@h-ai/iam 0.1.0-alpha5

package/dist/api/index.js

@@ -0,0 +1,3 @@
+export { AdminCreateUserInputSchema, AdminResetPasswordInputSchema, AdminUpdateUserInputSchema, AgreementDisplaySchema, ChangePasswordInputSchema, CreatePermissionInputSchema, CreateRoleInputSchema, CurrentUserOutputSchema, IdParamSchema, ListPermissionsInputSchema, ListPermissionsOutputSchema, ListRolesOutputSchema, ListUsersInputSchema, ListUsersOutputSchema, LoginInputSchema, LoginOutputSchema, LogoutInputSchema, OtpLoginInputSchema, PaginationQuerySchema, PermissionSchema, PermissionTypeSchema, RefreshTokenInputSchema, RefreshTokenOutputSchema, RegisterInputSchema, RegisterOutputSchema, RoleSchema, SendOtpInputSchema, SendOtpOutputSchema, TokenPairSchema, UpdateCurrentUserInputSchema, UpdateRoleInputSchema, UserSchema, iamEndpoints } from '../chunk-CBZ4LHKU.js';
+//# sourceMappingURL=index.js.map
+//# sourceMappingURL=index.js.map

package/dist/api/index.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":[],"names":[],"mappings":"","file":"index.js"}

package/dist/browser.d.ts

@@ -0,0 +1,2 @@
+export { AdminCreateUserInput, AdminCreateUserInputSchema, AdminResetPasswordInputSchema, AdminUpdateUserInput, AdminUpdateUserInputSchema, AgreementDisplaySchema, ChangePasswordInput, ChangePasswordInputSchema, CreatePermissionInput, CreatePermissionInputSchema, CreateRoleInput, CreateRoleInputSchema, CurrentUserOutputSchema, IdParamSchema, ListPermissionsInput, ListPermissionsInputSchema, ListPermissionsOutputSchema, ListRolesOutputSchema, ListUsersInput, ListUsersInputSchema, ListUsersOutputSchema, LoginInput, LoginInputSchema, LoginOutput, LoginOutputSchema, LogoutInputSchema, OtpLoginInput, OtpLoginInputSchema, PaginationQuerySchema, PermissionSchema, PermissionTypeSchema, RefreshTokenInput, RefreshTokenInputSchema, RefreshTokenOutput, RefreshTokenOutputSchema, RegisterInput, RegisterInputSchema, RegisterOutput, RegisterOutputSchema, RoleSchema, SendOtpInput, SendOtpInputSchema, SendOtpOutput, SendOtpOutputSchema, TokenPairSchema, UpdateCurrentUserInput, UpdateCurrentUserInputSchema, UpdateRoleInput, UpdateRoleInputSchema, UserSchema, iamEndpoints } from './api/index.js';
+import 'zod';

package/dist/browser.js

@@ -0,0 +1,3 @@
+export { AdminCreateUserInputSchema, AdminResetPasswordInputSchema, AdminUpdateUserInputSchema, AgreementDisplaySchema, ChangePasswordInputSchema, CreatePermissionInputSchema, CreateRoleInputSchema, CurrentUserOutputSchema, IdParamSchema, ListPermissionsInputSchema, ListPermissionsOutputSchema, ListRolesOutputSchema, ListUsersInputSchema, ListUsersOutputSchema, LoginInputSchema, LoginOutputSchema, LogoutInputSchema, OtpLoginInputSchema, PaginationQuerySchema, PermissionSchema, PermissionTypeSchema, RefreshTokenInputSchema, RefreshTokenOutputSchema, RegisterInputSchema, RegisterOutputSchema, RoleSchema, SendOtpInputSchema, SendOtpOutputSchema, TokenPairSchema, UpdateCurrentUserInputSchema, UpdateRoleInputSchema, UserSchema, iamEndpoints } from './chunk-CBZ4LHKU.js';
+//# sourceMappingURL=browser.js.map
+//# sourceMappingURL=browser.js.map

package/dist/browser.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":[],"names":[],"mappings":"","file":"browser.js"}

package/dist/chunk-CBZ4LHKU.js

@@ -0,0 +1,374 @@
+import { z } from 'zod';
+
+// src/api/iam-api-contract.ts
+var UserSchema = z.object({
+  id: z.string(),
+  username: z.string(),
+  email: z.string().optional(),
+  phone: z.string().optional(),
+  displayName: z.string().optional(),
+  avatarUrl: z.string().optional(),
+  enabled: z.boolean(),
+  emailVerified: z.boolean().optional(),
+  phoneVerified: z.boolean().optional(),
+  createdAt: z.coerce.date(),
+  updatedAt: z.coerce.date(),
+  metadata: z.record(z.string(), z.unknown()).optional()
+});
+var TokenPairSchema = z.object({
+  accessToken: z.string(),
+  refreshToken: z.string(),
+  expiresIn: z.number(),
+  tokenType: z.literal("Bearer")
+});
+var AgreementDisplaySchema = z.object({
+  userAgreementUrl: z.string().optional(),
+  privacyPolicyUrl: z.string().optional(),
+  showOnRegister: z.boolean(),
+  showOnLogin: z.boolean()
+});
+var LoginInputSchema = z.object({
+  identifier: z.string().min(1),
+  password: z.string().min(1),
+  rememberMe: z.boolean().optional()
+});
+var LoginOutputSchema = z.object({
+  user: UserSchema,
+  tokens: TokenPairSchema,
+  agreements: AgreementDisplaySchema.optional()
+});
+var OtpLoginInputSchema = z.object({
+  identifier: z.string().min(1),
+  code: z.string().min(1)
+});
+var LogoutInputSchema = z.object({
+  accessToken: z.string().min(1)
+});
+var SendOtpInputSchema = z.object({
+  identifier: z.string().min(1)
+});
+var SendOtpOutputSchema = z.object({
+  expiresAt: z.coerce.date()
+});
+var RefreshTokenInputSchema = z.object({
+  refreshToken: z.string().min(1)
+});
+var RefreshTokenOutputSchema = z.object({
+  tokens: TokenPairSchema
+});
+var RegisterInputSchema = z.object({
+  username: z.string().min(1),
+  password: z.string().min(6),
+  email: z.string().email().optional(),
+  phone: z.string().optional(),
+  displayName: z.string().optional()
+});
+var RegisterOutputSchema = z.object({
+  user: UserSchema,
+  tokens: TokenPairSchema
+});
+var ChangePasswordInputSchema = z.object({
+  oldPassword: z.string().min(1),
+  newPassword: z.string().min(6)
+});
+var CurrentUserOutputSchema = UserSchema;
