@autional/shared 0.1.0-rc.35 → 0.1.0-rc.36

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@autional/shared",
-  "version": "0.1.0-rc.35",
+  "version": "0.1.0-rc.36",
   "description": "Autional shared layer — API client, auth, types, hooks, utils",
   "license": "AGPL-3.0",
   "main": "./src/index.ts",

package/src/auth/__tests__/build-login-url.test.ts

@@ -182,38 +182,85 @@ describe('buildLoginUrl', () => {
 		});
 	});
 
-	describe('buildLogoutUrl（F-W5c 登出意图标记）', () => {
+	describe('buildLogoutUrl（TASK-LS-08 同源标准端点 + legacy 兜底）', () => {
 		const AUTH_CONFIG = {
 			VITE_PORTAL_CONFIG: {
 				auth: { host: 'auth', base: '' },
 			},
 		};
+		/** env 级 client_id（三级来源之二） */
+		const CID_CONFIG = {
+			...AUTH_CONFIG,
+			VITE_OAUTH_CLIENT_ID: 'cid-env',
+		};
 
-		it('门户域登出：auth 裸根 + redirect 回程 + logout=1', () => {
-			mockWindow('app.autional.com', 'https:', 'https://app.autional.com', AUTH_CONFIG);
+		beforeEach(() => {
+			// localStorage 桩按需设置；测试间清掉全局桩防跨用例泄漏（node 环境无真 localStorage）
+			vi.unstubAllGlobals();
+		});
+
+		it('门户域登出：同源标准端点 + client_id + post_logout_redirect_uri=<origin>/ + state=returnUrl', () => {
+			mockWindow('app.autional.com', 'https:', 'https://app.autional.com', CID_CONFIG);
 			const url = buildLogoutUrl('https://app.autional.com/demo/');
 			expect(url).toBe(
-				'https://auth.autional.com/?redirect=' +
-					encodeURIComponent('https://app.autional.com/demo/') +
-					'&logout=1',
+				'https://app.autional.com/oauth/api/v1/oauth/logout?client_id=cid-env&post_logout_redirect_uri=' +
+					encodeURIComponent('https://app.autional.com/') +
+					'&state=' +
+					encodeURIComponent('https://app.autional.com/demo/'),
 			);
 		});
 
-		it('auth 域租户页登出也走裸根：不经 /<slug>/login（那里 logout=1 被静默忽略）', () => {
-			mockWindow('auth.autional.local', 'https:', 'https://auth.autional.local', AUTH_CONFIG);
+		it('auth 域租户页登出同样走同源标准端点（不再裸根 / 不经 /<slug>/login）', () => {
+			mockWindow('auth.autional.local', 'https:', 'https://auth.autional.local', CID_CONFIG);
 			const url = buildLogoutUrl('https://auth.autional.local/acme-corp/dashboard');
 			expect(url).toBe(
-				'https://auth.autional.local/?redirect=' +
-					encodeURIComponent('https://auth.autional.local/acme-corp/dashboard') +
-					'&logout=1',
+				'https://auth.autional.local/oauth/api/v1/oauth/logout?client_id=cid-env&post_logout_redirect_uri=' +
+					encodeURIComponent('https://auth.autional.local/') +
+					'&state=' +
+					encodeURIComponent('https://auth.autional.local/acme-corp/dashboard'),
 			);
 			expect(url).not.toContain('/acme-corp/login');
 		});
 
