@pnt-team/pnt-component-frontend 0.0.99 → 0.0.103

package/lib/cjs/components/PntSecureBox/index.d.ts

@@ -45,10 +45,51 @@ interface PntSecureBoxProps {
      * - true：非加密值也展示 ******，点击后本地揭示（不调接口，防窥屏）
      */
     maskPlain?: boolean;
+    /**
+     * 接口变体
+     * @description
+     * - 'business'（默认）：业务级，走 /v3/business/game_info/high-security-decrypt
+     * - 'platform'：平台级（发布记录页等场景），走 /v3/business/game_info/plat-high-security-decrypt
+     */
+    scope?: 'business' | 'platform';
+    /**
+     * 解锁后是否显示复制按钮
+     * @description 默认 true，解锁后按钮文案切换为「复制」；传 false 则解锁后按钮消失（旧行为）
+     */
+    copyable?: boolean;
+    /**
+     * 复制按钮文案
+     * @description 用于适配多语言场景，默认为 'Copy'
+     */
+    copyText?: string;
+    /**
+     * 复制成功后的内联提示文案
+     * @description 仅在使用默认复制（未传 onCopy）时生效；
+     * 传入非空字符串后，复制成功按钮文案临时切换为该文案 2 秒；默认 'Copied'，传 '' 关闭内联提示
+     */
+    copySuccessText?: string;
+    /**
+     * 自定义复制行为
+     * @description 传入后替换默认的 navigator.clipboard.writeText；
+     * 消费方自行处理复制与反馈（此时 copySuccessText 不再生效）
+     */
+    onCopy?: (value: string) => void | Promise<void>;
+    /**
+     * 缓存别名
+     * @description 当后端 key 相同但密文不同时（如两组 SDK 密钥），用 cacheKey 区分缓存；
+     * 请求体仍用 dataKey 作为 key，缓存读写用 cacheKey。默认 cacheKey=dataKey
+     */
+    cacheKey?: string;
+    /**
+     * 解密成功回调
+     * @description 当用户点击「查看」且接口解密成功后触发，回调参数为解密后的明文值；
+     * 消费方可用于同步表单字段（如 setFieldsValue）或其他副作用
+     */
+    onDecrypt?: (value: string) => void;
 }
 /**
  * 高敏信息展示统一组件
- * @description 用于统一处理和展示高敏信息，支持脱敏显示和按需获取真实数据。
+ * @description 用于统一处理和展示高敏信息，支持脱敏显示、按需获取真实数据、解锁后复制。
  * 通过 PntProvider 注入 http 实例，对接 `/api/v3/business/game_info/high-security-decrypt`。
  *
  * @param {PntSecureBoxProps} props - 组件属性
@@ -59,6 +100,10 @@ interface PntSecureBoxProps {
  * @param {(content: string) => React.ReactNode} props.renderDom - 自定义渲染函数
  * @param {string} [props.viewText] - 自定义查看按钮文案
  * @param {string} [props.pageId] - 页面 ID
+ * @param {boolean} [props.copyable=true] - 解锁后是否显示复制按钮
+ * @param {string} [props.copyText] - 复制按钮文案
+ * @param {string} [props.copySuccessText] - 复制成功内联提示文案
+ * @param {(value: string) => void | Promise<void>} [props.onCopy] - 自定义复制行为
  *
  * @example
  * ```tsx
@@ -71,6 +116,8 @@ interface PntSecureBoxProps {
  *   gameId={12345}
  *   renderDom={(content) => <span>{content}</span>}
  *   viewText="查看"
+ *   copyText="复制"
+ *   copySuccessText="已复制"
  * />
  * ```
  *

