@heybox/hb-sdk 0.9.0-alpha.0 → 0.9.0-alpha.2

package/CHANGELOG.md

@@ -2,6 +2,23 @@
 
 本文件随 `@heybox/hb-sdk` npm 包公开分发，只记录外部小程序开发者可观察到的变化。
 
+## 0.9.0-alpha.2 - 2026-10-07
+
+### 问题修复
+
+- 恢复手机真机调试时由开发机转发 `network.request()`，请求中的 `localhost` 指向开发机。
+- 本地代理保留调用方提供的应用层请求头和上游响应头，不自动携带黑盒登录态。
+
+## 0.9.0-alpha.1 - 2026-10-07
+
+> 影响级别：常规
+> 开发者动作：Android 扫码调试用户升级至 `0.9.0-alpha.1` 后重新运行 `hb-sdk dev`。
+> 兼容范围：公开 SDK API 不变；补齐真实客户端扫码调试启动协议中的小程序身份字段，保留原有兼容字段。
+
+### 问题修复
+
+- 修复 CLI 扫码启动协议缺少 `user_miniprogram_id`，导致 Android 1.3.396 调试容器可能无法使用原生桥接能力的问题。
+
 ## 0.9.0-alpha.0 - 2026-10-06
 
 > 影响级别：常规

package/README.md

@@ -26,6 +26,8 @@ npm run dev
 
 脚手架已包含 SDK、Vite 配置和常用开发命令。浏览器调试通过后，再从调试台的二维码入口使用手机小黑盒 APP 验收。
 
+手机二维码的短链先打开普通中间页，再进入专用 dev-shell。最终 `openWindow` 协议会把 CLI 校验后的用户小程序字符串 ID（UUID）写入根字段 `user_miniprogram_id`；原生不会从 URL 查询参数补读，也不能用传统小程序数字 ID 代替。匿名调试不生成小程序 ID，原生未开放的横屏能力仍返回 `supported: false`。入口排查与验证记录见 [Android 396 入口审计](./docs/android-396-launch-identity.md)。
+
 当前 `0.8` 已发布为稳定版本，创建命令使用 `@latest`。
 
 ### 接入已有项目
@@ -462,7 +464,7 @@ hb-sdk remote deploy --release-note "本次更新说明"
 
 右上角的桌面图标与二维码按钮使用相同样式。桌面图标只在该项目于 `package.json#heybox.platforms` 声明了桌面平台（`windows`、`macos` 或 `linux`）时展示，未声明桌面平台的项目不显示该入口。点击桌面图标后选择小黑盒正式版或 Debug 版，选择会立即请求客户端打开当前本地页面并在本地记忆，不需要二次确认。桌面端只接受无凭据的 `http://127.0.0.1:<port>`，拒绝 `localhost`、IPv6 和 LAN 地址，不提供地址选择或手工 URL；手机二维码继续独立选择局域网地址。入口在项目已绑定且本地调试启动票有效时可用，统一 URI 只携带 `mini_program_id` 和 `mini_url`，启动票继续由 detail 从同源 `launch.json` 发现并交给后端验证。浏览器无法确认客户端是否真正打开，因此调试台只记录“已请求打开”，不会自动切换正式版或 Debug 版。
 
-`hb-sdk dev` 在未登录、未绑定或远端不可用时仍启动 Browser Mock；真实手机/PC 入口须有有效启动票。CLI 自动从本地声明生成普通 `network` / `companion` 的临时批准缺口，不提供第二套权限开关或申请按钮。真实 Host 每次打开会话确认临时权限，拒绝后仍可按线上批准基线打开；官方域名始终只认声明与线上批准的交集。CLI 连续失联约 30 秒、期限或快照变化会销毁旧 Runtime，并清理临时 Companion 进程树；恢复后重新确认。手机验收统一从右上角二维码进入并选择可达的局域网网卡。完整操作见 [CLI 指南](https://docs.xiaoheihe.cn/hb_sdk/guide/cli)，实现与安全边界由 [Runtime Host 迁移](./docs/runtime-host-migration.md) 维护。
+`hb-sdk dev` 在未登录、未绑定或远端不可用时仍启动 Browser Mock；真实手机/PC 入口须有有效启动票。CLI 自动从本地声明生成普通 `network` / `companion` 的临时批准缺口，不提供第二套权限开关或申请按钮。真实 Host 每次打开会话确认临时权限，拒绝后仍可按线上批准基线打开；官方域名始终只认声明与线上批准的交集。真机 Dev Session 的公开 `network.request()` 通过开发机的 HTTP 代理转发，因此 HTTPS `localhost` 指向开发机；代理不管理独立租约，不判断黑盒域名或改写应用层凭据。正式版本和 Runtime 私有请求仍走 Host 网络。CLI 连续失联约 30 秒、期限或快照变化会销毁旧 Runtime，并清理临时 Companion 进程树；恢复后重新确认。手机验收统一从右上角二维码进入并选择可达的局域网网卡。完整操作见 [CLI 指南](https://docs.xiaoheihe.cn/hb_sdk/guide/cli)，实现与安全边界由 [Runtime Host 迁移](./docs/runtime-host-migration.md) 维护。
 
