@pnt-team/pnt-component-frontend 0.0.96 → 0.0.99

package/lib/cjs/api/cos.d.ts

@@ -1,4 +1,4 @@
-import type { AxiosInstance } from 'axios';
+import type { PntHttpLike } from "../config";
 /**
  * 归一化后的 COS 临时凭证
  * @description 各后端接口字段命名不统一（snake/camel），组件库内部统一为 camelCase
@@ -99,5 +99,5 @@ export declare const normalizeSnakeCredential: (raw: SnakeCosCredential) => Norm
  * @param params 凭证获取参数
  * @param customNormalize 可选的原始响应自定义归一化
  */
-export declare const fetchCosCredential: (http: AxiosInstance, params: GetCosCredentialParams, customNormalize?: NormalizeCredential) => Promise<NormalizedCosCredential>;
+export declare const fetchCosCredential: (http: PntHttpLike, params: GetCosCredentialParams, customNormalize?: NormalizeCredential) => Promise<NormalizedCosCredential>;
 export {};

package/lib/cjs/api/index.d.ts

@@ -1,15 +1,15 @@
-import type { commonEesType } from "../config";
-import type { AxiosInstance } from 'axios';
+import type { commonEesType, PntHttpLike } from "../config";
 import { BusinessGameInfoHighSecurityDecryptBody, BusinessGameInfoHighSecurityDecryptResponse, BusinessSelectListBody, BusinessSelectListResponse } from './types/index';
 /**
  * 业务下拉选择列表
  * @param http 由 PntProvider 注入的 axios 实例
  * @param data 请求参数
  */
-export declare const businessSelectList: (axios: AxiosInstance, data: BusinessSelectListBody) => Promise<commonEesType<BusinessSelectListResponse>>;
+export declare const businessSelectList: (axios: PntHttpLike, data: BusinessSelectListBody) => Promise<commonEesType<BusinessSelectListResponse>>;
 /**
  * 高敏信息解锁
  * @param http 由 PntProvider 注入的 axios 实例
  * @param data 请求参数
+ * @param url 自定义接口 URL（可选，覆盖默认值）
  */
-export declare const businessGameInfoHighSecurityDecrypt: (axios: AxiosInstance, data: BusinessGameInfoHighSecurityDecryptBody) => Promise<commonEesType<BusinessGameInfoHighSecurityDecryptResponse>>;
+export declare const businessGameInfoHighSecurityDecrypt: (axios: PntHttpLike, data: BusinessGameInfoHighSecurityDecryptBody, url?: string) => Promise<commonEesType<BusinessGameInfoHighSecurityDecryptResponse>>;

package/lib/cjs/api/index.js

@@ -24,8 +24,8 @@ __export(api_exports, {
 });
 module.exports = __toCommonJS(api_exports);
 var businessSelectList = (axios, data) => axios.post("/business/select/list?audience=/player-network", data);
-var businessGameInfoHighSecurityDecrypt = (axios, data) => axios.post(
-  "/v3/business/game_info/high-security-decrypt?audience=/laas-pnt",
+var businessGameInfoHighSecurityDecrypt = (axios, data, url) => axios.post(
+  url || "/v3/business/game_info/high-security-decrypt?audience=/laas-pnt",
   data
 );
 // Annotate the CommonJS export names for ESM import in node:

