@h-ai/api-contract 0.1.0-alpha.72 → 0.1.0-alpha.74

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
@@ -1,7 +1,7 @@
1
+ import * as _orpc_contract from '@orpc/contract';
1
2
  import * as zod_v4_core from 'zod/v4/core';
2
3
  import * as zod from 'zod';
3
4
  import { z } from 'zod';
4
- import * as _orpc_contract from '@orpc/contract';
5
5
  import { HaiResult } from '@h-ai/core';
6
6
 
7
7
  /**
@@ -28,9 +28,82 @@ import { HaiResult } from '@h-ai/core';
28
28
  */
29
29
  declare const iamContract: {
30
30
  auth: {
31
+ createCaptcha: _orpc_contract.ContractProcedureBuilderWithInputOutput<zod.ZodObject<{
32
+ operation: zod.ZodEnum<{
33
+ login: "login";
34
+ register: "register";
35
+ sendOtp: "sendOtp";
36
+ passwordReset: "passwordReset";
37
+ renewPassword: "renewPassword";
38
+ }>;
39
+ }, zod_v4_core.$strip>, zod.ZodDiscriminatedUnion<[zod.ZodObject<{
40
+ success: zod.ZodLiteral<true>;
41
+ data: zod.ZodObject<{
42
+ id: zod.ZodString;
43
+ challenge: zod.ZodObject<{
44
+ signature: zod.ZodOptional<zod.ZodString>;
45
+ parameters: zod.ZodObject<{
46
+ algorithm: zod.ZodString & zod.ZodType<"PBKDF2/SHA-256", string, zod_v4_core.$ZodTypeInternals<"PBKDF2/SHA-256", string>>;
47
+ nonce: zod.ZodString;
48
+ salt: zod.ZodString;
49
+ cost: zod.ZodNumber;
50
+ keyLength: zod.ZodNumber;
51
+ keyPrefix: zod.ZodString;
52
+ keySignature: zod.ZodOptional<zod.ZodString>;
53
+ data: zod.ZodOptional<zod.ZodRecord<zod.ZodString, zod.ZodUnion<readonly [zod.ZodString, zod.ZodNumber, zod.ZodBoolean, zod.ZodNull]>>>;
54
+ }, zod_v4_core.$strip>;
55
+ }, zod_v4_core.$strip>;
56
+ }, zod_v4_core.$strip>;
57
+ }, zod_v4_core.$strip>, zod.ZodObject<{
58
+ success: zod.ZodLiteral<false>;
59
+ error: zod.ZodObject<{
60
+ code: zod.ZodUnion<readonly [zod.ZodString, zod.ZodNumber]>;
61
+ message: zod.ZodString;
62
+ traceId: zod.ZodOptional<zod.ZodString>;
63
+ httpStatus: zod.ZodOptional<zod.ZodNumber>;
64
+ system: zod.ZodOptional<zod.ZodString>;
65
+ module: zod.ZodOptional<zod.ZodString>;
66
+ cause: zod.ZodOptional<zod.ZodUnknown>;
67
+ suggestion: zod.ZodOptional<zod.ZodString>;
68
+ ext: zod.ZodOptional<zod.ZodRecord<zod.ZodString, zod.ZodUnknown>>;
69
+ }, zod_v4_core.$strip>;
70
+ }, zod_v4_core.$strip>], "success">, Record<never, never>, Record<never, never>>;
71
+ reauthenticate: _orpc_contract.ContractProcedureBuilderWithInputOutput<zod.ZodObject<{
72
+ password: zod.ZodString;
73
+ operation: zod.ZodString;
74
+ }, zod_v4_core.$strip>, zod.ZodDiscriminatedUnion<[zod.ZodObject<{
75
+ success: zod.ZodLiteral<true>;
76
+ data: zod.ZodObject<{
77
+ ticket: zod.ZodString;
78
+ expiresAt: zod.ZodNumber;
79
+ }, zod_v4_core.$strip>;
80
+ }, zod_v4_core.$strip>, zod.ZodObject<{
81
+ success: zod.ZodLiteral<false>;
82
+ error: zod.ZodObject<{
83
+ code: zod.ZodUnion<readonly [zod.ZodString, zod.ZodNumber]>;
84
+ message: zod.ZodString;
85
+ traceId: zod.ZodOptional<zod.ZodString>;
86
+ httpStatus: zod.ZodOptional<zod.ZodNumber>;
87
+ system: zod.ZodOptional<zod.ZodString>;
88
+ module: zod.ZodOptional<zod.ZodString>;
89
+ cause: zod.ZodOptional<zod.ZodUnknown>;
90
+ suggestion: zod.ZodOptional<zod.ZodString>;
91
+ ext: zod.ZodOptional<zod.ZodRecord<zod.ZodString, zod.ZodUnknown>>;
92
+ }, zod_v4_core.$strip>;
93
+ }, zod_v4_core.$strip>], "success">, Record<never, never>, Record<never, never>>;
31
94
  publicConfig: _orpc_contract.ContractProcedureBuilderWithOutput<_orpc_contract.Schema<unknown, unknown>, zod.ZodDiscriminatedUnion<[zod.ZodObject<{
32
95
  success: zod.ZodLiteral<true>;
33
96
  data: zod.ZodNullable<zod.ZodObject<{
97
+ captcha: zod.ZodDefault<zod.ZodObject<{
98
+ enabled: zod.ZodBoolean;
99
+ }, zod_v4_core.$strip>>;
100
+ reauthentication: zod.ZodOptional<zod.ZodObject<{
101
+ enabled: zod.ZodBoolean;
102
+ operations: zod.ZodArray<zod.ZodString>;
103
+ }, zod_v4_core.$strip>>;
104
+ initialCredentials: zod.ZodOptional<zod.ZodObject<{
105
+ enabled: zod.ZodBoolean;
106
+ }, zod_v4_core.$strip>>;
34
107
  password: zod.ZodObject<{
35
108
  minLength: zod.ZodNumber;
36
109
  maxLength: zod.ZodNumber;
@@ -39,6 +112,9 @@ declare const iamContract: {
39
112
  requireNumber: zod.ZodBoolean;
40
113
  requireSpecialChar: zod.ZodBoolean;
41
114
  expirationDays: zod.ZodNumber;
115
+ minCharacterClasses: zod.ZodOptional<zod.ZodNumber>;
116
+ preventSamePassword: zod.ZodOptional<zod.ZodBoolean>;
117
+ requireInitialChange: zod.ZodOptional<zod.ZodBoolean>;
42
118
  }, zod_v4_core.$strip>;
43
119
  register: zod.ZodObject<{
44
120
  enabled: zod.ZodBoolean;
@@ -83,6 +159,7 @@ declare const iamContract: {
83
159
  }, zod_v4_core.$strip>;
84
160
  session: zod.ZodObject<{
85
161
  maxAge: zod.ZodNumber;
162
+ endOnPageHide: zod.ZodDefault<zod.ZodBoolean>;
86
163
  }, zod_v4_core.$strip>;
87
164
  }, zod_v4_core.$strip>>;
88
165
  }, zod_v4_core.$strip>, zod.ZodObject<{
@@ -99,9 +176,33 @@ declare const iamContract: {
99
176
  ext: zod.ZodOptional<zod.ZodRecord<zod.ZodString, zod.ZodUnknown>>;
100
177
  }, zod_v4_core.$strip>;
101
178
  }, zod_v4_core.$strip>], "success">, Record<never, never>, Record<never, never>>;
179
+ renewPassword: _orpc_contract.ContractProcedureBuilderWithInputOutput<zod.ZodObject<{
180
+ identifier: zod.ZodString;
181
+ password: zod.ZodString;
182
+ newPassword: zod.ZodString;
183
+ captcha: zod.ZodOptional<zod.ZodString>;
184
+ }, zod_v4_core.$strip>, zod.ZodDiscriminatedUnion<[zod.ZodObject<{
185
+ success: zod.ZodLiteral<true>;
186
