@open-wxa/wxa-runner-core 0.6.0 → 0.8.0

package/dist/index.mjs

@@ -3,9 +3,135 @@ import {
 } from "./chunk-NGXYLLYS.mjs";
 
 // src/server/DevServer.ts
-import { randomUUID as randomUUID2 } from "crypto";
+import { randomUUID as randomUUID3 } from "crypto";
+
+// src/server/FileStore.ts
+import { randomUUID } from "crypto";
+var FileStore = class {
+  /** @param roots 预先创建的目录（如用户目录）。rmdir 不能删除它们和它们的上级目录：删掉之后再写 USER_DATA_PATH 都会失败 */
+  constructor(roots = []) {
+    this.etagPrefix = randomUUID();
+    this.version = 0;
+    this.nodes = /* @__PURE__ */ new Map([["/", { dir: true, data: Buffer.alloc(0), mtime: Date.now(), etag: "" }]]);
+    this.roots = roots.map((root) => this.normalize(root));
+    for (const root of this.roots) this.mkdir(root, true);
+  }
+  normalize(filePath) {
+    const stripped = String(filePath || "").replace(/^[a-z]+:\/\/[^/]*/i, "");
+    const parts = [];
+    for (const part of stripped.split("/")) {
+      if (!part || part === ".") continue;
+      if (part === "..") parts.pop();
+      else parts.push(part);
+    }
+    return "/" + parts.join("/");
+  }
+  stat(filePath) {
+    return this.nodes.get(this.normalize(filePath));
+  }
+  mkdir(dirPath, recursive = false) {
+    const target = this.normalize(dirPath);
+    if (this.nodes.has(target)) throw new Error(`file already exists ${dirPath}`);
+    const parent = target.slice(0, target.lastIndexOf("/")) || "/";
+    if (!this.nodes.get(parent)?.dir) {
+      if (!recursive) throw new Error(`no such file or directory ${dirPath}`);
+      this.mkdir(parent, true);
+    }
+    this.nodes.set(target, { dir: true, data: Buffer.alloc(0), mtime: Date.now(), etag: "" });
+  }
+  write(filePath, input, append = false) {
+    const data = Buffer.from(input);
+    const target = this.normalize(filePath);
+    const parent = target.slice(0, target.lastIndexOf("/")) || "/";
+    if (!this.nodes.get(parent)?.dir) throw new Error(`no such file or directory ${filePath}`);
+    const existing = this.nodes.get(target);
+    if (existing?.dir) throw new Error(`illegal operation on a directory ${filePath}`);
+    const contents = append && existing ? Buffer.concat([existing.data, data]) : data;
+    this.nodes.set(target, { dir: false, data: contents, mtime: Date.now(), etag: `${this.etagPrefix}-${++this.version}` });
+  }
+  read(filePath) {
+    const node = this.stat(filePath);
+    if (!node) throw new Error(`no such file or directory, open ${filePath}`);
+    if (node.dir) throw new Error(`illegal operation on a directory ${filePath}`);
+    return node.data;
+  }
+  readdir(dirPath) {
+    const target = this.normalize(dirPath);
+    if (!this.nodes.get(target)?.dir) throw new Error(`no such file or directory ${dirPath}`);
+    const prefix = target === "/" ? "/" : target + "/";
+    return [...this.nodes.keys()].filter((key) => key.startsWith(prefix) && key !== target && !key.slice(prefix.length).includes("/")).map((key) => key.slice(prefix.length));
+  }
+  remove(filePath, options) {
+    const target = this.normalize(filePath);
+    const node = this.nodes.get(target);
+    if (!node) throw new Error(`no such file or directory ${filePath}`);
+    if (node.dir !== options.dir) throw new Error(options.dir ? `not a directory ${filePath}` : `operation not permitted ${filePath}`);
+    if (node.dir) {
+      const children = this.readdir(target);
+      if (children.length && !options.recursive) throw new Error(`directory not empty ${filePath}`);
+      for (const key of [...this.nodes.keys()]) if (key.startsWith(target + "/")) this.nodes.delete(key);
+    }
+    this.nodes.delete(target);
+  }
+  execute(operation, args) {
+    switch (operation) {
+      case "readFile": {
+        const data = this.read(args.filePath);
+        return args.encoding === void 0 ? { data: data.toString("base64"), binary: true } : { data: data.toString(args.encoding) };
+      }
+      case "writeFile":
+      case "appendFile": {
+        const data = Buffer.from(args.data ?? "", args.binary ? "base64" : args.encoding || "utf8");
+        this.write(args.filePath, data, operation === "appendFile");
+        return {};
+      }
+      case "copyFile":
+        this.write(args.destPath, this.read(args.srcPath));
+        return {};
+      case "access":
+        if (!this.stat(args.path)) throw new Error(`no such file or directory ${args.path}`);
+        return {};
+      case "stat": {
+        const node = this.stat(args.path);
+        if (!node) throw new Error(`no such file or directory ${args.path}`);
+        const stats = {
+          mode: node.dir ? 16877 : 33188,
+          size: node.data.length,
+          lastAccessedTime: Math.floor(node.mtime / 1e3),
+          lastModifiedTime: Math.floor(node.mtime / 1e3)
+        };
+        return { stats, ...stats };
+      }
+      case "getFileInfo":
+        return { size: this.read(args.filePath).length };
+      case "mkdir":
+        this.mkdir(args.dirPath, !!args.recursive);
+        return {};
+      case "readdir":
+        return { files: this.readdir(args.dirPath) };
+      case "unlink":
+        this.remove(args.filePath, { dir: false });
+        return {};
+      case "rmdir": {
+        const target = this.normalize(args.dirPath);
+        const prefix = target === "/" ? "/" : target + "/";
+        if (this.roots.some((root) => root === target || root.startsWith(prefix))) {
+          throw new Error(`operation not permitted ${args.dirPath}`);
+        }
+        this.remove(args.dirPath, { dir: true, recursive: !!args.recursive });
+        return {};
+      }
+      default:
+        throw new Error(`unsupported filesystem operation ${operation}`);
+    }
+  }
+};
+
+// src/server/DevServer.ts
 import fs4 from "fs";
 import http from "http";
+import net from "net";
+import os from "os";
 import path4 from "path";
 import express2 from "express";
 import { WebSocket as WebSocket2, WebSocketServer } from "ws";
@@ -445,6 +571,194 @@ function readJsonFile(file) {
   }
 }
 
+// src/runtime/networkPanel.ts
+var PROXY_PREFIX = "/__wxa__/proxy/";
+var MOCK_PREFIX = "/__wxa__/mock/";
+function fromServerPath(prefix, serverPath) {
+  if (!serverPath.startsWith(prefix)) return null;
