Composition script crashes surface as an unrelated TypeError pointing at window.__timelines (runtime drops Error.stack) #6334

function _o(e){
  let t="unknown error";
  try{ t = e instanceof Error ? `${e.name}: ${e.message}` : String(e) }   // <-- e.stack dropped here
  catch(n){ W("runtime.startupError",n) }
  window.__hfStartupError = `HyperFrames runtime failed: ${t}. Check the composition's scripts and window.__timelines entries; ...`
}

t = e instanceof Error
  ? `${e.name}: ${e.message}${e.stack ? ` [thrown at: ${(()=>{
      let f = String(e.stack).split("\n").map(s => s.trim()).filter(Boolean).slice(1),
          k = f.slice(0, 3),
          c = f.find(s => /index\.html/.test(s) && !/gsap|hyperframe/i.test(s));
      if (c && !k.includes(c)) k.push(c);
      return k.join(" <- ");
    })()}]` : ""}`
  : String(e)

#!/usr/bin/env node
// 修掉 HyperFrames B2：运行时启动错误只取 e.message、丢掉 e.stack，
// 导致页内脚本崩溃时报成 "Cannot read properties of undefined (reading
// 'getBoundingClientRect')" 这种与真实原因无关的误导信息。
//
// 补丁给错误文案追加真实抛出位置（含 gsap 帧与 index.html 行号），
// 并重算 hyperframe.manifest.json 的 sha256 —— 运行时有完整性校验，
// 不改 manifest 会报 "Runtime checksum mismatch" 直接拒渲染。
//
//   node tools/patch-startup-error.mjs            打补丁（幂等）
//   node tools/patch-startup-error.mjs --revert   还原
//
// npm install 会覆盖 node_modules，之后重跑一次本脚本即可。

import { readFileSync, writeFileSync, existsSync, copyFileSync } from "node:fs";
import { createHash } from "node:crypto";
import { dirname, join, resolve } from "node:path";
import { fileURLToPath } from "node:url";

const HERE = dirname(fileURLToPath(import.meta.url));
const DIST = resolve(HERE, "../node_modules/hyperframes/dist");
const IIFE = join(DIST, "hyperframe.runtime.iife.js");
const MANIFEST = join(DIST, "hyperframe.manifest.json");
const MARK = "[thrown at:";

// 运行时源码在打包时出现两份：注入页面的 iife，和 CLI 侧的 chunk。
const BUNDLES = [IIFE, join(DIST, "chunk-UYBXHV7R.js")];

const FROM =
  'function _o(e){let t="unknown error";try{t=e instanceof Error?`${e.name}: ${e.message}`:String(e)}catch(n){W("runtime.startupError",n)}';

// 单行输出：CLI 进度条与 JSON 日志都按单行渲染，换行会被截断。
// 取前 3 帧，并强制带上 index.html 那一帧（那才是用户自己写错的行号）。
const TO =
  'function _o(e){let t="unknown error";try{t=e instanceof Error?`${e.name}: ${e.message}${e.stack?` [thrown at: ${(()=>{let f=String(e.stack).split("\\n").map(s=>s.trim()).filter(Boolean).slice(1),k=f.slice(0,3),c=f.find(s=>/index\\.html/.test(s)&&!/gsap|hyperframe/i.test(s));if(c&&!k.includes(c))k.push(c);return k.join(" <- ")})()}]`:""}`:String(e)}catch(n){W("runtime.startupError",n)}';

const sha256 = (p) => createHash("sha256").update(readFileSync(p)).digest("hex");
const revert = process.argv.includes("--revert");

const bail = (msg) => {
  console.error(msg);
  process.exit(1);
};

if (!existsSync(IIFE)) {
  bail(`找不到 ${IIFE}\n请先在 hf-test 目录执行 npm install。`);
}

if (process.argv.includes("--check")) {
  const patched = readFileSync(IIFE, "utf8").includes(MARK);
  const declared = existsSync(MANIFEST)
    ? (readFileSync(MANIFEST, "utf8").match(/"sha256"\s*:\s*"([0-9a-f]{64})"/) || [])[1]
    : undefined;
  const actual = sha256(IIFE);
  console.log(`补丁状态：${patched ? "已生效" : "未打（npm install 后被冲掉了，重跑本脚本）"}`);
  console.log(`校验一致：${declared === actual ? "通过" : `失败 manifest=${declared?.slice(0, 12)}… 实际=${actual.slice(0, 12)}…`}`);
  process.exit(patched && declared === actual ? 0 : 1);
}

let touched = 0;
for (const file of BUNDLES) {
  if (!existsSync(file)) {
    console.log(`跳过（上游未再产出该文件）：${file}`);
    continue;
  }
  const src = readFileSync(file, "utf8");
  if (!existsSync(`${file}.orig`)) {
    copyFileSync(file, `${file}.orig`);
  }
  if (src.includes(MARK)) {
    console.log(`已是补丁状态：${file}`);
  } else if (!src.includes(FROM)) {
    console.log(`⚠ 未匹配到目标代码，上游可能重构了错误处理，需人工核对：${file}`);
  } else {
    writeFileSync(file, src.replace(FROM, TO));
    console.log(`已打补丁：${file}`);
    touched++;
  }
}

// 只有 iife 参与完整性校验，改完必须同步 manifest，否则渲染直接被拒。
if (existsSync(MANIFEST)) {
  if (!existsSync(`${MANIFEST}.orig`)) copyFileSync(MANIFEST, `${MANIFEST}.orig`);
  const manifest = readFileSync(MANIFEST, "utf8");
  const next = sha256(IIFE);
  const updated = manifest.replace(/"sha256"\s*:\s*"[0-9a-f]{64}"/, `"sha256": "${next}"`);
  if (updated === manifest) {
    console.log("⚠ manifest 里没找到 sha256 字段，校验可能失败，需人工核对。");
  } else {
    writeFileSync(MANIFEST, updated);
    console.log(`已同步校验哈希：${next.slice(0, 12)}…`);
    touched++;
  }
}

console.log(
  touched
    ? `\n补丁完成，本次改动 ${touched} 个文件。验证：node tools/patch-startup-error.mjs --check`
    : "\n无需改动。"
);