@funhub/platform 0.1.10 → 0.1.13

package/dist/utils/common.mjs

@@ -1,36 +1,2 @@
-function o(n = 8) {
-  return Array.from({ length: n }, () => Math.random().toString(36)[2]).join(
-    ""
-  );
-}
-function t() {
-  return typeof window < "u";
-}
-function i(n) {
-  return t() ? window.__ENVFB__?.[n] : process.env[n];
-}
-function e(n) {
-  return n == null ? "0" : String(n);
-}
-function u(n) {
-  if (n == null)
-    return 0;
-  if (typeof n == "number")
-    return n;
-  const r = Number(n);
-  return Number.isNaN(r) ? 0 : r;
-}
-function f() {
-  return "xxxxxxxx-xxxx-4xxx-yxxx-xxxxxxxxxxxx".replace(/[xy]/g, (n) => {
-    const r = Math.random() * 16 | 0;
-    return (n === "x" ? r : r & 3 | 8).toString(16);
-  });
-}
-export {
-  f as generateUUID,
-  i as getEnv,
-  t as isClient,
-  e as numToString,
-  o as randomString,
-  u as stringToNumber
-};
+
+import e from"crypto-js";function t(e=8){return Array.from({length:e},()=>Math.random().toString(36)[2]).join(``)}function n(){return typeof window<`u`}function r(){return typeof navigator>`u`?!1:/Android|webOS|iPhone|iPad|iPod|BlackBerry|IEMobile|Opera Mini/i.test(navigator.userAgent)}function i(e){return e==null?`0`:String(e)}function a(e){if(e==null)return 0;if(typeof e==`number`)return e;let t=Number(e);return Number.isNaN(t)?0:t}function o(){return`xxxxxxxx-xxxx-4xxx-yxxx-xxxxxxxxxxxx`.replace(/[xy]/g,e=>{let t=Math.random()*16|0;return(e===`x`?t:t&3|8).toString(16)})}function s(e){return`${Math.floor(e/60)}:${Math.floor(e%60).toString().padStart(2,`0`)}`}function c(e){let t=0,n=0;try{if(e){let[r,i]=e.split(`x`);t=Number.parseInt(r||`0`,10)||0,n=Number.parseInt(i||`0`,10)||0}}catch(e){console.warn(`parseResolution failed`,e)}return{width:t,height:n}}function l(e,t=`yyyy-MM-dd hh:mm`){if(typeof e!=`number`||Number.isNaN(e)||e<0)return``;let n=new Date(e*1e3);if(Number.isNaN(n.getTime()))return``;let r=n.getFullYear().toString(),i=String(n.getMonth()+1).padStart(2,`0`),a=String(n.getDate()).padStart(2,`0`),o=String(n.getHours()).padStart(2,`0`),s=String(n.getMinutes()).padStart(2,`0`);return t.replace(`yyyy`,r).replace(`yy`,r.slice(-2)).replace(`MM`,i).replace(`dd`,a).replace(`hh`,o).replace(`mm`,s)}function u(){return Math.floor(Date.now()/1e3)}const d=/<span class="mention" contenteditable="false" data-id="(\w+)">(.*?)<\/span>/g,f=/<@_user>(\w+)<\/@_user>/g;function p(e){let t=[];if(!e)return t;let n;for(;(n=d.exec(e))!==null;)t.push(n[1]);return t}function m(e){return e?e.replace(d,`<@_user>$1</@_user>`):``}function h(e){let{text:t=``,atUsers:n=[]}=e;return t?t.replace(f,(e,t)=>`<span class="mention" data-id="${t}">@${n.find(e=>e.user_id===t||e.userId===t)?.name||``}</span>`):``}function g(e){return`<span class="mention" contenteditable="false" data-id="${e.user_id}">@${e.name}</span>`}function _(e){return e?e.replace(/<[^>]+>/g,``):``}function v(e,t){let n=null;return((...r)=>{n&&clearTimeout(n),n=setTimeout(()=>e(...r),t)})}async function y(e){try{if(n()){let t=document.cookie.split(`; `).find(t=>t.startsWith(`${e}=`))?.split(`=`)[1];return t?decodeURIComponent(t):``}else{let{cookies:t}=await import(`next/headers`);return(await t()).get(e)?.value??``}}catch(t){return console.error(`获取 Cookie "${e}" 失败:`,t),``}}function b(e,t,n){let r=[`${e}=${encodeURIComponent(t)}`];if(n.expires)r.push(`expires=${n.expires.toUTCString()}`);else if(n.maxAge){let e=new Date(Date.now()+n.maxAge*1e3);r.push(`expires=${e.toUTCString()}`)}return n.path&&r.push(`path=${n.path}`),n.domain&&r.push(`domain=${n.domain}`),n.secure&&r.push(`secure`),n.sameSite&&r.push(`samesite=${n.sameSite}`),r.join(`; `)}function x(e,t,r={}){if(!n())throw Error(`setCookie 只能在客户端环境中使用`);let i={maxAge:360*24*60*60,httpOnly:!1,secure:process.env.NODE_ENV===`production`,sameSite:process.env.NODE_ENV===`production`?`none`:`lax`,path:`/`,...r};try{let n=b(e,t,i);document.cookie=n}catch(t){throw console.error(`设置 Cookie "${e}" 失败:`,t),Error(`无法设置 Cookie: ${t}`)}}function S(e){if(!n())throw Error(`removeCookie 只能在客户端环境中使用`);document.cookie=`${e}=; expires=Thu, 01 Jan 1970 00:00:00 UTC; path=/;`}function C(t){if(!t||t.length<10)return``;let n=t.length,r=n%5+2,i=t.substring(0,r),a=t.substring(n-r);return e.MD5(`${i}gst#2026!idy_1-16${a}`).toString()}function w(t){return e.SHA256(t).toString(e.enc.Hex)}function T(){let e=window.localStorage.getItem(`user-store`);return e?JSON.parse(e)?.state?.userId:``}function E(e){let t=new URL(window.location.href);Object.entries(e).forEach(([e,n])=>{t.searchParams.set(e,n)}),window.history.replaceState({},``,t.toString())}export{v as debounceFun,s as formatVideoDuration,C as generateDynamicSign,o as generateUUID,g as getAtUserElement,y as getCookie,u as getCurrentSecondTime,T as getUserId,w as hashPassword,n as isClient,r as isMobileDevice,i as numToString,c as parseResolution,p as parseTextAtUserIds,t as randomString,S as removeCookie,m as replaceAtUserElement,h as replaceAtUserElementHtmlStr,l as secondToTime,x as setCookie,a as stringToNumber,_ as stripHtmlTags,E as updateUrlParams};