+  const match = /^(https?)\/([^/?#]+)(.*)$/.exec(serverPath.slice(prefix.length));
+  if (!match) return null;
+  const url = `${match[1]}://${match[2]}${match[3]}`;
+  try {
+    new URL(url);
+    return url;
+  } catch {
+    return null;
+  }
+}
+
+// src/server/plugins.ts
+import { readWxvpkgFile, readWxvpkgIndex } from "@open-wxa/wxa-runner-extractor";
+
+// src/server/wechatDev.ts
+import { TICKET_ENV } from "@open-wxa/wxa-runner-extractor";
+var BASE_URL = "https://servicewechat.com";
+var CLIENT_VERSION = "1021810240";
+var DEFAULT_TIMEOUT = 1e4;
+var ERROR_HINTS = {
+  // 40001：开发者工具刷新过 ticket，旧的随即作废
+  40001: "\uFF08\u767B\u5F55\u6001\u5DF2\u5931\u6548\uFF0C\u8BF7\u5728\u5FAE\u4FE1\u5F00\u53D1\u8005\u5DE5\u5177\u91CC\u91CD\u65B0\u767B\u5F55\uFF09",
+  40029: "\uFF08\u767B\u5F55\u6001\u5DF2\u5931\u6548\uFF0C\u8BF7\u5728\u5FAE\u4FE1\u5F00\u53D1\u8005\u5DE5\u5177\u91CC\u91CD\u65B0\u767B\u5F55\uFF09",
+  85023: "\uFF08\u5F53\u524D\u5FAE\u4FE1\u8D26\u53F7\u4E0D\u662F\u8BE5\u5C0F\u7A0B\u5E8F\u7684\u5F00\u53D1\u8005\uFF09"
+};
+function requireUsableTicket(ticket) {
+  if (!ticket) throw new Error(`\u672A\u627E\u5230\u5FAE\u4FE1\u5F00\u53D1\u8005\u5DE5\u5177\u7684\u767B\u5F55\u6001\uFF0C\u8BF7\u767B\u5F55\u5F00\u53D1\u8005\u5DE5\u5177\uFF0C\u6216\u8BBE\u7F6E\u73AF\u5883\u53D8\u91CF ${TICKET_ENV}`);
+  if (ticket.expiredAt !== void 0 && ticket.expiredAt <= Date.now()) {
+    throw new Error("\u5FAE\u4FE1\u5F00\u53D1\u8005\u5DE5\u5177\u7684\u767B\u5F55\u6001\u5DF2\u8FC7\u671F\uFF0C\u8BF7\u6253\u5F00\u5F00\u53D1\u8005\u5DE5\u5177\u5237\u65B0\u767B\u5F55\u6001");
+  }
+  return ticket.newticket;
+}
+function explainErrcode(errcode) {
+  return errcode !== void 0 && ERROR_HINTS[errcode] || "";
+}
+function requireOk(body, action) {
+  const errcode = body.baseresponse?.errcode;
+  if (errcode !== 0) throw new Error(`${action} ${errcode}: ${body.baseresponse?.errmsg || "\u672A\u77E5\u9519\u8BEF"}${explainErrcode(errcode)}`);
+  return body;
+}
+var WechatDevClient = class {
+  /**
+   * @param findTicket 每次请求都重新取：开发者工具重新登录、切换账号后不用重启服务器
+   */
+  constructor(appid, findTicket) {
+    this.appid = appid;
+    this.findTicket = findTicket;
+  }
+  /**
+   * POST JSON 到 path（如 wxa-dev-logic/jslogin），带上 appid 和开发者 ticket
+   *
+   * @throws 没有可用的登录态、超时、连不上、HTTP 状态不是 2xx 时，消息是给用户看的原因
+   */
+  async post(path5, body, timeout = DEFAULT_TIMEOUT) {
+    const query = new URLSearchParams({ appid: this.appid, newticket: requireUsableTicket(await this.findTicket()), clientversion: CLIENT_VERSION });
+    const response = await fetch(`${BASE_URL}/${path5}?${query}`, {
+      method: "POST",
+      headers: { "Content-Type": "application/json" },
+      body: JSON.stringify(body),
+      signal: AbortSignal.timeout(timeout)
+    }).catch((error) => {
+      throw new Error(error.name === "TimeoutError" ? `\u8BF7\u6C42\u5FAE\u4FE1\u670D\u52A1\u5668\u8D85\u65F6\uFF08${timeout / 1e3}s\uFF09` : `\u8BF7\u6C42\u5FAE\u4FE1\u670D\u52A1\u5668\u5931\u8D25\uFF1A${error.cause?.message ?? error.message}`);
+    });
+    if (!response.ok) throw new Error(`\u5FAE\u4FE1\u670D\u52A1\u5668\u8FD4\u56DE HTTP ${response.status}`);
+    return response;
+  }
+  /** 同 post，返回解析后的 JSON */
+  async postJson(path5, body) {
+    return (await this.post(path5, body)).json();
+  }
+};
+
+// src/server/plugins.ts
+var DOWNLOAD_TIMEOUT = 3e4;
+var PACKAGE_MAGIC = 190;
+var PluginStore = class {
+  /**
+   * @param wechat 开启 --devtools-login 时才有，没有时不下载插件
+   */
+  constructor(wechat, logger) {
+    this.wechat = wechat;
+    this.logger = logger;
+    /** provider@version → 下载结果；失败的不留，下次打开小程序时重试 */
+    this.downloads = /* @__PURE__ */ new Map();
+    /**
+     * 这次打开小程序时决定用哪些插件。同一次打开的逻辑层、业务模块、渲染层等请求都按它处理：
+     * 各自去下载的话，下载失败时每个请求都会重试，结果还可能前后不一，页面列表和逻辑层对不上
+     */
+    this.selection = null;
+    /** 没开 --devtools-login 的提示每个插件只说一次 */
+    this.warned = /* @__PURE__ */ new Set();
+  }
+  /** 打开小程序时（宿主取 app-info）调用：重新决定用哪些插件，下载过的直接用，上次失败的重试 */
+  async refresh(build2) {
+    this.selection = this.select(build2);
+    return withPlugins(build2, await this.selection);
+  }
+  /** 其余请求沿用这次打开时的决定，不触发下载；还没决定过时（如直接请求逻辑层）先决定一次 */
+  async current(build2) {
+    this.selection ??= this.select(build2);
+    return withPlugins(build2, await this.selection);
+  }
+  /** app.json 声明的插件；下载不了的跳过，在终端说明原因，小程序自己的页面照常可用 */
+  async select(build2) {
+    const declared = build2.wxConfig.plugins || {};
+    const results = await Promise.all(Object.entries(declared).map(
+      ([alias, { provider, version }]) => provider && version ? this.load(alias, provider, version) : null
+    ));
+    return results.filter((plugin) => !!plugin);
+  }
+  async load(alias, provider, version) {
+    const label = `\u63D2\u4EF6 ${alias}\uFF08${provider}@${version}\uFF09`;
+    if (!this.wechat) {
+      this.warnOnce(label, `[wxa-runner] ${label} \u7684\u4EE3\u7801\u8981\u7528\u5F00\u53D1\u8005\u7684\u767B\u5F55\u6001\u5411\u5FAE\u4FE1\u4E0B\u8F7D\uFF0C\u542F\u52A8\u65F6\u52A0 --devtools-login`);
+      return null;
+    }
+    const key = `${provider}@${version}`;
+    let download = this.downloads.get(key);
+    if (!download) {
+      download = this.download(this.wechat, alias, provider, version);
+      this.downloads.set(key, download);
+      download.catch(() => this.downloads.delete(key));
+    }
+    try {
+      return await download;
+    } catch (error) {
+      this.logger.warn(`[wxa-runner] ${label} \u4E0B\u8F7D\u5931\u8D25\uFF1A${error.message}`);
+      return null;
+    }
+  }
+  /** @throws 没有登录态、连不上、微信拒绝或返回的不是插件代码包时，消息是原因 */
+  async download(wechat, alias, provider, version) {
+    const response = await wechat.post("wxa-dev/getplugincode", { plugin_id: provider, plugin_version: version }, DOWNLOAD_TIMEOUT);
+    const data = Buffer.from(await response.arrayBuffer());
+    if (data[0] !== PACKAGE_MAGIC) {
+      let body = {};
+      try {
+        body = JSON.parse(data.toString("utf8"));
+      } catch {
+      }
+      if (body.baseresponse?.errcode) requireOk(body, "\u5FAE\u4FE1\u62D2\u7EDD\u4E0B\u8F7D");
+      throw new Error("\u5FAE\u4FE1\u6CA1\u6709\u8FD4\u56DE\u63D2\u4EF6\u4EE3\u7801");
+    }
+    const files = new Map(readWxvpkgIndex(data).map((entry) => [entry.name, Buffer.from(readWxvpkgFile(data, entry))]));
