From 0b848d38bb7493ae1d1c9428dd7a2daf2e9ff191 Mon Sep 17 00:00:00 2001 From: kdletters Date: Sun, 21 Jun 2026 15:22:00 +0800 Subject: [PATCH] =?UTF-8?q?=E6=94=B6=E5=8F=A3=E5=BE=AE=E4=BF=A1=E4=B9=9D?= =?UTF-8?q?=E5=AE=AB=E5=88=87=E5=9B=BE=E8=AF=8A=E6=96=AD=E6=97=A5=E5=BF=97?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit 微信九宫切图失败日志改为固定阶段标签 原生壳门禁拒绝九宫切图日志输出原生错误对象 同步宿主壳方案和共享决策记录 --- docs/project-memory/shared-memory/decision-log.md | 1 + ...架构】ExpoReactNative与Tauri宿主壳方案-2026-06-17.md | 2 ++ miniprogram/shell/shareGrid.js | 8 ++++++-- miniprogram/shell/shareGrid.test.js | 7 +++---- scripts/check-native-shells.mjs | 11 +++++++++-- 5 files changed, 21 insertions(+), 8 deletions(-) diff --git a/docs/project-memory/shared-memory/decision-log.md b/docs/project-memory/shared-memory/decision-log.md index b3a5622fd..b6549c888 100644 --- a/docs/project-memory/shared-memory/decision-log.md +++ b/docs/project-memory/shared-memory/decision-log.md @@ -104,6 +104,7 @@ - 2026-06-19 原生壳临时替身扫描范围：`npm run check:native-shells` 的生产替身词扫描必须覆盖微信小程序壳生产 `.js`、Expo / Tauri 壳源码与配置、共享 HostBridge 契约、H5 native transport，并自动覆盖已接入真实宿主能力 facade 的 H5 生产调用链文件；新增 H5 调用点接入 HostBridge 时，必须让自动扫描覆盖对应文件或在同等门禁中证明生产代码没有 mock / fake / stub / TODO / FIXME / 模拟 / 伪造。 - 2026-06-18 微信壳桥接层纳入统一验收：`npm run check:native-shells` 还会运行 `miniprogram/host-bridge/`、`miniprogram/shell/`、`pages/web-view` 样式和 `scripts/miniprogram-web-view-auth.test.ts` 的微信壳测试，覆盖 WebView 入口、登录触发、分享目标、支付结果、订阅消息结果和九宫切图行为；三端桥接层文件结构检查只证明目录边界，行为回归必须由同一门禁中的微信壳测试证明。 - 2026-06-21 微信 WebView env 诊断日志收口：微信 `web-view` 壳读取小程序 envVersion 失败时只记录 `[web-view] read mini program env failed` 固定标签，不输出 `wx.getAccountInfoSync()` 原生异常对象；根级原生壳门禁拒绝恢复 `console.warn(..., error)`。 +- 2026-06-21 微信九宫切图诊断日志收口：微信 `share-grid` 壳下载封面、读取图片、导出切图、保存相册或最终保存流程失败时，只记录 `[share-grid] ` 固定标签，不输出 `wx.downloadFile`、`wx.getImageInfo`、`wx.canvasToTempFilePath`、`wx.saveImageToPhotosAlbum` 或其它原生错误对象；页面仍只展示 `九宫切图保存失败。` 稳定文案。 - 2026-06-19 微信壳路由一致性门禁：`npm run check:native-shells` 必须反查 `miniprogram/app.json.pages`、`miniprogram/host-bridge/protocol.js`、H5 `src/services/host-bridge/hostBridge.ts` 小程序页面常量、H5 `src/services/wechatMiniProgramSubscribe.ts` 订阅授权页面常量、`miniprogram/host-bridge/webView.js` 分享入口 / 分享消息类型、`miniprogram/config.js` source query / 域名格式、`miniprogram/shell/webView.js` 请求头来源标记、H5 runtime parser 和 H5 路由保留字段。新增或调整小程序页面、登录派生 URL、支付页、九宫切图页、订阅页、WebView 来源标记、H5 入口域名、API base URL 或宿主上下文 query 字段时，必须同步这几处常量并保持生产 / 开发域名都显式配置为纯 HTTPS domain；运行时开发域名回退生产域名只作为异常兜底。 - 2026-06-18 登录 / 支付能力禁伪声明：`auth.requestLogin` 和 `payment.request` 保留在共享 HostBridge 契约中供未来真实接入，但 Expo / Tauri 壳在真实 SDK、渠道流程和后端契约落地前不得声明这些 capability，也不得把它们写入入口 URL `hostCapabilities`；两端检查脚本会拒绝伪声明，请求实际到达壳层时必须返回明确 `unsupported_method` 并让 H5 fallback，两端壳测试直接覆盖这两个 method。 - 2026-06-20 桌面壳未声明 method 禁伪成功：Tauri 桌面壳只声明真实可用 capability；共享 HostBridge method 白名单中未进入桌面 capability profile 的 method，例如 `auth.requestLogin`、`payment.request`、`file.captureImage`、`scanner.scanQrCode` 和 `haptics.impact`，请求实际到达桌面壳时必须统一返回明确 `unsupported_method`，不得伪造成功或半接入。桌面 Rust 测试必须从 `HOST_BRIDGE_METHODS` 与 `capabilities()` 差集派生 unsupported 覆盖清单，桌面单端配置检查会反查该派生路径，后续共享契约新增 method 时必须同步声明真实桌面能力或补进 unsupported 语义。 diff --git a/docs/【前端架构】ExpoReactNative与Tauri宿主壳方案-2026-06-17.md b/docs/【前端架构】ExpoReactNative与Tauri宿主壳方案-2026-06-17.md index cddf68775..f521cb4c7 100644 --- a/docs/【前端架构】ExpoReactNative与Tauri宿主壳方案-2026-06-17.md +++ b/docs/【前端架构】ExpoReactNative与Tauri宿主壳方案-2026-06-17.md @@ -538,6 +538,8 @@ GameBridge 禁止： 2026-06-21 追加：微信 `web-view` 壳读取小程序 envVersion 失败时只允许记录 `[web-view] read mini program env failed` 固定标签，不把 `wx.getAccountInfoSync()` 原生异常对象写入生产日志；根级原生壳门禁会拒绝恢复 `console.warn(..., error)`。 +2026-06-21 追加：微信九宫切图壳的下载、图片读取、切图导出、保存相册和最终保存失败诊断只允许记录 `[share-grid] ` 固定标签，不把微信原生错误对象或后端细节写入生产日志；页面仍只展示 `九宫切图保存失败。` 稳定文案。 + 2026-06-19 追加：微信小程序壳路由一致性进入原生壳统一验收。`npm run check:native-shells` 会反查 `miniprogram/app.json.pages` 与 `miniprogram/host-bridge/protocol.js` 页面 URL 常量一致，H5 `src/services/host-bridge/hostBridge.ts` 的小程序登录、支付、九宫切图页面常量、H5 `src/services/wechatMiniProgramSubscribe.ts` 的订阅授权页面常量与微信协议常量一致，`miniprogram/host-bridge/webView.js` 的 WebView 分享入口和分享目标消息类型不漂移；同时会校验 `miniprogram/config.js` 的生产 / 开发 H5 入口与 API base URL 都是显式配置的纯 HTTPS 域名，`WEB_VIEW_SOURCE_QUERY` 与共享 `HOST_BRIDGE_WECHAT_MINI_PROGRAM_SOURCE_QUERY` 一致，`miniprogram/shell/webView.js` 请求头从 `WEB_VIEW_SOURCE_QUERY` 读取 `clientType` / `clientRuntime`，H5 runtime parser 读取共享 `HOST_BRIDGE_RUNTIME_CONTEXT_QUERY_KEY`，H5 路由保留字段读取共享 `HOST_BRIDGE_PRESERVED_RUNTIME_CONTEXT_QUERY_KEYS`。运行时对开发域名的生产域名回退只作为异常兜底，不作为配置口径；新增小程序页面、改页面路径、调整来源 query 或切换域名格式时，必须同步协议常量、H5 HostBridge / 订阅服务常量、`app.json`、共享 HostBridge query 契约和这条门禁。 2026-06-18 追加：原生壳本地生成物不作为生产源码门禁输入。Expo `.expo/`、Expo export smoke 临时目录、Tauri `target/`、Tauri schema `gen/` 和 Tauri 自动生成权限目录都必须保持 gitignored；根级生产壳敏感词扫描只检查可提交的壳源码和配置，避免本机工具输出影响生产门禁。手写 capability / 权限配置仍需保留在扫描范围内。 diff --git a/miniprogram/shell/shareGrid.js b/miniprogram/shell/shareGrid.js index 07ff03ff8..96c521116 100644 --- a/miniprogram/shell/shareGrid.js +++ b/miniprogram/shell/shareGrid.js @@ -9,8 +9,12 @@ const { const WECHAT_SHARE_GRID_SAVE_UNAVAILABLE_MESSAGE = '九宫切图保存失败。'; +function logShareGridFailure(label, _error) { + console.error(`[share-grid] ${label}`); +} + function rejectShareGridSaveFailure(reject, label, error) { - console.error(`[share-grid] ${label}`, error); + logShareGridFailure(label, error); reject(new Error(WECHAT_SHARE_GRID_SAVE_UNAVAILABLE_MESSAGE)); } @@ -199,7 +203,7 @@ function createWechatShareGridPage() { icon: 'success', }); } catch (error) { - console.error('[share-grid] save failed', error); + logShareGridFailure('save failed', error); this.setData({ errorMessage: WECHAT_SHARE_GRID_SAVE_UNAVAILABLE_MESSAGE, loading: false, diff --git a/miniprogram/shell/shareGrid.test.js b/miniprogram/shell/shareGrid.test.js index f5754011e..a42492ccc 100644 --- a/miniprogram/shell/shareGrid.test.js +++ b/miniprogram/shell/shareGrid.test.js @@ -65,10 +65,9 @@ describe('wechat share-grid shell page', () => { expect(page.data.loading).toBe(false); expect(page.data.errorMessage).toBe('九宫切图保存失败。'); expect(page.data.errorMessage).not.toContain('private native download detail'); - expect(consoleError).toHaveBeenCalledWith( - '[share-grid] download failed', - { errMsg: 'private native download detail' }, - ); + expect(consoleError).toHaveBeenCalledWith('[share-grid] download failed'); + expect(consoleError).toHaveBeenCalledWith('[share-grid] save failed'); + expect(consoleError.mock.calls.flat()).not.toContain('private native download detail'); consoleError.mockRestore(); }); }); diff --git a/scripts/check-native-shells.mjs b/scripts/check-native-shells.mjs index 31dcefb3b..12c29adcd 100644 --- a/scripts/check-native-shells.mjs +++ b/scripts/check-native-shells.mjs @@ -2789,7 +2789,10 @@ function assertWechatShareGridFailureBoundaries() { for (const snippet of [ "WECHAT_SHARE_GRID_SAVE_UNAVAILABLE_MESSAGE = '九宫切图保存失败。'", - "console.error(`[share-grid] ${label}`, error)", + 'function logShareGridFailure(label, _error)', + 'console.error(`[share-grid] ${label}`)', + 'logShareGridFailure(label, error)', + "logShareGridFailure('save failed', error)", 'reject(new Error(WECHAT_SHARE_GRID_SAVE_UNAVAILABLE_MESSAGE))', 'errorMessage: WECHAT_SHARE_GRID_SAVE_UNAVAILABLE_MESSAGE', ]) { @@ -2803,6 +2806,8 @@ function assertWechatShareGridFailureBoundaries() { "reject(new Error(error.errMsg || '导出切图失败'))", "reject(new Error(error.errMsg || '保存到相册失败'))", "error && error.message ? error.message : '九宫切图保存失败。'", + "console.error(`[share-grid] ${label}`, error)", + "console.error('[share-grid] save failed', error)", ]) { if (shareGridSource.includes(forbiddenSnippet)) { throw new Error(`wechat share-grid shell must not expose native failure detail via ${forbiddenSnippet}`); @@ -2812,7 +2817,9 @@ function assertWechatShareGridFailureBoundaries() { 'hides downloadFile native failure details from the page', "expect(page.data.errorMessage).toBe('九宫切图保存失败。')", "expect(page.data.errorMessage).not.toContain('private native download detail')", - "expect(consoleError).toHaveBeenCalledWith(", + "expect(consoleError).toHaveBeenCalledWith('[share-grid] download failed')", + "expect(consoleError).toHaveBeenCalledWith('[share-grid] save failed')", + "expect(consoleError.mock.calls.flat()).not.toContain('private native download detail')", ]) { if (!shareGridTestSource.includes(snippet)) { throw new Error(`wechat share-grid boundary test must include ${snippet}`);