package/dist/utils/db.mjs

@@ -0,0 +1,2 @@
+
+let e=null;function t(){return e||(typeof window>`u`||!(`indexedDB`in window)?(e=Promise.reject(Error(`IndexedDB 在当前环境不可用。`)),e):(e=new Promise((e,t)=>{let n=window.indexedDB.open(`funhub`,1);n.onupgradeneeded=()=>{let e=n.result;e.objectStoreNames.contains(`kv`)||e.createObjectStore(`kv`)},n.onsuccess=()=>{e(n.result)},n.onerror=()=>{t(n.error??Error(`打开 IndexedDB 失败。`))}}),e))}function n(e){return new Promise((t,n)=>{e.onsuccess=()=>{t(e.result)},e.onerror=()=>{n(e.error??Error(`IndexedDB 请求失败。`))}})}function r(e){return new Promise((t,n)=>{e.oncomplete=()=>{t()},e.onerror=()=>{n(e.error??Error(`IndexedDB 事务失败。`))},e.onabort=()=>{n(e.error??Error(`IndexedDB 事务中止。`))}})}async function i(e){return await n((await t()).transaction(`kv`,`readonly`).objectStore(`kv`).get(e))??null}async function a(e,n){let i=(await t()).transaction(`kv`,`readwrite`);i.objectStore(`kv`).put(n,e),await r(i)}export{i as getItem,a as setItem};

package/dist/utils/decrypt-image-client.d.mts

@@ -0,0 +1,55 @@
+
+//#region utils/decrypt-image-client.d.ts
+/**
+ * 判断是否为加密图片链接（兼容 query）。
+ * @param url 图片 URL。
+ * @returns 是否为 `.bnc` / `.xxx` 资源。
+ */
+declare function isEncryptedImageUrl(url: string): boolean;
+/**
+ * 从图片 URL 推断可能的 MIME 类型（不依赖网络响应头）。
+ *
+ * 说明：
+ * - `.jpgxxx` / `.jpg.bnc` / `.jpgbnc` 等兼容形式，都会被识别为 `image/jpeg`
+ * - 无法推断时回退 `application/octet-stream`
+ * @param url 图片 URL。
+ * @returns 推断得到的 MIME 类型。
+ */
+declare function guessImageContentTypeFromUrl(url: string): string;
+/**
+ * 将「可能是加密」的图片 URL 解密/拉取为 ArrayBuffer。
+ *
+ * - bnc/xxx：走 worker 解密，并写入 IndexedDB 缓存
+ * - 非加密：直接 fetch 拉取原图 bytes（不会写缓存）
+ *
+ * 主要用于：
+ * - WebView 场景把 poster bytes 透出给原生（如 Dart 的 Uint8List）
+ * - 上传/分享等需要二进制内容的场景
+ * @param url 图片 URL。
+ * @param secretKey 可选解密密钥。
+ * @returns 成功时返回二进制与内容类型，失败时返回 `null`。
+ */
+declare function decryptImageToArrayBuffer(url: string, secretKey?: string): Promise<{
+  buffer: ArrayBuffer;
+  contentType: string;
+} | null>;
+/**
+ * 将图片 URL 解密/拉取为 Uint8Array（JS 侧可视为等价 Uint8List）。
+ * @param url 图片 URL。
+ * @param secretKey 可选解密密钥。
+ * @returns 成功时返回字节数组与内容类型，失败时返回 `null`。
+ */
+declare function decryptImageToUint8Array(url: string, secretKey?: string): Promise<{
+  bytes: Uint8Array;
+  contentType: string;
+} | null>;
+/**
+ * 仅处理 bnc 结尾的图片 URL：拉取密文 -> worker 解密 -> 返回本地 blobUrl
+ * - 非 bnc：原样返回（由调用方自行决定是否处理）
+ * @param url 图片 URL。
+ * @param secretKey 可选解密密钥。
+ * @returns 解密后的本地 blob URL，或原始 URL；失败时返回空字符串。
+ */
+declare function decryptImageUrl(url: string, secretKey?: string): Promise<string>;
+//#endregion
+export { decryptImageToArrayBuffer, decryptImageToUint8Array, decryptImageUrl, guessImageContentTypeFromUrl, isEncryptedImageUrl };

