devfab 2.0.0 → 2.2.0

package/lib/devfab.js

@@ -326,8 +326,6 @@
     }
   }
 
-  var commonjsGlobal = typeof globalThis !== 'undefined' ? globalThis : typeof window !== 'undefined' ? window : typeof global !== 'undefined' ? global : typeof self !== 'undefined' ? self : {};
-
   // ======================================================
   /** vim: et:ts=4:sw=4:sts=4
    * @license RequireJS 2.3.2 Copyright jQuery Foundation and other contributors.
@@ -337,8 +335,7 @@
   // problems with requirejs.exec()/transpiler plugins that may not be strict.
   /* jslint regexp: true, nomen: true, sloppy: true */
   /* global window, navigator, document, importScripts, setTimeout, opera */
-  var __devfab_requirejs = {};
-  window.__devfab_requirejs = __devfab_requirejs;
+  var __requirejs = {};
   (function (global, setTimeout) {
     var requirejs, require, define;
     var req;
@@ -2343,22 +2340,22 @@
       // eslint-disable-next-line no-eval
       return eval(text);
     };
-    __devfab_requirejs.require = require;
-    __devfab_requirejs.define = define;
+    __requirejs.require = require;
+    __requirejs.define = define;
     // Set up with config info.
     req(cfg);
-  })(commonjsGlobal, typeof setTimeout === 'undefined' ? undefined : setTimeout)
+  })(typeof window !== 'undefined' ? window : globalThis, typeof setTimeout === 'undefined' ? undefined : setTimeout)
 
   /* ----------------------------------------------------------------------------
    * 以下为本地适配层，不属于 RequireJS 原始文件内容。
    * -------------------------------------------------------------------------- */;
   (function (global) {
-    if (__devfab_requirejs.__requirejsAdapterApplied) {
+    if (__requirejs.__requirejsAdapterApplied) {
       return;
     }
-    __devfab_requirejs.__requirejsAdapterApplied = true;
-    var rawRequire = __devfab_requirejs.require;
-    var rawDefine = __devfab_requirejs.define;
+    __requirejs.__requirejsAdapterApplied = true;
+    var rawRequire = __requirejs.require;
+    var rawDefine = __requirejs.define;
     var require = function require(_domain, _deps, _callback, _errback) {
       var domain = _domain;
       var deps = _deps;
@@ -2420,10 +2417,15 @@
         require[prop] = rawRequire[prop];
       }
     }
-    __devfab_requirejs._require = rawRequire;
-    __devfab_requirejs._define = rawDefine;
-    __devfab_requirejs.require = require;
-    __devfab_requirejs.define = define;
+
+    // 标记本身是为了让人能**验证**适配层究竟有没有生效（测试与现场排查都用它），
+    // 不然「域前缀到底拼没拼」只能靠猜。
+    require.__devfabAdapterApplied = true;
+    define.__devfabAdapterApplied = true;
+    __requirejs._require = rawRequire;
+    __requirejs._define = rawDefine;
+    __requirejs.require = require;
+    __requirejs.define = define;
   })();
 
   /**
@@ -2732,127 +2734,6 @@
     }]);
   }();
 