+ data: zod.ZodVoid;
187
+ }, zod_v4_core.$strip>, zod.ZodObject<{
188
+ success: zod.ZodLiteral<false>;
189
+ error: zod.ZodObject<{
190
+ code: zod.ZodUnion<readonly [zod.ZodString, zod.ZodNumber]>;
191
+ message: zod.ZodString;
192
+ traceId: zod.ZodOptional<zod.ZodString>;
193
+ httpStatus: zod.ZodOptional<zod.ZodNumber>;
194
+ system: zod.ZodOptional<zod.ZodString>;
195
+ module: zod.ZodOptional<zod.ZodString>;
196
+ cause: zod.ZodOptional<zod.ZodUnknown>;
197
+ suggestion: zod.ZodOptional<zod.ZodString>;
198
+ ext: zod.ZodOptional<zod.ZodRecord<zod.ZodString, zod.ZodUnknown>>;
199
+ }, zod_v4_core.$strip>;
200
+ }, zod_v4_core.$strip>], "success">, Record<never, never>, Record<never, never>>;
102
201
  loginWithLdap: _orpc_contract.ContractProcedureBuilderWithInputOutput<zod.ZodObject<{
103
202
  username: zod.ZodString;
104
203
  password: zod.ZodString;
204
+ captcha: zod.ZodOptional<zod.ZodString>;
205
+ expectedUserId: zod.ZodOptional<zod.ZodString>;
105
206
  }, zod_v4_core.$strip>, zod.ZodDiscriminatedUnion<[zod.ZodObject<{
106
207
  success: zod.ZodLiteral<true>;
107
208
  data: zod.ZodObject<{
@@ -113,6 +214,18 @@ declare const iamContract: {
113
214
  displayName: zod.ZodOptional<zod.ZodString>;
114
215
  avatarUrl: zod.ZodOptional<zod.ZodString>;
115
216
  enabled: zod.ZodBoolean;
217
+ accountType: zod.ZodOptional<zod.ZodEnum<{
218
+ permanent: "permanent";
219
+ temporary: "temporary";
220
+ }>>;
221
+ accountStatus: zod.ZodOptional<zod.ZodEnum<{
222
+ active: "active";
223
+ dormant: "dormant";
224
+ closed: "closed";
225
+ }>>;
226
+ accountExpiresAt: zod.ZodOptional<zod.ZodNullable<zod.ZodCoercedDate<unknown>>>;
227
+ lastLoginAt: zod.ZodOptional<zod.ZodNullable<zod.ZodCoercedDate<unknown>>>;
228
+ mustChangePassword: zod.ZodOptional<zod.ZodBoolean>;
116
229
  emailVerified: zod.ZodOptional<zod.ZodBoolean>;
117
230
  phoneVerified: zod.ZodOptional<zod.ZodBoolean>;
118
231
  createdAt: zod.ZodCoercedDate<unknown>;
@@ -152,6 +265,7 @@ declare const iamContract: {
152
265
  }, zod_v4_core.$strip>], "success">, Record<never, never>, Record<never, never>>;
153
266
  requestPasswordReset: _orpc_contract.ContractProcedureBuilderWithInputOutput<zod.ZodObject<{
154
267
  identifier: zod.ZodString;
268
+ captcha: zod.ZodOptional<zod.ZodString>;
155
269
  }, zod_v4_core.$strip>, zod.ZodDiscriminatedUnion<[zod.ZodObject<{
156
270
  success: zod.ZodLiteral<true>;
157
271
  data: zod.ZodVoid;
@@ -190,6 +304,8 @@ declare const iamContract: {
190
304
  }, zod_v4_core.$strip>;
191
305
  }, zod_v4_core.$strip>], "success">, Record<never, never>, Record<never, never>>;
192
306
  login: _orpc_contract.ContractProcedureBuilderWithInputOutput<zod.ZodObject<{
307
+ expectedUserId: zod.ZodOptional<zod.ZodString>;
308
+ captcha: zod.ZodOptional<zod.ZodString>;
193
309
  identifier: zod.ZodString;
194
310
  password: zod.ZodString;
195
311
  }, zod_v4_core.$strip>, zod.ZodDiscriminatedUnion<[zod.ZodObject<{
@@ -203,6 +319,18 @@ declare const iamContract: {
203
319
  displayName: zod.ZodOptional<zod.ZodString>;
204
320
  avatarUrl: zod.ZodOptional<zod.ZodString>;
205
321
  enabled: zod.ZodBoolean;
322
+ accountType: zod.ZodOptional<zod.ZodEnum<{
323
+ permanent: "permanent";
324
+ temporary: "temporary";
325
+ }>>;
326
+ accountStatus: zod.ZodOptional<zod.ZodEnum<{
327
+ active: "active";
328
+ dormant: "dormant";
329
+ closed: "closed";
330
+ }>>;
331
+ accountExpiresAt: zod.ZodOptional<zod.ZodNullable<zod.ZodCoercedDate<unknown>>>;
332
+ lastLoginAt: zod.ZodOptional<zod.ZodNullable<zod.ZodCoercedDate<unknown>>>;
333
+ mustChangePassword: zod.ZodOptional<zod.ZodBoolean>;
206
334
  emailVerified: zod.ZodOptional<zod.ZodBoolean>;
207
335
  phoneVerified: zod.ZodOptional<zod.ZodBoolean>;
208
336
  createdAt: zod.ZodCoercedDate<unknown>;
@@ -241,6 +369,8 @@ declare const iamContract: {
241
369
  }, zod_v4_core.$strip>;
242
370
  }, zod_v4_core.$strip>], "success">, Record<never, never>, Record<never, never>>;
243
371
  loginWithOtp: _orpc_contract.ContractProcedureBuilderWithInputOutput<zod.ZodObject<{
372
+ expectedUserId: zod.ZodOptional<zod.ZodString>;
373
+ captcha: zod.ZodOptional<zod.ZodString>;
244
374
  identifier: zod.ZodString;
245
375
  code: zod.ZodString;
246
376
  }, zod_v4_core.$strip>, zod.ZodDiscriminatedUnion<[zod.ZodObject<{
@@ -254,6 +384,18 @@ declare const iamContract: {
254
384
  displayName: zod.ZodOptional<zod.ZodString>;
255
385
  avatarUrl: zod.ZodOptional<zod.ZodString>;
256
386
  enabled: zod.ZodBoolean;
387
+ accountType: zod.ZodOptional<zod.ZodEnum<{
388
+ permanent: "permanent";
389
+ temporary: "temporary";
390
+ }>>;
391
+ accountStatus: zod.ZodOptional<zod.ZodEnum<{
392
+ active: "active";
393
+ dormant: "dormant";
394
+ closed: "closed";
395
+ }>>;
396
+ accountExpiresAt: zod.ZodOptional<zod.ZodNullable<zod.ZodCoercedDate<unknown>>>;
397
+ lastLoginAt: zod.ZodOptional<zod.ZodNullable<zod.ZodCoercedDate<unknown>>>;
398
+ mustChangePassword: zod.ZodOptional<zod.ZodBoolean>;
257
399
  emailVerified: zod.ZodOptional<zod.ZodBoolean>;
258
400
  phoneVerified: zod.ZodOptional<zod.ZodBoolean>;
259
401
  createdAt: zod.ZodCoercedDate<unknown>;
@@ -310,6 +452,25 @@ declare const iamContract: {
310
452
  ext: zod.ZodOptional<zod.ZodRecord<zod.ZodString, zod.ZodUnknown>>;
311
453
  }, zod_v4_core.$strip>;
312
454
  }, zod_v4_core.$strip>], "success">, Record<never, never>, Record<never, never>>;
455
+ closeSession: _orpc_contract.ContractProcedureBuilderWithInputOutput<zod.ZodObject<{