+    const pluginJson = JSON.parse(files.get("/plugin.json")?.toString("utf8") || "{}");
+    return {
+      alias,
+      provider,
+      version,
+      files,
+      pages: Object.values(pluginJson.pages || {}),
+      pageConfigs: pluginJson.page || {}
+    };
+  }
+  warnOnce(key, message) {
+    if (this.warned.has(key)) return;
+    this.warned.add(key);
+    this.logger.warn(message);
+  }
+};
+function withPlugins(build2, plugins) {
+  if (!plugins.length) return { ...build2, plugins };
+  return {
+    ...build2,
+    plugins,
+    pages: [...build2.pages, ...plugins.flatMap((plugin) => plugin.pages)],
+    wxConfig: {
+      ...build2.wxConfig,
+      page: { ...build2.wxConfig.page, ...Object.assign({}, ...plugins.map((plugin) => plugin.pageConfigs)) }
+    }
+  };
+}
+function findPluginPage(build2, pagePath) {
+  for (const plugin of build2.plugins) {
+    const prefix = `__plugin__/${plugin.provider}/`;
+    if (plugin.pages.includes(pagePath)) return { plugin, innerPath: pagePath.slice(prefix.length) };
+  }
+  return null;
+}
+function pluginScriptUrl(plugin, file) {
+  return `/__wxa__/plugin/${encodeURIComponent(plugin.provider)}/${encodeURIComponent(plugin.version)}/${file}`;
+}
+
 // src/server/html.ts
 function hostHtml() {
   return `<!DOCTYPE html>
@@ -471,10 +785,11 @@ function appserviceHtml(build2, launch, options) {
     ...options.isolated ? { isIsolateContext: true } : {}
   };
   const v = build2.version;
+  const pluginUrls = build2.plugins.map((plugin) => pluginScriptUrl(plugin, "appservice.js"));
   const moduleUrls = build2.modules.map((id) => `/__wxa__/module/${encodeURI(id)}?v=${v}`);
   const bootstrapUrl = `/__wxa__/service-bootstrap.js?v=${v}`;
   if (options.isolated) {
-    const scripts = [...moduleUrls, bootstrapUrl];
+    const scripts = [...pluginUrls, ...moduleUrls, bootstrapUrl];
     return `<!DOCTYPE html>
 <html>
 <head>
@@ -487,7 +802,7 @@ function appserviceHtml(build2, launch, options) {
 <body></body>
 </html>`;
   }
-  const modules = moduleUrls.map((src) => `<script src="${src}"></script>`).join("\n");
+  const modules = [...pluginUrls, ...moduleUrls].map((src) => `<script src="${src}"></script>`).join("\n");
   return `<!DOCTYPE html>
 <html>
 <head>
@@ -521,29 +836,13 @@ ${empty ? "" : '<script src="/__baselib__/WASubContext.js"></script>\n'}<script>
 </html>`;
 }
 function webviewHtml(build2, pagePath, webviewId, options) {
-  const pageConfig = build2.wxConfig.page?.[pagePath + ".html"];
-  const window = { ...build2.wxConfig.global?.window, ...pageConfig?.window };
-  const wxConfig = { ...build2.wxConfig, window };
   const id = Number(webviewId) || 0;
   return `<!DOCTYPE html>
 <html>
 <head>
-<meta charset="utf-8">
-<meta name="viewport" content="width=device-width, initial-scale=1, maximum-scale=1, user-scalable=no">
-<title>${escapeHtml(pagePath)}</title>
-<!-- \u5C0F\u7A0B\u5E8F\u6E32\u67D3\u5C42\u7684\u9ED8\u8BA4\u5B57\u53F7\u662F 16px\uFF1B\u4E0D\u58F0\u660E\u7684\u8BDD\u4F1A\u7EE7\u627F\u6D4F\u89C8\u5668\u8BBE\u7F6E\u91CC\u7684\u9ED8\u8BA4\u5B57\u53F7\u3002\u653E\u5728\u6700\u524D\u9762\uFF0C\u57FA\u7840\u5E93\u548C\u9875\u9762\u6837\u5F0F\u90FD\u80FD\u8986\u76D6\u5B83 -->
-<style>html{font-size:16px}</style>
-<!-- \u771F\u673A\u7684\u6EDA\u52A8\u6761\u662F\u4E0D\u5360\u5E03\u5C40\u7684\u6D6E\u5C42\uFF1B\u684C\u9762\u6D4F\u89C8\u5668\u7684\u5E38\u89C4\u6EDA\u52A8\u6761\u548C\u81EA\u5B9A\u4E49 ::-webkit-scrollbar \u4F1A\u6324\u7A84\u9875\u9762\uFF0C\u4E00\u5F8B\u9690\u85CF\u3002
-     scrollbar-width \u4F18\u5148\u4E8E ::-webkit-scrollbar\uFF0C\u9875\u9762\u6837\u5F0F\u4E0D\u4F1A\u518D\u628A\u6EDA\u52A8\u6761\u52A0\u56DE\u6765 -->
-<style>*{scrollbar-width:none}::-webkit-scrollbar{display:none}</style>
-<!-- \u903B\u8F91\u5C42\u5EFA\u7684 2d\u3001webgl \u753B\u5E03\u642C\u8FDB wx-canvas \u540E\u94FA\u6EE1\u5B83\uFF08\u89C1 frame.ts \u7684 moveCanvasesIntoPages\uFF09\u3002
-     \u57FA\u7840\u5E93\u8FD8\u4F1A\u6309\u903B\u8F91\u5C42\u91CC\u7684\u5E03\u5C40\u6539\u5B83\u7684\u4F4D\u7F6E\u548C\u663E\u9690\uFF0C\u8FD9\u91CC\u4E00\u5F8B\u538B\u4F4F\uFF1B\u89E6\u6478\u7167\u5E38\u4EA4\u7ED9 wx-canvas \u81EA\u5DF1\u7684 canvas -->
-<style>.wxa-service-canvas{position:absolute!important;left:0!important;top:0!important;width:100%!important;height:100%!important;visibility:inherit!important;pointer-events:none}</style>
-<script>var __wxConfig = ${toJs(wxConfig)};</script>
-<script src="/__wxa__/runtime/frame.js" data-kind="webview" data-webview-id="${id}"></script>
-<script src="/__baselib__/WAWebview.js"></script>
+${webviewHead(build2, pagePath, id)}
 ${enableHotUpdate(options.hot)}<script src="/__wxa__/page-frame.js?v=${build2.version}"></script>
-${window.disableScroll ? "<style>body{overflow-y:hidden}</style>" : ""}
+${pageWindow(build2, pagePath).disableScroll ? "<style>body{overflow-y:hidden}</style>" : ""}
 </head>
 <body>
 <script>
@@ -565,7 +864,7 @@ ${window.disableScroll ? "<style>body{overflow-y:hidden}</style>" : ""}
 }
 function workerScript(build2, baseLib) {
   const modules = build2.workerModules.map((id) => `/__wxa__/module/${encodeURI(id)}?v=${build2.version}`);
-  const prelude = `var __wxConfig = ${toJs(build2.wxConfig)};
+  const prelude = `var __wxConfig = ${toJs(build2.wxConfig)}; __wxConfig.env.USER_DATA_PATH = location.origin + "/__wxa__/usr/" + new URL(location.href).searchParams.get("session");
 importScripts('/__wxa__/runtime/worker.js');
 `;
   if (!baseLib.hasWorker) {
@@ -579,6 +878,42 @@ self.console = __wxaConsole;
 importScripts(${modules.map((url) => toJs(url)).join(", ")});
 `;
 }
+function pluginWebviewHtml(build2, plugin, innerPath, pagePath, webviewId) {
+  const id = Number(webviewId) || 0;
+  const page = plugin.files.get(`/${innerPath}.html`)?.toString("utf8") ?? `<script>console.error(${JSON.stringify(`[wxa-runner] \u63D2\u4EF6 ${plugin.alias} \u91CC\u6CA1\u6709\u9875\u9762 ${innerPath}`)})</script>`;
+  return `<!DOCTYPE html>
+<html>
+<head>
+${webviewHead(build2, pagePath, id)}
+<script src="${pluginScriptUrl(plugin, "pageframe.js")}"></script>
+${pageWindow(build2, pagePath).disableScroll ? "<style>body{overflow-y:hidden}</style>" : ""}
+</head>
+<body>
+${page}
+<script>parent.__wxaHost.frameLoaded('webview', ${id});</script>
+</body>
+</html>`;
+}
