@alipay/ams-checkout 0.0.1783663570-dev.0 → 0.0.1783663570-dev.2

package/esm/plugin/component/index.js

@@ -156,24 +156,28 @@ var ComponentApp = /*#__PURE__*/function () {
       var securitySDK = this.AMSSDK._getSecuritySDKByProductScene({
         product: product
       });
-      if (!securitySDK) {
-        this.AMSSDK.logger.logInfo({
-          title: 'sdk_event_securitySdkInit'
+      if (securitySDK) {
+        // Already ready
+        return;
+      }
+
+      // Use _newSecuritySDKByScene which handles loading/ready/failed states internally
+      this.AMSSDK.logger.logInfo({
+        title: 'sdk_event_securitySdkInit'
+      });
+      this.AMSSDK._newSecuritySDKByScene({
+        product: product
+      }, function () {
+        _this.AMSSDK.logger.logInfo({
+          title: 'sdk_event_securitySdkInitSuccess'
         });
-        this.AMSSDK._newSecuritySDKByScene({
-          product: product
-        }, function () {
-          _this.AMSSDK.logger.logInfo({
-            title: 'sdk_event_securitySdkInitSuccess'
-          });
-        }, function () {
-          _this.AMSSDK.logger.logError({
-            title: 'sdk_error_securitySdkInitFailed'
-          }, {
-            sign: 'SDK internal initialization'
-          });
+      }, function () {
+        _this.AMSSDK.logger.logError({
+          title: 'sdk_error_securitySdkInitFailed'
+        }, {
+          sign: 'SDK internal initialization'
         });
-      }
+      });
     }
   }, {
     key: "logDeviceId",
@@ -208,36 +212,39 @@ var ComponentApp = /*#__PURE__*/function () {
             while (1) switch (_context.prev = _context.next) {
               case 0:
                 productScene = (_this2$_renderParams = _this2._renderParams) === null || _this2$_renderParams === void 0 || (_this2$_renderParams = _this2$_renderParams.paymentSessionMetaData) === null || _this2$_renderParams === void 0 || (_this2$_renderParams = _this2$_renderParams.paymentSessionConfig) === null || _this2$_renderParams === void 0 ? void 0 : _this2$_renderParams.productScene;
-                getDeviceIdStartTime = Date.now();
-                securitySDK = _this2.AMSSDK._getSecuritySDKByProductScene({
+                getDeviceIdStartTime = Date.now(); // Use async version to handle loading state
+                _context.next = 4;
+                return _this2.AMSSDK._awaitSecuritySDKByProductScene({
                   product: (deviceIdParameter === null || deviceIdParameter === void 0 ? void 0 : deviceIdParameter.productScene) || productScene
                 });
+              case 4:
+                securitySDK = _context.sent;
                 deviceId = '';
                 if (!securitySDK) {
-                  _context.next = 16;
+                  _context.next = 18;
                   break;
                 }
                 if (!(isPolling && parseInt(deviceIdParameter === null || deviceIdParameter === void 0 ? void 0 : deviceIdParameter.tokenCollectTime) > 0)) {
-                  _context.next = 11;
+                  _context.next = 13;
                   break;
                 }
-                _context.next = 8;
+                _context.next = 10;
                 return securitySDK.pollingGetApdidToken(deviceIdParameter);
-              case 8:
+              case 10:
                 _context.t0 = _context.sent;
-                _context.next = 14;
+                _context.next = 16;
                 break;
-              case 11:
-                _context.next = 13;
-                return securitySDK.getApdidToken();
               case 13:
+                _context.next = 15;
+                return securitySDK.getApdidToken();
+              case 15:
                 _context.t0 = _context.sent;
-              case 14:
+              case 16:
                 deviceId = _context.t0;
