@heybox/hb-sdk 0.9.0-alpha.1 → 0.9.0-alpha.3

package/CHANGELOG.md

@@ -2,6 +2,19 @@
 
 本文件随 `@heybox/hb-sdk` npm 包公开分发，只记录外部小程序开发者可观察到的变化。
 
+## 0.9.0-alpha.3 - 2026-10-08
+
+### 行为调整
+
+- Companion ZIP 使用 artifact 协议 v2 复用已验证内容，并在服务端异步完成校验后再提交审核；中断部署可重新执行续接。
+
+## 0.9.0-alpha.2 - 2026-10-07
+
+### 问题修复
+
+- 恢复手机真机调试时由开发机转发 `network.request()`，请求中的 `localhost` 指向开发机。
+- 本地代理保留调用方提供的应用层请求头和上游响应头，不自动携带黑盒登录态。
+
 ## 0.9.0-alpha.1 - 2026-10-07
 
 > 影响级别：常规

package/README.md

@@ -456,6 +456,11 @@ hb-sdk remote deploy --release-note "本次更新说明"
 | `hb-sdk build`            | 执行生产构建与产物校验，不包含类型检查 |
 | `hb-sdk remote deploy`    | 构建、上传并提交当前版本审核           |
 
+`remote deploy` 要求服务端支持产物协议 v2，不会降级为旧上传流程。同一小程序已有相同 Companion ZIP 时，
+CLI 会复用已验证产物、跳过该 ZIP 的网络上传；Web 文件及发生变化的 ZIP 仍按当前版本上传。
+新 ZIP 使用会话专属凭证直传到以 SHA-256 命名的候选对象，强制禁止覆盖。服务端一次读取完成哈希和 ZIP 安全校验后直接引用，不再复制对象。CLI 轮询持久化 Finalize 状态并在全部 Companion ready 后提交审核；中断后重新执行 deploy 可续接，校验失败则使用新会话重传。
+每次部署仍会重新构建并计算本地产物摘要，审核与发布仍属于本次版本。
+
 `hb-sdk create` 默认生成可直接删除的 Vanilla JavaScript + Vite HelloWorld，只保留 SDK Toast 示例、三端 Manifest 和开发/构建/部署命令，不绑定业务框架或项目内测试工具。
 
 `hb-sdk dev` 会启动 Vue 3 Browser Dev Host。左侧诊断面板集中展示结构化日志、当前小程序作用域内的 Storage 快照和问题；日志区分 App、SDK、Network、Runtime、Host 来源，支持毫秒级时间、结果、耗时、重复计数、脱敏详情展开以及来源/级别筛选。右侧设备预览可在 iPhone 16 Pro Max（`440 x 956`）与 Pixel 9 Pro（`410 x 914`）间切换。切换预设只改变设备外框和 viewport，不会重新加载 iframe 或重启 Runtime；授权与操作弹窗、Toast、Loading 和振动反馈都限制在预览框内。
@@ -464,7 +469,7 @@ hb-sdk remote deploy --release-note "本次更新说明"
 
 右上角的桌面图标与二维码按钮使用相同样式。桌面图标只在该项目于 `package.json#heybox.platforms` 声明了桌面平台（`windows`、`macos` 或 `linux`）时展示，未声明桌面平台的项目不显示该入口。点击桌面图标后选择小黑盒正式版或 Debug 版，选择会立即请求客户端打开当前本地页面并在本地记忆，不需要二次确认。桌面端只接受无凭据的 `http://127.0.0.1:<port>`，拒绝 `localhost`、IPv6 和 LAN 地址，不提供地址选择或手工 URL；手机二维码继续独立选择局域网地址。入口在项目已绑定且本地调试启动票有效时可用，统一 URI 只携带 `mini_program_id` 和 `mini_url`，启动票继续由 detail 从同源 `launch.json` 发现并交给后端验证。浏览器无法确认客户端是否真正打开，因此调试台只记录“已请求打开”，不会自动切换正式版或 Debug 版。
 
