openxiangda 1.0.164 → 1.0.166

package/packages/sdk/dist/runtime/react.d.mts

@@ -140,6 +140,75 @@ interface AppFunctionRuntimeContext {
     permissions?: AppFunctionPermissionContext;
     [key: string]: unknown;
 }
+/** Metadata-only declaration stored in an App Function resource manifest. */
+interface AppFunctionSecretRef {
+    name: string;
+    required: boolean;
+}
+/**
+ * Invocation-scoped secret resolver exposed only by trusted_node_v2.
+ * Values are never part of a page SDK response, manifest, build artifact, or
+ * source snapshot.
+ */
+interface AppFunctionSecrets {
+    get(name: string): Promise<string>;
+}
+interface AppFunctionHttpRequest {
+    url: string;
+    method?: "GET" | "POST" | "PUT" | "PATCH" | "DELETE" | "HEAD";
+    params?: Record<string, unknown>;
+    data?: unknown;
+    body?: unknown;
+    headers?: Record<string, string | number>;
+    timeout?: number;
+}
+interface AppFunctionHttpResponse<T = unknown> {
+    data: T;
+    status: number;
+    statusText?: string;
+    headers?: Record<string, unknown>;
+}
+/**
+ * Server-controlled public HTTPS bridge. It never forwards the platform
+ * Runtime bearer token and rejects redirects and private/reserved targets.
+ */
+interface AppFunctionHttpApi {
+    request<T = unknown>(input: AppFunctionHttpRequest): Promise<AppFunctionHttpResponse<T>>;
+    get<T = unknown>(url: string, config?: Omit<AppFunctionHttpRequest, "url" | "method">): Promise<AppFunctionHttpResponse<T>>;
+    post<T = unknown>(url: string, data?: unknown, config?: Omit<AppFunctionHttpRequest, "url" | "method" | "data" | "body">): Promise<AppFunctionHttpResponse<T>>;
+    put<T = unknown>(url: string, data?: unknown, config?: Omit<AppFunctionHttpRequest, "url" | "method" | "data" | "body">): Promise<AppFunctionHttpResponse<T>>;
+    patch<T = unknown>(url: string, data?: unknown, config?: Omit<AppFunctionHttpRequest, "url" | "method" | "data" | "body">): Promise<AppFunctionHttpResponse<T>>;
+    delete<T = unknown>(url: string, config?: Omit<AppFunctionHttpRequest, "url" | "method">): Promise<AppFunctionHttpResponse<T>>;
+}
+interface AppFunctionUtils {
+    http: AppFunctionHttpApi;
+    log?(message: unknown): void;
+    info?(message: unknown): void;
+    error?(message: unknown): void;
+    parseJSON?<T = unknown>(value: string): T;
+    stringify?(value: unknown): string;
+    now?(): number;
+    today?(): Date;
+    uuid?(): string;
+    [key: string]: unknown;
+}
+/** Stable workspace shape for a Function that opts in to secret resolution. */
+interface AppFunctionManifestV2 {
+    code: string;
+    name?: string;
+    description?: string;
+    secretRefs?: AppFunctionSecretRef[];
+    definitionJson: {
+        kind?: "app_function";
+        version: "function_v2";
+        runtimeMode: "trusted_node";
+        runtimeContractVersion: "trusted_node_v2";
+        sourceType?: "file_snapshot";
+        sourceFile?: Record<string, unknown>;
+        [key: string]: unknown;
+    };
+    [key: string]: unknown;
+}
 interface AppFunctionFormQueryParams {
     formCode: string;
     filters?: SearchExpression | Record<string, unknown>;
@@ -300,6 +369,8 @@ interface AppFunctionContext {
     currentUser?: PageUserInfo | AppFunctionOperatorInfo;
     permissions?: AppFunctionPermissionContext;
     runtime?: AppFunctionRuntimeContext;
+    secrets?: AppFunctionSecrets;
+    utils?: AppFunctionUtils;
     resources?: Record<string, unknown>;
     form: AppFunctionFormApi;
     dataView: AppFunctionDataViewApi;
@@ -313,6 +384,12 @@ interface AppFunctionContext {
     methods?: Record<string, (...args: any[]) => unknown>;
     [key: string]: unknown;
 }
+/** trusted_node_v2 always supplies the scoped Secret resolver. */
+interface AppFunctionContextV2 extends AppFunctionContext {
+    secrets: AppFunctionSecrets;
+    utils: AppFunctionUtils;
+}
+type TrustedNodeV2Context = AppFunctionContextV2;
 interface SearchSortItem {
     id: string;
     isAsc: "y" | "n";
@@ -1923,6 +2000,7 @@ interface PublicAccessClient {
     appType: string;
     servicePrefix: string;
     startSession: (input?: PublicAccessSessionInput) => Promise<PublicAccessSessionData>;
+    clearSession: (input?: PublicAccessSessionInput) => void;
 }
 declare class PublicAccessClientError extends Error {
     status?: number;
@@ -2394,4 +2472,4 @@ interface PublicAccessGateProps extends UsePublicAccessOptions {
 }
 declare const PublicAccessGate: React__default.FC<PublicAccessGateProps>;
 
-export { type ApiEnvelope, type ApiPermissionListParams, type AppAuthClient, type AppFunctionConnectorApi, type AppFunctionContext, type AppFunctionDataViewApi, type AppFunctionFormApi, type AppFunctionFormGetByIdParams, type AppFunctionFormQueryParams, type AppFunctionFormWriteParams, type AppFunctionNotificationApi, type AppFunctionOperatorInfo, type AppFunctionOrganizationApi, type AppFunctionPermissionContext, type AppFunctionRuntimeContext, type ApproveTaskParams, type AssignPermissionsParams, type AssignRolesParams, AttachmentPreviewList, type AttachmentPreviewListProps, type AuthChallengePayload, AuthClientError, type AuthClientErrorOptions, type AuthClientOptions, type AuthErrorExtra, type AuthLogoutRedirectOptions, type AuthMethod, type AuthMethodType, type AuthTokenData, type AuthUser, type BatchAddUsersToRoleParams, type BatchSendNotificationByTypeParams, type ChangeOrganizationAccountPasswordParams, type ChangeUserRoleParams, type ConnectorCallParams, type ConnectorInvokeParams, type ConnectorInvokeResult, type ConnectorRequestBodyType, type ConnectorResponseType, type CreateApiPermissionParams, type CreateFileAccessTicketOptions, type CreateFormPermissionGroupDto, type CreateOrganizationAccountParams, type CreateOrganizationDepartmentParams, type CreatePagePermissionGroupDto, type CreateRoleParams, type CreateUiPermissionParams, type CreateUserParams, type CurrentUserDepartmentParents, type CustomPageEntryConfig, type CustomPageEntryMode, type DataManagementConfigParams, type DataManagementFilterState, type DataPermissionConditionDto, type DataPermissionDto, type DataPermissionRuleDto, type DataViewQueryParams, type DataViewQueryResult, type DataViewStatsParams, type DingTalkLoginFlow, type DingTalkLoginInput, type DingTalkNotificationCapabilities, type DingTalkNotificationCardConfig, type DingTalkNotificationCardField, type DingTalkNotificationCardMode, type DingTalkNotificationCardPreview, type DingTalkNotificationChannelConfig, type DingTalkNotificationDeliveryMode, type DingTalkNotificationPreviewResult, type DingTalkOAuthStartInput, type DingTalkOAuthStartResult, type ExecuteProcessOperationInput, type FieldAccessLevel, type FieldAccessPolicyDto, type FieldAccessPolicyItemDto, type