+function pageWindow(build2, pagePath) {
+  return { ...build2.wxConfig.global?.window, ...build2.wxConfig.page?.[pagePath + ".html"]?.window };
+}
+function webviewHead(build2, pagePath, id) {
+  const wxConfig = { ...build2.wxConfig, window: pageWindow(build2, pagePath) };
+  return `<meta charset="utf-8">
+<meta name="viewport" content="width=device-width, initial-scale=1, maximum-scale=1, user-scalable=no">
+<title>${escapeHtml(pagePath)}</title>
+<!-- \u5C0F\u7A0B\u5E8F\u6E32\u67D3\u5C42\u7684\u9ED8\u8BA4\u5B57\u53F7\u662F 16px\uFF1B\u4E0D\u58F0\u660E\u7684\u8BDD\u4F1A\u7EE7\u627F\u6D4F\u89C8\u5668\u8BBE\u7F6E\u91CC\u7684\u9ED8\u8BA4\u5B57\u53F7\u3002\u653E\u5728\u6700\u524D\u9762\uFF0C\u57FA\u7840\u5E93\u548C\u9875\u9762\u6837\u5F0F\u90FD\u80FD\u8986\u76D6\u5B83 -->
+<style>html{font-size:16px}</style>
+<!-- \u771F\u673A\u7684\u6EDA\u52A8\u6761\u662F\u4E0D\u5360\u5E03\u5C40\u7684\u6D6E\u5C42\uFF1B\u684C\u9762\u6D4F\u89C8\u5668\u7684\u5E38\u89C4\u6EDA\u52A8\u6761\u548C\u81EA\u5B9A\u4E49 ::-webkit-scrollbar \u4F1A\u6324\u7A84\u9875\u9762\uFF0C\u4E00\u5F8B\u9690\u85CF\u3002
+     scrollbar-width \u4F18\u5148\u4E8E ::-webkit-scrollbar\uFF0C\u9875\u9762\u6837\u5F0F\u4E0D\u4F1A\u518D\u628A\u6EDA\u52A8\u6761\u52A0\u56DE\u6765 -->
+<style>*{scrollbar-width:none}::-webkit-scrollbar{display:none}</style>
+<!-- \u903B\u8F91\u5C42\u5EFA\u7684 2d\u3001webgl \u753B\u5E03\u642C\u8FDB wx-canvas \u540E\u94FA\u6EE1\u5B83\uFF08\u89C1 frame.ts \u7684 moveCanvasesIntoPages\uFF09\u3002
+     \u57FA\u7840\u5E93\u8FD8\u4F1A\u6309\u903B\u8F91\u5C42\u91CC\u7684\u5E03\u5C40\u6539\u5B83\u7684\u4F4D\u7F6E\u548C\u663E\u9690\uFF0C\u8FD9\u91CC\u4E00\u5F8B\u538B\u4F4F\uFF1B\u89E6\u6478\u7167\u5E38\u4EA4\u7ED9 wx-canvas \u81EA\u5DF1\u7684 canvas -->
+<style>.wxa-service-canvas{position:absolute!important;left:0!important;top:0!important;width:100%!important;height:100%!important;visibility:inherit!important;pointer-events:none}</style>
+<script>var __wxConfig = ${toJs(wxConfig)};</script>
+<script src="/__wxa__/runtime/frame.js" data-kind="webview" data-webview-id="${id}"></script>
+<script src="/__baselib__/WAWebview.js"></script>`;
+}
 function escapeHtml(text) {
   return text.replace(/[&<>"]/g, (ch) => ({ "&": "&amp;", "<": "&lt;", ">": "&gt;", '"': "&quot;" })[ch]);
 }
@@ -611,13 +946,62 @@ function vlq(value) {
   return out;
 }
 
+// src/server/forwardConsole.ts
+var MAX_LENGTH = 4e3;
+var LIMIT_PER_SECOND = 20;
+var CONTROL_CHARS = /[\u0000-\u0008\u000b-\u001f\u007f-\u009f]/g;
+function printBrowserReports(socket, logger) {
+  let windowStart = 0;
+  let printed = 0;
+  let dropped = 0;
+  socket.on("message", (data) => {
+    const report = parseReport(data);
+    if (!report) return;
+    const now = Date.now();
+    if (now - windowStart >= 1e3) {
+      windowStart = now;
+      printed = 0;
+    }
+    if (printed >= LIMIT_PER_SECOND) {
+      if (dropped++ === 0) {
+        setTimeout(() => {
+          logger.warn(`[wxa-runner] \u6D4F\u89C8\u5668 1 \u79D2\u5185\u8F6C\u53D1\u7684\u62A5\u9519\u592A\u591A\uFF0C\u7701\u7565\u4E86 ${dropped} \u6761`);
+          dropped = 0;
+        }, windowStart + 1e3 - now).unref();
+      }
+      return;
+    }
+    printed++;
+    logger[report.level](`[wxa-runner] ${clean(report.text)}`);
+  });
+}
+function parseReport(data) {
+  try {
+    const report = JSON.parse(data.toString());
+    if (report?.type === "console" && (report.level === "warn" || report.level === "error") && typeof report.text === "string") return report;
+  } catch {
+  }
+  return null;
+}
+function clean(text) {
+  const printable = text.replace(CONTROL_CHARS, "");
+  return printable.length > MAX_LENGTH ? `${printable.slice(0, MAX_LENGTH)}\u2026\uFF08\u5DF2\u622A\u65AD\uFF09` : printable;
+}
+function ignoreConsoleHook(sourceMap) {
+  const map = JSON.parse(sourceMap);
+  map.x_google_ignoreList = map.sources.flatMap((source, index) => source.endsWith("consoleHook.ts") ? [index] : []);
+  return JSON.stringify(map);
+}
+
 // src/server/proxy.ts
+import { Readable } from "stream";
+import { pipeline } from "stream/promises";
 var DROPPED_REQUEST_HEADERS = /* @__PURE__ */ new Set(["host", "connection", "content-length", "transfer-encoding", "keep-alive", "upgrade", "expect"]);
 var DROPPED_RESPONSE_HEADERS = /* @__PURE__ */ new Set(["content-encoding", "content-length", "transfer-encoding", "connection", "set-cookie"]);
 async function handleProxy(req, res) {
-  const target = String(req.query.url || "");
-  if (!/^https?:\/\//i.test(target)) {
-    res.status(400).set("x-wxa-proxy-error", "1").send(`invalid url "${target}"`);
+  const target = fromServerPath(PROXY_PREFIX, req.originalUrl);
+  if (!target) {
+    res.status(400).set("x-wxa-proxy-error", "1").send(`invalid url "${req.originalUrl}"`);
     return;
   }
   let requestHeaders = {};
@@ -639,31 +1023,47 @@ async function handleProxy(req, res) {
     headers["content-type"] = browserContentType;
   }
   const hasBody = !["GET", "HEAD"].includes(req.method) && Buffer.isBuffer(req.body) && req.body.length > 0;
-  let upstream;
+  const controller = new AbortController();
+  const cancel = () => controller.abort();
+  res.once("close", cancel);
   try {
-    upstream = await fetch(target, {
-      method: req.method,
-      headers,
-      body: hasBody ? req.body : void 0,
-      redirect: "follow"
+    let upstream;
+    try {
+      upstream = await fetch(target, {
+        method: req.method,
+        headers,
+        body: hasBody ? req.body : void 0,
+        redirect: "follow",
+        signal: controller.signal
+      });
+    } catch (error) {
+      if (res.destroyed || controller.signal.aborted) return;
+      const cause = error?.cause?.message;
+      res.status(502).set("x-wxa-proxy-error", "1").send(cause || error.message);
+      return;
+    }
+    const responseHeaders = {};
+    upstream.headers.forEach((value, key) => {
+      responseHeaders[key] = value;
     });
+    const setCookies = typeof upstream.headers.getSetCookie === "function" ? upstream.headers.getSetCookie() : [];
+    res.status(upstream.status);
+    upstream.headers.forEach((value, key) => {
+      if (!DROPPED_RESPONSE_HEADERS.has(key)) res.setHeader(key, value);
+    });