-`hb-sdk dev` 在未登录、未绑定或远端不可用时仍启动 Browser Mock；真实手机/PC 入口须有有效启动票。CLI 自动从本地声明生成普通 `network` / `companion` 的临时批准缺口，不提供第二套权限开关或申请按钮。真实 Host 每次打开会话确认临时权限，拒绝后仍可按线上批准基线打开；官方域名始终只认声明与线上批准的交集。CLI 连续失联约 30 秒、期限或快照变化会销毁旧 Runtime，并清理临时 Companion 进程树；恢复后重新确认。手机验收统一从右上角二维码进入并选择可达的局域网网卡。完整操作见 [CLI 指南](https://docs.xiaoheihe.cn/hb_sdk/guide/cli)，实现与安全边界由 [Runtime Host 迁移](./docs/runtime-host-migration.md) 维护。
+`hb-sdk dev` 在未登录、未绑定或远端不可用时仍启动 Browser Mock；真实手机/PC 入口须有有效启动票。CLI 自动从本地声明生成普通 `network` / `companion` 的临时批准缺口，不提供第二套权限开关或申请按钮。真实 Host 每次打开会话确认临时权限，拒绝后仍可按线上批准基线打开；官方域名始终只认声明与线上批准的交集。真机 Dev Session 的公开 `network.request()` 通过开发机的 HTTP 代理转发，因此 HTTPS `localhost` 指向开发机；代理不管理独立租约，不判断黑盒域名或改写应用层凭据。正式版本和 Runtime 私有请求仍走 Host 网络。CLI 连续失联约 30 秒、期限或快照变化会销毁旧 Runtime，并清理临时 Companion 进程树；恢复后重新确认。手机验收统一从右上角二维码进入并选择可达的局域网网卡。完整操作见 [CLI 指南](https://docs.xiaoheihe.cn/hb_sdk/guide/cli)，实现与安全边界由 [Runtime Host 迁移](./docs/runtime-host-migration.md) 维护。
 
 远端提交前需要完成 CLI 登录和小程序绑定。完整的登录、绑定、预览、版本与发布流程见 [CLI 指南](https://docs.xiaoheihe.cn/hb_sdk/guide/cli)。
 

package/dist/cli-chunks/{build-BSeiFi0q.cjs → build-C4d4WXYT.cjs}

@@ -3,13 +3,13 @@
 var fs$1 = require('node:fs');
 var fs = require('node:fs/promises');
 var path = require('node:path');
-var runtimePermissionEnv = require('./runtime-permission-env-B-GwDDT7.cjs');
+var runtimePermissionEnv = require('./runtime-permission-env-DdWYFrFT.cjs');
 require('node:crypto');
 require('node:zlib');
-var runtimeGate = require('./runtime-gate-BfAGMrE2.cjs');
-var index = require('./index-d1cUUoR9.cjs');
-var projectVite = require('./project-vite-BM7D-pf6.cjs');
-require('./version-hsUgRL0I.cjs');
+var runtimeGate = require('./runtime-gate-CWUZK4aE.cjs');
+var index = require('./index-BtqxUixL.cjs');
+var projectVite = require('./project-vite-DSBP8NLj.cjs');
+require('./version-4zRtvcVD.cjs');
 require('node:async_hooks');
 require('node:module');
 require('path');

package/dist/cli-chunks/{context-D_L2-Hla.cjs → context-mt_ERryB.cjs}

@@ -3,10 +3,10 @@
 var node_crypto = require('node:crypto');
 var fs = require('node:fs/promises');
 var path = require('node:path');
-var runtimePermissionEnv = require('./runtime-permission-env-B-GwDDT7.cjs');
+var runtimePermissionEnv = require('./runtime-permission-env-DdWYFrFT.cjs');
 var fs$1 = require('node:fs');
 var sharp = require('sharp');
-var session = require('./session-mMVA3395.cjs');
+var session = require('./session-CWCq-oeW.cjs');
 
 async function inspectBasicInfoImage(bytes, sourcePath, kind) {
     const inspected = await inspectDecodedBasicInfoImage(bytes, kind);

package/dist/cli-chunks/{create-Dzeodh_-.cjs → create-LfZ8OhT6.cjs}

@@ -5,7 +5,7 @@ var fs = require('node:fs/promises');
 var path = require('node:path');
 var require$$0 = require('fs');
 var require$$1 = require('path');
-var index = require('./index-d1cUUoR9.cjs');
+var index = require('./index-BtqxUixL.cjs');
 require('node:module');
 require('os');
 require('node:crypto');

package/dist/cli-chunks/{dev-DQ7k_fu6.cjs → dev-lgUgVorS.cjs}

@@ -1,9 +1,9 @@
 'use strict';
 