FieldOptionValue, type FieldPermissionDto, type FileAccessTicketAction, type FileAccessTicketPurpose, type FileAccessTicketResult, type FilePreviewController, type FilePreviewItem, type FindNotificationConfigParams, type FormAdvancedSearchParams, type FormChangeRecordParams, type FormCreateParams, type FormCreateResult, type FormDetailResult, type FormExportParams, type FormFieldValue, type FormGetDetailParams, type FormImportParams, type FormInstanceIdentifierResult, type FormPermissionGroup, type FormRemoveParams, type FormSearchParams, type FormUpdateParams, type FormUpdateResult, type FunctionInvokeParams, type FunctionInvokeResult, type GetParentDepartmentsOptions, type GetProcessInstanceParams, type GetUserRolesParams, type GuestLoginInput, ImagePreviewGrid, type ImagePreviewGridProps, type ImportExportRecordDownloadParams, type ImportExportRecordQuery, InitiatorApproverSelector, type InstanceStatus, type ListNotificationInboxParams, type ListWorkCenterItemsParams, type LoginLogGetParams, type LoginLogListParams, type LoginLogRecord, type LoginLogStats, type LoginLogStatsParams, type LoginLogStatus, type LoginMethodsResult, LoginPage, type LoginPageProps, type MarkAllNotificationReadResult, type NotificationChannel, type NotificationChannelConfig, type NotificationChannelsConfig, type NotificationConfigLevel, type NotificationInboxListResult, type NotificationInboxMessage, type NotificationInboxReadStatus, type NotificationMessageRecord, type NotificationTemplate, type NotificationTemplatePreview, type NotificationTypeConfig, type NotificationUnreadCountResult, OpenXiangdaPageProvider, type OpenXiangdaPageProviderProps, OpenXiangdaProvider, type OpenXiangdaProviderProps, type OrganizationAccountListParams, type OrganizationCapabilities, type OrganizationListResult, type PageApiPermissionRecord, type PageApiResponse, type PageAppInfo, type PageBinaryResponse, type PageBridgeApi, type PageContext, type PageDataManagementConfig, type PageDataSourceDescriptor, type PageDepartmentInfo, type PageDepartmentRecord, type PageHttpMethod, type PageInfo, type PageListResult, type PageMessageApi, type PageModalApi, type PageNavigationApi, type PageOffsetListResult, type PagePermissionGroup, type PagePermissionInfo, PageProvider, type PageQueryValue, type PageRequestOptions, type PageRoleRecord, type PageRouteInfo, type PageScope, type PageSdk, type PageSdkError, type PageSdkMeta, type PageTransportDownloadPayload, type PageTransportRequestPayload, type PageUiPermissionRecord, type PageUiPermissionType, type PageUserInfo, type PageUserRecord, type PageUserType, type PasswordLoginInput, PermissionBoundary, type PermissionBoundaryFallback, type PermissionBoundaryFallbackState, type PermissionBoundaryProps, type PhoneCodeInput, type PhoneCodeLoginInput, type PhoneCodeRegisterInput, type PhoneCodeSendResult, type PreviewDingTalkNotificationParams, type PreviewNotificationTemplateParams, ProcessActionBar, type ProcessActionBarProps, type ProcessApproveAction, type ProcessCapabilities, type ProcessCapabilityOperation, type ProcessInstanceLookupParams, ProcessPreviewPanel, type ProcessPreviewPanelProps, ProcessTimeline, type ProcessTimelineProps, type PublicAccessClaim, type PublicAccessClient, PublicAccessClientError, type PublicAccessClientOptions, PublicAccessGate, type PublicAccessGateProps, type PublicAccessSessionData, type PublicAccessSessionInput, type PublicStorageAction, type PublicStorageGrant, type QueryFormPermissionGroupDto, type QueryPagePermissionGroupDto, type RefreshInput, type ResetOrganizationAccountPasswordParams, type ResolveLoginUrlInput, type ResolveProcessCapabilitiesParams, type RoleListParams, type RoleUsersParams, type RouteAccessResult, RuntimeAuthGuard, type RuntimeAuthGuardProps, type RuntimeAuthState, type RuntimeAuthStatus, type RuntimeBootstrap, type RuntimeErrorSnapshot, type RuntimeErrorType, type RuntimeLogoutOptions, type RuntimeMenuItem, type RuntimePagePermissions, type RuntimeRedirectLoginOptions, type RuntimeRequestError, type RuntimeRequestState, type RuntimeResolveLoginOptions, type SaveDataManagementConfigParams, type SearchComponentName, type SearchExpression, type SearchFieldKey, type SearchGroup, type SearchLogic, type SearchOperator, type SearchRule, type SearchSortItem, type SearchSystemField, type SendNotificationByTypeParams, type SendNotificationResult, type SsoLoginUrlInput, type SsoLoginUrlResult, type SubFormRule, type SwitchAppRoleParams, type SwitchPlatformRoleParams, type TerminateProcessInstanceParams, type TriggerCallbackTaskParams, type UiPermissionListParams, type UpdateApiPermissionParams, type UpdateFormPermissionGroupDto, type UpdateOrganizationAccountParams, type UpdateOrganizationDepartmentParams, type UpdatePagePermissionGroupDto, type UpdateRoleParams, type UpdateUiPermissionParams, type UpdateUserParams, type UseAuthOptions, type UseCanAccessRouteInput, type UseFilePreviewOptions, type UseLoginMethodsState, type UseProcessActionsOptions, type UseProcessActionsReturn, type UseProcessCapabilitiesOptions, type UseProcessCapabilitiesReturn, type UsePublicAccessOptions, type UsePublicAccessState, type UserListParams, type UserMenuPermissionsResponse, type ValidateUserParams, type ViewFieldPermissionValue, type ViewOperationPermission, type ViewPermissionSummary, type WorkCenterBoxType, type WorkCenterGroupedStat, type WorkCenterItem, type WorkCenterListResult, type WorkCenterStats, type WorkCenterStatsParams, type WorkflowApproveParams, type WorkflowCapabilityActionKey, type WorkflowDefinitionByFormParams, type WorkflowInitiatorSelectCandidatesParams, type WorkflowInitiatorSelectRequirementsParams, type WorkflowPreviewParams, type WorkflowResubmitInitiatorSelectRequirementsParams, type WorkflowResubmitParams, type WorkflowReturnParams, type WorkflowSaveTaskParams, type WorkflowStartFromExistingInstanceParams, type WorkflowTaskParams, type WorkflowTransferParams, type WorkflowWithdrawParams, createAuthClient, createPageFormRuntimeApi, createPageSdk, createPublicAccessClient, createReactPage, getAuthErrorExtra, getAuthErrorReason, isAuthChallengeRequired, isAuthClientError, useAppMenus, useAuth, useCanAccessRoute, useCurrentUser, useDataSource, useFilePreview, useFormViewPermissions, useLoginMethods, useMessage, useModal, useNavigation, useOpenXiangda, usePageContext, usePageFormRuntimeApi, usePageProps, usePageRoute, usePageSdk, usePermission, useProcessActions, useProcessCapabilities, usePublicAccess, useRuntimeAuth, useRuntimeBootstrap };
