@open-wxa/wxa-runner-core 0.6.0 → 0.7.0

package/dist/index.d.mts

@@ -1,7 +1,7 @@
 import { ResolvedBaseLib } from '@open-wxa/wxa-runner-extractor';
-import { D as DeviceProfile } from './setup-Cv340Lvj.mjs';
-export { A as ApiContext, a as ApiHandler, b as ApiResult, c as AppInfo, M as MockConfig, d as MockRequest, e as MockResponse, f as MockValue, N as NetworkConfig, R as RouteHandler, S as SetupApi, g as SetupConfig, h as SetupContext, i as SetupDefinition } from './setup-Cv340Lvj.mjs';
-export { F as FrameError, P as PageSnapshot, R as RecordedRequest, W as WxaTestApi } from './testApi-DO2FyR78.mjs';
+import { D as DeviceProfile } from './setup-DZ5FeKay.mjs';
+export { A as ApiContext, a as ApiHandler, b as ApiResult, c as AppInfo, M as MockConfig, d as MockRequest, e as MockResponse, f as MockValue, N as NetworkConfig, R as RouteHandler, S as SetupApi, g as SetupConfig, h as SetupContext, i as SetupDefinition } from './setup-DZ5FeKay.mjs';
+export { F as FrameError, P as PageSnapshot, R as RecordedRequest, W as WxaTestApi } from './testApi-CnZOLyWw.mjs';
 
 /**
  * 小程序项目结构解析
@@ -170,7 +170,7 @@ declare class AppBuilder {
  *   /__wxa__/proxy?url=        网络代理
  *   /__wxa__/tmp               临时文件：POST ?type=png 保存，返回可直接访问的地址（GET 支持分段请求）；对该地址 HEAD 查大小、DELETE 删除
  *   /__wxa__/region/<kind>     地区选择器用的行政区划数据（districts / streets），取自本机开发者工具
- *   /__wxa__/api/*             真实登录（--real-login）：wx.login 的 code、手机号，只允许本机访问
+ *   /__wxa__/api/*             --devtools-login：wx.login 的 code、手机号，服务市场、插件的请求转发，只允许本机访问
  *   /__wxa__/ws                文件变化通知：热更新（hot）或整页刷新（reload）
  *   其余路径                    小程序目录下的静态资源
  */
@@ -192,7 +192,12 @@ interface DevServerOptions {
     setup?: string | false;
     /** 浏览器端运行时（host.js / frame.js）所在目录，默认取构建产物 */
     runtimeDir?: string;
-    /** 使用本机微信开发者工具登录态获取真实 code 和手机号 */
+    /**
+     * 借本机微信开发者工具的登录态访问微信后台：真实的 wx.login code 和手机号、服务市场、插件。
+     * 要先登录开发者工具，会真实请求微信
+     */
+    devtoolsLogin?: boolean;
+    /** @deprecated 改名为 devtoolsLogin */
     realLogin?: boolean;
     logger?: Pick<Console, 'log' | 'warn' | 'error'>;
 }
@@ -214,8 +219,10 @@ declare class DevServer {
     private address;
     /** 运行时生成的临时文件（canvas 导出、拍照等），随服务器进程存在 */
     private readonly tempFiles;
-    /** 开启 --real-login 时才有 */
+    private readonly devtoolsLogin;
+    /** 开启 --devtools-login 时才有 */
     private readonly ticketSource;
+    private readonly plugins;
     constructor(options: DevServerOptions);
     get url(): string;
     start(): Promise<string>;
@@ -223,6 +230,8 @@ declare class DevServer {
     private createApp;
     /** 先编译一遍 setup：编译错误随 app-info 交给宿主显示，而不是让浏览器 import 失败 */
     private setupInfo;
+    /** 构建结果并入这次打开小程序时决定用的插件 */
+    private currentBuild;
     /** 需要构建结果的路由；构建失败时返回错误文本 */
     private withBuild;
     private runtimeDir;

package/dist/index.d.ts

@@ -1,7 +1,7 @@
 import { ResolvedBaseLib } from '@open-wxa/wxa-runner-extractor';
-import { D as DeviceProfile } from './setup-Cv340Lvj.js';
-export { A as ApiContext, a as ApiHandler, b as ApiResult, c as AppInfo, M as MockConfig, d as MockRequest, e as MockResponse, f as MockValue, N as NetworkConfig, R as RouteHandler, S as SetupApi, g as SetupConfig, h as SetupContext, i as SetupDefinition } from './setup-Cv340Lvj.js';
-export { F as FrameError, P as PageSnapshot, R as RecordedRequest, W as WxaTestApi } from './testApi-nKsjjEhz.js';
+import { D as DeviceProfile } from './setup-DZ5FeKay.js';
+export { A as ApiContext, a as ApiHandler, b as ApiResult, c as AppInfo, M as MockConfig, d as MockRequest, e as MockResponse, f as MockValue, N as NetworkConfig, R as RouteHandler, S as SetupApi, g as SetupConfig, h as SetupContext, i as SetupDefinition } from './setup-DZ5FeKay.js';
+export { F as FrameError, P as PageSnapshot, R as RecordedRequest, W as WxaTestApi } from './testApi-BLozOgCt.js';
 
 /**
  * 小程序项目结构解析
@@ -170,7 +170,7 @@ declare class AppBuilder {
  *   /__wxa__/proxy?url=        网络代理
  *   /__wxa__/tmp               临时文件：POST ?type=png 保存，返回可直接访问的地址（GET 支持分段请求）；对该地址 HEAD 查大小、DELETE 删除
  *   /__wxa__/region/<kind>     地区选择器用的行政区划数据（districts / streets），取自本机开发者工具
- *   /__wxa__/api/*             真实登录（--real-login）：wx.login 的 code、手机号，只允许本机访问
+ *   /__wxa__/api/*             --devtools-login：wx.login 的 code、手机号，服务市场、插件的请求转发，只允许本机访问
  *   /__wxa__/ws                文件变化通知：热更新（hot）或整页刷新（reload）
  *   其余路径                    小程序目录下的静态资源
  */
@@ -192,7 +192,12 @@ interface DevServerOptions {
     setup?: string | false;
     /** 浏览器端运行时（host.js / frame.js）所在目录，默认取构建产物 */
     runtimeDir?: string;
