@h-ai/cli 0.1.0-alpha.59 → 0.1.0-alpha.60

package/templates/base/src/hooks.server.ts.hbs

@@ -89,10 +89,10 @@ const haiHandle = kit.createHandle({
         data: session.data,
       }
     },
-    operations: iam.auth,
     loginUrl: '/auth/login',
     protectedPaths: ['/admin/*', '/api/*'],
-    publicPaths: ['/api/auth/*', '/api/public/*', '/api/health'],
+    publicPaths: [...kit.auth.publicPaths, '/api/auth/logout', '/api/public/*', '/api/health'],
+    operations: () => iam.auth,
   },
 {{/if}}
   rateLimit: { windowMs: 60000, maxRequests: 200 },

package/templates/base/src/lib/server/init.ts.hbs

@@ -190,7 +190,7 @@ export async function initApp(): Promise<void> {
 
 {{#if features.iam}}
   // ─── 初始化 IAM ───
-  const iamResult = await iam.init(iamConfig)
+  const iamResult = await iam.init({ ...iamConfig{{#if features.reach}}, reach{{/if}} })
   if (!iamResult.success) {
     throw new Error(`IAM initialization failed: ${iamResult.error.message}`)
   }

package/templates/base/src/routes/+layout.server.ts.hbs

@@ -2,11 +2,17 @@
 {{#unless isSvelteOnlyApp}}
 import type { CoreConfig } from '@h-ai/core'
 import { core } from '@h-ai/core'
+{{#if features.iam}}
+import { iam } from '@h-ai/iam'
+{{/if}}
 
 /** 只向浏览器提供公开配置，避免暴露日志上下文、凭证或其它模块配置。 */
 export function load() {
   const config = core.config.getOrThrow<CoreConfig>('core')
   return {
+{{#if features.iam}}
+    iamPublicConfig: iam.publicConfig,
+{{/if}}
     appConfig: {
       name: config.name,
       version: config.version,

package/templates/base/tests/scaffold.test.ts.hbs

@@ -55,6 +55,9 @@ describe('generated scaffold', () => {
     const config = core.config.getOrThrow<CoreConfig>('core')
     expect(core.logger.getLevel()).toBe(config.logging?.level ?? 'info')
     expect(load()).toEqual({
+{{#if features.iam}}
+      iamPublicConfig: null,
+{{/if}}
       appConfig: { name: config.name, version: config.version, env: config.env, defaultLocale: config.defaultLocale },
     })
   })

package/templates/base/vite.config.ts.hbs

@@ -42,6 +42,7 @@ export default defineConfig(({ mode }) => {
 {{/if}}
 
   return {
+    envPrefix: ['VITE_', 'PUBLIC_'],
 {{#if isSvelteOnlyApp}}
     define: { __APP_CORE_CONFIG__: JSON.stringify(appConfig) },
 {{/if}}

package/templates/features/iam/routes-admin/(auth)/+layout.svelte.hbs

@@ -1,21 +1,7 @@
-{{!-- 认证布局（登录/注册共用） --}}
 <script lang='ts'>
-  /**
-   * 认证布局（登录/注册共用）
-   */
   import type { Snippet } from 'svelte'
 
-  interface Props {
-    children: Snippet
-  }
-
-  const { children }: Props = $props()
+  const { children }: { children: Snippet } = $props()
 </script>
 
-<div class='min-h-screen flex items-center justify-center bg-base-200'>
-  <div class='card w-full max-w-md bg-base-100 shadow-xl'>
-    <div class='card-body'>
-      {@render children()}
-    </div>
-  </div>
-</div>
+{@render children()}

package/templates/features/iam/routes-admin/(auth)/auth/forgot-password/+page.svelte.hbs