+export { type ApiEnvelope, type ApiPermissionListParams, type AppAuthClient, type AppFunctionConnectorApi, type AppFunctionContext, type AppFunctionContextV2, type AppFunctionDataViewApi, type AppFunctionFormApi, type AppFunctionFormGetByIdParams, type AppFunctionFormQueryParams, type AppFunctionFormWriteParams, type AppFunctionHttpApi, type AppFunctionHttpRequest, type AppFunctionHttpResponse, type AppFunctionManifestV2, type AppFunctionNotificationApi, type AppFunctionOperatorInfo, type AppFunctionOrganizationApi, type AppFunctionPermissionContext, type AppFunctionRuntimeContext, type AppFunctionSecretRef, type AppFunctionSecrets, type AppFunctionUtils, type ApproveTaskParams, type AssignPermissionsParams, type AssignRolesParams, AttachmentPreviewList, type AttachmentPreviewListProps, type AuthChallengePayload, AuthClientError, type AuthClientErrorOptions, type AuthClientOptions, type AuthErrorExtra, type AuthLogoutRedirectOptions, type AuthMethod, type AuthMethodType, type AuthTokenData, type AuthUser, type BatchAddUsersToRoleParams, type BatchSendNotificationByTypeParams, type ChangeOrganizationAccountPasswordParams, type ChangeUserRoleParams, type ConnectorCallParams, type ConnectorInvokeParams, type ConnectorInvokeResult, type ConnectorRequestBodyType, type ConnectorResponseType, type CreateApiPermissionParams, type CreateFileAccessTicketOptions, type CreateFormPermissionGroupDto, type CreateOrganizationAccountParams, type CreateOrganizationDepartmentParams, type CreatePagePermissionGroupDto, type CreateRoleParams, type CreateUiPermissionParams, type CreateUserParams, type CurrentUserDepartmentParents, type CustomPageEntryConfig, type CustomPageEntryMode, type DataManagementConfigParams, type DataManagementFilterState, type DataPermissionConditionDto, type DataPermissionDto, type DataPermissionRuleDto, type DataViewQueryParams, type DataViewQueryResult, type DataViewStatsParams, type DingTalkLoginFlow, type DingTalkLoginInput, type DingTalkNotificationCapabilities, type DingTalkNotificationCardConfig, type DingTalkNotificationCardField, type DingTalkNotificationCardMode, type DingTalkNotificationCardPreview, type DingTalkNotificationChannelConfig, type DingTalkNotificationDeliveryMode, type DingTalkNotificationPreviewResult, type DingTalkOAuthStartInput, type DingTalkOAuthStartResult, type ExecuteProcessOperationInput, type FieldAccessLevel, type FieldAccessPolicyDto, type FieldAccessPolicyItemDto, type FieldOptionValue, type FieldPermissionDto, type FileAccessTicketAction, type FileAccessTicketPurpose, type FileAccessTicketResult, type FilePreviewController, type FilePreviewItem, type FindNotificationConfigParams, type FormAdvancedSearchParams, type FormChangeRecordParams, type FormCreateParams, type FormCreateResult, type FormDetailResult, type FormExportParams, type FormFieldValue, type FormGetDetailParams, type FormImportParams, type FormInstanceIdentifierResult, type FormPermissionGroup, type FormRemoveParams, type FormSearchParams, type FormUpdateParams, type FormUpdateResult, type FunctionInvokeParams, type FunctionInvokeResult, type GetParentDepartmentsOptions, type GetProcessInstanceParams, type GetUserRolesParams, type GuestLoginInput, ImagePreviewGrid, type ImagePreviewGridProps, type ImportExportRecordDownloadParams, type ImportExportRecordQuery, InitiatorApproverSelector, type InstanceStatus, type ListNotificationInboxParams, type ListWorkCenterItemsParams, type LoginLogGetParams, type LoginLogListParams, type LoginLogRecord, type LoginLogStats, type LoginLogStatsParams, type LoginLogStatus, type LoginMethodsResult, LoginPage, type LoginPageProps, type MarkAllNotificationReadResult, type NotificationChannel, type NotificationChannelConfig, type NotificationChannelsConfig, type NotificationConfigLevel, type NotificationInboxListResult, type NotificationInboxMessage, type NotificationInboxReadStatus, type NotificationMessageRecord, type NotificationTemplate, type NotificationTemplatePreview, type NotificationTypeConfig, type NotificationUnreadCountResult, OpenXiangdaPageProvider, type OpenXiangdaPageProviderProps, OpenXiangdaProvider, type OpenXiangdaProviderProps, type OrganizationAccountListParams, type OrganizationCapabilities, type OrganizationListResult, type PageApiPermissionRecord, type PageApiResponse, type PageAppInfo, type PageBinaryResponse, type PageBridgeApi, type PageContext, type PageDataManagementConfig, type PageDataSourceDescriptor, type PageDepartmentInfo, type PageDepartmentRecord, type PageHttpMethod, type PageInfo, type PageListResult, type PageMessageApi, type PageModalApi, type PageNavigationApi, type PageOffsetListResult, type PagePermissionGroup, type PagePermissionInfo, PageProvider, type PageQueryValue, type PageRequestOptions, type PageRoleRecord, type PageRouteInfo, type PageScope, type PageSdk, type PageSdkError, type PageSdkMeta, type PageTransportDownloadPayload, type PageTransportRequestPayload, type PageUiPermissionRecord, type PageUiPermissionType, type PageUserInfo, type PageUserRecord, type PageUserType, type PasswordLoginInput, PermissionBoundary, type PermissionBoundaryFallback, type PermissionBoundaryFallbackState, type PermissionBoundaryProps, type PhoneCodeInput, type PhoneCodeLoginInput, type PhoneCodeRegisterInput, type PhoneCodeSendResult, type PreviewDingTalkNotificationParams, type PreviewNotificationTemplateParams, ProcessActionBar, type ProcessActionBarProps, type ProcessApproveAction, type ProcessCapabilities, type ProcessCapabilityOperation, type ProcessInstanceLookupParams, ProcessPreviewPanel, type ProcessPreviewPanelProps, ProcessTimeline, type ProcessTimelineProps, type PublicAccessClaim, type PublicAccessClient, PublicAccessClientError, type PublicAccessClientOptions, PublicAccessGate, type PublicAccessGateProps, type PublicAccessSessionData, type PublicAccessSessionInput, type PublicStorageAction, type PublicStorageGrant, type QueryFormPermissionGroupDto, type QueryPagePermissionGroupDto, type RefreshInput, type ResetOrganizationAccountPasswordParams, type ResolveLoginUrlInput, type ResolveProcessCapabilitiesParams, type RoleListParams, type RoleUsersParams, type RouteAccessResult, RuntimeAuthGuard, type RuntimeAuthGuardProps, type RuntimeAuthState, type RuntimeAuthStatus, type RuntimeBootstrap, type RuntimeErrorSnapshot, type RuntimeErrorType, type RuntimeLogoutOptions, type RuntimeMenuItem, type RuntimePagePermissions, type RuntimeRedirectLoginOptions, type RuntimeRequestError, type RuntimeRequestState, type RuntimeResolveLoginOptions, type SaveDataManagementConfigParams, type SearchComponentName, type SearchExpression, type SearchFieldKey, type SearchGroup, type SearchLogic, type SearchOperator, type SearchRule, type SearchSortItem, type SearchSystemField, type SendNotificationByTypeParams, type SendNotificationResult, type SsoLoginUrlInput, type SsoLoginUrlResult, type SubFormRule, type SwitchAppRoleParams, type SwitchPlatformRoleParams, type TerminateProcessInstanceParams, type