-    /** 使用本机微信开发者工具登录态获取真实 code 和手机号 */
+    /**
+     * 借本机微信开发者工具的登录态访问微信后台：真实的 wx.login code 和手机号、服务市场、插件。
+     * 要先登录开发者工具，会真实请求微信
+     */
+    devtoolsLogin?: boolean;
+    /** @deprecated 改名为 devtoolsLogin */
     realLogin?: boolean;
     logger?: Pick<Console, 'log' | 'warn' | 'error'>;
 }
@@ -214,8 +219,10 @@ declare class DevServer {
     private address;
     /** 运行时生成的临时文件（canvas 导出、拍照等），随服务器进程存在 */
     private readonly tempFiles;
-    /** 开启 --real-login 时才有 */
+    private readonly devtoolsLogin;
+    /** 开启 --devtools-login 时才有 */
     private readonly ticketSource;
+    private readonly plugins;
     constructor(options: DevServerOptions);
     get url(): string;
     start(): Promise<string>;
@@ -223,6 +230,8 @@ declare class DevServer {
     private createApp;
     /** 先编译一遍 setup：编译错误随 app-info 交给宿主显示，而不是让浏览器 import 失败 */
     private setupInfo;
+    /** 构建结果并入这次打开小程序时决定用的插件 */
+    private currentBuild;
     /** 需要构建结果的路由；构建失败时返回错误文本 */
     private withBuild;
     private runtimeDir;

package/dist/index.js

@@ -45,7 +45,7 @@ var import_http = __toESM(require("http"));
 var import_path4 = __toESM(require("path"));
 var import_express2 = __toESM(require("express"));
 var import_ws2 = require("ws");
-var import_wxa_runner_extractor3 = require("@open-wxa/wxa-runner-extractor");
+var import_wxa_runner_extractor5 = require("@open-wxa/wxa-runner-extractor");
 
 // src/project/AppBuilder.ts
 var import_wxa_runner_compiler = require("@open-wxa/wxa-runner-compiler");
@@ -481,6 +481,178 @@ function readJsonFile(file) {
   }
 }
 
+// src/server/plugins.ts
+var import_wxa_runner_extractor2 = require("@open-wxa/wxa-runner-extractor");
+
+// src/server/wechatDev.ts
+var import_wxa_runner_extractor = require("@open-wxa/wxa-runner-extractor");
+var BASE_URL = "https://servicewechat.com";
+var CLIENT_VERSION = "1021810240";
+var DEFAULT_TIMEOUT = 1e4;
+var ERROR_HINTS = {
+  // 40001：开发者工具刷新过 ticket，旧的随即作废
+  40001: "\uFF08\u767B\u5F55\u6001\u5DF2\u5931\u6548\uFF0C\u8BF7\u5728\u5FAE\u4FE1\u5F00\u53D1\u8005\u5DE5\u5177\u91CC\u91CD\u65B0\u767B\u5F55\uFF09",
+  40029: "\uFF08\u767B\u5F55\u6001\u5DF2\u5931\u6548\uFF0C\u8BF7\u5728\u5FAE\u4FE1\u5F00\u53D1\u8005\u5DE5\u5177\u91CC\u91CD\u65B0\u767B\u5F55\uFF09",
+  85023: "\uFF08\u5F53\u524D\u5FAE\u4FE1\u8D26\u53F7\u4E0D\u662F\u8BE5\u5C0F\u7A0B\u5E8F\u7684\u5F00\u53D1\u8005\uFF09"
+};
+function requireUsableTicket(ticket) {
+  if (!ticket) throw new Error(`\u672A\u627E\u5230\u5FAE\u4FE1\u5F00\u53D1\u8005\u5DE5\u5177\u7684\u767B\u5F55\u6001\uFF0C\u8BF7\u767B\u5F55\u5F00\u53D1\u8005\u5DE5\u5177\uFF0C\u6216\u8BBE\u7F6E\u73AF\u5883\u53D8\u91CF ${import_wxa_runner_extractor.TICKET_ENV}`);
+  if (ticket.expiredAt !== void 0 && ticket.expiredAt <= Date.now()) {
+    throw new Error("\u5FAE\u4FE1\u5F00\u53D1\u8005\u5DE5\u5177\u7684\u767B\u5F55\u6001\u5DF2\u8FC7\u671F\uFF0C\u8BF7\u6253\u5F00\u5F00\u53D1\u8005\u5DE5\u5177\u5237\u65B0\u767B\u5F55\u6001");
+  }
+  return ticket.newticket;
+}
+function explainErrcode(errcode) {
+  return errcode !== void 0 && ERROR_HINTS[errcode] || "";
+}
+function requireOk(body, action) {
+  const errcode = body.baseresponse?.errcode;
+  if (errcode !== 0) throw new Error(`${action} ${errcode}: ${body.baseresponse?.errmsg || "\u672A\u77E5\u9519\u8BEF"}${explainErrcode(errcode)}`);
+  return body;
+}
+var WechatDevClient = class {
+  /**
+   * @param findTicket 每次请求都重新取：开发者工具重新登录、切换账号后不用重启服务器
+   */
+  constructor(appid, findTicket) {
+    this.appid = appid;
+    this.findTicket = findTicket;
+  }
+  /**
+   * POST JSON 到 path（如 wxa-dev-logic/jslogin），带上 appid 和开发者 ticket
+   *
+   * @throws 没有可用的登录态、超时、连不上、HTTP 状态不是 2xx 时，消息是给用户看的原因
+   */
+  async post(path5, body, timeout = DEFAULT_TIMEOUT) {
+    const query = new URLSearchParams({ appid: this.appid, newticket: requireUsableTicket(await this.findTicket()), clientversion: CLIENT_VERSION });
+    const response = await fetch(`${BASE_URL}/${path5}?${query}`, {
+      method: "POST",
+      headers: { "Content-Type": "application/json" },
+      body: JSON.stringify(body),
+      signal: AbortSignal.timeout(timeout)
+    }).catch((error) => {
+      throw new Error(error.name === "TimeoutError" ? `\u8BF7\u6C42\u5FAE\u4FE1\u670D\u52A1\u5668\u8D85\u65F6\uFF08${timeout / 1e3}s\uFF09` : `\u8BF7\u6C42\u5FAE\u4FE1\u670D\u52A1\u5668\u5931\u8D25\uFF1A${error.cause?.message ?? error.message}`);
+    });
+    if (!response.ok) throw new Error(`\u5FAE\u4FE1\u670D\u52A1\u5668\u8FD4\u56DE HTTP ${response.status}`);
+    return response;
+  }
+  /** 同 post，返回解析后的 JSON */
