module-develop-kit 1.1.0 → 1.2.1

package/dist/commonjs-virtual-dir/browser.js

@@ -1,4 +1,7 @@
-var r = { exports: {} };
+import { getDefaultExportFromCjs as r } from "./_commonjsHelpers.js";
+import { __require as e } from "../vendor/debug/src/browser.js";
+var o = e();
+const i = /* @__PURE__ */ r(o);
 export {
-  r as __module
+  i as default
 };

package/dist/commonjs-virtual-dir/browser2.js

@@ -0,0 +1,4 @@
+var r = { exports: {} };
+export {
+  r as __module
+};

package/dist/commonjs-virtual-dir/index2.js

@@ -1,5 +1,7 @@
-import { __require as r } from "../vendor/gm-crypt/index.js";
-var p = r();
+import { getDefaultExportFromCjs as r } from "./_commonjsHelpers.js";
+import { __require as o } from "../vendor/sdp-transform/lib/index.js";
+var t = o();
+const a = /* @__PURE__ */ r(t);
 export {
-  p as g
+  a as default
 };

package/dist/commonjs-virtual-dir/index3.js

@@ -1,7 +1,5 @@
-import { getDefaultExportFromCjs as r } from "./_commonjsHelpers.js";
-import { __require as o } from "../vendor/sdp-transform/lib/index.js";
-var t = o();
-const a = /* @__PURE__ */ r(t);
+import { __require as r } from "../vendor/gm-crypt/index.js";
+var p = r();
 export {
-  a as default
+  p as g
 };

package/dist/commonjs-virtual-dir/index4.js

@@ -1,4 +1,2 @@
-var r = {};
-export {
-  r as __exports
-};
+import { __require as e } from "../vendor/ieee754/index.js";
+e();

package/dist/commonjs-virtual-dir/index5.js

@@ -1,4 +1,4 @@
-var e = { exports: {} };
+var r = {};
 export {
-  e as __module
+  r as __exports
 };

package/dist/commonjs-virtual-dir/index6.js

@@ -1,4 +1,4 @@
-var s = {};
+var e = { exports: {} };
 export {
-  s as __exports
+  e as __module
 };

package/dist/commonjs-virtual-dir/index7.js

@@ -0,0 +1,4 @@
+var e = {};
+export {
+  e as __exports
+};

package/dist/commonjs-virtual-dir/index8.js

@@ -0,0 +1,4 @@
+var s = {};
+export {
+  s as __exports
+};

package/dist/main.d.ts

@@ -1,4 +1,20 @@
 import { Ref } from 'vue';
+import { supportedExtensions } from 'file-type';
+import { supportedMimeTypes } from 'file-type';
+
+/**
+ * 支持的文件类型配置
+ * 基于 file-type 库的 supportedMimeTypes 动态生成
+ */
+export declare const ALLOWED_FILE_TYPES: {
+    readonly image: Set<string>;
+    readonly document: Set<string>;
+    readonly video: Set<string>;
+    readonly audio: Set<string>;
+    readonly archive: Set<string>;
+    readonly font: Set<string>;
+    readonly model: Set<string>;
+};
 
 /**
  * 防重放攻击策略
@@ -23,6 +39,46 @@ export declare const CallLogger: {
     error(message: unknown, ...args: unknown[]): void;
 };
 
