, 'package.json.version');
 }
@@ -13070,7 +13100,13 @@ function enforceMiniappHtmlPolicy(html, options = {}) {
     if (options.skipPlatformCsp) {
         return serialize(document);
     }
-    const content = options.hmrWebSocketUrl ? PRODUCTION_CSP.replace("connect-src 'none'", `connect-src ${options.hmrWebSocketUrl}`) : PRODUCTION_CSP;
+    const connectSources = Array.from(new Set([
+        options.hmrWebSocketUrl,
+        ...(options.deviceLogUploadUrls ?? []),
+    ].filter((source) => Boolean(source))));
+    const content = connectSources.length > 0
+        ? PRODUCTION_CSP.replace("connect-src 'none'", `connect-src ${connectSources.join(' ')}`)
+        : PRODUCTION_CSP;
     head.childNodes.unshift({
         nodeName: 'meta',
         tagName: 'meta',
@@ -13310,7 +13346,9 @@ const devSnapshotStores = devSnapshotRegistry[devSnapshotStoreKey];
  *
  * - `version`：发布版本；trim 后必须是完整 SemVer，可含 prerelease，不允许 build metadata 或模板值
  *   `0.0.0`；
- * - `heybox.platforms`：项目实际承诺适配的非空、无重复平台 allowlist；输出按平台词表规范排序；
+ * - `heybox.platforms`：项目实际承诺适配的非空、无重复平台 allowlist；输出按平台词表规范排序。
+ *   声明仍停留在旧模板移动端默认（`android`、`ios`、`ohos`）时，`serve` 与 `build` 都只输出
+ *   一条非阻断提示，不影响构建结果；
  * - `heybox.permissions`：严格权限对象；未知权限/字段或错误类型会失败，`enabled: false` 项不写入
  *   Manifest。旧版本缺失声明时可能警告，新硬切版本会失败；
  * - `heybox.window`：可选的新 PC 开窗初值、最小尺寸和 `resizable` 声明；省略时不写该字段；
@@ -13395,6 +13433,8 @@ function miniappManifest() {
     let outDir = 'dist';
     let command = 'build';
     let hmrWebSocketUrl;
+    let configuredDeviceLogUploadUrls = [];
+    let devServer;
     /** 构建链路中更早的失败原因；closeBundle 不得再用产物校验覆盖它。 */
     let priorBuildError;
     return {
@@ -13424,8 +13464,22 @@ function miniappManifest() {
             outDir = resolved.build.outDir;
             command = resolved.command;
             hmrWebSocketUrl = resolveHmrWebSocketUrl(resolved);
+            configuredDeviceLogUploadUrls = resolveConfiguredDeviceLogUploadUrls(resolved);
         },
         configureServer(server) {
+            devServer = server;
+            // 开发期只对「仍是旧模板移动端默认」的声明做非阻断提示。声明缺失或非法一律交由
+            // build / remote deploy 链路拒绝，因此这里只容忍读取阶段的异常，保持 hb-sdk dev
+            // 既有的启动语义；warn 调用留在 try 之外，避免把插件上下文错误一起吞掉。
+            let legacyMobileTemplate = false;
+            try {
+                legacyMobileTemplate = isLegacyMobileTemplatePlatforms(readMiniappPlatformsFromPackageJson(root));
+            }
+            catch {
+                /* package.json#heybox.platforms 缺失或非法时不提示。 */
+            }
+            if (legacyMobileTemplate)
+                this.warn(getLegacyMobileTemplatePlatformsNotice());
             let unregisterLogs;
             const registerLogs = () => {
                 const address = server.httpServer?.address();
@@ -13661,7 +13715,15 @@ function miniappManifest() {
         },
         transformIndexHtml(html) {
             const enforced = enforceMiniappHtmlPolicy(html, {
-                ...(command === 'serve' ? { hmrWebSocketUrl } : {}),
+                ...(command === 'serve'
+                    ? {
+                        deviceLogUploadUrls: Array.from(new Set([
+                            ...configuredDeviceLogUploadUrls,
+                            ...resolveViteDeviceLogUploadUrls(devServer?.resolvedUrls),
+                        ])),
+                        hmrWebSocketUrl,
+                    }
+                    : {}),
                 skipPlatformCsp,
             });
             return command === 'serve'
@@ -13680,6 +13742,8 @@ function miniappManifest() {
             const version = validateMiniappPackageVersionForBuild(readMiniappVersionFromPackageJson(root));
             const sdkVersion = resolveSdkVersion();
             const platforms = readMiniappPlatformsFromPackageJson(root);
+            if (isLegacyMobileTemplatePlatforms(platforms))
+                this.warn(getLegacyMobileTemplatePlatformsNotice());
             const parsedPermissions = readMiniappPermissionsFromPackageJson(root, sdkVersion);
             const windowDeclaration = readMiniappWindowFromPackageJson(root);
             const companionConfig = readMiniappCompanionsFromPackageJson(root);
@@ -13854,5 +13918,47 @@ function resolveHmrWebSocketUrl(resolved) {
     const port = options.clientPort ?? options.port ?? resolved.server.port;
     return `${protocol}://${host}${port ? `:${port}` : ''}`;
 }
+function resolveConfiguredDeviceLogUploadUrls(resolved) {
+    if (resolved.command !== 'serve')
+        return [];
+    const protocol = resolved.server.https ? 'https' : 'http';
+    const configuredHost = resolved.server.host;
+    const hosts = new Set();
+    if (typeof configuredHost === 'string' && configuredHost !== '0.0.0.0' && configuredHost !== '::') {
+        hosts.add(configuredHost);
+    }
+    else {
+        hosts.add('127.0.0.1');
+    }
+    return Array.from(hosts, host => createDeviceLogUploadUrl(protocol, host, resolved.server.port)).filter((url) => Boolean(url));
+}
+function resolveViteDeviceLogUploadUrls(resolvedUrls) {
+    if (!resolvedUrls)
+        return [];
+    return Array.from(new Set([...resolvedUrls.local, ...resolvedUrls.network].map(url => {
+        try {
+            const endpoint = new URL(DEVICE_LOG_PATH, url);
+            if (endpoint.protocol !== 'http:' && endpoint.protocol !== 'https:')
+                return undefined;
+            endpoint.username = '';
+            endpoint.password = '';
+            endpoint.search = '';
+            endpoint.hash = '';
+            return endpoint.toString();
+        }
+        catch {
+            return undefined;
+        }
+    }).filter((url) => Boolean(url))));
+}
+function createDeviceLogUploadUrl(protocol, host, port) {
+    try {
+        const normalizedHost = host.startsWith('[') || !host.includes(':') ? host : `[${host}]`;
+        return new URL(DEVICE_LOG_PATH, `${protocol}://${normalizedHost}${port === undefined ? '' : `:${port}`}`).toString();
+    }
+    catch {
+        return undefined;
+    }
+}
 