package/dist/utils/decrypt-image-client.mjs

@@ -0,0 +1,2 @@
+
+"use client";import{getItem as e,setItem as t}from"./db.mjs";import{createBncDecryptWorker as n}from"./decrypt.worker.mjs";import r from"./get-res-url.mjs";let i=null;function a(){if(typeof window>`u`)return null;if(i)return i;let e=[];function t(){let e={worker:n(),busy:!1,current:null},t=()=>{try{e.worker.terminate()}catch{}e.worker=n(),e.busy=!1,e.current=null,r(e)},r=e=>{e.worker.addEventListener(`message`,t=>{let n=t.data;if(!e.current||n?.id!==e.current.id)return;let{resolve:r}=e.current;e.current=null,e.busy=!1,r(n),d()}),e.worker.addEventListener(`error`,n=>{if(e.current){let{reject:t}=e.current;e.current=null,e.busy=!1,t(n)}t(),d()})};return r(e),e}for(let n=0;n<4;n++)e.push(t());return i=e,i}const o=[];function s(e){if(!e)return!1;let t=e.split(`?`)[0];return/bnc$/i.test(t)||/xxx$/i.test(t)}function c(e){let t=String(e||``).split(`?`)[0].toLowerCase().match(/\.(jpg|jpeg|png|gif|webp)(?:\.?(?:bnc|xxx))?$/i)?.[1];return t===`jpg`||t===`jpeg`?`image/jpeg`:t===`png`?`image/png`:t===`gif`?`image/gif`:t===`webp`?`image/webp`:`application/octet-stream`}async function l(n,i){if(!n?.trim())return null;if(s(n)){let r=await e(n);if(r instanceof ArrayBuffer)return{buffer:r,contentType:c(n)};let{buffer:a,contentType:o,error:s}=await f(n,i);return s?null:(await t(n,a),{buffer:a,contentType:o??c(n)})}let a=r(),o=n.startsWith(`http`)?n:n.startsWith(`/`)?a?`${a}${n}`:n:a?`${a}/${n}`:`/${n}`,l=await fetch(o);return l.ok?{buffer:await l.arrayBuffer(),contentType:l.headers.get(`content-type`)||c(n)}:null}async function u(e,t){let n=await l(e,t);return n?{bytes:new Uint8Array(n.buffer),contentType:n.contentType}:null}function d(){let e=a();if(e)for(let t of e){if(t.busy)continue;let e=o.shift();if(!e)return;t.busy=!0,t.current={id:e.id,resolve:e.resolve,reject:e.reject};let n={id:e.id,mode:`bnc-url`,url:e.url,apiRes:r(),secretKey:e.secretKey};t.worker.postMessage(n)}}function f(e,t){if(!a())return Promise.resolve({id:`no-worker`,buffer:new ArrayBuffer(0),error:`worker not available`});let n=typeof crypto<`u`&&`randomUUID`in crypto?crypto.randomUUID():`${Date.now()}-${Math.random().toString(16).slice(2)}`;return new Promise((r,i)=>{o.push({id:n,url:e,secretKey:t,resolve:r,reject:i}),d()})}async function p(n,r){let i=await e(n);if(i instanceof ArrayBuffer)return URL.createObjectURL(new Blob([i],{type:c(n)}));if(s(n)){let{buffer:e,contentType:i,error:a}=await f(n,r);return a?``:(await t(n,e),URL.createObjectURL(new Blob([e],{type:i??c(n)})))}else return n}export{l as decryptImageToArrayBuffer,u as decryptImageToUint8Array,p as decryptImageUrl,c as guessImageContentTypeFromUrl,s as isEncryptedImageUrl};

package/dist/utils/decrypt.worker.mjs

@@ -1,149 +1,45 @@
-const r = String.raw`/* @funhub/platform bnc decrypt worker (inline) */
-const DEFAULT_BNC_KEY = '525202f9149e061d';
 