+/**
+ * 检测文件真实类型并验证扩展名
+ *
+ * @param file 要检测的文件
+ * @param _allowedExtensions 允许的扩展名列表(不含点),如 ['jpg', 'png']，或者 'jpg,png' 或者 'jpg'
+ * @param options 检测选项
+ * @returns 检测结果
+ */
+export declare function detectFileByExtension(file: File, _allowedExtensions: TMaybeArray<string>, options?: IFileDetectionOptions): Promise<IFileDetectionResult>;
+
+/**
+ * 检测文件真实类型并验证 MIME 类型
+ *
+ * @param file 要检测的文件
+ * @param _allowedMimes 允许的MIME类型列表 支持单个或者数组。单个支持使用,分割
+ * @param options 检测选项
+ * @returns 检测结果
+ */
+export declare function detectFileByMime(file: File, _allowedMimes: TMaybeArray<string>, options?: IFileDetectionOptions): Promise<IFileDetectionResult>;
+
+/**
+ * 批量检测文件扩展名
+ *
+ * @param files 要检测的文件列表
+ * @param allowedExtensions 允许的扩展名列表
+ * @param options 检测选项
+ * @returns 检测结果列表
+ */
+export declare function detectionFilesByExtension(files: File[], allowedExtensions: TMaybeArray<string>, options?: IFileDetectionOptions): Promise<IFileDetectionResult[]>;
+
+/**
+ * 批量检测文件 MIME 类型
+ *
+ * @param files 要检测的文件列表
+ * @param allowedMimes 允许的MIME类型列表
+ * @param options 检测选项
+ * @returns 检测结果列表
+ */
+export declare function detectionFilesByMime(files: File[], allowedMimes: TMaybeArray<string>, options?: IFileDetectionOptions): Promise<IFileDetectionResult[]>;
+
 export declare enum ECallStatus {
     /**
      * 正在接听中
@@ -215,6 +271,40 @@ export declare interface ICallOptions {
     call: string;
 }
 
+export declare interface IFileDetectionOptions {
+    /**
+     * 最大文件大小(字节)
+     */
+    maxSize?: number;
+}
+
+export declare interface IFileDetectionResult {
+    /**
+     * 是否通过检测
+     */
+    valid: boolean;
+    /**
+     * 检测到的真实MIME类型
+     */
+    detectedMime?: string;
+    /**
+     * 检测到的文件扩展名
+     */
+    detectedExt?: string;
+    /**
+     * 错误信息
+     */
+    error?: string;
+    /**
+     * 文件声称的MIME类型(来自File对象)
+     */
+    claimedMime?: string;
+    /**
+     * MIME类型是否匹配(真实vs声称)
+     */
+    mimeMatches?: boolean;
+}
+
 export declare interface IResponseDataEncryptionStep {
     data: string;
     headers: Record<EHeaderKey, string>;
@@ -237,7 +327,48 @@ export declare interface ISm4Params {
  * @param options - 配置选项
  * @returns 是否安全
  */
-export declare function isUrlSafe(url: unknown, options?: UrlSanitizeOptions): boolean;
+export declare function isUrlSafe(url: unknown, options?: IUrlSanitizeOptions): boolean;
+
+/**
+ * 便捷方法: 检测是否为文档文件(基于 MIME 类型)
+ */
+export declare function isValidDocument(file: File, maxSize?: number): Promise<IFileDetectionResult>;
+
+/**
+ * 便捷方法: 检测是否为图片文件(基于 MIME 类型)
+ */
+export declare function isValidImage(file: File, maxSize?: number): Promise<IFileDetectionResult>;
+
+/**
+ * 便捷方法: 检测是否为视频文件(基于 MIME 类型)
+ */
+export declare function isValidVideo(file: File, maxSize?: number): Promise<IFileDetectionResult>;
+
+/**
+ * URL XSS 防护工具
+ * 用于检测和拦截包含 XSS 攻击的 URL
+ */
+/**
+ * URL 消毒选项
+ */
+export declare interface IUrlSanitizeOptions {
+    /**
+     * 是否允许相对路径 URL，默认 true
+     */
+    allowRelative?: boolean;
+    /**
+     * 额外的安全协议
+     */
+    extraSafeProtocols?: string[];
+    /**
+     * 当检测到 XSS 时的替代 URL，默认 '#'
+     */
+    fallbackUrl?: string;
+    /**
+     * 是否严格模式，严格模式下只允许 http/https，默认 false
+     */
+    strictMode?: boolean;
+}
 