-  /**
-   * 全局污染检测：加载前后 diff window 的 key 集合。
-   *
-   * 为什么需要：二开脚本直接跑在宿主 window 上，A 客户的脚本改了一个全局变量，
-   * B 客户就跟着崩，而且现场无法归因。真做 iframe / Proxy 沙箱成本极高，
-   * 但「加载完能告诉你动了哪些全局」只需要几十行，能挡住大半这类事故。
-   *
-   * 边界（这是观测，不是隔离）：
-   * - 事后告警，不阻止副作用——脚本已经执行过了；
-   * - 并发加载时窗口会重叠，归因以「最后完成的一批」结算，可能不准；
-   * - 只比较可枚举自有属性的**引用**，`window.foo.bar = 1` 这类深层改动检测不到。
-   */
-
-  /** 默认盯防的 key：出现即说明宿主的关键设施被动过 */
-  var DEFAULT_WATCH = ['$', 'jQuery', 'define', 'require', 'requirejs', 'devfab', '__devfab', '__devfab_requirejs'];
-  var GlobalGuard = /*#__PURE__*/function () {
-    function GlobalGuard(options) {
-      _classCallCheck(this, GlobalGuard);
-      var o = options || {};
-      this.maxPollution = o.maxPollution === undefined ? 3 : Number(o.maxPollution);
-      this.watch = [].concat(o.watch || DEFAULT_WATCH);
-      this.target = o.target || (typeof window !== 'undefined' ? window : null);
-      this.enabled = o.enabled === undefined ? true : !!o.enabled;
-      this._pending = 0;
-      this._before = null;
-      this.lastWarnings = [];
-    }
-    return _createClass(GlobalGuard, [{
-      key: "_snapshot",
-      value: function _snapshot() {
-        var map = new Map();
-        var target = this.target;
-        if (!target) return map;
-        Object.keys(target).forEach(function (key) {
-          map.set(key, target[key]);
-        });
-        return map;
-      }
-    }, {
-      key: "_diff",
-      value: function _diff() {
-        var _this = this;
-        var before = this._before;
-        var after = this._snapshot();
-        var warnings = [];
-        if (!before) return warnings;
-        after.forEach(function (value, key) {
-          var watched = _this.watch.indexOf(key) !== -1;
-          if (!before.has(key)) {
-            warnings.push({
-              type: 'added',
-              key: key,
-              watched: watched
-            });
-            return;
-          }
-          if (before.get(key) !== value) {
-            warnings.push({
-              type: 'overwritten',
-              key: key,
-              watched: watched
-            });
-          }
-        });
-        // 命中盯防名单，或新增数量超过阈值，才认为「值得提醒」。
-        // 1~2 个自有全局是正常写法，全报会把信号淹掉。
-        var watchedCount = warnings.filter(function (item) {
-          return item.watched;
-        }).length;
-        var addedCount = warnings.filter(function (item) {
-          return item.type === 'added';
-        }).length;
-        if (!watchedCount && addedCount <= this.maxPollution) return [];
-        return warnings;
-      }
-
-      /**
-       * 开始观测。返回的 `end()` 幂等，重复调用只有第一次有效，
-       * 这样超时分支和 errback 分支可以都调，不会把计数搞负。
-       */
-    }, {
-      key: "begin",
-      value: function begin() {
-        var _this2 = this;
-        if (!this.enabled || !this.target) {
-          return {
-            end: function end() {
-              return [];
-            }
-          };
-        }
-        this._pending++;
-        if (this._pending === 1) this._before = this._snapshot();
-        var done = false;
-        return {
-          end: function end() {
-            if (done) return [];
-            done = true;
-            _this2._pending--;
-            // 还有并发批次没结束，交给最后结束的那一批结算
-            if (_this2._pending > 0) return [];
-            var warnings = _this2._diff();
-            _this2._before = null;
-            _this2.lastWarnings = warnings;
-            return warnings;
-          }
-        };
-      }
-    }, {
-      key: "configure",
-      value: function configure(options) {
-        var o = options || {};
-        if (o.enabled !== undefined) this.enabled = !!o.enabled;
-        if (o.maxPollution !== undefined) this.maxPollution = Number(o.maxPollution);
-        if (o.watch !== undefined) this.watch = [].concat(o.watch || []);
-        if (o.target !== undefined) this.target = o.target || null;
-        return this;
-      }
-    }]);
-  }();
-
   /** 加载超时：RequireJS 自己的 waitSeconds 默认 30s，这个定时器是更早的兜底 */
   var CODE_TIMEOUT = 504;
 