-const AES_SBOX = [
-  99,124,119,123,242,107,111,197,48,1,103,43,254,215,171,118,202,130,201,125,
-  250,89,71,240,173,212,162,175,156,164,114,192,183,253,147,38,54,63,247,204,
-  52,165,229,241,113,216,49,21,4,199,35,195,24,150,5,154,7,18,128,226,235,39,
-  178,117,9,131,44,26,27,110,90,160,82,59,214,179,41,227,47,132,83,209,0,237,
-  32,252,177,91,106,203,190,57,74,76,88,207,208,239,170,251,67,77,51,133,69,
-  249,2,127,80,60,159,168,81,163,64,143,146,157,56,245,188,182,218,33,16,255,
-  243,210,205,12,19,236,95,151,68,23,196,167,126,61,100,93,25,115,96,129,79,
-  220,34,42,144,136,70,238,184,20,222,94,11,219,224,50,58,10,73,6,36,92,194,
-  211,172,98,145,149,228,121,231,200,55,109,141,213,78,169,108,86,244,234,101,
-  122,174,8,186,120,37,46,28,166,180,198,232,221,116,31,75,189,139,138,112,62,
-  181,102,72,3,246,14,97,53,87,185,134,193,29,158,225,248,152,17,105,217,142,
-  148,155,30,135,233,206,85,40,223,140,161,137,13,191,230,66,104,65,153,45,15,
-  176,84,187,22
-];
-
-const AES_INV_SBOX = [
-  82,9,106,213,48,54,165,56,191,64,163,158,129,243,215,251,124,227,57,130,155,
-  47,255,135,52,142,67,68,196,222,233,203,84,123,148,50,166,194,35,61,238,76,
-  149,11,66,250,195,78,8,46,161,102,40,217,36,178,118,91,162,73,109,139,209,
-  37,114,248,246,100,134,104,152,22,212,164,92,204,93,101,182,146,108,112,72,
-  80,253,237,185,218,94,21,70,87,167,141,157,132,144,216,171,0,140,188,211,10,
-  247,228,88,5,184,179,69,6,208,44,30,143,202,63,15,2,193,175,189,3,1,19,
-  138,107,58,145,17,65,79,103,220,234,151,242,207,206,240,180,230,115,150,172,
-  116,34,231,173,53,133,226,249,55,232,28,117,223,110,71,241,26,113,29,41,197,
-  137,111,183,98,14,170,24,190,27,252,86,62,75,198,210,121,32,154,219,192,254,
-  120,205,90,244,31,221,168,51,136,7,199,49,177,18,16,89,39,128,236,95,96,81,
-  127,169,25,181,74,13,45,229,122,159,147,201,156,239,160,224,59,77,174,42,
-  245,176,200,235,187,60,131,83,153,97,23,43,4,126,186,119,214,38,225,105,20,
-  99,85,33,12,125
-];
-
-const AES_RCON = [0x00,0x01,0x02,0x04,0x08,0x10,0x20,0x40,0x80,0x1b,0x36];
-
-const aesRotWord = (w) => ((w << 8) | (w >>> 24)) >>> 0;
-const aesSubWord = (w) =>
-  ((AES_SBOX[(w >>> 24) & 0xff] << 24) |
-    (AES_SBOX[(w >>> 16) & 0xff] << 16) |
-    (AES_SBOX[(w >>> 8) & 0xff] << 8) |
-    AES_SBOX[w & 0xff]) >>> 0;
-
-const aesKeyExpansion = (keyBytes) => {
-  const Nk = 4, Nb = 4, Nr = 10;
-  const w = new Uint32Array(Nb * (Nr + 1));
-  for (let i = 0; i < Nk; i++) {
-    w[i] = (keyBytes[4*i] << 24) | (keyBytes[4*i+1] << 16) | (keyBytes[4*i+2] << 8) | keyBytes[4*i+3];
-  }
-  for (let i = Nk; i < Nb * (Nr + 1); i++) {
-    let temp = w[i - 1];
-    if (i % Nk === 0) temp = aesSubWord(aesRotWord(temp)) ^ (AES_RCON[i / Nk] << 24);
-    w[i] = (w[i - Nk] ^ temp) >>> 0;
-  }
-  return { w, Nr };
-};
+const e=String.raw`/* @funhub/platform bnc decrypt worker (inline / wasm) */
+const DEFAULT_BNC_KEY = '525202f9149e061d';
+const ORIGIN = "__ORIGIN__"; // injected
 
-const aesAddRoundKey = (state, w, round) => {
-  for (let c = 0; c < 4; c++) {
-    const word = w[round * 4 + c];
-    state[0 + 4*c] ^= (word >>> 24) & 0xff;
-    state[1 + 4*c] ^= (word >>> 16) & 0xff;
-    state[2 + 4*c] ^= (word >>> 8) & 0xff;
-    state[3 + 4*c] ^= word & 0xff;
-  }
-};
+// ===== WASM loader (classic worker) =====
+importScripts(ORIGIN + '/wasm/bnc_crypto_wasm.js');
 
