@heybox/hb-sdk 0.9.1-alpha.0 → 0.9.1-alpha.10

package/dist/cli-chunks/{remote-nQq3nAUy.cjs → remote-DeLLzkXt.cjs}

@@ -1,71 +1,38 @@
 'use strict';
 
-var runtimePermissionEnv = require('./runtime-permission-env-B_poIoGP.cjs');
-var context = require('./context-D_VhP5QF.cjs');
+var runtimePermissionEnv = require('./runtime-permission-env-DBra_0-U.cjs');
+var context = require('./context-D7AFyc_9.cjs');
 var promises = require('node:readline/promises');
-var index = require('./index-CUebAm7J.cjs');
-var session = require('./session-DDNple9k.cjs');
+var index = require('./index-BWRDIX1T.cjs');
+var runtimeGate = require('./runtime-gate-wKj1l5xM.cjs');
 var childProcess = require('node:child_process');
 var fs = require('node:fs');
 var fs$1 = require('node:fs/promises');
 var path = require('node:path');
 var node_crypto = require('node:crypto');
 require('node:zlib');
-var runtimeGate = require('./runtime-gate-uTsNPu3U.cjs');
-require('./version-CNYpJdS7.cjs');
+require('./version-BF4JQQCU.cjs');
 require('node:async_hooks');
 require('sharp');
 require('node:module');
-require('path');
-require('os');
 require('readline');
+require('os');
 require('tty');
 require('assert');
 require('events');
 require('stream');
 require('buffer');
 require('util');
+require('path');
 require('fs');
 require('constants');
+require('node:url');
+require('./_commonjs-dynamic-modules-DUamuDzp.cjs');
+require('inspector');
 
 // 脚手架开发占位图；构建可用，提审前必须替换。
 const BASIC_INFO_PLACEHOLDER_SHA256 = 'd14e54b30f5e6d1bcbf51267bc82b06a0af7c333f2945bcc16b4e1adc3b123dd';
 
-async function getCDNUploadInfo(options, runtime = {}) {
-    const body = new URLSearchParams();
-    body.set('file_infos', JSON.stringify(options.fileInfos));
-    body.set('scope', options.scope);
-    body.set('need_cache', options.needCache ? '1' : '0');
-    return postHeyboxApi('/bbs/app/api/qcloud/cos/upload/info/v2', body, options.session, runtime);
-}
-async function getCDNUploadToken(options, runtime = {}) {
-    const body = new URLSearchParams();
-    body.set('bucket', options.bucket);
-    body.set('keys', JSON.stringify(options.keys));
-    body.set('mimetypes', JSON.stringify(options.mimetypes));
-    body.set('is_multipart_upload', String(options.isMultipartUpload));
-    return postHeyboxApi('/bbs/app/api/qcloud/cos/upload/token/v2', body, options.session, runtime);
-}
-async function postCDNUploadCallback(options, runtime = {}) {
-    const body = new URLSearchParams();
-    body.set('keys', JSON.stringify(options.keys));
-    const query = options.isFinished ? '?is_finished=true' : '';
-    return postHeyboxApi(`/bbs/app/api/qcloud/cos/upload/callback/v2${query}`, body, options.session, runtime);
-}
-async function postHeyboxApi(pathWithQuery, body, session$1, runtime) {
-    const fetchImpl = runtime.fetchImpl ?? fetch;
-    const context = session.createHeyboxOpenPlatformRequestContext(session$1, pathWithQuery, {
-        contentType: 'application/x-www-form-urlencoded',
-    });
-    const response = await fetchImpl(session.createHeyboxApiUrl(runtime.baseUrl ?? context.baseUrl, pathWithQuery, context.platformParams), {
-        method: 'POST',
-        headers: context.headers,
-        body: body.toString(),
-    });
-    const result = await session.readHeyboxApiEnvelope(response, { pathWithQuery, requireResult: true });
-    return result;
-}
-
 const CREATE_USER_MINIPROGRAM_UPLOAD_SESSION_API_PATH = '/mall/developer/user_miniprogram/version/upload_session/create';
 const RECORD_USER_MINIPROGRAM_UPLOAD_RESULT_API_PATH = '/mall/developer/user_miniprogram/version/upload_session/record';
 const COMPANION_FINALIZATION_TIMEOUT_MS = 30 * 60_000;
@@ -124,7 +91,7 @@ async function recordUserMiniprogramUploadResult(options, runtime = {}) {
 }
 async function postUserMiniprogramVersionForm(path, options, fields, runtime) {
     const fetchImpl = runtime.fetchImpl ?? fetch;
-    const context = session.createHeyboxOpenPlatformRequestContext(options.session, path, {
+    const context = index.createHeyboxOpenPlatformRequestContext(options.session, path, {
         contentType: 'application/x-www-form-urlencoded',
     });
     const body = new URLSearchParams();