                 _this2.logDeviceId(deviceId, getDeviceIdStartTime);
-              case 16:
+              case 18:
                 resolve(deviceId);
-              case 17:
+              case 19:
               case "end":
                 return _context.stop();
             }

package/esm/util/jshield-apdid/apdid-loader.js

@@ -0,0 +1,340 @@
+function _typeof(o) { "@babel/helpers - typeof"; return _typeof = "function" == typeof Symbol && "symbol" == typeof Symbol.iterator ? function (o) { return typeof o; } : function (o) { return o && "function" == typeof Symbol && o.constructor === Symbol && o !== Symbol.prototype ? "symbol" : typeof o; }, _typeof(o); }
+function _regeneratorRuntime() { "use strict"; /*! regenerator-runtime -- Copyright (c) 2014-present, Facebook, Inc. -- license (MIT): https://github.com/facebook/regenerator/blob/main/LICENSE */ _regeneratorRuntime = function _regeneratorRuntime() { return e; }; var t, e = {}, r = Object.prototype, n = r.hasOwnProperty, o = Object.defineProperty || function (t, e, r) { t[e] = r.value; }, i = "function" == typeof Symbol ? Symbol : {}, a = i.iterator || "@@iterator", c = i.asyncIterator || "@@asyncIterator", u = i.toStringTag || "@@toStringTag"; function define(t, e, r) { return Object.defineProperty(t, e, { value: r, enumerable: !0, configurable: !0, writable: !0 }), t[e]; } try { define({}, ""); } catch (t) { define = function define(t, e, r) { return t[e] = r; }; } function wrap(t, e, r, n) { var i = e && e.prototype instanceof Generator ? e : Generator, a = Object.create(i.prototype), c = new Context(n || []); return o(a, "_invoke", { value: makeInvokeMethod(t, r, c) }), a; } function tryCatch(t, e, r) { try { return { type: "normal", arg: t.call(e, r) }; } catch (t) { return { type: "throw", arg: t }; } } e.wrap = wrap; var h = "suspendedStart", l = "suspendedYield", f = "executing", s = "completed", y = {}; function Generator() {} function GeneratorFunction() {} function GeneratorFunctionPrototype() {} var p = {}; define(p, a, function () { return this; }); var d = Object.getPrototypeOf, v = d && d(d(values([]))); v && v !== r && n.call(v, a) && (p = v); var g = GeneratorFunctionPrototype.prototype = Generator.prototype = Object.create(p); function defineIteratorMethods(t) { ["next", "throw", "return"].forEach(function (e) { define(t, e, function (t) { return this._invoke(e, t); }); }); } function AsyncIterator(t, e) { function invoke(r, o, i, a) { var c = tryCatch(t[r], t, o); if ("throw" !== c.type) { var u = c.arg, h = u.value; return h && "object" == _typeof(h) && n.call(h, "__await") ? e.resolve(h.__await).then(function (t) { invoke("next", t, i, a); }, function (t) { invoke("throw", t, i, a); }) : e.resolve(h).then(function (t) { u.value = t, i(u); }, function (t) { return invoke("throw", t, i, a); }); } a(c.arg); } var r; o(this, "_invoke", { value: function value(t, n) { function callInvokeWithMethodAndArg() { return new e(function (e, r) { invoke(t, n, e, r); }); } return r = r ? r.then(callInvokeWithMethodAndArg, callInvokeWithMethodAndArg) : callInvokeWithMethodAndArg(); } }); } function makeInvokeMethod(e, r, n) { var o = h; return function (i, a) { if (o === f) throw new Error("Generator is already running"); if (o === s) { if ("throw" === i) throw a; return { value: t, done: !0 }; } for (n.method = i, n.arg = a;;) { var c = n.delegate; if (c) { var u = maybeInvokeDelegate(c, n); if (u) { if (u === y) continue; return u; } } if ("next" === n.method) n.sent = n._sent = n.arg;else if ("throw" === n.method) { if (o === h) throw o = s, n.arg; n.dispatchException(n.arg); } else "return" === n.method && n.abrupt("return", n.arg); o = f; var p = tryCatch(e, r, n); if ("normal" === p.type) { if (o = n.done ? s : l, p.arg === y) continue; return { value: p.arg, done: n.done }; } "throw" === p.type && (o = s, n.method = "throw", n.arg = p.arg); } }; } function maybeInvokeDelegate(e, r) { var n = r.method, o = e.iterator[n]; if (o === t) return r.delegate = null, "throw" === n && e.iterator.return && (r.method = "return", r.arg = t, maybeInvokeDelegate(e, r), "throw" === r.method) || "return" !