@@ -2875,10 +2756,8 @@
     var path = _path;
     var files = _files;
     var callback = _callback;
-    // 单参形式：(files, callback) 或 (files)。判据是「第一个是数组、第二个不是数组」，
-    // 放宽到非函数是因为 loadModules([url]) 这种不带回调的调用很常见。
     if (Array.isArray(_path) && !Array.isArray(_files)) {
-      path = params === null || params === void 0 ? void 0 : params.path;
+      path = undefined;
       files = _path;
       callback = typeof _files === 'function' ? _files : _callback;
     }
@@ -2887,8 +2766,7 @@
     var result = {
       code: 0,
       message: '',
-      data: [],
-      warnings: []
+      data: []
     };
     if (params.type === 'require' && typeof params.require !== 'function' || params.type === 'define' && typeof params.define !== 'function' //
     ) {
@@ -2928,99 +2806,84 @@
     version: '',
     timeout: 15000,
     retry: 0,
-    strict: false,
     baseUrl: ''
   };
   var BaseFileRequire = /*#__PURE__*/function () {
-    /**
-     * args 同时承担两件事，分区明确：
-     * - 底层加载器覆盖：`define` / `require` / `undef` / `requireConfig` / `importer`
-     * - 加载策略：`version` / `timeout` / `retry` / `strict` / `baseUrl` / `manifest`
-     *   / `origins` / `lockVersion` / `verifyHash` / `pollution` / `watch` / `maxPollution`
-     * 其余一律走 `configure(options)` 在运行时改。
-     */
     function BaseFileRequire(args) {
-      var _o$__debug, _window$__devfab_requ, _window$__devfab_requ2, _this$__require;
       _classCallCheck(this, BaseFileRequire);
-      var o = args || {};
-      this.__debug = (_o$__debug = o.__debug) !== null && _o$__debug !== void 0 ? _o$__debug : false;
-      this.__rootPath = undefined;
-      this.__define = o.define || ((_window$__devfab_requ = window.__devfab_requirejs) === null || _window$__devfab_requ === void 0 ? void 0 : _window$__devfab_requ.define);
-      this.__require = o.require || ((_window$__devfab_requ2 = window.__devfab_requirejs) === null || _window$__devfab_requ2 === void 0 ? void 0 : _window$__devfab_requ2.require);
-      this.__undef = o.undef || (typeof ((_this$__require = this.__require) === null || _this$__require === void 0 ? void 0 : _this$__require.undef) === 'function' ? this.__require.undef : null);
-      this.__requireConfig = o.requireConfig || this._pickRequireConfig(this.__require);
-      this.__import = o.importer || null;
-      this._setTimer = o.setTimeout || function (fn, ms) {
-        return setTimeout(fn, ms);
-      };
-      this._clearTimer = o.clearTimeout || function (id) {
-        return clearTimeout(id);
-      };
-      this.options = {
-        version: o.version ? String(o.version) : DEFAULT_OPTIONS.version,
-        timeout: o.timeout === undefined ? DEFAULT_OPTIONS.timeout : Math.max(0, toNumber(o.timeout, 0)),
-        retry: o.retry === undefined ? DEFAULT_OPTIONS.retry : Math.max(0, toNumber(o.retry, 0)),
-        strict: !!o.strict,
-        baseUrl: o.baseUrl || DEFAULT_OPTIONS.baseUrl
-      };
-      this.policy = new LoadPolicy(o);
-      this.guard = new GlobalGuard(this._guardOptions(o));
-      if (this.options.version) this._applyUrlArgs();
+      this.__init(args);
     }
-
-    /**
-     * urlArgs 只能配在真正在用的那个 require 上。
-     * 传了自定义加载器（stub / 多 context）就取它的 config，否则取内嵌 RequireJS 的。
-     */
     return _createClass(BaseFileRequire, [{
-      key: "_pickRequireConfig",
-      value: function _pickRequireConfig(loader) {
-        var _window$__devfab_requ3;
-        var req = loader && typeof loader.config === 'function' ? loader : (_window$__devfab_requ3 = window.__devfab_requirejs) === null || _window$__devfab_requ3 === void 0 ? void 0 : _window$__devfab_requ3.require;
-        return req && typeof req.config === 'function' ? req.config.bind(req) : null;
+      key: "__init",
+      value: function __init(args) {
+        var o = args || {};
+        if (o.debug !== undefined) this.debug = !!o.debug;
+        var require = __requirejs.require;
+        this.__data = {
+          /* --- 加载器句柄与通道：AMD 通道只走内嵌 RequireJS --- */
+          define: __requirejs.define,
+          require: require,
+          undef: typeof (require === null || require === void 0 ? void 0 : require.undef) === 'function' ? require.undef : null,
+          requireConfig: this._pickRequireConfig(require),
+          importImpl: o.importer || null,
+          setTimer: o.setTimeout || function (fn, ms) {
+            return setTimeout(fn, ms);
+          },
+          clearTimer: o.clearTimeout || function (id) {
+            return clearTimeout(id);
+          },
+          /* --- 配置与策略 --- */
+          options: {
+            version: o.version ? String(o.version) : DEFAULT_OPTIONS.version,
+            timeout: o.timeout === undefined ? DEFAULT_OPTIONS.timeout : Math.max(0, toNumber(o.timeout, 0)),
+            retry: o.retry === undefined ? DEFAULT_OPTIONS.retry : Math.max(0, toNumber(o.retry, 0)),
+            baseUrl: o.baseUrl || DEFAULT_OPTIONS.baseUrl
+          },
+          policy: new LoadPolicy(o)
+        };
+        if (this.__data.options.version) this._applyUrlArgs();
       }
     }, {
-      key: "_guardOptions",
-      value: function _guardOptions(o) {
-        if (o.pollution === false) {
-          return {
-            enabled: false,
-            target: o.target
-          };
-        }
-        if (o.pollution && _typeof(o.pollution) === 'object') {
-          return Object.assign({
-            target: o.target
-          }, o.pollution);
-        }
-        return {
-          target: o.target,
-          watch: o.watch,
-          maxPollution: o.maxPollution,
-          enabled: o.pollution === undefined ? true : !!o.pollution
-        };
+      key: "debug",
+      get: function get() {
+        var ns = typeof window !== 'undefined' ? window.__devfab : null;
+        return !!(ns && ns.debug);
+      },
+      set: function set(value) {
+        if (typeof window === 'undefined') return;
+        window.__devfab = window.__devfab || {};
+        window.__devfab.debug = !!value;
+      }
+
+      /**
+       * urlArgs 只能配在真正在用的那个 require 上。AMD 通道固定用内嵌 RequireJS，
+       * 所以这里只从传入的加载器上取 config，不再回落到任何全局。
+       */
+    }, {
+      key: "_pickRequireConfig",
+      value: function _pickRequireConfig(loader) {
+        return loader && typeof loader.config === 'function' ? loader.config.bind(loader) : null;
       }
 
