xhs-mp-compiler-cli 2.0.32 → 2.0.33-beta.0

package/dist/compilerManager.js

@@ -346,7 +346,7 @@ var __importDefault = (this && this.__importDefault) || function (mod) {
                     let compressCss = false;
                     let enableSourcemap = true;
                     let appendSourcemapComment = true;
-                    let runInServiceSandbox = false;
+                    const runInServiceSandbox = true;
                     if (entryType === constant_config_1.COMPILE_ENTRY.preview) {
                         compressCss = true;
                         compressJs = true;
@@ -361,7 +361,6 @@ var __importDefault = (this && this.__importDefault) || function (mod) {
                     else {
                         compressCss = false;
                         compressJs = (_a = settings.minified) !== null && _a !== void 0 ? _a : false;
-                        runInServiceSandbox = true;
                     }
                     const buildConfig = Object.assign({ entryType,
                         compressCss,

package/dist/packs/webpack/index.js

@@ -42,7 +42,7 @@ var __importDefault = (this && this.__importDefault) || function (mod) {
         };
     };
     const formatCompilerConfig = startConfig => {
-        const { projectPath, action, tsConfigPath, platform, compressCss = true, compressJs = true, enableSourcemap = true, appendSourcemapComment = true, runInServiceSandbox = false, mpUploadOptions = false } = startConfig;
+        const { projectPath, action, tsConfigPath, platform, compressCss = true, compressJs = true, enableSourcemap = true, appendSourcemapComment = true, runInServiceSandbox = true, mpUploadOptions = false } = startConfig;
         const { enableV1, enableV2, enableVDom } = handleVersion(startConfig);
         const distDir = startConfig.distDir || path_1.default.join(process.cwd(), 'dist');
         process.env.__platform = platform;

package/dist/presets/configs/miniprogram/service/sanbox.d.ts

@@ -0,0 +1,7 @@
+/**
+ * 用户代码沙盒，用于隔离用户代码和框架代码
+ * 防止用户利用漏洞获进行相关框架代码的调用
+ * 小程序在编译时会利用 with() {} 包裹用户代码
+ * 本函数最后要toString() 获得函数体 所以不能依赖外部变量，所有实现均在内部实现
+ */
+export declare const getXHSSandBox: () => any;