== n && (r.method = "throw", r.arg = new TypeError("The iterator does not provide a '" + n + "' method")), y; var i = tryCatch(o, e.iterator, r.arg); if ("throw" === i.type) return r.method = "throw", r.arg = i.arg, r.delegate = null, y; var a = i.arg; return a ? a.done ? (r[e.resultName] = a.value, r.next = e.nextLoc, "return" !== r.method && (r.method = "next", r.arg = t), r.delegate = null, y) : a : (r.method = "throw", r.arg = new TypeError("iterator result is not an object"), r.delegate = null, y); } function pushTryEntry(t) { var e = { tryLoc: t[0] }; 1 in t && (e.catchLoc = t[1]), 2 in t && (e.finallyLoc = t[2], e.afterLoc = t[3]), this.tryEntries.push(e); } function resetTryEntry(t) { var e = t.completion || {}; e.type = "normal", delete e.arg, t.completion = e; } function Context(t) { this.tryEntries = [{ tryLoc: "root" }], t.forEach(pushTryEntry, this), this.reset(!0); } function values(e) { if (e || "" === e) { var r = e[a]; if (r) return r.call(e); if ("function" == typeof e.next) return e; if (!isNaN(e.length)) { var o = -1, i = function next() { for (; ++o < e.length;) if (n.call(e, o)) return next.value = e[o], next.done = !1, next; return next.value = t, next.done = !0, next; }; return i.next = i; } } throw new TypeError(_typeof(e) + " is not iterable"); } return GeneratorFunction.prototype = GeneratorFunctionPrototype, o(g, "constructor", { value: GeneratorFunctionPrototype, configurable: !0 }), o(GeneratorFunctionPrototype, "constructor", { value: GeneratorFunction, configurable: !0 }), GeneratorFunction.displayName = define(GeneratorFunctionPrototype, u, "GeneratorFunction"), e.isGeneratorFunction = function (t) { var e = "function" == typeof t && t.constructor; return !!e && (e === GeneratorFunction || "GeneratorFunction" === (e.displayName || e.name)); }, e.mark = function (t) { return Object.setPrototypeOf ? Object.setPrototypeOf(t, GeneratorFunctionPrototype) : (t.__proto__ = GeneratorFunctionPrototype, define(t, u, "GeneratorFunction")), t.prototype = Object.create(g), t; }, e.awrap = function (t) { return { __await: t }; }, defineIteratorMethods(AsyncIterator.prototype), define(AsyncIterator.prototype, c, function () { return this; }), e.AsyncIterator = AsyncIterator, e.async = function (t, r, n, o, i) { void 0 === i && (i = Promise); var a = new AsyncIterator(wrap(t, r, n, o), i); return e.isGeneratorFunction(r) ? a : a.next().then(function (t) { return t.done ? t.value : a.next(); }); }, defineIteratorMethods(g), define(g, u, "Generator"), define(g, a, function () { return this; }), define(g, "toString", function () { return "[object Generator]"; }), e.keys = function (t) { var e = Object(t), r = []; for (var n in e) r.push(n); return r.reverse(), function next() { for (; r.length;) { var t = r.pop(); if (t in e) return next.value = t, next.done = !1, next; } return next.done = !0, next; }; }, e.values = values, Context.prototype = { constructor: Context, reset: function reset(e) { if (this.prev = 0, this.next = 0, this.sent = this._sent = t, this.done = !1, this.delegate = null, this.method = "next", this.arg = t, this.tryEntries.forEach(resetTryEntry), !e) for (var r in this) "t" === r.charAt(0) && n.call(this, r) && !isNaN(+r.slice(1)) && (this[r] = t); }, stop: function stop() { this.done = !0; var t = this.tryEntries[0].completion; if ("throw" === t.type) throw t.arg; return this.rval; }, dispatchException: function dispatchException(e) { if (this.done) throw e; var r = this; function handle(n, o) { return