-var context = require('./context-D_L2-Hla.cjs');
+var context = require('./context-mt_ERryB.cjs');
 var node_crypto = require('node:crypto');
 var fs = require('node:fs');
-var runtimePermissionEnv = require('./runtime-permission-env-B-GwDDT7.cjs');
+var runtimePermissionEnv = require('./runtime-permission-env-DdWYFrFT.cjs');
 var os = require('node:os');
 var path = require('node:path');
 var net = require('node:net');
@@ -12,13 +12,13 @@ var node_http = require('node:http');
 var node_module = require('node:module');
 var undici = require('undici');
 var fs$1 = require('node:fs/promises');
-var index = require('./index-d1cUUoR9.cjs');
+var index = require('./index-BtqxUixL.cjs');
 var require$$0$1 = require('crypto');
 var require$$0 = require('buffer');
-var session = require('./session-mMVA3395.cjs');
+var session = require('./session-CWCq-oeW.cjs');
 var browser = require('./browser-RAy8e8cV.cjs');
-var projectVite = require('./project-vite-BM7D-pf6.cjs');
-var version = require('./version-hsUgRL0I.cjs');
+var projectVite = require('./project-vite-DSBP8NLj.cjs');
+var version = require('./version-4zRtvcVD.cjs');
 require('node:zlib');
 
 var _documentCurrentScript = typeof document !== 'undefined' ? document.currentScript : null;
@@ -1993,8 +1993,8 @@ const DEFAULT_CHANNEL_TRANSPORT = {
 };
 const IPV4_LOOPBACK_ADDRESSES = new net.BlockList();
 IPV4_LOOPBACK_ADDRESSES.addSubnet('127.0.0.0', 8, 'ipv4');
-const { WebSocket, WebSocketServer } = node_module.createRequire((typeof document === 'undefined' ? require('u' + 'rl').pathToFileURL(__filename).href : (_documentCurrentScript && _documentCurrentScript.tagName.toUpperCase() === 'SCRIPT' && _documentCurrentScript.src || new URL('cli-chunks/dev-DQ7k_fu6.cjs', document.baseURI).href)))('ws');
-const { parse: parseHtml } = node_module.createRequire((typeof document === 'undefined' ? require('u' + 'rl').pathToFileURL(__filename).href : (_documentCurrentScript && _documentCurrentScript.tagName.toUpperCase() === 'SCRIPT' && _documentCurrentScript.src || new URL('cli-chunks/dev-DQ7k_fu6.cjs', document.baseURI).href)))('parse5');
+const { WebSocket, WebSocketServer } = node_module.createRequire((typeof document === 'undefined' ? require('u' + 'rl').pathToFileURL(__filename).href : (_documentCurrentScript && _documentCurrentScript.tagName.toUpperCase() === 'SCRIPT' && _documentCurrentScript.src || new URL('cli-chunks/dev-lgUgVorS.cjs', document.baseURI).href)))('ws');
+const { parse: parseHtml } = node_module.createRequire((typeof document === 'undefined' ? require('u' + 'rl').pathToFileURL(__filename).href : (_documentCurrentScript && _documentCurrentScript.tagName.toUpperCase() === 'SCRIPT' && _documentCurrentScript.src || new URL('cli-chunks/dev-lgUgVorS.cjs', document.baseURI).href)))('parse5');
 const BROWSER_DEV_HOST_ROOT_CANDIDATES = [
     path.resolve(__dirname, 'devtools/browser-dev-host'),
     path.resolve(__dirname, '../devtools/browser-dev-host'),
@@ -11089,7 +11089,7 @@ function assertNodeRuntimeCapabilities(ctx, settings) {
 function createNodeRealtimeDriverRegistry() {
     const registry = createRuntimeRealtimeDriverRegistry();
     registry.registerLazy('node-websocket', async () => {
-        const mod = await Promise.resolve().then(function () { return require('./index.esm-CerEC339.cjs'); });
+        const mod = await Promise.resolve().then(function () { return require('./index.esm-Deim9BX8.cjs'); });
         return mod.createNodeWebSocketRuntimeDriver();
     });
     return registry;
@@ -15198,6 +15198,196 @@ function writeLaunchResponse(response, status, origin, body) {
     response.end(body ?? '');
 }
 