-		it('无回程：auth 裸根 + logout=1', () => {
-			mockWindow('auth.autional.local', 'https:', 'https://auth.autional.local', AUTH_CONFIG);
+		it('无回程：仅 client_id + post_logout_redirect_uri，不产 state', () => {
+			mockWindow('app.autional.com', 'https:', 'https://app.autional.com', CID_CONFIG);
 			const url = buildLogoutUrl();
-			expect(url).toBe('https://auth.autional.local/?logout=1');
+			expect(url).toBe(
+				'https://app.autional.com/oauth/api/v1/oauth/logout?client_id=cid-env&post_logout_redirect_uri=' +
+					encodeURIComponent('https://app.autional.com/'),
+			);
+		});
+
+		describe('client_id 三级来源（会话持久化 → env → 空）', () => {
+			it('localStorage 会话值优先于 env', () => {
+				vi.stubGlobal('localStorage', { getItem: () => 'cid-session' });
+				mockWindow('app.autional.com', 'https:', 'https://app.autional.com', CID_CONFIG);
+				const url = buildLogoutUrl('https://app.autional.com/demo/');
+				expect(url).toContain('client_id=cid-session');
+				expect(url).not.toContain('cid-env');
+			});
+
+			it('localStorage 空 → env 兜底', () => {
+				vi.stubGlobal('localStorage', { getItem: () => null });
+				mockWindow('app.autional.com', 'https:', 'https://app.autional.com', CID_CONFIG);
+				expect(buildLogoutUrl()).toContain('client_id=cid-env');
+			});
+
+			it('双空 → legacy 兜底：auth 裸根 + redirect 回程 + logout=1', () => {
+				mockWindow('app.autional.com', 'https:', 'https://app.autional.com', AUTH_CONFIG);
+				const url = buildLogoutUrl('https://app.autional.com/demo/');
+				expect(url).toBe(
+					'https://auth.autional.com/?redirect=' +
+						encodeURIComponent('https://app.autional.com/demo/') +
+						'&logout=1',
+				);
+			});
+
+			it('双空 + 无回程 → legacy 裸根 + logout=1（现行为保持）', () => {
+				mockWindow('auth.autional.local', 'https:', 'https://auth.autional.local', AUTH_CONFIG);
+				const url = buildLogoutUrl();
+				expect(url).toBe('https://auth.autional.local/?logout=1');
+			});
 		});
 	});
 });

package/src/auth/roles.ts

@@ -8,6 +8,7 @@
  */
 
 import { getPortalUrl } from '../config';
+import { resolveClientIdForSession } from './oauth-client-id-store';
 
 /** auth-pages 的静态/受保护路由 — 首段不会是租户 slug */
 const AUTH_ROUTE_RESERVED = new Set([
@@ -20,6 +21,7 @@ const AUTH_ROUTE_RESERVED = new Set([
 	'privacy',
 	'error',
 	'logout',
+	'logout-confirm',
 	'passkey',
 	'reapply',
 	'mfa',
@@ -37,20 +39,41 @@ const AUTH_ROUTE_RESERVED = new Set([
 ]);
 
 /**
- * 登出回程 URL：auth 域**裸根**入口 + `logout=1` 显式登出意图标记。
+ * 登出 URL（TASK-LS-08）：同源标准端点（RP-Initiated Logout 无 hint 形态）优先，
+ * client_id 不可得时保持 legacy 形态。
  *
- * 刻意不复用 buildLoginUrl：其租户 slug 保留会把 auth 域页面的登出落到
- * `/<slug>/login`（登录页路由，不经入口路由），`logout=1` 在那里被静默忽略；
+ * 标准端点形态（ADR-12 同源直通）：`${origin}/oauth/api/v1/oauth/logout`
+ * - client_id：本部署的 OAuth 客户端（`resolveClientIdForSession` 三级来源：会话持久化
+ *   localStorage `oauth_client_id` → env），服务端据此做 post_logout_redirect_uri 注册面白名单校验；
+ * - post_logout_redirect_uri：本门户 origin 根（`<origin>/`，注册形态同 PlatformPortalRedirectURIs）；
+ * - state：returnUrl 的 URL-safe 编码（门户零行为驱动——服务端只原样回拼到回跳 URL，门户不解析）。
+ * 浏览器整页导航不带 Bearer → 服务端「无 hint 无会话浏览器」支 302 确认页承接；
+ * 用户确认后由确认页经 BFF（会话 cookie → Bearer）触达端点，走认证会话支并导航服务端 location。
+ *
+ * legacy 兜底（D2=A 兼容分支保留，EntryRouter 承接）：client_id 不可得 → auth 域**裸根**入口 +
+ * `logout=1` 显式登出意图标记。刻意不复用 buildLoginUrl：其租户 slug 保留会把 auth 域页面的
+ * 登出落到 `/<slug>/login`（登录页路由，不经入口路由），`logout=1` 在那里被静默忽略；
  * 带会话回程甚至会被登录页 checkAndRedirect 直接放行成静默重登（F-W5c）。
- * 裸根 = EntryRouter 唯一登出闸门：先终结 auth 域会话，再决定落点——
- * 回程能解析出真实租户 → 裸 `/<slug>/login`（不带回程参数：登出即"重新开始"，
- * 登录后走默认去向，去向选择权交还用户）；否则落 brand 裸根。
+ * 裸根 = EntryRouter 唯一登出闸门：先终结 auth 域会话，再决定落点——回程能解析出真实租户 →
+ * 裸 `/<slug>/login`；否则落 brand 裸根。
  */
 export function buildLogoutUrl(returnUrl?: string): string {
 	const base = getPortalUrl('auth');
-	if (!base) return '/';
-	const redirect = returnUrl ? `redirect=${encodeURIComponent(returnUrl)}&` : '';
-	return `${base}/?${redirect}logout=1`;
+	// legacy 兜底：现行为保持（auth 裸根 + logout=1 意图标记）
+	const legacy = (): string => {
+		if (!base) return '/';
+		const redirect = returnUrl ? `redirect=${encodeURIComponent(returnUrl)}&` : '';
+		return `${base}/?${redirect}logout=1`;
+	};
+
+	const clientId = resolveClientIdForSession();
+	if (!clientId || typeof window === 'undefined' || !window.location?.origin) return legacy();
+
+	const params = new URLSearchParams();
+	params.set('client_id', clientId);
+	params.set('post_logout_redirect_uri', `${window.location.origin}/`);
+	if (returnUrl) params.set('state', returnUrl);
+	return `${window.location.origin}/oauth/api/v1/oauth/logout?${params.toString()}`;
 }
 
