xpe 1.0.7 → 1.0.9

package/dist/kernel/iframe.js

@@ -727,7 +727,11 @@ function wrapInlineScriptWithSandbox(code) {
 }
 function createExecNextScriptContent() {
     return [
-        "const sandbox = window.__XPE_INTERNAL_SANDBOX__;",
+        // This helper is injected as a classic script repeatedly. `const` would
+        // create a global lexical binding and fail on the second queued script
+        // (notably when Vite's dev client precedes the app entry). `var` is
+        // intentionally used so each queue step remains re-entrant.
+        "var sandbox = window.__XPE_INTERNAL_SANDBOX__;",
         "if(sandbox.execQueue && sandbox.execQueue.length){ sandbox.execQueue.shift()()}",
     ].join("");
 }

package/dist/kernel/index.js

@@ -1,4 +1,5 @@
 import { XpeRuntimeError, } from "../core/index.js";
+import { createRuntimeFetch } from "./runtime-fetch.js";
 let runtimeEngineModule;
 let runtimeEngineModulePromise;
 export function createRuntimeKernel() {
@@ -46,7 +47,7 @@ function toEnginePreloadOptions(manifest) {
         alive: runtime.alive,
         sync: runtime.sync,
         prefix: toRuntimePrefix(runtime),
-        fetch: toRuntimeFetch(runtime.credentials),
+        fetch: createRuntimeFetch(runtime.credentials),
         props: {
             appCode: manifest.appCode,
             manifest,
@@ -82,8 +83,3 @@ function toRuntimePrefix(runtime) {
         return undefined;
     return { [runtime.name]: runtime.basename };
 }
-function toRuntimeFetch(credentials) {
-    if (!credentials)
-        return undefined;
-    return (input, init) => window.fetch(input, { ...init, credentials: init?.credentials ?? credentials });
-}

package/dist/kernel/runtime-fetch.d.ts

@@ -0,0 +1,2 @@
+import type { RuntimeCredentials } from "../core/index.js";
+export declare function createRuntimeFetch(runtimeCredentials: RuntimeCredentials | undefined, browserFetch?: typeof fetch): ((input: RequestInfo, init?: RequestInit) => Promise<Response>) | undefined;

package/dist/kernel/runtime-fetch.js

@@ -0,0 +1,11 @@
+export function createRuntimeFetch(runtimeCredentials, browserFetch = window.fetch.bind(window)) {
+    if (!runtimeCredentials)
+        return undefined;
+    return (input, init) => {
+        const requestCredentials = input instanceof Request ? input.credentials : undefined;
+        return browserFetch(input, {
+            ...init,
+            credentials: init?.credentials ?? requestCredentials ?? runtimeCredentials,
+        });
+    };
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "xpe",
-  "version": "1.0.7",
+  "version": "1.0.9",
   "description": "下一代微前端应用运行底座",
   "type": "module",
   "license": "MIT",
@@ -37,21 +37,6 @@
     },
     "./package.json": "./package.json"
   },
-  "keywords": [
-    "micro-frontend",
-    "xpe"
-  ],
-  "devDependencies": {
-    "@playwright/test": "^1.60.0",
-    "@types/node": "^25.9.3",
-    "@vitejs/plugin-vue": "^6.0.7",
-    "jsdom": "^29.1.1",
-    "typescript": "^5.8.3",
-    "vite": "^8.0.16",
-    "vitest": "^4.1.8",
-    "vue": "^3.5.38",
-    "vue-router": "^5.1.0"
-  },
   "scripts": {
     "clean": "node scripts/clean-dist.mjs",
     "build": "node scripts/clean-dist.mjs && tsc -p tsconfig.build.json && node scripts/fix-dist-imports.mjs && node scripts/check-dist-surface.mjs",
@@ -66,6 +51,8 @@
     "check:public-surface": "node scripts/check-public-surface.mjs",
     "check:release-metadata": "node scripts/check-release-metadata.mjs",
     "verify": "pnpm run check:release-metadata && pnpm run typecheck && pnpm test && pnpm run build && pnpm run check:pack",
+    "prepack": "pnpm run build",
+    "prepublishOnly": "pnpm run verify",
     "test": "vitest run",
     "test:watch": "vitest",
     "typecheck": "pnpm run typecheck:public && pnpm run typecheck:kernel && pnpm run check:host-child-smoke",
@@ -74,5 +61,20 @@
     "typecheck:kernel": "node scripts/check-kernel-typecheck.mjs",
     "typecheck:public": "tsc -p tsconfig.json --noEmit",
     "upstream:status": "node scripts/upstream-status.mjs"
+  },
+  "keywords": [
+    "micro-frontend",
+    "xpe"
+  ],
+  "devDependencies": {
+    "@playwright/test": "^1.60.0",
+    "@types/node": "^25.9.3",
+    "@vitejs/plugin-vue": "^6.0.7",
+    "jsdom": "^29.1.1",
+    "typescript": "^5.8.3",
+    "vite": "^8.0.16",
+    "vitest": "^4.1.8",
+    "vue": "^3.5.38",
+    "vue-router": "^5.1.0"
   }
-}
+}