agentlink-sdk 1.0.3 → 1.0.4

package/dist/index.d.mts

@@ -26,6 +26,7 @@ declare class AgentLinkClient {
     private token;
     private tokenPromise;
     private static tokenCache;
+    private static whitelistCache;
     private static CACHE_TTL;
     constructor(options: AgentLinkClientOptions);
     /**
@@ -36,6 +37,10 @@ declare class AgentLinkClient {
      * 从服务器获取 Token
      */
     private fetchToken;
+    /**
+     * 检查域名是否在白名单中
+     */
+    private checkWhitelist;
     /**
      * 验证发送端的 Token 和 Origin
      */
@@ -50,16 +55,18 @@ declare class AgentLinkClient {
     sendData(targetUrl: string, data: any, type: string, windowName?: string): Promise<void>;
     /**
      * 监听来自 URL 的数据
-     * @param callback 接收到数据时的回调函数
+     * @param callback 接收到数据时的回调函数，现在包含验证信息
      */
-    receiveData(callback: (data: any, type: string, senderInfo?: SenderInfo) => void): () => void;
+    receiveData(callback: (data: any, type: string, senderInfo?: SenderInfo, verification?: string) => void): () => void;
     /**
      * 从当前 URL 获取数据并验证发送方
+     * 即使验证失败也返回数据，但会标记验证状态
      */
     getDataFromUrl(url?: string): Promise<{
         data: any;
         type: string;
         senderInfo?: SenderInfo;
+        verification?: string;
     } | null>;
     /**
      * 获取白名单信息
@@ -89,11 +96,12 @@ interface URLData {
     type: string;
     token: string;
     origin: string;
+    verification?: string;
 }
 /**
  * 将数据编码为 URL hash
  */
-declare function encodeDataToUrl(data: any, type: string, token: string, origin: string, baseUrl: string): Promise<string>;
+declare function encodeDataToUrl(data: any, type: string, token: string, origin: string, baseUrl: string, verification?: string): Promise<string>;
 /**
  * 从 URL 中解码数据
  */

package/dist/index.d.ts

@@ -26,6 +26,7 @@ declare class AgentLinkClient {
     private token;
     private tokenPromise;
     private static tokenCache;
+    private static whitelistCache;
     private static CACHE_TTL;
     constructor(options: AgentLinkClientOptions);
     /**
@@ -36,6 +37,10 @@ declare class AgentLinkClient {
      * 从服务器获取 Token
      */
     private fetchToken;
+    /**
+     * 检查域名是否在白名单中
+     */
+    private checkWhitelist;
     /**
      * 验证发送端的 Token 和 Origin
      */
@@ -50,16 +55,18 @@ declare class AgentLinkClient {
     sendData(targetUrl: string, data: any, type: string, windowName?: string): Promise<void>;
     /**
      * 监听来自 URL 的数据
-     * @param callback 接收到数据时的回调函数
+     * @param callback 接收到数据时的回调函数，现在包含验证信息
      */
-    receiveData(callback: (data: any, type: string, senderInfo?: SenderInfo) => void): () => void;
+    receiveData(callback: (data: any, type: string, senderInfo?: SenderInfo, verification?: string) => void): () => void;
     /**
      * 从当前 URL 获取数据并验证发送方
+     * 即使验证失败也返回数据，但会标记验证状态
      */
     getDataFromUrl(url?: string): Promise<{
         data: any;
         type: string;
         senderInfo?: SenderInfo;
+        verification?: string;
     } | null>;
     /**
      * 获取白名单信息
@@ -89,11 +96,12 @@ interface URLData {
     type: string;
     token: string;
     origin: string;
+    verification?: string;
 }
 /**
  * 将数据编码为 URL hash
  */
-declare function encodeDataToUrl(data: any, type: string, token: string, origin: string, baseUrl: string): Promise<string>;
+declare function encodeDataToUrl(data: any, type: string, token: string, origin: string, baseUrl: string, verification?: string): Promise<string>;
 /**
  * 从 URL 中解码数据
  */