 /**

package/src/auth/store.ts

@@ -201,7 +201,8 @@ export function loginWithTokens(
  *
  * redirectTo（U350）：显式落点（会话过期→auth /error、注销完成→/<slug>/login?account_deleted=true 等
  * 旗标页）——清理完成后整页前往。缺省仅清会话、不导航；注意与 useLogout 口径区分：该 hook 走
- * buildLogoutUrl 登出意图流（logout=1 交入口路由定落点），不得用于需要保留业务 query 旗标的目标。
+ * buildLogoutUrl 登出流（LS-08：同源标准端点；client_id 不可得时退 legacy logout=1 交入口路由），
+ * 不得用于需要保留业务 query 旗标的目标。
  */
 export async function logout(redirectTo?: string): Promise<void> {
 	const { AuthService } = await import('./service');

package/src/generated/types.ts

@@ -5257,7 +5257,7 @@ export interface ListResponsedto_WebAuthnCredentialResponse {
   total?: number;  // 总条数（平铺，便于直接读取）
 }
 
-export interface ListResponsegitee_com_linmes_authms_microservices_identityservice_internal_device_domain_DeviceInfo {
+export interface ListResponsegitee_com_autional_microservices_identityservice_internal_device_domain_DeviceInfo {
   code?: number;
   items?: DeviceInfo[];  // 统一使用 items
   message?: string;
@@ -6643,7 +6643,7 @@ export interface DataResponsedto_Web3VerifyResponse {
   timestamp?: string;
 }
 
-export interface DataResponsegitee_com_linmes_authms_microservices_identityservice_internal_device_domain_DeviceInfo {
+export interface DataResponsegitee_com_autional_microservices_identityservice_internal_device_domain_DeviceInfo {
   code?: number;
   data?: DeviceInfo;
   message?: string;
@@ -8274,7 +8274,7 @@ export interface ClientRegistrationResponse {
   policyUri?: string;  // 隐私政策URL | @example https://app.example.com/privacy
   redirectUris?: string[];  // 回调URI列表 | @example ['["https://app.example.com/callback"]']
   registrationAccessToken?: string;  // 注册管理Token | @example reg_abc123...
-  registrationClientUri?: string;  // 注册管理URI | @example https://authms.example.com/api/v1/oauth/register/app-123
+  registrationClientUri?: string;  // 注册管理URI | @example https://api.example.com/api/v1/oauth/register/app-123
   scope?: string;  // 权限范围 | @example openid profile email
   tokenEndpointAuthMethod?: string;  // 认证方法 | @example client_secret_basic
   tosUri?: string;  // 服务条款URL | @example https://app.example.com/tos
@@ -8510,7 +8510,7 @@ export interface DeviceAuthorizationResponse {
   expiresIn?: number;  // @example 600
   interval?: number;  // @example 5
   userCode?: string;  // @example BDJW-DSXQ
-  verificationUri?: string;  // @example https://authms.example.com/device
+  verificationUri?: string;  // @example https://api.example.com/device
 }
 