456
+ accessToken: zod.ZodOptional<zod.ZodString>;
457
+ }, zod_v4_core.$strip>, zod.ZodDiscriminatedUnion<[zod.ZodObject<{
458
+ success: zod.ZodLiteral<true>;
459
+ data: zod.ZodVoid;
460
+ }, zod_v4_core.$strip>, zod.ZodObject<{
461
+ success: zod.ZodLiteral<false>;
462
+ error: zod.ZodObject<{
463
+ code: zod.ZodUnion<readonly [zod.ZodString, zod.ZodNumber]>;
464
+ message: zod.ZodString;
465
+ traceId: zod.ZodOptional<zod.ZodString>;
466
+ httpStatus: zod.ZodOptional<zod.ZodNumber>;
467
+ system: zod.ZodOptional<zod.ZodString>;
468
+ module: zod.ZodOptional<zod.ZodString>;
469
+ cause: zod.ZodOptional<zod.ZodUnknown>;
470
+ suggestion: zod.ZodOptional<zod.ZodString>;
471
+ ext: zod.ZodOptional<zod.ZodRecord<zod.ZodString, zod.ZodUnknown>>;
472
+ }, zod_v4_core.$strip>;
473
+ }, zod_v4_core.$strip>], "success">, Record<never, never>, Record<never, never>>;
313
474
  currentUser: _orpc_contract.ContractProcedureBuilderWithOutput<_orpc_contract.Schema<unknown, unknown>, zod.ZodDiscriminatedUnion<[zod.ZodObject<{
314
475
  success: zod.ZodLiteral<true>;
315
476
  data: zod.ZodObject<{
@@ -320,6 +481,18 @@ declare const iamContract: {
320
481
  displayName: zod.ZodOptional<zod.ZodString>;
321
482
  avatarUrl: zod.ZodOptional<zod.ZodString>;
322
483
  enabled: zod.ZodBoolean;
484
+ accountType: zod.ZodOptional<zod.ZodEnum<{
485
+ permanent: "permanent";
486
+ temporary: "temporary";
487
+ }>>;
488
+ accountStatus: zod.ZodOptional<zod.ZodEnum<{
489
+ active: "active";
490
+ dormant: "dormant";
491
+ closed: "closed";
492
+ }>>;
493
+ accountExpiresAt: zod.ZodOptional<zod.ZodNullable<zod.ZodCoercedDate<unknown>>>;
494
+ lastLoginAt: zod.ZodOptional<zod.ZodNullable<zod.ZodCoercedDate<unknown>>>;
495
+ mustChangePassword: zod.ZodOptional<zod.ZodBoolean>;
323
496
  emailVerified: zod.ZodOptional<zod.ZodBoolean>;
324
497
  phoneVerified: zod.ZodOptional<zod.ZodBoolean>;
325
498
  createdAt: zod.ZodCoercedDate<unknown>;
@@ -369,6 +542,7 @@ declare const iamContract: {
369
542
  }, zod_v4_core.$strip>;
370
543
  }, zod_v4_core.$strip>], "success">, Record<never, never>, Record<never, never>>;
371
544
  sendOtp: _orpc_contract.ContractProcedureBuilderWithInputOutput<zod.ZodObject<{
545
+ captcha: zod.ZodOptional<zod.ZodString>;
372
546
  identifier: zod.ZodString;
373
547
  }, zod_v4_core.$strip>, zod.ZodDiscriminatedUnion<[zod.ZodObject<{
374
548
  success: zod.ZodLiteral<true>;
@@ -390,6 +564,7 @@ declare const iamContract: {
390
564
  }, zod_v4_core.$strip>;
391
565
  }, zod_v4_core.$strip>], "success">, Record<never, never>, Record<never, never>>;
392
566
  register: _orpc_contract.ContractProcedureBuilderWithInputOutput<zod.ZodObject<{
567
+ captcha: zod.ZodOptional<zod.ZodString>;
393
568
  username: zod.ZodString;
394
569
  password: zod.ZodString;
395
570
  email: zod.ZodOptional<zod.ZodString>;
@@ -407,6 +582,18 @@ declare const iamContract: {
407
582
  displayName: zod.ZodOptional<zod.ZodString>;
408
583
  avatarUrl: zod.ZodOptional<zod.ZodString>;
409
584
  enabled: zod.ZodBoolean;
585
+ accountType: zod.ZodOptional<zod.ZodEnum<{
586
+ permanent: "permanent";
587
+ temporary: "temporary";
588
+ }>>;
589
+ accountStatus: zod.ZodOptional<zod.ZodEnum<{
590
+ active: "active";
591
+ dormant: "dormant";
592
+ closed: "closed";
593
+ }>>;
594
+ accountExpiresAt: zod.ZodOptional<zod.ZodNullable<zod.ZodCoercedDate<unknown>>>;
595
+ lastLoginAt: zod.ZodOptional<zod.ZodNullable<zod.ZodCoercedDate<unknown>>>;
596
+ mustChangePassword: zod.ZodOptional<zod.ZodBoolean>;
410
597
  emailVerified: zod.ZodOptional<zod.ZodBoolean>;
411
598
  phoneVerified: zod.ZodOptional<zod.ZodBoolean>;
412
599
  createdAt: zod.ZodCoercedDate<unknown>;
@@ -481,6 +668,18 @@ declare const iamContract: {
481
668
  displayName: zod.ZodOptional<zod.ZodString>;
482
669
  avatarUrl: zod.ZodOptional<zod.ZodString>;
483
670
  enabled: zod.ZodBoolean;
671
+ accountType: zod.ZodOptional<zod.ZodEnum<{
672
+ permanent: "permanent";
673
+ temporary: "temporary";
674
+ }>>;
675
+ accountStatus: zod.ZodOptional<zod.ZodEnum<{
676
+ active: "active";
677
+ dormant: "dormant";
678
+ closed: "closed";
679
+ }>>;
680
+ accountExpiresAt: zod.ZodOptional<zod.ZodNullable<zod.ZodCoercedDate<unknown>>>;
681
+ lastLoginAt: zod.ZodOptional<zod.ZodNullable<zod.ZodCoercedDate<unknown>>>;
682
+ mustChangePassword: zod.ZodOptional<zod.ZodBoolean>;
484
683
  emailVerified: zod.ZodOptional<zod.ZodBoolean>;
485
684
  phoneVerified: zod.ZodOptional<zod.ZodBoolean>;
486
685
  createdAt: zod.ZodCoercedDate<unknown>;
@@ -503,6 +702,62 @@ declare const iamContract: {
503
702
  }, zod_v4_core.$strip>], "success">, Record<never, never>, Record<never, never>>;
504
703
  };
505
704
  users: {
705
+ invite: _orpc_contract.ContractProcedureBuilderWithInputOutput<zod.ZodObject<{
706
+ metadata: zod.ZodOptional<zod.ZodRecord<zod.ZodString, zod.ZodUnknown>>;
707
+ email: zod.ZodOptional<zod.ZodString>;
708
+ username: zod.ZodString;
709
+ phone: zod.ZodOptional<zod.ZodString>;
710
+ displayName: zod.ZodOptional<zod.ZodString>;
711
+ accountType: zod.ZodOptional<zod.ZodEnum<{
712
+ permanent: "permanent";
713
+ temporary: "temporary";
714
+ }>>;
715
+ accountExpiresAt: zod.ZodOptional<zod.ZodCoercedDate<unknown>>;
716
+ roleIds: zod.ZodOptional<zod.ZodArray<zod.ZodString>>;
717
+ enabled: zod.ZodOptional<zod.ZodLiteral<true>>;
718
+ accountStatus: zod.ZodOptional<zod.ZodLiteral<"active">>;
719