 远端提交前需要完成 CLI 登录和小程序绑定。完整的登录、绑定、预览、版本与发布流程见 [CLI 指南](https://docs.xiaoheihe.cn/hb_sdk/guide/cli)。
 

package/dist/cli-chunks/{build-Dv5vWsBh.cjs → build-CvxoPTJb.cjs}

@@ -3,13 +3,13 @@
 var fs$1 = require('node:fs');
 var fs = require('node:fs/promises');
 var path = require('node:path');
-var runtimePermissionEnv = require('./runtime-permission-env-DR89buKQ.cjs');
+var runtimePermissionEnv = require('./runtime-permission-env-w3sXIJU4.cjs');
 require('node:crypto');
 require('node:zlib');
-var runtimeGate = require('./runtime-gate-DkTbgx4d.cjs');
-var index = require('./index-Dd_eGaDz.cjs');
-var projectVite = require('./project-vite-ckDtbYtt.cjs');
-require('./version-CJ7rfbl-.cjs');
+var runtimeGate = require('./runtime-gate-C1gdlVUB.cjs');
+var index = require('./index-QY5q1rWs.cjs');
+var projectVite = require('./project-vite-BA81QqiJ.cjs');
+require('./version-NZ-E_XUT.cjs');
 require('node:async_hooks');
 require('node:module');
 require('path');

package/dist/cli-chunks/{context-B15FzPf9.cjs → context-ChyajSZV.cjs}

@@ -3,10 +3,10 @@
 var node_crypto = require('node:crypto');
 var fs = require('node:fs/promises');
 var path = require('node:path');
-var runtimePermissionEnv = require('./runtime-permission-env-DR89buKQ.cjs');
+var runtimePermissionEnv = require('./runtime-permission-env-w3sXIJU4.cjs');
 var fs$1 = require('node:fs');
 var sharp = require('sharp');
-var session = require('./session-BiT-5VHK.cjs');
+var session = require('./session-Dtkbu4vT.cjs');
 
 async function inspectBasicInfoImage(bytes, sourcePath, kind) {
     const inspected = await inspectDecodedBasicInfoImage(bytes, kind);

package/dist/cli-chunks/{create-BtZUsxJd.cjs → create-vXFVQGD7.cjs}

@@ -5,7 +5,7 @@ var fs = require('node:fs/promises');
 var path = require('node:path');
 var require$$0 = require('fs');
 var require$$1 = require('path');
-var index = require('./index-Dd_eGaDz.cjs');
+var index = require('./index-QY5q1rWs.cjs');
 require('node:module');
 require('os');
 require('node:crypto');

package/dist/cli-chunks/{dev-tAThflC6.cjs → dev-QH1jaFr1.cjs}

@@ -1,9 +1,9 @@
 'use strict';
 
-var context = require('./context-B15FzPf9.cjs');
+var context = require('./context-ChyajSZV.cjs');
 var node_crypto = require('node:crypto');
 var fs = require('node:fs');
-var runtimePermissionEnv = require('./runtime-permission-env-DR89buKQ.cjs');
+var runtimePermissionEnv = require('./runtime-permission-env-w3sXIJU4.cjs');
 var os = require('node:os');
 var path = require('node:path');
 var net = require('node:net');
@@ -12,13 +12,13 @@ var node_http = require('node:http');
 var node_module = require('node:module');
 var undici = require('undici');
 var fs$1 = require('node:fs/promises');
-var index = require('./index-Dd_eGaDz.cjs');
+var index = require('./index-QY5q1rWs.cjs');
 var require$$0$1 = require('crypto');
 var require$$0 = require('buffer');
-var session = require('./session-BiT-5VHK.cjs');
+var session = require('./session-Dtkbu4vT.cjs');
 var browser = require('./browser-RAy8e8cV.cjs');
-var projectVite = require('./project-vite-ckDtbYtt.cjs');
-var version = require('./version-CJ7rfbl-.cjs');
+var projectVite = require('./project-vite-BA81QqiJ.cjs');
+var version = require('./version-NZ-E_XUT.cjs');
 require('node:zlib');
 
