@pnt-team/pnt-component-frontend 0.0.92 → 0.0.96

package/lib/cjs/hooks/useHighSecurity.js

@@ -25,47 +25,175 @@ module.exports = __toCommonJS(useHighSecurity_exports);
 var import_api = require("../api");
 var import_config = require("../config");
 var import_react = require("react");
+var buildCacheKey = (gameId, env, key) => `${gameId}:${env}:${key}`;
 var securityCache = /* @__PURE__ */ new Map();
-var useHighSecurity = () => {
-  const { http } = (0, import_config.usePntConfig)();
-  const [securityData, setSecurityData] = (0, import_react.useState)(
-    () => {
-      const cached = {};
-      securityCache.forEach((value, key) => {
-        cached[key] = value;
-      });
-      return cached;
+var inflightRequests = /* @__PURE__ */ new Map();
+var listeners = /* @__PURE__ */ new Set();
+var emitChange = () => {
+  listeners.forEach((listener) => listener());
+};
+var subscribe = (listener) => {
+  listeners.add(listener);
+  return () => {
+    listeners.delete(listener);
+  };
+};
+var getSnapshot = () => securityCache;
+var setEntries = (gameId, env, items) => {
+  if (!items.length)
+    return;
+  const next = new Map(securityCache);
+  items.forEach((item) => {
+    next.set(buildCacheKey(gameId, env, item.key), item.value);
+  });
+  securityCache = next;
+  emitChange();
+};
+var matchFilter = (cacheKey, filter) => {
+  if (!filter || filter.gameId === void 0 && filter.env === void 0) {
+    return true;
+  }
+  const parts = cacheKey.split(":");
+  const [cachedGameId, cachedEnv] = parts;
+  if (filter.gameId !== void 0 && cachedGameId !== String(filter.gameId)) {
+    return false;
+  }
+  if (filter.env !== void 0 && cachedEnv !== String(filter.env)) {
+    return false;
+  }
+  return true;
+};
+var clearEntries = (filter) => {
+  const next = /* @__PURE__ */ new Map();
+  securityCache.forEach((value, key) => {
+    if (!matchFilter(key, filter)) {
+      next.set(key, value);
     }
+  });
+  if (next.size !== securityCache.size) {
+    securityCache = next;
+    emitChange();
+  }
+};
+var getDefaultPageId = () => typeof window !== "undefined" && window.location ? window.location.pathname : "";
+var useHighSecurity = (options) => {
+  const { http } = (0, import_config.usePntConfig)();
+  const snapshot = (0, import_react.useSyncExternalStore)(subscribe, getSnapshot, getSnapshot);
+  const scopeGameId = (options == null ? void 0 : options.gameId) === void 0 ? void 0 : String(options.gameId);
+  const scopeEnv = (options == null ? void 0 : options.env) === void 0 ? void 0 : String(options.env);
+  const hasScope = scopeGameId !== void 0 && scopeEnv !== void 0;
+  const securityData = (0, import_react.useMemo)(() => {
+    if (!hasScope)
+      return {};
+    const prefix = `${scopeGameId}:${scopeEnv}:`;
+    const result = {};
+    snapshot.forEach((value, cacheKey) => {
+      if (cacheKey.startsWith(prefix)) {
+        result[cacheKey.slice(prefix.length)] = value;
+      }
+    });
+    return result;
+  }, [snapshot, hasScope, scopeGameId, scopeEnv]);
+  const isUnlocked = (0, import_react.useCallback)(
+    (key) => {
+      if (!hasScope)
+        return false;
+      return snapshot.has(buildCacheKey(scopeGameId, scopeEnv, key));
+    },
+    [snapshot, hasScope, scopeGameId, scopeEnv]
   );
-  const requestSecurityData = async ({
-    gameId,
-    param,
-    env,
-    pageId
-  }) => {
-    const body = {
-      game_id: Number(gameId),
-      env: Number(env),
-      page_id: pageId || location.pathname,
-      param: param.map(
-        (i) => ({
