@alipay/ams-checkout 0.0.1776306844-dev.2 → 0.0.1777017092-dev.0

package/esm/core/component/element/EventCenter/index.d.ts

@@ -20,6 +20,16 @@ export declare class EventCenter {
      * @returns
      */
     endEvent(startId: string, extra?: any): void;
+    /**
+     * Cancels a single active event and reports it as an ended event with canceled=true.
+     * This is used when the mount flow is terminated early (for example, on destroy or abnormal exit).
+     */
+    cancelEvent(startId: string, extra?: any): void;
+    /**
+     * Cancels all active events whose event id starts with the given prefix.
+     * For example, prefix 'mount' will cancel events like mount_1_start.
+     */
+    cancelByPrefix(prefix: string, extra?: any): void;
     private startHeartbeat;
     private stopHeartbeat;
     private sendHeartbeat;

package/esm/core/component/element/EventCenter/index.js

@@ -89,17 +89,53 @@ export var EventCenter = /*#__PURE__*/function () {
       // 如果活动事件数量为0，则停止心跳
       if (this.activeEvents.size === 0) this.stopHeartbeat();
     }
+
+    /**
+     * Cancels a single active event and reports it as an ended event with canceled=true.
+     * This is used when the mount flow is terminated early (for example, on destroy or abnormal exit).
+     */
+  }, {
+    key: "cancelEvent",
+    value: function cancelEvent(startId, extra) {
+      if (!this.activeEvents.has(startId)) return;
+      var startTime = this.activeEvents.get(startId);
+      this.activeEvents.delete(startId);
+      var type = this.getEventNameFromStart(startId, 'end');
+      this.sendLog(type, _objectSpread({
+        eventName: this.buildIdFromStart(startId, 'end'),
+        startTime: startTime,
+        endTime: Date.now(),
+        canceled: true
+      }, extra || {}));
+      if (this.activeEvents.size === 0) this.stopHeartbeat();
+    }
+
+    /**
+     * Cancels all active events whose event id starts with the given prefix.
+     * For example, prefix 'mount' will cancel events like mount_1_start.
+     */
+  }, {
+    key: "cancelByPrefix",
+    value: function cancelByPrefix(prefix, extra) {
+      var _this = this;
+      var ids = Array.from(this.activeEvents.keys()).filter(function (id) {
+        return id.startsWith(prefix);
+      });
+      ids.forEach(function (id) {
+        return _this.cancelEvent(id, extra);
+      });
+    }
   }, {
     key: "startHeartbeat",
     value: function startHeartbeat() {
-      var _this = this;
+      var _this2 = this;
       if (this.heartbeatIntervalId) return;
       this.heartbeatIntervalId = setInterval(function () {
-        if (_this.activeEvents.size === 0) {
-          _this.stopHeartbeat();
+        if (_this2.activeEvents.size === 0) {
+          _this2.stopHeartbeat();
           return;
         }
-        _this.sendHeartbeat();
+        _this2.sendHeartbeat();
       }, this.HEARTBEAT_INTERVAL);
     }
   }, {

package/esm/core/component/element/elementController/index.d.ts

@@ -20,6 +20,8 @@ declare class ElementController {
     private handleInitializationError;
     private handleMountError;
     private clearAndSetInitTimeout;
+    private clearInitTimeout;
+    private clearEvents;
     private setInitTimeout;
     private initializeAndMountProcessor;
     private handleStartBizFlowError;

package/esm/core/component/element/elementController/index.js

@@ -189,6 +189,25 @@ var ElementController = /*#__PURE__*/function () {
       this.initTimeout = this.setInitTimeout(resolve);
     }
 