package/lib/cjs/components/PntSecureBox/index.js

@@ -28,15 +28,46 @@ var import_react = require("react");
 var import_index = require("./index.scss");
 var import_jsx_runtime = require("react/jsx-runtime");
 var PntSecureBox = (prop) => {
-  const { dataKey, dataValue, env, gameId, renderDom, viewText, pageId, maskPlain } = prop;
+  const {
+    dataKey,
+    dataValue,
+    env,
+    gameId,
+    renderDom,
+    viewText,
+    pageId,
+    maskPlain,
+    scope,
+    copyable = true,
+    copyText,
+    copySuccessText = "Copied",
+    onCopy,
+    cacheKey,
+    onDecrypt
+  } = prop;
+  const storeKey = cacheKey || dataKey;
   const { securityData, isUnlocked, requestSecurityData } = (0, import_useHighSecurity.useHighSecurity)({
     gameId,
-    env
+    env,
+    scope
   });
   const [plainViewed, setPlainViewed] = (0, import_react.useState)(false);
+  const [copied, setCopied] = (0, import_react.useState)(false);
+  const copyTimer = (0, import_react.useRef)(null);
+  (0, import_react.useEffect)(() => {
+    return () => {
+      if (copyTimer.current)
+        clearTimeout(copyTimer.current);
+    };
+  }, []);
   const isSecurity = (0, import_utils.isSecurityData)(dataValue);
-  const unlocked = isSecurity ? isUnlocked(dataKey) : maskPlain ? plainViewed : true;
-  const displayValue = unlocked ? isSecurity ? securityData[dataKey] || "******" : dataValue : "******";
+  const unlocked = isSecurity ? isUnlocked(storeKey) : maskPlain ? plainViewed : true;
+  const displayValue = unlocked ? isSecurity ? securityData[storeKey] || "******" : dataValue : "******";
+  (0, import_react.useEffect)(() => {
+    if (onDecrypt && unlocked && isSecurity && securityData[storeKey]) {
+      onDecrypt(securityData[storeKey]);
+    }
+  }, [unlocked, isSecurity, securityData, storeKey, onDecrypt]);
   const handleView = () => {
     if (isSecurity) {
       requestSecurityData({
@@ -46,7 +77,8 @@ var PntSecureBox = (prop) => {
         param: [
           {
             key: dataKey,
-            value: dataValue
+            value: dataValue,
+            cacheKey: storeKey
           }
         ]
       });
@@ -54,9 +86,42 @@ var PntSecureBox = (prop) => {
       setPlainViewed(true);
     }
   };
+  const handleCopy = (0, import_react.useCallback)(async () => {
+    const value = unlocked ? isSecurity ? securityData[storeKey] || "" : dataValue : "";
+    if (onCopy) {
+      await onCopy(value);
+      return;
+    }
+    try {
+      await navigator.clipboard.writeText(value);
+      if (copySuccessText) {
+        if (copyTimer.current)
+          clearTimeout(copyTimer.current);
+        setCopied(true);
+        copyTimer.current = setTimeout(
+          () => setCopied(false),
+          2e3
+        );
+      }
+    } catch (err) {
+      console.warn("[pnt-component-frontend] 复制失败", err);
+    }
+  }, [
+    unlocked,
+    isSecurity,
+    securityData,
+    storeKey,
+    dataValue,
+    onCopy,
+    copySuccessText
+  ]);
+  const isSensitive = isSecurity || !!maskPlain;
+  const showViewBtn = !unlocked;
+  const showCopyBtn = unlocked && isSensitive && copyable;
   return /* @__PURE__ */ (0, import_jsx_runtime.jsx)("div", { className: "pnt-secure-box", children: /* @__PURE__ */ (0, import_jsx_runtime.jsxs)(import_jsx_runtime.Fragment, { children: [
     renderDom(displayValue),
-    !unlocked && /* @__PURE__ */ (0, import_jsx_runtime.jsx)("span", { className: "view-icon", onClick: handleView, children: viewText || "View" })
+    showViewBtn && /* @__PURE__ */ (0, import_jsx_runtime.jsx)("span", { className: "view-icon", onClick: handleView, children: viewText || "View" }),
+    showCopyBtn && /* @__PURE__ */ (0, import_jsx_runtime.jsx)("span", { className: "copy-icon", onClick: handleCopy, children: copied && copySuccessText ? copySuccessText : copyText || "Copy" })
   ] }) });
 };
 var PntSecureBox_default = PntSecureBox;

package/lib/cjs/components/PntSecureBox/index.scss

@@ -3,7 +3,8 @@
   color: #333;
   max-width: fit-content;
 