package/dist/presets/configs/miniprogram/service/sanbox.js

@@ -0,0 +1,168 @@
+(function (factory) {
+    if (typeof module === "object" && typeof module.exports === "object") {
+        var v = factory(require, exports);
+        if (v !== undefined) module.exports = v;
+    }
+    else if (typeof define === "function" && define.amd) {
+        define(["require", "exports"], factory);
+    }
+})(function (require, exports) {
+    "use strict";
+    Object.defineProperty(exports, "__esModule", { value: true });
+    exports.getXHSSandBox = void 0;
+    /**
+     * 用户代码沙盒，用于隔离用户代码和框架代码
+     * 防止用户利用漏洞获进行相关框架代码的调用
+     * 小程序在编译时会利用 with() {} 包裹用户代码
+     * 本函数最后要toString() 获得函数体 所以不能依赖外部变量，所有实现均在内部实现
+     */
+    const getXHSSandBox = function () {
+        if (!globalThis.xhsLazyAppJs) {
+            return globalThis;
+        }
+        const FrameworkGlobalThis = globalThis;
+        const BussinessGlobalThis = Object.create(FrameworkGlobalThis.constructor.prototype);
+        /**
+         * 框架提供的能力, 都是可写可读的
+         */
+        const mpVars = [
+            "Page", "getCurrentPages", "Component",
+            "Behavior",
+            "App", "getApp",
+            "setTimeout", "clearTimeout", "setInterval", "clearInterval",
+            "xhs", "wx",
+        ];
+        const proxyDynamicVars = ["__xhsRoute", "__pageId"];
+        /**
+         * 这里是获取的微信8.0.62版本中全局环境中的值
+         */
+        const baseJSValue = [
+            "Object", "Function", "Array", "Number", "Boolean", "String", "Symbol", "Date", "Promise", "RegExp",
+            "Infinity", "NaN", "undefined",
+            "parseFloat", "parseInt", "isFinite", "isNaN",
+            "Error", "AggregateError", "EvalError", "RangeError", "ReferenceError", "SyntaxError", "TypeError", "URIError", "SuppressedError",
+            "JSON", "Math", "console", "Atomics",
+            "SharedArrayBuffer", "ArrayBuffer", "DataView", "Uint8Array", "Int8Array", "Uint16Array", "Int16Array", "Uint32Array", "Int32Array", "BigUint64Array", "BigInt64Array", "Uint8ClampedArray", "Float32Array", "Float64Array",
+            "Map", "BigInt", "Set", "WeakMap", "WeakSet", "Proxy", "Reflect", "FinalizationRegistry", "WeakRef",
+            "decodeURI", "decodeURIComponent", "encodeURI", "encodeURIComponent", "escape", "unescape", "eval",
+            "Iterator", "AsyncIterator", "DisposableStack",
+        ];
+        // 获取 globalThis 上的 Symbol 属性并分类
+        const symbolProperties = Object.getOwnPropertySymbols(FrameworkGlobalThis);
+        /**
+         * 拷贝描述符号
+         * @param items Symbol[] string[]
+         */
+        const copyDescriptors = (items) => {
+            for (const item of items) {
+                try {
+                    const originalDescriptor = Object.getOwnPropertyDescriptor(FrameworkGlobalThis, item);
+                    if (!originalDescriptor)
+                        continue;
+                    Object.defineProperty(BussinessGlobalThis, item, originalDescriptor);
+                }
+                catch (error) {
+                    console.error(`Error defining ${item}:`, error);
+                }
+            }
+        };
+        /**
+         * 拷贝值
+         * @param items string[]
+         */
+        const copyValue = (items) => {
+            const syncMap = new Map();
+            for (const item of items) {
+                Object.defineProperty(BussinessGlobalThis, item, {
+                    get() {
+                        if (syncMap.has(item)) {
+                            return syncMap.get(item);
+                        }
+                        return FrameworkGlobalThis[item];
+                    },
+                    set(value) {
+                        syncMap.set(item, value);
+                    },
+                    configurable: true,
+                    enumerable: true,
+                });
+            }
+        };
+        /**
+         * 拷贝不可修改的属性
+         * @param items string[]
+         */
+        const copyUnModifiable = (items) => {
+            for (const item of items) {
+                try {
+                    Object.defineProperty(BussinessGlobalThis, item, {
+                        get() {
+                            return FrameworkGlobalThis[item];
+                        },
+                        set(value) {
+                            // noop
+                        },
+                        configurable: false,
+                        enumerable: true
+                    });
+                }
+                catch (error) {
+                    console.error("Error defining property:", item, error);
+                }
+            }
+        };
+        copyDescriptors(baseJSValue);
+        copyDescriptors(symbolProperties);
+        // 特殊标记
+        copyDescriptors(['xhsLazyAppJs']);
+        copyValue(mpVars);
+        copyUnModifiable(proxyDynamicVars);
+        try {
+            Object.defineProperty(BussinessGlobalThis, 'globalThis', {
+                get() { return BussinessGlobalThis; },
+                set(value) {
+                    // 忽略修改
+                },
+                configurable: false,
+                enumerable: true,
+            });
+        }
+        catch (error) {
+            console.error("Error defining property: globalThis", error);
+        }
+        /**
+         * 业务代码层 globalThis 的修改，需要同步到框架层的 globalThis 上，供框架层消费
+         */
+        const copySync = (items) => {
+            for (const item of items) {
+                try {
+                    Object.defineProperty(BussinessGlobalThis, item, {
+                        get() {
+                            return FrameworkGlobalThis[item];
+                        },
+                        set(value) {
+                            FrameworkGlobalThis[item] = value;
+                        },
+                        configurable: false,
+                        enumerable: false,
+                    });
+                }
+                catch (error) {
+                    console.error("Error defining property:", item, error);
+                }
+            }
+        };
+        const getSubService = (listString) => {
+            return listString.split(';')
+                .map(item => `XHS_SERVICE_${item.trim()}`);
+        };
+        const syncList = [
+            '__MP_APP_JSON__',
+            'XHS_SERVICE',
+            ...getSubService('${PKG_SLOT}'), // 替换为真实分包路径 这里要把所有的分包枚举出来
+        ];
+        copySync(syncList);
+        return BussinessGlobalThis;
+    };
+    exports.getXHSSandBox = getXHSSandBox;
+});