package/lib/cjs/components/PntCosUploader/index.d.ts

@@ -1,6 +1,5 @@
 import { type CosScene, type GetCosCredentialParams, type NormalizeCredential, type NormalizedCosCredential } from "../../api/cos";
-import { usePntConfig } from "../../config";
-import type { AxiosInstance } from 'axios';
+import { usePntConfig, type PntHttpLike } from "../../config";
 /**
  * 文件名生成策略
  * @description 内置三种策略；如需自定义可传函数
@@ -117,7 +116,7 @@ export { normalizeSnakeCredential } from "../../api/cos";
  * const { fileUrl } = await uploader.upload(file);
  * ```
  */
-export declare const createPntCosUploader: (http: AxiosInstance, options: PntCosUploadOptions | (() => PntCosUploadOptions)) => PntCosUploader;
+export declare const createPntCosUploader: (http: PntHttpLike, options: PntCosUploadOptions | (() => PntCosUploadOptions)) => PntCosUploader;
 /**
  * COS 直传 Service Hook
  * @description 内置凭证获取 + COS SDK 初始化 + 文件名策略 + URL 拼接，

package/lib/cjs/components/PntSecureBox/index.d.ts

@@ -13,9 +13,9 @@ interface PntSecureBoxProps {
     dataValue: string;
     /**
      * 环境标识
-     * @description 用于区分不同环境（如：dev, test, production）
+     * @description 用于区分不同环境（如：dev, test, production）；可缺省，默认 0
      */
-    env: string | number;
+    env?: string | number;
     /**
      * 游戏 ID
      * @description 标识具体的游戏项目
@@ -38,6 +38,13 @@ interface PntSecureBoxProps {
      * @description 用于记录操作日志和权限验证
      */
     pageId?: string;
+    /**
+     * 明文是否也掩码显示
+     * @description
+     * - false（默认）：非加密值直接展示原值
+     * - true：非加密值也展示 ******，点击后本地揭示（不调接口，防窥屏）
+     */
+    maskPlain?: boolean;
 }
 /**
  * 高敏信息展示统一组件

package/lib/cjs/components/PntSecureBox/index.js

@@ -24,40 +24,39 @@ __export(PntSecureBox_exports, {
 module.exports = __toCommonJS(PntSecureBox_exports);
 var import_useHighSecurity = require("../../hooks/useHighSecurity");
 var import_utils = require("../../utils");
+var import_react = require("react");
 var import_index = require("./index.scss");
 var import_jsx_runtime = require("react/jsx-runtime");
 var PntSecureBox = (prop) => {
-  const { dataKey, dataValue, env, gameId, renderDom, viewText, pageId } = prop;
+  const { dataKey, dataValue, env, gameId, renderDom, viewText, pageId, maskPlain } = prop;
   const { securityData, isUnlocked, requestSecurityData } = (0, import_useHighSecurity.useHighSecurity)({
     gameId,
     env
   });
+  const [plainViewed, setPlainViewed] = (0, import_react.useState)(false);
   const isSecurity = (0, import_utils.isSecurityData)(dataValue);
-  const unlocked = isSecurity && isUnlocked(dataKey);
+  const unlocked = isSecurity ? isUnlocked(dataKey) : maskPlain ? plainViewed : true;
+  const displayValue = unlocked ? isSecurity ? securityData[dataKey] || "******" : dataValue : "******";
+  const handleView = () => {
+    if (isSecurity) {
+      requestSecurityData({
+        env,
+        gameId,
+        pageId,
+        param: [
+          {
+            key: dataKey,
+            value: dataValue
+          }
+        ]
+      });
+    } else if (maskPlain) {
+      setPlainViewed(true);
+    }
+  };
   return /* @__PURE__ */ (0, import_jsx_runtime.jsx)("div", { className: "pnt-secure-box", children: /* @__PURE__ */ (0, import_jsx_runtime.jsxs)(import_jsx_runtime.Fragment, { children: [
-    renderDom(
-      unlocked ? securityData[dataKey] || "******" : isSecurity ? "******" : dataValue
-    ),
-    isSecurity && !isUnlocked(dataKey) && /* @__PURE__ */ (0, import_jsx_runtime.jsx)(
-      "span",
-      {
-        className: "view-icon",
-        onClick: () => {
-          requestSecurityData({
-            env,
-            gameId,
-            pageId,
-            param: [
-              {
-                key: dataKey,
-                value: dataValue
-              }
-            ]
-          });
-        },
-        children: viewText || "View"
-      }
-    )
+    renderDom(displayValue),
+    !unlocked && /* @__PURE__ */ (0, import_jsx_runtime.jsx)("span", { className: "view-icon", onClick: handleView, children: viewText || "View" })
   ] }) });
 };
 var PntSecureBox_default = PntSecureBox;