+// SDK/Runtime 限制 2 MiB 请求正文；JSON 转义最多放大 6 倍，另留 1 MiB 元数据预算。
+const MAX_REQUEST_ENVELOPE_BYTES = 2 * 1024 * 1024 * 6 + 1024 * 1024;
+const MAX_RESPONSE_BYTES = 32 * 1024 * 1024;
+const HOP_BY_HOP_HEADERS = new Set([
+    'connection',
+    'keep-alive',
+    'proxy-authenticate',
+    'proxy-authorization',
+    'te',
+    'trailer',
+    'transfer-encoding',
+    'upgrade',
+]);
+/** dev server 的 HTTP 转发入口，不读取小程序权限或管理代理租约。 */
+function createMiniProgramDevNetworkProxy(options) {
+    const controllers = new Set();
+    return {
+        async handle(request, response) {
+            const contextPath = options.readContextPath();
+            if (!contextPath || request.url !== `${contextPath}/network`)
+                return false;
+            if (request.method === 'OPTIONS') {
+                writeResponse(response, 204);
+                return true;
+            }
+            if (request.method !== 'POST') {
+                writeResponse(response, 405, { code: 'METHOD_NOT_ALLOWED' });
+                return true;
+            }
+            const scope = createBrowserDevHostRequestAbortScope(request, response);
+            const controller = new AbortController();
+            const abort = () => controller.abort();
+            scope.signal.addEventListener('abort', abort, { once: true });
+            if (scope.signal.aborted)
+                abort();
+            controllers.add(controller);
+            let timer;
+            try {
+                const payload = await readJsonRequestBody(request, {
+                    maxBytes: MAX_REQUEST_ENVELOPE_BYTES,
+                    destroyOnLimit: false,
+                });
+                if (!isRecord$2(payload) || typeof payload.url !== 'string') {
+                    throw createBrowserDevHostError(400, 'INVALID_REQUEST', '代理请求需要 URL');
+                }
+                let url;
+                try {
+                    url = new URL(payload.url);
+                }
+                catch {
+                    throw createBrowserDevHostError(400, 'INVALID_REQUEST', '代理请求 URL 无效');
+                }
+                if (url.protocol !== 'http:' && url.protocol !== 'https:') {
+                    throw createBrowserDevHostError(400, 'INVALID_REQUEST', '代理只支持 HTTP(S)');
+                }
+                if (isRecord$2(payload.params)) {
+                    for (const [key, value] of Object.entries(payload.params)) {
+                        if (value !== null && value !== undefined)
+                            url.searchParams.set(key, String(value));
+                    }
+                }
+                const headers = stripHopByHopHeaders(new Headers(payload.headers));
+                // Node 根据实际目标与编码后的 body 生成传输头。
+                headers.delete('host');
+                headers.delete('content-length');
+                const method = typeof payload.method === 'string' ? payload.method.toUpperCase() : 'GET';
+                const body = encodeBody(method, payload.data, payload.bodyEncoding, headers);
+                const timeout = typeof payload.timeout === 'number' && Number.isFinite(payload.timeout) && payload.timeout > 0 ? payload.timeout : 10_000;
+                timer = setTimeout(abort, timeout);
+                const upstream = await options.fetchImpl(url.href, {
+                    body,
+                    headers,
+                    method,
+                    redirect: 'manual',
+                    signal: controller.signal,
+                });
+                const text = await readResponseText(upstream);
+                let data = text;
+                try {
+                    data = JSON.parse(text);
+                }
+                catch {
+                    /* 与真机 Native transport 一致，非 JSON 响应保留原文。 */
+                }
+                const responseHeaders = stripHopByHopHeaders(upstream.headers);
+                // fetch 已解压响应，原编码与长度不再描述返回的数据。
+                responseHeaders.delete('content-encoding');
+                responseHeaders.delete('content-length');
+                writeResponse(response, 200, {
+                    data,
+                    headers: Object.fromEntries(responseHeaders),
+                    status: upstream.status,
+                    statusText: upstream.statusText,
+                });
+            }
+            catch (error) {
+                if (!response.destroyed) {
+                    writeResponse(response, readBrowserDevHostErrorStatus(error), toBrowserDevHostErrorPayload(error));
+                }
+            }
+            finally {
+                clearTimeout(timer);