package/dist/presets/configs/miniprogram/service/serviceChunkPlugin.d.ts

@@ -4,6 +4,7 @@ declare class ServiceChunkPlugin {
     options: IPresetOptions;
     constructor(options: IPresetOptions);
     apply(compiler: IXhsCompiler): void;
-    updateIndependentService(compilation: any, runtimeCode: any): void;
+    updateIndependentService(compilation: any, wrappedRuntimeCode: any): void;
+    updateNonIndependentService(compilation: any): void;
 }
 export default ServiceChunkPlugin;

package/dist/presets/configs/miniprogram/service/serviceChunkPlugin.js

@@ -7,28 +7,125 @@ var __importDefault = (this && this.__importDefault) || function (mod) {
         if (v !== undefined) module.exports = v;
     }
     else if (typeof define === "function" && define.amd) {
-        define(["require", "exports", "path", "xhs-mp-pack", "webpack-sources"], factory);
+        define(["require", "exports", "path", "webpack", "./sanbox"], factory);
     }
 })(function (require, exports) {
     "use strict";
     Object.defineProperty(exports, "__esModule", { value: true });
     const path_1 = __importDefault(require("path"));
-    const xhs_mp_pack_1 = require("xhs-mp-pack");
-    const webpack_sources_1 = require("webpack-sources");
-    function adapteServiceCode(assetName, serviceSource, packSetting) {
+    const webpack_1 = require("webpack");
+    const sanbox_1 = require("./sanbox");
+    // 使用 webpack 内置的 sources 类型
+    const { SourceMapSource, RawSource } = webpack_1.sources;
+    // 统一处理 sourceAndMap() 返回结果的函数
+    function extractSourceAndMap(source) {
+        if (!source) {
+            return { sourceString: '', sourceMap: null };
+        }
+        // 如果是字符串，直接返回
+        if (typeof source === 'string') {
+            return { sourceString: source, sourceMap: null };
+        }
+        // 如果是 Source 对象，调用 sourceAndMap 方法
+        const result = source.sourceAndMap();
+        const sourceString = typeof result.source === 'string' ? result.source : result.source.toString();
+        return { sourceString, sourceMap: result.map };
+    }
+    // 类型安全的 sourcemap 转换函数
+    function createSourceMapSource(sourceCode, filename, sourceMap, originalSource) {
+        if (!sourceMap) {
+            return new RawSource(sourceCode);
+        }
+        try {
+            return new SourceMapSource(sourceCode, filename, sourceMap, originalSource);
+        }
+        catch (error) {
+            console.warn(`Failed to create SourceMapSource for ${filename}, falling back to RawSource:`, error);
+            return new RawSource(sourceCode);
+        }
+    }
+    // 通用的代码包装函数
+    function wrapCodeWithGlobalCheck(code, globalVarName, filename, sourceMap, originalSource) {
+        const wrappedCode = [
+            `if (!globalThis.${globalVarName}) {`,
+            `globalThis.${globalVarName} = true;`,
+            code,
+            `}`
+        ].join('\n');
+        if (sourceMap && originalSource) {
+            return createSourceMapSource(wrappedCode, filename, sourceMap, originalSource);
+        }
+        return new RawSource(wrappedCode);
+    }
+    // 为 common 代码添加注入保护包装
+    function wrapCommonCodeWithProtection(commonSource) {
+        // 使用统一的 extractSourceAndMap 函数处理所有情况
+        const { sourceString, sourceMap } = extractSourceAndMap(commonSource);
+        // 如果没有内容，返回空的源码信息
+        if (!sourceString) {
+            return { sourceString: '', sourceMap: null };
+        }
+        const wrappedSource = wrapCodeWithGlobalCheck(sourceString, '__XHS_COMMON_SERVICE_REGISTERED__', 'service-common.js', sourceMap, sourceString);
+        const wrappedSourceAndMap = extractSourceAndMap(wrappedSource);
+        return wrappedSourceAndMap;
+    }
+    // 处理业务代码的 sourcemap（支持不同的代码组合）
+    function createBusinessCodeSource(runtimeCode, serviceSource, filename, commonSource) {
+        const codeParts = [runtimeCode];
+        // 如果提供了 common 代码，则添加到代码组合中
+        if (commonSource && commonSource.sourceString) {
+            codeParts.push(commonSource.sourceString);
+        }
+        codeParts.push(serviceSource.sourceString);
+        const finalCode = codeParts.filter(Boolean).join('\n');
+        // 优先使用 service 的 sourcemap，如果没有则使用 common 的 sourcemap
+        if (serviceSource.sourceMap) {
+            return createSourceMapSource(finalCode, filename, serviceSource.sourceMap, serviceSource.sourceString);
+        }
+        if (commonSource && commonSource.sourceMap) {
+            return createSourceMapSource(finalCode, filename, commonSource.sourceMap, commonSource.sourceString);
+        }
+        return new RawSource(finalCode);
+    }
+    // bom环境变量 与微信产物对齐
+    const bomVars = [
+        'window',
+        'document',
+        'frames',
+        'self',
+        'location',
+        'navigator',
+        'localStorage',
+        'history',
+        'screen',
+        'alert',
+        'confirm',
+        'prompt',
+    ];
+    function adapteServiceCode(assetName, serviceSource, packSetting, project, isIndependent) {
+        var _a;
+        const subPackages = project.getSubPackages();
         let result;
         if (packSetting.runInServiceSandbox) {
-            const { source, map } = serviceSource === null || serviceSource === void 0 ? void 0 : serviceSource.sourceAndMap();