@@ -132,12 +99,12 @@ async function postUserMiniprogramVersionForm(path, options, fields, runtime) {
     for (const [key, value] of Object.entries(fields)) {
         body.set(key, value);
     }
-    const response = await fetchImpl(session.createHeyboxApiUrl(runtime.baseUrl ?? context.baseUrl, path, context.platformParams), {
+    const response = await fetchImpl(index.createHeyboxApiUrl(runtime.baseUrl ?? context.baseUrl, path, context.platformParams), {
         method: 'POST',
         headers: context.headers,
         body: body.toString(),
     });
-    const result = await session.readHeyboxApiEnvelope(response, {
+    const result = await index.readHeyboxApiEnvelope(response, {
         pathWithQuery: path,
     });
     return result ?? {};
@@ -148,11 +115,12 @@ async function runUpload(options, runtime = {}) {
     const logger = runtime.logger ?? index.createCliLogger();
     const concurrency = runtime.concurrency ?? DEFAULT_CONCURRENCY;
     const fetchImpl = runtime.fetchImpl ?? fetch;
-    const getCDNUploadInfo$1 = runtime.getCDNUploadInfo ?? getCDNUploadInfo;
-    const getCDNUploadToken$1 = runtime.getCDNUploadToken ?? getCDNUploadToken;
-    const postCDNUploadCallback$1 = runtime.postCDNUploadCallback ?? postCDNUploadCallback;
+    const getCDNUploadInfo = runtime.getCDNUploadInfo ?? index.getCDNUploadInfo;
+    const getCDNUploadToken = runtime.getCDNUploadToken ?? index.getCDNUploadToken;
+    const postCDNUploadCallback = runtime.postCDNUploadCallback ?? index.postCDNUploadCallback;
     const recordUserMiniprogramUploadResult$1 = runtime.recordUserMiniprogramUploadResult ?? recordUserMiniprogramUploadResult;
     const createReadStream = runtime.createReadStream ?? fs.createReadStream;
+    const cdnBaseUrl = runtime.cdnBaseUrl ?? runtime.baseUrl;
     let createCosClient = runtime.createCosClient;
     if (!createCosClient) {
         const COS = await loadCosConstructor();
@@ -173,12 +141,12 @@ async function runUpload(options, runtime = {}) {
             logger.debug(`正在处理上传批次 ${batchIndex + 1}/${batches.length}，文件数: ${batch.length}`);
             logger.debug('正在获取 CDN 上传信息');
             const fileInfos = createUploadFileInfos(batch);
-            const uploadInfo = grant ?? await getCDNUploadInfo$1({
+            const uploadInfo = grant ?? await getCDNUploadInfo({
                 session: options.session,
                 scope: runtimePermissionEnv.MINIAPP_UPLOAD_SCOPE,
                 fileInfos,
                 needCache: false,
-            }, { baseUrl: runtime.baseUrl, fetchImpl });
+            }, { baseUrl: cdnBaseUrl, fetchImpl });
             logger.debug(`CDN bucket: ${uploadInfo.bucket}`);
             logger.debug(`CDN region: ${uploadInfo.region}`);
             validateUploadInfoKeys(batch, uploadInfo.keys);
@@ -189,13 +157,13 @@ async function runUpload(options, runtime = {}) {
                 uploadToken = grant ? {
                     credentials: { tmpSecretId: grant.tmp_secret_id, tmpSecretKey: grant.tmp_secret_key, sessionToken: grant.session_token },
                     startTime: grant.start_time, expiredTime: grant.expired_time,
-                } : await getCDNUploadToken$1({
+                } : await getCDNUploadToken({
                     session: options.session,
                     bucket: uploadInfo.bucket,
-                    keys: indexedFiles.map(item => item.key),
-                    mimetypes: indexedFiles.map(item => item.file.mimeType),
+                    keys: indexedFiles.map((item) => item.key),
+                    mimetypes: indexedFiles.map((item) => item.file.mimeType),
                     isMultipartUpload: 0,
-                }, { baseUrl: runtime.baseUrl, fetchImpl });
+                }, { baseUrl: cdnBaseUrl, fetchImpl });
             }
             catch (error) {
                 throw new index.CliError(`获取 CDN 上传凭证失败：${readErrorMessage(error)}`);
@@ -241,7 +209,7 @@ async function runUpload(options, runtime = {}) {
             if (successfulKeys.length > 0) {
                 logger.debug('正在确认 CDN 上传结果');
                 if (!companion)
-                    await postCDNUploadCallback$1({ session: options.session, keys: successfulKeys, isFinished: true }, { baseUrl: runtime.baseUrl, fetchImpl });