@@ -0,0 +1,10 @@
+<script lang='ts'>
+  import { resolve } from '$app/paths'
+  import { page } from '$app/state'
+  import { kit } from '@h-ai/kit'
+  import { AuthPanel } from '@h-ai/ui/components/scenes/iam/index'
+
+  const actions = kit.client.createAuthActions()
+</script>
+
+<AuthPanel config={page.data.iamPublicConfig} {actions} initialMode='forgot' resetToken={page.url.searchParams.get('token') ?? ''} loginUrl={resolve('/auth/login', {})} />

package/templates/features/iam/routes-admin/(auth)/auth/login/+page.svelte.hbs

@@ -1,100 +1,11 @@
-{{!-- Admin 登录页面 --}}
 <script lang='ts'>
-  /**
-   * 登录页面
-   */
+  import { goto } from '$app/navigation'
   import { resolve } from '$app/paths'
-{{#if hasI18n}}
-  import * as m from '$lib/paraglide/messages'
-{{/if}}
-  import { Alert, Button, FormField, Input } from '@h-ai/ui'
+  import { page } from '$app/state'
+  import { kit } from '@h-ai/kit'
+  import { AuthPanel } from '@h-ai/ui/components/scenes/iam/index'
 
-  let username = $state('')
-  let password = $state('')
-  let error = $state('')
-  let loading = $state(false)
-
-  async function handleLogin(event: SubmitEvent) {
-    event.preventDefault()
-    error = ''
-    loading = true
-    try {
-      const res = await fetch('/api/auth/login', {
-        method: 'POST',
-        headers: { 'Content-Type': 'application/json' },
-        body: JSON.stringify({ identifier: username, password }),
-      })
-      const data = await res.json()
-      if (data.success) {
-        window.location.href = '/admin'
-      }
-      else {
-{{#if hasI18n}}
-        error = data.error?.message || m.auth_login_failed()
-{{else}}
-        error = data.error?.message || '登录失败'
-{{/if}}
-      }
-    }
-    catch {
-{{#if hasI18n}}
-      error = m.auth_error_network()
-{{else}}
-      error = '网络错误'
-{{/if}}
-    }
-    finally {
-      loading = false
-    }
-  }
+  const actions = kit.client.createAuthActions()
 </script>
 
-<svelte:head>
-{{#if hasI18n}}
-  <title>{m.auth_login_title()}</title>
-{{else}}
-  <title>登录</title>
-{{/if}}
-</svelte:head>
-
-{{#if hasI18n}}
-<h2 class='text-2xl font-bold text-center mb-6'>{m.auth_login_title()}</h2>
-{{else}}
-<h2 class='text-2xl font-bold text-center mb-6'>登录</h2>
-{{/if}}
-
-{#if error}
-  <Alert variant='error' class='mb-4'>{error}</Alert>
-{/if}
-
-<form onsubmit={handleLogin} class='space-y-4'>
-{{#if hasI18n}}
-  <FormField label={m.auth_label_username()} required>
-    <Input id='username' type='text' bind:value={username} required />
-  </FormField>
-  <FormField label={m.auth_label_password()} required>
-    <Input id='password' type='password' bind:value={password} required />
-  </FormField>
-  <Button type='submit' variant='primary' loading={loading} class='w-full'>
-    {loading ? m.auth_login_loading() : m.auth_login_submit()}
-  </Button>
-{{else}}
-  <FormField label='用户名' required>
-    <Input id='username' type='text' bind:value={username} required />
-  </FormField>
-  <FormField label='密码' required>
-    <Input id='password' type='password' bind:value={password} required />
-  </FormField>
-  <Button type='submit' variant='primary' loading={loading} class='w-full'>
-    {loading ? '登录中...' : '登录'}
-  </Button>
-{{/if}}
-</form>
-
-<div class='text-center mt-4'>
-{{#if hasI18n}}
-  <a href={resolve('/auth/register', {})} class='link link-primary text-sm'>{m.auth_login_to_register()}</a>
-{{else}}
-  <a href={resolve('/auth/register', {})} class='link link-primary text-sm'>没有账号？立即注册</a>
-{{/if}}
-</div>
+<AuthPanel config={page.data.iamPublicConfig} {actions} initialMode='login' loginUrl={resolve('/auth/login', {})} registerUrl={resolve('/auth/register', {})} onauthenticated={() => goto(resolve('/admin', {}))} />

package/templates/features/iam/routes-admin/(auth)/auth/register/+page.svelte.hbs

@@ -1,122 +1,11 @@
-{{!-- Admin 注册页面 --}}
 <script lang='ts'>
-  /**
-   * 注册页面
-   */
+  import { goto } from '$app/navigation'
   import { resolve } from '$app/paths'
-{{#if hasI18n}}
-  import * as m from '$lib/paraglide/messages'
-{{/if}}
-  import { Alert, Button, FormField, Input } from '@h-ai/ui'
+  import { page } from '$app/state'
+  import { kit } from '@h-ai/kit'
+  import { AuthPanel } from '@h-ai/ui/components/scenes/iam/index'
 