-          key: i.key,
-          value: i.value
-        })
-      )
-    };
-    const result = await (0, import_api.businessGameInfoHighSecurityDecrypt)(http, body);
-    if (result.code === 0 && result.data) {
-      const data = result.data;
-      data.forEach((item) => {
-        securityCache.set(item.key, item.value);
+  const requestSecurityData = (0, import_react.useCallback)(
+    async ({
+      gameId,
+      env,
+      pageId,
+      param
+    }) => {
+      const gid = String(gameId);
+      const eid = String(env);
+      const result = new Array(
+        param.length
+      );
+      const missing = [];
+      const missingIndexes = [];
+      param.forEach((item, index) => {
+        const cached = snapshot.get(buildCacheKey(gid, eid, item.key));
+        if (cached !== void 0) {
+          result[index] = { key: item.key, value: cached };
+        } else {
+          missing.push({ key: item.key, value: item.value });
+          missingIndexes.push(index);
+        }
       });
-      setSecurityData(Object.fromEntries(securityCache));
-    }
-  };
+      if (!missing.length) {
+        return result.filter(
+          (item) => item !== void 0
+        );
+      }
+      const body = {
+        game_id: Number(gameId),
+        env: Number(env),
+        page_id: pageId || getDefaultPageId(),
+        param: missing
+      };
+      const requestKey = `${gid}:${eid}:${missing.map((item) => `${item.key}
${item.value}`).join("")}`;
+      const existing = inflightRequests.get(requestKey);
+      if (existing)
+        return existing;
+      const promise = (async () => {
+        var _a;
+        try {
+          const res = await (0, import_api.businessGameInfoHighSecurityDecrypt)(http, body);
+          if (res.code === 0 && Array.isArray(res.data)) {
+            const decrypted = res.data.map((raw) => {
+              var _a2;
+              if (raw && typeof raw === "object" && "key" in raw) {
+                const item = raw;
+                if (typeof item.key === "string") {
+                  return { key: item.key, value: String((_a2 = item.value) != null ? _a2 : "") };
+                }
+              }
+              return null;
+            }).filter((item) => item !== null);
+            setEntries(gid, eid, decrypted);
+            decrypted.forEach((item) => {
+              const index = missingIndexes.find(
+                (i) => param[i].key === item.key
+              );
+              if (index !== void 0)
+                result[index] = item;
+            });
+          } else {
+            console.warn(
+              "[pnt-component-frontend] high-security-decrypt 解锁失败",
+              (_a = res == null ? void 0 : res.msg) != null ? _a : res == null ? void 0 : res.code
+            );
+          }
+        } catch (error) {
+          console.warn(
+            "[pnt-component-frontend] high-security-decrypt 请求异常",
+            error
+          );
+        } finally {
+          inflightRequests.delete(requestKey);
+        }
+        return result.filter(
+          (item) => item !== void 0
+        );
+      })();
+      inflightRequests.set(requestKey, promise);
+      return promise;
+    },
+    [http, snapshot]
+  );
+  const clearSecurityData = (0, import_react.useCallback)((filter) => {
+    clearEntries(filter);
+  }, []);
   return {
     securityData,
-    requestSecurityData
+    requestSecurityData,
+    clearSecurityData,
+    isUnlocked
   };
 };
 // Annotate the CommonJS export names for ESM import in node:

package/lib/cjs/index.d.ts

@@ -2,4 +2,10 @@ export { PntProvider, usePntConfig, type PntConfig, type commonEesType, } from '
 export { default as PntImage } from './components/PntImage';
 export { default as PntBusinessSelect } from './components/PntBusinessSelect';
 export { default as PntSecureBox } from './components/PntSecureBox';
+export { default as PntUpload } from './components/PntUpload';
+export type { PntUploadErrorPhase, PntUploadProps, PntUploadTexts, } from './components/PntUpload';
+export { createPntCosUploader, normalizeSnakeCredential, default as usePntCosUploader, type CosScene, type FileNameStrategy, type GetCosCredentialParams, type NormalizeCredential, type NormalizedCosCredential, type PntCosRequestOverrides, type PntCosUploadOptions, type PntCosUploadResult, type PntCosUploader as PntCosUploaderInstance, } from './components/PntCosUploader';
+export { useHighSecurity } from './hooks/useHighSecurity';
+export type { ClearSecurityDataFilter, HighSecurityParamItem, HighSecurityRequestParams, UseHighSecurityOptions, UseHighSecurityResult, } from './hooks/useHighSecurity';
+export { isSecurityData } from './utils';
 export { default as PntGeneralLayout } from './components/PntGeneralLayout';