+                controllers.delete(controller);
+                scope.signal.removeEventListener('abort', abort);
+                scope.dispose();
+            }
+            return true;
+        },
+        close() {
+            for (const controller of controllers)
+                controller.abort();
+        },
+    };
+}
+function stripHopByHopHeaders(input) {
+    const headers = new Headers(input);
+    const connectionHeaders = headers
+        .get('connection')
+        ?.split(',')
+        .map((name) => name.trim()) ?? [];
+    for (const name of [...HOP_BY_HOP_HEADERS, ...connectionHeaders]) {
+        if (name)
+            headers.delete(name);
+    }
+    return headers;
+}
+function encodeBody(method, data, encoding, headers) {
+    if (data === undefined || method === 'GET' || method === 'HEAD')
+        return undefined;
+    if (typeof data === 'string')
+        return data;
+    if (encoding === 'form') {
+        const pairs = [];
+        const append = (key, value) => {
+            if (value === undefined)
+                return;
+            if (Array.isArray(value))
+                value.forEach((item) => append(key, item));
+            else if (isRecord$2(value))
+                Object.entries(value).forEach(([child, item]) => append(`${key}[${child}]`, item));
+            else
+                pairs.push([key, value === null ? '' : String(value)]);
+        };
+        if (isRecord$2(data) || Array.isArray(data))
+            Object.entries(data).forEach(([key, value]) => append(key, value));
+        if (!headers.has('content-type'))
+            headers.set('content-type', 'application/x-www-form-urlencoded;charset=UTF-8');
+        const encode = (value) => encodeURIComponent(value).replace(/[!'()*]/g, (character) => `%${character.charCodeAt(0).toString(16).toUpperCase()}`);
+        return pairs.map(([key, value]) => `${encode(key)}=${encode(value)}`).join('&');
+    }
+    if (!headers.has('content-type'))
+        headers.set('content-type', 'application/json');
+    return JSON.stringify(data);
+}
+async function readResponseText(response) {
+    if (!response.body)
+        return '';
+    const chunks = [];
+    const reader = response.body.getReader();
+    let size = 0;
+    try {
+        while (true) {
+            const { done, value } = await reader.read();
+            if (done)
+                break;
+            size += value.byteLength;
+            if (size > MAX_RESPONSE_BYTES) {
+                await reader.cancel();
+                throw createBrowserDevHostError(502, 'RESPONSE_TOO_LARGE', '代理响应超过大小限制');
+            }
+            chunks.push(value);
+        }
+        return Buffer.concat(chunks).toString('utf8');
+    }
+    finally {
+        reader.releaseLock();
+    }
+}
+function writeResponse(response, status, body) {
+    response.writeHead(status, {
+        'access-control-allow-headers': 'content-type',
+        'access-control-allow-methods': 'POST, OPTIONS',
+        'access-control-allow-origin': '*',
+        'access-control-allow-private-network': 'true',
+        'cache-control': 'no-store',
+        'content-type': 'application/json; charset=utf-8',
+    });
+    response.end(body === undefined ? '' : JSON.stringify(body));
+}
+
 const DEFAULT_APP_PORT = 5173;
 const DEFAULT_BROWSER_DEV_HOST_PORT = 5174;
 const DEFAULT_DEV_CONTEXT_TIMEOUT_MS = 3000;
@@ -15491,7 +15681,13 @@ async function runDevCommand(options, runtime = {}) {
         runtimePermissions: launchRuntimePermissions,
         sdkVersion: version.HB_SDK_VERSION,
     });
+    const networkProxy = createMiniProgramDevNetworkProxy({
+        fetchImpl,
+        readContextPath: () => devContextPath,
+    });
     const launchPlugin = createMiniProgramDevLaunchVitePlugin(readLaunchSource, async (request, response) => {
+        if (await networkProxy.handle(request, response))
+            return true;
         if (request.url !== MINI_PROGRAM_DEV_LAUNCH_PATH || request.headers[COMPANION_ARTIFACT_ACCESS_TOKEN_HEADER] === undefined)
             return false;
         response.setHeader('Cache-Control', 'no-store');
@@ -15549,7 +15745,10 @@ async function runDevCommand(options, runtime = {}) {
         viteNetworkUrls: appServer.resolvedUrls?.network ?? [],
     });
     const lanAddresses = buildLanAddresses();
-    const closers = [() => appServer.close()];
+    const closers = [
+        () => networkProxy.close(),
+        () => appServer.close(),
+    ];
     let browserDevHost;
     try {
         browserDevHost = await runDevStartupTask(logger, '正在启动浏览器调试页服务', () => startBrowserDevHostServer({