package/lib/cjs/config.d.ts

@@ -1,5 +1,4 @@
 /// <reference types="react" />
-import type { AxiosInstance } from 'axios';
 /**
  * 统一响应结构（与后端 commonEesType 对齐）
  */
@@ -9,12 +8,35 @@ export interface commonEesType<T> {
     data: T;
     ret?: number;
 }
+/**
+ * 库所需的最小 HTTP 能力（仅 post）。
+ * 用结构化类型而非直接依赖 AxiosInstance，
+ * 避免与消费方 axios 版本的类型定义强耦合（如 1.13 vs 1.20 的 query 方法差异）。
+ * 任何具备 axios 兼容 post 签名的实例均可注入。
+ */
+export interface PntHttpLike {
+    get<T = unknown, R = unknown>(url: string, config?: any): Promise<R>;
+    post<T = unknown, R = unknown, D = unknown>(url: string, data?: D, config?: any): Promise<R>;
+}
+/**
+ * 高敏信息解锁接口配置（可选，全局覆盖）
+ */
+export interface PntHighSecurityConfig {
+    /** 解密接口 URL，覆盖默认 /v3/business/game_info/high-security-decrypt?audience=/laas-pnt */
+    decryptUrl?: string;
+    /** 成功码字段：'code'（默认）或 'ret'（account-business 现状） */
+    successCodeField?: 'code' | 'ret';
+    /** audience 覆盖（默认 /laas-pnt） */
+    audience?: string;
+}
 /**
  * 组件库运行时配置：由消费方通过 PntProvider 注入
  */
 export interface PntConfig {
     /** 消费方已配置好的 axios 实例（含拦截器、鉴权、baseURL 等） */
-    http: AxiosInstance;
+    http: PntHttpLike;
+    /** 高敏信息解锁接口全局配置（可选） */
+    highSecurity?: PntHighSecurityConfig;
 }
 /**
  * 配置 Provider：消费方在应用根入口包裹一次即可

package/lib/cjs/hooks/useHighSecurity.d.ts

@@ -1,26 +1,37 @@
+import type { PntHighSecurityConfig } from "../config";
 /** 单个解锁项 */
 export interface HighSecurityParamItem {
     /** 字段标识（与后端约定） */
     key: string;
     /** 参数密文（_high_security_: 前缀） */
     value: string;
+    /**
+     * 缓存别名（可选）
+     * @description 当后端 key 相同但密文不同时（如两组 SDK 密钥），
+     * 用 cacheKey 区分缓存，请求体仍用 key。默认 cacheKey=key
+     */
+    cacheKey?: string;
 }
+/** 单次请求的接口配置覆盖（优先级 > PntProvider 全局配置） */
+export type HighSecurityApiConfig = PntHighSecurityConfig;
 /** 高敏数据解锁请求参数（组件层友好命名，库内部转换为后端 snake_case） */
 export interface HighSecurityRequestParams {
     /** 业务 ID */
     gameId: string | number;
-    /** 环境标识（1=dev 2=test 3=prod，以各业务现有约定为准） */
-    env: string | number;
+    /** 环境标识（可缺省，默认 0；以各业务现有约定为准） */
+    env?: string | number;
     /** 页面 ID（不传则默认取 location.pathname），用于操作日志和权限校验 */
     pageId?: string;
     /** 需要解锁的参数列表，支持批量 */
     param: HighSecurityParamItem[];
+    /** 本次请求的接口配置覆盖（可选） */
+    apiConfig?: HighSecurityApiConfig;
 }
 /** hook 初始化 scope：传入后 securityData/isUnlocked 自动按该业务+环境过滤 */
 export interface UseHighSecurityOptions {
     /** 当前业务 ID */
     gameId?: string | number;
-    /** 当前环境 */
+    /** 当前环境（可缺省，默认 0） */
     env?: string | number;
 }
 /** 清缓存过滤条件 */

package/lib/cjs/hooks/useHighSecurity.js

@@ -77,7 +77,7 @@ var clearEntries = (filter) => {
 };
 var getDefaultPageId = () => typeof window !== "undefined" && window.location ? window.location.pathname : "";
 var useHighSecurity = (options) => {
-  const { http } = (0, import_config.usePntConfig)();
+  const { http, highSecurity: globalHighSecurity } = (0, import_config.usePntConfig)();
   const snapshot = (0, import_react.useSyncExternalStore)(subscribe, getSnapshot, getSnapshot);
   const scopeGameId = (options == null ? void 0 : options.gameId) === void 0 ? void 0 : String(options.gameId);
   const scopeEnv = (options == null ? void 0 : options.env) === void 0 ? void 0 : String(options.env);
@@ -107,19 +107,26 @@ var useHighSecurity = (options) => {
       gameId,
       env,
       pageId,
-      param
+      param,
+      apiConfig
     }) => {
       const gid = String(gameId);
-      const eid = String(env);
+      const eid = String(env != null ? env : 0);
+      const merged = {
+        ...globalHighSecurity,
+        ...apiConfig
+      };
+      const successCodeField = merged.successCodeField || "code";
       const result = new Array(
         param.length
       );
       const missing = [];
       const missingIndexes = [];
       param.forEach((item, index) => {
-        const cached = snapshot.get(buildCacheKey(gid, eid, item.key));
+        const storeKey = item.cacheKey || item.key;
+        const cached = snapshot.get(buildCacheKey(gid, eid, storeKey));
         if (cached !== void 0) {