 var _documentCurrentScript = typeof document !== 'undefined' ? document.currentScript : null;
@@ -1871,7 +1871,8 @@ function createMiniProgramDevShellOpenWindowPayload(appUrl, options) {
         protocol_type: 'openWindow',
         full_screen: true,
         mini_program: '1',
-        ...(miniProgramId ? { mini_program_id: miniProgramId } : {}),
+        // 保留既有调试入口字段，同时通过 user_miniprogram_id 传递用户小程序字符串 ID（UUID）；原生不会从 URL 补读。
+        ...(miniProgramId ? { mini_program_id: miniProgramId, user_miniprogram_id: miniProgramId } : {}),
         navigation_bar: { title: '' },
         webview: { url: devShellUrl, pull: false, refresh: false },
     };
@@ -1992,8 +1993,8 @@ const DEFAULT_CHANNEL_TRANSPORT = {
 };
 const IPV4_LOOPBACK_ADDRESSES = new net.BlockList();
 IPV4_LOOPBACK_ADDRESSES.addSubnet('127.0.0.0', 8, 'ipv4');
-const { WebSocket, WebSocketServer } = node_module.createRequire((typeof document === 'undefined' ? require('u' + 'rl').pathToFileURL(__filename).href : (_documentCurrentScript && _documentCurrentScript.tagName.toUpperCase() === 'SCRIPT' && _documentCurrentScript.src || new URL('cli-chunks/dev-tAThflC6.cjs', document.baseURI).href)))('ws');
-const { parse: parseHtml } = node_module.createRequire((typeof document === 'undefined' ? require('u' + 'rl').pathToFileURL(__filename).href : (_documentCurrentScript && _documentCurrentScript.tagName.toUpperCase() === 'SCRIPT' && _documentCurrentScript.src || new URL('cli-chunks/dev-tAThflC6.cjs', document.baseURI).href)))('parse5');
+const { WebSocket, WebSocketServer } = node_module.createRequire((typeof document === 'undefined' ? require('u' + 'rl').pathToFileURL(__filename).href : (_documentCurrentScript && _documentCurrentScript.tagName.toUpperCase() === 'SCRIPT' && _documentCurrentScript.src || new URL('cli-chunks/dev-QH1jaFr1.cjs', document.baseURI).href)))('ws');
+const { parse: parseHtml } = node_module.createRequire((typeof document === 'undefined' ? require('u' + 'rl').pathToFileURL(__filename).href : (_documentCurrentScript && _documentCurrentScript.tagName.toUpperCase() === 'SCRIPT' && _documentCurrentScript.src || new URL('cli-chunks/dev-QH1jaFr1.cjs', document.baseURI).href)))('parse5');
 const BROWSER_DEV_HOST_ROOT_CANDIDATES = [
     path.resolve(__dirname, 'devtools/browser-dev-host'),
     path.resolve(__dirname, '../devtools/browser-dev-host'),
@@ -5065,9 +5066,9 @@ const DEFAULT_RUNTIME_SANITIZE_MAX_DEPTH = 6;
  */
 const DEFAULT_RUNTIME_SANITIZE_MAX_ARRAY_LENGTH = 50;
 /**
- * 默认最大字符串长度。
+ * 默认不限制字符串长度，避免截断诊断 JSON 或错误现场。
  */
-const DEFAULT_RUNTIME_SANITIZE_MAX_STRING_LENGTH = 2000;
+const DEFAULT_RUNTIME_SANITIZE_MAX_STRING_LENGTH = Number.POSITIVE_INFINITY;
 /**
  * 判断未知值是否为普通对象。
  *
@@ -9448,10 +9449,6 @@ const MAX_DEPTH = 6;
  * 最大数组长度。
  */
 const MAX_ARRAY_LENGTH = 50;
-/**
- * 最大字符串长度。
- */
-const MAX_STRING_LENGTH = 2000;
 /**
  * 安全序列化错误对象。
  *
@@ -9493,7 +9490,7 @@ function sanitizeTelemetryValue(value, key = '', depth = 0, seen = new WeakSet()
         return value;
     }
     if (typeof value === 'string') {
-        return value.length > MAX_STRING_LENGTH ? `${value.slice(0, MAX_STRING_LENGTH)}...` : value;
+        return value;
     }
     if (typeof value === 'bigint') {
         return value.toString();
@@ -11092,7 +11089,7 @@ function assertNodeRuntimeCapabilities(ctx, settings) {
 function createNodeRealtimeDriverRegistry() {
     const registry = createRuntimeRealtimeDriverRegistry();
     registry.registerLazy('node-websocket', async () => {
-        const mod = await Promise.resolve().then(function () { return require('./index.esm-Bw3R5BAL.cjs'); });
+        const mod = await Promise.resolve().then(function () { return require('./index.esm-81ZfQF1o.cjs'); });
         return mod.createNodeWebSocketRuntimeDriver();
     });
     return registry;
@@ -15201,6 +15198,196 @@ function writeLaunchResponse(response, status, origin, body) {
     response.end(body ?? '');
 }
 