       /* ------------------------------ 配置 ------------------------------ */
 
       /** 运行时增量配置（宿主切版本、换清单、改重试次数都走这里）
-       *  加载策略：版本、超时、重试、清单、白名单、全局污染检测
+       *  加载策略：版本、超时、重试、清单、白名单
        */
     }, {
       key: "configure",
       value: function configure(options) {
         var o = options || {};
-        if (o.debug !== undefined) this.__debug = !!o.debug;
+        var _this$__data = this.__data,
+          config = _this$__data.options,
+          policy = _this$__data.policy;
+        if (o.debug !== undefined) this.debug = !!o.debug;
         if (o.version !== undefined) this.setVersion(o.version);
-        if (o.timeout !== undefined) this.options.timeout = Math.max(0, toNumber(o.timeout, this.options.timeout));
-        if (o.retry !== undefined) this.options.retry = Math.max(0, toNumber(o.retry, this.options.retry));
-        if (o.strict !== undefined) this.options.strict = !!o.strict;
-        if (o.baseUrl !== undefined) this.options.baseUrl = o.baseUrl || '';
+        if (o.timeout !== undefined) config.timeout = Math.max(0, toNumber(o.timeout, config.timeout));
+        if (o.retry !== undefined) config.retry = Math.max(0, toNumber(o.retry, config.retry));
+        if (o.baseUrl !== undefined) config.baseUrl = o.baseUrl || '';
         if (o.manifest !== undefined || o.origins !== undefined || o.lockVersion !== undefined || o.verifyHash !== undefined || o.fetch !== undefined) {
-          this.policy.configure(o);
-        }
-        if (o.pollution !== undefined) this.guard.configure(this._guardOptions(o));else if (o.watch !== undefined || o.maxPollution !== undefined || o.target !== undefined) {
-          this.guard.configure(o);
+          policy.configure(o);
         }
         return this;
       }
@@ -3035,19 +2898,22 @@
     }, {
       key: "setVersion",
       value: function setVersion(version) {
-        this.options.version = version ? String(version) : '';
+        this.__data.options.version = version ? String(version) : '';
         this._applyUrlArgs();
         return this;
       }
     }, {
       key: "_applyUrlArgs",
       value: function _applyUrlArgs() {
-        if (typeof this.__requireConfig !== 'function') {
+        var _this$__data2 = this.__data,
+          requireConfig = _this$__data2.requireConfig,
+          options = _this$__data2.options;
+        if (typeof requireConfig !== 'function') {
           return false;
         }
         try {
-          this.__requireConfig({
-            urlArgs: this.options.version ? "v=".concat(encodeURIComponent(this.options.version)) : ''
+          requireConfig({
+            urlArgs: options.version ? "v=".concat(encodeURIComponent(options.version)) : ''
           });
           return true;
         } catch (err) {
@@ -3057,54 +2923,23 @@
     }, {
       key: "getVersion",
       value: function getVersion() {
-        return this.options.version;
-      }
-
-      /**
-       * 导出本实例的配置快照，供 `create()` 派生新实例时继承。
-       *
-       * 为什么需要：`create()` 原先是彻底干净的实例，于是宿主在单例上
-       * `configure({ manifest, lockVersion })` 之后，`_utils/models/_extend.js` 里那句
-       * `FileRequire.create({ require }).require(...)` 完全不受约束 —— 扩展脚本主链路上
-       * 登记制与版本锁等于没开。派生时继承配置，这个缺口才闭合。
-       *
-       * 刻意**不包含加载器**（`define` / `require` / `undef` / `requireConfig` / `importer`）：
-       * 构造函数会按当前 `window.__devfab_requirejs` 重新取，派生实例拿到的是「此刻真正
-       * 在用的那个加载器」，而不是父实例构造时捕获的旧引用。要指定加载器请显式传，
-       * `create({ require })` 会覆盖。
-       */
-    }, {
-      key: "_snapshotConfig",
-      value: function _snapshotConfig() {
-        return {
-          __debug: this.__debug,
-          version: this.options.version,
-          timeout: this.options.timeout,
-          retry: this.options.retry,
-          strict: this.options.strict,
-          baseUrl: this.options.baseUrl,
-          manifest: this.policy.manifest,
-          origins: this.policy.origins,
-          lockVersion: this.policy.lockVersion,
-          verifyHash: this.policy.verifyHash,
-          fetch: this.policy.fetch,
-          pollution: this.guard.enabled,
-          watch: this.guard.watch,
-          maxPollution: this.guard.maxPollution,
-          target: this.guard.target
-        };
+        return this.__data.options.version;
       }
 
       /** 策略 + 兜底配置摘要，宿主启动时打一行日志排查效率最高 */
     }, {
       key: "describe",
       value: function describe() {
-        return Object.assign({}, this.options, {
-          debug: this.__debug,
-          policy: this.policy.describe(),
-          pollutionGuard: this.guard.enabled,
-          canUndef: typeof this.__undef === 'function',
-          canNativeImport: typeof (this.__import || nativeImport) === 'function'
+        var _this$__data3 = this.__data,
+          options = _this$__data3.options,
+          policy = _this$__data3.policy,
+          undef = _this$__data3.undef,
+          importImpl = _this$__data3.importImpl;
+        return Object.assign({}, options, {
+          debug: this.debug,
+          policy: policy.describe(),
+          canUndef: typeof undef === 'function',
+          canNativeImport: typeof (importImpl || nativeImport) === 'function'
         });
       }
 