-  let username = $state('')
-  let email = $state('')
-  let password = $state('')
-  let confirmPassword = $state('')
-  let error = $state('')
-  let loading = $state(false)
-
-  async function handleRegister(event: SubmitEvent) {
-    event.preventDefault()
-    error = ''
-    if (password !== confirmPassword) {
-{{#if hasI18n}}
-      error = m.auth_error_password_mismatch()
-{{else}}
-      error = '密码不一致'
-{{/if}}
-      return
-    }
-    loading = true
-    try {
-      const res = await fetch('/api/auth/register', {
-        method: 'POST',
-        headers: { 'Content-Type': 'application/json' },
-        body: JSON.stringify({ username, email, password, confirmPassword }),
-      })
-      const data = await res.json()
-      if (data.success) {
-        window.location.href = '/auth/login'
-      }
-      else {
-{{#if hasI18n}}
-        error = data.error?.message || m.auth_register_failed()
-{{else}}
-        error = data.error?.message || '注册失败'
-{{/if}}
-      }
-    }
-    catch {
-{{#if hasI18n}}
-      error = m.auth_error_network()
-{{else}}
-      error = '网络错误'
-{{/if}}
-    }
-    finally {
-      loading = false
-    }
-  }
+  const actions = kit.client.createAuthActions()
 </script>
 
-<svelte:head>
-{{#if hasI18n}}
-  <title>{m.auth_register_title()}</title>
-{{else}}
-  <title>注册</title>
-{{/if}}
-</svelte:head>
-
-{{#if hasI18n}}
-<h2 class='text-2xl font-bold text-center mb-6'>{m.auth_register_title()}</h2>
-{{else}}
-<h2 class='text-2xl font-bold text-center mb-6'>注册</h2>
-{{/if}}
-
-{#if error}
-  <Alert variant='error' class='mb-4'>{error}</Alert>
-{/if}
-
-<form onsubmit={handleRegister} class='space-y-4'>
-{{#if hasI18n}}
-  <FormField label={m.auth_label_username()} required>
-    <Input id='username' type='text' bind:value={username} required />
-  </FormField>
-  <FormField label={m.auth_label_email()} required>
-    <Input id='email' type='email' bind:value={email} required />
-  </FormField>
-  <FormField label={m.auth_label_password()} required>
-    <Input id='password' type='password' bind:value={password} required />
-  </FormField>
-  <FormField label={m.auth_label_confirm_password()} required>
-    <Input id='confirmPassword' type='password' bind:value={confirmPassword} required />
-  </FormField>
-  <Button type='submit' variant='primary' loading={loading} class='w-full'>
-    {loading ? m.auth_register_loading() : m.auth_register_submit()}
-  </Button>
-{{else}}
-  <FormField label='用户名' required>
-    <Input id='username' type='text' bind:value={username} required />
-  </FormField>
-  <FormField label='邮箱' required>
-    <Input id='email' type='email' bind:value={email} required />
-  </FormField>
-  <FormField label='密码' required>
-    <Input id='password' type='password' bind:value={password} required />
-  </FormField>
-  <FormField label='确认密码' required>
-    <Input id='confirmPassword' type='password' bind:value={confirmPassword} required />
-  </FormField>
-  <Button type='submit' variant='primary' loading={loading} class='w-full'>
-    {loading ? '注册中...' : '注册'}
-  </Button>
-{{/if}}
-</form>
-
-<div class='text-center mt-4'>
-{{#if hasI18n}}
-  <a href={resolve('/auth/login', {})} class='link link-primary text-sm'>{m.auth_register_to_login()}</a>
-{{else}}
-  <a href={resolve('/auth/login', {})} class='link link-primary text-sm'>已有账号？立即登录</a>
-{{/if}}
-</div>
+<AuthPanel config={page.data.iamPublicConfig} {actions} initialMode='register' loginUrl={resolve('/auth/login', {})} registerUrl={resolve('/auth/register', {})} onauthenticated={() => goto(resolve('/admin', {}))} />

package/templates/features/iam/routes-admin/(auth)/auth/reset-password/+page.svelte.hbs