-const aesInvSubBytes = (state) => { for (let i = 0; i < 16; i++) state[i] = AES_INV_SBOX[state[i]]; };
-const aesInvShiftRows = (state) => {
-  const t = new Uint8Array(16); t.set(state);
-  state[0]=t[0]; state[4]=t[4]; state[8]=t[8]; state[12]=t[12];
-  state[1]=t[13]; state[5]=t[1]; state[9]=t[5]; state[13]=t[9];
-  state[2]=t[10]; state[6]=t[14]; state[10]=t[2]; state[14]=t[6];
-  state[3]=t[7]; state[7]=t[11]; state[11]=t[15]; state[15]=t[3];
-};
+const wasmBindgen = self.wasm_bindgen || (typeof wasm_bindgen !== 'undefined' ? wasm_bindgen : null);
 
-const aesGmul = (aIn, bIn) => {
-  let a = aIn, b = bIn, p = 0;
-  for (let counter = 0; counter < 8; counter++) {
-    if (b & 1) p ^= a;
-    const hiBitSet = a & 0x80;
-    a = (a << 1) & 0xff;
-    if (hiBitSet) a ^= 0x1b;
-    b >>>= 1;
+let __wasmReady = null;
+async function ensureWasmReady() {
+  if (!wasmBindgen) {
+    throw new Error('wasm_bindgen not available');
   }
-  return p;
-};
-
-const aesInvMixColumns = (state) => {
-  for (let c = 0; c < 4; c++) {
-    const i = 4*c;
-    const s0 = state[i], s1 = state[i+1], s2 = state[i+2], s3 = state[i+3];
-    state[i]   = (aesGmul(s0,0x0e)^aesGmul(s1,0x0b)^aesGmul(s2,0x0d)^aesGmul(s3,0x09)) & 0xff;
-    state[i+1] = (aesGmul(s0,0x09)^aesGmul(s1,0x0e)^aesGmul(s2,0x0b)^aesGmul(s3,0x0d)) & 0xff;
-    state[i+2] = (aesGmul(s0,0x0d)^aesGmul(s1,0x09)^aesGmul(s2,0x0e)^aesGmul(s3,0x0b)) & 0xff;
-    state[i+3] = (aesGmul(s0,0x0b)^aesGmul(s1,0x0d)^aesGmul(s2,0x09)^aesGmul(s3,0x0e)) & 0xff;
+  if (!__wasmReady) {
+    __wasmReady = wasmBindgen(ORIGIN + '/wasm/bnc_crypto_wasm_bg.wasm');
   }
-};
-
-const aesDecryptBlock = (input, w, Nr) => {
-  const state = new Uint8Array(16); state.set(input);
-  aesAddRoundKey(state, w, Nr);
-  for (let round = Nr - 1; round > 0; round--) {
-    aesInvShiftRows(state);
-    aesInvSubBytes(state);
-    aesAddRoundKey(state, w, round);
-    aesInvMixColumns(state);
-  }
-  aesInvShiftRows(state);
-  aesInvSubBytes(state);
-  aesAddRoundKey(state, w, 0);
-  return state;
-};
+  await __wasmReady;
+}
 
-const pkcs7UnpadSafe = (bytes) => {
-  if (!bytes.length) return bytes;
-  const pad = bytes[bytes.length - 1];
-  if (pad < 1 || pad > 16) return bytes;
-  for (let i = bytes.length - pad; i < bytes.length; i++) if (bytes[i] !== pad) return bytes;
-  return bytes.subarray(0, bytes.length - pad);
-};
+// ===== key parser =====
+function hexToBytes16(hex) {
+  const clean = (hex.startsWith('0x') || hex.startsWith('0X')) ? hex.slice(2) : hex;
+  if (clean.length !== 32) throw new Error('hex key must be 32 chars');
+  const out = new Uint8Array(16);
+  for (let i = 0; i < 16; i++) out[i] = parseInt(clean.slice(i * 2, i * 2 + 2), 16);
+  return out;
+}
 
-const aes128EcbDecrypt = (cipherBytes, keyBytes) => {
-  if (cipherBytes.byteLength % 16 !== 0) throw new Error('ciphertext length is not multiple of block size');
-  const { w, Nr } = aesKeyExpansion(keyBytes);
-  const out = new Uint8Array(cipherBytes.byteLength);
-  for (let offset = 0; offset < cipherBytes.byteLength; offset += 16) {
-    const block = cipherBytes.subarray(offset, offset + 16);
-    const plainBlock = aesDecryptBlock(block, w, Nr);
-    out.set(plainBlock, offset);
-  }
-  return pkcs7UnpadSafe(out);
-};
+function toKeyBytes(keyStr) {
+  const k = keyStr || DEFAULT_BNC_KEY;
+  if (/^(0x)?[0-9a-fA-F]{32}$/.test(k)) return hexToBytes16(k);
 
-const decryptBncBuffer = (buffer, secretKey) => {
-  const cipherBytes = new Uint8Array(buffer);
-  const keyStr = secretKey || DEFAULT_BNC_KEY;
-  const keyBytes = new TextEncoder().encode(keyStr);
-  const decryptedBytes = aes128EcbDecrypt(cipherBytes, keyBytes);
-  const out = new ArrayBuffer(decryptedBytes.byteLength);
-  new Uint8Array(out).set(decryptedBytes);
-  return out;
-};
+  const bytes = new TextEncoder().encode(k);
+  if (bytes.length !== 16) throw new Error('secretKey must be 16 ascii bytes or 32 hex chars');
+  return bytes;
+}
 