-          result[index] = { key: item.key, value: cached };
+          result[index] = { key: item.key, value: cached, cacheKey: storeKey };
         } else {
           missing.push({ key: item.key, value: item.value });
           missingIndexes.push(index);
@@ -132,19 +139,27 @@ var useHighSecurity = (options) => {
       }
       const body = {
         game_id: Number(gameId),
-        env: Number(env),
+        env: Number(env != null ? env : 0),
         page_id: pageId || getDefaultPageId(),
         param: missing
       };
+      let url = merged.decryptUrl;
+      if (!url) {
+        const audience = merged.audience || "/laas-pnt";
+        url = `/v3/business/game_info/high-security-decrypt?audience=${audience}`;
+      }
       const requestKey = `${gid}:${eid}:${missing.map((item) => `${item.key}
${item.value}`).join("")}`;
       const existing = inflightRequests.get(requestKey);
       if (existing)
         return existing;
       const promise = (async () => {
-        var _a;
+        var _a, _b;
         try {
-          const res = await (0, import_api.businessGameInfoHighSecurityDecrypt)(http, body);
-          if (res.code === 0 && Array.isArray(res.data)) {
+          const res = await (0, import_api.businessGameInfoHighSecurityDecrypt)(http, body, url);
+          const successCode = Number(
+            (_a = res[successCodeField]) != null ? _a : res.code
+          );
+          if (successCode === 0 && Array.isArray(res.data)) {
             const decrypted = res.data.map((raw) => {
               var _a2;
               if (raw && typeof raw === "object" && "key" in raw) {
@@ -155,7 +170,14 @@ var useHighSecurity = (options) => {
               }
               return null;
             }).filter((item) => item !== null);
-            setEntries(gid, eid, decrypted);
+            const toStore = decrypted.map((d) => {
+              const matchIdx = missingIndexes.find(
+                (i) => param[i].key === d.key
+              );
+              const storeKey = matchIdx !== void 0 ? param[matchIdx].cacheKey || d.key : d.key;
+              return { key: d.key, value: d.value, cacheKey: storeKey };
+            });
+            setEntries(gid, eid, toStore);
             decrypted.forEach((item) => {
               const index = missingIndexes.find(
                 (i) => param[i].key === item.key
@@ -166,7 +188,7 @@ var useHighSecurity = (options) => {
           } else {
             console.warn(
               "[pnt-component-frontend] high-security-decrypt 解锁失败",
-              (_a = res == null ? void 0 : res.msg) != null ? _a : res == null ? void 0 : res.code
+              (_b = res == null ? void 0 : res.msg) != null ? _b : res[successCodeField]
             );
           }
         } catch (error) {
@@ -184,7 +206,7 @@ var useHighSecurity = (options) => {
       inflightRequests.set(requestKey, promise);
       return promise;
     },
-    [http, snapshot]
+    [http, snapshot, globalHighSecurity]
   );
   const clearSecurityData = (0, import_react.useCallback)((filter) => {
     clearEntries(filter);

package/lib/cjs/index.d.ts

@@ -1,4 +1,4 @@
-export { PntProvider, usePntConfig, type PntConfig, type commonEesType, } from './config';
+export { PntProvider, usePntConfig, type PntConfig, type PntHttpLike, type PntHighSecurityConfig, type commonEesType, } from './config';
 export { default as PntImage } from './components/PntImage';
 export { default as PntBusinessSelect } from './components/PntBusinessSelect';
 export { default as PntSecureBox } from './components/PntSecureBox';
@@ -6,6 +6,6 @@ export { default as PntUpload } from './components/PntUpload';
 export type { PntUploadErrorPhase, PntUploadProps, PntUploadTexts, } from './components/PntUpload';
 export { createPntCosUploader, normalizeSnakeCredential, default as usePntCosUploader, type CosScene, type FileNameStrategy, type GetCosCredentialParams, type NormalizeCredential, type NormalizedCosCredential, type PntCosRequestOverrides, type PntCosUploadOptions, type PntCosUploadResult, type PntCosUploader as PntCosUploaderInstance, } from './components/PntCosUploader';