-  .view-icon {
+  .view-icon,
+  .copy-icon {
     position: absolute;
     top: 1px;
     right: -30px;

package/lib/cjs/config.d.ts

@@ -22,8 +22,16 @@ export interface PntHttpLike {
  * 高敏信息解锁接口配置（可选，全局覆盖）
  */
 export interface PntHighSecurityConfig {
-    /** 解密接口 URL，覆盖默认 /v3/business/game_info/high-security-decrypt?audience=/laas-pnt */
+    /**
+     * 业务级解密接口 URL，覆盖默认 /api/v3/business/game_info/high-security-decrypt?audience=/laas-pnt
+     * @description scope='business'（默认）时使用
+     */
     decryptUrl?: string;
+    /**
+     * 平台级解密接口 URL，覆盖默认 /api/v3/business/game_info/plat-high-security-decrypt?audience=/laas-pnt
+     * @description scope='platform' 时使用（发布记录页等平台级权限校验场景）
+     */
+    decryptPlatUrl?: string;
     /** 成功码字段：'code'（默认）或 'ret'（account-business 现状） */
     successCodeField?: 'code' | 'ret';
     /** audience 覆盖（默认 /laas-pnt） */

package/lib/cjs/global.d.ts

@@ -28,3 +28,12 @@ declare module '*.json' {
   const value: any;
   export default value;
 }
+
+// use-sync-external-store shim（兼容 React 17，包本身未提供 .d.ts）
+declare module 'use-sync-external-store' {
+  export function useSyncExternalStore<A>(
+    subscribe: (callback: () => void) => () => void,
+    getSnapshot: () => A,
+    getServerSnapshot?: () => A,
+  ): A;
+}

package/lib/cjs/hooks/useHighSecurity.d.ts

@@ -14,6 +14,12 @@ export interface HighSecurityParamItem {
 }
 /** 单次请求的接口配置覆盖（优先级 > PntProvider 全局配置） */
 export type HighSecurityApiConfig = PntHighSecurityConfig;
+/**
+ * 高敏接口变体
+ * - 'business'（默认）：业务级，走 /api/v3/business/game_info/high-security-decrypt
+ * - 'platform'：平台级（发布记录页场景），走 /api/v3/business/game_info/plat-high-security-decrypt
+ */
+export type HighSecurityScope = 'business' | 'platform';
 /** 高敏数据解锁请求参数（组件层友好命名，库内部转换为后端 snake_case） */
 export interface HighSecurityRequestParams {
     /** 业务 ID */
@@ -26,6 +32,8 @@ export interface HighSecurityRequestParams {
     param: HighSecurityParamItem[];
     /** 本次请求的接口配置覆盖（可选） */
     apiConfig?: HighSecurityApiConfig;
+    /** 本次请求的接口变体，覆盖 hook 初始化时的 scope */
+    scope?: HighSecurityScope;
 }
 /** hook 初始化 scope：传入后 securityData/isUnlocked 自动按该业务+环境过滤 */
 export interface UseHighSecurityOptions {
@@ -33,6 +41,8 @@ export interface UseHighSecurityOptions {
     gameId?: string | number;
     /** 当前环境（可缺省，默认 0） */
     env?: string | number;
+    /** 接口变体（默认 'business'）；发布记录页等平台级场景传 'platform' */
+    scope?: HighSecurityScope;
 }
 /** 清缓存过滤条件 */
 export interface ClearSecurityDataFilter {

