@alipay/ams-checkout 0.0.1783663570-dev.1 → 0.0.1783663570-dev.2

package/esm/foundation/service/security/security.js

@@ -9,7 +9,7 @@ function _defineProperty(obj, key, value) { key = _toPropertyKey(key); if (key i
 function _toPropertyKey(t) { var i = _toPrimitive(t, "string"); return "symbol" == _typeof(i) ? i : String(i); }
 function _toPrimitive(t, r) { if ("object" != _typeof(t) || !t) return t; var e = t[Symbol.toPrimitive]; if (void 0 !== e) { var i = e.call(t, r || "default"); if ("object" != _typeof(i)) return i; throw new TypeError("@@toPrimitive must return a primitive value."); } return ("string" === r ? String : Number)(t); }
 import { ProductSceneEnum } from "../../../types";
-import APDID from "../../../util/jshield-apdid/apdid-core.umd.min";
+import { ApdidLoader } from "../../../util/jshield-apdid";
 export var getSecurityConfigStorageKey = function getSecurityConfigStorageKey(scene) {
   return "AMSSDK_SECURITY_CONFIG_".concat(scene);
 };
@@ -31,17 +31,108 @@ export var getSecurityHost = function getSecurityHost(region) {
 export var getSecurityScene = function getSecurityScene(product) {
   return sceneMap[product] || '';
 };
+
+/**
+ * Map SDK environment string to ApdidEnvironment for CDN URL selection.
+ */
+export var mapEnvironment = function mapEnvironment(env) {
+  if (!env) return 'production';
+  var lower = env.toLowerCase();
+  if (lower === 'pre' || lower === 'light_sandbox') return 'pre';
+  if (lower === 'dev' || lower === 'test' || lower === 'local') return 'dev';
+  return 'production';
+};
 export var Security = /*#__PURE__*/function () {
   function Security(options) {
     _classCallCheck(this, Security);
     _defineProperty(this, "scene", void 0);
     _defineProperty(this, "h5gateway", void 0);
+    _defineProperty(this, "environment", void 0);
+    _defineProperty(this, "apdidLoaded", false);
+    _defineProperty(this, "apdidLoadFailed", false);
     this.scene = options.scene;
     this.h5gateway = options.h5gateway || securityHost[SecurityRegionEnum.SG];
+    this.environment = options.environment;
   }
+
+  /**
+   * Ensure the apdid-core script is loaded async.
+   * Returns true if loaded successfully, false otherwise.
+   * On failure, sets apdidLoadFailed flag for graceful degradation.
+   */
   _createClass(Security, [{
+    key: "ensureApdidLoaded",
+    value: (function () {
+      var _ensureApdidLoaded = _asyncToGenerator( /*#__PURE__*/_regeneratorRuntime().mark(function _callee() {
+        var loader, apdidEnv;
+        return _regeneratorRuntime().wrap(function _callee$(_context) {
+          while (1) switch (_context.prev = _context.next) {
+            case 0:
+              if (!this.apdidLoaded) {
+                _context.next = 2;
+                break;
+              }
+              return _context.abrupt("return", true);
+            case 2:
+              if (!this.apdidLoadFailed) {
+                _context.next = 4;
+                break;
+              }
+              return _context.abrupt("return", false);
+            case 4:
+              loader = ApdidLoader.getInstance();
+              apdidEnv = mapEnvironment(this.environment);
+              _context.prev = 6;
+              _context.next = 9;
+              return loader.load({
+                environment: apdidEnv,
+                callbacks: {
+                  onLoad: function onLoad(duration) {
+                    console.log("[Security] apdid-core script loaded in ".concat(duration, "ms"));
+                  },
+                  onLoadFailed: function onLoadFailed(error) {
+                    console.error('[Security] apdid-core script load failed:', error.message);
+                  },
+                  onLoadTimeout: function onLoadTimeout() {
+                    console.error('[Security] apdid-core script load timeout');
+                  }
+                }
+              });
+            case 9:
+              this.apdidLoaded = true;
+              return _context.abrupt("return", true);
+            case 13:
+              _context.prev = 13;
+              _context.t0 = _context["catch"](6);
+              console.error('[Security] apdid-core load error, degrading:', _context.t0);
+              this.apdidLoadFailed = true;
+              return _context.abrupt("return", false);
+            case 18:
+            case "end":
+              return _context.stop();
+          }
+        }, _callee, this, [[6, 13]]);
+      }));
+      function ensureApdidLoaded() {
+        return _ensureApdidLoaded.apply(this, arguments);
+      }
+      return ensureApdidLoaded;
+    }()
+    /**
+     * Get the APDID module from the loader.
+     * Returns undefined if not loaded.