-const normalizeBncCipherUrl = (url) => url.replace(/\\.(png|jpg|jpeg|gif|webp)\\.?((?:bnc))$/i, '.bnc');
+// ===== helpers =====
+const normalizeBncCipherUrl = (url) =>
+  String(url || '').replace(/\\.(png|jpg|jpeg|gif|webp)\\.?((?:bnc))$/i, '.bnc');
 
 const getMimeTypeFromBncUrl = (url) => {
   const lower = String(url || '').toLowerCase();
@@ -157,50 +53,75 @@ const getMimeTypeFromBncUrl = (url) => {
 };
 
 const toFetchableUrl = (url, apiRes) => {
- return url
+  if (!url) return "";
+  if (String(url).endsWith('xxx')) return String(apiRes || '') + String(url);
+
+  const baseApi = apiRes;
+  const rel = String(url);
+  const fullUrl = baseApi ? (baseApi + "/" + rel) : ("/" + rel);
+
+  const lastSlash = fullUrl.lastIndexOf("/");
+  const base = fullUrl.slice(0, lastSlash + 1);
+  let filename = fullUrl.slice(lastSlash + 1);
+
+  filename = filename.replace(/.(jpg|jpeg|png|webp|gif|avif)bnc$/i, ".bnc");
+  return base + filename;
 };
 
+// ===== core decrypt (WASM) =====
+async function decryptBncArrayBuffer(buffer, secretKey) {
+  await ensureWasmReady();
+
+  const cipherBytes = new Uint8Array(buffer);
+  const keyBytes = toKeyBytes(secretKey);
+
+  const plain = wasmBindgen.aes128_ecb_decrypt_pkcs7(cipherBytes, keyBytes);
+  const out = plain.buffer.slice(plain.byteOffset, plain.byteOffset + plain.byteLength);
+  return out;
+}
+
 self.onmessage = async (event) => {
+  const data = event.data || {};
+  const id = data.id || 'unknown';
+
   try {
-    const data = event.data || {};
-    const id = data.id || 'unknown';
     const mode = data.mode;
-    let out;
-    let contentType;
 
     if (mode === 'bnc-url') {
       const url = data.url;
       const apiRes = data.apiRes;
       const secretKey = data.secretKey;
+
       if (!url) throw new Error('missing url');
+
       const cipherUrl = normalizeBncCipherUrl(url);
       const fetchUrl = toFetchableUrl(cipherUrl, apiRes);
+
       const res = await fetch(fetchUrl);
       if (!res.ok) throw new Error('fetch failed: ' + res.status);
-      out = decryptBncBuffer(await res.arrayBuffer(), secretKey);
-      contentType = getMimeTypeFromBncUrl(url);
-    } else if (mode === 'bnc-buffer') {
+
+      const buf = await res.arrayBuffer();
+      const out = await decryptBncArrayBuffer(buf, secretKey);
+      const contentType = getMimeTypeFromBncUrl(url);
+
+      self.postMessage({ id, buffer: out, contentType }, [out]);
+      return;
+    }
+
+    if (mode === 'bnc-buffer') {
       const buffer = data.buffer;
+      const secretKey = data.secretKey;
+
       if (!(buffer instanceof ArrayBuffer)) throw new Error('missing buffer');
-      out = decryptBncBuffer(buffer, data.secretKey);
-    } else {
-      throw new Error('unknown mode');
+
+      const out = await decryptBncArrayBuffer(buffer, secretKey);
+      self.postMessage({ id, buffer: out }, [out]);
+      return;
     }
 
-    const payload = { id, buffer: out, contentType };
-    self.postMessage(payload, [payload.buffer]);
+    throw new Error('unknown mode');
   } catch (err) {
-    const id = (event && event.data && event.data.id) ? event.data.id : 'unknown';
     self.postMessage({ id, error: (err && err.message) ? err.message : String(err) });
   }
 };
-`;
-function n() {
-  if (typeof window > "u")
-    throw new TypeError("createBncDecryptWorker() must be called in browser runtime");
-  const t = new Blob([r], { type: "text/javascript" }), e = URL.createObjectURL(t), s = new Worker(e);
-  return setTimeout(() => URL.revokeObjectURL(e), 0), s;
-}
-export {
-  n as createBncDecryptWorker
-};
+`;function t(){if(typeof window>`u`)throw TypeError(`createBncDecryptWorker() must be called in browser runtime`);let t=window.location.origin,n=e.replaceAll(`__ORIGIN__`,t),r=new Blob([n],{type:`text/javascript`}),i=URL.createObjectURL(r),a=new Worker(i);return setTimeout(()=>URL.revokeObjectURL(i),0),a}export{t as createBncDecryptWorker};