+// SDK/Runtime 限制 2 MiB 请求正文；JSON 转义最多放大 6 倍，另留 1 MiB 元数据预算。
+const MAX_REQUEST_ENVELOPE_BYTES = 2 * 1024 * 1024 * 6 + 1024 * 1024;
+const MAX_RESPONSE_BYTES = 32 * 1024 * 1024;
+const HOP_BY_HOP_HEADERS = new Set([
+    'connection',
+    'keep-alive',
+    'proxy-authenticate',
+    'proxy-authorization',
+    'te',
+    'trailer',
+    'transfer-encoding',
+    'upgrade',
+]);
+/** dev server 的 HTTP 转发入口，不读取小程序权限或管理代理租约。 */
+function createMiniProgramDevNetworkProxy(options) {
+    const controllers = new Set();
+    return {
+        async handle(request, response) {
+            const contextPath = options.readContextPath();
+            if (!contextPath || request.url !== `${contextPath}/network`)
+                return false;
+            if (request.method === 'OPTIONS') {
+                writeResponse(response, 204);
+                return true;
+            }
+            if (request.method !== 'POST') {
+                writeResponse(response, 405, { code: 'METHOD_NOT_ALLOWED' });
+                return true;
+            }
+            const scope = createBrowserDevHostRequestAbortScope(request, response);
+            const controller = new AbortController();
+            const abort = () => controller.abort();
+            scope.signal.addEventListener('abort', abort, { once: true });
+            if (scope.signal.aborted)
+                abort();
+            controllers.add(controller);
+            let timer;
+            try {
+                const payload = await readJsonRequestBody(request, {
+                    maxBytes: MAX_REQUEST_ENVELOPE_BYTES,
+                    destroyOnLimit: false,
+                });
+                if (!isRecord$2(payload) || typeof payload.url !== 'string') {
+                    throw createBrowserDevHostError(400, 'INVALID_REQUEST', '代理请求需要 URL');
+                }
+                let url;
+                try {
+                    url = new URL(payload.url);
+                }
+                catch {
+                    throw createBrowserDevHostError(400, 'INVALID_REQUEST', '代理请求 URL 无效');
+                }
+                if (url.protocol !== 'http:' && url.protocol !== 'https:') {
+                    throw createBrowserDevHostError(400, 'INVALID_REQUEST', '代理只支持 HTTP(S)');
+                }
+                if (isRecord$2(payload.params)) {
+                    for (const [key, value] of Object.entries(payload.params)) {
+                        if (value !== null && value !== undefined)
+                            url.searchParams.set(key, String(value));
+                    }
+                }
+                const headers = stripHopByHopHeaders(new Headers(payload.headers));
+                // Node 根据实际目标与编码后的 body 生成传输头。
+                headers.delete('host');
+                headers.delete('content-length');
+                const method = typeof payload.method === 'string' ? payload.method.toUpperCase() : 'GET';
+                const body = encodeBody(method, payload.data, payload.bodyEncoding, headers);
+                const timeout = typeof payload.timeout === 'number' && Number.isFinite(payload.timeout) && payload.timeout > 0 ? payload.timeout : 10_000;
+                timer = setTimeout(abort, timeout);
+                const upstream = await options.fetchImpl(url.href, {
+                    body,
+                    headers,
+                    method,
+                    redirect: 'manual',
+                    signal: controller.signal,
+                });
+                const text = await readResponseText(upstream);
+                let data = text;
+                try {
+                    data = JSON.parse(text);
+                }
+                catch {
+                    /* 与真机 Native transport 一致，非 JSON 响应保留原文。 */
+                }
+                const responseHeaders = stripHopByHopHeaders(upstream.headers);
+                // fetch 已解压响应，原编码与长度不再描述返回的数据。
+                responseHeaders.delete('content-encoding');
+                responseHeaders.delete('content-length');
+                writeResponse(response, 200, {
+                    data,
+                    headers: Object.fromEntries(responseHeaders),
+                    status: upstream.status,
+                    statusText: upstream.statusText,
+                });
+            }
+            catch (error) {
+                if (!response.destroyed) {
+                    writeResponse(response, readBrowserDevHostErrorStatus(error), toBrowserDevHostErrorPayload(error));
+                }
+            }
+            finally {
+                clearTimeout(timer);