+                    await postCDNUploadCallback({ session: options.session, keys: successfulKeys, isFinished: true }, { baseUrl: cdnBaseUrl, fetchImpl });
                 await recordUserMiniprogramUploadResult$1({
                     session: options.session,
                     miniProgramId: options.miniProgramId,
@@ -318,7 +286,7 @@ function createDefaultCosClient(uploadToken, COS) {
     };
 }
 async function loadCosConstructor() {
-    const cosModule = await Promise.resolve().then(function () { return require('./index-HUjK7vn8.cjs'); }).then(function (n) { return n.index; });
+    const cosModule = await Promise.resolve().then(function () { return require('./index-DJoBhXcG.cjs'); }).then(function (n) { return n.index; });
     return cosModule.default;
 }
 function formatSize(bytes) {
@@ -523,18 +491,18 @@ function isNodeError(error) {
     return error instanceof Error && 'code' in error;
 }
 
-/** 发布提示只比较显式声明与线上批准，不消费本地调试授权。 */
-function getUnapprovedPermissionWarning(local, approvals) {
+/** 发布提示使用显式声明与远端主体批准策略，不消费本地调试授权。 */
+function getUnapprovedPermissionWarning(local, approvals, partyType) {
     if (!local.declared)
         return undefined;
-    const { views } = runtimePermissionEnv.composeMiniappRuntimePermissions(local, approvals);
+    const { views } = runtimePermissionEnv.composeMiniappRuntimePermissions(local, approvals, partyType);
     const missing = [];
     for (const view of views) {
         if (!view.declared || view.access !== 'platform-approval')
             continue;
-        if (!view.approved)
+        if (!view.effective)
             missing.push(view.key);
-        if (view.key === 'network' && view.requestedConfig?.useOfficialDomain && !view.approvedConfig?.useOfficialDomain) {
+        if (view.key === 'network' && view.requestedConfig?.useOfficialDomain && !view.effectiveConfig?.useOfficialDomain) {
             missing.push('network.useOfficialDomain');
         }
     }
@@ -574,8 +542,8 @@ async function runDeployCommand(options, runtime = {}) {
     const miniProgramId = packageJson.heybox?.miniProgramId;
     const autoPublish = Boolean(options.autoPublish);
     const env = options.env ?? process.env;
-    const apiBaseUrl = session.resolveHeyboxApiBaseUrl({ ...options, env });
-    const loginBaseUrl = session.resolveHeyboxLoginBaseUrl({ ...options, env });
+    const apiBaseUrl = index.resolveHeyboxApiBaseUrl({ ...options, env });
+    const loginBaseUrl = index.resolveHeyboxLoginBaseUrl({ ...options, env });
     if (typeof miniProgramId !== 'string' || !miniProgramId.trim()) {
         throw new Error('未在 package.json 中找到 heybox.miniProgramId，请先配置 mini program id');
     }
@@ -584,7 +552,7 @@ async function runDeployCommand(options, runtime = {}) {
     const declaredBindAppIds = runtimePermissionEnv.readMiniappBindAppIdsFromPackageJson(projectRoot);
     const declaredCategory = runtimePermissionEnv.readMiniappCategoryFromPackageJson(projectRoot);
     const releaseNote = await resolveDeployReleaseNote(options, runtime);
-    const session$1 = await logger.task('正在校验 Heybox 登录态', () => (runtime.requireAuthSession ?? session.requireHeyboxAuthSession)({ loginBaseUrl }), { successText: 'Heybox 登录态有效' });
+    const session = await logger.task('正在校验 Heybox 登录态', () => (runtime.requireAuthSession ?? index.requireHeyboxAuthSession)({ loginBaseUrl }), { successText: 'Heybox 登录态有效' });
     logger.debug(`Heybox API: ${apiBaseUrl}`);
     const uploadVersion = validateVersionForDeploy(packageJson.version, 'package.json.version');
     const deploy = async () => {
@@ -599,7 +567,7 @@ async function runDeployCommand(options, runtime = {}) {
                     env,
                     fetchImpl: runtime.fetchImpl,
                     loginBaseUrl,
-                    session: session$1,
+                    session,
                 });
                 await context.migrateBasicInfo(projectRoot, bound.detail, miniProgramId, runtime.fetchImpl);
             }
@@ -609,7 +577,7 @@ async function runDeployCommand(options, runtime = {}) {
             }
             precheckVersion = uploadVersion;
             await runVersionPrecheck({
-                session: session$1,
+                session,