a.type = "throw", a.arg = e, r.next = n, o && (r.method = "next", r.arg = t), !!o; } for (var o = this.tryEntries.length - 1; o >= 0; --o) { var i = this.tryEntries[o], a = i.completion; if ("root" === i.tryLoc) return handle("end"); if (i.tryLoc <= this.prev) { var c = n.call(i, "catchLoc"), u = n.call(i, "finallyLoc"); if (c && u) { if (this.prev < i.catchLoc) return handle(i.catchLoc, !0); if (this.prev < i.finallyLoc) return handle(i.finallyLoc); } else if (c) { if (this.prev < i.catchLoc) return handle(i.catchLoc, !0); } else { if (!u) throw new Error("try statement without catch or finally"); if (this.prev < i.finallyLoc) return handle(i.finallyLoc); } } } }, abrupt: function abrupt(t, e) { for (var r = this.tryEntries.length - 1; r >= 0; --r) { var o = this.tryEntries[r]; if (o.tryLoc <= this.prev && n.call(o, "finallyLoc") && this.prev < o.finallyLoc) { var i = o; break; } } i && ("break" === t || "continue" === t) && i.tryLoc <= e && e <= i.finallyLoc && (i = null); var a = i ? i.completion : {}; return a.type = t, a.arg = e, i ? (this.method = "next", this.next = i.finallyLoc, y) : this.complete(a); }, complete: function complete(t, e) { if ("throw" === t.type) throw t.arg; return "break" === t.type || "continue" === t.type ? this.next = t.arg : "return" === t.type ? (this.rval = this.arg = t.arg, this.method = "return", this.next = "end") : "normal" === t.type && e && (this.next = e), y; }, finish: function finish(t) { for (var e = this.tryEntries.length - 1; e >= 0; --e) { var r = this.tryEntries[e]; if (r.finallyLoc === t) return this.complete(r.completion, r.afterLoc), resetTryEntry(r), y; } }, catch: function _catch(t) { for (var e = this.tryEntries.length - 1; e >= 0; --e) { var r = this.tryEntries[e]; if (r.tryLoc === t) { var n = r.completion; if ("throw" === n.type) { var o = n.arg; resetTryEntry(r); } return o; } } throw new Error("illegal catch attempt"); }, delegateYield: function delegateYield(e, r, n) { return this.delegate = { iterator: values(e), resultName: r, nextLoc: n }, "next" === this.method && (this.arg = t), y; } }, e; }
+function asyncGeneratorStep(gen, resolve, reject, _next, _throw, key, arg) { try { var info = gen[key](arg); var value = info.value; } catch (error) { reject(error); return; } if (info.done) { resolve(value); } else { Promise.resolve(value).then(_next, _throw); } }
+function _asyncToGenerator(fn) { return function () { var self = this, args = arguments; return new Promise(function (resolve, reject) { var gen = fn.apply(self, args); function _next(value) { asyncGeneratorStep(gen, resolve, reject, _next, _throw, "next", value); } function _throw(err) { asyncGeneratorStep(gen, resolve, reject, _next, _throw, "throw", err); } _next(undefined); }); }; }
+function _classCallCheck(instance, Constructor) { if (!(instance instanceof Constructor)) { throw new TypeError("Cannot call a class as a function"); } }
+function _defineProperties(target, props) { for (var i = 0; i < props.length; i++) { var descriptor = props[i]; descriptor.enumerable = descriptor.enumerable || false; descriptor.configurable = true; if ("value" in descriptor) descriptor.writable = true; Object.defineProperty(target, _toPropertyKey(descriptor.key), descriptor); } }
+function _createClass(Constructor, protoProps, staticProps) { if (protoProps) _defineProperties(Constructor.prototype, protoProps); if (staticProps) _defineProperties(Constructor, staticProps); Object.defineProperty(Constructor, "prototype", { writable: false }); return Constructor; }
+function _defineProperty(obj, key, value) { key = _toPropertyKey(key); if (key in obj) { Object.defineProperty(obj, key, { value: value, enumerable: true, configurable: true, writable: true }); } else { obj[key] = value; } return obj; }
+function _toPropertyKey(t) { var i = _toPrimitive(t, "string"); return "symbol" == _typeof(i) ? i : String(i); }