-            const beforeContent = '(function(window,document){';
-            const afterContent = '\n})(undefined,undefined)';
-            const newSource = beforeContent + source + afterContent;
-            result = new webpack_sources_1.SourceMapSource(newSource, // 新的资源内容
-            assetName, // 资源文件名
-            // @ts-ignore
-            map, // 旧的 source map
-            source // 旧的源代码
-            );
-            // @ts-ignore
+            const { sourceString, sourceMap } = extractSourceAndMap(serviceSource);
+            const subPackagesStr = subPackages.map(sub => sub.root).join(';');
+            const codeParts = [];
+            // 只有独立分包或主包才需要注入沙盒函数定义
+            // 非独立分包会使用主包已经定义的沙盒函数
+            if (isIndependent) {
+                // __PKG_SLOT__ 替换为真实分包路径
+                codeParts.push(`globalThis.__XHS_CACHED_SANDBOX__ = globalThis.__XHS_CACHED_SANDBOX__ || (${(_a = sanbox_1.getXHSSandBox.toString()) === null || _a === void 0 ? void 0 : _a.replace('${PKG_SLOT}', subPackagesStr)})();`);
+            }
+            // 如果在沙盒直接定义这些属性会导致 document in 等操作符返回true 所以bom变量通过函数参数来定义
+            codeParts.push(`(function(${bomVars.join(',')}) {`);
+            // 所有分包都需要 with 包装来使用沙盒环境
+            codeParts.push('with (this) {');
+            codeParts.push(sourceString);
+            codeParts.push('}'); // with 结束
+            codeParts.push('}).call(globalThis.__XHS_CACHED_SANDBOX__);');
+            const newSource = codeParts.join('\n');
+            // 使用类型安全的 sourcemap 创建函数
+            result = createSourceMapSource(newSource, assetName, sourceMap, sourceString);
         }
         else {
             result = serviceSource;
@@ -48,52 +145,101 @@ var __importDefault = (this && this.__importDefault) || function (mod) {
                     const { project, packSetting } = this.options;
                     let serviceSourceV2 = (_a = compilation.getAsset('v2/service.js')) === null || _a === void 0 ? void 0 : _a.source;
                     let serviceSource = (_b = compilation.getAsset('v1/service.js')) === null || _b === void 0 ? void 0 : _b.source;
-                    let runtimeCode = (_c = compilation.getAsset('runtime.js')) === null || _c === void 0 ? void 0 : _c.source.source();
+                    const runtimeSourceOriginal = (_c = compilation.getAsset('runtime.js')) === null || _c === void 0 ? void 0 : _c.source;
                     // 当没有引用相同 js 场景时， commonChunk 将是 undefined
-                    const commonSource = ((_d = compilation.getAsset('service-common.js')) === null || _d === void 0 ? void 0 : _d.source) || '';
-                    runtimeCode = `if (!globalThis.__XHS_RUNTIME_REGISTERED__) {
-            globalThis.__XHS_RUNTIME_REGISTERED__ = true;
-            ${runtimeCode}
-          }`;
+                    const commonSourceOriginal = (_d = compilation.getAsset('service-common.js')) === null || _d === void 0 ? void 0 : _d.source;
+                    // 包装 runtime code，统一使用 extractSourceAndMap 处理
+                    const { sourceString: runtimeCodeString } = extractSourceAndMap(runtimeSourceOriginal);
+                    const wrappedRuntimeCodeSource = wrapCodeWithGlobalCheck(runtimeCodeString, '__XHS_WEBPACK_RUNTIME_REGISTERED__', 'runtime.js');
+                    const wrappedRuntimeCode = wrappedRuntimeCodeSource.source().toString();
+                    // 为 common 代码添加注入保护包装，保持 sourcemap
+                    const wrappedCommonSource = wrapCommonCodeWithProtection(commonSourceOriginal);
                     if (packSetting.enableV2 && serviceSourceV2) {
                         // 注入 v2 service.js
                         // 主包加入 runtimeChunk、commonChunk
                         const assetName = 'v2/service.js';
-                        serviceSourceV2 = adapteServiceCode(assetName, serviceSourceV2, packSetting);
+                        // 先获取原始的 source 和 sourcemap
+                        const serviceSource = extractSourceAndMap(serviceSourceV2);
+                        // 创建业务代码的 SourceMapSource（保留 common + service 的 sourcemap）
+                        const concatenatedSource = createBusinessCodeSource(wrappedRuntimeCode, serviceSource, assetName, wrappedCommonSource);
+                        // 在写入之前进行 adapteServiceCode 处理（主包，需要沙盒）
+                        const finalSourceWithMap = adapteServiceCode(assetName, concatenatedSource, packSetting, project, true);
                         // @ts-ignore
-                        compilation.updateAsset(assetName, new xhs_mp_pack_1.ConcatSource(runtimeCode, commonSource, serviceSourceV2));
+                        compilation.updateAsset(assetName, finalSourceWithMap);
                     }
                     // 独立分包加入 runtimeChunk
                     if (packSetting.enableV1 && serviceSource) {
                         // // 主包加入 runtimeChunk、commonChunk
                         const assetName = 'v1/service.js';
-                        serviceSource = adapteServiceCode(assetName, serviceSource, packSetting);
+                        // 先获取原始的 source 和 sourcemap
+                        const v1ServiceSource = extractSourceAndMap(serviceSource);
+                        // 创建业务代码的 SourceMapSource（保留 common + service 的 sourcemap）
