@fast-china/utils 2.1.6 → 2.1.8

package/CHANGELOG.md

@@ -2,6 +2,18 @@
 
 All notable changes to Fast.Utils are documented in this file.
 
+## [2.1.8] - 2026-09-14
+
+### Fixed
+
+- Resolved uni-app injected `uni` and App-Plus `plus` identifiers at call time, with `globalThis` property fallbacks, so supported runtime APIs remain detectable when the host does not expose them as global object properties.
+
+## [2.1.7] - 2026-09-14
+
+### Changed
+
+- Bundled CryptoJS into the ESM package output to avoid CommonJS subpath resolution failures in strict ESM and uni-app toolchains while preserving module-level tree-shaking.
+
 ## [2.1.6] - 2026-09-13
 
 ### Added
@@ -120,6 +132,8 @@ All notable changes to Fast.Utils are documented in this file.
 
 - Added authenticated ciphertext validation, bounded crypto parameters and payloads, unbiased Web Crypto randomness, prototype-safe query/object transforms, and namespace-scoped Storage cleanup.
 
+[2.1.8]: https://github.com/China-xiaoFang/Fast.Utils/compare/v2.1.7...v2.1.8
+[2.1.7]: https://github.com/China-xiaoFang/Fast.Utils/compare/v2.1.6...v2.1.7
 [2.1.6]: https://github.com/China-xiaoFang/Fast.Utils/compare/v2.1.5...v2.1.6
 [2.1.5]: https://github.com/China-xiaoFang/Fast.Utils/compare/v2.1.4...v2.1.5
 [2.1.4]: https://github.com/China-xiaoFang/Fast.Utils/compare/v2.1.3...v2.1.4

package/README.md

@@ -59,7 +59,7 @@ configureStorage({
 });
 ```
 
-The active global configuration is immutable. Repeating the same configuration is idempotent; a conflicting configuration throws. The `crypto` option on `set/get` overrides only that operation and must match when writing and reading the same entry; it does not mutate global configuration. A custom `codec` may be supplied instead of global `crypto`. In uni-app, `Local` automatically uses the global synchronous Storage API; `Session` throws because uni-app has no sessionStorage equivalent. `clear()` removes only keys inside the active prefix.
+The active global configuration is immutable. Repeating the same configuration is idempotent; a conflicting configuration throws. The `crypto` option on `set/get` overrides only that operation and must match when writing and reading the same entry; it does not mutate global configuration. A custom `codec` may be supplied instead of global `crypto`. In uni-app, `Local` automatically resolves the runtime-injected `uni` object and uses its synchronous Storage API; `Session` throws because uni-app has no sessionStorage equivalent. `clear()` removes only keys inside the active prefix.
 
 ## Base64
 
@@ -133,6 +133,8 @@ Base64 and Crypto text decoding/decryption functions return the primitive-string
 
 Store passwords with `HashPasswordPBKDF2SHA256` and `VerifyPasswordPBKDF2SHA256`. MD5, SHA-1, AES-CBC, and AES-ECB do not provide password-storage or authenticated-encryption guarantees. See the [API reference](./docs/API.md#crypto) for the complete method list and security boundaries.
 
+CryptoJS is bundled into the ESM and CDN artifacts for the compatibility hash and AES APIs. Consumers do not install or resolve `crypto-js` subpaths; applications that do not use Crypto APIs can still remove the independent crypto module through Tree Shaking.
+
 ## Vue 3
 
 ```ts
@@ -162,7 +164,7 @@ The `object` module includes dependency-free deep cloning and equality plus pred
 - The package-manager entry is pure ESM; the CDN entry is a separately minified IIFE.
 - ES2022 modern browsers and WebViews.
 - Vue 3.5.11 or newer through a required peer dependency.
-- uni-app through automatic global `uni` detection when Storage is configured.
+- uni-app through call-time detection of runtime-injected `uni` and App-Plus `plus`, with global-property fallbacks.
 - No import-time access to `window`, Storage, or `uni`; unsupported calls fail explicitly.
 - Web Crypto, URL, Intl, TextEncoder, and related platform capabilities are not polyfilled.
 

package/README.zh.md

@@ -59,7 +59,7 @@ configureStorage({
 });
 ```
 
-激活后的全局配置不可变；相同配置重复调用保持幂等，不同配置会抛错。`set/get` 的 `crypto` 选项只覆盖单次操作，读写同一条目时必须保持一致，不会改变全局配置。自定义 `codec` 与全局 `crypto` 不能同时使用。uni-app 中 `Local` 会自动使用全局同步 Storage API；由于没有等价的 sessionStorage，`Session` 会明确抛错。`clear()` 只清理当前前缀。
+激活后的全局配置不可变；相同配置重复调用保持幂等，不同配置会抛错。`set/get` 的 `crypto` 选项只覆盖单次操作，读写同一条目时必须保持一致，不会改变全局配置。自定义 `codec` 与全局 `crypto` 不能同时使用。uni-app 中 `Local` 会自动解析运行时注入的 `uni` 对象并使用其同步 Storage API；由于没有等价的 sessionStorage，`Session` 会明确抛错。`clear()` 只清理当前前缀。
 
 ## Base64
 
@@ -133,6 +133,8 @@ Base64 与 Crypto 的文本解码/解密入口返回原始字符串类型 `Decod
 
 密码存储使用 `HashPasswordPBKDF2SHA256` 和 `VerifyPasswordPBKDF2SHA256`。MD5、SHA-1、AES-CBC 与 AES-ECB 不提供密码存储或认证加密保证。完整方法列表和安全边界见 [API 文档](./docs/API.zh-CN.md#crypto)。
 
+兼容哈希与 AES API 使用的 CryptoJS 已内联到 ESM 和 CDN 产物，消费项目无需安装或解析 `crypto-js` 子路径；未使用 Crypto API 的应用仍可通过 Tree Shaking 移除独立的加密模块。
+
 ## Vue 3
 
 ```ts
@@ -162,7 +164,7 @@ useEventListener(document, "visibilitychange", () => console.log(document.visibi
 - 包管理器入口为纯 ESM；CDN 入口为单独压缩的 IIFE。
 - 面向 ES2022 现代浏览器与 WebView。
 - Vue 3.5.11 及以上版本通过必须安装的 Peer Dependency 接入。
-- 配置 Storage 时自动检测全局 `uni` 并接入 uni-app。
+- 调用时检测运行时注入的 `uni` 和 App-Plus `plus`，并兼容对应全局属性。
 - 导入阶段不访问 `window`、Storage 或 `uni`；不支持的调用明确失败。
 - 不注入 Web Crypto、URL、Intl、TextEncoder 等 Polyfill。
 

package/THIRD_PARTY_LICENSES.md

@@ -0,0 +1,26 @@
+# Third-Party Licenses
+
+## CryptoJS
+
+CryptoJS is licensed under the MIT License.
+
+Copyright (c) 2009-2013 Jeff Mott  
+Copyright (c) 2013-2016 Evan Vosberg
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in
+all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
+THE SOFTWARE.