+     */
+    )
+  }, {
+    key: "getAPDIDModule",
+    value: function getAPDIDModule() {
+      var loader = ApdidLoader.getInstance();
+      return loader.getApdidModule();
+    }
+  }, {
     key: "initSecurity",
     value: function initSecurity(successCallback, failCallback) {
+      var _this = this;
       if (!this.scene) {
         throw new Error('securityConfig parameter error');
       }
@@ -50,12 +141,23 @@ export var Security = /*#__PURE__*/function () {
         console.error(errorMsg);
         throw new Error(errorMsg);
       }
-      this.initToken(successCallback, failCallback);
+
+      // Async: ensure script is loaded before calling initToken
+      this.ensureApdidLoaded().then(function (loaded) {
+        if (!loaded) {
+          failCallback && failCallback('apdid-core script load failed');
+          return;
+        }
+        _this.initToken(successCallback, failCallback);
+      }).catch(function () {
+        failCallback && failCallback('apdid-core script load failed');
+      });
     }
   }, {
     key: "initToken",
     value: function initToken(successCallback, failCallback) {
       try {
+        var APDID = this.getAPDIDModule();
         APDID === null || APDID === void 0 || APDID.initToken(this.scene, {
           host: this.h5gateway
         }, function (success, tokenResult, msg) {
@@ -64,7 +166,6 @@ export var Security = /*#__PURE__*/function () {
           } else {
             failCallback && failCallback(msg);
           }
-          console.log('initToken result tokenResult', JSON.stringify(tokenResult), msg);
         });
       } catch (error) {
         failCallback && failCallback(error === null || error === void 0 ? void 0 : error.toString());
@@ -73,48 +174,48 @@ export var Security = /*#__PURE__*/function () {
   }, {
     key: "pollingGetApdidToken",
     value: function () {
-      var _pollingGetApdidToken = _asyncToGenerator( /*#__PURE__*/_regeneratorRuntime().mark(function _callee3(config) {
-        var _this = this;
+      var _pollingGetApdidToken = _asyncToGenerator( /*#__PURE__*/_regeneratorRuntime().mark(function _callee4(config) {
+        var _this2 = this;
         var tokenCollectTime, dataPollingInterval, asyncFunc;
-        return _regeneratorRuntime().wrap(function _callee3$(_context3) {
-          while (1) switch (_context3.prev = _context3.next) {
+        return _regeneratorRuntime().wrap(function _callee4$(_context4) {
+          while (1) switch (_context4.prev = _context4.next) {
             case 0:
               tokenCollectTime = parseInt((config === null || config === void 0 ? void 0 : config.tokenCollectTime) || '0', 10);
               dataPollingInterval = parseInt((config === null || config === void 0 ? void 0 : config.dataPollingInterval) || '500', 10);
               asyncFunc = /*#__PURE__*/function () {
-                var _ref = _asyncToGenerator( /*#__PURE__*/_regeneratorRuntime().mark(function _callee2(resolve) {
+                var _ref = _asyncToGenerator( /*#__PURE__*/_regeneratorRuntime().mark(function _callee3(resolve) {
                   var deviceId, interval, polling;
-                  return _regeneratorRuntime().wrap(function _callee2$(_context2) {
-                    while (1) switch (_context2.prev = _context2.next) {
+                  return _regeneratorRuntime().wrap(function _callee3$(_context3) {
+                    while (1) switch (_context3.prev = _context3.next) {
                       case 0:
-                        _context2.next = 2;
-                        return _this.getApdidToken();
+                        _context3.next = 2;
+                        return _this2.getApdidToken();
                       case 2:
-                        deviceId = _context2.sent;
+                        deviceId = _context3.sent;
                         if (!deviceId) {
-                          _context2.next = 5;
+                          _context3.next = 5;
                           break;
                         }
-                        return _context2.abrupt("return", resolve(deviceId));
+                        return _context3.abrupt("return", resolve(deviceId));
                       case 5:
                         polling = /*#__PURE__*/function () {
-                          var _ref2 = _asyncToGenerator( /*#__PURE__*/_regeneratorRuntime().mark(function _callee() {
-                            return _regeneratorRuntime().wrap(function _callee$(_context) {
-                              while (1) switch (_context.prev = _context.next) {
+                          var _ref2 = _asyncToGenerator( /*#__PURE__*/_regeneratorRuntime().mark(function _callee2() {
+                            return _regeneratorRuntime().wrap(function _callee2$(_context2) {
+                              while (1) switch (_context2.prev = _context2.next) {
                                 case 0:
-                                  _context.next = 2;
-                                  return _this.getApdidToken();