+ }, zod_v4_core.$strip>, zod.ZodDiscriminatedUnion<[zod.ZodObject<{
720
+ success: zod.ZodLiteral<true>;
721
+ data: zod.ZodObject<{
722
+ id: zod.ZodString;
723
+ username: zod.ZodString;
724
+ email: zod.ZodOptional<zod.ZodString>;
725
+ phone: zod.ZodOptional<zod.ZodString>;
726
+ displayName: zod.ZodOptional<zod.ZodString>;
727
+ avatarUrl: zod.ZodOptional<zod.ZodString>;
728
+ enabled: zod.ZodBoolean;
729
+ accountType: zod.ZodOptional<zod.ZodEnum<{
730
+ permanent: "permanent";
731
+ temporary: "temporary";
732
+ }>>;
733
+ accountStatus: zod.ZodOptional<zod.ZodEnum<{
734
+ active: "active";
735
+ dormant: "dormant";
736
+ closed: "closed";
737
+ }>>;
738
+ accountExpiresAt: zod.ZodOptional<zod.ZodNullable<zod.ZodCoercedDate<unknown>>>;
739
+ lastLoginAt: zod.ZodOptional<zod.ZodNullable<zod.ZodCoercedDate<unknown>>>;
740
+ mustChangePassword: zod.ZodOptional<zod.ZodBoolean>;
741
+ emailVerified: zod.ZodOptional<zod.ZodBoolean>;
742
+ phoneVerified: zod.ZodOptional<zod.ZodBoolean>;
743
+ createdAt: zod.ZodCoercedDate<unknown>;
744
+ updatedAt: zod.ZodCoercedDate<unknown>;
745
+ metadata: zod.ZodOptional<zod.ZodRecord<zod.ZodString, zod.ZodUnknown>>;
746
+ }, zod_v4_core.$strip>;
747
+ }, zod_v4_core.$strip>, zod.ZodObject<{
748
+ success: zod.ZodLiteral<false>;
749
+ error: zod.ZodObject<{
750
+ code: zod.ZodUnion<readonly [zod.ZodString, zod.ZodNumber]>;
751
+ message: zod.ZodString;
752
+ traceId: zod.ZodOptional<zod.ZodString>;
753
+ httpStatus: zod.ZodOptional<zod.ZodNumber>;
754
+ system: zod.ZodOptional<zod.ZodString>;
755
+ module: zod.ZodOptional<zod.ZodString>;
756
+ cause: zod.ZodOptional<zod.ZodUnknown>;
757
+ suggestion: zod.ZodOptional<zod.ZodString>;
758
+ ext: zod.ZodOptional<zod.ZodRecord<zod.ZodString, zod.ZodUnknown>>;
759
+ }, zod_v4_core.$strip>;
760
+ }, zod_v4_core.$strip>], "success">, Record<never, never>, Record<never, never>>;
506
761
  list: _orpc_contract.ContractProcedureBuilderWithInputOutput<zod.ZodObject<{
507
762
  page: zod.ZodOptional<zod.ZodCoercedNumber<unknown>>;
508
763
  pageSize: zod.ZodOptional<zod.ZodCoercedNumber<unknown>>;
@@ -523,6 +778,18 @@ declare const iamContract: {
523
778
  displayName: zod.ZodOptional<zod.ZodString>;
524
779
  avatarUrl: zod.ZodOptional<zod.ZodString>;
525
780
  enabled: zod.ZodBoolean;
781
+ accountType: zod.ZodOptional<zod.ZodEnum<{
782
+ permanent: "permanent";
783
+ temporary: "temporary";
784
+ }>>;
785
+ accountStatus: zod.ZodOptional<zod.ZodEnum<{
786
+ active: "active";
787
+ dormant: "dormant";
788
+ closed: "closed";
789
+ }>>;
790
+ accountExpiresAt: zod.ZodOptional<zod.ZodNullable<zod.ZodCoercedDate<unknown>>>;
791
+ lastLoginAt: zod.ZodOptional<zod.ZodNullable<zod.ZodCoercedDate<unknown>>>;
792
+ mustChangePassword: zod.ZodOptional<zod.ZodBoolean>;
526
793
  emailVerified: zod.ZodOptional<zod.ZodBoolean>;
527
794
  phoneVerified: zod.ZodOptional<zod.ZodBoolean>;
528
795
  createdAt: zod.ZodCoercedDate<unknown>;
@@ -559,6 +826,18 @@ declare const iamContract: {
559
826
  displayName: zod.ZodOptional<zod.ZodString>;
560
827
  avatarUrl: zod.ZodOptional<zod.ZodString>;
561
828
  enabled: zod.ZodBoolean;
829
+ accountType: zod.ZodOptional<zod.ZodEnum<{
830
+ permanent: "permanent";
831
+ temporary: "temporary";
832
+ }>>;
833
+ accountStatus: zod.ZodOptional<zod.ZodEnum<{
834
+ active: "active";
835
+ dormant: "dormant";
836
+ closed: "closed";
837
+ }>>;
838
+ accountExpiresAt: zod.ZodOptional<zod.ZodNullable<zod.ZodCoercedDate<unknown>>>;
839
+ lastLoginAt: zod.ZodOptional<zod.ZodNullable<zod.ZodCoercedDate<unknown>>>;
840
+ mustChangePassword: zod.ZodOptional<zod.ZodBoolean>;
562
841
  emailVerified: zod.ZodOptional<zod.ZodBoolean>;
563
842
  phoneVerified: zod.ZodOptional<zod.ZodBoolean>;
564
843
  createdAt: zod.ZodCoercedDate<unknown>;
@@ -580,6 +859,16 @@ declare const iamContract: {
580
859
  }, zod_v4_core.$strip>;
581
860
  }, zod_v4_core.$strip>], "success">, Record<never, never>, Record<never, never>>;
582
861
  create: _orpc_contract.ContractProcedureBuilderWithInputOutput<zod.ZodObject<{
862
+ accountType: zod.ZodOptional<zod.ZodEnum<{
863
+ permanent: "permanent";
864
+ temporary: "temporary";
865
+ }>>;
866
+ accountStatus: zod.ZodOptional<zod.ZodEnum<{
867
+ active: "active";
868
+ dormant: "dormant";
869
+ closed: "closed";
870
+ }>>;
871
+ accountExpiresAt: zod.ZodOptional<zod.ZodCoercedDate<unknown>>;
583
872
  username: zod.ZodString;
584
873
  email: zod.ZodOptional<zod.ZodString>;
585
874
  phone: zod.ZodOptional<zod.ZodString>;
@@ -598,6 +887,18 @@ declare const iamContract: {
598
887
  displayName: zod.ZodOptional<zod.ZodString>;
599
888
  avatarUrl: zod.ZodOptional<zod.ZodString>;
600
889
  enabled: zod.ZodBoolean;
890
+ accountType: zod.ZodOptional<zod.ZodEnum<{
891
+ permanent: "permanent";
892
+ temporary: "temporary";
893
+ }>>;
894
+ accountStatus: zod.ZodOptional<zod.ZodEnum<{
895
+ active: "active";
896
+ dormant: "dormant";
897
+ closed: "closed";
898
+ }>>;
899
+ accountExpiresAt: zod.ZodOptional<zod.ZodNullable<zod.ZodCoercedDate<unknown>>>;
900
+ lastLoginAt: zod.ZodOptional<zod.ZodNullable<zod.ZodCoercedDate<unknown>>>;
901
+ mustChangePassword: zod.ZodOptional<zod.ZodBoolean>;
601
902
  emailVerified: zod.ZodOptional<zod.ZodBoolean>;
602
903
  phoneVerified: zod.ZodOptional<zod.ZodBoolean>;
603
904
  createdAt: zod.ZodCoercedDate<unknown>;
@@ -619,6 +920,16 @@ declare const iamContract: {
619
920
  }, zod_v4_core.$strip>;
620
921