package/dist/cli-chunks/{doctor-FIcFZiJ0.cjs → doctor-BSJnY0Bu.cjs}

@@ -3,7 +3,7 @@
 var fs = require('node:fs/promises');
 var os = require('node:os');
 var path = require('node:path');
-var index = require('./index-d1cUUoR9.cjs');
+var index = require('./index-BtqxUixL.cjs');
 require('node:module');
 require('node:fs');
 require('path');

package/dist/cli-chunks/{index-d1cUUoR9.cjs → index-BtqxUixL.cjs}

@@ -235,19 +235,19 @@ function requireArgument () {
 
 var command = {};
 
-const require$5 = node_module.createRequire((typeof document === 'undefined' ? require('u' + 'rl').pathToFileURL(__filename).href : (_documentCurrentScript && _documentCurrentScript.tagName.toUpperCase() === 'SCRIPT' && _documentCurrentScript.src || new URL('cli-chunks/index-d1cUUoR9.cjs', document.baseURI).href)));
+const require$5 = node_module.createRequire((typeof document === 'undefined' ? require('u' + 'rl').pathToFileURL(__filename).href : (_documentCurrentScript && _documentCurrentScript.tagName.toUpperCase() === 'SCRIPT' && _documentCurrentScript.src || new URL('cli-chunks/index-BtqxUixL.cjs', document.baseURI).href)));
 function __require$4() { return require$5("node:events"); }
 
-const require$4 = node_module.createRequire((typeof document === 'undefined' ? require('u' + 'rl').pathToFileURL(__filename).href : (_documentCurrentScript && _documentCurrentScript.tagName.toUpperCase() === 'SCRIPT' && _documentCurrentScript.src || new URL('cli-chunks/index-d1cUUoR9.cjs', document.baseURI).href)));
+const require$4 = node_module.createRequire((typeof document === 'undefined' ? require('u' + 'rl').pathToFileURL(__filename).href : (_documentCurrentScript && _documentCurrentScript.tagName.toUpperCase() === 'SCRIPT' && _documentCurrentScript.src || new URL('cli-chunks/index-BtqxUixL.cjs', document.baseURI).href)));
 function __require$3() { return require$4("node:child_process"); }
 
-const require$3 = node_module.createRequire((typeof document === 'undefined' ? require('u' + 'rl').pathToFileURL(__filename).href : (_documentCurrentScript && _documentCurrentScript.tagName.toUpperCase() === 'SCRIPT' && _documentCurrentScript.src || new URL('cli-chunks/index-d1cUUoR9.cjs', document.baseURI).href)));
+const require$3 = node_module.createRequire((typeof document === 'undefined' ? require('u' + 'rl').pathToFileURL(__filename).href : (_documentCurrentScript && _documentCurrentScript.tagName.toUpperCase() === 'SCRIPT' && _documentCurrentScript.src || new URL('cli-chunks/index-BtqxUixL.cjs', document.baseURI).href)));
 function __require$2() { return require$3("node:path"); }
 
-const require$2 = node_module.createRequire((typeof document === 'undefined' ? require('u' + 'rl').pathToFileURL(__filename).href : (_documentCurrentScript && _documentCurrentScript.tagName.toUpperCase() === 'SCRIPT' && _documentCurrentScript.src || new URL('cli-chunks/index-d1cUUoR9.cjs', document.baseURI).href)));
+const require$2 = node_module.createRequire((typeof document === 'undefined' ? require('u' + 'rl').pathToFileURL(__filename).href : (_documentCurrentScript && _documentCurrentScript.tagName.toUpperCase() === 'SCRIPT' && _documentCurrentScript.src || new URL('cli-chunks/index-BtqxUixL.cjs', document.baseURI).href)));
 function __require$1() { return require$2("node:fs"); }
 