 export { HB_SDK_COMPANION_ARTIFACT_ACCESS_TOKEN_ENV, HB_SDK_MINI_PROGRAM_MANIFEST_ACCESS_TOKEN_ENV, MINIAPP_PLATFORM_VALUES, miniappManifest };

package/docs/device-logs.md

@@ -29,8 +29,8 @@ Agent 应保存 `epoch` 和 `nextCursor`，`hasMore` 为 true 时继续翻页。
 
 ## 有界行为与权限
 
-每个页面最多缓冲 500 条，每批最多 50 条并限制编码后的请求体；失败后按原序号重试。服务器最多保存 5000 条、64 个设备会话，每设备每秒最多接收 200 条。设备 15 秒未心跳标记离线，旧日志保留直到被环形缓冲淘汰。超过页面缓冲时补充丢弃数量提示。开发服务凭证最长有效 12 小时，到期需重启开发服务并重新打开页面。
+每个页面最多缓冲 500 条，每批最多 50 条并限制编码后的请求体；失败后按原序号指数退避重试，最长等待 30 秒。服务器最多保存 5000 条、64 个设备会话，每设备每秒最多接收 200 条。设备 15 秒未心跳标记离线，旧日志保留直到被环形缓冲淘汰。超过页面缓冲时补充丢弃数量提示。开发服务凭证最长有效 12 小时，到期需重启开发服务并重新打开页面。
 