  }, zod_v4_core.$strip>], "success">, Record<never, never>, Record<never, never>>;
621
922
  update: _orpc_contract.ContractProcedureBuilderWithInputOutput<zod.ZodObject<{
923
+ accountType: zod.ZodOptional<zod.ZodEnum<{
924
+ permanent: "permanent";
925
+ temporary: "temporary";
926
+ }>>;
927
+ accountStatus: zod.ZodOptional<zod.ZodEnum<{
928
+ active: "active";
929
+ dormant: "dormant";
930
+ closed: "closed";
931
+ }>>;
932
+ accountExpiresAt: zod.ZodOptional<zod.ZodNullable<zod.ZodCoercedDate<unknown>>>;
622
933
  id: zod.ZodString;
623
934
  username: zod.ZodOptional<zod.ZodString>;
624
935
  email: zod.ZodOptional<zod.ZodString>;
@@ -638,6 +949,18 @@ declare const iamContract: {
638
949
  displayName: zod.ZodOptional<zod.ZodString>;
639
950
  avatarUrl: zod.ZodOptional<zod.ZodString>;
640
951
  enabled: zod.ZodBoolean;
952
+ accountType: zod.ZodOptional<zod.ZodEnum<{
953
+ permanent: "permanent";
954
+ temporary: "temporary";
955
+ }>>;
956
+ accountStatus: zod.ZodOptional<zod.ZodEnum<{
957
+ active: "active";
958
+ dormant: "dormant";
959
+ closed: "closed";
960
+ }>>;
961
+ accountExpiresAt: zod.ZodOptional<zod.ZodNullable<zod.ZodCoercedDate<unknown>>>;
962
+ lastLoginAt: zod.ZodOptional<zod.ZodNullable<zod.ZodCoercedDate<unknown>>>;
963
+ mustChangePassword: zod.ZodOptional<zod.ZodBoolean>;
641
964
  emailVerified: zod.ZodOptional<zod.ZodBoolean>;
642
965
  phoneVerified: zod.ZodOptional<zod.ZodBoolean>;
643
966
  createdAt: zod.ZodCoercedDate<unknown>;
@@ -836,6 +1159,26 @@ declare const iamContract: {
836
1159
  }, zod_v4_core.$strip>], "success">, Record<never, never>, Record<never, never>>;
837
1160
  };
838
1161
  permissions: {
1162
+ setSensitiveOperations: _orpc_contract.ContractProcedureBuilderWithInputOutput<zod.ZodObject<{
1163
+ id: zod.ZodString;
1164
+ sensitiveOperations: zod.ZodPipe<zod.ZodOptional<zod.ZodNullable<zod.ZodArray<zod.ZodString>>>, zod.ZodTransform<string[], string[] | null | undefined>>;
1165
+ }, zod_v4_core.$strip>, zod.ZodDiscriminatedUnion<[zod.ZodObject<{
1166
+ success: zod.ZodLiteral<true>;
1167
+ data: zod.ZodVoid;
1168
+ }, zod_v4_core.$strip>, zod.ZodObject<{
1169
+ success: zod.ZodLiteral<false>;
1170
+ error: zod.ZodObject<{
1171
+ code: zod.ZodUnion<readonly [zod.ZodString, zod.ZodNumber]>;
1172
+ message: zod.ZodString;
1173
+ traceId: zod.ZodOptional<zod.ZodString>;
1174
+ httpStatus: zod.ZodOptional<zod.ZodNumber>;
1175
+ system: zod.ZodOptional<zod.ZodString>;
1176
+ module: zod.ZodOptional<zod.ZodString>;
1177
+ cause: zod.ZodOptional<zod.ZodUnknown>;
1178
+ suggestion: zod.ZodOptional<zod.ZodString>;
1179
+ ext: zod.ZodOptional<zod.ZodRecord<zod.ZodString, zod.ZodUnknown>>;
1180
+ }, zod_v4_core.$strip>;
1181
+ }, zod_v4_core.$strip>], "success">, Record<never, never>, Record<never, never>>;
839
1182
  list: _orpc_contract.ContractProcedureBuilderWithInputOutput<zod.ZodObject<{
840
1183
  page: zod.ZodOptional<zod.ZodCoercedNumber<unknown>>;
841
1184
  pageSize: zod.ZodOptional<zod.ZodCoercedNumber<unknown>>;
@@ -849,6 +1192,7 @@ declare const iamContract: {
849
1192
  success: zod.ZodLiteral<true>;
850
1193
  data: zod.ZodObject<{
851
1194
  items: zod.ZodArray<zod.ZodObject<{
1195
+ sensitiveOperations: zod.ZodPipe<zod.ZodOptional<zod.ZodNullable<zod.ZodArray<zod.ZodString>>>, zod.ZodTransform<string[], string[] | null | undefined>>;
852
1196
  id: zod.ZodString;
853
1197
  code: zod.ZodString;
854
1198
  name: zod.ZodString;
@@ -886,6 +1230,7 @@ declare const iamContract: {
886
1230
  }, zod_v4_core.$strip>, zod.ZodDiscriminatedUnion<[zod.ZodObject<{
887
1231
  success: zod.ZodLiteral<true>;
888
1232
  data: zod.ZodNullable<zod.ZodObject<{
1233
+ sensitiveOperations: zod.ZodPipe<zod.ZodOptional<zod.ZodNullable<zod.ZodArray<zod.ZodString>>>, zod.ZodTransform<string[], string[] | null | undefined>>;
889
1234
  id: zod.ZodString;
890
1235
  code: zod.ZodString;
891
1236
  name: zod.ZodString;
@@ -915,6 +1260,7 @@ declare const iamContract: {
915
1260
  }, zod_v4_core.$strip>;
916
1261
  }, zod_v4_core.$strip>], "success">, Record<never, never>, Record<never, never>>;
917
1262
  create: _orpc_contract.ContractProcedureBuilderWithInputOutput<zod.ZodObject<{
1263
+ sensitiveOperations: zod.ZodDefault<zod.ZodArray<zod.ZodString>>;
918
1264
  code: zod.ZodString;
919
1265
  name: zod.ZodString;
920
1266
  description: zod.ZodOptional<zod.ZodString>;
@@ -928,6 +1274,7 @@ declare const iamContract: {
928
1274
  }, zod_v4_core.$strip>, zod.ZodDiscriminatedUnion<[zod.ZodObject<{
929
1275
  success: zod.ZodLiteral<true>;
930
1276
  data: zod.ZodObject<{
1277
+ sensitiveOperations: zod.ZodPipe<zod.ZodOptional<zod.ZodNullable<zod.ZodArray<zod.ZodString>>>, zod.ZodTransform<string[], string[] | null | undefined>>;
931
1278
  id: zod.ZodString;
932
1279
  code: zod.ZodString;
933
1280
  name: zod.ZodString;
@@ -998,6 +1345,47 @@ type IamContract = typeof iamContract;
998
1345
  * @module iam-schemas
999
1346
  */
1000
1347
 
1348
+ /**
1349
+ * 交互挑战生成入参,证明只能用于指定入口。
1350
+ * @example
1351
+ * ```ts
1352
+ * import { IamCreateCaptchaInputSchema } from '@h-ai/api-contract'
1353
+ * const input = IamCreateCaptchaInputSchema.parse({ operation: 'login' })
1354
+ * ```
1355
+ */
1356
+ declare const IamCreateCaptchaInputSchema: z.ZodObject<{
1357
+ operation: z.ZodEnum<{
1358
+ login: "login";
1359
+ register: "register";
1360
+ sendOtp: "sendOtp";
1361
+ passwordReset: "passwordReset";
1362
+ renewPassword: "renewPassword";
1363
+ }>;
1364
+ }, z.core.$strip>;
1365