+function _toPrimitive(t, r) { if ("object" != _typeof(t) || !t) return t; var e = t[Symbol.toPrimitive]; if (void 0 !== e) { var i = e.call(t, r || "default"); if ("object" != _typeof(i)) return i; throw new TypeError("@@toPrimitive must return a primitive value."); } return ("string" === r ? String : Number)(t); }
+/**
+ * ApdidLoader - Async loader for apdid-core security SDK (ESM)
+ *
+ * Features:
+ * - Singleton pattern (ApdidLoader.getInstance())
+ * - URL whitelist validation (production/pre/dev)
+ * - Timeout control (10s)
+ * - Retry mechanism (max 1 retry, transparent to caller)
+ * - Concurrent call dedup (shared loadingPromise)
+ * - State management: idle -> loading -> ready/failed
+ * - Monitoring event hooks (onLoad callback)
+ * - Uses dynamic import() for ESM modules
+ */
+
+/** Environment type for CDN URL selection */
+
+/** State of the ApdidLoader */
+
+/** Callback for monitoring events */
+
+/** Configuration for ApdidLoader */
+
+/** CDN config for different environments */
+var APDID_CONFIG = {
+  production: {
+    url: 'https://cdn.marmot-cloud.com/page/antom-js/apdid-core.umd.min.js'
+  },
+  pre: {
+    url: 'https://antom-js-pre-unio.page.alipay.net/apdid-core.umd.min.js'
+  },
+  dev: {
+    url: 'https://antom-js-dev-unio.page.alipay.net/apdid-core.umd.min.js'
+  }
+};
+
+/** All allowed URLs (whitelist) */
+var ALLOWED_URLS = new Set(Object.values(APDID_CONFIG).map(function (c) {
+  return c.url;
+}));
+
+/** Timeout for script loading in milliseconds */
+var LOAD_TIMEOUT_MS = 10000;
+
+/** Maximum number of retries */
+var MAX_RETRIES = 1;
+
+/** Global variable name (fallback for UMD bundles) */
+var APDID_GLOBAL_NAME = 'APDID';
+
+/**
+ * ApdidLoader - Singleton class responsible for async loading the apdid-core ESM module.
+ *
+ * Key behaviors:
+ * - Uses dynamic import() to load ESM modules
+ * - Concurrent calls share the same loading promise
+ * - On success, the module export is stored internally
+ * - On failure/timeout, the loader degrades gracefully and getApdidModule() returns undefined
+ */
+export var ApdidLoader = /*#__PURE__*/function () {
+  function ApdidLoader() {
+    _classCallCheck(this, ApdidLoader);
+    _defineProperty(this, "state", 'idle');
+    _defineProperty(this, "loadingPromise", null);
+    _defineProperty(this, "apdidModule", null);
+    _defineProperty(this, "retryCount", 0);
+    _defineProperty(this, "config", null);
+  }
+
+  /** Get the singleton instance */
+  _createClass(ApdidLoader, [{
+    key: "getState",
+    value: /** Get current state */
+    function getState() {
+      return this.state;
+    }
+
+    /** Get the loaded APDID module (undefined if not loaded or failed) */
+  }, {
+    key: "getApdidModule",
+    value: function getApdidModule() {
+      return this.apdidModule;
+    }
+
+    /**
+     * 非阻塞调度 apdid 加载
+     * 利用 requestIdleCallback 在浏览器空闲时发起加载，2s 超时兜底
+     * 调用方无需 await，不阻塞主流程
+     */
+  }, {
+    key: "scheduleLoad",
+    value: function scheduleLoad(config) {
+      var _this = this;
+      if (this.state !== 'idle') return;
+      var trigger = function trigger() {
+        _this.load(config).catch(function () {
+          // 加载失败由 ApdidLoader 内部处理重试和状态更新
+        });
+      };
+      if (typeof requestIdleCallback !== 'undefined') {
+        var idleId = requestIdleCallback(trigger, {
+          timeout: 2000
+        });
+        // 兜底：2s 后若仍未触发，强制发起
+        setTimeout(function () {
+          cancelIdleCallback(idleId);
+          if (_this.state === 'idle') {
+            trigger();
+          }
+        }, 2000);
+      } else {
+        // 不支持 requestIdleCallback 的浏览器降级为 setTimeout(0)
+        setTimeout(trigger, 0);
+      }
+    }
+
+    /**
+     * Load the apdid-core script asynchronously.
