@heybox/hb-sdk 0.9.5-alpha.1 → 0.9.5-alpha.2

package/dist/devtools/browser-dev-host/index.html

@@ -5,8 +5,8 @@
     <meta name="viewport" content="width=device-width, initial-scale=1.0" />
     <meta name="theme-color" content="#f4f5f7" />
     <title>小程序工坊调试台</title>
-    <script type="module" crossorigin src="/assets/index-Bn6Xr40h.js"></script>
-    <link rel="modulepreload" crossorigin href="/assets/desktop-app-launch-BXS6eaj9.js">
+    <script type="module" crossorigin src="/assets/index-CmITJMxu.js"></script>
+    <link rel="modulepreload" crossorigin href="/assets/desktop-app-launch-DlaXmxAI.js">
     <link rel="stylesheet" crossorigin href="/assets/index-h-fYisyX.css">
   </head>
   <body>

package/dist/index.cjs.js

@@ -7492,7 +7492,7 @@ function createMessageId() {
 /** 构建时替换为当前发布包的实际版本。 */
 const HB_SDK_VERSION = typeof undefined === 'string'
     ? undefined
-    : '0.9.5-alpha.1';
+    : '0.9.5-alpha.2';
 
 const RUNTIME_MODES = new Set(['production', 'preview', 'development', 'unknown']);
 const OPERATING_SYSTEM_NAMES = new Set(['android', 'ios', 'ohos', 'windows', 'macos', 'linux', 'unknown']);

package/dist/index.esm.js

@@ -7488,7 +7488,7 @@ function createMessageId() {
 /** 构建时替换为当前发布包的实际版本。 */
 const HB_SDK_VERSION = typeof undefined === 'string'
     ? undefined
-    : '0.9.5-alpha.1';
+    : '0.9.5-alpha.2';
 
 const RUNTIME_MODES = new Set(['production', 'preview', 'development', 'unknown']);
 const OPERATING_SYSTEM_NAMES = new Set(['android', 'ios', 'ohos', 'windows', 'macos', 'linux', 'unknown']);

package/dist/vite.cjs.js

@@ -10329,7 +10329,7 @@ async function ensureBasicInfoDirectory(rootPath, relative) {
 /** 构建时替换为当前发布包的实际版本。 */
 const HB_SDK_VERSION = typeof undefined === 'string'
     ? undefined
-    : '0.9.5-alpha.1';
+    : '0.9.5-alpha.2';
 
 /**
  * iframe 与调试台页面的开发期 console 捕获转发。

package/dist/vite.esm.js

@@ -10326,7 +10326,7 @@ async function ensureBasicInfoDirectory(rootPath, relative) {
 /** 构建时替换为当前发布包的实际版本。 */
 const HB_SDK_VERSION = typeof undefined === 'string'
     ? undefined
-    : '0.9.5-alpha.1';
+    : '0.9.5-alpha.2';
 
 /**
  * iframe 与调试台页面的开发期 console 捕获转发。

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@heybox/hb-sdk",
-  "version": "0.9.5-alpha.1",
+  "version": "0.9.5-alpha.2",
   "sideEffects": [
     "./src/index.ts",
     "./src/core/singleton.ts",
@@ -76,7 +76,7 @@
     "undici": "^7.28.0",
     "ws": "^8.18.0",
     "sharp": "^0.34.5",
-    "@heybox/hb-sdk-protocol": "0.9.5-alpha.1"
+    "@heybox/hb-sdk-protocol": "0.9.5-alpha.2"
   },
   "peerDependencies": {
     "vite": ">=5"
@@ -129,9 +129,9 @@
     "@ai-desktop/view-contract": "file:../hb-sdk-protocol/vendor/view-contract-2.2.2-6ac49bbf6410.tgz",
     "rollup-plugin-dts": "6.4.0",
     "@heybox-domain/heybox-theme": "~0.1.0",
-    "@heybox-domain/heybox-vue3-ui": "~0.1.0",
     "@heybox/hb-api": "~1.28.19",
-    "@heybox/hb-sdk-runtime": "~0.9.5-alpha.1",
+    "@heybox-domain/heybox-vue3-ui": "~0.1.0",
+    "@heybox/hb-sdk-runtime": "~0.9.5-alpha.2",
     "@heybox/runtime": "~0.2.1",
     "@heybox/runtime-policy": "~0.2.1",
     "@heybox/runtime-transport-fetch": "~0.2.1"
@@ -202,7 +202,7 @@
     "changelog:draft": "node scripts/changelog-draft.cjs",
     "check:changelog": "node scripts/check-changelog.cjs",
     "release:verify-tarball": "node scripts/skill/verify-tarball-install.mjs",
-    "test:release": "node --test scripts/public-changelog.test.mjs scripts/public-changelog-workflow.test.cjs scripts/release-family.test.cjs ../../ops/jobs/publish-changed-packages/publish.test.cjs",
+    "test:release": "node --test scripts/release-notices.test.cjs scripts/public-changelog.test.mjs scripts/public-changelog-workflow.test.cjs scripts/release-family.test.cjs ../../ops/jobs/publish-changed-packages/publish.test.cjs ../../ops/jobs/release-hb-sdk/notify-release.test.cjs",
     "test:compatibility-evidence": "node --test scripts/validate-compatibility-evidence.test.mjs",
     "release:prepare": "node scripts/release-prepare.cjs",
     "release:tag": "node scripts/release-tag.cjs",