 /** 用户在浏览器中授权设备（RFC 8628 §3.3） */
@@ -9783,7 +9783,7 @@ export interface WebhookConfigResponse {
 // rbac-service
 // ============================================================
 
-export interface ListResponsegitee_com_linmes_authms_microservices_rbacservice_internal_handler_dto_ApprovalRequestResponse {
+export interface ListResponsegitee_com_autional_microservices_rbacservice_internal_handler_dto_ApprovalRequestResponse {
   code?: number;
   items?: ApprovalRequestResponse[];  // 统一使用 items
   message?: string;
@@ -9792,7 +9792,7 @@ export interface ListResponsegitee_com_linmes_authms_microservices_rbacservice_i
   total?: number;  // 总条数（平铺，便于直接读取）
 }
 
-export interface ListResponsegitee_com_linmes_authms_microservices_rbacservice_internal_handler_dto_PermissionResponse {
+export interface ListResponsegitee_com_autional_microservices_rbacservice_internal_handler_dto_PermissionResponse {
   code?: number;
   items?: PermissionResponse[];  // 统一使用 items
   message?: string;
@@ -9801,7 +9801,7 @@ export interface ListResponsegitee_com_linmes_authms_microservices_rbacservice_i
   total?: number;  // 总条数（平铺，便于直接读取）
 }
 
-export interface ListResponsegitee_com_linmes_authms_microservices_rbacservice_internal_handler_dto_RoleResponse {
+export interface ListResponsegitee_com_autional_microservices_rbacservice_internal_handler_dto_RoleResponse {
   code?: number;
   items?: RoleResponse[];  // 统一使用 items
   message?: string;
@@ -9810,119 +9810,119 @@ export interface ListResponsegitee_com_linmes_authms_microservices_rbacservice_i
   total?: number;  // 总条数（平铺，便于直接读取）
 }
 
-export interface DataResponsearray_gitee_com_linmes_authms_microservices_rbacservice_internal_handler_dto_ConflictPairResponse {
+export interface DataResponsearray_gitee_com_autional_microservices_rbacservice_internal_handler_dto_ConflictPairResponse {
   code?: number;
   data?: ConflictPairResponse[];
   message?: string;
   timestamp?: string;
 }
 
-export interface DataResponsearray_gitee_com_linmes_authms_microservices_rbacservice_internal_handler_dto_DefaultRoleResponse {
+export interface DataResponsearray_gitee_com_autional_microservices_rbacservice_internal_handler_dto_DefaultRoleResponse {
   code?: number;
   data?: DefaultRoleResponse[];
   message?: string;
   timestamp?: string;
 }
 
-export interface DataResponsearray_gitee_com_linmes_authms_microservices_rbacservice_internal_handler_dto_PermissionResponse {
+export interface DataResponsearray_gitee_com_autional_microservices_rbacservice_internal_handler_dto_PermissionResponse {
   code?: number;
   data?: PermissionResponse[];
   message?: string;
   timestamp?: string;
 }
 
-export interface DataResponsearray_gitee_com_linmes_authms_microservices_rbacservice_internal_handler_dto_RebacRelationshipDTO {
+export interface DataResponsearray_gitee_com_autional_microservices_rbacservice_internal_handler_dto_RebacRelationshipDTO {
   code?: number;
   data?: RebacRelationshipDTO[];
   message?: string;
   timestamp?: string;
 }
 
-export interface DataResponsearray_gitee_com_linmes_authms_microservices_rbacservice_internal_handler_dto_RoleResponse {
+export interface DataResponsearray_gitee_com_autional_microservices_rbacservice_internal_handler_dto_RoleResponse {
   code?: number;
   data?: RoleResponse[];
   message?: string;
   timestamp?: string;
 }
 