+  async postJson(path5, body) {
+    return (await this.post(path5, body)).json();
+  }
+};
+
+// src/server/plugins.ts
+var DOWNLOAD_TIMEOUT = 3e4;
+var PACKAGE_MAGIC = 190;
+var PluginStore = class {
+  /**
+   * @param wechat 开启 --devtools-login 时才有，没有时不下载插件
+   */
+  constructor(wechat, logger) {
+    this.wechat = wechat;
+    this.logger = logger;
+    /** provider@version → 下载结果；失败的不留，下次打开小程序时重试 */
+    this.downloads = /* @__PURE__ */ new Map();
+    /**
+     * 这次打开小程序时决定用哪些插件。同一次打开的逻辑层、业务模块、渲染层等请求都按它处理：
+     * 各自去下载的话，下载失败时每个请求都会重试，结果还可能前后不一，页面列表和逻辑层对不上
+     */
+    this.selection = null;
+    /** 没开 --devtools-login 的提示每个插件只说一次 */
+    this.warned = /* @__PURE__ */ new Set();
+  }
+  /** 打开小程序时（宿主取 app-info）调用：重新决定用哪些插件，下载过的直接用，上次失败的重试 */
+  async refresh(build2) {
+    this.selection = this.select(build2);
+    return withPlugins(build2, await this.selection);
+  }
+  /** 其余请求沿用这次打开时的决定，不触发下载；还没决定过时（如直接请求逻辑层）先决定一次 */
+  async current(build2) {
+    this.selection ??= this.select(build2);
+    return withPlugins(build2, await this.selection);
+  }
+  /** app.json 声明的插件；下载不了的跳过，在终端说明原因，小程序自己的页面照常可用 */
+  async select(build2) {
+    const declared = build2.wxConfig.plugins || {};
+    const results = await Promise.all(Object.entries(declared).map(
+      ([alias, { provider, version }]) => provider && version ? this.load(alias, provider, version) : null
+    ));
+    return results.filter((plugin) => !!plugin);
+  }
+  async load(alias, provider, version) {
+    const label = `\u63D2\u4EF6 ${alias}\uFF08${provider}@${version}\uFF09`;
+    if (!this.wechat) {
+      this.warnOnce(label, `[wxa-runner] ${label} \u7684\u4EE3\u7801\u8981\u7528\u5F00\u53D1\u8005\u7684\u767B\u5F55\u6001\u5411\u5FAE\u4FE1\u4E0B\u8F7D\uFF0C\u542F\u52A8\u65F6\u52A0 --devtools-login`);
+      return null;
+    }
+    const key = `${provider}@${version}`;
+    let download = this.downloads.get(key);
+    if (!download) {
+      download = this.download(this.wechat, alias, provider, version);
+      this.downloads.set(key, download);
+      download.catch(() => this.downloads.delete(key));
+    }
+    try {
+      return await download;
+    } catch (error) {
+      this.logger.warn(`[wxa-runner] ${label} \u4E0B\u8F7D\u5931\u8D25\uFF1A${error.message}`);
+      return null;
+    }
+  }
+  /** @throws 没有登录态、连不上、微信拒绝或返回的不是插件代码包时，消息是原因 */
+  async download(wechat, alias, provider, version) {
+    const response = await wechat.post("wxa-dev/getplugincode", { plugin_id: provider, plugin_version: version }, DOWNLOAD_TIMEOUT);
+    const data = Buffer.from(await response.arrayBuffer());
+    if (data[0] !== PACKAGE_MAGIC) {
+      let body = {};
+      try {
+        body = JSON.parse(data.toString("utf8"));
+      } catch {
+      }
+      if (body.baseresponse?.errcode) requireOk(body, "\u5FAE\u4FE1\u62D2\u7EDD\u4E0B\u8F7D");
+      throw new Error("\u5FAE\u4FE1\u6CA1\u6709\u8FD4\u56DE\u63D2\u4EF6\u4EE3\u7801");
+    }
+    const files = new Map((0, import_wxa_runner_extractor2.readWxvpkgIndex)(data).map((entry) => [entry.name, Buffer.from((0, import_wxa_runner_extractor2.readWxvpkgFile)(data, entry))]));
+    const pluginJson = JSON.parse(files.get("/plugin.json")?.toString("utf8") || "{}");
+    return {
+      alias,
+      provider,
+      version,
+      files,
+      pages: Object.values(pluginJson.pages || {}),
+      pageConfigs: pluginJson.page || {}
+    };
+  }
+  warnOnce(key, message) {
+    if (this.warned.has(key)) return;
+    this.warned.add(key);
+    this.logger.warn(message);
+  }
+};
+function withPlugins(build2, plugins) {
+  if (!plugins.length) return { ...build2, plugins };
+  return {
+    ...build2,
+    plugins,
+    pages: [...build2.pages, ...plugins.flatMap((plugin) => plugin.pages)],
+    wxConfig: {
+      ...build2.wxConfig,
+      page: { ...build2.wxConfig.page, ...Object.assign({}, ...plugins.map((plugin) => plugin.pageConfigs)) }
+    }
+  };
+}
+function findPluginPage(build2, pagePath) {
+  for (const plugin of build2.plugins) {
+    const prefix = `__plugin__/${plugin.provider}/`;
+    if (plugin.pages.includes(pagePath)) return { plugin, innerPath: pagePath.slice(prefix.length) };
+  }
+  return null;
+}
+function pluginScriptUrl(plugin, file) {
+  return `/__wxa__/plugin/${encodeURIComponent(plugin.provider)}/${encodeURIComponent(plugin.version)}/${file}`;
+}
+
 // src/server/html.ts
 function hostHtml() {
   return `<!DOCTYPE html>
@@ -507,10 +679,11 @@ function appserviceHtml(build2, launch, options) {
     ...options.isolated ? { isIsolateContext: true } : {}