+    res.setHeader("x-wxa-headers", encodeURIComponent(JSON.stringify(responseHeaders)));
+    res.setHeader("x-wxa-set-cookie", encodeURIComponent(JSON.stringify(setCookies)));
+    res.flushHeaders();
+    if (!upstream.body) {
+      res.end();
+      return;
+    }
+    await pipeline(Readable.fromWeb(upstream.body), res);
   } catch (error) {
-    const cause = error?.cause?.message;
-    res.status(502).set("x-wxa-proxy-error", "1").send(cause || error.message);
-    return;
+    if (!res.destroyed) res.destroy(error);
+  } finally {
+    res.off("close", cancel);
   }
-  const responseHeaders = {};
-  upstream.headers.forEach((value, key) => {
-    responseHeaders[key] = value;
-  });
-  const setCookies = typeof upstream.headers.getSetCookie === "function" ? upstream.headers.getSetCookie() : [];
-  res.status(upstream.status);
-  upstream.headers.forEach((value, key) => {
-    if (!DROPPED_RESPONSE_HEADERS.has(key)) res.setHeader(key, value);
-  });
-  res.setHeader("x-wxa-headers", encodeURIComponent(JSON.stringify(responseHeaders)));
-  res.setHeader("x-wxa-set-cookie", encodeURIComponent(JSON.stringify(setCookies)));
-  res.send(Buffer.from(await upstream.arrayBuffer()));
 }
 
 // src/server/hmr.ts
@@ -681,10 +1081,10 @@ function planHotUpdate(files, units) {
 
 // src/server/developerTicket.ts
 import { execFile } from "child_process";
-import { randomUUID } from "crypto";
+import { randomUUID as randomUUID2 } from "crypto";
 import { setTimeout as sleep } from "timers/promises";
 import { WebSocket } from "ws";
-import { findDeveloperTicket, findElectronDevtoolsCli, TICKET_ENV } from "@open-wxa/wxa-runner-extractor";
+import { findDeveloperTicket, findElectronDevtoolsCli, TICKET_ENV as TICKET_ENV2 } from "@open-wxa/wxa-runner-extractor";
 var AUTO_PORT = 9420;
 var CLI_TIMEOUT = 6e4;
 var AUTOMATOR_TIMEOUT = 5e3;
@@ -697,7 +1097,7 @@ function developerTicketSource(projectPath, logger) {
   const startOnce = () => {
     if (!automatorPort) {
       const starting = startAutomation(cli, projectPath).then((port) => {
-        logger.log(`[wxa-runner] \u771F\u5B9E\u767B\u5F55\uFF1A\u5DF2\u5728\u5FAE\u4FE1\u5F00\u53D1\u8005\u5DE5\u5177\u91CC\u4E3A\u9879\u76EE\u5F00\u542F\u81EA\u52A8\u5316\u63A5\u53E3\uFF08\u7AEF\u53E3 ${port}\uFF09\uFF0Cticket \u4ECE\u5F00\u53D1\u8005\u5DE5\u5177\u5B9E\u65F6\u83B7\u53D6`);
+        logger.log(`[wxa-runner] --devtools-login\uFF1A\u5DF2\u5728\u5FAE\u4FE1\u5F00\u53D1\u8005\u5DE5\u5177\u91CC\u4E3A\u9879\u76EE\u5F00\u542F\u81EA\u52A8\u5316\u63A5\u53E3\uFF08\u7AEF\u53E3 ${port}\uFF09\uFF0Cticket \u4ECE\u5F00\u53D1\u8005\u5DE5\u5177\u5B9E\u65F6\u83B7\u53D6`);
         return port;
       });
       starting.catch(() => {
@@ -708,7 +1108,7 @@ function developerTicketSource(projectPath, logger) {
     return automatorPort;
   };
   return async () => {
-    if (process.env[TICKET_ENV]) return { newticket: process.env[TICKET_ENV] };
+    if (process.env[TICKET_ENV2]) return { newticket: process.env[TICKET_ENV2] };
     const port = startOnce();
     try {
       return await requestTicketOnceWindowReady(await port, projectPath);
@@ -773,7 +1173,7 @@ function cliErrorMessage(stdout) {
 }
 function requestTicket(port) {
   return new Promise((resolve, reject) => {
-    const id = `wxa-runner-${randomUUID()}`;
+    const id = `wxa-runner-${randomUUID2()}`;
     const socket = new WebSocket(`ws://127.0.0.1:${port}`);
     const settle = (finish) => {
       clearTimeout(timer);
@@ -813,74 +1213,62 @@ function explainAutomatorError(message) {
   return new Error(`\u5FAE\u4FE1\u5F00\u53D1\u8005\u5DE5\u5177\u8FD4\u56DE\u9519\u8BEF\uFF1A${message}`);
 }
 
-// src/server/realLogin.ts
+// src/server/devtoolsLogin.ts
 import express from "express";
-import { findDeveloperTicket as findDeveloperTicket2, TICKET_ENV as TICKET_ENV2 } from "@open-wxa/wxa-runner-extractor";
-var DEV_LOGIC = "https://servicewechat.com/wxa-dev-logic";
-var CLIENT_VERSION = "1021810240";
-var UPSTREAM_TIMEOUT = 1e4;
+import { findDeveloperTicket as findDeveloperTicket2 } from "@open-wxa/wxa-runner-extractor";
 var LOOPBACK_ADDRESSES = ["127.0.0.1", "::1", "::ffff:127.0.0.1"];
 var LOOPBACK_HOSTS = ["localhost", "127.0.0.1", "[::1]"];
-var ERROR_HINTS = {
-  // 40001：开发者工具刷新过 ticket，旧的随即作废
-  40001: "\uFF08\u767B\u5F55\u6001\u5DF2\u5931\u6548\uFF0C\u8BF7\u5728\u5FAE\u4FE1\u5F00\u53D1\u8005\u5DE5\u5177\u91CC\u91CD\u65B0\u767B\u5F55\uFF09",
-  40029: "\uFF08\u767B\u5F55\u6001\u5DF2\u5931\u6548\uFF0C\u8BF7\u5728\u5FAE\u4FE1\u5F00\u53D1\u8005\u5DE5\u5177\u91CC\u91CD\u65B0\u767B\u5F55\uFF09",
-  85023: "\uFF08\u5F53\u524D\u5FAE\u4FE1\u8D26\u53F7\u4E0D\u662F\u8BE5\u5C0F\u7A0B\u5E8F\u7684\u5F00\u53D1\u8005\uFF09"
-};
-function requireUsableTicket(ticket) {
-  if (!ticket) throw new Error(`\u672A\u627E\u5230\u5FAE\u4FE1\u5F00\u53D1\u8005\u5DE5\u5177\u7684\u767B\u5F55\u6001\uFF0C\u8BF7\u767B\u5F55\u5F00\u53D1\u8005\u5DE5\u5177\uFF0C\u6216\u8BBE\u7F6E\u73AF\u5883\u53D8\u91CF ${TICKET_ENV2}`);
-  if (ticket.expiredAt !== void 0 && ticket.expiredAt <= Date.now()) {
-    throw new Error("\u5FAE\u4FE1\u5F00\u53D1\u8005\u5DE5\u5177\u7684\u767B\u5F55\u6001\u5DF2\u8FC7\u671F\uFF0C\u8BF7\u6253\u5F00\u5F00\u53D1\u8005\u5DE5\u5177\u5237\u65B0\u767B\u5F55\u6001");
-  }
-  return ticket.newticket;
-}
-function realLoginRouter(appid, findTicket = findDeveloperTicket2) {
-  const callDevLogic = async (endpoint, body) => {
-    const query = new URLSearchParams({ appid, newticket: requireUsableTicket(await findTicket()), clientversion: CLIENT_VERSION });
-    const response = await fetch(`${DEV_LOGIC}/${endpoint}?${query}`, {
-      method: "POST",
-      headers: { "Content-Type": "application/json" },
-      body: JSON.stringify(body),
-      signal: AbortSignal.timeout(UPSTREAM_TIMEOUT)
-    }).catch((error) => {
-      throw new Error(error.name === "TimeoutError" ? `\u8BF7\u6C42\u5FAE\u4FE1\u670D\u52A1\u5668\u8D85\u65F6\uFF08${UPSTREAM_TIMEOUT / 1e3}s\uFF09` : `\u8BF7\u6C42\u5FAE\u4FE1\u670D\u52A1\u5668\u5931\u8D25\uFF1A${error.cause?.message ?? error.message}`);
-    });
-    if (!response.ok) throw new Error(`\u5FAE\u4FE1\u670D\u52A1\u5668\u8FD4\u56DE HTTP ${response.status}`);
-    return response.json();
-  };
+var FORWARDED_WX_DATA_APIS = ["webapi_servicemarket_jsapi_comm"];