 /**
  * 请求数据加密
@@ -268,7 +399,7 @@ export declare function responseDataEncryption<T>(stepCb: (_headers: {
  * @param options - 配置选项
  * @returns 安全的 URL
  */
-export declare function sanitizeUrl(url: unknown, options?: UrlSanitizeOptions): string;
+export declare function sanitizeUrl(url: unknown, options?: IUrlSanitizeOptions): string;
 
 /**
  * 批量消毒 URL 列表
@@ -276,7 +407,7 @@ export declare function sanitizeUrl(url: unknown, options?: UrlSanitizeOptions):
  * @param options - 配置选项
  * @returns 消毒后的 URL 列表
  */
-export declare function sanitizeUrls(urls: string[], options?: UrlSanitizeOptions): string[];
+export declare function sanitizeUrls(urls: string[], options?: IUrlSanitizeOptions): string[];
 
 /**
  * sip code对应的的状态，优先处理 code 对应的提示文案，如果不存在则按照 causes 状态去处理
@@ -338,42 +469,22 @@ declare interface SipAccount {
  */
 export declare const startNoDebugger: () => void;
 
+export { supportedExtensions }
+
+export { supportedMimeTypes }
+
 export declare type TData = _TData | _TData[];
 
 declare type _TData = null | undefined | number | string | Record<string, any>;
 
+export declare type TMaybeArray<T> = T[] | T;
+
 export declare type TNullable<T> = T | null;
 
 export declare type TObj<K extends keyof any = string, T = any> = Record<K, T>;
 
 export declare type TUndefinable<T> = T | undefined;
 
-/**
- * URL XSS 防护工具
- * 用于检测和拦截包含 XSS 攻击的 URL
- */
-/**
- * URL 消毒选项
- */
-export declare interface UrlSanitizeOptions {
-    /**
-     * 是否允许相对路径 URL，默认 true
-     */
-    allowRelative?: boolean;
-    /**
-     * 额外的安全协议
-     */
-    extraSafeProtocols?: string[];
-    /**
-     * 当检测到 XSS 时的替代 URL，默认 '#'
-     */
-    fallbackUrl?: string;
-    /**
-     * 是否严格模式，严格模式下只允许 http/https，默认 false
-     */
-    strictMode?: boolean;
-}
-
 /**
  * 打电话
  * FIXME： callBack 为什么存在？zyy 中通过 useCall 拿到的变量无法实现响应式，所以通过 callback 的方式更新外部依赖。