   };
   const v = build2.version;
+  const pluginUrls = build2.plugins.map((plugin) => pluginScriptUrl(plugin, "appservice.js"));
   const moduleUrls = build2.modules.map((id) => `/__wxa__/module/${encodeURI(id)}?v=${v}`);
   const bootstrapUrl = `/__wxa__/service-bootstrap.js?v=${v}`;
   if (options.isolated) {
-    const scripts = [...moduleUrls, bootstrapUrl];
+    const scripts = [...pluginUrls, ...moduleUrls, bootstrapUrl];
     return `<!DOCTYPE html>
 <html>
 <head>
@@ -523,7 +696,7 @@ function appserviceHtml(build2, launch, options) {
 <body></body>
 </html>`;
   }
-  const modules = moduleUrls.map((src) => `<script src="${src}"></script>`).join("\n");
+  const modules = [...pluginUrls, ...moduleUrls].map((src) => `<script src="${src}"></script>`).join("\n");
   return `<!DOCTYPE html>
 <html>
 <head>
@@ -557,29 +730,13 @@ ${empty ? "" : '<script src="/__baselib__/WASubContext.js"></script>\n'}<script>
 </html>`;
 }
 function webviewHtml(build2, pagePath, webviewId, options) {
-  const pageConfig = build2.wxConfig.page?.[pagePath + ".html"];
-  const window = { ...build2.wxConfig.global?.window, ...pageConfig?.window };
-  const wxConfig = { ...build2.wxConfig, window };
   const id = Number(webviewId) || 0;
   return `<!DOCTYPE html>
 <html>
 <head>
-<meta charset="utf-8">
-<meta name="viewport" content="width=device-width, initial-scale=1, maximum-scale=1, user-scalable=no">
-<title>${escapeHtml(pagePath)}</title>
-<!-- \u5C0F\u7A0B\u5E8F\u6E32\u67D3\u5C42\u7684\u9ED8\u8BA4\u5B57\u53F7\u662F 16px\uFF1B\u4E0D\u58F0\u660E\u7684\u8BDD\u4F1A\u7EE7\u627F\u6D4F\u89C8\u5668\u8BBE\u7F6E\u91CC\u7684\u9ED8\u8BA4\u5B57\u53F7\u3002\u653E\u5728\u6700\u524D\u9762\uFF0C\u57FA\u7840\u5E93\u548C\u9875\u9762\u6837\u5F0F\u90FD\u80FD\u8986\u76D6\u5B83 -->
-<style>html{font-size:16px}</style>
-<!-- \u771F\u673A\u7684\u6EDA\u52A8\u6761\u662F\u4E0D\u5360\u5E03\u5C40\u7684\u6D6E\u5C42\uFF1B\u684C\u9762\u6D4F\u89C8\u5668\u7684\u5E38\u89C4\u6EDA\u52A8\u6761\u548C\u81EA\u5B9A\u4E49 ::-webkit-scrollbar \u4F1A\u6324\u7A84\u9875\u9762\uFF0C\u4E00\u5F8B\u9690\u85CF\u3002
-     scrollbar-width \u4F18\u5148\u4E8E ::-webkit-scrollbar\uFF0C\u9875\u9762\u6837\u5F0F\u4E0D\u4F1A\u518D\u628A\u6EDA\u52A8\u6761\u52A0\u56DE\u6765 -->
-<style>*{scrollbar-width:none}::-webkit-scrollbar{display:none}</style>
-<!-- \u903B\u8F91\u5C42\u5EFA\u7684 2d\u3001webgl \u753B\u5E03\u642C\u8FDB wx-canvas \u540E\u94FA\u6EE1\u5B83\uFF08\u89C1 frame.ts \u7684 moveCanvasesIntoPages\uFF09\u3002
-     \u57FA\u7840\u5E93\u8FD8\u4F1A\u6309\u903B\u8F91\u5C42\u91CC\u7684\u5E03\u5C40\u6539\u5B83\u7684\u4F4D\u7F6E\u548C\u663E\u9690\uFF0C\u8FD9\u91CC\u4E00\u5F8B\u538B\u4F4F\uFF1B\u89E6\u6478\u7167\u5E38\u4EA4\u7ED9 wx-canvas \u81EA\u5DF1\u7684 canvas -->
-<style>.wxa-service-canvas{position:absolute!important;left:0!important;top:0!important;width:100%!important;height:100%!important;visibility:inherit!important;pointer-events:none}</style>
-<script>var __wxConfig = ${toJs(wxConfig)};</script>
-<script src="/__wxa__/runtime/frame.js" data-kind="webview" data-webview-id="${id}"></script>
-<script src="/__baselib__/WAWebview.js"></script>
+${webviewHead(build2, pagePath, id)}
 ${enableHotUpdate(options.hot)}<script src="/__wxa__/page-frame.js?v=${build2.version}"></script>
-${window.disableScroll ? "<style>body{overflow-y:hidden}</style>" : ""}
+${pageWindow(build2, pagePath).disableScroll ? "<style>body{overflow-y:hidden}</style>" : ""}
 </head>
 <body>
 <script>
@@ -615,6 +772,42 @@ self.console = __wxaConsole;
 importScripts(${modules.map((url) => toJs(url)).join(", ")});
 `;
 }
+function pluginWebviewHtml(build2, plugin, innerPath, pagePath, webviewId) {
+  const id = Number(webviewId) || 0;
+  const page = plugin.files.get(`/${innerPath}.html`)?.toString("utf8") ?? `<script>console.error(${JSON.stringify(`[wxa-runner] \u63D2\u4EF6 ${plugin.alias} \u91CC\u6CA1\u6709\u9875\u9762 ${innerPath}`)})</script>`;
+  return `<!DOCTYPE html>
+<html>
+<head>
+${webviewHead(build2, pagePath, id)}
+<script src="${pluginScriptUrl(plugin, "pageframe.js")}"></script>
+${pageWindow(build2, pagePath).disableScroll ? "<style>body{overflow-y:hidden}</style>" : ""}
+</head>
+<body>
+${page}
+<script>parent.__wxaHost.frameLoaded('webview', ${id});</script>
+</body>
+</html>`;
+}
+function pageWindow(build2, pagePath) {
+  return { ...build2.wxConfig.global?.window, ...build2.wxConfig.page?.[pagePath + ".html"]?.window };
+}
+function webviewHead(build2, pagePath, id) {
+  const wxConfig = { ...build2.wxConfig, window: pageWindow(build2, pagePath) };