@@ -3113,8 +2948,7 @@
       key: "_define",
       value: function _define(_path, _files, _callback) {
         var params = {
-          path: this.__rootPath,
-          define: this.__define,
+          define: this.__data.define,
           type: 'define'
         };
         var _parseArgs = parseArgs(_path, _files, _callback, params),
@@ -3126,28 +2960,16 @@
           callback === null || callback === void 0 || callback(result);
           return;
         }
-        this.__define(path, files, callback);
-      }
-    }, {
-      key: "_mergeWarnings",
-      value: function _mergeWarnings(prev, next) {
-        var list = (prev || []).slice();
-        (next || []).forEach(function (item) {
-          var exists = list.some(function (one) {
-            return one.type === item.type && one.key === item.key;
-          });
-          if (!exists) list.push(item);
-        });
-        return list;
+        this.__data.define(path, files, callback);
       }
     }, {
       key: "_undefModules",
       value: function _undefModules(moduleIds) {
-        var _this = this;
-        if (typeof this.__undef !== 'function') return;
+        var undef = this.__data.undef;
+        if (typeof undef !== 'function') return;
         moduleIds.forEach(function (id) {
           try {
-            _this.__undef(id);
+            undef(id);
           } catch (err) {
             // undef 只对曾经顶层 require 过的模块有效；抛错说明它还没进注册表，忽略即可
           }
@@ -3155,18 +2977,22 @@
       }
 