-export interface DataResponsegitee_com_linmes_authms_microservices_rbacservice_internal_handler_dto_ApprovalRequestResponse {
+export interface DataResponsegitee_com_autional_microservices_rbacservice_internal_handler_dto_ApprovalRequestResponse {
   code?: number;
   data?: ApprovalRequestResponse;
   message?: string;
   timestamp?: string;
 }
 
-export interface DataResponsegitee_com_linmes_authms_microservices_rbacservice_internal_handler_dto_BootstrapAdminResponse {
+export interface DataResponsegitee_com_autional_microservices_rbacservice_internal_handler_dto_BootstrapAdminResponse {
   code?: number;
   data?: BootstrapAdminResponse;
   message?: string;
   timestamp?: string;
 }
 
-export interface DataResponsegitee_com_linmes_authms_microservices_rbacservice_internal_handler_dto_ConflictPairResponse {
+export interface DataResponsegitee_com_autional_microservices_rbacservice_internal_handler_dto_ConflictPairResponse {
   code?: number;
   data?: ConflictPairResponse;
   message?: string;
   timestamp?: string;
 }
 
-export interface DataResponsegitee_com_linmes_authms_microservices_rbacservice_internal_handler_dto_PermissionCheckDetailResponse {
+export interface DataResponsegitee_com_autional_microservices_rbacservice_internal_handler_dto_PermissionCheckDetailResponse {
   code?: number;
   data?: PermissionCheckDetailResponse;
   message?: string;
   timestamp?: string;
 }
 
-export interface DataResponsegitee_com_linmes_authms_microservices_rbacservice_internal_handler_dto_PermissionCheckResponse {
+export interface DataResponsegitee_com_autional_microservices_rbacservice_internal_handler_dto_PermissionCheckResponse {
   code?: number;
   data?: PermissionCheckResponse;
   message?: string;
   timestamp?: string;
 }
 
-export interface DataResponsegitee_com_linmes_authms_microservices_rbacservice_internal_handler_dto_PermissionResponse {
+export interface DataResponsegitee_com_autional_microservices_rbacservice_internal_handler_dto_PermissionResponse {
   code?: number;
   data?: PermissionResponse;
   message?: string;
   timestamp?: string;
 }
 
-export interface DataResponsegitee_com_linmes_authms_microservices_rbacservice_internal_handler_dto_RebacDeleteResult {
+export interface DataResponsegitee_com_autional_microservices_rbacservice_internal_handler_dto_RebacDeleteResult {
   code?: number;
   data?: RebacDeleteResult;
   message?: string;
   timestamp?: string;
 }
 
-export interface DataResponsegitee_com_linmes_authms_microservices_rbacservice_internal_handler_dto_RebacRelationshipDTO {
+export interface DataResponsegitee_com_autional_microservices_rbacservice_internal_handler_dto_RebacRelationshipDTO {
   code?: number;
   data?: RebacRelationshipDTO;
   message?: string;
   timestamp?: string;
 }
 
-export interface DataResponsegitee_com_linmes_authms_microservices_rbacservice_internal_handler_dto_RoleCheckResponse {
+export interface DataResponsegitee_com_autional_microservices_rbacservice_internal_handler_dto_RoleCheckResponse {
   code?: number;
   data?: RoleCheckResponse;
   message?: string;
   timestamp?: string;
 }
 
-export interface DataResponsegitee_com_linmes_authms_microservices_rbacservice_internal_handler_dto_RoleResponse {
+export interface DataResponsegitee_com_autional_microservices_rbacservice_internal_handler_dto_RoleResponse {
   code?: number;
   data?: RoleResponse;
   message?: string;
   timestamp?: string;
 }
 
-export interface DataResponsegitee_com_linmes_authms_microservices_rbacservice_internal_handler_dto_UserIDsResponse {
+export interface DataResponsegitee_com_autional_microservices_rbacservice_internal_handler_dto_UserIDsResponse {
   code?: number;
   data?: UserIDsResponse;
   message?: string;
   timestamp?: string;
 }
 