package/skill/SKILL.md

@@ -40,6 +40,8 @@ Before giving hb-sdk-specific guidance or changing hb-sdk consumer code:
 3. Use the index titles and summaries to select the smallest relevant set of linked pages; do not guess page URLs.
 4. Resolve relative links against `https://docs.xiaoheihe.cn/hb_sdk/`, fetch those Markdown pages, and verify their responses before acting.
 5. Check the project's installed `@heybox/hb-sdk` version. If it may differ from the live documentation, read the compatibility and changelog pages linked by the index before recommending an API or CLI command.
+6. For proactive SDK update reminders, read the single approved CDN notice at `https://activity.xiaoheihe.cn/u/hb-sdk/approved-notice.json`. The indexed `Release notices` document is manually authored; it is not approval status. Match notices to the installed version and APIs used; link the applicable Changelog details. An empty or unavailable CDN document must not be represented as an approved announcement. Changelog remains the source for API facts and compatibility checks.
+7. When the task upgrades the SDK, prepares a build, or deploys or publishes a mini-program, read the changelog entries for every stable version after the installed version up to the target version, and check each `必须操作` item first. Decide whether it applies from the APIs, permissions, platforms, and CLI workflows the project actually uses; read the linked guide or migration page before changing code, then verify the change. Report applicable items that remain unhandled instead of skipping them silently.
 
 Do not use copied package references, an installed Skill snapshot, registry contents, remembered API shapes, or HTML documentation as a fallback. If the index or any required linked Markdown page is unavailable or invalid, report that the canonical hb-sdk documentation is unavailable and stop the hb-sdk-specific part of the task.
 

package/skill/skill.json

@@ -1,16 +1,16 @@
 {
   "name": "hb-sdk",
-  "skillVersion": "0.9.5-alpha.1+skill.9d53003cddda",
+  "skillVersion": "0.9.5-alpha.2+skill.fe3b525ecac8",
   "sdk": {
     "package": "@heybox/hb-sdk",
-    "version": "0.9.5-alpha.1",
-    "compatibility": "0.9.5-alpha.1"
+    "version": "0.9.5-alpha.2",
+    "compatibility": "0.9.5-alpha.2"
   },
   "distribution": {
     "type": "npm",
     "package": "@heybox/hb-sdk",
-    "version": "0.9.5-alpha.1",
+    "version": "0.9.5-alpha.2",
     "path": "skill"
   },
-  "integrity": "sha256-9d53003cdddae5f685637c310e8fd896a71a0cb883e08700d43bea7338e33c13"
+  "integrity": "sha256-fe3b525ecac8431e1774ee453864cf9ba58ff6897272e2356ceb17b621c8c427"
 }