+    // Clears the pending init timeout to avoid timeout callbacks from stale Element instances.
+  }, {
+    key: "clearInitTimeout",
+    value: function clearInitTimeout() {
+      clearTimeout(this.initTimeout);
+      this.initTimeout = null;
+    }
+
+    // Clears mount-related heartbeat events to avoid stale heartbeat reporting after abnormal exit.
+  }, {
+    key: "clearEvents",
+    value: function clearEvents(reason) {
+      var _this$elementEventCen, _this$elementEventCen2;
+      // antlog examples: actionName=mount_end&msg=destroy, actionName=mount_end&msg=webLaunch
+      (_this$elementEventCen = (_this$elementEventCen2 = this.elementEventCenter).cancelByPrefix) === null || _this$elementEventCen === void 0 || _this$elementEventCen.call(_this$elementEventCen2, 'mount', {
+        msg: reason
+      });
+    }
+
     // 设置初始化超时定时器
   }, {
     key: "setInitTimeout",
@@ -660,18 +679,22 @@ var ElementController = /*#__PURE__*/function () {
                   _this5.sendReady(key, options);
                 });
               }
-              _context5.next = 24;
+              _context5.next = 26;
               break;
             case 20:
               _context5.prev = 20;
               _context5.t0 = _context5["catch"](1);
               this.handleInitializationError();
+              // Fix: when request processing enters the catch path (excluding success=false business responses),
+              // stale timeout and heartbeat events must be cleared to avoid duplicate error callbacks.
+              this.clearInitTimeout();
+              this.clearEvents('webLaunch');
               readyCallback({
                 error: _objectSpread(_objectSpread({}, ERRORMESSAGE.INITIALIZE_TIMEOUT.API), {}, {
                   traceId: _context5.t0 === null || _context5.t0 === void 0 ? void 0 : _context5.t0.traceId
                 })
               });
-            case 24:
+            case 26:
             case "end":
               return _context5.stop();
           }
@@ -828,6 +851,10 @@ var ElementController = /*#__PURE__*/function () {
   }, {
     key: "destroyHandle",
     value: function destroyHandle() {
+      // Fix: when a failed mount is destroyed and a new mount succeeds within the 16s timeout window,
+      // clear stale timeout and heartbeat events from the destroyed instance.
+      this.clearEvents('destroy');
+      this.clearInitTimeout();
       this.elementContainer.destroy();
       cleanMockup();
       removeRetentionPopup();

package/esm/core/component/element/elementProcessor/paymentProcessor.js

@@ -281,6 +281,11 @@ var PaymentProcessor = /*#__PURE__*/function (_BaseElementProcessor) {
                     }, 100);
                     return;
                   }
+                  _this3.getLogger().logInfo({
+                    title: 'sdk_action_query_start'
+                  }, {
+                    config: safeStringify(paymentSessionConfig)
+                  });
                   var sdkRequestData = {
                     paymentSessionConfig: paymentSessionConfig,
                     paymentSessionData: paymentSession,

package/esm/core/instance/index.d.ts

@@ -11,6 +11,7 @@ import type { AMSCheckoutOptions, IAppendParams, InitSecurityConfig, IoptionsPar
 import { EventCenter } from '../../util/index';
 import { Logger } from '../../util/logger';
 import { Security } from '../../util/security';
+import type { ISecurity } from '../../util/security-registry';
 export default class AMSSDK {
     options: AMSCheckoutOptions;
     originOptions: IoptionsParams;
@@ -37,13 +38,20 @@ export default class AMSSDK {
         scene?: string;
     }): void;
     /**
-     * @description Obtain security SDK through scenario identification
+     * @description Obtain security SDK through scenario identification (async-aware)
+     * Handles three states: ready, loading, not found
      */
-    _getSecuritySDKByProductScene(securityConfig: InitSecurityConfig): Security;
+    _getSecuritySDKByProductScene(securityConfig: InitSecurityConfig): ISecurity;
     /**
-     * @description New security SDK through scenario identification
+     * @description Await security SDK by product scene (async)
+     * Returns the Security instance even if currently loading
      */
-    _newSecuritySDKByScene(securityConfig: InitSecurityConfig, successCallback?: () => void, failCallback?: (errMsg?: string) => void): Security;
+    _awaitSecuritySDKByProductScene(securityConfig: InitSecurityConfig): Promise<Security | undefined>;
+    /**
+     * @description New security SDK through scenario identification (async-aware)
+     * Uses shared SecuritySdkRegistry and triggers ApdidLoader
+     */
+    _newSecuritySDKByScene(securityConfig: InitSecurityConfig, successCallback?: () => void, failCallback?: (errMsg?: string) => void): void;
     /**
      * @description Obtain risk control configuration in local storage
      */