+                                  _context2.next = 2;
+                                  return _this2.getApdidToken();
                                 case 2:
-                                  deviceId = _context.sent;
+                                  deviceId = _context2.sent;
                                   if (deviceId) {
                                     clearInterval(interval);
                                     resolve(deviceId);
                                   }
                                 case 4:
                                 case "end":
-                                  return _context.stop();
+                                  return _context2.stop();
                               }
-                            }, _callee);
+                            }, _callee2);
                           }));
                           return function polling() {
                             return _ref2.apply(this, arguments);
@@ -127,22 +228,22 @@ export var Security = /*#__PURE__*/function () {
                         }, tokenCollectTime);
                       case 8:
                       case "end":
-                        return _context2.stop();
+                        return _context3.stop();
                     }
-                  }, _callee2);
+                  }, _callee3);
                 }));
                 return function asyncFunc(_x2) {
                   return _ref.apply(this, arguments);
                 };
               }();
-              return _context3.abrupt("return", new Promise(function (resolve) {
+              return _context4.abrupt("return", new Promise(function (resolve) {
                 asyncFunc(resolve);
               }));
             case 4:
             case "end":
-              return _context3.stop();
+              return _context4.stop();
           }
-        }, _callee3);
+        }, _callee4);
       }));
       function pollingGetApdidToken(_x) {
         return _pollingGetApdidToken.apply(this, arguments);
@@ -152,25 +253,37 @@ export var Security = /*#__PURE__*/function () {
   }, {
     key: "getApdidToken",
     value: function () {
-      var _getApdidToken = _asyncToGenerator( /*#__PURE__*/_regeneratorRuntime().mark(function _callee4() {
-        var _this2 = this;
-        return _regeneratorRuntime().wrap(function _callee4$(_context4) {
-          while (1) switch (_context4.prev = _context4.next) {
+      var _getApdidToken = _asyncToGenerator( /*#__PURE__*/_regeneratorRuntime().mark(function _callee5() {
+        var _this3 = this;
+        var loaded;
+        return _regeneratorRuntime().wrap(function _callee5$(_context5) {
+          while (1) switch (_context5.prev = _context5.next) {
             case 0:
-              return _context4.abrupt("return", new Promise(function (resolve) {
+              _context5.next = 2;
+              return this.ensureApdidLoaded();
+            case 2:
+              loaded = _context5.sent;
+              if (loaded) {
+                _context5.next = 5;
+                break;
+              }
+              return _context5.abrupt("return", '');
+            case 5:
+              return _context5.abrupt("return", new Promise(function (resolve) {
                 try {
-                  APDID === null || APDID === void 0 || APDID.getApdidToken(_this2.scene, function (tokenResult) {
+                  var APDID = _this3.getAPDIDModule();
+                  APDID === null || APDID === void 0 || APDID.getApdidToken(_this3.scene, function (tokenResult) {
                     resolve(tokenResult === null || tokenResult === void 0 ? void 0 : tokenResult.token);
                   });
                 } catch (error) {
                   resolve('');
                 }
               }));
-            case 1:
+            case 6:
             case "end":
-              return _context4.stop();
+              return _context5.stop();
           }
-        }, _callee4);
+        }, _callee5, this);
       }));
       function getApdidToken() {
         return _getApdidToken.apply(this, arguments);

package/esm/foundation/utils/preload_helper.d.ts

@@ -3,10 +3,13 @@ import { Security } from '../../util/security';
 export default class PreloadHelper {
     static isWebAppPreloaded: boolean;
     static isSecuritySDKPreloaded: boolean;
-    private static securitySdkMap;
     static preloadWebApp(productScene: ProductSceneEnum, paymentMethodCategoryType: PaymentMethodCategoryTypeEnum, environment?: string, useV2?: boolean): void;
-    static preloadSecuritySDK(product: ProductSceneEnum, securityRegion?: string): void;
-    static getSecuritySdk(scene: any): Security;
+    /**
+     * Preload security SDK asynchronously.
+     * Triggers ApdidLoader.load() for async script loading and registers in SecuritySdkRegistry.
+     */
+    static preloadSecuritySDK(product: ProductSceneEnum, securityRegion?: string, environment?: string): Promise<void>;