+     * If already loaded or currently loading, returns the existing promise.
+     * Retries are transparent: the returned promise resolves only after the final
+     * attempt succeeds, or rejects after all retries are exhausted.
+     */
+  }, {
+    key: "load",
+    value: (function () {
+      var _load = _asyncToGenerator( /*#__PURE__*/_regeneratorRuntime().mark(function _callee(config) {
+        var envConfig, _config$callbacks, _config$callbacks$onL, _error, url, _config$callbacks2, _config$callbacks2$on, _error2;
+        return _regeneratorRuntime().wrap(function _callee$(_context) {
+          while (1) switch (_context.prev = _context.next) {
+            case 0:
+              if (!(this.state === 'ready')) {
+                _context.next = 2;
+                break;
+              }
+              return _context.abrupt("return", Promise.resolve());
+            case 2:
+              if (!(this.state === 'loading' && this.loadingPromise)) {
+                _context.next = 4;
+                break;
+              }
+              return _context.abrupt("return", this.loadingPromise);
+            case 4:
+              // Store config for potential retry
+              this.config = config;
+
+              // Validate environment and get config
+              envConfig = APDID_CONFIG[config.environment];
+              if (envConfig) {
+                _context.next = 11;
+                break;
+              }
+              _error = new Error("[ApdidLoader] Invalid environment: ".concat(config.environment, ". Must be one of: production, pre, dev"));
+              this.state = 'failed';
+              (_config$callbacks = config.callbacks) === null || _config$callbacks === void 0 || (_config$callbacks$onL = _config$callbacks.onLoadFailed) === null || _config$callbacks$onL === void 0 || _config$callbacks$onL.call(_config$callbacks, _error);
+              return _context.abrupt("return", Promise.reject(_error));
+            case 11:
+              url = envConfig.url; // Validate URL against whitelist
+              if (ALLOWED_URLS.has(url)) {
+                _context.next = 17;
+                break;
+              }
+              _error2 = new Error("[ApdidLoader] URL not in whitelist: ".concat(url));
+              this.state = 'failed';
+              (_config$callbacks2 = config.callbacks) === null || _config$callbacks2 === void 0 || (_config$callbacks2$on = _config$callbacks2.onLoadFailed) === null || _config$callbacks2$on === void 0 || _config$callbacks2$on.call(_config$callbacks2, _error2);
+              return _context.abrupt("return", Promise.reject(_error2));
+            case 17:
+              if (!(this.state === 'failed' && this.retryCount > MAX_RETRIES)) {
+                _context.next = 19;
+                break;
+              }
+              return _context.abrupt("return", Promise.reject(new Error('[ApdidLoader] Max retries exceeded')));
+            case 19:
+              // Start loading - use _loadWithRetry which handles retries transparently
+              this.state = 'loading';
+              this.loadingPromise = this._loadWithRetry(url, config);
+              return _context.abrupt("return", this.loadingPromise);
+            case 22:
+            case "end":
+              return _context.stop();
+          }
+        }, _callee, this);
+      }));
+      function load(_x) {
+        return _load.apply(this, arguments);
+      }
+      return load;
+    }()
+    /**
+     * Load module with transparent retry logic.
+     * The returned promise resolves/rejects based on the final retry outcome.