package/dist/index.js

@@ -66,8 +66,11 @@ function base64ToUint8Array(base64) {
 }
 
 // src/utils/url.ts
-async function encodeDataToUrl(data, type, token, origin, baseUrl) {
+async function encodeDataToUrl(data, type, token, origin, baseUrl, verification) {
   const payload = { data, type, token, origin };
+  if (verification !== void 0) {
+    payload.verification = verification;
+  }
   const jsonString = JSON.stringify(payload);
   const compressed = await compress(jsonString);
   const base64 = uint8ArrayToBase64(compressed);
@@ -170,6 +173,21 @@ var _AgentLinkClient = class _AgentLinkClient {
     this.token = token;
     return token;
   }
+  /**
+   * 检查域名是否在白名单中
+   */
+  async checkWhitelist(origin) {
+    const cached = _AgentLinkClient.whitelistCache.get(origin);
+    if (cached && Date.now() - cached.timestamp < _AgentLinkClient.CACHE_TTL) {
+      return cached.verified;
+    }
+    const verified = await verifyWhitelist(this.serverUrl, origin);
+    _AgentLinkClient.whitelistCache.set(origin, {
+      verified,
+      timestamp: Date.now()
+    });
+    return verified;
+  }
   /**
    * 验证发送端的 Token 和 Origin
    */
@@ -205,7 +223,9 @@ var _AgentLinkClient = class _AgentLinkClient {
   async sendData(targetUrl, data, type, windowName = _AgentLinkClient.DEFAULT_WINDOW_NAME) {
     const token = await this.ensureToken();
     const origin = window.location.origin;
-    const encodedUrl = await encodeDataToUrl(data, type, token, origin, targetUrl);
+    const isWhitelisted = await this.checkWhitelist(origin);
+    const verification = isWhitelisted ? "mixlab launchpad\u52A0\u901F\u8BA1\u5212" : "\u672A\u9A8C\u8BC1";
+    const encodedUrl = await encodeDataToUrl(data, type, token, origin, targetUrl, verification);
     const targetWindow = window.open(encodedUrl, windowName);
     if (!targetWindow) {
       throw new Error("[AgentLink] Failed to open target window. It might be blocked by a popup blocker.");
@@ -214,13 +234,13 @@ var _AgentLinkClient = class _AgentLinkClient {
   }
   /**
    * 监听来自 URL 的数据
-   * @param callback 接收到数据时的回调函数
+   * @param callback 接收到数据时的回调函数，现在包含验证信息
    */
   receiveData(callback) {
     const handleHashChange = async () => {
       const result = await this.getDataFromUrl();
       if (result) {
-        callback(result.data, result.type, result.senderInfo);
+        callback(result.data, result.type, result.senderInfo, result.verification);
       }
     };
     window.addEventListener("hashchange", handleHashChange);
@@ -231,6 +251,7 @@ var _AgentLinkClient = class _AgentLinkClient {
   }
   /**
    * 从当前 URL 获取数据并验证发送方
+   * 即使验证失败也返回数据，但会标记验证状态
    */
   async getDataFromUrl(url) {
     const targetUrl = url || window.location.href;
@@ -239,14 +260,18 @@ var _AgentLinkClient = class _AgentLinkClient {
       return null;
     }
     const senderInfo = await this.verifySender(urlData.token, urlData.origin);
+    let verification = urlData.verification;
+    if (!verification) {
+      verification = senderInfo ? "mixlab launchpad\u52A0\u901F\u8BA1\u5212" : "\u672A\u9A8C\u8BC1";
+    }
     if (!senderInfo) {
-      console.warn(`[AgentLink] Data received but sender verification failed`);
-      return null;
+      console.warn(`[AgentLink] Data received but sender verification failed. Verification: ${verification}`);
     }
     return {
       data: urlData.data,
       type: urlData.type,
-      senderInfo
+      senderInfo: senderInfo || void 0,
+      verification
     };
   }
   /**
@@ -259,6 +284,8 @@ var _AgentLinkClient = class _AgentLinkClient {
 _AgentLinkClient.DEFAULT_WINDOW_NAME = "agentlink-window";
 // 接收端验证结果缓存（静态，跨实例共享）
 _AgentLinkClient.tokenCache = /* @__PURE__ */ new Map();
+// 白名单验证缓存（避免重复请求）
+_AgentLinkClient.whitelistCache = /* @__PURE__ */ new Map();
 // 缓存过期时间：1 小时
 _AgentLinkClient.CACHE_TTL = 60 * 60 * 1e3;
 var AgentLinkClient = _AgentLinkClient;