package/lib/cjs/hooks/useHighSecurity.js

@@ -25,6 +25,7 @@ module.exports = __toCommonJS(useHighSecurity_exports);
 var import_api = require("../api");
 var import_config = require("../config");
 var import_react = require("react");
+var import_use_sync_external_store = require("use-sync-external-store");
 var buildCacheKey = (gameId, env, key) => `${gameId}:${env}:${key}`;
 var securityCache = /* @__PURE__ */ new Map();
 var inflightRequests = /* @__PURE__ */ new Map();
@@ -78,10 +79,11 @@ var clearEntries = (filter) => {
 var getDefaultPageId = () => typeof window !== "undefined" && window.location ? window.location.pathname : "";
 var useHighSecurity = (options) => {
   const { http, highSecurity: globalHighSecurity } = (0, import_config.usePntConfig)();
-  const snapshot = (0, import_react.useSyncExternalStore)(subscribe, getSnapshot, getSnapshot);
+  const snapshot = (0, import_use_sync_external_store.useSyncExternalStore)(subscribe, getSnapshot, getSnapshot);
   const scopeGameId = (options == null ? void 0 : options.gameId) === void 0 ? void 0 : String(options.gameId);
   const scopeEnv = (options == null ? void 0 : options.env) === void 0 ? void 0 : String(options.env);
   const hasScope = scopeGameId !== void 0 && scopeEnv !== void 0;
+  const optionsScope = options == null ? void 0 : options.scope;
   const securityData = (0, import_react.useMemo)(() => {
     if (!hasScope)
       return {};
@@ -108,8 +110,10 @@ var useHighSecurity = (options) => {
       env,
       pageId,
       param,
-      apiConfig
+      apiConfig,
+      scope: paramScope
     }) => {
+      var _a;
       const gid = String(gameId);
       const eid = String(env != null ? env : 0);
       const merged = {
@@ -143,29 +147,27 @@ var useHighSecurity = (options) => {
         page_id: pageId || getDefaultPageId(),
         param: missing
       };
-      let url = merged.decryptUrl;
-      if (!url) {
-        const audience = merged.audience || "/laas-pnt";
-        url = `/v3/business/game_info/high-security-decrypt?audience=${audience}`;
-      }
+      const scope = (_a = paramScope != null ? paramScope : optionsScope) != null ? _a : "business";
+      const audience = merged.audience || "/laas-pnt";
+      const url = scope === "platform" ? merged.decryptPlatUrl || `/api/v3/business/game_info/plat-high-security-decrypt?audience=${audience}` : merged.decryptUrl || `/api/v3/business/game_info/high-security-decrypt?audience=${audience}`;
       const requestKey = `${gid}:${eid}:${missing.map((item) => `${item.key}
${item.value}`).join("")}`;
       const existing = inflightRequests.get(requestKey);
       if (existing)
         return existing;
       const promise = (async () => {
-        var _a, _b;
+        var _a2, _b;
         try {
           const res = await (0, import_api.businessGameInfoHighSecurityDecrypt)(http, body, url);
           const successCode = Number(
-            (_a = res[successCodeField]) != null ? _a : res.code
+            (_a2 = res[successCodeField]) != null ? _a2 : res.code
           );
           if (successCode === 0 && Array.isArray(res.data)) {
             const decrypted = res.data.map((raw) => {
-              var _a2;
+              var _a3;
               if (raw && typeof raw === "object" && "key" in raw) {
                 const item = raw;
                 if (typeof item.key === "string") {
-                  return { key: item.key, value: String((_a2 = item.value) != null ? _a2 : "") };
+                  return { key: item.key, value: String((_a3 = item.value) != null ? _a3 : "") };
                 }
               }
               return null;
@@ -206,7 +208,7 @@ var useHighSecurity = (options) => {
       inflightRequests.set(requestKey, promise);
       return promise;
     },
-    [http, snapshot, globalHighSecurity]
+    [http, snapshot, globalHighSecurity, optionsScope]
   );
   const clearSecurityData = (0, import_react.useCallback)((filter) => {
     clearEntries(filter);

package/lib/cjs/index.d.ts

@@ -6,6 +6,6 @@ export { default as PntUpload } from './components/PntUpload';
 export type { PntUploadErrorPhase, PntUploadProps, PntUploadTexts, } from './components/PntUpload';
 export { createPntCosUploader, normalizeSnakeCredential, default as usePntCosUploader, type CosScene, type FileNameStrategy, type GetCosCredentialParams, type NormalizeCredential, type NormalizedCosCredential, type PntCosRequestOverrides, type PntCosUploadOptions, type PntCosUploadResult, type PntCosUploader as PntCosUploaderInstance, } from './components/PntCosUploader';
 export { useHighSecurity } from './hooks/useHighSecurity';
-export type { ClearSecurityDataFilter, HighSecurityApiConfig, HighSecurityParamItem, HighSecurityRequestParams, UseHighSecurityOptions, UseHighSecurityResult, } from './hooks/useHighSecurity';
+export type { ClearSecurityDataFilter, HighSecurityApiConfig, HighSecurityParamItem, HighSecurityRequestParams, HighSecurityScope, UseHighSecurityOptions, UseHighSecurityResult, } from './hooks/useHighSecurity';
 export { isSecurityData } from './utils';
 export { default as PntGeneralLayout } from './components/PntGeneralLayout';