+    static getSecuritySdk(scene: string): Security | undefined;
     static buildWebAppPreloadUrl(productScene: ProductSceneEnum, paymentMethodCategoryType: PaymentMethodCategoryTypeEnum, environment: string, useV2?: boolean): {
         preloadUrl: string;
         containerId: string;

package/esm/foundation/utils/preload_helper.js

@@ -1,4 +1,7 @@
 function _typeof(o) { "@babel/helpers - typeof"; return _typeof = "function" == typeof Symbol && "symbol" == typeof Symbol.iterator ? function (o) { return typeof o; } : function (o) { return o && "function" == typeof Symbol && o.constructor === Symbol && o !== Symbol.prototype ? "symbol" : typeof o; }, _typeof(o); }
+function _regeneratorRuntime() { "use strict"; /*! regenerator-runtime -- Copyright (c) 2014-present, Facebook, Inc. -- license (MIT): https://github.com/facebook/regenerator/blob/main/LICENSE */ _regeneratorRuntime = function _regeneratorRuntime() { return e; }; var t, e = {}, r = Object.prototype, n = r.hasOwnProperty, o = Object.defineProperty || function (t, e, r) { t[e] = r.value; }, i = "function" == typeof Symbol ? Symbol : {}, a = i.iterator || "@@iterator", c = i.asyncIterator || "@@asyncIterator", u = i.toStringTag || "@@toStringTag"; function define(t, e, r) { return Object.defineProperty(t, e, { value: r, enumerable: !0, configurable: !0, writable: !0 }), t[e]; } try { define({}, ""); } catch (t) { define = function define(t, e, r) { return t[e] = r; }; } function wrap(t, e, r, n) { var i = e && e.prototype instanceof Generator ? e : Generator, a = Object.create(i.prototype), c = new Context(n || []); return o(a, "_invoke", { value: makeInvokeMethod(t, r, c) }), a; } function tryCatch(t, e, r) { try { return { type: "normal", arg: t.call(e, r) }; } catch (t) { return { type: "throw", arg: t }; } } e.wrap = wrap; var h = "suspendedStart", l = "suspendedYield", f = "executing", s = "completed", y = {}; function Generator() {} function GeneratorFunction() {} function GeneratorFunctionPrototype() {} var p = {}; define(p, a, function () { return this; }); var d = Object.getPrototypeOf, v = d && d(d(values([]))); v && v !== r && n.call(v, a) && (p = v); var g = GeneratorFunctionPrototype.prototype = Generator.prototype = Object.create(p); function defineIteratorMethods(t) { ["next", "throw", "return"].forEach(function (e) { define(t, e, function (t) { return this._invoke(e, t); }); }); } function AsyncIterator(t, e) { function invoke(r, o, i, a) { var c = tryCatch(t[r], t, o); if ("throw" !== c.type) { var u = c.arg, h = u.value; return h && "object" == _typeof(h) && n.call(h, "__await") ? e.resolve(h.__await).then(function (t) { invoke("next", t, i, a); }, function (t) { invoke("throw", t, i, a); }) : e.resolve(h).then(function (t) { u.value = t, i(u); }, function (t) { return invoke("throw", t, i, a); }); } a(c.arg); } var r; o(this, "_invoke", { value: function value(t, n) { function callInvokeWithMethodAndArg() { return new e(function (e, r) { invoke(t, n, e, r); }); } return r = r ? r.then(callInvokeWithMethodAndArg, callInvokeWithMethodAndArg) : callInvokeWithMethodAndArg(); } }); } function makeInvokeMethod(e, r, n) { var o = h; return function (i, a) { if (o === f) throw new Error("Generator is already running"); if (o === s) { if ("throw" === i) throw a; return { value: t, done: !0 }; } for (n.method = i, n.arg = a;;) { var c = n.delegate; if (c) { var u = maybeInvokeDelegate(c, n); if (u) { if (u === y) continue; return u; } } if ("next" === n.method) n.sent = n._sent = n.arg;else if ("throw" === n.method) { if (o === h) throw o = s, n.arg; n.dispatchException(n.arg); } else "return" === n.method && n.abrupt("return", n.arg); o = f; var p = tryCatch(e, r, n); if ("normal" === p.type) { if (o = n.done ? s : l, p.arg === y) continue; return { value: p.arg, done: n.done }; } "throw" === p.type && (o = s, n.method = "throw", n.arg = p.arg); } }; } function maybeInvokeDelegate(e, r) { var n = r.method, o = e.iterator[n]; if (o === t) return r.delegate = null, "throw" === n && e.iterator.return && (r.method = "return", r.arg = t, maybeInvokeDelegate(e, r), "throw" === r.method) || "return" !== n && (r.method = "throw", r.arg = new TypeError("The iterator does not provide a '" + n + "' method")), y; var i = tryCatch(o, e.iterator, r.arg); if ("throw" === i.type) return r.method = "throw", r.arg = i.arg, r.delegate = null, y; var a = i.arg; return a ? a.done ? (r[e.resultName] = a.value, r.next = e.nextLoc, "return" !