-const require$1 = node_module.createRequire((typeof document === 'undefined' ? require('u' + 'rl').pathToFileURL(__filename).href : (_documentCurrentScript && _documentCurrentScript.tagName.toUpperCase() === 'SCRIPT' && _documentCurrentScript.src || new URL('cli-chunks/index-d1cUUoR9.cjs', document.baseURI).href)));
+const require$1 = node_module.createRequire((typeof document === 'undefined' ? require('u' + 'rl').pathToFileURL(__filename).href : (_documentCurrentScript && _documentCurrentScript.tagName.toUpperCase() === 'SCRIPT' && _documentCurrentScript.src || new URL('cli-chunks/index-BtqxUixL.cjs', document.baseURI).href)));
 function __require() { return require$1("node:process"); }
 
 var help = {};
@@ -13554,7 +13554,7 @@ function getPathname(pathWithQuery) {
 }
 
 const CLI_VERSION_PLACEHOLDER = ['__HB', 'SDK', 'CLI', 'VERSION__'].join('_');
-const BUILT_CLI_VERSION = '0.9.0-alpha.1';
+const BUILT_CLI_VERSION = '0.9.0-alpha.3';
 const PACKAGE_JSON_CANDIDATES = [
     path.resolve(__dirname, '..', '..', 'package.json'),
     path.resolve(__dirname, '..', 'package.json'),
@@ -13913,39 +13913,39 @@ function createCommandLoggerResolver(options) {
     };
 }
 const defaultClearLoginStatus = async (...args) => {
-    const { clearLoginStatus } = await Promise.resolve().then(function () { return require('./login-lZKDg_9k.cjs'); });
+    const { clearLoginStatus } = await Promise.resolve().then(function () { return require('./login-TIFXGbKv.cjs'); });
     return clearLoginStatus(...args);
 };
 const defaultLoginToHeybox = async (...args) => {
-    const { loginToHeybox } = await Promise.resolve().then(function () { return require('./login-lZKDg_9k.cjs'); });
+    const { loginToHeybox } = await Promise.resolve().then(function () { return require('./login-TIFXGbKv.cjs'); });
     return loginToHeybox(...args);
 };
 const defaultPrintLoginStatus = async (...args) => {
-    const { printLoginStatus } = await Promise.resolve().then(function () { return require('./login-lZKDg_9k.cjs'); });
+    const { printLoginStatus } = await Promise.resolve().then(function () { return require('./login-TIFXGbKv.cjs'); });
     return printLoginStatus(...args);
 };
 const defaultRunBuildCommand = async (...args) => {
-    const { runBuildCommand } = await Promise.resolve().then(function () { return require('./build-BSeiFi0q.cjs'); });
+    const { runBuildCommand } = await Promise.resolve().then(function () { return require('./build-C4d4WXYT.cjs'); });
     return runBuildCommand(...args);
 };
 const defaultRunCreateCommand = async (...args) => {
-    const { runCreateCommand } = await Promise.resolve().then(function () { return require('./create-Dzeodh_-.cjs'); });
+    const { runCreateCommand } = await Promise.resolve().then(function () { return require('./create-LfZ8OhT6.cjs'); });
     return runCreateCommand(...args);
 };
 const defaultRunDevCommand = async (...args) => {
-    const { runDevCommand } = await Promise.resolve().then(function () { return require('./dev-DQ7k_fu6.cjs'); }).then(function (n) { return n.dev; });
+    const { runDevCommand } = await Promise.resolve().then(function () { return require('./dev-lgUgVorS.cjs'); }).then(function (n) { return n.dev; });
     return runDevCommand(...args);
 };
 const defaultRunDoctorCommand = async (...args) => {
-    const { runDoctorCommand } = await Promise.resolve().then(function () { return require('./doctor-FIcFZiJ0.cjs'); });
+    const { runDoctorCommand } = await Promise.resolve().then(function () { return require('./doctor-BSJnY0Bu.cjs'); });
     return runDoctorCommand(...args);
 };
 const defaultRunSkillInstallCommand = async (...args) => {
-    const { runSkillInstallCommand } = await Promise.resolve().then(function () { return require('./skill-BhUlKvyY.cjs'); });
+    const { runSkillInstallCommand } = await Promise.resolve().then(function () { return require('./skill-DQzR5fMS.cjs'); });
     return runSkillInstallCommand(...args);
 };
 const defaultRunRemoteCommand = async (...args) => {
-    const { runRemoteCommand } = await Promise.resolve().then(function () { return require('./remote-9-tyxq6l.cjs'); });
+    const { runRemoteCommand } = await Promise.resolve().then(function () { return require('./remote-DyGb3YBA.cjs'); });
     return runRemoteCommand(...args);
 };
 function resolveStandaloneLogger(options, verbose) {