package/lib/cjs/index.js

@@ -34,13 +34,23 @@ __export(src_exports, {
   PntImage: () => import_PntImage.default,
   PntProvider: () => import_config.PntProvider,
   PntSecureBox: () => import_PntSecureBox.default,
-  usePntConfig: () => import_config.usePntConfig
+  PntUpload: () => import_PntUpload.default,
+  createPntCosUploader: () => import_PntCosUploader.createPntCosUploader,
+  isSecurityData: () => import_utils.isSecurityData,
+  normalizeSnakeCredential: () => import_PntCosUploader.normalizeSnakeCredential,
+  useHighSecurity: () => import_useHighSecurity.useHighSecurity,
+  usePntConfig: () => import_config.usePntConfig,
+  usePntCosUploader: () => import_PntCosUploader.default
 });
 module.exports = __toCommonJS(src_exports);
 var import_config = require("./config");
 var import_PntImage = __toESM(require("./components/PntImage"));
 var import_PntBusinessSelect = __toESM(require("./components/PntBusinessSelect"));
 var import_PntSecureBox = __toESM(require("./components/PntSecureBox"));
+var import_PntUpload = __toESM(require("./components/PntUpload"));
+var import_PntCosUploader = __toESM(require("./components/PntCosUploader"));
+var import_useHighSecurity = require("./hooks/useHighSecurity");
+var import_utils = require("./utils");
 var import_PntGeneralLayout = __toESM(require("./components/PntGeneralLayout"));
 // Annotate the CommonJS export names for ESM import in node:
 0 && (module.exports = {
@@ -49,5 +59,11 @@ var import_PntGeneralLayout = __toESM(require("./components/PntGeneralLayout"));
   PntImage,
   PntProvider,
   PntSecureBox,
-  usePntConfig
+  PntUpload,
+  createPntCosUploader,
+  isSecurityData,
+  normalizeSnakeCredential,
+  useHighSecurity,
+  usePntConfig,
+  usePntCosUploader
 });

package/lib/esm/api/cos.d.ts

@@ -0,0 +1,103 @@
+import type { AxiosInstance } from 'axios';
+/**
+ * 归一化后的 COS 临时凭证
+ * @description 各后端接口字段命名不统一（snake/camel），组件库内部统一为 camelCase
+ */
+export interface NormalizedCosCredential {
+    /** COS 存储桶 */
+    bucket: string;
+    /** COS 地域 */
+    region: string;
+    /** 临时密钥 ID */
+    secretId: string;
+    /** 临时密钥 Key */
+    secretKey: string;
+    /** 临时会话令牌 */
+    sessionToken: string;
+    /** 凭证生效时间（秒） */
+    startTime: number;
+    /** 凭证过期时间（秒） */
+    expiredTime: number;
+    /**
+     * 业务路径映射
+     * @description 后端按业务类型返回的可写路径 map；消费方按 pathKey 选取
+     */
+    path?: Record<string, string>;
+    /**
+     * 受控目录前缀（SDK 定制场景返回）
+     * @description 前端在该前缀下自行拼接文件名；可与 pathKey 继续拼接子目录
+     */
+    filePath?: string;
+    /**
+     * CDN 访问域名（不含尾斜杠）
+     * @description SDK 定制场景返回 cdn_url；通用场景无此字段时组件按 COS Location 拼接
+     */
+    cosHost?: string;
+}
+/**
+ * 通用 COS 凭证响应（snake_case，pnt-tools / account-business）
+ */
+interface SnakeCosCredential {
+    bucket: string;
+    region: string;
+    secret_id: string;
+    secret_key: string;
+    token: string;
+    start_time: number;
+    expired_time: number;
+    path?: Record<string, string>;
+}
+/**
+ * 内置业务场景
+ * @description 决定走哪个后端凭证接口
+ * - default: 通用上传（GET /v2/business/operation/get-cos-temp-token）
+ * - default_download: 通用下载/上传（POST /v2/business/operation/get-download-cos-temp-token，snake_case）
+ * - sdk_customize: SDK 定制服务（POST /internal/sdk_customize/upload_token，含 cdn_url/file_path）
+ * - ai_translate: AI 翻译服务（POST /business/aiTranslate/import/cosToken，camelCase）
+ */
+export type CosScene = 'default' | 'default_download' | 'sdk_customize' | 'ai_translate' | (string & Record<never, never>);
+/**
+ * 凭证获取参数
+ */
+export interface GetCosCredentialParams {
+    /** 业务场景 */
+    scene: CosScene;
+    /** 业务类型路径 key（透传到后端 path map 选取；sdk_customize 场景作为受控目录下的子目录） */
+    pathKey?: string;
+    /**
+     * 业务上下文参数（gameId/env/updType 等，按 scene 不同传递）
+     * @description default/default_download 场景下 gameId 会自动映射到请求头 x-service-type，
+     * 其余字段透传到 query/body；ai_translate 场景整体透传到 body
+     */
+    context?: Record<string, string | number>;
+    /** 文件大小（字节），后端用于校验配额 */
+    contentLength?: number;
+    /** 已上传文件 URL/Key（下载场景使用） */
+    fileUrl?: string;
+    /**
+     * 网关 audience
+     * @default '/player-network'
+     * @description 账号管理等子系统需覆盖为对应 audience（如 '/laas-pnt'）；
+     * 消费方注入的 http 实例若已统一追加 audience，URL 上存在该参数时拦截器不会重复追加
+     */
+    audience?: string;
+}
+/**
+ * 自定义原始响应归一化函数
+ * @description 后端返回字段不符合内置 scene 约定时使用；入参为后端响应的原始 data
+ */
+export type NormalizeCredential = (raw: unknown) => NormalizedCosCredential;
+/**
+ * snake_case 凭证归一化（导出供 getCredential 自定义逃生舱复用）
+ * @description 消费方自行请求凭证（如项目 http 实例为非标准签名）时，
+ * 可在 getCredential 内调用本函数把后端 data 转为组件库统一结构
+ */
+export declare const normalizeSnakeCredential: (raw: SnakeCosCredential) => NormalizedCosCredential;
+/**
+ * 获取 COS 临时凭证（按 scene 路由到不同后端接口，内部归一化字段命名）
+ * @param http 由 PntProvider 注入的 axios 实例
+ * @param params 凭证获取参数
+ * @param customNormalize 可选的原始响应自定义归一化
+ */
+export declare const fetchCosCredential: (http: AxiosInstance, params: GetCosCredentialParams, customNormalize?: NormalizeCredential) => Promise<NormalizedCosCredential>;
+export {};