 export { useHighSecurity } from './hooks/useHighSecurity';
-export type { ClearSecurityDataFilter, HighSecurityParamItem, HighSecurityRequestParams, UseHighSecurityOptions, UseHighSecurityResult, } from './hooks/useHighSecurity';
+export type { ClearSecurityDataFilter, HighSecurityApiConfig, HighSecurityParamItem, HighSecurityRequestParams, UseHighSecurityOptions, UseHighSecurityResult, } from './hooks/useHighSecurity';
 export { isSecurityData } from './utils';
 export { default as PntGeneralLayout } from './components/PntGeneralLayout';

package/lib/esm/api/cos.d.ts

@@ -1,4 +1,4 @@
-import type { AxiosInstance } from 'axios';
+import type { PntHttpLike } from "../config";
 /**
  * 归一化后的 COS 临时凭证
  * @description 各后端接口字段命名不统一（snake/camel），组件库内部统一为 camelCase
@@ -99,5 +99,5 @@ export declare const normalizeSnakeCredential: (raw: SnakeCosCredential) => Norm
  * @param params 凭证获取参数
  * @param customNormalize 可选的原始响应自定义归一化
  */
-export declare const fetchCosCredential: (http: AxiosInstance, params: GetCosCredentialParams, customNormalize?: NormalizeCredential) => Promise<NormalizedCosCredential>;
+export declare const fetchCosCredential: (http: PntHttpLike, params: GetCosCredentialParams, customNormalize?: NormalizeCredential) => Promise<NormalizedCosCredential>;
 export {};

package/lib/esm/api/index.d.ts

@@ -1,15 +1,15 @@
-import type { commonEesType } from "../config";
-import type { AxiosInstance } from 'axios';
+import type { commonEesType, PntHttpLike } from "../config";
 import { BusinessGameInfoHighSecurityDecryptBody, BusinessGameInfoHighSecurityDecryptResponse, BusinessSelectListBody, BusinessSelectListResponse } from './types/index';
 /**
  * 业务下拉选择列表
  * @param http 由 PntProvider 注入的 axios 实例
  * @param data 请求参数
  */
-export declare const businessSelectList: (axios: AxiosInstance, data: BusinessSelectListBody) => Promise<commonEesType<BusinessSelectListResponse>>;
+export declare const businessSelectList: (axios: PntHttpLike, data: BusinessSelectListBody) => Promise<commonEesType<BusinessSelectListResponse>>;
 /**
  * 高敏信息解锁
  * @param http 由 PntProvider 注入的 axios 实例
  * @param data 请求参数
+ * @param url 自定义接口 URL（可选，覆盖默认值）
  */
-export declare const businessGameInfoHighSecurityDecrypt: (axios: AxiosInstance, data: BusinessGameInfoHighSecurityDecryptBody) => Promise<commonEesType<BusinessGameInfoHighSecurityDecryptResponse>>;
+export declare const businessGameInfoHighSecurityDecrypt: (axios: PntHttpLike, data: BusinessGameInfoHighSecurityDecryptBody, url?: string) => Promise<commonEesType<BusinessGameInfoHighSecurityDecryptResponse>>;

package/lib/esm/api/index.js

@@ -9,5 +9,6 @@ export const businessSelectList = (axios, data) => axios.post('/business/select/
  * 高敏信息解锁
  * @param http 由 PntProvider 注入的 axios 实例
  * @param data 请求参数
+ * @param url 自定义接口 URL（可选，覆盖默认值）
  */
-export const businessGameInfoHighSecurityDecrypt = (axios, data) => axios.post('/v3/business/game_info/high-security-decrypt?audience=/laas-pnt', data);
+export const businessGameInfoHighSecurityDecrypt = (axios, data, url) => axios.post(url || '/v3/business/game_info/high-security-decrypt?audience=/laas-pnt', data);

package/lib/esm/components/PntCosUploader/index.d.ts

@@ -1,6 +1,5 @@
 import { type CosScene, type GetCosCredentialParams, type NormalizeCredential, type NormalizedCosCredential } from "../../api/cos";
-import { usePntConfig } from "../../config";
-import type { AxiosInstance } from 'axios';
+import { usePntConfig, type PntHttpLike } from "../../config";
 /**
  * 文件名生成策略
  * @description 内置三种策略；如需自定义可传函数
@@ -117,7 +116,7 @@ export { normalizeSnakeCredential } from "../../api/cos";
  * const { fileUrl } = await uploader.upload(file);
  * ```
  */
-export declare const createPntCosUploader: (http: AxiosInstance, options: PntCosUploadOptions | (() => PntCosUploadOptions)) => PntCosUploader;
+export declare const createPntCosUploader: (http: PntHttpLike, options: PntCosUploadOptions | (() => PntCosUploadOptions)) => PntCosUploader;
 /**
  * COS 直传 Service Hook
  * @description 内置凭证获取 + COS SDK 初始化 + 文件名策略 + URL 拼接，

