@heybox/hb-sdk 0.9.1-alpha.4 → 0.9.1-alpha.6

package/dist/cli-chunks/{dev-X8_kbp78.cjs → dev-BMX6UXUe.cjs}

@@ -1,10 +1,10 @@
 'use strict';
 
-var session = require('./session-Dz1cGg0E.cjs');
-var context = require('./context-YrzmEOau.cjs');
+var index = require('./index-J4uQvKT_.cjs');
+var context = require('./context-Bo4L-Cx_.cjs');
 var node_crypto = require('node:crypto');
 var fs = require('node:fs');
-var runtimePermissionEnv = require('./runtime-permission-env-eiq8vE62.cjs');
+var runtimePermissionEnv = require('./runtime-permission-env-DWaPlchd.cjs');
 var os = require('node:os');
 var path = require('node:path');
 var net = require('node:net');
@@ -13,12 +13,11 @@ var node_http = require('node:http');
 var node_module = require('node:module');
 var undici = require('undici');
 var fs$1 = require('node:fs/promises');
-var index = require('./index-BGh-Izf8.cjs');
 var require$$0$1 = require('crypto');
 var require$$0 = require('buffer');
-var browser = require('./browser-RAy8e8cV.cjs');
-var projectVite = require('./project-vite-BVDIeoHB.cjs');
-var version = require('./version-DYFkOykv.cjs');
+var browser = require('./browser-DUdEZCyq.cjs');
+var projectVite = require('./project-vite-Du1m7Y_3.cjs');
+var version = require('./version-tzrFwpkl.cjs');
 require('node:zlib');
 