package/lib/esm/api/cos.js

@@ -0,0 +1,189 @@
+// ==========================================
+// COS 临时凭证 - 归一化类型
+// 组件库内部统一为 camelCase；各后端接口的 snake_case / camelCase
+// 在 fetchCosCredential 内部归一化为此结构后返回
+// ==========================================
+
+/**
+ * 归一化后的 COS 临时凭证
+ * @description 各后端接口字段命名不统一（snake/camel），组件库内部统一为 camelCase
+ */
+
+// ==========================================
+// 各后端接口的原始响应类型
+// ==========================================
+
+/**
+ * 通用 COS 凭证响应（snake_case，pnt-tools / account-business）
+ */
+
+/**
+ * player-network aiTranslate COS 凭证响应（camelCase）
+ */
+
+/**
+ * SDK 定制服务上传凭证响应（snake_case，含 file_path / cdn_url）
+ */
+
+// ==========================================
+// Scene 路由表
+// ==========================================
+
+/**
+ * 内置业务场景
+ * @description 决定走哪个后端凭证接口
+ * - default: 通用上传（GET /v2/business/operation/get-cos-temp-token）
+ * - default_download: 通用下载/上传（POST /v2/business/operation/get-download-cos-temp-token，snake_case）
+ * - sdk_customize: SDK 定制服务（POST /internal/sdk_customize/upload_token，含 cdn_url/file_path）
+ * - ai_translate: AI 翻译服务（POST /business/aiTranslate/import/cosToken，camelCase）
+ */
+
+/**
+ * 凭证获取参数
+ */
+
+/**
+ * 自定义原始响应归一化函数
+ * @description 后端返回字段不符合内置 scene 约定时使用；入参为后端响应的原始 data
+ */
+
+// ==========================================
+// 字段归一化层
+// ==========================================
+
+const normalizeSnake = raw => ({
+  bucket: raw.bucket,
+  region: raw.region,
+  secretId: raw.secret_id,
+  secretKey: raw.secret_key,
+  sessionToken: raw.token,
+  startTime: raw.start_time,
+  expiredTime: raw.expired_time,
+  path: raw.path
+});
+
+/**
+ * snake_case 凭证归一化（导出供 getCredential 自定义逃生舱复用）
+ * @description 消费方自行请求凭证（如项目 http 实例为非标准签名）时，
+ * 可在 getCredential 内调用本函数把后端 data 转为组件库统一结构
+ */
+export const normalizeSnakeCredential = raw => normalizeSnake(raw);
+const normalizeAiTranslate = raw => ({
+  bucket: raw.bucket || '',
+  region: raw.region || '',
+  secretId: raw.secretId || '',
+  secretKey: raw.secretKey || '',
+  sessionToken: raw.token || '',
+  startTime: raw.startTime ?? 0,
+  expiredTime: raw.expiredTime ?? 0,
+  // aiTranslate path 类型为 Record<string, unknown>，这里收窄为 string
+  path: raw.path ? Object.fromEntries(Object.entries(raw.path).filter(v => typeof v[1] === 'string')) : undefined
+});
+const normalizeSdkCustomize = raw => ({
+  bucket: raw.bucket,
+  region: raw.region,
+  secretId: raw.secret_id,
+  secretKey: raw.secret_key,
+  sessionToken: raw.token,
+  startTime: raw.start_time,
+  expiredTime: raw.expired_time,
+  filePath: raw.file_path,
+  cosHost: raw.cdn_url
+});
+
+// ==========================================
+// 凭证获取接口封装（按 scene 路由）
+// ==========================================
+
+const DEFAULT_AUDIENCE = '/player-network';
+
+/**
+ * 统一校验后端响应并执行归一化
+ */
+const resolveCredential = (res, normalize, customNormalize) => {
+  // 兼容两套成功标识：新接口 code===0，老接口（账号域 get-cos-temp-token 等）ret===0
+  const success = res.code === 0 || res.ret === 0;
+  if (!success || res.data === null || typeof res.data === 'undefined') {
+    throw new Error(`[PntCosUploader] 获取 COS 凭证失败: code=${res.code ?? 'null'} ret=${res.ret ?? 'null'} ${res.msg || ''}`);
+  }
+  return customNormalize ? customNormalize(res.data) : normalize(res.data);
+};
+
+/**
+ * 获取 COS 临时凭证（按 scene 路由到不同后端接口，内部归一化字段命名）
+ * @param http 由 PntProvider 注入的 axios 实例
+ * @param params 凭证获取参数
+ * @param customNormalize 可选的原始响应自定义归一化
+ */
+export const fetchCosCredential = async (http, params, customNormalize) => {
+  const {
+    scene,
+    context = {},
+    contentLength,
+    fileUrl,
+    audience = DEFAULT_AUDIENCE
+  } = params;
+  switch (scene) {
+    case 'default':
+      {
+        // 通用上传：GET /v2/business/operation/get-cos-temp-token
+        // pnt-tools CosApi 约定：gameId 走请求头 x-service-type
+        const {
+          gameId,
+          ...restContext
+        } = context;
+        // 第二泛型 R 显式指定为解包后的 body（约定消费方 http 响应拦截器返回 response.data）
+        const res = await http.get(`/v2/business/operation/get-cos-temp-token?audience=${audience}`, {
+          params: {
+            content_length: contentLength,
+            ...restContext
+          },
+          headers: gameId !== undefined ? {
+            'x-service-type': String(gameId)
+          } : undefined
+        });
+        return resolveCredential(res, normalizeSnake, customNormalize);
+      }
+    case 'default_download':
+      {
+        // 通用下载/上传：POST /v2/business/operation/get-download-cos-temp-token
+        const {
+          gameId,
+          ...restContext
+        } = context;
+        const res = await http.post(`/v2/business/operation/get-download-cos-temp-token?audience=${audience}`, {
+          file_url: fileUrl,
+          content_length: contentLength,
+          ...restContext
+        }, {
+          headers: gameId !== undefined ? {
+            'x-service-type': String(gameId)
+          } : undefined
+        });
+        return resolveCredential(res, normalizeSnake, customNormalize);
+      }
+    case 'sdk_customize':
+      {
+        // SDK 定制服务：POST /internal/sdk_customize/upload_token
+        // 原项目调用不带 audience（http 拦截器默认补 /player-network）
+        const res = await http.post('/internal/sdk_customize/upload_token', {
+          content_length: contentLength,
+          ...context
+        });
+        return resolveCredential(res, normalizeSdkCustomize, customNormalize);
+      }
+    case 'ai_translate':
+      {
+        // AI 翻译服务：POST /business/aiTranslate/import/cosToken（camelCase）
+        const res = await http.post('/business/aiTranslate/import/cosToken', {
+          contentLength,
+          ...context
+        });
+        return resolveCredential(res, normalizeAiTranslate, customNormalize);
+      }
+    default:
+      {
+        throw new Error(`[PntCosUploader] 未支持的 scene: ${scene}；请通过 getCredential 自定义`);
+      }
+  }
+};