package/dist/cli-chunks/deploy-lock-CpdL3s9E.cjs

@@ -1,148 +0,0 @@
-'use strict';
-
-var node_crypto = require('node:crypto');
-var fs = require('node:fs/promises');
-var path = require('node:path');
-var index = require('./index-xZw-b2po.cjs');
-
-const DEPLOY_LOCKED_MESSAGE = '当前设备已有同版本产物正在上传，请等待完成后重试';
-const DEPLOY_LOCK_DIRECTORY_NAME = 'deploy-locks';
-const DEPLOY_LOCK_OWNER_FILE = 'owner.json';
-const INCOMPLETE_LOCK_GRACE_MS = 30_000;
-const defaultPaths = index.envPaths('hb-sdk', { suffix: '' });
-class DeployLockConflictError extends Error {
-}
-async function withDeployLock(scope, operation, options = {}) {
-    let lock;
-    try {
-        lock = await acquireDeployLock(scope, options);
-    }
-    catch (error) {
-        if (error instanceof DeployLockConflictError) {
-            throw error;
-        }
-        // 本地文件锁只减少重复操作，文件系统异常不阻断服务端上传流程。
-        return operation();
-    }
-    try {
-        return await operation();
-    }
-    finally {
-        await lock.release().catch(() => undefined);
-    }
-}
-async function acquireDeployLock(scope, options = {}) {
-    const lockDirectory = getDeployLockDirectory(scope, options.cacheRoot);
-    const ownerFile = path.join(lockDirectory, DEPLOY_LOCK_OWNER_FILE);
-    const owner = {
-        version: 1,
-        pid: options.pid ?? process.pid,
-        token: options.token ?? node_crypto.randomBytes(16).toString('hex'),
-    };
-    await fs.mkdir(path.dirname(lockDirectory), { recursive: true, mode: 0o700 });
-    for (let attempt = 0; attempt < 2; attempt += 1) {
-        let created = false;
-        try {
-            await fs.mkdir(lockDirectory, { mode: 0o700 });
-            created = true;
-            await fs.writeFile(ownerFile, `${JSON.stringify(owner)}\n`, { encoding: 'utf8', mode: 0o600 });
-            return createDeployLock(lockDirectory, ownerFile, owner.token);
-        }
-        catch (error) {
-            if (created) {
-                await fs.rm(lockDirectory, { force: true, recursive: true });
-                throw error;
-            }
-            if (!isNodeError(error) || error.code !== 'EEXIST') {
-                throw error;
-            }
-            if (!(await canReclaimDeployLock(lockDirectory, ownerFile, options))) {
-                throw new DeployLockConflictError(DEPLOY_LOCKED_MESSAGE);
-            }
-            await reclaimDeployLock(lockDirectory, owner.token);
-        }
-    }
-    throw new DeployLockConflictError(DEPLOY_LOCKED_MESSAGE);
-}
-function getDeployLockDirectory(scope, cacheRoot = defaultPaths.cache) {
-    const scopeHash = node_crypto.createHash('sha256').update(`${scope.apiBaseUrl}\0${scope.miniProgramId}\0${scope.version}`).digest('hex');
-    return path.join(cacheRoot, DEPLOY_LOCK_DIRECTORY_NAME, scopeHash);
-}
-function createDeployLock(lockDirectory, ownerFile, token) {
-    let released = false;
-    return {
-        async release() {
-            if (released)
-                return;
-            released = true;
-            await removeOwnedLock(lockDirectory, ownerFile, token);
-        },
-    };
-}
-async function canReclaimDeployLock(lockDirectory, ownerFile, options) {
-    const owner = await readDeployLockOwner(ownerFile);
-    if (owner) {
-        return !(options.isProcessRunning ?? isProcessRunning)(owner.pid);
-    }
-    try {
-        const lockStat = await fs.stat(lockDirectory);
-        return (options.now ?? Date.now)() - lockStat.mtimeMs >= INCOMPLETE_LOCK_GRACE_MS;
-    }
-    catch (error) {
-        return isNodeError(error) && error.code === 'ENOENT';
-    }
-}
-async function removeOwnedLock(lockDirectory, ownerFile, token) {
-    const owner = await readDeployLockOwner(ownerFile);
-    if (owner?.token === token) {
-        await fs.rm(lockDirectory, { force: true, recursive: true });
-    }
-}
-async function reclaimDeployLock(lockDirectory, token) {
-    const reclaimDirectory = `${lockDirectory}.reclaim-${node_crypto.createHash('sha256').update(token).digest('hex')}`;
-    try {
-        await fs.rename(lockDirectory, reclaimDirectory);
-    }
-    catch (error) {
-        if (isNodeError(error) && error.code === 'ENOENT')
-            return;
-        throw error;
-    }
-    await fs.rm(reclaimDirectory, { force: true, recursive: true });
-}
-async function readDeployLockOwner(ownerFile) {
-    try {
-        const value = JSON.parse(await fs.readFile(ownerFile, 'utf8'));
-        return isDeployLockOwner(value) ? value : null;
-    }
-    catch (error) {
-        if (isNodeError(error) && error.code === 'ENOENT')
-            return null;
-        if (error instanceof SyntaxError)
-            return null;
-        throw error;
-    }
-}
-function isDeployLockOwner(value) {
-    return (typeof value === 'object' &&
-        value !== null &&
-        value.version === 1 &&
-        Number.isInteger(value.pid) &&
-        typeof value.token === 'string');
-}
-function isProcessRunning(pid) {
-    try {
-        process.kill(pid, 0);
-        return true;
-    }
-    catch (error) {
-        return !isNodeError(error) || error.code !== 'ESRCH';
-    }
-}
-function isNodeError(error) {
-    return error instanceof Error && 'code' in error;
-}
-
-exports.DEPLOY_LOCKED_MESSAGE = DEPLOY_LOCKED_MESSAGE;
-exports.acquireDeployLock = acquireDeployLock;
-exports.withDeployLock = withDeployLock;