+var UpdateCurrentUserInputSchema = z.object({
+  displayName: z.string().optional(),
+  avatarUrl: z.string().optional(),
+  email: z.string().email().optional(),
+  phone: z.string().optional()
+});
+var PaginationQuerySchema = z.object({
+  page: z.coerce.number().int().min(1).optional(),
+  pageSize: z.coerce.number().int().min(1).max(100).optional()
+});
+function paginatedSchema(itemSchema) {
+  return z.object({
+    items: z.array(itemSchema),
+    total: z.number(),
+    page: z.number(),
+    pageSize: z.number()
+  });
+}
+var ListUsersInputSchema = PaginationQuerySchema.extend({
+  search: z.string().optional(),
+  enabled: z.coerce.boolean().optional()
+});
+var ListUsersOutputSchema = paginatedSchema(UserSchema);
+var AdminCreateUserInputSchema = z.object({
+  username: z.string().min(1),
+  email: z.string().email().optional(),
+  password: z.string().min(6),
+  displayName: z.string().optional(),
+  roles: z.array(z.string()).optional(),
+  enabled: z.boolean().optional()
+});
+var AdminUpdateUserInputSchema = z.object({
+  username: z.string().min(1).optional(),
+  email: z.string().email().optional(),
+  displayName: z.string().optional(),
+  enabled: z.boolean().optional(),
+  password: z.string().min(6).optional(),
+  roles: z.array(z.string()).optional()
+});
+var IdParamSchema = z.object({
+  id: z.string().min(1)
+});
+var AdminResetPasswordInputSchema = z.object({
+  newPassword: z.string().min(6)
+});
+var RoleSchema = z.object({
+  id: z.string(),
+  code: z.string(),
+  name: z.string(),
+  description: z.string().optional(),
+  isSystem: z.boolean().optional(),
+  createdAt: z.coerce.date(),
+  updatedAt: z.coerce.date()
+});
+var ListRolesOutputSchema = paginatedSchema(RoleSchema);
+var CreateRoleInputSchema = z.object({
+  name: z.string().min(1),
+  description: z.string().optional(),
+  permissions: z.array(z.string()).optional()
+});
+var UpdateRoleInputSchema = z.object({
+  name: z.string().min(1).optional(),
+  description: z.string().optional(),
+  permissions: z.array(z.string()).optional()
+});
+var PermissionTypeSchema = z.enum(["menu", "api", "button"]);
+var PermissionSchema = z.object({
+  id: z.string(),
+  code: z.string(),
+  name: z.string(),
+  description: z.string().optional(),
+  type: PermissionTypeSchema.optional(),
+  resource: z.string().optional(),
+  action: z.string().optional(),
+  createdAt: z.coerce.date(),
+  updatedAt: z.coerce.date()
+});
+var ListPermissionsInputSchema = PaginationQuerySchema.extend({
+  search: z.string().optional(),
+  type: PermissionTypeSchema.optional()
+});
+var ListPermissionsOutputSchema = paginatedSchema(PermissionSchema);
+var CreatePermissionInputSchema = z.object({
+  name: z.string().min(1),
+  description: z.string().optional(),
+  resource: z.string().min(1),
+  action: z.string().min(1),
+  type: PermissionTypeSchema.optional()
+});
+
+// src/api/iam-api-contract.ts
+function defineEndpoint(def) {
+  return def;
+}
+var iamEndpoints = {
+  /** 密码登录 */
+  login: defineEndpoint({
+    method: "POST",
+    path: "/auth/login",
+    input: LoginInputSchema,
+    output: LoginOutputSchema,
+    requireAuth: false,
+    meta: { summary: "Password login", tags: ["auth"] }
+  }),
+  /** OTP 验证码登录 */
+  loginWithOtp: defineEndpoint({
+    method: "POST",
+    path: "/auth/login/otp",
+    input: OtpLoginInputSchema,
+    output: LoginOutputSchema,
+    requireAuth: false,
+    meta: { summary: "OTP login", tags: ["auth"] }
+  }),
+  /** 登出 */
+  logout: defineEndpoint({
+    method: "POST",
+    path: "/auth/logout",
+    input: LogoutInputSchema,
+    output: z.void(),
+    meta: { summary: "Logout", tags: ["auth"] }
+  }),
+  /** 获取当前用户 */
+  currentUser: defineEndpoint({
+    method: "GET",
+    path: "/auth/me",
+    input: z.object({}),
+    output: CurrentUserOutputSchema,
+    meta: { summary: "Get current user info", tags: ["auth"] }
+  }),
+  /** 刷新 Token */
+  refreshToken: defineEndpoint({
+    method: "POST",
+    path: "/auth/refresh",
+    input: RefreshTokenInputSchema,
+    output: RefreshTokenOutputSchema,
+    requireAuth: false,
+    meta: { summary: "Refresh access token", tags: ["auth"] }
+  }),
+  /** 发送验证码 */
+  sendOtp: defineEndpoint({
+    method: "POST",
+    path: "/auth/otp/send",
+    input: SendOtpInputSchema,
+    output: SendOtpOutputSchema,
+    requireAuth: false,
+    meta: { summary: "Send OTP code", tags: ["auth"] }
+  }),
+  /** 用户注册 */
+  register: defineEndpoint({
+    method: "POST",
+    path: "/auth/register",
+    input: RegisterInputSchema,
+    output: RegisterOutputSchema,
+    requireAuth: false,
+    meta: { summary: "User registration", tags: ["auth"] }
+  }),
+  /** 修改密码 */
+  changePassword: defineEndpoint({
+    method: "POST",
+    path: "/auth/change-password",
+    input: ChangePasswordInputSchema,
+    output: z.void(),
+    meta: { summary: "Change password", tags: ["auth"] }
+  }),
+  /** 更新当前用户信息 */
+  updateCurrentUser: defineEndpoint({
+    method: "PUT",
+    path: "/auth/me",
+    input: UpdateCurrentUserInputSchema,
+    output: UserSchema,
+    meta: { summary: "Update current user profile", tags: ["auth"] }
+  }),
+  // ─── Admin — 用户管理 ───
+  /** 用户列表（分页 + 搜索 + 状态过滤） */
+  listUsers: defineEndpoint({
+    method: "GET",
+    path: "/iam/users",
+    input: ListUsersInputSchema,