+function devtoolsLoginRouter(appid, findTicket = findDeveloperTicket2) {
+  const wechat = new WechatDevClient(appid, findTicket);
   const router = express.Router();
   router.use(onlyLoopback);
   router.post("/login", respond(async () => {
-    const body = await callDevLogic("jslogin", { scope: ["snsapi_base"] });
-    const errcode = body.baseresponse?.errcode;
-    if (errcode !== 0 || !body.code) {
-      throw new Error(`\u5FAE\u4FE1\u767B\u5F55\u5931\u8D25 ${errcode}: ${body.baseresponse?.errmsg || "\u672A\u77E5\u9519\u8BEF"}${ERROR_HINTS[errcode] ?? ""}`);
-    }
+    const body = requireOk(await wechat.postJson("wxa-dev-logic/jslogin", { scope: ["snsapi_base"] }), "\u5FAE\u4FE1\u767B\u5F55\u5931\u8D25");
+    if (!body.code) throw new Error("\u5FAE\u4FE1\u767B\u5F55\u5931\u8D25\uFF1A\u5FAE\u4FE1\u6CA1\u6709\u8FD4\u56DE code");
     return { code: body.code };
   }));
   router.post("/phone-number", respond(async () => {
-    const body = await callDevLogic("jsgetuserwxphone", { appid });
+    const body = await wechat.postJson("wxa-dev-logic/jsgetuserwxphone", { appid });
     const errcode = body.jsapi_baseresponse?.errcode ?? body.BaseResponse?.Ret;
     if (errcode !== 0 || typeof body.data !== "string") {
       const errmsg = body.jsapi_baseresponse?.errmsg || body.BaseResponse?.ErrMsg?.String || "\u672A\u77E5\u9519\u8BEF";
-      throw new Error(`\u83B7\u53D6\u624B\u673A\u53F7\u5931\u8D25 ${errcode}: ${errmsg}${ERROR_HINTS[errcode] ?? ""}`);
+      throw new Error(`\u83B7\u53D6\u624B\u673A\u53F7\u5931\u8D25 ${errcode}: ${errmsg}${explainErrcode(errcode)}`);
     }
     const { encryptedData, iv } = JSON.parse(body.data);
     return { data: body.data, encryptedData, iv };
   }));
+  router.post("/operate-wx-data", express.json({ limit: "10mb" }), (req, res, next) => {
+    const apiName = req.body?.data?.api_name;
+    if (FORWARDED_WX_DATA_APIS.includes(apiName)) return next();
+    res.status(403).json({ error: `operateWXData \u53EA\u8F6C\u53D1\u670D\u52A1\u5E02\u573A\u7684\u8BF7\u6C42\uFF0C\u4E0D\u8F6C\u53D1 ${apiName}` });
+  }, respond(async (req) => {
+    const body = requireOk(await wechat.postJson("wxa-dev-logic/jsoperatewxdata", { data: JSON.stringify(req.body.data) }), "\u670D\u52A1\u5E02\u573A\u8C03\u7528\u5931\u8D25");
+    if (typeof body.data !== "string") throw new Error("\u670D\u52A1\u5E02\u573A\u8C03\u7528\u5931\u8D25\uFF1A\u5FAE\u4FE1\u6CA1\u6709\u8FD4\u56DE\u7ED3\u679C");
+    return { data: JSON.parse(body.data) };
+  }));
+  router.post("/verify-plugin", express.json(), respond(async (req) => {
+    const body = requireOk(await wechat.postJson("wxa-dev-logic/verifyplugin", { ext_info: JSON.stringify(req.body?.data || {}) }), "\u63D2\u4EF6\u6821\u9A8C\u5931\u8D25");
+    return { data: { list: body.list || [] } };
+  }));
+  router.post("/batch-get-contact", express.json(), respond(async (req) => {
+    const body = requireOk(await wechat.postJson("wxa-dev-logic/batchgetcontact", { appid_list: req.body?.appIds || [] }), "\u83B7\u53D6\u63D2\u4EF6\u4FE1\u606F\u5931\u8D25");
+    const contacts = body.contact_list || [];
+    return { contactList: contacts.filter((contact) => contact.plugin_info).map((contact) => ({ appId: contact.appid, plugin_list: contact.plugin_info.plugin_list })) };
+  }));
   return router;
 }
 function onlyLoopback(req, res, next) {
   if (!LOOPBACK_ADDRESSES.includes(req.socket.remoteAddress || "") || !LOOPBACK_HOSTS.includes(req.hostname)) {
-    res.status(403).json({ error: "\u771F\u5B9E\u767B\u5F55\u63A5\u53E3\u53EA\u5141\u8BB8\u672C\u673A\u8BBF\u95EE" });
+    res.status(403).json({ error: "\u5F00\u53D1\u8005\u767B\u5F55\u6001\u63A5\u53E3\u53EA\u5141\u8BB8\u672C\u673A\u8BBF\u95EE" });
     return;
   }
   next();
 }
 function respond(action) {
-  return async (_req, res) => {
+  return async (req, res) => {
     try {
-      res.json(await action());
+      res.json(await action(req));
     } catch (error) {
       res.status(500).json({ error: error.message });
     }
@@ -1007,24 +1395,37 @@ var DevServer = class {
     this.sockets = null;
     this.watcher = null;
     this.address = "";
+    this.lanAccess = false;
     /** 运行时生成的临时文件（canvas 导出、拍照等），随服务器进程存在 */
-    this.tempFiles = /* @__PURE__ */ new Map();
+    this.fileSessions = /* @__PURE__ */ new Map();
     this.logger = options.logger || console;
     this.project = new MiniProgram(path4.resolve(options.projectPath));
     this.baseLib = resolveBaseLib({ version: options.baseLibVersion, cacheDir: options.baseLibCacheDir });
     if (!this.baseLib.compatible) {
       this.logger.warn(`[wxa-runner] \u57FA\u7840\u5E93 ${this.baseLib.version} \u9AD8\u4E8E\u5DF2\u9A8C\u8BC1\u7684\u7248\u672C\u8303\u56F4\uFF0C\u53EF\u80FD\u65E0\u6CD5\u6B63\u5E38\u8FD0\u884C`);
     }
-    this.ticketSource = options.realLogin ? developerTicketSource(this.project.projectPath, this.logger) : null;
+    if (options.realLogin !== void 0 && options.devtoolsLogin === void 0) {
+      this.logger.warn("[wxa-runner] realLogin\uFF08--real-login\uFF09\u5DF2\u6539\u540D\u4E3A devtoolsLogin\uFF08--devtools-login\uFF09\uFF0C\u65E7\u540D\u4EE5\u540E\u4F1A\u79FB\u9664");
+    }
+    this.devtoolsLogin = (options.devtoolsLogin ?? options.realLogin) === true;
+    this.ticketSource = this.devtoolsLogin ? developerTicketSource(this.project.projectPath, this.logger) : null;
+    this.plugins = new PluginStore(this.ticketSource && new WechatDevClient(this.project.appid, this.ticketSource), this.logger);
     this.device = { ...DEFAULT_DEVICE, ...options.device };
     this.builder = new AppBuilder(this.project);
     this.setupFile = resolveSetupFile(options.setup, this.project.projectPath);
     this.setupEnv = collectSetupEnv(process.env);
     this.app = this.createApp();
   }
+  /** 本机访问的地址 */
   get url() {
     return this.address;
   }
+  /** 局域网里其他设备访问的地址，每块网卡一个；只监听本机时为空 */
+  get networkUrls() {
+    if (!this.lanAccess) return [];
+    const { port } = new URL(this.address);
+    return Object.values(os.networkInterfaces()).flat().filter((net2) => net2 && net2.family === "IPv4" && !net2.internal).map((net2) => `http://${net2.address}:${port}`);
+  }
   async start() {
     try {
       const build2 = await this.builder.build();
@@ -1034,7 +1435,11 @@ var DevServer = class {