package/dist/index.mjs

@@ -32,8 +32,11 @@ function base64ToUint8Array(base64) {
 }
 
 // src/utils/url.ts
-async function encodeDataToUrl(data, type, token, origin, baseUrl) {
+async function encodeDataToUrl(data, type, token, origin, baseUrl, verification) {
   const payload = { data, type, token, origin };
+  if (verification !== void 0) {
+    payload.verification = verification;
+  }
   const jsonString = JSON.stringify(payload);
   const compressed = await compress(jsonString);
   const base64 = uint8ArrayToBase64(compressed);
@@ -136,6 +139,21 @@ var _AgentLinkClient = class _AgentLinkClient {
     this.token = token;
     return token;
   }
+  /**
+   * 检查域名是否在白名单中
+   */
+  async checkWhitelist(origin) {
+    const cached = _AgentLinkClient.whitelistCache.get(origin);
+    if (cached && Date.now() - cached.timestamp < _AgentLinkClient.CACHE_TTL) {
+      return cached.verified;
+    }
+    const verified = await verifyWhitelist(this.serverUrl, origin);
+    _AgentLinkClient.whitelistCache.set(origin, {
+      verified,
+      timestamp: Date.now()
+    });
+    return verified;
+  }
   /**
    * 验证发送端的 Token 和 Origin
    */
@@ -171,7 +189,9 @@ var _AgentLinkClient = class _AgentLinkClient {
   async sendData(targetUrl, data, type, windowName = _AgentLinkClient.DEFAULT_WINDOW_NAME) {
     const token = await this.ensureToken();
     const origin = window.location.origin;
-    const encodedUrl = await encodeDataToUrl(data, type, token, origin, targetUrl);
+    const isWhitelisted = await this.checkWhitelist(origin);
+    const verification = isWhitelisted ? "mixlab launchpad\u52A0\u901F\u8BA1\u5212" : "\u672A\u9A8C\u8BC1";
+    const encodedUrl = await encodeDataToUrl(data, type, token, origin, targetUrl, verification);
     const targetWindow = window.open(encodedUrl, windowName);
     if (!targetWindow) {
       throw new Error("[AgentLink] Failed to open target window. It might be blocked by a popup blocker.");
@@ -180,13 +200,13 @@ var _AgentLinkClient = class _AgentLinkClient {
   }
   /**
    * 监听来自 URL 的数据
-   * @param callback 接收到数据时的回调函数
+   * @param callback 接收到数据时的回调函数，现在包含验证信息
    */
   receiveData(callback) {
     const handleHashChange = async () => {
       const result = await this.getDataFromUrl();
       if (result) {
-        callback(result.data, result.type, result.senderInfo);
+        callback(result.data, result.type, result.senderInfo, result.verification);
       }
     };
     window.addEventListener("hashchange", handleHashChange);
@@ -197,6 +217,7 @@ var _AgentLinkClient = class _AgentLinkClient {
   }
   /**
    * 从当前 URL 获取数据并验证发送方
+   * 即使验证失败也返回数据，但会标记验证状态
    */
   async getDataFromUrl(url) {
     const targetUrl = url || window.location.href;
@@ -205,14 +226,18 @@ var _AgentLinkClient = class _AgentLinkClient {
       return null;
     }
     const senderInfo = await this.verifySender(urlData.token, urlData.origin);
+    let verification = urlData.verification;
+    if (!verification) {
+      verification = senderInfo ? "mixlab launchpad\u52A0\u901F\u8BA1\u5212" : "\u672A\u9A8C\u8BC1";
+    }
     if (!senderInfo) {
-      console.warn(`[AgentLink] Data received but sender verification failed`);
-      return null;
+      console.warn(`[AgentLink] Data received but sender verification failed. Verification: ${verification}`);
     }
     return {
       data: urlData.data,
       type: urlData.type,
-      senderInfo
+      senderInfo: senderInfo || void 0,
+      verification
     };
   }
   /**
@@ -225,6 +250,8 @@ var _AgentLinkClient = class _AgentLinkClient {
 _AgentLinkClient.DEFAULT_WINDOW_NAME = "agentlink-window";
 // 接收端验证结果缓存（静态，跨实例共享）
 _AgentLinkClient.tokenCache = /* @__PURE__ */ new Map();
+// 白名单验证缓存（避免重复请求）
+_AgentLinkClient.whitelistCache = /* @__PURE__ */ new Map();
 // 缓存过期时间：1 小时
 _AgentLinkClient.CACHE_TTL = 60 * 60 * 1e3;
 var AgentLinkClient = _AgentLinkClient;

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "agentlink-sdk",
-    "version": "1.0.3",
+    "version": "1.0.4",
     "description": "AgentLink client SDK for cross-domain data synchronization via URL hash",
     "main": "dist/index.js",
     "module": "dist/index.esm.js",