+                controllers.delete(controller);
+                scope.signal.removeEventListener('abort', abort);
+                scope.dispose();
+            }
+            return true;
+        },
+        close() {
+            for (const controller of controllers)
+                controller.abort();
+        },
+    };
+}
+function stripHopByHopHeaders(input) {
+    const headers = new Headers(input);
+    const connectionHeaders = headers
+        .get('connection')
+        ?.split(',')
+        .map((name) => name.trim()) ?? [];
+    for (const name of [...HOP_BY_HOP_HEADERS, ...connectionHeaders]) {
+        if (name)
+            headers.delete(name);
+    }
+    return headers;
+}
+function encodeBody(method, data, encoding, headers) {
+    if (data === undefined || method === 'GET' || method === 'HEAD')
+        return undefined;
+    if (typeof data === 'string')
+        return data;
+    if (encoding === 'form') {
+        const pairs = [];
+        const append = (key, value) => {
+            if (value === undefined)
+                return;
+            if (Array.isArray(value))
+                value.forEach((item) => append(key, item));
+            else if (isRecord$2(value))
+                Object.entries(value).forEach(([child, item]) => append(`${key}[${child}]`, item));
+            else
+                pairs.push([key, value === null ? '' : String(value)]);
+        };
+        if (isRecord$2(data) || Array.isArray(data))
+            Object.entries(data).forEach(([key, value]) => append(key, value));
+        if (!headers.has('content-type'))
+            headers.set('content-type', 'application/x-www-form-urlencoded;charset=UTF-8');
+        const encode = (value) => encodeURIComponent(value).replace(/[!'()*]/g, (character) => `%${character.charCodeAt(0).toString(16).toUpperCase()}`);
+        return pairs.map(([key, value]) => `${encode(key)}=${encode(value)}`).join('&');
+    }
+    if (!headers.has('content-type'))
+        headers.set('content-type', 'application/json');
+    return JSON.stringify(data);
+}
+async function readResponseText(response) {
+    if (!response.body)
+        return '';
+    const chunks = [];
+    const reader = response.body.getReader();
+    let size = 0;
+    try {
+        while (true) {
+            const { done, value } = await reader.read();
+            if (done)
+                break;
+            size += value.byteLength;
+            if (size > MAX_RESPONSE_BYTES) {
+                await reader.cancel();
+                throw createBrowserDevHostError(502, 'RESPONSE_TOO_LARGE', '代理响应超过大小限制');
+            }
+            chunks.push(value);
+        }
+        return Buffer.concat(chunks).toString('utf8');
+    }
+    finally {
+        reader.releaseLock();
+    }
+}
+function writeResponse(response, status, body) {
+    response.writeHead(status, {
+        'access-control-allow-headers': 'content-type',
+        'access-control-allow-methods': 'POST, OPTIONS',
+        'access-control-allow-origin': '*',
+        'access-control-allow-private-network': 'true',
+        'cache-control': 'no-store',
+        'content-type': 'application/json; charset=utf-8',
+    });
+    response.end(body === undefined ? '' : JSON.stringify(body));
+}
+
 const DEFAULT_APP_PORT = 5173;
 const DEFAULT_BROWSER_DEV_HOST_PORT = 5174;
 const DEFAULT_DEV_CONTEXT_TIMEOUT_MS = 3000;
@@ -15494,7 +15681,13 @@ async function runDevCommand(options, runtime = {}) {
         runtimePermissions: launchRuntimePermissions,
         sdkVersion: version.HB_SDK_VERSION,
     });
+    const networkProxy = createMiniProgramDevNetworkProxy({
+        fetchImpl,
+        readContextPath: () => devContextPath,
+    });
     const launchPlugin = createMiniProgramDevLaunchVitePlugin(readLaunchSource, async (request, response) => {
+        if (await networkProxy.handle(request, response))
+            return true;
         if (request.url !== MINI_PROGRAM_DEV_LAUNCH_PATH || request.headers[COMPANION_ARTIFACT_ACCESS_TOKEN_HEADER] === undefined)
             return false;
         response.setHeader('Cache-Control', 'no-store');
@@ -15552,7 +15745,10 @@ async function runDevCommand(options, runtime = {}) {
         viteNetworkUrls: appServer.resolvedUrls?.network ?? [],
     });
     const lanAddresses = buildLanAddresses();
-    const closers = [() => appServer.close()];
+    const closers = [
+        () => networkProxy.close(),
+        () => appServer.close(),
+    ];
     let browserDevHost;
     try {
         browserDevHost = await runDevStartupTask(logger, '正在启动浏览器调试页服务', () => startBrowserDevHostServer({