+ /**
1366
+ * 自托管 ALTCHA 可公开挑战;不会返回签名秘密。
1367
+ * @example
1368
+ * ```ts
1369
+ * import { IamCaptchaChallengeSchema } from '@h-ai/api-contract'
1370
+ * function parseResponse(value: unknown) { return IamCaptchaChallengeSchema.parse(value) }
1371
+ * ```
1372
+ */
1373
+ declare const IamCaptchaChallengeSchema: z.ZodObject<{
1374
+ id: z.ZodString;
1375
+ challenge: z.ZodObject<{
1376
+ signature: z.ZodOptional<z.ZodString>;
1377
+ parameters: z.ZodObject<{
1378
+ algorithm: z.ZodString & z.ZodType<"PBKDF2/SHA-256", string, z.core.$ZodTypeInternals<"PBKDF2/SHA-256", string>>;
1379
+ nonce: z.ZodString;
1380
+ salt: z.ZodString;
1381
+ cost: z.ZodNumber;
1382
+ keyLength: z.ZodNumber;
1383
+ keyPrefix: z.ZodString;
1384
+ keySignature: z.ZodOptional<z.ZodString>;
1385
+ data: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull]>>>;
1386
+ }, z.core.$strip>;
1387
+ }, z.core.$strip>;
1388
+ }, z.core.$strip>;
1001
1389
  /**
1002
1390
  * 用户基础信息 Schema。
1003
1391
  * @example
@@ -1022,6 +1410,18 @@ declare const IamUserSchema: z.ZodObject<{
1022
1410
  displayName: z.ZodOptional<z.ZodString>;
1023
1411
  avatarUrl: z.ZodOptional<z.ZodString>;
1024
1412
  enabled: z.ZodBoolean;
1413
+ accountType: z.ZodOptional<z.ZodEnum<{
1414
+ permanent: "permanent";
1415
+ temporary: "temporary";
1416
+ }>>;
1417
+ accountStatus: z.ZodOptional<z.ZodEnum<{
1418
+ active: "active";
1419
+ dormant: "dormant";
1420
+ closed: "closed";
1421
+ }>>;
1422
+ accountExpiresAt: z.ZodOptional<z.ZodNullable<z.ZodCoercedDate<unknown>>>;
1423
+ lastLoginAt: z.ZodOptional<z.ZodNullable<z.ZodCoercedDate<unknown>>>;
1424
+ mustChangePassword: z.ZodOptional<z.ZodBoolean>;
1025
1425
  emailVerified: z.ZodOptional<z.ZodBoolean>;
1026
1426
  phoneVerified: z.ZodOptional<z.ZodBoolean>;
1027
1427
  createdAt: z.ZodCoercedDate<unknown>;
@@ -1101,6 +1501,18 @@ declare const IamAuthResultSchema: z.ZodObject<{
1101
1501
  displayName: z.ZodOptional<z.ZodString>;
1102
1502
  avatarUrl: z.ZodOptional<z.ZodString>;
1103
1503
  enabled: z.ZodBoolean;
1504
+ accountType: z.ZodOptional<z.ZodEnum<{
1505
+ permanent: "permanent";
1506
+ temporary: "temporary";
1507
+ }>>;
1508
+ accountStatus: z.ZodOptional<z.ZodEnum<{
1509
+ active: "active";
1510
+ dormant: "dormant";
1511
+ closed: "closed";
1512
+ }>>;
1513
+ accountExpiresAt: z.ZodOptional<z.ZodNullable<z.ZodCoercedDate<unknown>>>;
1514
+ lastLoginAt: z.ZodOptional<z.ZodNullable<z.ZodCoercedDate<unknown>>>;
1515
+ mustChangePassword: z.ZodOptional<z.ZodBoolean>;
1104
1516
  emailVerified: z.ZodOptional<z.ZodBoolean>;
1105
1517
  phoneVerified: z.ZodOptional<z.ZodBoolean>;
1106
1518
  createdAt: z.ZodCoercedDate<unknown>;
@@ -1154,6 +1566,18 @@ declare const IamCurrentUserSchema: z.ZodObject<{
1154
1566
  displayName: z.ZodOptional<z.ZodString>;
1155
1567
  avatarUrl: z.ZodOptional<z.ZodString>;
1156
1568
  enabled: z.ZodBoolean;
1569
+ accountType: z.ZodOptional<z.ZodEnum<{
1570
+ permanent: "permanent";
1571
+ temporary: "temporary";
1572
+ }>>;
1573
+ accountStatus: z.ZodOptional<z.ZodEnum<{
1574
+ active: "active";
1575
+ dormant: "dormant";
1576
+ closed: "closed";
1577
+ }>>;
1578
+ accountExpiresAt: z.ZodOptional<z.ZodNullable<z.ZodCoercedDate<unknown>>>;
1579
+ lastLoginAt: z.ZodOptional<z.ZodNullable<z.ZodCoercedDate<unknown>>>;
1580
+ mustChangePassword: z.ZodOptional<z.ZodBoolean>;
1157
1581
  emailVerified: z.ZodOptional<z.ZodBoolean>;
1158
1582
  phoneVerified: z.ZodOptional<z.ZodBoolean>;
1159
1583
  createdAt: z.ZodCoercedDate<unknown>;
@@ -1176,9 +1600,27 @@ declare const IamCurrentUserSchema: z.ZodObject<{
1176
1600
  * ```
1177
1601
  */
1178
1602
  declare const IamLoginInputSchema: z.ZodObject<{
1603
+ expectedUserId: z.ZodOptional<z.ZodString>;
1604
+ captcha: z.ZodOptional<z.ZodString>;
1179
1605
  identifier: z.ZodString;
1180
1606
  password: z.ZodString;
1181
1607
  }, z.core.$strip>;
1608
+ /**
1609
+ * 可以尝试刷新或恢复登录的IAM会话错误码;密码错误、初始/过期改密与操作二次认证不属于会话恢复。
1610
+ * @example
1611
+ * ```ts
1612
+ * import { IamSessionErrorCodeSchema } from '@h-ai/api-contract'
1613
+ * const expired = IamSessionErrorCodeSchema.safeParse('hai:iam:103').success
1614
+ * ```
1615
+ */
1616
+ declare const IamSessionErrorCodeSchema: z.ZodEnum<{
1617
+ "hai:iam:101": "hai:iam:101";
1618
+ "hai:iam:102": "hai:iam:102";
1619
+ "hai:iam:103": "hai:iam:103";
1620
+ "hai:iam:105": "hai:iam:105";
1621
+ "hai:iam:106": "hai:iam:106";
1622
+ "hai:iam:107": "hai:iam:107";
1623
+ }>;
1182
1624
  /**
1183
1625
  * LDAP 登录与密码找回入参。
1184
1626
  * @example
@@ -1195,6 +1637,8 @@ declare const IamLoginInputSchema: z.ZodObject<{
1195
1637
  declare const IamLdapLoginInputSchema: z.ZodObject<{
1196
1638
  username: z.ZodString;
1197
1639
  password: z.ZodString;
1640
+ captcha: z.ZodOptional<z.ZodString>;
1641
+ expectedUserId: z.ZodOptional<z.ZodString>;
1198
1642
  }, z.core.$strip>;
1199
1643
  /**
1200
1644
  * IamRequestPasswordResetInput 数据的运行时 Zod 校验约束。
@@ -1210,6 +1654,7 @@ declare const IamLdapLoginInputSchema: z.ZodObject<{
1210
1654
  */
1211
1655
  declare const IamRequestPasswordResetInputSchema: z.ZodObject<{
1212
1656
  identifier: z.ZodString;
1657
+ captcha: z.ZodOptional<z.ZodString>;
1213
1658
  }, z.core.$strip>;
1214
1659
  /**
1215
1660
  * IamConfirmPasswordResetInput 数据的运行时 Zod 校验约束。
@@ -1228,6 +1673,44 @@ declare const IamConfirmPasswordResetInputSchema: z.ZodObject<{
1228
1673
  token: z.ZodString;
1229
1674
  newPassword: z.ZodString;
1230
1675
