@h-ai/iam 0.1.0-alpha.48 → 0.1.0-alpha.50

package/README.md

@@ -439,8 +439,9 @@ const result = await iam.apiKey.createApiKey(userId, {
 })
 // result.data.rawKey → 明文密钥（仅此一次展示）
 
-// 列出用户的 API Key
-const keys = await iam.apiKey.listApiKeys(userId)
+// 列出用户的 API Key（服务端分页）
+const keys = await iam.apiKey.listApiKeys(userId, { page: 1, pageSize: 20, search: 'ci' })
+// keys.data → { items, total, page, pageSize }
 
 // 吊销
 await iam.apiKey.revokeApiKey(keyId)

package/dist/index.d.ts

@@ -286,6 +286,23 @@ interface CreateApiKeyOptions {
     /** 权限范围 */
     scopes?: string[];
 }
+/** API Key 列表允许的服务端排序字段。 */
+type ApiKeySortField = 'name' | 'createdAt' | 'lastUsedAt' | 'expiresAt';
+/** API Key 列表排序方向。 */
+type ApiKeySortDirection = 'asc' | 'desc';
+/**
+ * API Key 列表查询选项
+ */
+interface ListApiKeysOptions extends PaginationOptionsInput {
+    /** 搜索关键字（模糊匹配名称与密钥前缀） */
+    search?: string;
+    /** 按启用状态过滤，不传则返回全部 */
+    enabled?: boolean;
+    /** 服务端排序字段；未指定时保持按创建时间倒序的历史行为。 */
+    sortBy?: ApiKeySortField;
+    /** 服务端排序方向；仅在指定 sortBy 时生效，默认 desc。 */
+    sortDirection?: ApiKeySortDirection;
+}
 /**
  * API Key 管理操作接口
  */
@@ -299,12 +316,13 @@ interface ApiKeyOperations {
      */
     createApiKey: (userId: string, options: CreateApiKeyOptions) => Promise<HaiResult<CreateApiKeyResult>>;
     /**
-     * 列出用户的所有 API Key
+     * 分页列出用户的 API Key
      *
      * @param userId - 用户 ID
-     * @returns API Key 列表（不含密钥哈希）
+     * @param options - 分页、搜索、过滤与排序选项
+     * @returns 分页 API Key 列表（不含密钥哈希）
      */
-    listApiKeys: (userId: string) => Promise<HaiResult<ApiKey[]>>;
+    listApiKeys: (userId: string, options?: ListApiKeysOptions) => Promise<HaiResult<PaginatedResult<ApiKey>>>;
     /**
      * 获取 API Key 详情
      *
@@ -1497,4 +1515,4 @@ interface IamFunctions {
 
 declare const iam: IamFunctions;
 
-export { type AgreementConfig, AgreementConfigSchema, type AgreementDisplay, type ApiKey, type ApiKeyConfig, ApiKeyConfigSchema, type ApiKeyCredentials, type ApiKeyOperations, type AuthResult, type AuthStrategy, type AuthStrategyType, AuthStrategyTypeSchema, type AuthnOperations, type AuthzOperations, type ConsumeTicketOptions, type ConsumedTicket, type CreateApiKeyOptions, type CreateApiKeyResult, type CreateSessionOptions, type Credentials, HaiIamError, type IamConfig, type IamConfigInput, IamConfigSchema, type IamConfigSettingsInput, type IamFunctions, type IssueTicketOptions, type IssuedTicket, type LdapClientFactory, type LdapConfig, LdapConfigSchema, type LdapCredentials, type ListUsersOptions, type LoginConfig, LoginConfigSchema, type OtpConfig, OtpConfigSchema, type OtpCredentials, type PasswordConfig, PasswordConfigSchema, type PasswordCredentials, type PasswordResetConfig, PasswordResetConfigSchema, type Permission, type PermissionQueryOptions, type PermissionType, type RbacConfig, RbacConfigSchema, type RegisterConfig, RegisterConfigSchema, type RegisterOptions, type RegisterResult, type Role, type SecurityConfig, SecurityConfigSchema, type Session, type SessionConfig, SessionConfigSchema, type SessionData, type SessionFieldUpdates, type SessionOperations, type StoredUser, type TicketGrant, type TicketOperations, type TokenPair, type UpdateCurrentUserInput, type User, type UserOperations, type UserSortDirection, type UserSortField, iam };
+export { type AgreementConfig, AgreementConfigSchema, type AgreementDisplay, type ApiKey, type ApiKeyConfig, ApiKeyConfigSchema, type ApiKeyCredentials, type ApiKeyOperations, type ApiKeySortDirection, type ApiKeySortField, type AuthResult, type AuthStrategy, type AuthStrategyType, AuthStrategyTypeSchema, type AuthnOperations, type AuthzOperations, type ConsumeTicketOptions, type ConsumedTicket, type CreateApiKeyOptions, type CreateApiKeyResult, type CreateSessionOptions, type Credentials, HaiIamError, type IamConfig, type IamConfigInput, IamConfigSchema, type IamConfigSettingsInput, type IamFunctions, type IssueTicketOptions, type IssuedTicket, type LdapClientFactory, type LdapConfig, LdapConfigSchema, type LdapCredentials, type ListApiKeysOptions, type ListUsersOptions, type LoginConfig, LoginConfigSchema, type OtpConfig, OtpConfigSchema, type OtpCredentials, type PasswordConfig, PasswordConfigSchema, type PasswordCredentials, type PasswordResetConfig, PasswordResetConfigSchema, type Permission, type PermissionQueryOptions, type PermissionType, type RbacConfig, RbacConfigSchema, type RegisterConfig, RegisterConfigSchema, type RegisterOptions, type RegisterResult, type Role, type SecurityConfig, SecurityConfigSchema, type Session, type SessionConfig, SessionConfigSchema, type SessionData, type SessionFieldUpdates, type SessionOperations, type StoredUser, type TicketGrant, type TicketOperations, type TokenPair, type UpdateCurrentUserInput, type User, type UserOperations, type UserSortDirection, type UserSortField, iam };