== r.method && (r.method = "next", r.arg = t), r.delegate = null, y) : a : (r.method = "throw", r.arg = new TypeError("iterator result is not an object"), r.delegate = null, y); } function pushTryEntry(t) { var e = { tryLoc: t[0] }; 1 in t && (e.catchLoc = t[1]), 2 in t && (e.finallyLoc = t[2], e.afterLoc = t[3]), this.tryEntries.push(e); } function resetTryEntry(t) { var e = t.completion || {}; e.type = "normal", delete e.arg, t.completion = e; } function Context(t) { this.tryEntries = [{ tryLoc: "root" }], t.forEach(pushTryEntry, this), this.reset(!0); } function values(e) { if (e || "" === e) { var r = e[a]; if (r) return r.call(e); if ("function" == typeof e.next) return e; if (!isNaN(e.length)) { var o = -1, i = function next() { for (; ++o < e.length;) if (n.call(e, o)) return next.value = e[o], next.done = !1, next; return next.value = t, next.done = !0, next; }; return i.next = i; } } throw new TypeError(_typeof(e) + " is not iterable"); } return GeneratorFunction.prototype = GeneratorFunctionPrototype, o(g, "constructor", { value: GeneratorFunctionPrototype, configurable: !0 }), o(GeneratorFunctionPrototype, "constructor", { value: GeneratorFunction, configurable: !0 }), GeneratorFunction.displayName = define(GeneratorFunctionPrototype, u, "GeneratorFunction"), e.isGeneratorFunction = function (t) { var e = "function" == typeof t && t.constructor; return !!e && (e === GeneratorFunction || "GeneratorFunction" === (e.displayName || e.name)); }, e.mark = function (t) { return Object.setPrototypeOf ? Object.setPrototypeOf(t, GeneratorFunctionPrototype) : (t.__proto__ = GeneratorFunctionPrototype, define(t, u, "GeneratorFunction")), t.prototype = Object.create(g), t; }, e.awrap = function (t) { return { __await: t }; }, defineIteratorMethods(AsyncIterator.prototype), define(AsyncIterator.prototype, c, function () { return this; }), e.AsyncIterator = AsyncIterator, e.async = function (t, r, n, o, i) { void 0 === i && (i = Promise); var a = new AsyncIterator(wrap(t, r, n, o), i); return e.isGeneratorFunction(r) ? a : a.next().then(function (t) { return t.done ? t.value : a.next(); }); }, defineIteratorMethods(g), define(g, u, "Generator"), define(g, a, function () { return this; }), define(g, "toString", function () { return "[object Generator]"; }), e.keys = function (t) { var e = Object(t), r = []; for (var n in e) r.push(n); return r.reverse(), function next() { for (; r.length;) { var t = r.pop(); if (t in e) return next.value = t, next.done = !1, next; } return next.done = !0, next; }; }, e.values = values, Context.prototype = { constructor: Context, reset: function reset(e) { if (this.prev = 0, this.next = 0, this.sent = this._sent = t, this.done = !1, this.delegate = null, this.method = "next", this.arg = t, this.tryEntries.forEach(resetTryEntry), !e) for (var r in this) "t" === r.charAt(0) && n.call(this, r) && !isNaN(+r.slice(1)) && (this[r] = t); }, stop: function stop() { this.done = !0; var t = this.tryEntries[0].completion; if ("throw" === t.type) throw t.arg; return this.rval; }, dispatchException: function dispatchException(e) { if (this.done) throw e; var r = this; function handle(n, o) { return a.type = "throw", a.arg = e, r.next = n, o && (r.method = "next", r.arg = t), !!o; } for (var o = this.tryEntries.length - 1; o >= 0; --o) { var i = this.tryEntries[o], a = i.completion; if ("root" === i.tryLoc) return handle("end"); if (i.tryLoc <= this.prev) { var c = n.call(i, "catchLoc"), u = n.call(i, "finallyLoc"); if (c && u) { if (this.prev < i.catchLoc) return handle(i.catchLoc, !0); if (this.prev < i.finallyLoc) return handle(i.finallyLoc); } else if (c) { if (this.prev < i.catchLoc) return handle(i.catchLoc, !0); } else { if (!u) throw new Error("try statement without catch or finally"); if (this.prev < i.finallyLoc) return handle(i.finallyLoc); } } } }, abrupt: function abrupt(t, e) { for (var r = this.tryEntries.length - 1; r >= 0; --r) { var o = this.tryEntries[r]; if (o.tryLoc <= this.prev && n.call(o, "finallyLoc") && this.prev < o.finallyLoc) { var i = o; break; } } i && ("break" === t || "continue" === t) && i.tryLoc <= e && e <= i.finallyLoc && (i = null); var a = i ? i.completion : {}; return a.type = t, a.arg = e, i ? (this.method = "next", this.next = i.finallyLoc, y) : this.complete(a); }, complete: function complete(t, e) { if ("throw" === t.type) throw t.arg; return "break" === t.type || "continue" === t.type ? this.next = t.arg : "return" === t.type ? (this.rval = this.arg = t.arg, this.method = "return", this.next = "end") : "normal" === t.type && e && (this.next = e), y; }, finish: function finish(t) { for (var e = this.tryEntries.length - 1; e >= 0; --e) { var r = this.tryEntries[e]; if (r.finallyLoc === t) return this.complete(r.completion, r.afterLoc), resetTryEntry(r), y; } }, catch: function _catch(t) { for (var e = this.tryEntries.length - 1; e >= 0; --e) { var r = this.tryEntries[e]; if (r.tryLoc === t) { var n = r.completion; if ("throw" === n.type) { var o = n.arg; resetTryEntry(r); } return o; } } throw new Error("illegal catch attempt"); }, delegateYield: function delegateYield(e, r, n) { return this.delegate = { iterator: values(e), resultName: r, nextLoc: n }, "next" === this.method && (this.arg = t), y; } }, e; }
+function asyncGeneratorStep(gen, resolve, reject, _next, _throw, key, arg) { try { var info = gen[key](arg); var value = info.value; } catch (error) { reject(error); return; } if (info.done) { resolve(value); } else { Promise.resolve(value).then(_next, _throw); } }