  }, z.core.$strip>;
1676
+ /**
1677
+ * 无普通会话的首次或过期改密;必须重新验证原密码。
1678
+ * @example
1679
+ * ```ts
1680
+ * import { IamRenewPasswordInputSchema } from '@h-ai/api-contract'
1681
+ * const input = IamRenewPasswordInputSchema.parse({ identifier: 'alice', password: 'Initial123!', newPassword: 'Chosen456!' })
1682
+ * ```
1683
+ */
1684
+ declare const IamRenewPasswordInputSchema: z.ZodObject<{
1685
+ identifier: z.ZodString;
1686
+ password: z.ZodString;
1687
+ newPassword: z.ZodString;
1688
+ captcha: z.ZodOptional<z.ZodString>;
1689
+ }, z.core.$strip>;
1690
+ /**
1691
+ * 对当前会话的指定操作重新鉴别;操作本身仍需独立授权。
1692
+ * @example
1693
+ * ```ts
1694
+ * import { IamReauthenticateInputSchema } from '@h-ai/api-contract'
1695
+ * const input = IamReauthenticateInputSchema.parse({ password: 'ChosenPassword123!', operation: 'iam.users.delete' })
1696
+ * ```
1697
+ */
1698
+ declare const IamReauthenticateInputSchema: z.ZodObject<{
1699
+ password: z.ZodString;
1700
+ operation: z.ZodString;
1701
+ }, z.core.$strip>;
1702
+ /**
1703
+ * 短期、用途绑定的单次操作证明,不能持久化到浏览器存储。
1704
+ * @example
1705
+ * ```ts
1706
+ * import { IamReauthenticationProofSchema } from '@h-ai/api-contract'
1707
+ * const proof = IamReauthenticationProofSchema.parse({ ticket: 'example-only-ticket', expiresAt: Date.now() + 300000 })
1708
+ * ```
1709
+ */
1710
+ declare const IamReauthenticationProofSchema: z.ZodObject<{
1711
+ ticket: z.ZodString;
1712
+ expiresAt: z.ZodNumber;
1713
+ }, z.core.$strip>;
1231
1714
  /**
1232
1715
  * 认证页面公开配置白名单,独立于服务端连接/凭据配置。
1233
1716
  * @example
@@ -1277,6 +1760,16 @@ declare const IamConfirmPasswordResetInputSchema: z.ZodObject<{
1277
1760
  * ```
1278
1761
  */
1279
1762
  declare const IamPublicConfigSchema: z.ZodObject<{
1763
+ captcha: z.ZodDefault<z.ZodObject<{
1764
+ enabled: z.ZodBoolean;
1765
+ }, z.core.$strip>>;
1766
+ reauthentication: z.ZodOptional<z.ZodObject<{
1767
+ enabled: z.ZodBoolean;
1768
+ operations: z.ZodArray<z.ZodString>;
1769
+ }, z.core.$strip>>;
1770
+ initialCredentials: z.ZodOptional<z.ZodObject<{
1771
+ enabled: z.ZodBoolean;
1772
+ }, z.core.$strip>>;
1280
1773
  password: z.ZodObject<{
1281
1774
  minLength: z.ZodNumber;
1282
1775
  maxLength: z.ZodNumber;
@@ -1285,6 +1778,9 @@ declare const IamPublicConfigSchema: z.ZodObject<{
1285
1778
  requireNumber: z.ZodBoolean;
1286
1779
  requireSpecialChar: z.ZodBoolean;
1287
1780
  expirationDays: z.ZodNumber;
1781
+ minCharacterClasses: z.ZodOptional<z.ZodNumber>;
1782
+ preventSamePassword: z.ZodOptional<z.ZodBoolean>;
1783
+ requireInitialChange: z.ZodOptional<z.ZodBoolean>;
1288
1784
  }, z.core.$strip>;
1289
1785
  register: z.ZodObject<{
1290
1786
  enabled: z.ZodBoolean;
@@ -1329,6 +1825,7 @@ declare const IamPublicConfigSchema: z.ZodObject<{
1329
1825
  }, z.core.$strip>;
1330
1826
  session: z.ZodObject<{
1331
1827
  maxAge: z.ZodNumber;
1828
+ endOnPageHide: z.ZodDefault<z.ZodBoolean>;
1332
1829
  }, z.core.$strip>;
1333
1830
  }, z.core.$strip>;
1334
1831
  /**
@@ -1345,6 +1842,8 @@ declare const IamPublicConfigSchema: z.ZodObject<{
1345
1842
  * ```
1346
1843
  */
1347
1844
  declare const IamOtpLoginInputSchema: z.ZodObject<{
1845
+ expectedUserId: z.ZodOptional<z.ZodString>;
1846
+ captcha: z.ZodOptional<z.ZodString>;
1348
1847
  identifier: z.ZodString;
1349
1848
  code: z.ZodString;
1350
1849
  }, z.core.$strip>;
@@ -1376,6 +1875,7 @@ declare const IamLogoutInputSchema: z.ZodObject<{
1376
1875
  * ```
1377
1876
  */
1378
1877
  declare const IamSendOtpInputSchema: z.ZodObject<{
1878
+ captcha: z.ZodOptional<z.ZodString>;
1379
1879
  identifier: z.ZodString;
1380
1880
  }, z.core.$strip>;
1381
1881
  /**
@@ -1446,6 +1946,7 @@ declare const IamRefreshTokenDataSchema: z.ZodObject<{
1446
1946
  * ```
1447
1947
  */
1448
1948
  declare const IamRegisterInputSchema: z.ZodObject<{
1949
+ captcha: z.ZodOptional<z.ZodString>;
1449
1950
  username: z.ZodString;
1450
1951
  password: z.ZodString;
1451
1952
  email: z.ZodOptional<z.ZodString>;
@@ -1522,6 +2023,16 @@ declare const IamListUsersInputSchema: z.ZodObject<{
1522
2023
  * ```
1523
2024
  */
1524
2025
  declare const IamAdminCreateUserInputSchema: z.ZodObject<{
2026
+ accountType: z.ZodOptional<z.ZodEnum<{
2027
+ permanent: "permanent";
2028
+ temporary: "temporary";
2029
+ }>>;
2030
+ accountStatus: z.ZodOptional<z.ZodEnum<{
2031
+ active: "active";
2032
+ dormant: "dormant";
2033
+ closed: "closed";
2034
+ }>>;
2035
+ accountExpiresAt: z.ZodOptional<z.ZodCoercedDate<unknown>>;
1525
2036
  username: z.ZodString;
1526
2037
  email: z.ZodOptional<z.ZodString>;
1527
2038
  phone: z.ZodOptional<z.ZodString>;
@@ -1531,6 +2042,38 @@ declare const IamAdminCreateUserInputSchema: z.ZodObject<{
1531
2042
  roleIds: z.ZodOptional<z.ZodArray<z.ZodString>>;
1532
2043
  enabled: z.ZodOptional<z.ZodBoolean>;
1533
2044
  }, z.core.$strip>;
2045
+ /**
2046
+ * 管理端单次邀请不接收共享初始密码;初始账号必须启用且激活。
2047
+ * @example
2048
+ * ```ts
2049
+ * import { IamInviteUserInputSchema } from '@h-ai/api-contract'
2050
+ * const input = IamInviteUserInputSchema.parse({ username: 'alice', email: 'alice@example.com' })
2051
+ * ```
2052
+ */
2053
+ declare const IamInviteUserInputSchema: z.ZodObject<{
2054
+ metadata: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
2055
+ email: z.ZodOptional<z.ZodString>;
2056
+ username: z.ZodString;
2057
+ phone: z.ZodOptional<z.ZodString>;
2058
+ displayName: z.ZodOptional<z.ZodString>;
2059
+ accountType: z.ZodOptional<z.ZodEnum<{
2060