TriggerCallbackTaskParams, type TrustedNodeV2Context, type UiPermissionListParams, type UpdateApiPermissionParams, type UpdateFormPermissionGroupDto, type UpdateOrganizationAccountParams, type UpdateOrganizationDepartmentParams, type UpdatePagePermissionGroupDto, type UpdateRoleParams, type UpdateUiPermissionParams, type UpdateUserParams, type UseAuthOptions, type UseCanAccessRouteInput, type UseFilePreviewOptions, type UseLoginMethodsState, type UseProcessActionsOptions, type UseProcessActionsReturn, type UseProcessCapabilitiesOptions, type UseProcessCapabilitiesReturn, type UsePublicAccessOptions, type UsePublicAccessState, type UserListParams, type UserMenuPermissionsResponse, type ValidateUserParams, type ViewFieldPermissionValue, type ViewOperationPermission, type ViewPermissionSummary, type WorkCenterBoxType, type WorkCenterGroupedStat, type WorkCenterItem, type WorkCenterListResult, type WorkCenterStats, type WorkCenterStatsParams, type WorkflowApproveParams, type WorkflowCapabilityActionKey, type WorkflowDefinitionByFormParams, type WorkflowInitiatorSelectCandidatesParams, type WorkflowInitiatorSelectRequirementsParams, type WorkflowPreviewParams, type WorkflowResubmitInitiatorSelectRequirementsParams, type WorkflowResubmitParams, type WorkflowReturnParams, type WorkflowSaveTaskParams, type WorkflowStartFromExistingInstanceParams, type WorkflowTaskParams, type WorkflowTransferParams, type WorkflowWithdrawParams, createAuthClient, createPageFormRuntimeApi, createPageSdk, createPublicAccessClient, createReactPage, getAuthErrorExtra, getAuthErrorReason, isAuthChallengeRequired, isAuthClientError, useAppMenus, useAuth, useCanAccessRoute, useCurrentUser, useDataSource, useFilePreview, useFormViewPermissions, useLoginMethods, useMessage, useModal, useNavigation, useOpenXiangda, usePageContext, usePageFormRuntimeApi, usePageProps, usePageRoute, usePageSdk, usePermission, useProcessActions, useProcessCapabilities, usePublicAccess, useRuntimeAuth, useRuntimeBootstrap };

package/packages/sdk/dist/runtime/react.d.ts

@@ -140,6 +140,75 @@ interface AppFunctionRuntimeContext {
     permissions?: AppFunctionPermissionContext;
     [key: string]: unknown;
 }
+/** Metadata-only declaration stored in an App Function resource manifest. */
+interface AppFunctionSecretRef {
+    name: string;
+    required: boolean;
+}
+/**
+ * Invocation-scoped secret resolver exposed only by trusted_node_v2.
+ * Values are never part of a page SDK response, manifest, build artifact, or
+ * source snapshot.
+ */
+interface AppFunctionSecrets {
+    get(name: string): Promise<string>;
+}
+interface AppFunctionHttpRequest {
+    url: string;
+    method?: "GET" | "POST" | "PUT" | "PATCH" | "DELETE" | "HEAD";
+    params?: Record<string, unknown>;
+    data?: unknown;
+    body?: unknown;
+    headers?: Record<string, string | number>;
+    timeout?: number;
+}
+interface AppFunctionHttpResponse<T = unknown> {
+    data: T;
+    status: number;
+    statusText?: string;
+    headers?: Record<string, unknown>;
+}
+/**
+ * Server-controlled public HTTPS bridge. It never forwards the platform
+ * Runtime bearer token and rejects redirects and private/reserved targets.
+ */
+interface AppFunctionHttpApi {
+    request<T = unknown>(input: AppFunctionHttpRequest): Promise<AppFunctionHttpResponse<T>>;
+    get<T = unknown>(url: string, config?: Omit<AppFunctionHttpRequest, "url" | "method">): Promise<AppFunctionHttpResponse<T>>;
+    post<T = unknown>(url: string, data?: unknown, config?: Omit<AppFunctionHttpRequest, "url" | "method" | "data" | "body">): Promise<AppFunctionHttpResponse<T>>;
+    put<T = unknown>(url: string, data?: unknown, config?: Omit<AppFunctionHttpRequest, "url" | "method" | "data" | "body">): Promise<AppFunctionHttpResponse<T>>;
+    patch<T = unknown>(url: string, data?: unknown, config?: Omit<AppFunctionHttpRequest, "url" | "method" | "data" | "body">): Promise<AppFunctionHttpResponse<T>>;
+    delete<T = unknown>(url: string, config?: Omit<AppFunctionHttpRequest, "url" | "method">): Promise<AppFunctionHttpResponse<T>>;
+}
+interface AppFunctionUtils {
+    http: AppFunctionHttpApi;
+    log?(message: unknown): void;
+    info?(message: unknown): void;
+    error?(message: unknown): void;
+    parseJSON?<T = unknown>(value: string): T;
+    stringify?(value: unknown): string;
+    now?(): number;
+    today?(): Date;
+    uuid?(): string;
+    [key: string]: unknown;
+}
+/** Stable workspace shape for a Function that opts in to secret resolution. */
+interface AppFunctionManifestV2 {
+    code: string;
+    name?: string;
+    description?: string;
+    secretRefs?: AppFunctionSecretRef[];
+    definitionJson: {
+        kind?: "app_function";
+        version: "function_v2";
+        runtimeMode: "trusted_node";
+        runtimeContractVersion: "trusted_node_v2";
+        sourceType?: "file_snapshot";
+        sourceFile?: Record<string, unknown>;
+        [key: string]: unknown;
+    };
+    [key: string]: unknown;
+}
 interface AppFunctionFormQueryParams {
     formCode: string;
     filters?: SearchExpression | Record<string, unknown>;
@@ -300,6 +369,8 @@ interface AppFunctionContext {
     currentUser?: PageUserInfo | AppFunctionOperatorInfo;
     permissions?: AppFunctionPermissionContext;
     runtime?: AppFunctionRuntimeContext;
+    secrets?: AppFunctionSecrets;
+    utils?: AppFunctionUtils;
     resources?: Record<string, unknown>;
     form: AppFunctionFormApi;
     dataView: AppFunctionDataViewApi;
@@ -313,6 +384,12 @@ interface AppFunctionContext {
     methods?: Record<string, (...args: any[]) => unknown>;
     [key: string]: unknown;
 }
+/** trusted_node_v2 always supplies the scoped Secret resolver. */
+interface AppFunctionContextV2 extends AppFunctionContext {
+    secrets: AppFunctionSecrets;
+    utils: AppFunctionUtils;
+}
+type TrustedNodeV2Context = AppFunctionContextV2;
 interface SearchSortItem {
     id: string;
     isAsc: "y" | "n";
@@ -1923,6 +2000,7 @@ interface PublicAccessClient {
     appType: string;
     servicePrefix: string;
     startSession: (input?: PublicAccessSessionInput) => Promise<PublicAccessSessionData>;
+    clearSession: (input?: PublicAccessSessionInput) => void;
 }
 declare class PublicAccessClientError extends Error {
     status?: number;
@@ -2394,4 +2472,4 @@ interface PublicAccessGateProps extends UsePublicAccessOptions {
 }
 declare const PublicAccessGate: React__default.FC<PublicAccessGateProps>;
 