package/lib/esm/components/PntSecureBox/index.d.ts

@@ -45,10 +45,51 @@ interface PntSecureBoxProps {
      * - true：非加密值也展示 ******，点击后本地揭示（不调接口，防窥屏）
      */
     maskPlain?: boolean;
+    /**
+     * 接口变体
+     * @description
+     * - 'business'（默认）：业务级，走 /v3/business/game_info/high-security-decrypt
+     * - 'platform'：平台级（发布记录页等场景），走 /v3/business/game_info/plat-high-security-decrypt
+     */
+    scope?: 'business' | 'platform';
+    /**
+     * 解锁后是否显示复制按钮
+     * @description 默认 true，解锁后按钮文案切换为「复制」；传 false 则解锁后按钮消失（旧行为）
+     */
+    copyable?: boolean;
+    /**
+     * 复制按钮文案
+     * @description 用于适配多语言场景，默认为 'Copy'
+     */
+    copyText?: string;
+    /**
+     * 复制成功后的内联提示文案
+     * @description 仅在使用默认复制（未传 onCopy）时生效；
+     * 传入非空字符串后，复制成功按钮文案临时切换为该文案 2 秒；默认 'Copied'，传 '' 关闭内联提示
+     */
+    copySuccessText?: string;
+    /**
+     * 自定义复制行为
+     * @description 传入后替换默认的 navigator.clipboard.writeText；
+     * 消费方自行处理复制与反馈（此时 copySuccessText 不再生效）
+     */
+    onCopy?: (value: string) => void | Promise<void>;
+    /**
+     * 缓存别名
+     * @description 当后端 key 相同但密文不同时（如两组 SDK 密钥），用 cacheKey 区分缓存；
+     * 请求体仍用 dataKey 作为 key，缓存读写用 cacheKey。默认 cacheKey=dataKey
+     */
+    cacheKey?: string;
+    /**
+     * 解密成功回调
+     * @description 当用户点击「查看」且接口解密成功后触发，回调参数为解密后的明文值；
+     * 消费方可用于同步表单字段（如 setFieldsValue）或其他副作用
+     */
+    onDecrypt?: (value: string) => void;
 }
 /**
  * 高敏信息展示统一组件
- * @description 用于统一处理和展示高敏信息，支持脱敏显示和按需获取真实数据。
+ * @description 用于统一处理和展示高敏信息，支持脱敏显示、按需获取真实数据、解锁后复制。
  * 通过 PntProvider 注入 http 实例，对接 `/api/v3/business/game_info/high-security-decrypt`。
  *
  * @param {PntSecureBoxProps} props - 组件属性
@@ -59,6 +100,10 @@ interface PntSecureBoxProps {
  * @param {(content: string) => React.ReactNode} props.renderDom - 自定义渲染函数
  * @param {string} [props.viewText] - 自定义查看按钮文案
  * @param {string} [props.pageId] - 页面 ID
+ * @param {boolean} [props.copyable=true] - 解锁后是否显示复制按钮
+ * @param {string} [props.copyText] - 复制按钮文案
+ * @param {string} [props.copySuccessText] - 复制成功内联提示文案
+ * @param {(value: string) => void | Promise<void>} [props.onCopy] - 自定义复制行为
  *
  * @example
  * ```tsx
@@ -71,6 +116,8 @@ interface PntSecureBoxProps {
  *   gameId={12345}
  *   renderDom={(content) => <span>{content}</span>}
  *   viewText="查看"
+ *   copyText="复制"
+ *   copySuccessText="已复制"
  * />
  * ```
  *

package/lib/esm/components/PntSecureBox/index.js

@@ -1,13 +1,13 @@
 import { useHighSecurity } from "../../hooks/useHighSecurity";
 import { isSecurityData } from "../../utils";
-import React, { useState } from 'react';
+import React, { useCallback, useEffect, useRef, useState } from 'react';
 import "./index.scss";
 import { jsx as _jsx } from "react/jsx-runtime";
 import { Fragment as _Fragment } from "react/jsx-runtime";
 import { jsxs as _jsxs } from "react/jsx-runtime";
 /**
  * 高敏信息展示统一组件
- * @description 用于统一处理和展示高敏信息，支持脱敏显示和按需获取真实数据。
+ * @description 用于统一处理和展示高敏信息，支持脱敏显示、按需获取真实数据、解锁后复制。
  * 通过 PntProvider 注入 http 实例，对接 `/api/v3/business/game_info/high-security-decrypt`。
  *
  * @param {PntSecureBoxProps} props - 组件属性
@@ -18,6 +18,10 @@ import { jsxs as _jsxs } from "react/jsx-runtime";
  * @param {(content: string) => React.ReactNode} props.renderDom - 自定义渲染函数
  * @param {string} [props.viewText] - 自定义查看按钮文案
  * @param {string} [props.pageId] - 页面 ID
+ * @param {boolean} [props.copyable=true] - 解锁后是否显示复制按钮
+ * @param {string} [props.copyText] - 复制按钮文案
+ * @param {string} [props.copySuccessText] - 复制成功内联提示文案
+ * @param {(value: string) => void | Promise<void>} [props.onCopy] - 自定义复制行为
  *
  * @example
  * ```tsx
@@ -30,6 +34,8 @@ import { jsxs as _jsxs } from "react/jsx-runtime";
  *   gameId={12345}
  *   renderDom={(content) => <span>{content}</span>}
  *   viewText="查看"
+ *   copyText="复制"
+ *   copySuccessText="已复制"
  * />
  * ```
  *
@@ -44,9 +50,19 @@ const PntSecureBox = prop => {
     renderDom,
     viewText,
     pageId,
-    maskPlain
+    maskPlain,
+    scope,
+    copyable = true,
+    copyText,
+    copySuccessText = 'Copied',
+    onCopy,
+    cacheKey,
+    onDecrypt
   } = prop;
 