package/esm/core/instance/index.js

@@ -28,7 +28,9 @@ import { EnvironmentEnum, modeEnum, networkModeEnum, osTypeEnum, ProductSceneEnu
 import { checkTimeElapsed, device, EventCenter, getOrSetStorageId, getType, queryParse, safeJson } from "../../util/index";
 import CallApp from "../../util/intl-callapp/es/main";
 import { LogConfig, Logger } from "../../util/logger";
-import { getSecurityConfigStorageKey, getSecurityHost, getSecurityScene, Security, SecurityRegionEnum } from "../../util/security";
+import { getSecurityConfigStorageKey, getSecurityHost, getSecurityScene, Security, SecurityRegionEnum, mapEnvironment } from "../../util/security";
+import { SecuritySdkRegistry } from "../../util/security-registry";
+import { ApdidLoader } from "../../util/jshield-apdid";
 import { compareVersion } from "../../util/versionCompare";
 import { BusManager, BusMessage } from "../bus";
 import PreloadHelper from "../../foundation/utils/preload_helper";
@@ -166,15 +168,44 @@ var AMSSDK = /*#__PURE__*/function () {
       }, {
         productScene: product
       }).send();
-      var sdk = this._getSecuritySDKByProductScene({
-        product: product || scene
-      });
-      if (sdk) {
-        console.log('[web-sdk] skip init security sdk because it is already loaded');
-        return;
+      var effectiveProduct = product || scene;
+      var storage = this.getSecurityConfigStorage(effectiveProduct);
+      var securityScene = storage.scene || getSecurityScene(effectiveProduct);
+
+      // Check shared registry for all states
+      var registryEntry = SecuritySdkRegistry.get(securityScene);
+      if (registryEntry) {
+        if (registryEntry.status === 'ready') {
+          console.log('[web-sdk] skip init security sdk because it is already loaded');
+          this.logger.logInfo({
+            title: 'sdk_event_securitySdkPreInitSuccess'
+          }, {
+            productScene: product
+          }).send();
+          return;
+        }
+        if (registryEntry.status === 'loading') {
+          console.log('[web-sdk] security sdk is already loading, waiting...');
+          registryEntry.loadingPromise.then(function () {
+            _this.logger.logInfo({
+              title: 'sdk_event_securitySdkPreInitSuccess'
+            }, {
+              productScene: product
+            }).send();
+          }).catch(function (err) {
+            _this.logger.logError({
+              title: 'sdk_error_securitySdkInitFailed',
+              msg: err === null || err === void 0 ? void 0 : err.message
+            }, {
+              productScene: product,
+              sign: 'Active initialization'
+            }).send();
+          });
+          return;
+        }
       }
       this._newSecuritySDKByScene({
-        product: product || scene,
+        product: effectiveProduct,
         region: SecurityRegionEnum.SG
       }, function () {
         _this.logger.logInfo({
@@ -193,13 +224,27 @@ var AMSSDK = /*#__PURE__*/function () {
       });
     }
     /**
-     * @description Obtain security SDK through scenario identification
+     * @description Obtain security SDK through scenario identification (async-aware)
+     * Handles three states: ready, loading, not found
      */
   }, {
     key: "_getSecuritySDKByProductScene",
     value: function _getSecuritySDKByProductScene(securityConfig) {
       var storage = this.getSecurityConfigStorage(securityConfig.product);
       var scene = storage.scene || getSecurityScene(securityConfig.product);
+
+      // First check the shared registry (handles ready/loading/failed states)
+      var registryEntry = SecuritySdkRegistry.get(scene);
+      if (registryEntry) {
+        if (registryEntry.status === 'ready') {
+          return registryEntry.instance;
+        }
+        // Loading or failed - return undefined for backward compatibility
+        // Callers should use _awaitSecuritySDKByProductScene for async access
+        return undefined;
+      }
+
+      // Fallback: check legacy map and preload helper
       var securitySdk = this.securitySdkMap.get(scene);
       if (!securitySdk) {
         securitySdk = PreloadHelper.getSecuritySdk(scene);
@@ -210,24 +255,105 @@ var AMSSDK = /*#__PURE__*/function () {
       }
       return securitySdk;
     }
+
+    /**
+     * @description Await security SDK by product scene (async)
+     * Returns the Security instance even if currently loading
+     */
+  }, {