+function _asyncToGenerator(fn) { return function () { var self = this, args = arguments; return new Promise(function (resolve, reject) { var gen = fn.apply(self, args); function _next(value) { asyncGeneratorStep(gen, resolve, reject, _next, _throw, "next", value); } function _throw(err) { asyncGeneratorStep(gen, resolve, reject, _next, _throw, "throw", err); } _next(undefined); }); }; }
 function _classCallCheck(instance, Constructor) { if (!(instance instanceof Constructor)) { throw new TypeError("Cannot call a class as a function"); } }
 function _defineProperties(target, props) { for (var i = 0; i < props.length; i++) { var descriptor = props[i]; descriptor.enumerable = descriptor.enumerable || false; descriptor.configurable = true; if ("value" in descriptor) descriptor.writable = true; Object.defineProperty(target, _toPropertyKey(descriptor.key), descriptor); } }
 function _createClass(Constructor, protoProps, staticProps) { if (protoProps) _defineProperties(Constructor.prototype, protoProps); if (staticProps) _defineProperties(Constructor, staticProps); Object.defineProperty(Constructor, "prototype", { writable: false }); return Constructor; }
@@ -11,8 +14,10 @@ import { ProductSceneEnum } from "../../types";
 import { getWebAppUrl, getWebAppV2Url } from "../utils/web_app_url_utils";
 import { ProductInfoCacheUtil } from "../utils/payment_product_utils";
 import { getWebAppVersion } from "./payment_context_utils";
-import { getSecurityConfigStorageKey, getSecurityHost, getSecurityScene, Security } from "../../util/security";
+import { getSecurityConfigStorageKey, getSecurityHost, getSecurityScene, Security, mapEnvironment } from "../../util/security";
 import { getOrSetStorageId, safeJson } from "../../util";
+import { SecuritySdkRegistry } from "../../util/security-registry";
+import { ApdidLoader } from "../../util/jshield-apdid";
 var MAX_CLEAR_TIME = 10000;
 var PreloadHelper = /*#__PURE__*/function () {
   function PreloadHelper() {
@@ -50,42 +55,128 @@ var PreloadHelper = /*#__PURE__*/function () {
         console.error('[web-sdk] preload web app failed', error);
       }
     }
+
+    /**
+     * Preload security SDK asynchronously.
+     * Triggers ApdidLoader.load() for async script loading and registers in SecuritySdkRegistry.
+     */
   }, {
     key: "preloadSecuritySDK",
-    value: function preloadSecuritySDK(product) {
-      var _this = this;
-      var securityRegion = arguments.length > 1 && arguments[1] !== undefined ? arguments[1] : 'SG';
-      try {
-        if (this.isSecuritySDKPreloaded) {
-          console.log('[web-sdk] security sdk is already loaded');
-          return;
-        }
-        var storage = PreloadHelper.getSecurityConfigStorage(product);
-        var scene = storage.scene || getSecurityScene(product);
-        console.log('getSecurityScene', scene);
-        var h5gateway = storage.h5gateway || getSecurityHost(securityRegion);
-        console.log('preloadSecuritySDK', scene);
-        var securitySdk = new Security({
-          scene: scene,
-          h5gateway: h5gateway
-        });
-        securitySdk.initSecurity(function () {
-          console.log(_this.securitySdkMap, 'this.securitySdkMap');
-          _this.securitySdkMap.set(scene, securitySdk);
-          _this.isSecuritySDKPreloaded = true;
-          console.log('[web-sdk] preload security sdk succeed');
-        }, function () {
-          console.error('[web-sdk] preload security sdk failed');
-        });
-      } catch (error) {
-        console.error('[web-sdk] preload security sdk failed', error);
+    value: (function () {
+      var _preloadSecuritySDK = _asyncToGenerator( /*#__PURE__*/_regeneratorRuntime().mark(function _callee(product) {
+        var _this = this;
+        var securityRegion,
+          environment,
+          storage,
+          scene,
+          h5gateway,
+          existing,
+          apdidEnv,
+          loader,
+          securitySdk,
+          loadingPromise,
+          _args = arguments;
+        return _regeneratorRuntime().wrap(function _callee$(_context) {
+          while (1) switch (_context.prev = _context.next) {
+            case 0:
+              securityRegion = _args.length > 1 && _args[1] !== undefined ? _args[1] : 'SG';
+              environment = _args.length > 2 ? _args[2] : undefined;
+              _context.prev = 2;
+              if (!this.isSecuritySDKPreloaded) {
+                _context.next = 6;
+                break;
+              }
+              console.log('[web-sdk] security sdk is already loaded');
+              return _context.abrupt("return");
+            case 6:
+              storage = PreloadHelper.getSecurityConfigStorage(product);
+              scene = storage.scene || getSecurityScene(product);
+              console.log('getSecurityScene', scene);
+              h5gateway = storage.h5gateway || getSecurityHost(securityRegion);
+              console.log('preloadSecuritySDK', scene);