+    output: ListUsersOutputSchema,
+    meta: { summary: "List users (admin)", tags: ["admin", "user"] }
+  }),
+  /** 获取单个用户 */
+  getUser: defineEndpoint({
+    method: "GET",
+    path: "/iam/users/:id",
+    input: IdParamSchema,
+    output: UserSchema,
+    meta: { summary: "Get user by ID (admin)", tags: ["admin", "user"] }
+  }),
+  /** 创建用户 */
+  createUser: defineEndpoint({
+    method: "POST",
+    path: "/iam/users",
+    input: AdminCreateUserInputSchema,
+    output: UserSchema,
+    meta: { summary: "Create user (admin)", tags: ["admin", "user"] }
+  }),
+  /** 更新用户 */
+  updateUser: defineEndpoint({
+    method: "PUT",
+    path: "/iam/users/:id",
+    input: AdminUpdateUserInputSchema,
+    output: UserSchema,
+    meta: { summary: "Update user (admin)", tags: ["admin", "user"] }
+  }),
+  /** 删除用户 */
+  deleteUser: defineEndpoint({
+    method: "DELETE",
+    path: "/iam/users/:id",
+    input: IdParamSchema,
+    output: z.void(),
+    meta: { summary: "Delete user (admin)", tags: ["admin", "user"] }
+  }),
+  /** Admin 重置用户密码 */
+  adminResetPassword: defineEndpoint({
+    method: "POST",
+    path: "/iam/users/:id/reset-password",
+    input: AdminResetPasswordInputSchema,
+    output: z.void(),
+    meta: { summary: "Reset user password (admin)", tags: ["admin", "user"] }
+  }),
+  // ─── Admin — 角色管理 ───
+  /** 角色列表 */
+  listRoles: defineEndpoint({
+    method: "GET",
+    path: "/iam/roles",
+    input: PaginationQuerySchema,
+    output: ListRolesOutputSchema,
+    meta: { summary: "List roles (admin)", tags: ["admin", "role"] }
+  }),
+  /** 获取单个角色 */
+  getRole: defineEndpoint({
+    method: "GET",
+    path: "/iam/roles/:id",
+    input: IdParamSchema,
+    output: RoleSchema,
+    meta: { summary: "Get role by ID (admin)", tags: ["admin", "role"] }
+  }),
+  /** 创建角色 */
+  createRole: defineEndpoint({
+    method: "POST",
+    path: "/iam/roles",
+    input: CreateRoleInputSchema,
+    output: RoleSchema,
+    meta: { summary: "Create role (admin)", tags: ["admin", "role"] }
+  }),
+  /** 更新角色 */
+  updateRole: defineEndpoint({
+    method: "PUT",
+    path: "/iam/roles/:id",
+    input: UpdateRoleInputSchema,
+    output: RoleSchema,
+    meta: { summary: "Update role (admin)", tags: ["admin", "role"] }
+  }),
+  /** 删除角色 */
+  deleteRole: defineEndpoint({
+    method: "DELETE",
+    path: "/iam/roles/:id",
+    input: IdParamSchema,
+    output: z.void(),
+    meta: { summary: "Delete role (admin)", tags: ["admin", "role"] }
+  }),
+  // ─── Admin — 权限管理 ───
+  /** 权限列表（分页 + 搜索 + 类型过滤） */
+  listPermissions: defineEndpoint({
+    method: "GET",
+    path: "/iam/permissions",
+    input: ListPermissionsInputSchema,
+    output: ListPermissionsOutputSchema,
+    meta: { summary: "List permissions (admin)", tags: ["admin", "permission"] }
+  }),
+  /** 获取单个权限 */
+  getPermission: defineEndpoint({
+    method: "GET",
+    path: "/iam/permissions/:id",
+    input: IdParamSchema,
+    output: PermissionSchema,
+    meta: { summary: "Get permission by ID (admin)", tags: ["admin", "permission"] }
+  }),
+  /** 创建权限 */
+  createPermission: defineEndpoint({
+    method: "POST",
+    path: "/iam/permissions",
+    input: CreatePermissionInputSchema,
+    output: PermissionSchema,
+    meta: { summary: "Create permission (admin)", tags: ["admin", "permission"] }
+  }),
+  /** 删除权限 */
+  deletePermission: defineEndpoint({
+    method: "DELETE",
+    path: "/iam/permissions/:id",
+    input: IdParamSchema,
+    output: z.void(),
+    meta: { summary: "Delete permission (admin)", tags: ["admin", "permission"] }
+  })
+};
+
+export { AdminCreateUserInputSchema, AdminResetPasswordInputSchema, AdminUpdateUserInputSchema, AgreementDisplaySchema, ChangePasswordInputSchema, CreatePermissionInputSchema, CreateRoleInputSchema, CurrentUserOutputSchema, IdParamSchema, ListPermissionsInputSchema, ListPermissionsOutputSchema, ListRolesOutputSchema, ListUsersInputSchema, ListUsersOutputSchema, LoginInputSchema, LoginOutputSchema, LogoutInputSchema, OtpLoginInputSchema, PaginationQuerySchema, PermissionSchema, PermissionTypeSchema, RefreshTokenInputSchema, RefreshTokenOutputSchema, RegisterInputSchema, RegisterOutputSchema, RoleSchema, SendOtpInputSchema, SendOtpOutputSchema, TokenPairSchema, UpdateCurrentUserInputSchema, UpdateRoleInputSchema, UserSchema, iamEndpoints };
+//# sourceMappingURL=chunk-CBZ4LHKU.js.map
+//# sourceMappingURL=chunk-CBZ4LHKU.js.map

package/dist/chunk-CBZ4LHKU.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/api/iam-api-schemas.ts","../src/api/iam-api-contract.ts"],"names":["z"],"mappings":";;;AAYO,IAAM,UAAA,GAAa,EAAE,MAAA,CAAO;AAAA,EACjC,EAAA,EAAI,EAAE,MAAA,EAAO;AAAA,EACb,QAAA,EAAU,EAAE,MAAA,EAAO;AAAA,EACnB,KAAA,EAAO,CAAA,CAAE,MAAA,EAAO,CAAE,QAAA,EAAS;AAAA,EAC3B,KAAA,EAAO,CAAA,CAAE,MAAA,EAAO,CAAE,QAAA,EAAS;AAAA,EAC3B,WAAA,EAAa,CAAA,CAAE,MAAA,EAAO,CAAE,QAAA,EAAS;AAAA,EACjC,SAAA,EAAW,CAAA,CAAE,MAAA,EAAO,CAAE,QAAA,EAAS;AAAA,EAC/B,OAAA,EAAS,EAAE,OAAA,EAAQ;AAAA,EACnB,aAAA,EAAe,CAAA,CAAE,OAAA,EAAQ,CAAE,QAAA,EAAS;AAAA,EACpC,aAAA,EAAe,CAAA,CAAE,OAAA,EAAQ,CAAE,QAAA,EAAS;AAAA,EACpC,SAAA,EAAW,CAAA,CAAE,MAAA,CAAO,IAAA,EAAK;AAAA,EACzB,SAAA,EAAW,CAAA,CAAE,MAAA,CAAO,IAAA,EAAK;AAAA,EACzB,QAAA,EAAU,CAAA,CAAE,MAAA,CAAO,CAAA,CAAE,MAAA,IAAU,CAAA,CAAE,OAAA,EAAS,CAAA,CAAE,QAAA;AAC9C,CAAC;AAGM,IAAM,eAAA,GAAkB,EAAE,MAAA,CAAO;AAAA,EACtC,WAAA,EAAa,EAAE,MAAA,