+  return `<meta charset="utf-8">
+<meta name="viewport" content="width=device-width, initial-scale=1, maximum-scale=1, user-scalable=no">
+<title>${escapeHtml(pagePath)}</title>
+<!-- \u5C0F\u7A0B\u5E8F\u6E32\u67D3\u5C42\u7684\u9ED8\u8BA4\u5B57\u53F7\u662F 16px\uFF1B\u4E0D\u58F0\u660E\u7684\u8BDD\u4F1A\u7EE7\u627F\u6D4F\u89C8\u5668\u8BBE\u7F6E\u91CC\u7684\u9ED8\u8BA4\u5B57\u53F7\u3002\u653E\u5728\u6700\u524D\u9762\uFF0C\u57FA\u7840\u5E93\u548C\u9875\u9762\u6837\u5F0F\u90FD\u80FD\u8986\u76D6\u5B83 -->
+<style>html{font-size:16px}</style>
+<!-- \u771F\u673A\u7684\u6EDA\u52A8\u6761\u662F\u4E0D\u5360\u5E03\u5C40\u7684\u6D6E\u5C42\uFF1B\u684C\u9762\u6D4F\u89C8\u5668\u7684\u5E38\u89C4\u6EDA\u52A8\u6761\u548C\u81EA\u5B9A\u4E49 ::-webkit-scrollbar \u4F1A\u6324\u7A84\u9875\u9762\uFF0C\u4E00\u5F8B\u9690\u85CF\u3002
+     scrollbar-width \u4F18\u5148\u4E8E ::-webkit-scrollbar\uFF0C\u9875\u9762\u6837\u5F0F\u4E0D\u4F1A\u518D\u628A\u6EDA\u52A8\u6761\u52A0\u56DE\u6765 -->
+<style>*{scrollbar-width:none}::-webkit-scrollbar{display:none}</style>
+<!-- \u903B\u8F91\u5C42\u5EFA\u7684 2d\u3001webgl \u753B\u5E03\u642C\u8FDB wx-canvas \u540E\u94FA\u6EE1\u5B83\uFF08\u89C1 frame.ts \u7684 moveCanvasesIntoPages\uFF09\u3002
+     \u57FA\u7840\u5E93\u8FD8\u4F1A\u6309\u903B\u8F91\u5C42\u91CC\u7684\u5E03\u5C40\u6539\u5B83\u7684\u4F4D\u7F6E\u548C\u663E\u9690\uFF0C\u8FD9\u91CC\u4E00\u5F8B\u538B\u4F4F\uFF1B\u89E6\u6478\u7167\u5E38\u4EA4\u7ED9 wx-canvas \u81EA\u5DF1\u7684 canvas -->
+<style>.wxa-service-canvas{position:absolute!important;left:0!important;top:0!important;width:100%!important;height:100%!important;visibility:inherit!important;pointer-events:none}</style>
+<script>var __wxConfig = ${toJs(wxConfig)};</script>
+<script src="/__wxa__/runtime/frame.js" data-kind="webview" data-webview-id="${id}"></script>
+<script src="/__baselib__/WAWebview.js"></script>`;
+}
 function escapeHtml(text) {
   return text.replace(/[&<>"]/g, (ch) => ({ "&": "&amp;", "<": "&lt;", ">": "&gt;", '"': "&quot;" })[ch]);
 }
@@ -720,20 +913,20 @@ var import_child_process = require("child_process");
 var import_crypto = require("crypto");
 var import_promises = require("timers/promises");
 var import_ws = require("ws");
-var import_wxa_runner_extractor = require("@open-wxa/wxa-runner-extractor");
+var import_wxa_runner_extractor3 = require("@open-wxa/wxa-runner-extractor");
 var AUTO_PORT = 9420;
 var CLI_TIMEOUT = 6e4;
 var AUTOMATOR_TIMEOUT = 5e3;
 var WINDOW_TIMEOUT = 1e4;
 var WINDOW_RETRY_INTERVAL = 500;
 function developerTicketSource(projectPath, logger) {
-  const cli = (0, import_wxa_runner_extractor.findElectronDevtoolsCli)();
-  if (!cli) return async () => (0, import_wxa_runner_extractor.findDeveloperTicket)();
+  const cli = (0, import_wxa_runner_extractor3.findElectronDevtoolsCli)();
+  if (!cli) return async () => (0, import_wxa_runner_extractor3.findDeveloperTicket)();
   let automatorPort = null;
   const startOnce = () => {
     if (!automatorPort) {
       const starting = startAutomation(cli, projectPath).then((port) => {
-        logger.log(`[wxa-runner] \u771F\u5B9E\u767B\u5F55\uFF1A\u5DF2\u5728\u5FAE\u4FE1\u5F00\u53D1\u8005\u5DE5\u5177\u91CC\u4E3A\u9879\u76EE\u5F00\u542F\u81EA\u52A8\u5316\u63A5\u53E3\uFF08\u7AEF\u53E3 ${port}\uFF09\uFF0Cticket \u4ECE\u5F00\u53D1\u8005\u5DE5\u5177\u5B9E\u65F6\u83B7\u53D6`);
+        logger.log(`[wxa-runner] --devtools-login\uFF1A\u5DF2\u5728\u5FAE\u4FE1\u5F00\u53D1\u8005\u5DE5\u5177\u91CC\u4E3A\u9879\u76EE\u5F00\u542F\u81EA\u52A8\u5316\u63A5\u53E3\uFF08\u7AEF\u53E3 ${port}\uFF09\uFF0Cticket \u4ECE\u5F00\u53D1\u8005\u5DE5\u5177\u5B9E\u65F6\u83B7\u53D6`);
         return port;
       });
       starting.catch(() => {
@@ -744,7 +937,7 @@ function developerTicketSource(projectPath, logger) {
     return automatorPort;
   };
   return async () => {
-    if (process.env[import_wxa_runner_extractor.TICKET_ENV]) return { newticket: process.env[import_wxa_runner_extractor.TICKET_ENV] };
+    if (process.env[import_wxa_runner_extractor3.TICKET_ENV]) return { newticket: process.env[import_wxa_runner_extractor3.TICKET_ENV] };
     const port = startOnce();
     try {
       return await requestTicketOnceWindowReady(await port, projectPath);
@@ -849,74 +1042,62 @@ function explainAutomatorError(message) {
   return new Error(`\u5FAE\u4FE1\u5F00\u53D1\u8005\u5DE5\u5177\u8FD4\u56DE\u9519\u8BEF\uFF1A${message}`);
 }
 
-// src/server/realLogin.ts
+// src/server/devtoolsLogin.ts
 var import_express = __toESM(require("express"));
-var import_wxa_runner_extractor2 = require("@open-wxa/wxa-runner-extractor");