-设备上传凭证不能读取日志或上传其他会话的记录。读取接口只开放给本机数字 loopback Host，拒绝外站 Origin；授权边界是当前机器的本地开发者进程。页面上传只使用同源路径，不依赖 HTTPS 宿主页面连接跨源明文 WebSocket。上传前移除 URL query、fragment、userinfo 和常见凭据字段，服务端再次脱敏。此功能不能代替开发者对业务日志中的个人信息做最小化处理。
+设备上传凭证不能读取日志或上传其他会话的记录。读取接口只开放给本机数字 loopback Host，拒绝外站 Origin；授权边界是当前机器的本地开发者进程。页面上传只使用同源路径，`hb-sdk dev` 的平台 CSP 仅精确放行各实际开发服务地址下的日志端点，不开放其它浏览器网络出口，也不依赖 HTTPS 宿主页面连接跨源明文 WebSocket。上传前移除 URL query、fragment、userinfo 和常见凭据字段，服务端再次脱敏。此功能不能代替开发者对业务日志中的个人信息做最小化处理。
 
 当前聚合的是小程序页面和 SDK 的日志，不包含手机原生进程、PC 原生进程或 Companion stdout/stderr。调试台自身的 Runtime/Host 本地日志仍只在该页面显示。真机本地网络权限、宿主 CSP 及系统策略可能阻止连接，需要使用实际手机和 PC Extension 验证。

package/docs/runtime-host-migration.md

@@ -51,10 +51,11 @@ Browser Dev Host 由 SDK CLI 提供 Vue 3 调试台并注入 `@heybox/hb-sdk-run
 
 调试台不提供权限修改、Browser/Mobile 页签或重复二维码入口。线上批准基线与 CLI 根据声明生成的本地 grant 分开传输，Browser Fake 允许白名单内临时权限并保留线上未批准提示；唯一的 Mobile 二维码入口位于调试台右上角，并复用既有 LAN 网卡与 Dev Session 生命周期。
 
-## 新 PC 页面通道合同与窗口几何
+## 新 PC 页面通道合同与窗口导航
 
 小程序 Host 的页面通道以 `namespace` + `protocolVersion` + `contractRevision` 协商。当前详情页的
-`NEW_PC_HOST_CONTRACT_REVISION` 是 `1.7.0`，同时把 `1.1.0` / `1.4.0` / `1.5.0` / `1.6.0` 保留为 legacy revision。
+`NEW_PC_HOST_CONTRACT_REVISION` 是 `1.8.0`，同时把 `1.1.0` / `1.4.0` / `1.5.0` / `1.6.0` / `1.7.0` 保留为 legacy revision。
+`1.8.0` 新增私有 `navigation.openWindow` capability，用于把 Runtime 已收窄的 `miniProgramId` 与可选编码后 `extra` 交给桌面插件开窗；旧 revision 不得宣告该能力。
 双方必须在握手时选出**共同支持的最高 revision**，不能只读 `marker.contractRevision`：旧插件会把 marker 固定为
 其 legacy revision 供已部署页面兼容读取，真正的版本集合在 `supportedContractRevisions` 中；只回退 marker
 会把“支持到 1.5.0”的插件错误降级到 `1.1.0`。任一侧都不支持的组合必须在握手阶段明确失败，不做静默降级。
@@ -69,9 +70,10 @@ Browser Dev Host 由 SDK CLI 提供 Vue 3 调试台并注入 `@heybox/hb-sdk-run
 `source === 'program'` 的程序化变更（例如宿主恢复上次尺寸、响应系统缩放）只更新当前运行时几何，不得覆盖
 用户记忆。位置（`x` / `y`）始终不对开发者开放，页面不得声明或设置。
 
-detail 页面与工坊插件（Desktop Extension）共享同一通道合同，必须**成对发布和成对回滚**：只升级一侧会出现
-`HOST_VERSION_UNSUPPORTED` 或几何语义不一致。0.8.1 的正式发布说明需把 `0.8.1-alpha.14` 中的“合同升级到
-`1.6.0`”更正为 `1.7.0`，或明确写成 `1.6.0 → 1.7.0` 增量。
+detail 页面与工坊插件（Desktop Extension）通过最高公共 revision 支持独立发布和回滚。单侧升级时双方继续
+协商到旧 revision；例如只有一侧支持 `1.8.0` 时仍使用 `1.7.0`，现有能力保持可用，仅新的
+`mini_program` 目标返回 `REQUEST_UNSUPPORTED`。只有双方没有公共 revision 时才返回
+`HOST_VERSION_UNSUPPORTED`，不得静默切换到 Mobile、Web 或旧 PC Host。
 