package/dist/cli-chunks/{index-CakUTosC.cjs → index-DVALw2rx.cjs}

@@ -1,13 +1,13 @@
 'use strict';
 
-var index$2 = require('./index-d1cUUoR9.cjs');
+var index$2 = require('./index-BtqxUixL.cjs');
 var require$$0$3 = require('fs');
 var require$$0$2 = require('crypto');
 var require$$1$2 = require('path');
 var require$$0$5 = require('assert');
 var require$$0$4 = require('events');
 var require$$1$1 = require('util');
-var runtimePermissionEnv = require('./runtime-permission-env-B-GwDDT7.cjs');
+var runtimePermissionEnv = require('./runtime-permission-env-DdWYFrFT.cjs');
 var require$$0$7 = require('net');
 var require$$0$6 = require('url');
 var require$$2$1 = require('http');

package/dist/cli-chunks/{index.esm-CerEC339.cjs → index.esm-Deim9BX8.cjs}

@@ -11,8 +11,8 @@ var require$$0$4 = require('url');
 var require$$0 = require('zlib');
 var require$$0$1 = require('buffer');
 var require$$1 = require('util');
-var index = require('./index-d1cUUoR9.cjs');
-var dev = require('./dev-DQ7k_fu6.cjs');
+var index = require('./index-BtqxUixL.cjs');
+var dev = require('./dev-lgUgVorS.cjs');
 require('node:module');
 require('node:fs');
 require('node:fs/promises');
@@ -23,12 +23,12 @@ require('node:crypto');
 require('readline');
 require('tty');
 require('assert');
-require('./context-D_L2-Hla.cjs');
-require('./runtime-permission-env-B-GwDDT7.cjs');
-require('./version-hsUgRL0I.cjs');
+require('./context-mt_ERryB.cjs');
+require('./runtime-permission-env-DdWYFrFT.cjs');
+require('./version-4zRtvcVD.cjs');
 require('node:async_hooks');
 require('sharp');
-require('./session-mMVA3395.cjs');
+require('./session-CWCq-oeW.cjs');
 require('fs');
 require('constants');
 require('node:os');
@@ -42,7 +42,7 @@ require('node:buffer');
 require('node:url');
 require('node:util');
 require('node:child_process');
-require('./project-vite-BM7D-pf6.cjs');
+require('./project-vite-DSBP8NLj.cjs');
 require('node:zlib');
 
 var bufferUtil = {exports: {}};

package/dist/cli-chunks/{login-lZKDg_9k.cjs → login-TIFXGbKv.cjs}

@@ -3,9 +3,9 @@
 var promises = require('node:readline/promises');
 var node_crypto = require('node:crypto');
 var node_http = require('node:http');
-var session = require('./session-mMVA3395.cjs');
+var session = require('./session-CWCq-oeW.cjs');
 var browser = require('./browser-RAy8e8cV.cjs');
-var index = require('./index-d1cUUoR9.cjs');
+var index = require('./index-BtqxUixL.cjs');
 require('node:path');
 require('fs');
 require('constants');

package/dist/cli-chunks/{project-vite-BM7D-pf6.cjs → project-vite-DSBP8NLj.cjs}

@@ -5,7 +5,7 @@ var fs$1 = require('node:fs/promises');
 var node_module = require('node:module');
 var path = require('node:path');
 var node_url = require('node:url');
-var index = require('./index-d1cUUoR9.cjs');
+var index = require('./index-BtqxUixL.cjs');
 
 function findProjectRoot(startDir) {
     let current = path.resolve(startDir);