+                        const concatenatedV1Source = createBusinessCodeSource(wrappedRuntimeCode, v1ServiceSource, assetName, wrappedCommonSource);
+                        // 在写入之前进行 adapteServiceCode 处理（主包，需要沙盒）
+                        const finalV1SourceWithMap = adapteServiceCode(assetName, concatenatedV1Source, packSetting, project, true);
                         // @ts-ignore
-                        compilation.updateAsset(assetName, new xhs_mp_pack_1.ConcatSource(runtimeCode, commonSource, serviceSource));
+                        compilation.updateAsset(assetName, finalV1SourceWithMap);
                     }
-                    this.updateIndependentService(compilation, runtimeCode);
+                    // 处理独立分包（只需要 runtime，不需要 common）
+                    this.updateIndependentService(compilation, wrappedRuntimeCode);
+                    // 处理非独立分包（不需要 runtime 和 common）
+                    this.updateNonIndependentService(compilation);
                     compilation.deleteAsset('runtime.js');
                     compilation.deleteAsset('service-common.js');
                 });
             });
         }
-        updateIndependentService(compilation, runtimeCode) {
+        updateIndependentService(compilation, wrappedRuntimeCode) {
             const { project, packSetting } = this.options;
             const usingPackageType = packSetting.usingPackageType;
             const subPackages = project.getSubPackages();
             subPackages
                 .filter(sub => sub.independent)
-                .map(sub => path_1.default.join(usingPackageType, sub.root, 'service.js'))
-                .forEach(servicePath => {
+                .forEach(sub => {
+                var _a;
+                const servicePath = path_1.default.join(usingPackageType, sub.root, 'service.js');
+                if (compilation.getAsset(servicePath)) {
+                    const independentServiceSource = (_a = compilation.getAsset(servicePath)) === null || _a === void 0 ? void 0 : _a.source;
+                    // 先获取原始的 source 和 sourcemap
+                    const indepServiceSource = extractSourceAndMap(independentServiceSource);
+                    // 创建独立分包的业务代码（只包含 runtime + service，不包含 common）
+                    const concatenatedIndepSource = createBusinessCodeSource(wrappedRuntimeCode, indepServiceSource, servicePath
+                    // 不传入 commonSource，所以不包含 common 代码
+                    );
+                    // 在写入之前进行 adapteServiceCode 处理（独立分包，需要沙盒）
+                    const finalIndepSourceWithMap = adapteServiceCode(servicePath, concatenatedIndepSource, packSetting, project, true);
+                    // 写入
+                    compilation.updateAsset(servicePath, finalIndepSourceWithMap);
+                    if (packSetting.enableV2 && packSetting.enableV1) {
+                        compilation.updateAsset(servicePath.replace(usingPackageType, 'v1'), finalIndepSourceWithMap);
+                    }
+                }
+            });
+        }
+        updateNonIndependentService(compilation) {
+            const { project, packSetting } = this.options;
+            const usingPackageType = packSetting.usingPackageType;
+            const subPackages = project.getSubPackages();
+            subPackages
+                .filter(sub => !sub.independent) // 非独立分包
+                .forEach(sub => {
                 var _a;
+                const servicePath = path_1.default.join(usingPackageType, sub.root, 'service.js');
                 if (compilation.getAsset(servicePath)) {
-                    let independentServiceSource = (_a = compilation.getAsset(servicePath)) === null || _a === void 0 ? void 0 : _a.source;
-                    independentServiceSource = adapteServiceCode(servicePath, independentServiceSource, packSetting);
-                    const subServiceSource = new xhs_mp_pack_1.ConcatSource(runtimeCode, independentServiceSource);
+                    const nonIndependentServiceSource = (_a = compilation.getAsset(servicePath)) === null || _a === void 0 ? void 0 : _a.source;
+                    // 先获取原始的 source 和 sourcemap
+                    const serviceSource = extractSourceAndMap(nonIndependentServiceSource);
+                    // 非独立分包只需要处理自己的 service 代码，不需要 runtime 和 common
+                    const processedServiceSource = createBusinessCodeSource('', // 不需要 runtime
+                    serviceSource, servicePath
+                    // 不传入 commonSource，所以不包含 common 代码
+                    );
+                    // 在写入之前进行 adapteServiceCode 处理（非独立分包，不需要沙盒）
+                    const finalServiceWithMap = adapteServiceCode(servicePath, processedServiceSource, packSetting, project, false);
                     // 写入
-                    compilation.updateAsset(servicePath, subServiceSource);
+                    compilation.updateAsset(servicePath, finalServiceWithMap);
                     if (packSetting.enableV2 && packSetting.enableV1) {
-                        compilation.updateAsset(servicePath.replace(usingPackageType, 'v1'), subServiceSource);
+                        compilation.updateAsset(servicePath.replace(usingPackageType, 'v1'), finalServiceWithMap);
                     }
                 }
             });