package/dist/utils/event-bus.d.mts

@@ -0,0 +1,13 @@
+
+//#region utils/event-bus.d.ts
+type EventHandler = (...args: any[]) => void;
+declare class EventBus {
+  private events;
+  on(event: string, handler: EventHandler): void;
+  off(event: string, handler: EventHandler): void;
+  emit(event: string, ...args: any[]): void;
+  once(event: string, handler: EventHandler): void;
+}
+declare const eventBus: EventBus;
+//#endregion
+export { eventBus };

package/dist/utils/event-bus.mjs

@@ -0,0 +1,2 @@
+
+"use client";const e=new class{constructor(){this.events={}}on(e,t){this.events[e]||(this.events[e]=[]),this.events[e].push(t)}off(e,t){let n=this.events[e];n&&(this.events[e]=n.filter(e=>e!==t))}emit(e,...t){let n=this.events[e];n&&n.forEach(e=>e(...t))}once(e,t){let n=(...r)=>{t(...r),this.off(e,n)};this.on(e,n)}};export{e as default};

package/dist/utils/follow-service.d.mts

@@ -0,0 +1,58 @@
+
+import { CommunityCheckFollowResponse, CommunityFollowResponse, CommunityUnfollowResponse, PostApiInteractionCheckFollowReqBody, PostApiInteractionFollowReqBody, PostApiInteractionUnfollowReqBody } from "../types.mjs";
+
+//#region utils/follow-service.d.ts
+/**
+ * 关注用户
+ * @param params 关注参数
+ * @returns 关注结果
+ */
+declare function followUser(params: PostApiInteractionFollowReqBody): Promise<{
+  success: boolean;
+  message: string;
+  data: CommunityFollowResponse;
+} | {
+  success: boolean;
+  message: string;
+  data: null;
+}>;
+/**
+ * 取消关注用户
+ * @param params 取消关注参数
+ * @returns 取消关注结果
+ */
+declare function unfollowUser(params: PostApiInteractionUnfollowReqBody): Promise<{
+  success: boolean;
+  message: string;
+  data: CommunityUnfollowResponse;
+} | {
+  success: boolean;
+  message: string;
+  data: null;
+}>;
+/**
+ * 检查是否关注用户
+ * @param data 检查关注参数
+ * @returns 关注状态
+ */
+declare function checkFollowStatus(data: PostApiInteractionCheckFollowReqBody): Promise<{
+  success: boolean;
+  message: string;
+  data: CommunityCheckFollowResponse;
+} | {
+  success: boolean;
+  message: string;
+  data: null;
+}>;
+/**
+ * 获取应用ID（从环境变量或配置中获取）
+ * @returns 应用ID
+ */
+declare function getAppId(): number;
+/**
+ * 获取当前用户ID（从用户状态或token中获取）
+ * @returns 用户ID
+ */
+declare function getCurrentUserId(): string;
+//#endregion
+export { checkFollowStatus, followUser, getAppId, getCurrentUserId, unfollowUser };

package/dist/utils/follow-service.mjs

@@ -0,0 +1,2 @@
+
+import{useUserStore as e}from"../store/modules/user-store.mjs";import{pInteractionCheckFollow as t,pInteractionFollow as n,pInteractionUnfollow as r}from"../service/generated/client.mjs";async function i(e){try{let t=await n(e);return{success:t.code===0,message:t.message||`关注成功`,data:t.data}}catch(e){return console.error(`关注用户失败:`,e),{success:!1,message:`关注失败，请稍后重试`,data:null}}}async function a(e){try{let t=await r(e);return{success:t.code===0,message:t.message||`取消关注成功`,data:t.data}}catch(e){return console.error(`取消关注用户失败:`,e),{success:!1,message:`取消关注失败，请稍后重试`,data:null}}}async function o(e){try{let n=await t(e);return{success:n.code===0,message:n.message||`查询成功`,data:n.data}}catch(e){return console.error(`检查关注状态失败:`,e),{success:!1,message:`查询失败，请稍后重试`,data:null}}}function s(){return 0}function c(){return e.getState().userId||e.getState().userInfo?.userId}export{o as checkFollowStatus,i as followUser,s as getAppId,c as getCurrentUserId,a as unfollowUser};

package/dist/utils/get-res-url.d.mts

@@ -0,0 +1,11 @@
+
+//#region utils/get-res-url.d.ts
+/**
+ * 获取资源URL
+ * - 服务端（SSG/SSR）：直接返回默认CDN
+ * - 客户端：初始时返回默认CDN，测速完成后自动切换到最快的CDN
+ * @returns CDN URL
+ */
+declare function getResUrl(): string;
+//#endregion
+export { getResUrl };