package/dist/index.js

@@ -589,6 +589,12 @@ var HaiIamError = core.error.buildHaiErrorsDef("iam", IamErrorInfo);
 
 // src/authn/apikey/iam-authn-apikey-repository.ts
 var TABLE_NAME = "hai_iam_api_keys";
+var API_KEY_SORT_COLUMNS = {
+  name: "name",
+  createdAt: "created_at",
+  lastUsedAt: "last_used_at",
+  expiresAt: "expires_at"
+};
 var API_KEY_FIELDS = [
   {
     fieldName: "id",
@@ -718,12 +724,31 @@ var DbApiKeyRepository = class extends BaseReldbCrudRepository {
     }
     return ok(result.data);
   }
-  async findByUserId(userId, tx) {
-    const result = await this.findAll({ where: "user_id = ?", params: [userId] }, tx);
+  async findPageByUserId(userId, options, tx) {
+    const conditions = ["user_id = ?"];
+    const params = [userId];
+    if (options.search) {
+      const escaped = options.search.replace(/[%_\\]/g, "\\$&");
+      const keyword = `%${escaped}%`;
+      conditions.push("(name LIKE ? ESCAPE '\\' OR key_prefix LIKE ? ESCAPE '\\')");
+      params.push(keyword, keyword);
+    }
+    if (options.enabled !== void 0) {
+      conditions.push("enabled = ?");
+      params.push(options.enabled ? 1 : 0);
+    }
+    const sortColumn = options.sortBy ? API_KEY_SORT_COLUMNS[options.sortBy] : API_KEY_SORT_COLUMNS.createdAt;
+    const sortDirection = options.sortBy && options.sortDirection === "asc" ? "ASC" : "DESC";
+    const result = await this.findPage({
+      where: conditions.join(" AND "),
+      params,
+      orderBy: `${sortColumn} ${sortDirection}`,
+      pagination: { page: options.page, pageSize: options.pageSize }
+    }, tx);
     if (!result.success) {
       return this.buildQueryError(result.error);
     }
-    return ok(result.data);
+    return result;
   }
   async countByUserId(userId, tx) {
     const result = await this.count({ where: "user_id = ?", params: [userId] }, tx);
@@ -1178,11 +1203,11 @@ function createApiKeyStrategy(config) {
         return err(HaiIamError.INTERNAL_ERROR, iamM("iam_apikeyCreateFailed", { params: { message: String(error) } }), error);
       }
     },
-    async listApiKeys(userId) {
-      const result = await apiKeyRepository.findByUserId(userId);
+    async listApiKeys(userId, options) {
+      const result = await apiKeyRepository.findPageByUserId(userId, options ?? {});
       if (!result.success)
         return result;
-      return ok(result.data.map(toApiKey));
+      return ok({ ...result.data, items: result.data.items.map(toApiKey) });
     },
     async getApiKey(keyId) {
       const result = await apiKeyRepository.findOneById(keyId);