-export { type ApiEnvelope, type ApiPermissionListParams, type AppAuthClient, type AppFunctionConnectorApi, type AppFunctionContext, type AppFunctionDataViewApi, type AppFunctionFormApi, type AppFunctionFormGetByIdParams, type AppFunctionFormQueryParams, type AppFunctionFormWriteParams, type AppFunctionNotificationApi, type AppFunctionOperatorInfo, type AppFunctionOrganizationApi, type AppFunctionPermissionContext, type AppFunctionRuntimeContext, type ApproveTaskParams, type AssignPermissionsParams, type AssignRolesParams, AttachmentPreviewList, type AttachmentPreviewListProps, type AuthChallengePayload, AuthClientError, type AuthClientErrorOptions, type AuthClientOptions, type AuthErrorExtra, type AuthLogoutRedirectOptions, type AuthMethod, type AuthMethodType, type AuthTokenData, type AuthUser, type BatchAddUsersToRoleParams, type BatchSendNotificationByTypeParams, type ChangeOrganizationAccountPasswordParams, type ChangeUserRoleParams, type ConnectorCallParams, type ConnectorInvokeParams, type ConnectorInvokeResult, type ConnectorRequestBodyType, type ConnectorResponseType, type CreateApiPermissionParams, type CreateFileAccessTicketOptions, type CreateFormPermissionGroupDto, type CreateOrganizationAccountParams, type CreateOrganizationDepartmentParams, type CreatePagePermissionGroupDto, type CreateRoleParams, type CreateUiPermissionParams, type CreateUserParams, type CurrentUserDepartmentParents, type CustomPageEntryConfig, type CustomPageEntryMode, type DataManagementConfigParams, type DataManagementFilterState, type DataPermissionConditionDto, type DataPermissionDto, type DataPermissionRuleDto, type DataViewQueryParams, type DataViewQueryResult, type DataViewStatsParams, type DingTalkLoginFlow, type DingTalkLoginInput, type DingTalkNotificationCapabilities, type DingTalkNotificationCardConfig, type DingTalkNotificationCardField, type DingTalkNotificationCardMode, type DingTalkNotificationCardPreview, type DingTalkNotificationChannelConfig, type DingTalkNotificationDeliveryMode, type DingTalkNotificationPreviewResult, type DingTalkOAuthStartInput, type DingTalkOAuthStartResult, type ExecuteProcessOperationInput, type FieldAccessLevel, type FieldAccessPolicyDto, type FieldAccessPolicyItemDto, type FieldOptionValue, type FieldPermissionDto, type FileAccessTicketAction, type FileAccessTicketPurpose, type FileAccessTicketResult, type FilePreviewController, type FilePreviewItem, type FindNotificationConfigParams, type FormAdvancedSearchParams, type FormChangeRecordParams, type FormCreateParams, type FormCreateResult, type FormDetailResult, type FormExportParams, type FormFieldValue, type FormGetDetailParams, type FormImportParams, type FormInstanceIdentifierResult, type FormPermissionGroup, type FormRemoveParams, type FormSearchParams, type FormUpdateParams, type FormUpdateResult, type FunctionInvokeParams, type FunctionInvokeResult, type GetParentDepartmentsOptions, type GetProcessInstanceParams, type GetUserRolesParams, type GuestLoginInput, ImagePreviewGrid, type ImagePreviewGridProps, type ImportExportRecordDownloadParams, type ImportExportRecordQuery, InitiatorApproverSelector, type InstanceStatus, type ListNotificationInboxParams, type ListWorkCenterItemsParams, type LoginLogGetParams, type LoginLogListParams, type LoginLogRecord, type LoginLogStats, type LoginLogStatsParams, type LoginLogStatus, type LoginMethodsResult, LoginPage, type LoginPageProps, type MarkAllNotificationReadResult, type NotificationChannel, type NotificationChannelConfig, type NotificationChannelsConfig, type NotificationConfigLevel, type NotificationInboxListResult, type NotificationInboxMessage, type NotificationInboxReadStatus, type NotificationMessageRecord, type NotificationTemplate, type NotificationTemplatePreview, type NotificationTypeConfig, type NotificationUnreadCountResult, OpenXiangdaPageProvider, type OpenXiangdaPageProviderProps, OpenXiangdaProvider, type OpenXiangdaProviderProps, type OrganizationAccountListParams, type OrganizationCapabilities, type OrganizationListResult, type PageApiPermissionRecord, type PageApiResponse, type PageAppInfo, type PageBinaryResponse, type PageBridgeApi, type PageContext, type PageDataManagementConfig, type PageDataSourceDescriptor, type PageDepartmentInfo, type PageDepartmentRecord, type PageHttpMethod, type PageInfo, type PageListResult, type PageMessageApi, type PageModalApi, type PageNavigationApi, type PageOffsetListResult, type PagePermissionGroup, type PagePermissionInfo, PageProvider, type PageQueryValue, type PageRequestOptions, type PageRoleRecord, type PageRouteInfo, type PageScope, type PageSdk, type PageSdkError, type PageSdkMeta, type PageTransportDownloadPayload, type PageTransportRequestPayload, type PageUiPermissionRecord, type PageUiPermissionType, type PageUserInfo, type PageUserRecord, type PageUserType, type PasswordLoginInput, PermissionBoundary, type PermissionBoundaryFallback, type PermissionBoundaryFallbackState, type PermissionBoundaryProps, type PhoneCodeInput, type PhoneCodeLoginInput, type PhoneCodeRegisterInput, type PhoneCodeSendResult, type PreviewDingTalkNotificationParams, type PreviewNotificationTemplateParams, ProcessActionBar, type ProcessActionBarProps, type ProcessApproveAction, type ProcessCapabilities, type ProcessCapabilityOperation, type ProcessInstanceLookupParams, ProcessPreviewPanel, type ProcessPreviewPanelProps, ProcessTimeline, type ProcessTimelineProps, type PublicAccessClaim, type PublicAccessClient, PublicAccessClientError, type PublicAccessClientOptions, PublicAccessGate, type PublicAccessGateProps, type PublicAccessSessionData, type PublicAccessSessionInput, type PublicStorageAction, type PublicStorageGrant, type QueryFormPermissionGroupDto, type QueryPagePermissionGroupDto, type RefreshInput, type ResetOrganizationAccountPasswordParams, type ResolveLoginUrlInput, type ResolveProcessCapabilitiesParams, type RoleListParams, type RoleUsersParams, type RouteAccessResult, RuntimeAuthGuard, type RuntimeAuthGuardProps, type RuntimeAuthState, type RuntimeAuthStatus, type RuntimeBootstrap, type RuntimeErrorSnapshot, type RuntimeErrorType, type RuntimeLogoutOptions, type RuntimeMenuItem, type RuntimePagePermissions, type RuntimeRedirectLoginOptions, type RuntimeRequestError, type RuntimeRequestState, type RuntimeResolveLoginOptions, type SaveDataManagementConfigParams, type SearchComponentName, type SearchExpression, type SearchFieldKey, type SearchGroup, type SearchLogic, type SearchOperator, type SearchRule, type SearchSortItem, type SearchSystemField, type SendNotificationByTypeParams, type SendNotificationResult, type SsoLoginUrlInput, type SsoLoginUrlResult, type SubFormRule, type SwitchAppRoleParams, type SwitchPlatformRoleParams, type TerminateProcessInstanceParams, type TriggerCallbackTaskParams, type UiPermissionListParams, type UpdateApiPermissionParams, type UpdateFormPermissionGroupDto, type UpdateOrganizationAccountParams, type UpdateOrganizationDepartmentParams, type