feat(导出记录): 增强下载和删除功能，添加导出记录 ID 编码和验证

src/components/ExportRecordList/ExportRecordList.tsx

@@ -77,6 +77,8 @@ const ExportRecordList: React.FC<ExportRecordListProps> = ({
   const [loading, setLoading] = useState(true);
   const [page, setPage] = useState(1);
   const [total, setTotal] = useState(0);
+  const [downloadingIds, setDownloadingIds] = useState<Set<string>>(new Set());
+  const [deletingIds, setDeletingIds] = useState<Set<string>>(new Set());
   const pageSize = 20;
 
   /**
@@ -132,13 +134,21 @@ const ExportRecordList: React.FC<ExportRecordListProps> = ({
   const handleDownload = useCallback(
     async (record: ExportRecord) => {
       try {
+        if (downloadingIds.has(record.recordId)) return;
+        setDownloadingIds((current) => new Set(current).add(record.recordId));
         await downloadExportRecord(record.recordId, userId);
         message.success('开始下载文档');
       } catch {
         message.error('下载失败，请重试');
+      } finally {
+        setDownloadingIds((current) => {
+          const next = new Set(current);
+          next.delete(record.recordId);
+          return next;
+        });
       }
     },
-    [userId]
+    [downloadingIds, userId]
   );
 
   /**
@@ -147,22 +157,35 @@ const ExportRecordList: React.FC<ExportRecordListProps> = ({
   const handleDelete = useCallback(
     async (record: ExportRecord) => {
       try {
+        if (deletingIds.has(record.recordId)) return;
+        setDeletingIds((current) => new Set(current).add(record.recordId));
         await deleteExportRecord(record.recordId, userId);
         message.success('删除成功');
         // Refresh the list
         setLoading(true);
-        await fetchRecords();
+        if (page > 1 && records.length === 1) {
+          setPage((currentPage) => currentPage - 1);
+        } else {
+          await fetchRecords();
+        }
       } catch {
         message.error('删除失败，请重试');
+      } finally {
+        setDeletingIds((current) => {
+          const next = new Set(current);
+          next.delete(record.recordId);
+          return next;
+        });
       }
     },
-    [userId, fetchRecords]
+    [deletingIds, fetchRecords, page, records.length, userId]
   );
 
   /**
    * Format file size to human-readable string
    */
   const formatFileSize = (bytes: number): string => {
+    if (!Number.isFinite(bytes) || bytes < 0) return '大小未知';
     if (bytes < 1024) return `${bytes} B`;
     if (bytes < 1024 * 1024) return `${(bytes / 1024).toFixed(2)} KB`;
     return `${(bytes / (1024 * 1024)).toFixed(2)} MB`;
@@ -173,6 +196,7 @@ const ExportRecordList: React.FC<ExportRecordListProps> = ({
    */
   const formatDate = (timestamp: number): string => {
     const date = new Date(timestamp);
+    if (Number.isNaN(date.getTime())) return '时间未知';
     return date.toLocaleString('zh-CN', {
       year: 'numeric',
       month: '2-digit',
@@ -224,6 +248,8 @@ const ExportRecordList: React.FC<ExportRecordListProps> = ({
                         type="text"
                         icon={<DownloadOutlined />}
                         onClick={() => handleDownload(record)}
+                        loading={downloadingIds.has(record.recordId)}
+                        disabled={deletingIds.has(record.recordId)}
                         data-testid="download-button"
                       />
                     </Tooltip>,
@@ -233,7 +259,10 @@ const ExportRecordList: React.FC<ExportRecordListProps> = ({
                       onConfirm={() => handleDelete(record)}
                       okText="删除"
                       cancelText="取消"
-                      okButtonProps={{ danger: true }}
+                      okButtonProps={{
+                        danger: true,
+                        loading: deletingIds.has(record.recordId),
+                      }}
                     >
                       <Tooltip title="删除">
                         <Button