+  // 缓存读写用的 key（cacheKey 优先于 dataKey）
+  const storeKey = cacheKey || dataKey;
+
   // 通过 PntProvider 注入的 http 实例请求高敏数据，缓存按 gameId+env 隔离
   const {
     securityData,
@@ -54,14 +70,32 @@ const PntSecureBox = prop => {
     requestSecurityData
   } = useHighSecurity({
     gameId,
-    env
+    env,
+    scope
   });
 
   // 明文揭示状态（maskPlain 模式下使用，本地 state，不调接口）
   const [plainViewed, setPlainViewed] = useState(false);
+  // 复制成功内联反馈状态
+  const [copied, setCopied] = useState(false);
+  const copyTimer = useRef(null);
+
+  // 卸载时清理定时器
+  useEffect(() => {
+    return () => {
+      if (copyTimer.current) clearTimeout(copyTimer.current);
+    };
+  }, []);
   const isSecurity = isSecurityData(dataValue);
-  const unlocked = isSecurity ? isUnlocked(dataKey) : maskPlain ? plainViewed : true;
-  const displayValue = unlocked ? isSecurity ? securityData[dataKey] || '******' : dataValue : '******';
+  const unlocked = isSecurity ? isUnlocked(storeKey) : maskPlain ? plainViewed : true;
+  const displayValue = unlocked ? isSecurity ? securityData[storeKey] || '******' : dataValue : '******';
+
+  // 解密成功后回调，把明文值抛给消费方
+  useEffect(() => {
+    if (onDecrypt && unlocked && isSecurity && securityData[storeKey]) {
+      onDecrypt(securityData[storeKey]);
+    }
+  }, [unlocked, isSecurity, securityData, storeKey, onDecrypt]);
   const handleView = () => {
     if (isSecurity) {
       requestSecurityData({
@@ -70,20 +104,53 @@ const PntSecureBox = prop => {
         pageId,
         param: [{
           key: dataKey,
-          value: dataValue
+          value: dataValue,
+          cacheKey: storeKey
         }]
       });
     } else if (maskPlain) {
       setPlainViewed(true);
     }
   };
+  const handleCopy = useCallback(async () => {
+    // 待复制的明文值
+    const value = unlocked ? isSecurity ? securityData[storeKey] || '' : dataValue : '';
+    if (onCopy) {
+      await onCopy(value);
+      return;
+    }
+    try {
+      await navigator.clipboard.writeText(value);
+      if (copySuccessText) {
+        if (copyTimer.current) clearTimeout(copyTimer.current);
+        setCopied(true);
+        copyTimer.current = setTimeout(() => setCopied(false), 2000);
+      }
+    } catch (err) {
+      // eslint-disable-next-line no-console
+      console.warn('[pnt-component-frontend] 复制失败', err);
+    }
+  }, [unlocked, isSecurity, securityData, storeKey, dataValue, onCopy, copySuccessText]);
+
+  // 渲染逻辑：
+  // 1. 敏感数据未解锁：显示查看按钮（viewText）
+  // 2. 敏感数据已解锁 + copyable：显示复制按钮（copyText），复制成功临时显示 copySuccessText
+  // 3. 敏感数据已解锁 + !copyable：不显示按钮（旧行为）
+  // 4. 普通明文（非敏感）：无任何按钮
+  const isSensitive = isSecurity || !!maskPlain;
+  const showViewBtn = !unlocked;
+  const showCopyBtn = unlocked && isSensitive && copyable;
   return /*#__PURE__*/_jsx("div", {
     className: "pnt-secure-box",
     children: /*#__PURE__*/_jsxs(_Fragment, {
-      children: [renderDom(displayValue), !unlocked && /*#__PURE__*/_jsx("span", {
+      children: [renderDom(displayValue), showViewBtn && /*#__PURE__*/_jsx("span", {
         className: "view-icon",
         onClick: handleView,
         children: viewText || 'View'
+      }), showCopyBtn && /*#__PURE__*/_jsx("span", {
+        className: "copy-icon",
+        onClick: handleCopy,
+        children: copied && copySuccessText ? copySuccessText : copyText || 'Copy'
       })]
     })
   });