@@ -0,0 +1,10 @@
+<script lang='ts'>
+  import { resolve } from '$app/paths'
+  import { page } from '$app/state'
+  import { kit } from '@h-ai/kit'
+  import { AuthPanel } from '@h-ai/ui/components/scenes/iam/index'
+
+  const actions = kit.client.createAuthActions()
+</script>
+
+<AuthPanel config={page.data.iamPublicConfig} {actions} initialMode='reset' resetToken={page.url.searchParams.get('token') ?? ''} loginUrl={resolve('/auth/login', {})} />

package/templates/features/iam/routes-h5/auth/forgot-password/+page.svelte.hbs

@@ -0,0 +1,10 @@
+<script lang='ts'>
+  import { resolve } from '$app/paths'
+  import { page } from '$app/state'
+  import { kit } from '@h-ai/kit'
+  import { AuthPanel } from '@h-ai/ui/components/scenes/iam/index'
+
+  const actions = kit.client.createAuthActions()
+</script>
+
+<AuthPanel config={page.data.iamPublicConfig} {actions} initialMode='forgot' resetToken={page.url.searchParams.get('token') ?? ''} loginUrl={resolve('/auth/login', {})} />

package/templates/features/iam/routes-h5/auth/login/+page.svelte.hbs

@@ -1,102 +1,11 @@
-{{!-- H5 登录页面 --}}
 <script lang='ts'>
-  /**
-   * H5 登录页面
-   */
+  import { goto } from '$app/navigation'
   import { resolve } from '$app/paths'
-{{#if hasI18n}}
-  import * as m from '$lib/paraglide/messages'
-{{/if}}
-  import { Alert, Button, FormField, Input } from '@h-ai/ui'
+  import { page } from '$app/state'
+  import { kit } from '@h-ai/kit'
+  import { AuthPanel } from '@h-ai/ui/components/scenes/iam/index'
 
-  let username = $state('')
-  let password = $state('')
-  let error = $state('')
-  let loading = $state(false)
-
-  async function handleLogin(event: SubmitEvent) {
-    event.preventDefault()
-    error = ''
-    loading = true
-    try {
-      const res = await fetch('/api/auth/login', {
-        method: 'POST',
-        headers: { 'Content-Type': 'application/json' },
-        body: JSON.stringify({ identifier: username, password }),
-      })
-      const data = await res.json()
-      if (data.success) {
-        window.location.href = '/'
-      }
-      else {
-{{#if hasI18n}}
-        error = data.error?.message || m.auth_login_failed()
-{{else}}
-        error = data.error?.message || '登录失败'
-{{/if}}
-      }
-    }
-    catch {
-{{#if hasI18n}}
-      error = m.auth_error_network()
-{{else}}
-      error = '网络错误'
-{{/if}}
-    }
-    finally {
-      loading = false
-    }
-  }
+  const authActions = kit.client.createAuthActions()
 </script>
 
-<svelte:head>
-{{#if hasI18n}}
-  <title>{m.auth_login_title()}</title>
-{{else}}
-  <title>登录</title>
-{{/if}}
-</svelte:head>
-
-<div class='p-4 pt-12 space-y-4'>
-{{#if hasI18n}}
-  <h1 class='text-2xl font-black tracking-tight text-center'>{m.auth_login_title()}</h1>
-{{else}}
-  <h1 class='text-2xl font-black tracking-tight text-center'>登录</h1>
-{{/if}}
-
-  {#if error}
-    <Alert variant='error'>{error}</Alert>
-  {/if}
-
-  <form onsubmit={handleLogin} class='space-y-4'>
-{{#if hasI18n}}
-    <FormField label={m.auth_label_username()} required>
-      <Input id='username' type='text' bind:value={username} required />
-    </FormField>
-    <FormField label={m.auth_label_password()} required>
-      <Input id='password' type='password' bind:value={password} required />
-    </FormField>
-    <Button type='submit' variant='primary' loading={loading} class='w-full'>
-      {loading ? m.auth_login_loading() : m.auth_login_submit()}
-    </Button>
-{{else}}
-    <FormField label='用户名' required>
-      <Input id='username' type='text' bind:value={username} required />
-    </FormField>
-    <FormField label='密码' required>
-      <Input id='password' type='password' bind:value={password} required />
-    </FormField>
-    <Button type='submit' variant='primary' loading={loading} class='w-full'>
-      {loading ? '登录中...' : '登录'}
-    </Button>
-{{/if}}
-  </form>
-
-  <div class='text-center'>
-{{#if hasI18n}}
-    <a href={resolve('/auth/register', {})} class='link link-primary text-sm'>{m.auth_login_to_register()}</a>
-{{else}}
-    <a href={resolve('/auth/register', {})} class='link link-primary text-sm'>没有账号？立即注册</a>
-{{/if}}
-  </div>
-</div>
+<AuthPanel config={page.data.iamPublicConfig} actions={authActions} initialMode='login' loginUrl={resolve('/auth/login', {})} registerUrl={resolve('/auth/register', {})} onauthenticated={() => goto(resolve('/', {}))} />