EAAO;AAAA,EACtB,YAAA,EAAc,EAAE,MAAA,EAAO;AAAA,EACvB,SAAA,EAAW,EAAE,MAAA,EAAO;AAAA,EACpB,SAAA,EAAW,CAAA,CAAE,OAAA,CAAQ,QAAQ;AAC/B,CAAC;AAGM,IAAM,sBAAA,GAAyB,EAAE,MAAA,CAAO;AAAA,EAC7C,gBAAA,EAAkB,CAAA,CAAE,MAAA,EAAO,CAAE,QAAA,EAAS;AAAA,EACtC,gBAAA,EAAkB,CAAA,CAAE,MAAA,EAAO,CAAE,QAAA,EAAS;AAAA,EACtC,cAAA,EAAgB,EAAE,OAAA,EAAQ;AAAA,EAC1B,WAAA,EAAa,EAAE,OAAA;AACjB,CAAC;AAKM,IAAM,gBAAA,GAAmB,EAAE,MAAA,CAAO;AAAA,EACvC,UAAA,EAAY,CAAA,CAAE,MAAA,EAAO,CAAE,IAAI,CAAC,CAAA;AAAA,EAC5B,QAAA,EAAU,CAAA,CAAE,MAAA,EAAO,CAAE,IAAI,CAAC,CAAA;AAAA,EAC1B,UAAA,EAAY,CAAA,CAAE,OAAA,EAAQ,CAAE,QAAA;AAC1B,CAAC;AAGM,IAAM,iBAAA,GAAoB,EAAE,MAAA,CAAO;AAAA,EACxC,IAAA,EAAM,UAAA;AAAA,EACN,MAAA,EAAQ,eAAA;AAAA,EACR,UAAA,EAAY,uBAAuB,QAAA;AACrC,CAAC;AAGM,IAAM,mBAAA,GAAsB,EAAE,MAAA,CAAO;AAAA,EAC1C,UAAA,EAAY,CAAA,CAAE,MAAA,EAAO,CAAE,IAAI,CAAC,CAAA;AAAA,EAC5B,IAAA,EAAM,CAAA,CAAE,MAAA,EAAO,CAAE,IAAI,CAAC;AACxB,CAAC;AAGM,IAAM,iBAAA,GAAoB,EAAE,MAAA,CAAO;AAAA,EACxC,WAAA,EAAa,CAAA,CAAE,MAAA,EAAO,CAAE,IAAI,CAAC;AAC/B,CAAC;AAGM,IAAM,kBAAA,GAAqB,EAAE,MAAA,CAAO;AAAA,EACzC,UAAA,EAAY,CAAA,CAAE,MAAA,EAAO,CAAE,IAAI,CAAC;AAC9B,CAAC;AAGM,IAAM,mBAAA,GAAsB,EAAE,MAAA,CAAO;AAAA,EAC1C,SAAA,EAAW,CAAA,CAAE,MAAA,CAAO,IAAA;AACtB,CAAC;AAGM,IAAM,uBAAA,GAA0B,EAAE,MAAA,CAAO;AAAA,EAC9C,YAAA,EAAc,CAAA,CAAE,MAAA,EAAO,CAAE,IAAI,CAAC;AAChC,CAAC;AAGM,IAAM,wBAAA,GAA2B,EAAE,MAAA,CAAO;AAAA,EAC/C,MAAA,EAAQ;AACV,CAAC;AAKM,IAAM,mBAAA,GAAsB,EAAE,MAAA,CAAO;AAAA,EAC1C,QAAA,EAAU,CAAA,CAAE,MAAA,EAAO,CAAE,IAAI,CAAC,CAAA;AAAA,EAC1B,QAAA,EAAU,CAAA,CAAE,MAAA,EAAO,CAAE,IAAI,CAAC,CAAA;AAAA,EAC1B,OAAO,CAAA,CAAE,MAAA,EAAO,CAAE,KAAA,GAAQ,QAAA,EAAS;AAAA,EACnC,KAAA,EAAO,CAAA,CAAE,MAAA,EAAO,CAAE,QAAA,EAAS;AAAA,EAC3B,WAAA,EAAa,CAAA,CAAE,MAAA,EAAO,CAAE,QAAA;AAC1B,CAAC;AAGM,IAAM,oBAAA,GAAuB,EAAE,MAAA,CAAO;AAAA,EAC3C,IAAA,EAAM,UAAA;AAAA,EACN,MAAA,EAAQ;AACV,CAAC;AAGM,IAAM,yBAAA,GAA4B,EAAE,MAAA,CAAO;AAAA,EAChD,WAAA,EAAa,CAAA,CAAE,MAAA,EAAO,CAAE,IAAI,CAAC,CAAA;AAAA,EAC7B,WAAA,EAAa,CAAA,CAAE,MAAA,EAAO,CAAE,IAAI,CAAC;AAC/B,CAAC;AAGM,IAAM,uBAAA,GAA0B;AAGhC,IAAM,4BAAA,GAA+B,EAAE,MAAA,CAAO;AAAA,EACnD,WAAA,EAAa,CAAA,CAAE,MAAA,EAAO,CAAE,QAAA,EAAS;AAAA,EACjC,SAAA,EAAW,CAAA,CAAE,MAAA,EAAO,CAAE,QAAA,EAAS;AAAA,EAC/B,OAAO,CAAA,CAAE,MAAA,EAAO,CAAE,KAAA,GAAQ,QAAA,EAAS;AAAA,EACnC,KAAA,EAAO,CAAA,CAAE,MAAA,EAAO,CAAE,QAAA;AACpB,CAAC;AAKM,IAAM,qBAAA,GAAwB,EAAE,MAAA,CAAO;AAAA,EAC5C,IAAA,EAAM,CAAA,CAAE,MAAA,CAAO,MAAA,EAAO,CAAE,KAAI,CAAE,GAAA,CAAI,CAAC,CAAA,CAAE,QAAA,EAAS;AAAA,EAC9C,QAAA,EAAU,CAAA,CAAE,MAAA,CAAO,MAAA,EAAO,CAAE,GAAA,EAAI,CAAE,GAAA,CAAI,CAAC,CAAA,CAAE,GAAA,CAAI,GAAG,EAAE,QAAA;AACpD,CAAC;AAGD,SAAS,gBAAwC,UAAA,EAAe;AAC9D,EAAA,OAAO,EAAE,MAAA,CAAO;AAAA,IACd,KAAA,EAAO,CAAA,CAAE,KAAA,CAAM,UAAU,CAAA;AAAA,IACzB,KAAA,EAAO,EAAE,MAAA,EAAO;AAAA,IAChB,IAAA,EAAM,EAAE,MAAA,EAAO;AAAA,IACf,QAAA,EAAU,EAAE,MAAA;AAAO,GACpB,CAAA;AACH;AAGO,IAAM,oBAAA,GAAuB,sBAAsB,MAAA,CAAO;AAAA,EAC/D,MAAA,EAAQ,CAAA,CAAE,MAAA,EAAO,CAAE,QAAA,EAAS;AAAA,EAC5B,OAAA,EAAS,CAAA,CAAE,MAAA,CAAO,OAAA,GAAU,QAAA;AAC9B,CAAC;AAGM,IAAM,qBAAA,GAAwB,gBAAgB,UAAU;AAGxD,IAAM,0BAAA,GAA6B,EAAE,MAAA,CAAO;AAAA,EACjD,QAAA,EAAU,CAAA,CAAE,MAAA,EAAO,CAAE,IAAI,CAAC,CAAA;AAAA,EAC1B,OAAO,CAAA,CAAE,MAAA,EAAO,CAAE,KAAA,GAAQ,QAAA,EAAS;AAAA,EACnC,QAAA,EAAU,CAAA,CAAE,MAAA,EAAO,CAAE,IAAI,CAAC,CAAA;AAAA,EAC1B,WAAA,EAAa,CAAA,CAAE,MAAA,EAAO,CAAE,QAAA,EAAS;AAAA,EACjC,OAAO,CAAA,CAAE,KAAA,CAAM,EAAE,MAAA,EAAQ,EAAE,QAAA,EAAS;AAAA,EACpC,OAAA,EAAS,CAAA,CAAE,OAAA,EAAQ,CAAE,QAAA;AACvB,CAAC;AAGM,IAAM,0BAAA,GAA6B,EAAE,MAAA,CAAO;AAAA,EACjD,UAAU,CAAA,CAAE,MAAA,GAAS,GAAA,CAAI,CAAC,EAAE,QAAA,EAAS;AAAA,EACrC,OAAO,CAAA,CAAE,MAAA,EAAO,CAAE,KAAA,GAAQ,QAAA,EAAS;AAAA,EACnC,WAAA,EAAa,CAAA,CAAE,MAAA,EAAO,CAAE,QAAA,EAAS;AAAA,EACjC,OAAA,EAAS,CAAA,CAAE,OAAA,EAAQ,CAAE,QAAA,EAAS;AAAA,EAC9B,UAAU,CAAA,CAAE,MAAA,GAAS,GAAA,CAAI,CAAC,EAAE,QAAA,EAAS;AAAA,EACrC,OAAO,CAAA,CAAE,KAAA,CAAM,EAAE,MAAA,EAAQ,EAAE,QAAA;AAC7B,CAAC;AAGM,IAAM,aAAA,GAAgB,EAAE,MAAA,CAAO;AAAA,EACpC,EAAA,EAAI,CAAA,CAAE,MAAA,EAAO,CAAE,IAAI,CAAC;AACtB,CAAC;AAGM,IAAM,6BAAA,GAAgC,EAAE,MAAA,CAAO;AAAA,EACpD,WAAA,EAAa,CAAA,CAAE,MAAA,EAAO,CAAE,IAAI,CAAC;AAC/B,CAAC;AAKM,IAAM,UAAA,GAAa,EAAE,MAAA,CAAO;AAAA,EACjC,EAAA,EAAI,EAAE,MAAA,EAAO;AAAA,EACb,IAAA,EAAM,EAAE,MAAA,EAAO;AAAA,EACf,IAAA,EAAM,EAAE,MAAA,EAAO;AAAA,EACf,WAAA,EAAa,CAAA,CAAE,MAAA,EAAO,CAAE,QAAA,EAAS;AAAA,EACjC,QAAA,EAAU,CAAA,CAAE,OAAA,EAAQ,CAAE,QAAA,EAAS;AAAA,EAC/B,SAAA,EAAW,CAAA,CAAE,MAAA,CAAO,IAAA,EAAK;AAAA,EACzB,SAAA,EAAW,CAAA,CAAE,MAAA,CAAO,IAAA;AACtB,CAAC;AAGM,IAAM,qBAAA,GAAwB,gBAAgB,UAAU;AAGxD,IAAM,qBAAA,GAAwB,EAAE,MAAA,CAAO;AAAA,EAC5C,IAAA,EAAM,CAAA,CAAE,MAAA,EAAO,CAAE,IAAI,CAAC,CAAA;AAAA,EACtB,WAAA,EAAa,CAAA,CAAE,MAAA,EAAO,CAAE,QAAA,EAAS;AAAA,EACjC,aAAa,CAAA,CAAE,KAAA,CAAM,EAAE,MAAA,EAAQ,EAAE,QAAA;AACnC,CAAC;AAGM,IAAM,qBAAA,GAAwB,EAAE,MAAA,CAAO;AAAA,EAC5C,MAAM,CAAA,CAAE,MAAA,GAAS,GAAA,CAAI,CAAC,EAAE,QAAA,EAAS;AAAA,EACjC,WAAA,EAAa,CAAA,CAAE,MAAA,EAAO,CAAE,QAAA,EAAS;AAAA,EACjC,aAAa,CAAA,CAAE,KAAA,CAAM,EAAE,MAAA,EAAQ,EAAE,QAAA;AACnC,CAAC;AAKM,IAAM,uBAAuB,CAAA,CAAE,IAAA,CAAK,CAAC,MAAA,EAAQ,KAAA,EAAO,QAAQ,CAAC;AAG7D,IAAM,gBAAA,GAAmB,EAAE,MAAA,CAAO;AAAA,EACvC,EAAA,EAAI,EAAE,MAAA,EAAO;AAAA,EACb,IAAA,EAAM,EAAE,MAAA,EAAO;AAAA,EACf,IAAA,EAAM,EAAE,MAAA,EAAO;AAAA,EACf,WAAA,EAAa,CAAA,CAAE,MAAA,EAAO,CAAE,QAAA,EAAS;AAAA,EACjC,IAAA,EAAM,qBAAqB,QAAA,EAAS;AAAA,EACpC,QAAA,EAAU,CAAA,CAAE,MAAA,EAAO,CAAE,QAAA,EAAS;AAAA,EAC9B,MAAA,EAAQ,CAAA,CAAE,MAAA,EAAO,CAAE,QAAA,EAAS;AAAA,EAC5B,SAAA,EAAW,CAAA,CAAE,MAAA,CAAO,IAAA,EAAK;AAAA,EACzB,SAAA,EAAW,CAAA,CAAE,MAAA,CAAO,IAAA;AACtB,CAAC;AAGM,IAAM,0BAAA,GAA6B,sBAAsB,MAAA,CAAO;AAAA,EACrE,MAAA,EAAQ,CAAA,CAAE,MAAA,EAAO,CAAE,QAAA,EAAS;AAAA,EAC5B,IAAA,EAAM,qBAAqB,QAAA;AAC7B,CAAC;AAGM,IAAM,2BAAA,GAA8B,gBAAgB,gBAAgB;AAGpE,IAAM,2BAAA,GAA8B,EAAE,MAAA,CAAO;AAAA,EAClD,IAAA,EAAM,CAAA,CAAE,MAAA,EAAO,CAAE,IAAI,CAAC,CAAA;AAAA,EACtB,WAAA,EAAa,CAAA,CAAE,MAAA,EAAO,CAAE,QAAA,EAAS;AAAA,EACjC,QAAA,EAAU,CAAA,CAAE,MAAA,EAAO,CAAE,IAAI,CAAC,CAAA;AAAA,EAC1B,MAAA,EAAQ,CAAA,CAAE,MAAA,EAAO,CAAE,IAAI,CAAC,CAAA;AAAA,EACxB,IAAA,EAAM,qBAAqB,QAAA;AAC7B,CAAC;;;ACjMD,SAAS,eAAgC,GAAA,EAAiE;AACxG,EAAA,OAAO,GAAA;AACT;AAiBO,IAAM,YAAA,GAAe;AAAA;AAAA,EAE1B,OAAO,cAAA,CAAe;AAAA,IACpB,MAAA,EAAQ,MAAA;AAAA,IACR,IAAA,EAAM,aAAA;AAAA,IACN,KAAA,EAAO,gBAAA;AAAA,IACP,MAAA,EAAQ,iBAAA;AAAA,IACR,WAAA,EAAa,KAAA;AAAA,IACb,MAAM,EAAE,OAAA,EAAS,kBAAkB,IAAA,EAAM,CAAC,MAAM,CAAA;AAAE,GACnD,CAAA;AAAA;AAAA,EAGD,cAAc,cAAA,CAAe;AAAA,IAC3B,MAAA,EAAQ,MAAA;AAAA,IACR,IAAA,EAAM,iBAAA;AAAA,IACN,KAAA,EAAO,mBAAA;AAAA,IACP,MAAA,EAAQ,iBAAA;AAAA,IACR,WAAA,EAAa,KAAA;AAAA,IACb,MAAM,EAAE,OAAA,EAAS,aAAa,IAAA,EAAM,CAAC,MAAM,CAAA;AAAE,GAC9C,CAAA;AAAA;AAAA,EAGD,QAAQ,cAAA,CAAe;AAAA,IACrB,MAAA,EAAQ,MAAA;AAAA,IACR,IAAA,EAAM,cAAA;AAAA,IACN,KAAA,EAAO,iBAAA;AAAA,IACP,MAAA,EAAQA,EAAE,IAAA,EAAK;AAAA,IACf,MAAM,EAAE,OAAA,EAAS,UAAU,IAAA,EAAM,CAAC,MAAM,CAAA;AAAE,GAC3C,CAAA;AAAA;AAAA,EAGD,aAAa,cAAA,CAAe;AAAA,IAC1B,MAAA,EAAQ,KAAA;AAAA,IACR,IAAA,EAAM,UAAA;AAAA,IACN,KAAA,EAAOA,CAAAA,CAAE,MAAA,CAAO,EAAE,CAAA;AAAA,IAClB,MAAA,EAAQ,uBAAA;AAAA,IACR,MAAM,EAAE,OAAA,EAAS,yBAAyB,IAAA,EAAM,CAAC,MAAM,CAAA;AAAE,GAC1D,CAAA;AAAA;AAAA,EAGD,cAAc,cAAA,CAAe;AAAA,IAC3B,MAAA,EAAQ,MAAA;AAAA,IACR,IAAA,EAAM,eAAA;AAAA,IACN,KAAA,EAAO,uBAAA;AAAA,IACP,MAAA,EAAQ,wBAAA;AAAA,IACR,WAAA,EAAa,KAAA;AAAA,IACb,MAAM,EAAE,OAAA,EAAS,wBAAwB,IAAA,EAAM,CAAC,MAAM,CAAA;AAAE,GACzD,CAAA;AAAA;AAAA,EAGD,SAAS,cAAA,CAAe;AAAA,IACtB,MAAA,EAAQ,MAAA;AAAA,IACR,IAAA,EAAM,gBAAA;AAAA,IACN,KAAA,EAAO,kBAAA;AAAA,IACP,MAAA,EAAQ,mBAAA;AAAA,IACR,WAAA,EAAa,KAAA;AAAA,IACb,MAAM,EAAE,OAAA,EAAS,iBAAiB,IAAA,EAAM,CAAC,MAAM,CAAA;AAAE,GAClD,CAAA;AAAA;AAAA,EAGD,UAAU,cAAA,CAAe;AAAA,IACvB,MAAA,EAAQ,MAAA;AAAA,IACR,IAAA,EAAM,gBAAA;AAAA,IACN,KAAA,EAAO,mBAAA;AAAA,IACP,MAAA,EAAQ,oBAAA;AAAA,IACR,WAAA,EAAa,KAAA;AAAA,IACb,MAAM,EAAE,OAAA,EAAS,qBAAqB,IAAA,EAAM,CAAC,MAAM,CAAA;AAAE,GACtD,CAAA;AAAA;AAAA,EAGD,gBAAgB,cAAA,CAAe;AAAA,IAC7B,MAAA,EAAQ,MAAA;AAAA,IACR,IAAA,EAAM,uBAAA;AAAA,IACN,KAAA,EAAO,yBAAA;AAAA,IACP,MAAA,EAAQA,EAAE,IAAA,EAAK;AAAA,IACf,MAAM,EAAE,OAAA,EAAS,mBAAmB,IAAA,EAAM,CAAC,MAAM,CAAA;AAAE,GACpD,CAAA;AAAA;AAAA,EAGD,mBAAmB,cAAA,CAAe;AAAA,IAChC,MAAA,EAAQ,KAAA;AAAA,IACR,IAAA,EAAM,UAAA;AAAA,IACN,KAAA,EAAO,4BAAA;AAAA,IACP,MAAA,EAAQ,UAAA;AAAA,IACR,MAAM,EAAE,OAAA,EAAS,+BAA+B,IAAA,EAAM,CAAC,MAAM,CAAA;AAAE,GAChE,CAAA;AAAA;AAAA;AAAA,EAKD,WAAW,cAAA,CAAe;AAAA,IACxB,MAAA,EAAQ,KAAA;AAAA,IACR,IAAA,EAAM,YAAA;AAAA,IACN,KAAA,EAAO,oBAAA;AAAA,IACP,MAAA,EAAQ,qBAAA;AAAA,IACR,IAAA,EAAM,EAAE,OAAA,EAAS,oBAAA,EAAsB,MAAM,CAAC,OAAA,EAAS,MAAM,CAAA;AAAE,GAChE,CAAA;AAAA;AAAA,EAGD,SAAS,cAAA,CAAe;AAAA,IACtB,MAAA,EAAQ,KAAA;AAAA,IACR,IAAA,EAAM,gBAAA;AAAA,IACN,KAAA,EAAO,aAAA;AAAA,IACP,MAAA,EAAQ,UAAA;AAAA,IACR,IAAA,EAAM,EAAE,OAAA,EAAS,wBAAA,EAA0B,MAAM,CAAC,OAAA,EAAS,MAAM,CAAA;AAAE,GACpE,CAAA;AAAA;AAAA,EAGD,YAAY,cAAA,CAAe;AAAA,IACzB,MAAA,EAAQ,MAAA;AAAA,IACR,IAAA,EAAM,YAAA;AAAA,IACN,KAAA,EAAO,0BAAA;AAAA,IACP,MAAA,EAAQ,UAAA;AAAA,IACR,IAAA,EAAM,EAAE,OAAA,EAAS,qBAAA,EAAuB,MAAM,CAAC,OAAA,EAAS,MAAM,CAAA;AAAE,GACjE,CAAA;AAAA;AAAA,EAGD,YAAY,cAAA,CAAe;AAAA,IACzB,MAAA,EAAQ,KAAA;AAAA,IACR,IAAA,EAAM,gBAAA;AAAA,IACN,KAAA,EAAO,0BAAA;AAAA,IACP,MAAA,EAAQ,UAAA;AAAA,IACR,IAAA,EAAM,EAAE,OAAA,EAAS,qBAAA,EAAuB,MAAM,CAAC,OAAA,EAAS,MAAM,CAAA;AAAE,GACjE,CAAA;AAAA;AAAA,EAGD,YAAY,cAAA,CAAe;AAAA,IACzB,MAAA,EAAQ,QAAA;AAAA,IACR,IAAA,EAAM,gBAAA;AAAA,IACN,KAAA,EAAO,aAAA;AAAA,IACP,MAAA,EAAQA,EAAE,IAAA,EAAK;AAAA,IACf,IAAA,EAAM,EAAE,OAAA,EAAS,qBAAA,EAAuB,MAAM,CAAC,OAAA,EAAS,MAAM,CAAA;AAAE,GACjE,CAAA;AAAA;AAAA,EAGD,oBAAoB,cAAA,CAAe;AAAA,IACjC,MAAA,EAAQ,MAAA;AAAA,IACR,IAAA,EAAM,+BAAA;AAAA,IACN,KAAA,EAAO,6BAAA;AAAA,IACP,MAAA,EAAQA,EAAE,IAAA,EAAK;AAAA,IACf,IAAA,EAAM,EAAE,OAAA,EAAS,6BAAA,EAA+B,MAAM,CAAC,OAAA,EAAS,MAAM,CAAA;AAAE,GACzE,CAAA;AAAA;AAAA;AAAA,EAKD,WAAW,cAAA,CAAe;AAAA,IACxB,MAAA,EAAQ,KAAA;AAAA,IACR,IAAA,EAAM,YAAA;AAAA,IACN,KAAA,EAAO,qBAAA;AAAA,IACP,MAAA,EAAQ,qBAAA;AAAA,IACR,IAAA,EAAM,EAAE,OAAA,EAAS,oBAAA,EAAsB,MAAM,CAAC,OAAA,EAAS,MAAM,CAAA;AAAE,GAChE,CAAA;AAAA;AAAA,EAGD,SAAS,cAAA,CAAe;AAAA,IACtB,MAAA,EAAQ,KAAA;AAAA,IACR,IAAA,EAAM,gBAAA;AAAA,IACN,KAAA,EAAO,aAAA;AAAA,IACP,MAAA,EAAQ,UAAA;AAAA,IACR,IAAA,EAAM,EAAE,OAAA,EAAS,wBAAA,EAA0B,MAAM,CAAC,OAAA,EAAS,MAAM,CAAA;AAAE,GACpE,CAAA;AAAA;AAAA,EAGD,YAAY,cAAA,CAAe;AAAA,IACzB,MAAA,EAAQ,MAAA;AAAA,IACR,IAAA,EAAM,YAAA;AAAA,IACN,KAAA,EAAO,qBAAA;AAAA,IACP,MAAA,EAAQ,UAAA;AAAA,IACR,IAAA,EAAM,EAAE,OAAA,EAAS,qBAAA,EAAuB,MAAM,CAAC,OAAA,EAAS,MAAM,CAAA;AAAE,GACjE,CAAA;AAAA;AAAA,EAGD,YAAY,cAAA,CAAe;AAAA,IACzB,MAAA,EAAQ,KAAA;AAAA,IACR,IAAA,EAAM,gBAAA;AAAA,IACN,KAAA,EAAO,qBAAA;AAAA,IACP,MAAA,EAAQ,UAAA;AAAA,IACR,IAAA,EAAM,EAAE,OAAA,EAAS,qBAAA,EAAuB,MAAM,CAAC,OAAA,EAAS,MAAM,CAAA;AAAE,GACjE,CAAA;AAAA;AAAA,EAGD,YAAY,cAAA,CAAe;AAAA,IACzB,MAAA,EAAQ,QAAA;AAAA,IACR,IAAA,EAAM,gBAAA;AAAA,IACN,KAAA,EAAO,aAAA;AAAA,IACP,MAAA,EAAQA,EAAE,IAAA,EAAK;AAAA,IACf,IAAA,EAAM,EAAE,OAAA,EAAS,qBAAA,EAAuB,MAAM,CAAC,OAAA,EAAS,MAAM,CAAA;AAAE,GACjE,CAAA;AAAA;AAAA;AAAA,EAKD,iBAAiB,cAAA,CAAe;AAAA,IAC9B,MAAA,EAAQ,KAAA;AAAA,IACR,IAAA,EAAM,kBAAA;AAAA,IACN,KAAA,EAAO,0BAAA;AAAA,IACP,MAAA,EAAQ,2BAAA;AAAA,IACR,IAAA,EAAM,EAAE,OAAA,EAAS,0BAAA,EAA4B,MAAM,CAAC,OAAA,EAAS,YAAY,CAAA;AAAE,GAC5E,CAAA;AAAA;AAAA,EAGD,eAAe,cAAA,CAAe;AAAA,IAC5B,MAAA,EAAQ,KAAA;AAAA,IACR,IAAA,EAAM,sBAAA;AAAA,IACN,KAAA,EAAO,aAAA;AAAA,IACP,MAAA,EAAQ,gBAAA;AAAA,IACR,IAAA,EAAM,EAAE,OAAA,EAAS,8BAAA,EAAgC,MAAM,CAAC,OAAA,EAAS,YAAY,CAAA;AAAE,GAChF,CAAA;AAAA;AAAA,EAGD,kBAAkB,cAAA,CAAe;AAAA,IAC/B,MAAA,EAAQ,MAAA;AAAA,IACR,IAAA,EAAM,kBAAA;AAAA,IACN,KAAA,EAAO,2BAAA;AAAA,IACP,MAAA,EAAQ,gBAAA;AAAA,IACR,IAAA,EAAM,EAAE,OAAA,EAAS,2BAAA,EAA6B,MAAM,CAAC,OAAA,EAAS,YAAY,CAAA;AAAE,GAC7E,CAAA;AAAA;AAAA,EAGD,kBAAkB,cAAA,CAAe;AAAA,IAC/B,MAAA,EAAQ,QAAA;AAAA,IACR,IAAA,EAAM,sBAAA;AAAA,IACN,KAAA,EAAO,aAAA;AAAA,IACP,MAAA,EAAQA,EAAE,IAAA,EAAK;AAAA,IACf,IAAA,EAAM,EAAE,OAAA,EAAS,2BAAA,EAA6B,MAAM,CAAC,OAAA,EAAS,YAAY,CAAA;AAAE,GAC7E;AACH","file":"chunk-CBZ4LHKU.js","sourcesContent":["/**\n * @h-ai/iam — API 契约 Zod Schema\n *\n * 入参/出参 Schema，作为服务端校验和客户端类型推导的唯一真相源。\n * @module iam-api-schemas\n */\n\nimport { z } from 'zod'\n\n// ─── 通用 Schema ───\n\n/** 用户基础信息 */\nexport const UserSchema = z.object({\n  id: z.string(),\n  username: z.string(),\n  email: z.string().optional(),\n  phone: z.string().optional(),\n  displayName: z.string().optional(),\n  avatarUrl: z.string().optional(),\n  enabled: z.boolean(),\n  emailVerified: z.boolean().optional(),\n  phoneVerified: z.boolean().optional(),\n  createdAt: z.coerce.date(),\n  updatedAt: z.coerce.date(),\n  metadata: z.record(z.string(), z.unknown()).optional(),\n})\n\n/** Token 对 */\nexport const TokenPairSchema = z.object({\n  accessToken: z.string(),\n  refreshToken: z.string(),\n  expiresIn: z.number(),\n  tokenType: z.literal('Bearer'),\n})\n\n/** 协议展示 */\nexport const AgreementDisplaySchema = z.object({\n  userAgreementUrl: z.string().optional(),\n  privacyPolicyUrl: z.string().optional(),\n  showOnRegister: z.boolean(),\n  showOnLogin: z.boolean(),\n})\n\n// ─── 认证 Schema ───\n\n/** 密码登录入参 */\nexport const LoginInputSchema = z.object({\n  identifier: z.string().min(1),\n  password: z.string().min(1),\n  rememberMe: z.boolean().optional(),\n})\n\n/** 登录出参 */\nexport const LoginOutputSchema = z.object({\n  user: UserSchema,\n  tokens: TokenPairSchema,\n  agreements: AgreementDisplaySchema.optional(),\n})\n\n/** OTP 登录入参 */\nexport const OtpLoginInputSchema = z.object({\n  identifier: z.string().min(1),\n  code: z.string().min(1),\n})\n\n/** 登出入参 */\nexport const LogoutInputSchema = z.object({\n  accessToken: z.string().min(1),\n})\n\n/** 发送 OTP 入参 */\nexport const SendOtpInputSchema = z.object({\n  identifier: z.string().min(1),\n})\n\n/** 发送 OTP 出参 */\nexport const SendOtpOutputSchema = z.object({\n  expiresAt: z.coerce.date(),\n})\n\n/** Token 刷新入参 */\nexport const RefreshTokenInputSchema = z.object({\n  refreshToken: z.string().min(1),\n})\n\n/** Token 刷新出参 */\nexport const RefreshTokenOutputSchema = z.object({\n  tokens: TokenPairSchema,\n})\n\n// ─── 用户管理 Schema ───\n\n/** 注册入参 */\nexport const RegisterInputSchema = z.object({\n  username: z.string().min(1),\n  password: z.string().min(6),\n  email: z.string().email().optional(),\n  phone: z.string().optional(),\n  displayName: z.string().optional(),\n})\n\n/** 注册出参 */\nexport const RegisterOutputSchema = z.object({\n  user: UserSchema,\n  tokens: TokenPairSchema,\n})\n\n/** 修改密码入参 */\nexport const ChangePasswordInputSchema = z.object({\n  oldPassword: z.string().min(1),\n  newPassword: z.string().min(6),\n})\n\n/** 当前用户信息出参 */\nexport const CurrentUserOutputSchema = UserSchema\n\n/** 更新当前用户入参 */\nexport const UpdateCurrentUserInputSchema = z.object({\n  displayName: z.string().optional(),\n  avatarUrl: z.string().optional(),\n  email: z.string().email().optional(),\n  phone: z.string().optional(),\n})\n\n// ─── Admin — 用户管理 Schema ───\n\n/** 通用分页参数 */\nexport const PaginationQuerySchema = z.object({\n  page: z.coerce.number().int().min(1).optional(),\n  pageSize: z.coerce.number().int().min(1).max(100).optional(),\n})\n\n/** 分页结果包装 */\nfunction paginatedSchema<T extends z.ZodTypeAny>(itemSchema: T) {\n  return z.object({\n    items: z.array(itemSchema),\n    total: z.number(),\n    page: z.number(),\n    pageSize: z.number(),\n  })\n}\n\n/** 用户列表查询入参 */\nexport const ListUsersInputSchema = PaginationQuerySchema.extend({\n  search: z.string().optional(),\n  enabled: z.coerce.boolean().optional(),\n})\n\n/** 用户列表出参 */\nexport const ListUsersOutputSchema = paginatedSchema(UserSchema)\n\n/** Admin 创建用户入参 */\nexport const AdminCreateUserInputSchema = z.object({\n  username: z.string().min(1),\n  email: z.string().email().optional(),\n  password: z.string().min(6),\n  displayName: z.string().optional(),\n  roles: z.array(z.string()).optional(),\n  enabled: z.boolean().optional(),\n})\n\n/** Admin 更新用户入参 */\nexport const AdminUpdateUserInputSchema = z.object({\n  username: z.string().min(1).optional(),\n  email: z.string().email().optional(),\n  displayName: z.string().optional(),\n  enabled: z.boolean().optional(),\n  password: z.string().min(6).optional(),\n  roles: z.array(z.string()).optional(),\n})\n\n/** ID 路径参数 */\nexport const IdParamSchema = z.object({\n  id: z.string().min(1),\n})\n\n/** Admin 重置密码入参 */\nexport const AdminResetPasswordInputSchema = z.object({\n  newPassword: z.string().min(6),\n})\n\n// ─── Admin — 角色管理 Schema ───\n\n/** 角色基础信息 */\nexport const RoleSchema = z.object({\n  id: z.string(),\n  code: z.string(),\n  name: z.string(),\n  