UpdatePagePermissionGroupDto, type UpdateRoleParams, type UpdateUiPermissionParams, type UpdateUserParams, type UseAuthOptions, type UseCanAccessRouteInput, type UseFilePreviewOptions, type UseLoginMethodsState, type UseProcessActionsOptions, type UseProcessActionsReturn, type UseProcessCapabilitiesOptions, type UseProcessCapabilitiesReturn, type UsePublicAccessOptions, type UsePublicAccessState, type UserListParams, type UserMenuPermissionsResponse, type ValidateUserParams, type ViewFieldPermissionValue, type ViewOperationPermission, type ViewPermissionSummary, type WorkCenterBoxType, type WorkCenterGroupedStat, type WorkCenterItem, type WorkCenterListResult, type WorkCenterStats, type WorkCenterStatsParams, type WorkflowApproveParams, type WorkflowCapabilityActionKey, type WorkflowDefinitionByFormParams, type WorkflowInitiatorSelectCandidatesParams, type WorkflowInitiatorSelectRequirementsParams, type WorkflowPreviewParams, type WorkflowResubmitInitiatorSelectRequirementsParams, type WorkflowResubmitParams, type WorkflowReturnParams, type WorkflowSaveTaskParams, type WorkflowStartFromExistingInstanceParams, type WorkflowTaskParams, type WorkflowTransferParams, type WorkflowWithdrawParams, createAuthClient, createPageFormRuntimeApi, createPageSdk, createPublicAccessClient, createReactPage, getAuthErrorExtra, getAuthErrorReason, isAuthChallengeRequired, isAuthClientError, useAppMenus, useAuth, useCanAccessRoute, useCurrentUser, useDataSource, useFilePreview, useFormViewPermissions, useLoginMethods, useMessage, useModal, useNavigation, useOpenXiangda, usePageContext, usePageFormRuntimeApi, usePageProps, usePageRoute, usePageSdk, usePermission, useProcessActions, useProcessCapabilities, usePublicAccess, useRuntimeAuth, useRuntimeBootstrap };
+export { type ApiEnvelope, type ApiPermissionListParams, type AppAuthClient, type AppFunctionConnectorApi, type AppFunctionContext, type AppFunctionContextV2, type AppFunctionDataViewApi, type AppFunctionFormApi, type AppFunctionFormGetByIdParams, type AppFunctionFormQueryParams, type AppFunctionFormWriteParams, type AppFunctionHttpApi, type AppFunctionHttpRequest, type AppFunctionHttpResponse, type AppFunctionManifestV2, type AppFunctionNotificationApi, type AppFunctionOperatorInfo, type AppFunctionOrganizationApi, type AppFunctionPermissionContext, type AppFunctionRuntimeContext, type AppFunctionSecretRef, type AppFunctionSecrets, type AppFunctionUtils, type ApproveTaskParams, type AssignPermissionsParams, type AssignRolesParams, AttachmentPreviewList, type AttachmentPreviewListProps, type AuthChallengePayload, AuthClientError, type AuthClientErrorOptions, type AuthClientOptions, type AuthErrorExtra, type AuthLogoutRedirectOptions, type AuthMethod, type AuthMethodType, type AuthTokenData, type AuthUser, type BatchAddUsersToRoleParams, type BatchSendNotificationByTypeParams, type ChangeOrganizationAccountPasswordParams, type ChangeUserRoleParams, type ConnectorCallParams, type ConnectorInvokeParams, type ConnectorInvokeResult, type ConnectorRequestBodyType, type ConnectorResponseType, type CreateApiPermissionParams, type CreateFileAccessTicketOptions, type CreateFormPermissionGroupDto, type CreateOrganizationAccountParams, type CreateOrganizationDepartmentParams, type CreatePagePermissionGroupDto, type CreateRoleParams, type CreateUiPermissionParams, type CreateUserParams, type CurrentUserDepartmentParents, type CustomPageEntryConfig, type CustomPageEntryMode, type DataManagementConfigParams, type DataManagementFilterState, type DataPermissionConditionDto, type DataPermissionDto, type DataPermissionRuleDto, type DataViewQueryParams, type DataViewQueryResult, type DataViewStatsParams, type DingTalkLoginFlow, type DingTalkLoginInput, type DingTalkNotificationCapabilities, type DingTalkNotificationCardConfig, type DingTalkNotificationCardField, type DingTalkNotificationCardMode, type DingTalkNotificationCardPreview, type DingTalkNotificationChannelConfig, type DingTalkNotificationDeliveryMode, type DingTalkNotificationPreviewResult, type DingTalkOAuthStartInput, type DingTalkOAuthStartResult, type ExecuteProcessOperationInput, type FieldAccessLevel, type FieldAccessPolicyDto, type FieldAccessPolicyItemDto, type FieldOptionValue, type FieldPermissionDto, type FileAccessTicketAction, type FileAccessTicketPurpose, type FileAccessTicketResult, type FilePreviewController, type FilePreviewItem, type FindNotificationConfigParams, type FormAdvancedSearchParams, type FormChangeRecordParams, type FormCreateParams, type FormCreateResult, type FormDetailResult, type FormExportParams, type FormFieldValue, type FormGetDetailParams, type FormImportParams, type FormInstanceIdentifierResult, type FormPermissionGroup, type FormRemoveParams, type FormSearchParams, type FormUpdateParams, type FormUpdateResult, type FunctionInvokeParams, type FunctionInvokeResult, type GetParentDepartmentsOptions, type GetProcessInstanceParams, type GetUserRolesParams, type GuestLoginInput, ImagePreviewGrid, type ImagePreviewGridProps, type ImportExportRecordDownloadParams, type ImportExportRecordQuery, InitiatorApproverSelector, type InstanceStatus, type ListNotificationInboxParams, type ListWorkCenterItemsParams, type LoginLogGetParams, type LoginLogListParams, type LoginLogRecord, type LoginLogStats, type LoginLogStatsParams, type LoginLogStatus, type LoginMethodsResult, LoginPage, type LoginPageProps, type MarkAllNotificationReadResult, type NotificationChannel, type NotificationChannelConfig, type NotificationChannelsConfig, type NotificationConfigLevel, type NotificationInboxListResult, type NotificationInboxMessage, type NotificationInboxReadStatus, type NotificationMessageRecord, type NotificationTemplate, type NotificationTemplatePreview, type NotificationTypeConfig, type NotificationUnreadCountResult, OpenXiangdaPageProvider, type OpenXiangdaPageProviderProps, OpenXiangdaProvider, type OpenXiangdaProviderProps, type OrganizationAccountListParams, type OrganizationCapabilities, type OrganizationListResult, type PageApiPermissionRecord, type PageApiResponse, type PageAppInfo, type PageBinaryResponse, type PageBridgeApi, type PageContext, type PageDataManagementConfig, type PageDataSourceDescriptor, type PageDepartmentInfo, type PageDepartmentRecord, type PageHttpMethod, type PageInfo, type PageListResult, type PageMessageApi, type PageModalApi, type PageNavigationApi, type PageOffsetListResult, type PagePermissionGroup, type PagePermissionInfo, PageProvider, type PageQueryValue, type PageRequestOptions, type PageRoleRecord, type PageRouteInfo, type PageScope, type PageSdk, type PageSdkError, type PageSdkMeta, type PageTransportDownloadPayload, type PageTransportRequestPayload, type PageUiPermissionRecord, type