package/dist/main.js

@@ -1,25 +1,37 @@
-import { useCall as e } from "./src/outside-call/index.js";
-import { antiReplyAttackStrategy as a, requestDataEncryption as E, responseDataEncryption as p } from "./src/shield/crypto/index.js";
-import { htmlSanitize as s } from "./src/shield/html-sanitize.js";
-import { startNoDebugger as n } from "./src/shield/no-debugger.js";
-import { isUrlSafe as f, sanitizeUrl as m, sanitizeUrls as x } from "./src/shield/url-sanitize.js";
-import { EventBus as g } from "./src/utils/eventBus.js";
-import { CallLogger as C } from "./src/outside-call/utils.js";
-import { ECallStatus as A, EMIT_EVENT_NAME as D, SIP_CODE_MESSAGE as R, SIP_ERROR_CAUSES as U } from "./src/outside-call/constants.js";
+import { useCall as o } from "./src/outside-call/index.js";
+import { antiReplyAttackStrategy as i, requestDataEncryption as s, responseDataEncryption as a } from "./src/shield/crypto/index.js";
+import { ALLOWED_FILE_TYPES as p, detectFileByExtension as E, detectFileByMime as l, detectionFilesByExtension as m, detectionFilesByMime as x, isValidDocument as f, isValidImage as S, isValidVideo as d } from "./src/shield/file-detection.js";
+import { htmlSanitize as c } from "./src/shield/html-sanitize.js";
+import { startNoDebugger as _ } from "./src/shield/no-debugger.js";
+import { isUrlSafe as D, sanitizeUrl as M, sanitizeUrls as A } from "./src/shield/url-sanitize.js";
+import { EventBus as C } from "./src/utils/eventBus.js";
+import { CallLogger as I } from "./src/outside-call/utils.js";
+import { ECallStatus as L, EMIT_EVENT_NAME as R, SIP_CODE_MESSAGE as T, SIP_ERROR_CAUSES as U } from "./src/outside-call/constants.js";
+import { supportedExtensions as N, supportedMimeTypes as O } from "./vendor/file-type/source/index.js";
 export {
-  C as CallLogger,
-  A as ECallStatus,
-  D as EMIT_EVENT_NAME,
-  g as EventBus,
-  R as SIP_CODE_MESSAGE,
+  p as ALLOWED_FILE_TYPES,
+  I as CallLogger,
+  L as ECallStatus,
+  R as EMIT_EVENT_NAME,
+  C as EventBus,
+  T as SIP_CODE_MESSAGE,
   U as SIP_ERROR_CAUSES,
-  a as antiReplyAttackStrategy,
-  s as htmlSanitize,
-  f as isUrlSafe,
-  E as requestDataEncryption,
-  p as responseDataEncryption,
-  m as sanitizeUrl,
-  x as sanitizeUrls,
-  n as startNoDebugger,
-  e as useCall
+  i as antiReplyAttackStrategy,
+  E as detectFileByExtension,
+  l as detectFileByMime,
+  m as detectionFilesByExtension,
+  x as detectionFilesByMime,
+  c as htmlSanitize,
+  D as isUrlSafe,
+  f as isValidDocument,
+  S as isValidImage,
+  d as isValidVideo,
+  s as requestDataEncryption,
+  a as responseDataEncryption,
+  M as sanitizeUrl,
+  A as sanitizeUrls,
+  _ as startNoDebugger,
+  N as supportedExtensions,
+  O as supportedMimeTypes,
+  o as useCall
 };

package/dist/src/outside-call/utils.js

@@ -1,4 +1,4 @@
-import c from "../../commonjs-virtual-dir/index3.js";
+import c from "../../commonjs-virtual-dir/index2.js";
 const g = {
   log(e, ...r) {
     console.log(`%c【${(/* @__PURE__ */ new Date()).toLocaleString()}】`, "color: green; font-weight: bold;", e, ...r);

package/dist/src/shield/crypto/sm4.js

@@ -1,4 +1,4 @@
-import { g as o } from "../../../commonjs-virtual-dir/index2.js";
+import { g as o } from "../../../commonjs-virtual-dir/index3.js";
 import { dataToStr as r } from "./util.js";
 const c = "cbc", n = (t, e) => new o.sm4({
   key: t.key,