package/dist/cli-chunks/{doctor-PE_MhGBX.cjs → doctor-CU25P_q2.cjs}

@@ -3,7 +3,7 @@
 var fs = require('node:fs/promises');
 var os = require('node:os');
 var path = require('node:path');
-var index = require('./index-Dd_eGaDz.cjs');
+var index = require('./index-QY5q1rWs.cjs');
 require('node:module');
 require('node:fs');
 require('path');

package/dist/cli-chunks/{index-CeA8xI0T.cjs → index-I2MJ0S1h.cjs}

@@ -1,13 +1,13 @@
 'use strict';
 
-var index$2 = require('./index-Dd_eGaDz.cjs');
+var index$2 = require('./index-QY5q1rWs.cjs');
 var require$$0$3 = require('fs');
 var require$$0$2 = require('crypto');
 var require$$1$2 = require('path');
 var require$$0$5 = require('assert');
 var require$$0$4 = require('events');
 var require$$1$1 = require('util');
-var runtimePermissionEnv = require('./runtime-permission-env-DR89buKQ.cjs');
+var runtimePermissionEnv = require('./runtime-permission-env-w3sXIJU4.cjs');
 var require$$0$7 = require('net');
 var require$$0$6 = require('url');
 var require$$2$1 = require('http');

package/dist/cli-chunks/{index-Dd_eGaDz.cjs → index-QY5q1rWs.cjs}

@@ -235,19 +235,19 @@ function requireArgument () {
 
 var command = {};
 
-const require$5 = node_module.createRequire((typeof document === 'undefined' ? require('u' + 'rl').pathToFileURL(__filename).href : (_documentCurrentScript && _documentCurrentScript.tagName.toUpperCase() === 'SCRIPT' && _documentCurrentScript.src || new URL('cli-chunks/index-Dd_eGaDz.cjs', document.baseURI).href)));
+const require$5 = node_module.createRequire((typeof document === 'undefined' ? require('u' + 'rl').pathToFileURL(__filename).href : (_documentCurrentScript && _documentCurrentScript.tagName.toUpperCase() === 'SCRIPT' && _documentCurrentScript.src || new URL('cli-chunks/index-QY5q1rWs.cjs', document.baseURI).href)));
 function __require$4() { return require$5("node:events"); }
 
-const require$4 = node_module.createRequire((typeof document === 'undefined' ? require('u' + 'rl').pathToFileURL(__filename).href : (_documentCurrentScript && _documentCurrentScript.tagName.toUpperCase() === 'SCRIPT' && _documentCurrentScript.src || new URL('cli-chunks/index-Dd_eGaDz.cjs', document.baseURI).href)));
+const require$4 = node_module.createRequire((typeof document === 'undefined' ? require('u' + 'rl').pathToFileURL(__filename).href : (_documentCurrentScript && _documentCurrentScript.tagName.toUpperCase() === 'SCRIPT' && _documentCurrentScript.src || new URL('cli-chunks/index-QY5q1rWs.cjs', document.baseURI).href)));
 function __require$3() { return require$4("node:child_process"); }
 
-const require$3 = node_module.createRequire((typeof document === 'undefined' ? require('u' + 'rl').pathToFileURL(__filename).href : (_documentCurrentScript && _documentCurrentScript.tagName.toUpperCase() === 'SCRIPT' && _documentCurrentScript.src || new URL('cli-chunks/index-Dd_eGaDz.cjs', document.baseURI).href)));
+const require$3 = node_module.createRequire((typeof document === 'undefined' ? require('u' + 'rl').pathToFileURL(__filename).href : (_documentCurrentScript && _documentCurrentScript.tagName.toUpperCase() === 'SCRIPT' && _documentCurrentScript.src || new URL('cli-chunks/index-QY5q1rWs.cjs', document.baseURI).href)));
 function __require$2() { return require$3("node:path"); }
 
-const require$2 = node_module.createRequire((typeof document === 'undefined' ? require('u' + 'rl').pathToFileURL(__filename).href : (_documentCurrentScript && _documentCurrentScript.tagName.toUpperCase() === 'SCRIPT' && _documentCurrentScript.src || new URL('cli-chunks/index-Dd_eGaDz.cjs', document.baseURI).href)));
+const require$2 = node_module.createRequire((typeof document === 'undefined' ? require('u' + 'rl').pathToFileURL(__filename).href : (_documentCurrentScript && _documentCurrentScript.tagName.toUpperCase() === 'SCRIPT' && _documentCurrentScript.src || new URL('cli-chunks/index-QY5q1rWs.cjs', document.baseURI).href)));
 function __require$1() { return require$2("node:fs"); }
 
-const require$1 = node_module.createRequire((typeof document === 'undefined' ? require('u' + 'rl').pathToFileURL(__filename).href : (_documentCurrentScript && _documentCurrentScript.tagName.toUpperCase() === 'SCRIPT' && _documentCurrentScript.src || new URL('cli-chunks/index-Dd_eGaDz.cjs', document.baseURI).href)));
+const require$1 = node_module.createRequire((typeof document === 'undefined' ? require('u' + 'rl').pathToFileURL(__filename).href : (_documentCurrentScript && _documentCurrentScript.tagName.toUpperCase() === 'SCRIPT' && _documentCurrentScript.src || new URL('cli-chunks/index-QY5q1rWs.cjs', document.baseURI).href)));
 function __require() { return require$1("node:process"); }
 