PageUiPermissionType, type PageUserInfo, type PageUserRecord, type PageUserType, type PasswordLoginInput, PermissionBoundary, type PermissionBoundaryFallback, type PermissionBoundaryFallbackState, type PermissionBoundaryProps, type PhoneCodeInput, type PhoneCodeLoginInput, type PhoneCodeRegisterInput, type PhoneCodeSendResult, type PreviewDingTalkNotificationParams, type PreviewNotificationTemplateParams, ProcessActionBar, type ProcessActionBarProps, type ProcessApproveAction, type ProcessCapabilities, type ProcessCapabilityOperation, type ProcessInstanceLookupParams, ProcessPreviewPanel, type ProcessPreviewPanelProps, ProcessTimeline, type ProcessTimelineProps, type PublicAccessClaim, type PublicAccessClient, PublicAccessClientError, type PublicAccessClientOptions, PublicAccessGate, type PublicAccessGateProps, type PublicAccessSessionData, type PublicAccessSessionInput, type PublicStorageAction, type PublicStorageGrant, type QueryFormPermissionGroupDto, type QueryPagePermissionGroupDto, type RefreshInput, type ResetOrganizationAccountPasswordParams, type ResolveLoginUrlInput, type ResolveProcessCapabilitiesParams, type RoleListParams, type RoleUsersParams, type RouteAccessResult, RuntimeAuthGuard, type RuntimeAuthGuardProps, type RuntimeAuthState, type RuntimeAuthStatus, type RuntimeBootstrap, type RuntimeErrorSnapshot, type RuntimeErrorType, type RuntimeLogoutOptions, type RuntimeMenuItem, type RuntimePagePermissions, type RuntimeRedirectLoginOptions, type RuntimeRequestError, type RuntimeRequestState, type RuntimeResolveLoginOptions, type SaveDataManagementConfigParams, type SearchComponentName, type SearchExpression, type SearchFieldKey, type SearchGroup, type SearchLogic, type SearchOperator, type SearchRule, type SearchSortItem, type SearchSystemField, type SendNotificationByTypeParams, type SendNotificationResult, type SsoLoginUrlInput, type SsoLoginUrlResult, type SubFormRule, type SwitchAppRoleParams, type SwitchPlatformRoleParams, type TerminateProcessInstanceParams, type TriggerCallbackTaskParams, type TrustedNodeV2Context, type UiPermissionListParams, type UpdateApiPermissionParams, type UpdateFormPermissionGroupDto, type UpdateOrganizationAccountParams, type UpdateOrganizationDepartmentParams, type UpdatePagePermissionGroupDto, type UpdateRoleParams, type UpdateUiPermissionParams, type UpdateUserParams, type UseAuthOptions, type UseCanAccessRouteInput, type UseFilePreviewOptions, type UseLoginMethodsState, type UseProcessActionsOptions, type UseProcessActionsReturn, type UseProcessCapabilitiesOptions, type UseProcessCapabilitiesReturn, type UsePublicAccessOptions, type UsePublicAccessState, type UserListParams, type UserMenuPermissionsResponse, type ValidateUserParams, type ViewFieldPermissionValue, type ViewOperationPermission, type ViewPermissionSummary, type WorkCenterBoxType, type WorkCenterGroupedStat, type WorkCenterItem, type WorkCenterListResult, type WorkCenterStats, type WorkCenterStatsParams, type WorkflowApproveParams, type WorkflowCapabilityActionKey, type WorkflowDefinitionByFormParams, type WorkflowInitiatorSelectCandidatesParams, type WorkflowInitiatorSelectRequirementsParams, type WorkflowPreviewParams, type WorkflowResubmitInitiatorSelectRequirementsParams, type WorkflowResubmitParams, type WorkflowReturnParams, type WorkflowSaveTaskParams, type WorkflowStartFromExistingInstanceParams, type WorkflowTaskParams, type WorkflowTransferParams, type WorkflowWithdrawParams, createAuthClient, createPageFormRuntimeApi, createPageSdk, createPublicAccessClient, createReactPage, getAuthErrorExtra, getAuthErrorReason, isAuthChallengeRequired, isAuthClientError, useAppMenus, useAuth, useCanAccessRoute, useCurrentUser, useDataSource, useFilePreview, useFormViewPermissions, useLoginMethods, useMessage, useModal, useNavigation, useOpenXiangda, usePageContext, usePageFormRuntimeApi, usePageProps, usePageRoute, usePageSdk, usePermission, useProcessActions, useProcessCapabilities, usePublicAccess, useRuntimeAuth, useRuntimeBootstrap };

package/packages/sdk/dist/runtime/react.mjs

@@ -8959,6 +8959,8 @@ var resolveAppTypeFromLocation = () => {
 import { useCallback as useCallback11, useEffect as useEffect13, useMemo as useMemo16, useRef as useRef7, useState as useState14 } from "react";
 
 // packages/sdk/src/runtime/core/publicAccess.ts
+var PUBLIC_SESSION_RENEW_WINDOW_MS = 5 * 60 * 1e3;
+var publicSessionInflight = /* @__PURE__ */ new Map();
 var PublicAccessClientError = class extends Error {
   constructor(message3, options = {}) {
     super(message3);
@@ -8986,48 +8988,144 @@ var createPublicAccessClient = ({
       userAgent: input.userAgent || getCurrentUserAgent(),
       guestIdentifier: input.guestIdentifier || getOrCreatePublicGuestIdentifier(normalizedAppType)
     };
-    const response = await boundFetch(
-      buildServiceUrl3(
-        servicePrefix,
-        `/openxiangda-api/v1/apps/${encodeURIComponent(
-          normalizedAppType
-        )}/public/session`
-      ),
-      {
-        method: "POST",
-        credentials: "include",
-        headers: {
-          accept: "application/json",
-          "content-type": "application/json"
-        },
-        body: JSON.stringify(body)
-      }
+    const identity = buildPublicSessionIdentity(
+      normalizedAppType,
+      servicePrefix,
+      body
     );
-    const payload = await readPayload2(response);
-    const code = getRecordValue3(payload, "code");
-    const success = getRecordValue3(payload, "success");
-    if (!response.ok || success === false || !isSuccessCode7(code)) {
-      throw new PublicAccessClientError(
-        String(
-          getRecordValue3(payload, "message") || `Public access session failed: ${response.status}`
+    const cached = readCachedPublicSession(identity);
+    if (cached) return cached;
+    const existing = publicSessionInflight.get(identity);
+    if (existing) return existing;
+    const pending = (async () => {
+      const response = await boundFetch(
+        buildServiceUrl3(
+          servicePrefix,
+          `/openxiangda-api/v1/apps/${encodeURIComponent(
+            normalizedAppType
+          )}/public/session`
         ),
-        { status: response.status, code, payload }
+        {
+          method: "POST",
+          credentials: "include",
+          headers: {
+            accept: "application/json",
+            "content-type": "application/json"
+          },
+          body: JSON.stringify(body)
+        }
       );
+      const payload = await readPayload2(response);
+      const code = getRecordValue3(payload, "code");
+      const success = getRecordValue3(payload, "success");
+      if (!response.ok || success === false || !isSuccessCode7(code)) {
+        throw new PublicAccessClientError(