                 miniProgramId,
                 version: precheckVersion,
                 releaseNote,
@@ -624,11 +592,11 @@ async function runDeployCommand(options, runtime = {}) {
                     env,
                     fetchImpl: runtime.fetchImpl,
                     loginBaseUrl,
-                    session: session$1,
+                    session,
                 }), { successText: '已读取远端小程序权限' });
-                const localNetworkEnabled = !localPermissions.declared || localPermissions.permissions?.network?.enabled === true;
-                skipPlatformCsp = localNetworkEnabled && context.shouldSkipMiniappPlatformCsp(detail.runtime_permissions);
-                const permissionWarning = getUnapprovedPermissionWarning(localPermissions, detail.runtime_permissions);
+                const effectivePermissions = runtimePermissionEnv.composeMiniappRuntimePermissions(localPermissions, detail.runtime_permissions, detail.party_type).runtimePermissions;
+                skipPlatformCsp = context.shouldSkipMiniappPlatformCsp(effectivePermissions);
+                const permissionWarning = getUnapprovedPermissionWarning(localPermissions, detail.runtime_permissions, detail.party_type);
                 if (permissionWarning)
                     logger.warn(permissionWarning);
             }
@@ -675,7 +643,7 @@ async function runDeployCommand(options, runtime = {}) {
                 throw new Error('dist/manifest.json.bindAppIds 与 package.json#heybox.bindAppIds 不一致，请重新 build 后再 deploy');
             }
             await runVersionPrecheck({
-                session: session$1,
+                session,
                 miniProgramId,
                 version,
                 manifest,
@@ -703,6 +671,7 @@ async function runDeployCommand(options, runtime = {}) {
             // deploy 期间 dist 视为稳定构建输出；为避免持有大量文件描述符，签名和上传不会共享打开的文件句柄。
             const artifactReceipt = await logger.task('正在计算构建产物签名', () => (runtime.computeMiniappArtifactReceipt ?? computeMiniappArtifactReceipt)(uploadFiles), { successText: '构建产物签名计算完成' });
             runtimePermissionEnv.validateMiniappCompanionFileReceipts(manifest?.companions, artifactReceipt.files);
+            runtimePermissionEnv.validateMiniappWorkspaceCardFileReceipts(manifest?.workspaceCards, artifactReceipt.files);
             const profile = runtimePermissionEnv.parseMiniappBasicInfo(manifest, String(manifest.sdkVersion));
             if (profile) {
                 const localProfile = runtimePermissionEnv.parseMiniappBasicInfo((await readPackageJson(projectRoot)).heybox ?? {});
@@ -724,7 +693,7 @@ async function runDeployCommand(options, runtime = {}) {
             }
             const createdUploadSession = await logger.task('正在创建或恢复上传会话', async () => {
                 const result = await (runtime.createUserMiniprogramUploadSession ?? createUserMiniprogramUploadSession)({
-                    session: session$1,
+                    session,
                     miniProgramId,
                     version,
                     manifest,
@@ -770,7 +739,7 @@ async function runDeployCommand(options, runtime = {}) {
                 const uploadedCompanions = createdUploadSession.files.filter(item => item.file.relativePath.startsWith('companions/') && !missingKeys.has(item.key));
                 for (let index = 0; index < uploadedCompanions.length; index += runtimePermissionEnv.MINIAPP_UPLOAD_BATCH_SIZE) {
                     await (runtime.recordUserMiniprogramUploadResult ?? recordUserMiniprogramUploadResult)({
-                        session: session$1, miniProgramId, version, sessionId: uploadSessionId,
+                        session, miniProgramId, version, sessionId: uploadSessionId,
                         files: uploadedCompanions.slice(index, index + runtimePermissionEnv.MINIAPP_UPLOAD_BATCH_SIZE)
                             .map(({ file }) => ({ path: file.relativePath, size: file.size, sha256: file.sha256 })),
                     }, { baseUrl: apiBaseUrl, fetchImpl: runtime.fetchImpl });
@@ -784,12 +753,12 @@ async function runDeployCommand(options, runtime = {}) {
                         miniProgramId,
                     });
                     await (runtime.runUpload ?? runUpload)({