 ## Host diagnostics
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@heybox/hb-sdk",
-  "version": "0.8.3-alpha.5",
+  "version": "0.8.3-alpha.9",
   "sideEffects": [
     "./src/index.ts",
     "./src/core/singleton.ts",
@@ -65,7 +65,7 @@
     "undici": "^7.28.0",
     "ws": "^8.18.0",
     "sharp": "^0.34.5",
-    "@heybox/hb-sdk-protocol": "0.8.3-alpha.5"
+    "@heybox/hb-sdk-protocol": "0.8.3-alpha.9"
   },
   "peerDependencies": {
     "vite": ">=5"
@@ -116,13 +116,13 @@
     "vue-tsc": "^3.3.7",
     "vite": "^8.0.12",
     "vitest": "^3.2.4",
-    "@heybox-domain/heybox-theme": "~0.1.0",
     "@heybox-domain/heybox-vue3-ui": "~0.1.0",
-    "@heybox/hb-api": "~1.28.9",
-    "@heybox/runtime": "~0.2.0",
-    "@heybox/runtime-transport-fetch": "~0.2.0",
+    "@heybox-domain/heybox-theme": "~0.1.0",
+    "@heybox/hb-sdk-runtime": "~0.8.3-alpha.9",
     "@heybox/runtime-policy": "~0.2.0",
-    "@heybox/hb-sdk-runtime": "~0.8.3-alpha.5"
+    "@heybox/runtime-transport-fetch": "~0.2.0",
+    "@heybox/hb-api": "~1.28.9",
+    "@heybox/runtime": "~0.2.0"
   },
   "publishConfig": {
     "registry": "https://registry.npmjs.org/",

package/skill/skill.json

@@ -1,15 +1,15 @@
 {
   "name": "hb-sdk",
-  "skillVersion": "0.8.3-alpha.5+skill.aa24d6656331",
+  "skillVersion": "0.8.3-alpha.9+skill.aa24d6656331",
   "sdk": {
     "package": "@heybox/hb-sdk",
-    "version": "0.8.3-alpha.5",
-    "compatibility": "0.8.3-alpha.5"
+    "version": "0.8.3-alpha.9",
+    "compatibility": "0.8.3-alpha.9"
   },
   "distribution": {
     "type": "npm",
     "package": "@heybox/hb-sdk",
-    "version": "0.8.3-alpha.5",
+    "version": "0.8.3-alpha.9",
     "path": "skill"
   },
   "integrity": "sha256-aa24d6656331cbad8f6aae7735258a49d7f1a82f6e900415de53a1b93a30ddb8"

package/types/index.d.ts

@@ -16,7 +16,7 @@ export type { CreateOptions, DirectoryHandle, FileHandle, FileMode, FileStat, Fi
 export type { HideLoadingPayload, HideLoadingResult, MiniProgramToastStatus, MiniProgramUiModule, ShowLoadingPayload, ShowLoadingResult, ShowToastPayload, ShowToastResult, } from './modules/ui';
 export type { MiniProgramDeviceModule, MiniProgramVibrateIntensity, SetClipboardPayload, SetClipboardResult, VibratePayload, VibrateResult, } from './modules/device';
 export type { MiniProgramEnvironmentInfo, MiniProgramEnvironmentModule, MiniProgramOperatingSystemName, MiniProgramRuntimeMode, } from './modules/environment';
-export type { ClosePayload, CloseResult, MiniProgramAppPageTarget, MiniProgramGameDetailGameType, MiniProgramGameDetailPage, MiniProgramNavigationModule, OpenAppPageOptions, OpenAppPagePayload, OpenAppPageResult, OpenGameDetailAppPagePayload, OpenGameDetailAppPageOptions, OpenPostDetailAppPagePayload, OpenPostDetailAppPageOptions, OpenUserDetailAppPagePayload, OpenUserDetailAppPageOptions, ReloadPayload, ReloadResult, } from './modules/navigation';
+export type { ClosePayload, CloseResult, MiniProgramAppPageTarget, MiniProgramGameDetailGameType, MiniProgramGameDetailPage, MiniProgramNavigationModule, OpenAppPageOptions, OpenAppPagePayload, OpenAppPageResult, OpenGameDetailAppPagePayload, OpenGameDetailAppPageOptions, OpenMiniProgramAppPagePayload, OpenMiniProgramAppPageOptions, OpenPostDetailAppPagePayload, OpenPostDetailAppPageOptions, OpenUserDetailAppPagePayload, OpenUserDetailAppPageOptions, ReloadPayload, ReloadResult, } from './modules/navigation';
 import { getHandshakeState, off, on, onHandshakeStateChange } from './core/singleton';
 declare const hbSDK: {
     getHandshakeState: typeof getHandshakeState;