description: z.string().optional(),\n  isSystem: z.boolean().optional(),\n  createdAt: z.coerce.date(),\n  updatedAt: z.coerce.date(),\n})\n\n/** 角色列表出参 */\nexport const ListRolesOutputSchema = paginatedSchema(RoleSchema)\n\n/** 创建角色入参 */\nexport const CreateRoleInputSchema = z.object({\n  name: z.string().min(1),\n  description: z.string().optional(),\n  permissions: z.array(z.string()).optional(),\n})\n\n/** 更新角色入参 */\nexport const UpdateRoleInputSchema = z.object({\n  name: z.string().min(1).optional(),\n  description: z.string().optional(),\n  permissions: z.array(z.string()).optional(),\n})\n\n// ─── Admin — 权限管理 Schema ───\n\n/** 权限类型 */\nexport const PermissionTypeSchema = z.enum(['menu', 'api', 'button'])\n\n/** 权限基础信息 */\nexport const PermissionSchema = z.object({\n  id: z.string(),\n  code: z.string(),\n  name: z.string(),\n  description: z.string().optional(),\n  type: PermissionTypeSchema.optional(),\n  resource: z.string().optional(),\n  action: z.string().optional(),\n  createdAt: z.coerce.date(),\n  updatedAt: z.coerce.date(),\n})\n\n/** 权限列表查询入参 */\nexport const ListPermissionsInputSchema = PaginationQuerySchema.extend({\n  search: z.string().optional(),\n  type: PermissionTypeSchema.optional(),\n})\n\n/** 权限列表出参 */\nexport const ListPermissionsOutputSchema = paginatedSchema(PermissionSchema)\n\n/** 创建权限入参 */\nexport const CreatePermissionInputSchema = z.object({\n  name: z.string().min(1),\n  description: z.string().optional(),\n  resource: z.string().min(1),\n  action: z.string().min(1),\n  type: PermissionTypeSchema.optional(),\n})\n\n// ─── 推导类型 ───\n\nexport type LoginInput = z.infer<typeof LoginInputSchema>\nexport type LoginOutput = z.infer<typeof LoginOutputSchema>\nexport type OtpLoginInput = z.infer<typeof OtpLoginInputSchema>\nexport type RegisterInput = z.infer<typeof RegisterInputSchema>\nexport type RegisterOutput = z.infer<typeof RegisterOutputSchema>\nexport type ChangePasswordInput = z.infer<typeof ChangePasswordInputSchema>\nexport type RefreshTokenInput = z.infer<typeof RefreshTokenInputSchema>\nexport type RefreshTokenOutput = z.infer<typeof RefreshTokenOutputSchema>\nexport type UpdateCurrentUserInput = z.infer<typeof UpdateCurrentUserInputSchema>\nexport type SendOtpInput = z.infer<typeof SendOtpInputSchema>\nexport type SendOtpOutput = z.infer<typeof SendOtpOutputSchema>\nexport type ListUsersInput = z.infer<typeof ListUsersInputSchema>\nexport type AdminCreateUserInput = z.infer<typeof AdminCreateUserInputSchema>\nexport type AdminUpdateUserInput = z.infer<typeof AdminUpdateUserInputSchema>\nexport type CreateRoleInput = z.infer<typeof CreateRoleInputSchema>\nexport type UpdateRoleInput = z.infer<typeof UpdateRoleInputSchema>\nexport type ListPermissionsInput = z.infer<typeof ListPermissionsInputSchema>\nexport type CreatePermissionInput = z.infer<typeof CreatePermissionInputSchema>\n","/**\n * @h-ai/iam — API 端点契约定义\n *\n * 所有 iam 模块的 API 端点（path + method + schema），\n * 客户端和服务端都从此处引用，编译时保证一致性。\n * @module iam-api-contract\n */\n\nimport { z } from 'zod'\nimport {\n  AdminCreateUserInputSchema,\n  AdminResetPasswordInputSchema,\n  AdminUpdateUserInputSchema,\n  ChangePasswordInputSchema,\n  CreatePermissionInputSchema,\n  CreateRoleInputSchema,\n  CurrentUserOutputSchema,\n  IdParamSchema,\n  ListPermissionsInputSchema,\n  ListPermissionsOutputSchema,\n  ListRolesOutputSchema,\n  ListUsersInputSchema,\n  ListUsersOutputSchema,\n  LoginInputSchema,\n  LoginOutputSchema,\n  LogoutInputSchema,\n  OtpLoginInputSchema,\n  PaginationQuerySchema,\n  PermissionSchema,\n  RefreshTokenInputSchema,\n  RefreshTokenOutputSchema,\n  RegisterInputSchema,\n  RegisterOutputSchema,\n  RoleSchema,\n  SendOtpInputSchema,\n  SendOtpOutputSchema,\n  UpdateCurrentUserInputSchema,\n  UpdateRoleInputSchema,\n  UserSchema,\n} from './iam-api-schemas.js'\n\n// ─── 端点定义辅助（内联，避免对 @h-ai/api-client 的循环依赖） ───\n\ninterface EndpointDef<TInput = unknown, TOutput = unknown> {\n  method: 'GET' | 'POST' | 'PUT' | 'DELETE' | 'PATCH'\n  path: string\n  input: z.ZodType<TInput>\n  output: z.ZodType<TOutput>\n  requireAuth?: boolean\n  meta?: { summary?: string, tags?: string[] }\n}\n\nfunction defineEndpoint<TInput, TOutput>(def: EndpointDef<TInput, TOutput>): EndpointDef<TInput, TOutput> {\n  return def\n}\n\n// ─── iam API 端点 ───\n\n/**\n * iam 所有 API 端点\n *\n * @example\n * ```ts\n * // 客户端\n * import { iamEndpoints } from '@h-ai/iam/api'\n * const result = await api.call(iamEndpoints.login, { identifier: 'alice', password: 'xxx' })\n *\n * // 服务端\n * export const POST = kit.fromContract(iamEndpoints.login, async (input, event) => { ... })\n * ```\n */\nexport const iamEndpoints = {\n  /** 密码登录 */\n  login: defineEndpoint({\n    method: 'POST',\n    path: '/auth/login',\n    input: LoginInputSchema,\n    output: LoginOutputSchema,\n    requireAuth: false,\n    meta: { summary: 'Password login', tags: ['auth'] },\n  }),\n\n  /** OTP 验证码登录 */\n  loginWithOtp: defineEndpoint({\n    method: 'POST',\n    path: '/auth/login/otp',\n    input: OtpLoginInputSchema,\n    output: LoginOutputSchema,\n    requireAuth: false,\n    meta: { summary: 'OTP login', tags: ['auth'] },\n  }),\n\n  /** 登出 */\n  logout: defineEndpoint({\n    method: 'POST',\n    path: '/auth/logout',\n    input: LogoutInputSchema,\n    output: z.void(),\n    meta: { summary: 'Logout', tags: ['auth'] },\n  }),\n\n  /** 获取当前用户 */\n  currentUser: defineEndpoint({\n    method: 'GET',\n    path: '/auth/me',\n    input: z.object({}),\n    output: CurrentUserOutputSchema,\n    meta: { summary: 'Get current user info', tags: ['auth'] },\n  }),\n\n  /** 刷新 Token */\n  refreshToken: defineEndpoint({\n    method: 'POST',\n    path: '/auth/refresh',\n    input: RefreshTokenInputSchema,\n    output: RefreshTokenOutputSchema,\n    requireAuth: false,\n    meta: { summary: 'Refresh access token', tags: ['auth'] },\n  }),\n\n  /** 发送验证码 */\n  sendOtp: defineEndpoint({\n    method: 'POST',\n    path: '/auth/otp/send',\n    input: SendOtpInputSchema,\n    output: SendOtpOutputSchema,\n    requireAuth: false,\n    meta: { summary: 'Send OTP code', tags: ['auth'] },\n  }),\n\n  /** 用户注册 */\n  register: defineEndpoint({\n    method: 'POST',\n    path: '/auth/register',\n    input: RegisterInputSchema,\n    output: RegisterOutputSchema,\n    requireAuth: false,\n    meta: { summary: 'User registration', tags: ['auth'] },\n  }),\n\n  /** 修改密码 */\n  changePassword: defineEndpoint({\n    method: 'POST',\n    path: '/auth/change-password',\n    input: ChangePasswordInputSchema,\n    output: z.void(),\n    meta: { summary: 'Change password', tags: ['auth'] },\n  }),\n\n  /** 更新当前用户信息 */\n  updateCurrentUser: defineEndpoint({\n    method: 'PUT',\n    path: '/auth/me',\n    input: UpdateCurrentUserInputSchema,\n    output: UserSchema,\n    meta: { summary: 'Update current user profile', tags: ['auth'] },\n  }),\n\n  // ─── Admin — 用户管理 ───\n\n  /** 用户列表（分页 + 搜索 + 状态过滤） */\n  listUsers: defineEndpoint({\n    method: 'GET',\n    path: '/iam/users',\n    input: ListUsersInputSchema,\n    output: ListUsersOutputSchema,\n    meta: { summary: 'List users (admin)', tags: ['admin', 'user'] },\n  }),\n\n  /** 获取单个用户 */\n  getUser: defineEndpoint({\n    method: 'GET',\n    path: '/iam/users/:id',\n    input: IdParamSchema,\n    output: UserSchema,\n    meta: { summary: 'Get user by ID (admin)', tags: ['admin', 'user'] },\n  }),\n\n  /** 创建用户 */\n  createUser: defineEndpoint({\n    method: 'POST',\n    path: '/iam/users',\n    input: AdminCreateUserInputSchema,\n    output: UserSchema,\n    meta: { summary: 'Create user (admin)', tags: ['admin', 'user'] },\n  }),\n\n  /** 更新用户 */\n  updateUser: defineEndpoint({\n    method: 'PUT',\n    path: '/iam/users/:id',\n    input: AdminUpdateUserInputSchema,\n    output: UserSchema,\n    meta: { summary: 'Update user (admin)', tags: ['admin', 'user'] },\n  }),\n\n  /** 删除用户 */\n  deleteUser: defineEndpoint({\n    method: 'DELETE',\n    path: '/iam/users/:id',\n    input: IdParamSchema,\n    output: z.void(),\n    meta: { summary: 'Delete user (admin)', tags: ['admin', 'user'] },\n  }),\n\n  /** Admin 重置用户密码 */\n  adminResetPassword: defineEndpoint({\n    method: 'POST',\n    path: '/iam/users/:id/reset-password',\n    input: AdminResetPasswordInputSchema,\n    output: z.void(),\n    meta: { summary: 'Reset user password (admin)', tags: ['admin', 'user'] },\n  }),\n\n  // ─── Admin — 角色管理 ───\n\n  /** 角色列表 */\n  listRoles: defineEndpoint({\n    method: 'GET',\n    path: '/iam/roles',\n    input: PaginationQuerySchema,\n    output: ListRolesOutputSchema,\n    meta: { summary: 'List roles (admin)', tags: ['admin', 'role'] },\n  }),\n\n  /** 获取单个角色 */\n  getRole: defineEndpoint({\n    method: 'GET',\n    path: '/iam/roles/:id',\n    input: IdParamSchema,\n    output: RoleSchema,\n    meta: { summary: 'Get role by ID (admin)', tags: ['admin', 'role'] },\n  }),\n\n  /** 创建角色 */\n  createRole: defineEndpoint({\n    method: 'POST',\n    path: '/iam/roles',\n    input: CreateRoleInputSchema,\n    output: RoleSchema,\n    meta: { summary: 'Create role (admin)', tags: ['admin', 'role'] },\n  }),\n\n  /** 更新角色 */\n  updateRole: defineEndpoint({\n    method: 'PUT',\n    path: '/iam/roles/:id',\n    input: UpdateRoleInputSchema,\n    output: RoleSchema,\n    meta: { summary: 'Update role (admin)', tags: ['admin', 'role'] },\n  }),\n\n  /** 删除角色 */\n  deleteRole: defineEndpoint({\n    method: 'DELETE',\n    path: '/iam/roles/:id',\n    input: IdParamSchema,\n    output: z.void(),\n    meta: { summary: 'Delete role (admin)', tags: ['admin', 'role'] },\n  }),\n\n  // ─── Admin — 权限管理 ───\n\n  /** 权限列表（分页 + 搜索 + 类型过滤） */\n  listPermissions: defineEndpoint({\n    method: 'GET',\n    path: '/iam/permissions',\n    input: ListPermissionsInputSchema,\n    output: ListPermissionsOutputSchema,\n    meta: { summary: 'List permissions (admin)', tags: ['admin', 'permission'] },\n  }),\n\n  /** 获取单个权限 */\n  getPermission: defineEndpoint({\n    method: 'GET',\n    path: '/iam/permissions/:id',\n    input: IdParamSchema,\n    output: PermissionSchema,\n    meta: { summary: 'Get permission by ID (admin)', tags: ['admin', 'permission'] },\n  }),\n\n  /** 创建权限 */\n  createPermission: defineEndpoint({\n    method: 'POST',\n    path: '/iam/permissions',\n    input: CreatePermissionInputSchema,\n    output: PermissionSchema,\n    meta: { summary: 'Create permission (admin)', tags: ['admin', 'permission'] },\n  }),\n\n  /** 删除权限 */\n  deletePermission: defineEndpoint({\n    method: 'DELETE',\n    path: '/iam/permissions/:id',\n    input: IdParamSchema,\n    output: z.void(),\n    meta: { summary: 'Delete permission (admin)', tags: ['admin', 'permission'] },\n  }),\n} as const\n"]}