 var _documentCurrentScript = typeof document !== 'undefined' ? document.currentScript : null;
@@ -1993,8 +1992,8 @@ const DEFAULT_CHANNEL_TRANSPORT = {
 };
 const IPV4_LOOPBACK_ADDRESSES = new net.BlockList();
 IPV4_LOOPBACK_ADDRESSES.addSubnet('127.0.0.0', 8, 'ipv4');
-const { WebSocket, WebSocketServer } = node_module.createRequire((typeof document === 'undefined' ? require('u' + 'rl').pathToFileURL(__filename).href : (_documentCurrentScript && _documentCurrentScript.tagName.toUpperCase() === 'SCRIPT' && _documentCurrentScript.src || new URL('cli-chunks/dev-X8_kbp78.cjs', document.baseURI).href)))('ws');
-const { parse: parseHtml } = node_module.createRequire((typeof document === 'undefined' ? require('u' + 'rl').pathToFileURL(__filename).href : (_documentCurrentScript && _documentCurrentScript.tagName.toUpperCase() === 'SCRIPT' && _documentCurrentScript.src || new URL('cli-chunks/dev-X8_kbp78.cjs', document.baseURI).href)))('parse5');
+const { WebSocket, WebSocketServer } = node_module.createRequire((typeof document === 'undefined' ? require('u' + 'rl').pathToFileURL(__filename).href : (_documentCurrentScript && _documentCurrentScript.tagName.toUpperCase() === 'SCRIPT' && _documentCurrentScript.src || new URL('cli-chunks/dev-BMX6UXUe.cjs', document.baseURI).href)))('ws');
+const { parse: parseHtml } = node_module.createRequire((typeof document === 'undefined' ? require('u' + 'rl').pathToFileURL(__filename).href : (_documentCurrentScript && _documentCurrentScript.tagName.toUpperCase() === 'SCRIPT' && _documentCurrentScript.src || new URL('cli-chunks/dev-BMX6UXUe.cjs', document.baseURI).href)))('parse5');
 const BROWSER_DEV_HOST_ROOT_CANDIDATES = [
     path.resolve(__dirname, 'devtools/browser-dev-host'),
     path.resolve(__dirname, '../devtools/browser-dev-host'),
@@ -2023,10 +2022,12 @@ async function startBrowserDevHostServer(options) {
         csrfToken: sessionController.csrfToken,
         defaultLanAddressId: options.defaultLanAddressId,
         devContext: options.devContext,
+        devSessionId: options.devSessionId,
         lanAddresses: options.lanAddresses ?? [],
         loginAvailable: options.loginService !== undefined,
         miniProgram: options.miniProgram,
         miniProgramSupportsDesktop: options.miniProgramSupportsDesktop,
+        workspaceCardsEnabled: options.workspaceCardsEnabled === true,
         mobileLaunchRedirect: initialMobileLaunchRedirect,
         nativeAppLaunchUnavailableReason: options.nativeAppLaunchUnavailableReason,
         miniProgramManifestAccessToken: options.miniProgramManifestAccessToken,
@@ -2118,6 +2119,8 @@ async function startBrowserDevHostServer(options) {
                 bootstrap.miniProgram = next.miniProgram;
             if (next.miniProgramSupportsDesktop !== undefined)
                 bootstrap.miniProgramSupportsDesktop = next.miniProgramSupportsDesktop;
+            if (next.workspaceCardsEnabled !== undefined)
+                bootstrap.workspaceCardsEnabled = next.workspaceCardsEnabled;
             bootstrapJson = serializeBrowserDevHostBootstrap(bootstrap);
         },
         networkUrls: createBrowserDevHostNetworkUrls({
@@ -11090,7 +11093,7 @@ function assertNodeRuntimeCapabilities(ctx, settings) {
 function createNodeRealtimeDriverRegistry() {
     const registry = createRuntimeRealtimeDriverRegistry();
     registry.registerLazy('node-websocket', async () => {
-        const mod = await Promise.resolve().then(function () { return require('./index.esm-WYIrPjkF.cjs'); });
+        const mod = await Promise.resolve().then(function () { return require('./index.esm-eNPTDv6W.cjs'); });
         return mod.createNodeWebSocketRuntimeDriver();
     });
     return registry;
@@ -14901,7 +14904,7 @@ function createBrowserDevHostCliAuth(options = {}) {
     const fetchImpl = options.fetchImpl ?? fetch;
     const noRedirectFetch = (input, init) => fetchImpl(input, { ...init, redirect: 'manual' });
     const store = options.store ?? { env: options.env };
-    const readSession = options.readSession ?? (() => session.readHeyboxAuthSession(store));
+    const readSession = options.readSession ?? (() => index.readHeyboxAuthSession(store));
     let lastKey = '';
     let revision = 0;
     let profileKey = '';
@@ -15402,6 +15405,9 @@ function writeResponse(response, status, body) {
     response.end(body === undefined ? '' : JSON.stringify(body));
 }
 