package/dist/utils/get-res-url.mjs

@@ -0,0 +1,2 @@
+
+let e,t,n=!1;function r(){return typeof window<`u`}function i(e,t=2e3){return new Promise((n,r)=>{let i=new XMLHttpRequest,a=performance.now(),o=!1,s=window.setTimeout(()=>{o||(o=!0,i.abort(),r(Error(`timeout`)))},t);i.onreadystatechange=()=>{if(!o&&i.readyState===2){o=!0,clearTimeout(s);let e=performance.now()-a;i.abort(),n(e)}},i.onerror=()=>{o||(o=!0,clearTimeout(s),r(Error(`network error`)))},i.open(`GET`,e,!0),i.send()})}async function a(e,t){if(!t||t.length===0)return``;let n=t.map(t=>{let n=new URL(t+e);return n.searchParams.set(`_t`,String(Date.now())),n.toString()}),r=(await Promise.allSettled(n.map(e=>i(e)))).map((e,t)=>({r:e,i:t})).filter(e=>e.r.status===`fulfilled`).map(e=>({url:n[e.i],ms:e.r.value})).sort((e,t)=>e.ms-t.ms);if(!r.length)return``;try{return new URL(r[0].url).origin}catch(e){return console.warn(`Failed to parse fastest host URL:`,e),``}}function o(){if(!t&&(t=process.env.NEXT_PUBLIC_DEFAULT_CDN||``,!t))return console.warn(`NEXT_PUBLIC_DEFAULT_CDN is not configured`),``;if(!r())return t;let i=process.env.NEXT_PUBLIC_CDN_LIST;if(!i)return t;let o=i.split(`,`).filter(Boolean);return o.length===0?t:(!n&&o.length>0&&(n=!0,a(`/md-204/dcc-file/bd/bdacfcd4c9ff70353971a79dd9e8cb8c-small.bnc`,o).then(t=>{e=t}).catch(()=>{e=t})),e||t||``)}export{o as default};

package/dist/utils/helper.d.mts

@@ -0,0 +1,24 @@
+
+//#region utils/helper.d.ts
+/**
+ * 将像素值转换为 vw（基于 430 宽设计稿）。
+ * @param px 像素值。
+ * @returns 转换后的 vw 字符串。
+ */
+declare function pxToVw(px: number): string;
+/**
+ * 规范化 className，去除首尾空格
+ * @param className - 类名字符串
+ * @returns 规范化后的类名，如果为空则返回 undefined
+ */
+declare function normalizeClassName(className?: string): string | undefined;
+/**
+ * 禁用页面滚动
+ */
+declare function disablePageScroll(): void;
+/**
+ * 启用页面滚动
+ */
+declare function enablePageScroll(): void;
+//#endregion
+export { disablePageScroll, enablePageScroll, normalizeClassName, pxToVw };

package/dist/utils/helper.mjs

@@ -0,0 +1,2 @@
+
+function e(e){return`${(e/430*100).toFixed(3)}vw`}function t(e){if(e)return e.trim()||void 0}function n(){if(typeof document<`u`){let e=document.getElementById(`app-scroll-container`);e&&(e.style.overflow=`hidden`),document.body.style.overflow=`hidden`}}function r(){if(typeof document<`u`){let e=document.getElementById(`app-scroll-container`);e&&(e.style.overflow=``),document.body.style.overflow=``}}export{n as disablePageScroll,r as enablePageScroll,t as normalizeClassName,e as pxToVw};

package/dist/utils/http.d.mts

@@ -0,0 +1,44 @@
+
+//#region utils/http.d.ts
+type RequestMethod = 'GET' | 'POST' | 'PUT' | 'DELETE' | 'PATCH' | 'HEAD' | 'OPTIONS';
+interface RequestConfig {
+  url: string;
+  method?: RequestMethod;
+  headers?: Record<string, string>;
+  data?: any;
+  params?: Record<string, any>;
+  timeout?: number;
+  cache?: RequestCache;
+  revalidate?: number | false;
+  tags?: string[];
+  signal?: AbortSignal;
+}
+type ExtractResponsePayload<T> = T extends {
+  data?: infer D;
+} ? D : T;
+interface ResponseData<T = any> {
+  code: number;
+  message: string;
+  data: ExtractResponsePayload<T>;
+}
+declare class HttpError extends Error {
+  status: number;
+  response?: any;
+  constructor(status: number, message: string, response?: any);
+}
+declare class HttpClient {
+  private baseURL;
+  private defaultConfig;
+  private buildHeaders;
+  private buildURL;
+  private executeOnce;
+  request<T = any>(input: RequestConfig): Promise<ResponseData<T>>;
+  get<T = any>(url: string, config?: Omit<RequestConfig, 'method'>): Promise<ResponseData<T>>;
+  post<T = any>(url: string, config?: Omit<RequestConfig, 'method'>): Promise<ResponseData<T>>;
+  put<T = any>(url: string, config?: Omit<RequestConfig, 'method'>): Promise<ResponseData<T>>;
+  delete<T = any>(url: string, config?: Omit<RequestConfig, 'method'>): Promise<ResponseData<T>>;
+  patch<T = any>(url: string, config?: Omit<RequestConfig, 'method'>): Promise<ResponseData<T>>;
+}
+declare const httpClient: HttpClient;
+//#endregion
+export { HttpClient, HttpError, RequestConfig, RequestMethod, ResponseData, httpClient };