 ${error.message}`);
     }
     const server = http.createServer(this.app);
-    this.sockets = new WebSocketServer({ noServer: true });
+    this.sockets = new WebSocketServer({ noServer: true, maxPayload: 64 * 1024 });
+    this.sockets.on("connection", (socket) => {
+      socket.on("error", () => void 0);
+      if (this.options.forwardConsole) printBrowserReports(socket, this.logger);
+    });
     server.on("upgrade", (req, socket, head) => {
       if (req.url?.startsWith("/__wxa__/ws")) {
         this.sockets.handleUpgrade(req, socket, head, (ws) => this.sockets.emit("connection", ws, req));
@@ -1043,15 +1448,12 @@ ${error.message}`);
       }
     });
     const host = this.options.host || "localhost";
-    await new Promise((resolve, reject) => {
-      server.once("error", reject);
-      server.listen(this.options.port ?? 3e3, host, () => resolve());
-    });
+    const port = await listen(server, this.options.port, host, this.logger);
     this.server = server;
-    const { port } = server.address();
-    this.address = `http://${host}:${port}`;
+    this.lanAccess = LOCAL_HOST_OF_ANY_ADDRESS.has(host);
+    this.address = `http://${LOCAL_HOST_OF_ANY_ADDRESS.get(host) ?? host}:${port}`;
     if (this.options.watch !== false) this.startWatching();
-    this.ticketSource?.().then(requireUsableTicket).catch((error) => this.logger.warn(`[wxa-runner] \u771F\u5B9E\u767B\u5F55\u6682\u4E0D\u53EF\u7528\uFF1A${error.message}`));
+    this.ticketSource?.().then(requireUsableTicket).catch((error) => this.logger.warn(`[wxa-runner] \u5F00\u53D1\u8005\u5DE5\u5177\u7684\u767B\u5F55\u6001\u6682\u4E0D\u53EF\u7528\uFF08--devtools-login\uFF09\uFF1A${error.message}`));
     return this.address;
   }
   async close() {
@@ -1064,6 +1466,7 @@ ${error.message}`);
       server.closeAllConnections();
       await new Promise((resolve) => server.close(() => resolve()));
     }
+    this.fileSessions.clear();
   }
   createApp() {
     const app = express2();
@@ -1078,9 +1481,15 @@ ${error.message}`);
     });
     app.get("/__wxa__/app-info.json", async (_req, res) => {
       noStore(res);
-      const base = { appid: this.project.appid, baseLibVersion: this.baseLib.version, device: this.device, realLogin: this.options.realLogin === true };
+      const base = {
+        appid: this.project.appid,
+        baseLibVersion: this.baseLib.version,
+        device: this.device,
+        devtoolsLogin: this.devtoolsLogin,
+        forwardConsole: this.options.forwardConsole ?? false
+      };
       try {
-        const build2 = await this.builder.build();
+        const build2 = await this.plugins.refresh(await this.builder.build());
         const info = { ...base, version: build2.version, wxConfig: build2.wxConfig, pages: build2.pages };
         if (this.setupFile) info.setup = await this.setupInfo(this.setupFile);
         res.json(info);
@@ -1116,7 +1525,19 @@ ${error.message}`);
     app.get(/^\/__wxa__\/webview\/(.+)\.html$/, this.withBuild((build2, req, res, next) => {
       const pagePath = decodeURIComponent(req.params[0]);
       if (!build2.pages.includes(pagePath)) return next();
-      res.type("html").send(webviewHtml(build2, pagePath, Number(req.query.id), { hot: this.hotEnabled }));
+      const pluginPage = findPluginPage(build2, pagePath);
+      res.type("html").send(pluginPage ? pluginWebviewHtml(build2, pluginPage.plugin, pluginPage.innerPath, pagePath, Number(req.query.id)) : webviewHtml(build2, pagePath, Number(req.query.id), { hot: this.hotEnabled }));
+    }));
+    app.get("/__wxa__/plugin/:provider/:version/:file(appservice.js|pageframe.js)", this.withBuild((build2, req, res, next) => {
+      const { provider, version, file } = req.params;
+      const code = build2.plugins.find((plugin) => plugin.provider === provider && plugin.version === version)?.files.get(`/${file}`);
+      if (!code) return next();
+      res.type("js").send(code);
+    }));
+    app.get(/^\/__plugin__\/([^/]+)(\/.+)$/, this.withBuild((build2, req, res, next) => {
+      const file = build2.plugins.find((plugin) => plugin.provider === req.params[0])?.files.get(decodeURIComponent(req.params[1]));
+      if (!file) return next();
+      res.type(path4.extname(req.params[1]) || "application/octet-stream").send(file);
     }));
     app.get(/^\/__wxa__\/module\/(.+\.js)$/, this.withBuild((build2, req, res) => {
       const id = decodeURIComponent(req.params[0]);
@@ -1145,7 +1566,18 @@ ${error.message}`);
     app.get("/__wxa__/page-frame.js", this.withBuild((build2, _req, res) => {
       res.type("js").send(build2.pageFrame);
     }));
-    app.use("/__wxa__/runtime", express2.static(this.runtimeDir(), { cacheControl: false }));
+    app.get("/__wxa__/runtime/frame.js.map", (_req, res, next) => {
+      const file = path4.join(this.runtimeDir(), "frame.js.map");
+      if (!fs4.existsSync(file)) return next();
+      res.type("json").send(ignoreConsoleHook(fs4.readFileSync(file, "utf8")));
+    });
+    app.use("/__wxa__/runtime", express2.static(this.runtimeDir(), {
+      cacheControl: false,
+      // Service Worker 默认只能接管自己所在目录下的页面，宿主页面在根路径
+      setHeaders: (res, file) => {
+        if (path4.basename(file) === "sw.js") res.setHeader("Service-Worker-Allowed", "/");
+      }
+    }));
     const sourceMaps = /* @__PURE__ */ new Map();
     app.get(/^\/__baselib__\/(.+\.js)\.map$/, (req, res, next) => {
       const file = path4.resolve(this.baseLib.dir, req.params[0]);
@@ -1159,16 +1591,45 @@ ${error.message}`);
         if (file.endsWith(".js")) res.setHeader("SourceMap", `${path4.basename(file)}.map`);
       }
     }));
-    app.all("/__wxa__/proxy", express2.raw({ type: () => true, limit: "100mb" }), handleProxy);
-    app.post("/__wxa__/tmp", express2.raw({ type: () => true, limit: "100mb" }), (req, res) => {
+    app.use(PROXY_PREFIX, express2.raw({ type: () => true, limit: "100mb" }), handleProxy);
+    app.use(MOCK_PREFIX, (_req, res) => {
+      res.status(503).type("text").send("\u8FD9\u4E2A\u8BF7\u6C42\u5DF2\u88AB\u62E6\u622A\u89C4\u5219\u62E6\u4E0B\uFF0C\u8FD9\u91CC\u53EA\u7528\u4E8E\u5728 Network \u9762\u677F\u91CC\u663E\u793A\u5B83\u3002Service Worker \u6CA1\u6709\u751F\u6548\uFF08\u5982 DevTools \u52FE\u9009\u4E86 Bypass for network\uFF09\uFF0C\u770B\u4E0D\u5230\u62E6\u622A\u89C4\u5219\u7ED9\u51FA\u7684\u54CD\u5E94");