-export interface DataResponsegitee_com_linmes_authms_microservices_rbacservice_internal_handler_dto_ValidateUserRolesResponse {
+export interface DataResponsegitee_com_autional_microservices_rbacservice_internal_handler_dto_ValidateUserRolesResponse {
   code?: number;
   data?: ValidateUserRolesResponse;
   message?: string;
@@ -10152,7 +10152,7 @@ export type Effect = "allow" | "deny";
 // saml-service
 // ============================================================
 
-export interface ListResponsegitee_com_linmes_authms_microservices_samlservice_internal_handler_dto_SamlSessionItem {
+export interface ListResponsegitee_com_autional_microservices_samlservice_internal_handler_dto_SamlSessionItem {
   code?: number;
   items?: SamlSessionItem[];  // 统一使用 items
   message?: string;
@@ -10161,7 +10161,7 @@ export interface ListResponsegitee_com_linmes_authms_microservices_samlservice_i
   total?: number;  // 总条数（平铺，便于直接读取）
 }
 
-export interface ListResponsegitee_com_linmes_authms_microservices_samlservice_internal_handler_dto_SamlUserLinkItem {
+export interface ListResponsegitee_com_autional_microservices_samlservice_internal_handler_dto_SamlUserLinkItem {
   code?: number;
   items?: SamlUserLinkItem[];  // 统一使用 items
   message?: string;
@@ -10295,91 +10295,91 @@ export interface SamlUserLinkItem {
 // secret-service
 // ============================================================
 
-export interface DataResponsearray_gitee_com_linmes_authms_microservices_secretservice_internal_handler_dto_SecretVersionResponse {
+export interface DataResponsearray_gitee_com_autional_microservices_secretservice_internal_handler_dto_SecretVersionResponse {
   code?: number;
   data?: SecretVersionResponse[];
   message?: string;
   timestamp?: string;
 }
 
-export interface DataResponsegitee_com_linmes_authms_microservices_secretservice_internal_handler_dto_BatchGetResponse {
+export interface DataResponsegitee_com_autional_microservices_secretservice_internal_handler_dto_BatchGetResponse {
   code?: number;
   data?: BatchGetResponse;
   message?: string;
   timestamp?: string;
 }
 
-export interface DataResponsegitee_com_linmes_authms_microservices_secretservice_internal_handler_dto_BatchResult {
+export interface DataResponsegitee_com_autional_microservices_secretservice_internal_handler_dto_BatchResult {
   code?: number;
   data?: BatchResult;
   message?: string;
   timestamp?: string;
 }
 
-export interface DataResponsegitee_com_linmes_authms_microservices_secretservice_internal_handler_dto_EncryptionKeysDetailResponse {
+export interface DataResponsegitee_com_autional_microservices_secretservice_internal_handler_dto_EncryptionKeysDetailResponse {
   code?: number;
   data?: EncryptionKeysDetailResponse;
   message?: string;
   timestamp?: string;
 }
 
-export interface DataResponsegitee_com_linmes_authms_microservices_secretservice_internal_handler_dto_JWTKeyResponse {
+export interface DataResponsegitee_com_autional_microservices_secretservice_internal_handler_dto_JWTKeyResponse {
   code?: number;
   data?: JWTKeyResponse;
   message?: string;
   timestamp?: string;
 }
 
-export interface DataResponsegitee_com_linmes_authms_microservices_secretservice_internal_handler_dto_JWTKeysListResponse {
+export interface DataResponsegitee_com_autional_microservices_secretservice_internal_handler_dto_JWTKeysListResponse {
   code?: number;
   data?: JWTKeysListResponse;
   message?: string;
   timestamp?: string;
 }
 
-export interface DataResponsegitee_com_linmes_authms_microservices_secretservice_internal_handler_dto_JWTPublicKeyResponse {
+export interface DataResponsegitee_com_autional_microservices_secretservice_internal_handler_dto_JWTPublicKeyResponse {
   code?: number;
   data?: JWTPublicKeyResponse;
   message?: string;
   timestamp?: string;
 }
 