+
+              // Check if already in registry
+              if (!SecuritySdkRegistry.isReady(scene)) {
+                _context.next = 15;
+                break;
+              }
+              console.log('[web-sdk] security sdk already ready in registry');
+              this.isSecuritySDKPreloaded = true;
+              return _context.abrupt("return");
+            case 15:
+              if (!SecuritySdkRegistry.isLoading(scene)) {
+                _context.next = 30;
+                break;
+              }
+              console.log('[web-sdk] security sdk is already loading, waiting...');
+              existing = SecuritySdkRegistry.get(scene);
+              if (!(existing && existing.status === 'loading')) {
+                _context.next = 29;
+                break;
+              }
+              _context.prev = 19;
+              _context.next = 22;
+              return existing.loadingPromise;
+            case 22:
+              this.isSecuritySDKPreloaded = true;
+              console.log('[web-sdk] preload security sdk succeed (waited for existing load)');
+              _context.next = 29;
+              break;
+            case 26:
+              _context.prev = 26;
+              _context.t0 = _context["catch"](19);
+              console.error('[web-sdk] preload security sdk failed (existing load failed)');
+            case 29:
+              return _context.abrupt("return");
+            case 30:
+              // 非阻塞调度 ApdidLoader 加载，preload 立即返回，不阻塞主流程
+              // Security 内部的 ensureApdidLoaded() 会在需要 token 时按需等待加载完成
+              apdidEnv = mapEnvironment(environment);
+              loader = ApdidLoader.getInstance();
+              loader.scheduleLoad({
+                environment: apdidEnv
+              });
+
+              // Create Security instance and register in registry
+              securitySdk = new Security({
+                scene: scene,
+                h5gateway: h5gateway,
+                environment: environment
+              });
+              loadingPromise = new Promise(function (resolveLoading, rejectLoading) {
+                securitySdk.initSecurity(function () {
+                  SecuritySdkRegistry.setReady(scene, securitySdk);
+                  _this.isSecuritySDKPreloaded = true;
+                  console.log('[web-sdk] preload security sdk succeed');
+                  resolveLoading(securitySdk);
+                }, function () {
+                  SecuritySdkRegistry.setFailed(scene, new Error('Preload security sdk init failed'));
+                  console.error('[web-sdk] preload security sdk failed');
+                  rejectLoading(new Error('Preload security sdk init failed'));
+                });
+              });
+              SecuritySdkRegistry.setLoading(scene, loadingPromise);
+              _context.next = 41;
+              break;
+            case 38:
+              _context.prev = 38;
+              _context.t1 = _context["catch"](2);
+              console.error('[web-sdk] preload security sdk failed', _context.t1);
+            case 41:
+            case "end":
+              return _context.stop();
+          }
+        }, _callee, this, [[2, 38], [19, 26]]);
+      }));
+      function preloadSecuritySDK(_x) {
+        return _preloadSecuritySDK.apply(this, arguments);
       }
-    }
+      return preloadSecuritySDK;
+    }())
   }, {
     key: "getSecuritySdk",
     value: function getSecuritySdk(scene) {
-      var result = this.securitySdkMap.get(scene);
-      return result;
+      return SecuritySdkRegistry.getReadyInstance(scene);
     }
   }, {
     key: "buildWebAppPreloadUrl",
@@ -143,5 +234,4 @@ var PreloadHelper = /*#__PURE__*/function () {
 }();
 _defineProperty(PreloadHelper, "isWebAppPreloaded", false);
 _defineProperty(PreloadHelper, "isSecuritySDKPreloaded", false);
-_defineProperty(PreloadHelper, "securitySdkMap", new Map());
 export { PreloadHelper as default };

package/esm/main.js

@@ -77,7 +77,7 @@ export var AMSAutoDebitPay = /*#__PURE__*/function (_AMSCheckout) {
         environment: 'prod'
       };
       PreloadHelper.preloadWebApp(ProductSceneEnum.AUTO_DEBIT_PAY, PaymentMethodCategoryTypeEnum.WALLET, options.environment);
-      PreloadHelper.preloadSecuritySDK(ProductSceneEnum.AUTO_DEBIT_PAY, options.securityRegion);
+      PreloadHelper.preloadSecuritySDK(ProductSceneEnum.AUTO_DEBIT_PAY, options.securityRegion, options.environment);
     }
   }]);
   return AMSAutoDebitPay;
@@ -164,7 +164,7 @@ export var AMSCashierPayment = /*#__PURE__*/function (_AMSCheckout2) {
       } catch (error) {
         console.error('[web-sdk] preload web app error', error);
       }
-      PreloadHelper.preloadSecuritySDK(ProductSceneEnum.CASHIER_PAYMENT, options.securityRegion);
+      PreloadHelper.preloadSecuritySDK(ProductSceneEnum.CASHIER_PAYMENT, options.securityRegion, options.environment);
     }
   }]);
   return AMSCashierPayment;
@@ -188,7 +188,7 @@ export var AMSVaulting = /*#__PURE__*/function (_AMSCheckout3) {