+    });
+    const sessionFiles = (session) => {
+      if (!/^[a-z0-9-]{1,80}$/i.test(session)) return null;
+      let files = this.fileSessions.get(session);
+      if (!files) {
+        files = new FileStore([`/__wxa__/usr/${session}`, `/__wxa__/tmp/${session}`]);
+        this.fileSessions.set(session, files);
+      }
+      return files;
+    };
+    app.post("/__wxa__/fs/:session", express2.json({ limit: "150mb" }), (req, res) => {
+      const files = sessionFiles(req.params.session);
+      if (!files) {
+        res.status(400).json({ error: `invalid filesystem session ${req.params.session}` });
+        return;
+      }
+      try {
+        res.json({ result: files.execute(req.body.operation, req.body.args || {}) });
+      } catch (error) {
+        res.json({ error: error.message });
+      }
+    });
+    app.post("/__wxa__/tmp/:session", express2.raw({ type: () => true, limit: "100mb" }), (req, res) => {
       const type = String(req.query.type || "png");
       if (!/^[a-z0-9]+$/i.test(type)) {
         res.status(400).type("text").send(`\u975E\u6CD5\u7684\u6587\u4EF6\u7C7B\u578B ${type}`);
         return;
       }
-      const name = `${randomUUID2()}.${type}`;
-      this.tempFiles.set(name, Buffer.isBuffer(req.body) ? req.body : Buffer.alloc(0));
-      res.json({ url: `${req.protocol}://${req.get("host")}/__wxa__/tmp/${name}` });
+      const files = sessionFiles(req.params.session);
+      if (!files) {
+        res.status(400).type("text").send(`\u975E\u6CD5\u7684\u4F1A\u8BDD\u6807\u8BC6 ${req.params.session}`);
+        return;
+      }
+      const filePath = `/__wxa__/tmp/${req.params.session}/${randomUUID3()}.${type}`;
+      files.write(filePath, Buffer.isBuffer(req.body) ? req.body : Buffer.alloc(0));
+      res.json({ url: `${req.protocol}://${req.get("host")}${filePath}` });
     });
     app.get("/__wxa__/region/:kind", (req, res) => {
       const kind = req.params.kind;
@@ -1179,14 +1640,16 @@ ${error.message}`);
       }
       res.type("text/plain; charset=utf-8").set("Cache-Control", "public, max-age=86400").send(data);
     });
-    app.get("/__wxa__/tmp/:name", (req, res) => {
-      const data = this.tempFiles.get(req.params.name);
-      if (!data) {
+    app.get("/__wxa__/:kind(usr|tmp)/:session/*", (req, res) => {
+      const files = this.fileSessions.get(req.params.session);
+      const node = files?.stat(`/__wxa__/${req.params.kind}/${req.params.session}/` + req.params[0]);
+      if (!node || node.dir) {
         res.status(404).end();
         return;
       }
-      res.type(path4.extname(req.params.name));
-      res.setHeader("ETag", `"${req.params.name}"`);
+      const data = node.data;
+      res.type(path4.extname(req.params[0]));
+      res.setHeader("ETag", `"${node.etag}"`);
       res.setHeader("Accept-Ranges", "bytes");
       const ranges = req.range(data.length);
       if (ranges === -1) {
@@ -1202,10 +1665,17 @@ ${error.message}`);
       }
       res.send(data);
     });
-    app.delete("/__wxa__/tmp/:name", (req, res) => {
-      res.status(this.tempFiles.delete(req.params.name) ? 204 : 404).end();
+    app.delete("/__wxa__/tmp/:session/*", (req, res) => {
+      try {
+        const files = this.fileSessions.get(req.params.session);
+        if (!files) throw new Error("file not exist");
+        files.remove(`/__wxa__/tmp/${req.params.session}/` + req.params[0], { dir: false });
+        res.status(204).end();
+      } catch {
+        res.status(404).end();
+      }
     });
-    if (this.ticketSource) app.use("/__wxa__/api", realLoginRouter(this.project.appid, this.ticketSource));
+    if (this.ticketSource) app.use("/__wxa__/api", devtoolsLoginRouter(this.project.appid, this.ticketSource));
     app.use("/__wxa__/webview", express2.static(root));
     app.use(express2.static(root));
     app.use((error, _req, res, _next) => {
@@ -1223,13 +1693,17 @@ ${error.message}`);
       return { env: this.setupEnv, error: error.message };
     }
   }
+  /** 构建结果并入这次打开小程序时决定用的插件 */
+  async currentBuild() {
+    return this.plugins.current(await this.builder.build());
+  }
   /** 需要构建结果的路由；构建失败时返回错误文本 */
   withBuild(handler) {
     return async (req, res, next) => {
       res.setHeader("Cache-Control", "no-store");
       let build2;
       try {
-        build2 = await this.builder.build();
+        build2 = await this.currentBuild();
       } catch (error) {
         res.status(500).type("text").send(error.message);
         return;
@@ -1288,6 +1762,38 @@ ${message}`);
     });
   }
 };
+var DEFAULT_PORT = 3e3;
+var LOCAL_HOST_OF_ANY_ADDRESS = /* @__PURE__ */ new Map([["0.0.0.0", "127.0.0.1"], ["::", "localhost"]]);
+async function listen(server, port, host, logger) {
+  for (let candidate = port ?? DEFAULT_PORT; ; candidate++) {
+    const taken = LOCAL_HOST_OF_ANY_ADDRESS.has(host) && await takenOnLoopback(candidate) || !await bind(server, candidate, host);
+    if (!taken) {
+      const actual = server.address().port;
+      if (port === void 0 && actual !== DEFAULT_PORT) logger.warn(`[wxa-runner] \u7AEF\u53E3 ${DEFAULT_PORT} \u5DF2\u88AB\u5360\u7528\uFF0C\u6539\u7528 ${actual}`);
+      return actual;
+    }
+    if (port !== void 0) throw new Error(`\u7AEF\u53E3 ${port} \u5DF2\u88AB\u5360\u7528\uFF1A\u5148\u5173\u95ED\u5360\u7528\u5B83\u7684\u8FDB\u7A0B\uFF0C\u6216\u7528 --port \u6362\u4E00\u4E2A\u7AEF\u53E3`);
+  }
+}
+function bind(server, port, host) {
+  return new Promise((resolve, reject) => {
+    const onError = (error) => error.code === "EADDRINUSE" ? resolve(false) : reject(error);
+    server.once("error", onError);
+    server.listen(port, host, () => {
+      server.off("error", onError);
+      resolve(true);
+    });
+  });
+}
+async function takenOnLoopback(port) {
+  for (const address of ["127.0.0.1", "::1"]) {
+    const probe = net.createServer();
+    const free = await bind(probe, port, address).catch(() => true);
+    if (!free) return true;
+    await new Promise((resolve) => probe.close(resolve));
+  }
+  return false;
+}
 function resolveSetupFile(option, projectPath) {
   if (option === false) return null;
   if (!option) return findSetupFile(projectPath);