+const WORKSPACE_CARD_LOCAL_DEV_DESCRIPTOR_PATH = '/__hb_sdk__/mini-program/workspace-cards.json';
+const WORKSPACE_CARD_LOCAL_DEV_MANIFEST_TOKEN_HEADER = 'x-hb-sdk-mini-program-manifest-token';
+
 const DEFAULT_APP_PORT = 5173;
 const DEFAULT_BROWSER_DEV_HOST_PORT = 5174;
 const DEFAULT_DEV_CONTEXT_TIMEOUT_MS = 3000;
@@ -15575,6 +15581,7 @@ async function runDevCommand(options, runtime = {}) {
         port: appPort,
     };
     const projectRoot = projectVite.findProjectRoot(runtime.cwd ?? process.cwd());
+    const workspaceCardsDeclared = runtimePermissionEnv.readMiniappWorkspaceCardsFromPackageJson(projectRoot).declaration !== undefined;
     const companionArtifactAccessToken = (runtime.randomBytes ?? node_crypto.randomBytes)(32).toString('base64url');
     const miniProgramManifestAccessToken = (runtime.randomBytes ?? node_crypto.randomBytes)(32).toString('base64url');
     const devSessionId = node_crypto.randomBytes(16).toString('hex');
@@ -15700,6 +15707,42 @@ async function runDevCommand(options, runtime = {}) {
         readContextPath: () => devContextPath,
     });
     const launchPlugin = createMiniProgramDevLaunchVitePlugin(readLaunchSource, async (request, response) => {
+        if (request.url === WORKSPACE_CARD_LOCAL_DEV_DESCRIPTOR_PATH) {
+            response.setHeader('Cache-Control', 'no-store');
+            response.setHeader('X-Content-Type-Options', 'nosniff');
+            if (request.method !== 'GET' && request.method !== 'HEAD') {
+                response.writeHead(405, { Allow: 'GET, HEAD' }).end();
+                return true;
+            }
+            const remote = request.socket.remoteAddress;
+            const host = request.headers.host ?? '';
+            const token = request.headers[WORKSPACE_CARD_LOCAL_DEV_MANIFEST_TOKEN_HEADER];
+            const candidate = Buffer.alloc(43);
+            if (typeof token === 'string')
+                Buffer.from(token).copy(candidate, 0, 0, candidate.length);
+            const tokenMatches = node_crypto.timingSafeEqual(candidate, Buffer.from(miniProgramManifestAccessToken));
+            if (!tokenMatches || typeof token !== 'string' || !/^[A-Za-z0-9_-]{43}$/.test(token) ||
+                !['127.0.0.1', '::1', '::ffff:127.0.0.1'].includes(remote ?? '') ||
+                !/^127\.0\.0\.1:\d{1,5}$/.test(host)) {
+                response.writeHead(403).end();
+                return true;
+            }
+            const source = readLaunchSource();
+            if (!source.miniProgramId || !source.localDevLaunchToken || !source.devSessionId || !source.expiresAt) {
+                response.writeHead(503).end();
+                return true;
+            }
+            const body = JSON.stringify({
+                schema_version: 1,
+                mini_program_id: source.miniProgramId,
+                local_dev_launch_token: source.localDevLaunchToken,
+                dev_session_id: source.devSessionId,
+                expires_at_ms: source.expiresAt,
+            });
+            response.writeHead(200, { 'Content-Type': 'application/json; charset=utf-8', 'Content-Length': Buffer.byteLength(body) });
+            response.end(request.method === 'HEAD' ? undefined : body);
+            return true;
+        }
         if (await networkProxy.handle(request, response))
             return true;
         if (request.url !== MINI_PROGRAM_DEV_LAUNCH_PATH || request.headers[COMPANION_ARTIFACT_ACCESS_TOKEN_HEADER] === undefined)
@@ -15766,8 +15809,9 @@ async function runDevCommand(options, runtime = {}) {
     let browserDevHost;
     try {
         browserDevHost = await runDevStartupTask(logger, '正在启动浏览器调试页服务', () => startBrowserDevHostServer({
-            openPlatformBaseUrl: session.resolveHeyboxOpenPlatformBaseUrl(runtime.env),
+            openPlatformBaseUrl: index.resolveHeyboxOpenPlatformBaseUrl(runtime.env),
             appUrl,
+            devSessionId,
             devContext: currentDevContext,
             fetchImpl,
             getPort: getPortImpl,
@@ -15779,6 +15823,7 @@ async function runDevCommand(options, runtime = {}) {
             miniProgram,
             // 只在项目声明了桌面平台时向调试台暴露「在桌面端打开」入口。
             miniProgramSupportsDesktop: runtimePermissionEnv.hasMiniappDesktopPlatform(miniProgramPlatforms),
+            workspaceCardsEnabled: workspaceCardsDeclared,
             cliAuth: runtime.cliAuth ?? createBrowserDevHostCliAuth({ env: runtime.env, fetchImpl }),
             onMobileDevSessionCreated: ({ devContextUrl, miniUrlOrigin }) => {
                 mobileDevContextUrlsByOrigin.set(miniUrlOrigin, devContextUrl);
@@ -15989,7 +16034,7 @@ async function loadDevLaunchContext(options) {
     const anonymous = (warning) => ({ context: { source: 'anonymous', warning,
             declaredPermissions: localPermissions.permissions ?? {}, platforms,
             runtimePermissions: runtimePermissionEnv.composeMiniappRuntimePermissions(localPermissions, undefined).runtimePermissions }, miniProgram: null });
-    if (!(await session.readHeyboxAuthSession({ env: options.env })))
+    if (!(await index.readHeyboxAuthSession({ env: options.env })))
         return anonymous('尚未登录 CLI，真实手机和 PC 调试不可用');
     const miniProgramId = await context.readBoundMiniProgramId(options.projectRoot);
     if (!miniProgramId)