package/templates/features/iam/routes-h5/auth/register/+page.svelte.hbs

@@ -1,117 +1,11 @@
-{{!-- H5 注册页面 --}}
 <script lang='ts'>
-  /**
-   * H5 注册页面
-   */
+  import { goto } from '$app/navigation'
   import { resolve } from '$app/paths'
-{{#if hasI18n}}
-  import * as m from '$lib/paraglide/messages'
-{{/if}}
-  import { Alert, Button, FormField, Input } from '@h-ai/ui'
+  import { page } from '$app/state'
+  import { kit } from '@h-ai/kit'
+  import { AuthPanel } from '@h-ai/ui/components/scenes/iam/index'
 
-  let username = $state('')
-  let password = $state('')
-  let confirmPassword = $state('')
-  let error = $state('')
-  let loading = $state(false)
-
-  async function handleRegister(event: SubmitEvent) {
-    event.preventDefault()
-    error = ''
-    if (password !== confirmPassword) {
-{{#if hasI18n}}
-      error = m.auth_error_password_mismatch()
-{{else}}
-      error = '密码不一致'
-{{/if}}
-      return
-    }
-    loading = true
-    try {
-      const res = await fetch('/api/auth/register', {
-        method: 'POST',
-        headers: { 'Content-Type': 'application/json' },
-        body: JSON.stringify({ username, password, confirmPassword }),
-      })
-      const data = await res.json()
-      if (data.success) {
-        window.location.href = '/auth/login'
-      }
-      else {
-{{#if hasI18n}}
-        error = data.error?.message || m.auth_register_failed()
-{{else}}
-        error = data.error?.message || '注册失败'
-{{/if}}
-      }
-    }
-    catch {
-{{#if hasI18n}}
-      error = m.auth_error_network()
-{{else}}
-      error = '网络错误'
-{{/if}}
-    }
-    finally {
-      loading = false
-    }
-  }
+  const authActions = kit.client.createAuthActions()
 </script>
 
-<svelte:head>
-{{#if hasI18n}}
-  <title>{m.auth_register_title()}</title>
-{{else}}
-  <title>注册</title>
-{{/if}}
-</svelte:head>
-
-<div class='p-4 pt-12 space-y-4'>
-{{#if hasI18n}}
-  <h1 class='text-2xl font-black tracking-tight text-center'>{m.auth_register_title()}</h1>
-{{else}}
-  <h1 class='text-2xl font-black tracking-tight text-center'>注册</h1>
-{{/if}}
-
-  {#if error}
-    <Alert variant='error'>{error}</Alert>
-  {/if}
-
-  <form onsubmit={handleRegister} class='space-y-4'>
-{{#if hasI18n}}
-    <FormField label={m.auth_label_username()} required>
-      <Input id='username' type='text' bind:value={username} required />
-    </FormField>
-    <FormField label={m.auth_label_password()} required>
-      <Input id='password' type='password' bind:value={password} required />
-    </FormField>
-    <FormField label={m.auth_label_confirm_password()} required>
-      <Input id='confirmPassword' type='password' bind:value={confirmPassword} required />
-    </FormField>
-    <Button type='submit' variant='primary' loading={loading} class='w-full'>
-      {loading ? m.auth_register_loading() : m.auth_register_submit()}
-    </Button>
-{{else}}
-    <FormField label='用户名' required>
-      <Input id='username' type='text' bind:value={username} required />
-    </FormField>
-    <FormField label='密码' required>
-      <Input id='password' type='password' bind:value={password} required />
-    </FormField>
-    <FormField label='确认密码' required>
-      <Input id='confirmPassword' type='password' bind:value={confirmPassword} required />
-    </FormField>
-    <Button type='submit' variant='primary' loading={loading} class='w-full'>
-      {loading ? '注册中...' : '注册'}
-    </Button>
-{{/if}}
-  </form>
-
-  <div class='text-center'>
-{{#if hasI18n}}
-    <a href={resolve('/auth/login', {})} class='link link-primary text-sm'>{m.auth_register_to_login()}</a>
-{{else}}
-    <a href={resolve('/auth/login', {})} class='link link-primary text-sm'>已有账号？立即登录</a>
-{{/if}}
-  </div>
-</div>
+<AuthPanel config={page.data.iamPublicConfig} actions={authActions} initialMode='register' loginUrl={resolve('/auth/login', {})} registerUrl={resolve('/auth/register', {})} onauthenticated={() => goto(resolve('/', {}))} />