+     */
+    )
+  }, {
+    key: "_loadWithRetry",
+    value: (function () {
+      var _loadWithRetry2 = _asyncToGenerator( /*#__PURE__*/_regeneratorRuntime().mark(function _callee2(url, config) {
+        var _config$callbacks3, _config$callbacks3$on;
+        var lastError, attempt;
+        return _regeneratorRuntime().wrap(function _callee2$(_context2) {
+          while (1) switch (_context2.prev = _context2.next) {
+            case 0:
+              attempt = 0;
+            case 1:
+              if (!(attempt <= MAX_RETRIES)) {
+                _context2.next = 16;
+                break;
+              }
+              _context2.prev = 2;
+              _context2.next = 5;
+              return this._loadModuleOnce(url, config);
+            case 5:
+              // Success - reset retry count
+              this.retryCount = 0;
+              return _context2.abrupt("return");
+            case 9:
+              _context2.prev = 9;
+              _context2.t0 = _context2["catch"](2);
+              lastError = _context2.t0;
+              if (attempt < MAX_RETRIES) {
+                this.retryCount++;
+                // Reset state for retry
+                this.state = 'idle';
+              }
+            case 13:
+              attempt++;
+              _context2.next = 1;
+              break;
+            case 16:
+              // All attempts failed
+              this.state = 'failed';
+              this.loadingPromise = null;
+              (_config$callbacks3 = config.callbacks) === null || _config$callbacks3 === void 0 || (_config$callbacks3$on = _config$callbacks3.onLoadFailed) === null || _config$callbacks3$on === void 0 || _config$callbacks3$on.call(_config$callbacks3, lastError);
+              throw lastError;
+            case 20:
+            case "end":
+              return _context2.stop();
+          }
+        }, _callee2, this, [[2, 9]]);
+      }));
+      function _loadWithRetry(_x2, _x3) {
+        return _loadWithRetry2.apply(this, arguments);
+      }
+      return _loadWithRetry;
+    }()
+    /**
+     * Internal method: attempt to load the ESM module once via dynamic import() (no retry)
+     */
+    )
+  }, {
+    key: "_loadModuleOnce",
+    value: function _loadModuleOnce(url, config) {
+      var _this2 = this;
+      var startTime = Date.now();
+      var timeoutId;
+
+      // Race dynamic import() against timeout
+      var importPromise = import( /* webpackIgnore: true */url).then(function (module) {
+        clearTimeout(timeoutId);
+        // ESM default export or namespace
+        var apdidCore = module.default || module;
+        if (apdidCore) {
+          _this2._onLoadSuccess(apdidCore, startTime, config);
+        } else {
+          // Fallback: check window.APDID (UMD bundle loaded separately)
+          var globalApdid = window[APDID_GLOBAL_NAME];
+          if (globalApdid) {
+            _this2._onLoadSuccess(globalApdid, startTime, config);
+          } else {
+            throw new Error("[ApdidLoader] Module loaded but no export and window.".concat(APDID_GLOBAL_NAME, " not found"));
+          }
+        }
+      });
+      var timeoutPromise = new Promise(function (_resolve, reject) {
+        timeoutId = setTimeout(function () {
+          if (_this2.state === 'loading') {
+            var _config$callbacks4, _config$callbacks4$on;
+            (_config$callbacks4 = config.callbacks) === null || _config$callbacks4 === void 0 || (_config$callbacks4$on = _config$callbacks4.onLoadTimeout) === null || _config$callbacks4$on === void 0 || _config$callbacks4$on.call(_config$callbacks4);
+            reject(new Error("[ApdidLoader] Module load timeout after ".concat(LOAD_TIMEOUT_MS, "ms: ").concat(url)));
+          }
+        }, LOAD_TIMEOUT_MS);
+      });
+      return Promise.race([importPromise, timeoutPromise]);
+    }
+
+    /**
+     * Handle successful module load
+     */
+  }, {
+    key: "_onLoadSuccess",
+    value: function _onLoadSuccess(apdidCore, startTime, config) {
+      var _config$callbacks5, _config$callbacks5$on;
+      this.state = 'ready';
+      this.apdidModule = apdidCore;
+      var duration = Date.now() - startTime;
+      (_config$callbacks5 = config.callbacks) === null || _config$callbacks5 === void 0 || (_config$callbacks5$on = _config$callbacks5.onLoad) === null || _config$callbacks5$on === void 0 || _config$callbacks5$on.call(_config$callbacks5, duration);