+ permanent: "permanent";
2061
+ temporary: "temporary";
2062
+ }>>;
2063
+ accountExpiresAt: z.ZodOptional<z.ZodCoercedDate<unknown>>;
2064
+ roleIds: z.ZodOptional<z.ZodArray<z.ZodString>>;
2065
+ enabled: z.ZodOptional<z.ZodLiteral<true>>;
2066
+ accountStatus: z.ZodOptional<z.ZodLiteral<"active">>;
2067
+ }, z.core.$strip>;
2068
+ /**
2069
+ * 单次邀请的管理端输入。
2070
+ * @example
2071
+ * ```ts
2072
+ * import type { IamInviteUserInput } from '@h-ai/api-contract'
2073
+ * const input: IamInviteUserInput = { username: 'alice', email: 'alice@example.com' }
2074
+ * ```
2075
+ */
2076
+ type IamInviteUserInput = z.infer<typeof IamInviteUserInputSchema>;
1534
2077
  /**
1535
2078
  * Admin 更新用户入参 Schema。
1536
2079
  * @example
@@ -1544,6 +2087,16 @@ declare const IamAdminCreateUserInputSchema: z.ZodObject<{
1544
2087
  * ```
1545
2088
  */
1546
2089
  declare const IamAdminUpdateUserInputSchema: z.ZodObject<{
2090
+ accountType: z.ZodOptional<z.ZodEnum<{
2091
+ permanent: "permanent";
2092
+ temporary: "temporary";
2093
+ }>>;
2094
+ accountStatus: z.ZodOptional<z.ZodEnum<{
2095
+ active: "active";
2096
+ dormant: "dormant";
2097
+ closed: "closed";
2098
+ }>>;
2099
+ accountExpiresAt: z.ZodOptional<z.ZodNullable<z.ZodCoercedDate<unknown>>>;
1547
2100
  id: z.ZodString;
1548
2101
  username: z.ZodOptional<z.ZodString>;
1549
2102
  email: z.ZodOptional<z.ZodString>;
@@ -1679,6 +2232,7 @@ declare const IamPermissionTypeSchema: z.ZodEnum<{
1679
2232
  * ```
1680
2233
  */
1681
2234
  declare const IamPermissionSchema: z.ZodObject<{
2235
+ sensitiveOperations: z.ZodPipe<z.ZodOptional<z.ZodNullable<z.ZodArray<z.ZodString>>>, z.ZodTransform<string[], string[] | null | undefined>>;
1682
2236
  id: z.ZodString;
1683
2237
  code: z.ZodString;
1684
2238
  name: z.ZodString;
@@ -1727,6 +2281,7 @@ declare const IamListPermissionsInputSchema: z.ZodObject<{
1727
2281
  * ```
1728
2282
  */
1729
2283
  declare const IamCreatePermissionInputSchema: z.ZodObject<{
2284
+ sensitiveOperations: z.ZodDefault<z.ZodArray<z.ZodString>>;
1730
2285
  code: z.ZodString;
1731
2286
  name: z.ZodString;
1732
2287
  description: z.ZodOptional<z.ZodString>;
@@ -2136,4 +2691,4 @@ type IamListPermissionsInput = z.infer<typeof IamListPermissionsInputSchema>;
2136
2691
  */
2137
2692
  type IamCreatePermissionInput = z.infer<typeof IamCreatePermissionInputSchema>;
2138
2693
 
2139
- export { type IamAdminCreateUserInput, IamAdminCreateUserInputSchema, type IamAdminResetPasswordInput, IamAdminResetPasswordInputSchema, type IamAdminUpdateUserInput, IamAdminUpdateUserInputSchema, IamAgreementDisplaySchema, type IamAuthResultOutput, IamAuthResultSchema, type IamChangePasswordInput, IamChangePasswordInputSchema, IamConfirmPasswordResetInputSchema, type IamContract, type IamCreatePermissionInput, IamCreatePermissionInputSchema, type IamCreateRoleInput, IamCreateRoleInputSchema, type IamCurrentUser, type IamCurrentUserOutput, IamCurrentUserSchema, type IamLdapLoginInput, IamLdapLoginInputSchema, type IamListPermissionsInput, IamListPermissionsInputSchema, type IamListUsersInput, IamListUsersInputSchema, type IamLoginInput, IamLoginInputSchema, type IamLogoutInput, IamLogoutInputSchema, type IamOtpLoginInput, IamOtpLoginInputSchema, IamPermissionSchema, IamPermissionTypeSchema, type IamPublicConfig, IamPublicConfigSchema, IamRefreshTokenDataSchema, type IamRefreshTokenInput, IamRefreshTokenInputSchema, type IamRefreshTokenOutput, type IamRegisterInput, IamRegisterInputSchema, IamRequestPasswordResetInputSchema, IamRoleSchema, IamSendOtpDataSchema, type IamSendOtpInput, IamSendOtpInputSchema, IamTokenPairSchema, type IamUpdateCurrentUserInput, IamUpdateCurrentUserInputSchema, type IamUpdateRoleInput, IamUpdateRoleInputSchema, type IamUserIdInput, IamUserIdInputSchema, IamUserSchema, iamContract };
2694
+ export { type IamAdminCreateUserInput, IamAdminCreateUserInputSchema, type IamAdminResetPasswordInput, IamAdminResetPasswordInputSchema, type IamAdminUpdateUserInput, IamAdminUpdateUserInputSchema, IamAgreementDisplaySchema, type IamAuthResultOutput, IamAuthResultSchema, IamCaptchaChallengeSchema, type IamChangePasswordInput, IamChangePasswordInputSchema, IamConfirmPasswordResetInputSchema, type IamContract, IamCreateCaptchaInputSchema, type IamCreatePermissionInput, IamCreatePermissionInputSchema, type IamCreateRoleInput, IamCreateRoleInputSchema, type IamCurrentUser, type IamCurrentUserOutput, IamCurrentUserSchema, type IamInviteUserInput, IamInviteUserInputSchema, type IamLdapLoginInput, IamLdapLoginInputSchema, type IamListPermissionsInput, IamListPermissionsInputSchema, type IamListUsersInput, IamListUsersInputSchema, type IamLoginInput, IamLoginInputSchema, type IamLogoutInput, IamLogoutInputSchema, type IamOtpLoginInput, IamOtpLoginInputSchema, IamPermissionSchema, IamPermissionTypeSchema, type IamPublicConfig, IamPublicConfigSchema, IamReauthenticateInputSchema, IamReauthenticationProofSchema, IamRefreshTokenDataSchema, type IamRefreshTokenInput, IamRefreshTokenInputSchema, type IamRefreshTokenOutput, type IamRegisterInput, IamRegisterInputSchema, IamRenewPasswordInputSchema, IamRequestPasswordResetInputSchema, IamRoleSchema, IamSendOtpDataSchema, type IamSendOtpInput, IamSendOtpInputSchema, IamSessionErrorCodeSchema, IamTokenPairSchema, type IamUpdateCurrentUserInput, IamUpdateCurrentUserInputSchema, type IamUpdateRoleInput, IamUpdateRoleInputSchema, type IamUserIdInput, IamUserIdInputSchema, IamUserSchema, iamContract };