 var help = {};
@@ -13554,7 +13554,7 @@ function getPathname(pathWithQuery) {
 }
 
 const CLI_VERSION_PLACEHOLDER = ['__HB', 'SDK', 'CLI', 'VERSION__'].join('_');
-const BUILT_CLI_VERSION = '0.9.0-alpha.0';
+const BUILT_CLI_VERSION = '0.9.0-alpha.2';
 const PACKAGE_JSON_CANDIDATES = [
     path.resolve(__dirname, '..', '..', 'package.json'),
     path.resolve(__dirname, '..', 'package.json'),
@@ -13913,39 +13913,39 @@ function createCommandLoggerResolver(options) {
     };
 }
 const defaultClearLoginStatus = async (...args) => {
-    const { clearLoginStatus } = await Promise.resolve().then(function () { return require('./login-5FPaFRi0.cjs'); });
+    const { clearLoginStatus } = await Promise.resolve().then(function () { return require('./login-DCNzO2CY.cjs'); });
     return clearLoginStatus(...args);
 };
 const defaultLoginToHeybox = async (...args) => {
-    const { loginToHeybox } = await Promise.resolve().then(function () { return require('./login-5FPaFRi0.cjs'); });
+    const { loginToHeybox } = await Promise.resolve().then(function () { return require('./login-DCNzO2CY.cjs'); });
     return loginToHeybox(...args);
 };
 const defaultPrintLoginStatus = async (...args) => {
-    const { printLoginStatus } = await Promise.resolve().then(function () { return require('./login-5FPaFRi0.cjs'); });
+    const { printLoginStatus } = await Promise.resolve().then(function () { return require('./login-DCNzO2CY.cjs'); });
     return printLoginStatus(...args);
 };
 const defaultRunBuildCommand = async (...args) => {
-    const { runBuildCommand } = await Promise.resolve().then(function () { return require('./build-Dv5vWsBh.cjs'); });
+    const { runBuildCommand } = await Promise.resolve().then(function () { return require('./build-CvxoPTJb.cjs'); });
     return runBuildCommand(...args);
 };
 const defaultRunCreateCommand = async (...args) => {
-    const { runCreateCommand } = await Promise.resolve().then(function () { return require('./create-BtZUsxJd.cjs'); });
+    const { runCreateCommand } = await Promise.resolve().then(function () { return require('./create-vXFVQGD7.cjs'); });
     return runCreateCommand(...args);
 };
 const defaultRunDevCommand = async (...args) => {
-    const { runDevCommand } = await Promise.resolve().then(function () { return require('./dev-tAThflC6.cjs'); }).then(function (n) { return n.dev; });
+    const { runDevCommand } = await Promise.resolve().then(function () { return require('./dev-QH1jaFr1.cjs'); }).then(function (n) { return n.dev; });
     return runDevCommand(...args);
 };
 const defaultRunDoctorCommand = async (...args) => {
-    const { runDoctorCommand } = await Promise.resolve().then(function () { return require('./doctor-PE_MhGBX.cjs'); });
+    const { runDoctorCommand } = await Promise.resolve().then(function () { return require('./doctor-CU25P_q2.cjs'); });
     return runDoctorCommand(...args);
 };
 const defaultRunSkillInstallCommand = async (...args) => {
-    const { runSkillInstallCommand } = await Promise.resolve().then(function () { return require('./skill-C5EoUf2T.cjs'); });
+    const { runSkillInstallCommand } = await Promise.resolve().then(function () { return require('./skill-DKgQa7PY.cjs'); });
     return runSkillInstallCommand(...args);
 };
 const defaultRunRemoteCommand = async (...args) => {
-    const { runRemoteCommand } = await Promise.resolve().then(function () { return require('./remote-DCHqFvmB.cjs'); });
+    const { runRemoteCommand } = await Promise.resolve().then(function () { return require('./remote-CBuPWvcD.cjs'); });
     return runRemoteCommand(...args);
 };
 function resolveStandaloneLogger(options, verbose) {

package/dist/cli-chunks/{index.esm-Bw3R5BAL.cjs → index.esm-81ZfQF1o.cjs}

@@ -11,8 +11,8 @@ var require$$0$4 = require('url');
 var require$$0 = require('zlib');
 var require$$0$1 = require('buffer');
 var require$$1 = require('util');
-var index = require('./index-Dd_eGaDz.cjs');
-var dev = require('./dev-tAThflC6.cjs');
+var index = require('./index-QY5q1rWs.cjs');
+var dev = require('./dev-QH1jaFr1.cjs');
 require('node:module');
 require('node:fs');
 require('node:fs/promises');
@@ -23,12 +23,12 @@ require('node:crypto');
 require('readline');
 require('tty');
 require('assert');
-require('./context-B15FzPf9.cjs');
-require('./runtime-permission-env-DR89buKQ.cjs');
-require('./version-CJ7rfbl-.cjs');
+require('./context-ChyajSZV.cjs');
+require('./runtime-permission-env-w3sXIJU4.cjs');
+require('./version-NZ-E_XUT.cjs');
 require('node:async_hooks');
 require('sharp');
-require('./session-BiT-5VHK.cjs');
+require('./session-Dtkbu4vT.cjs');
 require('fs');
 require('constants');
 require('node:os');
@@ -42,7 +42,7 @@ require('node:buffer');
 require('node:url');
 require('node:util');
 require('node:child_process');
-require('./project-vite-ckDtbYtt.cjs');
+require('./project-vite-BA81QqiJ.cjs');
 require('node:zlib');
 