package/lib/esm/components/PntSecureBox/index.d.ts

@@ -13,9 +13,9 @@ interface PntSecureBoxProps {
     dataValue: string;
     /**
      * 环境标识
-     * @description 用于区分不同环境（如：dev, test, production）
+     * @description 用于区分不同环境（如：dev, test, production）；可缺省，默认 0
      */
-    env: string | number;
+    env?: string | number;
     /**
      * 游戏 ID
      * @description 标识具体的游戏项目
@@ -38,6 +38,13 @@ interface PntSecureBoxProps {
      * @description 用于记录操作日志和权限验证
      */
     pageId?: string;
+    /**
+     * 明文是否也掩码显示
+     * @description
+     * - false（默认）：非加密值直接展示原值
+     * - true：非加密值也展示 ******，点击后本地揭示（不调接口，防窥屏）
+     */
+    maskPlain?: boolean;
 }
 /**
  * 高敏信息展示统一组件

package/lib/esm/components/PntSecureBox/index.js

@@ -1,6 +1,6 @@
 import { useHighSecurity } from "../../hooks/useHighSecurity";
 import { isSecurityData } from "../../utils";
-import React from 'react';
+import React, { useState } from 'react';
 import "./index.scss";
 import { jsx as _jsx } from "react/jsx-runtime";
 import { Fragment as _Fragment } from "react/jsx-runtime";
@@ -43,7 +43,8 @@ const PntSecureBox = prop => {
     gameId,
     renderDom,
     viewText,
-    pageId
+    pageId,
+    maskPlain
   } = prop;
 
   // 通过 PntProvider 注入的 http 实例请求高敏数据，缓存按 gameId+env 隔离
@@ -55,24 +56,33 @@ const PntSecureBox = prop => {
     gameId,
     env
   });
+
+  // 明文揭示状态（maskPlain 模式下使用，本地 state，不调接口）
+  const [plainViewed, setPlainViewed] = useState(false);
   const isSecurity = isSecurityData(dataValue);
-  const unlocked = isSecurity && isUnlocked(dataKey);
+  const unlocked = isSecurity ? isUnlocked(dataKey) : maskPlain ? plainViewed : true;
+  const displayValue = unlocked ? isSecurity ? securityData[dataKey] || '******' : dataValue : '******';
+  const handleView = () => {
+    if (isSecurity) {
+      requestSecurityData({
+        env,
+        gameId,
+        pageId,
+        param: [{
+          key: dataKey,
+          value: dataValue
+        }]
+      });
+    } else if (maskPlain) {
+      setPlainViewed(true);
+    }
+  };
   return /*#__PURE__*/_jsx("div", {
     className: "pnt-secure-box",
     children: /*#__PURE__*/_jsxs(_Fragment, {
-      children: [renderDom(unlocked ? securityData[dataKey] || '******' : isSecurity ? '******' : dataValue), isSecurity && !isUnlocked(dataKey) && /*#__PURE__*/_jsx("span", {
+      children: [renderDom(displayValue), !unlocked && /*#__PURE__*/_jsx("span", {
         className: "view-icon",
-        onClick: () => {
-          requestSecurityData({
-            env,
-            gameId,
-            pageId,
-            param: [{
-              key: dataKey,
-              value: dataValue
-            }]
-          });
-        },
+        onClick: handleView,
         children: viewText || 'View'
       })]
     })