package/lib/esm/components/PntSecureBox/index.scss

@@ -3,7 +3,8 @@
   color: #333;
   max-width: fit-content;
 
-  .view-icon {
+  .view-icon,
+  .copy-icon {
     position: absolute;
     top: 1px;
     right: -30px;

package/lib/esm/config.d.ts

@@ -22,8 +22,16 @@ export interface PntHttpLike {
  * 高敏信息解锁接口配置（可选，全局覆盖）
  */
 export interface PntHighSecurityConfig {
-    /** 解密接口 URL，覆盖默认 /v3/business/game_info/high-security-decrypt?audience=/laas-pnt */
+    /**
+     * 业务级解密接口 URL，覆盖默认 /api/v3/business/game_info/high-security-decrypt?audience=/laas-pnt
+     * @description scope='business'（默认）时使用
+     */
     decryptUrl?: string;
+    /**
+     * 平台级解密接口 URL，覆盖默认 /api/v3/business/game_info/plat-high-security-decrypt?audience=/laas-pnt
+     * @description scope='platform' 时使用（发布记录页等平台级权限校验场景）
+     */
+    decryptPlatUrl?: string;
     /** 成功码字段：'code'（默认）或 'ret'（account-business 现状） */
     successCodeField?: 'code' | 'ret';
     /** audience 覆盖（默认 /laas-pnt） */

package/lib/esm/global.d.ts

@@ -28,3 +28,12 @@ declare module '*.json' {
   const value: any;
   export default value;
 }
+
+// use-sync-external-store shim（兼容 React 17，包本身未提供 .d.ts）
+declare module 'use-sync-external-store' {
+  export function useSyncExternalStore<A>(
+    subscribe: (callback: () => void) => () => void,
+    getSnapshot: () => A,
+    getServerSnapshot?: () => A,
+  ): A;
+}

package/lib/esm/hooks/useHighSecurity.d.ts

@@ -14,6 +14,12 @@ export interface HighSecurityParamItem {
 }
 /** 单次请求的接口配置覆盖（优先级 > PntProvider 全局配置） */
 export type HighSecurityApiConfig = PntHighSecurityConfig;
+/**
+ * 高敏接口变体
+ * - 'business'（默认）：业务级，走 /api/v3/business/game_info/high-security-decrypt
+ * - 'platform'：平台级（发布记录页场景），走 /api/v3/business/game_info/plat-high-security-decrypt
+ */
+export type HighSecurityScope = 'business' | 'platform';
 /** 高敏数据解锁请求参数（组件层友好命名，库内部转换为后端 snake_case） */
 export interface HighSecurityRequestParams {
     /** 业务 ID */
@@ -26,6 +32,8 @@ export interface HighSecurityRequestParams {
     param: HighSecurityParamItem[];
     /** 本次请求的接口配置覆盖（可选） */
     apiConfig?: HighSecurityApiConfig;
+    /** 本次请求的接口变体，覆盖 hook 初始化时的 scope */
+    scope?: HighSecurityScope;
 }
 /** hook 初始化 scope：传入后 securityData/isUnlocked 自动按该业务+环境过滤 */
 export interface UseHighSecurityOptions {
@@ -33,6 +41,8 @@ export interface UseHighSecurityOptions {
     gameId?: string | number;
     /** 当前环境（可缺省，默认 0） */
     env?: string | number;
+    /** 接口变体（默认 'business'）；发布记录页等平台级场景传 'platform' */
+    scope?: HighSecurityScope;
 }
 /** 清缓存过滤条件 */
 export interface ClearSecurityDataFilter {