-                        session: session$1,
+                        session,
                         files: createdUploadSession.missingFiles.map(({ file, key }) => ({ ...file, key })),
                         miniProgramId,
                         version,
                         uploadSessionId,
-                    }, { baseUrl: apiBaseUrl, fetchImpl: runtime.fetchImpl, logger });
+                    }, { baseUrl: apiBaseUrl, cdnBaseUrl: index.HEYBOX_API_BASE_URL, fetchImpl: runtime.fetchImpl, logger });
                 }
             }
             catch (error) {
@@ -797,7 +766,7 @@ async function runDeployCommand(options, runtime = {}) {
             }
         }
         try {
-            const submitOptions = { session: session$1, miniProgramId, sessionId: uploadSessionId, preflightToken };
+            const submitOptions = { session, miniProgramId, sessionId: uploadSessionId, preflightToken };
             submitAuditResult = await logger.task('正在提交审核', () => (runtime.submitUserMiniprogramAudit ?? submitUserMiniprogramAudit)(submitOptions, {
                 baseUrl: apiBaseUrl,
                 fetchImpl: runtime.fetchImpl,
@@ -881,6 +850,10 @@ async function readDeployManifest(projectRoot, logger) {
         logger.warn('dist/manifest.json 包含 BOM，已自动剥离');
     }
     const validated = runtimePermissionEnv.validateMiniappManifestForDeploy(manifest);
+    if (validated.workspaceCards) {
+        runtimeGate.verifyWorkspaceCardsSnapshot({ ...validated, bindAppIds: validated.bindAppIds ?? [], workspaceCards: validated.workspaceCards });
+        runtimeGate.verifyWorkspaceCardArtifacts(distDir, validated.workspaceCards);
+    }
     const bindAppIds = validated.bindAppIds ?? [];
     return {
         manifest: {
@@ -1200,7 +1173,7 @@ async function runRemoteDeployCommand(options, runtime) {
     return finishRemoteCommand(options, runtime, output);
 }
 async function createRemoteCommandContext(options, runtime) {
-    index.applyServiceTagIfNeeded(options.serviceTag);
+    index.applyMiniProgramServiceTagIfNeeded(options.serviceTag);
     const logger = resolveRemoteLogger(options, runtime);
     const environment = await context.resolveRemoteEnvironment({
         allowUnsafeApiBaseUrl: options.allowUnsafeApiBaseUrl,
@@ -1320,7 +1293,7 @@ async function remoteEntitySwitch(options, context, runtime) {
         throw new Error('远端响应缺少 entity_id');
     }
     const switchedOwnerHeyboxId = normalizePositiveInteger(switched.owner_heybox_id);
-    await session.setSelectedDeveloperEntitySnapshot({
+    await index.setSelectedDeveloperEntitySnapshot({
         entityId: switchedEntityId,
         entityName: switched.entity_name || '--',
         ...(switchedOwnerHeyboxId !== undefined ? { ownerHeyboxId: switchedOwnerHeyboxId } : {}),
@@ -1401,7 +1374,7 @@ async function remoteInfo(options, context$1, runtime) {
     const miniProgramId = requireBinding(context$1);
     const detail = await context$1.api.getMiniProgramDetail(miniProgramId);
     const localPermissions = runtimePermissionEnv.readMiniappPermissionsFromPackageJson(context$1.packageJson.projectRoot, runtimePermissionEnv.resolveMiniappSdkVersion());
-    const permissionViews = runtimePermissionEnv.composeMiniappRuntimePermissions(localPermissions, detail.runtime_permissions).views;
+    const permissionViews = runtimePermissionEnv.composeMiniappRuntimePermissions(localPermissions, detail.runtime_permissions, detail.party_type).views;
     const localBindAppIds = runtimePermissionEnv.readMiniappBindAppIdsFromPackageJson(context$1.packageJson.projectRoot);
     const currentBindApps = normalizeRemoteBoundApps(detail.bind_apps);
     const currentByID = new Map(currentBindApps.map((item) => [item.appid, item]));
@@ -1455,24 +1428,30 @@ async function remoteAllowlistWrite(options, context, runtime) {
 async function remotePermissionList(options, context, runtime) {
     const miniProgramId = requireBinding(context);
     const result = await context.api.listPermissionApplications(miniProgramId);
+    const detail = await context.api.getMiniProgramDetail(miniProgramId);
+    const localPermissions = runtimePermissionEnv.readMiniappPermissionsFromPackageJson(context.packageJson.projectRoot, runtimePermissionEnv.resolveMiniappSdkVersion());