+    }
+
+    /**
+     * Destroy the loader state and clean up
+     */
+  }, {
+    key: "destroy",
+    value: function destroy() {
+      this.state = 'idle';
+      this.apdidModule = null;
+      this.loadingPromise = null;
+      this.retryCount = 0;
+      this.config = null;
+    }
+  }], [{
+    key: "getInstance",
+    value: function getInstance() {
+      if (!ApdidLoader.instance) {
+        ApdidLoader.instance = new ApdidLoader();
+      }
+      return ApdidLoader.instance;
+    }
+
+    /** Reset the singleton (for testing purposes only) */
+  }, {
+    key: "resetInstance",
+    value: function resetInstance() {
+      if (ApdidLoader.instance) {
+        ApdidLoader.instance.destroy();
+      }
+      ApdidLoader.instance = null;
+    }
+  }]);
+  return ApdidLoader;
+}();
+_defineProperty(ApdidLoader, "instance", null);

package/esm/util/jshield-apdid/index.js

@@ -0,0 +1,21 @@
+/**
+ * jshield-apdid module - Async loading wrapper for apdid-core security SDK
+ *
+ * This module exports:
+ * - ApdidLoader: Singleton async script loader
+ * - Type definitions for configuration and callbacks
+ *
+ * Usage:
+ * ```typescript
+ * import { ApdidLoader } from './jshield-apdid';
+ *
+ * const loader = ApdidLoader.getInstance();
+ * await loader.load({ environment: 'production' });
+ * const APDID = loader.getApdidModule();
+ * if (APDID) {
+ *   APDID.initToken(scene, options, callback);
+ * }
+ * ```
+ */
+
+export { ApdidLoader } from "./apdid-loader";

package/esm/util/security-registry.d.ts

@@ -0,0 +1,72 @@
+/**
+ * SecuritySdkRegistry - Shared registry for Security SDK instances
+ *
+ * Unifies the securitySdkMap management across SecurityService, PreloadHelper, and AMSSDK.
+ * Supports three states: loading, ready, failed to handle async script loading.
+ *
+ * Key behaviors:
+ * - scene-based key (same as the original securitySdkMap key)
+ * - 'loading' state holds a shared loadingPromise so concurrent callers can await the same promise
+ * - 'ready' state holds the Security instance
+ * - 'failed' state holds the error
+ *
+ * Uses a generic interface to avoid tight coupling to a specific Security class
+ * (there are two Security class implementations in the codebase).
+ */
+/**
+ * Minimal interface for Security SDK instances stored in the registry.
+ * Both Security class implementations (util/security and foundation/service/security/security) satisfy this.
+ */
+export interface ISecurity {
+    getApdidToken(): Promise<string>;
+    pollingGetApdidToken(config?: any): Promise<string>;
+    initSecurity(successCallback: any, failCallback: any): void;
+}
+/**
+ * Security SDK entry states:
+ * - loading: Security instance is being created and initialized (holds shared promise)
+ * - ready: Security instance is available
+ * - failed: Security initialization failed (holds error)
+ */
+export type SecuritySdkEntry = {
+    status: 'loading';
+    loadingPromise: Promise<ISecurity>;
+} | {
+    status: 'ready';
+    instance: ISecurity;
+} | {
+    status: 'failed';
+    error: Error;
+};
+/**
+ * SecuritySdkRegistry - Singleton registry for Security SDK instances
+ */
+declare class SecuritySdkRegistryClass {
+    private registry;
+    /** Get the registry entry for a scene */
+    get(scene: string): SecuritySdkEntry | undefined;
+    /** Set a loading entry with its promise */
+    setLoading(scene: string, loadingPromise: Promise<ISecurity>): void;
+    /** Set a ready entry with the Security instance */
+    setReady(scene: string, instance: ISecurity): void;
+    /** Set a failed entry with the error */
+    setFailed(scene: string, error: Error): void;
+    /** Get a ready Security instance, or undefined if not ready */
+    getReadyInstance(scene: string): ISecurity | undefined;
+    /**
+     * Get a Security instance, awaiting if currently loading.
+     * Returns undefined if not found, failed, or loading fails.
+     */
+    getInstance(scene: string): Promise<ISecurity | undefined>;
+    /** Check if a scene has a ready instance */
+    isReady(scene: string): boolean;
+    /** Check if a scene is currently loading */
+    isLoading(scene: string): boolean;
+    /** Delete a scene entry */
+    delete(scene: string): boolean;
+    /** Clear all entries */
+    clear(): void;
+}
+/** Singleton instance of SecuritySdkRegistry */
+export declare const SecuritySdkRegistry: SecuritySdkRegistryClass;
+export {};