+          String(
+            getRecordValue3(payload, "message") || `Public access session failed: ${response.status}`
+          ),
+          { status: response.status, code, payload }
+        );
+      }
+      const data = getRecordValue3(payload, "data");
+      const extra = getRecordValue3(payload, "extra");
+      const session = {
+        ...data,
+        publicAccess: extra?.publicAccess || null,
+        raw: payload
+      };
+      writeCachedPublicSession(identity, session);
+      return session;
+    })();
+    publicSessionInflight.set(identity, pending);
+    try {
+      return await pending;
+    } finally {
+      if (publicSessionInflight.get(identity) === pending) {
+        publicSessionInflight.delete(identity);
+      }
     }
-    const data = getRecordValue3(payload, "data");
-    const extra = getRecordValue3(payload, "extra");
-    return {
-      ...data,
-      publicAccess: extra?.publicAccess || null,
-      raw: payload
-    };
   };
   return {
     appType: normalizedAppType,
     servicePrefix,
-    startSession: request
+    startSession: request,
+    clearSession: (input = {}) => {
+      const body = {
+        ...input,
+        path: input.path || getCurrentPathname2(),
+        domain: input.domain || getCurrentDomain(),
+        userAgent: input.userAgent || getCurrentUserAgent(),
+        guestIdentifier: input.guestIdentifier || getOrCreatePublicGuestIdentifier(normalizedAppType)
+      };
+      clearCachedPublicSession(
+        buildPublicSessionIdentity(normalizedAppType, servicePrefix, body)
+      );
+    }
   };
 };
+var buildPublicSessionIdentity = (appType, servicePrefix, input) => JSON.stringify({
+  appType,
+  servicePrefix: servicePrefix.replace(/\/$/, ""),
+  path: input.path || "",
+  policyCode: input.policyCode || "",
+  routeCode: input.routeCode || "",
+  ticket: input.ticket || "",
+  guestIdentifier: input.guestIdentifier || "",
+  domain: input.domain || ""
+});
+var publicSessionStorageKey = (identity) => {
+  let hash = 2166136261;
+  for (let index = 0; index < identity.length; index += 1) {
+    hash ^= identity.charCodeAt(index);
+    hash = Math.imul(hash, 16777619);
+  }
+  return `openxiangda:public:session:v1:${identity.length}:${(hash >>> 0).toString(16)}`;
+};
+var readCachedPublicSession = (identity) => {
+  try {
+    if (typeof window === "undefined" || !window.sessionStorage) return null;
+    const raw = window.sessionStorage.getItem(publicSessionStorageKey(identity));
+    if (!raw) return null;
+    const parsed = JSON.parse(raw);
+    if (parsed.identity !== identity || !parsed.session) return null;
+    if (!isPublicSessionReusable(parsed.session)) {
+      clearCachedPublicSession(identity);
+      return null;
+    }
+    return parsed.session;
+  } catch {
+    return null;
+  }
+};
+var writeCachedPublicSession = (identity, session) => {
+  if (!isPublicSessionReusable(session)) return;
+  try {
+    if (typeof window === "undefined" || !window.sessionStorage) return;
+    const { raw: _raw, ...cacheableSession } = session;
+    window.sessionStorage.setItem(
+      publicSessionStorageKey(identity),
+      JSON.stringify({ identity, session: cacheableSession })
+    );
+  } catch {
+  }
+};
+var clearCachedPublicSession = (identity) => {
+  try {
+    if (typeof window !== "undefined" && window.sessionStorage) {
+      window.sessionStorage.removeItem(publicSessionStorageKey(identity));
+    }
+  } catch {
+  }
+};
+var isPublicSessionReusable = (session) => {
+  const accessTokenExpiresAt = Number(session.accessTokenExpiresAt);
+  if (!Number.isFinite(accessTokenExpiresAt) || accessTokenExpiresAt <= 0) {
+    return false;
+  }
+  const policyExpiresAt = session.publicAccess?.expiresAt ? new Date(session.publicAccess.expiresAt).getTime() : Number.POSITIVE_INFINITY;
+  const expiresAt = Math.min(accessTokenExpiresAt, policyExpiresAt);
+  return expiresAt - Date.now() >= PUBLIC_SESSION_RENEW_WINDOW_MS;
+};
 var buildServiceUrl3 = (servicePrefix, path) => {
   const prefix = servicePrefix.endsWith("/") ? servicePrefix.slice(0, -1) : servicePrefix;
   const suffix = path.startsWith("/") ? path : `/${path}`;
@@ -9110,29 +9208,40 @@ var usePublicAccess = (options = {}) => {
       setError(null);
       try {
         const resolvedPath = input.path || stableSessionInput.path || readPathFromLocation();
-        const data = await client.startSession({
+        const resolvedInput = {
           ...stableSessionInput,
           ...input,
           ticket: input.ticket || stableSessionInput.ticket || readTicketFromLocation(),
           path: resolvedPath
-        });
-        if (!mountedRef.current) return data;
-        activeSessionRef.current = {
-          accessToken: data.accessToken,
-          path: resolvedPath
         };
-        setSession(data);
-        setAccessToken(data.accessToken, {
-          scope: "public",
-          path: resolvedPath
-        });
-        await reloadRuntime({
-          accessToken: data.accessToken,
-          accessTokenOptions: {
+        let data = await client.startSession(resolvedInput);
+        if (!mountedRef.current) return data;
+        const activateSession = async (next) => {
+          activeSessionRef.current = {
+            accessToken: next.accessToken,
+            path: resolvedPath
+          };
+          setSession(next);
+          setAccessToken(next.accessToken, {
             scope: "public",
             path: resolvedPath
-          }
-        });
+          });
+          await reloadRuntime({
+            accessToken: next.accessToken,
+            accessTokenOptions: {
+              scope: "public",
+              path: resolvedPath
+            }
+          });
+        };
+        try {
+          await activateSession(data);
+        } catch (activationError) {
+          if (!isUnauthorizedPublicSessionError(activationError)) throw activationError;
+          client.clearSession(resolvedInput);
+          data = await client.startSession(resolvedInput);
+          await activateSession(data);
+        }
         if (!mountedRef.current) return data;
         setLoading(false);
         return data;
@@ -9194,6 +9303,13 @@ var readTicketFromLocation = () => {
   return new URLSearchParams(window.location.search).get("ticket") || void 0;
 };
 var readPathFromLocation = () => typeof window === "undefined" ? void 0 : window.location.pathname;
+var isUnauthorizedPublicSessionError = (error) => {
+  if (!error || typeof error !== "object") return false;
+  const status = Number(
+    error.status ?? error.statusCode
+  );
+  return status === 401 || status === 403;
+};
 export {
   AttachmentPreviewList,
   AuthClientError,