-export interface DataResponsegitee_com_linmes_authms_microservices_secretservice_internal_handler_dto_SecretDetailResponse {
+export interface DataResponsegitee_com_autional_microservices_secretservice_internal_handler_dto_SecretDetailResponse {
   code?: number;
   data?: SecretDetailResponse;
   message?: string;
   timestamp?: string;
 }
 
-export interface DataResponsegitee_com_linmes_authms_microservices_secretservice_internal_handler_dto_SecretPolicyResponse {
+export interface DataResponsegitee_com_autional_microservices_secretservice_internal_handler_dto_SecretPolicyResponse {
   code?: number;
   data?: SecretPolicyResponse;
   message?: string;
   timestamp?: string;
 }
 
-export interface DataResponsegitee_com_linmes_authms_microservices_secretservice_internal_handler_dto_SecretResponse {
+export interface DataResponsegitee_com_autional_microservices_secretservice_internal_handler_dto_SecretResponse {
   code?: number;
   data?: SecretResponse;
   message?: string;
   timestamp?: string;
 }
 
-export interface DataResponsegitee_com_linmes_authms_microservices_secretservice_internal_handler_dto_SecretValueResponse {
+export interface DataResponsegitee_com_autional_microservices_secretservice_internal_handler_dto_SecretValueResponse {
   code?: number;
   data?: SecretValueResponse;
   message?: string;
   timestamp?: string;
 }
 
-export interface DataResponsegitee_com_linmes_authms_microservices_secretservice_internal_handler_dto_TransmissionDecryptResponse {
+export interface DataResponsegitee_com_autional_microservices_secretservice_internal_handler_dto_TransmissionDecryptResponse {
   code?: number;
   data?: TransmissionDecryptResponse;
   message?: string;
   timestamp?: string;
 }
 
-export interface ListResponsegitee_com_linmes_authms_microservices_secretservice_internal_handler_dto_SecretResponse {
+export interface ListResponsegitee_com_autional_microservices_secretservice_internal_handler_dto_SecretResponse {
   code?: number;
   items?: SecretResponse[];  // 统一使用 items
   message?: string;
@@ -12976,14 +12976,14 @@ export interface DataResponsecaptcha_Challenge {
   timestamp?: string;
 }
 
-export interface DataResponsegitee_com_linmes_authms_microservices_thirdpartyservice_internal_dto_CaptchaVerifyResponse {
+export interface DataResponsegitee_com_autional_microservices_thirdpartyservice_internal_dto_CaptchaVerifyResponse {
   code?: number;
   data?: CaptchaVerifyResponse;
   message?: string;
   timestamp?: string;
 }
 
-export interface DataResponsegitee_com_linmes_authms_microservices_thirdpartyservice_internal_dto_ExportUserDataResponse {
+export interface DataResponsegitee_com_autional_microservices_thirdpartyservice_internal_dto_ExportUserDataResponse {
   code?: number;
   data?: ExportUserDataResponse;
   message?: string;
@@ -13010,70 +13010,70 @@ export interface CaptchaVerifyResponse {
 // verification-service
 // ============================================================
 
-export interface DataResponsegitee_com_linmes_authms_microservices_verificationservice_internal_handler_dto_AdminVerificationDetail {
+export interface DataResponsegitee_com_autional_microservices_verificationservice_internal_handler_dto_AdminVerificationDetail {
   code?: number;
   data?: AdminVerificationDetail;
   message?: string;
   timestamp?: string;
 }
 
-export interface DataResponsegitee_com_linmes_authms_microservices_verificationservice_internal_handler_dto_BeginLivenessResponse {
+export interface DataResponsegitee_com_autional_microservices_verificationservice_internal_handler_dto_BeginLivenessResponse {
   code?: number;
   data?: BeginLivenessResponse;
   message?: string;
   timestamp?: string;
 }
 
-export interface DataResponsegitee_com_linmes_authms_microservices_verificationservice_internal_handler_dto_GuardianRelationshipResponse {
+export interface DataResponsegitee_com_autional_microservices_verificationservice_internal_handler_dto_GuardianRelationshipResponse {
   code?: number;
   data?: GuardianRelationshipResponse;
   message?: string;
   timestamp?: string;
 }
 