+    key: "_awaitSecuritySDKByProductScene",
+    value: (function () {
+      var _awaitSecuritySDKByProductScene2 = _asyncToGenerator( /*#__PURE__*/_regeneratorRuntime().mark(function _callee(securityConfig) {
+        var storage, scene, instance;
+        return _regeneratorRuntime().wrap(function _callee$(_context) {
+          while (1) switch (_context.prev = _context.next) {
+            case 0:
+              storage = this.getSecurityConfigStorage(securityConfig.product);
+              scene = storage.scene || getSecurityScene(securityConfig.product);
+              _context.next = 4;
+              return SecuritySdkRegistry.getInstance(scene);
+            case 4:
+              instance = _context.sent;
+              return _context.abrupt("return", instance);
+            case 6:
+            case "end":
+              return _context.stop();
+          }
+        }, _callee, this);
+      }));
+      function _awaitSecuritySDKByProductScene(_x) {
+        return _awaitSecuritySDKByProductScene2.apply(this, arguments);
+      }
+      return _awaitSecuritySDKByProductScene;
+    }()
     /**
-     * @description New security SDK through scenario identification
+     * @description New security SDK through scenario identification (async-aware)
+     * Uses shared SecuritySdkRegistry and triggers ApdidLoader
      */
+    )
   }, {
     key: "_newSecuritySDKByScene",
     value: function _newSecuritySDKByScene(securityConfig, successCallback, failCallback) {
+      var _this$options2;
       var storage = this.getSecurityConfigStorage(securityConfig.product);
       var scene = storage.scene || getSecurityScene(securityConfig.product);
       var h5gateway = storage.h5gateway || getSecurityHost(securityConfig.region);
+
+      // Check if already exists in registry (avoid duplicates)
+      var existingEntry = SecuritySdkRegistry.get(scene);
+      if (existingEntry) {
+        if (existingEntry.status === 'ready') {
+          successCallback && successCallback();
+          return;
+        }
+        if (existingEntry.status === 'loading') {
+          // Wait for existing loading to complete
+          existingEntry.loadingPromise.then(function () {
+            successCallback && successCallback();
+          }).catch(function (err) {
+            failCallback && failCallback(err === null || err === void 0 ? void 0 : err.message);
+          });
+          return;
+        }
+        // failed status - allow retry by proceeding below
+      }
+
+      // 非阻塞调度 ApdidLoader 加载，不阻塞 SDK 初始化
+      // Security 内部的 ensureApdidLoaded() 会在需要 token 时按需等待加载完成
+      var apdidEnv = mapEnvironment((_this$options2 = this.options) === null || _this$options2 === void 0 || (_this$options2 = _this$options2.env) === null || _this$options2 === void 0 ? void 0 : _this$options2.environment);
+      var loader = ApdidLoader.getInstance();
+      loader.scheduleLoad({
+        environment: apdidEnv
+      });
       try {
+        var _this$options3;
+        var environment = (_this$options3 = this.options) === null || _this$options3 === void 0 || (_this$options3 = _this$options3.env) === null || _this$options3 === void 0 ? void 0 : _this$options3.environment;
         var securitySdk = new Security({
           scene: scene,
-          h5gateway: h5gateway
+          h5gateway: h5gateway,
+          environment: environment
+        });
+
+        // Create loading promise and register in registry
+        var loadingPromise = new Promise(function (resolveLoading, rejectLoading) {
+          securitySdk.initSecurity(function () {
+            SecuritySdkRegistry.setReady(scene, securitySdk);
+            successCallback && successCallback();
+            resolveLoading(securitySdk);
+          }, function (msg) {
+            SecuritySdkRegistry.setFailed(scene, new Error(msg || 'Security init failed'));
+            failCallback && failCallback(msg);
+            rejectLoading(new Error(msg || 'Security init failed'));
+          });
         });
+
+        // Register as loading in the shared registry
+        SecuritySdkRegistry.setLoading(scene, loadingPromise);
+
+        // Also keep reference in the legacy map for backward compatibility
         this.securitySdkMap.set(scene, securitySdk);
-        securitySdk.initSecurity(successCallback, failCallback);
-        return securitySdk;
       } catch (error) {