+    const { views } = runtimePermissionEnv.composeMiniappRuntimePermissions(localPermissions, result.runtime_permissions, detail.party_type);
     if (!options.json) {
-        for (const item of result.items) {
-            const application = item.latest_application;
-            const approval = result.runtime_permissions?.entries?.find(entry => entry.key === item.permission_key);
-            context.logger.info(`${item.permission_key} (${item.permission_name})  平台状态=${approval?.status ?? 'disabled'}  最近申请=${application?.status ?? '未申请'}`);
+        for (const view of views.filter(entry => entry.access === 'platform-approval')) {
+            const item = result.items.find(entry => entry.permission_key === view.key);
+            const application = item?.latest_application;
+            const name = item?.permission_name ?? runtimePermissionEnv.MINI_PROGRAM_PERMISSION_CATALOG.find(entry => entry.key === view.key)?.name ?? view.key;
+            const approval = result.runtime_permissions?.entries?.find(entry => entry.key === view.key);
+            const source = view.approvalSource === 'first-party' ? '  批准来源=第一方自动批准' : '';
+            context.logger.info(`${view.key} (${name})  原始审批=${approval?.status ?? 'disabled'}${source}  本地生效=${view.effective ? 'enabled' : 'disabled'}  最近申请=${application?.status ?? '未申请'}`);
             if (application?.application_id)
                 context.logger.info(`申请 ID：${application.application_id}`);
             if (application?.review_remark)
                 context.logger.info(`审核意见：${application.review_remark}`);
         }
     }
-    return finishRemoteCommand(options, runtime, { changed: false, miniProgramId, items: toCamelCaseDeep(result.items), runtimePermissions: toCamelCaseDeep(result.runtime_permissions) });
+    return finishRemoteCommand(options, runtime, { changed: false, miniProgramId, items: toCamelCaseDeep(result.items), runtimePermissions: toCamelCaseDeep(result.runtime_permissions), permissions: views });
 }
 async function remotePermissionApply(options, context, runtime) {
     const miniProgramId = requireBinding(context);
-    const key = requireNonEmpty(options.key, '请指定申请权限 network 或 companion');
-    if (key !== 'network' && key !== 'companion')
-        throw new Error('仅支持申请 network 或 companion 权限');
+    const key = requireNonEmpty(options.key, '请指定申请权限 network、companion 或 appProtocol');
+    if (key !== 'network' && key !== 'companion' && key !== 'appProtocol')
+        throw new Error('仅支持申请 network、companion 或 appProtocol 权限');
     const reason = requireNonEmpty(options.reason, '权限申请必须传 --reason');
     if (Array.from(reason).length > 500)
         throw new Error('申请理由不能超过 500 字');
@@ -1594,7 +1573,7 @@ async function remoteDangerousWrite(options, context, runtime) {
         status: detail.status,
         version,
         permissionWarning: options.command === 'release'
-            ? getUnapprovedPermissionWarning(runtimePermissionEnv.readMiniappPermissionsFromPackageJson(context.packageJson.projectRoot, runtimePermissionEnv.resolveMiniappSdkVersion()), detail.runtime_permissions)
+            ? getUnapprovedPermissionWarning(runtimePermissionEnv.readMiniappPermissionsFromPackageJson(context.packageJson.projectRoot, runtimePermissionEnv.resolveMiniappSdkVersion()), detail.runtime_permissions, detail.party_type)
             : undefined,
     });
     if (options.command === 'release') {
@@ -1975,7 +1954,9 @@ function printMiniProgramDetail(logger, detail, permissionViews, bindings) {
     }
     logger.info('权限:');
     for (const view of permissionViews) {
-        const approval = view.access === 'platform-approval' ? ` 需申请=是 批准=${view.approved ? '是' : '否'}` : ' 需申请=否';
+        const approval = view.approvalSource === 'first-party'
+            ? ` 需申请=否 批准来源=第一方自动批准 原始批准=${view.approved ? '是' : '否'}`
+            : view.access === 'platform-approval' ? ` 需申请=是 批准=${view.approved ? '是' : '否'}` : ' 需申请=否';
         const configs = view.requestedConfig
             ? ` requested=${JSON.stringify(view.requestedConfig)} approved=${JSON.stringify(view.approvedConfig)} effective=${JSON.stringify(view.effectiveConfig)}`
             : '';