       /**
-       * 统一加载入口：策略校验 -> 观测 -> 计时 / 重试 -> 结算。
+       * 统一加载入口：策略校验 -> 计时 / 重试 -> 结算。
        * 默认配置（version 空、retry 0、timeout 15s）下的行为与原来一致，
-       * 只是多了一个「更早失败」的兜底和 warnings 字段。
+       * 只是多了一个「更早失败」的兜底。
        */
     }, {
       key: "_load",
       value: function _load(_path, _files, _callback) {
-        var _this2 = this;
-        var config = this.options;
+        var _this = this;
+        var _this$__data4 = this.__data,
+          config = _this$__data4.options,
+          policy = _this$__data4.policy,
+          require = _this$__data4.require,
+          setTimer = _this$__data4.setTimer,
+          clearTimer = _this$__data4.clearTimer;
         var params = {
-          path: this.__rootPath,
-          require: this.__require,
+          require: require,
           type: 'require'
         };
         var _parseArgs2 = parseArgs(_path, _files, _callback, params),
@@ -3180,7 +3006,7 @@
           return;
         }
         var moduleIds = toModuleIds(path, files);
-        var denied = this.policy.checkModules(moduleIds);
+        var denied = policy.checkModules(moduleIds);
         if (denied) {
           result.code = denied.code;
           result.message = denied.message;
@@ -3190,40 +3016,26 @@
         var settled = false;
         var attempt = 0;
         var timer = null;
-        var scoop = null;
-        var closeScoop = function closeScoop() {
-          if (!scoop) return;
-          result.warnings = _this2._mergeWarnings(result.warnings, scoop.end());
-          scoop = null;
-        };
         var finish = function finish() {
           if (settled) return;
           settled = true;
           if (timer !== null) {
-            _this2._clearTimer(timer);
+            clearTimer(timer);
             timer = null;
           }
-          closeScoop();
-          if (config.strict && result.warnings.length) {
-            result.code = 500;
-            result.message = "Global pollution detection failed\uFF1A".concat(result.warnings.map(function (item) {
-              return "".concat(item.type, ":").concat(item.key);
-            }).join(', '));
-          }
           callback === null || callback === void 0 || callback(result);
         };
         var start = function start() {
           attempt++;
-          scoop = _this2.guard.begin();
           if (config.timeout > 0) {
-            timer = _this2._setTimer(function () {
+            timer = setTimer(function () {
               if (settled) return;
               var err = new Error("load timeout after ".concat(config.timeout, "ms: ").concat(filesStr));
               err.__devfabTimeout = true;
               retryOrFail(err, "files load timeout after ".concat(config.timeout, "ms, the files: ").concat(filesStr));
             }, config.timeout);
           }
-          _this2.__require(path, files, function () {
+          require(path, files, function () {
             for (var _len = arguments.length, contents = new Array(_len), _key = 0; _key < _len; _key++) {
               contents[_key] = arguments[_key];
             }
@@ -3236,13 +3048,12 @@
         var retryOrFail = function retryOrFail(err, message) {
           if (settled) return;
           if (timer !== null) {
-            _this2._clearTimer(timer);
+            clearTimer(timer);
             timer = null;
           }
           if (attempt <= config.retry) {
-            closeScoop();
             // 不 undef 就会复用上一次的失败状态，重试形同虚设
-            _this2._undefModules(moduleIds);
+            _this._undefModules(moduleIds);
             start();
             return;
           }
@@ -3275,7 +3086,8 @@
       value: function resolveUrl(rel) {
         var raw = String(rel == null ? '' : rel);
         if (/^[a-z][a-z0-9+.-]*:/i.test(raw) || /^\/\//.test(raw)) return raw;
-        var base = this.options.baseUrl || (typeof document !== 'undefined' && document.baseURI ? document.baseURI : '');
+        var baseUrl = this.__data.options.baseUrl;
+        var base = baseUrl || (typeof document !== 'undefined' && document.baseURI ? document.baseURI : '');
         if (!base) return raw;
         try {
           return new URL(raw, base).href;
@@ -3286,9 +3098,11 @@
     }, {
       key: "_importOne",
       value: function _importOne(moduleId) {
-        var _this3 = this;
+        var _this$__data5 = this.__data,
+          policy = _this$__data5.policy,
+          importImpl = _this$__data5.importImpl;
         var url = this.resolveUrl(moduleId);
-        var originDenied = this.policy.checkOrigin(url);
+        var originDenied = policy.checkOrigin(url);
         if (originDenied) {
           return Promise.resolve({
             ok: false,
@@ -3296,10 +3110,10 @@
             message: originDenied.message
           });
         }
-        var entry = this.policy.entryOf(moduleId);
+        var entry = policy.entryOf(moduleId);
         var expected = entry && entry.sha256;
         var run = function run() {
-          var importer = _this3.__import || nativeImport;
+          var importer = importImpl || nativeImport;
           if (typeof importer !== 'function') {
             return Promise.resolve({
               ok: false,
@@ -3324,7 +3138,7 @@
           });
         };
         if (!expected) return run();
-        return this.policy.verify(url, expected).then(function (verified) {
+        return policy.verify(url, expected).then(function (verified) {
           if (!verified.ok) {
             return {
               ok: false,
@@ -3346,9 +3160,9 @@
     }, {
       key: "loadModules",
       value: function loadModules(_path, _files, _callback) {
-        var _this4 = this;
+        var _this2 = this;
+        var policy = this.__data.policy;
         var params = {
-          path: this.__rootPath,
           type: 'module'
         };
         var _parseArgs3 = parseArgs(_path, _files, _callback, params),
@@ -3362,7 +3176,7 @@
           callback === null || callback === void 0 || callback(r);
           return r;
         };
-        var denied = this.policy.checkModules(moduleIds);
+        var denied = policy.checkModules(moduleIds);
         if (denied) {
           result.code = denied.code;
           result.message = denied.message;
@@ -3371,11 +3185,9 @@
         if (!files.length) {
           return Promise.resolve(settle(result));
         }
-        var scoop = this.guard.begin();
         return Promise.all(moduleIds.map(function (id) {
-          return _this4._importOne(id);
+          return _this2._importOne(id);
         })).then(function (list) {
-          result.warnings = scoop.end();
           var failed = list.filter(function (item) {
             return !item.ok;
           });
@@ -3408,15 +3220,10 @@
     }
     _inherits(FileRequireClass, _BaseFileRequire);
     return _createClass(FileRequireClass, [{
-      key: "define",
-      value: function define(path, files, callback) {
+      key: "provide",
+      value: function provide(path, files, callback) {
         this._define(path, files, callback);
       }
-    }, {
-      key: "defineScript",
-      value: function defineScript(o) {
-        this.provideScript(o);
-      }
     }, {
       key: "provideScript",
       value: function provideScript(o) {
@@ -3426,11 +3233,11 @@
             return o;
           };
         }
-        this.define([], callback);
+        this.provide([], callback);
       }
     }, {
-      key: "require",
-      value: function require(path, files, callback) {
+      key: "inject",
+      value: function inject(path, files, callback) {
         this._load(path, files, callback);
       }
     }, {
@@ -3458,35 +3265,24 @@
             if (typeof error === 'function') {
               error(result);
             } else {
-              self.__debug && console.error('[devfab][FileRequire][injectScript] error: ', result);
+              self.debug && console.error('[devfab][FileRequire][injectScript] error: ', result);
             }
           }
         }
-        this._load(path, files, onCallback);
-      }
-    }, {
-      key: "requireScript",
-      value: function requireScript(_path, _files, _callback) {
-        this.injectScript(_path, _files, _callback);
+        this.inject(path, files, onCallback);
       }
     }]);
   }(BaseFileRequire);
+  /**
+   * 全局唯一的加载器实例。
+   *
+   * 加载策略（清单 / 白名单 / 版本锁）、全局污染观测、超时重试
+   * 都是**部署级**约定，一个页面只应该有一套。
+   */
   var FileRequire = new FileRequireClass();
-  FileRequire.create = function (args) {
-    return new FileRequireClass(_objectSpread2(_objectSpread2({}, this._snapshotConfig()), args));
-  };
-
-  window.__devfab = Object.assign({}, window.__devfab);
-  window.__devfab.FileRequire = FileRequire;
-  window.__devfab.filePolicy = {
-    LoadPolicy: LoadPolicy,
-    GlobalGuard: GlobalGuard,
-    CODE_POLICY: CODE_POLICY,
-    CODE_TIMEOUT: CODE_TIMEOUT
-  };
 