package/templates/features/iam/routes-h5/auth/reset-password/+page.svelte.hbs

@@ -0,0 +1,10 @@
+<script lang='ts'>
+  import { resolve } from '$app/paths'
+  import { page } from '$app/state'
+  import { kit } from '@h-ai/kit'
+  import { AuthPanel } from '@h-ai/ui/components/scenes/iam/index'
+
+  const actions = kit.client.createAuthActions()
+</script>
+
+<AuthPanel config={page.data.iamPublicConfig} {actions} initialMode='reset' resetToken={page.url.searchParams.get('token') ?? ''} loginUrl={resolve('/auth/login', {})} />

package/templates/features/iam/routes-shared/api/auth/config/+server.ts

@@ -0,0 +1,4 @@
+import { iam } from '@h-ai/iam'
+import { kit } from '@h-ai/kit'
+
+export const GET = kit.auth.createApi(iam).publicConfig

package/templates/features/iam/routes-shared/api/auth/login/+server.ts

@@ -1,36 +1,4 @@
-import type { CoreConfig } from '@h-ai/core'
-/**
- * 登录 API
- */
-import type { RequestHandler } from './$types'
-import { core } from '@h-ai/core'
 import { iam } from '@h-ai/iam'
 import { kit } from '@h-ai/kit'
-import { z } from 'zod'
 
-const LoginInputSchema = z.object({
-  identifier: z.string().trim().min(1).max(254),
-  password: z.string().min(1).max(128),
-}).strict()
-
-export const POST: RequestHandler = kit.handler(async ({ request, cookies, locals }) => {
-  const { identifier, password } = await kit.validate.body(request, LoginInputSchema)
-
-  const result = await iam.auth.login({ identifier, password })
-  if (!result.success) {
-    return kit.response.fromError(result.error, locals.requestId)
-  }
-
-  const { tokens } = result.data
-  const config = core.config.getOrThrow<CoreConfig>('core')
-
-  cookies.set('session_token', tokens.accessToken, {
-    path: '/',
-    httpOnly: true,
-    sameSite: 'lax',
-    secure: config.env === 'production' || config.env === 'staging',
-    maxAge: tokens.expiresIn,
-  })
-
-  return kit.response.ok({ authenticated: true }, locals.requestId)
-})
+export const POST = kit.auth.createApi(iam).login

package/templates/features/iam/routes-shared/api/auth/login/ldap/+server.ts

@@ -0,0 +1,4 @@
+import { iam } from '@h-ai/iam'
+import { kit } from '@h-ai/kit'
+
+export const POST = kit.auth.createApi(iam).loginWithLdap

package/templates/features/iam/routes-shared/api/auth/login/otp/+server.ts

@@ -0,0 +1,4 @@
+import { iam } from '@h-ai/iam'
+import { kit } from '@h-ai/kit'
+
+export const POST = kit.auth.createApi(iam).loginWithOtp

package/templates/features/iam/routes-shared/api/auth/otp/send/+server.ts

@@ -0,0 +1,4 @@
+import { iam } from '@h-ai/iam'
+import { kit } from '@h-ai/kit'
+
+export const POST = kit.auth.createApi(iam).sendOtp

package/templates/features/iam/routes-shared/api/auth/password-reset/confirm/+server.ts

@@ -0,0 +1,4 @@
+import { iam } from '@h-ai/iam'
+import { kit } from '@h-ai/kit'
+
+export const POST = kit.auth.createApi(iam).confirmPasswordReset