 var bufferUtil = {exports: {}};

package/dist/cli-chunks/{login-5FPaFRi0.cjs → login-DCNzO2CY.cjs}

@@ -3,9 +3,9 @@
 var promises = require('node:readline/promises');
 var node_crypto = require('node:crypto');
 var node_http = require('node:http');
-var session = require('./session-BiT-5VHK.cjs');
+var session = require('./session-Dtkbu4vT.cjs');
 var browser = require('./browser-RAy8e8cV.cjs');
-var index = require('./index-Dd_eGaDz.cjs');
+var index = require('./index-QY5q1rWs.cjs');
 require('node:path');
 require('fs');
 require('constants');

package/dist/cli-chunks/{project-vite-ckDtbYtt.cjs → project-vite-BA81QqiJ.cjs}

@@ -5,7 +5,7 @@ var fs$1 = require('node:fs/promises');
 var node_module = require('node:module');
 var path = require('node:path');
 var node_url = require('node:url');
-var index = require('./index-Dd_eGaDz.cjs');
+var index = require('./index-QY5q1rWs.cjs');
 
 function findProjectRoot(startDir) {
     let current = path.resolve(startDir);

package/dist/cli-chunks/{remote-DCHqFvmB.cjs → remote-CBuPWvcD.cjs}

@@ -1,18 +1,18 @@
 'use strict';
 
-var runtimePermissionEnv = require('./runtime-permission-env-DR89buKQ.cjs');
-var context = require('./context-B15FzPf9.cjs');
+var runtimePermissionEnv = require('./runtime-permission-env-w3sXIJU4.cjs');
+var context = require('./context-ChyajSZV.cjs');
 var promises = require('node:readline/promises');
-var index = require('./index-Dd_eGaDz.cjs');
-var session = require('./session-BiT-5VHK.cjs');
+var index = require('./index-QY5q1rWs.cjs');
+var session = require('./session-Dtkbu4vT.cjs');
 var childProcess = require('node:child_process');
 var fs = require('node:fs');
 var fs$1 = require('node:fs/promises');
 var path = require('node:path');
 var node_crypto = require('node:crypto');
 require('node:zlib');
-var runtimeGate = require('./runtime-gate-DkTbgx4d.cjs');
-require('./version-CJ7rfbl-.cjs');
+var runtimeGate = require('./runtime-gate-C1gdlVUB.cjs');
+require('./version-NZ-E_XUT.cjs');
 require('node:async_hooks');
 require('sharp');
 require('node:module');
@@ -274,7 +274,7 @@ function createDefaultCosClient(uploadToken, COS) {
     };
 }
 async function loadCosConstructor() {
-    const cosModule = await Promise.resolve().then(function () { return require('./index-CeA8xI0T.cjs'); }).then(function (n) { return n.index; });
+    const cosModule = await Promise.resolve().then(function () { return require('./index-I2MJ0S1h.cjs'); }).then(function (n) { return n.index; });
     return cosModule.default;
 }
 function formatSize(bytes) {

package/dist/cli-chunks/{runtime-gate-DkTbgx4d.cjs → runtime-gate-C1gdlVUB.cjs}

@@ -1,6 +1,6 @@
 'use strict';
 
-var runtimePermissionEnv = require('./runtime-permission-env-DR89buKQ.cjs');
+var runtimePermissionEnv = require('./runtime-permission-env-w3sXIJU4.cjs');
 
 // Shorthands
 /**

package/dist/cli-chunks/{runtime-permission-env-DR89buKQ.cjs → runtime-permission-env-w3sXIJU4.cjs}

@@ -2,7 +2,7 @@
 
 var fs = require('node:fs');
 var path = require('node:path');
-var version = require('./version-CJ7rfbl-.cjs');
+var version = require('./version-NZ-E_XUT.cjs');
 require('node:crypto');
 var node_async_hooks = require('node:async_hooks');
 

package/dist/cli-chunks/{session-BiT-5VHK.cjs → session-Dtkbu4vT.cjs}

@@ -1,6 +1,6 @@
 'use strict';
 
-var index = require('./index-Dd_eGaDz.cjs');
+var index = require('./index-QY5q1rWs.cjs');
 var node_crypto = require('node:crypto');
 var path = require('node:path');
 var require$$0$2 = require('fs');