   function isDebug(debug) {
-    return debug || window.devfab && window.devfab.debug;
+    return debug || !!(typeof window !== 'undefined' && window.__devfab && window.__devfab.debug);
   }
   function QueryString(_url) {
     this.pathname = '';
@@ -3553,12 +3349,12 @@
     };
     this.init();
   }
-  String.prototype['equalsIgnoreCase'] = function (str) {
-    if (str == null) {
+  function equalsIgnoreCase(str1, str2) {
+    if (!str1 || !str2) {
       return false;
     }
-    return this.toLowerCase() === str.toLowerCase();
-  };
+    return str1.toLowerCase() === str2.toLowerCase();
+  }
   function _appendUrl(restUrl, params) {
     if (!params) {
       return restUrl;
@@ -3805,9 +3601,9 @@
         isDebug() && console.log('[devfab][ajax]: [doRequest]: options.params["requestHeaders"] ERR : ', e);
       }
       var queryJson = null;
-      if (method.equalsIgnoreCase('get') || method.equalsIgnoreCase('delete')) {
+      if (equalsIgnoreCase(method, 'get') || equalsIgnoreCase(method, 'delete')) {
         url = _appendUrl(url, options.params);
-      } else if (method.equalsIgnoreCase('post') || method.equalsIgnoreCase('put')) {
+      } else if (equalsIgnoreCase(method, 'post') || equalsIgnoreCase(method, 'put')) {
         queryJson = JSON.stringify(options.params);
       }
       if (options.jsonp) {
@@ -4831,7 +4627,7 @@
               config[attr].options.requestHeaders = requestHeaders;
             }
             if ((_this$getProxy = this.getProxy()) !== null && _this$getProxy !== void 0 && _this$getProxy[attr]) {
-              window.devfab.debug && console.warn("[devfab][baseModel.prototype.setProxy]: Proxy ".concat(attr, " already exists on the model. Please change the name of ").concat(attr, " and try again"));
+              isDebug() && console.warn("[devfab][baseModel.prototype.setProxy]: Proxy ".concat(attr, " already exists on the model. Please change the name of ").concat(attr, " and try again"));
             }
           }
           this._set_data('proxy', DynamicProxy.create(_objectSpread2(_objectSpread2({}, ((_this$getProxy2 = this.getProxy()) === null || _this$getProxy2 === void 0 ? void 0 : _this$getProxy2.config) || {}), config)));
@@ -5443,7 +5239,15 @@
     }]);
   }(BaseModel$1);
 