package/dist/src/shield/file-detection.js

@@ -0,0 +1,143 @@
+import { supportedMimeTypes as l, fileTypeFromStream as y } from "../../vendor/file-type/source/index.js";
+import { supportedExtensions as z } from "../../vendor/file-type/source/index.js";
+function d(e) {
+  const t = /* @__PURE__ */ new Set();
+  for (const r of l)
+    r.startsWith(`${e}/`) && t.add(r);
+  return t;
+}
+const f = {
+  // 图片类型 - 从 supportedMimeTypes 中过滤 image/*
+  image: d("image"),
+  // 文档类型 - 包含常见办公文档
+  document: /* @__PURE__ */ new Set([
+    ...Array.from(l).filter(
+      (e) => e.includes("pdf") || e.includes("msword") || e.includes("officedocument") || e.includes("ms-excel") || e.includes("ms-powerpoint") || e.includes("opendocument") || e === "text/plain"
+    )
+  ]),
+  // 视频类型 - 从 supportedMimeTypes 中过滤 video/*
+  video: d("video"),
+  // 音频类型 - 从 supportedMimeTypes 中过滤 audio/*
+  audio: d("audio"),
+  // 压缩文件
+  archive: /* @__PURE__ */ new Set([
+    ...Array.from(l).filter(
+      (e) => e.includes("zip") || e.includes("rar") || e.includes("7z") || e.includes("tar") || e.includes("gzip") || e.includes("compress")
+    )
+  ]),
+  // 字体文件
+  font: d("font"),
+  // 模型文件
+  model: d("model")
+};
+function M(e, t) {
+  return t.some((r) => {
+    const i = r.trim();
+    if (!i)
+      return !1;
+    if (i === e)
+      return !0;
+    if (i.endsWith("/*")) {
+      const n = i.slice(0, i.indexOf("/"));
+      return e.startsWith(`${n}/`);
+    }
+    return !1;
+  });
+}
+async function p(e, t) {
+  const { maxSize: r } = t;
+  if (r && e.size > r)
+    return {
+      valid: !1,
+      error: `上传文件大小不能超过 ${(r / 1024 / 1024).toFixed(2)}MB`,
+      claimedMime: e.type
+    };
+  const i = await y(e.stream());
+  if (!i)
+    return {
+      valid: !1,
+      error: "无法检测文件类型,可能是不支持的格式或文件已损坏",
+      claimedMime: e.type
+    };
+  const n = i.mime, o = i.ext, c = e.type, s = n === c;
+  return !s && c && console.warn("文件MIME类型不匹配", {
+    claimed: c,
+    detected: n,
+    fileName: e.name
+  }), {
+    detectedMime: n,
+    detectedExt: o,
+    claimedMime: c,
+    mimeMatches: s
+  };
+}
+async function u(e, t, r = {}) {
+  const i = await p(e, r);
+  if ("valid" in i && !i.valid)
+    return i;
+  const { detectedMime: n, detectedExt: o, claimedMime: c, mimeMatches: s } = i, m = Array.isArray(t) ? t : t.split(",");
+  return !n || !M(n, m) ? {
+    valid: !1,
+    error: `不支持的文件类型: ${n || "未知"}`,
+    detectedMime: n,
+    detectedExt: o,
+    claimedMime: c,
+    mimeMatches: s
+  } : {
+    valid: !0,
+    detectedMime: n,
+    detectedExt: o,
+    claimedMime: c,
+    mimeMatches: s
+  };
+}
+async function v(e, t, r = {}) {
+  const i = await p(e, r);
+  if ("valid" in i && !i.valid)
+    return i;
+  const { detectedMime: n, detectedExt: o, claimedMime: c, mimeMatches: s } = i, m = Array.isArray(t) ? t : t.split(",").map((a) => a.trim());
+  return !o || !m.some((a) => o === a || `.${o}` === a) ? {
+    valid: !1,
+    error: `不支持的文件扩展名: .${o || "未知"}`,
+    detectedMime: n,
+    detectedExt: o,
+    claimedMime: c,
+    mimeMatches: s
+  } : {
+    valid: !0,
+    detectedMime: n,
+    detectedExt: o,
+    claimedMime: c,
+    mimeMatches: s
+  };
+}
+function A(e, t, r = {}) {
+  return Promise.all(e.map((i) => u(i, t, r)));
+}
+function g(e, t, r = {}) {
+  return Promise.all(e.map((i) => v(i, t, r)));
+}
+function E(e, t) {
+  const r = Array.from(f.image);
+  return u(e, r, { maxSize: t });
+}
+function w(e, t) {
+  const r = Array.from(f.document);
+  return u(e, r, { maxSize: t });
+}
+function F(e, t) {
+  const r = Array.from(f.video);
+  return u(e, r, { maxSize: t });
+}
+export {
+  f as ALLOWED_FILE_TYPES,
+  v as detectFileByExtension,
+  u as detectFileByMime,
+  g as detectionFilesByExtension,
+  A as detectionFilesByMime,
+  w as isValidDocument,
+  E as isValidImage,
+  F as isValidVideo,
+  z as supportedExtensions,
+  l as supportedMimeTypes
+};