package/dist/cli-chunks/{doctor-DdiucYs9.cjs → doctor-DqEYRo4I.cjs}

@@ -3,19 +3,26 @@
 var fs = require('node:fs/promises');
 var os = require('node:os');
 var path = require('node:path');
-var index = require('./index-BGh-Izf8.cjs');
+var index = require('./index-J4uQvKT_.cjs');
 require('node:module');
-require('node:fs');
 require('path');
 require('os');
-require('node:crypto');
+require('fs');
+require('constants');
+require('stream');
+require('util');
+require('assert');
 require('readline');
 require('tty');
-require('assert');
 require('events');
-require('stream');
 require('buffer');
-require('util');
+require('node:crypto');
+require('node:process');
+require('node:buffer');
+require('node:url');
+require('node:util');
+require('node:child_process');
+require('node:fs');
 
 const CANDIDATES = [
     path.resolve(__dirname, '..', 'package.json'),

package/dist/cli-chunks/{index-BdbwsefW.cjs → index-DmCWB_hF.cjs}

@@ -1,13 +1,13 @@
 'use strict';
 
-var index$2 = require('./index-BGh-Izf8.cjs');
+var index$2 = require('./index-J4uQvKT_.cjs');
 var require$$0$3 = require('fs');
 var require$$0$2 = require('crypto');
 var require$$1$2 = require('path');
 var require$$0$5 = require('assert');
 var require$$0$4 = require('events');
 var require$$1$1 = require('util');
-var runtimePermissionEnv = require('./runtime-permission-env-eiq8vE62.cjs');
+var runtimePermissionEnv = require('./runtime-permission-env-DWaPlchd.cjs');
 var require$$0$7 = require('net');
 var require$$0$6 = require('url');
 var require$$2$1 = require('http');
@@ -16,6 +16,7 @@ var require$$0$8 = require('stream');
 var require$$0$a = require('zlib');
 var require$$1$3 = require('querystring');
 var require$$0$9 = require('buffer');
+var runtimeGate = require('./runtime-gate-DedD3ynE.cjs');
 var require$$4$3 = require('tls');
 
 function _mergeNamespaces(n, m) {
@@ -20756,10 +20757,6 @@ function requireEc () {
 	return ec;
 }
 
-function commonjsRequire(path) {
-	throw new Error('Could not dynamically require "' + path + '". Please configure the dynamicRequireTargets or/and ignoreDynamicRequires option of @rollup/plugin-commonjs appropriately for this require call to work.');
-}
-
 var naclFast = {exports: {}};
 
 var hasRequiredNaclFast;
@@ -23141,7 +23138,7 @@ function requireNaclFast () {
 		      for (i = 0; i < n; i++) x[i] = v[i];
 		      cleanup(v);
 		    });
-		  } else if (typeof commonjsRequire !== 'undefined') {
+		  } else if (typeof runtimeGate.commonjsRequire !== 'undefined') {
 		    // Node.js.
 		    crypto = require$$0$2;
 		    if (crypto && crypto.randomBytes) {