src/services/exportRecordService.ts

@@ -15,11 +15,34 @@
 import apiClient, { getErrorMessage } from './api';
 import type { ApiResponse } from '../types/api';
 import type {
+  ExportRecord,
   ListExportRecordsResponse,
   ExportRecordListFilters,
   StorageInfo,
 } from '../types/export';
-import { downloadBlob, getFileNameFromContentDisposition } from '../utils/download';
+import {
+  downloadBlob,
+  encodeExportRecordId,
+  getFileNameFromContentDisposition,
+} from '../utils/download';
+
+function isValidExportRecord(value: unknown): value is ExportRecord {
+  if (!value || typeof value !== 'object') return false;
+  const record = value as Partial<ExportRecord>;
+  return (
+    typeof record.recordId === 'string' &&
+    record.recordId.length > 0 &&
+    typeof record.fileName === 'string' &&
+    typeof record.downloadUrl === 'string' &&
+    typeof record.userId === 'string' &&
+    typeof record.styleId === 'string' &&
+    typeof record.fileSize === 'number' &&
+    Number.isFinite(record.fileSize) &&
+    record.fileSize >= 0 &&
+    typeof record.createdAt === 'number' &&
+    Number.isFinite(record.createdAt)
+  );
+}
 
 /**
  * List export records with pagination
@@ -46,6 +69,16 @@ export const listExportRecords = async (
     );
 
     const data = response.data.data;
+    if (
+      !data ||
+      !Array.isArray(data.records) ||
+      !data.records.every(isValidExportRecord) ||
+      !data.pagination ||
+      !Number.isInteger(data.pagination.total) ||
+      data.pagination.total < 0
+    ) {
+      throw new Error('导出记录响应格式无效');
+    }
 
     // Fix any incorrect base URLs in download URLs
     const correctBaseURL = import.meta.env.VITE_API_BASE_URL;
@@ -88,9 +121,10 @@ export const listExportRecords = async (
  */
 export const downloadExportRecord = async (recordId: string, userId: string): Promise<void> => {
   try {
+    const encodedRecordId = encodeExportRecordId(recordId);
     // Use apiClient to download the file (goes through axios with proper config)
     // This avoids mixed content warnings by using relative URLs
-    const response = await apiClient.get(`/api/v1/export/records/${recordId}/download`, {
+    const response = await apiClient.get(`/api/v1/export/records/${encodedRecordId}/download`, {
       params: { userId },
       responseType: 'blob', // Important: tell axios to expect binary data
     });
@@ -122,7 +156,8 @@ export const downloadExportRecord = async (recordId: string, userId: string): Pr
  */
 export const deleteExportRecord = async (recordId: string, userId: string): Promise<void> => {
   try {
-    await apiClient.delete<ApiResponse<void>>(`/api/v1/export/records/${recordId}`, {
+    const encodedRecordId = encodeExportRecordId(recordId);
+    await apiClient.delete<ApiResponse<void>>(`/api/v1/export/records/${encodedRecordId}`, {
       params: { userId },
     });
   } catch (error) {

src/utils/download.ts

@@ -1,4 +1,5 @@
 const UNSAFE_FILE_NAME_CHARS = /[\\/:*?"<>|]/g;
+const EXPORT_RECORD_ID_PATTERN = /^[A-Za-z0-9][A-Za-z0-9._~-]{0,127}$/;
 
 export function safeFileName(fileName: string, fallback = 'download'): string {
   const normalized = Array.from(fileName, (character) =>
@@ -12,6 +13,13 @@ export function safeFileName(fileName: string, fallback = 'download'): string {
   return normalized || fallback;
 }
 
+export function encodeExportRecordId(recordId: string): string {
+  if (!EXPORT_RECORD_ID_PATTERN.test(recordId)) {
+    throw new Error('无效的导出记录 ID');
+  }
+  return encodeURIComponent(recordId);
+}
+
 export function getFileNameFromContentDisposition(
   header: string | null | undefined,
   fallback: string

vite.config.ts

@@ -72,6 +72,8 @@ export default defineConfig({
       'zustand',
       'antd',
       '@ant-design/icons',
+      'html2canvas',
+      'jspdf',
     ],
     // 排除不需要预构建的大型依赖
     exclude: [