+        SecuritySdkRegistry.setFailed(scene, new Error(error === null || error === void 0 ? void 0 : error.toString()));
         failCallback && failCallback(error === null || error === void 0 ? void 0 : error.toString());
       }
     }
@@ -333,17 +459,17 @@ var AMSSDK = /*#__PURE__*/function () {
       if (options !== null && options !== void 0 && options.onBeforeSubmit) {
         if (typeof (options === null || options === void 0 ? void 0 : options.onBeforeSubmit) !== 'function') throw new Error(ERRORMESSAGE.INIT_PARAMETER_ERROR.EVENT_ERROR.message);
         this._overrideSubscription(EVENT.beforeSubmit.name, /*#__PURE__*/function () {
-          var _ref2 = _asyncToGenerator( /*#__PURE__*/_regeneratorRuntime().mark(function _callee(payload) {
+          var _ref2 = _asyncToGenerator( /*#__PURE__*/_regeneratorRuntime().mark(function _callee2(payload) {
             var eventCallbackId, res;
-            return _regeneratorRuntime().wrap(function _callee$(_context) {
-              while (1) switch (_context.prev = _context.next) {
+            return _regeneratorRuntime().wrap(function _callee2$(_context2) {
+              while (1) switch (_context2.prev = _context2.next) {
                 case 0:
                   eventCallbackId = uuid();
-                  _context.prev = 1;
-                  _context.next = 4;
+                  _context2.prev = 1;
+                  _context2.next = 4;
                   return options.onBeforeSubmit(payload);
                 case 4:
-                  res = _context.sent;
+                  res = _context2.sent;
                   _this2._componentApp.dispatchToApp({
                     context: {
                       event: EVENT.beforeSubmitDone.name,
@@ -351,11 +477,11 @@ var AMSSDK = /*#__PURE__*/function () {
                       data: res
                     }
                   });
-                  _context.next = 12;
+                  _context2.next = 12;
                   break;
                 case 8:
-                  _context.prev = 8;
-                  _context.t0 = _context["catch"](1);
+                  _context2.prev = 8;
+                  _context2.t0 = _context2["catch"](1);
                   _this2._componentApp.dispatchToApp({
                     context: {
                       event: EVENT.beforeSubmitDone.name,
@@ -367,15 +493,15 @@ var AMSSDK = /*#__PURE__*/function () {
                   });
                   _this2.logger.logError({
                     title: 'sdk_error_before_submit',
-                    msg: JSON.stringify(_context.t0)
+                    msg: JSON.stringify(_context2.t0)
                   }).send();
                 case 12:
                 case "end":
-                  return _context.stop();
+                  return _context2.stop();
               }
-            }, _callee, null, [[1, 8]]);
+            }, _callee2, null, [[1, 8]]);
           }));
-          return function (_x) {
+          return function (_x2) {
             return _ref2.apply(this, arguments);
           };
         }(), EVENT.beforeSubmit.uniqueKey);

package/esm/foundation/service/security/index.d.ts

@@ -1,10 +1,9 @@
 import { DeviceIdParameter, IoptionsParams } from '../../../types';
 import { PaymentContext, SDKMetaData, Service } from '../../index';
-import { Security } from './security';
 export declare class SecurityService implements Service {
     private logger;
     private productScene;
-    static securitySdkMap: Map<string, Security>;
+    private environment?;
     init(initOptions: IoptionsParams, instanceId: string, sdkMetaData: SDKMetaData): void;
     update(paymentContext: PaymentContext): void;
     destroy(): void;
@@ -14,11 +13,17 @@ export declare class SecurityService implements Service {
     private _initSecurity;
     private logDeviceId;
     /**
-     * @description Obtain security SDK through scenario identification
+     * Get the scene string from product enum
+     */
+    private _getSceneByProduct;
+    /**
+     * @description Obtain security SDK through scenario identification (async-aware)
+     * Handles three states: ready, loading, not found
      */
     private _getSecuritySDKByProductScene;
     /**
-     * @description New security SDK through scenario identification
+     * @description New security SDK through scenario identification (async)
+     * Uses shared SecuritySdkRegistry to avoid duplicate initialization
      */
     private _newSecuritySDKByScene;
     /**