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "xhs-mp-compiler-cli",
-  "version": "2.0.32",
+  "version": "2.0.33-beta.0",
   "description": "xhs mp command tool.",
   "preferGlobal": true,
   "category": "esm",
@@ -88,18 +88,18 @@
     "webpack-chain": "^6.5.1",
     "webpack-sources": "^3.2.2",
     "xhs-mp-workerpool": "^9.2.0",
-    "xhs-mp-ml-loader": "2.0.32",
-    "xhs-mp-compiler-utils": "2.0.32",
-    "xhs-mp-pack": "2.0.32",
-    "xhs-mp-project": "2.0.32",
-    "xhs-mp-shared": "2.0.32",
-    "xhs-mp-shared-fs": "2.0.32",
-    "xhs-mp-sjs-loader": "2.0.32",
-    "xhs-mp-sketch-loader": "2.0.32",
+    "xhs-mp-ml-loader": "2.0.33-beta.0",
+    "xhs-mp-compiler-utils": "2.0.33-beta.0",
+    "xhs-mp-pack": "2.0.33-beta.0",
+    "xhs-mp-project": "2.0.33-beta.0",
+    "xhs-mp-shared": "2.0.33-beta.0",
+    "xhs-mp-shared-fs": "2.0.33-beta.0",
+    "xhs-mp-sjs-loader": "2.0.33-beta.0",
+    "xhs-mp-sketch-loader": "2.0.33-beta.0",
     "yauzl": "^2.10.0"
   },
   "peerDependencies": {
-    "xhs-mp-ml-parser": "2.0.32"
+    "xhs-mp-ml-parser": "2.0.33-beta.0"
   },
   "devDependencies": {
     "@types/babel__generator": "7.6.3",
@@ -122,7 +122,7 @@
     "@types/node": "14",
     "typescript": "5.1.6",
     "webpack-dev-server": "4.0.0-beta.3",
-    "xhs-mp-ml-parser": "2.0.32"
+    "xhs-mp-ml-parser": "2.0.33-beta.0"
   },
   "scripts": {
     "version": "formula changelog && git add .",