-var DEV_LOGIC = "https://servicewechat.com/wxa-dev-logic";
-var CLIENT_VERSION = "1021810240";
-var UPSTREAM_TIMEOUT = 1e4;
+var import_wxa_runner_extractor4 = require("@open-wxa/wxa-runner-extractor");
 var LOOPBACK_ADDRESSES = ["127.0.0.1", "::1", "::ffff:127.0.0.1"];
 var LOOPBACK_HOSTS = ["localhost", "127.0.0.1", "[::1]"];
-var ERROR_HINTS = {
-  // 40001：开发者工具刷新过 ticket，旧的随即作废
-  40001: "\uFF08\u767B\u5F55\u6001\u5DF2\u5931\u6548\uFF0C\u8BF7\u5728\u5FAE\u4FE1\u5F00\u53D1\u8005\u5DE5\u5177\u91CC\u91CD\u65B0\u767B\u5F55\uFF09",
-  40029: "\uFF08\u767B\u5F55\u6001\u5DF2\u5931\u6548\uFF0C\u8BF7\u5728\u5FAE\u4FE1\u5F00\u53D1\u8005\u5DE5\u5177\u91CC\u91CD\u65B0\u767B\u5F55\uFF09",
-  85023: "\uFF08\u5F53\u524D\u5FAE\u4FE1\u8D26\u53F7\u4E0D\u662F\u8BE5\u5C0F\u7A0B\u5E8F\u7684\u5F00\u53D1\u8005\uFF09"
-};
-function requireUsableTicket(ticket) {
-  if (!ticket) throw new Error(`\u672A\u627E\u5230\u5FAE\u4FE1\u5F00\u53D1\u8005\u5DE5\u5177\u7684\u767B\u5F55\u6001\uFF0C\u8BF7\u767B\u5F55\u5F00\u53D1\u8005\u5DE5\u5177\uFF0C\u6216\u8BBE\u7F6E\u73AF\u5883\u53D8\u91CF ${import_wxa_runner_extractor2.TICKET_ENV}`);
-  if (ticket.expiredAt !== void 0 && ticket.expiredAt <= Date.now()) {
-    throw new Error("\u5FAE\u4FE1\u5F00\u53D1\u8005\u5DE5\u5177\u7684\u767B\u5F55\u6001\u5DF2\u8FC7\u671F\uFF0C\u8BF7\u6253\u5F00\u5F00\u53D1\u8005\u5DE5\u5177\u5237\u65B0\u767B\u5F55\u6001");
-  }
-  return ticket.newticket;
-}
-function realLoginRouter(appid, findTicket = import_wxa_runner_extractor2.findDeveloperTicket) {
-  const callDevLogic = async (endpoint, body) => {
-    const query = new URLSearchParams({ appid, newticket: requireUsableTicket(await findTicket()), clientversion: CLIENT_VERSION });
-    const response = await fetch(`${DEV_LOGIC}/${endpoint}?${query}`, {
-      method: "POST",
-      headers: { "Content-Type": "application/json" },
-      body: JSON.stringify(body),
-      signal: AbortSignal.timeout(UPSTREAM_TIMEOUT)
-    }).catch((error) => {
-      throw new Error(error.name === "TimeoutError" ? `\u8BF7\u6C42\u5FAE\u4FE1\u670D\u52A1\u5668\u8D85\u65F6\uFF08${UPSTREAM_TIMEOUT / 1e3}s\uFF09` : `\u8BF7\u6C42\u5FAE\u4FE1\u670D\u52A1\u5668\u5931\u8D25\uFF1A${error.cause?.message ?? error.message}`);
-    });
-    if (!response.ok) throw new Error(`\u5FAE\u4FE1\u670D\u52A1\u5668\u8FD4\u56DE HTTP ${response.status}`);
-    return response.json();
-  };
+var FORWARDED_WX_DATA_APIS = ["webapi_servicemarket_jsapi_comm"];
+function devtoolsLoginRouter(appid, findTicket = import_wxa_runner_extractor4.findDeveloperTicket) {
+  const wechat = new WechatDevClient(appid, findTicket);
   const router = import_express.default.Router();
   router.use(onlyLoopback);
   router.post("/login", respond(async () => {
-    const body = await callDevLogic("jslogin", { scope: ["snsapi_base"] });
-    const errcode = body.baseresponse?.errcode;
-    if (errcode !== 0 || !body.code) {
-      throw new Error(`\u5FAE\u4FE1\u767B\u5F55\u5931\u8D25 ${errcode}: ${body.baseresponse?.errmsg || "\u672A\u77E5\u9519\u8BEF"}${ERROR_HINTS[errcode] ?? ""}`);
-    }
+    const body = requireOk(await wechat.postJson("wxa-dev-logic/jslogin", { scope: ["snsapi_base"] }), "\u5FAE\u4FE1\u767B\u5F55\u5931\u8D25");
+    if (!body.code) throw new Error("\u5FAE\u4FE1\u767B\u5F55\u5931\u8D25\uFF1A\u5FAE\u4FE1\u6CA1\u6709\u8FD4\u56DE code");
     return { code: body.code };
   }));
   router.post("/phone-number", respond(async () => {
-    const body = await callDevLogic("jsgetuserwxphone", { appid });
+    const body = await wechat.postJson("wxa-dev-logic/jsgetuserwxphone", { appid });
     const errcode = body.jsapi_baseresponse?.errcode ?? body.BaseResponse?.Ret;
     if (errcode !== 0 || typeof body.data !== "string") {
       const errmsg = body.jsapi_baseresponse?.errmsg || body.BaseResponse?.ErrMsg?.String || "\u672A\u77E5\u9519\u8BEF";
-      throw new Error(`\u83B7\u53D6\u624B\u673A\u53F7\u5931\u8D25 ${errcode}: ${errmsg}${ERROR_HINTS[errcode] ?? ""}`);
+      throw new Error(`\u83B7\u53D6\u624B\u673A\u53F7\u5931\u8D25 ${errcode}: ${errmsg}${explainErrcode(errcode)}`);
     }
     const { encryptedData, iv } = JSON.parse(body.data);
     return { data: body.data, encryptedData, iv };
   }));
+  router.post("/operate-wx-data", import_express.default.json({ limit: "10mb" }), (req, res, next) => {
+    const apiName = req.body?.data?.api_name;
+    if (FORWARDED_WX_DATA_APIS.includes(apiName)) return next();
+    res.status(403).json({ error: `operateWXData \u53EA\u8F6C\u53D1\u670D\u52A1\u5E02\u573A\u7684\u8BF7\u6C42\uFF0C\u4E0D\u8F6C\u53D1 ${apiName}` });