-  function loadScripts(_require, _path, _files, _callback, _params) {
+  function missingLoaderResult(filesStr) {
+    return {
+      code: 404,
+      message: "params.fileRequire is required, the files: ".concat(filesStr),
+      data: [],
+      warnings: []
+    };
+  }
+  function loadScripts(_fileRequire, _path, _files, _callback, _params) {
     var _params2;
     var path = _path;
     var files = _files;
@@ -5458,10 +5262,17 @@
     var viewModel = ((_params2 = params) === null || _params2 === void 0 ? void 0 : _params2.viewModel) || this;
     files = Array.isArray(files) ? files : [];
     var filesStr = files.join(',');
-    return FileRequire.create({
-      require: _require
-    }).require(path, files, function (result) {
+    if (!_fileRequire || typeof _fileRequire.inject !== 'function') {
       var _callback2;
+      var result = missingLoaderResult(filesStr);
+      if (isDebug()) {
+        console.error("[devfab][models][extend][loadScripts] ".concat(result.message));
+      }
+      (_callback2 = callback) === null || _callback2 === void 0 || _callback2(result);
+      return result;
+    }
+    return _fileRequire.inject(path, files, function (result) {
+      var _callback3;
       if (result.code == 0 && Array.isArray(result.data)) {
         for (var i = 0, len = result.data.length; i < len; i++) {
           var content = result.data[i];
@@ -5488,10 +5299,10 @@
           }
         }
       }
-      if (result.code != 0 && window.__devfab.debug) {
+      if (result.code != 0 && isDebug()) {
         console.info("[devfab][models][extend][loadScripts] ".concat(filesStr, " \n    [message]: ").concat(result.message, " \n").concat(result.error ? ' \n    [error]: ' : ''), result.error);
       }
-      (_callback2 = callback) === null || _callback2 === void 0 || _callback2(result);
+      (_callback3 = callback) === null || _callback3 === void 0 || _callback3(result);
     });
   }
   function initExtendScripts(params) {
@@ -5500,7 +5311,7 @@
       // eslint-disable-next-line no-debugger
       debugger;
     }
-    var requirejs = params.requirejs,
+    var fileRequire = params.fileRequire,
       extendScriptParams = params.extendScriptParams,
       _params$readyEventNam = params.readyEventName,
       readyEventName = _params$readyEventNam === void 0 ? 'extendReady' : _params$readyEventNam;
@@ -5510,12 +5321,12 @@
       filepath = _ref.filepath,
       scriptUrl = _ref.scriptUrl;
     if (!enableJs) {
-      window.__devfab.debug && console.info("[devfab][extend][js] not enable extend script");
+      isDebug() && console.info("[devfab][extend][js] not enable extend script");
       self.execute(readyEventName, self);
       return;
     }
     if (!scriptUrl) {
-      window.__devfab.debug && console.info("[devfab][extend][js] extend script is not defined");
+      isDebug() && console.info("[devfab][extend][js] extend script is not defined");
       self.execute(readyEventName, self);
       return;
     }
@@ -5525,14 +5336,14 @@
     if (self.getEnv && self.getEnv('everyCommonExtend')) {
       extendFiles.push(self.getEnv('everyCommonExtend'));
     }
-    loadScripts.call(self, requirejs === null || requirejs === void 0 ? void 0 : requirejs.require, extendFilePath, extendFiles, function (result) {
+    loadScripts.call(self, fileRequire, extendFilePath, extendFiles, function (result) {
       self.execute(readyEventName, self, result);
     });
   }
   var initExtScripts = /*#__PURE__*/function () {
     var _ref2 = _asyncToGenerator(/*#__PURE__*/_regenerator().m(function _callee2(data, viewModel, params) {
       var _viewModel$getParams, _exturls;
-      var requirejs, extendScriptParams, _ref3, _ref3$enableExtJs, enableExtJs, _ref3$exturlsField, exturlsField, extscripturls, exturls;
+      var fileRequire, extendScriptParams, _ref3, _ref3$enableExtJs, enableExtJs, _ref3$exturlsField, exturlsField, extscripturls, exturls;
       return _regenerator().w(function (_context2) {
         while (1) switch (_context2.n) {
           case 0:
@@ -5540,20 +5351,20 @@
               // eslint-disable-next-line no-debugger
               debugger;
             }
-            requirejs = params.requirejs, extendScriptParams = params.extendScriptParams;
+            fileRequire = params.fileRequire, extendScriptParams = params.extendScriptParams;
             _ref3 = extendScriptParams || {}, _ref3$enableExtJs = _ref3.enableExtJs, enableExtJs = _ref3$enableExtJs === void 0 ? false : _ref3$enableExtJs, _ref3$exturlsField = _ref3.exturlsField, exturlsField = _ref3$exturlsField === void 0 ? 'extscripturls' : _ref3$exturlsField;
             if (enableExtJs) {
               _context2.n = 1;
               break;
             }
-            window.__devfab.debug && console.info("[devfab][extend][exturls] ext script is not enable");
+            isDebug() && console.info("[devfab][extend][exturls] ext script is not enable");
             return _context2.a(2, Promise.resolve(true));
           case 1:
             if (data) {
               _context2.n = 2;
               break;
             }
-            window.__devfab.debug && console.info("[devfab][extend][exturls] script data is null");
+            isDebug() && console.info("[devfab][extend][exturls] script data is null");
             return _context2.a(2, Promise.resolve(true));
           case 2:
             extscripturls = data === null || data === void 0 ? void 0 : data[exturlsField];
@@ -5593,7 +5404,7 @@
           case 4:
             data[exturlsField] = exturls;
             return _context2.a(2, new Promise(function (resolve, reject) {
-              loadScripts.call(viewModel, requirejs === null || requirejs === void 0 ? void 0 : requirejs.require, exturls, function (result) {
+              loadScripts.call(viewModel, fileRequire, exturls, function (result) {
                 resolve(result);
               });
             }));
@@ -5696,7 +5507,7 @@
       var _vm, _vm$destroyVM;
       (_vm = vm) === null || _vm === void 0 || (_vm$destroyVM = _vm.destroyVM) === null || _vm$destroyVM === void 0 || _vm$destroyVM.call(_vm);
       vm = null;
-      window.devfab.debug && console.info("[devfab][models][initVM]: destory vm ".concat(new Date().toString()));
+      isDebug() && console.info("[devfab][models][initVM]: destory vm ".concat(new Date().toString()));
     });
     vm.on('extendReady', /*#__PURE__*/_asyncToGenerator(/*#__PURE__*/_regenerator().m(function _callee() {
       var promises;
@@ -5708,7 +5519,7 @@
             _context.n = 1;
             return Promise.all(promises);
           case 1:
-            window.devfab.debug && console.info("[devfab][models][initVM]: after vm init ".concat(new Date().toString()));
+            isDebug() && console.info("[devfab][models][initVM]: after vm init ".concat(new Date().toString()));
             callback === null || callback === void 0 || callback(vm, meta);
           case 2:
             return _context.a(2);
@@ -5738,13 +5549,24 @@
   };
 
   var devfab = {
-    debug: false,
-    FileRequire: FileRequire,
+    get debug() {
+      return !!(window.__devfab && window.__devfab.debug);
+    },
+    set debug(value) {
+      window.__devfab = window.__devfab || {};
+      window.__devfab.debug = !!value;
+    },
     define: function define() {
-      FileRequire.define.apply(FileRequire, arguments);
+      FileRequire.provide.apply(FileRequire, arguments);
     },
     require: function require() {
-      FileRequire.require.apply(FileRequire, arguments);
+      FileRequire.inject.apply(FileRequire, arguments);
+    },
+    provide: function provide() {
+      FileRequire.provide.apply(FileRequire, arguments);
+    },
+    inject: function inject() {
+      FileRequire.inject.apply(FileRequire, arguments);
     },
     provideScript: function provideScript() {
       FileRequire.provideScript.apply(FileRequire, arguments);
@@ -5752,6 +5574,7 @@
     injectScript: function injectScript() {
       FileRequire.injectScript.apply(FileRequire, arguments);
     },
+    FileRequire: FileRequire,
     utils: _objectSpread2(_objectSpread2({}, utils), {}, {
       builder: utils.Builder.create(),
       cache: utils.Cache.create(),