         environment: 'prod'
       };
       PreloadHelper.preloadWebApp(ProductSceneEnum.CASHIER_PAYMENT, PaymentMethodCategoryTypeEnum.CARD, options.environment);
-      PreloadHelper.preloadSecuritySDK(ProductSceneEnum.VAULTING, options.securityRegion);
+      PreloadHelper.preloadSecuritySDK(ProductSceneEnum.VAULTING, options.securityRegion, options.environment);
     }
   }]);
   return AMSVaulting;
@@ -336,7 +336,7 @@ export var AMSAutoDebit = /*#__PURE__*/function () {
         environment: 'prod'
       };
       PreloadHelper.preloadWebApp(ProductSceneEnum.AUTO_DEBIT, PaymentMethodCategoryTypeEnum.WALLET, options.environment);
-      PreloadHelper.preloadSecuritySDK(ProductSceneEnum.AUTO_DEBIT, options.securityRegion);
+      PreloadHelper.preloadSecuritySDK(ProductSceneEnum.AUTO_DEBIT, options.securityRegion, options.environment);
     }
   }]);
   return AMSAutoDebit;

package/esm/plugin/component/index.js

@@ -156,24 +156,28 @@ var ComponentApp = /*#__PURE__*/function () {
       var securitySDK = this.AMSSDK._getSecuritySDKByProductScene({
         product: product
       });
-      if (!securitySDK) {
-        this.AMSSDK.logger.logInfo({
-          title: 'sdk_event_securitySdkInit'
+      if (securitySDK) {
+        // Already ready
+        return;
+      }
+
+      // Use _newSecuritySDKByScene which handles loading/ready/failed states internally
+      this.AMSSDK.logger.logInfo({
+        title: 'sdk_event_securitySdkInit'
+      });
+      this.AMSSDK._newSecuritySDKByScene({
+        product: product
+      }, function () {
+        _this.AMSSDK.logger.logInfo({
+          title: 'sdk_event_securitySdkInitSuccess'
         });
-        this.AMSSDK._newSecuritySDKByScene({
-          product: product
-        }, function () {
-          _this.AMSSDK.logger.logInfo({
-            title: 'sdk_event_securitySdkInitSuccess'
-          });
-        }, function () {
-          _this.AMSSDK.logger.logError({
-            title: 'sdk_error_securitySdkInitFailed'
-          }, {
-            sign: 'SDK internal initialization'
-          });
+      }, function () {
+        _this.AMSSDK.logger.logError({
+          title: 'sdk_error_securitySdkInitFailed'
+        }, {
+          sign: 'SDK internal initialization'
         });
-      }
+      });
     }
   }, {
     key: "logDeviceId",
@@ -208,36 +212,39 @@ var ComponentApp = /*#__PURE__*/function () {
             while (1) switch (_context.prev = _context.next) {
               case 0:
                 productScene = (_this2$_renderParams = _this2._renderParams) === null || _this2$_renderParams === void 0 || (_this2$_renderParams = _this2$_renderParams.paymentSessionMetaData) === null || _this2$_renderParams === void 0 || (_this2$_renderParams = _this2$_renderParams.paymentSessionConfig) === null || _this2$_renderParams === void 0 ? void 0 : _this2$_renderParams.productScene;
-                getDeviceIdStartTime = Date.now();
-                securitySDK = _this2.AMSSDK._getSecuritySDKByProductScene({
+                getDeviceIdStartTime = Date.now(); // Use async version to handle loading state
+                _context.next = 4;
+                return _this2.AMSSDK._awaitSecuritySDKByProductScene({
                   product: (deviceIdParameter === null || deviceIdParameter === void 0 ? void 0 : deviceIdParameter.productScene) || productScene
                 });
+              case 4:
+                securitySDK = _context.sent;
                 deviceId = '';
                 if (!securitySDK) {
-                  _context.next = 16;
+                  _context.next = 18;
                   break;
                 }
                 if (!(isPolling && parseInt(deviceIdParameter === null || deviceIdParameter === void 0 ? void 0 : deviceIdParameter.tokenCollectTime) > 0)) {
-                  _context.next = 11;
+                  _context.next = 13;
                   break;
                 }
-                _context.next = 8;
+                _context.next = 10;
                 return securitySDK.pollingGetApdidToken(deviceIdParameter);
-              case 8:
+              case 10:
                 _context.t0 = _context.sent;
-                _context.next = 14;
+                _context.next = 16;
                 break;
-              case 11:
-                _context.next = 13;
-                return securitySDK.getApdidToken();
               case 13:
+                _context.next = 15;
+                return securitySDK.getApdidToken();
+              case 15:
                 _context.t0 = _context.sent;
-              case 14:
+              case 16:
                 deviceId = _context.t0;
                 _this2.logDeviceId(deviceId, getDeviceIdStartTime);
-              case 16:
+              case 18:
                 resolve(deviceId);
-              case 17:
+              case 19:
               case "end":
                 return _context.stop();
             }