+  }, respond(async (req) => {
+    const body = requireOk(await wechat.postJson("wxa-dev-logic/jsoperatewxdata", { data: JSON.stringify(req.body.data) }), "\u670D\u52A1\u5E02\u573A\u8C03\u7528\u5931\u8D25");
+    if (typeof body.data !== "string") throw new Error("\u670D\u52A1\u5E02\u573A\u8C03\u7528\u5931\u8D25\uFF1A\u5FAE\u4FE1\u6CA1\u6709\u8FD4\u56DE\u7ED3\u679C");
+    return { data: JSON.parse(body.data) };
+  }));
+  router.post("/verify-plugin", import_express.default.json(), respond(async (req) => {
+    const body = requireOk(await wechat.postJson("wxa-dev-logic/verifyplugin", { ext_info: JSON.stringify(req.body?.data || {}) }), "\u63D2\u4EF6\u6821\u9A8C\u5931\u8D25");
+    return { data: { list: body.list || [] } };
+  }));
+  router.post("/batch-get-contact", import_express.default.json(), respond(async (req) => {
+    const body = requireOk(await wechat.postJson("wxa-dev-logic/batchgetcontact", { appid_list: req.body?.appIds || [] }), "\u83B7\u53D6\u63D2\u4EF6\u4FE1\u606F\u5931\u8D25");
+    const contacts = body.contact_list || [];
+    return { contactList: contacts.filter((contact) => contact.plugin_info).map((contact) => ({ appId: contact.appid, plugin_list: contact.plugin_info.plugin_list })) };
+  }));
   return router;
 }
 function onlyLoopback(req, res, next) {
   if (!LOOPBACK_ADDRESSES.includes(req.socket.remoteAddress || "") || !LOOPBACK_HOSTS.includes(req.hostname)) {
-    res.status(403).json({ error: "\u771F\u5B9E\u767B\u5F55\u63A5\u53E3\u53EA\u5141\u8BB8\u672C\u673A\u8BBF\u95EE" });
+    res.status(403).json({ error: "\u5F00\u53D1\u8005\u767B\u5F55\u6001\u63A5\u53E3\u53EA\u5141\u8BB8\u672C\u673A\u8BBF\u95EE" });
     return;
   }
   next();
 }
 function respond(action) {
-  return async (_req, res) => {
+  return async (req, res) => {
     try {
-      res.json(await action());
+      res.json(await action(req));
     } catch (error) {
       res.status(500).json({ error: error.message });
     }
@@ -1047,11 +1228,16 @@ var DevServer = class {
     this.tempFiles = /* @__PURE__ */ new Map();
     this.logger = options.logger || console;
     this.project = new MiniProgram(import_path4.default.resolve(options.projectPath));
-    this.baseLib = (0, import_wxa_runner_extractor3.resolveBaseLib)({ version: options.baseLibVersion, cacheDir: options.baseLibCacheDir });
+    this.baseLib = (0, import_wxa_runner_extractor5.resolveBaseLib)({ version: options.baseLibVersion, cacheDir: options.baseLibCacheDir });
     if (!this.baseLib.compatible) {
       this.logger.warn(`[wxa-runner] \u57FA\u7840\u5E93 ${this.baseLib.version} \u9AD8\u4E8E\u5DF2\u9A8C\u8BC1\u7684\u7248\u672C\u8303\u56F4\uFF0C\u53EF\u80FD\u65E0\u6CD5\u6B63\u5E38\u8FD0\u884C`);
     }
-    this.ticketSource = options.realLogin ? developerTicketSource(this.project.projectPath, this.logger) : null;
+    if (options.realLogin !== void 0 && options.devtoolsLogin === void 0) {
+      this.logger.warn("[wxa-runner] realLogin\uFF08--real-login\uFF09\u5DF2\u6539\u540D\u4E3A devtoolsLogin\uFF08--devtools-login\uFF09\uFF0C\u65E7\u540D\u4EE5\u540E\u4F1A\u79FB\u9664");
+    }
+    this.devtoolsLogin = (options.devtoolsLogin ?? options.realLogin) === true;
+    this.ticketSource = this.devtoolsLogin ? developerTicketSource(this.project.projectPath, this.logger) : null;
+    this.plugins = new PluginStore(this.ticketSource && new WechatDevClient(this.project.appid, this.ticketSource), this.logger);
     this.device = { ...DEFAULT_DEVICE, ...options.device };
     this.builder = new AppBuilder(this.project);
     this.setupFile = resolveSetupFile(options.setup, this.project.projectPath);
@@ -1087,7 +1273,7 @@ ${error.message}`);
     const { port } = server.address();
     this.address = `http://${host}:${port}`;
     if (this.options.watch !== false) this.startWatching();
-    this.ticketSource?.().then(requireUsableTicket).catch((error) => this.logger.warn(`[wxa-runner] \u771F\u5B9E\u767B\u5F55\u6682\u4E0D\u53EF\u7528\uFF1A${error.message}`));
+    this.ticketSource?.().then(requireUsableTicket).catch((error) => this.logger.warn(`[wxa-runner] \u5F00\u53D1\u8005\u5DE5\u5177\u7684\u767B\u5F55\u6001\u6682\u4E0D\u53EF\u7528\uFF08--devtools-login\uFF09\uFF1A${error.message}`));
     return this.address;
   }
   async close() {
@@ -1114,9 +1300,9 @@ ${error.message}`);
     });
     app.get("/__wxa__/app-info.json", async (_req, res) => {
       noStore(res);
-      const base = { appid: this.project.appid, baseLibVersion: this.baseLib.version, device: this.device, realLogin: this.options.realLogin === true };