package/lib/esm/config.d.ts

@@ -1,5 +1,4 @@
 /// <reference types="react" />
-import type { AxiosInstance } from 'axios';
 /**
  * 统一响应结构（与后端 commonEesType 对齐）
  */
@@ -9,12 +8,35 @@ export interface commonEesType<T> {
     data: T;
     ret?: number;
 }
+/**
+ * 库所需的最小 HTTP 能力（仅 post）。
+ * 用结构化类型而非直接依赖 AxiosInstance，
+ * 避免与消费方 axios 版本的类型定义强耦合（如 1.13 vs 1.20 的 query 方法差异）。
+ * 任何具备 axios 兼容 post 签名的实例均可注入。
+ */
+export interface PntHttpLike {
+    get<T = unknown, R = unknown>(url: string, config?: any): Promise<R>;
+    post<T = unknown, R = unknown, D = unknown>(url: string, data?: D, config?: any): Promise<R>;
+}
+/**
+ * 高敏信息解锁接口配置（可选，全局覆盖）
+ */
+export interface PntHighSecurityConfig {
+    /** 解密接口 URL，覆盖默认 /v3/business/game_info/high-security-decrypt?audience=/laas-pnt */
+    decryptUrl?: string;
+    /** 成功码字段：'code'（默认）或 'ret'（account-business 现状） */
+    successCodeField?: 'code' | 'ret';
+    /** audience 覆盖（默认 /laas-pnt） */
+    audience?: string;
+}
 /**
  * 组件库运行时配置：由消费方通过 PntProvider 注入
  */
 export interface PntConfig {
     /** 消费方已配置好的 axios 实例（含拦截器、鉴权、baseURL 等） */
-    http: AxiosInstance;
+    http: PntHttpLike;
+    /** 高敏信息解锁接口全局配置（可选） */
+    highSecurity?: PntHighSecurityConfig;
 }
 /**
  * 配置 Provider：消费方在应用根入口包裹一次即可

package/lib/esm/config.js

@@ -4,6 +4,17 @@ import { createContext, useContext } from 'react';
  * 统一响应结构（与后端 commonEesType 对齐）
  */
 
+/**
+ * 库所需的最小 HTTP 能力（仅 post）。
+ * 用结构化类型而非直接依赖 AxiosInstance，
+ * 避免与消费方 axios 版本的类型定义强耦合（如 1.13 vs 1.20 的 query 方法差异）。
+ * 任何具备 axios 兼容 post 签名的实例均可注入。
+ */
+
+/**
+ * 高敏信息解锁接口配置（可选，全局覆盖）
+ */
+
 /**
  * 组件库运行时配置：由消费方通过 PntProvider 注入
  */

package/lib/esm/hooks/useHighSecurity.d.ts

@@ -1,26 +1,37 @@
+import type { PntHighSecurityConfig } from "../config";
 /** 单个解锁项 */
 export interface HighSecurityParamItem {
     /** 字段标识（与后端约定） */
     key: string;
     /** 参数密文（_high_security_: 前缀） */
     value: string;
+    /**
+     * 缓存别名（可选）
+     * @description 当后端 key 相同但密文不同时（如两组 SDK 密钥），
+     * 用 cacheKey 区分缓存，请求体仍用 key。默认 cacheKey=key
+     */
+    cacheKey?: string;
 }
+/** 单次请求的接口配置覆盖（优先级 > PntProvider 全局配置） */
+export type HighSecurityApiConfig = PntHighSecurityConfig;
 /** 高敏数据解锁请求参数（组件层友好命名，库内部转换为后端 snake_case） */
 export interface HighSecurityRequestParams {
     /** 业务 ID */
     gameId: string | number;
-    /** 环境标识（1=dev 2=test 3=prod，以各业务现有约定为准） */
-    env: string | number;
+    /** 环境标识（可缺省，默认 0；以各业务现有约定为准） */
+    env?: string | number;
     /** 页面 ID（不传则默认取 location.pathname），用于操作日志和权限校验 */
     pageId?: string;
     /** 需要解锁的参数列表，支持批量 */
     param: HighSecurityParamItem[];
+    /** 本次请求的接口配置覆盖（可选） */
+    apiConfig?: HighSecurityApiConfig;
 }
 /** hook 初始化 scope：传入后 securityData/isUnlocked 自动按该业务+环境过滤 */
 export interface UseHighSecurityOptions {
     /** 当前业务 ID */
     gameId?: string | number;
-    /** 当前环境 */
+    /** 当前环境（可缺省，默认 0） */
     env?: string | number;
 }
 /** 清缓存过滤条件 */