-export interface DataResponsegitee_com_linmes_authms_microservices_verificationservice_internal_handler_dto_LivenessResultResponse {
+export interface DataResponsegitee_com_autional_microservices_verificationservice_internal_handler_dto_LivenessResultResponse {
   code?: number;
   data?: LivenessResultResponse;
   message?: string;
   timestamp?: string;
 }
 
-export interface DataResponsegitee_com_linmes_authms_microservices_verificationservice_internal_handler_dto_ProviderConfigResponse {
+export interface DataResponsegitee_com_autional_microservices_verificationservice_internal_handler_dto_ProviderConfigResponse {
   code?: number;
   data?: ProviderConfigResponse;
   message?: string;
   timestamp?: string;
 }
 
-export interface DataResponsegitee_com_linmes_authms_microservices_verificationservice_internal_handler_dto_StatsResponse {
+export interface DataResponsegitee_com_autional_microservices_verificationservice_internal_handler_dto_StatsResponse {
   code?: number;
   data?: StatsResponse;
   message?: string;
   timestamp?: string;
 }
 
-export interface DataResponsegitee_com_linmes_authms_microservices_verificationservice_internal_handler_dto_SubmitOCRResponse {
+export interface DataResponsegitee_com_autional_microservices_verificationservice_internal_handler_dto_SubmitOCRResponse {
   code?: number;
   data?: SubmitOCRResponse;
   message?: string;
   timestamp?: string;
 }
 
-export interface DataResponsegitee_com_linmes_authms_microservices_verificationservice_internal_handler_dto_VerificationDetailResponse {
+export interface DataResponsegitee_com_autional_microservices_verificationservice_internal_handler_dto_VerificationDetailResponse {
   code?: number;
   data?: VerificationDetailResponse;
   message?: string;
   timestamp?: string;
 }
 
-export interface DataResponsegitee_com_linmes_authms_microservices_verificationservice_internal_handler_dto_VerificationStatusResponse {
+export interface DataResponsegitee_com_autional_microservices_verificationservice_internal_handler_dto_VerificationStatusResponse {
   code?: number;
   data?: VerificationStatusResponse;
   message?: string;
   timestamp?: string;
 }
 
-export interface ListResponsegitee_com_linmes_authms_microservices_verificationservice_internal_handler_dto_GuardianRelationshipResponse {
+export interface ListResponsegitee_com_autional_microservices_verificationservice_internal_handler_dto_GuardianRelationshipResponse {
   code?: number;
   items?: GuardianRelationshipResponse[];  // 统一使用 items
   message?: string;
@@ -13082,7 +13082,7 @@ export interface ListResponsegitee_com_linmes_authms_microservices_verifications
   total?: number;  // 总条数（平铺，便于直接读取）
 }
 
-export interface ListResponsegitee_com_linmes_authms_microservices_verificationservice_internal_handler_dto_MinorProfileResponse {
+export interface ListResponsegitee_com_autional_microservices_verificationservice_internal_handler_dto_MinorProfileResponse {
   code?: number;
   items?: MinorProfileResponse[];  // 统一使用 items
   message?: string;
@@ -13091,7 +13091,7 @@ export interface ListResponsegitee_com_linmes_authms_microservices_verifications
   total?: number;  // 总条数（平铺，便于直接读取）
 }
 
-export interface ListResponsegitee_com_linmes_authms_microservices_verificationservice_internal_handler_dto_ProviderConfigResponse {
+export interface ListResponsegitee_com_autional_microservices_verificationservice_internal_handler_dto_ProviderConfigResponse {
   code?: number;
   items?: ProviderConfigResponse[];  // 统一使用 items
   message?: string;
@@ -13100,7 +13100,7 @@ export interface ListResponsegitee_com_linmes_authms_microservices_verifications
   total?: number;  // 总条数（平铺，便于直接读取）
 }
 
-export interface ListResponsegitee_com_linmes_authms_microservices_verificationservice_internal_handler_dto_VerificationListItem {
+export interface ListResponsegitee_com_autional_microservices_verificationservice_internal_handler_dto_VerificationListItem {
   code?: number;
   items?: VerificationListItem[];  // 统一使用 items
   message?: string;