+      const base = { appid: this.project.appid, baseLibVersion: this.baseLib.version, device: this.device, devtoolsLogin: this.devtoolsLogin };
       try {
-        const build2 = await this.builder.build();
+        const build2 = await this.plugins.refresh(await this.builder.build());
         const info = { ...base, version: build2.version, wxConfig: build2.wxConfig, pages: build2.pages };
         if (this.setupFile) info.setup = await this.setupInfo(this.setupFile);
         res.json(info);
@@ -1139,7 +1325,7 @@ ${error.message}`);
     app.get("/__wxa__/appservice.html", this.withBuild((build2, req, res) => {
       const launchPath = String(req.query.path || "").replace(/^\//, "");
       const launch = build2.pages.includes(launchPath) ? { path: launchPath, query: Object.fromEntries(new URLSearchParams(String(req.query.query || ""))) } : { path: build2.pages[0], query: {} };
-      res.type("html").send(appserviceHtml(build2, launch, { hot: this.hotEnabled, isolated: (0, import_wxa_runner_extractor3.usesIsolatedContext)(this.baseLib.version) }));
+      res.type("html").send(appserviceHtml(build2, launch, { hot: this.hotEnabled, isolated: (0, import_wxa_runner_extractor5.usesIsolatedContext)(this.baseLib.version) }));
     }));
     app.get("/__wxa__/subcontext.html", (req, res) => {
       const id = Number(req.query.id);
@@ -1152,7 +1338,19 @@ ${error.message}`);
     app.get(/^\/__wxa__\/webview\/(.+)\.html$/, this.withBuild((build2, req, res, next) => {
       const pagePath = decodeURIComponent(req.params[0]);
       if (!build2.pages.includes(pagePath)) return next();
-      res.type("html").send(webviewHtml(build2, pagePath, Number(req.query.id), { hot: this.hotEnabled }));
+      const pluginPage = findPluginPage(build2, pagePath);
+      res.type("html").send(pluginPage ? pluginWebviewHtml(build2, pluginPage.plugin, pluginPage.innerPath, pagePath, Number(req.query.id)) : webviewHtml(build2, pagePath, Number(req.query.id), { hot: this.hotEnabled }));
+    }));
+    app.get("/__wxa__/plugin/:provider/:version/:file(appservice.js|pageframe.js)", this.withBuild((build2, req, res, next) => {
+      const { provider, version, file } = req.params;
+      const code = build2.plugins.find((plugin) => plugin.provider === provider && plugin.version === version)?.files.get(`/${file}`);
+      if (!code) return next();
+      res.type("js").send(code);
+    }));
+    app.get(/^\/__plugin__\/([^/]+)(\/.+)$/, this.withBuild((build2, req, res, next) => {
+      const file = build2.plugins.find((plugin) => plugin.provider === req.params[0])?.files.get(decodeURIComponent(req.params[1]));
+      if (!file) return next();
+      res.type(import_path4.default.extname(req.params[1]) || "application/octet-stream").send(file);
     }));
     app.get(/^\/__wxa__\/module\/(.+\.js)$/, this.withBuild((build2, req, res) => {
       const id = decodeURIComponent(req.params[0]);
@@ -1208,7 +1406,7 @@ ${error.message}`);
     });
     app.get("/__wxa__/region/:kind", (req, res) => {
       const kind = req.params.kind;
-      const data = kind === "districts" || kind === "streets" ? (0, import_wxa_runner_extractor3.readRegionData)(kind) : null;
+      const data = kind === "districts" || kind === "streets" ? (0, import_wxa_runner_extractor5.readRegionData)(kind) : null;
       if (!data) {
         res.status(404).end();
         return;
@@ -1241,7 +1439,7 @@ ${error.message}`);
     app.delete("/__wxa__/tmp/:name", (req, res) => {
       res.status(this.tempFiles.delete(req.params.name) ? 204 : 404).end();
     });
-    if (this.ticketSource) app.use("/__wxa__/api", realLoginRouter(this.project.appid, this.ticketSource));
+    if (this.ticketSource) app.use("/__wxa__/api", devtoolsLoginRouter(this.project.appid, this.ticketSource));
     app.use("/__wxa__/webview", import_express2.default.static(root));
     app.use(import_express2.default.static(root));
     app.use((error, _req, res, _next) => {
@@ -1259,13 +1457,17 @@ ${error.message}`);
       return { env: this.setupEnv, error: error.message };
     }
   }
+  /** 构建结果并入这次打开小程序时决定用的插件 */
+  async currentBuild() {
+    return this.plugins.current(await this.builder.build());
+  }
   /** 需要构建结果的路由；构建失败时返回错误文本 */
   withBuild(handler) {
     return async (req, res, next) => {
       res.setHeader("Cache-Control", "no-store");
       let build2;
       try {
-        build2 = await this.builder.build();
+        build2 = await this.currentBuild();
       } catch (error) {
         res.status(500).type("text").send(error.message);
         return;